Analysis
-
max time kernel
52s -
max time network
54s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
25-06-2024 20:16
Static task
static1
Behavioral task
behavioral1
Sample
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe
-
Size
2.8MB
-
MD5
0f61d6f1bff53b255e4ab2fd5db7a202
-
SHA1
c85491e3d17480f2a80fb1a85f1882d03f942de8
-
SHA256
d224a71b5cab8f350fb416cf9c50829c422d16daeff4d4da5b4084ad84176a5a
-
SHA512
c3ac59c0234337ba54c634925131d1372e1507b4f20d38719a176646f5877074c2911d64fc0d7a6df4ed33df1c36024571f3b81228a6fadb44295466521ebb42
-
SSDEEP
49152:jj9nOWQH5bUUvbY9JkNFjYkS5QE50y/HoGZPf6dRwHGJQRKFJirgDgRQhjJJ:jjQhNCMNFsd5D/HfZPf6QmWK+sDgKlJJ
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
Signatures
-
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exedescription ioc process Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe -
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exedescription ioc process Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusOverride = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusDisableNotify = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallDisableNotify = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallOverride = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UpdatesDisableNotify = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UacDisableNotify = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe -
Disables RegEdit via registry modification 1 IoCs
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exedescription ioc process Set value (int) \REGISTRY\USER\S-1-5-21-2539840389-1261165778-1087677076-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system\DisableRegistryTools = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe -
Disables Task Manager via registry modification
-
Modifies Windows Firewall 2 TTPs 1 IoCs
Processes:
netsh.exepid process 2068 netsh.exe -
Executes dropped EXE 1 IoCs
Processes:
setup.exepid process 4740 setup.exe -
Loads dropped DLL 54 IoCs
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exesetup.exepid process 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe 4740 setup.exe -
Processes:
resource yara_rule behavioral2/memory/1312-0-0x0000000002590000-0x00000000035C3000-memory.dmp upx behavioral2/memory/1312-8-0x0000000002590000-0x00000000035C3000-memory.dmp upx behavioral2/memory/1312-7-0x0000000002590000-0x00000000035C3000-memory.dmp upx behavioral2/memory/1312-185-0x0000000002590000-0x00000000035C3000-memory.dmp upx behavioral2/memory/1312-192-0x0000000002590000-0x00000000035C3000-memory.dmp upx -
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exedescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\Svc 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusOverride = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\AntiVirusDisableNotify = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallDisableNotify = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\FirewallOverride = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UpdatesDisableNotify = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Security Center\UacDisableNotify = "1" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe -
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exedescription ioc process Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe -
Drops file in Windows directory 1 IoCs
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exedescription ioc process File opened for modification C:\Windows\SYSTEM.INI 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe -
Event Triggered Execution: Netsh Helper DLL 1 TTPs 3 IoCs
Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.
Processes:
netsh.exedescription ioc process Key opened \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe Key queried \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe Key value enumerated \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\NetSh netsh.exe -
Checks SCSI registry key(s) 3 TTPs 6 IoCs
SCSI information is often read in order to detect sandboxing environments.
Processes:
setup.exedescription ioc process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000 setup.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID setup.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\CompatibleIDs setup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000 setup.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID setup.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\CompatibleIDs setup.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exepid process 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exedescription pid process Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Token: SeDebugPrivilege 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe -
Suspicious use of WriteProcessMemory 21 IoCs
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exedescription pid process target process PID 1312 wrote to memory of 784 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe fontdrvhost.exe PID 1312 wrote to memory of 792 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe fontdrvhost.exe PID 1312 wrote to memory of 316 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe dwm.exe PID 1312 wrote to memory of 2712 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe sihost.exe PID 1312 wrote to memory of 2756 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe svchost.exe PID 1312 wrote to memory of 2988 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe taskhostw.exe PID 1312 wrote to memory of 3408 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe Explorer.EXE PID 1312 wrote to memory of 3628 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe svchost.exe PID 1312 wrote to memory of 3812 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe DllHost.exe PID 1312 wrote to memory of 3908 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe StartMenuExperienceHost.exe PID 1312 wrote to memory of 3976 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe RuntimeBroker.exe PID 1312 wrote to memory of 4064 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe SearchApp.exe PID 1312 wrote to memory of 3940 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe RuntimeBroker.exe PID 1312 wrote to memory of 388 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe RuntimeBroker.exe PID 1312 wrote to memory of 3404 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe TextInputHost.exe PID 1312 wrote to memory of 2068 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe netsh.exe PID 1312 wrote to memory of 2068 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe netsh.exe PID 1312 wrote to memory of 2068 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe netsh.exe PID 1312 wrote to memory of 4740 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe setup.exe PID 1312 wrote to memory of 4740 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe setup.exe PID 1312 wrote to memory of 4740 1312 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe setup.exe -
System policy modification 1 TTPs 1 IoCs
Processes:
0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exedescription ioc process Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0" 0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe
Processes
-
C:\Windows\system32\fontdrvhost.exe"fontdrvhost.exe"1⤵PID:784
-
C:\Windows\system32\fontdrvhost.exe"fontdrvhost.exe"1⤵PID:792
-
C:\Windows\system32\dwm.exe"dwm.exe"1⤵PID:316
-
C:\Windows\system32\sihost.exesihost.exe1⤵PID:2712
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k UnistackSvcGroup -s CDPUserSvc1⤵PID:2756
-
C:\Windows\system32\taskhostw.exetaskhostw.exe {222A245B-E637-4AE9-A93F-A59CA119A75E}1⤵PID:2988
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:3408
-
C:\Users\Admin\AppData\Local\Temp\0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\0f61d6f1bff53b255e4ab2fd5db7a202_JaffaCakes118.exe"2⤵
- UAC bypass
- Windows security bypass
- Disables RegEdit via registry modification
- Loads dropped DLL
- Windows security modification
- Checks whether UAC is enabled
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
- System policy modification
PID:1312 -
C:\Windows\SysWOW64\netsh.exenetsh firewall set opmode disable3⤵
- Modifies Windows Firewall
- Event Triggered Execution: Netsh Helper DLL
PID:2068
-
-
C:\Users\Admin\AppData\Local\Temp\IPMx2\setup.exeC:\Users\Admin\AppData\Local\Temp\IPMx2\setup.exe3⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks SCSI registry key(s)
PID:4740
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p -s cbdhsvc1⤵PID:3628
-
C:\Windows\system32\DllHost.exeC:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}1⤵PID:3812
-
C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe"C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca1⤵PID:3908
-
C:\Windows\System32\RuntimeBroker.exeC:\Windows\System32\RuntimeBroker.exe -Embedding1⤵PID:3976
-
C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca1⤵PID:4064
-
C:\Windows\System32\RuntimeBroker.exeC:\Windows\System32\RuntimeBroker.exe -Embedding1⤵PID:3940
-
C:\Windows\System32\RuntimeBroker.exeC:\Windows\System32\RuntimeBroker.exe -Embedding1⤵PID:388
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\InputApp\TextInputHost.exe" -ServerName:InputApp.AppX9jnwykgrccxc8by3hsrsh07r423xzvav.mca1⤵PID:3404
Network
MITRE ATT&CK Enterprise v15
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
4Disable or Modify System Firewall
1Disable or Modify Tools
3Modify Registry
4Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
45KB
MD5d8b2625332809c59167375d6db04cc21
SHA175dcb61f91d9bcbea99216a43fe8405d7c50f5cb
SHA2568a448d644d03745849e1b101cea6ad1522e84e243128d4aff15030430117971c
SHA512a4d38c81b5d289fcb8e3b25bed58d848c5a53ea44a0bc1be5df7ac2b9a9aeedc89f6d54cd36d22b0d2e5b52b7f735a264289ca5ce0fb2259bdd756ff8e33649b
-
Filesize
64KB
MD5edb336a8798a4d24465e3eef57d15573
SHA15a4bafd58b55b24e88f74c6b3314adc33f62998f
SHA2569f82be9182f644cbf2cf2bc3f083ca416baeab8f406ba8f31fdda274705fe558
SHA512ecc4b01fd3757a0f11c591d7f1fd72611316a04cf479c920e51f2e02bcf5638be418b3bbf1def5b82eedaeba31fbd16ab4a9429fb76a95477ae2fa9bd2140363
-
Filesize
8KB
MD55ce3f282528dbee1be609cf00db50141
SHA1fb51a7411b86b9dd470be83e3c0d45fe36050709
SHA2564b1c0eaf62712409885af232169a74c2a2b7796cafa57f24434c4fba2c37af46
SHA5120401d8d9a3dde5fbda8832b218318c0338853d0959b5a9a88a2fdb78b43297d52cee56fd9715fdfbb48c589d3990f203d8a5865155e2bfe95a06e98f6fc547f7
-
Filesize
60KB
MD57d9257455dcf1a031d465d649303c89c
SHA1f24db87f27b121b6b7171d72f8deb68ea972db5e
SHA256ba52e3ff70818c6265fb161637dcdbdfdf3cccc9d032a5fca1c87ff1db014f60
SHA512c21960b1f447bcfa466fb6a62cca7db4ea30e30bc228554438fa5a37ad677100eba7dca9c859b137416677050deebf54779aa7678441d921575b2ca405e54d52
-
Filesize
60KB
MD586841abe7918c074f0728ae690c08b5c
SHA12472d3a7b5624574b3f1ac7a9695c1f18833f6f1
SHA2569e29c3a8ef3785cbb5a338d3608df05136dfc488616f4f1307f5eb0636dda2e8
SHA51270bdff0a35216b38d5542a0c0ff9f04cc6ca912bb83c39749def68eadd5b90ca54b1d773f2cd540bc628277acfa1de10e2ec99778880091e56aeea6946cb8bb4
-
Filesize
68KB
MD53dc67c4833188e524ba97275fe658d57
SHA111868043094490bc170bba1fbf40deb9c2e0e254
SHA25643a9787f9a9887c5e1756cca3bbc6b018209bf7cf5b3689ef15766fbeb43e86d
SHA5125b726617a2af5acf5ec68e860992bae483c6fe9efc96274b753ef08cf2b2cb405025229924a7c4a3a1416dd370e78ab5250736d6a9cd6d9d1f2b9b6a6e79f0c2
-
Filesize
72KB
MD5a84d03d1faa10bae01d36a8ec78e946f
SHA163034804825f4ffaf170258d70660928dec38226
SHA256692b2ee2ebb91197b6cf2e3ada22907d68e7e96a64d63775fb3ca4d105ef90bd
SHA512a791ea9a61336e366c679403ca636ba19e4c19ac1de63903807aa709ee5d90a057f935cbd296b4c482e286b332fdf1fa23465424adf07046d02adef6cbc542bf
-
Filesize
72KB
MD585af8d19c827ab88af40d3fb687cc255
SHA1735fedf40c45af80f05ed6320ed767e4f33282f8
SHA256c02073b5693165aa6e65f1e6c95cacfa35edeab81a9ae6f1b96beb53e2b69f04
SHA51217d5c7d3a88cff6a787b32385f4c26635ce54ae088d5b25c38db98c70227fc0e5c46ac0e3c6182e804873312815a35009fc92f8a02a9c6bcce696696ae6d0a23
-
Filesize
72KB
MD5eb60c35d49bfe040bb1ed1b36ee03c8e
SHA192bc627e8f2755fb411dbfd2e7c982fdfcfba29b
SHA256d69fd04482ebced8231eba2abfa4fb956eca3169823e6d661da477a6e42ac111
SHA512829324e2e29ec6e0011cd2ed5e3b957daea4a6c722c34e02427daf8a87275ff3e560a6f787e31394f3a1c110cbbc7fd80a078351536b9995182ebd6a3e084e0e
-
Filesize
56KB
MD5e2d404252ae54734e8f9754bd22054fb
SHA178f4f275fcee499b4356829758c0c8c17b4e54f2
SHA256da49d72a61f5d58120e14f6fcc2d5fee750f1b7f09a206430d54c2feacd8fdc6
SHA512f9aaf560313f68c18d87127acb526dd9d728fc8a9945b8eccba01f22ee96a0628e617186fdab4aecc23f25c2fa9052e71398c51a6a3bf0fe0e411d574dcf342f
-
Filesize
72KB
MD52f91841cc287e1931170b7a2222c2820
SHA15891757be65bbc2841f617fe4e686225dc07c8af
SHA2563a91992a1236a9d3f516e6ce575147ceda20825fa2fb785f70d78b99ccfbc485
SHA512bcc9328bd54e3052a21ace3ceaa3cda4629b5537be2abdbabe207d96911d4720ca6b15c4aea74aeac62335a5a16f75c1b3a9930b6c3f2111317cfe3d30fe1547
-
Filesize
68KB
MD51ad3a2abcea7b96c646d3197c5211410
SHA1c90db66746f6e84b3db1a3e610077c99bdb17f11
SHA256bee3bffeca896fb5dd9f0bdaedf156a30e1a8415c7e2f63ffdd5232773a6f3ed
SHA5129e2b27b9ec4d6213d58491b2db7637f4216083fcae12f2ba869f9d577eda65d9a4cf896047f63589653ab1ab93c6990c0cf2b8a0d216eb31b8751befa4c0277d
-
Filesize
72KB
MD5f227e390189c992a66dba68a6a363c76
SHA167b1f245f27dc678b40b630c1def2c0886e6ae83
SHA256e37acfe4eef4cbbd29534e72533e6a9c5b7efd4c391f27b15c0308b9fd4aa3b9
SHA512614b26c19d7e24f1ecce3dfcdfdb3aa5ffff7ed5aa71da1b2c08ec6d69d1d2b07f57df7c00e89367f6124c37380b92f473ba337a4d3827e59a182d9e37eb37eb
-
Filesize
64KB
MD5036802079fd51ef00262a48579b18a2e
SHA11baa2f7a56aaf61c626d1b98b333fb69b9907628
SHA256288511f5191dea876d5d1d03e8e7effa4a9c25572a2b52b3f0bd6317fec3a03e
SHA51224aa1df5118e2f96e21ba6c8b2f7f5d69a76b7b0aaa5137a919ad5c70d582027d3ac76d27676e9b5417afc809c23fe60bdc49a808a34a7ce83060e98d892412a
-
Filesize
72KB
MD52fd69ae8f097cc52896b4ecb5a6becd5
SHA13bb2cd663a2f79b16f445e5cebcbc0c467e5dfdd
SHA2565764d34131267316a7c516b30d95c2605a93e86d10530804eec3698014a56c89
SHA5122167fba81d76b09c57a976ae355a995acc825d8c621f33e7e0bf4d9ac57dfb049f2cb986fe7ee28ca552fcec166342cacdcb6d04bade19201a38d8b7c0db8341
-
Filesize
72KB
MD5503a3f7c7540ef8cbfa582f3b541e072
SHA19b1cd39309db16bc0ac91e65c5851277be82bcdf
SHA2569d3aa9b2173a812064ad9d71ea0b0223c42de3e726595174f2c4bbbc56fe53b9
SHA5126da61b1af67a393da1de6c550173b4be6fd2bf65874c41e42d9213789a27d0f329df7d1a97ab501315f38f63dc9c2652a9ecc1cb3cdb93f76fdf241f9738f85a
-
Filesize
64KB
MD54fc051a8f6ecd60861f3b7c1d7341520
SHA16dcbeb2bc5e2b1d0d1207543f85eaa82cfbafad5
SHA256ad51dffb7ae2630e124585cd09f7465a186d9f19c64f9af1c077b4cafb042379
SHA512eaabf5e66e94ab841a91cab68d7015532ee3845b176896a5311bf2ca26a9eedfe70b8c7c5c16cd63d9873d2100f71cf3ffe48589cd9fb253e214d47d80268e68
-
Filesize
64KB
MD5b38240049b507c63bd821bbab1793e66
SHA19deb00b61a5f2b38d5278d70e4224aaad5db5aaf
SHA256b7ec7f1918592b46daac2900f6e17cd17af7509b11566743887fa51e11d2f284
SHA512ec09dba6260224aec5c9a002a5eec33d1280a5d37f9cb640921fe4bc6d7a67c1f4024e2741a4f905faa1049054cc7d5d00704d90e301d145c6b86595e713aeef
-
Filesize
72KB
MD5b03e31aa2cdec006b4416122e8ba5c24
SHA1ddec226ad76710977ec5fb961d6722e1b0ce0ea9
SHA256123e75d0db66cbfa212c58a7221b95bfaabba4e113101dbba5d601afd862b7cb
SHA5129e281c277d3ccdca9835527cf9eb7fdc3e4f390f893708cfd5dc1469c16054b6861642d43e4f672b98b53e2525e2d18197c50646994158787bc22be4baef35c2
-
Filesize
934KB
MD5902badc2ba3c82b7be5a587944b0667c
SHA1febaa92ee6a9f9761e21a070a6ef474446367e3f
SHA25659ca610e4ae1db9ee6f74d003f15d4d4a0673949042fa61ceb8a60ba8ef0e407
SHA51298cf25e8823169b4f73b87c0332e320bc521f310dc13ab388aea92a7480d2d5074b9514d81cc21d35ad68ef981ed6b87ce0e469b09b8329b9771c83d755d0cc1
-
Filesize
12KB
MD508a3ee4acaf42eb6ce8a190657fd16f8
SHA10680746ed7ccc2960bf75a4662d3b285cd4ca913
SHA256b4d7d166881730ad6545c9ad408b5017e33775d97cb0f98853789ce24bd2c729
SHA5120509a58aacfd532c2d95bebb7fb0311dbabdd769b9d8286e2c17a5000434381824989b10a73f6bca31a2af6f2aa0afad9ce8653195184e27fed3dcb5c5ffd5bd
-
Filesize
5KB
MD5490d90277ef33fc98bd95d4afde877e2
SHA14e07b68aa37039ff90755505da52cb16200774ef
SHA256c8b7cc284567a62e7b28700fe3b78c180e125f91b01c52fbaccfbb3feaff1bd1
SHA51232a889124c3531694bb769d5b16973358e77de2e2e4cca35b9a92f379596a3f456dc4e400771a48c178c06946ba04cdffd87d088f4be86e3dae1991a0e33dbdb
-
Filesize
14KB
MD5a8e7db771cf0c3d35c9b642c956ec649
SHA163611472cf21d77f7a8dc9feb98564bed8a13c2b
SHA2560aafda3d1bf7deec01b9ffdcf745b16c938257c0e44467d60b3e6a34b540ea62
SHA512dd05ad291445d5c27ede75aa403b8d65b4d79ad4e1bbb991870b6849fb80259a67f232e0e1c530cd2264a21a0e0ff506a05ac38cb6c2ea8b9acb9d9f8874a90a
-
Filesize
16KB
MD5d8f982c63f29da82f18f2fff485e96c5
SHA11b1ed9de62b96204d33e071ddae56598b30d6f35
SHA2567a89f9573bd40499d26b4c2509443978a54e1cb7cfc830b0650aaac08630482c
SHA5128cc92b0a07ce000677efe3920a74f66cbe1d253c23d62b170b926711e4622c48dc9c521660e4864344a88d9c08f68b681d46ff5b3b3c106ed1f1513a2c3a27bd
-
Filesize
17KB
MD59eb7c9541631e8d968dc597a0dbf6557
SHA1fbcce9ee94f4b2c9e3c433186b0fc010d6a59886
SHA256cbeab08b554cbfb99d16342767e83157dd87b191cb537b5c665d74fe1db97d21
SHA512da4df54c7eecfc8348e0d2503d3e8cc1e8113d10ac07c8f7fb042f8b8a957ef2e90475d9d50396e153d440bdf7aa13f725c7017040fff73673e45baa5c184c77
-
Filesize
7KB
MD511086a9555cd2e8d76c36125087da673
SHA150ed33f106f8e731809cd5824366f60be7551efa
SHA25631e678d8114662264eceaa47c08e5fe14620cc90d26f08719aab15ec2687165e
SHA5127f3464cfab3336acfb128cc4969b07ba3402b97ced533aa1f1505ceab19e5b915a934b3d7352991fa6b6df5403bfa84350cfc7e85394d7e705df067642dda9c6
-
Filesize
18KB
MD5fd20faa826e04f1ea85aec781135fc5b
SHA16c8c46b2613715f1c7df44be5f218f555e5d9274
SHA256d13035b420bcf36df7a3700b743c5c267be6eba8febab195cd922773936425c5
SHA512ebd3690d977ead8350314013ba001e7be1d46ef38c6b31460701e77392f5eefa0fbd3730d7d901b046b9527c0dd12cd04488c32a382b00f361c677446bc03d6b
-
Filesize
4KB
MD591b0a9f40859ab59886f1decd1f5a061
SHA10406547057933d9804dec02f27ca9b7a5f4bbe1f
SHA256b7aa26bb3c0f4e0b5d92369466615f2625dac9665cda10d5700fa34e401be8fa
SHA512cdbf7ed82a54327b04fa60dccd53d2d40342101869ffad07fff12d417e6cd13b74d0aedaaae1aa0600a72b2f578f9bb236d900bf8861bc6b137eb03d24828219
-
Filesize
4KB
MD5d398d43093e1914f976f6991f5be103b
SHA1c2b4fda8f9f870cd4c3c20eae753dc36a3ff0b2f
SHA2560a1220db3cd1eb38e4f1fc3bd3b1c7e6b1c68dbe775e8749e9c40bdbdf9ed5e3
SHA5124e2158598eab56577fe3aeeeeb68ef1deb02cee714ebd24b82f661f1cb11764855775242a8d9ab913b0f3bc8b0c6437845de97bdd3d01cde7403978ee3594901
-
Filesize
10KB
MD546b6bb8b527e41818e0a0b78d34c98b2
SHA13ff0a8c6069740c829a8a9fbe21b594e1d5e8fc3
SHA256c64b250c3d83351fe5f3a949763e6a0a66ec979ee4d5198caf5a317c1eb344a9
SHA51216cc21451cff470da7c58368e93d1a598b1e1ee773003c3fb6c21f9777343bde8f215465d736139293cd09c692043a478d9e8e665c87ff55e5657c3e50401a2d
-
Filesize
13KB
MD5f169f02e0448039f20bf455c55c522f4
SHA159c65b4e55a458014b1e49e1ba5c875e8ff5c868
SHA25615ec541cf8a453a6f0762b8948a77924476d506c99bbc194bad85e3056f19e6a
SHA512113ee80127fd46c2939455988578c09b598377fcc31eef386948af8ff6f15f327dc4f6d498e9e3f69f030cce160fd1da8e539439671f133f43acccb49dc3ff2b
-
Filesize
4KB
MD5e2a4e36f9f51854f7fd81581c98e6114
SHA1c63547422ecc920dd32f48ecc317f5228f07c50b
SHA2567c21c0c1b3214ae391dcc7642d9411814d896a9abb2bb806de83bd9200c9a87d
SHA512378c1dfaaebe00414e020c8ece87b29945c97a827b9a02afabf6fa2a0f2a4fe53a88574faa98d39e1acb9d8c2da4c32d0584fb79f5e9a8e389ddbcf7cc63bd12
-
Filesize
12KB
MD5bda57af4e5db70b8858e680c3b61f531
SHA153d6f2580d34f2b6d515d74076f3097931e6fbd6
SHA25637a7048a3215d4732554bd869c80c26ce0c010bb6521e26f327218184b88b3c9
SHA51280ddb01fbfa63c93665aa037cf637c7de90ddef402b7a53c0e87a3e97c77e61bd740425a429303687f313135c926b5df3eaa248e9ef96bc81891499216037b90
-
Filesize
3KB
MD5dbc4a541baeebcd4af2b13092ad07476
SHA1c41958bba9fcbc002f1107f807e27b8dffa50052
SHA2564b96db2f7d80002eb0339bb9dc79bc769eb9dde416e2fd453be0dc87a9e525e0
SHA512cfe26ddddd66cc37c1277c760c0facaef06b4e785d10570b41c1623b1a0178557a5b40a40c0ed1b86bf41ec511e31af2b8b912829e1fdefcb76b652daafbde4a
-
Filesize
6KB
MD5de597ac030ca3c929f361b73fb87fd4f
SHA1b28414ad03642ebcd9937a6021670455f1290441
SHA256aa9a4a952b7a921ac18302f3950082829a310cfb237b2bce2a847a02ca2d7bbf
SHA512906b8bbd59673da67fac9ceb68a59f49e5d4e42899b0da88398326608f5e16470e9135100ec521dcb4bf571aa9d186a0f0c383a87cea97ea2bf25c7d6f52cd47
-
Filesize
6KB
MD5dbd3821ee61c6611e78dfe4861a69b00
SHA1501c092159c374e47c397f876df0dff4dd993bc6
SHA256d27805aa0d82d341a6758ca1dd482aab112a2a5b26062d27688d7744219a517a
SHA51296446deb1521fcff5723c6fba312238e4a556ff3d5fe3108ebe1d2e42c97eaf351a06d3e11e2d1ad16ae5f53a4a3251e69fb78e1e07c554af1d86d4dbd91ed2f
-
Filesize
3KB
MD5a4875649cb1674ca233dba0c6401c88d
SHA1f6a9000beebe5c57e759995596f93c7f211a51ea
SHA256a7f3d32a5d170c5057d2892c3052f2ffdb6a7961440c93285732bd5b7bf26d9c
SHA5129df20851326dc465e87d8100f6cbf06956698945f71427f78188cb3f70e17c8fe9dd29698f81a6838111ae15a1b1bce820e27451870668f3bedda9172f930eeb
-
Filesize
3KB
MD5c0af66863b4912c806796c30a9db0b2d
SHA1fa2dd7076a4a782589f8fba832db527470ef998b
SHA256fc33408665dd9966410d07566af38633e0d88f620905e3a0a6d4f3510304104b
SHA51258412627d2ee44065edc782597a508f73d8a19f96016b52382ad971b7457530fe34a10c8b5a26b101275381c9de5fca121713e0be656295731322e12caaa5da0
-
Filesize
5KB
MD5f30f826c5c7400a66609f97d23940cc9
SHA154b9a9f85d4c6d0a09fcc543a9685063ec94731d
SHA256faa3faad9c6f9e9e0a340b623e9fa53c529769fe01a5b8b68064dda0c31be8af
SHA5124b2f0f767bc24b30f03ab1addf2d45b9696df0fd934141d6297c9277933c69f07db5b0e2fc0712fc9dbfd9f614a767bd0b70041ea10ea3aeefc9b2b7ee47c1a6
-
Filesize
7KB
MD5bf46496d891a00e8bb29e4062f52d3d9
SHA17310302c4cf6f8d50634889f27a02367af5808f2
SHA25664090587a5f268e8ea2a9cf8a8a8ada341870c134efe5943009f9dc3d5706731
SHA512c343c05df68ac5b091a99b5afcc2becc57319042a6ac5d93fcc01b6a21ba5e6e3cc65b51b648d36a6dc4455af9a8ed48d87741fcaacf94e9af510bb7ef641407
-
Filesize
10KB
MD52ad5341ca4a1afe48a54aac1ca26acd0
SHA190b5106091243656b2428dcba9df7883468cfc39
SHA2563a7e33f2c41d2ca42706afc9bd2e347872ea756937db41f5ecb5980e625ae0c2
SHA512f72337d9270bc65fb49f22cc2110dbbab94218a7f6e93f386a14111a04a1cbb812bc6b196b0da9dad9fc4dedd92eabbd1672b3a29e29be299a93b1167c8e4003
-
Filesize
10KB
MD583bd7ad9185a074ced782034d9eb269b
SHA1df5742686c2be0646f27fe8a7b6613c8826ec8e9
SHA25698ec81242973a15d7605ef2dc9b26c7811bb8ebf0f762228a01246618eb3ba3f
SHA51247e761d3026b81140a4c7570468278c0a80f66a9c41e192a5edbedd771fd644ee43646c930485ccc788933535d898d82b560065814c6459d3b53b6e309cbd8b3
-
Filesize
3KB
MD56c8f8814c976023c6de2ce8ddcb25bdc
SHA1019ba247f4bf373bff125045dcd742221af9a191
SHA256807b5284238366ac50ef816bd810a6986c6e74820055db0dfb5a284810901b82
SHA512d4ac9297f3d26771573c803a4a0a474d12fb35db7ba985ca7c8b4ecf558c35f87c7609fd7ab731b1ce55ad1dd5cfa58f4df5ac990ab78a97626c18ca3898fbaf
-
Filesize
12KB
MD5b8988ff89ff2855bf973f5ee83d0bb9c
SHA139b05c63de50fce13da4ab552cc90733dc452d5f
SHA256b5472124edbd1212b6c8b803091239d660b7dbf9db98280bda421df759e0b36c
SHA5126fbcc05e7e6aebd4314456f3f7bb09a2a14637e0a9d5ecb605c3e1f2dc2ed68be8c6a6770fcd0a37ee505decd14f5f1cb19c04540c2c376be216f11257dc4a15
-
Filesize
17KB
MD5e2dd28572d45dd3f51be819f43f2fcf0
SHA1f71ebff94da4a47a3b47af6317b02aefe505f870
SHA2561f42db98f264a756d9ed5b99a45a6f2e1dc22e6696b6624aad7df66fe42a70c8
SHA512608cb68a50e4484961f8dccae62966998fc32af47b01b1353d22c625d0482bba112ae8acab7481f0c03664a79cf3ef933abb3ccb08027f52f9fab85bb8a10240
-
Filesize
17KB
MD591a793cbd65e830415886d5531c7de93
SHA1fee2257ca646446e8f41e76676e2f65b1ccb07b7
SHA256e6cdd00a4adb5e4d11df1b34515d8d4dbf2ed1ff1c58cbd87bd40c9b792e2d4c
SHA512925d9d0a9a373996967bd66fc2832f6853c0719c744bf3c6179bab9e33190d92c9cbe3f1a49c31e62e8b1bf73f178a7dfcc733df2344841439c80885860f3615
-
Filesize
10KB
MD59bb580550c3efb43193fb3c3d1d3266f
SHA1a5ec3ed5d1b9691264f4ee0e589fff141de5a3d3
SHA25639ac208f1258b5c5b019f33151f33911181e442180b25d80bd1c1bf62b2ce12a
SHA5123b5b6b1f0c7f941ee14dd21fca9a55ce0474b4b97d57510931a693cb1f424b0c2e2eb7a75982a3b49e2f4dabc28a774f66c6f81326420c29153d963b3f2853bf
-
Filesize
10KB
MD52eb472de5206383375612233ab9dfe76
SHA1b68df8a0e74360ae92ef4f279b00484c4ad61a71
SHA256172c2a41642999ccbba00d2b62510635ef6655854226abf1f84dc3ddff960153
SHA5123cc6763bec6c775064d926c53568709cc874be1022e0cb4d822eda824c19313a92b6b10c5913f55e5edfe3dd0e1600b3c954794cabc8c5d710bcb877c2e01adc
-
Filesize
17KB
MD5c9e33912436fdd80366a7c3e67ade171
SHA153a298c8c78ce9964d52b8022de22729c9ed2917
SHA256b0883cb536db477fb83e886cb0e21c92a55dfa656cb4b11f8b838279eed4cc22
SHA512720541fddfb5a31a175fabc4ae0d5abaf40af464ff393c541ff71b3bf85658f16abcecce766570aa3a88c864177d8b5043da558e1995e933c435ee55e624d38a
-
Filesize
6KB
MD5f811d62cf63611bfeb405dabb84e0d52
SHA181a569b16a7b7f8dd993fff6b60f1bf8d94df5c8
SHA256b13a08738045146533b056efd27107ccc1003a80efd485837934e42fd3ab5311
SHA512ff5aa198397c5bc4f41ad015198424c744397164bf341ad73c2361581690f9d43ee9583f57efc11d316f70c272d83319218b6979e463c313ad480b21de5d4dce
-
Filesize
10KB
MD525d14a6592f2d6e2643bd0ead9021f5b
SHA1b88c583420af7a237fd60788733e465e485a963d
SHA256289a636b7dca33f9ed15d8711510511cf63ce3ed2d54769c727d36b9a596abeb
SHA51232d22af29953ff8baea40c6ef7a4d5b745591734cb5219d9c148f9bdf6d3c597d26671028401a2193c30a0b4aaa0415352fd1010388e1585439711f641e40548
-
Filesize
4KB
MD5826d0d4ee90cbf6acda06fcff00485d1
SHA13a6351a6caf1d1eaa5ddfb07b9dd61968fcb0c9f
SHA25653a72384ef4de830fbc63d6641c8123ddf3fcc87f6ae618d0b909278f31e2103
SHA51271049d7715e43a6ab329311727a64da04a2ac5128c14bafaf4710df0a0c8f50fdc407de8215d8416cf202d0cbd7b910cefcfc47ed7f407b5474ad74592669a96
-
Filesize
10KB
MD5fd525452f9bd8d23ae1bdaf588f1f96c
SHA1357eb4eb1f41daef78a708c1e86fd50a22da0853
SHA256a61c7493f63529e83a5324f75c5509b55a68dd74a7005f5ffd0846db356ec418
SHA5122ef8a73db0f9912c8c34e0bad7eb1585f80a4dc1b8e13611fe46548cefe29ea7aa083fba13964ad6a6a82832e80a95da09e2c93a073db3e75f54cb6c96a05518
-
Filesize
4KB
MD5b875c8f7ce09633db6644f2cc9d65eba
SHA1eac3e080e8d106492a14d07d2912f164cdbfaffe
SHA256854ebbf4b905454e812231dfea334ecf3680697101648b09aa994370121af4eb
SHA512c4b49a92a8bb9bd61825476d4f74ecd91d1aa664d9dad9f09168451f8ccb7753922d339a15f0d4f7d0129a8f47bb8538cc987c87de4478b77495d7ffe4591d66
-
Filesize
10KB
MD5449a283ef7f3338f20075613531e6263
SHA155d867652b14f051b384d8140320affbdd49f791
SHA256f8b48b43b8fb8c99c6425eee30ef1e014372ae66aaeab4ef3959caaa83cd6352
SHA51298e60699e4a63f18aca121e0da38a02dcbcb502b6a941d7660b16ddbc215a1bda9432eac016433cd8c2c37131598ca93c8c7396d5fdf3261c6fb8400207612af
-
Filesize
7KB
MD59b77b13b8e4591a97f4872796c97c1fd
SHA13908631d414d09ec3d192ee40990b5a84c8155e5
SHA2563e17b66fa322794aa64575ec5233ff115a07d448bef446b6df5b923af6d1a8cf
SHA512b6c91df4e909a59685768d1e50a9b56cbc85b03b9f220cd6b8b6551b316dcec67a3b8835a6523beadf1a2a3eb5306e14d395190eefccd8ce9e07ad0cbf16ec8a
-
Filesize
16KB
MD5b42b8c829b122636086b4bc56fa9b81b
SHA1ec6f6acb4f9dd12397bab8ae87cf8ce154db7d2c
SHA25601915f94f0f46bc1c45de45c7212519a800e24f2518dd3ba018b64f7164c3732
SHA512d4d874fe51466f5d0609d649624b492f46fb5ce1ed6c166e7b383f07670bf88883838223ea74f880d1e811327622a0f088a3145dba13b4afe83fe3a212ce6766
-
Filesize
5KB
MD5b2f0cd60225b68dcba333a17253e5595
SHA1e6a0a35465212c6b75907fdda904d2bba7080db2
SHA2565ff116f01b8e5a7170e0037fac420cfa99e56e0fb4beaac2b542608f0173736c
SHA5122770f86e8775846adceb807e7010b1b095fe440aef99b711c5d865025b0819bc8ae879450510c6d2bfee5192bb40520cf8bc4f4b3f94a671230edbcf8b71f67b
-
Filesize
16KB
MD5fc230c3efccc5eec431be8512eba7f60
SHA11f8d97b0972403d06d20b44552cf0a8a89eccc26
SHA2568860bcec8cd6d4c09066043a4cdaff81d10d14d69295736750f001a39e84a9c0
SHA512342909e5744b7007c9252f6be9892a7043775cc04576ed59fcfcfc7c8b1c298b7a3082849f88e497601a1e2a5181c036edfeffd2f0a4a10165ec83b153788523
-
Filesize
5KB
MD598361859a0d804910adf5210d4a03a6a
SHA1ff4068cec11d6219b066c229d4cf19e1ca35c026
SHA2568a78b933e1fce6c20d811039d5060b44deb3655b9af80ffbaf16c9b5d2c0a0dd
SHA512ad7577a392e2d8f0a01efc839f730472fcd95044fd53925500dcfc9c8efb47757d6aac1a8bfb868b34a0a355d8442d46be2b447f49baef01eb848abcaaa9808a
-
Filesize
10KB
MD52a76e324327fa21975f835f08f55bf9b
SHA1655c20d025bcefc88d6eb0c47978019b2fd97c32
SHA256894d0420515d5267e2be367a16c746bcdb67b3d53c19841d3a2f2f2f5a973943
SHA512f8f5b056b2f55d40cd87ee9727352e3b8862489f1e5e87ea0b6cd166208919590294bc739419c10bd4807f1a290a13c814ab3e37499d87c1d3daf3913d49c2b4
-
Filesize
3KB
MD50e7fb3b72da7bf9474d6953450d71e61
SHA13e8ad623fc8d3cbd0eaad8fb7a3bca05884d3064
SHA256de16a672fe4db4f3732fa26c7b87fef92d12ae6356f4dba91f3a905ae0178b05
SHA51298977de4b6d81f877c44d8b7843f11857f1a27837d276299ae5773964d360017400cf5ca0207ca0b25bb94a64356fb0b1f8fe7d8c6dd818a6e6d2a328093010c
-
Filesize
16KB
MD5c4f9c071510b661a6daee5187b490902
SHA1ae4ae651a5e0f14d1c6e458c9fe27eaf7e8633b6
SHA256291f4007f6611e377df3d7df7465517815b3bd8cceebb437e88118835fd43d7d
SHA512161edb6158bd3cedeb7d8ed9c2fa4c6a38f115798233ea5494f999fb61b1216ce1418b6638ffec51095e8a865a1931d328fcd31fdebc61398c72ca5d695480d2
-
Filesize
6KB
MD57bfbb0712b2babca5270aab02c531a33
SHA1432d918ed17ea51b73e8491a0369730c0076a292
SHA2568e155e495fdf602e92594ccae8dd353bf238a6e0d5f554b839ff6681071722e2
SHA51267a22a2e46866ca3b8416313bb3ba0aa2c53fd8bcd1c9ad643fa46bc6ccaaebd7c6c92fc96e9c1a287afe40bc6b4a5f4d92dfa956e3640636e48b9cf141b901a
-
Filesize
17KB
MD53f5c3c367f8804e0c2d62545ac46bc54
SHA1a2371c52ed0c1668e9e063939611aaa35b972b89
SHA2567fa36bfbae04a0caabf94c45f81d26d02a4dcaae648fcfdbf0c431897972a6e9
SHA512b17a8f5c20632dc5460c2e675674ce2d65886835d0b2c3bbfe02aebf3af20847ec142d759a434cf3913e880a1ed4df73c0fbecc5f3cc32b56f9f72695139f979
-
Filesize
4KB
MD521ed117944b73082fa370e2c791e9376
SHA161d234a1156aaae19e97d349246796ff7a73f584
SHA256ce646512cad37cbb3ced071794533456a89b5ff8e2f49ac1e1b1083692176309
SHA512134967423d746caf420cea6b1f79e29a49d6c50119d2e1f131d48fdee7cd468e49de06f693929e1efa82c9588812baad72dcf69d2dd3a00b384849ca13123fa1
-
Filesize
17KB
MD5f5b2b361844d4dfbbde6c952c5a5f922
SHA188c746ac8d6d9dd7ffe9e0bb6aff7140033d9108
SHA256f405c8a853422c5e9fd0f1784bd133fe03dda7a495937b17ec57071cf24fd40f
SHA5128c2680ed5d40c8eefe6e64de5f2a229c026ac7793b07b9d8e336582eecb3691531b4a71f2260305ad32b911e6b924643c60a0f59b9ba09cd36c7cb91416d8c99
-
Filesize
4KB
MD59ef2d9e81b3a9442616456b1eefec237
SHA18b1256ca7e21920b2b0c9cdadd97b1788c8d182d
SHA2567ad3352336829da535b5a8898514160fca79980cee3e009e1f66957a3aaf8790
SHA512684d220f9d478251b7ec956d1e8d2288b8b4457268427a6a34f67044fedd0548fbbe5570c2224caed9f8af59185b87fc1c2d79a9a7a93eab1896c732b7d9f39c
-
Filesize
17KB
MD54adfa2e0c59d5af2cdb5b993012421a7
SHA19b3c439aa1acfae8015dd690075c0582a269c6f0
SHA256397f1dff9458a0b7af8efcd844ea111762931e9d3f0c54d37b531876ddf2d258
SHA5122eb54e952ee9b951d6dd284af1fb7fb3a90b6f2c765fdbef5d0c6a958d49e2c1d36c9ad054acef91bdef48d0dafe5842970fc72f9ac56c330423492656a88121
-
Filesize
3KB
MD510c42fbe4e80c7afdf36dc1ebf90dbe7
SHA15a4d4ff375e24e41ae5d2d907e67e0884be2caf4
SHA2560257c4d63fcd9d03671a4716b54a9d743b8cd2e500becb24b320d7668983fea8
SHA512f7bf5b8e6ccf50463c2e0319c4b58bb7dac544015c25589cca39225bf6697a9cd119d7d0868d3c9bdbe1d5f2560b6c8197cbd0be61c750359bec7fae50395f9a
-
Filesize
10KB
MD56a6cec881c3005ef708ad16bd9ca8348
SHA1849ad99da54b6d5265978befdbe3857b926a3b57
SHA25653903ce9d4b9b07934c4b5c23eb775169717ab526048f09527d075cf4178f046
SHA5120c1002ce9f4ef83f03de789b0a7fc5c4c41e2bf7576e5cf71eb892bc6361fcef265667747874fb982db18a64469fcb29c644a506b62022b3a1a91fa6f4ea585d
-
Filesize
5KB
MD5a0f500069c656af7c81e003361e2d494
SHA1c050a7ec6f54b7e81493084506aeec2efd133ba0
SHA25658bfacb1dd93fafbe611dd2cb176967712109e2219c078b48ccca6f3566f64b9
SHA5127090617035215dc4826981cb166e4d20ab031abfdc9ad34e985dbc5018d46f01c4086bf34e54b059c784c13ba2f382825163df8dc6683cc8801231cec9f33613
-
Filesize
3KB
MD500a5a21943074cb3610ab18e68e9b974
SHA11db9a214c7d4cab6062ab7023d473f57c208283a
SHA25622a3bf97c650ceb6c863354b56fb0c77b0870a175d0cd0154facc5d7c5c4f935
SHA512b3cbbd785a03e2cafb7dd6667734cf409545def4896f7ffaa9b8bd19f8e9a611750e10902c95203b3b13858788bd3ab04e5e55f21ab9f6e382d158b3de653632
-
Filesize
14KB
MD595c04419e668991e6a9cb1fd6ce9cdf7
SHA15139058353c3901b16b1d0bb276759c7a11f52ba
SHA2564c9d2eaf56f640f399d4d3a23626ccbf81099eaf2a47f53d4fd9a87dea39a9a2
SHA512c8035491574f897f083717383edc38a3302ff961c265c7c5aba53fc8883a793de1b2ee979b48d97e85c137a0536b2c049082c511a3c5d1eef8b1fdaebf59f784
-
Filesize
12KB
MD54864223e4c00dcdd9630f55b29c7a942
SHA13ec455e408b078cc4a7adcea5c6921bd208c7931
SHA25642a2178f447922aa22b0f8498a779df5a3bb67f03c19661f5dac017804f44ea1
SHA5121882dd74be8bd84856b6e20791be861408bf29ad7aa594e73508bd9330f6630daa022e89f994829332efa5da670371c38b0f85471ffae5ccc81b8ba0eb35f41a
-
Filesize
7KB
MD5c5e812688b7c8d0e08a8ebaa0c56f20e
SHA141b5b36c0de50baa2289b2c087b7c34e75398ce4
SHA25612c8535d0eed5d66294049bead9d9f12f4567196a9d8decadecb5818af33b266
SHA512dbe97ed0f4ada7ac082c0b07f467eff0b0d19168d472a1fd72964b8ad415e051b857b7f25c27ebd0a63b493422522b6dccd93c9944647db33ebf18186e44d5e8
-
Filesize
14KB
MD5b39ea579e352eef2c3354fc701faa81b
SHA1c65b46f5a5403d9345228fc21cba1996873cc6c3
SHA25634867ad2340c0554a26084f9dd52307fdad8e511913f19ade291c028999d5608
SHA5125232cad83b6df1cf16552b8895deecb80691c98288b9bff12d27aafc9965fba9c7b5a52a63a3ca4d91be7193d542063dbca16bb1f3b586838b5d6ad8368b6fa6
-
Filesize
4KB
MD5bba48e88a1c72b577c261955e40f94cd
SHA15997809e6153eac97bb3be794c4b92f0270f578d
SHA256095c62c0c91e2575113ac63c6f6c652ac89f2e5492967aa77b0c5369f47baac0
SHA512ea08210ada6647d3e5bfb0d2fcb12d295698b3b747a7fee8fa4ad569bd1ad785d90a7f4b7215032dcdc86d325b7d33a592111ec4a77b5053aedff5054f730236
-
Filesize
14KB
MD57c13c32d6982a719aa3f4fad9b7e4660
SHA15efb8ebab4912d9ee781168f0a4a0e1d4000ae39
SHA2567302273ba659c9b115d9f7b4f309cf922d5e51fcccf04724831b629cec6b6bb9
SHA512438c4cb0b9963f7fab2bc159a9f5e2782291c0b97a00e5f7e1d4b58fa3e73443a8196158b58242edcc4e65f95e784025bdc00278ad7ca7f902f8d0a26a605e6c
-
Filesize
4KB
MD54f00957f5c25252cbba5ac9ea76d9f61
SHA1a088bff1af7083cd4386b77a965ae92b924b4bee
SHA25666290dc7bc6d2af6c061fd8fffbfcdcf1efe10fc8ea73ca71309550a581e9af1
SHA512a45c8d9554ec783ed2a50d308e78359b27cc70321d8489dd045db19937ccdb150fb58a98e0ddc98e8324d617ef35d15143bf20b930b0303a0445392d0cf36db9
-
Filesize
14KB
MD537d71966557d7884c2bced4361415401
SHA17038969444550652ab76dc568a5c85e2660532d6
SHA25690f649d6e04c5d2068c77176233ab275f2c58e3108923bf95e0c4392c3ab7855
SHA5122afed3b0342d88400f453e3ba0a66d123b3c706f49a84f418adce52aaadf95932de390d5981288bc2ab74d1f07b7cd4c75871743b2e5e78e0153e6073299748d
-
Filesize
3KB
MD5fb0ef2d7ead334daeaf70896ad9330a5
SHA1f23db9b9687290280190b7b9b940ca1861056a5d
SHA256879e7ed7455e2119f807cbdd7ffe6ba6bca924dc0e7dae755ed14ca2b3e8e215
SHA512280e5c081ea862142c86fa82e36687a1d2d241dd84222d08fdaa3850a2892f7f23be232eb5cb1101860429cc532b8ef2693e05bd9636b5d97b407d6156217953
-
Filesize
14KB
MD5fb870e31ce9f6341fb022994c9848536
SHA164e57d003153c1bac4fa523efb643d4c68b695c1
SHA256249a9ae78bfed4cf0bf8770b16e0fde9a83b6756fb07ce66865baf8e2234b4d1
SHA5127f6e68c00c4d14f11f37160ff87939cd66796762d65337afc2a3d0c275b22073e9c454953d94ca048d671372cf63f5bb0347b6de8c4a0cbc1ae42ac94823cc2e
-
Filesize
8KB
MD50320088f9386c90c0e3278cba092301e
SHA1f07fdf9d6c619bd893206a7241cdd497066d31f9
SHA256ddf359e8152d4ccb8923bd2125d3ca253cbac8536d2b363fdb3e10cfc94408ba
SHA512393bf5522a96c2e83fe3438fe3624eff024f02e3d6844ec793831a758c8085979e6d64cf07f3bfa831cd5d95414201d18c80a377a4a5cbb480ce1495f867ddc8
-
Filesize
10KB
MD5602cfdc81c7e1bbf1311599641d1b230
SHA14bef9a099031e840447a9567ed4ab835f1a857ad
SHA256a9d7c45c86ebdc67897de75de976fa2d58e5b0c64f0328303d0fabc93f26a723
SHA51294da404eb6eebfa8668fc93ddf7f6718315b0b614c2ebfe6459852116c9caee4a0cd521e559a541faf7dd3ddb8eff6880eaa522156e8665e74db27004fcd7220
-
Filesize
10KB
MD57ff820c03377ca878612b20e97d1d935
SHA1d9b76a8374458a4cf92448b6fa71546bfe0739cd
SHA2568798c9a7b5f0a182a467df112a52cb27daf460e0cf05b40c7b08c8f1f4fb71b8
SHA512175051696375e8c902406a1d8a95f43adfcd1422fa384e18507679ff7fbdb0106e7f74443890bc0fb32bdc83e847f747c8abd4682db356d1a992e576ae8b33a9
-
Filesize
15KB
MD55d7c6b82eade5116e076f7079465fa65
SHA1cf5f37f02245b08870c7e5436a3b50e13eb71c86
SHA256edd2fb40868a1b068a1ff17cb84f1c022e7f60ab84b1c82b20bd71bd0c8f781a
SHA512c7a5c918a61328b2e57e89e8e1f5af8ea4f12d948e4f8171e047d7083099126f56a5d6edd84a5eedd5e39cd7082b87ace8364399142fa9da265379add1a56827
-
Filesize
15KB
MD5f0170f491c399258a3d587245e15146f
SHA13e478cb5aa3c6fbcaa907b4e179db6bf29c4bfed
SHA256b1214f7cd9d5a5c80c87745f87f5c4f404401577fe38bfe124408e5a0f145bee
SHA51289e2135f69e38ee1c71eb8eaa5473ab54a34b6fcd3f5e5d778e469c7d3f14e508c8d40c409c2419bf91d49b220036cf1b580b8bd1200696286c2f1c8f26d476c
-
Filesize
2KB
MD5423de51941079a363fe0f655ce5b4038
SHA1cf062f1294dfdb3d00caeb74b6c84e66481fc9f1
SHA2568385b95c96c61400840694e0179ecc37882c5a71e42be753231b1c90d4e9f32e
SHA512c3fa606d10957678aee82943e9f732ef05a8fb208372d481144b6bd69adf6e52d7f72e75019c0cc354fd922651f75d387767d9d54246a9cbdbdd62538ebd17a3
-
Filesize
10KB
MD51d6aa3bf60f89c764d1fd2ff180d3f11
SHA1d6b361c66b5582a15d5c8e7eca1c58518f991404
SHA256e55700ae633f5c3e13a4acafcc16554bfaa3b503619aad10d937dd32f0ec8891
SHA512941d2a5ca4436af0bc41bf0d515be043069e74ad3e250f7ab3e66f6f42471bc6e384a5193ff30f9261d2d8f95383e4e9c3d853c5b2928d772dc8b6b23dbcb2ea
-
Filesize
3KB
MD5e1b9331d02044bef13867a9f570550b7
SHA1bbf419544dcce3944e941f47480c82250e211877
SHA2568895e7bf2a86028c83c5b2f818975ea35ec4dfc6e3cbea8f7e21c250b7ad9e99
SHA5126d4950df9e389f908eb8022fc7c0caa69d792c8cbb27b8ff2003c1a896451ab3c2b4ae6b1d73703f9af224aef0b9a5763b4613be7122f5e5497d5edb13e24ee6
-
Filesize
15KB
MD5b9aca371b020d7e173d41f9674e524c8
SHA1b16b9378f1dd13a3336b9b832e8e524c39abea81
SHA256db44f90daf9c2f86b5dfa5151961137504ff4f9b62b095a98534fd2330bd4be8
SHA5129cb5c14651a89f33c10be429bd010dcafb49306b4ffc0869aae1205271230d54dbf80514b8e8507ad298332470bf44dc4c9955fb827313a7974fe78df87588df
-
Filesize
5KB
MD5a3e3c5f4e85a515549ba9383a71a0d7b
SHA1f7f72e9ae596115dff6504ec8f9a03482cce5fd4
SHA25692072c7141376019bae177b3b28c48c313454eb76d181c30334111daff4fe2cb
SHA5125a1dc8f76c0836cebd00f216d6b5a3a9cdfe65b7dc3ea33ece540183318357efe6d3ccbfba845940f58f7a481f755fcab0ebf3591b4ff9b75d311264916b23d9
-
Filesize
10KB
MD5d654602557e7713422e9ca67f2872a0f
SHA1c1959c1dfa545af8b0f12431d5110c4790205d84
SHA2564823c5747e5255466749c81e96b28741164ca967e04546cbe93a5196457a77af
SHA5128a857bfcf64d35cc9c5dd755458aa22aa462b9d6cd2cde3807ebf9f8422d41705ec62c8dd1b91f9548af22a7c9d9e07456f1a55e3e42dd2198828c524ce29377
-
Filesize
2KB
MD52351a492cba521c8f254b247c9b57ac3
SHA10473b4b72c92a2cd4cc56f24744fe17e3e0be519
SHA2563ede54dc82e45fea64da6e36c763cc7e77ceaacb632deb37805c995b39c84906
SHA512a702afbd3f38deb2bf1fbab9a6ae0e32ccff43c35cec7cacbcede3863985887722200629ab00b72149d40a60827d97cbec23ffe4b3b282097a458474cff18e08
-
Filesize
28KB
MD59f4799d7c5548000454743049cb0d4ba
SHA1b36931dfe1c6a9b91cebe64fb8d9bc86e45b9722
SHA256243f16cfa112e9fa30a1659c05ead4bf743d368354dbed9f4afb2409ddb1668b
SHA5126faceb05e1dea3bb2e3ae1c6f168aabb10934ffbdb4a639ed0ae3cd4dc22513edaf5e083718a27f5c35382c3736b870e7150178faa4c1336595e0b5503a977ce
-
Filesize
28KB
MD5c671b863f8c7c039200821dcbe74ba24
SHA1ade5bb02931764d464e1ddb4ce2dc42e0997936e
SHA256f55fa490a73b878a509d66d741883a757104fbca8ed090efeabee877de8d9a85
SHA51233c782364b1c577fc9739e270d6c020e7f7a61d2090e466f294c5c3653331dcf737a75209cc3b77e268b202ea3ecbe1a9c221643718f215700323c4091a1a7e1
-
Filesize
28KB
MD563da83f055a15fc2e548846c3eec4b8d
SHA132016ebe820057ebef56818c5f45ddd06c5a73e6
SHA2560caf9fd0be1f18ab8ebb27f997c9b46c1a8d6947b8cef57097fe19ddf41cfd64
SHA5127c07834a5016f1bc6faea3bd3b9ec64b1835b074519d12375f3270214e383fd9c86972cf64a8ade35c70781e5558dfe799f016e9201c05bd148cea9b162a38bc
-
Filesize
28KB
MD57bd0a388a61fa7302716549586add656
SHA137ae0fe43e257b36ee6704d02d381363ff22f01f
SHA25661fe9d63b9993d4822375ae334683f451302394620d16ace01b9314024dd8612
SHA512547691cf1aaeb41d09c886582c83047d1639d354c378a85844ac26a42b0fdf1648dc816a3e1c5ed2bf0861133c99ca09078d1641edcd39435a1b637e88352cdc
-
Filesize
28KB
MD57f2cb793ad4fc76c8d8c8386d65a4079
SHA109cca02fe80161178d025f328c388a77dc90fb10
SHA2562eea6d176ba550b6dfc4589f44ae41320f1851234b91651de645421030778ba6
SHA512a9fc36ac6e41c72a7a23ff49a82d25599052a0e58c543006fae31c2a9ac6599a04724defbeab0367b949c57a2988645b05c2bd53350c08c8135ff27c2447d5d3
-
Filesize
28KB
MD5ae775bb45af8e8a8e5c06b7eb81ff576
SHA193d3f6900a8331347a691d311ae6b017c0cc3b45
SHA25682a4706b6265d4afd0630775f6aeaf76cd007f19adb3dc8174b832c3dd83ac5a
SHA5124e75c9aceafff597641b5953b80c8dbe4f0c856c833c56725783f98e2d10a546ab287af2a5d0fbe1c1528a467f20566a4b7f84ebab48b2f78ad97b74e5570903
-
Filesize
28KB
MD58f44437f5e94b4109620dcf74fc7f7ed
SHA120335d58f78220140a009c1c40e930934f05798f
SHA256f282f45b42dd7583f3b3bf5e389ea6081f5bc59a43aee3a6e8686a2a9cef6f6f
SHA51239d2a3b508a4d66bf2150cfb8c35eecf403da626b13aee89fe800173aa4749433fb1c6fbdacbc05f1c8b52b1b2434aa54c7f532f4ad0f3ada193d40e86929751
-
Filesize
28KB
MD524b9a21b097fef0a997bf95f0a8a5ff1
SHA1a297d6cde3c7b9d0ca4f15afbfdf9783159d3db3
SHA2568ccdcf0afc61dff2bb8c7ab6d332e9180f91a8c56424eebbf8f356a6527cc7f7
SHA5122b704391d0d952fdeb5ac68120db0342122dbf93ff47937f5863ba1704c81bd665628544b708c11871ad5960f48b199d6f1c66dafb9ef7c08c3ce5bdfb2bf8ca
-
Filesize
28KB
MD5a485a46e0c8e436a9a9c3219ac7e0a3f
SHA1739292171ce4a7462521e25fa8b9727abbc4572d
SHA256785cd790d58a7783055007d5cff8aa0abe30362af1676901e4ea04acb9e2536b
SHA5126d9198f2db02bcfb48beb0ba43458ee145cbdae02f81a9e37bb080ea18930ab3f796feddd3e6565993b4180b0d497929b25f68d66dc8e6b0bbafd01f62e31b82
-
Filesize
28KB
MD53eb3593da5894d09db399231d8ac2b10
SHA114ca9591d7dc5be83ad7255ac5492d0881f67259
SHA2566dd34676e9bb85799efd0de90d2474a518ce01516590f3483616e7f983b892f7
SHA5129d0188acfd7ab5f438c117f47777ae3324919878f9d4105f24a052a9c97d7f9befe39a5b8d16a207d13f690cacea03a988fba288cee726114834cc5f0f7872f6
-
Filesize
28KB
MD5c51c37cef5c05c0503feb1ef40db3d24
SHA19c22d3cfa32b9bb0d11ad5efe1024f523578bc43
SHA256445cfe9fc4b8831031b26867ffde00d80c7eba93c032690b9c2fcd9f5ced876a
SHA5125a817107372a2484667790943fad9648cd716302572c108c3d5e85053d19e93c99ede801c6366de4f8ab2845a2c2097cb493e42aeeeb6c6474a7263466a870ef
-
Filesize
28KB
MD5c40bcae5528d1b7a7278cac977ec9674
SHA17ad3cc6666cd0cd881e6f2e72e4f0ee44cefed8a
SHA256e7e21523460249e08535d3375c2abe5a613d1948522c3d6e26ec371cdb0ee809
SHA512d1b05574d5bd72726a3a55f7fcfcf0240d3880adf3f13230b77e8457d13be55cdf56704c616f25d1f7c27786a079b716f73c3067f062dbfe8a84b822d39c08a5
-
Filesize
28KB
MD5a179e08b517141c25509bac25bced73c
SHA1a546f249a0516c42889d4a7ad8bb920f161678ab
SHA256bf1411318cfbbbf9c28f9604d7642c317f3fecc2290f6b2f974bd09f0e9469ab
SHA51292c2becd9a0d5609a3137625691e2db660c9a1f473ecffd20eab9472b72ab16a0dbb94a8cf6d4d5d52084cef3723c9ca2e0f2fe406688ded11a72826bea8e883
-
Filesize
28KB
MD53d3cf977a953ca0b060782b14ccea1ab
SHA140085dbe49bddc24d61e4773f38755030a255395
SHA25686bca5eed21d80a9f425b1a9c208727cbeef7371a57b14ad971328fea5c79ada
SHA512a1da5cfdc8d914e33efb8359a16a84199c6aba593c5972d6bfcc421c5e276130288f3cbfeed4f4142b8ba573dc4af8f8c48746c62b16aac13eb312de929f9e55
-
Filesize
28KB
MD55f5f1b7910325518b245242d20f69d44
SHA16e793f08da19ebf0293326c3e6201d4e0b7e79a4
SHA2568e1634af2b86451cbbb0913e5c517de10c7bd0bb51e44117a06d8b37dd289d6d
SHA5125c92c588e02143821627cf3422387f7e1ff2f2639376a7f8eded921fb0f5a58dd4e6b54fb00cd95f3b40f0bd0f33b0e0f2b5c7c53be2c4b5661811a0794030f7
-
Filesize
28KB
MD5df0f892948287b12dbccea964f2a8002
SHA1b3e9ef09edc8bf527541c2ab5a551b1b0a67d584
SHA2563ab2d4ac221270cbd26d415aae524067d8d36d58cccdea170d1b1392aa390e59
SHA5128d71b5824da7d367a1fdd95b8187db43c98d80d4860f751a686d24c37e1aa2ff6b4478600064d18c09d47432173c17c962669403d86f545f1aa9da72980e02c7
-
Filesize
28KB
MD5b9e5c5e78828da54d800b47a0488821e
SHA189b961f8f2ae15b5b787d773499cb4238a363fcd
SHA2565a7adbf88bb3ef6ec23664b25dd765498288ba88ed6ebd67a8e665e7b71addae
SHA512542c376575f0f2bb06f4bac8090c8b81e07c72e4ca601b0bbc8f5b27430a6e85ed683998b6ba527b015956573676e7b27e117736d1fd0ea3e09149bc705c537f
-
Filesize
28KB
MD5c83a21718fb9eae440a27c1732f6e871
SHA1e5f7e14541150a192fb424d650b361c435ac4094
SHA256c044e55f52d8337d0976ba5aec57292c0c217098e7786836ed48257cfea23835
SHA51258c8ca5069fb7c28ef25232d007a6796e68bcc0ed3b599fcd4392cf1a0746c16c04d2354b8bc543664c52354eda22145485dfd4c7c41df9a24748f898acd3eb4
-
Filesize
28KB
MD5b76816d5d0cda1b8df96268b16a9af6e
SHA1df0bc3a445a7cff4ab2bc8554049954ae3dc6ff9
SHA256ad7d3e43b9cab94efc353041b485294a1735bbea56edb4856297d88e96132164
SHA5123abe03ed802a928b978a76a4225464007eac4c0f73166d57bc9c509abc83ad5ac5374e6ea707dd189dd3ea0f0d84a70e8888cb71c88f2eec5e6d1dc90d7269fa
-
Filesize
28KB
MD5a38804a0167d11b7028053749ee4bc08
SHA1432f2b1e36b63effeed50370845e82b2ea0b8e68
SHA256b0e999c4c3edc34ae2f2de08d3834ac3c8f93682a239abec133b2fdd5460cf52
SHA5120410907e1cc96e906a70746ccf4e2e2e4c292c41d639c27330e92a298ee85521b11e3a8971b465476cc8b338ccd646bd18801f50fe56d21457185f5e27e74953
-
Filesize
28KB
MD589923c36fdcae545a544ea4b8a7b6858
SHA1921d56cb6eaa372dd6409516aa5a7ef7545dd0fa
SHA256bda8249b414bacb1c7d69729ee8d85b6aa327ac0a3168c963588afd5fabef796
SHA512281ccd284fde941b538750dd10d37e4a1886690da690cc6b4f96c7377b42bb0fa76368f41d91d5b141ff49a554c609bc09ef7dd8cc548d64a333e6cf26c99a3f
-
Filesize
28KB
MD52a75edc68b3484afce6a25ce08acc5ad
SHA14427a469b20cf1e1234bf16e4b503f6d7753692d
SHA2568c3c93f072ba07b1428da2565ee328fd9c8cb4837dabdd57bac62dcc6dc2d9d1
SHA512afbf9d539f6221d07e48a29a83530325d7e54962be588fba541d53100dbc566901387795dcb5470fbb386854ce609efdfe08330cbfc7fa404323c5d480807754
-
Filesize
28KB
MD525f1ca346287eda59c73b38a57a6e336
SHA1127b379283f1978fffdb41fee3ed79350f0112bf
SHA25638fbc58a2985c00968786c82d734665037c5ce4f879783493227fdd9e4b2baef
SHA5129c621ecfdb76ba4c051f46702d8b5393be8fd68a2ad3558c41ac28850bc2777f7413ba9d207dccdeab88101186c4c3e78659438c0eb43fe02258297b21ab153a
-
Filesize
28KB
MD58c794dc005b0ab15ecff7ab21a8fa2be
SHA1f573230abb314be8cb01626916db052aba6b9486
SHA25642d1bb2ad498f48f9f6078ab42796355419f0a9c35a6942ab5cb27e39e357073
SHA51211bfdbc6adfe18a7e40ca0b660bd7b9bf9ef71ad0e6cf1c1c0d883bfe95e3533f2e1cc7e0ac0c1dc0c18edd92afa5ec0a896cef9e8634e0824a4473d7ebbd9d6
-
Filesize
28KB
MD552a4204b4925d8526efb6e1da21dd9c1
SHA10380de61a94277adab406d1b0fdf8aaf38da819b
SHA2564d9ae4d6486024987865298aef94268584dd1abc1fc0a74cf0e54543d1b15513
SHA512a8a783693bb45f1e1371ec0f207d0156ab1bba9a5a21b1d4edb0b9ce4ba93fbb917974c34c3a77fcc12b776e71ecf599745fb7580c49c76bdbfca3d547d1e12c
-
Filesize
28KB
MD574d9f1e649ec3b08c5f079ea1d49ab66
SHA10d79214630da5b21fe973221f4f9bc4b5a45a7d6
SHA256fe29068f573ab6c7f20c30e380df111860d17a9829e719d387f9fce3495a012f
SHA51207ae6794c5d230968eb189aeaf7395b09c277350680e2076ca3cd7c5124c31b11a1a8340f10b0af75da91eb1d56122a363c01d9c8e91f211b82d32829683e333
-
Filesize
28KB
MD547cb0a25072379a6ae4641056e1be704
SHA15af68bfca778cfe361c0e89cc289e1e7c6f99178
SHA256b455c919d5ab30c7c0c1483fdb6e9551e14437ed90b07a7c5159da12419f1123
SHA512621bc86db1c076de6e63b2d4a38dee2548f343696f77c0e09ed5046adfac4cebcb3065123179ca9123f105361b8460387398382bc21faa2b2bd829670ff564bf