5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
21-09-2024 02:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe
Size

166KB
MD5

62b25a2eceee57a891ca602ce29155a0
SHA1

e5e1d651924b2432e7cedc8e3abea0fea34bdb42
SHA256

5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349
SHA512

8a439bac3fc5790387e75aa1a7760517913b6926831f83e9b54e38c9c525b537a9a9c447320cc204fc47ab9d4eeced3196264b12effc9cd8af8496b369f68175
SSDEEP

1536:W7Z9pApQESOHepOHe8G+6E65dyGdykNdNBKggl7Z9pApQESOHepOHe8G+6E65dyD:69WpQE0zxgv9WpQE0zxgL

Score

9^/10

discovery ransomware

Malware Config

Signatures

Renames multiple (5083) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Executes dropped EXE 2 IoCs

pid	Process
2000	_Desktop.ini.exe
804	Zombie.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\Zombie.exe	5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe
File opened for modification	C:\Windows\SysWOW64\Zombie.exe	5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Windows.Extensions.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\PackageManifests\AppXManifest.90160000-0016-0000-1000-0000000FF1CE.xml.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Integration\C2RManifest.wordmui.msi.16.en-us.xml.tmp	_Desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_KMS_Client-ul-oob.xrm-ms.tmp	Zombie.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail-ppd.xrm-ms.tmp	_Desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_ghost_profile.png.exe.tmp	_Desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Drawing.Common.dll.tmp	_Desktop.ini.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationFramework.Luna.dll.tmp	_Desktop.ini.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\javafx\libxml2.md.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pt-BR\WindowsBase.resources.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\System.Windows.Extensions.dll.tmp	Zombie.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_MAK_AE-ppd.xrm-ms.tmp	_Desktop.ini.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Retail-ul-oob.xrm-ms.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019VL_KMS_Client_AE-ul-oob.xrm-ms.tmp	_Desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationFramework.dll.tmp	_Desktop.ini.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll.tmp	_Desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Client\api-ms-win-crt-environment-l1-1-0.dll.tmp	_Desktop.ini.exe
File created	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-debug-l1-1-0.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\legal\jdk\santuario.md.tmp	Zombie.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.ConnectionUI.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\GRAPH.EXE.tmp	Zombie.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.zh-tw.dll.tmp	_Desktop.ini.exe
File created	C:\Program Files\Common Files\System\Ole DB\oledb32.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\System.Windows.Controls.Ribbon.resources.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Standard2019VL_MAK_AE-ppd.xrm-ms.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\offsymxl.ttf.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\C2R64.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Console.dll.tmp	_Desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\OutlookR_Trial-ppd.xrm-ms.tmp	Zombie.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\ProjectProMSDNR_Retail-ppd.xrm-ms.tmp	Zombie.exe
File created	C:\Program Files\Java\jdk-1.8\legal\jdk\asm.md.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_KMS_Client-ul.xrm-ms.tmp	_Desktop.ini.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_OEM_Perp3-ul-phn.xrm-ms.tmp	_Desktop.ini.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Grace-ppd.xrm-ms.tmp	_Desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\ProPlusDemoR_BypassTrial180-ul-oob.xrm-ms.tmp	_Desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Drawing.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\UIAutomationTypes.resources.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\fr\System.Windows.Input.Manipulations.resources.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Trial-ppd.xrm-ms.tmp	Zombie.exe
File created	C:\Program Files\Microsoft Office\root\Office16\1033\TellMeExcel.nrr.tmp	Zombie.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.WindowsAzure.StorageClient.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_OEM_Perp-ul-phn.xrm-ms.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\WacLangPack2019Eula.txt.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ONMAIN.DLL.tmp	_Desktop.ini.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART5.BDR.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\mscss7cm_en.dub.tmp	_Desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\PresentationFramework.resources.dll.tmp	_Desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Document Themes 16\Gallery.thmx.tmp	Zombie.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\AdHocReportingExcelClient.dll.tmp	_Desktop.ini.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\UIAutomationTypes.resources.dll.tmp	_Desktop.ini.exe
File created	C:\Program Files\Google\Chrome\Application\123.0.6312.123\libGLESv2.dll.tmp	_Desktop.ini.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\msoia.exe.tmp	_Desktop.ini.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\AppvIsvSubsystems32.dll.tmp	Zombie.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.Quic.dll.tmp	_Desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Diagnostics.FileVersionInfo.dll.tmp	_Desktop.ini.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\javafx_iio.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\NewComment.White.png.tmp	_Desktop.ini.exe
File created	C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_it.properties.tmp	Zombie.exe
File created	C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-synch-l1-1-0.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019XC2RVL_MAKC2R-ppd.xrm-ms.tmp	_Desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Trial-ppd.xrm-ms.tmp	_Desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\SkypeServiceBypassR_PrepidBypass-ul-oob.xrm-ms.tmp	_Desktop.ini.exe
File created	C:\Program Files\Common Files\System\ado\msadox28.tlb.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Security.Cryptography.Primitives.dll.tmp	Zombie.exe

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	_Desktop.ini.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Zombie.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4896 wrote to memory of 2000	4896	5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe	82
PID 4896 wrote to memory of 2000	4896	5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe	82
PID 4896 wrote to memory of 2000	4896	5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe	82
PID 4896 wrote to memory of 804	4896	5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe	83
PID 4896 wrote to memory of 804	4896	5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe	83
PID 4896 wrote to memory of 804	4896	5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe	83

C:\Users\Admin\AppData\Local\Temp\5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe
"C:\Users\Admin\AppData\Local\Temp\5b40e3fc4bf2f9d2a2be6638fed001457dcce46f8ef0f25f75039c1cc6a0b349N.exe"
1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4896
- C:\Users\Admin\AppData\Local\Temp\_Desktop.ini.exe
  "_Desktop.ini.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  PID:2000
- C:\Windows\SysWOW64\Zombie.exe
  "C:\Windows\system32\Zombie.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  PID:804

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-1302416131-1437503476-2806442725-1000\desktop.ini.exe.tmp

Filesize
166KB

MD5
36e1eac99b05e63fe01f7a87aa343cd6

SHA1
330f21e3390479e45ebb599317af23b5eed41b97

SHA256
67a62b9182214ec1a19d085215e4c499ae89ee08f1055abdebea57c4cd3692f8

SHA512
9320c13d5865b2b030e4bb896c2b1acf46e0e15b16bec321cc8a8e83b22b47a35e37c4ec465a1e522103d577cf0e8b719973fec1790adc72f3670a5b52e23ca7

Download Submit
C:\$Recycle.Bin\S-1-5-21-1302416131-1437503476-2806442725-1000\desktop.ini.tmp

Filesize
83KB

MD5
148f6a508228acbf1c845fc08b387b68

SHA1
ed765d5b9f6be1259859787661c614bb23350cf6

SHA256
f2ba3d41249f0b5ee8f13c4da96cfbce22b6a1e922c1923e72236e9a6d6620d5

SHA512
185cbd734179f8b044f13d4a177cffe500c4cd6eef8f380ad1394ab343d0f19b48c8f1fec7f9d013912799f58b45a39ed63b4821f4becb6501858c2347356b7d

Download Submit
C:\Program Files\7-Zip\7-zip.chm.exe

Filesize
195KB

MD5
aea0c95b030c47d9974885a1c3349eb9

SHA1
0f5ec9afaa99e527ff49b5e3292419d79a83b611

SHA256
8d3b1cd6845470333bbad416679011ab918b8658b64155125e40c63f876e447a

SHA512
6c37fccfc60b2042a6e50cf6c5acc56691061704d127efffde2e44d0a62966410a139129918a31c2ac140adcd853682087900fd4ae34550ee7bba5f4ae664673

Download Submit
C:\Program Files\7-Zip\7-zip.dll.exe

Filesize
181KB

MD5
ec17253fe29a88aaeb7427c0354db272

SHA1
304f1c7eec304e4cc4b553fe2d20a789479a12b0

SHA256
934d26134a82a58932bab1ce66dd7e43bb4f3a62e708c8407b905e44a4970986

SHA512
2e83bcaa428baf45d97b54001bd3dc0debb98ce5d1afd56f27d67860415abbc31d5fc6927f58e93acbdbb1d87df05332f06b64ce57740e3692d72d2cff8e8b81

Download Submit
C:\Program Files\7-Zip\7z.dll.tmp

Filesize
1.1MB

MD5
2ed0556d2027c00f575ccb168d807c83

SHA1
61b6a739bc9b0f53bdf0433133af8d11aee9169c

SHA256
e9340889f2f203e076ddeac5472399e9334e988052e7e005aa262eea6978a337

SHA512
790f7633eb03b326cca9c6d8df1cca87c2e0548aaa580e2fe59499b1f8c90b0b1726f7102c42f068c6b985774fafa7bd298c61c7d941757b02d6dddfcf9e09b5

Download Submit
C:\Program Files\7-Zip\7z.dll.tmp

Filesize
1.8MB

MD5
3045443c8bc81240fddbb3fd89c17685

SHA1
77a73d851c3923d7ac5932bcf623002a8e2e60b7

SHA256
df5e487434c42003435341a26afcc768f01e86018d2e674fef577dd4bbaaa42f

SHA512
44ed7e2d5f858fea862e7fed7fce642468b8288b245dab1262b54583fcc6e249d5b576732d58f235e5da029d7234298325e407778f17072f80d81b7dfd579b04

Download Submit
C:\Program Files\7-Zip\7z.exe.tmp

Filesize
627KB

MD5
a920f32f133e0bbb597d248ac12c9f1c

SHA1
f4a4f8db10882eb41cc8d39327d9e6346d1448f6

SHA256
4d2f207b17474ad50b21b5187dc3b257520e9adaafee4a9b57d166d60a5a8e88

SHA512
01846fd02c273ce38c5a641b6d1680eac1c8a5b6d58f6d9d677a7ecd6e8c3aec274fc9bbbd26156dddbc99f2fdc6dc0d87bfc5ce7da638a0ffdb9f6f15b1098a

Download Submit
C:\Program Files\7-Zip\7zCon.sfx.tmp

Filesize
272KB

MD5
d4789c5581dfcfd5a83c76fc9f1f215f

SHA1
d23969419533b57be49479c3b55316061481f76c

SHA256
f30ef3af20cd33f107a30e7f8b2e7e86450621af1b899271353de073f4991507

SHA512
a1fbb3c1f1024f42e7371c1c080aae02a02a74dacac3df67caa674e8517f17924c6252705500068b29aa12df787231d5d2d42e65d40953357084df10cde7fac0

Download Submit
C:\Program Files\7-Zip\7zFM.exe.tmp

Filesize
1014KB

MD5
24603094e459cde6a1a1c9c72c711db5

SHA1
40b961532df1fc2753a3c4ffa86fb0dc64b2ec4a

SHA256
050172df9e90ff74737ad7c0aaf23c16f50edfe723de948c6908a54d0c52d281

SHA512
8cc147971589c121a51a9f09eaf4f369ff8dafbfeba371db7a4ec9ab1650ec38ce481cae8fbd2037d59f0582c23d15c3c2bf8dfb4374fb93ed56cf17d116eb0f

Download Submit
C:\Program Files\7-Zip\7zG.exe.tmp

Filesize
767KB

MD5
086d008d53ae28d7ac985ad298cba83f

SHA1
5784491d6fbd751bdb748e33efb55a5a8025efb0

SHA256
badad972014f3cba72b0b0374663adefba3a4497d47739c33939941da56951d6

SHA512
6be4666c55c82cfa6ef01f8b96bc35bdee592c455debe0c1e8b0d4eab1d4dc56d9816dd0770cdb288fcf4a254628eb4d8af80897bd6076ab07d9dd7a043321f4

Download Submit
C:\Program Files\7-Zip\Lang\af.txt.exe

Filesize
92KB

MD5
adc6b70d5967fb35cf37f2eed3c4307e

SHA1
9e0d2c78e0384439f9c2fa256c6ea13e9b94a578

SHA256
8c634fa8c463a3b49a56a44b912356ab0e7c50716f7e16d42ffcf7db4b1218da

SHA512
335308aad820f05f5a33bbc4fa0eafad8b0d9a806b15f7561b59d4a8afb4f53912b1fb859367e604814c5262cdba75c827c29289f067b0216af5fd9a1c668aae

Download Submit
C:\Program Files\7-Zip\Lang\az.txt.tmp

Filesize
92KB

MD5
40e29912ef744734405380faaa07d32a

SHA1
f5606047f27239cef4661d4aa6abea065202bf7f

SHA256
770fb88e6cbd4804c8ab7c84da61eb48c8ee5270bbd2249d7a78f9e16a9dda13

SHA512
98ffd33b29b95ab97ba707d31771424a4b6c3cb1bfc6e8199bd9e002f22c81612fd8f674f6755d0b919ef431a66b504199601b3ecbba42cece91ebffa90d98ee

Download Submit
C:\Program Files\7-Zip\Lang\ba.txt.tmp

Filesize
94KB

MD5
73d0cb364fbff4171e55981ceec7f560

SHA1
cf94758176314921ca241988e435d3fc1e4571f4

SHA256
dc59ef22aed78898e2d8f5a6dfff87f26f5b44ddbf18c9df6bde0be071ac793d

SHA512
cd370b87906421b24c1ed435a79ca487636fe6090893b7a986323194b6a6697225faf4ee30e3bda85979573115e4ba5af615b6ab883ca638ea52c5addd2b58fc

Download Submit
C:\Program Files\7-Zip\Lang\be.txt.tmp

Filesize
95KB

MD5
23130f412a313bab71d4f7931a7f7f99

SHA1
7ae015c8d95c07ea78012803b959548dcf6df3d5

SHA256
556468bdaa0dd1d099fe231c92dde8ea925a62f8991841d2a3f1db9d6a1c4a58

SHA512
4f3f7761cf209f33e909da7f54fdab81fd13b907f615ea64ededfb0003e2e78d2646f7c7645243f9039bcbcb666ef957de4149e5fe95d3480c41d818d0232b54

Download Submit
C:\Program Files\7-Zip\Lang\bn.txt.tmp

Filesize
98KB

MD5
a7c4982d543b7861eedb56c47752f313

SHA1
7dea5ec4acbf288dabd24b4a9deba3e530d45c8d

SHA256
cfdd6609d962cfd59509516f6c68488617d7e2fc347f63e1f242c5ca21b8559a

SHA512
70d5daeea4e04ac017c4065b751d87c902a00ead2911bcec8eeffc6b697d338e796493e4f57b94106f41230bcc8427c4a7e3197f4fa958fd1556ec5acd3d18c3

Download Submit
C:\Program Files\7-Zip\Lang\br.txt.tmp

Filesize
88KB

MD5
1d98aec0a7218ec218a164ea8f9a11ce

SHA1
277d566bec8f0d62d7b5fe2bd33cc98fc680a975

SHA256
6f81fd7bee41b9cff83eefde94e83ceee21f1f6f14886f4386095ea17beca4a6

SHA512
59f219ec56ff292a029b71a04ecfd8f7b4873be946d6745813a9a78e66a6f2a3a2af5f90101edd3c13c10060f6fb75ddd5aa7cf5a3d97a457972328da270223c

Download Submit
C:\Program Files\7-Zip\Lang\ca.txt.tmp

Filesize
92KB

MD5
1ad1036729c29e2f39e6e8c232bfdde7

SHA1
c882fc25462b4838132996f4c6d513ba21b704bb

SHA256
c8e245a52f77faf84cdd9ee82379fcf5e10984ed5ee40ee5a930e76a971247a4

SHA512
d8d679d5e0c39578f020947ab793090fecb4356bfade3932bc32eae6c003c4ac1a18d8138c3c0d8c43a01c0521d8b97c2701a9efc67cfd99aed74541182e5fb8

Download Submit
C:\Program Files\7-Zip\Lang\co.txt.tmp

Filesize
94KB

MD5
a45baa525fa27d64f09b24aed9ae8836

SHA1
25c13927cb53661869c07f872a4151ccee7775a1

SHA256
e4fa77bf308c43862ef48c3c55e24a6f5aec0acda7b3df46cff6581688a9999f

SHA512
3875181812a52676c49ae7b637cac44ccfe9f07098422751ab25c94a775c91920fc587eba5798af1f2540a0185b3f2a1bd10cb3a24e2a4058c1596d50ee477e2

Download Submit
C:\Program Files\7-Zip\Lang\cy.txt.tmp

Filesize
88KB

MD5
f196e905d8c38b990032ee8cf809ae86

SHA1
edf87105fc7918417a72afce1a47eed074c4ae81

SHA256
337fb20d4d6e480e04746a1ffb5b4df1cdbfb79984dcae4be0faedb07af21b4d

SHA512
77a0bef65b2e7edd4042a26e3750c8d4efd568df5d072f11c0e0a7be100767d5843e8e49272b0c340e67a6f03d326b5fed6ae7bdb8d1f4147ee80bfd3cb51655

Download Submit
C:\Program Files\7-Zip\Lang\da.txt.tmp

Filesize
91KB

MD5
90cec040b610950f73292fdbe108f721

SHA1
984e211888bf3974c97d745140fdf3b96e6c7cd9

SHA256
35927d9f895c3a6824c982908794ab85a2ed9af9bc8f25303ed5412a7ae2cf11

SHA512
086b0e0ff6868d415d768e558c1f9bc48102c5aa48165b67279000cdf34a52c2c28631fd363e6b0005479032b8a3400c4c8e430b335a26f2850bb5c72863c979

Download Submit
C:\Program Files\7-Zip\Lang\de.txt.tmp

Filesize
93KB

MD5
acce6e30b023e2e6107fd87025036ee4

SHA1
037e14e2ae5dedeec77391b5428fd8f7d3b3fd70

SHA256
a849c77a48fc5d7da83c6a3dad9938bb00535c5760c6c7caff8e3b641244b919

SHA512
0bbabd75ddc6648b56b5733a166d93b670ac532bd6c5d43470f549660c146f4a23ead527ef87a9d795c2c06259094df4d3891e87fa2a2b8a0fce84487c4df370

Download Submit
C:\Program Files\7-Zip\Lang\es.txt.tmp

Filesize
93KB

MD5
c2f4f42dc72d0872f4aee9a1c151f94e

SHA1
f58f3b192e78842e47b125fed171eef2fc4fc885

SHA256
25a560c5c26b6b4e3e5353822e22f5208aa1a51f10fc4830c7754eebf8593668

SHA512
96ca5515f55c12b2ad950988645d3a2f6e58ebfda9230f8f4a8cfe3b1e9ac4dbfb11093ef340ba6976510d4f45c9a0bd4754b15a2956c5f213ed08ae90867276

Download Submit
C:\Program Files\7-Zip\Lang\eu.txt.tmp

Filesize
92KB

MD5
fe5224b36f3db31a62145206d1621df9

SHA1
83614a068f787d3b01642132cec9a3e41962293a

SHA256
12f17a09ad9df9a5a939c9e8aa96979a71ad0da76508a247b753cd45f5c8e6c3

SHA512
6d6d95ddf928904431c01afb72769ad04c84ddc44cd1db7aaad4707c960e25e4b91ac5c320ba8234b48c114be946b4d971624f9a9331a0ed97c2d1d41f362e71

Download Submit
C:\Program Files\7-Zip\Lang\ext.txt.tmp

Filesize
91KB

MD5
be719794cb9f10c28cb187bff1fad247

SHA1
8772d5c2a48c01319412e42aeb5c13ae0073e81a

SHA256
9097e7b0c878c4ddc6d74048bd1caf06dbefcf7842fe4a26405a5124dfab772f

SHA512
786ffa25e4658629ad76e063fd11d47ce8d2ec0b339bc347e9781e6f9e6a8913574b41698b71352bcb59056215b2d7e9a6445352002f6f19268302c9da331e89

Download Submit
C:\Program Files\7-Zip\Lang\fi.txt.tmp

Filesize
92KB

MD5
f481d927045fbc3e1b96cdc366c63a97

SHA1
e3779d53b6183caa2a8daf074a5b832ea3629ed2

SHA256
0806c387b1873249505460d2fbcfed3154448929c18e6ce5b9e49409681a4fae

SHA512
757fca1790426c2415ac1aa26ab599b51579359db37bdc3a8352f84c9a70aa11be332756f7c8f1e11a493fed9e5af0f543cb92fdb9ed178e494ea41ccdf6c7ea

Download Submit
C:\Program Files\7-Zip\Lang\fur.txt.tmp

Filesize
90KB

MD5
0f3746ec4c418bd92c5a81761f1d6660

SHA1
18689ab8bb4c546c4dff7415f522b085934c90d3

SHA256
66f2513efbe35b9c00e47050d26eb8a65ad8bdd0d7c043a0e26f0a2940c6aa29

SHA512
9f75a6c898cb56f9ece9472c8711002c6b8269423a5cadcef2d74e4b4a0670ac3937073e6f82c419be9a50e13765992eba2c54c9b2fc23a56788fdb36be978dc

Download Submit
C:\Program Files\7-Zip\Lang\fy.txt.tmp

Filesize
89KB

MD5
dd76e154eec0aec041d6a752a0a1a0dc

SHA1
abe0019636afb073ebd895547eeba5c59141a5d2

SHA256
feb123c4357f0caacb7f48bdf7f9a5dd2235d77f3771d2d4b48976704d07a551

SHA512
f0e69db1effe2478ffeb5d3b0d67ecf87f0e16d2c1dcc2ffb197893d3a56ae557ab17d507c4df28205c131f32ef14b0bce43464e05d69ffc89187a746a83cba7

Download Submit
C:\Program Files\7-Zip\Lang\gl.txt.tmp

Filesize
92KB

MD5
27b84a1eb1b7575e6026e282ae6b09e5

SHA1
bed4a9228107e2ba329ab67e5e015a37093e942b

SHA256
b279eae57ea46e1f071ccde0cc4fb40cbc0190d10403175c698435aad4c9c03c

SHA512
e052fb4efff3739a4e3b7c1a0cb294a36703b0af08add8b99441f671110a5a085d4951fe56d7b2a54c4fc3c47855c3b8dc365afca204d2b5a679061327067748

Download Submit
C:\Program Files\7-Zip\Lang\gu.txt.tmp

Filesize
83KB

MD5
47e14f7d64a9a07385458e2ace0eba5d

SHA1
2889d278ba040965e2680f2d07d15f44385f0a2a

SHA256
ebd4a8e0074c5abbfc29ab0e897629e134ca065b21c6c1cc3a3d85e04fadf9dd

SHA512
fa3aa753004d0a278ecf4d777e140dd024f372738e31deb8a2e2e31a045558d92899c05840be812aef7fbf1e57fa18cc622e354d2b60d7d0076e90488c07589a

Download Submit
C:\Program Files\7-Zip\Lang\he.txt.tmp

Filesize
94KB

MD5
e09e1c298ac1115f964afd152b2c2f5e

SHA1
ef66776ee51aeacd89767e44fa8f32bedcbb9da8

SHA256
a2f1cdf438ba5ccff108c19607c66e13c28ab8e73a10c452698b8e87a6b6e47d

SHA512
f7eee060378fcd94ca967f8a975cf3b84f84cd30f2545a2b4f778e59c8502bdf99065c794317a4d9446c3154273c587210bfea922c6f0e731586ddb2681b8c0f

Download Submit
C:\Program Files\7-Zip\Lang\hr.txt.tmp

Filesize
91KB

MD5
d63a9c75a035208308c08ebf1622bcbe

SHA1
6023a7b9a6080632ecdd388cb27722c9e92decdb

SHA256
521fe37c58fe3953181e36a7b686a44f635bd73d6003d21b163a703fbc1847a5

SHA512
d42f95fa931131aa5514bd19f4e93ba185a80280af7b5c4cd5a0f1076fb9232e4a450dcabccea3be3dda7a1fcb48bec16abd1ef66aea5e2f737fbd552468b101

Download Submit
C:\Program Files\7-Zip\Lang\hu.txt.tmp

Filesize
93KB

MD5
054199c16180353e53a3d3d2ee5c175f

SHA1
2045ec217a62f393a08f5dc4ba0a94493cf8d04c

SHA256
6a72f4f08c8974baf7ad49ddd9fe0a3d9d511cac334753969b491120bca1cb15

SHA512
e2164802c4ea85ae113fadb275f2e5112637027380765fad6d0f335982d480500f7dd23b9df5842561042b09c47fd00383c9cdf9f8cd1e19ec3d8490155a0e61

Download Submit
C:\Program Files\7-Zip\Lang\id.txt.tmp

Filesize
92KB

MD5
c6f20e04524a3802bc1847e971e21cd0

SHA1
3a965ac1b43c2a17b31e491a405be8ffc013ffb6

SHA256
8fff09d33621a8e67a3a6e4cac6ffc4dca3865401f436f833efdaa7ed6880c9c

SHA512
08fa5ea54055ac36941016634b93924eafd2286405e663b99afedcc8906d7270d050604eecf7ed69ee237222ec91cdc7a1744f6e0fbec4d2009ebdc0d337c119

Download Submit
C:\Program Files\7-Zip\Lang\io.txt.tmp

Filesize
82KB

MD5
ef22b6627a2b5fde4e855428afb802b8

SHA1
67960819e1926b12858821422cfc1cd24f2e0be2

SHA256
655ad377fc7bda9fe2cd71a3c2adf4ebc880981efc2eaf13021ccd35dedc16f4

SHA512
efe8bc6e4ad6ba0af55528eec7b9aed5b3ce57b8f95f79e79f3f857592b51c276d051b1408b3c9a0c8053c4b985ecd5803df2e273f76799e46cd0af12e2aa0ac

Download Submit
C:\Program Files\7-Zip\Lang\is.txt.tmp

Filesize
92KB

MD5
042b81594bf9985eac64ad835b541871

SHA1
42cfe81c9e3ac1d4d9446899107ac70e146aa288

SHA256
479e12532825a5f585bde2f0ede946610347660aea52421f4541bed75e9ee9df

SHA512
85cd30571c887fcbfcf814927a15a6dfb21444217f60317de3930e53286631250c0c24d3792f36e924aa714fddf1cba1c9022ab4fb5ad62a93c4e482f9094d46

Download Submit
C:\Program Files\7-Zip\Lang\it.txt.tmp

Filesize
93KB

MD5
ea8417a3ab22567a732f7059197c7541

SHA1
1dbf217ab4acc91350fa6eb81be117588d9d94a6

SHA256
e2d69cf0c1c11559d12002b3ccca6f172dc28199935855d4f0a2ae202e326ed2

SHA512
456ee66e5bf18ab01266a8e09537219f35633181f0efa156c89bf7595c724f51b0afba5bd6c69dad4b1fb4ddc6012cdee74bc7694e853bbbb726687815a299a6

Download Submit
C:\Program Files\7-Zip\Lang\ja.txt.tmp

Filesize
95KB

MD5
2d1a9e8ae9b50013cd52662773c73317

SHA1
a8a7f20d65c27d9c18894c0fb73e93fbdd292875

SHA256
b55de15d3d5193cec7345fa40958781e4ae856bc33dfbc8c8ba165a451a698ce

SHA512
a7610410e24b5021fbe067c2adcaee2d8507a27f202a61d7e3f57c2a879dc3122067b24a4e5bf24dc777dd6a8abff11019707c6c9e6221c38e63995e6dc91c75

Download Submit
C:\Program Files\7-Zip\Lang\kab.txt.tmp

Filesize
92KB

MD5
715506550c47086b3b93dec0a447a06f

SHA1
2d187a8730677a8820709d9039798c1fa871b153

SHA256
ad581dd108d9600acd87fed2dd190ea310933d549008d4240fa916e0944ef234

SHA512
84ad7e6f26605a5d6c0665cf915148b28b7e5324e1b2e88b2df15371c1042d0eb78ad45d66540820abdfac2d1874076ccb7d58c16b330859daf42f4d959c3d21

Download Submit
C:\Program Files\7-Zip\Lang\kk.txt.tmp

Filesize
94KB

MD5
3f2b184eb5071b1a4ccae6d81f7be9dc

SHA1
f609d5dae80bff0b2dd92a92f82b721f59dc6de9

SHA256
9d5f1c34f30ce75854237974ab425e9afdb87169169f82f1981b61cf876d0082

SHA512
8bcf32ecf8fae8cbedec86fdf30b892dec412dc98a05f8a448c245042804c4093e626c3873a36a251c4af952e5086a76fe65ccaab0e49ccaff8f0c4acbb2e10a

Download Submit
C:\Program Files\7-Zip\Lang\ku.txt.tmp

Filesize
89KB

MD5
4e3887c527eb6e2a63fbda0254dbac20

SHA1
e4d234ce8ba0cea6bb50c8038e304583eb020ca5

SHA256
75d27f62f542a03d416c3d523d5c1964a71b0e20ce3fba20b7950649699302fe

SHA512
256b8997c58a643ffe485dd175ae3fd8845ea980ee461771cca5e387f8c7581b16a496975090b88f9b863623df135fa21200cae67c235466cda8e17f71a08019

Download Submit
C:\Program Files\7-Zip\Lang\ky.txt.tmp

Filesize
95KB

MD5
abad00d781072091c41a59a6b05fa0c7

SHA1
b84018b8cb466be3b96cb1970e14a7e4404fde6f

SHA256
fad9f32adc7a5af131c1c732ff380e25b40483727a3b22722fcb0952c14ca09e

SHA512
5d72c5a718012dbc5ceb8015446b1262511e721448f92d4c3410c8e68e032ed35cc2581a6be66685f666471f607f353af18e96c7e72a686c5b9bd2cd3a5a2723

Download Submit
C:\Program Files\7-Zip\Lang\lij.txt.tmp

Filesize
91KB

MD5
0e4abddb0d467bfb3088326b53ebda62

SHA1
bf26c188500d5cb1be5e6b57cb9a28b39ad2d551

SHA256
fc49957969e9426e2aaab8627244c8e80396222fcc5e93e6789e7b23b21cafa3

SHA512
b895c7ed6a2986cf13044b15cfb36788ca324a2f8c683531e36d9e8b3903ea9960d7b390e3d0721ef58cbcf5ec44263763537a1b00706ba2aff102b4fa5382ab

Download Submit
C:\Program Files\7-Zip\Lang\lt.txt.tmp

Filesize
93KB

MD5
7f77738735f79c8d38481688e6d8e250

SHA1
2e1eaef89fe8d17352caa4f1e0c398532fee37a1

SHA256
3edc74573bca53c9778dd3c613ebb96d35ded538fe97ba369b07eb2cde890ad1

SHA512
3e24f0c12175668bed3b003fff1532ad0a6a020dcf05e6e1641570c26ec38bf29cda4eadb8096e090ec15ff2733936f62eff16294a5b7a354e716d58c87d5b36

Download Submit
C:\Program Files\7-Zip\Lang\mng2.txt.tmp

Filesize
104KB

MD5
26023aeafc16593e3fabe287c7824a47

SHA1
a68eb49834ece20e6409a068766ba793211a99e4

SHA256
1a148a2ec39c6dfbeada8d5c3c4cbd9d62d84b187ac43d82e3787df5f01ebc60

SHA512
33ba17607ade63fd9e9e8cdbffe57c84cf42bb16dd39d5911d99a5e407a5184ba16f9eb5dc909afaaa79c40aaaeeba864ee1236e1c005944fcdcdfe99c85ec8d

Download Submit
C:\Program Files\7-Zip\Lang\mr.txt.tmp

Filesize
94KB

MD5
98f7772e5219dc37e9a288a8b3ba7eeb

SHA1
1f6d87789e6afba0e5dc3b93b43e559647aaaec0

SHA256
ca6bf837d05fa9b9d758b82196befa3d20ecb9606b84011b1674adbd249eb9b8

SHA512
08efc1befd47c12d120ba8ff92f54e0fc8975c2a75d6692588b3b8ff871d70eece2e06e6df1fe79ca1cfa520b6bd600b53498e5ce02ef988f4f3767e046a355f

Download Submit
C:\Program Files\7-Zip\Lang\ms.txt.tmp

Filesize
88KB

MD5
c0db73b3cd3964891d2bc0788a0c8e74

SHA1
8a6faf95de63d6d4e470e06eab1d8c14f370faf9

SHA256
c43d4158ac3f8cab6b4cf8be422b59c6c96aa83e28f3ba3fa21371277bfb4208

SHA512
32f7fb71f45b7058b6ecde44d89609b898d32d1ea6660f12449ad42e15449131295b4ddbd536cb6a8efa4a091969fcab56fafb66472735bcb5ee2ae2c3d106cb

Download Submit
C:\Program Files\7-Zip\Lang\ne.txt.tmp

Filesize
96KB

MD5
8d97c9c80dd76b6e2bb89d8844551f83

SHA1
8c22baa5eb7af2924b4db3aab6fcf3ce81013c6f

SHA256
b5958f6fe6cc5bf7822c3bbee1734f79c86fffb950b74b251966fa176ac5c718

SHA512
74405613ecf90e74315a0312a08cf8c31b9fcb1a43767b1de1f591762f30dfd26b4c4cf1028dcfd33b4fcfca52b52be8147a77f86bbc76fe33f78076dd40aebf

Download Submit
C:\Program Files\7-Zip\Lang\nl.txt.tmp

Filesize
92KB

MD5
58200a7ae58acccd1b35e11d362d6eca

SHA1
8291fc3d30707559325beda5942c4820e1df2444

SHA256
358e8e30583f8521772abfc13109e255f7590e57b6955e7ce847f39b5f97041e

SHA512
273289c4727b0a1b60a96efdf3af5508afabbf393016b904bcd0e2899c830931f6ca5d0b57756261a3453357d41f3d90126226df7c64b368c35869c366571c96

Download Submit
C:\Program Files\7-Zip\Lang\pa-in.txt.tmp

Filesize
83KB

MD5
a24f3c4a3674527362772078c4201ac0

SHA1
3c7b9a4cde324237d09a0170ad85955ae1e76574

SHA256
330ca633685e761fd11791578d042be491bd68072c093505f4d23dd4b686bffd

SHA512
70f850c2e9409455634377ecbc1d350da8ab68b7b8a035290063b4cddeb6d6bd11de2358396079ee414c6a37a77a6ad4c2e572e50a33b348d6e00ebedb26cedf

Download Submit
C:\Program Files\7-Zip\Lang\pt-br.txt.tmp

Filesize
92KB

MD5
625a61159accb236cee3ad2ed765eeca

SHA1
08d3f6be903040881fd04b271d101a578b2805bd

SHA256
d5f47b6e21218641c53bbbcdb376ae9a25c29b70d15b06a49a758a052aa75136

SHA512
174d27c32914fc26f83db8b2b819b2a444ac3f555365ecbb5ce5ff58a9e77520aea74c274b4e630b37288db49773b4ff3db08b3d44931b188151055d45546b50

Download Submit
C:\Program Files\7-Zip\Lang\pt.txt.tmp

Filesize
93KB

MD5
0a0c005f3c52f250905de4ed8a8286cb

SHA1
b2b1565a1c53f4d5333ea891739af1df5632a633

SHA256
33e3b6144ee26c75998012d636cbcee153030d47de496c22d993f0bec0b2c24d

SHA512
9a21958475ed454009fb3f1ac3609cf2966b1455dfe4d7b131d743a81045fd7e5473c4b321faa521ab5d8be0b2def862b2208b755bca3a86f560812fccc23801

Download Submit
C:\Program Files\7-Zip\Lang\sa.txt.tmp

Filesize
102KB

MD5
a6474582d6431f480c95388db0df8d9e

SHA1
fefc25413609af915addda88bcee4b070a2a42b5

SHA256
f53fe6b6f36c1477866e2a4a9fd69d2cb4dd17a33ecbdee0111352b781fa4b81

SHA512
9a9317391f46d3772bdc87d4a66109fc19f871754c24bfeac06697c20d1f540921073570e202b5686784f28794785668876073e702cf410ba1aef094622a8b4e

Download Submit
C:\Program Files\7-Zip\Lang\sk.txt.tmp

Filesize
92KB

MD5
a898fef5e885ab31b996dfa177bb84e7

SHA1
703cb12eff4161e4414d9db41d6892fcce5a7e7c

SHA256
67ae2fc10648dbc885f5b9ddc11ec5e62dd46fdb5342c16a6c1df09e2f6556b6

SHA512
fd00e1352675d411536fb712a03e99b187bd6fcf8bd77ee962cfbdb3eeeaa7b6a81e50b931dd77c271555b7a2e7ed3e227df1071d437c8f14567ae408da15204

Download Submit
C:\Program Files\7-Zip\Lang\sr-spl.txt.tmp

Filesize
90KB

MD5
48da3a492c2251c1160227dbf43131ee

SHA1
476b467ff6bccc217490c56a870f27914be3dff7

SHA256
86018934917ccbfecf8b0576258dd2075dae47344b631917dfc22a4022eff0d5

SHA512
1af09ff3f2530a06d7392b32970ab5f32fdacb5dc330e998461df21ab9798c6bf82e2f887cf25c8cf3dde46db744d64053d88d9c19c1db1f2937cef3f2feabf2

Download Submit
C:\Program Files\7-Zip\Lang\sv.txt.tmp

Filesize
92KB

MD5
0ab3ac924f2d6a9c1a47f80dfe5774b9

SHA1
a8d92767d59a2f2d438f5b951f812610a41344a2

SHA256
33261f4a5322cef0fb0804a27b0cda6614c7b3ed2208390839badab74f6fd5cf

SHA512
cfff7b5c472b574b86a810a3174aff28af54d35d06ef658d51d4dd521021599e7deb028ccc484173837848601e0bb2f4fef5f4b57eeaa2790f9c8b84bd328538

Download Submit
C:\Program Files\7-Zip\descript.ion.tmp

Filesize
84KB

MD5
48a39c6ed2f8c60a64f3fe069bc09392

SHA1
478387847df9dd2735abf63c21ad149522ddd948

SHA256
3f5a394d20a4329f2ef19b2c0ba6549f11c96c006cbc56ddf2cc842ebbe76706

SHA512
79546da7311775797f553ef52ed77b9f37786956047a669c41fa31f950cc6336aa883cdd2130a2783bee0a6aaed14e3dec8967bb586ce3ea506b2d86fda464aa

Download Submit
C:\Program Files\Microsoft Office\root\Licenses16\AccessVL_MAK-pl.xrm-ms.tmp

Filesize
93KB

MD5
9328b1f5a1f3b48829eac8e8e018dba8

SHA1
a2cbe1ad4d75a919387062b46b063ef0248d768d

SHA256
27c201f5c34a82873530bed0f10e0e5acc43b83ca6224356dd3bd4870426a1e0

SHA512
f14974dfd2ef7a312d6d9225143d1f7155f8b098bc24275c01a50ff8fa3ed14b7b3bd7be2e245af4a6ca3bbcde6171516bb1f9de1fc9e14d48e65613f3ab6e47

Download Submit
C:\Users\Admin\AppData\Local\Temp\_Desktop.ini.exe

Filesize
83KB

MD5
a50d5dc0241ad63f32aca0b352499c4d

SHA1
c832e2251ab9c30c8c619870b479518a8529d748

SHA256
fa545fc500a863f3b8790fc27f32094027fbfa4cc88f32b08ceb469e126335b8

SHA512
64252a9f0364e3cfd53247517cd553fc27d82024a64ca04ab066bebf6853995d76aba65646964180e4c38a237ae12f824f022c3c63c618ab57059b1d823dabc3

Download Submit
C:\Windows\SysWOW64\Zombie.exe

Filesize
82KB

MD5
90e367595cc6dacc7569e8a8b7899655

SHA1
3b754d96924b1821b3ef030d822fb5b55e54a564

SHA256
ba8de2b30570d6dae2bd731a432c2a68d994e9e9cf88928a570088e69b1c1b59

SHA512
25b6204f81fda2ea205d8b8ba7419e224efd62d425375d8931594d1e19a75cf147d94443c48f081602d98f18ac97c2d5513a9c102f587d9971f88b91d429e9e6

Download Submit