Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
23/08/2024, 21:19
Static task
static1
Behavioral task
behavioral1
Sample
5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe
Resource
win10v2004-20240802-en
General
-
Target
5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe
-
Size
96KB
-
MD5
05a30ea6cdc81769e9297ce3f97b2e78
-
SHA1
2beaf55d8475b181eaa755c28b566955d454ddfa
-
SHA256
5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b
-
SHA512
768948d5522b853c05a30c52a0a37e5aba68f4c2408e50210557041947601635011157724f424b5b29d5226370a6b54bc4673045b80a55992df4b26ee19b88d7
-
SSDEEP
1536:W7ZhA7pApM21LOA1LOrtkpt6UrX4sS07ZhA7pApM21LOA1LOrtkpt6UrX4sS2:6e7WpMgLOiLOrt0e7WpMgLOiLOrt2
Malware Config
Signatures
-
Renames multiple (4979) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE 2 IoCs
pid Process 2320 _08 - Homegroup.lnk.exe 2812 Zombie.exe -
Loads dropped DLL 4 IoCs
pid Process 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\Zombie.exe 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe File opened for modification C:\Windows\SysWOW64\Zombie.exe 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Common Files\Microsoft Shared\ink\et-EE\tipresx.dll.mui.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\HueCycle\huemainsubpicture2.png.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Etc\GMT+8.exe.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\booklist.gif.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\lib\locale\jfluid-server_ja.jar.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-selector-api.xml.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-actions_zh_CN.jar.exe.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\it-IT\TipTsf.dll.mui.tmp Zombie.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_SelectionSubpicture.png.tmp Zombie.exe File opened for modification C:\Program Files\Internet Explorer\F12Resources.dll.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.core.resources_3.9.1.v20140825-1431.jar.tmp Zombie.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.5\fr\Microsoft.Build.Engine.resources.dll.tmp Zombie.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libx265_plugin.dll.tmp Zombie.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\it-IT\weather.html.tmp Zombie.exe File created C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\css\currency.css.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\fr-FR\css\settings.css.tmp Zombie.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOnNotificationInTray.gif.tmp Zombie.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\fr\System.IdentityModel.Resources.dll.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\DVD Maker\Shared\DissolveAnother.png.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Circle_SelectionSubpictureB.png.tmp Zombie.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\NavigationLeft_SelectionSubpicture.png.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.reconciler.dropins.nl_zh_4.4.0.v20140623020002.jar.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-core-execution.xml.exe.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Java\jre7\lib\zi\America\Argentina\Salta.exe.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Java\jre7\lib\zi\America\Belem.exe.tmp _08 - Homegroup.lnk.exe File opened for modification C:\Program Files\VideoLAN\VLC\locale\gd\LC_MESSAGES\vlc.mo.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\fr-FR\settings.html.tmp Zombie.exe File created C:\Program Files\VideoLAN\VLC\locale\lg\LC_MESSAGES\vlc.mo.tmp Zombie.exe File created C:\Program Files\Common Files\Microsoft Shared\ink\hwrdeush.dat.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Common Files\System\msadc\en-US\msadcer.dll.mui.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\NavigationRight_ButtonGraphic.png.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.xml.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-lib-profiler-charts.xml.exe.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-snaptracer.xml.exe.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\ReachFramework.resources.dll.tmp Zombie.exe File created C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\it-IT\js\settings.js.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\bin\jfxmedia.dll.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Funafuti.exe.tmp _08 - Homegroup.lnk.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Font\CourierStd.otf.tmp Zombie.exe File created C:\Program Files\Common Files\System\msadc\msdaremr.dll.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\DVD Maker\Shared\DvdStyles\Postage_ButtonGraphic.png.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Microsoft Games\Purble Place\desktop.ini.exe.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Windows Defender\fr-FR\MsMpRes.dll.mui.tmp Zombie.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\32.png.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\schema\com.jrockit.mc.rjmx.service.exsd.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.console.nl_zh_4.4.0.v20140623020002.jar.tmp Zombie.exe File opened for modification C:\Program Files\VideoLAN\VLC\plugins\codec\libdvbsub_plugin.dll.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_m.png.tmp Zombie.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\35.png.tmp Zombie.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\es-ES\css\localizedSettings.css.tmp _08 - Homegroup.lnk.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AXE8SharedExpat.dll.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\lib\org-openide-util-lookup.jar.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-api-progress.jar.tmp Zombie.exe File created C:\Program Files\Microsoft Games\Multiplayer\Checkers\en-US\ChkrRes.dll.mui.tmp Zombie.exe File created C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\ja\System.IO.Log.Resources.dll.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\DVD Maker\es-ES\DVDMaker.exe.mui.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Java\jre7\lib\zi\Etc\GMT+12.tmp Zombie.exe File created C:\Program Files\Windows Media Player\it-IT\WMPDMC.exe.mui.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\diner_h.png.tmp Zombie.exe File created C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\es-ES\cpu.html.tmp Zombie.exe File created C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\modules\locale\org-netbeans-modules-profiler-snaptracer_zh_CN.jar.exe.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Java\jre7\lib\zi\Europe\Berlin.exe.tmp _08 - Homegroup.lnk.exe File created C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\images\37.png.tmp Zombie.exe File created C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Annotations\Stamps\ENU\StandardBusiness.pdf.tmp Zombie.exe -
System Location Discovery: System Language Discovery 1 TTPs 3 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language _08 - Homegroup.lnk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Zombie.exe -
Suspicious use of WriteProcessMemory 8 IoCs
description pid Process procid_target PID 536 wrote to memory of 2320 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 31 PID 536 wrote to memory of 2320 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 31 PID 536 wrote to memory of 2320 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 31 PID 536 wrote to memory of 2320 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 31 PID 536 wrote to memory of 2812 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 32 PID 536 wrote to memory of 2812 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 32 PID 536 wrote to memory of 2812 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 32 PID 536 wrote to memory of 2812 536 5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe 32
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe"C:\Users\Admin\AppData\Local\Temp\5ba484dc7185b0e40ea02efddb97a3a88b5289714b9650fe374977c2175a760b.exe"1⤵
- Loads dropped DLL
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:536 -
C:\Users\Admin\AppData\Local\Temp\_08 - Homegroup.lnk.exe"_08 - Homegroup.lnk.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:2320
-
-
C:\Windows\SysWOW64\Zombie.exe"C:\Windows\system32\Zombie.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:2812
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
49KB
MD5de2f2c4ce3334ae85ccfdf3a5526f88c
SHA13d1e0f49978e6aaa89b94860746e48ac3c34433e
SHA25641ec14e25c36dcd84229d4eb11a9dbcc0c268706d6d2dbe48250805acb296843
SHA51243e022a8cd22e4461cb0d4b8516cb7713e998bd25a025b8e38cc5b12b183fa704ed8c68880d6c88b5e26de8304e5dafd429b2ee644d554b91e8e1cc0938228af
-
Filesize
97KB
MD55c613cd67ccfbdacac0231a5d5c225e7
SHA1ba182fc4576b8c8443cd81d25f180126bbe72d82
SHA256f508a35ccf5e883a00b51c48c040a2d28936a73682848fdd5ced97ea5644e842
SHA51251be3954aebbf50b06df95ec5f3d2fb21b293b2abd1187feac5b207ad4d32aedf333bf257d087a630c496b358170685941c7e7040920e99e7b998b7075c83dde
-
Filesize
22.8MB
MD5bd0b518c94ea2213a3614b4495856a72
SHA1a8b02fc52b9f0109bac3bd55d13e1daa2aa80733
SHA256ec508761609436e45adaef2dc4b2bbd76755488bed2ddd19c567b544d0fa064f
SHA512f1612788f88c7d13d2a9fe81e8d6550e7664ab404ac8ae4c7b146824722ba27162f03a6e488bf20006bfd230cc6ecdf6686a3c93b1d4b28688e673509347da64
-
Filesize
2.9MB
MD5394c006cf4ed3628565a2124b35b59d0
SHA10fa5dea8371409ba2493dd5516c11ca0a6beaf3a
SHA2562068b6c6ce2d8c68a64c0274bbe8ab87d06eeefd333a68b14a6dd431d9028211
SHA512c074b6fd4e75070bdafada922a61cc433657d75faccb8c876503026d90a3b9a1992823592db62f83927e9ddbe5355eb9144e971785a95feb342d3458231471ab
-
Filesize
23.7MB
MD5c198019e54bb486c7ec7a6ccaccbfa68
SHA1f994729ae09f49c4aa8d75a5c17d73027aab9b57
SHA256d47639a87f2c71390f36bc04e2df5a92d8a8bf3e4c611aa07a619b4d0b5dc8be
SHA512cbeae05110f910791dd25e42edfc38c61d98430b4c65dc4b8e376974866e7399167434f10d5af7e67271b95b42df85d331476eae527060693f351f984973337b
-
Filesize
194KB
MD5cfa3fe88444aca8bbc06a699d6aabfb0
SHA13b3909ed47e394d1b01e40d8968270b0b6c66a25
SHA256730efb17f55f4b9ea097d92d37bfbfe2698e0c94bd756f66d546f95ffac4940f
SHA51249197fc423a52a9ad3114b860ff3012c7a4ecc1150be422fb5ceccc37035231a9dc3cf55e82762b6fc0e95220e553dba9a60250dd5ffb943e86dfb3df59024df
-
Filesize
5.6MB
MD546c08af051d2a95a9e05131adf6b06c7
SHA1522f6fab7001aeb037790e483d36af6d6af854b5
SHA2567e549dde0fa1a4dcfe7ff198f1bc85ae4989b6226911f63c1dc19519ca36f22e
SHA5122c955750893bf582c1d361d9d36d4c9d11d2f88208f031fce7bbd8aeb69c5f433021b790274632635939faa912837bae5b3713c0a959e10b3d7a431284825ebb
-
Filesize
1.1MB
MD536d79339ff0ad8a220394c5c43650007
SHA1c07f10305eeff2854af0d703d4b134ad5a9dd6ad
SHA2563ccf2810a66d21c32fd552009a6a6aaf5c8c2b63c2d68cab240ad9db917f71b1
SHA5124af9ba0d5177930234fb3b9891215d41da4f68a98fafea200002e0fa43a4ae8898f965ea17980bece64113f6bf0b7bd66972a08df2ce6246948ea40286bc3540
-
Filesize
16.1MB
MD52e6d78855b68578263bdd73ac82a7d9e
SHA17827897674d9cc9256d83c0b0330ac1b1a57dea6
SHA256ce6aa57821d0c268cc9557c2c5c01694950503047e77d5c81b682bd2804a014b
SHA51262a1c375ea0f11d532b0cb6ec70de5efdebe889b4f6423bfd1c2a22faceaa3837374927a64f5ae1c4ff107b7c8b28416d0d58c815e111b8900b61bf5e5b958d2
-
Filesize
1.8MB
MD57cd4c6d2b7cef747ca08f6440fcf93e9
SHA19fbc9b7f9f46660ee26fc7ab3eb5e48fdfbc620f
SHA25642d339f0472f1a0f3b4fe8b28676da30a2f32c1823c6945eabfc74ca54c2ed53
SHA5129d9a9892d67257a8ea66f01e48ed09d96a27fe102f6dbbb442aa2d30eb8e322e4113010c5814bb66b947f3d87fc9c8c56867fed311e63db8865e53b449f6a3b6
-
Filesize
9.5MB
MD5c675fdae3b53edc96ef37dcf1e355729
SHA13a65ae8df42485c6639556948bc9e72aa6755230
SHA25679251ed1a298d5cbfaa2100d64a7d906ca5517fac56adc68e475567e53261eba
SHA512b1b01d7ac3eae3a43054408a9e28bf3710cad0be9f8ee1bab96d4fcb13639d96d2d57580426f3b02496867d83a61eb914f54029abcba9064d6250d88c405d2d0
-
Filesize
1.8MB
MD5b073b98f997ae3817451e12e27bb2509
SHA164d48732a85f1534c53f73d6c98362aed23aba3d
SHA256ea1c20cac7c2c7b9e788401cd621462f9336c5f4d2e16877dfb0283f3bbd11ac
SHA512b1ab798447da503a598ac2ad6f9aca77e2e23096fbe71e253ef2157833ed61e7ed9b718668030e3d1f1afc2be33028a04248d921897be967e1ff6ab7f8d6aba3
-
Filesize
14.2MB
MD5b5ca2abb7b600f2db232100ee766494c
SHA1c3e3f3b99f80b127bbb85c75e3e52a9c97d9e964
SHA25662288346bd0391b940105caf0c6d6982647206c58a378f403d92e5bf1efbdb1e
SHA512ccb537e214522bc30f0ccb8286bc7d70f5a86a5068733f071dc33ac0efb48c9326047e9779457518eb20c6380d27ffee047805a6ab56dd87b50db21b293163d5
-
Filesize
53KB
MD543b84f4c35a644ff97fb695e6a8fc39f
SHA15281100d153a978caae963b77794e702c4318b4a
SHA256138b44cf3c9a9af599094137d01381bbb2692f4e4407542900e0a4ea5493b5e4
SHA512efe70b847264eeda120c84b391ef62db188b14bdd5bcdf9cf7c359475ce3d375a49027c3f69a42544e0642e10802c32dd45b685f5b8f5815d85ffcc7aba5d712
-
Filesize
1.8MB
MD5c87edfb2e14a3fccad2680619e69a595
SHA15806f454a1353200ce1c4237d07dee0b9e5f3172
SHA2561a2784070e3268443908af9bccf0dad2b7cecf6884d837941d8604aacdcdfdb9
SHA5121825eb3a1014c4d9716822e02e7f1bfd4f7396922e8e8d5f76280481bf2fbb473392a94ac92c90bf02e6103a151890526cdbea89b601dd387eccfee4bc015faa
-
Filesize
10.5MB
MD523dbdba811b5bd7fe2604e1525bbff13
SHA13d5fa0a75f5a5db9e1e6020ea8f06cc865004849
SHA256ecfe30989a114cce313e7e2b834b13992d25c8c08dc7a07837444e10e4d5f8b5
SHA5129d9ebec561deee3c9911f7f8ce20aea0ee86be4e9e01cb39b58bc2e69acd485cf3c9346b0a38e8f45c9199419c21aaf445d16f471cd2a60e14a9aec3a6de3def
-
Filesize
690KB
MD593a167a6504a212cf0bbf69716531ed4
SHA1a3147abd306ae28bd8957e13ecea040284acdda7
SHA256aa2220870fbfbe83a5a73d61448b3e4849bdd49b0bd7f3f7eea4b6fd22dc7271
SHA512351d5b525466af2a717203d75af4597e64b7d7160e1a30423b7093dcd92fe20840380bff6d99bc22f367b57ea9e82569290c82a3cb47f1c0be7251955bccb788
-
Filesize
12.6MB
MD54f65ef91dd3da20293e8e3d01487049f
SHA1d71cef3064394ced37db1bbc2cbfd1ee3da377d2
SHA256fd9de642d2f92fd80a9ac1ee2b5dec442b7d0f0c1f6f461c285f88fe7e387138
SHA51266878b3c8adbdc9d2b7b31fcd0d6ca7ab8ca068376a7120ea0169b3f65f7c97a2a618b452be735a9c02bf8a9db10daa2c66e575e4ff6c0fb0d23ea9b73232315
-
Filesize
696KB
MD51e13bbe782e3a16b5ad3d033006dc29d
SHA1252315e4ebd07d2b1c128b634738647880886759
SHA25651c78508984a48f415b3525d49ad54a554bcad3ce074c5e87c53a07ae3443d91
SHA51203eee7626caff96bb60c209b427130db6c417f19fef6456d7b53d0b876e1d54c46161fb050db769992920ea28232e3e8584f62aa4587a3f2ec9d244ebcca66cf
-
Filesize
19.6MB
MD56efb71ba87595b10dc7a95b205580a7b
SHA150c168acca0774ac14a67daee72f9f493f98cb32
SHA256904ca2bfca16e50476ad9b05045f38136f6de6fe6903e75eab33be6c8fd30a3d
SHA512e83b462c065448e1311dfaf192d42c0018d72418b54c74e790edec8178f0623cbe2d7fc8f5371453bb5563f027bf80e241136e5ae93e5a88c0523d2967f95882
-
Filesize
51KB
MD5b0886b78a2f12d4d80cc835795059959
SHA1d2531fd548b22bdfc13e1c1f3959188d74453118
SHA256110468e2e31cad21fee0a7ad12b0ae9382eea31a5ff21f52ebbd8cce052d1d50
SHA512022df123c169986f71d9de72dc66f572052135510bdf6bd968ea6ea8aca03870b09a2203ad3179e04426565491bb655c7d1de182848dc1a4adcc3b9f0c405dc1
-
Filesize
15.0MB
MD5eed7bea901e70ae5ab267134772b7d2e
SHA169a2f8e1967b7e44d3a9902896afe2a05911b9ea
SHA25613301e036f7a82f4924fa4361db4be7e8d7dbc10a87ecfd323bf40dac7729a2b
SHA51225ef849997452a96ce81d5ef6be15d449c9b62274fc30d6d56b529f308cbaa12b2400f847e77a3bc9486605d22da33a1d56206b9da859076b370873b1747f52a
-
Filesize
2.3MB
MD5ce5b5399e4f9882efbebae684ef68130
SHA1b727c0b5afc2ee3a459b57cfe118d12b064c8727
SHA256707e6dc743aa329657a37ac19f5f637ac2e4f881f4218c3eb5fc5d0684621343
SHA51253a79156fa12f86bf442b13f7d22b3dc78e41e1aa846767bb3c10d1db76c78c65df13b6de34d15b62a7c48b7b4a727f2f262efeac7a7b09fac02f54575f03a32
-
Filesize
1.8MB
MD59e35fc8722ad3563ffb965f2e623cac2
SHA1a5a07f026f0977b15590089985ca79078d7090e6
SHA2561b3d86977ba3ea55f10164b9825e3ae84204bc52d54c3e965d5fa6e1c294e164
SHA5127fab67bc91f4f055436acba062d6d88e79979910e14a50d31e864360c0cb7ee1581c1b45c3a437e5a41dd23ebfbfbf1ac6f76b15b1d814133416786dcbcbc416
-
Filesize
16.7MB
MD5c2f82a49c6f063e35bc81f82c8605cd1
SHA1695d54a861e9417105c777c2eec8d267ebe85e85
SHA2564ec127dc838dcb155c6ab413980f2cddf460adde5743990e1e1bce9386cf63d2
SHA51296f9c2d96def416aa11a9aef19c3b3e24e403b85eb73db99368d6094108a0c1b70585a005c8024fd0b16e674f863e823b7ae0547d53a49df0977f4d2a4640933
-
Filesize
4.0MB
MD56f244d5f5c5054d3bb00ac07bfe93103
SHA1dfdcafcd59c7d591f0119107f844d4d1f150289e
SHA25629633dff612e5fd5679ee83231ad0b21960b8e7a911c15ade00881900fc2cc9a
SHA5127dd29ec9a61b3a8ff775dfd5562ff3e81588477c77efa4a2d798b1b9d5163acbcb1f6c85d1b0a8f28d3c19e156890db3aaa2483473264ccd9bc0c061bb2d85cd
-
Filesize
1.8MB
MD5eccf5417f61d9e9cb264d98a3c74ec8b
SHA1c2617423a70b80ba9a3b7faf028c4413e7f3fe68
SHA25697555422973a114b62df178767959845b94bcc726daedde52c49239099390cb2
SHA51222563308d0262d7c33018430d1860214e477e62cc23b62025dbac696fa485c11a97d73d7daecb3cc1bf8f4d58e4b4c5596e7f455eda76ab1a92981be06631dc0
-
Filesize
153KB
MD555255f150143782c474f53c4f5747430
SHA141de13d3381dd2f2caf570e855307f7fac89f6ac
SHA2569416b63a080ed2454c4c2d6b2d1fbd55f49b238764b4494fd1f2e2d2e6fbb780
SHA5124b0f5cd1ca44f5d191a33586013c595d15b8dc3e5dc1ba648db5f61cc6fa02f4787dac4592e52d53b7535d61607d8a63babbdd2461c568bb3d9e366b324026d8
-
Filesize
867KB
MD5ef8a9635f0b5338116985fec9bf30acc
SHA111b3919c76a8e834b193439ebe1fc838df8f126c
SHA25658416af46c8768225710c79706d511889e129a82cdceeed64f4ea4b47d716dc7
SHA5128e92ca52850cdee125643121461d7617315a184abbf130a921baeebbd150fa22f94171a222d62921009dc5cb0932bde9ba53299d770db884b3bb2bf05b546e47
-
Filesize
13.7MB
MD559eb25f7cd97dc5b94cfe8cb85316c7a
SHA191eb542e9ef77b54387bf784e7061f01f1901b5e
SHA2565aa7925bbf26cfd1ec05e8eba0a0f0cc8d890ab9a8250f735b6dc3980a9e27f0
SHA51272f6f7dee66d1fc36564f9c2d43ee5c99986a65e904a96a5c48fa149a0ca4707d2fd5347ecf996c74138f024674c2aa3e4ecb7f5e60638fbd4c429cb519c255a
-
Filesize
2.8MB
MD5766b9bc6bbe5ec8034dfc05f36173ca9
SHA18b55ad87d0aa2ba4b93b4345d2e0bda3d218eaac
SHA25617723af90321ede17b578ec1a16896ab89720096025aff24efc2199d2d600846
SHA512c2aec5069f5ad8fdc56337bf6fe67dbd840a03882341ca2428a2d6edd16affcaddcb2300d04a8e39e3b708a266ff5f3974403abb082bdfd245b145c04cf92e6a
-
Filesize
58KB
MD55814801f67c7253079083617a95b2b0b
SHA193b5bcb44ff7271351c0be4341016663a3563ad3
SHA256cce0af7698e10effe393501e8bbc82dbe105c00a06b5b1611b128770ddc741f5
SHA512917afa8446ddb6149df8731f02c3d2e10745d4fa0e0df79feb7dde21dffa8ba048404950a0d63099233dcd8b32edf46df875abc4cbd4baa7ac0b80e10f928e0c
-
Filesize
630KB
MD5c41e2f1b68f19d879e7e7b4759319e3a
SHA10846941a0e3504e85b85430e7402d1aaee530108
SHA25635d1984ddc7e4755a2cb7b10fb4ef238ab1640c2ef4f40f3c18a863f3ff3066a
SHA512ca97055e1f690f1b900dcb04abfc285e54db47fc40c6c8dd7a6389ecaf45707c902a61e4ac1e77ca41aba75c3a418000c16d715fa3a9e10ce31f70517021f674
-
Filesize
556KB
MD56f421a3eefa0d8d82d29c1acab08ac80
SHA1df01c0bd875d1134b2399999296525a286d4e5ab
SHA256baad558a329355f9d64972dc7f5ae821dec4a26b23a030cc05fdec584ead9604
SHA512e084ed60c4ec3cbf11f4c8e066d662aa35dc4f16d243ea9f7e9d7f44b18608808bdd09984b994c1cdfc62612033f20d593d992ae1c290f65f3f66175d15d90c9
-
Filesize
1.2MB
MD568e59b238e5177f11843c08b2bb2a7f0
SHA1828ee54a582443b581ae1042b0447cbabf2c9f9c
SHA2562f526dec901c99dad7edddf8f0f08de83f540ca0c77b2900cc75840cd652701b
SHA512b5ee6c92afe33c6ab3fdf397018378615aae6a993104fa9bf23a9397687ff93d954d443c469220cb718cdcac9fe414aca070beb790c0a5aad8b5f9471e777f2a
-
Filesize
687KB
MD5a21b11dd975f7218f751ec43329f99f7
SHA1c9041820e9451deb30c6ae25b9d7bdd947c94f4c
SHA2563d16c624d63b02c365d8db630a603e4671104069e8ee2bf679d7ef7dd609598d
SHA5125b403c4fe51a6f6dbc580577050197dcdfaf5d3fc6e2987b1964f52d1fe3410d9f0591e5434fe3413f4f90f91c9cfd2ef1cf0add049e7b6033dc4c77d99f495f
-
Filesize
53KB
MD586f108ca87fe215f0c8720cf34c1cb1f
SHA15036c5c20fd0e4bc1f843b07f3983c25ba1b09aa
SHA256fb2dc9d1ba70beb41442942f541e81765ee12bc6bfda880b0f2102a1f7e8f92e
SHA512318f8211939ecf996abc4a4761431342f2728d5f34f92e0dc1bca182fa36faa5a4e383f82e1b876beadff3651c661054887f2e2a6a78c661ce7e9710bd0b0f6d
-
Filesize
630KB
MD503aed614d32549061c187d326fec2d79
SHA1e72403ccb412ad4ff5bce8107a9789428e5069ac
SHA2560269b9b7cb4c65561f3ad3f75fb4d283e7ea54857514a55ca40dfda05c793f00
SHA512ca7774b36a9f63ce9c113d96a67f45d0caaa286cee0cddc6d722a3c10af4328e0c278e4b3d9d58478688c694fe4440df1532d6049c49077c0dc2233ec0cd8963
-
Filesize
683KB
MD5cbf408997621eb0eafa9c2dedadd55c0
SHA1fd1e6af4bd909adb12167ba8698ca5804e09d053
SHA25618ad52acca27d2855b2b9bac78418b10c6f30544cb6ceb8edb2d18a0df427dda
SHA512bbc29a32e23e192cef0b17cc30123bac96c11e24a4f048d53df29059e3801de931dc7a5df49c3b3078b12f06ff92c6a479bba9adde456d01162b6a817d574c8a
-
Filesize
592KB
MD534a2cef42435eb770ffd262f902e4e62
SHA10392e6fa9a3f13595fabd51ff3cbbf98ed400d1a
SHA2564bd0f837424f89b545d045049b5048341f6bbd2e365eebf03ed3e24dbada9a9e
SHA5129711499d43f4cba2077fdff97bb7cd19d7462ce8b24a3d084614b834f2e643e926f22f3b71c7371529746aadab78ea848d78fff9bba80f5206c8a4215c4ada1c
-
Filesize
237KB
MD59ede392bb52ba738c5e8154b941ce3ca
SHA1ebab303d5c2a8d03f00a7865f1c8523369037b81
SHA2564aa88db7bc49b34ecce7685f262f9474c648e3c9e73584bc1150a46236f897f7
SHA512286fc483d11b05dc15fe342f2719435e7baa2c6e2cd0655cfa03e14d1c3c5515420b976391294b72afc70bcb12552d7f2de751bc809994cea40ba65ca73d074a
-
Filesize
979KB
MD58f2c97401daf97266005f2c347c07d57
SHA15da7eb9010c7cc09f26102803c9dd143de383af2
SHA256027c1ab6aee52ff89542bd710cbd09608b70c81031c8effe58861e13b2f83a79
SHA512f0aa5d78353890c745bdb07323aa14b3fa03b260f77bc68925bfdca76e5329fec13d55c138aa39f80d691aa2c778ee17043d5338b2fb1a17e7f1598398efd6ea
-
Filesize
4KB
MD5e6cb65911f645b425dc2876d54bc36f4
SHA1a6c3d54fbb02bbd9d7da74bed3559943923b2f66
SHA2563cf7465ff7f10c9658cb4d6f81458ac23747ad191450b8b311f1d8f674d84a31
SHA51235d1ced63aa8cd63cd2c3bdb470f7257689b3897da141cb0e208973f22f3b95564d0bde4a494900446abf0560cf96073095fc5e88521df3607f91a2d2069b299
-
Filesize
105KB
MD524051122185d8bf4735e1d2c1e553d76
SHA1521c38d4e30133f438259aef285724a623914a39
SHA25691d7e6c4c35b0dade6b0731e2823361f74cff48a9e036bb60c6fe4c398b9d5e7
SHA51262a803b75b183eab95c39ba0ebb3f059282f4b1f42e9ae55439ab31f5adf58c87101d382966872832837d6f4ced8f50515914f520178dea3b723c3eb9bde6cbc
-
Filesize
61KB
MD587acc946bd704094feff5635d289428b
SHA1c9a105e65a9d45676b66cf4f7789058192893ee8
SHA256555af85f978620818a4749e85a17f11e0a88effbc908f0ab8276155394402d55
SHA5125ef82b1fe6779ba60f2ebad0e0ea5496f580c9d905ebda3088630d733bca507aa7ab0aa8620bce4fea90ab583540cca97d57914ddf4fad5556310bec6b664819
-
Filesize
54KB
MD5904cfa72b7006b109582f8deb424caad
SHA105ad9fe11f361d68dadc20435457742ad1944f00
SHA256958ee0f12772431ba98969eb85ead528a3b5e377ed09034cbea5de48b8ef49ef
SHA512964b66bdd5c5ab74aa3ec14b3b18fe7849b742b498424e8bc5133bcbcef92993ef36e82110f0c7c85dcb376829ba4e48efb76e50c026488dd7bfea584b070c82
-
Filesize
58KB
MD588dbecdc36cf86dc7e8cc9e9ba290ff3
SHA1d98510ca2c2183072b8820a9a1e2dc213d7f054e
SHA25600425d14178adcac3cf6e320bd93c3e55ff9aafb227e02dccb7ae304ec071f7d
SHA51297daee27fba321687345dc322440efb1fb06bfcba3a5818d0a9ea5810234d464638de4aac0ff7ef6753eb6cc88443a806ca430388e176b8c6b63ad369f21b2f2
-
Filesize
60KB
MD5bf1886d3472cafa7d157718d6d4ba179
SHA159881e5c90a18c86c5a26ae0d7ecd66fa2128c45
SHA2561c5147cb1483a90629fe6ccd3a1b41f94c3c1d5e5defd4f99e873612ea84b419
SHA512aa9d243209e9a8ffb7e98d4958deb50f07d03adbd30b49a26a6ffbc45397d48627acf24a21c848a08d3b9c51b11bf6f9d1eee411c7098c8eb2c87fbaf7daedff
-
Filesize
61KB
MD5698ad0d1595848d203c449a3cc4ec3eb
SHA1152c23be22dd1bccf827e211bb9c3e94f524191b
SHA25645d034535357f1b12a59248bd186d9c5a748def269314bfafbca9c60f19fd85d
SHA51251a738baceeb9b0840dcebe55d8c39c581644d7e63d8471aff91a392bdaf12241f2826ef46f67d7da3067a9122400bb6faef914aa0de6d474068d5cc725f04d0
-
Filesize
63KB
MD56556c243a712e3c4f431876394edb673
SHA1d8ed9a3a9d2bb80ada8677d6668d75a82a7e65bc
SHA25689ce24eef1cc55c958901715976751097ec972522241d626b25d6c922d68cfa2
SHA512a687d04386ae145c34d29956fec551a8f8234545ef8ee372ed945bf20ea8f5fa59ef51bc189a98982838189d54a9c073d6e3dd3e0c0ef1a19e153de54633ee5d
-
Filesize
48KB
MD5b5dc4a68305b18c06c2f54e96ff28dca
SHA10a3d96fea9ada960d0074438ca2fb1f0b158a99d
SHA2565ae5d8cdb4d84378578e05c5ef4d718df3c1d91896091ec40203496e33cb2fd0
SHA51243562d0a5b09eac1f5291403a32288a678ed96921ab784cb0c8271a99429ca9dba34f5f54b98ddf09f6886ae269eb7ab050783e750267f851061b7b508627336
-
Filesize
50KB
MD5ee9970a1ce262ab436a2477694af3aed
SHA132ddeab3fd3ab83d47d795ac561ab5b8380d30ba
SHA256088c2ae4e8a949329c443fdeccfd796f8fea8ff35f484b812000b311ab124e32
SHA512455bb683112e089947280e15c250a0e7fe88c1724e0f0b4e7509b1bd8c79273440a43ccc55ae9d434dc33e1b78d709082062024c2cd700570690e5092d81860c
-
Filesize
48KB
MD58e93c316cff874df3deea2b5dbaded29
SHA18bdda0cffe2fc3a39a7480baf5b4023081cc965d
SHA256ddfaa7f1201e43988d788f90f3f5fe04a86926c168a3fd96717ab5f80c317f59
SHA512bdb165eef5dc1ecf02b365309d413d2255348e5ea18ad0756c2e8b5eea1b62af6f761e6e3dd69a75a297cd32e008d7573d48e311e6d200e61c4153a7d85dd6d7
-
Filesize
48KB
MD507314509ed2275c2395b2d97a3056859
SHA17b0138acde962a7819f6b93c5f54040addbb6b16
SHA256d22a1aace78a449ead22c391d5b70f58d4f65087e59b399724b33cde2720e6df
SHA512888f8fa2c1a60cd74f6662ccfe961ff46ff7f06fab997edc11485c389a8d3b6917eb33d8c9f72f27290890d89e86f7638c86a6d13e4fc97add216248b6c63c19