Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
137s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
29/05/2024, 11:58
Behavioral task
behavioral1
Sample
Midnight Avenue - Official Press Kit 2023 .pdf
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
Midnight Avenue - Official Press Kit 2023 .pdf
Resource
win10v2004-20240508-en
General
-
Target
Midnight Avenue - Official Press Kit 2023 .pdf
-
Size
9.5MB
-
MD5
9b5738cc861823d9efd4dce180d87eb0
-
SHA1
77d01357b7568554b44eab318255d51edc908372
-
SHA256
b89b5e4d3e6e302e11ee6cc178aef9680a82d6ff78fd59774c58e368c8a3e475
-
SHA512
c6f56be502da398a2c6b4fde6543969ca3a3f7485b11f9ee5db54f35e7a3be56acdd14ee4f9dde47e967ca9af5531b0e774d7642fc4cba8e03fb950f97a0827e
-
SSDEEP
196608:Tp/YYdPh1tse5foqK/OE9ZPutwfl3XXXcKREhp/ifutRLgcE9jmIbaSgQPLN:Z3dPrGeeqaWw5cKREvvM98EaO5
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3408 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3408 AcroRd32.exe 3408 AcroRd32.exe 3408 AcroRd32.exe 3408 AcroRd32.exe 3408 AcroRd32.exe 3408 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3408 wrote to memory of 4680 3408 AcroRd32.exe 89 PID 3408 wrote to memory of 4680 3408 AcroRd32.exe 89 PID 3408 wrote to memory of 4680 3408 AcroRd32.exe 89 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 4744 4680 RdrCEF.exe 91 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92 PID 4680 wrote to memory of 3368 4680 RdrCEF.exe 92
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Midnight Avenue - Official Press Kit 2023 .pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3408 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
PID:4680 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=76A231840C3EE44CCA9842A419ECCE18 --mojo-platform-channel-handle=1748 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:4744
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=FF53429B43B3D14C057426B077C714FD --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=FF53429B43B3D14C057426B077C714FD --renderer-client-id=2 --mojo-platform-channel-handle=1756 --allow-no-sandbox-job /prefetch:13⤵PID:3368
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=BE26218144BE619A1571CF99E34DDA7F --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=BE26218144BE619A1571CF99E34DDA7F --renderer-client-id=4 --mojo-platform-channel-handle=2180 --allow-no-sandbox-job /prefetch:13⤵PID:372
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=B3007C3D37C3FA494853F5081F168A1B --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=B3007C3D37C3FA494853F5081F168A1B --renderer-client-id=5 --mojo-platform-channel-handle=2580 --allow-no-sandbox-job /prefetch:13⤵PID:3908
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=292744195F70B30511A18843CD60D96F --mojo-platform-channel-handle=2820 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3144
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=9D70DBAD55680F9740A47AD9B98096C0 --mojo-platform-channel-handle=1748 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:388
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=E93078E502E051929429C03F479080E7 --mojo-platform-channel-handle=1916 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3428
-
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3384
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD54ddfb31059c6406a80777bff64378e4a
SHA1de0f31453cd9a0471d1b93d585e9cc1cbbad685c
SHA2568753359739fb096a2857fb72cb6947b7f859e67f88448c94a9d008d4c9d37b45
SHA51256607224d6b53130e7965279fd28f39bd108bd58cf7ea893e8a6aa6a1115e3cd4d52af3fe1f5bf3a0558b42593e6fde3472ec62443abf157f6feb0e5844c1752
-
Filesize
64KB
MD510245b551154c04c7b98378a7feb10b6
SHA15fb7fca4900e73032fabb7ec2f087a364cd3ad2e
SHA2566e021925f2ba59564e180ea11e91aa2c15242f8bf7e429af1079365e04ca374c
SHA5127a9333cc497eccf2698eb76d4b9aa859576fca6d80d29b425c54b8d20b84a9bb817f0b5e52f2cc41df3b3806e01ec3da03f4a77a1e5518d6281224f0f4658537