00bdfb79d51bc86c47a7b5b24caf66ac_JaffaCakes118
- SHA256 8345a4e04b105eba426233545a67642d5f036b08ac7bf13a4961127b2ae1900a
Overview
overview
10Static
static
10Merchant C...or.exe
windows7-x64
10Merchant C...or.exe
windows10-2004-x64
10Merchant C...or.dll
windows7-x64
3Merchant C...or.dll
windows10-2004-x64
3Merchant C...or.exe
windows7-x64
6Merchant C...or.exe
windows10-2004-x64
1Merchant C...or.dll
windows7-x64
1Merchant C...or.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Merchant Canceller 1.0/Injector.exe
Resource
win7-20240611-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Merchant Canceller 1.0/Injector.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Merchant Canceller 1.0/Merchantinator.dll
Resource
win7-20240508-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
Merchant Canceller 1.0/Merchantinator.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Injector.exe
Resource
win7-20240611-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Injector.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Merchantinator.dll
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Merchantinator.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target 00bdfb79d51bc86c47a7b5b24caf66ac_JaffaCakes118
- Size 395KB
- Sample240622-b9cecs1hrb
- SHA256 8345a4e04b105eba426233545a67642d5f036b08ac7bf13a4961127b2ae1900a
- MD5 00bdfb79d51bc86c47a7b5b24caf66ac
- SHA1 4f857c70084b299f0daea81cff5b7da9257ab411
- SHA512 4a53257665503af52d6a460e742a1e0ea2bc1c42e17a7e4fe88877c77b1a5221611dfbc96aeba05f34b67c88b841c7808f2123719ebdb0c566b15ddc61b50cee
- SSDEEP 6144:xVg35m4O59/PkphwpR1k7GgMwgd9qt7ZMKHaUnvkij+xWTILH0Xt3oHwg:x6O55dR1fgjU4VXbciSxWTWH0duD
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
metasploit
Version
-
windows/shell_reverse_tcp
C2
-
213.64.73.162:4444
Signatures
- Metasploit family
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Merchant Canceller 1.0/Merchantinator.dll unpack001/Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Injector.exe unpack001/Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Merchantinator.dll
File Explorer
-
00bdfb79d51bc86c47a7b5b24caf66ac_JaffaCakes118.rar 395KB
-
Merchant Canceller 1.0/Injector.exe.exe 122KB
-
Merchant Canceller 1.0/Merchantinator.dll.dll 48KB
-
Merchant Canceller 1.0/config.ini80B
-
Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Injector.exe.exe 296KB
-
Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Merchantinator.dll.dll 48KB
-
Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/config.ini80B
Merchant Canceller 1.0/Injector.exe
- IMPHASH 481f47bbb2c9c21e108d65f52b04c448
- SHA256 584445127be636d382ba893af6e2acc2bd53182bbfcc6a8e0488ebeffdace632
- MD5 7cf358b3df6f2b378fe6bddcae44a930
- SHA1 a53f211f9a80b1956fa28c995ba1b99be856fc22
- SHA512 919e776a2bdcc2ec68bb8ab6f9be3997c6386361bc882093594acec5fdf7519252651a4f47ec41e1bf53ac376e720eb44a66fe6a3e3a967519d6b244236a1f87
- SSDEEP 1536:IFtvhucEboSMXUudS5gcTejoMb+KR0Nc8Qs1UY1EjzJYWDVZaoq3XEl:6tv9EboDbqgye8e0Nc8QsoY6aNUl
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
PE Signature issue
Digest
72:f5:fe:0d:94:bb:e6:80:a4:00:93:96:e9:92:33:64:11:1c:8d:dc
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Tompa-PC\\Tompa
Chains
Mar 25, 2012
Subject
CN=Tompa-PC\\Tompa
Serial Number
46:c7:ea:7d:fe:c9:7a:a7:4c:93:83:8b:48:c1:da:f2
Issuer
CN=Tompa-PC\\Tompa
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 25, 2012 - Jan 2, 2039
Subject
CN=COMODO Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
47:8a:8e:fb:59:e1:d8:3f:0c:e1:42:d2:a2:87:07:be
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 10, 2010 - May 10, 2015
Minor OS version
0
Major OS version
4
Entry point
19050
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvcrt
_iob
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
_XcptFilter
_exit
_onexit
__dllonexit
strrchr
wcsncmp
_close
wcslen
wcscpy
strerror
modf
strspn
realloc
__p__environ
__p__wenviron
_errno
free
strncmp
strstr
strncpy
_ftol
qsort
fopen
perror
fclose
fflush
calloc
malloc
signal
printf
_isctype
atoi
exit
__mb_cur_max
_pctype
strchr
fprintf
_controlfp
_strdup
_strnicmp
kernel32
PeekNamedPipe
ReadFile
WriteFile
LoadLibraryA
GetProcAddress
GetVersionExA
GetExitCodeProcess
TerminateProcess
LeaveCriticalSection
SetEvent
ReleaseMutex
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateMutexA
GetFileType
SetLastError
FreeEnvironmentStringsW
GetEnvironmentStringsW
GlobalFree
GetCommandLineW
TlsAlloc
TlsFree
DuplicateHandle
GetCurrentProcess
SetHandleInformation
CloseHandle
GetSystemTimeAsFileTime
FileTimeToSystemTime
GetTimeZoneInformation
FileTimeToLocalFileTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
Sleep
FormatMessageA
GetLastError
WaitForSingleObject
CreateEventA
SetStdHandle
SetFilePointer
CreateFileA
CreateFileW
GetOverlappedResult
DeviceIoControl
GetFileInformationByHandle
LocalFree
advapi32
FreeSid
AllocateAndInitializeSid
wsock32
getsockopt
connect
htons
gethostbyname
ntohl
inet_ntoa
setsockopt
socket
closesocket
select
ioctlsocket
__WSAFDIsSet
WSAStartup
WSACleanup
WSAGetLastError
ws2_32
WSARecv
WSASend
Name
.text
Size
44KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
52KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=4, id=12, version=7291,
count=9, id=14, version=7299,
count=11, id=10, version=8047,
count=3, id=4, version=8047,
count=201, id=1, productName=Unmarked objects,
count=8, id=93, version=2179,
count=40, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Merchant Canceller 1.0/Merchantinator.dll
- IMPHASH 4163d40bdab7358f44e5a2a7364034a0
- SHA256 2c77a840143b3642da28d3eb1d34c631e674475ef6ce775668f94ee06c8526f9
- MD5 4ebb47d2d60c6fd3e9b324e1a3a9aee9
- SHA1 0bdf4cf785b9396f864eb321f219b0b0726f3856
- SHA512 f001b39e1983f2137b92695df49bf52141b94600309409beee6b73c76a09d13125c4cb233456fee4f1cdc76adf071fdbe24cf8efb1a5f4387cb373fffa05e9e8
- SSDEEP 768:dggXIpl73v1ny+5AuGQmqaEstl2TLJAKGefmwsdhRlyQDuzJvOZn+2D:aN73vhjAuUqaWLuKGefmwsdhJuxOZtD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
20438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Tompa\Desktop\files\Server\EurokoPlugin\Release\EurokoPlugin.pdb
kernel32
Sleep
CreateThread
IsBadReadPtr
GetSystemTimeAsFileTime
GetCurrentProcessId
DecodePointer
InterlockedExchange
InterlockedCompareExchange
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
user32
MessageBoxA
msvcp100
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
msvcr100
_initterm_e
_amsg_exit
__CppXcptFilter
_initterm
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_encoded_null
free
_malloc_crt
strtol
??2@YAPAXI@Z
memmove
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
memcpy
__CxxFrameHandler3
_crt_debugger_hook
_CxxThrowException
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
atoi
_cexit
__FrameUnwindFilter
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=152, version=20115,
count=2, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=4, id=156, productName=VS2010 build 30319, version=30319,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=60, id=1, productName=Unmarked objects,
count=11, id=171, productName=VS2010 build 30319, version=30319,
count=4, id=175, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Merchant Canceller 1.0/config.ini
- SHA256 be12b14895adaf906c80057508f0b207e07a3608bd7b9da4e8baa1d4902650d6
- MD5 8a9170a7286a58a3bdb2b0c851430c08
- SHA1 f97ee6122023bcc54dff26f81d37fbeff362e08a
- SHA512 9cc48e7413e52d6c4e611b3af9d73a4cf7afc1fb6b9d6d2b24299a4f26c6bb768e795c50ea6deb6f991ef4296b72b7022c3bd9fcd1cdb2c02dc4e48a06146479
- MD5 SHA1 SHA512
Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Injector.exe
- SHA256 c2cb507d86f3803bb2d7d5d72e5a0c50409b1e936ad158c70f36ad14522b82bf
- MD5 844d0b343bca1e3490d8e4b754056d7e
- SHA1 8cc2508831f4ed4dc26829adcfd6ffe49eb4bd84
- SHA512 bc68cacd592055521fd314c9f3643c3c8503d3bdafa3ca6e1b096f45de0f8c8fa29b03a4e44591caf1efd76426edb05fc3dcbb70f16786e94398db8fd97d1054
- SSDEEP 6144:Vkt82J7rPs+Nq1bUkziu1n9fcg6wvP6bQ7yMP+DE827fg4ZiP1v/:VU82J7rE+NaQkz7x9fcg76b7MP+Dd2sV
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
Name
Size
19KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
130KB
Virtual Size
312KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
139KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/Merchantinator.dll
- IMPHASH 4163d40bdab7358f44e5a2a7364034a0
- SHA256 2c77a840143b3642da28d3eb1d34c631e674475ef6ce775668f94ee06c8526f9
- MD5 4ebb47d2d60c6fd3e9b324e1a3a9aee9
- SHA1 0bdf4cf785b9396f864eb321f219b0b0726f3856
- SHA512 f001b39e1983f2137b92695df49bf52141b94600309409beee6b73c76a09d13125c4cb233456fee4f1cdc76adf071fdbe24cf8efb1a5f4387cb373fffa05e9e8
- SSDEEP 768:dggXIpl73v1ny+5AuGQmqaEstl2TLJAKGefmwsdhRlyQDuzJvOZn+2D:aN73vhjAuUqaWLuKGefmwsdhJuxOZtD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
20438
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Tompa\Desktop\files\Server\EurokoPlugin\Release\EurokoPlugin.pdb
kernel32
Sleep
CreateThread
IsBadReadPtr
GetSystemTimeAsFileTime
GetCurrentProcessId
DecodePointer
InterlockedExchange
InterlockedCompareExchange
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
user32
MessageBoxA
msvcp100
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
msvcr100
_initterm_e
_amsg_exit
__CppXcptFilter
_initterm
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_encoded_null
free
_malloc_crt
strtol
??2@YAPAXI@Z
memmove
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
memcpy
__CxxFrameHandler3
_crt_debugger_hook
_CxxThrowException
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
atoi
_cexit
__FrameUnwindFilter
mscoree
_CorDllMain
Name
.text
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
436B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=1, id=152, version=20115,
count=2, id=158, productName=VS2010 build 30319, version=30319,
count=11, id=170, productName=VS2010 build 30319, version=30319,
count=4, id=156, productName=VS2010 build 30319, version=30319,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=60, id=1, productName=Unmarked objects,
count=11, id=171, productName=VS2010 build 30319, version=30319,
count=4, id=175, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
Merchant Canceller 1.0/ifThisInjectorDontWorkTryThisOne/config.ini
- SHA256 be12b14895adaf906c80057508f0b207e07a3608bd7b9da4e8baa1d4902650d6
- MD5 8a9170a7286a58a3bdb2b0c851430c08
- SHA1 f97ee6122023bcc54dff26f81d37fbeff362e08a
- SHA512 9cc48e7413e52d6c4e611b3af9d73a4cf7afc1fb6b9d6d2b24299a4f26c6bb768e795c50ea6deb6f991ef4296b72b7022c3bd9fcd1cdb2c02dc4e48a06146479
- MD5 SHA1 SHA512