Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22/05/2024, 13:27
Static task
static1
Behavioral task
behavioral1
Sample
6769c6e0efb3342e83dc4180c6680cce_JaffaCakes118.html
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6769c6e0efb3342e83dc4180c6680cce_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
6769c6e0efb3342e83dc4180c6680cce_JaffaCakes118.html
-
Size
34KB
-
MD5
6769c6e0efb3342e83dc4180c6680cce
-
SHA1
f791e1b8d77488e19c21c8a9eea0c5ce847ffc29
-
SHA256
5b958815a71155bed3a7f3055beda11170d8ab39a2f99baef37b7c3d036a9995
-
SHA512
16bb591278abf93d996600dbd89b34163e04a789ca150c75046e29d5e7ab9a22cb60dffeeeb1c566fa2503431bde1af0346e738a3215f21e41f67a5da02dd946
-
SSDEEP
192:uwP6b5nO+nQjxn5Q/9nQiegNn8nQOkEntnPnQTbnBnQOgdcwqYscwqY4cwqYQqs9:lQ/HFE25qsoT46fVxTasoO6
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{03916811-183F-11EF-8D12-66A5A0AB388F} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Size = "10" IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b00000000020000000000106600000001000020000000c66bce20f05419b0664b4cc15544edf00d9bf4d2478101f9fc2f7c985770bff3000000000e80000000020000200000004ae288c600b79f78d98e2e8f95d96a17317f8e0bb077cf3c20d994eaf81084e99000000082aada78e6c2aac93305cee21bad5c30a1608b6000d63c9b7ac8f949988cd7aa202e80bea0acaac88ac5d055dcb40daa5a10f079f3fba2a87dda02a45c5200bce9221379d7edfdd3bbc4c9f2ea8e1b33a55be5af0bd239e7d6357066a0ccb2d5b4861f541197de516489dcb5dd1d5dcefc678ed1f55b3d9a617c49f61140f55617742ba1adb4ff18ba39aa65c427166840000000e0d753cfe22ead987d0d4d5f026b523d34d552822a1e2407a1aab164f51dea1664792a79ea1f895229549ea528c0cb4fa2fcaf646aa4ce9774b335deb8f9a359 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Enable = "1" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422546306" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000760f6fb6d7365248881a38bcea68cf8b000000000200000000001066000000010000200000000aabd8842aff26b4ba63cf0f65c145c2ece9fa55549012af2a7e9f994a634dba000000000e8000000002000020000000a20de42b768547929be3f8c02bc1a5ff12292ce8a41bbefde402112221c835bf2000000010458b566a8030fb5af1958d20fd511758b2e003d5817e5814e20ee38c08b136400000003342744b99a37d0ff0a75e9df83443f4f1e8fb26035fb83e02f6a613a85c7614392a201f97b13279196f305f2f45e88e9142d838d53baba910be9ab68dfe0338 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\InitHits = "100" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70f335d84bacda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\International\CpMRU\Factor = "20" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2737914667-933161113-3798636211-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 836 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 836 iexplore.exe 836 iexplore.exe 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE 2112 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 836 wrote to memory of 2112 836 iexplore.exe 28 PID 836 wrote to memory of 2112 836 iexplore.exe 28 PID 836 wrote to memory of 2112 836 iexplore.exe 28 PID 836 wrote to memory of 2112 836 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\6769c6e0efb3342e83dc4180c6680cce_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:836 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:836 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2112
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fdfbe9ad6c21171eec69742e581539a1
SHA1891382a78bb710575430bd9f382548175410f308
SHA256210a4ce954e1684c3e8b49b9d6c673e41b15ffe788a1205a1677c5eda1a42673
SHA5121a7a228b7b7bbc0b0d77e7026c8c2de33c7f717a40bd80c2d297dd090a9460999329b2ce270e2b4fc059765204aa1df9fd2486d2d352e197fb3e39e14c00c52a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5c182154362d9fb9835108e465b03f1f7
SHA1413afa9e87617c443d49ae34100cba2b088fd29d
SHA2569756599fdcf1941cef89bbb8268f4c3e46c0b1673110bb73d67e10624f6ae42e
SHA5122a3516f91eef57e8d46220b97e2ec9cb8dc76e351aa50beb1c4843c276342baf632edbdb39d4b721002178ce08204bb9039b21043dea15368d7738c983f02fe3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51229d59ae2caa013c45c511bc073cbbb
SHA19d2c583de54d7c22b8278267c7e795f4bd5d2980
SHA25673d0dfcceaa6e8665e130794baa57319739ebd89b75767de01f60c36b1bfdae9
SHA512bec0bec969e29df201f888b78e43daad4af435f7afdbe1a2b9527b84b9148c0433941e54d1e47c1d9203df52e92c693622ae1685bb393cc447e11e837789c095
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5fee20f30250668d86a5eeb35d4bb03d1
SHA16156886ebffca64cfe0af12b06db92d0eaea0521
SHA2563470dd4d900c5eea603ff8afdb18d5940436bc7c1639805f51843702ed89bef3
SHA51200a28dd3dab2cba2385a701cfd23a0ea9031cf6b47c681039e6a553f8a1a0f57c48dfb7608c27b342f5f73782d05c9ece2c7973d95d7059cef9486e81fe42f5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD59ebacd6f7958487d743394018bda780a
SHA142e66fb21bd9d2bbe9c82d9c38a9a1e89e406c07
SHA256cde28f449edc7ea6be876fb9d6ba58cc514f5e1cfe56da276a8be800206d9a1f
SHA512d34651807235a26cf3699ecf5906cd7097afbcf337b97ef75edf40637667fff34ca58eeed785b5e04570ca9885fb29eccb2fd304f57b0ec091d65cef14f6c37a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD549c4d4a653f20df1d8dd3701ccf0db15
SHA1c90e97dfcb9b9637d3e8fd1e0c2924168cdb4b34
SHA256d0e234b1a93f1dbefbca87d81eab738606b67d7a1c3950b3992b612cda5d9590
SHA5126e09fd0a0efb88567440942d3f5a148ef911a84efee3a3b844e29932f7e01c0725c2c9aee41ead46c55c60bf4c53abbeeda10e73a27e6bc62aa4f74a84d4a37b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5ad773a3452eaf37729f6d802743f8ddf
SHA1fb9066710b16c7d0c1fbb1dc04afb4fc8f1f0c70
SHA256b0e57bdd18944fab530696fbc5cefbbcc5566d128c3aba6b1aff923c40cd915a
SHA51257487213b0f45cf2466f03304df5c3f46cc151b6115e41c97eee6596c554d2a6fbf4f770763cd683915ac41510806cdb191cd6179939192b490be3d2bcdca7aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5046a7123c02ee3cdf88cb63efff212e0
SHA167f4b72fb3a84ad050bc9b1cdf450da9dc35ad7f
SHA2561006fb8b22f55ee3fd45b09c6cafdeadf87546e8938a3d3808c60cea0eda47fe
SHA512c855d9e30daf671df614f58e0e44d369d70f59f0d16702b769c8901237b4d79c95da7407bc821b4f3e28dc0790e03c4dc2b48701aef2f719387010375d238e6a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5901bdf3cef3121d777ff63999a844a1b
SHA18f2002424a37eff054aee79b18dc7e3bd6cc29d4
SHA25674c24262a16ff5581f40170e622d89c2f353b211b1e87c80fcf21e4f1d201093
SHA5127d6183ebc9bdb2a3bf2f51d4c2b99e1fd0b47353070f9adbe53556756d060ca5fc3eb779996e7c55cb21526104baffbe7aab5f0ae90bea927938521ba6f24ded
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5df58feca25f4bf5ffa61c2fd20e88fcf
SHA1176efbd8aa5aab92398402acfcdca209a3db012c
SHA256b530370f44940393520c12a06e7709bb3a500053d70ff24984e237fb0f63bf1a
SHA512fc5059a92b13c666c7dca7a7cbb0fb0450a53408c25bf643329286afcb23ff26c7ed4b71d289abf4f091d1a0fde33cb9814b7ef3f2f28d21c99bc03fc689eff1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5642edf44bd61087e252c1595f6cd648c
SHA1a90efc49070cbcf7ca1ac9af920241f0e958d20d
SHA2568f74817d7ac9297cc2c231fe4390e44759522c89f57900a1f0b270465d83f990
SHA5127d00b3e6dbaee2d88a590a5e4f4b75a0d44c2b1d1c7d596515d66d10c601a95b5ce8e62ac272ec51927c145949b235bd6b23283eda5f47c5a226edc0cfbae68c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD524ff507e8523d7b944d6157ffeb92539
SHA19527a99f4021adeecc65bf7ef99dd7b06c2dd2af
SHA256f2f714f0571feb35c370ed9a7b32ee607b944895ef10888583a65e43c09b282e
SHA51251e74e9ecdbd6c2e1a3ebca066b13a8492a164934978f6fdd1f0ce7c49661f0dbf2c3ddac78a06af828324bf507b8745ddce573eb236c3638f6dd90c87e5ebdc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5073d719d51c9d1d795e5a2ded7f746f6
SHA1b9061456433a2bf773e8a40459e33c21c6287bdc
SHA2561f617aa5e215fcaa29933f2382994d5251bf7047543fc2c3c5737756813391f0
SHA512c50bb9a12d65387cf78f6ecb9bdc6bf6b366c64290b244ec44dbc3d6a9ce8836d0b5e063bbc948b787509ebd082a90bc179ae21c40102fd231a1222851d5d24a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD596302643f0cc9efb821f81969f04b305
SHA10b4b50819e63e5d07d9ac5b463d543c66cab5d99
SHA2565b609c6c5436a2fb2cd16c4cb868db7ccc73faa318fe286cf38911fb07838a7d
SHA51207f09f171492a5222925e0fd811708c6a4b65d592c5c6bdf49788404053fde719219b8cc3f26a8d991e07f16562e8b02d33874d123d41c919e2c133c3add1913
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD57b80eebf940b721c527e81daf32efab6
SHA1254e31b5720591da511ec07210a4024621d6f41d
SHA25641e32aeac8d0aa197538d307a970b0edbe4fd0eead0547ef936a5e28903c6078
SHA512a7be5c8021dd490f2bbc2d386e023a43d2b226f0c24ff61ce13629d29185c2e8e80efe01ef7a2dc2f66b6dccb4e8705adb0ba6509f685eb3b448548d2b80e35d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5a54521335d9e97262c826f2a680a8196
SHA1ebbce51e88b7ab81e0a1233c7899b6df50015e21
SHA2568faeb71a0be7b86294d98a137f738db08da1605351cc7e9cedef6e2ee9b74b68
SHA5124e33b23c265cf2262b7f538236ceb1e5b874f9752d0e1564eead8428f09d801e326803491770d235617a485bc8d693b98e2efa24750c510edf99b946be5df889
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50c4f866460ffa9b55ae1434df4b10830
SHA1619e730836b0ca5021f9cfdac52862c7f900d9d7
SHA2560a522d8ae301cd72f3832aabc0cc6aa29b485e8c9f288c1f44cdb003caef9177
SHA5129c8df281c46e1093573208d651a5bd6bedb65980b2800aef0b9baae9f4ce33582662c546b40370c90a5af3a56a269c99ec4101e543ea257aebbc1e43ea6a2ca2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50f8e26ced019b54e8cfa3966e6494471
SHA1a76a0c6775d0c716ae212fb18e81792c53d1e20b
SHA2560cbd359939f7dfa7e682c9478b69bb9453ff2e28f8b9cdb5e58b454e79ffc06f
SHA5126006c579b9107109018f4e635ffbbefe84c1334eaaa6027e23cf6340e7c8823caa085f939903397340ca1d045cf7f5bdbb4ac36b70ab19ca783f5d3091c0c1c7
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a