Analysis
-
max time kernel
121s -
max time network
133s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
02/06/2024, 22:29
Static task
static1
Behavioral task
behavioral1
Sample
8fa7d081a407524f95bacce09efc893d_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8fa7d081a407524f95bacce09efc893d_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
8fa7d081a407524f95bacce09efc893d_JaffaCakes118.html
-
Size
761B
-
MD5
8fa7d081a407524f95bacce09efc893d
-
SHA1
6f055bfa2662ef8b58a4d9e7cdb8c0742cbe0017
-
SHA256
65244e58d3b55fd2bc00f4e6d1e73c2578bee8f3f8e685b8d50706dec1563999
-
SHA512
41f69fcc17d6b1aa3f40f11ba41b1a2dcb93913815dc0e8ce3642ac596036c5c58caaa745e697723ccf6de1a6d48ffa23b346b3c5ce02803fec10762c397e7df
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a23000000000200000000001066000000010000200000004dc47277a1bc62ff5457d5f04ca5976d42ee029ecda0b17398910ada19c65cdd000000000e8000000002000020000000df18e1017b6cf9536d00e555c65aba44e9e4a13768e7112dec16f220d9276e2c2000000029a586939ffe32ef9805f45fb1f6dcf852cf023c6476dfd1596635256140a34840000000569985831430097eb5dfcbbc0f0cc6e5111adeaa1fd96d135313501187ab1c5665912ec4d4c345aa472ca491db0cdf968b2db66f7b4429332cad6f424a3abf6b iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{9E3DD2B1-212F-11EF-AA6D-D62CE60191A1} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000587104b0d2f7da409208cf3ae9e77a2300000000020000000000106600000001000020000000565015934b758dd2b8dd3669a305a6adef5727e61de8703a4b3505cc366b9ab3000000000e8000000002000020000000595aa11b40a9453be495c4e7f454a83e6f6891517ad827aa53dfe51be2d525c59000000079c186ab785c34bee6f0a570659843363a6b5af4930a15eafcaa885a6f85736f9de840fea59ae92cd33b1530a208e06bcf4476593e7a57afb8d866f0e56ac90dada99c080db882082863649e5a639c9b4fbcf9a2f26093150c7c9321dc74fbb0f5e44a39acaac34f95f1fa5137c4ab8e9ac504560e9585e6315876739e0625385e81ef39a90bc4185e790303737032d040000000fbe682a14f635a52021be85b71adda2e1b73fe64afd77ab325aed702a5eb0c83c099caad24fed89a206ef6a878afadd6a53fd58abc5ac6e1c3212c338938b44a iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c02fc7613cb5da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423529256" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-268080393-3149932598-1824759070-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2040 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2040 iexplore.exe 2040 iexplore.exe 2852 IEXPLORE.EXE 2852 IEXPLORE.EXE 2852 IEXPLORE.EXE 2852 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2040 wrote to memory of 2852 2040 iexplore.exe 28 PID 2040 wrote to memory of 2852 2040 iexplore.exe 28 PID 2040 wrote to memory of 2852 2040 iexplore.exe 28 PID 2040 wrote to memory of 2852 2040 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8fa7d081a407524f95bacce09efc893d_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2040 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2040 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2852
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5486c75f7845b5fede083e58c17ddeabd
SHA102e1777c10255dc63ea8f59cbf55d11964f693c6
SHA25652e64316960df3ec680d5436c7fdabdf1ec77a241c1198853f38c0d8e7b20348
SHA51217837935ceefadbe5c1f3d61f0d48dfd2fa7eb77113baf48b3a39d4e6b9291579bd8838bf5aa8cca8198ad26622e53643dd103f555a6838d53de5286bffdb21d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52d75b9e294f0fd96a13098e687f9704e
SHA15be334fe205b9d590702450bf2dcbf0d39d7fee9
SHA256d2ec104ba5d5dfe47210102015b0c0aa6672e99c3f202e7ad3d699f6a937684e
SHA512a3d027052cc716f3e083a0db92e3b59e08d914c9a210f369c2084c126ab88fe2f91e5e8af1cc4bb601bfbd132024f9f509f3cf97b4622d777caa2a30c68e2ab0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52e0161b22974935c854911b8575c88e8
SHA1967e65fcef554b706090b6fbb90590862150cca9
SHA2569f5b0f926c75b1407d5ad49c1b9c8b5a35e584772a011cd95fd6b88a662535a0
SHA512386f0d3e976c96eb40fe3138582260cf50ccfa28dca12c1bab5f7160873ffd9ff2dc571cd10eb31af3c6ebefe49a817047ae3594628f68b7f54fb87749e7856e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54f7404f73ff854cc459338f9377f9a5f
SHA1b84ef834f3fc61b8e82cef627707d2180014e37f
SHA256cca60961417b934b55e2a3596cadaf0141ae3422b981d420c1c877901e237929
SHA512294085853ba36ad137dbac085ba18d54eabaab3f62ce283ecda4abd4ed411136b8db1de5996ca15363bb5ff1bd85f7da6befdd55c281fb8ebd12a33bb29ace1e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d5d782e60e9389710d0c560005f9ccaf
SHA16cbcbbfc8feacfa631b5ede2db0256acbd9a5d96
SHA2565cd4d7e659cbe05989d7d77e0abc1806fad4b0cddb47e4393fc5a096d940ed72
SHA5123cd99d93ee0cdf20a9bfa6427a28c18aa8e887f7b8980d41738dd5c84b591e6a4a14d9a314e77e55dd5ac7445fe2fe71fe7ad3ee610d0297462f615c5968888f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d7fc00402e4e4ea7e61009ef57ceea93
SHA1671d0b2d1cc37b9b5a0f138f59c642a20576590f
SHA2568a82a929358ba96768dbc0904a0525f549d15fb3f1c6c5a45239b8ae8fa39d90
SHA512cee72189db29e72ff966c5f1f57a6d38a9ce5f808adf8363adcca5c333c5a9d71e9b36117f0ad403e52a68c3aeeff7ad5a84e86b8afe6d7f18922ad1f5abe319
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5262549581f84cdceefad18f4b8a1461f
SHA18b0bea8ea4f4774d2e39fc482307fb8433f40ff7
SHA256a5e03ad60ffffad7007856f7b9d54091171f9b24b83fa11c83963e94fef08aee
SHA5125d57e106f39bc819ce6e66622174e71e57dfea6606c64ae40822fd6dce868f2dcd4f1009e1677089f3d0cd8022aabfa344a65b91132d4c12b8269e6536607fbd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59aa86137bb41b8e2634c98cbf814a78e
SHA1bf54504861be1f2353e3e9897523a2868ef91a83
SHA256efa301e109f85a8a11c89f0246e67a6fcbd8993740d99cbb1df8d2c3452d4557
SHA512971f20fb88f52146dacb4f008b29cae60b829a75e54ec6e4d45278143ad7743601311917a0a97a5d51346a9c2b074db111e7266cbe931c7a194ed92599a1c881
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD564b4aa1cf13914f1341eab3990410c04
SHA1d680edb6fdd53528626a6df120e663dfce717fe0
SHA256c9928c560de9f64c5db2f31528b2f52b3eeb2f9d93cccf0a6a80e8c046b53eab
SHA5126245e5ed53ffcd26b455693d3975fac80b17bd749fdeb865e0872ef8f54320a8d1f38247d8ad9bdd01de35b2778e2566e4e2ebfd87ea8b1cbdcd3edc3c15a2f7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59b68393ec9c712c23aff7fe0c0104dc0
SHA1ab1dce105a29f79cf13ad96c6300b45b4da5ce79
SHA256895548bd4f984330ae49d1afe0b400c67af96ae4b9fde1be554493590457a3c2
SHA5128ac118fa455035b4bea09813215e93836fff8d11b9df121d3eb1b973e7424c2fead15c2e9154d55a15579f09dfcdf2c628f4e8060c761cba552c67412a483d2a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5551fb4e89084364609c324c1b6854f4f
SHA12cf5e78ca6337fa1cab3046b775e5a26f7a6c49b
SHA256f6a9a9a627192d105736ec22fbc7f95c2e5399b93db01d768046059abc5ca5bd
SHA512af626ca9ad24bd7cf2fdf8a1784888371849a4f0f7876cc43857d7e98cc6af6970dc0975036bb0018759e6fc4762d485c80f68531952c75de0c8c35bb06463f2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5291d24b273a321f282d992c1d53bfe1c
SHA10b0cdee1ba9973642558c1c676b26416685d1354
SHA25632b9b41ec075cfcac8506a327714b3eea0251f4fdb890713ce6a9859e504547f
SHA512dd07833291db2f18c78ba3207e5311aa396c326779812d42fcbd7e4f2e9f2f377a38bc3568d742eb59e146ac39599c908d9bfc5dc86e2c3391ffabbb974d89c5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a651c3065e8dc3d2107327869206e15f
SHA1acf70ff76d0c1c9868f621a26b5813feaa199ac5
SHA256f48b53cc4019be7652cc06d6fa5828a237959d739cc4bc9271695689d5aa4b92
SHA5120a42a618a8a3b47cb90b402d2ae17b481e4440be64531fdc1c90e830c7086547c0ca0e67f3272eab9c42f506da608ec26d5a9494899b37a32ab8fcfbcb1f5250
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5af85b9ed761fef65e9c01452d46d8da4
SHA1a0cdfc49500e93c9212b19c1f28f718b3ff7f50d
SHA256b32650226408d996303b322106de22721b5f032cd5d9c5a0d9f09f6192dc558e
SHA51283544c174b567ad826f5b78f4e98be7885a7e086599f4f86a920f75853431b3c5daf08a41373cd73119dc1fdecb1323791cc08410a3ec04b02d934353d7d911f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e0d0d11d69c8c90a96107a101199cee5
SHA1d0f3dbeb4b134221c2bb92e3893fecb8acfc0a93
SHA25644e5b7325146a9c9fc6d396302cbc9cf23a5a7f960c5b0407a9061e9643f0024
SHA512d184dc0fc1d8626c826fe42e103331a2d2149e4c392bd4cd84245faa081ab49f4b70da6c1c40fd045c03d40e5893f7f302f761cf6e8323b5a7d4041dccd2324e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53e2af3b4d4668291854b6a89a12bf0f7
SHA17ee8dc909176759fccf8c17d7a078039680eb008
SHA256e3afe4eedbd56201f2197a957349c76ec96800f89b6a2f352af4d86d52e85c2a
SHA512364b8601011f01948e2fc0ed53e281d3f578967a51a176819721d180590b152f5ee2856ad64525e144bf629a04e8def7810a9a6fb8295ca2fe885b0d211ed5cb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c7ebd1afccfda346924d49de7c59b8d6
SHA1a18d527b4a4e255400e5664b6077757a1e2fcdea
SHA256c96b36895cca0e863192d8536a6f72be6c1d6a1b3b4edad3934ccc76b842149b
SHA51213fdd7a71f98012c865d94032280ff6622ac27c3ed113944bd12e5db1752921b2571b5101593b28c78e02b0743a498347da2f540cf2168579f9ec4fb32b828f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53428f9dbca87e52ff9558b2cd9512d2d
SHA1b47064b3ad576edb4b2971aa588a8337466d9361
SHA256b61f1d3bba3c6e187bb8aea9dde0571b921894f4451664933975351bc9e8dadd
SHA5123667983893e4ccfb1a90c4f79f8b151746bbce2064af1fa6a9c415551f7a86c9bdbf67438974b56a27ed284914292a4b8f1efeaa43369ed5849d88f1e0b2608a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aa45460c26fb39dae4a123a023809524
SHA16f1dffabf84951ae104848f1b77407992259d7ca
SHA256c493e6ee5b26f260ff60b2fceb0a06a1f3816bd0eb6fbf65b723d86c7c665dfd
SHA5129787277a8edfc09b5b2c106a90a1378568d02fb6014abd66339de44eb8440a6e3c48fd7c715e72c10b6d970579062130fe26f1f50292bb3eb12dbca86ffabc6a
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b