Analysis

  • max time kernel
    146s
  • max time network
    149s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    17/08/2024, 08:43

General

  • Target

    a1e2ff38e00d74a3643fbcab0a07753f_JaffaCakes118.html

  • Size

    62KB

  • MD5

    a1e2ff38e00d74a3643fbcab0a07753f

  • SHA1

    518ed379cbb4df339c906ce8550948d74122755a

  • SHA256

    860b1d2158b0c787d449456fc2fe0222435ecb296b23e7a795bdfd7066bbfbff

  • SHA512

    65268bd417f35b081942f89310de72d1d357350c030d2266cb3e9c0c881ff473cf3493f2f6c89075499d3d7157d52014829789264bc30bc18e8d816a6c2216c0

  • SSDEEP

    768:FzQyXfnAGvoVYZWQLYOM4caKouA6KB5DmBZ7/2qUv:hZXfbvcYZWQLYOMbLouaMX7o

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a1e2ff38e00d74a3643fbcab0a07753f_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2632
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2632 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of SetWindowsHookEx
      PID:2812

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    e935bc5762068caf3e24a2683b1b8a88

    SHA1

    82b70eb774c0756837fe8d7acbfeec05ecbf5463

    SHA256

    a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d

    SHA512

    bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    4cc0f05025a1509f4bc769d2df43d695

    SHA1

    a66eb845ea62ef426df3cd594da99f6723dfdf2f

    SHA256

    7564e2557793d5b41e50dbe34ad3b1d2a19dbf877db9666ca9396099af6ff041

    SHA512

    07c4e7bafaaa2ff08c07491651c0f8a21236fd34d0776d96208f12f9744beecc7a36e39725c2f4599ae3e9dd0b80a3ae6df741d638c88915b632edd331423a7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    ca85521bb087ae445537144860efd565

    SHA1

    4e4c4ee3be963acee020d735649aa31bedfb1e9d

    SHA256

    96d6d06727028a38565cb699e87ef40540f4d95c10bd1fd2aae7f6958a419ade

    SHA512

    d3b3f688fbb2bb63f133e66c6537122a3a1105f7621fd9296eb3a1e7e9ee9022e8b1f4142ae7537016ac225d6fb57cc47cf364de4ef0f462cb10ad4213fce8cc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    59c60f5332c612de88aae3f2fe90bfbf

    SHA1

    d1a9c9d16ec70c5c1ca88ed7faf7b252f80a41e8

    SHA256

    d04a77a59e7ca795908691b5ea5ff8b7d8e8076e7be6aa8881fa9c7e8999b55f

    SHA512

    90a554c7fa0c7839130e0787ec28b4f78d0cc9d97fadc54e88f478b1c056ceb20ededca8fb00970c4575eeeb7818d4d01daf88116bc57bc9a1ec86c21418456e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    9ac140d547b21832f42e03b6f3693634

    SHA1

    ee1905a95a209b6ec9c50f9b6d815adf192634ea

    SHA256

    c5bd11776a8cd822da9ec56640d8ab8926ef91fea9fd24e4eab5d60e3953d465

    SHA512

    94f2c4a0e4ada9130e6f75337e30e8603fd63aced7d1b4c62af21534b856ae6994f40c0fcd2635841176ec50510794221b0a373cf8e8a82a6e40233eea1b5613

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3e816cc964ace8b8586eb56f65ffe326

    SHA1

    323bca5d8183d506f9ca9aa67df4d03145e97d67

    SHA256

    982dfa66ceaf8138a5d5a6593a7fc4ba3152b25e70ae90d605a8ea3017d518f7

    SHA512

    b515a11755ae1af752975a4a08d3f319433e84acfedf03f38337276e00c30f057428ffa212970066e43b79d5896d1f94ae960c816112460d432551f171bdedb3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    28829156d8a198c0ebd9ede9abcb66d6

    SHA1

    10aa227a80dfeff1170f6dfc4c8c3b78aec6fe60

    SHA256

    b5cdc6c05fb3851a79bdd091a7e3a04511870eb18b8621f97e35179035bceb1a

    SHA512

    c6c22847d5de6e58e17ccb55095533b5c2626f150eaab08a9c8128c3836e21f0d1f0f32f1b5bb72fb1f3d576758042c264a25b828a80f1fc4730e2c1b6816f08

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    098ae19ec6dfdcc5bdc9e00474ea423a

    SHA1

    32bebc0b63d70a5b6721480fdf6375e8371fc683

    SHA256

    dad88341ff262f76e04d757250d5db6cf268fba82fb8e1b61899e0c7bb918225

    SHA512

    db2a02ee41b4c10d9f922b68baca377979154151889dd3232513dffdae24111089a7fa348995561be91e15b4d949574f5837c24d590d3f7873d9b7f03bb3a71a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    feb8043c184c2f0c83c46a697a9db929

    SHA1

    1ada26580d7a085457ba30f261a711120d37fc1f

    SHA256

    16baa438c15a2c7e668940dae89eb0efe710770d485900591f7b296897b63f03

    SHA512

    15535bf8772e0f3d95bf540844dc294007f0c123183e795f27f16c75da98890df49be4d7df19100e8810edc6ce30629da162ffeb6cbe496197ecc1b557812147

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    33d9acce4897cad0dc75ba55fa303e01

    SHA1

    343c22a9a42abf243dab00eb3d3230666f919229

    SHA256

    c84442df89c472885724730090eb2289a08f1d9b760e09272150c9d05961eb39

    SHA512

    9f0f159a8802603d397dc51c931a76bdc6eb3544209d2c7709466298d24f17b69a5e30adf0091dddc72cf179d8170287c063776a0d30cb73ab91a7185a3e1cdb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    990e77ea59eb670120aff741ed5f46bd

    SHA1

    bf43822fbddabcf4b146b459c1c1fcf4468c07ea

    SHA256

    c9218404bfa144140160e85380a1e44995bdfa3ffa856ce39c97fc501d8f2660

    SHA512

    bc96ccf4ae97367dff454092f85473efadfa711cb566b3669eebeccf1ac97176107424b4676bed34b8c5829a9d072e093b1caf363e270224c6ffead283b0299d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    58ea06f7c39291f96e8319074212577c

    SHA1

    facc9c2c4b5e365e96239a2004def7375f2d954e

    SHA256

    676d39ae6c7f26a60542770ecff7f411d05d3189deab9d4ebd6a4632027dbd98

    SHA512

    9a95736d1d7ed75d67a885e8560b9ec0c66bf2e986a4f472fe3a732ebc69a79bd9c52488722eb252c79822f47dca132cddfc3d4e0fff9b3c7e6ab42c6936fdfa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3f2ffbbaa5fcdb62dc9c0988039c1a9d

    SHA1

    03e1f39c72b0cf38231915d5fb3e134504c5d780

    SHA256

    fb8b56454b7f6cef80a6c6d6d6fc3a6b5bc2aa299d0112fc7c88f1f750f89bc5

    SHA512

    ddc611901e51db035caa29c2b99aadae6b3af718cda7bad106de58d56013097105f4548a126b227b0b6408efd4cd8bc9fadb13a07b74a1f57e73dec4c4d40ae1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    c237e566e5e0d227adcb1fb071cb137e

    SHA1

    8fb9b917252b7f2fafeb2cc036e2d71396b4b1f4

    SHA256

    c3bba3a7d9e99c576d62306e8a5a47799c7947904643c1e320642f2b55035ee6

    SHA512

    7b410cde4a4f47a89d186a5c37ffd5d0abd624158421ccff834a5f012a7ea9c57f88d68770bb6dd84839d1914705fe42b96047d9e5b15f5e01c6ae5d42c9c029

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    07eedb7fa824b938982a1ff89ce771d5

    SHA1

    740543d3f5b2f9b0214bc150c147485d6d9d43f8

    SHA256

    1d649df5b7dbba1b16ef79110a575138de6d908836808ad407d5b6550d86ea23

    SHA512

    efdfe24b2c82de9a8705ce4904fb9e67e8713d423c5c897b2f4e87c0587380aeb67e614543709ba2767e608aa713493df476221a8ef56173f367abb8fa7ee5bb

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1e6230b737a6fd866875a7faf0168325

    SHA1

    2e1d98ee1265ab34f9251ee65b1b390e40a939ef

    SHA256

    ff0320ece940f60c698030e14da4d278d6c7203f3fa141a8b91750538f019440

    SHA512

    ab809b8b98c8968ffbf450419201eedb5494a9e3dd83a09b5de8329047da08340aa2d2a5d6d7f77519aa91842258e7368dc8ed3bc4df456a06bdd06346847b8d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    9b889f18ba55d54e4821e861b5a2e9e5

    SHA1

    3655577272079e1d49de83d5967734ef6e0a3d20

    SHA256

    6adbf77095ce024c496b8203a28392abe99dd590c7ae04e2142f2ac68d1d5ddb

    SHA512

    3639df1b39f86feb117d8c0a03f54ee3dd8e10bc0fcff3ef57f7c28e181b84c7df3d69a995329e650c3cd7f31620b349d64aa0902deaaa7ebd61f0971c22d2b5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    741b65ee161036f4cccd5752ac9f92da

    SHA1

    467e579765957a74f0eba21fea935c3adc2d4582

    SHA256

    905ec158d452490f6c82aa51fc0ff8a9e0b5037051b59e83afb7bbe0e639a433

    SHA512

    004274883ba43731e18b420512f1ff0d4f6a47ae12e25b93c6af2892897f1172f875f0967d363a5cbbacbeab3c8e7e02c42fbbef8e2a6ee017cfb6a1ef8efaab

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3a0986ba77f72fb8c4531a54305aab95

    SHA1

    125fe6d202b559e16b1f31ee120092f0f906abff

    SHA256

    562ae15e1bb8258314c4885d31b4c1ffd2aab79d083f593fa67473de8a92d3a4

    SHA512

    3fedd1ef7d64ca775b65723434a4ac268e60226e166c4a11b65f8be55c8308367b593cfa8a12959e52d5edc29d0faad715df9275a031b5a62120b023777dcb98

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    d3332ae49a005a06803c8a13b916f089

    SHA1

    46a23aff3227f3f848245c3b9ee20c6feb0806cb

    SHA256

    b278ab1aa62534e4686918e50095b7584bc3743c7c4e65ea423e70835a99fff6

    SHA512

    f389b8d60721666a03a41b807d8991ad5d6931d2863d04e2c17dbbf30c079ef4cd0422a403c01e061a080f41a32f66fbed30c27b9470a9f0e621fdcd95310b7d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    2f6cf2f7f670e17278eb3ef692b95980

    SHA1

    54c734c6f2244bf7c36973684bd2af124e156878

    SHA256

    ac228baea570f7403276d9d7d621e5629d05c679af02811e5d0fb15c66b1d53f

    SHA512

    d2163fd63be638333be873d6775e16b2be0e7bb2b22ae5062ae09dc4395048bbf252444c8d29c6fb931762a2bdae50241f558dfdcf28c1facda9416cd75736ad

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    1dc0553a16b90e972789521f13e40e2a

    SHA1

    32c4695672bd9e52c3161479c7472489187e47a8

    SHA256

    5bb674ffb687e7e033158882091cea2432f8ae4b4a115d53c9419b65e60a7a85

    SHA512

    0ff937d7d4993c926001e3ebfcde57a0d113c9839869a33cda01c4c46884a4b2e875f66e3e0a75a82c7ae22ee1d5676a06717d60b94b20846de9b06daf94ec07

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    cf8f9cec7378d4371dbd3126f16ea181

    SHA1

    78832bd5d91340ddf78392f221307aba43d122af

    SHA256

    c5af5f9f619526321f5a5e9989941b06454dd89d57a79134e393e9775e74b84a

    SHA512

    a118043d03ba2952cecbb357cbe6f23969ec20faffefd6fb177c6931cda1835bd8cd645713ef8d18b98760022e4021fe59297cfbb275b1cbc701cf2e05206a22

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    3b21ec0523610949a70ec7b7b1dacc5c

    SHA1

    782e40f7e61a117961a234151d92e2516b2f5fba

    SHA256

    102606b2d03406a722eb839a0184151cddefdbb48b7f6d2df969caed754282df

    SHA512

    7eecd8e2f14ab3a61e9565c846240240263535e78eafac98944ad3187d51cff8b216f5d82028d8ed0ca38dc36bcd91f93282ed499d0a9d515d99449d6f817036

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    304B

    MD5

    ee74fa7b74e6cf1ddc294a4fc77724b6

    SHA1

    691b8cb39506bd127c1d1a78628dbfd47ddb0b21

    SHA256

    c4a8d8be178e23ad952965e77401522a7a2dedb6afcf0ae95a50febb55c0a9ff

    SHA512

    1297db2989461a8819a0b6cd6c5746b1a005e84f523b20a2cb7a97e6693a6afe229fc39e2392fa6ca825d5633c796d2e2bfcc9c9aae3f1fd5f1fadb29e49cfe4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\B3513D73A177A2707D910183759B389B_147AB4536A182B9FCE88E194D59F3B22

    Filesize

    402B

    MD5

    5385956e48e50dac172af25ef0ca8d69

    SHA1

    c803351fc42274db04dbc3ea3332339a59971efa

    SHA256

    3df220ceffe814511f1b06d73238c3e2964e497711bf04dc2179888a597b6225

    SHA512

    aff80c429b22b7d3dc7bc43511a64d3181083f96bda644701615ece225e031a6a38771090eae316529274acbf637a81986ba43248b285cf0d70dc7805cfa0965

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    05a48a14c017febd3802d1ea8b7d9bb6

    SHA1

    aaf6af8f8af0a7c7e6ad6fd6b53cc4833a157c5b

    SHA256

    c91025e97975dcfc0bc2fc1a4a24ee4a0433c409322e2a7d237656f4b96367ff

    SHA512

    96718cea23323e35e77dfec391516f8976d315b67576f03e5ff994d40b2ddf77671e0774171ff4368b667c73a0a5e7c12df40ba95307e1c73c0f34d008bdc640

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\4UQ4J2DQ\cb=gapi[1].js

    Filesize

    135KB

    MD5

    cb98a2420cd89f7b7b25807f75543061

    SHA1

    b9bc2a7430debbe52bce03aa3c7916bedfd12e44

    SHA256

    bea369fc5bdd5b9b473441583c46b9939232bf1f98c1cedf6bc2241c4f5068d4

    SHA512

    49ccede4596d1e5640a9c8e8be333f9c18812d58f02b2b15adb54172df1387439e9dc5afc4ccd9d8f0f75f092318bed68d3cd577338e88ef4f9373de8a07c44e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\69P6875H\platform_gapi.iframes.style.common[1].js

    Filesize

    55KB

    MD5

    aada98a5b22ec7188655c2c17a083c57

    SHA1

    7c3c2fb8744e7412d8097e28f588788d91b9cd9b

    SHA256

    f2f09baa213dd3dd95edb5a30c7764e4a44d9a79c0831f90b1ad8ebedec9dab8

    SHA512

    a780aa3b9e36f61be8240487e75c19a96fe26d54abf9006680a00af9d1d394e81e517f0bbbc13edff3a7190679260ecd56fd5cdd7c2d2f416ab8982c3277b953

  • C:\Users\Admin\AppData\Local\Temp\CabE6A9.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarE6BC.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b