Overview
overview
10Static
static
10GlobalProt...th.dll
windows7-x64
1GlobalProt...th.dll
windows10-2004-x64
1GlobalProt...64.dll
windows7-x64
1GlobalProt...64.dll
windows10-2004-x64
1GlobalProt...ip.dll
windows7-x64
1GlobalProt...ip.dll
windows10-2004-x64
1GlobalProt...fs.jar
windows7-x64
1GlobalProt...fs.jar
windows10-2004-x64
1GlobalProt...er.jar
windows7-x64
1GlobalProt...er.jar
windows10-2004-x64
1GlobalProt...ce.dll
windows7-x64
3GlobalProt...ce.dll
windows10-2004-x64
3GlobalProt...ce.dll
windows7-x64
5GlobalProt...ce.dll
windows10-2004-x64
5GlobalProt...n.html
windows7-x64
3GlobalProt...n.html
windows10-2004-x64
5GlobalProt...EN.exe
windows7-x64
1GlobalProt...EN.exe
windows10-2004-x64
1GlobalProt...N.html
windows7-x64
3GlobalProt...N.html
windows10-2004-x64
5GlobalProt...W.html
windows7-x64
3GlobalProt...W.html
windows10-2004-x64
5GlobalProt...im.dll
windows7-x64
5GlobalProt...im.dll
windows10-2004-x64
5GlobalProt...sc.dll
windows7-x64
5GlobalProt...sc.dll
windows10-2004-x64
5GlobalProt....1.jar
windows7-x64
1GlobalProt....1.jar
windows10-2004-x64
1GlobalProt....0.jar
windows7-x64
7GlobalProt....0.jar
windows10-2004-x64
7GlobalProt....0.jar
windows7-x64
1GlobalProt....0.jar
windows10-2004-x64
1Analysis
-
max time kernel
1233s -
max time network
1689s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
26/07/2024, 09:06
Behavioral task
behavioral1
Sample
GlobalProtect64/jre/bin/w2k_lsa_auth.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
GlobalProtect64/jre/bin/w2k_lsa_auth.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral3
Sample
GlobalProtect64/jre/bin/windowsaccessbridge-64.dll
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
GlobalProtect64/jre/bin/windowsaccessbridge-64.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral5
Sample
GlobalProtect64/jre/bin/zip.dll
Resource
win7-20240708-en
Behavioral task
behavioral6
Sample
GlobalProtect64/jre/bin/zip.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral7
Sample
GlobalProtect64/jre/lib/jrt-fs.jar
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
GlobalProtect64/jre/lib/jrt-fs.jar
Resource
win10v2004-20240709-en
Behavioral task
behavioral9
Sample
GlobalProtect64/launcher.jar
Resource
win7-20240708-en
Behavioral task
behavioral10
Sample
GlobalProtect64/launcher.jar
Resource
win10v2004-20240709-en
Behavioral task
behavioral11
Sample
GlobalProtect64/lib32/RTDService.dll
Resource
win7-20240708-en
Behavioral task
behavioral12
Sample
GlobalProtect64/lib32/RTDService.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral13
Sample
GlobalProtect64/lib64/RTDService.dll
Resource
win7-20240705-en
Behavioral task
behavioral14
Sample
GlobalProtect64/lib64/RTDService.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral15
Sample
GlobalProtect64/license_en.html
Resource
win7-20240705-en
Behavioral task
behavioral16
Sample
GlobalProtect64/license_en.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral17
Sample
GlobalProtect64/license_us_EN.exe
Resource
win7-20240705-en
Behavioral task
behavioral18
Sample
GlobalProtect64/license_us_EN.exe
Resource
win10v2004-20240709-en
Behavioral task
behavioral19
Sample
GlobalProtect64/license_zh_CN.html
Resource
win7-20240708-en
Behavioral task
behavioral20
Sample
GlobalProtect64/license_zh_CN.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral21
Sample
GlobalProtect64/license_zh_TW.html
Resource
win7-20240704-en
Behavioral task
behavioral22
Sample
GlobalProtect64/license_zh_TW.html
Resource
win10v2004-20240709-en
Behavioral task
behavioral23
Sample
GlobalProtect64/npthinkorswim.dll
Resource
win7-20240704-en
Behavioral task
behavioral24
Sample
GlobalProtect64/npthinkorswim.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral25
Sample
GlobalProtect64/nptossc.dll
Resource
win7-20240704-en
Behavioral task
behavioral26
Sample
GlobalProtect64/nptossc.dll
Resource
win10v2004-20240709-en
Behavioral task
behavioral27
Sample
GlobalProtect64/suit/1979.1.503/VeracodeAnnotations-1.2.1.jar
Resource
win7-20240708-en
Behavioral task
behavioral28
Sample
GlobalProtect64/suit/1979.1.503/VeracodeAnnotations-1.2.1.jar
Resource
win10v2004-20240709-en
Behavioral task
behavioral29
Sample
GlobalProtect64/suit/1979.1.503/jna-5.7.0.jar
Resource
win7-20240708-en
Behavioral task
behavioral30
Sample
GlobalProtect64/suit/1979.1.503/jna-5.7.0.jar
Resource
win10v2004-20240709-en
Behavioral task
behavioral31
Sample
GlobalProtect64/suit/1979.1.503/jna-platform-5.7.0.jar
Resource
win7-20240704-en
Behavioral task
behavioral32
Sample
GlobalProtect64/suit/1979.1.503/jna-platform-5.7.0.jar
Resource
win10v2004-20240709-en
General
-
Target
GlobalProtect64/license_zh_CN.html
-
Size
403B
-
MD5
b44a3b3bff9b6112fd91d0044d714766
-
SHA1
cfe32d1a1183407caa77ab5d93f2783eb746b0d7
-
SHA256
72f47e9a733674019af0539aba9869adbb48ee0482afbd92cba05be78173d766
-
SHA512
db63df5bbaf485fc8ec8775fe674eebd3c98c5acedd4ddad2f8ce3244edd1bf44b174826e0cbe96b557ba480ce496ff3add5b95f3e008b053d7782b422ea45ea
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe Token: SeShutdownPrivilege 2624 chrome.exe -
Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe -
Suspicious use of SendNotifyMessage 32 IoCs
pid Process 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe 2624 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 2624 wrote to memory of 2076 2624 chrome.exe 30 PID 2624 wrote to memory of 2076 2624 chrome.exe 30 PID 2624 wrote to memory of 2076 2624 chrome.exe 30 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2696 2624 chrome.exe 32 PID 2624 wrote to memory of 2588 2624 chrome.exe 33 PID 2624 wrote to memory of 2588 2624 chrome.exe 33 PID 2624 wrote to memory of 2588 2624 chrome.exe 33 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34 PID 2624 wrote to memory of 2532 2624 chrome.exe 34
Processes
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\GlobalProtect64\license_zh_CN.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2624 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef72b9758,0x7fef72b9768,0x7fef72b97782⤵PID:2076
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1160 --field-trial-handle=1348,i,13676048270239074165,1032819470972569225,131072 /prefetch:22⤵PID:2696
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1504 --field-trial-handle=1348,i,13676048270239074165,1032819470972569225,131072 /prefetch:82⤵PID:2588
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1600 --field-trial-handle=1348,i,13676048270239074165,1032819470972569225,131072 /prefetch:82⤵PID:2532
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2208 --field-trial-handle=1348,i,13676048270239074165,1032819470972569225,131072 /prefetch:12⤵PID:2972
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2220 --field-trial-handle=1348,i,13676048270239074165,1032819470972569225,131072 /prefetch:12⤵PID:948
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1424 --field-trial-handle=1348,i,13676048270239074165,1032819470972569225,131072 /prefetch:22⤵PID:776
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2912 --field-trial-handle=1348,i,13676048270239074165,1032819470972569225,131072 /prefetch:82⤵PID:1524
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:1140
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
-
Filesize
4KB
MD5900cb8ddff7e9889c6b24801a8dca676
SHA176d75d7a948b9d1b7dad222e1046e49f6f663d0e
SHA2565574ef5a83508767b78821ce3df86b9e2b653d38bbf39dc774ddcd8ad6a93515
SHA5122295a67b6ea342fb4a90fc08108f6e3678bcab85ee41221403bec1de7e3fe2d69d6d7bab7b475d63ffd8248873fd0c75451598cf3a3118ef9c8afef3f1b372cf
-
Filesize
4KB
MD534128e136937ef32e327a0312f6c5429
SHA1fb552df7a6cf4e94c490548a4941c039fff713b2
SHA2561c4dad5e15c8187458c629aeac979fe2966f0652569b50d1ec9308a83bc158ac
SHA512ccf23bdab06ee74a4af0f5c529dbac9ddba95b357d01c1da5d6f146940e37a6cd12dda2ac1a6b80a841963a2adf67d6c0fb93fb3f25c330e0aafd0f880d7c633
-
Filesize
16B
MD518e723571b00fb1694a3bad6c78e4054
SHA1afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA2568af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
SHA51243bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2