Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
25/07/2024, 20:01
Static task
static1
Behavioral task
behavioral1
Sample
71051d877fdc463b60b4e8ba4aeca8bd_JaffaCakes118.html
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
71051d877fdc463b60b4e8ba4aeca8bd_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
71051d877fdc463b60b4e8ba4aeca8bd_JaffaCakes118.html
-
Size
13KB
-
MD5
71051d877fdc463b60b4e8ba4aeca8bd
-
SHA1
5b8db97c91ba263c2ce482c55c9fcbca92559e7a
-
SHA256
2f3f5861dcb51d296b20fb76adabd11f4868eec89dd7911961574fb4bcb413c6
-
SHA512
eb8b7b708bf5aa48d2d8122016e640fba3043ce073b54f5e82a8f56ecd3ac97d5c2dde535a8cf22f6079f1ff04bea6b2947de6c306b5757cef5fad3d1bd75e8d
-
SSDEEP
192:zp1hm5jcHT1cvLjshPKozOjkCUflRIbzavGokFhmNRkkHD/BZf2y9f1t+4UMlmPf:7icgLjslWeIbz+GommNRxrBIy91tx2V
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002f8e41e3384fa749ac47329e409d9909000000000200000000001066000000010000200000002486796fb88cdb83c297f1d937f1f3a143e4b1e1fdc42853130ef40a32f88e77000000000e8000000002000020000000c7acaa7754a788b43ecae73fcef8e3dd96bc9313d4ef13712181ce66d7c0986e2000000044fef2adb1c35070f70ce00a68ec7af11bcd01f9767eed8ee76b95359e20f0e2400000003a8b07e6562e92f3bc5122e375ec8bf1fdc51a79ab3339a47990723ea58d08d5ab0d16bbe6e701ede8d171162d1a2f539900e298a59848c9e9d1c80bc5890eb1 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "428099610" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000002f8e41e3384fa749ac47329e409d9909000000000200000000001066000000010000200000004f611699eff11b33afde5e51f124fbf7802e82088d37c8d91b409d68ff9e8440000000000e8000000002000020000000782fd746141a1b7163724b61a9c3c73fb2eebea96694687bde5c3754ab227590900000008baeefbe991e22fc63a0fa32437d1df024d2d0fd8e67d6d213fd28e15d23f59664bc5cb8803134a27cf988f0345dc5b528b754e4c99fe9ea9affd47c7f31cbc8e7380b91f9460ed59e8e952f45da81c037016d9fd5220771c7219bd8ebb3f639020ef8a532e81b96cc4bba473f23a3cef91e8f9a012ba385fa90a575618bbc29cc5621e3fffe161d19f5778aecadbaa540000000d4e4e62d69bd3ac72890ec2d3169dec02a0e2abb155aaaf60811084169e4033fcd51438e59e3896e39a6d0f7982f4f52b15b9b3e880f6eb0088ab67060a9dd97 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\NumberOfSubdomains = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DOMStorage IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "21" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{CE169F21-4AC0-11EF-BDF0-66D8C57E4E43} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.google.com\ = "21" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 50adcda6cddeda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com\Total = "21" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3502430532-24693940-2469786940-1000\Software\Microsoft\Internet Explorer\DOMStorage\google.com IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2772 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2772 iexplore.exe 2772 iexplore.exe 2800 IEXPLORE.EXE 2800 IEXPLORE.EXE 2800 IEXPLORE.EXE 2800 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2772 wrote to memory of 2800 2772 iexplore.exe 30 PID 2772 wrote to memory of 2800 2772 iexplore.exe 30 PID 2772 wrote to memory of 2800 2772 iexplore.exe 30 PID 2772 wrote to memory of 2800 2772 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\71051d877fdc463b60b4e8ba4aeca8bd_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2772 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2772 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2800
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
867B
MD5c5dfb849ca051355ee2dba1ac33eb028
SHA1d69b561148f01c77c54578c10926df5b856976ad
SHA256cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b
SHA51288289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52ddee845489384174ef05920fed9efe0
SHA131400de2c4ac7b36bac9af46c7446efe67720f2c
SHA256f139ca16c8d81565f19da988836f9999d6d456c24368eb71f869668d114d7889
SHA51254a61166942eb791db37b9df499a41e7b4c77bde8c3e8842e926f8e4fc9ef165e5a242b16a8bd15be9c23d3131fb50ea406fb071c1def88fd21d2585657d9751
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50681b4f8fc4bf566d74a699082b59b42
SHA17a26a008c1c161d529a33c0f8274d64d631b6b1d
SHA256dd73677d8eb0a127c913337f8f76e61267bd7531bbde15183b19be6ed0d570f3
SHA51230359941522e74e02edd54cf43a71e4262426ec5e8cd7cb34a3f25cfc7416b3f47f4235348f94bc101ccb3597f40d4213609b01cca78b5ac0f53f6ff3530a82f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50ce8e8ab767b91c4f4ded9d922ccf642
SHA1a84a37adcaeb10d6388b9e76e0d39951d4dfc400
SHA256694b2cba1663debcc8abc6e1c2767abf7375f1822718bb854c2d2eeb0d0b1a9f
SHA5124a45475838f689321839e9b6647c2a3fb985c9493807d871887332948f1d7e92dcaa70494f94e1147c7281b2d7a498200269ca57b8d3e76932cc9ec09d1865ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52e6948fe9a426b99a94900410919dfe0
SHA14d1a8dd6b1b99147a1cfddaa5552846dd6d32e8d
SHA256ae63bdd03d5f76c476c779d832da1fe9f21b5c5f44020f8804c83b98b86c5e6c
SHA512bfd8a7533a841fb5e67c7af21f7615829cea541f2bcaadb96b593904485a06374f64a0576e7d150d0c25569c7883b79261a78e38ae18d56ea61d93cb041a1803
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58ee568867afe54d4b73b06133a893ef6
SHA1603309a9b4a668c3309e92ddb8a693a04f8ada7c
SHA2566d541eb5ddb48d138cddbdb52f782fe0c2fb68552ee7f5e844bf29f43e578b03
SHA5120fc4623c17bceeca6b6377302c5ed3670d7f6c73c5a871db3baf6f7dc6cbdc9e545fb20a289f1c5a7f42e9ca3d091ea937f0095fe454f1c5fb7a6c41ae793a57
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d8fda7d582cb24664734c30b4cb75501
SHA1ba1566f4d1fc5e0a6c06397f9e878f9e04c96990
SHA2562973fa49026be6cc96ae1727dcc99615c541f55fca486eae18d929bf97251620
SHA512a82ded0db8eb28df985a33a93d16276b461f45a2496ca19244b8d75738ea8dfa9833ac047712b66f781aa1c4e3a01425ce62298ea128a35bbf1d267cfb911086
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57b8b90ea852cecfcc6d7d76c1a539c74
SHA1f935be724eacf00d2a483bfbc1bfdcd03f0cf948
SHA256cdb3a4bfaec620744bbcc9cbce1e3cb69551e6487ce0a47dd1f53bd83d9420d0
SHA51250b06c0a2a77836822f01cec4557b1b26e2bdf1c910918b254215ac8aa068284ed236d4241642f0183fefaa93a0967e1c4ae0c21ba74892a215aeb13986023b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD514d2b29b5b33e54a7aa3721d7c7f9579
SHA1ef178f816ef615e2fecfa1b864b98eec95715a5a
SHA25678d362ecb0d3e21718a12fa7405a9ab7094f30848c6d45edffa568d8b9837ad2
SHA512dce63827f1156ed66591aa75fec2d968a1f2af1af8ca6450a5eed6d08a7fa05c49f7ef4afce303f33c52721a64a7f1eb83717aa3a771a6de23b63b3502290db6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54da01a78c344032ee5fd940579298153
SHA13ee0dfcf2ee739fcf82e719bd6b38e0a9e96c5c8
SHA256e4a22e351d36bd1b9acd183c614a6c87be25471cca18c5ef36fce6f4bec88c46
SHA5129b0de064cb95b7147b4ae7fbbc9d0b7d02369626389923bca8d49bb2bde565f6b52c8f4736896c10144e1b331b4254b44009192e7bef6a25696372847b5af8ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55c2a82b4e0ad4d34133688d4d4e94deb
SHA128bb06bc8de69a2d1fb536f8b1ca8f57c9bf7254
SHA2569251260bd2d4ba145525b0122a37437f4568c7a51202cee4a44c328b1cf34684
SHA512d896877937e937b7ccf19050eea1fc28fdfd09e43498266143300cc5d6dcdd23bb002da44472e96eea1c6abd967b2f98d260397af63893406b61ea85434226c5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f897aaa2ac5cecaddb2a4257bbbfa70d
SHA1d55ddf63dad72ff435dfaba75ecb7eadbe4ba794
SHA256fbab0de89fab096e220f56274c7fb469afa888a54d49625680f70467b703dd95
SHA512e6a2b5f684ee7dd6c5541d27ed53def280ebfd41059dcca697bc73e4989dca0093d0982ea39070d89e075b2ace40356cc46429a4825a5831aa1db5c8b7df6dce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b0f7731a2fb8e36efa905514da23de7f
SHA1508837a931e636f230d42ff3f07edbeaa47bc52d
SHA2561937d9253b4aa68f75aec4231a792d785fda9c9a2f25e3857fe3df3d7e54416d
SHA512c241fd099532970bde60cf060fa3c039b39c62490ded2215f1be4b264f2345fdc6945b8d58af72e3f9a626aed4f35d9ca14f63e062bd2667e09530f00829d7ca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52e4c320779f683413f9606089de1b1e1
SHA18dee96ef713fbe60c7d3f05b246070e634e4c73b
SHA2562e84df224de0fee72ab2a5e186025d89c9f57a0c57fdf5d187cd2986b13e84bc
SHA512d87487c36937a5a93a9ef5edf65e903f7d98d443cc1dfcb3d001266ee5b535156050163de35c428e73e312f1298fa1c6287261b33416b8b830d5178d9367964e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a41b83a0273e6a33b0a4523e2e4912e7
SHA10b9f2d2fd5631428a0153afff4ad85f4656efff1
SHA2562130887fd161a9b19ab75bed37994f81be220de8c269bb235946694a313a4d50
SHA512af52205a2171c859d67aea1f86c29b5c6a0fc12d69614e0599e919178f71758925edbc0305793fee09b7bce4a423eed1e596b4ba96ddd55a74ba5da8a5458d21
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50125d2dea87ce0ce1c8905f64bf13c9d
SHA1c301e5863dd37925bf456cd224326953c4d80be5
SHA2564a88562b6b4fcb55d4a3f05996475803c82b71bb06b05786986ceaa4cd76516b
SHA512b6ae62b6ed1f8ce518db0d193a2c50f759576220f66aa5b134b1426df7c6ded869dd98ed4e32ce94886fa672c9ce5a6c31763038e9ddf2bbdcd5e67376a0134d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c06deb72b6314b1967f0de44d8301079
SHA17a88f8f4b4b31a342ab15861f26948bdee11bf36
SHA2562e3fba45858ea7cd0e9687bb8942f754ea483bc7de690c38402f9d943b954904
SHA5128c95676b9f634ae46b000846df9c6ecb387fd6cc178992c8c36d25c4b83377461590b4fa53e06e960567dd3ddab93b4085583aa8ca5760c8a78481bad299a38d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD531eca9a39648412258ddc40a5b7a778c
SHA154ec5fdda6c7269bffdd933c54ad11a88a871b76
SHA256037706f08382975cff103d41c2442494c2dd9b420079c5f45b8ea8a9c39095e0
SHA5121467064aec5053057b1aa413445cbbf8e89753bcd2dc2fa311f0ad9e6738955d849de5d937c81ff3a20af7f1cece3c4278e4bd8b953dee67e5a5436ed5e9d4ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e1dfecb570189f8f3ed0a6c95113f4d5
SHA16d65638f29c997b7b5a37604ead8d2fb55a80b07
SHA256abad6fb4e9ebd9c2988ff1864c7e432ef85903fae1253d3e477c33cb3aee4205
SHA51289a7d28f08349be2da868bda72fe7e0d6e92e2673f87fb6656f7745151169729999954e0ca75c999665702d7b01fe95f6a8a25a510224e576ef88fd7e25831b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dd81adb1e8bfdbc179f9bf45bd761983
SHA15c27708deae8190821462b54a11943cdeb9763b5
SHA256a74c9b47362131958af419ca56d04757ffb37103c42b73f7880f33f74e74905c
SHA5124fb24861b653dc703d8b044a4f4d8980e5d77ebce615b7968492f1d210520c80203abfcfbe0c9974eb99edb9594ec6b5c84094a37893c8ecf574ff1b5b4ec663
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53584fedf9e65b6e6f32e47606d8287a5
SHA1c04a191024993886fcb4d6f368e7fb5d29ae6f4c
SHA256890af3462d6fa934642578d0fcb6897bc2ea2f28793416b00bcb46f1b04810a8
SHA51248ec172f9749d80a2a17cdf3846c6db1eac82cd174be65dfed956a288fadc48e76ea38090ec6f65aa9045a88e1f20663027cece6dead1fdeb30bb398178a9455
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e84bd8e438e48778a475e8d32458b2ed
SHA1778ddee7833d4d8340c43b59b6ee6432098a492f
SHA256ba29cd8e37940a394ec637fe41e200e5a4af8e44ec4f6584ee58307765d9b3ca
SHA5123e25c4c28c43996c0029d48e5b04c91c1ff886bfa7c0d4d07c76fceaa6387f5560d4b64c322b8a39d790e636530dc22be3919a6d8295fc1f95f936491ea5d13d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57ce12a3a1bbd51828b717a976122bc8f
SHA112eac46e0f0f068673b86923dedc2f4e70f10bbb
SHA25612d5f76a98d8431d044bfd37b40663b4e4252f945f6e33b160f83d49d1578b6b
SHA51282f6b7a6f398e3b1fd5322a5f249821b0ec3e9f159abbd909caad6063687f8fb999795e824c54046920a0228a316abd658ce2a05a0dd8d42c804e7579391dd30
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD532c90bd016de67887ee7adcff5513196
SHA1b9ee5308cb113adfbc5687ecc7505d6ae9911746
SHA256a199cb41101188a186ae0bcc8ec3e1c4d11df4b415497b8f907cdf9d0fe22679
SHA51273c80f9334a55eb61a6e5c4736d69ce44b8676d69508ecb9b8a371faf79d883075c37659ad2eefa0000f2c3b492ac80441b34e2b459a6552991be13a59b8b5c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD558ea737e020978c26737ebf031372241
SHA184765e98431d74e17c4734e90129cf6ec2b9b18b
SHA2569b9d13f6c3d94fa8e90f4361dae5bbdf3126e4c9b74ddca0a1c3a5a5db193901
SHA512c32fd795f6ed69a90cb791de3f7461323934eb14e84356a0c26082f4b3a2a396bc2e09cfb71c38e4151e090ec89f59dde8e0277289e4b53ef017ec100e673f3a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b7bc8a73638c022d792c7e4b6581b87
SHA15b43d434085f9337bc1e0ab7458e2de51141699c
SHA2563c293ec514c4e164cd9e09c617ced7321cd8cd8f75a6dafbf341b901d467bcc4
SHA512392193530659f80ac481d0b5ad10d53a9b49b3963bde60b5857d1d358533296d9eb31f9c2cf718577aa658c24a0f8019088315bc8941b50cba94da26d52572b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52c4d8fc3d169a4d4207493dc6b23a90b
SHA19a0862783396efef3caeee2ca44644f030bb196e
SHA2569db1dbfa34636e4f4ff5d04fa133c653155c6897b6246fef6fed3941bc322f97
SHA5126ec0af532c458035bcd9d5863fc22a09ecd25a92c6df94e0c8fcd7244f5e47f00040a508f33b47445079b17c02babeeb803351a55ec746542fcb07a454f9cb2a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50ee76ad6de27c07feb671aa189476718
SHA1210ce5d3063c6f8ec03d841a51128d85e76eebae
SHA2563835ec71e331cfc83cb6e3c77e0d4313b6965c6694b1afbcf233f952bba84994
SHA5120ee669be695f16e1bea2fee6aac5fcc6b5522a923687cd4d6f210af82351746a5675ad12f05c4e054bfa64eb7b0e3819f545ef0a9e0d3533a96421ae24205fbc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5876e1c8dc097a3662299ca0b07612f56
SHA1b4b23d45a52b09389fec952233390a55b98ef817
SHA256576778cae9a1c088781460b56f8e70afb6e07e268a6a30f9cb092f9b3be44cf1
SHA5125d561fd6a0fd6aec56d4e626fbd133d8b115e612e75b68a3ca51e0869fbf65b697ba1d72fa46db545da182cb7fbb9d3ea65627a298a6919290ba16606f6c044e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e6db96098fc8846f857e58542fee507d
SHA17540ea421012090f76df00624bbd01b206420eb3
SHA25648babe1af6b3249b39f9fc9ac104a5a4df8863fc9234e88467fb7b4e407af0fc
SHA5123320085926c7669650f85c490a9323e14411b8baefab85a847074a908033725fcb6d8c459e653b16ac932d58d45150ec4bd840bdf8481ce91200cb1c01876005
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5329cec2af9bb31a04a98e7eaab187396
SHA1915d4cd78d96585e2cd813d6f9e32ccd7393be9f
SHA2560395b689a724fdb114c4a06e45822d51a90ee9c7f33aa257295d7e52369e7b12
SHA51280a91a190a969ef6edc69e5a26cd11a8aba9b454baa917a2aa53674922d3b5842d46944b13a364ff17d72630ff100bf6dedec6a1f8c6326e9a1ce00f09428f6e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50c5f60e1350a9f45dffcf3d444cd9665
SHA1f6cc041fb3771233d86895956a9de21fee553c3c
SHA256372e7f6ea3afd52f75d4a59ccccbc638bec690112805d3da08ffe3165df36d3d
SHA5122a40d18434c93d45f661ffd44e99bd705a6e8e825803d26b296c6c5b3ac2daa14d3aa8e8f60377926e2d3bf02fff2b47ac8db7d34c45ecdaa82114f2fe0c2fd1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b50c09835641adbce837f28fab0aea4d
SHA1e21fb4a84b7cc5a9638cd15a886ed370f8556bb1
SHA256c70a8252911935c884c7c7c43a3ea36d89d0147e42f684dbc87832a0403b38b1
SHA512247cfe69825a1ebfc7312a9e5ca92c611900efaa1f2d2ff89440648229a03d58040049a7deebe27db61a6e4a8004efe5763c8f981f56e477fe4bea55fb365995
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50c2b3a4122b80724327030b5b027ae37
SHA1956a755c7103abde97cc1a37d3b0db97384f0292
SHA2569d96786df0a0593e5d72b169da9e50a83dafacc0d402b4c2fc5641501a75b2b0
SHA512726f9c70a2d2c2bd3ab1f3b36a66df29a156bdc8a61180072af6752a18c81e6c5061e0d10ef9d6a8c3f1ad1b2f7c501e0e8c02b56a0c8c3f016cfacad4ad35bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5237e0644af3e778c8bb0224145d60853
SHA187383fdc0a55877ad92b435d950384f5539f301e
SHA2567b00eb73fb995eed4d59a17fc98c81a651e51cb433dfcd9c294ecc91c5b26221
SHA5121d90dbd079d00cd432a9ac49d4bab774b9342950c62c8b6b55e0822b74e4b3b02502c80c67d7384fc1872d2b9a98d4a0425a272611a117185c28402b10cf543b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ad9db5a57a45ec78e06dbe0cfc4147fb
SHA1f3641d6bab65632e306b4c42cdb31ea1861c4134
SHA2564b666f7fa09a4c4394bb8bfb5b659f7e0dd167fde786311f3bf2f997672a2031
SHA512c4ec53e65fdb25f92d600384f55341ff497c36c43045b747f6ae853b10a00e51c0448aaf1a54fb28acf0a65158a5d507bec8e1792dd7e16d2e6727c5849304cd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e38861a1bf7daa27f451f6c08b10138b
SHA1be85f6139ae79920cf79c6cf62263cd43c164852
SHA25634aebc408f765f63ebca44642bf4a05cc325272c316a3e985b8d0d24d808d415
SHA5124901bfb0b3d38a65b240cf723912ef037d456aab9cc6f0775f40c054ed13006c0e1b59139fb6a00fcc0efe15b5962c34ed1312983de6cda859d65177ed4e9ac2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e661a02599d7d20760e56f001ba488b6
SHA12b054b446593eb47cea28b4ff724a264b4f5bcf3
SHA256539a563a7d909c4a97a8b6a2cc7490d93fa08afeade2282b1eac70cf5abe1b5a
SHA512d45d04a71f538d035f9382b54278f70384c59b091bf1fb4616b2857b5583490c7a7d058e8cf52f29ba1c055987af2418be534491cc3d8f52455d6af2f0117091
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD524904267359c209bc046e1916a49789c
SHA1a10bb70f5066a529541b51789c7f57c29ef3c3ca
SHA256812c1dee68ebfbe716b43a72d74aef8902fc4ce926db149f7b3d6a73245d4d5e
SHA51220464cefa4100cd2eb5d9c714c3768d3ed116450196563d5b8ad7ca1fedeeaac426b41a0c26a0b591541796091618108918d1a5c424266852dc05c54de8f4d13
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54509ffeb62615921706a8894d7e8cf69
SHA13088315e8c1bcb308547aa43204b937e30bda38b
SHA25621c33a836d04e00c6fcda5013c8999f7cd6e413a8c4e7f725dcca44498b1e783
SHA512f10ee66c85a006a0b66b0dbdf27a1176430e790c705d78008ff74d29c370ca3b5f432403f9787e90d4b86d03d28a1201aad12f992c83a41c7f90df99227b991f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58368497c99beb70290a09834c0f6383f
SHA1317b693c7de8754c9e91e8bfe72827e9b519fc29
SHA256fa772eb8310d5e7a3cd6a887bf870e3121f0459248e79e8db9903cbc2e1d00b8
SHA512db79e73013829c971a63fe1ea4df55ed808e7d21f49590922ad70d01247d5723adc38dc87bff099042b4491181433c8d7f36230cdb55cfb57675f67127d87fd9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a5dca29b8dd69e8c87760188485e09a8
SHA12811e391bb4daefa6fad020b29dbb97a7b62a111
SHA256eb83cc6be779713c117af938f5bcb640189440be459707452c1f7a7a127b6851
SHA5128fd607f126af9ae02c76f4d3a96ac7060ed32292ef8bd2a7cc1e2ee3865144742a92189e9bb73fcee4c4c785e4d63830e01300c221ec71f86bdabbd2e3ef4421
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD532e51afde33fa148a0a802c2581238f8
SHA17f05f775368891958f3217c7ce8da02091a68ff1
SHA25600db0584253fec91e281c281444c5931a360bb749bf3d039f70eea5014da0717
SHA512314064ef00b3ecef43b95a091493f1d007889cae9b0ff477c39370c0a217be27264d84a250344c9292f45152369518fa05e1e25e06f7394ce417208f6f02abd5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cf3087b60924c49d9ac106fb35aa6c0e
SHA1239c5b5964d8f109983e1f07a9a60c3bae533a34
SHA256027e307cd598ced723b85f19839197204ddc1b5a6df1d8c453fe547e4f110dee
SHA512d150f543cb1adc2bb874b23553c9e3bd09412af05160c109293a623204b48366b264bedb8e17453968abc91e1c7c6678cb3aa4b6bcb3eac22472764b3aa7de00
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f39e74ca7652a33171b9e55c15160e79
SHA16a901485c5aef0a853375a072f1d2ed6e48024b4
SHA2567d996d888853331c4a5fe60b4b0b5c67a3f0932d7a74936716e5840b3ed3730c
SHA512a56f4af9bbe9c857067bcfda2d7c29d19f86fde510fecca8795cff6c71a7bbd07ae72cb880bb1a961e94709c5d662cfb71b36db9c323021605b52d6fd6fd84d2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51d500b6f074cf1f15669dbc97de6af0e
SHA177b8e7192151c8dd8643dcb35d1dade413096435
SHA256a7f259e613d85a67f3c094d106bf0972eec81a2e7f32807c65f7e33d03787f95
SHA512dbafe9cc7a38a94852998567bbcb0560383d48495b8384705a3384b4f71de434ee9d179c7c9329a6325f94e4fa4e63008ff39004035dc653dabc10d736b59824
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dac0ee967a3723211fcda0a5c2183172
SHA15cdb5cddc87efff817b2fb0e563d89a8cf6cfff0
SHA256d0ebe4e23de8ba1e21e03e97d7eeec08bae133407ec2f5ab9a4281ffac972300
SHA512c983a224bcb0a25ff7640902b4d144698fc46ba6c148cf630086b6a8be5cb203b2dcc23c8181fe21fc169b152c37d8300140fe553bfeb1800e05645c1c57dc5f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5989bc0ae3bcefd2eda95b2e8b04e1ea9
SHA13b96c2253875b58f86af5353b54746d07325e6f5
SHA2562c532bdd655ac7911c160da2115bfb7271429db4ce52f6150cb79574f158e864
SHA512b353068dc51a8a9ade92d49cb1ddec62102072714c5b23ec9e11006b5949eebd7be68e44e32e4cf5caa4039a6d7f67b492fc701b33b7c4cbf09cd8ab0622b6ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57a4095ac982d1681d88b4d437410267c
SHA14ff00856c29eb4c0f0c53e09d814b0c972ba7d5b
SHA2562a2d8f1ce0599b9e4dbaa5156ee0c471d806d1c4f897c9184d6cf09f4346503e
SHA51231dc4f2cd77aae4fba7e1845cd253aa5c5911976500019be9897be8906f8589d906050e3ff72062515b5e3fe2741f00cab0919fe127c44fb70cac6ccc03727ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55b891d04ba0b04ff98f894ebe917666c
SHA193d315bd475538e2fb0772f18cf1b1b8eaa1a6db
SHA2563bd15fae9128853e46075fb3361595d8f865a20565f7f81246cff3f98bef2e67
SHA512802bf494a4e6af61e2e6067df4526b7c75b07e061c2f589fa71c4d0e7655a7238ea10fd578589ff5bd627e8dad3febcbe527e223ce1a230ca496d29e1f0e47d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50fe0589d46f65f7332be66fe64855b20
SHA11799a7dd40d6cbfe70996852739490adac57e618
SHA2568178c55bd55088bcfdc7ec91d7a823b30e1c5db7a4b1a66b2e93d5ded5f9a504
SHA512744648628da2db34b7c4c09d8dd7efc05001ee8353a8e68588844bbc4ea71813d0132d7374c939edfccb71fb0eba100eeaf304ba709d55a0203a63a990563790
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1
Filesize242B
MD55102f6f5781eb2572486c3fa9d2bb120
SHA1dfae8bde12ff599f1262fb5a7d55cf648db531a0
SHA2566ba3fd53df40de8dfad78b12e58a134ddec5049c9d5eb8993055f4a2d024206f
SHA5121713a8d675f47c20879e41c13da630ed70550a3199b2d3276a32bc589aabe9aa3ff841f6996d5e5dc094faebf80d734e4f31acb96c5c18d4bea5019b36357cf2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQ7VMQEC\recaptcha__en[1].js
Filesize531KB
MD52ea96f82197c227ad3d999f6a6fcf54d
SHA1dc1499948a1822d16cab150eaee16f4ab8c028d8
SHA256e1d667d61bb50e0a815101a7d0d7f379b7219776fee856eedbe965a049db8d44
SHA512dafee1d415487b796e02ef295073382aac48ac76e90c749028a9241bd44ec04ec2ee34163b8177f94d01e9e9d87577ec34c18d780a9f17b80923106d992749a9
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\JQ7VMQEC\styles__ltr[1].css
Filesize55KB
MD54adccf70587477c74e2fcd636e4ec895
SHA1af63034901c98e2d93faa7737f9c8f52e302d88b
SHA2560e04cd9eec042868e190cbdabf2f8f0c7172dcc54ab87eb616eca14258307b4d
SHA512d3f071c0a0aa7f2d3b8e584c67d4a1adf1a9a99595cffc204bf43b99f5b19c4b98cec8b31e65a46c01509fc7af8787bd7839299a683d028e388fdc4ded678cb3
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b