Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
134s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/05/2024, 21:13
Static task
static1
Behavioral task
behavioral1
Sample
5b80f1c2def78b1e6b1b9198630a1d49_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
5b80f1c2def78b1e6b1b9198630a1d49_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
5b80f1c2def78b1e6b1b9198630a1d49_JaffaCakes118.html
-
Size
39KB
-
MD5
5b80f1c2def78b1e6b1b9198630a1d49
-
SHA1
120e21acab65ebc82eb71684a8bf28a183e0295b
-
SHA256
ed417a3ab8924a818a273f292ebe0062d1ead737c19de0734877565265de4c57
-
SHA512
5a49166f09c0b9c2523a64f8e4b121fac825eb61eab493c14500df7fbb0274dc5e5653104574fc7dbea96b98f4bfcb27668fd57c08aeb86fd483cce94f1f5d78
-
SSDEEP
192:uw7Eb5n1WnQjxn5Q/RnQieENnJnQOkEntfjnQTbnxnQmS6xyzUhXhAgbF+mU8OP4:CQ/ApxAAXoWJV
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a700000000002000000000010660000000100002000000009158940f6fa5c0bd28df6b3b7a32050839ee7e3bff9c7afa2a8c7af8281b162000000000e8000000002000020000000e625cc75e7a14449b8b7ca2b48c621d342f12cab18abd35451ee8d648ea52bda20000000002bd9d7743cd4b4e44586034703d556276aff7e80e173df49fe01596c1b2f3040000000539b5fd9af2622ff12b330be8a3c8e9ec9f55374e7e4d7f95f9e6649471bdb310ccebc6d7afc259bc7bdc6c33f9966cd954fa2840021c1db0b54f71c070b6ffb iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{B46BC491-1624-11EF-8178-52C7B7C5B073} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d052418931aada01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000071c834f68b8ed044a0afda50fbc58a700000000002000000000010660000000100002000000053a2cd0880f6d590f9722459fa3a8c587401fb3f5a73fd397a9950a2ce5d3009000000000e8000000002000020000000dee9c6a0eb05b973623420bc7009a54d926b7c4fae0ccac7ead442429871fa3d9000000063966009d31e373522f5345b64fe60e689aba90e8da56f363abd0e79b900c15de67282246238a4f9ba08ad3c0b18b649c2cc6ba7f9af3181cf676fb6bdf5c8813443d057a568828ccb635c22682a5e43eb8faf07ccecdc129832267b7285682297cb08fd16524100d25748f9b83791650f1091545d5370ea10f5108858d7ad3079350738924f795c7c3a0cb4fff452b64000000057aa809da9b6fd8453fa7fb2c2813a17a7642ce9af3e83c8e2c9ddf6a6cabef67cf6e7be2c38efa711cfd00069224937211021ad2ea0760961056dee740ad1a5 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422315105" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2924 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2924 iexplore.exe 2924 iexplore.exe 3064 IEXPLORE.EXE 3064 IEXPLORE.EXE 3064 IEXPLORE.EXE 3064 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2924 wrote to memory of 3064 2924 iexplore.exe 28 PID 2924 wrote to memory of 3064 2924 iexplore.exe 28 PID 2924 wrote to memory of 3064 2924 iexplore.exe 28 PID 2924 wrote to memory of 3064 2924 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5b80f1c2def78b1e6b1b9198630a1d49_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2924 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2924 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3064
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5af0cd60a1985ae489b8e12db4129d7b3
SHA1e3a1864bf20e3073eea9e6d5f123babc0dbf82c6
SHA256ae5ac99ecbfe4573c0f043d71c0ea1964491326b0864b881f4b5d8fd38ae3a8a
SHA512a22b8c7a53694a7b2119e2b617b9fb27c5d924a8aa70d58ea41a8c8f1e57be53f14ae227cd4fcb5be9bae06284a068708a134205d5873d8a6f342ee849970cf4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50dcc5e9a0b508f8f9deb8848da09ca91
SHA1f7c33f2ff69f08a3fde13652ae7fbef7974572b2
SHA25684f08a58335d39e0fcdc6795651745a21ed22bc05449587b91b623dcf5d0f99b
SHA512b66985dac3592626b93c22f9203942558679eec381911b67cace0cb86dd8045698bc7776d4ae7996252b427b325800e3617123eea57a12949c0822cb21de8330
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD598c55dd5a051678d76e8e691c0cb4463
SHA18a7491b5b5b5c0e0a241ac45b2a340596669e8a1
SHA256421908c717b8342607e91bb027d0fb43cdaf0fee533c4a75a63ed1152f2c9e93
SHA512c04aae72c57860bb6b8028955753ac1ab4417655184de0245df27e72266d4597290de04eb908d1d319224a38460726869ed7d68176d3783f62de64a1ca2bb267
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53de5fc4c5252c6ba66acc97ad112824a
SHA11dad295313abdce828d15916c0a69a76fe6b2b50
SHA2562cb1ea5675f5ee7c2b25bca8faa4f42794fe3e998626b5444a2dbda02b69726c
SHA5123bf70182c1dfb4e088593ce12060014754101925397aec8e506cbea1989b62c748161aa26d83dfd82ac70d2ca9750e88e241b0c0c39d292e78051d8b7c8c97fe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50b499e906eb9e12d94ebdea04ae57b84
SHA1facb71739b139340e8afbe8bce530b1872a4c499
SHA2563e13033be186fa43083f53a128f29899b596bf45aced8514d0bc059835ba2ea4
SHA512b1c6babe913237529685d4289c3afbadd9aad0692edcf20ad17773f59ce93c6e1e12f7c1e2f6f0fb6d86b13daed77fa0515c055ded3b5c481ee06e3174466590
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD575b5198b7e6fd063291e7353f86b6515
SHA10cdebbd1b664803ff4c13cb41be50bc843306151
SHA256bee695c612f16e365cc7ffead5583a76fc92b8d083c64737428e96b52147ff0d
SHA5123adc32d15d48086a9012e1f01ccfea2b8767b6973bff8fb8874b47eb22ee9ca66dc4b308f464ede03516c02e47e9157805ea55db14e8d0894077e487cb563e51
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53d0e4ec1120f848a9b531145091e6a6c
SHA119709c0f5c68e6a6602c5568ece86852d1753146
SHA2562010177e38e8af4e4d6d45f24c7458ca54863ff0d05eb97c22cd30055d1cef90
SHA512fa170478f67ab30e64315f02a23a4901b1b99d6de2cc4ac1bab7f79e1f492ff790609a8eeba582f14a9fd6260c323ca92af58c2923960087aab6f4cba9f9e99b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e1b006a82ecbd6408a72dc4b87bf3cfe
SHA1c88de5c40722a470355e2d077f1b6de52f25c9dc
SHA256d6f0d85094a17f898d7989cd97bc7731e2ced6c7b15ea9cabf5f97d1db21ed66
SHA5128c36ed35f4febc475d50ad19dac43e90c946b49865013fa021c44c9b25d887b0aa2413bd4c31a50118a80b7f9354e47d1a94894818a52fd5b09758ccf4b86994
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5975c61f47522c236a8e1a54b794d50bb
SHA120b21c8cb8a21cf92d60b530c7f9fa6d103fdbf2
SHA256fee20f27138e604e5b91f47f9a8672fb90095346f3461c0b3c81d8e76ab62253
SHA512a7754a7f2b71d580e6c30398959ff99aa23e650697817841189cb720857d05b6534c35e1012b1e035bece7cda0318d7e489d1f82048fb1432bf49583efeb8ae1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57f12d9cdf6364a48ceb9de37ad5278b0
SHA186a7feee347b51edfaaefb127965dc61fd615789
SHA25665d8030414a99dea0842967390c655ff8db6d60005b07c94666c80f809f7a67b
SHA512bfca6482cb828e2cb75125920177bd9f234989e302d977cff58847ad1b51c058445e4d28b1bbab1a4f7a0079789b90418fdae18a7a9ee753357ae09ded9d1dbd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD539c4b77d86e9e1072cf8ab5f91b47d48
SHA170521816e8781e5ba769dc2bd78db42763274752
SHA2561237ef93d7425f74587f3d350772aab0169f209b8871569d36034ec25124931d
SHA5129ad570a5e49a9b6b661ec366d9da18b6b2810439f49412c69ccff8e089e22263fa86c75b22816a2d69374481e6b99744e58c8e989d729132d164ce0050ebe339
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a1eb10c3689ee9e55b8393f59663d92a
SHA18eaa05cc770814fef2f1198c874a880dd1eed852
SHA256de488d9f9e270508aa5b9a61d72dedc632680db681ff3d7d7d796c5b12a28e3c
SHA512d0cae87e683c966bf72bf1784c3980574f155ca0c6398736403742f5e9fe3f0972e8c132868f0eb0c848af2fae404c0e07cf9075d80c9fd7e5dac5d1c0967183
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c2c2abb512fa501c189571d61b0091d2
SHA1b7a9b7175c51ebb4645da3abcb5370ade9ea0137
SHA25603dc1204be9b89d887aa5faf655116a812ba08a44f5ef2ce7373e8eea0d63ed2
SHA512147ccf3648af2df048aef52fa4749e3eb97fc152fc1293c19a9b3d67ee324b7345c6bf17e65806c712e91f07dccb8b6471a9d2d3e4d7b213712c4c1ac6b8d354
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56544d0e9a2b91380f9940ecb348564ac
SHA1499b43cc5fc46fc00b4f3d66db895bc7138fe7a2
SHA2567a6ecedd1a69226742a76f54dd2161b031518ca89d53078cb0a44e3b1e7da944
SHA5121f64fbaa2f8b0ef8a5ba067c65099c359bf0205dd4b1764328e29fe1b807674e9c81e9b33fd9b173afaf15a76796409a3ecc0aad853e921d1371a05b13d1b5e4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5026137abaa8790cf8e928bb272f73608
SHA1d15559da1ce2d3da738be31a7b8a14f02d5e5c7c
SHA25634c2cf61c13ec145392eaf1c40ff62e9ba893a4f8548173f5422ac5636753982
SHA512c977b5bb043d5ba75bc3df67bee6f89792c3bd95e76b7f2c2b7fadd9ecc1260c2690e02a6b1ad375d6669f9750148ce9a9790ee32fac8e688421efd9d808d5ce
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ec293c9006c36cfcb11359cbb79aad8
SHA1acdbf50784fb6d5f926d3d2db071a35d410cf3ca
SHA256561aa2a9ac98a5f8f7e5b4d109382899b7a5a4820441737193ed99f881302cd6
SHA512cc90cc67f7c8615d32f80c6122e50b6149227f8b4cb7ace8dc70ffa013eb1b8d0bf55a6e31a1951c6efb26263c712ca5daec865df8dbceb06ce649120514b56d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58fe03b6643afb560c2596dc5be331e1b
SHA124a3043762ed2b998e1d32219ad6ef5cfc0e043e
SHA256c4453401ee5f96c3c343e5be47a73b61318a9ab5bde3d6d264056ed21e864721
SHA512e758e9b6c0ee11c369c2b1521d74f3d428bb5a43bd740808f86c5ccf9d702b86e6659586c841ad90838d23de9ad1436127b4bf47aa66b08296aea5e251b9b2f1
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a