Analysis
-
max time kernel
139s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 20:35
Static task
static1
Behavioral task
behavioral1
Sample
6889eac13fd497f5a2f46403ffc5c526_JaffaCakes118.html
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
6889eac13fd497f5a2f46403ffc5c526_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
6889eac13fd497f5a2f46403ffc5c526_JaffaCakes118.html
-
Size
175KB
-
MD5
6889eac13fd497f5a2f46403ffc5c526
-
SHA1
d0e55338bef121fe67af7857cd36e3cb7af609f4
-
SHA256
029b4ac7c7deae3ec51db73f11b1dc80303327ae22e19d37597023ea47562fa1
-
SHA512
8e725348e9518ab37dfc2bfb5ce8e2680c59f71e092dd38d7102fa3b2f38719b3e0502328f236cea3c9897cd949494fe111833af372e8563fc62ef2769b88987
-
SSDEEP
1536:Sqtd8hd8Wu8pI8Cd8hd8dQg0H//3oS35GNkFMYfBCJisk+aeTH+WK/Lf1/hmnVSV:S4oT35/FpBCJi2m
Malware Config
Signatures
-
Processes:
IEXPLORE.EXEiexplore.exedescription ioc process Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10509" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10394" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10394" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10394" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8936" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10417" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10299" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10417" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d7c7e73b934388418857a0db8be9c1d1000000000200000000001066000000010000200000009902e6dde5ffaa0d6cc63ec2147473247247fa873603b9c1f74a423d475314a6000000000e8000000002000020000000343bfdcb194d3d1bf1d6d541f9c4fbdbad84aaae9efa26236bb6aa19f3944f79900000006b8998b15f7664d6e8a2a5d4741a8fbf1aa4f35cc67fd5b061b25270c16c95f9084d4bbcc5cfe77c671d24f1e2b1b4d83665dbbb8fe486e324ccee2c9a92d50c32029880564a30cd061603e0871d093b485136c25b2f165fce81694ce8aef7f0f6a2b742190dc463e10698fe83c5683c166b8f1191b701135ff1fd800103369a2527fd5e26c8a518553835cdb1403c72400000009132770faee356276d6da0096856705abcb3c45befcec22507c548d99c70e89b30fe9a699c4bc44f6545b44c07a0ac874f8e4e9dfde45dca93e0ec7bd000f23f iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9491" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{CD6E10D1-187A-11EF-9A0E-5A3343F4B92A} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10299" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10427" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 702970c787acda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8936" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9491" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10586" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10586" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10504" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10592" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422571988" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "410" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10515" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10586" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "18954" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10299" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-481678230-3773327859-3495911762-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
iexplore.exepid process 2456 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
iexplore.exeIEXPLORE.EXEpid process 2456 iexplore.exe 2456 iexplore.exe 2144 IEXPLORE.EXE 2144 IEXPLORE.EXE 2144 IEXPLORE.EXE 2144 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
iexplore.exedescription pid process target process PID 2456 wrote to memory of 2144 2456 iexplore.exe IEXPLORE.EXE PID 2456 wrote to memory of 2144 2456 iexplore.exe IEXPLORE.EXE PID 2456 wrote to memory of 2144 2456 iexplore.exe IEXPLORE.EXE PID 2456 wrote to memory of 2144 2456 iexplore.exe IEXPLORE.EXE
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6889eac13fd497f5a2f46403ffc5c526_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2456 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5575c2f9b4be8ba2a88fd29d26bd58856
SHA1446a2aaa16b20c9f6bf0ae816d466f0180f01f31
SHA256ed02577221043610e0664e6c0aef685dc3027c5e5b9a86c9c5e8ec49ecc0106e
SHA512164545b9bbba3b28bf29d84031a025d852d4cc93631242d1158c6b6e50afd09b548f456d14b613b2865790620652da68256fbf05154b0882a880500754e50dfe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5452c7ca38ad09ff491c4bf68c28826fa
SHA1cabbe20423b202c9e7988a9438ac3aa9e40d856e
SHA25615f27b17bed9a8235f04594983d68e952eb425379f10a778b4220edc33371dc6
SHA51231db6085d8b44699a9da86733229af2f1a615b38a58ca4b7024c70cca09a8d17601170132ce1f6fe86215488840fca5ae2c22827e307405a6a4909c77411509e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD580dac2166d63821b2a58b41462a9eb21
SHA1462160e528b8f3f1a67e032c31aa7971c71a38cd
SHA25650c48fb3bb083f2cf3a58ad33a53dd32cbd98416500656ccb442c6aee6cd76c2
SHA51276700268a69aa4ab60a26d6672c1b2ee9b5218615fa44dbc7c44759dfe1f0511a067602540a793ddb2b69682d62a06cf594aac6fd27a01a04d29d2d9baf0b2f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD58675f7e9326f5b4ea4958c909d4a3ef5
SHA18ac868fd087cd7664f43792d39dbddd24365a0ad
SHA256515714c4eae269b7287214c63261bd0e8d816bd64e4e503cc6e7edc92dcd8943
SHA5121aba3f558d9c83a77c0e648aa0fcb16c5e16cb1956af665212050646e4e2f436f36c5b9d8a995a1d075a800b2d47883d6225dbfa65cb2cc22df8f890e672c04c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD59096535a8c173dca4b9ecb6bfb01564d
SHA1e1da0906addce3bc12ba4f2a2a23f0483bc2875a
SHA256cab4c5512eb0dc8ec14518e3a8e818ddb3ff073e77120c3bdafcf6ea0db7ccb2
SHA5124ddebbd35434c622ee44a518b810335066ae84c6925c9911637b2797e3b0552e69e1df06d68e523904c96e90e60089b335b0e14541d591b73d59a678c412a1bf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5898755b250a290c844ca016c13615772
SHA19fd1e0306620b3eacc958e31480b69d7ba7da3ff
SHA256d88c0f19908fcdaec8cdca3669e5cc8e72f35239192f765a6d35843e899fb3df
SHA5126c27cbca1a2ede4a5f4c5a60d3c321105973b13ea98cceafbb651a7acda4c9daf1da1163457af7ac7004ca2c4dbf747c0d740d2af1bd5c3bb2585a9f896c0ca5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD54ed9b58e57c9adc2cb41ff12a6765d4f
SHA12550dd23a79ea872718bc2284d35659922df4280
SHA2562732ba77bd6217ef7bf8b246c90e900c9dc988219f06d71a2e1bb47b256dd5f4
SHA512ae3ddb76728173ef110e890a42608b1e5e2cf20a682c36e343e388d7a43670fed359773a6157399e1bbea4f4a8764301e6bdf43eabe116d23b12cf5ee817f70c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD57d2ebb4943b6c5ac2d142c08accf5a0c
SHA19a4b3fefa1311c24d4f792f6be2a055e5c8b21cd
SHA256b2153c147064c6313bc878dbe6cd500218ec8b066107c5db0ad19d5712216d3c
SHA5124ecbb654808885d7aee77da431fb54c71e4d3c71a6829924c8e7ff4a5f877a422cabdd96d9a6c8f32da4d5f4a09c783bc79c53f5681e94c75b49f5891175f1f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5d6cdbcea73cb6b1e0b06a2ffce6f3df2
SHA17c30930944b31a05ce7e51d37f6416f45fc9c20e
SHA256c77d071188bcf60fa6562146804df2bbcdef67f8d380aceb7573c55e3286e009
SHA512083459564780649944077a1c8f59ddcec45e351de7af36f5a59fba4ad1a1b8987f4f7479a74f65061356fe9ff05690d04874380853892b245235a7f06fd8c135
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5631f0b06e5170c790663777091a06108
SHA195d8b08b3b0ed40fa1e2efb33b30797a71ed81ea
SHA2564f3542ef2df3de967e41f4cb8b9436d2dd333e100169f5c45be790797a13b2cb
SHA5120f7beeb1b796cf4d7b45c03ada66f712903ef1c8b4b3c80b59676ce679ced8b137a8d9f297c345f6c223c3c60e6638f8b61d001b974c3325dbb6ffa876d8d93b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5f3a2501d8caea1564d32cd15283e7e10
SHA13fb8d58d94e43f7e2fcd81a3262e13ff334504d6
SHA25636e44ca4c1a9b2cf1ae25fba241e33ef520d33508377d7c847eec037a179b0d5
SHA5121d04ffb3ae72689b94f7579091103b81e064f7789b0b07ba6eda1b563230530cd0cf9e1652bf801d7af58881305fdbc6b0a2e2c2f433015c811d86cced209c87
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD5d2a453adbbf092fec7dc11cb98c2d672
SHA1f1816fcd0e7383a6723bfecb37d2296cf9290cec
SHA2566cce3a03fbb27b3e465496f305f5561abc465400d50d4d2c993710aeaab5470c
SHA512c47b20bb6566802416e206577f56e527d39a4584ce9c69bbd38d76e7ec3b7ce26a7866a887c83a940784cbfb1bc810c2f98ff11dad0773bcb1ed27ecf1971d52
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD58ef34ab99e7a24df6057a2698c492d57
SHA13113899dd6ffbf6d035ae65134e369a543dfa677
SHA256b6aac304ba018d05aef91927dcdb2c1acb52de57eeca075aa237f47f8ef4f445
SHA5121b3f24f8e6d85ea6275e8cefd74436cae3f3bb364bbbde840081f0b6fc39f9e8a749027608e7d8ca3fb543d740581f4b2541f829dbd72eae51684c16fc3b7e91
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD50f39185784086a60f9e2764fecb0aca9
SHA15beb774b5c1e9663b63e792e4c6d7a756aca6cc1
SHA2564927653c678b4ee93f66b0ccf47b049a997401035f8bdaec8e87e9796c9e2aa5
SHA5121bfe36d77ae211193417211329ca4f2a0d2a10d50ef205c3c139b204a20034890ae62dfc112dc7ef6bcb3f59647fa21fd0b341807c8cf77b769d78a7d0bf6122
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD54913e7e670216a28a81d7a720f91a859
SHA159089f5153e76b8d576031ba8e530437feb4716e
SHA25678ebaabdd04829754413349df3b6b9226f26781bd6d951c31aae6e4cf87388cd
SHA512fbeb71479c97ca54af4a04d799d06a0bdc61e7cd6f43dcc441190990c90f7983c425af1794109f4556a42775a9d1fc7de115060ed79015b9b30e5e2e33b01319
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD502ecc9017d7adb9ced31568272b131e1
SHA11d04629d1c8014e03b8314b3d999ebae27853ba0
SHA256bdbd426aac7351ab47831199f6fceb361be8c5615418946083f290cc3d33799a
SHA512b48a1d7f6a8602f1a0ef4fa33d94aa2868c9960518ed581f6690afe7465679179aeefc8cc46dc01e6d02bfd77d5447b925d1ab7bddf6553b456d4c2b70c988ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015Filesize
344B
MD54ea4eb0caa1b3ac1761337ab4c81521a
SHA176915bf0b4a1fa465b440640c20928caa3f065a5
SHA25671c4b126376956e87461e08f8ed012d4180676af9009d055d84cfe1bde09fcc8
SHA512406ff19a4d1f97dc6361c5e48f43cff86eeaaf1833c31314d2ae456aaa33b060818a481e70875c4ebbe5257d3759a9624c82d2e5f8dcd55a7a65f3152fdf4732
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD55753f2df0938920f5c22afdb3429aa0d
SHA1f6ad19e922fc0a2627db325a465c823a018986b8
SHA2560d948468bf8139af2a36632ffe98c1af6338ce1b4acf6696894ea4b0b1d5ea0e
SHA51215d94fec208148d9f9b17174c402d8702dc5617fe7b185888f2626c9f9e5341a3460d85eeed697a3bfafd5f2a565f021887d7613552ccb500857dd75f829360c
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD562fef6eef9f949881ee58bab31ecbf11
SHA1b608f8cecf01f9ba1fbd4f6428ed4b91886452f4
SHA25609576fc2f7edd29894459a8c8f27a304ac91299648a033d5db4f5df1ec4f1973
SHA51211f8c525f875eed861221e4733a8b952c13ba7341bce7bafccf4f97496a821e334e5ffc030bae5e7d6778cc5354ca1798785183fd3f7c21194433a4641a15303
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
229B
MD52fad7bdc664eaacd78a55f3c3e543d0d
SHA117925100fd5680474e3a1c9bc71f655084554156
SHA25661f25a8844864b5f6d0427d8ed800f4cd4d95d8a398255c2b48ea8bf6e6799c1
SHA5128cc7fc453ee4b523ba20760fc1a86f747e7a4919dcee0345d10972e799f1b5a54cda12ef86162c7aa100c85d6c7f0112c158ee7eb46a25b84c283f41143280e2
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
15KB
MD5acb84bae3199502d8bd787d60e4e4b7b
SHA1c92d798bf100c8253146b27d6b78f21db4bb179e
SHA256b205d0008258ee241059f6dc515db803dc41414ec995cc6dfe85ab7923e01faf
SHA51241ab68653c12d9381ec7e1d2cb41ef59f53e6c7d61201344c5d93599728ae28435c1b34e6056d3c7887e24ae9f8f8099ee93881a11ee62efb9c65ca42e6bf1a2
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD5badcacf8bbbfa721a0ab53671bd5d2a8
SHA10addd97f6357be331510d1c980bc2190f80e0104
SHA25659c5e53e89740ef762659dba007eb8aa7f94381be6b2463ce4f4b1d41cd0bdf1
SHA5125c5b7c1f7e7656f339ecad816887d9b27a393c6d3cdf5371590e0d80168064e910008341a9fd1aafcee10c943f3bbc76979468d8ed35b2383d2dded8a98ea736
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
16KB
MD5beec9ef772fe14389c8bcba29af26166
SHA197e32f68b226e9dbd8b26d097c5706945508fba5
SHA25620cfbbca70be940bf387345eb4396a4eab4b58277d66bad3b12fcde01db5d11b
SHA51244835854a7e674265af8099e11586bb17a9d01568a0d592f426dbd8cad052f530ee96b47874f4f0fe09e293f94384d01fc63f77cfe74b7687900ac398c4b502c
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
16KB
MD5415e01b638006cdab7bd38487043c2a5
SHA1880121c43cb11c47c5e8ff14abff2abe10ce97a6
SHA2567b28b14946754ca5090b2d68f5ac50b8843f92eec0b698009a79860eb2f2b812
SHA512551b512285cb216f59deb1b15303883c41fb0343bfb39e7a438727741365187905e97097342f9a992ac5ee32d49a04c2332fa625cc7071edf7352066f3915c2f
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
29KB
MD5db0ff0a6f66bf201d218354264d360ac
SHA1c86565614f6d12ca7c2e56f8dc2b3386e1bc9fab
SHA2569f72fc51f51637ebb774a48b15836da34562da1351467b63a538b2fbd873b98c
SHA512edf72231f68d0758c671dca6785b9246b0011a9debcd3c453bac2ef516583534422ec4d4cefcd3f7d98c7593e56fca5f89a87fc2a637d489c37ec2c72d0478c2
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
13KB
MD5a3943e37f4489fdcaf64f48e3e2a9c98
SHA1f1f0f7e44e6e99656e57cf9ee6a322cc04ee653c
SHA25649d701dba0b6dd70f70c2742d3b546650ae5bda7adef954ec8a4fe884e2399ff
SHA5129ee0b6b6c3c604ac2127aa8c103d5db7cf3231116e169e0736a22a2634f6be26f222abf133b2f063df2ba335a52761fc565af401a38e35eed52b4f465fb9368d
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD5c78b6e9eae324d5cea9a48e2fc0551ea
SHA1e7c53dcd8a39f94f4e28d4cacf5faf00f0ed3cf4
SHA25633489c80d89aa9aaec91e6df24d724b691a548cfc89bd49d64ca5028c686b9db
SHA5126b89f0c16cca8a4dc0593e6e99752b932163b28b3858a90007e52ed28d8ccef94dcd56bb1e24c85b907fce24a7ddf5631f1ab8c5322f7ba315a0e56a9f94be0a
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
229B
MD52e077b79868ad7f34439e478832ac76b
SHA11131f2a7144c2c84602c2082d89e8f9ba0643601
SHA2560f17399a9fc7676d773d53bb7619ea9e5503c6ca672f44bd0a54058c857b472a
SHA512dd517394279d54c22e135bb07f576c19a97d658bd2479b4f092ff1ad680ded0690f378a1a14d38a36b06b284e37e0dfddba3a1d05851d7c39e198d697a7973aa
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD59b37aca3d66b3c7b4673cd5312ce42f2
SHA1a061cb48763f4258dc4b79a037e4ce2f5a74c8e6
SHA2567ca21d15d21738f949a078f854dc7ea46362d4f80828f9d3bf448f312b00330c
SHA512b538ed2270ada33b48757dd2588e0551db1c527046ff6e2254b41e6747c1ff294d7e18e8cb9b5401744483525c71489f5138d341ad95c6d3c6286fa130e8ee05
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD5d358b0c267dca5b8a6ea8c25d5765377
SHA167fe96bfab4b9f54ca55333fa0c33104c9874a46
SHA256eb0126b58d3efc4cdecaf19d8f5a3a79925bb895dd4ac39f041762812e844eba
SHA512dbca5bd4d653738bf0fbaff332a097c9e371f0d1508844e57cdea64101948392424ecc5be30ec87d752fab841119239287f20be2280198cd2d0e3964ef45b110
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD525f005a9b2e6d446394a97cda34e9423
SHA171da27112d8688d5df90237b0bcb700aa253d369
SHA256f9856a5012946eba45cfb6ceab507ddd17bd3c04e888b9bfa133833d9e1609a7
SHA512395b221deffed8d8adca6da8be78b5782c98d0d34ef1aff239a6d930de58cd9cbfa4f3441aacac7287b1fcd6865c8bd141426b00062cd99e6d17d594e2a64f13
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD5b6b02bb3b1c4f1bf8649d3400f7a02f8
SHA123c4ab7849c4201693ac40aefea1def06f71765c
SHA2564eb858d262789fee5bc015b259724a14aab60fd5bc45c732f2b72b667c539964
SHA512d2269a417b1ee5243f3d51b603d3480b5479a9dcf95c078c439a28fbcf7e6ff4e7df5fea6638b2c18071e47bc4d351eaea96c57ce9a05dc287afae0814951ce5
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
16KB
MD5e6877513e6e38ae4f04d0f137959e444
SHA133fd91034520bcc26756a7c78997ea80a22d5758
SHA2568126afbd977ae2f7def08a3024fdb83ba8fd990cc948397a7de8530a583fe61a
SHA512bc2b5bb97a651571841a8d043c6f681104cc6c6559d38c47c222c7cfa4aeff82a3c3a67c95ce8e0f803e10aee87ef4cc9e170c92d0d2531d066a1f1d49a52bcc
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
30KB
MD58305223c928cea36b5e36be95d54f62b
SHA1de31a5505ac7eb5aa09889bb843c98a0ef2b910b
SHA256fea2eb59fdb4f866c8032580554141944ed780dce21d9c9d659434e9d081b057
SHA5123b9a82402f6937967c56763dfdd2db7d2866d35d9ed9c3f42caf0d933020ba8e2d334af6a4d24390af56151e24c399fcebab2dbf40d5c7712d38f4d8c113fec2
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD574a65099c4479c7b57b90ef4df70a61e
SHA1fbb7ef78e6c1295c7451e8f138990b3cf5444d3e
SHA2567cc08c8540de3378b09844e4cefb5f528644a7f7b81108b5f6772346c7694318
SHA512c6f31b714e15023736d6f5a39397ab980dad2ac984e9103a05d7abc854120fa5c450c2ef3a792be92a574aef09d9a710f29bd18a3c12f95fe09be9105104fa1d
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
814B
MD5057fb16adb93f0bb0edf648e4a72a3a4
SHA1fd191e9873d07ba6d3d55b2e0f67dd336cb17d21
SHA256f51545d023f2309efed81ba7e4a5b8879815a548cb158cd8582015baf7f18c73
SHA51292e5f5436aaade5ddaa88d77e9ffef1b02cd2cb6049a082f4c0e58de1d1d8610cc7d223029315d77ee4017e125d430e7dffe03729e0470fbfbf7d0d51bf1839f
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD55c251b51cc0fdb4db06f9fd37320861d
SHA1a97ebecbcf3100379bb2904e9d3f7b182227faf4
SHA2566e0715df2f896b8918e9a893a0e84708a8c77558e223d006346bb6356ed9c01f
SHA512f68c3040ccb0ea93ce041d3fa536370d7b07354f36e83e0136f0571d204b416d86c2580b543726012ebeb0776ed0375545afb76a8abd6b852f75a8be91ea1863
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD54b99521db571bfc09a0ee6f054faff37
SHA15780a7cc7930f0d234b13ba58d6c08c28dc8ebbe
SHA256c09d2d3dfcbdcc1fbce3ce859ad6d06b99342b092649c74151a1890d8044c2c3
SHA5128aa531baffb716245f80933bea243e710c644a69a384037f1672797cef922bb967afcdf91ccbeade366c9eeff7eb68809b14419d0b22bff19c68dd4a3f11ed5b
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD59db0b8298f77603068f43cf9759bc574
SHA1cd28598a7b9b0689ecdeb61b67d54cee0a3895d7
SHA25662f912d0d83ee9006cc0469eae01b97374acd621d2d4b6d5e358657bd8fcf818
SHA512a5620fcd28d46452b4481485d097a850955bb369c8621f8d3770dd803382c37efa088dc0d7a9a72ea17d46adbd79a2afb86b0c447f2379e3eb4ecc9e9f0b1d94
-
C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\25XIWQNX\www.youtube[1].xmlFilesize
990B
MD5f26b1388923a8ae1249cdfb5fe22f17f
SHA19037a02a41ba4985bc9dc5142b89ad45e0996283
SHA256c6427762d1284455e960b1c30467056278b1e0c968f40c89822bf7183442908d
SHA512cabf3d1d63d32af87f44423fb243b6ab2eb40a1e275c144125e059f22eec9d4d91ded51b1af228e8e23a6f60a877b0560ea89cdffd7b58c10fe831c5215e4d05
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\528EVS6A\ad_status[1].jsFilesize
29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KRMHFE1W\KFOlCnqEu92Fr1MmEU9fBBc-[1].woffFilesize
19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KRMHFE1W\base[1].jsFilesize
2.5MB
MD5a9deb7d86c8069e99e066f0ec2df5505
SHA1e152fda6928ba053d9f9b0a68636d85a25910d3b
SHA256e0de88e01744ad9058ebc1e4898fa2f38d2030b6a38801b44425c3a95932c5d7
SHA51232120679e53bbb2cb216b3cdc3aeb6715302b7f8ef2c8a0e1abf29e2dbb05eb0d9129db3f12cdc4c9965c063d17dfc6270dc354471d8671086965a8c97e9e847
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KRMHFE1W\www-embed-player[1].jsFilesize
323KB
MD501ffe52cedfac91db631afb50ec0406d
SHA16c46d6f85c315d1b5a0f7207ffc9c11f51e91509
SHA2565e7aa90ed8daf375a49334177305eaa26fd800a2a580efe1da3388ad51b094d7
SHA5120f3b013d65a6bf7acbc350c0a664fbc4549d388599a9442a6a7e0efc5bbd33da5dadd8f4d0c63b0ca10c0ef891265a2921e370563ce92acc1d0b977423b67af4
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KRMHFE1W\www-player[1].cssFilesize
367KB
MD52e78996ceb03ff27ed11a8b01483ae6b
SHA172000dc28e979f553c7523f10578c9ebb00e1a16
SHA2569af1ef009a9995afe9fbcb1faa496f1a59beda388d4ee8c6ea7ad66868809d33
SHA512e48ccfbcfd514c644f41fb20938af20c4d2b285fae25bdcad75c0cbb8845e8253669da23d2350c38516bcb403e7bfb54b65a66d2070ada24883e8d9de12de913
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OV51DDG5\KFOmCnqEu92Fr1Mu4mxM[1].woffFilesize
19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OV51DDG5\remote[1].jsFilesize
117KB
MD5e310aafd1959dc9c22496be4088f2ed3
SHA109e762fcb97399f47a9dc313e8d76cc2f52f43de
SHA256df9e2acb18f3323d586a0ca1696aaba3e5b471a425e117938ae7c6e80c712364
SHA512f29a84f6d28c9cd06baa169938dc08ad1c4bf4cc40753391038b2c5e528d4827bd7e770afa4ea0baddc6160aab840d902671f8fac0dfd8eeb94694d3058d00fa
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PH7CXNA3\embed[2].jsFilesize
62KB
MD50913884c05cc8e66bd6b44869b260497
SHA15b0848b108637c2a941a5955fb7671561b4f07b1
SHA2564ba5b223752962ca1c220ad7be0f618a58d29c7a648007c227d786d61139b81f
SHA512b9a665c67c717a3d370ff8062c9f64cc08fb4e4bab80e4411a1c143b2ad5c506b6d9c779577bdc789a85d1873cd77283f495ebbf4db52a6f9a7e1c68c4c3f1dd
-
C:\Users\Admin\AppData\Local\Temp\CabEFEC.tmpFilesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\Local\Temp\TarF250.tmpFilesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a