Files
File Path
|
Type
|
Category
|
Malicious
|
|
---|---|---|---|---|
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:54:21 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:54:21 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:54:21 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:54:21 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
|
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command
line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 13:54:21 2024, atime=Wed Sep 27 04:28:28
2023, length=1210144, window=hide
|
dropped
|
||
Chrome Cache Entry: 100
|
ASCII text, with very long lines (64616)
|
downloaded
|
||
Chrome Cache Entry: 101
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
Chrome Cache Entry: 102
|
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
Chrome Cache Entry: 103
|
ASCII text, with very long lines (65450)
|
downloaded
|
||
Chrome Cache Entry: 104
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 105
|
ASCII text, with very long lines (65436)
|
downloaded
|
||
Chrome Cache Entry: 106
|
GIF image data, version 89a, 352 x 3
|
downloaded
|
||
Chrome Cache Entry: 107
|
ASCII text, with very long lines (3757)
|
downloaded
|
||
Chrome Cache Entry: 108
|
PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
Chrome Cache Entry: 109
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 110
|
ASCII text, with very long lines (61177)
|
downloaded
|
||
Chrome Cache Entry: 111
|
ASCII text, with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 112
|
ASCII text, with very long lines (65536), with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 113
|
JSON data
|
dropped
|
||
Chrome Cache Entry: 114
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 115
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
downloaded
|
||
Chrome Cache Entry: 116
|
ASCII text, with very long lines (64612)
|
downloaded
|
||
Chrome Cache Entry: 117
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
||
Chrome Cache Entry: 118
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 119
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 120
|
PNG image data, 275 x 60, 8-bit/color RGBA, non-interlaced
|
dropped
|
||
Chrome Cache Entry: 121
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 122
|
ASCII text, with no line terminators
|
downloaded
|
||
Chrome Cache Entry: 86
|
HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
|
downloaded
|
||
Chrome Cache Entry: 87
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 88
|
GIF image data, version 89a, 352 x 3
|
dropped
|
||
Chrome Cache Entry: 89
|
SVG Scalable Vector Graphics image
|
dropped
|
||
Chrome Cache Entry: 90
|
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
|
dropped
|
||
Chrome Cache Entry: 91
|
Unicode text, UTF-8 text, with very long lines (32153)
|
downloaded
|
||
Chrome Cache Entry: 92
|
GIF image data, version 89a, 352 x 3
|
downloaded
|
||
Chrome Cache Entry: 93
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 94
|
JSON data
|
dropped
|
||
Chrome Cache Entry: 95
|
GIF image data, version 89a, 352 x 3
|
dropped
|
||
Chrome Cache Entry: 96
|
PNG image data, 275 x 60, 8-bit/color RGBA, non-interlaced
|
downloaded
|
||
Chrome Cache Entry: 97
|
SVG Scalable Vector Graphics image
|
downloaded
|
||
Chrome Cache Entry: 98
|
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 141305
|
downloaded
|
||
Chrome Cache Entry: 99
|
ASCII text, with very long lines (43896)
|
downloaded
|
There are 34 hidden files, click here to show them.
Processes
Path
|
Cmdline
|
Malicious
|
|
---|---|---|---|
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US
--service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2224,i,15247115325435003209,870430601353658888,262144
--disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction
/prefetch:8
|
||
C:\Program Files\Google\Chrome\Application\chrome.exe
|
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc"
|
URLs
Name
|
IP
|
Malicious
|
|
---|---|---|---|
https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc
|
|||
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_presetpasswordsplitter_f7fbb7540d7be2ae771b.js
|
152.199.4.44
|
||
https://logincdn.msftauth.net/shared/5/js/reset-password-signinname_en_G9nzWSnqBfHRIaMd4FEm5g2.js
|
192.229.211.199
|
||
https://esantegouv.sharepoint.com/_forms/default.aspx?ReturnUrl=%2fsites%2fGED-Calypso%2fespace-projets%2f_layouts%2f15%2fAuthenticate.aspx%3fSource%3d%252Fsites%252FGED%252DCalypso%252Fespace%252Dprojets%253Fe%253D1%25253A89e0ab13bf664a7a934564dea0253fdc&Source=cookie
|
13.107.136.10
|
||
https://aadcdn.msftauthimages.net/c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/illustration?ts=637787140288729782
|
13.107.246.41
|
||
https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true
|
|||
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_msa_3b879963b4f70829fd7a25cbc9519792.svg
|
152.199.4.44
|
||
https://aadcdn.msftauthimages.net/c1c6b6c8-nowj-am0fesmo29ge-ccj9qvhqktmypdk17lvyq-tu/logintenantbranding/0/bannerlogo?ts=637719609708651854
|
13.107.246.41
|
||
https://acctcdn.msftauth.net/images/favicon.ico?v=2
|
13.107.213.41
|
||
https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2f508449d3-d632-429b-97ce-f8ad22b3a7e7%2freprocess%3fctx%3drQQIARAAnVFNa9RQAEyabeyurV2KoBdBQk-t2X0vecnLW-ghmw9av2oXFesHy0vy1k27m2yTbO0HBfHkoYde_QDRg0I9KJ6kp-KxINRrf4FU0OLFerOLF4_FOQzDHIZhZkyAJVgZBX-hyj2WQaMBZZ_11D9IRgrFl9IX7dcB9_AF94w7_bn0fJPXmlnWSSvlMktplLH7cXexlDZpwjpxGGUlP26X6404aaflgDVot5WVaNpZ-sjzuzz_lec3-xaq0FUQcTCBxLQcUjVtRcfQtS3HxQYmqgVs10LIIKZKHMXGsq27KjpyHMuxQFWHOsSaVtUdy0Q6AlUL6CYkqmtrroaJBk0MbU2BqgswMh0dWHt9w9NmN2sqPYqTcIX97Mv3OtY7cZo9FXLTNniwKRxrlA_CqAYMhEigyoGuKjJSiCcT7DO5YdBAUTyVYoZ3BDHusCgMdnP8fm4QCJWBgUKRO8ud5w5z_Kv-o2nPrS9bb-Mz7jswd_fN72lup788F2be1djLWGZ2HYSJQS8hOJka5sxluxYnN2_PTjWntJmLdmJMKBW4IfIborgl5geEIicJ1jV4IPKPT3Bb-f87afckvzcIC3k_9hIaBWEwMgqhFxjAUGUDMyAj6Gmy52FDBp6PVN-gBjPo3iAqiH6Lhu10ZGxVCoN6Fs-zSKqsSkvttO77PbVIW12WSpU70lFN6d7a2tqjoWOlbw9xh6def_vxaX37yffJ_eELk2ltfCkN0ZXOcnCLRE2dZrWV6xTd8Fut2RkLRVptvLpw01_w5yfeF7k_0&mkt=en-US
|
|||
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_1ito3russhq-9gioj-zd4w2.css
|
152.199.4.44
|
||
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pstringcustomizationhelper_ea3e62a2bdfb2b2ee8c8.js
|
152.199.4.44
|
||
http://knockoutjs.com/
|
unknown
|
||
https://github.com/douglascrockford/JSON-js
|
unknown
|
||
https://login.windows-ppe.net
|
unknown
|
||
https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets/_layouts/15/Authenticate.aspx?Source=%2Fsites%2FGED%2DCalypso%2Fespace%2Dprojets%3Fe%3D1%253A89e0ab13bf664a7a934564dea0253fdc
|
13.107.136.10
|
||
https://aadcdn.msftauth.net/shared/1.0/content/js/oneDs_f2e0f4a029670f10d892.js
|
152.199.4.44
|
||
https://aadcdn.msftauth.net/shared/1.0/content/js/asyncchunk/convergedlogin_pcustomizationloader_8e14dcf0e3ff5580d170.js
|
152.199.4.44
|
||
https://login.microsoftonline.com
|
unknown
|
||
http://www.opensource.org/licenses/mit-license.php)
|
unknown
|
||
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_986f40b5a9dc7d39ef8396797f61b323.gif
|
152.199.4.44
|
||
https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c
|
|||
https://logincdn.msftauth.net/shared/5/images/microsoft_logo_ee5c8d9fb6248c938fd0.svg
|
192.229.211.199
|
||
https://esantegouv.sharepoint.com/sites/GED-Calypso/espace-projets?e=1%3A89e0ab13bf664a7a934564dea0253fdc
|
13.107.136.10
|
||
https://aadcdn.msftauth.net/shared/1.0/content/images/marching_ants_white_8257b0707cbe1d0bd2661b80068676fe.gif
|
152.199.4.44
|
||
https://logincdn.msftauth.net/shared/5/chunks/oneds-analytics-js_54b1724af1b05e2ba3db_en.js
|
192.229.211.199
|
||
https://aadcdn.msftauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
|
152.199.4.44
|
||
https://aadcdn.msftauth.net/shared/1.0/content/images/signin-options_3e3f6b73c3f310c31d2c4d131a8ab8c6.svg
|
152.199.4.44
|
||
https://aadcdn.msftauth.net/shared/1.0/content/js/ConvergedLogin_PCore_4aBF4cdky--I3Cpch7JoPw2.js
|
152.199.4.44
|
||
https://aadcdn.msftauth.net/ests/2.1/content/cdnbundles/ux.converged.login.strings-en.min_0lriinjhzchre9aqecvmpg2.js
|
152.199.4.44
|
||
https://aadcdn.msftauth.net/shared/1.0/content/images/picker_account_aad_a8332c62695d74843a11daf39a74e552.svg
|
152.199.4.44
|
||
http://feross.org
|
unknown
|
||
https://logincdn.msftauth.net/shared/5/images/2_bc3d32a696895f78c19d.svg
|
192.229.211.199
|
There are 22 hidden URLs, click here to show them.
Domains
Name
|
IP
|
Malicious
|
|
---|---|---|---|
dual-spo-0005.spo-msedge.net
|
13.107.136.10
|
||
part-0013.t-0009.t-msedge.net
|
13.107.246.41
|
||
cs1100.wpc.omegacdn.net
|
152.199.4.44
|
||
www.google.com
|
142.250.64.164
|
||
cs1227.wpc.alphacdn.net
|
192.229.211.199
|
||
fp2e7a.wpc.phicdn.net
|
192.229.211.108
|
||
identity.nel.measure.office.net
|
unknown
|
||
aadcdn.msftauth.net
|
unknown
|
||
logincdn.msftauth.net
|
unknown
|
||
login.microsoftonline.com
|
unknown
|
||
account.live.com
|
unknown
|
||
acctcdn.msftauth.net
|
unknown
|
||
esantegouv.sharepoint.com
|
unknown
|
||
aadcdn.msftauthimages.net
|
unknown
|
There are 4 hidden domains, click here to show them.
IPs
IP
|
Domain
|
Country
|
Malicious
|
|
---|---|---|---|---|
13.107.246.41
|
part-0013.t-0009.t-msedge.net
|
United States
|
||
13.107.136.10
|
dual-spo-0005.spo-msedge.net
|
United States
|
||
152.199.4.44
|
cs1100.wpc.omegacdn.net
|
United States
|
||
192.229.211.199
|
cs1227.wpc.alphacdn.net
|
United States
|
||
192.168.2.5
|
unknown
|
unknown
|
||
142.250.64.164
|
www.google.com
|
United States
|
||
239.255.255.250
|
unknown
|
Reserved
|
||
13.107.213.41
|
unknown
|
United States
|
DOM / HTML
URL
|
Malicious
|
|
---|---|---|
https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c
|
||
https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true
|
||
https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true
|
||
https://login.microsoftonline.com/508449d3-d632-429b-97ce-f8ad22b3a7e7/oauth2/authorize?client%5Fid=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&response%5Fmode=form%5Fpost&response%5Ftype=code%20id%5Ftoken&resource=00000003%2D0000%2D0ff1%2Dce00%2D000000000000&scope=openid&nonce=B1F249E7919ACE9BAD2671FDCEF78793C0DFC4489A39E2D7%2DD6F34C44ECEC0B6161755B6ECA4640BC06A193FD5F57951A71D5213F074AE60C&redirect%5Furi=https%3A%2F%2Fesantegouv%2Esharepoint%2Ecom%2F%5Fforms%2Fdefault%2Easpx&state=OD0w&claims=%7B%22id%5Ftoken%22%3A%7B%22xms%5Fcc%22%3A%7B%22values%22%3A%5B%22CP1%22%5D%7D%7D%7D&wsucxt=1&cobrandid=11bd8083%2D87e0%2D41b5%2Dbb78%2D0bc43c8a8e8a&client%2Drequest%2Did=35d122a1%2Df0f7%2D8000%2D9f00%2D9b0014cd2e9c&sso_reload=true
|
||
https://account.live.com/password/reset?wreply=https%3a%2f%2flogin.microsoftonline.com%2f508449d3-d632-429b-97ce-f8ad22b3a7e7%2freprocess%3fctx%3drQQIARAAnVFNa9RQAEyabeyurV2KoBdBQk-t2X0vecnLW-ghmw9av2oXFesHy0vy1k27m2yTbO0HBfHkoYde_QDRg0I9KJ6kp-KxINRrf4FU0OLFerOLF4_FOQzDHIZhZkyAJVgZBX-hyj2WQaMBZZ_11D9IRgrFl9IX7dcB9_AF94w7_bn0fJPXmlnWSSvlMktplLH7cXexlDZpwjpxGGUlP26X6404aaflgDVot5WVaNpZ-sjzuzz_lec3-xaq0FUQcTCBxLQcUjVtRcfQtS3HxQYmqgVs10LIIKZKHMXGsq27KjpyHMuxQFWHOsSaVtUdy0Q6AlUL6CYkqmtrroaJBk0MbU2BqgswMh0dWHt9w9NmN2sqPYqTcIX97Mv3OtY7cZo9FXLTNniwKRxrlA_CqAYMhEigyoGuKjJSiCcT7DO5YdBAUTyVYoZ3BDHusCgMdnP8fm4QCJWBgUKRO8ud5w5z_Kv-o2nPrS9bb-Mz7jswd_fN72lup788F2be1djLWGZ2HYSJQS8hOJka5sxluxYnN2_PTjWntJmLdmJMKBW4IfIborgl5geEIicJ1jV4IPKPT3Bb-f87afckvzcIC3k_9hIaBWEwMgqhFxjAUGUDMyAj6Gmy52FDBp6PVN-gBjPo3iAqiH6Lhu10ZGxVCoN6Fs-zSKqsSkvttO77PbVIW12WSpU70lFN6d7a2tqjoWOlbw9xh6def_vxaX37yffJ_eELk2ltfCkN0ZXOcnCLRE2dZrWV6xTd8Fut2RkLRVptvLpw01_w5yfeF7k_0&mkt=en-US
|