Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
27/05/2024, 18:31
Static task
static1
Behavioral task
behavioral1
Sample
7a18df5aef160c71704b69051e66aad2_JaffaCakes118.html
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
7a18df5aef160c71704b69051e66aad2_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
7a18df5aef160c71704b69051e66aad2_JaffaCakes118.html
-
Size
41KB
-
MD5
7a18df5aef160c71704b69051e66aad2
-
SHA1
db407ef3e2a2ee32077c4a75253a245dbba5e112
-
SHA256
9940a141454c31ec5515ae24ea24b9bf9fbb63b56098e4002ccf0f7c6cedcf46
-
SHA512
b3b100c469d770ca7e32dadf990742fc6f5df04f3ce7d5434c4747b587053671b037065ba3860203b2a93e055f8796d2d5eacf0e4c0854556809ff01ea7e7f49
-
SSDEEP
768:vMwlcovXvXvcRgn7tHjX1So6pDA2SEw+qr:vnqMXvUgn7p6pDur
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 856 msedge.exe 856 msedge.exe 1976 msedge.exe 1976 msedge.exe 1988 identity_helper.exe 1988 identity_helper.exe 4276 msedge.exe 4276 msedge.exe 4276 msedge.exe 4276 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
pid Process 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe 1976 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1976 wrote to memory of 3380 1976 msedge.exe 84 PID 1976 wrote to memory of 3380 1976 msedge.exe 84 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 4600 1976 msedge.exe 85 PID 1976 wrote to memory of 856 1976 msedge.exe 86 PID 1976 wrote to memory of 856 1976 msedge.exe 86 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87 PID 1976 wrote to memory of 4088 1976 msedge.exe 87
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7a18df5aef160c71704b69051e66aad2_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1976 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa5bce46f8,0x7ffa5bce4708,0x7ffa5bce47182⤵PID:3380
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2180 /prefetch:22⤵PID:4600
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2600 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:856
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:82⤵PID:4088
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:12⤵PID:3780
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:12⤵PID:5096
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:12⤵PID:3036
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:12⤵PID:944
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:12⤵PID:3980
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6628 /prefetch:12⤵PID:2180
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:12⤵PID:1516
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2096 /prefetch:12⤵PID:3852
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1320 /prefetch:12⤵PID:3972
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6724 /prefetch:82⤵PID:656
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6724 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:1988
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6692 /prefetch:12⤵PID:352
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6952 /prefetch:12⤵PID:4008
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,7085685601641719592,16403380852987669380,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6476 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:4276
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3060
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:5048
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD54158365912175436289496136e7912c2
SHA1813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA256354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
SHA51274b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize216B
MD5f45152797fb50d45b7bca4a44881b559
SHA1c140f44c4bf35b94e3e9263bac4ed0a5e9699375
SHA2565e2567c1a974ead8a416a5d588d779776cb500d8f06d51725b8138c400c6361b
SHA5122150d8e1e74a8503e6db1ab1b28cd68d55536658061a9ba6e3f2536001d9ed07e5973060851053c1dbf9d16b28e55474e01fab499b1493a63c859b17c4aa467e
-
Filesize
2KB
MD587fb80e2a24d26f7b419bb7e50c7eed2
SHA140f1b423aeb69993f2308634a7e8c5ea46e898ac
SHA25681a7b6cce777146fc12210a114ef003e3d58c29f7765ef5f00e4e5d19e045849
SHA5127a446f8c6a66ccc10858e70007c36d596e059b6e9d506e46a9a0cc58af68e898bf1b9465b42df90948d2ec6c68152169770d57cf9a6cd2812af44fad63cdadb4
-
Filesize
5KB
MD5f26203309b55e31fb154503d19ff4d3f
SHA1a460d727c16b073f7c4fa3e38346f518faa4cc07
SHA256ef5f56fa9d195620c04660babdacc8ca1f38321926ff051369034911cfe381df
SHA51291671bcd3920b52510e6fd36737c11c86e7dc90c396caa99db3357d7e2487f349f4d1b217742d3f97002686c6c57214081e9685184e2e3a66180649ffa0b0551
-
Filesize
6KB
MD527140c7267124ffee9cd20f7206073af
SHA1afe4f532a111f93c1f16a3f0b68877ec042ad345
SHA256b84402d6a51f2a367d0b7d4d4c4bbb47de04f37da4103703035d1d12b48bdb89
SHA5121083b62b1e6a6e2c0a6e12a2808e4b211781002524bbc03c546701a6007d48cd4967d78c184db5b6c2b0a1e6f3f32b55933ef4f2e3d28ef75bdbfbb900f7b165
-
Filesize
6KB
MD5a4c9aaabd571f57cb3f3c8f6b23b4db0
SHA19606bcded65474cdaf2ee64f51b86078e6674451
SHA256fd825471eb41123b5d03dd7862b6bd2e1f143a7b5d668702c781f56bc0b40300
SHA512cfc4a58fd1d69d568045927d2cf467b18dcdea343b05374b2b6cea778574a592924fbcfb06d7155323aaac41e787c790369437bf6d9dc46d8d8971f6f8e5f66d
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
11KB
MD5466dc4a83aff73300093e3ad4273c0b5
SHA1dba08050075eec029da611aaf3db46d425109080
SHA256f12d41420d77a028be653ba764f2acfa5f554adbe74425bd7997159c4d0f8461
SHA512e1ffe1f8a2d4b7836259d9beed4a07e2c5cddf1a1facf80795712a99fa78d7adab173d24c9bc67f2e94489491f21628d5432fe443ec0f920d42e26e1aabddbcb