Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09-10-2024 22:21
Static task
static1
Behavioral task
behavioral1
Sample
087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe
Resource
win7-20240903-en
General
-
Target
087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe
-
Size
4.1MB
-
MD5
a859f6bf1bbb4df6c23bbdc0d4cae460
-
SHA1
992d843bbbf6cfcc9ecd33f978554955b4044554
-
SHA256
087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38
-
SHA512
03be0abbc579b48507aa7441b3946e7a6a8dd23a008006510dcc79a99e347fae4c429a00422c673a92f2d7f5036a68cc0359b1464e3642233838735c175ef6e3
-
SSDEEP
98304:IDqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HFbx4uR:IDqPe1Cxcxk3ZAEUadzR8yc4HF2
Malware Config
Signatures
-
Wannacry
WannaCry is a ransomware cryptoworm.
-
Contacts a large (2454) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE 8 IoCs
pid Process 2328 alg.exe 4884 DiagnosticsHub.StandardCollector.Service.exe 2640 fxssvc.exe 3492 tasksche.exe 2388 elevation_service.exe 2188 elevation_service.exe 1424 maintenanceservice.exe 1720 OSE.EXE -
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 11 IoCs
description ioc Process File opened for modification C:\Windows\system32\fxssvc.exe 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe File opened for modification C:\Windows\System32\alg.exe 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\bc5d70d5cad6a2b9.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\fxssvc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\dllhost.exe 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jconsole.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\kinit.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ssvagent.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\schemagen.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ktab.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\orbd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\ieinstal.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\extcheck.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jjs.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaws.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\iexplore.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdeps.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\minidump-analyzer.exe alg.exe File opened for modification C:\Program Files\7-Zip\7z.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\ielowutil.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\wow_helper.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ExtExport.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javaws.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\unpack200.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroTextExtractor.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_78984\java.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleCrashHandler.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jcmd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\7z.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\idlj.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstat.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\idlj.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mip.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32Info.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe alg.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdeps.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\pack200.exe alg.exe -
Drops file in Windows directory 4 IoCs
description ioc Process File created C:\WINDOWS\tasksche.exe 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe File opened for modification C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe File opened for modification C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe alg.exe File opened for modification C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe DiagnosticsHub.StandardCollector.Service.exe -
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe -
Modifies data under HKEY_USERS 10 IoCs
description ioc Process Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E\@fxsresm.dll,-1134 = "Microsoft Routing Extension" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E\@fxsresm.dll,-1131 = "Route through e-mail" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E\@fxsresm.dll,-1132 = "Store in a folder" fxssvc.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0" 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1" 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E\@fxsresm.dll,-1130 = "Microsoft Modem Device Provider" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E\@fxsresm.dll,-1133 = "Print" fxssvc.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1" 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName = "1" 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4884 DiagnosticsHub.StandardCollector.Service.exe 4884 DiagnosticsHub.StandardCollector.Service.exe 4884 DiagnosticsHub.StandardCollector.Service.exe 4884 DiagnosticsHub.StandardCollector.Service.exe 4884 DiagnosticsHub.StandardCollector.Service.exe 4884 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 660 Process not Found 660 Process not Found -
Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4760 087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe Token: SeAuditPrivilege 2640 fxssvc.exe Token: SeDebugPrivilege 2328 alg.exe Token: SeDebugPrivilege 2328 alg.exe Token: SeDebugPrivilege 2328 alg.exe Token: SeDebugPrivilege 4884 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe"C:\Users\Admin\AppData\Local\Temp\087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe"1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:4760 -
C:\WINDOWS\tasksche.exeC:\WINDOWS\tasksche.exe /i2⤵
- Executes dropped EXE
PID:3492
-
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
PID:2328
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4884
-
C:\Users\Admin\AppData\Local\Temp\087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exeC:\Users\Admin\AppData\Local\Temp\087853446f05cfe03410073ab6370f1de2106e50970a0d37e1f220e592e17e38N.exe -m security1⤵
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
PID:3288
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵PID:1780
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
PID:2640
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵
- Executes dropped EXE
PID:2388
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:2188
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:1424
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:1720
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5a15161d91432cca560ce16ab39dd57ca
SHA110f6d0d59d086de3cbb4b4f939f9131001e5b4d8
SHA256f56fac16ea170225253b129942f3011bc0bb6d6e82ab2eca0643eb6f11caab14
SHA51201b6d66141ac0175414591494522bac39f037915ae22de5232344636a3701967446baa6daa972bd04c9bc09518cffeb1a1f115e546422fe83337aef3be32c5ef
-
Filesize
789KB
MD5202cc700d3db0641554025ba6d7ae3e9
SHA104503b24182a86ebade86ee2b819b63527fa105b
SHA25625aea60b05ae7bcc6e5a005ee86de7afd79476f0e41b542cf888c386366d03a2
SHA5128402b6efba63e0358ec1c8c7d0c078d86a4a1767310502b64baeeb1139630c7b3eda496f10c26bd2a4c7955ac3a6f4146b2bfba0f197a3bc895a779b1442f8e5
-
Filesize
1.1MB
MD5e9db4915b3916663e40faf1a0f2de925
SHA1ad1646023ab2855a6d7d7031f0fd3f39bf8bc964
SHA2568cd8a6663ff961bed0eccc70cba949d0fc708144dd3170d986504497f705c4b4
SHA5125c166098bdfb2d614bd041bc85ac5bd12a7fd7ef350973e6bca0d7ae07af22bf31fcc8660dd6ca28578ce40fc9afa9d9024e717ab9165a680ed44831dfeee0cb
-
Filesize
1.5MB
MD5cee5fa7a7da050f58611ee2aba846f82
SHA15cc9df77e388e52fd3cb58669cc2a7139a810374
SHA256843dbe7e47302a48c383d2ac3531abac5732229213f8e2c82da45dc90167a6e7
SHA51273e7ccdb1fb123dea2dd145f04de6cd2a2ef43812925b7521c36dcfa1950e84368655b5923d15aca83af157fb4d1c27fb5eb425ebfaca136c24cf3d6def76e0a
-
Filesize
1.2MB
MD50030dea4c6d7e4e03bb836c46ca2ff02
SHA199004ec8f74441c48d4071e3c183a0f13abaf3f9
SHA25614d4fd313b0732e229b9fe862fa0f6a7ee589333478afecd58fcd2461de18ec5
SHA51247dfbd2c8cd82a5170940240982df193ebe1ae9174f25426ffa6181f149453d4d698321e7673231f9b71ead81b41e7f83c3c6d4be66b5a3810edb5c4fc42cac2
-
Filesize
582KB
MD57b073545b20e853d29918a3b291593a4
SHA1d607e59db2e6d42f1a4e89f83a083183261a9c5a
SHA256a37f29fb217316da9bd2f58d005240e2022ed198369f56ce3f74adf4e17c2f93
SHA51237df7b08f55a2a80434065d5a42ecbf325432513efef13725a25973a810088eb2a2a9c94c52a5c86580ff7fafb6b18a4c159a2c4c2b781d4404705aad3b22757
-
Filesize
840KB
MD51f3b198d9120c66dc81b8ac302e61c2c
SHA19634f4b9ed69e8d42f694fbf89f5a670e6af2330
SHA256893893f1c4889a029e6756be0d65045083324c4a9af47eea3363639d1f7365ee
SHA5124ca2b8ff84a001f146341bd1f7973333378e73916bf17522fee3fce6e7cc80c7396b89d73251ce5c54c30aea2a3df3e0fab013ba07d591fd1f9226c591689b5e
-
Filesize
4.6MB
MD5ea5a39578105d3a973624cf25b8f15fb
SHA126836f05844892e8ccfb0e3591fd71aca98f69c4
SHA256617f4b2eb3254c440236a2571fcc1cb89f577bb037b8968acffe8e3980c68776
SHA51204bf8ecd0940c06ee0ddc1ec66a9a242feef7f7aac52ced3657279b7b49821ad1513f32870bcb7ac2fe57e8dc509cc58be05ee6a40e4dc4fb9542ecbad85ee9c
-
Filesize
910KB
MD516f1779cc9069e2dbc752f1d8dedfcba
SHA1040a1badb77c21c8164c65e1b7996fe3806f0526
SHA256cbf6794e591bc8b5c3cf1fcbadbfe0b5162b5514c4d26f976c12dd37c795e63e
SHA512b89ed08d2edf8f4796a25c44a7abcc8a22379843117b82866d8ff0487e82c2a1ba591133480dfb6c4ae0ac3c6c337279d2554236cfcb9b50e188e6995c7f3238
-
Filesize
24.0MB
MD5d72f9ee12efb0dedeb7defe76c1cd092
SHA1f373c6f93827e9b459801524b887ebf0df90d002
SHA2564901aca2f58e902f58681aa1a9b8e7b89c7d27797324e58017332651d78bccf4
SHA512a38be5379cb1908f0b7a4a953b1e5703b8f810d9d31da7a7e031e96bbeaea116da76e10d3f7988adcc8a8e06af65967fbc5e6774b4e0e7f0a10fd3f8508c4ced
-
Filesize
2.7MB
MD5689a66e12bcd05d6daea8b95468e5788
SHA184c8863a245e683d896bd4b093759d2c639d6f1b
SHA2563af969e0b9f011b57f8805ab5eaed9a27b7c014e01f46b68768a44f283b284b8
SHA5120dc7524c47ffcbfa413d616a600809c8643a131140f20cbf5028cbed9dadf04e4485150ef037d931aea10527b028f821c94b18dc1c214d71b3fad5474481584c
-
Filesize
1.1MB
MD5e14f1a0a7dff4bd00417973eec0daeef
SHA1e9b93deb626a9514712cc8eea0d8eda42287e6e6
SHA2569990078a63c6382b6eae4df65a82efd940801871d47f1bfb5642afbd616b7921
SHA512a2b0583eac60629e62297f81b33f01a7d2cb04c9e11b7dbcbf08fa1911694160c6d6068f7b78f2e65baa136f32ec6bf623d7ec6c3302468d5f2f16f48977f86e
-
Filesize
805KB
MD5fa0b90e3a340f494f8e670a4b2a6d387
SHA1e2aa94fc7fe8bedeb61f5eef18860bc0b9f74868
SHA256b49afa7893a01d3fda5f84cedfe756c6a241fa0471e4ceb88923093014d9386f
SHA512cf97b43dad5415cd77c2635882b87cfb089f8c2f6008c9108729752b702e98dc730cace917b0ca8da8c22f8bcba447e6eed8821b864d070932343cbe6e2ae81a
-
Filesize
656KB
MD5cad55a2d8885111b361590f7ac85c3f0
SHA1ce7a959bb1cdaef4250b474a7c881f11dd0b5fe7
SHA2564ea677731e3e469571160032393d56ac3b1a5f7235626bf9d2cc829be100302c
SHA512f4e9a1be1a69bb3753b06d96f83913dd364d720cb3f89ef56d3b119c2372e053dd9ccf1fcf03ec2375edfb9fdea2ba9a5c62156b35b175170a992b7ec5f15f4f
-
Filesize
4.6MB
MD50a5a866e7418a6cd196abb03e6932d0d
SHA15a0ed7f3d7f05e5c54aa7997dcb05d9d909e0ac4
SHA256ecad2a34376df635ee77083f3fde24cfb9331dfe3938febcc5c2f65a19554915
SHA51202eb72340a2f8cef5319681c1178fec6666227cec8ec41843c4c99f0f2d193b3a49130558cb06da6b0237364500343c8d3a4ae40cef568cb063444501ab2fa2f
-
Filesize
4.6MB
MD5d7e5b34f4015cb1d679ee6f6fd59e142
SHA137d0378ca9ebbcb4ccb9a2921cd232357f032c44
SHA256845dc2d8017229b4d1f5d6ecd9278a47f4921dc56095064d045723188d12178a
SHA5127ed9ef8a10ebb18df08386388d84c5b6d86e03f8a6047ebdb2889d47543e85b4b7b56c38ba809ce9aa70a96b59c745e096cdb50b488b85d8b9178b04675f9dd1
-
Filesize
1.9MB
MD5a6c651eb2ab362cff19d02c64584acdc
SHA1cfe4d27018f9bc2030517ce0f0ea0e10685db33f
SHA256c35d2a6da42300c35bd4ef70c4e31d3e037e6f0f80a9f6619ae9ca1e7d48997c
SHA512904a634aa8e7210ead457fa9b8940589b8c8ef2f1e152c80dcbb666cb0c8d147c4b1cbdc7f027eafd803a77b4c5d44193be0c67cc76651885fece1ff126f4a2a
-
Filesize
2.1MB
MD59f82f5ed4341573cebc4cb492827f45f
SHA18d142b42479a6513d774c497d095247d79e8a3e8
SHA256bad8092edb680c575803765cd13273f1d7a1a132d347d2dfcf4ab9dc7ff50f7e
SHA5121c04cc6d7ee858b31124c4583aa839822e4a2d93bdd6488d9eca4599330b5aaf93c938175de6ccb6e9570f53a369592c6a46b21507b03a6a02e21c6c0481cc77
-
Filesize
1.8MB
MD57ee810fa97bc6c521c36cf0886527ce8
SHA1a39dc78bff534c05d6ca52c52fcc2efc8bc8506c
SHA2569a69fb27f77de9641fcca09422564afecdb42b09b14bf14d891b0dcbb855bea9
SHA51246f4679ca163b296f8b463c1331c1133610aea548e546264ea37717c42cc2dcf7213d439969d9011bfccffa6494b04e736cc533cf039ee585bda00e75157dcda
-
Filesize
1.6MB
MD5b5e4747c2b33992338aacfde0f879609
SHA1e55ccae0eab9f179aabd65aac4acdd6972c3ee47
SHA256304e96fe22411e165757b099d38fecc4f02733301acb74cbca510845e54caf8c
SHA51254780d67fe3b4493b9a2d6a68cadeca98eccd8782c33cff3e8db0a95b5eca2e1784bb61db5e0ff8310eddb3b25a9c3ab047275b93eb9945db1cf218cdf4b6b56
-
Filesize
581KB
MD5ca038ea0628c06a68ebf4cad28fd0f1c
SHA12efabc5e8f399b60c477ff008c84c6b75f92372e
SHA2565da5fe681f198b99b88f4edcf6fc6704feba09a60a0664801b561a4e3a056193
SHA512d2eb599fa4d01a04f2211aa7cbe258574095bb32c0107b3193ac4b376fd9c313dd9ea29a9fcf3ac9ed2ea38ecdbddfa925211e13d68c65c58e48b6e864d7e46d
-
Filesize
581KB
MD592a2e4fc40e2376dcba7f0dd0e2a6b32
SHA1beb96a159efc473538f2c15c3f119af315f79578
SHA2561280f5b6d82a141c685a4c33ae4a7590ea7133d3d574a21721cf88096264b700
SHA512f09dbd6b27872887915e116c085b9d8185adbc3898f57aca53f1c07ad20395bb6aa74312adfaae25ce7ad90614adea100955d7d881f4b0ab107f6629768469fd
-
Filesize
581KB
MD5c36c0c768004ddde3c33a0b50e3b87b0
SHA13bf47acc59d34542332926ab6c24ede50e625db6
SHA256e20ecce069e915537585a5bb5dc373758c07388d409015d9aec40ae2fd9d0a7f
SHA51263c5ce597be2f30fedfa522161c7bbf1385c8e66beb866f9ecf895c80410e73169624939900cb13752deeef4a508176ac8b0c5a55bc736a3d0cf4f74f36efb25
-
Filesize
601KB
MD546d27aff318a1e21bc9067d682255b8f
SHA1dcabb5f0115bdd1eebd9ae286b25a3ac02c68aea
SHA256f03381d2ad0ab6337ad7467b5793f5e604490e147c9d68966b4d027f8e6b86a0
SHA512d125310ba98b7afa96f62de43511d683da61e4e5c3c575c898810a667630815c7d09d0ce55b77c7e167ed7b59a02799fb8c0eaf3420fa49524c47413d6066f95
-
Filesize
581KB
MD5de047d16f35f7180174c3e66efecab1c
SHA1f53a0e60585607f836f83c6fa1794afa1c4feba4
SHA2562fe671412ab405e64d06630b1ec46c491047548ada225356c588c319692a89f4
SHA5129112730aca2ad5cbfa11d9768c5485e80d35b7c47ea0110432213a9273a6dee1e786d146e0909276363d60985ebf0b013fb017eaa01d3dcd308ec1a26bc23ba6
-
Filesize
581KB
MD520d23f224405a0a1a77fd8c0ddd9da22
SHA198ae5749ace8bc639953d7de781211dc40ebc556
SHA2566e9af0f707ba6fa70f081ac4d4b6f96685acdd0211d2ff6788d29980c4b1ca58
SHA512eb5b50ce287937c5a7aa4807b19285fc0eb462612f7498d1ce81ec56fdae7d78c2c191572b1288d64dfc4694d7263eabe7eba7af6a6cba17d0f849277e98743a
-
Filesize
581KB
MD5266d83b8a501503a0b0d3f3a27b0bd64
SHA171b9a1b87f19e74be43ccd991df9b1f01fdf81b8
SHA256fc26ae4536300b1797678d1759a0f5440f500d218898ff1fd836b54f44859797
SHA512a84cdc13c9f597f2fb0dc680b9cd718b8d8bca7f8e7512200bf3b0fd171285af313545a899757b41a12c6c24d8be200b1b3e527e06f4047c7f6e0d77f88e49d9
-
Filesize
841KB
MD5e80aa8a1fd6f6de6a617da258b6ffa7f
SHA1798a78c69411f1f5fb0d9fc5b658bee6acf0760e
SHA256e64a04de38b0a223f0b8a4a821d88a82b46da7597a2881ae19ab84394bc28d90
SHA512b5a52361d7b54717953d1a903918f2ea74beeddfb7a00ef0d41a68910707cd720434247ffaaa51b09d6d01099cec0b802c43f5fda36c633821e3c393f80928a4
-
Filesize
581KB
MD58fe621887d6b2c385598191b76a9b359
SHA1b19f2c8b5034f8b2bcc8be6127cfae595b185494
SHA2564229699e16ca1cfdf071784e4d73f1af4014a2a7bba7d44b4a2f921d4607d16a
SHA5121ba048896e779e7d0dd86bde2ccfe2f58db85b7cc3735eb4d1669928bbee1d8bb20cdcf04952ec732bba5846af2577b76b0377899b9f85f3973525874591806f
-
Filesize
581KB
MD5be4832c196fcd37ce105c77b03a547fd
SHA10e7e7f98655f5cc593d224ed5135eb1f3551ab82
SHA256f5e18042fb18bc3dcf8f0a6c37077666144b49e78b7f0a076514c52bd6979d86
SHA51203774abea36a047e9e5a66c2043e0dc163b91d8e55c8a0ec657cf7e87399fb035a862e715a803884ee59d0a4eba36f18cc660e21f281cedcd6ee37c2d54f94e4
-
Filesize
717KB
MD5b6fc3f5f2ea346fea330b883102f48b4
SHA1da580b2bfc91a30e9dab2dbe5de123bc8f376368
SHA2569b5295eb5bdfc09e6541fb6d5e10cd654180ab0387b2f20a564d16c086af9cca
SHA512c2cd79196d7d7b392d1b5aaa363c35e3b5d0ea388a54176639f9bfbc2254d349f607ca0073338960a3c75091c2029b7a9e861a480e18acc28f6cd0a8ee35833f
-
Filesize
581KB
MD5c89573ca75d60f4e5ee8dd848bc5dd0d
SHA1fc144dc2dd1ce2b58ee1aeca06028cc2fbad4780
SHA256653bb1bf5293af7e98546fb787d428f6b4d701a2e6c80014bdacac2d9bdf4b23
SHA512cfb71884fec683bd72d5efd8f5a2c139bdaaa2b60b2b570dd2e07382d500cf1c0f37a034d50c3a957e0120b0b4a6fe628bc1a186178af3a93b3096cf62d6a13d
-
Filesize
581KB
MD5aef3bff3bff494a01dd1298b298eaf1b
SHA1dcae3c80e22f3abd037a035d37d54f830d144fd1
SHA25692cb6508cf875f97ac99f8e2c9540f428d269e4d7ceeeb1df05464eb1c40e37e
SHA512525f01d7b63d8e2223cc67030cd6d2569fd4c0a55f36448c504fc10d9f42f46f80009e6d84eb97e09a7a916505ed935b3c3694611d30a519562c30e50b24ad27
-
Filesize
717KB
MD5e30929b164fe04a1deba14b290675970
SHA1d8e217f38748e38ba1037fa544ff6df50790b35b
SHA256f5de4a6f35e0c42094d7757dcf95cbe8805c2fa267a3ad2919e64419a053d4df
SHA512b7f6b2aaf3c0b873d7ba013590a85efd64d21d9d62ca9ba64ab9cae7e131d9c702bb3b8d9fe6c955145c63e260aea74c0382185dac717cc5e93fde33db93b81f
-
Filesize
841KB
MD5704248abe24b99bc9e846cca208a8953
SHA1a6288812be90e95b067b63903ff6002406591de2
SHA256ad0bf0a21f226691b7f4681cac1baea9da1c6ad2884badf69a4e6107ed962d62
SHA512d8374a31a7bb69c0fc8f8e77e436e4cc7f3b12414279b80df5033182caa56f83b860b84c427108a2eef1f2b6deb0ada2423285a905c9e7b110e272abc0a9ec97
-
Filesize
1020KB
MD53d330e6eb7db503753bacc30bc19801d
SHA15940f8656bafd11926c6f7f33950391608a78d61
SHA2565534a5493edecfa5a6a7ae8e3724bc840e73612f306f330c4b893d70a792f011
SHA5126113444b65df94579503f8b7709d58951fd934b80caa36bb8387e6554ffb7938e083aa5ae72bf10d885559e6f08c950dcb8a8299d6d9ec23f3ac4c53d2d1993d
-
Filesize
581KB
MD5a6a99e5dee5e02fe35e291d953bd4dc4
SHA14c1d1423c576fdb0b1c1c8e6bbc10e33bca2e8c5
SHA25611d070d6571d4c9e46fe638bd4813408ec7484b824275326f5bc1dd2b34b47e2
SHA512f761c0f53ebc26debd6a82aba36970aaaad39cda91a98a11bf4ea69445215d6bc1b343bbeb961c27a4bc68160f891c790bf5092bb1eba8504beb2b4470fda23e
-
Filesize
581KB
MD5f8ad63cc442546c43eb08a0c566c117d
SHA162f07a4c4628e409af26bb762fd3fb1512790a27
SHA256f3439d95e9dc800a67ed3a0f0334d97993121330df3c5655cb8560856d7b6d3b
SHA512da4b6a286aa696e19afb7578f4a085e43ccd7c91da8b695a633f558c7b765e76c63470929c3270f594cff0c04eeff77cc994f52efc15edc0c3f707dae79794db
-
Filesize
581KB
MD537ad416a2c86f9b023041e9dd99884a2
SHA19b72b30e6df894e4941bd34a238e124ff3536765
SHA256bb08a4222811450cce784f16417229e19b5e8aa7d955fa4608dc3f9e81f62475
SHA512cbebc86edec250bc5e4a71c5f7200a0bad2cde7b5ca73e74b93865984698af02bb0c7ade7c73b3dd4acfb777df4210c06c57a77b03d033442a008b4ae411c33d
-
Filesize
581KB
MD52afabceb74bef1eb8cb8d4699f4526a5
SHA16ac0cc149513985c52bd5302104464c01160b6c6
SHA2560827a195373ea201b62a57978849d555a8d7da4e9288a6965a54560095b1cae7
SHA512cb3fdd6092fc13dbd78b21d429dd59ed97aa084c44dea3cb1ad0d014725caff63e7fc68b396556b1d038fbe427451f49b8eb41e7f44197346941b1fd18638cde
-
Filesize
581KB
MD574529167293bf45df26a2b36baa1088d
SHA1e890c6329cbb21942945feaeda0706be6d2c8778
SHA25617c1509134967d47ff34393ea5f722fc86dba6c2bab7487282e3ddc44d3d6964
SHA5126a206245c15b0e9df966e35636fd84794adaece1388b0bf6a3bf638dcf9fd938e1cbed391eb3cd402137ff5813465f7ec17769aded72b111f687a44aad80b3e0
-
Filesize
581KB
MD5166761a686e819cde6042cf710ee8b61
SHA18a5e6802712d5b802e459bb561b95a2fc73db2d0
SHA2566f0846209a9e3d2d469b21d617b0bd41e71d53bf2d44af6853803b4ea92db65e
SHA512607e901c36134ef1885dab93130b472ea5b44bb5f579eab7f86414885fcb87ebd4c5981b5414d23c1a469d1f3d08e87c2172c95e4e682b09a16852117ce34c8f
-
Filesize
581KB
MD56e2f0ac951e0c342b92ef992cc99b514
SHA1c0fadbf317602946738c79caa91921bee9a4ed33
SHA256b5782bb7c417e904cf79a7feb9f5e4b5781350b14d2f15cf28cc86caa09c918c
SHA51209ad7b8cf553e710e3755763f9e171461251ab8712249f93bb43544bb380c690f5cecd7d29027523cb303e62b1c49a32097a02e751af6d25c5169a0adf3821b9
-
Filesize
581KB
MD5116dd9fa5ed0caa05c1fab7f8767fd04
SHA14e977df22d67207b2ea4e832cc80556c270957cf
SHA256064139f4f2bb2be3100721d540ffbc1eb24203173a98ac8ecebd62395b67bdeb
SHA51255fcb899e1636cbdc91f657022cc119f6aeecf075cd1094de39080284f7e973f7a1b65c98f3ca325b762257212d68f29a3c6cda1f231abdde9e4eb0744558828
-
Filesize
581KB
MD53d25927e7bbad0d64fb1864ad1a96c38
SHA1f3939844318cbc12817dd51db618d3864aafd12c
SHA2563a93fa693715fca257c307fa185b9b14b3723a424ac37d5d3edc440326bc6694
SHA5129f6110c418086c321b49dc0b413c4a1afbe5bf1f3054dab36cae97f1b552ae67b6d99b2db9d089c17e44cb428131330d8d62fed00c58aeb6fcb1a4fbbd08112b
-
Filesize
581KB
MD547b069818dcb29ce8b8235773a70eea4
SHA12ece40684e5dc85b9d994d66140c1c7c1afd00a3
SHA256af1e2e88a5c7ca240f7b16b1df8ceeb740743040d368bd2fa2a6b6ae1c8ee54a
SHA512123f32967d76bbf205279171fc787a833d2ee610f2a3a65aaf789ee847bd4b66b26f68e4810577d7424ad5c12ddbbd1d1f274b8c4c232492224d88ce8339e9da
-
Filesize
581KB
MD5356c6474438644435ba4e0c43e20fe43
SHA1d0062c26963408705da3a9e975d9b9ee2889b944
SHA256401810ee41813d3619f08e84e222f2bb37df6dc46cbc800372dd5296736141f4
SHA5127193baa87ddc571b6b4c77a88ac7411110aa67cb56b952c615e0f45b4c9d9b50eacc17bfb99dfe699b29ad0dffa8fe4844701ba4f24bc3ac3655deaf1cf24744
-
Filesize
581KB
MD5fe4523fcc540044bab37c6c54ed9c105
SHA179baf4f6cd7c656d11c881c6c5be5fd7c981d3ee
SHA256cef402c28e7ff7eb33d6930e6b90c14d8fd981434b9caab860ed999e6beeb1e4
SHA512602892547d269e85448aafe0d265bae2548cd01df58bc4ae1279bf07795a48620994b9e1db83227032521005b4638ef25198702cdbc0617b8b5df7c667e6535e
-
Filesize
581KB
MD5b7d2748e81f96bc0d0b64efc0d4c77b4
SHA1d5e260edf3f80b55b90a91bc7c0ac688c791064e
SHA25663bd8fa2470f02277c7dfd2cf87a9fe9ef184c75dcc408fbbdc66aaba40a7fd3
SHA5123c58b5cbd34d38655c4dfbb0c4c252d3ecfd8e165861906a6454baa82a67e6a3f1677d59a64a24778727eb6b400dc53f9db55121c9341dfb8b17c4ddb91ed1c7
-
Filesize
581KB
MD586a27ebbb96133314730d65203d25581
SHA1743505fbb9ccd2614e2b8b7d53fd6cb8d9877d2c
SHA2565e0c709928cccf2cfa67b89d15f8a876ecd22521e323751bf5bd2ceead31ff77
SHA5125211f054c1b8625aed24b37ad15570b14b71e8624e3fda9de2399bda1be3e2e2f16899b72861b6bd6f41db5f5135b3e637f985d9fa445baa6deb44ad7ddef5af
-
Filesize
581KB
MD54f5d7cbcc4b28a4dee00c5e20ccb1e72
SHA165b36039db1ce4ce7bf0fca535381ec445cae72b
SHA25608a8c1f21ab1aa21070307eaec7947be8da73b44226530e522f5114a11d56182
SHA51267d65ffd5fb12d38d9de9cd24104f2d6a7e3720583e13d17ab981dceb1ed37bf1637f7f927a3aa61eaebfac4497e8feb299e33a24e01061c4a5dcb183424c2ad
-
Filesize
581KB
MD5ff3874d5085419f633198ae0b427fa38
SHA1daee0fe6e0fd37c3d4f70d4ae229918aff3b46d8
SHA25651d272642755b95f1aa829dce638042476e007a7d8823a4b4c79ec85aa8486fe
SHA512b533a06b06c3f3b0061c68e8e4df681c6cae96f388b98d378a1797830630b2fceeaa27b7d583b17652a0237ed682b04b447b12f14cb4f9d6a5a7d3aa6280c586
-
Filesize
581KB
MD5a5aeb252ac41b94c9dccf108e6906f9d
SHA1070cf352c9b768aebc733b412da18541d7c98d05
SHA256836c4620aa31e5caefb2a29f24b9a596a0f48dc3d9531a20599305d0e2e13b04
SHA512f732acb7f119e86b3c78ffd72d3ae10c38e42f2f838d92f8a9f00cdb7bd5900d2b4470f1a79b2850c78d02e4103d745675a6ffda9835025676e18c3ad0f9ad24
-
Filesize
581KB
MD598c37b0195968635a1057e1b17fe6f96
SHA1cee2da254a35e53e87256b25743374828728551a
SHA25622f36c0aee3a55fe77ceb9909f7f142a3ee7ef849065da7d6a59c2e7ba530097
SHA5121777c6196d980c80dfa7191a6db624fa3d30709dba597aa25819d8146b81b52c80075df4f84a7173a28499ca883fb6311793361d85f7002ef8ccde1285cf8e00
-
Filesize
581KB
MD5ebf9120e9668ae03a7e1f15b2dbbcb02
SHA164c25fbdef2be26cb5fad562693aca3958b637f0
SHA25614239f0922bcae5760a89d169f1b7cd611a5d18f2f1c1f7033c6d2f9e4c51581
SHA51224ffcc1e5caacb6647587aa76bb86d6eeaa0f8aa69867b2eef984a2a4c4f7156b3d7c54635903ca58c0fc39688c47f3d179228641667d4515221c764992e3583
-
Filesize
581KB
MD5fc6dc11a01f0dd4a823ce71bb9f6c9e5
SHA1846fa58217189248f6298bb48910c92839e0b88b
SHA256c6ff6fc8b74e75e8d78f37988842cd5d99a9b7075d93583db1512ffc68bac69b
SHA512f7de47efb8a0287e186be3d53dc6bad101785b454081c401e3bd0387c5d3d498d066c2879fafd029bb05d982c1b51bb345c13a58a33bd4f98a7f4043b5cab5fe
-
Filesize
701KB
MD535791ab04b06f448f1a60270b5d40b5d
SHA1bc507cb24cb18089cb37a044e4507c4d4a6f3991
SHA256c3106464e8e00243e00360f061af5caf8b6673d94a50ee3a1a40dfde64c96227
SHA5120d5d28ad27c18271b70c39780f25cd7a59b2ba427f1388f96e98ee06f49792734c8f84182be96f215f08c4c619ce955eb57ef64b5a55906c582a4873c82b1907
-
Filesize
659KB
MD519ac84d9b78bc8c996e33e236c165e6c
SHA172b65dfc50d692404679386efad4e91fbd572db8
SHA256a46b810a2c634b71009aeaee1aede1aad1b51d26c9e2b382e9a6237a79d964e4
SHA512b89cc706b407e0f4f91a70ec3025350e221aee49a5d4cbd9a124a113b0667952efe17cc99db6bd65712f8b397d8a10f37dabb5efdc2a2e3873315600d8137b04
-
Filesize
1.2MB
MD5126f293a5a66702a018c7e9f022dc513
SHA14b3449b1ffd4a638e08927cae7c809598a888b97
SHA256798ef62d1ed54ebd2907f3a472029e9ccb7ff2b3f22085e90c6b539d17d77157
SHA512a177dda450989716ed96834626c77661f4c12262d17bf748099c823179fd7e99050cb8430543010deb58b7a543bfcd4be39e3567b546944912ecb7e11d2efe29
-
Filesize
661KB
MD59b88b32ae89bd9a70705931c0db175c2
SHA1311585eb921b7cce2d0e56686d1a0df2735e2243
SHA256a0ab0f2fe7c16929baeef914ee28b1e5420deb30a3470a4c77662a35e2752cb6
SHA512334d538d725283cb192056feb8f9cbbbf12901e1a107ee0591b1059a3a4c2853e114877f1c1ed3406365677fe553f45eff97db3e5372f20937fac0e57a7e79b5
-
Filesize
1.3MB
MD5145ef71c9486df296eb9daef72258c37
SHA17b86498bada632772696e675c8b79c06c94278b3
SHA256d6c73a9bab1f9a3b942a13efe4a25ec9ecd258e9092471019043548e87f6522b
SHA512fa860be065232516ab7e285d1d9ab988f5265dd3a01a0dcc0a6065261607b60a075fd511242751b173d189eb3af01f917d4464ebf6fe989458a7211221f5edfc
-
Filesize
3.4MB
MD57f7ccaa16fb15eb1c7399d422f8363e8
SHA1bd44d0ab543bf814d93b719c24e90d8dd7111234
SHA2562584e1521065e45ec3c17767c065429038fc6291c091097ea8b22c8a502c41dd
SHA51283e334b80de08903cfa9891a3fa349c1ece7e19f8e62b74a017512fa9a7989a0fd31929bf1fc13847bee04f2da3dacf6bc3f5ee58f0e4b9d495f4b9af12ed2b7