Overview
overview
5Static
static
3BetterDisc...ws.exe
windows7-x64
5BetterDisc...ws.exe
windows10-2004-x64
5$PLUGINSDI...ge.dll
windows7-x64
1$PLUGINSDI...ge.dll
windows10-2004-x64
1$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3BetterDiscord.exe
windows7-x64
5BetterDiscord.exe
windows10-2004-x64
5LICENSES.c...m.html
windows7-x64
1LICENSES.c...m.html
windows10-2004-x64
1d3dcompiler_47.dll
windows10-2004-x64
3ffmpeg.dll
windows7-x64
1ffmpeg.dll
windows10-2004-x64
1libEGL.dll
windows7-x64
1libEGL.dll
windows10-2004-x64
1libGLESv2.dll
windows7-x64
3libGLESv2.dll
windows10-2004-x64
3resources/app.js
windows7-x64
3resources/app.js
windows10-2004-x64
3swiftshade...GL.dll
windows7-x64
1swiftshade...GL.dll
windows10-2004-x64
1swiftshade...v2.dll
windows7-x64
1swiftshade...v2.dll
windows10-2004-x64
1vk_swiftshader.dll
windows7-x64
1vk_swiftshader.dll
windows10-2004-x64
1vulkan-1.dll
windows7-x64
3vulkan-1.dll
windows10-2004-x64
3Analysis
-
max time kernel
145s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
19-07-2024 23:25
Static task
static1
Behavioral task
behavioral1
Sample
BetterDiscord-Windows.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
BetterDiscord-Windows.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/BgImage.dll
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/BgImage.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20240704-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
BetterDiscord.exe
Resource
win7-20240705-en
Behavioral task
behavioral10
Sample
BetterDiscord.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
LICENSES.chromium.html
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
LICENSES.chromium.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
d3dcompiler_47.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral14
Sample
ffmpeg.dll
Resource
win7-20240705-en
Behavioral task
behavioral15
Sample
ffmpeg.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral16
Sample
libEGL.dll
Resource
win7-20240704-en
Behavioral task
behavioral17
Sample
libEGL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral18
Sample
libGLESv2.dll
Resource
win7-20240705-en
Behavioral task
behavioral19
Sample
libGLESv2.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral20
Sample
resources/app.js
Resource
win7-20240704-en
Behavioral task
behavioral21
Sample
resources/app.js
Resource
win10v2004-20240709-en
Behavioral task
behavioral22
Sample
swiftshader/libEGL.dll
Resource
win7-20240708-en
Behavioral task
behavioral23
Sample
swiftshader/libEGL.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral24
Sample
swiftshader/libGLESv2.dll
Resource
win7-20240705-en
Behavioral task
behavioral25
Sample
swiftshader/libGLESv2.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral26
Sample
vk_swiftshader.dll
Resource
win7-20240705-en
Behavioral task
behavioral27
Sample
vk_swiftshader.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral28
Sample
vulkan-1.dll
Resource
win7-20240704-en
Behavioral task
behavioral29
Sample
vulkan-1.dll
Resource
win10v2004-20240709-en
General
-
Target
LICENSES.chromium.html
-
Size
5.1MB
-
MD5
6b84319ee8a0a0af690273d3d2dcbaf4
-
SHA1
857ca353e0582d100dcbc6cb6761bb4430d0cb90
-
SHA256
fc2a256467fb4d4ff72be6c423e5961e98b418554deeec296aded0e757b9a585
-
SHA512
26f9842bfdb429ef132cc1a930da9187071a339927eda402e8d54b5eb9e03067612cdadc3a2dad3d0977f8e6af18c05eab6ac91720221c6a0104f96638f85a8a
-
SSDEEP
24576:yd97B+mnLiLsrDy2VrErjKCqzkU98wwg3QeXuh:0P+mLAqHBCuRoeS
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
Processes:
msedge.exedescription ioc process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Suspicious behavior: EnumeratesProcesses 10 IoCs
Processes:
msedge.exemsedge.exeidentity_helper.exemsedge.exepid process 5056 msedge.exe 5056 msedge.exe 332 msedge.exe 332 msedge.exe 1480 identity_helper.exe 1480 identity_helper.exe 4108 msedge.exe 4108 msedge.exe 4108 msedge.exe 4108 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
Processes:
msedge.exepid process 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
Processes:
msedge.exepid process 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
Processes:
msedge.exepid process 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe 332 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
msedge.exedescription pid process target process PID 332 wrote to memory of 1016 332 msedge.exe msedge.exe PID 332 wrote to memory of 1016 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5076 332 msedge.exe msedge.exe PID 332 wrote to memory of 5056 332 msedge.exe msedge.exe PID 332 wrote to memory of 5056 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe PID 332 wrote to memory of 4736 332 msedge.exe msedge.exe
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\LICENSES.chromium.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:332 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd5f9346f8,0x7ffd5f934708,0x7ffd5f9347182⤵PID:1016
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:22⤵PID:5076
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:5056 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2668 /prefetch:82⤵PID:4736
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:12⤵PID:2868
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:12⤵PID:956
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4676 /prefetch:82⤵PID:1816
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4676 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:1480 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5152 /prefetch:12⤵PID:632
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:12⤵PID:3608
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:12⤵PID:3236
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:12⤵PID:4660
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,9598011556081741042,5192805837107729241,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2220 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:4108
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4208
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4928
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD5bafce9e4c53a0cb85310891b6b21791b
SHA15d70027cc137a7cbb38f5801b15fd97b05e89ee2
SHA25671fb546b5d2210a56e90b448ee10120cd92c518c8f79fb960f01b918f89f2b00
SHA512c0e4d3eccc0135ac92051539a18f64b8b8628cfe74e5b019d4f8e1dcbb51a9b49c486a1523885fe6be53da7118c013852e753c26a5490538c1e721fd0188836c
-
Filesize
152B
MD5a499254d6b5d91f97eb7a86e5f8ca573
SHA103dbfebfec8c94a9c06f9b0cd81ebe0a2b8be3d1
SHA256fb87b758c2b98989df851380293ff6786cb9a5cf2b3a384cec70d9f3eb064499
SHA512d7adcc76d0470bcd68d7644de3c8d2b6d61df8485979a4752ceea3df4d85bd1c290f72b3d8d5c8d639d5a10afa48d80e457f76b44dd8107ac97eb80fd98c7b0c
-
Filesize
5KB
MD55ff19c957b4d1ee114823a53dfcc1fc8
SHA18cc4f0da51ab00d4a267e705726c768c84ea37b4
SHA2565fb1cca0e3277d3b6f33f310d1a5711b3e7ec40fde463bc216e78fb9b6fbe81d
SHA51263a0654b05b27f76010aafd555cdcb300896a8ce25997fac9663686c113a9ff9153a363b042ae30713db09a22b8335f01092b7f0d1068f30d0a003a90931d88d
-
Filesize
6KB
MD5549915c2b32b9cc53c2aace24391d619
SHA17af60bc3d61ce255ea2e57f228fc47fdc2db4637
SHA256ea8cf440062fd59d03035f8eb206892bce40057afd453292039f94229e4ce972
SHA5126a147db78f458255b58776610d9478292ea62e87b9a531214b16680ffb59f85e3c97bddc2875dc076b0f562b295d208f5cf71101373bf8b2f31d1c3680e46469
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
11KB
MD5e740f21b1688e1300e30fe27c9d49f44
SHA15c8f81c787ef2a0618ef1e26be8128e3285e8915
SHA256d3c0eb05bce1082c79c8b0b73f680fef2cb8338499204e9be801417adcd7527e
SHA512634f02dbbffa389c72f7ba58dc832d7dbb63a87df763a642e6795685fca965af317142248a4d0a47e2e5cc16c6fa2b57710354421a658b21bc1532528fc690c5
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e