Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 17:50
Static task
static1
Behavioral task
behavioral1
Sample
6bc4677a2da4ddbbb2fce9fe4a0a48c1_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6bc4677a2da4ddbbb2fce9fe4a0a48c1_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
6bc4677a2da4ddbbb2fce9fe4a0a48c1_JaffaCakes118.html
-
Size
59KB
-
MD5
6bc4677a2da4ddbbb2fce9fe4a0a48c1
-
SHA1
103f23f496d476f2cc180527d48286bac521b5b3
-
SHA256
87f835eaea6056ff13ff5c2ba029511c7360f94103daeef9e3ed588f0fdf0dc7
-
SHA512
941e1ab9a8addc3d68ffd01e226d94d3d7336dbc6b3600f83c939e1f8206f4a5fdf94ebd38c37f91abb1505cdf20c21f37b6a45bc7c4c9caeaa477f63411fcf2
-
SSDEEP
768:e6MrZuiPlgbNRj1Du8reH8PKA03bShRjYhRrUN5lEXxHgRB4hWrCKYbLyDBAuRDj:e6aPlWXIuRDltpYW7eU
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 4336 msedge.exe 4336 msedge.exe 2064 msedge.exe 2064 msedge.exe 3656 identity_helper.exe 3656 identity_helper.exe 4136 msedge.exe 4136 msedge.exe 4136 msedge.exe 4136 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
pid Process 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe 2064 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2064 wrote to memory of 4532 2064 msedge.exe 81 PID 2064 wrote to memory of 4532 2064 msedge.exe 81 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 836 2064 msedge.exe 82 PID 2064 wrote to memory of 4336 2064 msedge.exe 83 PID 2064 wrote to memory of 4336 2064 msedge.exe 83 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84 PID 2064 wrote to memory of 4560 2064 msedge.exe 84
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6bc4677a2da4ddbbb2fce9fe4a0a48c1_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2064 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd168946f8,0x7ffd16894708,0x7ffd168947182⤵PID:4532
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:22⤵PID:836
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:4336
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2912 /prefetch:82⤵PID:4560
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:12⤵PID:4500
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:12⤵PID:1036
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:12⤵PID:4792
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:12⤵PID:3760
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:12⤵PID:4608
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5296 /prefetch:82⤵PID:4952
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5296 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:3656
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4224 /prefetch:12⤵PID:3500
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:12⤵PID:1488
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:12⤵PID:1592
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:12⤵PID:1628
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,2062277171466075284,4994238182374382283,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5004 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:4136
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:1068
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4624
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD556641592f6e69f5f5fb06f2319384490
SHA16a86be42e2c6d26b7830ad9f4e2627995fd91069
SHA25602d4984e590e947265474d592e64edde840fdca7eb881eebde3e220a1d883455
SHA512c75e689b2bbbe07ebf72baf75c56f19c39f45d5593cf47535eb722f95002b3ee418027047c0ee8d63800f499038db5e2c24aff9705d830c7b6eaa290d9adc868
-
Filesize
152B
MD5612a6c4247ef652299b376221c984213
SHA1d306f3b16bde39708aa862aee372345feb559750
SHA2569d8e24c91cff338e56b518a533cb2e49a2803356bbf6e04892fb168a7ce2844a
SHA51234a14d63abb1e3fe0f9927a94393043d458fe0624843e108d290266f554018e6379cba924cb5388735abdd6c5f1e2e318478a673f3f9b762815a758866d10973
-
Filesize
22KB
MD55e74c6d871232d6fe5d88711ece1408b
SHA11a5d3ac31e833df4c091f14c94a2ecd1c6294875
SHA256bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105
SHA5129d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize168B
MD5eafe4215ef0a399f38da4eeb3bece7cf
SHA1046a0eab7dfd1b5590b49bbe4e328d5cf4aa2e51
SHA2564d236a566d50eade7ccc5feb7c281edb8b06c8b117e00b36f21745ced78ca807
SHA512dd8bdca5fe24295519382a246a7dddcb56e2306a21d0667d7067ab28d274e169ebb42d6aed7c3c2582ac190eeb3e5b5081cc48aa660c045ec0856a54415488d6
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize192B
MD556f24a000d1da23807be3a060c2651fa
SHA180b0b6eeb77a74512575b83aef1a00d32c14ae2e
SHA256f1f2ce83908547ca7aeeafb6797aef576c3d5211e1dd03c436e75165628a2d25
SHA5126bdc5a0d4bba4f731fcb34639ef2b1009239630cd6c5061650d89709ea1ce2902d477a1e1729cfe552421dd9ca702b6b3ad41a44ff91a674e356a14537d9bbd7
-
Filesize
111B
MD5807419ca9a4734feaf8d8563a003b048
SHA1a723c7d60a65886ffa068711f1e900ccc85922a6
SHA256aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
SHA512f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
-
Filesize
1KB
MD5552df7b7b43fdb1db24617a76953f48e
SHA1d2be66d81bffe22f27f02b5335d227b5e6760db9
SHA256f2536aacc6f6f2c1f5d43effa65b9bcb787e9476bd6f3e7f1cd76e86e5dfc5b0
SHA512d6bbfcb41faabd75e498814da7b375ec2581e078e700b7cd7b6c1a63acc40dd449fec0fa4e5cb83c66085c2fc5b478aba516060680534674da2d41a0890c03f5
-
Filesize
5KB
MD5b2e28de179739cb628d0bac588a44575
SHA1959deb9c6d970f79a44c1dcb1b363bce5c10dda3
SHA2565620b5350d763dddac1d826a7fbf8083b4d58c2dafa9435c97d4539cf0a36860
SHA5120c913f07e9bed061466d73b087005f5f0f379a7f53ea68af5264dbc09ec0a4f62f48dee1c99900bce0609ff5add34e441ec327bae55a57d93dc795839377eab6
-
Filesize
6KB
MD5dd869f537adc46dca233f8925a0836df
SHA1fa0ef9e3a1162736a95b413c5f1a0495ae2fb47b
SHA256fac16e2abf9298a77a1d749e67898cbf90fdbd7aac961543819f7c2711aee8dd
SHA5123e9d96c118c170ba75195c61d88c8d5aa8558637923b61c12479b19b2ba8618397f5fa4a79c52992f5f3ff56182c4baa383a96b5476db0f5b9df54e1e7a811c3
-
Filesize
7KB
MD569fbc4b58c59397244844fd4a0a29477
SHA1bbb142a17d1fd204f0c0c96c7ecacca92f40c20a
SHA256892519939bdea9017ad8d41441cd2ea11bc1099ffdeeaa943e82f55d67978cb3
SHA5125c2fa233fc1770c1bff0eb6b6c8e4f7312aa38b2803b8a0537f97dc93e5925b7b7e992d1709e32137394699fc7d299d0da5c9faed8c196c56a6b0dcdcceacb8e
-
Filesize
16B
MD56752a1d65b201c13b62ea44016eb221f
SHA158ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA2560861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA5129cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
-
Filesize
11KB
MD5cde263146c1755073e81d573e75fe491
SHA1831289ac8c1cc0bd0186d70a8350b980ce1dcda1
SHA256b191fccacdb7ce3e18ba39cbf80e6f7b9ad67c22ba416373d1212bb3f0792a83
SHA51263a91f2322fe568c36d4eaf8f21540b2559a9aed51dd6deae721e2eda5892878ed6f8c461f0ca702bdfcce3d076d477615f29f9534f1f66b9452fa0ed094b50e