Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230831-en -
resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system -
submitted
11-09-2023 22:02
Static task
static1
Behavioral task
behavioral1
Sample
e7aaa8fc7985a2229f5af5b2fb8d460e9fe4e8fc6c3d2a83134d56756bdcd344.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
e7aaa8fc7985a2229f5af5b2fb8d460e9fe4e8fc6c3d2a83134d56756bdcd344.apk
Resource
android-x64-20230831-en
Behavioral task
behavioral3
Sample
e7aaa8fc7985a2229f5af5b2fb8d460e9fe4e8fc6c3d2a83134d56756bdcd344.apk
Resource
android-x64-arm64-20230831-en
Behavioral task
behavioral4
Sample
HM_JsBridge.js
Resource
win7-20230831-en
Behavioral task
behavioral5
Sample
HM_JsBridge.js
Resource
win10v2004-20230831-en
Behavioral task
behavioral6
Sample
consentform.html
Resource
win7-20230831-en
Behavioral task
behavioral7
Sample
consentform.html
Resource
win10v2004-20230831-en
General
-
Target
HM_JsBridge.js
-
Size
1KB
-
MD5
f2e7316750f128a4b72a61a9fc8ed362
-
SHA1
228d0209618cb848f153a4c9daf45112dbe6a5ca
-
SHA256
45bd4f9fbae5e062f1a2f2a3fb4d71e4de8b54990eb81a8f30bad83ecd6096aa
-
SHA512
308760b82cfe9fdd625c8528a4ebb4d0a2186b4ffc9ee6d16e0f1ccb73c56e8cf6301c44ef139776242cb24bc9f43308951a4fff49854d0f08603801393aa41d
Malware Config
Signatures
-
Drops file in System32 directory 3 IoCs
description ioc Process File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallService\{84E3390E-6CA1-4D97-ABEA-23FF1F043391}.catalogItem svchost.exe File created C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat svchost.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat svchost.exe -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
14KB
MD5c01eaa0bdcd7c30a42bbb35a9acbf574
SHA10aee3e1b873e41d040f1991819d0027b6cc68f54
SHA25632297224427103aa1834dba276bf5d49cd5dd6bda0291422e47ad0d0706c6d40
SHA512d26ff775ad39425933cd3df92209faa53ec5b701e65bfbcccc64ce8dd3e79f619a9bad7cc975a98a95f2006ae89e50551877fc315a3050e48d5ab89e0802e2b7
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5a9a517edcb8a7749bcadd71c5ffb5a81
SHA1e65557cd687711ae0cd4e45e18c5b2e2f7398679
SHA256304ed015389eec24964857e6eda3cf01f72da7b7e9fa31ee20c11aebdece308d
SHA51234b2d1a45974c7b28e1492659f37370e7621ea0ddbbd5d5b220a70365e400e74d0ca16d81130a3e1c5b6b6bbb1c5ac18e14b31abc220fc5dcc12ffcbaf959418
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD524529933333572a0f1e553bceb5b1236
SHA1f4a3bf21d306dbf63a240caa8d0bcfeeae1792d1
SHA2569499683c55da716c6098f50c2f23470330e61c28a3b400e58afde58ea5f22926
SHA5129e8d8b7690498bb154f5ecd0c6847d40e15d273cd0769ebcf8b388a31785ad5b518b230a148f6bdd987de33d56d212510b4d47dd38f166f63a52127a39b62d43
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5cc7db0ba0bfa71b93b287ed521457889
SHA1c1752a62e002ab4f4aaa9fd65b65a50ca63e5a93
SHA256e34d201b19afe317125b53097c79aafc003d0938b58ef0bc9a5fc245a70f7042
SHA512cb876e78e8fe34cb9a7350b249b6fd74772d4c03bdf264a461a900a4e1472cf0b129f83b934ffaf91787be5ac3632a3c40abba18d58cf2aef0da0f8b54b67bce
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD54f22a393d633fc79da03ff64ef76c6f3
SHA12a869b74b3f0ee128288f9b48927c2fa1fce944c
SHA25649cfb30da8c36c450bb6435a1a1df3cf7f9721e87f6b07cff18c81fe9faf0c6a
SHA51287313b9cab7eaa7189ee6b82ec30b54a11aafa9ea8280610fa369f241cc808a3a8abb7f13680f1dfd6eefdd2923c553ffb39ad1793653d2a6375b6bb3f44b77c
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5b9847913616ac7f2e5a4af86b6aef7ae
SHA1ed7a442076e5a8fb0e1bdf06103484777d6af0b7
SHA256270d9fb5a1eb6a4aafb9a1bfb056502a00d3241e213d05e48be7957dca27c1d3
SHA512d98dc7c2ebe64455d0deb9253d790861741d49387e9a846019add782a7d8d4469342bcd7eb7e7ad8e39301ef5377ea4950ec3ac1445d5371386ae5e7fe1cd40b
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5089ba4a8206c6d1fa6d5783a56fd1542
SHA1ea34f92aab4cd143ac0548fea859bebad22cea03
SHA256399c332b39d6e3a4a51ee3d42f62661e27c4463b9de9b87c6511282fe4287d10
SHA512b76f1725ec57fdebce91e8630a0a74d06195eb09acc3d83f5851755908c88e95e4762a0100562db4dfd265314da6fbf0cdf9aee1698cbbbe463f54ee9ffac4b0
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD58e1d17a7eb7708e03fc312f7ec7f2064
SHA126430874e0635e6aa5a8e7521ea633df1e197553
SHA25684c8f71e2fa7e6dba506cae030948968d8ea0d2a379c63ed8d8bbcb7296996cc
SHA5124b6732d35c32ecd889172d92e18225e804f523e1e205bab77e743dbef4df5babb75e1f27b4d868b475b227ff244937937a78ff038a7115098da694604d5b95c9
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5d267367ea706cfa3d189c4f72d0c0d0b
SHA130e82f0d4a0eca3c7821e6ebd3652098be8bafce
SHA2563a29f2b69fa1cc050846237e8639ca040bcd9d41e857df2f9302b580535fb66b
SHA512e0c6e6c18d5e1bf042cffffa73a0ca247afe2fc4fda7e96eb80da1b329bf3a72b613b35fc6366206a6edacd87705adb50102dfaea68e9a9e79fe431feb0ac116
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD544436407524bc9cc8cdeeaa41f0f9f49
SHA18992041fa57eeb40952ac65c919951f27c1cf1fd
SHA256496a2bca40d8cf4e6f52a12f7f9e4104dd3a21e23cde408c7682d578f0ce5700
SHA51269e35fcdada5c805291178bf112f03b18d401b12b8b13d36d1d88451522661190ffa6bb68f3a84eca29140e8722569e5cdc08b4a16298afb76316a6b2e4a6ea3
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5b3ced40dd6d0602dfd3d6375bea41478
SHA14286147ec53483c9e4bff6b25d6f847e33c5d506
SHA25656c8a476c9cc8f2f86682563416bee47c23481088d5171854ec70d3320f336df
SHA512251e4f771e084cebfbbca01df30f4ba1432777b143767fd34c5be45d38459ddce4e08766c385052015a9a9d70aa18b22dbe6bd2c1b13db7e5bcca9f0b8071567
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5f3e5f6b29b304690f66b2da49bea2845
SHA10c549855a28ffbb2222d2c52bfa2e4b2716ba450
SHA256c66c8a0dfac66cfaf222fc5e1d33797484ee4dd78770e92864716e5b3177941b
SHA51253cc83df0ddce9e64db2706a8200997f74a81786875c74d8cf2b8aa0f0b06a3438dbf494598cd4b5c2138d3da51eb7e23b627bcb7836dadca2953263e075af1b
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD562f623766bc8a852340cef129df95a02
SHA149d94b6ca68845a3dba44df32459dd52b321d950
SHA256913d7e8ae1793714b04b7ba3209f925841a4c602683c6ed0edddc9cda9e73b67
SHA51257e2e384099e0cc987f7e333d60d36a89df76f8b47e5dd2380b59b747b775af8d3f2e26b36baf2e1e48ea5ef53cf4b92ef186c31e09e727b00988a3e6549948a
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5eb6c335cd26802d4151d98fe83835a42
SHA1274340e4f358d16b6f667a99568a995240675ae0
SHA2568aa3a01a49fe70957612a7a2d2be1e339344a9abe4d28338e2b39a9b099d6741
SHA512d2061652fb96d47b30702f2574d7f6dad995327e59992872363c6c6c34d56d41cfb75c51f1bc575ff09a168324a298a59f64de5f6ab87d79fdb2246bc34ff264
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD53caa5f05089a91794b9bc8330f05d4d8
SHA129515bb8ed875cdf2d4be08aaf4a102b0694d4bd
SHA256dbc2b75d479c5f5e48bac50bcb6899870fd9affd6889bf5dc930a41690d3aa4e
SHA51221890fd74b4483cfabf27eaf744e5fb5a6029dd74c1b6e6b7de355a69aa4a9d6f4c11d595d14b306585e4f3f63c10bc90d4a13df5d3d9c702dca7e304736f0c8
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5805c6584652f20fd959fd24684eac137
SHA15f588e3b37116638de21c91157e621023dd221e2
SHA25681a45a1628d115cec7149fa8d926898ab6822e97984331059e520479d4619efb
SHA512fd1202331d3406ded4677477ced27eed8ff8ecd1213b11ba258b80413b474be719e3e0802ed25ca14e33149903f775ad056b94d8faa30076970c27e2d2116d4b
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5871b2651a1bd94f0d8b39c6c2d2d2fcd
SHA1315b8e5a6267af7b648f0a48a1a3991553ed2ba9
SHA2564873c0f090c9b75dcc4e995aeeb3b3a87262fcea0a8b63b6253e113d2c41511e
SHA512ddbf161cd5576311fdcc824d668fa391ebd45c087dff92477982657fcb6de3bd955a1be09157303b8101f036c385f05cb3e2c8aa580962a0ccbc4892cd28f510
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD54123e384d584d3b54f1f631cef1f7234
SHA1336e2f888566efc011533e624ec09a5010a24ca5
SHA256806fbca4c3ac5d0cb309e4870bb63b9c24c1b68c84877a22cac36c26f54ffd82
SHA5124a9cf154206ce6dcf6d6a05d81ba360fb8a1507bec2635d54baa914be31f6e126f41425285bbb82350937f2837b82e7833a30a3a45e214b1aa59cbccad7b5cf0
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5fc14d29044fa391105c79ca12c36aa2a
SHA18ae18017a3251fe7dd3b4626cad9e639040f1671
SHA25648574dd9bf9c5cebbfa205da56182e1b3f575c69fc80e3ee92b67e6f988e0a53
SHA512a6f40ba39a5fbe4318e62fe473ec4bb0a1351bc985d441bff4632b6fd3dcf0ab199dd8852191bad1aadb5f3e4ef96f6581e09e4e4c8479edf2e23df38161b439
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD58f5a48fa35949a54d31b36b37f370ac3
SHA1262b016b67ad3af6bf8593b2c19a704f709de607
SHA2564e4e71c83dee87a87259bc228a6e21873218781eb28b0c4cc35e6c10e8292ae0
SHA512278f702a813b7d099e1d8af52e32af048433e3d8aaef59efafc4eb26034adb214f09b35e02d4b6d8a1a46365bebda48273588435f066ac16aef44ac059602be0
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5c0745dc38c09d792f7e7cb6a424213c6
SHA10e9ccb84fa8907446f35d59eeefba9ac7efcea63
SHA256761770066ff906d292b24072a0712c8eda3d11b06f7c88e9f10d3011566598ce
SHA512d22ce3e3bb808f4c12f8e95c1e252eabf4b967c72c0022155875d21dc340737e6d9dd8b79afc820a901de713fa3323955f4e1104faac37ddea47eee0db66220a
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5e5bf9fd02ad840db1436f34d82703aed
SHA19f697bff7ec742c2d9ffa735ff41d8ac87e116be
SHA256b8dc325e7a31a48d6eb144aa88866c6aa541c28dbfe33ff86966fff667b022e6
SHA512f561b825a933adf9ad040adeb1cee472939a7ccdb5b41943140d897077f00452b6ea76e4f1f04ade9f3a01b3d6c3050a1db92ca3e458f9bacda139551af9578c
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5103eac6e51f343247e4cc44309e111ab
SHA1f4b763f892da31bad0e40859006ab5645e6bbb80
SHA256f28957cd1d054b439e376a3e528e24af77d556af3c68fca14385d0a39e1b3460
SHA512c28398334b9523ad947273ab5008f2c5b7290eb76985c4cdc15fd78e92962fe4c12c2a887e2cee9ddd8583d2026b78b741bbb315b1a2e6bc33cb940c33acbc94
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD535ec8c95dc53c29cdb7dbe81a1395de0
SHA13bc7ff83ea5bb4325bccb89132ac74e60c6082cf
SHA256124700afec2619eb13c08375994378148e6e8660e01872a6e39aa3d85a303671
SHA5128e79ad252017ef4abeeb8e3fcc14eec7bca3d670f742e23bd79066bd6c39bc1bf632c9b3d2b53c4a86748ba6642538ae622e5ba404649a589b561fc0601421a9
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5695991e717bd55e71e4cf98d9e2f6762
SHA178586f6a3f250b3ab1da6996deecc7379bd878a9
SHA25666b19e254999d1e218d3fc1093a9a030b948a45c001aaa386ad05e3933cc7553
SHA512677c8a058ccd6d6a555fc1dc987cc4c3c06bef3cf8e1345aa1f4425f703c9d72dfe2a45b343dee0693dac5015130fd1326d4b69f297c3c558f3f2413d1fd03f4
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5b47517f3dd91c0bd5269c7ed8a7b184d
SHA113656927883535c4f6bd9157971cf010dfcd300d
SHA2562a51ee1cd2c53233aa192f151985949793baa3080fa1c2ed26893a4f9c2d57a7
SHA5125c09d0c01a27c507917a011e6becba7c4f3d60b762ced37dcd37c2cc57d16ab1d6f371889013a54a4e3856bcb9ad84c63c5523121b267c723f4545f2d9748079
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD54cd74b5b46d63364f80d09a417561ca1
SHA1bcffbe2fd5d3dcea6353bb051167c0e1ef440185
SHA25640f5a48fb0c5715906258a3049c72f2ccda38cb461da3608241dd2db37c9047c
SHA5125ec470b285b5e50170a05dc428062e16ebf0412fea53ae68eacb86e2c422be763b751f1fa0ad68ca80034bc66deea4cc6d3839ec9b581e94e191160fa2093455
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5f0a02f77a466e1764f96839ac8278236
SHA1323832aa72da48a1823e8ddf164af4ca205fec61
SHA256b477f77f37af2a0e00dd867f55394ebe447218c3a989e9d0ded1ecde5245b802
SHA512514c4128a848a2f633a349b2e31857565708aa485cfe53442b484bfe69aa398d67bb63bd099ce07f4505e919168cbc93e7a5bf80928c50e1ebc0dbdf149dda9b
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD589a7191bb28f1e1d4173c4b421c67fa2
SHA1aedd598291ec4297ce6f6b3cd7e318159ed0bd95
SHA256011eefa35464c511ac252600709236dfee506aa3e44c168996f8b5492ce2fc80
SHA512c96020a7cae627f85696b8cd9da03e6a0b4fc18ec57c800ac751ab99bacb27185f0fedd079862f4789bfbe87cf74a815e90e1ebd062cb5c0f422fd15409cf69e
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD54a19e30f6b65cc7f51e188b755d5b824
SHA16c9fdac19f223a1932f9c35f1831d97917d7c3c5
SHA256f584d77af68d1808afe17e002fa6e728cf8374cc461fc8817cb8ae41c05691f6
SHA512135a3faccf68a5e32f357a5b8949e226c40c879e341c02e5b898b158acf7c2cf678db36ec0653feaccfafd3a2b2740ecb6e0aa925d7bd3afd628628e1e4825ad
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD50e664187e804a0e2b171e21e76c38328
SHA1fc5327ca4811c3e3ac44bb0b5f88913bc01aaf78
SHA2561960d2fc4414395b4ff20b3b3f7f105cf3d71f39595bbd01eafa304d3c342e2e
SHA512d6a66d15b472a6a65f42109abb9f070659d4d76e58cfde958b67119026e6ca76369321dc8f539dcb2286767cbffc0a9999a0e74cd8450ee6163ea7192efc65ad
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5ceba5a2df00f945f6f7c13b4ba0c87b9
SHA1ca8d9fc1bca88f5cf24b829b02b958b80a372672
SHA2560c32c798e4556fc8dfaf3ce170accb9d684d0b7056df6ccd231cb9004a35faa7
SHA5121874fd4e66004040dcd005306029cd953865d6fb0422edca99ba1609aab18b39970981a04d34d53070c242124995a1d43503bdd200e044775d34d3425e002752
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD545f0d0f011e403146647de51d0e00b26
SHA181c06e87626ebb0243ae3943fa93ed8b3a383b00
SHA2568b47f3ac1534c04d91c5398af10da92c6e44bb1c62790e84e4bbc693be0ffffe
SHA51226398f988049505c29567919a6e8f27f68ae2920cad4976a1a1bf6f8ade5b6bddac49d6de9d71c2d0903a64bc50a7f73afb955319e52f79db9121bb8fab6ce0a
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD506050e9deaa963f0d88af78063cdea62
SHA1657e2acc4bf98c52f256ec86276053ef0b02fe85
SHA256b81521645f0972f26c0b7caca56c916705919a3d16818e74221f31ddea95c13e
SHA5123d2288d89df66cfd95cf139fb8224bd00df82cea8cb552ffee8c8a652b752d7531114eeb32cdd3aa9c5b8f7875d01d54e8af8b2fea80370867bd2acd700ed899
-
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\InstallAgent\Checkpoints\9NCBCSZSJRSB.dat
Filesize29KB
MD5cff47c584c6faae7c7fb601f66dc8fdf
SHA1c2bfc80c00f57e90db401b65b26dc98aec1f12f6
SHA2560e0d33d28706a85fe949fcdd267601218029b129051417d237ba67b92d454331
SHA5122ddd8b8608918c7d627de15f10fd594114ac3851a64ebeb4039a547334330aebf34db1858db74f59b604ed0daf66543e1e402b76f3fa3815863e48cf007e8a90