Analysis
-
max time kernel
121s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20231025-en -
resource tags
arch:x64arch:x86image:win7-20231025-enlocale:en-usos:windows7-x64system -
submitted
04-11-2023 09:22
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.064750db7ccb691c516526c61d235fa0_JC.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
NEAS.064750db7ccb691c516526c61d235fa0_JC.exe
Resource
win10v2004-20231020-en
General
-
Target
NEAS.064750db7ccb691c516526c61d235fa0_JC.exe
-
Size
488KB
-
MD5
064750db7ccb691c516526c61d235fa0
-
SHA1
44226a36e43f481a5dd28aaaaa3d4809f8309e32
-
SHA256
524333bee12a6c3065e8d853e1958d6a0aae673d32e7d6129a70a7c3fbaab11e
-
SHA512
73fb5cb7eff8f76b5d85a720a1717969129cfadcc0a250ea4531ce5253bf98fb7d799f006466440b0dced25642dbaac6f3bfaa57e81e10563f851717198eed2d
-
SSDEEP
3072:XqI1KIRAOohAFzFCuYDQ+ogKDj5jgNZvW7WULIj2QE7pRUOHMSfA0:Xq4KAFz8qNgKDj5jgNZuyUa2Qy48TA0
Malware Config
Signatures
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.1MB
MD58ce897eb77bbf3aa446803185a457bf0
SHA1fe539dcad3c40ab17601e76ff5bc16bfb2fa8114
SHA256155077490beb8607b8835e10865bc9e1614cdb2344a0dc1d0c74ef085f0b8532
SHA5121a77e01ae93f8e4e919136eb49b080eeead3bf9d25bd099638f3ea646eb5c0a50720c4a5210ea1a18e835dbd41301169a3e4727b229658c0159c5e372521ff5b
-
Filesize
88KB
MD52cc86b681f2cd1d9f095584fd3153a61
SHA12a0ac7262fb88908a453bc125c5c3fc72b8d490e
SHA256d412fbbeb84e2a6882b2f0267b058f2ceb97f501e440fe3f9f70fac5c2277b9c
SHA51214ba32c3cd5b1faf100d06f78981deebbbb673299a355b6eaec88e6cb5543725242c850235a541afa8abba4a609bb2ec26e4a0526c6b198016b08d8af868b986
-
Filesize
4KB
MD5eb2c61a266e85b58dbb424d9b2ab1738
SHA1d5550de8aa0c0847b5d9451b64b502cc7f14df92
SHA25648e38d684d8ade9b595f3204595f1136c4f63e7b678c24f10df2f3ed27f9973b
SHA512628c1f62bf30782484ef5b4c70262f7b37728c03dc41d22eb32537264339423bcb851448bda61c4debb62bab3533bc231c9193494c57518344d835256c2f6437
-
Filesize
2KB
MD51859599f7e3aa4bce102be1133882102
SHA1a6f5b855cfb7265bb9160fae04aad1b981af6527
SHA256960bbb0a75eb5eda7bfaaeb6db9c0080d49112dc1fd238bda559bae1ff690039
SHA512b3b3f05f5c8b2702570889f5c034f47f7528504b7b2befa58cb4b82ff403ffb187d57fc038a82af2b47074169754b1d1bd113f7b0f0942bb22e0b6cd898e63f4
-
Filesize
48KB
MD5343fa15c150a516b20cc9f787cfd530e
SHA1369e8ac39d762e531d961c58b8c5dc84d19ba989
SHA256d632e9dbacdcd8f6b86ba011ed6b23f961d104869654caa764216ea57a916524
SHA5127726bd196cfee176f3d2002e30d353f991ffeafda90bac23d0b44c84c104aa263b0c78f390dd85833635667a3ca3863d2e8cd806dad5751f7984b2d34cafdc57
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\Microsoft .NET Framework 4.7.2 Setup_20231025_170051763.html
Filesize1.1MB
MD5eeb8978977c7050ef857bd4aaf063e12
SHA114d02e7a9e306456be035f1dda6b503f87f1ea30
SHA256933b1582aede02a7f409b9c0b303c07d068f2e797a84aa72188d249cf9f91925
SHA512dfb32f552d06dfa7c5ef6c4620a6bcee86f7ba0708a8bc77a93ede83dcb6ea507bb43bb4ec2479801012ce3171fbd32b406e7cd7d9f06d5279003996748c43c0
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\NEAS.064750db7ccb691c516526c61d235fa0_JC.exe
Filesize488KB
MD5064750db7ccb691c516526c61d235fa0
SHA144226a36e43f481a5dd28aaaaa3d4809f8309e32
SHA256524333bee12a6c3065e8d853e1958d6a0aae673d32e7d6129a70a7c3fbaab11e
SHA51273fb5cb7eff8f76b5d85a720a1717969129cfadcc0a250ea4531ce5253bf98fb7d799f006466440b0dced25642dbaac6f3bfaa57e81e10563f851717198eed2d
-
Filesize
10KB
MD5dbef78447120e830587017c581f994f1
SHA1ea5214b9503e9a3b5335053b9f2e85c1bd26f3ce
SHA256a380116d80066949811b29c5b53c20488c1ca6b05a955c1698aff58fc18ebf94
SHA512eda079a1c4e25d18099accf11860b7c78c9c303c855d87ddfd1750a41e47571db6acf929921a20be693a18d948799279c3f7be47574a2004810021271d735b3b
-
Filesize
8KB
MD54aae089d3731c3f9dca27587e61cc4a2
SHA197b570c80cce9d68fbdd728f8524d92bce4a5c35
SHA256ed8f2f1786d5c57aee9c8228286f41b1665f46b88b882557675350d5108b438c
SHA5126ec755dc7f6531bf0ecec25f8fbf5f712ccf46f93b954f8acf522b33b4bd13f3781e73f1122a81bd5165c507b0a58222a3cafe6fbd25f5d606b4414a9a4009fc
-
Filesize
203KB
MD5e1d821d20e2786a3ba14b0272a3e7742
SHA1d92891364a22ba293144f0fd89a4bacceeecd8f8
SHA25625300a0365e7e22f9ef6429b90e4e7a21b9eaa0b73571af638c24546b7de122c
SHA51271d84d44a93b9d6b3c9840bb223b011d184f4bbdf49e93b009f456ec82b06eabda210112570112deb54e68bd739cdfc69da0933e4e24e2bb7229f82c24684412
-
Filesize
4KB
MD5612a650d1c773ee52d62546e66ff5918
SHA1a7479722bea44f8719b651ba69aa337d60da4290
SHA2569e0774deea09130ce23833cc3f0118e8dd06750e3570a230b199c87cdf354c00
SHA5125882a9d5340d0197c660d0774f22a82f03a0fc73d14476c47d3ab86dfea8f80850bfb8af7a9433b120f4728da4889083086666145b3e2390966e6816ad981483
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\Microsoft .NET Framework 4.7.2 Setup_20231025_170051763-MSI_netfx_Full_x64.msi.txt
Filesize12.7MB
MD50a9ec4d2f5ac61b3791808080c808f26
SHA1e13342fce4c7ad57278799946a5ed8dd76e68fda
SHA256da9d03c369a08f011af47f81d7b3fd8b5cd575ead888097d7374bba215e56501
SHA5127f57fc9ca768790aee8a5d4a56f94febc4413149cf5d6daaa532d6166c70cdb3949172c37727a75a03c12058d6f098e934093031af1a2f62b41b8b076af07577
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\ASPNETSetup_00000.log
Filesize4KB
MD5f0b3330b070ceadadf54af8584994dbc
SHA1893f62af0ac313d8af219ef8fbb3b4d54cb9db1d
SHA2566a2eb3c2d394de760b47cffdffa8dbd7db819034215a00355c98e084a58f068d
SHA5121f2beecd841cfea0f998b9a04745f212184a4f07a97d5cfb80ba19e173ba2c3e87071f9dc27dae572c0268198751feb146c96e00f66f638ba209001225fbb110
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\lpksetup-20231025-172338-0.log
Filesize36KB
MD5983b25778b68ebb17f66d73c870520b9
SHA1f8734b740756249a961f4a95f36f08404e44da23
SHA2566eb5ed586ff3e4cbd63e8d1eecd61e53d8651356340d61532fcf055de0e259ad
SHA5127df4bb8c2843ff2cab5b88815750f19e96b80c5b42b6bbbfffff4c3a235f7d6dbc65f9807aaf9e2a4e95900cab2929114a5d86fe37bbd119351f38a82414b5cc
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\ose00000.exe
Filesize145KB
MD5839f398d69aaef229af25859887781cd
SHA11b249cde5f4046327a8e0990ee964a6deebe0d99
SHA2562dc7f47dda188803f77343a5f264b199f97e1d020969d6cf55a8462b8d6bc3f8
SHA5122c6a40b30f820000bcaac1faa724ee259a6a2eb5e7d108e6589e05915dfe8ba608d21af872fd35099f0527856a6332e9cbf92dd8ffa119459e574dfc5a66b5fb
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\dd_vcredistMSI6404.txt
Filesize411KB
MD58aad70ce1c8511a510a5e659b39da606
SHA1b320fa7169c4f63d619812751e4a15ff1b4e343b
SHA256442504f89420f9bce6b15ffa1ce73afc3f16166fdb597d2120bb6f4cc9e8acb4
SHA5124c1e7ebb543a67d67df87a9eab53441ccd74de2f411b1c95b6d3846a55f6a9d2e94471947ac8288e4b21a8988cbb172a8baa11ccf214b3952f4e25d2e47426fe
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\lpksetup-20231025-172104-0.log
Filesize35KB
MD5097de13060011a0a76cb0d984f77768a
SHA1484a65d3544b60d44e9f0438008e5bd8e9120904
SHA256c4feb956cb5ea4204d85fae544e686d71088561401708484ebf24b97e953e549
SHA51225554cc72f4480b1a9cb2a37888f55b55ee3b386acd2c005d599716e7ba71712b69d295f7fdfd181481ec87743f686efcb1b7b5be05d33dfa51eb11c8e224cba
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\e5a31511-ed7d-420a-bace-6191e5bbfbd8.tmp
Filesize242KB
MD5401eafc7e4a7643348fc1226cb3c3f50
SHA1cabe62a672ef65b491e7b477eeed0cc3b2a0d661
SHA256958376c4600e47a01b8adea2ca22abc673217afd6bed4883ea2edb9e16fd102e
SHA5127ae6dcd94f83ca062209b4b431498e94f9ea35daed6e79ddc078e62c7e57ff4d03797250e336707391f8a7a2e913c9122135f3bb0cb6d6a6da251e4aaedbea9c
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\jusched.log
Filesize347B
MD5d7dbf402a142f243152b1cbf3ad63064
SHA1625d052e4c09a92cfa7615b14085403c651dd143
SHA2561069b55605f3f07045c1d17a4867abccdb2d6ee81a70c8efa278e445ed9d44ba
SHA512e190d3f445702b447e9c491e37fd5df5d18c8ca72685d30ef004c1feadab35c969eaa5ca6b148ba9a0aa5977216f167c6e532401f4fb8ec4a4c9dbd1837abcb6
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\TYGJSV.tmp\e5a31511-ed7d-420a-bace-6191e5bbfbd8.tmp
Filesize242KB
MD5541f52e24fe1ef9f8e12377a6ccae0c0
SHA1189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA25681e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
SHA512d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
-
Filesize
13B
MD5b2a4bc176e9f29b0c439ef9a53a62a1a
SHA11ae520cbbf7e14af867232784194366b3d1c3f34
SHA2567b4f72a40bd21934680f085afe8a30bf85acff1a8365af43102025c4ccf52b73
SHA512e04b85d8d45d43479abbbe34f57265b64d1d325753ec3d2ecadb5f83fa5822b1d999b39571801ca39fa32e4a0a7caab073ccd003007e5b86dac7b1c892a5de3f
-
Filesize
347B
MD54b124bc92e30b8591d57859ea1eac790
SHA13a5a25afec7bd39d8967f0390253c1581c8401e8
SHA2564d8656efc7b863015e69242b78e01494c60a2ed572abf7710a07e337742553ec
SHA51262c01f7548b0cbb29b25ae65fc6f8f782f79077d349a6849957814cd7366ed70fcdff12371d7c9230508a3cb265ebb21131a2af0935394f696b3bb853b80fa20
-
Filesize
4KB
MD5b9a9e0286695075f41b509f3e66e8e8f
SHA17c6c19a89fcb6b6ca6044019960e401209754966
SHA25681b61a36a5fa633bac701db92611c25e504a87ee433edc777f1e3e910036081c
SHA512d91606c426af6b10c01a0754506fc9c95904242d4da810fa4fb7773b0f76467cfa0fb13b3f1dd4fce7c9eece0961ee75c45f59bac558fb5f810689adafd2f3a8
-
C:\Users\Admin\AppData\Local\Temp\TYGJSV.tmp\TYGJSV.tmp\dd_NDP472-KB4054530-x86-x64-AllOS-ENU_decompression_log.txt
Filesize1KB
MD500ef27025874f903713f40b9eb5cceaa
SHA1aaeca72f91c4c1cc35c9fbbee26486b15fbaf064
SHA2569a0b3897c2eab19358a32df657662cb4dd5aa1e01209bea279b7e5cdb32fd0c5
SHA512d3740e0623de2885222914c2630c98ec3e8efdc5d7c6495d3d9ad47a0b366b1c405f3487837778816f635244562bc33bf25f0e162bcd38a900f0a28414845747
-
Filesize
2KB
MD51323b221c0e0e9727cb9e3071e483cf8
SHA1096a837acd90f9180742646c6b15af3b12a3e919
SHA2565c1e91ce4feeb334ccf7aee7ed28b7eb7621289bb4f31ff8e4195e214efde240
SHA51253abd3127c01b5482f5e57c5e56f6ea48fbbc390fdd66cf9382d1bdd6b3035c809d69a05f07cd2fc1a0fbdbc54510f636e8aed3e6d1e62cc0505e098f5f6ae37
-
Filesize
423KB
MD564863f549f5592d437f3de5e90039ae1
SHA1a03c1cb87c06d3f053b9d3c77fe4c97258e50464
SHA2560977ede024411628ce585125a71fc0630fa9f20cd654d31c396d795f5d9c6e48
SHA512e73228f6fe76b9fe391005e3db021d3e35ce8d4a6a94699179f87b803286d09151f29b6775025d2bd85b1898d893ac786fc3066ca18c228569646a65ee310c55
-
Filesize
411KB
MD58aad70ce1c8511a510a5e659b39da606
SHA1b320fa7169c4f63d619812751e4a15ff1b4e343b
SHA256442504f89420f9bce6b15ffa1ce73afc3f16166fdb597d2120bb6f4cc9e8acb4
SHA5124c1e7ebb543a67d67df87a9eab53441ccd74de2f411b1c95b6d3846a55f6a9d2e94471947ac8288e4b21a8988cbb172a8baa11ccf214b3952f4e25d2e47426fe
-
Filesize
11KB
MD5b424faa0b3cf7c784115c23380eff60c
SHA1607c1bec59a5638b5a0923ced78fabdb9a1665b9
SHA2569598fae18832ad6e8085086f870eaca8013248311eae1b7664eb793ab19a5e05
SHA512d190c837dddbf0ff60937de9c5ce76f4510a6058e4e57f96619b2994bae9d6f787a1b2f752ebf8c8c0101fe829bb2e453b47b4977f413ca32917aab4374fa7c4
-
Filesize
11KB
MD564d2ad04976dfca309f8c94ad03b59f9
SHA18d42b369472d256e7eecd3f0a9a06c357d5f58af
SHA256a6fab026bea1d23b1b98c38a7fae194178306a8b98f3e802071b6f229639f047
SHA5129b44a82353331c319c7cd022f21e3175b07ca1267fa7a294b5314508aa960a417bbf1087df1e0fda49d6b7f62a5fd65fb4aa7a7e1504e0f46e343ba35ce94ee3
-
Filesize
7KB
MD5f3046dec4fa29db4329f387ea2ab15ea
SHA19222447ba41eae086bf7dbd859d0c6666279c46f
SHA2568e9c27baff2148f066a4c50da8a39d43f08ac680dae3ec55c06ef8b4c0057b9f
SHA5120e5190ba9f7274626a2ca66e2d862b7991f3d53cedc6a9e00386aaac8928562c9033b3c190639e805cfdf86f5326866d9f8e52434261827ccdac35b40e7b28ab
-
Filesize
2KB
MD57b2ec70bedf10384d758076fc467d28d
SHA12f0e83c876dd27e2c9fdcba945dc147e4487c5fa
SHA256198b7c509a3bc778ab0d2f178ec38efdb6a5464a4acb0e85751ddf7416ca90d7
SHA512750734bdbc8df31ab28039d9a8eb3562279d258d8d6338fcef68cc1839db2ed6d11cdf660445674cb50f892be27902bcffded833fead1338a1affe7fea525054
-
Filesize
170KB
MD561698f2ba07bda2ba323140f20b28e28
SHA1d3e46602b6e042abdfb6a8630ccaff23801cd104
SHA25651c06f89c259219fd364b1a36991964e772e968873496a4d61532d488b2cb8c0
SHA512eb7f3dc17e49d2c2191fd6eb235e22ef3aa63157f90da42af3e6653e174e129e663b9c1eac8798d770a99ecdad4230754f07c84a96a73d85e6c8ef14aeb1cfeb
-
Filesize
4KB
MD536cf8d512a14fd2c5263e06775f2da47
SHA13e8ae2e7855ac773837272177b985f1705f65667
SHA256c3d0d9bf10e08fc22138cb4fd1d0fdf59f37cd2e12e3ff779ece43259f861cc9
SHA512e61afb7cf48065a5ad087dcd9ae7ae2c46552cb68c1bd1bd8f9df51b8f0eb040e6e69423d45b09166d16959e7bd1e247d7dd02552da8ec40d9bc805883e58725
-
Filesize
33KB
MD5bb583efca70f3ae04800b669c5645ed3
SHA1e9ac90f667f4f9eb46c28a9fad3d442e0e3ec1df
SHA256a145fae2d9f526650bea20e5c25c49c60efb35f67c449dea43f9df033b44533a
SHA512be0a35dd4da70ff5173b98127c0a7244669c74c7caeb6dc2257fa1f8e2d36c5e223d79ef424dce82badfca62dd2a028ff701290ecff1d4121e685f9a2db599d3
-
Filesize
33KB
MD56645bbcf0239ad5c8cc16d27f0fb6a9d
SHA1ecb7783683c9d3ffa7a183d75f5ab3dcbba695c6
SHA256fc901b9797d34bcea61958d67ba6a939548294d39b2a9e85724784fb8df2827f
SHA51288a562237f6493ac1b72e3edac420d6e0aa5624d107e5c9d7292582403f608c274de0db31eba6a4561dc36802eff20987ee467f308e07f59c29f441160b0d4a3
-
Filesize
44KB
MD5302b69014cc30194bfa0f15f2bd825da
SHA1087cc01b0607f6d4c282d1014a3d7a6801ee1a5e
SHA2561d04c3f185fd431ad7cd9c0b7ce6e1de87025e9f2a5e9db224ddf4a909c25fe4
SHA512d38c83744007ed3ee1527268165bed9c77fd8e2bb5b992e1136ce99de59b96e2870db88253ba2fc8de77be04a69dbdd509480dc2679deed6963fc1c8c77b6924
-
Filesize
35KB
MD508f39d8d3b7d726d23cc3259210527d8
SHA1f8289b28a6fd7a8b3ff68cc76555cbed338b7953
SHA256791392b12ae83e60a1a9ec278d5ee982a8d60686b6902ac8bdc452663f1e9e69
SHA512dcfc16aa01331eec0d282c9b2c1c53ab8f4c8a677d8f61c64af7076345adc09bf2a85b05ffee03324f226863e0a69f2f3267f2a225885815aab220eae3b499d9
-
Filesize
36KB
MD56a0c8a79e51a72c7b2e11c813e0dfb94
SHA1f98c19ea81472fb235ff37af11f81badce587333
SHA256d7559d149c8f29fcc156e16b7a12775f636eecfff7654fccbd0f4e7adf4e0fcb
SHA5127bb86e1ba8d5ee2cf2e9a52b0d00d618b502b7ab4ef2d84c16b14912943688a6a4eb9c9d8fd55d6ae2e6e3b2b131f9ae9aaf53381581bf761f2d98abc952d1cc
-
Filesize
145KB
MD59d10f99a6712e28f8acd5641e3a7ea6b
SHA1835e982347db919a681ba12f3891f62152e50f0d
SHA25670964a0ed9011ea94044e15fa77edd9cf535cc79ed8e03a3721ff007e69595cc
SHA5122141ee5c07aa3e038360013e3f40969e248bed05022d161b992df61f21934c5574ed9d3094ffd5245f5afd84815b24f80bda30055cf4d374f9c6254e842f6bd5