Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
16/06/2024, 12:38
Static task
static1
Behavioral task
behavioral1
Sample
b38b7f8568fe4365ffb1e22a8ae85e72_JaffaCakes118.html
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b38b7f8568fe4365ffb1e22a8ae85e72_JaffaCakes118.html
Resource
win10v2004-20240611-en
General
-
Target
b38b7f8568fe4365ffb1e22a8ae85e72_JaffaCakes118.html
-
Size
305KB
-
MD5
b38b7f8568fe4365ffb1e22a8ae85e72
-
SHA1
5be25c91d2f517b2e6f2d44ee2171e837d57b542
-
SHA256
b172c71559000122b5adee5bbbb07b5e4e5bca882ae1ce138e54dafb26e50aa1
-
SHA512
f804fe6e019c0e271f9d1a8a2ac83c2649fbc19f2f3bcdb0d8b707577eb55bffe48a92d33b3a071f08d9587f1bb3849a7b88eea576581f3a257eff9fbcf30f8f
-
SSDEEP
1536:xBnS1+SbTTFZSjTQaNkltM/jVII3IbIre0LRCmU6oLTXJLnvKQwQ1wo3Y9dE685E:i+SbTTFtaItCVI2OtTHQxiTCh
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 4556 msedge.exe 4556 msedge.exe 1364 msedge.exe 1364 msedge.exe 4860 identity_helper.exe 4860 identity_helper.exe 4440 msedge.exe 4440 msedge.exe 4440 msedge.exe 4440 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
pid Process 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe 1364 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1364 wrote to memory of 3608 1364 msedge.exe 84 PID 1364 wrote to memory of 3608 1364 msedge.exe 84 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 2344 1364 msedge.exe 85 PID 1364 wrote to memory of 4556 1364 msedge.exe 86 PID 1364 wrote to memory of 4556 1364 msedge.exe 86 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87 PID 1364 wrote to memory of 2052 1364 msedge.exe 87
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b38b7f8568fe4365ffb1e22a8ae85e72_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1364 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffce4746f8,0x7fffce474708,0x7fffce4747182⤵PID:3608
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:22⤵PID:2344
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:4556
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2728 /prefetch:82⤵PID:2052
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:12⤵PID:4596
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:12⤵PID:3832
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:12⤵PID:1520
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:12⤵PID:5016
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5828 /prefetch:82⤵PID:1692
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5828 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4860
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:12⤵PID:3764
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:12⤵PID:3172
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:12⤵PID:4172
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:12⤵PID:2092
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,6124730802762785891,8532969821786879388,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4180 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:4440
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:1784
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4448
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD5c5abc082d9d9307e797b7e89a2f755f4
SHA154c442690a8727f1d3453b6452198d3ec4ec13df
SHA256a055d69c6aba59e97e632d118b7960a5fdfbe35cfdfaa0de14f194fc6f874716
SHA512ad765cddbf89472988de5356db5e0ee254ca3475491c6034fba1897c373702ab7cfa4bd21662ab862eebb48a757c3eb86b1f8ed58629751f71863822a59cd26c
-
Filesize
152B
MD5b4a74bc775caf3de7fc9cde3c30ce482
SHA1c6ed3161390e5493f71182a6cb98d51c9063775d
SHA256dfad4e020a946f85523604816a0a9781091ee4669c870db2cabab027f8b6f280
SHA51255578e254444a645f455ea38480c9e02599ebf9522c32aca50ff37aad33976db30e663d35ebe31ff0ecafb4007362261716f756b3a0d67ac3937ca62ff10e25f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize120B
MD520eb8207e560a95e0d163f88662b9a40
SHA19ce24b52b1f64ef1ed5655ecb3f9a07f3e8c3534
SHA256b1e0bb3f94bc4ab919ba8c9c9404cddff860e1825a2ff01913e911324d9deef1
SHA512b979b1f82b11831729cac46f1ce781dd35ae7bc08bc14ceab9e7016d2a9940cd3e865a09b0cbf39f38a332c99fa60b6fd87415df378e433a88c69acc2b86d3b8
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize144B
MD53799d70aa3ae966eb362fc696726445b
SHA1c7a58d4013aacf11ea0ec3a44945ac2e4c0f110b
SHA2564d05419aafc1eff580fac5f20cf03eb78ee0cb39f48df4389290bfd4e2e03c1a
SHA5122d8f38e9d1e27aa948391a0f9127be5e0a2ede46958e2ad2259ac9b56ed1cf6b5c7c4a1ebf44ff53dfe042d4c26c93d284959a4762141f1975cb09e6dc71591e
-
Filesize
1KB
MD59b616f806a17c6321ce392aabfe0fb5e
SHA1ca3486202fc31aa740be1a76aa33c61d8171d6d5
SHA2568145ca4bd797eea8954cffab0ffecb7e24da205d7819cfa6074b9c17a96daa2c
SHA5122f4197cf56cd67306fc0366dc2db52996a50be8151e5f3ad13b20dcde5fa7e020a3c1462d851baa897875b146580bed8f9cb28ea712b0327b86fad012c53334f
-
Filesize
6KB
MD51676fd7e478fef72c29b05caa99f4a3f
SHA129edf40323f78e81cfa92a8184fa44e7c193cdac
SHA2568c82ab15eae97b428278a54ddeafb840cfd3bac0e8b8928f4e925580f6d62c25
SHA51286c0b1b9beef9787ce38d3315916d7d1310cc2852d7acc8f6914064f0fa9a3aecd34f615ec84d049c4ca7de3594bc85d371ea7e8897fffae9ecb98ecfebf09b7
-
Filesize
6KB
MD5485c482a24561a42e92123e9b4fa2916
SHA198eeaafd9831bcb5a0509b79116353512bc75fca
SHA256b220f6b692342b21743a39c600463c8584e67e36dae6a5fddfc8ba4c95d9657a
SHA512ce1b33ba05f5784ddb2d87a4ca016511698d7626077dff9f2940020ab78f099b102a1d71bc5f6c68452b808eb507278e185af10073570a666ce17cbd30a3e774
-
Filesize
7KB
MD5368d230b6ac79df477c27d4a0a1bc126
SHA1f8af9baad44c271374dbbcc229867607d3a97e24
SHA25602d1e67b8fd9d923261be283f93fac55a579e5d8e990eeef9433a929177ad65a
SHA512d4c0884d5e3720d35ead9419fae36f406533ac2be298501709aaf5166ded1aafed9f0ce737bd1b7fe554dbc7c50b1e0a4f8f6bcc418f0818f3bd5651ae2fb0d2
-
Filesize
7KB
MD5eb7f61a3dbf9b2aa3b2f9c394a4fadc8
SHA130778e9cca569d1c899995e8a4e4c15118e74534
SHA25612cb6489bcc504f621aae777d1729b62c45b307670825e5c1d5f121ca1a9c0cb
SHA512deaaf5f83860f276b9d1b52aa0fd988007799d7cac7643f7c82dee3b406a7d7203465036b626d43a9fc843d823eaa032acd3007d8be9533ee7f1091ed29a8d45
-
Filesize
704B
MD5da20695167752fd8c4c84c69bead57d2
SHA1d3494d66efa3e3d1e4aaab50f792d1614f2aa965
SHA2561d0456e3352881136ac646b2c493d47fd326e2872aac392c6df7cff55bb83bcb
SHA51285ed7e7bc34e514f0f5cc0e4b95a91280fc0efdd9343c30233d835816af19ff6c5766a55b28b2da69ea3cc0ead52345b1e0de423c0128547caa045bb391d6add
-
Filesize
203B
MD5c638b0bfbf9d55a48b20a0c6946c6803
SHA1b65311e43e85f24e95923965deaf07f017544809
SHA2561c1e0f61f47c0245faf21c8ca5079d86c554b24c88dcaab7b18deeaaac8823d8
SHA5121afd3603281cef425f510cc23dee270504c904b8c7b1215667391645a5c02a45e809b04fc2b026e723f7059408087012e906c4406483e85f7eac3687c1f0df1d
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
11KB
MD5a9178443fa4922b74bb721a71b44c789
SHA1418efdd6e1274d83b528b5901a72b9616685966f
SHA25614782a79d6f705f8bd14ecc992f117011db89561c2066e5041978a92bcefdcf2
SHA512b3988d382d7d756c851e00d14b8c63b240d6e81992bbf4e1dce4cbcd433345d3504a5038b3b83190e503864c02dc7bf58aa57adb28fba6f57c7a74dd270d0be5