5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1

Analysis

max time kernel
131s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231025-en
resource tags

arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system
submitted
14-11-2023 19:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
Size

6.8MB
MD5

3893bc8e586484a6221c13451a00405e
SHA1

3a5626481b081b20bb333d1669c0600f01384924
SHA256

5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1
SHA512

fd20b7ac9519acf79f9d8eb370871dc7fb139b1552fc4077be5b707af80ed9f58ff302fdb10cc7a2be4de0d4a7075935cd2ba7d3b5a61b2c173e81d218e2665f
SSDEEP

98304:ojfp/RDz5KTDbdRGQSxUTZeNEiIK176uqtqDL8e+FUJkGRnc/YrBIyGe:eftRD4TDp4QeUpg176uqMDd+ERnc1

Score

7^/10

spyware stealer

Malware Config

Signatures

Loads dropped DLL 15 IoCs

pid	Process
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
16	api.ipify.org
18	api.ipify.org

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: 35	1324	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 712 wrote to memory of 1324	712	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe	87
PID 712 wrote to memory of 1324	712	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe	87
PID 712 wrote to memory of 1324	712	5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe	87

C:\Users\Admin\AppData\Local\Temp\5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
"C:\Users\Admin\AppData\Local\Temp\5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:712
- C:\Users\Admin\AppData\Local\Temp\5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe
  "C:\Users\Admin\AppData\Local\Temp\5c098f6a8575144b0e85f88e5508cf5f5c060d289c74acbd2a37e445073b88f1.exe"
  2⤵
  - Loads dropped DLL
  - Suspicious use of AdjustPrivilegeToken
  PID:1324

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\_MEI7122\VCRUNTIME140.dll

Filesize
84KB

MD5
ae96651cfbd18991d186a029cbecb30c

SHA1
18df8af1022b5cb188e3ee98ac5b4da24ac9c526

SHA256
1b372f064eacb455a0351863706e6326ca31b08e779a70de5de986b5be8069a1

SHA512
42a58c17f63cf0d404896d3b4bb16b2c9270cc2192aa4c9be265ed3970dfc2a4115e1db08f35c39e403b4c918be4ed7d19d2e2e015cb06b33d26a6c6521556e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\VCRUNTIME140.dll

Filesize
84KB

MD5
ae96651cfbd18991d186a029cbecb30c

SHA1
18df8af1022b5cb188e3ee98ac5b4da24ac9c526

SHA256
1b372f064eacb455a0351863706e6326ca31b08e779a70de5de986b5be8069a1

SHA512
42a58c17f63cf0d404896d3b4bb16b2c9270cc2192aa4c9be265ed3970dfc2a4115e1db08f35c39e403b4c918be4ed7d19d2e2e015cb06b33d26a6c6521556e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_bz2.pyd

Filesize
71KB

MD5
ff5ac8fb724edb1635e2ad985f98ee5b

SHA1
24c4ab38a9d92c0587e540b2a45c938a244ef828

SHA256
b94f64fcb49f40682ed794fa1940a1dc0c8a28f24a1768d3bfe774cf75f59b62

SHA512
eac95da6496a18fcbd084b34114bcb0e9be3cfa9b55ba121fc09081ecf9e0b20dc9123f06730a687f052ecdf797716024643100bd8c1adbd046db0075ac15956

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_bz2.pyd

Filesize
71KB

MD5
ff5ac8fb724edb1635e2ad985f98ee5b

SHA1
24c4ab38a9d92c0587e540b2a45c938a244ef828

SHA256
b94f64fcb49f40682ed794fa1940a1dc0c8a28f24a1768d3bfe774cf75f59b62

SHA512
eac95da6496a18fcbd084b34114bcb0e9be3cfa9b55ba121fc09081ecf9e0b20dc9123f06730a687f052ecdf797716024643100bd8c1adbd046db0075ac15956

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_hashlib.pyd

Filesize
31KB

MD5
e84e1ba269371e439c2d52024aca6535

SHA1
2abac4b3eb0ab5cbb86efd964089833cd3bd164f

SHA256
2fcb297733e6080480ac24cf073ff5e239fb02a1ce9694313c5047f9c58d781b

SHA512
22eaa0f42895eba9ab24fe1e33ef6767b2efa18529794d070858f15e116228d087fe7d3db655a564e52eb2ea01bf4a651f0f82417e0fccca8f770057b165d78c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_hashlib.pyd

Filesize
31KB

MD5
e84e1ba269371e439c2d52024aca6535

SHA1
2abac4b3eb0ab5cbb86efd964089833cd3bd164f

SHA256
2fcb297733e6080480ac24cf073ff5e239fb02a1ce9694313c5047f9c58d781b

SHA512
22eaa0f42895eba9ab24fe1e33ef6767b2efa18529794d070858f15e116228d087fe7d3db655a564e52eb2ea01bf4a651f0f82417e0fccca8f770057b165d78c

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_lzma.pyd

Filesize
180KB

MD5
65880a33015af2030a08987924ca737b

SHA1
931009f59c5639a81bc545c5eff06653cc1aff82

SHA256
a71366b95d89d1539a6ee751d48a969c1bca1aa75116424cc5f905f32a625eea

SHA512
7099208d7044cae5d9f79ca8c2ef0e0ea4a1066857ddff74d48ff4a6cebc6db679bcde4d64a9925d266542a63889bd300eeb33291db53adcee1df3ad575028db

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_lzma.pyd

Filesize
180KB

MD5
65880a33015af2030a08987924ca737b

SHA1
931009f59c5639a81bc545c5eff06653cc1aff82

SHA256
a71366b95d89d1539a6ee751d48a969c1bca1aa75116424cc5f905f32a625eea

SHA512
7099208d7044cae5d9f79ca8c2ef0e0ea4a1066857ddff74d48ff4a6cebc6db679bcde4d64a9925d266542a63889bd300eeb33291db53adcee1df3ad575028db

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_queue.pyd

Filesize
23KB

MD5
8807dc228bb761439dc6525a2966e27e

SHA1
cb9e8e230eb8a684dec8886a856ec54ff1d2c682

SHA256
b7ed6dfb6882e8ec4267d9f80cd5b1dc0a43519382fcb72ab5e74c47875c209d

SHA512
def98c22bad3f32ea4caceead743c0fd775cfa4f5287ad8a4728830e10b7352ccc45646e9d8cbffd7d51ae71a6bff1bca38fcefb49c0530a6b69e38edec2ffb3

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_queue.pyd

Filesize
23KB

MD5
8807dc228bb761439dc6525a2966e27e

SHA1
cb9e8e230eb8a684dec8886a856ec54ff1d2c682

SHA256
b7ed6dfb6882e8ec4267d9f80cd5b1dc0a43519382fcb72ab5e74c47875c209d

SHA512
def98c22bad3f32ea4caceead743c0fd775cfa4f5287ad8a4728830e10b7352ccc45646e9d8cbffd7d51ae71a6bff1bca38fcefb49c0530a6b69e38edec2ffb3

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_socket.pyd

Filesize
65KB

MD5
a4bd8e0c0597a22c3f0601fe798668aa

SHA1
5f4a7a23bcdb2d32fb15997536cddfd7f2bf7ca8

SHA256
96b0a3cfc16e215f0ef5d1e206f0137b4255005052720e91a58bc98cde8c898e

SHA512
7b325ab8b1978b8e8b23aad5714855b96c4c4284f7618475187a8d9043b04c4f79e6953c7d2b03981f34d31e7bd7d21747891d47dedd4f8f7646d3281f779ac0

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_socket.pyd

Filesize
65KB

MD5
a4bd8e0c0597a22c3f0601fe798668aa

SHA1
5f4a7a23bcdb2d32fb15997536cddfd7f2bf7ca8

SHA256
96b0a3cfc16e215f0ef5d1e206f0137b4255005052720e91a58bc98cde8c898e

SHA512
7b325ab8b1978b8e8b23aad5714855b96c4c4284f7618475187a8d9043b04c4f79e6953c7d2b03981f34d31e7bd7d21747891d47dedd4f8f7646d3281f779ac0

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_sqlite3.pyd

Filesize
65KB

MD5
59c76711cb56c1292f2aed690a89e6a6

SHA1
583e820325e3b61ff7f786e75f683b48566acc69

SHA256
8d90d6598c3a0ea20beb726fa1e9bcb2e2299e64919fb7bfea3a2a4fcfad16b0

SHA512
85bc3f38042653d57d4535a94051c361bf430d015e025eab91df2c5451619d55f7ed7da23a6bc2642e87015c6e8c272920b47aac84d1e5195435344994f2cfc4

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_sqlite3.pyd

Filesize
65KB

MD5
59c76711cb56c1292f2aed690a89e6a6

SHA1
583e820325e3b61ff7f786e75f683b48566acc69

SHA256
8d90d6598c3a0ea20beb726fa1e9bcb2e2299e64919fb7bfea3a2a4fcfad16b0

SHA512
85bc3f38042653d57d4535a94051c361bf430d015e025eab91df2c5451619d55f7ed7da23a6bc2642e87015c6e8c272920b47aac84d1e5195435344994f2cfc4

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_ssl.pyd

Filesize
102KB

MD5
cc5c8eb32acb2261c42a7285d436cca9

SHA1
4845cde2d307e84e3076015a71f8ebc733aa71da

SHA256
07ea50e536886f68473635ffefcfcaa7266e63c478ef039ba100ddf02f88ce61

SHA512
352f3201a0f47e7741c3c9bfa207769f1afe287a9e9f4e6879d37b2a9cf7fc6ace02ebf0de1ad4a5847134bc3adfeee748f955d8d554b0f552d0e98703c6cd88

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\_ssl.pyd

Filesize
102KB

MD5
cc5c8eb32acb2261c42a7285d436cca9

SHA1
4845cde2d307e84e3076015a71f8ebc733aa71da

SHA256
07ea50e536886f68473635ffefcfcaa7266e63c478ef039ba100ddf02f88ce61

SHA512
352f3201a0f47e7741c3c9bfa207769f1afe287a9e9f4e6879d37b2a9cf7fc6ace02ebf0de1ad4a5847134bc3adfeee748f955d8d554b0f552d0e98703c6cd88

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\base_library.zip

Filesize
768KB

MD5
e2ffc76ea7d46ee9948ca4c2e8cc82b3

SHA1
d8421a0585b0cd7089c0a7aace8d92ad63dc9777

SHA256
21e8132a78d64c74554e4d563de993d3301b00bc3167fb53210d9e1b2b58d692

SHA512
ae37a63db1c9d7149b88684d5f59f663756043b3ea62ff6a978d1892e10fe8cbc672cfae7d8500aef3e44307204c81f1d501c231fb7fc441c6949c4af56d7e08

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\certifi\cacert.pem

Filesize
274KB

MD5
77eef70800962694031e78c7352738d7

SHA1
b767d89e989477beb79ba2d5b340b0b4f7ae2192

SHA256
732befe49c758070023448f619a3abb088f44e4f05992bc7478dae873be56ad8

SHA512
0b3984f7bf9d37648a26ef5d3a93e15d5c2e8a443df123121ba43ca858939346cca0d613f04f2d9aba5420b1291ef429fea84e60920220086b153aac61a20f2f

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\libcrypto-1_1.dll

Filesize
2.1MB

MD5
c0e55a25dd5c5447f15eed0ca6552ab7

SHA1
467bc011e0224df3e6b73ac3b88a97b911cc73b8

SHA256
9fefba93fa3300732b7e68fb3b4dbb57bf2726889772a1d0d6694a71820d71f3

SHA512
090b03626df2f26e485fea34f9e60a35c9d60957fbcc2db9c8396a75a2b246669451cc361eb48f070bbc051b12e40cacf2749488ebb8012ba9072d9f0b603fa6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\libcrypto-1_1.dll

Filesize
2.1MB

MD5
c0e55a25dd5c5447f15eed0ca6552ab7

SHA1
467bc011e0224df3e6b73ac3b88a97b911cc73b8

SHA256
9fefba93fa3300732b7e68fb3b4dbb57bf2726889772a1d0d6694a71820d71f3

SHA512
090b03626df2f26e485fea34f9e60a35c9d60957fbcc2db9c8396a75a2b246669451cc361eb48f070bbc051b12e40cacf2749488ebb8012ba9072d9f0b603fa6

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\libssl-1_1.dll

Filesize
524KB

MD5
5adb49cc84abd6d3c8f959ca5a146ad7

SHA1
90faa543515960b2d47554b86d2478105497d853

SHA256
f4d5df50bdf3e7304c67c81ace83263c8d0f0e28087c6104c21150bfeda86b8d

SHA512
bf184a25e32bea2ac7d76d303562118eaa87bb5cd735142d6aa5a1a9247290d28c45476842e22c61e47a06316595834f8c0ebb35dfc622fe2f02a1e44a91e5d8

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\libssl-1_1.dll

Filesize
524KB

MD5
5adb49cc84abd6d3c8f959ca5a146ad7

SHA1
90faa543515960b2d47554b86d2478105497d853

SHA256
f4d5df50bdf3e7304c67c81ace83263c8d0f0e28087c6104c21150bfeda86b8d

SHA512
bf184a25e32bea2ac7d76d303562118eaa87bb5cd735142d6aa5a1a9247290d28c45476842e22c61e47a06316595834f8c0ebb35dfc622fe2f02a1e44a91e5d8

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\python37.dll

Filesize
3.4MB

MD5
d49eac0faa510f2b2a8934a0f4e4a46f

SHA1
bbe4ab5dae01817157e2d187eb2999149a436a12

SHA256
625ca7bb2d34a3986f77c0c5ce572a08febfcacf5050a986507e822ff694dcaa

SHA512
b17f3370ecd3fe90b928f4a76cbad934b80b96775297acc1181b18ede8f2c8a8301d3298bafa4402bce4138df69d4b57e00e224a4ddbb0d78bb11b217a41a312

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\python37.dll

Filesize
3.4MB

MD5
d49eac0faa510f2b2a8934a0f4e4a46f

SHA1
bbe4ab5dae01817157e2d187eb2999149a436a12

SHA256
625ca7bb2d34a3986f77c0c5ce572a08febfcacf5050a986507e822ff694dcaa

SHA512
b17f3370ecd3fe90b928f4a76cbad934b80b96775297acc1181b18ede8f2c8a8301d3298bafa4402bce4138df69d4b57e00e224a4ddbb0d78bb11b217a41a312

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\select.pyd

Filesize
22KB

MD5
6a796088cd3d1b1d6590364b9372959d

SHA1
3de080d32b14a88a5e411a52d7b43ff261b2bf5e

SHA256
74d8e6a57090ba32cf7c82ad9a275351e421842d6ec94c44adbba629b1893fa7

SHA512
582d9a3513724cc197fd2516528bfd8337f73ae1f5206d57f683bf96367881e8d2372be100662c67993edecfbd7e2f903c0be70579806a783267b82f32abd200

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\select.pyd

Filesize
22KB

MD5
6a796088cd3d1b1d6590364b9372959d

SHA1
3de080d32b14a88a5e411a52d7b43ff261b2bf5e

SHA256
74d8e6a57090ba32cf7c82ad9a275351e421842d6ec94c44adbba629b1893fa7

SHA512
582d9a3513724cc197fd2516528bfd8337f73ae1f5206d57f683bf96367881e8d2372be100662c67993edecfbd7e2f903c0be70579806a783267b82f32abd200

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\sqlite3.dll

Filesize
978KB

MD5
4b70addf2c9dbbccf072c6b899e231cc

SHA1
e7e990d3900e56ee2a6d8e417583e39cca378f58

SHA256
b9a1c6b40da5aade9f601642d16b4ede7d36e21df159f3caafd68fe7fc04b120

SHA512
c15bf73a13ff69b75e957c53a2c7665e50e84864f51ab45e97a0dddf39e30118f94fdb8cd727622b5c74ca72d1c9c4fff4f00b3d5891ad0c51177b46ba074658

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\sqlite3.dll

Filesize
978KB

MD5
4b70addf2c9dbbccf072c6b899e231cc

SHA1
e7e990d3900e56ee2a6d8e417583e39cca378f58

SHA256
b9a1c6b40da5aade9f601642d16b4ede7d36e21df159f3caafd68fe7fc04b120

SHA512
c15bf73a13ff69b75e957c53a2c7665e50e84864f51ab45e97a0dddf39e30118f94fdb8cd727622b5c74ca72d1c9c4fff4f00b3d5891ad0c51177b46ba074658

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\ucrtbase.dll

Filesize
1.1MB

MD5
5d2f9266695d6e0152a6c9ce090f01b5

SHA1
19290a0ab6942e182c393a0c35d0fc44aa2ff82f

SHA256
0ae2d103d87250f64ef5091d4807523038954aba0e119b121eed7f0a23b00b52

SHA512
4961db60bc30f5d91792606d5be7159d0d41e23ea987a5a4b6d4c2d96a99481b8aefef43af8568ca3da67fe8d7dc623c1b732a633a2af82905a2ac4da0cde5cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\ucrtbase.dll

Filesize
1.1MB

MD5
5d2f9266695d6e0152a6c9ce090f01b5

SHA1
19290a0ab6942e182c393a0c35d0fc44aa2ff82f

SHA256
0ae2d103d87250f64ef5091d4807523038954aba0e119b121eed7f0a23b00b52

SHA512
4961db60bc30f5d91792606d5be7159d0d41e23ea987a5a4b6d4c2d96a99481b8aefef43af8568ca3da67fe8d7dc623c1b732a633a2af82905a2ac4da0cde5cd

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\unicodedata.pyd

Filesize
1.0MB

MD5
e176f984d22f031098d700b7f1892378

SHA1
52842cdd08a3745756054b2278952e036031f5d9

SHA256
46876fc52f1529c2633372d8e2cea5b08b5a8582f8645cfad8f5ff8128a7f575

SHA512
b9ca5c965bf6b09cd05994340bfc8d006b64c78f0478cc58dffcb2932a4b54f92bc31c34bcbd0692b60adc7d3a31f8a156a2bc84d77379d900926d1e42b181b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\_MEI7122\unicodedata.pyd

Filesize
1.0MB

MD5
e176f984d22f031098d700b7f1892378

SHA1
52842cdd08a3745756054b2278952e036031f5d9

SHA256
46876fc52f1529c2633372d8e2cea5b08b5a8582f8645cfad8f5ff8128a7f575

SHA512
b9ca5c965bf6b09cd05994340bfc8d006b64c78f0478cc58dffcb2932a4b54f92bc31c34bcbd0692b60adc7d3a31f8a156a2bc84d77379d900926d1e42b181b3

Download Submit