Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
142s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
20/05/2024, 23:28
Static task
static1
Behavioral task
behavioral1
Sample
614bfd9188469a5c31d5ff3ff9ec1047_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
614bfd9188469a5c31d5ff3ff9ec1047_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
614bfd9188469a5c31d5ff3ff9ec1047_JaffaCakes118.html
-
Size
503KB
-
MD5
614bfd9188469a5c31d5ff3ff9ec1047
-
SHA1
406bdb144a3f05133fee35e5e659d4dbb2d0680a
-
SHA256
ec7c9d6bebc915bfbc608f0b1cac953b8c4d57df565a5cd734896fd461114d0c
-
SHA512
e8e60ea694e4417078c088761acf0eac3cbccec994ead4caba6677a34c18f99b0d751fc5533ef339ae63e1012b851a9aa09c94d4d7604962653e405a8bd05d9f
-
SSDEEP
3072:wP+IpBxYUVq9zfs49PwVeL5AmPdmBcM2mq1K15:wP+IpBxz4tLTFU
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422409581" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{AA9F9271-1700-11EF-A692-6A83D32C515E} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2560 IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3036 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3036 iexplore.exe 3036 iexplore.exe 2560 IEXPLORE.EXE 2560 IEXPLORE.EXE 2560 IEXPLORE.EXE 2560 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3036 wrote to memory of 2560 3036 iexplore.exe 28 PID 3036 wrote to memory of 2560 3036 iexplore.exe 28 PID 3036 wrote to memory of 2560 3036 iexplore.exe 28 PID 3036 wrote to memory of 2560 3036 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\614bfd9188469a5c31d5ff3ff9ec1047_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3036 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2560
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD52861063c0e5b4b97b9bceeff935fe681
SHA16a4bb48270c696cf111fc5c27206e84aec145f54
SHA256104836bc45abba5fa0b04c6f65d9eb8c0d83faee20bbb2b515cc2474d5f109bb
SHA512c6f3ef2ece358d6cb29f7640e3b470295ffdad5229eb307378c71000999bca58ec698881aa2571c7fde0e50b0bc1c69a915996260f4618c27245b25b9c4a24b6
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_02C4C6ED250727F9B08935C0A9565568
Filesize472B
MD5d456a7204acd684da2f69c4f0c5d14c1
SHA1d9069189770d3c9e47cf4d3b1750ca48d4f2bc7b
SHA256a90ab58bc9b24fbe138bfc66a3062a01cf200fd9bbe9804fdb423fef3afcbe28
SHA512e8d9354b20bace68e8f66b2d7b45b792696caf6c1f4675864f1e4e8f2866c3e71bc4e99cdedb72b09a53d45749275d00e1b365fbe1480f18ca669f825eda8e2a
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5c301f2450b6e4b8ce1b651ac90a231de
SHA127a317d1c9f8acc6099e289ef2dbdad29ec1adf6
SHA2562155bf3055401ab12944e91a4f199dd1d4c6f6df2ef57e45614d88d1398b24f1
SHA5125d095c0f23374bd06551cf31ca5a549651357a7bbbb43e91b218b31fa11590539faa62e3a25dc7d72ee2b30f485150a4a407672bfd057e4426e2b5fe0452ce6f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD5b575a1fb2b22e0f0f93df3c56058b2d9
SHA11e990b5ffd93dd75b5a0cc3c54ef2e44cb77bd08
SHA25602694e59631c0270fc4fce44ca0d50d4ef25e2c4fb8e5ff5b334c5a1a88adec3
SHA512b573b3f408a89c2cdee1082a9268829b4f4d17f383b95039309a9cdc317d7a0285fd0d0064485facb45cce36c50d6ebddeb7bd6135d3b90be2f3e8afd168e4c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54082835ca6aad280671abf4ae4aa7b87
SHA10c195c39a9b79cb7dcb3de75caae323bb53dc043
SHA2562a15215a7ef7b805c6337747244eacc380bfffcb2b20cd48c6b1ce90daf950f6
SHA512a2ba71fabaacb431cdb3a59412ac6acaa61da37f256b54ac55ce3f2af061758ff4bba2e783d3ec2ef3212264bac4e2b7a75835a198e3419789bc9db78eb628db
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ac4ef8fa10bf5288b299bd69455cbc86
SHA1ea261f0847273ea82709436713681fd468beb60b
SHA256723a56c5f1d4bb9476894e8cc0acb3f3272f2d42cc0be2275576740c3b21945b
SHA5121179df4a87952554f3c54c880e4c7dbe4368871df9eebeec6b9432bc324857a2a1cfe3dd2b407d5b10e9cb5ce1044aeb828e8db2916c6d4c1733bc2a63f35732
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a49a5bd1654d2194047dd5171a3e4924
SHA18d6fcbc51882331ae654ef10a10f2ccb28bc91fa
SHA2562c9590b34aa7d2320189b9464cc310ead0e514a691c61c997df9a6f903571514
SHA512c98fd8b445f79ad44406eeee33ea38a1096195f54c0add5a0f9d31077df11477c495145b08109e18e8960bf8f11e7f6ce26cf46800dbdc2cb5ba95f3ba024920
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD554e1d3df1f329de8dfde4022ceb45ea7
SHA1642e241df16b18cfcefc4a3a1d4ac510304e3f6e
SHA25653ef64e20785763c346e657fbbdb8bc75a3dafc94ec9227091d7dea8840bf34d
SHA512cf44b42d80edf3755349c75afc4929b172ed92926f5980fc8ade2e0b9984608c6a49c195f8e0104cf33c193fb5c970d748f523ae889d4f0819e0a173aed12a4a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54d40f4714cb17c6147e5e02858435930
SHA1466391bab9fe0a4e411d8553124bf09d540156f1
SHA2567650a084a811abbc1a741f702daa62674cf94fb05bbdc7e0d674226a8bd0eb34
SHA5120c32b923ba195a34b4cd42eee4cbd2c9eeb3ab50b8929d677640827b6c57ce3689336ff10e7bcf7cd669633942897b29a652198337cd1b43df003fbdb89973ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5530a09ef72c5a5a64730ecc043077fd5
SHA1b91450b18a14ba09aa8eee7027e1d120dbb2d0cb
SHA2561a19f5875084942675b3506263637217f148c7d761b82fe2b9d1e7d2343f8f19
SHA512d61713960f56a6129b6606397afeefd9b75d23530924922d264232ebc3f549547626e023d1b767aa22411e115a2897958ed13197f1ca0a8d75c081f77be18e2f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d26c3402df77d9bfd42480813ede0601
SHA1a9537283a30e1d0c6667d9c023191a1efdf26c63
SHA256d7b87aaa42f29e3e6a7ce9ba5c52d871c4c340f6f543c89baacc7aea52759ccf
SHA512abf00e9022408605004e79db9731d4e1993c9f5c3a4f363dde6699f3bf9bfe23f50d1775e04d1728a7329f65375ef558398620ba56d10752deba515ec3e79208
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f363051362c19d6d1a8a5174d2c9c62d
SHA125e151f02e38c0e81d5b8b0e034d43afdd25efcb
SHA25677cc5a79341d054e2705a5c04845b8db74d3d2eda4f735ebc90f6ff05915e07c
SHA512f73970c0e763ca646288bd40de458ea8b7ed7d448a0ebf31161896d02911e86753c4a6477a3f8049716e7bbbbe7b43fe6cc5c24c3814f0c871ee2ff2cebed532
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a2a89042e834bf8013ff7052f148d06c
SHA1c24e3d1bbaaaa3a324c9b69543bbf3269e48a4c6
SHA25615076313faa1acaa3289af9bb1b6eab602b7b6b293ca0d47ba24c65b3e244cec
SHA512190a03a0f590c3a5f2f96792b92e5811760fdde6e6e8066aff0ffb34e8ac3851632c0a27962ebc01e9095fa2c668cc9c35d05be68c1e748f716b790ac5520d78
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54c899f036dda86a0eac1912f90330604
SHA16ee2576badd002b22a86b06b761976e85d4c1baa
SHA25685b83f48d2aaba4f32b359b725a098a9919a6f142762c1858be6c6b8a24792bc
SHA512b32d286dfe744e0438d27f3af4a0d2df12efe0e3cb152ee4c8fc65d112f3c52be1535a5476a8d450d5e2398652323719b6093a4806baa1164654106dc03145fb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a946d858daf46e8e86a47e02b747c3f5
SHA143ae928ff5241507e6b609e4b77e68302a30f524
SHA2560f3897f7bf003127beda603459ff7d634989f1159f98da0e35a7730863aa765e
SHA512b9c5cbf4244988d60d30fd40c4b74e080710761ba10dee4b2283188226a1bda630e3146150391448bd6504ed637ffcd1aaa59db495c8ed09933dac0df15c4a79
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5763e140e9f9d1f393c9412374c32c999
SHA1daba72759232388427910e04bc8c09d17db8af31
SHA256d482c9e1cb5054f9245336c2bbcec9efec7cadf5a6cf9d0227a6dcef3efe45b9
SHA512915f4c701b0bbb7b11a668c8ce99f7dce13d91e89a174fc25bb3bbee76045de2323e781c0ee26c72ae1ab5f8497c6eecce3eef8f2ab145a8c3b0fc96fe59ab60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD534ec3cc9df4462843e40ae3cf663e019
SHA10d91d48b4253d50b06bb29bd2b873ecda6df8213
SHA256833967de1db8e825206716c29849db89c5327c26e6cbf4c3bae170039093bc87
SHA5129b097299ce143783dcd27d6eb030c7f09497d8eabbe1245f1e28340b112582615d6db0f52e50c5bd8e3f2bbdee9e633661b80423b86e71a534f28a2a8ed1f01a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD56e7322fd5801f81f9ca4b49c5ee80b27
SHA15f38d0d8bafa9b88081e6a32e37a269d3dcdf037
SHA25652a99594a356cb47b12704f5538b46e780abec43ca3a3770cdbd999efb93300e
SHA512ede5d8f73b78866a1d1b12e8de2e9ee2ae5feb3ae5679a3dd0c5cd3dea3148a70d40c775396020106c9d9865c175068503b3013f6f9e13f757478793d786435f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD5d09f2c1ed4c41a5acef8deddbdbbfff9
SHA1ac7c3496416f4a638b978037cc1068ea5d43fc87
SHA25637431b585fe9c9388eeab575bd131bd8365427c192e1590e171c92f5982fc4be
SHA512465d62c4ca803ecbc31375776dc464b5e1784981cb463140c8ea189ff81ea46d7f9eb5ffd02d6f1a39d037f8f6e6fa26deee5fe16c88cefee05325f37173efe2
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\cb=gapi[1].js
Filesize133KB
MD54d1bd282f5a3799d4e2880cf69af9269
SHA12ede61be138a7beaa7d6214aa278479dce258adb
SHA2565e075152b65966c0c6fcd3ee7d9f62550981a7bb4ed47611f4286c16e0d79693
SHA512615556b06959aae4229b228cd023f15526256311b5e06dc3c1b122dcbe1ff2f01863e09f5b86f600bcee885f180b5148e7813fde76d877b3e4a114a73169c349
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\platform_gapi.iframes.style.common[1].js
Filesize54KB
MD57ef4bc18139bcdbdd14c5b58b0955a67
SHA1afe44fd9a877f81a3c36f571c0fc934324c6cbd7
SHA256192bc707852c5986f930528442d88a79e5bcf4513aacc2b722a3c5e964501838
SHA5126c2920e80e4d5059588a32f75bc2b5dcc19f8d68224c0935d74f9fbf49476ca5b1ce43c279768f3d36871dfcec39f36db3fcad559c2f93cc540154cdbb04dec2
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a