629c3594fa48720675efae8c004691cb67e8b5f71fa2acaf0a7fd51a0e379cad

Analysis

max time kernel
186s
max time network
228s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28/12/2023, 21:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fac66527e2f224c4a339dd3598901339.html
Size

5KB
MD5

fac66527e2f224c4a339dd3598901339
SHA1

22c68dc69da67d4481a5a43e7a5c4eb3ab95a989
SHA256

629c3594fa48720675efae8c004691cb67e8b5f71fa2acaf0a7fd51a0e379cad
SHA512

4273c6cbe39aa2c593acbcceb4b208f92a320c6427c3d9d0feff3a1f3309bcc516a319efc73f53be018528bd28ad74484f837450998cc4216f9b3c50025e67b7
SSDEEP

96:EfHeJfaPkIpd3QrfmSYHduzewfg/uOSgCunv7ddS7SRgd380oS9vLdRPlpd3QrfJ:ewisLDooRPiDd

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 41 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410453498"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{30DF08F0-AA43-11EE-9B2E-42DF7B237CB2} = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a883829c536588438b4279b7bc6c1930000000000200000000001066000000010000200000001dd4f453ac0a387c1fdfabc7b094114d1c8218e1fc1ff24872afbd7e0d8c6f86000000000e80000000020000200000005259c3fce78934c433f0169c10bf51d3cc5eaf158324503df68026a1cc08da4c9000000064575f7d7eb99ce8a28ae5a41ddb79d90015c2fdc3b3ce117007a613d3d4f523bc334364541b591aa54aa6e559c0deabd0d68a62c2b99242b1cf0f746b1fb4fed623c5bb774771b00c98ec1d27c1f540660715c3079fd5fbd6885d4530ed9c90754f8df9a8ef7963605687f48a43e9cadccd46ea3693fa2e56aaed0a66d12f8f0424a14d6b6cc96b64a0ed3344e2bd8b40000000f27fb38a76b3d57c7910b1248f2b0f68a6699b63ba3cf86b847c53903e96ac946663d43481c27a755edadc18076a19e4f850cb6b0de17d99654352b48a63c10a	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000a883829c536588438b4279b7bc6c193000000000020000000000106600000001000020000000efcac5d3c432b513880cf3265c3c9e0154ebf4ede00ddfd58c00bab8055e2a04000000000e80000000020000200000009197e8b2d3eff7e311799eb86fa0e3bb6d75feee51f1012740c5aa92b8d4260820000000ff58d2c234291d323555b4a259a6ac57122d8e87f5281185314153b136cde97740000000dfd2e4751bed5d69392298baebb437975d525bddd0dc6d62041112228013fdf18c48c1ea4819c0c3623d6092bf89dd70c2560b6335b76e0b05507984ed7504d6	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 1014e90f503eda01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3308111660-3636268597-2291490419-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2988	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2988	iexplore.exe
2988	iexplore.exe
2160	IEXPLORE.EXE
2160	IEXPLORE.EXE
2160	IEXPLORE.EXE
2160	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2988 wrote to memory of 2160	2988	iexplore.exe	29
PID 2988 wrote to memory of 2160	2988	iexplore.exe	29
PID 2988 wrote to memory of 2160	2988	iexplore.exe	29
PID 2988 wrote to memory of 2160	2988	iexplore.exe	29

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fac66527e2f224c4a339dd3598901339.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2988
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2988 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d5d76999e998daa26d4a42fe9828e8ee

SHA1
fa5af8b9c0d621f0f4ce13c3b96ad223d5e498ef

SHA256
ba741290475719d5fc73f595ca2324aebdf5ab2862027eacab9460eae49dd0fc

SHA512
1a6ebab808ef4ccb01b455a4de8764076dbb8ef27f25af251bce600f0c875fb772eee571293ddcd482b0e5748b626c508374463bbe8b0c0c607ef11039add24d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3130310834c734daef99983efbc5dddd

SHA1
3401ca931a43cbef728e73668dea23968dc2200b

SHA256
34fe9162658a4ffe15f834e0579ea2cf603e82e9596e31ba5a1e2527c960adca

SHA512
8a53eb7b446e87fd41676df8d621a58f7ee2dbad011028ceefb9d163e24e9b895f44acbd928a49adee4b661ca445877fa63deba833e84eab6aa93340a98aeca3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5f774c576a6eaa200d86992e35e29599

SHA1
1cd1ae1308449c2c1318b307f4ce2e155575f045

SHA256
82285eb562006559e2ecdd8288fe04f2e3c937ccda4e8f66d4319a0cc49c9585

SHA512
bf13ca243084ed56d596a5526de0c13f7b932a426caebf806ff01f45b2b787aad096d25347063093f68d2ecd200216bc1f1bcadf025218c426f0c32ffe7b15ae

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2978af8bfd7b51c49d0164eeacd30ce7

SHA1
699a118eb8c8ef7caac2f8d54a867baaf18020d1

SHA256
7214fa459807bf3c896ce2c3c720e5c4a58ee98f11958d381dc758838c725cdc

SHA512
24de3182a6c0c0d4ee0bca2cfb5ca69d44cac315ed7dc62e6df60ae743444b34f7ecad90ad967b161e3bfddca5471c75ef8479a745650af991f4abcf5b8e5732

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b7dd574095221ec47a36628d5b783e7f

SHA1
64ec1f16397e74a5acb451ba9c24e7fad4044d13

SHA256
30de9a7a661d538ee06deee6a88a86febad79d0dbb949685cfca6b0914de11b0

SHA512
6f9d3ae66577134fa0715ba73dc0959ac09ab090d92643261c78609c795319ea98fa26d7ebf8de20503fbe99e7c95bda718e273b8b1bcdd1db64378168668eed

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
7e1fcc1c5751bb65e535cecd8ddcb79f

SHA1
d3889182b477b1a563d181b25fdfc079709421d1

SHA256
a8c76e794c7fc88462b7554f2f8195003e6337a312332f0d7b3a0b6d479f952c

SHA512
4768a7a35ce4fc547f1db736e05f92eed0bba9c702be200755e5f1a2ea251a58a617ffb1eadd7eb6891b9927f688c530ce3b9c3c94bdb688710f1549fa29651a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8ac042ac7d9f7ad093436f8d89b26894

SHA1
8e3c12fe472bdd8f3e36b74bbb3a7873843fcd67

SHA256
af89d2af1eafaf457c0ecf89e58b207ab352e497c68a50ea84522f5181081d90

SHA512
a368d00535fad9455470e2eb473ef02ffce3e74d2dbb34e85b4af0e542ba04eb7116907b11cf9b5169c918ee9d8d9269f406480e4b73949b97f4116a301dac08

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
321e7e1196f83f5e713730617eb7af97

SHA1
1d7b37fee032c2fa78d946f836c43752fd82c804

SHA256
a7954ca055c44a0842a0b2be7455697410d622c0220ee5612d1c694152e49744

SHA512
c982dafc6dfd37eb120822c1eab2d5e8857be31e6b4ba4ba5ef4a6acd7116bb006d670e908a893bf8a34fe65410296046ffd9b74e9c6a5adb7cb5b25714ec697

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5654f1c0afea8270292cd1622acaad3b

SHA1
9ffc958b9bc873b14746450c8ad1ae5627234a28

SHA256
cfa709d23ba256dace8dd835798e5fd8308ff777a2e9f951974071de44ce28ff

SHA512
328591f230f2339322b37d70d03e97d0f1b559fee21573e3222f6a0d8027e741edb71177a50510a0a9a48a835246670d961a125d5eaca61734b47ed88b1f7fa0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
07b10dbb95ab09e7b95fdaece6561568

SHA1
f5887f48f403f6dce9b33d8cdc8ef836d27f79db

SHA256
023042bca85f1d9a83b511bf657fe5c21dc582f8740a088473ee75c636d5faa0

SHA512
495f293785918ec5654763a9a86e3ff02a17854128254df2578f6a4837a1fe4c726ea9432b73721760f55d8fb120e2e38bbd82b8fef5d873ea6772791357aa58

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6b2125584a477e7720d3984b76f5f1a7

SHA1
0d73480bf367506637b40e3a8bebd2752d8c04a1

SHA256
9778921ff3069e60d06da098c7e2e31a6906a75a170196f36b727a508f434ae3

SHA512
36d05a3bdb3f21ab11d0a0997a05ff85f8f437ece1b24f51c84602c733a8b02c1f293ed9eac52dfe55c4e5a157ae90dccb83d0bc6b4431adb84650776551c82f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4cac9abc914f66aa65f029de30ae9f81

SHA1
5f068a30e4ab578b77797ed60c6096bdf6779ebd

SHA256
cc0487c9a90453a8c5cf783179f675efeea8d4d40ae8de52637b81fd9524f228

SHA512
037b44be5ce8f0286b384332604f937643b5b22072fcae13b95aa678602ceb43fa6532e7701363be483e80986442ba91138ff9496ddd94f16d8a461a060566d7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8955c1b2c03374e336f922968a9175de

SHA1
aa0aded7f7d23389d9172f4d357ab2a9187570b1

SHA256
09294ab0aabc187af096b2e83f28ca68059825503e8367f5b74b8368899a5c8b

SHA512
531da507074630b75725d492eac6e522ebaac4b80f7756c0894491d6c4f4ee039fd5b4b1194948394b1b9e2903b8cf223f43548f439fb2c3623da50cf0f9e5c5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b8f87f238b73e6998f341a5f75e2cd4d

SHA1
7c778022e038f48fbfae65a0d475ff9714ea2b9e

SHA256
c5c5982a6576d9845a031f79f34e270963499433edab43f17b8e53c5d525476f

SHA512
bfd65e6a3b374fcd0ce25b16a1d367c47cb1da35577bb16af63099ebd0793de495fe29da3ad8549890723a745ccd6341ddd4ad590cd0fdc743de99e85304ef58

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3e2e661f3d449ef8593fa30fdbd92c36

SHA1
0a0db7d59b4ea97e7f86199ba3a80186e5ea9504

SHA256
423a03a44cd0f7a84a3e265b96c0840ba1c418b403651446ea62f63ae63ec863

SHA512
c50b1b748572439de299539aba8d2dfaaed1c256bb18798db8612e73fc0ca4994f713b0b34961567b4b045f9b4ef0fbcd8e3de3f9184f918e0817aa27f5c1f71

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3d3f807cc697a20a8de7af25f57e9c86

SHA1
7b9ebbc78c95b5091e1cb53d2b34f44d12d51f81

SHA256
24a60cb6961559177702f7f19c7244395edb247605c002c320787c5aa95be11b

SHA512
2a6ce8aaa6b0660b94be40457f4a8f16ccc819811b95c82c369a55ef68620265b0347b971a152e0a497a3a7c2ff7261c309810c3b62cd532c45a0b5b92c6ba5f

Download Submit
C:\Users\Admin\AppData\Local\Temp\CabA7E6.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\TarA866.tmp

Filesize
171KB

MD5
9c0c641c06238516f27941aa1166d427

SHA1
64cd549fb8cf014fcd9312aa7a5b023847b6c977

SHA256
4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

SHA512
936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

Download Submit