Analysis
-
max time kernel
120s -
max time network
134s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
29/05/2024, 00:12
Static task
static1
Behavioral task
behavioral1
Sample
7ee3721b8c2be28182bd42cf96285b52_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7ee3721b8c2be28182bd42cf96285b52_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
7ee3721b8c2be28182bd42cf96285b52_JaffaCakes118.html
-
Size
878B
-
MD5
7ee3721b8c2be28182bd42cf96285b52
-
SHA1
6dafeb91d2827494d166d58899e00b3a6df7fd0e
-
SHA256
86bac7400160d1b638c6e92a616783cb5ba319760886e022141c8d334b509fb8
-
SHA512
17d285f12f3e604a4a3e44ad0fe442e18c7056b0132b71135769e1e7c78406d17acb66c89e7465f4ce3768a738696738d4044978f9cd0dbaec8328e8ce2ce1f0
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000085c2085c2e2a924b921f849079c41d530000000002000000000010660000000100002000000035f21bde010125cbc22848bfad7cc27265b2d7b85b66337e705d8564b6fa2633000000000e8000000002000020000000660c13f528d755cdc8502df88e8a0e310bfde61a1dee3e82f1a61235d784887a2000000038e897f9f1104f59823219e6d90c8c86efce6b10a576b5965cda382a67556bb640000000b987e7b0f4ceb1fd07a47f32a27118850245751dc1c4ea0dc803f8a65e3ef382abbdbb9801e924ea30f236a2c8074928e87faaa5fd2688297ac2eaf55e145de1 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423103421" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = b0fd4be95cb1da01 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000085c2085c2e2a924b921f849079c41d53000000000200000000001066000000010000200000003b84f87929d5c2bee3d941ddf878f9f93280653f392aaa35ad1a9df2c547fe28000000000e8000000002000020000000c6f4cca9d80c5e263e70ef1bb1f26cbb1bff04e53a1b20b9202a48d98d7b0bd9900000003a0f8a5359cac347ffea8db59b64a3eb71505bf3a2bd126c5957d00e3cc1088683880ac0dea16739527512a3ad0c3cce4d0a5817a5793631947c01cf63da865b1946bdcbd3c44fc79d86f71bbb1ada8f00389fa4271cc4dae768f7c0faf56f57a595d87f02478a86f82fc4457521358a9db4a08e91c459e28c4e4e7539599fd016b32a194a496af30139b180e286f00a400000004f608891b568e8038408d72f68e76c94fb7a5261e083b61471c061029cddd9e9cf7caf5d3f43ce04eac2af4e73a898fe164b45819b382c1212ed59d802936b97 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{254EA151-1D50-11EF-9A09-E25BC60B6402} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2660 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2660 iexplore.exe 2660 iexplore.exe 2632 IEXPLORE.EXE 2632 IEXPLORE.EXE 2632 IEXPLORE.EXE 2632 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2660 wrote to memory of 2632 2660 iexplore.exe 28 PID 2660 wrote to memory of 2632 2660 iexplore.exe 28 PID 2660 wrote to memory of 2632 2660 iexplore.exe 28 PID 2660 wrote to memory of 2632 2660 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7ee3721b8c2be28182bd42cf96285b52_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2660 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2660 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2632
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5491bb739b4cab929af201ff2c64e6bd9
SHA1d6ea0ba7bc33ac7029c73763027298aafe1e4427
SHA256440d0e96c378fab58973418a508617ab05fff857458be88247489d978fc84fb9
SHA512fe7a68731285aae2a84bea8aa645f78e784fbbfefe958a85704ccb5aaca26b0945d3f0244d3fb9d0861843dcfb929c19954648999371030ab9e2db8feb944360
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5daf3b7114dddcd6cbc9ba68bc76c6955
SHA1848c245e4a2c7bc8936a55d0e01d0a18a6a98d6f
SHA256ccab65a8e3bd7a4229e592a772d50722e16f75de1dd52dddefc6758501f5e983
SHA5122f95f27064b76fb28b423f3538f1c840a08b040a1ca941c5ae2a04e5774842a442347846b0dcc7f5aa201bb1d955a54027ac347cdecae7f059dacd620af8d143
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f70a5f4add87f976416219e9c4638a8b
SHA1c416e3767c79f4852177ca28b0a19caacdeaad82
SHA256fa6dba39fd3f1c2f54ade6b46d8d1d0a2b853443a364769f114ab7ce7ba7ec6d
SHA5127ca6769ab5e852bcfb180c24707336d685aeba1fd78a8a63c7824d6b6380340a40858448900336ac6338f1f268bf87cfb79f4253f934b6c3dcd8f4a2ce6411a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d977ec047cd6f7f028e23e209e38cfcb
SHA1433dcf0878b51890150dc3c4931b99ad0cbbdc05
SHA256b116cd90294effb48317106093477bcea3168183864168bdd6af49f92a92fa81
SHA512f3c28abdfb3e0c579a9b921c93beb80771366be5e0f727f8e3ad860bedf734e2ca067208f66d4e9670f6640d3aa73a6b0595a378a190cd5ec85f22a2ea8bfee2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57f6c68825d5762281811e376767d408e
SHA1568f2435a6a6c093db1d26cb8a4ae92e19646a37
SHA256a0850dcb4bd35da760a76a99d1fefedbd96590b5dbc3fec44931f8d6a1815d88
SHA512765c788ee93df2c35b53558fc6afd1075086b555a7a9c854d0f46ce9ca71333494389d19379f2fec6700f1fc0ebc09e997074e4762acaaefe72778cdc5ec1d5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57c907cac82e22137f96cbcdf669ade54
SHA1034b861588f685062a1668f6724739eeaea57aed
SHA25640f7474de0eae7de849e5f46fe44c5b64efd5ffdfe31f295b2bcf00a10eed9fb
SHA51282fd4bd821752ce909d607d0be4afa3a4069534d0536c7274d7eb502aa1ac3c8ef24c654338fbc9d005c56592f68679eda6d3e116d113a9a03154b7835da7a96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cf3e0bbadc194a0addefe94b363e59e0
SHA1af2e2770eecb8aa2614d8dbfd848d3973e984e8b
SHA256e543bb94369137cc6e4428bcad0bc8349135eafef2356af546d90e96c68bc06e
SHA512710c32a359d453fcf8bd0464f13cbbe0a3590bd62eb9e384b69e42b589c08d3bc3de0da6b43440623119d30b0ec8d1347c7e6bfb3a21334b5fcfee949c1f9593
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5edfc317151c51ddbe0cf81a5aa0082fa
SHA19dd62621ff686d131b735eead2988ab571b80db5
SHA2569aee79d5f2562a15cd0ae17a2bbabe1b1e5e9cf719aac6b201866d4e0cc73a14
SHA512fb4dab6f7a9421bc45077f8343a6cf6a4170e066bf3b464ed2b4f57e49fe5a1f9cef6cc01cabc3304058aa6f8ea0bd406d63781672eaef5911ff04e4077e0467
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD598fda12fa87298925fe35655c0b5d3a5
SHA1ce04778bfdc1dd8fe9c89633e5419bbd24a8f3c0
SHA2566d3cde14527be315daadb03862bb6d629e2d34bc1f0d385ced1aebcbb729c1df
SHA51212d770d18437b950b24ece8d544a26b02e266615259e5160d744b4003eb3707894935704251dffcd9dced42f352fe41982f74010637aa0d0211e076776faa322
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f46092c009a6f18d016392c240cc245f
SHA1fd98eeab3c149f200b51cf3f5f1815c0f6017bbc
SHA2567abd8e7649db8c9c064359f6282193e313b693f71e0ffd79aea80e9accaf9d46
SHA5122f12995902c25f733a2d89d13193c977f0a2ff1e4914fa9d29607da109f00af767c131bbd410376586025ea4ee63c6a2d5575fd4b3709c7668340fad313cde50
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55b932cd651a8e9b35e7d8eb183bf232f
SHA1edb1c554c3450322749239d3ddb0f7c618d9af3c
SHA25622de705b9e9d1a9bc0608a7291fd1e4348fc2a30331a29d77f512b13ad4be3b1
SHA5128a3e3655473405c9ac7c19ac9dfa6f1562e3edb913bf94ede9131a18e028b9614b7fe9e07606049b2e36e4d9d0bdd5abd33033002caa373740fe7a59a84c654b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53ff4f86c2ec4224b0caeabfa72982e23
SHA100cc09bd4ed8dbba07ff82ebb7d5facf00407ab6
SHA256dff0356794ebd48c5cc12a4b0b063b59aa084649e39f2ad1862b88fc625b1049
SHA5121662b67e9a6ae3754de5fc93526bb8258781e8991c2a29c832dc161c3a6c21ed93a5bdde7dd3775ec157fd9c567ed9790d2e8e4831bc836c39405851db273ac5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53e04ab42525fc06d078f95d8716a6f2d
SHA11023776562dca9bc43c0035e9e8526dc44eef72b
SHA256501ef6b7903df3f4be37ed272025ae3c75eaf8e64809c5a869cd4fdf7b2a3472
SHA512cac6b3bcb5ecf8132972a1dba83bf841c2797a45747169b07eceaa056ddcfb7fc04db66bdcbbcbd6099736642cc5821947bb01edce7d697d732d885e2552346b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD569e43ea0bd651594c446cf0fb1446fe7
SHA12b5455f6cf2c0b83aaed7e26c57b31da3d7eea9b
SHA256579108ef2181347b78863abfcab77b9a6b9f6c2f99642f6b92f493ccd575f7e0
SHA5129477d7bce87f60fe3ae7151d77cdf6740d672f2fd5f49e33032a6510881e343f5e1bd8b0fb034720fabc2f071dac6e978d4f8ed0773c35b7150d459336006361
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e72089bdded03e2b641d11eec2513af5
SHA1acfc58b8733a7e5ad05f45f46e0f66eea133c865
SHA256e42311971b5f3f9d2370f5fd24038a1bb56624b83d14d16e953b00f7ec53e2c8
SHA5121e6731025584acbaa7305274ab2b7d89732f33b990fb895673e42931e4fa0871a5dca8f6b74ee660a5a6957e9cdab10c9ea24a1dc53bb6063615191537f304b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55801674bae0d1e31a0240a5a6476c894
SHA137ed4d9364fc08bee2cbb1b092025ed3d3b67f72
SHA25675d94ea5b45ecfb271be14c69f8da8db43ba28fc7c94fa27a62390a08fce0e38
SHA512f9837c7aa2c641316f6673df2edd5bebf971a35d5b9b0d911348e40bdb4948eb7692a7b020ec70c871f2e613e10bd2f04abc8f9eafd891698f5fcb9e5714bed2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57047c45535e55b1163e884255c2cb815
SHA15cacf59924989dd0b3ced7715eab7a517fc4c4e9
SHA2562e471518869a9b9695d6e9853f00b2355a6895f955b93642737c3eb99e69b390
SHA512f3582c3a3510c69241429780a741085d5809eecde96036851de5860dc6f868289c6e8aba2782a7da2f84a7bbf3126c68b3958109e7f76d4e74f868f28cae100b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD598daf613ec30cc0783ec2760ad425756
SHA1171920b59ee8ad9c755533ac0a773bfaaa27a999
SHA256bc0834dffcc0d3868426bb2db98b141aec81bc2c1528af85768156c7339cccd9
SHA5126339148f1d701462417236dd6b488501beee09a477886c633b36fb8e0e01c997dae42dc37f6cbcd1ba12e6d5fcb61bd11524d19f0b4f56ea41dca66eb2e13220
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58fca774258dad70443456dbcec7d10e9
SHA11d6b8d1847276c51cb740ff5ae97eb6553dd0a50
SHA25653d1e1576c79eb269dc0a7d6242c015b3c9932d579c8a552e0cdbf23018aabc4
SHA512adaba863c4f6fc194f4c06c5594464020df9e3dbde2beda651ea9415bb8bdf879c672c6168b3d1b912ece5307d3f155f115b761e886bfbc9bfc21e98c0131003
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b