Analysis
-
max time kernel
140s -
max time network
144s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
15/06/2024, 15:55
Static task
static1
Behavioral task
behavioral1
Sample
af322df404bf7e7eda8f65f53508e36a_JaffaCakes118.html
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
af322df404bf7e7eda8f65f53508e36a_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
af322df404bf7e7eda8f65f53508e36a_JaffaCakes118.html
-
Size
9KB
-
MD5
af322df404bf7e7eda8f65f53508e36a
-
SHA1
3edb10a1b2a07863a47b3d29c0a6ba9aab6f5d42
-
SHA256
e7751f2227984b1c798043cc52ef1b0980fb460d5f0bdd7d5c94619fb4ce1d25
-
SHA512
b542563672ea7dc8372e889a048b7183ed7e60d0a370cf2304f54512c1e64a151a21172b47a8126475a548aef086ebf5b92dc3e8e25779c5741e27279d73c784
-
SSDEEP
192:NmWgBp2gQqxRqgSGR7gDRcgSaeWnUxIzuDriJyfgTOgi2:Nmf3/RLScMVpHv3xLTXl
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424628775" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a807600000000020000000000106600000001000020000000f6630bfcc995aa831ce499de768dcf0024222927b640b4a695d4cd3fd96b5bc2000000000e8000000002000020000000abb7ad6c6658c9ec6dfae286c382ff634a7c647809acc8f32bc91ae64a9803e020000000b5d9095a4c2d9df29101b4f07bc00cdbf6dc0fbaacba7f093936de7c59b1a67d40000000970f3f190d2735ebdabd676ebab4e61dc98e99f036b5c52c6a51ff1477b10617bf80c3760c0666caee0844e02cb03f2222f37e7b8f2b53694308aa29bbfa14d2 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a8076000000000200000000001066000000010000200000001c4bae37b0c863e15ffad597a020b0c0b563eaab37880f4ef8688d5d7d43a83f000000000e8000000002000020000000efd6b4e65dd06bf95acd4d5a8179363c10b1a96e4d605c266599e5c707388daa900000007e8da3d802e3290254dccf64832627e7755b0b2048bd07a356e6edc3c09de18d891bb0995d55f4d35457fadaecfa6228c2f0ba4df135b5090ac4aca7af785edeb133e3d19db0d7e103838bf34e280b177fbef7e4d879a0d3d13384aeddbdfb3b2f2e7f724c54e06c672e73fed3d9f9c6c0bb3f7fe763e2e476a16fbf41d66bff80fac38f73f3cf1a727fd8258d404fd04000000031f789b917a3d70421579e31ba2c9cc99ef0488804b879b17e4827323ed58d51cc3f263efbfc65a2d01c7e99fb60630108044b8867e3677b6b35daa2881d6c73 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A1CABB51-2B2F-11EF-A8D3-D2DB9F9EC2A6} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80f048783cbfda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2012 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2012 iexplore.exe 2012 iexplore.exe 1532 IEXPLORE.EXE 1532 IEXPLORE.EXE 1532 IEXPLORE.EXE 1532 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2012 wrote to memory of 1532 2012 iexplore.exe 28 PID 2012 wrote to memory of 1532 2012 iexplore.exe 28 PID 2012 wrote to memory of 1532 2012 iexplore.exe 28 PID 2012 wrote to memory of 1532 2012 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\af322df404bf7e7eda8f65f53508e36a_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2012 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2012 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:1532
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e4bf08f8abb56ccb33d195d71d677451
SHA156a46a02856cdb2753dbc6f509049ab234de79d0
SHA2564cc65859b748dc988a6b63f1dea75754ea4bd9e45ef85b7142483082f333a06e
SHA512c20fe5230d82030d0b2075fd45fe2c4423ccb6a4acbcd89f91934a33fb10a1af582bd990044e326f38aea95e017dfc836e71c0bfa6b5c5e69a305209271b46a2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ee34ba6762b440448f5adec6a68cbc85
SHA1a28d10f45529f7194e2a5cff7dee7186b7cbe344
SHA256101476b67e7155a8682a0b28a303820dd8321099958b5f7597146f90db2325c1
SHA5124ffe4e4c196356b7e273b12703ea70c485e858a9701df492c775a6c75cdef2792052586f4ed9e18e55fb75e664fe965ee6b979321cd18275dd696a43c3c72efd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cfe3b7a55699d03de12657bedaa76448
SHA170f72a10c920e1ff8482af1f926a364a95b8ccf2
SHA2561d0c80853a771642ebe1eda78b13a70714e0e5e89c6c04d54d843170fa686474
SHA512e481ab95aafc00cf8ced7570511200b3a747fae10bc2652e54f415ad8c9cd2409f8f447a9be2538cbe0747d2ad626464e08a9e32652fd454d594b5f8891de2b5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD577544d21c02a24ced1f1eaf17a4b86cf
SHA16cd727c40f5f6a843475a276e177482ee29fc298
SHA2568e94277d6ee99e6491992fc1d6e0f13b978dd492eac5fcb86f761ad1e77c4f16
SHA5121522c9b874e907d0ae6bb93115aa975d0d76f727fcb5b41894985b24d3b09f9b5ea7744b574d8449bf743dead40c089d73ed5de7e4ca25bce355d987d7baf394
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a7c959c691737a4bc91661ee1d054c4d
SHA1156143a444635c9abaf46b0b3179aeff3ab387b0
SHA25687b2716aaa7ef8366370444d4efe175e2d6d4b13d5e70643cea9ac5e887f66c0
SHA51297e04491b232ef234f642442cedf0646de339f12834cd0db382c20dd58e9ecf97704e724555cbc4104c581b2835116ac40c9225bbc7d20541db3face6b1c3ea5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD545e46eeab52cb63fd1009772782668a1
SHA11df071f2569ac00e42aab9a44da2fb7f4d3152ae
SHA256646f43cf307dabf17424f47c9f3b06c739eacab7ea54881699871e7814d5bc6e
SHA5122f179815dce31f26d30e15e4c1bdf34952089c57101bf695db06e1cc14f72e03550e12139bd6955f1974b504854648755933bf34b19bac3b3a79a5a898f751e1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c7f0799b33e5af78c97f14189d8eb225
SHA15e3cee1e11cf25ecb58aa08b0ae6ee8b00d4e9b9
SHA2563149b6920b58da512ffcf53884ba102c19dacf8d58fd1eea5f4c74970b1300d2
SHA51220468d3fff76b4cbc3a1ce2403cadb199e8b9307c24623134c88acaf362ff0f6bf680c516546184958f7eefda39ae1460a11d9c28afc59628726341946bd9007
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD509a87bfadff76cef7111f6420fc08d09
SHA159833de75fa4ef3d8b80c53fe0feeeb44706554e
SHA256a3799ce95e8c8915106df7d870704f3933d7df8cdcb59c92e42a6783eda64426
SHA512a74c80fb451601780b443e34f5a434c57670fb2554047a4708f38878d03606da32a034284b7b929c72fd11f2b53c5f89db5865543d01d7b52b15e4222a104f70
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD555d1d70895e349d8928c680491fce29f
SHA19eee0a0fa16c2a7f52b182fc628ff1b031fc6799
SHA25641895bba3dcace759c55da9e72c068f768e2be0b138db61097a533bb51f885ff
SHA5129325427b31d940663ee5f5840eb43993927ad2cecb921d979085c90c8f6cead22029fb062e11781fcaf15d62a1b9d246e0a4d8dc8eae3a511670b13652d15002
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d60dceb17ed264d1247618ffb7b3580b
SHA171b8ac931c9dd035134495d4196047b823a07a0b
SHA25672535b0e1eba89dc7213bc3000f3e96fc8775e72d7eec681532a6d2fbd92b1b7
SHA512bd9c2c64117333a09eb4de1dadae75cdeaf67fa5a52a01e49c2d2592f91a878e73342b500f1ef83f89d95d60ff7ba6ba5cf429b8a5a7e49d387e66e32cbe22e8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b799f28a14197a04483bcc1b385b6849
SHA1a0d7c8b6fd4123ceacf48f5eac9107130ea131fc
SHA2563c0ffb7c606288f4c12e98136bcde3e89b709b62be3e4411614e3a0c0fb4cb5e
SHA512eca98bb336130a1f52b6de0a8ed4a232b1774c5ed6c2db2b133b4c75d63243c58fdfd33cde4da6cf254b018d785a646eb8e3a4713dcf558bbd2e760c3812c30e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55754df666d8bc2ecc3667fd5bdb5f8f2
SHA1f51de9a4f32701c45e2634321f622d2f9aa65be1
SHA256eba18f11f083981a03d6b379a7a6eceb44252189ee38547e28ecb9b635f69d3e
SHA51226461ec947f072ee193557b931d5ed7143670412b40ef5b31d7d0d1044330c67449780c1c4048b8a06a628c3d00e83b7a9d8f61fd3c672f58e47aeb73d4f935f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5be7d7d02a519c3eaa0cf2c0f4c00cc7f
SHA172039f188b8cca0e9bfd3d0f56080f5ef40ed435
SHA256de691d5a4b080bd0258ca1c4fcd4d8902b9ff7225510e6987cdb91a401697ea6
SHA51204b56408c3c3f9508a7117f8ecffa0ad1eff1b6ca01e219e759044d95ddfede7c3205143a9def5e8073688b0d73ad1bfb29c6e5726ab7c66a9d3dfbeb8a098dc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ff0da9f63bc8e270a6686e7f6f99ba45
SHA1e22b46757958bc28a61e2782bac4e6c8796c00b0
SHA256f053b8f88bd82432fc09c9fa0f5bbd834b9110b98abba029987772b8f8e9f6c7
SHA512b5ed251ca860902a64460e44f5b5c01f10cbda7150e27a9ce2f4229e81526d1445ce2408ae96e368b5b47dbe142f050d27ad386488e88a5bfa428529b80a3edf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD513c5c7cd47725c84a1c2be37285f11d1
SHA19b8fb8d509db1adc99d11fdcefe6bc7311c38596
SHA25637dd10f27e18e8d34378dbb78001aeeb9163a1d2da57cc834639f904a6b37e70
SHA512d01450cb47c40c6830492debd5bd8c448f23ae7b657c29c17728499c6bca6981bebfe2653d2d653842e5ae84ec87851bc10d63c10bb1b617ed5ad654486d7288
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD547cd8aa6af9bce5561e1b45575a6eb83
SHA19e8493b45a72b5b11e0bf4377aea2ff727858066
SHA2562c1458895d5dddd2e2d62bb3e6f6b2a685fe850e1c6b4d4b6d78ff6e472b523a
SHA512143ca4296b97ab8638521233e4e3d2b54ce9c616ea2058cdcacd5b649289760b49f6a4f1117d2efdd4d874b75a00fa81e7de4deb52d19740b0d9824a2ae34552
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5712bd6f60556ea8047e9d1bfb1dbdef3
SHA13c2396bf98c263023195a09c1ba2539ee3d52a67
SHA25662640cbe51f098ec3ca06bc96ed4bc7ed2e553fc984dc25fe3a220e5ec14308c
SHA512e937ea44a49ebdd25794f26fbb6cfbf2555beaf219522039419c5f9fc2c3a66098b8ef7a521c51971c42e595f65fbfaeea7bb84e2dc1519a3abcf8abe8f1768a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5732355066fbb04cedb65c723ee147577
SHA170264afc031ed6e8c8bce2373e8f3c40aca0efd7
SHA2561da8972532ef3dad2c652fca38e66a109f205c996cb9f214fc928022016817e4
SHA512110372dd49c521f26814a864d4bf0b6652318ef87418ea572bb1f26cc01bbcf2a83de329e367631914a040907d5148bb29c36cff91babda45e49b7d5e0521d46
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b