Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
119s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
02/09/2024, 07:10
Static task
static1
Behavioral task
behavioral1
Sample
43c1ce6f93cb759893376fca51821540N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
43c1ce6f93cb759893376fca51821540N.exe
Resource
win10v2004-20240802-en
General
-
Target
43c1ce6f93cb759893376fca51821540N.exe
-
Size
125KB
-
MD5
43c1ce6f93cb759893376fca51821540
-
SHA1
f06f08faa6e9348a2701bd34e2b8e8788c5930e4
-
SHA256
3a31b4dbce23fc1eaaa3422c90fa1428f19238ed9bd945c955174f3408915cf0
-
SHA512
b4fa860af3a53c112c4d555f41f39f479a2287750ad1648c02c1ba5341284ca907387260653ce50585aeab97597ae7ef0685339064c9742e0e86d3dd61237c03
-
SSDEEP
768:W7BlpppARFbhjbhg42LcfpCKYCKo7BlpppARFbhjbhg42LcfpCKYCKK:W7ZppApBULcfpeq7ZppApBULcfpek
Malware Config
Signatures
-
Renames multiple (4707) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE 2 IoCs
pid Process 1300 _Speech Recognition.lnk.exe 496 Zombie.exe -
Drops file in System32 directory 2 IoCs
description ioc Process File created C:\Windows\SysWOW64\Zombie.exe 43c1ce6f93cb759893376fca51821540N.exe File opened for modification C:\Windows\SysWOW64\Zombie.exe 43c1ce6f93cb759893376fca51821540N.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Collections.Concurrent.dll.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.ServiceModel.Web.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectProMSDNR_Retail-ul-phn.xrm-ms.tmp Zombie.exe File created C:\Program Files\7-Zip\Lang\pl.txt.tmp Zombie.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\dcpr.dll.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Office16\LogoImages\FirstRunLogoSmall.scale-140.png.tmp _Speech Recognition.lnk.exe File created C:\Program Files\Common Files\microsoft shared\ink\ipscht.xml.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-ul-oob.xrm-ms.tmp _Speech Recognition.lnk.exe File created C:\Program Files\Microsoft Office\root\Licenses16\OutlookVL_KMS_Client-ppd.xrm-ms.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PublisherR_Trial-ppd.xrm-ms.tmp Zombie.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\cpprestsdk.dll.tmp Zombie.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Private.CoreLib.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ExcelVL_KMS_Client-ul.xrm-ms.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.ComponentModel.dll.tmp _Speech Recognition.lnk.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\msquic.dll.tmp _Speech Recognition.lnk.exe File created C:\Program Files\Microsoft Office\root\Licenses16\StandardMSDNR_Retail-ppd.xrm-ms.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\StandardVL_MAK-ppd.xrm-ms.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\ja\UIAutomationClient.resources.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusE5R_Subscription-ppd.xrm-ms.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Grace-ppd.xrm-ms.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlusVL_KMS_Client-ppd.xrm-ms.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART10.BDR.tmp Zombie.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pt-BR\System.Windows.Forms.Primitives.resources.dll.tmp _Speech Recognition.lnk.exe File created C:\Program Files\Microsoft Office\root\Office16\msvcp120.dll.tmp Zombie.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\C2RINTL.en-us.dll.tmp Zombie.exe File opened for modification C:\Program Files\CompressCheckpoint.avi.tmp _Speech Recognition.lnk.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\it\WindowsFormsIntegration.resources.dll.tmp _Speech Recognition.lnk.exe File created C:\Program Files\Microsoft Office\root\Integration\C2RInt.16.msi.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\es-ES\mshwLatin.dll.mui.tmp _Speech Recognition.lnk.exe File created C:\Program Files\Microsoft Office\root\Integration\C2RManifest.OneNote.OneNote.x-none.msi.16.x-none.xml.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Professional2019DemoR_BypassTrial180-ppd.xrm-ms.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ko\System.Windows.Controls.Ribbon.resources.dll.tmp _Speech Recognition.lnk.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hant\System.Windows.Input.Manipulations.resources.dll.tmp _Speech Recognition.lnk.exe File created C:\Program Files\Google\Chrome\Application\123.0.6312.123\Extensions\external_extensions.json.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProfessionalPipcR_Grace-ul-oob.xrm-ms.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial-pl.xrm-ms.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioPro2019R_OEM_Perp-ul-phn.xrm-ms.tmp _Speech Recognition.lnk.exe File created C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-debug-l1-1-0.dll.tmp Zombie.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\api-ms-win-crt-heap-l1-1-0.dll.tmp Zombie.exe File created C:\Program Files\Common Files\microsoft shared\ClickToRun\FrequentOfficeUpdateSchedule.xml.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\MSIPC\ko\msipc.dll.mui.tmp Zombie.exe File opened for modification C:\Program Files\Common Files\System\Ole DB\sqloledb.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Effects\Riblet.eftx.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdR_Retail-ul-phn.xrm-ms.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\WINWORD_F_COL.HXK.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\Office Setup Controller\pidgenx.dll.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.HttpListener.dll.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Security.Principal.Windows.dll.tmp _Speech Recognition.lnk.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Threading.Channels.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_MAK_AE-ul-oob.xrm-ms.tmp Zombie.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\7.0.16\System.Buffers.dll.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\UIAutomationClientSideProviders.dll.tmp _Speech Recognition.lnk.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\pl\System.Windows.Input.Manipulations.resources.dll.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\de\WindowsFormsIntegration.resources.dll.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-ul-phn.xrm-ms.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\tabskb.dll.tmp _Speech Recognition.lnk.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Net.Http.dll.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\de\Microsoft.VisualBasic.Forms.resources.dll.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\tr\UIAutomationTypes.resources.dll.tmp Zombie.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\api-ms-win-crt-math-l1-1-0.dll.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.contrast-white_scale-100.png.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Office16\lpklegal.txt.tmp _Speech Recognition.lnk.exe File opened for modification C:\Program Files\Microsoft Office\root\Document Themes 16\Theme Colors\Blue Green.xml.tmp _Speech Recognition.lnk.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_OEM_Perp-ul-phn.xrm-ms.tmp Zombie.exe -
System Location Discovery: System Language Discovery 1 TTPs 3 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 43c1ce6f93cb759893376fca51821540N.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language _Speech Recognition.lnk.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language Zombie.exe -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 3524 wrote to memory of 1300 3524 43c1ce6f93cb759893376fca51821540N.exe 83 PID 3524 wrote to memory of 1300 3524 43c1ce6f93cb759893376fca51821540N.exe 83 PID 3524 wrote to memory of 1300 3524 43c1ce6f93cb759893376fca51821540N.exe 83 PID 3524 wrote to memory of 496 3524 43c1ce6f93cb759893376fca51821540N.exe 84 PID 3524 wrote to memory of 496 3524 43c1ce6f93cb759893376fca51821540N.exe 84 PID 3524 wrote to memory of 496 3524 43c1ce6f93cb759893376fca51821540N.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\43c1ce6f93cb759893376fca51821540N.exe"C:\Users\Admin\AppData\Local\Temp\43c1ce6f93cb759893376fca51821540N.exe"1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3524 -
C:\Users\Admin\AppData\Local\Temp\_Speech Recognition.lnk.exe"_Speech Recognition.lnk.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:1300
-
-
C:\Windows\SysWOW64\Zombie.exe"C:\Windows\system32\Zombie.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:496
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5bcf0bcf5bd391e49521e744ad40f3cd2
SHA16780e5d2dc564c4d84dd51abd2fe343358529922
SHA2568f247f8a1302df9d7a4c5a55c9d59008dd581aea69ed618dfddac14bcc9a9adb
SHA512d3c70766c41828cf7f1917e33059428f984e586ed5f931f9747729bc273f8db673602a227d7cddeda64bb10b2bd3ac225aa5178f5554dc8da7d1f3b6fad6d525
-
Filesize
176KB
MD5f2e18a68ecdc2875fa4b3a1d104ce65b
SHA1d31784c3952bba184d68954de2928e181307212d
SHA2569ef3082f6078a1df5a14b28d88c0d8514de0b758f3a24d8e0817e52a9ac2930e
SHA512a19bea4944caf1fd76695a8db48c13166315d88d343a67a851fa20b139361953398d08cfaf62906bda3ba224ba7ab1ba0daba22f0c913ee2a227f3ce3441d8b2
-
Filesize
128KB
MD524519f1a08a72b7b9c21937210c25862
SHA1acde5ccb09bc0c12043d0dfd10418c08684cc506
SHA25623ef3b14acdc101f075fe2ee47ba167f08d2ccac91ec1098e428e7cbce336ab5
SHA5126eb14b2cbb96945c92852edf9ca489a36f0fd1628beb98f45fb9db2ba879d0232d7bf3f8ef7dfa3f1092b6d2e5d50bf734c8a2eea5f40c3d50fa877f13236b4c
-
Filesize
1.8MB
MD583d4f5f1eaecf4b4de6d8345664df29f
SHA1ed10ccfa6ad23c1e693637d33321b280ad0cb647
SHA2566e34c833db5b0a335ee741dac3e8017414ef46812836f3965d7dd965202e6ac5
SHA51287ad110815b716110cd7e4af8b3c17542b51d10127db2a4a018304ea025f6b6daaa93da64319ecd73f6502295a95b0eaae2f2abed7c30ba42e1b0d7ce87b410f
-
Filesize
607KB
MD53d827a2dc8c93d02605c9dda90be399d
SHA10d7d17a1a1056664ea0aeca022c387f7404f2160
SHA256c7d1f4fec14d1a9327351fa391c5fe1d4342c183dbbe6d85aaf0542765a9c491
SHA512ad321d16692e8e2e4de52613cb630ee470e99301b2775ff0e951651664a298f5ad05f3ac90abfe35d00200919beabfc85fd64250197b7a49080ca141bd7d4dee
-
Filesize
994KB
MD5747d29192053b1c2d2fdd9428d25909b
SHA140c818d2bcf20c7be1443f5a76936048bade91cf
SHA256a06be4b5f538477a6edfcad566f73f89a5c854503c4cfa367b77c6e3806a6c24
SHA51215af9766993162c912fda3ee5314f8688772a0343c4a9b0cda790bba07756704d8708aac7317a9b4940a4d9e247085302dabe5ace2be90d58ba269b8bbfb17ab
-
Filesize
747KB
MD51ca677630aa240d6212416eb270f70ab
SHA1fd374df61d443b17a43c723bc280fe10f80baecb
SHA256e272d70e08973baf14d497d41424cf7c473fefdbd19cc2694c020d2b13909708
SHA512217c441d4fd22dd1d4f682c154e261ae987a06376520275f770db6e20e1268ece93500608af8dcbaeb25cae79d19095c75ad193b4614f36279fae281a916073a
-
Filesize
71KB
MD5097a0c250d152e58c7052fec4e24a5ad
SHA1343c9b7ee15fefcc27e5a97dedb519acf6a8ac9d
SHA2560cae9aea800743ab9ab09ed5fd507b599f192ecf52c3e65051f7b3c05ce760b7
SHA512b69f5f729a51a2605efcdc46f889c44179ee7613e51b53baaa21f717e0273e32dbdea49d5573d4a897bff6cb7c5176d831096277d79a3c206b2b695d169e33b9
-
Filesize
74KB
MD50c0c438a60ecef1241760913793e2f7b
SHA11def431a3c5ac0033467af746e40c9736674bb14
SHA2567d4f5e95c30734c1a762664978b6e58ed2543be1052cbb880ae1934f8a37f21e
SHA512fbf3c4f1a5f26ec0c0d5c4c08eb374a3db4a19e126a8165f55e974802c392a4c9de9dd4dade49de71342ec2646c720a2b4983a083158e255b9470dfe5e4ed5fc
-
Filesize
60KB
MD5a9d25e65abc4297929e650fa9069f4ae
SHA140189cf9ad2c22994a7bff886abde3ab556bf536
SHA25627e329b03dd4ea56d091fbc068e2d1e3dd9ff93953d3e1f575fcc4c5c1efe3d7
SHA5126daa4b19e44326b44de7c78abe5902537553efb63c7c3bd157d53865911a563ca29cf263698d9de06eff6a28404aea4a67b9dd06c6fa71eacc7a8b768d92f3ae
-
Filesize
69KB
MD5be87490c21762caf6118e8bb5dc35bf4
SHA1b8ab30f5ca6c5781b4ac3d7cffcb81f28e149ce3
SHA256c51d2f8e571a88a751b2d17065463e3208b1e5e06e0a0e91240f0562ce97c996
SHA5122ef01491e7de41e7df25581b4bb10cde23421ab286f9aa98ee3f54ae9f9bed83b5d35190107862762c27545990d93446fc6d5c76b126d3bc51dae3c5851e89d0
-
Filesize
68KB
MD5be3e5792993545aa8b2125c3c2f03fac
SHA1eef5e2392fb2530d32cc82ff0aa8e1bda97aa729
SHA256451f5f13ea2ff6cec0e592413df324c8dd2e59a287ec042959487c6da79e723f
SHA5120c1635b88843a4c1bfd7c5d251cbfe8d9ba3d2e65876e56f723e84f7f35fb329fc8640f69753a0e6c53c13d45ba6c3238a78b888c58634788d17ad42dabba518
-
Filesize
71KB
MD508272789648b2a13ffcd74492d762502
SHA1c0b893df2fdf4c977c0f3acecb0d05d107a6f01a
SHA2564895dd0b72737a0f4a8f4d5440b01dad300b7d82c107688b4ea0d6a6ffe81128
SHA5129329fed6a5e83a2bb6e14e874e03c67b3c53719391510a861457d4b18729f7024bec6fa3195f2a297311a932212a334f4ec24a16406d3bb26d2c82c0211b8905
-
Filesize
73KB
MD5ef305fbfabe04f7e538c0dd85bf15bfa
SHA1718694ad32910ca29f1cd5fb3e7742790e7ea1b2
SHA256ad84029df2d6eec99c3e05fdb3fa7fb8b939778747486d08a42d1daa2405d3f6
SHA51230542936bab754de131e8fbf96a1090ce0131b17fdb0373e2bcbfef35ed5cb2ebd118f0cfe43fdaf777b661f3eca575adc3657940b71d058044297873b2a688d
-
Filesize
80KB
MD5f8fa0445d1fb5fb06a1424a2a39575ad
SHA1ffb00e8a5bf60a2b9df47f33fb086e0a9a4450df
SHA2566ea6a8681cc1a53394c7c0e512b7b22349dd8647c8fdc7df2fed1ede84786d44
SHA512eeeb4b3c610573726822d566733891902bbd875658ede62836c874ea9616fca56637eef75740a457e198eb47a01feadfda761abb391b57977d113bae2ad1d78b
-
Filesize
71KB
MD5afa87199a2c30d2ac097f9959caf13f3
SHA16ff8b16c8587c81d506a28f82d9729c91f1c318e
SHA2560a4cfa1652bfd15d9f413119ce16279f1e185c0f509108702b67abb48b6b0a71
SHA512f4309e49b69b3e0639dd8cdc909efd1b2512698bdee63c2dd30ec898c0188b2114ec3fb7cd4a3cc3e154b478e8c59c7ba5c7b33ecb4a4964b6501f32066f75f8
-
Filesize
68KB
MD54a15fe64ebe6848129a5859d76bc66b6
SHA1e25aba9dae4d7012c9297ed2ba582d4d9740dd6a
SHA2566238cf34dd70b1b458f389d487f1989467b288e922cd66e603d0994b265ebc34
SHA512af4d1982986fc186965568a7566efc7a49f624d7424b41b8b4437689582dd8562e4c538ba827f6be2051d1d94c82fb8382e45454bd89915a7b910c0b93db21b4
-
Filesize
72KB
MD54087d276470859fbdf12440b70a9facd
SHA17105ed1479c78cbaa86283988aa5cd40c16b232a
SHA2565abc56ade3bf092ffd8b96a38671198d100a26d38fc13a0b2070ec5b1f0e5b10
SHA512dbaac231e969bdaec4f18ff59959852b501c6463d8ac8ee0a33416894dde0aec405a24b6676a8d8d28dec1e9b15265adafc546e03af06bf63f1a6124a6ff2914
-
Filesize
71KB
MD5e990faae66a4676cec9f32f02a1aae78
SHA1c6bbf4d890ac70c133990e9e2d1db776e2acad72
SHA25640c9499286ffb61ba4548c4db496d8b7e52e4b039f55042ce76b8505625eaa86
SHA512619b30af940b65b08af8f910d45440534e9d8e38d294b37c77b4080168f3a2dee27a1c34971c6b4f20c8df7898b3f5e6b1d8546ed5952839cbaaef240ef66c37
-
Filesize
77KB
MD556eb87e941a6cef297e77c1732cf1454
SHA1bee19aa1296eedb2e36cbebf7dc27fa655ecc72d
SHA2563ad20300d963d2cd77e5febe04c5de7b1b6ba6f0aae3ef3aafbfb8853c819152
SHA512671598359706cdb34692f9e33d2363a5c5d02839336be8689b641026a10e82f9c42a208fc9fcb3a1ba5ff3ed3e30aa8aa0195adfa1453600cc2d255b953c135e
-
Filesize
72KB
MD5bd30805d99a0b1780fa6bb7b49b9d838
SHA1cb11da189bd8ed3d6604e264bbb2bb86c1c8dedd
SHA256ad27086e9fe1be19420bd7eb7c93d2292779d9a268e88b3c98af572bece88569
SHA512488b7f115e268e08608c5498c0ce5e6aa208f0ef8907707c4a542bcce7fc317173df7f824f2205b6ddda65879ddb41976d551a01d731c3e98c121f86fc4bc656
-
Filesize
73KB
MD5df19886afdc6fdadcea73c077fd4da84
SHA1d6c79ad0cd0cde6ce1fe9d12cf2cdd4789f08209
SHA2564fd44a4ba4214627300027f91b1f9f5e8df1093fa93cdda88a182c534f129f31
SHA512875f688755e93791829ef5581da7e01a15d9b9025f221ff1e6c118e60124cb29e2d40e2fcd9706b6a1607ff0db684f09c2cd6df13eb33ed58456d36f8ae8f3ca
-
Filesize
71KB
MD5b30818a2f45772ae412ca5d16dd5fa8d
SHA1856199da3fb665ce3101189971989d4cf01e1b58
SHA2565a25e22785718967f4985569bf5327bd93bce475722fc0c60a52119307355bb5
SHA5120a91dc9aaa7a451d84771fd10116d0c42b3a6f87365cd4d733f995cb919024b7a6932ecb9b223479cff67aebe5958a4430d4851e09f7d59c0fe601f732534b75
-
Filesize
70KB
MD5310c4a824c85cd5b6098d4bb7de7a2ce
SHA15e7844fcb79488b2b4b85db3060bb7c283848225
SHA2561105f1100f3a3e411c89624480f86c7b338249712f56d7c93c7d8f0b85a00510
SHA512dcd32842fba297ff2ecc1ef8ba0da51d8c34b563a8f3db0ff85165efa2f696661453a6f00d659a3c69b834dff046f1d2cc5d218d308292221e9c767c65377102
-
Filesize
73KB
MD5d9dd857119f9ce89972a7a414aa67732
SHA1dc0dc238beeacf837139d2e3b3346e2559aaaf4a
SHA256955917e10a314f938c124f8d9e7f64e745d2487de84428e47d0abd75534859ad
SHA5129a1a8821fbe0fb5874f94c27719a49a0e7db4e4b5e46ee870b8972243539b4d30a790ecc4b3a513de641805408fa0c070437b8baef022499553521eca616fcb6
-
Filesize
78KB
MD545fe024b3fc5cd808eee844f255cc1cb
SHA160da1e9acb00ad40d814b99690693af04aa73889
SHA2561978b6820c0c9c8219e2425852f8c7d0a6f814d6ad0f47d5b8b397eff0d3b006
SHA512062ad1a7c4f8f0ebbec163811dbc77c8790652a66aae60551470a35387208d4f36317bceba1bc5867855cd0a2b2b834a0b98c5c00e77b128aeb390b3b66e0768
-
Filesize
72KB
MD507b1df3d9a4382c37b836f261213b30e
SHA11354303f4f948811cacb3e74d654440cbd824376
SHA256b376ce4c431c75773063fb556c4ad6f7d9f1bf4bf8f89db2e48279f7650fddd6
SHA5123739c19af9b778ba51bc9651dd76527088baa22c93b714175c523dfcb026f3f704d42eeb0ea3145e502c0cba588ebe76eab0258cae0d9a3e92f4a80cea30926c
-
Filesize
81KB
MD5b4fec62af88260d5e3bc4502f8da9d13
SHA1984930e169cade4666cb04f5a9197e4dbaf88af3
SHA256ddeb74d7ccb0c07481b71bc607d13785716a8d6169b9e88e7c7cb9be2a627364
SHA5129fb1a67d0e75ca8c4aa51fddc308c04bd06f53a90a118751e3bf00c3b661760d95a959ae7e5d8598b2d0084b6e4772ef81fe6c9077243d6fa49f754c9f5aee96
-
Filesize
73KB
MD5108519c0571bd0bce1edd5a136126fe0
SHA1ed4384f22f863e587450043aa3996ce90da1a6bd
SHA25661d2620dc37d742b3e9e696b0f38014961f39d1b739386592297ed118b0ef568
SHA5124b2f153994fd15d8d26c64b646bed9418bc9ca5475da5f8cdd34ab516e1ec9d434a5792faeff51275ea524c1a48bef1abc6c7bbb02f60060fd64a3e944567ced
-
Filesize
77KB
MD51f8ffd60fd4534743607252ee0a1b37d
SHA1896d75239f1d75eb52de79a57d3e2ddea55921fb
SHA256a09050df813f6dd88dd5a343f4fb76fd9d7a0ab6fcf5376301e80532a39ae664
SHA512c91700665e5c9a6755ce1e053643c933b9de4920dcb9e9347431511ac48eb52b342caefa01a1e9d889f74d92a8a9ae919dac205e4397c4f7f959ed71a0266789
-
Filesize
72KB
MD548f60bf32d07aaf3fc642efb2f461d49
SHA18cffb2eac4a002e0a6542a8b71eb03df12a7e5aa
SHA256dba2b39ee1eb5126a88ef82184c056385d6c5f92bdd82884aa60f9dcf116fb1f
SHA5129fd5cd4872af62407921220ecf5b057b70f3fbfcca76c3b663686df67127c828005338c6e6d100dedd961258ab043908aaf93073ecfb96ff8e04532dc5c0d98b
-
Filesize
70KB
MD5d66bad8c33eda6c28312e6e7b4de21dc
SHA1f1bd744b9794bdad16827064d22e3b02c1c10bcf
SHA256834fdf22a986c512ad6b0f006a96ca5d158a1b1d2d7520c17841b76ae2845c4d
SHA512d7ede2d38af6d7d2785976104c8752ce45e7520827cea4646fc9467a0105c827c817b78febde70c9494b80ca5d73e5b0c1324d72fd90ceb1acb0f4c1501deb05
-
Filesize
73KB
MD57ffd91d29ef79e942d2a0f2621761410
SHA12df381ce2454e3d652f31b1320df7fb72a7c20bc
SHA256f8e0cb757442652aec5fd581e2f2f21571f3ef6860e6ddca13208a4935af2e9e
SHA512086747cf103aff7d4e64329f23d48a5266d1d913efad1bc559858ab117f93e5a7cd75ff7375effd000b745598993b6af8cd382015902621e63c74d087b2b3f0f
-
Filesize
79KB
MD53b655f198fb5df1d991171920113b203
SHA13180190efbe0fca95dbff538b15a77c2358f9b18
SHA2569013ee04875582845fa9227242a2097574b83dac9070183f97b75e76d2ce1977
SHA5124823482b029fbda7060552932b8114c245bad0963ae6e6262cd5dbad2c7418c794dcafd92cf993bf0847d750d6c766716c0fb0fb8464d1059875dd684309b15c
-
Filesize
71KB
MD5dc4db055c1faea9ce4896733e635e21d
SHA1220e314bc8b318333cf47ff592fcf82a30881f49
SHA256acfad6a81b736bf82f4c21d6d0d9947825cca9b1aa35cbf076c0fd2d54a19e5f
SHA512082d29894a6ec8678ce76fea7ad272872e5c38ec627b299fd4e06c999011dc944dcdcb17438040466bf5966b62e29d1a348eba65dcf86453274b98c57b5f21a8
-
Filesize
72KB
MD56e92485188d4c6c7f8fed31ddf3af4ca
SHA110fabd75bb910356214726cfae24b364bef63b68
SHA2564d22c73516516cc24472edd44bf188fcbab0ff07ea3517ffba77ea82537a0458
SHA51212023214722d9bd15039ea567ddd8432921a27b13a7263de65106aceb7363b6067f4e284912505195b6fc1651d375339b06f623f57844d8c3c0184ea9408002c
-
Filesize
74KB
MD5ceceb16c4a3d509b4f72d154a064fed5
SHA127f13c5f0bc1afc27f14c67760e7cca450834a62
SHA256e31401ff4201fdaa6c011ea6567fbf5f2330ec15749739e0a1309b0b9728e61d
SHA512ec65ad5bafb0e673cffcf04efa0a451582af6017b469c363872d272eb4deb23bdd45bb95e3759adaa78dbcc77f5bf312a956791d0b6363be2fde315a31714a91
-
Filesize
66KB
MD56a10c2f626e3ad28603ca62b02407ace
SHA121e0f90265843474b21427ed37651c4003b3db11
SHA2566c478d09b8bd7f0358258cc58206ca81557b52bcd6be51c11b201777ad808df2
SHA512ade279455930a969ea9e1be79c10930d45a5b14e5f444cbf06f6d2af80df1acb07c5fc7a16fdaabf6cbeb87f32bdc2f8e210f1cde6f441b8ed1e77dc51f6377c
-
Filesize
69KB
MD59ea38c8478592dd382b913dd707d536d
SHA1e4cb14d4a66f03226f0e9976aa33af3bd9f9abeb
SHA2563812220a1bd8cb95ba55cddf1caf482a2bb30b5f33ab628ed74f515b7bc7640a
SHA5128840ffc4f9000a9764d6bdf2eb17acbd59485408166369b099f9651296361fa078bac674c21e5f46b89bc96e5f9b3bd9ce5e9976421ce4656c138396adc65854
-
Filesize
70KB
MD5082f8eb4a06e860e164f789485106f67
SHA1bb863d58e969cb24299d12902d79a12583690bdf
SHA25610293b74337cd04e3152569b81a829f454937bcd2dcb4f645fd6deb6d23a1de9
SHA51278ad9a92de57042e8d913b617240d330198b45575fe364a9c5ecb6e52124f1155c071f06841dcbcf6054b044a494d2211d0817cac1d8631fd1fe155aa6187c4b
-
Filesize
66KB
MD51deb8c0640f2bce17dc296aa00e08c87
SHA19d18747e1035ef97b14e90570994830374600957
SHA2567d6032571d8476bf38e4083b63da21d1da83c8d8f477e6676617549d17706da4
SHA51201f3620cbee4ffcf8a59e898f4b66e48a8517558f1acfb143e848ebf3ba975e4022998979232574bdf9bfc44f8fa6cbc8cf1e7b02fcb0a3f1475011c865cdea0
-
Filesize
69KB
MD51620a8838ff49cef2c08496574d9aa10
SHA1363e80616459fafc29d1f3df263ecf4d5622bf82
SHA2567a9178eb037a92b23d226ec733b23f1e0207c3a920bf8d61a430d20db4baf091
SHA5121b22433b12fef249034c4456fe46e42a72a064ab31704076b79f6fb9ec6eef50777103029abd049a3d3f19aa46c55ee51d12f1d5496068cd88b7a99d5d5e3766
-
Filesize
69KB
MD573ace083af826538d8d26fb2a7d7402c
SHA1d7c6c99d38215e9b7496d5e40722a050f9582e2e
SHA2564ae7c273819e0d966c39086222d0c0c65144348926ef05f857550782e1f1b087
SHA5126a66220842a215c297005cac9f18c543ecbff29db15d5bf62add089d8db7ef70fa0b0ac68ced1f062ecabcd15861e4057f353c87ff6dd49c825f4bfc36beddc3
-
Filesize
81KB
MD507ca9585dc5ae3c241ed0b8a4b154f42
SHA10f1e79b33eeb66e7f5c04ba78f3b0532be5ddaf3
SHA256299ed3d8b0a821c83ab9f1279a9ca12f81c82bb22db3b777b4c43e53de51ffa6
SHA51249a2f2b5dea93633089d5c001c312899c4c44ca22f4e58e1a065050c94766f0e4ad8f4c6295198d3aaebf2e24ba58ade7a873c17ef7e45a030d3a9f67fa5d693
-
Filesize
84KB
MD547a7aea5ec88a60157afaa3d0d5fd321
SHA1fb024accfb67ce244ae45ec9f75ea1716d18a533
SHA256ad9ed9c10eec6f5e538ef1801f503f671c8d3ce24930402ac503897fb11f2436
SHA51296b75f0de1aeafe889b0b9c791c64f5a3b693aa836644550f82de54eb200cbdf06540b8864bbe149fcd0a7b35bab514c8a7d455ca8c99e055fc38de5757a4028
-
Filesize
74KB
MD5da7e10b33f101fb7d469a5b51608502b
SHA1a0d8add9f143ec65b9ac5e10f8efe385f29c3e33
SHA2565d26b6d1e5cb5191a2272ec511cba1a8e1b3ae06b498ceb043ec7aea6ce9ecd2
SHA512b545a36876c7a241fdad3efbd6786095a980128ff82d0d81fe0d1a0d83fadcec3090d7ea4557c26e67b1f9c8800c2a4bbc1393a6024ba6b8acc923091b309aa7
-
Filesize
69KB
MD57d7a3f1c8a90012e9a368c430827db0f
SHA1c6cfebb8e20a7703fd4cdccf7b74e02bbb73dd2b
SHA2563d2160132a54d5758e9dc29ad90feef908834671ab8d2152247ae4dbc09a81b1
SHA51211fb3f2cd0c0a4799f783adabbebed69bb74c5da9ba037277a812e9110f83b14c7672e87138e5fea6d77f33b470c0d097a592ec9b2a34153f6217c18532a4259
-
Filesize
70KB
MD5d4917167d5fc4eae6eb0f5696f2759e2
SHA16a6eca87fab9c0108acda8bd9e0c5b27e4397c75
SHA256fa8235fad0f596381d760c00f8d676f4698c03ad338d764ad5eb5861c306eb8a
SHA512af78ff7a89b5675fb1d8d5c85107e460446b7cef2753858a3a5045627f715bca7ae8c207540c4d63b7b256e46ac082cfb012c749f3ac9247a1b2510c4e42e76c
-
Filesize
67KB
MD5923b0ae97610e7dee220661f963c10f0
SHA164dc72872b5d2d73fe1e4f77106bb892187d1ce7
SHA25675d6a8687b7c2ea6c15a8ae7c9187d8474a353a6ae6ff0b240d9a9cce4c9e20b
SHA512e40dd340a77e241becee6d81f496fad0ff7e0146fb145030af20c90b7f3509359764a7e1289c6c2b97eed95489e79d51f9ad87e4444d05f8f455c749207fa02a
-
Filesize
70KB
MD5d065db859ec7f054de317ae6f8844b43
SHA1e9ae1bc7839a4acde995a75c3a4f714a2f205789
SHA256cb5d555d2e088b664c295e21d905365ef73a58877b82ac5b66f74d755eda73f0
SHA512d4fe3350bb4ce921f5c7953f28652e599f7f09bb0eb79b14325dce4c861a3aa253599525c5405716081a0049583926d135134c49ada935cb1f58d913b8ff5b43
-
Filesize
69KB
MD5c3bd5cac687ea3d015a15bc64c58e101
SHA13cfd7869e8b61906e894e1b78019683abeafde35
SHA2565db208e16945257fc0d73341bbdb5916cb44f6b664c1df3a28eb2abf43173f71
SHA512227ab28c4526f98a59263883159355887e1385a7122aaf37bba1f5ffd8b0d09e16511ce2036d9232d3ed90cb5ca86c6036517a7c53ba898641511d54f3c86e06
-
Filesize
71KB
MD5b352bc2d00e78b180f85a413ea032453
SHA1feabd2b224e2497b75db1393c189d1f5a48be2ec
SHA256c3f0206dc9bbc83cdd74c71c82a80391bba1f6da2509518f9f455f915a114604
SHA512de8fe0243357cbfe59e7c9d81470fc64174140b9ede6889680dd51953f3f5f4e5dbe817beaad58824650a059fb05149cd207e61271d0add53040882cd0c420c2
-
Filesize
63KB
MD5d8e200525ee15fbb503a400858b09a93
SHA19f0c46fecb23547244838eeb188c1d2769c5340e
SHA25642fcb73ef199c0bf36f291035f57f5484f477ef4c9417352d2832da7677dcb23
SHA512c7246016c67d7421a7619cd8f804ec50f3a09da7cad61149c214e02843b53e14cae582800f96d75f10b6c7ac529ae033ffb171afdf1153f3a2b1b69baecbe2e7
-
Filesize
71KB
MD5c6e40aac1f24278b4ca598540b15777c
SHA1b6a1902fefb1f1a7ec0e3a2738213a2a429d38a2
SHA25632c21ce40708358940c6fe9bc530063176cf986348099d2e15f1a5b2f1a879c0
SHA5125ae3fd977e83c79ec8b58074f9f8148a76544b92eb2f91c9ac2475fc86f94cd40f396741a663a39f494601d1f44d2c18774b8e6e5570f8f530336d8e456caa21
-
Filesize
78KB
MD55fbbe7b5b4521e731c490f252f4dd823
SHA1e7246d0a82cad9acd589e47359de727acd70e579
SHA2561662c036936129647dd62cff968de659f3ae071f246fbb9928633498b4e6ceae
SHA512d5bca7ff375f90ec4fb77954a0aec09772914a1a97745e0f01e6d40dbb130bc44f0f0e9c51035dc9631ab11b1be354202bccfef071ee0614b04435e59dc9dcda
-
Filesize
82KB
MD5f40c4e2bf41a789f93497ff59335929d
SHA1586db8a3a3fd28cb0bd6d1da695256e818b9d0a3
SHA25610ae04c72e1142245f16556d7d7015274bd1f0dc6b0784f6ed4bdc7c201e36e0
SHA512f1e5b426099b64cceff770cae00a52f5db8233e5f8bc8d1b9da49d60ea7989f778ac7344969cc8633995a93c7beaa9b5e51ef01948560f2c87fc9a3653a5261c
-
Filesize
72KB
MD5acd0f099f5eb16d75b57a8a8735239b0
SHA18ba367e73d7bc7d78e8eb4b5141e8678f01b67f2
SHA256b960ae8b13d6abfe70f6936f843999141a9101684e2f1615a1a34d1e27abf0e7
SHA5122c281eb0114c206fa2b2d7c635d99a48364b27db168d36ab081e9797b175f28b518cf9ae78ab8af4c001ced2f268336a5d0040ce674a2516f4c55773141e5372
-
Filesize
67KB
MD5fb8e344ea3f8e63464d64404060d82e7
SHA1f3cff181a63419c0c8063df2bfd304bd36b8713b
SHA2567154c0b65606fee85f040a71f05e852867aa25b612efdb1467cf8ec6cf7c2aab
SHA51241b553a6e250135509a199f116883b78a02de7e89e1d2b28f17fc57fd199789ff06dcf92b89d5aa26cdb231830c617ce504ba0b9c2192f4a8aacac14ac029bfc
-
Filesize
469KB
MD569a5c577820228a6db1da0dd7bdfe21a
SHA10b8404371d89a5e1cdc2c86096e8992bad83764b
SHA256cd09ce9ce20efb558e466345e888cd9deed5cd53701de5c4bd94c957379141e1
SHA512c7703aa1e6ecb5cb9842a4159ba72108bbd2be2a7f60beb648a3ce1e2f496228cf85b35171081c5388737c7e0cb9fcd3ddd35960f4a3988feb0786047d96bd6e
-
Filesize
63KB
MD53392e269dab45da5ef62e9bebb8a7ad1
SHA1c9c381d4094d785e78ca3de7c86187105b6168cd
SHA256f3820682569963f1714c1a6613204a40532faabdf28b3e7822d6c3195c6da66a
SHA51276d0fea95de5e10d1d72e875414566353301deac20bd9986c4c9704c3208b662186a4a987df10917d1a20c792a43e81349e79e184616ef605720b67a9450e891
-
Filesize
61KB
MD585c4f105280ff72d7219d8a3e715c10e
SHA1a78f6aaab31b575cd5e0803a451259207c1a771c
SHA256dd4d8d79cba4c31a8e22d688a8e816b55d306037abbc6d4009e2ca47d142b162
SHA5122a8eda27cc3f934ea1e328b78491a047dc576763d8544e996f43eac52023fee21a258a937af1b5c55a737297ce19c26b49eef8334f957655a841ff0eded45727