Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 03:17
Static task
static1
Behavioral task
behavioral1
Sample
ibs-clearing.ch verification form.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ibs-clearing.ch verification form.html
Resource
win10v2004-20240508-en
General
-
Target
ibs-clearing.ch verification form.html
-
Size
278B
-
MD5
c197f28ff518a6afb7fc42c07089d2bd
-
SHA1
90e405eb0e75c6ee89bf927ce783ba73923de9f8
-
SHA256
708cc81e4ee33761cf1cc84cc8e4dec30263000764ab7f7e9116837f8fa504b2
-
SHA512
8e3d20cca330bbbad708bd215219232ba38a202000b4e2a2bf4cebcc0079edc6a26ef77470e7d2f8c3ea3bbd53ae50704a134a3d81dc98182fa817ed7858cadf
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000064fc810f067cc0418bc5ee861449a5930000000002000000000010660000000100002000000023482a19fd3a6ad74298b5605c5332b413d62b964a8ced4609e2a7ff9b2ba728000000000e8000000002000020000000809d2026e38ed1bcddc586503fd1858ae81c895f2445277196e17aaf7205c4a3900000006166abc6548b9dd0ef8078a4aeaf4e92059cab1d7c24e7f9b1f531332bb895a2a1ad193687714965075ca6ee49084f144e140b436088977d602dce5788d6ec630774ab382637a9b52dd2a3d83169eba7e890a648d6730c3d66747eb4824f66d0b6e7a35f76138048818e0df5ecaa1bad64b9c3b935ac464fd633d811ac27581db5ada2fd235e11510998d8a499c69fcf40000000008359b45f7ee1839d7e27568bd1ad2f6fda926ad749e5a2964afb65bf2525f9201d2e08efd6371d4159a18df96bd40e34227e16fcb5589d5fa0fb15084f3334 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = e05c79d176b1da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000064fc810f067cc0418bc5ee861449a59300000000020000000000106600000001000020000000b50171c8b04ed19c10dceb31f817a998c5947078a839674fd8bc311151035d95000000000e800000000200002000000097a11e3b87995c8e7fad6d51cef2d80693742b7ecda51020fc7ed05f2f0486e92000000027095e70763ad4a0b5c72e6abba3db5290b971110f1169a03db2915f67132dd74000000074faa9453062becd48edcd0357cddbc4ef1ac0fb987ac0f7933ca07b62c2805a5cc0f77b9bea1bc5b1b68b376271fe7ce1ddc9d14e5c85c15e8613b1fb63b9c8 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{FCE2BC01-1D69-11EF-8A7C-66DD11CD6629} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423114520" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1912 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1912 iexplore.exe 1912 iexplore.exe 2868 IEXPLORE.EXE 2868 IEXPLORE.EXE 2868 IEXPLORE.EXE 2868 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1912 wrote to memory of 2868 1912 iexplore.exe 28 PID 1912 wrote to memory of 2868 1912 iexplore.exe 28 PID 1912 wrote to memory of 2868 1912 iexplore.exe 28 PID 1912 wrote to memory of 2868 1912 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\ibs-clearing.ch verification form.html"1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1912 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1912 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2868
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD544830018f43d5d4217ea0ef6bd5b6530
SHA102ea5b9ed311a6ec0d0700733a9131f745b69e33
SHA256a96405c6f0640c06f31f36ca8321af4cdf37bbfbba21d5b3237944368a9c2d05
SHA512139c5f62e5f4160b8bd0562f4ae81394c908183ebcd2f4e0e3c90af47976c58d1b63dc7f50b6fa9582b0c8d7a20fc8b0cfd2f49fa212ecb6954a4c403375c11c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fdfcc9b9a36dacfe0fe5418c1183b49d
SHA17db93672789c3931e5b30f9f1b17f4cf5ad112ea
SHA256998830682a1c852a4faa4ac7a9c29a29f4e562a3789f620bd397a94999c0b3cd
SHA5124a17f09477c768c3194bff3d973fba196162e73066fcd2068010f0e7add77fb9c74bb98a5df1db53c69e132fc190dbd6cc99345506905bf5103eec76646336bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD560b52415e46793f4b722be62a369c5eb
SHA1365a5bd61c4fafca80be6e370e790de4bfe27240
SHA256dda3975a27a3f71fa7885ba9d64853dc29e78d4dce62b99d76606264b1a6f835
SHA512197a80af96e9983c785ee0d752678302f762530ff340177a97d32ef577bb2112ddac1fe771b3e05ab10550196242085dc287b6fe3f2dbb4325bbca2933fba470
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5af16eaec05d92e567d35bf755159eece
SHA17fe8d151d2155a86dbd81365ba1b5362ed8cf5a4
SHA256fb625014806d64fd253781ca53c297a1d3db3e95d42346b73747f720ca16908f
SHA51277caeb52638fa3df877e3087926ac66afed97b82e46857b4442755e0aaa360e68829e7f656f74b1b6eb67eee0f134838aef5cbdc27e706e90e8cec29950020f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e9979570f1a72edd31f4fee4db1a2f70
SHA14aa91e04209f90e88c094c661a9cfc8f59b770ca
SHA256c1e8b83d5a54dbb70efd23f31aa2d680a9fcb15351f168bd52500ef585241aa3
SHA512398df14a671f24829b5213de27a3da7adfdeddf48e30dbee261387948f0eb33e861afaa74a7063b1b0c4d5de6ec8f186623d9460598808774c7b3f8b3ddf7b73
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD550b5b1d2fcf1225000e915f9577b09fb
SHA1fdcf19b6c753a84c9cecec860eb8b14338702a87
SHA2562c57817cc8e57ec25e79d2d36db058f8ce71ff8abbc5165512c490ef2bbef502
SHA5125bab5a0ce8cafc6ade358437df4931cc4e9274de6c465ef6d141eaef381b58b464e6ba683aaa2cff321f262021c38eddd06853370728dbd1efa0908febc793f6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55b966605b06c00fcf3a2587fdfdb82fa
SHA1c21b0e34e29218479e12b3e06e3e20d808d1fff2
SHA2567b4bfffe54514c738d6107f0b1dddd5f1dd9c4c11952c9f18f05c8a0592f570d
SHA512b5f11b9d2ac545d703ace0d54f2f4f3fe93e019a1916b9ea435bf66963852244b5277e8eceb0c7f88a46c8d4c7601bf9889832807a3bd40f8c2e3300f11daf8c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50cf21ec5ed900644afb092f25b6882a8
SHA11752598e7bbc69cd7b8ae549fe6009073294d445
SHA256e071c5441155bce069f002518ff3ac7c55e108b8a54c11578943202b71769506
SHA512730c85117c59a19a97336dce4121f14e203fe7498fc1f1511e8f3882ab984b6874fa220fc8b09991e7dd8d54c3ceaf3aa8f48f3b3b835b9093b3c8f6b7a963fd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50094169912422af7e2d35252c81b7a2d
SHA1235fda068bbb79a1e2298c1f98a7e0bee30d0012
SHA256890ace4c1003c6742243d7055f724a069763c13b9fe7b00e47ce645fb9552b0e
SHA5124165ac58f98d36b1a10c1e76051ca086924b4108500b4d81ada47708172b650260b62d0b866c392cd697cb7d0ce4079a625f511bd7cf4101cabc09bc1b2d95ac
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD511e915fc9c5e566f5a2b16753203182d
SHA18dda4b18f957e0856cb23820983490ecb242e91f
SHA256bb38dbb2c2817db9a2dccb6aed6d06179f6d90adc7ea88ace36b528b25b54d53
SHA5123d2029e60214c377f8a7d49f3a3dc428add4d069a33b45437bc88714fe99164388e5ffb05a0a513b3cfd613c2a97003b55014afe1b3af4e995cf84b7db498ecb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD525194859f47918874335640baefca7cb
SHA12db458ddd22f1072fddeff9a3fbf011870db32a2
SHA256dd0916100414874a4fd88edf32bc0d9d34be08914c35b0425e32050099fa71fe
SHA512683f4a7162380eb62ba6dd925f47eeb851e084a45a317a349e8c6a9e50c404d4bba4b28cda2890e6b6963605a1678e1302a46465d622250f99e716f9028f0182
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53a1bc2a8e3315a5056f468da4d2b7b9e
SHA193b931b7a147811e326daf63317a45df096d8c55
SHA2563700b9f87a1a76e0f50fbc06a3b8d4fb4759ddaadb7bb0480b168884c49b2d64
SHA51273c31771d67d7f2f8facf9052db002ced6fe57b9f683100e81ea7a0482470c2b92ed8dd4823582f948cd6a82df3a999f467317bed031b758871669b743f1578c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD598b75f6c13ab8735d6842921cf32f17f
SHA1a75e0650d0667581453f42b6907646a25c0661ef
SHA2564d3b2de1f2039137a81c559fd397327762d42967fb2984be82ea58cd9ac5a200
SHA51286fef3d2bda1852d4a72270f43a25a372b69cd236c9566e3b74a6589c23f805bb2dba29d1016980a7ccbba2dbafffe598c4c9b37f280d0c5e1f5fb79cb0c4774
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD589857c1937bb073535660b50ff92116d
SHA136e11fad583149944112ff99ddedd0d7e5d68f85
SHA256c667692a12dd696a7323823b811a5e11e629e08bd44156b8cbbe881eccc9bf2c
SHA51238faafd8e81e29b5609f15aa20555c9430193e75b7700fa37012887bcef5eb73ccb27bd67bf41e8400b61caf08bebb9752cc80e47846e42e9cef0dca9b88c3fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f23a40f3c2f14d0cc794c7fdf0183ad3
SHA1af8f65121d28b6c263d15741a531818a7aae6d49
SHA256fe86b01aeef19385b781ffa71eaac0274b4177099680c5aaa4f797fa4ed6516f
SHA512e1980f2ab109e79e173773e63fb6b105d4ed9c9f96bbdd9214e5565c8d99ac0363cefafe2aeb402297c552f6d436300599a543100bb088a3c7a4f31cc1ae83c0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD568855f7627aca2ab27ea5c643cd3b64d
SHA1fe16ea1aaa094f47a281a200f773c71e017b982d
SHA256b6a1e868d9d4788edd3d2277608ec1cf334db8eeeebee804010034685d28445c
SHA5124d89a77add874089650ad69e21484789dadb5b6a83cf7d1db9ec1828b8adc7cefc284ce07e7ab5ee175fe4bf723f6b0d66c21cd570be90a8fdd6925174226206
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50f5f9ddd8c0f49e996c50feb7e499397
SHA151ea1ada6a94f01e6cc352090c11defde9e0d0b6
SHA256356233d04ebac5cccf0cc3d88cbef788fe9770b69dfd28ed5e3985ac6478194e
SHA51211101139ddb0812a5e5db71ee06596bc0a183b7467b0c8684241d155244dc347876cf19050c042cd1733cccaa3fd79d82eb64a186b5e1fb5e4b671f7a94c11ad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b28c89aee98a42b51224e524538d38c5
SHA16b191a4c6ec880acff309bf49301ee148cc88824
SHA2569679612aa59c4564676b806466da0541b117be7f46a3792dea7e9f0a0676abbb
SHA51208af6752a60b094da2a65bc1016403d643e72583022a2d8d4e3271bffe430b2c631124c136bbc0280f4c7a3e11f8876c51992f36b599ee83d5392eacb2e05678
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e7cee8ed4323fd1c07cf746b2669c860
SHA1df67ad5963038c445aeacfec11d5e99c0d1feeae
SHA2565174862136f745b11b0d565395c4ebb978eb5f954fd3b83418a0b6d030d9029d
SHA5123806f171a85d52c569ec0f4a5a68b81ef97d4b81d914ebc25c14ebd0619fad82d9cbb5ba0f9b1db8f67d2f323878ee76f11b7b93caa9a4a5b0b1964695056acd
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b