Overview
overview
7Static
static
7d0fef0a79c...18.exe
windows7-x64
7d0fef0a79c...18.exe
windows10-2004-x64
7$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows7-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3SlgClientS...ts.exe
windows7-x64
7SlgClientS...ts.exe
windows10-2004-x64
7Uninstall.exe
windows7-x64
7Uninstall.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3aminstall.dll
windows7-x64
3aminstall.dll
windows10-2004-x64
3fmod.dll
windows7-x64
7fmod.dll
windows10-2004-x64
7gd204.dll
windows7-x64
3gd204.dll
windows10-2004-x64
3granny_download.exe
windows7-x64
7granny_download.exe
windows10-2004-x64
7help/controls.htm
windows7-x64
3help/controls.htm
windows10-2004-x64
3help/credits.htm
windows7-x64
3help/credits.htm
windows10-2004-x64
Analysis
-
max time kernel
145s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
07/09/2024, 03:37
Behavioral task
behavioral1
Sample
d0fef0a79c28f97c5df3e1ba89d06437_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d0fef0a79c28f97c5df3e1ba89d06437_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/Dialer.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/Dialer.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240729-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240704-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
SlgClientServicesRedists.exe
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
SlgClientServicesRedists.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
Uninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral18
Sample
Uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
aminstall.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
aminstall.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral23
Sample
fmod.dll
Resource
win7-20240903-en
Behavioral task
behavioral24
Sample
fmod.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral25
Sample
gd204.dll
Resource
win7-20240708-en
Behavioral task
behavioral26
Sample
gd204.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral27
Sample
granny_download.exe
Resource
win7-20240903-en
Behavioral task
behavioral28
Sample
granny_download.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral29
Sample
help/controls.htm
Resource
win7-20240729-en
Behavioral task
behavioral30
Sample
help/controls.htm
Resource
win10v2004-20240802-en
Behavioral task
behavioral31
Sample
help/credits.htm
Resource
win7-20240903-en
Behavioral task
behavioral32
Sample
help/credits.htm
Resource
win10v2004-20240802-en
General
-
Target
help/controls.htm
-
Size
4KB
-
MD5
7cc1a293a0f16c0bdb1ed1b8be1b7d90
-
SHA1
da10b6d92a51e551f3f5fafae8f65744b74140ef
-
SHA256
7abfe76492743fbaac3af69e4e47e1165966c56131c708f98e3dbcc853fac41c
-
SHA512
5a83baa14a1db3396f347da47257b2207ec3aacf68d4a713120d5de3de709025ec6f1149429a08426c7645d14fbeff349b8ce9dfe86f408dfdeb9f9bc17fc157
-
SSDEEP
96:nhYA5wmaaPCCM/7MGi7oruFHz2da81GruFdVouh76v/Q5yN58105aYbyGAI3t:nhYAO7p6FHz2da/6FdVouh76v/Q5yx51
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe -
Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 2248 msedge.exe 2248 msedge.exe 408 msedge.exe 408 msedge.exe 3608 identity_helper.exe 3608 identity_helper.exe 4900 msedge.exe 4900 msedge.exe 4900 msedge.exe 4900 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs
pid Process 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe 408 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 408 wrote to memory of 2604 408 msedge.exe 83 PID 408 wrote to memory of 2604 408 msedge.exe 83 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 5060 408 msedge.exe 84 PID 408 wrote to memory of 2248 408 msedge.exe 85 PID 408 wrote to memory of 2248 408 msedge.exe 85 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86 PID 408 wrote to memory of 4076 408 msedge.exe 86
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\help\controls.htm1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:408 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffc77046f8,0x7fffc7704708,0x7fffc77047182⤵PID:2604
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:22⤵PID:5060
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:2248
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2768 /prefetch:82⤵PID:4076
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:12⤵PID:3376
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:12⤵PID:1568
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4556 /prefetch:82⤵PID:3768
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4556 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:3608
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:12⤵PID:4972
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:12⤵PID:1092
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:12⤵PID:4624
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:12⤵PID:3624
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,1218802992778024400,10131979240570732104,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4260 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:4900
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3600
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4576
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD5d7114a6cd851f9bf56cf771c37d664a2
SHA1769c5d04fd83e583f15ab1ef659de8f883ecab8a
SHA256d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e
SHA51233bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8
-
Filesize
152B
MD5719923124ee00fb57378e0ebcbe894f7
SHA1cc356a7d27b8b27dc33f21bd4990f286ee13a9f9
SHA256aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808
SHA512a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc
-
Filesize
5KB
MD559aef74f0c5555cb30cf42b73d62b24d
SHA17c60ff0d49e090c8c020071570065e773e8b67e0
SHA25686a47bdcc50cff7ab18a348b14b6d2d7965d2d1009afdd0d191896e9236d3706
SHA512616fcb09bcc5dbba81b0875998ad302b7e087b9d5e1f3bda488cb964418c6bb1f51aac814da167c6ee19fe061d484b56dc9ac72a35bc907c53a09c9048fde2cd
-
Filesize
6KB
MD5f0304445de2821a2656f49d4b75610c5
SHA13ddbd22dab108fa4ebe2a5622f03a211b958959c
SHA256a724146347efe754545fb3de7d805d5ac4e177d9e4bf778aee2161f1970ff100
SHA5120f8bd46ef88ec57aa9533da69d0befd6b21d5538015e3e8a974c495c51d0b1b932c83dca7055dbcabda47bfabd2e76073cee6359a11aad2657f0ddb11acf9991
-
Filesize
16B
MD56752a1d65b201c13b62ea44016eb221f
SHA158ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA2560861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA5129cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
-
Filesize
10KB
MD54f0565a8a7ee9b9515623acf72b6f501
SHA1ef397a061d074568282b2689f984b41625d3438a
SHA256c3d872118fa3f4505e199cc5e1f91202d0ebccc44dccfcfa34adb27305844900
SHA512eb0cf22495778ee192e23273a96e946d66e1b33a80e37a8ae6127ff12422fcf1e16e48b226870e6c107e865ab8deff6cb84955e08b1c081883becccf449beef2