Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
16/05/2024, 01:11
Static task
static1
Behavioral task
behavioral1
Sample
6d8108588413ea55ecb1661ae6fcdd30_NeikiAnalytics.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6d8108588413ea55ecb1661ae6fcdd30_NeikiAnalytics.pdf
Resource
win10v2004-20240508-en
General
-
Target
6d8108588413ea55ecb1661ae6fcdd30_NeikiAnalytics.pdf
-
Size
293KB
-
MD5
6d8108588413ea55ecb1661ae6fcdd30
-
SHA1
1f20f3c659c0b5224836ae509989349c49ea993f
-
SHA256
ccca9153f5d1f40c4a08c3fdd5d50f26c7240bdd3f4c507bb982a1641f530281
-
SHA512
59174bc059ddd34599da14c89772e9429f66b53e7085d2a05b51b05772066c760f6ac5d353a0907672219d5424d892f8d5458685fcb88157fd33a2d8afea251c
-
SSDEEP
6144:tcl7kxXNezAvC+C9ntEwMz8bF/ZX2kAjU5UF69:tcBsNnvCZJawMmvX+4
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 4776 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 4776 AcroRd32.exe 4776 AcroRd32.exe 4776 AcroRd32.exe 4776 AcroRd32.exe 4776 AcroRd32.exe 4776 AcroRd32.exe 4776 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4776 wrote to memory of 4340 4776 AcroRd32.exe 91 PID 4776 wrote to memory of 4340 4776 AcroRd32.exe 91 PID 4776 wrote to memory of 4340 4776 AcroRd32.exe 91 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 2932 4340 RdrCEF.exe 92 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93 PID 4340 wrote to memory of 1496 4340 RdrCEF.exe 93
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\6d8108588413ea55ecb1661ae6fcdd30_NeikiAnalytics.pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4776 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
PID:4340 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=04F58AFE8C4A3B21E57A5ADE6C7E5048 --mojo-platform-channel-handle=1740 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:2932
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=1F58648EBC307EFA7A4CEF21DAF8FF82 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=1F58648EBC307EFA7A4CEF21DAF8FF82 --renderer-client-id=2 --mojo-platform-channel-handle=1748 --allow-no-sandbox-job /prefetch:13⤵PID:1496
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=95BA5D71194C1CD48F9AAE3050AD6A2B --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=95BA5D71194C1CD48F9AAE3050AD6A2B --renderer-client-id=4 --mojo-platform-channel-handle=2324 --allow-no-sandbox-job /prefetch:13⤵PID:4600
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=A23EAD6DAC230C7245D16DB1168083FC --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=A23EAD6DAC230C7245D16DB1168083FC --renderer-client-id=5 --mojo-platform-channel-handle=2576 --allow-no-sandbox-job /prefetch:13⤵PID:1196
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=F34261886391CD0D7CD1B878DDE16F6A --mojo-platform-channel-handle=2984 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3920
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=2A6CBFC123855320F346B21BBA0FD208 --mojo-platform-channel-handle=3096 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:4512
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=0B4627864A401C2B1771E7B31B8DF348 --mojo-platform-channel-handle=1852 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:2420
-
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3548
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD56b9f1059a958e679cb2d89c0921fc1fd
SHA109143ff86d4f7085bb566e3fe3371ec87ab5ec9c
SHA2561d480173c82e765795ceddfd9c4d291f542d70992e4f280834b51a2303599296
SHA51283c8b7fb75133f7ce2e5b4390ceda1510d7b8978a9605e7a65900e46f6d0406c10370b69feb82d4307d7c9cc3c84f86d3ac71fdc1d7591b5f37be4d14307413e
-
Filesize
64KB
MD59781f96e2231b0564c43852692f1db27
SHA1624197c847da1a121b69be417c17af83bdd989bb
SHA256e709db8e571d81c180e71dbac03c566554e17200e96c984142fe675d420628e0
SHA5121c67ef87526cebb66df579d71eba9a84253bd9e474f1d968fbbe908a1d9ece01d67a330a56a2b68d9ebc3f550871cebfe862f65400a2a792f345d8e733a62268