1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26

Analysis

max time kernel
119s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25-09-2024 12:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe
Size

155KB
MD5

0b5348054ad9a1b0e7f1b2115f1eaef0
SHA1

3c67d6d0a7fd6fc06938c08ed07a9f9f086b7bbc
SHA256

1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26
SHA512

7fa135faa3de17a0565d11e8a19a9335f484512114f7d55a048cef37c247582145c5b43aed03fa791ac9fac439fa6f814c445ea419472130029ce69da6715c6e
SSDEEP

1536:W7ZhA7pApvOsOKM4HBhaGwOQ54xEIjlwZ7ZhA7pApvOsOKM4HBhaGwOQ54xEIjln:6e7WpRaSljCDe7WpRaSljCO

Score

9^/10

discovery ransomware

Malware Config

Signatures

Renames multiple (4658) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Executes dropped EXE 2 IoCs

pid	Process
384	_desktop.ini.exe
1528	Zombie.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\Zombie.exe	1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe
File opened for modification	C:\Windows\SysWOW64\Zombie.exe	1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\glib-lite.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Fonts\TrebuchetMs.xml.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Grace-ul-oob.xrm-ms.tmp	Zombie.exe
File created	C:\Program Files\desktop.ini.tmp	Zombie.exe
File created	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-memory-l1-1-0.dll.tmp	Zombie.exe
File created	C:\Program Files\Java\jdk-1.8\jre\lib\net.properties.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Grace-ul-oob.xrm-ms.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART8.BDR.tmp	Zombie.exe
File created	C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-140.png.tmp	_desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\PresentationFramework-SystemDrawing.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\123.0.6312.123\Locales\it.pak.tmp	Zombie.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\ext\zipfs.jar.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Grunge Texture.eftx.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ChakraCore.Debugger.dll.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.el-gr.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Runtime.Loader.dll.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.IO.FileSystem.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationFramework.Luna.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hans\System.Windows.Forms.resources.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Java\jre-1.8\bin\glib-lite.dll.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\Java\jre-1.8\THIRDPARTYLICENSEREADME.txt.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-ppd.xrm-ms.tmp	Zombie.exe
File created	C:\Program Files\7-Zip\Lang\fa.txt.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-heap-l1-1-0.dll.tmp	Zombie.exe
File created	C:\Program Files\Common Files\microsoft shared\ink\fr-FR\mshwLatin.dll.mui.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Quic.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Xml.XPath.dll.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\UIAutomationClient.resources.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pt-BR\System.Windows.Input.Manipulations.resources.dll.tmp	Zombie.exe
File created	C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-file-l1-1-0.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-process-l1-1-0.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-errorhandling-l1-1-0.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Retail-pl.xrm-ms.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Diagnostics.Process.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\UIAutomationProvider.resources.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\Java\jdk-1.8\jre\lib\security\blacklist.exe.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription4-ppd.xrm-ms.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription5-ppd.xrm-ms.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTrial-ul-oob.xrm-ms.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectProXC2RVL_KMS_ClientC2R-ul-oob.xrm-ms.tmp	_desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Office16\1033\WordNaiveBayesCommandRanker.txt.tmp	_desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\System.Windows.Forms.Design.resources.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\System.Windows.Input.Manipulations.resources.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest2-ul-oob.xrm-ms.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\MSIPC\ar\msipc.dll.mui.tmp	Zombie.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\Microsoft.Win32.Registry.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\cs\UIAutomationClient.resources.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\PresentationFramework.Luna.dll.tmp	_desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogoSmall.contrast-white_scale-80.png.tmp	_desktop.ini.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\PresentationFramework.resources.dll.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_Subscription-ppd.xrm-ms.tmp	_desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-black_scale-180.png.tmp	Zombie.exe
File created	C:\Program Files\Common Files\System\ado\de-DE\msader15.dll.mui.tmp	Zombie.exe
File created	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Dynamic.Runtime.dll.tmp	_desktop.ini.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Net.dll.tmp	Zombie.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Windows.Controls.Ribbon.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\123.0.6312.123\Locales\ja.pak.tmp	Zombie.exe
File created	C:\Program Files\Microsoft Office\root\Client\api-ms-win-core-localization-l1-2-0.dll.tmp	Zombie.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-180.png.tmp	Zombie.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\lv-LV\tipresx.dll.mui.tmp	Zombie.exe
File opened for modification	C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Data.Common.dll.tmp	Zombie.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Grace-ppd.xrm-ms.tmp	_desktop.ini.exe
File created	C:\Program Files\Microsoft Office\root\Licenses16\SkypeServiceBypassR_PrepidBypass-ppd.xrm-ms.tmp	Zombie.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-core-localization-l1-2-0.dll.tmp	Zombie.exe

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Zombie.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	_desktop.ini.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1932 wrote to memory of 384	1932	1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe	82
PID 1932 wrote to memory of 384	1932	1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe	82
PID 1932 wrote to memory of 384	1932	1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe	82
PID 1932 wrote to memory of 1528	1932	1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe	83
PID 1932 wrote to memory of 1528	1932	1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe	83
PID 1932 wrote to memory of 1528	1932	1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe	83

C:\Users\Admin\AppData\Local\Temp\1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe
"C:\Users\Admin\AppData\Local\Temp\1a48300157af7c7edcf8b8bfce554ecb7a2786eb69c262ef94677e6ecbbfcb26N.exe"
1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1932
- C:\Users\Admin\AppData\Local\Temp\_desktop.ini.exe
  "_desktop.ini.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  PID:384
- C:\Windows\SysWOW64\Zombie.exe
  "C:\Windows\system32\Zombie.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  PID:1528

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2718105630-359604950-2820636825-1000\desktop.ini.exe.tmp

Filesize
155KB

MD5
ae83a6bf3c42568557dd76819e5fa9c9

SHA1
7e40d5043b2aac95d59822eebcface38b236e02a

SHA256
901ffe8a52215faaac8379c9279c41c60a369f6bdfe48c5edecdec6725d5d736

SHA512
c01f85700dce22a5d8ffcc342a980bc75d5f2ec0e72ada93790810c7d799a2fde1a33ff2c61a8b3b94539bbfc448b5e7a20df3422ada9d8c721ecd3db593a255

Download Submit
C:\$Recycle.Bin\S-1-5-21-2718105630-359604950-2820636825-1000\desktop.ini.tmp

Filesize
77KB

MD5
b2b6756c38ba6cf4624ec7668b5b1049

SHA1
398653aeb0d46ad26c734d47b43a7d0087ca3eff

SHA256
aa38611bdd774671bd5543cde9fc6b086ebe2d5ac7413f65de9355c2964ebe70

SHA512
033dec21ff3807bd32191b4eab1c58e57ba71b1639c14a88fd4411b5049015af1eac3345d40dd35d0e228f81bb13041039afe9a04368a3b0426dcee88440d9ae

Download Submit
C:\Program Files\7-Zip\7-zip.chm.exe

Filesize
190KB

MD5
3c6d34aea9580af2c96cf2744fffb185

SHA1
d6ff110f522b228a145f5041bed8df9ca6564a78

SHA256
80289d5fe3ef67c73989f51de8d0faf7778e9a847d760c9918cbc73415fe0a6a

SHA512
560856e583b9dd1b095a358170ec3fef7453f6d2968f145db6da61adb93357e2d5174de4e3060a17318c98e9f9c41d81f7e874d64dcf835a8e0a731a4fe6af4a

Download Submit
C:\Program Files\7-Zip\7-zip32.dll.tmp

Filesize
142KB

MD5
068cb45ee81fdf29f6c9b0184f254808

SHA1
5cc176b7792328bc982a21c32ea1e9bd9d65fd27

SHA256
9cc3207e2379b4fed990340ac1be20089a9f1bfcd49e584db9070730714502d3

SHA512
68a20b5e3345e5451011f55dce06e5d3edffde0674572c8451f0c40fa9a0dadd0085a2ae08a02c2012c729f3792db85b0948cbc74821444d219e831999eb6a8a

Download Submit
C:\Program Files\7-Zip\7z.dll.tmp

Filesize
1.4MB

MD5
60a3484c4f6c2ba5da8e99e4d6284cc6

SHA1
9274677514f2d3c260205fcd334052c367076fa9

SHA256
a37713a4c0e8122218784c449bc5bc8ab2818c6b7b1589982eb9a81146baaf63

SHA512
e77d4a451cec883aaac9c5bb9a48e9a0230521a43372488c7180497893a809ef1677d36a70d92a1a8dd44065b2dc57afef7bb3120f58cfd2f3b2be5e7838706e

Download Submit
C:\Program Files\7-Zip\7z.exe

Filesize
621KB

MD5
c6116a2c1b7f194d6e31166f51e4d89f

SHA1
a439dd1b2340139176c368557d4f0a56789a77cc

SHA256
ad0c0991f68fd726ce29c0a51a1ba2d61adbe77976092bdc0d6bb17f1ba024c1

SHA512
d9096a982fd481e9f859f5aae0d93efa92958ed3f017806af354c16c9b05bdc7d545da3ef946861d6c3b6c9c3a0020a8606c7cbecdeb1165efff94a8cf1b22cb

Download Submit
C:\Program Files\7-Zip\7z.sfx.tmp

Filesize
287KB

MD5
36124d6d44fdddde496324843a1b7253

SHA1
1df56b7a32f12de12d8e8e4a3c0976e9d11a8226

SHA256
c9a11ad14bb04d9e33173e01bdbc081371ce130a068665af5e1d9e27611c6161

SHA512
862ca9836523967e8b3e600bfb892021cb3164038baf9d420785db6cea229ca638b3ed5deeee1ddb6d465fd91ece0e7d44838df5c5497cdbe233e15f27efa414

Download Submit
C:\Program Files\7-Zip\7zCon.sfx.tmp

Filesize
266KB

MD5
e1401a5a61f6fd42ff53f30ce0ceba43

SHA1
5175e834bbd30664ba7d4d9aaa4bc204bd2b952c

SHA256
d2b7c7ca033714aaa0fc88c3e73a491211471fd9b3bf6f393f486df5cb97222e

SHA512
54664000ba9569cc4e523ca2ef0cb6a2716d9c640a002985425fca0c6e0fcdc9273ffd032112582a20e7ca4cee8e72ffe0687c4d47aaecf9362d3af36b1519cc

Download Submit
C:\Program Files\7-Zip\7zFM.exe.tmp

Filesize
668KB

MD5
69f80f89a688d3cb685520858bc3befd

SHA1
b92d6b8290a8f667d4a8b9e2f8bfb01f98955a3b

SHA256
6db9c358253c9b42aa3e8b18dcfaa25794615ab49961b770130d7f2ab3942fcb

SHA512
79fcaa776b5548cdc3f5c6709d75dcde741ce0565aef16d5a3c00173b3474b60d8a35352c3a5a60a34d1db126dd5484b30c1d578bc433d3f7e6772c293ab0171

Download Submit
C:\Program Files\7-Zip\7zFM.exe.tmp

Filesize
1008KB

MD5
92f0befd9181dfdc5e75af01f6f0bf60

SHA1
b3f1a4ebbcc5d5f110150d55495ec08771078a4e

SHA256
9352a99f41fee1675a92059db6e47ee341214d6637e3cdacecebc1a1367b5b64

SHA512
ee83775c0e0f3e5676a2b018942d0f6abc75652d3c8549c3c589ca46aba9a1b30a8a9bc8f7ca42b716190cb224bb4e0f4a29a9e76437997767f44515fd333674

Download Submit
C:\Program Files\7-Zip\7zG.exe.tmp

Filesize
761KB

MD5
53a1f139d728c10c40d45553de127fca

SHA1
d5fde2653bebda0457a1439dd790ceaea980f891

SHA256
b440a373135c1deb0ca09a0d142efa2e2f3052319dc183c5e2923cf1dcd4ef3f

SHA512
ba81c3e9c2dff6bd91af97553424ac9becbb8fae0b46b9b537638ab1c38a513ae6441809403492f4d31c906095d5cc1894ab44da8d35977e0291be48dd9f9c35

Download Submit
C:\Program Files\7-Zip\Lang\af.txt.exe

Filesize
87KB

MD5
54b9539a38f614ac607ab38facad7c94

SHA1
cb9258a3b75a57896eca1f3a38b3e36c88ca8f1a

SHA256
1468bfde85975bd302415a69079b7b4d7857be50c43b6a4e14107a7aa4551e5c

SHA512
717f7a8070bb0357d0c9b02c20cc894695d5986bedcb14ad268780009a69f6e27ebea08066df8232417729073ac6678baee90168289cb30d0354b30f3b7c8eee

Download Submit
C:\Program Files\7-Zip\Lang\an.txt.exe

Filesize
85KB

MD5
ac44b84eeffba85f8e08685e9d470a99

SHA1
5c23d78623e7ca2766c3f2121a28f875f2b21c03

SHA256
5c8cf587e2fae013ba4a5341fbc2847300e6b6630a70910511c381cf474cb71e

SHA512
b84c448c0c95ace46586413be4f98de6deb36bee2a3ba7a3a8be680763e96db7894541d80982ffc7db559e979ecf0b07cba72e4814eedf5906aaeba955dd3e16

Download Submit
C:\Program Files\7-Zip\Lang\ar.txt.exe

Filesize
90KB

MD5
f0dd1f5a990a9115b467dc652d4d5f8e

SHA1
568edc234898d57da8d74806a3a07d8e4818c339

SHA256
689f6cdcc3ff7c8f7566daeb83d8dd9e1d84c05cbce16f2a92f34a77fc37d6d4

SHA512
1b845bb2a97160c111b4aadddfdb6524208117184293434acf222f682ca9a8fe89f523b76ba60b5d6297f51af6d5b8a38a0c984d2d91aca04285538cb6ebb0b5

Download Submit
C:\Program Files\7-Zip\Lang\cs.txt.tmp

Filesize
86KB

MD5
4a713edb43650ce310882432563bfa44

SHA1
1cbc4a9b5d14dbfce93819ad61fe455585dea0a1

SHA256
e436e54d2f10ec38b2e570dad0a6d2880ba15a0fae2223d5de615f9070cee5a8

SHA512
66a520d517f4f8ff3b3423bacb96dfae4f3399a80fc70b86b3339ed96bea1f728757ff9ddc21ec89f92d223d75a10450b6bde720f77dd898e9789246a9a529c1

Download Submit
C:\Program Files\7-Zip\Lang\cy.txt.tmp

Filesize
82KB

MD5
49abcf79668b1b950499cada06e67de8

SHA1
cf8d87f9ff9fe5e8cccdd20e00b1b6bcf27a5285

SHA256
6e6fd872ba3d5e9c21409d336e101172c3e4c842e43dd89c03f3652aa36b98d6

SHA512
f0c52fdab8fbc3dcc479376f95b97cd258270b333c357d6bdfb5d5a75de141e31589b95b72b32ec13f986e3bb1440cc489da7c1223fa967e6f07febee5a4f177

Download Submit
C:\Program Files\7-Zip\Lang\da.txt.tmp

Filesize
86KB

MD5
42f955d62876926985442672974c78dc

SHA1
cd7c68a30ffb6e588ecfc2b88448e32a587b1d2b

SHA256
6476fea09a7434ee30f72e4bcba2bd34eeb524d0e7933fbe97726bc82c563713

SHA512
739fff94f440edc0423ad38cb7e5d168104d74f15c9e0fa0a1898c99fa4ab71bbda7b9cd5470f782b0aac7673a0b8ed396958575952c54d9a23f82489a279e82

Download Submit
C:\Program Files\7-Zip\Lang\de.txt.tmp

Filesize
87KB

MD5
54dd34006c550dea0637df231e2a00e5

SHA1
b716f6ca9769da3d68cb514cf282f8bcfa16da72

SHA256
df4ff8858b97253a60ae4784e073b15454664e6df5713870a96c8553328779de

SHA512
f263097dfc1c8bcc927a65e16ed01a00d5aa715dc802afc143ce6b966c58549984378643013bf01ffe05df440632df3820f42649660f556053acd73de9792d56

Download Submit
C:\Program Files\7-Zip\Lang\el.txt.tmp

Filesize
94KB

MD5
ea781ace052370f7115d1edfdf8251a3

SHA1
873b942102c69316513aac5580b0510c92e933cc

SHA256
c18076028142a84c50cf6fb89af046a27ec0973c9a086d9ddc128f1f2d81b5e2

SHA512
99fce5ebe7afe47497695ddc55dbc677dec04c5f02c4b25b5601a1806369eec48466b6d6bf505948ae8f764ff188df238af81d76aaec3bcd5258f2ac52eb762f

Download Submit
C:\Program Files\7-Zip\Lang\en.ttt.tmp

Filesize
85KB

MD5
4deca9e732e63c25f3366f612209ec66

SHA1
ef128e17b949506af5c28efe2269f27e8e2f1ff7

SHA256
887dd7249348fb613e65e79b7a7358cf12fd6a7fa75e559cc5d1100c6f0e717c

SHA512
50252c38edd2280b0229aef43c7236b44b652ed337f3a3969dadf3b9bf756fb016eab347e74a63770b1ad8e4ab6480f6733ccdd56b303d652c5d237cd5f9de35

Download Submit
C:\Program Files\7-Zip\Lang\eo.txt.tmp

Filesize
83KB

MD5
10e1ec9c8205e667f1fec777819eaff5

SHA1
4cd906b0c697d6db0e6978e8ce6b83e9c7681996

SHA256
76903679a3cf2394dfd5b30be5b38773a42392a81a15721da23c030e2a62761c

SHA512
dd4fafb426065fb224e0fae3a60fb85af705d5ade5d2e11a765bc52bb387ff0c4089958b2ff171cea52bbd50f323a13f78e14caba485e82e64151d58be3816e2

Download Submit
C:\Program Files\7-Zip\Lang\es.txt.tmp

Filesize
87KB

MD5
134e4d72f02a8fc9d38ebb76932b48c3

SHA1
597a141ae76a281519062083f17d9a5e97e03b95

SHA256
776ad16aa6c2ba3cbbf94bdeccd3af4d7e1db0765d3e5a226199c4d5599ff281

SHA512
74ec2159947de9914905cba5a8dc0a046990973c555fdf7569094cb14f8b94c95689ed3b25e82f752a10a9d76ff4dcc45798b1fb7b21e5bf3d6f0c0e62142089

Download Submit
C:\Program Files\7-Zip\Lang\eu.txt.tmp

Filesize
86KB

MD5
7e95fcf1b6cdbe603e9ec517892395a9

SHA1
2f53f518eac5d5f2c4fa92970765639b82b9f136

SHA256
dcac81ad8aa8697987e0ed6eaaae61354edc7cb36725a8d781ab744095217666

SHA512
d0a5c5547e06ebfeea917064f9f17c2a64bb8d81fd9fa47889a720e709d20fbdc08849c11f0e79bf07030569e5d48c744f8e4e6b38fb8b2d96edfe0f567b6bce

Download Submit
C:\Program Files\7-Zip\Lang\fi.txt.tmp

Filesize
86KB

MD5
5d1718b253d712201732791771b01cbd

SHA1
f954a16ab0951cce357329e28dcb4fc704006b54

SHA256
7264b2e8cc45fcca1a22fabff5e15015021a1e29215e1441d35891f87483be98

SHA512
6755b5150a1c4c5357f817539ff0c9fd77bbbebd1688de9fae2bc8333a5279e1e4275c3110cf71d0e4cb1d42ae1e8b0c74cb6ad28cb68bd293ae309ff8fb4bc9

Download Submit
C:\Program Files\7-Zip\Lang\fr.txt.tmp

Filesize
87KB

MD5
f37a483b0fd1088c4a75c02a3b96ea09

SHA1
6196b5a408d6cf2391623d1f4c092d21f83a1f11

SHA256
cea2895d0b9abb6701b8c246b00d4cb7bdfa92ba89c395b30daa55c66f44b1e3

SHA512
5d9431d27dc1e13d20873165b5bb1e17082381f94d8d7452548bd5a9f544d4b3bb4dd0395a657d38ad37610c7ffb84b31681954c667020c319c986bf6093b77a

Download Submit
C:\Program Files\7-Zip\Lang\fy.txt.tmp

Filesize
83KB

MD5
08bfadd2e56d05ffae34549f9d8c24d7

SHA1
ea029a9765a203d6c5e885ca1e37e72bb0efe5e9

SHA256
e23d2575296a6aebda789e4da9a9e3a49085bfa258df496a4c8af4052b1cbbde

SHA512
a991cd77ead6b0e30b219993d4cfcd4ed45d70a3b1778f26ccde3850fea87d1dd4e9035d7472e1f4b716117f93d1625c958e44a2a3bea01b69039187aa027643

Download Submit
C:\Program Files\7-Zip\Lang\ga.txt.tmp

Filesize
85KB

MD5
ff06b624fcf1c100f79c4e88c170bdfb

SHA1
7acd5ed7cc0b0045491e64a3c40753da44279bac

SHA256
b5646ef7c78f917a80167f5b5e1e1173ff79abbfa935a4bddb887c686fcebb10

SHA512
cc2035a55ecdffdb4aa11e2744d14943db9f70d06744d52f08eef3bb694ac21433d44476db3a562f4f8049b7503f2fe584370ec522ca9fad6adb681f823db7da

Download Submit
C:\Program Files\7-Zip\Lang\gl.txt.tmp

Filesize
87KB

MD5
6bf8e9007e2fea5b16b60a734bdadc92

SHA1
270651d1a31c7d60365167c8cc71e7f86dd157b9

SHA256
67ccf51c4388b2f5e6a0bae87d02bb0bb0b40ec2f485fa111112590ac5e89982

SHA512
344792f915b0bee62c42bdb4307cdfcf0375705c5ac2fa0c4142a18cc8a4ea5d13cb035df1cf2dd8ca18ffeeab28d278837f89571af1bd6d42a93a3dde95e026

Download Submit
C:\Program Files\7-Zip\Lang\he.txt.tmp

Filesize
89KB

MD5
82a89ca172627464e161689207955ce1

SHA1
faeb472f65bfcc72bfbf0d88801d1371eadd4b52

SHA256
b0f6168828964d6cd089671dc3a8b4d8c04a5094891cf81a41510b4dbe26c6c5

SHA512
c9cdfcd042e806d9d4fa1c0d2d7cb75036a953b96b0a59e1c543a674b41629a7ac736e2bc9c88851797a4885e4c9cfd360ca0ab4f58d9718d3f45a0e7de9a7c4

Download Submit
C:\Program Files\7-Zip\Lang\hi.txt.tmp

Filesize
94KB

MD5
423768019cbdfaef71a642af84ef2613

SHA1
d83c866328c79696a8dfb6d7b320031c160596f4

SHA256
2e087530f3a27930f7b57623e8348d96bec133a5b91fcc76b6dab44b302f9a0f

SHA512
b1325daf5b6c0f743147adc2acdd6bfffe50c21da9cb128b7e8d260373c46eb88dba532bdacd7f4de13587644222f4424f936a16e9f64499a5a2b10a1496fe65

Download Submit
C:\Program Files\7-Zip\Lang\hu.txt.tmp

Filesize
87KB

MD5
694ebcb67b1ce0277499e996e28dff92

SHA1
dd24f170d135412c12e1aa3d784285e8b752c65d

SHA256
cfde610cd247a0607a5fabda9aec3de48d6be5db44b1153c814ea1330ff5ec2a

SHA512
2ac9b8a41eefc5adcf4bb8ecd66190191627d05ffd853024e12b778f2d3c44af27b069d7c58e862188807b613f4f2bc2e75c5b68ef5219d55c602d6bbb44ca81

Download Submit
C:\Program Files\7-Zip\Lang\hy.txt.tmp

Filesize
91KB

MD5
ac7823e7acb2a7f6c786476f27677d4d

SHA1
fec498d4704266416d93b2dc0821e8952d4b0527

SHA256
0085c8a826975478f05dc3debab8eda65c094db10863ec17b19264bb04209488

SHA512
215b26687f47dc76750937a947044d5dd150a1c6736fa4c9609498498566cc57a9917a89741a5ca341c7d9161afaac2f15aafa545e027d0ce830ca2cf52ad165

Download Submit
C:\Program Files\7-Zip\Lang\is.txt.tmp

Filesize
86KB

MD5
07e8dfa8ce967a20c3de7af80799aca9

SHA1
aee011740d3f3e80f713306827edcda9e6949bf1

SHA256
aafb69619a89740e63a44fc95193183e92aca53feb6beaf2bcf38bddc6c5bd39

SHA512
48251d502900b566482426b8f87bbc798f9f7ce9757283fd27712420b21d7ee74f5c1d895f87e4f93c15c80efdf540836a9b1bf70b30bed8454986ac070b0a78

Download Submit
C:\Program Files\7-Zip\Lang\it.txt.tmp

Filesize
77KB

MD5
8e50e197653a7faac94bac945c080768

SHA1
269c6b102d6bc747718e87ba5bc755cc54137acb

SHA256
35eca11ece7dfadc69d949fef563d3624380e16db6d995edc9294df0c3283769

SHA512
8b5fe07555db18a882bbe9635e5cd2cf5a490f066ecd9495791dba1991ceefa727f2c81dc359c8de690ca0580c5647fc4bf8564eb11ca9d7ff41f3224b4296bf

Download Submit
C:\Program Files\7-Zip\Lang\ja.txt.tmp

Filesize
16KB

MD5
bca1c22cb88a9244c38b9a4dd3e79245

SHA1
29bfaef7999671d73fc1ca517ce234d702614c4c

SHA256
18c1a5841909a325ef24b049b01a9bea0d3ae7e43dc32937bb6c9f994e7b49bb

SHA512
859f3cae4668bc2959f357eb268d119b84b59d48aefc01d9b7330c8a285fafdca64b7e16f5f874384930e05908195f1d814c51f4abc2b8f107af2cbac71465a7

Download Submit
C:\Program Files\7-Zip\Lang\ka.txt.tmp

Filesize
95KB

MD5
461c2b0fafcfd1a394e7e9db9b85bb0a

SHA1
800a46d86e679e077c10b98ad5d4690b6175ed15

SHA256
657ed65c6eeb60150ba86a5d41fd1e00301dcec02e48c7dede82cf5510a99f52

SHA512
4e023d93eae01dd87cd778a7c0fe90ebe8c549695370bf5dbb6916e78a28ac4fb6a006d71de61df6dcc39b30c6d5380f51592502a32564dfa7fc69272d0de1aa

Download Submit
C:\Program Files\7-Zip\Lang\ka.txt.tmp

Filesize
95KB

MD5
e3bbb0c860453f26d679ef560d9b1092

SHA1
2f53d0332025e44c46434aca67c8adb418ee371b

SHA256
31046b6870b2460b54fff1116709bff59e83a91749309362d96cdce12458aa6f

SHA512
c6beefe49c15b0f280792ef851bc799d26578d899d30a1e670a6b4a5558613ac396c0be5f03513ad95a3d9e229c036dc63988f2afecab01ed0da37ab70e1fcf6

Download Submit
C:\Program Files\7-Zip\Lang\kab.txt.tmp

Filesize
85KB

MD5
d44a071f96bceb195e977ae0cf1c5461

SHA1
d6f524e413f2cfbc869bad1cdbd62c3fd6cc000c

SHA256
aba31e3a415cc5d4630ea5dbbab8f67d7c36d7d99dc6ff094e5ba000aac53b7f

SHA512
96e109dca6618f29480124db5cc61ab92862675d8b53b8edbe70abda5cc8a4af82abbdb688cd5fdff2dfbfae44622630387029060275a0dd0cc4288ac80fbc69

Download Submit
C:\Program Files\7-Zip\Lang\kk.txt.tmp

Filesize
87KB

MD5
8c28a934b80d9ccba8a3d89a7e6a6e6a

SHA1
4ada4b511c12d1e0d276373b663dfd989c5ed610

SHA256
55e8a695dd672c4fab7610e51a526804d67631fe46117b46bbc0cb3d8e9f99ab

SHA512
efb87d8ed608215369b72b7489745895298219f9ebe1f3999beb903a41a777a01061a1f19898b1c8fdd226465109c631b502c4e7dbc75ed572b633d363e46802

Download Submit
C:\Program Files\7-Zip\Lang\ko.txt.tmp

Filesize
87KB

MD5
615115d91ff315fa9e1895eec2148c26

SHA1
8f9c8c0ad586835f7ed1e8cfb36985cda39e4b5e

SHA256
cc31c0f6e9e55e40c4b6cd3c8429a749a213b4062efaf1d07ebb3ebc483956cf

SHA512
f3b7c2a3e53ee1949cc754d386767c27357cf71ccfaf5ede69a7b01745b77bd2c0da5643b31a2ace65ba0bd21d0f286fa54f98eb1885610bcaa7f29dd116825d

Download Submit
C:\Program Files\7-Zip\Lang\ku-ckb.txt.tmp

Filesize
89KB

MD5
3cd4b0d6ab444de6eb979e43dc9a0414

SHA1
9013043043acb0641651de35e4df4e99003058fb

SHA256
e7af369050dc81a11773e9e1ce0be44e6b8521c1a349fcac0b99382743407d16

SHA512
f4333a5f9b09ff1282cef4e60178f7b93bd12504e5ac9d519fd6e52e3696bce80b7776156e98a372d6b81da9bb643d960f06f22bd18d56775f9c503a4b74bb90

Download Submit
C:\Program Files\7-Zip\Lang\ku.txt.tmp

Filesize
83KB

MD5
2d086f4ea68244a6adc663e0ff067c38

SHA1
10777c0c39127aee570943671f0a068c8b195b2e

SHA256
25e0a19614616f451e46d3e09d0c31225e59d9d0197622e28e9cbeeb5ad746f9

SHA512
732947bdc3c1f0adf6653e26011009906ef7303884ba00d118fc7223e388a1210a7f3dc88abb0d512151ecf34b3245bd051524da11a80a089e584df79e0ac3ef

Download Submit
C:\Program Files\7-Zip\Lang\ky.txt.tmp

Filesize
90KB

MD5
603dbcaba3cbdcf5ff67dbcdeb81c581

SHA1
ebfaac25fb9ecbfa9e21c9bcdf7f74770f635b3e

SHA256
de2406953925de36873b51c9bf240f341a38c65c4bd68611236df3d87bd6a2fd

SHA512
07de5a072cf5400959ccccb4e6687b85eb0f2f8662d37d7d4be060430a8248540ebe955c97e8e53886efccb37ba9d6460d0e451090f7f129193489ee99b76a23

Download Submit
C:\Program Files\7-Zip\Lang\lt.txt.tmp

Filesize
87KB

MD5
3162f516dc3e09ad02ac86fecebced58

SHA1
7fb7360ce66c4ecf57bf88811745ba3b5b6b47dc

SHA256
4a04ea8b8cb62f706d2d9af98ad5bc31d5ea5710cb50dcf19b7405deb1a3aa6f

SHA512
3c28ccaaebe9433c646bcaae9fe2547dfcb48fd15e8aaadcd4aeb545b5c46779128177291fd380a099d0f2ccb2ace18f3770a23caeefa98843e05cf8e7ede6c6

Download Submit
C:\Program Files\7-Zip\Lang\lv.txt.tmp

Filesize
83KB

MD5
913836065f63b8902036e343a969156d

SHA1
3444d44077c048fe3e3c504e9050742e1489e70f

SHA256
9a3f1c02880edbb837e9d2b98377b5002974daa1b2f9712e2ced94bfcfd4deee

SHA512
726439e99b5e54c5ddba8a87de5b287e7c1e9aecdff90d36b5494ad58a7e6e5919256f914c6717d627a33f6b50cbb307978cad22021d0ad46260bba189630f9b

Download Submit
C:\Program Files\7-Zip\Lang\mk.txt.tmp

Filesize
86KB

MD5
d264e9ee29aac3a69b0eeff1ab6a0928

SHA1
6b749ea035dd7cb2c6fa83bfd94bf372d7db3828

SHA256
d099a9c3bcf8acf332e6a909e6c393d9bd75f7c50cb7c275b235898400f04981

SHA512
a2126a8886c3e5d7f6e911f06ec99c5be51a1cf5cebac38b5b40ac7fd9eb7f7aadc32c308d0df460cb7af20730601f8df614e4a3153b148276ecd94eeac5302d

Download Submit
C:\Program Files\7-Zip\Lang\mng.txt.tmp

Filesize
97KB

MD5
291079e476c79a794edf06f0c24fd1de

SHA1
49987ca1a2fbb0497a513e1b34a65510300fee04

SHA256
88000651fc2dea2477387304b8a62ab827a54afd5f43d2137d138abc96df67d1

SHA512
85eb7d8ac52c32dc09d297336d54f41bcadef979510cfa94695afaa0ba43e89c02a1317a6a23906d7270e371d6f97846436369af3827eb3b84076606525511a6

Download Submit
C:\Program Files\7-Zip\Lang\mng2.txt.tmp

Filesize
98KB

MD5
92b011d0080ba847da2bc849c556acf8

SHA1
b8e6b01f8c41a42d807fe1f94e31f0b8f7f1f42e

SHA256
c8015991fcb99083d4f7bbd5f069c6e0dee70664e27973bc4845ecc1bacdb2d8

SHA512
0562a3f4d8394eea246c9da78817c6c04e0055284f09d96d872ceed3012dcc91e9d4eb6357b5b316c4b25e9cb6419abc5f5a27ee23f48dbaabee4ab0a945dd9c

Download Submit
C:\Program Files\7-Zip\Lang\mr.txt.tmp

Filesize
88KB

MD5
26fb4a079958f8b97b0f49f6a9b24979

SHA1
eb6003acf7b1938e47f62062cb2fb4483b9ac158

SHA256
0928a0d7c732f23b4582385540b0fdf46f00b13275793a7d0044e9dfd735a230

SHA512
c359a3739d05c0500f8383d0f5dec46f4e55f577a4c75d93237bb7a358808ee0e0b0c704406c25b4f64a1db170911bcb1207e191cc97cde260af8d1ebaefd791

Download Submit
C:\Program Files\7-Zip\Lang\nb.txt.tmp

Filesize
83KB

MD5
1027888c108140a7debb46e477354705

SHA1
b375bc238f1af029c4af23199d1bed2c8c22b59a

SHA256
8f82db9d84f5dfff51058baf83b075188a7ed6844920f06bd358f8263f936705

SHA512
f185c25456a5d9b91208222e0715ee9e188498e7fcbca788374b4d9e91d266c753767726156b62a57a1d58777905624ef6eeaaf1e15e3938f8c8381f7fb8aa4f

Download Submit
C:\Program Files\7-Zip\Lang\ne.txt.tmp

Filesize
91KB

MD5
04d95eca279d9dfaf473d8d5f53140f8

SHA1
56f6c552c8c966da8880bbf295b85e2d21f50de1

SHA256
14aa02ae1e0538e06c0cfde3f2df0d22fdf9a8c605046a9a810115d7498c4adb

SHA512
7c36e7d46f6805b023d4bf2d22b78c45a088e483299b0d31bd94a2fd6e7bb7423baa62ad8285f306dee94dab2ccf3a19bbdbb1af5f3a604b15612eae0dfe9a5d

Download Submit
C:\Program Files\7-Zip\Lang\nl.txt.tmp

Filesize
87KB

MD5
404d57081ba70c5ac5166dbfa9526822

SHA1
8acf190fc42c93f09a80435b59438fa75030fcc2

SHA256
0dc463ab5655f6a374c326969cb404cdc156dcccc40a750a65e8f3a33a1c7b5c

SHA512
47b6c7b830a338af4b96ab1e096bf485f813e669c80546bba94e8ad8d9f4e40063823a6f96e9a305fa8dc08249f3b0f1f5a516eaf4ab962af988d3367ee2b66c

Download Submit
C:\Program Files\7-Zip\Lang\nn.txt.tmp

Filesize
77KB

MD5
670060980b2599ee9fb5233da2e59717

SHA1
18a507f93b3763c0a4ebb261c2309427bbb7ffb1

SHA256
71b059484cba63c54528e6ff72a1af9e662b4f51ed6066349027ab9304590442

SHA512
0d21d559509c84a8ebbfa3444dd7967aa7cabcc2f0ac2de3e1ab70fdd16824f505fb61f75fce4e36a73dd9f9d2391c528b49b0038921cb5c7c54b0a9cbf79a99

Download Submit
C:\Program Files\7-Zip\Lang\pl.txt.tmp

Filesize
87KB

MD5
04e393ba7c42e8b2032b46b3f01e59a3

SHA1
339c372b82b2ed5f65980fd847293aa25af41fe3

SHA256
b7b9ebbb1398a44b44fbc9af7a77f27fe3e38b96cae0af5e7958cd698c93206a

SHA512
79898b54a76b4f337b4987bc1f239f91f46ae410fa56f76d4d90559de90053ce9898a8df9d3d54b2baf6b3adafa03b10dec64427c341b3b8da17faf8967bb74e

Download Submit
C:\Program Files\7-Zip\Lang\pt-br.txt.tmp

Filesize
87KB

MD5
f026fcf4c81dbf84c658b258dcab104e

SHA1
8242d8d05a3cc1681ae12b3a765ac682341b6c12

SHA256
09f520886a21173df8784805d62af5955d8e77487a3f2b8912707e02fb9bdf4c

SHA512
1c777fe1dfc6ca6fcdd0d5dbb3f91526bc805202bb19b83bcda98a510c21f02b633eceee18a8d43cddf8971b0868ab262dd56dd65bef696c093d3dfabe679304

Download Submit
C:\Program Files\7-Zip\Lang\pt.txt.tmp

Filesize
87KB

MD5
d3e1d50d2ed22fcde9ca0249fd1f184a

SHA1
9873da4e5fd46edd6cfbba1d1651d75e4dbf0294

SHA256
b11497b199cf61a341401698aa7f13e1bb614fe338424485af3b20474d5c2a7b

SHA512
f66076b01afb0fb8d9e3985b42707b6cd5593e52bc65accde3cb406bbfb2958c0a1ff67eb103ee5532d10820852a1f814eb3173339460f6d176eb5eed3227330

Download Submit
C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Trial-pl.xrm-ms.tmp

Filesize
88KB

MD5
9cdfcdeb92f403598f68de6830a0ab50

SHA1
7116387c19052c631b1ddc26d78c666e4a383737

SHA256
37b0f74281cf5c23eb1f62a974e6335dab332eae130e013a238cbe0bdcb3bed4

SHA512
cc6903534199653c2aa310beffc5b8736eda062745d77d6738e82504b75a784b8ff464287910539f8d121f0a997180e826dcb901bd70057ac5ce1b83948051ac

Download Submit
C:\Users\Admin\AppData\Local\Temp\_desktop.ini.exe

Filesize
77KB

MD5
15ad07faa77834b789c4e3ff4aecf6df

SHA1
3659cb1294efb300c04d5300cfbd6da4c87b9d6b

SHA256
89f2d3053a505a4279f9b770756a15e0729ca80e3e5f8137219da1bddb682b68

SHA512
933a728806fa71082624c52b89878352f5adffe8848ec3bab853bbdb5f5044174acf6f712fb816eba36e9bb7edd1d3468adf8dd7e293eddf88125829fabd3490

Download Submit
C:\Windows\SysWOW64\Zombie.exe

Filesize
77KB

MD5
4f6335e147230aa9c07f4487bff773d0

SHA1
ebc4e67aaf66a76d9a9afae5380e8b096f6f7965

SHA256
44c98b88bdb5aba5ba68bd02bc6a778cef7cf2b732e0c64b5943f2c9855be926

SHA512
0474ec78bbfd741f7f0ecb7103bd3f457f22e971ade388eec46811a31a35a2665bac4564ffef16332300747c4cc2d9ac3be3f83f2c8362f2c2d15fb023ec6ca5

Download Submit