Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
93s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
14/05/2024, 15:05
Behavioral task
behavioral1
Sample
41f00f2be2699a2c028cb7e9b79089e7_JaffaCakes118.pdf
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
41f00f2be2699a2c028cb7e9b79089e7_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
41f00f2be2699a2c028cb7e9b79089e7_JaffaCakes118.pdf
-
Size
50KB
-
MD5
41f00f2be2699a2c028cb7e9b79089e7
-
SHA1
bce52c44505575b7528aea55409cb9d5858214e3
-
SHA256
9c0964e2c03b4c06761f68163b8a6e550b722cf4d5e367d5b53733e9f736b5af
-
SHA512
237de483beda23e286f86ff140c515c67706b6bafd93a2f2e68b320d35a5d4ab6e333f9ea1f40df9bd3a718d9b461743c3bdde39ef8436be7c4412d77ebc965b
-
SSDEEP
1536:wGFOybnN3/IOqd5pzdBd2wbiC4bk7Asjl:9FOCR/IOOndr2aT4b0A8
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 5096 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 5096 AcroRd32.exe 5096 AcroRd32.exe 5096 AcroRd32.exe 5096 AcroRd32.exe 5096 AcroRd32.exe 5096 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 5096 wrote to memory of 2224 5096 AcroRd32.exe 86 PID 5096 wrote to memory of 2224 5096 AcroRd32.exe 86 PID 5096 wrote to memory of 2224 5096 AcroRd32.exe 86 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 4428 2224 RdrCEF.exe 87 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88 PID 2224 wrote to memory of 2616 2224 RdrCEF.exe 88
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\41f00f2be2699a2c028cb7e9b79089e7_JaffaCakes118.pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5096 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
PID:2224 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=8EBC7FB0034EE8673D1B3C6880293C55 --mojo-platform-channel-handle=1748 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:4428
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=859D70A98BCADB0E3E15E1CE94BEA60F --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=859D70A98BCADB0E3E15E1CE94BEA60F --renderer-client-id=2 --mojo-platform-channel-handle=1740 --allow-no-sandbox-job /prefetch:13⤵PID:2616
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=F7B9562D89307F07D011923DE24D0E31 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=F7B9562D89307F07D011923DE24D0E31 --renderer-client-id=4 --mojo-platform-channel-handle=2160 --allow-no-sandbox-job /prefetch:13⤵PID:3136
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=8F2D68E55F5392DD700C1DB5241FA752 --mojo-platform-channel-handle=2544 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3588
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=20DE29DFFBDA10D247051219FF633120 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=20DE29DFFBDA10D247051219FF633120 --renderer-client-id=6 --mojo-platform-channel-handle=1856 --allow-no-sandbox-job /prefetch:13⤵PID:4624
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=994F2B05C37BA73FFF3A5C68489847DD --mojo-platform-channel-handle=2888 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:2068
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=574BD9B62A19251CD00A3D87246380B2 --mojo-platform-channel-handle=3032 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:756
-
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:2896
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5ea16eaedcacf9d5ba94c98d7d6e6a662
SHA1414179b63715ec09c415196037475c10cbdedebf
SHA256e95d32f7793b98b18a6101fc5b59a58c292d694de646f76a6da78822cf1d8f07
SHA5126c9482663f5688d990127f034aff671c3854bf5cc9f0dd46625cb9b7eb8e5ff21427f27f9ca5f0e51759252b1505a681bcdde495f82207130d57a75eca754b0a
-
Filesize
64KB
MD58c4a9991d36d23858b6643c2b655b177
SHA1b03e4237acce10bb665460fbb686928764057d82
SHA256c1bb073149e597252d2baa1c01dda6476b3327c9eed1a6ad564df2f4a9818362
SHA512948821398ae1bcb725bcba215655d49153f92f8d14fe7e165a33d90ea3f7aa7eb7e8f9e41e7b72b7edbafd996c2e8267c06eebe66cc7a22effbc2c3347d757a1