Sample details: af28cc6bd00303810604d45eec204bce --

Hashes
MD5: af28cc6bd00303810604d45eec204bce
SHA1: d8ddfea14d660422be20289abb72fb6ce1a19efc
SHA256: c47b43a0321f3c13fe42945bfa5bcbe223d8d326335d5856dd7c02dd07616fb8
SSDEEP: 12288:KOuAhiOsUQtfIk1+7psaKMmRHWFJGAmaA5e87J:mOlbQGkSsLHHW2LE87J
Details
File Type: PE32
Yara Hits
YRP/VC8_Microsoft_Corporation | YRP/Microsoft_Visual_Cpp_8 | YRP/IsPE32 | YRP/IsWindowsGUI | YRP/IsPacked | YRP/IsBeyondImageSize | YRP/domain | YRP/IP | YRP/contentis_base64 | YRP/anti_dbg | YRP/screenshot | YRP/win_files_operation | YRP/Big_Numbers1 |
Source
http://autoxls.ru/documentooborot/micro.exe
Strings
		!This program cannot be run in DOS mode.
`.rdata
@.data
QVRWSh(
T$0;T$@j
u)jAXf;
HHt$HHt
?If90t
<at,<rt"<wt
URPQQh }@
j@j ^V
Y;=h-B
.t|PVj@
^SSSSS
t$<"u	3
< tK<	tG
v	N+D$
tCHt(Ht 
;t$,v-
UQPXY]Y[
F Pj*S
F$Pj+Sj
F(Pj,S
F,Pj-S
F0Pj.S
F4Pj/S
F8PjDS
F<PjES
F@PjFS
FDPjGS
FHPjHS
FLPjIS
FPPjJS
FTPjKS
FXPjLS
F\PjMS
F`PjNS
FdPjOS
FhPj8S
FlPj9S
FpPj:S
FtPj;S
FxPj<S
F|Pj=S
vL;5$.B
C PjPV
C$PjQV
C*PjTV
C+PjUV
C,PjVV
C-PjWV
C.PjRV
C/PjSV
CHPjPV
CLPjQV
PPPPPPPP
PPPPPPPP
t"SS9] u
t VV9u
QQSVWd
t*=RCC
;7|G;p
tR99u2
tWItHIt9It 
v	N+D$
tRHtCHt4Ht%HtFHHt
	X 9} 
<+t"<-t
+t HHt
Unknown exception
bad allocation
(null)
`h````
xpxxxx
UTF-16LE
UNICODE
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
LC_TIME
LC_NUMERIC
LC_MONETARY
LC_CTYPE
LC_COLLATE
LC_ALL
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
CorExitProcess
HH:mm:ss
dddd, MMMM dd, yyyy
MM/dd/yy
December
November
October
September
August
February
January
Saturday
Friday
Thursday
Wednesday
Tuesday
Monday
Sunday
`h`hhh
xppwpp
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
 Complete Object Locator'
 Class Hierarchy Descriptor'
 Base Class Array'
 Base Class Descriptor at (
 Type Descriptor'
`local static thread guard'
`managed vector copy constructor iterator'
`vector vbase copy constructor iterator'
`vector copy constructor iterator'
`dynamic atexit destructor for '
`dynamic initializer for '
`eh vector vbase copy constructor iterator'
`eh vector copy constructor iterator'
`managed vector destructor iterator'
`managed vector constructor iterator'
`placement delete[] closure'
`placement delete closure'
`omni callsig'
 delete[]
 new[]
`local vftable constructor closure'
`local vftable'
`udt returning'
`copy constructor closure'
`eh vector vbase constructor iterator'
`eh vector destructor iterator'
`eh vector constructor iterator'
`virtual displacement map'
`vector vbase constructor iterator'
`vector destructor iterator'
`vector constructor iterator'
`scalar deleting destructor'
`default constructor closure'
`vector deleting destructor'
`vbase destructor'
`string'
`local static guard'
`typeof'
`vcall'
`vbtable'
`vftable'
operator
 delete
__unaligned
__restrict
__ptr64
__eabi
__clrcall
__fastcall
__thiscall
__stdcall
__pascal
__cdecl
__based(
united-states
united-kingdom
trinidad & tobago
south-korea
south-africa
south korea
south africa
slovak
puerto-rico
pr-china
pr china
new-zealand
hong-kong
holland
great britain
england
britain
america
swedish-finland
spanish-venezuela
spanish-uruguay
spanish-puerto rico
spanish-peru
spanish-paraguay
spanish-panama
spanish-nicaragua
spanish-modern
spanish-mexican
spanish-honduras
spanish-guatemala
spanish-el salvador
spanish-ecuador
spanish-dominican republic
spanish-costa rica
spanish-colombia
spanish-chile
spanish-bolivia
spanish-argentina
portuguese-brazilian
norwegian-nynorsk
norwegian-bokmal
norwegian
italian-swiss
irish-english
german-swiss
german-luxembourg
german-lichtenstein
german-austrian
french-swiss
french-luxembourg
french-canadian
french-belgian
english-usa
english-us
english-uk
english-trinidad y tobago
english-south africa
english-nz
english-jamaica
english-ire
english-caribbean
english-can
english-belize
english-aus
english-american
dutch-belgian
chinese-traditional
chinese-singapore
chinese-simplified
chinese-hongkong
chinese
canadian
belgian
australian
american-english
american english
american
Norwegian-Nynorsk
GetProcessWindowStation
GetUserObjectInformationW
GetLastActivePopup
GetActiveWindow
MessageBoxW
xvO$Yo
nOqH_V
OKiw)^.X
O ;zg+&U
7Uf7t^
9V}#-M
yT{;{lDIE
\XFx6'
oO@Kj^cS|
1.3.6.1.5.5.7.3.2
Microsoft Unified Security Protocol Provider
Username acquired.
Failed to acquire the username.
The username is: %s
Could not create well-known SID.
Times New Roman
Directory
kernel32
%04d-%02d-%02d
%02d:%02d:%02d
%s %s.%s %s
invalid string position
vector<T> too long
string too long
deque<T> too long
invalid map/set<T> iterator
map/set<T> too long
<8bunz8
l,kg<i
<@En[vP
bad exception
?Dj0Q:W$=
5s3R6=
?_nextafter
_hypot
1#QNAN
1#SNAN
MapViewOfFile
HeapAlloc
SetConsoleCursorPosition
GetStdHandle
FindFirstFileA
GetLastError
GetProcAddress
EnumSystemCodePagesW
FindClose
GetProcessWorkingSetSize
GetConsoleScreenBufferInfo
FindNextFileA
GetModuleHandleA
OpenFileMappingA
lstrcpyA
KERNEL32.dll
DrawFrameControl
SetCaretPos
GetSystemMetrics
IsWindow
GetSysColor
ReleaseDC
GetWindowLongA
InflateRect
ShowCaret
GetClientRect
DrawIcon
IsWindowEnabled
SendDlgItemMessageA
USER32.dll
CreateSolidBrush
CreatePen
SetDCPenColor
Rectangle
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
CreateHalftonePalette
CreateFontIndirectA
DeleteDC
SetTextColor
LineTo
MoveToEx
GDI32.dll
GetUserNameA
CreateWellKnownSid
ADVAPI32.dll
DragQueryFileA
SHBrowseForFolderA
SHParseDisplayName
SHELL32.dll
CoInitializeSecurity
CoInitializeEx
ole32.dll
msi.dll
PathAppendA
SHLWAPI.dll
AcquireCredentialsHandleA
Secur32.dll
CM_Get_Res_Des_Data_Size
CM_Get_Resource_Conflict_DetailsA
CM_Get_Resource_Conflict_Count
SETUPAPI.dll
MoveFileA
DeleteFileA
InterlockedDecrement
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapFree
IsProcessorFeaturePresent
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
SetHandleCount
GetFileType
DeleteCriticalSection
SetFilePointer
MultiByteToWideChar
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
WideCharToMultiByte
CloseHandle
ExitProcess
WriteFile
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CreateFileA
SetStdHandle
HeapReAlloc
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
FlushFileBuffers
HeapSize
LoadLibraryW
WriteConsoleW
LCMapStringW
SetEndOfFile
GetProcessHeap
ReadFile
CreateFileW
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVtype_info@@
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
                          
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVexception@std@@
`8d:c3mM
B7w711e
oRZ;>R
%4KPTL
.?AVbad_alloc@std@@
.?AVbad_exception@std@@
[;%CKm
dqf#>t
~1Pt%`
No##)n
.Q}x<"
qqGqj9
R;B=~7r
]n6(gK	1
;sY0];
`(v{{6=%N 
k(tUIU
K*cE(dj
Dk!tE'w
`b	omU
aQrb,y
C1N;a/
YYl6{{O
6D &zr
7R$_!-
L_Hx",
z<>WJc
pW(	z<
&zM!D[-
(EUl0C
JkfsP&gS%
s+e	) ju
H[kGD@
F)?eEh
oMM,b-
N:p$~U
l0Ok3`
j_~"Y#
5QmU3`
EDKMd\Xy[P
{!hjs5
-49a?U
	vgSp[
3.hpy. 6
%r'(3{x
g%`rwFKl
sP&^S%
~.S7]z
&l!m;1
,Yw[&T
[%	`S'
sGFj#4
z$7d#Y
A[7g!L
{;,M04
\iu>~d.
Sd,h^B
>"qC5h
A1n;2|
.F!obVZ
F*&\';
r@[ABj
RX^!Ir
H}) 8,
n{Ec\6$
=C"A`4i
aC)2"@
]/=3vM
>Rn?pK
[&gbjNj
BK\2pq
d5:h}0
5qPnf7m
f:]a'.
e 	7jW2%[
4D600?
+|v;|0
xAw/..x>
(pN>#2k
hYu<CN
nx}s|n
T>TvAT
N0Y@Ec
?{11%VM
8hK7(XC
="=6Jm
XsZsf'
\JQ#BK
Y4i`PIb
>}9O(H
GpS(twf 
v9hrSR
vA:4(ch
WZv%<f
-mZ.e4
*).k09
efO-@X
=Ru'9'
GLC6C_
1'8_k-
aNAT< 8
;g%&/r`>F
7jgvkXy
=E@4"Mo
	.5Xz=
%CLn(~(N
<r_Bu 
}~ [ae
p_4sHty
_"<W/7I
e	Od/;
.ekiX-
yEq&zp	Vx
Zd!+/u
kFdx&/
a-f_vC
vMxj{KN
8 p}mn
9_!wy%k
){1$UYd
aUiytA
$DUi/b
nl%+cJ
'hIO-E
|:&R5J
MPXeRU
`X,!S)
YvK?>1
U,$E-a
4beI]b
(%jw9H6
~vt@pG
v6~urt](@'gt
,Z2Pr-
Yrfy0;
N~.4m	
dk.6p_
yILf~v
	%}M&4>
X	Ud{<(
opWmw6	
4>jCDCh
>.Hnvc
153h6w
SfURiW
Hz2e)<V
ze[#;R
IBYS.e
	jxQUE
l;"cZ\,
JwiZ)"
>t_Dsmu
{5tpuVgU
s1sqG%~	R
Ksj!'XD
k<Cz;i
Gzf}a=Hcg
,/YyK5
OdZ`n	DB
Yz7CU{
R_$V,eKW
=a.SR:_
.GZn7g(mK4
)ck9OE
JYIXoe
kHQ0L}v
{rwqo"
/|O%~B
}Zkn>y
bs&+R/KP
`PxV+w
0piz}F
fJQN^^
Mo:'zJ
i&Ab@C
_3H1^7#z
zdekQ\(
^(tQMQGrj
IbhR}%
(NZ\VT1
1PAUV=
Zjnt(G2G
8,?_<hw
daW|3K
fZn}JIc
(9\xb:{P
GW.cE}
2Kjq"NO
Jd!2aX
L aaJ"
5S~%S7
<I?R&4(Id E
.ApR]O
5/p],|
G4rKK4
I?yc Y
ruBxS}
AIT`u{
+T^4A-l
.5;@2B
nw$f)v-
-86?|^l
KqWmLX1
B&idT2J
}quHaYG
)dqAoy
)wU>p_
z<=*7|
~DY=fuO
GL$TlvZC
vN~2f.
p6fN:e 
=Ac)EgA
j`JCS+
Yl^a6B
th"2Py
5/]bVNV
w640@U
Dq_2r9
0XiIvtm
R7|QG;#!
YlFnb(
$7Y20Z\
00(tS$V
DcXaG&>
;lbpV7S'
`&}1m[
$q}4x9
jwB7`N
=iO$]~
n^9&OG`u
`9NJ=E
N@1U]%
A""/|c"
I^x^#'q|q
mgM !=y
{bdrOR
&91@]$2c&
c5:l}0
e 7}2K
80cF0Xd?
}`PuCwf
]o}?nj
b'"rY,!8e
xcMmf[h
}8F#^?
UD	b_3
VE|#MM
L/OA8T
O~f50ZD
<'$M:(
$S:v^]@`
Y#MG.O
#-n\i|n
E0}fq n
<k xy	
"}ytXa
WN!	Hv
#>(TXvI
i	X I~
Y d%|xDO
esiqM)
wU'z?WC
<*fb.F
6Zw<i*
f>QI&N
(}NqOW
ttx](r
J} 9^f
e@;MYE
qAun\H
58c+xZ
|ywbte)^
4"ByhIKe
b1(C=+$
0.yBp&
QyISKgm,
S@1SNU
J w]F.
qg<59D
\<w3Z8
Anx$&-
c5w$,#@G
Ej@z3|
"F+<SH
uf1s4;
$P8yLm
z'kri&
o`vDPX
ZC"#K,
EDv!+plw
`Ld69L
tetqoq
ULL/!-
@dAs]@
^>P;$CQ@
(Mp|Zg
e.xnBnhL
9u&qgN<
^^W*-|
(JIECR0
6^HqlUm7
n.zxBHKR
3]maqR{{n
}HfM|N
I`='7a
Y/>a,Q
#8=M*<
a7:fF:
H9k&FD
u{8hP -
T'`k~;
``?Tm;
yUvWum
^9mxP4rm
Rv>-dL
>_`3Z9
+j*&nnT
;*F1=q}
;8!Ird
n+wnpj
xUjw?baWp	
)mXE0*
\O'E\M
/BN5rQ
b@y.~K
aJ P}1
7"J |)L
,<vBIb
XelxG@
@ldD2BPBoN6
'r#z{Pv
}Du f7
\z-hPL
te|=*(Pp
sg+d&\
Gw{ BC
0j'WU=
c1yU1v-tU\
97p`ym
og+Z$5
"P1	UV
gd!?[W
:]Q^	V
[u]M5ZF4
)Gs8Gc
lE}t(E
:; y5&
O3hMc2$
E:m<J>
eF"$S]
(PE2SS
m$|>8|
7Q"[1X
r3Ij(m=RI
n89V_[
c"|I/L
@	GQZ\
y5'zy5L
ZtU&%=
7%hN8"B
6Lyss*
$Kkyq?
-\9BoAD
dDhk.b
KIc@(w6
"Bm(]r#
L3a"oK
*oeg@)
H`$Pgy
!2ohQo
XbKLq:
c>eII8
5mu#G&
l#Q;_=
Q2*M6W
)nN>Sl
|	iqP1;
dDhk.b
KIc@(`
-xiE:1
yIHRYh
rljaxki
PC.(h 
..1a*TgV
rbJG:@
ls$]O 
#d^H~*0
F4&U5cW
/jTfd#Y
oUz\Vlm
7Z6Qi	
+V@_]2
*z6"&6P^
iOg9cAi
	$(3#Y
_PlZ`F
qi>hyk
bv .2k
kw`qx$
0&&Nj5
f_=FD8
5<R.W*
*s?	-2
wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww~
wwwwwwww
wwwwwww~
wwwwww
"""""""""""""""""""""""""""""""""""")
wwwww~
wwww~/
wwww~/
-wwwwww
wwwwww
wwwwww&
wwwwww
wwwwwwwwwwwwww~
wwwwwwV
wwwwwwwwwwwww~
wwwwww
wwwwwwwwwwwww~
kwwwwww
wwwwwwwwwwwwww~
awwwwww
wwwwwwwwwwwww~
wwwwww
wwwwwwwwwwwww
wwwwwwp
ffffffffffffffffffffffffffffffffffoj
wwwwwwz
wwwwwwv
4jgwwwwwwv
wwwwww
'wwwwwwr
'wwwwwwu
Wwwwwww{
wwwwwwq
wwwwww~
wwwwwww
wwwwwwww
Qwwwwww
wwwwwwww
wwwwwwww~
wwwwwwww`
wwwwwwwwwww
wwwwwwww
H33338
wwwwwwwwwwww~X
wwwwwwww 
H333338
Wwwwwwwwwwwwwwwq
wwwwwwww
c333333
wwwwwwwwwwwwwwww
33334j	wwwwwwww
c3333333
wwwwwq
wwwww~
333334j
wwwwwwww
c333333339wwww
3333384
wwwwwwww
o333333333
3333384
wwwwwwwwp
o3333333339
333338
wwwwwwwwp
d3333333333
Wwwwy333338
wwwwwwwwz
d3333333333338
5wwwq333338F
wwwwwwwwv
333333333333338
333WwwwS33338F
gwwwwwwww}
333333333333333333335S33;www
33333F
wwwwwwwwr
333333;#333333333333
wwr33333F
'wwwwwwwwy
333333
y33333333333
w{333Wwwu33333J
wwwwwwww{
333331wwS3333333335ww
333>wwq33333j
wwwwwwww{
ww{333333333
w{3333;www33333j
wwwwwwww~
3331wwww
3333333
wwS33339www#333?j
wwwwwwww~
wwwwq3333339
wu333333www
wwwwwwwww
C3?1wwwwww
33333WwwS33333?www
wwwwwwwwww
wwwwww~#3332wwu333333?www
wwwwwwwwww`
.wwwwwwwwy
wwwwwwwwww
wwwwwwwwww 
wwwwwwwwww
	wwwwwwwwww
wwwwwwwwww
wwwwwwwwww
wwwwwwwwww
wwwwwwwwwwp
wwwwwwwwwwz
wwwwwwwwwwv
gwwwwwwwwww}
wwwwwwwwwwr
'wwwwwwwwwwy
!wwww/
wwwwwwwwww{
wwwwqR
wwwwwwwwww{
Wwwwwwq
wwwwwq4
wwwwwwwwwwq
wwwwwwwwwwwww_
wwwwwwwwwww
wwwwwwwwwww
wwwwwwwwwwww
DDDDDDDDDD
wwwwwwwww
DDDDDDDDDD
wwwwwwwwwwww
DDDDDDDDDDDBQwwwwww
DDDDDDDDDDD
wwwwwwwwwwww`
DDDDDDDDDDDDD
DDDDDDDDDDDF
wwwwwwwwwwww
dDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDF
wwwwwwwwwwww 
dDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDF
wwwwwwwwwwww
dDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDF
	wwwwwwwwwwwwP
dDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDJ
wwwwwwwwwwww
dDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDJ
wwwwwwwwwwww
dDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDJ
wwwwwwwwwwwwv
DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDJ
gwwwwwwwwwwww{m
""""""""""""""""""""""""""""""
wwwwwwwwwwwww
iwwwwwwwwwwwwww~
wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww
   wjjj
+++fyyy
QlllM???
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
 <assemblyIdentity
    type="win32"
    version="4.0.0.0"
    name="Surviving"
    publicKeyToken="6595b64144ccf1df"/>
 <compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"> 
        <application> 
            <!-- Windows 10 --> 
            <supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
            <!-- Windows 8.1 -->
            <supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
            <!-- Windows Vista -->
            <supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/> 
            <!-- Windows 7 -->
            <supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
            <!-- Windows 8 -->
            <supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
        </application> 
 </compatibility>
 <dependency>
  <dependentAssembly>
    <!-- Describe metadata for files  -->
  </dependentAssembly>
 </dependency>
 <trustInfo xmlns="urn:schemas-microsoft-com:asm.v3">
  <security>
   <requestedPrivileges>
    <requestedExecutionLevel
     level="AsInvoker"
     uiAccess="false"/>
   </requestedPrivileges>
  </security>
 </trustInfo>
  <description>DevidAgent3.exe</description>
</assembly>PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD