Overview
overview
10Static
static
10Quasar.v1.4.1.zip
windows7-x64
1Quasar.v1.4.1.zip
windows10-2004-x64
1Quasar v1....se.txt
windows7-x64
1Quasar v1....se.txt
windows10-2004-x64
1Quasar v1....e.html
windows7-x64
1Quasar v1....e.html
windows10-2004-x64
1Quasar v1....se.txt
windows7-x64
1Quasar v1....se.txt
windows10-2004-x64
1Quasar v1....se.txt
windows7-x64
1Quasar v1....se.txt
windows10-2004-x64
1Quasar v1....se.txt
windows7-x64
1Quasar v1....se.txt
windows10-2004-x64
1Quasar v1....se.txt
windows7-x64
1Quasar v1....se.txt
windows10-2004-x64
1Quasar v1....se.txt
windows7-x64
1Quasar v1....se.txt
windows10-2004-x64
1Quasar v1....se.txt
windows7-x64
1Quasar v1....se.txt
windows10-2004-x64
1Quasar v1....to.dll
windows7-x64
1Quasar v1....to.dll
windows10-2004-x64
1Quasar v1....ok.dll
windows7-x64
1Quasar v1....ok.dll
windows10-2004-x64
1Quasar v1.4.1/LICENSE
windows7-x64
1Quasar v1.4.1/LICENSE
windows10-2004-x64
1Quasar v1....db.dll
windows7-x64
1Quasar v1....db.dll
windows10-2004-x64
1Quasar v1....db.dll
windows7-x64
1Quasar v1....db.dll
windows10-2004-x64
1Quasar v1....ks.dll
windows7-x64
1Quasar v1....ks.dll
windows10-2004-x64
1Quasar v1....il.dll
windows7-x64
1Quasar v1....il.dll
windows10-2004-x64
1Analysis
-
max time kernel
357s -
max time network
361s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15/03/2024, 04:54
Behavioral task
behavioral1
Sample
Quasar.v1.4.1.zip
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Quasar.v1.4.1.zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Quasar v1.4.1/3rdPartyLicenses/Be.HexEditor_license.txt
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
Quasar v1.4.1/3rdPartyLicenses/Be.HexEditor_license.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
Quasar v1.4.1/3rdPartyLicenses/BouncyCastle_license.html
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Quasar v1.4.1/3rdPartyLicenses/BouncyCastle_license.html
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
Quasar v1.4.1/3rdPartyLicenses/GlobalMouseKeyHook_license.txt
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
Quasar v1.4.1/3rdPartyLicenses/GlobalMouseKeyHook_license.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral9
Sample
Quasar v1.4.1/3rdPartyLicenses/Mono.Cecil_license.txt
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Quasar v1.4.1/3rdPartyLicenses/Mono.Cecil_license.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
Quasar v1.4.1/3rdPartyLicenses/Open.Nat_license.txt
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
Quasar v1.4.1/3rdPartyLicenses/Open.Nat_license.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
Quasar v1.4.1/3rdPartyLicenses/ResourceLib_license.txt
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
Quasar v1.4.1/3rdPartyLicenses/ResourceLib_license.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral15
Sample
Quasar v1.4.1/3rdPartyLicenses/SilkIcons_license.txt
Resource
win7-20240215-en
Behavioral task
behavioral16
Sample
Quasar v1.4.1/3rdPartyLicenses/SilkIcons_license.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
Quasar v1.4.1/3rdPartyLicenses/protobuf-net_license.txt
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
Quasar v1.4.1/3rdPartyLicenses/protobuf-net_license.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral19
Sample
Quasar v1.4.1/BouncyCastle.Crypto.dll
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
Quasar v1.4.1/BouncyCastle.Crypto.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral21
Sample
Quasar v1.4.1/Gma.System.MouseKeyHook.dll
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
Quasar v1.4.1/Gma.System.MouseKeyHook.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral23
Sample
Quasar v1.4.1/LICENSE
Resource
win7-20240220-en
Behavioral task
behavioral24
Sample
Quasar v1.4.1/LICENSE
Resource
win10v2004-20240226-en
Behavioral task
behavioral25
Sample
Quasar v1.4.1/Mono.Cecil.Mdb.dll
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
Quasar v1.4.1/Mono.Cecil.Mdb.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
Quasar v1.4.1/Mono.Cecil.Pdb.dll
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
Quasar v1.4.1/Mono.Cecil.Pdb.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
Quasar v1.4.1/Mono.Cecil.Rocks.dll
Resource
win7-20240220-en
Behavioral task
behavioral30
Sample
Quasar v1.4.1/Mono.Cecil.Rocks.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
Quasar v1.4.1/Mono.Cecil.dll
Resource
win7-20240215-en
Behavioral task
behavioral32
Sample
Quasar v1.4.1/Mono.Cecil.dll
Resource
win10v2004-20240226-en
General
-
Target
Quasar v1.4.1/3rdPartyLicenses/BouncyCastle_license.html
-
Size
1KB
-
MD5
bf8d5a737e70dd3493a475b8672f14df
-
SHA1
01d35be1b65293f7ca43ee1045424599923ab54a
-
SHA256
6b73c0a42d138d1f05b527c7b936e79af9f44a55d52e35f912da15c0dea43d30
-
SHA512
ecc23ef88b80944ed135233118db167bf5dc161b0392af25ae846010f9993673bbdb62f88bf6de24dc060a48a0cfe96be261d30f5dac2705ed0f01d987fe24b8
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 40cca1329576da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{5D51D611-E288-11EE-B499-56D57A935C49} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007823eddbcee3e149bc4db86b21295af600000000020000000000106600000001000020000000a8a19f9c6255764adb157beb7765379b42adabacba8030cf63e43aed8717fd9f000000000e80000000020000200000003eb81b82e8ab809f387c31a2e4029ca39064d061c6e540126467a5406e940d57200000002fe3e2020908386a386a900d92c3c6fbc73b1545a75f594928c644b80daa79f5400000005c25b66811667b6cfa46566905f51dfb1210494ea98bd1e3403a6e40a95892aefa7041e13592207bf67502369ab72135556a75840859da15b76b741086a99a30 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-1658372521-4246568289-2509113762-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "416640450" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3036 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 3036 iexplore.exe 3036 iexplore.exe 2608 IEXPLORE.EXE 2608 IEXPLORE.EXE 2608 IEXPLORE.EXE 2608 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 3036 wrote to memory of 2608 3036 iexplore.exe 28 PID 3036 wrote to memory of 2608 3036 iexplore.exe 28 PID 3036 wrote to memory of 2608 3036 iexplore.exe 28 PID 3036 wrote to memory of 2608 3036 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" "C:\Users\Admin\AppData\Local\Temp\Quasar v1.4.1\3rdPartyLicenses\BouncyCastle_license.html"1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3036 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:3036 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2608
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
67KB
MD5753df6889fd7410a2e9fe333da83a429
SHA13c425f16e8267186061dd48ac1c77c122962456e
SHA256b42dc237e44cbc9a43400e7d3f9cbd406dbdefd62bfe87328f8663897d69df78
SHA5129d56f79410ad0cf852c74c3ef9454e7ae86e80bdd6ff67773994b48ccac71142bcf5c90635da6a056e1406e81e64674db9584928e867c55b77b59e2851cf6444
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD596569f858ddff62050da0b03a807c341
SHA1783c486e1785b6c0e6a36278cac615f6bfb174ba
SHA256dba2dc4f9a476ea95db516d418c43ca88f8f53edfbb0d6e65998f67bd8f94358
SHA51213cd16218e3541b225bf75d064e71e4024e6066a0ac0f6e5922234114a47a73593916b28735efbcd7e160b1c6f99eeb5a0059a3c4b312a913e04f99d4bc1083e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54e8ebe9da9c68df1f79174428728b054
SHA1f07469685f069a240af66d15f294a8b4758fd3a4
SHA256e06927f4aafa37ab81642a4cf8e68e4ec762e922bb2f6e574d2a91ab188c4841
SHA512fd818f48af36e676ac702ce9931221ce5c89225cc863dc9c32e2de18a6898925fc878172797b4562c6ecf8a39887172d81fce284e7d0d3e9a4d9b0a2a1e0e114
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52ab57a915fa13025a2fade6c037d393b
SHA1bb985d70e717ceb3f0f20cba0671ea5fc796e6b8
SHA2561a0e816250967babd904411642afed058b76e48590f0136bf93bfd0979343cdf
SHA51216ac89f0138edc392a1030357269deda47105550a483c840185877e1f3c5ce9bd608025c29558d57c5162a716e8b85829c58de53a945479f7c486bbac9dce982
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD596522acc308d0e40b55f80b03b49aa19
SHA16764a53b849a1f1de3caa291bb7f691fb0f65dbb
SHA256cf3ecb7c21feeaea3342f7b2d6e74395a0182d5c2539e8eb7dabde824bd18207
SHA5124998de9d3be09056092fcc08d2ceb314a72bcc8f36d1f110ce927bca43b55dfdeb38cde3d296504d3b79ab6856780346c2bda3ad530b979ee579fcda4124baf9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56482459108593f071f1bd321dd035f45
SHA1452e1d2f201198d8e154fde3f492084354478c41
SHA256381b3f9a027303e12ce010831b1049ff78e6b2309b6dc016f1b791977fdc1c81
SHA5122fd05042a871f4570f4f6cbfb35c46309ffc97ba9fe3daf3bcbb87905594ecde1f03a1ebc9548b4f0d1be355cc29ed4dca38471b60c4269b5e409080a4497977
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5cad551ca925591e77779c56f4eb740ed
SHA18a9074754d363710758282164a24404e4f25a04d
SHA256a87233bd8b6bd883280d1c32e7996dae156ede59c53ba826e67f61936d2d0bc0
SHA5124ce3eb5af9fc5f68230f43eeb079fe3453f1936e551806282c856dfa433d7009167559c8d3257f3ab9f43e3e49573079e7ffb41dd7de4b262d630d4286817ee5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD533a3032ec41ce3ae5478a04d2142a459
SHA141a267327e3a36bafc5a9c91408fb773d35795a4
SHA25676150042806318a73076c0627f89693680b7528b1e47faa74d0eb32791020c12
SHA5125c4270c4671699a3b8a65cd53f981775d88fde61834e787552806350d05c92082242d01b2a0992b808a1f89c97ef68f8647e802290a31ec40f731c683a397161
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f0fb5394edc738fbbd0d756ae74e3763
SHA1d91161b6a619c4a038aa4031299eaf37c9ed8743
SHA256ceb5421b84458e2257bba78e5ef508fe23ca52e4767514cfbeb803d746919528
SHA51263eb5147e9121795690615e83b6508789a5522abee233ed7e4a9886b990daa7dd90824fe18090d89ec2aecc874faab521d6a4f54b73a8f83c86b2b81e099eba2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a61bbcb413f2fb8ff7f45aa65535d00a
SHA1fbee90deb1d7b90cf03727f282037a6935c2798a
SHA2564c2550ec66c5a138b077fefa1467849a7643862e56601d229a42172c86f9b741
SHA5121f6a535aa7d9699b9d1b9beaca7423066a75938fa45c1298d1d751e7670fc39312b27d9954f2886bfbef74c909987d9b6587ad5ecd28c11628ac088bc944be7c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e70f850f64ffe6b5de67f122eeeaa0bc
SHA171440661fa9a5a3ad8c154ef5a41e3f2a4a04556
SHA256ec29d8c828a83de5aa9850c696b1cc75d4cb0b528db3ab38fb80a6b20a8b961a
SHA51275d83fc62884bbab60e4186a7b98bdd145a9b8fa2b7449ef383ef1849c4fdbe415f22682722e09172f490fd7f84426c81a0afb0d08739e7f6377bffd5ab4a773
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53533a86ae6b715e3d5058e61595d1e6a
SHA172e6463fd5b7ed01863e467ffcf6db8bf6e73390
SHA2561e632478d1a163ce04f3e696808a133284d4a9dc14f0c684be64d4b05316459c
SHA51237d12e8c266122d7ce30c3c1ae718da61e0833d8aaaf3675c812136f9592eec2f079b8322c6b12c4d9f126c2f27456d0738631f319fd9b399db3b58d56882f6e
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
112KB
MD56bcdfaae6ddda4c65da984caa6a0ecae
SHA12c8063a140c1adfae0f2912e8b200148f5d0642b
SHA256cb4d48aecf71c4037487c5442895324eba0cb789965f6fa54b4db54fd6de7178
SHA512918f789d7f8c448b8d7de1d9e27fb2c5589d6e78982eb1d2dc9df0729d433759b531a538040c9cbb879daa903b6ce4e513369927808fcb9b2fbb1af681c4220d