0ce0cd55383d2f0ace3e24ca02026a129f35eb5d9847928ad73a2163a372b61c

Analysis

max time kernel
136s
max time network
130s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
09-03-2024 18:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bc7352ce8e7929bbea73d9f0c0c7b7af.html
Size

17KB
MD5

bc7352ce8e7929bbea73d9f0c0c7b7af
SHA1

d257357bdb4e9ea3c59568c5843e59877fd3be85
SHA256

0ce0cd55383d2f0ace3e24ca02026a129f35eb5d9847928ad73a2163a372b61c
SHA512

866dd43cf122564566fb27bd32b34ad8a5f5dff589ebc937224ee1deabbe5b84895e52cd1e169ccf77024c77b9d0906cb3a15678b0e8b43c22672c66d0fa9109
SSDEEP

192:KJjnaXJjnNSnrJjnUPnrZ3vjmMwb/24nj1QQF05sImlRaEUXabJCGkM9S14x9hOc:EcNmUzZ3vjmKmraEUXabJCe9S14pOc

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 38 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60f4be1f4c72da01	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009ad0fe672a47df49907d8d2c675b3fb2000000000200000000001066000000010000200000005069099c0901564edc4d67b607c00f3aaaaeaad3cd5ef391e5ff956a5f4e9912000000000e8000000002000020000000ec2723d49adbf54e74604ca3a1a304d522951724655e41a09d41cad1d9e3eb5490000000e7936d41242a369912d4dfa5d83697c682a967b1a67c5f8ef7a6f32fecbb6719f3c243e8ee7983086ef9317c9835406fdac32737233ba85c42542c22a9adf31507f5c09bc9ae56579ec458853ba43f9287615457eb5ed9bdb9b1f748cb25fcb27c1894e8ec9ceefc9c8689fb4f84fbd9d7ea12c52d40811947870fa9602248c8ed8a9a4c9864d3927cab1faad676f1bc40000000edf2843ab0c2f74afefc12bc252209b6d7d3863ff9f372b9ee9b7df93f29dc68dc37c5fefdaf5291f138518d5786f7a91187d2892197c8134ede5d9fe7f3b6ee	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0C1C5791-DE3F-11EE-BF0E-72CCAFC2F3F6} = "0"	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "416169159"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\FaviconPath = "C:\\Users\\Admin\\AppData\\LocalLow\\Microsoft\\Internet Explorer\\Services\\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009ad0fe672a47df49907d8d2c675b3fb2000000000200000000001066000000010000200000005b4e77963c6b0bd8deb44cb3e6d3ee239847b8bcc1ddd41febe42107dae87217000000000e80000000020000200000002e0a4c71fd2a6094ed3f53e23bc54b4e37d5fe30161f9193d7541659fcdb0f002000000054e127fc01eba235b139897aff943303b307c1db6af5406afd5e6172b4febd6b40000000854eb8acf19bc07d759f53c774366f5b10b58f206281a653b1ce7cc6ee2b26ecc5cfe47ce1746dcf5ed44820828e81137c85bfff9d3513ccbbe68cf9ad48a7e3	iexplore.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2968	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2968	iexplore.exe
2968	iexplore.exe
1712	IEXPLORE.EXE
1712	IEXPLORE.EXE
1712	IEXPLORE.EXE
1712	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2968 wrote to memory of 1712	2968	iexplore.exe	28
PID 2968 wrote to memory of 1712	2968	iexplore.exe	28
PID 2968 wrote to memory of 1712	2968	iexplore.exe	28
PID 2968 wrote to memory of 1712	2968	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\bc7352ce8e7929bbea73d9f0c0c7b7af.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2968
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2968 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:1712

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
914B

MD5
e4a68ac854ac5242460afd72481b2a44

SHA1
df3c24f9bfd666761b268073fe06d1cc8d4f82a4

SHA256
cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

SHA512
5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

Filesize
67KB

MD5
753df6889fd7410a2e9fe333da83a429

SHA1
3c425f16e8267186061dd48ac1c77c122962456e

SHA256
b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78

SHA512
9d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
1KB

MD5
a266bb7dcc38a562631361bbf61dd11b

SHA1
3b1efd3a66ea28b16697394703a72ca340a05bd5

SHA256
df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

SHA512
0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

Filesize
252B

MD5
675323e9aec95734d332eba22b592345

SHA1
f17fbd04dd55eb6328ec3450639ab4cb22c6f4c2

SHA256
41749acf1abf4c56e2ef338b868dae691174b96effab0329e8c317aaa91cc97e

SHA512
866fd4e3f0788d96c967ce7fc13f13557462958054a2c49d23d98915e961bba84709db7891dcf5387126cebe6247faef1dac89cef1b75f0d3c422d32916e1bcb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a8be704a465218e8907773de1be0c092

SHA1
d3fa06702a7f015d9eb3fc9cbbfb2d4d5f522052

SHA256
6d42df34b323357ba771d3b7f84d1356536290185a4b826105957fa2150bc911

SHA512
ed163a75a6fad7606a00400a79fb58cef6bbb58428d01b88089274792bfb5859ffdc0c1a4af7612bb534e8452f83b35e5944a3755ba2c42c5cc8971def99ee94

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
40f2f80126cde0ea182508e53b821ff2

SHA1
0e1962d287fa593c1f457fdee2d9904d5520336e

SHA256
d8225d9b26573b883d786a7ec0773364157db7af939f479e1d342523e03dd115

SHA512
761c5c27b54d866729b115e090e8ff3cee91b343c4dd2b4d848c7111f87c889ac17d104ef5834d505bbe39790c66dc3419aa8b92fe3b5fba932a651b68e6542c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a14a3bb982c838ba488bc408d8273ef7

SHA1
dbf6bd10f8436a770928bd4d0c7d725f3314e628

SHA256
54f6a0dee0777763b075459eaa14c2b2393e3afa3b7d8bc549e252122ee5537b

SHA512
8263ed1fa508ae8ecedc041a9764e5f41e1b078aceae388994f41c4c3787f03b70cc788477d90ff479cce96ed4e2b2bb4e6e817e2afe5590ce0232cdddc33d0c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c08a9dba8fb6636533a27b295bb287b8

SHA1
ce36084dcd650f545ae5bf585d690daa334cec60

SHA256
7a25b34c0c8b3aefa5d7323c7988ac30221bf07d69a4031606a13375fafcb87b

SHA512
1bc211ca076d297d94a22e846d6ec6e00f89dc0f23fff1c2ed9d9f3a9f85b0e52ce5605b90cff79774ca0edf5968ab58c06b6ac9aea03aee087dc24823b88ad5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0001effe6d09a188b29aaa573b1596cb

SHA1
183632eafe46bd38d7da4052f3a22eb94996b434

SHA256
9e0e1b96fdd3bc207963bb7d62a5f0a81c8dfc8196b9c05b47856cd167bfe021

SHA512
ee3dcf6a0f58d4ed5b1255d665c22765fcd9302efc728ae2344ed0dfe48a175e36e356b78fd395ff8c67ccae2b0c7ac78fd97761cfd22f37bbb9fae8d842a141

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b5f7df7a62a545acecea111075e30675

SHA1
9ee9ac17f4a9b58b4a5ac8b2937f42ea98662be9

SHA256
07fdb591a53212c6b12a0d20d977318452c00b9559217d292d3163a22252cb26

SHA512
2214400a13b1698367bd08138c4d617896c124a017a91ec5d2841e7501461ffd46e9faaa1456fa2ca5b77aa19cab6cdd1cf6cd08a634e1f449697d0281f34755

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
30687ac2e542cd4b50f65bc3c1ded6cd

SHA1
216386c017596cda1694df7dd1bd1bd2eb833bac

SHA256
669b35528e7a339e2b8b892e9f5b69bc2ced0532e688e71c1511906428a76ebe

SHA512
ce68244e02258663e8e93c5d0ae9281b7ff835a60eeb71845f3881b71a041cdb1603f8443aaecd4b8feceba6259a8cfad17be452db2900efde8be1805db4c9ee

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
892a49e81f29b7922515d6e9f3192362

SHA1
d76022c29558bd7870d447f303cb9eae8631e45d

SHA256
e4325aba654aef59255c91e26e6f91b61e78b14ceda9d5eaf9d083f8c3624d41

SHA512
e7da5c68e7074e2a5e44d6d2ae1154b9c4d4d53384b15fc6740c0e122225037708dd717132afe4a453eab7cc834c7e4994d283130fdc3975b08ea184b32197f7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0a4060b12a6966ffc9625cd4e42deb0b

SHA1
1dcf2d105f20129d7c65a6896026cb5136c755df

SHA256
5ba4aa1d87deed3e9ef8e813233c119fd226219c5740d93786626898ef479a5d

SHA512
c23161190a6db88bac0d360475ec766d965b73adc1477cf412a2a7469d9d568c2fa4cf6a51647feee13b2722d9476dcbf54f0b7cb6f10ea2c283c94a3e852c07

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f168ab7da46c1fb4fd0d640f7a29df7b

SHA1
95a01c2f7f9043f63840c0178a109c769aef63c3

SHA256
a4a2cf831fa39291a99d69719130281343ba05ae4a5e5e6d031f49ee3a21a63d

SHA512
bef5000147465c2de800d9272012b12662bfec69f398c534cdbaffc4d1d77c3bad00267bf57165ac328cd84abcd58a9c3e92422cc4a9e39ed35dc590f2c96456

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c0f9a6a549915c398b19e4f8bed4549c

SHA1
d19043e670094128170a64e51816ce486cc4351f

SHA256
adbe2ba89262f4d5c54edb839d5aa358691c9e712ee2512e45328b452ea773c7

SHA512
c7264d42992b98867589038b7c80da774a8409f72c9a7ffdd89a035bb1c84e8c81f971a08c6a33801c6d28569d1dd4c6acbf5607712144aa185dc1598c04a242

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

Filesize
242B

MD5
d033e30204e81825be05230cf04a2cca

SHA1
7976fefcb27f90bab8997595c550900179103fe3

SHA256
12853981809ad05a892ca871675ee732f63d4306dc7da7f1a94b769d93c37b31

SHA512
81959d06a028fe9b9abae5660be55e46c8b1b1f9a17bc1768dc18b058291d52542838fcca75ff2637a91d3524645ab126ff8855875e43d4c352745d9fa5f35e3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

Filesize
4KB

MD5
da597791be3b6e732f0bc8b20e38ee62

SHA1
1125c45d285c360542027d7554a5c442288974de

SHA256
5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

SHA512
d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar2985.tmp

Filesize
175KB

MD5
dd73cead4b93366cf3465c8cd32e2796

SHA1
74546226dfe9ceb8184651e920d1dbfb432b314e

SHA256
a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22

SHA512
ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63

Download Submit