Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    12/05/2024, 16:47

General

  • Target

    3b1b720cfcf810badb4f224d0e18e77e_JaffaCakes118.html

  • Size

    34KB

  • MD5

    3b1b720cfcf810badb4f224d0e18e77e

  • SHA1

    bd62bb5dbc32826ac4225046fde0d63b20878191

  • SHA256

    a894a322a94b8380dcdf63246dd941f37cb191ab993477e48d18a0688e96538c

  • SHA512

    09963a8128dfd58a59f7daf2ec53bc2183c68ce991c5c1a0949c2459ffaaa60cb84aac691a2cfaf24228a6cd0b6659892fe42dcfe6c5f7aa200369e5028fb2e0

  • SSDEEP

    768:PKGkDQyuAta056ureIpBAwIcEeSf7dFVhsjF+xc29pp:yGkD6aNpBAwIcEe9F+xB

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3b1b720cfcf810badb4f224d0e18e77e_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1280
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1280 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2492

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    84721cd35068ddfc92aa0a4c829fbd2a

    SHA1

    71d7e227e0f3fcbb585598d0f3757a8935b748ce

    SHA256

    bf8250097eb58e963c7cd636093d2a332647af517ad22ddebe1765703b8dd199

    SHA512

    f08b89715c28ae36927316d6fca1716dbd9e935edf9d7e979586c4e4610fc29c83514e2385dbf43e7227f8275603c5cbd85c2a098be6ada95aee1a24c5e23dfc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\A16C6C16D94F76E0808C087DFC657D99_F82FCC341F124F6AC9D153F6ECE89FFA

    Filesize

    472B

    MD5

    63360e266c16765ef03b054c04535902

    SHA1

    7ef99a2ea760e3bb3e7c0b52867861f47ba7a513

    SHA256

    b9b9a313297ee06e014ed4290e583c80d22e00cf0970509d85d2c164fe797c55

    SHA512

    b9790736c90073d43a010d4945027cfda19dcd56090e28a3b95966bf8ce9fa03d5e8bef8f357b6da5e89da7ac3744ed2c681cab5e9816879f844748cadbdaebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    a65e246d8c573683efb9acf70bd3e760

    SHA1

    a90173f1947baa056c90b5624642a7b48ba40b66

    SHA256

    1b85fa6dbc553fe90777a64d03b4ec13ae76ac7801411e83d3ecd1e387662926

    SHA512

    2bdecabee172bf02742f6caec963a9f1c538724d142fa1568d0e465d72003c51f3bce8d5e79fe9782725283ec225bb99c87648978d5d619d7a5e4204ad9aefaa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    34a2d1b14f0c979eb7630a9dabd704bd

    SHA1

    8fce83f1605b321505714cb72e865951fd1fb08f

    SHA256

    438bb833abd02322bb496b407f75b4f3f7632e21b0e1d6defdbf94fc891c33f3

    SHA512

    1238cf808bd7eb9d592fe4fc91d221fcca62e5ecafa207aa6486b1d3ef9c5fd5d43617ea1e5f881dcf6b5b6ab7f42f30ee93af3a10e00ba8da3940b3af67048c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    c9066b45bd587d036f2381a8ecf75e83

    SHA1

    cbe7c8215b6ae32e75b802af06c6487c8fc0ccfc

    SHA256

    7d9db03a2ef91147a3a48805d085647e63827cf9f338ab44af500d5b7c72f674

    SHA512

    d23a4ff29246596683c7e399552d150bb5ff6589b17c359ab90089090cf8dd06a64d31049ad033b73b593b70873baec4284cfe060afa98a9f029dd98b06e437d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e702a6ca02a199737797da62cc395279

    SHA1

    86c5864f6a26af8ac9d793026e89d58d8faaca1e

    SHA256

    66c17709d6581b17d6e01a9c09d0504066a23715c3bda6f9e0fc4ab8fb5dbbec

    SHA512

    dbddf7efad77b3d94d298ef8440ab2a7333fa6951176df031b2a3ba3f32c2fdcea01e4dccdf6538cd9680adcfe32f228c67aa799958002a029689c20158078f4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    fc005c89fb5febdc17d2ff08b4c5f57a

    SHA1

    74b4cadd9c5ed769e104f686526c41bd98dc75c9

    SHA256

    f1cbbdd79feddd1250a29f2a3248ccb0b4063eeffa06748c3014dd41eacd0512

    SHA512

    375f081436a2027451de5d05acd66a246c700ca5054a63a865cc403f99147fbcca733859756d24172010176ae55ccc5ca7af71aaa1e4d6ab5d35b9a493e72021

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    c4becb13748d1ade312d785c8690604a

    SHA1

    1c2578be45d41c56b764c37a96a7f9bf95c6f249

    SHA256

    8ca1d3305c2680e175e967c7856f319521539270636a58a56ada4e92e3bd1ca8

    SHA512

    7c1d984328ee5881ded81d603bb1a4b236290b323cfc45b3b8f27abc9c1924b482da438cb25febe078116290f108cb20fa3f7e769de14a79f2019f3fd4679e6b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    a40bc36579064dd9539734064e59b6ef

    SHA1

    ff9bb51e3d922b7cf38a2b80675e35b6ba1f27e3

    SHA256

    52bf6b720693c77591a14f4b5c177a00ee1b3eecf91c1de40546fb9ccd1931c5

    SHA512

    f0d4e2758d0bf3e0c59ed07f2a65aa0dcc7ab76e22eeeebf3c61ec68bf38da444bc8ceab39d2eaab067c219ba6b18626a995857db93a4f43e71d82a5dd2f7e0d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ac0edbf6cc3e4c47ed3ef3e119e73473

    SHA1

    fdcdd2dec5b28bea305be88a76399e173a50391b

    SHA256

    ff1c4feff1aa9dd70652bfbdf4d6fb5d102f8ef54ad31c816a26bd77fd8fb885

    SHA512

    a62d38130fea7e23b3d783369717af2828acc0e78de7c3ab6948d33989eac7092c112dd516a721c97e6b801e597e296dea2f6bfaa8af0dcb67c771a9e38f7acf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    941103f50e849186dad43cb747fe9415

    SHA1

    d49376b95663e7cb2e53d9b9ae63fc75d973eed9

    SHA256

    181436f04232d4d285a84cbfa3816ca93524b454be4548b1d85cacb1b4b66e56

    SHA512

    46e00b2d8293832a2cf0fd3e99dbbb9b0d76903a9e9132fa0551d8b843e3ec5c630a2dc5f8ed83cadacf8b57016c5e0efbfba92f64ebe00c9dcb846fd5687bf1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    55f138227150947d5a29a331e4912992

    SHA1

    e467a33fd41d56c8a40df48443d3eb2f5defbb57

    SHA256

    a4f5a92132d6f591f71bf1ddcac6b9dc6699ec9dad6548fbc072b5a9382ecaaa

    SHA512

    3fd77eee852703fecaf9e0e6218431d86f90774abf4d64b1d3eb4f3438770814e9e7399bbd4b195866ae5b277afb10312df06e36e6ad4af82bc2e0effcc6dd77

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    60e98aac5ee3fbb1b4fa81467b29c272

    SHA1

    2ba9005f83cbbadb867ec88dec90f95aed5687bb

    SHA256

    312cbedc4cb514c9150b7b5fcf3d49157fdff2ccb47da5d86b8df6c09da916fa

    SHA512

    25f510f9a55b1f3b84ee3263e5ccb2d3263b14ee697c20870a4f4a2eec2dc6a857b0f85f1ed7bf0963921cc15f196a57bacb3ecaa87babd3396d0971259d2ba7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    2c32b980b4f531789163c86bb2a7c157

    SHA1

    a7eda31cff24672998b4e1a68619fe71b55f24c9

    SHA256

    68d244dce2874938a19bada24f766fd4a8fca8c48aea3e903c157c100256472b

    SHA512

    65ca64d95f18e29245ba5ad8f88a2d1d0f7714dc059d6c3474ea3908c7c6494eaa275df86dd7b454daf14d57a5a022862e8ee3a3725b8768e8c129a351aa200f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5f2f67aed84887a86be94a81acefeae2

    SHA1

    405156d60367ce201c91499b080cddf654f9e7b8

    SHA256

    95c166d09046dfc251fb02ad81b322bac02f39c80e83cc4cf13e95393de47906

    SHA512

    191e82f63ffd93f741ee1aa5d2c67ef9657c460151c9853eca5b6448ba6b53fd56ce70be6cc6efbd7f4da4de50932a95d04f1b0afa4e72e8402d853b222f405a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b38b75144b8d87ee909ec52f1f48dffb

    SHA1

    f3e6992ef3e296c19961edb3231507324948fc5b

    SHA256

    cb1c9eed3f69d1134215ed245ca2de91138f9701c02e37f7fa345e5a4ac8ac43

    SHA512

    f2b7a384024a926cf2d9bd67d3a3d299fe3847c355f1d07f0f065e17e9e281554a36d5aab0eaf757288412d23f81576f061b67e48fe2210915b592aab2a7533f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    785b4ddf87a795fd0b7e4793cd395ec6

    SHA1

    8462c73a338605a6da505b3c84f892bc53dcc4d0

    SHA256

    a4fc0ece28bcef1910fef6c07c609136a47aba3051a7546922ed57aad1cf9cd5

    SHA512

    77aac8974f320e8c9dce25a252baac4f2bbbbcee296bc3bab596a882a1282ee8807cc40907b415588e645f506f5ace16067148c23f5ef83a659a0b3168a6eb0a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    28d1e5cf62c9d2a3586639fc45ef555e

    SHA1

    9d1dd45355d25653ac245e1ca455c0d22d4d6c14

    SHA256

    e1ac27058cbaaa1b87aba4c8fc284e42916235125d570be09a25c49ca2734148

    SHA512

    c0ed82f701411355e7d024ca6a16900be22df85fa240381d8bd3868bd4793ff614fb1db11a0f28939b377fadb564b8c9c5c4ee75d38d5cb05418b9066179df23

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    61f972fd88df3b64655beece0c11ff18

    SHA1

    f062d27fde20804746c2ef3b58eb8ce7b472e2cb

    SHA256

    0e4240ba74088b1c3d88e1e537366fc34e119d18497171757dd750e6744522a1

    SHA512

    a9c574b217a5d1284df0eebf9e1e0632cd1b8ff5246b8963b3007e5f10c450728b05b0025880d4e3fd76e6315ab9104d94656b2df7cdeeda5e5e83708a1655d9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    3ab3293c0efb78fc767743483ec65c73

    SHA1

    6948776272ff2b69136e0f12795b719dc948ac42

    SHA256

    cdeb58515211e6c81ac43b9d00ac1645dc86a7a8ede12972362fec9c83c1f640

    SHA512

    91590249b7e4f671407e97675305fa4aa74130dd639fb150d8b2eea9eea87215bb7f084049d026bccf3e1ef40d291ffad3ddaca478a5769e2d6caef388740e98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    ae9d06dc7b7e691a6db4662e97aff8c3

    SHA1

    1abf644b593a24fb5fe03bc6e7979ee8f0e89cf4

    SHA256

    6b6244a04673477c39bb22c4b60daf5cd8de80ac97a2cfe130b942734462ea2a

    SHA512

    1545ef112237c416c970dd76d5421d87f474e67dd2bffdddf6afdf53ec899004acee5530ff2d62a1f3e919d23848825bb575190888c45ac56d4d92809f2998bf

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    099558fb9307bf462f3e4f427714fdc9

    SHA1

    857434f78567c17b336413f05871e9227859af5e

    SHA256

    9a8b24dfc6f4e972cf4625d92d4f74a1a62801f2aee08ae5140a4833f4fe1104

    SHA512

    5b17a3d45983bc3ffd059e72bdc3eaab551daeea19713283657036fa3b765e4cc78a2ff6cb7f267667aa909c310e0049c207bfddbf9f2b27257863bcfdc0225b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4f34f822187f3d20106075fa932dc80c

    SHA1

    e775da8925e6aa424df6d652354dfba28e2eebc0

    SHA256

    00aca25d906771e284d46c1884010bd029fc6ff98a31cbecb4bf884999ff4714

    SHA512

    ed0040bdff91445d31381b22ed465d246b844ecb6d4c2810aa7434ea11bebe6293c3ece9b4de3e51376ddadb3284ee182e981b8b1352ca52ec0876c7cbdad265

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    2aa9ed26da09e3bb57d976ffc6694d1d

    SHA1

    e9949ed90973fd96847bba9f2e9351094c4da1df

    SHA256

    e9da6e0c7be2f227312693eebcd9511d83fe2a4722c979480028cc210235a667

    SHA512

    9b2140a7b443b12cedf72624763abd541a84db7809311f6ed6186de9237c1a5a8872a536147175a1069ea32d1d702b117f85bd27a0e5cd17f4860890ef54867d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    9988a7ca3b3878ca910aa8ca1db960bc

    SHA1

    8cb15620aa13de925a19b7373de24c756f53d4ea

    SHA256

    275e587f763898e062fb6ac1d50a19db52562cddb0b7b1967b74819a79f59128

    SHA512

    17955ff98324ad3951d64482dd9c63c1af7b8d5f60a87f49472c3ec6ac7880f143bc523f141e83d50c9653d6e2988d031559f746502fdc1632eed60b94248d4b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    dc478d72a6cbbd1e31acc0d09a6ff9f4

    SHA1

    193e035d1b52e4a5f409223b16cda47884a46bcb

    SHA256

    858ca74867a1a0a8c34c224586bfb5af0a1da92a1ec7641299983883dbc1ad9b

    SHA512

    6fb55a5c4c870389483ddba855d3d4c5983b246adfbfb580f4b7908411a422b0996ed2da8f3003f7cca1d25e9aaca11d98a0e9392fdd67fd15313859b72c9de7

  • C:\Users\Admin\AppData\Local\Temp\Cab386F.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Tar3892.tmp

    Filesize

    171KB

    MD5

    9c0c641c06238516f27941aa1166d427

    SHA1

    64cd549fb8cf014fcd9312aa7a5b023847b6c977

    SHA256

    4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f

    SHA512

    936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06

  • C:\Users\Admin\AppData\Local\Temp\Tar3AE8.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a