Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
30/05/2024, 17:53
Static task
static1
Behavioral task
behavioral1
Sample
The Global EPC Project Management Forum Amsterdam 27-28-29 November 2024 The venue will be Leonardo.eml
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
The Global EPC Project Management Forum Amsterdam 27-28-29 November 2024 The venue will be Leonardo.eml
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Upcoming events 2024 (1).pdf
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
Upcoming events 2024 (1).pdf
Resource
win10v2004-20240508-en
General
-
Target
Upcoming events 2024 (1).pdf
-
Size
1.0MB
-
MD5
bd76f299952a129525c03b09d555c2a8
-
SHA1
c95add186b11465a6d28a426846a14520b8e2c1c
-
SHA256
e4ae341a338356b27fd750a56df33a8ad599a82959115c9ad4d7978b04071538
-
SHA512
2ee0c6e0c5f413ac9875535da9d261e4e14a52846acbdf5e350acef725427b2e60d050f7039963ccfc76dcfd29b9b9aa28a256899774519efdfd3b4ddb8eb2ed
-
SSDEEP
24576:w//zgAiY4pBPxugXCFLyt27xcmkdNm76wswxGzTJw4RSpam:w/7qYetfCh7x1qoiz15RSkm
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 884 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 884 AcroRd32.exe 884 AcroRd32.exe 884 AcroRd32.exe 884 AcroRd32.exe 884 AcroRd32.exe 884 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 884 wrote to memory of 1752 884 AcroRd32.exe 90 PID 884 wrote to memory of 1752 884 AcroRd32.exe 90 PID 884 wrote to memory of 1752 884 AcroRd32.exe 90 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 2924 1752 RdrCEF.exe 93 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94 PID 1752 wrote to memory of 1880 1752 RdrCEF.exe 94
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\Upcoming events 2024 (1).pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:884 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
PID:1752 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=455A478EF21C44585CD7903A9C3E083B --mojo-platform-channel-handle=1740 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:2924
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=A3474F2FA5FF33588251A155F7DAEC8A --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=A3474F2FA5FF33588251A155F7DAEC8A --renderer-client-id=2 --mojo-platform-channel-handle=1752 --allow-no-sandbox-job /prefetch:13⤵PID:1880
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=D49F8DA57A82375CAD9330D3EC037DC5 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=D49F8DA57A82375CAD9330D3EC037DC5 --renderer-client-id=4 --mojo-platform-channel-handle=2184 --allow-no-sandbox-job /prefetch:13⤵PID:4468
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=70CACA129DE8EFF7CDEBA17F1D63196F --mojo-platform-channel-handle=2552 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3760
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=03A4E16A3D8FA6F6771CE2D31598DFE6 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=03A4E16A3D8FA6F6771CE2D31598DFE6 --renderer-client-id=6 --mojo-platform-channel-handle=1944 --allow-no-sandbox-job /prefetch:13⤵PID:464
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=DA8460478705E6D16505C414077933D4 --mojo-platform-channel-handle=2952 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:3592
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=063323B3FD368341F0D323278884969A --mojo-platform-channel-handle=1864 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:1124
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5c19b97d78b789c98ed5493a6cb6e8502
SHA11f9171bc76b11e035f97ce7626e6a676cf8bdc0a
SHA2569afade9ed3851bd51c8cd3893c125b7b41c5af20c580068242c88b0c067a76b6
SHA512f00a7a2d897aa07d117c8eae4604c6f77cb5f22c7746f9816bca1d87c5414966c120a9224d8b4dda5b7e797c051e89b662bb5c1f073de702bd24d300328e5640
-
Filesize
64KB
MD514bd64a06c43eb4b0a1bffc35af3d31c
SHA10ab3dab28168a25d25c04251989a88ab8dd7ac0b
SHA2568351176a4dfc4028d6beda83d9c977ac364367c4e5b6cdae1a3ebb12c9731d84
SHA512b13153248cadab38a04f39793eb18cbba5a0cbde2b1a83c090abf19900cef3a0d2242fdc5ade6ba1eb9635931c3f2cfdf3174498d7be72e7f07f7bf8aefaaef4