Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
3Static
static
1Neptune-main.zip
windows7-x64
1Neptune-main.zip
windows10-2004-x64
1Neptune-ma...DME.md
windows7-x64
3Neptune-ma...DME.md
windows10-2004-x64
3Neptune-ma...wnload
windows7-x64
1Neptune-ma...wnload
windows10-2004-x64
1Neptune-ma...une.py
windows7-x64
3Neptune-ma...une.py
windows10-2004-x64
3Neptune-ma...ts.txt
windows7-x64
1Neptune-ma...ts.txt
windows10-2004-x64
1Neptune-ma...up.bat
windows7-x64
1Neptune-ma...up.bat
windows10-2004-x64
1Analysis
-
max time kernel
100s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
21/02/2024, 21:13
Static task
static1
Behavioral task
behavioral1
Sample
Neptune-main.zip
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Neptune-main.zip
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
Neptune-main/README.md
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Neptune-main/README.md
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
Neptune-main/demonstration file only do not download
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Neptune-main/demonstration file only do not download
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
Neptune-main/neptune.py
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
Neptune-main/neptune.py
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
Neptune-main/requirements.txt
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Neptune-main/requirements.txt
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
Neptune-main/setup.bat
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
Neptune-main/setup.bat
Resource
win10v2004-20240221-en
General
-
Target
Neptune-main.zip
-
Size
2KB
-
MD5
4abc1bdd8d484eef252f3e7d433fe5ab
-
SHA1
130d649406b70b3a115f5c41d037cd7e4116febf
-
SHA256
1dc4c753a1f70a8fb677879ab980efd6bca0daa7069c23700b4ba238f425abc6
-
SHA512
f24ec1acf0488b135fb061a6c0092587836a11038083c34a528f54a7eb8d30c7d7c6f5b917f0b1c199f48fc76184fd83c80b9e66ab875c1b03eb3d4dae6da252
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2644 chrome.exe 2644 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe Token: SeShutdownPrivilege 2644 chrome.exe -
Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe -
Suspicious use of SendNotifyMessage 32 IoCs
pid Process 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe 2644 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2644 wrote to memory of 2664 2644 chrome.exe 29 PID 2644 wrote to memory of 2664 2644 chrome.exe 29 PID 2644 wrote to memory of 2664 2644 chrome.exe 29 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2472 2644 chrome.exe 31 PID 2644 wrote to memory of 2516 2644 chrome.exe 32 PID 2644 wrote to memory of 2516 2644 chrome.exe 32 PID 2644 wrote to memory of 2516 2644 chrome.exe 32 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33 PID 2644 wrote to memory of 1808 2644 chrome.exe 33
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\Neptune-main.zip1⤵PID:2060
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2644 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef5a99758,0x7fef5a99768,0x7fef5a997782⤵PID:2664
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1148 --field-trial-handle=1128,i,12277573929536863901,6187750019725369697,131072 /prefetch:22⤵PID:2472
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1468 --field-trial-handle=1128,i,12277573929536863901,6187750019725369697,131072 /prefetch:82⤵PID:2516
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1628 --field-trial-handle=1128,i,12277573929536863901,6187750019725369697,131072 /prefetch:82⤵PID:1808
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2204 --field-trial-handle=1128,i,12277573929536863901,6187750019725369697,131072 /prefetch:12⤵PID:2760
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2212 --field-trial-handle=1128,i,12277573929536863901,6187750019725369697,131072 /prefetch:12⤵PID:1976
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1480 --field-trial-handle=1128,i,12277573929536863901,6187750019725369697,131072 /prefetch:22⤵PID:332
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=1548 --field-trial-handle=1128,i,12277573929536863901,6187750019725369697,131072 /prefetch:12⤵PID:2864
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3676 --field-trial-handle=1128,i,12277573929536863901,6187750019725369697,131072 /prefetch:82⤵PID:3060
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3716 --field-trial-handle=1128,i,12277573929536863901,6187750019725369697,131072 /prefetch:12⤵PID:844
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=2000 --field-trial-handle=1128,i,12277573929536863901,6187750019725369697,131072 /prefetch:12⤵PID:1784
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:2004
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
195KB
MD5873734b55d4c7d35a177c8318b0caec7
SHA1469b913b09ea5b55e60098c95120cc9b935ddb28
SHA2564ee3aa3dc43cb3ef3f6bfb91ed8214659e9c2600a45bee9728ebbcb6f33b088d
SHA51224f05ed981e994475879ca2221b6948418c4412063b9c07f46b8de581047ddd5d73401562fa9ee54d4ce5f97a6288c54eac5de0ca29b1bb5797bdac5a1b30308
-
Filesize
168B
MD57a38cf5e73963d4e87ca1a74355de918
SHA122c1cc0a1fa722326a2dbfe69d9f10aa51006f30
SHA25645ef9fb599c732fd16a2d610eefbe02b71371337ea4d96a6d5524fc6858542f4
SHA512062cb0809952607a8bf0b02b7f5301695b1b627809b7317ae6f0b9c2ed87b520323c3db98ae07f6f97eecf2ec0b75147b55304702dbb0d5da813747157edda38
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
-
Filesize
16B
MD5aefd77f47fb84fae5ea194496b44c67a
SHA1dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA2564166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
SHA512b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3
-
Filesize
359B
MD5559251dcd2af1850ae03b790c5c2f198
SHA1692cd8fcfabc42e4014180d4235ce09fe0a44df3
SHA256cbf4fb025b273c8adfc31f63d619ae7c1b5be8771ea9b00dbd719caece610278
SHA512e2238d037f9681bdb6beda3bef758b47a04ef2413034a97b8674446798f113a64270d240e47e87c66952330d9cc61d8c31e5663197009fcbfc04983d98b3ed3b
-
Filesize
5KB
MD575afc140956c0008c4d419fcd94beb40
SHA16aee1cbfaae90d385c37a308aa62e1b0f87e4856
SHA2569361b8fc1b187471aadd339ab6f6d8245ee7b23f200a55c52463889f4c1c5beb
SHA5121ac57067d42659bf552401f178fb7f994cf78b5f15c965b1af9e42acef42112e0e817068f56926ebb0516fa5bd1a64606c3158a259b39d82ae4981c99f77b7a7
-
Filesize
5KB
MD5821cf4017429cc4cd7ccdbd7b96407c7
SHA1acc2bd5e7e7a41d22631d7009964598d3db23f9c
SHA25640f90842c6877aaf8163fb5bcc936ef0a4d9ad6ebb2b57799917f1586c62f7ee
SHA512eb9ba0ee895d6c85d7901978e7df9d7839e45bc9d5eb4e13ed4609bc5c20070cf20072962e2673334fc573c9ed9964b2314e0ab05a1a7b81a78e4f686e2e66a2
-
Filesize
5KB
MD5fff1a2fd109ebe8469e20419da0af3ca
SHA11b9cc0b13d6570392395834ef9e1da8b304b6892
SHA256809c7bd36cc4816098d86e3a163cfc8fbb3c96a32c396360b26d350cc243a2e9
SHA512ad8235740bfe8622bde0b6a4c875c88b21d0001609df7c78a4324bd17ff1ce5ba8c195bcad8cfbdfd34da1e800a5f5d16ab824c7d04042db674c7bdd79dab872
-
Filesize
16B
MD518e723571b00fb1694a3bad6c78e4054
SHA1afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA2568af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
SHA51243bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2