Analysis
-
max time kernel
130s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
19-09-2024 06:34
Static task
static1
Behavioral task
behavioral1
Sample
eac4d972e2dd380e7c981befe92a9027_JaffaCakes118.html
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
eac4d972e2dd380e7c981befe92a9027_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
eac4d972e2dd380e7c981befe92a9027_JaffaCakes118.html
-
Size
78KB
-
MD5
eac4d972e2dd380e7c981befe92a9027
-
SHA1
fcb5c5919790832a998db4309e187f39fb7669c9
-
SHA256
8d0995732cb1fe28ecfa754feba7c2ca5d905f7c411a2d2b2387394c05913dce
-
SHA512
1ad8d92c6b9a02c20e5aa46154a6613f988448b9803a285eb22c48e683cb7391df5e8f97b5cf36b07cecd07aee987d3daf470c7a1f2d794df46bb32341b648e4
-
SSDEEP
1536:VZjpAxXfVBBLCEcH3DIu4uog4/eN3ehN2VG/i5EF:VwXfVBBeT3DIdhN2VG/L
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "325" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "325" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "12557" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "12557" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "432889564" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "331" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "233" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "407" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000000d854e951ecdca4792ad3aea80f0355100000000020000000000106600000001000020000000ecafb9cf546815cbd59b64327c6f0db4475b9e841e20c34a24edaf67f30102dc000000000e800000000200002000000079dc415c4573c556dc02ce5f9c2673fdd76c0c481e568c52947edcb8b18975e320000000f207d859e3e8554e4fb4d092db958972ba3668b163af6d6d0a180b20090d15b54000000037c384dc69ad52e9dc1b97ecd6d90de3b77cf52767a60e565a35afa4f3c116667e37da1fdd74ccf9772bf2ad21bf53490520a45db30d4f3b2a14733b25681263 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 30a8092e5e0adb01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "12557" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "331" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{49B526E1-7651-11EF-9E0F-4E18907FF899} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "121" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "233" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "325" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "331" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "121" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3434294380-2554721341-1919518612-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2520 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2520 iexplore.exe 2520 iexplore.exe 3068 IEXPLORE.EXE 3068 IEXPLORE.EXE 3068 IEXPLORE.EXE 3068 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2520 wrote to memory of 3068 2520 iexplore.exe 30 PID 2520 wrote to memory of 3068 2520 iexplore.exe 30 PID 2520 wrote to memory of 3068 2520 iexplore.exe 30 PID 2520 wrote to memory of 3068 2520 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\eac4d972e2dd380e7c981befe92a9027_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2520 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2520 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3068
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
854B
MD5e935bc5762068caf3e24a2683b1b8a88
SHA182b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD5ba9164eb7fff24bb8b02834a1ebe84ab
SHA1d96530a6510fbf8da500a0b5edb4fa5366931460
SHA25623aaaaf54e62dddcca4a36855a83dc28a070c814f87e251ae0b68e36f1a555c1
SHA512ecbce18b9d029f6595165bbc1825c2709e689bc96e73a8fe2d20bcdf85813259ac138737679f17c3df67b8f155106c5c0655c0ed7daeb12030081c133cae2096
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04
Filesize471B
MD50c4605820af76551d339ae023dfd5641
SHA13bfa895b8805a17110fc0a72dd16ec2d6dd20831
SHA2561f657bf220a7d4be8b5dda7f57a5da295d0c841907478f8acc4e5b56c4fadefe
SHA512b858badbdd68664a5e152e6028bc36ecd9466d146295f9447e2b8081c64a82a73ef2e0e88ad1b862c7c9411822b3b19c4e1a9af4630937694e3bd81ed4a38bb1
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD589da7f0469a5767e5faa6382062a6182
SHA17574e169a8c61fa427ee27a19ae5155221b3bbda
SHA2568f75b13e2a45c89c1b01f9b68c3210a4b40b179dbf4beb80cc14d599252ba2d9
SHA51294dd58943ea7ea8388a42db399f0576243cfa4945e2871cb029f64e635870d181a40b129f9a6191bf737aef94e4c2ec83189c9cbf3b8ba39062f45f400647cf8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD5c75c39a60f408e1229876c31bb9901dc
SHA10a52642c68881bb0e4fdf7b25b782d9ac928bf22
SHA256a1884ef356b30c8f60fe915f4ab2da2ac11085dfa44f20251ff4ae64941a0515
SHA51215aca9902f58fd3bb4e10797bae4b44e552f8ab3582bd04fde221823b607c7b3122a8289ec175dd8deacaab8491bf31c42cacf5f7bb481b6c10332fb20b85e39
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5819fc847939fd10e24793ee2647db793
SHA1b7947f41ef580677cea71ad07451396b3af2ed3c
SHA256971f1f6aefa45ad92a83b4239dea542887dd86e5f949c81f8b36fdb48df784a7
SHA5122e91475e0d4cf029f591be7fd815f7bcd5e4fe7149421b13046e99197b860578a3a2a7b8c611c37769dca3b47d3e203909e8ca9b5863f49ee9dedc4fb831082e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5defc125364176acc8e556477a59516a6
SHA11f49cf25444b0f06bb2eaa3636730feffe23c7c7
SHA256a57bf98a937468d8cc05beefe7eff2f45d1bc9a9f95385087b46395c0d5888ad
SHA5126a424ef63f9ddfe561344d86eacc8325f0f7a96ab12a2b6a193e8722f9601ce1d322b62fdbfab755e6f5af71d4d9c104c558da9d157ac78debe6a765d231c583
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51055bfdc47f46ec12e2d64c0acc5c346
SHA111266156b1b13391cab1db072e59d7e390115fe1
SHA2560bef65a8389331a40d968835b8bf1d47fc387ac1b8bd0b150314b76179677a1b
SHA512bf185e51d5fb38bdfa9e250b6a2330e37551956a1164a8d79304e9f50106705ced39a2e82090dc15142d5f406b00532b53ccd82c57cd44b73ca42184df89e89b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a6c0292c316dd32b2f7829aeb548b061
SHA1dc69db8702a942a5f80514138b8e42d6f097b10e
SHA2562ab19f529a0261db6ac4d389cdcec71d9a650341e1e49106b3aaf2fd81342510
SHA512228741fc0dc6000e71afc3eab598563f09699dca660e98dd6f2d3afc11ce98fa1f5206552120a5d6be3ac4d239a2840665d60a2be365965fc9d60463f7325145
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5639e771255d06e69e5d64e91dd30128f
SHA189dc5c16eebac41256c6107dafe71966d64d71d8
SHA2563aaf7cee7678bb24fd5b065f83589ad132876d95361264fb3680266f30beb44e
SHA5129a5f3c1cb14b5c33c9a854759449c9f87b419f0dbd755c6374142f36255238326d2d74e1973b8acfe5297b3620acf7029a00c196be552e28d96092c2e45da3e7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5498b327aff93f60a10cff17d3480a427
SHA1cd897dfd6778b8ed32863f63f1944b655fd3b251
SHA25606431c50ebe3e9bdc75aa7979a9dc7bc329782cfe0ad30ab6ee6210b78c1ed72
SHA5125f2eaec9471516225ea293bf707c4917c617be0e3833cb5cdc6ecdbfb0669e2d2a38bea01e5a9c46663a345279bc2d226c76b7d9ea2384b2490f69826872d3e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56a5999352c55efb3379ed7dbd00962a2
SHA1b16d4e2ac088179e8959b2abef7f4b8d696a5ed7
SHA256468172e71cf56ee2967c10353aabc6bffad37e6855be1d161b5758ac9316aa11
SHA5127e21a3b4991a92fddd62547918de7f2292dffb40c00f5a7e4e23ef62cef0f988f4fbbc0a426eadd8627fe81b5637534e76f6d8ddf27b3562ab8be7f8a48a1375
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56f3ea7e7c87e81571028c884259996b6
SHA15ade8677d8bc304f65535585cea76b180c159429
SHA2562acf869209aa9ba0a828c4671079d19470e26aa44567837c85988f765459031f
SHA512ef3f078c88e522258de7de51723bfa9ee28f82cdf42c678778a80ad0fe57c58a55a9d6136788cf3fe9e27680563973998b0983d1939cff69451151e7c2f901f2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD563a0bf84d27a474c6e9a1fd146b37e06
SHA1fde637659c8cb545e3af475cb71d32baea3d01c6
SHA256bd4d83f09f2a4333e3a670fd369486a512cf42413d855f4dd83051d793911e16
SHA5120e32ca7795181aedd02d62aa49bded1133fa911bb91a548a775077ac99c7720bcfd935d95aef58064fead0cdce2d306e4a95fa7f8994e65ec4916712ddaf30d2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c1b33ce175d6301fb52fa85d1e483305
SHA15b84c6259710c773f8025c99b5f8271cc6b73022
SHA2565b4ac838adda11d2405f77ccb8813a7d5f2e81dd745634922e97eb641e77118a
SHA512fc19fe020896d898b5a5ec06fab0527ce81380d7b12f6343f219e6cf7dfc4266d3e84ef692b4313ef860b90c172864179cc8a08fd84fc09c0d7e65f996a5e47e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5399ca19bced35a0f4b64a3c32525af54
SHA17e3f222f964ae8aae16125fd885b1ac0bc409ce5
SHA2560ab6a8f311d16f5899a4a8443345300ad507f0ec81348725af1772bd8746a36e
SHA5126a99bb2594244a27093dd9674c8c88ac2f8d8ad3cf8b808a88adcc74362455fd57c6c1d8c0158dbcd1f7f369f195804dc88761acbd35a857a3b18701f6767214
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e9ae7e4ad77772ec857afe3972727979
SHA19ac29e473e14c648e4d1bcf366bde3488b2555db
SHA256c8db6f9d5f88ffcf32f84082629d7e5aa0e8a94e59cdf3092ec91111ec176c84
SHA512f92c396e7e0c1dc6d1f437a81ce7a3da70fa4a9fa027a22805b5b3d66d999d4a1b0fec577482d0cb491dee25536bf599501d82634703769878205723613b9ca4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5db07247ed2df8c5eeee15900eedc8c15
SHA15ec33142953b85ce875b78c849077b551ab84c04
SHA2567a50b4f435965c8bcaa7e228f9875e1cc4b5efd71c419903c5de8f69a92272de
SHA512bf5d4f95cc78cfa05b9ca7ad0388747091419866da07567f3f9f5ef4c4635df983dada4770179343dcb97693b20f50db2d906c3ecce17b4baa331d2a1bc028b5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ac39592a3f29d8b0bfce7aa7ed57b9d1
SHA10376f9cbdfce6bbcd72657a1c0a85754acb517fd
SHA256c60cfa32897e709d5179deff65bcbd03ed9faa880339c5e3771bcbd234fb2e54
SHA512dbee8ab05003d206f17c1c08abf11df8ef11e72b846e183958ce3d29efd5bc3ff18e955d464af382c283158fa8c1ac50ba54fd52f0d1a1b593deab06af649542
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5eacc06b46d2aff4500e22186e59769f8
SHA1c8ecd31dd192961b9d6fe4619f0686712626774c
SHA2563a1b7f5f84f8272afe4e68a2927308dd4b24f54b63e366320159005202088d0c
SHA512dd6f6bc47374e2c43049dd9835620d4f2b4f2e63b3b7fa47d3a19d04ae870913ff5481ec33b7f86497b0e15d5292ee65663586ec74227a51a7fc753e7706eec8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e1e9cbc758cdab88623c57809c96ffaf
SHA1b0e23c6c11ce76ad40e732592e61383b7bf6c5bc
SHA25681d335d4289ac91cc7c7b04985767a5b25bbfabfc9906d08782ea692944e8d25
SHA51248deb194ed6768390e5c788cc3f94e06eea8e865e99b137930196cd834de2f78acab4293898b0cd06b802460355f48a5c5a9e5b7d408416e68f1f9cd653cef9a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55bfc78781859d2edfddbf8fdeaf429f1
SHA135696a5a7ed0aa564a31b1f40e4176140e870c9a
SHA256fea72adff3a25f018bfee07183a482f42eac7005bb152623971ba6363f6fa0fa
SHA512d9ea76baefa7dfe13171f13e77ab4473b67effa65a5ac3e4ae6a8019cbf4d5c19283b71531ae288d039393580316a2d36aa66fe7395146ac87fef8abdcd14211
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5187abbbd75673d4a1554fec9fe3df7d4
SHA101aa259fe2ebb78578226134dc540c8efc47a35c
SHA2566b5415ef8de0f3c3b1bbc3e7260c6052d5c4db7a3ecc8d0b28db9a7340896c49
SHA512081ba55af43b7e5be67f43ebf3d65819783a676a59b3f9947062a5568d9914f92a4eb40447454f3b2594f0d8631d758d0bbb4ec55bfc411d4e5d50b172089d26
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b5c2eef255146b626e62b54f290b8651
SHA1feef1469b88deb5ebf3412a4fcccd9334c81ebe4
SHA256d3e3103f2d0fee1cd25de08df4b88063cd83c35db0fd444c0a7a878d353de85e
SHA512aa6e82c6e5a0a3ed8241be6cc220082df7ccc1ebdad2accd894ef0db999321bf7775ce0befccaed00bd893507e7b77ff043220a85ae38578b546f62b652204fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b337f11f482d73fff93635e47ff7521a
SHA1a3d90a56ba9e47035d9b02cde601fcf77580fd5a
SHA25688208b89a6774373523860804bba332711690254df0184de601adfa971ec9fd8
SHA512a1304315dffeb9ef42c748631dbd25185f13283353f338defd77401fe930c190601cd7b7b0787d9447f1ddfa28e5ad01e02307e63318abec9930eb10a8073d46
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57c4ccb7d8ddb84349382fea65372b6c7
SHA132ad722402dcee14edf5b353ca3203364e0bdc09
SHA256e8e10a3453b0004d23db1bae1d58133adb1b361cbd3d0e8a5dbb4adb5ec026c7
SHA512e805edb8e9ef31f6482727d64d64e359a4fa7a04c4ba157a8b29e406d0da5f5ec1113c74031a81f85a0f01dccf2f32c766f6b4cf8e35f36b7fd9b756a3ec31af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aac599b897ed6281163feea248fa359e
SHA16eb5f7feb08e345b36445bad6ca6c8fad6432982
SHA2562172f139c4efe7b3d2ce5041dda574fd6542bd46763ffbea8c7d07e91a391732
SHA5123628a45c3ce5eb4b4cec272e5df7adba00cce6349f3669a0a1a374bd19ba35a6e1a3f58af58db3d663e83181497f4439b085292a60d0e1af6441400d49686939
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58ef60f393a0825a2121756d9cec8f7ef
SHA1ef6d5c645597df9267090c89ea085e0743b1b38b
SHA25643a52f0061544dd4b0e67dfe222220b4c31fc2142e1031e6849450b41573c9ea
SHA512ade67c0d9cfac19fdd223c3ed89f347893f419d86d34366ffe6d246bad8dab954ac0e0f8de4dffb76ca1cee47a8acc601e754d732fbbaf58ab4848afc933d11a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fcd0dfa64547dbbf652abf815f9ad210
SHA1dbbf1c262e84e9f63dcd229def81ccb09d1a3b9d
SHA2567d1e64b1f5d3f9438c8202aa482053932371b427981a40f65b966e8ace80ea89
SHA51219ec64b4935a35d88355eb0419b2e6dbdf26457a9bde659fe959710bed5a7f1ceb7da75db41dff0f9187d7bccc76dcbf62bf6e2983796345d720e24b61a34503
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5618e1e08f2d22226c4cbedf86f15050d
SHA1181d60c5212309c5194b65ff5295f6a87d839a79
SHA2567e181199a87903a9d96f549c803a571256f0f7d11dd510a2a05219f5979745dc
SHA512a62691598a189515e43631caf82f5215a55a3e2d946e07999ff95e84112fe311874c062a175497136504da8728f0d60f38d3ec60f71a1d2023b2e2ca31dd3f0e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54127c62d1e89f8db873f9798d75c87bd
SHA135b89b37f00e81ce61327b0413d2611aec092c86
SHA25667c3709f5474613300eb294fd0ad582518b13475daa7556eb55d59bfb4f47756
SHA512f3d564325db3a96b8ce42304bbc8526d34fc2a54c0c308449adc70c85bea78e0180a1df9b2b4d9c41b552d0e6ae20b2fff3a6c8e1acba7cf786eb887b8c64611
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54c5e18229eecf99ef0f7710fb344c49d
SHA167ba1a29c13f4c5e824b177e31d5e2b72222a6f1
SHA2567a47f920d583e6cf1b00df48b425dc981775cd0ef684d9c2b2db1fa04a117c35
SHA5124c21e1d87fb2079c349916801b0492aff311653886d5c7546ccd5f6a29e56a84398719c36e3f51f5883e492fd48bc9c85c47644c0128a634bea36616e950a929
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54fb79cce4994af3c549e6c312e33f3f1
SHA1735bf2c6283c25cc8c9c2837ba69e17f0bc1feaf
SHA256f6498cb6eb1dbecc0c8f419a5f5d2e1aa2c8d4d9140dc4c7281db2a140742788
SHA5123ab743581c6af754e2660327230e0551dc9abf74639bbd4bdfad6cfe5c34fdefd225e936c82dee32bdc4908079b98130fef55d1b5590dd3d11ca67b463f622d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5632265e91f7539e08179762ff8bccd95
SHA13da279c903eae02d701621224198f9266d4ca0e8
SHA256218d5ca64e00801e19e5cc6846b316b036a678a66d066b7d5f1b5ff162ccfc87
SHA512a5c997ddc8e997c3aeda4fce80c328da24e6304eab0aa3ed4460050288832f67d5cf6b5f0f48d4f329c7d3484e1219c9a4c6dbe59ffd6f14802410f673e086d4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a1fb6891e16e3d7f96401700fdb76179
SHA1491888502ac3ac9a7ea4ff2c6b5da8282d3b866d
SHA256d3a6d7b87758bf346f27fb56450fc0a7ed728759ec3f275bde19b62a3b57c2e8
SHA51297978800fe26e4c97cacffd3b694e384b6931dde6f63aefb20e2163c2b7d2a06556f1ac4f77cb6ddf45accc62df96813c5c6249221c39a2fc4aaa26942629a8c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD567b4bbacce1c52641a2a6135800c2894
SHA1b7a0b0a99612852ff9add16d30aa0b972feadf85
SHA256156e4dc9a2f3131e5c0b0a594a20529a4d18263da9bfe590f05569a271be0ed3
SHA51276868b20627e91c30e6da2e5ebfeed60831643ea78436db4f2ac3127bee99326d74c458d03a460ea7f916deec8793806399e0500f03adf1e857da24e884e6a36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f8377a05bfb3ab6afdccd27c6dd752cc
SHA13991b29e463be785f5bb0f73a2745352da963e4f
SHA2565997a485ece18bddc34352733f2f42430e6b626a12c692b193e8b3dbffca34fb
SHA51277e78b195d0637fd5c88e13510103175321aae18541fa5b23cd187b996f48780e33cd02ae088a63a16ad9a431dcdca67dde3402ef763e0bb71c98805c0972455
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B398B80134F72209547439DB21AB308D_A4CF52CCA82D7458083F7280801A3A04
Filesize400B
MD563427a5eb567606d09c3a6ba6c6d3350
SHA188feeb6dd4004e632578a00cd623f6195c1b4ac4
SHA2568e5b771efc127249992b50dc6915304e9a73a2ce250e9b7ade6e31b3920c93b9
SHA5123447f91487bca07caca545464a5bd18c12a2890304ddccf6773eb22c71ab3189ea4ce0e590f24b051e78004cc845c227082bf18083579318e3f537a5c09b1830
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B46811C17859FFB409CF0E904A4AA8F8
Filesize170B
MD506d30e2fb5ce6c5a432ee8d415a09091
SHA1c2b7f23688c487527ec4003609e22d91ea95ae27
SHA2567c6db8a13bf44c3d66c0342f2015d9d93dc978c1f01911c7c0c5263bc9788480
SHA51224e3997f4f934f695a26847f287bc9628a54cb80f6ca938246bd20d09a6eae67a0336d6ca8221ea4c7634b47e05a60cae0cfcde7d23539991a7a1b28377ffa5d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD5b42fd4be79f177675ef3d267e30e67a3
SHA15a2bc3aef32cede16b85842abff10c6834d621e7
SHA256c762befdfd2b887595ce893164c4c46ba41179b88096c1d7c2ff390dcdb42654
SHA512c9febcb3192b2aee90f6e164a13defb3dfa77c546b53d14c705a146bb12a014581e4b3afa56b503ebbe296e3848e7ffc28b188d764e3e7b3363c778206fdaae7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD56be58c3af5ac4f84c12c0ff5ab82d67a
SHA174fdbc0bbd1925b150c8e373efe6d8099ffe78c2
SHA256ce11392ae75ac3ecf4a59f932c30eac895ebee9cc5185ff8ec800fb8806dac49
SHA512172e62ac4c9532a8744c19db6bcb40458856e688274da66e7da47f3ebb79ade4bb679d16236e97ee5a1da22666afc51776decaca0d2e09651ab822fbeda5923e
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
228B
MD5a9281354aa2638d9c788c5553681ea2f
SHA14beb4d969ad6a2b8f3a85cc1727d4334d355e86d
SHA2560fe4d99706a8cb73689c1672011aa77706c09726bd2f53a87a218e39a3611d4b
SHA5120d042be52c10d4de489ee45b022ea280c52f2f0c6f8422d620ef28e734ce69139dec4dd87151231f99cfd8d579c6e8c850788a062fbc0f4d2b751640119b9dac
-
Filesize
638B
MD53749d2518ba8f1c2e6b2640cd01232a0
SHA1c93dc7611e3ad85751f54543ef7b05c21fada677
SHA256a4f44d07c493f708f5e01a41537ad8466f4fdaa290ab49856a5871cd12299443
SHA51223b32ea3ab6a67cd6f60699fc525068ac59ac791a8f8de5acac75468c94f78f1590ce0f48ad45a7b6c3de86520f9befc9e89f647c7799f5b48ba8fc98693df46
-
Filesize
810B
MD57b3dc89b259850b6fa5081506b5fae26
SHA1b14001e7fef2c65ab0a7f8a73f3578cc02a83ea4
SHA25692a3eb263766e82d5a409684b09c76fba38d37ce191f4ce50f893b00aa60fa72
SHA512ebaad5bdf3165196fe50195c0a1452f7bc5245dd0baf0e63182a09e1f93931fd28e3956f76cc126abb62f9998f3595a53e9d380486676fc42fcbf4c663f11281
-
Filesize
19KB
MD5c5208a6b6bf21107fb9a22010ea777cd
SHA15494ab9b98672ecf5cf53f232e280a2383d51f6b
SHA2566866a0c0a267fe2192c9e03c006a9f9e75850d04a6f8963deb71f89bb9cfb1f8
SHA512e7604d5da859cb3178d22743568e5103765d1754800cfdd363d79375f30fa1d0860b867d062844b6316a7b6a5575e3faeda6813a88863f763dd3c86e073c236c
-
Filesize
985B
MD53613bf0b15f91f652266b00fc29a3f75
SHA1a604f51b2f848c4d3feb88236872983edfe57e14
SHA25683aef283e935b6b78f825ff3ef2d8192b2358f9779cab730c216e4e76fe75454
SHA5120f8f373900c1eab5ce4a0d540d980c44256524c761900a11e55804d05276f0b27497d0a4a9cdf7a8efc2726105027053bac2365231e25c372cc77652b69ca8e0
-
Filesize
985B
MD5e4244a39f0dcdfdcfd689ea6beb96460
SHA12cd626b72b2a55b8c6804a7c1d8f12a1a7440b0e
SHA256316f0ebb3cff50f0ded07470936b1b2ce96dd1ebef2cd3aa8b77a9f4237b33a3
SHA51293ad48ba3299b7672a1e9de75248a0949aa028b1bb38ff8b367b56cf1cca02efc9378cab3fdec4aae385f17dd9c04d03c636f7fadd4d2d3b6ff5941e934dffe2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\84EXSCRK\newssummedup.com.726652[1].js
Filesize6KB
MD58773d601df032e50d7ae8a7987d21205
SHA135807ea211418e7a67ff1f43f668aacf1882bc13
SHA256255a9215cf724732bfb87638a6845bc39b420c7fc3f9880aadc39f3817f95f66
SHA512e781b36f3757a04bb25f316a39b0495e39f265f10a2c3df3cd39dc897a72062afed590487ccd81e76c1f3d21094c182731763fa9401142b65374ee39815d8fb1
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J7FHNNOW\newssummedup.com.726652.es5[1].js
Filesize588KB
MD5dde0ff26433754d3459a4ccce5e4e665
SHA195ee58877a7672e692b5c730b3e8cf901f1b2466
SHA2568d6e760989d7067a9c16946bc2b2d75c90c4f8d902e01b0da100c7c892990f66
SHA512d9b2fe4a9c692975458b5e13eeb455a5a89824282a0dd3099e14b472fcb983cf7f78f354598990ef27feec5144e179d8db36871c1f05eb6042f84f7567f6c316
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b