Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
10/08/2024, 00:26
Static task
static1
Behavioral task
behavioral1
Sample
98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe
Resource
win10v2004-20240802-en
General
-
Target
98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe
-
Size
89KB
-
MD5
a994603c61061a827368785b23cf92f3
-
SHA1
49fe8fe75dc0f8981e80058610a64baabe2249c1
-
SHA256
98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933
-
SHA512
4489c3076cf84b6fada5d067a3196775d4bc51c940e6cbe43f157cb2d94f88db5155ad640be479023c3238df88e51761fe43ac5591ccb2a0223ea095ef42e88a
-
SSDEEP
768:W7BlpppARFbhHFoqAJwBqAJw1VyjVyUA9B7BlpppARFbhHFoqAJwBqAJw1VyjVy6:W7ZppApyVyjVyJ9B7ZppApyVyjVyJ96
Malware Config
Signatures
-
Renames multiple (5288) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE 2 IoCs
pid Process 3348 _Wordpad.lnk.exe 1904 Zombie.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\Zombie.exe 98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe File opened for modification C:\Windows\SysWOW64\Zombie.exe 98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\tr\System.Windows.Forms.Primitives.resources.dll.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-ul-oob.xrm-ms.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_SubTest-ppd.xrm-ms.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Office16\PROOF\MSHY7EN.DLL.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\rsod\powerpoint.x-none.msi.16.x-none.boot.tree.dat.tmp Zombie.exe File created C:\Program Files\Common Files\System\msadc\es-ES\msdaremr.dll.mui.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\pl\System.Windows.Forms.Design.resources.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalR_Grace-ul-oob.xrm-ms.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-pl.xrm-ms.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\en\LocalizedStrings.xml.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.ConnectionUI.Dialog.dll.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\api-ms-win-core-synch-l1-2-0.dll.tmp Zombie.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\PresentationUI.resources.dll.tmp Zombie.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\PresentationFramework-SystemData.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudent2019R_Retail-ppd.xrm-ms.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription1-ul-oob.xrm-ms.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Personal2019R_Grace-ul-oob.xrm-ms.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\msvcp120.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\WinWordLogoSmall.contrast-black_scale-80.png.tmp Zombie.exe File created C:\Program Files\Common Files\microsoft shared\VSTO\10.0\1033\VSTOInstallerUI.dll.tmp _Wordpad.lnk.exe File created C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Office.dll.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\[email protected] _Wordpad.lnk.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ucrtbase.dll.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Trial-ul-oob.xrm-ms.tmp Zombie.exe File created C:\Program Files\Internet Explorer\en-US\ieinstal.exe.mui.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectProR_OEM_Perp-ul-phn.xrm-ms.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\legal\javafx\icu_web.md.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Client\AppvIsvSubsystems64.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\fre\StartMenu_Win7.wmv.tmp Zombie.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VC\msdia90.dll.tmp _Wordpad.lnk.exe File created C:\Program Files\Common Files\System\Ole DB\sqlxmlx.rll.tmp Zombie.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hans\WindowsBase.resources.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-ul-oob.xrm-ms.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioStdO365R_Subscription-ul-oob.xrm-ms.tmp Zombie.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\hwrenUSlm.dat.tmp _Wordpad.lnk.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\zh-Hans\WindowsBase.resources.dll.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\deploy\[email protected] Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_OEM_Perp-ppd.xrm-ms.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp3-ul-phn.xrm-ms.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Office16\OFFSYMSB.TTF.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ONMAIN.DLL.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\rsod\proof.fr-fr.msi.16.fr-fr.boot.tree.dat.tmp Zombie.exe File created C:\Program Files\Common Files\microsoft shared\ink\es-ES\rtscom.dll.mui.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\pl\UIAutomationClientSideProviders.resources.dll.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ipscsy.xml.tmp Zombie.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ja\System.Xaml.resources.dll.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_MAK-ppd.xrm-ms.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019R_Retail-pl.xrm-ms.tmp Zombie.exe File created C:\Program Files\7-Zip\7zFM.exe.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\System.Windows.Input.Manipulations.resources.dll.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Standard2019R_Retail-ppd.xrm-ms.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-pl.xrm-ms.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART10.BDR.tmp Zombie.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ja\UIAutomationProvider.resources.dll.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_Subscription5-pl.xrm-ms.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\OneNoteVL_KMS_Client-ul-oob.xrm-ms.tmp Zombie.exe File created C:\Program Files\Internet Explorer\IEShims.dll.tmp _Wordpad.lnk.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\fxplugins.dll.tmp _Wordpad.lnk.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\System.Windows.Forms.Design.resources.dll.tmp _Wordpad.lnk.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\glass.dll.tmp _Wordpad.lnk.exe File created C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTest-ul-oob.xrm-ms.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\fr\System.Windows.Input.Manipulations.resources.dll.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\UIAutomationProvider.dll.tmp _Wordpad.lnk.exe -
System Location Discovery: System Language Discovery 1 TTPs 3 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Zombie.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language _Wordpad.lnk.exe -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 3984 wrote to memory of 3348 3984 98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe 85 PID 3984 wrote to memory of 3348 3984 98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe 85 PID 3984 wrote to memory of 3348 3984 98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe 85 PID 3984 wrote to memory of 1904 3984 98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe 84 PID 3984 wrote to memory of 1904 3984 98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe 84 PID 3984 wrote to memory of 1904 3984 98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe"C:\Users\Admin\AppData\Local\Temp\98fb485dcc682a4ad78269aa0e663e084bcde72a5634a5a3144cf20385879933.exe"1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3984 -
C:\Windows\SysWOW64\Zombie.exe"C:\Windows\system32\Zombie.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:1904
-
-
C:\Users\Admin\AppData\Local\Temp\_Wordpad.lnk.exe"_Wordpad.lnk.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:3348
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
46KB
MD546639043191cf0595831d4bfe1f439de
SHA15cb9b0ed8f0035839ad53c5308acdc0ac5e24c1a
SHA25624733fb3b1872ca2a93f200215823092fef4f87933b0dd91623755b2c32f5cbf
SHA5123f7e86f189dfdea33901506b843c53ff9b54c3f4e1c577c0d9f452f87bfad4f201e2ba364aec88717def6f9ad4f6a0b560dd2a7c515aae9ad7544f6d9bd5a96b
-
Filesize
158KB
MD5c73d06c25c6f4ba2a0ecae03eb34e349
SHA1becdf11423fea3ed9a14693e353fb359436207ad
SHA2568ae679e0824138aaccb899b7a561959e7cefb7adb13d6bfaba62f2fec20edf8d
SHA512b5f3152e679b7553396e58e327be8932f3af1b8bb4a0dfd24d07ac58a0eb481699e6e56a531aaac7545f5a7d91cda21044110a44043ddfe9be8f9394ff73809a
-
Filesize
589KB
MD5d04b5b083c713f4ef40b792f63431d16
SHA1d955986508069af569aba0a1e1203d12a35c6903
SHA256a7997fcd1ba5aad53e16029e97bdd9c8761f0aac4d716cecbf320b254151f00f
SHA512ed3dd1c3a3987679f9f17fbe02755eff7a3b9b5875ebb1204cc54a760eb2d89c7058b15188664e89073798c38230ff727cdb94cddbce165d2a8f1c408ae7b8da
-
Filesize
589KB
MD532db36c66a9462cbf4c24ef2f56a1c87
SHA1d3c805336f67944fdbf11f039c0a0a58d58c153b
SHA256437882927293a502ddb0683f3a70c4681363295b0f6ec75027afc7b02da9882b
SHA5128006ed31be9bba9e1540e5031e32c7041237ed71b6444c4f2a5aea9def073c965e81964f3628f89f11a99f4fba3db4f704cbf1a22914498e7524391bd4f03b4c
-
Filesize
255KB
MD5abdc925dbd534fc6ab73a250d1405416
SHA1a26982bbb1b2e0842608cc403d84a6f356697ca6
SHA256faed48425058a8d1e9bfcee0c143c6c70dee18164e5dce464634095e76cadbf2
SHA512670027b27614685d6a8b09be56051c335db97daca6e64f778ef8e043adba37e51e9d6cfaf23ee5c7080213fb9d784dfb21397f91aa88c57ae4922dc01b2fb7b3
-
Filesize
234KB
MD5dc457c7a2b0302877496652e70583132
SHA10439edb34d249a68e8b8beb5e122ad8faa65fee3
SHA2569142f5499c20771130c1885a7e7772a7310d1dbdac1d371b17ec70606c985a35
SHA512e0f9232e4b61d18ef39d64fde38466099da74b64c7beff75b59f2a51fce0bdf0a34cdd965d2567065ac1fc2cc1ee21b559c89de269c91ee3ff12e99ecb8ddc12
-
Filesize
900KB
MD5f2a6675a7c53dc8a03e95760749ae4a7
SHA1f96be635c959880920d4334a9526baec7c40fa7a
SHA25625434642032cbf95df09b4177dca4e598c096d26fd3d48ba779c6c8233bb22fa
SHA512725b48825c7cbc0a72cdc2f3fcef6c67c7611b4cc8a423c42ac85d2da888957c041b3c47ff3d0a4e084775dde47e9faa5dcec85344cc108ee8ee9e02e05f4e6c
-
Filesize
976KB
MD53b6bca100bc41ce683809be26ce7dabc
SHA1b791a834a6208f3552768db1ff5c7ca5667922f7
SHA2567a318bd36525eec22fd610a8d288ee5b7408f1e506692c624def6f65d162e697
SHA5124d34680d7be11eafc0306daa55d6a11b3d9c0c697adf7e58c1d5f928548cbca049ab59401a0a5a11a9d20cd4a93131262953a9633e24cc30e354b4ffbd896c75
-
Filesize
729KB
MD57570713b7ac6a5c350ec73c26cd3b2bc
SHA14fe490ac5b6d290ea81e84adca14180f6727f5db
SHA2563fbb12ae0bd34220c19b5ccd3a3ec41ba682bb041868c8a5970f17c57c492860
SHA512fa1df3621a0ce4e8253ac768989b734e5a7fd6ee64a09627ff892d8eec4fe311788609ed3be9a9a612bdb21d7ba7f3e8b1d821306907713ec3d9ad00bb3578be
-
Filesize
55KB
MD5e09f2d4a790fceaac5b20b2c9f0ba4d7
SHA123de4e4cf9178a019b621291a042f28fbc075f66
SHA2560bdb680b01da7f0ad4f8600a18c130b4ae61595b90cba1ea65a2ac0d4ab57c72
SHA512c1a8534d3df9155c6d90e76b8c80f4f40c24bf029949884291bdfd247bf5192c9ad96ce145bc805213e32f7a404fab267ba5cdce85b6296386ed85a67ba8bd76
-
Filesize
53KB
MD55bf05dbfa6100c9f89822a7ec2bfb86f
SHA1b66a9465f14bb9a50b9f6f3d154e926c23339913
SHA256e5341165a894825fbf41220cc19741d41e26c06c295d96226a78ec759d2ed4d0
SHA512f0ae9fc42b0b8acf7ba68f3d6097732f2ade1cdf19e23c0af6e14b715349c8bef46cfaca454c91178bf97b40b09aab3a91504a77942570dc4a0e6046166adda0
-
Filesize
60KB
MD5dba543271733d1bbc743bef66bcfd978
SHA1920c9d89f8347fcd5e2d2b5b67773302e00e537a
SHA256dab7c8fb3a479acd3ae16f158679d5dd5b925b1ce38c0f57eb56de030b08ddf8
SHA512e985b8e5835bcbc10cf0f113e7719725b7dbbe37fc766ca7949f811e97c1f3b12253a43224804407ad5e52aa3d9eba9188e0436124dc598187b3bf9f3c2fc6db
-
Filesize
48KB
MD5aa029be738bdfb8fac8add3f2c0ac235
SHA12d7c21164cb8fdff6bd8de9470b08186dd1327f6
SHA256711445de46c91ad4af747bd3fac0ad065294018591f9e84a259e7db54758a05d
SHA512e97369c87326f67d3c64b2c1b8493bcaec7c0b12f0ee53ace0e814c8e75635c571800271d5110913899c9bb0633e9b83968e0ef7c6f87979a4a522a1910c82c4
-
Filesize
55KB
MD54c1c4d0c5136455e980e9b85726e5880
SHA1828c7b722cec34a1f451a1f835789fe6abf4cb2c
SHA256e3eb43a9bc4df4ede6d364ce04861aea1ba2b508a6650ff350a9d2b82291871f
SHA512904a8c766d64d582e18475437f98029434da128dfd63d9d06856fb675c0c3e869ebfbb35e31f10a3f96becf68cc19b95c4727620e203a0e9a5ba732a46a981da
-
Filesize
56KB
MD5fbfad1b91f1f6c621abd050c6865f3e2
SHA1aaf7db5f314f10aa59149f2fb09592c5b7b8121e
SHA256e93e289008bd2b41b6f09c11168a7a3546db3c5dba4c2c83ffb1a89a5844ba9e
SHA512cf9f361f08add35981c1161694fc45090ff0e6688cfd36832f5c1965f89c126110fa4b34bfeceeeb164c9b233171a881e6080669d9dffaa015d110b1c7cbeb06
-
Filesize
52KB
MD5e52833cee483bc5059b041282c420d02
SHA1dac30ceb2b7bba5c97022a7ad118b91f9a022e9d
SHA256a4aa195c247cf86e021e4a6cca38ca37528496f8b7e9f8fed70501c1a06ccdf0
SHA512657e54fc58463748c8964c38e25349f5ae36788b1d9d00a8a7f66a1255c9ce2021a634a6c32aca2843e1c886494bdf96038ce5b4f496b262d13c4b0a4e6c1512
-
Filesize
51KB
MD5400cfba1955c915602ba3113e92c6b37
SHA17f3a225c9a959da523099f3b1dff4093e1142ddc
SHA256e38b87a7bc4c63001ad51b824d71e78e851ff2cbdb176ad4470343340031beb4
SHA512c05b1fe5ab3e0fab10a636843868659cb52bd9ced603f53f033e072b2ab70fe03500043276cc0466f4504881767e4914cfcf155f56e6d1e83369c4e7e6e7272f
-
Filesize
51KB
MD5f12b6086ad6dd710826b2891a2c75abf
SHA11aa00cd310155eae035ac51e60d4f160aa5ae0df
SHA25631d11586d37da3217f267efeb56b5a3d13fe799aeca9bf2122a8b3b73fe33ee0
SHA51286eb682378aeee59b7924764e42602bf4ff71b21a5502748bef974533318b2b7b39084e4594b604964d0d8698577c48f85ca7d131b63f959f0070edad35d99b8
-
Filesize
45KB
MD50e4e7a77cbc3f5d2c2d1653215bc4ffd
SHA154b9698e9fcffcf938178d92cfbe78e972c09b8a
SHA256e44e7fdaef759a774cc5271bc64d1cb3a26ce82436d5af302bcec347e91df4d0
SHA5121295e76e9aeca3366d82eec55dec264125404de5006a839f5e1bc3956ae303b5c72c83eced62fbcdd1cd4a69420576f1c6c19d34d993baa5869cebc212b431c9
-
Filesize
43KB
MD5d8d9ddfe077fefaf1a02aa5fc8fb9cef
SHA13fb6a0e84f2ef88c02a16dea1becee471c1da512
SHA2564ccadcf9637354f66d81bd00c14844effa8cf76389eee499ef385d3c5de11795
SHA512175ce712ffb9c0faf5791bea205594d55abb0ad203e3155df43e8e23e3281947ed67ed19de27d0e320dff0ba12223a58fde74335811449f1d63417f48701fb13
-
Filesize
55KB
MD563d16fb19c602abab953ba43a48d0424
SHA1133edeaa8f4a777917372c0128d34af27b0529f7
SHA256fc84417c9b9baac5ec936a6e0bc3e822abaed1c631d7c92729278a5be2b588b1
SHA512e036330bdbec3cd8dfd7c8de11e22e7e3ba0473d33d34c3c26f70ebbc36d7591fe1566315fc8902de3af2d291fe09399b7e2eaa75078e91831750f1856085ad2
-
Filesize
52KB
MD5228f7f1697a47785c15e48fb04dce2da
SHA11f75082581feef644f9b9404b348c85fb786e6b4
SHA256e376e15870c59562d6274f9180d1e6ebe0350509d9eae02d3af4d45972be1ee4
SHA5123240ce2dc9de51c4cce7ac346777f158c81d5e1aa149b9a41f9431e17cf22accca4a82d6e3f7d279c456ddd8e28cc27446194fa7c125e111828a0ef6b3b68aec
-
Filesize
51KB
MD55a7fd393807d451091eedc6dc4c44e95
SHA1ca5a737a82f814bf52e76271428d126c957eced1
SHA25617da6fcb8438b41f888c7be8afc28fc70c1a93681c278101f70ef51551c54d99
SHA512c9d20e3df3fc80eebda11f091fc521112f645c51ea1bb2d217c1218a738041a3869b21a15d02e6d55f266cd98073c0fd4cfe11acbf0c877e746c3f398e302799
-
Filesize
54KB
MD599b39103bffe743e34e8a8db0efa3572
SHA1194714dd78f756750d7de469b2c56030c64c9ad1
SHA256e6b12aa85738a485f3b7a1cee1dc89a1b1288e5e94ec4090b6de2973a93aa01d
SHA51271aef98e646542c0f23a7c09e500192f38f3af4f1b6ab314807e8d6ea016fbe1fd69d0324a44f1b0460736c1a1973279d886ae124047f58d6186120c96a8afef
-
Filesize
53KB
MD54f798a3dffb77bd5ae8bee4baf0bb4a3
SHA142d64cf5e7473bb104cd8d776ab032cb47dd4497
SHA2566c9b115b31b3bf1e0d89b667cc6ca8b47ab3f688201b0958a2de4e3c07feb46f
SHA5126ae32e3e353a03aeac606fc5659f24598d4c325ef3ff6df4f725c3ca5d5dc45e83738d3c06d2d3a95690e46bdfc80a247ff0ad97351fbc736dc4d8c79c525098
-
Filesize
50KB
MD533b274e07e0bf1895d5d29b4631a8e80
SHA16465aee562e20316907746dfe8448c6d812ed02b
SHA2563a2446790b3b9abc781189e6be6afd1358f1499722baa138165310e2fad219e4
SHA5122577be2e1ff97933d7d89c9bc95e3e9b769e284145593d23cc65cb299631ff1f618cac1d85c56ed78c77ca71b330ff447de6563a2fd264cd058c446a5900bfbe
-
Filesize
52KB
MD544b36e27cde467fc9626ca122699863b
SHA151e3379a9e6b24bfff615c092e3236b1a47cfeb8
SHA256c41378add61ba8b182e9364d426b544e9930b8a928daa7baed770ba2422307bb
SHA512f827a48eb2e6421d41c9ac6243f30428ed4d3f142f9210406577619b58505c27ca6c084bdfc8fccf31f9f38a6ad4f7c3d578854e8fca96218276fe83cbce4213
-
Filesize
54KB
MD50f03fc95a13b50addb3411082e947ed5
SHA16f35b988cab5cc0249c1d44459b8407f1d04b58c
SHA2560917cc9757cfe923e9c118602b42173963057bcfdedb48ef161de65b76a4c86f
SHA5127a597479437e35eaf895e742d26e7d0558c03bce780b97572dbf5f6deebe88f682b89b94f13ec67b776a4b092b53886ba0eeeb0402f55fb651140d8f6175ccf7
-
Filesize
55KB
MD593d687675187a6823be60f49d13acd4a
SHA1624d4ba7615e534553603b5788eeb9b8f9604e66
SHA25680045070938da6535578d970215da61d39509c8754ed34e3620b626df5f3c0bc
SHA5128775d77c3ee5252ae7d0881c0da2838ba25e4d50a2f483aed5e7d6959187dde7b3fac0fbfc2683b6ae0880c4da1b3bd5bb0d6f9b62a792ea745f41b33f57b968
-
Filesize
63KB
MD564ec6a3afd25967543a19e90fd931109
SHA1851481a194942afb0c28882394e05472f62c109a
SHA256f87c1b327720de717f9496a15d23c421b4625397b83def5971efe8f3891988bf
SHA512936ab845c488c98ff2c7bdb8bce48eac37e3c47a94c0099b52e5343ab879dd9b8c32b15544804f876686379bbb45e1cdb4254578ac3c29ddb665ea3dceb10787
-
Filesize
53KB
MD59ae5b43544592c3e7b34b4b63022f289
SHA1e41375833bbc79ad367c36821f923c94f790d35f
SHA2560d3c32b301214b8e6a0cdb95f9b0cf7576d848347e7ba71567247624d4f0b7c4
SHA51245ddc98ed263b92b8e88c4eb0994170d05139c3ec6da07341c051440c27ec7fcf43a24402b1e310b66144ebbdf0822c6c43234e5f95568d6f2f7dea5144d84ab
-
Filesize
59KB
MD55bb1168f713d7a5e068bfe62e9f2f328
SHA1158d4dcbb01eba7aa749a0ea28e9f5ff36d25535
SHA2566440b2ffcb42f28d2c25a02b2845363d0b4098e36b513a4e73bba848fe34737a
SHA512db432a508db0f2e17be935951e6a6c61435be14719642e054717ced4ba7a18d128aa878f42b52ed664da9c62b6c194478b744b7bda6fdd908a889416a35fcaa8
-
Filesize
54KB
MD53a5fffdadc6c930fac9413471823fdb5
SHA1fed305e3edd5d6b8b8a6e33a361818e7918154cf
SHA25617721d1cc5a3c9fcd665330ccc259757b56319dc31dd4cd4ac4ad3189da21fbb
SHA5120a3838e7008baad734f6d87b742b0d2d1266672cba6df28b37bcd11af5acaf3d99b3cee93ec4f61ea1e5e64d9b814605e2dedc0095672ff6e921e35b68d0d31d
-
Filesize
54KB
MD55c08aafb8f47aa5ea988d4e0a4a88ad3
SHA14e7284b72a5634c481f5bf2f0664ca324677911c
SHA25630ae63c4eb59d14aa21d4486783bff3c83dd04500cc9ebdac9580d16d33aef82
SHA512c86ac6b85b3065afdb58d3c76f505c69a2f2e076c28f015df5156ef6473fc343f8a5b549cf6cb2b905c3b8c579f12e889c7e381219ea34cb973cba0c264621a2
-
Filesize
45KB
MD5463139580fa6cfc04609fc0f6ed6031a
SHA1010b82fa3b45db8c04557c053d8173272104ab1e
SHA256d2950e98a46326420ca246530a8e18af8f0e6121cb7cd349553bdf4a38c88e6e
SHA5123bf6bf85a087aaba92c17c47e1f78e7d524c7e694aee42d67aa48614849baf78ce0851b2cdc329d1843c7e05f3eefdbee0f380af5fafb90f2671001f153681f1
-
Filesize
61KB
MD529602e7797270f26114812e41def7695
SHA18fd749d20c6a1bea2d58cede96bfa9d3fbab87a3
SHA256101463365f527b98c9ef02d64402ef55cd781548802e71e3030bec0ebd06aaec
SHA51283557b2eed9de092f645a2c1abf8dd7e661fe1272dca1d48bdcfa9b73bbe603ee4653b1e86d8c24a960fbe5f4450f20037cbe0c35fd8439a109ad511035544f5
-
Filesize
51KB
MD511cea4b0f0023f9ece583ba0007abfd8
SHA1d3c645d88b7e33d20121d22a427281ed23b0453c
SHA256a90bdd30efb28597074d42b4c7465e3ace509814a0fdbac074b08cfbf4b708f9
SHA512cc68145bb961fb8212ef0bb093ce7fba78c08b1f50f8eca4926923555ee8a87c96985999cef2e97da2defec1dc24eb51908e4dd1c58b62cd1f280460e8712b2f
-
Filesize
56KB
MD50c96798b7466f5eefb6fa78197b4764f
SHA11ebee4bc7248ae7b60a23f2193b2e1fb8764a8cd
SHA256e6e9ae6b6434dd247af3dce25301f5dd3b6794f81cf302e3f71b2ef72554f3d0
SHA51200eae80e8412fbe577a5125fdb8b6f0f11e83fdf6dfd81f17e9f86dee0a1fb3562a7e02040646bc26c035f91f8ec43bde6b81aee753a64a87f0065d9bc1cee2c
-
Filesize
55KB
MD5d5621d072b3bc88371b0898b0d9049f2
SHA1ee6f3eb624828438363e9fd719cbc285ba206d99
SHA256f85e69b0e6d148cdaa8f05b695f30d8845e6f77b1299189b7f34438f91034485
SHA5124faf26e35907f42f2a86eb04723e2adef33cc2cd6eec8bb7188996efcb2cce8878171f14dd0b2447b1c3ac1e30e82b41dc55038b46b9b51fcbc7b4eed057fb0c
-
Filesize
57KB
MD56b0c5ac4f6b4c6da010cf875acf820cb
SHA1831deb1549dedb4348749a9f1985e749e759cbb3
SHA256272fd4687ce7093a8c3ca29d32fd82414968ae3051dff55f94dd4c47651790f0
SHA512726c5a77b98155ec95cc0757610e3277ddff939f6c3dc6c357642b43b79f04c2f33511e6f54daec290e08c5160a1328eee176d4bb9ca8fbb07b9679eac1b267c
-
Filesize
49KB
MD564f83cdf1da3feb239ffa0d11e7b0b0d
SHA1586aa91c2b6e51db021ef5129266f0afd8f20ae3
SHA2563fcc031184e182d9014fa8212c0a79f98406945819b7be90b52a6cf6869b630a
SHA512a4fa59c533fcd265c8d161a9148ce96dd8a311b5b2e10693cb7796bb0264df7cffad12b427b31fdd9e267517ea9d9ff7453091c9786351131944899b8b96f3e7
-
Filesize
51KB
MD5fa72f6156446d2419f242439ed0d00fa
SHA11635dc178b502b79db9e98cb964ea5b1a5959333
SHA25698c82fe22f5d5f3d62a03fd7ce847de85d66ae70c8e147f75b643d84db5ad01e
SHA512718fc0aad82aa9ff62f60a4f6d26eab7474c2dbd1b7d2f06d6019799728305ae78e5d2dafacded0c7e7ba9faa93e6b127754a36731793bbf92121c5ca9338c7f
-
Filesize
43KB
MD533e7eba9bfb6634cf5044c4687879b2e
SHA19606b7433a94f44db7d5ce669d0c198b3924a4d1
SHA2568d060b27b32a9a96531704d77169e81e1fe749257f15552f55540b8645970ff9
SHA512014ac0b12ef98e7e70bd32c61ed1612ed69e14db0437357d65ace534eb3b6baa0038806888eadecfb3fbc6c3302ce74898b7e14781a744446535cf22f15ccc31
-
Filesize
54KB
MD5c7c0b6e184869bcf58c9c87661e23c81
SHA14a29f8ced814d11e0c5a7649b6a534e81409b134
SHA256f5d8d52f66109f7ee44e87201218e074bbdbadfc6044e40223dfdfc68255d52e
SHA512b83f9e94b4d483188b264faf5e0ef7ec5ed60705356e8e40a13153b8c5befa51db6eff19c44b7e198c8a62bc12273aa9415312915a3ebf85b6a0303b716fa659
-
Filesize
54KB
MD511f7d42deefe7eb9bbe03c5b5cf99fa0
SHA17443322224438a513d9dcee92c2d156724968cdb
SHA256d7ab5edfe4a4b699a48b3d78f5e2fe4d2eb5c042b9ae2f8be608f9547f25a6bd
SHA5128e216a30bc176e7693acba395999c06f43e5fd9b218e90b35bd85f5a92e0877833e5d00209a6a8510ff7f01e91cfb813cfd6f8018317d176ce6e4b56559ff65e
-
Filesize
67KB
MD55c119797b659944e1e7a9a7f0c2c43d5
SHA1e3d7d1da3a85c7e03e636c9370cbec1a585386d1
SHA2565e44207f7615c9caf4dc5a22e2353bcdca09ed95baae08a9b4c0740887ad8c38
SHA51207e65a980850041fabf0c2d2d6d9ad8cdf9df9b1a5e0d405ead6999441821d6ea67ece6678294ce71283e6ad47f75ba282c0deb89ea0ea3a02a79c49ebd26828
-
Filesize
56KB
MD5964201af25afc54adb59e00618d0b7cf
SHA17c71f126ff245b7736fbc4cf059164e6cdfc8828
SHA25626fdfc96facf3b0201af1dc4db8a9095875adaf5f95ff9e5f8f332e7d14815e1
SHA5120f160370774b76bd373dff237fde9af7197162b70a867e51cc63c22a3a201851c3622b441e475126313ea19331b3fa5f7765c7144dca7be59bbadae2b23249be
-
Filesize
51KB
MD59f5a8ed90f16d44f3aaaef39ddbc6f4d
SHA1ec2a29b7b6139602690717813d749b210d3be374
SHA256f5a015eef8bfaf5da72c00bdae0595b95e1965304ef86b0a3f32107dc178d7a4
SHA5126165f671471edcc8dd7b5734776ee2cde87663fdd17265a5276e92fa8e24a790541b8e80a98248616fda308de457da2ee5f27370ec3018be8ffb4ab5079f1a0f
-
Filesize
59KB
MD58997b04136b69a8435ac00128aef1ff0
SHA1219747a659f71e51f35befa68ac5c16b38ffa9e9
SHA2560180d5f7990cfd8b08b298f354112a6e61b1d62a3f14913459d8b5e9c599e9b1
SHA5120944f101ee16b4d3207ddcc8c044f0f59a5046d6d98501f0f4601b0761dd84e1beecd4f8dae9c7ea0b2d6e65028f1e2a09c6ad92a40582ce48dcb61ab7e75f66
-
Filesize
43KB
MD5dfd99ed118c8dfcf4786509843639f0c
SHA1e35129bd08133c202f27d76f06157c6bd545b50d
SHA256c7eae4fa2ad0c59b4c1555a02b8885bbce2c9e30befc21537bdb09ec5eac6543
SHA512375a9d0387a7aee4f1e522b31352c98bb04d347f9e12abc4a2cde0171cf7dfdc4a367c74f9fd82de061ca7c89bbb9d5381bff297cca1fc4b5d4422a9cd836475
-
Filesize
51KB
MD5f02559853213720e8454919ac97c07bb
SHA1544ff19716fb58b4a88a7fd03cd155d053818857
SHA256b053f16a0be3ef7c428e7e347879cdca96cf7fa2f38012c17717737eb8e43f2b
SHA5124defcb594a2da22ab6070a10e6f983fc780d1e3f15b2fd6fee4ee6ee53aa905ba54c8fe8492749ffe65c53ba1d5eba1ebb0fa755cb285b17d2c01b0160cb32df
-
Filesize
53KB
MD5898972cbed5cc7c16916e9ed72fc53d4
SHA18a7324a0501052d1fdf117a95810158c45919c0e
SHA2562acbffe4f927a12a923eec4572db4e3d5163395f86ddc622043f13fdeecb4562
SHA512db687f9d0a9220aa171905fd1a1ded60ce183acd1eb460b4db71c5737db1dfbf7e7acc3e925953187fbbf494853ddefa3bb1cd5b026c37f28a9b2fd7a1a59d07
-
Filesize
52KB
MD535b6659a6a014bc4cc497de287835674
SHA15e26e909965eeb827d65b546c646e7024d4616ce
SHA2565b3d30e22ae6b4564f4e8893623faa6952f9087a38eae9ad128fdfe437f4650e
SHA51299c278fd6fb3b3bbfda11677d23a592e2005076ad8ee33257dec7c15ce2c4213b5e42a1429a79fab0886e045024ed88ad4a04ad5cc421544c5d733fe7ee8b21d
-
Filesize
55KB
MD5e743aa7112e5f4fe75292909c1017307
SHA196c2096a67f780785b71afa90df5b8e0fab598c8
SHA2568d5a7f7956c9f87d14c1a54d42973991263c7bf71da65a5e6b5aab20069691e2
SHA512eeba7d0060968f8167e2e83c144907bbe1f1dec7f3593cfe8579072c01f1b473a7360b277b3a47c549d972879b16b217d3d47569ab35061fd27cba4248d45bc8
-
Filesize
53KB
MD5faa2dbb9d671f4d663c1bd29bbedf418
SHA1fc30f2d6957ccb84d577cfd6641fe0161265588b
SHA256718ba654ba7264dc27d8b929069ee8d64e0e8d5bbcf17e9a88c1b674a7ac0806
SHA5125413d7a84b2f1833e1aae91aad1baf01098675225f60500752e6ac397cf2a015e351e735b1c7262b8c667a99a71100c519cd0f1839b51e908bdbe6cf63caf842
-
Filesize
51KB
MD56f1844452b98a51c7590f4a0a4989148
SHA1dca9f06ca960a958991843001ba4d603336ce112
SHA256b3a7ddb46681a5b951b11d6e31975a3760acd4affd7b2d7c499690a3fe54f6e7
SHA512f29265f3ae74c0586feda825d7475c974f971c2f600537885cf8f17324816da3ca56ab17c2bda0ad63b6e37715136e4983f2655284f779de909d290463c45745
-
Filesize
58KB
MD563dd5f1ff7c4e0bade20d74c71ef9687
SHA115d988e17be2503fb2c995c30b280e085792d18d
SHA256df8ef91dcabd94dce2356527c0e537b73b5afa071756d05048870f2e456fcf48
SHA512cded5a0a212dc6b8a2bf644931ef593dd67b20aebe7185bc240334ea9e2625f8db3eb41f2b06001a782dd495153699f1ad42d09a8ef4456c244a26ebf307ee62
-
Filesize
50KB
MD562701d4a193304f2be8bb8f7ac20613d
SHA1e6fa7d512518501d351098faefdbe3dd1cf8fda5
SHA2560c6324672773c7bbcd56fa3043aa60bae9d28592451292c86d98dbf277dabdbd
SHA51214e650174d2540069b7d1006505c0b302f94855b5249cfb33b3b399f4829c8149494e65305e64ac6c4c74a68670492399c592ac1aa00ae0bcbf762db13a165f3
-
Filesize
45KB
MD5ea29840c09c61719f6ea5ad3e80f61a0
SHA178256eb2e375e324762f4d4520bf083d76edcff0
SHA25694c87461bc80cedc96696eca270dc391b280f94523f736d2f79e0acf33e34328
SHA5120b5bd98c771001816253fa89949cbf0c63cad72be143cd66e763357511093af60fc6f600dad9cdf27f07d8ebf28cf675d35807079bc6de879e3958547929d910
-
Filesize
43KB
MD548e64dd1ff22b598242b708c352fa2d8
SHA18c932b634ba78809f5ba78423f21d96db126a38f
SHA256876bfdab436d9b3cdd1ca1185cc2fc71e16f3949637136523acdfec6d989920a
SHA5122d29cc3c8a649d230e27e83cd25898b6be8a8bd42bc05c52572b6d2704d63af2d9c08452f9587feee189f2435f62444dc17219f348f52f12ad6afedeb06accfd