Analysis
-
max time kernel
118s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
16-05-2024 07:09
Static task
static1
Behavioral task
behavioral1
Sample
49f0321a8989934fd9a02b427bb7461d_JaffaCakes118.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
49f0321a8989934fd9a02b427bb7461d_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
49f0321a8989934fd9a02b427bb7461d_JaffaCakes118.html
-
Size
37KB
-
MD5
49f0321a8989934fd9a02b427bb7461d
-
SHA1
d6e6287fa771a505054ffa6b93847690275f25ae
-
SHA256
80fa1fbbe9e52b608d9200f8d0c5eaad83b34b48d4700bb72761b80c9e359478
-
SHA512
c7183194d55cf7b41f332063ba143f4c7279956b76951b60024838ab5c2dc96058ad7fa190ded8d22634dafac9db107d8f9e2066cf04db3fa940e4476b4d8a54
-
SSDEEP
768:FL3pmAs6LiypowQBa9cPSBeyM1ru1rG1MpqO1rq1rW1+:N3pmAnityQr6riMtrGry+
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422005264" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{4D63DBD1-1353-11EF-A0EE-F2EF6E19F123} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000ac7cbbb1e476f544abc64189f16177ec00000000020000000000106600000001000020000000ae157e81af5154463a4f1646792de788f44b0235a7dfd97942d1ced0b6ab6b95000000000e80000000020000200000004081f0b2a7d0129f33255678be5e2174b3e7963975fb620fd74c0804726b03dc900000003dbf73424ab896eb66a768164830124bcc3d63e481aeac314d840c5f3616be8fd959148fcdc67238fa0a6578c29d44cb2ce4a8267bc7f44a7689a037f9eebde33ce34a78ec2e04daabd053777ec6bc08a606c68cb4b3fb940e9453181084d5982f8e1412f204208182916577dba57363046736675ea339a1ec5f66c5f25349c21d20c19e8edb8bb29dccd310074a980840000000b099d556a0d6cb4020dd377ec3d27ae0873822cbf827382cb00f27a4a8438663217980a7dfb810a7ceb753f4285e5ded5e6f95ac353edd93639087f4cdb3c495 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000ac7cbbb1e476f544abc64189f16177ec00000000020000000000106600000001000020000000e7556ecc1b90f175213073807fdc91849982fb4118aabe269543d82436452e67000000000e80000000020000200000005e359dbf5d383de071c35643a53920b2ff62aaad4c1c9bc2b594aec6d08be4622000000024d61c4fb041921d9ce6637c99130a3c1afc25410976677422545b4717f26bbb400000003dc401af4e59f6f4ef5beb7b0f2f013e8bddbf842713955e6a8b3cae9fad2288007a27484f11db181987d40b9a19ebe15079169aaf522b09c44447d95f0d0c5a iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = c08d512260a7da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2248906074-2862704502-246302768-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1756 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1756 iexplore.exe 1756 iexplore.exe 2928 IEXPLORE.EXE 2928 IEXPLORE.EXE 2928 IEXPLORE.EXE 2928 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1756 wrote to memory of 2928 1756 iexplore.exe 28 PID 1756 wrote to memory of 2928 1756 iexplore.exe 28 PID 1756 wrote to memory of 2928 1756 iexplore.exe 28 PID 1756 wrote to memory of 2928 1756 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\49f0321a8989934fd9a02b427bb7461d_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1756 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1756 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2928
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56344167ba6158f368bc490242f8bd8e3
SHA11d22954a640f9623197c00ef16decca85b6e82df
SHA256d3106629633e9a25d40c3badffc86f91637bad6cb89bcfd124b0c9dc6812b60c
SHA5120c7223d547cbf514a3a9ca21927352c00ecad3c4a09f6bd426e4e36c0ef682c379224823eb6e6bfbf1c3e898795f16cdaed806b46de5d99ca00a352a34c76859
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57c8ea66ebf91b33f2801ff94589c3a36
SHA1a6324a0bac1d9220ebe62885a49eae0dc18b110a
SHA25625f7d120301dd379cf375611e336c80ca7fa0d41f2b1316087fc00b69f1546a4
SHA512f9dd9b60a0d3917f9db1c8185fe9373ffce27de3cc40c380281988ab310208c67eefc23ec09def680bd40b99ea348f81331d28f0c0b06e2f338f4bc1fb13b497
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD534ef7b40e729282dee84b8550b8406eb
SHA1e68ac9bf68a3ff976243c9cf4f54f0bebf6a9c93
SHA2567d4023c98a5a23c88b6646ec170e0293ff464f19ba494759fa8e34e5cc2aae20
SHA5123783d2c6ae188c5625095077fb5a7d95e5ea13040f766f26336b93f9d326f2dadd098ec87b54a6da97a76a898db660b9169e87641232a30e11b52d5e1972ae5e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ffb58cb5dec4fd11986af7af62213b48
SHA148c25741690876474a37b3eeb5a73c13640f1e31
SHA25676cf42e0ff7b2a1d9051ab3f41585f78a93198c6150284cfdcf633718979430e
SHA51260c02752551618b8e22dd31c2dbec038f7c104778529d5792c4c68d05b2f097d285671e1715534cd50513248f790aa2d58880ba67fbae7c25cd4b4eb61bfcf6d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52c91e42fa0e638ebf015a08d356cdbc7
SHA1f6ced92cdada8b42cecd67cc785768f3a480c41e
SHA2564db026bc1a62146c009f6046d97a81cb4475e00fea546ea495ffbc624a84cfe9
SHA512322c123cef4138394bbb56470dda9a696870aa63e58ef2386da572f3f380b41dd36d68e4a6904b1d5db50d61d925d79e8884c35437c8179bfe8bca35e1d34e48
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5389e90c6864494dd3d69f9bfe8ecd716
SHA1e6087bfa374b78093fd22e65e2d95735b767ff07
SHA2565a2a011fd5055df94aa36394bf8551470973929d153bc68a2b5c9f76e2456877
SHA512b72f71bf4a042555d923fc47612edec1cad55cf9602be057bf00ce2da68479e9590ca48e1e4d06d6d6046f770765e3fcbc36d9e977b5dbbb029587cd9e1dcacc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d350503f63c34bd6f9641fbe8aad8b1f
SHA19ccc2e0615b459b69326a4252e5057ca787d8cfd
SHA25654813bd17656e07ac3a8e3085a9251d1f57d3fd2aa5fb022d77c2e2e933a9024
SHA5124393f0aed3c202d9f37e87222c8ecbce01236ddef2d9733da28d61d3a40aa2d95c3f0e34d03b1d51de9bdb9bdebb3db17527bc4d050f46623f1d018a213fd701
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD522c9b0c72390080ed5f2103deb40bee0
SHA18eb83afd2edfc9b179c42459d996528f9391144e
SHA256f48e6e2b7279145d3e2312ed7d05f98b5cb6b6d2234ae7c5f99117bc34bf08fc
SHA512bdfc7eba74250a28e32ac26607bb8382d1e94b3c6a417f9c112a40f631621b9a971104f52a9f5ce224a6b01c2efab7fab18a5848d7693696dfcf7a116845ab0b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c00fdb7edacc61c6e913cbcdf3326b05
SHA17fe90332c8a56b063ee839ffb0e110dffd9656bb
SHA256965bea4417938ada070a7d7dba2297e4874e4e7f4168b641036b4231fe6c081b
SHA512c80c4210fe57bc2c82af81c01d9bc2a78b6988e450c79c78ad70af37460305a5e72392993570c10d54ecb75666e8e3dec102a21d4bb94ebc63c167c80d06720c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5bce7ef1fa0cc86d531280d6b2fecd409
SHA157c7b9650e90196a0a4593a1c99b0cf7be0005e0
SHA2560407e4ec9e78d7ec14839acc713d58d140d4ab738517e5e01eb46fdca1ad9fe9
SHA5128ee9aa9c9c2df9e5c4e9964cac74aa7dd364528e918738da40d49a902ecf27dad327c65d4a1d4e9e285be31767bc374ab569a1f2daa140a5b6a478003fda59ae
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c52baa4ae834787074c3966af1ad3918
SHA1af86f3a3f537f58538785d382aaba7e5b3181e75
SHA2565b66c8cb38e76cb202ba5726cd9ec8e7c6c0d3ab4e17d1408262f54fd22165cc
SHA512a8ca88f80ccb9df75f9a84c6436751bc74189f4f0cdf5f1d779e1804aede1b6b0f604da27f6c9acc30aafc5009857fa8e13d3957895d6d5cbf6267c71fb3ec1f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c1e3189dcccf97a22ddfb69120573502
SHA12aee298741284b6ffb9ce805508381647719c8e4
SHA2560f094da42822449e6cabfbf6da10796ec11953f876ca452c7ee6d4c3020426f0
SHA5121e23696f50e2b5e91076c19a8f7e472c7302567ae2f2a5a5ad5a21952089a530c56d526414bd31668c88fdff27cfa06c481d7a9650827d5be6615a9662d589a3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD533ef8e67f4c63c2af48b6994cd7483e9
SHA12a0337d3c86793ceb3713133bf4c05258c007b0a
SHA256721de624839313cd8ab3dc1a8c479330e8e46994a79b2432ae1d8d89e385fbc5
SHA512afc065c66713e68f1bdfd02babf3b15bc6cdc85fc4064d727b6d67ff4dc4efb76a69034be5ebc44eae1b3b8b5b26b44d053502d9276dd82d1985116f73b7ab60
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5814ad3e3aa4fc296bfe14d3a4796265b
SHA11fea58b885ee0d30cdb102d270dbaa9dbd0547b0
SHA256247e22758d013592624faac1a16342e1662e289f66750e96eb262841dd8ab521
SHA512a5b035cd6183cd5d33a86d2fc1ef0c320e31bc4160ebfe8a6389364f3f17c6582e8e2f17cbcac9c58fca95969e62604dd92fb238bf253f8e577ed8c7bcf75ded
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57ea0f744c6d424ed1d4f0cb62721bc9d
SHA1bf71323af19226a268a4ecb7cb220cf73a6fcfad
SHA256f58ec2c50cbcdc2ccc677b63d3f10f85487d7457fb4b9e1231f83df80afb3766
SHA51239ac9e4d439942572380f257026363c03925a2fab150b331c74377c8bd364ba5a320914cc2c7a421ed85a0fe09260ab434093f3fc49a49381e306014894adc5d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b17de3a590c1f668f6038dc6b7a50eb6
SHA1923cc5bb803fb58195240ed971aedb38290d95a5
SHA256d7e0de57a5aab59455e2db07550bc6a87fcea2087f350a10e2f1fc8ae42b3a6d
SHA5129ae16698e54a130add8d34a938923cd7c15ebf2396dd5a112dc81dd7a73427baa3a8e3ea49ea0e4d653a393db88cc1effe3bdc0c0f9cd1a29c18be7d2b45f738
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56298ad248228bb968a44b8fdedb96395
SHA14941db2fbbede4709e9d0d98d28fba140eab5912
SHA256835b0fd217c2293a18e78cbd5591666a76d5d8d15e938201ad6235f02871ecd7
SHA51215b328fc7aee33d6bcd430fa4c322f3814a1dd1a465ac686315369215091ea03c1bdd3f086fd8c26d7ecaca3cfdfd5e62ebbf5dd7b47bbed9d6211ba49518885
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54860b0004478bef9b9823d46435a52af
SHA1a5d30c56617b98de702d28d7eac089b8c9140eaa
SHA25678a529da0baa92f05f637a16b16e7c7ba78adca489c4d3d4aade08816206950d
SHA512d3f522742f660c3f755bfd2d463f368d206caaebe1bca85b5e900a81395be89cc6f3845a2e85840bdc9a9118d830f0d07e2799d02744e308de17fd3f4b898175
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fefea08b91d10a4775fe511791f335e1
SHA1cdbd03a1baed79b55546b2183f27a149bbcaa544
SHA256ce9a10e4222ec9ee8f062a0f8cb4f3e03a9006cb645bfe1efcdb39bea4931c52
SHA51232cb80620b7caaea9fa4e48dd62d715794f6a2b3058b188827b95e9ec0c3d3cd622d22b95c7da18cb8999edc37b241ded00601a98e35f7797487282c54f4f8b9
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a