Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
46s -
max time network
17s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
11/06/2024, 19:26
Static task
static1
Behavioral task
behavioral1
Sample
MovaviVideoConverterSetupF_Waiydjd_.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
MovaviVideoConverterSetupF_Waiydjd_.exe
Resource
win10v2004-20240508-en
General
-
Target
MovaviVideoConverterSetupF_Waiydjd_.exe
-
Size
4.9MB
-
MD5
6a609b304936946690a18fb199408ad1
-
SHA1
f9f82ee1be0cec184af8986db23fcd30cfb4872b
-
SHA256
fc51aa662126e720bafab907b75294da6a73458ada4b5260468dad4cb8173691
-
SHA512
0fab962d1238f337365249ec4fb26712fa7d25f8808bda7bf44e53d19389bf3b7560580c1e365c7aded1dff82fe5ac025d6e14c491346f9acb8095bb70b2abbf
-
SSDEEP
98304:R5vYx2QfQ4yFtA366WV3jdxP1PsmeNRDJkQMPE3:Rix2QfbItA366g3ZjbURmQMPE
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2532 installer.exe -
Loads dropped DLL 45 IoCs
pid Process 2428 MovaviVideoConverterSetupF_Waiydjd_.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2532 installer.exe 2220 WerFault.exe 2220 WerFault.exe 2220 WerFault.exe 2220 WerFault.exe 2220 WerFault.exe 2220 WerFault.exe 2220 WerFault.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 2428 wrote to memory of 2532 2428 MovaviVideoConverterSetupF_Waiydjd_.exe 28 PID 2428 wrote to memory of 2532 2428 MovaviVideoConverterSetupF_Waiydjd_.exe 28 PID 2428 wrote to memory of 2532 2428 MovaviVideoConverterSetupF_Waiydjd_.exe 28 PID 2532 wrote to memory of 2220 2532 installer.exe 29 PID 2532 wrote to memory of 2220 2532 installer.exe 29 PID 2532 wrote to memory of 2220 2532 installer.exe 29
Processes
-
C:\Users\Admin\AppData\Local\Temp\MovaviVideoConverterSetupF_Waiydjd_.exe"C:\Users\Admin\AppData\Local\Temp\MovaviVideoConverterSetupF_Waiydjd_.exe"1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2428 -
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\installer.exeC:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\installer.exe "--distrib-name=C:\Users\Admin\AppData\Local\Temp\MovaviVideoConverterSetupF_Waiydjd_.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2532 -
C:\Windows\system32\WerFault.exeC:\Windows\system32\WerFault.exe -u -p 2532 -s 2003⤵
- Loads dropped DLL
PID:2220
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\FndAppLocations.dll
Filesize39KB
MD57c6ffb7ab4bb41e3b1c5d1b512a94b3b
SHA1eada7a9463b8610c32b908b7f8188dc95b6f154e
SHA2565b8dfb4a7e76415d22297555a229b80e92371e230c4e308886cf6f3316b301f7
SHA512886f5bb34b1c56c418bfd60930e55836aede6dbcce873ec88edf2a9acc69b7043c850467beaef46081fc32f2ffee40d550c1669e83c1edd1c6810145cedeec27
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\FndCrashHandler.dll
Filesize485KB
MD5b922b0b3bbb0a8be66a72a89df59bc17
SHA140d7d21f3b9c1094e30280945742dcce4bdd5f74
SHA256ece382389cc3c22c16c0decde4db94cf207fd21a3341e93307fe5a9c84bbf6f4
SHA5127ff5b2127d49bd518ff37351995ae13ba98a9ba54d6f053f2ca9a7892412a909e2a2c4d069e09c1e2ce29989d6e69d11d50e68cd416375fcaa3e77160c4a4e6e
-
Filesize
177KB
MD5965b682dbdb6ee9cf1ca98ae7dfc8899
SHA1b52cc23ba8b662289807bc742491f0d4dfc0a5be
SHA256f331601772740676aff8ee6680c36533221c42ab4e96007758589c4315686ceb
SHA512d8fa15cee155d1ec592d44860b3888a0bb5072392fcf2462d24866d1458c8e7083837b00eedc2df72f85805fe177204fbf6d63dfed3da06440bb70a5dfe0f959
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\FndPointer.dll
Filesize24KB
MD5776dd4b0563958557e9d9f613f686fc2
SHA165df9882c2eb15aabc7e74315f03d7d963e9b7a9
SHA256f9c38cfb5056020b56e845c810bb60fbe134e482ae7161947d7620fc7bcbca2c
SHA512739aec8a6f3b17fec522cdaa2f66c5c66d168bc26caa4de3a9ae662dce3bf500ff2a4c384d7b4749af766f2a48b1bb060d4de8b48181dd4d4dabbe84bd3c6758
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\FndString.dll
Filesize43KB
MD5ba2b39e7a44ceb25c7c43e9a66ff6d29
SHA1c2ec7647a44ea4e2693e3fc7cb21a9248d02af13
SHA25669ea4556c681d9c9a7f6ec0a95aa4768789e7ed8da1b1fb69b1bf23b9f225dc2
SHA5128b9604238b91919179a2ae4a496ce703625b4387a75463c0ff2f89f823ac1af9b08a184bc64fc1445f5ae52eab077fb2e00b1f94b0e5d6aa2822ff5750a7f397
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\MSVCP140.dll
Filesize552KB
MD529c6c243cfb1cec96b4a1008274f9600
SHA1c54b10ef6305cc3814c68e6c8fd6daecbb27622a
SHA25644a5af24f8d5f9c50a9e5a200a0486100afb6a0e86377e2e3e622a7bbb57cb04
SHA51239c34554ea7b6d433c2aecfdeff87959e625e943bf7a446ebca8e5878eaf24198c1b188359a0343fb78478f2bc8b986ca4d0e69d39bac6ff80cb901fe4f113ee
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\VCRUNTIME140.dll
Filesize94KB
MD502794a29811ba0a78e9687a0010c37ce
SHA197b5701d18bd5e25537851614099e2ffce25d6d8
SHA2561729421a22585823493d5a125cd43a470889b952a2422f48a7bc8193f5c23b0f
SHA512caf2a478e9c78c8e93dd2288ed98a9261fcf2b7e807df84f2e4d76f8130c2e503eb2470c947a678ac63e59d7d54f74e80e743d635428aa874ec2d06df68d0272
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\VCRUNTIME140_1.dll
Filesize36KB
MD5d8d1a08176ba2542c58669c1c04da1b7
SHA1e0d0059baf23fb5e1d2dadedc12e2f53c930256d
SHA25626c29d01df73a8e35d32e430c892d925abb6e4ad62d3630ae42b69daacba1a0d
SHA5125308790fbcf6348e87e7d5b9235ed66942527326f7ba556c910d68d94617bdd247a4ed540b4b9f8d4e73d15cf4a7204c0a57d4fd348ec26e53f39b91be8617fb
-
Filesize
3.4MB
MD5af34e1143b5705ffa14db4586300bf59
SHA1949897267703de78080dac5e7d40bde5bc27f4ac
SHA2568c85dcdf098ec1c2bdf8dd3f21314a37e4277245462d303e1ac2b2fe09fe6c4c
SHA51202178baf6e4c8dd8c817d6c615a32ae5503571b824fe44fe136804d6801b0e24b5af1b015c188b7311e8ca29a034419511237e622c6893f3a80a2aaa2ec2804e
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-core-file-l1-2-0.dll
Filesize11KB
MD55a72a803df2b425d5aaff21f0f064011
SHA14b31963d981c07a7ab2a0d1a706067c539c55ec5
SHA256629e52ba4e2dca91b10ef7729a1722888e01284eed7dda6030d0a1ec46c94086
SHA512bf44997c405c2ba80100eb0f2ff7304938fc69e4d7ae3eac52b3c236c3188e80c9f18bda226b5f4fde0112320e74c198ad985f9ffd7cea99aca22980c39c7f69
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-core-file-l2-1-0.dll
Filesize11KB
MD5721b60b85094851c06d572f0bd5d88cd
SHA14d0ee4d717aeb9c35da8621a545d3e2b9f19b4e7
SHA256dac867476caa42ff8df8f5dfe869ffd56a18dadee17d47889afb69ed6519afbf
SHA512430a91fcecde4c8cc4ac7eb9b4c6619243ab244ee88c34c9e93ca918e54bd42b08aca8ea4475d4c0f5fa95241e4aacb3206cbae863e92d15528c8e7c9f45601b
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-core-localization-l1-2-0.dll
Filesize14KB
MD51ed0b196ab58edb58fcf84e1739c63ce
SHA1ac7d6c77629bdee1df7e380cc9559e09d51d75b7
SHA2568664222823e122fca724620fd8b72187fc5336c737d891d3cef85f4f533b8de2
SHA512e1fa7f14f39c97aaa3104f3e13098626b5f7cfd665ba52dcb2312a329639aaf5083a9177e4686d11c4213e28acc40e2c027988074b6cc13c5016d5c5e9ef897b
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-core-timezone-l1-1-0.dll
Filesize11KB
MD591a2ae3c4eb79cf748e15a58108409ad
SHA1d402b9df99723ea26a141bfc640d78eaf0b0111b
SHA256b0eda99eabd32fefecc478fd9fe7439a3f646a864fdab4ec3c1f18574b5f8b34
SHA5128527af610c1e2101b6f336a142b1a85ac9c19bb3af4ad4a245cfb6fd602dc185da0f7803358067099475102f3a8f10a834dc75b56d3e6ded2ed833c00ad217ed
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-environment-l1-1-0.dll
Filesize11KB
MD57a859e91fdcf78a584ac93aa85371bc9
SHA11fa9d9cad7cc26808e697373c1f5f32aaf59d6b7
SHA256b7ee468f5b6c650dada7db3ad9e115a0e97135b3df095c3220dfd22ba277b607
SHA512a368f21eca765afca86e03d59cf953500770f4a5bff8b86b2ac53f1b5174c627e061ce9a1f781dc56506774e0d0b09725e9698d4dc2d3a59e93da7ef3d900887
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-filesystem-l1-1-0.dll
Filesize13KB
MD5972544ade7e32bfdeb28b39bc734cdee
SHA187816f4afabbdec0ec2cfeb417748398505c5aa9
SHA2567102f8d9d0f3f689129d7fe071b234077fba4dd3687071d1e2aeaa137b123f86
SHA5125e1131b405e0c7a255b1c51073aff99e2d5c0d28fd3e55cabc04d463758a575a954008ea1ba5b4e2b345b49af448b93ad21dfc4a01573b3cb6e7256d9ecceef1
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-runtime-l1-1-0.dll
Filesize15KB
MD5f1a23c251fcbb7041496352ec9bcffbe
SHA1be4a00642ec82465bc7b3d0cc07d4e8df72094e8
SHA256d899c2f061952b3b97ab9cdbca2450290b0f005909ddd243ed0f4c511d32c198
SHA51231f8c5cd3b6e153073e2e2edf0ca8072d0f787784f1611a57219349c1d57d6798a3adbd6942b0f16cef781634dd8691a5ec0b506df21b24cb70aee5523a03fd9
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-string-l1-1-0.dll
Filesize17KB
MD59b79965f06fd756a5efde11e8d373108
SHA13b9de8bf6b912f19f7742ad34a875cbe2b5ffa50
SHA2561a916c0db285deb02c0b9df4d08dad5ea95700a6a812ea067bd637a91101a9f6
SHA5127d4155c00d65c3554e90575178a80d20dc7c80d543c4b5c4c3f508f0811482515638fe513e291b82f958b4d7a63c9876be4e368557b07ff062961197ed4286fb
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\boost_filesystem-mt-x64.dll
Filesize149KB
MD5637295ea72ff3d061c3d28876dc07c4e
SHA1ce849ec0dd84ad2d2457ddba1cec314eb5729bce
SHA256a93c88163a53734c64ffe264df5ff2a6417d297d723c9055a7b9cd69bd48641c
SHA5120ba7cc6b5b430017d1d12169c43865d7f388b4cfd642a3195b007c1779ee567c327e5e52630d005c0a6fad8c07e2a2a0b4055e807795cadb1ef3cb1ae464fa83
-
Filesize
135KB
MD5f05e289b6681637a0873d04e82b3a3fa
SHA197ec307cf6b6e2a25c2786ddfe6cf87e92c25da1
SHA256b8ed47e7493d2015f5db385671e443bf3fcafec02191a858bcae261ae4ec7b20
SHA512dfe563c6e822f2072b2e0c000c0a1719ce7e260c2bcdf91d90eb8df249ac48b69cf7e3b3ca158aac066b58963c7f944f72009486abb365d974bc3fd5cf32462c
-
C:\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\ucrtbase.DLL
Filesize1011KB
MD5849959a003fa63c5a42ae87929fcd18b
SHA1d1b80b3265e31a2b5d8d7da6183146bbd5fb791b
SHA2566238cbfe9f57c142b75e153c399c478d492252fda8cb40ee539c2dcb0f2eb232
SHA51264958dabdb94d21b59254c2f074db5d51e914ddbc8437452115dff369b0c134e50462c3fdbbc14b6fa809a6ee19ab2fb83d654061601cc175cddcb7d74778e09
-
\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\FndFilesystem.dll
Filesize289KB
MD5a58a5aa828b66da232c4b7fdbdd11ded
SHA16bbb4a6f37c557d36be961fad0bf1498bc6e6d37
SHA256e5c3a12f6e2e17efe7bc3c6a3902b421dace99bbd18c8bdb8931ae0dcd461664
SHA51277afda9778788cc13d577a4eacffa1b164aa9f3443dfc333e7d86e29eb39c89f2b9c1f8e79e8314fb7e41f6589a387fe0c74fe18d5e6ae9f363878f549b74fa2
-
Filesize
90KB
MD5ca9e771e207878f191a13200577380e7
SHA1b45ab49abc01197070f1536c9b2dc50de2547a47
SHA256a69f509557fe37ead0a2a7fd4d0805f8be498842074bc846dbd72daaed877fc1
SHA5129772577775599ae1ff09548aefddf864690e79fb99624237983646f6ac40772edb9db820906149a0250d7a12a9992b0ddc1226860026af8de7dd85307b6b196b
-
\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-core-processthreads-l1-1-1.dll
Filesize11KB
MD57e8b61d27a9d04e28d4dae0bfa0902ed
SHA1861a7b31022915f26fb49c79ac357c65782c9f4b
SHA2561ef06c600c451e66e744b2ca356b7f4b7b88ba2f52ec7795858d21525848ac8c
SHA5121c5b35026937b45beb76cb8d79334a306342c57a8e36cc15d633458582fc8f7d9ab70ace7a92144288c6c017f33ecfc20477a04432619b40a21c9cda8d249f6d
-
\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-core-synch-l1-2-0.dll
Filesize11KB
MD5e86cfc5e1147c25972a5eefed7be989f
SHA10075091c0b1f2809393c5b8b5921586bdd389b29
SHA25672c639d1afda32a65143bcbe016fe5d8b46d17924f5f5190eb04efe954c1199a
SHA512ea58a8d5aa587b7f5bde74b4d394921902412617100ed161a7e0bef6b3c91c5dae657065ea7805a152dd76992997017e070f5415ef120812b0d61a401aa8c110
-
\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-convert-l1-1-0.dll
Filesize15KB
MD54ec4790281017e616af632da1dc624e1
SHA1342b15c5d3e34ab4ac0b9904b95d0d5b074447b7
SHA2565cf5bbb861608131b5f560cbf34a3292c80886b7c75357acc779e0bf98e16639
SHA51280c4e20d37eff29c7577b2d0ed67539a9c2c228edb48ab05d72648a6ed38f5ff537715c130342beb0e3ef16eb11179b9b484303354a026bda3a86d5414d24e69
-
\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-heap-l1-1-0.dll
Filesize12KB
MD58906279245f7385b189a6b0b67df2d7c
SHA1fcf03d9043a2daafe8e28dee0b130513677227e4
SHA256f5183b8d7462c01031992267fe85680ab9c5b279bedc0b25ab219f7c2184766f
SHA51267cac89ae58cc715976107f3bdf279b1e78945afd07e6f657e076d78e92ee1a98e3e7b8feae295af5ce35e00c804f3f53a890895badb1eed32377d85c21672b9
-
\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-locale-l1-1-0.dll
Filesize11KB
MD5dd8176e132eedea3322443046ac35ca2
SHA1d13587c7cc52b2c6fbcaa548c8ed2c771a260769
SHA2562eb96422375f1a7b687115b132a4005d2e7d3d5dc091fb0eb22a6471e712848e
SHA51277cb8c44c8cc8dd29997fba4424407579ac91176482db3cf7bc37e1f9f6aa4c4f5ba14862d2f3a9c05d1fdd7ca5a043b5f566bd0e9a9e1ed837da9c11803b253
-
\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-math-l1-1-0.dll
Filesize20KB
MD5a6a3d6d11d623e16866f38185853facd
SHA1fbeadd1e9016908ecce5753de1d435d6fcf3d0b5
SHA256a768339f0b03674735404248a039ec8591fcba6ff61a3c6812414537badd23b0
SHA512abbf32ceb35e5ec6c1562f9f3b2652b96b7dbd97bfc08d918f987c0ec0503e8390dd697476b2a2389f0172cd8cf16029fd2ec5f32a9ba3688bf2ebeefb081b2c
-
\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-stdio-l1-1-0.dll
Filesize17KB
MD555b2eb7f17f82b2096e94bca9d2db901
SHA144d85f1b1134ee7a609165e9c142188c0f0b17e0
SHA256f9d3f380023a4c45e74170fe69b32bca506ee1e1fbe670d965d5b50c616da0cb
SHA5120cf0770f5965a83f546253decfa967d8f85c340b5f6ea220d3caa14245f3cdb37c53bf8d3da6c35297b22a3fa88e7621202634f6b3649d7d9c166a221d3456a5
-
\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-time-l1-1-0.dll
Filesize13KB
MD51d48a3189a55b632798f0e859628b0fb
SHA161569a8e4f37adc353986d83efc90dc043cdc673
SHA256b56bc94e8539603dd2f0fea2f25efd17966315067442507db4bffafcbc2955b0
SHA51247f329102b703bfbb1ebaeb5203d1c8404a0c912019193c93d150a95bb0c5ba8dc101ac56d3283285f9f91239fc64a66a5357afe428a919b0be7194bada1f64f
-
\Users\Admin\AppData\Local\Temp\Movavi-installer-5f924828-1e8e-4ad5-a11d-c85f3957d028\api-ms-win-crt-utility-l1-1-0.dll
Filesize11KB
MD5dbc27d384679916ba76316fb5e972ea6
SHA1fb9f021f2220c852f6ff4ea94e8577368f0616a4
SHA256dd14133adf5c534539298422f6c4b52739f80aca8c5a85ca8c966dea9964ceb1
SHA512cc0d8c56749ccb9d007b6d3f5c4a8f1d4e368bb81446ebcd7cc7b40399bbd56d0acaba588ca172ecb7472a8cbddbd4c366ffa38094a832f6d7e343b813ba565e
-
Filesize
4.2MB
MD55e0553996135c9a5ebd3d62df375fb49
SHA1fee28f6e3227b8b8a3a4c7697d52dc3655ec7662
SHA256a510e7a8646bf8af6cedb43f2ef67253b0e6c40cd8fa50c62fcd7fde66c428fb
SHA512c4ea12f2afb793d02f6488f9256e5ee8f8514a7c5637338d476177fa1049a68a68bcb81e6a1b188df4c6d71656eb703f34f4994790a53c75cf022b3292b59a96