Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
138s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 15:11
Static task
static1
Behavioral task
behavioral1
Sample
3abf9806f5828975051748f7a90873c6_JaffaCakes118.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3abf9806f5828975051748f7a90873c6_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
3abf9806f5828975051748f7a90873c6_JaffaCakes118.html
-
Size
175KB
-
MD5
3abf9806f5828975051748f7a90873c6
-
SHA1
dd7ff551e029cb44fa42cc3eded82e430187983f
-
SHA256
b108ced7561c1f712353149cad5426201141b7f13d345043abc50d797de4a2dd
-
SHA512
7404124b63d2000bf18e090aae80a8ddb30af8c7dfc9118a3de8078bfb7c2e2bc5431d6c76d71089e13037ccf1891efa840e9b30b15a065e2ff5ac44003ca6d0
-
SSDEEP
1536:Sqt58hd8Wu8pI8Cd8hd8dQg0H//3oS3cGNkFoYfBCJis0+aeTH+WK/Lf1/hmnVSV:SOoT3c/FNBCJiWm
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "12197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10101" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "13507" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8650" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "12197" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8538" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8650" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "3815" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "12115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "21807" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "410" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "3897" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8742" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8742" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8742" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "21807" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10101" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "3897" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "12115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "21807" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "200" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "12115" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6695" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 504dfaf47ea4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8538" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "410" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "8532" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "13507" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6695" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6695" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2040 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2040 iexplore.exe 2040 iexplore.exe 1940 IEXPLORE.EXE 1940 IEXPLORE.EXE 1940 IEXPLORE.EXE 1940 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2040 wrote to memory of 1940 2040 iexplore.exe 28 PID 2040 wrote to memory of 1940 2040 iexplore.exe 28 PID 2040 wrote to memory of 1940 2040 iexplore.exe 28 PID 2040 wrote to memory of 1940 2040 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3abf9806f5828975051748f7a90873c6_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2040 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1940
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD550ffa164ce38b5c4d2f391deec9ccb7d
SHA196d19c77580f568f59bc88ca7dc8f41669f0e7f5
SHA256c6a2201eeadcb6c667449587fffa9b001ba704157f9aef34b187d2d0a8fd2575
SHA5125636705069fedb5bd35762379ea82105b6a1bb0e5be9b61fa90f8fd9d8697fa5951e544563b8a9a6fd2ed9b8f15e98082b9e4507a35cab40275a314b3a8b7cbc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5444a1ab2cd25312aaf0685c19303f1db
SHA13d6f7aad0303368edc0e773d2daa87fc3ace0383
SHA2563e679bd92f5c97ee88d608b10f6e622e8e35df6045720b1fe19511b4ec553733
SHA5120fc5a9f6d562b0be1136cc20b29afcf57aa70cdda17672f74aac5d713523339cfa5ddf290559022b47314f92a4809f678291194aed961eeb57a60500a33fe25b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56574c0a849b4fb8a495c29e1619c658c
SHA1d9cb169389cb2e39da34c35dd7600c6a1dbc6525
SHA256665bf0bd89cf442052dcab17e552b5ef726b84d7be6ec602c7903891d06c26ab
SHA5128752010fd5ee8b478b7146379abffd127ec0b4add41455ce5b6e791bfe31eb421ad80ff7d7b34270820be329f569017cf166114665db33de410805590fe3860a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a6a84ca7aa5409fe8ea290986f630e6b
SHA162112edc4190408c5a9ceaeb4c4f834bb8297460
SHA2561b6cd6d3a38ef8d32be5fcd64a4f141157865de5840fd82ca0113d224634fd9f
SHA512d018335901c4f28d85654ae20367ca46a3542b2de3679cf89a738bc526a80b9dd01c7856d213ecc8231b4ace98f8ffcf5499e5c752926e8433c73a89586944b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD530593eeaa5c33a4b2526e08d1fe6e053
SHA12104cf76e461596a23662a6ed8d84744fdad0cfd
SHA2560f61ee92606a44545a72c08c3d028d805918d5f26448370e6f461320e59f2e9d
SHA512255814e91c97e26f781e42d5341c193392641c7f030b10f028185ee255ea55961980b2a8f879cf469a8dc6e883ff24e9661e921b02276648c9775d49dcbea201
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD522dbf59865381eb538b45b7c274af867
SHA11d08b4c18b9126a7349282d4606767b20f55b47f
SHA256d204f020ee98c71c666b0d85fb9e5b0398557d129ababac8b831f3bfe40fabab
SHA512c4a4e90f8babf259ec48b76a1c1617bed5d2e12c32b4798470613229ec48076a23dcbbd6225fcd317f4c157f21350ccd7f492cdff760e23fdca6b0ad41bffd3d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53cb1cbe1ab00e3a8a02f8501a32b50f0
SHA11be9bcee3c4a91971f7039e4a77aa3e257a08223
SHA2567ce1ca3bb2fb1d28954d20d8b215054646121f4ef49517b7727bff2a7de276a2
SHA512539433c1587bdaaf7394d5f4cc35d16ce8564b17417e085abb44840fe76e4359be26617c79bb76dfd5e985bb20b0d26f25b5cd2996f828f523a9e8ef0c650b9a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bc63983557d043f2daafe2b95e8e1b88
SHA105b06e109f450769e086dab1b1cf38db9101315f
SHA2562ac8f11d157a8068b2f7e1179f5c47c04ceef76d3fa74398eb5e2b0c4e0c60a8
SHA512c6f040acb384825ee530e15fa4febf9665edba31b06f162554f64b3f6cec0fd00bebd3fbef1d37207879099d6c64cdbee1d8a373a1ead67eb44fdf369347ae57
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f244e828663801aacba09f975e87e7bb
SHA1520b49ecd300372408b07b02fa6b71630b3757d0
SHA25617381e7691e5d28bfca67f3b40245553df4ad7f0ee1f28ff97b3c3f0b7c7e8e8
SHA5127cecaca76cf5ed81641181b31327e33cd3e3132291142f84746cd8950c62dfbf9fd54962dcc7f7a5d56299546eae83ac63d19d11b4bfe97cfde4f067499576ca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58184c578a33db0d4cf97469fa00d8b1e
SHA18d8752a423aa07be4fb900113f023ddc041ed5aa
SHA25670a7a7eb47fe9a1e53eddf2d4fbb822399ba41c5461ba65f2872905e4c69c119
SHA5120893ee374f296fe013ac90151b4f193dc54d49fb61459fe4d3bb7602552c1aa9aae3f28443440a56bbff783253803574aa704ee43ef1baff7d451aa739dfd448
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cd07db4359bb64703d81afac11ba17d1
SHA1c744fca38e89441b0bd4013080741fe6e80df6dd
SHA25688c43d6218a4f6277e0afa36ae7a60d9b4047c6508f96edbf1a39a1c51f929f1
SHA5122edf915095b2059617079cdaaef63f505a81801d4658dec03aade3d1505110ad0944fe7558fd217c499514babc462d0d322451abee17a1f21b4d23215d7a90cd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f54e9b1dfc521f71ee7c8ae2606666c1
SHA19d28b3cb5b3a24cb4c8e988589d7675ce8c7fdfd
SHA256009d5534bdfed8ba7957a7a3432cee77cb06afaf83c39b92b18e0e35dd5b3eff
SHA512b79d75c999b8ef2c71cc3932e665a50a776979efb730e7c912721843fd8e1b8067333c9f4ba2cf18ea9a0298a842439e5d32d7fa34b510b91ea57db9e129c8cf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ec43611c7eba767e09e5566b5c25938
SHA15bc013b37b93ea7537ca88de79d9299b282f80d9
SHA2567d484ac6318881942fba6ba95ae7cc42d9339c096fbd208f28af219b0fbbfaab
SHA512c4de66a0e3efafa9acd2f7947d98bbe83f61b6ef17e97dabf85963136f39a2e06762e5154809d58f5de6f832aadd4b8382d111c29bd09146a756a3ebedf5fb5a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bef6ce039ef0c5878aceb5f0f7906722
SHA1cd2b4ff2ed3e6cc212259333213cf6c8733c4702
SHA25636d3f9b4eeba7181018a5113235770846a519ffbcaaa63b41a700fc9bfa28716
SHA51250cebba4c8cf02b9a045fd5736561ece3cadb4ef90cce9fba325c25a32af4b7a2bfc1a778f39b8eaf89a13cd4cb76289a03513f664a48336b99606a4ee3cda8c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f0e951510f3ce8e5207f075915e70560
SHA18e23d7763ea2d6d619267fd8aee9e5242cea4611
SHA256d82ade749644c74b7aaf1629626144b5f4ffd4732f87d4b3b863970eeb370be0
SHA512ceef5a7336096a0d5fe29af8c962c4c6a5c18188f6a7096d342e562478a41fc76a45fb44bca960be352b17d8f207f05f124f568c046639b595dd59467b3ebfd9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51b974112cc534d054baa769cbc139581
SHA1e4e750d50afe7ec3253f733ed9b8d168347dcda6
SHA2562e80c114925ffbc42002325dfe0d2841f6493b0d5a539348021c94bf350956cf
SHA5129d701c54bd0030bd6294001be803f3517129d788a7cf4e24375a0f2031afaadde60210c9c5f5f0ad02e9687fcf86081c8c43216d83496bb7c185405a1f7048cf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50ca1d86ce8ca502ed61b549dd2babe77
SHA1edbd1e6bff2e18e833bb35f26034f1d3ab8cc43f
SHA25632eb61b994e326d29f8fab07f62c9aafa18f8358ec71d04ec233da0a883fd3b5
SHA512a2e27a271b3ba3f33cb0153664576a787e984a9e72a5b46e5b3eda652f7947a64cfaa2fd6dc1f059892d431ca84533f4e59441103d617639faffc0f0003010f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD507e2bf2950108edeb09b8237c1a47732
SHA1a040c7837bafda90cc54e03075cddfca73c061cc
SHA2569cf98fac928a81f86f313c7cff0905b606f57c0cc3d5604d72c5fbd3ebb24a0b
SHA51260b0a2370da8d7d55b71add405f40cfc9f89f1552abc0c8b26ec97fc2e7a7f45df44c054cb06cdb6329f54f92dcd3ff7655afe6519002136509ceb29af4ca492
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f146450e5c116de280ddcc5bc263d4b0
SHA104d66f48e34625655904f19239f8fa5a46a64b27
SHA25644188b6408d63eac09654594992c49cbfa8f05f266f6d6f102f0fe437211eeae
SHA512f50b99911bf2438d343ccf7a3297edebc3fc38e18f95b8724c5e363b1fb85fe2b3c659b4fc0e3d0cca632c72e93d0ad452e691b3971ab77db50fa6d486f57588
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5064335c566bc4aaf7d949eb3bbd4c7dd
SHA136a458b867dac1ef6718cfc56ba1eb37cfa2bd42
SHA25616aca108cd838cb7b7acba1a0e72c41e003cb37557b1092b920374c33c319ec7
SHA512d1bbd8103566c60ced1b690138c855d2c843dcbc9a5d4946451971f6233fd592461266d62eabef3524b9f4b5ae3783ed62d0a621d75f212d5bf26946e866b29f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ab3832314720ad3cdfd29fbf56de4776
SHA1e4ec5a36bc4fd27840f331e7cb16e0dd7701d92c
SHA25658241d7e53eae1a82a1f0400ce9ce1d2b31feff1eb15d953013bbeb9f875ecfb
SHA51221643f273e1ce37cd03e8be89ffbed0ff068e9ab5bb5e5d9ff7c2236238cfdd12c96495566c2c406770766cb1f6016288eb4cd5f8952e805b09f6a87495411c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57a92738c56c1ae7794fecc110f679eb3
SHA19438544b87705fd10dc660e10c3817344030d1bf
SHA256387887ede3f1108ca286873cd976f033a80dabbef54805636c3fb9f30dfb332f
SHA51272ff0c67db9e3905de7cbf5838cc3eab19749807fe99e4fde2b824f4f84daf496bca7c443b033179456274b6a8fa1f9d012830fff8cd28e43c2afceb3070a73e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e4ec0e75112253e341cd2c18733f4e8f
SHA1b39365fa1c9668ae26e82565ccc367597afb5ec7
SHA256e4986b8cb6c49f97ce8f417c16a48bb92e31aba6146ee0048f954306eb1dfa59
SHA5122fbcc85e0d82bb96fe09c2b82713ba63f5a428b44625e9ba5a5df3c33819d482158562c359e4166bb8f793d5cab19b21bd85244fb77e1c0eb24e6f8e0e74c812
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD5596236f37d82b2b7372f40345ebbada3
SHA16b246bd00cee00f0553caafef0cde954d682ae8c
SHA25664533369878e5c2e19b120c13526affc0ffc860a465cd5dc347c6198771893d4
SHA512e9f347bf314b7286aca24469de335c58f4c5ae0faa00847a459eb47f8e9e3c3e36f8637099f48026134429bdd0f7e02efe02f174b68b2a398b638e4c9b2191ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Filesize4KB
MD5da597791be3b6e732f0bc8b20e38ee62
SHA11125c45d285c360542027d7554a5c442288974de
SHA2565b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07
SHA512d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e
-
Filesize
990B
MD51f9033daf52a6767218efd860661c32c
SHA1d7e8464b8fbe199e8d677beaef9f572ba26b82a5
SHA2562293fce62dd9eaf4a950fcf72d9793726627db291cf1313ccc09049e1d149b5c
SHA512e757f185aa1d62a1cab8777eeec5c6868f7f54d18bae928f464c3c467b9e554fee424a2821f3e9f3cf897c1bc1d7bcb41fb2ec81986732128f0b45514fd3caa0
-
Filesize
990B
MD54232c87d94ee8cb90641b323cfdde706
SHA1d4597ccd7d44f4d506ecbeb608a6721d1842e276
SHA2563ee7aa37658d84949eb8ece190d1d66e6486f4c547ea3841093d76f3db5fa32b
SHA512315dcfed620633bb1970ba11870423803b174c56b0806798b541f522d683c995a72cac84f302e37d4ac3a12c2226dda7ef53eefd9e3f2a600dad294ea971b4b3
-
Filesize
990B
MD52c57b811301e119a9ebd26fc8bcfe4b5
SHA11d252135d5480b0679d6c16b37a2d1c19d7e4943
SHA256a31f5938f10c69916392335ab843b1788be1122bcd8f93e38aa0b3d7975f3760
SHA512b9a50d429c585a285090357b8eb905c5d212058659bac864e0a34a7dc2b28cff4e74e3b542ee75ab5cabc25542587ecdb729078487a694dba9934cb8a3a9ee2f
-
Filesize
990B
MD59d2a14857957083e2bb42701f8c573bb
SHA1e17a7099b08aa700b07f752dc5b449f3dd2cb447
SHA2562b6835286962ba0c68e8cf0c027f97344d691d20644e49fbedef4f59b2ce53c1
SHA512c8f88c001ec1d5242dcea5e36243a754cb4eb533b1c4eceaa2300ab8e57f89310d7858d6d2fab81dfbff5783582f1f7dd9979ceaa13e0e9716b0b770da16530c
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
229B
MD5fc7e1b372d851e7c29b0fd9684ceb568
SHA13b7443b56bb6be413c46fdb3d5c54c6b3dbe6e3d
SHA2562d291a2a6d16dedb514a8cceb2b521589f36aa472157f87249c4dce1930fd2fd
SHA512289c0623aee773d696986db428dd0ff627ecd427845dc0d5b271bbb9ab75f43fadb8766a40b3442805e9e9e650d83ba04bf90815b98cfb518d54258878c57633
-
Filesize
229B
MD56075ea5b44b58f1db894f6e78247734d
SHA1ec43d136623880816e78373e1ec1ab192cba0c77
SHA25673ee79a7fd01babe98f6bd12eb560a4c768e2bbf173626b9441fb7b0093c4ceb
SHA51216d976df48cebafa3fd9b8ee4325b7109db3b84cdeb105905f4e01aa1b7f0144cbe09b15dba22363f6b5eece9a8cb5a93e45ac12f39986d5852e880e697fba8c
-
Filesize
229B
MD58c7c2693f635494fdd9577a135d37509
SHA1f9383f8c3b1716fd43e7fd1853e5e88ab5a6cb32
SHA256216ec3772d0d173d9cd005c1ec491c3a572ac54d7deee1b0d21518047380d614
SHA512f743fa0f72f8e22f7c192f1f4fb93540f9b068d6de259872609be0b8644b25c35e4e0b87f36b3b3259a95907827e4bd9c09a66bbe6b6e8f08eaee4bde116d0e6
-
Filesize
229B
MD585e6d27298b7ae64af8952f0077d724b
SHA1e4dd3a02549d44919fc7a21a7e1b3445f6735976
SHA25671e0c0e9dbff1ad065a665ece4b91cfebc75fbcb8c3da64b40e37f0f2a0086a6
SHA5129a3b0122d9a9e7f3a17ba5818c24e21f0ef2590c37f96ce94b61ff48acadd70e6a5828c94a1121658a80b5c903ab0da708dd1db667f025f8387a363b9dc591ad
-
Filesize
10KB
MD5b351973af3f70e324fe4a097af9e8c25
SHA19e0ce789c5cf527c2db6d6ab7ea39828f5bbcee4
SHA256ff3d9eaceda06e1deff515e25e8c04b55cd6b9caa5baa1ad0e03d026b5239a6d
SHA512077db58a451251b298e5cf01f4597b1c30a8dcfc9ca93e4b9d108a76b1b4b62b1079df0e3395f65329c3570f0f420a68e52f0483c4b750c4761e5530082c66ef
-
Filesize
402B
MD571fc46724d06367c7c79403cf8ddcccc
SHA169f1f4472eb260dc7690407fd3e3b20833709126
SHA256016349941e47996ff0879ab13387b0ccbc47498e99408cb85da383eeb13a873e
SHA512a70c33fe07600bb7849b6bacf750f54cc3e913f067d2991e413c235eadd60da47a09820dd4a18982ef32281f9c3ae71d099beba1ed3394b6d18ba652e20a990b
-
Filesize
578B
MD5486558bccb54e646cc9f07950de7756c
SHA13805ea21e1069618de81aea605904baa872de85d
SHA2562ef3598226ade23704781589cbdd09426b2727ca8fae4d52c666c0e592eb58ab
SHA512d96994861f9634bed1519accb1ccb3b8917bb53aefe546ed27d632b78025e941035f78e0db8931a88012e0ef04f2e36d4bf2a26947be17ec54b1e12ed9d844e3
-
Filesize
578B
MD5836c316f18938227cee79f15ed48c5e8
SHA17ded5c0b70df75f488f3be722512150376f0799f
SHA25661f45c34b77f650ecd02cf008ea501afe7cb1725a8b0ed67ae2bca5fa255da8f
SHA512150924abc694eb17a605ef145273382b18c01735286544d2f9bdcf9dacf5bbc520908b82ae45364d6889c430614914e3d3e88646420902f9a059bdab7377a675
-
Filesize
13KB
MD5f70d08bbd675ad950df01429f0fca16d
SHA1f21d1c45ee24868e89b0bc134637ad5a756505e3
SHA25635bb9a78c708b0ff03423583ea61b30ea2c0c80f570c9526905aa85b4a5a73ac
SHA5127c4f78c52242be1591cdbba685adc3b8dea1d3b2a3c7ca92a7ffc2308daba426d7e6c480f0796b6c52142fe7c3b65ff952cd8256d7f96e39c991a6df908c9757
-
Filesize
990B
MD57eecd2e1032064e371b1984ed3058644
SHA15adfe2e95705215bb5918f8f823f9e0c8a0c8db6
SHA256457e03fceb9dd4f7077c256d9601b12377a39e145d1a9da45ac4c3019b0641a1
SHA512f60c004af5f4b05893fb6d17817b9ccf0677a1679c251e727b35f4e0d9e20ccf07de50ae2e3a3ca721e5841d231f5fbbeb06aeaa53ca885d475b79fca8f56438
-
Filesize
990B
MD5a3c56aecd7d2960852c648ce4208cf81
SHA187b8edae763162f740a9dcdcfb02f7e5d7a204a9
SHA256e5b2856eda96ee1aa545c759bbc9070fa61a3390e4376001d09271adba5b99dd
SHA5129edc61959c4b534ad003f6bb035c4cc33164c97dc02a29ceb497f4637dd411734098ddb0127198a68f60fb5799ca5d84a8df604ed874a2e3162bab488d9a5567
-
Filesize
990B
MD5d2d88390ede7c03ed01b7ae606341346
SHA1ae2801ed2968ee6fa2a86bead4fd3031b2b198b1
SHA256752fbc151aaebfbc5d8878f9e8ae15c8a1cf3ff6fb8c16cbbb843eb0bdd6403e
SHA512c0f6a42a554d6d90c51253c6f8bb4da139a9645bc891c5f62a53b129658276e17fa46ec57f257c42173e5f543238c2d736423f9d2db54099db381ce42197f0d5
-
Filesize
990B
MD51a27cb06c795ba2a41014a7a1590f721
SHA1c5b5224ea7d48a1b8bbaddc48d172df80fb33213
SHA256c3a3e169f772cc1ec3f600087ef325c21e469fad389706079a29f4460cd46bbe
SHA512537ab518da9f42cf3fc9fda1ba7a8e8be87c1f5200c5e73ae56f90a17ceca5959fd557c2c76c0e80f173bc471829dd890ebeacd9bfb43341fd6287aa552dc7bc
-
Filesize
990B
MD5e99d853594f15863b459f53e47e32aa6
SHA155ed1ab68306fe79c55c8ec8f493dbe62237351a
SHA25613e43b5d6a032490093850f19afd680c82a698635a05a901dec72876d6b7c23f
SHA512ddd0fe6cf22a116b9ee9d36b1e0554f33b2723d4c62118e7ff5ec32fff215449b06bdd0e3a47b53ca05af718b0d36bcaaf7087f35dfb156b0ffe8d7206d221a7
-
Filesize
990B
MD5193368ca46531408b758b092913ea9ab
SHA170aeb2b136c620c91fadf71e70c0ba000d8d99ca
SHA256abb8d6f73f6b3264ed98c4373035c980e3017a79c3d3e49b739c10aada008ef0
SHA512a2ca37038fa7e4f32a2d3fd6832a7fda9f493135bfa7d9c0ec3883aa7ffdcdc88005695ae276d494c278c4a94d48bc353556295d38848f025daadcdd9ee3c491
-
Filesize
18KB
MD59d57b13e417afe2c83c774677f463f6e
SHA16540df649a466ab0cfcfdd2338470281d65ebc52
SHA256c9b406837fe9c729d7cd78bb73dda1c7da5fb0a28b1a03b01f00f3a57f8261b3
SHA51252941e32599f270cbde864cce07094e3b5925d399bacacd144f7495518ed8c9f46be0a723218278b9c1b4e64173c69ad2605ba1b3f592d2654c329cb9ac8a297
-
Filesize
33KB
MD5d855b18bdfffba1ad6498da53ec44cff
SHA177f4aee2b41328046e1a199e49393a118fd4127e
SHA25640e38f2d05731468e4cfd75c6717f73f386dd85964ce96b82bf4ea363d04df06
SHA512230949d3eb34dfa3cdc379f7b1d4f836de2736208e4c10fd8c9d1df8809bfd49857554da961d6e28499d814710cb82aa88e3791eeb0f57a8c0e727ff35da8043
-
Filesize
15KB
MD5d33d0163c4b51f9c9da3caf778ff108e
SHA174a6ecdeac05295721847c9e625cc9b4bd970f59
SHA256c8dce44e2f494ce83441f7eb00490ba51283677dcc84715307c0886e3040c2b1
SHA5122183d5ac2b35bf057f30a8c4c19f867e22541949639cc390d3039658b12a3a5d1af30215a9b3bffae7e7a197af71d3d49035b33059f19ee6e8afcbc52e300bff
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0KRJUPPN\embed[2].js
Filesize61KB
MD5a10bbcb280cd85678f7fa91f5987a1b4
SHA1d03518f518678e57318f383add3c26eb4c891d96
SHA256dcd6057e903309b4cd9d73dbeb9ebb179dd625facd8d04c5578bec9e44f54e0e
SHA5126ea2764ec8b7b63c48890f15de50c936406a60bd4805abe6a90e4522eaa4aa88f3543c9f2aea7472d80608ddaf4e1444e37618533982bfaf5d168b3ea8fbaac5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\1XJX84QL\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U6LYOAR8\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U6LYOAR8\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U6LYOAR8\base[1].js
Filesize2.4MB
MD5ed2c629dc5e405799ef93b97876abc45
SHA10a2588c1368fe48fb433cad8acc58b1214a77495
SHA2561a552e8ddfd36edc537188b01daf4f0388bb040af577451a8d0f3fe11d538e47
SHA512990b7bb30ce84a94f364e4eaf4bded1ce041ceb3906bc253856dfa2b585e40a92e3fd658d87588b63afe35abf0111fbb616d02f28b2002ddd80e8e0e4c64b795
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U6LYOAR8\www-embed-player[1].js
Filesize319KB
MD5aafc3991a4c65c32f11e3e55af0c0acb
SHA1c77a8d5a8933d5f4189581f6b9671ff6ec91a2b4
SHA256cf3a4809b702abf801ac1d61beea76a0307884338c26c1f970e3cb6bfc0870c6
SHA512c81b05da256b4ee16d58c6a19100200d0fdc908d05d62536d1229d7f2c639faa0afa922d034f5e12ce9164160b0358df60278b937233681602cd48cda6aaf7d6
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a