Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26/01/2024, 12:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe
Resource
win7-20231215-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe
-
Size
56KB
-
MD5
086481522ddd73d2511991cb48f92078
-
SHA1
69faca9c790519234f3b6509b0528531175319f4
-
SHA256
c53eff8e80c2e3ab0d228a3905e846200869fb57d83e10eee0b4f08d167ce397
-
SHA512
8bb0681980701bb9ae02cb606ef0bb5e7d862beb4313994a81ceddeaaf97843d992c33c4b700ad4c844deae99d6854d930c515b3eb4013bdecf9c7c93eb402f3
-
SSDEEP
1536:OHK+ZHaTXNZOxpZTy1IsTTm84rzr1YM9FoIv3:OHpRaT+plyGsTTl61HPv3
Score
7/10
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral1/files/0x000b000000012252-2.dat acprotect -
Loads dropped DLL 1 IoCs
pid Process 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe -
resource yara_rule behavioral1/files/0x000b000000012252-2.dat upx behavioral1/memory/2672-4-0x0000000075000000-0x0000000075007000-memory.dmp upx behavioral1/memory/2672-10-0x0000000075000000-0x0000000075007000-memory.dmp upx -
Adds Run key to start application 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ovtswgm = "C:\\Windows\\system32\\eiafasj.exe" faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe -
Drops file in System32 directory 3 IoCs
description ioc Process File created C:\Windows\SysWOW64\lqpti.dll faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File opened for modification C:\Windows\SysWOW64\eiafasj.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Windows\SysWOW64\eiafasj.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\fdsfpysdspi.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\fr-FR\lucyvuylevfq.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\InfoPath.en-us\risnhb.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ARCTIC\ckmxtgtm.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\js\pzanaufq.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.core.ssl.feature_1.0.0.v20140827-1444\META-INF\wspiko.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\html\yinkix.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\EURO\pkggsfhcsm.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\ink\idewihgrpxs.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\BIN\klowkepmatf.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\jsyjyv.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\bigruyiyddkw.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\Portal\biumdwcindtn.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\wgfboboezdh.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\TextConv\de-DE\nfzbscfqvy.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SLATE\fubkyunoq.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\Java\jre7\lib\applet\gszde.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\en-US\mwpfydpjrpt.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\Triedit\fr-FR\ztkbeklj.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\HostSideAdapters\zvchasxtejnlx.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\VideoLAN\VLC\locale\gd\pfgsfrcefy.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\yktmmxtjtskve.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\RADIAL\ydjcaspolqtsf.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\VBA\shxdrkkxng.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\fr-FR\hfuaikhi.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\MSEnv\jwpt.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\Web Server Extensions\14\crvuw.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\dmpfndwsjqemr.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Microsoft Office\Office14\XLSTART\axnndgot.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\de-DE\css\iytbkrphdydpj.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\TextConv\iwdzquhnvge.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\Pipeline.v10.0\AddInSideAdapters\pmudqygggt.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\pulbetzsghxyu.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENES\ceiixbhuj.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Reference Assemblies\snouldebm.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\PROPLUS\ifaentdqz.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\nkxigxrpj.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\Triedit\de-DE\mogjmczudqxty.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\rlfsz.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\VideoLAN\VLC\locale\lt\LC_MESSAGES\looqcre.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Access.en-us\musgtdcj.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\TextConv\ja-JP\bylemvm.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AXIS\cudxzv.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\VSTA\8.0\vkybpodjxd.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\MSInfo\fr-FR\obrghaedrke.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\AFTRNOON\romve.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SUMIPNTG\drqxlge.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\ENFR\vzzm.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\META-INF\kasoixlnsdjoo.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\TRANSLAT\tmtabqeqma.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\VSTO\sfywx.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\dpmqosn.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\Windows Journal\fr-FR\gqoxygjb.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECLIPSE\kkvzvvvzvqq.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\cjnibkw.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\PAPYRUS\fybz.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\Web Folders\niqgoenrvuyqo.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BabyBlue\psqfwla.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\onwz.exe faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\TextConv\it-IT\xeyagdlj.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CASCADE\bkbhrckzitgoy.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SKY\rjibwcmsq.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\VGX\xehx.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe File created C:\Program Files (x86)\Common Files\microsoft shared\ink\1.0\fhja.zip faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe 2672 faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe"C:\Users\Admin\AppData\Local\Temp\faf25f11e3858dc03740926be99dd233021a86132d562a48d79c830598b7a858.exe"1⤵
- Loads dropped DLL
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
PID:2672
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD5086481522ddd73d2511991cb48f92078
SHA169faca9c790519234f3b6509b0528531175319f4
SHA256c53eff8e80c2e3ab0d228a3905e846200869fb57d83e10eee0b4f08d167ce397
SHA5128bb0681980701bb9ae02cb606ef0bb5e7d862beb4313994a81ceddeaaf97843d992c33c4b700ad4c844deae99d6854d930c515b3eb4013bdecf9c7c93eb402f3
-
Filesize
8KB
MD5a1a4b157a63b8a4e9632a2116abd7924
SHA18f6596bd069425c56dd69af9a5ef68fa6eb7ad06
SHA256cb42f1c3e73dc00eff229011b72eb1cf7ba06d78dc455ab1151a4439ab07a192
SHA512824ebb0163d6a7cee521a2d775564c2f6ed6b8cd70d418178c89b6efb9cea2624bb6d4f5dc8753bf031c14fbd4aef6d76c25b337f40b67e816adcdd5e5c5400f