Analysis
-
max time kernel
120s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/05/2024, 07:58
Static task
static1
Behavioral task
behavioral1
Sample
45379b1872869d1d05e3244b584b4f53_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
45379b1872869d1d05e3244b584b4f53_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
45379b1872869d1d05e3244b584b4f53_JaffaCakes118.html
-
Size
128KB
-
MD5
45379b1872869d1d05e3244b584b4f53
-
SHA1
3ed2c03f2ce67d4d65d807c38a753cbb8ef77a5e
-
SHA256
2c1f89244528b4e33e5f13cb186d50873bebbb45bc1f710249faea37b5fa935d
-
SHA512
0b8abbc4acca9bdc48d105df804de9b6dfd3464b1f99b6697cb1dccc766497673fc26a0fc3d4c0a4bc2ec1703a443aae369d0f94278d955756cc9c34c5a60902
-
SSDEEP
1536:GlryLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsn:ayfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b000000000200000000001066000000010000200000003ea241b95d9e2dc4cedb1b410c3872c8076727ad199d743edc5b8bdf024ea3af000000000e80000000020000200000009a6c478d9a0719357e29cdd83fc6644ee579da7a452ef53ec011b2d65536cca790000000135fb09c320e9964848a4a4b55e64db24017a86d810ac01f6ef32b39234c27b80218898ddc7c1f04f6039b2992812b82790296161cb1c40251df937017b26107b1d4c663e8b55e1e7d03133937ede25c6221dd59dc20c1f6b9c8c768ae68fc9dba6c3dfe019148be31522a9fb53146760f6b80fc6669b5dd9d940df4dd3bbc03a35df65b244043933a45b6f839bdfeb840000000bd45b8d7f5657c2a3f9f1aca75b91e6d482e0bad6f03c42bd8ba2d3e14b85df83bd3cd569daf0e83e24c0f0ef54a2ea36a1672b878a4c50d0b9e0e03977d611a iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E9F2E131-1290-11EF-9960-CAFA5A0A62FD} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421921778" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b000000000200000000001066000000010000200000009178b1843a6f99081f5d153fec46ac952c2460d631430c457ce552f41c2c3d54000000000e8000000002000020000000cd771603b95d7104391008d8a5ee5128ce84a8f977f6ba46759e320d1c769d2a200000002842e785c298d02c697d80225aa23b317f27f21e30c4b434cb9e65c6cdc5aaaf40000000ea80a674251c8fbb855da3f1ab599fe473a3d14fd5b3602855149d773d223753a3d59ec8a999a5512ab1f794390adf0b975ec420c0f200f61492059d3d0fd66d iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 901f0cbf9da6da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2172 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2172 iexplore.exe 2172 iexplore.exe 1396 IEXPLORE.EXE 1396 IEXPLORE.EXE 1396 IEXPLORE.EXE 1396 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2172 wrote to memory of 1396 2172 iexplore.exe 28 PID 2172 wrote to memory of 1396 2172 iexplore.exe 28 PID 2172 wrote to memory of 1396 2172 iexplore.exe 28 PID 2172 wrote to memory of 1396 2172 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\45379b1872869d1d05e3244b584b4f53_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2172 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2172 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1396
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f1782fada58c55626e4dec8821db204e
SHA1398dfa81b1e6caa4cc7e05635ae4a322a25c0adb
SHA2563ebca341b4576a689b78240f4a8968f622ba45e851ee3c35026f4d767864831b
SHA512e4e9851d53f2878e14add754020762f7204729a64e68575702e2817926d53fdfa05f9630cd7ea815dbcb8537f90ef003e6ca2b311cc0378122d83293c7b4657d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD565feae77bc2495ef1598f802e920724c
SHA108fc3c9af8a8947aab2d45d6ae21c8a6be7e52ca
SHA25641903768550fa9ce3c59c0c9b10c99603e7bbe57bd4ea1b32541a0e07f34909c
SHA512f4adfec768fa5c8c3732e24e1ce558ff4c8457151c5322cde94809e07f8ce98b6ae5729273b100adf2dd883eacaab5857103cab0d9f950805dce58780eecff92
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56fe008cd82142a5e115aa95e1a4205e7
SHA1889079ed606b98dda48afd78ce7302148a369fe9
SHA25626b19fa75a4af9edcdf304ec1e299430e6a4dc39280a4bfff6ad45bd70a006a9
SHA512f92968a6db55220e5f12d2a9fbb44f5e641253e47abf8bb9bb1fc23e1d44e90d5048466c470889a599795cada072da65f4a610832bf7b7010a9c0da3c3176463
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52b5eb4c861f459f2f5ca199266f428a5
SHA1281cea6c783e849e76bd70a63870dd4e3230dcd8
SHA256537066cf2378c5e52cf15d443a378e36acb5cf8754d2783b6f7be76ef4ae1146
SHA5122aeab56de85315328cffcb8cce1f2348ba2923f387be2b6b4f2501c388cd3743a2c781871200d09c7b79fb52541e04050a8e3953bcc2720de4da31205dcc6adf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD580304f61baf294ec4e5defcfd3513b5d
SHA11d1c7900768e95fc9fc58ba090cf8d00042f6dc3
SHA256f59f7db530eafc8f56e94eb48d12bd52d0901acf5ef3a9c58ea6390ce7caa6d7
SHA512c6ea505dfa40114ea0e60c5d27085c4744eda0902c346a79a3ae713b33f7dc9635c18e9972ac965434e2419b8d8cef20283b29105170a0bddfffe9661cb3b213
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5000e05da320a5631517c5448d8129533
SHA193af43e4e62abb5e77d85d2860e8ed57a9293012
SHA25614ce95f71ce419755c99f11f44be1b16f677dda7b9090ca0adddc9a459b87dc9
SHA512225c2f167af0c1b5a186dd199eb4e8b77a9304c0aad8a0ac16a2aef3ecd65fc9b669f23159caa66f3b2e4c2dab13364849c1c20b7d3fba0b4a8c978692c1978b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD593ba9c56adfbeb2cd1522c48ceb2f301
SHA1b651268d088d23de1257007038e2fa995ae45f41
SHA2568d3a384b740f61a7011d49c6257f04d03afd6a12f0cf35a3ae813919ceb1670e
SHA5120c6b3db386c777e1bbdf5a1aef79d593d80a4cf7ab7a54acc47df5cd09bce72e76d7f9eb14df3fcd38f1667881f1b6f75c353cd2f8ff14dcb18ee9594460ee13
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ca052305b336d94a145bb0e997c91a7c
SHA10bfc32cf2bda0c2a1c03a3c56e84f0b5ed1b6b93
SHA2562c373ac34ae651cb550a7d22c473525f9c227162f4b372981b3af474c0892445
SHA512f4c52e83b35efc264c99b210dd127607814296c3aded231b36bee2bae55a949914e9168bd64c970c3d5ae8e1e20aefa0ab330de2143f396498a96d2a373878c4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD596d25e3888742279ffdf6b06ced08614
SHA1dd6c2313015020b5eccf2ab1c403dafe5a5b6012
SHA256ba4cb5718df4f8edf0ab2e2276058ce212d2dea843206b7b220fd06f715c4ac0
SHA512334d9a27d6bfe42cb62d64dac7850fc9a80b83e81cccff915b542be0d97881fbb8f83fb55bf7eefcf6d70aaa28b86a4a3d9007a7c501eb39ec0d36f762028894
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56366426d4438475438f35246b12d9136
SHA12bf12d4965a616f0e3564969e7eaa04b0a7a9a1b
SHA256c893c031dd723660f9fd2606459023383dcf709710fb73a23865a2cbc50b5fdf
SHA512f8da8b4979ec955d96f03ec9ebed3c32256b55991efe95edec36c4a80d697c4cbd8a46c0603410dad4b3ec96d622ac2aadfbb2965e61514cbea3b8bcc1e67433
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50ece58cfac0c86bfad8ea547186c79e3
SHA10d3d3ce1629fca889ff2b094f06385e676a8e70f
SHA2567a35896ce9bfdcea145e05003fd374150052ff5ea423746e80bd33ae27ffbc6e
SHA512b0464aaf5edbe67325ec642552ac12232edf523ff44c5bcd4177e5da0ad5c42f8425a56fcfa831e801cff4f9e47aa053411bb4395fc745b5330aea9da41b4c96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58617e47a538810cd280db9721d50d6e7
SHA1860c157aca900d819261c1b2315429e78d1779e1
SHA25648bf08142932d5e094baf9ee35e3ec5a8fc5bf4374eab48bd83ffbe5c0eb9e49
SHA5127e94eebe03ab69a088bbc5aa8ec7806e66f1a41036d2d8b3faee683b758db99e3c1927ab07a7d3a5a8485ab093882c93dfde5ec5ab8d6081d46fb787c4f6d506
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b4c8dec1402eec9926da8d73f61ba376
SHA11c4590a544808dfee1048f8a0f992c33f39765de
SHA256d8309b35240ca3138cead9e37cf730050e265dfac80344e5853287d523f9e9ef
SHA512a3f6ba2bf8f33d2ddb4d8f18f583d1444c0a49ef95e8a1a52820b0da237c745fea69cb1d3d570e57331d145b84bc4e1ee1864d52a01d727374c867a16170d526
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59b3b81add00a66b20ea948fe86c5a89c
SHA1e5c9f24cad5219324a8b8000429e6ed5b8f76459
SHA256d6e2fb2f31f6d46d6f3b1d98754e023d04f982880f211fefeb2e4d55131f46bd
SHA512e337b03e9c7ac49651cfba318c7f4d8aa9a9cf38479bf86a308a6194aad222859fdc2ebcda7f6728984a61214a01c295d12eb5926ae2e2999aa127cb008472ee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53f36cc75c7bddb52fab9fffc95be947a
SHA1769d3cb92d69dc0ea12bedc4b181cd711670e500
SHA256d39e663e65dac037bd63d1f96529dd494f0c0faeb585686bbfa7175c5b83e233
SHA512807729bd8eb3f2e4dde5c184de7dfe98f56a64707a8e5fa7f6054383182af040c842ee9863861cb4a4d5037923904f724500f56d13332e62c363711a847ba030
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d55654e18dcefda317e3574733a0b192
SHA1177ca6cb54f37938f23130e75140ddd6f9662ae6
SHA2560ca8051d38684885a2676a30124f86a9d96103c5bf87191fbfbea43d4071ffd2
SHA51272b1bf3afe9d5ff10eaadeb9d437b9ac9c94aacbd8250fb793672858b19f01c5be4160b13a166ebc9ffcd8c452a8d5c3acc940e3be056a39e49cdbbb02b15a73
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD541768b636e5b9bdbabe7c57e64728adf
SHA1b1232b06fc62c2b230d45bf40e89c44291774195
SHA256635b5cb2fb41f68b860bb02c8807ae9fc4d765a67158e33d71be9dece67853dd
SHA5122b0f8c3a4f15e8b544441a338c282c43a0f64c37448b86233e435df23eabb5acd974eea0d9c23ca90242b2538994d317e32806b8fc3ddc95ae997b4c624ee703
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a