Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27/05/2024, 01:39
Behavioral task
behavioral1
Sample
777dee34a2202cca13b3df421f6f599e_JaffaCakes118.pdf
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
777dee34a2202cca13b3df421f6f599e_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
777dee34a2202cca13b3df421f6f599e_JaffaCakes118.pdf
-
Size
33KB
-
MD5
777dee34a2202cca13b3df421f6f599e
-
SHA1
892bf7df32ca401b1a179aba0c7fd7e6f5ad2b39
-
SHA256
3a8b38a2ab998d8d910b914147bf854c35c7baf902fac647e168ad2329b0cfd1
-
SHA512
8edb329bb3c6bd7b7512578d0523cb5fe4fe0a0ea6fc549eaff85f7abf7d6aef01b9884b8e40995473551cabea1eff169fb3cf01264df605720c5188f9887211
-
SSDEEP
768:UgGzpDpprGpFsDNJtQFX+m//1Cugcpm3ezP32IB/RjowirrFhwpEWh:hGFVpUL332IBVYrrFhwpEWh
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3344 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3344 AcroRd32.exe 3344 AcroRd32.exe 3344 AcroRd32.exe 3344 AcroRd32.exe 3344 AcroRd32.exe 3344 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3344 wrote to memory of 3844 3344 AcroRd32.exe 93 PID 3344 wrote to memory of 3844 3344 AcroRd32.exe 93 PID 3344 wrote to memory of 3844 3344 AcroRd32.exe 93 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 2788 3844 RdrCEF.exe 94 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95 PID 3844 wrote to memory of 1648 3844 RdrCEF.exe 95
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\777dee34a2202cca13b3df421f6f599e_JaffaCakes118.pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3344 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
PID:3844 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=414A37A3D96AE65A89B1879699891FF4 --mojo-platform-channel-handle=1740 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:2788
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=FFC2DFB12266D4EC5A6305CC6831C74C --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=FFC2DFB12266D4EC5A6305CC6831C74C --renderer-client-id=2 --mojo-platform-channel-handle=1752 --allow-no-sandbox-job /prefetch:13⤵PID:1648
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=A293B295AE5BDB25F19D1A5EB1E2A714 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=A293B295AE5BDB25F19D1A5EB1E2A714 --renderer-client-id=4 --mojo-platform-channel-handle=2316 --allow-no-sandbox-job /prefetch:13⤵PID:2240
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=52EEEFD7730E988529A70B35D3C03FDF --mojo-platform-channel-handle=2560 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:4148
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=056A42ABCD7B45F94EE77F82863DC01C --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=056A42ABCD7B45F94EE77F82863DC01C --renderer-client-id=6 --mojo-platform-channel-handle=1804 --allow-no-sandbox-job /prefetch:13⤵PID:3052
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=E9C1CF7ED1F85FB83F52491D9075608B --mojo-platform-channel-handle=2928 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3172
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=FE5F2B26C231DDB24389DCB11BD6E0DE --mojo-platform-channel-handle=2588 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:1952
-
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:664
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5494f9b11ab95fe2225863342062f3c9d
SHA12b7516b272dd1e02db7a8d4a838c7a217ab28985
SHA25613c09e8558aad4c66cef85ce335b8d209d8dd0190cfc70ca12d5c3f19b024db6
SHA5129d80e6d0fbd2023fff6a1d44ec1a9f202a53d478541cd3dcd29a9c720b4cc858d8f6e9b44f04c0062d3f7c651b7e3d14bd38fc4270851e4450f5d915df052439
-
Filesize
64KB
MD544a6a0408bbabf672d2418a18afb4947
SHA19f387c0670072d0c3db5a263c789b94002be8709
SHA25648cf52daab896ffe4c2e6a06d1ef52d105b6b4edf980527f103e15138b7ab554
SHA512fce9df8904b9a9608b39dfb6cf8090a8542a33eb374ed8162711f23a997d71045e4a57e2a2077d922a425959a4e93fb4fac6cb5a1bd5a67fc3b79ab912a8b820