Analysis
-
max time kernel
134s -
max time network
139s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
02/05/2024, 13:33
Static task
static1
Behavioral task
behavioral1
Sample
0ea40180d5e6924a427af4ccf903400a_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0ea40180d5e6924a427af4ccf903400a_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
0ea40180d5e6924a427af4ccf903400a_JaffaCakes118.html
-
Size
141KB
-
MD5
0ea40180d5e6924a427af4ccf903400a
-
SHA1
f31a53e0f8ac3475bdf67beaa87f454787dc78c5
-
SHA256
c17a06cc5acb13c8c57d722e9bc73d2ed6ad12b1bf00d6e60307a113197e6cd8
-
SHA512
73fc41ebd7ad7e3be812eda873edb031b960736b2219e7531925b3006caea6a25dd55078f1ee195f6c0a48302affa405f220f84fe0304026a27c74f776f84638
-
SSDEEP
3072:SBG5Oo2vx7dyfkMY+BES09JXAnyrZalI+YQ:SBGl2vx7osMYod+X3oI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{8E7D4EB1-0888-11EF-8859-DE62917EBCA6} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420818676" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2784 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2784 iexplore.exe 2784 iexplore.exe 2896 IEXPLORE.EXE 2896 IEXPLORE.EXE 2896 IEXPLORE.EXE 2896 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2784 wrote to memory of 2896 2784 iexplore.exe 28 PID 2784 wrote to memory of 2896 2784 iexplore.exe 28 PID 2784 wrote to memory of 2896 2784 iexplore.exe 28 PID 2784 wrote to memory of 2896 2784 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\0ea40180d5e6924a427af4ccf903400a_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2784 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2784 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2896
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58afb7bb6d6c1229a4b2bb72c6688228b
SHA1240a3e485193ee82d8e0b7f873fad641c32e1a8b
SHA256ffb7636a44ad93cb649a7f7f75ae6413c4dce73cceb8053e12f2374653a44861
SHA5124e91c9eb54c260dd3dadd4cf9276bc8c468014745e6f80ee2892cf9fcb1f4f43186b2cca24b0b3fac42263cb6700cec87c6fee96f0775ba96a6ab8207b5bc630
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5376e9b4dc115cfd93f39fe2ec3896b59
SHA128a1bd5a983d06c53706567bae4207455a438d49
SHA2564afecc04ad2567b728e0d9a31d614bd7ff020e8760397f3c2b6eede588ab8002
SHA5123ebdfae25fdd4cef725383953032ec8387f45c999d7c683df764af890cb52161140b0a333d6c0822e7ad5b82f410c1421b3599cb025dcc5050e964ccdc3b807d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b17e56e37619e77529a469a3c04e621f
SHA1d68b1c199374b405fd8a1a95421ab5974da5e9fd
SHA256c7c3df4e63e61bb8d1ede991b511e636081405f7bfc27e7e4d48bbfb9c7c361c
SHA5121efc92454cc1d543fc7a5603af70b301cc4a2773054141f8da5b3ef2b0656ee887767e97ee77d0dff7a7f245cc855eb621358d2c000d0361b6ce4c5826968a4b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD520b84c83ea447b791c1de43484b6fbb1
SHA15267b76ca6be42db504b64b14efe8a9e2c570bf6
SHA2564d46fca1997822453d8496a8f54c74f8e11292012cd82c8478166c90a30eaee0
SHA5128cc0efcef6ef14318031694778b2104d0113ac228ddc4ecd186561613f292f79d6c25e8e7dc962e60d2dfc1130212b1c3d28f99e739e9b47ad2f71f2e821af19
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51c53e67f2c3e85d99a5293c8e2617c91
SHA1e72a7e09f693035fa6bbf69b9ce431c0d8efa424
SHA256afb07c52d6331df3a4dc31cc0fd34314cff8f5920fb86827dc86a6cfc16fdc94
SHA512855aa25330fa084ae602d4e56ee186ce955e9ddd310f145f72ccfed11da22ebe147ce442a96df93660f7de5e62b2aafb01e195309b4b46ba2ad532c2c13534e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c43189909409e6ac17dfebef2914ea8b
SHA16374bf1ffa94b422c281c8ca4439d44bcca52a77
SHA256d1a123fb415f12c832cca202851d8344b5286c442c7f0bdb89b89d44e6c60549
SHA5129d9243e3eff591f5df7084c2412bc837dcc134adabc45640552a412fe3050a6464ed9426248b05fdc05c0b9fdece030265fe0f045e8cd5df83f3340417a4b0b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59eec65d5492fe98597b4c27c4503bbc4
SHA1e71ea2bf0687a979f7c214d405b5f9802a44d484
SHA256ba66592802f8c162b25ddae7fec06380c47c50d18ff176250ba1a947c08bf935
SHA512c34674e6141ddfc57353348e4697fa946893b94b62713b5d22c029597ed3788bea1722216691115f298c481c211b9e3d074733ec2982ea6f38181d6a3cd960d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD540362100719564aa6355fa0728432322
SHA12e63f1d796a95e76d89a00099f69971cd5676925
SHA2568d43d58acdbdcd354f5facb93690f58f9fe8a6fb9a46560e2007032ceb56e231
SHA51263596471889d71b694b08bf408c374b70253c1969ab0ecbcd100132700fdbbd27a21beed8f61e42b50e60f3eecd28e7c5033f0589fb0643321cb3aac20f68d71
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD557bd18d3e80f11ff7e0bce8db23e2abd
SHA1fba891d159f657590f18acf40247f609aa286ccd
SHA2564bffa40425f461c589aac5e97bb7fc2ed76514b2feb63970098a7bae95db23f6
SHA512e35a15d6238a3abe9977076a2b5f841f425ac2751269ae77cfa2968fb8dbd9ca94fe29894034c5998a13083986ab319fb631aa2ebe4d095b8d93d5c6d912fd62
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD563a52cba45db9fc953a9eb0b78e35afa
SHA1259a3ad7ccb01a32b88c5212ab2f8f78715e2c69
SHA25625fdd321bb5e1239fc453f50388a4e34a27d86db5078f829ff16b4404317ac27
SHA5122d88a245a604a4e0b13607e0568f6ad8c5c1c48c73551b242d3245874ef5cbd6fba0c9227c1b954c11de850d73b895e98608b3fef472594257893f96ca9815a4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD508b668c1ca103006410bd450bd781267
SHA11291aa62b74473eb73bc00d823f776f2f60ddaaf
SHA2560d21f1c47f14c733d525d45e5134035b3d67ca161388d7c02ff58693e6d14d21
SHA512f65f0f0c134846b8fb73667d455536e77082efd23bac84e6c55d9b86dd94de58eada3d79f5e395a350fc08a4732d7273956c7b535d391101bc00b8f0ef973a51
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD535161e5d1e25b5795747b18fe9b42810
SHA1565ce155f98efcb9f86f73b566250fe85a68a172
SHA2561d737b333d5202bfdbeae35ec2546a344e8bbbabd74af04e88032cf3cc022f9f
SHA51254351f233a6566132e8b7d8dd69a46f8e77e7545536726dbda847e6e3d9a8f4c8e25250f0ffad6d9a33c06c5b42cfde5ad62b7527519f88d4a35385d99ed4957
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5216077ac74fbf1db48d6402c8feb5a58
SHA1edd8823c4ea005dd9758620700458be57fc93126
SHA25624de377501998b101ef9b7504d63397e33a1f08810130c5a19caf63cddf59c37
SHA51262fede99b79a716889eebea24116eb8e5287b04e1e8137a07dae036ed84d5687ea40f71b6e73a72b4591b9f8b161d562092e1641872bd2a1a43a79039dcf2dd5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cfebe2d02515d0e8670835fe2b8dfc49
SHA14e05f04c84375f8ec3fac75dca8259651083367a
SHA2562602047744e582916196657d4e5fe378a403e10edef42880192d24bc7f022531
SHA5122da78061be44a8d39dca1dc94a194f0f63f4bcd91e5dc1d80f44e4b0cbcdb116f31908237f3d887bdb03175d71ab3bcda8f8d2441dd4a147caf1396dc1178afa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53613165b652cfcfe6488e213862b13cd
SHA12867cd7e043005935a875923463d10ec1b5d6eb0
SHA256a1f9adba35799df153d542abcf3461b7afddf1a869136e2d0cab2adde4f05707
SHA5126d7c1ca0b1dd8c1ae25d135fd16e7814c602b103281876e3e0aa300c35715cf76810594958d6bf63b59573d7fa05b0db2cac204b38fe710015d0e584e3324d3c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD536cec0775894a2543f856666b52cbe60
SHA13da435839d67ca37c94e0eef3db49eb4814a3303
SHA256cb6beb2faf3113cf30fb89c393ca916f8e576048b602b1987d03214069697fa5
SHA51208434520a7b311a97455e7c41d2ff10b6b99697db014e4e9fe88de9a782e57588bda1863faa797838db723678fdae5ec5b34fe20f6488b73f8e1826996f5c457
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c6be3cc9e6befcc3de7da5c30986e158
SHA18fb94d0452c0713df8cd97fd872aab8e63b077ab
SHA2566f169bedf1d0355a9543c5bda1ba4d05f5bb2ba2282ff80a7304669aa96f23c9
SHA512f24cd4cbdab02c3dd8e3b36f5de12e3eb887c2c0d99d3bcc235ee944298cedf4969d761e66bb8597c9c3e6df4c858cabe9d9a496cfba017576fc7fa888030eb8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58fc7fcbbdde7c66721d975123ce4f7e1
SHA1aaee1b2b71a818d0daf5ee59cb4284dabec5fadd
SHA25653e07b5d01bdee66848d64761f4f5b74e49c85e5435f8cfd0e5837269cef6884
SHA5129a848f7f9ccfd4e75fc15d1a2fff3cfbbe669eb68934252ddc3b93356259dd317fb01811f166638e82aa8e6ac5ba0e02588e5c3b229ecffc66306f41d37333f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59119ac6e3daf3cb9b391ceef98a2fa92
SHA14649277644dc7212b84120b6acd8f43b9e87a642
SHA2568770df842cfe365eba071830058b715dc8974932e296a4553d123dff155f245c
SHA512404f1da137763657acfcd723e4edd2aaf346da5d5b3b8af48ddb5d229aa55ede57c2c59aa282c65098de4858fdf54e494ff9f7f5b26f72a410998b0997df3b73
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54df3e0960b5471a82dae84312d95d744
SHA18a3478a95714d33f51206b5425c6fe1bc7c83723
SHA2563e0b0ae1319c08a3edb34eb064239ce5862af1d6fffd61f650010e96ea64e7aa
SHA51278d967ea07f83249e5524d773ca7534677e27137ecf2dd2a71b365e422ea7300d53079679b4d509bdd5043cc06e34f06f0909e4b98f3bb01152dd6413c16c6cd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d1fa5758289e919323aa9bd9302ebf0d
SHA1b862fd01113f60b6b106105a46e6085868af3df6
SHA2561696c4d41a87147bc9007f52985c7759f65a59ae9b8cad1a474846b72a2c07f2
SHA5126dd668577b8a7c5a9192f98bae30ec631034bbcfdd5ceea0b7e9533176e4c8ac8ea3df00a44944ecaae4010877816456c958aa0a91e4cadec1d1a290b50e3a17
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD521fdeb4233c2f79e12fc99a4fb410903
SHA160ad480d983a8a29b00ca68d32e836b8de87b60d
SHA2563938ac5d0c3571ef9f14f08f1096dd3245be28379d9d9aca867ee4fda3e0557f
SHA51234ad874626ff1a0edc528903674481418fd4f148089de5cd49096522a1622b5dc5e8ff89b06aa1c92a81a6f2f8cf4957c656dce3b6421a63063a211727bb46f9
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a