hxxp://opera gx discord nitro gen

Analysis

max time kernel
1558s
max time network
1559s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 17:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://opera gx discord nitro gen

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 34 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a70000000000200000000001066000000010000200000006b6b9db0ab4e8ea948d00e27cbd2d503889547fee5e91775616c4a9ad4bc8c1e000000000e80000000020000200000008f0cdfc0dcf884dae41da553bf050415757500bc6cf0737b304ee05ad262c118200000001e8e93b44188b4aef92f6d61cbccc5dfcb7f9622e7922a3c1dbd366017c81c3c40000000a4ab17dacbb37925f2cfd2798914b1a5f4e3f314e1910809e59a5e3cc543607b8602f0ef0caa215c763bd35bdbfa528ed57fd42bff3fe566210e8ded833a6834	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E76C5BC1-D664-11EE-9969-66DD11CD6629} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a70000000000200000000001066000000010000200000003fffe9ff819ea4935d9a0fbd60bd87f0d5ddd37ddfd9ac10d1b9bf97eb9bc273000000000e80000000020000200000009fb1c320244ce0785ce2d2dc22bce48e7fcc094972026c0ac627b5643355f088900000004bb3dd3f124aec3cab106aea3990e4d6552599b68e327a3f9faa2bfa18111be80ec0934e72545ae8a9df90ecde53e16d5ddcb8e958f13a2ae7c43fdbd62b3cd56774288ee6889e30e507d9fc840978d6b04506d22c777dbbdaa8e4405a41a497d8e146cab7c44ae4fa91c28eced34a099588b1e975dda866910df780354d08e449c1306a52e640721bd5a19bd5df3f3a40000000aadf0869d56edc97fd41e9f05eb14d89445acffe347d172d099048a0d749b6336b1b27dd2ed292fd5bb8dcc633d830ceaffe375c435acabc9d6ee31ac1cdc3ae	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "415305804"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 4060f5bb716ada01	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2980	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2980	iexplore.exe
2980	iexplore.exe
2708	IEXPLORE.EXE
2708	IEXPLORE.EXE
2708	IEXPLORE.EXE
2708	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2980 wrote to memory of 2708	2980	iexplore.exe	28
PID 2980 wrote to memory of 2708	2980	iexplore.exe	28
PID 2980 wrote to memory of 2708	2980	iexplore.exe	28
PID 2980 wrote to memory of 2708	2980	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" "http://opera gx discord nitro gen"
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2980
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2980 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:2708

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
67KB

MD5
753df6889fd7410a2e9fe333da83a429

SHA1
3c425f16e8267186061dd48ac1c77c122962456e

SHA256
b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

SHA512
9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d198c4883dc11d45118f9779b8599d22

SHA1
6a007a777811c72ee2e3768cbf9be109a1532a02

SHA256
3756b0ece405b64afc2217efafa59c4d061e74202c2178bc8157d00839220fc2

SHA512
9b5c14cf92250b3acec2a4cf1227a09385fcd01f62fa8d57a1915cc611bee21183b22b3188494c81f2fa4c9563b30af8f8834fa71fa7af67e71ccd22ed2e20ab

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2fd6d010f3bfc90b4c2152b614b8d594

SHA1
ecc09b72ef88b15967b3a7fa4175613f17071593

SHA256
022dfde75238cad11f37b1764a05f77f473eca2dc7d15dfad716a3ea114da13e

SHA512
87daa3b68c6f1209f8bcbd439105e4e5adc7d7611c1e2f69fd094c8dc0ac343ee03078706649f59be6ecd675f7b5db708d63bbb293323ee6c970ab707bfa3987

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e945902b76b139cdfb37dc82d843115a

SHA1
d726646070e1a9377f740dbb576a0ddc272fd46e

SHA256
abbae88f35af4a310e086c87cc7697bafe9654286c5728a47a0f2e2095df9b7b

SHA512
b7b9a365a582813a3e0fb4c38ba723b9aa8520edea30182169ee1d3e227da63eabc427393e91201c27b88ff433949a63bdf50fac61a7c305c6a36e13fde559e2

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
deda3e0afab073144cfd65829d8903a2

SHA1
8e5964d312d6ca232a1b6f54151feb5c819987a6

SHA256
0902e1ef750488b2fc7a298df758653d303d49910b1629ad5945f798e04f3636

SHA512
ae0a161c6ac68e445e293ebc2be931cf0c35024ae56a83be638fc627627217cb784ea65a0ad1cf730316411828f36021b30b818940b9d2f11776569dafea2d55

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
13464de1d6231abfb582a934ae71217f

SHA1
51f03b0228f33626ab3b92f1039a0e59b10af9cb

SHA256
2f88d201245db7cc718a287ee9eb6950e2e783036eca2d84c362047b29391aaf

SHA512
49c476f8d99bfdae33c19582147cf7b6813dc726951f58e5974da9bd18cf4b8d89a773a39675ac6179cebe64153660b7a988dc48b34eacece58f458bf84a2e70

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
449a0c5b3bbb4ce70731897b1264130e

SHA1
b754cb7ed53793e53a375f780ba59f52a620ccb6

SHA256
de63eef9faf7c5d1449b93ba64ce8d8dcc34eb93a809d2df094d31394fbc7e18

SHA512
97686451dddf645adfed65b94340ed836d800f1a21a9bb1fbd4d7d8a0012b1a9d47b552630b29e2f9db1deaca1d34468403fc53a5593e4c964f101d6e8756108

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e4729be48dad728629863a3a4bd00256

SHA1
7c3e45e0910e15aea94aefaea436e85146743bca

SHA256
dd106f2e0cc8d785b3ecccd05300afa84dde9b37b8f6f338b1ae331e45203701

SHA512
7a86081a8fc4dbcd2e59fff5a860025de5652a2c73bbc537d3de4463991a3a5244bea77e854e651951b0154f95596cf68ca7e672a143363988c3cd5a98739129

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e6d3498c5bfc0f89829b331cbf29f904

SHA1
09f042531cc0a692515a0c8feebc5657e57fb4ff

SHA256
89c8e114952b3eb3c311814f94c9a771a8f19394b24fdd5c04a8f6df2b559dda

SHA512
861ddc1ecfe137cc1b082b2d60733b8ebd892620e8e07fe00e02f8dcf3fe87a390b9c77ac7892be38068be34b56d42db9164dc4d27818e5783f78eaf9b2ec4e0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8ee681cbe62fbed86cda0be7b83e9c6d

SHA1
2f41d24b07861aa2e18c4d376000e9381440372c

SHA256
d680bc244b0b0c214aaa65ad05086c4a3a5453c04037117aa71821788903493e

SHA512
5d0b8bf71b79777ae006fa507cf4c158dec426ad3d25f9eedcf2164020acf0b0d57ed713aaec8423d3c838359d7b263b5f70545d1f09b42720a8cdf4faccba47

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0d230b06746ddf67e6418e553bb336db

SHA1
e920974ab2750961c7565c3636a2a537c2686e27

SHA256
1a805828d4e719696c71d1da064c6de374cc76512a0009778eec95016cf83ecd

SHA512
d12134576e8abcef459947aafc600074e118624ac5c70589dd9da377645cec356a256bd317748dd67fb226e088a19f4167d40a24dff91ab7ea0c29a5c816e9f7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
616face96ad86b8236f74e43a1e38559

SHA1
7139e545105c7699ce9b305c99a87cb60ecb170a

SHA256
6fcbec84043e32af9f659d830229f5c827c1830aaed40bf97dfb38e19bfd8239

SHA512
2655f20dac2bfb434f9335ce08c2c71f5c0987b41b6a3fc2d6915704e57a8382ce8baf8c9d441d952677e14ca50fcfee02d8c941c797056571506a89341e6124

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
17355af0999391ed142b7eb0c0780c30

SHA1
a84e87b0382f560569ef8084a8d9538ef9ad9c9a

SHA256
5655675df1a3bb684494ef16f829ae631abcde80845e9e9872ef887015e55658

SHA512
7e227915eb351bd1f2902f48ed4b22424ea4bd7a5c404bb482f15296f4c22b0537e4e99c58ce4ddf30ed2ab8ebf1a65f75363110654aea8214ac4414959c73e6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f61a2b9c0ca33f41813a496012025b21

SHA1
7c8eb9f8d8416de18a053414bd045e759a1df26f

SHA256
0f777324a0f935d6a03702f133aae6af16cb2e4ded011face63044f306fc5c31

SHA512
84b142a650ea92bea9123639a21b888991d874035f471f08009dde637b659c9f5986abe8d71f43afd827b5428c5e7570b7025791401bc1070b0efc0c1d055722

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
00f6f737a18124ca6083657d547b96eb

SHA1
75341dbe3ed1353bea539eb02de28a83856dbac2

SHA256
948945c239f6dce08ce46d703171add472b16fa95869cb4ae359cf497a075304

SHA512
8939d9c74dfe70abc567867227c9ff5a267462c873aa2305f464f7f5ba1ff3d360999a4627bdca1f5f50f6a5ebc40c9a8f189e6a9d0c9cffe7f25b750fc9202a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f25d28f2faefe801dd1c19690291cbb9

SHA1
fce13c059af006c5df196b647788a82cf0d0c638

SHA256
c1930b35233c33e66f848804f4ca1502ba3d9138c67f3d350b687d8580c1e0ec

SHA512
d68510dd13728d60fd25c84dd1b288f38ecc124ecc924fd2f4ab061610c2190fb47a071e66eb7c641f60ae47622f996998e4e4e3e2d3bd8034134a6130f803d0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e4afd4d82ab7241530f3a14f11e7986d

SHA1
1fc69a4193430518434b33fc46fc320458f64a24

SHA256
024764c47b5215a4eaef166928d413e3daa4d319b1fbadf3363f6b284c2b1628

SHA512
2f4bd442c234be651fe01fc7170a87b364b417cd92df48188d90a1d4f743fb3385d756bcc763260af72b56a14c765d5efd6c7540ed495f06c76a1de0c0d2f3c3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e50620b6b344e9d04deca9ac7322fe84

SHA1
b09561ed647c51a5cdb11479adc2404be2a3b7f3

SHA256
bae7b2a36682661b97bff8d0168e31118d1b06b4445b4f30a4302b1f3e9e5162

SHA512
9b80b6826fe90f697cb950699e272e7607c9aabf221da27e10b6c233e79799966f8b4839df3c51b6040d67c93b2b45cd0fbb9514109a0f0fcee0516b032c9865

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
493a8683fac95ee297e955009b39dc85

SHA1
09487a7f68c849043ebe8ae965110e748daaef96

SHA256
a5fd6574e2c7773406d0eed1f34a77c4a358423d04d2a5611b87eda320573ca2

SHA512
d896f7779013a0e9419f02afc6ba11bf659ae023932684db0b3fb058f6c447370e041aa117b5d19df6a2f737cfa539aad0f0f9ccab1307e01aec89a1b4b4ec6c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
79b369d15279d1cbb7b722cf1f872dc6

SHA1
cd0ad55c99daefca9625a5bd1aa7d8fa0af6eb06

SHA256
552499edf66d6c2e7eedd30e49ea5e40f866b890111b821106fea17225eef2f6

SHA512
f935916887bb5d70f0ff3fc2bc742dfe2ea0c2f3875caea5ef838117d68442c3af4fb76e7a783997613a3e6409de5fce8154a9d3e1be148094c919522d49e644

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3499.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar35DA.tmp

Filesize
175KB

MD5
dd73cead4b93366cf3465c8cd32e2796

SHA1
74546226dfe9ceb8184651e920d1dbfb432b314e

SHA256
a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

SHA512
ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63

Download Submit