Analysis
-
max time kernel
147s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10-05-2024 02:15
Static task
static1
Behavioral task
behavioral1
Sample
2cd9d7e15706403ff851c7a574d8ad72_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2cd9d7e15706403ff851c7a574d8ad72_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
2cd9d7e15706403ff851c7a574d8ad72_JaffaCakes118.html
-
Size
64KB
-
MD5
2cd9d7e15706403ff851c7a574d8ad72
-
SHA1
ab9429606216db9d8bfd70f5273d558746421e88
-
SHA256
d63981d3ec27368f3f5b8e468b740336004537c3061cfd604f0c62b6cb8a5103
-
SHA512
23c99c1140c3fcea9d8f7a590d42f7098533e4191ef1d28019fd86c1663d2b767e024175a7fa3fa4a982849defe3ab33c5c6f17249eb864fb0ec913d07c87928
-
SSDEEP
1536:oRL/Dkzu/OMIP2qwQ9MiHSw2ctiHEyDOGO/ONhIx96tbtxM8Pj3FElcXJsijJ6ha:o5/DkzSbIjwQ9MiHSw20iHhwhwTlSB5i
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421469215" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{36AFBF11-0E73-11EF-92F7-4AE872E97954} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2864 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2864 iexplore.exe 2864 iexplore.exe 2380 IEXPLORE.EXE 2380 IEXPLORE.EXE 2380 IEXPLORE.EXE 2380 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2864 wrote to memory of 2380 2864 iexplore.exe 28 PID 2864 wrote to memory of 2380 2864 iexplore.exe 28 PID 2864 wrote to memory of 2380 2864 iexplore.exe 28 PID 2864 wrote to memory of 2380 2864 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2cd9d7e15706403ff851c7a574d8ad72_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2864 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2864 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2380
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD5fe43c064674fff005b5db296cd35861f
SHA10535e4d9a2449358ea196b68ed6fffdf26515724
SHA25679b5eaf7f6fc1d14bd43733e8172c705af4060425e17fd3ac76727b3df1d2f3a
SHA512032355a7f193040a2a4f93777c10049ce100969aff432483d020c180672c33eff18c28f60ba6780146b25a07d5908c37f7af43ec87dc01ded9a56065874da050
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e86bce4e8c1e323343fe751c43e0a889
SHA168fe4f7f492ede205a6d0425f756314609f7449a
SHA2566d4d4507236e72f21d0ec5f257b9cf114723fef94d2a6a0a3d990c01549594a3
SHA512b84bd44ebed01e42f83521ae277f710e6ba75df27eb2df21bf79a571b02136674639d74815535c1c71d8ebb9edd51ee20e6af56f2428752955d618529fcceb15
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5909d1a534980c0b184761580cb62244f
SHA1b815427e8dce412fea5dd8d18c0ae77f144fa46e
SHA256d0dba333b7b4d848d19537b47343fc50eccad7bdc2aa466a5859fe221275465a
SHA51210cc19b0dca11039813221492c6ac4685695c2c247b346fd90b5b7fe5995b54654788fa9e8ae5d4c3bf9a0c19a0251c1c3bbfeba694f86320aca40514de55900
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53b26e903baa785dac43f71031a1c52c9
SHA1a230d0660a6aec11e58d21f83ff07b618fabeae7
SHA256af4f125f7fa1fb480e48adec7620d56fbc322d41a07e22e553d968e648249f78
SHA512900ad43e4ac8bfadd0d535137d8563dbb9584a4811f515bffd6595e35a739225539baf637e87e881e8a5ae15715d861ab4701d23684f509f06c736c059d11b21
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a3a82734f9e952233e73c5acf4d10fbe
SHA1d7f566031324800e868fbe354a4e9ac70c257bfa
SHA256e5cf07a3c5b1ff8868a2c090607dc50ea3a0c6045d99cdbc61af507797c8a694
SHA512624d0be439d71e0e1accfba32c0fecf7a3c0dcbdc5b8c0fb2af1fddb0b460e3d4dfba3131bd86704c4f1f4ba6f06d874f3327f8850d5e477a5e458b3e06d5db0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d2d12aa087d0485650149397006d09c2
SHA18ad0196abce630de145ea491cbaa70459cd77b4f
SHA256f0a05d44f59d1b566801c7e820c807f7873abef17454dccbb5400d83fe7eeb9d
SHA5126c2df6e1ca4159739a97701a9d2c14bb0b10d62bf5041dc562e6abf6a238d9e8f8078a9ea27858d7f3072d98296e15c149aa75f0dc61776caa4655792322cd43
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD560caced49a80e0136c2e7e9bc5ebdb2f
SHA18dcaf2ce3acc364b66a7df487f01f04a30e6b605
SHA2565c1624ef768a7907d43e96407c3a518c6dff53823e29b582e5c582a3d08e22ee
SHA51261c1d532c627097564667b7ccaaba26d7bc15b06ded9d6f2f31cd21fa352b868534e189df44f1028731f1a75ed9d23e15ad78e6e0def4991f1b9e47c677a94db
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54887238307c470e412880f9cf53de348
SHA12460cee4af896784c1188c7c834fb215c0873aec
SHA2567b70b9e8894e3258e04aa608bd37ec6f89fbbc5624dff1fd09f6e9ae38d3fcf3
SHA512c50020ebadea1f306e3f3a23689c1a2de6054876d5bd4f8c1b610c4e81f7da17205b399728261e4d2ceb8b4d6f4aa9f63c0fdb4713324b4f9dfab8ef39fc4135
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56d386f8b8a0d37f30703841f5101c490
SHA180eb3d0752f9b65a855c5bbe442b73b75c67225f
SHA256a9ab0ddcc34e279255b07abfd0d853ddfefc63edece56b6205a4005e0adb5f09
SHA5123035b486c97139d518fed9fd066f0bde2bb4fd2250bad6452c0beea4511aac0571101e871460a24a29cee0a7ba5bba43c1d79787504321206019d97a2a4e384f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e1ace622ab189623b3bdb42f128c35bb
SHA131beda73afda8e4158c364b85c910a35c24dc77c
SHA2565fad180b8b451d8843ce9bafd76bb86259f1eb4fd6dbb0ba484a4764ee73627e
SHA5129688991950f8a23c3a8137e929818e0e7dc56cfdbee4da0858aacaf8469e206178a32430d953579df5114bd2328512bda72358f276138f256dcfad63becf98ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5712e291e7303d1e826db964ee493bf11
SHA1782db9878a3420e760a6d640fa1e4ed6b429b3ac
SHA256537583bc143f8bbed087878dfa0c4f73b11862cf0f271d4b37fb4c3980752847
SHA512eb4e1210eacc9ad2fb98e483540646ecca93496c836a00d3d13f1984229bd5d145801d7066fad0619743ddfad011a5ba45417047b1211ba8a8ba144033e88372
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a5584f4261aed219ea624c59b6184fd1
SHA1657bf8ee33373df91d844fa2ca6533807c15a923
SHA256c21bb5128e1214ddda0c4d737f20a048282b40a0433e44adfa33dbf5aa422330
SHA512093d40e0e34ede3499ddf1855296ea5687a66a139cafef595b89c5d7f7d607d78c7b277337ed1fcfca74b9c9f531f7de0dbc7b5cec4b88def7f13e747c5a4dd1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5481d0f1f844767e8d8847be8b56a920d
SHA151ac75f94f2508244fb27d84a2c107b30779b47b
SHA256f7da4182c4e8cd677d7e303ffc1bed52744f77e80a8856937d5c040f5deabb4e
SHA5126a017094e5744599ff42310183e57da5b167f29bddd66f6cb0fd9b96c145fb545290280b7752a9e8547bdd2611fb6861a4e34b5f196a99c79a85b18f2f1f9b02
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f84afd7009ba0df75df5f0b344675c7c
SHA1a5c46cd00f623bc31a9e83b0875bb1b3f955368b
SHA256e28b72f707358ee028a831c07289da6f45fc75d7c379a98c747da891231460ad
SHA5129f888d9b43c3b4c81e6e2f1b7b07e8046df24cffcd619ad923936356f75805a73520ea5b3e894387e160439066eaac09b462ab5f19b6aa6f6291186f112c1fd0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52ccdfbc8778fece6466cddfcbd8240dc
SHA1b1d0e397bd2dc9f0185834ded075f018a6506c7c
SHA25609b03c447236ef03acfbe431266fcdcf57eceb09bed92aaaa944953c5abe9cd5
SHA51249fc643f1db4c01f3f1b58f9cc55f9491b956632392b12ac45095380da10522ab9a34941c441417b2c91b22b848da59f7a2d2f3cb2f4ff6c423aef52681779be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50b48b5a0116e3aa0059a1e07432cb155
SHA15d181f4748cf91339d8b02455648a59afec7167f
SHA25644d5368d750a55c3056bca707cc50cdf07bd835d56b52c92078b820958e6ca5a
SHA512b2b21f4ef9d77befd7afbb20f24853d80d4b1cd4bcdf5fccc3e9a8a19111f0def0ac6d8cec0b6b09e10324f9b0436885b96bf67c88d3576160b679925c211503
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bda346f739867c5951f9cf53aee194e3
SHA13807f7dcf1d7a056d2fe1929897d08fdbc85e7e7
SHA256a160e97e3fb6c59395758861f8cf8a6b31caa2469de4fb537c832186547e45db
SHA51270b3e32a799903915cb3bcc587950cd85144c09b309f1ad64f9074afbde539d5fee197ed66906e2dcf75d6a4ff78578d61b8ada493def8501b46f0e6e0bbe009
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD574d5c09d5c9c044c436b02a04aa81d80
SHA1635930e521b0063880672e92386b46b5a96bbff0
SHA256bda7820b0c6677e41fb2683b35e911ce8a8701aa02a03170f4bdd43923dc16e3
SHA512d88b00ebcd7bb403eecf279f33f24338272bec5a83364f2bebaa2a74feaec061117981af7f9e2dad0113874a9a181674ecbe84028902d3a9103988ee17824065
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a79ea9d07d98d33bc3e02c1efc2f19ea
SHA142f44fccaa5f36adeafa1d7c17f4928b479a8b4f
SHA256f601b1cef441935bba045cf36a0f364997f581494bf1f0e1b7b7bf274d76feb7
SHA5122bc85468eccc070fc0529849f52db13f127cdfab38fd16642572fea032bf20eb12362176865bc03b70bc29808c093e48559117fe917e3f98a3b0c1dc1baf2d72
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD528414fbcd51dd27bb4338250ec5b495b
SHA15fb864e94ae5407f05fa07a6ccff791cc28896a1
SHA2564ae4587291ab506655365e6d169e16915dffc303e48cade645324c1a1faad5e0
SHA51213312254223bfc826b62ee59cf85c91644a04b6a03ca7e9ecc970f381633003315cfb5fcf06459e316e4a582b1639d0cdf64faa8c07e9b63d2646bb3b4c97b86
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56c706e576260b506c0fd619ab8b20cb3
SHA139cde91e411bd06e31e5fd88656be03771b0fde7
SHA2562ec3513be3fffed27d7f3de05333ddf513c6a18dfda5fa26c0ad3dd1db6c4bc1
SHA512b81862fdaead7513567d453a53e292969407adcb07eab6033413fca70101e264a52a67a459ff171a326e7fa14101f1dbf5ddf32fdb95e3301383aa3490d4deff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f42b086d18b25b7578d893450dd7a57c
SHA1583459070bf289484cac21b4dfd11ccafd164745
SHA2562ee374b16015dfa4ef858fd9c4c2e1741d477b794a5965d3b5eb3b712ffd9601
SHA512d23267d4fbf87312cd426e5e828f544733f761bd8f184fd44feb8237d710067f389de5ca69048b82cb1e8c6caedc37c2ff3292c60f50ab8e676a21f3b47034d7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD535911c3cd9b490fc122b80323a9ca443
SHA129830ceee965764cc9987c2804731cd347c73b33
SHA256af5bf14b35eb14f46b4454e32b7769bb89de1b2b99b9e37230fa91bdc63bb6eb
SHA512c6842fa5d04d8cf7b6252f94456f0423310a89aa8ed82047ebbca6b3f58570671f841d9697d399fe191a36714379b71885da07ab5c4c7e00340e7b2193c3114c
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a