Analysis
-
max time kernel
151s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
04/04/2024, 23:58
Static task
static1
Behavioral task
behavioral1
Sample
f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe
Resource
win7-20240221-en
General
-
Target
f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe
-
Size
1.8MB
-
MD5
dcab67d71ed7f1ccd1e75ba4ea4173ac
-
SHA1
11140406e80582ce1157b9efea4a106dae78ded5
-
SHA256
f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5
-
SHA512
f8f0dd10cccc6f83d2495a853a6fa81eabcca1ffaf5f6aa69b50587e8affc1a38a27335d638381b0d989d19a6d1d2362fc5ea1e1650898d2005bf1961d8d74ab
-
SSDEEP
49152:KM9QPdxwfE7WlFwKAfzuTiDFUFkK9cvyiE691E:K1PdVQFwKZCFgNyE691E
Malware Config
Signatures
-
Executes dropped EXE 8 IoCs
pid Process 2100 alg.exe 552 DiagnosticsHub.StandardCollector.Service.exe 1948 fxssvc.exe 4480 elevation_service.exe 3968 elevation_service.exe 5052 maintenanceservice.exe 4056 msdtc.exe 2464 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 14 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Windows\system32\fxssvc.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\fxssvc.exe f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Windows\system32\fxssvc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\AppVClient.exe f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Windows\System32\msdtc.exe f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\226c40c4b3e2edcd.bin alg.exe File opened for modification C:\Windows\system32\dllhost.exe f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Windows\system32\MSDtc\MSDTC.LOG msdtc.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Internet Explorer\iexplore.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstat.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\tnameserv.exe DiagnosticsHub.StandardCollector.Service.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\goopdateres_fr.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\goopdateres_th.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_156609\javaw.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\GoogleUpdate.exe f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe DiagnosticsHub.StandardCollector.Service.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\goopdateres_sk.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\schemagen.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\106.0.5249.119\chrome_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe alg.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\goopdateres_bn.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\goopdateres_et.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Program Files\7-Zip\7zFM.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstatd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe DiagnosticsHub.StandardCollector.Service.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\psuser.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\goopdateres_vi.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\policytool.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java.exe DiagnosticsHub.StandardCollector.Service.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\goopdateres_id.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javaw.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\ktab.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaws.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\AcroLayoutRecognizer.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javac.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe alg.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\goopdateres_pt-PT.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\psmachine_64.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jconsole.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java-rmi.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe DiagnosticsHub.StandardCollector.Service.exe File created C:\Program Files (x86)\Google\Temp\GUMFEC3.tmp\psuser_64.dll f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe -
Drops file in Windows directory 4 IoCs
description ioc Process File opened for modification C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe File opened for modification C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe alg.exe File opened for modification C:\Windows\DtcInstall.log msdtc.exe File opened for modification C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe DiagnosticsHub.StandardCollector.Service.exe -
Modifies data under HKEY_USERS 5 IoCs
description ioc Process Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\22\52C64B7E\@fxsresm.dll,-1130 = "Microsoft Modem Device Provider" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\22\52C64B7E\@fxsresm.dll,-1134 = "Microsoft Routing Extension" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\22\52C64B7E\@fxsresm.dll,-1131 = "Route through e-mail" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\22\52C64B7E\@fxsresm.dll,-1132 = "Store in a folder" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\22\52C64B7E\@fxsresm.dll,-1133 = "Print" fxssvc.exe -
Suspicious behavior: EnumeratesProcesses 7 IoCs
pid Process 552 DiagnosticsHub.StandardCollector.Service.exe 552 DiagnosticsHub.StandardCollector.Service.exe 552 DiagnosticsHub.StandardCollector.Service.exe 552 DiagnosticsHub.StandardCollector.Service.exe 552 DiagnosticsHub.StandardCollector.Service.exe 552 DiagnosticsHub.StandardCollector.Service.exe 552 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 660 Process not Found 660 Process not Found -
Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 948 f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe Token: SeAuditPrivilege 1948 fxssvc.exe Token: SeDebugPrivilege 2100 alg.exe Token: SeDebugPrivilege 2100 alg.exe Token: SeDebugPrivilege 2100 alg.exe Token: SeDebugPrivilege 552 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe"C:\Users\Admin\AppData\Local\Temp\f22b5528723d8a6e4c3470e74588429e43d11c2e1fc1a1de1e7c7e1501bf1dd5.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
PID:948
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
PID:2100
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:552
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵PID:3576
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
PID:1948
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4480
-
C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.52\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.52\elevation_service.exe"1⤵
- Executes dropped EXE
PID:3968
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:5052
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
PID:4056
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:2464
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4152 --field-trial-handle=2284,i,15722001240173834669,15048020084704567542,262144 --variations-seed-version /prefetch:81⤵PID:4744
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
MD5f6e091cd05b4bc2ec9d5071f5fb04044
SHA1cef17e347c6cb8d00a0256c4ddf396c8555dbb33
SHA25697f3f8bb843e7d25681a579c37794a4e6080097a5c2d45f5b019a89bef0c7823
SHA512fda30fc2e07eaf46ae70ac1dbcef39452cd110690694289df0f242059958b1dacda2fd5c28d452584d8221796d2d423139039938001f15fdd33828f7cd867523
-
Filesize
781KB
MD54a1746d5eba042dfcc050cdae5200280
SHA185a9f7238f6cdc967793965539710d359371d563
SHA25660ff54717cd52070c4c9ba37766963e8110ac6ea6a2b7f7fdf6cb532d33b6fba
SHA5127b8829defe9f995ff8a0c63f041a21373160c1659dbba83393642038dab8a0425c450de9c77da4e057ef405a13557b21121eacac1965f0efe414bbe14cc48088
-
Filesize
1.1MB
MD5a199a1b9532dd8eb6b74d52735f4acbb
SHA1d9da3e87883e79583b588ecbafa1c17dcd55685b
SHA256739d4c3526fd7b407b44c0ce77542e062fc6b1820622eba39e2d410a0e79bf49
SHA5129edde48c4dddac4ae8a2e59b7e0c625a4f85ba08b17ed0787f4efaaf21de006cf8940be119d07a358f60a8b7df4198100120c71fb8867a57f0fd8d3d4bde0d2e
-
Filesize
1.5MB
MD51238970e2645bb53f7c1429f2adbdd1f
SHA17e54b6953f20604ea2e3a7f7739073b972032cf0
SHA256e92827115542e11bb5d06e89d74a843d60af385fb5a2accf3f8cecc64435a064
SHA512cf8ac5bd99fbc652c6d5ae45093929c712c4659b92f8f2e6a5663f3ea17cfb23859128ef2e9ab2abaceeb6e27b995362f345c27fbf88879aa217754fc976c015
-
Filesize
1.2MB
MD50a0b113819c361b9b2a6b05a40d98bc9
SHA171c62240a291bff96dde16fa06b5a4f51264ee04
SHA25699128c9f9b3ed1bc9a7ffa5352de8492288a257155429722db2621ced168b8f2
SHA51260c70e1139ff9eba446a17a5ece7121c0871a200e21d95b26d2675160e2d1e35cd6c6765abb514a8a92d84465ef59098014a7d88ee36e52d338add623e7983a6
-
Filesize
582KB
MD5cd2735404c9aaf30e063e2fea133d52d
SHA1a901f747b6330022027df8b7bdd571001a71d94d
SHA25649508e417a0854f245e8c18ecaa1cc717d9e0ac211588ebfd50067399b6d5b23
SHA512db7e88e68f744b6d04ae67b6b1e7a1c1641d6d002160b9b43f78e61b9aac1e28f8f0a1b68892b6bb5d649c4f8bd56bcc5531008bca6754122683968197bc3cc7
-
Filesize
840KB
MD52cc93293bf79674cda070002bd2b7a19
SHA1dc5f977dcffed260eed1d361748830d09cb24a68
SHA2561e97b0e3210d45b7c200aca271b3bebf0752d2278579c17bd3a2e6184d137fb9
SHA51245df27d5101729ebffa88eda6a8c2ceefab39faf273bf4a539810d07bea79a03f1139ec72910892f44274e8d2b92770e0c36da5f37e7debacfb1d0f8d0588149
-
Filesize
4.6MB
MD55406f4350a790e9bb709f00a4c2ee43f
SHA104115b93eb8008f883f84c525353c8af0435ff1e
SHA256d9e2f2bb35090a4d0f1a0dd948602d9979c71be8cfbf7ec73cb21bc31a6125df
SHA51218629d92825852ae18c1e7c351b618dc4c2ef7b863b5305074bd2d9ab7e509ccf6ba55ae5fcfe500defc7f61760ee5ef52a96dfbc74c0f03e134066494b8d6a5
-
Filesize
910KB
MD5f24e4080f1666429df1ecc0ea55883a2
SHA18a31bfed9ec8bfd2798e41ccf3d78a08aef44005
SHA2567850063c4b4aed9138c0c1b4b092eb7f42b8df6a0fd2857a6aec7cb9239324f8
SHA5127fb49de669dc595646c9c5e204ba830d0f8396ed81ec2fe349e96f7e5b0494eda87b2adf0a383fd60ceb6f1a62221e7e7f04f70b405eb85ce197e83b9f3fa1c2
-
Filesize
24.0MB
MD5e96498e0c4cc0e2bf376f38997552c38
SHA1187364a93ff425ec02f7146eddd9098529b68978
SHA25616b74c3093962a6bddb3b00061d12fff3551d8a7a026881f664140cc097228fd
SHA512f13d0b8972389397c48ec4f89f37f58144da77c995b4f20f7b958a825b33f2835a84430125d78ba12620640b65ce939d2f9c12db11876fb2b1cf0a324d70538e
-
Filesize
2.7MB
MD50f2a0ace106848bfdf63230560468df0
SHA1f0b2392faba182f65d440697f6dbb35bebb59452
SHA25601288e2c83621a440952125963d1bc07a2e2c63a2d66888630f729a55ebefb3c
SHA5122fd70ae9153a0161b366cdcfc2ac2fcde6f576198027ee7f314703fdf90333cfbb7ff6449e72884a50a632b1642ba6a1f78bf8acf6d95abfabe0bf4c175733ce
-
Filesize
1.1MB
MD57a00adb6e6a77523daf5c5ba93360df6
SHA1ccc6db70df6d2823ae8d292293a90dc227342c98
SHA256c2e17412530d81fe11c76967e81caaa29d9eda08c55630b8b8be4f0d55fdb5c5
SHA512f3871845a12c354ccba07dfe4c4da3b18f3ed7c99203435618eee95d3b486f92b64306a90b49f1723ce80c7a3b8a0ff6de91617c7c7331ce792ee5d0a7125268
-
Filesize
805KB
MD5a1fd76f07db4c2af409c2771100d6c6d
SHA1759ffc84f3cee1caf76288e68ec77f1b27f8926f
SHA2569c0fc2dee33bc61c766c230c83eea637d842f124044d72841bbd1f0a3cb4376b
SHA512de0c6e64ff3ecbbafb24c4e590f2fe7984f6d88fa0e4adae77a200d75e874337be810bfc7fb4fd771b407786ff5fc8b92ab4e1e67c7abeff57c85f00f0373252
-
Filesize
656KB
MD59d60f5b4defee959374feb57a0e7be1d
SHA1e802b26dcc53543348ecf4ee908d31856576998e
SHA256784de2b98c0bf0eccda258a24cb2e00f3b6c89af51274b123a3e6fc5e5895e4c
SHA512eb4b7de95a458de6549e7af8c80f9afb9d53038fbe4997d8973d31ed77d34df89f5f57a71a658b848848beecf4dd70bfe11a58aa7f09513b33c64376634cd841
-
Filesize
4.8MB
MD5eea907cceb26944de767292471469b41
SHA1f775477db31eb2c01bf5ddf17fffe6740bee4077
SHA2562c57a566e75e9edf76b30d4a856491480d2682e112e2da0f54d83aeda077a58b
SHA512502340c9617e5eeefed0ce64fa498c8f7f5bd4c6722888ed88f23ed383bbf98abf627729be7efa2dc6c08b14ed9bc7355a587b74562945abf3ae7aefa75f5379
-
Filesize
4.8MB
MD5fe69fe8224795a84bd7733c76ad3be29
SHA132f79daebf4f280d8747d7cbd268de6496de6856
SHA2564fb1c05ecf8a2d37caf3b8b41b69d35a87adce3d734f01c5a47ddb1d6530ba35
SHA512e9e49561af0f05cf40ef0aacfd2d3bc5048df290b8ac01af3b87c5547b8ac90418aec9f21b13ca90d3e4b67d0093685644c71997cec4c5233555729ee341ba86
-
Filesize
2.2MB
MD5d5a298aa748f77902ad1202cb481eecd
SHA179ab6f4c12a039b099f7672e97c46dbd83c5aae3
SHA2568704b4c323af7688ee617754890f98d9e63f97bdae3cc5d9fd5a49376818d122
SHA51219e8e6b4100c85d5ab087bc83e5eee7b0fb30e752187255b4a1551d108b00fd7ff328ac87c42e9305ad0af1c562b80e33332a63a5dbd313f3823a28f8526d430
-
Filesize
2.1MB
MD5806102ef7a7aa230fc5c67cd3d7abeaa
SHA14723439d7c7029283da6335327bb28249f80c367
SHA25623c63b8dfb9822dfa5321e3643c9ef07ec7463a2b3b3b492875470a47af2d735
SHA51266c0dc749320e84b7a198311d1ed3b05b9be686f7fe0edb705ac10a8ed959c03263710da31f19170d3f8724941cf93c65e0c918a0d85901a81a8bbc2f369e418
-
Filesize
1.8MB
MD51e6b03720cce4af01023b2024e38a3e0
SHA1e42f2539bffe6c2a42f6815ce56243b297b5cc7c
SHA2565a125b23a2714fd0c0a127e54ec7cd5932d40b0ee03a74ebd0448bd60bdb5dd2
SHA512c579fbf601a3f4b46c517bd912f3777c45a393e897ae14789807058cbad8ba5fb7547055afa7a6f08f2eaa0733f69ddbf825cb9199df51d20a3835575953fdc3
-
Filesize
1.5MB
MD5089732c215fdde1d83d78f723187dce3
SHA101a0a807304aa6cec08b8b64ffc099f9a104473f
SHA2565c98f9e70b9c5b4bc211a69304bc83241da9618d539ea1477c2c1f3043e7fc38
SHA512a9457a9850a9ec4e86f0d39a0537aa59eeb1c84c0a675a4401fc6955279922687625cbff135982b0bf840c77cb7a4f7b0317a8045e801737e1335e6027c19893
-
Filesize
581KB
MD5e0d4fc3de1dcb7fc03a999dcc8e957c2
SHA1eaea15be79e4678cfe672cd2f42119b280417968
SHA256de50c9e20796b216c0a15b724542bf9ea63870d840bdeea0fac4f8882fdcfd1a
SHA512c5bacd53044565033173723b83351d7d9cb1a7b10f867ab7dc66a851924ead97fd16d9b6892c7b87a72d680f4ac28a9f148c6211bcd53cba8217b5626305bc9e
-
Filesize
581KB
MD5c866d4c9ea7db1926e8a650c0dba65e2
SHA112c0fa8430896a6340d8e5aaf7f828ffbefae097
SHA2566c76d9b31d2b5c18e5f2d0c31b6015e25fb022be588088af1fcdf0082eeaa5e5
SHA5123d9e9c4ab107fd6cb60356bba37ebfd2128325442abd7c21af258aef992e8cec9e14c8f86220260177719547f23ce046139859b83df07b757a5b965c0e71c12d
-
Filesize
581KB
MD5d65e4d4b009dd63e643f940f91eeaaf7
SHA15154a71f89da71789a6a98d4c6e07c4fc39f4aa4
SHA256952504a477af352e868f23980438fda1930c1ea12a7457937dc2d48c4629675c
SHA5128dfcf7d9c40aa1cf15714cd8759f2263ba91c87f22bf0b58645aa9a9b28a69e92617a04810412ae7fefe69cc9bd77eb56b11f1fa70473a13750786c2c06ac5c6
-
Filesize
601KB
MD53417a48c4c0e9b6ab8781a8c8558077f
SHA1eb7137886d5cd5a455a053083ec2842a5775335d
SHA256bfed263a07583c90b82ad8852b48a52c0fbc0d7f0da1727ed646c017068a64bb
SHA512a89f765a30f08ea07f11fa982ef5a08953651393f75dba57499eaeb0a7ae72b7d9142d1dd6ea4218bce565d56dd1bcbe408123bbdbfff4bd67dd43e1b411c3ed
-
Filesize
581KB
MD50b3506ef9c72c76cb50b774a1f842023
SHA1eec4520fcf09c053605ed0ad1b3cfbba731dca25
SHA2568936294cbec5c610c808c901b3ddd106aeac812eccc707498fde462578ce1615
SHA512dde17d5a8977ad9594386132daa481b6d63b45c895614b783195a6639613f4252a3c03e2ea3c3d0dc9274d1f2acd7d1767cd412a2a2f56b160647ce2899bd3bd
-
Filesize
581KB
MD5e43122cb0f872205bf27ed5220cb159e
SHA1358af44e1a77afb22fa1a2c5cfe23e3b12845ef2
SHA256f55e4e74b3485ea547091f48210f4428437f628907fa485c8c6e01d5f7467d64
SHA51235bc50b0bf25deafb2fc91cabb923930f9acb37970a957d985a5bcba7f0b41a23a1c83e7bf6258537d24648cafadd05f1545495a939ab7468ec99fa5ba78c8f3
-
Filesize
581KB
MD5282f44c5707a0f071407bf12208ac987
SHA1fcf1cb283359a5336203a7e0130e34369875d76d
SHA256d3e9ea5afebf19df608a005947b44085e408370eb3b8441c862622c5faf051d4
SHA51201c270e66d320f47812b5d3c8a46111c12fbc90639f4234d300729f06a248f6ff3d0304d28a4cecc13d44fa89177324ce6791b633c01724e69229567624069c9
-
Filesize
841KB
MD52289ed00fd421c7dd770e32ec8fe2265
SHA1e2bbffab5ecbfb0f48ff1df4e540bc99952d1d97
SHA256a7a200446faa69b694506bd190431e9181bce07f235ef9887f9335fbed45ee5a
SHA51238a981f5f76aebca79df0ce44edb987aca11bfb2e12dd5eba523daafc44992746f32ac154e50ab5f21071f96f712afbf4ad8d66df0e2439303c245d7053c2983
-
Filesize
581KB
MD50ad6590c798efacfdf7495563ef98e34
SHA12fe49148e7689f4550499218371127ce1ef06df9
SHA25673dbf697e51f052dfca8b905b7cd8f78c4f752c49256714951a6012b176ab1d4
SHA51252a5feddbb256e085639f11d0501af15279e11ce67ca3abb2d93f28f87723a59ea04769616ee554a82003f639ccd9a7889ff527c717e1fb49d92de89b03b58cf
-
Filesize
581KB
MD51fb56a95bb626767d6278863e0db897e
SHA1a3ef406134c1709f13414adf16dcb338a942ac15
SHA256ac18e7ee8e988b5efb9768dae46d5522f95254a16de4cae110cf653ed36a71cc
SHA512d0d70d8d4789b838ac150d5e078defb1ffb2d25981d087f77d1a655bcd41dd7dd1200a685fd49d3f5673d157dfb5e6dd04eb213db2506ea05c723264de51f1c2
-
Filesize
717KB
MD51155dd3b02744bd96e23ca86412494f1
SHA12c8f0d88fa0af8a11292783c215ac1e561cc3967
SHA25612635520606d2141078e17b4c16924b62531315c20574f2b8dffb06390a2ba63
SHA512f48399e0c4606bde2e364d0974cd2e38d00829b8302418049469f7d4d5f360f9ef99816e35a61c160f5b88d41fc4cc351d9a9a24d92d3d24d2485e2e0a1db91a
-
Filesize
581KB
MD55530df0161c1545cfd32e144f691ea5a
SHA19d8b1f450d37b513c8f2af9a0b8d9a5b07b96047
SHA256b24d15d477811633e7fd33e4ecf1154a6a69e47884b3493601b2a5e8b29ab2c2
SHA5125876c0d397d6442b8108ff2775dc61f3d9d48fc9e0795a94576e31062cdadc4d86f61b1aa7ab87f5096bfba475ba78f5725903e570625085785580a0954eadc5
-
Filesize
581KB
MD53c1ac4eb983ad7b18e56e061abfd74a0
SHA16abcd3ff2a8736ee7d3e824642ff6ce9da7b31bd
SHA2565a91b4b0876a8972caaa7d3434fcf73a1bef82174420de661143b4a61be57b86
SHA5124b8e167720aaab3e2cc6175f93d01b326b05266ccde76292f549291a7897df3b494283fd112cd3803b0ca0d783156df78a193bff9ddecabcab7b2cc1b00195da
-
Filesize
717KB
MD54ec384c0f9e4e65a3494b3b973d09003
SHA1c5170851ad2427c79bd5ce64582839a94d39af60
SHA256847bc852dd7ed0b05657043869ddea1b6174e0b03d7bf563ff56fbc4525d6db3
SHA512d843d37486fab54131a97e661fec0ccf8e67bfaeaea7c1846d56033a07d3271a1ed1e373ee5ba10ea72f3193c1851468c4dbe954ee594339b3fc3e85a4d48651
-
Filesize
841KB
MD5b997a0beb8f3bfe79f237e4c205a1f81
SHA1c722213bb62e7986d5b910184cd7773533e76334
SHA2568674dad584a688fdd8a579c00f4733a1e9a02ca5901f946e36f1042b9d75b2ae
SHA5128c88f64b28575728e0cce623bc690278f2096e94b4bd20437eb8c01e727da48af4ee3951e7ace33bfc0874cd1e186bd0b1b5bcd500c8501b72ec939d75c92d94
-
Filesize
1020KB
MD566a67bbc4bc712e7332bf996957a5361
SHA19b69e0e0c55e15be55403c473a691d0c38a9da41
SHA25620e377b11b2c751cfcafbd5c9ae4a9bc0f600441f9474c7252f48c163601834d
SHA5120b3ea012f073168ee2ecfb60dda32b7a45ac45b686c611e43d1ff16eb15b7af964c2a53387d81ffd0e66c793d20e7bf08ca70d37586904c17d2476d3d02e407b
-
Filesize
581KB
MD56a658ff1889162c5cfa7e23052e80351
SHA11ee2538f0063aab777f866e9f3784315b23daf71
SHA256c9e1b04b417bfe746cf5b86f1634bdb88e2de67ba50383e11aad1b7d1693a1ea
SHA512ab85ac83efad502c3730b708defeed0a3cba004b20ef093b08e0339da6b2c5852d3e3702e08d35959c287c268d1e68081099d351dec843060dd29374b84c5448
-
Filesize
581KB
MD5565bebc26d39b68648c9b25159d385b0
SHA1af325249817df285511fd76402a7c27d4ad0421f
SHA2561a8431ae62af84252359fcd763db560f00878f875eb86be6fd18452a25f82210
SHA5124d803fdac4c74213d294cd27cd1f7a66f460e4095d59add7b910b4eddf67700f5c3027a82e6947d8c4a8036132bbd5b2dced838bd5a36af0fd94fcc70c61f26c
-
Filesize
581KB
MD5d9ab584e6539e6c4568946048de0fbc5
SHA1509bacdc9e153df297caf0fa7900bf43b6540dd2
SHA2568d22dec156d6fd253172a13da1a082e866c4d2c1242461940fe06fb12528d3ba
SHA51263cf5cc619e1409bd385678ca1f3061c8fa1847cd082dc4936ddaa61ae20782848e2fad40963e291f54a8e18f52b08d6549a1816ccb90ae72b2a29a9b708a0d7
-
Filesize
581KB
MD50be8583bc932f942933a1f616ada5d47
SHA14eb489c2f8e6cee80437521cd5466f07df86b203
SHA256b132f3b9535443f1eafaee14b957eb27562c1bf6d10c99fbc97b758a60f50bac
SHA512ac722f6fc3e768b1df15c0bcf8f0c2a04c996c865f854c0ac8e5a04252b91dceb7ac7d8b892ab0047f73abd827664e0ef62c077e1275dbf3d89405b44a910336
-
Filesize
581KB
MD51815fb398edfcaaf998442bd6e3b0c0e
SHA14524be27dedeb145d81d4a710e00c611e7a0c70f
SHA25648f73182a6243819a1ac48901f25e59acb935f4f34f6e1cb67a5688c428fbc77
SHA51236c0fd54f9352e4244de8568f8156f01f5edaaa2eff2a9a08019938dc94d6f61a7120619efe1fcca864cf3bbb80c25a5a1d8f90d1c9dc6c9918f642c5a259622
-
Filesize
581KB
MD58f3956da203bce5a9a1b18b95b9463b0
SHA113e5171c11700f5f7d731d2a506ce2e54cfa2d1f
SHA2569a0889b79eb76021582d6a1b3dd1c0895b9e25d76d71fdf89f0d29444221d29c
SHA512344caff6a89dfd6472b282de67254a301bcd34e4f4d396072cff553994b02117ef2b8e74d81ad0b5dc13f66afe9102618c666c4ad66197f1828882f99136d91f
-
Filesize
581KB
MD529757a5edebb57c4c2e6e520d9306d8a
SHA170b6efa0b5e32d22153456efa180014a2f62b549
SHA2562fc52252f6a1858c9781061ac791f696e8213dbdf63527e0c097bb01d87429a7
SHA512f94b8fd14df78682d4dcd12d09367ca606b7376ba50c73a355afd2a8ad94bb9ac8725d8f2d2afc54a02b6a906b890d498549dff9319d405823256b55d0cc3c46
-
Filesize
581KB
MD5d7b0daebafdd981120f4e817cbb80687
SHA1411fe80a277a71b8b61f8fc2288a6e4278acf97a
SHA2562f52e3a61889b94fe19a5ac2e4c64a7cd2544ae4c4a9a19cc0a0f86dc92cdd86
SHA512f5adc5873a7de854ae4d3292acbbe6f6391492101cdf8d56431e9195dca5b715b1f37f74c23c51c976a4597f9400bb5698b450f87d5bd2a119d6abce3f50d1db
-
Filesize
581KB
MD59d0d268330cb5fe3daeebd9d09b1882c
SHA1e786996472e71bc40b4ce005d05a2f0a3708003a
SHA25625a912d9faf50e709b256cae9cbfbbbca33c8c96e7a6b368fe35dc3c3f05f390
SHA512d4cc1e62551e6abe7dcb3fecc5b509f9b032f8b203102736306379d75d89f0448705ce674e5adec42e00c47df9e4f8140a6f33f1de4f9d866497014f5c3ad48a
-
Filesize
581KB
MD58a7c4d76e5c9d39eee3a782ab7d4fd8b
SHA15b69f72ef07b04669a44da159fc62149b62fda66
SHA256bdc115c8143f15cae9bfd2456bcd1289b4d3b2ef7cfcb806cc1cc5a6d5cefd3f
SHA51206f7fa02e5ca88305dd07326214ac6b6c846e246f6d37861e091d28ab754150da2234d0babfa60ae2c1243361bfd3ab8533d4f8537b1d814d1e267645195fcb9
-
Filesize
581KB
MD51a73743dd1db56d02bb91a5f670b5949
SHA1b63fdee14c7335717a9df1484881b3e5b13c02ba
SHA2564d0be8f20e18dede43df563cd36b39a7bc4d7d56a08ee2f23dddbedcc05c7622
SHA51257dd23680d3296ab095deaf8157de82315b6694318d6f4d5fac4a819fd59106d423991832e2bbb24ab0ba88fafe82f347dd58633526bbeca440303f759bddeac
-
Filesize
581KB
MD5bd9ea8e3d6b935edc936e7b08f495741
SHA113600fa46aa4f1dcf8928e0e26d022f52fbd2a48
SHA256910b14f640a969245f85b9d962f86fd5bfed446df05d547ad4778ada805e7882
SHA512f9e46253dda32a44c6b409cbd4f14bd58e47fa6ab5a2f8371c8e5b40e8d96f75d9221e1c1228b2f4df732edf22de6a4eaa59fa60259b1bec608bfbe80b39f4cc
-
Filesize
581KB
MD533254aeb28512b87a7def4e54bde9ed6
SHA15762c0f4eb365958d889eb4b835b55e47d61bcd0
SHA25676f0995d59ae4513d531b4156c6cb76acab1463ec6896225eb36a7163e7dc152
SHA5128d296bb31367132a6edd3754c603cf33a0ad660b9e1051c40bb14d1deff5c620d156293ddd9971288cd0aeedb96ef90fca3763b67e751027f48da5f6a5daa258
-
Filesize
581KB
MD5c83362a51cd824718d48cea9c8f335db
SHA1cf0f10a8ff6dc12303d214e04e4fb408269b8066
SHA256233aa456425f36792cc5779bcb3b86279a78224e03e6927ba6632fee07859d39
SHA512d3102f8198f1ca7e911bda5664c708d686e9227eb8cb0104d709a87fdd783d96e22ebd8e7ded6862191f16c727fc11fa5193406853acd3838dddeb23b5123c01
-
Filesize
581KB
MD5915ffcd48bf3f98545a9e22357a49110
SHA18b28294ae46f7def1b4ef2be9279233613a9e805
SHA256a55bcdd90c73e6c598c565018b71e01adcf6ab6c505dcb2a8c50a299858d5952
SHA51299d45aa4b2cd14977bd0340e9d456a90839df871ffa350b4acee03f06ee669afd0bf21019912949b8c6f9c1ae83c4eafee20bf7cba556bf822eafd0a1bdf8c23
-
Filesize
581KB
MD54a7185ae95f00a7d342b6bf25929e97c
SHA1eacf2f34d838a0dc8ed54d0f32a381b0e6215d7f
SHA256e4655ad699a291b8eb16548c224b2647e3822941dae3bf11ba51f0c2f09907bb
SHA512fab28fb55fed5783e82856628b2545beada66a87fc75c4d58bdb3d18d43e4e9be3ad5720c05760217879c6db564d9986ca13b889c2a2cda88e584275cbf58096
-
Filesize
581KB
MD5d7d726ddd9d693b77661978cc359643d
SHA1e990f1fb30ffba11d2020a0e013082f007123125
SHA256d0e906ab4408964dbb1fa5e8140762954f7df04899558624a07ff6a73f3481c8
SHA5124213f38b6f0b10cc3344fa2a62e122a556de6533d611f968d3f4d273cbde95dd109cc61be294e7723e089e8a01e5f6b6bd1fab02f6e823e9d4427da95b231dde
-
Filesize
581KB
MD52775beccc6c45b7ca6b3a83562ed30dc
SHA1c73559109665536ed57fbf79e89123a1e8654d06
SHA256e51c1ab63dea29a53b9ef49fc6b11b429e911f3de9cd0fb33880691856504e43
SHA5126535e878136f9dca3e77615e8fc28346df977dfde659adf07ab1eab68537534f66f580c9cb070cf2cace4ba390a633ad9fe27affdca337d3017539320e4e27de
-
Filesize
581KB
MD58523d82a37855f8cbd75ce8d15e8d3a6
SHA1c25920d1855bd693b49e8058629a9c2f941fb2d2
SHA256d3335e009e60de416dcfc086a9fafd114ff1d0a1985e2a187408fe0de872a000
SHA5129e6c1ae2626b3b7047d25245eb00d166b85604fe54eb83af00d040c5ab25ab12793bc8a4592ac0e9ac1014e403b7a3b87a117420b76877878e2734acc61d1e88
-
Filesize
696KB
MD577eae54ae3eb8cdb2a0ae751a429b7e8
SHA1e72df13aeaf3baadfeb005f2a7409373df1d192a
SHA256a82226f715affcc21c26975b2ca35556c4eac97f66f53802021bbd624b315e9d
SHA51260e0ae307551014d67df1312a244e01427d3dee859d063ea5d037b9584c9ad13ca52636e02c330769d1e1069f56c34784ad0aa38243731e4fb5e6594d7d47845
-
Filesize
659KB
MD5563d3b02ceab90ba008876df3c0d3ec2
SHA11408e83d285f8b5653f8972b186ff19a31ea669e
SHA256c547174ed6314240bc9d3b5d133c495ed8afb040b28e39bd784891ac91bfb9f9
SHA512cca7ca274d68aceceab2458cbaa490366825438a2ac0340463efea2a14edb67f1491ef7cce35ac040c78685b992392816bc0ad6d16a81ff97621cabdf03e7df9
-
Filesize
1.2MB
MD53fd2c95bd2447739995269271702ec7a
SHA181ce2f63cd34540d4fd03784be2cac97ba99e7d4
SHA2562eedbc4241be24d727835ae11ac174f38e12651c8e21488d1b218c27f98f11d9
SHA512e961568c4ffe8a3583d588cb82c65c4dec9ab7d0a9f7cb744e132d3ac51406cf38fe8a04e6de5681aa99926ce59ca23d9abfd9b516f159eb0d224c7cfea8e321
-
Filesize
661KB
MD5f8b2351b47071ab6a17817e8c4aea1a9
SHA1ce56d6eaaf3ab7a0fe5a0fa2293875d835fdccd5
SHA25668a511cb56deca1570284e7a43fae9d0ced60f7940c3fdf5fdaeae8886720c3c
SHA5125cdce9310c174e86b88bd4e58fd628960afb548546c6130b45e02bd9b52753aee0b094194fa88f5fb8340ce81a275982216207533cadb6e53dfc9cad51c61c58
-
Filesize
712KB
MD50a2573a18b247bd7f879efbdbc51e6bc
SHA196cd8620da2ad1ad2f27b4fb1360935d2d5dac6e
SHA2568a19a3d141627dfd2550e8f361cda83d16ebe1e33303a832cab312737815f758
SHA512dc314b5cbabfc7dbca10b1eaf150c91a192cca7bc6762346490b4f9ed2c15ca27768fd350ae1ad6cfce506b63e34e881345afd3ccdfd2babf59499ff00109993
-
Filesize
1.3MB
MD53b1988ed839c43aeeae8600c99778879
SHA103d8237006e75e0e90f504b7e532607a9841e7b2
SHA2565573621973a91e4cc771cf1cce8fbeffcd0ee1834634aa369a5647088cc24da6
SHA512ca0a1be7e1f9144e6ee1cabded4852fc4ebf6a2a491090ab784ea6eff29e88bdcb591c2ff3bb064d1a7bafacfb77dd0ede9cf0a2e6c1b1978cff50af53c2251c
-
Filesize
5.6MB
MD5ad6442bad9a250adaa6464166cec44bf
SHA17614bf938582bbee1742bd2694f9c00ee46a6d93
SHA256d06a020e4b6b82fe0ccd098527a66a1877a65c76fdf41706ab4fae4756116b42
SHA51239e3535d5fad0b96e6bb9a61c58a68c74b0e5aaeb803dd8851a2953c8f01749b435b701cc9cc518b8684baad1732b720971d5ab2330a8e04ad87eec073fd954a