Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
124s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
06/12/2022, 23:34
Static task
static1
Behavioral task
behavioral1
Sample
cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe
Resource
win7-20220812-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe
Resource
win10v2004-20220901-en
windows10-2004-x64
6 signatures
150 seconds
General
-
Target
cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe
-
Size
484KB
-
MD5
716b6f987cecd4653d8921176423f1ac
-
SHA1
220436e82cc36d18d47a54eadd950bdc88f23b92
-
SHA256
cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4
-
SHA512
be25baa133434f0970ce862b0a17ed2c8f2727422f3e898f0ee0fac9bfa59d65e345af7794a14965e587a81181c42d8f242c680f9e4fd51fa474b368f8e3fda7
-
SSDEEP
12288:l5OSe5IfhKrgLkyTwMB6beHMm9hJScQRyu+ev/GQ2PViSCv8MfSdaNPRWP:jpe5IfhKrgLkyTwMB6beHMm9hJScQRyD
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
pid Process 1836 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe 1836 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe -
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\msnmsg = "C:\\Windows\\system\\msnmsg.exe" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\MSWINSCK.ocx cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe File opened for modification C:\Windows\SysWOW64\Bmp2Jpeg.dll cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe -
Drops file in Windows directory 2 IoCs
description ioc Process File opened for modification C:\Windows\system\aplication.ico cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe File opened for modification C:\Windows\system\msnmsg.exe cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe -
Modifies registry class 64 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\ToolboxBitmap32\ = "C:\\Windows\\SysWow64\\MSWINSCK.OCX, 1" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32\ThreadingModel = "Apartment" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSWinsock.Winsock\CurVer\ = "MSWinsock.Winsock.1" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32\ = "C:\\Windows\\SysWow64\\MSWINSCK.OCX" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\MiscStatus\1 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352} cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\FLAGS\ = "2" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib\ = "{248DD890-BB45-11CF-9ABC-0080C7E7B78D}" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\VersionIndependentProgID\ = "MSWinsock.Winsock" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib\ = "{248DD890-BB45-11CF-9ABC-0080C7E7B78D}" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\MiscStatus\ = "0" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\ProxyStubClsid32 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSWinsock.Winsock.1\ = "Microsoft WinSock Control, version 6.0" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\ = "Winsock General Property Page Object" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\ProxyStubClsid32 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib\Version = "1.0" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib\Version = "1.0" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\ = "Microsoft WinSock Control, version 6.0" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MSWinsock.Winsock\CLSID cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MSWinsock.Winsock\CurVer cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D} cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\ = "IMSWinsockControl" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\ = "DMSWinsockControlEvents" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib\ = "{248DD890-BB45-11CF-9ABC-0080C7E7B78D}" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSWinsock.Winsock\CLSID\ = "{248DD896-BB45-11CF-9ABC-0080C7E7B78D}" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MSWinsock.Winsock.1 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\0 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D} cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Programmable cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Control cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\ = "Microsoft Winsock Control 6.0 (SP5)" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSWinsock.Winsock\ = "Microsoft WinSock Control, version 6.0" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSWinsock.Winsock.1\CLSID\ = "{248DD896-BB45-11CF-9ABC-0080C7E7B78D}" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\VersionIndependentProgID cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D} cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D} cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MSWinsock.Winsock cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\MiscStatus\1\ = "132497" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib\Version = "1.0" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\ProxyStubClsid32 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib\ = "{248DD890-BB45-11CF-9ABC-0080C7E7B78D}" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D} cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\FLAGS cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\HELPDIR\ cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D} cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\ProxyStubClsid32 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\TypeLib\ = "{248DD890-BB45-11CF-9ABC-0080C7E7B78D}" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\ProgID\ = "MSWinsock.Winsock.1" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Version cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D}\Version\ = "1.0" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{248DD890-BB45-11CF-9ABC-0080C7E7B78D}\1.0\HELPDIR cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD892-BB45-11CF-9ABC-0080C7E7B78D}\ = "IMSWinsockControl" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{248DD893-BB45-11CF-9ABC-0080C7E7B78D}\ = "DMSWinsockControlEvents" cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD896-BB45-11CF-9ABC-0080C7E7B78D} cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{248DD897-BB45-11CF-9ABC-0080C7E7B78D}\InprocServer32 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1836 cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe"C:\Users\Admin\AppData\Local\Temp\cd3163cc494f0da26bf70f9988458c0abf47b6416dd63c2f74b04eaf01ff85f4.exe"1⤵
- Loads dropped DLL
- Adds Run key to start application
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1836
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
106KB
MD53d8fd62d17a44221e07d5c535950449b
SHA16c9d2ecdd7c2d1b9660d342e2b95a82229486d27
SHA256eba048e3a9cb11671d0e3c5a0b243b304d421762361fe24fd5ea08cb66704b09
SHA512501e22a0f99e18f6405356184506bc5849adc2c1df3bdee71f2b4514ab0e3e36673b4aecbd615d24ebb4be5a28570b2a6f80bd52331edb658f7a5f5a9d686d10
-
Filesize
106KB
MD53d8fd62d17a44221e07d5c535950449b
SHA16c9d2ecdd7c2d1b9660d342e2b95a82229486d27
SHA256eba048e3a9cb11671d0e3c5a0b243b304d421762361fe24fd5ea08cb66704b09
SHA512501e22a0f99e18f6405356184506bc5849adc2c1df3bdee71f2b4514ab0e3e36673b4aecbd615d24ebb4be5a28570b2a6f80bd52331edb658f7a5f5a9d686d10