Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
6Static
static
1URLScan
urlscan
1https://webminer.pag...
windows7-x64
3https://webminer.pag...
windows10-1703-x64
3https://webminer.pag...
windows10-2004-x64
3https://webminer.pag...
windows11-21h2-x64
4https://webminer.pag...
android-10-x64
1https://webminer.pag...
android-11-x64
1https://webminer.pag...
android-13-x64
1https://webminer.pag...
android-9-x86
1https://webminer.pag...
ubuntu-18.04-amd64
3https://webminer.pag...
ubuntu-20.04-amd64
4https://webminer.pag...
ubuntu-22.04-amd64
3https://webminer.pag...
ubuntu-24.04-amd64
6Analysis
-
max time kernel
116s -
max time network
1803s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
30/09/2024, 11:01
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
win7-20240708-en
windows7-x64
Behavioral task
behavioral2
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
win10-20240404-en
windows10-1703-x64
Behavioral task
behavioral3
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
win10v2004-20240802-en
windows10-2004-x64
Behavioral task
behavioral4
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
win11-20240802-en
windows11-21h2-x64
Behavioral task
behavioral5
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
android-x64-20240624-en
android-10-x64
Behavioral task
behavioral6
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
android-x64-arm64-20240624-en
android-11-x64
Behavioral task
behavioral7
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
android-33-x64-arm64-20240624-en
android-13-x64
Behavioral task
behavioral8
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
android-x86-arm-20240624-en
android-9-x86
Behavioral task
behavioral9
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
Behavioral task
behavioral10
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
ubuntu2004-amd64-20240508-en
ubuntu-20.04-amd64
Behavioral task
behavioral11
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
ubuntu2204-amd64-20240611-en
ubuntu-22.04-amd64
Behavioral task
behavioral12
Sample
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Resource
ubuntu2404-amd64-20240729-en
ubuntu-24.04-amd64
General
-
Target
https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.5
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2084 chrome.exe 2084 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe Token: SeShutdownPrivilege 2084 chrome.exe -
Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe -
Suspicious use of SendNotifyMessage 32 IoCs
pid Process 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe 2084 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2084 wrote to memory of 2640 2084 chrome.exe 30 PID 2084 wrote to memory of 2640 2084 chrome.exe 30 PID 2084 wrote to memory of 2640 2084 chrome.exe 30 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2852 2084 chrome.exe 32 PID 2084 wrote to memory of 2964 2084 chrome.exe 33 PID 2084 wrote to memory of 2964 2084 chrome.exe 33 PID 2084 wrote to memory of 2964 2084 chrome.exe 33 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34 PID 2084 wrote to memory of 2580 2084 chrome.exe 34
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://webminer.pages.dev?algorithm=yespowerurx&host=yespowerURX.sea.mine.zpool.ca&port=6236&worker=DG3AezgvUxfN1mwPWKwmpMzSqEGbqXsyXH&password=c%3DDOGE%2Czap%3DURX&workers=1.51⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2084 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7f99758,0x7fef7f99768,0x7fef7f997782⤵PID:2640
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1144 --field-trial-handle=980,i,4428811774712539112,2415491519198063770,131072 /prefetch:22⤵PID:2852
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1488 --field-trial-handle=980,i,4428811774712539112,2415491519198063770,131072 /prefetch:82⤵PID:2964
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1512 --field-trial-handle=980,i,4428811774712539112,2415491519198063770,131072 /prefetch:82⤵PID:2580
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2284 --field-trial-handle=980,i,4428811774712539112,2415491519198063770,131072 /prefetch:12⤵PID:1468
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2292 --field-trial-handle=980,i,4428811774712539112,2415491519198063770,131072 /prefetch:12⤵PID:2796
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1448 --field-trial-handle=980,i,4428811774712539112,2415491519198063770,131072 /prefetch:22⤵PID:2164
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3392 --field-trial-handle=980,i,4428811774712539112,2415491519198063770,131072 /prefetch:82⤵PID:1540
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:2808
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5013e93755c256fc705b457e80e03bdca
SHA10ba9de01b4ff53f0835882e75b8fea120a98af24
SHA2563d24fa2c6d296744bf90ab618e43e52be3dc24ab6ce953fbf3aa2e218c89a521
SHA512f00495ba2ebe43aa936fc83d05f91dd7cfb62e4834aac22dd734d2f60d71dd81207e46be1034369b77a1ec290eb7124e10c2f6abdd74087dc19c713afb68fd4a
-
Filesize
5KB
MD507a93a209a16807e8157ac3d3dad26e7
SHA1852ef3c61a8ccfaff3d5a7feb8a182a7a0cf9f04
SHA2562220c39568955dfe26b37a61b13e2dab02fd4826d78d1630adace4b5b0ce4456
SHA5129ca597c4ca1d6cef839ff2f3669190cc1cfa8df8bbe62aa24e16e9a51c002194955a432b37e63a10cb4f40ef476438a11df4fd7b14af2382092c858c843cb430
-
Filesize
4KB
MD53088cb30bd9b8602390a2d6684f52647
SHA1008ad5d2dc97dc3eaf577f04b9c3bffb5900bfbb
SHA256fd80cbdce218a93901451f2c74b06e4c33d421e71ffa1487eea5c980ebf6ec7d
SHA5126f125883153643f03f385431016a62da8bbaf2adbce5c07b4ea9a1a22869f2ba274bbad545f0ba587b2321de300c2523eb5168cb1c22112bbccee03715f5b2e6
-
Filesize
16B
MD518e723571b00fb1694a3bad6c78e4054
SHA1afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA2568af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
SHA51243bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58