Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
21/09/2024, 15:38
Static task
static1
Behavioral task
behavioral1
Sample
f01bcb406d507385def2480a50a4ade7_JaffaCakes118.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f01bcb406d507385def2480a50a4ade7_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
f01bcb406d507385def2480a50a4ade7_JaffaCakes118.html
-
Size
175KB
-
MD5
f01bcb406d507385def2480a50a4ade7
-
SHA1
4dfcdd3b81795488fee8cc528694a0821abaa229
-
SHA256
e22db229d598ee3a543a38a844753151b376cb2ffcf561af0e5156886ad94fc5
-
SHA512
79e466c64b0beebbf24fda70f0965ec9784a36911747fbc5df00410d07795ace10471b623e8d888df6b8c2428b43c895f3887579d1e08c333007da3c308229a6
-
SSDEEP
1536:Sqtd8hd8Wu8pI8Cd8hd8dQg0H//3oS3qGNkFUKYfBCJisM+aeTH+WK/Lf1/hmnV+:S4oT3q/FeBCJium
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "167" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "18850" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "28695" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "400" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "18850" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "7702" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "282" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "288" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "410" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "400" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "498" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\NumberOfSubdomains = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{86D79C81-782F-11EF-9FF1-E28DDE128E91} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "492" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10846" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "410" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "18932" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "9473" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "18932" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "498" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "10254" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "10846" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "7702" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "492" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "407" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "10846" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "167" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\youtube.com\Total = "19230" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "9385" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "6" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "9467" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "115" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "200" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\www.youtube.com\ = "19230" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "197" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "0" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total\ = "28695" IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1504 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1504 iexplore.exe 1504 iexplore.exe 2360 IEXPLORE.EXE 2360 IEXPLORE.EXE 2360 IEXPLORE.EXE 2360 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1504 wrote to memory of 2360 1504 iexplore.exe 30 PID 1504 wrote to memory of 2360 1504 iexplore.exe 30 PID 1504 wrote to memory of 2360 1504 iexplore.exe 30 PID 1504 wrote to memory of 2360 1504 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\f01bcb406d507385def2480a50a4ade7_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1504 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1504 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2360
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5be7936f36678c07f35f47bc96563506a
SHA12377b26074110e7a19186cb5984723ea7cdedb03
SHA2562ca1d5eefaeb6d5ae512ddf0dde168d072cf69320339a8664ec7f80668b1ddcb
SHA51296eaa1b9050ab6d4e40155a0e41554b1b1f05ed07fda1421284d33d0b01d047c5263f0af75c245ebda7ef44fc30de9109f1dbcc526d9a3b56b389ea73dccfc4b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ab37e14cb411324c2cdf80891913e59f
SHA120e76700a59ff141c9544d4491433c73b4282398
SHA256345ec0908be7520548eb764486ceb0025f1a03cb9222835affa01601ed67ac8d
SHA512f5e51916b5088a2f9433bc0364894d39e6ecfc25bfea716ccd64c75f1f6baa281ea60b7228cfb09078b0d5325c95f84f5bf22de8dfdd01f48d4a913e409a8b04
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD599b4d62902b8bb3487de10a57d41abe7
SHA19ff6d5c8e78240b49a2d7081272146a2e25357da
SHA256569aa68fcf7ae5ff4693eb1e34723e7bccc131e9ec8198b120de7fce81eec7ad
SHA512d5375ac3e4d74a2875ae44a6a093ae6b68cd9fefc205536c71a0aa4f1f2644cf1080d2d5c315ba78eefc98d0c4cc38aac6d364e96daa6f39d05ad05afaf09c1e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b42bcf6bfd9bd9fba2340cb21b79fe76
SHA1cd09b488bf8fb49a3667c085dddf8ed2de3cc1ac
SHA256667a4f153bd5b8a07a315cd2794005c07d7d6ddbce6cb62321e340cb45af6af0
SHA512a1314ae99ade1e2dd92868eda1d79f936554b50e327e42b409d0e9c17ab108a8fa35afb04a2b97c35a61f1efd7c793b952223fe62f5a2a294166ceb3e874f69f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bb849f8dcfcbac572c613a5db3b58adf
SHA14ac8679c91c46eef461527ac06bede7e8b449046
SHA256253a88d69fb2931c09f97b4edf8655bd1dc4f4c794dee3b163a2501f36a6d9f2
SHA5120b11acea9c5df526b40124181f896cb9c6313cb72dad18d14b577eb62a6480fffb3825959cc8ece780694174976f0d0578aa60d2e0abd9a3a4c7d2d86a202afe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dc7727e89f17d1aca6e61416b89b470c
SHA15dd0589e4848884c6184c44e64b0e0b9d0d307ba
SHA256a37480ac4fa6e165f10b59ea79c07ccc4544d0364a407ee37a56adb512edfd49
SHA512cfa2d96cf26525cbf51ead6866493b4907ed14f6cb0df6c682667778fd1e2d7ce2996d8a0bd349f2df281a867849ccbcd7ab533b3171d8e286c72b9abc053c2e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5755086ce51a686306a4eaa46fd932762
SHA1dfbbc84b7bad18bc2825cda4a0341401903f9284
SHA2568320c393c027a21c97d334c33bd22f3a00ba150d3c87a9d976970a6fc6fc5c43
SHA512d8d0ed2a5929cc875567ae793e77e4dac7295eee10bee14e7224c72728470defd923810febfa604120aadd06e01928f556bcb5b3e101eaa2ed1b1823dc69f451
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56638ea4d09f9b6180d227b1e02381d9a
SHA1be6b955652a1306d2894195bf24837091e6eecf7
SHA2566d637f47fa105e62b1ae3eb80dd2cb712732c83b7e6d6ffdc30ba1d187e12ccd
SHA5125d0f55061b095af4d853587bddb2ee69b646bdf07122d2448559d274a663ce7ab6432c2c8aa5ddf8959c202788215788401a9b8da48db25685341ead0a14be4a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a9948e3fc504b32d4ea6becb5d6b40a9
SHA15fe6bbc814bd927ac423753749aca16d224e5ed9
SHA256d2e8b6de18d8376b3e4cb4372833ed9175ef9484c4ebaf40c92f79e1841890da
SHA512a213d6a82340bf7e71a0cb4bbdaf04c2d355111ff71beab30d7c2407be1bf19c50853417c8245bf670d09894afc474702f5ac7a00bd21319eca6764a6e561510
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51d0b0eb1cfa4347d9e8306e1eca0e945
SHA1402a9ea85bae5b3de3fc0afad026976a9fe93fa3
SHA2569820b30ce3c37e39b6826ce12ffe78062677f6e722445eb6e7af2af4b37ea921
SHA512c46ab775fcec44e0ebf0b8b2b6abeefd27dcff79a0f49ddbc47f40e36f57a46d3dbddd33bdab5a8d69102c0d1994596fc44f7eec1fa9812aa3cc8884151e9753
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5320c7cc2dbec4aacf1ec8d5bc3cbe448
SHA180fc2920542e6e71cc9eef067674e452d95bc1cc
SHA256a02450cbd3f099b1b1442f74aa3b8238953ad65f821c8a86cdcf96d674654676
SHA512a35cdca9b424b539d7140479c1c9905d8c5bedb5885c9ce71a83dfd3ba123101eebca2e3549b3a582c0d601a0ec0bd8aa12c678701ac402c6845b3131b4fa8ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52a1267a902f86f899b7275f0e37b847d
SHA138ab6974db746d9aef509f67a07059ba16b3ddce
SHA256eb868a62bed5a7f2a8f55f1de9611d76dc317743a21ceaf0a445b2fe1f30c675
SHA512e4044334b40e3e5ab68315dcc9f261802a9c39a404f4f6a8383fe51150abf2a0d057e1bfdeb3fce954e33408f17f69e9c290905d4a084d88a448c36bdedd5987
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57fbf60e26712321a119e83f75ae86324
SHA197410db2bb096dae4763060f7e005a97b5b1521c
SHA256d00d83f266cd7ce99669987d5fac6490c3868a621d52eca65e83c3e2a1ed7b6b
SHA512037c6d43d4cb996bdff311b1d964bf335d0551772bf1cc50ef8da1002bb641dc6e4b995afa0d6730705d1322b81fcdb26598c6253db7ec5f37231f1dae33d907
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aa3da80e1559295a5c7742623e0a7c53
SHA15d4c928ff948b2102b48978559a5082cb710f272
SHA2562f6e1ac0a662e4176e12140a8b64fe3eb1282125fadc6e9fc47989384a6a21ed
SHA51299459af88ec2d924f6fdc7bce8ae0477ab477073eee7870240bbac08912c0fb5ac28fcc06502861b452b03ee5e945d7f612fd280d4240bc97eca52dd40043caf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57353e83a268a2c7ac59159362142d937
SHA13757c853a55bdb0c1f1d39e6ac53e3a2effa7b3e
SHA2563f6f6c674a9c3d630d75f4065c232397ebe2a5e427d724f65537173a6b44cf77
SHA5122aee3f2898db0bc865ab42d2f7b87f0afa5c2ae6d5968c8a8ab5bc19617729fa4605696a34ef2c3b8272b3dc5c37328e6ac963121fe346dd758dd7a3988ccda3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b08738bb96cdeb0d64adef7b231f830f
SHA1b3526d51e3476cac251f1f430139af2331b2faaf
SHA2565f4fc0e571e21be0d6994ad1a7783247845ed3bc49303edf984cc5d37c43d772
SHA512e0281fce101f57a908da768b18f87fd937745472ccdd4b7bbe7ea360c908fcf464c84806e6a32ab0fda2a9615dff754c4f4d4d9da428e8c2ecc20abe020b4e9a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD595543326a213f7f00fa228c0997a3aba
SHA1aa2880adfca31af960883756dc34ddff4c22bbce
SHA256cd4f5aec5ea0d4f7dbff2ddc40831f566dd7e10fb7d2a2935479a8b8e9ad11fd
SHA512d11f79297f5057a67ded75a2913d8c3669ba9442986be2470c844825680feafdf0c6726c2461c1b697141bcf67a1238b4e5ae13c88fc12ca75a697364413bbac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b192f8354189db3d416fa2c75a7e82a7
SHA1dd95caed88924ffacc6151de7a8683e37d62cf51
SHA256d0297a9e8bb5028ea8e3e58bc0aef4fc3b561a7ad7967e4d868e96fa0cb44180
SHA5127fa958029e5882c4ab0895e0b4854c29f3b3e265277e2b197cfda557c41b59198ebbb5d1cf142539c2b0c0dfb1e7843e4b1534e99d272c1783e0d4b4d93d1182
-
Filesize
11KB
MD53d8dd2d45a26ce1a49bdf5af837993c2
SHA1e30c822c3f0d8fb6bfbfc9b1857d8c8cdc495147
SHA256c39ff80c5497e4f582a441591949cf68020b8c80732c39a39e8b74be0b731cca
SHA5121c7709793249c86ecc9b0f76fcad4365292ef8de0f0178a393f4920c348d75df41316ebad8a71c56bcd6244b82bfe30a215d8e687cb972da13eb1de76870ad36
-
Filesize
814B
MD5b4ae98287000160187ea82fe716a616e
SHA110a05189cadbe79c172b58c914e7f9041de73394
SHA256198d00de02f449375bc7f226712918b9df7ca677beda6d16dd7a36861e38b758
SHA512feb3176db3445545f807d64edd5a671415504bd0c331a8388184b9df37c24e1cf4fb28c3aa9435b321c250856f794a790fa4ffce79d8e2181428709ef524ad5c
-
Filesize
44KB
MD55c14f03929d01d426207ba1d79245aac
SHA17f646d53b6eb4b5662465b68e1009a113a9ab5d1
SHA2561d8e953a48cf9f6ee4d06a08f64321b4e46d029ec0ff4a8610d5051ec264b1f7
SHA512e88505ada96eb17f946a66d10ec9dd2417650cb2eadeb29e2f381271c53344b008b3a8e077addd5af9b3949dfe9d14dca62e504f0af2feb15d76d919cc1dc5bb
-
Filesize
814B
MD52bd3383ee8eb035726cf23f2919d54b9
SHA1f0f41e665b0715b49925c5ed6b362a22f7cb48da
SHA256c6fe9cb43a42b1fb2bd90e281479e42a55f7646d638e044bb0ef03e3a26a44e4
SHA512dfcb24e768c8939ca75c809207d00a95620dc30340664c5b26625dbf997d189a0bbf7002b92805876c657dfd3c8ec591f062f801ed62bc6178630fc13f1f5711
-
Filesize
990B
MD5750507580e4569fc60affd525cda743a
SHA110884ed1da6dd376d5ddb73a0d7ef3deaca3dc20
SHA256cc761cab267ee9f172dbccf6af9ae9d7132817ed89d2e7a8dc6739e5b27840b8
SHA5124a4429aa97937466f3784c56c60c72acf80e9d2e4af4732dd1b879a723f62edacd29571d95f4268a7c1c1b577d33fb27a451df4f03d1fff41d72d546f7cc08de
-
Filesize
990B
MD5fd2bc59f69f98026b164e3d2813ac8ee
SHA1796f7d775e55fd8558eb6a1591e14c71d39b5b50
SHA256058fa0bc8a63ace5ecb163157d2278c3fb4a5298ed6108512134f3324f3cab59
SHA5128c0ba64daed14434bc574adee7ca7317f4be4a939c6268a2c75b7177b0055825cc184a2d58b8f43991faab99baaba2b80b8ed57c860aeabaa1b608577cc4c508
-
Filesize
990B
MD5f9e4ec0c35c222a7085a827aa9e08f26
SHA10d2914dc8c21993781d8d0b5e26b5a34fd167ffa
SHA256d49f774ecf05c0f7d928e7aca37093ea600b51d18faf0f9bcc91a973e3cf4a68
SHA5127ad2015c4046e8ae5cebbbc1eb74eda45f92db13a423adbe8b3c99c7c9db7233866e7b233d0eb34c9bf13c9a04af7e154a804862ecdd7609d12855d15dde350a
-
Filesize
990B
MD5922a89ad94b88f267efef5f41d82bced
SHA1d7d21486cb45e1bc72e2d332841444cab3433cb2
SHA256df90bf07cd605dd3c5d45ab966c382046fe4f1f1a0acd46032cf888f9ff36722
SHA5128f52547897d303ada7bd4623302e791f4d87919a6f676d681ac282cba4af4a60f56d0f464d9fb59ed799875757e16e30f9a4fa7a314900f344c98b5f9c78eeef
-
Filesize
990B
MD5792f6a4da9e5a3e5106c02659f6ad516
SHA1fd9aed6f1d71e7d90f2b6fa461453220b073950f
SHA256268a2a8daf6c684729b3c6fedc05a9ea994862f843d1d0e7803d5f082aeec9f2
SHA512f3b5af4a7cb35efc027bcf22264d5910cc854f45d8894725b91bba9c8a6c8772a85d21cd6517949d122de42cf86ab9e6d181b8d255d9ef4cad30038cc94f7b8e
-
Filesize
990B
MD508f8318b6b2b9349ad38e5d9af99f3c1
SHA1e469b4eed5c58ffeb08ecbf237e04eb9356ee76e
SHA256a8519df1c8773841eb9771c5a970df003bfca4efa99a900c63357fed3e8bc225
SHA512fc74a165bc07b85f519b920bc941bf0eed950cd0abdefec4d5470e5146c596103a584da39b5a6abc425dce986f12493b3f1718f21a5bb35b9f2aeccbf63cba3e
-
Filesize
16KB
MD5650f7d4cca74980ed8198e8aa96bdbf7
SHA17ad17b2ee2cce671a06b8f0db83a8f67ae079b28
SHA256b9db5f8f671dc77721e3d6d1080a66e6526c0acbfece931fc28dc019cc4da4e0
SHA512a3b1c3c92d498b435cb0a9f9d73ba750b62d22c7606fd814bbc65b544a065952d78fccb8895945964daf55675127c41ddc45ba817bba27ff66fdb0b0ce06754d
-
Filesize
578B
MD5dda63d8b2dc99d491ac76181fb371e7e
SHA1ca75ad966c8ea23d84c3ea3b96316d1da63cf803
SHA256361423d5167604e63a5b0ccaf8958fdbc4dfc99246ac739c3dcda693b36deae0
SHA5128de38128045db41095958994be71295e46801aaa76f4941c6dead61d9667463751b95c0f9abaf9c76891e149f9943e695fffbe32a80f7178b8553323c9b11a8d
-
Filesize
990B
MD5fd325b6e276c6f2c9776d7fa8cc4cec4
SHA1cdde45978f5df9b380f7a1dabff130a2e3973a3e
SHA256eb62d208dd9f7f509e23126de259155620535380c930b10c2de51644cd5cc51d
SHA5127fe51b86e872cb3552680c3bfbbc3a95841defac7e3a55c956a5ca946f80f300de35bd248537ff33b65358e5385d5d439d45270068dbd1d45b28c56d3644b6f9
-
Filesize
990B
MD5952f14e589743261913b41e09e8edd94
SHA1893a08bd93ac5132fe52dc967438611f792bd60d
SHA256b1d6f2cc1bb2bd02d38e2d2abd133f2bb08d00d94b7f7c17b988686c537abf83
SHA51271e389a779a5c2bad2614c909d732a97f0b4304e5828f06a54da5269249869ddd83309fef2d900905c579c04faf0a71b407f27cb02af089dbcb30d1a754439bb
-
Filesize
578B
MD522d21b6036d99bc94f97d27729f7dd57
SHA11b57fa97ab8a415992087b4bd90ac4d3133162f1
SHA2560b877dc0c74cd6a552f355a7c09ecc076590d2d37ce30432c3dace3e3a3a40e5
SHA5128c1d98ba17b03c8fbeaecb10d75dbb544d307e3fff07453bd2c21e79e15fcd23966b2aab1a6da901137d4920a216b70bef14db5e6a6a08dd7e865b752cb05a9c
-
Filesize
578B
MD560009dddf8527a81332d5652171d4024
SHA10cfaacc03ff71574877cecf2c5316badd843777e
SHA256628a6ca8e1e4b6db34d3428fe23abbbed3329eb1e675cdee514e40ae8b9c5338
SHA51278040845d7205299411e3c98875af961297684c9924eca60e32748d2daea2a28252dad35fefa65d031f5327b48132efa1d85c0a56bc680641003b73e926f9b27
-
Filesize
578B
MD5559333567c845d9e18d3e079b244bf3e
SHA1ece816f5dadf68e4fa4d82fe38585b219a0d5f0c
SHA2566a08c12639c17d7415008b8cd460c03c7a05a6b80b63af3523c4f85abe2e9103
SHA512f7ea7037ca752e2d8069c3d5e4d101eb964a656566aff0e7f6926529ce0988702467bd9dc21c8e9ca4f10e4aec5d23d6a95acd0128fb952cc3689c208ef11b40
-
Filesize
578B
MD5d22b802eec57f479a3446de98bd462e2
SHA196f0301411dcc0eb2b3bc61858a42549be82cf7c
SHA25601336f10ce9b4df1b918750565dd652e8cd4e44d7a7dbe27f2b6d3ef5dd4e18e
SHA51209c54d9b42f3b36a6460c901d49b7fd448b18a7a3e3df1e9f3ea1925b9c4671d1765fc439f5610d6946b104671568b5d70f5fd5a6fa26ff259d992791250cc74
-
Filesize
362B
MD5f124ccc2adfa77949c1adcf3ee3cd841
SHA1d90b20713dc76f29178db60f02976be5472040ee
SHA25634199843be0fc78d10df3bd9c575d37572b2caeab2c776ab3b16ae5164f436d9
SHA51294b48ba564f0793e71308b4488e1945ed64cd5d7f836626c3c1332be24a6d99613e434e415d4333e84af06aec116ea235afeaaea12b96b15b4574915232c4875
-
Filesize
578B
MD51a900dede06941c2e76c65f59b55131f
SHA1fa4125b09463d44f5a5cd65cd5d61bb2402c6556
SHA256835ebac40166da5a3d00b80712e8206f2826cfe8f75e1267c26121a3392b6cfc
SHA512b9a8cbb141872390b37798abf07b5fb0bf46cc2d5fe375dbde171d83b496e0fe050a15e8dcc98520a03d4ee559a93794f163f7aa3d96092315bd517ad5303862
-
Filesize
13B
MD5c1ddea3ef6bbef3e7060a1a9ad89e4c5
SHA135e3224fcbd3e1af306f2b6a2c6bbea9b0867966
SHA256b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db
SHA5126be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed
-
Filesize
578B
MD551d4991e5c484eb61c65e8dc1c6b363f
SHA17bec4160765113838f62ca35dde9239fce27f8f3
SHA25621bc335f150c7e6501e92472388ea8f0ffba8346d48caff3ae4e70b11a59a4f9
SHA512d2db8f91e327ad91ff897b5dd736813d97ddf14a80e246901be8518d3b67c6f47bbdd1fef010102313c6fdae2aa191f6b9ac8dab4179409bc64b88e43d58ee30
-
Filesize
11KB
MD500c0fd953a1145f1dbba19908030fb91
SHA1aed0d7eabf901cd1e77aa7fe387dc2238cedd7bf
SHA256f72d40053346f37e5a38d9241c71705d14fa8cc9c1b8a990e415f40271c3f0a9
SHA5126132a2348352a8db882cfe82e47595cd149e8811b7892b2ed52bf4b032ac8c5af0dd938c3c1d9891617988b79edc619cdf2fc280da8a130c2044596efed0f6ae
-
Filesize
578B
MD59884fcf6a9beaff7aef76181c7abb5ff
SHA1376628e5e58c5085e9dc62d0c81257c9c485978f
SHA256f688d90b4056c41a4378cc4944832aff003bae6b82034b9b77aea01ab27875ce
SHA51275de28151f7a4db1bc3345a591b333ee5f373336adf2ea69bca9b7e668c5da0ff43063b65e2d1c10c01b2d17354fba924898f1e083f77c00476c748f655fafd8
-
Filesize
990B
MD54e36d5e758068ba708fe3e92f78e0008
SHA1227549492a89af72f0251af57bd0fe0e58f2a9a9
SHA2563445eadee752af73e0365c6a5a67f8e7fc9b32005cb9896dab5979840bdbd6db
SHA5125b192ea24c49bdf369ce7448f7d1d726e5f59f4ba09b94006191c13b686d941fc18920552fd46b267c745675c3711d35b6c7434efa5e43812647abcfa06b04e5
-
Filesize
990B
MD54f1c45e295f8965ad62389473b15384a
SHA139fe2db0c204089572c828fe1fd9dc4454c9e0bc
SHA25606e2da011b138827176d00ac651479fc45d2657cdc2adb402041cd9df5fce3e6
SHA5129e8d4ec4397d93a5c9df0526071483598192cae0073cb27df1ee3320c6a2362019fc7c3f3d24a0aed8d106f3bc8f5b1cbadad9f366fea2e5bacfff8b8291718e
-
Filesize
229B
MD5c8d03b14808b77707eded9bd3269ac2a
SHA1efda5f08b98a2ef2a15f79cb176e5085e38dc87b
SHA25681ecdca04165062d23a1f8c549934d09e8eec617ca6fb0c2466dbb4ba9ac31ed
SHA512299890736a844be8e75c761581364c6754095b3525283435337760a0ee876db2df1db971f5a25594b255761d06ac2d1c698400c798cfa50c0f5dc8a6ec882c17
-
Filesize
990B
MD5c2ec71fb7bdefa24a497269f2d37f68e
SHA1d6ce92555c8d4a4f0fda6f1959c939d992578c9f
SHA256911b46f1820423c4674f259631cf2ac2dbe08e7cb59cdca1ff51d1442e6bea77
SHA512bce5adf97611eb54cc92e2e41e2cd7a61847f20b8a95726449f21c4e9d756e78bb333ad116f8047a03b8b630f116a14f3836c065c0a8d39944cc85dde1d1d339
-
Filesize
990B
MD56f5624dbe5495538a12a5bac38932887
SHA148232adba76b82982b17582e6452e8b6e642d60b
SHA2560a889279a3bdd5a574b03261434127e6a9765235f8475b7ced13b31c07cf3c69
SHA51265ad5f9a9dd64ad5ee7fec99dfe862257fc56c1998d4f8f9b9b24bf058304cb701b8282f142fcaf188d4211aa8d19d2f132a422d46112d0aa5c96a87c0ad3248
-
Filesize
14KB
MD55229402cd9bddd4aa89d392c239191e4
SHA1f787dbaee16ac94dbeb8dfdd4cde841efaaa85d5
SHA25696046d93219bc5e34f2ba0b9159598d6264061674c5ac9e2037bf9bf6568f98e
SHA5129d13268f5650f7c2df900243a0667351bdf0abf171b6e1f9519045679b90b53229e92ebe0a5b2b3777f665bfcd868c890c6d07737a725501bb595e10aaf2bf7e
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39GEHZPO\ad_status[1].js
Filesize29B
MD51fa71744db23d0f8df9cce6719defcb7
SHA1e4be9b7136697942a036f97cf26ebaf703ad2067
SHA256eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
SHA51217fa262901b608368eb4b70910da67e1f11b9cfb2c9dc81844f55bee1db3ec11f704d81ab20f2dda973378f9c0df56eaad8111f34b92e4161a4d194ba902f82f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\39GEHZPO\remote[1].js
Filesize118KB
MD5bd24e895b4340f7fa4d8ee7e5d9c143a
SHA145aa69a80b17487f15a05f2b2b71993cd6b0a96c
SHA256d19c33f7c67935c89977505aa9bb5aaab498ae265ac93bf4694edaaf939abe7a
SHA512d12c23e51b1bdb384cd5928f034b5b542bc18147c36d09b8c82abcdcc869e0530d5bdb204506a7b8cebb7f245b8db6ddf6c2f4ed3aa43377da9a1ed5c19382f5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LPQ313RR\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Filesize19KB
MD5de8b7431b74642e830af4d4f4b513ec9
SHA1f549f1fe8a0b86ef3fbdcb8d508440aff84c385c
SHA2563bfe46bb1ca35b205306c5ec664e99e4a816f48a417b6b42e77a1f43f0bc4e7a
SHA51257d3d4de3816307ed954b796c13bfa34af22a46a2fea310df90e966301350ae8adac62bcd2abf7d7768e6bdcbb3dfc5069378a728436173d07abfa483c1025ac
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\5K73jAf8oQ6GjjpunjQ-2yaMV7a9lsT51eAA_Q43THI[1].js
Filesize55KB
MD5323dcf3c433a0464152daaf53d3720da
SHA110f1e90b5aa3041589fea0b5ff658f6fcdefb7bc
SHA256e4aef78c07fca10e868e3a6e9e343edb268c57b6bd96c4f9d5e000fd0e374c72
SHA5126c4cdd28ca28974df26e1272d4c68bde318eae4fa082714f975332860df91d1e8d53f6d9940dd6158150cb13c36471485ccf1dc89572a8380c3501700c7a8df3
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\KFOmCnqEu92Fr1Mu4mxM[1].woff
Filesize19KB
MD5bafb105baeb22d965c70fe52ba6b49d9
SHA1934014cc9bbe5883542be756b3146c05844b254f
SHA2561570f866bf6eae82041e407280894a86ad2b8b275e01908ae156914dc693a4ed
SHA51285a91773b0283e3b2400c773527542228478cc1b9e8ad8ea62435d705e98702a40bedf26cb5b0900dd8fecc79f802b8c1839184e787d9416886dbc73dff22a64
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\base[2].js
Filesize2.3MB
MD59f5bf11cd4068cab63057ed99069fed9
SHA17a6329b5dde6cc10a6b6753a18d1178f46ea4d3c
SHA25689e1ad6ead4278ad4bba8ea5501ca5c79b066c61cfe38b70169181520fb5b0f7
SHA512768fa98c09d02d0b72cbcb9701ad0547c72c401854f251445fbb5d446da2d7b24a66059cd1e55ecff318a064bf9fe69356b4ae18f4273c13d4c14a7f9dae0d47
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\embed[1].js
Filesize66KB
MD5266940708e18b768536a35ff3018fe34
SHA1bdc725b2d6f8442260d996146e0aac75275af468
SHA2563c27b6e9d3d30224a589131e2aae5370d19b32038e292e2d92198a73a8e5147a
SHA512f22e4c43013a4024b5bf2289d69d24f8089d56562dd6987c9cf8474a8b352f0af359c2b5ff6aa9a9370835a46411dc3523144e6043d393eb17cbf339c157ab17
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\www-embed-player[2].js
Filesize331KB
MD5e05ae65e7290835392021a7595916b92
SHA1f1a340473bc52f98f2e73ee422b5b10d246b2fa4
SHA2567a0c22ec1c43c774664255605c026a3025992bee2a2e1441d391e58b30cabbc9
SHA512c40fe5dba0e7209ede7845892a3a5c92085d88263efdb3b6b9929d1bc269aaa517d1dd218a449ffc0aa3b82903ee5a840e021d6ceddefd57aff6d0419a0e3d9f
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\UQFHO95Z\www-player[1].css
Filesize378KB
MD52e4117c51e897b0cbaeed1dd321eff5d
SHA1d6010be53e4e0f1cc5b951663c14619e00b9d519
SHA256462d837d5eb151ebc17aefb77ded3dc9bf3edf7a43e0183800a54a1de3a58caf
SHA5125684c70d9a7e1e6bdaafe80cc35fdbfe9024a3f3bb8899116c301b3023b3818f93ca64f6f42aecb99fca6c8c45aeed946bbf5a8db8fcdb16ea0f58373179c58d
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b