Analysis
-
max time kernel
135s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
03/05/2024, 14:30
Static task
static1
Behavioral task
behavioral1
Sample
10bd75e3b7a86c3d1ee60afb18b83820_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
10bd75e3b7a86c3d1ee60afb18b83820_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
10bd75e3b7a86c3d1ee60afb18b83820_JaffaCakes118.html
-
Size
23KB
-
MD5
10bd75e3b7a86c3d1ee60afb18b83820
-
SHA1
d4406d4d4d109fb96a997ae69e27f20e2902bc1e
-
SHA256
5560bcbc5a59c771df9b1cc1b906a430c7556b3c6b83593a57e37e14b35d1550
-
SHA512
c0ba1a3e3f3022c874e268c410746f00dff1fad5526fc70e7307cfb9a37769a3f014bc9a00d70147a46576cf018437e5214a555d5355054ae9fe145ac504a08c
-
SSDEEP
192:uWbMb5nCunQjxn5Q/9nQieYNnDnQOkEntrPvnQTbn5nQyCnQtywMB4qnYnQ7tnuN:DQ/PCN
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b000000000200000000001066000000010000200000005bf1465af357bd3f1aa8214b4bfe8e30cebb1fb4f64fb839f1f432356fa5d96e000000000e800000000200002000000020309ead7ea7ff68d69ec8a84d0677ee8976d2c5977337500fde02ac866be019900000001d3f03a6f46b5c37c5588938b4c1e9d9b0d60fa0b5402f6a105e5956d0ab05e25031f05d7d9c5725c0b7be612474f2d8e2938db76d52930f5bbad57b5e8570773701cd7238245156856fe7031a854be264363797334745dcd614fa638229d51ee5cfef3b3c4a9d03249654fe71c21825d1e8c248e6af354f6d7c2dc25eafd1679d67adaf06c6cf5503eb1c9967457f8c4000000000a9d41a2514e216c9b92efbbb0622f62c84be4f8f628c2483f996c1dfe04f6f14c484bbbe03fadad48b61460d017c1a58db1d22e8e955127ee356d8c4b069d5 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 400eff77669dda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A2C641C1-0959-11EF-9960-CAFA5A0A62FD} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b0000000002000000000010660000000100002000000068a679960221bd7880705b2382c9c8e9c899009606ced52be8d2b009accc68a5000000000e800000000200002000000036027937cb93d71dac3bf21b0933a5c627d2165fe66458f3e2989bbb0160bf2120000000d965f0dc82f77955f76f021c4c5c808acb07f65039dcf8ec60283422511036d64000000050fb4ead284b1cd959f5c403fa52592d71014c67ce011d3f6cc2e2be6afe0ee7ee3cfc523949d4a6cac337bee109fc6fd3467a43b66fcd85f009853072caa31a iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "420908475" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1368 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1368 iexplore.exe 1368 iexplore.exe 2584 IEXPLORE.EXE 2584 IEXPLORE.EXE 2584 IEXPLORE.EXE 2584 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1368 wrote to memory of 2584 1368 iexplore.exe 28 PID 1368 wrote to memory of 2584 1368 iexplore.exe 28 PID 1368 wrote to memory of 2584 1368 iexplore.exe 28 PID 1368 wrote to memory of 2584 1368 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\10bd75e3b7a86c3d1ee60afb18b83820_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1368 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1368 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2584
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51994d7e91eeaa85253c18a156d9480c5
SHA1483d242df76d99dad375a515e93aa2abe95c1679
SHA2564282da271c88ceefd691422af266a92ec9981c1e331ade0ff3aa82a2fe7745db
SHA5124be3cfe13c9d761b63fe64906deaf9e29dc6bcde26a35e0ed520d6c2a978356f4189c75b56a22027f8bfb3a81f1c7d3ce3a62ab592fbbadf0984e7b25498f26e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c8b8357df9400e881227b52735b76cb0
SHA1d291e58b187f20c8a9865accb8e2bf09bb7bbb8e
SHA256697c23f85f7bae5c14260722a9c490c935f613e9bbab6ce14eda4b5899cc88f1
SHA5127fa1b21b2cf1dc5dce3af3cec7d589c780327906e340a9d07f044a6e9e426e45973717e4571d1b0def995aae0b6bf7f14dea282899e24c12a9c7517ceee1c154
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52c6aec03f6e300dc33b73fa150f9401c
SHA13419620a02d5a2134f3892e7c84134d5087150f0
SHA256dc0b122f219f5228832b5b5437ea94d067edcdf8e2e9d0b992f4d06bf0af789e
SHA512cd402ebd8ab9f38b81cc4b5991df580121d5c7b8d1f4ba7f9153b80f5a297b98fb9b59498c3f602da2036811515c03d4a652b68f3c240e62b4b61d3bad63de49
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ce213f4dca09b6dc1b0a1b74f4e32585
SHA14c4ab117018a5f7f719599629218bfa0eab5c680
SHA2562a953e37466c4e104cde530279555010d4e14d0f7e8260d0348794260fdbbc2c
SHA512e467aae09809510eddfed049e48202c8b252603586d0c3ef9c6fc6efefff41af23139d9ef46fedb2751505a5de44b49bf4859c9f003e3727f99e3dae4a58508d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52ec4138695512ee88b1a2608fa706e60
SHA105c36f768d5256fef9d3c7808d3dc86516bebd49
SHA256f270dbd131e4d0cac5c1b4c76e8ebdf3790a609c4d62689a1a7ff6e3731742f3
SHA51203d5434a72b5ce95465635d50d5af4cd887fa66d2d5ba484f246837cdce4404957a2804656ee1bda8019d6156b9779f8bf1e5925ee3d44df9745cde0abc38ddf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD592b5510cdc82f285200ea442a539dfe3
SHA12e9d61fe7938b44e26a9f349992e2c81fac70db6
SHA25687005bd2a739e99dbb43bf3e580cb1ada5a2b9d4800c27d3a945b7ddeebca51f
SHA512fdd0dfd99ad1b020a615083c85bc30c954a8eac71b1c1d2cd19220f9cbb21fd885c67f9201d34d460e0eba78ef7d837f8c3f3600795e5015858244a420f6fca6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD590ebca86ae73d3d0c03da97be4063f41
SHA122cfb6166a3520094bd82e98d82efbe0dde2a911
SHA256ac25f116b8b98d0030a2ec377cf526fcd30a0e2c3ddec0e2a8fa79be52aa6f4b
SHA512b2672fa777f7c4c46961611972417c56a8de511f16fc319789145810ea3e6ecb7808c93ed42d6eb4e0679d4d78005bdef97bccfeaa7222966c6d5ca1ad367c0e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55c9c1e81effdf233f1d426f60494e342
SHA19a0ce09ed71fcb5a666f8f8e6a84d919b390ed2e
SHA2562d8f182b44f34a93772b8dd1ec090aeb29201a369826db49796434d30756c5cb
SHA5127b81f5570a57fc134dce472acdd748674fe9ad1d372c2043c9aca2a386d9f30251ecd67b6967584543f2af3d207a6b1d07f6b63fb7dffe9dd837e90c5cd26064
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5be2815f819ebb1072b355b680183b68b
SHA1107e1498a09fac8ae51d19d089791564228b6c58
SHA2567a3190d8bce8cb8f259c71ce76464501133277ff28657ed26f4137d23158fae6
SHA5126a4821cea2a38dd2d5c5a3863079a62e263affb0120c5946f94ba80048533a31df91eb2d6f17965c113a00071d49e862ba78977d8efec0e9abe9dff9a8fbf4de
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5078e3b7a9f6964fa7afd02d27208f8fb
SHA14498979ce24585df723b8665fdd70fae63c2644f
SHA2563bf66e6a54c8926effbe56c66db0f3283f90ee45e838ba22052968524a86e3ff
SHA512b327712ec9b8c3bc8b66937786b467af3f2384eeed158bab5ae90bda03c790f87acf94a63876f2ed07542ec23d31efde3514b8009f746cb886266ec07dc42cb7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5339571baed2ac6b2c6d41e5d08ba1369
SHA11fd5f74f721ab46f882a614df3279a13c201bc73
SHA25649322feee165a6f5a1470f8b9b5f8151222b71cbfcd19c805d97fdb40a327db4
SHA5127aaeb079c9ed0940be0984632275b1aac1288ce0515f62bde10eddb2594e4ca2f2856624409cac1240b018a998e02fd5cc39a9046f51000ddc878a0cfa0ba6e3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55066611780390a9cc2ab9495acb29462
SHA1d46e7449535cf03e69c856531494e75094fc250e
SHA2564e87cef14b592618374cc2fc44ba5e797aee13835e4c98dd812e2276bb087691
SHA5125f2e10385195d2903492bf4b907364c826a7d51d63bd934c753e2ecc7a2afa34ccb0517029bd29922d780901e64afd46bdb5b50f0574c964fe1e1297a2da59eb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54a3c692b183e6be14f776c3165fb5ebb
SHA10e123d23727378855c51f402e5f5b62d895e6631
SHA25651cc18474862def0a96579a246cdda9e1203f8bf495be159afb2dd93acef7e6c
SHA512cfd44bf1824139e24eecb18f5d8260334110a5eef55c45cc901f5b4c81298d4d5ac3c3489a375682744bc71887e2ba6b5c5f9da1d23136b3323b7ee9cbb0e867
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD535b648ca374fdb97eed2d785307a8801
SHA155c6389748f9ce05c00e58a3b2815d00d6a7186f
SHA2566c2d0a0d2047d193d13c1d3c1edf42fe22746099a2395e073f214826bc616e34
SHA51201a337294bd748d90f63927ed7507419b0f3c0e003eaf1d3b920b4761ef4f4364b10eda7604ee9ccbc4269d5285d81ef81def33bca7618382c940fac5c5839f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a78bbfa4d9dbf589acdfea491934ad73
SHA1cf8e951417c1fa65d7be32cf5101cded0df35ec0
SHA256ce281fe50535430fcf87fc15a1e8b725f8f0db403c86e56f0c1dcbeb351470fb
SHA512ab76ea47e6a3ec6156c83add106b65985c06e95a6f57e5fc9d9ecaf3a30013a362c35de4fceac2cbed02034a398de23de626e2e3c0bad7e3935f5e2b10a03473
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f4ec5400b604eafcc100dba08f598a3d
SHA17fcdfdd548372120fe50b1c8d406b59fafd994c2
SHA2566d0beaaaef62c0c3629ab3a40653caae50f89b44dc02f653582b58bea75ee081
SHA5124f54683c6d4486cf98630ad4dc96cfe7320cd842c766588919afaae558f85231ff3e0da69d6745175364f9087d8401f0a86a51abc8b35ef5fd04765102b4854c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52415499b0676e9c07a956a49d6aebe34
SHA1f7d7d129aa07060409c98df493b9f67be6eec3ab
SHA256ea8f687bccde0197b909af82bdf9872463f81910bcb6f04b2bbb5dc4eb1abaae
SHA5129431cf298b0bc1469417abcaec93328a9d4f28570031b91af2b9c1e792c487ec3454112bb1835808a070e3268054079bfeb6061f2f2704ddb1ba522d548dc193
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a