Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
02/12/2024, 09:44
Static task
static1
Behavioral task
behavioral1
Sample
b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe
-
Size
829KB
-
MD5
b808e1a4f671c7d6b8019b6fd3635a49
-
SHA1
64f2e6701eeca000356704e3716641df7f6fbba1
-
SHA256
94b229b07cffd7dc02f2875e38bfec1d4c4858a709d39afde8809d76318d32d0
-
SHA512
182527b8b3b013f8ef7118a6f5c0143e36f6f3eb42a1b8c69c0f7d580812812aedefb0e4029fce02d8502d5d35de8bae6e0d35e15dd7c35f01a4782ebf106e53
-
SSDEEP
12288:M5bzzJ4eJgd8I5cfWDE0GBoWcG/lKmJ0rJIQOlgsJBw/9fA7OHK4LK0acc:MVfJTJ28a+g4oYlqSQhsJypA8BLK/9
Malware Config
Extracted
cybergate
v1.02.1
Vitima
127.0.0.1:81
chacalhacker.no-ip.org:15963
Pluguin
-
enable_keylogger
true
-
enable_message_box
false
-
ftp_directory
./
-
ftp_interval
30
-
injected_process
explorer.exe
-
install_dir
Microsoft
-
install_file
Pluguin.exe
-
install_flag
true
-
keylogger_enable_ftp
false
-
message_box_caption
VOCÊ FOI HACKEADO ...SEU SISTEMA SERÁ FORMATADO.
-
message_box_title
LAMMER
-
password
csbrasil1213
-
regkey_hkcu
Avirnt
-
regkey_hklm
Avgnt
Signatures
-
Cybergate family
-
Adds policy Run key to start application 2 TTPs 4 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies = "C:\\Windows\\system32\\Microsoft\\Pluguin.exe" b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies = "C:\\Windows\\system32\\Microsoft\\Pluguin.exe" b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe -
Boot or Logon Autostart Execution: Active Setup 2 TTPs 4 IoCs
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
description ioc Process Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{RH48B6E5YF-4UKU-71CF-AVF5-02901P6HJ002} b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{RH48B6E5YF-4UKU-71CF-AVF5-02901P6HJ002}\StubPath = "C:\\Windows\\system32\\Microsoft\\Pluguin.exe Restart" b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Active Setup\Installed Components\{RH48B6E5YF-4UKU-71CF-AVF5-02901P6HJ002} explorer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{RH48B6E5YF-4UKU-71CF-AVF5-02901P6HJ002}\StubPath = "C:\\Windows\\system32\\Microsoft\\Pluguin.exe" explorer.exe -
Checks BIOS information in registry 2 TTPs 4 IoCs
BIOS information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosDate Pluguin.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion Pluguin.exe -
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\Control Panel\International\Geo\Nation b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe -
Executes dropped EXE 3 IoCs
pid Process 1712 Pluguin.exe 1556 Pluguin.exe 4420 Pluguin.exe -
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Avgnt = "C:\\Windows\\system32\\Microsoft\\Pluguin.exe" b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Set value (str) \REGISTRY\USER\S-1-5-21-2878641211-696417878-3864914810-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Avirnt = "C:\\Windows\\system32\\Microsoft\\Pluguin.exe" b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe -
Drops file in System32 directory 6 IoCs
description ioc Process File opened for modification C:\Windows\SysWOW64\Microsoft\Pluguin.exe b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\Microsoft\Pluguin.exe b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\Microsoft\ b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe File opened for modification C:\Windows\SysWOW64\Microsoft\Pluguin.exe Pluguin.exe File opened for modification C:\Windows\SysWOW64\Microsoft\Pluguin.exe Pluguin.exe File created C:\Windows\SysWOW64\Microsoft\Pluguin.exe b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe -
Suspicious use of SetThreadContext 4 IoCs
description pid Process procid_target PID 3164 set thread context of 4568 3164 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 83 PID 4568 set thread context of 3744 4568 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 84 PID 1712 set thread context of 1556 1712 Pluguin.exe 89 PID 1556 set thread context of 4420 1556 Pluguin.exe 90 -
resource yara_rule behavioral2/memory/3164-1-0x0000000000740000-0x0000000000751000-memory.dmp upx behavioral2/memory/3164-3-0x0000000000740000-0x0000000000751000-memory.dmp upx behavioral2/memory/3164-5-0x0000000000740000-0x0000000000751000-memory.dmp upx behavioral2/memory/3164-2-0x0000000000740000-0x0000000000751000-memory.dmp upx behavioral2/memory/3164-4-0x0000000000740000-0x0000000000751000-memory.dmp upx behavioral2/memory/3164-7-0x0000000000890000-0x00000000008C8000-memory.dmp upx behavioral2/memory/3164-6-0x0000000000890000-0x00000000008C8000-memory.dmp upx behavioral2/memory/3164-27-0x0000000000890000-0x00000000008C8000-memory.dmp upx behavioral2/memory/3164-26-0x0000000000740000-0x0000000000751000-memory.dmp upx behavioral2/memory/3744-32-0x0000000000400000-0x0000000000455000-memory.dmp upx behavioral2/memory/3744-35-0x0000000000400000-0x0000000000455000-memory.dmp upx behavioral2/memory/3744-36-0x0000000000400000-0x0000000000455000-memory.dmp upx behavioral2/memory/3744-44-0x0000000024010000-0x0000000024070000-memory.dmp upx behavioral2/memory/3744-47-0x0000000024070000-0x00000000240D0000-memory.dmp upx behavioral2/memory/3744-184-0x0000000000400000-0x0000000000455000-memory.dmp upx behavioral2/memory/4420-227-0x0000000000400000-0x0000000000455000-memory.dmp upx behavioral2/memory/4420-233-0x0000000000400000-0x0000000000455000-memory.dmp upx -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Program crash 1 IoCs
pid pid_target Process procid_target 4356 4420 WerFault.exe 90 -
System Location Discovery: System Language Discovery 1 TTPs 7 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Pluguin.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Pluguin.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe -
Checks processor information in registry 2 TTPs 14 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value enumerated \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Pluguin.exe Key value enumerated \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Pluguin.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\FeatureSet Pluguin.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\FeatureSet b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier Pluguin.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString Pluguin.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier Pluguin.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 Pluguin.exe -
Enumerates system info in registry 2 TTPs 2 IoCs
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\Identifier Pluguin.exe -
Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\ b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe -
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2020 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2020 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe Token: SeDebugPrivilege 2020 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 3164 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 4568 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 1712 Pluguin.exe 1556 Pluguin.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 3164 wrote to memory of 4568 3164 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 83 PID 3164 wrote to memory of 4568 3164 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 83 PID 3164 wrote to memory of 4568 3164 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 83 PID 3164 wrote to memory of 4568 3164 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 83 PID 3164 wrote to memory of 4568 3164 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 83 PID 3164 wrote to memory of 4568 3164 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 83 PID 3164 wrote to memory of 4568 3164 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 83 PID 3164 wrote to memory of 4568 3164 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 83 PID 4568 wrote to memory of 3744 4568 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 84 PID 4568 wrote to memory of 3744 4568 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 84 PID 4568 wrote to memory of 3744 4568 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 84 PID 4568 wrote to memory of 3744 4568 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 84 PID 4568 wrote to memory of 3744 4568 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 84 PID 4568 wrote to memory of 3744 4568 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 84 PID 4568 wrote to memory of 3744 4568 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 84 PID 4568 wrote to memory of 3744 4568 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 84 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56 PID 3744 wrote to memory of 3520 3744 b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe 56
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:3520
-
C:\Users\Admin\AppData\Local\Temp\b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe"2⤵
- Checks BIOS information in registry
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3164 -
C:\Users\Admin\AppData\Local\Temp\b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4568 -
C:\Users\Admin\AppData\Local\Temp\b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe
- Adds policy Run key to start application
- Boot or Logon Autostart Execution: Active Setup
- Adds Run key to start application
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:3744 -
C:\Windows\SysWOW64\explorer.exeexplorer.exe5⤵
- Boot or Logon Autostart Execution: Active Setup
- System Location Discovery: System Language Discovery
PID:2444
-
-
C:\Users\Admin\AppData\Local\Temp\b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe"C:\Users\Admin\AppData\Local\Temp\b808e1a4f671c7d6b8019b6fd3635a49_JaffaCakes118.exe"5⤵
- Checks computer location settings
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:2020 -
C:\Windows\SysWOW64\Microsoft\Pluguin.exe"C:\Windows\system32\Microsoft\Pluguin.exe"6⤵
- Checks BIOS information in registry
- Executes dropped EXE
- Drops file in System32 directory
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious use of SetWindowsHookEx
PID:1712 -
C:\Windows\SysWOW64\Microsoft\Pluguin.exe
- Executes dropped EXE
- Drops file in System32 directory
- Suspicious use of SetThreadContext
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:1556 -
C:\Windows\SysWOW64\Microsoft\Pluguin.exe
- Executes dropped EXE
PID:4420 -
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -u -p 4420 -s 5329⤵
- Program crash
PID:4356
-
-
-
-
-
-
-
-
-
C:\Windows\SysWOW64\WerFault.exeC:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4420 -ip 44201⤵PID:4348
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Active Setup
1Registry Run Keys / Startup Folder
2Privilege Escalation
Boot or Logon Autostart Execution
3Active Setup
1Registry Run Keys / Startup Folder
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8B
MD5d606c74bd9fdb1ab8f4dbe2847bc2826
SHA18e6eb219e70ed3671caf758e6c16f9f07c15fbbd
SHA25644e8d9161e25d74c59193cc4e1503fb16186284022aa34d84e31bea5d738df41
SHA512617e917a52bd6bfb5eb9d236104ce50bddf6031c6eb8cad5ee9acca05ef8c5e8c5d000781ad821d0a611326f9270d7c562b5ea6ff14966d43ad7c3ca215fd6e1
-
Filesize
221KB
MD5bbbb15504e7eaa8b9b2cac07bb9399b7
SHA19e00c0215cc7370f72d6e67fe632f06506bd7184
SHA256becd323cd4f638fbc85234375e07e693282c70d304c258bd9b810628c1d35140
SHA5120cc7b6144f47dca6a38b4fc99cb319572ffc972e803cdd4107b362c6c26aaa6197dbd89844caf868dce17a2ffac1b0f47c00ac5072edea4e6907c2891fc31e6b
-
Filesize
8B
MD52d1dc862fbeba5bb85672bc460cf84cb
SHA1572748a54bbea9e7be6014b8c712a2a1047a1702
SHA256ed190bf0c4b0befebfe48b46c24a52f06079e6a693f07a1e92d23036b750ba75
SHA512bfb2f477d120d37be745ed1a880a5a98773142e0515282a8ff7e4c38ebd6153dd869917e4c66566a15f3366736aeb27d180643877313f3cc976893acc7d19b0c
-
Filesize
8B
MD5450750353e9f587504b2ecf2b869013a
SHA1ece2619a891b612f0d274f4667c69fd7b39291c4
SHA256c0f69955e4fffb667c86572ee2d35c3bde0bc82d71ee009d8bca47afee3b0df8
SHA512ce3e3ec438a17774e79dbf7b038c79b04bf6a5e6ac4ce13d81c7a1a9b3d9cc51702d395d042545bb4cecd352ece24fd42cd929b4dcd86c8c624f70f30da80eba
-
Filesize
8B
MD5681854ec1ca43de1686347c03a9e6a4c
SHA15e78b37b22d58f91669bfb6800d4bda96bcd8c52
SHA256fe7204d7c7ccff198b5b11c79f7106d5a2eac65d1a71116c7cd2ccce76656a23
SHA5121586c1fd47cfab72401b24e72ded1335a47764ba1a52ad0bd2f96bed4d8c3a206d97088bd0c05031b177a08edfb66c6d60e25d4101954d64557b4667ec40a4ea
-
Filesize
8B
MD5c569e9248a8d937d57eb50e1815d00ac
SHA135139ed1aa477a02fb7d1256acc77408d6853570
SHA2565af2f43f05803a305e618924c1c68b3aeb7f6fa73461471060c94fd2897056cf
SHA512d93629bad2afea656599dad713fddc4f1b90e01a738c19b7ccdfaaabc1e7f1601a6e4a958d685937b9a3e1de5775009b572aef240e5ce1ca57b73e977a9f1154
-
Filesize
8B
MD588ecc10604190bbcef5cf8f2015007ce
SHA1e689115321c952e7482d59c62699a42b53604d6e
SHA256d43d9026e42dbcf8eb3ccf942a40055a2e3eb6d402d20d755b3aa7318c32a788
SHA5121ffd94a6012c5cdb3d99dcf44435e170020b72d1d75913f5fbc28e8c88596d6ac0ebd2812b9238dffb117ff1581697669b8261f9260b2019a1afe1af2176811e
-
Filesize
8B
MD5e5b699c81cd4a833eac3e6c5f4cbe2cd
SHA19f5aa2a719fbdb05f8449ff8a06b2273b245b858
SHA2564251e497653a47bf49f5ced043da18206569a525127ef0046001c78c6b462666
SHA512d3f4e6e537d3f0df297e76c194498965fd681ed7ff63319c9c2aa1b74b89b79d8b1ad7fdbb3eb337080db6ba29e72f04119bc924a52b3d83806b30a8d03f51db
-
Filesize
8B
MD5a1ad43fc3ae4ff6ce85b1f4c88c1bc0b
SHA178c0dde55871531f537a933e0e3ae939a882ad95
SHA256117605549e4bf15f61f8b307c7facf44258d99294226cbe521de624be54fa02a
SHA5122ad3cf4528f173ca58b8bd314e8a0ecb9575f37ab3f3d218d91a67ffd57adc32b742ae40ce739fd74ef29cf387287db0047a2227d4af8a925142fd03956664b4
-
Filesize
8B
MD522bd7dcdfcc983fb8627c3586144ff72
SHA1faac46c44332d0b6010370f9f3bfc1e3b9edd728
SHA256aecc3cac858088b3be1430665e3d2a453760e8198161b10995421f4346c5f9d9
SHA512dfbffce2a40ec28af56007212cacd3afd6d5a5995ff4c8107f85e521c3250d70bceb2bfbb7f6e381875ef48ce51c2f32926445e50779fa5c9f4846ef43ee19d9
-
Filesize
8B
MD52260eb13d54f19a2fe2a68373bbec624
SHA1b68a341b1de381eaf6f60f04f931a786adeac005
SHA2564e5a358a22a7b332147fb6ac992f6c371015aecae30cd86b615cfd81a1e66e58
SHA512aa62a5d29d96e8b8fbd798cf9909e7af51945bc8963707e6b68ca6c9c37c26738bf9c8cd33f783602e7970228a787760f650c40b8c0c20a9bffc1a6302faceb7
-
Filesize
8B
MD5aa5246ae4c7068a7eefa02985fa2b268
SHA168f518c6699ca405a178fa96f8ece75e3babed8c
SHA2566950e84e96fb7f5fa0a35e7697da71ef3a7fe911d120882ce015f84a6dc2d1ac
SHA512b4c9a959fabbb15efece0770793fdd754abbda6942a35ad5611b85358c3a85a90422d91c67f05058c131a18171ef33bab4450ed80eee043102dee813089ea7de
-
Filesize
8B
MD59edc91167fb7c4a43a0e569e89a6a9a8
SHA19209a3213aab14ffee564deb7a902a2c98bcb7c7
SHA2564435df7be9796cfb3ce4230c0efe54611d5351d66bc286567db5c8c5462779c2
SHA512533ed040f9d44a72e8d20fa96eb3080074c6aad26be337d2da642c8a02940e717736589d284e647b8936dfd33929615f995514cb56cddf6a4d31eeb838471885
-
Filesize
8B
MD5d3e632815182083fb932cc667ec88090
SHA1f7562870bd177a32f81a2cf1c97cf3097bc82708
SHA256205908e20161bf11f5e9d5fdad2781f43b5ebe4386330b6438bbcefa8f1e0972
SHA512e56dc62034dd0c77d3273a7ebeb5039df30f5af6a1600cfa9f02d1e79b3f8dac3f017800ba9b3a0129d3958f7e03d290986a7ce109dc7d9f9c502995383fe652
-
Filesize
8B
MD57df66409d613e371f9993343efe43c7a
SHA184a4c217419169fa91bf4a11d940a94e536a963a
SHA256b571dc694348b80fd2c4ad014882e1e060b63081850f202967e93b1ebca98524
SHA51200991a85c70fe8f7e930c2728017a66a02ee5ab69938f0bbbebab3db95287293f61c26299418951c8873a86945168c599b848cbd643c597e0ebce30283a39c7b
-
Filesize
8B
MD592c4170609298c5936b461f2bbba09a8
SHA1d385c088eae541d7777d7a7abc25ed8168e33d7f
SHA25604b71adeba20916cd68d13f2c1356f55e84ac38ff0034dce728cf8662c7bbff4
SHA512a668fcc5c835c949c548ce4e619ad8a393ce617e4ca9d7005b1c7543182d6c90bdb25a7b06450896b551eb9b6848b9f52da5484d35715842bfc4700e2616078b
-
Filesize
8B
MD59cc95382efc9357edb39ce9b0b8cafbf
SHA11fd545ef0e269ce8c2aa27757622ff74c16f6738
SHA25635a6e031aefcaabb8943072fa926ecf29c87ec227f53c8a80f0d9c386f185842
SHA512f246f58537985ad5d3bdb5b6f9fe0ac20f1ed5d630f1f51ce278cd2f7c2413e762bf373a1ff47e676f1027f558f4f36e7b6636f815b24d2fe815e31fa5525fc7
-
Filesize
8B
MD597fd702ad54200a6fb22236ca677845a
SHA1d70b81a619d881e5f49f95d2bd1d9316f509a2ff
SHA256eab78584e945a7bdeb4f212ca8b7ff70fe0aebaebd546905787d6d14435bffc2
SHA5128fded95a2bbe331f1909be4fbf98e7470241d517680bb2d95492a9f74953deb79bd849de004cc761f699218ad5bac88441aa065ef271f1981df5cac244064339
-
Filesize
8B
MD56913e7c940ecc2cb580e1845017fdf3d
SHA1b17a8e9dec4871354fe857a9bd7be49c4609516e
SHA256a22b58351cf299799fe536316d45676f08ae65fb9a0050cd566cc8eb0fe7100e
SHA5126c16883b328dce1fa80cc407a87e89c28a4361e7c1366ff97e2895c7ffcb903fe557e6fdb45a18df91512be3a8a842de3aed3275beecf65a81f476e2875085b1
-
Filesize
8B
MD5d359848180ee2babfaed4c7c8e11d895
SHA1da3d668fcc12c00dfbab7d81968258448631fbe6
SHA256545cd5df39df879bbb4291e20efaf27d408e0da2108aea3fa2a67022a4163089
SHA51270163c6895f68f68ddefdf8d7b566d3d1da2ba04bd8e680f952c83967aece3df924d6950280f497366d6102e48212e8455d7f6b4de5e2b95d522c60874cc252b
-
Filesize
8B
MD56650bb91b2a88f595fbbc2149e287dac
SHA12dcf292ffc054271250e7aef3ad9481c25624aa3
SHA256d26d9db7b3883a04b9301a0289ae5855648c96b78ada3e8e3305e80662f0706b
SHA5123e62d331269f0f6245533d5fbe05750407e8f64fd462947344374740b29ba652ba090bc99bb2b85e298d9be295e7d917f202facddd1fd405129d1a595fb38a6a
-
Filesize
8B
MD56098ffce3e228ce78c1b5fee7e7ce1f6
SHA133d3ac5a9c76da542d6adfab8866993d58424d8e
SHA256a475f50c3c15b4d83fb832ea9d3464ff2c68a1ddb3fe9941cdb0684302f647af
SHA512bfdb91d72d11d3dc75a6b7b726ea844185e2bfce5b0b1e12168d1eb99df01937747e87f14bc4297c67e7da07eafa0bf17a14c1fe6c80c27e0481cbd9ebd4aeb6
-
Filesize
8B
MD58e8cd2fca6c9f6ecd80b74cea58723aa
SHA103cea56c8c7b037101e671571a80758a48f4637e
SHA256200254573a77c31186fb603fa48c584be44197ab2fb76f76698097a31fda5697
SHA5127e0c6fb69f8be89db16e2876a61d204dee7933b780ba7eaf96aeaeafd9a472a305ab2910ed38d728c33e23e290e74f3e2be7645ee9f4b36e983a8037f18b076d
-
Filesize
8B
MD5d95cc772a9d36482c89a54128f9a89a7
SHA12ca549003b38307a14e9f6d88340eb44774646a6
SHA256f8ae1209b524fef4387574c0896ddae94e274ac100f24f0554cba4e13c3ca23a
SHA512493d5cdb1d935fdccfeeabbdac48979c52626d491f9ff694270ee3de5b96092dc44d8a98253ba19537697e8c96fc86522f98c3f628ea6d083296004bfca2be90
-
Filesize
8B
MD55728ab3057f4dd08afa5e8196d4321b2
SHA169ad5244e776152a250ed5e127dfde6b643fd0b3
SHA256d24f8c050a12922d971ae52b2a3a7cc1bdaf8904b86530cf3573530fbb142cbf
SHA51205c6e738c9e2b984dfef26f095bc945a6d869767b75ffd9c84e5b8ddccd895b1e2aae6e423dbc9cfcca0de927e35842aeb4f61661223e1f444dba34074edb355
-
Filesize
8B
MD50bc0c5bd5d179993ebdb0981504f6a38
SHA1d4a63a37a0ccc54667ea45c99c67853edaac9e8b
SHA2563f66d820b68187688afe685c7a9ab9b49eddd0b32b972e3be25bf00db502b142
SHA512f4d08f1101c257a2aea7193ed1d29fb96e1fa12ad38ec0748fb3c021201770a60b3a283bac9bd3b938348c33a019a3ebae0aa9f800e4e0835c10106170ad7e8e
-
Filesize
8B
MD5493dcaa23e6b2d79b41c2395db13362b
SHA149d4992a9ae2ed01cd149bb54474139df2fed7a1
SHA2562de5de837fe62d9735328e979ec58cccd914d27215ab2ba7bafc06a101f2cab2
SHA51257448015e01afbc1342377cc5f855061d8e15af69fbe3f4f9a32d5ed00165bea27786b0af1dd46b58875be3aad849a08ff85c55406f192e7b4f840f2b1dcbdf4
-
Filesize
8B
MD51aea27d20283353e49bc793dc4dc6d64
SHA1ff878e859739a651377095d14f9205d4851615e5
SHA256daa8de1ebf5ae22e376ed981e5708a41d45e1c97d7699edd0a438de49ff0bcba
SHA512e74ab6e507529981a6cc683bb8a4f814ea51eecb8e451ed4d00eb53da2ad505647b3464d50cfeb9d1ed018d737bb6e441d2a2e473b1127d2e52624da0411410f
-
Filesize
8B
MD59df68d573d2c850a498a6976107ffab4
SHA16e556dfd6471ee6d6ff35974db21748d32a095de
SHA2567066aea54b1518b70e713adf2434fa6a90219a5c01fa824a0a1026fbd5787db3
SHA5122d1b23c43e2a16eceb50b0113c53708e909b5c36b4e65c351ea8d82aa15b03b2e6a1eec8a2f00bf273c4e1d7d179b21990a115661e89e120ee406f4b6213cec9
-
Filesize
8B
MD5f1248f3ef3666bb5793a09a827371930
SHA1533743003c56205b1b866e78291d7245ee792abb
SHA2568c9d6aba3ce58018ca498450970c017bbf7c4aa5083a2db895149f21dc7ddf02
SHA51203d486dc0c79cc899d03167e1653ce955d69ffd8f9900348777af0a7f530591fd2d90597888447a2278195a768f1310bcf18e2797af7cd7173212e673c5dddf0
-
Filesize
8B
MD50b2fc34cf9d9f6be0ff045eb8808ab99
SHA1543d8bc8e358ac99f1c29fd419a549d880bd2da4
SHA256274d834bc845baecafc954ef2352e4b71993e2d4233618ac80c6833821726a05
SHA5129990419439abe3bd5fc4dacaaf992923a273e9628fbee44f1de04d7f310273f40240f5748b0b6ad37ef5fadf976bd0518f94069cadc6bb83c326800f479d1505
-
Filesize
8B
MD5904704c7d805a143a10315bad7c585cf
SHA183938fd9e9c9427ee3552310361a29e1d1eea978
SHA256110f78ea1672249ef1954155066db5216412846c9f9217166681388f9f6c158c
SHA512e7494d752bc74143003d4de2c28e8ef54642c68f6d56d448f519a08fd3938247aa7dc174881553cf9f2e7ab82ad8a80f5b783742f120cec0bf7dfbcd73857fac
-
Filesize
8B
MD543ee058d858c0b7a4ed88c7a7407e654
SHA1fc1d7fa979c693f33abfcd760ac98f0bdfde85d4
SHA256f80172dda8f2c167236224cef1f21e181a5d89209d11c8715261543aab82e573
SHA5128ae0a05d3c834ad9f45aa2b6e4f55a80503b64e67b4cd4d63ed3fa1bc813c34e1ad188105fd35d85b7366a5304cbde4d8d9076eaef0c1df97c52efc0f23455c0
-
Filesize
8B
MD51763190f869b165ea205abca4e7ae929
SHA1afb345a23d540c9144ef9707cfc1312c6b6b6e69
SHA2567047b9556296c62028f09b7e53ca6727db7f6db4e94b5f01e9dbd4a83654c5d5
SHA512db38903d08569d523c08ba4f2360c4d66c15b9a0ae1d98d1c81554a94ba922bd061639b84ef7651914364e8d167b94688a81e72981a95f51caebb6aa688d63ad
-
Filesize
8B
MD56995d57abb5bd6ae6b005b4dc2bb49a6
SHA16c028a76745dae0f32628ed78dcced1c6f1ea68e
SHA256ce33e40bcbc83fd52d754c377457334e3cad0784359409bf4a464bc2e0670b84
SHA5129afc8a362627b2ff2f2c8193a830e6963c5a9994a33eae932f02587fc958fce466fd9433e948b52005f9340439f79d87cd3227e762b4a7d05af4f649e9a018f5
-
Filesize
8B
MD5c91865349b6883faf16c4ca7f84690e6
SHA13a3b2351aa54f9a427e21c70764b99973243ae87
SHA256363836ef2ba9bdd8f39ece66ae33fbdcda717f06218d78ebaf20d635d9eb2194
SHA51274332df3a869cdd15fcd1d67d1376b479482acbf35261087e1a8dc4b0c1cb3af622c61b551c492e415dc2abaf50d3775beff122939a15dd2a1ca0080c5630f0a
-
Filesize
8B
MD524b6ccbdc35237585c50fe5ba02e800f
SHA18a6990528ec40dfd9b1054d3066e8aa1007234c8
SHA25616fe62a72a64bdbe8d3d4e3b9d32ee674c8d5f0220f4521c248b1a8247568242
SHA51282ba54c971f62d5251c1f4216f29de180c0c12dfd24df822a31cdbeff1521f678bc47f37a8b87071a4060e5092a3bfe2f577d2b7c9291c2f498958f312aba4c3
-
Filesize
8B
MD564edb930c403acc76281348d28e919b0
SHA124f7b6a4005b9966a2d406f5d012e6d84c37a4de
SHA2563e83b2a94a5f0dd9199cacde72eff0079a5ac724554fa321b17d661d0dcb94a1
SHA5127aaf3f417babb5bc1aac6d724da4f96853e6f7204b05a6cf16d408f6d86a6ad940af51be663563876d25522839f022c8de570dbd3ea89651da341882c1466c8d
-
Filesize
8B
MD5eb8721140a4808a9d44658f8f08c87a0
SHA1847f9e21cc577c79d3482629436c9e3c73e5482b
SHA256cb48bbc5226401db8ea1ef4c0c71b7ab0854ddb9e2c927fd748a6c070c7ccc25
SHA5121677e33de2c8d923646b58d6dd8927b747eb0e6345b662100d7e0b1373ec3ca8beb2907386a9ed118b0d02258235c0fa2c0f0dde6ce0b6b8b03ae2f8c4a6a6c6
-
Filesize
8B
MD5a1ca12af1b9759254b6713476eb42746
SHA12850c7f61903d572201cd99b2d7ebecf41516706
SHA25646477a7c3f931a626be72dc21a09508db0035b379866da1dbf5a0ec2313c866b
SHA5129abca94f00b7903e280eda3c81523502d7acc3dba35cba9f4b57c220f6ce50a49d0bbe018cc6d9c4576ecad9d3bd8fd4a4402932d92065db1cf2d46e8d8c430f
-
Filesize
8B
MD5ed4edc96b5a8baf37c19b2c89b85bf25
SHA1fc366904263bbd1a6258655470e742669c53395c
SHA25695d89f936f0effc823febcafe3740efa9ab650205269fddc98a192da46797840
SHA512cf9d0366dcc82ae5eece46302dafc4ff3fde9133ddd57e00eadbdee0f86ab16dcd0fe833e4840462c6d479bb22bfc2ede4ec0a42b12637a4e5cea4d1b1ae627b
-
Filesize
8B
MD51e71bc9f66fd47687699d11d43c059d7
SHA1ff6edff91f488e3e1d14eb570b4cfc632820be45
SHA256320e6138d5264bcaacf7b7a1169031fd066e2552d7d7616cc21257e2c76ede8d
SHA51245dabf86e68cba794d4c73d1dfaf72da7f6aea1ee33f50a03a0ad1cc60387e36cec1a1117e5835e31f7bcaf0a391bd0fa9da10bf5f6a423b12ad28bc3d81a60e
-
Filesize
8B
MD52559338f87b1416e1c52732e4d947544
SHA14dbbc097ae62f5bb438627466f8fbceeaae5cbf2
SHA256267c899258db05a3b8bc84a0835b48e0eeb5067eac914e308f7b0ecb9b738f68
SHA5120e0c042c058def8500c46e1aa622da566741229b698a8f5e2b3e8517d7b5aeda9993a4c009cdd86c8f07dbc18eda0837d722ee04d4d01bc14602f00e559c3df5
-
Filesize
8B
MD561ac20cd96708f2469b28fa758bdde6c
SHA1a21dbc17883e0e3e257fd0172991d4286cfd0963
SHA25608ce19021e4a27ae9d5a96ee45a3841083acce3033bcc7f7e19407d45cae12a9
SHA512b586cbe352c200812a167a4bf6a206db3d5122f1e1e87adc44b874a046f52f5ea1105092ac272f5847bfd0fb04fdf1ec0c8d71df8d40f7dbfba16e1b248e86ff
-
Filesize
8B
MD5d589f9e3888979838c8550ff63ea24c9
SHA1bcf730f3913511ca792715def5f8885154d601c9
SHA2567e826140e39d35625c5edb81af10c80a6e9fab2f22c89dd007e0734b7f583e46
SHA512326dce2a220ebe93ff082c7d49f4131dbd2699870a17043dc688ceb232b0ea0f5ae1a1d027a44fd933b798c5dd6246c50bc847fa42e331aab682cb509933f647
-
Filesize
8B
MD5948f9c372b2f013b5b5da3c29a928328
SHA17ca94df49f046c48fe735554ae3fa1ff7863af6c
SHA2566229925c3b8a69bd76a3678b86056348dc6ba3ba1c053cb1d7bc80a4852d57b2
SHA512223c9ad1edd88cb83edba284b3772145574bf53f93d62851668d19a2a05b7a697457f460aea9be3d788fe208d832c77a9c0caad5c1a3f197c2ab5e9fa8834d26
-
Filesize
8B
MD5bcd9976216aa52034e21b4d464842a3b
SHA16e54da95d32d599bae229d1be22650c13229e63d
SHA256b593f7fc56a987a734376771079e02c4669c9fcdbe59a62368e7d66f7b3b2f0a
SHA51235e6e0407be80217d5f4dfaa86d7a9b4e2f2087a0d9d1074b728207c97bfbafca3b45efd425651ffd58147e06ed2259280bcf35d9686797256fb8e9fe12cc902
-
Filesize
8B
MD545cc037b5fc46a93ccf4433ea6fda539
SHA131748ea8ab503d4558ab2645dc45258eb1c09398
SHA256c82ea1c5d8fdb17f2dc2fd04000980d885a54b7a9bda50df07780a2ebea8d17a
SHA512e06c8d976d3366c408f6e7b4943c3919ab3feb7f72d366235873cf36dfe0c8f57149fb514627348dcd82a7023b247165b52559d40d11b6f985f556abe3080e98
-
Filesize
8B
MD58f1c3eb26c57a8f21a3d000af04a6c7b
SHA12e8449378463f467797f78419987beb847e3a479
SHA256be5f757ac73049b417c2b78de9dd9f8ceaab46a14c596f38617eaa95e78bca42
SHA5126489a58d76fdd424ff156ced8a38cf5267a9a3240c48f9f5735ea4ce509df14331bbb01150280ae81880546887054a2dc6e55e3ffb8609033bcfc908297bd53b
-
Filesize
8B
MD52f3ce8dc519be37e161e4cfa7d2baea8
SHA18281cc78802e024a4a5f34eea99b3a138b6f1a9f
SHA2565c4421a1fd1cb141189407e469b0e5556ae5d4dfbf9c17926b465a25e9c155e9
SHA5128b2c5bb0f9cdf25de5ee9012c07de0e6a88d1e2053c4244ac5010c87b11d9f42ab19f98f891731cd5e5d9d8c184558f822a912215f57108b315a395347aca64c
-
Filesize
8B
MD5a0926c031a56faec25e94c394d68e87e
SHA1cb76e7e2d018fc2d89afaf4f8451ea88c3103b6b
SHA256b764c7525e7a31cc12d5b34e90cde67a391ffec53257458f7d6b74240287fbca
SHA512e5fb84d9c8b12b4b95f31d2a111bc2276e96972aef9ecbac07c5df6e8af47877ee1f4b50356433453a17f8bd318461d1d1b53bb1af71d8aa01c90b67441d6ddd
-
Filesize
8B
MD5bb8f7d38a492b8d7af5ab8bdef1e6203
SHA1273a14e082ea2b526f8046a27ea6e12849e84284
SHA256850a025b1900474b43c5cc9f02bb180276e06dcba2471a605af678afc1fda8bc
SHA5123dff4aabdd2f5f9312591c27f0b994b15beb71f6a7498a3d6074a825b32d2f8401e87e84089c2086e243aac52e9914624f44e243ab73441918618ea602517679
-
Filesize
8B
MD598309a375b947f1c45f6a3094ae54cab
SHA19f7a81441cc2f4a6d7f198a25c9d071bbdd19f26
SHA2566b23d65ae7cdc3dea833f51b9b6c5b5037be34fd61dcecd39f8252806c64d88d
SHA51281938b9fdbd5fe5d7a644665e6c3123e9ff3e051abf3928db500956c5dd7597f68c123ae7f06208c923c575787adaa89a2badddc373880cf2b0e78be6eeeadc8
-
Filesize
8B
MD55e4172ab4a8310709e3e779a0cda195c
SHA1fb2244eaf74fc5095195c03a071247854fb930c7
SHA25639a789094de0c13ce873a029f4632d4e0dd5d31cf64b5fea7fcce31b1e144e35
SHA51265919bf9ce58c8307dac57f3413611d2ebc72a74e3ea1d7e017c40220cb992bbd0fb870b27fb895aba7cbb0ac7e513b67743a304ca0610f39e6ac49f8ee5c83c
-
Filesize
8B
MD5caf8caf7ba64bac3d62c82873d95366e
SHA1e1d87e877f612be1ffa832f56ac018210205f174
SHA256e2c0c71efb86fdba620859ff30a517bd2376d6bb92ca5e2dfa1adb699e9587c1
SHA512a08fa89d3ad52f262b85df7e59bd4f29dedca380f6aabd58e5302107ddd0c66b1f0855d5aa16cdd4a1c5def94b7001f85a5555742646b9b878caf6910ccebe3f
-
Filesize
8B
MD55d3564949cdfd61320179c18309d5d9b
SHA1f437c3fccbd26e3255264cd6c4c1815cd67c01d8
SHA256294f4086344f81d646adc2d11d7f13224cd0863e82e4597f33344b3e3dde2193
SHA51281512f45d42ee1374895c69f64cc5d8eb55a2dd3e73e90a751acd024fda46f2a16e7cf03afe4360ce7802e40fff78f8599507d6d5a01604328d181317cfe61bc
-
Filesize
8B
MD54507c8cab4a74637752c3ef29e615792
SHA15b4c25fadc440a82afa36e01a1e6c8aaefc739a5
SHA256a9bee9db54a13e8aa9f3a8b40ed5c9a3acfeff556a0fd70ae51ea651a91e96f8
SHA51214f072899631ce49b7eb065415456215a2fda7480f9d39ad8da8b08acfd7713e0598015f7315c505cc7a263c26c5d0fd97719c331a167f34e07ee219d1357721
-
Filesize
8B
MD50ddb6ae559f14c6a9acbf0e7b508f02a
SHA196da1aa29b3ab648aa1c7676339e4e156b94f1ae
SHA256c514569afaaef2a8100b31d1032b5620c10f53f9b2acc0abc0a281a4b87b3f3c
SHA512963cd0539e7d2a6948e0c5855324b900441b6ca74f3c4840cdc916d328e029dc174eb7f91ae5bd60bdbd7776b92d9cc6669e8f4883d2227c21328fcb998f08f1
-
Filesize
8B
MD5bc159a7ef26f0274c2682e8993334368
SHA1dd859f8edf401739abac72471af12b7b3f4bd39b
SHA256462aa34de63ed009eb44bdde3e8b413211cb342a27b5c6d68026727b58772708
SHA5128efa0cbb1e3574e3804aaa53cb9e441d2114451e330e039e1d5555aab89b10259fe356dbff83d8aabacb0080708cb95851d484d494732a83b2db708bac98eac8
-
Filesize
8B
MD54a47c473ca30e782cde41a06506972f7
SHA16a138ba3ca2e2c60b81c49955ae56caee8620b02
SHA2563055dd361620226784391398f561905577fc95f56136e9408a659db4ddb1eabd
SHA5120b71de281fb6f188da93d77e770bc9c0f02b44977b15d5922c9ae4a71655abce3dc2478a8eb0f789e0ef3090e382e61ae6e0719e270dff38f556baa69ea48bbf
-
Filesize
8B
MD553d9f48c307b947fa3c6b17b609a4c8a
SHA16a182997cd5d488e328f2c444831b0e3f87c8f89
SHA256ea857ff531c351cfd9e7eb491e9794697b0c1887ac809c5bd557f6767128ec86
SHA512d9e07f632706982dda59f9f13d7ec880bc974a8fd2d0c76930361bf56086a393a9a6a2473ac99773be049484f43871d8a08563a9207374196c387469cea69bf9
-
Filesize
8B
MD5107c6b22e5e38d13baf4ed23142519f2
SHA1250c8567a774519ff55dae2cc1a9792053319f93
SHA25685a4557de0d2d2b6087c1ff3693cc9cfdf555635a9a40b5945b12c3846d20fb1
SHA512bbfa26988bbaa39fd86af011e614ca957261faf2632c61f42d84daa416154a0d97f463b9957971e88f6bfcf24b73b898becbf6d0ab8a23c7199be1910ead13ee
-
Filesize
8B
MD518667730c916829cf5b06963d1a11ae0
SHA1570a2030ca0c1208fa65f92f75efc5bb1dd6064b
SHA25617e8cffc4378eef8b69ef5f57c792a50fce61c0c0cf0edb2bdaf41f710823b73
SHA512e091201dadf29c25cb8ac00632a41859e78828fbcef9cf00654a0ebdaa8c816b4d5b4abf3b452d003fef9961fe7c8922daef635253ab1529e9965949ecbd7560
-
Filesize
8B
MD53d90612896f784fd82583791b2ac91a4
SHA12ff133ac9bbe71a2963621b78fe16d40bcb9095f
SHA25606dfdc6833de1dc3e50b0f4c37ff4519a017957dac575aa51e5f91611e14d0da
SHA512412b46167a74bbf9cb4f1a2ce1448bf8ba2b33eafd46f210eef33327a76c0381624a5255be5171dbbc796cd07b601dd3f626aa2f36fe0eec850c4e85dcefebd1
-
Filesize
8B
MD51dfa6ddbac13aed8d5e1efa38922bdf0
SHA12b9c26cecbffe73a25523ff6e55e61150e7d397d
SHA256da6c3b6b9ff13b804f409577005f574be42c5a5d8a801ecef7cf46e15b44f21e
SHA512598b27a37d17e43e1603a405908ae072237fbd91ff877e6fb5e623a29a6fb3e6c81f52e6f3291c35b6867caf6a1e05f307ce8755dd0821c6fb2df0d56409f5ca
-
Filesize
8B
MD5367909b078081a7a6bd9151f14b8b5b2
SHA18362c7003adc6e602685208b35cff6a744272889
SHA25656b2f883917e19626d657d6e18b080f5fa1eea3020222094bfd7d6ea837ddbd4
SHA51296a17defbed9f896308dc9a4dbb17f0ebe09486f867faf725f09d0ec0b6ca7d889b914a7d647f926ab6b2eb5cb6dbd34d305faeb41acb5ea7f7f3476191ef769
-
Filesize
8B
MD545c57f9cdafb71e61616871223caafd9
SHA1912cde11470ce8135eeab61a7601c92b62abff2c
SHA256fe920ffc1fc885b36e17a3e4e93e6e34fbadc4c9e0373de8475598fa5b0b2e5f
SHA5125be3761d9d864308030abc1acc94c61428cfbb48726af80faaa95b6917a906734cb0174b2f79aec4c01dd7e5697c5c2b9b7cf69c13aab2d894bc23da51141e0a
-
Filesize
8B
MD57238d85caa8d442295acd0026b7636ae
SHA15a2cd13bc10433246584e5e3ea5b7b0d66a2051e
SHA2562decb5a529ae7a8876a6326284d1dab713beb2aecaf801469fd3884ad36c154b
SHA5125562b61ba275d34283d14e23be4650411dc213f335896fbc5b099ca10daf6410fc8b3767168d074c98ff7e2bda57e45945e281974e2d38f4849996240a6340e8
-
Filesize
8B
MD548a4fcf0db4d06ee1c157786ffe1061b
SHA1d51c044087c9660717f91e0ad4f80d10c8533f68
SHA2564d7bff5877f9e7ee83cba2a1c9dee3ee9942dff186cb6ca20d79e38cb500bac7
SHA512a3c98139047cf3d73896901d8d8053e34f5e25ca501e2d2be8bbe96ef6df302072e2e4cea36c8203bd05ec5886ab233cb4fe352af27d6c974933f5c0e19dc1b4
-
Filesize
8B
MD5bc3f561b76b230461b4b0b31cc355ed3
SHA125e593b2c09ffa30f99beb47289110b7d44ddf8f
SHA25670f03ee8bbb5cd653e8799c19ea2ae78acba7b5ae8a1a2291e8e229954ae11be
SHA512a8aa967b11bc2584c496b6728877bf85dc0a2ee3e22d7eb0b315605633509e4770c89d3e372082b7a150d6068198239fa3c6a03a9fbee2511f53fbe42ef56732
-
Filesize
8B
MD5f282273d080e63187acbe18ac97afe36
SHA1d85e505df2944957c79ca4b06513bfea040a1b18
SHA256ab60d4b566fd6f9c4acb1bf9594b56159f8144dee389611e4bdc9038354e339e
SHA512ddcc7b28537d05559d2396d977dff169adbb215c419a441e7a7eb4790ea4e46f19d8c08a1b801d57d2bd3815f8b3c5ff1920e125ae3bb7ca0ea3b010d59f1ab9
-
Filesize
8B
MD5070797631d0159628e59c4d426c4fb7c
SHA15724aa7c7e4f0bf6c05da155e06cc145b310309d
SHA2566ccded9aafb93db6f0db0a54b3b988b8d566cae8d2d9e77a832c3c27add36ff9
SHA5123594996d3b2f672afc0d1509a92b02ba6359b7e05dab0a416aa33d95c33cb47f285862b6098d2c3512f32e555f7f2541b9e3f86bb05a8eb9b77fa88f9feddbf2
-
Filesize
8B
MD570550072855f704c5471d997decfa6a2
SHA16cd1c8db4d76c0b00eb575d560325dcf3b053d0d
SHA256adcc7838ebfb95eb3de671104573d64b2127d7f241052ce32dbd74b9e970a209
SHA512c250ea499d8da91a1ce36df0eae4f5210484f912dace1c54391fa761768c841e4da7d1911302f58478af597137113c4cce113244e5230d97028c7b19bd97c0c0
-
Filesize
8B
MD5deb82a82a1a8a657e1ebb41aa18adc1e
SHA13716b4170085c91a5bb6fdb17e9a3d2339e0d81c
SHA25615e31d6c8bbc27209dea30db56adacf4d9938860ac98e78ec6937c98a4230b02
SHA512ecb6922499edcbf366915035701a36f8771f9e5c25ebde0cae93c808008812c4d800f3d87e8b202eb46abd71ae714ee7daa265f3788cd14ec9966d89cac08645
-
Filesize
8B
MD554df1e643d40e4ee81e6f3a4ef5ab393
SHA1b78c20fceb0a0313061cb0937cc2530d7ef82634
SHA256b4b84a14662cb26254d7bd0cd45cb80d404066c4d6f0dfdb02417ea8ad5a9790
SHA512d9451a6694cf23d26ecbd653de897e71b82d6c47be60843b265d966e0d4886db7c159b435df02354ac6eaa3fb74a1cae0da6abb104fb79e757f4bca842adac47
-
Filesize
8B
MD5355309cb9a8827a4c082f1ad818c42f2
SHA1926aa0ec53e54458324520cfae3a5389e9e2d2a8
SHA2567bfc7698671b1add7571a249c0dc326f38b74a6b22df7c1293722af8c3520d25
SHA512f268329df8999e9fc31896746dc1898b0ecb3682aa5962feeb380e3dc8f948a974f2ade836a514a27fe11c8d0e02dca9c775b167a6782304e67a8c7f9bcb2271
-
Filesize
8B
MD56c157e4dcd41d306f3d0b24847363b16
SHA1a419554cd2823e4cc949241495ebf3f67fb1fd9f
SHA2565fdee588571ed32f6ddbc0eca0f5246df38f3f0d12a174a4677c8e154520f5f6
SHA51296968a054f6793abf8937288a3b02bba6df2a0d65d5d3813781587a6200e486987ea6425330bc780a7f3cd5403442321440495efee395c72dad2dc130b1e291a
-
Filesize
8B
MD523d4aaf7c0152e733bde7305aadfd43e
SHA16e5ff53618bcceedfe70e1917e32c99616a364db
SHA256d1bbfbc1c9e354730eafda1814168e7a0adbdf402861ffe9e6b174ca4970ad3b
SHA5126253d88ac85213854935a06056e0f3e1476a3b95b6a54523c29ff94a5703665d58d03bf7138619619c03c29e79e6bb17d45cbe32213fd6d6d85bebfaa5109acd
-
Filesize
8B
MD5b4743fda6c28af3e9788b0a5af9c2e23
SHA1c74383aa26789b1f0a32aa1585e91c15a1a24501
SHA256f3ffe4294a25273e280fbea94cc9d68b56d343e606daeff5e7451b8c7a4ec40c
SHA512b8845bdaa5d5c3f8770472e40e558fb21012dcac5c105817457795951f4678f46c1f8d437109f6d46bcf0bfa9c1e21bad911fb46536a2c5777205654e15d1621
-
Filesize
8B
MD566eb6a862548163a216b165d09a136ab
SHA1d0666c7fa39602ea27c31e41bc81a5bcc828d9f2
SHA256271c7148909ad824dac48e6ace137309793e8b4bf1a65792d89fb5df7804e0f0
SHA51242791069d86ec5aa45c580fc5c9a4af917b2440868492e704aee6b2a55ac4d023322f0b6218e0c9595b2ac93c5cb542bd5c2737e119ccfe8eaa06e1f4d095c08
-
Filesize
8B
MD53fed40d85bac77760e3a0134975dc466
SHA195273b65ad8d82e739d25c201b0eae8da7c872b4
SHA25692b9bbf62e3baf28da0c35a31026ab5e20d2b18b649c8156f3a0f80e43ccfc2e
SHA5126ca81fdeff120a131786341ae84f44afefd89331578623d6a662306953dfe3e9962077b3df30497e534ccf786481fd088377de0baf31ffc9214b487cd9402317
-
Filesize
8B
MD52e2944ef17e049c97a61869499b42648
SHA1853066c5ca48a63b8da1adfd073a490b2004acb8
SHA256539d0faa46c38611d9e928ffb28a18b5dd2653e14e841330f27d3d93620f6885
SHA51289730edc1ffbe1b74154bd26f7e59daf3e989f3d05cd30cb74327a69a9c363c4dfd041dfd7cdd48a9609527557881399d07a2097e7b1024454e266388bb14488
-
Filesize
8B
MD51fd04dae92f51ab61805b3c7354323f2
SHA1fae0ea593dc4fa9d2d5a6710896c00e44576679f
SHA256ad10180c2ab66c14b53bfe00e0ece783791b6b4919c8e348ed3b95a4e67976ed
SHA512066dbc9d07502ed0590a63ba383bfb2a4a0d237d029c865d1fd363075f8362767ba00f695d2478c042ebcffb13256cc8c0cd043dfd69a0d585a9a777920effb6
-
Filesize
8B
MD5e44a46ea8b8e81b9fe3daf373490e031
SHA1b56f73ba5026a0ceaa90bb9aa529668baaa28f41
SHA2568ace8080a23c224d22c18ef709d762526ef0c6fa22d93b48655beed713b51f3a
SHA512c6e30af8f434c9b5a4591117b72f95d53cee78e7b475a38ecd48f63c58fb2851a7a33401ce3ecf77da829d0537619ab041447e9b3f244f782ca34d2583949859
-
Filesize
8B
MD51f010a325769113fd96c750064169d85
SHA1e9be52d3423caec99bdbaaacef887abc55b14ca9
SHA256e88be7efa1ebcae677782807be17d27b6d68d9cda6dff25256731885e76809dd
SHA5128825ad97fed622b909dee9d8f017165ea31f8ea130fef6467bb5385406a76769df360000cc733ff4a17cb3f2abfbed03b8a6bb3f41d40033e065319203900ec4
-
Filesize
8B
MD50d60caa2ef6a9ea572f1094f4f08008e
SHA155999bab0053f74b2fbab9eeea2d41c1149bf925
SHA25670c26159fcbb2906c2440000255c02ef2f8cbaf44f78c84ed49f57a0ba56c540
SHA512a2ef723ab4407d833f9532df8ed9c979dcc5708d751b04680835f7d0c588598fa3d8e9b86f59b92998d0bc5ce97d0c39943e4fdd8802738bf321a64c5ecd191c
-
Filesize
8B
MD58c73d2353f4e8dc4a0cb860002ea209e
SHA1f958e872395eef45a5ed85f9bf1305e8a10c4309
SHA256bfc874dd5d214ebc54c82f2237e25709101bdd38f300ac93bfd63b99c640e6e9
SHA512e487d088116ecca957ea9d733bc799f15e163acb0ba27b5bbe645c5c9a4ee6e98d3072869051cec9e1e871d5f095bd7116ca34a84c868c4d76edcdf621d04744
-
Filesize
8B
MD572d76869c863c70bfaa65fa3ad383e64
SHA1845a09b873c0a7a338277af14fccf09be0560dd7
SHA256de572f966f77fef9b3db1aae15b365eb1fe0edfe0e0e163da2e43d3d68a35054
SHA5125705bc9571ad0f22208f0d03ee0829d67c63e61e12c3b7f3c75a229f8bb112615d38c1aecbec2a3216812b169413af557d9c337bf6ed6b82b499f35d43844194
-
Filesize
8B
MD54cacc25a9ccd8f45a0133f65aefa082b
SHA1011e159e83a30bacd0c2bad578784f77d37cd353
SHA2568db43e730987bf23962c168948ce14f841ec9a8de36087b197dee42deab012d9
SHA5128dce668b5213aa4ba075c167f808ec118fda6911b649c7bab1a40a5f93ad79943fdaa404184b35b0dfa0c96c90e5c5f12f828abf9151ead5b0c26fc9e55b3aa8
-
Filesize
8B
MD521b4686d666925ee26cb95ba3452d380
SHA13b819038a936509e1bf0fb2a2f5404721d73ca06
SHA256183c3572af771a7921d259a4b12c614b10a2ab0e5c7f2c7a27aa675cfc1cfd81
SHA5122e0eae2e094005cbfc127516b5f1f7790ead79c4c3e6bc480321ce062d97bd1eb8a1afe431b23508c49047ea9944e85eb6eec88a2c4c644c45c33f6791c88d0b
-
Filesize
8B
MD50a5f446d0533adcb58f0d7e8f30ac180
SHA1ce342c77169afe0565486c88e0e15e319e7212c6
SHA256a1ef918e2b2c1c9fcd5a5c21f66c547705db85b365ade6cab5f36553120e0f30
SHA512f1a68ab66beb14c1ba05d97a6e134859a1903306e7ac1f774d4c6f19a697b545cd5e4f404bf41b30a7da4568edde16ac1eb181fc7a870da05139493311334d7d
-
Filesize
8B
MD5fe61a397d3f3557aa7824fefaffd09db
SHA17e6f4f99e3a5cda1544f3a4040f24559d5979908
SHA2561ae3db3792e7572378422ff57acc9ea5b0f840f73f1f9abb0ed6df37388b7c2d
SHA512fd1612a9c7f589470b3c00a2ae041544bd3e22b5e88137004f433f81501967bc06b0a2c96c00f32cdc87190fe2914fc4f5898da5294c13d1318846abe4ae05b0
-
Filesize
8B
MD5dbe3f5cc96a5ebde5c13b2527b7eb816
SHA104ce1d910f76dcf6c084f4d660d7b7a102940ee8
SHA2562df7531939bd3dfd8ae88c5b4d37a9df525723c48046bf2eb1bed7630b1ade05
SHA512ce7d112c48de9980a04dc15d215d4d015374f9a07b3d31f4b5c5d15e39d6fc96a51e88c0bd06ca1d80440d8c00a4f3b0af1e7bc0d189f19575386e437b7d4f87
-
Filesize
8B
MD5b617f21c4b7020e60691e6d7781ab0d0
SHA14298c888140dae61629f0ecf4a266d683f238926
SHA256f156a706fb1637d207cc38114942ea01fabfa21e52b95cb3c55e70f92b116c77
SHA512c841724cc41c48227c97e138efc24048e32c98ff0e00794ca365930f7e3bd4f05728033999ad0a7d01d75b7a41ded49a024f06f7e47c88bb4bb53287ecc18914
-
Filesize
8B
MD539099d9da5b6940e5398606bc8c26105
SHA15c0bb627e31ce40230499ef90fdcc0e1e5ae1f1a
SHA2569b63abdbea32835ed1d2c7e03efb63201f0a05b5c4d84a04e8a97f914d7bfc60
SHA512fe523117b19f7a510974c65f377ade19352c0cf1ff9a406e932ae4e2d0d8a628d178921f3b4c6abadcd11badc84cdc05e439367a48f4e1671294efa6f6e81b0f
-
Filesize
8B
MD53f0ac8fb9ec3ea7a8713a8cb5d4a70ab
SHA1a3e4da8711618ee8c152425beae815a947eb1164
SHA256db4b2802caafd0ceef4e3d6270baf3ae972ca470621074d076ff663514d511f6
SHA512d934ab403752506c69f3200541671c6265ce2cca4c2202a56dc4c88f1082c5214d5a5ea59975f655ee68394fad1889413ddb326a2b6d3cecebb902fbc5329be6
-
Filesize
8B
MD5cb5f1b3b1ac6915143200c9110fe9900
SHA1202011925d0d7fa9e08d7389fec8d69d4c113904
SHA256d1fcb58930dbae657508f523030f7cd9b32c417a3ff89c10f750dec856cafef3
SHA51238cbdc40da5451ff480a7080fecf0c9de1fe357b1ebc79190386117745e2b214899f9d75fbc31ef22c728bdaae1b44655bd5fd683d4e23486ffbb2b66adc844a
-
Filesize
8B
MD53b167fb0efd828af72e3e4cc449844d7
SHA16ef5a7b77bfed51bd25aa35eee69b18cbb86533c
SHA256b9fc774b4cc7b7b956c2c4183368cbe0ace08a8889b819a4fe5e93adc5eb3967
SHA5124994da40707baf058a685544b66ad052da1d8c76917460b3f113991524d6f9dc58f93124ec0fb6c99161aa06b0fcffc06f5806e6caacb45cdc457fde6f47c57a
-
Filesize
8B
MD5d4385187f7718ac87dad5acbc1de021f
SHA1bd46f6840a81a044545688e75eac0c70b767055f
SHA256141c11aba3108f2639c0a39dfba8053dadaa32531fcd3aa9de1ccd59089b4beb
SHA512ace9c83d5d0a6b9b4da89cb26fafc3bb16951fcf3a298f8ad864c387b2fa5c6cc05307b1c83b399fa2413b405756f069696f7d57234d755e328eae70c2d4ce75
-
Filesize
8B
MD55a6b877d6b7a4d5c900711b74a8c925d
SHA1c5ff3c568fdb427979bfa750d8737e6537596f6b
SHA25652a3649e16f3d7469b25bc7d02ffa4dde47949c09b970bfa2d0639be90764ca7
SHA512cfb3496f1cde6e4d73632762d0262893e7bf09071ae83c560f8e7789bb02a97ba5d32f22d9445ba7f397969f9e24c67ad8b78c04e27cc8775595af3ade4fbb47
-
Filesize
8B
MD5c03106c609d70c2df85234ab62a90835
SHA13e4249601d044a4033ec3567e742afa26afc7248
SHA256dcb7d1c837395f5a9be286aa942da030cbf0a105105d3c5135270584a5866c5d
SHA512d5ddcc783f74645e3143d68027115d5d31a8879136b5a8136337e040f185c3e70cffacb8e3593bc0507d30f2e52e15b933f74c9eb0504a8d0bdd1c68df9ef2af
-
Filesize
8B
MD5c297b58033e9c4a8f2e6a7a6ed990edb
SHA1176f703aa2efc731046b69c3f5127b5b8bb3b4e0
SHA25658e12f17188790419a055dcde1e0f16ddce36264ee4254401b2b651de31f410e
SHA5126d7a6f0731565091a3efb32ca03062834217d36131a72d2f3f5b6d61c0a3b0c014b8bb73efa635ce5ee243d2d1e248f10f3a077c0ed01e7d2807583d54b371ff
-
Filesize
8B
MD567261c5c47fb2f9b7a3213ac54c34227
SHA1a7e27a5b3ad5f198dc718e3d05b9d69e9cb85565
SHA256454a16282da8d5024537bd9b30a9d4df90245cfd8b9ad19bf62d66cb10c15939
SHA512b862e112f66e2855e374d53d1174f1da09517ef4fde9ba644448e943dc35ed41b13dc8a0763823bc26fe5c74f98b0cb7c0c2834e7bbfd56489338d8281f1cdf3
-
Filesize
8B
MD56864ab2df3540444365bc2645233dbef
SHA17a9997ce85b41fba1216901070d76da149235426
SHA2567216a58887d4ac0e1ecfd9b6b15410d277f91e3732a88c19f2057d7e459becd9
SHA512b739e71a300d1a787e4ee9a64987f698f9b9bc31ee03d8069582214d16707a47a5755884927a7b4d5ecfce7645ad0e2d5c595d8d8db842f3f322f51ff0b07e81
-
Filesize
8B
MD5dba33bb5c7a6bdc544a5bbe98d22dcf8
SHA1895111895c981e95236be147beaad004646153b5
SHA256d4892ce6b9b63634a69139c412b2471546f99b5075ada0825100e29ed3ae2485
SHA5122782d64ec4906076af6e10188ed760fdc7e12313bbd0d9fc01477a71ff82f0f042774810bdfb888c6e9d1e02688e9a656d2158b60cb359c2ccc57793cb38e7cb
-
Filesize
8B
MD5d704e5973c5b2bda5c4cc840732bbf07
SHA111441c6fb184e28e23eeb433bd030ccf8c79b66d
SHA256c3f0bd4974d172125937c9d8a52352c699ec630fd509038ecd2ad838b1feed2f
SHA5121887a108b930a73175cb9f0838d96998e88b37dfc86d14fe188e59002e46d80e26f85077857a63ebfeb46b15a3d304e2f723b1c7992d6a83c6bc3e6b48fc3bcb
-
Filesize
8B
MD5aebc5d6ed5d505a8987ba8eddfc4cc0f
SHA144c0da1cd3be6c6b37e8222380bcadb376a9b508
SHA2563f7b872f9fdfb7001666ef00910449a87e5d7c7af45e13828e552903d1c505c5
SHA512056b962cb56f5c2778fb9ad9e4da88f6fec2d631defb67fea475013d3a64f2d309131b4e68fb18cc15f9f086b10abd4dd9e1f3b939d1025f1c6286eb40259ff2
-
Filesize
8B
MD572a1a8aea2b64e48fa11834c6b32e67a
SHA1e15b21a36a419e91aa85cd576a30881b7043d0c9
SHA256862b01f87c311b0fb85b2eeebcf4d2e9a498ea1589ace81372b5c10a1aac80fc
SHA512a2acf8ffb25beb20d7f059f027b8d2ca766b2c6b9c6a91811a1c1cb360e282b8fe14b86ded9abedfb11454b70f86b568bffbb7535d9c75f4c15f7f8566f25d7a
-
Filesize
8B
MD5df397a4232638943b5b8dad6140de1ab
SHA1c4fc80c5aff2fa3a2ce4432d67612ebcab90009f
SHA2569ffd351bb003003c2b80107f51ad87b4cd90762ee0c0819a815c7ec00ac4b492
SHA5123d3f9058a5c1eb7a4a67bb305250f6011d38d9c55028a461479445ce4efd02fb7def62409026eb8ebaf2fa20b59193345008df8b6f7b04db54a05120262ed8d1
-
Filesize
8B
MD5d78b465ec38832b0eb3ab15b487158d1
SHA1ac9409e07f6278ade9d6722e23f37c34fa8d1d26
SHA256ef27d8edf70176ad20e55c19ee37c845bf242c8aace39151dc6b68c89af34497
SHA512d691d73bb6e142a648919197575188cc758b37710a91e2380fd2daeeab7104eedd9d9c6134b8762b8eeaa8c498dc1959f48e6d89f3d6b92ca98b6bb570256161
-
Filesize
8B
MD552e176efc9fb15d327f3c2a540b737f8
SHA1852c56c8355fca530827984fedb96e332d3bad94
SHA256bd8c913448cd383a18c075cc4e8e62455b354b9fdc1a705fc78ec84e17ed3eb9
SHA512a5f58a2f0ba4734122a7523548d91b8c603cf6003b2548ee7c6824e542320ba74aade4911aef1e428d8b7de1e08b4ceb7ca1d29c65c2fefec4aa2c7f7ad34c39
-
Filesize
8B
MD5ab360f406c39bdb0eab53cb3bf018b5a
SHA1b7526a51b1cba14b27936bfd8896d1361be123b7
SHA256fc5ab136bc219e43bd008fecd232d791afdb7ff37480c26a9c4f41da9b88fe53
SHA512c06f91bc4603ba605b790f52a01d317a4e943ad60a3bd11f2f219372a71441b82dbf220f87dfc87eb0da68c76388f09f37d2807b64c6c22ecbedfa7ab8e68b1c
-
Filesize
8B
MD5d36ec72749e011697ab1bcfd4c04b604
SHA16119a4a2121e7954d6391ca2aa232923912b876d
SHA256789fee4f240a91fc539d35380f97f461a1e5f5be8f8320e0b0285b136697c37b
SHA512ec9e433f6fcb0009869900ee8985eb518a27637fe00f576f9cdf3ae562e05717021bdf7cb35a4dd460fb6f8c9b03f8faf6dde846b882f0ce957f9881032bae65
-
Filesize
8B
MD51ce043ef9b6e48d9616ab117dc7cc933
SHA1af02b52626056ac64d9cca78b5523e6b1cf168e4
SHA256b4ba17945461b181848039da69b62ebe333db22bf38ae158eacb420aaecece58
SHA512e9a3443d0b1ab7cd2edee2e9868bbcaeae22d65bd1cfc4d4c1c2f45d14252750d90c673bcd11b23253fa8b6c45c3787fb30b5162dc7b47dca697d6cce1a90bc8
-
Filesize
8B
MD538dfe3a3a027e534ebf6e38fde8160ac
SHA1f2fecf0e86238fdb8975bd279e7be3f78a279a86
SHA256f1c35e3eda33892034b380993679db50a4cba9db47adc5e443ef3497f5e55baa
SHA5124e70dc02d5d750acab4379cf55f698fdd28c864a1c4e37f95f8232af924f10fd98e77ca153b725d01d18a7ddf5636cdd96e6e5ff6422daf996493b17fac29c76
-
Filesize
8B
MD52d12aaec177f394788c309c652b4c942
SHA1bbd8b36c599440fb5264b76f9698c639eb24a52a
SHA2565260ebb12456ca3befbcc7399f1be396f86a19afb8e79c1dbc812d569e531429
SHA512f756e94ec0e55bab602e1426540c215a21fa02dcedb04c36a960c31018f4718bcfff83309991d50fc329b9010a28cf00c1396ec1c880f3f01b2bdb05cfd809aa
-
Filesize
8B
MD504c4f13bab789416b6f8aec4c0812f0d
SHA19439f0faed2799edb7a33868c108dc9df3d2a428
SHA256d07a590bfe012598084902225f3ceaa007e0ea3b308b678f66d1f0cb331cb1d0
SHA512628db66ebed93b9baa0093d503495884cfe98db4a8bcf23df2f2fba66aba56dbbc4ca5082a849a612c907a6123ddc5cea7c74b6e596ec0ef29e68a6265bc9f1e
-
Filesize
8B
MD55240c8e7963364dd8bfca0b4d9ae99d9
SHA1c91b36b199e4261c6b3f3d2547e5e78a1cfd1550
SHA256a362781c9882c9a5560a3e1fb04000584a99336df1a1e6227ccb24a27e08302a
SHA512530833d974c3ae97ef48614a81ac890d823e031484290aecdcff11a7183ab790ea798f56f7809b4ca591bd0d76c27932f500f51cd153c2ac3a18c326be14974f
-
Filesize
8B
MD54170a1f031e80529591b69f455a87426
SHA1dc0427a10852a134c5880eb6aa3612450f1130b0
SHA256d73b4d36b6ff75d3fb406100e4f4ab3fde529099965ca45d16ee24d2226303c6
SHA5124bb4b3bb77de8cb270e701ff8c06294c565fdd966e8b2afcbbe0c8017970663406fe4670c18636b8b911d8ec1c4ce4d12bb12b7780f2449db63e7cf52875a6d4
-
Filesize
8B
MD56091b88a452f58c8fd0e601b28c1ec23
SHA1c9946dc65a7d2cbc07d8a20f69e8925dd99ded25
SHA256c95796b1ef93b48ec773c808f14b6f7cbe4630c3ef914f40dc744091d2c054fd
SHA5127e88ee60f2316242de6189d0f4ea54fad7d0a23d3d13c51d83541541f03b296f27d259cdee1d235acde62945babc21a629db235954c73eda032a620c8524d22b
-
Filesize
8B
MD5cbcbf1324dbb1079d2a2a6bdbc410a50
SHA18d6b42c9f2dfe8862211409e680bb7fab793b64a
SHA2568eece54df084156703955649631166408d6756bd19fb896ea480320376d9bcd9
SHA51289dd189b52b21c89190b634bcc303103f9fe597afd199e14daa1c32370312b4159f27fa2f157c93a2434fe9671e99017b43fb72d4b784cda131c218c0941e78d
-
Filesize
8B
MD531ca97fd9c23d7878b246b89bcad8833
SHA1a46856779722f744d4f78a18f51c8d629f0fc1c5
SHA256d14fd14bf48b8489ffcad410e9689f0d6a4048cff16f6d62fb959a9e64dd9f9f
SHA512f6bc6bc865f12e5258e0e8f3b74319f0d55f9d658edb8a9b656dbb0ae509e233a998bea81b9285e9aa4a392611a1ef056305af4fe501cb89d9ccbbd55038efa7
-
Filesize
8B
MD5b7bd1b5ed8d0ea394bea16df39f1a721
SHA138997b3c08648689fb4865b053fccad53c348e01
SHA256f55bf0e7717a63016f01a2420ab61d066f2ffe097845e5c8dd27bea4e613ffcb
SHA51203e07b35b930faccfecd81b1d178841674272e157d3cfcf5e0601e16a4fe9af124e2c0670ee02a122af2cd27405bcf6afe3fbd4c0db419248cdf691d51da0714
-
Filesize
8B
MD55177680900845761ae8620a4b6e954ef
SHA15ebcd0157d57bc86e767243bb3da2eb1d6660a11
SHA2562ee98b22ff9a85c4f7ab97c446cfa4ed93e599d25c93e32ac91d68a5c542a3c9
SHA512714979327106dde7c06f689a41774f59076f2e5ea7397f6fb804b7fefa4f1bab2de278e436536e5be5c10957f78e20706011583f98911a54130eadffe3a4d26b
-
Filesize
8B
MD5b90ba9ef06d03ef9c158a72a4b74b6e1
SHA130242ec0a4ad58332721def200cb176a8e15719e
SHA256d46f970ed109bdec18d33cb1dfc0fb6aa4c0da3682182c9ff0fdd9998c9dbff0
SHA51265f4d220f9e79bb4f6edebfab0ab440d37d953601441bb97f9edbb4a44f5069e0433ece28043fc42643e2ef9b4dcd6a7abf655e704971334ea7cb1a4bf2ec50f
-
Filesize
8B
MD5f9c6d7c23d1174bdb907115dd62f457c
SHA166aedd11a38233d0612e27546c0c0e3dacfae23a
SHA256d77b11aefd1246c2906cf3dcbd9dd582f6105de8d53949545909f0fc2a682b2e
SHA512ecfe14a93b7d9390dfbc778198155574689c7513776891ccb2884db3a7876283b0b4eac9ca763270e4f15f85b6f336e04b73c9e3a8b0c4265df3579cccb22abb
-
Filesize
8B
MD515ef098fdb32c5a93f23c9ffe02e2386
SHA1597d9682fc973f789b74329e35d12edeb8997784
SHA256b87c5c31b29a7d8d788d66fe56003dc05f8e99d574f781713e39972e8b86f187
SHA512460a6cd6db5c193b58ab857355dcae62e1126453977b8c2668d773bf612368e4f15aa7987132ae02f9a2869edf3a110ea6f15d5fa24b99dad9a8b966be60fa1f
-
Filesize
8B
MD5b57ff508f574a1b72d1504ae9a4f0ca7
SHA124f5ea23af0e9dae8b4ed0658a28c12331582f93
SHA25675bc1d8eb63d4c7c8abd79855647a11f3e2b078a9fdc43e7d9eb585a755ecdb1
SHA512d43c054171488eadceaa16c9a99056aa377c0728971d1d7f07f9ccddcd0cb28e84f82b71032cd3193c1df187ef5adff1d8d29aa9608442ed4b3d6846d5a07811
-
Filesize
8B
MD507b77cb2f844f55b6821ebeb5be97fa2
SHA1508c9b3da69ea06e8843b78765abdc7d20fb27b6
SHA2567a9175d64ebbceb47e964cd64200932f3ddcb77268ccbba5d1e32015d7e059ec
SHA5125c9b44fc82a418a7549ac5473eed9630c55320251318e7f466d9d612cc35ac08e24fd4aba0f13ff17e7236de66af1c580ff5617e6a77cdefcffd9a104a243812
-
Filesize
8B
MD5f24843729ac4783777f196d4c709ea2b
SHA19728afecf8a129e9b04b3ccf7f49e0e2b229e326
SHA25604d5685245ecba88d9f25a8ad9feba23f61c1b7fabe98a8cd340dfdc5f4a78f8
SHA512d419bc39261abd1f600960609f483c59213b1f5466049f2d983a9d809d544ae3677a01ac7e9daba7a051a3f3361b23f6d58d58da6c997b8d7ab5c2070b087f07
-
Filesize
8B
MD5913e0f4f23df5f593a8490a176723f1b
SHA1dbaefbff7418abaab834908dfc6f5b672a680ab8
SHA256d5459900f29ac420ca5f4b739d0e26581474c8cb3a4b95cc1fb47d4d61d63dbc
SHA5127aee1760b644dd38fa409513a5489f68f0201c86d1898f232c69feb810dd0f98d2ce7514183e8acb9716b3109486a54ed47fce0ac558a4107244426d4854cc5a
-
Filesize
8B
MD582158bf8fb0bd4c202395f521c3a253f
SHA121d3fe63b5ea4ca98391aa33d4e2a1cd2cc7e7d2
SHA256ab41ed7d56576b16aa80f588fc4f063c9c66f752d326cc51cc455cdb3bc2242c
SHA512f4ff23399c3204c69e9e8c7f773a43d152683d2f0e48623108a04505747c1abc91623716eb05007246376aa9a4993d0a865fb44d0f062d19ac02067b2cee616b
-
Filesize
8B
MD5ca20f62aebdd1fbc87ffdb95f858f363
SHA19bdb75380cb0a37798b79d901d6d7053bc3ad84a
SHA25693336ce4ecb043c013cf72868c6d54a4e06844d8ffda3aa2c888d6150748d1f2
SHA5127f2ae1af835a374b5892f55efdc343329a35079ce1afab50d4c0aa0b859b43ad88f4f9ce567f870483dea457e1a35d05bb10a808a9192651a4fe875d55962007
-
Filesize
8B
MD567d96c29287d3a485a4fdf20999e58e8
SHA1773df5357c281be8b7eb2ebd26292f088e2db4e6
SHA256e598204e1479cb79b81a62fae94658b02ec1c697180c1a8c232b896fe30cb0f3
SHA5125b1b3c5c8cccb180946668d3b3f7a5b80e92e43be43116df538756c5cff23dcccbbdf0f18616d59b742c6b52ddd9a4a05fce7b3fa29cb1bcf2b599a12c693c3d
-
Filesize
8B
MD52276b4f05427a7e371cf5a3e280f2d69
SHA19ddbf69dfccb56eba649f7396a9a499bbf64171c
SHA256390b593db370864cc6e8a1d83e926ad1966f7387163669bd24016d839ac749d6
SHA51248ba8ed07201e895a6c126160e109a25aad81f4fb42d00f510371bd3992a2bff85307874b651f1b4f6d88778fd9525ca705ff67f2f901590ca55201a9abd8c66
-
Filesize
8B
MD5577740c0815bec981d84be28b447d4e4
SHA19ae1bd8b101c5e2882794f374aad17339ddc5f6b
SHA256f5efa8c1bfa953f447430dbec007f3834ec8393df27a5adbcd30135034e708ed
SHA512378b3be2542a2c6e9e0b3d0922848c74760beede78c6dd63a098203329d25c21a5ade041f5c08208e08285620a641db38394149ce0272987c197a2d861281f23
-
Filesize
8B
MD5d06d91a4235af723df14a0b9f8e8c4fc
SHA1a071904f9d510007023be9346ea6d86b42d64448
SHA2567838e4afaefc107fd30fcb56e080b00d1c8a7ddfb0c429312569b5fab8f7a9f6
SHA5120cb4e4015595343ead77d479a184f8dee68b072e7ae2a6f56c8c958f64baf0b76cd1c53de19548c84fc0cb682c62587151a31c15461ef5a496916151d1834dce
-
Filesize
8B
MD56118481f71d9f64fbb7867a6cf0ead5f
SHA1f15d2c52876a2004dc9f082d22aceb203e606892
SHA2565bc0b6ce927f261cde5436947de15bf23db878264d94213e48de35a5c8c2df1e
SHA5122bf7399c40e58d0436db91a4dd652c33d2191085576cdf2849a16096b7e769b7351f878479e366cde6081409c3b00677b742c07b3a87e0c3221a78d07de96cd3
-
Filesize
15B
MD5bf3dba41023802cf6d3f8c5fd683a0c7
SHA1466530987a347b68ef28faad238d7b50db8656a5
SHA2564a8e75390856bf822f492f7f605ca0c21f1905172f6d3ef610162533c140507d
SHA512fec60f447dcc90753d693014135e24814f6e8294f6c0f436bc59d892b24e91552108dba6cf5a6fa7c0421f6d290d1bafee9f9f2d95ea8c4c05c2ad0f7c1bb314
-
Filesize
829KB
MD5b808e1a4f671c7d6b8019b6fd3635a49
SHA164f2e6701eeca000356704e3716641df7f6fbba1
SHA25694b229b07cffd7dc02f2875e38bfec1d4c4858a709d39afde8809d76318d32d0
SHA512182527b8b3b013f8ef7118a6f5c0143e36f6f3eb42a1b8c69c0f7d580812812aedefb0e4029fce02d8502d5d35de8bae6e0d35e15dd7c35f01a4782ebf106e53