Analysis
-
max time kernel
152s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
20-10-2022 01:34
Static task
static1
Behavioral task
behavioral1
Sample
bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55.exe
Resource
win7-20220901-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55.exe
-
Size
116KB
-
MD5
54368c907f0cf494f91f2478490dc6e0
-
SHA1
ca436cb2a30d3c61ed7b7653c7506dce4933b068
-
SHA256
bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55
-
SHA512
861eaa565a5dbd643640ef0f1882d44ca9aa34a32d923d62f30cfb26a6200f142d0fdda4b8ae4f573fbc7ad8a1307b1b076905313df42d9025edb581091d09f9
-
SSDEEP
1536:qUsNo7v2V46QhdrSXt+XazoFm+D+w+j+4+1kbiMUer7n9sqAEFO7F2Mlb:Vlb
Score
10/10
Malware Config
Signatures
-
Modifies visiblity of hidden/system files in Explorer 2 TTPs 1 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden = "0" biuaxim.exe -
Executes dropped EXE 1 IoCs
pid Process 1372 biuaxim.exe -
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Control Panel\International\Geo\Nation bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55.exe -
Adds Run key to start application 2 TTPs 51 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /z" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /a" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /i" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /V" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /B" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /y" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /p" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /U" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /j" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /G" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /Z" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /S" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /q" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /L" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /Q" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /H" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /c" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /A" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /k" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /I" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /C" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /K" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /f" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /M" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /w" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /F" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /O" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /o" biuaxim.exe Key created \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\Software\Microsoft\Windows\CurrentVersion\Run\ biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /J" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /P" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /d" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /u" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /N" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /m" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /n" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /e" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /W" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /b" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /R" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /t" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /D" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /g" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /v" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /l" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /r" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /x" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /E" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /h" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /Y" biuaxim.exe Set value (str) \REGISTRY\USER\S-1-5-21-2629973501-4017243118-3254762364-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\biuaxim = "C:\\Users\\Admin\\biuaxim.exe /s" biuaxim.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe 1372 biuaxim.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2240 bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55.exe 1372 biuaxim.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2240 wrote to memory of 1372 2240 bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55.exe 83 PID 2240 wrote to memory of 1372 2240 bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55.exe 83 PID 2240 wrote to memory of 1372 2240 bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55.exe 83 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81 PID 1372 wrote to memory of 2240 1372 biuaxim.exe 81
Processes
-
C:\Users\Admin\AppData\Local\Temp\bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55.exe"C:\Users\Admin\AppData\Local\Temp\bebac0ab8aeebbfc64a0c2d0644b99f1c7f720bff4219c59343f74b689ce2d55.exe"1⤵
- Checks computer location settings
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2240 -
C:\Users\Admin\biuaxim.exe"C:\Users\Admin\biuaxim.exe"2⤵
- Modifies visiblity of hidden/system files in Explorer
- Executes dropped EXE
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1372
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
116KB
MD528c0ff368b3436c051b91d625a5e5727
SHA1c1333c79f8a289e243973bc042df1db66a8c7a5d
SHA2561287e57ff20b1a67c187bad7d8f7a37f74d3314d13f15ead555b215d66899fbf
SHA51237e9b74919cd9823ebfedeea7634f7db48bfb25ba0379baae612529d6b6b6f93dbf803ca097eb4093b5ea261faac9329e05b65389cdd491b18a57270f53a899d
-
Filesize
116KB
MD528c0ff368b3436c051b91d625a5e5727
SHA1c1333c79f8a289e243973bc042df1db66a8c7a5d
SHA2561287e57ff20b1a67c187bad7d8f7a37f74d3314d13f15ead555b215d66899fbf
SHA51237e9b74919cd9823ebfedeea7634f7db48bfb25ba0379baae612529d6b6b6f93dbf803ca097eb4093b5ea261faac9329e05b65389cdd491b18a57270f53a899d