Analysis
-
max time kernel
138s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
25/08/2024, 12:07
Static task
static1
Behavioral task
behavioral1
Sample
c0b7ca2e5e6083178d52d8d2709713bc_JaffaCakes118.html
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c0b7ca2e5e6083178d52d8d2709713bc_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
c0b7ca2e5e6083178d52d8d2709713bc_JaffaCakes118.html
-
Size
175KB
-
MD5
c0b7ca2e5e6083178d52d8d2709713bc
-
SHA1
d169705f79ee06cad89e9aaf5703a40d87a1b71c
-
SHA256
bbf3adcbc6e58699185ddc29a038d510ef2de918fa78733fcf2f048e6b095ad6
-
SHA512
b54e187a648ef3bd2a40b97218da5c98b8ed82ffcfc75d6cfe23a587bda778ce1b2cdb703dde553d1096b2e18b840e7990f630745c262091507a29bcf57cb608
-
SSDEEP
1536:Sqtd8hd8Wu8pI8Cd8hd8dQg0H//3oS32GNkFsYfBCJis8+aeTH+WK/Lf1/hmnVSV:S4oT32/FJBCJium
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "19099" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "7906" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9570" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9842" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "15678" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "15796" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "15888" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9658" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9652" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "15678" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "15796" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "15684" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "19099" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "15796" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "7988" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "430749506" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "15888" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "410" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "15684" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9842" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "15678" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "8198" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9570" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10cc3a8de7f6da01 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "7994" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9658" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000043174f1aa2314a47aa677ebd5ad1f6c7000000000200000000001066000000010000200000005e0b6589a8070f7e4691f2214de9906c1883009d92899a7a32b5f8e30a956e66000000000e8000000002000020000000a5d43d5e255a5ebe0c17ccfbb3f54459df0176dfa6a76dcf900dbe8a3ec5c3cf20000000e5d81b511b3e1d4781168bb835a67306abcc6126fcdfee337be6bd3a662d2546400000007d113d307d8ba24a0cb8df076ab5b1657e1a5340dd17a20eb376bcda7b8984013234fd496382bbff154ca9a3ad9503e8819ae301c1bdcf8b21c4a984c6b2d93b iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000043174f1aa2314a47aa677ebd5ad1f6c700000000020000000000106600000001000020000000971ae4219c557085f6c8bf5fe89e5cdf1596495309a7d5440c0567a26443f94e000000000e80000000020000200000009bdf7f2b2928c18d7d95a300afc0842af09d62d82a8911c7dd4b5538673bd5a9900000002948ed1510742b92541956a0f6cd5e91fb21a257eafc2d8532247961cf0157e059ec1115ff7f3d23e5322a027edc06e0c505721c0f7785f43f53c1278d8d834f3f1c23d8adc3534df08b35fa458046abd1219fc43689083981eccce36110d38c8698b54fd989e7fb5798b922c8a683f9927191aa1a5d3df0607a27a4403ce233c68bab96b850ef1d41db10bb84f6f570400000008ad2f712d3980eca2b643d7a4c8990acfbc735b43141be565ff34fc132a0ae5afaba6c0c3deba16c72221161a289bf23fd49f4e3ac4e92219043e7de66b2a35a iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "7906" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "7906" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "15684" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3294248377-1418901787-4083263181-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1740 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1740 iexplore.exe 1740 iexplore.exe 804 IEXPLORE.EXE 804 IEXPLORE.EXE 804 IEXPLORE.EXE 804 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1740 wrote to memory of 804 1740 iexplore.exe 30 PID 1740 wrote to memory of 804 1740 iexplore.exe 30 PID 1740 wrote to memory of 804 1740 iexplore.exe 30 PID 1740 wrote to memory of 804 1740 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c0b7ca2e5e6083178d52d8d2709713bc_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1740 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1740 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:804
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
854B
MD5e935bc5762068caf3e24a2683b1b8a88
SHA182b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD51aa607fcc86dc218e04febbf0484b0c8
SHA104ff72f900cfca65306f61aabd4b6ea337740961
SHA25602cf8ed5e9267c2b9658c3e07951626d85e6f5ebb3eb032e58abd347bba18199
SHA512a2f99e445d78c1107d1c000c639fa988f71faf51ebd2a35f7ae55c8fc7160798b51c3e5de69ed99b25c5bd31c31df9508b161c31ce778b548fbdeb2aafdca1c7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DDE8B1B7E253A9758EC380BD648952AF_68D058512F3515153DEB95A1F4E72552
Filesize471B
MD573e50f3167b61d7f543301b649858a33
SHA1fe3521a9a8490aa63dd96c5750ca55583e47dad7
SHA256ffab5722bb1b7c00b1e4d946988b1de6227a2c6f3296f94721c9773c79a58f8e
SHA5125bab5d1ba933603d10b19f04f5c0ad6afbdd3cc1f8501bef7737b452285ede552addab2873989c1a100312940d24b0b92c778c89cc74d174abf73ad0b8848c2e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD538b2c35b862acb27c88bd36f7acbeefa
SHA114e3c6c516a1662d6e36b5955732047f1d54a805
SHA25626192caee24dd69271162a11b3ee7ab3ce3de7b8c4c514be66df2f09a618a1b2
SHA51246d0de4017700d085589f8122483c2bc3b1b8f32333b03bb1c07e91f5206dd067ac3ecc7743681c0f33ee2101b3a9995b2809f5233be2fccce42fd86a8ecda3d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51d462d0a531d702b1ccd90d300aabac6
SHA1378ba322d8487fdd1b0315d0e1cdac52cea7a825
SHA2569e9270ab3931f1ba8eec025d2c2377d96e72798ab13a2b2b5d22a8709d703c87
SHA512a46aa62d914da11d7585f3553982e81d212b8e82aeadef9d4d330f8064e1865b1e851968da1debecb6a6c9bcfb68c00450c19aa1b907dced176d2d5822db1049
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e1ba7967a9c940b616a0ba30c02125e3
SHA1cef29063f7442877c595a6bedc4edd1cd4a9c319
SHA256c73490e1fedcfefaaf4b65c9f0c8db6e39ef16524487d91ec1bc59ef5ae5ae67
SHA51207d9054d4dc270dc313af7b7ddaabc8fea05e1683c6860e209b530a1c5f442c80619908b798af2d360df270d32e9a674ebdf662943384d6ce5152b503ca647e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56d47c3340304e881b11f8ebd4ac5fbd3
SHA149552017af59b6d4176b1205d6859f2f7f2be40b
SHA256f3571a36f0709e5e4d5497c800565be8e2c0cbdd1cb4adbfd2bbf3f9ea654253
SHA51269e49437abe06dc3ee9034f4d772c23c69264519e97fbd24696945d356d81feae1cb878b354d639abca51c0189af53de987190ecab15e6737583e0e5e75efdf1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fc74705933693d526bbc70303d4ff711
SHA11361b8d6d808c7ede207872a7800070caccab432
SHA256de4319bf6ea84b18f8750aaf2a79c14c74f9f4edb990420ec728ae78d12e6f95
SHA5120abfa380e4e5f31d6a7dbc3ed35a84b33746a63ea9b3a290c051d9427ca33c226973200503e25c0d223bcecc3c1e47b40eabd109c8ee48714038b25640353d40
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56a103769de02724a0e305e365ae42899
SHA135b659832f9fb9b22b893098b1b8477cd7b22cb2
SHA256e56b7cb9e9737ab17411cb26d5bff3a8695a588b58bd9c7d0e888832d55c85c6
SHA51280c4eea1c3da57dd452545f1e0e4fe94a7e9b806412ab9a7fe530b3c22037ea207b6658f1178ef5b325df2338053d21d93238b602f7374d03cd358cc91e7fda1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5364fe2d437eaaf887b69bcde59a6ab08
SHA10ecb33d3922a4090c3882994a9c3531b2f974db9
SHA256d82f64d3c652ffd9bc5241fee9a8a7a8b3e4f9015096eb9d529684b6e06ff819
SHA5121552371912d48db06b6c62e323e9623e42b6d31c271b9a40f7b8d67e8924944036fc8ac32e5a3845790cb0a47a5eb1593b0d15e2b6cdf9a986da0a69638685e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56ca6cacb294b7ec3b84be028088b8429
SHA1eb5d1c9b8bca81381f53a2b754a7d72eee450e83
SHA25619a6b1e4e61b18016a6edba5f839a3553db69c2b4161d96360c6601c6506040a
SHA5126653b3d9d9f140dcec32ed86cb56d352bda4105cdad62fd8a1358e15f1899df49ee0c2876905dc8d93b6ba46b68937250ac6be71c5c7c3f0e63ec8b6a86ed9d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59a0abcfb68df57796bcfd6c6543ef858
SHA1c4557712d61f502d71c381209052e6d2f3ee3668
SHA256ea558da29b0665ac1fa30d4ce725888477a95113bf83a46257f779a7e38ade10
SHA5127afdb6223166582037a830bd8dab2165a3de711c8d852e279637864755abe73d2dece678b666de99bd81da6700d35edaff496453ca2bf3b625fe3ec0b6cd3ffa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD527c512bf6a128a18d8c968d8d3baa4da
SHA1497e81782debb157d04dbf3cdc7e76558649b5cf
SHA256d51bdcf46e0150f352eabfc8b89fe7cf2d29566e7c7ec61e333ceedc891758ee
SHA512c0e5ad41bbfc1d004e6159f4f27d8bfad0b11ba8eacd639221d8a7f27b9328bdb371677c3365b0372783adfc71cec30e2ae12744ee109e3e3570c10f83309b18
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58e0dbd69c971fb1e353beafb171a716c
SHA1f0356e5e8654a920b7196988ae55fa4446257e51
SHA256951fe468cb3f58cc53f54695a7b91228060223dfc6201110dae31f2207b1b305
SHA512fabf113b6f12408960a78259a4a0636811bf58676f07c7490620d1a0679441cd95a2db5c202afa848da453cc993d8ce9f39959d5fd83ee3edfbb1f47e1be3b5d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD598ba1b141af21cfef1ee9dc2cb366b26
SHA1f57bbc7bc931353f346eb1b4eafdf43c23a6389e
SHA256fbb379d355f15f3be808c7f053ba30eb6100f81da53781d05065a6bb386860a4
SHA5123f07c85239a835be47ce734f08a3036f196ccc74e729886858b1781486ff017ae4cbf904868eb930b8fd4485d5d5e247cd3d49a53613f148d18ca571b7610344
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD524d352ee71d862ff8dbaf7a4e721f750
SHA11f5c9106ba51aaf6f30801747b8792a973198149
SHA25607d291db0e2fda638de905cea68b6b8ae2dd2cf04daf2bd41ea6c61a1e1715f7
SHA512f00c1077e3a715de205669ec6873bc5f4c0b576ef8e13978ee1b44ce8abd13a84cacc149a1fe4031aed5cf2f7df0005904bc81630923687444a4c54b6b4a21dc
-
Filesize
990B
MD563a1477e86f3e6440fbd7014718967c6
SHA1c5665f0d79c8ae8b21be88688b803292596c2e84
SHA25621e812affecde2a6410b395ed4623ea4393ad96830f6d9a6645212bc79574b0f
SHA5122b0ca338be36e28bca796d65b96fcb4c68aa555732e0d6d838ca011d3a64a0228e69351d88765c4ec828af0e5fe4af26916f95f90e38193321016b276fe357a8
-
Filesize
990B
MD5e55cf02b155743ed74dc831c347b541b
SHA14be0a747a37e47b624ce43a6b5f2134bc9f7beea
SHA25682fdaf8175f937afc49bd922ef3f6a54f4f3d32aed6681227f62333fcc62cebf
SHA512476812e1467c994fe658fa724041f7c89c6a7e2093d33abd55075d75a6e3fe4e3e88d591c35705d100b31f0c7c404f69031b2ce6ab734e45a9ee6adceb5160f5
-
Filesize
990B
MD5c9679ce63649ab3644b9ad8ffadb1acb
SHA12ce81d435f8de12600c1505daa5c42c45ed2566d
SHA2569b7238202a8848ba06d71d914bc50a5f6cbdb180c1bdf93568d2dac15295e048
SHA512faa5325102b3e3d3505d4e0394b8c15fa371c54a78609bebad781dad82ead1da8dc9440739f3f8ff230575f531510cd1be51808c7738440a7ab2571008bd4f66
-
Filesize
814B
MD520197eec0ea1601932c4c4b3ccaf6553
SHA17232b8bc131bd9363227bbd53950882e7b9d8d9c
SHA2560e6286791b2b1bec7fc491a2644ffe86ea9cc82c2e3c13f1b9ed83aae71d8881
SHA512c243231810a0211348dacc0f6d81bd21e680c3009e41fd6dc3298de33ea53330d728fd20a9e9dd3e8d85a423ea56124950131c3f09f522544c99aa3ba1b9e513
-
Filesize
1KB
MD537d8fc0ae3242ed543580377e370260f
SHA10ad78a1bd289d6217bb8a401d923492eee749247
SHA2563a773ec2d94ab3202bb9f41e80875ebcc32a3ea1c5a62d13b030af53abe61ace
SHA5128f300ec184434cc15db6d18af804fce860d8b88bb82e161b28c48627116ffb2446b78f66d2eb526008101afe03e815c4484d18b349038fdc686bd7e575240a8c
-
Filesize
990B
MD53c508919e06e9ebfba46a23789e0b07b
SHA1c288797794671299ed4b7e8116995f5870db2d6d
SHA2563920b9b61ce386f67a5fea099c95846b3017b64ba02ecda92440019bf3f4f52c
SHA51226b736842ec8eaf9f72d8b48a7ed024ea8a825314ff94dc5a75b434c2b7b37e783bd4dc1e2220a5981be4018b20c6aa9e5efc54cda849259ca450aa4aa0cfe4b
-
Filesize
990B
MD582e66b7e8ffa5c5f925ff598c6a905cf
SHA1c4d7bb2fdfd45894f6fcd5dbd0d2ba9839fac7f3
SHA2567d36611aa967c3a1752817761a3e573c6d97590dd7e6c00051656b61d0efd840
SHA512aa5f62ccad9d30cf182accbec78551fc81a5f3e5605cfab9b3f0e976ed085ef3895f0848b825b56316a69ffabecd558203630ea5feb3988963936f5d4cdde3cb
-
Filesize
990B
MD5efffea9111ccf9485995bd17f93345a5
SHA1ea8a7172421698e7378360840589185c5002ad7a
SHA256961aca1a114f9e1e9e775324b98d4fd1ce1aca540f834a6f4da3ed979c94ac77
SHA512324fa14732cf0030f026c15f4e8f2b034841593fec9bdb0c2bb64e4a54e7abecd9ac590361d08de01221afc0aaaaff14a6918c74836c01ba1875988d8b355aac
-
Filesize
990B
MD5157a85d27143a6650b3811ad72718803
SHA15d07fe98fcf03ef50750d053d0b6b6817f93ed34
SHA25689a8ecec18f92ee0c61c80c93161d5ef28b0d5a0761998402f6c3333657f6577
SHA5123aefa3cfbae8182f5eccce497d14c55c88307294bd3d70cd9cd06f993f883a6b961680a2e0207018dc4179dcc0cc8073414b2fe89f4f7e3dbd2f86f104e1cceb
-
Filesize
990B
MD57e71db515b8f2d4b0c219ca155364821
SHA151005ae7b6dbf87b55bc3d9676f195cbb1889ce3
SHA25644bd7e098959f886f528ed3874fcdb28f3b3e90e8896648613a45a4f474c4271
SHA51294b4caeec1ccd1a12aa531cdfa8f464f467829f43364fe34f8bd48a90d7287b71cf808b70d34e0150e3c387f767433e5dd38ef0a54ca5a5f271f35261cfb9550
-
Filesize
990B
MD5e5e05a052fe38a61ae1120552e624dd5
SHA1ea93e2cee6f165208c8b0fca69cd3284a5964a35
SHA25692934b5015527c3ddea5ef610d6488db23159025abc2cef22c642733d7bfa2d1
SHA5125cdca7a88a5e08150fab836d42e1ca2a90ba6ee5c9b9d7353d0c37625b0c61556aa6b3f895c4711483d0f12c9dfba9abc9ee2dabe9c02098fb262a14c4a4787d
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
990B
MD50e2d26b7a21cfcdcdc683b1859e9be68
SHA17fb6f397ff3dfdc20954bec2050935103511ea11
SHA256534542470c010dc26d5feca040bb623bd6531c99cacd41e073872f141ce2483e
SHA5128088d6f5c942c98b4bc66a27bab90b10feae4d829cc95e6424865428e935033b004879558bc46fbbac15ae1b0a14db50de10de63758071265b38a32e93124396
-
Filesize
229B
MD5ac8d83aca8be83601b15aa0e82c9b531
SHA19958713d9149459ad469661d31173be2772ca45d
SHA25696d5c74b3560e59ecfcacb1ad22ca09258354563f140332f0770e9816f65c881
SHA512ccbca06e849c9671a5ca437cb3262f70f4fcc8ba8d6b7837e9d6064b027f9f179c2730ff37327eed5a116ca84c94afb0761b614e5a24daa455e88b78b368b561
-
Filesize
229B
MD5a89ed18e8865e7d4044a92b61681c00f
SHA192fbb255ea783cd83ab57b470510102e94a00a3a
SHA2560ded7a71ce2983a2d9f5925a36f5abe1d279864f0ac1f89a4f4822691b835435
SHA51273c5a87b081f37b3d31e034f3157cae6f17965642ce3ef846529413ea09533e8bef9f90fa0589dd5ea7a2e72f60bee1669d428088e6bdae6fa21aafd5d93f48a
-
Filesize
229B
MD5e950ddc7d59f362a0ef7b509bebc1d57
SHA173ab1f3d1057ecad08bf73a8743a8a54b1b0ded9
SHA2560a1621839f5f92a5214fdd577719de366feca580b2c2a37b3a41ffedc627b322
SHA512b4ad572f9a5e7f217054aa91a36a009bc3f3f6adf07ad532db0e4ac93b8755d0fa02c5e41c1811fddc6abf71e62064dd8746b1d4c1809d2710a635fc38c1e85f
-
Filesize
229B
MD57308e3c8170bb62610ac7951fe6f5db2
SHA1c8f1f25b2f8af5b67612bd0dbce42a107bcdb64f
SHA256cece1e349f634cacf8ebda6b05e9101e1c4856e075a12ff88986dfd9796ca1be
SHA512794d62fe4396d6ee1879e0bc06ecd4f29bdd9734a1254b9d1f0b7dd8b6814d4fddb4d13c662b0ff482b89b32c19e48ff084dd8e55ace1c5dab5aae7883954a7b
-
Filesize
12KB
MD50580441e5ba4466cbc444ebc226992fa
SHA10ba12336c9045e51ec96a35c0e16345aa45163cf
SHA2569ce3015105a489ded9758588a047187ecd61c8c70ffbd94d800901d9857d0fef
SHA5122a74127798c7b0d0eab63f6a2d750290b7aa1ac3c231355285f5353bff36ce7f1faf80eec9674c7b981c220c095b282e28a1e48dfa1f9511b1b08e61d571631c
-
Filesize
24KB
MD5a758d6d94e9634730850d1b91706198e
SHA119028a13223ab07a0d1aa77b071a097793a14dd0
SHA256aedb749fbb1a7007521feb5ecc407c9e21dc026557af0fa46f664cd74bdb0ab4
SHA5125bf76b452fc0707cdf71dff598b45ee873ced84deea5945deb87a7f92a3a52f787402763b7ade686df926eec2114658f20ea0e42422d60d5812de90d5ddacaca
-
Filesize
12KB
MD5f1b1882707b47ea314ec45ef3808e5bd
SHA133c289a6e8a2bf264f36a773f78a86e44299ce05
SHA2569d7cb566dbd4664e7fe7630ccfa84e50859110d778a192bd8b4cb85479a71ef5
SHA512cfef0eae245aa2eb5b2fe6af423fa633144a65aa3e8d2f47cbc020a0d4e7b5583b36f8eefaa98a00d999e30cbab9c9bd1b3b5c0a282c36e115d4ce4fe78ebf65
-
Filesize
990B
MD56f2f314e772e89111e3dd4d76b86a9ba
SHA16c29ec71745fb92ea833289d7925d2786ff3a847
SHA2567e0f8e5e3667b194dccde64cc4c9fdb834666d9c1da4ba3a8afaeab1471cf185
SHA512e0163c28fb877fac149b16bfde32e2b0ff703203aa66b698346f85400641611f7eab646912294d97b3ba5b484e370c05dd88b9f892d6931db7135245235e0199
-
Filesize
990B
MD5d86fa4f13951defdf2855a8ebd6e5e9a
SHA162aafa37a18360910509ea09d605ea34e88f6f8d
SHA25675d3dad9564971bf7d682bb98461796c743d43c54aeed759506149333e184ecc
SHA5129b4bea7f86577261aae2b22d0e512014e70960bb3207e17321cea3acceb35cc09930a519cb048a4b5c9ccb55c71ade6a28ebef8399e49745ab0e86c6a04aab11
-
Filesize
990B
MD502d16c0edc46a83eade0d64cc914058d
SHA1c6cde572d2505090fa2c6113a4b4676a4731777b
SHA256ef527d11c0224f320720a6edcbf062752ef792cdbc8a89b6bdb1399b694b48c7
SHA512ffbfd2ea740b568788db6514237fbff7fc648b3e2036c1efd055454aca5a50bb3a70eaecd8e37070dbb8d1cfd7b04903c2dfb2ac7eb7951ff1352e20c3b5802b
-
Filesize
990B
MD5c6270439472d3ae9b4c70e0df23a1711
SHA1ba29fadd7f849a2c9b282d15b21c6358b30131f0
SHA25626931b405f732747e0cd3c0229588bbb58747c7ac8b07e19d5f698847e68d98f
SHA512051f920da1ce1d3a55518acafaf2291cf083d83a31038821e5a1e46e08f11b86682b4bada5e770f3d2b7328d1f9fd7f732cc45950626074b890cd3e44c5e9c77
-
Filesize
15KB
MD5ceb321834b122b8646feea4f6593a661
SHA180b020d4ec7c501dc98c47b572fa5a7662471764
SHA256b16f4ff9fdcf687e8743606f488f9f8b08a2ab3fcc210ab91cb2533054f3ed9c
SHA51263fc83205c928943a9e6a7e1ea90816e6590c4ddbb47b8f195b9ebceaf012c8c9118281332973a519aab71778eee9b83309615d77b84710afe7afb67509f19ff
-
Filesize
14KB
MD5fe78eebdf6f975634ef00900df86fa3f
SHA13540693763cb6a46e770c20c147eae4fcab018d7
SHA25625e915d1375b88883b65feaf306a6b793c075a7dacdda48827b1bad15ecee3ad
SHA512abf4c0b798504980cc65ebe19d0feab0dcef7c6601f0d844cc04832fd86a9824468639b4c57d99fc7139ca20bc72556627794ef0b2a26b21b0bd163df19b49f8
-
Filesize
29KB
MD5803e9534fec86aa4d5293452197b02c0
SHA1e26c70fbc63c8a7524ee39e83e6a9a0d154f1615
SHA256bfe0507f4f152f28794d1772b3960ea0c1c256ba685edff12fa61f8153762714
SHA512378be1eb428970df23ec2b4cbd9aa139fb0473f8fa68e3ba40534e4e29d34082e54e3f39396dd3d2df8a2fe129d4689e64cb3fbf6db174476589942a6caf073b
-
Filesize
29KB
MD5d144dcf2ba5187f91d64c67875f01b24
SHA1ea5d242b28da9ad8b4c1c2fa94241f1670ee5b87
SHA256ef7a4d4ad197d2eb43b036890232a007aa9bd0ccb975990255af1d4337d1fd96
SHA512a550cf4b83e26bd701051f3f8ff538dbfbcc5703e3d0a1b1d540441339949f48427a36f3b84048cf9b229547a4c093c7104e37f2b6ac9f1c6e64fe5636abac4d
-
Filesize
990B
MD56087c8adb0deca3654565714767380d5
SHA11fe306b5862eb0d1495f4d63015531ebdbaa8b90
SHA2562cd6015494540cf022cd008d5e6bda73a9fbd3135c71afb68d45a4bf67628719
SHA512f7c23c0d9616c78fc7cb2c6a298a89fe267c2777a6d65145c6d2245f09c93c6c01a650a9c40ffc0fae7044caf8bb8e69102e18ad84f9f7cfb5dd41dd064450d5
-
Filesize
15KB
MD5157234f2f432a056d518deb984364c3e
SHA129176408f0492c3f26d30c6ac2ddf14101413095
SHA2563d16d3094a413617dccb2850203fc0509f0e6461f1dc4457f6a9b1c0b1b4ac2c
SHA51249e2beb99cb4183e69aa93c64f99a12ac4b8028ed18ffc783c2ab241a2275fbdf408538f08a574ed58e924764121acc951f11d2ade4a9c82fb09ca004f5c7147
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GA43GQEJ\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GA43GQEJ\embed[1].js
Filesize66KB
MD5dcda3db9fe4534651fca1debf672bf26
SHA1cc55669fca772346c54eed31fd61c08c4c6d7c4d
SHA256521516edbb1c5a9222b3702cbe053a4602623780a49f4d8d3c5f2fe9c66ec273
SHA5127b99c1b615484a73f8b5281286138e07b6cf2b1912c8bdc33eca4d8cfdf94307f320b42633f04c6423840cda814ee74128fc01db79b58ff00053d1918a646557
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GA43GQEJ\remote[1].js
Filesize118KB
MD5c0ecd406f233d3d15cc70444aaf331cf
SHA12bf373bffbc540c9a771f21c0bf0d56b01195324
SHA2566e6ab30aa79c992d62d2f77f5034eff02666298fb6eaf5a083e2a3bd1135ad46
SHA512e6cd761c78b686cae4195fb2a2c32451423759059b0c641d51927a101ab6a742658ca915cb0e91abd08f7684dd693852cf3392320cb43fbe6955860ce1bbf2e3
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7H6XY0V\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7H6XY0V\base[1].js
Filesize2.3MB
MD5d7ab337b769d56f2c9bd297d5ec43470
SHA1e2d570c11052e235217e8b3cdec95a9c1ffd7431
SHA256ffe4a2763153d6edc9ddee2d6dcc83adc31f859b20ab7ebd5efb1d422593dbd5
SHA512a78e7eac541f402136a00c9840ca8b8f80112516038586377397405e8ae248a04cdc0f6fda71791565870d75d87943cb4b157b5d7fdd7b02b2ae433d158898df
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7H6XY0V\www-embed-player[1].js
Filesize328KB
MD54841d7c0dc8687067a5c67940f823387
SHA1e050231d82ac5d32046fe9c07c1524fcb85b81d3
SHA2565a087880cd4c7ed70516c480f29206db256642795dfe0880fe346d394f4d088b
SHA5121a2c8a0e541ebba3f37dce4b9c4d62b310faf6bd8fa1138502c07cebf033a88499e6e745ff049df52419ea2b06bac9451be9cbfeb609239ea4d4ebd1c8785d32
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\VCY0HBA7\xJpMOPnEWHuz0bNgQKjk6xQ_v3g6-JsW9rGH7FPF3AM[1].js
Filesize54KB
MD5e6d8f2665b6f7e336caad61fc02f2bbf
SHA11f00d7963dff50eab1afb946f1767e18ff39fbac
SHA256c49a4c38f9c4587bb3d1b36040a8e4eb143fbf783af89b16f6b187ec53c5dc03
SHA512b052907077ac100881bde1d7a77f02a15b6bf762e1bf23131d144774e27a8c53c795e55a1b8bcf8e73e950f4cf1435813b35fbaeaeaae01262452abfb90432b8
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WNZH54VQ\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b