Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13-10-2024 07:16
Static task
static1
Behavioral task
behavioral1
Sample
3e825d948637dc48505ad4ef6b6ca76e_JaffaCakes118.html
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e825d948637dc48505ad4ef6b6ca76e_JaffaCakes118.html
Resource
win10v2004-20241007-en
General
-
Target
3e825d948637dc48505ad4ef6b6ca76e_JaffaCakes118.html
-
Size
47KB
-
MD5
3e825d948637dc48505ad4ef6b6ca76e
-
SHA1
2cc7cc6fb722381bb2ac04eaec1cf8c3065d9084
-
SHA256
f142e030f8d2bfc553ec4c89627e090e5c453855c00d4017a1ad378ecf430296
-
SHA512
d426049780d7c3d62952718c385bcd87b610411c10bce149a0d937fc1a1f277b120a7331923bfedb5f161a15584355d405e7a8a8cb99c43ad99768565ff189cc
-
SSDEEP
768:jPayHHvPWRoZO+iia9hD7snZfIV3Wf7TeauSFt03bx3burrp1CAIVw2SMS:L3HH2RCO+iynRIRuduEtpIVw
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe -
Suspicious behavior: EnumeratesProcesses 10 IoCs
pid Process 1932 msedge.exe 1932 msedge.exe 4020 msedge.exe 4020 msedge.exe 4712 identity_helper.exe 4712 identity_helper.exe 4516 msedge.exe 4516 msedge.exe 4516 msedge.exe 4516 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
pid Process 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe 4020 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 4020 wrote to memory of 4892 4020 msedge.exe 83 PID 4020 wrote to memory of 4892 4020 msedge.exe 83 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 4196 4020 msedge.exe 84 PID 4020 wrote to memory of 1932 4020 msedge.exe 85 PID 4020 wrote to memory of 1932 4020 msedge.exe 85 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86 PID 4020 wrote to memory of 1028 4020 msedge.exe 86
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3e825d948637dc48505ad4ef6b6ca76e_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4020 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa302e46f8,0x7ffa302e4708,0x7ffa302e47182⤵PID:4892
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:22⤵PID:4196
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:1932
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2520 /prefetch:82⤵PID:1028
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:12⤵PID:4360
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2088 /prefetch:12⤵PID:5048
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4624 /prefetch:12⤵PID:3588
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4620 /prefetch:12⤵PID:4036
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:12⤵PID:2252
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4104 /prefetch:12⤵PID:3432
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6240 /prefetch:82⤵PID:4832
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6240 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4712
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:12⤵PID:3136
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:12⤵PID:1888
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4024 /prefetch:12⤵PID:3608
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4104 /prefetch:12⤵PID:4396
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,2336084671771256311,2135039704663437357,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1808 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:4516
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4620
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:3640
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD599afa4934d1e3c56bbce114b356e8a99
SHA13f0e7a1a28d9d9c06b6663df5d83a65c84d52581
SHA25608e098bb97fd91d815469cdfd5568607a3feca61f18b6b5b9c11b531fde206c8
SHA51276686f30ed68144cf943b80ac10b52c74eee84f197cee3c24ef7845ef44bdb5586b6e530824543deeed59417205ac0e2559808bcb46450504106ac8f4c95b9da
-
Filesize
152B
MD5443a627d539ca4eab732bad0cbe7332b
SHA186b18b906a1acd2a22f4b2c78ac3564c394a9569
SHA2561e1ad9dce141f5f17ea07c7e9c2a65e707c9943f172b9134b0daf9eef25f0dc9
SHA512923b86d75a565c91250110162ce13dd3ef3f6bdde1a83f7af235ed302d4a96b8c9ed722e2152781e699dfcb26bb98afc73f5adb298f8fd673f14c9f28b5f764d
-
Filesize
23KB
MD5c6ee151c95d5bd2339c67eca774449fe
SHA1c2de7e4a87b91ddd246fee53b8274b35fc55603a
SHA25665edc4727e2bdb04a0ad28564af17bcf3bd7029811429804d283c8f0e186ce09
SHA512eb04604f00aba42cffeecf266cc7dbfc096708ebe615ed2141bd422585db26a12b54f9c22041c798cb01e4c3d3e5c70fff935b0c7a508fbf61f6201c3dc678b8
-
Filesize
45KB
MD5ede70f717200a59b4cb831635de913a1
SHA1d4d6e893ac192b5df087e924ab3356852f8a7bc0
SHA256c63fbcc69de230e4844cf735ccf668eeaf30e42126eeb464da39c2de6b0b0051
SHA512b621bde28b90ba97c122677989d994cb5e88fd0906366af1a23ad3f9d9f3b7f2bbef95873f29100433d4068fbbf7ab798505e68deefc118097fc5f76dfc4b672
-
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Filesize144B
MD5521fd3497f9c64e688af3ca0bcfb43c4
SHA154ecce67d8f25b4b6179504f25e1504ca38c95ed
SHA25602db2489258d40446ea4fc66fc9f1fb47ee56d94a59d6ca6925c8c6dff41db1b
SHA512517555d882cea41e3f7c47782ae579ab216316125205beb24261859ff61c0d3cebac43a298779db298c033b2a8148f5ecafe1fbb5640a110a3ab2ad8d7ef2e3e
-
Filesize
1KB
MD5bbf17f76594d407678ad8dfc8ad48ee2
SHA1a734196739d23a2942ad6b2bf0670628c773defd
SHA256f28b7f6b70000d801ee4768d5b2aba1f79bea677328efc416315e3cdb88372a4
SHA512f258bb2435bce4f09f4cc7f141efe73550bd2d993ee29a5146e8946185ace7b489d162dcde49909ecff3c86250cda18bd73ca07e254709a6c89bf378bd0a4832
-
Filesize
6KB
MD52367ba470511c2a4e0f0c0b4ef993475
SHA19346f36a8f0b2bc6de34a25ac57c73771fbd36a1
SHA256794aba409d8af85bce9a0b90f26ce6847a8cf078fa4884d26a909a4805e8f7b4
SHA512daa1d8f237e3fcafc92838c17b87c12ed25504dd8ec55f998a5ec339f53a77ea9d6e88be68f3d4474ab162cd0d4c8365b85397e5ec94d417289b51e8c5319e85
-
Filesize
6KB
MD51968d62b3e10ed3342439efaf2e175f0
SHA1aa9fe5abca96357bad3d0d7e50d2d03df0a321c2
SHA256c130e9452f582a9d01ba3919939191075b9fdc4a73fef400388789a7c119ca68
SHA512432b07ef7de78f41612a9b2973bcb6b5cb76f071089eeab888d86d360b21e8cacb6a229f39879a727dd0cbc8f9ba74ffcfbed08d89fe225057ff3972d90b5d61
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
10KB
MD522f0952344ccf0869d45716aefed4d4f
SHA111237b3b439137884f5e9807cf6fb00a8176f412
SHA256e371e7c0b6282a1d17af90f32ff443ea007805b5ea0fcf75e9f03a183677fd5a
SHA512f5621a15d96671388822eb928444d9144e7d5e504a7b16f8f46186900d794d518dd69ea6f42d7a45c4893b7816a9417a5426db8d599e04b43bfee431b7e87c99