Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    149s
  • max time network
    144s
  • platform
    windows10-1703_x64
  • resource
    win10-20240404-en
  • resource tags

    arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
  • submitted
    06/06/2024, 11:21

General

  • Target

    https://brandequity.economictimes.indiatimes.com/etl.php?url=https://brandequity.economictimes.indiatimes.com/martech?ag%3DSuper_early%26msid%3D2558%26batch_name%3D24032_MarTechPlus%26master_ref_id%3DMTIwNzYwOQ%3D%3D%26ag%3Dpromo_mailer_2558_05Jun24_1717562609_Super_early&activity_name=microsite_B2B__0506241012_27_2024-06-05&emid=RmZXRXJSZW1rS1Rma1JvdkdsdGNvanhiU2tvSlFGTElGbExzWnRTU3A5az0=&[email protected]

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://brandequity.economictimes.indiatimes.com/etl.php?url=https://brandequity.economictimes.indiatimes.com/martech?ag%3DSuper_early%26msid%3D2558%26batch_name%3D24032_MarTechPlus%26master_ref_id%3DMTIwNzYwOQ%3D%3D%26ag%3Dpromo_mailer_2558_05Jun24_1717562609_Super_early&activity_name=microsite_B2B__0506241012_27_2024-06-05&emid=RmZXRXJSZW1rS1Rma1JvdkdsdGNvanhiU2tvSlFGTElGbExzWnRTU3A5az0=&[email protected]
    1⤵
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:588
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffe349d9758,0x7ffe349d9768,0x7ffe349d9778
      2⤵
        PID:2596
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1516 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:2
        2⤵
          PID:3036
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1796 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:8
          2⤵
            PID:2368
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2056 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:8
            2⤵
              PID:2688
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2876 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:1
              2⤵
                PID:4092
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2884 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:1
                2⤵
                  PID:3652
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=5088 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:1
                  2⤵
                    PID:1784
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=5324 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:1
                    2⤵
                      PID:4516
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5560 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:8
                      2⤵
                        PID:4104
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5540 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:8
                        2⤵
                          PID:4552
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5504 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:8
                          2⤵
                            PID:5052
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5184 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:8
                            2⤵
                              PID:1324
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=5712 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:1
                              2⤵
                                PID:4488
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=1504 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:1
                                2⤵
                                  PID:1600
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3624 --field-trial-handle=1812,i,2627310753783837315,5917882352327686963,131072 /prefetch:2
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:1324
                              • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                1⤵
                                  PID:1032
                                • C:\Windows\system32\AUDIODG.EXE
                                  C:\Windows\system32\AUDIODG.EXE 0x3b8
                                  1⤵
                                    PID:3768

                                  Network

                                  MITRE ATT&CK Enterprise v15

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\6c3fa3e2-7463-4a08-ad4e-6e02bd85fc5a.tmp

                                    Filesize

                                    2B

                                    MD5

                                    99914b932bd37a50b983c5e7c90ae93b

                                    SHA1

                                    bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                                    SHA256

                                    44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                                    SHA512

                                    27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                    Filesize

                                    2KB

                                    MD5

                                    b8e664603a0566c1cb6aadebac7b5efa

                                    SHA1

                                    153d94c42971a8bf4d9dcd141295633330c4e38c

                                    SHA256

                                    91891307d01084108987316788f58f505da1d0b669b97c0dfa8c371358001d75

                                    SHA512

                                    d732d6e7c1aea3420da08b7f449e6157ebc703fd6268785b142541942a4d8829841cf059034f3f973a1782f99fa96712fc27a26a772fd27783fb366fcd5e63aa

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

                                    Filesize

                                    2KB

                                    MD5

                                    00953639d273220c9f78af389f8fae51

                                    SHA1

                                    4485513b70e73f54f73b19fc8058a91341c20c78

                                    SHA256

                                    c0a8841262337dbf28dacf3b879dd63e7f8407b8c74b669dcc9b62530832bfed

                                    SHA512

                                    751fe36dfd38da180746dceb67ebed1a5cb54268f1fb4bd0fb2ae0f2137e0553f0e76f2e02d69ebe2c97d6c4217d8771f4a878bb8089aaf9b5771cd95131f1ec

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT

                                    Filesize

                                    16B

                                    MD5

                                    46295cac801e5d4857d09837238a6394

                                    SHA1

                                    44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                    SHA256

                                    0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                    SHA512

                                    8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                    Filesize

                                    6KB

                                    MD5

                                    635cb89dadf6a962c1e08a048c7434e9

                                    SHA1

                                    86e7f13a20390f332241090372c01039eafb6ad2

                                    SHA256

                                    2085c6cbdd16d1c5fb3a4c3ab6e8f4729bf4e3019b761e7a4f4cb8768087877f

                                    SHA512

                                    fc0f7bc6ebdaa63773ad8482ef0815c61798fb03802477dbe1c5f02e70954fe633bbabe5218115483404f9ef79eea6da313d1fec18b1120400f145b6876ac025

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                    Filesize

                                    6KB

                                    MD5

                                    7b8d6a26e63685602e6883e131988a44

                                    SHA1

                                    381cdc48db372282f48f238f78e855d2d16c61ad

                                    SHA256

                                    9c4869160faeb5c9767d642b01f93619d879285ee225f40a86a3f67ae95c4009

                                    SHA512

                                    9ba963eaa77b2604f4126a6305d68c0c96058a109c7ef4099436c617cb70bd302a549c6f3fec5ce429043bfa40d69a3aea87c2ff893c6d7a94342f21eafd89df

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

                                    Filesize

                                    1018B

                                    MD5

                                    654e19d3bf2b2016b8d8713ef1ae0c14

                                    SHA1

                                    24c23f52bbe9d579bd177196e029352318e66791

                                    SHA256

                                    656dd0e666bdd4d3e670f9bc15c758be1bd938dc217ee028ecabff0e128fb7d4

                                    SHA512

                                    3c0787e46f64d9586e99b716b013703abb89f597be3a136a6ce49b80ef875c04b2f4acdeb5b18d1ff79d723ff52c054cc79137e7f617ad8be4a56f52cf80d09d

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                    Filesize

                                    3KB

                                    MD5

                                    297a1659adaf4f102c1b62da1c50f582

                                    SHA1

                                    17ff76fb0ef896db785680c68c48ca4a4c42907b

                                    SHA256

                                    bd3d753e15acca7a2cfd9576aaea992376eb8e76c23c4bbe7b9239a9076dbc2b

                                    SHA512

                                    3a5370c8a1523d0f751df76797913aed36a18b4126285566a813a0c9dfd054e5cd94b096f3d48dff68b474b49d618dc1431034d7e2457465e68f9c33590e29d6

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                    Filesize

                                    3KB

                                    MD5

                                    f6bb7964d3c104eb4ada2609d7870282

                                    SHA1

                                    f2e1a0060ebf61f88e51db0f59c2d8700716f24d

                                    SHA256

                                    11cb324d9e49ac415ac7463da431bbd219c5d4077f600ae8d7b1392d4d15d9ca

                                    SHA512

                                    b130f5a7ac7917ba65300a7184a9799c7112b3dc69009991835a3c0d642fad7a82368f52744df8f15408b415916bff94a30f0d2c7228ab5279492c2b8dc7e778

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                    Filesize

                                    3KB

                                    MD5

                                    d9cd3c65dfabbb5af196a220106a4ae0

                                    SHA1

                                    fa6552c3d51a70df76782367bd3710fbf58bc4d5

                                    SHA256

                                    cc9be965a2f5f56ca6de16f618894a7791449d5b915dfc9a72c1f0b20126f8d7

                                    SHA512

                                    cb0d6af70584b7245d0c82ebbb93746177bae70fdfa29e7ce6a802c5b2c113bab7841dd4bad5ea9784ce0e4729fb3bef3a97797da2a29f6ebb63bf1a0471e39c

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                    Filesize

                                    3KB

                                    MD5

                                    2f2e62beec10ecf046a693803a79080d

                                    SHA1

                                    cd1bf1fb63b63947bd601db03d6c9c536b55de7f

                                    SHA256

                                    b3bb08a46561290fb85a1104b92fb5de9fca26965824710ccb50a95a825392f5

                                    SHA512

                                    7f09b4722fbf12ecc6fc0849e12728658f6867755fe80c0b7935c19e427850845da7d9089f3dc55749ab6c87f6853629db6ebc0387fa0a19373ecab6396bf18c

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                    Filesize

                                    3KB

                                    MD5

                                    61f29b33be81907f5b03b981ccdfe060

                                    SHA1

                                    747183c7d10c5d7058bb0e79772e3f44c4a01261

                                    SHA256

                                    75063053c9097a83f1f1e0dcfec78e1fc703308ff7ee2b6ac1fe4169c57f7ed0

                                    SHA512

                                    476ba6818aafc518d455f28bdac03240d087258020e888a5ae6d84ebd227a549285e15414f577d9fd66c2a236d48f30f8b06f64e6d01212f43406319906ebd52

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

                                    Filesize

                                    3KB

                                    MD5

                                    2f40f9751e39e85fc4f600b2e0f0a24a

                                    SHA1

                                    fea1b99d2921935154e9002ef33b2d3c35f00b5b

                                    SHA256

                                    1fc16afb4ce873f124b621e182c77d2108680f31b4a340b69a95150d88aab4a2

                                    SHA512

                                    2a719387787599358d9f36eb2f11aed219db7400fd58d37d88797f5bc7311ccca81b5ca573129f6d2232eb9cfb94d89e686f3ea32d95b851083ba25c7918aecf

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                    Filesize

                                    6KB

                                    MD5

                                    780e095ba8b09b93d9ecb3d173170013

                                    SHA1

                                    b39c679f08b2a64af596b3502c10acf63bd40bc9

                                    SHA256

                                    e55f497809287982a64caf9572e07f300c3eb6db37367b4b359405ae5f4995df

                                    SHA512

                                    8b2bf54a0ab8dfe2115f80223fd0d2bbc0a87dbdc92cb5ef1d9268798c8fb2b072fb7dd865bc088d16b0af2c3c44552a252b8f20d96e0409ded76c85885701d8

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                    Filesize

                                    6KB

                                    MD5

                                    209b909ee34b039d67a667ee1de23480

                                    SHA1

                                    0623f2438525a781805d682bb464aa9df1a9557f

                                    SHA256

                                    e4ba157d59b2bb0218be3597a1587e5c710fd1dd3478881423ccf664508bd3b0

                                    SHA512

                                    3198aada22460915d1d7c357f0b757dbe359eb62d19f534f459eca828cefa4ad4eadabe3d7c1d92f2df19dd48f1f488fc1607518dce3debf3e896afdbf17e1eb

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

                                    Filesize

                                    6KB

                                    MD5

                                    8c4675579a9b579d5141f19dc93d15fe

                                    SHA1

                                    845eecc413e0072afd78575264298e2719028700

                                    SHA256

                                    7a863c76a541d6ebbe14a707819ae07c8e1880dd810c6a37bc01b79541812010

                                    SHA512

                                    6db83d1f8a6e20437055bc04dc6961c0d0851dc0dd649360892d79bdadc2f9f89cec8bf6a0b3f228d8fc12622cb88eaee093f22987c88010be408f7770c713b4

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                    Filesize

                                    56B

                                    MD5

                                    ae1bccd6831ebfe5ad03b482ee266e4f

                                    SHA1

                                    01f4179f48f1af383b275d7ee338dd160b6f558a

                                    SHA256

                                    1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649

                                    SHA512

                                    baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe57833a.TMP

                                    Filesize

                                    120B

                                    MD5

                                    4af80950b44599490935da03e6d5423e

                                    SHA1

                                    3582368ae60ba661408a8a3b14faaec2cfa3c480

                                    SHA256

                                    f00c1524c7ffa5eb1c5808e2c58a4657b7d1f27b3b0d30fe85abb76730b84f88

                                    SHA512

                                    333cbf3dfddf33ec461f02d39fb6045477b4d90b90bff5690e2321e44a87dee162f55cb0928bee2c83bf0cc61473eaea44a6bebba19377f3a06dd03ca24c8572

                                  • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

                                    Filesize

                                    136KB

                                    MD5

                                    f28af74629500fca0493a8c1715a183e

                                    SHA1

                                    c60c05e21ca6485a69281e069505e9faaccd1b9e

                                    SHA256

                                    ce08678207c3a1d85b84698f21fa9a996a8f71e594e1837d429c3a71407898fe

                                    SHA512

                                    96d3cf255cf063801a6f159b17093a4ca356300cff2141cc62b23be338639dd593ac229f63650191bcf3c5f449c9dda51d6c945cd0dad870cc6ff61883f162ea