Analysis

  • max time kernel
    117s
  • max time network
    139s
  • platform
    windows7_x64
  • resource
    win7-20240508-en
  • resource tags

    arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
  • submitted
    27-05-2024 01:11

General

  • Target

    f368af9fabf23daa1fd8c3aed34d311b80620188f4e5a9135e4a83a8bb878739.exe

  • Size

    218KB

  • MD5

    fbfe19eb65494bcd262b182396ae381d

  • SHA1

    8fc6e322b29f2daffd002d49cbd4d2ec35a47237

  • SHA256

    f368af9fabf23daa1fd8c3aed34d311b80620188f4e5a9135e4a83a8bb878739

  • SHA512

    fb9d581c01168e590a204c61fe805e5a856bb25ffc08f6684ad9ebdf604d8afa5ba87eeefa0415456b5d8df58898e3dbbd1e56a5b4e869209adb657425119447

  • SSDEEP

    3072:ue4ILA+9+eDSMLYe9MlaaB6Ho7vUsycC7X0RpW3zvSmJZ2GXfuffKY6rz/0n0:uzI0emVxIYUdcWc03bH2wfu3KlrL0n

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f368af9fabf23daa1fd8c3aed34d311b80620188f4e5a9135e4a83a8bb878739.exe
    "C:\Users\Admin\AppData\Local\Temp\f368af9fabf23daa1fd8c3aed34d311b80620188f4e5a9135e4a83a8bb878739.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2416
    • C:\Program Files\Internet Explorer\iexplore.exe
      "C:\Program Files\Internet Explorer\iexplore.exe" http://go.microsoft.com/fwlink/?prd=11324&pver=4.5&sbp=AppLaunch2&plcid=0x409&o1=SHIM_NOVERSION_FOUND&version=(null)&processName=f368af9fabf23daa1fd8c3aed34d311b80620188f4e5a9135e4a83a8bb878739.exe&platform=0009&osver=5&isServer=0&shimver=4.0.30319.0
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2596
      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2596 CREDAT:275457 /prefetch:2
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of SetWindowsHookEx
        PID:2664

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\6B2043001D270792DFFD725518EAFE2C

    Filesize

    579B

    MD5

    f55da450a5fb287e1e0f0dcc965756ca

    SHA1

    7e04de896a3e666d00e687d33ffad93be83d349e

    SHA256

    31ad6648f8104138c738f39ea4320133393e3a18cc02296ef97c2ac9ef6731d0

    SHA512

    19bd9a319dfdaad7c13a6b085e51c67c0f9cb1eb4babc4c2b5cdf921c13002ca324e62dfa05f344e340d0d100aa4d6fac0683552162ccc7c0321a8d146da0630

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\6B2043001D270792DFFD725518EAFE2C

    Filesize

    252B

    MD5

    10da6969091e72fce0544199cb147b9c

    SHA1

    79a458923fac0405afe5ac69a89db0529208ce32

    SHA256

    356dad7815ac61c8299a3865d58fd958968989f4f378a19a026851a56cf08066

    SHA512

    fa1085ec62cacc048af489c16406568776354a486b4177f45240fd823589b02fe535e2eeba5b274b536cd747a692d2c4e7b768492ac51177726f59f41a2ab325

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    20d6b3ae37160bd3e7a97dc610ba3e91

    SHA1

    e8c32487d5da564609c676b5ec9043cdfcee6602

    SHA256

    b0b762bcb1d607ded87eafab5b9715ffd67956c1f8fee273f5a555b7fe0c571a

    SHA512

    db54989ca025b766bf2721d0b51710a05e919369805da23706892cc8ec66e05a51d9609baa869b42528e9f1cad982678afe5fc5f9ccfcaaa8b77cd0d53a22d07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3fb340743ae354b0d6ff9331e5eb8a85

    SHA1

    3faaa45c9297249e293c6e6e6355b2b6468856e0

    SHA256

    ddc8904254fa7beb96f66a924b960078d79d6793488792ef55abcbf6fd47924b

    SHA512

    c638daad279a55ed7cba20689fb596c77bf7da7b8bf5175e33df187fa88fc79d2a9eafaab3afe52e203a06844cff82b0bf17b71350329754ee9f794962652e2a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9bc6473d41e5efdc4ecaed217c4bcb46

    SHA1

    a9dfa8b1dfb824daf4bbfa4fa6ad62743083e86b

    SHA256

    35410006f1af8b4d74c2c4ba6d1fe2d3e046c0e862a8fc5e3b50a08efb8fade9

    SHA512

    041e4ec8503fe4347e88a49776bc5171195e6dc3d331420701c02845f6ba9151d2f18806635e8ce796fc27f638987dbb2796724cdd5289d7d88efe447103bf4d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ff6fd45827bd32bf37674b1461c1b252

    SHA1

    3444e92dd80984bb6147b47110207bc7ada6e716

    SHA256

    c56ff5763473469ea2bf1199426e5832ba6de588c74c9b1e2b5baf0358029e0d

    SHA512

    2e94d3ec27399d174ec77281d7d3f19a3a0643f1a58842a87072b1357cfebb6dbe7b8d81f58fe7e9c36882bfce9785dadf21ea492d9185b1fcf2af8f5816ffdd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2ce24cf6ade0e70b70b06bba588522ba

    SHA1

    3945d01395c6ed71b999a532e8418cb8dbdf44b2

    SHA256

    5f217076daecf7c0575cf136f311a779c536dc9c9913d1a8bcaca256fcd519cb

    SHA512

    6d7e651137a6782f8ce028b6ab856577b1f1657d96a8f80df8854957d7626c51e6b6b058db57bcc09c87ea3c5dec7fade5dbc4f1d6b9e157f52f0170d3269449

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    64cf5ec553f20a67339a91f40eca4bb9

    SHA1

    b68e04eee99f08674b11c6e806ad0d3ee079f9f8

    SHA256

    e0b670d224ac0822ece03b6fa003d8221857b3eabe1baf89eab98b79da85a073

    SHA512

    407571902c1262f5477b4cc7eafa5f448422b723d398a3b19065d6120c139a43bddadfcec596bfab0abf9acd312e6c298e59b34fb4e536f19bcebcd9057a5fc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b642da6524e577cfd0377d149cc13197

    SHA1

    776b842ad1d9731b0f085fc037118a65a695aff6

    SHA256

    0b545a5e77afa93ff1c16f47967a82fedecd7f0129278be991169abb27b16bff

    SHA512

    95380113ff7758608e06ae2e83d447abf146304a56819d0f5c16ad9f3c5ed152798961fb8b1357b19e6f702718eef7eef68c90a7d2350e61971fcc12878eb023

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4875412dcdda6c2ccfea936fe237eae8

    SHA1

    7cc3dbe367b0046061093e48620178c3bf5fdfa3

    SHA256

    f64aada432c487a91b4ddc6ecb78d6ba06e0d03b0c00114a9ae1660a90ca2eef

    SHA512

    e7acd1539dedf3fb2308845dc9a100c229711c020b8a9bc27739c65ab24325e1dccdffc71632d4bc6afc3aaee344647d98be1fc23d26ee5844107aea6c4cf130

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c3c7a0d8629020a74e7e098126925632

    SHA1

    a35beb585ed809faf5e94a6619e71e0d1082c335

    SHA256

    784331af1058704502db4055d6b9d2c5b28887d52922b968f5cf92fd7d56abda

    SHA512

    c834a59e3702f304250743b9c1f7f48378e104c96a3acf670e9fa2bfc5d39577e541918fd9ae116b2c691a4df717f1e68330d88616a00da3e6541478bd93e0e9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bdd244aa6553e942e9ea0120530c6146

    SHA1

    117e2bc2230769f6fe54842e536ef3a30904b71a

    SHA256

    e6e0ecc96761657a9a71c6289f22716e9e85ab7717dd002c9625da7229479fd1

    SHA512

    3cc101d8f54c4dbda91be2f4932040174a0415b7039195d2214cd8b0fabd9c75e0cc9b873b530a9ab3166dd520e9170683a6d8a1ee3b4aa30f1f0f98e51d766e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    9131f63d0406b39385e8bd32113df62f

    SHA1

    3e16ed0cf7eeb57761cab7558a211951e5f382d6

    SHA256

    43d9aa317db46827184bfbfac58938e1383fcf63cb1a0c5965042e9ff850609b

    SHA512

    2eb03b5a477b1694bd33f7971c485c7d0fbebf97148a0a5a961209c6c91cfa9b5c3c2dbeab9235559b064c460f680dc6a26e609e2b3353a09c65f3b8edda13c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    730b98f5058c393c79d67d713a387985

    SHA1

    f88e96e39d954191ac92ad75ba980628529c4433

    SHA256

    7f6aa00b53c5fd6b2f205e5345583a459cd018b6f89621b480e7d69c25ecf998

    SHA512

    669ae885d4eddfbf66037f32add697557e7060c09246ed924e8e7ce7a625a5ee46ef734c7683ea8f19d59a9bd76afd5e5e0cda019a05f556f1d96d12dd3d6515

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    bad6cff812da24dc651b1f9ff80225a6

    SHA1

    bff0324cd623b40eeadb2a7438b0410b693853b9

    SHA256

    eae57357a22b97db5e5b7194c9c32b742148b5cbae445177162705f4ab9f04b7

    SHA512

    b33ec7241af5fe2dce57b8b4cb8a1e9bc5e64cf6b848e02b27f6b86c603a20dbe67fef0c03ae5f648e5c00b73ef84eab5c7ecbf11e11201e734b7109b6305e41

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    6b344838d76d038609c2748ddc024af9

    SHA1

    7ea90f0307e1c458a6920c545630b1c3240cfd01

    SHA256

    d658fd13494d2bcf231f9fd76385a7586b34e6f0c952f3c50d4e25b7035d24a8

    SHA512

    d6507f2e506db686015dc91d91670a4162240e9bc04fd8d57107771251661b93292d769f6d85b44d02a77758235151bd10b407a3c560300be9938dc179e98056

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    24672b75b6f5c4449f9505783ba75bf3

    SHA1

    f70d73394fb9ad109ec94c4e44e884887f81b1c3

    SHA256

    684edfc8aef8c69bd3780d6a49c19aea050a5c1b07c635968c159c38ca2982d5

    SHA512

    04a5a321b99023a27eacc3a2b20a0d618ff2096b4385160defbcd0fd1c069108eb6b3a1cbb9720e1fc69ec8d8438988b5719bada06a930b267d51c67a97f47ab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5394fa29a152e378a32220c70753d3f6

    SHA1

    cb2bb84fba3e04f369600bf72c6b22cb3c0c7b1f

    SHA256

    6ac2e01546437935c88f62ed4e1e1c5e97b77d3f187df7941f4c5359421618ed

    SHA512

    345b56c5fe48482f36fb44540994d6d21bfcad817187bc56be27468b76909f3afecfe97b76e815fad5fad72271fa84fa09fd0bc005dbf405c6e9f388b719585d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    69f6a150de1ae245555b98ff679c6b73

    SHA1

    06bc057b0e82d809bd623873030c661abb1bfdd2

    SHA256

    085941cf211f336b95dff51b9f8c5a1f1813c13268d6260cade4c0b6e4839a07

    SHA512

    6590cf645f6834e2bac56a2275b4754f9d1b91b694a1d9d405f8ef818c12b4257cfbbb9b4c5c13db7839b763890bc84158001fdc268246d19f1069a7d279c36f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    41372a80fb01065139a805def5791418

    SHA1

    7962c79fdbdd74c90ae882dcb59a0ef22b324ffa

    SHA256

    0d8424f9f65da329d5e0546c6baa744627751426182b7130b8ed9481080e52dd

    SHA512

    042a8f927e76d282358c037371c79af7998aabac2ff797d9dc3acc95fdccc83daf6f0d028d1ec801eb5212bd1eb78d969251af0b61cc1d002665d749a0ecb9b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    535a01652c56df0eba42a084c7cc0bb8

    SHA1

    274f7f7c61410b82004fe9c8ff9c910b19b2ed35

    SHA256

    d6c973b8f7c5cdcba36bfa1ee69cc1a3ef5f49046f6f877298832d024adebc40

    SHA512

    4615f1c82de385404e432893f2d58ea1327284cd80c9e798da4b3776ec0a52a630c9a3f6916ddecbd25afc8ae5aa5d8da2bf9e5f5c8609dd80641e94b99d378b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    654d6436fcf6a1f6c86bafeecfdb977d

    SHA1

    3304be125e6dcacbb7cae3249b5024af906ab2ad

    SHA256

    650eaa3f71d7457400f47103f9b91319a98f307496babde5d289f141140f3b78

    SHA512

    7e665b2ebe92c2bc5ee815e41f7500796216f1e4ac817692037019cc4b15c9af1db08261a7a71d658cab5a78e3c04aa4307f1cc102938571f7b27ffc7a4473c0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    02562098f3777078e58e0dcc8691c487

    SHA1

    a01f2c2cf7272cb490207a47647a30936da5a234

    SHA256

    6b2c1b43bb912076bc7f11a53f0b5527a87b17fd430a74885b788fb84bad71d0

    SHA512

    47aa40b678fda98d5124b062a15ea2b015991488a54ee66406ee714ace3156df3be1d67f7c680c581222b958fa60f75cb5293e852dd9544fbcddaa381e973842

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1f486d669f9ccf06b1ab175be77dd695

    SHA1

    ccf4a9ab3f88668aa83c34e5eec5fac947ad0f8c

    SHA256

    89796c55e2832f233ab5dcf74ce11509c11d16e195c5d3136162f6e57d864632

    SHA512

    63e11f5b7f106bb9581ee0b053f069fab03a6b30931a487254095835c77d6acffadf9295b44d78878e84990b4ff52e225bc23d8cdb8422f6f39475799ff94e33

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    447d53b83f3a7a0cc4bd471c5e4abf60

    SHA1

    ed90700366d0294464ce07e0a40c6c4622323c20

    SHA256

    37c9e4b57e1f748eb853cf1b0f34988176a0f4c5a34c9dd6d32a6d5a2a355660

    SHA512

    e313e218e7dba5f6f2c6e78be7db487225841af48717ef0315dbc5f037b340d583f6ccb3bd73814be4bf86d147776f909c5cf851815e7b3834516d54339bf8fb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    75705353257c69a741e4c9a86b8f26b9

    SHA1

    88d0d1c1219fcbbffbaa0bdee21ad4435645fdde

    SHA256

    e12f28e65c4c941f3fbaa31226e06a5c6e1087a119702a1b20d2733e3bce5016

    SHA512

    62a208066449e7e06601c2bce5a7794197fcc067795e2f5ae77985714321b7a1ff2faa15d68f972a85c657e7225ae796dba1d7a4734c2fde3d3df28bc285a923

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c91c3a6e5c5a96c1a261799786cbccb

    SHA1

    c5283644f6451ebb3d83c60186bda0c24e9f68e3

    SHA256

    de00b6a249bcc1aa0f18369de518d84f18926189483975911b42d3768df613cd

    SHA512

    b77c64e29d71eb9bc3f70f85758fea4c80f63cda6df92644255f2a9292a6b281e43242e22a902d0823d7a1eef643b232318e1d2c5c95e8655acd1dd09eac7948

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    06229980aaeb92628ae949c448a7cf91

    SHA1

    4f099d214df7e41d7d94ff762752dd2277bc973f

    SHA256

    6b93f7bcf9539db1652b2bc74e30786d2e64e264a198bbc794d04f8e0d037b14

    SHA512

    1706cc368c57197e3e5315e97c0686fd3d2ac8662fc63f08f21150a2ffc272c14dcfc28ea8d489d1a8b9e88d691e1c94c1510313e5b0df78c8e7f1763a863fd1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7d4698b64bf952711d045f5715cde2f

    SHA1

    f2a04c2f709f976c213d7067411dec75a46cc7ad

    SHA256

    ebbf571253546d6ac6601ba0b30d682d3ceed02ad8a5f68b0059de99efed53aa

    SHA512

    b57eb53040c2c2c76a3c46e6b0d6af94cf89af46e2838316e9a485d260dfe05598940b490b9c34c9dd062efb045a811ae0a4a594be1bcfca228f6364a8aba1f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3c218b4b7162e44078b419b3340fea61

    SHA1

    3fcaed28869516c7058e5511bf8b2e69bbf99134

    SHA256

    89cda614dc77cd5a158a6e136484efc2ba89ea7b83f4dd9454e2fc26c430b37c

    SHA512

    a9cb69f7510775535bd88705b8d4fd9dfddc49b160f844256c45e016e7e28370d3d12d048322431d5bb028122f21711bebc2e836b7992ed83036f436f577af6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    40ca8b80b982b240282c50397b082d00

    SHA1

    5d5362adb5c2995c99c02daf8eb0a03cf6b9172d

    SHA256

    6916e97f97405ff247ac6d9d8082f0ec75241f7ad3576408912c6fe47b5d64ac

    SHA512

    522895106729e4d35d772985305821977a73bc333275628e22d090302bf3d7a6e7bc99d0210ae0da57cfec16bdfac2414568a4b9c1793080c45ebefb800e3343

  • C:\Users\Admin\AppData\Local\Temp\Cab3FCE.tmp

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\Local\Temp\Tar4042.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a