Analysis
-
max time kernel
121s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22-12-2023 07:43
Static task
static1
Behavioral task
behavioral1
Sample
7a824d30593c441fc4f980f7f351dc01.html
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a824d30593c441fc4f980f7f351dc01.html
Resource
win10v2004-20231215-en
General
-
Target
7a824d30593c441fc4f980f7f351dc01.html
-
Size
601B
-
MD5
7a824d30593c441fc4f980f7f351dc01
-
SHA1
0a6a17d5f2ea489d7bd924ddfdd2d09a397c6c11
-
SHA256
eb6842f425181c5946823bb74c22fcc2e8ac2e546f334319534b63441c4a8c20
-
SHA512
3e2a1359ee81542f6abaebea621ba3405a304c5670bd3bf24c6e0f5222cbab937b6e171ecf539009302d84e645e7cc3e4a3ccd432618784e1c4008486706fc06
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70f767d49a35da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb800000000020000000000106600000001000020000000cb177d8139065c71642b909d2cc358b16f073ec716c92eb72969d76ebc8ef6aa000000000e800000000200002000000026bba2aa125b1f5fdc538f6aed741bf281619cab69e437bc93bd43c04b43771490000000147ca269e6887f3f071667edac47f4c41e3ef1cb9faa3ae7581119290f390be16c609eb730bd988534eef391e0cd486043777ea2175e4393e1ac71280f6e5089622cf9e292155b0a537204e87651a556bf5f47f50870572b9304aecbbb9dfdeb3094c8c4cdd0c88f441aece473c28861556a821d6052bf85505c21e698a20bdba9dfd3d25d30e5374bafc1c079d884f9400000007bae3a762a0206618745a6c04484f780476141b0db766f91612c6fbfb9e48b7cf365d66c489a23079c26ad5e4d1844013e9d28a82b4b26d02fe11d9a7cfdcc09 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{0E8B05A1-A18E-11EE-AD90-6A1079A24C90} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d80bef292bee784c8e3c940d61fdfeb80000000002000000000010660000000100002000000071856244e67db20d44372debaa6433c541b97eb2015bad92d100b16c0a6ea299000000000e80000000020000200000006cda5e6f8303b53fbb6ead94fa0f3bf2277c62847f2c141c5ee585811ec82c39200000000433ae0671c6475f5ff52088c20185d678bbca0bc0d2efeed397a1dbbd4903ae40000000c7f1507de35df276ac26e025c7672d70bf5eefb90b50e783db3ac35d5c61056e2e9da225e408670a709fed884844f79a1cc3fdc6ec102c9a70eaf526efa26ad8 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "409496074" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3427588347-1492276948-3422228430-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1340 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1340 iexplore.exe 1340 iexplore.exe 2388 IEXPLORE.EXE 2388 IEXPLORE.EXE 2388 IEXPLORE.EXE 2388 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1340 wrote to memory of 2388 1340 iexplore.exe 28 PID 1340 wrote to memory of 2388 1340 iexplore.exe 28 PID 1340 wrote to memory of 2388 1340 iexplore.exe 28 PID 1340 wrote to memory of 2388 1340 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\7a824d30593c441fc4f980f7f351dc01.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1340 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1340 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2388
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53f1bb91a46a631e372ae40be7c96c860
SHA198182257fe1a9ad5109a1939379fd6ef41b592a1
SHA256b20138867782bb55acb0fd1893a70aabc49f091da9748c28f394f0e66282422a
SHA5125540cdc0ff750f64a06e9c46ce4409833d7579ae1b3d6ac4b9353dc9fb37fcd2b1762a92775e68de7fc907137d9c110ad295c39d364b7b5d971323610e149d23
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d31398b0ca415034878c064274dc5c13
SHA1caafe44f57bfc7e688de608af0a9b9ec4adf2cea
SHA2561fbb67038b7e963380ceb53fc350044047a272631c5ecf6dbc254d550872cd5c
SHA51227f6964b3efb453485d4cfe13f5a866b8ba50bfcff6a3bf5c7d085fcba5157cff425979803232a4dfd24f069c2617deb355b31150009071ad905fb8db1b0c9cb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50d6b378ae9285f98675a82db6e9e60e0
SHA17d4bbe47abf503970deb55fbbe44ea13d4c20957
SHA256c5eb9e77888cb714c7ec0deea42f76161cf15aeb99592cd3cd0eb6e982200a0f
SHA512d34ee0d5dd38ac4985e78ff7b55028e31331a774616fd5aecaa43e967c60b7904415f66d56a7d639c7cd2c88c76b70a59d60b55a8b27fb2e02ef7a126373580b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD560c3d5fa226a3de588abc24e9c587e1f
SHA1b104cdb772dd9b4d17a832c6a7be61cd1f6750c6
SHA256bef484413b033b7f047fc991f312e8e18b926c553d65b13e16a3843abafaad09
SHA512114cbfe2da18922cf5f128bd9651783de3d9e395aa7ea47ec9238bcdc8aeb038d237cb146dd1df7acf62b6a1bcf3f4473270fb2056af1bd6d1cd742feaa8ce90
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b8e2f996d58a3d827c57160f9968822e
SHA145c1b5c85fe2365fed05bb5962a67e7ed57c04b0
SHA256c1b97504ef1f37f2de8ff2aa3f208258b242a4593fe10ce80835f160a2c43424
SHA5128d029588c682fd2890d46aeb8d55317f9e2e6e71a53a884b9ebdeaf6728f2df19e4de3e5322566273e8dd7c1076688edaa6b49ca9a61caa95c81165529220e10
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e848fbddcaee0fbe8c77292f5f594d76
SHA1c654684573ff7d308c09675845151ed215d5e586
SHA256027dda5234707c0a521c3103e21a20d84116dd6bd4974e1c02e7a79001f1a919
SHA512f1c1e062aadaff6a741447ef7bd46bb9c76b36c6413368e742a3dbb31f002aa36eb228e0463f1a7697130f870e70166b0f8599fff0a0d38c8966287794629a49
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52b26a5a1e8ca025a8aab5db3368658a5
SHA1d1e9e9068c74737a9efa8539c083dd02712070ca
SHA256c4dac2e471ec027de10bffda1c3d50f51d9c76f20c0ed637619ef8ceb169e816
SHA51229184c13cf8fad414a396980f2a075796ae233410f5c16057d55858478c147d0ea25c9d395538ca699669cbcb0b5345c5fd95c60063c66aa7cdaea6898b30567
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56be540415fd96e21c215d3a1025f6c4a
SHA184acefc18f8290fa27d6b9a21571c0f0daaed1e1
SHA256b765444afea0e8f2fb5c389553b1a7200ddf69632eb89630e2e350ddf6042770
SHA51275167a145a9874f862085cc1b3b45b30150a41d0da1a2e112cf74ce98e3bd16fd28e49bc77cb2bab8bd79e7163952a8e79ca834c3beeaf89fc2b54f6744fc0c5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b288963096cd04576baebd4403090a0c
SHA1007c5f5ff824aeefe698b46eb81c82dd3748b822
SHA256c8c97b6cbf7bfb8cd8185200daaec79f2264793fe09ea8d92947f740a19e6b68
SHA5120b1936b764bfe2ac2776412a43a171c14229a5742b8a631f6b30180225c846d555a8f109b7118c4844c25b7ad2a0aefd4b07fa58e63eb9c6ef83a2f84f3d62b1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD511a29d76d9247abb5f0d341eb60cbec9
SHA1aca711672676850ea8a2268d282e275ffb06797b
SHA2569a817af5929e5d243faceb21ec4807301ab701c43a5f6bd0bb28ca620e413c68
SHA51214651dc858b24d3f75f96b472d50ddcc6eda01c5f409755ee06163e4d743250eb1341b5b837d117b7d225ea68bf61e9cc5d057bb5993b9afe481de8f61875606
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56c9215c94e3ad29128c6f2ad64a7acd9
SHA19a5551bc7e8d646b9e4f7131b6b00fb051911d07
SHA2569102f5351fe65f067aedb063ffbbd5770793a1e2ee5ad32cf91a6eb18f5590fd
SHA5127295721f5ce84c330180c72d9deaf890cd3d1516dd1596deba4bb4ae4d7fa083b52cb728c9ba1d17bfa30e5b90b9d01a4fdff3d2f03884999d7103ed1177fc67
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cdd8d6c33e46e5194cb4960619cbf73d
SHA196ea90bc8d21bed6900e5891ddecd010e0ae55ae
SHA256453607b42f762bab3ae8ecd2103777c1e96a1a475acc82b60585ede9533f9c4a
SHA5124e100711ef0f384450113701f889286513f1557b25e031105702904baf66efb4554caeddd34e122c6e4dc8fb8fdc2a906693f733bc757698dd887098ce2f3990
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56b207006ddf97431c0bd427e732148b2
SHA1205ad6c1a1d3875683144ecacf99b6b8fd3013d9
SHA256e55172205b7ec7df8cd4e87bf990bf3b968ebe9c542396033a5351b3aae977bb
SHA5122a852884dc5b029197890c56fa71121f5d05b89100fd00041f44b6f2bec9e0fa8a0919bfb03beb989209b4b6fa4417b80f3063176acefbba14dfc9a28ad331c6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53da0fb956e7984eb8442f04159d497b9
SHA1d0da0a444a94d063f327e47a9d1f1fe7e438ea0d
SHA2563c6770fd845659311dcbd1704dfee35de16ca6e6844fa51a05ce2bfebe7a11fa
SHA51227dfa43c41df889b6ccd4ffde791b316f4ab487869ccd30c4ab177c149ae6b13a6f18f1b38aaca233a58c5573a04f79b546a570c481a91cc818371fd7c6ae29f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50f54443ce361b0e03599b40173a78cc3
SHA1e6368d161bdaf84ca19f4f3cbd3e60f2a7c55967
SHA256851785458715dbea1d115c55703345234a8d92fd9cfe1287625af5e38a3cf2bd
SHA5128e874664af01b7b494fc0c45f5d916af5389b2d12e9d4b27962524f68e37a5f64ae1325a930c8975a4af28309daa8b70321d31c0382f872d05d5136024e93751
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e9b4cb8883e19391e759f9b961fc5d8e
SHA1e947b51e8832f3aea5b14df9d6e90ebb32b982f8
SHA2568416c38b6c2c6bbe9b3ace93f32487bfb291281d027ff2a31820511516b9e14f
SHA5127023506aa83745e84c0ad09cbe2d55a5aa159960793163ca711c9e1c914dfb59b7b01f8c90e440a728c0177191bb0fbd1c7889f1ea1b96a0c088717fb12e25b8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51ecba4cae6b5baf96d073c1bac5ab18e
SHA1fd0cacecce79dc691612b7fe9c9dcef31353d361
SHA2568033e42e3cf1f867fa1a9f54cc87e544f5fd124e49cd53e2fdf7867c420bd8b9
SHA5120dd034e49aa218e8f48088e47fb29167d0ccade5c35415d419363002368097862ab6f68dd61d0d33776a1db553b1c99744fa0ed1b6a2b8a3d85af34beb8b54f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD519f0a805f50dc37e35a5eb3f987ca4a8
SHA1f69546e19a3c63016aadce44f4101083eb20d911
SHA256d9f0e082df074bd7d587635fe7cc2775e34eb280c4e35d5c15a1766a0a8a3590
SHA51213f8cd56609b3ab23c210923e019afff2ec51780972ab7adebfdbe914273285c0451a2ca0a03931cff6ccc6b1654d40278d0e3720c0e9cf655024158e6e32439
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55d2d18c8f712c34277a4602188951646
SHA162c8e537dacefcf1bd376002d888195d5dad49db
SHA25692362df7506022340d58b33b874c5c301c991a3a1375732d30a9f9c05682b8b8
SHA5125169127b7f61bdb4e3beb18a42ac17e29500454413ac75149fb6382cf6776bcc3627271dc2551291b3bce1e1bd2614a1ceb55728b120c97c6b7ac668d92f98a9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56c3ecac40bdd5c4ed216a79ef89a6d70
SHA1b3e0072637c32dff2e0d4758f267b49873da07ec
SHA25691596755ada4c6dd17ad28c293d4838e5dc1b1ca60411c66d413213d40613343
SHA51207d2e1328a690f6465009ef33d566c36ddb3f5c2c5b77fe4e68228f0e566e6b6bb6ef36d31b45374a34ed4ce6941335d3f53de38e17150a78c4e74218b6c9ba2
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06