Analysis
-
max time kernel
145s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
14-06-2024 15:44
Static task
static1
Behavioral task
behavioral1
Sample
aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe
-
Size
991KB
-
MD5
aa7f29c0cc4177e3fc288923705caa2d
-
SHA1
61c693c789e9e4f6ffbbad5d1c1f26249f67331b
-
SHA256
2ba09d754a14da8ff1a1c8d3b95f30c07b312451c941765e90ed910e150142c2
-
SHA512
3fe9495c714f0a2b3c1e409e96fe09fab6328f52570e9152314ce8817224e2f35d9de417f290585c2b75f5417ffd5bea10f5531fbc5e6c64e3cf7d9a660beb16
-
SSDEEP
24576:KEtl9mRda1lSySGB2uJ2s4otqFCJrW9FqvSbqsHasgXhFHDAGtlRXZ+CP63n0NuP:BEs14nNV
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 2 IoCs
Processes:
aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exeHelpMe.exedescription ioc process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = "Explorer.exe HelpMe.exe" aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = "Explorer.exe HelpMe.exe" HelpMe.exe -
Drops startup file 3 IoCs
Processes:
aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exeHelpMe.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Soft.lnk aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Soft.lnk HelpMe.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Soft.lnk aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe -
Executes dropped EXE 1 IoCs
Processes:
HelpMe.exepid process 2964 HelpMe.exe -
Enumerates connected drives 3 TTPs 46 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
Processes:
HelpMe.exeaa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exedescription ioc process File opened (read-only) \??\U: HelpMe.exe File opened (read-only) \??\E: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\J: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\Z: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\T: HelpMe.exe File opened (read-only) \??\R: HelpMe.exe File opened (read-only) \??\S: HelpMe.exe File opened (read-only) \??\Y: HelpMe.exe File opened (read-only) \??\G: HelpMe.exe File opened (read-only) \??\W: HelpMe.exe File opened (read-only) \??\X: HelpMe.exe File opened (read-only) \??\A: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\R: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\V: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\S: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\X: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\Y: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\B: HelpMe.exe File opened (read-only) \??\I: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\N: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\P: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\Q: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\V: HelpMe.exe File opened (read-only) \??\E: HelpMe.exe File opened (read-only) \??\H: HelpMe.exe File opened (read-only) \??\I: HelpMe.exe File opened (read-only) \??\P: HelpMe.exe File opened (read-only) \??\M: HelpMe.exe File opened (read-only) \??\O: HelpMe.exe File opened (read-only) \??\B: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\L: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\M: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\T: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\O: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\U: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\K: HelpMe.exe File opened (read-only) \??\N: HelpMe.exe File opened (read-only) \??\A: HelpMe.exe File opened (read-only) \??\J: HelpMe.exe File opened (read-only) \??\L: HelpMe.exe File opened (read-only) \??\Q: HelpMe.exe File opened (read-only) \??\G: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\H: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\K: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\W: aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened (read-only) \??\Z: HelpMe.exe -
Drops autorun.inf file 1 TTPs 3 IoCs
Malware can abuse Windows Autorun to spread further via attached volumes.
Processes:
aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exeHelpMe.exedescription ioc process File opened for modification F:\AUTORUN.INF aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened for modification C:\AUTORUN.INF aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File opened for modification F:\AUTORUN.INF HelpMe.exe -
Drops file in System32 directory 4 IoCs
Processes:
aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exeHelpMe.exedescription ioc process File created C:\Windows\SysWOW64\HelpMe.exe aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe File created C:\Windows\SysWOW64\HelpMe.exe HelpMe.exe File opened for modification C:\Windows\SysWOW64\HelpMe.exe HelpMe.exe File created C:\Windows\SysWOW64\notepad.exe.exe HelpMe.exe -
Drops file in Program Files directory 1 IoCs
Processes:
HelpMe.exedescription ioc process File created C:\Program Files (x86)\Internet Explorer\iexplore.exe.exe HelpMe.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
HelpMe.exepid process 2964 HelpMe.exe 2964 HelpMe.exe -
Suspicious use of WriteProcessMemory 3 IoCs
Processes:
aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exedescription pid process target process PID 720 wrote to memory of 2964 720 aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe HelpMe.exe PID 720 wrote to memory of 2964 720 aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe HelpMe.exe PID 720 wrote to memory of 2964 720 aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe HelpMe.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\aa7f29c0cc4177e3fc288923705caa2d_JaffaCakes118.exe"1⤵
- Modifies WinLogon for persistence
- Drops startup file
- Enumerates connected drives
- Drops autorun.inf file
- Drops file in System32 directory
- Suspicious use of WriteProcessMemory
PID:720 -
C:\Windows\SysWOW64\HelpMe.exeC:\Windows\system32\HelpMe.exe2⤵
- Modifies WinLogon for persistence
- Drops startup file
- Executes dropped EXE
- Enumerates connected drives
- Drops autorun.inf file
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
PID:2964
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
992KB
MD5f9b8102b64b269e458c5b00dce68e738
SHA15c503b0c0454f861db815727bfd04c5333c54963
SHA2568f97b0eb85e07f5f414d30873868a89abe4124e5e06274cde13ea11865bc1ac3
SHA512a78cfdea36452c2608906804afc93a323b632f3907170eba40747e64068c8498f2108caed1bf49b45a1e557ff0ed955d19829d7405df0abb0b0721ce12cfd0ec
-
Filesize
1.8MB
MD544d5865e534e8744db09b8dddb82c0b9
SHA14da3ab2f878f5a3ad327b4f721f38d8a6ace352c
SHA256ec4d8567d38bf79a894260fb4fb46b40c2b3c58f8ed22e6bf532abe6aa5958cc
SHA5125b3d7129fa3a30d15741fef54b397d939e21972adeee4e5a8d3124556ed84a8ee487bc1fef86137406ad52cbdb4f55bd9f9cf3f59ecace56ae84dbd13a185d18
-
Filesize
1019B
MD536ca2453283a1204a4f51dd3d306ddd1
SHA13add1aa7192d2455ede47d6768fcdc0bb23ce781
SHA2569816a28221e040a9ca94e3a3f2826b7373f3ae9c762dcafcf352e9a9bf7ef65d
SHA512946befc5bcd4dc2f676df6a71183adec0720296fbcbf27d7dd4bacb1f8e9e3cef49b13a2e7614451ceb5328fd1f0bc81ac7cca44a3a627577e69b4fa4778955b
-
Filesize
1KB
MD587154ea7a9c8513a1f52021c43f81f8f
SHA1f367bfb27cfa841194299130ee822b0736253a5b
SHA256c08b2c7507878300aaaf003b2cfa81418308fee58ab4e3aa223f959ec6fe4144
SHA5122e24cea6050355caf60a710cd9715a9429741839fe8581291213c5e3fd60c76acbdfb115583d597f6ea9b2f95e3e9fa5fe1ab319fd229bba30a525413f3514d8
-
Filesize
1019B
MD558dcf654614676db6a92bfda7cf14635
SHA139ed875236e5095fb7ce7bf2207afede7c9d983a
SHA2564773663782d8f91c5704b4162555c5153c38598588a00e397a7b096d74e9cccb
SHA512f4192e0916dee7203a30c7e19621fef401036be8268b048b0446d320210d6da1145cc9adc6c0ea3b5b568913d49024e217986643b4c98af9d4ea4c143a099681
-
Filesize
1KB
MD5952ea4b21c32cc5c4ef2b5e85aef18aa
SHA15d6b32facd0bd55be350a74bbb26d417196b3300
SHA2561b3864f2c51d815f20d7db51c0ffa3322349dffb82e97f2054bfd401d1d540ff
SHA51242e131ec254ef618387c146dfd8b9337df5b297d38bc99a9223346344b7779c7722841e40c56256983ced3ea0d4cd4904f396c1534761a307c0aaa13aa7380f9
-
Filesize
1019B
MD58f6b8855054ec549eb9098cfff76d585
SHA1f5685fd103439f66e9c960d2eb370fa4c45f5e3b
SHA256222072370179e6468363e1fb6f01aee8b31568b9bd0480fb21e3f806bcf64a33
SHA51226f880a349f08efe54ef943bd4cabe5e4102962a9507bd76ec447f7863961ff630eca5f563c17f4c10910a0ffff784836441a783de059b1baa88d5f8409c1640
-
Filesize
1KB
MD57d767a8babacc4b9400885186e210d8a
SHA1bf6f95c3912e3d0766c70e1d07202305d9826076
SHA256e46acdb059b7128b465e047dcca0544e5b14680638c96d166c988f51fa0da668
SHA512f14fe8028794344bf4570418b37e287a8473fee8897a2a01f789b5447736819b484093f00e9ed4d56d1674ae00e878f0379a60685db54960f2cf12cf0d755f8e
-
Filesize
1019B
MD50a32aaef0fd432c9280dbfbe549030a5
SHA1288385c63006186998557a6135c32125bd99dae3
SHA256d7dedcc32583f131fe54c0a10e757040bc9009ab238f537a278978622a8be0b9
SHA5128250bd6932d266876352031e618bc93a6d7d7e486817b8ddfa9104a8b4df9ca0970985f36f2e631afb2b9c0d3db6a1b9d3ded7aed61cb5ebdb3f868170e2beb4
-
Filesize
1KB
MD52755c1e969921a79c32b7cef3bd4ba62
SHA1ae4cfd228ff667d1a211da8fa96b1f8121032b00
SHA2562e8da52e369a97348e3ea41b84c99181b11888d5b50a35dfa345f107b17de676
SHA5121ccbd06e70c0b3422b68c1c954fec6043bb0ca61269ecb2bdfe80f3da7ffb68907436bc55100280d84731edb017cf978a9a47bcaa58fc6cc4117ea5d234f3903
-
Filesize
1019B
MD51cf9aab50bbc54037be441068a892518
SHA15517ac3c41f3588e6aa24864e889416faf34a2ac
SHA256b9fe871ad3d36b8f39f2353bc6685cc05262555b28e44d6723dfa1b77a4424fb
SHA512306cd963c626005421fb95b6c56a38a400458b9ccb8cb94d4e7c01634c6116c813b0556f3617e150f9d63a97d4426950bde36bd0c3dc5d306183e5038ebd48d5
-
Filesize
1KB
MD5d164dfc27218b51cbc9c1fbbf04c241a
SHA1828476b26b133ca30be3805f5dcf70310bd27c53
SHA256594675c341d66c87dc76923cd1245d9ef327695c1aaf7dcb7befcb7f8e063d37
SHA5129bef396a010981663bbc2cbea9ed5b622c04d4e2847feeb0c09a7dc67d44ad24b8303c233b6635d8b3e262ea0720e01a1aa5d669ba7e6994b926727ad9843524
-
Filesize
1019B
MD5d097de7cbee00768fe02e426da250233
SHA1529c55f48aafd24992e64899f0c3f9d3c4f2489f
SHA256ee200615568f5ee1eb93c205e08e75038cd10d3efe3ef9bcc2f6003f39d8105c
SHA512e0fdaaabda6fb5497ec4f4548141e5e686b510dfeead969a2cc1c037a45df32ee0c69e8f87960b09708be208bc33aee51b263c5466397bd125ac94084b7cf708
-
Filesize
1KB
MD5746e86f747764d85af95a3584a85d6e9
SHA1b2e45a8606002f0f2da738f619681a861b193c88
SHA2562a898a4b1945976141acb3fd1ab1578a9a60c0cd4f981780bab3703e96287044
SHA512cba4b8a0c2450279f4bb893774d42942b8f6ee20f1d0a3d722f83435e6b98cd6a1f078e88712da28009b81dc8c3ea86db895abb47fe451f5ebcd3414b9a0cacd
-
Filesize
1019B
MD578117cfa8b76372b9cdacc8d80576a24
SHA1039f46565607b2964e7398c1d9c8263ab1db871a
SHA2566af7146ecafabba1698da68a060e1f2012a2b3dc735f857383261d9cb7f8f2b1
SHA5122a4b15b7d12ee1cd70b68cb7f07addd08568233f06017f29e43d0aa22ed181a6aa796ff64eeac51a1b9fa1c11e7e70e1aec743e36846331ccf4b4758cbe88e86
-
Filesize
1KB
MD5db606399060d9aa56b335238d6ece832
SHA1c120f02ef1a8a053671e03d5c4fb603521650849
SHA2560b7049680eabf6f412d5ba6d8d6e192c878c1a1197542ad22c8ceedb18c16243
SHA512946e7c05341fab35bf433d4336fc336bf0561be7b1223b46c5a86561c12c86183b5c05070a452e1462ad6642d7026384279a0e3a995b65388781e8cc9e7f7677
-
Filesize
1019B
MD5a2c07200fd59f2cc2af37cd61faf0e4e
SHA1073343623e903cc5340a35cc12e67dac764e33ab
SHA256aea0ae37f4bcbaf27e3e8bf123a6d72c1fb92d276594af63bf063f90e54c3d2f
SHA512823517d7e40be1ad7f1c9226d8ae78c3fd777df3ef8cae52bbd2e31d932e1394e963dafbc4642e5b1260fd64c956c42ea23701bf75eb4bb8c159b00d291a3be4
-
Filesize
1019B
MD5bf7d8c922d36159f09927707eadd0e9c
SHA17d5d5b4936076c900eac21a94bf62f03e5242739
SHA2565601dfd5ee72656f33cfe3c58fa02f2ceb9756ae37da46d89cdec86bf9ba4054
SHA5122dea78a9399fdcaef237bbe067f1a3ab503cfee14303cad2e5eb62b142f9f5b70210f44a2f487b20baef0577741a4e6d802b079d88ad63f6ea6960ca71c6e80b
-
Filesize
1KB
MD51b6117feae21ccb3bc2cd0499be78fd8
SHA1e943997aeab9a9c306203facfdc78404ec94fd6b
SHA2568801998f8bdf8b2c1af0a337bc2db350cbfa8717cf765fe54f9e9f4fd8efd581
SHA512820b6765770ed5277f96d0793e57224f9630940be7968c4038d69feac8a914611711c26743cab49cd0cb33a424b8b88bba2511b8ce420cf9f52ca2f7cee33110
-
Filesize
1019B
MD59d679cb878afa53669a8744b853b2566
SHA1ea564b13fab5d2bca2d5864014ea72b44404623c
SHA2560a135f9d3bba3c48acde49a1063f913281d40c36924b5969cd53b65870d3b769
SHA51286370ed9ad88110c5fe29500035ac26bd5bd38cbaaaaf7896b9a6f5d2d611911760285f1152b7703aa52dc1227fe42fbfd0a03f3533a44556e92b907be94de4f
-
Filesize
1KB
MD5463b1375c7fe3b615971c2ef74e80d7d
SHA1cc3954d2b11b7bdd3e3d7cc5ed168b465c0180a9
SHA256e98e7abfa8bd8210a5ad9eb90a1c2483335f88169cce6a8e0556d7d20bde8b5c
SHA512c890f17ea2e0280df58c05ee0b894a64aac16c87eee31454936ec6a0d6e46fdc8b75d9ec4fa2f2b45ce6d1b846c39a670eac4e3b3dabca2524e000768ee90b93
-
Filesize
1019B
MD5744b35b158e564841a2f1b8a04011b7b
SHA125566241ac99041704c43568ef66a94aae85ea0e
SHA2561e1fe30c3050a0ef78cb0cb7cb85db6792885398d405be19a18154913791f809
SHA512eade33729e07c43c37773d4e457dcbe297a43706e39893456e22946c43b57d7b68486583319bd5abe378cc9b7b28895945709b046a37a03b5ebae40b9f4186c4
-
Filesize
1KB
MD5685f602bf682cd81127b3593ba41e57d
SHA151b1a85566abb5fedaed71d76772f4485c1801fd
SHA25615abfc87008580b9b1f0c4f3fb4a79aa45dbf0aeacccea27073bbb568eb52579
SHA512ed4710758286db44452be4c3e70a65eca1fa7ce3ad8220452e11bf7500a3a18fb38ed4f031db175528399e2f8ad184dc9b96afd2e76d0045733f4300b45a30da
-
Filesize
1019B
MD572a4a20132e2eebab383fd26fc2f3551
SHA1fd5fbc094f2a431c0616f863a1a7472716982325
SHA25672cbfe1d8b456c524d4b5aa47e00d78042bad7625187253b2f35e1d8da880bb2
SHA512a81b32e94e8e330559851a088880157640a136d97126286529384a5eb31a6133c1b03a577861ac5c1d3de2377e873c30d356ed580b42fb0a78cacd753bbe2d9f
-
Filesize
1KB
MD5d9ddd6d7342974f495dfcf49361eaf6b
SHA1ddaee61bbf151079061087db9b50b238d42aeb5e
SHA25654797fa32c347d449f4022b8ea3d83072c6c637d6bb6a4d3f616504952341375
SHA5121388cdc1a3d7d7bfb92dc6e4a2c4c375fd23e68ddf1e1ddef4f716c539152982e1dedcd02f707659c3785bc6a6f6c552e0fbde782b43f608f728e05b493e6d33
-
Filesize
1019B
MD52154919693aa8511d8eda79a72c46ff2
SHA199b2f91e67eaba102ac7c28165f8ca8bf6f9296f
SHA2564ee05cc46f717c7d8a69b58d03480a5bd42f74625dd3c67d6f45e2732924a9f0
SHA512a177983bd32479b40131244900909d37bfd0bd8f0af54febc8f6ad42d33df67f1fbff53fa32c4badc4c2a6f9acb400cbf08e661956f0d72d79ea5241edd60e22
-
Filesize
1KB
MD5cd254b3777470f1897601ea9e437c0fd
SHA1afc76a802340a4c2d5eddf59b6c58bc7185cc04c
SHA256d4c848770351e1af4e46a4b1880ac912ee10ee46142a39e7129a7b67f462e9f8
SHA512a89d78efb0126120ed0567db1ec5b0cde3455d0b07aac064eb1d9adc3eb32c3b6ee52c848b579a3ee4b93ea41148a97f95c9751b4a42c28270a9befbf3e3e8cf
-
Filesize
1019B
MD515577f98aa8042d6681a391898463bf8
SHA1f98bf214b876335e676a97afa9801634149cc493
SHA25686810bb107ae1085274b4a7b6995fe1b6b4e800cf4f23191f2adc193a526dcdd
SHA512dfb4684f4203c1e67d1af40615d4baa203f2b5689561a81354f80cd52f2800d72908661dbe1333f1aa91ed5151687bb65d90066f64628b9940ce69de881f6fda
-
Filesize
1KB
MD5505d5397373cdee5112e276c48239a15
SHA1ed2a05ec1826415454e5767d4c2a08664c3d32c3
SHA2565c251de3d4198337a9c246c080ed595132e2cdc8a1fbd44e74e1178d0f3b3d4a
SHA512391bfb7dfda2ca9fc070265d0fed63236fe1b4cd7e6548aca3bd076dabaf4126a773a2bec0156c41c310c35b393e3c09e900e18d671f810cf7a3a46444f0b3cb
-
Filesize
1019B
MD5a7c33d3412a5c25d04222f7e66c2d465
SHA1cd9c503a3bb555dc56067fd767a7e074bedebda8
SHA256cc1fb2c6a5ebffad15a278936e80e1ce2b5a2fcc8a7fc234254e33aa838486cb
SHA51230793b20a28413f0d242892c90d08ea83821a5feb6e32605612cb410a2dc8fd1c8dfa696113567f801eee30136297240339cfea241c764d2dbb2b2468723a9bd
-
Filesize
1KB
MD51e71c59d445e51b7099dd0fd7699d8e6
SHA1b4b2cd63c4f54fd78d4d8c2126ac1aa2bd49de0d
SHA25661d41735ff5b321b4d8220ffddacbb25580920b4b1f2b749caa43297f7318dca
SHA51282bec1ba6ce299aca1fc8264ada02a013e41605a98f70cab4e3ab9c2f392c1c3f45cb9b05992c97511cfb08612259b2799492a9ab17932e6853ecf1aa108dbdd
-
Filesize
1KB
MD5f3f4d57fbe70f298bd326b0ee038ceb0
SHA183fdb160e8faa8afd5b16567d0c947fd84a503bb
SHA25623eebad8b3d86762955fcd79f0da77b2402342ffb516e02a0486951ac190ee17
SHA51220d08a3dd58c3672e4607aaa40aa344e6d57df48ad11b7c2b174128cf65f034fb2d5bf8736ddebb538195107f2cdcacfa2891023488f032e8ea5571f7ab6cfd0
-
Filesize
1019B
MD550ed507a6cad3f9b8e98026153852d02
SHA1dd2bc02b280fb687ca55ec23762ccc89ab485f74
SHA25698d49434a62389de83100450c7f2750eb85fefa22df80bd0efe6ca7399629d9d
SHA512054642c4cb15aa0239331eed0da1117e775da150c824a63776455171efeacb5de1e5e346cab117a14c05d93a1506d03c771f5fb1f39f3b7c69cff1e104812f6b
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
Filesize
1019B
MD59b526d5d8ed451db2218a6a7bb6b0cc5
SHA13eab6a4113a179d724472855c89ae072cbc931ed
SHA2566317dd819c510b35ade08340115dd7846c2e4c21cab1895bd8aa61e651718d67
SHA51246bf9c9001f0795d3ba98b066136a3a0ace0a6af0ea7415d45390b437b0724472df4a28bd57ded3cafde4eeffad50239e0b622af6d1ba024c26c98d16a05aab2
-
Filesize
1KB
MD5ee160927876657493992927251c0c51e
SHA1eb796c40a2bb0ae7cc16d68a17128066cbfed040
SHA256034286090ea99d55081627373a5de15a73ad30d3bc8086196f2c6ed42320eb0b
SHA5125e9e30c52a442dd1d2b3114e99097247a730f267c289d8f2f03503ce84278f056ff03fb48931ba30ee69ee307a2eb5670a0de1b99b72829cf39fe98c30c37a68
-
Filesize
1019B
MD5c07a34d93609213933cf4b8e60d86d12
SHA132c679e3f85857006f4d58a7db7a705c6d2a74c3
SHA256c47815428917cb6ca71a51d3eaa2c67e82f591709d22112190c00acaf8023ed4
SHA512e98064258f8192b91c829cb01bc016a1f9ee0034e05b960337969765eaa854d03d6725fd5953a434c197646d6e82597031520b26c91d9c17d81e2f8c856dd8e7
-
Filesize
1019B
MD5ee287bf0572a06191c14482f74c36891
SHA17d0b9b306da5367034fcacc699e6a7707ae05c6f
SHA256ca39ca7d88a39c1f81b027bd2ce720d02be0fb528442bbe381025e3dfb3ab113
SHA51289c2449d2a576ba01d8679cbd3cc57d80e0681d56e780d70a43e3974ec9273ddfa8ca799e7ddf87851052c18e6e5bad975da6a05fcfbcae1dc4afd0032c53f6a
-
Filesize
1019B
MD5b7d98c4e1f0ce80f1a1d1358a031a35e
SHA1a2322be6d03b844dbe33341a8eb19924d065223e
SHA25619619836c0a6b354624c4726a56fa040f26530f28c790c29fa5fd919aa516e29
SHA5120c42c7336f1144581048aa2ce08bae148f77d0446e1cc47506a87f8f375ab731185eb24c05296da05a4ddd95c01866d66903955e86e921a0993a15cd4eae98ec
-
Filesize
1KB
MD5fdca1afccdca9e50599ffd11278c0f18
SHA1ac2d1a43bc9b3f69023ff44d3bb1cc9c79bf1317
SHA256582230a619e8aba1f17a692a8e31b4e4f95bc44c29b5afde0499841b6abb560d
SHA512fefaa52f37dfe53051ca91b86fe8381a7ca68a6736b7d107e5e0306584891581733b18c0cbb36c3465607e27f7a87cc543c256effb762a31b1df978956ee5667
-
Filesize
1019B
MD5d3d6d850a15156511c0774e76070ada9
SHA112fc95d4671a20fa665077920b744864f6a5effd
SHA256de72abb9d893c82c90a21d17453d1c03dcf36f49cbdad79d96ae656bcb97bc99
SHA5128eaae9443e4ea67bf8d61722d3436e18459c84a34dda703cafd7e3b0c80b8edef0453555e4cf3e6aa5ca54e97cf2b2482cc390429bb803ac5c69d20d48c24870
-
Filesize
1KB
MD5cc3aaae1481b266537621065d7cd9ef1
SHA1b4f08af7722a89b12de9fecd7407ba42c54df54d
SHA256ab111aa495633e6601029e2e8f3ce61fbee35a673b7fca00860db622a05d0de7
SHA51228d1d48707991133d33359a6afedf93fe28ac8d46ac1b9693cbbccf52dbb8370caf51273dbe1b7147fd590c5ec23268fb99d5a135581e773a3b369c0fd98c6f8
-
Filesize
1019B
MD5307cb1ecd442d9e26d751087989ad0e9
SHA11ab36599b65e10e15680085a3d77764cb2fca182
SHA25607f0041e591e4ec9d556676068ec51e14d61d85478dc31cb1090507f56a78101
SHA512bf3dcb4990c5b8b9d548d16896d2da2fe654d168db303738defdcbd9dfca8db39aafb406ec1a2646c39e2304003f760b5d9e0a4e10830c579ec90f1f60405f5f
-
Filesize
1KB
MD5bcf5c78de824c0cc159eddd50ce7c1cc
SHA15bf910293b7bae14063c4811fd35733c6c4c377b
SHA2569bc35f21e5547b8c38e5185e036240c0a51e33f359891d14c45756228a724728
SHA512a53d39314422c4889ad8ebf8e6211cfa9fd21d885f06da3982b1f3cfe54ec719757d3f3043d2dfd1fa8b3c7fb0ef770439621ba53f470c2163b962ab56b1e38c
-
Filesize
1019B
MD56e6e9b7eb8bf84e7e9dd56ec467f79c8
SHA1f49903866e3da59bcd7178bf745491b29b3658ee
SHA25679c48333c086c157c421f70926938f19601e107155e55e40fcd02ab901fe5612
SHA5120f746931804ae9eb8ac68ebfd9f2451578c7e443807adac9168a346fe42cb95cd01db89f4df7d0e6dd9b7c9a3b0f5c7e931f59444857dbe4257365acc9629856
-
Filesize
1KB
MD508d2f9fc53fd9c7507f386d12e700c1f
SHA1b65edd3e81b48eb948f949fdf61e420a9f85d5f7
SHA2564e03c86082401a762e68702f51a00d397a1deeb84f308782b324b0123b82ef9a
SHA51219dffebd9b3eaf18cbbb9a7e1f0a4e37baaca969922e21965c3e9e673d4a7d7e7804b9fc526587dc9479732d0bb595e51db90b11fac5b8d965fc324a21149508
-
Filesize
1019B
MD5b125659f7581afadf2e414a4a72d88e7
SHA157ac0bea025eb9bba3730b50d3b0ac77e9dfa420
SHA256d4de51c2088683fe6f4378549a10afe16297130e028c6558625923250cda7871
SHA512e3e6d1d19195aaf9ff53c3e0cdf734f5340a71509ddd810c8950685b580beca0fd28ad3dd4f82a8f79643c53e7d0df0db7d45575d8518ff0eddd405031735fea
-
Filesize
1KB
MD51d4e026b771eeb854a127b71396df95d
SHA17afe8f57389ad90c9e3e31b8fac793c63a6ee3e3
SHA256a021d3ba85ac3e20e2ad042f2e26c7f3eab50c20b14257694588201f55ab6811
SHA51213027187a0e706bcb970ef3412e90a07b59e528f0774ddd8d180c2483d1fa874ff12bf577900cab2e81e78b3d49850663a48654d27f721ce42921d835e96c2b4
-
Filesize
1019B
MD56d19293048c391dc8d116c00e232bb25
SHA1832a9209d1da51cf3832452efe613a8ae79dbd66
SHA256580f15d80c3d6070656ccc7ac2550ba66c17dbd6040d5d7de5c05186c3f5805d
SHA5129b4a8cab854dd9d6444be064848f729169873796fb6c11342a8f1acb6d6891c31fb94ed058e08f484d7cb4d5a1f9db4df57be6eefe36782dbaa377feef9ba047
-
Filesize
1KB
MD5b0b91be4de2b250c64f008d70a1006c1
SHA1d2e203bee493bb7d1a219d83f49eaeae9184f779
SHA256a19828527dd81ea051776946a6f95ad738859e0b29d3017271d7c75d23d80dcb
SHA51214d2083cbe88f2ea408ac1e412bf1af095db2c6db132dd1f8acc5b172a8c83b5d92538d106e429c899ffa446d718756479ef7edced6863c88375dd2cc77562bc
-
Filesize
1KB
MD54277144a670334a25c6758bdb0bd49e0
SHA1b9bfffc05eca842f91bc234c95e07f5ee9474f0e
SHA256e73147daac398e35b172771bc17cc10b89c4d34d379be0a3e2ab55f7534326b2
SHA5129404580c9663b05c5fcd8a165b5d2045c98e07e34bbe2818b355e1fe4ccd6a966cd12c2d1bf9a7754e146613b99ba7c8fb590fa7cf5a090e5ff0b990a261ae1f
-
Filesize
1019B
MD5a4b83162ada30fb77088c17a7adb4830
SHA17bd1e63ecb4d56ba51454ee84f46c2189ddbaf07
SHA256c33827b58ae43ca481b88c6ca81cd5f13310c84a08b74115961da8ddd67a3381
SHA5120eabe392a4c1f39a6745aaeb01e6898f2ef57a260e06cb5468f5150678e3af8aa66773dff3c222232dae052447b280dcd9e85416382c5fe82e2c953a668c4362
-
Filesize
1KB
MD571392b4951d1dcf51c18f412a669d08d
SHA149288559398f8ee0d7c9f6bb8e98d13aa69a1600
SHA25689f9cd6c7aa590ac472e7dc88b1aca2c8af4a3076f2a8fd36859f60d0be6e661
SHA5129716be85c928f42bfc4119ff99265e9420b23b4a11d20e2a2c8053f518d9d1dff702de2af33c3ee0da46fa824a930364951a2fdc28903306873fbbe68cb2b7d9
-
Filesize
991KB
MD5d7d92855e2ec350e1130af6fb76e5554
SHA168728ffdf264158b78d57f4101e2e6f0ff988289
SHA25656df39c4fc3809a0401d3c3e75466a5a08b71ba678df7ff05e8b53495d0886d1
SHA5129f950fe4f860bb08a625b8394fc77f4658e83696432c99bba0878b8d9b188bfee3d1ed199418f219337e66b512b0b6d282352dcdf68e9a557c0a29f24e756afd
-
Filesize
145B
MD5ca13857b2fd3895a39f09d9dde3cca97
SHA18b78c5b2ec97c372ebdcef92d14b0998f8dd6dd0
SHA256cfe448b4506a95b33b529efa88f1ac704d8bdf98a941c065650ead27609318ae
SHA51255e5b5325968d1e5314527fb2d26012f5aae4a1c38e305417be273400cb1c6d0c22b85bddb501d7a5720a3f53bb5caf6ada8a7894232344c4f6c6ef85d226b47
-
Filesize
991KB
MD5aa7f29c0cc4177e3fc288923705caa2d
SHA161c693c789e9e4f6ffbbad5d1c1f26249f67331b
SHA2562ba09d754a14da8ff1a1c8d3b95f30c07b312451c941765e90ed910e150142c2
SHA5123fe9495c714f0a2b3c1e409e96fe09fab6328f52570e9152314ce8817224e2f35d9de417f290585c2b75f5417ffd5bea10f5531fbc5e6c64e3cf7d9a660beb16