Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20-05-2024 12:47
Static task
static1
Behavioral task
behavioral1
Sample
5f27055d64d9fa2169a6e189a0f8c44e_JaffaCakes118.html
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5f27055d64d9fa2169a6e189a0f8c44e_JaffaCakes118.html
Resource
win10v2004-20240508-en
General
-
Target
5f27055d64d9fa2169a6e189a0f8c44e_JaffaCakes118.html
-
Size
81KB
-
MD5
5f27055d64d9fa2169a6e189a0f8c44e
-
SHA1
7691f53f0e6e234331b713b1a730d7c15f5415ed
-
SHA256
8709853679699848feb5ae0a66ba401282d87e89686819ed11b29141748817fc
-
SHA512
9aadc2ea4adf32fa343e1f831566586a64676c6b893b18ffe5644d8bb9ea708fb84b7129da5cc7afeeaba20ff88ee49a914032d602feed453b7429fe7fae317f
-
SSDEEP
1536:3DHfKIqSfbRk2JG/kOOT5TKm6XGr6v77LKoVytTw+QaY24E6xXz1lsAfHlqvqK6t:LfNW/yTCWGv77LKoVyto24rxXBlsUHlV
Malware Config
Signatures
-
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer msedge.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName msedge.exe -
Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 4960 msedge.exe 4960 msedge.exe 3764 msedge.exe 3764 msedge.exe 4828 msedge.exe 4828 msedge.exe 4828 msedge.exe 4828 msedge.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
pid Process 3764 msedge.exe 3764 msedge.exe -
Suspicious use of FindShellTrayWindow 25 IoCs
pid Process 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe -
Suspicious use of SendNotifyMessage 24 IoCs
pid Process 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe 3764 msedge.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3764 wrote to memory of 4928 3764 msedge.exe 83 PID 3764 wrote to memory of 4928 3764 msedge.exe 83 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4484 3764 msedge.exe 84 PID 3764 wrote to memory of 4960 3764 msedge.exe 85 PID 3764 wrote to memory of 4960 3764 msedge.exe 85 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86 PID 3764 wrote to memory of 1072 3764 msedge.exe 86
Processes
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\5f27055d64d9fa2169a6e189a0f8c44e_JaffaCakes118.html1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3764 -
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa05d646f8,0x7ffa05d64708,0x7ffa05d647182⤵PID:4928
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,3123712658208162017,4277587240669652818,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:22⤵PID:4484
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,3123712658208162017,4277587240669652818,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:32⤵
- Suspicious behavior: EnumeratesProcesses
PID:4960
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,3123712658208162017,4277587240669652818,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:82⤵PID:1072
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3123712658208162017,4277587240669652818,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:12⤵PID:3516
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,3123712658208162017,4277587240669652818,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:12⤵PID:872
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,3123712658208162017,4277587240669652818,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2616 /prefetch:22⤵
- Suspicious behavior: EnumeratesProcesses
PID:4828
-
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:4916
-
C:\Windows\System32\CompPkgSrv.exeC:\Windows\System32\CompPkgSrv.exe -Embedding1⤵PID:2964
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
152B
MD5ce4c898f8fc7601e2fbc252fdadb5115
SHA101bf06badc5da353e539c7c07527d30dccc55a91
SHA256bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
SHA51280fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
-
Filesize
152B
MD54158365912175436289496136e7912c2
SHA1813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA256354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
SHA51274b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
-
Filesize
131KB
MD55256032cc356ac0207dd5e4d2cf110e4
SHA1d8da219067837b170ef7d76c4c8507ec0c052ba8
SHA2565055b290d7203a5499df0d56e4f40901d15d87e2948fcafa2753c8e71805033f
SHA51280862ab65fda411db08432f5b58ddb357b25a37f3eddd6b3dc2a8d0be0e3d4804a6d656f84ccf26b879ed645aeca3146f8ef937f60aae4f6660744ab65d51d70
-
Filesize
37KB
MD5d2b992ec01cc253dc84513fc461b38fd
SHA154f1633d795ded01a8e6e4e27c97eeddfaa105d6
SHA256f942c938b7005bf91c562dd2afd172892aa16e800bb505e60df3a018a4fce399
SHA512eb48b61963f9bdbac5eddb491df9e6387bf0583a3efca4b96ea73e87c9d9c85fd9fad5e7705ff0ae0eb9f456104799242765461002e17c5bc416468e9f21ba48
-
Filesize
75KB
MD5097c905e70f091aefe8921f1279747c7
SHA179518ec5c1b994452d7bee97a0efa022e370cd40
SHA2568f00d8cd13576a49c0402eab401a8760eda0c7d2c1a11d0159bf9591753edafa
SHA512f9deed2c43d33960d082f2df8dec1dfe759d073d51ccfe97a6ff91ebacc47bed912919c31accb09fd63ffbc93a4e6f6f137ba2e5fc667aedf9ff3bdbf593b534
-
Filesize
121KB
MD547ef888f21d48d5b44a12914c9553e9f
SHA1a3b1d650901e9fc758781158a510606b64b0b734
SHA25696130a417a077515aeecbdd4ed6c3c90a7e5bc021f32539fb841adc2b13eabdb
SHA5129c833308b2a9024c649d3ea0f4ec0aff311ca549f2c884173a69ec586ec394cb5c22ecc526a1e28ca63572af791db97770dca1e9f2dac85e3c7de4b31a7229c4
-
Filesize
107KB
MD5a0b68053cf13af274f02a960ee336d94
SHA10746c39f54d88ac8ea141729d86f651df9c335d3
SHA256125c42b9f9b0223fa6879dae70e3a5d4d38c8c5a22578c3626411a3bfbd991ca
SHA5125fc2f3299afec53e6712293ff12868f41d9aab7c550f0058df835cd3b7493b8c1e1e797c70505c86a8f981fceebb600d058e5a3269c1017ce741c8ac48dff444
-
Filesize
98KB
MD5fcdc91ba1078e45a640817ee187b69c7
SHA15db7a3f5b0747e363e687cbc25a61f4d326bf2e1
SHA256ed3a9e35ca60ecf7d50ddfb5b17a13abab0babe5e9315f55a808ccc9f80654d2
SHA5127d5cf6766be0dcb76de3a107aa1932acd5b281d13c88182b17fda9e518d7daa232ba2a5191e06df861bdcd6371dfa63790f780d9a20485614c3751d0ac102508
-
Filesize
84KB
MD56158909299da0537c9e4f709d0f42177
SHA127256a91c39c0e86f9eae2b2fbf3e12a1c97e968
SHA25640f63e0fa93110c5e66030953c6c7741ebccc852c77a7653d2d21e2ff2c7aa91
SHA5125639a5afe9863ab762e014bd9a8408dafe43f9de605ee447ae30fa5ce0a4b6ae10e990f4a57fc9ce5eb5d43ad7326bf6ec61a51cd5a0b2c830d7202b0d3b1b2f
-
Filesize
115KB
MD52f08fff0115fa526e0e62da6cb7be7a1
SHA1df72e988c8f6f8d3c940d856f26cd673bd057252
SHA256f4a059ce5b6db279c029a2a8bfc3bf9c6bda33127a5ca2dbd14c101062aa9a61
SHA5129db756c246a2cb1d28239e6a03375cadb27407b2a59f479a440ff2a70930bcbec1ffc6f39e4af7f6bacfa7f15a2cb854fe89814ff732f2dadfc1441bf4b8048d
-
Filesize
117KB
MD5b029cf63d99948f68b8147afd9698b27
SHA1fb59ab69db1688ecde01abf9c22d9bfa4b5855e6
SHA2563cc985ef2f8a817297a3f349ee9c9a0a42884339a4c1d6fc612925d3281384bf
SHA5129fe5d38c4fef21616a12d9959889980f9bfb5c60702d62c53e07fe5a69304bb777cdfc6b4cefc7d99747c5364a08698dc6c3ed913437387adc1a1c24614359df
-
Filesize
116KB
MD55c16318faedd221c6e8d7b82b9dbd488
SHA14044767475559738fe8376b560c488668496e3d5
SHA256a746933cf04d3394e42594de3e99693512bc25e8b0884b5fd67c6a1493a33559
SHA5125dd3c4f42f160df9ec21f7c09e070b450a697751d4cd341573d1df28f66089b8a934f97a6b3ca70d2d08d3e3b120db95dacecb13c652d4dc58d0eb3daa507073
-
Filesize
43KB
MD5807bdd8e3b7f73e6f39eda5d6ca0c008
SHA12b3fc9b71ebe40f602f34bed462ca12e9b0ecdf9
SHA256b6007fddfc215c02ff3448a4f5c386a8d8baa04c78bc2487c523e57514a9cac6
SHA51291feee4a48be36f3ccf8c597121a4e8803af7708de769d15658131fac209b710e94c8ff99d439dcf85b9ec6c50620a103ab3aa2d0dceb96095d778e02b0d14b5
-
Filesize
82KB
MD50a2df9b70ce5b8ccb934217280a2e5eb
SHA185e0db6bc3b36c6027afaceb30fe070a040f1fd7
SHA25629bbd8bc3d09bbaa0801439559b408e40ff6aaba648dc40351535d7397b7fa2d
SHA51217c47b8d8d6bcf22df6ffe9e1a6201593792481aa71a23810ed30d50a97ff9dee7a0cd81f75a520de6e017fcdbcef6ff96613f10ba5586bdafb5207be382304e
-
Filesize
95KB
MD5cb059dc6927287330afb6caf47f146cf
SHA1bc0603e21c57503d965f0535b0892bd809cd061c
SHA256686aeacdc1d2d2749a00f8a24522dc34d700decbc6b3d33ee7de5c5054e57f35
SHA5128d425b931728d6fc3b9fa27a64faec79392192b6e83b9c0b39ee21debcb7ff39738eb94e10367284cabd906f0ca0cec3f47b7ad07a307d1f722dc13aeac9cee5
-
Filesize
35KB
MD53b0422d1084d7cd895443f07f1dcfacb
SHA1c41bf8e9550b9f7efd922908f16e4e8f09bde3ac
SHA2562d986d76d9c6abf6d27ab5c6ee203b4a8671d2a0167e568ce3d9be000e6e4f29
SHA51208eab06d2c8eaffca82dcdc0f9cab05535569df7ecb0470fff5bd5bb5639207f5cf7113bdfe4e20545673325912a2c36d76c3181d6747111b59ead74a223518e
-
Filesize
19KB
MD5fe8cf6a39ff9361f34440d8fcabd9b1a
SHA17118bfadb324cc7f60f0c6449286b0fbc5470b58
SHA25682dd8602100a776915bd3e96f85e480d1c9e39f0f4f66c82b80c318963d8615d
SHA51242922a7dca88171ab685d9d7cfafd6ad06fea0862540e485f3a6c02251cb23d8817927b0317b6438e0fa0c80290bb445507d65fcd0f15c77121e207af7f50450
-
Filesize
19KB
MD5cd07fc2098ce629f084b29977132580e
SHA153cc94ac4db3c1ce6cec95bd24a6ee40219aafc5
SHA256c8468ef2229e4ff40d36036e2029a54c73f9b19fb0ff6529ef7e53bab7eeb4bb
SHA5124b00dc3800e3803e41d2cd905dbbc99889f6e1d0238b8dad27ac2da59af1c9ea4d5087121b8e20d2ee90d9e43bbc57443b79cf166f23c36de94d2a07e53ef27b
-
Filesize
17KB
MD5aa8aa49bbf1cfb9117d61e92aeabe907
SHA12e94b65792f3a53b71c0642a79a88e7d307bf8ff
SHA256bf3671abd36163ecaaa8d070abbc479da68dc77a5a95370206730544f07bef97
SHA51240a05148d9579b01b627cb9f47b94223bc30aaba7a4f4cfdcc95fc099659c8cfc3d25f9c039e4523234182856fc953661f46ecd60b257fe078a06efe121c42ab
-
Filesize
21KB
MD59813d6228858bbe5484b1641c06b930b
SHA13c7e751a8ea4c62254f63dd5fbb3932267f7a9e2
SHA256536b1c603509f4f3b8cca9f239c48bbb91181901b9a1cb629bb6b04be9fde8d9
SHA512489eff6cbb9cb69bea8ed5a791fdffd0b7725952ab1f72cde94f27e587744d41a2f3ec195842c091e981306afee422bd104f7c4a7acb1913a5b449e16f7a7c34
-
Filesize
19KB
MD5b89f4cca66b4f90634848f188ac87a62
SHA1b207ca421eec5b8f46b37c9a447859f9f3a8c93b
SHA2560fdd8015f113f26bdce1057df9f6d3ed988d7b0329cf99497ce628ffbc281470
SHA51228e00edc2d5f9de869baffca3365bb0955f4f6266e53aedb589dfa56022c84049f5cb70ffecb0c32d4ac88117f876f6a1573759f3a3cff73db316f21e0b41b3f
-
Filesize
24KB
MD598d53120918baf9abaef89de8e8543e0
SHA1817cb3502820fe9411df36514d63d9473f8a6fcf
SHA2561f4f3e031db794adb8d0e67fd96e9dbc34a507a066b30ba62223a6458947e224
SHA5125c3a1dd2d04c8a92f20818efc0404d1a0d9ba4352863927a96d293e0bb114e9cb1895c3b6f15f701b8a828bbd6bd944d1ba458bc73b8246e4389e716ee700893
-
Filesize
17KB
MD5e27d15ed590998c7e992beea5884bf30
SHA17823a9e334d4d4c7b5014aad64e311e1a146365e
SHA256d2b3097b6d41ac946cc03c888919668b57a2046c8cbfdf2de4760788b5541ff7
SHA5127ab18d057f4d19e31eb53bebe70b141285710363dfde9046c2d34b8ce60abe7981c0e3b34748549747c74d8dbe9a6eeab15aa1d5966f83b148b4275503cdcca8
-
Filesize
19KB
MD5cb73a002d3d2b55f9d08d584c763d0fe
SHA184a2ec5cbc421c5c99ab041fd25a476b753bd92d
SHA25629c33fca7aa6f864e74f4424a8dbf0a7ca9bdf5dcb83362674305dc4c9a33dc4
SHA51272d0eb56a2f21f782e4738c1eaebabad4e628e58031374db027c4bded7c34754913cd54e2b8f4b3486e6918eaed96cf3f31541ef1b55cf183caee1b5f45c5bce
-
Filesize
18KB
MD58785913805e96d635d18099b26402dc0
SHA196d28fe7194fec47da5066002f667ce6155ec618
SHA2562e930d0a480d1af35378aa6e9fb1faa5b78a6cd45cde1241edbb0de4899a1b73
SHA51280f5a36e51fa5b41bc34ff58fc1b2030ce5bdcd102a6a1d78c5c3328f3136ff56fcb2a0c3aa9e179dd8d1c8c4ba7f0d775a9b50dd7080390ab156135a0e33736
-
Filesize
28KB
MD54c2d26b34356944040767410a19c60a3
SHA176e786563b107dbb41886dcbee3337335da6e791
SHA256f5d1567a170e63bf2ea8ab7681b1a60989cb54ed12769f9f074fc7b1d89e3a4a
SHA512f26cd2a2333f6d9f7243a81bf9840d997fe7e7815c7b5d0e47105944305f0f01e60000971bcf2d8ffbad69422e56d25b347dd18a1478eca07e71c4143d4d88e2
-
Filesize
37KB
MD5154725c6df2349f5177c503ce35060f4
SHA1274e540773341fbbec4e470baf1fbd1760d89424
SHA256e2edbf76199dc3e1cfdef5a4c5409aae4c60fb24ba0c345d41cc6a87babe4536
SHA512775c742e5e72a7d686f4202a43e59da5ce216bd2db534f3d6584d11c7ced1f32db7c16ab662d3f482cf7bbf57c463de5f41e0cde6796331c3c42946eb5347e52
-
Filesize
22KB
MD5fcdb3df383fbc3701a4f1e73dfca71dc
SHA1657ef2c093f24e7065277f59170f51bc5ed21582
SHA256beadebfa3a61c12f07c8118d8e8667fadfbfafc65e54c39277343e4e7c5b8b74
SHA512b5091f2a0826250d579f0e0e21a7e335e77ee607cd9824868162bc22b502a6a69ccc2133a7976b97152e6960e60aad727dad1677bc0091fa5e7e4a086cb2c1ff
-
Filesize
25KB
MD572f20fc05805b99c1ba4c67049a73c90
SHA10fb586669b7bce7cf95178c9fcaedd8208ec62cb
SHA256f813d81b51c58b7d9a7ab208df5f033da26cd8fce61653160814df293d7058d4
SHA51242b0701c58c797bd2fdaec8257fb8c7f48ab56d32050054129779b9d20bfac8c40fe3fa19360ba08caf8f35c05e528f145eb45e18b359263e9f3e84fa805a285
-
Filesize
17KB
MD536af6ddceada454714027e041ad361bd
SHA10109aaaa6f9a4593a20438a2e25bd35da43486d5
SHA256d9d3ae3faedc89a336e954d803abec0326d2ec84b93d45354f979f37304bdf34
SHA5120beb5cda7682d5e627fd5f7dde303d839a776543b5b6995bca5516e047c8ba0022313d795887b04f7844a78d9ff2d462c7e6796e15b8c4a0af24412b9390a956
-
Filesize
19KB
MD55c0a8d6e5f6f86f1ef62e8f2d051fb88
SHA1bea20c971187450e530c24bec98ba4b35848f959
SHA256c6ff9623724f5198e76a5278ec3c46112943adf0aa01ae2d2e14a1524c56271d
SHA51218c66cafa64a324d91c6e564c9cbac5b9bc4c30976b08c1fdc61dd3615deae20aa79e7d6e94d7d44665fcf7df72c59c818f90b18536ca250e0063b2523cac879
-
Filesize
21KB
MD5d5a9068547db7e74ce952b703fae12b2
SHA1fc0ed031c869db5751fafeab1fd672613c3f9bd3
SHA256f1b0a71df33832af0bf012a9642239060bbc7bd325788b8fb97b8dd8031d8d26
SHA512b1326707b28044caf9be94862578ae152126267c109a1e34b0759d1e84f9d6f9c065725e8893c6ad19ff213412739aa45651ffa23a0d3d66d370d4d04048c97f
-
Filesize
17KB
MD5768ad50d8a9f42028b69323542e84842
SHA1333341a821e92b5f2adfbd55c98c13a50bc8de4a
SHA256af4246d863fee2b17eddc626415d9cbf327343c5c6d80a9e31c9c042d5bd0512
SHA5126fe69c2fe1f837f7f18de6d91b43516b00eea250946ccdab0f6cc802e83f45c6c0b648600173c4f762382bb921f6d5d6cb434e159353468f63c58772b4d003c0
-
Filesize
16KB
MD5f574389dfa9d57e2a334d8832289fde7
SHA1d0284b82e2bc9a15c39afcc7d808cf0b3a2c4082
SHA256478569ef9574a00293d37b88810d46d989b3d225d90f607cca5f7b56ec0ecd2e
SHA51237cf6790862fb68029994beebe0032b46088cb15e42463dc9509e540862fb578e2304ee218f2d68f9cd60f46cb036ddf85f9bc3a264a0a58d0ff9085a9d9b6ce
-
Filesize
25KB
MD5ab403b250e2303f82f383b0c796b1630
SHA1dd2bbe97c35a4d7ca646a90ef30fd2d962294293
SHA256695e82be18b9e31f15ede4fe6ce2f8689959c86e1236e0a17b39b5f75bb1ca5c
SHA512197eac552cdd99b8065e98d0b40d5fe7d65d9f2c0b139ff33aa59a868f728dc5699de26d1454422d7770558b4d31533bff50897bb44126ae59fd321e19ce4abd
-
Filesize
19KB
MD5c4a3a262f36995e1ce41dbf2a1871b64
SHA15bf7d2341ce3231cc538d75195481f49b9dbe9e7
SHA2565395a527876b5eb69bcfb6b7902428e3e2452f86019f00af241bc472c0ea0b37
SHA512bab9ff66f69487def0e06223f7a792d6bc3519cb933642a39477e16901c2ca8bcde588309591f4e64f9301e56e4b77ac69ebe84b634799b202eb54045ce1fa07
-
Filesize
53KB
MD5755594a0b5013be919f4bfb70bf0c90b
SHA12b48feac7eac9585aa45e8f5cde75a6e99b6f1bf
SHA25603ccbdbebd0574d1d12f0507bc8c8340931c56708b08f0c7960ad2fe7bd9ccb5
SHA512276a1b314c0ac6b8d121f7bec9c9dfff908e4dc85cd6dd7e2fdf101ea1498744841eaa67d4f54067334a7d7978d55ee1b2db7f96c7265d26def119cb1279a11b
-
Filesize
118KB
MD50ba27de633ff30aa16dfd230810159e6
SHA117dcce1707b9a660191c129d8fd0cbd286c150f2
SHA256964d012cc30fc42e6ecbfb2e8afd5161f1775cb4c13d8ecd99ad13662286b56a
SHA512f2eb2fd7d16271b50e72deabcdfeac31611090e823c2648818608d0a7887d0ec7c28b5cfe7fdcbcce95f8f89831ef095fd94a8900ee55512a9bf41b7111c3ba6
-
Filesize
119KB
MD50ae5682d991c7848870ba034b29509ff
SHA1ec46f5302807135ec9091b5490073df3068522be
SHA256fe369063a85857ab9a3994cd95236d160b98608beee30d8c725cf373a13df1ad
SHA512a17f7b0a816db2670a7cbf20abc8d8b7871539e6de579c38aa1a5675c3d8c0e8cf4887aa23cbb510a674af7487924f01f5f0ffc6f58b886bb171de804cc7e1c3
-
Filesize
119KB
MD543b8a6d742255be567c352be9869228f
SHA106b4deec7e5963460c5a800f3b68df007f6b70e1
SHA256009e7b59eeaaf9d56b8d0e5346660b6c21e14feeec0f4bb01582001ef809b49e
SHA5120af27f610a73ad41c2af509e6aa982d9079c04a8447e882c5236c9db1eedd085dabd7bf6fd9c64897064b4c264c76d7e1934b787b26107b26b91004f0e4895c1
-
Filesize
24KB
MD54c1845b7a35aeeefa475dcd28f56cd86
SHA17b7e66a94a1cea3ebfaf5232e52c75ea5fdfd64e
SHA25656a56d163baefadf6302217c2d371057c55d76a5634e31792a8193400ddc0108
SHA5129188a1c4a2f2f35cc292084bf1e2dc1893585bef9eb6cd3450f049ef2a71186bf35d3d0c69c00520d351aca615bfc41286dc2da382e88c439a59ec645c48568c
-
Filesize
156KB
MD557e69fa97162080b6f285d44a39a459a
SHA1bb4e16a20a82080038263fc570c8d1b9a734cf41
SHA256af9bd40433a302e5074e13528d99c1f025ee188e194344cf16e16b4c7c8b2d5d
SHA51223c2067a387a25564323f454635782aa7e3c72365d2ad596366bc3b4c03be96daff6db43f0d0ba87f237481514e2974e0617d60ab8f91715fa43c78a46ef9109
-
Filesize
38KB
MD5f671c8b511eec9f4b0ee3481112cc0d7
SHA1236e48051a006cd3e04df77d019068c156049c72
SHA2568fce30803da3189be80e4093cc0a9f9ed69abc25790ef2662b142fae8eb13906
SHA5123f7ac53f65b23c4ff354ad8661169299f75ce854d1a7e61707fc8d7bbe14338e05e063dfa6ef1e617f67fd41289ae98f4e3859fb8075ed135cf2b9e62fc7b12c
-
Filesize
35KB
MD5a06d61dc358f6c8a5a58d6d9cc9c7122
SHA1f74b5139f9fe197ea1b5954fcacd17bc37a031d6
SHA25645b1753925078f9e4e3a0eb296e756ac3984a7aa265da463b082f3703387cc16
SHA512eab43ae904be212aaee1bac4a3e03fbdd6888da563d206a0e9b1813c550d5ab76e8c978aa63eb0d1a554e38ad236fb09ae55a7a26b6ec32fad965c7ad0b2400d
-
Filesize
135KB
MD5f74222e582e5dee75853f0c4f15c9518
SHA1074b7b4e7e4812ae53f7cc65f800cf3f0381b176
SHA2566551d3992dc95c2398a437ff26b0c0f7cbb28b48ed9a1aed0a64fee884b7c511
SHA512b145a0f0bc59e49e7713a997258317e113642cc75b4c08e5baf2ca6f19dd30439713046b8390146be3bfdf0dd85710d2d41972bd7e99f853f0d6289b8572b69d
-
Filesize
20KB
MD5e68bfadf8f07d8f82956c0d9d8ac9d91
SHA11557c623bcbc8a229b2ab6c1f14e7b45dcd5e6f5
SHA25669b8bef8aa352832b0cea1609fdba0b2bbcdcd3291db0d3ff13e572fb55c828b
SHA512bc42b523747d2a94acfc434889f0f4e0af0a5fdfb936127fabbb22a7cf08fbc163331f87e2577bd0a58012b0bb6709629cc343c80b67b01d45d76f69ffb977ca
-
Filesize
24KB
MD5bdddab49b0fa9de8d4e85cde5ba4e660
SHA1385743adeee0e101a708b2a9b6d512bc467b5962
SHA2563e48ebaf1f0c6463efba1fcb807457521ee9481ed53c3ba1b6f8ae28dfd55f8b
SHA512b687ec9e594ffebea0fa840dd53ba3a64e6bfaa93f10f685b18b330e8ce11bcf0fa8a707584d627ad1c2939e68e82c710c58109b726f65d4927f92d80fc283df
-
Filesize
21KB
MD5e8867b9b825e0dbbf8d244cd1d1295d8
SHA1b76bac5d6853a1cd65192b3c6fa88439a2ab04a1
SHA256cae1772548f5a6351a8fda24a838dbd4b761ab8e4cc0cf595b21a6a29114b7e0
SHA5124e7a4e7bb49f99b7c9c191206a1afd00364c9f2b08e3e52974d99b0d95456afb45a807c9cf2e736722e4042f0578382beacac4638a05727ce756c9b74c862288
-
Filesize
26KB
MD5ac5840c7df92ce4a37286f6cea512a17
SHA124fa21bbfa1eae98e0bc67afd3991bbf27c1bd58
SHA256eef09347cf2f67c7d559266ac39131e37d9c27daba6b573570e6ff683557c8a8
SHA512b18430f4d4ebb80535239d142b97b6bfafeed5dbcfcdc80769c253e1d3e8fc33fafb798fa055b516cd7df6adf5eb65a11d4f2b04e22d5683ef00a3c36c820579
-
Filesize
39KB
MD5c53c65b72edbfce44335650c6aa9c304
SHA1f7882f2458ee14e052f59d75d3e4db6a3c9412a7
SHA2564955485ba12ec7111bbbc9420f144c98e8252889c2e871aa4bf017c9d219f170
SHA512fe0785791655d6e00dfbacc1a359daaa53b6a0e15423bcbb24be751722a8fd85454b15d41c2a957841f55f694a2568c2924b52b12e6d34ae1e0c545c0bb03143
-
Filesize
24KB
MD53ee50355cdd495879150f603d1f063d7
SHA1b0b67db42ab9394da8f92e8db384cbcc0f240c4b
SHA256d8e26cd9da019b74ac38c8ca4d74822362c62924b9c1f1778efb22748a83dc62
SHA512b00864c8dc04b55ed12bd65de1bfd8e9ed01cdb4d04a64e31f4d81f5d007637e1e5609884d70b8b6c9d1c3efb676c0d98914d3bd285e19097d4f243cc5b5fdc2
-
Filesize
24KB
MD5fc363faa429a284df1a9a65c2cf3aaac
SHA1d5ca90d18eff9848e99d1188e892b9feb25ee1ca
SHA2568d7a8eb1de27324e1aaef39a3ce02d783cdfe5ec49c7a5e81c1e4ce5ce93c3f4
SHA512edbf6b09432b8c26779cc378c695bb2e9196c75f73885f6f385c7ffb1f56a148ffb809e61f1c735aa0d683c7a009391d15f7652a9558045bc01cba7f5839d81a
-
Filesize
20KB
MD53365c1c6a7bae5346fa42db4a4777855
SHA1732953870485fccc709534d7adbd242cba5f37df
SHA2565e4b99b5398fdf832670b7cd86a727055efd7b0bd8477b1fcd054332d40a092d
SHA51252f76c93f44495b2e494ec31701529c373d5f769f513620a29e9a4fee82975bdd4e8749a22105c1a1ef5ffbbdef337c2060faa3d8eae19a8b24b01a62fd6f2b9
-
Filesize
20KB
MD5c5c0ecc695252e82ae9870e809edfe40
SHA1fdefc4f1a1a635b6f8452900face22f4443e48ed
SHA25648e74b9ad34f9124e096cc276bc3ee6463b78fff08bca8321531d538634d0c68
SHA512a9d7bf29abf450f1905c96641772a89b60e20f8c9771b7af3dc169809923815e85217fcb08ba7cc1f1258b9dfa0d457861c3d28089fee8a67ebf7bebc55a7843
-
Filesize
21KB
MD5557fe071814a192a75509576d302ec41
SHA1b8787f82330176900e2978caf856f409943b9463
SHA2568011f8b760747fa05f2514a5451a97d97ab6d4ad70d8b3f2be5fb80afb80cbfe
SHA5125b71d5cd9538c0efe952b838871d82b3678b5a831f03a716d91282f9867a4eafb74398a4a3f4d10a4f1a9ae4a7e60106b9f05abef2faec223cd4868e0872b609
-
Filesize
135KB
MD5e0163edf49e332866d74477b0b3b9149
SHA1d264e39418ca740f9e7f45eddca1b869393da712
SHA256c961e32374e5a54c24a069a40b8b4642d943ee0d5f40d4572992d6b5c31e7425
SHA5122f829541196973ac9b6ce8f7f1fb71619c8df47534c0dde35cabc4f7cb7a75ef3bf0cc4fff120639c0dc5817b28b53ae833cc389e8e3e1e2fc4e61b5770a9d49
-
Filesize
57KB
MD54c1d2bb2a71cb0ecb11a94cdd4e8124d
SHA1b94f46c6f7c0ec4401210e28869055e9ccaef0d5
SHA256908efdc27374a8f85e2ba517936635c921fc70d366fa2c94ceb3a27ed59b7e53
SHA512baac20f24fa7810f1c5ae15b625771dfca7218dfae613fcd302eea1cd76b985832a0a9aec094d0306cc0971ecd07a426f392c962dd0d732f3838f7f91833fa53
-
Filesize
128KB
MD5d9089b329fef972f5350534eb1492515
SHA1ce53867ef77b658947ae1d2d1b6f8893bd767e9c
SHA256818f41d43809d786be60cfbf2971b380d68ccb830174a55a7bf5201db9cb187e
SHA5123143d1c07845752a08e660fd344d98a05cf7412e0315fd897ffbd58c7fe961a922317d5981a91b44a8646a02784535efd79f3b2cf9067735049676713a600e3e
-
Filesize
101KB
MD56d18402137c680ae2d19097acb2fb712
SHA180eb6659153a71a4fa182eacb83a63289c611bc6
SHA256bbc751f146aa602c0dab8df2bde5ea321c775eced6b1310be977940b617bae70
SHA512dea348817b9d40e0d46e8cafe2e895b45ff1115267e508236d862f7ffb553ac33fcc6d90897c43d51c32bec91defb65c61356ae225e89b05b3379b2f15ebf793
-
Filesize
67KB
MD55090736db5ade8bbcd0b82f8328be39c
SHA1c2a029baa7de9a7d68e95b7aa67c7a03d0679869
SHA256d7fa316f6dc4bb89f6d1d113a25054c19e49e679d44726986641949a28fcecd1
SHA51210007cc2aaa76e7cbedd557146b97b5f15515e737be87a286467851d4ae365329046ffa1a4da56acf550fdf228dbf7c1c9d9d58ecd1ef1ae76d9f4549679caac
-
Filesize
99KB
MD595c442940f0e8776887a441dfe6c5343
SHA190530a492104a8ace156ab18d422c9e17f256407
SHA25654f2706b9f6c4117adb79836d2810c322bcf222df4f88c6f3533824470fb2a1d
SHA512c6e8bed76ed06af7fff6c9b3471d24a758509efbbc80946d5effdca5770509d28220ab043dad328efd7b22b87613f53d6148aaa3cc03ba1ce2ddcacc7eafd211
-
Filesize
25KB
MD55bdaf22f6c9a8d03a23e6cf4655c3673
SHA16fdd235f9a7ac81487203463ae12c1b9bfe15819
SHA2567d26318c58cb3026bbfa1e76dc8f3d7d9c7765ec9df113281316cb9ff2cef49d
SHA5127e23eb499b6a882331298040ddd091615da3910e42197c111f09560b2c0bb3c59c020bbf553dbe181e93e817efbb32c6c65b73963adf60ba9014c1608544bfcf
-
Filesize
475B
MD5095fba78b43a719cce907bf8e0bf827a
SHA1145a66eaf36f697953f9ec249a9491002ae16669
SHA256a6afb3caf9d8a366152c47430847fb54d6b947cc2921a7440130e2ba95dd0cb1
SHA512a6a2d49fdca9351386d7db951ec8d40744ad0ef38a8dfc44fc26f12a01f3b413e6bce05fa1876556b5bd8b77ac94a27fb0820c76afa7952af0f6a73a449c09da
-
Filesize
5KB
MD503bb0fda8cd5ae4da1e46c5c73916d72
SHA196677cbe39616f6ced3281094e8c9a1f9d266a1c
SHA256b01d1f2b1833715a0d31c393794ee485a2c3e8d9b0b51cb44fb991dad7454d3d
SHA512dfaf7da07e3437af804b44bb31822519a9f0f3dfd3d3b7b13812ed87922d05dc2755314c5c3102d24999e2c04df7dda0a6a4c821010f906d1ddf00c416761130
-
Filesize
6KB
MD51d59f050335356b9f7f43f0a50ac66e0
SHA1598c0dbd7ae90e390a7a9b2e20d845ffafdaef28
SHA256fb6eb43c3616d4af2c10a33c10b3708fb74635fef5af5a8b911dcb507ee655a1
SHA5129e3b772c56d343b8f1932be61e2be8c330df9497ede0cfb5d66dca207e15f1a701dfdb8a929cad7e2eb41d37ed4f266e0b8956cbe854a153e0000f442e717195
-
Filesize
11KB
MD55ce01855c7e1a3596011917fc6c71d6f
SHA1a060b7eb90ff4034eab6600bfc57e87fb2016a19
SHA256953e7c23b4b02c93845660ad35def5f50001b260d159a01d0cb83abbadf3658f
SHA5123db4ec61bbd09838e59d423b06d1c07f700f6e44cd3b77f4a3edad0d30003857986e96336f72a494dc3ab6756e46ccac2edbb75f7234c9a3184e22af149caf66