Analysis
-
max time kernel
142s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
08/07/2024, 18:22
Static task
static1
Behavioral task
behavioral1
Sample
2d5ca43b1b429f7fcfc2e4de2d2f9990_JaffaCakes118.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
2d5ca43b1b429f7fcfc2e4de2d2f9990_JaffaCakes118.html
Resource
win10v2004-20240704-en
General
-
Target
2d5ca43b1b429f7fcfc2e4de2d2f9990_JaffaCakes118.html
-
Size
14KB
-
MD5
2d5ca43b1b429f7fcfc2e4de2d2f9990
-
SHA1
e48ad7a5e55eeb8da7e53c43e2fa62b89d275b8e
-
SHA256
782521f29a09c516f30c62f8d640b581b9ad843dbc0ada5c3bc9cce04daa49cf
-
SHA512
e8c35cc647c6a23a49af563529dc62ca2a0958667bc6616884b92b0866c47bae4e73ff103da67870ba97d7862f833aa4827443ef4872b017fc905e8dd6eb489c
-
SSDEEP
384:Ps1c3qLWf/AzrrXg4y50oCFB0rYmRPcpOJ2:Pcca6HALY0rk8r
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\Total = "25" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "25" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com\ = "25" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e337bacba951544a9a832c52e69bfb000000000002000000000010660000000100002000000052bfb091160aeeacc06abe1eb463f96754428773255829a885e1a9487d86007c000000000e8000000002000020000000d6609b5cd4d29767a0758e80b3b028a57a6ee083ff9f2bd376c801fc47912d19200000009a02d109c6be5c47c3599fbae15ca4eb093d3826f66f35718f22de69822a083640000000cab6e567010fbf1fe2f0e431c90385cae9b58f5e7008d9ff79d703547224b59ee63b1d626d22a09695a05861f2584a8a2c6e5c4dc08801a6fd8a5e14be456f76 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0bd1d0fa4d1da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "426652376" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\NumberOfSubdomains = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{33F7B311-3D97-11EF-93A0-E2BC28E7E786} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000e337bacba951544a9a832c52e69bfb000000000002000000000010660000000100002000000027c5d1b4f35e820bbac9ef5c2542553b87088774e41a710f7cda0295839b27fd000000000e80000000020000200000006766985c222313976fa8a9f13800873732a4600f23abdc63c825767b986bd17090000000b76ba55fc5bc3c705da63f1d54eae3cb3eac8bc9c9f215d9a39b108223be388f53c035be377a12c8b4c50653cf7145971dada03ad8e9ef2f907df0bbecbdd1b4d0c7781a8f6788280ee2edf7e7d1524c7b2ac8de120dea7d2a1574236b88bbe7a6d7a76aa1b5f2242cac4d1da7e17f4106bf018e4b3d4a386a829523c1ae9990f6810ddbbd27e2c12bedb93cd2545983400000004957fc5cf395240d2bd9024e9c645f884ce8806fb982dd90f58cc4b5170fad4260f2df3e9dfaa17658cc4973a668deb5fa44c2125dd94dd1c7e6321f6ae2444e iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1506706701-1246725540-2219210854-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3020 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3020 iexplore.exe 3020 iexplore.exe 2492 IEXPLORE.EXE 2492 IEXPLORE.EXE 2492 IEXPLORE.EXE 2492 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3020 wrote to memory of 2492 3020 iexplore.exe 31 PID 3020 wrote to memory of 2492 3020 iexplore.exe 31 PID 3020 wrote to memory of 2492 3020 iexplore.exe 31 PID 3020 wrote to memory of 2492 3020 iexplore.exe 31
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2d5ca43b1b429f7fcfc2e4de2d2f9990_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3020 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3020 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2492
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
867B
MD5c5dfb849ca051355ee2dba1ac33eb028
SHA1d69b561148f01c77c54578c10926df5b856976ad
SHA256cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
SHA51288289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fb8c0e5d92958e4982b56ea394cbce83
SHA1ba31bb16cddc134266e03da8b322c27b8dee35be
SHA256d327e0009dd3e26aedf67c0d74b0c6704add9059cc92b6a93e5de80956651f4a
SHA5120136459c34e97a7ee1dad7bfd0342c8ca2194253fd024a0a3e8f4f0ebfa018df3dbcac06d58de9a5476b52d5cbe13f326311cbe141c64c0bcd95bf6409969e80
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a6691bdd4719dd485e99c4220556facc
SHA14f28e09abb7a5ecfe82ba59a359fa207e98bc7ad
SHA25621a8917560abb0cf977fa52e13d3cd34d9eae57f7610f75de311d325b8ce3ece
SHA5121375e16bfd70073beb3c0baed979d490a091f5a9fbc6f0f33648c5c1d343525de36caa5e61ae54f47ae040af4086dfe8d5fb2d45f304b20704821bc8b2e79edc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e39cd9b4e4aad07819a85b29fa8ea23d
SHA11c090d3540bfbdd9cbc1b5aa06352dfbcbd6ede8
SHA256921814cdf41ff1f8124a26500d21f90236438ac8b06c59fbdc5c81bc6b2ee87c
SHA512454a0a6f9e10b974ecfd8104d6410e16e91e1c8f34dd655853152baad90a1e836140c91333df0745b501ac4e9e026cbc8746222609d2ad17cc858b5cfb21aa0f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD599f6a5aaa65d2a3e96f6dee7d61662e7
SHA1eae409f55045f29f0d21bf0ead8dbc355e2b8403
SHA25660415402a534611bcbf366ae0a16bf5035cf6b90cb24fe3dd517810c33b7cdf4
SHA51207e1d99b0d510ab7d44dca15bc1adaed9e1df45a1355c0dc6d5d876f141a80acb693c8ecc391b9ea89644726f0b8b3377937e8372d7b2cca574081120a92241c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50997352a47fcf9998abbceb7ff37ef9c
SHA16a2abbefbe789c6914d2e0d5ff8cb21a6634d01a
SHA25655504097bfa48b0eff0694c4d7e7c21fb8d6ce11df9404a296b0a876f3af508a
SHA512f32764a0143d837f839ee1626ea0ab1003c16f9c8a2494abae2f20efe668340b6a14f17a756104ae73263b9f0257547ace1c1b0a18e6e254b9c7ec996d826634
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f3b778a4956c7661017f8b8e86a5165b
SHA1b523b3d6577573c4f9a9321546bc1227f9f6ee28
SHA2565a77c8f176bb998bbc1f748b9e9e3df38e6b50ee0ea60d48cff5d4b794c3b796
SHA51241fc5119d6cfad16fa7fc16cfdf4498afb74088b5be0befdedb301a1b7ead1d70954e2c1d22ec835d2d51961a5b000e37b0740d108976fa54bc0f259667fb96b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c633454e2fe549046ab82526e20c85ca
SHA1721f5bf5eb835a0c2f09917bbd71ee7b4c1cbd22
SHA25699d7aaeead741575f3ec5dfa041e8d5c49f77b39f6bc6bcc93e55b4af97e05b5
SHA51287cd5049363bce61feb129f5ce75dcf7dd94ad0e09066456e2c2c0cadf580bb7fdb400ed10abfacb4c361d1f0eaeea9dffbfbf97bfb5e99bcdd3e3fb07a6e6e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD569be5ff4882ca88e6cb10a9d0dc6b29b
SHA1e4b6fd6109cba7dc7ae4b01f9f2ac2e39a0a0aff
SHA25621a048ed5c468d4db3d21f9857ffa88cd34b950f877620bc5ff878f9379c46c7
SHA512d4e59aeb67671c7c194860b8deef29d005aecedd84724b6fc67f1099c4ffae82a53d82629fd997b247f69942afc17e11c0236fcbcb792d11d424aaeed2233645
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5709d40d2c1d0cdbec28a050ecf4b2ee0
SHA12c5954c469c222f7986a7d2b5d968b3624d04cd7
SHA256f4de6d51759079f730f4f5248a4c54e8dfd50126d2bcf1cd84610dee430bfa4f
SHA5126fe5f0fb13556bc13efa315a42c6b1ce4b93f821a845a5010d7d9d227a180213c5c76cb5247c05edbbe3914de7a27f3f5bfdfa80139a07d10da101c59acbaac3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a3c24601cf4092bb92a6023971ee4706
SHA1599d5908166c48452c26609f711ea9046a5296f9
SHA25632adec7f8299ed1d94f104085837cc15bfbd969bdb10891e3df158d3387fd207
SHA51201ddc7529700218857e1fe20fd4618a28a80b3e0a59c2071b3389482600a064f7c1fa7e53b226c61f642f5dd2a6bf6c1caddc44e08076252cf4c0d33768664c7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e5841ac36ddcb3088378802e3352f92c
SHA1320b1a523c2f39a7c125afe8dd22c98ffa496c88
SHA256fb464533c9b20afa9b2784e4d62cd927d35b4a8ef8e59a78e101122e551a8157
SHA5121b9315da13b8b91f755b9f3076226ab5e462ad2837723dcaea3af0f104ec4fd9fae0e41846da83677117a17cf0518a3dac8daa818a0f023545bf43f9f3bf7ced
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56ae00cfd1221d073150907fe3883193e
SHA1cad50021fb55d42086eb0efaaef6fe01b7ddfe56
SHA256c1f6e728239445375d26b9d2ed0b72ffc89cdfb13813e72a1a1623cc818a4705
SHA5125e5cff3b0bb20b950a8da5c941b07c5308532a70212740f9d868a0e4a724b25913f6a26532b67c90add9866d77c3662715e1947b1022ae8ecd11304997bfa9b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5295021aa5ff7789be7eed9787989c8f4
SHA1498f16eee845047c2f5c1261ea8791a1284caf06
SHA256400eeda948d2b9c868af2e59f4886345cf1aca56c741fea1e6ab5cef06b84e47
SHA512cc8dd5cb9192f13059a41bb4023c69cfb434bd5f1ad086a9438e0973982e5fe6f306815b304b70bc5268521676a97ae6e967c8e27b8b796cac54843fcca1ea60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57bca4a608db98f572c6e2a30b0867f68
SHA1f02fabfcfbca84f2ab92cf76dab018fe9f5767f1
SHA256b28fd54ec06c054d74883024fba27f14475d4462740df7616f262ea78f4ee9ff
SHA5122683cb4fe47765507442d0620f789ff774c38633e4abfea8495d75e01dfabace04f7df917707355f491d015b30fb2d4249288ed268cf4b1b062426d5ce756f1c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a87f8e4140596ec25bb28cf8344e95b3
SHA15e2d3eea8d57f68ee9dab6f0c5430c66dc40b217
SHA256e2c58bd6df76b140f47bd220a3f3855f795bfee61cde4da9c45f78f5f39f87f4
SHA51294bdefc5b76fe205a76b50bd3b27c5d62db403d964d9b507d198946dbfc2191e4436b5e4f48eabd1807068c26075faefff27237bc2cd41f19eca2a25c4f33424
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD525398d71d4187ef87cce2c9e7436f8ef
SHA1a1fab45de8f6a22fe5479eabad4715fc4d698244
SHA2567507011e4d7745d147ca2f57cc2a287a2cf834a7673bd0413fb4640e8f623f3e
SHA512a85f8c6c49d35d27cf48793d07f92b529d1f4cc71889bb50dfa9bfc15c6fb7c70a8c10e16ce2c8d778974cd16d01cfe64f7fad5dcbbfa5d240632fbcabeeb9e6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c6dfe3ff8fed76e9c2c3332d0f909efd
SHA1dd972bbc482af1c9a4821472f083b3f52fe8dd90
SHA256b6321617f9114190b4a73520291a4708900f9876fbcd771fe50489ab8a1a8e6d
SHA512b123ebdeade269ca76036d30ee303edc4aa7fa2e65378179d3f4780b5cf413b554030df291d1c01c59f999c488bf03953d73e976e5b117de70cdec9acc67da16
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ff3dcfbba10a3d612a8017835c9b4a7e
SHA13198e8b93f5627e03362d3b30a4267bad62beccf
SHA256a986c5cd9f3cf3de420b4429bba3c4c130a85ebc00da5ede7097cde0fb00289d
SHA512543f0091905353043fc6c84f36bfd581ad578b61d75d8bca30d543d08946d62840872b7ac466df097fd56dadbe1be8b69c18bb753ea913cb0f67cff10ecfde96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50c79aafdfa802e5e6e58b0e86e7f6d09
SHA1a5a6531cd8fe4c5af2d648696eea582e5824cb3c
SHA256e6ebef3fd9c1689116d8acc6cc07b4d1524da29300af0d3620d1eff6c85d7a41
SHA512770db09b7fce9d334cd7fa8be6041f85f1bbb38f40554f481ebbda93216e5ddf97bd72f3fcae183c3fb1b42bff8b2ac3ba5c44a54ccd340a59319d5ca9ecf670
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ea2585d238eef7bb57d1446c8c962a03
SHA1f1151d51725c0ea7e3bf8dc90a2a0dcfc0ab5754
SHA2565cc4bd11b3d7136b2e74351de74f0ccb479413505fd935c8dc2a60ef5d9b4aa1
SHA5127d50f20752709b8195a3364df577d920c9e65cd5e1f68b7b76f878781cb373816f94b0878896b4a2892f881f94e5ebc59d0ca9a541e9de6f6780de5b1399def6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d198b613556ff098af4f4ef45d710218
SHA1e03d9d26981b1780d4df5c34b418876fc0907db5
SHA256daae67fd496541be61923acf567d4da31375268d5b9d455a73ec3746968935d1
SHA51200277d735c0eb66f51db1e928472fec9b0e2e737f4bfa6537925bba6e82d0570d76b4a6154ee3857e91343072a322ef4aa94931d085364dd79e514d6daad93ff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54fce99ac7f73e06296abefa3ec5978b8
SHA16df94b5a2c724309f100c244dbd4de7766006a2d
SHA2567398d9f5b93d28b26f0eaa4e252c94b18d87b504840791347bfd4bdf157591b9
SHA51261f5321badc791eadfc214019509a6e45c35ffe52ce31c55e8c515748911df85ee03f72178a07c2810db2cff6c3d263504427d8d3ff77b83ff13926a188e65b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ecbcbc2a1d6e7423070b0f3af0cfe7b0
SHA127cd5834c1b65e727352d9b372eeffcb69da9c38
SHA256a402098b003e5d596fb0d1244383c174f5c31a631627836d8ad32f081c632aaf
SHA51237ad999363336bd84fd6d440f2df192ba6a6b005eb8522b9c41558e6549cc24d88e248991c20476d7f6a70a089e56f826c86fa625346da2e158814c5f7fb4404
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5901c2b630fc511d652c9e28d285096c0
SHA12f360e42353a30e70ef2d1310c6f85973dfb5ebb
SHA256ca92fe951e039e9e516a227ae447a8b1f1032d977ca72f3e69e46efe5ec2870f
SHA512e7a6cbaaa1c4e78328d265de9c9a987cac5a5838ac5fba37a5885bc0cdfdc7b59eeda710f802bdfc48143d7ce76abd1d90b6d93c7efe564cb339a6c5397f9e35
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53f6bb920f87a18d39d7535915531ad94
SHA19c0de27aba9cb8074720a4221cb08675f912f37b
SHA256f21be988dc8b9d9aedd7e100fde4cd03bbaf37af6cd5bf3a8bac587ef5b7a4ff
SHA512d42e5e4eba0bcf9f905ed91edab85df19d2e5c74e0038c4f7f0460eb47d10cd667e7dcde5ae5a53f0fd6d2a7e56b4e14494f1a2a91c8b17dc72ebecbbe5e5765
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d4f2991129c2c2cef08e5f875ff7b1e8
SHA1da58cb9da6a40f0bd485ea069340308707ec600f
SHA2564e1d5fd758c4e56f9ebf6aa4a74818684cbfd27c35a904c4a4c6c04e6cadc005
SHA512c02406bc7aacd062b07df36eea4ef01c7c2e0ba2f623632e561cee01493505cd913eae8cea4336d0f51ade680cb59798b7fbf927bf308bbb70ebe1f5e2582616
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD592d744b92f9b42075710baf05be2ceb4
SHA18717df31588059267fb6af1fffe05cc5a01715c7
SHA25601bf70f8fb75eca183201127f0a707b8d0ec4cad83e36adb004a2b6b90cb74bf
SHA512672dbdc666de4f58a6babcab79e1d361d699d76544b87149a07453be2b90c445a076fd10931fdd7ecc05cf579e92e3696053a26eb599b559e7a1d0d778e951f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5102b07f4c98fa2a8d0fe97f6085f7c5e
SHA16b237a0cc4f51fa356f1d51550c99d39b484dda1
SHA2566b6ece97c8e0770d93297c2faaff37fef18106517f196a1e56e903492312a80e
SHA512913d83a9464243af23bcf7bee7a4258cdb3fbdfca0d4f5da1dba8f5f2bf88f68d93f2b905799e7e9b16eaf0f67f8c7b17713429858ac1700db5aeeab4f9878ed
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58f71441d2f0e1a86038c273fe7cdd1d5
SHA18c9966707bde787807f5e5d18313d1e30ba1ba08
SHA256c2a47ad9de90f987b07d84d3233b08db3b92bb890097a3415d5aa31231e1f853
SHA5126a9625e979017c15b18e3653318b590cef8ed4fad95a22997eb1967236fdba1aebbe91afde677d5892123fa93949456e1abe4381f52220f970e9c5d24b1c51a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD579da29e604ce6cf6c9ba86a894810c01
SHA1227a118ef60afc0608464b3239dd0f68cf827d76
SHA25687e20e4da1aaabb569e909176c495fda8cd074b6a784f01f32a842cb38e7a3ce
SHA5128acecf64d13c2759176f30182c7c5e481fe272fdb0a17020e0eb3d4e98913b335d43b05ba8696c38f84fc00058749c7899ddc7d288e593baeda7c1fcdeb33ba3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52ea2243a06b7667af1c0e58816d4ac96
SHA1e7354b0726d024e7c466be9f021b8f14ccf9b856
SHA25608549b02fbf83c10b640fd5bacb77fa6d9117a2269beefdaf020bc4e80b52bdd
SHA512950c5f0fb66a0c3a76a540a8758ed4e3d2951ea997a7dd998a661002106f1655785e113eb406279181cf81af25541a2bc537bc85361727efee97abb0c574e776
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53b06d010829d1901fdef110a20fa9aaa
SHA105a77ec213267ee56f9620a3bfd899c27c3bcf17
SHA256b49938382c5dd9a6d6c662835887de9284635fef0e408ca9fe2b8ba598ec8de0
SHA512835975a2f60f38e723258b7c961c68acc4f15f5a9fbd64d2fe86d060f8d716b201eb6a2f89d982ab9b8180556203b98e058ad7499882a5968898fd2e4b259657
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54ad1d37a08163d7fca492ec86235376b
SHA14fdc5b1a4db4d2579398a85c1aa602f209c102dd
SHA25690653d16224e1cb95bf7a0ca71a9a67f648c122d27559a3bf0454a03b2596219
SHA512f5f04117f2dadb3545265fdc5fa6b2f4a12242d11938d5188ecad7a8b0c626127092cb1318018821387d495b85cd9fdf4e66a4dcead644d11b15a9d7aaa25b68
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD568af9386eb5fdf90c7cf363ac25904a8
SHA1a11707a2b679360fb3db3f95f5cd2035bce36f06
SHA2569db919e04d6b7c45a2bba7b9b81f2ad96718673ca9375af1c9d0abc90ad1bc89
SHA512be1d9ae16d4d1f2b95bb7265bd1cfff5849d97400bb504678573c70ce7ef53cec7061243f7482bff7f468486e5162021d7f691dc0545328195f3c93651952a9b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55d781720fb5cdc902cfea6dab1d78f83
SHA1120432731ff6c70ba37bd4a63f9bb5ed37df3bc5
SHA256324c3576f89307ed0f7515fe21d037300bd002a533524a808beeeee0fc16a92e
SHA5120c13003ee4201342f42e485faa844fcb467d4a1e4b6c205486092819d0be9e2b64aa9dbfe532029f23a8514ac9ce6827b4934cfb4b32bc80af90f73db46f3225
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cdfefdf4644bda6385d77958070dfaad
SHA160520c1addbb6a29dfa508be9b098e741d67769c
SHA2560effd8685e7eac0e2536f609809e9835fdb867ad0038faa5667615f936061397
SHA5122bcfbdf696763ffee1637f0de2b93991a16897b73c1d082f1521c2ef3b37cc68e96ab8aae4bb4bfa07c2fe2e81d60da8aa4b28e443d1db6c738bda69d1f878b3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a5c7d570decd00e16c84b54e72a35758
SHA1f20ea0be558dcc3df71b0591598cd1a5dd06bd33
SHA256733e268b1f048c652b262e56a695df153327802f72ff34a19583638b562bae18
SHA512b062bf26be35b509b0d88988650a687c3262f422e01b127fdaeb50f05536e6add270520018d099d0026104edc57fb153efa7ef6f6019a124513a894ee16c8bf8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5003011f0182600dba0563fdee26b7326
SHA19f0a621910eb33375c4c5e938aff67ae3cbd0c35
SHA256222691fd97b6f85b469f216c0c429f7b4fbbbcd80695f9bcc3c8a14a43d857a7
SHA512ee25fd351d335377bc6560116d99e3a289bb178ae8be647839571f8b9305999b72779d201956e7f3269e22a1484e45c2a6aa91727e12670140a51b83208cd004
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53da7c5ecb7ecf933cd6a357e6b564a3b
SHA19cf03e57991dd3c0348e1dbb12d061083c14cff1
SHA256185e2a9afaed3ca4c5bc3b6c8d9ccdc95eb040aa49436d9309a35e5cc7d0dee7
SHA512f9952cdc43856ded73057662e01b33d352e4557c54469abeaa48b044b38784c485d8974db982a1e07c44fe8c55d0b75e3aa01ec0da67f1c08e23a6813691b40e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5928696cb8193026cdd05cb77fa77e98f
SHA1246d6188262675891e5e20157b6889b206846a3a
SHA256b178e21c467ade9251eee8d6938885db54bd5d25e83a3b4880a5cf37ea64f804
SHA512654fc9c0eb8e6d0898287a03721d08aa2a6ae266901f9daab1f917d2499c0767df009ff79fe79a8e8c42a7ae2c1bac601413c3834c828caf3185af4ebc1e4399
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c6567a483112051792b12d7a5e2b7d1d
SHA120c2a98115500b28864b2e8bc398e4cac800eb28
SHA25627b981fe164bae928c7ac508e56ce0900230a8662f602171d804e86ef6967eea
SHA5127f0cd9f1e32f95f7e72fd719f9e446d9d81b2ca52706cf2fcef7178f11d574d5c26d958393e85d569351a848b95a30e261b4a99b0c1cd424ffadb17cb965a519
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e35558218b05457505f760d0cdcc8566
SHA1bc694fc632fdcd9abc1b7235846f0e9fd2e09db3
SHA256ecdbf01b9ec47b2a2bcc4c6928e21969442b3788d35a32eb2ff26614c8b654ad
SHA51297f4779e3b4f0c47f95f68875bd79ed2dd8b5b9f78d69e7667dba422a6184291a213a30069da547e17c66b0fde25a8aee7a8a124c21be01a0ad17947b2297933
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5078625fbb49f7916215a5a792a7944ac
SHA1346993f8e798ce04f71fc27d95e7b87f5e72656f
SHA256c06b5511adfc771577b6ddee3c62c8a8c06301ef15e184195fe5a8bfae1f2398
SHA5127ee5f81e1a4e11f094b59468478aa90f10ce3e4ff9bf02d7d61ea98d60dbc43ad8b1e9d21563b31c24d7210bc0299914b7e080f2f9eb8d102f1fb18911141f71
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5390388f07fdae70e56a36c875b584375
SHA197d1096ea4850aa0e94143ddef9802c6d317adb9
SHA256fc49afdb77cb9b95da4cd7eb19cdd456dc4e29483ec73a5a3493f91a4c2dddfe
SHA512a423853605f3c198a23479f8cbf1d3ca932e297a2133075e4b900413dad0030d9e3bf3ed8f9b04285b10acd591394f374ebd41b3873e570b55c45eaa6b97228f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5902158d4111a2afda33a52abe68f3186
SHA151f845b3e016206bb1f99aa650955f3a59d8b2f8
SHA2569befdaba37f89c2efabb7a503be4d2daceb8a7f6d7e3638ad0207049e475bc70
SHA512f32c6b43bbdd92fa2b467d662279e9fd6500b5221740aa62b4c8229edd02f5b594ac6f356d7d6fbae731960ec0f4b2b4c1704ef456ff33526023de614470ffcf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52e79a658b4543b813e413d1e57a23312
SHA16d9477bb4c84cc59eb8555eed6d2ea35f73b41bd
SHA256e781c85f60eed12b8929bd8fc7ad7bd5ecf83b86f0a337de44be615307e0cc1b
SHA5121473d46fc1833322a8ee76a1cebc75e8bde1dc3b6b93305880146744371075347c6a4645a2a6c01fbee14736c80182d1d5ecbdd9dd0f602da0ad8b8859ccd578
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD559ded1ecf1a6fac283103fa68c6a3622
SHA130850cc01fe5271380669870b17f06d9fd74cbfa
SHA256508f9104ba04e36dd65874a2dc84b9695d6aeb21afbbf4783e3ce75b3203f300
SHA512f110eadd10ddc23c5d8f70be7369784395e58b22e1a158e0cbfc469abfa7a940d84062a4fadfeefffd386c2fe903f7cbe556560ae884f35c905b3488c4a33d17
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5482e028722f3868c4c4ef5fa5d083bdd
SHA1d68d386ada3e2c20481da6d005fd50febc2c92fa
SHA256967575c1a9202f78898fb85ef26e308ebba043691d9739ccbf6b012758435800
SHA51287816ccca08de5f830674eb87fe57a8b1d20304bc3e1b663141242819ba5c940ca649e5e49b06866e9831e97dde4829140479dfea6aecf39e8225df3f6cfbdfe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bde8cb6f2ab1159c166cbfb777b58e02
SHA108b747a070d497c2c2bd50c141b5db0ecba739ba
SHA2567d0904791e5cf0a01216c174766907a9fd44afc248b1f83a39ab972f8ee842c7
SHA512e94c34b874c748b7c949561a769cd39d5e3456348f3333f626a933f654444493b176729099b5061ccc83f14b863994291939158b33501d3a2fb09c5cf11aae79
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5165acdbc9d881c76efea55ee992360f0
SHA100c2a9d0e3d4788b392f1613f01f4a2b04115c95
SHA25615b06f021e961950917305682045ff04c911ead7d443128c253fd37a71a00fcd
SHA512139509e65c165aff95299aee8bb1600e48028daf2ea24cf64c3208e1b6ddd7d40d9ab1d8824877fee4716cffb69df26e50f330a5c08e9bbf1c23b791c239225a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1
Filesize242B
MD524e039e6b03cd8cfa038604c0a6444c8
SHA1eaf25a5f480c6db219b8bc28fa9179c4a8a83f80
SHA2565b06d9b5fb682f0e36a6a036ab2718299c120683e0257f32fd6dedd69080fa8d
SHA5127d1ce0a6b7f23c2037e7f4f1b530deeac486725abee64e6e78149ca7fe2e86ca55f15bec8ca5f1cc40ca998ff2b946c0379086ca7e1a2fdc8137a1d10a177132
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0E1IWGZ4\recaptcha__en[1].js
Filesize533KB
MD593e3f7248853ea26232278a54613f93c
SHA116100c397972a415bfcfce1a470acad68c173375
SHA2560ec782544506a0aea967ea044659c633e1ee735b79e5172cb263797cc5cefe3a
SHA51226aca30de753823a247916a9418aa8bce24059d80ec35af6e1a08a6e931dcf3119e326ec7239a1f8f83439979f39460b1f74c1a6d448e2f0702e91f5ad081df9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YW15VCHK\styles__ltr[1].css
Filesize55KB
MD54adccf70587477c74e2fcd636e4ec895
SHA1af63034901c98e2d93faa7737f9c8f52e302d88b
SHA2560e04cd9eec042868e190cbdabf2f8f0c7172dcc54ab87eb616eca14258307b4d
SHA512d3f071c0a0aa7f2d3b8e584c67d4a1adf1a9a99595cffc204bf43b99f5b19c4b98cec8b31e65a46c01509fc7af8787bd7839299a683d028e388fdc4ded678cb3
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b