Analysis
- max time kernel
152s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20220812-en - resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system - submitted
02/12/2022, 17:39
Behavioral task
behavioral1
Sample
e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe
Resource
win7-20221111-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
4 signatures
150 seconds
General
- Target e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe
- Size 178KB
- Sample221202-v8dqkshf42
- SHA256 e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0
- MD5 0f8ad126812dc650f26b5739590b8ab8
- SHA1 bae22642918dafe12bb7318d7e56c995158f4b63
- SHA512 90e077031502c332e026d94c6de86f623ccbd544e6964efb5fcc79944c4258da9fb33149dd9479635dfef8d16fffd0c41b8ce573eafaeebd93f8a7a030b4ac22
- SSDEEP 3072:Yrl2uRkddO+kR7OZOQBdzeIP9mwUGU3l2bxW1/9JnOC/fhKJ2uh1mG:22uyoOhBg8U12K9dtET17
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- PLAY Ransomware, PlayCrypt
Ransomware family first seen in mid 2022.
- Drops desktop.ini file(s) 3 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\DESKTOP.INI e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\$Recycle.Bin\S-1-5-21-2891029575-1462575-1165213807-1000\desktop.ini e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\desktop.ini e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe - Enumerates connected drives 3 TTPs 24 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\H: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\Q: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\S: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\V: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\B: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\E: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\G: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\L: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\O: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\T: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\W: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\Z: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\I: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\J: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\K: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\M: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\P: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\R: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\X: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\Y: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\A: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\F: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\N: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened (read-only) \??\U: e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe - Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Microsoft Office\root\Office16\powerpnt.exe.manifest e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.e4.ui.bindings.nl_ja_4.4.0.v20140623020002.jar e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStd2019R_Grace-ul-oob.xrm-ms e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD.HXS e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\WordInterProviderRanker.bin e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Generic.xbf e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\AppxManifest.xml e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-32_contrast-black.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-96_altform-unplated_contrast-black.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\FileExtension.targetsize-40.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\css\main-selector.css e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSectionGroupSmallTile.scale-125.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_x64__8wekyb3d8bbwe\Assets\contrast-white\MedTile.scale-200_contrast-white.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxA-Yahoo-Dark.scale-125.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Windows Media Player\es-ES\setup_wm.exe.mui e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\SmallTile.scale-125_contrast-black.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-black\OneNoteSectionWideTile.scale-125.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailSplashLogo.scale-250.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\en-gb\ui-strings.js e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_SubTest4-ppd.xrm-ms e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\AppList.scale-100_contrast-black.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Publisher2019R_Trial-ul-oob.xrm-ms e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\DEEPBLUE\PREVIEW.GIF e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\AppXManifest.xml e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-30_altform-unplated_contrast-white.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-64.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp3-ppd.xrm-ms e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-64_altform-unplated_contrast-white.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\Playstore\zh-tw_get.svg e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\missioncontrol\plugins\org.eclipse.equinox.app_1.3.200.v20130910-1609.jar e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\DCF\en\SpreadsheetCompare.HxS e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-48_altform-unplated.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\VideoLAN\VLC\lua\http\js\jquery.jstree.js e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-48_altform-unplated_contrast-black.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PROOF\msth8EN.LEX e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Mozilla Firefox\browser\features\[email protected] e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\plugin.js e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\jvm.lib e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxBlockMap.xml e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailAppList.targetsize-36_altform-unplated.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.targetsize-72_altform-unplated.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PowerPointR_Retail-ul-oob.xrm-ms e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_OEM_Perp-pl.xrm-ms e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageSplashScreen.scale-100_contrast-white.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-white_targetsize-256_altform-unplated.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\hr-hr\ui-strings.js e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.contrast-black_scale-140.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Windows Defender\ja-JP\OfflineScannerShell.exe.mui e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\en-gb\TellMeOneNote.nrr e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-20_altform-unplated_contrast-black.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\Review_RHP.aapp e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\fullscreen.svg e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-application-views_ja.jar e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\EmptyCalendarSearch-Dark.scale-125.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\nls\pt-br\ui-strings.js e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\7-Zip\Lang\eu.txt e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientSub2019_eula.txt e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\excel-udf-host.win32.bundle e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherImages\423x173\4.jpg e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\OrientationControlFrontIndicatorHover.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Office 2007 - 2010.xml e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSIPC\tr\msipc.dll.mui e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\PeopleMedTile.scale-125.png e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe File opened for modification C:\Program Files\Java\jdk1.8.0_66\db\bin\ij.bat e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe"C:\Users\Admin\AppData\Local\Temp\e641b622b1f180fe189e3f39b3466b16ca5040b5a1869e5d30c92cca5727d3f0.exe"1⤵
- Drops desktop.ini file(s)
- Enumerates connected drives
- Drops file in Program Files directory
PID:1860
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\$Recycle.Bin\S-1-5-21-2891029575-1462575-1165213807-1000\desktop.ini
- Size 1KB
- SHA256 c472c88202a2d47c31dfd57d319958a9be29a32a18ffc053b3d3c618d301a062
- MD5 f7aa1f453f4f3125cb07c8a24cb52e45
- SHA1 ff59fcad58ec2b73cf0d8733250e16db09eb6130
- SHA512 c1a710591188ae7a7206620190d4efa9b95193a000f74c1013353b142846d6e036d1ad138ffe3d6da8965ad11ac2686273110fd4b65f997ca9e109f5e2845720
- MD5 SHA1 SHA512