Analysis
-
max time kernel
36s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
10/01/2024, 17:32
Static task
static1
Behavioral task
behavioral1
Sample
512d1e8ad2883614cb49a9705943819e.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
512d1e8ad2883614cb49a9705943819e.html
Resource
win10v2004-20231215-en
General
-
Target
512d1e8ad2883614cb49a9705943819e.html
-
Size
3.5MB
-
MD5
512d1e8ad2883614cb49a9705943819e
-
SHA1
2c8b4c48e41b23859f27a826c02dd2a89c4af5d8
-
SHA256
d48045d3bf2a41ac72a3900a5727faccd82bd792b4a5e8a34639d81d5f5cc3af
-
SHA512
eb56391e923cae03ee3ebdebd248c85403110933d7018455d98ad456a33f09ea3d682a59dda56dcd734bdb4aebaad8182c206784f4c1110bbe2c9c14ecf71fd6
-
SSDEEP
12288:oLZhBVKHfVfitmg11tmg1P16bf7axluxOT6Nfh:ovpjte4tT6Nh
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3EF489B1-AFDE-11EE-B16C-EE5B2FF970AA} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1603059206-2004189698-4139800220-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2612 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2612 iexplore.exe 2612 iexplore.exe 2636 IEXPLORE.EXE 2636 IEXPLORE.EXE 2636 IEXPLORE.EXE 2636 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2612 wrote to memory of 2636 2612 iexplore.exe 28 PID 2612 wrote to memory of 2636 2612 iexplore.exe 28 PID 2612 wrote to memory of 2636 2612 iexplore.exe 28 PID 2612 wrote to memory of 2636 2612 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\512d1e8ad2883614cb49a9705943819e.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2612 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2612 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2636
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55118c286c69c9f4822e7e3036d142cbd
SHA10dfa4377115d03efa50714c7259c67b45e3cd531
SHA2566c47b58718a61adeb454b1b3c7381acd4ad1f7f6ae42c6a5c5fd4aa089f76e1c
SHA512d7effb0b938549fec52840853ac67aa0cedd00a4495cddad77d55cb576507cccc85bd64901788ffb82137dc1833c57f46300d60e960ae9f43833c226ed263380
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD589f63c19f73d577fb24ca7490e0b0580
SHA166248ec8424f81513da9548d633a678e26713343
SHA256e472b2c33389029ed2b290c8c248c06ff7ad3a79e1d5ee98041080fbc2b19cf1
SHA51285ee2c81cbd68428da10a2a43eb1c240659d6283af1ceeeb3b9ba6b5cb2ff69b7b926ab6e38f15c2a27ef8261c2738cd79a088330846b5fd88d716c4af7d30d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5519ecc8c42d83b7afb7c70cd467f1a34
SHA1ffa08db620c5905cfa129716e144571686ef42a5
SHA25670ca80cf976d1a9d41dfbfc7584b887dfcb161ca1b0cd777ca98ecad02af9c5f
SHA512f9bf3884c8e11725d8fa8842f82bb0fd1df8ba29f46d65c36d3d116fb1ea1b82bf2234252d559448e44ee7c8f1970defc6bebf6fc1a2c4c4f630811dcc1326a1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD568f9b02e759835d88879ff40eddfe882
SHA1a60c97adf5a5456fac2bdfe776a9096001ec7011
SHA256d51bb2e32420948d6ca93cffb88e24a368a282e66576e2891b61c81aae7786de
SHA512f42241bb42fc2af4abc1f18d826ecd31053497dd44cadd71df0f9ba1ad328d315fe91ba45d06d2724a4667990964ff1eb259b23ad44cc1505f2c29f0538ff2ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e9793fc083ddc9f62eedb86b40c71746
SHA1c087f2ac8f2f2e5fb4edea1bd7c8b84d76fbcb77
SHA256c2a7a938501309ab665535bbd82ee0445427d4a9c3e2148ce50ccacf0e9e872d
SHA512e946ae69f2814f036708d81fb6e8237bd455455f1acdda6c068f88700eb23b1a9041243be9e8685ece60b14c9b2d8e304231cd274006e5c988ab6f6b9f23aa36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55179ec89c6c0c718a452c6adbb9f5957
SHA132f6ef6974c982445f71b714f0eff37b712a4b1b
SHA256dcef3235f0d90d7cf5c7960ddcca9b47fbcb6afba1136cbbcc8a719d84bc7aeb
SHA51286e2cab8e7c9454559bb8028e43384ce4b4878a26cc5cf83fcc6c8e29b3d8d0aea2715c19760041657b6a950fad9022841bfaed1060f63f0a0a34b2b6fa5ad95
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5adbec104058d6c667e3e4868acf85751
SHA13d8d4a143e8c2c606ea5e540b43deb4a087b75e8
SHA256d2ef2894be060d1baef7662769fccf25d2b9c325e75608198111b965c8ae3a48
SHA5121d6602ddb46eca541a7a2784ee98100a4306c5f52b512ed694db51c31e11ace7d60633c5a89553a01d679145c9eeeb1407d3c5e13c05323bee882a68d0524b5c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51277709401a6b8beb467b0df7008f221
SHA1cb881f113c576686d010651066b30621d3905083
SHA256536a831c3bf537b3f547b9cbd0be340d4c12cc9b5a4c672008d5a745c985f908
SHA51269b2dbd408e53078414c1dc50f61aa75c2ea300b00e3391808baaaba89866a8a0accc616015614525b3458b04e59f269c89ac60a63eff168afe246dec5b5d758
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD598cdbed4530a381bcf000cba9f69ee99
SHA13953751ce48bb5bc1a926bf63cbf79901affdd7d
SHA256dbecf56038076e7a8dc63e84ecdbd9a217c0572e5bd60d87e5f88952ac1289b3
SHA51235c987b43c46b2f5a4b799840cacdcf320c01f56e2e42964a56db3fa8a0f22d86f3c360f9d3b7556530dba262e0a62cac093aa3230a400d2a527657891b9f9b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ad6cfd40f1b1975e2d3e4472c26aa16
SHA11e223e74fb134243497cfd02a4a10808edf1c140
SHA256984261ececf849165d249816a6fe2dbb02f92fc283649b95be812efcefaa7109
SHA512ea078b871c25d6e6aa563c78dfe283965080f9685a628773b9dc8b1158f40ca55b6255bbb06cd85a0111b66c2399b7e60491c9ead8b1a9aed2ad10ce502f4b71
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c71c4b225c90f946440e1c6c2016ba0b
SHA16c26784c97be24bb2d536b738e0753d570ca6cea
SHA2563fc985dca35dbd493d6061b58c088bdf9ee396f5f822e61aee65e9f24ed9d0cf
SHA512000fdf662cbe2cd2e87909c40cce6888f65b1c615d416f95792d8af076d2569b392040b2a5eb4fe6072b424b7ddda102158ef19380b6656886a9272cd42d7273
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56398dfaa58c3caf0decb6e6b4c7e692a
SHA13feae7afadd8c98bfded3a9d9246f36da70daee9
SHA2561102185bc00b8963064085a79572463f2f8cbbdcc4089a1e40df6d2c1fcc5d4e
SHA512d59f6a0af4bc5fd47bba74f92dc1610f133de656400f0f9d69465c7a4ebe003ff74aff0bf04ec732b2ec647005d3177553604d0ff49251ccaac321f729bfe79c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d70e55b830823409d8a46149eebe975c
SHA13ad57bfdfaf5cfe4254ccbb848e500b6fbc53e50
SHA2567d25e6da2f2c0d3a51ac470973938af4da6bbe78b03ffbeaccd467e0ad467cbd
SHA5121436045bc56a862f13207ab9507dfd30c8fecff03b93ff4e4b7a587f3ac2532065fa7bd834668e440ca4b7189d0c0a8fd42ae6e688a286c678e0d4b75cbf6e34
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b24c55963aa3ed1908b3b047ddddee48
SHA1e10998d596028d9a10d589956403b4e5260c9004
SHA256f858f69a956842ef34dfcbf064eef157e83dde480603eaa748abea7918d7528a
SHA512b33bc96419254205159ac7e147a1e196e4b86eab8597f95ba131b27e9c6efdaa4c80dab1989976a26be4e34dd875cbd77dd7570e3501048a0c05804ddfa84a91
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50d97dd078b11f77131a15ba2028eac32
SHA1ff3feda93f5118f80a35c557ec27d08cdb2970c6
SHA25658fce9b97ab8f5832e8bfc474ca487d06722b2fada5bf08cf557df37349c1443
SHA512f7ed3493d4714d68bd17d9b54a38efd4ee38232a2d64299e790b57e2afb4f76be9e5484a8413942f8feb9b76e7529c0157ca2b3ed5a3a8dc3305df829bced7cc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56bd8f9741713a7f57aa4415836897da1
SHA173d60e450080b5c55f90d6d491224b7d88347b53
SHA2563f422444a442113418dde89b54fc0ba6c76088a6b4a458310d9a4eb219f48eda
SHA5125c5b230fa392877ddedf6e03ac7456967e25174420202cfd9e8d026724fb3dbb81bd32ffec761fbec9222a6a0de7ec4bdf73b6d436d2d9b9572e43c57f76aa18
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c896860ba145e73ca3f6e5d33539966d
SHA182896a28c98661fc4c4233345278376e59266197
SHA2564ce7acbe807a6905c2dde406dffa4ff6b99e7f6112ef08ee24f6da70c6a9ccba
SHA512f65928fcfe0279307a63392844701f3ccc92878b4fb848ba59eaee460be9cf79a66ada6d8997d2d6444cc15e0e19e19697b6f4b25b12222f82a57654ad32c238
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD513e5af2edcc3c3a85719de28a9514633
SHA13425aceb983f829dc8175484fe7d45c6705f98ee
SHA2569313ebbb6effa279881fbcee26f0e9754caeed102739ba9f5a0f4e2ecdbb8ba3
SHA5121db7a18972493c57a1c9cffaf8960b627bbf04055dfa00c52814ccde53a1c8a428068884b482de68af42a6f91c17d6be3e33b2d91b177b3198af2b6da23b21ea
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cb11cc599f4f018526b61978c34b330c
SHA18ebedf0d163c079cf500b90111865d42d8d838b0
SHA256067e927207ff427b88392124bdafdcae7a2d8c704976275044a42641715d1b05
SHA51277c2fd67084b44fd66ba890ab0eb70711fb40875ac126684ab97bd5134f23ba7842c6693693ccabfd9f7a0c5e579682f4a65df4467b0922b7ebc26c9cfe3b976
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f6205ee3fcf076910ad7ce58621f67aa
SHA1251f94ad478155e334a67c398bf3a4d573c81e60
SHA2568f399fee38ddf13ec79f5b69f050a7fb5fdd8d490a78cff46bf8cca4968c90a1
SHA5129595898cb34c2e6682117307a663d17edbd436871c3d2c2ab9c3ec882c90fa07f6107afbef540f075d8bd72891484c8176515b2633ffc36e42e3c2e166650d8e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5291ead094291a24db28f73c9f37f436d
SHA1fc253351d6b9a434d7a5f58f87e2f2d220ad2749
SHA25633eb9905638c5b0fd8f3bdcc954b8bb7a13a9c637750700bfe073bb89ac7a3b3
SHA512eb875a225b5fa1c1a50b21cdd7ecaf8b49f08ec0c4a518df4342010b29a93df62bb8b42e1953bf8ff1622b25a8740b3bfd1c0f7af7cfeb6b79c7838223b732d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD593b5f4a34dea4da5927e46889cbe279f
SHA158fa8a40160977b8a74e5efe8bfcfa8539fe49df
SHA2563666ed534049866771e15ff9f2ce3a40128a398a44a2d8809bd23732f29d7277
SHA512f1c419ba6c414295df1312a8185095ab0b229baf0bf9ef066fa0d108e4fafb978c7e8a58fbea32a4e0bb42fef63abd3d4c624a1f949f50d4f0ef45a0ab8b65d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52e0454713aa010f6f574baea940a1cbf
SHA11f749fd2d0f2fd96be16b28e10a8580125b98794
SHA256325b096974a9917e9960ca7981f942a292c912908c7cd16e11bbcade3926399a
SHA5120c59bf3a61462fb18e79f77182e228a5eb303627479c7118ab75d0ec8c109cd3766859c247c4a5099c763ab60dd6a6c7c8ca7656aa73bd6dfe539179523dbeaa
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4R90HQQX\jquery.min[1].js
Filesize60KB
MD55fe4d2971caaf89bc01399d112efc755
SHA183f4872762eb78a97385499d5627b202dc9401f6
SHA2569af20e3d4c01742e4a34d23fcf95b5638878144d9ea96c49a007399487e38663
SHA512b85f93672226375f6fca91b70dcf298b8d032c31a02b0260b14e1bc085c9387b7bdfbb115a334e2fc8730a19e0accd90ce089b7eeffdac24c046ab50378789a5
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\E25VF8N4\beacon.min[1].js
Filesize19KB
MD5dd1d068fdb5fe90b6c05a5b3940e088c
SHA10d96f9df8772633a9df4c81cf323a4ef8998ba59
SHA2566153d13804862b0fc1c016cf1129f34cb7c6185f2cf4bf1a3a862eecdab50101
SHA5127aea051a8c2195a2ea5ec3d6438f2a4a4052085b370cf4728b056edc58d1f7a70c3f1f85afe82959184869f707c2ac02a964b8d9166122e74ebc423e0a47fa30
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YT4IJQ91\jquery-3.1.1.min[1].js
Filesize84KB
MD5e071abda8fe61194711cfc2ab99fe104
SHA1f647a6d37dc4ca055ced3cf64bbc1f490070acba
SHA25685556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf
SHA51253a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06