Overview
overview
7Static
static
7JaffaCakes...8d.exe
windows7-x64
7JaffaCakes...8d.exe
windows10-2004-x64
7$LOCALAPPD...ds.exe
windows7-x64
7$LOCALAPPD...ds.exe
windows10-2004-x64
7$PLUGINSDI...Ex.dll
windows7-x64
3$PLUGINSDI...Ex.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...ad.dll
windows7-x64
3$PLUGINSDI...ad.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...es.dll
windows7-x64
3$PLUGINSDI...es.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDIR/Time.dll
windows7-x64
3$PLUGINSDIR/Time.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3$PLUGINSDI...ef.dll
windows7-x64
3$PLUGINSDI...ef.dll
windows10-2004-x64
3$PLUGINSDIR/mt.dll
windows7-x64
3$PLUGINSDIR/mt.dll
windows10-2004-x64
3$PLUGINSDI...os.dll
windows7-x64
3$PLUGINSDI...os.dll
windows10-2004-x64
3FM4ffx.exe
windows7-x64
7FM4ffx.exe
windows10-2004-x64
7$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Analysis
- max time kernel
94s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
20/01/2025, 13:54
Behavioral task
behavioral1
Sample
JaffaCakes118_e9efb5dd608532d6bed61bdc4f0f668d.exe
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral2
Sample
JaffaCakes118_e9efb5dd608532d6bed61bdc4f0f668d.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
$LOCALAPPDATA/funmoods.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral4
Sample
$LOCALAPPDATA/funmoods.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
$PLUGINSDIR/ExtractDLLEx.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral6
Sample
$PLUGINSDIR/ExtractDLLEx.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
$PLUGINSDIR/IEFunctions.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral8
Sample
$PLUGINSDIR/IEFunctions.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral9
Sample
$PLUGINSDIR/InetLoad.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral10
Sample
$PLUGINSDIR/InetLoad.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral12
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
$PLUGINSDIR/Processes.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral14
Sample
$PLUGINSDIR/Processes.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
$PLUGINSDIR/Time.dll
Resource
win7-20240729-en
windows7-x64
Behavioral task
behavioral18
Sample
$PLUGINSDIR/Time.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral20
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral21
Sample
$PLUGINSDIR/chrmPref.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral22
Sample
$PLUGINSDIR/chrmPref.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral23
Sample
$PLUGINSDIR/mt.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral24
Sample
$PLUGINSDIR/mt.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral25
Sample
$PLUGINSDIR/nsisos.dll
Resource
win7-20241010-en
windows7-x64
Behavioral task
behavioral26
Sample
$PLUGINSDIR/nsisos.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral27
Sample
FM4ffx.exe
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral28
Sample
FM4ffx.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral29
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral30
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
Behavioral task
behavioral31
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
windows7-x64
Behavioral task
behavioral32
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
General
- Target FM4ffx.exe
- Size 319KB
- Sample250120-q7ybdasmem
- SHA256 3ac3c700060a0487060724f3fd22faf70d5f633e69401641964d7ba4d6e6e570
- MD5 fe768a6b82ed2a59c58254eae67b8cf9
- SHA1 3dad9bf5011fb73b9be2fe6c601bb6281a3ceaf6
- SHA512 3d8caadc61ea127bd0e3d01f35274a2ebfa34a0ac12b0932988300d011347f74a09c2bf3c85e58bfbe5200288c6e6f100b4f08916d23e56d7b52a70130aad14b
- SSDEEP 6144:Ve34G2ct7JdUwA2UL4iCPfAHfWpR+0BmiBEaiXLoyX:Et9BHjAupYMmyk7R
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped DLL 64 IoCs
pid Process 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe 4720 FM4ffx.exe - Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language FM4ffx.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsaB94E.tmp
- Size 105B
- SHA256 d7516cb11c81e5ef2e0c7cffa7175c3a7f36f945e788a27024fdc79443fdda45
- MD5 d66b7c36887a3a1f869cd8b637cc43b6
- SHA1 2e7ad1e83bbe8ae41a119efcaaede2bc82e9d8db
- SHA512 155ba55e437c52f3f53d27750fb8365f3489c08a00a8a842610d9d2687aaa067add493273caf5b49fe4bff39eca917eb3f4b4bcb58537119b3ce82e3ed40ceb8
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nsaB9A5.tmp
- Size 628B
- SHA256 bad7b13ead07e6f88192ce43de41ce92eb2e07712d730f5499147ee4841c28fb
- MD5 6076a503677b7d4191bf6078c9c79d6f
- SHA1 06b8a3d2558a67b7819f6cda836baa942d6a8a4a
- SHA512 908dfdc402f175d694748ee179c7e0b9f29ca47da3589944976d3782e4aae3293df113c7a86992eaf8d57d7b50f7ae98d76ebc27617c2f42e5809d069946802a
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nseB78C.tmp
- Size 431B
- SHA256 4674b490bcdc7fa376c13f01f62e56e8f77b47bef4ed9c496824774239cb4fe2
- MD5 4c9cd8403431eaa94b939221222ab1d3
- SHA1 20f7b59a5cd9fd7604c82029e16b96872e5a0d37
- SHA512 fd88a2f55258ef554bc8d7843dee7f1b0bb25e42033b30937f0f2aab7853d0ad4f2599b9d8545221110a3dcb8bfffbe3d79a5b760edac9e12dc1d76ae30c1bc1
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nseB7DD.tmp
- Size 597B
- SHA256 15f1802d77d47afee552b83a188b3b81a3b3d882de86a800b7a647a63266567c
- MD5 e0039e2a55c2226837482cd2e6482b0c
- SHA1 ef6ef18e0499a67e551b85bc6a0e9274c05ab58e
- SHA512 3574fa921377a7bc4be4553bf1857cc2beb90f430f1cd87391dddd95c4785313f8d4a347e846ee4c082847d77d2fe225bacfe600b43ba242f47d4f67cc29404e
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nsfB9C6.tmp
- Size 730B
- SHA256 5978b64819300b86e1c6fc8de07384c51f82b8cb3106d3cec3241f0425f4fd8c
- MD5 fed3139f7dfcf9a9eb6e42902dda5ac8
- SHA1 b77ffe0e51824ea6f93920f149fcec8c0d2c381b
- SHA512 1cd7d9e7034f5f7a83f01278c221eca38738ccb56b53f4be5bc70c6764aa7275c5b39704271ab038485dc652e1eed892a1b739007cf3b2fc5d1bb7b3d8b8bd09
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nskB84E.tmp
- Size 774B
- SHA256 edac71c626a7deaeb342ccb49a45c12eb6e675718b37d48ce528deb198ea70bc
- MD5 2248e466992e8f90694d0aa43bcc42ea
- SHA1 1ec85ee0834177359fe22b01f00692223e38e695
- SHA512 e227dd0d1f9e96f0fb35c629641e3c40eb715e945a8f6247e0a179f20de64a8286aadd7b3dab1f228b7da97b554e02a2ac4d15679c8401b6b6357f790a044821
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nskB9E6.tmp
- Size 779B
- SHA256 e6f2d544275c9121819231a469face787120ec06d31e4352e7b7157e87cb211f
- MD5 fcb11c9e43d10281fd09eb3ec47745a3
- SHA1 c44f3c40c215e50aae99c5fdbbe4ee1b5fc0e8bb
- SHA512 6ff281cc2deded46d24dcc99031019fa5216a0418a4910548807ec83c719a0098b139c442e947448ea165dcae1bacff0714c9b5458f3e5a7365f996e5d2da686
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nspB81E.tmp
- Size 719B
- SHA256 f78fc745f259d8943b2f2ad5a7b94946bfc1598ccc1b71f9f143305c1ce69116
- MD5 fed4e2cbbac5fcf5715ab4e2707d590e
- SHA1 190ed8138c0bd22e688f2acb1aa3943a44e448dd
- SHA512 8779dd15f6e2688f8fab6b86113da0c30bd5727f5782720563d2b2ad1ce55d13a11ca3d520c1a456e710ded899a15d14fc6b330e30e9977ac68fc29b35b04fba
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nspB86E.tmp
- Size 825B
- SHA256 d223914775b13f6c6baf013b576f26c0d6efae491760ebc4db40fb0d29bf5bea
- MD5 95bee12f09e5fd0e1e2c86a1076fb554
- SHA1 6a0b4917a5d0afdeab1ca13837221a15714e2c39
- SHA512 a8d69ed1753c028da7dba7653dc08e796bf2cb29da05d1433fad5de3eb4f3fbbe2580e92da3b53afc600039a962dca76ea6ee96af4c1bf33c51de7942fd05858
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nspB960.tmp
- Size 291B
- SHA256 26bd417a9ce76c07c88de402c2ca72821682a43d3c99823f4c6f8721682b8c0e
- MD5 ca99d4b85d700a112ad7ee6c7830b8bc
- SHA1 642424c93d5dea7d389de933489d36cb669e22a5
- SHA512 71ec622f2d535dc95d4ab483796713df22086704b62fac3d318ff4e03946d0439f48d8e81a1c4c66cf4be8184e1d81bd2c8193b19c02ff8f24269ae532a12964
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nsuB6FD.tmp\System.dll
- Size 11KB
- SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
- MD5 c17103ae9072a06da581dec998343fc1
- SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
- SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
- SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsuB6FD.tmp\Time.dll
- Size 10KB
- SHA256 b4a95a455e53372c59f91bc1b5fb9e5c8e4a10a506fa04aaf7be27048b30ae35
- MD5 38977533750fe69979b2c2ac801f96e6
- SHA1 74643c30cda909e649722ed0c7f267903558e92a
- SHA512 e17069395ad4a17e24f7cd3c532670d40244bd5ae3887c82e3b2e4a68c250cd55e2d8b329d6ff0e2d758955ab7470534e6307779e49fe331c1fd2242ea73fd53
- SSDEEP 192:oNcwTweFbs9t2n2Sgiga65/aHdaGZavaJIYX4Hw2:oNcwBFg22SEw47CPU
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsuB6FD.tmp\mt.dll
- Size 5KB
- SHA256 6dc2644a389feeef9e0ac65e2c8b01fc18ca6e53b253f10efffcb117e0a852dd
- MD5 aac69f856c4540edd4ef7ce6c8571639
- SHA1 2860f55ea9774d631219e66604051e90a43258b7
- SHA512 ebacc8117c44d298ae519705510285c576932761b3c7b697eeb91cb7620150ebe551102d1ab83d68f4c78e1496b191a55ad8f78c491f5b4af456c4de6ad72dcd
- SSDEEP 48:am+jZiVMdzNNqdugTvfbAMHpyncQk7IZigYyPSx1A8v1XlWzNKjW1Qg/BTv:zKiVMdhwr7k0pycQBZtJuA8vUQi1QkN
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsuB6FD.tmp\nsisos.dll
- Size 5KB
- SHA256 ba79ab7f63f02ed5d5d46b82b11d97dac5b7ef7e9b9a4df926b43ceac18483b6
- MD5 69806691d649ef1c8703fd9e29231d44
- SHA1 e2193fcf5b4863605eec2a5eb17bf84c7ac00166
- SHA512 5e5e0319e701d15134a01cb6472c624e271e99891058aef4dfe779c29c73899771a5b6f8b1cd61b543a3b3defeaecaa080c9cc4e76e84038ca08e12084f128eb
- SSDEEP 48:6EyuygeHCfxwU5x+6kx/k1gONv27oBc2OkIrHHl:VeHCf2762kKsu7oGjkIrn
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Local\Temp\nsvB983.tmp
- Size 469B
- SHA256 41a654044bab7269e214a7bf341243559ce9972036483d89676dc4869734f4e4
- MD5 7a7e58b91e235248c5905a3ac031e30d
- SHA1 6075cc1e508719997461fbb4dbcc9bf0bc579d7a
- SHA512 1a6ef27ef2ae4d7dda2f163f2e899d3d151b6f0ed6d0ada461395d983841d7cec81168c6994178a2563088083a2579c50a9acedc2194f4d123cbb072fb65f2ef
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kkr0into.Admin\user.js
- Size 486B
- SHA256 8420c76cbcff8ee1bb648aaa052e203665213a3cc246167e2b8ae9b88a428c8f
- MD5 f61d0f4669b609b75b648c417d8bf6de
- SHA1 070387cc5ea82769a6b4517b0f65be84a832d723
- SHA512 609dcafa33db130ea54519e1825e8f05c1e7ce140f19252c1e5ec77c289eced1b91a61733521c38d1a4a1d4a59b12d4e09428e74970abe223712c59ab795a7e4
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kkr0into.Admin\user.js
- Size 662B
- SHA256 f097e91a7231f77a830a95f4f0b5665ef8e8a9eed8a101ac27717ce2d502c289
- MD5 7ec328d85f53baaa58223253598a90b7
- SHA1 ada262eb33a4c86d0afe9125555c70f329fb8da8
- SHA512 c3e9577ba3d282ec78a2c5d5dd3ea56b8e205b6e698c8817981b6b4e68b3a8f60e8b41eceae6751b15a2052d98d6877a82a7a74fe55c4d8e79803b6b17464f75
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kkr0into.Admin\user.js
- Size 930B
- SHA256 09c1c05e25d6083e3c4710165c486ab59c72e16ffbca6eb8a61cfec757b407d3
- MD5 24a8c05ca708b93441d1d9c7e36b0121
- SHA1 06776a0e1a22f6519aef03f1b077108209386e69
- SHA512 bba431605d90cb2b4ed296a9e83489bba3e9b0f3dfaf85921594a4171f4779dd581f3efd58e659c3a972f95779f23b85398c085883e7066f08fe7fa05e84b060
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\kkr0into.Admin\user.js
- Size 1KB
- SHA256 db59689db272ec4af8f91f3693cf668fa5794a9359fc15fd871f3bbec3704430
- MD5 d97091712f334efc85ca9b0013c9848c
- SHA1 5475a7fdf72641f116a76fc91b8af5f98389cf78
- SHA512 065833c5d05f77d9d2e1b882b9b875d52f451a8ca85095b90372ab89ce191eb878632a9d25463976311e9d229702d969c4171683c970a50116661e8e9e086fbc
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\user.js
- Size 412B
- SHA256 ff83bdaf982f1d1195979806f89b0e5cdef3c036308478acbbffc54adbb1cd11
- MD5 4179b09dbad67f1225d9d10a43b68683
- SHA1 587e45c6cfd691646691aa657b406f86a3ddf0db
- SHA512 e511d9aec4405ca595a1b8006f91addda9828e847862fc2b8ac0e1e94cfdbc5bb9266f55c6d8dfffe3e9030c1b67b37523e8f4546968a831c5c70230900bad53
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\user.js
- Size 575B
- SHA256 dea611029889c2851c3dd89f25c5d3564f5a21993e7f3f5763330daab893db70
- MD5 84b7f67762b9811b7987c58128187996
- SHA1 91e174c7db2cc32ed1aa65c7cc07c64621f81db4
- SHA512 38c02a2aa48c15409db7e2f8788b1473f82dd7be55003f460bd631d8e291bf3f76299ce968ba8ea3da55dcb1b73593bd95786a6d29f0c27a45833c2abdae3eee
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\n4zftpal.default-release\user.js
- Size 236B
- SHA256 0701cccf04df0b2fe7cbfacab8b9748094cd971151066ed3f3d292ffbe2b7798
- MD5 7db87932a6cef1408a994a32428f999a
- SHA1 3f00681888f6b263a1e32dafe6cc401548f0303b
- SHA512 28f8c2294dc7680b8ba21134a236c225bfd4411e306eccd37dbcd87c94e0e57b8347e9c634282e5299907f05121eb63cc29846cb04c51e79d876777d4f723285
- MD5 SHA1 SHA512