Analysis
-
max time kernel
134s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27/05/2024, 14:40
Behavioral task
behavioral1
Sample
7972cb1ef34c7c3107cc3c74a30cadb0_JaffaCakes118.pdf
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
7972cb1ef34c7c3107cc3c74a30cadb0_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
7972cb1ef34c7c3107cc3c74a30cadb0_JaffaCakes118.pdf
-
Size
43KB
-
MD5
7972cb1ef34c7c3107cc3c74a30cadb0
-
SHA1
892e588aac389423496111dc6acab1903a383caf
-
SHA256
b6e1627ec710830b6cdee42ef555c956609fbea842f882fece1ed77529e61d3c
-
SHA512
a1ccf0900d0bd879f4083b101eca2e8e4d260ff247ae1473cfccf75a4fa8f70740f3a2f3bb7e113386923f77921752c31bf6c38e17ebae38bcceeed236cf2719
-
SSDEEP
768:eXuMZmwgCLWarpiAmiQzupwqTxxGf2p2tX5onrOGhz:eXFZmGWSpVmiQKNK2iUOGhz
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 212 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 212 AcroRd32.exe 212 AcroRd32.exe 212 AcroRd32.exe 212 AcroRd32.exe 212 AcroRd32.exe 212 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 212 wrote to memory of 1960 212 AcroRd32.exe 93 PID 212 wrote to memory of 1960 212 AcroRd32.exe 93 PID 212 wrote to memory of 1960 212 AcroRd32.exe 93 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 3348 1960 RdrCEF.exe 94 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95 PID 1960 wrote to memory of 1644 1960 RdrCEF.exe 95
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\7972cb1ef34c7c3107cc3c74a30cadb0_JaffaCakes118.pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:212 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
PID:1960 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=685B953FD3CCD581E5C707FB4B2C9E22 --mojo-platform-channel-handle=1748 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3348
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=06E0AF1A5AFFB50B007A3549BB7C9FD7 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=06E0AF1A5AFFB50B007A3549BB7C9FD7 --renderer-client-id=2 --mojo-platform-channel-handle=1740 --allow-no-sandbox-job /prefetch:13⤵PID:1644
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=580B4DDE6FB5ED1608539A387F5ACE93 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=580B4DDE6FB5ED1608539A387F5ACE93 --renderer-client-id=4 --mojo-platform-channel-handle=2164 --allow-no-sandbox-job /prefetch:13⤵PID:3036
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=3AEFEE0A589510034A3C4E4BC68E7C51 --mojo-platform-channel-handle=2560 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:972
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=3C0861A7A0404925C2DC8B144449B46D --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=3C0861A7A0404925C2DC8B144449B46D --renderer-client-id=6 --mojo-platform-channel-handle=1816 --allow-no-sandbox-job /prefetch:13⤵PID:4024
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=A380D0F4D6F465DB461B332CFF40D256 --mojo-platform-channel-handle=1728 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:4956
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=F1E62C4904D1B86F9967F8CBEE8EAA8B --mojo-platform-channel-handle=3060 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:1080
-
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4384
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5baa39769cdca419761674f0db76fcde3
SHA14110a3666743a3bb6ba97940b0dcdaead9d351ed
SHA256a834241b508dc52f2acf121ec1c0b6fd98c2e2f6dcf7001d0cb7f2a758c0afcc
SHA5122536a182bbeb0fb826367ce408730f5c76a9a061af2fa2992db6f104716e3b47a3c9e671389678d2331753154a978b3d2b9672ee8ec877d8b453434921c8a072
-
Filesize
64KB
MD54825b606ac9d3d245a21f4ae277173f5
SHA1b0b3074970acfcf2679a44b9b6ebeb21d0e79f7a
SHA2568221b02850ae7f25aca91e12dd7c8c7b9d6000d33df88f228a0d13deb3e26fbf
SHA512df2bf9cb68cc8a13ee80b90cdad7969990a56e18265e111a3b556360a944029d228bc326291d1c9ab12cde1ac931d7911acde5a7918f0a8534c81d22516f6235