Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
132s -
platform
windows7_x64 -
resource
win7-20241023-en -
resource tags
arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system -
submitted
23/03/2025, 13:01
Behavioral task
behavioral1
Sample
JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe
-
Size
988KB
-
MD5
8715d5d32241ec20ab28776fc7f00608
-
SHA1
eaa03250b7dd818a9b285138ab74604a21f8fa61
-
SHA256
36019c7bc0dcf3dc1d8859868fcc2f8c1d6c60c800a4f8051912afe7591a9a64
-
SHA512
151a423a2205736a5b4135778517498e52d751522ecd1ee03ac64aa5f3373e58d067819db90fb856e7d9f8c8f66e880f868a9a1d210452362e60de74a0cc5998
-
SSDEEP
24576:AOi0Fw/oqfwUmPgkgciol49QHrBFszpFdPQ3Rg4PfSctpAV:A/0Fw/oqfwU3kgil4GozpFdPQ3lPfScO
Malware Config
Extracted
cybergate
2.7 Final
muawayonline
rufino.no-ip.biz:81
***MUTEX***
-
enable_keylogger
true
-
enable_message_box
true
-
ftp_directory
./logs/
-
ftp_interval
30
-
ftp_password
uelpa24
-
ftp_port
21
-
ftp_server
ftp.server.com
-
ftp_username
ftp_user
-
injected_process
explorer.exe
-
install_dir
explore
-
install_file
explore.exe
-
install_flag
true
-
keylogger_enable_ftp
true
-
message_box_caption
falta dlll
-
message_box_title
arquivo corrompido
-
password
uelpa24
-
regkey_hkcu
HKCU
-
regkey_hklm
HKLM
Signatures
-
Cybergate family
-
Adds policy Run key to start application 2 TTPs 4 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies = "C:\\Windows\\explore\\explore.exe" JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\Policies = "C:\\Windows\\explore\\explore.exe" JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe Key created \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe -
Boot or Logon Autostart Execution: Active Setup 2 TTPs 4 IoCs
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
description ioc Process Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{8OOUFY85-WQNJ-V5SI-0CL3-476477I58UY0} explorer.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{8OOUFY85-WQNJ-V5SI-0CL3-476477I58UY0}\StubPath = "C:\\Windows\\explore\\explore.exe" explorer.exe Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{8OOUFY85-WQNJ-V5SI-0CL3-476477I58UY0} JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{8OOUFY85-WQNJ-V5SI-0CL3-476477I58UY0}\StubPath = "C:\\Windows\\explore\\explore.exe Restart" JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe -
Executes dropped EXE 2 IoCs
pid Process 14020 explore.exe 14124 explore.exe -
Loads dropped DLL 1 IoCs
pid Process 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe -
Adds Run key to start application 2 TTPs 2 IoCs
description ioc Process Set value (str) \REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Software\Microsoft\Windows\CurrentVersion\Run\HKCU = "C:\\Windows\\explore\\explore.exe" JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\HKLM = "C:\\Windows\\explore\\explore.exe" JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe -
AutoIT Executable 2 IoCs
AutoIT scripts compiled to PE executables.
resource yara_rule behavioral1/memory/1048-17-0x0000000000400000-0x00000000004CD000-memory.dmp autoit_exe behavioral1/memory/14020-18992-0x0000000000400000-0x00000000004CD000-memory.dmp autoit_exe -
resource yara_rule behavioral1/memory/1048-0-0x0000000000400000-0x00000000004CD000-memory.dmp upx behavioral1/memory/1048-17-0x0000000000400000-0x00000000004CD000-memory.dmp upx behavioral1/files/0x0009000000016d6f-6027.dat upx behavioral1/memory/6080-6069-0x0000000000400000-0x00000000004CD000-memory.dmp upx behavioral1/memory/14020-18992-0x0000000000400000-0x00000000004CD000-memory.dmp upx -
Drops file in Windows directory 4 IoCs
description ioc Process File created C:\Windows\explore\explore.exe JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe File opened for modification C:\Windows\explore\explore.exe JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe File opened for modification C:\Windows\explore\explore.exe JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe File opened for modification C:\Windows\explore\ JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 5 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language explorer.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language explore.exe -
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe Token: SeDebugPrivilege 6080 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe -
Suspicious use of WriteProcessMemory 64 IoCs
description pid Process procid_target PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 1048 wrote to memory of 2772 1048 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 30 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18 PID 2772 wrote to memory of 1100 2772 JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe 18
Processes
-
C:\Windows\System32\smss.exe\SystemRoot\System32\smss.exe1⤵PID:256
-
C:\Windows\system32\csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=161⤵PID:336
-
C:\Windows\system32\wininit.exewininit.exe1⤵PID:384
-
C:\Windows\system32\services.exeC:\Windows\system32\services.exe2⤵PID:476
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k DcomLaunch3⤵PID:608
-
C:\Windows\system32\wbem\wmiprvse.exeC:\Windows\system32\wbem\wmiprvse.exe4⤵PID:1624
-
-
C:\Windows\system32\DllHost.exeC:\Windows\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}4⤵PID:468
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k RPCSS3⤵PID:688
-
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted3⤵PID:756
-
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted3⤵PID:820
-
C:\Windows\system32\Dwm.exe"C:\Windows\system32\Dwm.exe"4⤵PID:1060
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k netsvcs3⤵PID:868
-
C:\Windows\system32\wbem\WMIADAP.EXEwmiadap.exe /F /T /R4⤵PID:8668
-
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService3⤵PID:980
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k NetworkService3⤵PID:292
-
-
C:\Windows\System32\spoolsv.exeC:\Windows\System32\spoolsv.exe3⤵PID:1108
-
-
C:\Windows\system32\taskhost.exe"taskhost.exe"3⤵PID:1120
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetwork3⤵PID:1184
-
-
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"3⤵PID:1084
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation3⤵PID:1920
-
-
C:\Windows\system32\sppsvc.exeC:\Windows\system32\sppsvc.exe3⤵PID:2152
-
-
-
C:\Windows\system32\lsass.exeC:\Windows\system32\lsass.exe2⤵PID:492
-
-
C:\Windows\system32\lsm.exeC:\Windows\system32\lsm.exe2⤵PID:500
-
-
C:\Windows\system32\csrss.exe%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=161⤵PID:396
-
C:\Windows\system32\winlogon.exewinlogon.exe1⤵PID:432
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵PID:1100
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe"2⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:1048 -
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe"3⤵
- Adds policy Run key to start application
- Boot or Logon Autostart Execution: Active Setup
- Adds Run key to start application
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2772 -
C:\Windows\SysWOW64\explorer.exeexplorer.exe4⤵
- Boot or Logon Autostart Execution: Active Setup
- System Location Discovery: System Language Discovery
PID:11872
-
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe"4⤵PID:6048
-
-
C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe"C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_8715d5d32241ec20ab28776fc7f00608.exe"4⤵
- Loads dropped DLL
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:6080 -
C:\Windows\explore\explore.exe"C:\Windows\explore\explore.exe"5⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:14020 -
C:\Windows\explore\explore.exe"C:\Windows\explore\explore.exe"6⤵
- Executes dropped EXE
PID:14124
-
-
-
-
-
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Active Setup
1Registry Run Keys / Startup Folder
2Privilege Escalation
Boot or Logon Autostart Execution
3Active Setup
1Registry Run Keys / Startup Folder
2Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
604KB
MD502938eddf7f71f229dd0bfca2f99b6d5
SHA1b92c35ce4ee482e08b3dc8426185b03605d32a4c
SHA25694c47bda5f2299c169fce9170b5b42b1f35b0d379d3a7e0a6df0aaa5e1c724b4
SHA51241710952214a92da2d9935911be07665b18d76ce0894962c10961818a3a6daeebaaa377d85a2799b8dd68022a92ccbd89da0a2277cc2675b00757f24fddb9571
-
Filesize
8B
MD5182a1b395624560d46a7aaeca61f5083
SHA1c95a69de6e7e33e633a7e37d22439dc8a0ca3c4d
SHA2565efc561b2b7fe3866f5a711cde5499b4b4fe4b4db5c17da880cd73ab3a1cbe3b
SHA5124e74672dbf85ea068df63d345f43630bbf43a30af7d4ba0b88fe253b143dc29cf8ae3a4a7e5a7641743e3e02d5a355cda9978ae0185298d6bb9e3d093a753a6f
-
Filesize
8B
MD58016c9ae0bb119969d6bbf821d5fc9bb
SHA15077b7d7fffa9704cbcc40aa4f1672607e79079f
SHA2569348f3b110fedc81984781d606f841a0d4507d33cb34f70d8d97da20a41e113f
SHA51207516abcb5050ff11e65503997c7a3442715a9df3992b2d5763eec6a7303d76601a0c83c2d793bf6723ef9e1431e822bb0ba33e90a524dcb1f511644727c31e9
-
Filesize
8B
MD5c491ee1bdd68f1c9ecee28eff4feeaf6
SHA1f3c53064fd118b14c4ceafa763ad1c8177984d3c
SHA256d17747f47860d2575c7d284795c60237ee585bd6902255eacb1b9f94573227b9
SHA512414a6e431e0eb69425b48790f047365165150acf18ad0f51b8dd3e3767d0bba9d2138bf824b3c78d7320ccacc05f7393eabbce1808ca30f2589eeaca0c371d29
-
Filesize
8B
MD57ead76413b3736db449e370d8f8f1b9c
SHA16fd201271573d9a6f6d6d01b64a88487789dde70
SHA256e710b53ea953ef516dcfa04deb4f6a59b833929a68e900985afd3554da0596cd
SHA51206d222ce76b3cc812f1e77832b729543f51eaf12f3452587dd7b44b6feba63c8d539b298b6615c5d20f871d75a92685a286d3672f54adda478ba9d2c39a3aa63
-
Filesize
8B
MD53114ddc0fcb2a48c04fa5ad658e5cb08
SHA13f13b8f38573f546c00de7dc0a2be3abd38ea0c3
SHA2565897ac4e46268a73accc5cb9dac699701a5372866d483f0b38d90b3778f902b3
SHA512d7ed1db26c2a696ba4e32e9c96561d813d66bb091d2b8d055b0cd4ee93b313f400e83aea6032610f3a598869926e4aeff7f734f12a21b205e816fcf1999cfb27
-
Filesize
8B
MD54e6b7ff21137a7d2d3c2157b5ae45a40
SHA1730416e2e2ffa8c5942e91db607ef9caa1639e7d
SHA25630adc491258928ee8a5abd9acb30091ebf5a41591ff5c318d824236e99345daa
SHA51206f9cc24f2516861ec6ad88f28630936022b1a4bd772bcfdf890c8613e86bb956323eb04dfa4c5df358bb75beb6dfdb520112f2fcf1bd43c26ce0e3db2f49cbe
-
Filesize
8B
MD5e09537ad096d962eda68ec96d514344f
SHA166c2910f2d6538520492fae1f603de0590118da8
SHA256f7674b9ffb26c915450e89e1b49341a687f0b660848f9bcbe3d8de83eeb7b46a
SHA512c884e8e01270df29d18fb7ed962e46bca7b087c8e79ebb4128cacf307de62e281d955c7076f28fcd5adc4411873526d7e62ba79494c1ffbb809dbd45eeff1b89
-
Filesize
8B
MD59aa017ad522ebe32148e0580ccc1b62c
SHA1fbfff930d10e36b2e404ed487d7799984b595778
SHA256d0dff5560413bc4007ba1851de7af53b8bcc598f95294579c6da30a44271819b
SHA512df7fce27ba60ede1f0eb6212dc42273fb8ac07c73389e38c2c997ee61c32a8dd5a42d537751acc9406b92b78058371cdca127d868f7749f571c995b5ca30d58b
-
Filesize
8B
MD5e18cede1bc97d89c046867bf18c06d56
SHA1ea0693b040dfb664ee608e301beebce0caa4d2eb
SHA25605efd1d29eabe2f836c899384968d0cb07f5c67c296065570e2befc378a33afe
SHA512c1c5b8ad9c577d9a4e0ad34a15fac6fc8fd3c41f7beb0bad3fac79e47fd6cdcd2f5e035457e9ff9da6791de07c6af533644c65e0e428f2aa2d1677aeb681f9aa
-
Filesize
8B
MD5afc8aabc29d73510ed567e1a2ac7ca8d
SHA1274b1ab4aaac335ba9e003981602464f54662640
SHA256b3d29ce69e478f799aff684bbd15d025862a5f1c765cc86b9232d20ada754f1a
SHA5128a52aa5c06b2c5b355e5a04c284997fccdb159c6bb6ed66d7cec6292f504cf71aa78cf98ab01c886410bc547e820930ef102220cbe32f3777772466a811ae955
-
Filesize
8B
MD5e0b66d0f677ab3b98a50fcee42d5d591
SHA1dcdff5d773b832adbd4e50f34edd126ae542135d
SHA256dea28aa501359304349d87fdf3704707c85a999fd758449892f848f4acb101e0
SHA512dfd11e879596a712a51cfda24778f4f3e7a5be27dd7f26aff08d5836d1fb448e0ed54eb1a2567693e19d55d67cdb5376b3c6b6a6bd274256d3a71979973f8bf7
-
Filesize
8B
MD5ae6a320b85b9c661bba19fc3ddd0aea3
SHA1f31b4661f35324ed3cd31179d488cd5acc2c8394
SHA256b3a91c0d33ca04d0d937b84adea4bfee05c4f363b50538e961a3bc4e332455aa
SHA5121480363ab4f493306f5230203726afe4b75941d216de88c151b84072ff836a7d6a9f5e92518f4290820af569aa8f55631c13fd74559ed2e450f7d537f9e0033a
-
Filesize
8B
MD5178993d800686738bf492aeec8e3ccd0
SHA14155bcea7718eb781f8effeb92a396613ba638fe
SHA2562429560341906490efe361d50a333997f129f4ce50dd358973c0238fca1a1ed4
SHA512f6590bea7d51f9b47ed5234b676adbb784508856984912d808e8398f96bc21025c264ec6e4b67a0fc622638c4a0643541937c214fefbf91454548a8611f2168f
-
Filesize
8B
MD5d524c65681d8dbbd39be83a63d4cf478
SHA1b566e9bdbba214f269d71b65debef8206f35d836
SHA256f5001eab19033635084404827a68e68f85c16a2a2cc06b93d5cdc1ea1c59102c
SHA5127f90c7222d03acbcb0390500e24926b1d7c9f688e29caa5470dc7f1ac7699f8de36bf75f98d9316ce11eeeee9433198e768bfec7e90240a6667613b3912f1904
-
Filesize
8B
MD5487709ebc7d6914eaa985a9929f3f7fd
SHA1d33d8f23048a9dcd06e2dff3ca9ec65c9124f299
SHA2560afece86f8f3c89a57652fdffae836dd7414ccdedc858c3bcb564b161c0d201d
SHA5124cdba7e49d83ca03dfe37a56588d0334f342506c9aaf106efb48888567be17c0b8a884f76ce512ca78276eb6173ad8e98631fa1f39aef032bfd42b9702a64c62
-
Filesize
8B
MD551342cd7b2ed7dbc80188f5aad012b01
SHA11a839a120e36a2002625c1a9cd1942267966e0dc
SHA256117ea7c3ab84bf3fdbc6d212700c88dd7143531af0b7fe834d5bd0c6fc8faa7b
SHA512b2bc3d92b91d6586188c5514cbf584805614d84f0de5d257b901f3be1b2301689a4eb03110884658a6e7c214252c44983dc0cd9a04e2d3c6b42994313da67bb7
-
Filesize
8B
MD5041f9c5aab4d933139ee55e39480a5d6
SHA1051e762486582ed8da029dca5c51b8b42151c93e
SHA256df3a416d1fdce7f1eed5b394cfd4e311c0a070258d37c45f93e2bb7949e87d51
SHA512b47525c2e2861d1871c5532eec49a924fe7b506f00d277500bbb7b701ae982de901d28074ccbb7dfd31c71fd2f8b80d4c2dbd493523a2bbdf24f7745c8815504
-
Filesize
8B
MD5971b2a16979db1fab7237e31d2d529e2
SHA11a3723d8056cd857c2dab7d7ada9c78fe75bea59
SHA256f93ae7c9cc32689c6dd90a8c91d3105cad138f19300dbfcadad93dc02c752e76
SHA5129ae0ac6fd3a6eb474756222a6b5cc197b4bd8576983ace31caf2a89d16f2589220089144e9766bcf9ed0b7cfa9f9de7e93a7a2a2b158d6d55121778899828aaf
-
Filesize
8B
MD54210ab0e64b4f5aea957fba0b305091f
SHA18a53a3163ee29850f76cb62b1ca5fcc17f8976dd
SHA256a911a646cf05cc465677c21813f14f14a90b6c18b58cd7888865771d0737ec35
SHA512c388a1356f1cece78f8ea53699c57fdc7db9876fb0e8e070736b750831a801cfe72e638b43183dade78840f36b9802c09be6561cad8589efb4c81d2c776146ae
-
Filesize
8B
MD5f607276cb743465b258cbbfd7011ff30
SHA12c1fd9251e1bdeb31ee856f660ee295acfb6840f
SHA2560fd96ae15b791b293a8883115c5d70069f740f4e843dd326705f5b6efd80b9ed
SHA512d29cd3e64aff2019f1cc6e783fd5087d186eec9aeb585a570ce29f04bf3be30b954d0b556658a31c5331e1fd0f758836f8c789e297d13db36472a18c9cc6f8e7
-
Filesize
8B
MD519b608e31a1ae81b408f2de0dd017bd9
SHA191a5ca3da854235782757f396b9fcc0caba1c1bd
SHA2568fa45e383249ce1f5c9c51fd7216a0aa705144e288667edec4f103c4bd2a3fcf
SHA512064f90d68dcca373382ae8693135c295b3bd665e2897b95b003a443738d114b1ea5102c60533967179ff17d05ea5c58a4163a29daec254c5e2b12f43a6a61b4b
-
Filesize
8B
MD5efb12a1882d43b71c298db71cd434ef5
SHA1f74357201e2c8027a7177756fb8a76db9ab4af4b
SHA256035f1a02a097d619daefc2459fa9d58cf9bcfd4c2ae704c3d11d1817007700d8
SHA51252294a29ce1b98811a067d95e4168c172cd49e517afdb209e73cab6b644db04ee2648a0b2647c2de9f4957918d896a3a5ab48ec1bb433179d55abfd551c9adee
-
Filesize
8B
MD5b647e7fb08806fb297648fc5526fb1eb
SHA1c1ec28b9877bd35c9f408c43f7fe8ac1b3f70376
SHA25643744f3c52ec8a0a97e00b74dc9e42b440127c4ac2b724c96e052ed4e921219e
SHA51216d39b199936edd8c56f8fbcb46fe26d55f514ad41e3485c6dedc3856f13b4191fd7446e2993052692da82bcb3fa1c3d8bac6205c6e75bb20de2fc168793f014
-
Filesize
8B
MD555fa89efbcea97276f77d9dfab7bb9a9
SHA14a1cef4290f086941244cf61de32322dd44e09da
SHA256143c809af5f817e8cde3b4153f8ce9e52b0acab28ea36321cb204f5aa34e4285
SHA5123abb48acd87a67b02761a1f8443822d09bc0623a0e6dc44a1467ab74c7960302d49c8825107d167c9d8a4d657322281dae8cc3947bb8861b44acfb0d71c8c79c
-
Filesize
8B
MD5c7228c412c02539fc38f89b04f12463c
SHA10e833ca3c5741577a9b482769bd3f60310c3742f
SHA256eb77169b2df2a28d31b4bd973c9b5d2f37ebc5d02a274365e061fbdd00775b08
SHA51229f6c0629f0298e55cf84323119eb26f8c9ad8383beddc3416d5e2a6575fb65f95538ed7973b5fc4e3e6d82b3c06ad65706a9c6ddc4de910f1940543097fb8b0
-
Filesize
8B
MD57b7459e8e84d68f1f236105df168ee19
SHA105670b4d27a1a4740cfcd60890c7bdeddd9a49ca
SHA256fa01ac45f5575fb2bb61cffaf1c6aac31282b15ebac1f2f98a40ca7e1874458a
SHA5127f10aad60268f57a4974b5f085840201dc8300550eddbee4f742cd352e7bc50f8d441809347947ee89e6509bdcb85437eb27119309066ec9ac565917fe71fe77
-
Filesize
8B
MD5e742e05630d59f18ddb16bd40032a199
SHA1b5edd47ce083523cebb35cbca8e16657fbde4c55
SHA2569cc7132a327e9b828c7135f6618dcaa02c8e5275929f34d6b7ab618f4f250101
SHA512e33d648f039ac6fe58a10ae2580dc15528206c38af3ea48db41612c96ccfcfaef2acd0e663a0c5f65430eb23e1c0b774c0139caedc5509879bba45d3296a1d33
-
Filesize
8B
MD513a29abf21920ddba2f1ac7f46a25e23
SHA13e1ecac3dc50f6b07dd726efeebec30c03676b8e
SHA256bd1e112f589ff7c0bcad6502e9c0ffa807cfc0d4320eac264ec4fb9b2a4e5904
SHA5128cefc838ca643d90a919364b65132ea1522e841880af84aae7893ad726610f019fa59dc7f78a0ce612392391d464bddffcfe20c0750fa25c44ee67dce0c2172d
-
Filesize
8B
MD5c34b4abf4b9ee285444539d2575afd90
SHA1f48700117f65cb3df196ae63e85ffea156e8bb5c
SHA25602edc7ff4562a86ea7129390fada56dfc61e64c7dae3983cbbb3a77992878e4e
SHA51235101b372a9d2e5ff18b885ce8b0536d835299d8ed05267867d81274e43a03a030876da88ce5e759654a5d25c2cf7666075e7da9dd7c98bc0eb56856bbdd8706
-
Filesize
8B
MD5355ed800d84fcac4f3bd8b835940a5dc
SHA1c1b4ba93f716cd0c71aa7819b22513bb35c083d6
SHA25617c3c521edaf358434cc66947c8b7c4972a783a2fa99a0fbf942c87b9ccd8e56
SHA5120dacc5bbf4b25c7e29aa22d267dd08f91277c7980976a06cd6492079a40ba3573ba696bc6009004732a0842e0ef2a6a531511cd5365cf57baaf723471cd0c975
-
Filesize
8B
MD56c86fb4da6838281c92902ef7905428f
SHA17e1d1076c512999dd38d5f1f2411ddcbdde442a6
SHA256a8b9ab1d3569707e068142b0b369160564e7a9e9d2e48a4ed0258efe7f7e4be5
SHA512784fce990720b2fd2b07e77b1248444416c04288a89d936b5d5511eb7b3b912a0888c1ce8fd29496561365fb0121ee8896b2f86a60b39dfc8152136776b3e0a5
-
Filesize
8B
MD5a1e62096f62855ce942b582a950615ed
SHA11df1f7ec5c3eea45cf24a52ec0fbb7b0d30eb025
SHA256277c39152451bc536db7c2f896f12ae65cf2f744fee4d9da1775e1712776ab1c
SHA512199ed738404567c7859d55e22ce8df65b42d2a0e3d58550fd58c43fc7fb7906aa517df7793adfe7de92c8506af80849924dee901d6e83d6399d78183837a0b3b
-
Filesize
8B
MD57615ac278099a26b71f7e619f729b1e5
SHA19613eb867f683833dda9cf8c2e15e5871e262cf5
SHA2566caeccf7986972421b9891845e56a10ad3f177816206a6ea8d8757d4811f585b
SHA5123cb8b5d98edd4d2ae59a7febf3584c0768150f8db828a968ad0f24ab4319444546f03d60d069bcd31dc809c8d8e9a44e9f6fcde44df554a90af02af51b6b1c6d
-
Filesize
8B
MD5bf27a95e23709799e7aa03cbdb2f98b9
SHA1f2124818cb1087b0ae34caeec7268d42705c0c69
SHA256e0dd67f3e0eb86cd890365f9f6f2a4498634f8bff0fa7d98cf875a3c94e41ac4
SHA512aa8b70c0398ac41afe36982373f6ba868d2e6226836f34ce8bd59471381acd1c5460067e46d07dc4e7a5d28c2456aba31570dfaeecb600bcc9743f6d471bb897
-
Filesize
8B
MD51caa16374c527cd1073f972fa6202eae
SHA16e36992e0e256a888e9f1e94fee39b4fc9143cca
SHA256d6b40dbdb5c80083067517397947cf58a0cf6c684a771978cd54eb27a4607a2f
SHA512dbc4545b56e5b9005f4b8e6fa4a169a0e398f561b2e4b621605ce9b8d9cd86b3106d433dfa968e3b74191877f7c90e60bef23bd91f25decfda50fd35fb69d683
-
Filesize
8B
MD556bc42d66b42ca7a8c4a7517c1af2974
SHA104eb25f32966359d240c0bf67596c14e6296d55c
SHA25697477f92ddc1631f9e00b3f18e8c0bf771e9d17655acb59664012fc07015822b
SHA51281dcc23c910a2475d9935c5b7f86ac20360daccbe4f3988e1038ef3cc3dc5cced95286bf80161701659c1e80336376f8785dd99400af0cc6de48898f896fb9ff
-
Filesize
8B
MD55127781c5626a9cb4fb61758199cd1d0
SHA104e76c2d83f594017d3a2144bcebb1709509b06f
SHA2564ad6dec9cc157fb71f3a85fa30c0be553ce4df23b2227340ac26f469a8ec2098
SHA5128e2e51aae1e9e2650500cd0ec04137547a623798255219207b3664a26e82da34802e2fcf21a1c8facf09a58466ed5343372deabd2f2fbed6c6de36c3c7acf01e
-
Filesize
8B
MD5b956c06a0b5563c1a5440bcf0e4b2291
SHA14543a149103f20e78098d41fadbbf9f30629dc7f
SHA256313f5a1aea165291b51f3383b2481e89814b3ec77583eb399eede889774f85c8
SHA51242c46d4482054ce293dfc06564a54e9ae38b78484f14970c101b59581750bca0d87f1737534571aef696c818aa555785e458c90f794246d30a9051c78cb8eb00
-
Filesize
8B
MD5c341be9d122545fccf080f192030b032
SHA19000be5043825e952ee0a101fbad9706dd663905
SHA2569058453ef4cd640ef5cf939f0fb42bd939f19a3cd02ed5845270941673fb1e60
SHA512a316a0c012cecefc3a477e387c949f51c22e6637528577e95bbd40a62e24e9dc57d5947e3421fe1817a7826a5c333a82e48e534612c5199954e97ebc0b60c6b7
-
Filesize
8B
MD5ef50d44d106dde489a524ea8314b82ef
SHA120da7822264961203a95e244becc7c7975199497
SHA256926508aeeeaad569a633e8dccfa2c808292b6ca74ee47665682469d59389b026
SHA512b0525afeb2fa76b1cc925510d706bbc2f3f4d17421ff32882a39c4d0797ac857313c262878a495d72125fbf57e7ae25c4c21e25c8f98b46d44c0095fb3ad3605
-
Filesize
8B
MD5651543288a3a86837e218d949636272a
SHA121a906d7905e9272f4049d258efc95bb22094227
SHA2567058860029176cde4a20aae977199d4595f778e5cf165007b82b589bc52aba19
SHA512999f7d4a83ec9135e4eab0f39ab8c2cfc0d35817925670048ab3b6d19599bec3133b51bc50e69f344c5c9ce924a7d080c02382a2b603674046863664dc00b1df
-
Filesize
8B
MD56b6ebacab7a73f6aec4f1130acfa2c77
SHA1741778e72ee9a9e265871d91a37d048db82373da
SHA256c980d2883136062f52cda19d9a95db169d812c29ad2641be7b41d06b095b1f6a
SHA5127e6b6ae2c5dc828613e830d35044525f930cc49e46682b14fff3e15f785a18d3b605337c344f6c68b4b98b28adfd64acaadae5c6953e4ead5da1b3b96c539d59
-
Filesize
8B
MD5b3860bca0e9ce79d4a7cdfec3f914446
SHA19fd7fba1271d7eb55357c1484d9b7d14d728f3ac
SHA2563a4a8cecf61dd83e72dba9ae84e3645a59f64027021f19eb3166e4c1ac58b217
SHA512a4351c1ce915e4451cfcabe360df731c7a9c3a33a00920ff62fd5f419023389d44ad2718d47a6aa2983e0eae5c210ab8c9e6efed64ea8d7bdd7e9bf734fa8109
-
Filesize
8B
MD5239038b3ee39e7b8f5184a4b96929249
SHA1e218130b452f3a626f71919c34ef5744ac7edf6c
SHA25636300e5226b96808b869754f91d315bfd022cdb1d4140e56829d629bae2d6cee
SHA51229c6c10ab6a54a7e1fc580416d5ff1e19ac53debc00aa55503b8860e9b0884a6d551057d235eb974cd38b126957ad352d94defcbac91bfc921812273094bf5a8
-
Filesize
8B
MD58d9515e8aed95da26d20527ab52e01fc
SHA107ca6161a21f2a2dc89c192db755e31819668f93
SHA256774b60b8d3f0cd2a7617ea8fdb081de8465e44c1da60b26c3c4960227db0bb9a
SHA512a228ce8d6908329c4e6e066956c0d3d1a1c70796f5f5c5f53f204b68c59607e5fa66766683c0b94b9d915a2ae97e0ee3de91fd48e589847e68be7a4531d8b95f
-
Filesize
8B
MD5d91d4986b84e2a1a03336e943f98f594
SHA133c02ebbd30e7fce2f3c46a662bc12aca07396cd
SHA2561e57c70cb085e8218b2c1fb99cd08895aa8185dcaabc6736144966bab37e25ba
SHA5127fd143f01385528483f62a95ad48f2b5294f954d5a8c55080225282f984e80973fc8a76e5ed1c594e0dd9fd2215a1eb111590f21fd11e11e04cd68aee856d9a2
-
Filesize
8B
MD5d8ca9cd12d0f8087b9e9ffe6c78b31ae
SHA1fe9469dbdc0232d8b1a0f236e5d9704cf4bbbba7
SHA256afc4544833c97ad80a45468635e1838e83f4ccdcc33d9fb356be9da1cff3855b
SHA512c68e0116834cbb6e356735c4904f77eacad8a11252fe8a36aa6d7d2467d9212be6442fdb92f6d0daf5b2696a0fb4451aaf937f6ea7a3676f779db9c816795bd9
-
Filesize
8B
MD5ace89eecf7920d8fb9042d77de62984a
SHA144d50cd50f3979f19998c3ae271404c106f7756f
SHA256643a2f812b2e25aa292e2194cdde434bf69498cfd6f0eed773dbca4083eef924
SHA512c84283463efeea53c9cc6ef243d51ac097174b1e3f5f0569d446ca03d6f65ffe8c094018bb84d7653ef5fb57e5c65fc23d1d6e1c990e2e279e1c5519bb341dbb
-
Filesize
8B
MD55021949c14bad5cdd306f0df3dab8ff1
SHA192f8b1e459c150f8da5b5054a8773d556f180231
SHA25694ba9a37df254ab4b2ecfb73a615b7c9f3b6fdb9433576ce4238c9cf77cab982
SHA512e7da9bf032803c7d3cca38cd71e87a432e743aa1bbc4d3b833e41053c0042bfc91e367549f6b618e6b3e990eae9f81d1ae33cf19766a845e1de31ccb19629002
-
Filesize
8B
MD504d354369ad183aef770ceee8bd49768
SHA1ff735d0e3f0517f0c2826258ce96a3cb168616a8
SHA25636a853dcfccb0b05ca6c7b83441a8c053ce49b9972aad50bd569243787133ffc
SHA512bfbea59e10f436e51400ffd9b42a3842b2412e64ce132a15bd5075a862318e4790e2ca23286e2288b26a6703385cba6858ae27f50c5df066bd2a680e2bd6cc97
-
Filesize
8B
MD58cc1ddab52642e841ed01970b9e32a32
SHA10916a944066cdc86dd22535ca342ce80ecbc804e
SHA2560dadb1939a8668e124c9fa10263a7063562d8daf10b7cc701e862666e74824ff
SHA512c2d822d40128d7a3e26ac3342f31c1c95e7c6c7e14d8bb4091d9b1994e6a4e64b4f1936a1d4fd5d91ea9815572bf173d8df837243e09b51e6e796788ca657b44
-
Filesize
8B
MD59c237365b9b9028645fc965d3e4a9b19
SHA1a8ddcbdb4d80306d4793f7c5c441edccc28942b6
SHA2567155f9e3323a84c62c5819732130c53a7a090672cce779afd9c8aaa35f5f4ac9
SHA512e73422d2307125872d26db3b1dae1777a94a8fbd3ec8e38fb55c7e5101b2533cf19055def56319a579ae961f86ee8e5200cc014d54d304bab084fb7129e3c92c
-
Filesize
8B
MD5f9f30761a938f67c81f9ddee8b30c672
SHA1285222725756ca0f9e777515897d883d14043e3d
SHA2568d2ae320704cd39506a7f03268fbeb382794a3bb2e8b6a261c830df8aa7310fd
SHA512ff4703ebbbec8fd41d28999267fdce52b13c4ad93bdad63950a9623651de52aa5992b2c29c0f45fd043a9a27c958cb6f55a00066efb7e70187eb33d181740d0a
-
Filesize
8B
MD599c36609f1bede0c679c0b7141e20c26
SHA1b050fc724ea757327d1fd106fdb6afb5bbf6d61f
SHA25698041e02ac60f25e05fe560fc9f8d99775a6871db4bea9faa3145b42719c51ce
SHA5128cedae852cbf5fb21e676ec00b539e57119b675289cb219b8796c61875475bf369d78c05768dc8a1590205121ed2508338d3b57e204f00d84367342f5f27278f
-
Filesize
8B
MD50220fa428bafeee2a06a4283e3054b1d
SHA14428afb95f11c29132d1a348fc879fd5c92a18a7
SHA256a3da72edd2fa079043688988fd70e95c2fe235d015ef5995604939709b070f3f
SHA512227d4f47fd64d2cac760f57580998d1f1f1d145acc88dba3db841fa16e7f4d86221b449ba57570130bd20df4ada5c15dab43ee9dfeeea9866f9afeebcd2c9f01
-
Filesize
8B
MD5ae9642c366f3428c9f3c41c806e595eb
SHA1f33b0cdec05d74040c3e07077a5d867a123261cf
SHA2563ddd940cbb880aafb9e27fc808f5ae45683c61148ddb2deda66a84aa535bc20f
SHA51214f9fa8b0323a6dd24e1f3ab51512d1d23a86403ce109543c306684afcfa1d7bd8aebf897abefcb3d787c16ee3fdfc6e388e8f6161df184c46fea631e161284b
-
Filesize
8B
MD528c9da920bf81c358142c4e90e022656
SHA1b3e9d1adea9d27d660ad4f1f6c10e020f156658e
SHA25654cbf07b0cea176d4776ff4661d347746be7063b0cb22d6217c734ea0a316184
SHA5127d4115fbc20753862e8356fdfcb9146b5d5987bd9976c512d3336331d91c8a924fec1dbb921d4418f2a430a1f68f2908481ee272350ae0bf5c32434ca983dd96
-
Filesize
8B
MD514a5ab175459d3c59bd4a500946f4d48
SHA119d0f5bb1d5efc65cbd3340b2e570f73fe33e8a5
SHA256b0e3e2c4ae2a5ae4d4d46279f83fb94be377c089ef1d7a38b6cb3c2a04667678
SHA512921f43ca0e0b2c082b5e1fa7b5f43c43ad2fb767e283640cd93585f24bc6f0d4fb4c8d02abe75ed1d0cbeb21cdb94800b57466e98529d2b472c0e731454093c4
-
Filesize
8B
MD599631715db5474383bd0902f7a563f56
SHA1f3cc5eaec19eccc527f2bbb107066f24a42e59d8
SHA25684d9191291a9f52e809e9203bc598789ee0e6c015b47046c26ec1b1b32cf0d4f
SHA512977e387976dafd58feb97957c2785582142bf9a8ffe3802d1bb11be4bbdc46b1ae279354ddff87f8cb790ed4505e6af2af4eb540f7c23f4c64a4e8386694a40b
-
Filesize
8B
MD5916026308a95a6a07e0689e3fff10fbb
SHA186a06a2218c7f9204f861d27ae43b2d3305e9915
SHA25677d73a38ec7cedbe68540dac5f123df3cc92f9aee2e7d7476fce1c1fc273db38
SHA51219017dd82258b0e30c467b7143f4cb9c643deb297bbfc13809b590262ea9f44d326fd1830396fea34c8842b30b53e0b120320f50ae81a6f124a02a0423862cfb
-
Filesize
8B
MD51ddc78e94dacedac977841571c35fe50
SHA11606bd79cdb9d27bc728c0e61a95da15aa8bf710
SHA2560209cd1219ae4955747273a84f7370b3345631681a8660395ae938de1af1ca8c
SHA512a62f7a7fa8a0ca6339a70ce456f2a411fc2d82d0b0f499547d578b549e66173e311de20356a5d313934e205a6aa2838594e0edc274958cb65d44a54954be1c1a
-
Filesize
8B
MD5643611749528968d4c5f90cfb389f2c6
SHA1a2743a7a9fef22fc27033531be9ecae3519b3a50
SHA2565ef1fd256c59b250590bae168a5e1ae08e6003662d5690ca2822a55e7cebe0c8
SHA51211a66ffcb515201234744fdf1f70455016f8ddeecbf5efe5c799ad813baa4578b2dd566dba1978c63fc14416dfb18025af354b1329ed1d240e550008f2e3f1ee
-
Filesize
8B
MD5a61af39a4a066299f2ab16e148d2f5dd
SHA1ad64a033dbe8cb946eb4f326d09572405a435936
SHA25697f577a1e26c3b29a35a2ff01760455161a2b078f4e62fe643adc76845d57029
SHA512d004d5fb8e872d362fc198615641dd6b61922700279e3150082b943147c1c50946e5ac2da99a8adf9369e3928c348e3fce27228969cbce6fa922b91f5f6a13a7
-
Filesize
8B
MD5fe9fcbf7831960e9e92d035281ceb8e8
SHA1811aae6e53b4a56c0dff5936e9abf2df7d25518a
SHA2565367a8b803f7cb0c033e6d19203ac14fc64b4fb593ed40890de20c0d8b787287
SHA51292641bfbc4b04c8211948b1c922440269f0597615fc8526a763d1ba1f4eb95e02a95bcb83954f612f7182bafb0ce557d0819fae6c5429ae30a962f5c64490046
-
Filesize
8B
MD55101e72d2f0f8a8fd6f3275e8b01c673
SHA1eab78a365cafe6f2c7b0a995a7200b67fbb0efd4
SHA256e0aed7c395497f77406830456b22b494e17ed51801ac0e7fad509c804ccfb214
SHA51229377864bc49d88d8817aaf072945b7cd193b30e454da17dc8a982b06507d34de7cbd825ff3b8bc60537f4368af8be2d11a17d997835dfde7feac779ae236189
-
Filesize
8B
MD512fe5a517596d6781df7d7fa7d92bcf0
SHA19ade9ec716a808cb70a5a19c64468060deba7022
SHA2561f0518c0d4c011a0d0acaba92b869024af2d0a1e4fcb18fed7055d8af9b53062
SHA512f665a65f61ee83bb6eb000fa518245cf7652d064112f7a9819452aff25c1746307cd1212069b9657ac868d0681e133a45690be720649c5d1daf75c9a8e5732fa
-
Filesize
8B
MD594328d45eac4989959691c9e93f0da1b
SHA1d77a9167d513c180dc7e969ddd19bc9c9556f535
SHA2564462cac97c59ab0ef2eed825854f803aeb5dc397fd941af4bfae222e4cb4182c
SHA512c374e63c0ab179b3431d6628c311d734e319cdb12dfd903a25ce8f2953c4cd7637fdb1d79cf4d8f82c0135eacdeeec881af601c5bd45ef4867b382d88c3b8b24
-
Filesize
8B
MD56909e7fa1f017f54e8171174fb13d57b
SHA1305166add3904a2a64c447cad36897eaece97323
SHA256cd3caf25bb780b00cc45175e0260242f83027b6c9f2dd92da90c3ecb3fd3dff2
SHA512f786c75cb8a82254af97379714e477bab24834579778cd9a474eab9fbe0156b2d82fd08471426a6f617a6d09c61514892861717f44bbea854542ee828b93d3cb
-
Filesize
8B
MD57eca1ee945082ed4d2625b156576aaa2
SHA17d416cafe78d7a8a8d491cfe26f47fa80b4e0e04
SHA256916167bed68419a8d40f7f34a0d98f29b3a4c6ee9966d6a2d5c2cf958f06c49b
SHA512b50795fa66d07bdc9490dfc97851fcfad888e7a241c5b1cf70635de23ca4948e2c9ec0705c380340d6ea3aae7f053605bbd3cc4588826084195f918256c377b7
-
Filesize
8B
MD51c0f696f84555d5417b64249ef5986bb
SHA149733bb7475d60eb253257d1187dfc1ab675716f
SHA2560a1343846e885ed92f4b43c0554e128812be0eaa17103fb892d8f8c23bc2a552
SHA51260d9c68f95725ab03f61408c5044db2fb6736e3d59dc69ebd75780a8eb4885d8923bf02e6a380387cb57777bf50cc389a6da9651e0a050f8bd5c9c586d08d78c
-
Filesize
8B
MD53ce8785c236b9653f37348384f0010cd
SHA19608977557cb9c94713db96262d1f63bb3c56e77
SHA256cf2186b92466a6f6ea1cbb846ff2dcb5dfc1ed71dbdc16442611aec36e191baa
SHA51262eb2f0be9626fca8b1e9ebaa3d6334292199588e6264bd7ab6de17b4fe95c93e9282c3385cea77ed28474b8c46de16e777adf2156a906638a7b7b28ce0d4643
-
Filesize
8B
MD5657454e19faf748b262faf86c4518f78
SHA1ccf61d008ce226e0993b970384418fa1516398aa
SHA2561add11ebebc02bf8d0fa0e5b092b92015703a59af9208e9bcd9d2dff42009e48
SHA51284ee9d8afab95d3aa7a5cd840e6bb939c88d99003eccbf94c3c220d783eb58c4b2f3c74b646c30b836ba54c1a8d38c64b8db166d5d1493a2764d63f623a4fa5c
-
Filesize
8B
MD5c28c372ae6d24d55941398f1663ae7c4
SHA14ab13d5737a7cb6c1ccb46507e74768e512fa4af
SHA2565ddd230ce7b3e1c145f746ef79fe781fefffc3754cb05bc72119f6dc9eb7edf8
SHA51205cae47c63862294dcf5e5330852ae3b157ef4b041b3a75414cd1419f35344172e92a80f6d7c8912824c7e1cd47ce2ea7244ab30fc2dee2e2d1051d54f1fa740
-
Filesize
8B
MD589b30aa3e7223b0afce820a4b157d301
SHA101861fa549c9503c0c0964428e4a48eb85bbbfe3
SHA2568571e26a3dc80f050466aafcd362092ca6ccdbd285ac85be8f4d0e1e5dee4055
SHA512c60d9dec2c1daab98425a044a9bdfeed3d02e49944858d801d2e82fd062dc0156a03a1a31269b64f9530303bac0219acbd9d4f8a874909bd92b23e84c1b4586a
-
Filesize
8B
MD5361c79f474b6fcfbbca3e40ae6b08fdb
SHA1597130aa17b0adf48c4ec9020752dfa9368c3e2e
SHA256fa25c40cd5a9d3271ece7057f1a6a893524f8398f577e155208fd127ff3a16a2
SHA5129412c4274d415c2d9e810322d770ac91d17d42cecfed0d6097aafd814077d8570e32227a48d578c71ed3ba8920cc23bd17567acbea726dcb70415d058f1ad2bf
-
Filesize
8B
MD53337d3454b5c0c62c54d561547c3d389
SHA1d90331210745c5a9f2fb2d1a1cde2f5f5c99171b
SHA25687ab7bb2c12d78c5bf2860e644059c8496ae473aaad0a30926d3fd9e25ae315f
SHA5129d1501815839ca835627af47c6dbfc16985b56f55db31316222234aef8d0b7965b4dd198dfbd6c1a35ff360e8adbf1e81b0e4aad919bc6a7ce8ad08353154d0d
-
Filesize
8B
MD5a06856409d8d747a028c322ff954ee93
SHA1508da93bdf202b34cd98dbc184919af542640390
SHA25642bfbaa6cd5fe794d69f534181ac3a39a26f655642e4ae30b42a69cbb386a2bc
SHA51268de04bac90528142e415fa64b06b6aba1c301cc8cff52008a6756be87273c8108f1694a59cc2973a3c99b21bdf691e8fe974f0dc48a8b4afe1d28362e100594
-
Filesize
8B
MD5ba1d355bbe50a0cc0a018ef108604b5c
SHA1b38f50cecd95520abc64c979ac9f09ebb0e90766
SHA25654cbecae388ba272ab37083ea47327f2b8f75da5629646f83a6bbf955ba240dd
SHA512637452779b078262ac15dd579fa21c83d6f71e70e27cec199fe5c226a99cd4192daa2c0b10b78f90e97e21d9467a6494e0a7e94d92636f593d1d78b940887ec4
-
Filesize
8B
MD58c994638e95e577a2df3d53f32c18465
SHA1a4adf471a692ce826fa1ba5026fd40e02bacee96
SHA2560e841766aae98753ad0c6ff4fd926d05348aa0d663f58e243d0d61b4ba25af0b
SHA512a28a4b00b2065963df382d5665df22c43c256bb397daad5482e7e08dd42a21b123a5de1af3ec85ea10cfde2b9d9f57adee278b6288eeab49864bf6ad72bed685
-
Filesize
8B
MD59f56b56cc26ade4b761790d1381c6c54
SHA13f505562ca28c663827eb6c6d236977b3574e0ac
SHA25654da561eeb043a591875ba93598e1dd3a8b5d1d4d9e4a165cd02fc63a433dc54
SHA5126df321712022617c83eae7cbfffaf532b947785ea2409bb86263ea47a4c974eb677a8470bb31023ad432974181b15b39e6b884f6ca29a7dadef1a398220c0626
-
Filesize
8B
MD5b3dfa008d9d6a957bee43567dd291a79
SHA1530fa2611f638ba1efccf0cb47afeef2da3347de
SHA256d1f2590efde9538c89defdb8185e63359a133ba67b50fb34fea5798dfbbff12f
SHA5124fd239840a760eea081d3b512a6ec22fe0924fb1bb499231030bb9252d30f1cf3a9ed377d57401b452313737b65a6a45e2bf8ab726903b4c52280c3ea5a5aee9
-
Filesize
8B
MD55422ecac542593003558fc478d89e317
SHA12f46192b8dfbf59d52be46a1fb08d106e886e402
SHA256b2bec616a37ecb07a7a5c42cef2ff3a905185fdb49bf31484c2de3448b66b431
SHA5126545b580c5585d075bc9da221ab9561e1a3a57b3e3b29628d407ff31688a1499a1286c03d5c9da4f7f9566562daa8933862fe0cc86890f14506b8fad02cae5a4
-
Filesize
8B
MD5c7f2cc873938b50dc6cb36da6046a98c
SHA14e7d6d5f59c7a4eee9f8a4df9245ed66dca8cb8a
SHA2564739da1770769fe999ef04b1c2ea9f6159389c64493bf7357fd0f1dbd9cf2a66
SHA5126f108c084c34a1bdd676dea2b994635f6e6b7f017fbc2628bc4247097dc7a78f5fe34c792076de3f04d1a15df74d25cf6baff291db5b0e82eb8867225f9079e7
-
Filesize
8B
MD5ec6238e51df2b030046cba90471c1175
SHA12bc680345830d2dd97fa3bbf89746993ad3f5ade
SHA2569e989bc1f9ca1920d36a5e8b27b667d914120eb33240312c4ae145bb98df785a
SHA512cfaa49eea9ff6a7db740a937fe797cc323aa196f2725511cc8f985f3346077e8c9033579454091c70066b42ce9fe16070cb74327348fa4f5dc6c9cfda41050c4
-
Filesize
8B
MD5919310d5ebeac0790c7ead7e0f5dd218
SHA1cba42bd5e8891507dad86c9ce18278ebb144e58b
SHA2569b8e046cfa700c6e86d03f61bebe77d019de643ee7b9adb3722b27f0b8bafef7
SHA5122e8745fa5adfc67891d19725d01bd7e00b7c6cfba3d684af3927c087672c0fdb8ba9fc84bd82f5818b125e8be46e10fad2eb865e684fe1457c1f53230b56d930
-
Filesize
8B
MD5797eb1e37902073885f51f6da29f1786
SHA1821b1cbf24cd7ef7403b728fd8c6f412615e5583
SHA256263fbff929b435daaaacca1faee950296042a841e380943057b721a4b0aa91e0
SHA5120b4ab5434ad0895e0fa630f02bdf4698a60bd713ab705e6ad2e533dabe50e3cb44c00e244b4249e1576c84b3099e88c36987d8e7a598f2790a6f56bb0914d124
-
Filesize
8B
MD55494c018747350db4112680c46a48264
SHA1f4e8baa8212b7fd55c43a7b450d1d451e8251adf
SHA25684dad95328332507e7141ac36229765310ba56a3d4c8632f3de00bcc07e4b93f
SHA5129fae6224e08cb24d8c1f6cc9b281d218e03d69a19773db2db4ed07e2c558e3ba47b23a516e21423277aff3af9d29608016539e17fa96b74d375e02479cbcee06
-
Filesize
8B
MD5a3acb7bef43d6e9621656ca17bbd131e
SHA14d2301ab5bbdf9d1b98dad3b243723b063d6d229
SHA256a7251d519d123ab1c1340c380e30dafdfb69e065098d8946e6ed04fc0978e926
SHA512ccb9979930f6dcb4643d09b6af3fa3e9d935dc6e2e7b9bbfcb94f702f2023a16b835b6302bfbcbd9ea9df65bf13bc20a25fbb3e41dcefb3b929c5c97382fc2a5
-
Filesize
8B
MD56cb815f6adde9d1b81eb222998dbec1e
SHA1e6acdfa575efaff944671ab66af40afef45e8e4c
SHA256cde9b6f3a28362b38d2fe71500a2ed874af7e6a39ed3267ed55dae17039e17c7
SHA5123594e0ebb86a24cfb3b9d8c67f1efe7fe625d448b670d9c6e81034b90ffdadc21a3d1d66a5f2ac07d8216be353b15bb007cdf4be8830b5f9c5567339bef389c8
-
Filesize
8B
MD55ef4e5dbaa6dcb1316791fde4e072efd
SHA165fa613bf31a5d09db1f0adbc89e56beedfe8c09
SHA25631c6307c27ed0e869d0de90dbb9e80bd2d9d41c560f91047248b292e297f0d0a
SHA51263c1df53d137a110b3e0bfd05ce6f9fac5850cc2976f0953d59f81a13031a70542c30916812195bd9d6b0ab8f2541bb406e255d46da4f23a2ac1a2fc9558f53d
-
Filesize
8B
MD5bbfd59002bbc72fa1ad4549f08bc0c20
SHA1de5b77229dbab61aefab340c4b509cca6ee4b6b2
SHA2565253082c039b29de3ca1af327b2dd0680d2fa9b8540e1ee4aac91b4b506ee6c0
SHA5129cb3ce98c649e9a80a80739d6f6a7d0bc85394c9fbf5de2f19831b11d69d74c8935990580c18dd8d0ec768f77da42cc74bd86b9265f9800eb4a41331528c9b0b
-
Filesize
8B
MD54e667d5b4733ee566e0c5fe31a62d546
SHA1b565dc455393045a789000fa520b81de3c347275
SHA2564344ac2baf275d2e860a4610d39bb3d0a8e734e83888c3ea328db98b067b9a52
SHA512e62acef591a32ad60f40f97022c2d498a85a9fa8fe6a901b7151f0c945a78a488c140f87fcacc3edabe36853b7c702b2e4e8ac22b2fc7885df6a4f4a3088cc89
-
Filesize
8B
MD5b358a1564f8ff9e82c75b3c6001bf3ec
SHA1581888c89b44e47a0bf152cbccc8cd3cda09fa4d
SHA256da7cc8455b0b32f77230d34562a5ce1ec7c5c93670540a665d5891bd4b12e75b
SHA5123c6d291a9edc700d0032465eca2815ab19e744a875cea886968254d4a47c2a7c9701bec193fbd9e29d657bbf73e6953fedc78f37d078409ccf6f80f774a036aa
-
Filesize
8B
MD5c5203783f0f5731ed55a32d6f92490af
SHA1063a9ec7328c110776cd450322099693f8649ac9
SHA256cad8c348ea385a1eacc137ff76e5602cd66f92ec15b0034f01e6cb31d31bf19c
SHA512e3ea73d597bfd5fcee54e36079acba2d4cebe7ed837b6b3a038bff30cee513aec25309cb8c9e48fda9715ba1aa1798383ea692e3cfbbb636991db984c5ec25e8
-
Filesize
8B
MD5b59a99ab4d98a768fe69d0b215a43e53
SHA1b9c09a53d16ccccce1dbedd5c30676b5be33e3bc
SHA2566046ec071fe97a636d5a5200dd471dfb41d4a5a46134459fa01f6c6878224fd0
SHA51230734828e411309d8baf016065d79ec79989b981065158e44a4687091966b730f30e24bb2a2fc40e27264e7e468d430064b1bf9be88d685c9dcbc033f39ddb02
-
Filesize
8B
MD513189c75160be0b76d10602918d9aebf
SHA127962160262d09f48953c74bc87c5584d64ab73d
SHA256b11e599b5808a035c396c069eaf87a8383525516c6439e7d9229eab922158c97
SHA5120f201e97cac84eb1e2b3311f34545d32922f5b35d6b2c835ae4583af1642fcfa1a504dcf960ac834f4d5793254c8852f4ce5fe9449035d1bc5a0d689cf12d9f6
-
Filesize
8B
MD5422ad4ea790f08eaafd26be2b150f8df
SHA1d618f1eb10ca91252927616b816b5702a6733035
SHA256b44586967521eca343357c53df6d825db496f63249a9bc907b54e9276282c2bb
SHA5121ac68817282e3392587d25ffdf07715bd9327192c433c76ef0abc0a7618303d4b4a30a510872aad54e91537a143b0c504c8f9d3bf93077783096849a2702c8b4
-
Filesize
8B
MD50af44993c4f2093d0013a39b02f2cc42
SHA1dba15039189676de5570d2a49fb56d353f89a6cf
SHA25686460287d7a6679acec4ee567eada762a5b7fdec33f4f7767c4b7c9bc3aa1d6c
SHA5120350ef035a83223747704568b0e0f05f4879b0d4b93360bd07d2d2779cc2ee31c56911070068bbe84407e549ee988bc3fbe9bcc736c44c30adaac9d63a0ae93d
-
Filesize
8B
MD51429a40d6b561f6fd7c6d8441b9beaeb
SHA1caeb469ab0d7aa3c9198c17e2d13d79dd214b365
SHA2566de235c9f00d3a2509744f6bc47620b237715a1f50a3e63fb91ddf11c4c7646b
SHA51221b061c536c2250831062bffc3ad6b1c1365494a0467ffdf9f063cb934150117c2e9e8614a324b3ed6e87dcd4879d212bb342acd60e82fb8f90710788995ce8e
-
Filesize
8B
MD586bcdf44b81585549c298b715d844ee1
SHA126fe8cd5bec51b044f9a8de62c41470f4091a35c
SHA256e3a00185694674d55b6e00562552821ad03db2d33471d8770335d696f26745fe
SHA5125f277727be5f9362781b18c6d751be1a1e0c4525f0423fe89bac0a893888a8234415b35cb7ddf02fa0da11f7a0d40398990d8430a8029fc8e073db3e1ebd38f3
-
Filesize
8B
MD5ddb1c47ef71b1a0737fd15b1cb018955
SHA10acaa0d33ecf681910ef0e65e7ffe60a4886bcbe
SHA2563b1a3edbc22b04c71132050eaa4f3184a650f960fea8cbe980380d296698c1b4
SHA512cef440d624e949058c94df9e118d5c6082f99b3be95fbf42bdcbdf62b0803177e4879ef36212449abbb3957c004eeff5a90ccb1d3b34ae4232aff45f8ca3da17
-
Filesize
8B
MD5605becba4d9fb0be7a54b42aba05c181
SHA1e4464b493e079d06a6fe3e7a70605928d64b28d5
SHA25657a395af3f2f68d1618f21b3f82f14219e14fcc0dfd0cd6d37e625a826cc8eaf
SHA512ad90fc5969b10b521cce815e3b61c62861b4686608ee1dd2cc3ecbf50891220c2f7ce19ec1456b7853dfe08fb6bb62259a6bd0c21bf52ec513529b7d083f6721
-
Filesize
8B
MD5a01466a0a7e9f59fb44ffe606474283a
SHA1bdbc4bd7569ce844e6651f6939d6b83f66b1eb4d
SHA256e94868b43c70094248385b8434df95f3c69c3666c94221e2a26e1a084ba16d43
SHA512203cf3dce596adb194dd08a38556b29f13e7621412a0b277743b04acc7cf16f8d766594b837e8012451dc2ebc2e0d191b4e6b96da5778e34f8d0d28cbf0d53c9
-
Filesize
8B
MD54e7eac67f826ef56bac743e1a378d787
SHA1059b832b659f0a75daa5dfe2024272695f7eb3ed
SHA256e44e49546208180c1d06ba0b7308e4c96eb4d995c711c4cd3d969a9f4dd2bf90
SHA5123702b4798ebd543624a4c53cc4782340c772fc4d871692e3240cbf72988f3dabbd22497f22f63b3ec6acdf2486088dd82b30d95520b76425f56db0dc3fc2cb2a
-
Filesize
8B
MD58065bd7c2f3ce211c9781b58d4fd6f43
SHA132f6bd2fc532e982959e645315a82ac4d0415636
SHA2562e1b4bf3a761bea011ccd65e6ff6bd84bd94173ac472472f0a91418bb3617ef7
SHA51282053c8a58f16c3d287eb8566662d965fde18a5e7577d719f521387909da4d684043d460cee51f4a10ecd9db8df51f7c03ad3d0a839740a3eb5737d5bb690a0a
-
Filesize
8B
MD5b4df6c0e36045c4e27a1b6450d434881
SHA196751fb50e0197870d89aba5f2ac2cef08026754
SHA25628d36bf4393d963358bf1f3d4817a5928082f255561415d8baf98c9ebbcfe680
SHA51292ed2660f5c5927d8e3fbf769394333e7b0735b11a50ca7bd2d2703d28304d769134201a4e8d9f28fa252357fbaaae62b4f49f75ff435ff07761235bb1f8653e
-
Filesize
8B
MD5762aa93fc9fab0ecce42c2d8aa394eee
SHA12722943d29b5e9e6380246127216eb55a3bd5ce2
SHA256c87d8879de1ab7f47133ff8ed45ffa9b921622de85bdcbbddc8169659a714a95
SHA512da714209f2427b00ee4b356d7c1711fd64fe52823e92df7dde574ef5a41efee7b52803fb0ee353cc41d91c461542f025fd09b8283b64ab9dbbefeb645d757cd6
-
Filesize
8B
MD59d3f2697941b351b60827a0492fb2c79
SHA1125b7a2152d01f2b923c129c981fc2bdf778e7b2
SHA25655c3169bbd01646c932649cddcd344f0d929a9339e3a66373bf3b0c0f5ae8d79
SHA512dfe33df0cec47e11670611e46456a7ff442cab691c214cf26a34ca4b1e457fb01640f149995af115c9157535c9680dab9f20deed91956173deb3c3fc066fe8f3
-
Filesize
8B
MD5f9160f227704c241217105945df2db42
SHA1ff5e81404901b6ee0caa58723c6137b3bff4ffac
SHA256809b22e4925bc907002cb60f0251a6a87c31b0fb84d338e271bfc0e3f04abb6e
SHA512b4afe57bd3cecfeaed253ec4e4a7e22e01267d944a08ceea33118b52a67c45c4485e4c1d1ca52dabfad45e0941eed68cc575ea31518647041cb6fb2413631850
-
Filesize
8B
MD574733f87e646ef45f8dd5259ec062c43
SHA11f1edaa59c3c7bd8fdbfb94d9ca1cf6bb199c3af
SHA2569559c647b321d536d8f93f24bb97bc8945533cff4aa208f0a661c6d6d4e4ab21
SHA5124271424f9cd8469ee217315f0fd2654d94ff26be5235be3127b154d67821fbbe4d295a8bde36ac1a2385c60f6f666834f6f0629800b4ae21563089fc8fbf737e
-
Filesize
8B
MD545d01a481239953f358b02aa958d5fa0
SHA10c364668137ee1c88450c873510f405b50b15e40
SHA2560c14fd9b42c192ee3e500dac79a357a96da78da1b02e24d90ebba57dea4676c8
SHA5129b439c4b73818f166119b36bb0213420480ed8510589b0ed9a667e2d04d65f898fe4dcc3bfcff8f70f605a03fa289f12ccc297f12dce8c806a3abc2083fd9e50
-
Filesize
8B
MD5f1cd35f70392dc1458f2059f5ded56c7
SHA1cf446a8a84ecb5b43164912e8fe02de30934f675
SHA2569b00da0ffdcec383a2c5644aecb078bbc181aa8202d8564d7550435395572082
SHA512cfab55ca4e370a2686e2172b554efbc2633e746c1737f7dae9187649147b7415b28e8f14745a32423d3ae5f9b46504d41630ded8ebd2f80452aa8471315ed6f4
-
Filesize
8B
MD562207d819821bb9e2105cd3288129e37
SHA1677e02ee914b4c00c5b11b8ceb2393a3b7daf33e
SHA256713c32a46d68c218231e3b23a8e9f2c74fdfbcb41da0b68efc05a9b0e090904c
SHA512b73bba995f6f989da8f8a36fd1e568fd5e8c11023ff97ead74594d8a6bb952f15e715beaa1341625f607e3675d53b3e095703d14998a0bb2eb7bb9a09ac40bc2
-
Filesize
8B
MD5b9753997ba81eecbbe986975a98090a0
SHA16b953990136a849455bce30bf60a8eab47c36725
SHA2560b03da334ca9f44c02b5c1c7ee9ba789973fcf49dd53d80e35bb26124b98d716
SHA51276773d764f6c7b089f43ad0b27b9aba5694ea5626493917c2be12823f27f94b438548fb3e57ba83f75297839004a93ccc363d0fcfb5bdd0a18f31af08fa93f8d
-
Filesize
8B
MD58be7bbbb64dd7775d6412459580a45d6
SHA169aa072b5cca45a7984cb455be5978d6c16d34d3
SHA256b2718bce76fc87454b7ca5d47988c1576a9113a8d7531959a30c01e426faeab4
SHA51229e5a8769c5b587138c366dfba6f569245cf7fb107c29b5ab9edf1c608138df56fc0db97c32821ac2288b2254eae034ac60039337ea175de60441ce9a789e6ab
-
Filesize
8B
MD5074c8b68a71acda2d580dbcd4e99a16d
SHA1c6a0742279d96289004d2a45f58a861f30f07aec
SHA2562169d6ce69cfc48fc9276001999c698730789e94e12c8d67eb75a789d0061c4e
SHA51243195f5b6bcdaeddbf354852f07228ce968091a200a2df72bb868f191adc6e8fa4b0dba026bfebb09fa020146760e628e8b1c4bb9962704f6445172b1d5a3a79
-
Filesize
8B
MD533b16ad8423e361f0a926c5a756fd623
SHA18b95a6a017b4f35849c6e34a39d661d89640239c
SHA256b5f650b8451471d3e4063fcea0c18a1187e72518a976067ee5b7ff5146c16084
SHA512a6372a78d1118aeb4ef81c1309c1ef6b40b3eb5fe4155b88724f2e90d3099e10d43f5df5713ec1af14bced94951f87db13ac6c370ee7129c5d1a33c83bec9f1f
-
Filesize
8B
MD5c0b4b90681fbaecd6342cd84ab4b8038
SHA1aeb4a22f939c4b5e119535632d38f11008fa2c0e
SHA256b7fa885f8f43db20d0816d26fae847060dfc299a6f6a22ca2bd1be2d21cf8b16
SHA5127e3b6dcb6b3f171f5461d0af550b4ef687dc3d2a486908ed61eadbfd0dbe0bbb9b350162e8fa682df16a2de382114a41e8f4020f7f8f81d9d9b04cc1ee20edfa
-
Filesize
8B
MD5cbe856833cca17334844e4a5520b12ce
SHA14a1d3d57e6f82b62dbbe239bb6d69b72cb98422c
SHA2560db8719f6a7f855c5a6c04978b0d4925e3391446f9c6f7e37faaf3945d3111ac
SHA51276ad47f88b0a3e401dfc85a5f1eee196fdf2dfcd859dbf55c0620ed25282b8fd5df3dbecd8c0c7764cf232e929955708e3dd6daef9f29754df8d54f6233183fb
-
Filesize
8B
MD5baceb383ac8e25019e439fea82ed502e
SHA12fc16c16fa15a05dc39aacbbc9171f33a0c2a8e2
SHA2562c06dce16aaa44461a33dd968db807e03c762d37b095601c7e1c693667eda816
SHA51270c86641154b7f8ba35a12dd300241579a3a92002fb184952e08074b9caf5da42878563e05f7447905db1883161e39c3c2f33884497589ce8e8c4b16306d6afe
-
Filesize
8B
MD5ac1a750919030b9961479864c98a6bca
SHA1a840f43294920d4e954282476c5781c42e85a1ec
SHA2563f69901f4b05f5cffd8f32c262b15973022910b92c08bb2bef04295b7fbf2763
SHA5127746dc78313c2718e6a6f45f73ea13b58578eceb9fb6daeb6ef101110e1bcc5fbe47af1d9a82c6ac59e7ba46c17249488ed81cc1e2f850e1bf43da70038cb2ab
-
Filesize
8B
MD5de149013e33a3aca7a080031bc10d333
SHA1c4b7afdfb1b93bbf23ff97053e36953491853497
SHA256ac399d0ced3c43bb6b6bf198232c59f9ba41cf099cf20e980d7c57301d643f86
SHA512b950b78fe0bed5b5676272bcbde40d3ed60baf1e888f2ec07545ca59bb1f05240d55c08c5ec7f8f6a1b71de7d93678427010493442a4114751a4a1b674cb3905
-
Filesize
8B
MD5f3d0bbd06af0550e829229c10682e36b
SHA16b79ccc3cc38e03925e631606b31ed706ee18eae
SHA25610356fb0da5a2d66667b07826a01ee48157f23e3af8d07fce50f3d9677b215d6
SHA512a59413ddf9f21ae57529abcee6d59460dac3826be57f8d4cf8ba1e80f34cc5f877f6014db363f4315b7955089322fa80996f8f708eaf153be5872c85332bc23e
-
Filesize
8B
MD56e3f2df48a31c0b9d46a4df4d6439560
SHA18a0c8832e0dcfef8998e7b20f790f1342b6ebffb
SHA2560bb99b948a140864e805935c3437b0df52048502028ed3fdfb1cbb50608e4a2f
SHA512c7d97e505ca850a4779ca7fa5799ec9520d1cabb5c151af66d8367f8efaeefc12ca26bf3d2a1d5fb2a5b4f485b4f75f6045abd60e8ce0c2e77165de8a7f140ce
-
Filesize
8B
MD59f710bc9d3744d9f1b86d7a1e24eabf3
SHA1f943eab10a07d37ff1feec092772e6f9ef4dc317
SHA256a0222f00d14a8c4fb0072a0751cce8e60239397f0257782077eb358dec3018ea
SHA5123eac5a0558b8842e3bac24569ff3d736e0c51b43257e17cb5b9004fb47e9b3fe75d55f1d08dc62aaa3dee08010d4236104840312fba2601b51087083df683afb
-
Filesize
8B
MD592ae370fbf1c12b04d0859d4612ca58a
SHA1da7a29d7feabe559b58c956c1dfee63b0699eb72
SHA256d1dea5c6bfb6f6726763292bc40dc8b412354d5651da4d2d7fa322fc06cbe3d1
SHA5122b43402c50f0131a4f45a41114250a6f4e706af79df6de1da587f414901c0e0dfb19d6dd419aa5d66f42e8bd1a24352c49b2095564549d6cfaf84612b39649eb
-
Filesize
8B
MD5848841909a0fa9a6b18fa258934edbaa
SHA17f3d1442ae8a814f8a8563eb52c70f0303713398
SHA2563ae491b66de1dced85086b897589d9d5239d9d5aff8632179b1b2ee750f27a1b
SHA512f391910fae37e90fe0d8c596ba9838ae7636287db76088597c1c47b742517866e5e9eaf57f91e87aa11ee6781527d8c1f55c3d74ab5f3942cc71383bd8e980ea
-
Filesize
8B
MD5d593ac7cdeaa0a6e2cb7aa96533b9865
SHA1c77eb8c5c79ddf4c22d420a0743df6328779898e
SHA256032fb500eac911c0fa20f4c700c1eef0448d12b24b22db4e32fdeb72da66d2be
SHA512737c2a8bdc814327bc47b8aeb96ac844577267fb4af568e338b0d6bc509e35f369b36c671785fe25ff6f0418db903d72454518c5a3b90cb9ccb72899c37aef8f
-
Filesize
8B
MD53a343b9548d10e9e1d4daf37b9449a0a
SHA17f9645982bcbb446153a08785fe512822590a7b0
SHA256667a12f02d8cc66c2a107367b57fcef3aa7b4e536039275836b00aea9fff42ab
SHA5120333c7099f06828aa3a2339eb2e443902ed36408ae1e9c7e287aad5b01baa9a647b7296c170d4e3a307402ee85c24b9ddc4fcfbc279657aad36f7114eebcb92f
-
Filesize
8B
MD5e0fa85c9b46f9e013a4726051d7804c0
SHA1762b3fbbce1f366a5d5ecce4df89636fbb0abc3b
SHA2567dea7860a8b9738c38779ac5b7c30c6fdcedb4ff3b953022a902e2f25aa129e9
SHA512e1479ee70d99637bd6ca380d1020dead37f573500312cef8deb816470a4631b8298df7176613dc32eba859d220c4c81e51759dfaaffd6f76ea7acad0fe25d052
-
Filesize
8B
MD5e00ac8aaf763fdc7f1a9a70bb5802278
SHA186bd9314e3f55de3b52b7d4408221a0fc7272569
SHA256797ba754ccc18f2979955c36d59456a6e286beb95eb491e0cd113b721723513c
SHA512748b4ea8cc37ee462467afb546a2e26e2c049694c98e30b65549596c8eed193b29df24c3007c7dc542a2ed647a26e7a6b528ba1d44415061249721d154debb13
-
Filesize
8B
MD5aa03fbbda4dd76f5bb3b700a9ce3f83b
SHA17fc3b6759243ee913b45df5eae1b10d21afc6f18
SHA2566224531279ec247c9ea14ecd7ea272fb7afdea9df3619baa24d50af406067737
SHA51245a2eec20d66f857d2fee0e5f05290512d402629ff0282d466265b6e104ab029015d4487a541459f8958337e15c509766c4361714c0441b483908b86e13fde0c
-
Filesize
8B
MD5425909dc8c1cde85559c9f3a27d6f187
SHA1dcbdfc7f3a7bec16d3f2c78aa14529ad411b759c
SHA256865061b282e041070db05bc46fd90721ca68cae60ed0fc1a5b3d36d76bf2a75e
SHA512b378c18820c7e55c87377f04d7fefc48f3d4f465e5ab097b5ec28b3cf4705f2d878847187fe57d385387416b2ef608e1c738614e62813ada8acb73e5c469ce4e
-
Filesize
8B
MD5c2fc641bf866d91ca45e7b414e39cc20
SHA140c7d495d76c8d4b09aec23ba63d5da7e0e5dc5f
SHA2567adedba0c89e5ddbd2890a508f0a110c0316ae0664e1fb3b824a23a5e059696e
SHA512d203083eb2b4f6d9cd502f70a1948b3790649592b0b2d7dc62022fa4f19c008ce21f6c9638fa25a27d023b005f6781567c5923ba37cb9c2bf0d51f97fc651fb7
-
Filesize
8B
MD5ebe3d954a1939d486fbbe2b3e03da712
SHA15a23885670c24bfc41fb7f79915d9f45d853a3c8
SHA2568a89070fcd47b60a79eb71aa2fcd0ae2952897d7be9b6e4bcc305d603d2ee2a6
SHA512f69e84459dae15275e9272dad5e2f475973bb2d7e629f89e49548008b33d253cbc7b922fa9facdbe25f3483c774381911e2b2840d9c38afe3db551f4b36ca124
-
Filesize
8B
MD5bea0abe50357a838e7b42203a4355764
SHA1f3345eb988de2cca6aa56b740be29bdc728e4459
SHA256bc45dd2ad362b2759e8bbd50770d4e12db098b38718e04635efc4dedcfd920bd
SHA51286232ffea551a733f520cae7f0880ff226c04886748f1446a5d16fbdc15bd56245ebe57a77550f674812700533934b69ea4071364aeec6a9d43549a219ac0f53
-
Filesize
15B
MD5bf3dba41023802cf6d3f8c5fd683a0c7
SHA1466530987a347b68ef28faad238d7b50db8656a5
SHA2564a8e75390856bf822f492f7f605ca0c21f1905172f6d3ef610162533c140507d
SHA512fec60f447dcc90753d693014135e24814f6e8294f6c0f436bc59d892b24e91552108dba6cf5a6fa7c0421f6d290d1bafee9f9f2d95ea8c4c05c2ad0f7c1bb314
-
Filesize
988KB
MD58715d5d32241ec20ab28776fc7f00608
SHA1eaa03250b7dd818a9b285138ab74604a21f8fa61
SHA25636019c7bc0dcf3dc1d8859868fcc2f8c1d6c60c800a4f8051912afe7591a9a64
SHA512151a423a2205736a5b4135778517498e52d751522ecd1ee03ac64aa5f3373e58d067819db90fb856e7d9f8c8f66e880f868a9a1d210452362e60de74a0cc5998