Malware Analysis Report

2025-06-16 06:24

Sample ID 250605-j5z9maen5z
Target 7a0a9f0029dac118e06cc5438fa09c17373566acb78c637755e315fd51197932
SHA256 7a0a9f0029dac118e06cc5438fa09c17373566acb78c637755e315fd51197932
Tags
cosmu discovery ransomware worm
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V16

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

7a0a9f0029dac118e06cc5438fa09c17373566acb78c637755e315fd51197932

Threat Level: Known bad

The file 7a0a9f0029dac118e06cc5438fa09c17373566acb78c637755e315fd51197932 was found to be: Known bad.

Malicious Activity Summary

cosmu discovery ransomware worm

Cosmu family

Detects Cosmu payload

Cosmu

Renames multiple (5250) files with added filename extension

Executes dropped EXE

Drops file in System32 directory

Drops file in Program Files directory

Unsigned PE

System Location Discovery: System Language Discovery

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2025-06-05 08:15

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2025-06-05 08:15

Reported

2025-06-05 08:18

Platform

win10v2004-20250502-en

Max time kernel

149s

Max time network

135s

Command Line

"C:\Users\Admin\AppData\Local\Temp\7a0a9f0029dac118e06cc5438fa09c17373566acb78c637755e315fd51197932.exe"

Signatures

Cosmu

worm cosmu

Cosmu family

cosmu

Detects Cosmu payload

Description Indicator Process Target
N/A N/A N/A N/A

Renames multiple (5250) files with added filename extension

ransomware

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
N/A N/A C:\Windows\SysWOW64\Zombie.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\SysWOW64\Zombie.exe C:\Users\Admin\AppData\Local\Temp\7a0a9f0029dac118e06cc5438fa09c17373566acb78c637755e315fd51197932.exe N/A
File opened for modification C:\Windows\SysWOW64\Zombie.exe C:\Users\Admin\AppData\Local\Temp\7a0a9f0029dac118e06cc5438fa09c17373566acb78c637755e315fd51197932.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\GRAPH_K_COL.HXK.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\FPA_FA000000006\FA000000006.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\fur.txt.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Threading.AccessControl.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\AccessR_Retail-pl.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019R_OEM_Perp3-ul-oob.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Grace-ul-oob.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp3-ul-oob.xrm-ms.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN096.XML.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Yellow.xml.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\ru\System.Windows.Forms.Design.resources.dll.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Java\jdk-1.8\legal\jdk\giflib.md.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_Retail-ul-phn.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\1033\POWERPNT_K_COL.HXK.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\7-Zip\Lang\fa.txt.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.Ping.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\tr\System.Windows.Forms.resources.dll.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_KMS_Client_AE-ul.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ClickToRun\ucrtbase.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\1033\QuickStyles\linesdistinctive.dotx.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL116.XML.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.15\System.Runtime.InteropServices.JavaScript.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ru\UIAutomationClient.resources.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\System.DirectoryServices.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\Java\jdk-1.8\include\win32\jni_md.h.exe.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessPipcR_Grace-ppd.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProVL_MAK-ul-phn.xrm-ms.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\Common Files\System\es-ES\wab32res.dll.mui.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\Accessibility.dll.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\System.Xaml.resources.dll.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.Security.Cryptography.Xml.dll.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-filesystem-l1-1-0.dll.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Java\jre-1.8\lib\jce.jar.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectProO365R_SubTest-pl.xrm-ms.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-80.png.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\7-Zip\Lang\ug.txt.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\es\PresentationCore.resources.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\VCCORLIB140_APP.DLL.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\LogoImages\OneNoteLogoSmall.contrast-white_scale-180.png.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\tr\UIAutomationClient.resources.dll.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\lib\ext\sunjce_provider.jar.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTest-ul-oob.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdCO365R_SubTrial-pl.xrm-ms.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\EduWorks Data Streamer Add-In\Microsoft.VisualStudio.Tools.Applications.Runtime.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\Microsoft.PowerBI.AdomdDataExtension.dll.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogo.contrast-white_scale-140.png.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\pl-PL\tipresx.dll.mui.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_Retail2-ul-oob.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Diagnostics.TextWriterTraceListener.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Reflection.Emit.Lightweight.dll.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\cs\WindowsBase.resources.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\ko\System.Windows.Input.Manipulations.resources.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Grace-ppd.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\OUTLFLTR.DLL.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Runtime.Loader.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\System.DirectoryServices.dll.tmp C:\Windows\SysWOW64\Zombie.exe N/A
File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.15\ko\System.Windows.Controls.Ribbon.resources.dll.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\133.0.6943.60\Locales\zh-TW.pak.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File created C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Marquee.xml.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusiness2019DemoR_BypassTrial180-ppd.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusDemoR_BypassTrial365-ppd.xrm-ms.tmp C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\Zombie.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\7a0a9f0029dac118e06cc5438fa09c17373566acb78c637755e315fd51197932.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\7a0a9f0029dac118e06cc5438fa09c17373566acb78c637755e315fd51197932.exe

"C:\Users\Admin\AppData\Local\Temp\7a0a9f0029dac118e06cc5438fa09c17373566acb78c637755e315fd51197932.exe"

C:\Windows\SysWOW64\Zombie.exe

"C:\Windows\system32\Zombie.exe"

C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe

"_MicrosoftLync2013Win64.xml.exe"

Network

Country Destination Domain Proto
US 8.8.8.8:53 c.pki.goog udp
NL 142.250.27.94:80 c.pki.goog tcp

Files

C:\Users\Admin\AppData\Local\Temp\_MicrosoftLync2013Win64.xml.exe

MD5 b47b7342e1285f7ad5ceea3ca2f936d2
SHA1 7202aa843f80e72531d4751799f2f9d5218e4dfa
SHA256 ffeb529e40e02a4feadd467c2ec008d010196b4c26b81b1e71d269b07361ed9c
SHA512 560859a63e46d3816db898b1d89668080fd3758f8239eb268d840df26964cab1f5e551aa51476dbadef75c98d9acb343af8e03c3ebc947ec5fac149c042ad6c0

C:\Windows\SysWOW64\Zombie.exe

MD5 051982095815acca2792790c54a9b817
SHA1 f3ce3f25eccb29c47374b2f5a8139d46c1828816
SHA256 3721663b01d41e197fb9a416b902c63422b5e473b9a30ec6864a9e2f42b48754
SHA512 291fb2ef651e5b2d70168fcdb03c76aba8e7bbdbdc194b15e8a1b85b75086d62d14122408f1e13032ba157e0e2f0d97516eed0602a2aa1594531106db8375ac8

C:\$Recycle.Bin\S-1-5-21-1153236273-2212388449-1493869963-1000\desktop.ini.tmp

MD5 b9f88006663695370bcc6ed6e10e7d6e
SHA1 695b0b533e47a09c64d6d49f4f9313f567c5e1c9
SHA256 d43753388608137570b73930b49a44c0f247dac2c286b82bd0335d0f69a63b3c
SHA512 2d76323fa4f950939e21997c40f9ed326b3eaaef9d19dc0e2d2ea64e6b603e6fb201aff6a57ec6a47a19519984ddf0569317471a9385c19d7036581153a5f084

C:\a806a7f7e634bf7796\2010_x86.log.html.tmp

MD5 9d5f393683dc51798e765e761c1ba135
SHA1 0cf7c1d74bb1aa73d889626740439493d7a84dfc
SHA256 bf29ae37f4545205c80ffc26a22473d6eb77df876627e296a4a4e0faac624c5b
SHA512 da456199febc4bee855cbbe9690d6d91986a9299d5e5d84bad5b455ba389d045c28f4e7035aed4ae06350f9ff4acf7565b25d8903eeacac3130f38d9fb5489ff

C:\f518c2ae32873fab6fcffcc19027\2010_x64.log.html.tmp

MD5 b2298d05a6f87be302f9aa3442186dac
SHA1 5b813ffbc67a0b1ce7e11345eee12ea0300c36c1
SHA256 a731ebd7a76d6abe5573fb06375945ca43e96cb3949c2986e0c7a6e26778127c
SHA512 5abfaf6d5f7ee513eaf9f7ac8b356d2d870254c703dba81841a753a71a0ca4814015208ca5602c828a63b8cdffbdaf08371c47ece385b01d9661c93388f00671

C:\Program Files\7-Zip\7-zip.dll.tmp

MD5 b2bcffa2921728e1d91f611077cf083f
SHA1 02282924393b8256fd69b305140f830f4a213f9d
SHA256 8ea767b894150603889ae129c5cb4930a69930c5c884d1b9bb571aca558a865a
SHA512 a07b923138d4e8c18f0d8df11726ba8af50964bbd2f72eba014804d8389f79b7dd3765ee89bd0298d5e85dbd55bc48a224d49a07f349fa920180f9892c99dec1

C:\Program Files\7-Zip\7z.exe.tmp

MD5 0d83b237737988eafd278d4ff4503105
SHA1 8341e3fe0fa79b0ea7198fedfeb5a10bf4365a13
SHA256 86168e53832fd41ce7ed27ec698b4eafbd70a118d884d7a3bdbdf75abb693189
SHA512 59164c2ca793b8c689cf0dc1d604c77db92ca97c277cad7ffdd641beaeb5da3b77769ab6ee643d7ade071adf4230926fba36502cb0d6b1e3aef8c7618ee3e556

C:\Program Files\7-Zip\7z.sfx.tmp

MD5 805b92000bffe3c5cf8f28ae80b8cce1
SHA1 2e54d94ade3445f952cdef6bb484a5ae700d7bda
SHA256 80d13c72c478007169a3c6277a82f579a0d10974bad142b9c0a8ed947628d692
SHA512 68f8a5fcd4f16a467ba9f036b51f0ee9aa18b5eae05ac431492c832f7c25ac317c10b02b56d834299065c0a6639101416c27ebc5518f3172c3472b932991f6c1

C:\Program Files\7-Zip\7z.sfx.tmp

MD5 f52a29488d82ce03d649c8961f4db259
SHA1 efbc52801fde08fd001cf321474bbc6c04030e50
SHA256 6a9ba47f337bac2c9da39ad9f9a26636b754406cac6f5e6379ebf969cf311736
SHA512 25a367befb73e884944adf6a1576cdd0d5b73748fc25af13ce25c9bc7a233dcf523452f862240e53a4f6d5a3b7d41078523872f0b8b7fd19b0ad05eb223d4ab4

C:\Program Files\7-Zip\7zCon.sfx.tmp

MD5 366257cdcb20ee4326511bae7c761d99
SHA1 2e7f5f40b9021c3343aeffd746c280f431e535bd
SHA256 5c996a14faef3923acdab2721fb0cd5d45e96e75c397456daa615188ef4b63a0
SHA512 dc21ee14affff31998474e2df265f30b6e6db701f0a61c2b8eb7b9161781ce172833982d771e409f33fdaf82bd8bb79654109002bcac0d223bb93992050add5a

C:\Program Files\7-Zip\7zFM.exe.tmp

MD5 34460be49ad48b2142f0c2007d7a2b60
SHA1 338094771d63cf119452b59a74b43aacc1a9d6ce
SHA256 309e9c8db31f8d38798e7d9402e81715f0cad86558cf7f0ee520057212c3003b
SHA512 37e00dc4ab50a25d1a3cd94e68462dfd38a437aedf1aee06162da76a5cb78d7cfe5052ba51ce12f0121ce83eda002048079496fc00ba15f72c7a54f5a0206643

C:\Program Files\7-Zip\7zG.exe.tmp

MD5 d4472cec5425cabe60a4628009f50c7b
SHA1 ce7c400ceb340baa21510253a691996c81194b9f
SHA256 7e6038ffe86fdfd99169cb40a92d63338443866d49a6863acd544adcef6acc70
SHA512 2df765f9458696750af0578391045b5b13130af3ac57f8595aa3e88864e3e7704ec2032f9cd3205e1ded89d3a85a02587d02ce53dfb61d22e83a4bd88bc46d6e

C:\Program Files\7-Zip\Lang\af.txt.exe

MD5 972c1bdaef753a09b58e1b4a6bb012e2
SHA1 a8f5e1b109e0adaac89dd45537b8e3488aaad525
SHA256 36d73d67713e0ec242ccf02f1b32e2c98b27c6a6b582cf0f4f7d694587da9c51
SHA512 43bcf88b284e40bc8f480200aa9878d38a729b26972b61389de2ea1efbd54a45df84ad80b0bb359615daf55e59606f1a0edeb17b2170f80c41d8a940855bd24e

C:\Program Files\7-Zip\Lang\an.txt.exe

MD5 e08a5d1bd7abb529724d3d0bf6db90a9
SHA1 9fbfca856d9aa387ee3bc74d20dfd5b8c3ee6c2f
SHA256 d66fa2a48126690594f48cc93cdee5aef6bc61d4e7114b7f928fb8ff161e0adb
SHA512 c914dcdfe9c7f71da9f82058b3ab3690b2df9610c3da6744e2f510e7d39bb04218c2796419d3c3572ba3bf1f6d554ec0c75688827e5099b03c793e8bba82df5e

C:\Program Files\7-Zip\Lang\ar.txt.exe

MD5 38019bfd6fea742884d33ccf27cbf91c
SHA1 553d9b4508a9b1b01ae9c6db09884931e4486fef
SHA256 6f9a5d2fe45ffc819b8f7377eae87fdb8f4248b87e2ecf41e954f7fa6f37a5e9
SHA512 3e2ebf8c13d773c9a36856541b79c2ff4f86cd4e964ffbdffeefa874d3fb899081f086faa49f159af30613b5afbd331b935a9846c752d675d22badaea1b1db12

C:\Program Files\7-Zip\Lang\ast.txt.exe

MD5 5ffdecca59dd9e3af1fee7bd07c5fec3
SHA1 9e7716ce2d8bf4a8ae61436e3a6f4d1c55a6b29b
SHA256 5f954acf1afe5996cda6bdeb8a48d301ff9a885a04ba7feff5ad18f06cdfd105
SHA512 80ad8195bf1164ad06b45cd1bd52e6b8d1e26560173bcb98e644550a1f74599bd99421cfda4beeb543565096a8f53207b47dd97f556ae958c417cef89f57bad6

C:\Program Files\7-Zip\Lang\bn.txt.tmp

MD5 fd662de70a0705fae38300c2557cf0f4
SHA1 be302bb1a73fc1b23a480a75d2e30db3c42613cd
SHA256 ae5a5709deaea72571e3e30e7653c816b692327acd824a41c1127c5f87e2a87a
SHA512 312049dc3f7adb83b4f6d16d245f02449b98a06fc8e4b151ea6a91f2c4329aa74bbd45a79c85cb6b0486b411d39fe62693811244f9632c580f1946ac8b01c892

C:\Program Files\7-Zip\Lang\br.txt.tmp

MD5 4f3379c21516f94cdfa6f7a9848d687e
SHA1 517a9f1f9a292baae9aeec0b414357db94286271
SHA256 affce1f4f377078d4f7c0eb3b927d39f1faf9dd57a57d45e3044577d6ea0e10f
SHA512 229624ad0d1a9afc7c18f005a7b0b0d1063620eced32b279fd8a79697d8fd9f309aac0c68451aff9324da818d0cbcbc12f826fdc250bb99fb326262b3cd93e56

C:\Program Files\7-Zip\Lang\ca.txt.tmp

MD5 cf447bb37053fcae7346630e1ae57ca1
SHA1 0f4c88f9a64835a8cf964addd928207e65da393f
SHA256 6c26efef6be3df99a0e7385b878bbc90be0cdfad6a0801fda9cd4fc75da0d620
SHA512 8466c5fc3d63970c3c516c1c63d0368295aeeda3ce5002ef237d8753a8bdb134bb2ef8e8a0c857dddbfd0bd78260c8f786adafdff3d9db7e3ca703c3dcc817ab

C:\Program Files\7-Zip\Lang\cs.txt.tmp

MD5 39cec5d8f42db8a14fd8446bab4c29aa
SHA1 70c740c80bb951c9d00d503e499b3b8e99483013
SHA256 01d8c48c86a5b79e74ee845143a9939c11db99d0b48cf39c1a340a3ff509b48d
SHA512 a430c9db37dc39424a3c17e379d341062d3a1d3def3ab92e8a4449f0b51075b135bfd79625816c9ce1cf191ebf7b463a978a6b3b01817f0368d32629cbb6fe25

C:\Program Files\7-Zip\Lang\cy.txt.tmp

MD5 775bb7fbcbea3148eaa6e0907895ebb6
SHA1 f124e08b567654b6a77532cf95864a71fa2d774d
SHA256 ce5c064fb9211bcba5fe5fc9675c255dcf3a522f362212e3bf1563d7877fe708
SHA512 e6f3ab22d0013bb06ae074401185c5d5ad36ee17ad54dfe7d9e30f9aca05f0b0f3b15f54cd6cd8f0a8cfe2f8ed95494970c1426e04710a06ead2b8fa19a8f5f1

C:\Program Files\7-Zip\Lang\de.txt.tmp

MD5 92ac07cc7442f3b115a3222d3c83f3b0
SHA1 956eca662b597476363d4fed41c2edcd470d470d
SHA256 2110ac734f70337e8e5d3bad677d8ac694162e187652e8d9658ec4670df8ce1e
SHA512 7b9f89e6415c40e32fd738222b412548c099e3a4f6bef6939a40620345a5422b1a56637c4b541e44894290c52ce8b130786a491c060febfd7df3ef5ef5174cfd

C:\Program Files\7-Zip\Lang\el.txt.tmp

MD5 5c05b0e608a471aa5e0716fe3bd661f1
SHA1 a89d1d55f81ddddaf4befcb159fc9dbe8ed66e1a
SHA256 56e883592ddfc84e49aaea9b77a3d9d53a924a5ccd87f0c24a2e4991086c4e68
SHA512 c1eae1dd73ab6d0b205c62e1c23ebb816caf41500ebae5e439c928f325a3157810f2f5c3d0836f9acdf663da343509864f8637b8f91cceebdc8d5f8649ea0e5e

C:\Program Files\7-Zip\Lang\eo.txt.tmp

MD5 0dbac6b8c6cb96749d9a8d1e7ddc30ff
SHA1 5e7e71616996909c7a83e37af32e790ad798a552
SHA256 af3adf712dc5f2026d79b08a9082534bd69a643b8e2c0a6e7b2d576cf04d47cd
SHA512 81cc65ce792791d8a6df0675e152b145ffc8b503338bdb130ff40b9e2fc9b933c001ccfd9083e1cf219d88cd077b1d32c54d92c7aeb0499792e53bdd2ff4d1df

C:\Program Files\7-Zip\Lang\et.txt.tmp

MD5 afd7c1cc0bb1d743e28a46fb3364aaa5
SHA1 3f446510a7bfcdbf2c8c41907f634f8d5db9a745
SHA256 af2418360bdedd85ecd1172e4797967dd63adc57ad5a53b0717df803a514fc6e
SHA512 45fbc580b97a7aa436abcc66406bb3968531ba5aaf5c5ced6f41eb33cef4189f149510afe3dfcc61f0370f4fae507467775882ea6127c353db3d307051333b9a

C:\Program Files\7-Zip\Lang\fi.txt.tmp

MD5 75b92f73791f62f890720710f71e3cda
SHA1 0c116cc13d4df7cde1f836e9120b24eece5dedca
SHA256 54dfd8bf1845d12ed76cdbb57048f30795c7d7a04d87d07a0c38388ca6f19c30
SHA512 99c67d5c9e809234f25e5671c8e9f60df3e125485984a161fe365fe773b32bbbc8a352b4bd45826c04003d819d0fbd8fbaaed7b2b8ec597d01dabcaf04b71f7f

C:\Program Files\7-Zip\Lang\fr.txt.tmp

MD5 cd0eff2fdcbd26ac974fd9c34f18cad5
SHA1 3a6ea2480834c11fd16d58457c9966ff7a957b56
SHA256 3d3ce383110b95820aedba34ea0391bd180957ce23096eb807ee96a94921fc60
SHA512 6dc38de95e4c27badb969f930b5c3326827cc478a4c41b5cfb698fbd7d9810c9e4ce15d6f9a5d83bb179a18a05cc5828a650c130be93dee964d0f3db44ad1983

C:\Program Files\7-Zip\Lang\fur.txt.tmp

MD5 53d271e85d403a39469f41f555e7b03c
SHA1 bc90700a4871f7572ec8a7afca705fe3acce3869
SHA256 663cc80cb4b2db170e586287bb5554e1e34d3402d607d8618f63eef76ea71385
SHA512 2baf16203a23ef6f690c494a6beb6c8db3232d0cc441f5ae510157f34e80db57b0fbbf1576b79e0f19dbdc999d2c5f5d20a46d649b02843a938283305933a0da

C:\Program Files\7-Zip\Lang\fy.txt.tmp

MD5 c23a80f1ab1959b383c4374b296dd4b6
SHA1 f3796e8319ffb1960c6121f81134710501d28bc9
SHA256 8d0b27c9f8121c8d2a853ce0260e7af8966d2120d37356c58f32b687eec7fdbf
SHA512 82ce741e6b3c36086d865a514bf3148153b335b81e93c3292a56d186a6ccb7d73ef0f286bd65cdc484db8e1b813524f98854dacc34823043308b12d7a2e17a9a

C:\Program Files\7-Zip\Lang\ga.txt.tmp

MD5 1ba5a38eefcd109740a790f984a368a0
SHA1 9304eb4cae0bfb9814307e3f5edc41d2206cc3a4
SHA256 bbd9d53b3a95c73d90e45acd534272a85b5475e94cde57c8dc2522e497caf269
SHA512 93b609d3ff4caf8cc210eb0e5ba646b98f5b5f32d3bbcc55a82d170095cfd45e0ec678da11b6dc4e7b41b652f69dbf3ac0c1f0ab936c9512ab3f360c235e0edc

C:\Program Files\7-Zip\Lang\gl.txt.tmp

MD5 f4f61bf074d1f0fccc5e1c2f03166d83
SHA1 9d30dc85bd8d3bc255114355c7ab118bb9c660de
SHA256 3871c835c6b60f095df0b7f29ed056cdee2bde309b60429aec800984eddf0c57
SHA512 a667fe965ce134682e78725fb72201acfeb1389ee05584ded123b9588154e9fa31b8feb086659be96e89973557a640d7b5d6f36d755771f09086fac3754b8a94

C:\Program Files\7-Zip\Lang\gu.txt.tmp

MD5 d50627a0b5b0c74801393a0ab4065eb5
SHA1 3e417a69a4721237bcec571228732d22a8931c53
SHA256 8cfa82134f182008d2737b2ec79b6b110a40cbb7cbd8766e01b40484c17b0cf1
SHA512 fa74eeaa21d6cb388838fb51cb2a8fcea32f0aaba90822877040d8ff38202064108092dd591a6e67ceaf76ad9432f6284cf8f38c82a6bb96b15ae9a9fac165c5

C:\Program Files\7-Zip\Lang\he.txt.tmp

MD5 8550c6a9a00b2aa659b923f32e1433e4
SHA1 02c0944a22e5454927e6ae4165ca99c644c23c96
SHA256 02170ec22848b0c4a4c3039864134694a71191b71bcd9e1004331a2908ba3f7f
SHA512 af2d4f9d126782a44a0351d67e37ae5750633b0e0befda02d682ef6dc324d36e94b174805ae17e374d7f49198a0851da68112400214b93b884c64b113579e329

C:\Program Files\7-Zip\Lang\hi.txt.tmp

MD5 de5766340e313214df1f284b4acffce1
SHA1 a72ee671eea6117126e051a4bc7b55bec0b6c5ba
SHA256 d5184f09e3a31331cbf997c4833fec24a3b647f703a803cb38704c268550dbbb
SHA512 adf18d19b30bddccd500cfa68f2438787d3e555ca9c918cb771fb7c0f45db9b59cf86ded63381e7905b3d4c2a27009d20bf6b9c98dd21c9d24facb85fd1d8802

C:\Program Files\7-Zip\Lang\hr.txt.tmp

MD5 082f15ddf2554865a8cde2eabfeca40b
SHA1 1db0aa8662d0c98d8cc40a42894c7f9e2568c2fa
SHA256 0b7924d96dfb058750a661017762709efac7d7db75bf4fcf8cea339129fea80f
SHA512 d80a96553f01d68806b0716380fa6ba33053eb0bfbea61870cd3d5a4435b4c94c5e1bb18a422c1adfea0739db336955eff160b7d459c2372fb70e9d959cac417

C:\Program Files\7-Zip\Lang\hu.txt.tmp

MD5 0a2ed11bcb46a0b3f6f6c8f53ca81cc1
SHA1 1705a1f7c2af52d9fef90e42ce12937e0d82b31c
SHA256 e5e4e22fd002a3acc00318cd15b063e6980a8f863aaa7ab1945ea788a1660854
SHA512 2ed43694cf403fa9d82a6406864df79dbd9cfec2548507b432fc991d62b7696635a97ff2c4d9888e5455eb0b4ff0ccf6c6ba6b59bd199d2d7ed08e466c1c1955

C:\Program Files\7-Zip\Lang\hy.txt.tmp

MD5 28dca6b02041c65725bc58305623e78b
SHA1 e0fe176ce79e6c51fb831ff7a0124088b24a13d1
SHA256 268fbc519688510c59c1d854f30f4dc070b24b3a462827a30e956346ea9b56b6
SHA512 e1792b264f4f0328672b348945ae5343c7f1d96010612845de38424557a5703904aaf2e7e84e79a6eb45cd3c49d6d708a49ff3e4e480e330e7fc4606f9664871

C:\Program Files\7-Zip\Lang\id.txt.tmp

MD5 9fd91644f7c0372a10b2d5ab0dedb0be
SHA1 93071cc4b84a33d00e55439250ed21399271a350
SHA256 6ff55e1aa17d26f5e1101ce8af5d2e1bb576b8adcb07ca389e7cd77b64fe47ea
SHA512 6aafec9f79df22064a33f0dcbc1a203c2837306f66df6ab953272ffe8fbaa3d4b8e4e45c35b15078daf2b8c1238ae9df4e8d138407d2607aa16b5d1e14b9785a

C:\Program Files\7-Zip\Lang\io.txt.tmp

MD5 d2ad3267b74ad74fbb81723480b62464
SHA1 61cd797a6ee23a2ea104315d15597871d79271e1
SHA256 571fa5cc1ccb3b414a79d17ec69ba44824ba150a98445388c5372ea080a251fc
SHA512 28a53d5d04cdd80eefa7ed89a7807a432db79dcb149cd981cea515f7f1373c47349850ba5fcaf4c3ac51867db1b67a7da339d133646df221016ec427a8aeb065

C:\Program Files\7-Zip\Lang\io.txt.tmp

MD5 77526a6321ac3ee4d8af8eeacb784cec
SHA1 4d716dacd6e1822579f53aaad2bd2f1f88b18dda
SHA256 1d185daa98bf3248b2ed00cf6e0fef9625214454e23acc3b085a51cfbf058bdb
SHA512 47d9e863c54ca175c4adba5954da48ed0ab8c4343d467d8f9a0a55034024211095368e3cb0098b08f8536da407d370f876806f1adf91b826d63e3c0117162366

C:\Program Files\7-Zip\Lang\it.txt.tmp

MD5 0ad90ffb1253b70b97c78b9079c6bc77
SHA1 34bf5440c1ba25ed3cb82fbf8b34be232219645e
SHA256 3fecf2f9ae2651401542d01d5a4bd33a21acb100cf788517ae9d35f5225f79f8
SHA512 d1483fb0a610826904f54e13af82c4db67b6fa67dd2b05638b05a25149a69975ef7f93354d2cf7f86f625997a4765d719d2f240711d272a7487c9f9d1bbdabf8

C:\Program Files\7-Zip\Lang\kab.txt.tmp

MD5 2d993fac54cfbf30b392a99ef8ded7c4
SHA1 7280b8ce152d79013bd14d7b6c3f25fc00fdbfbc
SHA256 92ceee071f40beee98e5b8e1ca7b0b626ce2cf0b8d4080848a7e6cb77d053871
SHA512 5fcd9dfba4a848dc64d49996a2eeb0d3f67b74cf547c576957103e99ca81f024d35781211f5e32667d299ef4bbfc28f397d897d75be4dd51f1cb34b0b8ee2272

C:\Program Files\7-Zip\Lang\kk.txt.tmp

MD5 6b900c8ef18e13e7e05c914c8b4dedc8
SHA1 ed621839d0d0302314ed42796c241851d7d733c1
SHA256 85d3ec953ad0271fb0ff906129df3c01c28769f5f9edd96650cf6ca726c47f85
SHA512 928c32f7d7b913e04c0bb4726b95bab05edf305f8932ab7785192378e81ca3bf0c8c82bd9c6467c22b6b27df4978fc59e09caf2c8f131a385558a4ec493f9f5b

C:\Program Files\7-Zip\Lang\ko.txt.tmp

MD5 30ea578b4b93e25357faf243600ad0e2
SHA1 14aebff70df8a2800205500531a98b4b26f4f15d
SHA256 16b63fc5e1465f1ab312fb517edcd76c897658dfde2e8c449cbf4e45d9c58333
SHA512 e3af7f86d7fe7b3e26daa40d51e91630670e115ec21a313648374ab642d89cf916d2eac183e7e11086862e30119c4b36d52d8bdd5683ffbce6d0a30f44ffb542

C:\Program Files\7-Zip\Lang\ku-ckb.txt.tmp

MD5 ab817064280b6ed096512949bed714b4
SHA1 999f3c66fa30aa9e226d7a524bd75108cefec644
SHA256 975deeaf6065e3ee3587a76353078f0e745931142f919c6167e5674d14ac36c8
SHA512 dd01a1ed1f4acf8c83b328913741d03bd5a7a8f35063e3ba49ae896a8dff9307ab1f5faa13a92cb2ab76075e4579fbb6e49b6541c45466c3625e02e9858958ef

C:\Program Files\7-Zip\Lang\ku.txt.tmp

MD5 04b419c44bf164e98eda9de22b69f598
SHA1 398815f6837e30d504577d9fffa7038d6d823b33
SHA256 7114b12138128f37acc1aec45a00272959261c6e195e3d51e79d9790f83f8363
SHA512 bf2aaf176aa96e90b5dc9d8c76cb3b3b694fb59913e335491e2f07d9770f1f2b1c03f15d8df5d9aec37bfeb56447bf02411e11dee70a9fe0f3ca9c73c5675d81

C:\Program Files\7-Zip\Lang\ky.txt.tmp

MD5 6dc624e8be499320c74d0fe8482b39ad
SHA1 748c5ba2c012be2fafde96ea8362ac59812607b7
SHA256 dd548168aa4785a13f70806f86ac71398e05f63942726b3d17d761ebc424e131
SHA512 f09e8af2979e350899da4fa6f9604646006882b080f5bcfea3f4cfddda61276aace65a85aadd612ab6717f342b27cc302d789e62438eb969d755d72b5b0b56e0

C:\Program Files\7-Zip\Lang\lij.txt.tmp

MD5 af7eca535db70afb1adf4ce35b0fe5fd
SHA1 88a87ee9abcb2024de2752e3bce0ef420ed3c4ac
SHA256 510a12a92bbf6a588a85be55a726616a6264bebf8ebcb5788510abd69b67d034
SHA512 f18fba9f8a087ad41e11ba21bfc68ec2c63634af5cd4c6422388090773b2b2b7098839ada245e101ca1d7d03d6545c387372ecfd8d9c97988e0fea9158846bfc

C:\Program Files\7-Zip\Lang\lt.txt.tmp

MD5 0599be7df0cea761e583d37d52ba60fc
SHA1 6ef54df4c389da20bfcef97f6951f0307924139b
SHA256 8ee36a2e9886a62c15492f5aeff902b0f1d55167cac730f14046fd014fb069a5
SHA512 a45fa6d4f571a226c1717be3ac7af2f8904dab03eeca745c75a2689fbab90c5db0691fa8bf306972751f06c1751a4f2735f1c4941814995f29f04f9f4496f59d

C:\Program Files\7-Zip\Lang\lv.txt.tmp

MD5 bb3d3f4e6eac57e5dceb5cd18c835034
SHA1 d589b9a93ecfe3febea16ef12061510022ec590b
SHA256 62e37fef514ed0238b62f1981ac9d29db27f4e66e23499115bff81ee9b7b5e9a
SHA512 606daa6985c68e7888b45af98cfada5ecd7775646a55cfee930e755c541e9ec9a0253b2548a5cd2d3dfd3c78844cd0a31e469293f19d3b908ac57b57b3388cf7

C:\Program Files\7-Zip\Lang\mk.txt.tmp

MD5 f22780ca9a32a83a2bcc780e9d22cb4e
SHA1 7fa6c8d51fa8b38c43511c3a6206ce9693e56999
SHA256 96b622ce62a400e6ba1b89ef49ff7ceb5decdfa5bf39de232eeb2ea4e5d8cea9
SHA512 e3756bcfce41ba3a1836566da8fb5967259620e844e2947cfb8f8b4834b4da4f160de21b347db98f63a09d29d22cbe1ecf9b4166c258e9d24511c6a5bc592992

C:\Program Files\7-Zip\Lang\mn.txt.tmp

MD5 211659e5b93dafeb40ef41506958998a
SHA1 25dc7401d0963eb4449193e0075e68fe4510ac11
SHA256 9ec1d80e29ab9df1546d840fc13cff396f5ed2ecafde22c89bdab61df76cbaaf
SHA512 418f15d25b481fe988ba99771d9ee4e3fc3aec5c51f0800dd122b845e0bd70d97b355b4f0af348e55d360c0693f31f0839b3aa81569001ffe47e09626a3c7a44

C:\Program Files\7-Zip\Lang\mng2.txt.tmp

MD5 9fb303fff4ff15f56747e1c728384722
SHA1 2d473eaed52d83a318dcb4d1f759e68f5db3c6f1
SHA256 fda0a2d4c151b10ccd44a937419241a22609f8979afebfb4839ee9ba6c2fc710
SHA512 4891733a6788df79790c3d7febf784d87afade8c24d1c6c2ccc1a6fcaae815836cf5121333d342bf12059e637a2e7f62d6fed12e102e7e2ad8b21a891de6f198

C:\Program Files\7-Zip\Lang\ms.txt.tmp

MD5 180cd6c47b96ea27946284b8b8a7c47e
SHA1 f7e3b9d12b0dcbfaa2cd005cc915cd5a1616d522
SHA256 1ae110b12bd2ea7645179b0fd247c78a7b080ab6ca270bd00d651fc49c789213
SHA512 10c693a1bd24d2e639a28a2b8146c6d7647073fa7e37ea579aa48e7b06651fd656e1d895b29099a78c84fc95eafd4cee86f71d7ec77bb94b89d1584a29a48765

C:\Program Files\7-Zip\Lang\nb.txt.tmp

MD5 402420a14d0697e6393a8598b5b972b0
SHA1 b4b6ffcfde94d651e09457eb2249f81a977926d0
SHA256 ffce1fd4643094b71a94a1dc913a789887ec46ed914f1f0484713a2e93e29baa
SHA512 1a30168f0a93e93727c1a4c749ebcb7625c0802b547ed00db8eaad2641f56967b95f5abbb6d5f9ef64f9f45bb0c750f631d5c294b6efb6a81cd5168abd387efc

C:\Program Files\7-Zip\Lang\ne.txt.tmp

MD5 8fe7a55489fbfbb7f5354d9dc852eeed
SHA1 fde8c86f4c38d96101830bce0e58491095b7de52
SHA256 5c2804624462e8968390c376687fc296235d28e972da5a07ed2bf0fd14ba021e
SHA512 9374435dedb5f50ce6027ef535a79bc70d3a37b35b85a62bc2b40353aa4beb9c967cd987a59d2b4225c596d68da849290fb763fb061376d9924dc6b78d7e364e

C:\Program Files\7-Zip\Lang\nl.txt.tmp

MD5 e3a07eee394217a38d870c2a076a423e
SHA1 7239815c5a3a39be9eb57c2bc87665dcf4ec2201
SHA256 068daf441e00171741cce7ce7b09b3c40c70c9930ccbb0652863e5a57665badd
SHA512 f189714f95a4c1d57f358105b3c46d05cd076fb410d31ceb336217217cf7f6b0f8c4a5ffa599a79c3ad01cd4eef297a83fdc05111fafeed011e4225fade84e4e

memory/5552-1214-0x0000000000400000-0x0000000000407000-memory.dmp

C:\Program Files\Google\Chrome\Application\133.0.6943.60\VisualElements\SmallLogoDev.png.tmp

MD5 693b5a6121245f672f582857654423d1
SHA1 a46be94a0865f9919057322dea5d5eddce3e84c2
SHA256 8a3dd254869d57bef85b33aa9d5e77845dfd93e199081c4116497ab8842e3df8
SHA512 b90faf5d7f81264f7017dc356e011b045413ac139fdef7846d2336120e18f92d9b4c8f5b17684da85b8670ea51f21788f6454f9af87a98d75039a8b7d0c9a1ea