Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
06/09/2024, 16:44
Static task
static1
Behavioral task
behavioral1
Sample
cffe289b404a4a99f975cf19989e1f76_JaffaCakes118.html
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
cffe289b404a4a99f975cf19989e1f76_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
cffe289b404a4a99f975cf19989e1f76_JaffaCakes118.html
-
Size
175KB
-
MD5
cffe289b404a4a99f975cf19989e1f76
-
SHA1
8c8b2aefc0fbc12c20674feaaac6cccf217bfdcf
-
SHA256
8ecee1986449efba748fcf89f518f48f8944355ab6795847ca406bdfa5323265
-
SHA512
dd6b88cc4d5f4678e968d1c9e454cd4d0c89a0a051d41e84b20275f0dea3cf4bbd8b5216be50811d719a909938ffdab217af045d09a014070e8375cb485d445b
-
SSDEEP
1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3pGNkFhYfBCJiZG+aeTH+WK/Lf1/hpnVSV:S9CT3p/F0BCJiRB
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "33638" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "15170" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "23067" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "24425" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "25741" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "7534" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "15078" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "7917" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "15176" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "23067" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "15170" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "23073" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "23073" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "16610" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "15176" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "15088" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000d854e951ecdca4792ad3aea80f0355100000000020000000000106600000001000020000000d673e2bcc92b0470f5cf96368ea666c7092121bf78270311512af9cdca3d9d9d000000000e8000000002000020000000d53e7bcc4a10eb2ed7c8cc9f233cbf4c90df0779d9c4ccc126024b182573821e9000000090d0bf4a0cdd35677791de7f716e795445b59038ee8e378b24cb965f074d0ec8cc6566b7de8df6ad56f181cdd83b434be7e85079bfcdf846250df0a47cc45a4115b5aa7fd14851cbd338bc7987d806377012a8894e5a7029c7e027932648c626a18e1caac7b03483c4c61f0776551314543a541e0112e7ed83a46d64127161eb76d4266db6321e9670adb804ab221d5c4000000084b1e6cc70eb075df19e8e7b944ee68adef409033efa596e8ae693b44a450b3c8448f4e6d5ff04bd7288ca7c1adfd18b2a83ca0d449d167ce5d4448ae00b4154 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "15170" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "7923" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 2053dc517c00db01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "22985" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "24513" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "14960" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "14966" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "15176" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "7917" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "7923" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "33638" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "25741" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "15088" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "23067" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "22985" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "16610" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "7534" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 496 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 496 iexplore.exe 496 iexplore.exe 2296 IEXPLORE.EXE 2296 IEXPLORE.EXE 2296 IEXPLORE.EXE 2296 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 496 wrote to memory of 2296 496 iexplore.exe 30 PID 496 wrote to memory of 2296 496 iexplore.exe 30 PID 496 wrote to memory of 2296 496 iexplore.exe 30 PID 496 wrote to memory of 2296 496 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\cffe289b404a4a99f975cf19989e1f76_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:496 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:496 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2296
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
854B
MD5e935bc5762068caf3e24a2683b1b8a88
SHA182b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD55977193ddae3e0e34663c6d496b93054
SHA1bb77784cfab81c8663255d69bc84e45d07bea2bb
SHA2566a4848dcddf06df423a80f501d8dc4d37028dae352624cc687342126961921ef
SHA5126a95f17349bd5c67a0c86f149e3eb8863686cf58cd20608a15bc9e79c419c3caa47488c52d37ce7a21a6a0e3239eab653e3b48ac1d8dce38bff29524f345febe
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4FA45AE1010E09657982D8D28B3BD38E_2E1554F9937BF8D3743D83D919742174
Filesize471B
MD599106545cd1770c41a67b94c7864a559
SHA199ee82bd5747d638411383dd8115895c2c402275
SHA256cceb47b4f1465aae92d5b8f4f32d48f99343e5183d2e6461d3cc56c7028651a5
SHA5121dc6cd7f0f79b613ad5693dc57a679ae507e2e6026068c00407f441752b28dd6498e4daa75019f917bd4c8df743ee1f463c5768602497586fdb67717ec5bc68b
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD5a148bb5e87e9dd7324398badb559140e
SHA1581a00210e6f48ecc8344854dd1e8d7911250056
SHA2569847223a7d16010833e8da720da5eeab0ec6fa2d9722cf269d6e4289451c3067
SHA5124e64b261f237f08b5c0a39ad913c51d908f7aee45bf971dee8f7dc9b49751ca2848aec931a90ac2cda9984d3e113bac0da177ca3703fb0c148ba1434e9cdcd95
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD5bdacb8de7209340b17eedd3ca47e19cf
SHA1697606c4def2f7d54addf656c3f4c2336250d8fc
SHA256a468e45221e7aa1578a3d87d73a28b2a93171e5dec29bb2ca1878a6a402d88da
SHA51286bfb4d6a3ce607d0eb2a3395b4d3dbe1cebce4266fa7f4aa747aceb8258c028aa2c69b5e06f0acaa57c6ef7b773c1710fcac8f9b56490ef309a797db2f1114c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4FA45AE1010E09657982D8D28B3BD38E_2E1554F9937BF8D3743D83D919742174
Filesize406B
MD59388bce2dea3a2fa766636aa679636fd
SHA1af6c9d52946cb7d133de106fb6d957a2f06911cc
SHA256bf8583642d40d8afb8573323fb4024b30521f73a09c2a75274c4fe2dffd32c3c
SHA512add4e1fdf1eb06ff321283aa3b6932b2267bbe18180baf9a1ee845deb45798a99ca49217fb28ba2515815fee67454d23f960b5042c25ccf583debb75399f17d2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD528aa0d6cf4bbe9781293c818a1ea29c3
SHA17c5113295bfcd8e6f694f721ad3ab6bf9b7e0b5e
SHA25606c8c45c4cc6fa1afac0288cc46c290fb16b792924c86eb34d66f4850bf45680
SHA5123b76787b4bc1a6d23c61a0884baa00c42a275c708cc64336ac4b23953c933efbe8a7d3d7b02d57e08277cec7b098a293f9eebf0ddcd78affa5fb030e9f18b0f7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c2923cec8e01475905e63eb5c49ea4ac
SHA17822c5b4aac6988bb3836f16518142355b828e98
SHA256ec11ea0e4792a849b794452f79d74ff556fe1242202e0e4cd64d331bcba8a10d
SHA512856669732c6fed520b42f48093ab7aa84eda5146b4cdd385cdea705e6f972b34623c9991664e386c1519ef616d62a5b3ee1aa7880e63f1740e8e9376556f1588
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51cae59aec7afeb786b1cf4db2709cf92
SHA1b6a51b95e2bc0db565130625552b99eb27c4744d
SHA2563f4fcef1639d4872bebb2970b773b7bf6b29edb822bdb3e5e459c4e38afd84a0
SHA512fc93ddb44239bc4f9a3bd9257d35e0d13f43912fdb36514cd74ec6d0e684baebc1b907d1075dce9d322de5fe996305a5360f81035f9d14f73f10532a1fc9db19
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f1280d6b1deb4d33ffa882768bd8a94d
SHA1010a83de957905faf7f879bfd78842e954a2b79f
SHA256a044cf8a0da7f91725967dd7f9ad430e5e36851b7b1e40a0c5a1239c1b0b61e5
SHA512fb4f90dba0776c511986bc7d40435d88fc2deb742eb4f3d020da47efeb9561eb8a09aee709dbc05b243e010be756c5bace0067bae9440e8fb0f26dd4f4929519
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5625f2f633d1546405aa6e688c5b3aabc
SHA19f02419280d503615135d816ac3fa2084bad49f2
SHA2568ec04f2c764a350c61ae585814bea5df3f59ceffd87e76974fbb8f7d2fc0b4bc
SHA512d2dcadbf3c054a92b83298169299e726c4839bf2a87de142ac716172b9d8a0061cc700857ada31e7eff5eaa37bf63318c2d3578fb682198aa22f32d91da661a9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cb08a3bc65f7ab1cb3cb86bab6f299e7
SHA19f56afc90959ffa35eaafe4501391a8a85baa992
SHA2568f4bc7826c67493562629e66c5b8a9df34cff0b171b701c95b759f0c39e18d81
SHA5124664747bba2b197f74af0c013c88804d95ac2c29c2c6068599ef18220e454e3b2b8b1d142c717a0446daabe62daf6d34c044cded0aceacd2a797b326aa613418
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dd95cf50b25c02dfdda5f8cf5565d219
SHA1ab4e1efb47900c468f72cc7b828bcdd0d66a56d0
SHA2561416cdd589feaec1075aba45ea5ea879fae428429c0be796ca1534a1c511643c
SHA5120b9c01b5b1694cdc1a9bad2f51ad99b95e9d2f794d02d8c347f47d5379ccc19c855161e75f22ddb83e09ec8e4c33e12f9d69d99a655c58990dfd1277840b6c59
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b70087394d31f35981337b785447b1d
SHA129b4546f66f55ac1deb415db37656a0d6ea8c1d4
SHA2560cd36ae3a1b254f4ffd4c8ee2924ba681409adf7738901d9421613ce6ca42227
SHA512439ce882a27a55030ea1fe583f7f35c98feb4fc5985c052010949621c62bd11445da014db1a7d8e143f47d98de14e64047f821a86168c769ee8f78e4c5469086
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50e67b984ae1d89d77f642df234f1cd05
SHA1751691f16cdae97b316682134ad598c5bc6d59a4
SHA256886eabe00900f9281bd049594a7bf27f4988f6f569baabcca2da614c43202076
SHA51235d217425144789b8f948a6c27dabbb62ed9b9d0ab5fe89d20d8397bea7266eb4166e4a3d1e5b902b3f1c2be1f6a193f9cd2292974f42f69b1983f2a8503f5a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57466d662255e6f50e064e739fa45fef8
SHA103f4a7def9e8f1d2802c389f3868fa6ca478829c
SHA256e9b178586c11ecdec129867ceb39b7bb0f0f71ca6ade6414504ecc8a2acd2307
SHA51200d9061887f751c9989358424e0c96770b275f278236ff8b23bf351563624218d88fbb3e56dc78c3d9bb4d464cada4f4b39aadfea368a8cf4cedd6dc5cc43dd0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ff532c8d11fca62c7b15189fe2b06d30
SHA1393b5189b29d36ea27ff53d3546b78a0ec0c0e52
SHA2566cd2db62b4845eb7f6cd7e78e1698ccb99808b914079a852033228fecf5cfc59
SHA512fea942a7690fc78347f9b8d8f6b1cf3bc7e7c9f64b8d68717e30276f1a1a3796685f65e0ce290e27bad1751f06f1bb23e63af47504243e13fc11136ad6f5f941
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51efaf0f97ed92de3f18ffe64eb5da280
SHA117bb27626bb25d5ec5fa61299111b6bb46950616
SHA256f9e6c102f4aa079bf036b4d969bb14017921e1d44dc10039730b118473283431
SHA512a6036a22285e9bd5e78adfdf7bd9a438b007529c8c2dccb1f38b91fbd25cd15b9b7a68f76b50a74f85e34c86e0031f5132fbe27650231afd7cf421794d0074a9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5932a3136ac189b6a07c81c11009fd01d
SHA1a7501bcc29ffdd70a18768b527c22226af09f784
SHA25636b00672a06879bb0e55083efb3d3944dda0a502cba509bdd8bd246b46ea92ba
SHA512ee65395cd462cf34f83c0c40cc06d3129c0b129920067e045a1c22072d723dd00f9e8456d1ad3729f0e41ff21f9f5748c8ad46ba68b833c7d3ed22f96131362a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d9572312d5973037cb1c1c28c5e29a7a
SHA17a4005e77a748df30063074ae5cf83c597078b16
SHA2563a8225340c9bf83dcac52b1492a997c8ec80a9ec4d2eec51f6ae1da873554578
SHA512af529754a87917600e0f12d0112f49be1f9018d81e0b10225a9a9bca217c87c800a8c371f38867cd5b46c18eaf2d7364716123cfd646ca8e04930a21f551d00e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ea30e29c14fb672b4e7d571e28e40ead
SHA1832cdca84dd8b037468c3f4e170a5769bce977e0
SHA25675c1297eaf79565144f5134658c345feb0fe1c7d4332405eec66e5fb0f939a16
SHA5124b5e486a4f003c88794216a152f22603428647d3e3cd9ad05e560b3db7e6d45312f3ee7bed8b75c13053a2e934b7bbbcd9144f21274317b83c73c72c246ed5f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5820b8f48e78f1460bbaeb037923da8fa
SHA13b86ad6dd677e1d42bce419c4b987bed511b8ef7
SHA2563df7b89da0435d2692a00e2b483f018cd2c7f5e29ed7968159f933ca421487b9
SHA5126f696908dfafb58f4cfa6cca2e5eb80d70efc033f831ef46c261ce951ff145ab26b3cb2b4b3ba353c60c765c75e75b8513d33a495552a3470ed05ce03cfddf1c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a1e67edefd6fbb2c1306bde0389dd150
SHA13bb3d640a9226f778b91822ac8508da04dbcace4
SHA256dd75f07982e0d9662f64d7f5cfd85a25eceafdfb6459a443fe8faec09c26398b
SHA512230b896b42d21cf10461a4059104721c052805eb4cdd1799cabdf386b3171d33df539aa35764eecf59ee5a577187dc78cc6bfb886f68aab200837b46894e2354
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50278b3116f2710d2e0ae2b244c385823
SHA100333dba5cd958f5d121cad2fa83cf9ae7137e71
SHA2561fcdb4af5e48ae112e3a3224c442d60d1fa0d86ffbc2996805c335aa22a5172e
SHA512b20fc6ee052bfd8e3c542f456e7f1692cfd86efab5efbc99ad4d74a9969c6d5abbd9249cd5c60ac087b332399104fb0746fe810058d2b22b9ea1f6495a77ba4e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51e793828164fb2992b7a20c5ba9ee5bd
SHA17a88e2117287d9d8151f767dbe4c5f46843885cd
SHA256b161351c75368036723dfc231f6d74cc3c921da0026e48688f4b5317779d870d
SHA5121fb37f94cdefb195e0dfbb1be5ddff909a502bd78b7f31ed96e074a56c46bb5e104a5893b41d7f9fc743cf28a409e722df0e2b93288e054fd47b553f523a673d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b7be5a4c53389f50fdcc96009c3fe64b
SHA197407c5a1a95eb43838929f570b698b4a3e510b8
SHA25689e066ec7f6a9aa0c8a8800d8d62e43908093673d5d02fc573e3312488f2c063
SHA5127b3c577f3ff2ae6eed4803eb9fb99b2bb81cad039be58b17f98fababc05511ad97966d38bdc389a2d90e784a32a6d4116b9c93487de069f457077d90ccd51349
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD514eb3c6e7af6b683b2f6f0f47cbeaf43
SHA170f6583790ee3c6d9f46c59fc56faf01e1798f61
SHA256561953aa6b77cf8fe7eb0ba79884362a983401f968ce4245dbdec702f185d576
SHA51237efc84c1534b3a97a20a20e22842caad93c2e7eecb51da4fa17bd263e6c9336945b58c4d9d7ad3664909c6e46aae36152028b7079e0233b7b33aab35db33f65
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
228B
MD5acf6572a6ddfde3bebda2100744471bb
SHA1a01d19b9b704b2bad7a4b741d99e32a697261b94
SHA2569ee645b19d9482fd8a5cb9697491e20baf13a0bc4d265b84bb497b620cdeb447
SHA512234245ff140472942a212c97ba1e8d63b828e49a7b71e70e6858dad02ec90ed12a591c93113179aa190487999e056d881d56928f7f110077af82e23b909d4bbf
-
Filesize
228B
MD5d0396b32a50a7b70b66c4b21159ab873
SHA19bb6cabc1180f1a456b9b9ad1a1385c8bea4662d
SHA256c347b1d52ff8302a6752ee15ed9167988319df499d474c3f75b171e9684fc8ae
SHA5127c7a73b9de73c729b0e19e157b0c259c552e2e64b3b1d5066461dc9ebd839225051b1c1cdd2b82dc985ee7ba3f781a0c0e01bb1e6068a141a48a121e72126e00
-
Filesize
228B
MD5d6d3dc306bb123dbc12a49a7a7824a08
SHA16e8e490c880ef29dedddb6c95e8a191b9d45d80a
SHA256a98981f3f7c0fd28bc09dbcc34371ca284027854b49bcb90e7d2bca2ff78dcef
SHA512ea6f9cc160311b898d31fe361dfa03823692096c366cc48fe1ceec31d7413e3dd96e83805697ac4cdf31be59c14050851e571bbd8fda5f89dbafcc5d49e4eefd
-
Filesize
228B
MD5c0538e3206ee7c009309aec10f2be6aa
SHA1cca08a2217fdb33c775db0cef2cd9b23a5d1f127
SHA256546837cc1ff5afd1e19f3e7e1c020b9979d5bc4ef3c6b4633526342e2cc94999
SHA51280abf21a6c6b6223988024b1d41826c77e72b68e39eba77e0246d07efbc324163a15a703c49947918a32a565247d2abfd90340b70ac1ab4bbbfc296d0bbc2cfa
-
Filesize
228B
MD5c6d56e1339a1553f89d962b8b6ed2f6c
SHA10f2a9acc892ae5bba98898edf0d57781428503d7
SHA25647b202a5f6272a3c43fb9c0bcd91c912268f0e732acfd606fbe8494adf7ff39e
SHA512821c8b9b08f361e7771ad80636f45a3c6577a027abcfc1ebffaae2250e8c4d79552c1b4b9ec88d3b089b86a2a830a7150f182c7e10170dd1aab8dbe291b4cdcb
-
Filesize
12KB
MD5d28707f7e76aa3d5bab7dfb188e29b21
SHA1177d80c54a74a788eccc46fbe2eb05b38214202c
SHA256f3af61d0861f167a505eb5633a3e1698b6021aac2a350886e3be6aa64700e74b
SHA5126a72c25d33fa71dd677e893857724eeb74872c231f5524abb436df43a7d80c68e460fc895623af1b7d0d97b61d6a73b604d4bfcf1a0f3113bb1957ac43740dc7
-
Filesize
22KB
MD5c11807fd4b7ecabbd6d8fcbf8cd0e353
SHA16e7ee20e5a99028767dc2a6ba664eac0dd69b70b
SHA2567329fbe78b217b0152d885b7d0890a4ad9f5d49cc7f8f36dedfb293cca0e906e
SHA5125700415cc4a31906f828af96d2b23486178e33a7c498ca451c921613fdc772ed6650bdf243b5147c4480ab4dbe5383fe1909752bfff8b32af21c2172f6b2c4f1
-
Filesize
810B
MD5c37e5210fb19ed971f450d438eb4c1be
SHA1900071ee60c5cb2be79480c320dcf244523ea2f3
SHA256385af0bfd2c84d17a4ae63d39516ad1f879540de9bc8c04be91f083818773af5
SHA512b7b87d92dff69608d9a2db6cb270f897fbeb21d7a3f6132a303293c043690778251281accd42dcaacddf7fcda3d27b18d634ce540a1985445198d4095a1800a3
-
Filesize
35KB
MD5ed0f7e576ade0dac2b28dea64e9babb6
SHA1acc7d1a6822dfad7c5304e7a00451587b77554c0
SHA2560c406364aec083103aaeba2c355060478b1cae23678da02aa4854e0e863cb129
SHA512630968224df80357f3586631bd66192f099be4ce676de5a7fd9c4e2bb734966e0371890cd9661836cb085b8e61018ca40314964df7bdf186adeb99a397c5c7c9
-
Filesize
51KB
MD505499c6970e6bed4241f1eff8663e7d2
SHA12ec166121137e6406e344eb5b3ce04835c47b703
SHA25662b4520d9d3d7cb171671de6966dd2f6a6973197d9d100e8eb12532f9ee28617
SHA5123f63a893b5621c79ba5828b8886986309428cbead513148070fcbad113a2c75d3d5a9fc2002c846aad15d5b074f0f695fe7ddd6b50af799802d61761bc51aec6
-
Filesize
810B
MD5ee16228f7f3a1ade82306ae42e936060
SHA139607978e5e5e67dcca4f255b6e6af3bd3bbc0a4
SHA2566d8bba60332197dbf1d4b3bf2c27d9da9afad5067f8f0dfd9b868f9ea3df85a6
SHA5123cda48c0ff9f526297cb62427d7c4e4c24d619b077dee36a7180a2b97c0ce62ad98e01f9b989d3dd6fe654aab376a978501523e7c742cf6ef16d0c3159f778ca
-
Filesize
985B
MD5ad9c69d2da072e2bef8efb7c759616aa
SHA17f3f66a470e5355cd3c4a10dc04b3396ae04f5e9
SHA256348b47e2d3414a9b6d4062d918b5a6848b67b8c897d8955d439cd8720ef3a30e
SHA51234a1e42d2a65f37f086644b93b060d47e8cc3fa11fce51704bf57a28a008b0a5e23510d9226ca2f161e0c7e457f0a1f5b1c24ba7362262b51974e7b69474b211
-
Filesize
985B
MD5eaed891417f54695e9b27fba3f536cf7
SHA16a398c1859bf7bfa422eaf0cc7c716b52ccb5142
SHA256a51fdfa32cb7a505402df0cc98e79400d313063558f8cc52279edc6f3f2ff214
SHA512ec5b8951cfde794b215b0b714835ef03d12afd64e3b5d0f317e3a43f9a5a54fb4669bd5153cf530c17cbce7d8f2cc01928810d1688662a0561a0a60c283c809d
-
Filesize
985B
MD57277f04bf789af2b9e6385db8a7386b7
SHA15dc602a62200810326463eb3419a64489f9c87f5
SHA25675da69854c8acedf096a28d2aabf03188b3f8d0fef56408e5c9a476794d8ebe5
SHA512f14eb5f6a03dfadb1c6e9e9607beb82fedb8694e1e2a272bed3ba14051347f67db22e89bb72da1cbdf6177c6a494d71a1b890b44bb4fc8d2b2427dade43629e6
-
Filesize
1KB
MD55129675f7f79ba660b7dd0f3166c78d2
SHA1db0ba3474b61dda91a45519ac2d28a2bc114c23f
SHA256f2b9672dcdacbfd471c23870909e848a3a6f90a52c6180f74a6393631e5cf0f3
SHA51218fe86d65fb0bd1817aba915bf1c279ec8b039c5078267f214e21bfd4deba8ea4c64a9f976b66e04ccda4c42f9df5896a0251b09fc49c218c6f576b7ee626d19
-
Filesize
985B
MD5308b1bd6817c566970edc010621a0a2c
SHA13b82ba014d52a5cbe57fcb94eb541bd305c4e326
SHA25657a55738c920d06b0479fbe1021f37f37166e6b7c68d92807214ea00f02592fa
SHA51285ceac68c96be336e4e99dba310e0b073e89cc9bf863586f27664016039dcc42df571ccb3a9c561e1422573f330631ece92ea7081f5ec726a5440113811659a7
-
Filesize
985B
MD5c4699aaba5abeb53d13e3aabf07ae86c
SHA1f45d5059c0df686afb392198b9457cd575afacc5
SHA256f68270826c5d3efe4d8ca23ab7e620dc89d57725a5a8591a1ba59f09f2b21704
SHA512514e5055fadd03ed1adf6e3edaae1acefe68239f8d54f219b2010c64e2df674e22676320ce6cb4c789025950d3105121592a062ea64a88a51f7ba031a79dcff5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4RXRX1VH\base[1].js
Filesize2.3MB
MD517a10142895c6a363ba136ac006a4820
SHA1de51c34792249b9eaa8528607dfbcf8be4c9d420
SHA2568e35664ab4258ee9241565c530d5643ceda21a4d378eea70d3d55e40abeac376
SHA5121670197191c76954dfb19386beea94399dd3cf5cb50a7beb23c0b5ab35aaa33c02d9fcd320b03e6e54578dd921e82ab4d3774a0af3f6cff702e6afbc87cfa270
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4RXRX1VH\www-embed-player[1].js
Filesize328KB
MD5f1bba28df89db5ae5aeb200874be7960
SHA1693cb2caa3149a71891a71e8ee4661b7e0b7c953
SHA2565986f6d4c2f53e79f5b0fb625f68dc573370755cfbaafa7426a4378b8f0478b5
SHA512069af34d9649eb5e81bfc66613b761f97b3cdb3e13a79189ee83f0e18ed935b16794a57ec18340b6400c5611f27fe43bc6770411bf62294ff9896d5a99ceb5ee
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\84EXSCRK\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OX8Z8GR5\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OX8Z8GR5\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OX8Z8GR5\embed[2].js
Filesize66KB
MD5a58451d3e6fbe9efc9e07683f45e6ddc
SHA1eb8975653e30dd0e72620268780ad0ee8c69fb7f
SHA256ed6638894dea99b332480b83eaa3fe1a4a4cf51d1985cf44ab9baeb28685ef54
SHA512b6a43b84d3efe8b3c84ea6cf529fe995cd20730fecc96516ec416e77f69d1244c38a0ff272bec72bb2e7020125c64f65320ac61065f6e2d5c4d875d5c87df349
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b