Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
900s -
max time network
903s -
platform
windows11-21h2_x64 -
resource
win11-20250207-en -
resource tags
arch:x64arch:x86image:win11-20250207-enlocale:en-usos:windows11-21h2-x64system -
submitted
09/02/2025, 21:24
Static task
static1
Behavioral task
behavioral1
Sample
42.zip
Resource
win11-20250207-en
General
-
Target
42.zip
-
Size
41KB
-
MD5
1df9a18b18332f153918030b7b516615
-
SHA1
6c42c62696616b72bbfc88a4be4ead57aa7bc503
-
SHA256
bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
-
SHA512
6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
-
SSDEEP
768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
Malware Config
Signatures
-
Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Version = "43,0,0,0" setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE} setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\ = "Microsoft Edge" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\StubPath = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\132.0.2957.140\\Installer\\setup.exe\" --configure-user-settings --verbose-logging --system-level --msedge --channel=stable" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\Localized Name = "Microsoft Edge" setup.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{9459C573-B17A-45AE-9F64-1857B5D58CEE}\IsInstalled = "1" setup.exe -
Downloads MZ/PE file 2 IoCs
flow pid Process 8 4892 Process not Found 46 3244 chrome.exe -
Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
Executes dropped EXE 22 IoCs
pid Process 2036 setup.exe 1880 Salwyrr Launcher.exe 5032 Salwyrr Launcher.exe 3144 Salwyrr Launcher.exe 3560 Salwyrr Launcher.exe 4416 Salwyrr Launcher.exe 5504 Salwyrr Launcher.exe 5516 Salwyrr Launcher.exe 5136 Salwyrr Launcher.exe 4560 Salwyrr Launcher.exe 2636 Salwyrr Launcher.exe 5216 Salwyrr Launcher.exe 5048 setup.exe 4440 setup.exe 880 setup.exe 6064 setup.exe 4464 setup.exe 4076 setup.exe 2204 setup.exe 1552 setup.exe 4408 setup.exe 6056 setup.exe -
Loads dropped DLL 27 IoCs
pid Process 2036 setup.exe 2036 setup.exe 2036 setup.exe 2036 setup.exe 2036 setup.exe 2036 setup.exe 2036 setup.exe 2036 setup.exe 2036 setup.exe 2036 setup.exe 1880 Salwyrr Launcher.exe 5032 Salwyrr Launcher.exe 3144 Salwyrr Launcher.exe 5032 Salwyrr Launcher.exe 5032 Salwyrr Launcher.exe 5032 Salwyrr Launcher.exe 3560 Salwyrr Launcher.exe 5032 Salwyrr Launcher.exe 4416 Salwyrr Launcher.exe 4416 Salwyrr Launcher.exe 5504 Salwyrr Launcher.exe 5516 Salwyrr Launcher.exe 5136 Salwyrr Launcher.exe 4560 Salwyrr Launcher.exe 2636 Salwyrr Launcher.exe 5216 Salwyrr Launcher.exe 5216 Salwyrr Launcher.exe -
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Installs/modifies Browser Helper Object 2 TTPs 8 IoCs
BHOs are DLL modules which act as plugins for Internet Explorer.
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\NoExplorer = "1" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" setup.exe -
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk setup.exe -
Enumerates processes with tasklist 1 TTPs 1 IoCs
pid Process 1896 tasklist.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\en-US.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\MEIPreload\preloaded_data.pb setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Locales\pt-BR.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Canary.msix setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\icudtl.dat setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\msedge_200_percent.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\ro.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\nl.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\edge_game_assist\VERSION setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\msedge.VisualElementsManifest.xml setup.exe File created C:\Program Files\Salwyrr Launcher\LICENSE.electron.txt setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ms.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\sr-Cyrl-BA.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Locales\is.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Locales\or.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Locales\pa.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\msedge_wer.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\vi.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_proxy\win10\identity_helper.Sparse.Stable.msix setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\edge_game_assist\EdgeGameAssist.msix setup.exe File created C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\6611ec67-0b5d-44e1-b71b-bd233d72028d.tmp setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\132.0.2957.140.manifest setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\identity_helper.exe setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\msedgewebview2.exe.sig setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\AdSelectionAttestationsPreloaded\manifest.json setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\EdgeWebView.dat setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\VisualElements\SmallLogoCanary.png setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Locales\sq.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Analytics setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\ca.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\et.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\nn.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ro.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\wns_push_client.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Sigma\Entities setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\gu.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\it.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Locales\ja.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\fi.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\ja.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\edge_feedback\camera_mf_trace.wprp setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\mip_core.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\v8_context_snapshot.bin setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Locales\it.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\edge_game_assist\EdgeGameAssist.msix setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ar.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\microsoft_shell_integration.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\msedge_100_percent.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\oneauth.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\VisualElements\Logo.png setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\VisualElements\LogoBeta.png setup.exe File created C:\Program Files\Salwyrr Launcher\locales\sl.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\vk_swiftshader.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Locales\ms.pak setup.exe File created C:\Program Files\Salwyrr Launcher\vulkan-1.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Edge.dat setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\ug.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Locales\mi.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\4076_13383610430763332_4076.pma setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\dxil.dll setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Trust Protection Lists\Mu\Other setup.exe File opened for modification C:\Program Files (x86)\Microsoft\EdgeCore\132.0.2957.140\Locales\az.pak setup.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Trust Protection Lists\Sigma\Advertising setup.exe -
Drops file in Windows directory 36 IoCs
description ioc Process File opened for modification C:\Windows\SystemTemp\msedge_installer.log setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata setup.exe File opened for modification C:\Windows\SystemTemp setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata setup.exe File opened for modification C:\Windows\SystemTemp setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata setup.exe File opened for modification C:\Windows\SystemTemp setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\metadata setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat setup.exe File opened for modification C:\Windows\SystemTemp setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat setup.exe File opened for modification C:\Windows\SystemTemp\msedge_installer.log setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat setup.exe File opened for modification C:\Windows\SystemTemp setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat setup.exe File opened for modification C:\Windows\SystemTemp chrome.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\throttle_store.dat setup.exe File opened for modification C:\Windows\SystemTemp\msedge_installer.log setup.exe File opened for modification C:\Windows\SystemTemp\msedge_installer.log setup.exe File opened for modification C:\Windows\SystemTemp\msedge_installer.log setup.exe File opened for modification C:\Windows\SystemTemp\MsEdgeCrashpad\settings.dat setup.exe -
Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs
When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.
description ioc Process File opened for modification C:\Users\Admin\Downloads\setup.exe:Zone.Identifier chrome.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 6 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language tasklist.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language find.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language MicrosoftEdgeUpdate.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language setup.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language cmd.exe -
System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs
Adversaries may check for Internet connectivity on compromised systems.
pid Process 3588 MicrosoftEdgeUpdate.exe 5560 MicrosoftEdgeUpdate.exe -
Enumerates system info in registry 2 TTPs 3 IoCs
description ioc Process Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName chrome.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer chrome.exe -
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute setup.exe Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy setup.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main\EnterpriseMode setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main\EnterpriseMode\MSEdgePath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\ = "IEToEdge Handler" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppName = "ie_to_edge_stub.exe" setup.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\Policy = "3" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\132.0.2957.140\\BHO" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29}\AppPath = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\132.0.2957.140\\BHO" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c9abcf16-8dc2-4a95-bae3-24fd98f2ed29} setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\ProtocolExecute\microsoft-edge setup.exe Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\ProtocolExecute setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\EdgeIntegration setup.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\EdgeIntegration\AdapterLocations\C:\Program Files (x86)\Microsoft\Edge\Application = "1" setup.exe Key created \REGISTRY\MACHINE\Software\Microsoft\Internet Explorer\Main setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Low Rights setup.exe -
Modifies data under HKEY_USERS 4 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry chrome.exe Set value (int) \REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133836100648035541" chrome.exe Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Edge setup.exe Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Edge\InstallerPinned = "0" setup.exe -
Modifies registry class 64 IoCs
description ioc Process Key created \REGISTRY\MACHINE\Software\Classes\MSEdgeMHT\shell\runas\command setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.svg\OpenWithProgIds\MSEdgeHTM setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{31575964-95F7-414B-85E4-0E9A93699E13}\ = "ie_to_edge_bho" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} setup.exe Key created \REGISTRY\MACHINE\Software\Classes\Interface setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}\ setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E} setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgePDF\shell\open\command\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --single-argument %1" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\.xht setup.exe Key created \REGISTRY\MACHINE\Software\Classes\.xml setup.exe Key created \REGISTRY\MACHINE\Software\Classes\.mhtml\OpenWithProgids setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C9C2B807-7731-4F34-81B7-44FF7779522B}\1.0\0\win32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\132.0.2957.140\\elevation_service.exe" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\Implemented Categories\{59FB2056-D625-48D0-A944-1A85B5AB2640}\ setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\TypeLib\ setup.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5} setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgePDF\Application\ApplicationIcon = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\132.0.2957.140\\msedge.exe,0" setup.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LoadUserSettings = "1" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\TypeLib\Version = "1.0" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32 setup.exe Key created \REGISTRY\MACHINE\Software\Classes\.pdf setup.exe Key created \REGISTRY\MACHINE\Software\Classes\MSEdgeMHT\shell setup.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5} setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\TypeLib\ = "{C9C2B807-7731-4F34-81B7-44FF7779522B}" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\TypeLib\{C9C2B807-7731-4F34-81B7-44FF7779522B}\1.0 setup.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\EnablePreviewHandler = "1" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{4A749F25-A9E2-4CBE-9859-CF7B15255E14}\LocalServer32 setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ie_to_edge_bho.IEToEdgeBHO\CurVer\ = "ie_to_edge_bho.IEToEdgeBHO.1" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\132.0.2957.140\\EBWebView\\x64\\EmbeddedBrowserWebView.dll" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\.svg setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\microsoft-edge\ = "URL:microsoft-edge" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\TypeLib setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3A84F9C2-6164-485C-A7D9-4B27F8AC009E}\InProcServer32\ = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\132.0.2957.140\\PdfPreview\\PdfPreviewHandler.dll" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\TypeLib setup.exe Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{B54934CD-71A6-4698-BDC2-AFEA5B86504C}\InprocServer32 setup.exe Key created \REGISTRY\MACHINE\Software\Classes\MSEdgePDF\DefaultIcon setup.exe Key created \REGISTRY\MACHINE\Software\Classes\MSEdgePDF\Application setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\TypeLib\ = "{2397ECFE-3237-400F-AE51-62B25B3F15B5}" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\shell\runas\command\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --do-not-de-elevate --single-argument %1" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeMHT\Application\ApplicationIcon = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\132.0.2957.140\\msedge.exe,0" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\CLASSES\MIME\Database\Content Type\ setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeMHT\Application\AppUserModelId = "MSEdge" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\TypeLib\ = "{C9C2B807-7731-4F34-81B7-44FF7779522B}" setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\ie_to_edge_bho.IEToEdgeBHO\CurVer\ setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/pdf setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\microsoft-edge\shell\open setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.xhtml\OpenWithProgIds\MSEdgeHTM setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ProgID\ = "ie_to_edge_bho.IEToEdgeBHO.1" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{C9C2B807-7731-4F34-81B7-44FF7779522B} setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ = "IEToEdge BHO" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\ie_to_edge_bho.IEToEdgeBHO.1\CLSID\ = "{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\.htm\OpenWithProgids setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\ie_to_edge_bho.dll\AppID = "{31575964-95F7-414B-85E4-0E9A93699E13}" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeHTM\Application\AppUserModelId = "MSEdge" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgePDF\Application\ApplicationDescription = "Browse the web" setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\MSEdgeMHT\shell\open\command\ = "\"C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe\" --single-argument %1" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5} setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{628ACE20-B77A-456F-A88D-547DB6CEEDD5}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\132.0.2957.140\\notification_helper.exe" setup.exe Key created \REGISTRY\MACHINE\Software\Classes\TypeLib\{C9C2B807-7731-4F34-81B7-44FF7779522B}\1.0\0 setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{31575964-95F7-414B-85E4-0E9A93699E13} setup.exe Key created \REGISTRY\MACHINE\Software\Classes\MSEdgeHTM\DefaultIcon setup.exe Key created \REGISTRY\MACHINE\Software\Classes\TypeLib\{C9C2B807-7731-4F34-81B7-44FF7779522B}\1.0\0\win32 setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C}\ProgID\ setup.exe -
Modifies system certificate store 2 TTPs 29 IoCs
description ioc Process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 5c000000010000000400000000080000190000000100000010000000ba4f3972e7aed9dccdc210db59da13c90300000001000000140000005fb7ee0633e259dbad0c4c9ae6d38f1a61c7dc251d00000001000000100000008f76b981d528ad4770088245e2031b630b0000000100000012000000440069006700690043006500720074000000140000000100000014000000b13ec36903f8bf4701d498261a0802ef63642bc36200000001000000200000007431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f0000000100000014000000e35ef08d884f0a0ade2f75e96301ce6230f213a8040000000100000010000000d474de575c39b2d39c8583c5c065498a2000000001000000c9030000308203c5308202ada003020102021002ac5c266a0b409b8f0b79f2ae462577300d06092a864886f70d0101050500306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100c6cce573e6fbd4bbe52d2d32a6dfe5813fc9cd2549b6712ac3d5943467a20a1cb05f69a640b1c4b7b28fd098a4a941593ad3dc94d63cdb7438a44acc4d2582f74aa5531238eef3496d71917e63b6aba65fc3a484f84f6251bef8c5ecdb3892e306e508910cc4284155fbcb5a89157e71e835bf4d72093dbe3a38505b77311b8db3c724459aa7ac6d00145a04b7ba13eb510a984141224e656187814150a6795c89de194a57d52ee65d1c532c7e98cd1a0616a46873d03404135ca171d35a7c55db5e64e13787305604e511b4298012f1793988a202117c2766b788b778f2ca0aa838ab0a64c2bf665d9584c1a1251e875d1a500b2012cc41bb6e0b5138b84bcb0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414b13ec36903f8bf4701d498261a0802ef63642bc3301f0603551d23041830168014b13ec36903f8bf4701d498261a0802ef63642bc3300d06092a864886f70d010105050003820101001c1a0697dcd79c9f3c886606085721db2147f82a67aabf183276401057c18af37ad911658e35fa9efc45b59ed94c314bb891e8432c8eb378cedbe3537971d6e5219401da55879a2464f68a66ccde9c37cda834b1699b23c89e78222b7043e35547316119ef58c5852f4e30f6a0311623c8e7e2651633cbbf1a1ba03df8ca5e8b318b6008892d0c065c52b7c4f90a98d1155f9f12be7c366338bd44a47fe4262b0ac497690de98ce2c01057b8c876129155f24869d8bc2a025b0f44d42031dbf4ba70265d90609ebc4b17092fb4cb1e4368c90727c1d25cf7ea21b968129c3c9cbf9efc805c9b63cdec47aa252767a037f300827d54d7a9f8e92e13a377e81f4a Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 0f00000001000000140000000f6aad4c3fe04619cdc8b2bd655aa1a26042e6500b000000010000005400000053007400610072006600690065006c006400200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f007200690074007900000053000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c009000000010000002a000000302806082b0601050507030206082b0601050507030306082b0601050507030406082b060105050703016200000001000000200000001465fa205397b876faa6f0a9958e5590e40fcc7faa4fb7c2c8677521fb5fb658140000000100000014000000bf5fb7d1cedd1f86f45b55acdcd710c20ea988e71d000000010000001000000090c4f4233b006b7bfaa6adcd8f577d77030000000100000014000000ad7e1c28b064ef8f6003402014c3d0e3370eb58a2000000001000000130400003082040f308202f7a003020102020100300d06092a864886f70d01010505003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137333931365a170d3334303632393137333931365a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100b732c8fee971a60485ad0c1164dfce4defc80318873fa1abfb3ca69ff0c3a1dad4d86e2b5390fb24a43e84f09ee85fece52744f528a63f7bdee02af0c8af532f9eca0501931e8f661c39a74dfa5ab673042566eb777fe759c64a99251454eb26c7f37f19d530708fafb0462affadeb29edd79faa0487a3d4f989a5345fdb43918236d9663cb1b8b982fd9c3a3e10c83bef0665667a9b19183dff71513c302e5fbe3d7773b25d066cc323569a2b8526921ca702b3e43f0daf087982b8363dea9cd335b3bc69caf5cc9de8fd648d1780336e5e4a5d99c91e87b49d1ac0d56e1335235edf9b5f3defd6f776c2ea3ebb780d1c42676b04d8f8d6da6f8bf244a001ab020103a381c53081c2301d0603551d0e04160414bf5fb7d1cedd1f86f45b55acdcd710c20ea988e73081920603551d2304818a3081878014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7a16ca46a3068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100059d3f889dd1c91a55a1ac69f3f359da9b01871a4f57a9a179092adbf72fb21eccc75e6ad88387a197ef49353e7706415862bf8e58b80a673fecb3dd21661fc954fa72cc3d4c40d881af779e837abba2c7f534178ed91140f4fc2c2a4d157fa7625d2e25d3000b201a1d68f917b8f4bd8bed2859dd4d168b1783c8b265c72d7aa5aabc53866ddd57a4caf820410b68f0f4fb74be565d7a79f5f91d85e32d95bef5719043cc8d1f9a000a8729e95522580023eae31243295b4708dd8c416a6506a8e521aa41b4952195b97dd134ab13d6adbcdce23d39cdbd3e7570a1185903c922b48f9cd55e2ad7a5b6d40a6df8b74011469a1f790e62bf0f97ece02f1f1794 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 19000000010000001000000063664b080559a094d10f0a3c5f4f62900300000001000000140000002796bae63f1801e277261ba0d77770028f20eee41d000000010000001000000099949d2179811f6b30a8c99c4f6b4226140000000100000014000000d2c4b0d291d44c1171b361cb3da1fedda86ad4e3620000000100000020000000c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae409000000010000002a000000302806082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030153000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c00b000000010000005200000047006f00200044006100640064007900200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f00720069007400790000000f00000001000000140000005d82adb90d5dd3c7e3524f56f787ec537261877620000000010000000404000030820400308202e8a003020102020100300d06092a864886f70d01010505003063310b30090603550406130255533121301f060355040a131854686520476f2044616464792047726f75702c20496e632e3131302f060355040b1328476f20446164647920436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137303632305a170d3334303632393137303632305a3063310b30090603550406130255533121301f060355040a131854686520476f2044616464792047726f75702c20496e632e3131302f060355040b1328476f20446164647920436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100de9dd7ea571849a15bebd75f4886eabeddffe4ef671cf46568b35771a05e77bbed9b49e970803d561863086fdaf2ccd03f7f0254225410d8b281d4c0753d4b7fc777c33e78ab1a03b5206b2f6a2bb1c5887ec4bb1eb0c1d845276faa3758f78726d7d82df6a917b71f72364ea6173f659892db2a6e5da2fe88e00bde7fe58d15e1ebcb3ad5e212a2132dd88eaf5f123da0080508b65ca565380445991ea3606074c541a572621b62c51f6f5f1a42be025165a8ae23186afc7803a94d7f80c3faab5afca140a4ca1916feb2c8ef5e730dee77bd9af67998bcb10767a2150ddda058c6447b0a3e62285fba41075358cf117e3874c5f8ffb569908f8474ea971baf020103a381c03081bd301d0603551d0e04160414d2c4b0d291d44c1171b361cb3da1fedda86ad4e330818d0603551d230481853081828014d2c4b0d291d44c1171b361cb3da1fedda86ad4e3a167a4653063310b30090603550406130255533121301f060355040a131854686520476f2044616464792047726f75702c20496e632e3131302f060355040b1328476f20446164647920436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100324bf3b2ca3e91fc12c6a1078c8e77a03306145c901e18f708a63d0a19f98780116e69e4961730ff3491637238eecc1c01a31d9428a431f67ac454d7f6e5315803a2ccce62db944573b5bf45c924b5d58202ad2379698db8b64dcecf4cca3323e81c88aa9d8b416e16c920e5899ecd3bda70f77e992620145425ab6e7385e69b219d0a6c820ea8f8c20cfa101e6c96ef870dc40f618badee832b95f88e92847239eb20ea83ed83cd976e08bceb4e26b6732be4d3f64cfe2671e26111744aff571a870f75482ecf516917a002126195d5d140b2104ceec4ac1043a6a59e0ad595629a0dcf8882c5320ce42b9f45e60d9f289cb1b92a5a57ad370faf1d7fdbbd9f Salwyrr Launcher.exe Key created \REGISTRY\USER\S-1-5-21-1051229892-2838831788-3126553707-1000\Software\Microsoft\SystemCertificates\CA\Certificates\9E99A48A9960B14926BB7F3B02E22DA2B0AB7280 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\USER\S-1-5-21-1051229892-2838831788-3126553707-1000\Software\Microsoft\SystemCertificates\CA\Certificates\9E99A48A9960B14926BB7F3B02E22DA2B0AB7280\Blob = 0300000001000000140000009e99a48a9960b14926bb7f3b02e22da2b0ab72801400000001000000140000009c5f00dfaa01d7302b3888a2b86d4a9cf2119183040000000100000010000000c6150925cfea5941ddc7ff2a0a5066920f00000001000000200000008408d5e5010ab8da67eb33a7d79ace944dd0ac103ae6ead3ff30dec571066b0319000000010000001000000014d4b19434670e6dc091d154abb20edc5c000000010000000400000000080000180000000100000010000000fd960962ac6938e0d4b0769aa1a64e265900000001000000160000005200530041002f0053004800410032003500360000004b0000000100000044000000420036003600320034003000420030004600360043003800340042004400340038003500370041004200410036003000430046003500430045003400410030005f000000200000000100000079040000308204753082035da003020102020900a70e4a4c3482b77f300d06092a864886f70d01010b05003068310b300906035504061302555331253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3039303930323030303030305a170d3334303632383137333931365a308198310b30090603550406130255533110300e060355040813074172697a6f6e61311330110603550407130a53636f74747364616c6531253023060355040a131c537461726669656c6420546563686e6f6c6f676965732c20496e632e313b303906035504031332537461726669656c6420536572766963657320526f6f7420436572746966696361746520417574686f72697479202d20473230820122300d06092a864886f70d01010105000382010f003082010a0282010100d50c3ac42af94ee2f5be19975f8e8853b11f3fcbcf9f20136d293ac80f7d3cf76b763863d93660a89b5e5c0080b22f597ff687f9254386e7691b529a90e171e3d82d0d4e6ff6c849d9b6f31a56ae2bb67414ebcffb26e31aba1d962e6a3b5894894756ff25a093705383da847414c3679e04683adf8e405a1d4a4ecf43913be756d60070cb52ee7b7dae3ae7bc31f945f6c260cf1359022b80cc3447dfb9de90656d02cf2c91a6a6e7de8518497c664ea33a6da9b5ee342eba0d03b833df47ebb16b8d25d99bce81d1454632967087de020e494385b66c73bb64ea6141acc9d454df872fc722b226cc9f5954689ffcbe2a2fc4551c75406017850255398b7f050203010001a381f03081ed300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020186301d0603551d0e041604149c5f00dfaa01d7302b3888a2b86d4a9cf2119183301f0603551d23041830168014bf5fb7d1cedd1f86f45b55acdcd710c20ea988e7304f06082b0601050507010104433041301c06082b060105050730018610687474703a2f2f6f2e7373322e75732f302106082b060105050730028615687474703a2f2f782e7373322e75732f782e63657230260603551d1f041f301d301ba019a0178615687474703a2f2f732e7373322e75732f722e63726c30110603551d20040a300830060604551d2000300d06092a864886f70d01010b05000382010100231de38a57ca7de917794cf11e55fdcc536e3e470fdfc655f2b20436ed801f53c45d34286bbec755fc67eacb3f7f90b233cd1b58108202f8f82ff51360d405cef18108c1dda775974f18b96ddef7939108ba7e402cedc1eabb769e3306771d0d087f53dd1b64ab8227f169d54d5eaef4a1c375a758442df23c7098acba69b695777f0f315e2cfca0873a4769f0795ff41454a4955e1178126027ce9fc277ff2353775dbaffea59e7dbcfaf9296ef249a35107a9c91c60e7d99f63f19dff57254e115a907597b83bf522e468cb20064761c48d3d879e86e56ccae2c0390d7193899e4ca09195bff0796b0a87f3449df56a9f7b05fed33ed8c47b730035df4038c Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 5c000000010000000400000000080000190000000100000010000000d0fd3c9c380d7b65e26b9a3fedd39b8f030000000100000014000000d69b561148f01c77c54578c10926df5b856976ad1d000000010000001000000001728e1ecf7a9d86fb3cec8948aba9531400000001000000140000008ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc620000000100000020000000cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b0b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520033000000530000000100000040000000303e301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f00000001000000200000005229ba15b31b0c6f4cca89c2985177974327d1b689a3b935a0bd975532af22ab040000000100000010000000c5dfb849ca051355ee2dba1ac33eb0282000000001000000630300003082035f30820247a003020102020b04000000000121585308a2300d06092a864886f70d01010b0500304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e301e170d3039303331383130303030305a170d3239303331383130303030305a304c3120301e060355040b1317476c6f62616c5369676e20526f6f74204341202d20523331133011060355040a130a476c6f62616c5369676e311330110603550403130a476c6f62616c5369676e30820122300d06092a864886f70d01010105000382010f003082010a0282010100cc2576907906782216f5c083b684ca289efd057611c5ad8872fc460243c7b28a9d045f24cb2e4be1608246e152ab0c8147706cdd64d1ebf52ca30f823d0c2bae97d7b614861079bb3b1380778c08e149d26a622f1f5efa9668df892795389f06d73ec9cb26590d73deb0c8e9260e8315c6ef5b8bd20460ca49a628f6693bf6cbc82891e59d8a615737ac7414dc74e03aee722f2e9cfbd0bbbff53d00e10633e8822bae53a63a16738cdd410e203ac0b4a7a1e9b24f902e3260e957cbb904926868e538266075b29f77ff9114efae2049fcad401548d1023161195eb897efad77b7649a7abf5fc113ef9b62fb0d6ce0546916a903da6ee983937176c6698582170203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604148ff04b7fa82e4524ae4d50fa639a8bdee2dd1bbc300d06092a864886f70d01010b050003820101004b40dbc050aafec80ceff796544549bb96000941acb3138686280733ca6be674b9ba002daea40ad3f5f1f10f8abf73674a83c7447b78e0af6e6c6f03298e333945c38ee4b9576caafc1296ec53c62de4246cb99463fbdc536867563e83b8cf3521c3c968fecedac253aacc908ae9f05d468c95dd7a58281a2f1ddecd0037418fed446dd75328977ef367041e15d78a96b4d3de4c27a44c1b737376f41799c21f7a0ee32d08ad0a1c2cff3cab550e0f917e36ebc35749bee12e2d7c608bc3415113239dcef7326b9401a899e72c331f3a3b25d28640ce3b2c8678c9612f14baeedb556fdf84ee05094dbd28d872ced36250651eeb92978331d9b3b5ca47583f5f Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 0400000001000000100000000cd2f9e0da1773e9ed864da5e370e74e14000000010000001400000079b459e67bb6e5e40173800888c81a58f6e99b6e030000000100000014000000cabd2a79a1076a31f21d253635cb039d4329a5e80f00000001000000200000003f0411ede9c4477057d57e57883b1f205b20cdc0f3263129b1ee0269a2678f631900000001000000100000002fe1f70bb05d7c92335bc5e05b984da620000000010000006f0500003082056b30820353a0030201020211008210cfb0d240e3594463e0bb63828b00300d06092a864886f70d01010b0500304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f74205831301e170d3135303630343131303433385a170d3335303630343131303433385a304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f7420583130820222300d06092a864886f70d01010105000382020f003082020a0282020100ade82473f41437f39b9e2b57281c87bedcb7df38908c6e3ce657a078f775c2a2fef56a6ef6004f28dbde68866c4493b6b163fd14126bbf1fd2ea319b217ed1333cba48f5dd79dfb3b8ff12f1219a4bc18a8671694a66666c8f7e3c70bfad292206f3e4c0e680aee24b8fb7997e94039fd347977c99482353e838ae4f0a6f832ed149578c8074b6da2fd0388d7b0370211b75f2303cfa8faeddda63abeb164fc28e114b7ecf0be8ffb5772ef4b27b4ae04c12250c708d0329a0e15324ec13d9ee19bf10b34a8c3f89a36151deac870794f46371ec2ee26f5b9881e1895c34796c76ef3b906279e6dba49a2f26c5d010e10eded9108e16fbb7f7a8f7c7e50207988f360895e7e237960d36759efb0e72b11d9bbc03f94905d881dd05b42ad641e9ac0176950a0fd8dfd5bd121f352f28176cd298c1a80964776e4737baceac595e689d7f72d689c50641293e593edd26f524c911a75aa34c401f46a199b5a73a516e863b9e7d72a712057859ed3e5178150b038f8dd02f05b23e7b4a1c4b730512fcc6eae050137c439374b3ca74e78e1f0108d030d45b7136b407bac130305c48b7823b98a67d608aa2a32982ccbabd83041ba2830341a1d605f11bc2b6f0a87c863b46a8482a88dc769a76bf1f6aa53d198feb38f364dec82b0d0a28fff7dbe21542d422d0275de179fe18e77088ad4ee6d98b3ac6dd27516effbc64f533434f0203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041479b459e67bb6e5e40173800888c81a58f6e99b6e300d06092a864886f70d01010b05000382020100551f58a9bcb2a850d00cb1d81a6920272908ac61755c8a6ef882e5692fd5f6564bb9b8731059d321977ee74c71fbb2d260ad39a80bea17215685f1500e59ebcee059e9bac915ef869d8f8480f6e4e99190dc179b621b45f06695d27c6fc2ea3bef1fcfcbd6ae27f1a9b0c8aefd7d7e9afa2204ebffd97fea912b22b1170e8ff28a345b58d8fc01c954b9b826cc8a8833894c2d843c82dfee965705ba2cbbf7c4b7c74e3b82be31c822737392d1c280a43939103323824c3c9f86b255981dbe29868c229b9ee26b3b573a82704ddc09c789cb0a074d6ce85d8ec9efceabc7bbb52b4e45d64ad026cce572ca086aa595e315a1f7a4edc92c5fa5fbffac28022ebed77bbbe3717b9016d3075e46537c3707428cd3c4969cd599b52ae0951a8048ae4c3907cecc47a452952bbab8fbadd233537de51d4d6dd5a1b1c7426fe64027355ca328b7078de78d3390e7239ffb509c796c46d5b415b3966e7e9b0c963ab8522d3fd65be1fb08c284fe24a8a389daac6ae1182ab1a843615bd31fdc3b8d76f22de88d75df17336c3d53fb7bcb415fffdca2d06138e196b8ac5d8b37d775d533c09911ae9d41c1727584be0241425f67244894d19b27be073fb9b84f817451e17ab7ed9d23e2bee0d52804133c31039edd7a6c8fc60718c67fde478e3f289e0406cfa5543477bdec899be91743df5bdb5ffe8e1e57a2cd409d7e6222dade1827 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 Salwyrr Launcher.exe -
NTFS ADS 1 IoCs
description ioc Process File opened for modification C:\Users\Admin\Downloads\setup.exe:Zone.Identifier chrome.exe -
Suspicious behavior: EnumeratesProcesses 18 IoCs
pid Process 1680 chrome.exe 1680 chrome.exe 2036 setup.exe 2036 setup.exe 1896 tasklist.exe 1896 tasklist.exe 4532 chrome.exe 4532 chrome.exe 4532 chrome.exe 4532 chrome.exe 4560 Salwyrr Launcher.exe 4560 Salwyrr Launcher.exe 2636 Salwyrr Launcher.exe 2636 Salwyrr Launcher.exe 5216 Salwyrr Launcher.exe 5216 Salwyrr Launcher.exe 4464 setup.exe 4464 setup.exe -
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs
pid Process 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe Token: SeShutdownPrivilege 1680 chrome.exe Token: SeCreatePagefilePrivilege 1680 chrome.exe -
Suspicious use of FindShellTrayWindow 64 IoCs
pid Process 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe -
Suspicious use of SendNotifyMessage 12 IoCs
pid Process 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe 1680 chrome.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2484 javaw.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1680 wrote to memory of 72 1680 chrome.exe 93 PID 1680 wrote to memory of 72 1680 chrome.exe 93 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 2412 1680 chrome.exe 94 PID 1680 wrote to memory of 3244 1680 chrome.exe 95 PID 1680 wrote to memory of 3244 1680 chrome.exe 95 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 PID 1680 wrote to memory of 4832 1680 chrome.exe 96 -
System policy modification 1 TTPs 4 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\ setup.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID setup.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{1FD49718-1D00-4B19-AF5F-070AF6D5D54C} = "1" setup.exe -
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\42.zip1⤵PID:4128
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xOTUuNDMiIHNoZWxsX3ZlcnNpb249IjEuMy4xOTUuNDMiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RjNCRTk2NzYtNEMyOS00MTZGLUI3MzQtMUNENDA2RDI5OUQ2fSIgdXNlcmlkPSJ7NzE2MTEyNTQtQjJGNC00QkMyLTlBMDAtNTBCQzJCRjBGQzM3fSIgaW5zdGFsbHNvdXJjZT0ibGltaXRlZCIgcmVxdWVzdGlkPSJ7MzI2QjcxMzYtNDQwRC00NkQzLUFFMzItRUI2MEY1MTU5Qjc0fSIgZGVkdXA9ImNyIiBkb21haW5qb2luZWQ9IjAiPjxodyBsb2dpY2FsX2NwdXM9IjIiIHBoeXNtZW1vcnk9IjQiIGRpc2tfdHlwZT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iMTAuMC4yMjAwMC40OTMiIHNwPSIiIGFyY2g9Ing2NCIgcHJvZHVjdF90eXBlPSI0OCIgaXNfd2lwPSIwIiBpc19pbl9sb2NrZG93bl9tb2RlPSIwIi8-PG9lbSBwcm9kdWN0X21hbnVmYWN0dXJlcj0iIiBwcm9kdWN0X25hbWU9IiIvPjxleHAgZXRhZz0iJnF1b3Q7RSt4YkF6Nlk2c1UxMjg5YlM2cWw0VlJMYmtqZkJVR1RNSnNqckhyNDRpST0mcXVvdDsiLz48YXBwIGFwcGlkPSJ7OEE2OUQzNDUtRDU2NC00NjNjLUFGRjEtQTY5RDlFNTMwRjk2fSIgdmVyc2lvbj0iMTIzLjAuNjMxMi4xMjMiIG5leHR2ZXJzaW9uPSIiIGxhbmc9ImVuIiBicmFuZD0iR0dMUyIgY2xpZW50PSIiIGluc3RhbGxhZ2U9IjIiIGluc3RhbGxkYXRldGltZT0iMTczODk1NDk2OSIgb29iZV9pbnN0YWxsX3RpbWU9IjEzMzgzNDI3NjY5NTc5MDAwMCI-PGV2ZW50IGV2ZW50dHlwZT0iMzEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjIxNzk4NjIiIHN5c3RlbV91cHRpbWVfdGlja3M9IjQ3ODk5ODc4NTEiLz48L2FwcD48L3JlcXVlc3Q-1⤵
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:3588
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:2004
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe"1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1680 -
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaa50ecc40,0x7ffaa50ecc4c,0x7ffaa50ecc582⤵PID:72
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1836,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=1832 /prefetch:22⤵PID:2412
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1944,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=1952 /prefetch:32⤵
- Downloads MZ/PE file
PID:3244
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2168,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=2224 /prefetch:82⤵PID:4832
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3076,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=3112 /prefetch:12⤵PID:4676
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3324,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=3332 /prefetch:12⤵PID:1896
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=3568,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=4456 /prefetch:12⤵PID:748
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=3552,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=4296 /prefetch:82⤵PID:2836
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4744,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=4588 /prefetch:82⤵PID:1804
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4288,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=3532 /prefetch:82⤵PID:1364
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4680,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=4800 /prefetch:82⤵PID:3812
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4660,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=4616 /prefetch:12⤵PID:4644
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4476,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=4272 /prefetch:12⤵PID:1692
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --field-trial-handle=5000,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=4464 /prefetch:12⤵PID:1152
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=3104,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=5220 /prefetch:12⤵PID:2016
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5404,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=4600 /prefetch:82⤵PID:3296
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5424,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=5440 /prefetch:82⤵PID:2312
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5204,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=5312 /prefetch:82⤵
- Subvert Trust Controls: Mark-of-the-Web Bypass
- NTFS ADS
PID:4136
-
-
C:\Users\Admin\Downloads\setup.exe"C:\Users\Admin\Downloads\setup.exe"2⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:2036 -
C:\Windows\SysWOW64\cmd.execmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Salwyrr Launcher.exe" | %SYSTEMROOT%\System32\find.exe "Salwyrr Launcher.exe"3⤵
- System Location Discovery: System Language Discovery
PID:2172 -
C:\Windows\SysWOW64\tasklist.exetasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Salwyrr Launcher.exe"4⤵
- Enumerates processes with tasklist
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
PID:1896
-
-
C:\Windows\SysWOW64\find.exeC:\Windows\System32\find.exe "Salwyrr Launcher.exe"4⤵
- System Location Discovery: System Language Discovery
PID:4452
-
-
-
-
C:\Program Files\Google\Chrome\Application\chrome.exe"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=5316,i,2401124009497080467,428403855557595932,262144 --variations-seed-version=20250207-050113.109000 --mojo-platform-channel-handle=5516 /prefetch:82⤵
- Suspicious behavior: EnumeratesProcesses
PID:4532
-
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵PID:2172
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc1⤵PID:4540
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies system certificate store
PID:1880 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"2⤵PID:3384
-
C:\Windows\System32\reg.exeC:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid3⤵PID:2472
-
-
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1576 --field-trial-handle=1692,i,9379647426483091461,16984779923525044130,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5032
-
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --mojo-platform-channel-handle=1716 --field-trial-handle=1692,i,9379647426483091461,16984779923525044130,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:82⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3144
-
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2360 --field-trial-handle=1692,i,9379647426483091461,16984779923525044130,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3560 -
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" "C:\Program Files\Salwyrr Launcher\resources\app.asar\app\assets\js\assetexec.js" JavaGuard 1.8.93⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:4560 -
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment" /reg:644⤵PID:4196
-
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Development Kit" /reg:644⤵PID:5132
-
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Development Kit" /reg:644⤵PID:3384
-
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment" /reg:644⤵PID:3780
-
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment\1.8" /v JavaHome /reg:644⤵PID:4340
-
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment\1.8.0_381" /v JavaHome /reg:644⤵PID:2744
-
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Development Kit\1.8" /v JavaHome /reg:644⤵PID:3820
-
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Development Kit\1.8.0_381" /v JavaHome /reg:644⤵PID:2212
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Java\jdk-1.8\bin\javaw.exe" -XshowSettings:properties"4⤵PID:4932
-
C:\Program Files\Java\jdk-1.8\bin\javaw.exe"C:\Program Files\Java\jdk-1.8\bin\javaw.exe" -XshowSettings:properties5⤵PID:5168
-
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Java\jre-1.8\bin\javaw.exe" -XshowSettings:properties"4⤵PID:5564
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -XshowSettings:properties5⤵PID:5740
-
-
-
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" "C:\Program Files\Salwyrr Launcher\resources\app.asar\app\assets\js\assetexec.js" AssetGuard C:\Users\Admin\AppData\Roaming\.Salwyrr\common "C:\Program Files\Java\jre-1.8\bin\javaw.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:2636
-
-
C:\Program Files\Java\jre-1.8\bin\javaw.exe"C:\Program Files\Java\jre-1.8\bin\javaw.exe" -Xms256M -jar "C:\Program Files\Salwyrr Launcher\resources\libraries\java\launcher.jar" --version 1.19.2 23⤵
- Suspicious use of SetWindowsHookEx
PID:2484
-
-
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=cs "--cs-app=Salwyrr Launcher"2⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4416
-
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --js-flags=--expose_gc --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2780 --field-trial-handle=1692,i,9379647426483091461,16984779923525044130,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5504
-
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --js-flags=--expose_gc --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2936 --field-trial-handle=1692,i,9379647426483091461,16984779923525044130,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5516
-
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4352 --field-trial-handle=1692,i,9379647426483091461,16984779923525044130,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:5136
-
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=768 --field-trial-handle=1692,i,9379647426483091461,16984779923525044130,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:5216
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\MicrosoftEdge_X64_132.0.2957.140.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\MicrosoftEdge_X64_132.0.2957.140.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable1⤵PID:1208
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\MicrosoftEdge_X64_132.0.2957.140.exe" --msedge --verbose-logging --do-not-launch-msedge --system-level --channel=stable2⤵
- Boot or Logon Autostart Execution: Active Setup
- Executes dropped EXE
- Installs/modifies Browser Helper Object
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- System policy modification
PID:5048 -
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=132.0.2957.140 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff79446a818,0x7ff79446a824,0x7ff79446a8303⤵
- Executes dropped EXE
- Drops file in Windows directory
PID:4440
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe" --msedge --channel=stable --system-level --verbose-logging --create-shortcuts=2 --install-level=13⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
PID:880 -
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=132.0.2957.140 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff79446a818,0x7ff79446a824,0x7ff79446a8304⤵
- Executes dropped EXE
- Drops file in Windows directory
PID:6064
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe" --msedge --channel=stable --register-package-identity --verbose-logging --system-level3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
PID:4464 -
C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=132.0.2957.140 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff68cdaa818,0x7ff68cdaa824,0x7ff68cdaa8304⤵
- Executes dropped EXE
- Drops file in Windows directory
PID:2204
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe" --msedge --channel=stable --remove-deprecated-packages --verbose-logging --system-level3⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Drops file in Windows directory
PID:4076 -
C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=132.0.2957.140 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff68cdaa818,0x7ff68cdaa824,0x7ff68cdaa8304⤵
- Executes dropped EXE
- Drops file in Windows directory
PID:4408
-
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe" --msedge --channel=stable --update-game-assist-package --verbose-logging --system-level3⤵
- Executes dropped EXE
- Drops file in Windows directory
PID:1552 -
C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe"C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\132.0.2957.140\Installer\setup.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=132.0.2957.140 --initial-client-data=0x23c,0x240,0x244,0x218,0x248,0x7ff68cdaa818,0x7ff68cdaa824,0x7ff68cdaa8304⤵
- Executes dropped EXE
- Drops file in Windows directory
PID:6056
-
-
-
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4xOTUuNDMiIHNoZWxsX3ZlcnNpb249IjEuMy4xOTUuNDMiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7RjNCRTk2NzYtNEMyOS00MTZGLUI3MzQtMUNENDA2RDI5OUQ2fSIgdXNlcmlkPSJ7NzE2MTEyNTQtQjJGNC00QkMyLTlBMDAtNTBCQzJCRjBGQzM3fSIgaW5zdGFsbHNvdXJjZT0ic2NoZWR1bGVyIiByZXF1ZXN0aWQ9InszMkU3RUM4OS1ENTc3LTREODMtQTZFNS1CNkRBMjVEQkI4MzN9IiBkZWR1cD0iY3IiIGRvbWFpbmpvaW5lZD0iMCI-PGh3IGxvZ2ljYWxfY3B1cz0iMiIgcGh5c21lbW9yeT0iNCIgZGlza190eXBlPSIyIiBzc2U9IjEiIHNzZTI9IjEiIHNzZTM9IjEiIHNzc2UzPSIxIiBzc2U0MT0iMSIgc3NlNDI9IjEiIGF2eD0iMSIvPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSIxMC4wLjIyMDAwLjQ5MyIgc3A9IiIgYXJjaD0ieDY0IiBwcm9kdWN0X3R5cGU9IjQ4IiBpc193aXA9IjAiIGlzX2luX2xvY2tkb3duX21vZGU9IjAiLz48b2VtIHByb2R1Y3RfbWFudWZhY3R1cmVyPSIiIHByb2R1Y3RfbmFtZT0iIi8-PGV4cCBldGFnPSImcXVvdDtWUFFvUDFGK2ZxMTV3UnpoMWtQTDRQTXBXaDhPUk1CNWl6dnJPQy9jaGpRPSZxdW90OyIvPjxhcHAgYXBwaWQ9IntGM0M0RkUwMC1FRkQ1LTQwM0ItOTU2OS0zOThBMjBGMUJBNEF9IiB2ZXJzaW9uPSIxLjMuMTk1LjQzIiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iMiIgY29ob3J0PSJycmZAMC42MCI-PHVwZGF0ZWNoZWNrLz48cGluZyByPSIyIiByZD0iNjYxMiIgcGluZ19mcmVzaG5lc3M9Ins2QjE1ODNCMy00MzA1LTRDNDYtQTg5NC0yMTMzNTBDM0VGRTB9Ii8-PC9hcHA-PGFwcCBhcHBpZD0iezU2RUIxOEY4LUIwMDgtNENCRC1CNkQyLThDOTdGRTdFOTA2Mn0iIHZlcnNpb249IjkwLjAuODE4LjY2IiBuZXh0dmVyc2lvbj0iMTMyLjAuMjk1Ny4xNDAiIGxhbmc9IiIgYnJhbmQ9IklOQlgiIGNsaWVudD0iIiBleHBlcmltZW50cz0iY29uc2VudD1mYWxzZSIgaW5zdGFsbGFnZT0iMiIgaXNfcGlubmVkX3N5c3RlbT0idHJ1ZSIgbGFzdF9sYXVuY2hfY291bnQ9IjEiIGxhc3RfbGF1bmNoX3RpbWU9IjEzMzgzNDMxMzgyMjI3MTI5MCI-PHVwZGF0ZWNoZWNrLz48ZXZlbnQgZXZlbnR0eXBlPSIxMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgc3lzdGVtX3VwdGltZV90aWNrcz0iNDkwNTYxOTc3MyIgZG9uZV9iZWZvcmVfb29iZV9jb21wbGV0ZT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEzIiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIiBzeXN0ZW1fdXB0aW1lX3RpY2tzPSI0OTA1NjE5NzczIiBkb25lX2JlZm9yZV9vb2JlX2NvbXBsZXRlPSIwIi8-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-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-PC9hcHA-PGFwcCBhcHBpZD0ie0YzMDE3MjI2LUZFMkEtNDI5NS04QkRGLTAwQzNBOUE3RTRDNX0iIHZlcnNpb249IjEzMi4wLjI5NTcuMTQwIiBuZXh0dmVyc2lvbj0iIiBsYW5nPSIiIGJyYW5kPSJJTkJYIiBjbGllbnQ9IiIgaW5zdGFsbGFnZT0iMiIgY29ob3J0PSJycmZAMC42OCIgdXBkYXRlX2NvdW50PSIxIj48dXBkYXRlY2hlY2svPjxwaW5nIHI9IjIiIHJkPSI2NjEyIiBwaW5nX2ZyZXNobmVzcz0iezJFN0REMzBDLTUyQ0MtNDdFOS05QThGLTEyRjBGREJGNzRFRH0iLz48L2FwcD48L3JlcXVlc3Q-1⤵
- System Location Discovery: System Language Discovery
- System Network Configuration Discovery: Internet Connection Discovery
PID:5560
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Active Setup
1Browser Extensions
1Event Triggered Execution
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Active Setup
1Event Triggered Execution
1Component Object Model Hijacking
1Defense Evasion
Modify Registry
5Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\Install\{32BDA405-BA72-4A7B-A423-1C59A0B58F25}\EDGEMITMP_62341.tmp\setup.exe
Filesize6.6MB
MD5b4c8ad75087b8634d4f04dc6f92da9aa
SHA17efaa2472521c79d58c4ef18a258cc573704fb5d
SHA256522a25568bb503cf8b44807661f31f0921dee91d37691bf399868733205690bf
SHA5125094505b33a848badcffd6b3b93aad9ad73f391e201dee052376c4f8573ba351f0b8c102131216088ffb38d0ed7b5fe70ba95c3ac2c33a50c993584fe7c435e3
-
Filesize
126KB
MD5d31f3439e2a3f7bee4ddd26f46a2b83f
SHA1c5a26f86eb119ae364c5bf707bebed7e871fc214
SHA2569f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
SHA512aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5
-
Filesize
1KB
MD555540a230bdab55187a841cfe1aa1545
SHA1363e4734f757bdeb89868efe94907774a327695e
SHA256d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
SHA512c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
-
Filesize
1KB
MD5c6150925cfea5941ddc7ff2a0a506692
SHA19e99a48a9960b14926bb7f3b02e22da2b0ab7280
SHA25628689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996
SHA512b3bd41385d72148e03f453e76a45fcd2111a22eff3c7f1e78e41f6744735444e058144ed68af88654ee62b0f117949f35739daad6ad765b8cde1cff92ed2d00c
-
Filesize
64KB
MD5b5ad5caaaee00cb8cf445427975ae66c
SHA1dcde6527290a326e048f9c3a85280d3fa71e1e22
SHA256b6409b9d55ce242ff022f7a2d86ae8eff873daabf3a0506031712b8baa6197b8
SHA51292f7fbbcbbea769b1af6dd7e75577be3eb8bb4a4a6f8a9288d6da4014e1ea309ee649a7b089be09ba27866e175ab6f6a912413256d7e13eaf60f6f30e492ce7f
-
Filesize
4B
MD5f49655f856acb8884cc0ace29216f511
SHA1cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA2567852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
SHA512599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
-
Filesize
1008B
MD5d222b77a61527f2c177b0869e7babc24
SHA13f23acb984307a4aeba41ebbb70439c97ad1f268
SHA25680dc3ffa698e4ff2e916f97983b5eae79470203e91cb684c5ccd4ff1a465d747
SHA512d17d836ea77aeaff4cd01f9c7523345167a4a6bc62528aac74acde12679f48079d75d159e9cea2e614da50e83c2dcd92c374c899ea6c4fe8e5513d9bf06c01ff
-
Filesize
144B
MD5a596d1706833d30d30df2b9d2bd3ab09
SHA164d1a90a779b928c47e83b22af3194ed8d8490d0
SHA256b5920dd47edf7345cdc96be92b1d5c280f90f7262c4d325cc8cbcdd758c49d83
SHA512dbbac2f17a7eaab4407182c78bd49f8c5bb8c0ee7055d63195f02d5a03260824166e69eb1ffbbea15dd7e4b0056cb8f78945dea046e135c7e2cf12c3825a1eda
-
Filesize
2KB
MD52c91daa48278538fa510a3fa12543e57
SHA167682876d51577b8b4cafa0304e02914a711ba31
SHA256d7c24fda480a6d7e886aca7c4f15dfc5511326d4d97790dd9678b926113c79d1
SHA512b67bc4213839ac0c5e53e8be0fd3734e647057bde393413e3fb1bea04f0730f441a030ed03a88a88204bb3cf42f7d09e32bd3978bd37b49422d4d8d1fa931813
-
Filesize
3KB
MD5e43ee30171b920570326ea7d8a20f7fc
SHA1abb22a40112464479196e8dfc78fa5c8ad57bbbc
SHA25674fadf345755b9d021d84204d11993027696c1fc6678401e1283014b130c9be8
SHA51230e0efb0858a2d175e86660666df114de9664249a9a63c2afa43be16f61bf9f640047ba682d74a738cecb29d933c5cd509bd9b8379f5f4536225240b95e0b152
-
Filesize
3KB
MD5bf2b78f004d3f37dfc8e1ef98082b964
SHA1be4ddd219d9fa0f14faa3a17b4044f98b7603e56
SHA256b271dfaea128fdb6fd22dd6f344ffc78bc52ff03d63fc75048c54de7a457094f
SHA512d8435bba5c6e57dc7b60cdc2d9efb874ce6700b2b8414c9be334c911e4c79fc04ef2a7b179bb1ce9af53c6c12d7aeb62511adf18717d4d421cf3057606b2c1a0
-
Filesize
2KB
MD56237795209149730e5b824f9e2957885
SHA1bd60d11104796ffd8b09f80472cb0325947fbdba
SHA25679e9f05609497a6955aa12f238030656f80a7d730cc4de43bac3e60bbf622890
SHA512d83b768ea3965378b01712ef3614dd40f6de802ce1f23e0ac83d73c5e952b0a3268ba5a6787a330dd59ef7ac60d0edf3933bccfb405f3df1917ef17911f62712
-
Filesize
2B
MD5d751713988987e9331980363e24189ce
SHA197d170e1550eee4afc0af065b78cda302a97674c
SHA2564f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
-
Filesize
354B
MD53d585a5a91b5162676ba41bd5b70ea08
SHA14d1e33aa6a3f6ff6a6aabef3d090fb7560cd8f0e
SHA256ba5cafa52dd2beeecc672859350c80585122fd2236a7930cb6cda4057e632eab
SHA5124e36e09bcc35cfbcba89c81131c3e7d49af9b78a1baaa583316ab94070e77a07301dd36c28d5320377dd28e0136f4285cf06f661634ed4d83ac7774195d6f674
-
Filesize
684B
MD584a9df80eac8361467a8ff23cb5245a5
SHA1053ef62a96bb678bd7029c0a2848f60a4e2dd694
SHA2568ca795e55b5bcd90e99765085c54582452be707117af4b68514e0e7996ad9fc7
SHA5126420c0995ded0cfc63c50cfbfd65d9839ba216efe5a78bf0530d7bb6c92a766513848216cd398e29de7a57177526c280e4c57b3202078c62002d02cce42db6c5
-
Filesize
684B
MD5070421c283fe5ec0c234687ce0164197
SHA198876d5d11e3a52eefa3b4f1e2557ea08bd806fc
SHA2560d59e2cc11de35fc7ad0c7307a8d5e5c6cd9444e30e08d8f1366e6cc75ff39a8
SHA512b3c1adecf318a17dca7221bd5655024e6fa2cb8f739a3c4acf253c21cc05ff701adc8387874e6fbd4bc3e19cb8e2d973647e9e9d0444734f8680c43c6bb44fdc
-
Filesize
9KB
MD594852616437bc1a64e4625bcdf5f2599
SHA1e6cf9e988c4962c3897ab273a6be41fb5ae49089
SHA25615cfe1fde7b43c515e22eff57f4d07f896c304b478b39ab045c1ede21de4f118
SHA51279b33ae2b7fd7c9525e268447f11ec0bde6e0a46245956aa9d054a942e883298f51c19a50965670a94f3938331c928320c41a6152985ba97da3aacdfbc538580
-
Filesize
9KB
MD5d1229992979bd904cf34b0c7300a82f9
SHA16c484458dbc28e4ac99f9d75169fb9e45d1113e3
SHA2566335f3fbd71d0b9c7aa477fdacd3805349db720d2bea2adb199a76c7b7ca8406
SHA512dc68add3f2fbef94e8fcd1325346e0f4477fa562528155b6b5fac92a6ed6d9adfaaee329b5784041d23562f066d6c3c600154554be69883553eb862982e4a9f7
-
Filesize
9KB
MD50e538104e33eba32219931061e6105ba
SHA1c0e3cce2938067381bb0b9f95cb8f3437c12145e
SHA2563e915f25ac30b87d973ad73d10a071c8b9647af55f4ffb7c4eb644e193e284b7
SHA5121b0e014edf8c911d825c6752833b4a69f7a0de40122e2de8fd6999f74b238035e6874d89e4d17b53aac2d4e86b63918a5959c6d2cf18c9b99a4f08ba47e4493c
-
Filesize
9KB
MD51b9358cc7d52066a3a43ec743fbba355
SHA1e8b9600a467275d43bbaf26d425f5a359f68073d
SHA256334292b740170165f90531d12e845d8944262bc0fb5cf8fe63edae44723c0f1d
SHA512f0eb0cf6c5e97256a989cb41f6edf637fa78a51972e6c653469eeeeebe0a7cb87d7c4615ea7e3dd7e9dd96f5222568a10368621d700d6c31a9720d67686b7dd0
-
Filesize
9KB
MD540360773709c95738f0cc79f901e41eb
SHA1b1e00240e4accf0160e1a4aecaf0b5bb727cb406
SHA256504bc8c50d5f992003c3c63958620bfdfacf3a0f86caa8042ec1946db8ca944e
SHA512428a840620966528682f3af366a66d646655d821e341bb8e6b0a026258a491bfae30414badbdff47938be242053ab1dbaf6b658774bda44cf8a578c99c1777c9
-
Filesize
9KB
MD56a57b1158404662fa72c2d684971322b
SHA1ba5fa057b32a326e9ac7f56af1e8044d17289da8
SHA256c8827d5afc99c825b003de79b07c28d1e2fbe80dce4c0e81beedfcd4240f7a86
SHA5128941569ae8e3969673d839110378e432ac451b58201a3a005b7b0f3c7eb2d8bef3dde81ff2cb14e5aa8dfff78d0867d421bc4f99cf960740d0374ff1477835f4
-
Filesize
9KB
MD59fbfea323b53c06b49933cf944f1e973
SHA19139189366e82257914c8f64cb42f3340d17134a
SHA2569e2abd2532d6d72b9e9994b928e492e48caf5dcb4e2c417799dc539dcfaff386
SHA51216247085904a86f4442a614f2083a1a22033da93d7657cbc2bfc9578073b4537f836d555497aebd55bd7f1bcf830e51f788291766bca630440a372bb72fdde13
-
Filesize
9KB
MD55a13673348a40c3776935627b37cfb1c
SHA1b757a288868c4e254f632c542c8017d946057b1b
SHA2565e8ab80a8588a263ab7b3c4e8f1ec9c8c317287c2f7b0eb1875770f989e5e1e1
SHA512aad089b2701b5fb7bb17e46e2793a516de3328d769b4cb900f9878b4a84c0307cefa424b414cc31b424b654bc2782c4c8e49136dcc7033fac207b9b740b46696
-
Filesize
9KB
MD55894c8ef55b498e453c38acc8f81f714
SHA146262fe1be755cec2a4d2fa20df2e3ac13806816
SHA25649ebbe44c1c231ed6957e1eb86ca3966ec6a2297eaa9369742006f749cc623aa
SHA512f90110c544d63f0468c922e290d5a25fba52608116f138215af0a4900f4548d31cec1bca25b4a2df0d9a3c969f5a26913774ae497ca738841a1ea7d759aba641
-
Filesize
9KB
MD5a05e76c013376e3b1d023ba40bd5be35
SHA19dfafcd8781bb6b72e56641b5ba6afe76b57fde2
SHA256d434cb29954546acb105586b1af66e36e7a7c17dc12cc2126884b199eb673746
SHA51269b8c3624492911014b027432e6b51dc1cea3a1882f762ebddfd38b16896e96ee91bdddd3a280b2e3ae09032a82ffbfdb8952f839306bf94caaf246cd42c220e
-
Filesize
9KB
MD5bf68d7a0028c9563f1d91414c74e8b5f
SHA16214d422dc170c403032214ebd4f316f3b84ff8f
SHA256b777b15178ce19be63e24cc0c15f84c271e808bb1cbd56d3cd25c566d423e2b7
SHA51260b863d53b956bdd3f928fdbe45fbe5b30f1ccce6cabdff9c65da238cdc9ccbf5b6b3c175bfb65ac87312d711b9cb2a8a9dc503de7acbe21dc6ab4ab3df28f22
-
Filesize
8KB
MD5dece79987860f158aecac64269f1d2c5
SHA11781377e96e60d2cabbf8b9c74523ff399e8b86e
SHA256e62405dc0b2c8b0fc8c1c18315fa868a2f1a9ff77210a512ce06207403dedec5
SHA5120e52143868dffec21d5073b6e4b0bd1748eb4fdef615544400f21eccf4b7a016a1e73f3ec48b26efa6fc2be897daec575f1f617637cbe7ee42b3edddabfd3c9e
-
Filesize
8KB
MD541fe0b92b49127710c4887c0e349a2cc
SHA1b60594b21bbd83499d5fec1905619f2aaa23c21f
SHA2565d1a26abc97da8962250d9ddc73138a996de05ec8e2429e5c42dd69f0b042e1d
SHA5120f524b6bb76c7ed545d3ea322f83f498b727bfde93d298b346b3112dc10b8b97db26ca8e4ce1825a7e6c4ce28cbbcdbbc69df372333871bcc7e01b34f4bb3f36
-
Filesize
9KB
MD52c44491419d4f1a9b9ae33092727bf29
SHA10aebbe21be62c717947ed60d4e65831a3ed90ca2
SHA256981fe46ad9c2ed8a4264fbe44543436fe73ec43256378fce749db3b1e8b26a9c
SHA5123ee35842232d30d585afaf32d6c9be573ea4cccac63b7eb4310867fd8ed77bfe2ff82761e8f86eef741b55bf3f228c0592f0d2d07e403f85899631e804acc7db
-
Filesize
9KB
MD578af1fffcebe898b506a4092da2c19e9
SHA15ddc58893b20a3eb50990536f8d206a87f0b9f1f
SHA2560a173e03167c0fdbcad2fef1f95365ca38f7a83ec92654ee0cded87f134f80d5
SHA51281aeb77e3632b794cb1685c57c3a03a100f120363a07a801052e33e6bf5192a1a2f8eae0e24089bde134d30f4e6a3617cc2d596638a4e174157807ea0fc8fcec
-
Filesize
9KB
MD5ff5d66a47cc0e8b90d9c78aabbcd831c
SHA17257e8929b6e1b65606c887dfd9e94f0aa01601d
SHA25695522e376aa430707c8ff81c4be5854748b48b2e35f89286a716ee3f484e4deb
SHA5122f6b4e7f214726832caf2b9a484b8b250f6701486bcea7363d660602853b95151a317cf7e874cf6446d790ec478666998b36ef07c1df764ee1da607bb86c2782
-
Filesize
9KB
MD58354da1a2995d72541a7c3c1e716cfcf
SHA17b5e4891bdabecbfa8ffe82cc085351b03794ef8
SHA256fb3d948a4a7b4947806a4e73bca64f72dc8d916457d0b63cb4a8d5a532a11525
SHA512f892703d054234c2c43e14c93b5ba7e18ecfa29f63206aa5f99941f3b2438c80202741aa5d93b5958ea94e969a2fbe263356519aaeef724fcc434bf18961db58
-
Filesize
9KB
MD5989bc5ea1b1175d47dd9e33d04842d84
SHA1107d47d70073b95da1ea48b0aaf49dc29173c84f
SHA2568a76ac6a26251ceeec51427d81f5b29ce07d1d2b217aa4bc2d20b38186d6812c
SHA51257048da5e19946dd1690c5a2f8e8799e29ddae1be9ea3ce4311e33821b8eada489a691e76c56ab546da81dd92c0ebcadd16c927eb60d7291357d20802036bf3c
-
Filesize
9KB
MD53595cd3c2a26322a67d584624c823601
SHA1da4af50ad191a25f13a4543d85123de9a169372f
SHA25668e74e354248319294182363d193fab5b4b0b6da643d10c9c2a60df04cd25f12
SHA5128bc2fc1a9623910e02499b491670f5c8574a5bbc0b83503251cb3bd65eb3d8d6ecf3a5f0590f6ac76c7ed05ff5eec08dd09f5d064f60d7fe3415bba0e2cc4477
-
Filesize
9KB
MD579e8861d6c41d8d31e141a6f577de89a
SHA17bd43ed8bd575f2754c955eee97ab8d730c01263
SHA256d81f7de9aac0727e904be929d5089f751f250925c134b71d8f22bf00f93b9adf
SHA5122ee5ea6008e60628352125340340666428bf9c8dd9bb6c33fbe8ca97f7edf295936060874ed0ef1603ce385b5ed91d5d63f9e483104de47e428c05f72974bed8
-
Filesize
9KB
MD54c18f8f53069e71074b8a8e65305c14b
SHA15a83df6abd473927a06a0d4957402171bb4b4b3d
SHA2569897081d1c0d04c0cf9a6235a876e03c9b5ee27c36c3addfc6c1b3ec4fe057f5
SHA512834217c531b03bd37c8199393dec57082be80deb04f234d2dbd449b346e0b9a937ff860aa97c8b30d0a5977f64730d063ac0f94d2d5e9c9c7161be884ffcc4c6
-
Filesize
9KB
MD55452d569db6a249ee91a311acf4a02d8
SHA1d14813a48e4a56c2b397a6356ee8fcadf2cdf1ef
SHA256c1303eef6b610523eb068a71a46e704f1901612fdc557b3bdd8c4787fcc7b113
SHA512e390075b69a1f393609a2350137d6dd416819ed8c8e2b649a29e6657a6f40dc4e3cedadbb1b370282fe05cbd0761baa4ef0e9bbc014aa4901d2529536f09bca1
-
Filesize
9KB
MD5a32777c7b01219b9fbd2693cebc47f72
SHA16639aabede4451597fa70d170161626211bd8016
SHA256d909a00c6327146584551b32aca5d185c8a7fc994aca68dce9a8f22c025931d7
SHA512a1c1532370422636f4960a822df0814ebc32741cede88d30f66bc170426c581a1e0011bf987457c31b55a45c94395d2af4594395cfeb38e278aabbc3609a2115
-
Filesize
9KB
MD5eec1fdc0934d7b6617950e348dfefbe3
SHA19549a914317d87faae06945f225858355d480cf0
SHA256b9c433b8f0dc47032b1b1b4ace4517c5f8813d50b39f10b48f3ceb6ed63fdc74
SHA512a870fcbb6b7f5dab644aff5308026710e32cb035d9ddf410babc411eeef0fb3e1e46a19a4eccc24dd20ac702be3c312051adbaa4666a3707cb476d86dc126b85
-
Filesize
9KB
MD5f99cccd4d172f3518e76227e17088723
SHA19559eaac76df9d0036e66863c00937931b8c3a4d
SHA256201b07dac3ede4fa661c125fe426a70bd7ce8ccd5e169df5b3f3d8c186d64575
SHA51298c092b579ded2eb88fd6b7f10e6814d82f82d60dab7a2e7f7fd255e5eb0b8946914e87c1cb3ef37b9d00f9cfe83654cd22f868e1315715755462e10606840a3
-
Filesize
9KB
MD534dd74140b4c7d914d8880c6f658ae25
SHA144500e6443da752571d318d1137985494dbb0e67
SHA256a1371fda9e18ddb5310853346da40ffb7d6b81977057e1b1e88702428f22e108
SHA51254bc6f69b32d41528d32e8a9f8ff2f12b45f5791a46f34e91675f09569ac9fc29e213420d284434feade3c86dac4b650ea4f2653b34699629aced57532f74830
-
Filesize
9KB
MD540b3bb87f5f8c8ce5fa1835c393d1959
SHA1e2c3d287ab948e24c86d7e95544600dfa3c5b3c8
SHA2565475eb1ccc5508c3a986f496dfc0a6c166a99045ce23951f168e5b8ed1621b82
SHA512052bb6a2d9dafa0170b3c645c1601915792292c57b7d9ccf6d9638463be169104bb53c2f96332a121308a1833cfc3f603eb8cd3961afbc15d375daebea14d90e
-
Filesize
9KB
MD569cd148318810606185f893233cead2a
SHA1f96204e90f40afd28ff94aca7d404a473781bfba
SHA256021314540c1f30b104d08e418d3bcbb0a53408ad5f1b1fc9ae80f98f9f203e2a
SHA512e3af5d117844cdf6c540f6a06ea20b5beeecb56114f58ed59b0246a375a95690fc673de81b6b6bd4c234c5b6b2cfcf99b44fddfbb2200d1434164d76785298fd
-
Filesize
9KB
MD524cd4473d2e424122217f8307288cd68
SHA1042420505b85781418d971d8602c28f70d41b6fe
SHA25629ab69f4e560f4801492ac8922a32b535b3b1f33779220226948148a90691112
SHA51281ef7d85289f8f1e2caa00727178480804e729a6fc77a62cd0a352937a520db730a49caf7667b4311615b41e3afc0e729f682158f001861f908e065ae8b7c4f8
-
Filesize
9KB
MD5d1b863f9b4efb182c808fd3b18566a06
SHA1ff31d840250e124d5d349404c19b3711cc9dee04
SHA256089a459ccee6f0d02a7690fb1fcf88b77496dbc8a8bd9fd7affce52e4bca8d0f
SHA5124094572f7536ca2788c797adf472f7dfbd61c08d530dfa8dd6c361f241d8209e41761f4147b0ff06af89b6e69c8f70283e0e0f45508ad315739bb1bdb93ef2d3
-
Filesize
9KB
MD577d96c61594d5a8c59084c1fbeeae58c
SHA13459a28db99403716e5f44246d9b52cc9ef075d4
SHA256516db2408fb96d1042bfc9f1dff918588f86c38ffed241fc25b18e9cb79a54be
SHA5122fbbb52d4f49b80307891789497013f455f18afb9174b5b5ceeaa3aa87d5340c46f12cfe5e5adf5e65aabb45c15742e5bdff3c9b9da0e40ac96f9611ce8ee67a
-
Filesize
9KB
MD5a76a4859f31cb463350534db4d9c346f
SHA1c482ba47948f504950bdab801aded0673b16cc18
SHA256adedc3a6e1669b35ee229c3ec459202a4fcb286d6d305f581bb3ae2702c002eb
SHA512dd8bcde334de218de0e7ba1594c347a6564d178f7475ecc20a6a9c5a97eeeebf78f99fe58b4f709a0f325f52af3b91d3442cf9d30521e2a644d2fe1139f63f65
-
Filesize
9KB
MD5b287350bd98a42d99cd6fb1957b490e5
SHA1fdf739a2e7a0bf5eef28ba18939aabba819100f4
SHA256e32d628894a70ec2e0a5c4adccfa9ae80291842a150dec50e36d768edfd0d796
SHA512e04f4ccbbfc45d72c8af541709f3ddf6310062f74089a84626dc288cba9a278cd0da31947c45f937cb976d493172d10e9c2aa26f7b9739ac2c5d4c07b11d3d09
-
Filesize
9KB
MD57a0d486e916e933c2e4a23f941642aca
SHA130ee5328386d9a5f1ed3f6f22f82e4adf6e62d5d
SHA256d6e258fd575bb672d7553a6a5db1c972e40a05aa31357a0500e874d27dcb2c8e
SHA51284deeeac5993d9a0134b9a9c9db9a766d63cc7d3e173fd92666c2f90df7ab6304308193f7ccd460d3c6142ecb6f7e24e49d3320648018596e5a4475bdbc5e331
-
Filesize
9KB
MD5866ec2af4ec5fc4fd92e610e120e4d98
SHA1411ca70eba29dc9133660c867ba5fa7e03289f22
SHA256689daf39cd8a844888e7a36f987fd2ee230bd2123df11ffe14ed4d8993760a80
SHA512fb0bf86d79229cbd2a4489d4ffbfd7658abefc8d1f2ab3953f0d2d8270b4b445e346082f55782cdcec9931c49ae6a96cff5624d7bb9739fee13d409e80411422
-
Filesize
9KB
MD523ac6254ae03b7fc535d45996dddae31
SHA1e292c87f827a007edf812d39d3d3672688c067a7
SHA256e1a3a199abd610bd0fd36fc15326db19b284a03fccf6046e965c40ee56f919a9
SHA5127d379b68016bac46a5a35d85603538ce42834d4c6250533982045ae1d115ff1e300a534afff7e4da0366d2a128d15a80ebfe76ef51f84a06c7abdfc5ef0ebe1e
-
Filesize
9KB
MD53b1f111c48172feb12a51a01dfeb6630
SHA1486341bc1655e112c8732acad49b40779931446a
SHA256e892e2fd5f9d542a6236c62a289e9d4db060d4824a69be2a6798789339fd1b16
SHA512660f245b6ca3e0990f333608840d265461deada69926a70edec076e8586f43ea488750ff81ce73af06bfeb233a213a6ebd875517b749a0e248a063089f7e4f4d
-
Filesize
9KB
MD55f5d8bb3f158382bee99567aaa795688
SHA1146ca47b2d88a3c93ec3a50cafe500b56bb107e9
SHA2562577cd1f5e43fd9c3bbfaae197be69ed6d51e6cab30d01b07400ff4c5ebd2eb7
SHA512a30171dee8663cafbd40591c886e6bbf5c07c93b206c53a583994137a9daf7484fc1c7883950bb307a2a9b63c67426587a715e3b8ee74cbeda0c850d333c4c86
-
Filesize
9KB
MD5046b0f08a095a833a0a85e9810bb5ae6
SHA1cd8f203acca116fc602b5223bea2e0183910e100
SHA2564f4adbd462b928359060632c2c68798988823087a7932a6f9b1bbf98bb328d89
SHA5126f4a049954408b7234f8732429be4298d5c27a97913a00982dbedde7c2719fa119677e278439444cc98751fa3d73c5ae9ebce7fa9c6bfd3f858a9385114d71da
-
Filesize
9KB
MD5c357a96b94627086472a2ff154ca6b33
SHA1d8d8ee32dc2d3ae0b4a7776ae3e0d8ffa7672ede
SHA256b340a47fe6f5ca6c240919198c96a5fe52943c94f7c1f8b97c553f53c368932c
SHA512f539bf9d734d3959bee4b5365bf2d3d22bb100af6c7ad3dfd52fa4b59ccd4c223eba765e28d75f4c9032856be863ad559026cd8a66bc00440ee3b58aab9ee213
-
Filesize
9KB
MD521a8ac7161df4c451e21dc96bb5faf54
SHA1d1af6afb0f2bab6d6c07af7a0d426e88c0d9639d
SHA256e305566dfdcc1826ec77b8f2d5be293f10e08e23ca90e2ec0c0ddecee98faa13
SHA5121d3af579c0f0574fa142c0efc3b3b8108c9e6f2d4c83181942f49cdb9ddcacce0375148a80ba920c2342346ce48bd0bcf21ff27fed6c4dbab0672d28a9afda0f
-
Filesize
9KB
MD58b052f9fa142aceb26e48dbb931e60bd
SHA1117adb30be839c76d10b1cc23c7fa877f0cb860c
SHA25638815168a743c185f0b4631b360fb67bbc5b6459dd1d174391aa1b264115648d
SHA5129f1fab3475222d65007430e16989dbad293e9ed8d9bf105dc5579434795fc859726a4f91cdc0c0f6cb0a2b912db049060f3e24576877b7d6f36993e2a61f1a3e
-
Filesize
9KB
MD5b47efc202961a9fb8e73a01a35bd74b9
SHA16476c2e861ae0706e8fa49a88e5e58ba3ff34550
SHA25669e331393da619313e8548c7b88704fc9ff8821b05fca55584e7867556ebf3a8
SHA5120f231452dcd8f1f48a3282b47cd679a6ebdfbddee4529ac1d3fbe8e84b40aeed1f62c74977372dc1ba7f857e5a45b54c007c380303e2e0b33b37c02ca9d2b592
-
Filesize
9KB
MD5012029e4a46111ef67d9a48c63d9b48b
SHA12aa9aad8a2f6a36328738f6473789b6c5fdcef11
SHA2560475a2548512b5315021b25c2dc59bb500766094562df5d30f36c66dd922e2b1
SHA512e84fb64c91383c3c777fb14325be8eb29e4fa3cbc75a546be2ac74040a373f3d274997586e65cd0885f511054b2bda412c1a6dce19b3cb67f0d25ab20ba5d9d0
-
Filesize
9KB
MD53b6e80b041940e4cbcc0fb2e7a4723b8
SHA1160c2694d137586db272f86054c03868f627f573
SHA256a74cbd1ffd7db602152e6e8f978036dc6d2bcc10c602402af092ac026a97706c
SHA512cdfd06f0f014ed168ba31aa5f813ed729c6dc29b3509d303a6e23f3287a9f60e96169603d6797f8a1532ee532310d2edb57bb2c405cacf09de61956020abc447
-
Filesize
9KB
MD5ebe4ff0dc1c322008e21fe5f9d3ee63b
SHA1bd3963b696c2cb35cddc55352154c791f6b96079
SHA256d6dde9202a0ea80e9fc37b6948b42b674170ebbda92195a3d42a1b37a76c7d28
SHA512fc58afcecfc3596dca0714fee90e8f8e87ab2834aea2791c097e485352ea918ff843ef855482369faa49a6f94614e7f2abb426bb4b97aabc8946fc44d21aac3f
-
Filesize
9KB
MD5d48047ece8f3db00f66bf3633ca51096
SHA1b9939a123681c123241f6cdfaf3d44161e5473ec
SHA256d834b4a2c7efd141326f347c7f6a3f87118e8369f16b7d8a32b7ed51da4578b7
SHA512459b007c57ae47c2fe2d8fcc0f06312f0e3a1de8eea85611c5e62b6eca39bcbde900b7e7d9a99a0fe91b5e705dd5fb4e528a38a68974d69489c595d298006892
-
Filesize
9KB
MD5293e5e6e642dd304fb5454274fc145d2
SHA1edf4d3613c7feaa0f6e73c5bf4e32075d6a2d7e6
SHA256ff77cb9b7709aa6f478e2cbc0dd2a9cfcc05d7d5e9b6bc48f5e79d577f9d0580
SHA512b03d2b0d9fe978e36e5697a94cc5ea5e1e12ff528a2260538652fce959292204f3f47f56aaa20101a0c56246718381381f44717cfc643c8606f955ab85ee70f2
-
Filesize
9KB
MD5b56161f055ab23c248bcd934c73b7768
SHA190398f6ef81e2c6ae39e3dc81e17b70a6202fc82
SHA2561ea51586a2144b597a84b067f6b19d1c65bc904595980ed0d2f6ecc793415f2c
SHA512cd33bba56b6c9ad2e80d1b3e189d974a1467e07b6e2655c9dbb9ddba644a6f614a6b466fcbb655d8415d976367ac47875ae53554c3cd3e372d8832f1f2f69a3a
-
Filesize
9KB
MD545c5c8bae72e245226dff726304cfb98
SHA163b82b88ad73cb19fbb0e7bc1f1a64f78043925e
SHA25642f5e161544fb9e8de3bdefaa3721bac7b22722e0a9549ab99b3716a347a042c
SHA512b4ade1a9c8bcb027efdf10b45a6d99511bff7bec626b4da64e84465f4090cec55775c48bf90108839c60713be3123ad8b4de68bdb98189f2578629ab615ceb63
-
Filesize
9KB
MD59ee03980f31a61b9dffb0be025d8e763
SHA134b591bf964a88d1a98a74b1156ffe846be6df5c
SHA25661eb5f8927426bc9a8b03ecb0ea78f3942e5ff91270a024f561fe45bff9b4baf
SHA512c878c5588120f86b68f78fafc073ad1ac3e3ae3cbb1d49117b8a686c0d35c8020052379e698334f6c3961cf8b4600250bd72370938f5ce490d661f314496111f
-
Filesize
9KB
MD51f51d64363ea30f0cabbf0896d202e4c
SHA10ee88eeb1f39920952283b2482895d1f20380ade
SHA2564930fcef0ca5db3e7486b04dfbb06f8e8efb81528927dbb1db433b6cd7c71f2d
SHA5120b67935522126dd954b54f12df7d21eba036d78dc6efebf87a1cdea2cad80596fc51a910a79c8b348e64f0fb13ebd2b61c53ab00712b34ed1422927d07f821d1
-
Filesize
9KB
MD5fc674b8f8ad2c98a346567f8e12016e0
SHA14e6f33e63f8350a2ff1e3660bf344425b86e9866
SHA256af90b138272cb6217ea311881adabf2c27ec08e40e479f396dcdf5628604f535
SHA512a66c9b41e7e9d8f0ac753f8f4ae684e65e099287d3957b46acfacb0866dcf5bc6ae9d4fabf5af7678da91a2395029ba8943b9c744fda0327ccdf1f713d46c9c9
-
Filesize
9KB
MD55db7ba1ff71958b9cf4c0fc63e3d564f
SHA18731b4bb38609da9fc2edb0b9606f89c96e7bcb1
SHA256de9adb8b311a176cd3c206bf1196a45ed26b0ef3e09de04650ebe45b33b45c0b
SHA5120208c8f33ad0b6f0a3296f47b221de43f773a00f7c667008945c2bd1c95cd4ddab227e578c54661c09e3d29531adb4136b1b0a402e17622efde4b155a553dfcb
-
Filesize
9KB
MD56e2503fd4e5c7e15ced3a6216c725a48
SHA1317d99e46a0ef2d82f6d39656d5a2e6032989703
SHA256b739bbba38bd373273c0343f970c76277e74bc8fa9014953eea2e2b3e6cd9e9c
SHA512f5443ce74c60a875a11a0a01c05b3d74c6a216345e612709d97e35e5c539d8cf1445b89916bc18e80ee98e98af4cea80b11f607828262252acf68e316d74645f
-
Filesize
9KB
MD543f05f1bbfedf98517049847fb752339
SHA12841ebe0532530ad2522a10e95fef9072a9245b8
SHA256a163eb8480f9eafbc3b9b8574844e9e44d5609f62d5262b44f4f22eaeb8bcca1
SHA5128404544d237c316b8a3970e0e0921600c7a67cfe61c8a943e8087dfb39cc41428ff955a40d0e9eb74d209b75b82a4a8f4738ca6ae851b9826596b130f7c7200a
-
Filesize
13KB
MD54d5c11d33c35dfb298f415c911bc91c0
SHA1128b1795803bf9282f055d09149687fca923b6b2
SHA2564fce177a2611e625a744265e5fc7e78533037a778d1f325a8c2139d23cca93c6
SHA51287a40237b9fecd59e9a490197c33e7fd262080ae0b814990188ba4b1980e29f893103458d3aec4d27e9ac59b06bb8fab491d5cacdd08977e642730d34b0de1be
-
Filesize
245KB
MD532da9f21331180df6f41a9c295ec2db8
SHA170459b28f1ced78cd7077f6769fbe71e5e32a6a9
SHA2567c8b02ac229ab1898ffe34125ca851ed6c9a8a5c2a68a734438006061228c611
SHA51277fbd1be8d721602a11405b678e16722bf4576225ee28ba3b600f3bd9892a8604525197c398d638d7dc26408b3f08a8374386a21631e053dd5c7ebe95ed27865
-
Filesize
245KB
MD5fa968eaa704032788bac30dec46faaf7
SHA1d63374d02a409183a32684688b418c35cce5430a
SHA256644867fe6186d0ae724e2ae0a95bd13de38babb0c129df1f7a32af5c563d9736
SHA512a8e39bb3b41d0c49a2c9b3f94eef63f402824de6bd27c5a09d2f34f24181773ed19f8ead9939c81489413c07022306724e98b3377398d7c6edf6337fffb5a9f4
-
Filesize
245KB
MD59ab21228b6e88f8e8410e34e0a760614
SHA12a297a385e91ddc4fe1c55c1333806742e2ef8f0
SHA256b0a69114f5d07eccb5248e4b9e29cf627751c98cbe2369e112d84d3e7d764996
SHA5126102277d328b2ee0b760c3245764d20ee3fb29b1964f8ba69d7cf901b9ec0d621d6829f198f82c9a0fc6d58af6a844dd4c1726d77027f2f7f359ebd1ace2d911
-
Filesize
1KB
MD54d42118d35941e0f664dddbd83f633c5
SHA12b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA2565154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
SHA5123ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
-
Filesize
6.5MB
MD560afa16cbc3798cb1352314311e93a07
SHA10a9daab3a20586ab2a07cd2857a2f2cd65c25d32
SHA256ec105b4cf1588e28ebd596b2c354e44b4fe2cce5e6d5abbc7174ec7be3df6a09
SHA512839905cb7d697ae77beba74a3c82e65d1d6328c62fea6933fd8d490231d1a6bffd692fdbaffee86483ae967e86fd0772fb2bb327b054d08fc0c9177f3c9c26fa
-
Filesize
175KB
MD55604b67e3f03ab2741f910a250c91137
SHA1a4bb15ac7914c22575f1051a29c448f215fe027f
SHA2561408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
SHA5125e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d
-
Filesize
4.7MB
MD5cb9807f6cf55ad799e920b7e0f97df99
SHA1bb76012ded5acd103adad49436612d073d159b29
SHA2565653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
SHA512f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
-
Filesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
Filesize
10.0MB
MD576bef9b8bb32e1e54fe1054c97b84a10
SHA105dfea2a3afeda799ab01bb7fbce628cacd596f4
SHA25697b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3
SHA5127330df8129e7a0b7b3655498b2593321595ec29445ea193c8f473c593590f5701eb7125ff6e5cde970c54765f9565fa51c2c54af6e2127f582ab45efa7a3a0f6
-
Filesize
473KB
MD56d74b74470bdcfe55d5ea6c672c1c856
SHA1e0ef3f552db4c0d386bd001bbf545cb92674d68c
SHA2568e69fdb7575a626b6111986275b139d15fb56e60156ceb5315c5e503a0fda357
SHA51258a78d316023223dafa96aaa1f1111a139f1b3ca6aa4cd3dbb2ebf1abce44ad08ce8f2e1e69c6109ea62c36f298a05a93b2e71634e972711555127ee8889864e
-
Filesize
7.2MB
MD57780d8c6e51d729c3e248fefa462a1cf
SHA1361f9a5d1370730d543ce40c5fd091f57dc432ff
SHA256ab282c140b24eacf351fedd21a1ddf4ab9f7f2bb8283fa4726c2be814a1eb31f
SHA5125ab8bd42c646f7f9ef075f5cd60c3fac307ff1b7bb17d2c41ddcd0ba6c6ce70c89509ea4c8a84028fa9f9bb1b30c1e5c04d3c716489634ac19a402be2a1ec338
-
Filesize
340KB
MD5198092a7a82efced4d59715bd3e41703
SHA1ac3cdfba133330fce825816b2f9579ac240dc176
SHA256d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba
SHA512590dcc02bc3411fa585321a09f2033ca1839dd67b083622be412d60683c2c086aac81a27bc56029101f6158515cc6ae4def39d3f246b7499b30d02690904af0d
-
Filesize
551KB
MD5a2a17bdd83467a027505bc817d1ac028
SHA1cc1266a22606a1055db9653b82e90c9d1f551d44
SHA256f92b0299185d963337e96df1016e1cf5ca335e22ff86568c1a6507c3fea29094
SHA512193c5db0a30a3c8ef5e8c821cafb9d0b5671b7e7821748c7b432e927bd4638ecf5bfc1d99721ce89fb3df4f6f23b5e55d753430e8ef2bedd1e1633e613321028
-
Filesize
602KB
MD5b2a23f285858db5e3e53d6a5d5291623
SHA1674adfeb57075f86f40ff4b14916c3af29695813
SHA2567ab39416b60ee342ff2874aaa7b9b95b290828807b1395192cdbd29ee1be15e8
SHA51292c9b31f82f62b15eed3edaf437412cb630e8deb2226ad162d7cb4c252d8cb7f0453b3121a846ffcb1547570e2eadb04cfd3877ab120496a7fefb47a6d96cba0
-
Filesize
631KB
MD59dc95c3b9b47cc9fe5a34b2aab2d4d01
SHA1bc19494d160e4af6abd0a10c5adbc8114d50a714
SHA256fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e
SHA512a05a506a13ac4566ecbfe7961ace091295967ea4e72a2865e647b5fa9adac9f7cf5e80b53fae0e3917dfb0b9a3f469189cd595cc4ae9239d3a849f5cedd60e46
-
Filesize
812KB
MD5fac2c752c57175a4b1f4630e3667123e
SHA1a2dbcf1dd7b3cac499b9f782c7393ab438039584
SHA25671f99a67bb310fab8068eeed7ce24ea7624a66051ba4e719d051cc7e67e78001
SHA5124820704bd92dfb60736da5b84c8bc9135fca484c678585ec9d26dcb90632e382f354d03b539599f4816feb027dd285ff06ed8a520bede56d7a1c590d942e4250
-
Filesize
384KB
MD50312c87b6436e733a037bfb3084f7550
SHA1e3f30b8f3bfc8ddbf4b8f85f845733ed5ac8c632
SHA256b6c895fbca90c36ae2cfefefda989922162a2cc259603fbca066f0cfbf43c4ff
SHA51224b7780211b9dcaf7cbe3915851c7b873562e0cff022c29ca1b4e159b9da152b517305f81dd33712a0224fc3b77e594405e432fe5eecf29b7a4f83f441d6905e
-
Filesize
393KB
MD5ff919631102a3a9ec635b3080b63e305
SHA1e43b117ad5b2d5b373321ab0ae63dd4bc1352a89
SHA2561b8c3add009028eb567b0094759daff29b7861e11d5a9d864071012200e9735a
SHA51221833774413cc71ba9c0c592504ae6288e3c8ac4e5d1d62768f4b3eca09e90009abec5e8fadcb4e7d63b99a522ae48fd608aad432eb4165ec7021c8888ad7df1
-
Filesize
356KB
MD54bccba46add5ebaf6efd4ade3c42aed9
SHA1e48dcc2de930bbf0ea8ee7b735ead321dadb5be8
SHA2562497368658a988e4eb3f64cd17423ea04e7555b104d43c8996c0ecbbfed5f74d
SHA512e2059e2a7f80353981eef6982a7da006fa3753aeba9aca5279eef71aa2fa4b7adbf9cbb17c85b8060359f9e871b1a5c665226f8d3b8a6fe49f908fd44e1b46bd
-
Filesize
381KB
MD58569900305a5661573f7766b93909f16
SHA13529376f54e32c17447b065d08c77314c4db2ec8
SHA256068ba3e34e7f253fad7dc526b1078aaa969bea044d48171925534598aa8becb3
SHA512d544febbe20a9bc5cf31f79f7ef74c1a742cccc99136e9828187c9a643bd0317c7cc48706346ee1a3c9eda8984be9c8606e9dfa7a6ce2cff49db2d785c2aa1c3
-
Filesize
691KB
MD58025eb8756d4bf3126d83c9078935520
SHA178895218a90680fe223af0b003c195da84902e1f
SHA256e42aeaea80dabe82657983a462e4cd3ec74f71d4f08a689f5825f55fc02f3141
SHA512f99f47e54583b60857a31648b985216713725496d8653ca04eb1d6634f2b7f7a1f9f70b8a7938529bfc6c8665360da5e6bfb6b68c314c011fef4a9817010c42b
-
Filesize
310KB
MD5502260e74b65b96cd93f5e7bf0391157
SHA1b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7
SHA256463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b
SHA5120f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690
-
Filesize
313KB
MD53f6f4b2c2f24e3893882cdaa1ccfe1a3
SHA1b021cca30e774e0b91ee21b5beb030fea646098f
SHA256bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
SHA512bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c
-
Filesize
380KB
MD502452424bb0cf6ab832808d04883f147
SHA1a8e97ee52f3d97c1a4c678f7578808416e9fac65
SHA2561b23cda69927c77764bda121ee398ffefcf5edcb5866432aa3526c378553c9b5
SHA5129e750b26ab40b5f1c075acbdeb15a57cda9e6bd8049488cfaf368b5cbe8cd9b6e5dc96130e4137370c90bb0777b97515ea2be0787e255cff750fb7e188e22ab2
-
Filesize
380KB
MD54ca91891b2d4670d02931f0ca84e4744
SHA185f6559b09c80af2575e3b7626842c10081e188e
SHA25685fff1ca6bd2527073de03fa77dd013db2557a57cce1fd370caa2b185abb9336
SHA51283eae7ab2f03598c657786bff6171803b6bbe2128d1a5b8a01d9a13337113632279712dd8ffcd3b707fa6052a936d92a57cb67d848c77ee291e75700e29f2bf8
-
Filesize
342KB
MD574eda453b23793ced4480ea7a595fe44
SHA176964af9c8024bd84fa1d89f60784e7ee6569350
SHA256e2d38131a5ef4b0e8438f45e8c74c56bcf666760d4682120c8071c9220230555
SHA512e9928cfac01f10b040c74e63242ffa1f7f616d8598f49f0aa7ddad063e18666cf5649cc65d00b3526526af8a7b46ee3b3655da22adf46aa44c0c6a1c2ac4dc7b
-
Filesize
557KB
MD599de8cfda36ab9ab3342889fb6da393d
SHA16bdd3d627d4b6702f43725039089562af58898c0
SHA256b93145f30e25122015373a248d6ea22a539c7d0d58c8aa853ac35cc80dc06bfe
SHA512aa20793f9ece5823cb9e74a4a3ff97d7a1860a593f427fb5eacb0390569a48122589610fe5a02577577f3a30f981c5e3da97cf73bdfe158a6bb845586c5b19d6
-
Filesize
351KB
MD5fa7dbd2ee35587ff31fde3c7107e4603
SHA1baaa093dcb7eccf77ce599c8ff09df203e434b60
SHA2565339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c
SHA512587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14
-
Filesize
394KB
MD50b7d25d70a2d94a032b7ff7faea45a75
SHA1d9d473b2ea936ffea4f751d8716cb03407a95785
SHA256a737a14f84b10b2e3c9ad4d147b430fd30c5ac0e125d5aaaf1ea19b0507de5af
SHA512e4dbef6fae4cb56c3cd7bd5dbb239b5136eb2534a17cacbf628f5e5d77bfca924580ad4e4d0ec580ffaf94d6e1fafad58e9c5f472c3a3ff782702ea5eae2aea3
-
Filesize
410KB
MD5a7c88eda9e12b6dbd432c544767acbe2
SHA181f1abe537870f7888431e820b636b17b5213835
SHA256a4d0e5a39241a6326143afa4c8ec881d6edb0382c66425411881946f98e053e0
SHA51288ca203256aaaaa26afd4a0aacb6fba2eb41618d09df6fc6aaa80ab8d699b30e73c373fa75098b1ec4912c042341dd1c79ee3d04f98b4bd59a44481d350a7988
-
Filesize
787KB
MD53268b8d9b4d4db87ec627b09f1c55a6d
SHA1683ba367e40abb2fefd4548805e845fc1b452855
SHA256dee5ef4f4b36fc5fe0f3b5e10c7cc3a7edc14bf948317b31a3287a95bfe0afa4
SHA51259cff62843d35f790092f42b611e9bcd80d948c0ef27a770b2d7af859997f40c320d67df3c5a9420d28d5c8f1678df4677e01cb99b729664d198b3b95b5fbd20
-
Filesize
488KB
MD56376d0a5f4273b76b1f4aabade194e0c
SHA1337ba39f09454c0779ab64872b9fa11f866d6adc
SHA256875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45
SHA51200347f16b5abbaf47fb08663d5efde26ab7de0c7a2fa42e6b5f03c41a83cecbd8e78cc3aef41d5f08658cf346e0ade732774485e8a10008a43fa41ffaf73b2be
-
Filesize
821KB
MD59b5d94450fb03c34759653deb0551441
SHA1b9134fbc75304ca73b156e77425505ed6dc6d629
SHA2565e8f2593dbea5a57c3a974558a3fc91b6087329a1e7b11622a6eac120a973718
SHA512caed9535d487833bdde51e82b76d3b8d2e6ea18ec0b4b7a98552be9266ff0728bb1133d8f9cbd169345aa08b0073f04d649baa71bb487483951cfa1a92080d63
-
Filesize
381KB
MD57dbd4a9de6e30de028c97a7d39f8038a
SHA118d68f37b3c5eea3a2fe42c4ab1694a439a189c0
SHA256e1c793e08e062043cc65271718d9b21d5742729dfa2e076ab012e8a008d06c04
SHA512a18c43257d26380ec14ae0259cf192257fee0c6895b82240c3b41c5d6e8bd6f8023cb39dc2da0701bbcf05e8eb2cd13c84af971c28c94099a6d0ea02ce745ddd
-
Filesize
411KB
MD5d6904e7d1b6750d43a6478877c42618d
SHA1919f090a6a3aa1112916f5bb0d5b73a62be43c1e
SHA2563ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f
SHA512d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad
-
Filesize
336KB
MD5881ff04e220aa8c6ed9d0d76bfa07cb8
SHA1cacf3620d1bf85648329902216e6cdc6f588a5ba
SHA2569210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22
SHA5129134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5
-
Filesize
373KB
MD56629c344b6e5ee8fb476522627b34221
SHA128335e3c96a68a560c68756860394a0a86c21870
SHA256e76c3f15529fa7cc088dc32903c6885f4cfa170a1e0144710b05965f3210c31c
SHA51278ca2ebf40d6cc3eb7035cca78364be63b8eb69e27caf2cae57e3489b39a9e443409e800fd95e1b646d37655c37ee8a9ae1ab344b506cf65f8603a6a3ad892ed
-
Filesize
456KB
MD5c294012268f9e611fdc2904be57e45d8
SHA19ba4bd190ced7ffe053fa74071fc5836bdebea53
SHA25621cd7ae581f6d0c19e90ac7df03d7dd5305b882776a1f091573f824bd28514da
SHA512d16653f30617e52a040c5e033896a71055fee9992e54ffca5029601bb62a41b9685a68655b9c8bf7a7ba54a914836a0f7a49cccacae0eda180a6b68c0471a268
-
Filesize
910KB
MD501e8dc084d07743fbda50d54d86ee3bd
SHA1e0709217e1a6785706b7d14037b1478ee2a3a59d
SHA256ae4e003458f1a8bd3652e61241e11ff91bd887f6b95c1fe2700e76a117ba2119
SHA5127d8db84f975d778bde21253f43d174921c2c71111644a953ad8671754e5d656f72bcabf62f4b960cbf4ca0ccc5f67d1558ed250b568c1f2308a31970e380654d
-
Filesize
383KB
MD5ce19dea7b7d0b9472f99427de2b307f0
SHA19c84dbff9927c052dcb9818ed73bb272abf9054a
SHA256586f34de2c7bb0e92fc376f3ad962bf9bae1a768398459d39f8ed06b59d8ccbb
SHA5129a6c84ef9bb03be9ce96948bea94ec0ba83ecbd06ed648acab9d6fd27c1ab85f011a5670591da6256781dc147fc234d627cfc4bf5eb29bc2c8bfc84aaf89085f
-
Filesize
412KB
MD57b6bf901352885c0699db71239b7cf24
SHA19e3ec5f327c0d0e54a449332061e60a8c79243cf
SHA2569200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350
SHA51279ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580
-
Filesize
410KB
MD5cccbd7f8a0c34c7094ce4d7b8e7e0588
SHA11a08401e2dc8c59200c4ecaa1886b43b6faa6979
SHA2567467360f9addd4d8694e1508a6ab3a3e00dce57e5897d5376ad27d8e651b23d4
SHA5122cc43437f1cd8d5fda0e95e7dd117c9b82e90cfed58ad8f492f46b4634aa01cd1b0ebe39377231a0828fc1ccd39641e4efc2f1210d629f9aba12ea9048accd95
-
Filesize
948KB
MD500292b0801e0dd0a74091bf53f1574c9
SHA163a002e7a8796bc4b4459a19c95ce426fbd1ec7f
SHA25661a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6
SHA512e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5
-
Filesize
772KB
MD5b9a2aa88c69c42ebcc41fef00c980a38
SHA19e373dfa11f95c31ffdca70bd83d2f66e1ddcef8
SHA256481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09
SHA5125f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f
-
Filesize
351KB
MD56de7b004a86967a3433545b3b38bf89d
SHA1113bd5b28dda669b27c798e0b46fd680f3a04956
SHA256ead5a37549b98d55839ffcf0dc8f8201d37d71968ec9138fdea79d7c9b79549d
SHA512239c4acd2c0b6c08fb92fd95b89a302ddefc01ea843950a0247b7310c2b024383ae98286c2d4b83b99833452c41b386e047b2ef33610ef122fcf2f439ef43726
-
Filesize
344KB
MD5bbae0915edec081b04bb903b689bc40b
SHA16a0fc635ce1c431e512b8b3b8448176aa4025556
SHA256d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8
SHA512573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4
-
Filesize
356KB
MD59fdf47fef5b549497005ef8efd2a2c59
SHA13449de72bfc2be537f4b007c81e5bc5de6ff3d0a
SHA25665a9c1efcdd451504e2e9b44b0c8fafd2c3c1445d760fd6c435305e2f8534f59
SHA5123e77178dcd9e8894847039a997c87d5d04eef8a1ace1846132fde229285da08ffc8d3ba697226130bd07ab122a868cc53693981a21f8211c839ccdaba77207cd
-
Filesize
396KB
MD5c9da926441d438b952149650c86a033e
SHA174ee60342bda33048570dd3c03f897668cdfc971
SHA256ce96fd415ffcda01345146faac716e2d45e2c556e5c6c38e9a1ea5ac19dafe84
SHA5123e718e8df695cbd80146c3e911de9b235ccc06f574739e5720d47952f69eab089b56451cdc321174da9b239c0a71a720baf9d68b46046efa0edcb2a3f1804ea0
-
Filesize
374KB
MD5c68170e4948cf3ae6910364c1e68ce90
SHA1420f3a392db28b6fd6be44fd702b455518b67bbd
SHA256b26499a256d66feed42b372ea2eaceb75c279694b40a7b5d0f8c1a5c24cf381c
SHA51229482ced2091873a8c6242a608ed641b3a4d72fb93ccc2eb58d2769c446195f717b438d5633522f457234f3d209029936e9ea4ccd65d45ba8ae0c2df71043797
-
Filesize
376KB
MD59b04c89c2d17c7c00a6a4342f0771fec
SHA1a0886040fd5f870023cc3038f5722f4ba6d7c8b6
SHA256abb012215610178b7f8203f61f41103546d3949ac3df4acb3a622b01663f39cc
SHA5127c4cf5e7bfad4709db49779c1e3e762b8d0bac6cd736c511711ddca7682e08bc6b3274c9872d88db78bc36b0456b29680d3c4e518d4a401830cfb37b48567bb8
-
Filesize
387KB
MD59b9c22a12ddce43a4a3c0c047a16a5c3
SHA1901e072d644a79e0b18be2f4a81e6842b070485d
SHA2563e89d43b86b2582fd7db236659af47ff459a44c5b5ebcbb0bcc9eda244c8e501
SHA512196a5bb1b0b5093d4a18279037ef7993525c36c136d4560b7e902c815687f7992ecd2b64d96422911a3468cf3f1478b21df6465d3b31486466cbb5573ff0e7e0
-
Filesize
634KB
MD5aa75c21bfe54bb70e7abd9fce1347a8f
SHA13492307cec15b367274c948beb76598f72347846
SHA256bd981aa65536b544228ed1d60a552ff4c7800b46f815177b33b3e628b97d77e4
SHA5120e77f1c7e4b5410e9eaed875f5dae6485d8de5b650ec44133b1634645cc3055fa7bea316e843b491f29d9c137b20623b120e014b1c74bbf4e8d1f08dbeaf5bb2
-
Filesize
399KB
MD572946b939f7bcaa98ab314cfba634e0b
SHA171c79a61712c8c5d3dac07a65d4c727e3b80ab17
SHA25675f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7
SHA5122a8fa7108c58f4cb263900a555714d5638d961d14d9f4ddf8a9ab5b880afdbc5d2325fed1e158dbaf42a9cd20e8e372e6a8f52fce842a6940ea52e43e4a1f1e5
-
Filesize
385KB
MD56a2efcb886dd33a5d05a112c141c520d
SHA1ba89d9ef7ce1862d1e9933e910529ec5a3e2a933
SHA2564fa004d80c7e89e38cdfed3a652003787fa810256d294c16aab0bca815eb7c02
SHA5120475df28a602ec90c4331da4e7d742eded2cb3264b41924628bfc45e2662f2ceb7b9518ac88a231da1c3caf18d176ff3a4931c2b1751f3b74bce3af73d0088cc
-
Filesize
595KB
MD5fca817ed4b839b976ebcbf59cac66d68
SHA1413efa65470319999032b6a25b3b2ee33b8cd047
SHA256524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb
SHA512cb246d5c5cea30d6e7514841ab93803984cda37461a09b6c340ca64f7cbce4e1212951a4de421d928d433a619dac18454fb403b42581757b76c7eb124ce70cf2
-
Filesize
347KB
MD514ecf7684d7987950a9655258d3a72be
SHA1b1506b3b4be332081dde72bf54a197b1ee0bde66
SHA256690a83bbefe1e97de5d2c1c0791707e8ddc3414a12cf30b79329fa5d21840d6e
SHA512fd9d36c63b00bb1caf6a25f2c797f3a844395f16016a9010819462d647e8e759fd8887e5eae3ef300871f4abef05f4ceca9edb5b30ffdd56efeede9c75f56e30
-
Filesize
365KB
MD59632dd7d883fa4deb3963ea663e0ffd4
SHA10db135be4b3a7c54c39e9df5034d5576b68ea92e
SHA256690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e
SHA5123aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37
-
Filesize
936KB
MD5714ef30e819d791b41ab093d515e1704
SHA15410b58dcaa0bc82146655ed56493581d18d5c04
SHA2569be97a18356b05ac4c3aa2b7e719eb29b47d8ad406aa50cf0f24bdde1d613083
SHA512a35074a54dc12a68301553345c69f02ad31bc010690d5f4c4fad5d65b3fd9c3f7c3ec7e3637673d250cb33496b93a9582e28b5210d11137bc0bd5b2e219c0aab
-
Filesize
869KB
MD528f500e12a7b91d91d8f99395fce8332
SHA1885fd6c78259ae38f7dba3887f7fee783c1766bc
SHA25606dd7ae122d6f1f394aeb85089a9c837ec05dad627b0bcc92863ab2830e971c9
SHA5126f0fe4a527e9c53a41d20f95cafda7a2488bab310eecf68c98271a2db6f3efe5d2180e158b5018a9c56a0580b0735146f0ae07d884f564de1e8780956a10d190
-
Filesize
731KB
MD5d34a2993eaf0ee6bf65c3729baee426d
SHA1d796911e57c89b11a603c645dd0e32aad7819d75
SHA2567870b92c64f7776c469b4d19be8881ce30a5263cc8287c3d7de573aed43c7dba
SHA512eb2f4b3cb7741c996acbd121d0c69eda6cfac6bdbd7b8036dc6394ed7e49c9a45641c7983431b5f8c5db685fc7ce958e7c9f5e79837b381caeecf009f79ca4c2
-
Filesize
371KB
MD50662e2b67524444e843d0104adab0b7e
SHA1ec39112f57e28010295398c24c6a17e60a88fd47
SHA256e8f86dc87dbf11935863efb3a5af8213a97123889019e98a7ef313b488088790
SHA5126529083d04e777be3cdaa14f06bb6b3a3d26006ed9d067f7a1bdfcf669856cc6340bf0caf90bbceb75666062fac1bc02ca2d2cff94c6ca5627ccaece6f973a65
-
Filesize
634KB
MD50d9b7f3ce815f7bcfd63ee3492350d52
SHA16138b5dc296cf406b2314b8b797f9f96de2b40fb
SHA256b86358579a9cec015c996c6ae862ddcb8cb558f30eedd0d0b9ef3cb18c3cc130
SHA51217d874849e5eb17bff2ac98c8191f9f38a07a66eccc502122c0ed2bdd6af94eb17db1b0a2477a75c1fd4f3ed00c76b1818eac5bc4093d92eca0d0a5323718cc0
-
Filesize
552KB
MD56733dba4f3f0afeffc40bd87300b9d6e
SHA1610aab026d25f2cec6c636fbaee922c099d26ef2
SHA256d0c8ae8f4f60f04d4eee8cc639ee3b52ad073f5c9ee6fb84c774eb855fd51e9c
SHA51240c1cb7be3709bb6ef01a4e66bfd85e20641020a800292a2a14f4cf188242aa0b8d42cabd0f323acd3d2f257243c7dc04b346a39475343c761af7a1833c3366a
-
Filesize
439KB
MD55b8fc875f0b57ac7793e19e0ac6f4899
SHA1b8ec064365fc29a70bc3a8d3df0ef222ed244fa8
SHA256ff3cdd834569cf9f957a444ab8a51ebe673bd26d7c907a907aedfeed248d4890
SHA512f3a9ad912823aaae0d089cf53151cfba0b6fbc2cebf826b1b7c70fec03bf3f967e440558fef94c990c87349b82c36379bf645b828ab6b69eb9f396165dd6178d
-
Filesize
319KB
MD537b051269289e0eaafd411d374663135
SHA1fa94bc7fe89475f1d5e1c9a2d88161cc992a638b
SHA2564ff334da089d2ffb9c6173de7c918b74c9326ed7bd76317b2696d57861871488
SHA512357350ec552765df460cd66ae59ebcc771df72431baa380247750627ee974f1859bfa423461a2197d4e608063d021faa7fc94bd30c6fe2b1a0cf9b9f7e64ea73
-
Filesize
316KB
MD5032c4f24764d531d0de876f1e9d51dc9
SHA16662a5e3466c1ca415e219634cd67863ff830b32
SHA256a0a715a3ef1ead036f0f03d02a8252fbdbd52ce6f8cc5b9298fc1c4494d4e508
SHA5123cf212a638cfe9d08e625f7f70d453263e44721be9550c2aebfb67462666a8d67b87cd2ed613cc12c7d1fc7d1c1368c7d198a6669fa3a10c2c2bf61966c46aff
-
Filesize
1.4MB
MD50b72a72b76b71076c78773802495d377
SHA1921101f1342c180677c4bfc7006baf3292a77f9a
SHA256c127bd152b674d35a7c5a65cc933c385d64622ae2ea09b7194c1de7bdda1c690
SHA51228afe1b4982e31784393182a06925b6758a19436eba28f89dedc2a380845939d31e947ef676fe8e34f382c7ae28fa88078380df9e83ba9ce7d7c1e9df96a952c
-
Filesize
5.1MB
MD5e5ed3ea494b9ddec4b6aedc45ef172ba
SHA1bd7ff0e1c817f4eeeae0421b6e9d107584d35c30
SHA2563dfde11380615c1204b026f94e39ac503f1785d4b967e40d5384bd092c4f0c74
SHA5122da9c70fa89a91525661d346cdc67d51772b3be38dee15727fea77f83cc545a621dc43c6dd01e8425072335cc11591daeb92a0acba134918094676cf6b00cb82
-
Filesize
99B
MD5172ba00d700bac5ac3bd88062e52a9c3
SHA192a83cfcacb5bd11924a0413546a60e531424f36
SHA25638c8aad86e8a999394fbc565c58a53204971766c6e85550e2268063f9c662bdf
SHA512be7b82158e2feeecdf1e85060c2b315bfccdd1ce1e2ed1e97930aa563d013c52a81663939277f4d5cffd1d39498d3392f87de88f8064607bfc7197c00304225a
-
Filesize
19.8MB
MD525dc0ea351ada1e0186890cd633a77e1
SHA1cf065376ac4e0207acbb3df87c36a8fce6b59c0b
SHA256e86e6fc78ecb001a6bbd0e86c203f254f89743f8397a2c37796a9a7b1bb44f6f
SHA512df832e11a91d0400c778d103b8a9749cb7d091d0ceaa0323a93e663c039507d3dfab28e01ddf670d3352e420bcef5123979a56b62183ab4391d03b482acc1c96
-
Filesize
105KB
MD5792b92c8ad13c46f27c7ced0810694df
SHA1d8d449b92de20a57df722df46435ba4553ecc802
SHA2569b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
SHA5126c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
-
Filesize
120KB
MD5cf8aa6c50804b3d2448b316b1cd24b17
SHA1a69190724b20156dd17504162fbe771309415b73
SHA256a847432bdf7da12571bbd5bda3b11ca3664675d1ff9baad5abd59b2d0689fa93
SHA512d897b843cf6d138885ffbcddcd53c84819bca0a1ac9de46334601d67fa9ba05d6b857b396a67b6f92e9f7745fce3f1a0402b76e4b31bd56d3cd36c339ac1e07c
-
Filesize
3.9MB
MD56e95940ae024d3df5650fb4b41700f98
SHA1aac608966eb28d03a7293c70d69a43d964d3dab3
SHA25661ab765fa1f743d34d84e0415144cbff5604ecb7a91370f1ee658f964602afc9
SHA512260b5b6a50ee5df6db1dbfcb38f2dcaf177bd4198271d7eff67b8b6ea178b362d486334a09d82fddee0e41bebb28cba57280a6fe8da615bf57fd0fc3a5fa5e3d
-
Filesize
168KB
MD5b82ff216a0babf602940759b9a3af870
SHA107e8a22dcf8d7be04a6ddbcab3098e040494bb0e
SHA256943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5
SHA512da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1
-
Filesize
471KB
MD5031ea03da08fe1247280cfe781658791
SHA1e91db50ad16b5a5fbbaf4118672d60b347ea6161
SHA256c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c
SHA512b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a
-
Filesize
4.9MB
MD5054c57ca1e444b9ba8262835e0cc947a
SHA1c20b1ae7ec7315187051e7a46e14359f9d12b709
SHA256011fc0f126868903dac9fecaa948eeffbc43aea2244cda071f69da08dc2f110e
SHA5129d7854a681c4abffb95f17b0ec81ee21dc36c482fdd6dfdc8cc7296ca19e7193e7e2ef4ad71d28304cfbb94d96065ba53139d4042c31edf64897e9105ca5e360
-
Filesize
106B
MD58642dd3a87e2de6e991fae08458e302b
SHA19c06735c31cec00600fd763a92f8112d085bd12a
SHA25632d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
SHA512f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
-
Filesize
894KB
MD5b139ce07e2d87e65cb101f3ca90f5511
SHA151516e2fc7aa3532a76795cbfc318da19e3e2d54
SHA256c94823faa547813d388b41f72a791fcd2f36665c444ca88475d69ab7f1e9c3cb
SHA5128eba17cd8e70377083509a4c5316b6b784c613e4248001a6c61f2d26acccb5fac1ab45b491c84a05f93a772576e203b514109e8f17cfc593d08104f1746b3a1d
-
Filesize
100KB
MD5c6a6e03f77c313b267498515488c5740
SHA13d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA5129870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
Filesize
12KB
MD50d7ad4f45dc6f5aa87f606d0331c6901
SHA148df0911f0484cbe2a8cdd5362140b63c41ee457
SHA2563eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
Filesize
14KB
MD5adb29e6b186daa765dc750128649b63d
SHA1160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA2562f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
SHA512b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
-
Filesize
3KB
MD51cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA10b9519763be6625bd5abce175dcc59c96d100d4c
SHA2569be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA5127acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
-
Filesize
9KB
MD5466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1eb607467009074278e4bd50c7eab400e95ae48f7
SHA2561e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
SHA5127508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
-
Filesize
6KB
MD5ec0504e6b8a11d5aad43b296beeb84b2
SHA191b5ce085130c8c7194d66b2439ec9e1c206497c
SHA2565d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
SHA5123f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
-
Filesize
424KB
MD580e44ce4895304c6a3a831310fbf8cd0
SHA136bd49ae21c460be5753a904b4501f1abca53508
SHA256b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
SHA512c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
-
Filesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
Filesize
57B
MD558127c59cb9e1da127904c341d15372b
SHA162445484661d8036ce9788baeaba31d204e9a5fc
SHA256be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
SHA5128d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a
-
Filesize
17KB
MD52671a80e1dc0e5415e6592ddefa69f5f
SHA1a9b5fff9ebcfcdb61007cd12712b10390cdf6070
SHA256d773fd7f7ea4cf9f564fdbacdcb9e8dc27aa8a5c6f1fa90dcd016b86dbbe358e
SHA5122b4158d8a60cf085ba98f8590aef8af9574ad33ec4b9f9796c828aaa07bdccd926b15409123e8b69917d7912e6718e1bca43aba1fe435a365236485c92ac8023
-
Filesize
44KB
MD5b28bba80c002087c91e5baffbcd47ab9
SHA1bb6475412caff8a9ad3ab808ca31587c29e1b328
SHA256bffdfa5b10ad08d18c7f8cdc554074082da06b970ab69891b9e1273de03c2010
SHA512d337764dfd671c2dffa90bd6d86f130805311785e1adfb85a1b00de95aa973b5cb45c97ce7e2efc60f29dd9e57038c4a6d18560eb26483e79b5f3871c5e75172
-
Filesize
52KB
MD5c793c23f6148bfa87efc5ab7fd7c1384
SHA1fd54b9aab27685b960650f57c3902de6957e2f16
SHA256dc45590b7b4e176c3038a45e8966cf96d788995e29d2446a9f696e54f8a4a06b
SHA5126d6d6df61871f9883d80bc954be57add789727dc44d3e89137cd18ae43c181990aca040c2e091a791fd363c86e9e804b7a8e8bc8a257b28b53b8f96b5d699dbf
-
Filesize
33KB
MD59f571c09c131b11b97b0abce6883812f
SHA14586da777174e3832a78cc137bbaf791d9ccad34
SHA25605f8fbb8bd7c42992ae9a5bf3c57e680f4bd60364fb50cb519cee2dcc82bb48e
SHA51232599921d8ac2b76d05bc5ce54811cb05a0c12a681549a4e93f8a1507a40159fe38bce53732c982ca13c42f0ce310220ad861e08ef9cd26f278d5bd1ef4dfde4
-
Filesize
67KB
MD5d4f8932b6be0a05823c7dbe8910fc079
SHA1ed2bb7fde38e7c07abc9b9060b3ce9a26dbee50b
SHA25668e5a165795d9dab9392d9f48fb1272d29f27f304f378bf22eea733e70cf900b
SHA512a79c5b9ef09447e8da5326c59c85b119e692742ba872172f360902a05d342e09e5279015eea38f28a107fc0721c4bdf8b2abf7a0de017b1e2763e7b92fd9e2da
-
Filesize
16KB
MD5d26eff45bf45d725821c6464ef06a5bc
SHA16b1be78fa0bd7db00c6b8856c882a749b536b071
SHA256103ab8db8d6f747691d35ab42aa76a301287ed533678110fe74b53d0ef0a132a
SHA512a7ddeeb75e5135a219c3cde6c2d7a247752c785c21ddbe04d539ad43e7e1f9cd8c15838b7d5be94be63af92cfe964597c3bbffc8c03555cbaec736f456253cad
-
Filesize
33KB
MD5e26baffb60d9b234a5a77d28c45f9975
SHA1aa86e4b306fc5a9d7948eaca886adde5dccfecbd
SHA25628f6f856d1a4a5cebfe4570bc6d79bf01f5435192bbbc3e8a47ea706ca6ef507
SHA512f01b396bb4913c0ab25ea116130ca970953c1e9b0930068d66e8f2546cebf203f93bf0f18e01eabc92dd744ab927928ab45c08ce4dee9b88a3ed892f5b4b90ae
-
Filesize
154KB
MD56e363a77e856d4424911ac87922a7613
SHA1024d4618ae2d32f8261d2e80fcb81be8cf65df81
SHA256b216a1e145282f82c180194d19cdd8297fbfeef8756a7d89d0cfc725be8259c5
SHA512e3ab50bf0a6fc34b04a56c3205a6c97666da3fe4d29f5f09654ae080fa474d28cdefb3943d9322525ba7448c927d6a4692540d66cf41e7f1c07decca10bd15e6
-
Filesize
18KB
MD5de744973a6599f6654d0664108431a55
SHA1195f198c317bf72df9792fe6530d2bc7fba4dfdd
SHA2560add3c11cac106921226b3923d6ae00e05eaed0bb74a804d0f45b48356ee4805
SHA512329504a80da9db80d66bc0dab3f4d2b6bc64449ac9ae4f75459e0398b6279a410bdd51cfb3874473225875346f19ee741c4acdf247e6ed20e86504e56591cb07
-
Filesize
181KB
MD53c4469fc0bb1ea6c6fefab38cefbc9b1
SHA1676cd152b2a64a1b12386000fa9d38544e99edf8
SHA2569b0a1067bf2fb4921151e79fbd90403d312e86c910b463614f1317a152443ccb
SHA512dd688625753e10c73145f3b77d743a1227b754dde64c6555190bed63e657664218f89224423be8cb748203347bda6fd80f809a5e5a1d38554f790804b3f34e36
-
Filesize
20KB
MD59b26dbb4f2d9cfd75f214ade72f14bdf
SHA1502fbd85fb8dd0bff689d93a285adbc3ebe01ecc
SHA25640ea02a6a6fe75d802200c23c355a036f25f206e0d4c0103e33dfbd46f9a255a
SHA5127df569979ec28ce731328459dc5aabc0527e4182f44f4b25eb91a4c31addf9eb09166e5e8bf985a00b3b8527ad8fbfd86466b398eae1bc8918f7959f6614be81
-
Filesize
118KB
MD598aca4e9132c317efd7c1cd6280ae7c6
SHA1dc821b3fd3425a693d0ad1d6c32aeae68dd656bf
SHA256935113f98066149f034ccfc0e224e395fb94fc94995b69272e8b46ce41763d75
SHA512cdfda69c41fa80d35dbc72182aa51fc9577d2743089978a3ed5e67fc4bf4085c7e5bd3fcb5a6e6e7a0f1290e5006cfe5be0c03a7a1a15da676d4d0f14fe9d99e
-
Filesize
19KB
MD5257bc525f440349778c9b873b27abe12
SHA12327f0661cbba35eaaf294dcceda6f3accab4d63
SHA256c3427a19a9c16c5a4eeca318fae0fd5bb9484725a0fb39819e275c157b03614d
SHA5129c863f853dc008f6e35640e2fd2e6bcd242da7ee05061ccf90da2607e71a9e9ec46170514b1cafef0f190ab6fc6c11c0193f25e8c8156ad96dc15f5445f3fed1
-
Filesize
45KB
MD543e139a9b05a43ac2dbf2c6ad4f029cd
SHA10e9b74bacd281818d6d5ab16f522095fda94eb7c
SHA25634daa60f66bf90b80774d47e8fb72e2a7e4c57cc0a0fdae27efdb5b97ec07372
SHA5121cca3fb14963611dc2ce8e72903d89a223b15d8e3c198e8311dd78921d36dc9e570c9b54b22fd85ac08072a8e9b6684f970f6a82abaa79afb62fbbd55307ae4e
-
Filesize
33KB
MD548fd1c1ebf90efc54c4ff80f520bb57b
SHA1dc7d35c2c02d5d64000dc2d4287ed52b446765b1
SHA256f0ebd36ba41238cb89903ebf6c84c53fd932cb21a4a947638db94583bc646431
SHA512810cb2aa3876cf5e102f2a85bc3a1e4fb6afdb68d1723bdd211ea64b32102f923fd5b355a8c15d7bc79fb5f5dc6973ca127fabdb34244d26e95c811113f23650
-
Filesize
90KB
MD5b63721bf3b8dd25e198fc34e101f462e
SHA1a0206af831b27db1153959545c8a7d179bc026c8
SHA256d61c4e58be9d449f6fef432c6f318453442b96043ed1da43fe9b241345f0fa28
SHA512dd13cd43167b28248004c215c24ba32c7a1f0ca2b9c6e757b94456f7224afef8da2ce9f4d6ee6db6b30d75df685afaa0ca0e9f8d85ecfa55a08bba61969d74c8
-
Filesize
160KB
MD582801345b20bc0be66f479b4a8229813
SHA15b6a52651c60666f59da5cb807696f16f9ec3b79
SHA256dad07935fde5cf99a8f5ee1a7133e35df07dcf72d5b55eef3038d16c18a8d2bb
SHA51260c074ad07c4767a17f959f350313bebfb9cf50a4a3c0cddf726f2a998c417abcf8b233d0de71e0de5d28f454744022363cad3061f0d66607bb362998ddc03ea
-
Filesize
29KB
MD5c9c3c778157f4bd40116643bd8a71f93
SHA1d8a33c7fde202bbaf6c18b327e440cd29707a33e
SHA2560714613b8c215d303d404f3eae52dc3cabf1313e3131bd875e1f61e6627d171a
SHA512d05906fabb99b99a4ebd5ae6e2f17d4b6bd150b8a28e85d6f9bb76a367b2ee232b2a59dd92e5eee35f5ce4b8c6cab29272d3be910ca969bc5679584c60e6d363
-
Filesize
31KB
MD58f3ea7512aeae3a07b1c2998f61c88eb
SHA1a136dcb7e8129734e4d09f598eb98f837c2a829d
SHA256c77afada9389ffb25b07446b44436aec25f033997f6cd051b9a2145b6d7728f2
SHA5121b5bdc23fcd01bfb0eed19b1785542f7047e6047b2c996f6ef1d411b0bf2158213f35605f9b79cf67f67875efe26d7c835dbcbd63dfd80432e4b4ee296a9feec
-
Filesize
16KB
MD589a574ff00e6b0ec61d995d059ce6e65
SHA1aea09e96808ab77165ffa712eaa58b8f056d0bb6
SHA256e5c29c139842fd487473d0824f2c01b374680fb35d22fa929686d17896602a44
SHA51230d0d40bd680e61968273155b740901cdfa66670fc2af6f23e44c6b998b67cc1fcd0b51bd5f9470f209f188e75d071355e592b2a7c97f4bfd15d07d455e0909d
-
Filesize
77KB
MD5df22ea4113578e07a500cae1847a3b78
SHA19931180e9fce5775dd00dcef62287625d8b448ba
SHA25664f1aafb6b0dccdda5c6a11483f8d133f92e251ae4391020b03bdb3eb999c0b2
SHA512fa86e8eddbee3f98892714a6d564c7f6c90439036ce5978f4b0944e7ed6ca35a3d1fb094b201ce10390ad07b909b8b015e8c5b543e29fba7c479502734159459
-
Filesize
33KB
MD55d012a285411489652d0c05d98e7a34e
SHA1a11cbc439c805c62a9eaeec0a8b843f61b9842aa
SHA2568abf0044f6365ea59756d9e3d81e011c3eebb7ea011eb7d9a818506611070cf0
SHA512beb3efdd77ab4c1939b00f2fc2a2a01cca276a70c903c439444ae6089a46102c3bbf98a35efded11f33097ab5dd37b761f03c84236606ddb1d4d8bb59e170452
-
Filesize
16KB
MD59c6b5ce6b3452e98573e6409c34dd73c
SHA1de607fadef62e36945a409a838eb8fc36d819b42
SHA256cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA5124cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7
-
Filesize
204KB
MD5acbedd497274ddb9627314951bbaab5d
SHA1dd41293a8df939d8c1e49079c1004559530ebc05
SHA256ecee65a4757f5682db7b4880ae27eede1061509c2d90894beea2c0759371d30e
SHA512375a6034179ba53b10c6eb8d022dbd03173f2fcbea4aadcf09f2960dac94874d9ccf18ab4d962589de893955dfb512a43f7dcc1d20cf8cf533faed592f2ba9a0
-
Filesize
75KB
MD5f65e8dc24c75ca55f04524b984352a7b
SHA1b40b5d5d2fbb43283ba065ffdd19c95f7d2b6905
SHA2569f70dc1dcb3d6b0d62fc541224c501327354b2c74dc3fc35fb12ed7f10bf97f0
SHA512d8dff6c212d60152077f29e59a6a57b5b04e4fb3f0f78346888dd0b627c9312cb2dac57060c9208ba36f2478607f117870e69cb7eb017edfa213a9836b20ec38
-
Filesize
30KB
MD5bd3f97876ec29149365e41fd0d2e15c3
SHA1a6fca4689b19bccac636f2bce6e6d103a9532c81
SHA256357596ea7bca2c4f83f6ae408496e514f9f6dd7fb7f32a61867a2ff6babc919e
SHA5123560b8c1cd8e5b0f647e00dcc2b8dbb01e9c6d56df5f51918c06c12bf86f7688369b680b5e24b9ef524391fd6256d3dedd419e124e78f0d091df96e6b88d022b
-
Filesize
19KB
MD52a315d77025584b1d21d525946437351
SHA17651ad2c304a1021c5520a32b0e6bd90dd725872
SHA25611f4cbc8d914ede9477e8e83a95c1a880d7ad867d72351deb778463c49f2ce85
SHA51273174e11f9073ac9f97abad6546171b02fb5246b0c3ddc99279a8374da08fdfebedd9811c8bf9903e658e04eaf5c56e984ef9bb9a126c2a77aef89f8fe8a3831
-
Filesize
50KB
MD5301d7ca304590e14da9b9e8e29806265
SHA1921c7b40249359c60063a4e71fa671ba7d391f4f
SHA2561544a5b81283cdb37e1f41e85a361a82115bbad9eaa77a03a29d1a8ee8c29e6d
SHA51250d550903de84855c096a2ee2dbd24c979321702e3d919b4ed17e978b62aa655dd08e3aad696e9c689d25df6a38adbdfc748ef268eb5cc0c1a4cd3cbf3bf4d5d
-
Filesize
35KB
MD5579c314b9819ef941f1632894ae320a0
SHA1abd38bc1cd444a5d2e3f395cd77941a942ddc2db
SHA2561646e0bf5fea705251b35bbfea1d08e1b62443077b1d01c3f254e528193b774c
SHA512f097fce18cf1aecb660a4e261da7588b95456400187facc09da27147489b92092c45719b294a8dde23146cd9780f525f9acd1a84b6b1617ff90161a195243311
-
Filesize
81KB
MD538be5e0928739aec60e9c699c923d46b
SHA10e191ba22b996fc2946329f6fb8e7d4b924e74fe
SHA256123702fb5ad0d36f70405ade05699c4f90be738a2ed7256e083b65252ab98257
SHA512738e545045e03b3a23eb667363473b0f09e6f7946b845e65e2523583d5ac959b8ce035af65120e2d7ac6269fc9669a26061f5de87e550ee936ccb936aaf94c28
-
Filesize
273B
MD5df3d4bc75a7badef2f1eaf2a047b2df4
SHA1a008c9e67385dba61e382b422fb55841c0ce8bb7
SHA2565fc9566348f403f5eb7f2d8e9092c5cf0cfcc8cd49fe89a66d888632c7bc0a67
SHA5124e534890ea99316b3c12acd5ad1827f94aae7a16300db0db5a8141bd6817f5939e6865356defc19f7a83526e82f986a35ed5c7bde28145316a262fc1accea52e
-
Filesize
55KB
MD523b02e1ee6ebdbc81da60d21e7c4d8e0
SHA1a84e00eef702fddf094df57be9a98cc66a1ed5ab
SHA2560c9d67cb2f295abf980f55297f915a75a38c581c9309d54a64978c27126b6cb2
SHA512ee83dcc506a18b68045309e1d391dd60681e1b6f0032ecf9e07c61eb026978305880a7db1bae320ea6357553de2648625abd539a62c2f4ea3c55f438accbad81
-
Filesize
234B
MD55a927fff15a521e9ca59287e0a4fb136
SHA1a87d3fffcced2393b52d878ffeaaeff5b3135d6c
SHA25615bc4050c82bae99b7e6eac9c43252f4a36fca6c3cb93f61f3588252358e0d35
SHA512a0d483c87c04b291911511129d47505a8113503b9b179e75dbcaffac20da3844dae91c0efb4d829392fd845fcd940888e185636f3c4f032c6f93335ae26adb79
-
Filesize
666KB
MD55d53775802207b54cb65eeac8566ed47
SHA17bda9d3053a54133a1dfda2d64657f143a92b16e
SHA2562940b7aae2065bc88c5aa3f1f434e939bc7cfcff1db27f0299325c4f129bc078
SHA5128b2c7e427b27676264ee13940f9aa265fe9904435ee1cf55715bea96d5cee922fc9b09b6732c874bb615fbdafb33be77d2bcf3264dc0c239b0e94cc4c0a76ee2
-
Filesize
106KB
MD5a1586e63bf3a9f8160eabd146f62aff1
SHA1a5cfa59d4e6bacd9f2e81cb367171d2f8ea9bd1a
SHA2566c3677baf92dca8c08f616cbc99a5d86909e91ced015d10da96db69b55beedc2
SHA512220ecf0c07bb6c87af4a6e9746fb5af7c0835c0a459037fad5c7c557f64ec327bc50b097e6e6146692b583e838d7ae1f359fbef052ad6d0d9a034a82492023cf
-
Filesize
244B
MD5ffd69b0eef200081ded78ab8e44beea0
SHA13f41a5618140006db003795892fac6f12a2cf18b
SHA25696e60d529604cbb434d73c56fb60d78be98838fa68eabccdd4d5c2c2a990d6cc
SHA512f3ce9be2f5c04469683c528448fbef81a06ba7bff468a2fdd5c426be290a0315494a5854ad7f48b662781906d6698c4fa6ca9ffe62986998c91b5ea28e0ea912
-
Filesize
278B
MD5771eba96a71fe4874168ba68fb2c40ea
SHA165306dfd9af168e896e41c49b6204aef9088fa9b
SHA256d42695e096ef46165046922ccf92fec65dac4e6f48f53ac93b35d2523c11df74
SHA5120a1c3d2aec4b56f4b39d36dcee048adf581e7ce55439f4b611e7eee8c24b9bf0c5000fb994c460877a8480fde0f2a665c4e784862141d02c79e5393f4c12877b
-
Filesize
279B
MD56bc6e57f33029a8dace694182b867446
SHA1badf44e8348e53b6bfffdbc6100ab59b24136804
SHA2566934e40e63b330f0fbe501d6252756f88786426e5becc3b4671a7b7023d6f9d9
SHA5126fd983c7351957f2728a398a0ee5df770a04336525a31a94885a92028124abf6939d049d9050b39f55ce15dcf779a14552bf87cf4b327041ced27ccddb1b56b9
-
Filesize
230B
MD5ee473ab0b43741153c868b14a2b06ac2
SHA14130f99984c250baca47fa4ddffe68ed0fed1c1b
SHA2564bc7570cf281d58baf3ab644831365c001247fe2c1191500f2be2af554736bb6
SHA512e5e338812ed9e14f5076d1f05074d86a77e03c4e8758b8521753647d3a395a519c58f69ac96200e7955885aa79dfe9ad3ecb9e5193a8259d2e9104bb11c3a05f
-
Filesize
54KB
MD53a8a31a01159996c2b8bb372d95da7f2
SHA10fcf89d3ded5de97b13629a6e87e357b63d8a954
SHA2567bdde6d2467a5b72bbf3b9d16564c2eb9e19b48b7f82da5e112efb30a9cd2e85
SHA51267b9061c7b3d54129570287da5213a3ab717bd5009846204110652c6f7790654fb350f653853f0154de7786558b8779719f6651371c10d1540af883134882bc0
-
Filesize
61KB
MD5b6e7ffc658f1103f8b780e992a89c683
SHA10d1cb491babe19c85abd87a0aad07a7fe20a7f01
SHA25687874dd1795248aaf563f34fc02601355ac2eb014abde09b4218298939800d0b
SHA512cf67316d549b05805b3f7fc4252bbfe242c87fbe74ddb2c862157f07535ec8027574821feac74645244edace45601009749f2a69dcfc7b3b0aa1e2c3263e97a7
-
Filesize
287B
MD595733bca137e5f02279401313695ff34
SHA1e22aa6c98677ef84d61f17c22772d4bfe4dc5cb1
SHA2563e3b2b5a0bcb6d491b1675c362a0018389cf7e5f33f294ed374e26ba36a743dc
SHA5127a2c85d62eb3e583205033e16c8b005c5fb16be5c05e52680468fc411da044e69dbe3595df24e0f133160995d25f9fbc4859dcc8547cb2185b43a4805e745c9b
-
Filesize
14KB
MD5102492e29f1b6548cc33f3bbd81d5e68
SHA187dc0c0954610a88f60a500bfe741ca81dd88417
SHA25616de3072a3bb76b70841be41db846f2630e7e023c2c45c3fa0e33f08fdbe78f9
SHA512d9632dfdad5f295ffb82b79ba4ef174c034c6952b964febc69ffd252d930890098fa5efd7e8fd1cf26dd249cc26f60d797cc8aade5f74d65128c4dee34f27a00
-
Filesize
225B
MD59a097663fe23beccd19f599a03e987ef
SHA19bad7c915c23a7e7fe002b0e22df44510ed7370c
SHA2568001d2ef3f99cd380094b6a2966e6d4c8d411c91112955d99f9626430b0d0296
SHA512dc739c2e969bc6a84b9736573272f013d7aa04f7504e26ca6be01a3e5aa6653e8ede131939e46c5526749b30e778d8415c62eda2e8103aff0d6c2985fd8c0653
-
Filesize
627KB
MD58e2ee96d3f398232169ee0bbb4eb0816
SHA144e3b395b6a79c109cd2b16deb77c3a848ea5344
SHA256f86b0d88431bc90b46a46f55258b3ea18d0e241e8aeeb301eff8a90ad8896a03
SHA51223d784356ce0561fe3966b5bac4289fb5ce854151cdedc608f0bfa7afe75d24a1a514e5fe999e35c88ab336ad2b4513c9da6ccc90110f1e7ff389813a069c581
-
Filesize
23KB
MD554365bc6b635aef2074d087b5fcdd857
SHA1c43b154c49b6d309fb2a4f141d73cfa1276b34b3
SHA25604a6a870465ce371f793d8b68ed8279121f90d1a2984862decfaf3e3fe1d6647
SHA512b69a927de785ed0f54f6d8d86f678f5fa61efed2acb82e42228a8182c9037bd71f4144abec69763d508815aa612d4493213f7a08afa3d8b2488db3fb2bbbcaff
-
Filesize
249B
MD505a94c9ec10ab14ba92bfb9a5d921960
SHA17c1d58545989881276955d4f67915347602ee8fe
SHA256107c63b6dbe5b0a88e3782d2a9c24afada0ab9cbc71d6e176dfc93950ca5a601
SHA5123e3078c68e3a82b14d339ee919fa0e8bb00c05649e3b2dd30718fda2b1e241b0305a9dfd87be12b42ed79b751ba77186ce1eb2ce227139a7d32cb1b9b0e920b9
-
Filesize
235B
MD58fdea3ff958416a2e28cbc2ec6e44d91
SHA11e57bd64a1190adcec787f1087c618c051286911
SHA256ce0e4164e473b525983de2e3bd1eecd9111a68d649e0c941a188480017113b94
SHA51200c5645b2f7673b944130673a6d02233958ebb4a37634305b94e33a89a6c15b1d8fc48575abdeebcb30ce21090b25169f11ecf262a233f099bdbf39953eb1624
-
Filesize
36KB
MD5f4e889ce746b304661e3cbe8967ff021
SHA17629df339f7dad48a4d00ae89e03e5f891312b41
SHA256128ff2345eb016676d00c4bbca98bac985d8aa7dff69a1dcc26d35c945e8c398
SHA5129eaeee03dd9da03116612e400099fc45b59b4002e5cc53a15de236be3b0316872a80ba8ed4ec9272ba5243589927ecac92270a3becf15ef0ed7048ed13e4408c
-
Filesize
229B
MD58cc5e9f3af897e0ced1fea3b29f33024
SHA14a7db2356943bdd0a66d001f4a7d87aa6160f285
SHA256d58395973e845d9b1df8fbdac68d581137024cb5dc6e24a2b507975a9411fbe2
SHA512df88c4a0623b1b6215e68548b0f9100ef6b12954142b43afe6797ab91298fd1ecb46808d2765b11bfddd0029427019d7a6dd2ec0efc4d5237c8975667c38192c
-
Filesize
39KB
MD553940ac0bcb078f2470a6a39ba74b610
SHA14fab2285db660e29a5aa431abc0ccd2557e1dcf4
SHA25664e3b11336980a300fb02f71e048e69e5c9d83de82ac87c1dfaf6a879257aa43
SHA5128d911878d1fe35846b6e278b9567c5490388caa5842b1c3b68caf85af6d23641b02a0c8e42bfc5ace72081727d60505fdc37c8c6bfa8c830fc6179e4158580a2
-
Filesize
238B
MD53894d30f55218368c327526dac7952f9
SHA1a0dce8e7ac56d70a2f1c627c76d7e2c1c40a4935
SHA256951fe409772e6372988bfc0080389f0d5ac4093579b97fdef0394b6361b906eb
SHA512980abb0e359687957814ded07479d0694a4b3d23524a636b4ef28aac2ce7f69aec38cb67f069c6589f829f3c022808037915c407ae0140f77bbf3666eb5bb795
-
Filesize
251B
MD5bea46dfac4e89f63a21bb106337f51b9
SHA1bdf2cc9cdb5dbf93fa66e31ff59ed73acc016365
SHA2563b6f63d449f9a49abe695985cab194655286d8f5565208bff97c1571b5ee8856
SHA512a6da338eb61000056b522934a3ea33e82f9f6159f1cc21791b841b8c3b89751fcca9951635c05e117d6b473d001c92e590cee5da8809890c207cff4b00f06f81
-
Filesize
144KB
MD5d654423347161021a3498f54e62ab265
SHA10bb87b736f0a4ce5d7e059d3faad64963e4fc23f
SHA2563ec11656cab2a766dfc187a8f7c2bc4bbd7ba0fc99b0ad532e212b98bbfcf778
SHA5128b56f14e24045048673999a01e0cf1bca737149e1dbd29bf3e09ad4ebc75f747de0e2add8fcd290bbaf06ed2e97d2bce9a56cb9b1f621c9c5e252681a1314207
-
Filesize
62KB
MD59758b7d5a409921cea6ace93e93d1b2a
SHA1e49ee09a3d1811e7b1c8a0d12a69e892aef63b32
SHA256c9f9e4ef90fb686d1827c41ada648ea867c4bc6655677eae0e33750e3595d10d
SHA5123d4c899f48468a9c97902536dd7a0be07f5f44146afcdc925f2c2749257c5c5aae57fef9846e0fb8fcf8e7678537d991531de30f465b70f929360515fe1ea6aa
-
Filesize
237B
MD5bbb24acc89f1a5489a10fb825359fe08
SHA157c1bee75f46f7e4454dc0251cb4e3db519657b9
SHA256269196fa165a73838b79ed3742659a72633e2d973dad05aa3e2dc2dc2ef13c4c
SHA5123c203e2493fe8015454a5219471ba3965739c1ef9177d3e915aa3a602d7f27236192492a04395b27de4961807cf2a0b35a01e129c355b1c7986ae489cd6d94ac
-
Filesize
100KB
MD51e4a915dde9e8e7d8df7bb6612f63903
SHA17d9778a8b1c5ec6692d157a9edaa6004e09a1832
SHA256c0289be19045c8162c0ea1a826803277495f61afd2bc65d07fbcc7924d7180c3
SHA5124a0e3eea2aac0ce7717cd6dda1d58bb26a86b162e54872eed725a3d01d705c43361acf20d8071afa16dc54b16c299facdb6b06bb7e1576c25cabac62e9f09d37
-
Filesize
291KB
MD5fc31e185cd6e5631769fd58bc1098cad
SHA1594700ffd725343bf076068a064c6b4fc252f7ce
SHA256a100203f497bf17a1498b3a8482423687af6f3f087327a83afaa246d9e7098aa
SHA512439233b973fb1e8c177e5d2aea18a65e68449edbf8c5faf59a2e96927636cbf8053bf2677af3500d6faa694b2210254024ee408bd6cabacf69c1c43047dd6c4e
-
Filesize
1KB
MD5753f0f7474deface9e9b99475f7df2a0
SHA1d8b40a96a7bdab056f78cf956e4d04f169bd21fd
SHA256071c89293472571f5496fc6e2fe4af43309872fce5b7d9a0fe0fa5545d5072b1
SHA5129697e021e4d4fa2993c5ad15e5abceecf36ddd46a1a79796ac3b81cf97c44d67b49dc8c31dfea21e8d47bfc9c45abb58191a1dd39d9394d40b798a59b97c222b
-
Filesize
1KB
MD59cf7b90f09714b64b02be42242e56710
SHA1f0b7b699fe7bf54f157dc3375e559d9be76ebdcd
SHA256c41893263a2a6ff0473718372aa6b7e60d470213b16980c77429f416af9bc9d6
SHA512de4f162912bc9e061e53e023feac4c7a8758b090019d2f54da27fcd5c1da4bef6c50418c6e4ccccd7bfbd5888c01487565fa06028e74ed706d373906a1e7fb26
-
Filesize
48B
MD52e97e53a2a208b7a01f349cf974940bb
SHA154b37cfb551d2c9388636b7ad4259a0ed23c0e59
SHA25675c6371b89f6a10e8804d8459c9c331247b31465927acfe4354878c91e8f32e6
SHA512810ae02e8039fe639fa79d7b5e49045268925998292638530e7748f0ae2a88193be1996a363248c1eb74106c40104726fd63cabdbfd3a7e2c8d36e6eb71d0448
-
Filesize
1KB
MD58349c6ab40422d865f5a5eeb3ae6e53a
SHA12b7076ad3b3de3e4305deb6d2e95ab5fd6880853
SHA256f91a6c1c2245f3b32cf434afe62463acdb9e30905a434269d73c069a8ec594f5
SHA512f5de80d5e2ddf33a7d4bd1bbba6e2178c007a4b6b496b7840637e1adc4a699b290edd50a34805087ad9bc6599336cd87f96956c8ada4fe80aa51e31884e90767
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\js\index-dir\the-real-index~RFe642377.TMP
Filesize1KB
MD5866c4864a22ce72fc8e90c10c5081619
SHA1a75933248fde6238cc214bce0bb432cc99cb7b62
SHA256f016765dbab2a8c3fc3c2781f3b4d702bf02c7b9172cd762524ceed752674c15
SHA512665dec97594dfbcf7ed8e85eeb7a339822ee7fe04d1c015e79c9355118b743dcb94d51f47ba3391082cf1fa54627ed2534eb39f5467e8613461285c15a4cf5ea
-
Filesize
28KB
MD587ff52f108cf4598380cba2566400fc7
SHA187e66966c55499f121e30fe701fea23792606a5b
SHA256bd1dbb5b6391098efa4e19525f64ef94341851e7fbbd4834481572c12aa7d481
SHA512e45179875cb8af563659fb965662e80685b1a1d59e10e786ea75b1164fb463d57324e0b5bbaa01babc239923fa280e0a07fbbc96214fba599208d6a4bb324c7e
-
Filesize
18KB
MD5e1b02949a6407fb0416bcb9553c41b27
SHA13393808c9ef0adf17cb2213c811cc801a1c89fde
SHA2566645b62e2d17b6588ddab35b98f66ab05e7be0bfdac7d24fbee241d5175ae478
SHA51229c4a5fd0558258d5a2eb71451bc93d96fe50e23e216823a7ee82c6fb468331d9391578543be0078139ace46ce195dfd01e21878d8c4603b73e5b545a0f5a500
-
Filesize
16KB
MD59f5ebb1c171af44a24f8bb0448cddfdd
SHA1b83adc866f7ca56f2fe71ee84dbc7fbe269dd72f
SHA256bb9b07244a7d943d9dd5ae682cb052ef047f87821204550e01d332abab47e3ed
SHA5121a5d4037e3b8430f90bec472642ad9506c7e6e274a92d634e5a110c55f710ff9647fe04822815d7d56a9f9618839ef3837926e5368fbe2a66409bfb00844dee8
-
Filesize
18KB
MD5724396beb171901bd15eba2697c2bd18
SHA13a920f80ddec9d4bd84e0a4585958472f1c65896
SHA256ad023be440428a9a4a8cf6f08d253adef53e1d6d5c3135a61a8c3dbbefd4be81
SHA512a369ea185445794e66b32bade579df882f0316ddd6c9fdfe843aeadf93ad49b8cd8f628b5aadcdf004885328c0516b8ffb2a40c360dba5b1063fdb0444e44ae7
-
Filesize
18KB
MD514be14872d9147652be962f04508541e
SHA18ddfff2e16450c2f578d2c69fc63934204d90c0f
SHA256c2c3dd6e8a63c074e47688e7c36a4d0a93539591b1d5ff07fea5dd416c4f2a38
SHA51260505041be0c5b5343528a95fdff7b366bc15301a1c587b2abf4e9e0411f6f78ab1631f4d623d3a3cc23b4dabf43f0ad331f61d39ce01f69200a69db9c6f595b
-
Filesize
18KB
MD5a9f1d5a2a497d4f7ed7729b6ea01fcc3
SHA10682a13d74c266cbc4c2653efc9643c7a8d628c4
SHA256ee1826f24847dcd6c6df2a27cfd0a4e62ac4f0dcb76e95d7b7778c52731705a4
SHA512fe6ecbacb77a8c3adfb876b945f492ffd20b812cebb22b2af76aacfb08ec51447d833e9dabdb7e89e5190221d72016c067eb09834c5ededba16f29faecd83c69
-
Filesize
18KB
MD5463238ec3bf30effc3a54b51bd1e3763
SHA1cb821b22e5ceb4528401499cea9dcb15a8731480
SHA256b08486b39b1d2ef6ceb76be21648926e12c69075abbcb27b39487ecff10516fb
SHA5120ea920a56a432069c0627742c441e457681cf8a5769eec18f982f3a9389f6b97e86b360fd12c8387f23d316ab09f86e8c2ad552da5b96e92cbdf082abd91c287
-
Filesize
16KB
MD5f9096dd4f5a98f9a3f32f08252e017c4
SHA1a9bfedb181e39fca0f5de1827823a5e6b1d8faee
SHA2569e23de6310dc84ed68bcdcbac62035b689847b34e55fc317fb0b4e7a8d3493e9
SHA5129a5f04e0e3a4f1ef4bb4f7662850efbb3dbbca33cd312764d58be4c94a53e80f71ec78fa3697da73516b2c131a768726eda5e166479a8ac3f7b2e31f30405c71
-
Filesize
16KB
MD54f02d07a1cc4aebd01078b382a65535e
SHA1484854c1518de7b2b4f05016a655c51355ae015f
SHA25615407523a15638e3cf8f0d65cf6974ff1fd3a14b5c485c6d36a08d68776ea260
SHA512d75979ad1d35c33e630b7875f179232e94ce0c7433bf66eb7888103fef931d2d9586fe8c4ae23f6442eeca8be326d62ea1e1fa5107c0bc6a291b23a0e33414d6
-
Filesize
59B
MD52800881c775077e1c4b6e06bf4676de4
SHA12873631068c8b3b9495638c865915be822442c8b
SHA256226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
-
Filesize
3KB
MD5f2ff04f2e632830613b3b09d4c7470cb
SHA140797f9260513af04c8d486226482d99c4b719fb
SHA2564a0559cf11846894e56ebcd8fe4afed13947f439c2f405770787aa3f9f8b9e88
SHA512df977001af6b64885faa854aab4708806e36cfcb047ca513c21ac8eec249aab60c1a4d0230fd4225b2ac7be91a908e1529467ef1d994395c0c31ab42c0de8b84
-
Filesize
3KB
MD54f0c97911637584a4a7429a5bc9ed9a4
SHA1fe42a1f716e1b662d7a7f1820f29bd176257eb9f
SHA2566eb46a6481b6ed84565e53782d9e4b0a8356b858abc0eba3ad6b22cb7b86b5bb
SHA512a8762e2e28939b957866f0e077fc998b94bd5bf9257ace2e097b676448e56e25cdc5550af29fd9d00c35b4eff3661e38abfe4ce3e721cd99a3b5160f57fb82cd
-
Filesize
4KB
MD5ce5459c31e800badc3bdb04494e91d6c
SHA1159e025f75055afc88636061f9edb4691a934acd
SHA256025d7474a18170a82f668073cf013f7f78a4749429b7088d0b3113a400fd805c
SHA5122b95d89adbe4f8d4d6165ead2689618b4ed9b0cf698db20c2c629fe8372c57973294aaf351d9c55a44f2b16b7316703caaa968e66fe2ab89fab0c4f202b7f634
-
Filesize
4KB
MD5e9db0bcc02293fc42feade5641bb891c
SHA16185c9b5c3d99244c05dfbf8b74d6266a380d515
SHA2564e6e56af1c59aa293ce8016f1e3d2442753d26fd8c56377f6d61b56cf377532b
SHA512d1fe09b039f8de01e380bf9d0a5428d22c136bf7f7a6eb136cd2b3e05cb72cac7e1d4a77d9e22deff659159995a66c6ad7ef11402b449ebb4ac884db42dbdfb9
-
Filesize
3KB
MD547216c5c790f54f912b6beac006a4be8
SHA1d426011abaaf8dad4c47dde6a7aa23d90a465717
SHA256cf642ce19b4917954496a9aca78317cb76413245e8f5fbcdaea53964b00f8122
SHA51213e32e7938e8218cd08d28bc25c0a051e2e8d57a7918e69b16f251b90c8ed27f923b8337b01f65eba564645cd2181969b3d5b96a3cf2659a132956c775676a6b
-
Filesize
3KB
MD5f74f6f5ec2670dabaa2aa098135d4ddd
SHA184ad6c75e782ddf63e5e95f82fa59c5306f43a3f
SHA256ca3131f60c75bd44f15c6a7ed90e509983ab3f216addf7710e57043e7bc9c9f9
SHA512cc2664075dc97d3ddeaaa4596d42724d7228998cb65d193c1f367f40fa8388277fbc27bc2901a68330fa1db6150e977c380504507cd2ef9347e3c81d724910ec
-
Filesize
3KB
MD5c2f1de62a5bad6c0358f97c4a1ea7696
SHA1e4efee998e4e2239f4a0087cf4e6278037e43dd2
SHA256dc26046f6529995526ffe6dfb623d00130d2a0c0cc9f72c072a0769b51cf40e0
SHA512bba4ab6117901647461aa7240db25c4962e570415a192c66198848fd2d0f69f4e5cf3a73c5f7aac2d31448c002f0df6e676468e0a160f8eec955117c768b8539
-
Filesize
3KB
MD5895bf24aad069e2e4ca49eb400437193
SHA18e51ac3d72399c03dc31e5bc6580480ea7aaa6aa
SHA256b61abe6740ff6ff15fa265fb1722cebfd1801f305bc810a0d68658993282fc3e
SHA512278057883072be49ec9407d190aff0d1c0f81cc163f90a14134fc23da58cc37c5ad710a081e5b38811236bdcbdd1e8af7c9b65e30bd61a97f5e920abaa687baa
-
Filesize
4KB
MD58b21812b4001e427bc258af07be0c205
SHA1c655ac1a6649ffa859145744b32bea6afea865fd
SHA256f48aa9c9efe66ec2874d3552cb784469775413291bb8a3cb335587d21c64b784
SHA51256068c0007855096bef08bb3128e1a12657941a10c794168e3eed15b59065bbef969d626be4b0b993a6a742c5e3e725c8d67bedcf16b8cbc194a3891d2072c14
-
Filesize
4KB
MD5401dfaaf435c6d165467cbbacd1c4171
SHA13d6d2b61b64f3117e97f1b4915e5e4b49c74b8c9
SHA2561f3478dfc564c42c860ef410f236ca02201dde534f3117630dd8827eaeb82127
SHA512aecfefa65e2e64f5565f45e1d53fdb6b97ce68fb46dd55433ba87f7cd472fcfa3c6b5aa400de5d0b7a2aac25a35e4280430d1ae93faf697894323e2d020ac34d
-
Filesize
4KB
MD51c05381d349b6ddb9f0700ae3ce7e58c
SHA106bd8dc6907ef0f1472e9910656d0b8c35f51538
SHA25656e781cf58da92d007832f249b89650271c66846d08ddc35fd710c37d4f92973
SHA512e049a30fdc48bb948bac857999e7250325f1a322ae1af881fb98aa95db002bd6733f8ff2ed124bd453dc3082d53e4a844e2af4d99f190ccb9a21c376626c41d7
-
Filesize
4KB
MD55c6652e02315faf6a4a5cef0265c915c
SHA1fb5606c0368f5a48e3a7de727595fd19073f4626
SHA2568837f146d4215f207b30c573fcb6e07ae89d05055c1e0928c4de6212533ec5c5
SHA512d5d1c3d0818d0f07e5e6983736fe12aea8dcb30bcbede818988fa19df7dbd40b122b488fb759ff82555ae1189aa8f5a5fc11209fe38428ea6ccc55f0b1c2b026
-
Filesize
4KB
MD5fdb0b97adc5cd73f3eea99aff952ab8c
SHA162bf59362dbec78e92ac0833dbb3d3f6b2c8f10e
SHA2562a60e693d4cbda23f416a3d8579ce2f888729ea6e22098cbbb2d3adb12263593
SHA512c9c2c084bd901c9e52b8184e5967e55d4076f8d35b7af5da3307027e2507ded2ac9a16352e9ba4e7681cd75d6a1544cb9d67f0aadf5a3008e786a0a9ece395b5
-
Filesize
4KB
MD5344f1760f2f1a13735b2d9f20bc792ea
SHA12a5a9c64a1d04509b94e800c2d7ad4a1a4ac7a60
SHA2566ce615f84138e526362d13cf6f2b85851a1cc342bd6fb75138ec8cd8d3dccc31
SHA512c4318193bd22680a099707bfd5be05b7e6c46ed9d570ccadf4c11d8bffb14f71f9525b76b2b2be4c10da0a9333eb081299d91902b3b94e14f17fd2f98ce6bc5c
-
Filesize
4KB
MD51c7c60af151a1bf5d65654730d470982
SHA14134bbfcd2829805080084ae477135d02bc21d60
SHA25645991e98ca9740c85ae9d8f87673522c659961705ff5d8d066661c00e37e23bf
SHA512f521460f8cfdab9ca0ba69524d560dd657f48162ea3a9564f2827629fe5d155ecc48a2ed89b6fed88d0646093d508b48b209bc8b1aae0e69a7cf76bd3bca2386
-
Filesize
4KB
MD5114f8a2f0c569f1640a8fc1436356206
SHA1e6a4a57617f67addb8fcde71ed2c41d8059a45da
SHA256a8ea987f360996d2f6e80b72dd7022c5f7d2e108834af3f4bdc1ba0cd7d511ba
SHA5120ef1ae2c4cb419fe4bdb75aa0f98ccd4298d6db1e7c70e9d65c53e80698882dc303c6068b7e8da440cbcd8ced407de2ab234fd381b65ed2113c08a9e5df695c9
-
Filesize
4KB
MD549890ff1780f67f82ac7f56d736adf50
SHA19a9b67a65eec703b0f1b6bb5092ac9d039403010
SHA256a5951f922e14d28f07343f464ee473a57f42a0fc28da151f40b9508755f50c0c
SHA5121814d0cfb0783b1b573ec4f7fb7db7aaf0fb68ac780040a010c8db7828436ce733b7a96a7575d74c6ff73a06155b4fd8c2e693a09a32268644771b7fa127071a
-
Filesize
4KB
MD5fab6f0187f735a419c46a1b2167948c1
SHA1a7ea7a468481b18d981f87b7993b30227e392b85
SHA25636121d9a3005324c28f0b8a0931d90c47bae5de56a73b380d5004265d914c726
SHA512ef18a4460cc25122575e98f94a8d1addfab0a9cbcd74960b88c2ecd53308dc2f599c5e563ae6ce13f77632fc1ee4bf2912f770043022495256c720c4653ae61c
-
Filesize
4KB
MD5779ec93bbbdd5928d74356391653f119
SHA16ced24cb8add6b68766a379ac3b65c0d3cc8b8d2
SHA256a13ac75909124d966dcb398496f8d6d6c81891f8d9618509968e3d74ba6e7bdc
SHA512ef9b8e84b6f07cf44d289aeac4378d4dd95ef7ca93a3b36a652e6009e6cd0c37bc3462514ce52e1931299096622416d4bb04096d59c2dde18f91e98e4196ad0d
-
Filesize
4KB
MD5603c85d4c6fc6d8b7cd9de6122e03ff3
SHA12dcbc81cc6b0ef9c63f14bde6c3791d70066bfe0
SHA256cedd74d7d36a1eceb5e8baf2bdb3aa5ae99a152ff49fdca325ead45f2dd157ee
SHA5122b7e4637c7e5317a2bbc16d6955236be297bd655f5a739e02d73ed8e0866879aefa43e4cc987c5af8e5a66e0ba3d78e61ededd857e0fc3a0022914accecaef4f
-
Filesize
4KB
MD5474fb2c77c9231a34dc4d25334891461
SHA19041ede6f16bf79e496219374a86bdb24440d2b3
SHA2562a9edce89615488f3c6e21fec415a907620f527a7bec9c83e55b239afb1261c3
SHA512288011588b98465ffeb0a158c2e02d7628e6d8983f60bf23f820bd3c9a313a928dfe40f7c43a2eab9aaf2a60f38f359cee9117d30a36592b6da95f859f5d470f
-
Filesize
4KB
MD5f636a64ef1aec30a54f611a60f10b70f
SHA16c1c5c3cbd57b9061d59f20d06cf1431fc84eca0
SHA256b1daaf56fbac2dce206e790290e081ae3684c500e513b48d9f28aaad013958d9
SHA51270939f40d1f1b6cf15826e405a29a359b70502dc51504e3d354a547a0f26aa32ce74b56afb6d13921f79bf3fbe8162789ce99cd36ad3e6d2e8907f646f131dbc
-
Filesize
4KB
MD564949f2e16dea3d6a9010cf99527e0a5
SHA108dec612499deb605350572f43c9be0e71f1249e
SHA25670ac30d59df60aa52e801a7504980011fa44f5678b694441dd451502b96e02b8
SHA512633051ce43347bd6aee254e00ab56e2482c2185472ec1e7f225ed9a9e11d485c26aedc8486cc0fbbdffa9e0ba4adf9915846ffe62e631ba14ba00b9e721bea3a
-
Filesize
4KB
MD56e218e7ec37734f5e14425035b07c66a
SHA1d6b0dd3c261cb47c7271236470680275f9a1141e
SHA2565bda5ea0022e5e6203932f55a096f673310d2f35ea534612fa74c37ed632ca04
SHA51270edcbea43bc14d2377b115dbc305216f3e08c2fe3dae3646821ae2dbba97b9d6afa43879ac480b19959790cd9ae2de5ed4015bdad6d5800c341dc00a7d52a67
-
Filesize
2KB
MD599b4d182c9a6cc69b5c9202f7d5b4187
SHA1cb978e8eed5d1e3183f67b558e3b59775cbbdd4a
SHA25639f8cb1de4173269b3a453d7294ebccf4617e9a291f181c127a4b3ff70c00bf1
SHA512e7c57535ce52bd3ab1153b4eb2f1d8602ef92a9d41b4ea3ecf918ce6c5b7fecdfda6450dcb513b67878409a13efeec1de02a635f0047981615805bd96a81181e
-
Filesize
1KB
MD561343d20816222fd98cfc5511449d2d8
SHA1276f5cf9709364a98a8b0fe148eae2fd3094dcd5
SHA2565bf4f0e11d5fac491a06a3c80f2d29cece3df1de1bf31249699163f399e59e25
SHA512cfa8fd39b0e2766a1d1a2d871b6d1cc72d3d8efeb7ace685773f5e631076d3927c0276f9e86ff2bea2e4f35633ed226d338a549c438f873042a14ce4dd0d3d84
-
Filesize
3KB
MD594095a14b7473e6f277526ba23d9086d
SHA19ffe69f2b5bd9cf1359d81d99aa505e4544342c1
SHA25660aa75924c0b03a9a64e9dfc9bc3157cbe3efdf4429cc45142bba8487274f3f2
SHA51254df063f8f506bd2bc43de86004bd179a0a8af8aef397e032356518eea4940a5a26ac423c863689811cdb1aa6ec99d592dd17b70aa298b5e50cd74465a870058
-
Filesize
3KB
MD53b7506c74b227009dedb3fd67b9924ac
SHA14f9c9dffbc238f8a7c514bfd67928f861b893789
SHA25627b548306692acbcf4dd6a8dc9348a3b8ea2576776c14d7809ea2408a885520c
SHA512dc92404dddb08237fd4ac51b55bfa87418bce75dc7337eb87d87740d9cdf47fd67fb55ffdbfe707b02c40264b284b28261abc32cab3ba2882ded2fab4408675e
-
Filesize
3KB
MD51362a7bd95094aa938b8edb4abccd384
SHA17510d61dd81c4878e70143f359ba7757ff111028
SHA25645da70d7ee4bffe091253a7b72fad2872757ad84dd4bc415e2905a4a205cab44
SHA5129cd2a9f5dbec1f9aca738e2a89a94ea34dfecd6e99af520ec2961addf6f94a05b5106e0b0f15e4616bf2adf8f32e778d8f2474d06324ab0147befc13dcbaa960
-
Filesize
3KB
MD5289eb5a2e6252d2ca3f6be1fef33c45e
SHA1e1879eb879751e1282b8af1d32ce349812736178
SHA256ebb05877cfd10a72ee87026bef21c9cc11ee2060eefc3b5db21d85b6df616825
SHA51231b24667ec015381e18eaab5d4f106a2d56ad6655dd208fec78d6b4797231d34cf53638733e3f6104d7f3472d56280173a9460ebc78fa32de16cd27eb3f0d33c
-
Filesize
3KB
MD52f1e3d715c59ab6e66f05429f614cc5b
SHA1ef9b8a48b13fc37bc818d645afe76841b55ecdf7
SHA256603531899c49a8f7b4bd38ff546a1404725ff0898a1519befd9478a16db2cde6
SHA5127ede83aa13cab3402a4ccd40d5946938846a69feec3430e8bb8aefdf3b66775a4901f63e8c46f9ab7c1a5d1ad01bace2be0e461acbb150ca2814f8e76f2e04b1
-
Filesize
3KB
MD5350c742fe3729de7fa963d8701ca6dab
SHA1314fa1a3c71cdda437b25c35010dfd1f72ee1700
SHA2561ceb02fa52307bb3cbc7299805e1573dbab43fcfc0239d19233d0b0d57f00aad
SHA512dde2db8e30c2fcb636ede3e5cc23798b9c08771b92066c2812ee2bfd676bef08411b9fe37284b7440cf7daa3e79ccf3951656c62c65ca102aa1be6aaafc2f60c
-
Filesize
3KB
MD570fda368d9edf1d20e65457be8cf1d58
SHA1b5b082fe268a2d714707d88a627c6c2106c814f0
SHA25691a15aa3e0edc5160f4107b80b21d8387dee83455c94fa7a97b4d03db0c01ca9
SHA512d17c98e0490136c14ff4835f8e6d3805de96a34881004ef8388fa7e97838e1fa926ada8aa4d7b68a790e0eebf2d26e8012fd45ccb2968881bedbef5eead23dc3
-
Filesize
3KB
MD597500f9d30969a19f037993aa2bb2a24
SHA1406ac6c748f2a167f6e8a9525ff01af4214899ad
SHA256e75e1209546bb4ff8b0d617beed14ea769faf1902382224854bd2b53c141c235
SHA512acad73cd50972218c76466d2937ff963f39374a5dadb7557c64da9838d1331d38ad81437cd8fd104e5a748bc6c83b63951cc708da28d1290e8305449b61003f5
-
Filesize
3KB
MD5439dee51906bcac0cf8b3de7dce1cb37
SHA122b6c70e0c07207c7b68aa86388246da127566a4
SHA2562e5b654ad8d118f1aeafd26dc0fa1590f8f76867f262bc7348960f77b5aaccaa
SHA512a78f7e8579da6f70b0a95095c39edfc2d369acaa81ffa5e9afe58e7afba4555065396eb51e3b0a75e9bdc980e0ca22e23c5fd7697e260c7f56272bc8f0135381
-
Filesize
3KB
MD53cd9fea1b9fefcefb4e6e4f997753eb1
SHA1e637146c1de584ff826bdee795a76ccebf1f37d1
SHA2565102ea2983d02a79feb21bf3dd723bf17c61cc4d6f3b2c4fac93322f802fa65f
SHA512ebf08c9263c4019fd59bcffce1aa3c973a1acfe0e8dbee14585221bf557d3ddc9ba1f6e23b73ad63c264aad2dd5d322265c876b30e19307ac6d1364698c6a0cf
-
Filesize
3KB
MD520413377fdf9a63309b42c6a2c13acd8
SHA101722f02b23861f6e2abd3038f41fdf16178974a
SHA256a93f1e2145d54fde7eb2389604e0a1a288891488c1472c3349485893b1a89624
SHA51299266489317c1398e5d0dd1ae0dc61849a3f310ff63c40d59710f403f646251ba09585d03812e801111177e31153440675a221544fb69c161c355d859d8be8fb
-
Filesize
370B
MD5d634988ad80066a357116c40c5376d9f
SHA124c08f459d4690f4536e0f2ed80745740e2acc40
SHA25613779773460bd05a220418067de052e2e28bfdf82715ba6b889d7e5f98e1144e
SHA5128ca9097424c29878d38066c4c9519277db28d3c790ae6b252d4a6dd534d6323ff819b0810510a5fa3703ee526f592646d365ca753fd7a664c7c0244f91effb76
-
Filesize
4KB
MD5f88f3a0cb391b440e17fa48b0ae7556c
SHA1a0c6632980cb6d5ce57ec783bde88fb46e1de34d
SHA25688c8adc7089b6b8a24e71d2e7df92afc6ca23a3702130bdafe4be5c9f0a00bd7
SHA512b0ab2f35fc61159f87304925005e98fa64306b2e8bbc61b2f78cc7613b384886ace2586a6f20e96f1e914a3ab73b131f9e798277ef86cd89b4ea057142164b0a
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
140B
MD52dee85ac19aebaa50662a4ba424441af
SHA1d0b03e28e9a14d48a1a9b206e92dc1bf1266328e
SHA256dc4d87159e452383f6e39c1b7dd2830c69457a547565c43cfd9e9b86f336f336
SHA512651d95e57716081376c14c26852e01997c77597da0e0350620ad4cadbf14f0a02956d7b3e8cbdf52a777b64f7ef7db63066791e24074d5e5b57a38af2b7c6a6e
-
Filesize
26B
MD5fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98