Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
148s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
01/10/2024, 13:23
Static task
static1
Behavioral task
behavioral1
Sample
05fb45aff8eb229f990aab660f78a675_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
05fb45aff8eb229f990aab660f78a675_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
05fb45aff8eb229f990aab660f78a675_JaffaCakes118.html
-
Size
100KB
-
MD5
05fb45aff8eb229f990aab660f78a675
-
SHA1
15c8d3508e322ded91f6e02a7e3ff5519f525a99
-
SHA256
ee5a3a5a9c82efcbf094d7061d056d67e12e73cf331278b8ed652b41b0181a25
-
SHA512
c3d313d51c2681659ce3bccc34bbfca125fc49617b2b642fd5f5bb0eb5da8f1faaacfb9444beea5a804f8bb461e4d39a941b707013fd1ff2e002e4db883a8702
-
SSDEEP
768:TlUM9pkxlgPvWhYVH5bi/dPIsj6PxHLn0ItGLvm6u8NB0JN/NmdzgWIpWPdLpLrm:xv96xndVLiyET
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-945322488-2060912225-3527527000-1000\{EF623D9A-98F2-4602-93D2-675DBD1A4E9C} msedge.exe -
Suspicious behavior: EnumeratesProcesses 12 IoCs
pid Process 744 msedge.exe 744 msedge.exe 4104 msedge.exe 4104 msedge.exe 2080 msedge.exe 2080 msedge.exe 1824 identity_helper.exe 1824 identity_helper.exe 2308 msedge.exe 2308 msedge.exe 2308 msedge.exe 2308 msedge.exe -
Suspicious behavior: LoadsDriver 4 IoCs
pid Process 660 Process not Found 660 Process not Found 660 Process not Found 660 Process not Found -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
pid Process 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe 4104 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4104 wrote to memory of 3712 4104 msedge.exe 82 PID 4104 wrote to memory of 3712 4104 msedge.exe 82 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 1168 4104 msedge.exe 83 PID 4104 wrote to memory of 744 4104 msedge.exe 84 PID 4104 wrote to memory of 744 4104 msedge.exe 84 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85 PID 4104 wrote to memory of 4012 4104 msedge.exe 85
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\05fb45aff8eb229f990aab660f78a675_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4104 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe7fdc46f8,0x7ffe7fdc4708,0x7ffe7fdc47182⤵PID:3712
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:22⤵PID:1168
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:744
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:82⤵PID:4012
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:12⤵PID:3032
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:12⤵PID:3016
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4628 /prefetch:12⤵PID:3720
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:12⤵PID:2268
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3340 /prefetch:82⤵PID:1636
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3392 /prefetch:82⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:2080
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6072 /prefetch:82⤵PID:3048
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6072 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:1824
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:12⤵PID:3416
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:12⤵PID:3120
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:12⤵PID:4440
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:12⤵PID:532
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,18076754157935582500,3292703185416856050,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6012 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:2308
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:2364
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:2832
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4972
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD59b008261dda31857d68792b46af6dd6d
SHA1e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3
SHA2569ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da
SHA51278853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10
-
Filesize
152B
MD50446fcdd21b016db1f468971fb82a488
SHA1726b91562bb75f80981f381e3c69d7d832c87c9d
SHA25662c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222
SHA5121df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize120B
MD525d2fb3aee557cdc60c2ada377f76f88
SHA18fbe182f607dcadd2392615a578d6cc15e4f026c
SHA256fe8bce27ad4fb1f1e6f2701f8832200945bce7af46bc48367c1b0c9889601c9b
SHA5127f314d79246584e157d640fde52384768dcdcf93e2fea3b4949773245522d80486456d85aadd1c90bcdc06c7bf7fd84479215bf40fca36aa70c6ddc465b6ef7a
-
Filesize
1KB
MD5ebb3edca1b852f395449fde2ff0a2d38
SHA1dc0146710a4f81267dd2555858bc18a3fe65ef75
SHA256ed39af858e9baf86373c513cec92b090fc5bd9593a2527fd567c943f1647d8ab
SHA5120629832274d5ead414922c4a3c5fd3b2973061789cf82ca76d9faeeee17572629098497ea67788b796c1065a785255616ad002861dbc82e7167c32fe0c8528a5
-
Filesize
1KB
MD51f8d245670d4449f7ee864159fc7e2dd
SHA184d80771a9776de2137bb3c38fdcf085ba2d84bb
SHA25625268041885f74f1b9cd2018eaa733927588f4cf810907866926a8cda6e690cd
SHA51282918294ccea1ab41388489e53e2ebb89c523ee382571c792401b8577f7ecab73ccadc245030077d771d01222e3aa86088fda37ee7c25f27d5cd9e28695b0029
-
Filesize
5KB
MD5beea120ac5f0bc3697dbace45df8b0f5
SHA1968ff6deca2e182097ce6f024c720423755b8d21
SHA256600ffa1d3267f99051578535bbe51d70cf6f1d2fbaf74c4195ef9dc8e54f59ef
SHA512e6bba617cc90fd396635d4965bf7969422923bf41b3cba47661e26437f83aeba5b189a074c03a40ddd36f1f6a778a3908dfb804a7b6253c34c1211e6a3c929d0
-
Filesize
7KB
MD551a5e730ef2c6a65cc12e1a2d6141a8a
SHA1e6ca20135b11ea120f05198737149f6dc998d1fe
SHA256af3b8652a9ed6b0212cdc18b33fd3ab61b1a2e86851a8aa4d11d836d1670f044
SHA5126998813ac75b4d69956d7af3d5226472078cc0af959b1c61c13cc3ab5134965d8c20c73973cb59115633fd45fdf68e1bcc354d7be8c42baa9b09315ce0f76397
-
Filesize
16B
MD56752a1d65b201c13b62ea44016eb221f
SHA158ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA2560861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA5129cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
-
Filesize
10KB
MD55af71ee759421554548ec20fc600d070
SHA122dff836b952883a82f0db9ac4bee48c21a6c41e
SHA256b871a2fd9fce043eaecb35070920c48a0be710610adfcc0710aba177a77f3dc8
SHA512ec59dc3c25c5d6c7c323efffa9e479da5d2fb3ec6dd742405545ea3407fd3d67986383423a0809314fc10c21df3dd385d2a12f36c064c3cc6c8ff7638c777477