Analysis
-
max time kernel
93s -
max time network
136s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28-06-2024 00:16
Behavioral task
behavioral1
Sample
91b43a68d576467834b6f32908da751ed32fbe7cf658419438187590e9fb300c.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
91b43a68d576467834b6f32908da751ed32fbe7cf658419438187590e9fb300c.pdf
Resource
win10v2004-20240508-en
General
-
Target
91b43a68d576467834b6f32908da751ed32fbe7cf658419438187590e9fb300c.pdf
-
Size
104KB
-
MD5
2a154bdd51a323e148f2724fc3f5327e
-
SHA1
435b153521b078a5223fe61d79408757fb69c395
-
SHA256
91b43a68d576467834b6f32908da751ed32fbe7cf658419438187590e9fb300c
-
SHA512
6364d0a2359127bd7cc570735c7720952e1db034fad4e73eead43a0c7040dfb6634b94ebe9e3bad75f70e5626975c597dfe4875a743d251a9ff5d1709a1d45d1
-
SSDEEP
3072:DeOcJGORh8SrTyQFi/LYRH0kNBXBPZC6y5kQgs:DeaORh8EGQFKLK0eJBPZu51l
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 AcroRd32.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz AcroRd32.exe -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2804150937-2146708401-419095071-1000\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION AcroRd32.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2660 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 7 IoCs
pid Process 2660 AcroRd32.exe 2660 AcroRd32.exe 2660 AcroRd32.exe 2660 AcroRd32.exe 2660 AcroRd32.exe 2660 AcroRd32.exe 2660 AcroRd32.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2660 wrote to memory of 2908 2660 AcroRd32.exe 85 PID 2660 wrote to memory of 2908 2660 AcroRd32.exe 85 PID 2660 wrote to memory of 2908 2660 AcroRd32.exe 85 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 4900 2908 RdrCEF.exe 86 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87 PID 2908 wrote to memory of 3576 2908 RdrCEF.exe 87
Processes
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\91b43a68d576467834b6f32908da751ed32fbe7cf658419438187590e9fb300c.pdf"1⤵
- Checks processor information in registry
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2660 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --backgroundcolor=165140432⤵
- Suspicious use of WriteProcessMemory
PID:2908 -
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=44DD7F78EBA22D76EC5A96319FBF3B72 --mojo-platform-channel-handle=1748 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:4900
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=E5DAE0218972D720E04475292203194E --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=E5DAE0218972D720E04475292203194E --renderer-client-id=2 --mojo-platform-channel-handle=1740 --allow-no-sandbox-job /prefetch:13⤵PID:3576
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=AA2207BB7914D4B108745B1BB24F9A3A --mojo-platform-channel-handle=2288 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:208
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=41D5236F94D7E4CE35AE1C09CC47FFD7 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=41D5236F94D7E4CE35AE1C09CC47FFD7 --renderer-client-id=5 --mojo-platform-channel-handle=2324 --allow-no-sandbox-job /prefetch:13⤵PID:4328
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=renderer --disable-browser-side-navigation --disable-gpu-compositing --service-pipe-token=CC3551D31B47F11CE676325804D44DB2 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --enable-pinch --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --enable-gpu-async-worker-context --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;0,17,3553;0,18,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;1,17,3553;1,18,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;2,17,3553;2,18,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;3,17,3553;3,18,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553;4,17,3553;4,18,3553;5,0,3553;5,1,3553;5,2,3553;5,3,3553;5,4,3553;5,5,3553;5,6,3553;5,7,3553;5,8,3553;5,9,3553;5,10,3553;5,11,3553;5,12,3553;5,13,3553;5,14,3553;5,15,3553;5,16,3553;5,17,3553;5,18,3553;6,0,3553;6,1,3553;6,2,3553;6,3,3553;6,4,3553;6,5,3553;6,6,3553;6,7,3553;6,8,3553;6,9,3553;6,10,3553;6,11,3553;6,12,3553;6,13,3553;6,14,3553;6,15,3553;6,16,3553;6,17,3553;6,18,3553 --disable-accelerated-video-decode --service-request-channel-token=CC3551D31B47F11CE676325804D44DB2 --renderer-client-id=6 --mojo-platform-channel-handle=2744 --allow-no-sandbox-job /prefetch:13⤵PID:4860
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=BBCFA49B5A9B84FA72501EF821F42964 --mojo-platform-channel-handle=2968 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:1824
-
-
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe"C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe" --type=gpu-process --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --gpu-preferences=GAAAAAAAAAAAB4AAAQAAAAAAAAAAAGAA --use-gl=swiftshader-webgl --gpu-vendor-id=0x1234 --gpu-device-id=0x1111 --gpu-driver-vendor="Google Inc." --gpu-driver-version=3.3.0.2 --gpu-driver-date=2017/04/07 --disable-pack-loading --lang=en-US --log-file="C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/19.10.20064 Chrome/64.0.3282.119" --service-request-channel-token=D1C31D34BEB502821F9BD45076BBE30A --mojo-platform-channel-handle=1728 --allow-no-sandbox-job --ignored=" --type=renderer " /prefetch:23⤵PID:2740
-
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4552
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5eb91c3f34d97b0fc66c0cd39a7e1e83f
SHA1e52dd48bed75a02f2771b2418c176b60054679b9
SHA256f6603d08fc3070fbaf75ec12cb050f3ecce2de093cd78355a9b30948bbba72bf
SHA512d5054eb3d3fa300000aa8da103255388abada5cd5e87c04354cb39b40e6016ba9cc862fc54e9ed558c53f4118cf87f8e66bff266b090b189c808935fc4b22cb1
-
Filesize
64KB
MD592de22f0d43ecf3e58cf5dee2933f0cf
SHA1e407256a9c0b96ae10b664ddb13e949d27a4f2aa
SHA2566b70911d5599fda3131225f3e95cf9eebe9495e60676dfd361d46079de892138
SHA5128f2b1c5dfe2cd74d0b0b87b24bfbe39e81fed52d2777ad55c80916368f29ffb3f3bd3ad4367b85aadb7d6ab9aceecc70c42c86fafebaa67594d6e6a95df95e18