Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    145s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    01/10/2024, 01:21

General

  • Target

    http://www.events-swissquote.com

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.events-swissquote.com
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:452
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9f70346f8,0x7ff9f7034708,0x7ff9f7034718
      2⤵
        PID:3128
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
        2⤵
          PID:1200
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:896
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2716 /prefetch:8
          2⤵
            PID:216
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
            2⤵
              PID:4256
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
              2⤵
                PID:2960
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
                2⤵
                  PID:2456
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5028 /prefetch:8
                  2⤵
                    PID:5052
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5028 /prefetch:8
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:5112
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1
                    2⤵
                      PID:464
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
                      2⤵
                        PID:2488
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
                        2⤵
                          PID:1028
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
                          2⤵
                            PID:1324
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5308 /prefetch:2
                            2⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:2100
                        • C:\Windows\System32\CompPkgSrv.exe
                          C:\Windows\System32\CompPkgSrv.exe -Embedding
                          1⤵
                            PID:2748
                          • C:\Windows\System32\CompPkgSrv.exe
                            C:\Windows\System32\CompPkgSrv.exe -Embedding
                            1⤵
                              PID:2420

                            Network

                            MITRE ATT&CK Enterprise v15

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                              Filesize

                              152B

                              MD5

                              ff63763eedb406987ced076e36ec9acf

                              SHA1

                              16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

                              SHA256

                              8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

                              SHA512

                              ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                              Filesize

                              152B

                              MD5

                              2783c40400a8912a79cfd383da731086

                              SHA1

                              001a131fe399c30973089e18358818090ca81789

                              SHA256

                              331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

                              SHA512

                              b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                              Filesize

                              120B

                              MD5

                              f331e0838bca73976fe11821437f63d0

                              SHA1

                              e10b3a2e1c176206fc4ffe045518bb2cf51ea53e

                              SHA256

                              52ea3ff307b73077f35edb9c92fd51b0c43f8655875d00d48e5f5769a10038da

                              SHA512

                              5e84dd9ec2ac68a74d8b272c1a890025ed780337ff36a07e25390c3d2e41efe0ff41868e984be6621b50de84e3e66829b958fa79b838724625e3530be6953b1a

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                              Filesize

                              189B

                              MD5

                              dc6f33a85b4b8a6b704c46e40829c255

                              SHA1

                              e1633048b2c007735d2dafd961d3e6e2861b52ff

                              SHA256

                              9667d0fd2dfaa108f33cb0d321e1b5ba8e737892a5ad9a55ff96a3702ed7ebac

                              SHA512

                              8f964e6c77a3fd6148893a8dda40a631f5f391bc12bcb95dcfd57bd01eed9e659cd7e8089d063a9de1b09eea52e4e99d3e3dbe784925535cdafd9d7120f11395

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                              Filesize

                              5KB

                              MD5

                              ad5a671360ecd4bcbf749b02cea8f991

                              SHA1

                              98ae338cebc20ac39dbbe374c7adb181ae1a40ef

                              SHA256

                              a10b4f707eb382f0b0a218aef23e1a5c8c8b0fdf8b0d1a792a24b0a0c56527e6

                              SHA512

                              95c20b7b469cf5216b50ee27dcd3f07a757f40e5a2a51a6f87d6495da8caa70c63c1ffcf4a9d4b8021dfa3c27d4c83b8c7911cd33ba596bed2e8d95845ee5da2

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                              Filesize

                              6KB

                              MD5

                              ad4135046726889c86efe49024c20561

                              SHA1

                              a706dfd9dd327269aa3a768700170222f7ffa56a

                              SHA256

                              e836088d097a4183dfe25c93cfa907e271eb01c0c38aed6bcf3f86972ce4cd29

                              SHA512

                              3a3353a85fd4f7ab45af258634a0519343a42a28f3f3c16c7719bf4f7f591184f33bfb618addae23b8c3953c3ab8e2fcc2fe17aa333665039900427250bf27b2

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\2e38d4c4-62f2-4bc9-b3ee-87b358c452c4\index-dir\the-real-index

                              Filesize

                              48B

                              MD5

                              c039400daff53e15336e73be8f5c7c24

                              SHA1

                              6605fb759e08754b543f1f8f41497183ebf4d2b0

                              SHA256

                              6f52ad456a073b37c49fd60a08302d3ad4ca757d14a3b01788d63261b356a1af

                              SHA512

                              035a0f6daac1fd7e2650db8a1f3d08bf8aaddd9b441ce6a0693225e19dbd9f53ab370ff525ede757aa133f4a6212043db41e57fdf95e00038ca0374f31a0cc43

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\2e38d4c4-62f2-4bc9-b3ee-87b358c452c4\index-dir\the-real-index

                              Filesize

                              72B

                              MD5

                              1b655ab65ecf4e7cc39e6a6c2738f018

                              SHA1

                              2cc07a0d3e623b89774e18579b633e16eea5e7da

                              SHA256

                              46009080d60a4670d8345260bf8d4d3b2b9118364249a194a97b2fd518d5541e

                              SHA512

                              729a93a2fa1b952df9b05472e2f2d3e40156be2a127d15b4642abd04c0b1303fd7a303b352e188d25495a842a2d755029aaae8125692e341d0876f59a0c8b81c

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\be1bdc68-e2e7-41e4-ad30-1c75995a8827\index-dir\the-real-index

                              Filesize

                              120B

                              MD5

                              e001cc0fb6377032e6c264b9824fda0e

                              SHA1

                              d2d12cfb03a0954db08d737329041a6184026c5e

                              SHA256

                              b7208a4f540cd260951b7e55d5fc16bae86b5e0107acf955307b1877ef199c8a

                              SHA512

                              ee8271140443f709f210c84a249596538a6da02a98cd69610830d4df2770fe6e1938448aa95d63cf9e34ad262509d9c45651adf4cd49c8fac7fb300d523e3569

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\de297a4d-e8a5-4a5a-bd5e-969d771c5d8b\index-dir\the-real-index

                              Filesize

                              72B

                              MD5

                              952e57f4f4e0404c09268fa1325ca3b4

                              SHA1

                              9f7b7c29448b8ad9478ae19e2c609226f0470d7c

                              SHA256

                              03595b0130ecbf694ea207a9104f10adc648d37ee3a86e8d1932ba58ac1c7ab3

                              SHA512

                              7ff68251e94af58ade7a696ef3fd148c5acdd99210515cb3929f968485cfd0f9df8c94a0161353b3db0aea69f3c19b775f432623b59fa5bc6894d1145c61f771

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\de297a4d-e8a5-4a5a-bd5e-969d771c5d8b\index-dir\the-real-index~RFe57c6da.TMP

                              Filesize

                              48B

                              MD5

                              9b40a73e9b9baae9846b9e14297f0f2b

                              SHA1

                              89cffa7385dfedcc414613da74231ac8435e3bfc

                              SHA256

                              d19d2428fe12e9f2a2301271e8baa9079c5905267b6b71191ac447ba945c6c12

                              SHA512

                              57b9ec6d8dc8b4e1f310d4aae237466ab09c96f5ff97cae08fc352ae1692073a33aff0b69f9fe5dca84f587a5f6ff05bc0408ce516c8a450f1e5d0155914e88c

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\index.txt

                              Filesize

                              169B

                              MD5

                              948c96bc124d9fb9178ab175d3b9d2d3

                              SHA1

                              1e1693d21828e0c85e65488641f5977dea3c9488

                              SHA256

                              9c90bff162ea2ad4df7f2afac7c6529c13129879cf4ce4bb82db63927706ef1e

                              SHA512

                              24c61cba50bf8da5b5d8fe42afc12696f11ce6c2733f93c06e0d38a260e74d7d84eb9592cde97f9d347146d13595118671cdd24cffbb25f608ba8d192cf13233

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\index.txt

                              Filesize

                              230B

                              MD5

                              8dc8564e0a401238a5cbc2d8dd76d7ae

                              SHA1

                              adfec553cd39e303af7d92f57c9f39211ab31d95

                              SHA256

                              a1ec66d0e426e6d051c64b0f56c713ca4314733abf979059285188b55c109aa7

                              SHA512

                              b72db4cce1816b87783c63175102e1166b415b95795b6bd2db73465ee0b7b3502cd5376e5d11b3ea5ae60c7c7b18c457ef245119ea5c6cb05feb990aba4ac658

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\index.txt

                              Filesize

                              229B

                              MD5

                              d686c94505c9463179945f04eb7b42cb

                              SHA1

                              7e55f880a1471fe54be874102788c18e629eaa3e

                              SHA256

                              e25535a8c23484cd240278e79851c27e80dbe207d62c1a29c138ebdb149d6e8d

                              SHA512

                              745a00ddf4fef375a606149381fddcbfb3772365622de8b9bc87612d5c06b653915deb454204c474bd3b4121f8023db00ace803d43a8f8a484ca27b7a7783ffe

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\index.txt~RFe5776b6.TMP

                              Filesize

                              104B

                              MD5

                              6112fea27fb37b40ad4d11795f5e38d4

                              SHA1

                              9044a46872e8dd4f621931068d88745766e3b2c0

                              SHA256

                              76ec6020cd4e6ff03476ac195e74499ecfba739be53fd828f379dc0ae681f34e

                              SHA512

                              0e662f5e10c82b83f1e50d7fd88459cb5a2ba94734ac2a9b595ade33b49678526f9fcafc0a7354ebf5fbd553caa5d6bbb7d51c6d00bf701f0db857cd2fe49a40

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                              Filesize

                              72B

                              MD5

                              e73f4011b7011e1e1a4e8283e501da30

                              SHA1

                              63a521494fdc6276bf03cbd5df5e5563f64554ee

                              SHA256

                              9e990a3f004e9df28ea59edb9ffbbc11f3ecc0c8f6ae5ec5142f35119980ba70

                              SHA512

                              5f1c26a5406ad22cd947779f66ba6150c155c9dbed334f7991c9146d9be4ada2dd49aa39023496b351c090a98f95630f07d528c608b9376584126b919833f57a

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57c4d6.TMP

                              Filesize

                              48B

                              MD5

                              a10374294815d47d1ae4b7d23222fdaa

                              SHA1

                              8868f04694cfd947670bf87464bbe1dba070d0c4

                              SHA256

                              b6743bae03a5d905f73cde93ebe92a617463977bb18b5f8cf8e523c344e5062a

                              SHA512

                              579eab9f0f1b0218514492c0f9422ed9ca31aaeb4566b938f596d9f8a1a65e519588ab42fc4817dbf8e8fca27ed04586e1cee2ef2a4711ff9a8a3491e1da8820

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                              Filesize

                              16B

                              MD5

                              6752a1d65b201c13b62ea44016eb221f

                              SHA1

                              58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                              SHA256

                              0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                              SHA512

                              9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                            • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                              Filesize

                              10KB

                              MD5

                              38b2aa5beed03fae5c28b98fb5c48fbf

                              SHA1

                              db97bdc210e4611254189aff61675d796e039f2e

                              SHA256

                              63e246fdc4946d58f64e245f79eb8d05783443fda57f7dc426b7f21b42520b83

                              SHA512

                              fd08017e90b004e45bf5cbd4a70ab23811a57af9a19de3428fff7ee2481c6ba2129e0c7c9c0707e5a48e98c7eb65949769725a59b65d78d8e4b9449cb90e3c1a