Analysis
-
max time kernel
117s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
23-05-2024 02:18
Static task
static1
Behavioral task
behavioral1
Sample
696c26021f93b6c3544714dc9588f5ff_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
696c26021f93b6c3544714dc9588f5ff_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
696c26021f93b6c3544714dc9588f5ff_JaffaCakes118.html
-
Size
175KB
-
MD5
696c26021f93b6c3544714dc9588f5ff
-
SHA1
96481a69bba5f089e8953895cd0ef1f6da6e9718
-
SHA256
7a944712aaeb66c62de82819ba72fee4d7bffb97b096f6dbaab3a5a45eb1e8fc
-
SHA512
4499d541738c71e9013abac5011e1e337c635492bdde84bf8383b386c464ed50f61d009746cc60aa4af21600f02501698d59280e018e135030b773b62d5ea035
-
SSDEEP
1536:Sqtz8hd8Wu8pI8Cd8hd8dQg0H//3oS3XGNkFyYfBCJisZ+aeTH+WK/Lf1/hmnVSV:SOoT3X/FDBCJiVm
Malware Config
Signatures
-
Processes:
iexplore.exeIEXPLORE.EXEdescription ioc process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6414" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "2964" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "3865" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "14661" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8446" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "3865" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6496" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "14457" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "14569" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "2964" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "2964" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "2882" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "11023" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "8550" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6414" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6496" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "14457" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "2882" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007e0bcf0780e70649814d3dc0200d190b000000000200000000001066000000010000200000007ecfbf51853fa091fe32cf33588877bdc784be3d826455a9f81b8dc299c8c8b5000000000e80000000020000200000004b6b9ffe7abce9724895733bcb2e772322be4c2810854e1ccf3dd1bc2fdf53949000000041837dbc84028a2cde3adc66f74387739c895c09680cf413094470873999d38620e1678fe28f935889c424f86068934a9a17b54507374582c47d80a8755eb497a9da5ec3162f63a7c1170470038ba5f8d18f1d5b84b7abfb32a10d3c5763e0705003a030b60fdbf9bd01e07b23856b1b8a5c44a19c2afc44b0bc25a048d685a7eb93335f9326126604855caa023049b9400000009f99aabb8e8e19b17b3adaeb1c7b0b8520456746c59b3188df63e9d4e6804178888902253e655596294a7e951d42197ad924620e150f1253e7bc2cb25c86cc85 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "2882" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
iexplore.exepid process 2484 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
iexplore.exeIEXPLORE.EXEpid process 2484 iexplore.exe 2484 iexplore.exe 3064 IEXPLORE.EXE 3064 IEXPLORE.EXE 3064 IEXPLORE.EXE 3064 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
iexplore.exedescription pid process target process PID 2484 wrote to memory of 3064 2484 iexplore.exe IEXPLORE.EXE PID 2484 wrote to memory of 3064 2484 iexplore.exe IEXPLORE.EXE PID 2484 wrote to memory of 3064 2484 iexplore.exe IEXPLORE.EXE PID 2484 wrote to memory of 3064 2484 iexplore.exe IEXPLORE.EXE
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\696c26021f93b6c3544714dc9588f5ff_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2484 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2484 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3064
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD57575c39a544943a68ce6e709c586005a
SHA14874b30bd1d455b28a95c4e21c5aecd1ea043d7a
SHA2564737de49245ace1ca1fdeaacd5feee9bbda88bc6f42c84a1ea7d316383792cf8
SHA512abf3d85393725113e720cbe8980b369236511e3984e8cbfa795f19bb5d6e39822e80a835caeb498581797a74b349765ba1a27f26586a17a66ae1c88bd066a3d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\265C0DEB29181DD1891051371C5F863A_242CEA72AD255CEF17D8B88AD3038326
Filesize472B
MD5b5e2c762c3f957864cc623f3aa592d9d
SHA117c26969e68bb99a099690f2c69ec81e35ed9a83
SHA256982ddfb7c749194f9442229960a1d485ac303234481b0a116e12278d50d4416d
SHA5129f3534d10fcf275631c34aa57424d2f0124e326888bdb3e664334f7664927f856b6eee6ad771f1feb137d691186d2dd4e203ea620518dd57757dc43e16b9df60
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_C23811B47FBB3622EDD1969B2F2E15B9
Filesize472B
MD59ec0c0975769b344e444cd6d67b294d0
SHA103c02c2eadf8bed22c08d5d5ad42581c6904fe56
SHA256e47046364ecd78d78749ee19335ad9bb8475a3df6ea3fc1bb99536b50f8a274d
SHA5123ea28b212887287338722ea61b124e0e27f72580bca1af6abd7625600fb9f483f09e840906d8479980f199d31f317cf9fc5873763fa486b5828b89c9013e12a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aa9c46663da07c3518ce191831388777
SHA145f11abd755d0972392772229da38be9e0213882
SHA256a053ce1fd774d121ba57ad86895208aac61cc870c26c9bc211ccfa3ed23e6bf1
SHA5120b2eea8e7e037a2df7207a66c44df51fde2d5c800fe327101604ad20c9f06adc3513238d00cea5ecbd2e29583dab599db3a29b7122a283050c982b520a1ba575
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cbc8501518f46c4cdba45d323b607c95
SHA1f90d31243dd25b8c40513b0325d4c1ecab0bd38a
SHA2565a5060b4c2a3550f705080385e5853ee872b81db324f86802653464824a6b53c
SHA51218faf8b15999c444480ccf691bc2ce19240044bc7e9d8ecd5cc1c0a134575312440d3d1425cc905510a299ffaf664b13a3504d3a2ce5d06b935d26284526adc8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD568ec32236c253a93002224f837d09b6e
SHA1c7cbac0ae3e3c2a066d824d2dcbdd55c0cb5110b
SHA256bb6015941849cdcfed99d45df763f2e1ec3ed09f40c6bc66b25470ad60d5868c
SHA51203a15b83a6921e44908a1d75fd7a23c7e327dd352f526765cfc16040091a0d3945117ad6d2ee2973a89068735606bb7577691a10f4553e4762f2860dbea8da49
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a5c15302ba8b9e2edfe30cf148ca80fe
SHA154b5e2755877365ba9ab4589508c4fe1c130368e
SHA256ccd9978c9e1f5bf6153def00a8c72684df46d5c3b00ced002ca4bcd8343a93a9
SHA51226c7889ea448feb2cfdb44e5b32afc6113011b1899a2c1332a5204409a78eee7b12d11053a437f42c28c441b96e0f4f6b3ca8407ecda5beb9bd78aae46d31991
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ffb8623629fc9cefb1345a19a83222a3
SHA1a1d67a39ceb3890131d395a1bb0111ed0bf81911
SHA25650416c2c2ea6cd1f9329e3c3064e0832537721c124eeae44cf7d889025c754ba
SHA51201905479f982127c54ab13c56c52a8072fad4411f805e28b49fc80de7597aea077ee58f06fe4eb863ae32a52e2c2b4fc68fe9da77e0eae8c5b864e20bd39a8bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57d5fd77919834401056ba3906d99adfa
SHA1543dbdbf18506e344b58da47b01d97d4f9148517
SHA25662621cecd7b210e34e87b3e4af2ed7026d568cf48462aa5cbe71c04549e5875a
SHA5126e5407d67d10dcb20a77a53df6b7718397db1fc03f19eb1765690680fb49ae95764b753e8508a14ed22ce9c11a4cec1056792fe35e2280acfbbc1b2dc165b8a2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d284c3518ea6bcd3338ea7a7668ffb5b
SHA128c6d5a25dc6f2674bc6ee04713b0bf99ef70d92
SHA256037e1902dc809486178907cc907ab0c0e7d5a4702d0ff1d015b6c2265f2183e2
SHA51210a52ac3585a99e83580db7a9ea0f72342cd363937ff3a7c4467497a419b815617a5b7ecab2e4ce45d4afbb3ecfb4299bf6d459cb3a949eca6043223b60f8ad8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ff098b29179206e62c681868f31ecca1
SHA174af3594c6b457078c7d805e343b0773e82066fa
SHA256239d5000e4344a3ead81b2f4bb36f1ccf66c2ab4db6d918d4a16fa4b4e46f678
SHA512a781f39933f148010ca59c3bed2b64ff44dbcdcf353370d17955e7fb1519dd04f472df09225a3dd5f19d57d7d56f5291ab5066b35d002bca82967443da7d485b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f84644970b2a4bf0308c3ec12f664044
SHA1879bdfb9ae69286e1ec9176d766bcb1a0af56c17
SHA256f35853a3b226d3b28d734c8223fc820ab8bc214e491fa2eb4ad17d903350bea0
SHA51236e29fc6176fd219d7bea47e06e0060b6f6f0fa9f037a374a378ae1ea28d2e01616ced131a19ae1ad2fe1188e02096aa6d7210e6b501e83199e49a2e963af5a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD542f1abd785644b19f5dee3f70e4cdeed
SHA1eb8e9807b192058354798d9aaa441323f5cce803
SHA256e3ab3aa8f664d0193dbbb30d9a3e217553c59ba6dde05ee6a44134304c26e69f
SHA512ef52672bf8ba9457532751a23e7037f7a81967f7481fb0988f4b00327f1d7731be4f59a295a2dc31f09903c419dce3c4d27840eb13ecb4a5d507de61368b37fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD553c1ec6b2d932dc2f78afe53bfa70d71
SHA1a8f407a9d9354baafc5e31fc135bd67b02e43ba7
SHA2568d1c545c61ca37dc16090d36154944943d142f62bc6a0072b1db89c565535fe7
SHA51292bfcf3ee00bdab1272a1d167fd1ed12535a2ac5d5ccdf2b484e4b4ef135db5e52ed526f0b92788662770eb3bf8ae877a4b67c593a45d2207108ceab9b22f835
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD510f2f0123088c8dae2d3bf2246c908bb
SHA1de60d6c3cbe0afc88a9fd7fc1a21885a25f66ca1
SHA256b9dc9773f398adb857162b416d3aafd0751345dee96e6d5ef44d3f508405e66b
SHA512da46a1c7e3d892922155f1a6f0d65aec4bb280b88fe00a6b0543d51517ef67e56ac42fbd0443addc6f7bad95cae20aea272fa817481d970adcef46705848ae79
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f8cc6d800bf2ae010444a13a610563fb
SHA19092bd36991bb88135e7c04fcd9a494cac43e2f8
SHA256bc20aaa16ac2e288ebd6891487951d021b0dd2e4b9a16d784e38030a4a9be497
SHA5129837a82173ed0110792d07228211bee85175e31ec6a73de251bcb809660508017a31b3b005fc441ea1314c46f34973306fa011f6b3ca6aa3184feb5d8451063d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d8f304993d64d5ee1a00a60ebe8350a9
SHA1f4f774eb347a6aab2d007cdfe4aa8bb699bed497
SHA256439379a29c1cb27a72979214cdeda60ebbfa686063c859664e5a55da80f55b7d
SHA512c81293f19d9ba2f78095cd3d3d50ace741867569667ce6f4306af0929169438ae575747aa59ee6858271a6e90c63b23ea18df1332d592feba01efd1337b4423e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5084762cde0f937ec37080ac187442de8
SHA1e1e58604720383087ade4baca687daa674a999da
SHA256121290a73d85da9bbfc1487a1a2377c46b93953c2935943edae128fd500ef6f4
SHA512c73c3d2f5a43831d5a7a4c635b8dcb358bdb7f52e228b87a3933d0139d6a38b52bec0cb5ace46ec799812e616f0c4d84117a00de29786cc74182e276d2ca39c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD577b4e562ae840cac6b3487ababcf5fa7
SHA187fdb368aa6f3b96db16ae1d218f132cac86a748
SHA2566bd6887a76271f9a6783005bb987c9c50775d93dcfdc7016295af37254786f82
SHA512998bc1b294d1f63f438f3a5dc0c70ace8076e9d3a2a365bd9e310db49630870dfaad71b120b82d5315547034d607422601bc838835e911e42d0b4118a5d32e35
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54decf056fad3d759ee31f69df6f0e866
SHA12b46a0329c148c0607e326d2aac65036518660b1
SHA25638df984048d1b38ade8af385ff0a4130bce08de87a48144ea8eda4e66b70eeaa
SHA5122f8c58a671e33a4bb02eed01777fb261631d011fafa0da77a08730bd6248a84754369a50a91e71122180b693d071db54b965ddd4c2bc9b36281aa76c5590e2a9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a56a68470445bd2855f554eaa86a7291
SHA1264a9bddced29227f9ac66c4bb06c7561cbe045a
SHA256930114ea3e589e4ad618212e265504972c6ce64caa17be38f5750fa22e70f93d
SHA512f8ac7efb594f7f861e8ce8569e094abf00f6880472946f3aaacc5813cb391bb898b8e9d94a8e7d0d3c6c048a0793b31f8b7a619583a94cf2cf529c3bacae9728
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD5a06d0439240ac1561b44d4ed2d52ed34
SHA1150ac2fdc97d9b825a2fb518e69c493045b68f15
SHA256eece3981f5351e1aebcff43b8f7abd8a2cc5c06fd6449293bade1c9245bd06bf
SHA512501c2bc8e29fa6d4c497fd8966a0003634a9d3edc35304ce3835994ea52b17cfed08e3ff02d697c3c2abf3d3861183416ec8d5fc3f81215a3b118c16d382e471
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_C23811B47FBB3622EDD1969B2F2E15B9
Filesize402B
MD5e3e9a99d5bc082fef81439de6a4ff697
SHA18d7fc16cad331398fc379c8948636b8f768bb5ae
SHA2567c186b9481c1d727ac30cc937c783c3f00d10a6aabb899ec9ed4423b56bdb18b
SHA512a484f9a2ad81e749295aff4fff65fdafabeda1feca30a54d824f65d6e4db35ed5b1efaf57181c2696430bf23b90ee180c9552fa11577cfa283002d13f1e7ddd0
-
Filesize
4KB
MD5f02ea006bafdce5af7ed9c1c2cdcb10c
SHA1f1b5328d1c1c129cc7f3b3d0780ebf5d46ea5e6c
SHA2564ef225f70caf3964115f5f31ffc8a1f5a9343474f247808365dbc8aa38588d9a
SHA512da55dfabba68806dd0a60e59788c25d6c32d5735a18241f7817acdfab80186d24f677098e66f8693ec284d92c264fed5a6533a73878881133109e6a1a2614861
-
Filesize
16KB
MD53f94e5e969270f1c1038e2cfc6ca41f5
SHA14c34b8123fd257681f31107a73c5878829e9b3ce
SHA2567d2c6e5cbcd6966abed08aebacc0cd2ca533ec692b1788c568d0c8cdf3f01d30
SHA512fc9261a26c9e85ec1a4ab994969131cfa49475a5de2b2d43556733085a61ddb24f591fad757c35d68fcc62100e0ba36d2fe178f97ee5d98daa3d5d8cad159023
-
Filesize
990B
MD5e9b17d3e62d0811fd946183a293eb59c
SHA1261c5116c89df3307e4dff90bb0d0d41e53f5d29
SHA256297a833408b3a3ae1e905d08d83a55c147fcfe47bb30ee95de3acee4796fa502
SHA5126dc5255fd478bc0b27aa44a152ff71c10992b826e01fe396b501ff7bfca234dc7da7c371a27f5c958181b4f58a4099a520d4bd527b5fcbe89cbb03adc9d3f70a
-
Filesize
990B
MD59bd7edcb347bf84898a102bb87f8c8b3
SHA16bfbc76a0757f4cb121e54c539421722feebc1fa
SHA256e1942125cc34939863f806215a68d7b52d99fd9b0f659e4c4eb846951262a2b2
SHA5122e0b4b90dd1bab145b7a829bfb86e27b76877de78f300d3e6954eefbe5db8e26bac2703f6d94d9271cf697cf6a8dacb621a990db8bb117b5349351e19693216c
-
Filesize
990B
MD5cc28246f6f0d8bd88a7c431d5ea6e6bf
SHA19ae568506aac4e944da95c59e71b61a282e7b20f
SHA256923f5ad493cc654febd456be70306dc333a2bbbb871994c15491bf6704d26c35
SHA5126ee3cadacc071f934f05e9b1c158e93d72331e5ff06c82e5d98007e7c6d17fe5f8d6c1d54388cac1abd24d3cbcc104dd084d812a3de07829d4bf307eb874905b
-
Filesize
990B
MD57ff471d291e4906a5523ed3a3b13a902
SHA1f59b8ac68b26a1cc38dba49507e8e576e9600ce8
SHA25626d8e00d409a007e36108cc590b141782ef71f54fd2d38d71af545f19cdeb6d3
SHA5122cd63c84438268624c3ab9620d20395e2f823cf670c53d697400c1688a009fce8252463be91abb68cd9e86b90a77600559537f67d795d32290d7619e9f7bbfdc
-
Filesize
990B
MD57317c8093412f4cf7522568214e94d1a
SHA1b7ddc250cc0713cf3afa55ba2644ec6825deebda
SHA2564de411a70809466b25186afaefac3e43ff7d003256319368847f613446b44bc2
SHA512b4350c14ae252c00ad779f2cedde8c22107e8b6a2e8896f93d76f9e05809b0421c3fb1c8355e8ec5f5e597393a82510a32856f4d7825e305bcae9260574509de
-
Filesize
990B
MD5173197d568948c368ffc19c05cbb05b8
SHA1bb9a008e6ee28524cd789f90790ce905898c4bef
SHA25640da64140d465092d75de924c361e677c82a827d8231fad14e3bfdbda2ae4c2e
SHA512c35be5ae80cc7158566af3176bec1863fa5f773acbbd5954a9ecd211b15ab7ba1b6824d5fd166135467b5be8bd4a07df93c5bcf6cb52af2f4462913cd55d4ac8
-
Filesize
990B
MD5da33ad44136f370223d765f31b2d5982
SHA13fc8ee2ec4a955ed9c0984062e98e6ad428e3e53
SHA2569b169de61cf740b3beec83c74fa844b9cd37296b799158bfd75957e122cbadcd
SHA5122c5fa89b486a58ebc2506f36f8b4d6bd9adaf83a2bc04b00dcf0692e66460878d62dfeaac6a6118cb2385172b534a64a38b4345047eb881adb84854cad4e90e0
-
Filesize
990B
MD50fa54331596310c51672a32faf3cc0d7
SHA160d7db1f867d1f901bd422bd8682430e378ae46e
SHA25690490cd86869ec2e91a3c430a9902de60ee0ffd0c6969cc83f69ba8d90ec43c9
SHA5121b130e819589ea44ac6aac866c22106aa647ab0d75dc070025d21117a1b06ef6d150a0880c735d5b7860153be8850327fe1477eddc3b448ac180448f4cf3dd8e
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
5KB
MD5fffb4ea7efa5605b2341d97cbac8ffc4
SHA12cefa2a4869277cd66d95bf7a363277c904552ff
SHA256102bac274a3fea2b530a78c8e5a17d2fce38fb590e733de8973a22f1eeb3d6fd
SHA512ab38eddf889a27378cb62c5ddd9b9602ce53b306f8c0a89ee11afc0b6b040e03a30c92febe4f8a0869180a261cc200d65c2418b107e912527d6b13eee745dac0
-
Filesize
990B
MD5d3ed74af872cd17baff6f8038ac110f5
SHA1833c1f831396666b44e207e1055ab64e36b461c1
SHA2567cfb9f8d4d16ecb07f72dcbe6e80cb0847a43d40bd2075bd3c953802401c5627
SHA51204a0d80abb517385b8e79b644deb90366e4ed4ac355d6b09f03935761f78ae58a7e7521be69510051ff3ff10db2a7c83a853023c7da501e64ff0b6c35d4fff7e
-
Filesize
990B
MD5c21e89a1b6f429662aa6f5aa8987efdf
SHA173a17559bd8d949d0e69f07241bf95bf3fe5e43b
SHA256ac7fdd88ad9a7b7754cf30b17f1e7bfc0c44ec7e356c0fd4fdd3eec0fa71ecf4
SHA512219473b3e4e364227ee25327c473a3e84a60c892466cd49706d7fa8d1db1eed793a1041f4a607ef69206996cad61f625a239e04236259e4fdf7ee69ccd30f281
-
Filesize
229B
MD5d1c26062b8e887d9e9b463669cb540eb
SHA14d97ee93399d1e21962bef067963a4dd98358a74
SHA256274e82309a2e09795d1a7381349c8e0966440195bcb9cbe2de236b9831f39b94
SHA512d43b0c6dd5e2ca97b98afe17902d4039f12a57d321633db38cf069b97de12a3d630b7cdcc26db24e20648947e60f581dbb38d72a531da665c0e09979cfdda157
-
Filesize
229B
MD541d1f75d35d3ac58656d76577d5aab7b
SHA1267b854cb602ef74aaba80bac33d40296b869287
SHA256b6b37d0ee3d39daa6972be0c1ce46e804335f61a8ef04a98f7922929acbcbf0c
SHA5120553d9432e5e3ff383c74fd861236bd024eb17e1606c43b00c961ab8c17729ab6107699ef41a2c71ee60985499f9c901ba7551076bd6aa59b9fd176fd6c07cf2
-
Filesize
229B
MD5a319f46e22efcb9bfbfc5310b29f1fb5
SHA1d2f5b27eb18a3ad138a92e0a11d8077ba47ea2bb
SHA25654a09fb48412fcb9c31f3cd7b36d2ac842fc06b1e24b0c317088201f40e19d3c
SHA512af785b1796818b274d8fd331d8c3a97f2a726cefd9bb797cc8fe945f1444b2e676f34b7f31cd4035d9cba4edfe5bd068d4e83ba364037a40d66041b40a93859b
-
Filesize
229B
MD5a906fffeec8373ee47dbe2dd11ae0438
SHA1e4b2440972543bbfc3068c418974d587d0170364
SHA256910ba260931fd917a90e0f85510e27967a5cb1caeed5662117d526cfff2d7e63
SHA512cdd5c92f86bdb84530beb6ae63097b77a3455a966d1df47a3f27628e6ad3b5540786d16ed8b2dd8f40934c1a146246ef10a904aec98342f39fd66d75729645cc
-
Filesize
229B
MD528580ada97fe5085f9fef56cc451aded
SHA1d8332be398875d44fa5f072e457fe95fa373b059
SHA25614c901149c1b470ce47e43cd6b4eecd7c0d73d183e33d448cf1e40ac6dd88a50
SHA512a62d5135eba4e9f639b1389e679cd911868c40509034347c1ddb0692e91a6e6476992a49f7028e213bf94d7e3c1dda38d9c9ef2dd5046f8095a0165d7e63af3a
-
Filesize
9KB
MD53e29826584cda2d10129f63087d44fa1
SHA1f3546c16e6b7f4c1c2b9d631926034f5cff479bb
SHA256a1a351d2c9afb0062c89d7a23241ae96b89e2a7881199a1356615aa8d7cea84b
SHA512f7b566af97f4ef85c7b2b4c8c742321a5503e19ceb693bf16275c0672865288bcadea2ce299872fb54ede811ed1875fe7c0ea89b6567bb2f1e5cbf54e4eb8945
-
Filesize
22KB
MD5d2afd8a9c0ba9c7a9615f592fd55e678
SHA1b254d1ffef7abc94faea692ddca0137851d26eb3
SHA256bd308ccba4c5861dca12b6bb169052d4bb8d70192bb86b4ae80d87102f8123a9
SHA5120668827a5dbffc3690116f11314749ac8fcc13a98f9a9d17ea8e48520f99249fb8caae0f663f497dca079d1a326787cf51855125750d73bddf2f3e5a31bf1b28
-
Filesize
22KB
MD5d017e879c5063e1d79d402b651ec8b2e
SHA11b243eada325b09668e199b927938b38d34d25ae
SHA256a3159148d85530de9d7e99a7213d8eb06e2dd38db729a91976dc98c61162f5da
SHA512ee8904baf9b1176ac08d1c72e6389ace97f6f58823ada9fe728f11a0395c55d77b6d6d88a0febe32f17e1e7a3b2f206e9f8f243e7e2f96d1234cb5b506818b8d
-
Filesize
13KB
MD5515df94b5f9886de12b55670cdce926a
SHA1e492e3894f1c06d2ff80a51678c7cc465ca17ddc
SHA256a020a23f510abd9a290802ce2ffd288ecb9ffee975093e2f8763841b8357140e
SHA51287a513bafa9399d2346b471deced16925cc5f69fdd7045d73bfa1669ec0fbda62421512eb5fa677a131f6a62d073f13d5bf840dd137101316280ac1aaaf171b2
-
Filesize
990B
MD59ba41240222d03e30d754fde5aca2ec3
SHA16aa27b8ef53b57a5d75c65fe28dc0412d2fb1601
SHA25608fd5bf52048237051876ac1cffc198e6ed9bb3a7d2e7e45f3f0653e7ee0678c
SHA5123eb2b818b7f6928383c6a83ad1e2d9ea6e2ae6d7f83cbe8dfe19c2480388943c479927bdb08979e6e55e8bed99bf930d8181d1bdcdf30eb806f7a2dcbe16abdf
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9M0HR0P6\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9M0HR0P6\embed[1].js
Filesize62KB
MD50913884c05cc8e66bd6b44869b260497
SHA15b0848b108637c2a941a5955fb7671561b4f07b1
SHA2564ba5b223752962ca1c220ad7be0f618a58d29c7a648007c227d786d61139b81f
SHA512b9a665c67c717a3d370ff8062c9f64cc08fb4e4bab80e4411a1c143b2ad5c506b6d9c779577bdc789a85d1873cd77283f495ebbf4db52a6f9a7e1c68c4c3f1dd
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\base[1].js
Filesize2.5MB
MD5a9deb7d86c8069e99e066f0ec2df5505
SHA1e152fda6928ba053d9f9b0a68636d85a25910d3b
SHA256e0de88e01744ad9058ebc1e4898fa2f38d2030b6a38801b44425c3a95932c5d7
SHA51232120679e53bbb2cb216b3cdc3aeb6715302b7f8ef2c8a0e1abf29e2dbb05eb0d9129db3f12cdc4c9965c063d17dfc6270dc354471d8671086965a8c97e9e847
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\www-embed-player[1].js
Filesize323KB
MD501ffe52cedfac91db631afb50ec0406d
SHA16c46d6f85c315d1b5a0f7207ffc9c11f51e91509
SHA2565e7aa90ed8daf375a49334177305eaa26fd800a2a580efe1da3388ad51b094d7
SHA5120f3b013d65a6bf7acbc350c0a664fbc4549d388599a9442a6a7e0efc5bbd33da5dadd8f4d0c63b0ca10c0ef891265a2921e370563ce92acc1d0b977423b67af4
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a