Analysis
-
max time kernel
119s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01-06-2024 21:40
Static task
static1
Behavioral task
behavioral1
Sample
8bdfdd1c487960916b0ff8382d15091d_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8bdfdd1c487960916b0ff8382d15091d_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
8bdfdd1c487960916b0ff8382d15091d_JaffaCakes118.html
-
Size
585B
-
MD5
8bdfdd1c487960916b0ff8382d15091d
-
SHA1
ae5fe57f39439065df589941c42819f688d0f3b1
-
SHA256
646451d0a52aab51a97613cc140aeea0ac0ff5513d4329c2923feb0d99547eb3
-
SHA512
f6541c9a8bb4294f5937d07fb466432453137d54c8974478be548c2a3d9a46d924110473050d11db302dbb5c08fc516d044ae4dd49143f4151458c29b4cf0fe5
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000081d0b04f91fdfe46a062ad73d9bcdc7a00000000020000000000106600000001000020000000f379d87bd28682fb550f4e5636391767e53887cf53c4381fd40e274acfcaa6b6000000000e8000000002000020000000e5693942b598485bcd27baddb1823c110c1e6b200becdfd5f8f366b057b5179a200000001bfd755f1b3a9ec42180abb6daac6afb07fa99f4e0b1e5257c73f4edb77d6d134000000065a4811d5e71628611abd6822e8bf83b2f92c304ea982f1266ca194b9fc58989241f4ecd9dbe757f4d5fe14fe437f78689afbc39d6ef926e99c94e6071e9bab4 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{91256E11-205F-11EF-8698-5E73522EB9B5} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c083e9576cb4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000081d0b04f91fdfe46a062ad73d9bcdc7a00000000020000000000106600000001000020000000bac2a6e92ec69536421404420a9540a84281a28797effc8c5faa6e2e07a8a6be000000000e8000000002000020000000fe5e18b7de8c98c940b9686c5bd62e51e2412e5ccc0d8e9e950e4459ad4c6d55900000001e34870fca7f20f54795809b6296f99517005b16a2a20ea389ca295a36c498722955fd3b51b427d193304436a5dc8c11cf9931e66aaeaf098c1f6d417e085be719a5433190da6d6384623ab9838a98dc2033b3f2e469bfa8b9918fd1e097637d08a7c03799de68871a4577d071ca8e618562725ea7a475ad739241777d6b60d1621a334093d5bcc61b8772fdf3a772d1400000008016effe9761edb921af436ce46e59114982d6aa05b8bebd7c3cd2beb553827891a5ce359280ffa827f5905cdf4cdd530e138645b2cbf8b140987c633b922103 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423439899" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2812 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2812 iexplore.exe 2812 iexplore.exe 1392 IEXPLORE.EXE 1392 IEXPLORE.EXE 1392 IEXPLORE.EXE 1392 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2812 wrote to memory of 1392 2812 iexplore.exe 28 PID 2812 wrote to memory of 1392 2812 iexplore.exe 28 PID 2812 wrote to memory of 1392 2812 iexplore.exe 28 PID 2812 wrote to memory of 1392 2812 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8bdfdd1c487960916b0ff8382d15091d_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2812 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2812 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1392
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57fffde5a0713450747f782a197a686bb
SHA11ffaee2a80ce761b2b88af7deeb547c32ec5f183
SHA2560e4f2acbfcad1bb1500589a78ec2efbbed40628f8768123590d1787af2fbdb1a
SHA512852a7b1b87858378722998c560bf3e2a1ead4ff913c3e3d2029032c7f9b9189bd4b8b6584fa7f9494a8bcc9e82c9de55f150e116f783cad7b7620cbb08a0a51b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57f5748b34744bf28d6a73ac72e233286
SHA17b395bdaca3b21c2c10d73b7289286784e98c459
SHA2566b21b82c6e4df44ab00e94ed06f75749078b50b64aeb7cf8ab370652165780ad
SHA512b061e860e58047ff28a739d31592aaa5f066e02568df27c7678125a6cbb994026aeee17671f155225c8705a32f555a4e0c8859764234a33bac393b1f4f592fc6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58e581a5628fdc12d047bd0b24396af92
SHA199c26d12fab0f7951bcb08068e2d29f5001f90e3
SHA2561c33f85987d9f627d835c02b452b307703eb6609ef81f1eff90334f491c40526
SHA51213ce039fc24ed05388ffa19841793f99662fa519bc8a1eb480b02605f1f02589d43958fdc8ff052a263b9e50f8cfe10ba12d4d094c4d0a059bc278609c7dd125
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5538b666066e9f6f1ef7e5f2a83a5fd53
SHA19427c53cb19fc4da73c8da0d7e355296ebca0cad
SHA256c811fa8ebbd00dc3e61e54141b0bb962b97d176e68c2eb1f8f810756234b5bd1
SHA51272a4430d9cf1067638ad9d97628b69eec88fc02d54f40b143411472ed8d1637961cde1783b0970efc3464d42018d1c078eafb1ee460084f76d795ad4646ba218
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c41164798247f1a4c7e4bd4d3ab91c0b
SHA13209e8bcad737ddde39d6db2c0c9761c55811716
SHA256e2733e0066f69904fc46d5f9e0a0cffe75c854ea4c846e309502e2e8539e7144
SHA512b41e5e0a7c0721bd49ca30e7aeb569fb87a58470d8c18a5910e6089686420cad70009f3c156d80addf6b2dfe42b16a389ef8a1c0db8be2d02982d981707246a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53d915a93d5d94875abe735f38ba3a4c0
SHA1660ce9aa5514a432a4c2cb04711884853f3ee992
SHA25690abcc7a739518b5194e7606a20449e1c2935dd85eb9810dc8ccef8a0da9a937
SHA5127dd97bf6cfb7fde8059d9787993d18b16ed8b3448475254f748eec95bcb3ca7ba41e4a28d60ae45f5c006bd939f40c303a54e784e7c3ffd6eed13c6b951c8d01
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD518d47af656bcec5565ca002b747acfae
SHA1c951782d09dfa297c9bad9b768a193be2c87be38
SHA2564727434977e5bdde6e519a43d81bb458e873047093eee52d83fba20be4be2a3a
SHA512b962600b33b4e658849f85f88f4c8384decfc122422a9f77ce940fe4853b822da87ba9ad8822ff817cd659ba8649d54b268afde36d51b237ee31b4c5e46e6e22
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bbcc1a25273030eb176d46e7d7919a19
SHA113a66cac8cad64158eafd9163a52eded7d64ed5f
SHA256ade04c19aafb0216c7b653e24ddade473aad9a50b90f32b5f35afc4d1bfeb122
SHA51288d018a29be2d4e442140c85f8cda3e05961b3a1a929d6816b7826b8b58c76f64034f89ead594c22378a6571a420c35aff7f3ab00afbc82ac39786f197190ac0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD545ea14af09a8f8b15b0f83dd03c10e06
SHA13e4d3639f9ab0cea4122bed7b5d97422e65623f5
SHA256202d9bd12e4140e801d9e6995a4ee194b3b35669d92b3f9710562f6dce18d765
SHA512ba958555e656d7675e658a07aa4d85458fb983b3a0530314d9af6576465846519cb3d8f60e6fe9eb7f65bab3caeec070e1f0d750f2f59a7fb7e9d1558eeaa16a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59994bc86388e6ae81bec917f2102a0fa
SHA19ffa7ff51bcb3fea7b5d5587ba860710aa6edb90
SHA256645195096a11c1ff44091d120b0fa64e11afcaaf57541e8f4939f019ce6714fe
SHA5128e1f30268c8c31dcd39932ce45c42b6a73533c7b29d534856325d9c4c5637576a9b0b0ef0cee2e4a877a41b36a3271b65e70987b1383ca48b9d88d9d19bb15c2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58213c09eaac5c9b7ae1bd1664a30a679
SHA1019b26decd6c71b953f8f60fded57b812e2f95d8
SHA256b035f4684434d43ab05ae1e0edf4033e3af8b3ea2eb5e5303a83f055717cd5df
SHA5128829f73561bf6507164abbe7b9c78d98a4c68fdd7b6b777b552f08439ff5b20777f7a08fe67bc13d0df4a3963ef67b338c2728d7674f40fce6cd1d7dc1110519
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c348c0378bf261bb740ee68947665a99
SHA1bf8a8e98f09b99352309d6000404c6987a00f0eb
SHA2566acf7981b7115d486141d6404aefd67c5c9bb6769c6a00feeff3c25f95c7ce58
SHA512b272b9b36ab68b236ab315e2c0df5c3d7b82706f4b695d476a38e0c86adceed6be492a07e440a0c864bd33fb8fa29722b8388846ba17ae870fad4bcd0183b92c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5377d24e6f4d86c7cfa1675ac63eeda04
SHA18c20ed3a6be2efe7d4b0088cbe65d35f06696ac7
SHA256b80c3f9c3c192d97f5aa096e7ea3c438f20d215043e8998ffe6471851079df90
SHA512384df8ddb0ef3e469c60c5a488a54f11a87b8c3bca649e41853d7a171ca498c143870ba893d0bb732f95c1891a0254c57556e38c940a6fb61082dbe96a8d278d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c5e8b8454f730cab1216bc5ddae31cce
SHA1a684bec51813752a70a15fc12dbf66498e5bb231
SHA2561c317c6aadda2492e2590d2c535c14b8e3538cc558c524fe8a9a61130436b9f8
SHA512f2d13a3509852bc422dc9af63d204a466862c22a2c19a4e015d7c39c66d99a7f7ad97c4a2891ef35aacb486a724b53e2d632efc2ed4dafd429987d1c72f8f77c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD579a54cb3e6a69c911956e6aa4a376aca
SHA1feaa999a324bdb9b83a59d9bcd629158e980ba9b
SHA256cce243f8a42d9d69ebfb9d5ca520b584e3ffb9e32db25f1827b62d39c41fe74e
SHA512a10d0100fc5092ea2a2865d65b4f17f8a08b59f62223160e19d369f2d308ea1a02a2ec1078c689d635b9a484e8e39a7552dc9ef58ce1fd775db5da8abeecf619
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD557006dc9054de181a4948e09152df298
SHA179a3aea3898cfaf26dbf56541fe74ba2ef5a8873
SHA2564fd67d2e2a689091e185624f4943c5069f1ef2d0a0b3ebf0f799a778de8eac87
SHA512d978d50f0772d985b825e9734eb2fa8b923e46ef8e12216da8165c87c6d9af3cd97e067a614b3b1c5cc592b2a4067bec7b44b46495938173897af97c3b53f414
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58f23ef0cdfeae3f6d68dabdc9378073e
SHA1511ec84eb13df7f4f3218b2571baf7837b531ad1
SHA256b5bd6ff70ab9857fcc112c23ae0fc6a1210629dd93b6c3827ac1670c21392c6e
SHA512ac9f19127f4297fd77a5b45bcd4a92e96bf4ca3919882f2dda2e59602dbfdb4ff11746b7e2b94af702fbb54a8b66e50b3c54751377f5716031a45245030bad97
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD501fbf1ed06a8afef1f0213e87fd96cf4
SHA1afeea52b79349c1415927498ad9ad493309cdc25
SHA256981616f5e74e95c015d23fa7f0c0d9cecfb1ea30a648d442ec8c325fc24a5787
SHA512c0c5cf5dc71edb1723881ef17b05d1baa385ee7e9d473f4bfa1f1a7df64d4c173b2fb4eb35972b244af5f3bdf650590d6706d344a7c0eebff91e9b621066d42e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58377155e65630236c0119db354c73d49
SHA148315d3f98a68dd3900b9c88c97d4891b3bc59ba
SHA256da2bc1421c2b093d1e1b13fe4f3b353d62657b59e543b53dbb2dfc60c6f9e50b
SHA512f50b5b07267b2a5395fe42a14687ca0817e98521f28b4cd6e84e6db1c0f2c46cf7c1e6bc85c19d410a5d44e7274b511fadacb7b956f0a67e4aa5e4b6b7b401ac
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b