Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
128s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
06/09/2024, 03:27
Static task
static1
Behavioral task
behavioral1
Sample
ce8a32527d79566a1ee7ad0a64953237_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce8a32527d79566a1ee7ad0a64953237_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
ce8a32527d79566a1ee7ad0a64953237_JaffaCakes118.html
-
Size
175KB
-
MD5
ce8a32527d79566a1ee7ad0a64953237
-
SHA1
3e008e48264e5816f2a79cb9632194d0d15193ad
-
SHA256
ab1b3a9584e2b524d12e8c9a2cf5e9226ce696d74ceeef187e2062e3fe81c7e8
-
SHA512
88703256bf64394b430bc720114f9e5de4c15324ac8d38ec058644563f080b1f6876bb74b7ab255548e28d5d3a308c046bb6a4bbf42e7079674fe22c8bf8c1f0
-
SSDEEP
1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3pGNkFfRYfBCJiZb+aeTH+WK/Lf1/hpnV+:S9CT3p/FMBCJiWB
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "29186" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "38354" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "38266" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "331" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9846" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "38035" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9846" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10654" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10654" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "29104" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "29104" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "47703" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "18710" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "38348" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "38035" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "19524" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "325" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "38348" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "331" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "325" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "29186" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000953bd8210872ea40aad5946cc0771cd300000000020000000000106600000001000020000000810957bd3050f65f250b6292770e5d455e64c9361faa89bc0ad2a8e9747e4184000000000e8000000002000020000000f190d79bf0cb15baad3e64bda53655d3410657de3869ee2c37ae2aad495c5dd9200000007c7ba297093fa05356e1f384cc7084c87fa8cb9a220b98dcbb9c7421fc6ac06e40000000fa22074826466b2ef1e4b17ef2d3c3b689b9e3185872593031581600eb9aaf553aaefc606509683cbd93b9a072d1219deb3dfeb7d129fbac79b2bf7d22d1bf8b iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "19518" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "19436" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "47703" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "19518" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "18710" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "233" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "19524" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "38354" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "407" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "19518" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9846" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{ECA4AB71-6BFF-11EF-976E-62CAC36041A9} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "19436" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10660" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10572" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "38348" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1860 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1860 iexplore.exe 1860 iexplore.exe 3028 IEXPLORE.EXE 3028 IEXPLORE.EXE 3028 IEXPLORE.EXE 3028 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1860 wrote to memory of 3028 1860 iexplore.exe 30 PID 1860 wrote to memory of 3028 1860 iexplore.exe 30 PID 1860 wrote to memory of 3028 1860 iexplore.exe 30 PID 1860 wrote to memory of 3028 1860 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ce8a32527d79566a1ee7ad0a64953237_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1860 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1860 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3028
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD5d327e824e1427904142f708f37aa7039
SHA1165028fbab53ae2a9a247c328918a75207334af3
SHA256443863ce80a702e69592e89e2ac09ce9eca6a078396657b127ba5d4e028dfcf8
SHA51210622db71d9809330f071b7e6b1a176110a24977c6988b7025f07247f2792805b53bdf03e0ec084de0938ba34ff4c94074106bc6689f8aa42fec35241411ef04
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5514716e80f2e05ea00ed4cc78d5aabfe
SHA1f31b12bb0c1a555050c45793a47472557c290fd0
SHA2564dc67415f74ad233bf0c5a10350c9d3adcb4fbb70d93b4fd3444f368a6a1e77c
SHA512799203194a98327b1412c4b8ba9deac1fe8688e4ed21b99b3d8e83c24c8a961f3b33b75302dd81dc5acd0a42fdf81814c92a535231812f7c687315dbd93c99ab
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c88ee721e3395e3b59781e77723e97c4
SHA1064d148b8e0efbca8a18b102d6fb3fdfb2130a40
SHA256c1ec5df76df751c25964b5143f6c1289be9951c38a4890496e85671dfe356ffc
SHA512d0cf82af15945379af219b4874f2a4ec5eab6360e465341afc476355cda648c347c4587085f74d0a8c8f546538f0ccf4deca569ba82521afc95ede017b31507a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ede2fae8deab77ef8a7e73a5b164ccde
SHA100c55c84c8fd6a7a1ce13600fe473d6b1b09731a
SHA256d72e61b63e66d8c559a5db8fc10bbb9fafccc13137b7eb8c19ef4efc3f6d0e53
SHA5120e71cb3fa54acd6d4f7b9ce0156deddaf42b15265172c61ef5c48de19480d2704f43a528f52f2f2a69a1a955e786bc8c093d5cb81d6bee0cdcd76e4362e363d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5deffe8aad3073b21f77fa0c2715795d6
SHA15e4a3dcb82438fa8abf4cbee81e21989fa0367a7
SHA2568c71c6cff614e024c0183b26fd5bb39998c9a1dca0c8a479adeb147aedb0a780
SHA5124b9d78decf7d12a0f60e4c1abb12594648f0543f9967c4f598a0e2fd846689b239c64cb33f5e37859b4e158a4dffb24e0d8682b450d2ddfa1bdc32b08b9a8d81
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b16ec2fb2a7244a0a81c39164fbd239b
SHA137e800579f09158cd08044196b1108f1d1c1abc8
SHA25668e0e4ea3cdcbe51fbc4a92e431f0a33fe375101d1b8dc84950870684b35a547
SHA512c45a1e11b90bdca71158d905c2c2b516df8f83285522b23c833b0f161129b443bcca32806af9afe0018933608722a7a023d7e9205822bd440a0a28f11706be11
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d69aed4e6da7ee9322ce5eb709ba6a9a
SHA19ec9518915ad138e8655ed5248e86909488b22f5
SHA256d1f8cdcfcdfecb06fdedf3389fa8a22b6f1b3507fdc157218bd7b4e722b4e39c
SHA512635d8b264b16fd6d0abf72d15d970c8247352d3716c0fb9ce33a8c95209e5e7536aeaf96afd9fd9c01dd2ec39fbe27a8d21fb0537d6f43ef1928f929bc3679b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54bffff2283bece8541c4f212c6c10c97
SHA1df51201c54e91cf9ea1726328a24408e40dd96e9
SHA256752251b2353811b103050a12f220bf8b57932369e14c9c8042c3ea183416818e
SHA512e2ca0e092ffe82280d009ac739069909496496a8085e39867a38c23fce1a4f0544522390f702423cba987d8a3ba149793fb6373e7b32a4706bc39da7b37b8003
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5edae51c4728edc70e0dbc7156051ed9a
SHA1673c146c601ed78b52ab73fb3d288026e4a4f29f
SHA256c055c66c44c10087f2fc047c878dc3ff6c51f9d7e03bb25c8ad08e39bdbcb365
SHA512023cec48c825de954ffec819a4fd0c4adb2d21d8c1c7a9789f064e50155e7207eb363ef4398b5f0eebe29308e0ea2237515df6520aed494db97c393470d6d707
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD586a4fc28fd4b6ce739798f38136631bb
SHA10abd842d28d9705501f84a4ab08032f6cf342665
SHA25698d4efccf6fa25192d0762b8325647e778d0e8ca163f8ca308e9f8ce88d8f749
SHA512a0aaab76827b6f6002db172cb921ab849e3562f1b1fd05f5f060348a22279eeaa79a005d7f9382102b11a0805d6c914aa3d234dbc7f5f4fc616b43cbd1130c6b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5162ab2328a78ea3ffb61d69976e870ad
SHA1d9bc090d57b9d6a5910cf4f155bb81640af12f19
SHA25617e79dcb8d62b8722afdd252be81913a520cf3bcc05b9892f0528fc638097081
SHA512fcd5e8205c5007a71754b19ccc9d308d153319e31a7a7c8f3fd9cd14dc73021821917d9c74797d0f4eee36eb8f49a8367b33d8ea0744bc3a6d31f152fc43ccce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c3ec5dc018674270c0ea73a3f7685259
SHA168decdaf4e120401580a1f35dacf0bfa88022301
SHA256afb19cf2c25a828c7b3ca42cabfcbb8da6bab2856a9dffdbe3182416e59e9cc3
SHA51283800bac29da1d4936ed831a44a672453e3d1aebf078196a2ea116f593a2a9a3ebd7327d823dde87468d9262c45a88cef395d38be8038e496d8f771d3381892b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5665e1a213d0875b8a3702a5992b4a92b
SHA1258175f685e8bd5eae53442e8559bfe191c221be
SHA256d7a734e7fad3b85db876b5e272a355d0c8dea7f16e8268c82e98f60b7c619d20
SHA512ff8a77aa9a9cc40e7d2f1ac9e2fb1c8586cb2d0c98977265cba53aa6f5faa1259093ae553e01e7e4db2fa55e1a8fc2059a7b5770ddf28c682a1adcfd18aa229f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aae255cbe4e01d0fdb25332ff18ae89e
SHA1772cf39b28d93e076ca8c92c41971e7d4d88b82e
SHA2564d1c213699c0edb410f4dc6bdde08816010e562f5bb575b425e266c2e15555d0
SHA51256b8bab89d4cf3f3c9950358f109c629ef980796a19f885ea7e3f5b51619cb0471357420003447127e12a6eeb2ded9a49bded5d743aeb80c6ee642222c95a002
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b9412b7f73620d745e642920e6a08098
SHA1ced42c451f06a6684f0690d07e4c35724c24bb4c
SHA256fe8f9f675ec47f0049b867a89ce3502c7872c5eeaa34aeec0d616a5a11554e33
SHA5120345a1249aad3a78bf5d4588fa2c77457d6f4aaaa8394f6fccc92ca24e56fac23d59929bd8772c47796915182402dffd8c137d108ceb1001e1583c2f7cdf47ea
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b9486b27edb6aed9ff7ed9f57d79b431
SHA1ad3f5db9233cadf5c9186b526d48adadf50e55ea
SHA256ab7c6489129bedb945cff839c012f01b8fe412ea9bf80b78eef347a9d25f0cb3
SHA512da2703dcc8e79d4bbcf48d0f183e922d9aded97c0c21ca045836487b8211bf781e1aa5375600307268f8dc8c0df899a070972b22cb89337ec99799351d9c35a4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55ed3d12e789b313bdf3b17ac0999ff95
SHA12559bd70008f6cfa8a4956badc355681f2434d19
SHA256c3c81b26f5504c68c6290d97f564c67ab224e1868f9aa1ecd808d39e1631ec6b
SHA51248654a95f95c054961eec4bb11eb1a8ef513fc9cb4de4f711eb5718be7989faa97b02df39354762d59786ca486841c97fb5ca4b430eb9ed3a3540d22069194e4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53ed466d45def56158c8524c5f7a9f9f4
SHA15cd614957af33101b6994b2c754e9f241b7e8938
SHA2562724d63c4ce9a6d8a32be055007d30e55041712b9ec7396577cd1baeae449b76
SHA512e6058861fd4c2ae9f07b066c81ac7303ac229cf0d0964ca44c87395883b9db006dd4f3d4ecb772dd1476b28d03ca050f35e650f2df4bceb29e083d86dcb3d531
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD582ba2a17820cd48f469b555291749300
SHA1d91ddb8c13ef12cee0194daa2a3b004bd8c24d9f
SHA256eba67e62bc6a569814ee74523b19be1fc098d38ce4d202f523350537675c6527
SHA5126eddac0785537e771b82670660a47cfaeda21f644c972d11be9a1ba49a27d43152b26e471b2cd49b25269f9990e8e7113112a726e9e58e9a532da1a3531425f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54be095ed3f359d3a26921adcafbd11c4
SHA12bd817163b67b2abc4b9fafd7712eafb51a90a35
SHA256747e9d9fe7c01c41ae0f938f41c12cc1228e641cf620b9e04ef2d2d27d38ae52
SHA512ae6f575f100c3c2fe89d81e2578e2b5795c89fd786fae898f8224034951b15ce7c6261cd14c82bf1cefe9f682b2e4660812eff2e6fb2c6b310bcd6d76c315275
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51c9c03de423243ea1cf6a64dc9fcf2aa
SHA1ce498a917c22e7f076143a98b21a80d8386183ba
SHA256d1a965f756f9390594d5567b76f4e33aa040946aa1c83f4d981cd90e500a9595
SHA512ed11d8854844c0a470b887a9945306ad3bb9c7d58deff62f6a41ec70a8504dad437a101fe98d33832e320164f945d09599235c1e94bbb1e1a646c711c029e1a1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD566ced83d792b0e326b5d4d430e1db7f8
SHA12ade05989be00824c6b898370dcb79edc6170626
SHA25623718fac39c5cac574b909834f9ee29ed93386b6ad42ee8c52df863d78cede73
SHA51269f08c326f50155758593b587f7fa5ad10466e2e1e6362224ff743f8c0312bac6c3bf30666f8e8d8ba7405a45af87df187346b0e1ece8070fca007efb7562a0c
-
Filesize
990B
MD559c33f6fb00bcf92aca4e666f500de42
SHA110534feb266ebeed357fc6b5863c14b6691a83de
SHA25618080fd7feaab34c5f8ddf71dbd20aa4d0b2fe94f9029b4a093ed7b401d3bd25
SHA512c7a60aa93fba0427f0c03e27b2f654ec7e1392f1fb1191a43de16201b9089787c3c5694a34afb034d6f1f1cfd3be217545ba04531f0e0b72b0edf795c81f7693
-
Filesize
990B
MD5fd74e68e89ccbec81e4bc014a5c419b8
SHA14b1b377eb07f6d17ec6a5b658164f55035040f63
SHA256e0f0bfdbeb552b7ee3984f5911e2c501dba124e4d9dd936d09df6704248b1b54
SHA5122d47404a6e4e61987a82eeae3d7d14c649b61d49f07f2ee376453ecb361ad0dfcfb03df9aa20fe3fb193c136a0bd41c2c312bb3962c9c1b788007bb3c83c88df
-
Filesize
990B
MD5e0394154c8bd9f58c3c483512571bfea
SHA101778e0a11d397c6dfcae6a1f78a1d492caea6bb
SHA2560b1d0b1455d0e6ff8c7c130f8ab17cede4ea14e5bfaca97c8dc561d5fe4dd14d
SHA51256e11be03802cadb8b8235b22a22f9ef4113a68044b263aae8123b7cf8dd5a043f6d0470c7e59cbaa9b2d07eeec108efd899154ccd75c72ee10857786eb95be0
-
Filesize
990B
MD51509ce399dd7b09751691925d1e73102
SHA1360fee534da90f75331be382eb776be42ab26bdb
SHA256f2c1edcd84909bcf60cc994c7740a0c581db08b83df3bdba4d986c453df1a50a
SHA512af4bfb396e79f145329cc19390917660b8f4ee982786b8baf0afb6c94705afdbecdb2169cd767294f9ba4d24133bc6fca7d7d3a7f16fd33238d4d34ac2a0d964
-
Filesize
876B
MD5a825311d7893eed189d1970c862bc731
SHA15fe692be3ba28c4eee5f120827614b4fdfc901a7
SHA256f1ebb94c07b8609db0bbf7ce16d42f20d62887e74f6f0695555cff75316f504a
SHA5127474b86f46226c852fcc13480369e5e622b6198133e9b02635bd2a4f3318d3ccf849e484c07d1eb9d28309e63a9669c3a64ff95f88da925fa4a80bb7baaa0807
-
Filesize
990B
MD533b37482ef4563f95d1430273ea333a8
SHA162f78cafb7f02608cbabf142a205ed9c650e8c39
SHA256b935cbc0d0124037151015466bc029f2fcbc3dff8f18cb6841eb8236e915f59d
SHA512798e7d4aae45df0aeb3b629c9142e607832555ed7472e033219eaad87f2fd4b4545366b8b9fed29816f31087098227126ec2baf7e2c49690fce03694b46be724
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
990B
MD572f3b9fb0cf30d00f3ae3885bbf1f1c9
SHA12f1bc9a884c03201c1a387964098255136f77b7b
SHA256c9b50ad0fa9cea4d441c1d6c3910d2e402c5db8f084ecd63a6d7077df16b090a
SHA5120aeaabd8b4db52ad5891ac2ee361cb6b7e174e8f8116df1ddd7db999638ae3842e5032f3dc00bcdab4f1aef3c0c7e243694853d57e675438fd44730e11135cf5
-
Filesize
990B
MD5fb02aa967c94f71b5ffbbb360122e4a3
SHA111eab1a449bfff87ba2081e7afc60f4c99a78740
SHA25612ad63cb6481d70f804fa92c3bf706a0a083e2b58a76d57f638abbfaa266a133
SHA512dcd38df97110ca57366ee11ceb100f885accb3e455022e8fa683145e48733202c30685cbfb217db330c43bc462475d7b2f5cb91dcebea7e64a395b72c4a188fc
-
Filesize
990B
MD56a134c31bc41c283dc3e2d2430d39027
SHA194ce3029001d4578b3ab4c07e122b991da080d9a
SHA256382e96cddb2bdd7584d1b23221cd3b0cf08e634944600f5253432fce0f7f08fe
SHA51200dd1f8e07bae8c7698ee50fa198b027c61763d48f53d291fb0a9f7b36e64f8f1ec7c8a3bda10c5a66da973b4723e9144497a3f67bfce9a00b259fee5755def9
-
Filesize
990B
MD5bd572cf8012d2affc3e026b53de7f03d
SHA18cdd33e8272b143fe8de23447df9828a7ed2081c
SHA2560493590ce6b167cf0b0058481ee1ea18c43a431379ba28a8f7f726aa9d2e11e8
SHA512f8a9c6c98e6dcd398948fcf1502a5d958cae04fe7c8afafddcd153e84c67c9a88a68be34c3f070b7c32f137e1820f8081d9e1fb574ffba55a9e32c8a7c083bbc
-
Filesize
990B
MD55a9db02ee9891398d534db8f9d11924d
SHA1ea251a3450ae1e35a37ca71a29155c0cc1b455c0
SHA25650d10337755afe07d25f6ebc31c68ffa02febb0e777fe670fcaa7fd367e742d9
SHA512c1632784bce4113028842104b2e87bce513171edf4e0dafb98b346e2bdcbc9577639bc70660206450bf02f00c174c0c86d7ac58699d406f3570811b58393f39d
-
Filesize
990B
MD5ffbf456e65452ee5430b1f83dac63b07
SHA1c10be70d2ae85b5348b8608f2e6e58f00a77b91f
SHA2562e3366e142236f215f4fb5511513d612684eb450d2d3ca389b0087b8b91a103f
SHA5120b604305e84e14ddebb163fc1576741a2a56d45d7702eee1b0fe4a2604c884ff8dcffef9424d985eb34de140faa93fab4d4566877cd9f5e83493b869145bc0be
-
Filesize
229B
MD5d20e87d99d6cc62dfbbf1282f35ad137
SHA19bc49d86a700dbd3c8af5c1f78b171e799361e56
SHA256bc2106909555e55d18af3714f27f27488e464c76c30030ec8b774d04ed0a6cc4
SHA512b7e7184094ef9f5c00716cfa5db8a90b11589e43bf93bebc9e7b5b1e4f8d7c6f32819b02679e039f8cb5d818b499c4bd9793a43ecd717735f6464d322ac346dd
-
Filesize
229B
MD582d94e0acaff6f7bcae9912a813d84a6
SHA128c01441aebd32509750df475a0da551d8f329e7
SHA256ef9232af7a6dc4823ec8f2dfc2f74fdcbcc18b1327d9ba9ae1fa5f46699f54b6
SHA512d5f11d3edab55edf95e5fe39c8456b853ce26e011fbd9d8139d2a964ac1ba38ada2f1b8082f2c9497564512c5314dd925c2f97becaed3b57b7673bf50ad9901f
-
Filesize
229B
MD5cfd75080a3a0c0963ff975b7751cc30c
SHA17f21f2c7a821276e3c9993941b80843e8c715da7
SHA25643de38fee1d322dc5f3302c7c42a985b8eadd7eebe24a968491ca10518112d10
SHA512826c4cd70a94d948f2ad72ebada6de2e7f2fd3304c8e859a4dcafa4ac3c5cfa3458c07d80c4d6162d50de2870a6b8e25982695d84178c2cac6d77f8496a5ee52
-
Filesize
229B
MD57ea7786351066902368946e0dd5a8ec6
SHA14d53f4b3c6f196daf5ef9a4f33f8ec435b486738
SHA25627d32a4ec6cf857d2cc93201eeda118180ea6a96d0cf1be062b45a12bfae0991
SHA512e8f6417800697bd8c59bd9a34b82e8c4cf539d572f3186da28d6bbd0536c02f7b1aca069258caf181b7b53a5112c3f16f78ee38b2744bb3b49d0756e5ee26079
-
Filesize
229B
MD576c51b8569df8807d02d48967a318452
SHA1acfbede0f238b0b15bceb47976099e57a0502acf
SHA256baa915744472086214154034851edf0bcdaac0b71be30ff765e7815c28c4f4f0
SHA51229daca14db6bb976906b5f56cd6de994317a191b07d990ba14b9d60f779b24418c324c235516d799ca4e562d6d7251634644e20570b847cbb4a3e1a0b341a0db
-
Filesize
641B
MD5ee53fb03eec3b521b6b206266cc9e93c
SHA1fa64b18d955cd15d5678d4a262f0fe6457890825
SHA2569df3f239e33de74312d12ba3fe1a9db8863b9b4fdbeba4b3220a7eeafe6ac44e
SHA5123f1e56cd3387e6a2abb112d8b84ff7cd0f14779e6445f1520335a9bf9e354233079a59edd42e05ed1c6e01a4d1db1e6e71b241631ef05f0e2b9186130cf888e6
-
Filesize
641B
MD5ed3eebfe094d7347e4c3c42b83a121c3
SHA120acccb39250bc583741225e1d163a9b0086aa4e
SHA25676342e352545f239b239c53768a6914fb96674afba3e0970d29400729a847ca0
SHA51260db24f98611b82a774e127714b0a1a0210a5353d80a265aba451cf950a2577be95e6ed8ed43b81ad733677727d2abc060442e1ee91b0e9bdcd62b9313868cec
-
Filesize
30KB
MD5978ff3bb41080558f9e4c810559ac424
SHA18895ff7e9d1353c337552555ac40e0ed87e1aaf2
SHA256ea83efc8bd89baefdf3372face8b1e03b39ca5ad97aaa557b35ef991fca0ed29
SHA5127f34fb0cc0941049d9d1675394c1420dfb1c5091692bb973986e2a28a3d2fdac97f7c905a9eeefcfd4590b1b03f4537f2cf64455754becf2d8bbe7550e719dee
-
Filesize
45KB
MD57799d58932fd56474ac20cda860a3d31
SHA1cf8e5ba8361cf7c4b290f27bab3303d63aeba676
SHA2563ae0a85dd30a29c3cad6c0f13ee46c0c0e89488f45de068602ab2355f314666e
SHA512d910eaa85b2f7fea22432d4d591e25df237bc6a8e5d50302aa08a472184b8cf1ca0b0fc1255f3ee375a0fc823885bf3a6750577b9591232552a8178d40aed6cc
-
Filesize
40KB
MD50d1f7c164cee628c825ce20b9667b1ce
SHA1f6925936665701a9b98f2b570b08aca9214d84aa
SHA2560aadfd0e73de74bd15216c9b1df0ef53ceed91bfd49753f6e8cdbff482b0fe04
SHA512807a244696704984cd8c896f241c6fc308956578e146a2cbc859fc40453732a918d0f555740c5f0e264954bff9782fedd96e944a76081f300a711645617b9d3f
-
Filesize
59KB
MD51f29032843938872c983177de4708130
SHA1b566baf1feea3f99cb947983f29debc1c870064b
SHA256835c63e89e8439f5b966ee96104a3812778b9556ea6c4c4ab37809bfbeb0bfd4
SHA51211ad20c975a359452733980ffa428157fcf5057fe1aff441cc296ba8dceb5d5df6f241c538de50f503967c0d86e482be5c4e932ddc70bb8f12e5a87f526303ba
-
Filesize
73KB
MD59fb12e11dcb428841466e7d94b2090c9
SHA1098b9318bb8c626a8fb72382255ccdf448b1c35b
SHA25618e45ed556a04a031f5383683411560698f05de1314514486e1b3a16edcf53f2
SHA5122d9d43e9ea93abf3f2a6087352634cab0201fee152d5cd93e55da1ef1fa0118a946f39efd6efb9f3b4735f9882657c992902de505891425c91d433363948e1bc
-
Filesize
990B
MD5932ec18459c7d4e53e5fc3a9641ee998
SHA150425c2986f5a5cf99e71282fb84269fd1460f9f
SHA25615e59f38a554a544c0d86ae35eedf227fb43723eefe428c44003be94e3b04ad9
SHA512266beca87532375929ac6026b72d23f69f94d513aad7ca7ba4301f992c037b12a7a13024b99bb5addf67484459787086130c7bd3d728ae0fddb14d8e55674859
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\EB0KZ1Y4\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WCATT3E5\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WCATT3E5\embed[2].js
Filesize66KB
MD5a58451d3e6fbe9efc9e07683f45e6ddc
SHA1eb8975653e30dd0e72620268780ad0ee8c69fb7f
SHA256ed6638894dea99b332480b83eaa3fe1a4a4cf51d1985cf44ab9baeb28685ef54
SHA512b6a43b84d3efe8b3c84ea6cf529fe995cd20730fecc96516ec416e77f69d1244c38a0ff272bec72bb2e7020125c64f65320ac61065f6e2d5c4d875d5c87df349
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WUBCGJ0A\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZOGPI1N2\base[1].js
Filesize2.3MB
MD517a10142895c6a363ba136ac006a4820
SHA1de51c34792249b9eaa8528607dfbcf8be4c9d420
SHA2568e35664ab4258ee9241565c530d5643ceda21a4d378eea70d3d55e40abeac376
SHA5121670197191c76954dfb19386beea94399dd3cf5cb50a7beb23c0b5ab35aaa33c02d9fcd320b03e6e54578dd921e82ab4d3774a0af3f6cff702e6afbc87cfa270
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZOGPI1N2\www-embed-player[1].js
Filesize328KB
MD5f1bba28df89db5ae5aeb200874be7960
SHA1693cb2caa3149a71891a71e8ee4661b7e0b7c953
SHA2565986f6d4c2f53e79f5b0fb625f68dc573370755cfbaafa7426a4378b8f0478b5
SHA512069af34d9649eb5e81bfc66613b761f97b3cdb3e13a79189ee83f0e18ed935b16794a57ec18340b6400c5611f27fe43bc6770411bf62294ff9896d5a99ceb5ee
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZOGPI1N2\www-player[1].css
Filesize378KB
MD5b5728d6046b8b1e06fcd4516d9538013
SHA111c4ba6fabf067699c3466bf7067aa6c26bf8c34
SHA25685b09e486828aaeee2aa44babe113e29db15009297959e9105342a762186646c
SHA512fd6653bf535b651152d353d655bb9cfd4fadf7bd95815eab9314e966306583e0f7f1f3559088c89d24b31a8aaf3a95af74ad1f5e8eb553892fd690ac81e8aff8
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b