Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
133s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 08:44
Static task
static1
Behavioral task
behavioral1
Sample
66aebc21e0a552b52f77fc533b2cd9cd_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66aebc21e0a552b52f77fc533b2cd9cd_JaffaCakes118.html
Resource
win10v2004-20240426-en
General
-
Target
66aebc21e0a552b52f77fc533b2cd9cd_JaffaCakes118.html
-
Size
861B
-
MD5
66aebc21e0a552b52f77fc533b2cd9cd
-
SHA1
b267f431f7ace2dc665ad06da14139c2da1f549b
-
SHA256
8469ff0336b2ec563dc5699c3e0a33bf3daeeb8b5037d0ab9b44bf19252ec2fe
-
SHA512
1f5f54a785d5f27ab6a45cc3f17e0862121705216ede64d7a0b21877cfdf6801675fd79a58d77db0effd4835845dce0d3914409b239e7c9fc107dfe0f7650772
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009b4f4a3d2805a8409b086f701c438f6800000000020000000000106600000001000020000000a3e407c8c6db6b10db8d0d98c1fb23f2a1e658b936fda4ca02039153639c7be5000000000e80000000020000200000004f6787065987e64394bec91978f9dd0689dd98a94bbae1c37bf9d38d019b6828900000008f05df0fe5a2c06f89bc5233e715b2aa0e30b13fceb1a1d94606ecb814efabde335432ad2c99ecd27529f88f66eab76871222e7a9a86d18b051188d4e7ca5e51e7c2a5cfce9a80ac06e71e2cb6b98ea990cba6c8b0ae88bcfe2ec8fa51f8edc1c1dd524d649781ea41ca5076f0fd795ad0e6af763696bf82b02417bb1a4b664509e9324ed0040627c88e2051ae51ff63400000000b8bc7ad8a77e75d672a49c27a4f022c259838cfd4f2fe33e4632be8ad5b88d4b252d2d306ba4b264ab6e043a5b05c167d666bcc553dbf265de1019116a1bd3f iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 80a9c75c24acda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000009b4f4a3d2805a8409b086f701c438f680000000002000000000010660000000100002000000041ec5547da88801ecdf867c68cddb692d88340fdf68e1041ba89620a270a622c000000000e8000000002000020000000d9a9424f52ae895908062a6e56e5c547f24a4df87e4aee965738071821c76f3b20000000206ff1bf16abc10ff2c6436cbb850e3e3bbb464689fae284374a04125536ba9540000000dbbd97a75d903c17d6747ea770a6bf91b30a54d58a5ad4cae23722195ffb13c68aef237c9c15fd6044df91161840a664e9c04a2dc393019e44c30c6738506097 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{885B54C1-1817-11EF-86DB-FA8378BF1C4A} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422529350" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2080 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2080 iexplore.exe 2080 iexplore.exe 2544 IEXPLORE.EXE 2544 IEXPLORE.EXE 2544 IEXPLORE.EXE 2544 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2080 wrote to memory of 2544 2080 iexplore.exe 28 PID 2080 wrote to memory of 2544 2080 iexplore.exe 28 PID 2080 wrote to memory of 2544 2080 iexplore.exe 28 PID 2080 wrote to memory of 2544 2080 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\66aebc21e0a552b52f77fc533b2cd9cd_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2080 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2080 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2544
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD513392d46052eea4ff8f942cb48547a23
SHA1a706b29d9f4a5d7fd01b5f2020446113fd7f5505
SHA2567a03de07c32c61169213ab1b4a2c42240f281020bd5d46b4e08f6ac99f542e28
SHA5128a995c828229d763cc272b346ecb0fca35bbb323f573269434acc7a7e5ffa7922f8b32f2aca27b92d9cf4b2e22062de71d19b0d0883d5e30ad04c322f9d5fc08
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD505d27b4072f8a94cff07db1f591c01b4
SHA1f9486c8414e9ddb525f5696944ca3ab81ab26a2a
SHA256dcdd7213167dd3e59b8d11875c515b81b055de639f0c29e26cc3318cd9e272ab
SHA5127b34a7c607f55671a677df57f5e7c566d7a0cce0611d294ec4a975bda9fa2147fc91734b541b53e0c4bdf49e4774a649a6a802705c7ae2a2111aca0543d0e0d1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55d166ee3b8c96c864d51edd3e42cc5a2
SHA15b5203395e2f94a3ecdcb01b9ce694a0600918cd
SHA256e3732b467874c9dc8db8f1c9bb700c47250f45628efb4f2d4af522ef3665c4c3
SHA51212bfc1a91ddda7f4af5527bb213ad06046cf3ca76df576891773233b99390eadd93f32be3a24032a28d90aae0ab485c287f5370f3120fb4c4add548b85a685bc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f87287a9e9b1fb4ed5b7293f6dc68900
SHA1e2cb20408aab820482243119a2a1e8a950792145
SHA25693af7c5415fdbfcbd763b8172581da4b524d9f06110b3632c753fb6bcae32332
SHA512e780f14607fab9040f5125281f79bb4bf645a3c415cb85826e3c7c018ceb875cba3e571c4cb676539530062d17c4edf520f9cbfe8d4080f31edc78c231740586
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52df8e5e39bd9af02f33712ad602864c0
SHA15c8ea3fca29196890e4b80af0cb1d58759d0b878
SHA256a10879162fc78aab9f240bf06a52e421012fc1d1ee79e143480c24c24cfa8736
SHA512299b28a3a3d074b2443791ddb8a5552469b28f63b27f51e37f3fd8931ea06c487bd05ae92c9ebcbfda8d54733af87f3b22371ecf13e9213c1e5f0debf81add61
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c628eeb68f4911c1add5c5f107f6a25c
SHA13b3c2c52691e7569d4bfc41eca51dcdff10c651b
SHA256b753201524802dac208a5fda13992a31c81a9631991d7cd5cc4ccc9f53077390
SHA5120dc9ff2832b90e7f02e6815e91bcb4acf98db6ed04370f2f2a7c9903d1b723041d1e02b2bb7939b466f7478391d0b92b9ece384f65bd094304d368b42be2efa1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f18eed17bb78d7e206c753a200ac45ce
SHA144a7c404d48d44d2b9e74309cf69f3cc6bfe15dd
SHA256499a02c8f9228accfc20dacafafec679ddf9eded61f2237ba656414f50dca535
SHA5128ef5f14a1ec1a84f7ecb6d136b5d7217ba94d4328020b5e880d98a802a276610812dde7c208f5429464af8a97161f7d4840a6dd990ca28327298d893c46dbae5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD56ebfdd03075b4134ae2c15ff997019ee
SHA1db1eb11073f5e0079aa36a0f4b3e81c091f33557
SHA256214f73557a2aaadf688296289393f72f69f0dc9b0d347f875e17bf0bf8493d57
SHA512dd07729706dc50b820cf24cbd00272db5a103a3eb8b6fb512030da1e22daab4598dc387a02d7c6731799d66f946f9ae9bd7a2e2bf1d6e137fc45b865f6016d19
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58ffed3e8c04b8d30cd0d50be779d7cb3
SHA1cccb9b27a97c83dfcad4a3d87d740006a0b371f4
SHA256251a88f429d491b036bbbb11ff7d1d0d9cc8122c51ee0bd9a127bbf078e1786f
SHA51222cc14f7b460241da2ad99e31e81f9431da6dc3977ef97ddf04fb60b419b3d419569c5e355ae37a4721ad0750db9dd04ce7762db854690193a32301a724a8005
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57e1e7b9509e5260be7590415e3b03fb2
SHA1fd3ad96b5563754f16b98704c6fb3dab937682be
SHA256f2de15a5771c5058c06beacda8bcf8f4fa863ad581b5071b4a79468658a2b16a
SHA512f9bfc122ad489c876cc06bc4b9c4cc258b87076e6ea53f411cfc693ea63d39aaa55f4a98f67fe4e40d69824e7687141ac299a1c0d2e962f5512a8e019385ed91
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD55dc804f5ac1a938f9da80251b4583407
SHA1337939c38bcb9e492b1f9ee17bccfab1e6686739
SHA25654e3a85e05866e8cbca9bfae16e7de869593f00026a398bb2c90227449fc2ed9
SHA512530d0480b96d29d648b77d5a8479d9fd1aa10a8a58f589fca6b1d39746b92e38049aff6737352c8ce9f3463f5abbef25b8556717eb23246613f087f2b664738f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD540423a6c017a6166ebd834aaa649e0fb
SHA1615835fd39f2500d31843a0134618134a943e844
SHA2567290b388794ea1c1d8bbdf1931faa811e3f0684b20e1042c6c2d9d39c930c9c9
SHA512facc73747c44b82261f2e27c4551ed1aff60b199d69a2996183b1ca8538c04b37c81bd9b19e44392a434b94fcb2c362a76138469ce43ebcbef2f91ecb47cf081
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58d3f79ecaf914d6cb4b37a3d43df46d9
SHA1e358854053c0fa05b806ab0b8c924a2ab184f04a
SHA256d5bb00603f6c47fcc3619de287999ccf78b82143c88305a31aa3234421886ed6
SHA51205a29b6c034e6354776c9ebb849774be93fd908c70e1236a46321f717d0f10fcfb5aef7d73f83082313847f3f20c5bfe5edad242c446bf7e35b3ea125f4cc7e7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5756b6f677d31619c233101d126824ddb
SHA18f787a36cbede602360a56b5f080e478c9a96f91
SHA256841b742e074054bc49bdeeed481309eedd80c24d261b2fd858c03f51fcfb7fae
SHA5128672fec9cdbc4b9ffae4f2696de010baf38818e2783b12cc37d41d6a52ea11a7c5d4ade756ec25183109b6e50cc5dd0baa2fdef04e1717a4c996ee161da87f59
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ce76822143b6329c4a92adb430723c06
SHA167bdb13e501c04d2df88254a25efa764a312359f
SHA256ce6a6bdb57d9f937ad7670b610b1a4206e61f38d519e3ec9fbeb5dfeaef275e6
SHA512b944cedfee93d8418408a64b81d062b6b1a670e950df0eddde8767db625781cf637ef16050e0fa1459783a7743d005833a045c0af94e3b28bfc6f6689d02d550
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ac779230e95c6c5a28c893b3eb2926ad
SHA1109a29eb5c1d93330c116baafe0a3fdea4f98b0b
SHA25621b7fc1719cdd6db4661f9c3100021bd807d4df377ac4cb1a2d203a0c787a0f4
SHA5128ee5a4b8fff33b1e0e58eb6334f3a06e964650e7bd91d31e761dffeeb6e28099bd28aab19cdd94b3970a5bdef1c04b0c4b1575c7cdb2d6f8e3e4cc82267f93e9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD58a1baecdc322db6e8b737fedb73af014
SHA15ac91b76d367d19fdb54128b0e82536d1af1e854
SHA256337cb73e32f771688050a6679dbec986360f7dcd957f66b4207826253e391f36
SHA5125dfc19cbbc9773b7b24605c2bef9cfe4d64cd014ddb314243f0b0f64434677d949e7d4a3af3c6d5a790d8d2015bcc271d09d1aa76bf3f466dad9de31e40f1217
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53fca5ff42b3ffeaead6e277750216503
SHA1ccb5063c7dd5fa63a39de1a35e5b732bb7010352
SHA256ea958157a5b2dfdfbafbdff23a6262001ebadac844067938dbbeb8e200c9ab31
SHA512a2add181cd0977831f4e838929b57f37edf7255e45f7482487a0be97f9c4589556e9fa8b3ee6d07e7058809eef2b44fc65cbd77b1d343ab55d2528c6ac254bbe
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ff958fb5b82930c72658dde6101c2c5b
SHA1246c138aa365e7142f8fbd204e38778d3906017d
SHA256217df6ef1398eb2229793470499ae283a546a544f64384850575952b3d8eac59
SHA51290030bddbfa57ebf85d933b1f4548969ac28a85862de94486f133eebc0792aaab4b0a64f809dfde3330bacd29959626cc20f8ab0472cf680218cb5b9a37d5d03
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a