Analysis
-
max time kernel
145s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
25/08/2024, 09:51
Static task
static1
Behavioral task
behavioral1
Sample
c07a405a288f26a242d95a708bda2fc5_JaffaCakes118.html
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c07a405a288f26a242d95a708bda2fc5_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
c07a405a288f26a242d95a708bda2fc5_JaffaCakes118.html
-
Size
176KB
-
MD5
c07a405a288f26a242d95a708bda2fc5
-
SHA1
eafbd8c548c48e5f284f0926db6fa8b2ce4c5304
-
SHA256
1f049bd52fac4394d270c102d394026167a6e7eb6bafeacba61752be554724b0
-
SHA512
1c416914040bd41cc183a77edff629b50af972c2525898607b0aaff317a84f6d7edc83b05dd1ac181dc28d795915e6d7819ebda97249af6b65895f61e37baf7d
-
SSDEEP
1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3FGNkF5YfBCJiZq+aeTH+WK/Lf1/hpnVSV:S9CT3F/FcBCJi1B
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 2724 msedge.exe 2724 msedge.exe 1632 msedge.exe 1632 msedge.exe 2044 identity_helper.exe 2044 identity_helper.exe 2684 msedge.exe 2684 msedge.exe 2684 msedge.exe 2684 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
pid Process 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe 1632 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1632 wrote to memory of 828 1632 msedge.exe 84 PID 1632 wrote to memory of 828 1632 msedge.exe 84 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 3128 1632 msedge.exe 85 PID 1632 wrote to memory of 2724 1632 msedge.exe 86 PID 1632 wrote to memory of 2724 1632 msedge.exe 86 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87 PID 1632 wrote to memory of 2432 1632 msedge.exe 87
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c07a405a288f26a242d95a708bda2fc5_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1632 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff515b46f8,0x7fff515b4708,0x7fff515b47182⤵PID:828
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:22⤵PID:3128
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:2724
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2628 /prefetch:82⤵PID:2432
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:12⤵PID:4656
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:12⤵PID:3496
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:12⤵PID:964
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:12⤵PID:4652
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:12⤵PID:4564
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:12⤵PID:2340
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6116 /prefetch:82⤵PID:3316
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6116 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:2044
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:12⤵PID:3264
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:12⤵PID:1760
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:12⤵PID:5264
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3436 /prefetch:12⤵PID:5272
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,18240397287272407925,8382788659709566317,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4908 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:2684
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4924
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:832
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3296
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD5f9664c896e19205022c094d725f820b6
SHA1f8f1baf648df755ba64b412d512446baf88c0184
SHA2567121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e
SHA5123fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae
-
Filesize
152B
MD5847d47008dbea51cb1732d54861ba9c9
SHA1f2099242027dccb88d6f05760b57f7c89d926c0d
SHA25610292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1
SHA512bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize408B
MD5cc26ce05e384a1d79d5ffe1244590405
SHA12a428c71174b4d0829d39061823d286e68de152c
SHA256abcac9479573a39c686599250cebe1af2337d8a542fbb1e3e0d04640e4ceb38f
SHA51224be50aa1b4d95189cb33cafd4ac057186372c45b4248f5eda8a4aaecb07d56dac4a8c3a3f3da16257445e84b8cc73ccb88cfcc38f9711e3b06c5df865be6dd5
-
Filesize
111B
MD5285252a2f6327d41eab203dc2f402c67
SHA1acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA2565dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA51211ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
-
Filesize
2KB
MD5bd2ed0be39da0ee4f25c355356308f9e
SHA1ea789de1b409fd0354843984e022d77eff7912e1
SHA256c97902feeeffca2db1a06b0e754a08519551a26c071532be34418bdf407b767f
SHA512cb90413659cdf7f0238bc157521254367ce0e7b801201abf7b86b5d6184d8270cfcb2278c87194ffdd1fbbe2d89706dcbdbe484ba98b7f49f617b61af523f29d
-
Filesize
2KB
MD53f5f1267a45a7712a206e3bbdc2adb2a
SHA1270872afb84f5cd7eedd750525f2fc48b6b7b625
SHA2566f5129dab05c60541a354f6600bc6a3f75709838abc1eabe9b5cffa95ca52044
SHA5121800cfe797344794b11fd11effccc0cc9f12f22bc25801fc0c9d29e21fba6cb69a6308c23db36d8d6bdeef0566accbde584867607f8abf1f1dfe21bd7be8d8f0
-
Filesize
5KB
MD5d0ce86272a48f1182921d31f3a95d1b2
SHA1ad97e14e9d3f740e3741a294849cc7d8bd981449
SHA256f4ea5ceba55b2e0156e04924129e1c15b8c4aa924a373d4f38978af6a49313e5
SHA5129b9f1887ab354d5e5eb40a1cb86b4ca20c7a88c8e088b20c8148a015361e34dac30a8bac4daea637aea2a3e6aca7533f2f21fb415e6dd18747ce0ac91cf77f11
-
Filesize
7KB
MD5bf26d65ac6869ca3c8a8a52a3610d8ab
SHA14a3706876215cdcbed205ac548ad9834b8a3bc1c
SHA256b141871575e18175b8dfa021b3f8b5fc06c1e5fcf4b98356b4d45c52f46982db
SHA512c399d82b74d6acf9901b782d3eeba189b48cee742b675c9408c01810c2a79d88706b77380b03f17001e384df49a84ba39686c0485ad74c0f88c955ed84248990
-
Filesize
16B
MD56752a1d65b201c13b62ea44016eb221f
SHA158ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA2560861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA5129cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
-
Filesize
10KB
MD5ac7bcc5e36cf7d81993ddb19c63f57f3
SHA138d2b1a9ecaa3b82fb7accb38646727aad2a6dc5
SHA2567cf41b2aa07eaa7b2b3b880c6307c479b56aea1fcae27252c92166f23916aba8
SHA512287c30ef35e8a022078a46e63d9e4d76ad8c1f80cf6bc00c27123e92456002ca5c7254e0e42aa3c201dfa9ec3406fa70957ae7802ed0150fc22bd07ce66bcd8c