Analysis
-
max time kernel
144s -
max time network
145s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
10-05-2024 05:24
Static task
static1
Behavioral task
behavioral1
Sample
2d8f2721e32ba92912318b93ab50c75d_JaffaCakes118.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
2d8f2721e32ba92912318b93ab50c75d_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
2d8f2721e32ba92912318b93ab50c75d_JaffaCakes118.html
-
Size
62KB
-
MD5
2d8f2721e32ba92912318b93ab50c75d
-
SHA1
b3aa9d2a027b500cd8cbba11c499d99d8a7e6d5f
-
SHA256
a49b5b312c2724c6288bc999466a2194ff39c6f25f255f39f3d30914c3748f85
-
SHA512
0b86bc4822ab9c243e8f0ac1c759bb0511288eef78a4cf9f7e306353b1ed027615284b90d19c397a3de2aad102b42dc6aee5a0c70ba05c7c26135987d976271c
-
SSDEEP
1536:bWkADkAZckABKQbZkAXhTcr0IPGNMxZPdJXxPTQakA7+S7vFSr792lXP9CiNL4cF:ykADkAikAIGZkARTcr0uGNMxZPdJXxPB
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A2A0FDA1-0E8D-11EF-A4DC-6EC9990C2B7A} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421480564" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1776 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1776 iexplore.exe 1776 iexplore.exe 3040 IEXPLORE.EXE 3040 IEXPLORE.EXE 3040 IEXPLORE.EXE 3040 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1776 wrote to memory of 3040 1776 iexplore.exe 28 PID 1776 wrote to memory of 3040 1776 iexplore.exe 28 PID 1776 wrote to memory of 3040 1776 iexplore.exe 28 PID 1776 wrote to memory of 3040 1776 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2d8f2721e32ba92912318b93ab50c75d_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1776 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1776 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3040
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD5b6e71adf7324685d8f60c97bdb99f892
SHA1ac45dd58c3dfb5d68ffdbc27817f1e5ad5720830
SHA25640a181e9a8b85b862afc89a604eb290be3b5cd68937feb9ccfc467d3589e8e5c
SHA512f864a712e300632059c0678ff5f54412fc7f7a1db02e469bcdc77be452886b55cd3d08ff51076278d1a21b091b2fc459e30c53b0d8e8855dbfefa59f0ee4cea9
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_C66311BFC31F329FE5E6FBB46563B719
Filesize472B
MD508b42de8e5fe706ca8f5159cf7f38b76
SHA133c2bbdbf57a54ebcc6a17da1419d661c46899f1
SHA256c18980e956391123486c0cb4398901884bb4d3258b9b9b6b3f14c2c224bbd65c
SHA5121f7e9fa94c503036b895a2ab9029af9c798c89826ea2e5d3e12c4a8c01c1c773c1237dcf6515249224a13fd71581e2ebbf69381f121e8b7dcfbbb61a7618d772
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5c596b832625423fc03d96451b5c6b39a
SHA19512e459d03a9bafd356c8223d234452a2f151cc
SHA25621d3192329b69a912f81b58c2d886cb3abee183db79ef5ef140e223df6851fad
SHA5127b07b283a456bb2aaa2cee7c211bb9256ac1ecfd4107890553cea1beef88dd938fe50febeb386aa14d4808d06d2293c7c3ab30732962191118227f3cb4c788dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5298743fdb8fd9a8fbfd40864c4204633
SHA157ddad4c96002ffec101db4a92b0a8d0e5829804
SHA256d3585ca5c86f12a3d75cc839d87707ed5171599398208fdd56b1b6dc7833eba7
SHA5124892af01dc3c72d55b34fb52d508341922b8829ef38e5938a351bb6b0cd782e84a092dbf6755f24ee09648bef3f7d5d787f83435fb5999e9878c95907e386f09
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5c94544aea67d5cdbe8da70b91a1678b1
SHA1ee5fdf048c28acd209bd9f7b769fedc7f606d21e
SHA25676249c6c35aa2947ca4cd154ae60cd4d929aa9e551d0dfcade4699ef6789e81d
SHA512383ce2c5b85e336c7f373b74dfe4cf8d1dd63a39ebde834cc3c36768533ec87ff8a963fc34e3c0ec212e506a839c746f1468ddee2decf3763caef47dcf7cc561
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD56a0b4c1ea172133b73241bcef192e14d
SHA199542004f6cf65fd185198086326a2ae306ade7a
SHA25655801adb8dc6dc55377f37e3c1e4da1c859bf597f8f0e32940497b1b1caa76b6
SHA512b63c7a1effc017bd6a7bc4ee95a8065e0ff8423bd2a2127efcaabef5a735c5bf357c3127ec67f2fd46bcbf5908cccdb500617138671ba77379776486b1b789cc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f006f48ccdef3922e1b70b4faf0c0667
SHA1b24e0a102f9f10efe6c81622ecd0eccdde6065b0
SHA256942d6601946062d55b4a98f9f9b1a2a2bf6a669c332c9b3e13130b3452663cc0
SHA512d3fba027ac51a151f6ce707a21026babd89eadfd268bafe4dd5e5638abbb5f4743243d2b97dc3f1351ab7946f1a7d67c9d70f559ea08ae4c84a8a3952327f233
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD503f6edb0e1c170c1710b315d0010cf0c
SHA17e19f2f4d9fb1edcb21a2c8a52f00df9603a48c3
SHA2562d0be1db310bd5ae01efa1d79da00ff54bcbf50fd59c89d565ec6c9de9e14b0a
SHA5127b078c4f0bf36d7df4646af1108c6f46cebd457bc0290be4458e72f5b3aa1a2e6d460aa8daa70b6e35f4c518da5d3b13fc1972317adf15c4c1c4aab0596f8fa8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5071c26a4f15f005e061b2f3caf429942
SHA1b2ddea800bbdc8594d238ec5a945ec572f42385b
SHA256180defe19672359e14a84b17923a355f37cfde58e5a34884a920607631e8dea7
SHA512c34d17e62a806ad38b2c758b53965dd9c3708ff5a8f31236f119049b0ce720dc3ed3d27672087c89a1074ffbd093b38cdf86be773c96558f559f7a67b405b81a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55710df07279db239d7daff024fa38715
SHA1034ecb3d95ff75fde682c34ccfd64b85246ce66c
SHA2564b9089b3d4c1f69d46cbc14273c14f3806738cd5626b98f847b8f769f2f5b9f8
SHA5128910635734177943521937af7052d57359d4af2eab03e99ca2baa7bd536e6cfa6adc5cc2de26d06c7631b589536853aa31a64e5d3810d9420f926794d332a424
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f607088c8230321fd9a41b26c7730947
SHA16f6f4e88306b99a9d509f973d51105abee495634
SHA256508a998d3e8228774ad38d1194500b70fd4398e1351218893302205b881e8bd8
SHA512557dfcf5a22537c26904c7fa0fdb64f9e678a219665efae0d04c0192739fc4e677481677b999375090530ff7ce7528868a2e80bd61b3e82e7599e275ea8e4b37
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ef75ab1839d2aac5b308f26499a5b8b
SHA1111c66d7c86b01bf8659eda32943f27cff2ee033
SHA2568517d57866e72bda50012e161a0c0259b14e033465dcb83ba87663b2fad52f3c
SHA5126158fa5e1b45b3567ccc169f53b18798ec7fc12b01ba732e0d96b8a8a5055e085bc051fac4d05d0e3d60e9828718607896950a3d1a11ddf6499c8089a3158ab5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5aa565d7fb12348eee90a1d6ce2357eee
SHA1918000f8879f0c365e151a2db6dcabd8d42e1e20
SHA256aaabf638d1f082bdf0ad50020cc47b55fdbcee825dd7def4b0e9fed877a94063
SHA5128c596c149831ed9ecd5d98b0f9af796fcaab0405c2059322933eb735a7d8b9fdef9db84f95ba4fc977d6586ce81155278e3f404d420b6dd400a2aac444c2b4d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD518a2e2bd675c6acf8fedbee4bede832b
SHA193b5401815c7f1037142f9764260bd92328e7668
SHA256eaaa1b9063e3461616ac8b3a58edf612cec95b23f3df54946f94b4fab30977f7
SHA5128887a7efc39dc76082a7752d7db215904e5afc94f1358ace21abc6b2aa542f41fa472c57bc47c4aefb14a02b271af2c0e41a07f8728f7ff7be746db862f18e01
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5120b2b90e669b7d9f6e6c8a00d903607
SHA19fa2deac9b73f9dea7835fc823c2b66c074f1f76
SHA25613d61e62ddb97a294693ee6f2f21efeb5b1fcc0e79a5c840b9f2c222d1b499fa
SHA512655ad0ab8e8a337eaecac72a86ed8fb20b0f67f15cb703330f89b7d4d7bb999f095d5889c7e8d72c532bd122f8e0043b12c03336772662360657304f024b0d97
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54d6db5144772c9c82deb85a13e362d9b
SHA132776a407f3338d9fe546683431761b0d3ca69a1
SHA2562139dfdf912b755c2650fc1692a892fe7b64dfa52870ccd4224eb617dc956098
SHA512bf0ef4b12fabbce9a9902184aa16783fce556676a45259ba0266be3c339531ce25fc505c85fa5849c8dc8edc92298596341dde4e4966d2257b2853c4a4414b5c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD5a0b77ceef6a24011d9ed5b8926fd1a47
SHA1ce4d3d808293f854765b43a59a0b11aebb883964
SHA256f0f1ef9a26188793cb4e76d469ba92f9f74246bab74abcc4ba2ded4a09ad5491
SHA512a3b71128aca9fc3d6fef2b502f64220980c89bb18b03d1e6771adfa75cfe7cc48cec3a5ce71361aceee2d2b954b9940c58975ec7bc3d72d25de65c4e0601a7b4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD56a3cfbcf5cb7328a614d6a6d2943e48f
SHA10ffae52995a49be0588cfa4a587e889da59aff4f
SHA256dc7b1089edebda458b1f2e2b667fb380f31add6c8c1e4017a7718c0ce28c037a
SHA512208ec4ad3e757e6c5731e13a8002344016bc1cfb72ad61a25e4d05055045144ad856761942dd6ad0393b86a228bc5d80c7fa0445c960941bc1176af25ea4173f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_C66311BFC31F329FE5E6FBB46563B719
Filesize402B
MD5ceeed36584b7aa49e94d50410069565c
SHA15f01a9898f18f0042829a845858d231435d46d6a
SHA256092f8324a86f684e69b9e0890c36c2dc20926e82910c2617b799b135243fc172
SHA512bee4ad86bd65bb24f59eadd5d5e86a78f4c1d1e2415545afb5c428f9820b85c2c4a1aac41cd699d5a8b05a9ac3aecee812c0519909767259f1786587d338aea9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD5752662f93b94857cd0661e26f68455c0
SHA1618732cde096bc2e153d24d8ef862de641dda6bf
SHA25686c881d1898616f699b915f6b3869946e0e030aa2aea0b750a6604d8967a0ab4
SHA5125977f6d44aecfa7327e85d0c6adc012677cb39745b3e685367f031bb22d6e585e5b5054b3736e2cb8196812136b8decda2d927da7eaa8254ed46bd1fc30bbf5a
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a