f90bae6ac0d100dd4d9fe524aa412e41d3278a52283245c666432f159a2692ee

Analysis

max time kernel
119s
max time network
132s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
26-07-2024 12:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

740e4616ae472784ac77bc8c182a89b1_JaffaCakes118.html
Size

10KB
MD5

740e4616ae472784ac77bc8c182a89b1
SHA1

84ff258d85948412122de0a1983841d42ba0ad7c
SHA256

f90bae6ac0d100dd4d9fe524aa412e41d3278a52283245c666432f159a2692ee
SHA512

68ad2a67325a33acfdfd23de837c593f68cf043ed6c9a2946a367550928353101cb62defefc76f01857285f5f8152a1aea0a333c863f5677863c6e70289229dc
SSDEEP

96:uzVs+ux77ZLLY1k9o84d12ef7CSTUazfym/Hl5mX1mtTBR8BqYEBV1BBBoB1aZBl:csz77ZAYS/+gaFlYqDlWN9okYBb76f

Score

3^/10

discovery

Malware Config

Signatures

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	IEXPLORE.EXE

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{DA49B521-4B4C-11EF-84E7-C278C12D1CB0} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000d854e951ecdca4792ad3aea80f03551000000000200000000001066000000010000200000004c28d12567921332847a43f4982fede5bdba549a8c91f047e609060fe2d81118000000000e80000000020000200000006e107405b583da858d8276b1217440f3e44a52510226f3360ee0102fabb6974a90000000f9042aaad9003703b2dfbd73c1f600f445b9f5839a80151c4beddad074124454b41ca4aa998a219fc1863f556cbef1590880dd3786de96547c2d97994ca4c0f7df818906a064c09d7dcc718a9be960042ff0fa5464dfbd8d4506df87dbc170b28b44f0189fce67708d8339c17a830553ae66c490262e3c73be12859d1fc355d8068b05d82f2513792c018f2cc8aa88f440000000ea4d58a2963f7e01307bbd6f8c52fbb9adcf98b2c1950e139a5a547ac3fae98fcae2e3b2cbeabd94a5f5f98aa8c87192ac7e330f77f1af773defebddd063246d	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70ac08b159dfda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000d854e951ecdca4792ad3aea80f0355100000000020000000000106600000001000020000000300e2b2475a814c11013d2789c8ce8896c69d0661f7e186f34a693a596276c63000000000e8000000002000020000000df97b1d2c45622eef5a65648e735e8dedd10dfe10f4aa36edf2af11152d1693b200000000801acb55a38ba2fa188ab57330a429544d629ca53ce03b60155c660b4abfad9400000002014c00e72f4d56b3b6bae18d2e32566b823f4c55e1d11f42cf92bb62c171eb307f13d6cbbd4cab30bff8dc2876c63111ca8c76becece0c53440bcd677035e52	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "428159764"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
696	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
696	iexplore.exe
696	iexplore.exe
3060	IEXPLORE.EXE
3060	IEXPLORE.EXE
3060	IEXPLORE.EXE
3060	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 696 wrote to memory of 3060	696	iexplore.exe	31
PID 696 wrote to memory of 3060	696	iexplore.exe	31
PID 696 wrote to memory of 3060	696	iexplore.exe	31
PID 696 wrote to memory of 3060	696	iexplore.exe	31

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\740e4616ae472784ac77bc8c182a89b1_JaffaCakes118.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:696
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:696 CREDAT:275457 /prefetch:2
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:3060

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
64c7bdf7e726b24ca2848f6183447448

SHA1
dbf209e9247f20e10e71c4147ad63e188409c8d3

SHA256
b5e3e8da2e7ba2f4882fc1ba6715839a2cbe1edc5fa0bbee5ddb6efc73653aae

SHA512
7719015648f638d287668d6fb78fa64dd8a3647c168c7130a4e59a4a35fbe887586ac37665ef0eab10fa0bfa91fda4940429fc4fd64eef634ed5a53bcc57c618

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
3cda528708df3644097e005140e1c75d

SHA1
90332a9a6fdeab8454c44b0e3e09e011966fcfcd

SHA256
e8c300348b2c8ad5df11301658e161ce3805b8c546152a9f1fda3b1caf335589

SHA512
de9d1c691733f1b487b4f163805e43ba358c126beabd17b2a3b9d9876c49c56c33cdfa7a40bec2260594d986dec1442d5ee4c4db14bc8226b11cd37054a50131

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
01b1fa0623228ad9081e1f003964ef32

SHA1
29cd937c95f4ffb00dc9cde9a7771085480da1b6

SHA256
ea58533de491a89c90878758d4117c5b7790ac685196f884a0a6abd9ffb1c142

SHA512
3166cf468a449649938d005485b905467e23fc07991def24bf74308d7d47e3b59c2e7eb8235a265619930fb2574255ceae7bd8d6e0e369e31fae47e0e26b5bbd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1efa52e211018c586cd8fb38840b37db

SHA1
4859f8297331fcc51362a10270cd82fd4a652aae

SHA256
9a11e8f3d78a493fbd080aeb5b208e6f64fc32a5f73228d2e98b782372a8d2da

SHA512
f67f01abfdde235569e6e31d13e31e5d1e84f833f8fa451a2dfc4c19c05acc6694ec4521d9eca281217e7b9c80864df3d632fb58113557992f6a4f0d68728ec7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d44b292d2ee68311b270dde4d3ed6a5b

SHA1
456511d3d87b6a1221edf942f4c459d027162e1e

SHA256
d5e5afbc0a773a57e0cb1bc572a94d29cbe6f8e2b54b55d12f2e49be13af2cdb

SHA512
865db9888ce11d2c420101d5ed158bc9f8128ef9919de9427fca7868d6b4c4dacec699dd834f34b0a9d4967ab97a53d583287d963f9aa8dc4324805eb4207472

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
a7849355ba91ae5f0c9261ca98f8647e

SHA1
b7dfdc2dcb88b5717de14bec7f19c786a6d7b101

SHA256
a399862bd48958bce1153ba25f3db98fd7eee47b49c2efde5f5c3414127f9df4

SHA512
39c67ff293083986821859710674440a4056d0c6c231c4102aab609ed9050b7ddbf4534ec595a9b82421f45657d147c8c15e3eb76182fc49dbd004cfa2be32f0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
b2831140992d57725e8f26825352a45d

SHA1
54a9a2768755b5f798fd943b7b98b2121409ed93

SHA256
0365ea824a875db20529c147915e020bc354b8696016aa7b788af78349980626

SHA512
b4caba8c5b23adb13889edaf94a82a6f64a1b335f4e585efc7687fd5ffbba50f98c4d8e888d749d5116da6678e0c1ef44e9ca7daed26a0016f1a92a522ec4b79

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
cc02527b1a436429bcdb9474c8b14125

SHA1
58e635cc81f03c1cd213adfe1ac93ed3d79bc5fd

SHA256
b99fe977915479d741a751a1c80d220182db1d610e8f08f44fc00ad2b89e1fd3

SHA512
ce4b36814d95f1d7e0639e3cc594355b4394c4a810717b5f6983b7696cfa8d5af6fc877f06da4f13078c35ad84f63548dcc0f0f49445d83f01c54962c3a0c937

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
dbd9f40eedcd5e507b6c40250b9b8f5a

SHA1
2ab87203e0957f9542f631a93ac56180ad188dd6

SHA256
92f0d6c0157c3d7a81a59b98c5b0c7e95748ad4cf410c18d9dba77f663d0cf2d

SHA512
6d83dabad00b2327dbd62682553a2a03a5b75f2eca315a5796d25a081d8ef66d04c73a06a256ed568aa070e2f5c15463b670b2e867cd31731f458adca0791119

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
7098d0a8bf896e5f2d2622e492790d7e

SHA1
53e510e3facf64035991b18323cff69e4208442e

SHA256
29bf7e0a2e53a70665511c6d5411c65df78d88b14d5e5f4160965f9f4f7b0130

SHA512
ce75308be2071b5f5ef375678f0ef359e85d1e40392fdf8d07c0ba76e9de097402f2a352c89c39cb9ca89b2e1b25b474d1a430390452317bc8768ced6694e4d0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
d23cdd10de84accded0fefaf1764c195

SHA1
04c0e2755d6c540e41ecb9dae5325486e985db0c

SHA256
b221348ea8d4a0a2b04873dc34ddd26cdc2b530c10c6bea6387236f69e74bbf3

SHA512
73cf066bce8118c11ee9897a93b992ee22ee3becd0496dcc685105cbc59923bd9f0385a69cefd63c663559af3ed62b0b5d216d5cc0597fe8e3e53afd567a286b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
e00c657b720f04f987246902597bb3a6

SHA1
974d23019799119c760e324cd785b5c4ed4542f9

SHA256
0bc5089913d849533e37276310e2d9e5b44f61b65884991baf50b6173f577919

SHA512
9672c22522aa82fd4412db9185994dffebe5939f2a04d4ffc0cf35a166f3135f6b57acb73adeb07a72e4702746f81085ba75c08fe4d8fc3d0b8ecbe1f99035ab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
67f7515d331615b1a951bb30504afc4f

SHA1
9e4abe84a88cc18f2a8b49eaa85e5c1b2200bc4b

SHA256
7a6765e10bfde2099f8630f461aaf6b7f13b3be2263c23dbe77a615e11d15f96

SHA512
a78d64a0e44a10542fe46b6f96c7e48ff4c466e345fcbe6edbaa81728c9cb1df624cfe4f3e3ad80b63e9957e3ff728caf097e304754f7c31666e82daef8d8eed

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
f5cea1a6a10bb5765fc57753480060f4

SHA1
6d2dbe17417f6ff5e9c0779a48f15d38d99f5e7d

SHA256
f10b9159e2a44f229458b40ab57cb57620188f49591a898ecdc0b4b4653abdd2

SHA512
1f5535d35171617fec3735105267b20b721b26991a3acbf8d47049bcb10c54f978c8f2f2e46f7ba2e9efc8edffeea716ed243179373633c2a7c4ae34e72fa01a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
1e9e897aae3a46ff93e49c6c57a88da2

SHA1
be9fcf687080c660012c7cf5c6ca16838d912219

SHA256
7876df0734991a139bf7d7943c115c2011413894aef8432b09a341a35a9f5ba7

SHA512
021b4abf0eab56e61f9dbf4182c6d11d9b429c5951718f8b6eb69dbf6c96085d82daf59aaa5c7525a516cc89243a4d4e61e8fef2d31241b54e5a4c5d2a43f8da

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
be7d8b38dd426d4265f4e9bf304177b1

SHA1
cb3a2617f64ad676222788e8160c99505eec8947

SHA256
ced64c22c4ecfc77db226df7b14ee05dda48bd9b1541a8901f8bebe2963a4375

SHA512
790e76859b49b5ccca8993058b9061310f017902d55386e48c3b623c8a4239aacc2acfffaaa7a78c6d8a2f2136bb9ab574b0a286fe8e9d4b04c24d97ef8bc813

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
342B

MD5
ec216792e07cc5c8c09e7cdd78c11efd

SHA1
f3ca78442f5916cddd61370535c41bd2e560501d

SHA256
570210b14823dc51bb9ad49cfb14e767526646a12e5409fc3260c373f25e9b0b

SHA512
56b02543f1f69cc9f7ce200b0016e6b5da76260efb3a99b5cb2224d7a01fc38f83737d23ee405a6a36fc63de8cba835b37cfab4bd7594c0ee447e206f067ed01

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabFB53.tmp

Filesize
70KB

MD5
49aebf8cbd62d92ac215b2923fb1b9f5

SHA1
1723be06719828dda65ad804298d0431f6aff976

SHA256
b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

SHA512
bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarFC01.tmp

Filesize
181KB

MD5
4ea6026cf93ec6338144661bf1202cd1

SHA1
a1dec9044f750ad887935a01430bf49322fbdcb7

SHA256
8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

SHA512
6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

Download Submit