Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
16-10-2024 17:33
Static task
static1
Behavioral task
behavioral1
Sample
4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe
-
Size
919KB
-
MD5
4e21121a61f231b5288f3f795bf80987
-
SHA1
1aaea300f162b85c4034d24aaba40d823e7832cc
-
SHA256
49e77e045d00f2f8db630fc82a7cf6c9242df80270619a6194297ed7d88cf8d8
-
SHA512
8ddb522f6606b73b8bf1fbfbd9bb41d295aee2e94883bdd1fb369de20377abac99891d65fc38bf151205abd5062d7ca1876b3f13a66dc0539d45515bd647694c
-
SSDEEP
12288:Pp4pNfz3ymJnJ8QCFkxCaQTOl2KCsltH4cgZD5+6aYMasAYXG3W5o:xEtl9mRda1MIHYPyBashXG3W5o
Malware Config
Signatures
-
Modifies WinLogon for persistence 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = "Explorer.exe HelpMe.exe" 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = "Explorer.exe HelpMe.exe" HelpMe.exe -
Drops startup file 3 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Soft.lnk HelpMe.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Soft.lnk 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Soft.lnk HelpMe.exe -
Executes dropped EXE 1 IoCs
pid Process 3936 HelpMe.exe -
Enumerates connected drives 3 TTPs 46 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
description ioc Process File opened (read-only) \??\A: HelpMe.exe File opened (read-only) \??\Z: HelpMe.exe File opened (read-only) \??\A: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\M: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\T: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\V: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\L: HelpMe.exe File opened (read-only) \??\M: HelpMe.exe File opened (read-only) \??\V: HelpMe.exe File opened (read-only) \??\X: HelpMe.exe File opened (read-only) \??\E: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\L: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\O: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\Q: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\E: HelpMe.exe File opened (read-only) \??\H: HelpMe.exe File opened (read-only) \??\Y: HelpMe.exe File opened (read-only) \??\B: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\G: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\H: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\I: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\X: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\N: HelpMe.exe File opened (read-only) \??\O: HelpMe.exe File opened (read-only) \??\Q: HelpMe.exe File opened (read-only) \??\J: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\P: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\R: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\W: HelpMe.exe File opened (read-only) \??\W: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\I: HelpMe.exe File opened (read-only) \??\T: HelpMe.exe File opened (read-only) \??\K: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\N: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\Z: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\B: HelpMe.exe File opened (read-only) \??\G: HelpMe.exe File opened (read-only) \??\J: HelpMe.exe File opened (read-only) \??\R: HelpMe.exe File opened (read-only) \??\S: HelpMe.exe File opened (read-only) \??\U: HelpMe.exe File opened (read-only) \??\S: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\U: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\Y: 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened (read-only) \??\K: HelpMe.exe File opened (read-only) \??\P: HelpMe.exe -
Drops autorun.inf file 1 TTPs 3 IoCs
Malware can abuse Windows Autorun to spread further via attached volumes.
description ioc Process File opened for modification F:\AUTORUN.INF 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened for modification C:\AUTORUN.INF 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File opened for modification F:\AUTORUN.INF HelpMe.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\HelpMe.exe 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe File created C:\Windows\SysWOW64\HelpMe.exe HelpMe.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language HelpMe.exe -
Suspicious use of WriteProcessMemory 3 IoCs
description pid Process procid_target PID 3876 wrote to memory of 3936 3876 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe 84 PID 3876 wrote to memory of 3936 3876 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe 84 PID 3876 wrote to memory of 3936 3876 4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\4e21121a61f231b5288f3f795bf80987_JaffaCakes118.exe"1⤵
- Modifies WinLogon for persistence
- Drops startup file
- Enumerates connected drives
- Drops autorun.inf file
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3876 -
C:\Windows\SysWOW64\HelpMe.exeC:\Windows\system32\HelpMe.exe2⤵
- Modifies WinLogon for persistence
- Drops startup file
- Executes dropped EXE
- Enumerates connected drives
- Drops autorun.inf file
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
PID:3936
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
920KB
MD5d9730aa9d3ca3e37b6cf2c8780e3107b
SHA1145e16f5b40d123873b7e6d7d4bfd60df86f72e5
SHA25611af077e5416e11b66cb37e95f9b65f63c4ceed257adcdcbcffe7ffb20302bc0
SHA512d2b1efb5f01a49c9d938f2a8d19c2b89ee4b85def8bcb44dc8ef11ce496c73874b97bb975d864a369bec24e86896efb503db2417da1fa0106c4f4934fc122e40
-
Filesize
1KB
MD5fd0e8ff202f54c5979388114bd4b56c6
SHA12034c3ea09017886404a6b0e3d63d43def51b2ca
SHA25644d4819db9500c5222b757911fbb875b5c18a7c727466839b4d136ea4abe38c7
SHA5121744d2bc76a274a8a1b96a5e82f18fbc823c69cb0126e7708f6c091f1cac9ab341ccfe4f53a3047d68fd918fb20edf75ca5825e2806232c8b5cd7ae0f2a57fd8
-
Filesize
1019B
MD5134a7e9849b777d908fe2c76b9622b5d
SHA1c2814e171524a5b59e776df3ddae70a363adf6fe
SHA256bfbf9b3ac9f971a98cca3072d81173c660c2d110b4c5e33679a29f7a4df9ce50
SHA512fb309da3aca23937349d6ccf6bbfcb07b1e6c034b94af1b2adf0d077e45a3ddae0706d605377eda449f1e5e5edb256ca5d9fa25065eb14abd967956283a1e452
-
Filesize
1KB
MD5de37632c0adc22497c385379d2e0d732
SHA15c2869b01ddb7237881171c6cfd39df330bb9d51
SHA256aa03ac7d2e565286101448a9f4385d86842628e387a9b58fc4ec342e3c27b1af
SHA512e850f4d5194aa7ea940b05f45083bb316e79bf03a35c4c86ff5d263122780e9b6c29fd51b8c794cdfb691d85588aad56b80dbedcf636f1c5ab34f638e4eb2e15
-
Filesize
1019B
MD548654daecad74ff1c491c3b0a764feaf
SHA13c9dc8da2d2d4499bac1b5621371be438f3b91d5
SHA256586a5825224ad0587d249ac34e0c9c18e1b0fab335afca3c5f0bb5d355b3dbb8
SHA5127583d10a7fa24b3d9916230d0d0924986d7eebe6809f5942d43841969145b5820584484f2d16536ffdba94cb51cd570a921ae16fdfebdbeccfb488b83a0d88b8
-
Filesize
1KB
MD57c52f0b3e7b3a1bed3a9a2f6157731c3
SHA12f455d5788b81fdfb03e47fb24e166fd1a5d392e
SHA2565efce4469a537e24f645da07e6a2bf80f8340ee9929cb8775c1e30a3de27b453
SHA512892f504872713b90e1851e89c94247d0461662066ab45b5f3b3f50782a41a8996627d8e0bf91aae2af255317bd1e7a240d1c09480f737fa84f6894e6553d0833
-
Filesize
1019B
MD56d1c15e30f9db617b2c76a5811bc636d
SHA15d90614b5fc579b73fb5a06e29b13217cfec81d9
SHA256c29bc71fbd2054c726869d3e47f16c2ad38b75f3c1c829a9d73432b70a39152c
SHA512dff1b7f521d2e5bddf8edd90ded4bc474427c3456cdaf34cbfdec9f2bcf98584e6d3c28861fb59698fb13b9c82fadb14dcb92af9e3a4b53f93660d8010504e05
-
Filesize
1KB
MD52ffec7fbd465e78699d3e20b67241d37
SHA1931663f90837f66a2eba6847637bccfb26b95c0d
SHA256b7b22105c46434e9aeea7464035d12051a14b7aef5a507068c71ba26aaef8abc
SHA512f7bdbbd34957f243241cc910cafcd933cc4e5f8c8744023e530f3e3e84c053eab3fdd4567ce90d3e23d5ac69724d4f0eaf43f2da2c72c6c5ed671d3b17a9dfeb
-
Filesize
1019B
MD52b21c64dd91c0b9db9252521d8b81107
SHA12687b202e20ab895baab5e9ba14eea6e2c4cf2bb
SHA256a4daeb7d78e46af366ea6683b397d603a7cb7aa77d7fca9fcd252e22932183f7
SHA5123b98b455841c989c624f3f5e88e9e806a42dfe945b7ab530a4e86ea9263dbe84f305748d55dc8120fcffb701cacc0abeb5db26a699568496a170d7b35eddd87c
-
Filesize
1019B
MD5d38396e5637ce4d3ca6ac64eb3a19635
SHA14c392a82d21f454cee2922322077f93c9b73ee27
SHA2561e35ee8f918dcfa812ba74bd176b8a77524567246db7b65f22d9ef3f8620f81f
SHA512d9a6dac73c070c4e46d6e387026874cb493b1216485b84c553b6855c875d01f5f0352d98102c3b6335dcc0480b25645c47581c71c5315feb532120934cb8f09a
-
Filesize
1KB
MD5c2fc09f244d670d079b46101d477417c
SHA130b91621380c7ed81bb48f528d37d6e4016802d4
SHA256640a818264b4460ede62744c151c31a2a1681b7f37c3b7b232de21f858af261e
SHA512b69497ed4b9b44f884236a891473cad677eae3681e030f604ea8d07158f5f9b5231f7a7a1556cdc31e66913678450a0eb3e88f4ca0d3870e6aa7580b1313a3b0
-
Filesize
1KB
MD51cbc55ebb39877755e59f1dc78470557
SHA1dff66d616a02001321211de61271da12b4a87e17
SHA25698973e24585c5c06e86d04849af24046b8069a5b8e40a330d659bba897dfb640
SHA512cb896b739b3ba2afbc6503f44b5502548a8e63eb2e391893587d9e0e9b25bdd8f1af87beb533d6123321de2ad6b9698e1f539a1436f5c8a11e37148588cff2b6
-
Filesize
1KB
MD51814652264d99e384895011240799615
SHA1081b1e09e7c0546655f9708f89a96b57bbff4d18
SHA256cd8de0cc04c76efc868e34e8d4c5b5da793fd17a4d13a32ef8379fe3c9eb5699
SHA512558f93cc8fbc3c600f010968a301faf46f39a0ea78cebbbf02fe153493708049305d2da477f044447b82b129b9d07831427d0cc3130bf82fb9c497fa47c1012a
-
Filesize
1KB
MD5b5a552fb3ec02ea71703018d368ef8ae
SHA1452d92b6bdb93e1021361a0dcc20bfbbbaa6c303
SHA256fb5f74d52b28290ef91bec61b575b9a1224864df322c87e19f47143d0af51af3
SHA51274edbf593b6bda4824f22b14ddf5ef3e2849b034dab404250ae391e07dbaebd57281d13a6f3e0fb42a9e0e63ff37085c3841f6f467dedbada636d711321ae17b
-
Filesize
1KB
MD59046df3727d861b85cb76ed27ded3b24
SHA1852d02760c95a49e8a581716b9f6a8f0d04200fb
SHA25696e2960ede5d5acc5dc5988ea7b9f2705f9e50228555425c5c4f2eba9eb15a6d
SHA512a92908c5aae6ccefb848d73f625dd3cc1c18c0f7e8c67d8ad70b35e2e394f7df164abc5cfdb8a61e5013c6546a0078e4343b702f021cc3ab16381d7fe7d75b1c
-
Filesize
1019B
MD519624d0a9fc977a8928c22a320ac2c62
SHA17eaca66aecdfc2832ed0964f6204719d08f1c075
SHA25614ca56328d870a5c6e8c023d634b91434c47bb49f8bf7534a6b08bb31b76fa5b
SHA51272ee3a5e6a88de86429820ab855ebec663c0023d7f0e5773a23a892b704aa1738120d67f5fd8afb6db33f4561685fa49c347e0069017510b9b8e1331a15cd53c
-
Filesize
1019B
MD5e2eb62f3473f8efe363be0a9d23df1fa
SHA113d214c0ff5da063a436ed77864563df5d596fcb
SHA2564090caeadd7940b9ad0a8515d3213b9ee238ea05b77c3b99930b20816ebfede2
SHA512c58bd786d92dd17672a4836e962b544123e1eae7052488074dc4e22b5efa3839d81e52dc55e975584802e90831efce8b5137b4a4c6ac44c82537a49577c4daf0
-
Filesize
1KB
MD514e0c666d0bf3e5385819b9f43e12c7c
SHA170d6aa0088c94add463c07dbec190481800879cb
SHA25696b3164523423c54e31bd1a25d402aedbdfaa9cb0a64a8528c49532d0e65296a
SHA512636d0ecd2a716c500e892ae48cf381cce8e86c41d0f0224d6f0c62411edc813d849b7e861899aa5966b7c350c5a8bb1aeabd58b31a630007563226012d26401f
-
Filesize
1019B
MD50b047cdb37b7b59da746c0f2ee81a08d
SHA1ad8ade5b363d99d245ca2e1d1afd08ba580764ed
SHA256281912a7910ec56e4c1b39bcafb66d2d9cb2a292b1fc231d8503a39d6a23211b
SHA512d5bf96588381127b6e63d62e1e5c330a407471cb23564cbdedbb334d08918c6f6236c52bef2305fd6ed88b2c580aafbe3b90150f371dc1d0ee0c4731399b7f2b
-
Filesize
1019B
MD5537115f493be990becd8ddecd3a77a09
SHA103b620e99faedd55e43f83a18ef38d2ed07f0afc
SHA2561cba23dd3c21bf7c5b5ee79d4bb1fe4cbdd00dc4dad9c9ea2ea8c4db2585167c
SHA512bf6e041232366fceead7b1770de2fb5bc64d971ba18cc8f82f7c12256c8bc7c376bc25e24bad72adc99f4168a8a605de7a061a1b3804495f6b35f67f25c2d57b
-
Filesize
1KB
MD5b9eac0b39f985bada706d31e9dae62f2
SHA1743ca60202135f455b7fee2c0dc1b0007e29b5a3
SHA256d87f63d17e95b3a9a06e079bd2c55e2f5c7c3fa8808148cfad78909445a3656d
SHA512a6133311467d0849ba58199935241baf0514870ae58266863324bbe7bcc84c494a349549662e7ddc4e6920f93311dc7932857569ea2581b120b191864a7b87aa
-
Filesize
1019B
MD556257ea4057323a4403ed8f649d71066
SHA1a5db10970be8fc886749c4074bb58a4ab3ec95e6
SHA256199b7a978b6e2355a4991318246cecd1133e98054a671a294678f82232924bdb
SHA512b9e33f2912284ed904b56b09a1801dd8c77a368f784859176cbb1dfa4ec7dcda87af9783a08b3c893c7e650c799c1fd689bbf59dda0cbd7095d48e285e390325
-
Filesize
1KB
MD5c059706938f618c5be8f1210c544dab5
SHA1d33a32c73817b94833b69d7087cb645962b5d71d
SHA2566e1c4396d379f4b9a0950306aee219f654258944f060cbe4459ca71c36b7d72c
SHA512a0845811373fa782c3c5ad9d55b84a26d1e5794db549a7062c5fe4a7c72f65c47805ac7b24d0695805be266120d15bf16df0f72a8f641d4bd4eb79416d620817
-
Filesize
1019B
MD5e8e9d71cb69e425ead094ddc859bf228
SHA1706547deeb4f70a57ff8320fc3e4225b97c78de3
SHA256b0cbeb6ed5b17fd0fcc3bdf685fe3ed262b83dcb44a8b2aac2697467df2d9626
SHA5123caeae713ee59cbb9e6f457cd9d7009691873ceb6f153eeb0007ad310dfef220d56ec7afd2d0ad1722aa38d90c19e03a8cb7ac9da42d54ae589a7b034be64ee8
-
Filesize
1KB
MD5cf8de2ab56cb35d804f7f51173912e83
SHA174562fcd2fc36529bbd3c1fe2a18dde6bf752360
SHA25614e5a118487c7e6f9574a7d8d14c4856c8408ff522ef13d888c7f184f52fcc96
SHA51293139421afd656d454067ef93c15ec518f679143655bc336c0cd6588e57981faf1c10cfd262c82306cf0b14ec766b449153b713fd77a670a8e436137927c22df
-
Filesize
1019B
MD529410c76589a56e47b51b1d42df6e667
SHA169c73e3d691380842cca9d8ebbdd16cac704edc0
SHA25600b48be3fd0052aa9f2e1d60afb13657043798e0b47612776608e71676a500f6
SHA512f5d4db6ee31cfa2617d8e7662b7fbbc4808b4cfed9a7bcf556d28217033fe08b53e551749da1850988b3462924e6346b1491cac52c148e62072d24c32a9ba009
-
Filesize
1KB
MD5a473939b8eb87f46cb964a41974f6b26
SHA1de6bc8f894420e939d47c0174f21fa20702ec648
SHA256b0c943090ddd85d6c9879a24adbf8b87745711f1c2cfca7abbe68b50c2ba3883
SHA512c4957a5c476740c12f879ff44d502138729b0d7e9b82afa7b3996bd23b49d8e8694b4764ed0308cc2d631317624fa9bb315409be01c0c223de398c2ab1565ff8
-
Filesize
1019B
MD50016442aba8967e23fff6db4efa06cc3
SHA12bca7db407662ef22f09ac2df212d5a431816a84
SHA2569cce93ca20fe22e757b0e86bd82575961fc0ccf2c72bfcb3b752034d18eacec2
SHA512120ea6c4034641d1d0535a8da265f26e36f48c84b4759d3a1317123f322ff1c5326e98214361e8bcc5a4e7ba1b74f91ae4e3d80a216f7ec58dd41ed8e6ac5765
-
Filesize
1KB
MD5ca3b592ea9f128ac52447e19b0fa8b17
SHA1e82f3f59101beb8cc8ccae3051519dd27eec5df0
SHA2563a21ca446407fb6156f240183c0dfd59145d61ea270d9b1a28c4690f7519f1a4
SHA512786e4f706520fb1deb4abf2f18426f760c205fec9af17b39ff635f5e4a630e80cf54d18a3f3a337ecbfea5aa37c075644c744e09fde6916a35adbb50adb65f59
-
Filesize
1019B
MD58780a8aa7d84c7e4cb9013a50fb4dc86
SHA1e6fd483b3c4fc28ceba49a8cf051b029ef33f641
SHA256ebc09672e08ceaa89b83145801ab73c486bbc01cbcdc025a86c751cd61ca6c6e
SHA51278bd7590ed172c440aa21597b4728ada62f7125b875f4e926b3c8f92eb0de9a54e867e5d99ff50e58c2da3d4bba471c18b01581250ab61536881d0ffd88b8dae
-
Filesize
1KB
MD5c42a8a794cdd1d8a6512e285a5209536
SHA11df304a65d21e9b7d22dafcef5dee7073edb95e1
SHA256c92950e93a776b4d5fa23551cc93aa1ca83dc6864f0db596e86b9550779c1ade
SHA5128cb4bcbc3493add994ca8d073ab5989148f663f75f0c51c235d1c67e65ae716b8e8f657b5d38be744b39b2b26f0711602892795c9d030b5edfab371c8b33b4d0
-
Filesize
1019B
MD55e56c698591d0f341561264f44aa1d42
SHA16b6d950a9c2b46672c6c2a0551aa54de84978468
SHA2566878a392b932dbfa24eea3013110e52d3a71be18cd0a1abf3cef6bced1e4afce
SHA51215108f1332e3f7a97ab2dea0982a06a377fcf6c1b6a375e4d40df23fd0f4e910ff96872e7f0243116463ef526c2a56db091b9a86e1358ad538d3443e4bf8b823
-
Filesize
1KB
MD58ee394bf3831b8bdf039dfa48281b5a0
SHA15a51c292410589d138785f69c296d495a8edde03
SHA2563beeb7d185390467958a3a706d3ffafa64b7ea0152a914192b0bc72e2db6cf12
SHA512ec965471723a23ad8f7fe3da256adb1ca2494772b25ac4ef552d9a44e73be9cc0793d16a3a3ecea29ac32cd4e736407914f0c24a188da16503db86934ef02597
-
Filesize
1019B
MD5444b0b029baf516411df2d8cc19fca8d
SHA1d6795147425ccec74c6b7e43f9818f733c82bafb
SHA256beadd168c10841c4934a9e55823e80ad5dda8ca59cfd41a8f64b04d62aef4c1f
SHA512b4f349397601324e3bc88092a49a58bc0531cac03fa871ffb0881a827c2750742b3209ec5fcf5ef075a42e21a982e7157b2d2c5758b1deb1f758fb50b8af75dd
-
Filesize
1KB
MD594946f129c9fdcf226d251a109994056
SHA13c9fbeaa3653eb8c44a22f93d3b2f863c47a6fb1
SHA256cfe1fe941aa1fc92d9f7448ed02e35c1649919e521fba99045e162e3c38b494a
SHA51216b85619dd2dc52414f9fcf4e8c54c56fd0552e813befcec09a34a345e18cd263fe5f1539c0107b3bfc761a12d6479806ce9a232d788c014b5ddccad98750a22
-
Filesize
1019B
MD59468bf476a6c1980bff368208c4633bf
SHA106712faf29b6dbb5754280949d721dd541e5d4a9
SHA256934f10469cdb2c98c3dd29933c6e3fe7d69f3ae842fc610de58a7819d0e6768e
SHA5120bbc83171a8ae14ed82da76e926fa9be105ded30e9a65aec227ca19e27282876829c867badf76d6c6648e548cb2993edbca87f7db686dfcf58dc532ac53e5e56
-
Filesize
1KB
MD5455b67f396fe925a694a1c2ddbf61c2e
SHA105a5cb571a1b86feeb63853b7acf070715819a6a
SHA256282650785bc2bffcdaafec4f5ac69e3700f9dc2ed39f32d3f1bd442162a187a6
SHA512fb9d4dcc27b68c50c46a945cc2a51f6d350096a246c2cdb464c98283b53c40cb32a38f33855616fdbf9e354e592aa18edb006dc189c84cb1feb10bab24231198
-
Filesize
1019B
MD517084fabb05a11a1eca696debc882be3
SHA1240bed9f1c2754eb38e5e985aa8b9b8fca48cb75
SHA2560d66a2acf8c2751d09242b1c4d35b0338cf140038ee7dcef325f075cf571cba2
SHA51286a13684a220b91ce0763a4690ce967b6b3216b1bba3139c97e8033faac54ad43b10aa1547cb19d0ce6e673f890f19f99804a2f329c8db867fdbd4697304bd90
-
Filesize
1KB
MD5c88f596cc5b16398c3d378b1e3b5f6a3
SHA1ecfba95d30a63fde7e0d0eb397c2fb7264d0d1bb
SHA256c27f0ae365083c09c4fb034ab9c65663f477b8671d35bff276d90c141edf505b
SHA512427772b15a0cf095740ca2fc6c54f00b6790d431e6819ddb8703bc1702b23dbfd241cfb6f07cd8b009c77560b72959c66f3fccce6eb26849518769fcc9c6310e
-
Filesize
1019B
MD59c4956d7e29fe3b64b9fbd0bc4799df4
SHA130fd059a4e0d04a01a017b0570c79de21a618b86
SHA2563401fd3c369e9d2f636fe43f799e9241b542a74eefe46126ddb58c052475fbdf
SHA512ea2d89e2ae0af30365ca3608f199c8d0e3785c978bcbbbb1df4de2452e80c305d287a5e21329dd16335122a892462bccc4bf27c32039ecce87d491e2d54154bc
-
Filesize
1KB
MD599515cc7f54974782fd8e8ff26ef7ecc
SHA10ac1527f0617d319c1aedadda7218e0509ca65d5
SHA2560f0c8a5c4f3842c0d26d00f8e6df0d53e21aff43583c30fd95452e163e309074
SHA512c8df5258ef6331d5967a36e3967f266089515220bdd02045fec5c4059e3f0e21f337e0c4d7c81c0b240f4bed3969351918cd711494df64e889c29262c17f6573
-
Filesize
1019B
MD5ddbc6b118fc6f1da424bd7f66ad4ad27
SHA1cd6312fd43370a37327a5a32ec0552d3ae86146d
SHA256ca7023c9c8c90e59e5851bafad35547670da68a5bfb803889e28dc425f09ee53
SHA512f14261bf81d715fb107c543e05e9c215ace82eb0134583dc8072bbb62cffbb636d5a8f0d81d646fb6de802153bdea71b91d8cd5bbe5c69e96d8b4b9b8e34a895
-
Filesize
1KB
MD589cc1bcf1aeac5479cbbe5b6931822d0
SHA17d1396a6e1655ef567a3c931dbc98ea544432e82
SHA256a1c18213d35f36a56c08a5f0078b35c51700da97d2376933dbbd7c15d83951b5
SHA512f48890941ff62854b2ac72ff3ab0f2daac7df07ef4e7bc001d6dc971764bcf3db3b01b02b1972d4f93f2d08e9b69edb0ceef64cf237eb4e5a9284b98bf2dc558
-
Filesize
1019B
MD579a7003976ab398785281e9f5e7f2102
SHA1ebc0f0030638dc9ddc6f701210890e5dddc50a1e
SHA256cc099e5cca6553c6be4164f4163b4546ea245be2dcdb264b7f04bc46cdefa888
SHA51270545c02ffd1e386c153c43c45b84a785a9e6d5ee2002fcb80d0b93f6d08ada94adf5415b15639f041ffb3356918b1b37bad9ff2e1ea9721348d3bd822d1fd7f
-
Filesize
915KB
MD5d366f09b45829980a4389f3803b2f1fa
SHA189e72610077a582083a2c9ebdf30115f04924ae1
SHA256ff979c46e355a4596575abc136c245a8f5931faef96771825ae50312a9186fe3
SHA512f53438ebfef858fbba99fea8035fba35d5eb5635840552dc62382adc5a851c2d82d768ef08f5653b697e02ae2515ff29002698e3b36186e44ad898b8823da5e0
-
Filesize
920KB
MD5732160158e8abb6b3aadad6143bc807a
SHA10f919fa390d5ae03e54031b5269e58e829a4e2e2
SHA2562236e2da08ea95412c9abbf62483e08a97926daefd2cd20d991730441fe9a8ec
SHA51202af7cc440ec619d309d66451755db2dd369a6451f1ec4900589887babd42ce1c2f1223d4ccefec4403de3acdf7cf3cf796b66cb23af8932d166511a3059f8c5
-
Filesize
145B
MD5ca13857b2fd3895a39f09d9dde3cca97
SHA18b78c5b2ec97c372ebdcef92d14b0998f8dd6dd0
SHA256cfe448b4506a95b33b529efa88f1ac704d8bdf98a941c065650ead27609318ae
SHA51255e5b5325968d1e5314527fb2d26012f5aae4a1c38e305417be273400cb1c6d0c22b85bddb501d7a5720a3f53bb5caf6ada8a7894232344c4f6c6ef85d226b47
-
Filesize
919KB
MD54e21121a61f231b5288f3f795bf80987
SHA11aaea300f162b85c4034d24aaba40d823e7832cc
SHA25649e77e045d00f2f8db630fc82a7cf6c9242df80270619a6194297ed7d88cf8d8
SHA5128ddb522f6606b73b8bf1fbfbd9bb41d295aee2e94883bdd1fb369de20377abac99891d65fc38bf151205abd5062d7ca1876b3f13a66dc0539d45515bd647694c