Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
4Static
static
1ping.html
windows10-1703-x64
1ping.html
windows7-x64
1ping.html
windows10-2004-x64
1ping.html
windows11-21h2-x64
1ping.html
macos-10.15-amd64
4ping.html
macos-10.15-amd64
4ping.html
debian-9-armhf
ping.html
debian-9-mips
ping.html
debian-9-mipsel
ping.html
ubuntu-18.04-amd64
ping.html
ubuntu-20.04-amd64
Analysis
-
max time kernel
36s -
max time network
39s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
11/05/2024, 01:52
Static task
static1
Behavioral task
behavioral1
Sample
ping.html
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
ping.html
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
ping.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral4
Sample
ping.html
Resource
win11-20240508-en
Behavioral task
behavioral5
Sample
ping.html
Resource
macos-20240410-en
Behavioral task
behavioral6
Sample
ping.html
Resource
macos-20240410-en
Behavioral task
behavioral7
Sample
ping.html
Resource
debian9-armhf-20240418-en
Behavioral task
behavioral8
Sample
ping.html
Resource
debian9-mipsbe-20240226-en
Behavioral task
behavioral9
Sample
ping.html
Resource
debian9-mipsel-20240226-en
Behavioral task
behavioral10
Sample
ping.html
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral11
Sample
ping.html
Resource
ubuntu2004-amd64-20240508-en
General
-
Target
ping.html
-
Size
85B
-
MD5
e7459a39621dceada643344b47fd50c9
-
SHA1
d1bf61e09fe44969fd613a495429c2c01138d887
-
SHA256
5804f8efc2a8f26bb4215869362257ecede59f442b6bdb50e7d6ec3146b874cc
-
SHA512
074f54ed8ef9660609282eda84f98faf39d0f0629a310f78e960f9c15a3e65f4272cd20a09f264e513f68a5a156392d4c54ae5546ce08dfb95f1c4789fa8ae04
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Modifies data under HKEY_USERS 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133598659545785763" chrome.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4468 chrome.exe 4468 chrome.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
pid Process 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe Token: SeShutdownPrivilege 4468 chrome.exe Token: SeCreatePagefilePrivilege 4468 chrome.exe -
Suspicious use of FindShellTrayWindow 26 IoCs
pid Process 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe 4468 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4468 wrote to memory of 3164 4468 chrome.exe 81 PID 4468 wrote to memory of 3164 4468 chrome.exe 81 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 4312 4468 chrome.exe 85 PID 4468 wrote to memory of 1528 4468 chrome.exe 86 PID 4468 wrote to memory of 1528 4468 chrome.exe 86 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87 PID 4468 wrote to memory of 2616 4468 chrome.exe 87
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\ping.html1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4468 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbf8c5ab58,0x7ffbf8c5ab68,0x7ffbf8c5ab782⤵PID:3164
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1708 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:22⤵PID:4312
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:82⤵PID:1528
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2200 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:82⤵PID:2616
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3044 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:12⤵PID:2716
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3056 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:12⤵PID:4600
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4168 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:12⤵PID:1176
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=4396 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:12⤵PID:4176
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --mojo-platform-channel-handle=4108 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:12⤵PID:1632
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=4100 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:12⤵PID:4092
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3164 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:82⤵PID:2900
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4428 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:82⤵PID:2268
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:82⤵PID:1340
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=3196 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:12⤵PID:3756
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=5152 --field-trial-handle=1820,i,12689795808047160545,12130622086979542591,131072 /prefetch:12⤵PID:3612
-
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵PID:4632
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x500 0x4e81⤵PID:4276
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
672B
MD51b118d614281403fcf7117f52e23c3ab
SHA1847416b79cae2369a6b7973d54df610659dea0dc
SHA2569434f42c994ccab89525e024dda334ae47474fdfd6063e0ef377be21724346e5
SHA51266c4360b0ae9489ab0310cb621e03b0be126e271326579a381da8a216be23828d87aa3160a635d2265b0500a9acc6dc17fcfeb16732802b075fccfa4f9a14317
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
Filesize
1KB
MD5d8fad9d119767b5a65770602d671cdce
SHA14c11b3e87c670eedcb8eaebc8142ff72be68c6e9
SHA25691f2c56caf77c03a49eb5ee6821fbaa9bc3577fd98a74c9155e70b69ae11abe3
SHA512c32aa07ad5ec2c1061e47b10e81bd36c99df806555922e8ad9b963193e920dce8b259ebfea325fb49dbfb13193be2ae02a5be89ccaab7bf0b465338ea4dcd1d3
-
Filesize
6KB
MD5f3857250b2dbe5a844081665380b8b09
SHA1420b42dd087c4678f1ca479c6d203e0395346ef8
SHA2569542bdc8191e6a44d934a85ba892aec0a254a05709bf6b1ce26cca688ab34bd2
SHA512e25e1fab5b819e7950340b0257025fdaa20c11687c5606d57e4d93393ccacb1639293e415acc3d17668787eadbb9ce8bf7974e122a666f908c27c9046e056f44
-
Filesize
255KB
MD52b96f9de12cda1e720046d99131557ef
SHA1eb5f00c4bc71f60fc9e4800475ea7b2efc7ada9c
SHA2568162fdb327f47057f8f8b9109885757ae74b15e5f43fdca4bc90aebbe8be933a
SHA5121d194694e6b2160563c4c1042be12051bff7cd65903111cb827f14eac678016702331e0c485f7678c34c39995a5beb760efb1f2b93b087183329e57dc34277b7