55b4f63f40cfca975d614b88959c3c220df2bea5d9dd9de36a8bb7380be7195c

Analysis

max time kernel
120s
max time network
170s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
02/11/2023, 06:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

au_bankwest.html
Size

4KB
MD5

13cfd87f734b4e193cbd3a72fa7fa7bb
SHA1

45db498efab130bfb0b36db6accc9329c47f2e35
SHA256

380640b2a54bddb46474a556ad4de5d49704ada9b49b64a1610859937172510a
SHA512

14dc220824956009c7694b5bbdbc31fedfbb0d3284780e48466c2b9e28b470396cd5cbe65df0fe888c7276646fc1470e297645ea3223835a364a618153af0b98
SSDEEP

96:BqBmc6pIytgPgWNXNApFpJ8PRtFiTRF79FF689JH:BG6S2gXXiBJsG9T9JH

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 36 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009159649b912a9140bf53d83809c5b2ac0000000002000000000010660000000100002000000035bd598c2e673cc7b306e3911fe9f54e7b3b79355bf862796c17b9d51fabdb77000000000e8000000002000020000000d1669ef5b7e5ebe366d19aca250ff83d25532b5abb28bc8345619a374f06f3ca2000000034baf908f9afd5a3705ab204335eab5955c95de3e65607dbac9ddc759bcf0bb640000000b26112e238db515a198743c3a152dd241893c9e23d9f847d0bc8c4adcbd79ff59aa4a4f758530ac43bc695c7e208b2f98574d443315ec8b1e0fd76cead28fc34	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 407655acb30dda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{D7682211-79A6-11EE-9721-C2BF5D661465} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009159649b912a9140bf53d83809c5b2ac00000000020000000000106600000001000020000000556f1f025a6312ce2ef30e192c0e2dc2254b8356545b04fbdff39009a24ffcea000000000e8000000002000020000000490921815448c152dd91e48a5872fc5f421df6a71c0483117d0f5f6283f3bb8c90000000290037d1cb5943319d85628e4a541eea04135022780144ee745a37b389e6d56d7959372f12daa460c19818f8f104c173f2a730e0ae1349c9ff406dc375410ad524df745acc0a25402d6d77f0dd66cb181a560ffa44fac1fb19dc16b21ac5901ec9cf3f7f0689f554a712a5ae36e2df08e28ef78a093d11cb2250c3d12c8d7160803a13b4fa937f1e2169832339fe543c4000000037deba1233074bdd1c3d5acffb5f0d5947c740c4c5bf65d4ee952b75c0b45e2c61cd7d55928f33c9040bb16493d70e7627cff6014d1d35cc21d5a9ed334dbb23	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "405108666"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-2952504676-3105837840-1406404655-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2084	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2084	iexplore.exe
2084	iexplore.exe
2940	IEXPLORE.EXE
2940	IEXPLORE.EXE
2940	IEXPLORE.EXE
2940	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2084 wrote to memory of 2940	2084	iexplore.exe	29
PID 2084 wrote to memory of 2940	2084	iexplore.exe	29
PID 2084 wrote to memory of 2940	2084	iexplore.exe	29
PID 2084 wrote to memory of 2940	2084	iexplore.exe	29

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\au_bankwest.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2084
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2084 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2940

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
84316df29b2eaca984fad797759797cc

SHA1
f062d4d5c95537b18a03fb789e0407e642537f69

SHA256
07d36802920971f9daa8c8cba8fa5c7b89922d20b6ab7189b07c432514f13b05

SHA512
f013d348d1923966f41f9f71fc92f6274aa1d8f06d002e7fd598a177f2fc833fcce4dce56ff2db80a2c94c2d2c96824c1335ebdf944e17a19fa26b721dd65a0a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
903d8c7712973ae6b4b874920b3e572d

SHA1
0d7ca5480d9c2362bf95a012ad16e1fd3240371e

SHA256
e93e72d3847b9e344a1ca98336df6feefe0c98d8bd0219de64e129e1fec69321

SHA512
70004f3da6f236aca264362a331fa13223232a7beca252411c45c81253f71d6c2ba20cb28e0b5e942d323dd5938d7928ec75389b13e82d96f64c431872e5409a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
704246ed27633643ac6ca4c8889dda4f

SHA1
5cbbb7786dd36c1acb6a4d55ba83166ff7269b12

SHA256
8c31772c09357fe45bead6dbaf4e3912f751ffd3423336a06986dc09bfdfdda8

SHA512
53dea845db82ed98c94121011cae21591f2306043316362e47f4bc3db0630019f8edbd5fc80b7b380490ea237181ddef40a45b1509303d85a81f38ed88f2b735

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e9791d8d1092c64d062732f1dcaee1bd

SHA1
1b8a529a74abe3f245aee128f4a8262a5d47e375

SHA256
be85550b5d952809d56d5a86e1923f0fb46abf30eb40e582ec50bae32d54b2f5

SHA512
2597c534995dd9145827f4599808aa72a13824fe33b7ccf78f452a0c13b91a16ac0c3396d470600faba688a98caad195ef7e0e5e3b552a3e3adddc96f197dac6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3f41855bb324865f60c6846a20fb364b

SHA1
6a0d493fd0c2beed4ad632215c708c34c05493ff

SHA256
a31fc7eab09b8f535650bb26358e82358307d25df0da13216b25f000c3027652

SHA512
09291a65d029e7323be7b9d48263646382d50a045730d8d2b830e276969490af2d6196d9092a734539b7102c6388102ed23aedd95ade473ead95d5040a9b3a03

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
50a436f07d51baff78eee5863e407488

SHA1
69583436ab6e0874f4477e51885d2bfe2841e45a

SHA256
a73fd08de05d32283ab2fabfe4de531df0fa9934b1aacbf777fa09f23c608da5

SHA512
dd67f253dd3c6823f931b68bf7b65babfb232b29e46b0b2cef095d71fce82ab0f9ae0925c245dca9dd9fd6171285db6ba54e167fe20551e0f29a1faa8aff963e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bb40aec97e21c2f24d7cbc84ff490681

SHA1
ee04de3a38b8596e541e359014b956d3df1f66fb

SHA256
36c2664c51358dd5386e6f957364d8b808654057fbbc2a511e32796923581269

SHA512
354ef0f067c1c63dcefa0feee5bfc29632a2927d22333bc5313b7f117fc406bc455b871a37463d435673d837619a9db55f788fbf1e331b987c2350ab490033cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a9c53e61e84229d655520a1f5aeafc34

SHA1
0196b6336dd0a6206855d2031af73c8ec1a4e3b7

SHA256
6d1eed829295980c16e14435d8e78ac52fe442e4032e86aae2c107f4c4999a4a

SHA512
3672a7e7ab373c54d63a60d4eaaea9a1bdb6af669c051155be50c873fa45e192a55288bd59e6a4fb35ddae5816b9a3812bdfff955d609076abdd86e0ae939502

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
94ef6e34bbe18b7eca07823fbd62f9b3

SHA1
8ebc65dee4007a2f640539934716c3bf7d83e7b6

SHA256
4e3b871be56a1c83e3c4d02ddf4210774e349c9f6a396297ef159b5f2168e06c

SHA512
dbd77ca1eca86d1fa4d9623e826c95cbe300a2a2475212fcf019f11f668eeeae4e5f187dca29bf281daa9ce6cb321d62b204521ac1022d423548a09bd79d19b7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
06ce6e149f1570309f97346ef6c5796b

SHA1
ca3eaad00ff7b9e44c19931694c30f5ea073892a

SHA256
fe52db6e69211edbc17618d6164c0d7f2d880ff7b8e55b4052860ac9afe14a51

SHA512
f39a13e3c25cc8f6ff0f02239a1d2adcec4895c43953195ca1637fac468aed1f551a756b4ff7bc28d3252598e53b1410cc09eb54244146af19a8fcedc1f03b22

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d3c88a6ecb4b0407b7224745d6c35dd1

SHA1
dd144f384ca9b0af525ff5e1cb7f9d948cca6aa6

SHA256
6bee7066381ab642a999a240a64887ffed477e87827b0c0d3f5091694c3fd138

SHA512
9ac0b706e974244f32a9702aaf84b1b947dfad2edf67f42134f3f145a69fcb08cda073004c8efa078a8ccffb50ed4a7fe6bfd8990b1da1a81ecdd8e5b4ec5e9a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9eeb0a830901c2bbe5d14c5c9d96e23b

SHA1
ca49107d39082de2199aa626681734d3e3a1be80

SHA256
513e06422729d360fe45455461148d099d1e30a74b5122a1997c10257f64691a

SHA512
face8aeb148a85415760ea188cbc2f31f02bfd73dfccb55daffc71a12b4ba21643253a5d67e6c03fb74b26b467c07d20c618c3a2315f8b7c1506e568c33c0765

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
83ecd603151d11720656131dd56b21e4

SHA1
88ef7390aaab53da537306c250f33d1e9b33c556

SHA256
00e23b64149272d1f05d7acd747bae971e3f8232369021715b8989a259cc5639

SHA512
2599a3154f1059e10e23a85f9da1b416bd124e77ecd3188dd5d1ef996331d9aec39b7bb88b69004c200e230e7a589080622a83359ae9dd31ada4d46efefa9dc3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3cec87c367b4c3a51a03df7d1a34ae63

SHA1
9c63ae79c295cbf98b278f6cce2399eb5cbbf250

SHA256
0f768cbc8ef962a87adf471cffa8a72148828da66422641cf7d758241594bccf

SHA512
f7751576f79f222a0e3e95bfffba875183479967c6560e9e081b308421a87a90ee110b3ce1fe3f2789fb679ec016ea6579cf165752ce070a2fb84d02bff1ade2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0b81b0b47345554ddd43087d1b964f65

SHA1
318ab8f9dbe22ec5ae39b48b8db790da79097d49

SHA256
5acd1e8759cad7bb0689746926b27f182deadf5f775a961f3b1bb197332ddf29

SHA512
6561792cd98a67fbbd751d8d1f6e8ec9dcd9f43118541d948d372ce10334ab651210dd9f97f10a8fda76d9f7e8022d7a3edc55277bcaed7fcc0d9b71edb6fd43

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8ac925421b10d6a767d915b6e3a08e03

SHA1
66677ccc3e1637e2260a98bc0d6587a537eca40c

SHA256
8445dc36f11adb6f5f3e5bf82be2c08cc3ee8ae5ad6e0aefa03c02aa6006fb2c

SHA512
c91405963cdebeb023bab80807f7ce0a251ee36dbb162183f90f4e9cce60241bd9b0a080fc9872947a1f8a9baa32f7e676144a44f55b546fe8ddff603eff48d6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9adc064c70bf30fc6ec7d00c82c7d2ed

SHA1
e01d7ec674095c47778795a0649438a1c7e77e07

SHA256
36e012db973dc40f0a1e28e383348e5dd453d29317d578efb883733070c458c8

SHA512
043e3a8edabea74ee053e7e54289ae7b384407920a5d487ca64e608925e9833bf0f6d2238383885c81a5b7bcf9ffd244e866e2a57727def720f4267e286cf5b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
354f71c69bc4d0f9f68df46f3aafb1d6

SHA1
f95bd4ad63ade0f0063509ead3a6de32e532cda6

SHA256
4f96b21da4eaf8ef2c891cf998ccaffd1cd7aefc08403413c1703ffb26e74539

SHA512
102c391792ae8c14632c3aa0ee5971ff16c28e4264512f4a991a2c0a7723dcfb22281f4a05c1797293f1728ea9f6f9e564004ae38dac5d92b566a45f223bb863

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabFBC0.tmp

Filesize
61KB

MD5
f3441b8572aae8801c04f3060b550443

SHA1
4ef0a35436125d6821831ef36c28ffaf196cda15

SHA256
6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

SHA512
5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarFBD2.tmp

Filesize
163KB

MD5
9441737383d21192400eca82fda910ec

SHA1
725e0d606a4fc9ba44aa8ffde65bed15e65367e4

SHA256
bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

SHA512
7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

Download Submit