Analysis
-
max time kernel
141s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
14/07/2024, 03:38
Static task
static1
Behavioral task
behavioral1
Sample
4424b9152eb686232dc31f6b358bbfa0_JaffaCakes118.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4424b9152eb686232dc31f6b358bbfa0_JaffaCakes118.html
Resource
win10v2004-20240709-en
General
-
Target
4424b9152eb686232dc31f6b358bbfa0_JaffaCakes118.html
-
Size
83KB
-
MD5
4424b9152eb686232dc31f6b358bbfa0
-
SHA1
d2d407c9b4303a0cf18142aac6e470cdccfbb877
-
SHA256
9698604a7e97ebb6fb19142a73684f2a5243d619e51cb7744c2dbf120b22b0f9
-
SHA512
5f192c7770772846ce9af15750b5fca4390472a17c84f9f1821b294f23c536648fb8ffaa94a4bbc1d0480a2d11eca928687bbe22cf88615f2e49b6f11d75bc11
-
SSDEEP
1536:pbMjw2fMk1D3O9Pj2fcSCbHAOfJLkcyAcZH260Sp:smfhLVO
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = 70ead9889fd5da01 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{99CAFB31-4192-11EF-B5B5-D238DC34531D} = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "427090204" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch IEXPLORE.EXE Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000062974e5b5f804e45b98349be16bffb7800000000020000000000106600000001000020000000a06ae29b557cce5c7dbb55d79f3f0bd368521cd1898152fd7c4346ad45d041c4000000000e8000000002000020000000d7e0af45fd266c29b079bbb536a354cf5c4fc44b7ee57bb8d41e89d09ff0186390000000fe5ac26822189c064a5f881751c2d1d321508020c3137afa36d5f41cf08740cb5012ab85474e805424d92b5545a232a7d0a15ce58319d79a9647efed40a1a1b8c46f630e648ee1f15a9a445be434d251c6c969b66d16f36012a04f7380751116e28067816cafb864dff423eacedfb76ca6c66a8baa2681407fd257c79ba06a8e692d6321466d4920d6c441fc5f25983e40000000a6244b5565ae8ab382cece44db816d7fc5decb100be0c778b03d5940f3067429fb95b5007ed8a371aa92486c619220001748dfea6e177838d8e5db5e3f05b9b8 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb0100000062974e5b5f804e45b98349be16bffb7800000000020000000000106600000001000020000000fc28838461d4e9eef6ad786c280915dd0fc000259f02d883430d13b4da0e42ae000000000e8000000002000020000000d9e5f30fe9687e4a673dbcbae26ec9b8988fd96c6252f8d2d93725c3a909fc8d20000000c9a8984d252243b7e301ccff0bd7ea86d11f0bf2884e7ac28caf576cfa94d6fc4000000044279ff419711f4fb7f0593cb1918a0164e149a51b4160b30719410639556817f16277219b25f55684dc0fc5d921d9b250cd89f4c6b998d66dd0adad7825feeb iexplore.exe Key created \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-2958949473-3205530200-1453100116-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2556 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2556 iexplore.exe 2556 iexplore.exe 2296 IEXPLORE.EXE 2296 IEXPLORE.EXE 2296 IEXPLORE.EXE 2296 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2556 wrote to memory of 2296 2556 iexplore.exe 30 PID 2556 wrote to memory of 2296 2556 iexplore.exe 30 PID 2556 wrote to memory of 2296 2556 iexplore.exe 30 PID 2556 wrote to memory of 2296 2556 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\4424b9152eb686232dc31f6b358bbfa0_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2556 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2556 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2296
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f50a0ccdc68a3b423b164a346bf61d08
SHA1d6fa858dda5b3b75aa619477b67c67638614ab33
SHA256de57c9cd9abf553d76f67175b0a0cfb043aeefe2b694764047dee6985bb66522
SHA51290cd6a6fa2c89eff682d57b04144c632824471978d9e096c2f64c6c709ceefb9969480e28402204c0544cfe47f101cd9e7fc301be412c455b213dcf575589e0a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD502a7884438777990ed8eb0459429ce26
SHA1ebdd40c04819e0263e05577bf3c846bd196dda77
SHA2569ad35e7025346f0ac0966689a9aa95af1daada864daa2c944d44c88f14e87d0a
SHA512748fff55448c5c8b18ccbe7db65994b43cf61d3f5954a9b247e774e800b1477caa6dbabea42a7576784caaba494ca571562182bb525bcd6b7d6d898984e213bf
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5df0b98fbc9de95c92e3cf94d6ddd7c74
SHA1e8206f49ec1440c9ae325143df0932fe06663e51
SHA256cecaa4ed1134d5592c389abdee1bdeaddd9b08cf6e55258fe95a36bac10d4b54
SHA5126d3f7a55ce7dcb0ce6367c3f0b351bacba38385ceb22ba6323568e8940296a7cd851073eeb96787ddb612269fbeab80d8163519f991352d6e7d64e50fefcb0c5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5202f877bf03d2aae142231f3fa121cc7
SHA16a8b4e7a6e3e8dd4dd0c774cfe440fb55ca225d8
SHA256280904fb4d59c4759e7f04474ba9174a0c488e02a3f0b866f3cf5bfd6097ff82
SHA5129afd8674ea67dafcc1ff6bcdc579b18ed2f775231acbcb927843a3482e4b338f3508871209b137235b74abe5e209d9d5321331a4b5e8d19d1f73ae6a63dd12ff
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a84a93a5ef1237bd5806875186272af2
SHA1efb06fb2d79a16026858b3267f3e8db3dc468a82
SHA25690677c805b3eb423d398609521ada16ac2d6b831e668f28cdeb63cda1baebb24
SHA5125bd01036b32a70a1aca11eb003082a768c9ba95b51fc9c052fa4c98f8782f2246f9702dc6f77b0c3df90723000d198480b8bebe46aeb5a7d309896c3da230d1d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51bdba46428f1a6cfff8f94eb8259712d
SHA1ac66d328ef824f9448af8f17ef75366de924e210
SHA256373f31b6ac6844109b0176fa87eae3467472e38b5fa2188caecad930081a255a
SHA5121f774693067725a2087189410280688492385f69c971aad1d219f11672b16c4d519cf70f36c26667974c29a3e5e8de5695ef7694c8bca405b44ca0b45186f7b6
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD56a2b9a0514681d71c94cca312f647c02
SHA1fa919a50060c3c185bad2635d3555a158e711223
SHA256684bf3776333d98f9620892e1f295491ca22526b3de54ade73e48e6a61eee126
SHA512d53dbe16ce0f64dc117b847f9b039ba74659c67837c9abcef6874614db92426dc5744105180e35ea630302b2a0b05c2e66cc40df1644cddd71bb0a0227da4df3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5d94f23aac1d9b2c6218d881ee6639844
SHA1c39f10efc608c3b82abeb879b71d193968a8fe20
SHA2565cd739b7cab5e189c47c823430d25734386848bf0583738786661dd0bc0314f5
SHA51266ba9f7d6e981e4d2be070c2171d0bc7a7e5ee290c1871483a55aeae8bea9a36d6fad34db2b7ef93ed89d3c31907a95866f49d3733aaa24fed7a7f6b4d97869d
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b3a36541d1a48c205df95e1d48945e8d
SHA1ce46873be641e3c2aa4cb5eb63ca102714bfe215
SHA2561142717b63bd87c7f18900c0a863ad4efbdbd8e2fecb3cf17f074c114846c11c
SHA5127870abde3f19c48e447079bf8bffcc7aa8b7a29789f989a27c7b07796b09c64f24c081c59d816948d026638fce7438f850bafff8b555392f3bb5cec862be3c40
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD554c0f72614c2df7e02a369979bdb67b8
SHA153ccd9052189478d0fb447d47766bb72c1e69413
SHA256a0434686278eecb701b5bb9f44b467f27a9b5f088df8efd1c0808daad2c6a28f
SHA5122b58656272f8e0ab49b7560a7a2522be0c332c2231d7e8993facabb685ad06b720b2252f10c266b83775c2563f18840e5de25b59b07d5f7cd654417b9751c019
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e6dadb603ed0271bd3bcbb4551430ce3
SHA131460153ce7edb8832bf32818d9b64539d24ae73
SHA256ce85b49cd6f65e94a1846f0f087a688402699da83a96bc6cba22efd5a6c39651
SHA512ce1f5868af105918a19e97a5220c2638f4dbe01403697a1f48b598708b3a3b1bf7e0685148f08658fc18e2c4ac63300d89b2b61555ceda22231eb42954951666
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5831fe142cfda602436aa59585673cc04
SHA182bb68634deee2d40af1e26555c88413af0c9841
SHA256a57c7c027280361fc2efe165c3c8d5a62746af7e38590bad2569c1f48b39272b
SHA51286775a17d0fd1ce65c45779f3a4bfafdbc00602221bb79036347880f9cee222f6f1cb6fe074bc11841b247e346d715e4796b3d57ccf7314a93f68e822de0f0e0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5db8a96a63af9781d57434f0989399762
SHA159f16be85c53561f37e995daac6352a252f4dab3
SHA256d6ed36190f1a074184f4a8e53efd110ae3a492f3a0ce1356960a88a0bf1d2c1d
SHA512a9eec2c8c642c1cd319d001af46a063a8cfa77c660eb157fc7db9c606d834db69d7070e04d630bc9b0177520475afda3c521050c2b0290c9af9b8d1b91a463fd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD55cbdd462a57ec81911e9f6d76ab19415
SHA11d003d45c69750a563bcda5c57015d611a140fb7
SHA2562cc42dba58e0a099b5e447ffd366ed9d18586273d5368d1a99ac178b02c57213
SHA5120f363f591d17e0317de6de45fb2eb97443f28d332986c41e2f110d6da55adf82e5e904df8369ebd1505179aa72c1edec612413d1d8a4ba8d58c06bde6c638103
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5f4b127ce1cefd5fd63c9d23c79bf612e
SHA1b0c76cb486e177052be1a2b65214eabdcb448008
SHA256c90893473e95546234dbfb262af889ed85a7279cf838049240ab0e38b0ea865f
SHA512a7cf28796318fe0549465fea75779f0b27a7bd064400f5f55b487f7a2adf3e8401da515eb2af677258922f422e362862890767be5a01d3f661a9082bf31a2297
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD531aef4a3c98c3be2a8df22c6671be765
SHA16865036c497d7e3f36086224a691a2f4fb2449c1
SHA256f41cba16af192eacbc96ac5f65cf2b5464efc01a0b48cb4fddb31fe47fbd6ff1
SHA5126d2178aff078ffc65380b5cf5b358096fc82aa433f8c89cc46fe114f1d4e6e174f76a6510446b6a54768d0115c2681cd704438b97f8053c359c9cbedb45c31b3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD528afc3bd8d8b4462dddb91e9c262457c
SHA13b9ff988b9777d6b9b1b8a3bd5736a8dd80c7fd4
SHA256379833b6b0319918ff2555b20bb6cfce2060f6c923ac097835b6081f398ae76b
SHA5126f12ddf892b915d71067242ae37f85aeab855b81ef00492ec7143a7879cbeaff723a340af144b6e1fe96c4e18912e6efb610a7dfc530101bfe74b587beadca46
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ee54bfe719f54ed50be359fd5b99f142
SHA1c40418c84f66ef17c6b926f9abd1dedf75b2fd27
SHA25664a7b59a96aebf3dd996ab2a0ba604d4956d04e9a29296bb84423ac6d981f4d2
SHA512837601a39665088d4746da4fdae948de6989e25c0bdb359cc4fc04519cd4a12acaed06ccdbbf5674ab6e2a72fe2d63bf512fb469e39f77f8d8b4d50fc9ab0f24
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD530c36b6ad47acf80ded67ab8eeb369ed
SHA16cd7c47169df05f1a993da4afd4286fa2abe8838
SHA256e72e50c7494d9f0c49ce71d858cb1be4363a6c278b71c39b070be038a837b931
SHA512ad39708f9c08c8bd70d53b96e233559ba6e42cc79bb6e16c58e351abb0abcbc338d3a7c15b5d03963851508347b4ccfe1466719270f9c81393ec7a32ef035991
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5858e60b160d9a68999b7bc229183e060
SHA115b6b8e6fab45d4495587458df746582c30ead4f
SHA2563d2651ffcb15159fbac558e8ea0f2ba8700852e466f7e5764b4715307b99a779
SHA512bd4f105dbf8dcc49d430303a4f8b3aab6d761710163ffa48d633f451ff71da0ed99eac3a725394c876e0153506b6cec24e62204dd6828227c097648a08fff11c
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b