Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
139s -
max time network
147s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 23:26
Static task
static1
Behavioral task
behavioral1
Sample
8c276eeb543ef825b4c1d835ee143392_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8c276eeb543ef825b4c1d835ee143392_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
8c276eeb543ef825b4c1d835ee143392_JaffaCakes118.html
-
Size
70KB
-
MD5
8c276eeb543ef825b4c1d835ee143392
-
SHA1
d2e3d51e06088d2a6b1c8db67008b28523f000ea
-
SHA256
84bc340e5ba4c7014ae49d86a1356e87e55763c17224a3ef041326705d573b39
-
SHA512
25e449395545c88feb1da49ea7e6f9f2c691453a1b9a6c3e78dc04c180db131d034b0e13428ce593ed0b123e1f38f89023d2cf2abee4b7770726d2d9a22c3b1b
-
SSDEEP
768:JiTKWgcMiR3sI2PDDnX0g6sM6YFha9hYz3oTyS1wCZkoTyMdtbBnfBgN8/lboi2h:Jru4rTzNen0tbrga94hcuNnQC
Malware Config
Signatures
-
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d6072d0848f14c4e8a2c9370809a041d0000000002000000000010660000000100002000000061750489109a87883047903d22faf1f49ca6f35dcc8e74f0fbb400d13000d663000000000e8000000002000020000000f365cac8972c74a35cda2e4f2d2bf7b899e90c1b87ef755b632b991f105e0e629000000010ba3c37705bde043d0afc8b5d1863e1e0b3c1c005b7e4b3d2d6c6a2758854cc9b90e8e85db428ae610cade4d658fe44d4c7626746ada7fd0230d031423345a6b78c858304e0faec606f0d9aff3e6bee16810f832804b664ffb1f498ee1c9c1ed1f9520861e21180f0438ab1399353d51077702f3243965173949f75b48480a22afbd06316cdc07aafb8dcc7804dbf0b40000000fc2883f934857878194c405ecb731cb96747670488fbc23fe786a5f598ac0b2a19738812e3fb24a90ae89c58071d0cedd93184206f253986209b05784f1645d0 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{6D6E95F1-206E-11EF-9511-66DD11CD6629} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000d6072d0848f14c4e8a2c9370809a041d000000000200000000001066000000010000200000001ae2151e7787f426ea5ed270659d7227e8a73585d95295f2092f5aee6915481c000000000e8000000002000020000000d5fca3742308c3a707466bde7ae4e01f1ec758383fc9e1a173b2a45346436de220000000a3bc0af8f731c8f22d64fcca371f1cc66887abfadce83cc4e207febb7118299640000000948c01f80e7e419c852f36a74dcf7b40bb0aedfaa5ab54262431b0110aefcf8922af580a75be949d7f06e6e814d727b62cf15cc84b7b62f1afff8d38563f5b4a iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 008538457bb4da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (str) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423446282" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-330940541-141609230-1670313778-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2008 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2008 iexplore.exe 2008 iexplore.exe 2252 IEXPLORE.EXE 2252 IEXPLORE.EXE 2252 IEXPLORE.EXE 2252 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2008 wrote to memory of 2252 2008 iexplore.exe 28 PID 2008 wrote to memory of 2252 2008 iexplore.exe 28 PID 2008 wrote to memory of 2252 2008 iexplore.exe 28 PID 2008 wrote to memory of 2252 2008 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8c276eeb543ef825b4c1d835ee143392_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2008 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2008 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2252
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57d959345edf73db7b191878d72856221
SHA17c4aef2709d78c1d12df688ea41a7fd00f8720e7
SHA2565cea1a906ad9eae8385d7f3a1cd760a0a4592f289c5de1398e1ded093753ce15
SHA512851b5f23c116b7abfaa7743ca48108ae8e9ae6d0185d5b3750360461639324c811590c2209a0281e95e3e07ba774e374854bcde3b2a1cffe4922de00107046c9
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bc38ac5a96b7a106cc72c8bef181fe31
SHA19d345b3ae802284b198a4c1aae8b7988386ab335
SHA256e4222c0ef33de5beca50df0ff511df76af891454ac03de322b10334363dc84a3
SHA51296ed4b4585f82eb742705f36f178823845950c103d1d25c3fba22bfd587d93daaccbd92f23670c1df2fa729ee7515cf0df505395cbc22b906897a079f1482c93
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a438f63e15563c08ed41e437cef8ff36
SHA169630e1228bb7f6815db7cc82c1ce4b92f9c01a8
SHA256d4c18d01fc2160e9603d3afda2a0e690148b49cab55618815a40129755be86e6
SHA5129c3b6b6668a07d18ba2a70bb81210cf0aa49ea97a2465526e2ec8cee3f2c6361722dba8594aa9ef80d2622e01b3413396d60d8ff12e37805e72341ee16cd445b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54aa7d172761514c5f7548e2c6d3aeb73
SHA1bf9eaebd351d5f58d1b3896af2cc991a5007faa3
SHA2568802b5e719a863210d141e0fe89c1b1d6c5809993873003004f521bba4d8868d
SHA51203f2084bf199998ddfc9fd6032cb0fe1e3c38019e36d42888b106b9626a4615082a4a7ffc8093ad88a9ba85d18145c1069227000a43ab98c672901cd13692d10
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54f9cfe51d09b146b99df1365e338a6ec
SHA1d31be0ee773ace0116d548dff4f36df0f572d62a
SHA256b2d3b498f1be8db5452a3a05367af5f36229f9e11322f438e50bd39ad1b30422
SHA51200fe6d10b294f62132a5122cf9dca2a991a8639edd3e93c1b61407738557203d067ed95c625b672ffc9df4f938b699bb020dc0f0c496f52d0a99c4d95a030200
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55e51067b5d0fc84aaf0b96d903462cfd
SHA1e7aa3c1de95d67f689af31d8e50f17ef32758fa9
SHA2568a7c121b989fb33da9125fadc6f86300221c33d48be7d973025396e866c416c5
SHA512b4d518f6aafaa562a2899b5fc1f13d4c019c1cf251c5a5a38b3ec851f723e7253b0ca2596ad59a9b49979b2dfea16b43ed96a1b75d8475eaa0bd4dbba48b1a2d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD551712b71175b953e4e6c3b4d9cd68dbb
SHA15619a6a3b8d42b9fba3f098ed0cb8d676185e60f
SHA256d1b4a5a21482684458df5d906a1aac98f61891b76046c7ba05863ba2f7a55e04
SHA5121c8c804218c4248aa7cb8de060b0f20e25a13737e0fc4cde8adff3072945f5eb19bbaf036220d809ef2e45c800fb15530fc1a4e87f966a81f63fc2a731e2f971
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5303655861afd444bffbb9f4bed0433c4
SHA1a3d6204931c6238bbc34b22be691895bafbb73f5
SHA25667dd835a40577fb34ef7a3098346b6e4141fcff4d1cc712c7c9dcdfd09d4b5a0
SHA5124d61467714a3b76705c6a02ed2cddb764b4be74b0e6c6130384df39954699f89387b6c0af8c8de9d45e802f31bd6b370f403245da8f1b7cb5c4917bfcddd84b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5dbec72b29562df628da3182377c496e2
SHA1777307c3a6dbd36b26e87e5cdf83a94f614fce1d
SHA256624e5ba83eb4bf77b6ebddb494ed886322f26c1ef864032e5c9138a3c74aec81
SHA512cca4e605b475c666876b327d72de9b254ab08facb2000f91d6a064726b68800fc2943de5ceff51f86fc3794c51eeaff0d6eae310b880891fa517c1b375e69efa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c9f83edc20bb5dd7a46389d99c0a6461
SHA17a02935acceb6ff66e8d7328a6a92dd99f35ffa4
SHA256a902250bd830f2e2d003338cc288047e99802ea2ea574c7be727fa832ddaffd2
SHA51233b16f07d697bd7c5cc2531cb267624d0bbf66f8a399ceed89dd1c9097ccc37062d2e35ed331499944d83702d75254243d360bec3430d29a4ce31796ed27f2ca
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57416e9832bc6129d4e8442d33c39d45c
SHA12ce658dbddc93cfc4d675e54f225e29b72d01014
SHA256d0f885a35b2bc15cdaba5fbf6ff3d487912cbf7cad6dcbab1cc4aa96848755ec
SHA5126757ff8fe7d99b2f85a1a3bf3967b76c251bd1b5cd79755400200603e6f8fef8f894464e240b6eec379761668b3278f3f8bbf3c39c60fc6813a5cca517d0af47
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54e0c8ca09277709c9262b59fe711a2df
SHA185a65681f1844943329134824523cbf517a07a0d
SHA2561330df6e577692466e7766f36668863dab60ba2d3bf66fc4e7217f6078bb7ce5
SHA51239d0d3471c77799b2258712476758ca697754a2d0fb74439b54c961e845dd469fcf86e13646825a4b124f894cc4f0febb3424dbd9fee9e1f1fd396c5b3e04e0b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD512fbe18e5476cebf3ea2e80b01dc7a9d
SHA1824b866f516096aee2fe1748f22416e18f14a253
SHA256024724a01d6d5100a7e2daf8d3d4848347fc4641dfe97fc7be3893de9a2282c5
SHA512ac102dd7251d130103a28a664a8b6032363b1814cd389018785f3ec05e4dd53f1fe40eeac87e419217521dfb801c13691519a6f0b0b6b76d36c71f3638a88048
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD543c79e9e6fb69a36cff01cafe3397f13
SHA1943aa185b4a1774858e2490b8f614e5f032b62b6
SHA256ae2ce5cfdadc5b066de91222de9731002c9e41c186a0e7cf1623e2b1bff04145
SHA51218c119b47a968a957edaa5b988ce287e2a4c3f93bcdbcb694da6773702470428c47c0968732fa758dc8846c158bbcc503d9bce85a4348311f25f6d2e03e70f21
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f8e6152db0ac6eafcc46bb4fead7e1f7
SHA1cbac8ee86ac11565c47f4d8cf761b3bf212a44f0
SHA256bdd3abda9cabdc31ad58cca391f46273c4d23996bd64b1b852129d140293cdb2
SHA512165dc2e51425591e79c483775b2813a111ecc3d313ddde46ddb22bf030305d2b4a76069c5c3361e16d5299ab5805ce375eda929cda7a42c2aaa0347a4614d824
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD504f432bfe85af402035f186fdaa53433
SHA138949d7c0190dcf4e27735b00ab13164565bb653
SHA2565cc0147747ef29e234cabd87cf2995a037198f1aab84e9adc12f85d9dcd8b1d0
SHA51266ada42db366bb5fb343150ebea6391d6742505876fd499ca7d49ea95d44a6081b7ffe02435cecdf56c80ace0c232c7fa761d149f335b5bb29e565e4df0f5f36
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e82d8476625cd152e8086dc211947f3a
SHA14f814a98776c301822c32f217bfe687ef40aaf57
SHA256cf1c8ee58915e397696491b096ec2e256121e8005f7d32010026e9c3e458dc08
SHA5123c79befc344a1fb7bb80c00265bdcf3dfa39cd53be66c207f56f632289b7dcd5a1bcea36b9a8746f3d8f9f6363dddc4f5e55e8584b4f201e765dfcf1c197e36b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD598b72b42a3adec27acde51bf102c18da
SHA109a7705c74e71f741816b442bc7e536921f06363
SHA256d97fb70eca1a540b8fa1758dee35fd6dbf53eaad88bfd9a4c9aec007dbf312d8
SHA51286c5325ec8428d87806b99beef1b923b2208ba647373e7a9d3722f07eb6ba6093212049d09561579ba7e1b2e1924565b607ca2dce41925e02863f247cf094caa
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD581190179295ae77b8ac265ff375eb030
SHA1578d0bc9f6b819112ea65b32f013b5dd8125b7e2
SHA256a0c600dc82842a9256b195391dafbca6661cf2c64c1bed569e1bb1badf4f285c
SHA51232cc4e16cbeed57da8df45f009a559c13d100ac43d96ff4e3c2fe23b25ae464e23cb78aa572e094041c72ed2244c1e84775385152159bdea6fa625fb8a91ffa4
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b