Analysis
-
max time kernel
139s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
31/12/2023, 13:12
Static task
static1
Behavioral task
behavioral1
Sample
3778f129757e37bb54d9c4c73db75b45.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3778f129757e37bb54d9c4c73db75b45.html
Resource
win10v2004-20231215-en
General
-
Target
3778f129757e37bb54d9c4c73db75b45.html
-
Size
5KB
-
MD5
3778f129757e37bb54d9c4c73db75b45
-
SHA1
0b75ba4c46b090119dced2118dba655503454bc8
-
SHA256
043e93a0f15c7fe7989c94a4a902061ea9fb5cbee18b5391ad5b1389626eae9e
-
SHA512
0cff65344b47b4894138cacb49d6cef114207803fd8b1b625e078c95f78196f8bd7f30738f65b0d0f7744dc16b0c1bf1220b83bc9d5f44817412ec9403daaf34
-
SSDEEP
96:1IPyCQ6oISUKzvehCZGaXbrI/zvXdm+ioAaKLah3xVFBcD:1Ie6XS47aXb4zSa1q
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb800000000020000000000106600000001000020000000e05090174e4e834945070d018aab69a9a362047800664ebc88826a3ecf3f0640000000000e80000000020000200000001f9a401b43b3b31999bf88600df1d91772e1ae6ead1bef308dd7dda6113aede820000000d136432dbb4552d7fa230ab6386f25cd21a68d5831b36cdae26511eccfc5e5ef4000000088ac7f33801725ef3a8c977e5490e1d86c35622b21e916412f05035c2bf690a740160106e467ae3fd914da328f4e5ca8b143c7d27361681035198b3672ff4da0 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{17DC3AA1-AB59-11EE-88F9-76B33C18F4CF} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "410572836" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70633bed653fda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb800000000020000000000106600000001000020000000e8021161a9a4d87fb1090d09a51ebca077347b1ac297c928a5cf07a3550762e1000000000e8000000002000020000000271b27364913e499eb016f5a6449711015ba683596972fe5133c334373a2c0a89000000038b65e8dad9eb163c8bfb96e31d7e1e6cb447284df94066cd51f6e0656863f8fcc107724da6ed621a0a670532faa41e2e4ecd38868988456945c7db4514aac07af00907b445f810b349b21fbc14f98dedd5572c09afadd8ed9e2e239c5613269e32e127da7988317085cc7f2524dd541f42e16be3229ffdebc26e79fc0661a8943fcf30ef31cfa4782ac88b10c36f10a40000000ff15e169c9ed7b99db829c75c72c15da7bdadfb642bc35692184622947df8928d4b07c4c947aeb4eb46bd8a0429a85b7d54741bf7a599012482cdf91826e09d0 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1720 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1720 iexplore.exe 1720 iexplore.exe 1372 IEXPLORE.EXE 1372 IEXPLORE.EXE 1372 IEXPLORE.EXE 1372 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1720 wrote to memory of 1372 1720 iexplore.exe 28 PID 1720 wrote to memory of 1372 1720 iexplore.exe 28 PID 1720 wrote to memory of 1372 1720 iexplore.exe 28 PID 1720 wrote to memory of 1372 1720 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3778f129757e37bb54d9c4c73db75b45.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1720 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1720 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1372
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5be8c4bb31a6efcb6b18a1fb3911a1caf
SHA1d7f240db93b661dbb6c53d4d9bed54958a6916da
SHA256009dc2a038b69d2992ebbdaf390034293614e6d6685cf50fc885ba1e62fa87e8
SHA512e24af8b51ab313cce7e217b17325860c864ec7ab9c08ca6fdb98fc57e98c00c8648520974c828f139ac34d14c5f0440fc8964335f75d8b1ec5ce6f3e979e2706
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53d10baa1fdcd025cf949b37ab8f0647b
SHA1d638ec7afc570a529642ca3528c5c2278bc9fcb0
SHA256f8b900415a0b059338fd3d1163ba1dcfaf8259050282a20735075d9e8eba65cb
SHA5126b8b95a8552f63304d32ffd1dd8b457155d6bb60d2c81adbab00f0c42454753017e1ab6edf2bdfa9668b4014a358e485edb021afba3d21ab35483035c81482d8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5948255f4f7e2e44410d2a32fca7c2328
SHA15f69a22be3ca25a43f6360b98ebff831ba1cea64
SHA256a3ff62eb1dee1ea0ba6ac0656b96b30793a3af33772a4ee2ac3f7557062e8ee3
SHA51279048352d73df1ee32b200603e15975c8fdb907c49226958693103f526803887305e47311aa958b30466dc5a9cadbd471ccc88c4f3e2bba75737f590dc59a3f4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52ff55f82795e91720b977ef145124ea5
SHA1965d950c6b2093f1cddcc3ad3985135c8f8c9eb9
SHA256da7ea31a51eda0cd4e468d6d78b1a6f1f24812f7300c5f5a0ec1e2730d29b060
SHA512e8a90937a11c1cace8097f93eec102688e92b3cfb04893c3db5674b5c6f5fb9e78dba0855f74c8bb289398250dd739f4b35bc065ad4a8a67a599a8193e0924d3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5925d4bff1f62c693deec26c0edff701e
SHA157d4acc204d9e2180e66d1c44fa2aeb3bd74be11
SHA25617fcdc9fbe1c2ba387a1c6474ef17a2df9c946376784ec1a91fbb5ba3798e4d9
SHA5123bb8e01be1b4a65dffd650b62dfca0f86740c52a6c04659c97974f8075bc2dc3a662913e339c70b7161521ded1fd969e04bd469c76b071f97cf37f5a896c0475
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD512ceac196945fa4d97964d7b2b78fe17
SHA1dc9396f4bb9811164b2a8c41c69929b535dc1087
SHA2568d13e65eef84e98b4ed7def99c9a1f82ec35342092da7144d4a2c60b2f891d09
SHA5129355b42a2f6685f4c6642ca199697bc7e64859f6401e91fd147f704b2f26eba457523d778a8adbf89eb4c652d3c450a0b00879dadb95af4cd7376c36536a2f5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51fe0cba0870951feb9d09b0a6f971740
SHA1f03920a3b959a6d30a12d1478621a58398a71c59
SHA2560ce3e9edf7c8b535988aa6315230c45c8acc0682d8819a170c48139c740cfa70
SHA5121deaefb7a86e2cba6e20ded131f51cba833d7f02456269243efc98c5ebd8207af7f92bf5b023bf56b020552ddf26152f42172b140fed48030d2683a4a635a101
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD566c6edaf351c822640ad1b921c24fe2c
SHA127051c1664181682dd589b3c9430e7264a994505
SHA256079d5a86aa39dd20018492a74a5b7a10415bd4675768433ec96632e333a08505
SHA51257d7a42d91f7eaab984cae6026b7d9271d91e9d334ea3141592d978e59fe8ed7ec048a0ae5e8cb29b5105b30c11fdb195b8413a69bcef93ca0b064df4d29d168
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD590d400448997d217c4ef5d30054e6b9a
SHA1ea007bb794a0a7332b93a29af7fdd4fe10dc2f0f
SHA256a7f63c7ee64d33d96630dab3d7d166e136e7e7e829d6cb861b6d200f206f52ec
SHA512c0c878684405dd4549e9579deb6e2055f46e28f3e7b600172ed147ffa641e0307035480718ee89458c2deca389d6bb3ad105ccd73d07911c7c26e2bc4211d9d4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ebcd49f7806021a989de461f3cd57b7
SHA10cbd0a315d7293a8cd09e08ec169720da0ae60f1
SHA2568af8b3ccda7f0cf8759f519dcbb8030e11caf3405964c5583290ed59d7ac7c79
SHA51219e7c59e33189702736f7632b53f87fa6b49d1436a28c6ad32e198155eb4857ff7859284e34868a251656650ddecf24997afea402e2771c6f4cff688f9ef1241
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5855e171e4d3f03099e16a7d417bd4c1c
SHA1f370d61dbbe358429cf8a2fb5c804cdcdd61f833
SHA256829ef66446cdc95057feb7cbaace0f31bdbaca41111038addba18965f57cf5b0
SHA512ed46756e340964763d2279477f434607ee40093cd8a9fc2314595b1093256d2fa71ff17f0cd7ad89060dcbde895b64c79abd738ea0b4df2760210674efda4668
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50c1db7ad003e5b69fca92b6cb916ef40
SHA1d2bd056716ce58fd68e1760f61262c1a17e04735
SHA25680b072b3a7550adb065d4469565dd02b7621016837a2e0135f1c60faceb607bd
SHA512872affb597c25544a3f113e90a8dd8f97a7b30068632b47dd9515f82fac2b0cc1093155d27c4d6944504a03c801703955cfc307a88ee54a4fd2e5f75d01be545
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cda36fb86e8f1c1b0450c70a3ac5f994
SHA1ee8329eb7c73e35ffc9915dba281dca9c463c6f1
SHA256b8d8e1d9aff75ab635b0d03cb49fd1e5be60b91f1c74b95e3daaddb3a5847f61
SHA51275281f7bf166237de8954aea20a2aa2f185712b04c998d9f7592655fdad88af02a4d23f80e6fcfe87d7e8a6712fe8495be9101c3db58957fca89455436b98050
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d94c43a2763e9caa1e7046aad86213db
SHA1e0104f22edabeea649d01cfe8ffa3c6c3028fcbc
SHA256e92a77faf33b9c1ac88177782389ece63a310b4cd7bfc4b16226a391371437f1
SHA51250d4ccca6a0eb375cc03aa887b3f4f6604d01888d666b7722bed470249a747868ee5beecaf1fa5f7b6b94d41fc4d50ed55b592e207209f1c270e7b034a826d1f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52ba39bca56444d95aa575a4b44367c8d
SHA13b2cbca438bb4a0539b473f2e32dd6d03f1ebb9e
SHA256fb698a33ee597866a18bc16bb1c2e02e5bdb97b00c2d655bd73bdda293d2974d
SHA512f79b32b9667dd9b1d2d228c7e9388a0539c6cfb6c4ea43257391001507ef00e4f7db9a2f90c9f2b8ed7b9babbea5f295fe8911a701729b675f3124fb49ea8260
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d71bb376de4239ff32a91731e6dfa773
SHA107e6b6096b7dbeddaf95e991834a139e80aac68b
SHA2560e2b3c4e2b50f386159050c92d53d29c0093022fa9d47367ed538c967a52b29c
SHA51227c01d74d3f5b909220c4de25f04de5ea3e5a2590b8549ca32684a410238976f3d03a3001c3b9a486d6857c68fff2882632ee50fca5bc70766694e9770195f98
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD520dfea6921440a7a2eb271ab01e64f06
SHA1762ba6ffd06e07ed7364ebd77b8b97ace90537e0
SHA256267817a23e035aa161f9d443e882ac3781b2c3baf1201b8b9d03db5cc730050f
SHA512f0bb1622d506f4ab655d2b82813e71ccaf97fe533968172d34d4b684d05fea7153da9fb7194fd6e272b4a6edf6f33f305ad7cbb79a60c76f1fd085586cf7c192
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fd5fd7b455b678bf48cf282352e6241d
SHA1619b41cebf22d65accc84360a7b0cba3309182e9
SHA256e5498ce125df5bd7b2ddb95ada6af6ced1267aa9d035f7c6615dcd9d3bab7388
SHA5128fc047b18d086941f1854d05a455a98173a94621272b18e14458d2ee57c4bc0226e304105de0dc2f601b8ca1826c0f6c42a8af03b4f55716b79d11f81479fd74
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06