Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26/05/2024, 09:38
Static task
static1
Behavioral task
behavioral1
Sample
750e412e1e31e920503f7846aa74fc4e_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
750e412e1e31e920503f7846aa74fc4e_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
750e412e1e31e920503f7846aa74fc4e_JaffaCakes118.html
-
Size
68KB
-
MD5
750e412e1e31e920503f7846aa74fc4e
-
SHA1
be365bb38bdf3091ea0e357604f9318bd53e2c92
-
SHA256
f75774afeccdb621f078c184cdc0405a1aab8bd027ee0ace3e87877011478b06
-
SHA512
41676e1fc57d2db7761020e1e69a3e40ce6830b0923a147c80ebc9ed733d25edb8f441c921d531ef1e55961b95ff1e2b9880bc697616491cea8c2c0661c98123
-
SSDEEP
768:JifgcMsSZ8tN99OIsbN2sNSIoT2SqQCZkoTnMdtbBnfBgN8/oygcRWQFVGys//IU:J5WjTEPec0tbrga6crNnz8PJ
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000045c16eaf84a29644b80dff156f52fb000000000002000000000010660000000100002000000056ca9e3f462f2f0f8ae0e17cd3a82d8ae1d364ef49d955418899774d33a4fe44000000000e8000000002000020000000194116e1c36d7e0b2a76c8d17f6f085ad209444d0eb048e8f3f678a636e7e07690000000621698d81111a0e03dd3ea57e519c2a74e874e5834045b53fe82d117929b2c4c7da74ec6a15c7472f6efb9989ef5aaf6b3339d7b79c7f94425b4b6880e1eb381a7df3cfbf96221c006c6df18405fd9296f0455a99428d6ccc5102b346b3aaebb0b794992ae28e90ba14e0f24f3265c87ee4470062111d4b97822735d8170b56bc33be0c38d56cadfe0015d2ff5b8191840000000633afca041d85dc3f07fe4e15156f6ef7136324664f18668aea84c170f6e4181527749938d24c3bd1c90ca7b9c7397c3877193c99875fbbd696cee755d5ee78e iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000045c16eaf84a29644b80dff156f52fb00000000000200000000001066000000010000200000005a461a5e5c44e791ecc12cb414cd8053e1035e4cc559835e2052f42318f10670000000000e800000000200002000000015bde5fc160f9fa3a5e3eda43905f202446f7011a7f3a8a99cd9c31d351611af200000004bb6a58bf927142267c9619ce2dadde8bff34b5a727e7333d298d4edf3c6c04740000000f962e410b62b06a74cde8efdef76f6daa4ecca5aa8b39d4083d811015c81fb4b0f5d31faf9e859d3c3979eada0d2b00bf8387a1a001af2a0af3408ab0cfff398 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "422878151" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{A693E5E1-1B43-11EF-8E7B-D20227E6D795} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 5004277b50afda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2240 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2240 iexplore.exe 2240 iexplore.exe 3028 IEXPLORE.EXE 3028 IEXPLORE.EXE 3028 IEXPLORE.EXE 3028 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2240 wrote to memory of 3028 2240 iexplore.exe 28 PID 2240 wrote to memory of 3028 2240 iexplore.exe 28 PID 2240 wrote to memory of 3028 2240 iexplore.exe 28 PID 2240 wrote to memory of 3028 2240 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\750e412e1e31e920503f7846aa74fc4e_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2240 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2240 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:3028
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD52dc1d49126796a64d1596719f09b5067
SHA1696518b4e4ed5f560b213590f84ed03768721552
SHA2561d053522de4f9516913f52c258c919ac5a3c146822199c1dd297d9e37c377875
SHA512febadfa2dc34171db09e5c36a1ee3cca684619717122e5e97ec76533999151e551a05f30e10c2e5ef8afd39d36451a9ad2afc53e8e77fa8ff375b72843b5130e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51f28ead36135eb8c3db3d3286a38609c
SHA115df101bad6ce4a57e77251e76757f8819c17928
SHA2561f9337d5e1a3ab7774bb79f792623650d2e688f6f8db4d7e84f5c200d9ea618f
SHA51285ca947e327028688ac9b0cb8f44f9698272976b60ddc75f4f823305fe4efa503f5a478b5429d63d047ffaf363842334d6e4d97a0c158abb8a3227ff29727114
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5421aa3f528e51878c17d7210db1be747
SHA141231165d3124a05305a0f3b904758b02b7053b4
SHA256f6704fdd01d7f921f2dfde36fc8ab7df72e0547e5102b723cf70711bda941006
SHA51220371dedb67dbd99c9d560d7b97d7622bb9c1588904bfb38249894f5ea714be92795a5061fb385ceeb54cc2b0c55da333815e827cf0266b50b44d5f73ead3dad
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5d787c80bf3b14627569eebd98f939192
SHA146beee10b36040272b122b03f3494013714340e7
SHA256400901ec2243c4f796353ca98857ad055e4b08dafc245b68b0ed3c13206ae1e9
SHA512205571894b99e7c14691b53e3e73be439dac1dc4febacfd69a46a7df940798f6e2b65934e5faf2bd60d82f12fe0395b48ddc97a75f2ffc9eb14ead0331a286ee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5edfbb2d13db241c8b62886e048d48496
SHA15fd750d45e818b94e900805039ede425e54669fd
SHA25686a9cc7baefe6015668a0ddba9f049f84b931cf18745a42090eea2ba7abe2dd0
SHA512e72255dfaa375e17b32f713303c9cd9ad3d63be4d456202f0e13ceab17342d497cb4990981bd598871534cd0b809b8ac988686b320357a72af05956d648c47c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD597b18bcc1f857df085f9d951c101d9ca
SHA1a50964ac4f169523dc2b9220ce9c34d2cd9783f1
SHA256db8f7a11f53c9cc3e3546e2e67be693b7bd30b59d45b90c5812e0e65a33a2807
SHA512c97fcd8af598fc857f7f70edcf4ba0184077afa04d1884919069327089fcb7bfc83ecac687a87fcc02cb06862be572e4d0dc5154d3b4fc8d58c89383016ac49f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f93dc8ae22411e7524feb67e3adc8ac0
SHA1e3bb798b121ea8641647b821a21b6a5d9245c6b5
SHA256886048b7831bd6221e0f1568d6af360a2773706784fe31a3c2b19cebd96a0204
SHA512bde349eafeef32e3adb09bfb8f5667637e03c1c681dbcce4c3cdf5b421933a77e272ab1bf04d2d80bc13c140217b74a54edcbb99bc946791c585f0387d9b0f58
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD51001ab7f01b4865cd8fd5763a26263e0
SHA1622f612d939746e1b50cd8b664da9491c9776b3a
SHA256ec4093fe65b946ccab21d13ae7757bb76b08f55c1bb563e03f2a61311288f78f
SHA5123e7ca805d1c3a3e34ab602dedfe19869c8cffe15cdaaf4bb0444947738710cd04da65ae72810f5f206c3af964dfa3703f2721b92dbbb84ad3d6cbde9ee4c6e25
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5582609f9064c32c9652ff15c6e21fb54
SHA15b7e4461b397d88c7732ef9291961882a46eeb0a
SHA2567749adb1f0e24bb3bb57acf0a75519d797d66bee90ba692257d3d83521ca2e41
SHA512279c44663fa8013b2b962835f8d5e431b8a28dd46bdddfe31dfa897ed4b02700766ed2b29ada7f60950c6e1f613e79868df728c080e799aeee6465304fa0af2f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD54e20fffe992dc8fffc355a766c5eb230
SHA10d37a7fec80440877b920bf85d701a6142d36fa9
SHA256a29a0ca38ad6c661f98b045d28f28725df446569ae5d0066d1e9e4277c1ca0c3
SHA51203c12c753d1848e968f504f2e612d48522d56f931b02333d5373d26bffc3d945abb8213b8b93ccc70e39468dbac8f7b6bc16da6f4d1f9eb6b865243ce9fd9944
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD50301d2d475c7ee111e3ce6d1c50e9c16
SHA1fbf41d51d1cb9ec7fc22bd45408501d14f6a5daf
SHA2564c1cd05578a945dfa6826372edc8fe3b4466c06bbfc8ed6b2db96ee60e3370cf
SHA5126d10b9091bf319101e02058d44b9e5931744457213bc6b48f9ff3518d0f3f5329c1c97ebb371f342721a2301956eb0a3840e4ee9f9a47caa00c766275b766908
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5e20cac57ea130be7a94287480f8a82cd
SHA1caa2407702cb6ebf699810c3bbadd95f09c28193
SHA256dc56a3c61c29757d3318a1b11de190a27a855f42ebd17f92332bd6f781e55088
SHA512fc3abe54d1a44b744c35472e12e9c08aa1176d736658a4bd3b588405f8aa4965b466d5f365fa79f9eff3d62609f0e79808489e55bf30447ac8d02e0bd9dc169a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5321db2d9efbe4b92ecae90953fda97a8
SHA191fbaf51e8fd746393d0151f318b68bafcefb29d
SHA25698773ea888a9d272a4a353a1f926069c985e49377d7a3e7a7536e29fc8787235
SHA512a094a09028c1a1eb7b25e9d30f382ae272c5d01aa440aedab3e8c16d2fdcd63623376b95b34cf24aee79ebf1356875f420ed437eac95ea13a946a52588682994
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD53080fa031c5d6a0ce8f0919963601dde
SHA1241a347446ecd9a03aa64fa0b7ccaefdfdac7ec2
SHA25638a0197a6eab6b4a36fde3246dcb3ea2e754bcee54388f0309e86492581c5201
SHA5126c41f7dce0153e70046bab38a1a6794ac4abe8d9a9a52fd7023080b4c0786ee122814756da4d9f25a44ebc4e95e035ac2bf3ad4d34319097cfe514abfe29b68a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5f4ecb2a754388962eb52659b7f8f4d56
SHA17f907b03c1ffcb61ae491441454ac97aa66f6144
SHA256572f285b8b079de50590864ffa5dfaf9f26bd2b0746acb48d6160127210dbd25
SHA512e0ef283cec606f8b5fb7b5cf668018396634a5cbdc78879e35bc27f676cee7527326aa270285a779759cca89715c97d90bf783c4d66acb5b293809c189484705
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5db57d52ee585a3be91e20d2deb4573b3
SHA1ac321ee31a898bf8f07eced8fe61c95418419a54
SHA256bcc473dabd224d11699fe2d337d5a78e6e19bfbe7b1ba5dabea444b7d838c0c0
SHA512a45c4a22afa7b7e171848e35befe324ecc47a1c20b2ccf786f7ab5d2737113ec41bab10b8b7c3294fbf950bb22f7644439a07883052a1d6dee5317382a68598c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5b0598f5313da01510c03e22108c6c14c
SHA17a3fda2edfbf87104995ac640470545e04ce7ab7
SHA25626f94911f9edc75989754978f568b622403ecabee19b731343bf894f85a9cfe8
SHA51244dca4190d9f04ec92b49b41e2e44961089eb991123c8c9f6a6ca107226f6192e78e6a0f4e7074ea6f7a05fb63eea21749288191e8b5cb2e5228123420a6daa6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD530d08453e58a90646811531a1dfb84a8
SHA171c455a41030efc2bf1eb13914a0ff0630bfdab1
SHA25629d306f0179838a30b0884d8e7f4e0b221e2c4d96f2c5979ac10325fa604cb51
SHA512bbc330db0be6750dedf689ab565671d3aad09f09b7b922c935e0af2782d7563e8062ae1b41e5b7d7211072d3c2426e6f62e1914a51d21aefb387f93a7b8d5cb8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize344B
MD5edb85d677ac699f3c3fcd88362159093
SHA154b3b414f8514670cbb75b228d78e532b8b9ad7e
SHA256da3230aee7d55e3b47e3e796854bedd5547fdee9b5ed4baca27d5ed3d1e965c8
SHA51203aed9665c794437232ee1ca76e7354c35dad3729d39a7ba5e65f5771fe52ec5a7becbbdf1a37a67b57e0ac4f35a9560524df2fa34923777e8a3e31003ea23cb
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a