Analysis

  • max time kernel
    147s
  • max time network
    141s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    30/12/2023, 11:36

General

  • Target

    1749b90cb897890998191d75e998b977.html

  • Size

    432B

  • MD5

    1749b90cb897890998191d75e998b977

  • SHA1

    f282ac562a8d17f1c242849d907176bef7f8c85d

  • SHA256

    a6071f7a68e51ff7503feefa65a3218ee7ecd626101e1e868fa5ead01967cc89

  • SHA512

    ea63ed9cb16bc5759529ef0febec7c4ed648283ade0481208246c8d3b288475d3a045add81a2fe817a3889e91c99f91fcdc5f749826b837082d70b72e6821840

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 38 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\1749b90cb897890998191d75e998b977.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2912 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2984

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    294f4c6d9412db6bc5a7a27528dfff3d

    SHA1

    d2eecfe54a3a0311c2bdae524940ef358a47d601

    SHA256

    d150bd0e5bb61bc6efc328aaeba12d1bb666418dacb05f1071602dc02864e152

    SHA512

    3ebb950dcb07a35540510926efadd7cacbd92dd0b4e31573b353487fd082984e394653e30227168291f7e0cd77fd5be2c43c422122418e7fa155c30c5a10e60c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5a73373eb0be6a34aa064a47744c7d9d

    SHA1

    a8ae8965e6367fcb76326c35d4384bcb317e7500

    SHA256

    2466915199d9455217122932eeddb4b21427b440f43c2d41c5c31f7cd39a38bf

    SHA512

    c491192b2d5302f451637df7eae77a56c5e9597aaa939f2c499e3f2f11889dee9837d699f0f0ac634ac20a64c51a9a55ba88b2c5be14ad7d6d591b8139c14ff6

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bf9bfb0eaa863ed0f362745ce4cf5c5a

    SHA1

    8909852381043de5e154ef7f81f9cb9b43e722d2

    SHA256

    489a2bbbdea660af8911c7b0a8830165adb295dc0199241e670937b27d140b24

    SHA512

    eb6dbcaca8286ab4d5f1b384572215e5a1802d4fa54c48cfe7a1c2824e654ba52aef744502e98f815e589570872e461c4e895f752f213f99dfa57bbd124e2b58

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6c05a800d5512859772b0a6f8145c171

    SHA1

    aa3ce3fa3f2f299fbd19961e458208c348586f51

    SHA256

    f24ea7a0001de05bb408826ed784e6faf113b6351994e49b4065a2716bc270f1

    SHA512

    a289e2cce41f4199b3bd491a469a12f47aa3a3abd3763d94257fd2dda52e325f19d5f55fa57bfe74a1f516ac33913c377adde879d067a84f60ea2da5a873f961

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    efba95c713cc33380338b4eb2e16b3af

    SHA1

    300673e3a43d50c60f9e9e0d9969e1446549818a

    SHA256

    4ccfecfeda3c5b1ed691c540a6cd8b2828c005d9c679cb247ecd3f6f9841fb63

    SHA512

    9c63f34c58e4d5cebeee15956396d39bf36abb639daa07b4fcabed279bc2f6116d38b66cf2517bd0b9a50c16e627a6f15f2b57954a1dfcc69a46c152bfecfa74

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5025821c9e7eb13f0e51287d163ea4d5

    SHA1

    efa588c1181e07a7664bd4c9f0fd436c304c44ed

    SHA256

    e4bcd96a7bde7b74a0c5c097635e8309f5de5668f7f917ef5d5bdf8095135307

    SHA512

    66b4fe2810f5aa285af8a9b32c5e1f56dfcf3f385196ea4dea64904efb29b331960d368a6a93c79970c730e040456dfa9ff53af517a581ff467e4dd42bc0914d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4929f9e50f34c54210b8bb934861635f

    SHA1

    68615eafed77ba4b7be2ae812b41717d4008d956

    SHA256

    7252931b00cc2d7f822517426a96811747dd05af9b02274417abdabafab29a71

    SHA512

    9e8edccad73a5a8c3a5b4114ec1210fe5c0fceed3b5090fb266dd6d38c8f12ef884ecccefcc6e466966c52a2758df8e46c9049f1300778249aeee11e6dce7117

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20ad783b636702ceeab9107c22facbd5

    SHA1

    2af9d7ccad25a3c35de2c378aeff46e79ede0fc8

    SHA256

    bd039e7a7aba9013481a3f36ae4c1a4f5666dcca0eaa35b72f0b83bea28d26d9

    SHA512

    608c9ffa09c9ed30a9d397ebad2a45facfb69f0d1b4ce81a9a8571a672e665e021aabaa2078f822d12fe0ad98866245afccd63e149fa5b4952a2a701c2dc3a29

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    98ee0679d93c14e613931406e6da65f3

    SHA1

    860cdecdfe2092cdac5336143d2c9c0df3dea4d9

    SHA256

    e6ac6861a496c94abbee2169a52783bbbba5996da2c0121d558511e141110171

    SHA512

    b4407648fef7eb2b95c490d886b73107b866ded4cf31e153d95756cd658cf91e8f4b3da26784cd049e3166e31e0ff1b46eb9347a5331321387c8b9674c311dad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2d077ad52a8f7041b5203cc86a7e39b6

    SHA1

    d3dc2cb1a804048161c1007a2520f71058a8d4f6

    SHA256

    6c9f0e62a7b5b99c4359d218bd8b98628633fa214700dc96c152f580dc512d29

    SHA512

    6e34535eaf5d51f3fb2dc6fd35da232c39665347381b6f0dfc095efd993ee1fab6e435842e34f58eec60991ab54d7d83a8dee2065912401db9f34455b8472d2d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    31d25d7c5a05b857e02d21652d48448c

    SHA1

    39f43be459f1484da076a778fd3ea525782a3163

    SHA256

    ecc7b0457b99ce24dfc1e0867815c754ef834048f2963d8816cbcc9561fae617

    SHA512

    14dab3ef181f111e6d3a52a066ab7aa302670bd606ef4462f3810b29e1aa3b30cd9a90c265ee10a20e6dfc6b24ecfb0595ea1359a8cb74240f41f1ddf43ed5c1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ff86f0913fa7bde23a40ca24f133ebc

    SHA1

    5b56ec1aa4f2b1322d48f6ca71d06306129f94b6

    SHA256

    31a9ab4b0d020acd504c9df65feea755e933c4a7ab8b4986d39701cca127e460

    SHA512

    79d7873eed094699dd8bf15591badf2bf190b968aea53eebf28e6a38caff71c32ff02c4a579b056832a05fa6eab121a11264ac7ef455233b3d2a4a0158dd7884

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d57fb9402ac3c68261e1725e44b8b946

    SHA1

    00f178f806aa764fee915c155eeb825311b0ac00

    SHA256

    1b2db5f14263cfbc7011cf1457eed84936cbeae55ae50019b3933313f737f9ed

    SHA512

    cf231ab41833af225e01a0b31c38a2fce33594ab794fe3620f40432780e58df29e9f5273b5a390233c22cf785fa0461934d56c6ea997ebd79d5b25c013fc6ccd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    22aa86c5f0ba417ff27dd203cbca688a

    SHA1

    f727edf7052942148283b0dd705a6079073dc5fb

    SHA256

    b3674b802ff877de6643cba08d8879b2fe434b3e2da7db8ded7fb9485fd39cc6

    SHA512

    d33262185349123288a2c960f7ccfa1c0beba5ac0efafff9f8965a377ac64eb622f0cbd39a0be33cd14cb4d474d534915742f320997f83aaca5d711d0145725a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e5e20e99c0da2d69b42a30e46725c906

    SHA1

    18c17089c1fcf2d46231c3a0ae3ef9cc006b98ac

    SHA256

    fa6f9d12bf6ef0ea2c0f9401b192f604575b8dc12f7bf3d613b5493a9826035f

    SHA512

    a5e28efc724c017c822df97726d6e69c55eca457f24b8202104da403418dd146c757817166b6b98efec3bf4589df84b5ee32e9fda888fd1a7ce9688d03afa010

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5260ba00389b21822f60704dcb4abbf2

    SHA1

    782e59ab34c5bc71cd5007ed4653e1399f3eb4c7

    SHA256

    7fdab442bfb0f1f440b1f8d49ca8e7c6384674d261e35bf0348b5a34ae4bc607

    SHA512

    2e628b7e85b7924ff9bb1d7b34599b6c6c899a53b8b7bf7ade322737bf2f5a66917dea65beb96f5838fc36526bf8ee65b94ac7fc2a9be1621ac99e0ef11b912b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e27f8cde786c1874143caea1f2a4e7a1

    SHA1

    d7eb630f9eee968168a5fa13d67898dbf495ae34

    SHA256

    ef166a3a677029c45d9140cf075d81ffbd5e056d7c07b9b5c2c9b4e891059027

    SHA512

    e70ce8f1724d1757da22bf873ad7177e04fe97ff18a687798341e94c1f543a8ce780296207079ee526a936b89bfc541e5775fe33f7b6498a497f43f36d6c0bdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    65346b08556f140d463aff15221d85ae

    SHA1

    60ac767960208768fd1411fe1d83d4babf8b935d

    SHA256

    355da6bef5fa887447416b252035642f944d764efafff66946ee944fe8fbd018

    SHA512

    02c6fb289b0c37fb1289809a15c92d11364e606fd573387b560a97fd7f57ee19c2a41ba2c8c0fab9bd818eec6d02cdfe3641d8fc2316a0d9c617f81a4d135cd3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    438952c4433e1b6228149a581d7c2123

    SHA1

    7c7b43aa527fe11edfe3d4804f338e01188c7939

    SHA256

    d3863b47a6864092c99a5f838dd03011f4f9429d3c1dc1e2e87faa44fdf20d05

    SHA512

    6993f724b7af9f0ffbfadcd483ae2c26df630783bdc487678c6e149342d09e7c4563c601db5fb3a32173ef7f8eca88684fa4d7e504cfc1985a4b94e1b8a35a6f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ebb39526ab36ca8548587da2215103a6

    SHA1

    645a8f19aa4ead32ababc353a90c9ac3bd4befe4

    SHA256

    5d6b15f10fe93427db1cefa89d88b7e4b88f84a7e9f98536a153385782db8a94

    SHA512

    3c62bc0c7120f459866a722104cf288f4e01ff5372cccac5801660ece42bc9bf5d93f829e0a0ed1f383c76b7b408db61b77f60c585e59d31db77bd7227bdc019

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f97ff27833499a6c20b6473ed354dde2

    SHA1

    1d5317b8e3e2e2cc2d5f8723374b764b6a8ac221

    SHA256

    631ba9a619c2bb84f5a1e171027a7b58a72158ab64cd55c093968c187d9cec31

    SHA512

    57f5efa03121f307f760e68e3814b078997d34029273d5c41579ffbc4fd30fd28999a018de0991560c00ead312ed2928c951c934f2bf3e92ec83a518a73180d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d09c4f76e962409f91a07acfb04387b2

    SHA1

    3823f5460885890f1086d52ddb493735b7d8924e

    SHA256

    9676b2904a1970586ade77e7fc245f1b244d404ec8a7faf117dbb7833fc6c968

    SHA512

    7b69480836b0262a402280fbb05657dba5e42b6c3b054530ef84c23c5ea8d5e72801ca15e6a08b4ba1a7297f7182870795eacd94e0d3e86b130314c78f576887

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    b2932a0c989a0477442e8c4562c77982

    SHA1

    c480a7bda8a37109c1db16ec841c3f418a32a8da

    SHA256

    c0f951e3039345eee1bf8f5012c9a0bf9babefc3bd35650114d1bfd58f3caa8e

    SHA512

    f63f7fe50d31d55a68090b9b70ef45cc166048babfa95f799dee28e2741a1914cbfde542f63df98f03408af10ce6369800c090ddd4536a19c0bda95569867a47

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    bf2f2d13306745d8b2ec7541cafccaa4

    SHA1

    977381a9ab67994d251f9a35e690c112ac3ecb4d

    SHA256

    f2706e4bcf628c2ac0d1cfbd5422f5762344a1ab9e6fa21de0af7471376c4d3b

    SHA512

    8d2684c780f68a6170bede1f611d44c2316a13a322b112a98e5c0ef1c8e42bbc604cb3f74bf5e1deddad390cdce3b5ea2ac8a1ef815a91b43723cbbf254ada56

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\s8rbov0\imagestore.dat

    Filesize

    5KB

    MD5

    fc497bb4e966bc3617d9db8790d5093d

    SHA1

    885029b4c6790333a85d065f2fa7fe7949694375

    SHA256

    7bde72e746a7e8370057b3d2b6e18c252e3f79cfca7a9496b0e29e2d875f4b4e

    SHA512

    905c27490868e3c0c66204da789145c14277ebd8663f2743856f680bf46a08bb65c5eb97118126ed8fa98c0a1cb2175b1813fd5ee1de8bd51b8bf1c6837d13a9

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\imagestore\s8rbov0\imagestore.dat

    Filesize

    1KB

    MD5

    17482ad7f2f1cd684d93bd4f535541b7

    SHA1

    61fc0fd69cafc2df19e1c601d2e4cc0db7bdb6a0

    SHA256

    62bfa8719abef3f9c076e634193b93424fedc96cd6ec0f40cfa0c0f02002c726

    SHA512

    e60bfa1c09728afe9c2d2edd6354474ae6473a8c52a3fd90153aa6d949a8cd690c9653c92c3dab6d6a6b74c1274668d3eee89b1606e9af2b3276fb9fd06e476c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\7DMOY2ND\favicon[1].png

    Filesize

    3KB

    MD5

    a75c230f34b9296e6fdd8b0b855df5d8

    SHA1

    e0b9e32053d44532fb4e8bb55b54c3211965517b

    SHA256

    8adba20b1dd9747ec8ac6ed5a26a8dfbfc7ab82213d8051b76ac771c76b87920

    SHA512

    950b94afc397ac760f38f4c68691bda6b541832e1d23f496e36568def2b9f9dcb6984c6a42ff6b5abef0e19b76c37e40baab22e9dcc9360091b609333029b24c

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\WAIL1UN7\favicon[1].ico

    Filesize

    1KB

    MD5

    91abe01116ab422c598e9c8af72cf4da

    SHA1

    0f2815fe8e067d48537ad168225ab4674271fa27

    SHA256

    b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc

    SHA512

    a4d5b20c3014153b6b382c43404917bd2cb5bd2a59bb1e981f5a19eb7dbdec185ace288e9700428d24e5ac623e45d04905e706f0c45a1642b1aa6c091213c23c

  • C:\Users\Admin\AppData\Local\Temp\Tar3181.tmp

    Filesize

    92KB

    MD5

    71e4ce8b3a1b89f335a6936bbdafce4c

    SHA1

    6e0d450eb5f316a9924b3e58445b26bfb727001e

    SHA256

    a5edfae1527d0c8d9fe5e7a2c5c21b671e61f9981f3bcf9e8cc9f9bb9f3b44c5

    SHA512

    b80af88699330e1ff01e409daabdedeef350fe7d192724dfa8622afa71e132076144175f6e097f8136f1bba44c7cb30cfdd0414dbe4e0a4712b3bad7b70aeff7