Analysis
-
max time kernel
125s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
05/06/2024, 20:23
Static task
static1
Behavioral task
behavioral1
Sample
99281083fccfa2320d09a9e972560272_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
99281083fccfa2320d09a9e972560272_JaffaCakes118.html
Resource
win10v2004-20240226-en
General
-
Target
99281083fccfa2320d09a9e972560272_JaffaCakes118.html
-
Size
38KB
-
MD5
99281083fccfa2320d09a9e972560272
-
SHA1
4edfe839c887c37f312be10ca3bcc39f783b0f55
-
SHA256
107a889ef4cdbd8acf80f7fa35e91748d6adf24be1767a80cfc1ee35de3fcf8e
-
SHA512
d23be9ca3f5af0c1c9464fe26fd3e164359db8d59ea8ef8cde5126c0ca1c7196fb0899fa35d99787526b115e56a01ec8b7a1e6610fb9d2997933ed7e5f458d97
-
SSDEEP
768:q2riI6/pbozrjyatv1x/tHW4IdU2pS7JBTfTk2riIsUr2N:q2GHVozrjyatv1x/tHW4IdU2YXDo2Glf
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a04cf78886b7da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{7C32BE51-2379-11EF-A5A1-E299A69EE862} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007493121fca4e054899018582e82974d7000000000200000000001066000000010000200000005d23a51a46168867fb78660b280e5c26731fef10d5817648d90cc913e1e9036c000000000e800000000200002000000091af6591b458e4c03a70423dac76f2cd5d10eccf7621d302401bf8613d3c956820000000c00e124866e0f5493d03efbb8e7fcb2c095544acef33037df1de86bbcb9b13744000000091693805ef618c9bb70e354b6c9eb1831569a3346c88fdd874618415c976371c4732198ca8408ab5982a5d28cf4a7150cc3d88e445741d2a885a72be3bf35776 iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000007493121fca4e054899018582e82974d700000000020000000000106600000001000020000000c9b78a19ba49cd574682c70f5c51724394ed8d4cea7ff40c50acdc697480dca2000000000e8000000002000020000000837841ab78b3d7068c05492a2245e22ca49548e4e843e62cadbad788c7c11377900000001dfb3992eb3cc6775ad325aaf1f1cb0f11f4549a23c4ce735735ed6ca27626fdf75ad8ec6cab0a7434afc561c26e442329c78de329e0cab806e25528a54aac828e38de6ed34caa7fc148360d6fc1069df8900bfea014246e8a8fc29721174a47191e1204e64721c5b4c21ac8d937e00b6dcc5fea9220d62ed2adc8d672becca7cd9180b1cbc4f86631909e3be0ce325f4000000086f6f843a9994b3df4d64c0444b6c1141c989fb9ec22de72d32d4e26803bec7793ef65997f04965ef45f6c851266b72380c4ea3caa17a0ff7f8609ab1e239786 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "3" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "423780883" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2297530677-1229052932-2803917579-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2412 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2412 iexplore.exe 2412 iexplore.exe 2644 IEXPLORE.EXE 2644 IEXPLORE.EXE 2644 IEXPLORE.EXE 2644 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2412 wrote to memory of 2644 2412 iexplore.exe 28 PID 2412 wrote to memory of 2644 2412 iexplore.exe 28 PID 2412 wrote to memory of 2644 2412 iexplore.exe 28 PID 2412 wrote to memory of 2644 2412 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\99281083fccfa2320d09a9e972560272_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2412 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2412 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2644
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55cc231b07c2b8afc9e074a8c91bdab99
SHA1626c0bd5efe834f72e99f774dd7f73d741a76f1a
SHA256f1ab349339429459be18998b51ea56cb654e2cf9583cbeb3a331aa98042982bf
SHA5127c0ab217bc43f0660a8edbbb618118ed955ed549b5b7a53b33fe28a25632f0427bf5bdd01a6a46e8d7cf17219773d7c57f6909210a92e8c1f39224ab45b4f409
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56a361685548eaf67574fe4e7a346450f
SHA193e4a1f6e1cff4e0b498acf803aae9af9aa2a9cd
SHA2562193dd21c233c5bc2264e76161362d012e6ae42b74e9bd12a71e1605a3522784
SHA512007a9245b38bc15b072dc7dd1efdd69fc2b8adec1f2ca386be899641f8b027a6d27ab24a3cf13607a4e3258a10a420bd94338a15f66fe33f7f63128f3254c47c
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f66bc52e020c496fb847162d6601ba5e
SHA1c7424273f518d1e648782370f9d9e863fdc62689
SHA2563d3cc76874c1c7c73f0f94e332f04230a4b34fe9d56c3d083d79e6d78b02e482
SHA512129e2f24f05b6a0e20c0d97a95e44f3e8a289569c03b98e911fa73a43a6fef50e20c42c6a2757896631a21ab44554b2518e48e7fa6e9741cf896e5ea0a638e68
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e97543d8137d4afbeb9f188693f90c54
SHA1e987a4767d70ccad0e3d4dcbb7a573facf057713
SHA256994b55e5ebef2b0fd7ceb12b1687c005c8a10f0c95a35020df147b765c5ef729
SHA5128f53fec98d722110f45cb6aaa20648d8ee365fa13f048499c37b521668f5651bedaf9a8416c7e7e31c818af486d9091d093e093acfb79b87001c596edf7e6650
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f2a5f8deac398d3148f2c3d160f2182b
SHA1bc69ce91d21178a0e3b41411f0c59643be932ec8
SHA2563a866a4f789e4d69f0dfe82ab132a5c6bbf535fa0539eb8d2cc77e0782b00128
SHA5123fadd0d6aeb800c8fe7ff6abb4a0c8b348065ca962d07cdb300af1fe13717383c9052c20e9e10c5c0e101d928ce3d78b9b8efa3a3421511227159d2f051b19be
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5eb843cfc070e7b6f2d9fbbc086e5ce97
SHA189d33ff38088bb07cc9fd8904b973a622361c3a6
SHA256dae1d01a6a1c12c67d07de265506d245f61beb7169da967e3a9eacc3ff221817
SHA512b0624fac25d15b385e23bf6adf26478ea58d734c32e63e4f358fcec04b8a34447ef71f16c00f46e4dfa3fb1a2a8e29d8463828fad0709936237fe0f74e9c669b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5de303d5976cf657d9b0e7b4e749ae0c2
SHA114881a98008efb16a83ea56bf81fe9a060975f74
SHA25631c66eedc10de08310b1428618701e1e9c1085a57ee4d2e73cdac2b5f46ca19d
SHA51228840a65a9a265ecff7d514ea10338c9a1afb91e3f6666aced52a151c8ac7cf70cbb5cda2c19bc229b89ee2fcdda0396ce0425f235dc854a73066f3451bc1857
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5c997cda125f38f6792f4ca277478d789
SHA1ba3dcab29b3278821ef5b9e798539a221b61e852
SHA256f681d323dedb934a382a87148ca8d7c026c68e0196b6469a2fe381fc497c0f97
SHA512dfc76c574cfb4e5a0c34990c7ce82c20d0249fecc1c7017573b02a0b7301d9c86e0e3f549c294e50804bf4571ab0f7815735f60d7bd69605fb2b252108df01f0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d4550be7c8ecf0d33bf490a2f05f96f6
SHA13f337f4faeffe2a2233d7aed70bd701d129ab7dc
SHA256c736dd7e32e50ec703c237bc44444f2e713fb980930db3d3da815fbb67083032
SHA512332107ed6a3996d02d199727c072e088e6b38e76dd548cb85c0044724d03ab5e9d139bdc693e01d5cc567d7b38061b0d7954bef8ee82b035496807fce859ef62
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ff7f81c8bb7dda709c2f7452951d59b7
SHA1bc9dafc5ba067ee8ffa1fbf8f0a76f3b2914d11f
SHA2566643a2a1d86b5325ddb3572ede75976a26318395da0980549ff5177885ea2ebe
SHA51286ad77fe38bdc3151a387ba73074212a836a7e7724c3db70179572b0bde847ca7ff1d5c01396561634e270fe36b10ac89a6bd5df585e56745cbc9396345ed837
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f6f0a88c660630b45a1c0792451f040b
SHA1ec5a883696479ab540eae688818e08c07316e504
SHA256c64d58d8e572aeb789126482762cd02b48350de02d5a0a9b2cdcfca8385aa70c
SHA512012128299ce793869d953178cc2a16124f8f57615b20590895cbadab1829a7a839e776c038878880ae9cf5438e61f9ec4681f470ae0867c326eafe3ed035b770
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f55a8f294c5c4f1a9d5782d6d59ad573
SHA18fce3b5d91cbad8311771ffa1034df56f1c1edb2
SHA2567beb0aadb73860e33070538b109da5377a75de337ff85460683541691c3971b4
SHA5120a14a4b549baf6a2e6587a97120dd6c8c5fbbaa5a8b9bbc59824321fa1850a6fa1cf03d9ad8be698bbb614ec83f9adf014173ffa554ab8e414076bedb625ab09
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD520741dc8d8c308a6513957c08f060b3f
SHA1d2a8b59d81616fc87ca49917424ca6e48b98d4ef
SHA256a494b46559eab3ffe7d86d253965aa61a08a8da1fb199dce1b1ee00867a0f243
SHA51249f87b089c30f95fe157ce2a5a8961b59a05c70a76d2f844d0f6117667b4d8474d1446141edc286386bc096b8c8a48aeeda6afad897f16a7f23f52bc1baf4ebd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5430264ce91897f9c1d0a564325a8aca2
SHA104732a75ae7c1e237baaeb3d61b288b4ebf05c98
SHA2560f29d101a82e7a86c0ce75737659d189ea2fe9267c4d6c787c8e13376caf6fd7
SHA51255149b8e2840ef7e6db33f23f97726fbf7592cdc201c6cd70ad10d35c7b628b0a44ee51db3b58ed44c1919fa2b5829ba29abc094278540a6675c367e7f24fdd5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b88cae5ad0e27aadc51c17754d86109a
SHA1fadbfd5b72a47a717ab4f27322b6c9ea687b002b
SHA256dc923f7dab36799284dbd509f897783f05ef9eec8e1ba3ed1ed34d3f386fb1a3
SHA512815c60b18b2340e015e42479dee25533ed2472cd2094e9d28bef39d61060be46261828ad8c72c88448bfdaf3f47625151a0204ec7b327825ad280ea0fd1eaa93
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f5475007f085616fcb3552f83f97dab1
SHA1e9e312fb4a38b31b6923f9578f8e2717c734641d
SHA256864e6fc5f82daec1b77759d7eb7b03b6a4edfa7073276fc67f08040505644de8
SHA512e0245fec663066a6670d12b5ac08f87e8b7c0f6ef705a65845ea1bd4e5190a2d0b274bab5aa56a53e4d54004dab002bd2f15e3d628b499aa5e323c5f480f3269
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55a7dfa095aa813b868bbaafd3e8f987a
SHA1a3c4576de41367b4cb585e8922d626f83d080888
SHA2568854663862aee0c25c0dbdde8f95eb6799ff08e72a39969fe44f93b136d489b7
SHA5126d1d3b1be7a04a03a24a1a0327b4b705a3b0685588176680c70dff7b22b5e916b5c617b441af678da1d4dabcb440cf7e6707474b7a8f3f71aea22c70a57bc5a1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56ab3d35b49844e5a4b027d1760af5370
SHA133b24a6c24ce084c998c792fca1ca381f8cfeff9
SHA25610094a5c433fdd9e157f87d7444d0b20c6c06af09deb986ac29fa96ed3e00b8b
SHA51238a213d94069999e2bbc1c910c15245a1ce0c4b447f1a7961c7918cd2c29924e609b538c2864450983bfa4cecb1ff5987ba02b52d4368c2c7734945603aaeaee
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53323058a4ce938afa90df76fc01e696b
SHA1e0093a069eb4934837728f014777476abeafdb27
SHA2562f6a0a1fcaf601deae4afab1da59450852307f36c464ca450e9f209250384156
SHA512d59a5d8caf305da9af270e50748ac3e5ab6ca68f48c513d11f23464a571c392ca8cb5a3065c98b200078652e41477b21815bd1633cd1ad808f21ae55f92d43f1
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b