Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
12s -
max time network
135s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 13:15
Static task
static1
Behavioral task
behavioral1
Sample
210709408d0363f755a2a04534ae8c00.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
210709408d0363f755a2a04534ae8c00.html
Resource
win10v2004-20231215-en
General
-
Target
210709408d0363f755a2a04534ae8c00.html
-
Size
3.5MB
-
MD5
210709408d0363f755a2a04534ae8c00
-
SHA1
9891a7c0e66c6520a082c3f3784d29e7bf423a46
-
SHA256
6962f2ab774d726dfaf1057b3d23e6ec909bfca161987ccc20b3fde1691d6698
-
SHA512
c1aab425b654239017d7254dd30bbb82094c90da5729804d2c9688fa50969ae69952dc2d4baa5e38f755888e9521452d10a3a92b7029c3e2983888ed7aaa7e82
-
SSDEEP
12288:jLZhBE6ffVfitmg11tmg1P16bf7axluxOT6NA0:jvQjte4tT620
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{27D87F31-A3B2-11EE-AA09-E6B549E8BD88} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3627615824-4061627003-3019543961-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 952 iexplore.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 952 iexplore.exe 952 iexplore.exe 3008 IEXPLORE.EXE 3008 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 952 wrote to memory of 3008 952 iexplore.exe 17 PID 952 wrote to memory of 3008 952 iexplore.exe 17 PID 952 wrote to memory of 3008 952 iexplore.exe 17 PID 952 wrote to memory of 3008 952 iexplore.exe 17
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\210709408d0363f755a2a04534ae8c00.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:952 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:952 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3008
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD56fa2924f92f3142d98bbd0d393f14137
SHA19d00d9c6c45748b04ae93232607a3bbb77ed593a
SHA256bd97742c14bc9c5f5e64c4615be6d9ff9eabdc044ac30bbe0e1450b44d624c4d
SHA512833c0408fa85ce96fe654a526698b283a1c9088c25483e3cd2e23bd2a1dca6c9d0903879c046275cff801dee2f70e6132d30c35540633bc890cb945af09d7ffd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5febf4f74948042705870fc91f011a45b
SHA1deb525ecfaf80e55492e159a865630e2d6f57ffa
SHA256f2894b7615e1946183854bc7b9127da434a7e6e696d1f3d45bd9f87e58754eda
SHA5125af0446198981a4eda783c81fb54761bfb20c407874f8fd5f34887a0b6a74c7b0c511a1f56dde5559483e4e730871d5cac1dcac6b6465a3bdc8f7b203acfbd13
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50916e5cae40c1264d480038f2cef928f
SHA1b492ff4abf5af5bada07ad7a096904cd52785fa6
SHA256046fa0260591b596e9f2c8c74657c4c1ab2d43490b098aaea8f3f20f6734ceec
SHA512bbf3737e64308e3eb4c6e3bb92a9857df6c5591577dc04ed4c1dd950358129a8b3b43d48b4a9a619a481a17d4d1335d0e95397aa08020523b49b653d2dd942cb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD527267d1c1200401af689485486448ff9
SHA1572eb40ab7fab664c2bef14bd551bc5469fc20cc
SHA2569361329149e1ba111c6f3ee249eabcad14be82650b49ca39cfed5ecffefcce02
SHA512120be2e4f52ba6c1c74bcf86cbdd9cd676ce6cc066f515b0a60d036085d94a0ea225f601393336670f1be30d4dbce7908e669391512cc70bc100626451d923ca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51728f43a33f5874634953675c69dd6d5
SHA1d78fb701f43b81ba8a2bca03813ba056a9d5176f
SHA256ad61cc17cfa03fa5998fe87431583985385ca556a2eb4db315c06dfb873756a3
SHA512e56e10cea1dc89b85a9f926cc4b6bab7c0b7f86f96d2068a30bc27c5ce60d5ff9d60a24d94730c404935119cf93df4ebff21b7d267d5e269f7df79f3ca8b17c1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f53cdfcc7e0ab9ddeed439840a213348
SHA1705471f4aa1f33214bfad4908fa4ff8b1df793af
SHA256443fbcec6ca229e975dcfce4a2e203d026b2c80a89c84a43298a355b02d558bf
SHA512655c0764b215cb185584cc48e1b05df7b423faacb702886747595e2d76a0f3c0a583ebb1bdfb47db0d42bad387205056a0b7cd8949cd71fea950425e110e2c67
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a9ed0540fce3a0ce2bb01b5716444175
SHA1312b729d3bc69e85c00aaf585e27838fafd1f394
SHA256d23d7a9999e9636153880bc102b76eb025284714b1e3c99f7dd3bdae46bc64e7
SHA512b1a2380daf6de1da0f61ee89467d6881981f82fb514bfd4fdbe2ffe89cbd1932c2a27149b52c948c9b47d26e8d377f18b14193c8bd24bf812ad2a73f7f9f3672
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59f8fabc4d5b968c21b3fe63ad1b2d044
SHA199a031e4aaa91650ad8005278ccca7bc6cb6e99a
SHA256ad8915b6ceb80108c03ff8f9e0b8c2fc0a0cc7a848575c782aea1778f7eaa52e
SHA5129519f660381396e72ec8461a7a6c39bea92ea60fda13d5524250e97d4b12d1823c44b4fac62c43517c2135ec1e7073f5e76f288e057222926d58be31c84ab42e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b84fa55ef01aacac5cd94822ff2eb97e
SHA1d645f7884a6aa146db66024d2a97d4d0d96981ef
SHA2562d80778454a36ccd38b8012fbb31fbdd8200e8bae6c6dadd28a5e321e1a6e35a
SHA512ff1c5f7cd480083337376cdf096e6bc8ac5c20ca9288dd5255a4f3b3db0e459e86d93293edd1c7735a0dcf15387a951385d9cb7d923f9c519be7fe28f9b2cdcd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ca49c943f1023490862e8998ba716497
SHA1f49054a566f8d2ccaa02c0b4790ebcbda9fda924
SHA256d3f24d5880ad102e2c940d602942c0ff66449e02c74af4a8b30513740726f17c
SHA5122dd386e83fbd13202c3c061868913039cff1fa66f2fc0c80d87ca1ce4c8e35bd9411e1838edefcad2f6851005bffc49e1a0465d26642b6b5140c97d95dbd9a3d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51e8d467bdee03429f27d7a88e46fc083
SHA1fba85538903654c992087fafa1c2911425e15950
SHA256ae9e945ec611a00e0eb7da6de2726a072e0a253b8e2d20001ea1d798069add1e
SHA512cc079c4873221fb14bb0b79adfdd767470fcb091d50469f421c7a6c56d5baa0bc518e92f9bf5c41faac9fbc75aa5ef9b2e3cc994efc89ae010ac6e91959b1bb9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5575257d60eb01ef6069d7dde2f04ac52
SHA145e8ab817c675457918c92bd69cfa588d5fb2e0a
SHA256d3114e57a323eecc5960a4a775a6d0667283acf02e0521551c2ef2c03edf8632
SHA5128f0ab8ef13fde7a433645319e9a59dc5960fc7b72cd756472235bd826fc33a6e59267e53fd50bc34c69abb10596138fa5c3cca2a0944b1de77afeb4518a96e0d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55ed6d878143c1f58b09a45cd600a4da3
SHA18357dfb140215462c46707532e5740ffd04d7d3f
SHA256b06e1cec25e26ee9f33890c9847798997ed6f5768a79b9ae2499cb2b5d6dfd3f
SHA512718b45c0761f187da995bdbc95017c919d32645daa747ccfcb922f93444856502ee5f6e07dce5ae925e04efcfd84091f702e6f7bdbc196dcbb72eaf06b269eda
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD505a165f132a8c3fac2f6a10b9a8371e3
SHA1746506234e1f3cef0683dfa1f7fb648a52547417
SHA256bad3247aaf0cafa9a8027c89df7e361cfc4740a1d66cc48a914be61cbab002ea
SHA512089aefc606343617881649d4c9cd7a31d7d25d7329483e310d6838173ff918c7c617a1e7d98d430c4e9116401d7038ec5d2a4706e2955bfe7471a27b509a5ad9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e7d4f35787dcf0536fb71ecbf6027b43
SHA15904b254121a056bbd0f0412ce5b04c3abe16f98
SHA256b26a17428c5827ea3806c217300f905dc043b6fcbbd2788c0aa7715e34b7d7e8
SHA5123eaa1226ccf96dbba8822b73c3a4a96e5e8bfe4b6e53ca04a396137ef77f9d22f822fb43e0c05cfce631c785cff21a0ddef46e6d35b5541e2c57141471eeda0b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57e0b65b0992841a602bfeb355234fafb
SHA17aef8a89e4de5587aee1c2aea26483b0d2c985db
SHA256a133d836c9109db2109e979455a150466c95beccfc52c1b090cae460f67c3289
SHA5120710036627a309f0a12c2957a8ad6919e0538d745289ad1a9fef60130e6ed6d814399df5a7aa755e792e610d20bf56975f9468a4df5fb848df2770182582cab6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57fdf8fd044d109b89534f64700c44513
SHA127f63f567ae452555bcf0c55adc31ea60124af65
SHA256cbbb8353163294c19b5e0b30194e14fdf1afecf80b95e89f92eb6763b8fbbb5b
SHA5123e98c9178e70d02514581bd6988fa60207e2f92d581987f5c553ffbd55c1bae5068f9578854fddea5f2e330eff09c6752ac60a4c203f5112e3355b707f617cd7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52d9b28f02e54d1c7ce9b2bf6e552b5a3
SHA1d27baa377c4c33672edf916f6358d0201508e3ab
SHA256048cf135d51b32c9ae57ff5c293ac37b099ef8371bb71c150c4f982ea0632ccd
SHA51291c00f22a0b743d754f076609e0651b59631e172ca1cf5d87ae9a22ed64f1a3f16421169699434e1c8968e230c6ac65e34331eff9f42cfd34ef0872db71daa3f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b7b957b05326d397ea56ee4b89102f0d
SHA165f244cc9dcbfa64a5ded2ceda0933977b327d03
SHA2563fa32d25899f5a400f2e74b3516d358776860e68e9466fc4e424bcab8dd025b6
SHA5127df0083ee64ecc5074bd65e98b3146a152cf03a3ab8091cab663d835eb027623cb8bd1371d4bf6fa4c2ae1a4e102f756a88a9ea6e40218c599c16d312571e143
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD578e9649b1ab547dda9cc953773d31f41
SHA11c2bff3d3e86b5546bd28ce6132a8c78e40fa24e
SHA256ea40c17d0b4124cf15ca93fd2dd61e931bf2bdc9ecf9a25472d3065bb9de7bf7
SHA512e979870e7500da10c7573c7408c4cc44d5757a7c128620ca178527171bd6b2b35973dbe77d9cbb389c8ff14f91993e10d353b477b69dc7a8c70a38c7fbff0983
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fe3096b51d34fc950c0c8e3af4db2dcd
SHA1bf8bc01f31b5e9131de651f19ec6dbc629fb0387
SHA2566ccec5097fad53e6b4dd010680aa4dc4cac32d288227fc3b1fe0bdaf44dbb049
SHA51240168011502617192d138e1f3e59f70d3406f7a33304311c5b963771eef4db0faca987104772c1ba7cff779bd1400e23929a6a11a093ebd0b4df42f62c7db19e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD53c5048c8752d93c73cfbfb69c67f18c4
SHA1242eb8c7784aba2727c4e8817b7ed1a04b248130
SHA256183032f0ca3953cf6aeb9339ebe31a85eb16a42ae77d18b012cc0d9bc7b29e2d
SHA512f17460c6aebf6114d04e246e01b65ceef64862754a0141b073389ec6a49c3f25efa844a1f3b995f797ef715e4f315653b0b22d9de2271a00ec5eeb1861008ea3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico
Filesize4KB
MD5da597791be3b6e732f0bc8b20e38ee62
SHA11125c45d285c360542027d7554a5c442288974de
SHA2565b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07
SHA512d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CG8Q5H33\jquery.min[1].js
Filesize83KB
MD52f6b11a7e914718e0290410e85366fe9
SHA169bb69e25ca7d5ef0935317584e6153f3fd9a88c
SHA25605b85d96f41fff14d8f608dad03ab71e2c1017c2da0914d7c59291bad7a54f8e
SHA5120d40bccaa59fedecf7243d63b33c42592541d0330fefc78ec81a4c6b9689922d5b211011ca4be23ae22621cce4c658f52a1552c92d7ac3615241eb640f8514db
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\MYW0JBJM\jquery-3.1.1.min[1].js
Filesize84KB
MD5e071abda8fe61194711cfc2ab99fe104
SHA1f647a6d37dc4ca055ced3cf64bbc1f490070acba
SHA25685556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
SHA51253a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65