Analysis
-
max time kernel
119s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
14-06-2024 07:22
Static task
static1
Behavioral task
behavioral1
Sample
a88089740865454907a7a9204c2fc3b1_JaffaCakes118.html
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
a88089740865454907a7a9204c2fc3b1_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
a88089740865454907a7a9204c2fc3b1_JaffaCakes118.html
-
Size
229KB
-
MD5
a88089740865454907a7a9204c2fc3b1
-
SHA1
cde16073246827880d9f9cd25ed15175d98863b0
-
SHA256
ca6304b4d03affb2fc99d39ae58db3738abb55ef5bc4f263be8cdc1917f29d86
-
SHA512
afb540272000e43e2e49c443c53fb6ac35b1df72b3d7eb3e51b427e5cf7e94545314f1bee752b0de235d4abe476c59dc899e0a37967502237db52bd4750b55fc
-
SSDEEP
1536:dBBiVZgVnJiocZTA0IRpxRbcBlp0oMmMVZeGiy5ocZcHHvlJ4hFNr13M0Tet:th1FE364NJ4hFNr13M0TG
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "424511636" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a807600000000020000000000106600000001000020000000489d1284fa551b3c9b5ce32c49d81573693ac39b369b3f8e17adf81a694a71da000000000e8000000002000020000000625de543a4f38a372d6b2a4989d3db4d9e403983de5ec27be2bb68b044c4b2002000000083124ce64ea19205a40dcf755c4f45f31229040f819d5b2241cce97cb4cfefa7400000003c2d669afaad82450e6748ecfab60d91c999341808b9bf031bcd0c43032468a697220b6274c89b09e77bfb6fed6dae2c6229a461762431bf48ecd1fbe54f5b32 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{E6ADE421-2A1E-11EF-9684-CE8752B95906} = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb010000005ec80cf279b2564c91633e21940a807600000000020000000000106600000001000020000000c8caf4cf3f6f59b34460fb77919aee1c79e1f515c294c03f13ceeaa07b9662fa000000000e8000000002000020000000f176cb7a0366f50213042df05acadd23bb88722fd534c0ca998e57324bd183cc900000009bcac798df60ef95858845a95e88840967cb37229271c947c6d174529bc3d2fa6a76503d87958da6cdf42cfba2f95aef3d983bd120a88ff3521f875978e87d49f525cdbb1296e50216fe258a7a76406ad980b645988cc2b8c48670feb8d9085bf7ce4ca89a63fd93d3343e197d11bf22228819726f02b70d7d5bffcb8e52c350da5732247da5adfd45e946c5cb8894a54000000081672ecb2a6fd41ccfefeaa60b6c6a554d0aff7ee99a60c4504e19e1d719c5a46b71417842cc6819c478a44d6a4860978362773597d63b0d6428fe449f4bbc6a iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = a0f1d6e92bbeda01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Key created \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-39690363-730359138-1046745555-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2216 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2216 iexplore.exe 2216 iexplore.exe 2276 IEXPLORE.EXE 2276 IEXPLORE.EXE 2276 IEXPLORE.EXE 2276 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2216 wrote to memory of 2276 2216 iexplore.exe 28 PID 2216 wrote to memory of 2276 2216 iexplore.exe 28 PID 2216 wrote to memory of 2276 2216 iexplore.exe 28 PID 2216 wrote to memory of 2276 2216 iexplore.exe 28
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\a88089740865454907a7a9204c2fc3b1_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2216 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2216 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2276
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD516c0d6ba8b4a31dcae3aada7632651d9
SHA1f1066c29c74e51d5772c6e63937bd723a0eaed00
SHA25690d790edcf1bcf324a217cfc978af8d3624f85d9e2c29b0dad89c17ce37d86e3
SHA512d11a32d8019f55703de2016df21ef0cca7f65f1bae38e1eb111a56fc0154586b59e8f267ceecf40c760ff627e31ff5df392b5976de7671e1530b422e34515e17
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b89be12f4dc5fd0a590d7bfb7e7a1e02
SHA1520cc3f96c178410a77699656ddf6aeedc18f1ed
SHA256418d30ec1a9479a30534fba6270322bf3f16bca13298abba1abace2aa89cde08
SHA512a7e2096ef952000254a2ab8afef299f44b93b53381da0e647f4fad1f0b7b586f97ec5007fda9af1524c80c2992df3609ac4315076f6918fcdea017b9cecf0a65
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5da0493acbe90d114993b747266716207
SHA19e0102ddc724edebfc17bf34671b5ad57d4f5f19
SHA2563a5f78afb11949e4da2c1ae470d13b15c681e201a22b7ad4c054244dc1d33585
SHA51202fa9df915d6af22e85f3a4551667b3e1532103748a6130079d1ed61941cf6668474e4d761de34aac1c964361ed6e906b8604de692e6ae0b33a99111f7e5fac2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55a83d606d10e0f5d8bb684534cc28806
SHA1e90df9450cd32908332a9fe2320fc005c3d5fe8f
SHA256de5e3a8fda98fdf3a8781c25087a2e529242c8e3aae7f2de65053e1b13710aac
SHA51200b3608bb6b24a26fcaf986bd28427b3b6d701eaa7373265aebd64285ba644a80a0cca987897a15cd9546ae6b2cdaec9ec47bbeb9ed52cd4ce49036cbd7c4fff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD504c6a6397f872761fa442c6c87a709f5
SHA194353a7ceafff493c8cfc9d21a13bf88e47d4817
SHA2562e3d1eb58a2aa4f119641baafc56b6e5587d1bb4b4a4e9380e1554542eb38f32
SHA512284d31f76437b72e18251341d04a1591d5c6f48d3719483953de19a9f1259edc2388e7f7f7af28f10c77751397ec16abb7f0390b1774241abb233abff1bf3ba3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD528272d6f91615c01550b5b2218b951c7
SHA1ec635ebf7ae117f5260b07992da54a9fcd1beb00
SHA256000ef253e81d085c5f9456341a75b775a98de82771e18dac8e7bf688b1511ae0
SHA512057fbe3ce2ed298bf5c23d4506cc5bbe53beba3e45d2aae3f672c10045ba62894379d279d2d0e1e29d4da21440da4a0ec44ce942d504aebefdfbed679dc2b299
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD554024e3a71f9c3f3f8cc260bef2eb4be
SHA1e3b7b82e0c843b45f3de8a5778d15cf8f8c3539b
SHA256a8e0561e7d60790c4966de46a67c68370b232474287f6c5300bbab0c5e6bb12a
SHA5122b3fb1cf56cc6122305f1a188829dcac58eab6f61414742057dce315513c080131461a842e0438bec6d46a1627a0532177d257cdca641b5ad177cd98c2ebd871
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56bfe33ea80fbabe104a9c518c0d31315
SHA1653c7c1352f441247e7fd2c6b08ae5104e58daab
SHA2565b98102173055c84bc9611e54dd663b5eb201516c78abe468a295a82177c255e
SHA51228d8fe9ee06e4af75b1498c4f528ce1dcebd64a95c105bd09c55b281d508a43b0393698d14f7576c539143b962a717b639e1aaaa2fa63acc89d9e668ed6e21f3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD550d3a30f0f91f3bc217e3ac9eae3bf13
SHA16b647a2c4001f0f18a5e3d0e2170190066e505c2
SHA256baaa7fbdd2efb1da4ec36d9ab464b3c03f64e2e947b56b57025f49e486daa9b5
SHA512ac41412f38e39fa0149f152f5a5fca60847151a43a8fcbc4a61114d3eb551b35c9ae72b53863a5e7027709e80361f988e215270f31a1f1b2a6e0e29b6ecd410b
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD571e9c0781efd22848de8e6e0f3f8e71f
SHA1febe9a85e21be7d13a213afc8e4afe559c844aba
SHA256e5d8d4be689a0f20f2c6781667dd54ac00d967113916b22e8e4a8e107358a158
SHA5129d1a40d595ab04d630cb92143313ffa8afc5dd6f755382817fc15fb9ccc7a97ca71d7a03cad6051700f7d124fad95486405c10aa9ded19a9fe0d0c797a00e372
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD54f1dba2f499858fd05d8f265d84407af
SHA1bd7966020a12128ae85950872d0190196ab22ce7
SHA256801734c2b17269bdee45ca23727998dd9c789705f665765600185561679c3ec0
SHA512c3ec2bcd677a26e8704cbe75cff61efdda81586fd6ad8924ac86dee779973c35a29e0d99ffffc70abea0751c1c6896645c3db0c40d0a14ff59ae5be78c3f48ec
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f1c73b99a34bec98591a04abf94b89ae
SHA1ca5ce1a534202df85d5d7cbb4cfdb9a86570a1e5
SHA256788f88af6eb8ad148676e40fe0833499165405006f4b7cfc40820e92ad8e5470
SHA512609bd5fcb97dc322a3b3794d947fafa1dfce48ca73d77f84a5625a8f2d4dbda21d4de1c03c8a8ee99f5fb6627a131b81620f24b018d1a000dce41a89ae2f4dc2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5de4888994b7be5e7dc2d6e450064aee4
SHA19f3d54d5d273ac7dbf16a44b6ab4b4e86fdb3a3f
SHA25672cf3d3851f960a80b99a4b1d7d94160c6c8fdf6a73535852b6e8393d0f998af
SHA5128cce3dbf01eed08f70eaea531e24bf0f1594ded2e34b0426f92b70999a7c3363355af331fb231ed6be73171b7373c3af523c61b8bc86c29b1fceb7c59a02ccc5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f813f5d0961bbd8c7cbaf76ebb27d354
SHA1e251387520c11d01cc5bf0553577d5fbc3d7de61
SHA2564637c23cb748623f6a9876f55e72f4edd19598ed3ede647106142c91b48f6a92
SHA51291112f9320ed63231689854e1470a815873d40199220e5b0cc2a627bd661c5934fc42f3a27d1ffd77f068eac1288709d968c1b100f11728ff1b7b6596ccd1118
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD547e8b6b129267a288caca898b8872d2b
SHA1a4fbb4ef540321b1f9cbf066d20f30e7cdb607e8
SHA2569f306a79e6c20d1da282e9e38925bc20ef0251380b4391997c1505576c2585fb
SHA512ae3443d4a2e132c6105c44e56712717f9bcfa3574165acc418f150557b19ee176adfe69ca734705339baf261334892259a830a0749ae611150f4c6b1a604bee1
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5949c87a74ccc035fd21354891799a962
SHA1b626c32e922f9bf006fcdfdcbabd12bfa37105f1
SHA25684787186b1dc2363aa56b053d558fd2e66314935c7b787cca51b599db0673334
SHA5128b5a75fd5c87a83a11301f21dd5375b5957201cc3ae49438cd6876c2a40d72341626a5cd2c1f5cc76b5359f081a34bd4f036c1fee0fa1be1529af8454297a3cc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD538edd2e7bb84b839961fa0c8a5fbb7ab
SHA188dae2cd1b41e08abde2a349836ac45fce5cebd3
SHA256e1a4faa7dde7533820dc0a82e9b629fd40dd3466ae64502a6e03026a5b590fd9
SHA512e2dd798263cdec5bffc0d479859afe68056d76a663a76d8183a2a37afb2f2394e3452861754272db6fd6bf3cdc0f3f4e8773d0686300377fd822838c6db194dc
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5784268e98723c6bf3cddae07b8b07ea6
SHA1beda9de7c402d9bf1c90b21915f7c5b4a6de5242
SHA256220ee1844d78aaff1e2c19c0ed8aaf27aaa6ebd718b2ce00c3c5e510eb9e53eb
SHA512f118ba4ba6581c3deb74c97dbdae76b6d049851e9be00606bec995f497a9d6256f367a1dce5d804f2e72c2c9f1455b2ca3a66a9e5a6d71715525cca12493b726
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57e4fbd14be94e10125258a0ea42b49d6
SHA1796e520c7118137457f710dc7bfb8f908d4e30c6
SHA256dd56eb0f032348545e8fb927fc4502d83122db94bf440cce97bace0891f9b476
SHA512600812f6be6e7f4c27f7f0a5ff8e3aae69ec979b6b0f584bcdc8a356b767fd27f4087d43e8ea4fe4ead72ad1d90972ac327109e0cd68c4c92c3a3c429f01f42e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD59da18678375c9e2db051e985c3a9a7d0
SHA1295978791ca2b0311c944e63a1425d751c741651
SHA256445027775888388a77e6fc626440ecafaf1e7465cc3eba7a52a2c604951872b4
SHA512e2227a64d96224b868083500b34be94ea9139a961a30db684186a1948fdcf52a6eb696a9e6148065ca8960024a64217f65f8cbb7a85d0c34e14014c981fa8a49
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b