Analysis
-
max time kernel
132s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-06-2024 18:28
Static task
static1
Behavioral task
behavioral1
Sample
9f249946d6e57fcd3f977c867517e9d1_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9f249946d6e57fcd3f977c867517e9d1_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
9f249946d6e57fcd3f977c867517e9d1_JaffaCakes118.html
-
Size
57KB
-
MD5
9f249946d6e57fcd3f977c867517e9d1
-
SHA1
3fd09903300f4c62e6c044896af5f900e1c1e720
-
SHA256
e63f668c59c2f0fcd1dc73478706b5c4911a74020d1d0152a394f3e6e9df38fa
-
SHA512
dc5651fa8cce5a352487ec2b935d9e5a330ace0e7b0e76e5c9474b4c67893e2b6678ef30777e383cd12288a0dc65f0fe557f96f98e6ce373d8cc6ca2f1254d7c
-
SSDEEP
768:YGvYXGo6zqho66EbMoEF2wdrIzda9jX2Nz/s6rD+P2:YGvmv6Oht6XX2Nz/7H
Malware Config
Signatures
-
Processes:
iexplore.exeIEXPLORE.EXEdescription ioc process Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000f4db533a7374c8468e63a0d8b908ccc5000000000200000000001066000000010000200000002f53830ea5338ce09db345fe30f7508e13eb0acb06558d42ce6f918ad31d55c9000000000e8000000002000020000000c448f315508529dc0b161571cce8c099c9dfebc348ede8bbaa96edfa65967390900000000e88efa725f94e34b1acc3c37b9a9ddfe5b9f01e04244b0bb5c463f73c32a5d35d4c2d15630990fea36005ecc4e4de3a8a65ea4d90457a445dc57197d7b38bc00a4deb49cdd3e0a25439ea10a5bcd88d177cde2ea9e6e39432f65637fa2aa00e90f65b1541e2b26eb6740ff7a21c6eeee2cc894c0540c2ac50e962f50a240b47ef7fd1761eb4a086a5ed9196224dd02240000000a40f3740d484d79a3e834cabf7fe0be8ca327ac5bde71afa0866e5845386b2f7dcb85259149b2e123aa44d12ccf4088bf511828a2e1564d5c35862c7d2d6cb6a iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "325" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "3742" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10830" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "331" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "3824" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "14081" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{741C29D1-2820-11EF-8706-CEEE273A2359} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "233" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "3824" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10830" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "14081" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "17486" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "14153" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "14081" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "17486" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "17486" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "325" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "331" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "14163" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "331" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "3824" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "3742" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 00db914f2dbcda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000f4db533a7374c8468e63a0d8b908ccc5000000000200000000001066000000010000200000004b2618eabf5aa8228964eb0e469b361d3d7b2501f8274fde50b39d305538bd94000000000e8000000002000020000000238985ac20b7489de42cbb0d06064ed1794aebdc0b3e383b0fb9e76365efe2b2200000009d116258b9dd90675123df2668452705a6a361775e758355c1f92a1582293f8040000000a7e3cd6474a371b800ebb46daf8e0001067632847453fab589b4cf878ac6c372fbc8f3a8338f56182d2aa0500060e4c68520f2e2b83de87313a22454240337fc iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "14163" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "14153" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
iexplore.exepid process 2168 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
iexplore.exeIEXPLORE.EXEpid process 2168 iexplore.exe 2168 iexplore.exe 2232 IEXPLORE.EXE 2232 IEXPLORE.EXE 2232 IEXPLORE.EXE 2232 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
iexplore.exedescription pid process target process PID 2168 wrote to memory of 2232 2168 iexplore.exe IEXPLORE.EXE PID 2168 wrote to memory of 2232 2168 iexplore.exe IEXPLORE.EXE PID 2168 wrote to memory of 2232 2168 iexplore.exe IEXPLORE.EXE PID 2168 wrote to memory of 2232 2168 iexplore.exe IEXPLORE.EXE
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\9f249946d6e57fcd3f977c867517e9d1_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2168 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2168 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2232
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD5bcbdbcd2e446736a7baf199075ba072e
SHA12fd271c70dcb004d8c0c923e43dd81096490c8d5
SHA2568dfeae9ca9d4ac9fe23495d8b0439e78af17126cbd556078d2c78ec7f1f0931d
SHA512ccfb5f67392d4543fecf0689f2c37675412b608d23f1263dbcd2ff63a692b87005130e4780c300a9c7e54eda981c614194afae27f356df70781fc77ea31df383
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_B7BAEDF8A66155214D6AA1EDC8BB7778
Filesize471B
MD5011085f558d1c6afe8652d2342c39968
SHA1cbb7f23346d1bf03bf98bd84edf7744ff96feb46
SHA256a8b70c516e4b7a6d27535caf529730dce55d74a3d175472989f452c636f94777
SHA51292760797f91b80ee1b8c9fa86da69343c38d5b8ae42aed10cdb55d7147e222cb7bb5f82cea70bc568e90b74b0abe72b057d26e497aa8f195d072d3a9243a8656
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5520e537f0f5bd580a25442fbd151f100
SHA16c5a5d6c79dd0fdc6355f929d31301b442d59453
SHA2562ba1a8ed61ff004254faf9a604c5942238469508f4a861920ead8f570a0a314c
SHA512726884d565fab1869b6eac969dd68c7c0e345b61ce2f01754f741b98c691913227b391fae6501a394eb7eead6bc249a4c020e8db1a5c3c8eee128ac693b6cdbb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD5c70271ac10189ec89eaff68092044b7a
SHA1079fb0d6f019590c572851ad023c80d2a8abab2b
SHA256688d0b5ebd438b83a09c11f954691c7db1b026c02735bcc1e14ad416ec85d7e9
SHA512d84dff787bd9214657b7131f50cb799ff151aa2f6e74bd3cadcd3570ea42a6c5ca6c7d4cf777c76af77d2309f0ca47e905c3fa394ae32b77a1b32585d18baab7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53c3ee6c0aa4efce530d3e2792fa02c7a
SHA1b058f5d7156486f5e967bea6571836101f8d4cfe
SHA25673f64868ed6fa1f26ab07a7eecf6fc92377276591cebd4bacf80b7aa7c2403ad
SHA512b88a99f9ceff00cc6b87339ccf65cfe0202f159937ae630d0e8a9533c35c8fa6380fae38f2180ae4a3d7490ef3ed96925866502dad3395b1b57167b22f58c69d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5deaffd463b24dace4156d7379512f300
SHA1c7cc047ce5aef0b2ee7531515f2b4cf7413d2a01
SHA2567b85569e07019954e6e492d6639ffdc0f4c36d707d8de36cffa6b9dc28fec07a
SHA5128d51cb774c1289e99bc53adaeee193178421938ee9e2f3220ad0dbe5bf659bd902baaf8e395453904a33d52b5fc95e2334f71df57de5b7203258a80783d66063
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD554c6c96fe8ea35a6c67f34babe699704
SHA140e5bde50f8679aa26136740d69160443b23143c
SHA2563e706ee43391cd1e4fc8582d9aa30347fda37540060d3e774dad0ff4cd041edc
SHA5125062c2aec8f8949ab6a26546aed5f8cf74a49834e4055bcf871c797c7cf07ee18ce1fc4eda7947af9a2c90f0861e4cceba357809c375352ff5b539c0313335ab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58547c4ff99a61c28943c7d1ede06d6f6
SHA10aea91ad37e5809d54b299795e8a76972fa4a602
SHA25645547eee04fcc3a6eb34b9de95d797b3e697d24ebeb1a96f50aec332a55e629e
SHA51240d4952712c874a40944688d86177be1828e64e6da8e207dfcc5e786ee3b25b953657e393e2792a70813acfd46cf6209882354bc9edc9e83d7b85fd6f930d8c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c0e69a7a3b668ff9b7926404a52e6159
SHA1d7dc8af0f0268c36968af01b011711daedd52742
SHA256f06c4bb0c326613205bddefcaa1f6446422e9c73a5b8a1acf4248440ac3af2df
SHA512d50d6c0c5990bf6c73c87330b6ae924f65abcd8b9cd67f7fb78fd9b39f5a3e8f9c393fbf98328e7bbfae26a49229dd561d53b137e96b99b517ea886911e44865
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dd342d83f9daf4a8398b6bc9baa16868
SHA1d17bf98aa168c4c8c535ce39ceee4e878c6c9be4
SHA256d1afb37db28592561f0c88abdc139c8130dbd0c0bc8f9361f705559fb045e7b3
SHA51266ab31fb6c534b89b2b0613e5a4cef1499e945e1f41665660190b9bdf3a829658b6666c66b1f91f6731398d569955b4cb80f8af07a16cef80b15f37bc0aa7b94
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD576700c0c453bb2c090719b1c212d21b5
SHA14dfd812df048ee89410d30cff03b2e19aaf7d278
SHA256518d6057f1a3a049fbce01f90ae378f1f3ca5d23edfc0a679bc05a4ca6f8eaa9
SHA512f214fb53852ba76ced8eb9c238ee71d569556b54c9e41ddd332a528904da9ab7093a26ea340180c23f3a4404372bcfd54e0b30e3285634304f9294b71d73f544
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51c4fa656b62f87102aad08b7282aa574
SHA10e9906eccf41e0e2b67fea608faed260d49f92cb
SHA256c91d08ed1b35dce61f5b54542dd162b8163e58d5f736f4616fbb217c3c1f1cb1
SHA51205b3da8d1f4bece8f3702c0504af812fc6ec91006ce11cc8faf4945972e152e143a1dbef5f13c6bead16bae9b5a16c97319898f7f784bf54c78225c5a4dc8a45
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50e43f9069b29755e75d0c132fc3d1a2f
SHA10834794a433f5bde992474f39578e2fa1af26d3e
SHA256e3fcdb7e8548631aa1e7bb8916bada383f92e198d5fbb57c3e51801f4e8c9503
SHA512e794cdf62f5d1f32e41998d33f591979d0e3bfd7321af4090d95798ee82d7453c90267786d72e56b6594acc29f74634c67b7920a46e83e1c83870f175844c926
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c3366e9f5132a14243ec2363730c686d
SHA102f22e855d9b7f1e9bd8ca5978f245d735071c66
SHA2569b1a882b70a3873b1bbcc5395dc79739d1b1902720340f0ea1a598fb0d0551c4
SHA5123458dbc1a1f87523159434fe94155ffa3aef7bc04cf37851746ff21bbd5d17826ce7f63df1d31550c2e6e1997562fc622f97c46d924882a102f81ba18c02595d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5423301b3023341a201bbd64bc6522a6b
SHA1add5f9fca5c74223e68e40e482d95e0a7c2ea5fb
SHA2560deee5bedb7f1debd8b816f92b7a81c4e5e7d33940bbf0e65e02a47cbf6ecf04
SHA512dcd1b394b4ab23a38c06df5598f116839b9d24074f68629eedd9491c375cae134ae70338197837e729d3c489be68f0910950b4239b62705fe6c2c5a59e09a393
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58737e03bc76ee68c1aae29d98ae411b6
SHA1948d1897c2608b7de3288e41a7b1ed80da4656bb
SHA256bdfa5cac222fea2d362ba67c6d3f5bbea84ec272b11a2c7bdc8a8ab61328a16e
SHA5125cb2595d5c2924c061dbf4fa2527f87978dd2ef8e09990c96d58f966de99246498152ee1aa07f566c85563b5535037fab09e6ed72cfec8d73b6747f669aea452
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e2bb45f784a1ba09b80854eba507b29f
SHA175f0a6eaf8f5e60855f48230b637467de52bb0ae
SHA2563a875fc4200714c39ab8d8982f43f580f2727236ea5c0a221519e3e2d2ed7681
SHA51285f1419c94c9a96dce478e98c4d15f3bb9433b33d341ff6524f7dd8e89f27e93e239e8ec6513f826fa3474dacbc94c8f1e38bb23b3e4b727de8312e0bd04386c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dc6aabfa46025f549e3fd4f914401b74
SHA12729673fa1e566ae491b253dc87ffc326412ee95
SHA2567f9847bbb7bfdccd2c84ea2538315c16bf9aa7c3060d2bd906134daa497e3a0a
SHA512d65ad15cbdee9f700e6fc291e37b3cd8a3c85436ec7bf014f503dbf3544fa844307b44a4e512d6356ceaf2758ae3c651a42f6d8fb834a8fb03d696ac68562d32
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d37d1e93e5671960f965d62a1cb19467
SHA1b898ff03ea94546b66c8d12eb4786eb02ad2ca09
SHA2566561dfa76f25b1a74fdabaa84f04450a35a335086446e2d351ab20bcb6066b6a
SHA5129a27cc23eaa567eac67b2e46451549272d6b54bbe684cbc6e5a78d1292d4c9fc753e24535bee812014359a47c552517382d9c11b0acf97f6a2e27a94562d7b13
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51beafc194974af7d7f8870be3a3d36d2
SHA12e5d25f97a4d384172994404c5e8701d6998ac7b
SHA2567c650ba92d080759add51d7a2316bffe50c0b80f5d7604eb59da830cc494a2ba
SHA512c440ea119d3294c4c6e1d4c0fe6bc1b89b315a88f1f02c57df5cf089f909b7004ffab5cc38874cf99867c920df49e088cdd9cf84459a4954f893750f6e4012e6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50fbf5e0834ef1f2e45687346a3e0536e
SHA110cd7626c69240579ebaf9651e3443d38848c0ae
SHA2567d68aa3d1140389d5125c5a1e432ff7088f7a29c2a34fb024e8e58b816cdee94
SHA512c7dc7b2998b85dad8466a5f243a6132997071adce6881d5577d3774ce5b7f66a33b88e381230a8708561fea3dd320ba3a0d24d56405e0d86b53e01bffe134365
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5add3abc4e4fea38cfd14166e69b16cce
SHA1677d82874f50f3cf87476707b13db92531c939f8
SHA2563fa2cf5b172a9f9eebed32b9ba57f6e728d01fe31bd8cd0021eda932fc011e8d
SHA5121088679646e8bd0745f4cd631dfdcbf85409df8464afcad7d9ebcbd797489eeacee8e2d87937ef33c3ad74fb5d8b41723a37457e5e134163b55edbcabd5307eb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b974f8c1015d04226dfff35be82fa7ef
SHA10b5b463a12c683157238a1b25bb66e36c5ed6878
SHA256c1eaacb93a24a3aa70c31d763b45084bc081543a25f1f3b66f47d18bdb5b5be3
SHA512095fc3771a07de89f08dbf07bc0ceebe05630ff95cfe45b623701a02b8670aba5c77cc61136f59cabfc6363e4c7bf75fead9bb8c3b09ee125877151d399022b3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\A16C6C16D94F76E0808C087DFC657D99_89FBEB9EEBFF8AABF1EBFA20B87AFE7E
Filesize406B
MD59af942a713342b58d42c51753fa88418
SHA1fdd2c19b2bf7f8aa4e8c01321a7b55004be49db6
SHA256e521388c73fdd33536653593548ec69c00240929c10251fe99e07b999313afeb
SHA51204ea03209c3e2d26fa78e0849e58155f5ed8483201c58c2a4f54e6fe1bcdb114affb725ecbcb06d039590f5d1f8497f4f87adfa4f1c75059adfe84894b7ba10e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD5953bcf4f420397b3cf28869890508eae
SHA157c8a40a0b6ef29172f4053fcdfb8145ce15a83d
SHA256f2e253cdbe90fede2b8777fd7f5fc0850d7cebfa0698f7ff9f27066e6bac6da2
SHA512490e299459f9ab90866208191ea20f68727f973b04fc394429c60e720410e5342b768422774bb86fcb457d11daf029f387271e523c1db2bc880a9ee609e35201
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_B7BAEDF8A66155214D6AA1EDC8BB7778
Filesize410B
MD55635d24e6ae73189048a5ee3b9e2e59f
SHA130f14649d5003f263116455863079e1d89c11be7
SHA2563ad75ae859784980d4f2681e69a3078cdd97d701b6c7f441a223c17420323bd0
SHA5126db4f87fbe34c6a9bb6800205f7b039e4aa0d714bbd61d9c11b224d3010ec383af506c33a8af1819655ebab6ba2a4b6fa47af3d12927426dce2df1b9a089ce7f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD5d6899d9cd230b064eba1f3cc0db0cca8
SHA1c45e745085d2dfff5e9889dc914303b02f1d402f
SHA25682761cae2170b51a611dc10bee157b1a68455a3906f8b845852ccca0a13f9a85
SHA5121fbac7f57a875cd85bd1bfad538db466dadf63f6f21ba81e1269ff62b540c2d9b7f4b2b559742a1f6ab560d13fcb57a1e6e08161501c7f75136c29d2a6addf31
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F2DDCD2B5F37625B82E81F4976CEE400_7B6B0766585C28B689143E993A052643
Filesize402B
MD5400e442c4ccae31610c4e3120dfa5a5f
SHA17c64f2068e980513452168e4a4b37974151b7a0e
SHA256be777dcf25f077b91b08567556ada24a50cb1d1fa8b2b8777b06fac120ab4243
SHA512cb553f3cec013d4e8a417032ac1da91ee96fb9596eab82372bc57cd2063ca4af991bb5a6d2699d0e05f9d0eaf2a7607f89e8022f1310ff00b91a2c9bdc8defb1
-
Filesize
990B
MD5a30578d0d16a0212b7429c23524dd036
SHA1d83d55a11677ae0007a95759230f3d2824798b51
SHA2563ae859a8da894624249f940d3b8c3a427e4844bb6cbe77745d11d854adeb62c9
SHA512d24dfa93ccd84c449b64e4c2d18bbcaaa22f3d3fcda5c3982709671974d48bfe8f500ac1f229a803597673d0b8ef4f5459af982fcc69050a863e917aaa72c2b8
-
Filesize
990B
MD5734fc28fde8f98b332acd63dbc3ba85a
SHA1287d2d4fc10d265e62325eead3dca74440454d3e
SHA256d77be6096f66b8a0cc587ef5e10ded10d3df8ff926137ccfe5d49c89a47a4e33
SHA51223f0c0eb7e547988d5923c395274c56d590b071188cf27c7829a0d549fcb22a446790e1e8ff21989fe5340b3213bd3460f58d87de9a3815a7db46ea26388d9ce
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
228B
MD519db9bedd3697998f0b0e5a163a2615b
SHA10a688378b877c035800bfb46e5ed8e5cf047d8bd
SHA25640c48560d91574e188c9ba0b36e69f6afe3881702c9b06be82c469978690279b
SHA5127eebed77be606a0711744caef6479df80a788354082bf9b003a5e509dcfff9f89646f8a28a2a11f08387db17814c418c4e2a6c9be620e63e0b3c2cd7f9ba7e5c
-
Filesize
229B
MD561d0b160552d9947890478b4beab874f
SHA125675c5c7507c3c2900fdc7c5b12562f47d49202
SHA25695f34ea092e4c3069acc02fa846a1d307df69bfddea9da5c548a47db2beab835
SHA512113fe50a627bf7cceb1533d351e3176267db6b7344d88ae7f6a8d67fb437b51c38995b22a815f1cc79e8938855ef863a9fc9952fffa07ab4493a3b96c37de907
-
Filesize
229B
MD520f11a61eac30363d5890a83f07e149f
SHA125afbac288d5cdb8c9b2076e5bb066b3c47f15ec
SHA2560703a10b10a27a57430c730d43d529736f813919420ee75bf43fed2d4d727d58
SHA512960db9f282e90038398ec7d8f3aff0e39b37bdca12834c6b76d8b05829fc1976c7f9f2d6018495e46d0b4a4f330c2fb0f56d2c95af75e853999c3717ef11e41e
-
Filesize
641B
MD5ad11696c50553fd39c85e083c4abb595
SHA10f2e80c5d2fdb8febf9cf4c56e449b2c4ea38458
SHA2569088abf2289d17b2caee32b8d67f6af13762e4ac2f4681de222356a5c95f899e
SHA512c5916bbefd7fda09a239ddb6730dbd7fe07cbec6cc37a717134ee8b85c1fc0fcc32cfab05a77eb2a77ac8565bb63c8ae43a905bf0f79759a2182b16c0f5ae26e
-
Filesize
641B
MD5a5735fd3f7ccf09e91725cf5467b0791
SHA193fbe29c4947a5380530a92a05b3886ac6190e45
SHA2569b6e97401307a6ae8c975995852f532083216f3dd3da47a57a4b851597ed75d9
SHA512fc4b34da3f585fe866e2926046faac5df4b11561238795d014f6863a26d096c4685578a4789c79441c6058ba7ff572ec1ad32267af3fbf94955a9298ae1be662
-
Filesize
814B
MD52382c49e272a8703b0da5c767c5f7262
SHA1a959b6f965e656bbe69ce47ad2d340f5ca59c7dd
SHA2564315684c8099e105e5d4789adc84f4953dae7badee42278b4b484713ebd94065
SHA512a19b28d0e2089692d1fc8bc12054a9491443ee3268bff249ab4e0b6da13ac4a7fad6b93b8a5e52b1514654ada39fa0067477f8fb4d040ef2f3da30f1e4ae63fd
-
Filesize
26KB
MD55bc6792690558d952bfe3ce9b30fb059
SHA14eb8c6c2c97406801b8f4a58975a6ccdae0deaaf
SHA2569adfb348bcb7bc88d476deecb778e5d03b8be9cbe30bed5d624d607a4ce1973f
SHA51298bae67e30d2914370d73e61c00fbee6c1f343cf3e03d6e2de2b95ebab3ad1b177404edb4e973dcddcb376ae8972fd8ba11e5f8d61198c4330ac1330c2958245
-
Filesize
990B
MD5ef1e07bb3f181a706eb5bae5845e6360
SHA1c451e0adac2a687652da3e5c6e06c88ddb9b9d21
SHA2564b56a7e7113ca2fcf940b4924c936713821e547cdeeefd778111fc668c49200e
SHA5121ffb1bcf3349307ebd7714076500d2f93f875ba3d283f76b71fe475ce07464031b20e3becabcb24f0ee65666e4aab652cd0ffe89b6d4a4aec58838e96303591f
-
Filesize
990B
MD5e2f0bbd8e6a9dc725147c4d3a30178eb
SHA1a7bb2b58db994e457fc2de9a5fc4d1cf1ab29435
SHA256b6537aeed72cc0c527f66fcc1deb2ab9f71132508538f73a2446652b0d28148b
SHA512f5900a8c6e92f86220651caa89781630d7f614c509b8f94e4065023902d083ae7018eede2cb2222be21693bf37a4c576c1796fe8cc1b227456cd5cb1e955d622
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9M0HR0P6\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9M0HR0P6\platform_gapi.iframes.style.common[1].js
Filesize54KB
MD5682c26af19b240f98d2cb951721fa54d
SHA118e58b652c7f82a55ab4b1910693686049e25d62
SHA25696428f0f585a874c185d560538ad83ebfad0365d760fcf9fcefe80add9e3c980
SHA512078aeef086271b7f9cf0f6e3a1e7908d7e38465a1a7a4de6f2a785147e9130551a2995e80600824da9341d58e5425d4505518e90eea9ffe1c64f4f41825a9660
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\base[1].js
Filesize2.5MB
MD54baef95dea52995a1695037852e4ea66
SHA18874e4883644a2e30e626a34becec8587577fc08
SHA256b42cf83d76c3b2890a5beae078ac33ee3d054a31b9f47dc4f88cdc2086819d84
SHA5124d26834698ae5e12b5327c903020c4ede8b6395d859fdb6c70a7d9f60c15958510c10a79908a96acda21966de6db8d2fa8f87a0265828e458abc65cff5162ef2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\cb=gapi[3].js
Filesize134KB
MD5f9255a0dec7524a9a3e867a9f878a68b
SHA1813943e6af4a8592f48aeb0d2ab88ead8d3b8c8b
SHA256d9acfd91940f52506ac7caeffea927d5d1ce0b483471fa771a3d4d78d59fda0d
SHA512d013be6bfc6bcf6da8e08ed6ff4963f6c60389baa3a33d15db97d081d3239635f48111db65e580937eb1ea9dc3b7fc6b4aecb012daeee3bf99cfebf84748177e
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\www-player[2].css
Filesize371KB
MD569958caec43c10f1d36a71ce83ac69e8
SHA1d363274a0f568e4bfe98e978eae59441fc17a1fa
SHA256d24493147c49a7b5d1a21c66aa87d11a0c976cd4e9392b89add880139aa2b1ff
SHA5128a57bb5c5a1f7a91057493bad34133f7a2da0b7322ea84638a82e4df13045a584b11a0bc5beb90c018e9d5fecd323bc73cb35e2c322804ddd74ab0e4967bb84a
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\L9PN2QMY\yLH_7IXO2IqaYUCpWhi8UlTKCOG5A1JfiUQGnHrKDOk[1].js
Filesize52KB
MD590cded2e6eef8bd409a3222054b8a584
SHA1060f93f7ab67df5af3d631db908db7d1696688d1
SHA256c8b1ffec85ced88a9a6140a95a18bc5254ca08e1b903525f8944069c7aca0ce9
SHA5124f7d8b010dfc8f0f6674f87888420ed86fb12c0792ac40ae3e576d6d7a9913bda48e10ddc6a8712ed0a70201876b93e7b0c15ec92edaf25bc7c0062d2498edb0
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b