Analysis
-
max time kernel
183s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
25/12/2023, 23:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4369c6f7756bf6337b4488c3ff405817.exe
Resource
win7-20231215-en
windows7-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
4369c6f7756bf6337b4488c3ff405817.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
4369c6f7756bf6337b4488c3ff405817.exe
-
Size
232KB
-
MD5
4369c6f7756bf6337b4488c3ff405817
-
SHA1
255dcffacc5ea214254be1e8b20b01c38f70fa67
-
SHA256
35f0fc1a75dff7b1c8a3c8e22fd50c449f8ce9585a1d7c4114db140480db59a1
-
SHA512
a24aa2c0ffa048e112d3f33a2cc93f23ffc7431d859f51125283a36a1d800430ba326d2380f6e73a5bb52a973d5e324a5c71a5db1d7ab34bca17becbbb44fab9
-
SSDEEP
3072:prurB6QdzaxMGwBcQlUt0gGFItJZLVagt7q67DXP59wE2bpfV:prurB6QdzeMGwBRw9GbmzEn/
Score
10/10
Malware Config
Signatures
-
Modifies visiblity of hidden/system files in Explorer 2 TTPs 1 IoCs
description ioc Process Set value (int) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden = "0" mooqu.exe -
Executes dropped EXE 1 IoCs
pid Process 2708 mooqu.exe -
Loads dropped DLL 2 IoCs
pid Process 2872 4369c6f7756bf6337b4488c3ff405817.exe 2872 4369c6f7756bf6337b4488c3ff405817.exe -
Adds Run key to start application 2 TTPs 52 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /j" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /k" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /e" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /h" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /b" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /u" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /x" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /r" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /C" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /F" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /O" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /D" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /A" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /i" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /v" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /E" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /l" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /p" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /U" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /s" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /g" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /m" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /W" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /K" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /q" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /w" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /Y" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /o" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /P" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /d" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /t" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /T" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /V" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /c" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /f" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /B" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /M" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /y" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /J" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /R" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /L" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /I" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /N" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /Z" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /S" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /a" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /n" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /X" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /G" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /H" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /Q" mooqu.exe Set value (str) \REGISTRY\USER\S-1-5-21-452311807-3713411997-1028535425-1000\Software\Microsoft\Windows\CurrentVersion\Run\mooqu = "C:\\Users\\Admin\\mooqu.exe /z" mooqu.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe 2708 mooqu.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2872 4369c6f7756bf6337b4488c3ff405817.exe 2708 mooqu.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2872 wrote to memory of 2708 2872 4369c6f7756bf6337b4488c3ff405817.exe 29 PID 2872 wrote to memory of 2708 2872 4369c6f7756bf6337b4488c3ff405817.exe 29 PID 2872 wrote to memory of 2708 2872 4369c6f7756bf6337b4488c3ff405817.exe 29 PID 2872 wrote to memory of 2708 2872 4369c6f7756bf6337b4488c3ff405817.exe 29 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16 PID 2708 wrote to memory of 2872 2708 mooqu.exe 16
Processes
-
C:\Users\Admin\AppData\Local\Temp\4369c6f7756bf6337b4488c3ff405817.exe"C:\Users\Admin\AppData\Local\Temp\4369c6f7756bf6337b4488c3ff405817.exe"1⤵
- Loads dropped DLL
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2872 -
C:\Users\Admin\mooqu.exe"C:\Users\Admin\mooqu.exe"2⤵
- Modifies visiblity of hidden/system files in Explorer
- Executes dropped EXE
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2708
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
109KB
MD513ff833a3eeab31a2f5c336d88d420f6
SHA1132ea5b783a7c68741e6f79ebb26c3b83d44799f
SHA256a4518adc5d69d24f2775546382192dde0b45b270b53c661864b421e446d99683
SHA512976f2aa1d09cd8f3f7d87a074f167ebf59fd7337d9e16885a14aaa6deb90b5a2c106de4910eb7101dc02d1b50e6f5a2a4b91d891c4a28dda73198362b23bf2e6
-
Filesize
35KB
MD5d5a50d68429be012e50a641269463f94
SHA14f2f9eafd5c632420bd0d77dd2561ad5d2634b80
SHA25613053ee0d96364ca92ed580e248f48fea321418c4b01acc7ea8bbe2a6bf615c8
SHA5129687c572606bdcf00695e9dd2610b5fe3687c8661fd2b5a993fb208ed1968140d24ee3798656c259fac9f0a06c2da3169bdafdb36056bae479d113d4f0c4a250
-
Filesize
26KB
MD5d3918a8257088ee15ce04d5c9614a258
SHA1346e909a7cdb9d976ab1c351044689a18c99c575
SHA2567c8031d99bfd85414dd6e186dd6b10d952e9b85de2bcf69685c9af0518a1fb60
SHA512c39fdf79f914e7952b0c514f4244b3df68c3b4ad38a19e60d41d20e4caf7d4de3fa50e5087fccd9d89b58b3a0ce600c8d802da2d93cccbe7e9a5134e9d8f45d7
-
Filesize
1KB
MD5d8fa5715a7c51ffb3fc1a45bac64ffc8
SHA162236b9fea55a8b6a5dbc8d2398126a27915e547
SHA256ac9732918611db14bc75871d5056f2581169049fe72abc7adc98734fd77154a7
SHA5128de0dc634881cadb8574504996ec94f3b668b5ec638c3b8c2f7926e0497a7942e893c2626b4088ac8aa8d4b5ccbde7892d83de0231c8999457b8b573bd84903d
-
Filesize
42KB
MD5dbbfd0a63571338ed5d0d308edda5061
SHA1bfa6ca5407b7375e6c26c81ea55b9ae61e91af6f
SHA256375c83d915d2fcee9be0747a0cb1ce404db1e51256015234a555afd14c741941
SHA512f9cf2308216a22e671179d29eb74ceb839f20b117b094742304dbb3742a17a0577510b7b531701717ce66e8b4eb0f8dfe6c9b72915898ef1a9be59615098143b