Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
10/05/2024, 09:43
Behavioral task
behavioral1
Sample
2e84177ae48825a6819edb7c17e4c551_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2e84177ae48825a6819edb7c17e4c551_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
2e84177ae48825a6819edb7c17e4c551_JaffaCakes118.pdf
-
Size
39KB
-
MD5
2e84177ae48825a6819edb7c17e4c551
-
SHA1
fbab264e4a5c023bb102ee9a5e380e0987466371
-
SHA256
61e6cb0d1f068d8799285ef1f0d6d20130217ac6ebc18c04c85702b8272d1c4e
-
SHA512
41cf71919ce8130a38ae01058a1433a33d31a0514eadb9cbd706f50055a4b007a1fa448d9bffaa2765a7b81db31d59c305c753e63d5551e29101fdb2cfdb467a
-
SSDEEP
768:sVKZglW9o8JWwsYcy5tN9aIVJGgmFuaDQSaJFk2RJTbs1U/NLeZ5ngx0nUcLwE0/:sVPb8/c6tvLVJGgmFuaDQSaJFk2RJTb3
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2352 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2352 AcroRd32.exe 2352 AcroRd32.exe 2352 AcroRd32.exe 2352 AcroRd32.exe 2352 AcroRd32.exe 2352 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2352 wrote to memory of 1016 2352 AcroRd32.exe 87 PID 2352 wrote to memory of 1016 2352 AcroRd32.exe 87 PID 2352 wrote to memory of 1016 2352 AcroRd32.exe 87 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2556 1016 RdrCEF.exe 88 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89 PID 1016 wrote to memory of 2216 1016 RdrCEF.exe 89
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\2e84177ae48825a6819edb7c17e4c551_JaffaCakes118.pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2352 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
PID:1016 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=FAF513F7DD4E6D0B1E6997568162D1DF --mojo-platform-channel-handle=1740 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:2556
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=94610432359D5EAD6A64F67862581AC1 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=94610432359D5EAD6A64F67862581AC1 --renderer-client-id=2 --mojo-platform-channel-handle=1748 --allow-no-sandbox-job /prefetch:13⤵PID:2216
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=BDEB3AD9F979D506B4CA3CEB7AEE8796 --mojo-platform-channel-handle=2284 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:4612
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=8A231F21087C0185A45C1F535204763A --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=8A231F21087C0185A45C1F535204763A --renderer-client-id=5 --mojo-platform-channel-handle=1940 --allow-no-sandbox-job /prefetch:13⤵PID:1412
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=5641647043084F2416BB45071EDA5FFA --mojo-platform-channel-handle=2628 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:1948
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=01651CD29006EAF0E0B6E9E2EA139928 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=01651CD29006EAF0E0B6E9E2EA139928 --renderer-client-id=7 --mojo-platform-channel-handle=1884 --allow-no-sandbox-job /prefetch:13⤵PID:1724
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=2CE391F8DD79246C33520D1359F3D458 --mojo-platform-channel-handle=2784 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3984
-
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:2908
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5d29c6d9f3fd169cbddffe9da2fa80ed2
SHA1ac5584b81d439cfe8331c44dfc6dd234cde660a4
SHA2561e39fce50c955682001a4ad783d9d45c7a952b38172f7a82e06819d79f10bf58
SHA51256d039173b8ebb9edbd6bfafc156b3b7e2fafc8dfcef8b8168fe8f8c609092655d887f0a99774e62dcc6cf96a44bb9dbca7f954827f8ec62217f9e8148726697
-
Filesize
64KB
MD5e524f7b68185c7fe5741cd320649f88c
SHA1510b5e34ae9cf7e71ba1162611251210b8e4c9f3
SHA25660ea07dc4a36f250aff9f2e969a712a43cb4d35fca42bb7b45ccc6e7aedfdd33
SHA5128b36953847dbd2deb73439b3524b19ec9d7b349bb5de0469874e84fe595ee3cb4372f6cda8a1b556ff686d88756a851f4bd09a6d57bf328d9a70086323944feb