Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    135s
  • max time network
    136s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    20/08/2024, 18:20

General

  • Target

    b05277d6f4c6f56bd6260fd2f20998e2_JaffaCakes118.html

  • Size

    16KB

  • MD5

    b05277d6f4c6f56bd6260fd2f20998e2

  • SHA1

    29205f520efa4987ce1f76e6a9229f93888d72f3

  • SHA256

    c2f6fa3bf198d2e3f39c22abb5927a7255e4b3bcbb0bb08514fe9de0c22a043e

  • SHA512

    af354146432784efb26caff816bea7250c089c124c03e6e00b35e5c60f7e8e64962f86b8dac95db43fb202a6c1e151ae3c1be5ccadeeefb7cba82cfc268870a2

  • SSDEEP

    384:0Mnc82ldR3aSAUAsHeDRK7uahgkN7NlTr2V:04c82ld9a2HeDuuEVY

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 49 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b05277d6f4c6f56bd6260fd2f20998e2_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:2956
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2956 CREDAT:275457 /prefetch:2
      2⤵
      • System Location Discovery: System Language Discovery
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    867B

    MD5

    c5dfb849ca051355ee2dba1ac33eb028

    SHA1

    d69b561148f01c77c54578c10926df5b856976ad

    SHA256

    cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

    SHA512

    88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    a69fe1f2dbc868ffec000a465065c1af

    SHA1

    c0638464182735b95836b393e83965831c6e63e1

    SHA256

    41511636512d1c54a9e55c0b765722ff28ed00afdf9854cbdd99d1cd7885f61e

    SHA512

    ab1b466716a517dcab62a9eb8a2d4ceaad7efba34c396726399b699993a364d966066ffcf437010f7c28d0f9cde437c973f6ffd2fc2996e2c25fe8b9f395ce70

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8ffa00a21ecbac7ea81dd94f238f3334

    SHA1

    8ac5171011fa80b4a63f318cacc693ba9dbb2ca0

    SHA256

    92171005292f9c65be8edbcfac990be00d149b024245bc76cbd2c2b59998d4ef

    SHA512

    d74c6aac33f0940095f5e9f65ca56879471a262170cf67937c6aff17abe52b9ba208473325379693da6bd4570a2fd66ed7946a04eb11f2c15dd2b7004cc98c5d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2ecb48437171f904bcdb0af51625f61

    SHA1

    01cc44a2099cf0a062c17595544c541e27e45135

    SHA256

    7b64b87e8d3ab382c414dcc4cd83bd39f4edd0cf411a412b7e1aed1b851a5fa8

    SHA512

    2680ba53ea7ccd547570f06d38646ce2c319500aa8e08127aad11a9fea2dd73c3102432a53113b1f45a5441ba4989c0138c939255dd97f7dd7f85bd770fcd1b4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    78dcd1e1e6c91fa8e1d04b988d500fce

    SHA1

    f2c67631932a24bb687da2c279e65e7fc7a04d33

    SHA256

    6d7b9967df22bc14d551341befee7161d309715a4ce53738532d9b5a9afbddb6

    SHA512

    d2fecf5fece8fe5b4929ae76ad987a10d4e27bbb766700fad85452726e7729529a46560ebbef932fb0b32a6642b89212bec96b17287797b980413068e6d49cb0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a53e986ea93aa0927f4e2558f347cfd9

    SHA1

    bca74404e43f2c8b9b03e093779e5b4c18404ea9

    SHA256

    127d2a5b39ec214f7929070bf48e06c4c5fc12729d907edf3cb3fc8d2c7f49ae

    SHA512

    29adbaef4db9444804af31280c8bfa3e73c68b107c54887f7bb157bf250a10c2fb0bde5e7f417253b2b99669d5626ed3323c5238117a5b718eaa1b64762b2393

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6ab318888170af20e6195241acf3a616

    SHA1

    f9051d9ef39e1f92a6a82ef8f1c6430f1ed1f358

    SHA256

    4e03f6275d10b92e9fa11119ad788d8ed7e90dd714b432b78ec529b48cceef77

    SHA512

    c8bb8a1323981a2a71e53533a4bc219925b8c17f6628cb3db0bc4b18972df952c62ff64e252b081b4a9e1475404ee4790aaa111d4a7ae179eae5818c0a02363f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    55b05a837e507c55aaf58f0d863f5c5b

    SHA1

    56033122b9bae4ddf7c1b22df756b7457bf8ecbf

    SHA256

    2fd9893f71b19879cbff8999e99f4bc455d04cc5973ba7d05b4b24daa6028dfb

    SHA512

    97e3e0c0bb41a315ed53ff0c965003e7a9854968d118ad99e4ddf38f9e85a4f19045b5c04f14a56213a5a8a2cce700e6135a5a83762cc5c69e51b183fd714d39

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d09092343c11b7c262c88c6517f54d7a

    SHA1

    692761f1ec93488caa8a3e948fc8f1798ccc356f

    SHA256

    a01b84fe65d4b0b2f7aea6d4e512ba457b5440e6b349dd53a09b93c80c371bd5

    SHA512

    9885bd9457c1b47870b94daa85b2f15428942b3e88711db9447e6cbab3f5279df64f62110c4907b6da4d8f7479384d730c887eb33cca57be9b48fb45bd72da18

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6718ef177d6d13720c9e78661a1a085b

    SHA1

    2995c90714833cb510ddf2237ec46c442211c6e0

    SHA256

    509157ca057c86e186716fdccf3bd4e0e6210a08bb45b9281b179619c3cb32e4

    SHA512

    5ffe939500dbb81a5dd2db69293b2f596a42033dc81bfdd6833ddc0e8bb560b988d0082a0524fcf212d12850fb91ef42c4fc57714df84a14dd04f59f543d0626

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1e323ee7c4aa42c6f6188f5e037af51d

    SHA1

    db11ed1d1a822c4fa1c8ea40aca4d03ec11bb920

    SHA256

    5bcc1aa46a77dc5340e23b827355c414058c4efe952a3d92cf07aa729d5701b9

    SHA512

    90928b5ae12f31a02085cce6928de18c4970a964689bce53aa7500f3fb5a14f9c4bbf279279fa4fe738b35128fc7246ae72ff88ab323265de1871e21f8fd54a2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a4f0befd5ac1ec4164098915d15ac5e0

    SHA1

    15cd9ebd2e0ac01cff7d0c9e96705540071e676c

    SHA256

    5107c4615509da9806a618c114d113c81264b048286accf49515e35527ed7448

    SHA512

    c0c927ddd55a3820425d2cae0f9a5be47be9dc5f41323d4aeb99d2e1be48f14a07c22526a179d8384865ec64884d777f13cc2e854b7cd776bc97d2f97953e310

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    3624f9f7b6c19b6e60bc67b115a9fcba

    SHA1

    5a6617a5bdb6fa4042f6d6172dc8a1331e3ca5ac

    SHA256

    50ada5a7b928b486ba89ba254143d1487cc837533fef9412631b0a03a2a0cff0

    SHA512

    f6f8c9ce00af6f7d1eabb267ab3add4e2cf68bbc7e29c88e80650968ba65a2ae080c4ca5df3bca09823735eaa763f0d13d9cc7dac9a2f920140b7f88fbe7339c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a9a2fe7092f57d2511085527e5689b89

    SHA1

    87fc15026c6cd5f875babbf0e04f2952a43d8a65

    SHA256

    645b7bd4821974decbe477eb0d826cdad1055c9bafc683d7481e7a4d2ed912b0

    SHA512

    feeba3076d9a1fefa5d41d3588ae420c377cdbcd2742280cc11da04b9b57b5298036deb5288d13a99dfe10fbc7fae24b2f77c8eb1eb55b055af0aa1deb635c7c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    5ec36a6eee24483fbb99a83d1845414c

    SHA1

    8401862cbe1335392c2b3e7ff1d4de5bf2b891c5

    SHA256

    fedcf280f56d98a83a01066a73346e7a0f3fbc99bdf157ac4787413872528cf4

    SHA512

    f6f02874e4ff1e11909c2033fd92a4006280e3b8ec50acc7c520ca518aae7e068bc59787f11ca0c2521903275b808fac99f55a9abf945c03aa230e71584de0f2

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4c4a1e76b23588e0b231d750a7247b18

    SHA1

    664c95d613355dcba238c2176f5700b716004b87

    SHA256

    8cad2b44312b6c131e2af3a781c48a98b1fe3b7a0f8152bb1a40a7cc65a53395

    SHA512

    6de52abfe1617fe1fe41dfe6e5389cf7f77f2027905adb5e12da8ee726d6187738dd82113037579adafe6f416758cf378d9353e99d2aa6693c6512e4891f9e3c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    6adfe8939e4086c6c82521526c4ccb21

    SHA1

    5292d8ecade85afa5543949e98ce83c29c8afde2

    SHA256

    47cfced7c531178218b4cbdce968bd303910ad5141b72631439d85bcec75cc51

    SHA512

    c8ba501f42b952c47f6995682baf22cf8b4ab9b60e7b6019dfd2a3dd9e815a30d65718211b7bf0547f2c5696da524d197d95954361428760fdac228ea15ab9a0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fa457610fce4eb9c5ed34cd96667480b

    SHA1

    18eacd79e77de0d04d3f1e40c99c87fa49ede4eb

    SHA256

    41745331c8da605d03fc3010e362a0c2a553ae6f48b3958810e9ea37fc934777

    SHA512

    ca054897073e9e602eafce0c96e0ef1b53b1e3ef16498d1967f8b9c1e7eba13bb9a43e9c514fa6dab1f3b449c8b4e88c9047957787f82daee1d3496079ea5755

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1eddf4de952c7f6a535201787f4ab4d5

    SHA1

    3e8cad7ba67b1b6ebeb6dfaea77a2dabf6787485

    SHA256

    66c78e3a73313cfaebb37618812cfb09d5ba986a779da6bbeefe21bee638fb16

    SHA512

    6ef0848b2bcbc5569a9f81eb03fcd62f26ed58db9aa89d82a668b5cc5c76d81979a4a4e848831bfe586f75171f469ec76b741d1f61d8d9277d859c6da8406c93

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    2ea4b6d53c45b359a0bfe324c2814a19

    SHA1

    9f3a082a820163018a2af422999033049f7ff5d8

    SHA256

    339bb72b1d71639752d6127877348c56ceadd03931647ba2668b4c9b4e34daf1

    SHA512

    d62d67392a7dfb693ddaeaf141b3a0890f84dd40a814c43f41eb516dd4803bffd572daecf3e98ec0cbd4beccd00514fa86031c46b24f4d8f789572c70733c733

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fd0b84389908dec64cd7c5f2b99db04

    SHA1

    a7256b82289376840760f8f9cb6a1f1e5dfb804c

    SHA256

    1beb002c56049ec557dbf96446e3f3eb3d79532aa9410c8a53a2882a6da3a5c4

    SHA512

    1bcd3ca20ee86bfaf95ac224cf1bb211efedf22ab2ffaf7cdbb6d6ed26e55f2548a5e5723dc4662a8885e5c1db451cb9ecbad60b83b2bbc863571968b7c0fc91

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8155ac3a61979c73207371f9078f068d

    SHA1

    0682d2ff069e008344c7c2d2d9e80cc9d6a6e29e

    SHA256

    563dc4d73d6f69c390ad113608ba3e6eaa80bf87eff731eb2e83c86db1a9ea3f

    SHA512

    ebd090def6887eae7cbd34d9f274878e8f8312d531a382d79e4a0acb73c73fdb3243c30de3102d3ca6604cae213b94d64203561a964d59f7cc8ef45b313345e0

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    4fe79b1631d99c0007d5ecc1a3e5df45

    SHA1

    6acd79acb5991288e44ca3f9e0a8ed1815b6b745

    SHA256

    2c82bd4b7748e3d708a39c0ff0670ab8bc7ead11b67a13ad1699945ebb57ad3b

    SHA512

    0eff32ee3113bccb0d8925e7ce28f417453c606df43bacee38406b7f406310e5d8d346693737f1c9531b112d4fc3914ef2c5f6da0ab111fbbb68fa8fb51def60

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    46baad45aa1eefa6e55fabf330a6ee33

    SHA1

    3bdfc5bdf69965af803949657e4638bc74b2ca67

    SHA256

    dd43119cdb9c455a196bfda5290f200c09811d655d7bcefab3de2403a9446acf

    SHA512

    86ff5b0644c9f9b87b30d2dea2e44e4fe89f2135b0ce5fa80dd0233d7eb6accf32b67ac71ff6209e17bf57ab8c92d78301d47389690d1867987d3c9bb2a28be9

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    cddd944b3e90b1ad47dd0f79ce83d4ee

    SHA1

    6b9e21b2224c4c41b1b03abe3728da76636be366

    SHA256

    9980c821a304c2bedbc7e23ac8e7f0409085aebd25c4ed6db2faa123479268fc

    SHA512

    1905cc64d6f34adcf57c12e15da148dd1ce37bb576170c5240ce41c3fa28e96fbdce33fbea6b79e5611752d9d1c0fee84c328dc85c75e97eb662688b282e815f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    6cd83e668e01a33ec8895b7439079400

    SHA1

    a93489615984073d539852890361907d409ee412

    SHA256

    8e11aa68f18ba4c39fbb12d88ce06337367dbb8c06ad9f526af065289c8a2b67

    SHA512

    7c9f654118c870391d82e996649bf45c0afe0e7854b536d2d505302979a434684d687bac3f7c8d9f46ca3a7087ed10cf275a4e9065982ff15fd5526cee363940

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F59A01A8B782D93EA6991BC172CEFFB1

    Filesize

    242B

    MD5

    a457f57908cb223322316fe60a41e3ec

    SHA1

    c191454f705cea28143789ec6e4720ccd3595ce1

    SHA256

    d755fa4f6bd41d3d6e72ae335ad6c60e54b8cb1bf65230443e238a1afeeecc82

    SHA512

    b354e36279433fca087117ad8d2258f5dd688a50ddd374c6e26cc57501da349eb23c3554032e41546ced9eff9e2ed14fcddd98642bb3aa204e1897b392a958e8

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GA43GQEJ\recaptcha__en[1].js

    Filesize

    531KB

    MD5

    1d96c92a257d170cba9e96057042088e

    SHA1

    70c323e5d1fc37d0839b3643c0b3825b1fc554f1

    SHA256

    e96a5e1e04ee3d7ffd8118f853ec2c0bcbf73b571cfa1c710238557baf5dd896

    SHA512

    a0fe722f29a7794398b315d9b6bec9e19fc478d54f53a2c14dd0d02e6071d6024d55e62bc7cf8543f2267fb96c352917ef4a2fdc5286f7997c8a5dc97519ee99

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M7H6XY0V\styles__ltr[1].css

    Filesize

    55KB

    MD5

    4adccf70587477c74e2fcd636e4ec895

    SHA1

    af63034901c98e2d93faa7737f9c8f52e302d88b

    SHA256

    0e04cd9eec042868e190cbdabf2f8f0c7172dcc54ab87eb616eca14258307b4d

    SHA512

    d3f071c0a0aa7f2d3b8e584c67d4a1adf1a9a99595cffc204bf43b99f5b19c4b98cec8b31e65a46c01509fc7af8787bd7839299a683d028e388fdc4ded678cb3

  • C:\Users\Admin\AppData\Local\Temp\CabB425.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarB688.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b