Analysis
- max time kernel
145s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system - submitted
29/05/2024, 11:08
Static task
static1
Behavioral task
behavioral1
Sample
8089332f25278ff15c24351b1b429a4d_JaffaCakes118.html
Resource
win7-20240508-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
8089332f25278ff15c24351b1b429a4d_JaffaCakes118.html
Resource
win10v2004-20240508-en
6 signatures
150 seconds
General
- Target 8089332f25278ff15c24351b1b429a4d_JaffaCakes118.html
- Size 42KB
- Sample240529-m83qpsce41
- SHA256 fa63da4ce1dafaaece56faecade34c01166e030f9b7aa5526c3c6f2f7ee33918
- MD5 8089332f25278ff15c24351b1b429a4d
- SHA1 4a309c4d1d58ed39826317d9a642519efcedbe2c
- SHA512 eacac315a0ce834e0a504b3bb109f69c666c9ca0c0720c50d781a2499ac7e03bf4431f778ad9aa29cca9519a9e3045365bfcee361202ac26bdfa6939bbad7131
- SSDEEP 384:ahl1DB50+096fcVJZ5ZdC/VukuB3FJZ5ZmJZqLZWVyNKUpiIfUBrF0JxEuA:QiX5f33NfAqLZlfUBJ0JxET
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe - Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 2132 msedge.exe 2132 msedge.exe 2156 msedge.exe 2156 msedge.exe 5048 identity_helper.exe 5048 identity_helper.exe 3108 msedge.exe 3108 msedge.exe 3108 msedge.exe 3108 msedge.exe - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
pid Process 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe - Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe - Suspicious use of SendNotifyMessage 24 IoCs
pid Process 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe 2156 msedge.exe - Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2156 wrote to memory of 2308 2156 msedge.exe 83 PID 2156 wrote to memory of 2308 2156 msedge.exe 83 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2460 2156 msedge.exe 84 PID 2156 wrote to memory of 2132 2156 msedge.exe 85 PID 2156 wrote to memory of 2132 2156 msedge.exe 85 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86 PID 2156 wrote to memory of 3668 2156 msedge.exe 86
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8089332f25278ff15c24351b1b429a4d_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2156 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff850fe46f8,0x7ff850fe4708,0x7ff850fe47182⤵PID:2308
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:22⤵PID:2460
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:2132
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:82⤵PID:3668
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:12⤵PID:2032
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:12⤵PID:2280
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:12⤵PID:4092
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:12⤵PID:3636
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 /prefetch:82⤵PID:4860
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:5048
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:12⤵PID:1008
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:12⤵PID:3428
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:12⤵PID:3328
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:12⤵PID:4496
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,7716739306027289065,2096910587237854668,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:3108
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4932
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:1088
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\56862efd-acf5-48f9-8d01-589502fa827b.tmp
- Size 11KB
- SHA256 10baf2cab6b939834c27a30f586973182833221b729a52c7b664a1de76efb2aa
- MD5 5527063ff8920a508caa8a08d7b27965
- SHA1 185051a4b2ca7bb0fac1ca6a2159b47f11ec2056
- SHA512 46af0317423f0db010326bc1ba3d4fdd61b6b6259aa0a89a067d0c4541c371f1fd4717b39fe6ab2e85d88e102c4110c349ee1bd7fcf6067e79f77b4001804a4b
- SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuppje2RU34uq3z2OMDCRHqlJ:A9iIxuERzA83h09RZxYpziqaOMWRHqlJ
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 152B
- SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
- MD5 ce4c898f8fc7601e2fbc252fdadb5115
- SHA1 01bf06badc5da353e539c7c07527d30dccc55a91
- SHA512 80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
- Size 152B
- SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
- MD5 4158365912175436289496136e7912c2
- SHA1 813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
- SHA512 74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
- Size 184B
- SHA256 6993aad309fa06cf9c5acad1aa85f457979a5750cf15a0869bbac50cb62bb28e
- MD5 75580ace24347eb3b8968ace1d7eb252
- SHA1 1389a7b155e636a9d5732188dcc6ed282b2afd3b
- SHA512 f078ab3e0a0910c54cb6fc6ade0702cf83e8ae79d55d32e5c05e14145cdc1cd5360002238c4a84a2e14c566ad532230fed9616c122ef1328c20f0b371e9ca87e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 5KB
- SHA256 dce8f00d41103e0b9059b4520360561fbf7afb21a54f20e1f113fa628f459f2a
- MD5 3f7a86af662445095881842615702c02
- SHA1 78b35509dd01d29d8b2e3775b5e855c0060001c9
- SHA512 bd0352fcda036337d20b009ee8dfc096bae66f616b294f0c5f803d544045e8c85910b943e99f412898071653047634983e63a02bb9ec98cca88b74453c0979de
- SSDEEP 96:nMkiF1FAgjuwpvWMoiVmdeHvSSBboUWQyV+VDCziEwb:nMkuEgjuGWMXvcro
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
- Size 6KB
- SHA256 972010c94a03eec8a938db793c5b501a4709712d5fa35bbec872924b5aad1882
- MD5 3db275f550de4dc3f1812a7162a0c6ff
- SHA1 2e7aa72c4de6dc32af4e257990b5b9b57def1e4e
- SHA512 e913749fd4b4ce2f74fc33a897024a26254b79f8a2fba8b88be7d1a276867015713ea07bc6449c8dd8656aa5d0cd6bd09625afd4a5170ec11f48735c0725328c
- SSDEEP 96:nMkZF1FA7juwpvWMoiVmdeDV9HN2vSSBboUWQyV+VD7AiEwb:nMkfE7juGWMTDHN2vcrg
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
- Size 16B
- SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
- MD5 46295cac801e5d4857d09837238a6394
- SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
- SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
- Size 16B
- SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
- MD5 206702161f94c5cd39fadd03f4014d98
- SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
- SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
- MD5 SHA1 SHA512