Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20240611-en
  • resource tags

    arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
  • submitted
    12/06/2024, 18:49

General

  • Target

    a1d42859a8dc074bb61f5b68bb1588d7_JaffaCakes118.html

  • Size

    59KB

  • MD5

    a1d42859a8dc074bb61f5b68bb1588d7

  • SHA1

    7878954030554e3675e7f3d66a8bc4ae402538a0

  • SHA256

    50dfea6f5d16dfeb39958a9d7e1e70c50015db278b805d9e597b984a9f0da0b6

  • SHA512

    ce0cddf6f27b553124d7b2b531f1ac55ede53bf59978b072bacba513e348c872a5d3ed408cd36e28eea83f5a4873a3af74a33c304bcd8cb1e203f93bc00aa50e

  • SSDEEP

    768:uHO9m/uKcEzJcE2+rc2ZEczojBA3GBeNjJ3sKxXQrhFUn9sK0fcFnQtQU9fLNgVI:uu9clOYcjBA3GBeNjJ3sK2FFPKWAcjqy

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a1d42859a8dc074bb61f5b68bb1588d7_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1960
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1960 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2232

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    660b6e28b38ebe7e521064e60113fffc

    SHA1

    f2c25e9f931876bf6834191ec5b409f47f869129

    SHA256

    3e203426c4aa1403e940966905320c612ce4006cc87e03eb64058eaf6d402433

    SHA512

    96868e652d5e0c25b4d0f0ada20d345115f0c6fda26d3cab724c0c1867386d2dcedc408c51f776b7e019ce2e22755017d99bf663cdd9fd0d88b26182c6434bcc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\265C0DEB29181DD1891051371C5F863A_DACC52A1882A05AED14688828CFAE295

    Filesize

    472B

    MD5

    a4c3e4b3f212ccf9719236eaa8f728be

    SHA1

    e017a18974a9969ca60ca2499ac54b464d91a2ef

    SHA256

    0641546fbe6a6bf201d918796cf5efa992632208053037f369a6173cc2afd39a

    SHA512

    c4c229eec604f4022ab0d439eb8b95bbdbb554d809d4571745957f0da5dc740e4ecb13757273b9dcf9f431a5b1ca40d53a539e2ccfaadbf7c161dba6b8b2734f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    724B

    MD5

    ac89a852c2aaa3d389b2d2dd312ad367

    SHA1

    8f421dd6493c61dbda6b839e2debb7b50a20c930

    SHA256

    0b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45

    SHA512

    c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    dc3060d6ae054df2becb389029fdf895

    SHA1

    aa36e4752c6cea36a13794c3a7c3a588807a1a6f

    SHA256

    56127649cbf38987b74d86a3f80235aad544a556750cbfde7ad2981565c8f059

    SHA512

    cd5b7d43a9beb351f1d3377c84b792a3d321cd0f3a7fe33e3ce8875653f2b8783433386e961ca264f74866cc29b0146028d526f2bbf34026753747a944c48fc8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\265C0DEB29181DD1891051371C5F863A_DACC52A1882A05AED14688828CFAE295

    Filesize

    402B

    MD5

    06ae58083ea6eba576dda730e0f0d3e8

    SHA1

    d3d7fcdde70e85e644cbe26643b4530a7e6c5290

    SHA256

    455def4698ca0aa0fd3ccb21101c365a927998fd18466178a9c0542a0b509eec

    SHA512

    bc2cd99a6f95c40afdce4336bb9ddff6c828e44fe825fcffb705bfbe09150519a4a1389b15dbefe40c89ca0fd9b500a704e69eee530b049a974bfa4081c71dee

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    93cbb02ee43bf02f0c1d365010e16210

    SHA1

    7c04a404e8f03b0a3e6199f2138a5bb194f362a1

    SHA256

    f2a674f944ff71b37ad21e4128a86405012e0d4e99d705964130228ebd401d11

    SHA512

    242764384635bd62fff90fd7807c689db3c8bebcba7407b03c1f802ce85970f3bdf4310452cc09445c2acbf1904f3e2d329490bca971bef646fbdcd59235111e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    076e78adf7ed10007496a6dc59e9a011

    SHA1

    01a27387c0945548fa9f1f65bf9778721dff6b16

    SHA256

    efde9e8e76c7cb5ab3804014d0b69b31517dc0ae93c5f6a512e0c11bc431777b

    SHA512

    9bc267d5dfcd17d1bbfb88441423f3b4280aaa530cc91a324714cac27eae322475ecd854bf39ed5a8f2d59815b97f4801a0386c5bcd79cbc7c2d05a2fd17e9a1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9e7c799130a19faae2024e52ab30f2a3

    SHA1

    42928a230cd83760048d5304161af6682a3faee7

    SHA256

    75cf7c769133c1ec8cdcd1763b0129f850806202930f858d104af5f7df9788c4

    SHA512

    59bc42c10be145b7da3389ce08e26f0159c219f838a32e7a2ceaae2d54195ff6c0a1369a01107badb13a0e40dfc401ee9327717aaf5c8f61d7e25dbabfb53ed5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9bcaaf154bcfdd80c2f7df1421463e63

    SHA1

    ee65f145f8ec8ce14ddb511a9aa1fce0a868650d

    SHA256

    ca6faef99df0ce035a44725b91f55987367ac08e6cae1f537ee47920e845c58e

    SHA512

    0b5413d8a3106f0888b005e94f615e55b44a3e01ab64f155c654f7b61705d03eb2640edd69f9906c3598157e049a09efac63d3776d19a8d825bc80955e3ae71f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    db2f7324c71cf203bf2b9c61cdf520b5

    SHA1

    6eddc96c4526e527569141d26581bee683a8e535

    SHA256

    b6e88088a04faad7e9ca3db183228cc1ad40ae0bdc31652445286a662261317c

    SHA512

    a078c0276ed23ed403ce3ef7cb43dd1a54ebeb0fb19d846727938bd99bf2086e7e8a27870f5d58fce759953dfd0b1d2b121c5e14db0c7e26485aa489015f5ce0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    102131ea52f71c350f883022835beee5

    SHA1

    0d5846fdb05ec7f26a46f769068598148f6e13de

    SHA256

    d4b7abf951d5c473b32bbb42de2b6f57aeaf48d68ca90d243da2d4620b95cbcc

    SHA512

    9a6d3e7db99f432467977094ec770c9536272fb12a839e394172e2c1a5ce4d2aeaab67539ff233f58b2ac604a1b9e1d9db9bf2510594d787fccec792b5c5ec5c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5189f08f4e46383ec6e495a628790be4

    SHA1

    5c8dcc7cc425b822852b7a2a7fd85c9ed48f1675

    SHA256

    03cdfa4ef436046d160ea3cf07d90daaaefb2ea980f5df7f05b33e83b2d82105

    SHA512

    c7bf4aca20909a389a0af973464d76dd6ebc2f7983ec9053a1df618991f470bf38e5bd2158c95a80c4e37d28290d3e01748f4d2150565ed2842938aaac6adc45

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    91b6d57255b178cbd78d151c720cbd72

    SHA1

    a7cbe3ffc6bb9e1b5d07e31691e7f8d0c7cd7cf6

    SHA256

    6660abcc972781a5ea7d9b85a1bb690d1a49b1392eebf36259b950b6af7bfbb3

    SHA512

    26e5ce9da6415b64ffcfc644195715c93236ec1f371d7b29b042d5861c42c64b55cbab494ee53a513883eedc9750786b8bc39262bfa17ac04011cf0badff7bbe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    370014816c22d7e9a4fc5cfe40e9fe8d

    SHA1

    12fe0c0c996e90a17064e33da76d1f6c518ac44e

    SHA256

    6bef94cae1b93756c8757220f23ab49ef89d4c84963a688b6d0f5e3bac964828

    SHA512

    72718031dbf6aa7bfcaaba0c9f4c88c4902ed4c227cc1d014dd3c27f3125b1b1304a0808c740d0cd413b7f4ebbaec744413d511ce485d5095c808b46db0c659a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    689fdc76624e8ab3045357dfafd68bed

    SHA1

    caf72e38c3d10379dfcf587e991580d823005023

    SHA256

    2c5eb2ec96a99959b8f19bb6740fb1a09b4ccfee0cf6bb0aa9c16971dbd07303

    SHA512

    325578779abfb01f2d5e9bc1b787eb3e48388a61e760e83c5aaa8f97ebaf4c69d1d04f763347b6e21a768fa97601704c9d543f76f90b7e1fa1abb608150dfc44

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    60d770a2b509c9479244f3af5b40c63d

    SHA1

    c2b9354fcc0b3bfaf14de1508690d0b1caa864e9

    SHA256

    91896ad61d41644707d9a7402eac443d24dca4cf973eaa0900cea2f2ae526da2

    SHA512

    7bd43c530ff33b316d7ddc85fc161bfea57cf4771c5fe918f06d9b61dd862241dc2a507c6ed8744f431fa88a0aa8ca3ddd25ef1c5e6336ca5da96c5ddda61092

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    add5b7e3e68a53f8efcfed8f7ff438db

    SHA1

    456658e56daf06958424186a2126e3787ca9a390

    SHA256

    5e3298735a9184af0e751fc856f2ec05aa71e985260f010957a796b8460632f0

    SHA512

    62d543355438f3dab32f98a110ca9c59fce97de302c658b7d58c663ff7cdb8c1569d6e8a01d3a19ecb0d8a94eb5b3ae9315bd937e66a60a9e28ea8c8dc1a688c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    861e827c56e9d5fe52f862a2c411a050

    SHA1

    a8c67f6c29fd8466d1ab092db12cc55b8d33c7d5

    SHA256

    7fb80d3bfc1b22df3ee99569977aa26e5c419d2855cb3fcda33059efdaa533b9

    SHA512

    39f30f4c050f2eab773bcc42747fdb980f6007759a8165e992c41ad49617c0bf3111f24cef915377ed8b7d907f2f3f37b9b17b39fd5c462df44a9a621ff9a779

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    05c380bacf6317955a9c65c9b04ccbf4

    SHA1

    ebdb45ff1cfa50d2d7067935d921959d80ded84d

    SHA256

    676a8e36645edb2aac09d74edab6f85b071e518ff35fbf6f77972120c638e620

    SHA512

    e16ede03624b9a5a538d310c8cc37b15ae61304e6b18931a84ab459ea06233068e0bcefb609b874ac5234dd0592e5c5eb42d0d1c354c9e501c4a26e8eb513238

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    19786fe1baa305561d1297562a0f8f59

    SHA1

    07a8e94612d66bfd3e6a521c5d9e78b009600a91

    SHA256

    37508726f54f30c5ae942cb9b922c0850106353bc0a9315849e664aa832d0cb6

    SHA512

    30205838b4f43991d09e5aef6f560e9c94d485c4dd7e76199a894d0dd17c291d879002b7e296ed7359c589405c42175762ce13f4dfa70f7af09c519dcc7e7a55

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    f785c522dbb9540ddeb7958a6e35f270

    SHA1

    6c2ba1dea61d1d82174e8d4f04784212b29cefef

    SHA256

    ec3871ef2b226bf1f66813e5a2f9f375f0c1c94c6260b76892c19f66713a802c

    SHA512

    77f02e2c6510b94827d415e2bd97cf17db5ce04af8e453b2de94d6cdd6ba2136cd1308948d0629e298affae2b8348ecc210ace87864e2e5c0af01ffeb2366299

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    34f7bf45f3655bc241869399b0cb4477

    SHA1

    4c2722e61c97486e9d5c349340de351336318a62

    SHA256

    565f03bff52a2d39cf7279edd7cc4175f277850e8d552e8b73791b28b291e765

    SHA512

    b2042223c3ababff5d4c1dde837d0a0fffbf9e3d7e6353b37aa980b18c8bfd5767ae2eb58183ae5fbf2e06a9684e8caefabd6059d93e8334c918149e7bb6f41b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d9ee6e6982170a6ac5e1e8de3b8f2bcc

    SHA1

    0e44f2a63298a786ca991b6e6bf7ff009b742bfe

    SHA256

    e33ee50e664593d3ae9b77a6a3fd9fdd463fb486e83527928d08d7962dfefd5d

    SHA512

    9bf5272137b2f50524dd9e6b7c6e9a366824fa6be1dac4aa0a6011e5ed4b0a3e2ba00eb85015a99437c2361b9da5bee7abd9220c686525fe967f2d456db127a3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    048072217cbfedeb39ba1963f058fe35

    SHA1

    cde36f5c928a306787ed1aec53159c0e8047ade3

    SHA256

    643e6e113f1950e035ce1f6d12a4f59722600edd6936061f949dac8e475048ed

    SHA512

    7a2256c9fea8a56c12c87c039cf05997ac10b0ee5f3f1cba26a9b98dc4e5760a01930cb6ddcc345378bcb32efbb94f5ff5313a04ec469538e250558b1889e47c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    be2ba0fe25ea261652976807dfe46401

    SHA1

    b268905078fb2e161334ff82232c0d7a199b4875

    SHA256

    f311808c709a6a526da446fe620c20642d7ff7071490fc5dd166216b2d809f39

    SHA512

    f546d98aed710fafe0820ed17de2dc70170d1c2d3be3d5e41a8cdaf4a4cd3f8f9405dcab90813487cdbf9f5deded5e85ffdaf7eb5023d3c69589db38db670029

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ace8bbcb42a0bbc8e0d80eaffcda6a3f

    SHA1

    1ec5f6d7482014e2603e6997340a7fe6aba7c85f

    SHA256

    50d61d43b5c051e8cd5dca54d35ec3477213266f3b11780aa202d263fb274206

    SHA512

    df8422de04461d90e1c9f5f80943a1820d5e222e7a7802cd82f13f9b8ebb71185806cf4903b575e4f622276757df4b714cbf26a4c17578a2b1fd06ccac8866d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5c4667cca9241141baac5daf59fe700

    SHA1

    924420b7eccb8d86d193843bd5a85f9b9f0014e3

    SHA256

    8279c728c99e6385f66457721b30a84e1198787abcf5e81f4a261ac34ccd9f70

    SHA512

    2b4f4d48bdb9b4278c1fe80d0fb9179f74a46cd9232b5a240b0ed371c31e2ae6e993d930e37f95c9a306c629fde3a9fdb3ae74a56ba0a59b497d25b952d7f33d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9cb746ab418059e195d6ac69d662d75f

    SHA1

    734580b4fe80da3031c0638a408f2aaf6cb836ef

    SHA256

    212b0b27b955e32d1263799cd87d9ac0af8da7d97221cdbf59efde1f128f7a07

    SHA512

    33df90eba98b23055e29e4e3ca906f2e4832dbbd7c9ab3a4e1e264723328c5029886e818918d2da23c01db16e558b7f19c142a0514e9bbc79db06d6757e5d9be

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    618e5a3a89b4d37fbea3f077d2929627

    SHA1

    88284a229521afbe61403f459d6fc6d8573e0866

    SHA256

    4f40a28cb83272bfb7818efc39241ff9497872aca8f95f1edd984511d8de06d4

    SHA512

    2c991723fd13218152c43c2716bcb02b23bc1808de24cfb4cb699330761f8ab8ae80497870a70a6b023c91ebd5a8a3b9150e4b55116350f47d0e79cd49b79afb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b66aabd7c60a5aed89da25474e25ca89

    SHA1

    8b8bca4625ef67a42cb0a7710166a8b2cc09535e

    SHA256

    f36ac0905375fd64677ce834e8cd3c19bed9b1c67ae518dc09e4330297f168d9

    SHA512

    7a886d6fe39c7259d7db9b4dbd180461cf3bc5958082d9f0f545a5c225cc2864fcb49c86370c82ea1e8124f9811a99d6480adc8e0a702e11b0295fcaedd3f1f5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CAF4703619713E3F18D8A9D5D88D6288_A7725538C46DE2D0088EE44974E2CEBA

    Filesize

    392B

    MD5

    40d627d9e26f854a7c207764678289f7

    SHA1

    909aa8e3544958bcdfdcc6a69ed8eaae0eb45528

    SHA256

    a06e5a06495cdaa26686a33bfe572e4c440234694b6619be042313a4ef9ec3b5

    SHA512

    0b7499cb49dc6d759f13b9511c79059a6d0bf2c1ea3f4a08b463f7270a83ab2c1308b0433c6ce8a395d43d370db5c0967f83b15f57ba60351a52af584bd78cde

  • C:\Users\Admin\AppData\Local\Temp\Cab19E9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\Tar1A0B.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b