Analysis
-
max time kernel
133s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 22:31
Static task
static1
Behavioral task
behavioral1
Sample
68db8ad51845cbf59a8f36acb6612f83_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
68db8ad51845cbf59a8f36acb6612f83_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
68db8ad51845cbf59a8f36acb6612f83_JaffaCakes118.html
-
Size
112KB
-
MD5
68db8ad51845cbf59a8f36acb6612f83
-
SHA1
9537288cf5ba1885c7e72b504d60f85c7c600f88
-
SHA256
3a8e1b1d994631f038f0f78b9acc84313d4e569f4a3f7734434e375df7101cd3
-
SHA512
f1a96708a27729ff46d15533d047daab3d145c018463ee0bf07315a74f320e743120595e502ea5625041258e3cfb5271101a700a8f8cc7ccbfe248bd5f2308f9
-
SSDEEP
1536:HoyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQy:HoyfkMY+BES09JXAnyrZalI+YQ
Malware Config
Signatures
-
Processes:
iexplore.exeIEXPLORE.EXEdescription ioc process Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{FC854A91-188A-11EF-BADF-D62CE60191A1} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422578936" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 805a10d197acda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e9361000000000200000000001066000000010000200000008086638c449333c74ab36c268a647e607ef110d4f959d8be09465888b891fe17000000000e8000000002000020000000954514d6485c363f71f9d9bda2be767bf9a6aacf9de97e05474a4f6f1411ff9320000000f12a69aec7276fcebbffb423f52fdedc4dfd4e66905bfa5cb286e579584d2dcc40000000582353115ff9f838efc555737b47a2c13f789e8b6306f96060edcf737d00a6e2489506b007ee99c9b00360c60b14406c139ac02d4f2a9b396f4136c57258b3ff iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000bd2a7708e9798e4fa0b20f3efd8e9361000000000200000000001066000000010000200000000427e2e6969d8c5efc23f8a9f9030ee901877a60fbfdd731ef44cdfdd01fa7cd000000000e80000000020000200000006fc909068a8e1d43d8de5c41efb717024c4de683760ce9f1989a90b66ea1e20490000000fe5dc5a1e4c2706e48bfdc7b16ceb11171d8f1dca831b6d5e60e1c41bd180ac21c139a20f29d88f02fb51ae4915f6f81b6d18e7c08ec0f26f22ac6c564211cac9f991a6a9b2ed3b4e2039ba6f1ab52c2873a77d0687f49d4c944b34a68e4eca9299e1f1f00e1a1c16e7150e8ae5c1f66e66d125ace8fa46cc92c16bd762f7b3f26f215ff3f7d1dd96ce54676a9dd82ae40000000e2981a602fa74e887cc7405367607bd522eb6d09cfe3833322e990e449683c2e4715d26700bda5e1628a753441d8777d2d06fa9c78219d91344d7a89449d6499 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3691908287-3775019229-3534252667-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
iexplore.exepid process 1284 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
iexplore.exeIEXPLORE.EXEpid process 1284 iexplore.exe 1284 iexplore.exe 1996 IEXPLORE.EXE 1996 IEXPLORE.EXE 1996 IEXPLORE.EXE 1996 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
Processes:
iexplore.exedescription pid process target process PID 1284 wrote to memory of 1996 1284 iexplore.exe IEXPLORE.EXE PID 1284 wrote to memory of 1996 1284 iexplore.exe IEXPLORE.EXE PID 1284 wrote to memory of 1996 1284 iexplore.exe IEXPLORE.EXE PID 1284 wrote to memory of 1996 1284 iexplore.exe IEXPLORE.EXE
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\68db8ad51845cbf59a8f36acb6612f83_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1284 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1284 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1996
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bc41650adf608478ebeae1243b58901d
SHA1af1360981416d1b388e980fb426464701934da71
SHA256060ed407adf4b57eddd28786789c09a415af3af29cc3ec1271f14b0ce094893d
SHA51288d32e9e02cf4488cf652c646259923b0956c1b185eaafb3086ffa02d96c9bd20ed450530eb6412ee873f6fcae456d1db935f38d071c0d6b469a41adadc184a4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fc25ea6f132dc112e6c0f4f19e0fefc8
SHA1e127e2d9e5f7f9dbaa71e713a3f790a76ffd04be
SHA2563ecac6e1b166286839d4e7ce43b1c90a72f9cb8c9484a40aa0b6bf4a58e08cbc
SHA512e91bc2c948a430f34e6ef1070eb6686b24a57b62aa6a2c550be23e8888a4eca6689f020368c1ada4de91db1efe2f84ecb6a1678a9eefc9879a9e9fad3287ec12
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ae48f3b748ff38ffd7575a17fc9d590f
SHA14321aa58cb485da15190f4bc6155cd2322180da6
SHA256485c8a6ccdc8a77ea2ebf3018fec31444a2d1e6e7388e1740dd01cdb16338f10
SHA51230594067d0c7fb1007b48b701db14d774744b93e5f33cb0d4a45ed9cf913f739a4330eae790cf21ad2fbc24bd1b6c862260db9615b3b765bb07031547878a0f1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e8cc0eac5aed6be2ba39ed711de08bde
SHA140aa771768de0f06d1ec5f7f10d32bdce23053ce
SHA256e872b6bacbfc385f0f83b13213231d7d0aa4dfd65f9ad00717f9e5a1dee7e2a7
SHA512073d7b3724fad9fc2f6e89f7728e9fb5de0c2f217d36a54ccef060e6ed716c4e3f4fc59b238a076c4a3d438f07d7833e99831eddd1198f377115183504b20e94
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5658ee31034a986bb1c00ac1b2f2138dd
SHA11ce1e4f1aab6ed53295e6fc1d805bb852e2c3afa
SHA25677cde0d77f845aec978b206b98c124c2dc394af862c40eee72b0e84a212d7998
SHA512e1df668d95a1ee42409f81701f0c4cebc6252d7e3b9bb49a966caa5cc303c59b166269e2582f0dbdf7eaf40beb5d392c9dd0d85c5d614693a968c2e767c49555
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5447862b19d5c7e82925d2159a54e5d31
SHA1085dddc253686c9ea50e5b18326949db43d73d86
SHA25693285c9e020cec73f59298a0a18fa9c076f63f258e66e233ac57041422afe3f7
SHA51218ba75fc7cd775cb5e00cbde005d782bab2467cb9fa78b6047ea655732f5c47f51112d2a18b08d6752a3b4ddf6c052eac02334fec81f7ef2e1064ea038b6d6b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57e20a45437c23adfd1f55dcfca73f9f1
SHA1ef851b061c2568c98e4568efd16efd5a83267793
SHA2560bfd574b6e45447680abca4d3f48ee731b529b849936b5aeecdecac5a7747aed
SHA51243022ccb0a3073358a8b7356e0ce95e065ba3650c6362cf3f62a5d37ca7960db583db26ef9ccf2dce8e9fcff5c41f04701253146231e33b21c6a740ecf3c6d57
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD596b95bba765fa7161d2a5729b212ec9a
SHA1bfd82c492704eefcafd99d85b5c955461224df6b
SHA256325b6b904cae5e4c07fbab1aeabeaa4a34d07a1a0a6b33ffaa8a914c178df527
SHA51214dbcded3a2dd58cdc74f16eab0e52405a214b405edf4f5486952aa819af107b6eaacfd708677300b1dfce4e672ef55c35f4f5de0b77fd8be769abc6d8063bbd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51f8c3fed0e659f57aff8e67c8b05d987
SHA13d0788a9685a9e78dd87c4bee3c21d981a39d448
SHA2567a4ebfaec636bec8547968eb61e4f47b27c1243f717dda33a04054bd4419333a
SHA512f78fe1cf3a58d854fc9c76a3051110800e76daed9b8b7503d25da4212003cf057b3541234fc48a6818cc65013a987668212c4f6ada94ad1f17d3ad50c26361ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53bfed78b7e2faaf8dfb5587eed412e62
SHA152154fd4900dd272ca4dccf61cc13c3437cd8abd
SHA256db234e49ba575d86065aea0954aac10f92f39ba13333acad11b4119c2ac57b87
SHA512ddb8a597f0f8ff73c5a8dc391e2d56aa8389edcccd28e28826e6743b370a49f2762790f26526b31e7739e323a4801b06cbf394a09a36ccc58b4a07070b680b3d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d375626fec1d00449725cee32a9cc0f7
SHA1f3e9e36eb7bd3e3b67f896b69331efe3cb7f5333
SHA256b7b6e66b36ebf1018499b692abd490bd269745335f14aa5c7e08333e069cd5d5
SHA512cf0318e7b1970eb33a5681250c746605dd9a3cff449ce687e6950b9cb17bce62aed1d9d84c3c8621860cf92f828ae911a61136d1048e0e9f5f71bd1ab70ac803
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55eaa783dd8be9ef8769da0c452753644
SHA1624dbdb00c19728d527754a933d16f752e9583c0
SHA2563cbaa1e0a56c3ed652a5bd5002b04ecda66ba3c3c040bb2102acc33b7717ad07
SHA5124bcd5b45412a4530d150e93d7319224074825cc5db742d3226bef0b213cc89c46139cbc16a817b44db78a874c55c237503bcfe0033b565021e0382874df5cc79
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55db5a9b660067bb4a8ad93d61839dff0
SHA14f75b83f345c1aec637d85ba086d46ee62c9ec51
SHA256e2790c137c63dc5995c5caef58cfce3bd2066a3c39fbacf0db25d4976b0f1b48
SHA512c2557753d214e82302edad5006233a232916f16203899b0ea3c23b6b9d578960ea101aa2e0dec5da096c1bb24e06620e9fc8b49c21abec4db6a43e3d030c69a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD536b3bc01c9a20fc3611cfb48323a656b
SHA1788079c88809c128f0166203a5a18a8c0fa10937
SHA256c4ee80f93c55915d6d6a736462093bf067e2ca11aedcf62c45532178e72992d2
SHA5121f28ee7a222ee9eb78b014fbc9cd298e9f3c74a522890cc17ad7758f09edca45a62809c69ee14d27c76b20a72bdd7e9c8f9c9c0f7e996fe27386e806aab6ded7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a011dfb0b191d2f9ead2a3dc3c9673d8
SHA11cee50f246c103a89d8bf7368c3a7955ed2556de
SHA2566be248c0ab1154e329aed4b31ffe9ca28f8b69dab3330cee33b72cf54aeb76ad
SHA51245e5b0c058b15359606a5bbd0b7b15c073a71a5ff8cccefe4cf34cbb160b75478e80aacdeddcac336fd127c8fc4785d7da695d979ed25c5ca498c37410008fe7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5db84bf810b181f0dd8fd15b96ee26a2d
SHA12838ff996834090c1700e68b6d1c503a23a77f75
SHA256b01b1b015600c497e47cf1825fca1deb2423339e5defbf42154d485e3aaf0cc5
SHA512bafc6827f7d770e1fbc4fc8b68127c620066a496ce477dac91ae2152216a898ac7c47c38ef6450d0c93e5ed78b537f1acef3d0b2c87964792d76982829d3e9d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56bc4d78d1a66ffce5158024ce25f4e08
SHA18363458eaea2ef41d2a640fabf5d12d636431bc7
SHA2560a734b2f42471f236e4a26352c11e4dfad700a981e08202c3635a1f21684851c
SHA512288778379084ca1225e4f2057bc4f9ece54e1b7e6393682fe730e07c80d0a69318c5c91fd3add63a8d79cefcf5088fa3d20420832292fb61817d8a76da9c5485
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a