Analysis
-
max time kernel
136s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
28/02/2024, 22:58
Static task
static1
Behavioral task
behavioral1
Sample
ad12f7806e618db126c6c86ef730c74a.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad12f7806e618db126c6c86ef730c74a.html
Resource
win10v2004-20240226-en
General
-
Target
ad12f7806e618db126c6c86ef730c74a.html
-
Size
204B
-
MD5
ad12f7806e618db126c6c86ef730c74a
-
SHA1
f57f9ac4ef1c8dfb74477cc07743e86460a9d3f2
-
SHA256
5524277e2232dc9aafa361ac452da156520368b297a6fb5b1f0c7a562616ee11
-
SHA512
626d8c76e9922433cea81d68f6c8166376ae4e824786b5b846c096bbf2f1a3209a86bca95464cd8f9227eeae6c554287945b308369a4dd2b0192a83331b9eafc
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009d182698a4727943a65bc6c9ecfd0fc50000000002000000000010660000000100002000000097f1a66196eacb7c3e66554269f406c5e62fd3156a513725186646d57f5d24ba000000000e8000000002000020000000dd97b11441924ff50a1ea189f4c17932883912108760ebb3cb917bb18e67a7a590000000520b08313c55fd5f96973ca9b13c9a625efc6cb362549936b59dcf8402c0e6ac83b8181cea547e452be6e0b56ef3ebfdeb7f432437336b36e45c6e555c390b9d68eb6543655b6da6254293caa49ff0dce1a09d6f6d22bf5b3017281379ababa2a65f74211c6318255eb246bb995f466dc31be19a62624672fea17c70ab0f553ef372a5c4d5ddf2a17451ba642b6c35c9400000008cba2bfb68c4f0f25b5347df225689eddbd03b258a2f1e05d8350d814de1108bff96d4ca14d4b59711b5fa2dd6a40472daccef9ec29f0574e4eb5f2a031e7605 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009d182698a4727943a65bc6c9ecfd0fc5000000000200000000001066000000010000200000003758e3cb02296d0fec941c6f8c603f100f9507db5b7608f002a7b2312d8e97cf000000000e80000000020000200000001d0e46404786330f1fad027a087ba63107612b94e382451ae54792c0ad79789f200000005df0270dd700fec9b6e803b52fbc0ee57f98a59c423a74e6c8adb08334e2f14d40000000599f565d8305d967a0f15f39e5dd6773e65cece38a90ae79f3704c1e72cd0e5a48cbc96f8f90dbae8ea4753910834670f6f31fdbe5945530600be4aa77bc2f1c iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{DD596971-D68C-11EE-8832-4AADDC6219DF} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "415322969" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-406356229-2805545415-1236085040-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 60cb7db2996ada01 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2288 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2288 iexplore.exe 2288 iexplore.exe 3036 IEXPLORE.EXE 3036 IEXPLORE.EXE 3036 IEXPLORE.EXE 3036 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2288 wrote to memory of 3036 2288 iexplore.exe 28 PID 2288 wrote to memory of 3036 2288 iexplore.exe 28 PID 2288 wrote to memory of 3036 2288 iexplore.exe 28 PID 2288 wrote to memory of 3036 2288 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\ad12f7806e618db126c6c86ef730c74a.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2288 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2288 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3036
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c04548481429d293417115e8d82581c4
SHA15910827ab727e44434694561cb64a5c73cd9f743
SHA256e41d64f6f9414a66204101fd4cd4d102b50a1cfdababbbfcb5cf065e7a0c3c19
SHA5122beed616a85167efdc35a7b915073d1b5db810380ad9664f48dfef0cb9707139868db80581eaa414fd1db087e36e5e7c4d7ba257a53a3b922ff3bab2def7f88c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57fdfae6e957f4b792c06926fadb6e237
SHA11cc70e26bc94ea1593a14e5fc91210debd035c49
SHA256668005d7a846cf4625e7db5d99dbbeed9ee026826de0474a1f1fc12c28572f29
SHA5123c39c62d9caf7f1221240d9d64e4bbac8039b5308268ffe26332f76bfd4f31869405a51afff15878fc741cc304f754c0d226b49d17e8099256086ef7e9ea5551
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cb7bd7989d6fa489c0d812aeb9ed7035
SHA12daa4cc0d2e483a13988096bc14f50a80d492406
SHA256c3ed54f603fd9f534aa145ac267f8a0123320e1525886736f29d4ffd0ee05b9f
SHA51239935903bfbf4419fa5d564409ce5f1241ed0d7eb19ffa1e0d21610ed95977d14fa0974e2b7304b5b5ea615e8d4d547194022469b65767cab3d2744501e3417f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56bd9ee1bb3e224df41ea8da1ff7cc3ba
SHA18c1a8514340bb2f52b029a34dd08425b0c548b57
SHA256d1a0107ea19be1d1fd027b25528ab4f4fcc0067c250933da5eef22e3e95eae27
SHA512e8b0a291d0480e5e018530a702245eb2cb4cfad0de9591b7b06d911c59ad7ad01a6d06c892c106995366cf910d47d8cc792da5173d9f757f0fc983301134ad2e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59db1c21fca15ae1c6891b646417d91e4
SHA115ad4eaec6b8bd321ad76a477ea098d94a8a83db
SHA256147bc91b110bb32a87166b898a34efec7e60766caa7466c8031fff94c6c33281
SHA5129f15fb35cbe969aa33b31703d340ce06fd036b463a536ea8817a13c997190bd7b2892ffdc9719b5b1e2ece943da67d285c6d460410c67cf774911732240fb1a5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d77fec2b16df49911f97bfdbd3894fd6
SHA1efdd53689f276060b4c9e5fcefd5eba23b748478
SHA256a2f2391d403668a07346370c59f3fac40e4ee59885dfe46b009adc12d3451a3d
SHA5125466ad44e2b96d61a2366319467a7c4e69215fcb7da841752accc549577520200dc1d95b9350d7690dddca013ce06b784d8e4e269858454064985cd588a30b10
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b97d530d832d72ca2effa903aa6c22db
SHA101549773ab04758c01d473f6461a59eccd6e55ad
SHA2568480024dac22cb39a33e255d8a9d370894836880b09df62307bc118f057d1b34
SHA51219bb7cee08301a76a74b0302decfb531c42bc130692933d087abd5defe42fb60cbb2524ab597cd46a2c5b4a94f554d9e8766a8d0a951000d05f7653122c82f84
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55095227ee43a280467c44cc81bad6901
SHA1ee2c7d03c0d6ced45a94a1c541ee2c9c00693ef0
SHA2565456b9c96f8d121c2c0027f8d8570288fe1e757ba74d40a4819a8b55bdd1fcfd
SHA5128ca940035d839304bf2705a7936d4a4ec03fa22e8249a256fb8131fdc3449887a04fba6fc2296fff3f01c6ccaa1f113193653bce75e2f9c0e14baf4463bf2379
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54e75a8ccbce469cd933b87dd0b2db143
SHA1c8e136a21f7aa8567b688c21662c8ed62159d3fb
SHA256152d99add3f5d5ae36b2357cde9a4a6d9b9cd14ed08595f7feefc40ecfab48cb
SHA512a2eba01158f93c3b680a89705f316561d64d2c67f8b6e92549d6fd581f80862683465f223503054dab7bd61762521acaac1ca757b21570007bd6e0d4d0ba3947
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e24ff8281c1e0aa728c061fa76a4d911
SHA1662c089198a07d8998720e84a5766414309ea5b8
SHA2560bdf0a2d89faff55a899a60425db37853e41c538a2e55b34ee05ccd6210cc662
SHA512837d1ab28c5a76be44aaeeb707ab567540e7b9a6b48f1d528243564c23c40634434e6e24c4d32699544123577a883a59a21b7faa4580ecf96c55b2cd967e8faf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50407b2c0c29a8c57ec5818a8375433bf
SHA1581a51abe6303fd2b210c599c81177a262ee0dc4
SHA256dcd9196c38654fff16aebc3e6afd51507957764b8f4c0cd2d62639503e55a1d1
SHA512e30a46c335a9e16a97bc8266fd7ea08b478a67f0e60838343571c3991a2b9ee0162eee0d364b19e8f98ae40d6c61d9c0483afc63bb7cc8d439c7ce8170edefa0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52a42c7c3b4c809d6900c4335e1ab5a27
SHA121bd8e74a84ea263d411115d316d0cfa03b89832
SHA25623559c13dae2f14b8c7f96949504ea9d6bfb159215137bb733b646feadf8206b
SHA5123ded54f96dd5cd6fa06e4c20d70b300b5c90c6a5179078b224c75b967a08dec387e482bf18a24458b01573cbc859cdc89b65d89782f937e435db96bccc9472dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eb83735571d613bd6639611b4f78951f
SHA1c66c64bf7b66ec994dc268f8bdaab02208037d36
SHA25682420bf423705b8864348373dd0286fd021f38e356f761e941a6a50e5579015f
SHA512e1b394357091aa8a4d28f6cd8431e986d58bc0eee14aba2de09cb3c1b0b8170754de63a74aff7f36bf134f439b53ab44cf9885a2b8c2db8fc2091b490b7f3b41
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55a6ba81e851a1d2df51b9080c2f5ad01
SHA1b99a62ff4d46c36397a22a679a68a7fdad77dfec
SHA2564598fd237f0ce0c8fba4e38e72e60d013a6b167c7df6db1934c93d1cbe356a31
SHA512f835d35a9ff19be048419093c936d4933b5fb5810f8b9c658c49761505a00b8aed4bc74f3043de740713e1adc4cbc26844b0be715b651acf1e22e820a493b5f9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5005203e62f2c15234d41b77508afaa67
SHA16a910b3002d6087d681833a9574349377fd1aea5
SHA25694bad39dc7576817373100c85d8e49bfc827414ea04d31f6dc843fceec54df53
SHA512e9df701b927df605fdbf4d1074d57b82194ce35971e1ab6a22747c41aa05690972e4d8f7770bc57627c499b7fccedcca94a99403d68eb5d662bfe6add356e51d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d69a782d3c1e2f1d739b44dd1fd3a6a5
SHA148b2a9b0b45646bf866fbd2aefc7c7518d7fd3c3
SHA2560716a123a75033d1e65552545cbd2147f902f8bbef6f99d57ddb85668ea18215
SHA512f4e05a0f7efd787cda71f6135184bae6675db4d07c511f24117a2581d3dc6a387920a9fae51fac0f2b93e97c622984c70342152566a9bc2cb8fd2c1e4294805e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5586df0b90c37bb400a214bc04bf2403a
SHA1114bbb0d971d147295537c05d58db3a553b1c3a3
SHA256c7b7f4d1b8cf8f1e2fddd26b041473c1e655210c30c1f045d5e42178ac560868
SHA512a6544e645adddbc99c08d1c88657463ee5682af6194ea7093b49ba605391d4f492d0fbb646676e6b5a5278f7ef6590c7ccbc1793acafc98d2ef937bdf5815981
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55ced19f7ee4a8a149139dc9e465d5db8
SHA189caabeed00c91e4160a089672978887cc660422
SHA25672f89b08f877d624dea9afb1f18f5fe32b6d8016de1c80532e7af57fa6ddcfaa
SHA512cc1bb6de41a23b06a8bbad757a8e061fcf81d17d880e9c62605467fef3e820ddd670610ffaaf808b3f50078d0d5ce5d0f854719b7bff5baf880b1d14a47ca328
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50a3c2313c1492ce2a290d40532f42840
SHA120067615bba21737baf7008bb0460b18047dbe91
SHA256a8c8db38fb5fd17fbadb537340c3678d36985c352c42ca7844cd3f64bfcba44c
SHA5128875997fec2f9f8ea8f2fd255fd7afaa6b5f9eef75644f963743123587337aa80d180152df8fbe2cb714973a572dae82a1121fe6b74572884c37e94469119a5d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52a963fc64bb6540023cab9ddd3562300
SHA1eca8285ae9aa8b65a01acd49ab8fb71dd685aa85
SHA25631dc56f60bcbb29862297174bd467add1a749a7cb153d5973482682f74f942aa
SHA512a67519090959d41063889eebdb0fa6e5c76e694aca7f8526a5e13664e1f503d8a8086030e2a8cd5731955923282c4e0e9766f0c0ae5aab2794b1069f6acaea8d
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
67KB
MD5753df6889fd7410a2e9fe333da83a429
SHA13c425f16e8267186061dd48ac1c77c122962456e
SHA256b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78
SHA5129d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444
-
Filesize
175KB
MD5dd73cead4b93366cf3465c8cd32e2796
SHA174546226dfe9ceb8184651e920d1dbfb432b314e
SHA256a6752b7851b591550e4625b832a393aabcc428de18d83e8593cd540f7d7cae22
SHA512ce1bdd595065c94fa528badf4a6a8777893807d6789267612755df818ba6ffe55e4df429710aea29526ee4aa8ef20e25f2f05341da53992157d21ae032c0fb63