Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
89s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
11/01/2024, 20:31
Static task
static1
Behavioral task
behavioral1
Sample
7bfce59cb1671555ca3286a1ff7487192dca9e9e1ecae1f78bba1482a2aeb908.exe
Resource
win7-20231215-en
General
-
Target
7bfce59cb1671555ca3286a1ff7487192dca9e9e1ecae1f78bba1482a2aeb908.exe
-
Size
705KB
-
MD5
8033f1b00357526723055165d3b5992d
-
SHA1
193d6bff99d3cc6ac9c67fd5228df75fe1761b34
-
SHA256
7bfce59cb1671555ca3286a1ff7487192dca9e9e1ecae1f78bba1482a2aeb908
-
SHA512
0de7ff962ac1beb14c6a70fe65ca25022fd53f05ca46faa43253dfe2a9bb6f6bc71459779ba2c145e9b6233e4d5e0f217806354d6a6d188c767e8d03dfc3e410
-
SSDEEP
12288:2F9B+VHGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:2F9Bvt/sBlDqgZQd6XKtiMJYiPU
Malware Config
Signatures
-
Executes dropped EXE 7 IoCs
pid Process 2236 alg.exe 3824 elevation_service.exe 1392 elevation_service.exe 1752 maintenanceservice.exe 4592 OSE.EXE 3964 DiagnosticsHub.StandardCollector.Service.exe 2000 fxssvc.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 7 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 7bfce59cb1671555ca3286a1ff7487192dca9e9e1ecae1f78bba1482a2aeb908.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\cd2fdff4e04146c8.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe elevation_service.exe File opened for modification C:\Windows\system32\dllhost.exe elevation_service.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe elevation_service.exe File opened for modification C:\Windows\system32\fxssvc.exe elevation_service.exe File opened for modification C:\Windows\System32\msdtc.exe elevation_service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_108421\javaws.exe alg.exe File opened for modification C:\Program Files\dotnet\dotnet.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ExtExport.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\iexplore.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javah.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstatd.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\tnameserv.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\wow_helper.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jar.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jhat.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\FullTrustNotifier.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe alg.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\notification_helper.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\extcheck.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\xjc.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\pack200.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\setup.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\serialver.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateComRegisterShell64.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mip.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javapackager.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javaws.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsimport.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe alg.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateSetup.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Eula.exe alg.exe File opened for modification C:\Program Files\7-Zip\Uninstall.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jcmd.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe alg.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe elevation_service.exe -
Modifies data under HKEY_USERS 4 IoCs
description ioc Process Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\22\52C64B7E\@fxsresm.dll,-1130 = "Microsoft Modem Device Provider" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\22\52C64B7E\@fxsresm.dll,-1134 = "Microsoft Routing Extension" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\22\52C64B7E\@fxsresm.dll,-1131 = "Route through e-mail" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\22\52C64B7E\@fxsresm.dll,-1132 = "Store in a folder" fxssvc.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 668 Process not Found 668 Process not Found -
Suspicious use of AdjustPrivilegeToken 6 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4404 7bfce59cb1671555ca3286a1ff7487192dca9e9e1ecae1f78bba1482a2aeb908.exe Token: SeDebugPrivilege 2236 alg.exe Token: SeDebugPrivilege 2236 alg.exe Token: SeDebugPrivilege 2236 alg.exe Token: SeTakeOwnershipPrivilege 3824 elevation_service.exe Token: SeAuditPrivilege 2000 fxssvc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\7bfce59cb1671555ca3286a1ff7487192dca9e9e1ecae1f78bba1482a2aeb908.exe"C:\Users\Admin\AppData\Local\Temp\7bfce59cb1671555ca3286a1ff7487192dca9e9e1ecae1f78bba1482a2aeb908.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:4404
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:2236
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
PID:3824
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:1392
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:1752
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:4592
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
PID:3964
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵PID:4352
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
PID:2000
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵PID:1092
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵PID:3860
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵PID:1564
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵PID:4992
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵PID:3324
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵PID:3028
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵PID:4240
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵PID:3096
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵PID:4752
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵PID:3196
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵PID:932
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵PID:876
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵PID:3424
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵PID:1416
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵PID:376
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵PID:5492
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 916 920 928 8192 924 9002⤵PID:5520
-
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵PID:2676
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.0MB
MD51bf302fabc1ff8ff98eaca65a9ef6373
SHA16c0d2e08bc4e4c8d181f2260485c0768e45153c2
SHA256c6044c6e4667e66eb9fe2558ebf8a88a2b495b382a7d2158314967776a2d5312
SHA5129b0bafaf6a22b285ba03f68e812d734e0ba8d3683bc4111768cd3df5e7a571cf0887860245f034a7d78fbc3eb4d13f7cd12df0d9bdfc2fc0bfb1e25bd2bd20a1
-
Filesize
157KB
MD574def984449e0267269eed2e7cb6ee17
SHA1022ab90edd299dff6df1d33c9cd6809ca0d8ae20
SHA2566fdf67c530620bc743076a02f89781707102071cdd26954ceff14846be4fd545
SHA512b176a8e20490bb8e0f4b9fec63eebcf3be05ff2c98bd4ef540c6da55857fab5cbcbd61c1219c782957dab437091bd298c90123a02fe1eadd0cd40baf50864ef4
-
Filesize
626KB
MD5d727e724aecfffd2035091cd8e8af6e6
SHA178cfa57bbe06ae82921d73b725973e9fcf6281a4
SHA2565c9d0605ec81aca8d3b23a291d236382d9cfb41f874f254626deb674d63bbc07
SHA51244f273d0a45ba3dfc5ef4c098573fe265dc4f9cfa96bddf9a5214138bbfd2a52c3bcfad2161a2e7b39371ecc35ea5a4ba0833e2097c9da44fdaf1dd082d561e3
-
Filesize
149KB
MD52bca6af97ba21ec4f02bc00801ad99c5
SHA17807c36d257a3fcc0660bc1a95a67f7546fd886f
SHA2561c4001f9826e4341826a00bfe13002e3da01b47bdee1cf722761582cc50ba106
SHA51283bbc6357cc56844242af9a4e2e1d98830265d26ee6eb484cf908f81f0a259200b84031d51ee9360e5b81b9e1192da62b50a1bd26d837a184193c5f5679354c6
-
Filesize
215KB
MD512f352b10d333af7668797a5526905ed
SHA17d6777f32147a35c8dd0edf36202be230efbc96b
SHA2568bbf7149f53fb1fe26640790a6ea93d868dd8f0a0fcea44c3fe106c1e1d7f5fa
SHA512694d480c9e25f1a3f6e6b135e47012bff92096dcb33c1c137b8f5778ee51943011e8d2d668cb02269080e46ec23929d3a2323d96d3ef3ecce37274429c85e637
-
Filesize
149KB
MD55a3b0c119985d25266dec7650cdd8b29
SHA156f89343d26722737d1cb5dc82200a6fcbbf5740
SHA2566a9c989a75ebd8f359bb2216ddbb049b40767e034fbd16e079f87d661f295281
SHA512a5730f35be41fafd9ebfe322f38ce972d075eac896c25fe0062be81e5cf3ebe54d9aac70759404f9102d9bf2e69e08043cae74296dba73b35ad675cb82fc2aa3
-
Filesize
282KB
MD5208663faa863306f748466f335fb3664
SHA1473f3ec48b82f7cf2d8585abc8d58e5222cc069f
SHA256211aa617e16621ba5358cda7595dcb8d5312a19261de2e85370d0b6c5ba84be1
SHA51271a38ada9334add9e4807c60d17eff173dc893793e4006f508a596e2a3bd8410b4d1678a7c8ce9dfb26138453a418f2f57625fa50361bd2615efb1775232828a
-
Filesize
104KB
MD50b3d158cf17a00d6dcacf400befee059
SHA119d61ec2b2c9a8d9ec37bfcc658dac5ad49f5bae
SHA256dea7371be01b317d42ca58b66593367e04a4f3d2c73f562643c7bfd57df11474
SHA51268ae0a1e676fcb7da0b4f7b6572638cd7b4b65a7feb757c3cf1ac51b069d8ef88a2946d1687d4fc5c4c7c0b380ed96e821d24b284e55ed44b758876f4c5edcfd
-
Filesize
117KB
MD546c73bac5bb921136516586726914294
SHA1d8ae50f2bb2141a0de15268125b3f8e90e1e68c3
SHA256a565ea66c8fad3e64e2391b740f8100d8a2b4f854e4089878dfa4a3ded64bfe4
SHA512c28204ce95b79ecc7055b73f946c3dd73ce64398cfd83827a12f3531187443bff780df7bd2c7f6197f78f4f58d653efc728bc92954dd64bad474dbaff74a9b7c
-
Filesize
22KB
MD5c54528a3109c330aae78dc7fd92f1785
SHA11fb96f96b73bb73e8f1481b1762547ccaa8629b6
SHA256bb6d2955880b0da176c3fb2a3370f5136f5969cd8bca70b4a5fff5beb2fa9325
SHA512096fdb16765fb4d613fb36b5661962d9f3a866f29d8191bea723d8441a400a06cf440c0ad0c58eca4d724884c9b08c06b7c8c371063b255f3ab6f60d8475e005
-
Filesize
198KB
MD550e823aa17f034dd1e431b09fd4eb47d
SHA1772a8c2606209d0a4160f1f9ec06b8d3c6630241
SHA2568bc13181233c03c22a51aede0e9f9e5e0d967e20adc11dfd10a20ebd55ec9f01
SHA5129739bcf9d0e8e4671f9488908085c87b019917cad381a88621867c19320dc2e394b52e0eacee1de7a4216ffdc05d00d146cd7ba5e36d1bb7c75420b63002c22e
-
Filesize
23KB
MD5b36bb70e2bcaf6ca25be3060dfd58662
SHA197575c05974e445c3dc124c6d0b33657927022c1
SHA256be83522f2d2a799ffb035bab47241557b5f1b04fd869f4c470f98bf3a19d4988
SHA51264cb4e5c6d167cc1623a2fd64e1afdef582fa1541306a09d49c2534ec3e976d1697a19da7ba92b452b73d25428228f998e6fc7e408aac9b7a2f23e6523558567
-
Filesize
119KB
MD5fd18c4350bd0aa18b7b86d500e73fc68
SHA17a4668e6c953fadbc5d3a860dfbc99ad8ac9a267
SHA256d2d3138b16b2a24fb6b2624170e4df156a948775b2f0563acc699e73e3f3adc1
SHA512ed8eaf17c38e178c0f6816c8f82ef20322a7678aec9cff3e4d14b6777cf580c30f51aa18e530bd53b553e893be67a506688156ca55c14ca37b88651c2feb7410
-
Filesize
474KB
MD5d3c76774bb2bd2e00d7d5ce1d6ddabc5
SHA1f2e5e07caa8b53a35ad399990044d46d62a1a220
SHA2561c1befaa0407d24b59fc1420cbd0f327d02b7160ead03fa8f5aa5cdbda5cf1fa
SHA512cdf135901583ca81fe13da173caeefeb29e75b1f7e8461d964408fbd6389e8643461acc0bdb9d772f1574459308ccb29b605d1a5222113797397dd0067e1b1fe
-
Filesize
25KB
MD54802943c6d8679daeec90bd0dae4c198
SHA106f653c33af10c8561c51ab7d00380cd293bf384
SHA256f66825c2cb25af570bc601d60c2821eb6b18e4cf523c2effcef25622d607efbe
SHA512bb9e952fc14cb3dfb95af8a10727891b0f56d60cc6fb1ec5db2d9ba26b768e442f85cb98f0a481f257616d8f6cd2cb7a31bc18e8c447ea18200f0552145461a1
-
Filesize
88KB
MD5bb268bf624a88850b1378556758e5f36
SHA15b530546022987e24271bc70ec73c0e27f92da1f
SHA25690d3e1aa9b0a234de567583697cc2fa3b281950f7e7340b57d93b3dd32f7204c
SHA512f05bd27110046f7f8588992ed4f30031ce2fc6b65b9f6226438220a7fb028c99118312803455b72d46ff769635dd5950a4863a3d8df8f607cbe14e39edf4f4f6
-
Filesize
4KB
MD5ba0fe0b0a1ccab0fa4f100f59cd173a5
SHA1f71ad7ea74f81f9f0765079bb545e9e084fca1d7
SHA256a01cae6222b187e16501291b9d0c055202fdeb50eef903ddcc81d762bda7eb5a
SHA51250cac9be3518ffe343fead3a84eb21f5345376be1142afd2f47c1bdd4ba1b90982f3ee4a3b614906bab67c7cd3cb302aa9e2cb93e18b48b284294987ab4f5494
-
Filesize
85KB
MD57a69a6539964443cf45fff7004491fd5
SHA1f7191edf9a52502a217825698b05401e3c1d7631
SHA25601b2383e6149ae495f6705cd4aa14dc2fd147c4f0c4f6d715c642c39396770c8
SHA512904b28f03206db6240ef4844286ce1564cac654012d83d3ac4aa27e121e2c69c4c783f48eb07b656e9a6885fe4e84ff5ed9f4440f6ace740883f558a4ea1e623
-
Filesize
1.9MB
MD524c120f5387771498c4a83171c741caf
SHA10b84f0d40e953fad37e376f25af9f90b74fef896
SHA25681bf71e521633b6140d115e2154a059ba93dd802af05e70f15562243870b1533
SHA512f245be663e3f30d02f9abb898db65fc42a878c29129311ce6ade46ff959ee6f7511ef40ab075a5172f36020719e40779ae0e675b686d245035773e814bc656d8
-
Filesize
65KB
MD500fc7edbef99a9066afa42250b2043d0
SHA106e37ff3c2d8bbb9fdc0b7278417fc7445745cce
SHA25650e553e0048eeef3804c44d53292be987b33f9587c0c7ba210f88738d9bbcbce
SHA51295485ccb5b323d65a1981df41942775cfca3927fd1bac913a17d36c023fc0752788c1bfa3671cbd4be7561cc1b52c1a0395d0e85b670132e3582187185da7766
-
Filesize
72KB
MD526f870ed62a91760efb0ef56a427784e
SHA13f2cb5227d7168bb7ca38f410087d9aa5641c04a
SHA256943401cd84455dad2c5eccb5e26301827298c23bb1e293a7d5bcec6b45535197
SHA512c155810d5495cd32f7b867701263e115119e38ae7c44fbc86ab1530cfa3ab19f63ae5d053e91e217b3c3da4a3fb347a274f74d51fb4eb2c0991a9c19c938fadf
-
Filesize
148KB
MD51cef2fd58972c22145ed6f5977059be3
SHA1bfc797bdbe22e5273c4441a6013043f93fb1b088
SHA256fa37b55787c7f9eea25417cd459c132e05b1d0e6daa1793f023d7d5d3de61022
SHA51259da8c95e20fcac37f58ac94133024da6273a29216816b2dddc51c6b2aa4d1ecbd6d53627336a5c27714777f57a52f6340dd3dc937c5fbcaafc850ab75242564
-
Filesize
106KB
MD5892305d8f5e63743b07345e719962a0b
SHA15062e49a6046b3ed3591892a9c1d9d0c3edec6d0
SHA256e7b82a5e89b5753f22eff804c2704ad1e72897ff3f26d69e1819841a2aa710a3
SHA512073b15049132f54c42d655fc2d394feb6465ea119c5a4e92e67aab63cd96997b2678ec6daee8a3fd764ed9a19b320448e72e8a7af4a2496e39ae5b8a45e6a060
-
Filesize
158KB
MD536531eab07e7ae355ba344eeb5ce351c
SHA140dcfd982b6c83e3729a16b2972f12cc53453639
SHA256ff35d6809e70559986b85244c4cc5d585593672082a95d0b7874344630267b55
SHA512a92c2fa664ab7ce624e170b42b9bc4b7af06f0647c0d0fc9b8d799113b83beb3e1a8de98857773f86f1f6f25a3d93de73b8093b7fb9fab074d19b631bb8c3493
-
Filesize
64KB
MD57fe6fdfa8c6b850c64f8015a09a17e72
SHA18df89169e845f13285d137ac5530d69d6205f9ef
SHA25686454aca1cde3646bc4b81808500c730f34d20ca9be3b1e5e292e0838837ac8b
SHA5125d83c705d90c6c3b9d6d2ac0ba74ec06c8a71d03f63d4f738dafb154f05315e608a7d46313fdfdef79b775752eec865eb7d2c3e119de14746593dcc7e86ca73b
-
Filesize
90KB
MD5d45f4d625f70dfa5e12788f2d517d3dd
SHA1e852bceb274a9437e2838507cea1d4ef266e9b5f
SHA256cc609e5bbec1614d9df805aba85658be07f7a018231a5e462e9e23147f97355b
SHA512adae6166a18a92c40afb48542d87f23df5dd0db6c42db10197d502506dc7bc8758e6a431d246d86db49c366ec98aa2edcd43e6d7896614c95e1a9974c0d2c4cc
-
Filesize
63KB
MD5727c2245cd587c7bdab458ef24eba097
SHA139e10671d2962985bf0d35fa3596ff0549c9f4fb
SHA2560306e3cd3bbb661c42feaf95f3acae534efe58992321ed8843d65d1c1f8c5fe5
SHA5124f1b3d320492f48126c0870b23d92482d1bf033b1581e71283cf08f8d6454e8f39b6d4ab6397cc882d09ff7d5e96540cbd83112709557cf8cda0aa6327de9925
-
Filesize
62KB
MD508d28db97d7e647b9e2297c2b333eb63
SHA1e1b6f3a76c2cf8d7b4d91d4404e4bc8861fedc5f
SHA2564c04aef4d1cc924a02bbe6ca60fd87c03491d3166a783f82b47e8ecc209583f1
SHA5125ddc41251624505601a0b23eaae00dbf2e61e78440b12dd6dec0bd057fa7e5cb6acf993ebbfbbe3127ca644f2410f4a526fdc1b58f291033fb8df3cf858a6c6d
-
Filesize
82KB
MD525e2812c5dec6efeaf1cf4a3343a4bde
SHA15fb163c24228f7b6a54c51b69fbfe9860ec4f8d5
SHA256a745f0d542b75789cf0ba099fd61efd42c668b12e75a43c1d14f28abc8fc9f16
SHA512a1ffea909cbecd6c5f9c9ab308e8e7f06efe9d02ed2aa4ee1448c524ce161f0cbd20358583b0f88a89a078945c513c4c4a535762525459240edff4a8c92c4374
-
Filesize
71KB
MD53ce55a0fe9244ae6c25b89cab86248e2
SHA1af7d54e9f462055787d2638f3ec2bebc2d0fda02
SHA256fe9f8b5cf6be60938875724a43ab4c643afb3910118a646031d07bc02c1c72e4
SHA5122a1396577f6534a011364e030a9b4ec7dae082146bbb0abe7fb98bcde452fbaa1fba3f79778655905fe406443085a18401b919b9d86887cb141df246593d99ce
-
Filesize
78KB
MD5cbf2c3291e08a4ac362f5d5fd12950be
SHA10f27f975aae55bb42e86d79fdc3e357241d1b6ec
SHA2569b17b71d0662bacfa01ddb08c519dcfd75b8457666d21a61623b2c51f676d582
SHA51208788de0aaa61056814030693de9c00c04b24f3f3d7c06d6947e5af3b244c5afe88f55fd4c4acc3e3c1d30df8b1d5b6f9ea1ca9716861310934dd1b89138e255
-
Filesize
175KB
MD5a182453d8c0c5797987f7796c2fa5f14
SHA13da2da557597f8d27f8bd0b3af5eac933d2d3112
SHA256d3ab6d8db05be5d1cdeea1ded56258ef5354a9914b51fa954170f7032009b3e2
SHA51287cd452116b941b3789e763d7bd37aad55f39ea21fa8c91ab0f3a865b36d6fc218bf716dd48f1938fcd2a732518d3c34824e694d21beeb9d08122bb7d8360011
-
Filesize
66KB
MD5835875f5fccdee5837ed52ecbf526163
SHA100d3f679cfc0879b3c5bb2894216e70ad7a0bdc8
SHA2560e1fb28ae361281ff0d010d05088a8a01d464f6275e021b95e187dc5205316ab
SHA5128cd50a39c7d7b1c54b816c5b79e5507285d7d3b6e085905e1f13d9b4c1db27dc358e8637936801f924bf9e2a9c356f3cc4614625af7e7bc734213341a83b6204
-
Filesize
85KB
MD51a264cca2284d9d7a70aaf7bad6792e0
SHA10307f3e8b8a6a4a374581500ebfa4faaf1483afd
SHA256a2a3f754ef0d3d85273445724fd5da35459137145ae64bea11723fcb38ca5a1e
SHA512bad23b3c251e38c7df0b3e6597224f6573156eee2358b32987d7f6169109c0cceca964d622624441a501f301cc0018c5dee61b0ee2198beb940f823d3f09ce62
-
Filesize
37KB
MD5d9b1d9d296226e4b6d9d30e9a55284ee
SHA17c43b2d31053cb7c5d83fdd3f8d50134327a4684
SHA2569a8ab30da6fffca0289ad11509512ef375452c99837b8aa453cb58cfeb9343bb
SHA512fcec8a995386498219c862092742126399864b37ac3ba38ee1865913349c5245bdfb84e72510bfb4e0111aa9f3576fb2525c647827bbcd923d8d2570ea6c7c7d
-
Filesize
78KB
MD55d5abf9aba690ae532f1aae947a8dde9
SHA15b4f75f9d4263e442a106490746612641a170733
SHA256d54a8e4db6f457457cad156181226aa5c4c8828f3bf34cf3ec1894f5e018c38d
SHA5122abfb5a89959730caf158829435bd34c3c42d8ecce7d3a38d145c34aabecea390575f13f7c1aa7c145e9c1d07f4c7242c6172c4a9b106eea54e51db4da773927
-
Filesize
52KB
MD5137a8244a90aaca981195c1aaf212e47
SHA1dad73d06f1ab56491e58c61d42faffbfe60ba34e
SHA256fbd23bdbe0394b9fed17b248f5e34b73ffbc738a792cfcf5726ccd36d0d7fdf6
SHA5127470dd6b7f939a59e0412ac5c95d6b4e1d26b1d1cb79548fc1f457c67b7b56be8737a9181b6b59dce403450bcf7618bbc92152022b113eb1a3c2cfc6093da604
-
Filesize
90KB
MD5ccb980469a20e9e90d143ebea2e05bd6
SHA11c5a185e57940a13cf6ae2d657c9e0e72fc63041
SHA25664189032a7993ebfd59c646a79bf2c89e2bddc9ce67de00c09467dc67d401285
SHA512d90e8baf97ffff0884e9471f2bee4d22cac354fddadebec9851cac59dfabfeebb439507b7c83cbe6276c9dd6101db229b5bebac81f7d8a7a1dca00df9d3475b2
-
Filesize
42KB
MD5c2f8e5f0266721813c02513c29581122
SHA18f822760df92f03b27f607e666d3ac7c78f6c4bf
SHA256e327361abeb057456fe80404f6cc81862c042d4848096da868cdfef28a48c482
SHA5127efe5aa00b2efb1002ecdb65cd0e5d4aa7bcab86793da6f545274863942e3f1d4f40c37ebb2eb5c8c8b282c82a1c01e48575e2dd1e3a4ebeba4cdfbf3a0a0a6a
-
Filesize
68KB
MD554ec0a8cd0e7483b17eba8617fddf067
SHA1c140d2a3d060084b9e0056fb45bac03762d53d12
SHA2560ff0e39c278da1571ddd8a8b03eb799744b98d5aa79965a37e0f73d71aa5eaf6
SHA51278ccfb6126854ace927bd38e8e0f69179e2dfb42af801571cbd03d3f7baaf446e78dfda99d51a69ed9033cf8389f368c29bfe91bd9c56c80584a1cb5d40e3d65
-
Filesize
17KB
MD58d133327ad8621980f45512e49cb272c
SHA1adfad4e03438b0948a06ac2b221c507ba8e23aa9
SHA25647a044b97a52eceba384b3b4a4916cb2db6b57c211149a760992973c2b6afd5d
SHA512f873143d625dafee3eed56d23f64b327cba911fa5eacba18065513dde4b44eaedd182964b62714fb648a6f33fc570cbf351447e9575cc8618bb60ab44a504d73
-
Filesize
11KB
MD5afdd43fdc5452e1428ce582556ed0d48
SHA1aa76e982c0463fa44a2f0116220a6a37391f236a
SHA256846e63fb42d90d585f4b9191ba0a11443ca7f5449661bc24a16195d8b85a1522
SHA5129178120ecd9664aa7e78e62b4327cdc3e6f5c8676bc2948d955077353859b829b2b3f91a918c56e5889461b55cbc68ae151b1ba2f654fe1b0926c59d74f2bd04
-
Filesize
114KB
MD50285629186491e27e9de54aca8ece56d
SHA1681512b41991d06ca407fa11619a4eb039002299
SHA256a7ea6d7e85130310343df3b83e5e1684827b52045207605787c894efd4496bd2
SHA512f33ddcf41b9b1f43637ed6641804f6025e803f5fad8f8625239f96357f387738ef717fc238241b63371fcd9f26753b128a89ee4c817c89f922722a93351e3715
-
Filesize
476KB
MD5e2d167f48698f919a13417e743748bdd
SHA151fd6aefba3286a475053d4f1b16ac59adf7d397
SHA25683f98c8916ab2e78a814181163eaa4697e84f534763a25de77297064bbcc116e
SHA512a1d30d6476b69d824aff67377b011d6a5d230cf5aa4a7631953531524ef07eba359edfba05a69cb38e5994f1eb1d08f82eb7c342369e24fb73fc85debf14d8db
-
Filesize
82KB
MD5ed07023708e1259025fa698f1783e445
SHA158b0d84e8a091e85c7ab1d35b8f7637b68ab661f
SHA256c5350f8ab5d01781395d0b5c7281a01882b21d7bf4b61ee52937d2db45dafde5
SHA5125713e0114e694c81e4ca34d54f8b51c8060ef34ecd137217201f264862e5b321b267938d96fd3fb2ab8ffb99dbcd031db474cab43077c5722f39c38325dcaa64
-
Filesize
190KB
MD5348f7adecd141cce90a6fb1d74421b1d
SHA11d9c9a6ab7d156d3f0278acad24fde12eb4f5f31
SHA256346590736c9f8d34180fbf595a66875e50f4d8d905dd55ef905a10eca84287ec
SHA51245f48f93838e07248f03871f6db1c67e8b58c97e242c8b4b22da9527d3add424d9af41a2b6ffe4278cee31148ec41853d59adda7bc21082678dced871105e86e
-
Filesize
155KB
MD52fd60391f89c9f27e9fdbf63e87f5241
SHA17a7db9cf10e8ac63fa31cd648d7d48ce2f0ca8d6
SHA2560b0d7b57539af267db0737da55ebf509984d5038e0cd3eb8b9b8f35c4c786b93
SHA512f18431a4650942c4c691d002a6089bbb7bd0abe722eca5bd764aaf5dac8205d209743452515f4fabf4b9790c2dfa94f37e0eaa92ab1e06980f47d525dfbd4d24
-
Filesize
129KB
MD5d74546e2d1fd29bb0ff3447796a73767
SHA18a406b1cdd841607378440d7340bec58c6240dd5
SHA25675ac87c0b6ed9b5fb6d613be99a8edef7a44c388f3ff11b154e191cfc22044f1
SHA5125a38e560fb3afe8bef5bf863d8f03fa8e37f351417dd3e9edd351ce26f31179fa51ef0826c0b6f28e122e0dbebc33349c9d0b7e60843908fd5df8dea0b28a37c
-
Filesize
160KB
MD5bfa3498c6b7c2736072a1a0dfa3840a0
SHA18048fac38b347f851117ac16c858be67034c0c54
SHA256a4645a035f7cd73d8698003f8115bf9f3d8b6a7f6af58f84c92a70fce117d865
SHA512f28dfaebfbaa308177d91ff8bb14ce5c03fefed883e0f949ac53c2ba5854ff8187aac5c61e26a46ff71d3c27ea1f8a96d8c5f0ad2d1c1378051b948a93cc3665
-
Filesize
149KB
MD556dccdbef99f4548e9f6bf744b11d76b
SHA10669c5f3a5587807930ec41540b694be1357d338
SHA256041e60b522001fcb52abef8cbab7be689b6afd1c7d1755248c2a986bd5707265
SHA512b72a87316bcaa85a848cdf1ff630090b8431c57a520f61c19403b96684d3b2cd1b224f3ba165d1f8d38f729b3a5c225cc86d43c0ba2c565c6617ca00916ea642
-
Filesize
198KB
MD56166718ff5987a98c795a060dffb0ae3
SHA157849588d8fa0583e8d06f7732f91e6357ac7141
SHA256ac594944faa9e99256bb8d688892abdba34ec9974979b57f1be635a3aa4a1059
SHA5123354450ada8a9e24d75a9bf7377b404e164295ad363adbbea10b3db5869c6737a8703954a413551076573aefb7175332d010ff098168b1d2f9171c162fb81842
-
Filesize
14KB
MD5ebb165e70a8843d682679568624d8952
SHA12294576d61dff06bdc0c9c8ed7b216e4bdac12b9
SHA25667a6482fa0c6395458f71feb7815563259f046395d556f9aada0e694ccc738dc
SHA512785dd2958d1e21f9ce7287d4071bedf6b31e71f6c416f013dbcdb0310c71e1f7e26d417b428241f7b1ef601c91792d73147623f2efd2ad62fa6fc9f7fa8c2c44
-
Filesize
132KB
MD55d5e80f4f8d6a02a930ed08e3c560a41
SHA18b675eff9490fcafc526cd98f9ceadd22e4d558d
SHA256b98456e568d36cee3a8d5be34e63dc5e5d7d0819b7a842a4caf15c40156f266d
SHA512de2f608b8e4c30fbf8552128af741912503c32331a8483206edc94fb7c46b7ddaaef2ea6e6d239bbe886fb66874dfa7a0b5aa144c7cccfb76ee773093b5a43d8
-
Filesize
22KB
MD595785a61f24bf6730145d689fd6f85d4
SHA171df0d4e72e23072c66b104ba95095c20d93bc77
SHA2569c04d2387d8636dbfba8b2dfc4ec3e1a63530b84394c2bd223d4d654239f8a71
SHA51271ef4437b509acd0089deae09f7966f0ba86ff8be74c0b1318dffb299870fc1d13f62a7b18b37a78bd4022c62010b4b3624f16a96ff99240297ffa2cc7493c11
-
Filesize
127KB
MD5946f2994d92ee13cd60659a5343101b9
SHA10f37a0110bf699b591a83fecdfe0559471bcdf31
SHA25608faef7d5b753e45f42dc2d917817231782ce570c84b9755c3e30e0550892589
SHA51220f1c971a17a1c3980008f95e9eba49822af05b91911fa5be41bdb2e510a0be2c200650fbc49326d8b936d2ba124238f2db0001f69b9beb366641e17803f878c
-
Filesize
59KB
MD59ebaea658674901abae392340d107da9
SHA17c19dd19ee00995569336a809027e262de47463e
SHA2562ef2efee41448c1ad0e4af38157ffce1906dd42cc8ea1b51e79bf91df9baec05
SHA51270bb4bfdaddca0070e6ed331d02bb95ed5b36e11ac66d0c88ca81f6825c14b489006ffa12ae6a81f17077327b000dc72bd0f73dd447f2763cf5e2c8482bd3c38
-
Filesize
661KB
MD574f9d2793bf9f5889ab34844e7dd08b5
SHA15f0d8f545b02e85d983662f8cb4586c4fb9b8ddd
SHA2565c9b8a49e9ee48599591d1f9582da3e544924c14884656088dcf16f494a21b33
SHA5123de34eadee869febd30dd99dded99f441d2ff44ba68a0ac8fc267542b3d132689702400ddb48d19d727522e9d404238fe6e3f9bb029e7905cf99e33e9d4e209d
-
Filesize
48KB
MD545c53c2aa9295210083c3082b7a7d0b2
SHA10c9ab460a414c53e11a68cf88622110ac81a6c71
SHA2566db3b3571985fa5d295ba5934ac07b82bc80fa0daff2c6a01adea5c57c69909f
SHA512aefb6d38e90f3bff0aae2860028846e219576a4e1308e38e631561d32a9e49469139fd6bc4b6161bd2146483ef447d0b21ac45c47c13dde2424d98312b2fd659
-
Filesize
19KB
MD53b05d7976c4a95f5fd37a98a66dc04b2
SHA1b9f20cb2083de498eda81a96d496622ab09e3cff
SHA256f09e73d3c62986f983cf9dd536e22a782be40266ef703f8b87c9273d78f43c54
SHA512f8f05177bda38d2e74fd73279f6b02be1155d1487af664a7c09f9d8c301d5e9060871fb4522c1b1a5dd51fcec2ff8cb0ff088cc4caf2a4c104980631e82c4f9e
-
Filesize
35KB
MD505d566375f1079baf9b588a535dd5cfe
SHA1538cfea499d28a7a8f1e444c7b4d3ccd354b8266
SHA256727b17fe52d197dfd97fa29b8480cfc3ae6a67dc1863de4feaf483ef0720d22f
SHA512615e540ebb59ad0f808c1b2e8e97abadf673c1b7444213f6ef60e84c39aa9b7071ad323bf90e797983d0fcb97cbe34da3237c61d186a662e98303bfc45c377e0
-
Filesize
144KB
MD5c3d1be745f08bc04ac3ac44c03fc56ee
SHA198d4aa430b37d30acd371dd17b6659ffdd1e7de9
SHA25644cd1d3475705d7ee1cfebc243525cf0cbf0ae518c96fc2f5d7139e0a91ebc22
SHA51249ae71c6994dfbf0075ecc0c3a37945cf5052fe2e2bb911c70429ea4879ff1b78081c696b712d6bb3e342a4d61e4c144c796873c0907dbab230e5439acd93038
-
Filesize
23KB
MD5d4e0efa2052bafedcdfc7c6b76c3519b
SHA170911a6f06779406974e33d64f092f00f523a285
SHA2569583e156b2620aba98af16f38e2bb0afc5f42551abb92a2f592d9c8c7d0f405d
SHA512f79bb2012f79abf6766cc204435f1cbca59d0ff8f3fcbb928e888693d8894f3d7532bec65de0bd65072d0c05ff2535b0cd5e64803afa9de515afc3bae932f80f
-
Filesize
1KB
MD5538865867807ee42f3ef354cb248b7b7
SHA192357ccbdc574b069c9dab1c74fef805b8dad389
SHA256d5a9cf5389a6c072ca909699b8ad4d02760bb9a6d2328ebc3ad5fbb100d1368a
SHA512989177167b5bb805fa5dec7ab07509004f43eb88eb7d381e1fb3cd0b6ab95a2b0233c55ac3076e7c8327511dc6a3a0bb4a0c9898e32dd86f106e260c76bedfd1