Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
122s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 09:07
Static task
static1
Behavioral task
behavioral1
Sample
66bef8fbda32bd529bc6aae0b6219f84_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66bef8fbda32bd529bc6aae0b6219f84_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
66bef8fbda32bd529bc6aae0b6219f84_JaffaCakes118.html
-
Size
6KB
-
MD5
66bef8fbda32bd529bc6aae0b6219f84
-
SHA1
0dd51045c4e1f50d5b90859de2e18500dd06e8a2
-
SHA256
075926e687795f03855d47b1cc81c10ad393b06be3e0559bfc16e9a578a9b66f
-
SHA512
1a21cbea9abc379645d647ec5b5e60fb8ee6082cbebb8db417731033dbf6e06cc88adc5f4c78e012767421a54d013b34b6b86479c12aa6b122c4aabb2573b132
-
SSDEEP
96:SCCJOmEkEa9HQMl4+R7vbcv3pFxe25styysmy1PDU2PO271Zxdzfp:SC+DEkEE4sQfpFxRFmy1PD+271Znfp
Malware Config
Signatures
-
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422530739" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000ce6a929291957644a9a4fd619b65ec93000000000200000000001066000000010000200000002893b3e9a1deb6524635c11c54715265aae1ef86686ddefb285bec2d37297b75000000000e80000000020000200000005036d26219659793ada0e17a377b3e5f3be30bba778d3f65fbff919e6568860790000000482ca4d42363cd0bbe132aea99f694ab391942caab664b346589720bca45fff39aad1bd00f234fa74fe698976b1d478e3a57336be6885406db003950bb6494a87aaca624ea37c0e187d905a83dda80dbabae101d84c64d5745d042d416475b8382ed1c0e08509fa38f7b76f3ffa531ffb394e82e81ff94ddfc36129675c41229caa92559ee0be1ef73dedf6ea1cc8aae40000000197b0e6508b6f1af730354d6fceb4c8eb54e6967cfbc466c23ebbf4b7033a053af2eb1db90f75ac511eb98966790e27edace017760dc6ca38f0907f7eeb6aa4f iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000ce6a929291957644a9a4fd619b65ec9300000000020000000000106600000001000020000000ee4e0ee688f153935ccf4631a05b4bce486524ff7562ea8814a6e6d81136d839000000000e80000000020000200000003182f11b3a713018458b707b2c1db1b8275908d9c84b1131b4be57387120f90d200000004c35f58a20e23928f81aebfa5ba6bb3df2f9bb5f63e255373a3f3fa52f9ca08a4000000077a5bdf6e366a73d9da8c4735b98d0f511cdbfd719b5622d04ba34d6533690b3b5a44aef0353e70789ed292e9d7bc2f29d2f4581318540cda35c5da8f312463e iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{C44400B1-181A-11EF-8FBA-CEEE273A2359} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 10996abe27acda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 1984 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 1984 iexplore.exe 1984 iexplore.exe 2160 IEXPLORE.EXE 2160 IEXPLORE.EXE 2160 IEXPLORE.EXE 2160 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 1984 wrote to memory of 2160 1984 iexplore.exe 28 PID 1984 wrote to memory of 2160 1984 iexplore.exe 28 PID 1984 wrote to memory of 2160 1984 iexplore.exe 28 PID 1984 wrote to memory of 2160 1984 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66bef8fbda32bd529bc6aae0b6219f84_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1984 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1984 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2160
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5583abed7b0ceaa23c74fd86034585512
SHA18d695ff79528825fed0fe377c94ff9e1a3bdb2e1
SHA256c81a40385f9ea9bcf434a703bf281e8b70822536321592a2a5fc025a1b5a8a7e
SHA5128ea0626b7bdec57c1bd31e25998642de23351692410be188e6664ce27eb0fe6dce7f7b3ef5d269dd919ed5427d54a1e458774536079675bd928c9c1bf8a78360
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD556ad229354748415691c015e418f8783
SHA1b2df9099bad3afa79af44237a988e31dd1e26d6b
SHA25692a5f7b89eca678983ef1fb9e1f304294a9774d883de127be682458d67fe0daf
SHA512a1a62a6cee593e9c5faf085cadafd9abf6c2dbbb454c3c3dfe7ab67a283f31bb0646052824a18a3a3be42f9c3335034941a328d17ce993d48b0ed2b17ad9d4ff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b13ce9405a36fd8e66eb9bf70bc69157
SHA12837e0524b49d84c837cec7ca88defd29d6545a0
SHA2568b130aaa3a13190c971e7ab125bddf601190809ba4ab296e5a77f3b22fba9306
SHA5127c9597833351721ed78877da662c28e70683dc8497a2b2b35e810757be886d17468a326e5694683644ec09f09727de49bb1de334d1a9bc388ab29360d6419a8d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d2d0610b77d8a990ee78446d81cc16af
SHA138cc06aea06cc046caf436baa331dfba36dda728
SHA2565da20c98620144d6b11d759a57827d4a7b3bdd0ddefff4f7a69f3105a282c306
SHA512edf032559cc1842b792981ed49fcd06ada3232cfb132974dd52f60bd59d3fd8f4582321371758e88aba1df84ebc7dd36dc06e3c11cf0e29ad52601a0efb1fab0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52b533a529c04d0e04757e71226c81a38
SHA13c1b077b1c5e6587284669644f484e312898771a
SHA256baa0d714909acffee691b86b2063aa1653fbae94fe87fdf4d00c287b3b3c826e
SHA512e0f999954e18fd969103b136492c1103b607f05c11c7327607d04a47bfb90b1a6b9c89450388befc1c602ce710ab151185102b66701539a20728cfdbdec2d5a0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD560c939cea52af5882b3193fc37fff257
SHA14de3aba11990012a02afdc5828f3e1b1fe6e12e6
SHA256fc4209080a09782ffeb92712391e3b7530bf9e3df7064985bb26b1dd4c1035b3
SHA512ee3af1d8b28592ea81852c829b7473d29853fa0a288fa3791389357cbb3815d79144bdc402c9eccf438348927a1b0a9fb48e5cf8f3b5095a3e099914f0f6d492
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ad22f3b6f9672592603fd6a8b0fc1a3f
SHA1d77748b994c0b1af652308880c8835d9aa1b0c69
SHA256bd03edda79114ff197d31c1e8cf75e8a8881ebf65994b10bae66bcddcbabc01d
SHA5121faa678bd272a5a30fc548d76b989ed90c54e71506988fc0845c7054978a6a36f04aae79cb4bd318eb07a3e066c24042e88c4f268eb420f601230fb40ebcc9fc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD535f3a51321429c628b5bc7a8c05c243d
SHA1bac1265f73f696df0659c82791d7058a62de70f7
SHA256ae3089505cc577c0e11b8afe954848cc752735dba08cd099e798bb89aab4635c
SHA5122b3fa9f7028ec6a412a30f07d89aad376fb402dd812407587f5ed7fb5b903cee59c5a350274854e51f62ae7f82ab1acff22e67f6afa0e71d3cfb229e73a417c5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5490ea573e12eca341d572de491c7ef04
SHA150469e95ea46dbe762c2c43748e7fb002525748a
SHA256a4aa4d1472d2a88ef9df9a34e6077ee4c051cac6454382cc2f705b61ffb7a648
SHA5122d8fc577dd27f09d5359b0245cd67f0f60602e3c7a5671b06f60dfa5dd333b3db30a9373c2196c31782f1d9ae1101d5de98d546e4d28d72549e97ef97a6f8e25
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55e7f3c01b3f13d62262b6182511f8644
SHA16aed0216442b50106c8ac093abe13fbab14a22b0
SHA256056ed89d43bf7ab0c21e6532b057e5930930e23d58746b9caec463ccc0869b5c
SHA512019d1c5e8573111b6bef827eb1311f5d7f4cfe4b4adc21ebe6db8af8d825747634235a72d7ae51e45de8b7d4f9399127b64ba3d5940b44c3f48193438812c1f4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5182ec807801771baf4173798a79d04ac
SHA1142cb7c020fb3ff665c28785ebc71feeeaf624d5
SHA256007988cb36e4836cb99d71fbe83b9fe288d4064195168af614de81ccbf679906
SHA512fb2f6cab401b67848a75fe26fdb6829aa2ffce976c39d3724f8486706b5cdb2f0f3606539ce18e99cbe845a53c86e838ca4fc04b61617fb05078a3499229ae4c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ca183159db401e781f53da1f3090e43b
SHA1afdc0a0a4250e390979f02b0ab2f527685413af1
SHA2565347ddb317f3906efb6b0105d4c36a6ec9b73cac2f5c0fd41c625aa76302c0c7
SHA5122f9b2a509545addba5bf75cc457478b23dccbe32e00637e6c1dd41151e50b85b17a81e5bc3b9be62b39e42100491ee89486a0bb7d158b2c22809ab59d36e25b0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ba4845ab6796fe0a309195398f13a718
SHA1c6e1bea788a794ab11c9afca7c7733e709f02ac6
SHA256b7ed9059a885028198413ce1ad9657ba07652a103750bad0e63b9b7da00f2255
SHA512d365c450ece3f1d1ffa1d5cdb3d7565ed915d43580156b27531edadb01473f050edb7188cf96714622b9165298034c296d4badeaf2958b440d9bfb9c03d663a9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD505b655678d1244be6de03d8175788fcc
SHA13a63670d8680b43d19fb1442de0b43ebae4f5364
SHA256e1ad72b459944e16866510c4d0d4168927c31196eec2b00af904c82f122fa13c
SHA5124e97ffc7ecf52ab0178be550e17f89608dc9949300e6e084de3d6bc576b01854a61d44f217dbe8d51e53eb94c5d6d49c9d0dfd8dc8843d2b67dda358f14ab49e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5655258b3b35a63fa9b87dad4fb520f3e
SHA11c1d77e3dbc889206cb2f2194b82e4c343617f42
SHA25627d9be34e07c897eb224559375ad9e8f6eae5a6e39090e39138315b6c12f4973
SHA512b0a8f2cae0c0b65b94515b6a67c593597a9b2691a920138b3f6a052a6f7d305d82606e67068aea42c9868c77f0f55fa7c37da47e0078c631e3fcbc989f30082c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5098f06108108348573e8c0041d996c66
SHA1093200cffe95775e25dd16b1252e2f16be4a7b88
SHA25615d7b1abb7b1f5b13a2901c1476938f3b0f4a39653b1ac7b26f8971805f49d7d
SHA512afa14a8b07ff4a7d25683481a00e0c338e7ff9ddc68d2634cfa521ddcda17308c3d6515e901ae8631a8f0f5bbb0d9d4e70c157f239747a8f98d986267cf08670
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52d3d72e1989e821b7a9b23a86e736f9f
SHA17a163a72c811cd4e132cbf5f50acf4d2edae889f
SHA256344ee1ab9579a8ea4396da9034603a5642bfa8e67ccec5df19264dc7227efea9
SHA5126890c80c2c45bdf80cb3ea22b32be087b6e0ba928fad6746d9521e117703edfb42b614890e0aae669bca2e113b4a15438522f04e3e7412e233db106aa03db436
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57274c57988fb17cd20358183e943e41f
SHA1026d68a693f4870a83e3a86114a0dfbe76fd5eea
SHA256f22b331f10c5d26b7cf7f49ab026c9eab88d1195110d20b113d6557f7096c2f8
SHA5122fdde343e871b33e4012ebec6a8797e848b44e89b217d8d116672477cff58b728319b66a37c6a8acfc172687e7629b320c47351007e49aa02d7f0e9aace090c0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a69bfd6dee88863934d406eab5ea75c3
SHA11476169de4468dcc4348f16e5bc3cc90fefc1aa8
SHA25623b8d8d91f7f3a8d1fbc498021050d8b36caa14d3e0e96a92fc4d1dbe942af2d
SHA5120538e859801403e45159b02d4ea169877788f0bc6160b04aa29645695fae4b163143165905fa8430189e281085c04fbd87826556005679075cb541fd5fcc759a
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a