Analysis
-
max time kernel
147s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
10-05-2024 22:42
Static task
static1
Behavioral task
behavioral1
Sample
3166ccb9e36f22f17882b2e34803a270_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3166ccb9e36f22f17882b2e34803a270_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
3166ccb9e36f22f17882b2e34803a270_JaffaCakes118.html
-
Size
31KB
-
MD5
3166ccb9e36f22f17882b2e34803a270
-
SHA1
c159163a77d933787c6be96ec8f0a8440d6d6794
-
SHA256
60fb98c58442192224dd2f5762e2fb8d77b99d49453071496a2b5f92a6122b83
-
SHA512
5a888a31b0390c6b0d29b6178b7fb42cc1345a8e2c8ed80ea70b3451c338c33b07947617741e41d170ff8bc93b389117b5636f14713239ce1698bbcd4b86f7e0
-
SSDEEP
768:ShLN/H6R/AA4iTDw+/YD/mADEKY4eQIkQO7WhGK2s:Shl6R/AA4iTDw+/YD/mADDY4eGV7WhGu
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a70000000000200000000001066000000010000200000007bdc243e20f6099784cef840a83e0e819051b562ff64e9c5ef01b47dae951bde000000000e800000000200002000000055d1d43fe96be9973b143242419348855c0d61e4b39206c318f2d71ac2b8c967200000000c52edcca0ed5c9fb48282df1b380b88c2c17658a7ada3a48716f575e6b71a7d40000000e485e582e9988fef7cfeee6332152bae92381f8de41eeacb6f13e25100e7dacdb77583576fa74ccc199e30ddd8728eb355236c2c4c82bd4fc22358b796d68cf0 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 50d8485c2ba3da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{84D11851-0F1E-11EF-83FC-5267BFD3BAD1} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a70000000000200000000001066000000010000200000002337d589f03c69ec58685200ef34bd075dced255d68e0aa99997f18b2629f862000000000e80000000020000200000002c44864a670b9bbbe08fc0fbc2575e55f2076d1b3d918cfede93fe12517814d9900000001c2650b731b3c84eb6b4b500b6329d47827c08ee0a2fcddc87f6f7e6a9378e38e2d6163c676c880372cbb58dd65667419f772274ac395b32235eee1f1243682bea0ea5b007ba501ae7dd357050c88e7e9a9c3f71d7e0411ba8e01f5e4ff918d1c3142013cd0f16c406d611f5a5a7b93306965a05a7013b474f2800b9b13aed46f77041301218d35057c3ba8a6fd74da740000000a42feed486af286e425cd46a8e8e2a90196aea42ff12657b399058ab445913064aedfc51d77ee50bf31e96429d1ad107b485e78acd27d8db63a996a11177fe07 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "421542789" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1964 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1964 iexplore.exe 1964 iexplore.exe 2592 IEXPLORE.EXE 2592 IEXPLORE.EXE 2592 IEXPLORE.EXE 2592 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1964 wrote to memory of 2592 1964 iexplore.exe 28 PID 1964 wrote to memory of 2592 1964 iexplore.exe 28 PID 1964 wrote to memory of 2592 1964 iexplore.exe 28 PID 1964 wrote to memory of 2592 1964 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\3166ccb9e36f22f17882b2e34803a270_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1964 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1964 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2592
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c0c8d647b192068978f56becc75bf441
SHA112d02406106567f1f0634ba46e89b2c8b9856e59
SHA2567bd2e1ece8f861d7a5798dd89c4be6a952425627a2918bcb0cc31d3d658d5e52
SHA512b407a9ac6a52a7cdd975b63f57dd0d2a08f47a2a6633c1b0999c94989b1c3fb3a801f055b1f2a64924375a7cb721b193dff21f6fb59b838025aa09fbd5754a4d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5886f85ef0510930fe690ad7648bea52e
SHA12f29b04f4902d94e0610c74e435cb8e316848ffb
SHA256f03513e1201649b625688018d93a5b468c58f01de085c05ace02ddd54c4ccbba
SHA512dabfd15c78b5bab94a36b19fe34930fb2fdfb2d9795aa8ccadb1be6acbae294fa43a68daaf5bc8cd62a2a979f0d4dc5700cbcdd977a75e5f93ce9e6bbac8c023
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c957d76f7d59cabdfa5373b63c635068
SHA1a68a353d89881b22f2dc7432716cbb8036f81503
SHA256b6faf8e39bf056b9e3b02f6b956b0a96c1cac6088e3ba7a441511100b22986ef
SHA512d8a078d5648c114920927a6a75b0e7efe77b979aba42c93d77598e309f0463b7593f70915b0101782444ec01ab49af94e5d0ab5f46ac8c780b7ec77675877149
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58fd38f512d320701997644bdb2d87848
SHA148e320313d4cc329a55c88a7977bf83b0f0aed4d
SHA256ce9405acb742abcf3a8efe0781175ce86a2a5f6439cd28feec771e70555a8142
SHA5127bb9059862f84541abfad0a61ec776115ea2f61716d3785902e8a847b53058eefb0be22f195cc87856ec1eb838014edaed70c22e7f467232310fd0afca06acb9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50e89875950e924a288aa7b77e62683e0
SHA1c60e910d121f73fa66280ebb2e8d73dc6d7994a2
SHA25617bdf4fd292306ffbfbfa25c7ddaa2934ecc55648c0d28272924d324c3477694
SHA5129d1c970a5e1c7b29ad23158e7c9c8f866d0ae7244bbe354232019437b262bfb31a16af393aa0aa8a969794085fabb4a847aec129cad2fe772118351ddeea4336
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51cbbe5be159075e776a9339ca9ca395a
SHA19c07199f10bce2ebcae86396efff30e33eba1d12
SHA256f3d8095619e30e93abbe1fe5484ef76be02e54b2977ccf3553c1af21b6d900b0
SHA512cbdf0485b9a59c4e18f2815e856aecab768f0b1498f79b396659e99600f973b8773579ef2e7ca0b6508875e6363a42ef88d6cda91cf3129f59b13ba8badd623c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57c9a86876ae49558dcd112183f703e69
SHA1d6e8eb89ba9a6dbb556c53425fc13dde6bb35554
SHA256928e406d5cc70b58e22491650c941a5a0d8b0e05fd59925314e8afaa5baf28d1
SHA5129940c0a784b7ce3b295ad537b0871271453afe24df8828bcfad475883c7f411b0669c7d885fead9047b94b58c6eeab2b518098d96677776ae9b13529f0045a72
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD531f02ec49268199fec86d3239d576576
SHA1a7921ef6b4822fdd1d54338c82e67924b735934f
SHA256d0380b5bcdceea9e24789bfd61371ede0d85cb3298bc4be22343f97002277af2
SHA51232e2fd3aaef6362a7f2cd802c684f47ebed0098235f9f7c6b860e4b0a4c9391143d5be02006fc6a34eef19cee84ec9829d306e9209e473e00a3c1b02d6649ff3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59668288f763b67aa35e28c8d053cf923
SHA134107450525b8b9c4588c877e23f439d558f1783
SHA256ae9a9163eb2c4a4269df9db8f4619a561040c723fe7fbd57dde78771fa0cdaf4
SHA512d3deddfc4402215f88b20b65e656b19caef83859230f42ec0ae0b5d853f4f013164156a5123aae4588c500e0fb54bac1dfb0d28f2aedb9840d3d2c2a949007fd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54523ca7dfe8d81f69618a828d048bdcd
SHA11a691caad7156aa6c494fed966229d43f10caed6
SHA256aebdd597f0bacad7cc22cc3d0e840d65b75363795f50a4dbab399979de4edd9a
SHA512228a51b1416a165ebb3a867b46de4da210b2d869ab98d7080ddc6c58bead02d277a66ce19b9a85819c27464d7252ca9b411fcbdd454237d722bdf65dc87006bd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54aa0a3eb4749aa52d4e58d3243666f59
SHA1481ab80515f8c2fa0ca4f9fa1e725e5f3983098c
SHA256f2766cb3b63c815c162de808bfa2c6a784657d29b4c8741cb444209104143469
SHA512ce95fa70d37c0c7aa0c3d59ede072e8bbeb662da08012fee08fca79a0d38f09fcf3e0721149af60fef47549f09bc3e8174b6efa271ccc05b808abe82e92112b2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54d85c5872f53227f5a1891c16e868334
SHA127447d62d4f00991ffd247b3d2d99948db19bb15
SHA256b6a09d8ef5620858dcb628920a9baf2c80b3ae8e998a0e4b7bfa1f28621b4b85
SHA5124727537f77dd55e812c49ef2bfe814db48ecfa29cbf423def9d87f082a69282b05398fb8eb912f71431d8ce66860e3eb02dce2eaf0db4744cf6bfda18fd3d304
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56727bfe9c3112acf46413dfcf5b17911
SHA16be8af1d5790b39bb62a5771f923979b53ad0eb1
SHA256c0aba354284d7c7e9d8a1209843d1c3f66487d1f9df1b4126bb5744b6ec5d904
SHA512f8c878f8c0af4359ab4d07c1f4ba3d0a56d89cd821bf1e6f49f3dad9410cf8989553a1e44d6e4b556d5d30305ab8e62abda27c02a0b5b7b586599f822f648a4d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b6199874107f435fc6b948bac3807af0
SHA1ea48206b69a18330b37828b4d5be190c888289e4
SHA25685ee7ac0aae76d0892721cffb413cdcbb7fcc76a9baad80902274d8be736e97b
SHA512ab01afe33e99f820993bc762dc34ae4e83222eb0836b96f03660e857bd9927f671bb6023017838db6a2347baa5d295f085000b10da2a6dc876e3b72b0403830b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a50d6c290ec55ce528ff881487b4012f
SHA18194f688f4711fa8a9631a2604fa6d07d8f62ead
SHA256857ef4e1d258b288aa302de615c7c2a11b92815080ecc3cd485fd0ccc929d19d
SHA512d70d42c2dce18bc091378c7bce3c2c955d783155746d7f7041f0b79c27adc21eac1d8d5eef71b7e140f8c5a8ded04229a797338718917c19144471d758ff6420
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5922d5b309e96c25ec9fd395bafee94c1
SHA13e4e585445b47eb12664ae65e84574d4f926ed4c
SHA2568ab5130c617189b6717db2c60cf333c7c01179ffae5fe41f4dc52d91cbb981fc
SHA51248fd396d05eca3d49ea88372a0726576fac0f15138a174e83fea2c8cdc7c7e2faccb99298ccd17d330d901777ff37881931fb3ddc235d6f179dc2135c3f223c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD571a6c775ac322fe12d71faf00c5d2098
SHA160f1933b31a1354223ab5830713438c75bac5901
SHA256c34206685ff62ad5887ee850f720481dedfbffdd52dd1727320942a7dcb4d042
SHA512ed2785b7cfbe1017290cbf151c943062b127b084107e9aa951b7f107de5b261807ded97ceff8f50054d561126a3ff463d9f4cd90c9d6576c90d851abce44e1cd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ad7529388cfaacaa5520b56b6bc46e62
SHA1fb2351398753dc5c3f9bb5bfc27449c05ada5844
SHA2564057f1398c70a76797b4b18ca243081a4327fe9a5e932852041a82b4837da39a
SHA512a85d127daa043d7e836f295f1d70d004f2585844cd501c5157cee2d741ef59b4674f6ebc3073f49210d640bf2136184aba1a02c3fbb11639cb7606655c250281
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e4cd18647980ac41a1077bf0dd2a1795
SHA19bf086cf6023cb06a3f0eccdc1d630f7963050a2
SHA2560cf9febdc624f57db4861ed5b4a965f6f09c6b242e67e529263de7a614c1ba93
SHA51241b3a8525b661a09b5650c223eb40a1d2d8258e47254ee586c8199f4f8c7bfce2b10f825ce92639093e18c62f95d60cd780fc867d5fe2b64070d69668b9ca4ad
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a