Analysis
-
max time kernel
120s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
09-05-2024 23:42
Static task
static1
Behavioral task
behavioral1
Sample
2c480e9688c5fe71c0c86ff150b9f3e6_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2c480e9688c5fe71c0c86ff150b9f3e6_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
2c480e9688c5fe71c0c86ff150b9f3e6_JaffaCakes118.html
-
Size
25KB
-
MD5
2c480e9688c5fe71c0c86ff150b9f3e6
-
SHA1
108fe2e25e311c045a651f96642b31d4a8285de4
-
SHA256
7752ed0c4fa19ff1fd13564e5da4b69d1151d780ca095a2ffb27e9cea63dbf6f
-
SHA512
60876adfd6be0ca817e3bb3b97acc0ee522560a2809a7d96dd2235b7ac7a0d9ce8b629f0b9d17b5999913e1e61ca0b76b80b24dd9abb7c54fdcf1b7fb8150893
-
SSDEEP
192:uWrSWb5nX6DnQjxn5Q/unQielNn2vwnQOkEnta8nQTbnlnQMYqCNAQpdE44cwqHz:cIQ/cvWZl9O+
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000de5a8c352d62aa7f241c98779556bd084c536ce58f92704942a6d68ad9af5858000000000e8000000002000020000000f8cee1c6ad99dc21f41b0c318a2c686f8c7cc2b97b6b5dd9c290c64eafc1fcbd90000000cc591db6eb47646e40f46586eaf35868087c9926a457eaa8ad7b6d7b92234a89fc0b75d5349d3ccb6cfa59bf418153e452bf539cc2269b2f3f2e330edf0661e015c9d6e6f6a7d0a5fb841398034762d6e40e3070989443917fc249bc07da1699c1ead492f7487c5b9ee406e922b15ba523d91897e1d015bf38a089da9bd0bf2dd5dcf9cc26a29c0772e337be173a4ecb4000000061fb120c95a83a2b13addeb6f8ff578aee77d373b96a0d6e770b03ba86414985c87804d41b04fc494177393c28ca2569291f835fb3d1c460d657b49babaa7fe3 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{C6C17001-0E5D-11EF-9A09-E25BC60B6402} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421460009" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80e4de9b6aa2da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000112dd71d930ff24b8b2b71a2c228122b00000000020000000000106600000001000020000000e8c630f7124f030d7293655463608a9d79cac6a407cc11236e6758961b248f19000000000e800000000200002000000098494513966acf0a83536d4bd638a02bf6d9324df3c7a2829e03ece5a6c5cb9020000000656353668b1e388cd59194dbfafe80093eba534b796226987680bccba8d2356140000000250d24c0399b01452aa3b987dbfa782b235ffcc4201900a171accaffa8ac87ff337fafc649dcbc10ee5319708bdf95022229a40ae84bf134fde65e65b29b0d3a iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2884 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2884 iexplore.exe 2884 iexplore.exe 2632 IEXPLORE.EXE 2632 IEXPLORE.EXE 2632 IEXPLORE.EXE 2632 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2884 wrote to memory of 2632 2884 iexplore.exe 28 PID 2884 wrote to memory of 2632 2884 iexplore.exe 28 PID 2884 wrote to memory of 2632 2884 iexplore.exe 28 PID 2884 wrote to memory of 2632 2884 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\2c480e9688c5fe71c0c86ff150b9f3e6_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2884 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2884 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2632
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5178c89d4e195174df69eb2826f8d8d92
SHA108dfa1f42b56cc1a074f3a5e173ca8aec48c6330
SHA256401c78274b8ab499f34c88bd8baa40d1e37a467ee5bc90e911ea07fbf3f3e05b
SHA512843fc28543f7960adcfd93736b13439fc08ee167f27dde55dd868e120d66c0132a805b5e1b0628c1cc628efd13f7f2979d1df3451db99b1367708a1d7581be3a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52a54de355c4f3dd7d4dc4f9cbebc0bdb
SHA1bd5a1f2cbde6af555a07cc20276b78b41ca33ff6
SHA256e0a2601bb8ad0bb243348068f87e02c4257900a9756cebc7eb62286cb9c9ba4e
SHA512f52574c7e1b3df1a2c25f849643e31c1c8e3d32945c6075f0e830c51a5cd72a6882e92c301aaef5d15c2d1784257e7de5ac51b3f9113fd2c58b534f313f11185
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5dfc2697210fc49376696963bdb7e2dcc
SHA14f7f5a4e655504c4b3e7fd0bcabbee3ad09cc0c0
SHA256c50dec9d41ef6b33feb342f07cea20087eddb86020febb4981e40cb74bbcbccf
SHA5121255ec580f1c88ea537ff6748d594ec2455f50f4cb0f71ad75ecca98140816fe5c5c26a3c1b8e83da404766bc7f0c3e723f062831ef0d2f276f76afe9166df85
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5465b3a67d309029a8d1c9cedf5537924
SHA1157d1dba2dd8b43e5f4bcec9c3384946e566eea1
SHA256efca68fb5aaa7d6a60ae789e1690485b54ab54b042146faba6429e8b0da90368
SHA512e628d5037f6f4cbf1e90bc0d4f81af8bf2b1fb4f2e6a2cfcd777584931256d534c9b356db91f4b3d4fc7e2ce6d61e4e79aaf39011dcf2eafed007bef7b91142c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD550b808976666d530425302fed0057279
SHA16731df6c6bdcaa0d5a088dda581b8cae01a24157
SHA2564840874b38a04034a69eb8e6f04ffea651db6de38778cc580075868a10015a19
SHA512bc99d3be21d960f7069e4999a83b7346fb0ff5930b1a2735b884a5107bbbdec68988722407751e2116b646563f0754b29c8f4ddcd7a213b624d8160d31ecc4b3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54aa5702ef4cc73ebb2743387079e77c2
SHA156dee5111efbe7f3ebd66c8a423d86ac7cca1f45
SHA25651c1c7d1f84152dc4a1fa22446f4d5467493c9634dede5c8f3e46c1fd09c69d7
SHA512b6eb8655118c5af4fc37eb7c80ecbbdde99e5f1300bb30473d1aad5bd0b6f493848cf88ee37312702deffa8526bb7dba588cf94247587eee6d682b919be93a96
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f84ccda1739b5b6fc71023f14d91d3c8
SHA1dbd60001c0d70f71213c74df6c08fface92d5f58
SHA256486d756806cceed4f7a70a6380fc22eac8c1606bee87f991e99ceb101a563669
SHA512432cbddc2e05162cad235c6dcf2b0bb4d84c50668169314bc38d2c9bb047edca5ece9dfbdc9fad3f641f8d22d0a4ff189491db7e94fb6a1e85493b4c84dddcde
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD506f61237a2aeb9c401532a098c25a0b9
SHA15379ae4dcf6e6d729bb40a254fd7650577ec35d1
SHA25602675f12f2b3bf12bc7d361fbd2829bb03bf4e1c0369dc4df94cdffb009538c8
SHA51232881af33c2a857fe893689be6a06baa9dfecef2954964b6e8cd213efbb0994ad742ef580afc860529efdcf3eeb388b1c4d4f9f084cb8edd0e25b6408262263e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56289db1aeff22e38bf508ed49e8f666f
SHA15d3982ea247d4ab847909a4327964de97df585b6
SHA2564b2b5486e8bf5d31d61886ba61e7e5412656849a7f883843dcb9c883a369944c
SHA5121b4510faa4bcba5f1aa42f7cfe16f3eb6d718f5cfbedfd5547796308c0d232de012b4d6c5a5bb268535e9678ee9e6c4c340a48539cbba579728b51823bb62693
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50c6778c2cb50efe32186a009ba9ae53b
SHA127ee7f5fe202d6dd88963625a5c7de54d73e59e2
SHA25683d50a37cf2359fec12e038f07b7f98c3a661ed3f9c331cfd62a20c91e8a7b93
SHA5128527ec4fee1c7ab0aa8d377443d0887ae32e35a7994b60fec2718b57a80a41540a312784fdfefcc1011a979189b997564064c5879e4d476d33f7acac83eb557e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50f6ea44691c6bb9c065ad8a2a1d53b0d
SHA1c947439a46532c95536c635c8155bd72219f7404
SHA25608d2e876c5ccbbf6ce3a4a7cedbcaf8f497fd897de35896ef49cc82fa9d0ac9b
SHA5123b8fcffffa59bf96cf10a7f68304dabece22027c69f3d03777c1f6e9f4caa23fd419eade8a70838388957fc02d3b97aa15909915af7059f7cb46b91abdd38566
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56f4d4acf7afafe3ab85e4e2dbae08a48
SHA14b7c69ec4f6732e4a71916093d2b5e7636c1d8cc
SHA256a7fd2f6b4cdcd0a87c43fd9ed076f59252c48878bd4380deb853e0d882221288
SHA512c135f57581a5adcc57b6028f19a094049e0482145ed2aec46d4e8a2caa22bd26a22c8397aea68d178c606e26ff7541fdfbeeaa6cc05bff1bc93c8a63453729af
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD506a8ee92764f284b9b39c5feb597919f
SHA18c984335b48f1d2fb8902b7da1d4d636fdcffc67
SHA256e095dd900a3d7922e69319a73b01402ec2a116a175aea284660e5f5aa4cf9849
SHA512eb7ae3881bf577c7a7368abb762b8758506fee90f509171379498673c25216730ffd474d947a9a6cdb0de2da4da5a5251778c91801a49190cba75728ae8165ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52efb693631cd6857b8def2c5af514161
SHA1bc866c704abf0f2438b4f6de8dab92988fd119ad
SHA25655a065ed2b1e033998303567fc822dd3b949271a53017d0acdae82b73bdd2d68
SHA5129a83ed85a09d66a6b8642052bc1b7f951f55115d7ad43991cac0a955d14cb6219d13d5dc268cbb150b4b943037a4d6786a82c5dbcb9c2749d8a0376dc42a70fe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD507ca6164518fec30229d0a5a0e45561b
SHA17fd40f5a04d1798a5c318bd3d78ce4a435362561
SHA256f76b103e8026d2eb84f8359d6f6b7d89c1069c89f70a5a1f1bc52bc8c0c91c94
SHA512f55751b2f0e6c6ca49ca4b5ca42366dd3d76ae7f52e08acb681a257fea1bf7391264158f0a4d5530d6502c66a761937b685a94dc2b65803a7ef7abb9d5b5f004
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56eaaaea97623981908fa29f703d991fc
SHA11173fae6bdc64541687064a855b4214a212e1ce3
SHA2566b8bbea0d85161d8d5be3a84f71439607ee1391c66b19dca4551d6f6ad0d158b
SHA512c0627d32887ceb11f54ad5ce861d9cc7317f44171f8d9a4264a68c69f4177cf69a235110351215af6203073b7b60bdf2bc5d01cd03b9b1ab9cfd6b71c9cc77bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5717c5ecb5fe3b857a36c20b35956866b
SHA11636dacf6eee3dccc3c48fe7aba3fcf4530347bc
SHA256f22774f7de072edfbf82a8144d1e997a752ba900a40525bccdf775ed5c681132
SHA512bdc55666c3a78332bcb4b04fa6acd754b2d515b1921dc37021af9d700e1be8afa2c114a5ab7a0c4707bc0117bdd7e270f610ff1d8dd5148d0444e1d9e6a24ec5
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a