Analysis
-
max time kernel
121s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01/06/2024, 16:58
Static task
static1
Behavioral task
behavioral1
Sample
8b1f6608cb1bd35483135e917c28c529_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8b1f6608cb1bd35483135e917c28c529_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
8b1f6608cb1bd35483135e917c28c529_JaffaCakes118.html
-
Size
460KB
-
MD5
8b1f6608cb1bd35483135e917c28c529
-
SHA1
0aaca6665c9c9a2e95a83a4040d4c5ffb97b57b6
-
SHA256
20cee93bf1c3fe12ee265bddb8b2480de1e36cc5395bc6b0667893a6961b56ec
-
SHA512
d3f4792e6c6a109aa920a28bcd4b654a5352bee4ff2cac2566a1145872fcd87c26353fcf613d2dde2d13f8b91a5351864700dd201440e570907f69e5e2eba21a
-
SSDEEP
6144:SIsMYod+X3oI+YrQysMYod+X3oI+Y8sMYod+X3oI+YLsMYod+X3oI+YQ:Z5d+X3t5d+X3w5d+X315d+X3+
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{3BA9AE01-2038-11EF-83FC-5267BFD3BAD1} = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 2020351445b4da01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000ec489e43473a244b9ee1c1a82d0118100000000002000000000010660000000100002000000084d3da70b6fc58d3d80f159b68f60197531416d563f04e7c897a7ce8ae5ac259000000000e800000000200002000000060fb924f85b2ec1f05b7dd9b5b389cdf08bc27d14fc05e08ba483a780aae001d900000006a17be752e643365f96291f37a026557bd15692e9c7f4fef0356f7dd280a1c2188e6a176ca5c08886c7df79b04e45968e053de8e705880a39232ce636989bbb9c6d111e663b95836e380f4631715f744c32378b67922ec12c97d6e32ab801ea6d0f320230268752f5acde29d4b540bfca125c1ddc48f7300d4e982abaa59dbc6594d4a76af44be201e5faf87303f1db74000000032d6e97e7a2cd5e5e6ce0e9430f9a97627a94c5d8303cb6aae1b81465d075cb5738d8892e257e94eda55d41404fb045a3883bfdbb37a64ee1e91ae210b15fc97 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423423004" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000ec489e43473a244b9ee1c1a82d011810000000000200000000001066000000010000200000008c989d3f09b5f38ed11ccd32e948c74130230e1380099f5f735f94e923299af8000000000e800000000200002000000015a1ed421d2a7fb28e91e3b6b97a5903ea708ce13b98e119df8249082b87272920000000adc4e6b4f282936c1749d562dfa3530263473aa4063e76c498a3f6d493a25c074000000004da8d2e3e1962d0333cd8098336b0ea01b3fa5a1a47fbc4b3e502f7ba4661f49e8304ca184cab2b538b481399e018effb71a3fd8db841a4e053942824a2f81a iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3452737119-3959686427-228443150-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2696 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2696 iexplore.exe 2696 iexplore.exe 2216 IEXPLORE.EXE 2216 IEXPLORE.EXE 2216 IEXPLORE.EXE 2216 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2696 wrote to memory of 2216 2696 iexplore.exe 28 PID 2696 wrote to memory of 2216 2696 iexplore.exe 28 PID 2696 wrote to memory of 2216 2696 iexplore.exe 28 PID 2696 wrote to memory of 2216 2696 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\8b1f6608cb1bd35483135e917c28c529_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2696 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2696 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2216
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5543fb2d86d7ed89580783bd1fc45a658
SHA10549aa096237d3dcc085916078957a9029dfa089
SHA25672afffe63d46a1a5eb1311cec6a5e7d736ef27d8ece0e32e5f46cf27a0e7dcbd
SHA512c762e64661f865963040ed2ab5d3db858be0642c273249d6767ce3e4ce4bebabee2b4014b7b5426b0df125a74ef186a160d372fdd8fc0b96e183e4d656ca2a03
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD514fb1131b93539683c1c309147bbfde9
SHA124eaf4847eb54b962c13c55f14736c6548c1d728
SHA2566ad967620f9c1f877ef7571bbf5cc1f9c49d0612d40957546aa227845b816b3c
SHA51259dc3e31a38322436df123c37f196ba289d766a44ebad2d7d0b0ca630ed489e0e93d4437d35b74d3feb14e71da3c083ffcc26438700856dbd2ad4f0939a8fc62
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d6ba70e05ca5c75c83475869fc02a7d5
SHA16b9e10ebc8053032adc95862876a1cda132962b8
SHA2561885da2ec23614945d45347f675c7ffe39d7bd3f3628edc2552124e53b66a22e
SHA51235c767794279ad4553e17a35488a8f9c7b6dcbe76571d633cfafdd281b2a89b5b2f94ad9b9175599e384a6e761c46165099107ef2e216381d332daa54899209a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54b57eff8eea605d0e8abaa1f9269b2d5
SHA12cdfe491a106a44f07ef0af6ee74ab7d047eba08
SHA25647c819609d1a09a09de40f5a626695b446487979165d084c443db051e65b88ad
SHA512bae2a756f68d4955445693ef01f7fb19e29aacdffcd1cb06b810bc78288f6b8386ffbd1df408d31aa888d724fdb82dac515598400084c177e95736f8d3fb914b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5204ab94016479ccaa52063c52643bbd3
SHA1e88a6e10aba763656229e968f279fa075f8fd3c7
SHA2569b89241e80ea35526ec0519624aaff5ecc18e9c03fc1405371f2c4bdd89bf0b0
SHA51237fff518b0851a93ff6fcfaebd94d42778a5eccd3f38aa5adabd134a09f38344751a77a1ebfab4583f093770cdecdf348e3fa2ec1685bcf5fdbabd3c2b5c9b1a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD52c0914ede204e1f8189c1694c353d841
SHA1ab9a6eb649281d13ddc35f6567c0a0a290a962ba
SHA256b2e50ffb073d6746aec4330b78620f26b4ba7f75e631f3825162f50e0ba0ddb3
SHA512f59d25343c10697e110bcb6aefd69bc3178b77c40fe771460afb8beec5210f3ba36257d0fc2f2763dd7444640fab03bc5b86312b9d1142f010e5f45efda4a5d2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5eab54d372ae1f0c273a93ebf88b55c18
SHA1d0ce350c494a646efd08ecdb6c064c4004a97af5
SHA2566188d581c648d53dc6472348712f72ea700dd42cf760f39e184822b08a4a55a5
SHA5124fc2779c3dbf20475f32310bfd9e8a1a035bf9a36f3924c5492a5792d9a32832b61a8ef90e9f323215c2bd976d363121cdbd809ca12fa6ef73c8216a89ed300e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58ff811e213d9b15e0e6eb08442c14e6d
SHA103edb92f800321a7e0da242209136730dc960151
SHA25648a2b359a709c8b5010ce719a5de971c90790a8936752e6547c90eecb7292a4b
SHA512b205aca3400312ce06bc5591efe5c29028636c7e69513fac0e6bd2dcd4134dc321b8165a3740456372b081185ff4e8ac613de402914d838194d059c872f5287d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5cdafc47ddf2458930f02a3a37b5d5f9a
SHA1fc78e3678cc4997d52a02cbd310b5f9e92c7239a
SHA25695e82da02a7f127b2835ac3e1a753a87b109b16f89d24a9122e615b91d4236d1
SHA512d9ab031f566d7788f7ddc41bed42c3ed9d0c2a56553fb38490cc326488a5d86ef9cb5c087233e6a49a016084793b77d19286d5a0a3a706d9b61f1142353d7230
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fc10184a4d8b7217449c5c994c68bda8
SHA15214b774651e9b0ab4726d88c81b4777425abdfb
SHA256ed41ef9e4cc08778e5e7c5ac9b1031a80a689ef9833ae2742fa384c3efe4df2a
SHA5122fcba674e7daaae14e236d8935c5523712a51104da86d08eea0460323f3981efbd3d12a221b8b0fbf33a59127fa681609887fd3cac1e8700d7a6ce9db0d71b1b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a2fecb1325e620cb85b6758d28d7894e
SHA1cabaee2fa67937fe91dbcf63c5295da4b6e20da9
SHA2565f5dd440743d1b9717c434dc9da2111ce30416755a4bf2b3de19eab2b21aed9c
SHA512e92ad4e7541bb9c87ccee62bed39bbfd56a40ffce63f21be3cca418a5ee72d2f21354c70f5a7db4e52f43d2bc87d90121292fd0fe34ca1c46811c08ac28de763
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD505656ec2cd43d537bf78548b5e3d4db1
SHA1bb59d2b395a92d569ad8069ae31f889a239e45a2
SHA256f251d0751fa1a6f0e100599538d914e27f07d11e5ff31a72d2692ae3bdbcc8ac
SHA512cfb4afe22c0931a777cb33a615c68ab115bf8f391baa026698e2974ae823c4402a3255282ad073a944f31074f7271aa30d503470272bd4f405135beaca5f1270
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5bd8bdf68a45aee253edc0448a0f0f5e0
SHA1cac95c3d47277c4b52e8d2433142244e26f66cfe
SHA25603b2f7438e918f6e593e64982b89f4149f7ea4da73b2e5f33e253493c49529d7
SHA5129baef7f8607f16fad1c418f76622396fb39338d59ded5cf5bb991e3409d6e44b401894c5bd77f7b54d81b60070972af0a8d8f6e835a75ce8e164339c92df4fb5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e5dce2254fb77bddefaae57b3e1f1d67
SHA12f90818cabf2865b7f25e77ba4221783e794ba22
SHA256109e255903ce9b9bff20f2a73e0a3e3e79dfe8ad01773e47ca0c02f8fef46364
SHA512ab9c05baa788813e3160cabec5ac5c338a800b0d0d9f6a406b6bdd41cf363f4f3b8dc72b3ca2606caa50d0f9703610a160ecd0075da263b8e7053b83dffaa5ee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD557c6d103c214b8d7de52c1bc395c7e3b
SHA13b68568e499084d0c1a7866276c792e8a5b12467
SHA256dc6534723dc12f82c86a8ff28d02d0614eb25936cba4c285efe0325f53444b24
SHA512955bb046f7302342a5780d07412df03ec7ed17b7d5f34e3aef613992e0b37d5940996c5a5f7f40566561f334ebeca659fb68d6978e1b9d9e967c090fc9819120
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d2f62955ed6d0c67f67a577c205ead55
SHA1a4f764ce2b9b922f0dfa90a5fff7b28f45393eaa
SHA256e09ea5ce4cc27e24363404344c111ee6620eb936392b81f7d3e3aadc324362fb
SHA5120818e192cee21a962a019a99d5f8a2f115f62363269246bb5ec152a87744b2cad6f668679b7d4eef8be05bac784e8ab1a07e1829ae13b19324fdf5e1d59bfaa2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a50308fa51ef686e25d2d2eb8d6efb73
SHA1f92a5b6d562dc5d23791e568ac3c4f1e58607dbd
SHA25694305d24cf09fd9a5ee06f03845eede45f8b18a2ab4db4db47cb9d105ceb4e4a
SHA51227f6de26c79c074a69906d51bfa8467c571de868fe64e5934d3c411d81ca757194f3ca4ff4071e1c0e660efb1cce8fb3b9567eb6aca7494e6fd50a6591e8f95a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD590678aa6dfc624a656dea03b330784e4
SHA1b80efb925570733d5a77ed07b51c76c7f85b7658
SHA256205d3a38df989cdc5baf648b98dd9f3a6571f41df821ddb5701066ea51cba2e8
SHA512659c72920e16b985c72aeb75205a9bd79ed88ae9907817a77ab833335f3384b0e87a8631191a650a0f07bf9485bbeff8a75917c89b778f0fb970716952da5fb4
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b952535d7642f93e9a6d438addf7294e
SHA1aff6dae779cc73484ca0268d0750e20925f12b6b
SHA256d16557c9fc7e82804b961de86931695711f173aa5884c38abc3f1b6a172025e2
SHA512b31ea5c29636d947834b473334b888fd7568585eff2e12cae759640489aea3f83068f87078eafbdbea9a644db5344a13b32eb7e1899e45c219f878d1b08cdf3d
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b