Analysis
-
max time kernel
142s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240729-en -
resource tags
arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system -
submitted
29-08-2024 05:35
Static task
static1
Behavioral task
behavioral1
Sample
c84d48c6bd2f1221f955f225b6c71fba_JaffaCakes118.html
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
c84d48c6bd2f1221f955f225b6c71fba_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
c84d48c6bd2f1221f955f225b6c71fba_JaffaCakes118.html
-
Size
37KB
-
MD5
c84d48c6bd2f1221f955f225b6c71fba
-
SHA1
abc4a617b3060846cc79e4571da659db582c0913
-
SHA256
501a2bf5c05fcca818cf407db50da165ffe082eab515b5a8b4d627f7020d7d4a
-
SHA512
8d27b9d0aa0690edd4538675f45bf3b43217ae8cc9010cd9aa9ab5ab0e56ea3722134ae233097a8fc1b5b634382e6309023ab32731810722f3caf2ec1ff9fb73
-
SSDEEP
768:afZ1PZ1L5pHCcSKgMb+WDNpTa+x/L3lglVgG0OcvnXiOfK9El:afZ1PZ1L5pHCcSKJb+WDNpTa+xTdGrcd
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{89E5C4C1-65C8-11EF-A1CF-525C7857EE89} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "431071612" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000004ecca440099c424d92937bb9b1db2c92000000000200000000001066000000010000200000002fa7da89c4aacb770c1459277e9d3e0ddde8e017787c353b32c75982846e3dd2000000000e80000000020000200000001a593eaab0abf8a0ee5e41ff7e767f21acd1a47a9af73afa6163d9323b5bdca790000000a0aa890ccf1273a6b9c2ece309bd43895e09a10c15c9c526b693bdbb679076df90663678ef0807f7a13064d7a068eaa61a77bc307b1398a505b0aae74fc98b0de0955ff6a35cb3a60035202abd219756d2aa60975d77021b25e59e415d00846309bd38a5476b0473e18052438cef92204fe4c514c5dcdc05dc95d8fe0e97304ab8f18cf508f9b1599f1fa68e0c7a49614000000083ed6cc428d83aa3c69302c3ae7889b2769c2bcf3aeaa1910ea41fd73e9694a102723f5a1b6f883552d01da873770f16a537ac8f64e786ca697473f568d537e8 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000004ecca440099c424d92937bb9b1db2c92000000000200000000001066000000010000200000002f063509859d5b80d255de1ed37abdf7455a0b27ecc24ac1e342442102d722ce000000000e8000000002000020000000d608ca0c5e98eec3516b5a39959fe872de6fe4e6a805645785a678db3532245a200000007ba20399b7a22d26724739b81722f64602902b2ef44263ed41622067dd9b19b040000000dcf818693c4f8eb931b4b8ec7bf45f0cf73530e67c9e400e18ed2fbfe579aacef5a2072914c531b55fda2454b19938bf30c8752a75a0ddf2a73351c195f4ab0a iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0387177d5f9da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2257386474-3982792636-3902186748-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3040 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3040 iexplore.exe 3040 iexplore.exe 2916 IEXPLORE.EXE 2916 IEXPLORE.EXE 2916 IEXPLORE.EXE 2916 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3040 wrote to memory of 2916 3040 iexplore.exe 29 PID 3040 wrote to memory of 2916 3040 iexplore.exe 29 PID 3040 wrote to memory of 2916 3040 iexplore.exe 29 PID 3040 wrote to memory of 2916 3040 iexplore.exe 29
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\c84d48c6bd2f1221f955f225b6c71fba_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3040 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3040 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2916
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D
Filesize2KB
MD5fbc1056e6499d8dee84873245cec00a5
SHA1d6b0f3a126072ee7c2c09daa8a7d00d6761fc56b
SHA256c59953d931b463207567dc21fdd9f165ed4f94fc9f76ad80f894ffde913350b6
SHA51287af4e914b5a1185ae63e43dc612facf8082c5ccea3f0415309b298ae844c33ed682090dfafe6c1cce504c1257e18eaf72547a9791f4976c3b446664f54c541a
-
Filesize
717B
MD5822467b728b7a66b081c91795373789a
SHA1d8f2f02e1eef62485a9feffd59ce837511749865
SHA256af2343382b88335eea72251ad84949e244ff54b6995063e24459a7216e9576b9
SHA512bacea07d92c32078ca6a0161549b4e18edab745dd44947e5f181d28cc24468e07769d6835816cdfb944fd3d0099bde5e21b48f4966824c5c16c1801712303eb6
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
504B
MD59acf222faf70f53607f1174d6a381072
SHA172d78e1c1002acdabbd1ac4c9aa399fce7885613
SHA25652d3e0444465d028cb84635761732832ef4cb68110ce8d240de309799036001b
SHA5128693dacf80321d67a180b92b67a48983d95e31b37409b46552f5d26d7ed599ad10dc7cd1efb50220238975b4dd12186f2775c5cbe14e4dd6748e9a8995dc8097
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E
Filesize1KB
MD5b3c22ca50602208ac30d002bf61e9e21
SHA101b0916732a0a35f4b1e3bd656276f1725b76e40
SHA256b51d567ec3794f9a9a9a1603d5d5afeda6d0a9801bec121f127c6cc2556a3ba2
SHA512244e5df3beaeb84f08cd715ff41eac24f021e4e7c252aa76f35a87f1f63554374d4cbedbfe9f21b6f24217316070dae5999f93f1090d57e7f2e7d60d1ede3d87
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D
Filesize488B
MD5d73adc3d44c011003d5ae9a540318fbc
SHA163ef958a8b623b5980ce3d8f745f19419e0a06ee
SHA256181439aadfdebc54c60176f87f42a7629cfe6ff70083ba63bff513d9f493e406
SHA5127886c1e2b54478d32ba62718fe44ee3271536878a75fb6ad2615f7de6953c8913f2e8973cf0142d596df29bba23130360e9b7c7c855e4db607db0cffd7684f35
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\07CEF2F654E3ED6050FFC9B6EB844250_3431D4C539FB2CFCB781821E9902850D
Filesize488B
MD5b84e8463e37ef58d8a7724bbdf2f17dd
SHA1ae8894fc875868ec2a13d810d556d569f384eb6c
SHA25607d797c4915ba11792f14a3235b2324d92093da042e5546d6b6c7125674d21a9
SHA512324bb919ad9f40a1890ca8b3d1e10104f48c5b7192a6f856e8e25869f50b2080c5d515fbfe53e623df31a28de8aab118bd925dd53848e02b568fcc3f2105d53a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\103621DE9CD5414CC2538780B4B75751
Filesize192B
MD59966a7cc5701f925fc6c90a24e978f4d
SHA15a31b604b8121ad4537d2d003db30e30a87a8c88
SHA2564f9040e19589dc72165670740593ba2d619bfc983abf6f3c51233a8346f249ec
SHA5123601ea2314f61772899430d1de72401f1df115984a06042b3045a0f9afdb947a3e5010de30b62acc69e9902949e621496057d6338a0fa1e4f15fcfa47946cbcb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD57f4bef67e4542d3ca7d745251231a482
SHA1b1cfaefa28da62e4000f6608a8c68d22a543937b
SHA256672befa66850ebab44e18e1e35c4bb7587bbc113c76d1a129316f96ea1da45a5
SHA51288317f234d490e36d73ad71766186d93802b7675b702ea6b56db59c9a706d6713859121bed21eb400d918edd5c5687c9a33d760be17392b38a11c7012c34e800
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d242aadf6d23da8c25451abfe25dbadb
SHA18deca23f063b5243faf63c6d37b8b154969f065c
SHA256758b14299042709f25accc41daf3d3446fa3d11ae40e19ef020d40bfbd094464
SHA512bd6194a6f2e46775efdfda7c5cef6b02585f17b2695dbd327ce8c4695147614fe8f75a02ed86f7415b56d450e013aa9bc5a475878a0220e92714c42ae85f9c0c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bc139b0dd37be53e2b69424d226bd76d
SHA1f4eb9cef52cec4652c55225edb474319b8613c2e
SHA2568fb7831921bc808730d77a71b1706eff88919b8a6d8326e081e9d6fcf54b36c0
SHA5129d6113474109e0629c5b1230e2a5d09715305e5719246ef298a9d50f30d3286dbed1b32a44afb494c3cb755915453cbb86ddde3fcaf6e92eb83620e3911b80af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5517a28922561d9306b8a044f880f2f6d
SHA1c45257cc86632c8d608b815be3baa6beb8e04f92
SHA25637a9e3318a960f0156970668d75f871dd6ba3f9f60cf638227a6ae29c9ee4ef8
SHA5124f79396d95ac92c951a2b16a4d474faea92bdcef775c861674c74f0262d7f0d4cf558686cc7e9747250a070e61d4dd57b7ba5189ffb4ad9cf3d46bae0076e2b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c654ab766205aaa13c3368ddd1eaa507
SHA15c5aec5e3ec4e86841c5b17fad1dd65150451143
SHA256145f772fc4943f05fd274b5c05b9303d1e43caac9d682eb1b25f54eee9a764a5
SHA512df966ed51fe8c10461b78f5a46ab113365b265264ce0baac6cfac3f1a297738b7aa2af8aa290354c8b968676c30b73ff869676b55b0f060eae9628dc6e87c69c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5253327ef2b0cedb01efc7c1d9734c671
SHA1308af21a83b32de5eb0ad30f0875d07634532cfc
SHA25692dbce10d6dff2bdbea13fd08e75be8933df23518662f73b86497bbc7f20bb93
SHA512c99767cb5ee02524de1cbd99b5ced86fb5f0f0dbf9c2073fed23c94a22fa1e044acf945e0ec7adffc6bb7248a93e67940e88b54f75d8395e6003af3cff7b181e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD566acf2cb2ad502535b818932bf466e29
SHA189ed0bb0387c5b58702abea6665f285d7a0c15e1
SHA25658d69eb91ac4ed407a2e5dfbfc7d1b3471a3c4649e10c2f67f3a11dab5b4d145
SHA51211fc668d96c483eec4fd056fba62785a7a9f385fefc6b87b0f7ff3bb2585cfb056f1f5d1c016ee9d5bb1995c0d0bfbff6f7ade3384ece39b3b1fe274d9b56ebc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e8d51c875dc6cec2bbf438c65d7314bd
SHA1acd00dc1932454e50850ae64d630788d71112a1c
SHA2560c638bbb2f691e1834b01c1cbc5fe222af363ece79f8f3eaa1959682ed4bac22
SHA5121dd9f648951b7ee341cf15099cb6599f8a7d62d737667a79dd6a87ae7928308b6c4ed3917c6f80ea2d82fdc6c48dd93a13aea38846947cd87c7fb4f32beee2c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5412fc378154bbf5c77af7a222474ddcc
SHA109e78777e6caa4dfb7639bcafafb737668814551
SHA256fa1640fd9377db87704c91d9835fcf0c6d1aae0368765adc50e0068bc0bfffd0
SHA5125d95db653103627e954900183a6042ab092a4b1d09dc323fce9bf688223f25c9e1b29aee5c6f93443cb1e3bd4e794c9464360d89173fe38b8e75ff4f5f1013f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59c849a2eff6d6a375db349b4de8e68a9
SHA1e22fdf03717844ff1d71c69e841d5fb79cec83a8
SHA2569fcee9486d31cfe65a9fb7c78a41016ca4b488451f665b6c64a53d9fdf551b06
SHA512031022a6fe3fac21647a25f10a07b34bf855717beafc5cb0a8b6a6d78f6baad72ea636dacebe8d8b07b86ff94d41894a2a514c24b02f9be879da619d0cf81b19
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52469f287b5b9d18e30c4f743cdcc8453
SHA1e1340723a38f9b725001cc0c75ed1a3dd4c54cb3
SHA256cbf0a299ea2a8efbe35fc5141dae5df3fb1c3ef6dea1d18947e19822bf53db4f
SHA51212d14ab39b298b666f2b64c107c0011447f90029e95ac857852633cb3252b159a53a34aba72304624a36234c520c7d75843e2cde561c19ab456956f6cdc40a3c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5acb671c51217b0f9a0e1eb0e31413282
SHA11bc5991ea81000fd28e311f2731cc68df5912d52
SHA256a0b35ad38368f552575a4b4f62bfc0258fdd2596727e3c039210ddce33d86297
SHA512c0781aca301fd2f718c007495c803df4c673b51a3e34fdbd8d9155fe0d9f7f69e7fccd43185acd5062befe9a9d76f82f4761c6479ffabdd85ff13bc5051a3b3a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f03dd3ed27524f706eef4857ab91b3b4
SHA186b4e41c024daca6798b4c9459ae70eda1f3cbe9
SHA256900cf19c25bf3eceaf0eff3f1f53a057a857af6ca39a0c1cecafa79d07806714
SHA5127052bc52f9d318ec78f4e6ca0f51f3e95a1fdaa7566a3c60a02a879dd90db6264b543c175d2405268273491ce8e2ba193a83c475dd2ada8849d96df247117bb4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ffee03e8ff818ad5de6123a372270d4c
SHA1e889990e6feb1374af16bed602fa644402bad737
SHA256574f874c36cb125ba864cc6888aba7e2d7ba42ac8eafc5a43db92520f71c04d8
SHA512712e9ca45a79735bf6af31479d5ea26e44ca6e13d17491637cfa7a7effc1ce3888a62920417b5e095cac7bde38e850f032875d20f667afc6fc220e0f0bbf1ce2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD550a26a474556a3168b378210fcd7b22d
SHA1db331f0f7041eb53aa49df76b114a8d20eacab2c
SHA2568471039d411594d4680fc7b9bebaf8389288029367655182a7c52472352920da
SHA512c9ca07ea96371588297776779a2a20843395c0a57e78caef797ce8d28c17a9bf3709e56f193d175276ebd89d1d1d3da2165926fdcba85a88935f44d906d8320d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5867f884c2b1bee6414322732d7f72316
SHA1895ffb30c6fd75a82386727f422ec71f2a011185
SHA256fdf9257a113db760c81ebc82edacbe10bcd5c3a57351792e610648f6cc608b81
SHA5129635925eb19a33134e6e00446f6a376be3c00cf0580913ca31c2e6ca142e5d244c5d502a1595981993916cf6b394ef7d90e37bb9ec9d58fe0a7636fd3e999486
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD599df7d056339a2dfda29e88d625c396d
SHA11a2fcb3f2781503b14266030e156c10206750680
SHA2567da52184b8f2d893bfc083239dff2c67e5fff563c21caf96dfd993f6b33a34ce
SHA512d846bc5c613e307f092e1667239735bffc25ef568f58ff1475f4f9470bb019a59afc367f397d1513fa44b1c74b1bdf1440fe292908f0714d8780ceae0c6ef8b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a1b23fe443a54fc864e4e09cdb1a606a
SHA185f458738defddd8ae9c5523b26eeb51ebc5d6d5
SHA25659d5d1e99c3b03d65a006b999fcdc01d69318b3dc0546b772f450c8a5c24d36f
SHA51208884575cf01c3e45c1e36d376ec8d354112ab06a62f33bdfeaba1ffdb7e773ab99f03093aa7fea1d1e78679c6819a13cb3b9d5fa1e74b530a657ab2df5e756b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56453909bca4fdf6a5aeff1d342a367cf
SHA1aea8e299fe8e16b69d05c819f23352d01e07b149
SHA256500169ebc8978d1e46713ff401aac9c608188d4fbb146869dfd2dbd127bc8b6f
SHA512e7d6980993d9ff16ef2050e930e8cfebf474bd501ec951668a9abee681ee3b1223d17035cf90dcde79a2ee7de6069a8abb61f65ccc000997470a5841adc7f044
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD515dbb985f37924687a1755df9a3cb3dd
SHA1cdc5a93379c11830347ace0862e09658795cb1a0
SHA256571144bf6283ce5b7b5c6064280535947c64b9dd1ecc1982c763a44d9a18e35b
SHA512ad07799ebda4e203b2de27c223c3b057f03d64a8a1bd8818cc93900dcfdc069dce72dc51914a32bf61e2fcb050ec3138d0f8c978032841d3fa05bc1394548b8a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cb8b50b60f58412e63dee88fa8db041b
SHA19ca4ff16abcf9d54afb24389592627f636ed20d7
SHA256b5ab81d18763a0d840f1e16cc45c1d837068b9892768b7c98007cf187f9163ee
SHA512caf6cc8bbddc59a32488a81684b3913cf77207b527b720cde5de65fbf18789597b8810b865a6e1b21e7342079ee08aa6c7a7b4adb97c551a4330f9807260919b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD576637b2be81945330639e9952652d352
SHA133dde3eb19a5b09bd41fa1609f3b1aca616fb416
SHA256be18f5b05c3fc573526562a26ef03d00657cdb4386cee5be150664db3dd0d7dd
SHA512af47b04346345a91c4cf9c6dc0cb17780180046cc0df8ca3721a323024c3cb7c0a201c110fc42f7956ac1ba91dce0312e94dfcb616074d2d8e06eb5cf68646ca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD509692863ee7dcd3cbeebb9854beb51f3
SHA1b8748216eaadee9b2a9367fe72eb8151292757fd
SHA2568d6690ee753cbedcbcb80baace3a89b95e9105cf38efc97ba637a018d3271255
SHA5121b7984615af11ee52ab4b015cba17893eec762fe51ccda95889a61cb0e51915b711156e45e624aada27f310cdd282591228a615d3750cdc7b2fdbe743d973512
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50e07cef00701f2cda90661471577ca64
SHA15ab09c5c60d1a1592f15ef02adc20081753551c1
SHA256ab96dfc0bd0fc674322483559cf2538b47a46f4c121206770bdb180348a6f4c2
SHA5121af28850ec58331709ef089bc0d73ff4674dde62591f7229044e84e3443c66844f0643bf9e7b256ea2f33fd339cdd06aca061016b72ff2e2233a48cba79db018
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56c475d13f1cc24dfdffa722161c691ae
SHA19bd1e715c70319b6e3e58b5548e86c9b5f9de597
SHA2569b4032e1939a1a9353a1edb52d544b21510e9ad039e049762d0967e13f8b03b3
SHA51206bced24aab790fd3003a8bcf3dc3022d9e3441424b841e0c84ff3613d05ac7d2e5be0d0b4ce70472edc2eac197e1412fbfc26bc09d79e026a48033287f53856
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ac5d502053547028a2b63b8c4013f2f4
SHA1ca65ca1714da4d097c5eb32db902c77640b44180
SHA25682383d6f9cf9b9924980cf20b3366dc83dc6ff1bcbc70c68c088f6796ee4eb28
SHA5126e5db80e6e7598963715e74e370126a7fe4f5672d3a6bf27160701aa8257e956aec01cb3fc0ae1e33a7a3e3f20a836ea908ba6caad9cb0875eb8345e3895e9d9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E
Filesize482B
MD5ede1e7061b8d365cbcd6031f3544fec6
SHA1bcad9731c57baf6e83da89bdb01b15dd65060977
SHA256dd79cd532a560b2b7d7c765ab0db4d0bd1df3e35fe2858acc116ee4d494478a1
SHA5127104332847d09886e73b6149cc74d53db0fb321b0b88e3c5b22dc90e548b23a486d920af5725d3af57e61530ead4c484c262aceb026f86fea879231caf15cc87
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_D7393C8F62BDE4D4CB606228BC7A711E
Filesize482B
MD539f2ad7e3419f15cdbc26cae1666e50d
SHA1742ee4909db4d1f859e6bb9c61a985bdfcaea067
SHA2569a856b9facbd247a586dc8d90f40a5b252ef844890f26f2edbfee34b420dbd3c
SHA512dcb84ecd7b1cadac5da9777a9bc090d3cc2d3ec04bf13b10b8ef8f8787804a871faf62dae76caf1b92643b86d7038f4277581399748c5f01eafbb55e547057c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD53ef62f7091711eafc65a409888fc66f6
SHA18876ec099e5da9026d9f418e2bfb57cd4e6b5027
SHA2568511d213257c93f4b3f33c854aa2495757100df2500c9aff08f7bc332f3d139d
SHA5126cb54e789e0d3ed3b3709d8659813a7683ef8a109d1974e133b4f8eacc6757b4b8bb3fd113a1b1a1ef186da9a8cfa7eba7e78ebacccdec299744831610cdee9b
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6GL24G53\bootstrap.rtl[1].js
Filesize54KB
MD5487ff61beee9790d2553c7e2f7d72b2e
SHA11db6a27d51f172e940800bfc6e8a49e554fa180c
SHA256533f6969bb2b2718c3441e929e1aa086ab855fc194497b20c7de8e162dcd0871
SHA512d34ec06b1e316a449f0b16b46fabd9504aa91d1bdf5ea57ffd0d445be3df61dececd74cfcb83919000e5eedeb6848d6a93bf3fffea8f2de5781e5549e971eba1
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6GL24G53\custom[1].js
Filesize3KB
MD548fc61b5be29ba0d3f34b86272fd9479
SHA1cd334ddb530a490cd6e7d5590968b92d16bea2f4
SHA2569ac7069149de9062fa31385c8046b35cd887877e9fbdffc7a5132a94f9c71d64
SHA512bbc4ef5452149f312be9e5444915f7b18560407f7589d6499c28ec60d73016073f962f106707b724efafcc3b7b603dba1cac85272d476233b10aba178956a295
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3JH4PQP\cb=gapi[1].js
Filesize163KB
MD58d081b6e9d6934eb63adde3355f9a8b3
SHA1193e6e9e3feb35f854e201f99e1c9de2a2435554
SHA2564d357846b85b33441b4ba2409f7affa2212ae546890a8b42f8a8baee386a54b5
SHA5124eaea391db80a0ecb0bd9ba7d94130d546e6e086f6dcf99e6849854b222b82052c54356a87b43b284ab36b3da46c2fed42ce5d798d4f86d234f592bc75c55ae5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3JH4PQP\jquery-migrate.min[1].js
Filesize7KB
MD5512b871a2830e44259bc3ce3343afcd0
SHA1875bce76a77590c3c438bbc6e014b39c23c8c88d
SHA256c4d24f6b27cc7ceea56fbec786bb1f486fdad9a1f998f760f76d1f44671e105c
SHA5127c31817254b71d4cac10120aa2829614311658e468036d27eb43b063b392620c4611ec3db3b3600da3e48fb82a41c5579c048fbd9022156f038b2b6cb5d946b5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3JH4PQP\jquery.themepunch.revolution.min[1].js
Filesize107KB
MD5c1007b98017ddf7d6f6203d99f68b1c0
SHA125d856e7804421868283ee4bd2ac676a14ef6c07
SHA2567e5efee0efab67664f43a04820573d1631e792052aeeedb3163b6d0579ec3e34
SHA512c1cb916de7d94b4effc1165a3f152fe71e516d50aab564d78461a5b8792d35cd55f5eceaa8ebb2e621c4098cafbcc17792fa34b07f5a136afbc7d3c1763ecfaf
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3JH4PQP\jquery.themepunch.tools.min[1].js
Filesize98KB
MD5965e0ff705bfbdd80f4f6706479ce881
SHA18ba8fc51cf92f0531c3f7193664fcec027f4b6b5
SHA2563179395361593c5afaf7f5d5c18b7c9c00ebabe5fa335d17f153ee39e2a4fe5e
SHA5122790e13bcb6373474aba4e07d19e425771c2821b3b1ce6519ee71523556450f2ddf39fcca5850b6da6dd3521826ce6ab834e1b0ab1184a94b58deb8c1f353542
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\K3JH4PQP\jquery[1].js
Filesize83KB
MD5e85aed5c30d734f1e30646e030d7a817
SHA1b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad
SHA2568f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a
SHA512a5b7c4911b530b4b550838f50ceda9d9382d86aad7cb4ff13c897c269bc7ff350ccf01487534882f294749bc19f3398f0b338e1d8b03af3dba1ef382168ecc9e
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q98GZSGI\bootstrap.rtl.min[1].css
Filesize97KB
MD52d209f8a53326fdc661f893d093fcdb0
SHA1a9f927888e822f4f89ddd7bfa4bdabaa083231bb
SHA2565e8b2fc660410793a96fb263d63c6b2c2f9619e60d7c0e1693c9a3991befee82
SHA5127dc43644f85edcd6ddfd34ba0fd286878fc83a4e4837470f93b08a90c40b3a40f6ab34cbd5b5cd7ce0bcc858d8bd6cbb1efcd35bd341eb10b9c7412e465719dc
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q98GZSGI\c[1].htm
Filesize659B
MD532eef302b493dd0c07cb8a9f57b11212
SHA11ea1f3119c3047b67ae148400d9325fc973d9262
SHA2561a38f672e987fe3e7e70969cc0b38ccdf32f194c0d5ab8a5cd1cbf3289c93e5b
SHA51225eff84529d22c64cb0799a23f464ba22b621d394d664eb6f36005269c389f43a24c5eddb974b548e1e1ae31622b92e7280cbd570020aa457bbbec740cc91bbc
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q98GZSGI\index[1].htm
Filesize3B
MD5ecaa88f7fa0bf610a5a26cf545dcd3aa
SHA157218c316b6921e2cd61027a2387edc31a2d9471
SHA256f1945cd6c19e56b3c1c78943ef5ec18116907a4ca1efc40a57d48ab1db7adfc5
SHA51237c783b80b1d458b89e712c2dfe2777050eff0aefc9f6d8beedee77807d9aeb2e27d14815cf4f0229b1d36c186bb5f2b5ef55e632b108cc41e9fb964c39b42a5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q98GZSGI\plusone[1].js
Filesize63KB
MD565d165a4d38bfc0c83b38d98e488f063
SHA11c4ed17c5598a07358f88018a4872aa37ae8bc07
SHA256b1320e0dda0858c87971f7baa0d53063ad2a429d232fd06b0067bda8b9eeb0ec
SHA512abf4c755d88193e7e05398b6f934fc561d8e2adbee7d2170af399e145e54a4a8a93988e4af4e28d6240c0bd1bda7035ae97f67a85a471088820baae8d89f3d41
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q98GZSGI\site[1].js
Filesize63KB
MD517f5de1918f048449e1c73f922db12ac
SHA133c38b4790712d0678156e97cb47e1712da4989d
SHA256d526cbfd2682ef59cd5eed8ec29d8123b2b1cc607cc4874ac5440a2326453f1a
SHA51228e81a6761207a6eae6c8c868edff6a10e5e752816e90da08ca72d60d31816cd1587fc193d2576705c2184748a64b316874142d5d37e4817dcedf7165060da8d
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q98GZSGI\site[2].css
Filesize62KB
MD5b6a6b55832ae472f36f9703152b9cc5a
SHA1fb9f077b5ae9b453c67be0779402b26769aa4096
SHA2565496d360bb8cbcd6dd243cc5e5a97cbb3005981ebfc3d23d6805163212f96c35
SHA51288b90a1748db9e70b43e0c370395d37d2d7d8dc86514d8e41806b91b8ef64ccb3a00f34ff40fd41fcfed0b791c8d9a986400f2158c7c5520a68bbbd972f06ac7
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\Q98GZSGI\themed-profiles[1].js
Filesize111B
MD5c2e6c816533ab8b4d5766def331b8c77
SHA186709e96e6c3a88281ea9b647e70a74035c12791
SHA256ebd6db7f974cf3bc12557219336a72ad499528c992c3f64569bbc1dcee9dcee7
SHA512ff1b2984d3ebc8f9472bcce9f5666088cd545989234e2d83fe549526d7459726cc753437716a3cae6e17b5b6f29ff6e937088040e4f0881d3c974b3ecd7fc298
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R4VBOHSO\BYekan[1].woff
Filesize19KB
MD5a88aece774e17aa9bd68ec1eb9642a24
SHA10e1ed8ac5e824e9498f91944cac61a07954add07
SHA256f69e49fc873a61e07187675a04e0ceadf134a21bc74a708ecf560c24100e637b
SHA512805d061fc6213a145888dac3fe9292028899ae276669f48cc501543d844a77c77d17bc33321406ec28e3a4e6f0a8fc75671f288c17c2a5920d7281a137ef6a09
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R4VBOHSO\bootstrap.rtl.min[1].js
Filesize29KB
MD5a54981743546427c5bcb4239f4f08447
SHA14d08ef1c6d970dd9e852447c124bf2a02fdd0410
SHA25663bc96f2fdd396681c0c80a495a4020c6253b1085ccf9f74543fd5c6a373e793
SHA512afdc6cb9ed475095209dee8adde38e683ac77098c32a19ab25b8984f48fcdae14e00c9811a7a7ccc4beeb96e3d3841cec60cee81f0a0b2dca5c4d3d727e0c856
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R4VBOHSO\core.min[1].js
Filesize3KB
MD5204d1573e5f9ad0d0c9b61bdffe4a37b
SHA179b34bbb206e47920c1889293ef20eb18ed62425
SHA256191622240e7646a2e888eb318557bcca854828b59b5b2e960545ee08ae142382
SHA512b72df94f4d594fb026cb876b15fcfab4f0522b32f74850c732dc47e4ba12ef38fcfa72f32123d76489f70bf6dfeaa75db8f64c37630bd36d0a7f9fa29f1b7faf
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R4VBOHSO\datepicker.min[1].js
Filesize35KB
MD582e28aae0e34a07a0b13ce604d021b14
SHA12e057fd976879ca8f3d9714b9d51c1e1528e4543
SHA256dc569104765dc63add573c1e2256369b5330d5a252efae5cb8b4c531dca84100
SHA512052cfe448531b0cec5f206a7918399eae64b91d58879d3f43560298b8cbe8bbd488e136bd73db3a958a5b89bec896ffc1e17eec8285aa41b4cd8280994169dfd
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R4VBOHSO\esdc[1].js
Filesize2KB
MD50b3cc45f7e18e1ab674b5301693e4602
SHA13ff49bc56aa00e61c27462594551630253757e41
SHA256bf273574b5d7663d90383c88137cf8488d4d8f9738fe4e8f2532fbd190d015f4
SHA512da423cdd8113a5904c987a6024339e2b166087eb46e6c35cede79143d99ec88666779b9002b388a85f99c91a9869df935843b565d4ae2a3e8bd2275f4440ad00
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R4VBOHSO\style[1].css
Filesize42KB
MD54c467708fec8ebfd6b0dd8bd88131a47
SHA166aeb7247558eab00ddd3c9b7d386ca675cf43e0
SHA25621934c18f6073393faec4497c4a25c6e65ad6381568f3da7e8e788c36441e965
SHA51220c4f6e68d1298554d3378c44f0bb32604c65a378ef7d4d20eb7df79664101631c6eeaa4b235924dacead755691f5cde738a0b6cf2d0da97f53238259e81cb45
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b