Analysis
-
max time kernel
145s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
14-01-2024 07:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe
Resource
win7-20231215-en
windows7-x64
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe
-
Size
4.8MB
-
MD5
bee3dc35e58b6c7cfb3373edd86f0f5c
-
SHA1
7d355964f351de173dd160fb2c101008adf63883
-
SHA256
7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910
-
SHA512
55329e7a2f02a3318c87bae712918a7f9b8fe96fe098e09f3549d70aa9fd5b5a71efa7119385eadf563d909736be243763fd7a66ea1e8e29b35a06874a1a0454
-
SSDEEP
98304:LpLE90Ta7PG5o2/JUqf7W1DSWCLT5S6SNZOreOa4:2932puiSeSOt
Score
8/10
Malware Config
Signatures
-
Modifies Installed Components in the registry 2 TTPs 6 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{EF289A85-8E57-408d-BE47-73B55609861A}\ = "RootsUpdate" KB931125.exe Set value (int) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{EF289A85-8E57-408d-BE47-73B55609861A}\IsInstalled = "1" KB931125.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{EF289A85-8E57-408d-BE47-73B55609861A}\Version = "28,0,2195,0" KB931125.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{EF289A85-8E57-408d-BE47-73B55609861A}\Locale = "*" KB931125.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{EF289A85-8E57-408d-BE47-73B55609861A}\ComponentID = "Windows Roots Update" KB931125.exe Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Active Setup\Installed Components\{EF289A85-8E57-408d-BE47-73B55609861A} KB931125.exe -
Executes dropped EXE 5 IoCs
pid Process 2700 KB931125.exe 2600 updroots.exe 2988 updroots.exe 2572 updroots.exe 1940 updroots.exe -
Loads dropped DLL 17 IoCs
pid Process 1152 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe 2700 KB931125.exe 2700 KB931125.exe 2700 KB931125.exe 2700 KB931125.exe 2600 updroots.exe 2700 KB931125.exe 2700 KB931125.exe 2988 updroots.exe 2700 KB931125.exe 2700 KB931125.exe 2572 updroots.exe 2700 KB931125.exe 2700 KB931125.exe 1940 updroots.exe 1152 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe 1152 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\INF\setupapi.app.log KB931125.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D8C5388AB7301B1B6ED47AE645253A6F9F1A2761 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob = 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 updroots.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\7E784A101C8265CC2DE1F16D47B440CAD90A1945 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\CE6A64A309E42FBBD9851C453E6409EAE87D60F1\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CF427FD790C3AD166068DE81E57EFBB932272D4\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\E0925E18C7765E22DABD9427529DA6AF4E066428\Blob = 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 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\F5C27CF5FFF3029ACF1A1A4BEC7EE1964C77D784\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3E84D3BCC544C0F6FA19435C851F3F2FCBA8E814\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\64902AD7277AF3E32CD8CC1DC79DE1FD7F8069EA\Blob = 190000000100000010000000a6db33823b1bbafaaf0674e42cf408a40f000000010000001400000083349e55d81c5ea2aa084845f04bcc1673242cab0b000000010000004c00000049002e004300410020005000720076006e00ed00200063006500720074006900660069006b0061000d016e00ed0020006100750074006f007200690074006100200061002e0073002e00000009000000010000003e000000303c06082b0601050507030106082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030806082b0601050507030903000000010000001400000064902ad7277af3e32cd8cc1dc79de1fd7f8069ea140000000100000014000000689d7ed6c42539fb3ba037d64fdc8cd17af0565920000000010000003d0400003082043930820321a0030201020204009d2a60300d06092a864886f70d01010505003068310b300906035504061302435a312a302806035504030c21492e4341202d205175616c696669656420726f6f74206365727469666963617465312d302b060355040a0c245072766ec3ad20636572746966696b61c48d6ec3ad206175746f726974612c20612e732e301e170d3038303430313030303030305a170d3138303430313030303030305a3068310b300906035504061302435a312a302806035504030c21492e4341202d205175616c696669656420726f6f74206365727469666963617465312d302b060355040a0c245072766ec3ad20636572746966696b61c48d6ec3ad206175746f726974612c20612e732e30820122300d06092a864886f70d01010105000382010f003082010a0282010100ab0888a4f074f29ff8dbd6778d30193ea6c5c78ac5bddde602ae8e3d5075b8af7d36abfef5ed0867b4008a98c103638851f21b3689745a2dc8c482c43fb988fd6cfd3a1d15054495801aa686cb217590855cb070008734a8d11f49fd6c386d6aacb8459fbc14d766d421e3270a8d75e05a2f0a4bb4e77e73a32abd70f19186088fbf90841c87a9f599252594c1e36e07c14b075b54fc34cb46379cc5a120cea6ac87a9833c384fc040f3e9ff9bd73976e4132375b5ffa142ae5c864fc54e43b6990b525320a8b3c24cd3002c15d2596c0a9f21b57316791e8625ee1afb939ead63f14ce276315e37effcd0a936e4f911e97afc50e741230334b87dba0ecfdd530203010001a381ea3081e7300f0603551d130101ff040530030101ff300e0603551d0f0101ff0404030201063081a40603551d2004819c308199308196060c2b0601040181b8480104000130818530818206082b0601050507020230761a7454656e746f20636572746966696b6174206a6520767964616e206a616b6f206b76616c6966696b6f76616e792073797374656d6f767920636572746966696b6174207620736f756c616475207365207a616b6f6e656d203232372f323030302053622e207620706c61746e656d207a6e656e692e301d0603551d0e04160414689d7ed6c42539fb3ba037d64fdc8cd17af05659300d06092a864886f70d0101050500038201010072f5bc068dd22c96f282db587b47f04064e52e1beffae0fad3f172480144f288f4de98815384e77d4e47e7313756aeb3c1306fc6ab4883f5985352692a28c14065eb65e7b4300bf0ab0ea51225bff4505dbfa37ee5d174f80a28ae429cb01452c4a0605df7451742ba422d9b92fb6e94b3704720089d53f0b0adbda9845add072a0ccd2b6d6128df3b9228ec51817f517c8e2e7f9de9bcc1343d8bad81adf11e7466433c414db82e334fb13a1edb12df368e71ff5763b1d68fb43d86126acf4230b49316ea99ea025bfe08eeb24f70bf3300e77a4a38a1f24891a61ecb23b2389df02e49a2c9885665658e3a67458c8c0be2aab14b07ffb11fba14cf72faa778 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8CC4307BC60755E7B22DD9F7FEA245936C7CF288\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\24A40A1F573643A67F0A4B0749F6A22BF28ABB6B\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A073E5C5BD43610D864C21130A855857CC9CEA46\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5D989CDB159611365165641B560FDBEA2AC23EF1\Blob = 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 updroots.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B19DD096DCD4E3E0FD676885505A672C438D4E9C 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\3679CA35668772304D30A5FB873B0FA77BB70D54\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\28903A635B5280FAE6774C0B6DA7D6BAA64AF2E8 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Key deleted \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\97817950D81C9670CC34D809CF794431367EF474 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\688B6EB807E8EDA5C7B17C4393D0795F0FAE155F\Blob = 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 updroots.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\25019019CFFBD9991CB76825748D945F30939542 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5A5A4DAF7861267C4B1F1E67586BAE6ED4FEB93F\Blob = 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 updroots.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8EB03FC3CF7BB292866268B751223DB5103405CB 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B3EAC44776C9C81CEAF29D95B6CCA0081B67EC9D\Blob = 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 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0446C8BB9A6983C95C8A2E5464687C1115AAB74A 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B38FECEC0B148AA686C3D00F01ECC8848E8085EB\Blob = 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 updroots.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A7F8390BA57705096FD36941D42E7198C6D4D9D5 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\81968B3AEF1CDC70F5FA3269C292A3635BD123D3\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\086418E906CEE89C2353B6E27FBD9E7439F76316\Blob = 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 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\049811056AFE9FD0F5BE01685AACE6A5D1C4454C\Blob = 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 updroots.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5A5A4DAF7861267C4B1F1E67586BAE6ED4FEB93F 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\7F88CD7223F3C813818C994614A89C99FA3B5247\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\58119F0E128287EA50FDD987456F4F78DCFAD6D4\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\36863563FD5128C7BEA6F005CFE9B43668086CCE\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\85B5FF679B0C79961FC86E4422004613DB179284\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\209900B63D955728140CD13622D8C687A4EB0085\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\75E0ABB6138512271C04F85FDDDE38E4B7242EFE\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\6E3A55A4190C195C93843CC0DB722E313061F0B1\Blob = 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 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D8C5388AB7301B1B6ED47AE645253A6F9F1A2761\Blob = 1400000001000000140000005b257b96a465517eb839f3c078665ee83ae7f0ee5300000001000000230000003021301f060960857401590102010130123010060a2b0601040182373c0101030200c00b0000000100000014000000530077006900730073005300690067006e00000009000000010000002a000000302806082b0601050507030106082b0601050507030206082b0601050507030406082b06010505070303030000000100000014000000d8c5388ab7301b1b6ed47ae645253a6f9f1a27610f000000010000001400000027c3a4d3aafb96f69e1fc9fa5977ce9d831934ae2000000001000000be050000308205ba308203a2a003020102020900bb401c43f55e4fb0300d06092a864886f70d01010505003045310b300906035504061302434831153013060355040a130c53776973735369676e204147311f301d0603550403131653776973735369676e20476f6c64204341202d204732301e170d3036313032353038333033355a170d3336313032353038333033355a3045310b300906035504061302434831153013060355040a130c53776973735369676e204147311f301d0603550403131653776973735369676e20476f6c64204341202d20473230820222300d06092a864886f70d01010105000382020f003082020a0282020100afe4ee7e8b240e126ea9502d16443b92925ccab85d849242132abc655782403e5724cd508b252ab76ffcefa2d0c01f02244a13968f2313e6285800a347c706a784232bbbbd962b7f55cc8bc1571f0e62650fdd3d568a73daae7e6dba811c7e428c2035d9434d84fa84db522cf30e27770b6bbf112f72789f2ed83ee618375a2a72f9da62909295ca1f9ce9b33c2bcbf30113bf5acfc1b50a60bdddb5996453b8a096b36fe22677918ce06210029f340fa4d5923351debe8dba847a603c6adb9f2becdede013f6e4de55086cbb4afed4440c5ca5a8cdad22b7ca8eebea6e50aaa0ea5df0552b755c7225d326a97976313dbc9db79367b853a4ac55289f924e79d77a982ff551ca571692bd10224f2b326d46bda0455e5c10ac76d3037902ae49e14335e161755c55bb5cb348992f19d268fa107d4c6b27850db0c0c0b7c0b8c41d7b9e9dd8c88f7a34db232ccd817dacdb7ce669dd4fd5effbd973e2975e77ea76258af2534a541c73dbc0d50ca03030f085a1f95737862bfaf7214690ea5e5030e788e262842f0070b622010673946faa903cc04387a66ef2083b58c4a568e9100fc8e5c82de88a0c3e2686e7d8def3cdd65f45dac51ef2480aeaa56976ff9ad7dda613f98773ca591b61c8c26da65a2096dc1e254e3b9ca4c4c808f777b609a1edfb6f2481e0eba4e546d98e0e1a21aa27750cfc46392ec47199debe66bcec10203010001a381ac3081a9300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e041604145b257b96a465517eb839f3c078665ee83ae7f0ee301f0603551d230418301680145b257b96a465517eb839f3c078665ee83ae7f0ee30460603551d20043f303d303b0609608574015901020101302e302c06082b060105050702011620687474703a2f2f7265706f7369746f72792e73776973737369676e2e636f6d2f300d06092a864886f70d0101050500038202010027bae3947cf1aec0de17e6e5d8d5f554b083f4bbcd5e057b4f9f7566af3ce8567efc72783803d92b621b00b9f8e960cdccce518ac750316ee14a7e182f6959b63d64812be38384e622878e7de0ee029961b81ef4b82b88121684c23193389631a6b93b533fc32493565b6992ecc5c1bb3800e3ec17a9b8dcc77c01839f3247ba5222341d327a0956a77c2536a93d4bdac0826f0abb12c8874b2711f91e2dc7933f9edb5f266b52d92e8af114c6448d15a9b7bfbddea61aeeae2dfb487717febbecaf18f52a51f0398497956c6e1bc32bc474607925b00a27dfdf5ed239cf457d424bdfb32c1ec5c65dca553aa09c699a8fdaefb2b03c9f876c122b65701552311a24cf6f3123501f8c4f8f23c37441631c55a814dd3ee05150cff11b30560e92b08285d883cb2264bc2db825d554a2b806eaad92a424a0c186b54a136a47cf2e0b569554cbce9adb6ab4a6b2db4108862777f76aa0426c0b38ced775503292c2df2b302248d0d54138255da4e95d9fc69475d045fd3097438f90ab0ac78673604a692ddea578d706da6a9e4b3e773a20132201d0bf689e63606b354d0b6dbaa13dc093e07f23b355ad72254e46f9d216efb064c1019ee9caa06a980ecfd860f22f49b8e442e1383516f4c86e4ff78156e8baa3be23afaefd6f03e0023b3076fa1b6d41cf01b1e9b8c966f4db26f33aa474f249245bc9b0d057c1fa3e7ae197c9 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DF646DCB7B0FD3A96AEE88C64E2D676711FF9D5F\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\BC9219DDC98E14BF1A781F6E280B04C27F902712\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AB48F333DB04ABB9C072DA5B0CC1D057F0369B46\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5F3AFC0A8B64F686673474DF7EA9A2FEF9FA7A51\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B435D4E1119D1C6690A749EBB394BD637BA782B7\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\6B81446A5CDDF474A0F800FFBE69FD0DB6287516\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5F43E5B1BFF8788CAC1CC7CA4A9AC6222BCC34C6\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\11C5B5F75552B011669C2E9717DE6D9BFF5FA810\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\8781C25A96BDC2FB4C65064FF9390B26048A0E01\Blob = 0300000001000000140000008781c25a96bdc2fb4c65064ff9390b26048a0e01090000000100000034000000303206082b0601050507030106082b0601050507030206082b0601050507030406082b0601050507030806082b060105050703090b000000010000000c000000440061006e0049004400000020000000010000001d0500003082051930820401a00302010202043e48bdc4300d06092a864886f70d01010505003031310b300906035504061302444b310c300a060355040a1303544443311430120603550403130b544443204f434553204341301e170d3033303231313038333933305a170d3337303231313039303933305a3031310b300906035504061302444b310c300a060355040a1303544443311430120603550403130b544443204f43455320434130820122300d06092a864886f70d01010105000382010f003082010a0282010100ac62f66120b2cfc0c685d7e379e6ccedf23992a4972e64a3845b879c4cfda4f3c45f21bd5610ebdb2e61ec9369e3a3ccbd99c305fc06b8ca361cfe908e494cc4569a2f56bccf7b0cf16f47a60d434de2e91d3934cd8d2cd91298f9e3e1c14a7c8638c4a9c46188d25eaf1a264dd5e4a0224784d964b71996fcec19e4b297264e4a4ccb8f248b54181c48617bd58868da5db5eacd1a30c180837650aa4fd1d4dd38f0ef16f4e10c5006bfeafb7a49a1282b1cf6fc1532a3746a8fa9c362297131e53ba460175e74e6da13ede91f1f1bd1b26873c6103475461010e390007640cb8bb7430921ffab4e93c658e9a582db77c43a99b172954904f0b72bfa7b598edd0203010001a382023730820233300f0603551d130101ff040530030101ff300e0603551d0f0101ff0404030201063081ec0603551d200481e43081e13081de06082a815081290101013081d1302f06082b060105050702011623687474703a2f2f7777772e636572746966696b61742e646b2f7265706f7369746f727930819d06082b06010505070202308190300a160354444330030201011a8181436572746966696b61746572206672612064656e6e6520434120756473746564657320756e646572204f494420312e322e3230382e3136392e312e312e312e204365727469666963617465732066726f6d2074686973204341206172652069737375656420756e646572204f494420312e322e3230382e3136392e312e312e312e301106096086480186f84201010404030200073081810603551d1f047a30783048a046a044a4423040310b300906035504061302444b310c300a060355040a1303544443311430120603550403130b544443204f434553204341310d300b0603550403130443524c31302ca02aa0288626687474703a2f2f63726c2e6f6365732e636572746966696b61742e646b2f6f6365732e63726c302b0603551d1004243022800f32303033303231313038333933305a810f32303337303231313039303933305a301f0603551d2304183016801460b585ec56647e121927671d50154b73ae3bf912301d0603551d0e0416041460b585ec56647e121927671d50154b73ae3bf912301d06092a864886f67d0741000410300e1b0856362e303a342e3003020490300d06092a864886f70d010105050003820101000aba262646d373a809f36b0b3099fd8ae1577a11d3b894d709106ea3b13803d1b6f243412962a772d8fb7c05e631702754184e8a7c4ee5d1ca8c7888cf1bd3908be623f80b0e33437d9ce20a198fc9013e745d74c98b1c03e518c8014c3fcb97055d9871a6986fb67cbd377fbee193256d6ff00aad1718e103bc0729c8ad26e8f861f0fd21097e9a8ea9687d486272bd00ea0199b8068251814ef1f5b49154b9237a009a9f5d8de03c64b91a12922ac782447239dce23cc6d855f5154ec8050edbc6d062a6ec15b4b50282dbac8ca281f09b9931f52020a888610a079f94fcd0d71bcc2e17f304277667eb5483fda4907e063d04a3432ddafc0b62ea2f5f6253 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\245C97DF7514E7CF2DF8BE72AE957B9E04741E85\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5A4D0E8B5FDCFDF64E7299A36C060DB222CA78E4\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\317A2AD07F2B335EF5A1C34E4B57E8B7D8F1FCA6 updroots.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\786A74AC76AB147F9C6A3050BA9EA87EFE9ACE3C updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4463C531D7CCC1006794612BB656D3BF8257846F\Blob = 14000000010000001400000015a144603a5e09fc21b292e96d5c47734d5f8e450b000000010000001200000056006500720069005300690067006e00000009000000010000000c000000300a06082b060105050703010300000001000000140000004463c531d7ccc1006794612bb656d3bf8257846f0f00000001000000100000008351c220d7134dbc46d6f3d68ef8942820000000010000003802000030820234308201a1021002ad667e4e45fe5e576f3c98195eddc0300d06092a864886f70d0101020500305f310b30090603550406130255533120301e060355040a131752534120446174612053656375726974792c20496e632e312e302c060355040b1325536563757265205365727665722043657274696669636174696f6e20417574686f72697479301e170d3934313130393030303030305a170d3130303130373233353935395a305f310b30090603550406130255533120301e060355040a131752534120446174612053656375726974792c20496e632e312e302c060355040b1325536563757265205365727665722043657274696669636174696f6e20417574686f7269747930819b300d06092a864886f70d010101050003818900308185027e0092ce7ac1ae833e5aaa898357ac2501760cadae8e2c37ceeb3578645403e5844051c9bf8f08e28a8208d216863755e9b12102ad7668819a05a24bc94b256622566c88078ff781596d840765701371763e9b774ce35089569848b91da7291a132e4a11599c1e15d549542c733a6982b197399c6d706748e5dd2dd6c81e7b0203010001300d06092a864886f70d0101020500037e0065dd7ee1b2ecb0e23ae0ec71469a1911b8d3c7a0b4034026023e099ce112b3d15af637a5b76103b65b16693bc644080c88530c6b9749c73e35dc6cb9bbaadf5cbb3a2f9360b6a94b4df220f7cd5f7f647b8edc005cd7fa77ca3916596f0eead3b5837f4d4d425676b4c95f04f838f8ebd25f755fcd7bfce58e807cfc50 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0B7199A1C7F3ADDF7BA7EAB8EB574AE80D60DDDE\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2E14DAEC28F0FA1E8E389A4EABEB26C00AD383C3 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\06083F593F15A104A069A46BA903D006B7970991\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D29F6C98BEFC6D986521543EE8BE56CEBC288CF3\Blob = 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 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B19DD096DCD4E3E0FD676885505A672C438D4E9C\Blob = 0b000000010000001200000056006500720069005300690067006e000000090000000100000016000000301406082b0601050507030406082b06010505070303030000000100000014000000b19dd096dcd4e3e0fd676885505a672c438d4e9c200000000100000039020000308202353082019e020502b5000002300d06092a864886f70d010102050030613111300f06035504071308496e7465726e657431173015060355040a130e566572695369676e2c20496e632e31333031060355040b132a566572695369676e20496e646976696475616c20536f667477617265205075626c697368657273204341301e170d3936303430393039333734395a170d3939313233313039333734385a30613111300f06035504071308496e7465726e657431173015060355040a130e566572695369676e2c20496e632e31333031060355040b132a566572695369676e20496e646976696475616c20536f667477617265205075626c69736865727320434130819f300d06092a864886f70d010101050003818d0030818902818100c17aca65a72dd50f4f6c4732f8737786e53df26f7990b5de4fd21479334bb20e46fd88722ac2fc649e618f6bc05be8f01104da7aba72f6ec5daffbf197f114d228e328855c7bbd8aa27fc233b56d0b92780b387174857f3dbab92fefbe27480d3822c956308d77fa5d2c5a9c97ce7030e9515fa68be49596a5a01777f193b8290203010001300d06092a864886f70d01010205000381810088d656439b33dc5cd143e4f13acf1113394b2e061c688180ca9cc9fc93169a050f77725d6c8d86af0a97c23292c75cf91003e48440af496be171fa658dddb238fd05ae6ec8e26a3178f70d4a4aef183bad2938cef862bddd9c23ba9bde2357c9523e78fbb378646a45b2687ed1b29961eadae4e330374564e7ea3b5a3ac814e3 updroots.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\503006091D97D4F5AE39F7CBE7927D7D652D3431\Blob = 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 updroots.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B435D4E1119D1C6690A749EBB394BD637BA782B7 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\912198EEF23DCAC40939312FEE97DD560BAE49B1\Blob = 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 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\A5EC73D48C34FCBEF1005AEB85843524BBFAB727 updroots.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\211165CA379FBB5ED801E31C430A62AAC109BCB4 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe -
Suspicious use of AdjustPrivilegeToken 7 IoCs
description pid Process Token: SeRestorePrivilege 2700 KB931125.exe Token: SeRestorePrivilege 2700 KB931125.exe Token: SeRestorePrivilege 2700 KB931125.exe Token: SeRestorePrivilege 2700 KB931125.exe Token: SeRestorePrivilege 2700 KB931125.exe Token: SeRestorePrivilege 2700 KB931125.exe Token: SeRestorePrivilege 2700 KB931125.exe -
Suspicious use of WriteProcessMemory 35 IoCs
description pid Process procid_target PID 1152 wrote to memory of 2700 1152 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe 28 PID 1152 wrote to memory of 2700 1152 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe 28 PID 1152 wrote to memory of 2700 1152 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe 28 PID 1152 wrote to memory of 2700 1152 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe 28 PID 1152 wrote to memory of 2700 1152 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe 28 PID 1152 wrote to memory of 2700 1152 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe 28 PID 1152 wrote to memory of 2700 1152 7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe 28 PID 2700 wrote to memory of 2600 2700 KB931125.exe 29 PID 2700 wrote to memory of 2600 2700 KB931125.exe 29 PID 2700 wrote to memory of 2600 2700 KB931125.exe 29 PID 2700 wrote to memory of 2600 2700 KB931125.exe 29 PID 2700 wrote to memory of 2600 2700 KB931125.exe 29 PID 2700 wrote to memory of 2600 2700 KB931125.exe 29 PID 2700 wrote to memory of 2600 2700 KB931125.exe 29 PID 2700 wrote to memory of 2988 2700 KB931125.exe 30 PID 2700 wrote to memory of 2988 2700 KB931125.exe 30 PID 2700 wrote to memory of 2988 2700 KB931125.exe 30 PID 2700 wrote to memory of 2988 2700 KB931125.exe 30 PID 2700 wrote to memory of 2988 2700 KB931125.exe 30 PID 2700 wrote to memory of 2988 2700 KB931125.exe 30 PID 2700 wrote to memory of 2988 2700 KB931125.exe 30 PID 2700 wrote to memory of 2572 2700 KB931125.exe 31 PID 2700 wrote to memory of 2572 2700 KB931125.exe 31 PID 2700 wrote to memory of 2572 2700 KB931125.exe 31 PID 2700 wrote to memory of 2572 2700 KB931125.exe 31 PID 2700 wrote to memory of 2572 2700 KB931125.exe 31 PID 2700 wrote to memory of 2572 2700 KB931125.exe 31 PID 2700 wrote to memory of 2572 2700 KB931125.exe 31 PID 2700 wrote to memory of 1940 2700 KB931125.exe 32 PID 2700 wrote to memory of 1940 2700 KB931125.exe 32 PID 2700 wrote to memory of 1940 2700 KB931125.exe 32 PID 2700 wrote to memory of 1940 2700 KB931125.exe 32 PID 2700 wrote to memory of 1940 2700 KB931125.exe 32 PID 2700 wrote to memory of 1940 2700 KB931125.exe 32 PID 2700 wrote to memory of 1940 2700 KB931125.exe 32
Processes
-
C:\Users\Admin\AppData\Local\Temp\7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe"C:\Users\Admin\AppData\Local\Temp\7acc85ad6eea22222b77c6b97e70d70163d665decfb01c7ac37a521cad221910.exe"1⤵
- Loads dropped DLL
- Writes to the Master Boot Record (MBR)
- Modifies system certificate store
- Suspicious use of WriteProcessMemory
PID:1152 -
C:\Users\Admin\AppData\Local\Temp\{2D64C598-794E-43f7-BE28-D2EBF3C22175}.tmp\KB931125.exe"C:\Users\Admin\AppData\Local\Temp\{2D64C598-794E-43f7-BE28-D2EBF3C22175}.tmp\KB931125.exe" /Q2⤵
- Modifies Installed Components in the registry
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2700 -
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exeC:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe authroots.sst3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies system certificate store
PID:2600
-
-
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exeC:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe updroots.sst3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies system certificate store
PID:2988
-
-
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exeC:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe -l roots.sst3⤵
- Executes dropped EXE
- Loads dropped DLL
- Modifies system certificate store
PID:2572
-
-
C:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exeC:\Users\Admin\AppData\Local\Temp\IXP000.TMP\updroots.exe -d delroots.sst3⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1940
-
-
Network
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Pre-OS Boot
1Bootkit
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
65KB
MD5ac05d27423a85adc1622c714f2cb6184
SHA1b0fe2b1abddb97837ea0195be70ab2ff14d43198
SHA256c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
SHA5126d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d
-
Filesize
73KB
MD5bb49ccc10926cdb601eba81afef749a2
SHA1a4766c9aea8d211e9632148fd4b625cece195be9
SHA256f013ee3b7fede9a95844e83e83ee298d38cba6efce5a5cafcd8b95255c32f86c
SHA51294c2809727039d1ed07a3742a4b2f9300e865ea7c49bc1fcf547a30238eeecc88d8dd06a2d4f3112317f948908b9af082b50f412a41a2bcb48d5e30d6d8ecbba
-
Filesize
9KB
MD57b32871e409608ff887b6cf4d87debb0
SHA1191f9ea1298ee52dbd6f977b3584109a064f57b9
SHA2563f01268547364d2d60a0f65b46757cccfd9225fc39d581846a8fbffdb5756ff2
SHA512534a384f7946db4083e639b8e02d83ac97293c60630b8811a84c85e0330e9c293f05f5cf71e0f3580551e7923bc5a3bfb7f0406432ca3cdb7efeb4a950ac5e8a
-
Filesize
7KB
MD59e5de0fd1f90486a66dee4bfe89a78d7
SHA190e3188ef63495aaa71c85d4ff0f23253c834b40
SHA2568b95ff56d61586582864d05563762615c8705779578dca3c98a303c3b1f4122e
SHA51260006fa6f57e4d280642d51055f85f8d27b913ce71373de5b928c515c77647295030ab73ab4a55024de4a40c18f200909f49ffb52c26cf554835fc3d4cc348f1
-
Filesize
1KB
MD5421e60325404f5f29ac04c9b9d59096b
SHA1aace2fd74d799e8af5c8d5b2646361bb67a1620c
SHA256571a8da5298aacc37700c747ee5d72b5a7797835140e7a4d4f895e9604574d77
SHA51286693975b1b187ee65b0a23b1f3f8e05d1a3f61e7e47b060f938fe1602bbad96021847b709e64c2d5a295b72f10f4db587a11a1e7ca0a0b64c3bed7fa683b1d2
-
Filesize
320KB
MD52d9b4498c847715418160bfd7e7c8a2d
SHA1e0873091d476d2566aa6fc988cb364247c95dc97
SHA256c49c05b701c390c679e5e3226ec621f22a08155b1065fcfc37b509f648f03b41
SHA512dcf3208cdd1e4353f82823f796d735c1209f149f183eea827a90753ec55509a1c460a16c120e07c12a5eacf0e67d2661c25638491ecf4403e25d6508983e519b
-
Filesize
171KB
MD59c0c641c06238516f27941aa1166d427
SHA164cd549fb8cf014fcd9312aa7a5b023847b6c977
SHA2564276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
SHA512936ed0c0b0a7ff8e606b1cc4175a1f9b3699748ccbba1c3aff96203033d2e9edabf090e5148370df42fbfc4e31d7229493706ff24f19ff42ff7bef74a6baad06
-
Filesize
238KB
MD58786d469338c30e0ba9fedfc62bd5197
SHA15fb12028ceae9772f938e1b98b699f0e02e32718
SHA256beeaf8b72f7008e9adabacfcd85e32a50747a0dfb5c86802aeb973bd1f5c3d2f
SHA5125db1e5b78e62cda81a63e8e712e720f87a7c7a539237a55a9098c076f9fb4e0b5adb83383c23657b4ccc90c117e55e3946a399cdf3d15cb94444b203d9d6c45c
-
Filesize
89KB
MD5a64e4b204d44548eeb5c3d86eca2ad70
SHA1e3245bf6dbb2e56d71a9cbad2697aa4fa0df6bbe
SHA256985a5603ebf94539ac11549999f83b5e6dc008180994898c5daa6fd31ae1e9dc
SHA512dca4099318954bab5f1204645be0d0e8fea0c2e97ee95496fa884fbed627e376358623fa94c39bf0abe97d07d46a7e6c5e1081496cdd1987e07e595995a46cd5
-
Filesize
5KB
MD59c18ae971cbffb096952177f6804ea31
SHA1bb255dd1bd9bb39cdbb8671af66054432c686828
SHA2562703c25453b09c40ee81fdc458b8cc24712e387a12d15ff94e12b02921fe98cb
SHA51221086509bb4ea5afede55d034955de0bdf8b366d5d8d4bfa7a6c68b0f35fbf217ff3e932f87fc1d37f09022805e79ceeecbaf3dbccbd96d7c93029ffe7370e4c
-
Filesize
349KB
MD54a4d72d34f9da1fc5019e0748fcde2f5
SHA1f54752ec63369522f37e545325519ee434cdf439
SHA25683b660f3f3eaddd4b388ed3f806f7444f03429fb63fc1f8db3d86294914a05ca
SHA51295986ffbf51483a0d1a256028847c7ee6ac73ffd62f6d838309a69e1833f719a7cfed5422815f4d4a49dbd599c449f8db8f60273136720cb1da5f8b0eb24cb33
-
Filesize
1.1MB
MD52706693dda10c6cc79eed24c56d4e5ef
SHA14f34ef1bd49273a0d260b9dab15c73eb0ccb6383
SHA2560edad8a1af22d5b97c1f324791c86243a6ecce7b5a9d2f30415af99aba9129c3
SHA5127e7f7ae894528587ba33b6e10999549bb9a2ec2748b5662fa1b8806e5f4ce33af47507b3ef2954f2747a76b5b7c775c1cd671061f577c5016d1f8ba165bbe21c