Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09-05-2024 16:24
Static task
static1
Behavioral task
behavioral1
Sample
2ad5bcb9d5a01b441ae650392bd3cefe_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2ad5bcb9d5a01b441ae650392bd3cefe_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
2ad5bcb9d5a01b441ae650392bd3cefe_JaffaCakes118.html
-
Size
121KB
-
MD5
2ad5bcb9d5a01b441ae650392bd3cefe
-
SHA1
7fc751a00db682d4a860c18dd95422d64d77a450
-
SHA256
d58d0a0f1e57d853230358cb1bc07b0d840bbdeb156866c2c5ded60c470791b7
-
SHA512
b6a2ba87a716eddc747cce258f945a7e71d5c9799e16338a3df576dc231f33f83fd582209c60670a39acfacaa8be0533f235be9961b712e6b222b1789b4a3fb1
-
SSDEEP
1536:iPhm5ZXbyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy+:T5hbyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 7030e8752da2da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a70000000000200000000001066000000010000200000004fbe598c212f0d305eeadd537a6eda8ac2d3c487a51ef43886d1965e7c16a709000000000e8000000002000020000000e9bc860b95f02fa775be02738be65840539c47f8fc62b6bbe3c08903a2848100200000002a516f8106997f3c469b3d659d4c53d44abb4dff9a62d2b82fded79e8e2f936b400000002db2a6d75224513d90b5227c89d8312b42d35c068d8ffa5cc8ca80037d5aeabeebea6623c9df7357a8f853696b75bef28651d5324d86e355ec51fcd8bb3bc886 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a70000000000200000000001066000000010000200000004aebc4d5770b6a263c2ffe7b018a6259667ead0f77f8867cfd6ce3e8f1a7cf47000000000e8000000002000020000000af1cbe766292f4e9d001015f18c9da4044b45f044f03e00e7d90c557678e746f90000000fbc92ae0ebefb984fd46e3dfe129aefc97409df4322740a28102229487b9d6f1d2fca122ab47b374086e295b749f40eed0b91cfb16c949d837ecc731b56234a5825f3475bcf73607385421f2adf192ae0c8da95306dbbf9144b85892181a2ff3f8a1cf4b16fba9e9fb4d0da9844ec2ed2e3881680499b157e348d36c40877e8767904284cd47030cc0212071f896d81a4000000094a3b7ac49adf72693f7f8826c3a539060af1314f7ffaab03baeb272622d20382faf0bb139387667df51c210a9cdd400bc4f4f98f5a0e2035823b9e34765ec59 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421433745" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A17DC7E1-0E20-11EF-92F7-4AE872E97954} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2912 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2912 iexplore.exe 2912 iexplore.exe 2380 IEXPLORE.EXE 2380 IEXPLORE.EXE 2380 IEXPLORE.EXE 2380 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2912 wrote to memory of 2380 2912 iexplore.exe 28 PID 2912 wrote to memory of 2380 2912 iexplore.exe 28 PID 2912 wrote to memory of 2380 2912 iexplore.exe 28 PID 2912 wrote to memory of 2380 2912 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2ad5bcb9d5a01b441ae650392bd3cefe_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2912 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2912 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2380
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ba6260aa2b16ef15192e232ebd750f9
SHA15ea035f82c5b6508744ed194908818893c6f6acb
SHA2568d5d4b1926785b31aa538c3788d5fecabf03624d80ec971a2c07e3ed93e8fc09
SHA5126233b7de78e12eda4833f57f952ecd17669461ea563dcc52bf0305f0f0b318d06d4579dcc7c88f537b55a63a3d7292d0bb05cd7dd1dd6c8164720d21de87a47b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52afca0b1ad72b4cb0f424cede8237846
SHA1892d4b67195ffba00c41417ccbb62e65ab2ed2d0
SHA25661c77c48b0c48e0ee89ad44f0d36038ef788c9fc74220de0443343ff8e81dfc1
SHA512de69e85e5a9296343a7d6bbc444297646dbe3a9a2bc17a5f12cbb6d69bf56178f210dc75a30b996ada016ed144e018677f71eae228b244faa93a57b7ee55bc0c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e4c46dd823b240fae8c38a63944eef6f
SHA1a7afe3a1ea6e506c81bcee72e5b56707071d2948
SHA2568ef92019f08167434041bfdd782d18469fc5e2f8bea09420aa3629815e1f70fc
SHA512e03eb4dcab50d7baf5dca757e29c2602754ff0189e1efd6e6334e97e952ab68c6d2a66e96e80880d5bc66036abe5967eb967d711a7ed6be35e4fef1bce2f2ad8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aa104c5eb94e663e2391927e1824809f
SHA172750462edb1c13cf195f5cbd075a37e6be39e37
SHA2568cd0fe9ff532001f342ed405a8b00e092d9022940e600456a227168b0ea5ffc0
SHA512631cffe52830121a3f839226a487c117457d137daf3444ae8855e5f76d1094f6823270607d18485e2c5409bf6e1fa338743c4a40ce79f450bf3bd5dabd0b3330
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b3768dd6653cff092259162ad6c88c97
SHA155898854eb4b1ce8cd12ab61f84dadfe7f5c7f88
SHA2565aae97db270aa7cccf408c798134c606fb099b7facbcc3ddd8b022df38b9aa2e
SHA512a06da65708ae9c42a08b10cd553d153ba09593e26b38d533a37cfc028e43ae1b8838654b6928a2b4c36984fefb6e9141066fcdb14e7a2e20c85f2035cf440f11
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5270d6254b64693510423700698bddec7
SHA1e57affff2aebd7eb409e76065a6f6b8968109c94
SHA2560dfd2406e654ba7ed7688341fa45c5e47338a3790fa84c11b64dc526314b0870
SHA512091df787d9a3b30ce3e09399542c4774aa27f0d31f485530ffc16a81524e4a7e7c629b5f8f4b6fcba83327c3cfbde2148cbc25799da64817a4a345b7d792918b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD533d3b19019998ff62f286e1ebdf5f037
SHA16b2e6fc383ca84e0a46fa268bceaf6d9c927ec49
SHA256495b8fa4c656c6584415b561e034e0d993f79de2e5b1d184b64c82e961f1d559
SHA5125d6908de856d660ba8fcd93cfc5822df732482fbbf81784f5abc2cc025120a6abec9e52d6a51dd8810d535c56db74587a6c66ccbbc6875a79bf54a6ac53135db
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58c0863c2a096d449fc55902e54420052
SHA1e51cd496b4cfb857cd9eb444f3c1f689c5091df4
SHA256406ff565ff333980f480936d5e98d5bc9612b5e1b1ad36987e03f2a00567f53d
SHA512b2611a21d39f8de8f603a6d42756bdc5a451489eb9f9e02500293fe46b794e0b857b1c96a04343b711669e5d0b5903a71f4c32bb28affd1f538939318df1680a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a15785c54ab5511a3f226b27f64e4028
SHA1ce85467ef8886ed89d96d5429258da342edb3490
SHA256f519d22e82b10f943a1fac14975a19ba787009e7eca738204e8849c4e124f202
SHA5123c1f5a21b8f07abbe30b6c0f69515fffb79cf45c76b6fe9a08e87976b19012e87e3eeb3ed2b4a9cd789711c7515076cea578e33b2330af3d1a87fdf7201f2dbb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50940e3d05e17c13f285117fe3e1abaa6
SHA13b969c0b14b6589b11130ac40de930e41d21acfa
SHA2569a5ec3aff3f89e61610a16fade99b225e90324161a5bf1db535a8ed9b19cb07f
SHA512c27d246302665e5583b5284a5e28b5fb649b68a619763e5c818aec3ce4ff0d785ff24c6d00db734e4ee754194afb1bc8f50bed2f146fdda3ad85b6fc2561c82a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51cbb7fa5e63bdaddfc1a77ed6404a503
SHA12ff33075da8c785590c814c1b6f99434484c4ab2
SHA256a17194f771e124ec1c66de026c8fcd835390afcfcd22ac3ef34b789c5d019b74
SHA512dcbbd15979d31413b5a903b3dd06f99725476f10fc0790559e967bba279c2d29fb076b6451be114a062b906b1e1838888ea46605902122b98a151e5305bbee43
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dc54ba005c26f06fc09b85c1dca94f76
SHA1db678a15972c9ea8e98d13b641382d2799c7fe79
SHA256abeeb0a6192781f1d328462de103f6b81a8ca8cc52614aa368b6da95fab666e9
SHA512c818dbfe3a8c240de5329da34d87cd2d8d9a7ab9f737b3e39df705fb46bb84bbacc9cccd72139f264ca1b4f31129f59cab5b08196dce5f8b991b87c3be859d11
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a1b98419dc1ec0dec90a07dd093be5dc
SHA1d12af1d797e5e8b3fed5c9edabd592d02af847b8
SHA2562f25d6af538a017feefae2600555b216e35930da951d96850b1ff6213afbcf07
SHA512f3c0a794fd8e708fb8fcaeb1dc62538b441442b565ca8d641d34a26ef8ecde28906c67ed69a1739de51e87e30ff4050e9c571fd1e17f2b33331ef3a0e3a6349b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dae2f2c48b7e623397ea25de53859089
SHA1896c5946966946699319038d8199ed7d2bfd04c7
SHA2565692c07481b486c6be2a6f236d2348d13383bffa329332c1cf47a781df8acc3a
SHA512c1bdab25b6ff6ce940f11dcb38a680ff15a3896970f061ef77ec59339876efe3cdde4ce529c09ac810a1df7df296b20f59596cd867a2e939299d70635f880531
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52c52491676d851dbdd1da4c9036f0057
SHA11c85952c599f82288bf63be89974dde134a6ca1e
SHA2565b39e1badc53f1e5d50020b9eba766b4f4268e7aa2fd24c8a352f6f646e9fd31
SHA512adf8b3b25122bd922412e22c5b55b067b4ce29aef8a28f7bf909024d5ba037c0af5382094084fab8e8968c7bd7375d3a55eebc846cd0f675196ad28f6325cf48
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c29fcc153786826c206a204529b2cad3
SHA122c6e11f12324a5b42dfe6998e0a2822ad4036f9
SHA256cef90306e275332fc10a5e8e0b605c4a6d525820aa7b6341828bf04df18827f6
SHA512dc7bd97fb216ae476d8c71fd5d0efaa05c8283e13606f83a2f051c407f1bb798ac96d10a17a2162ce09bb1a521a79d9f80b46b0555f9434481f540f7a9f92ea2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ee8abd25ca6cbdde193753cc3ec1201
SHA1227f8e84a07e0c9e7ccf6b442c31785d91ca3a73
SHA2562739c3382f90dfd9baa436c16e7430c4df18010b3b193d967e26397667a80567
SHA512b30783570db1c95e6154f8d1030f170fcb74d0b9035cd00d18b3da9402a966731cfa02041bf2e294c0ee55917533efeec654266eebbf91b378457ec3f4174938
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a