Analysis
-
max time kernel
117s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
28/01/2024, 18:01
Static task
static1
Behavioral task
behavioral1
Sample
7da57491076e2736773b50b7b5125662.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7da57491076e2736773b50b7b5125662.html
Resource
win10v2004-20231222-en
General
-
Target
7da57491076e2736773b50b7b5125662.html
-
Size
5KB
-
MD5
7da57491076e2736773b50b7b5125662
-
SHA1
2dec49f94bccba15bcc734051255afd00d01f7d3
-
SHA256
d9e1d9a4050bc2d649f727688e1740cc773a1c146cfff119024f0aff4dabac23
-
SHA512
71dae69252b861f019e2d399229ecd85673951b327ac60d086b77036b10667e2a1943f5058186245503fb986e99393e1f98dcee902d28b78e0122b20a3e431b9
-
SSDEEP
96:1IPyCQ6oISUKzvehCZGaXbrI/zvXdK+ioAaKLah3xVFBcD:1Ie6XS47aXb4zea1q
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 1080bf221452da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "412626776" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb8000000000200000000001066000000010000200000003d0386664cfc24aee16c82f9ffa9f840f771ca4b1ead3315f95cae7ae9f50d2c000000000e8000000002000020000000085f0921c65fea430b766e901d5542908d2ceee2ab091a52b4d9dcb99332519590000000b336ea07b4ae9771890493be24c7b3df753e6a15978951810aa30982552e730333c3d9960f930c7108cd23a55078ae5dc846d87994a1c78aebf43eeb6010fa80b3e1c69f71fd9e995278a0aa11f38f14ab8eb20cf1be1450122cd6570d2847f386e493f234b61aa07c2191d632029a0ce06a631f96db70cfe2d9beb9f2c8f004f2d934ab83db454ee28560977a496f35400000006b1d67d34326150ca62b2b4301616aaf0601a60eb34931a26718e11c67e6fa6b94e4ed99e2d3a76ed7afec11218c6feead391acafe836231a7c3bc7696cfb7cc iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb8000000000200000000001066000000010000200000003a7380820571cf4ad7b40ba0a58a9f3790c3db7053a676916a7c214dff0e5b9b000000000e8000000002000020000000678eb27976d55af6d72db32f347f27402275b9d9e9d7fa65d4184f35ce17f3cc2000000017f16994e9b442995026a715e7d93b4dffda0c018b854f8e9abb943c0c66b7174000000059dad910f989f190cd869c17a4988d31c87dc48a4d3ca654b96d884b537d4f472824abd6aa0b830984146e33710a6b53d4f7e5595b7a27c89b562dfacc2713a9 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4D9E3331-BE07-11EE-88F9-76B33C18F4CF} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2212 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2212 iexplore.exe 2212 iexplore.exe 2840 IEXPLORE.EXE 2840 IEXPLORE.EXE 2840 IEXPLORE.EXE 2840 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2212 wrote to memory of 2840 2212 iexplore.exe 28 PID 2212 wrote to memory of 2840 2212 iexplore.exe 28 PID 2212 wrote to memory of 2840 2212 iexplore.exe 28 PID 2212 wrote to memory of 2840 2212 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7da57491076e2736773b50b7b5125662.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2212 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2212 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2840
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50de48229e1bce8f2045c4414004bacdf
SHA131bb521e1d06e1bf0c27e2e9e57fd614c0c5a226
SHA2564038074ff7177471ffde1a613df742a63131964296a329cc9f327a30a5e81b73
SHA512fca06ac18b153776e70203c0f47352338030d18a31a1b15f85d3f7fa8c9c215313da3e3b83c5bea8e8516fba05160aafe9172a3a081d74ad8e05dc977bcc83e5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51588ac76d94b8a06c2b895bf559460c8
SHA10ec0df9e2a1ca0e391183b4bdad43c45980e783a
SHA256c29cc35a086bbaa17ffa19d6491f8c5c5cce83b65a74fc449819f92aec5ddb10
SHA512d2332172cfa016c233868fc6f1559a191b0e934b90b6d1b9fdb2db629f1d141df3c6d75b7055086ab70aa0ea619ff3c1060b4e7cae49d916b88850afe5dd6168
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5030d1e23eea1c00174358dec279bd85e
SHA1f004ec5400828e9e574b832ac9112c15e89ea613
SHA256f9ac4da644d69b6e813daf5de4a69c83f6dd03958ef9be4b507e6c36452bef38
SHA512b6c6424153f9e66903d7c3493f162d801d176eb01cb7313d90287d5c079daa1703c1549d6465dd4e6a7a05a057133764cefbf4b5112524ecbd643b83ae3be408
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f0de9e392b81c0ca223d62a0249fa73b
SHA1e9c482b1ea3e20a35df574649f45131184400b9f
SHA2569a904eac84dd0a06f0fddcfdd1c46f58774705d72cfa6900e9b75f0160e78608
SHA512495cb3532b1015414191ff5f74157bdc7361a6f2b343d8ac7cd609018ea12c8903ce66ba1ee9c0b29fd2a133ad61ed8d64789da84c96c6622f68b572fc7a6835
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50f3e16500e0e4f73e917a91a6794d558
SHA1eed5977f825c7957e5de5eff2d61071bb98b8f01
SHA256c2aa0c305b692e4e5b8b5a54a6f7f01cf92200f466e821d51883667ea6f99728
SHA512f1b5ab986cc013fb777e34c513ef4bd663aad2320b57c3e8cea9c98b7dad2b2c01817af3615419012de12d43244af166120da95bc0e1c9b4108468b49c817d41
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5578668982a94540a9e5d09b28283a0ea
SHA11d29187cd8f30a36de706f2ab77790399784dfc8
SHA256a3aa127a52a23508541d7b95a42f73c14a8fa3558461b9b436d63dc902cc3ab7
SHA512a7cb83b5667c687e2d7f95f8effc728fdce56b4073175766684b637bdfa50ec5af0afeb6963df44682accbf640fe380056b412433da3da604447b40b347310d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5393de0e997e59f78b0e059562f01f430
SHA13933a5c2b83c2982a3e48d3e3634d95550f92747
SHA2568ef212b3d83309ff055ca8ecaaab4a34e310e76c3944cc0168f5aebfd4f43fa0
SHA5121d73473b0c367ce7077eb33f0d33ac8ff987e2a69953a9d3adc30ff0ae609476b79aa27424eb6d7c9eef0310f9976424670350a9b981169542eaba3882371994
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58aa179f6515a5516727ad1a086bb1ce4
SHA191fafdc84c995e862aad78f19d93212c9778fd70
SHA256df4a5ebb57e55c321abf449b36f1765cba05c4388bb9f5af2fc57deaa1d39982
SHA51223daf1a85931173805262ebda9c802c89e6a3199ed31280acc98bbd112b787b6fc54990895adaafa20e0f1d2e0998bbc45829f39591385295bcd5897c2e20b0f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59f71dd0e96d06949f7382f47c502f151
SHA103e9f6a5a4332eeb641d7b6b5aefee1db602c935
SHA256d4333d4e74f6378689d525680c4cc1ee26b78986722261d533f5717541d46edf
SHA512d67d6cc646a55ba1eceeb3ed298d3dcba096f4dbaef8d806d732bae56a3047200d3ea8501584266e9ccd1975010833e530303ba73a9999a3992476ff54e7a09d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD584b65af292dc5a9635baff3a6f88e034
SHA124060283be5d9720df6f857bcc7dc00a643df918
SHA25651a58d0cf086d845f7626b221525709bc20cce49076039c17c58c1986f952403
SHA51280e01599bfd8d33dac738d8e37380294b4d1a5dd69b8ca6ee635b017674349a35644dbb8197d8cd5afa50bb3a69f903e6949de432d26fd5813413ada5e98c7be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cd75999d022e8654eccea466d8097a75
SHA1c8ee262b3444694bdc6ea709ef44bb8ee191d1ce
SHA256bdf0c284b7f033a863e375ab369500b056a1bb4eca3eeec50fb50ac011883c52
SHA5125161a1a2d037da84153620a2ed8ed5bd6a69a23249e55e9a6ff4ef1bb2f7d6ec8457a184170d7ced3f069b0dc4e1cbed5681b966b0d96e2cbd48dc98c7c3d4bb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5695007f510df4f2b69593212809164a8
SHA1f8c342e4720914af4990d767501e92e9dd7a0b6d
SHA2567dc7ad49aee73dde7d09214b55e124f3180eec5fa95ecdb7777d695337034f85
SHA512853f4faf39a8ca5c286bdcd1993c9d0b676b3cc72de9e4097ad12ebcea13705b987fca60993af33ec817e9b27c39c71d6133d2c8b02032e63bc3e8e2734c58f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD582117df08f40ec4b63d4eb3d4ced78a7
SHA19c0ab451923e970a28fa76cdb5f872d7f8315c45
SHA25617e7bed6b331009e64e912abeefd22a54f87e65a9cb9b953d41479765ddbd8d8
SHA51249444e42f40dd3e6284ac9f483356fd3c152c52e462ea4f0e81e9923e8ba63495078847410c5c908f997f434a7a8d1443368f6e98b27fc57bce75bc5bdc8268b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD544f4000603e259fdb1b3cf1b25982e7c
SHA18e1edbfa2d4713f84ad85e157c909ea09d7b483e
SHA2566549a24793869a02b9334e96e4850a798504db56b0bc872fee7c585c8ff8c638
SHA51204d18e4f42b7d5d455520205e8f8924c49574fe38861216018bbf7b6a36f9695e113e1a0399b7b79c26a463af43347b6390a471358eeeb406a7383b6b2ae2ab3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f794c97e3d512daef3c61dd22de746bd
SHA1133b4504a12663734c0787e128cb01d1efd3f118
SHA256262ad9925f12aa3f2aa3d4d015864084bb23eec9e96d12ad461df535ce8c8afb
SHA5125bd0a6a10f788a44226a7fc0647784ddc729256620b82f0fbbc09698192afde20e064bbd81961df1b51f5eb269c352df63376feb88c7bb0dd8e77e5438be305f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e69b3e9903e4c732736329b793480d09
SHA1b70181a3f3f9225b29a8ee5926e2bc5362f475d3
SHA25670fe62c8022a955d866ffe6497d2c54bd402b183f9ca31cdf07551e1dcba1f4d
SHA512323707db100408149e64346cc9684c8e65088284a221bdcdd57a0a58b184af5366a3bbe1d614812cca797d48c5ce9d9b9dce401a89ecd3a61e131fe10c1bdb69
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dbd2c34779e16d4cf6aaef4d637fdca5
SHA1c7a37fefd9feb297030f55b0a90e321e49fb1295
SHA2565609afebcd9925e2512cc3db7f9587257b416ede5b57cd770ea353c79d2e9201
SHA5121e95e04ec2d2db4ddace4f1c4d871e7dc9fe4dc93100b6e75eb9c596ecfe5c1a002cc151cfb828dbb6922d744221af03da00cfde81ab20eb47acc125dfa915ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e920b6a5da6f122b8fe28a846a37d8ef
SHA1364ec2973f4e6e7a25ae8a7029c8ab12d6961b9c
SHA2564f04abd22367d2750b928360c8d3070960314a03680e3ef765376c70612d76c8
SHA512e9887f8708167c145444e0c69ec71ccbc9d37699a369950436b708d9c0a4c6b24bf9fcf0aaaec4edaedc9406342233970afd6069fd0863704b74abd9938798bd
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06