Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
12/05/2024, 04:06
Static task
static1
Behavioral task
behavioral1
Sample
382ad285e26e641f9a553a3351cd72e0_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
382ad285e26e641f9a553a3351cd72e0_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
382ad285e26e641f9a553a3351cd72e0_JaffaCakes118.html
-
Size
460KB
-
MD5
382ad285e26e641f9a553a3351cd72e0
-
SHA1
707edbd87f43559090b4e69a72679c076b531259
-
SHA256
52337f960b81618483fe8b77acb99d37d56e7ece30edad90c08dd32a17ccdfd4
-
SHA512
807d3b3056fe674eda6d00df33d8609d18e609fabe07aab64ba4c6da792bb57e32392ff87382ba5111a48a421561729d72d645db9bb820a9d4f85b21b7e27d44
-
SSDEEP
6144:S2sMYod+X3oI+YksMYod+X3oI+YQsMYod+X3oI+YLsMYod+X3oI+YQ:B5d+X385d+X3A5d+X315d+X3+
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000006333ce6fb49d0a52fe4195889acea317abd7071cd4927e1f3ff5eb0a4f191b5c000000000e8000000002000020000000bef0f605286bdee93600bf1acbb6b3daac01e8c3294921cde8a78ad4a7f68dae90000000f5842a79a025c6a072740578074cee43d0af022bd43eb4c289f4b8970702c4357ca2e46cd7e1ac3a1f4c210ffc164a63861e964e9017b9c4824072f7819b51f2d022694323bf639ca6e9a30c6c81d4cca87da053d81551fe901e4a63b00415964d98e03fb26c0795f05e6c0f790e146ef11ada91548a8c103ebfa95f1727bf61ed6d5ef45401f58a13ecf11c3668deab400000005081399b0daa9252b4e72eba4b8f59fa41fdb273b7f84090c723fe6ece932d68bd3d1544d374e99f08d3a9cc5ccae03ce9788aa900061537de61dbf972aa3c19 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421648682" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000f1a60c8a44bb74b6e6b1da4bda8413d3a1a9cc999f38c18b2ed60af987990694000000000e8000000002000020000000e6e841192b9d076aad5ea430dc323b03c9b55eeab900ece0eb64e439ef245fe120000000fe0eac4fcd8042ca07c735179432ecde641d619c9e8deb2b42cdb8353996947f4000000075a880dcf806a9c4b7b9ca82fd3df66722e1b1b0be40f4025e9c2605f19cf98fdcb1c26dcdde53d4d5242da12a65b3c67b633c62aea120352b3a184e44ba91ab iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 301d99ea21a4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{11F047A1-1015-11EF-9BF1-5630532AF2EE} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 492 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 492 iexplore.exe 492 iexplore.exe 2856 IEXPLORE.EXE 2856 IEXPLORE.EXE 2856 IEXPLORE.EXE 2856 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 492 wrote to memory of 2856 492 iexplore.exe 29 PID 492 wrote to memory of 2856 492 iexplore.exe 29 PID 492 wrote to memory of 2856 492 iexplore.exe 29 PID 492 wrote to memory of 2856 492 iexplore.exe 29
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\382ad285e26e641f9a553a3351cd72e0_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:492 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:492 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2856
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5237a6c957d4401938dcd47b8431db55d
SHA10df905084d664ce6a3ca8f88fff07f5eb1e64078
SHA256d5f3b924558e18d82ad00e3dfedc39534a33c6f856bc6b0273ef65ba72cb02c8
SHA512c559b5e49e31a12026cbeb329d6b44b272691b9138532f50c0a6b4b97a468174442ac38efc654911e9488a8b07460f612c946c1890f83f7f6e861db08605368d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57995d8904f9e2e8619090c4db79bcba7
SHA194de85b75a5067f6374eeb66949b3a724cb5c793
SHA2569fbf173b61a38308e6a60dea54288f970241560183ab72bce6f75f5d751ce45e
SHA5125c1c3d0567ed5abdcb9f7d4a64a116bd704c604548a7a0432a06820f0b2e9ea809e36f2f324479424c71aae46c62c9d14acfc0fb7de785e23e4486201514be87
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fc97e9bad828890610eb3ebd3d4b8d58
SHA1a325ce2ba87ca8b0553b315032643058c85feca2
SHA25616c1179ba7c26efd9c6559a2c5e0ebbe7709c74b89b5d7cc4b23ff8f4725acc5
SHA51205956a07d7c97bba3dfc12a97415dd1a8aff5ef32c731f288a78b52e17dcdb38e1cea9ad4f788d6e1d893e83c3b1a1af006a8f2d52abc61e5ab70ecda61e7987
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53a2926a0d33508e29fe6fa883ba5fe45
SHA162a411473de2ea7bda9c9c9dff04bd7971b9901a
SHA256877e43090297b8260c6d0813a0ace695d57fc872da095ca0b5424444315e70f8
SHA5120bee6b1d77ad6cc09e07bc29b9ecbc1d13488d07792c62ac75442fa151ee9725bcc9ff8982f6d4c0e21a63f13989d531b6d53f9056ce98c92afb06333d3b91a7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD517535c5abc9d2879b38216b9fcf25a9e
SHA1616c8a34b46d030ab5b8a6456aa7b9c1dc4d3c8d
SHA256357fa3eab281e74af1ac23bd5bd25a6559f1f594588cc93d848a42d4a2d8b824
SHA5121844ed846165222a5d714400249a58ff4161f3f17adb727be92b55bee860b3974e98b7661ce7d6c74c25a8f191c78aa229e28dcb8d2c9619bb5d1301e1bbd8d5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD510233563ce7fec6e4946af956e199a93
SHA150e20b44cc01245e1505fd8bab3867040b659ef2
SHA2566fbfc75e6cd9f0803eb8bd87d9ccf088fae1c982117f7c1e0cdd816bd96f1ff4
SHA51203fc3c91254c89f63a0ddac4cd2ac699e0a47ab5746a299122487e8918fc18674527f821c930837546bcc5e01422035ea3dbb794f09c5777e1b2bc2e002d964c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fde926919ff16825ddf1e3f970813168
SHA1d31321aa20395e41184f72408e22ab004f5119be
SHA256cbbe3e5086fa8310ee7418595dd3ae214160a6e7d2d43a86111288e691a4106d
SHA512d6cdd16748190f0037d12c1f53496511a5e0286ba97daa4f419068aa686aaa88dcf3437808561749793b6f04e204864d33712ee11da487ca3171b8463a99194d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50f534045e9460422abff5a2e441b051c
SHA1f8bf4836946837417b621bea571ad002aa9f62bf
SHA256ba40a0f0a65d9760d4af65887f39bce0addb78b5e15f070d69ac0b01bdbb5535
SHA5127ebc388c161fb53680c0ab9fe186a307eec83f09fbaff1ca00cd99f0e3606af07d73734f32a7b855bcb76a2f42e37e685f68ebb6f6c7d1ef6c35200c2b1a5504
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5005cfbf8e24bde7b3c0ad725aa56fcc4
SHA1983006823389fe4b212f8045d88ade6ed1823710
SHA2566863e55216341c41949098c35fbec085c95cef3b0e291da21cd168ec2b271747
SHA51259b7f77240b2dec8d3d7f1d053713b654bcc9789b7f1c9f939ead18ce211c6e18ac8532e54e793ffec1f0c73cb37f70c27ddb523427116e4a83d48cb0d35a6ba
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f4bdb17a771b796453ba721bf0e8bec5
SHA12d4918215975158046a093f9ba120ae755988824
SHA256f7ef3370a8c3932a75ba1f7ceeea831d4ecf9be9ab175702ed3a60116a07b3b6
SHA512817ef08115b13747d8184aaeaae71fb53d599236f26e2030cba9929402579b9eb1634e9eb0673a25fb798e00dc8721e352cb3bb35ce9a4d24d6902d707e7125a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55b5d1a0788ab48773191d4eb9cbf4636
SHA1096c88cb6b1e874c3840d4ebce68239fb0f731c7
SHA2567d746c0855889bce9fa73e2e9f45e8868f91be09cbec181bfd18c53ddae6e0db
SHA51281c543aa2df49d6df50ea7faa8682b79bf8d68551fa0415ae758ff32742fd600bbaf1c7f0c110ffb468cae7809e0eddea38d44d31c53f72dea8419ae07c3b68e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5eb6e0a4c1cd7e019e7d481ec6a2f6dca
SHA130066dd7c5d150660d18625adc6bd630fe69983f
SHA256aa507102059665d472df1050fcaf3c9221d2b052a0d500e569c137b710474636
SHA512920bd54898bb1d625c964f340bf043ab73464f0c1791f5f41c4c24b5d7d99a1ce93f3be663467708a2ca6dd240a0f30cfda38237960263b8ca3b7a3d91f59a81
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f6a224ad76dc19d035f2004d5d48b348
SHA18b2db2225ff05a7f186628b6b8f8e4f705c60b58
SHA2561d4a22b843fc2e0b500fa7b9469b4273754bd9a5e3ff7655abde6e067e39e83d
SHA512ce9c5770fd770728d20db91389abaf187de55f5fde6ea4e062fb0007ed281421be662ea1befb86be22b8c64c66db1ce34d947233bbe655a1edfd09a39b0ba473
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD523aa12ab88a8e448cc5678801085e4d1
SHA1dd9eb785f00b3d02b101015ac0e807a9c9b62dbb
SHA2566ef32b68d83e774b9ff76320e015ec197bbb3f8180fda58b39216c8a494b723f
SHA5122bd6e78c364281ab7f8edc660301fd0f08a56fdb790e9fe85c974e353f79ff90d55f5c15f70ea4add465eecf692a2c2b9236a615e78d76e615210902c77db316
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f547f491893fd5cd58e757187a4d429f
SHA162d47d0a61d2ffe4b7c5f1336ae0d5892a65071b
SHA2561236ac049ef1b8a70b9e562a667a1534f81876e6b25aab043123da184c46ac6d
SHA512f9bcbd3ed04331758fb9c566d3991bc536bbe750e2870151844236a1eba1c0f1b83e5fff5cc924a7191f5c655ef86bc73e59c8e3b538e0fd1cc2514348574c7c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55a1adb739d7ad0f4562347c8eaa2d069
SHA1437abc4196f429ef7ba193fe88e6c093ccba4370
SHA2564acaf762ed0858d97c009f6d45be008db66755fa789fc6150c9ff2016ed7f17f
SHA51293ff4d97b4d57126e73658f118c05e2ce032e8f754c341a289d6c87761a7a626911271391ee72411e393a16df95be2c1b87dd873264a19ae033e68882b9b626d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD588ef74bdc378325850ad7ea8f2eae3c1
SHA1b3f344d3220e7cf6c6c1a460fdf67983d0ebda4a
SHA25679a816412a31cfc6b4c56907ccac9e207e04b895a0ecd0466aa730ab69a003c4
SHA512c7f8c3a349fc9e4d836a160dda31eaa60927300edec19a657bdc0cf52619d0be95ca326b245c76811fad6a54588ea0afd45ad0df2734c152d65be37dd3b8ab04
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5455517e769ec6db9d511c87da6e3db1a
SHA1abd766a023dacaf1c5a4a30464424c7064dfd1de
SHA2561f6ce30b9d07ae8aad81ea0fd6771b8858d22b2ef7e15c22854c1ca9d12308ce
SHA512ff3d43671f2b8c4879e5ebc7889ff2ddb9cbccc70ba1683f094ebbb405124fb340763cfccc012ed6513750417e28a6424688a885904b6cc27c340a939ca8c7f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51c47d67d1e84e7fdde0b6874a31e9467
SHA1645ed3b0451fc6103ed46a6406d79db37bae76ba
SHA2562426a49bfabdb8e8994163914f709f352b716845bb8a228826c8d533afd7c98b
SHA512cc94aefe953266cc8207c8c1f5ccf44d4c19f7fe0c98f98e1a0b80475bfeb7d35e6e5e0e1e7409f644beddf5444ff790d011c34dd5f3659db38551a2d7ff30ee
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a