Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
03/06/2024, 08:00
Static task
static1
Behavioral task
behavioral1
Sample
91092185a94e0f786a0a33c9b9bb008b_JaffaCakes118.html
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
91092185a94e0f786a0a33c9b9bb008b_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
91092185a94e0f786a0a33c9b9bb008b_JaffaCakes118.html
-
Size
144KB
-
MD5
91092185a94e0f786a0a33c9b9bb008b
-
SHA1
283c471965d3a2e7f11d2ce76f55f26e030f44ad
-
SHA256
eea20789c9e895a911f26f09f916e43ad81e5db7a3b5f20c028b2112d0045765
-
SHA512
5f3dcc068268f155aed6d17cf119370f8265e8af4ca44b597eae6de98335eb225a76407cc111a73976b72373f63434349161f7caad68fd633e5d3072fd7467e7
-
SSDEEP
3072:dHhfaWYF1fp6wCpcg2ccKz/eHjo3jAucr3p7V6TPUeyrA6xWeFLtK9w:5hfaWYF1fp6wCpcg2ccKz/eHjo3jAT62
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe -
Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 3488 msedge.exe 3488 msedge.exe 4604 msedge.exe 4604 msedge.exe 4536 identity_helper.exe 4536 identity_helper.exe 4092 msedge.exe 4092 msedge.exe 4092 msedge.exe 4092 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs
pid Process 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe 4604 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4604 wrote to memory of 5092 4604 msedge.exe 84 PID 4604 wrote to memory of 5092 4604 msedge.exe 84 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3732 4604 msedge.exe 85 PID 4604 wrote to memory of 3488 4604 msedge.exe 86 PID 4604 wrote to memory of 3488 4604 msedge.exe 86 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87 PID 4604 wrote to memory of 4400 4604 msedge.exe 87
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\91092185a94e0f786a0a33c9b9bb008b_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4604 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa088046f8,0x7ffa08804708,0x7ffa088047182⤵PID:5092
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:22⤵PID:3732
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:3488
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:82⤵PID:4400
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:12⤵PID:2180
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:12⤵PID:1204
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:12⤵PID:2940
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:12⤵PID:232
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:12⤵PID:1892
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4816 /prefetch:12⤵PID:3208
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:12⤵PID:4848
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5372 /prefetch:12⤵PID:4928
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4840 /prefetch:82⤵PID:3248
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4840 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4536
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:12⤵PID:4404
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:12⤵PID:2408
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:12⤵PID:4736
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5848 /prefetch:12⤵PID:1700
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2172,7515896333011479194,8726197936434946819,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3928 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:4092
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:2436
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:664
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD556641592f6e69f5f5fb06f2319384490
SHA16a86be42e2c6d26b7830ad9f4e2627995fd91069
SHA25602d4984e590e947265474d592e64edde840fdca7eb881eebde3e220a1d883455
SHA512c75e689b2bbbe07ebf72baf75c56f19c39f45d5593cf47535eb722f95002b3ee418027047c0ee8d63800f499038db5e2c24aff9705d830c7b6eaa290d9adc868
-
Filesize
152B
MD5612a6c4247ef652299b376221c984213
SHA1d306f3b16bde39708aa862aee372345feb559750
SHA2569d8e24c91cff338e56b518a533cb2e49a2803356bbf6e04892fb168a7ce2844a
SHA51234a14d63abb1e3fe0f9927a94393043d458fe0624843e108d290266f554018e6379cba924cb5388735abdd6c5f1e2e318478a673f3f9b762815a758866d10973
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize120B
MD517500680949eb7dffbee855b536745e6
SHA1bba78e112308700b20e8e75c456fc0892ebedcdb
SHA256006aa1209e3b0bbfc823b45fbba10f3a3d40b51401085da04fbcfa3e5e993c41
SHA512ef1429ce63b8d2cf46197df070f0efc841923d9b2608eb4b0aeae844986ca42f8bc99dd53e81ce9e21ce8a5ecee2690f0840c33f4ae0d48eeecef57f18ef3a0d
-
Filesize
2KB
MD528ff43e87bf9934057dadb7f515f05a2
SHA1c74cfe4fab19050c7ce0fa0bcb85d5eefb01fd65
SHA2562ad6a007154b45b801861ddad122b480fbb1ea5cb4c2bded62c155979910351d
SHA512a53d830aa33a3826c200fef2f1d4f35dd1b306ac10e1bfbca5e719c64f049b3bf19d9542a502b780c1f084d3e8e44baa738ad6358d13c47ddd8d011d00d3cd77
-
Filesize
5KB
MD5625fa28aebc09d0bb2672a914f3e3583
SHA18fb0407e581e29c4d4b0cfb50f663663f36625d9
SHA25693f3d86fd61e317c3b161632c9a5c8622344f185ee59f89111b2a42f4eba191e
SHA512803613bdfa3ea5cdb27fba0d98dc6f0fe03cd3e145068a814b7e6dd48a46013d7ee2aafb0dd3c620edaf3c6601a09d42e3540013be1c58761f7fc6137b125397
-
Filesize
7KB
MD5a815b7a966574579638e7baec89a055c
SHA1f4e0ca92a248083f7769e3acf777dd5b7669945e
SHA256da80d57988f1eada0cff61450d4f7d040f25411f7b3f9b1e1be40b8a1a0ff7c2
SHA51218be3961e6ce36e72e26ec58466af60c4d50a4b399cbc584179a28c5fb5a3da68cbd09cbb01b3bcdf1c7fea5a85d20a3361614b5c0727f7c550e0202af9ecb37
-
Filesize
16B
MD56752a1d65b201c13b62ea44016eb221f
SHA158ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA2560861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA5129cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
-
Filesize
11KB
MD563dfc86e5b10c9693af29cd5238af1e4
SHA1e13740826aca58ef677d15c5cdf89d0cb3980ccd
SHA25680d7670db6b73f49822aa69f9d928a3f544e0c91ceab26742e7d1777550557e1
SHA51284b15ac967a59c0f4aef65288d9af8be7328438a8b817c388d8d3eb392471518485454197378672ea7e386719041978e63263b000eb2ef0b54a88448acebf4a8