Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
04/06/2024, 13:40
Static task
static1
Behavioral task
behavioral1
Sample
950adf202cf9a1c10c6f2a5f8c3e1123_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
950adf202cf9a1c10c6f2a5f8c3e1123_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
950adf202cf9a1c10c6f2a5f8c3e1123_JaffaCakes118.html
-
Size
74KB
-
MD5
950adf202cf9a1c10c6f2a5f8c3e1123
-
SHA1
b17dea50486beab17b20d82a75299072e56e5562
-
SHA256
e676b40128084219366427e386877028c7522f6e0bf75a04abac9bdf4f9a3463
-
SHA512
8001ba6de0cfa492a0f4d8b9dc5688c96f19f55fdec36b9abdc52c5e4f8552e37acfabf60720cb8449d472ce0f76ca2df6a84c231ed19abd23b1ff72bdbf91bf
-
SSDEEP
768:BVzpVvW0vDM6KJ7iM1pBVJZEjDCh1zvh1ytc8o33iHEn5PK2Slc:BVlVvW0vOJ7iM1pBVJZEjDCPh1gkn5P9
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423670296" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0014F4C1-2278-11EF-9F3E-D2EFD46A7D0E} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1688 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1688 iexplore.exe 1688 iexplore.exe 2788 IEXPLORE.EXE 2788 IEXPLORE.EXE 2788 IEXPLORE.EXE 2788 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1688 wrote to memory of 2788 1688 iexplore.exe 28 PID 1688 wrote to memory of 2788 1688 iexplore.exe 28 PID 1688 wrote to memory of 2788 1688 iexplore.exe 28 PID 1688 wrote to memory of 2788 1688 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\950adf202cf9a1c10c6f2a5f8c3e1123_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1688 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1688 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2788
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD59d8707c27d9b05496afddff2c4dd6d36
SHA1f9aaa337482e1ece0726ce1e6a7f57605fd169a8
SHA256c00ee48e40b4adc34a7c67750ba49bf6c99ed4f523374b86279af64f40368ab1
SHA512c7379834e07776d0188f45b6d20d795f559fc6521c8d2a1aa8e22741391fbf34f2d8173ae34dd84526e960d4fdcc7f8715f67210327cd92814ae10ba9add8edb
-
Filesize
914B
MD5e4a68ac854ac5242460afd72481b2a44
SHA1df3c24f9bfd666761b268073fe06d1cc8d4f82a4
SHA256cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f
SHA5125622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F07644E38ED7C9F37D11EEC6D4335E02_827A2BD464611B5891D523F77B43FEB1
Filesize472B
MD528545ea4f2df73b20ff82257052bf0f1
SHA160d3de7f8f0fe4dbe4f4d07ca578e992631e5de1
SHA2569f7d45b8b46f09215225dd56732c75f72f926a14282ec05806d314eecc71dbed
SHA5126d8ee8037bf369a56af295fb6c18eb4fe8feddd868013cfe6c248a66d08bc769c0487b62cfd6c07e307bef20f96ab85f211e527f14f0065a3a5883380b2cff2b
-
Filesize
1KB
MD5a266bb7dcc38a562631361bbf61dd11b
SHA13b1efd3a66ea28b16697394703a72ca340a05bd5
SHA256df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e
SHA5120da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5ffbeed32d44044d773fe045e60f6c7c7
SHA1c686864be67c2b89b4d82e2d7667fbe0d72794d2
SHA256a6649eff6cebd31a6b9a2fb44d55d28b6b7371942b35d45449cf64a997763d1c
SHA5126a3446fe7ac5fd09de02be663658789c7e839f29a3c7b12589dcbff40cda75b89eaba64d384002294ea84e4223f7cbb184250cc747e0b4b10213d98f01c545b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5e24d91d2948e5253de1aeeeaad2ca639
SHA1defc3b9e068ad60a83e1c7a048b9cadc0a92af20
SHA25694436964e325ee1a377ca536ee141d48fe757c755403de07d2071c3dc0ee0197
SHA512b193e2abf5ca092b32c157ba094fb673473f4c7c659109b23b269c994885a6b32ba5365b0c79e7f35390ce74ec9431db10df522200939c58c9167e4ea8bb4755
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC
Filesize252B
MD525ea6967c273181ce61cee959bca318b
SHA1ac9db1a654fdc739d4acb19c81a343d7288995e1
SHA25645180b5d30b412dda1496c1bf4adef09f820ee65394e8207bb89fc0e03299182
SHA51231a440a714e2111c5caad5631e9ba14da2219bc7875b0ac1f13407aa3c030c0f5bd2b0031c7abc5c8f2d3ce25105f7801f2b30d5b0070f946d18df8c6ee0198c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD518db7ef0b8132d685820c27624c3bf7d
SHA1f98521969d2f96df6452d800ebf28a69470f3fa9
SHA256ff9773bfca05e9914e88ef9c2969712c0deb2570b621b91104f0a1bfe0a0c7b5
SHA5124f6b6d4af6440a3f40f4be359ec417d2e89698bfcfa56b52b9cac12dce5351c5b5f26b26787d61abeaab8be4a359b4ff3d6460c9b4c1c0c1344576f2bc773607
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58ad81e4c24c654d78272851f7848e2be
SHA1f0db6b824afeceec2c5f8ac991dc60700eb98f54
SHA256b314657171107a6fcf7295d43e4000f9e643dcf88a1e93415d3dc24225222c51
SHA51279d7e52c0a4fc01f013be28049234b842235cec365b328a950662250651596fcc50f169aff79c95cae3b277dd76d0776933c3d7f28d87c08450b75c3aa63f466
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52584b5342080bea758e1fac80106c199
SHA1777d45e530d5b2a905d78c6d52a1dea861dd436d
SHA2566b8507235b50bb541f18a42ca5958601c07762227ef873c351803af2cf3dd211
SHA5123106bd7a65a56ee2e16c51c2345e2daf550717ab8c2216915b4ede29d401d4414053d75f53f84133adbc3c9a8d7609f83a06c3eb9778cc1316a8f9260f873e90
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56b2f2fd976d873db45f369f19350744c
SHA1a203e38f5ef41d6974633048cebb566b271dfa5a
SHA256726909c41ad44960af90f3b8b4e4e75077ef820ede9cb4980ac52f4964d0ff54
SHA5123b3824955a704c50b35810b31b4cfaf2ee291b57e54973fd943e8719c5f3b55e8207a7073ea48d78b153373e451c1929a36f0a9f48d0fa0b32a8fa73f0706374
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD534ebc8796e31decb2487f29b08e83ca7
SHA167f02dcbd8533509a0996c978de75e896c8f5fd4
SHA256fe768272ffe77fcff0a49a102957bf16ef7f5b351f9d0f38d8da726e88acd2da
SHA512b348cb561c8b38d50fac9402b5d0aff59fc22d71a58ece8bf9cbb02ae76e3a1d87a1797b9c5b02c9668fc472c1ebe9e5d7362e34de9b54f0109d7d2911f62808
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD518d8c51b3851acad843c4415a014c71d
SHA1d82a96542e80f32841dddf85830f0570c76b3b9b
SHA256a01ca52f8c25531fcc2a64f65e30b699ed0acd989b8ffa9b467b93838a6972c9
SHA51253d4fe782c564bfd0753f56ca5af9d8d6d16831f836d1779a095d20d98990981aa51e0cb6e4ce7745ccafc5d834a6edf0c51a029eef31b2a3c7246797c69d861
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53c00db687202119c6b40b51c62b2a48b
SHA18c3a1bfdb8f2eb682c5b994d2ebd36036884586f
SHA256f24401f7833448940c05e8fa08ccf3f6ff612b15721019f779ed18b87481db25
SHA5129c417fb9f13fdf8fd0c1e4fef86ae5e9fe2ec2602392b8c925e31063758f1f02e5333832b1b2bcd2827ea22f5ae27398822d2f262d3524c4831341abb397f4f5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e02c6f2f76874c78a413050b979908ea
SHA12b03b172af0a1979134b9a1cc61dc662178146bc
SHA256e84f2d1a0549877e706f0996d1d819f43a42053efc23e9374706432e94d1da55
SHA51254f5a483a238b1006ce24c095b44de3c367dec1237ce5cbe86db4a26dea44e955bedd255c2bac18e0e9f32f31581a88fbba3326a707fe6a40d505f07242458d6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51c217921c5da6600aeb5f7176041bae3
SHA11920fe29900d561726047a2436167a3ccc0a89b0
SHA2568123cfe7eaff79adf15ea8ca42fbb75f644c43d2d7192b15d7403239b3252d1b
SHA5124215dae3886ddd3929cb22fdfb4161d448f2e247d5cdf96dbecede9ed90e28b969a1511aeee164dcfa23c47bd2d0808be57f033d1d48a595953dad63131a26d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52444ba0d7efb26d29f2f25f3591cd85d
SHA109ae2b0ee95f540a2033804e0e58a45ec7b78672
SHA256ff5e5c6b7ccf2fec5b276d0d6b90594b0d70d93617e3e1a94919f3ae8d398a6c
SHA512fd5bc951b8e8ad43374ede1ca682fb8e49bd56f3b8caf5931bca0991208bf350a23f5461b97326d0383668d5eda6911405765361ee128de54959e7e6b0b17602
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD50cd7b0f8c3a62f75be79ef61e2645fe9
SHA17a095e3e4d7142552ea1727cf6a56d17acc7bdc2
SHA25648a21bb469d45bb5175aa43a8edb8fca9894b8f7b48bd3b220628f82fe87a681
SHA5122128faefe06b5f36120faf9b0ce322c34c6462d9db5d82ad04c23d88a1734b4b64c481e9e60ed1660e40668b596ee7df159a9a063c662f918edf832d66921ff0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA
Filesize392B
MD58576201ec74fdaf4cf6fe4dbd0580faa
SHA19cd3343639e57a1300116afebccee4c8d1807040
SHA25661437ef9bdc86dece6d70f828399a03066256af8d33ad316338502c280fc2ab9
SHA51227d0c137e73c14751e7f8a260b9478b6e4a217ade0908ebb82c87ddaab6a863cbaf76e7af17bd7b18cdf5218e95ffe80c259cb5a618588732f054a0673d9c5bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F07644E38ED7C9F37D11EEC6D4335E02_827A2BD464611B5891D523F77B43FEB1
Filesize406B
MD50eb7ba1b2e35e60b9a055458763b8bdf
SHA10bae2603c3ce34b8be41122aaea4ef25b4567865
SHA25607fdc9aa44efbbe4b56f89f83c888a5f1df8f0e2ff84d47439ed6c4fce1d6094
SHA5127a00c9fa027d54f47494415ddf76153b69a0221ec963727db1dbfeeca5c1ea92ca4df41ebe5b863b8376cf45df20909f542db706993d68306157743b02d1c8d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357
Filesize242B
MD51152d9298ed9720daa8513d610bd093c
SHA1d7fe405a4f61842adfae21e0c241084205ad86e3
SHA2565c90325f7f5ba20307f41f8eb1550293ef76a21c0f8257db84486d1b2bc6c7c4
SHA512ff79cda15cb1e760eb2b1d158f64eafb32a0a576d2b7d4cdca7dbb6fb0500e474117e7b28c7aa431693985b5f67d697de9c03dbb442a169395cad0c610636a46
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5DKX8QD5\platform_gapi.iframes.style.common[1].js
Filesize54KB
MD5682c26af19b240f98d2cb951721fa54d
SHA118e58b652c7f82a55ab4b1910693686049e25d62
SHA25696428f0f585a874c185d560538ad83ebfad0365d760fcf9fcefe80add9e3c980
SHA512078aeef086271b7f9cf0f6e3a1e7908d7e38465a1a7a4de6f2a785147e9130551a2995e80600824da9341d58e5425d4505518e90eea9ffe1c64f4f41825a9660
-
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U8A9A2DI\cb=gapi[1].js
Filesize134KB
MD5f9255a0dec7524a9a3e867a9f878a68b
SHA1813943e6af4a8592f48aeb0d2ab88ead8d3b8c8b
SHA256d9acfd91940f52506ac7caeffea927d5d1ce0b483471fa771a3d4d78d59fda0d
SHA512d013be6bfc6bcf6da8e08ed6ff4963f6c60389baa3a33d15db97d081d3239635f48111db65e580937eb1ea9dc3b7fc6b4aecb012daeee3bf99cfebf84748177e
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b