Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Overview
overview
10Static
static
10Samppimafia.exe
windows7-x64
7Samppimafia.exe
windows10-2004-x64
9discord_to...er.pyc
windows7-x64
3discord_to...er.pyc
windows10-2004-x64
3get_cookies.pyc
windows7-x64
3get_cookies.pyc
windows10-2004-x64
3misc.pyc
windows7-x64
3misc.pyc
windows10-2004-x64
3passwords_grabber.pyc
windows7-x64
3passwords_grabber.pyc
windows10-2004-x64
3source_prepared.pyc
windows7-x64
3source_prepared.pyc
windows10-2004-x64
3Resubmissions
25/11/2024, 19:07
241125-xsxvma1nfz 1025/11/2024, 19:04
241125-xqyddaxphn 1025/11/2024, 16:22
241125-tvbtdsvqc1 1025/11/2024, 16:17
241125-trtj2a1qfk 10Analysis
-
max time kernel
82s -
max time network
156s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
25/11/2024, 16:22
Behavioral task
behavioral1
Sample
Samppimafia.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
Samppimafia.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
discord_token_grabber.pyc
Resource
win7-20240708-en
Behavioral task
behavioral4
Sample
discord_token_grabber.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
get_cookies.pyc
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
get_cookies.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
misc.pyc
Resource
win7-20240903-en
Behavioral task
behavioral8
Sample
misc.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
passwords_grabber.pyc
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
passwords_grabber.pyc
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
source_prepared.pyc
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
source_prepared.pyc
Resource
win10v2004-20241007-en
General
-
Target
Samppimafia.exe
-
Size
102.9MB
-
MD5
e5d776d0a738f622496507a407bd31a8
-
SHA1
379fc39a0b331b9892a886bef75b7d2f5f656816
-
SHA256
8ee9f9af08c9c58408503c08604f1af166620267e9e09f800c05e3257b5c147b
-
SHA512
46d427f5e8bc35d7ac1677add6e84461a12bd2fdb6b2398518341cba6c6f11c703d77c7490a5e2e23af258b2391ce831d130eda2170fc527081fcba549626877
-
SSDEEP
3145728:AnG2r7rS6xjKcBanL2qHO5iVAunGQbRe0zJcBVPZ2:vgnSWNaBHCin1XcBa
Malware Config
Signatures
-
Loads dropped DLL 1 IoCs
pid Process 1844 Samppimafia.exe -
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2608 chrome.exe 2608 chrome.exe -
Suspicious use of AdjustPrivilegeToken 48 IoCs
description pid Process Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe Token: SeShutdownPrivilege 2608 chrome.exe -
Suspicious use of FindShellTrayWindow 34 IoCs
pid Process 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe -
Suspicious use of SendNotifyMessage 32 IoCs
pid Process 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe 2608 chrome.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1420 wrote to memory of 1844 1420 Samppimafia.exe 31 PID 1420 wrote to memory of 1844 1420 Samppimafia.exe 31 PID 1420 wrote to memory of 1844 1420 Samppimafia.exe 31 PID 2608 wrote to memory of 2448 2608 chrome.exe 33 PID 2608 wrote to memory of 2448 2608 chrome.exe 33 PID 2608 wrote to memory of 2448 2608 chrome.exe 33 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 780 2608 chrome.exe 35 PID 2608 wrote to memory of 1596 2608 chrome.exe 36 PID 2608 wrote to memory of 1596 2608 chrome.exe 36 PID 2608 wrote to memory of 1596 2608 chrome.exe 36 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37 PID 2608 wrote to memory of 2472 2608 chrome.exe 37
Processes
-
C:\Users\Admin\AppData\Local\Temp\Samppimafia.exe"C:\Users\Admin\AppData\Local\Temp\Samppimafia.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1420 -
C:\Users\Admin\AppData\Local\Temp\Samppimafia.exe"C:\Users\Admin\AppData\Local\Temp\Samppimafia.exe"2⤵
- Loads dropped DLL
PID:1844
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2608 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6719758,0x7fef6719768,0x7fef67197782⤵PID:2448
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1148 --field-trial-handle=1228,i,3756135436907401934,14491662103991219813,131072 /prefetch:22⤵PID:780
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1504 --field-trial-handle=1228,i,3756135436907401934,14491662103991219813,131072 /prefetch:82⤵PID:1596
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1600 --field-trial-handle=1228,i,3756135436907401934,14491662103991219813,131072 /prefetch:82⤵PID:2472
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2308 --field-trial-handle=1228,i,3756135436907401934,14491662103991219813,131072 /prefetch:12⤵PID:2748
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2320 --field-trial-handle=1228,i,3756135436907401934,14491662103991219813,131072 /prefetch:12⤵PID:2452
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1148 --field-trial-handle=1228,i,3756135436907401934,14491662103991219813,131072 /prefetch:22⤵PID:1296
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=2264 --field-trial-handle=1228,i,3756135436907401934,14491662103991219813,131072 /prefetch:12⤵PID:2572
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3628 --field-trial-handle=1228,i,3756135436907401934,14491662103991219813,131072 /prefetch:82⤵PID:1520
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe" --reenable-autoupdates --system-level2⤵PID:2676
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x154,0x158,0x15c,0x128,0x160,0x13f897688,0x13f897698,0x13f8976a83⤵PID:2172
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3704 --field-trial-handle=1228,i,3756135436907401934,14491662103991219813,131072 /prefetch:12⤵PID:496
-
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵PID:2704
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
215KB
MD52be38925751dc3580e84c3af3a87f98d
SHA18a390d24e6588bef5da1d3db713784c11ca58921
SHA2561412046f2516b688d644ff26b6c7ef2275b6c8f132eb809bd32e118208a4ec1b
SHA5121341ffc84f16c1247eb0e9baacd26a70c6b9ee904bc2861e55b092263613c0f09072efd174b3e649a347ef3192ae92d7807cc4f5782f8fd07389703d75c4c4e2
-
Filesize
264B
MD5a1c63307eb0fb18d01f08495f6ef719c
SHA1d38a670a494b6258197eee3f6bb5160369e96cb8
SHA2567646a53cd089f137bf19bfaebcfc7d8c1491c62b83bef4e284434f47680fdae9
SHA512a53b108866c307adcd12914cbf4463340843f82e8bbd2beba054839f3e1492ff4dcbfb0ed6b834f559467aee1544fb37bcf4ddd71c4c82ece1467217baacd329
-
Filesize
16B
MD5aefd77f47fb84fae5ea194496b44c67a
SHA1dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA2564166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
SHA512b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3
-
Filesize
264KB
MD5f50f89a0a91564d0b8a211f8921aa7de
SHA1112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
-
Filesize
363B
MD5f435ce3eacd94d3f271ed529d65a7681
SHA121d93f7693790bcd2c4c424ab65dfd2914b2ca52
SHA2567d27da2e5bc088482376477c7f5cd7f3195b57a146d2151e66e486d84fe37f43
SHA51223dbe1bed4bc0bb144844173e67c4f87e8201c79261dc2b520d07431c8b73f32c308f14e191f2826a980f4204f94cf12a5bf313ab29652409e6dc28c8557fb0d
-
Filesize
363B
MD5e9284062bfbbdceb1a4508cc562012ea
SHA1e80cdd236d392d978b2896c9f9bc64c8ac4a7d36
SHA256f9fa2d67cc629f91c7641f2c63a26312197a5d3f5fc0b97fab6c60f4e94127e3
SHA5121dcd122527e2661079f3625fbe3bd801e6d2b6a9a39cba9eac07a91c42f6d21a26536c9bda74774afecf7d6be24ca66315684b01b88b6f6d7ed310c38edc93e9
-
Filesize
6KB
MD5964248298e0a4bf8886e369ecee05084
SHA1b73bc5a73e1f1cdebe1aaf726a4224ac20ab12bb
SHA256e5dad5c57be0f11bbd25a3b8c6973d8c8b997459791fbe0149cc7b5a55859045
SHA512ff779afd342dd905eb837c857afaf2b29e2aa31c5dfea8205cee58b3dcc27976eb17705076a46a582fa212d5452ab07f3782fc33368d1cd6d316d3c5cbc01e80
-
Filesize
5KB
MD5862e32edb25756b4f622c0c3dcd0bdee
SHA1b5988c8e289cc46765b2c68d39db538cc747084f
SHA256f7917c7025e84509981860dc1ca9d30f2916371f59c4f02ae3521410347965c6
SHA512a7b108bcf1db814d545247ac08ab02fdfee01cfcc48cea5fad6d3e3eb6c767030d1bd5b9240578a6f789dd816f19bfa90ee8e5f41d9495e19330bf37d874c7b9
-
Filesize
16B
MD518e723571b00fb1694a3bad6c78e4054
SHA1afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA2568af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
SHA51243bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2
-
Filesize
6.6MB
MD5b243d61f4248909bc721674d70a633de
SHA11d2fb44b29c4ac3cfd5a7437038a0c541fce82fc
SHA25693488fa7e631cc0a2bd808b9eee8617280ee9b6ff499ab424a1a1cbf24d77dc7
SHA51210460c443c7b9a6d7e39ad6e2421b8ca4d8329f1c4a0ff5b71ce73352d2e9438d45f7d59edb13ce30fad3b4f260bd843f4d9b48522d448310d43e0988e075fcb