Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
129s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27/05/2024, 02:58
Behavioral task
behavioral1
Sample
77b0850f44d083406e5057b85c046802_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
77b0850f44d083406e5057b85c046802_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
77b0850f44d083406e5057b85c046802_JaffaCakes118.pdf
-
Size
34KB
-
MD5
77b0850f44d083406e5057b85c046802
-
SHA1
d384f6566c4d2d04b6907fa83299d6a7f601ca60
-
SHA256
9e57428811d653a95a7050d2de147c92581b010135a09bf9a8255751936c096e
-
SHA512
5e68fc2fc4f96f040362199140e2857fc6211086af25f0390cccf6a447f3b47e61bab626cd949febd04fd0caf86e27527c6b5cc0f8298b4c32928019f4f3f03d
-
SSDEEP
768:eXuMZmwgCLWar+4fEL4gZAAr34DDl0AYVHQ:eXFZmGWS1ckOAAbW0AYVHQ
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1956 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe 1956 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1956 wrote to memory of 2800 1956 AcroRd32.exe 91 PID 1956 wrote to memory of 2800 1956 AcroRd32.exe 91 PID 1956 wrote to memory of 2800 1956 AcroRd32.exe 91 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 1028 2800 RdrCEF.exe 93 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94 PID 2800 wrote to memory of 3868 2800 RdrCEF.exe 94
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\77b0850f44d083406e5057b85c046802_JaffaCakes118.pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1956 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
PID:2800 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=BFD28B953F8C612BADAD99DB690EE15A --mojo-platform-channel-handle=1740 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:1028
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=386FFB5286929A574A6FC0F22916A2D0 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=386FFB5286929A574A6FC0F22916A2D0 --renderer-client-id=2 --mojo-platform-channel-handle=1748 --allow-no-sandbox-job /prefetch:13⤵PID:3868
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=0D458E69FF68CF5C2748A9A04B7240B1 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=0D458E69FF68CF5C2748A9A04B7240B1 --renderer-client-id=4 --mojo-platform-channel-handle=2184 --allow-no-sandbox-job /prefetch:13⤵PID:4184
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=BDE0A5451A832626E92014E4631E4153 --mojo-platform-channel-handle=2448 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:612
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=B0560A1D4F3E38F8686258EB8B75A5F5 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=B0560A1D4F3E38F8686258EB8B75A5F5 --renderer-client-id=6 --mojo-platform-channel-handle=2664 --allow-no-sandbox-job /prefetch:13⤵PID:1140
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=0384C41BC7D6B0E51685AF5F7F58C840 --mojo-platform-channel-handle=3052 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:4344
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=643F3264CF0597ADB102CC4F7CB10A31 --mojo-platform-channel-handle=2208 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:1320
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD52696bf337a5030a3a063423a590581a6
SHA1bcbd979ce180fab6ce93e9424ff5258a56a34fe9
SHA256df3dca335317a20dbed2cf2bc694fc95a12ab627999e1d15e3df0c6642ea0602
SHA512ea9248b3442637e74df3f5a74842d6ce74452f3782f37f7730e6da22948b4d9fa67dc2715ed4c6638b779ac9d7201ee46cdfa4141b2de7760d2c79025fc4f6e3
-
Filesize
64KB
MD54294123a7a12697af60f6ca3fdf0e1f7
SHA16f62d50eca30c77788aa7022828edfe6cd1359a2
SHA256a1f193029303f20a5edcce8d50a12be3847ad5bd020095b0f813132e055cbbf2
SHA512751ca01103ddf2ff3734c2222fd8ced36c43d84491bb72c11b58d20004840e3e941cdd152dd21d51d42084a67e8474d8bae9c1b65783650a851fd6840cd3d4f3