Analysis
-
max time kernel
138s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
30/04/2024, 22:02
Static task
static1
Behavioral task
behavioral1
Sample
0a8378f316c65f27d3f0d876cfdf8cdd_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a8378f316c65f27d3f0d876cfdf8cdd_JaffaCakes118.html
Resource
win10v2004-20240419-en
General
-
Target
0a8378f316c65f27d3f0d876cfdf8cdd_JaffaCakes118.html
-
Size
159KB
-
MD5
0a8378f316c65f27d3f0d876cfdf8cdd
-
SHA1
48964fd682898eb7e5f1d2dfc57e0d6850d2a632
-
SHA256
3c58e459bad7baffb46a5d9c28a934e61b31f9e4379c8223c8ce00bb2deb4468
-
SHA512
060024cb8a4e5e17966381a77300c1659a579ca9ce6733370304e5aad75889359cdc5be7d74c7597ddb8e66ae6216538f1a0c29b435e3c277d38a81d6873e3e0
-
SSDEEP
3072:SWoDDa6iYa3JyfkMY+BES09JXAnyrZalI+YQ:SWwla3ssMYod+X3oI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{517227D1-073D-11EF-8698-5E73522EB9B5} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 90c9dd654a9bda01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b000000000200000000001066000000010000200000006bc093e9c5c1864051b4f9e9891453d254c544a0c183f4b9ab207e8164683a6e000000000e8000000002000020000000ae518655278533c01227ad8513bea46b37e6cdc3c7d754eaad34c9a049671d06900000000bfdc2ec5e28cf0c8f2e63abebbf1f02c9eb47fde04889036c1fdc6d282f93ef77ee8aaa73974dbfa6038965050f15126f7549099a1bade9230235e570cc9d0c3c990018fcd3cf8d8150b83396052c29b4e1bdf5c3b2a1a6ec16211f6083620c68f53e84b757671e449b0cf31a82e67b350dfcc2f46c9cc67c4ebba9ab59189127f7d2f5f45386d9a9859ef0ddb0166c40000000fc59c2afa8764aca81d555fed76720e4c4faa229a903f6b257c4c1bc3d59ba92b7d0569c4b4cf18698315c48037d619dc379b22adf3b4551729e6b929cab0368 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b000000000200000000001066000000010000200000004a2d3f531c887d88eaf2969842da64bb6d0d178896e90d89c3d1b30394abc496000000000e80000000020000200000002580794d4c1b3db843d72c5b37d49d539ffff542214eac07d06664b410dcc21620000000a731819ff047aed6ec532a8aa72fd1e0b203127e1e6b0652b62d99b04923d48a400000003a37fbadac6f0b84eabf86b33be0bb7263479f2615bdcfeef3c5088ae8aa706cfbf4dab4c5679f40240f5f8419a4bd114f486c1e81bbf43f60d1533c47859062 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420676410" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2808 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2808 iexplore.exe 2808 iexplore.exe 2076 IEXPLORE.EXE 2076 IEXPLORE.EXE 2076 IEXPLORE.EXE 2076 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2808 wrote to memory of 2076 2808 iexplore.exe 28 PID 2808 wrote to memory of 2076 2808 iexplore.exe 28 PID 2808 wrote to memory of 2076 2808 iexplore.exe 28 PID 2808 wrote to memory of 2076 2808 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0a8378f316c65f27d3f0d876cfdf8cdd_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2808 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2808 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2076
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50e82838e9748d7164e7084b66393a467
SHA1cd775f93f56caed02df8f23e3d026296df8e327b
SHA2568fefb3273ac02584c7acf7c213ccbe3f05b165437fe625b618f8d70079634896
SHA51247d3f3f3f3518b0f9f32f38b7aacb29f9f663a7c9dd752c6c60b6e71ffa36ea5b60826f52fa4f3bc0d8fc67ae1eb07a4daa711d0d50b23f017cda205bded2b89
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f0f6031df966edb122fc209bf5b0bcff
SHA18b383a43078d6bd70002f7e6eabb1262499b0e90
SHA256d0871d47d6fa3b7e841c5298d81f3e8c77203e48574765b47f9169e38154ce01
SHA512855ae30bf36401acff69f420693f9ea35fc425bab717e6ef3115c94ca4799c285fe8043ab293331529bd0a0044be38b78ac89249019f20befa5d02d032cea417
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD544e5667af794951af206740da7fff37b
SHA1426c6f6c5c7f8edc02c8fe87f9c8b06fa79761ff
SHA256233f489a0e5ac2f30963e88c298ec586cf5a2377e44b6693e0c7a8d3ef51c7ab
SHA5128895a09fb6888cd4977cb17f5487fe5393a2fb5bbb66212a124ae1e67dd1e90882106306f1ad7cb82328b56ff20e0fe9ab5319d6adf909723a3a27d799323da6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5916548379c9de8d5d907b66c93fc3171
SHA1a80c0f3ee8593be7d80079ff840e886970f31556
SHA2565552741cee1cf5d10c84c75199cece3d059188571ef212993f8ca2b898ee0b62
SHA512d7ccf7069c2656d55b2c488c305708ff44da75e8f7c7361ff136adc7c9be268244aa04fa1162a5db60fe3a906cd5faef980f34bb40935a2d0118f2da9b8d2597
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5703c808268304d34dabcd47570743fd9
SHA1a8990e63a346c90db1b9b4eaff5b2d120492036b
SHA256f92ec2c30ce84bf154b50ca65f3bfea57a0a1f0f875330949fcb23fa41a4c73e
SHA51286c3dc54293e8fd61dcfa2de3328996177ba7d6633fb928d82f9a6180fcb220c8a5ce3897fe9985a327af2fb3256fa122ba9de9b17ae0bb3cff7fd67b0cde342
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a2982b69e8f2819f2bf18b765c2d2a73
SHA184b81be68afcd93deef2e1929a1adba86b87af6d
SHA256a1d1b7894fd11f6e0009c8fe6ea9991d928717989c0303b26f9a858b87d82b19
SHA51208f4453120b5a41b265ac9d0aa3ebff2ea241d7a482ec72785c75fee3b3c5d07d4c944e5c8b0b255e8be73453a63e06b7ce5cb561ced9341f39332f9827e2d36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5342640b163b4c3837bcb012ae063133c
SHA1a2d4e1dcf9b4b81faca629493bf0d96a075038cc
SHA256db39f9014ee000615e1f0bb101133dfe8d2a1d651147e9b710a565da6593829e
SHA512d67335b61b777d981d411a8d2b2cbfbd6624015318a7867ad226e1412f9860b32268199a0db5b2875bfcfefe9d896f3d112933e187989c3b7c4a2bb6bdf0005d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56121cb5b4f1019cffbf68fe44b053b2c
SHA17e9c5ede4d070241e9e94471888a6a52bce45ef5
SHA256f21949838ac9b43a2b82bd41230fee02ab7284827db9054ecd39a257e1c09466
SHA512cdaa9d36cfbaffad457e6c7235527691fb3fba835e78c40391136ba57f057c0467f95ffe265565704340835623774efd229cc3a09e56441d44750158be19a749
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f591a5bf1135e6ca03cb290922aca936
SHA1dcee5f644f15d6f5f9ccf185ef1534751a95f34e
SHA2564c31cdcb4ec65697adaacdfc11d252ab9159e86bab3e6379ecd3d9db291a79ff
SHA51292b0d9569c09426d3698c88323c6c97a6edfb9b7382558687d6d43221035f56be1b68cd4da4624b84c76fff246f18d326a46c8ae790cf2eefeb8f72dc25abdc0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD558fd94bbbc6d169bd6330a175af253f0
SHA1fb7397904234d621b7562814db97dd5b2ad79d0e
SHA25660a24abf80b6d136fe290622537bb450c543041b1e42f7a727472b2cab9ca6cd
SHA512f10aec9cc7e261a59094c507a141de1801577dc9983ba8d6f23348894731b30519241f3f03afa43f9c5a50a7139269f8900b43b46b5f4e496cbc6d9a35634d78
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57687d0bd1725fe360a5ceb8691436a5f
SHA1dc1d24d19ee8a2a369f39ebcf027c41cdb06940a
SHA256d2ecbcd2f489d258fbc2bce9bf1e3187bee7e4687856c7ea04e7c4643e7888c3
SHA5122551e0b64301c2e7b063232fa4098e5658b3f7f5a1b3e648a1ba25b0c91b6ab52da4fd8184fc2fb8ac08decc60d16af02fad462f9767848e9f26b3c8e70f5c4d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59bb1a4ccdb84e387354f9bda8cba4e78
SHA18b22a3d0f93e32613b6a2becb293c4bec4e27cf8
SHA2561ae11f78bb1d20bae0b425540a9fa44426fb8a3cbd016feb2d992a97eb5bd199
SHA512e9c33635a27e0b54a06579dac58a44c3627dcdbe3b77721bf8a7ddfbf3bef955d4ee4afe3a9dee3bcc3042ad9ae117e859c6309f7f3b5a36afed1e572e56bda4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ffcbd625f2dcc63784104305f1ac5fb
SHA1870d909657a1d1ba240ad4451dc6c4ce25244974
SHA25644ac884660175b00fc1a5940f31e0a93ebb12dea1bc9c84564bdedf2d21241a3
SHA512f7304afe196048907b5ba0f2b465a82236a9c4f7cea4e53e167e8950282a3aff39c9f97c4ebdb7e47e0b6ecfad8e6042e5d6d84ee643e20847e87f82f5d227a5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ac911224b427b400963676e1319a1049
SHA1a14a95b66b4128eefd55e20c3a8b04272d863fd5
SHA2566804a8a0ae26f9d02db4b9ee98bb2281cff10102494427b9f114db8ab9cb294e
SHA512547e50e001aa4759b6ed44972206410fd435efcd115d5a77a8c54f37653878567909e61e7fdb1d1eba5025aed050268675b239c4bcddacb1c61fb3640e73f1fc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD580e078cb4bc6937a813e3b2560bdf8e7
SHA180de76d8bcc12ee08f843f74ee1bda07bb069f8a
SHA2568f89c24721eec2d3a0be6a6874a4932b6bbcc0038750e935587ad81dfe398813
SHA5123a492ebd5d4b0b3cf33031670d4556a0c2227ca13d5b88b324afafd320ee6ee9d6db3eb10678879baac7b000301f6d9eb31cf1dee48d51479867d7f3a1afaf4c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55cc9c64f1eb0431f18fd6e8398cfdf08
SHA1fc7f6398cc4a7c178feb4c5809d4e05777c36fac
SHA25687c2faa52432fc3513d431c7cd00eae42652931d2a50968234054353ff0d028e
SHA512eb04e1403f7d31646c2e9ce9d77e2a67b80952e48ad31a3ff97363a7085eea92dcca8cbd863bf5d2044380e7a9d147c259f5966135cae3f2eb22345c64d96577
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eedee75273e83e7dea4b5d053ce9ee2a
SHA1861eeb6e46486222b80c24704b715e4b1e917bd9
SHA256a36bb0ab311a51df5d955b28f61f2445ae6305aa3895a92a6784ed0a69625483
SHA512dbd706c777d19575120383587e5b8eda304f130f3d5aa0bdba19f66dac3f9c77f738e2091c0f40c83e5a8cba3f6c6a2910b83002e9e456ba197f5e56b5a24742
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a