412bd88626d2abf2e14265d48fade8edb53e542d58066427fb2d13e14e218097

Analysis

max time kernel
136s
max time network
142s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 18:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

sample.html
Size

213KB
MD5

65a2f24451002e6cd955d2de6fa45679
SHA1

64da0da8045ad8694577f83082b285b50d9cc6d5
SHA256

473c1c3da2b7f211a15566cd3f8cf19530a11de4b76f001355514e9479031161
SHA512

f4d4982c92fb53d525b1e248dc66c0815b9d6f8fc5fd1aad8c993e4a62ff3b04043868714cec4f3fecaab57f1520dba07db2f608f4e8eedbc24c9bdda16311d1
SSDEEP

3072:SjYFomtF6/l3oAKmyfkMY+BES09JXAnyrZalI+YQ:SjYCa6yjsMYod+X3oI+YQ

Score

1^/10

Malware Config

Signatures

Modifies Internet Explorer settings 1 TTPs 35 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry	iexplore.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1"	IEXPLORE.EXE
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20"	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422909626"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{EDE9BAC1-1B8C-11EF-A1FB-E299A69EE862} = "0"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	IEXPLORE.EXE
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no"	iexplore.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1"	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU	IEXPLORE.EXE
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry	iexplore.exe
Key created	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	iexplore.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running"	IEXPLORE.EXE

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2492	iexplore.exe

Suspicious use of SetWindowsHookEx 6 IoCs

pid	Process
2492	iexplore.exe
2492	iexplore.exe
3016	IEXPLORE.EXE
3016	IEXPLORE.EXE
3016	IEXPLORE.EXE
3016	IEXPLORE.EXE

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2492 wrote to memory of 3016	2492	iexplore.exe	28
PID 2492 wrote to memory of 3016	2492	iexplore.exe	28
PID 2492 wrote to memory of 3016	2492	iexplore.exe	28
PID 2492 wrote to memory of 3016	2492	iexplore.exe	28

C:\Program Files\Internet Explorer\iexplore.exe
"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2492
- C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
  "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2492 CREDAT:275457 /prefetch:2
  2⤵
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  PID:3016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
bffe244c5996c37ee73d577be5a8cc93

SHA1
d4eb3c126b93446c5e60dc5be2f75308b14eec71

SHA256
f97fe9ca285024251b0777d37d49c1be360a9db4aef7bf270495f601c5d4f232

SHA512
decb471ba16be8a051a09df7c8e42838698c4e0cc6ba5cc4ae9e1ed90fd02cce6f3b71265bca0e20de684c53841d3591eaeda055d37a6e980489d8887c756bf7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
82e74e897d82a685da666cbf747aceb4

SHA1
85a1f6c847f6351f1d8f86bc468f2e2952ee4077

SHA256
19a66d06f7027810d2d443589a993814b2c9e95e2d02a8fb3eff619ab655b383

SHA512
b2bcc9f9be702e507adb37d6325a74961d04126507629c89ec3e399ac820c8a77dc4c91bb709ada9f49e9687e10545bb75e92ea7ffbe04d38fe51bff0133c9c0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2b82a998e41e92843d7c4c60f45d2636

SHA1
a691b591d917aaad23cd0d1c72b08a09e5b63777

SHA256
bc77ff2fba9c74faa38b8716ba20a40d8e2c209de0e428ee8886454370661d80

SHA512
c452b71d51beba812368f474e5061b3e9c1300c719f7da6c8a3f97a36105d66755b6a07d54568f879f2e39aa0eea542e59f955d6fa7556b87f0f4debda2bfa42

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3c400ed605fbc9cabd96a6f0c7cc18c7

SHA1
51c3d226382f0a6d1d9e72513997c89f03e446d2

SHA256
1e0c80f464f56bc68a847f5d8088d247568ace9f31ab37d66d53952613cd6c6d

SHA512
0cb836a569f5ad7c7f01ca7e8689a5df18a784436bb32668e1b2b4da6941c5707a957287d3eb56f99b2518cdd17199ff502764b0ca8a7b435bee8015aec8e0df

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
af9d0a9fc96423e83df0523d5d82e720

SHA1
71ea60ac722ac0f87dcb2599eb70bdf8a501d247

SHA256
33377e3ee8c127e8082d79db3be365e0be6bb7b1954a21d620de4cc6e6950785

SHA512
14ec20d06158d2d5a87c2098025e0868bea324311c9ebcade16f2ec1aced0f5793d529825b44ddde1d8404a7e8fc5ee41f9fec124d8ba403d2dbdd12b487ef72

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
8220c1a3c9a90791e1ec376c80886aff

SHA1
40ef9267b24040bcfb8a3068798b8eeb5a5d89be

SHA256
4cc154375efe2b943215d84140c01ecdc1f708a8c37d2a2cda8969eb386e829d

SHA512
f1fd577d6a19b416e0c5e516233cf99c457419ffafdc13bbed6da8fc022de6e24303011d635009497928b139da97b26ba9522628e6e48f357f7a00c37f82ebd0

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
96bf64e0f438a0bc84710242a4ea5833

SHA1
53ce994381345ec3cbed902bc23e5f54ee4e1f3b

SHA256
462fc12b274d40dddef439805bf1fc6ca80e4f99d4fa7981d3f6a08436e6553f

SHA512
80954cb373e19810155d0c0d3bde6b7515b39e1a32a7ae87002ca069829f02a2369192debbfb2d13cab71dae71259a5c7f2b6502b90885400a28cdf08167d963

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9b7770368b365e8a8582513e2c86e795

SHA1
76bd33b06aaaabe68bd5a5efe4b80d8fd84692a5

SHA256
8646caf8a5b845050febe4e8195c36392568790e3481f1d11dd4c93b40d1387e

SHA512
9dfed0c832b947611cb56659951543832983e8e537ab5f4dcfcbb0da85bc77509d7d7a0dfa63b6c8d87d79da4cb75b9ca78412376f3d29c9c7d0c5a9cd963146

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ddeb145c2777244ad98641481c59b0b0

SHA1
cbce86c4300cd7acd192c59efd26913da4b014c6

SHA256
7cb4854d9fd4cafcde2d192f90e5732bff309750510c62029ceea5cb3f623d4d

SHA512
d7912c1341eaef37661c534b13ee4977e17b29d5039649bd7653ba0dbd98e34e623e208c05fce0cc069db2646b61acfd9affa9cf00508abeb208c57801849548

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a812bc6a42932ec4c2a64bef0f938bc9

SHA1
ba93cf1393a252dcd4fdc6d7f3a7996a4276d8cb

SHA256
0ee85cf376b2e24147aed63a6a4a7016e7d9c38e49e321842c8fe0bb95cbc6c4

SHA512
0e22d9bdaf8a70cc574918169b8b491cf7129af927fa1900c98df820eec1f5c41682f7c91811ee3a3e202e3478cba4bcf50bde2cb457ec9f2f65df0bb0da5c2f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d28c4ffc28390ab8ca887052c0e3cca4

SHA1
756068e6502f8af6d4a93f88e1a3c3f59d82a2ac

SHA256
8495c9ba1bb19167070460fa74771abd798c86d0d5b48fa1a36582ffe096ed66

SHA512
29cb3bf5b7b8e90df3144721a2f4fb5c2481e33f01f57f1fb7629ae0d093c09afac692b9db2efd6951a51a0ae827ad67bc15b58cdbdc70d130b1cbc36b9e6368

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
16f3ecfd552b1f26b804406b718aac2b

SHA1
8208e28aeda9e6796c87bbc88be3a318e1e78a73

SHA256
9d56ed21f372d7dcd5920146d23054d0afa3824a407a68817765ae01aaad9b1b

SHA512
9363abe2e6e927662df757cd5f5e735a10b0be3df2a5890a69e8b69e58b0abe8f3b2b2f93ab668397dd8b81535241fdfc0c5efb0ad54aeedf58aeb0e7b51d6b9

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2ab156559a441c27127eac7e7606574a

SHA1
3986b2ba69a784fa806d2e1dd95ef78f26dd35a8

SHA256
fdcf14a8b7bc84ed066ca621ed13bc787da973bb5cf0dbdbc282cb83fd24da80

SHA512
349165d2e69574c9d59b22e5b4ba999e6bcf452a57db3ec048d1a919d831de9935e82497e3f4a23e9b8caf8bbb1c85f3895e745eb9a34d6e2472410c897391d3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
192ead802ef13a869697fd2567600224

SHA1
c1380284406715328036ae4c86f029389ac33cfe

SHA256
f6a936283173cae3c597fa6b7f5a8a4e30e67683cdc531e5521cc006a33c5db5

SHA512
7e161650de22c8afaec5a7e47607afeb1232589b31b561a919d5c860b57c4d938829423b2f2300b404f81f5443ae3be28352b30b77cf6c963dc922f139e84ef3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
acc64cf9d8d3b759e56ebefd45a50538

SHA1
03f5013d4ca839c7dbdf95e38da5a5f569b94199

SHA256
8309ddf64322969add5380c380644e6baf0f5404f66d10253825b7a7c66663ea

SHA512
7ac86c2902449a35fc433f64ef449fb1c1bd42f4499f215dcf008dfc63a58483c19ffdc47962250a702aef5d65e4f92eea7e0734e9bc6a075e7c26fa733e9bbe

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
659776cc3f8be5ee7de935c494289527

SHA1
3c08769ac1bc4a4e60b6f33b607ede93c78a9c8f

SHA256
760e475e05dc0bc4e7777695d48a49a1acfb51ff621367a7082dd7d60bd98b88

SHA512
c7b443d7abc3f6538278c81ac30cd2210cc550a3424f30d0cf91d0de6a8cfe4b662c863fc314dacd59eb6ccfa6fb6a00b338eadea65c3b40d96254568daf272a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
51e6c7bad9230f879dda1c9a7ae412e9

SHA1
2fbc89f858f35fde08f91f2ef0344223be110368

SHA256
fe79d7a32d84edd99fc45690eddb02058af9a5d44561c6292fa68ed79ff133fb

SHA512
4ff74b1a22b62c221d2de4c90f1449a39e04bfd30621cdfac10ac3b3a76c3c671f9950b9e2157260d5a352d33fe3116173fcccfd020a2f128fdce0380366f9e1

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
459463ca0543598c7f5c640191ac3722

SHA1
0f36f4e06d4fd273c365d04f3a0eb4bd5f0bdda1

SHA256
c83a5835efc1c55f8f61088cf685f8374629a044cb2d2cd4644385e4103c7774

SHA512
a2987790e6c51c16846aa95c6ba032ed4b2743b04879220242df67f2741a24769be514cfd1d142a7ca34f332300bfed2e5399e58337341a8582105344b853e30

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a6f07114492edb463d5fdae6248b8979

SHA1
e571bab9ff4263dd61ed8f797c86b1753eb4e4ca

SHA256
0bedaae35138b798cfe5e692bbf7dd772bdb4ed4da714606002810be407a5e68

SHA512
aded69f7a0e1f302ef32eb7c5d6bf26310d959eb16aa1b557a08c0eb5d07d7b1d98254ab893e2bfab2c16fd24cdbdcf10da0e97b89c98dc528f6def6e22d3643

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b0794d6ae29949da3623d6efd06d44b1

SHA1
1647fd64179a1772a134f733d2dabd78735cac9f

SHA256
c7f3854887e8c3162d08c802ff235632789b1998c4c82395011066e96b92b8fa

SHA512
f4125b188bdbc95381cd0c81b8555cf2610eb551989198abdbb1f07f6ce730f26d34607852c33d05a2b2b93b93b6a3a90201bf6f38a2a36a9e49cce9fb120a6f

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab7AFC.tmp

Filesize
65KB

MD5
ac05d27423a85adc1622c714f2cb6184

SHA1
b0fe2b1abddb97837ea0195be70ab2ff14d43198

SHA256
c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

SHA512
6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab7BE9.tmp

Filesize
68KB

MD5
29f65ba8e88c063813cc50a4ea544e93

SHA1
05a7040d5c127e68c25d81cc51271ffb8bef3568

SHA256
1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

SHA512
e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar7C1C.tmp

Filesize
177KB

MD5
435a9ac180383f9fa094131b173a2f7b

SHA1
76944ea657a9db94f9a4bef38f88c46ed4166983

SHA256
67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

SHA512
1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

Download Submit