From 868624fb56eaf26fa49522b80ea06991c1b6f147 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 21 Dec 2023 20:07:15 +0000 Subject: [PATCH] Sigma Rule Update (2023-12-21 20:07:08) (#558) Co-authored-by: hach1yon --- .../Other/win_av_relevant_match.yml | 15 +- .../win_codeintegrity_attempted_dll_load.yml | 4 +- .../posh_ps_file_and_directory_discovery.yml | 4 +- .../posh_ps_susp_gwmi.yml | 4 +- .../win_defender_disabled.yml | 4 +- .../win_security_event_log_cleared.yml | 4 +- ..._service_install_susp_double_ampersand.yml | 3 +- .../win_lsa_server_normal_user_admin.yml | 8 +- .../posh_ps_malicious_commandlets.yml | 26 +- ...osh_ps_powerview_malicious_commandlets.yml | 69 +- ...posh_ps_set_policies_to_unsecure_level.yml | 15 +- ...ion_win_cloudflared_portable_execution.yml | 36 + ..._win_cloudflared_quicktunnel_execution.yml | 94 + ...reation_win_cloudflared_tunnel_cleanup.yml | 5 +- ...oc_creation_win_cloudflared_tunnel_run.yml | 11 +- ...reation_win_conhost_susp_child_process.yml | 38 +- .../proc_creation_win_hh_chm_execution.yml | 6 +- .../proc_creation_win_netsh_fw_add_rule.yml | 17 +- ...etsh_fw_allow_program_in_susp_location.yml | 11 +- .../proc_creation_win_netsh_fw_allow_rdp.yml | 13 +- ...proc_creation_win_netsh_fw_delete_rule.yml | 4 +- ..._creation_win_netsh_fw_rules_discovery.yml | 4 +- ...ershell_set_policies_to_unsecure_level.yml | 26 +- .../proc_creation_win_pua_nmap_zenmap.yml | 6 +- .../proc_creation_win_pua_nsudo.yml | 5 +- .../proc_creation_win_pua_process_hacker.yml | 17 +- ...eation_win_rar_susp_greedy_compression.yml | 16 +- ...tion_win_reg_desktop_background_change.yml | 63 + ...eation_win_reg_dumping_sensitive_hives.yml | 14 +- ...m_regsvcs_uncommon_extension_execution.yml | 44 + ...m_regsvcs_uncommon_location_execution.yml} | 27 +- .../proc_creation_win_renamed_cloudflared.yml | 92 + ..._rundll32_executable_invalid_extension.yml | 66 - ...on_win_rundll32_uncommon_dll_extension.yml | 44 + .../proc_creation_win_schtasks_env_folder.yml | 18 +- ...roc_creation_win_schtasks_susp_pattern.yml | 9 +- ..._creation_win_sdbinst_shim_persistence.yml | 6 +- ...oc_creation_win_sdbinst_susp_extension.yml | 17 +- ...n_susp_bad_opsec_sacrificial_processes.yml | 4 +- ...reation_win_susp_copy_lateral_movement.yml | 18 +- ...reation_win_susp_elevated_system_shell.yml | 110 - ..._elevated_system_shell_uncommon_parent.yml | 67 + ...oc_creation_win_susp_network_sniffing.yml} | 0 .../proc_creation_win_susp_non_exe_image.yml | 91 +- ...on_win_susp_recycle_bin_fake_execution.yml | 3 +- .../proc_creation_win_susp_sysnative.yml | 9 +- ...n_win_svchost_uncommon_parent_process.yml} | 31 +- ...proc_creation_win_tapinstall_execution.yml | 20 +- ...ms_suspicious_command_line_cred_access.yml | 19 +- ...proc_creation_win_whoami_all_execution.yml | 33 + .../proc_creation_win_whoami_execution.yml | 4 +- ...hoami_execution_from_high_priv_process.yml | 4 +- ...ml => proc_creation_win_whoami_output.yml} | 13 +- ...roc_creation_win_whoami_parent_anomaly.yml | 19 +- ...tion_win_winget_add_susp_custom_source.yml | 3 +- ...oc_creation_win_wmic_recon_system_info.yml | 70 + ...n_win_wmic_recon_system_info_uncommon.yml} | 19 +- ...registry_set_desktop_background_change.yml | 56 + ...istence_shim_database_susp_application.yml | 5 +- ...gistry_set_powershell_execution_policy.yml | 3 +- ...stry_set_susp_reg_persist_explorer_run.yml | 24 +- .../registry_set_susp_run_key_img_folder.yml | 14 +- .../security/win_security_admin_logon.yml | 36 - ...yml => win_security_audit_log_cleared.yml} | 3 + ..._security_codeintegrity_check_failure.yml} | 8 +- .../win_security_disable_event_auditing.yml | 14 +- ...curity_disable_event_auditing_critical.yml | 7 +- ...curity_lsass_access_non_system_account.yml | 41 +- ...cobaltstrike_getsystem_service_install.yml | 52 +- ...service_install_remote_access_software.yml | 4 +- ..._service_installation_by_unusal_client.yml | 11 +- .../win_security_susp_lsass_dump_generic.yml | 10 +- .../win_security_workstation_was_locked.yml | 13 +- .../win_system_eventlog_cleared.yml | 7 +- .../win_system_susp_eventlog_cleared.yml | 3 +- ...tstrike_getsystem_service_installation.yml | 51 +- ...stem_service_install_pua_proceshacker.yml} | 0 ...em_service_install_sups_unusal_client.yml} | 2 +- .../win_system_service_install_susp.yml | 41 + ...win_system_service_install_tap_driver.yml} | 0 .../win_system_service_install_uncommon.yml | 52 + .../win_system_susp_service_installation.yml | 56 - .../posh_pc_alternate_powershell_hosts.yml | 13 +- .../posh_ps_remove_item_path.yml | 20 +- ...roc_creation_win_office_svchost_parent.yml | 11 +- ...reation_win_susp_elevated_system_shell.yml | 47 + ..._defender_antimalware_platform_expired.yml | 34 + ....yml => win_defender_asr_lsass_access.yml} | 0 ...sr.yml => win_defender_asr_psexec_wmi.yml} | 0 ...efender_config_change_exclusion_added.yml} | 0 ...er_config_change_exploit_guard_tamper.yml} | 6 +- ...onfig_change_sample_submission_consent.yml | 34 + .../windefend/win_defender_history_delete.yml | 11 +- ...defender_malware_and_pua_scan_disabled.yml | 31 + ...defender_malware_detected_amsi_source.yml} | 0 ...defender_real_time_protection_disabled.yml | 35 + ...defender_suspicious_features_tampering.yml | 6 +- .../builtin/windefend/win_defender_threat.yml | 4 +- .../win_defender_virus_scan_disabled.yml | 30 + .../driver_load_win_mal_creddumper.yml | 4 +- ...powershell_script_installed_as_service.yml | 4 +- ...ns_query_win_cloudflared_communication.yml | 31 + .../driver_load_win_mal_drivers.yml | 1363 ++-- .../driver_load_win_mal_drivers_names.yml | 116 +- .../driver_load_win_pua_process_hacker.yml | 4 +- .../driver_load_win_susp_temp_use.yml | 2 +- .../driver_load_win_vuln_drivers.yml | 7245 ++++++++++------- .../driver_load_win_vuln_drivers_names.yml | 461 +- ...e_event_win_creation_new_shim_database.yml | 4 +- ...event_win_office_uncommon_file_startup.yml | 16 +- ...licy_test_creation_by_uncommon_process.yml | 4 +- ...ile_event_win_susp_executable_creation.yml | 13 +- ...e_event_win_susp_recycle_bin_fake_exec.yml | 4 +- ...ection_win_susp_malware_callback_port.yml} | 22 +- ...n_susp_malware_callback_ports_uncommon.yml | 60 + ..._susp_prog_location_network_connection.yml | 29 +- ...fs_namedpipe_connection_uncommon_tool.yml} | 25 +- .../pipe_created_hktl_efspotato.yml | 6 +- ...created_powershell_alternate_host_pipe.yml | 12 +- ...pipe_created_powershell_execution_pipe.yml | 13 +- ... pipe_created_pua_csexec_default_pipe.yml} | 3 +- ... pipe_created_pua_paexec_default_pipe.yml} | 3 +- ... pipe_created_pua_remcom_default_pipe.yml} | 3 +- ...created_scrcons_wmi_consumer_namedpipe.yml | 4 +- ...ipe_created_susp_malicious_namedpipes.yml} | 0 .../proc_access_win_lsass_memdump.yml | 15 +- ...ss_win_susp_direct_ntopenprocess_call.yml} | 14 +- ...ion_win_cloudflared_portable_execution.yml | 37 + ..._win_cloudflared_quicktunnel_execution.yml | 95 + ...reation_win_cloudflared_tunnel_cleanup.yml | 5 +- ...oc_creation_win_cloudflared_tunnel_run.yml | 11 +- ...reation_win_conhost_susp_child_process.yml | 38 +- .../proc_creation_win_hh_chm_execution.yml | 6 +- .../proc_creation_win_netsh_fw_add_rule.yml | 17 +- ...etsh_fw_allow_program_in_susp_location.yml | 11 +- .../proc_creation_win_netsh_fw_allow_rdp.yml | 13 +- ...proc_creation_win_netsh_fw_delete_rule.yml | 4 +- ..._creation_win_netsh_fw_rules_discovery.yml | 4 +- ...ershell_set_policies_to_unsecure_level.yml | 26 +- .../proc_creation_win_pua_nmap_zenmap.yml | 6 +- .../proc_creation_win_pua_nsudo.yml | 5 +- .../proc_creation_win_pua_process_hacker.yml | 17 +- .../proc_creation_win_pua_radmin.yml | 4 +- ...eation_win_rar_susp_greedy_compression.yml | 16 +- ...tion_win_reg_desktop_background_change.yml | 64 + ...eation_win_reg_dumping_sensitive_hives.yml | 14 +- ...m_regsvcs_uncommon_extension_execution.yml | 45 + ...m_regsvcs_uncommon_location_execution.yml} | 27 +- .../proc_creation_win_renamed_cloudflared.yml | 93 + ..._rundll32_executable_invalid_extension.yml | 67 - ...on_win_rundll32_uncommon_dll_extension.yml | 45 + .../proc_creation_win_schtasks_env_folder.yml | 18 +- ...roc_creation_win_schtasks_susp_pattern.yml | 9 +- ..._creation_win_sdbinst_shim_persistence.yml | 6 +- ...oc_creation_win_sdbinst_susp_extension.yml | 17 +- ...n_susp_bad_opsec_sacrificial_processes.yml | 4 +- ...reation_win_susp_copy_lateral_movement.yml | 18 +- ...reation_win_susp_elevated_system_shell.yml | 111 - ..._elevated_system_shell_uncommon_parent.yml | 68 + ...oc_creation_win_susp_network_sniffing.yml} | 0 .../proc_creation_win_susp_non_exe_image.yml | 91 +- ...on_win_susp_recycle_bin_fake_execution.yml | 3 +- .../proc_creation_win_susp_sysnative.yml | 9 +- ...n_win_svchost_uncommon_parent_process.yml} | 31 +- ...proc_creation_win_tapinstall_execution.yml | 20 +- ...ms_suspicious_command_line_cred_access.yml | 19 +- ...proc_creation_win_whoami_all_execution.yml | 34 + .../proc_creation_win_whoami_execution.yml | 4 +- ...hoami_execution_from_high_priv_process.yml | 4 +- ...ml => proc_creation_win_whoami_output.yml} | 13 +- ...roc_creation_win_whoami_parent_anomaly.yml | 19 +- ...tion_win_winget_add_susp_custom_source.yml | 3 +- ...oc_creation_win_wmic_recon_system_info.yml | 71 + ...n_win_wmic_recon_system_info_uncommon.yml} | 19 +- ...registry_set_desktop_background_change.yml | 57 + ...istence_shim_database_susp_application.yml | 5 +- ...gistry_set_powershell_execution_policy.yml | 3 +- ...stry_set_susp_reg_persist_explorer_run.yml | 24 +- .../registry_set_susp_run_key_img_folder.yml | 14 +- .../file_event_win_dump_file_creation.yml | 1 + .../image_load_dll_amsi_uncommon_process.yml | 31 +- ...ad_wmi_module_load_by_uncommon_process.yml | 30 +- ..._access_win_lsass_uncommon_access_flag.yml | 1 + ...roc_creation_win_office_svchost_parent.yml | 11 +- ...reation_win_susp_elevated_system_shell.yml | 48 + 185 files changed, 7804 insertions(+), 5359 deletions(-) rename sigma/builtin/{powershell/powershell_script => deprecated}/posh_ps_file_and_directory_discovery.yml (97%) rename sigma/builtin/{powershell/powershell_script => deprecated}/posh_ps_susp_gwmi.yml (96%) rename sigma/builtin/{windefend => deprecated}/win_defender_disabled.yml (96%) rename sigma/builtin/{security => deprecated}/win_security_event_log_cleared.yml (95%) rename sigma/builtin/{system/service_control_manager => deprecated}/win_system_service_install_susp_double_ampersand.yml (94%) create mode 100644 sigma/builtin/process_creation/proc_creation_win_cloudflared_portable_execution.yml create mode 100644 sigma/builtin/process_creation/proc_creation_win_cloudflared_quicktunnel_execution.yml create mode 100644 sigma/builtin/process_creation/proc_creation_win_reg_desktop_background_change.yml create mode 100644 sigma/builtin/process_creation/proc_creation_win_regasm_regsvcs_uncommon_extension_execution.yml rename sigma/builtin/process_creation/{proc_creation_win_regasm_suspicious_execution.yml => proc_creation_win_regasm_regsvcs_uncommon_location_execution.yml} (67%) create mode 100644 sigma/builtin/process_creation/proc_creation_win_renamed_cloudflared.yml delete mode 100644 sigma/builtin/process_creation/proc_creation_win_rundll32_executable_invalid_extension.yml create mode 100644 sigma/builtin/process_creation/proc_creation_win_rundll32_uncommon_dll_extension.yml delete mode 100644 sigma/builtin/process_creation/proc_creation_win_susp_elevated_system_shell.yml create mode 100644 sigma/builtin/process_creation/proc_creation_win_susp_elevated_system_shell_uncommon_parent.yml rename sigma/builtin/process_creation/{proc_creation_win_network_sniffing.yml => proc_creation_win_susp_network_sniffing.yml} (100%) rename sigma/builtin/process_creation/{proc_creation_win_svchost_susp_parent_process.yml => proc_creation_win_svchost_uncommon_parent_process.yml} (70%) create mode 100644 sigma/builtin/process_creation/proc_creation_win_whoami_all_execution.yml rename sigma/builtin/process_creation/{proc_creation_win_whoami_susp_flags.yml => proc_creation_win_whoami_output.yml} (79%) create mode 100644 sigma/builtin/process_creation/proc_creation_win_wmic_recon_system_info.yml rename sigma/builtin/process_creation/{proc_creation_win_wmic_recon_system_info_discovery.yml => proc_creation_win_wmic_recon_system_info_uncommon.yml} (74%) create mode 100644 sigma/builtin/registry/registry_set/registry_set_desktop_background_change.yml delete mode 100644 sigma/builtin/security/win_security_admin_logon.yml rename sigma/builtin/security/{win_security_susp_eventlog_cleared.yml => win_security_audit_log_cleared.yml} (84%) rename sigma/builtin/security/{win_security_susp_codeintegrity_check_failure.yml => win_security_codeintegrity_check_failure.yml} (80%) rename sigma/builtin/system/service_control_manager/{win_system_susp_proceshacker.yml => win_system_service_install_pua_proceshacker.yml} (100%) rename sigma/builtin/system/service_control_manager/{win_system_system_service_installation_by_unusal_client.yml => win_system_service_install_sups_unusal_client.yml} (94%) create mode 100644 sigma/builtin/system/service_control_manager/win_system_service_install_susp.yml rename sigma/builtin/system/service_control_manager/{win_system_tap_driver_installation.yml => win_system_service_install_tap_driver.yml} (100%) create mode 100644 sigma/builtin/system/service_control_manager/win_system_service_install_uncommon.yml delete mode 100644 sigma/builtin/system/service_control_manager/win_system_susp_service_installation.yml rename sigma/builtin/{ => threat-hunting}/powershell/powershell_classic/posh_pc_alternate_powershell_hosts.yml (74%) rename sigma/builtin/{ => threat-hunting}/powershell/powershell_script/posh_ps_remove_item_path.yml (70%) rename sigma/builtin/{ => threat-hunting}/process_creation/proc_creation_win_office_svchost_parent.yml (93%) create mode 100644 sigma/builtin/threat-hunting/process_creation/proc_creation_win_susp_elevated_system_shell.yml create mode 100644 sigma/builtin/windefend/win_defender_antimalware_platform_expired.yml rename sigma/builtin/windefend/{win_defender_alert_lsass_access.yml => win_defender_asr_lsass_access.yml} (100%) rename sigma/builtin/windefend/{win_defender_psexec_wmi_asr.yml => win_defender_asr_psexec_wmi.yml} (100%) rename sigma/builtin/windefend/{win_defender_exclusions.yml => win_defender_config_change_exclusion_added.yml} (100%) rename sigma/builtin/windefend/{win_defender_exploit_guard_tamper.yml => win_defender_config_change_exploit_guard_tamper.yml} (88%) create mode 100644 sigma/builtin/windefend/win_defender_config_change_sample_submission_consent.yml create mode 100644 sigma/builtin/windefend/win_defender_malware_and_pua_scan_disabled.yml rename sigma/builtin/windefend/{win_defender_amsi_trigger.yml => win_defender_malware_detected_amsi_source.yml} (100%) create mode 100644 sigma/builtin/windefend/win_defender_real_time_protection_disabled.yml create mode 100644 sigma/builtin/windefend/win_defender_virus_scan_disabled.yml rename sigma/sysmon/{driver_load => deprecated}/driver_load_win_mal_creddumper.yml (96%) rename sigma/sysmon/{driver_load => deprecated}/driver_load_win_powershell_script_installed_as_service.yml (95%) create mode 100644 sigma/sysmon/dns_query/dns_query_win_cloudflared_communication.yml rename sigma/sysmon/network_connection/{net_connection_win_malware_backconnect_ports.yml => net_connection_win_susp_malware_callback_port.yml} (85%) create mode 100644 sigma/sysmon/network_connection/net_connection_win_susp_malware_callback_ports_uncommon.yml rename sigma/sysmon/pipe_created/{pipe_created_susp_adfs_namedpipe_connection.yml => pipe_created_adfs_namedpipe_connection_uncommon_tool.yml} (79%) rename sigma/sysmon/pipe_created/{pipe_created_csexec_default_pipe.yml => pipe_created_pua_csexec_default_pipe.yml} (96%) rename sigma/sysmon/pipe_created/{pipe_created_paexec_default_pipe.yml => pipe_created_pua_paexec_default_pipe.yml} (94%) rename sigma/sysmon/pipe_created/{pipe_created_remcom_default_pipe.yml => pipe_created_pua_remcom_default_pipe.yml} (96%) rename sigma/sysmon/pipe_created/{pipe_created_mal_namedpipes.yml => pipe_created_susp_malicious_namedpipes.yml} (100%) rename sigma/sysmon/process_access/{proc_access_win_susp_direct_syscall_ntopenprocess.yml => proc_access_win_susp_direct_ntopenprocess_call.yml} (86%) create mode 100644 sigma/sysmon/process_creation/proc_creation_win_cloudflared_portable_execution.yml create mode 100644 sigma/sysmon/process_creation/proc_creation_win_cloudflared_quicktunnel_execution.yml create mode 100644 sigma/sysmon/process_creation/proc_creation_win_reg_desktop_background_change.yml create mode 100644 sigma/sysmon/process_creation/proc_creation_win_regasm_regsvcs_uncommon_extension_execution.yml rename sigma/sysmon/process_creation/{proc_creation_win_regasm_suspicious_execution.yml => proc_creation_win_regasm_regsvcs_uncommon_location_execution.yml} (67%) create mode 100644 sigma/sysmon/process_creation/proc_creation_win_renamed_cloudflared.yml delete mode 100644 sigma/sysmon/process_creation/proc_creation_win_rundll32_executable_invalid_extension.yml create mode 100644 sigma/sysmon/process_creation/proc_creation_win_rundll32_uncommon_dll_extension.yml delete mode 100644 sigma/sysmon/process_creation/proc_creation_win_susp_elevated_system_shell.yml create mode 100644 sigma/sysmon/process_creation/proc_creation_win_susp_elevated_system_shell_uncommon_parent.yml rename sigma/sysmon/process_creation/{proc_creation_win_network_sniffing.yml => proc_creation_win_susp_network_sniffing.yml} (100%) rename sigma/sysmon/process_creation/{proc_creation_win_svchost_susp_parent_process.yml => proc_creation_win_svchost_uncommon_parent_process.yml} (71%) create mode 100644 sigma/sysmon/process_creation/proc_creation_win_whoami_all_execution.yml rename sigma/sysmon/process_creation/{proc_creation_win_whoami_susp_flags.yml => proc_creation_win_whoami_output.yml} (79%) create mode 100644 sigma/sysmon/process_creation/proc_creation_win_wmic_recon_system_info.yml rename sigma/sysmon/process_creation/{proc_creation_win_wmic_recon_system_info_discovery.yml => proc_creation_win_wmic_recon_system_info_uncommon.yml} (74%) create mode 100644 sigma/sysmon/registry/registry_set/registry_set_desktop_background_change.yml rename sigma/sysmon/{ => threat-hunting}/file/file_event/file_event_win_dump_file_creation.yml (96%) rename sigma/sysmon/{ => threat-hunting}/image_load/image_load_dll_amsi_uncommon_process.yml (64%) rename sigma/sysmon/{ => threat-hunting}/image_load/image_load_wmi_module_load_by_uncommon_process.yml (86%) rename sigma/sysmon/{ => threat-hunting}/process_access/proc_access_win_lsass_uncommon_access_flag.yml (99%) rename sigma/sysmon/{ => threat-hunting}/process_creation/proc_creation_win_office_svchost_parent.yml (93%) create mode 100644 sigma/sysmon/threat-hunting/process_creation/proc_creation_win_susp_elevated_system_shell.yml diff --git a/sigma/builtin/application/Other/win_av_relevant_match.yml b/sigma/builtin/application/Other/win_av_relevant_match.yml index 9d9a86499..d86194883 100644 --- a/sigma/builtin/application/Other/win_av_relevant_match.yml +++ b/sigma/builtin/application/Other/win_av_relevant_match.yml @@ -1,14 +1,15 @@ -title: Relevant Anti-Virus Event +title: Relevant Anti-Virus Signature Keywords In Application Log id: 78bc5783-81d9-4d73-ac97-59f6db4f72a8 status: test -description: This detection method points out highly relevant Antivirus events +description: Detects potentially highly relevant antivirus events in the application + log based on known virus signature names and malware keywords. references: - https://www.virustotal.com/gui/file/13828b390d5f58b002e808c2c4f02fdd920e236cc8015480fa33b6c1a9300e31 - https://www.virustotal.com/gui/file/15b57c1b68cd6ce3c161042e0f3be9f32d78151fe95461eedc59a79fc222c7ed - https://www.virustotal.com/gui/file/5092b2672b4cb87a8dd1c2e6047b487b95995ad8ed5e9fc217f46b8bfb1b8c01 author: Florian Roth (Nextron Systems), Arnim Rupp date: 2017/02/19 -modified: 2023/07/04 +modified: 2023/11/22 tags: - attack.resource_development - attack.t1588 @@ -38,22 +39,21 @@ detection: - Destructor - DumpCreds - Exploit.Script.CVE - - Filecoder - FastReverseProxy + - Filecoder - GrandCrab - HackTool + - 'HKTL:' - HKTL. - HKTL/ - - 'HKTL:' - HTool - - Impacket - IISExchgSpawnCMD + - Impacket - JSP/BackDoor - Keylogger - Koadic - Krypt - Lazagne - - Locker - Metasploit - Meterpreter - MeteTool @@ -64,7 +64,6 @@ detection: - PentestPowerShell - Phobos - PHP/BackDoor - - Potato - PowerSploit - PowerSSH - PshlSpy diff --git a/sigma/builtin/code_integrity/win_codeintegrity_attempted_dll_load.yml b/sigma/builtin/code_integrity/win_codeintegrity_attempted_dll_load.yml index 3987cdc85..ed13822b9 100644 --- a/sigma/builtin/code_integrity/win_codeintegrity_attempted_dll_load.yml +++ b/sigma/builtin/code_integrity/win_codeintegrity_attempted_dll_load.yml @@ -15,7 +15,7 @@ references: - https://learn.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/event-id-explanations author: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) date: 2022/01/20 -modified: 2023/07/25 +modified: 2023/11/15 tags: - attack.execution logsource: @@ -100,5 +100,5 @@ detection: falsepositives: - Antivirus and other third party products are known to trigger this rule quite a lot. Initial filters and tuning is required before using this rule. -level: medium +level: low ruletype: Sigma diff --git a/sigma/builtin/powershell/powershell_script/posh_ps_file_and_directory_discovery.yml b/sigma/builtin/deprecated/posh_ps_file_and_directory_discovery.yml similarity index 97% rename from sigma/builtin/powershell/powershell_script/posh_ps_file_and_directory_discovery.yml rename to sigma/builtin/deprecated/posh_ps_file_and_directory_discovery.yml index e31887f5c..18dd917ce 100644 --- a/sigma/builtin/powershell/powershell_script/posh_ps_file_and_directory_discovery.yml +++ b/sigma/builtin/deprecated/posh_ps_file_and_directory_discovery.yml @@ -1,6 +1,6 @@ title: Powershell File and Directory Discovery id: d23f2ba5-9da0-4463-8908-8ee47f614bb9 -status: test +status: deprecated description: 'Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. @@ -15,7 +15,7 @@ references: - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1083/T1083.md author: frack113 date: 2021/12/15 -modified: 2022/12/25 +modified: 2023/12/11 tags: - attack.discovery - attack.t1083 diff --git a/sigma/builtin/powershell/powershell_script/posh_ps_susp_gwmi.yml b/sigma/builtin/deprecated/posh_ps_susp_gwmi.yml similarity index 96% rename from sigma/builtin/powershell/powershell_script/posh_ps_susp_gwmi.yml rename to sigma/builtin/deprecated/posh_ps_susp_gwmi.yml index eedc439df..ce492e176 100644 --- a/sigma/builtin/powershell/powershell_script/posh_ps_susp_gwmi.yml +++ b/sigma/builtin/deprecated/posh_ps_susp_gwmi.yml @@ -1,6 +1,6 @@ title: Suspicious Get-WmiObject id: 0332a266-b584-47b4-933d-a00b103e1b37 -status: test +status: deprecated description: The infrastructure for management data and operations that enables local and remote management of Windows personal computers and servers references: @@ -8,7 +8,7 @@ references: - https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.management/get-wmiobject?view=powershell-5.1&viewFallbackFrom=powershell-7 author: frack113 date: 2022/01/12 -modified: 2022/11/02 +modified: 2023/12/11 tags: - attack.persistence - attack.t1546 diff --git a/sigma/builtin/windefend/win_defender_disabled.yml b/sigma/builtin/deprecated/win_defender_disabled.yml similarity index 96% rename from sigma/builtin/windefend/win_defender_disabled.yml rename to sigma/builtin/deprecated/win_defender_disabled.yml index 175cb2fc4..2c2faf229 100644 --- a/sigma/builtin/windefend/win_defender_disabled.yml +++ b/sigma/builtin/deprecated/win_defender_disabled.yml @@ -1,13 +1,13 @@ title: Windows Defender Threat Detection Disabled id: fe34868f-6e0e-4882-81f6-c43aa8f15b62 -status: stable +status: deprecated description: Detects disabling Windows Defender threat protection references: - https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1562.001/T1562.001.md author: "J\xE1n Tren\u010Dansk\xFD, frack113" date: 2020/07/28 -modified: 2022/12/06 +modified: 2023/11/22 tags: - attack.defense_evasion - attack.t1562.001 diff --git a/sigma/builtin/security/win_security_event_log_cleared.yml b/sigma/builtin/deprecated/win_security_event_log_cleared.yml similarity index 95% rename from sigma/builtin/security/win_security_event_log_cleared.yml rename to sigma/builtin/deprecated/win_security_event_log_cleared.yml index 0c4f82c34..dbe8628c2 100644 --- a/sigma/builtin/security/win_security_event_log_cleared.yml +++ b/sigma/builtin/deprecated/win_security_event_log_cleared.yml @@ -1,12 +1,12 @@ title: Security Event Log Cleared id: a122ac13-daf8-4175-83a2-72c387be339d -status: test +status: deprecated description: Checks for event id 1102 which indicates the security event log was cleared. references: - https://github.com/Azure/Azure-Sentinel/blob/f99542b94afe0ad2f19a82cc08262e7ac8e1428e/Detections/SecurityEvent/SecurityEventLogCleared.yaml author: Saw Winn Naung date: 2021/08/15 -modified: 2022/12/25 +modified: 2023/12/06 tags: - attack.t1070.001 logsource: diff --git a/sigma/builtin/system/service_control_manager/win_system_service_install_susp_double_ampersand.yml b/sigma/builtin/deprecated/win_system_service_install_susp_double_ampersand.yml similarity index 94% rename from sigma/builtin/system/service_control_manager/win_system_service_install_susp_double_ampersand.yml rename to sigma/builtin/deprecated/win_system_service_install_susp_double_ampersand.yml index 7ca78e5e8..bed445ded 100644 --- a/sigma/builtin/system/service_control_manager/win_system_service_install_susp_double_ampersand.yml +++ b/sigma/builtin/deprecated/win_system_service_install_susp_double_ampersand.yml @@ -1,12 +1,13 @@ title: New Service Uses Double Ampersand in Path id: ca83e9f3-657a-45d0-88d6-c1ac280caf53 -status: test +status: deprecated description: Detects a service installation that uses a suspicious double ampersand used in the image path value references: - Internal Research author: Florian Roth (Nextron Systems) date: 2022/07/05 +modified: 2023/11/15 tags: - attack.defense_evasion - attack.t1027 diff --git a/sigma/builtin/lsa_server/win_lsa_server_normal_user_admin.yml b/sigma/builtin/lsa_server/win_lsa_server_normal_user_admin.yml index 839f65bbe..a0d97ff18 100644 --- a/sigma/builtin/lsa_server/win_lsa_server_normal_user_admin.yml +++ b/sigma/builtin/lsa_server/win_lsa_server_normal_user_admin.yml @@ -16,8 +16,8 @@ tags: logsource: product: windows service: lsa-server - definition: 'Requirements: Microsoft-Windows-LSA/Operational ({199FE037-2B82-40A9-82AC-E1D46C792B99}) - Event Log must be collected in order to receive the events.' + definition: 'Requirements: Microsoft-Windows-LSA/Operational (199FE037-2B82-40A9-82AC-E1D46C792B99) + Event Log must be enabled and collected in order to use this rule.' detection: lsa_server: Channel: Microsoft-Windows-LSA/Operational @@ -29,12 +29,12 @@ detection: - -500} - -518} - -519} - filter_admin: + filter_main_admin: TargetUserSid|endswith: - '-500' - '-518' - '-519' - condition: lsa_server and (selection and not filter_admin) + condition: lsa_server and (selection and not 1 of filter_main_*) falsepositives: - Standard domain users who are part of the administrator group. These users shouldn't have these right. But in the case where it's necessary. They should be filtered diff --git a/sigma/builtin/powershell/powershell_script/posh_ps_malicious_commandlets.yml b/sigma/builtin/powershell/powershell_script/posh_ps_malicious_commandlets.yml index b4bbac475..639e92639 100644 --- a/sigma/builtin/powershell/powershell_script/posh_ps_malicious_commandlets.yml +++ b/sigma/builtin/powershell/powershell_script/posh_ps_malicious_commandlets.yml @@ -34,7 +34,7 @@ author: Sean Metcalf, Florian Roth, Bartlomiej Czyz @bczyz1, oscd.community, Nas Bencherchali, Tim Shelton, Mustafa Kaan Demir, Georg Lauenstein, Max Altgelt, Tobias Michalski, Austin Songer date: 2017/03/05 -modified: 2023/04/17 +modified: 2023/11/22 tags: - attack.execution - attack.discovery @@ -63,17 +63,13 @@ detection: - Add-RegBackdoor - Add-RemoteRegBackdoor - Add-ScrnSaveBackdoor - - Check-VM - ConvertTo-Rc4ByteStream - Decrypt-Hash - Disable-ADIDNSNode - - Disable-MachineAccount - Do-Exfiltration - Enable-ADIDNSNode - - Enable-MachineAccount - Enabled-DuplicateToken - Exploit-Jboss - - Export-ADR - Export-ADRCSV - Export-ADRExcel - Export-ADRHTML @@ -82,8 +78,11 @@ detection: - Find-Fruit - Find-GPOLocation - Find-TrustedDocuments - - Get-ADIDNS - - Get-ApplicationHost + - Get-ADIDNSNodeAttribute + - Get-ADIDNSNodeOwner + - Get-ADIDNSNodeTombstoned + - Get-ADIDNSPermission + - Get-ADIDNSZone - Get-ChromeDump - Get-ClipboardContents - Get-FoxDump @@ -92,8 +91,6 @@ detection: - Get-KerberosAESKey - Get-Keystrokes - Get-LSASecret - - Get-MachineAccountAttribute - - Get-MachineAccountCreator - Get-PassHashes - Get-RegAlwaysInstallElevated - Get-RegAutoLogon @@ -104,7 +101,6 @@ detection: - Get-RemoteMachineAccountHash - Get-RemoteNLKMKey - Get-RickAstley - - Get-Screenshot - Get-SecurityPackages - Get-ServiceFilePermission - Get-ServicePermission @@ -120,9 +116,6 @@ detection: - Get-VulnSchTask - Grant-ADIDNSPermission - Gupt-Backdoor - - HTTP-Login - - Install-ServiceBinary - - Install-SSP - Invoke-ACLScanner - Invoke-ADRecon - Invoke-ADSBackdoor @@ -224,26 +217,19 @@ detection: - Invoke-Zerologon - MailRaider - New-ADIDNSNode - - New-DNSRecordArray - New-HoneyHash - New-InMemoryModule - - New-MachineAccount - New-SOASerialNumberArray - Out-Minidump - - Port-Scan - PowerBreach - 'powercat ' - PowerUp - PowerView - Remove-ADIDNSNode - - Remove-MachineAccount - Remove-Update - Rename-ADIDNSNode - Revoke-ADIDNSPermission - Set-ADIDNSNode - - Set-MacAttribute - - Set-MachineAccountAttribute - - Set-Wallpaper - Show-TargetScreen - Start-CaptureServer - Start-WebcamRecorder diff --git a/sigma/builtin/powershell/powershell_script/posh_ps_powerview_malicious_commandlets.yml b/sigma/builtin/powershell/powershell_script/posh_ps_powerview_malicious_commandlets.yml index 96b51952f..75451bddb 100644 --- a/sigma/builtin/powershell/powershell_script/posh_ps_powerview_malicious_commandlets.yml +++ b/sigma/builtin/powershell/powershell_script/posh_ps_powerview_malicious_commandlets.yml @@ -1,10 +1,10 @@ -title: Malicious PowerView PowerShell Commandlets +title: PowerView PowerShell Cmdlets - ScriptBlock id: dcd74b95-3f36-4ed9-9598-0490951643aa related: - id: b2317cfa-4a47-4ead-b3ff-297438c0bc2d type: similar status: test -description: Detects Commandlet names from PowerView of PowerSploit exploitation framework. +description: Detects Cmdlet names from PowerView of the PowerSploit exploitation framework. references: - https://powersploit.readthedocs.io/en/stable/Recon/README - https://github.com/PowerShellMafia/PowerSploit/tree/master/Recon @@ -12,7 +12,7 @@ references: - https://adsecurity.org/?p=2277 author: Bhabesh Raj date: 2021/05/18 -modified: 2023/04/20 +modified: 2023/11/22 tags: - attack.execution - attack.t1059.001 @@ -28,14 +28,6 @@ detection: - PowerShellCore/Operational selection: ScriptBlockText|contains: - - Add-DomainGroupMember - - Add-DomainObjectAcl - - Add-ObjectAcl - - Add-RemoteConnection - - Convert-ADName - - ConvertFrom-UACValue - - Convert-NameToSid - - ConvertTo-SID - Export-PowerViewCSV - Find-DomainLocalGroupMember - Find-DomainObjectPropertyOutlier @@ -53,57 +45,26 @@ detection: - Find-ManagedSecurityGroups - Get-CachedRDPConnection - Get-DFSshare - - Get-DNSRecord - - Get-DNSZone - - Get-DomainComputer - - Get-DomainController - Get-DomainDFSShare - Get-DomainDNSRecord - Get-DomainDNSZone - Get-DomainFileServer - - Get-DomainGPO - - Get-DomainGroup - - Get-DomainGroupMember - - Get-DomainManagedSecurityGroup - - Get-DomainObject - - Get-DomainObjectAcl - - Get-DomainOU - - Get-DomainPolicy - - Get-DomainSID - - Get-DomainSite - - Get-DomainSPNTicket - - Get-DomainSubnet - - Get-DomainUser - - Get-DomainUserEvent - - Get-Forest - - Get-IPAddress + - Get-DomainGPOComputerLocalGroupMapping + - Get-DomainGPOLocalGroup + - Get-DomainGPOUserLocalGroupMapping - Get-LastLoggedOn - Get-LoggedOnLocal - - Get-NetComputer - - Get-NetDomain - Get-NetFileServer - Get-NetForest - - Get-NetGPO - - Get-NetGroup - - Get-NetLocalGroup - - Get-NetLoggedon - - Get-NetOU + - Get-NetGPOGroup - Get-NetProcess - Get-NetRDPSession - - Get-NetSession - - Get-NetShare - - Get-NetSite - - Get-NetSubnet - - Get-NetUser - - Get-ObjectAcl - - Get-PathAcl - - Get-Proxy - Get-RegistryMountedDrive - Get-RegLoggedOn - - Get-SiteName - - Get-UserEvent - - Get-WMIProcess - - Get-WMIReg + - Get-WMIRegCachedRDPConnection + - Get-WMIRegLastLoggedOn + - Get-WMIRegMountedDrive + - Get-WMIRegProxy - Invoke-ACLScanner - Invoke-CheckLocalAdminAccess - Invoke-EnumerateLocalAdmin @@ -116,17 +77,11 @@ detection: - Invoke-ShareFinder - Invoke-UserHunter - Invoke-UserImpersonation - - New-DomainGroup - - New-DomainUser - Remove-RemoteConnection - Request-SPNTicket - Resolve-IPAddress - - Set-ADObject - - Set-DomainObject - - Set-DomainUserPassword - - Test-AdminAccess condition: ps_script and selection falsepositives: - - Should not be any as administrators do not use this tool + - Unknown level: high ruletype: Sigma diff --git a/sigma/builtin/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml b/sigma/builtin/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml index 2e944b153..d4bef5903 100644 --- a/sigma/builtin/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml +++ b/sigma/builtin/powershell/powershell_script/posh_ps_set_policies_to_unsecure_level.yml @@ -8,14 +8,15 @@ related: - id: fad91067-08c5-4d1a-8d8c-d96a21b37814 type: similar status: test -description: Detects use of Set-ExecutionPolicy to set insecure policies +description: Detects changing the PowerShell script execution policy to a potentially + insecure level using the "Set-ExecutionPolicy" cmdlet. references: - https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-7.1 - https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_execution_policies?view=powershell-7.1 - https://adsecurity.org/?p=2604 author: frack113 date: 2021/10/20 -modified: 2022/12/30 +modified: 2023/12/14 tags: - attack.execution - attack.t1059.001 @@ -29,19 +30,17 @@ detection: Channel: - Microsoft-Windows-PowerShell/Operational - PowerShellCore/Operational - cmdlet: + selection_cmdlet: ScriptBlockText|contains: Set-ExecutionPolicy - option: + selection_option: ScriptBlockText|contains: - Unrestricted - bypass - - RemoteSigned - filter: + filter_optional_chocolatey: ScriptBlockText|contains: - (New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1') - (New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1') - - \AppData\Roaming\Code\ - condition: ps_script and (cmdlet and option and not filter) + condition: ps_script and (all of selection_* and not 1 of filter_optional_*) falsepositives: - Administrator script level: medium diff --git a/sigma/builtin/process_creation/proc_creation_win_cloudflared_portable_execution.yml b/sigma/builtin/process_creation/proc_creation_win_cloudflared_portable_execution.yml new file mode 100644 index 000000000..7d80e1928 --- /dev/null +++ b/sigma/builtin/process_creation/proc_creation_win_cloudflared_portable_execution.yml @@ -0,0 +1,36 @@ +title: Cloudflared Portable Execution +id: fadb84f0-4e84-4f6d-a1ce-9ef2bffb6ccd +status: experimental +description: 'Detects the execution of the "cloudflared" binary from a non standard + location. + + ' +references: + - https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/do-more-with-tunnels/trycloudflare/ + - https://github.com/cloudflare/cloudflared + - https://www.intrinsec.com/akira_ransomware/ + - https://www.guidepointsecurity.com/blog/tunnel-vision-cloudflared-abused-in-the-wild/ + - https://github.com/cloudflare/cloudflared/releases +author: Nasreddine Bencherchali (Nextron Systems) +tags: + - attack.command_and_control + - attack.t1090.001 +date: 2023/12/20 +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 4688 + Channel: Security + selection: + NewProcessName|endswith: \cloudflared.exe + filter_main_admin_location: + NewProcessName|contains: + - :\Program Files (x86)\cloudflared\ + - :\Program Files\cloudflared\ + condition: process_creation and (selection and not 1 of filter_main_*) +falsepositives: + - Legitimate usage of Cloudflared portable versions +level: medium +ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_cloudflared_quicktunnel_execution.yml b/sigma/builtin/process_creation/proc_creation_win_cloudflared_quicktunnel_execution.yml new file mode 100644 index 000000000..9d23e479c --- /dev/null +++ b/sigma/builtin/process_creation/proc_creation_win_cloudflared_quicktunnel_execution.yml @@ -0,0 +1,94 @@ +title: Cloudflared Quick Tunnel Execution +id: 222129f7-f4dc-4568-b0d2-22440a9639ba +related: + - id: 7050bba1-1aed-454e-8f73-3f46f09ce56a + type: similar + - id: 9a019ffc-3580-4c9d-8d87-079f7e8d3fd4 + type: similar +status: experimental +description: 'Detects creation of an ad-hoc Cloudflare Quick Tunnel, which can be + used to tunnel local services such as HTTP, RDP, SSH and SMB. + + The free TryCloudflare Quick Tunnel will generate a random subdomain on trycloudflare[.]com, + following a call to api[.]trycloudflare[.]com. + + The tool has been observed in use by threat groups including Akira ransomware. + + ' +references: + - https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/do-more-with-tunnels/trycloudflare/ + - https://github.com/cloudflare/cloudflared + - https://www.intrinsec.com/akira_ransomware/ + - https://www.guidepointsecurity.com/blog/tunnel-vision-cloudflared-abused-in-the-wild/ +author: Sajid Nawaz Khan +tags: + - attack.command_and_control + - attack.t1090.001 +date: 2023/12/20 +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 4688 + Channel: Security + selection_img: + - NewProcessName|endswith: + - \cloudflared.exe + - \cloudflared-windows-386.exe + - \cloudflared-windows-amd64.exe + - Hashes|contains: + - SHA256=2fb6c04c4f95fb8d158af94c137f90ac820716deaf88d8ebec956254e046cb29 + - SHA256=b3d21940a10fdef5e415ad70331ce257c24fe3bcf7722262302e0421791f87e8 + - SHA256=1fbd8362b2d2d2e6a5750ae3db69cd1815e6c1d31da48a98b796450971a8e039 + - SHA256=0409c9b12f9d0eda86e461ed9bdabeefb00172b26322079681a0bdf48e68dc28 + - SHA256=7cfb411d04bac42ef93d1f0c93c0a481e38c6f4612b97ae89d4702595988edc7 + - SHA256=5b3c2d846ab162dc6bc595cce3a49de5731afde5d6060be7066d21b013a28373 + - SHA256=ce95df7f69664c3df19b76028e115931919a71517b776da7b42d353e2ff4a670 + - SHA256=1293525a19cfe3bc8296b62fbfe19f083632ed644a1c18c10b045a1d3030d81a + - SHA256=af2b9161cfcb654b16408cd6b098afe9d1fb61a037d18d7090a119d4c0c8e0f0 + - SHA256=39ddceb56a15798826a5fc4892fa2b474c444bb4d7a8bf2fa95e41cab10fa7a1 + - SHA256=ccd11f2328023a0e7929e845d5b6e7bc783fb4650d65faef3ae090239d4bbce2 + - SHA256=b6e5c5d2567ae8c69cc012ebcae30e6c9b5359d64a58d17ba75ec89f8bce71ac + - SHA256=f813484ea441404f18caad96f28138e8aaf0cb256163c09c2ab8a3acab87f69f + - SHA256=fc4a0802ab9c7409b892ca00636bec61e2acfc911bccfdeb9978b8ab5a2f828d + - SHA256=083150724b49604c8765c1ba19541fa260b133be0acb0647fcd936d81f054499 + - SHA256=44303d6572956f28a0f2e4b188934fb9874f2584f5c81fa431a463cfbf28083b + - SHA256=5d38c46032a58e28ae5f7d174d8761ec3d64d186677f3ec53af5f51afb9bfd2f + - SHA256=e1e70fa42059911bc6685fafef957f9a73fc66f214d0704a9b932683a5204032 + - SHA256=c01356092a365b84f84f0e66870bd1a05ba3feb53cafd973fa5fea2534bee234 + - SHA256=b3f9c06151e30ee43d39e788a79cd918a314f24e04fe87f3de8272a2057b624f + - SHA256=cd81b2792f0739f473c31c9cb7cf2313154bfa28b839975802b90e8790bb5058 + - SHA256=9ec7e6c8e1bfd883663d8d9d62c9e4f9ae373b731407181e32491b27a7218a2c + - SHA256=c2cfd23fdc6c0e1b1ffa0e545cbe556f18d11b362b4a89ba0713f6ab01c4827f + - SHA256=53f8adbd76c0eb16f5e43cadde422474d8a06f9c8f959389c1930042ad8beaa5 + - SHA256=648c8d2f8001c113d2986dd00b7bbd181593d462bef73522cee212c4f71f95b3 + - SHA256=ae047e2095e46c3f9c518b2be67ec753f4f0aad23b261a361fcb6144dcdb63b4 + - SHA256=3153d2baa462978dd22ab33d1c2274ecc88c200225d6a3327f98d5b752d08f5c + - SHA256=f49cde976e628012c9db73e1c8d76081944ecf2297cdafeb78bb13290da274c4 + - SHA256=d2513e58bb03ccc83affde685c6ef987924c37ce6707d8e9857e2524b0d7e90f + - SHA256=bb67c7623ba92fe64ffd9816b8d5b3b1ea3013960a30bd4cf6e295b3eb5b1bad + - SHA256=b34b3c3a91e3165d1481f0b3ec23eab93a1cfba94345a6cbfe5b18ddbd48eac7 + - SHA256=f7848034e010d55f15e474ca998f96391e320ff29b00cfcc4c5e536529703e75 + - SHA256=b6fc9493778cbe3bfc062d73f5cc604bc0ff058bc5e5dc6aac87f3a4008b54b6 + - SHA256=f5c5e962577e2293c4ad10603816dce7cc273585969615fbf4e4bfa9eaff1688 + - SHA256=d14c52d9220b606f428a8fe9f7c108b0d6f14cf71e7384749e98e6a95962e68f + - SHA256=d3a0e1a79158f3985cd49607ebe0cdfcc49cb9af96b8f43aefd0cdfe2f22e663 + - SHA256=2fbbfc8299537ff80cadf9d0e27c223fe0ccb9052bf9d8763ad717bbfa521c77 + - SHA256=19074674c6fbdaa573b3081745e5e26144fdf7a086d14e0e220d1814f1f13078 + selection_param: + - CommandLine|contains|all: + - -url + - tunnel + - CommandLine|contains: + - .exe -url + - .exe --url + selection_other: + CommandLine|contains|all: + - -url + - -no-autoupdate + condition: process_creation and ((selection_img and selection_param) or selection_other) +falsepositives: + - Legitimate usage of Cloudflare Quick Tunnel +level: medium +ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_cloudflared_tunnel_cleanup.yml b/sigma/builtin/process_creation/proc_creation_win_cloudflared_tunnel_cleanup.yml index 95e2f2014..1d66b1d2d 100644 --- a/sigma/builtin/process_creation/proc_creation_win_cloudflared_tunnel_cleanup.yml +++ b/sigma/builtin/process_creation/proc_creation_win_cloudflared_tunnel_cleanup.yml @@ -8,6 +8,7 @@ references: - https://developers.cloudflare.com/cloudflare-one/connections/connect-apps author: Nasreddine Bencherchali (Nextron Systems) date: 2023/05/17 +modified: 2023/12/21 tags: - attack.command_and_control - attack.t1102 @@ -25,8 +26,8 @@ detection: - ' tunnel ' - 'cleanup ' CommandLine|contains: - - ' --config ' - - ' --connector-id ' + - '-config ' + - '-connector-id ' condition: process_creation and selection falsepositives: - Legitimate usage of Cloudflared. diff --git a/sigma/builtin/process_creation/proc_creation_win_cloudflared_tunnel_run.yml b/sigma/builtin/process_creation/proc_creation_win_cloudflared_tunnel_run.yml index 43db74be3..e8dd72ddf 100644 --- a/sigma/builtin/process_creation/proc_creation_win_cloudflared_tunnel_run.yml +++ b/sigma/builtin/process_creation/proc_creation_win_cloudflared_tunnel_run.yml @@ -10,6 +10,7 @@ references: - https://developers.cloudflare.com/cloudflare-one/connections/connect-apps author: Janantha Marasinghe, Nasreddine Bencherchali (Nextron Systems) date: 2023/05/17 +modified: 2023/12/20 tags: - attack.command_and_control - attack.t1102 @@ -27,12 +28,12 @@ detection: - ' tunnel ' - ' run ' CommandLine|contains: - - ' --config ' - - ' --credentials-contents ' - - ' --credentials-file ' - - ' --token ' + - '-config ' + - '-credentials-contents ' + - '-credentials-file ' + - '-token ' condition: process_creation and selection falsepositives: - - Legitimate usage of Cloudflared. + - Legitimate usage of Cloudflared tunnel. level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_conhost_susp_child_process.yml b/sigma/builtin/process_creation/proc_creation_win_conhost_susp_child_process.yml index a0e4d7744..fef8c0bd6 100644 --- a/sigma/builtin/process_creation/proc_creation_win_conhost_susp_child_process.yml +++ b/sigma/builtin/process_creation/proc_creation_win_conhost_susp_child_process.yml @@ -7,7 +7,7 @@ references: - http://www.hexacorn.com/blog/2020/05/25/how-to-con-your-host/ author: omkar72 date: 2020/10/25 -modified: 2023/06/01 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.t1202 @@ -20,36 +20,16 @@ detection: Channel: Security selection: ParentProcessName|endswith: \conhost.exe + filter_main_conhost: + NewProcessName|endswith: :\Windows\System32\conhost.exe + filter_main_null: + NewProcessName: null + filter_main_empty: + NewProcessName: '' filter_optional_provider: Provider_Name: SystemTraceProvider-Process - filter_optional_git: - Provider_Name: Microsoft-Windows-Kernel-Process - ParentCommandLine|contains: - - ' show --textconv ' - - ' cat-file -s ' - NewProcessName|endswith: \git.exe - filter_optional_git_show: - ParentCommandLine|contains: C:\WINDOWS\system32\conhost.exe 0x4 - CommandLine|contains: - - ' show --textconv ' - - ' cat-file -s ' - filter_optional_image_conhost: - Provider_Name: Microsoft-Windows-Kernel-Process - ParentCommandLine|contains: - - ' cat-file -s ' - - show --textconv - NewProcessName: C:\Windows\System32\conhost.exe - filter_optional_image_conhost2: - ParentCommandLine: - - \\\?\?\\C:\\WINDOWS\\system32\\conhost.exe 0x4 - - \\\?\?\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1 - NewProcessName: C:\Windows\System32\conhost.exe - filter_optional_image_git: - ParentCommandLine: - - \\\?\?\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1' - - \\\?\?\\C:\\WINDOWS\\system32\\conhost.exe 0x4' - NewProcessName: C:\Program Files\Git\mingw64\bin\git.exe - condition: process_creation and (selection and not 1 of filter_optional_*) + condition: process_creation and (selection and not 1 of filter_main_* and not + 1 of filter_optional_*) falsepositives: - Unknown level: medium diff --git a/sigma/builtin/process_creation/proc_creation_win_hh_chm_execution.yml b/sigma/builtin/process_creation/proc_creation_win_hh_chm_execution.yml index 8f82dcb51..882b340d1 100644 --- a/sigma/builtin/process_creation/proc_creation_win_hh_chm_execution.yml +++ b/sigma/builtin/process_creation/proc_creation_win_hh_chm_execution.yml @@ -1,14 +1,14 @@ title: HH.EXE Execution id: 68c8acb4-1b60-4890-8e82-3ddf7a6dba84 status: test -description: Detects the usage of "hh.exe" to execute ".chm" files. +description: Detects the execution of "hh.exe" to open ".chm" files. references: - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1218.001/T1218.001.md - https://eqllib.readthedocs.io/en/latest/analytics/b25aa548-7937-11e9-8f5c-d46d6d62a49e.html - https://www.zscaler.com/blogs/security-research/unintentional-leak-glimpse-attack-vectors-apt37 author: E.M. Anhaus (originally from Atomic Blue Detections, Dan Beavin), oscd.community date: 2019/10/24 -modified: 2023/02/04 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.t1218.001 @@ -27,5 +27,5 @@ detection: condition: process_creation and (all of selection_*) falsepositives: - False positives are expected with legitimate ".CHM" -level: medium +level: low ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_netsh_fw_add_rule.yml b/sigma/builtin/process_creation/proc_creation_win_netsh_fw_add_rule.yml index 481200f0f..987ca3ba0 100644 --- a/sigma/builtin/process_creation/proc_creation_win_netsh_fw_add_rule.yml +++ b/sigma/builtin/process_creation/proc_creation_win_netsh_fw_add_rule.yml @@ -25,18 +25,13 @@ detection: CommandLine|contains|all: - ' firewall ' - ' add ' - filter_dropbox: + filter_optional_dropbox: CommandLine|contains: - - \netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow - "program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" enable=yes - profile=Any - - \netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow - "program=C:\Program Files\Dropbox\Client\Dropbox.exe" enable=yes profile=Any - filter_thor: - CommandLine|contains: advfirewall firewall show rule name=all - ParentProcessName|startswith: C:\Windows\Temp\asgard2-agent\ - ParentProcessName|endswith: \thor64.exe - condition: process_creation and (all of selection_* and not 1 of filter_*) + - advfirewall firewall add rule name=Dropbox dir=in action=allow "program=?:\Program + Files (x86)\Dropbox\Client\Dropbox.exe" enable=yes profile=Any + - advfirewall firewall add rule name=Dropbox dir=in action=allow "program=?:\Program + Files\Dropbox\Client\Dropbox.exe" enable=yes profile=Any + condition: process_creation and (all of selection_* and not 1 of filter_optional_*) falsepositives: - Legitimate administration activity - Software installations diff --git a/sigma/builtin/process_creation/proc_creation_win_netsh_fw_allow_program_in_susp_location.yml b/sigma/builtin/process_creation/proc_creation_win_netsh_fw_allow_program_in_susp_location.yml index d96217756..daf355183 100644 --- a/sigma/builtin/process_creation/proc_creation_win_netsh_fw_allow_program_in_susp_location.yml +++ b/sigma/builtin/process_creation/proc_creation_win_netsh_fw_allow_program_in_susp_location.yml @@ -8,7 +8,7 @@ references: - https://www.hybrid-analysis.com/sample/07e789f4f2f3259e7559fdccb36e96814c2dbff872a21e1fa03de9ee377d581f?environmentId=100 author: Sander Wiebing, Jonhnathan Ribeiro, Daniil Yugoslavskiy, oscd.community date: 2020/05/25 -modified: 2023/02/10 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.t1562.004 @@ -36,11 +36,9 @@ detection: - program= selection_paths: CommandLine|contains: - - '%Public%\' - - '%TEMP%' - - '%TMP%' - :\$Recycle.bin\ - - :\RECYCLER\ + - :\RECYCLER.BIN\ + - :\RECYCLERS.BIN\ - :\SystemVolumeInformation\ - :\Temp\ - :\Users\Default\ @@ -58,6 +56,9 @@ detection: - \Downloads\ - \Local Settings\Temporary Internet Files\ - \Temporary Internet Files\Content.Outlook\ + - '%Public%\' + - '%TEMP%' + - '%TMP%' condition: process_creation and (all of selection_*) falsepositives: - Unknown diff --git a/sigma/builtin/process_creation/proc_creation_win_netsh_fw_allow_rdp.yml b/sigma/builtin/process_creation/proc_creation_win_netsh_fw_allow_rdp.yml index 3de2fe059..4cd4f7526 100644 --- a/sigma/builtin/process_creation/proc_creation_win_netsh_fw_allow_rdp.yml +++ b/sigma/builtin/process_creation/proc_creation_win_netsh_fw_allow_rdp.yml @@ -7,7 +7,7 @@ references: - https://labs.sentinelone.com/sarwent-malware-updates-command-detonation/ author: Sander Wiebing date: 2020/05/23 -modified: 2023/02/13 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.t1562.004 @@ -21,18 +21,15 @@ detection: selection_img: - NewProcessName|endswith: \netsh.exe - OriginalFileName: netsh.exe - selection_cli_1: + selection_cli: CommandLine|contains|all: - 'firewall ' - 'add ' - 'tcp ' - '3389' - selection_cli_2: - - CommandLine|contains: portopening - - CommandLine|contains|all: - - advfirewall - - rule - - allow + CommandLine|contains: + - portopening + - allow condition: process_creation and (all of selection_*) falsepositives: - Legitimate administration activity diff --git a/sigma/builtin/process_creation/proc_creation_win_netsh_fw_delete_rule.yml b/sigma/builtin/process_creation/proc_creation_win_netsh_fw_delete_rule.yml index a56cdc6e9..fe188a23a 100644 --- a/sigma/builtin/process_creation/proc_creation_win_netsh_fw_delete_rule.yml +++ b/sigma/builtin/process_creation/proc_creation_win_netsh_fw_delete_rule.yml @@ -25,10 +25,10 @@ detection: CommandLine|contains|all: - firewall - 'delete ' - filter_dropbox: + filter_optional_dropbox: CommandLine|contains: name=Dropbox ParentProcessName|endswith: \Dropbox.exe - condition: process_creation and (all of selection_* and not filter_dropbox) + condition: process_creation and (all of selection_* and not 1 of filter_optional_*) falsepositives: - Legitimate administration activity - Software installations and removal diff --git a/sigma/builtin/process_creation/proc_creation_win_netsh_fw_rules_discovery.yml b/sigma/builtin/process_creation/proc_creation_win_netsh_fw_rules_discovery.yml index 03be22a15..ce36f5517 100644 --- a/sigma/builtin/process_creation/proc_creation_win_netsh_fw_rules_discovery.yml +++ b/sigma/builtin/process_creation/proc_creation_win_netsh_fw_rules_discovery.yml @@ -1,4 +1,4 @@ -title: Suspicious Firewall Configuration Discovery Via Netsh.EXE +title: Firewall Configuration Discovery Via Netsh.EXE id: 0e4164da-94bc-450d-a7be-a4b176179f1f status: experimental description: Adversaries may look for details about the network configuration and @@ -8,7 +8,7 @@ references: - https://ss64.com/nt/netsh.html author: frack113, Christopher Peacock '@securepeacock', SCYTHE '@scythe_io' date: 2021/12/07 -modified: 2023/02/14 +modified: 2023/12/11 tags: - attack.discovery - attack.t1016 diff --git a/sigma/builtin/process_creation/proc_creation_win_powershell_set_policies_to_unsecure_level.yml b/sigma/builtin/process_creation/proc_creation_win_powershell_set_policies_to_unsecure_level.yml index 6bf40c787..b752b85d1 100644 --- a/sigma/builtin/process_creation/proc_creation_win_powershell_set_policies_to_unsecure_level.yml +++ b/sigma/builtin/process_creation/proc_creation_win_powershell_set_policies_to_unsecure_level.yml @@ -8,7 +8,8 @@ related: - id: fad91067-08c5-4d1a-8d8c-d96a21b37814 type: similar status: test -description: Detects use of executionpolicy option to set insecure policies +description: Detects changing the PowerShell script execution policy to a potentially + insecure level using the "-ExecutionPolicy" flag. references: - https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-7.1 - https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_execution_policies?view=powershell-7.1 @@ -16,7 +17,7 @@ references: - https://thedfirreport.com/2021/11/01/from-zero-to-domain-admin/ author: frack113 date: 2021/11/01 -modified: 2022/09/10 +modified: 2023/12/13 tags: - attack.execution - attack.t1059.001 @@ -27,23 +28,24 @@ detection: process_creation: EventID: 4688 Channel: Security + selection_img: + - OriginalFileName: + - PowerShell.EXE + - pwsh.dll + - NewProcessName|endswith: + - \powershell.exe + - \pwsh.exe selection_option: CommandLine|contains: - - ' -executionpolicy ' + - '-executionpolicy ' - ' -ep ' - ' -exec ' selection_level: CommandLine|contains: + - Bypass - Unrestricted - - bypass - - RemoteSigned - filter: - CommandLine|contains: - - C:\Program Files - - C:\ProgramData - - \AppData\Roaming\Code\ - condition: process_creation and (all of selection* and not filter) + condition: process_creation and (all of selection_*) falsepositives: - - Administrator script + - Administrator scripts level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_pua_nmap_zenmap.yml b/sigma/builtin/process_creation/proc_creation_win_pua_nmap_zenmap.yml index 08bc7740d..e1bbca97f 100644 --- a/sigma/builtin/process_creation/proc_creation_win_pua_nmap_zenmap.yml +++ b/sigma/builtin/process_creation/proc_creation_win_pua_nmap_zenmap.yml @@ -9,7 +9,7 @@ references: - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1046/T1046.md#atomic-test-3---port-scan-nmap-for-windows author: frack113 date: 2021/12/10 -modified: 2023/02/20 +modified: 2023/12/11 tags: - attack.discovery - attack.t1046 @@ -29,6 +29,6 @@ detection: - zennmap.exe condition: process_creation and selection falsepositives: - - Network administrator computer -level: high + - Legitimate administrator activity +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_pua_nsudo.yml b/sigma/builtin/process_creation/proc_creation_win_pua_nsudo.yml index 72542603b..6f6fd70ac 100644 --- a/sigma/builtin/process_creation/proc_creation_win_pua_nsudo.yml +++ b/sigma/builtin/process_creation/proc_creation_win_pua_nsudo.yml @@ -43,10 +43,7 @@ detection: - '-M=S ' - '-M=H ' - -ShowWindowMode:Hide - condition: process_creation and (all of selection*) -fields: - - CommandLine - - ParentCommandLine + condition: process_creation and (all of selection_*) falsepositives: - Legitimate use by administrators level: high diff --git a/sigma/builtin/process_creation/proc_creation_win_pua_process_hacker.yml b/sigma/builtin/process_creation/proc_creation_win_pua_process_hacker.yml index bbd200f2b..8c6455b88 100644 --- a/sigma/builtin/process_creation/proc_creation_win_pua_process_hacker.yml +++ b/sigma/builtin/process_creation/proc_creation_win_pua_process_hacker.yml @@ -4,16 +4,21 @@ related: - id: 5722dff1-4bdd-4949-86ab-fbaf707e767a type: similar status: experimental -description: Detects the execution of Process Hacker based on binary metadata information - (Image, Hash, Imphash, etc). Process Hacker is a tool to view and manipulate processes, - kernel options and other low level options. Threat actors regularly abuse it to - manipulate system processes. +description: 'Detects the execution of Process Hacker based on binary metadata information + (Image, Hash, Imphash, etc). + + Process Hacker is a tool to view and manipulate processes, kernel options and + other low level options. + + Threat actors abused older vulnerable versions to manipulate system processes. + + ' references: - https://processhacker.sourceforge.io/ - https://www.crowdstrike.com/blog/falcon-overwatch-report-finds-increase-in-ecrime/ author: Florian Roth (Nextron Systems) date: 2022/10/10 -modified: 2023/05/08 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.discovery @@ -64,5 +69,5 @@ detection: falsepositives: - While sometimes 'Process Hacker is used by legitimate administrators, the execution of Process Hacker must be investigated and allowed on a case by case basis -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_rar_susp_greedy_compression.yml b/sigma/builtin/process_creation/proc_creation_win_rar_susp_greedy_compression.yml index c3971b38f..456c4a31b 100644 --- a/sigma/builtin/process_creation/proc_creation_win_rar_susp_greedy_compression.yml +++ b/sigma/builtin/process_creation/proc_creation_win_rar_susp_greedy_compression.yml @@ -7,7 +7,7 @@ references: - https://decoded.avast.io/martinchlumecky/png-steganography author: X__Junior (Nextron Systems), Florian Roth (Nextron Systems) date: 2022/12/15 -modified: 2023/02/05 +modified: 2023/12/11 tags: - attack.execution - attack.t1059 @@ -31,14 +31,14 @@ detection: - ' -r ' selection_cli_folders: CommandLine|contains: - - ' C:\\\*.' - - ' C:\\\\\*.' - - ' C:\Users\Public\' + - ' :\\\*.' + - ' :\\\\\*.' + - ' :\Users\Public\' - ' %public%' - - ' C:\Windows\' - - ' C:\PerfLogs\' - - ' C:\Temp' - - ' C:\$Recycle.bin\' + - ' :\Windows\' + - ' :\PerfLogs\' + - ' :\Temp' + - ' :\$Recycle.bin\' condition: process_creation and (1 of selection_opt_* and all of selection_cli_*) falsepositives: - Unknown diff --git a/sigma/builtin/process_creation/proc_creation_win_reg_desktop_background_change.yml b/sigma/builtin/process_creation/proc_creation_win_reg_desktop_background_change.yml new file mode 100644 index 000000000..bf7be2e76 --- /dev/null +++ b/sigma/builtin/process_creation/proc_creation_win_reg_desktop_background_change.yml @@ -0,0 +1,63 @@ +title: Potentially Suspicious Desktop Background Change Using Reg.EXE +id: 8cbc9475-8d05-4e27-9c32-df960716c701 +related: + - id: 85b88e05-dadc-430b-8a9e-53ff1cd30aae + type: similar +status: experimental +description: 'Detects the execution of "reg.exe" to alter registry keys that would + replace the user''s desktop background. + + This is a common technique used by malware to change the desktop background to + a ransom note or other image. + + ' +references: + - https://www.attackiq.com/2023/09/20/emulating-rhysida/ + - https://research.checkpoint.com/2023/the-rhysida-ransomware-activity-analysis-and-ties-to-vice-society/ + - https://www.trendmicro.com/en_us/research/23/h/an-overview-of-the-new-rhysida-ransomware.html + - https://www.virustotal.com/gui/file/a864282fea5a536510ae86c77ce46f7827687783628e4f2ceb5bf2c41b8cd3c6/behavior + - https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsDesktop::Wallpaper + - https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.ControlPanelDisplay::CPL_Personalization_NoDesktopBackgroundUI +author: Stephen Lincoln @slincoln-aiq (AttackIQ) +date: 2023/12/21 +tags: + - attack.defense_evasion + - attack.impact + - attack.t1112 + - attack.t1491.001 +logsource: + product: windows + category: process_creation +detection: + process_creation: + EventID: 4688 + Channel: Security + selection_reg_img: + - NewProcessName|endswith: \reg.exe + - OriginalFileName: reg.exe + selection_reg_flag: + CommandLine|contains: add + selection_keys: + CommandLine|contains: + - Control Panel\Desktop + - CurrentVersion\Policies\ActiveDesktop + - CurrentVersion\Policies\System + selection_cli_reg_1: + CommandLine|contains|all: + - /v NoChangingWallpaper + - /d 1 + selection_cli_reg_2: + CommandLine|contains|all: + - /v Wallpaper + - /t REG_SZ + selection_cli_reg_3: + CommandLine|contains|all: + - /v WallpaperStyle + - /d 2 + condition: process_creation and (all of selection_reg_* and selection_keys and + 1 of selection_cli_reg_*) +falsepositives: + - Administrative scripts that change the desktop background to a company logo + or other image. +level: medium +ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_reg_dumping_sensitive_hives.yml b/sigma/builtin/process_creation/proc_creation_win_reg_dumping_sensitive_hives.yml index 00db09dfa..a00fb9530 100644 --- a/sigma/builtin/process_creation/proc_creation_win_reg_dumping_sensitive_hives.yml +++ b/sigma/builtin/process_creation/proc_creation_win_reg_dumping_sensitive_hives.yml @@ -6,8 +6,8 @@ related: - id: 4d6c9da1-318b-4edf-bcea-b6c93fa98fd0 type: obsoletes status: test -description: Detects the usage of "reg.exe" in order to dump sensitive registry hives, - which includes SAM, SYSTEM and SECURITY +description: Detects the usage of "reg.exe" in order to dump sensitive registry hives. + This includes SAM, SYSTEM and SECURITY hives. references: - https://www.slideshare.net/heirhabarov/hunting-for-credentials-dumping-in-windows-environment - https://eqllib.readthedocs.io/en/latest/analytics/aed95fc6-5e3f-49dc-8b35-06508613f979.html @@ -17,7 +17,7 @@ references: author: Teymur Kheirkhabarov, Endgame, JHasenbusch, Daniil Yugoslavskiy, oscd.community, frack113 date: 2019/10/22 -modified: 2023/02/06 +modified: 2023/12/13 tags: - attack.credential_access - attack.t1003.002 @@ -36,10 +36,10 @@ detection: - OriginalFileName: reg.exe selection_cli_flag: CommandLine|contains: - - save - - export - - "\u02E2ave" - - "e\u02E3port" + - ' save ' + - ' export ' + - " \u02E2ave " + - " e\u02E3port " selection_cli_hklm: CommandLine|contains: - hklm diff --git a/sigma/builtin/process_creation/proc_creation_win_regasm_regsvcs_uncommon_extension_execution.yml b/sigma/builtin/process_creation/proc_creation_win_regasm_regsvcs_uncommon_extension_execution.yml new file mode 100644 index 000000000..eecd5a267 --- /dev/null +++ b/sigma/builtin/process_creation/proc_creation_win_regasm_regsvcs_uncommon_extension_execution.yml @@ -0,0 +1,44 @@ +title: Potentially Suspicious Execution Of Regasm/Regsvcs With Uncommon Extension +id: e9f8f8cc-07cc-4e81-b724-f387db9175e4 +related: + - id: cc368ed0-2411-45dc-a222-510ace303cb2 + type: derived +status: experimental +description: Detects potentially suspicious execution of the Regasm/Regsvcs utilities + with an uncommon extension. +references: + - https://www.fortiguard.com/threat-signal-report/4718?s=09 + - https://lolbas-project.github.io/lolbas/Binaries/Regasm/ + - https://lolbas-project.github.io/lolbas/Binaries/Regsvcs/ +author: Nasreddine Bencherchali (Nextron Systems) +date: 2023/02/13 +tags: + - attack.defense_evasion + - attack.t1218.009 +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 4688 + Channel: Security + selection_img: + - NewProcessName|endswith: + - \Regsvcs.exe + - \Regasm.exe + - OriginalFileName: + - RegSvcs.exe + - RegAsm.exe + selection_extension: + CommandLine|contains: + - .dat + - .gif + - .jpeg + - .jpg + - .png + - .txt + condition: process_creation and (all of selection_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_regasm_suspicious_execution.yml b/sigma/builtin/process_creation/proc_creation_win_regasm_regsvcs_uncommon_location_execution.yml similarity index 67% rename from sigma/builtin/process_creation/proc_creation_win_regasm_suspicious_execution.yml rename to sigma/builtin/process_creation/proc_creation_win_regasm_regsvcs_uncommon_location_execution.yml index ed90e7b67..4ed2d71a6 100644 --- a/sigma/builtin/process_creation/proc_creation_win_regasm_suspicious_execution.yml +++ b/sigma/builtin/process_creation/proc_creation_win_regasm_regsvcs_uncommon_location_execution.yml @@ -1,7 +1,11 @@ -title: Regasm/Regsvcs Suspicious Execution +title: Potentially Suspicious Execution Of Regasm/Regsvcs From Uncommon Location id: cc368ed0-2411-45dc-a222-510ace303cb2 +related: + - id: e9f8f8cc-07cc-4e81-b724-f387db9175e4 + type: derived status: experimental -description: Detects suspicious execution of Regasm/Regsvcs utilities +description: Detects potentially suspicious execution of the Regasm/Regsvcs utilities + from a potentially suspicious location references: - https://www.fortiguard.com/threat-signal-report/4718?s=09 - https://lolbas-project.github.io/lolbas/Binaries/Regasm/ @@ -28,24 +32,13 @@ detection: - RegAsm.exe selection_dir: CommandLine|contains: - - \Users\Public\ - \AppData\Local\Temp\ - - \Desktop\ - - \Downloads\ + - \Microsoft\Windows\Start Menu\Programs\Startup\ - \PerfLogs\ + - \Users\Public\ - \Windows\Temp\ - - \Microsoft\Windows\Start Menu\Programs\Startup\ - filter_main_dll: - CommandLine|contains: .dll - filter_main_no_cli: - CommandLine|endswith: - - \Regasm.exe" - - \Regasm.exe - - \Regsvcs.exe" - - \Regsvcs.exe - condition: process_creation and (all of selection_* or (selection_img and not - 1 of filter_main_*)) + condition: process_creation and (all of selection_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_renamed_cloudflared.yml b/sigma/builtin/process_creation/proc_creation_win_renamed_cloudflared.yml new file mode 100644 index 000000000..843d981dc --- /dev/null +++ b/sigma/builtin/process_creation/proc_creation_win_renamed_cloudflared.yml @@ -0,0 +1,92 @@ +title: Renamed Cloudflared.EXE Execution +id: e0c69ebd-b54f-4aed-8ae3-e3467843f3f0 +status: experimental +description: Detects the execution of a renamed "cloudflared" binary. +references: + - https://github.com/cloudflare/cloudflared/releases + - https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/do-more-with-tunnels/trycloudflare/ + - https://github.com/cloudflare/cloudflared + - https://www.intrinsec.com/akira_ransomware/ + - https://www.guidepointsecurity.com/blog/tunnel-vision-cloudflared-abused-in-the-wild/ +tags: + - attack.command_and_control + - attack.t1090.001 +author: Nasreddine Bencherchali (Nextron Systems) +date: 2023/12/20 +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 4688 + Channel: Security + selection_cleanup: + CommandLine|contains|all: + - ' tunnel ' + - 'cleanup ' + CommandLine|contains: + - '-config ' + - '-connector-id ' + selection_tunnel: + CommandLine|contains|all: + - ' tunnel ' + - ' run ' + CommandLine|contains: + - '-config ' + - '-credentials-contents ' + - '-credentials-file ' + - '-token ' + selection_accountless: + CommandLine|contains|all: + - -url + - tunnel + selection_hashes: + Hashes|contains: + - SHA256=2fb6c04c4f95fb8d158af94c137f90ac820716deaf88d8ebec956254e046cb29 + - SHA256=b3d21940a10fdef5e415ad70331ce257c24fe3bcf7722262302e0421791f87e8 + - SHA256=1fbd8362b2d2d2e6a5750ae3db69cd1815e6c1d31da48a98b796450971a8e039 + - SHA256=0409c9b12f9d0eda86e461ed9bdabeefb00172b26322079681a0bdf48e68dc28 + - SHA256=7cfb411d04bac42ef93d1f0c93c0a481e38c6f4612b97ae89d4702595988edc7 + - SHA256=5b3c2d846ab162dc6bc595cce3a49de5731afde5d6060be7066d21b013a28373 + - SHA256=ce95df7f69664c3df19b76028e115931919a71517b776da7b42d353e2ff4a670 + - SHA256=1293525a19cfe3bc8296b62fbfe19f083632ed644a1c18c10b045a1d3030d81a + - SHA256=af2b9161cfcb654b16408cd6b098afe9d1fb61a037d18d7090a119d4c0c8e0f0 + - SHA256=39ddceb56a15798826a5fc4892fa2b474c444bb4d7a8bf2fa95e41cab10fa7a1 + - SHA256=ccd11f2328023a0e7929e845d5b6e7bc783fb4650d65faef3ae090239d4bbce2 + - SHA256=b6e5c5d2567ae8c69cc012ebcae30e6c9b5359d64a58d17ba75ec89f8bce71ac + - SHA256=f813484ea441404f18caad96f28138e8aaf0cb256163c09c2ab8a3acab87f69f + - SHA256=fc4a0802ab9c7409b892ca00636bec61e2acfc911bccfdeb9978b8ab5a2f828d + - SHA256=083150724b49604c8765c1ba19541fa260b133be0acb0647fcd936d81f054499 + - SHA256=44303d6572956f28a0f2e4b188934fb9874f2584f5c81fa431a463cfbf28083b + - SHA256=5d38c46032a58e28ae5f7d174d8761ec3d64d186677f3ec53af5f51afb9bfd2f + - SHA256=e1e70fa42059911bc6685fafef957f9a73fc66f214d0704a9b932683a5204032 + - SHA256=c01356092a365b84f84f0e66870bd1a05ba3feb53cafd973fa5fea2534bee234 + - SHA256=b3f9c06151e30ee43d39e788a79cd918a314f24e04fe87f3de8272a2057b624f + - SHA256=cd81b2792f0739f473c31c9cb7cf2313154bfa28b839975802b90e8790bb5058 + - SHA256=9ec7e6c8e1bfd883663d8d9d62c9e4f9ae373b731407181e32491b27a7218a2c + - SHA256=c2cfd23fdc6c0e1b1ffa0e545cbe556f18d11b362b4a89ba0713f6ab01c4827f + - SHA256=53f8adbd76c0eb16f5e43cadde422474d8a06f9c8f959389c1930042ad8beaa5 + - SHA256=648c8d2f8001c113d2986dd00b7bbd181593d462bef73522cee212c4f71f95b3 + - SHA256=ae047e2095e46c3f9c518b2be67ec753f4f0aad23b261a361fcb6144dcdb63b4 + - SHA256=3153d2baa462978dd22ab33d1c2274ecc88c200225d6a3327f98d5b752d08f5c + - SHA256=f49cde976e628012c9db73e1c8d76081944ecf2297cdafeb78bb13290da274c4 + - SHA256=d2513e58bb03ccc83affde685c6ef987924c37ce6707d8e9857e2524b0d7e90f + - SHA256=bb67c7623ba92fe64ffd9816b8d5b3b1ea3013960a30bd4cf6e295b3eb5b1bad + - SHA256=b34b3c3a91e3165d1481f0b3ec23eab93a1cfba94345a6cbfe5b18ddbd48eac7 + - SHA256=f7848034e010d55f15e474ca998f96391e320ff29b00cfcc4c5e536529703e75 + - SHA256=b6fc9493778cbe3bfc062d73f5cc604bc0ff058bc5e5dc6aac87f3a4008b54b6 + - SHA256=f5c5e962577e2293c4ad10603816dce7cc273585969615fbf4e4bfa9eaff1688 + - SHA256=d14c52d9220b606f428a8fe9f7c108b0d6f14cf71e7384749e98e6a95962e68f + - SHA256=d3a0e1a79158f3985cd49607ebe0cdfcc49cb9af96b8f43aefd0cdfe2f22e663 + - SHA256=2fbbfc8299537ff80cadf9d0e27c223fe0ccb9052bf9d8763ad717bbfa521c77 + - SHA256=19074674c6fbdaa573b3081745e5e26144fdf7a086d14e0e220d1814f1f13078 + filter_main_known_names: + NewProcessName|endswith: + - \cloudflared.exe + - \cloudflared-windows-386.exe + - \cloudflared-windows-amd64.exe + condition: process_creation and (1 of selection_* and not 1 of filter_main_*) +falsepositives: + - Unknown +level: high +ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_rundll32_executable_invalid_extension.yml b/sigma/builtin/process_creation/proc_creation_win_rundll32_executable_invalid_extension.yml deleted file mode 100644 index a94b7514a..000000000 --- a/sigma/builtin/process_creation/proc_creation_win_rundll32_executable_invalid_extension.yml +++ /dev/null @@ -1,66 +0,0 @@ -title: Rundll32 Execution Without DLL File -id: c3a99af4-35a9-4668-879e-c09aeb4f2bdf -status: experimental -description: Detects the execution of rundll32 with a command line that doesn't contain - a .dll file -references: - - https://twitter.com/mrd0x/status/1481630810495139841?s=12 -author: Tim Shelton, Florian Roth (Nextron Systems), Yassine Oukessou (fix + fp) -date: 2022/01/13 -modified: 2023/11/14 -tags: - - attack.defense_evasion - - attack.t1218.011 -logsource: - category: process_creation - product: windows -detection: - process_creation: - EventID: 4688 - Channel: Security - selection: - - NewProcessName|endswith: \rundll32.exe - - OriginalFileName: RUNDLL32.EXE - filter_empty: - CommandLine: null - filter_generic: - - CommandLine|contains: .dll - - CommandLine: '' - filter_parent_null: - CommandLine|startswith: C:\Windows\system32\rundll32.exe C:\Windows\system32\inetcpl.cpl,ClearMyTracksByProcess - filter_iexplore: - CommandLine|contains: .cpl - ParentProcessName|endswith: :\Program Files\Internet Explorer\iexplore.exe - filter_msiexec_syswow64: - ParentCommandLine|startswith: C:\Windows\syswow64\MsiExec.exe -Embedding - ParentProcessName|endswith: :\Windows\SysWOW64\msiexec.exe - filter_msiexec_system32: - ParentCommandLine|startswith: C:\Windows\system32\MsiExec.exe -Embedding - ParentProcessName|endswith: :\Windows\System32\msiexec.exe - filter_splunk_ufw: - ParentCommandLine|contains: ' C:\Program Files\SplunkUniversalForwarder\' - ParentProcessName|endswith: :\Windows\System32\cmd.exe - filter_localserver_fp: - CommandLine|contains: ' -localserver ' - filter_mcafee: - - ParentCommandLine|startswith: 'C:\Windows\system32\rundll32.exe" "C:\Program - Files\McAfee\MSC\mcmscins.dll",DllUninstallFunction ' - - CommandLine|startswith: C:\Windows\system32\rundll32.exe" /uninstall /longpath - "C:\Program Files\McAfee\MSC\mscrem.inf - filter_edge_update: - ParentProcessName|startswith: C:\Users\ - ParentProcessName|contains: \AppData\Local\Microsoft\EdgeUpdate\Install\{ - ParentProcessName|endswith: \setup.exe - filter_zzzzInvokeManagedCustomActionOutOfProc: - CommandLine|contains|all: - - C:\Windows\Installer\MSI - - .tmp - - zzzzInvokeManagedCustomActionOutOfProc - condition: process_creation and (selection and not 1 of filter_*) -fields: - - NewProcessName - - CommandLine -falsepositives: - - Unknown -level: high -ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_rundll32_uncommon_dll_extension.yml b/sigma/builtin/process_creation/proc_creation_win_rundll32_uncommon_dll_extension.yml new file mode 100644 index 000000000..d642b6279 --- /dev/null +++ b/sigma/builtin/process_creation/proc_creation_win_rundll32_uncommon_dll_extension.yml @@ -0,0 +1,44 @@ +title: Rundll32 Execution With Uncommon DLL Extension +id: c3a99af4-35a9-4668-879e-c09aeb4f2bdf +status: experimental +description: Detects the execution of rundll32 with a command line that doesn't contain + a common extension +references: + - https://twitter.com/mrd0x/status/1481630810495139841?s=12 +author: Tim Shelton, Florian Roth (Nextron Systems), Yassine Oukessou +date: 2022/01/13 +modified: 2023/12/13 +tags: + - attack.defense_evasion + - attack.t1218.011 +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 4688 + Channel: Security + selection: + - NewProcessName|endswith: \rundll32.exe + - OriginalFileName: RUNDLL32.EXE + filter_main_null: + CommandLine: null + filter_main_empty: + CommandLine: '' + filter_main_known_extension: + CommandLine|contains: + - .cpl + - .dll + - '.inf' + filter_main_localserver: + CommandLine|contains: ' -localserver ' + filter_main_zzzzInvokeManagedCustomActionOutOfProc: + CommandLine|contains|all: + - C:\Windows\Installer\MSI + - .tmp + - zzzzInvokeManagedCustomActionOutOfProc + condition: process_creation and (selection and not 1 of filter_main_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_schtasks_env_folder.yml b/sigma/builtin/process_creation/proc_creation_win_schtasks_env_folder.yml index e2c023709..9604e7926 100644 --- a/sigma/builtin/process_creation/proc_creation_win_schtasks_env_folder.yml +++ b/sigma/builtin/process_creation/proc_creation_win_schtasks_env_folder.yml @@ -11,7 +11,7 @@ references: - https://www.joesandbox.com/analysis/514608/0/html#324415FF7D8324231381BAD48A052F85DF04 author: Florian Roth (Nextron Systems) date: 2022/02/21 -modified: 2023/03/14 +modified: 2023/11/30 tags: - attack.execution - attack.t1053.005 @@ -27,21 +27,21 @@ detection: NewProcessName|endswith: \schtasks.exe selection1_all_folders: CommandLine|contains: - - '%AppData%' + - :\Perflogs + - :\Windows\Temp - \AppData\Local\ - \AppData\Roaming\ - - '%Public%' - \Users\Public - - C:\Windows\Temp - - C:\Perflogs + - '%AppData%' + - '%Public%' selection2_parent: ParentCommandLine|endswith: \svchost.exe -k netsvcs -p -s Schedule selection2_some_folders: CommandLine|contains: - - '%Public%' + - :\Perflogs + - :\Windows\Temp - \Users\Public - - C:\Windows\Temp - - C:\Perflogs + - '%Public%' filter_mixed: - CommandLine|contains: - update_task.xml @@ -75,5 +75,5 @@ falsepositives: installations - Software that uses the AppData folder and scheduled tasks to update the software in the AppData folders -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_schtasks_susp_pattern.yml b/sigma/builtin/process_creation/proc_creation_win_schtasks_susp_pattern.yml index edcbbefe2..1126b2db2 100644 --- a/sigma/builtin/process_creation/proc_creation_win_schtasks_susp_pattern.yml +++ b/sigma/builtin/process_creation/proc_creation_win_schtasks_susp_pattern.yml @@ -9,7 +9,7 @@ references: - https://www.ncsc.gov.uk/static-assets/documents/malware-analysis-reports/devil-bait/NCSC-MAR-Devil-Bait.pdf author: Florian Roth (Nextron Systems) date: 2022/02/23 -modified: 2023/05/15 +modified: 2023/12/21 tags: - attack.execution - attack.t1053.005 @@ -50,15 +50,14 @@ detection: - mshta http - mshta.exe http selection_anomaly_1: - CommandLine|contains|all: + CommandLine|contains: + - :\Windows\Temp\ - \AppData\ - '%AppData%' - '%Temp%' - '%tmp%' - - C:\Windows\Temp\ selection_anomaly_2: - CommandLine|contains|all: - - /xml C:\Users\ + CommandLine|contains: - cscript - curl - wscript diff --git a/sigma/builtin/process_creation/proc_creation_win_sdbinst_shim_persistence.yml b/sigma/builtin/process_creation/proc_creation_win_sdbinst_shim_persistence.yml index 2e1d55a90..15f228aac 100644 --- a/sigma/builtin/process_creation/proc_creation_win_sdbinst_shim_persistence.yml +++ b/sigma/builtin/process_creation/proc_creation_win_sdbinst_shim_persistence.yml @@ -14,7 +14,7 @@ references: - https://www.mandiant.com/resources/blog/fin7-shim-databases-persistence author: Markus Neis date: 2019/01/16 -modified: 2023/08/01 +modified: 2023/12/06 tags: - attack.persistence - attack.privilege_escalation @@ -32,7 +32,9 @@ detection: selection_cli: CommandLine|contains: .sdb filter_optional_iis: - CommandLine|contains: iisexpressshim.sdb + CommandLine|contains: + - :\Program Files (x86)\IIS Express\iisexpressshim.sdb + - :\Program Files\IIS Express\iisexpressshim.sdb ParentProcessName|endswith: \msiexec.exe condition: process_creation and (all of selection_* and not 1 of filter_optional_*) falsepositives: diff --git a/sigma/builtin/process_creation/proc_creation_win_sdbinst_susp_extension.yml b/sigma/builtin/process_creation/proc_creation_win_sdbinst_susp_extension.yml index a7c9c5041..2fbea4123 100644 --- a/sigma/builtin/process_creation/proc_creation_win_sdbinst_susp_extension.yml +++ b/sigma/builtin/process_creation/proc_creation_win_sdbinst_susp_extension.yml @@ -1,4 +1,4 @@ -title: Suspicious Shim Database Installation via Sdbinst.EXE +title: Uncommon Extension Shim Database Installation Via Sdbinst.EXE id: 18ee686c-38a3-4f65-9f44-48a077141f42 related: - id: 517490a7-115a-48c6-8862-1a481504d5a8 @@ -15,7 +15,7 @@ references: - https://www.fireeye.com/blog/threat-research/2017/05/fin7-shim-databases-persistence.html author: Nasreddine Bencherchali (Nextron Systems) date: 2023/08/01 -modified: 2023/11/11 +modified: 2023/12/13 tags: - attack.persistence - attack.privilege_escalation @@ -32,14 +32,9 @@ detection: - OriginalFileName: sdbinst.exe filter_main_legit_ext: CommandLine|contains: .sdb - filter_main_svchost1: - CommandLine|contains: ' -m -bg' - ParentProcessName|endswith: :\Windows\System32\svchost.exe - NewProcessName|endswith: :\Windows\System32\sdbinst.exe - filter_main_svchost2: - CommandLine|endswith: ' -mm' - ParentProcessName|endswith: :\Windows\System32\svchost.exe - NewProcessName|endswith: :\Windows\System32\sdbinst.exe + filter_main_svchost: + - CommandLine|endswith: ' -mm' + - CommandLine|contains: ' -m -bg' filter_main_null: CommandLine: null filter_main_empty: @@ -47,5 +42,5 @@ detection: condition: process_creation and (selection and not 1 of filter_main_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_susp_bad_opsec_sacrificial_processes.yml b/sigma/builtin/process_creation/proc_creation_win_susp_bad_opsec_sacrificial_processes.yml index 516b047aa..4faa4e6d3 100644 --- a/sigma/builtin/process_creation/proc_creation_win_susp_bad_opsec_sacrificial_processes.yml +++ b/sigma/builtin/process_creation/proc_creation_win_susp_bad_opsec_sacrificial_processes.yml @@ -25,7 +25,7 @@ references: author: Oleg Kolesnikov @securonix invrep_de, oscd.community, Florian Roth (Nextron Systems), Christian Burkard (Nextron Systems) date: 2020/10/23 -modified: 2023/11/14 +modified: 2023/12/02 tags: - attack.defense_evasion - attack.t1218.011 @@ -64,7 +64,7 @@ detection: ParentProcessName|endswith: \Installer\setup.exe NewProcessName|endswith: \rundll32.exe condition: process_creation and (1 of selection_* and not 1 of filter_main_* and - 1 of filter_optional_*) + not 1 of filter_optional_*) falsepositives: - Unlikely level: high diff --git a/sigma/builtin/process_creation/proc_creation_win_susp_copy_lateral_movement.yml b/sigma/builtin/process_creation/proc_creation_win_susp_copy_lateral_movement.yml index 99dfbaee6..f39c5deb1 100644 --- a/sigma/builtin/process_creation/proc_creation_win_susp_copy_lateral_movement.yml +++ b/sigma/builtin/process_creation/proc_creation_win_susp_copy_lateral_movement.yml @@ -1,7 +1,8 @@ -title: Copy from Admin Share +title: Copy From Or To Admin Share Or Sysvol Folder id: 855bc8b5-2ae8-402e-a9ed-b889e6df1900 status: test -description: Detects a suspicious copy command to or from an Admin share or remote +description: Detects a copy command or a copy utility execution to or from an Admin + share or remote references: - https://twitter.com/SBousseaden/status/1211636381086339073 - https://drive.google.com/file/d/1lKya3_mLnR3UQuCoiYruO3qgu052_iS_/view @@ -10,7 +11,7 @@ references: author: Florian Roth (Nextron Systems), oscd.community, Teymur Kheirkhabarov @HeirhabarovT, Zach Stanford @svch0st, Nasreddine Bencherchali date: 2019/12/30 -modified: 2023/02/02 +modified: 2023/11/15 tags: - attack.lateral_movement - attack.collection @@ -25,6 +26,10 @@ detection: process_creation: EventID: 4688 Channel: Security + selection_target: + CommandLine|contains: + - \\\\*$ + - \Sysvol\ selection_other_tools: - NewProcessName|endswith: - \robocopy.exe @@ -54,14 +59,9 @@ detection: - move-item - ' mi ' - ' mv ' - selection_target: - - CommandLine|contains|all: - - \\\\ - - $ - - CommandLine|contains: \Sysvol\ condition: process_creation and (selection_target and (selection_other_tools or all of selection_cmd_* or all of selection_pwsh_*)) falsepositives: - Administrative scripts -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_susp_elevated_system_shell.yml b/sigma/builtin/process_creation/proc_creation_win_susp_elevated_system_shell.yml deleted file mode 100644 index b029ddd3c..000000000 --- a/sigma/builtin/process_creation/proc_creation_win_susp_elevated_system_shell.yml +++ /dev/null @@ -1,110 +0,0 @@ -title: Elevated System Shell Spawned -id: 178e615d-e666-498b-9630-9ed363038101 -status: experimental -description: Detects when a shell program such as the Windows command prompt or PowerShell - is launched with system privileges. -references: - - https://github.com/Wh04m1001/SysmonEoP -author: frack113, Tim Shelton (update fp) -date: 2022/12/05 -modified: 2023/10/11 -tags: - - attack.privilege_escalation - - attack.defense_evasion - - attack.execution - - attack.t1059 -logsource: - product: windows - category: process_creation -detection: - process_creation: - EventID: 4688 - Channel: Security - selection_shell: - - NewProcessName|endswith: - - \powershell.exe - - \pwsh.exe - - \cmd.exe - - OriginalFileName: - - PowerShell.EXE - - pwsh.dll - - Cmd.Exe - selection_user: - SubjectUserName|contains: - - AUTHORI - - AUTORI - SubjectLogonId: '0x3e7' - filter_main_generic: - ParentProcessName|contains: - - :\Windows\System32\ - - :\Program Files (x86)\ - - :\Program Files\ - NewProcessName|endswith: - - \cmd.exe - - \powershell.exe - filter_optional_manageengine: - ParentProcessName|endswith: :\ManageEngine\ADManager Plus\pgsql\bin\postgres.exe - NewProcessName|endswith: \cmd.exe - filter_optional_citrix: - ParentProcessName|contains: :\Windows\SysWOW64\config\systemprofile\Citrix\UpdaterBinaries\ - ParentProcessName|endswith: \CitrixReceiverUpdater.exe - NewProcessName|endswith: \cmd.exe - filter_optional_asgard: - CommandLine|contains: :\WINDOWS\system32\cmd.exe /c " - CurrentDirectory|contains: :\WINDOWS\Temp\asgard2-agent\ - filter_optional_dell_update: - ParentCommandLine|contains: :\ProgramData\Dell\UpdateService\ - ParentProcessName|contains: :\Windows\Temp - ParentProcessName|endswith: \invcol.exe - NewProcessName|endswith: \cmd.exe - filter_main_compattelrunner: - ParentCommandLine|contains: :\Windows\system32\CompatTelRunner.exe -m:appraiser.dll - -f:DoScheduledTelemetryRun - ParentProcessName|contains: - - :\Windows\System32 - - :\Windows\WinSxS\ - ParentProcessName|endswith: \CompatTelRunner.exe - filter_optional_ibm_spectrumprotect: - CommandLine|contains: :\IBM\SpectrumProtect\webserver\scripts\ - ParentProcessName|contains: :\IBM\SpectrumProtect\webserver\scripts\ - filter_main_msiexec: - ParentCommandLine|contains: :\Windows\syswow64\MsiExec.exe -Embedding - CommandLine|contains: \RegisterMicrosoftUpdate.ps1 - ParentProcessName|endswith: :\Windows\SysWOW64\msiexec.exe - filter_optional_avira_update: - CommandLine|contains: :\Windows\system32\cmd.exe" /C copy "C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe" - filter_main_empty_parent_1: - CommandLine|startswith: - - 'powershell.exe -ExecutionPolicy Restricted -Command $res = 0; ' - - 'powershell.exe -ExecutionPolicy Restricted -Command Write-Host ' - CommandLine|endswith: - - Write-Host 'Final result:', $Res; - - Write-Host "Final result:", $res - - 'Write-Host ''Final result: 1'';' - filter_main_empty_parent_2: - CommandLine|contains: /d /c C:\Windows\system32\silcollector.cmd - NewProcessName|endswith: \cmd.exe - filter_main_empty_parent_3: - CommandLine|endswith: - - cmd.exe /c btool server list replication_port --no-log - - cmd.exe /c btool server list general --no-log - NewProcessName|endswith: \cmd.exe - filter_main_empty_parent_4: - CommandLine|contains: :\Windows\system32\reg.exe query hklm\software\microsoft\windows\softwareinventorylogging - /v collectionstate /reg:64 - NewProcessName|endswith: \cmd.exe - filter_main_empty_parent_5: - CommandLine|endswith: :\Windows\system32\cmd.exe /c PAUSE - NewProcessName|endswith: :\Windows\System32\cmd.exe - filter_optional_empty_parent_6: - CommandLine|contains: :\IBM\SpectrumProtect\webserver\scripts\ - ParentProcessName: '' - filter_optional_empty_parent_7: - CommandLine|contains: :\IBM\SpectrumProtect\webserver\scripts\ - ParentProcessName: null - condition: process_creation and (all of selection_* and not 1 of filter_main_* - and not 1 of filter_optional_*) -falsepositives: - - Unknown -level: medium -ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_susp_elevated_system_shell_uncommon_parent.yml b/sigma/builtin/process_creation/proc_creation_win_susp_elevated_system_shell_uncommon_parent.yml new file mode 100644 index 000000000..d570a5b86 --- /dev/null +++ b/sigma/builtin/process_creation/proc_creation_win_susp_elevated_system_shell_uncommon_parent.yml @@ -0,0 +1,67 @@ +title: Elevated System Shell Spawned From Uncommon Parent Location +id: 178e615d-e666-498b-9630-9ed363038101 +related: + - id: 61065c72-5d7d-44ef-bf41-6a36684b545f + type: similar +status: experimental +description: Detects when a shell program such as the Windows command prompt or PowerShell + is launched with system privileges from a uncommon parent location. +references: + - https://github.com/Wh04m1001/SysmonEoP +author: frack113, Tim Shelton (update fp) +date: 2022/12/05 +modified: 2023/11/23 +tags: + - attack.privilege_escalation + - attack.defense_evasion + - attack.execution + - attack.t1059 +logsource: + product: windows + category: process_creation +detection: + process_creation: + EventID: 4688 + Channel: Security + selection_shell: + - NewProcessName|endswith: + - \powershell.exe + - \pwsh.exe + - \cmd.exe + - OriginalFileName: + - PowerShell.EXE + - pwsh.dll + - Cmd.Exe + selection_user: + SubjectUserName|contains: + - AUTHORI + - AUTORI + SubjectLogonId: '0x3e7' + filter_main_generic: + ParentProcessName|contains: + - :\Program Files (x86)\ + - :\Program Files\ + - :\ProgramData\ + - :\Windows\System32\ + - :\Windows\SysWOW64\ + - :\Windows\Temp\ + - :\Windows\WinSxS\ + filter_optional_manageengine: + ParentProcessName|endswith: :\ManageEngine\ADManager Plus\pgsql\bin\postgres.exe + NewProcessName|endswith: \cmd.exe + filter_optional_asgard: + CommandLine|contains: :\WINDOWS\system32\cmd.exe /c " + CurrentDirectory|contains: :\WINDOWS\Temp\asgard2-agent\ + filter_optional_ibm_spectrumprotect: + CommandLine|contains: :\IBM\SpectrumProtect\webserver\scripts\ + ParentProcessName|contains: :\IBM\SpectrumProtect\webserver\scripts\ + filter_main_parent_null: + ParentProcessName: null + filter_main_parent_empty: + ParentProcessName: '' + condition: process_creation and (all of selection_* and not 1 of filter_main_* + and not 1 of filter_optional_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_network_sniffing.yml b/sigma/builtin/process_creation/proc_creation_win_susp_network_sniffing.yml similarity index 100% rename from sigma/builtin/process_creation/proc_creation_win_network_sniffing.yml rename to sigma/builtin/process_creation/proc_creation_win_susp_network_sniffing.yml diff --git a/sigma/builtin/process_creation/proc_creation_win_susp_non_exe_image.yml b/sigma/builtin/process_creation/proc_creation_win_susp_non_exe_image.yml index d0ce8e06a..ed6d2a60a 100644 --- a/sigma/builtin/process_creation/proc_creation_win_susp_non_exe_image.yml +++ b/sigma/builtin/process_creation/proc_creation_win_susp_non_exe_image.yml @@ -1,14 +1,19 @@ title: Execution of Suspicious File Type Extension id: c09dad97-1c78-4f71-b127-7edb2b8e491a status: experimental -description: Checks whether the image specified in a process creation event doesn't - refer to an .exe file (caused by process ghosting or other unorthodox methods - to start a process) +description: 'Detects whether the image specified in a process creation event doesn''t + refer to an ".exe" (or other known executable extension) file. This can be caused + by process ghosting or other unorthodox methods to start a process. + + This rule might require some initial baselining to align with some third party + tooling in the user environment. + + ' references: - https://pentestlaboratories.com/2021/12/08/process-ghosting/ author: Max Altgelt (Nextron Systems) date: 2021/12/09 -modified: 2023/10/10 +modified: 2023/11/23 tags: - attack.defense_evasion logsource: @@ -20,9 +25,12 @@ detection: Channel: Security known_image_extension: NewProcessName|endswith: + - .bin + - .cgi + - .com - .exe - - .tmp - .scr + - .tmp filter_main_image: NewProcessName: - System @@ -30,82 +38,47 @@ detection: - MemCompression - vmmem filter_main_msi_installers: - NewProcessName|startswith: C:\Windows\Installer\MSI + NewProcessName|contains: :\Windows\Installer\MSI filter_main_driver_store: - NewProcessName|startswith: C:\Windows\System32\DriverStore\FileRepository\ + NewProcessName|contains: :\Windows\System32\DriverStore\FileRepository\ filter_main_msi_rollbackfiles: - NewProcessName|startswith: C:\Config.Msi\ + NewProcessName|contains: :\Config.Msi\ NewProcessName|endswith: - .rbf - .rbs - filter_main_windows_helper: - ParentProcessName|startswith: C:\Windows\Temp\ - NewProcessName|startswith: C:\Windows\Temp\Helper\ - filter_main_com: - NewProcessName|startswith: - - C:\Windows\System32\ - - C:\Windows\SysWOW64\ - NewProcessName|endswith: .com + filter_main_windows_temp: + - ParentProcessName|contains: :\Windows\Temp\ + - NewProcessName|contains: :\Windows\Temp\ filter_main_deleted: - NewProcessName|startswith: C:\$Extend\$Deleted\ - filter_optional_empty: + NewProcessName|contains: :\$Extend\$Deleted\ + filter_main_empty: NewProcessName: - '-' - '' - filter_optional_null: + filter_main_null: NewProcessName: null filter_optional_avira: - ParentProcessName|startswith: C:\ProgramData\Avira\ + ParentProcessName|contains: :\ProgramData\Avira\ filter_optional_nvidia: NewProcessName|contains: NVIDIA\NvBackend\ NewProcessName|endswith: .dat - filter_optional_winscp: - NewProcessName|endswith: \WinSCP.com - filter_optional_vscode: - NewProcessName|contains|all: - - C:\Users\ - - \AppData\ - - .tmp - - CodeSetup - filter_optional_libreoffice: - NewProcessName|endswith: \program\soffice.bin - filter_optional_openoffice: - NewProcessName|endswith: \program\unopkg.bin - filter_optional_emc_networker: - NewProcessName: - - C:\Program Files\EMC NetWorker\Management\GST\apache\cgi-bin\update_jnlp.cgi - - C:\Program Files (x86)\EMC NetWorker\Management\GST\apache\cgi-bin\update_jnlp.cgi filter_optional_winpakpro: - NewProcessName|startswith: - - C:\Program Files (x86)\WINPAKPRO\ - - C:\Program Files\WINPAKPRO\ + NewProcessName|contains: + - :\Program Files (x86)\WINPAKPRO\ + - :\Program Files\WINPAKPRO\ NewProcessName|endswith: .ngn filter_optional_myq_server: - NewProcessName: - - C:\Program Files (x86)\MyQ\Server\pcltool.dll - - C:\Program Files\MyQ\Server\pcltool.dll - filter_optional_visualstudio: - NewProcessName|startswith: - - C:\Program Files\Microsoft Visual Studio\ - - C:\Program Files (x86)\Microsoft Visual Studio - NewProcessName|endswith: .com + NewProcessName|endswith: + - :\Program Files (x86)\MyQ\Server\pcltool.dll + - :\Program Files\MyQ\Server\pcltool.dll filter_optional_wsl: NewProcessName|contains|all: - \AppData\Local\Packages\ - \LocalState\rootfs\ filter_optional_lzma_exe: NewProcessName|endswith: \LZMA_EXE - filter_optional_dell_dock: - ParentProcessName|startswith: C:\Windows\Temp\ - ParentProcessName|endswith: \TBT_Dock_Firmware\GetDockVer32W.exe - filter_optional_firefox_crashreporter: - NewProcessName|startswith: C:\Program Files\Mozilla Firefox\tobedeleted\ - filter_optional_office_c2r: - CommandLine|contains|all: - - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe - - /update UPDATEORCHESTRATOR displaylevel=False - ParentProcessName: C:\Windows\UUS\amd64\MoUsoCoreWorker.exe - NewProcessName|startswith: C:\$Extend\$Deleted\ + filter_optional_firefox: + NewProcessName|contains: :\Program Files\Mozilla Firefox\ filter_optional_docker: ParentProcessName: C:\Windows\System32\services.exe NewProcessName|endswith: com.docker.service @@ -113,5 +86,5 @@ detection: and not 1 of filter_optional_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_susp_recycle_bin_fake_execution.yml b/sigma/builtin/process_creation/proc_creation_win_susp_recycle_bin_fake_execution.yml index c21179ce6..973c89ec6 100644 --- a/sigma/builtin/process_creation/proc_creation_win_susp_recycle_bin_fake_execution.yml +++ b/sigma/builtin/process_creation/proc_creation_win_susp_recycle_bin_fake_execution.yml @@ -11,7 +11,7 @@ references: - https://unit42.paloaltonetworks.com/cloaked-ursa-phishing/ author: X__Junior (Nextron Systems) date: 2023/07/12 -modified: 2023/11/06 +modified: 2023/12/11 tags: - attack.persistence - attack.defense_evasion @@ -26,7 +26,6 @@ detection: NewProcessName|contains: - RECYCLERS.BIN\ - RECYCLER.BIN\ - - RECYCLE.BIN\ condition: process_creation and selection falsepositives: - Unknown diff --git a/sigma/builtin/process_creation/proc_creation_win_susp_sysnative.yml b/sigma/builtin/process_creation/proc_creation_win_susp_sysnative.yml index 2a3e64c90..f5953a1d3 100644 --- a/sigma/builtin/process_creation/proc_creation_win_susp_sysnative.yml +++ b/sigma/builtin/process_creation/proc_creation_win_susp_sysnative.yml @@ -7,7 +7,10 @@ references: - https://thedfirreport.com/2021/08/29/cobalt-strike-a-defenders-guide/ author: Max Altgelt (Nextron Systems) date: 2022/08/23 +modified: 2023/12/14 tags: + - attack.defense_evasion + - attack.privilege_escalation - attack.t1055 logsource: category: process_creation @@ -17,11 +20,9 @@ detection: EventID: 4688 Channel: Security sysnative: - CommandLine|startswith: C:\Windows\Sysnative\ + - CommandLine|contains: :\Windows\Sysnative\ + - NewProcessName|contains: :\Windows\Sysnative\ condition: process_creation and sysnative -fields: - - CommandLine - - ParentCommandLine falsepositives: - Unknown level: medium diff --git a/sigma/builtin/process_creation/proc_creation_win_svchost_susp_parent_process.yml b/sigma/builtin/process_creation/proc_creation_win_svchost_uncommon_parent_process.yml similarity index 70% rename from sigma/builtin/process_creation/proc_creation_win_svchost_susp_parent_process.yml rename to sigma/builtin/process_creation/proc_creation_win_svchost_uncommon_parent_process.yml index ee494a5e1..caad66399 100644 --- a/sigma/builtin/process_creation/proc_creation_win_svchost_susp_parent_process.yml +++ b/sigma/builtin/process_creation/proc_creation_win_svchost_uncommon_parent_process.yml @@ -1,7 +1,7 @@ -title: Suspicious Svchost Process +title: Uncommon Svchost Parent Process id: 01d2e2a1-5f09-44f7-9fc1-24faa7479b6d -status: test -description: Detects a suspicious svchost process start +status: experimental +description: Detects an uncommon svchost parent process author: Florian Roth (Nextron Systems) date: 2017/08/15 modified: 2022/06/28 @@ -17,25 +17,22 @@ detection: Channel: Security selection: NewProcessName|endswith: \svchost.exe - filter: + filter_main_generic: ParentProcessName|endswith: - - \services.exe - - \MsMpEng.exe - \Mrt.exe - - \rpcnet.exe + - \MsMpEng.exe - \ngen.exe + - \rpcnet.exe + - \services.exe - \TiWorker.exe - filter_null1: + filter_main_parent_null: ParentProcessName: null - filter_null2: - ParentProcessName: '' - filter_emptysysmon: - ParentProcessName: '-' - condition: process_creation and (selection and not 1 of filter*) -fields: - - CommandLine - - ParentCommandLine + filter_main_parent_empty: + ParentProcessName: + - '-' + - '' + condition: process_creation and (selection and not 1 of filter_main_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_tapinstall_execution.yml b/sigma/builtin/process_creation/proc_creation_win_tapinstall_execution.yml index cb4310f8c..da81ed22f 100644 --- a/sigma/builtin/process_creation/proc_creation_win_tapinstall_execution.yml +++ b/sigma/builtin/process_creation/proc_creation_win_tapinstall_execution.yml @@ -5,7 +5,7 @@ description: Well-known TAP software installation. Possible preparation for data using tunneling techniques author: Daniil Yugoslavskiy, Ian Davis, oscd.community date: 2019/10/24 -modified: 2023/02/13 +modified: 2023/12/11 tags: - attack.exfiltration - attack.t1048 @@ -18,15 +18,15 @@ detection: Channel: Security selection: NewProcessName|endswith: \tapinstall.exe - filter_avast: - NewProcessName: - - C:\Program Files\Avast Software\SecureLine VPN\tapinstall.exe - - C:\Program Files (x86)\Avast Software\SecureLine VPN\tapinstall.exe - filter_openvpn: - NewProcessName|startswith: C:\Program Files\OpenVPN Connect\drivers\tap\ - filter_protonvpn: - NewProcessName|startswith: C:\Program Files (x86)\Proton Technologies\ProtonVPNTap\installer\ - condition: process_creation and (selection and not 1 of filter_*) + filter_optional_avast: + NewProcessName|contains: + - :\Program Files\Avast Software\SecureLine VPN\ + - :\Program Files (x86)\Avast Software\SecureLine VPN\ + filter_optional_openvpn: + NewProcessName|contains: :\Program Files\OpenVPN Connect\drivers\tap\ + filter_optional_protonvpn: + NewProcessName|contains: :\Program Files (x86)\Proton Technologies\ProtonVPNTap\installer\ + condition: process_creation and (selection and not 1 of filter_optional_*) falsepositives: - Legitimate OpenVPN TAP insntallation level: medium diff --git a/sigma/builtin/process_creation/proc_creation_win_teams_suspicious_command_line_cred_access.yml b/sigma/builtin/process_creation/proc_creation_win_teams_suspicious_command_line_cred_access.yml index e9f6fcbc2..dcf54ad41 100644 --- a/sigma/builtin/process_creation/proc_creation_win_teams_suspicious_command_line_cred_access.yml +++ b/sigma/builtin/process_creation/proc_creation_win_teams_suspicious_command_line_cred_access.yml @@ -1,14 +1,19 @@ -title: Suspicious Command With Teams Objects Paths +title: Potentially Suspicious Command Targeting Teams Sensitive Files id: d2eb17db-1d39-41dc-b57f-301f6512fa75 status: experimental -description: Detects an access to authentication tokens and accounts of Microsoft - Teams desktop application. +description: 'Detects a commandline containing references to the Microsoft Teams database + or cookies files from a process other than Teams. + + The database might contain authentication tokens and other sensitive information + about the logged in accounts. + + ' references: - https://www.bleepingcomputer.com/news/security/microsoft-teams-stores-auth-tokens-as-cleartext-in-windows-linux-macs/ - https://www.vectra.ai/blogpost/undermining-microsoft-teams-security-by-mining-tokens author: '@SerkinValery' date: 2022/09/16 -modified: 2023/02/05 +modified: 2023/12/18 tags: - attack.credential_access - attack.t1528 @@ -23,10 +28,10 @@ detection: CommandLine|contains: - \Microsoft\Teams\Cookies - \Microsoft\Teams\Local Storage\leveldb - filter: + filter_main_legit_locations: NewProcessName|endswith: \Microsoft\Teams\current\Teams.exe - condition: process_creation and (selection and not filter) + condition: process_creation and (selection and not 1 of filter_main_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_whoami_all_execution.yml b/sigma/builtin/process_creation/proc_creation_win_whoami_all_execution.yml new file mode 100644 index 000000000..d7bb0d0b2 --- /dev/null +++ b/sigma/builtin/process_creation/proc_creation_win_whoami_all_execution.yml @@ -0,0 +1,33 @@ +title: Enumerate All Information With Whoami.EXE +id: c248c896-e412-4279-8c15-1c558067b6fa +status: experimental +description: Detects the execution of "whoami.exe" with the "/all" flag +references: + - https://brica.de/alerts/alert/public/1247926/agent-tesla-keylogger-delivered-inside-a-power-iso-daa-archive/ + - https://app.any.run/tasks/7eaba74e-c1ea-400f-9c17-5e30eee89906/ + - https://www.youtube.com/watch?v=DsJ9ByX84o4&t=6s +author: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) +date: 2023/12/04 +tags: + - attack.discovery + - attack.t1033 + - car.2016-03-001 +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 4688 + Channel: Security + selection_main_img: + - NewProcessName|endswith: \whoami.exe + - OriginalFileName: whoami.exe + selection_main_cli: + CommandLine|contains: + - ' -all' + - ' /all' + condition: process_creation and (all of selection_main_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_whoami_execution.yml b/sigma/builtin/process_creation/proc_creation_win_whoami_execution.yml index 95a208b67..2f0e4e816 100644 --- a/sigma/builtin/process_creation/proc_creation_win_whoami_execution.yml +++ b/sigma/builtin/process_creation/proc_creation_win_whoami_execution.yml @@ -8,7 +8,7 @@ references: - https://app.any.run/tasks/7eaba74e-c1ea-400f-9c17-5e30eee89906/ author: Florian Roth (Nextron Systems) date: 2018/08/13 -modified: 2023/02/28 +modified: 2023/11/30 tags: - attack.discovery - attack.t1033 @@ -28,5 +28,5 @@ falsepositives: - Admin activity - Scripts and administrative tools used in the monitored environment - Monitoring activity -level: medium +level: low ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_whoami_execution_from_high_priv_process.yml b/sigma/builtin/process_creation/proc_creation_win_whoami_execution_from_high_priv_process.yml index 66efeb5a2..f11b2c34e 100644 --- a/sigma/builtin/process_creation/proc_creation_win_whoami_execution_from_high_priv_process.yml +++ b/sigma/builtin/process_creation/proc_creation_win_whoami_execution_from_high_priv_process.yml @@ -1,4 +1,4 @@ -title: Suspicious Whoami.EXE Execution From Privileged Process +title: Whoami.EXE Execution From Privileged Process id: 79ce34ca-af29-4d0e-b832-fc1b377020db related: - id: 80167ada-7a12-41ed-b8e9-aa47195c66a1 @@ -11,7 +11,7 @@ references: - https://nsudo.m2team.org/en-us/ author: Florian Roth (Nextron Systems), Teymur Kheirkhabarov date: 2022/01/28 -modified: 2023/02/28 +modified: 2023/12/04 tags: - attack.privilege_escalation - attack.discovery diff --git a/sigma/builtin/process_creation/proc_creation_win_whoami_susp_flags.yml b/sigma/builtin/process_creation/proc_creation_win_whoami_output.yml similarity index 79% rename from sigma/builtin/process_creation/proc_creation_win_whoami_susp_flags.yml rename to sigma/builtin/process_creation/proc_creation_win_whoami_output.yml index b816320d8..90b496eb1 100644 --- a/sigma/builtin/process_creation/proc_creation_win_whoami_susp_flags.yml +++ b/sigma/builtin/process_creation/proc_creation_win_whoami_output.yml @@ -1,15 +1,16 @@ -title: Suspicious Whoami.EXE Execution +title: Whoami.EXE Execution With Output Option id: c30fb093-1109-4dc8-88a8-b30d11c95a5d status: experimental -description: Detects the execution of "whoami.exe" with the "/all" flag or with redirection - options to export the results to a file for later use. +description: Detects the execution of "whoami.exe" with the "/FO" flag to choose CSV + as output format or with redirection options to export the results to a file for + later use. references: - https://brica.de/alerts/alert/public/1247926/agent-tesla-keylogger-delivered-inside-a-power-iso-daa-archive/ - https://app.any.run/tasks/7eaba74e-c1ea-400f-9c17-5e30eee89906/ - https://www.youtube.com/watch?v=DsJ9ByX84o4&t=6s author: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) date: 2023/02/28 -modified: 2023/11/10 +modified: 2023/12/04 tags: - attack.discovery - attack.t1033 @@ -26,8 +27,6 @@ detection: - OriginalFileName: whoami.exe selection_main_cli: CommandLine|contains: - - ' -all' - - ' /all' - ' /FO CSV' - ' -FO CSV' selection_special: @@ -35,5 +34,5 @@ detection: condition: process_creation and (all of selection_main_* or selection_special) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_whoami_parent_anomaly.yml b/sigma/builtin/process_creation/proc_creation_win_whoami_parent_anomaly.yml index 19a83d841..f1b1dffbb 100644 --- a/sigma/builtin/process_creation/proc_creation_win_whoami_parent_anomaly.yml +++ b/sigma/builtin/process_creation/proc_creation_win_whoami_parent_anomaly.yml @@ -8,7 +8,7 @@ references: - https://www.youtube.com/watch?v=DsJ9ByX84o4&t=6s author: Florian Roth (Nextron Systems) date: 2021/08/12 -modified: 2023/02/28 +modified: 2023/12/04 tags: - attack.discovery - attack.t1033 @@ -23,22 +23,23 @@ detection: selection: - NewProcessName|endswith: \whoami.exe - OriginalFileName: whoami.exe - filter_generic: + filter_main_known_parents: ParentProcessName|endswith: - \cmd.exe + - \powershell_ise.exe - \powershell.exe - \pwsh.exe - - \powershell_ise.exe - filter_ms_monitoring_agent: - ParentProcessName: C:\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe - filter_parent_null: + filter_optional_ms_monitoring_agent: + ParentProcessName|endswith: :\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe + filter_main_parent_null: ParentProcessName: null - filter_parent_empty: + filter_main_parent_empty: ParentProcessName: '' - condition: process_creation and (selection and not 1 of filter_*) + condition: process_creation and (selection and not 1 of filter_main_* and not + 1 of filter_optional_*) falsepositives: - Admin activity - Scripts and administrative tools used in the monitored environment - Monitoring activity -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_winget_add_susp_custom_source.yml b/sigma/builtin/process_creation/proc_creation_win_winget_add_susp_custom_source.yml index e2dd9bfac..2d52b19d3 100644 --- a/sigma/builtin/process_creation/proc_creation_win_winget_add_susp_custom_source.yml +++ b/sigma/builtin/process_creation/proc_creation_win_winget_add_susp_custom_source.yml @@ -12,6 +12,7 @@ references: - https://github.com/nasbench/Misc-Research/tree/b9596e8109dcdb16ec353f316678927e507a5b8d/LOLBINs/Winget author: Nasreddine Bencherchali (Nextron Systems) date: 2023/04/17 +modified: 2023/12/04 tags: - attack.defense_evasion - attack.execution @@ -35,5 +36,5 @@ detection: condition: process_creation and (all of selection_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_wmic_recon_system_info.yml b/sigma/builtin/process_creation/proc_creation_win_wmic_recon_system_info.yml new file mode 100644 index 000000000..cf2bb97f3 --- /dev/null +++ b/sigma/builtin/process_creation/proc_creation_win_wmic_recon_system_info.yml @@ -0,0 +1,70 @@ +title: System Information Discovery Via Wmic.EXE +id: d85ecdd7-b855-4e6e-af59-d9c78b5b861e +related: + - id: 9d5a1274-922a-49d0-87f3-8c653483b909 + type: derived +status: experimental +description: 'Detects the use of the WMI command-line (WMIC) utility to identify and + display various system information, + + including OS, CPU, GPU, disk drive names, memory capacity, display resolution, + baseboard, BIOS, + + and GPU driver products/versions. + + ' +references: + - https://github.com/redcanaryco/atomic-red-team/blob/a2ccd19c37d0278b4ffa8583add3cf52060a5418/atomics/T1082/T1082.md#atomic-test-25---system-information-discovery-with-wmic + - https://nwgat.ninja/getting-system-information-with-wmic-on-windows/ + - https://blog.sekoia.io/aurora-a-rising-stealer-flying-under-the-radar + - https://blog.cyble.com/2023/01/18/aurora-a-stealer-using-shapeshifting-tactics/ + - https://app.any.run/tasks/a6aa0057-82ec-451f-8f99-55650ca537da/ + - https://www.virustotal.com/gui/file/d6f6bc10ae0e634ed4301d584f61418cee18e5d58ad9af72f8aa552dc4aaeca3/behavior +author: Joseliyo Sanchez, @Joseliyo_Jstnk +date: 2023/12/19 +tags: + - attack.discovery + - attack.t1082 +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 4688 + Channel: Security + selection_wmic: + - Description: WMI Commandline Utility + - OriginalFileName: wmic.exe + - NewProcessName|endswith: \WMIC.exe + selection_get: + CommandLine|contains: get + selection_classes: + CommandLine|contains: + - baseboard + - bios + - cpu + - diskdrive + - logicaldisk + - memphysical + - os + - path + - startup + - win32_videocontroller + selection_attributes: + CommandLine|contains: + - caption + - command + - driverversion + - maxcapacity + - name + - osarchitecture + - product + - size + - smbiosbiosversion + - version + - videomodedescription + condition: process_creation and (all of selection_*) +falsepositives: + - Unknown +level: low +ruletype: Sigma diff --git a/sigma/builtin/process_creation/proc_creation_win_wmic_recon_system_info_discovery.yml b/sigma/builtin/process_creation/proc_creation_win_wmic_recon_system_info_uncommon.yml similarity index 74% rename from sigma/builtin/process_creation/proc_creation_win_wmic_recon_system_info_discovery.yml rename to sigma/builtin/process_creation/proc_creation_win_wmic_recon_system_info_uncommon.yml index aa2e28e6c..be923913f 100644 --- a/sigma/builtin/process_creation/proc_creation_win_wmic_recon_system_info_discovery.yml +++ b/sigma/builtin/process_creation/proc_creation_win_wmic_recon_system_info_uncommon.yml @@ -1,5 +1,8 @@ -title: Potential System Information Discovery Via Wmic.EXE +title: Uncommon System Information Discovery Via Wmic.EXE id: 9d5a1274-922a-49d0-87f3-8c653483b909 +related: + - id: d85ecdd7-b855-4e6e-af59-d9c78b5b861e + type: derived status: experimental description: 'Detects the use of the WMI command-line (WMIC) utility to identify and display various system information, @@ -18,9 +21,10 @@ references: - https://blog.sekoia.io/aurora-a-rising-stealer-flying-under-the-radar - https://blog.cyble.com/2023/01/18/aurora-a-stealer-using-shapeshifting-tactics/ - https://app.any.run/tasks/a6aa0057-82ec-451f-8f99-55650ca537da/ + - https://www.virustotal.com/gui/file/d6f6bc10ae0e634ed4301d584f61418cee18e5d58ad9af72f8aa552dc4aaeca3/behavior author: TropChaud date: 2023/01/26 -modified: 2023/05/05 +modified: 2023/12/19 tags: - attack.discovery - attack.t1082 @@ -37,17 +41,8 @@ detection: - NewProcessName|endswith: \WMIC.exe selection_commands: CommandLine|contains: - - baseboard get product - - baseboard get version - - bios get SMBIOSBIOSVersion - - cpu get name - - DISKDRIVE get Caption - LOGICALDISK get Name,Size,FreeSpace - - MEMPHYSICAL get MaxCapacity - - OS get Caption,OSArchitecture,Version - - path win32_VideoController get DriverVersion - - path win32_VideoController get name - - path win32_VideoController get VideoModeDescription + - os get Caption,OSArchitecture,Version condition: process_creation and (all of selection_*) falsepositives: - Unknown diff --git a/sigma/builtin/registry/registry_set/registry_set_desktop_background_change.yml b/sigma/builtin/registry/registry_set/registry_set_desktop_background_change.yml new file mode 100644 index 000000000..94eea8ab4 --- /dev/null +++ b/sigma/builtin/registry/registry_set/registry_set_desktop_background_change.yml @@ -0,0 +1,56 @@ +title: Potentially Suspicious Desktop Background Change Via Registry +id: 85b88e05-dadc-430b-8a9e-53ff1cd30aae +related: + - id: 8cbc9475-8d05-4e27-9c32-df960716c701 + type: similar +status: experimental +description: 'Detects regsitry value settings that would replace the user''s desktop + background. + + This is a common technique used by malware to change the desktop background to + a ransom note or other image. + + ' +references: + - https://www.attackiq.com/2023/09/20/emulating-rhysida/ + - https://research.checkpoint.com/2023/the-rhysida-ransomware-activity-analysis-and-ties-to-vice-society/ + - https://www.trendmicro.com/en_us/research/23/h/an-overview-of-the-new-rhysida-ransomware.html + - https://www.virustotal.com/gui/file/a864282fea5a536510ae86c77ce46f7827687783628e4f2ceb5bf2c41b8cd3c6/behavior + - https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsDesktop::Wallpaper + - https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.ControlPanelDisplay::CPL_Personalization_NoDesktopBackgroundUI +author: Nasreddine Bencherchali (Nextron Systems), Stephen Lincoln @slincoln-aiq (AttackIQ) +date: 2023/12/21 +tags: + - attack.defense_evasion + - attack.impact + - attack.t1112 + - attack.t1491.001 +logsource: + product: windows + category: registry_set +detection: + registry_set: + EventID: 4657 + Channel: Security + selection_keys: + ObjectName|contains: + - Control Panel\Desktop + - CurrentVersion\Policies\ActiveDesktop + - CurrentVersion\Policies\System + selection_values_1: + ObjectName|endswith: NoChangingWallpaper + NewValue: DWORD (0x00000001) + selection_values_2: + ObjectName|endswith: \Wallpaper + selection_values_3: + ObjectName|endswith: \WallpaperStyle + NewValue: '2' + filter_main_svchost: + ProcessName|endswith: \svchost.exe + condition: registry_set and (selection_keys and 1 of selection_values_* and not + 1 of filter_main_*) +falsepositives: + - Administrative scripts that change the desktop background to a company logo + or other image. +level: medium +ruletype: Sigma diff --git a/sigma/builtin/registry/registry_set/registry_set_persistence_shim_database_susp_application.yml b/sigma/builtin/registry/registry_set/registry_set_persistence_shim_database_susp_application.yml index fa5b7075d..9d5f62be0 100644 --- a/sigma/builtin/registry/registry_set/registry_set_persistence_shim_database_susp_application.yml +++ b/sigma/builtin/registry/registry_set/registry_set_persistence_shim_database_susp_application.yml @@ -8,7 +8,7 @@ references: - https://www.fireeye.com/blog/threat-research/2017/05/fin7-shim-databases-persistence.html author: Nasreddine Bencherchali (Nextron Systems) date: 2023/08/01 -modified: 2023/08/17 +modified: 2023/12/06 tags: - attack.persistence - attack.t1546.011 @@ -25,10 +25,13 @@ detection: - \csrss.exe - \dllhost.exe - \explorer.exe + - \RuntimeBroker.exe - \services.exe + - \sihost.exe - \svchost.exe - \taskhostw.exe - \winlogon.exe + - \WmiPrvSe.exe condition: registry_set and selection falsepositives: - Unknown diff --git a/sigma/builtin/registry/registry_set/registry_set_powershell_execution_policy.yml b/sigma/builtin/registry/registry_set/registry_set_powershell_execution_policy.yml index eff6feaae..6188e4002 100644 --- a/sigma/builtin/registry/registry_set/registry_set_powershell_execution_policy.yml +++ b/sigma/builtin/registry/registry_set/registry_set_powershell_execution_policy.yml @@ -14,7 +14,7 @@ references: - https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-7.3 author: Nasreddine Bencherchali (Nextron Systems) date: 2023/01/11 -modified: 2023/10/18 +modified: 2023/12/14 tags: - attack.defense_evasion logsource: @@ -30,7 +30,6 @@ detection: - \Policies\Microsoft\Windows\PowerShell\ExecutionPolicy NewValue|contains: - Bypass - - RemoteSigned - Unrestricted filter_main_svchost: ProcessName|contains: diff --git a/sigma/builtin/registry/registry_set/registry_set_susp_reg_persist_explorer_run.yml b/sigma/builtin/registry/registry_set/registry_set_susp_reg_persist_explorer_run.yml index 4863c5c1e..5fb754e1d 100644 --- a/sigma/builtin/registry/registry_set/registry_set_susp_reg_persist_explorer_run.yml +++ b/sigma/builtin/registry/registry_set/registry_set_susp_reg_persist_explorer_run.yml @@ -7,7 +7,7 @@ references: - https://researchcenter.paloaltonetworks.com/2018/07/unit42-upatre-continues-evolve-new-anti-analysis-techniques/ author: Florian Roth (Nextron Systems), oscd.community date: 2018/07/18 -modified: 2023/08/17 +modified: 2023/12/11 tags: - attack.persistence - attack.t1547.001 @@ -20,19 +20,15 @@ detection: Channel: Security selection: ObjectName|endswith: \Microsoft\Windows\CurrentVersion\Policies\Explorer\Run - selection2: - - NewValue|startswith: - - C:\Windows\Temp\ - - C:\ProgramData\ - - C:\$Recycle.bin\ - - C:\Temp\ - - C:\Users\Public\ - - C:\Users\Default\ - - NewValue|contains: \AppData\ - condition: registry_set and (selection and selection2) -fields: - - ProcessName - - ParentImage + NewValue|contains: + - :\$Recycle.bin\ + - :\ProgramData\ + - :\Temp\ + - :\Users\Default\ + - :\Users\Public\ + - :\Windows\Temp\ + - \AppData\Local\Temp\ + condition: registry_set and selection falsepositives: - Unknown level: high diff --git a/sigma/builtin/registry/registry_set/registry_set_susp_run_key_img_folder.yml b/sigma/builtin/registry/registry_set/registry_set_susp_run_key_img_folder.yml index 69f77897d..48555c5d2 100644 --- a/sigma/builtin/registry/registry_set/registry_set_susp_run_key_img_folder.yml +++ b/sigma/builtin/registry/registry_set/registry_set_susp_run_key_img_folder.yml @@ -7,7 +7,7 @@ references: - https://www.fireeye.com/blog/threat-research/2018/08/fin7-pursuing-an-enigmatic-and-evasive-global-criminal-operation.html author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing date: 2018/08/25 -modified: 2023/08/17 +modified: 2023/12/11 tags: - attack.persistence - attack.t1547.001 @@ -24,12 +24,12 @@ detection: - \SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ selection_details: - NewValue|contains: - - C:\Windows\Temp\ - - C:\$Recycle.bin\ - - C:\Temp\ - - C:\Users\Public\ - - C:\Users\Default\ - - C:\Users\Desktop\ + - :\$Recycle.bin\ + - :\Temp\ + - :\Users\Default\ + - :\Users\Desktop\ + - :\Users\Public\ + - :\Windows\Temp\ - \AppData\Local\Temp\ - '%temp%\' - '%tmp%\' diff --git a/sigma/builtin/security/win_security_admin_logon.yml b/sigma/builtin/security/win_security_admin_logon.yml deleted file mode 100644 index a0febd9b7..000000000 --- a/sigma/builtin/security/win_security_admin_logon.yml +++ /dev/null @@ -1,36 +0,0 @@ -title: User with Privileges Logon -id: 94309181-d345-4cbf-b5fe-061769bdf9cb -status: test -description: Detects logon with "Special groups" and "Special Privileges" can be thought - of as Administrator groups or privileges. -references: - - https://github.com/Yamato-Security/EnableWindowsLogSettings/blob/7f6d755d45ac7cc9fc35b0cbf498e6aa4ef19def/ConfiguringSecurityLogAuditPolicies.md - - https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4672 - - https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-4964 -author: frack113 -date: 2022/10/14 -modified: 2022/10/22 -tags: - - attack.defense_evasion - - attack.lateral_movement - - attack.credential_access - - attack.t1558 - - attack.t1649 - - attack.t1550 -logsource: - service: security - product: windows -detection: - security: - Channel: Security - selection: - EventID: - - 4672 - - 4964 - filter: - SubjectUserSid: S-1-5-18 - condition: security and (selection and not filter) -falsepositives: - - Unknown -level: low -ruletype: Sigma diff --git a/sigma/builtin/security/win_security_susp_eventlog_cleared.yml b/sigma/builtin/security/win_security_audit_log_cleared.yml similarity index 84% rename from sigma/builtin/security/win_security_susp_eventlog_cleared.yml rename to sigma/builtin/security/win_security_audit_log_cleared.yml index 1092e914c..f4c8d986d 100644 --- a/sigma/builtin/security/win_security_susp_eventlog_cleared.yml +++ b/sigma/builtin/security/win_security_audit_log_cleared.yml @@ -3,12 +3,15 @@ id: d99b79d2-0a6f-4f46-ad8b-260b6e17f982 related: - id: f2f01843-e7b8-4f95-a35a-d23584476423 type: obsoletes + - id: a122ac13-daf8-4175-83a2-72c387be339d + type: obsoletes status: test description: One of the Windows Eventlogs has been cleared. e.g. caused by "wevtutil cl" command execution references: - https://twitter.com/deviouspolack/status/832535435960209408 - https://www.hybrid-analysis.com/sample/027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745?environmentId=100 + - https://github.com/Azure/Azure-Sentinel/blob/f99542b94afe0ad2f19a82cc08262e7ac8e1428e/Detections/SecurityEvent/SecurityEventLogCleared.yaml author: Florian Roth (Nextron Systems) date: 2017/01/10 modified: 2022/02/24 diff --git a/sigma/builtin/security/win_security_susp_codeintegrity_check_failure.yml b/sigma/builtin/security/win_security_codeintegrity_check_failure.yml similarity index 80% rename from sigma/builtin/security/win_security_susp_codeintegrity_check_failure.yml rename to sigma/builtin/security/win_security_codeintegrity_check_failure.yml index aa5339fc7..ac9f6ed33 100644 --- a/sigma/builtin/security/win_security_susp_codeintegrity_check_failure.yml +++ b/sigma/builtin/security/win_security_codeintegrity_check_failure.yml @@ -1,11 +1,13 @@ title: Failed Code Integrity Checks id: 470ec5fa-7b4e-4071-b200-4c753100f49b status: stable -description: Detects code integrity failures such as missing page hashes or corrupted +description: 'Detects code integrity failures such as missing page hashes or corrupted drivers due unauthorized modification. This could be a sign of tampered binaries. + + ' author: Thomas Patzke date: 2019/12/03 -modified: 2020/08/23 +modified: 2023/12/13 tags: - attack.defense_evasion - attack.t1027.001 @@ -22,5 +24,5 @@ detection: condition: security and selection falsepositives: - Disk device errors -level: low +level: informational ruletype: Sigma diff --git a/sigma/builtin/security/win_security_disable_event_auditing.yml b/sigma/builtin/security/win_security_disable_event_auditing.yml index 30a8ed30a..ee9bef55e 100644 --- a/sigma/builtin/security/win_security_disable_event_auditing.yml +++ b/sigma/builtin/security/win_security_disable_event_auditing.yml @@ -23,7 +23,7 @@ references: - https://docs.google.com/presentation/d/1dkrldTTlN3La-OjWtkWJBb4hVk6vfsSMBFBERs6R8zA/edit author: '@neu5ron, Nasreddine Bencherchali (Nextron Systems)' date: 2017/11/19 -modified: 2021/11/27 +modified: 2023/11/15 tags: - attack.defense_evasion - attack.t1562.002 @@ -41,23 +41,23 @@ detection: - '%%8450' filter_main_guid: SubcategoryGuid: - - '{0CCE9215-69AE-11D9-BED3-505054503030}' - - '{0CCE922B-69AE-11D9-BED3-505054503030}' - - '{0CCE9240-69AE-11D9-BED3-505054503030}' - '{0CCE9210-69AE-11D9-BED3-505054503030}' - '{0CCE9211-69AE-11D9-BED3-505054503030}' - '{0CCE9212-69AE-11D9-BED3-505054503030}' + - '{0CCE9215-69AE-11D9-BED3-505054503030}' + - '{0CCE9217-69AE-11D9-BED3-505054503030}' - '{0CCE921B-69AE-11D9-BED3-505054503030}' + - '{0CCE922B-69AE-11D9-BED3-505054503030}' - '{0CCE922F-69AE-11D9-BED3-505054503030}' - '{0CCE9230-69AE-11D9-BED3-505054503030}' - '{0CCE9235-69AE-11D9-BED3-505054503030}' - '{0CCE9236-69AE-11D9-BED3-505054503030}' - '{0CCE9237-69AE-11D9-BED3-505054503030}' - '{0CCE923F-69AE-11D9-BED3-505054503030}' + - '{0CCE9240-69AE-11D9-BED3-505054503030}' - '{0CCE9242-69AE-11D9-BED3-505054503030}' - - '{0CCE9217-69AE-11D9-BED3-505054503030}' - condition: security and (selection and not filter_main_guid) + condition: security and (selection and not 1 of filter_main_*) falsepositives: - Unknown -level: medium +level: low ruletype: Sigma diff --git a/sigma/builtin/security/win_security_disable_event_auditing_critical.yml b/sigma/builtin/security/win_security_disable_event_auditing_critical.yml index 6351376c4..edefc9ec5 100644 --- a/sigma/builtin/security/win_security_disable_event_auditing_critical.yml +++ b/sigma/builtin/security/win_security_disable_event_auditing_critical.yml @@ -11,6 +11,7 @@ references: - https://github.com/SigmaHQ/sigma/blob/master/documentation/logsource-guides/windows/service/security.md author: Nasreddine Bencherchali (Nextron Systems) date: 2023/06/20 +modified: 2023/11/17 tags: - attack.defense_evasion - attack.t1562.002 @@ -24,19 +25,19 @@ detection: selection_state_success_and_failure: EventID: 4719 SubcategoryGuid: - - '{0CCE9215-69AE-11D9-BED3-505054503030}' - - '{0CCE922B-69AE-11D9-BED3-505054503030}' - - '{0CCE9240-69AE-11D9-BED3-505054503030}' - '{0CCE9210-69AE-11D9-BED3-505054503030}' - '{0CCE9211-69AE-11D9-BED3-505054503030}' - '{0CCE9212-69AE-11D9-BED3-505054503030}' + - '{0CCE9215-69AE-11D9-BED3-505054503030}' - '{0CCE921B-69AE-11D9-BED3-505054503030}' + - '{0CCE922B-69AE-11D9-BED3-505054503030}' - '{0CCE922F-69AE-11D9-BED3-505054503030}' - '{0CCE9230-69AE-11D9-BED3-505054503030}' - '{0CCE9235-69AE-11D9-BED3-505054503030}' - '{0CCE9236-69AE-11D9-BED3-505054503030}' - '{0CCE9237-69AE-11D9-BED3-505054503030}' - '{0CCE923F-69AE-11D9-BED3-505054503030}' + - '{0CCE9240-69AE-11D9-BED3-505054503030}' - '{0CCE9242-69AE-11D9-BED3-505054503030}' AuditPolicyChanges|contains: - '%%8448' diff --git a/sigma/builtin/security/win_security_lsass_access_non_system_account.yml b/sigma/builtin/security/win_security_lsass_access_non_system_account.yml index b2df24c8d..a4db591c0 100644 --- a/sigma/builtin/security/win_security_lsass_access_non_system_account.yml +++ b/sigma/builtin/security/win_security_lsass_access_non_system_account.yml @@ -1,4 +1,4 @@ -title: LSASS Access from Non System Account +title: LSASS Access From Non System Account id: 962fe167-e48d-4fd6-9974-11e5b9a5d6d1 status: test description: Detects potential mimikatz-like tools accessing LSASS from non system @@ -7,7 +7,7 @@ references: - https://threathunterplaybook.com/hunts/windows/170105-LSASSMemoryReadAccess/notebook.html author: Roberto Rodriguez @Cyb3rWard0g date: 2019/06/20 -modified: 2022/11/13 +modified: 2023/12/11 tags: - attack.credential_access - attack.t1003.001 @@ -22,49 +22,38 @@ detection: - 4663 - 4656 AccessMask: - - '0x40' - - '0x1400' - '0x100000' - - '0x1410' - '0x1010' + - '0x1400' + - '0x1410' + - '0x1418' - '0x1438' - '0x143a' - - '0x1418' - '0x1f0fff' - '0x1f1fff' - '0x1f2fff' - '0x1f3fff' - - 40 - - 1400 - - 1000 - - 100000 - - 1410 - - 1010 - - 1438 + - '0x40' - 143a - - 1418 - 1f0fff - 1f1fff - 1f2fff - 1f3fff ObjectType: Process ObjectName|endswith: \lsass.exe - filter1: + filter_main_service_account: SubjectUserName|endswith: $ - filter2: - ProcessName|startswith: C:\Program Files - filter3: + filter_main_generic: + ProcessName|contains: + - :\Program Files\ + - :\Program Files (x86)\ + filter_main_wmiprvse: ProcessName: C:\Windows\System32\wbem\WmiPrvSE.exe AccessMask: '0x1410' - filter_games: + filter_optional_steam: ProcessName|contains: \SteamLibrary\steamapps\ - condition: security and (selection and not 1 of filter*) -fields: - - ComputerName - - ObjectName - - SubjectUserName - - ProcessName + condition: security and (selection and not 1 of filter_main_* and not 1 of filter_optional_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/builtin/security/win_security_meterpreter_or_cobaltstrike_getsystem_service_install.yml b/sigma/builtin/security/win_security_meterpreter_or_cobaltstrike_getsystem_service_install.yml index b73e98862..f5aec11a9 100644 --- a/sigma/builtin/security/win_security_meterpreter_or_cobaltstrike_getsystem_service_install.yml +++ b/sigma/builtin/security/win_security_meterpreter_or_cobaltstrike_getsystem_service_install.yml @@ -9,9 +9,9 @@ description: Detects the use of getsystem Meterpreter/Cobalt Strike command by d references: - https://speakerdeck.com/heirhabarov/hunting-for-privilege-escalation-in-windows-environment - https://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/ -author: Teymur Kheirkhabarov, Ecco, Florian Roth +author: Teymur Kheirkhabarov, Ecco, Florian Roth (Nextron Systems) date: 2019/10/26 -modified: 2022/11/29 +modified: 2023/11/15 tags: - attack.privilege_escalation - attack.t1134.001 @@ -24,35 +24,25 @@ logsource: detection: security: Channel: Security - selection_id: + selection_eid: EventID: 4697 - selection: - - ServiceFileName|contains|all: - - cmd - - /c - - echo - - \pipe\ - - ServiceFileName|contains|all: - - '%COMSPEC%' - - /c - - echo - - \pipe\ - - ServiceFileName|contains|all: - - cmd.exe - - /c - - echo - - \pipe\ - - ServiceFileName|contains|all: - - rundll32 - - .dll,a - - '/p:' - condition: security and (selection_id and selection) -fields: - - ComputerName - - SubjectDomainName - - SubjectUserName - - ServiceFileName + selection_cli_cmd: + ServiceFileName|contains|all: + - /c + - echo + - \pipe\ + ServiceFileName|contains: + - cmd + - '%COMSPEC%' + selection_cli_rundll: + ServiceFileName|contains|all: + - rundll32 + - .dll,a + - '/p:' + selection_cli_share: + ServiceFileName|startswith: \\\\127.0.0.1\\ADMIN$\ + condition: security and (selection_eid and 1 of selection_cli_*) falsepositives: - - Highly unlikely -level: critical + - Unlikely +level: high ruletype: Sigma diff --git a/sigma/builtin/security/win_security_service_install_remote_access_software.yml b/sigma/builtin/security/win_security_service_install_remote_access_software.yml index 8d30304b0..80288f8ef 100644 --- a/sigma/builtin/security/win_security_service_install_remote_access_software.yml +++ b/sigma/builtin/security/win_security_service_install_remote_access_software.yml @@ -10,7 +10,7 @@ references: - https://redcanary.com/blog/misbehaving-rats/ author: Connor Martin, Nasreddine Bencherchali (Nextron Systems) date: 2022/12/23 -modified: 2023/06/22 +modified: 2023/11/15 tags: - attack.persistence - attack.t1543.003 @@ -25,7 +25,7 @@ detection: Channel: Security selection: EventID: 4697 - ServiceFileName|contains: + ServiceName|contains: - AmmyyAdmin - Atera - BASupportExpressSrvcUpdater diff --git a/sigma/builtin/security/win_security_service_installation_by_unusal_client.yml b/sigma/builtin/security/win_security_service_installation_by_unusal_client.yml index b5d450d49..90888421c 100644 --- a/sigma/builtin/security/win_security_service_installation_by_unusal_client.yml +++ b/sigma/builtin/security/win_security_service_installation_by_unusal_client.yml @@ -8,8 +8,9 @@ description: Detects a service installed by a client which has PID 0 or whose pa has PID 0 references: - https://www.elastic.co/guide/en/security/current/windows-service-installed-via-an-unusual-client.html + - https://www.x86matthew.com/view_post?id=create_svc_rpc - https://twitter.com/SBousseaden/status/1490608838701166596 -author: Tim Rauch +author: Tim Rauch (Nextron Systems), Elastic date: 2022/09/15 modified: 2023/01/04 tags: @@ -18,17 +19,17 @@ tags: logsource: service: security product: windows - definition: The 'System Security Extension' audit subcategory need to be enabled - to log the EID 4697 + definition: 'Requirements: The System Security Extension audit subcategory need + to be enabled to log the EID 4697' detection: security: Channel: Security - selection: + selection_eid: EventID: 4697 selection_pid: - ClientProcessId: 0 - ParentProcessId: 0 - condition: security and (all of selection*) + condition: security and (all of selection_*) falsepositives: - Unknown level: high diff --git a/sigma/builtin/security/win_security_susp_lsass_dump_generic.yml b/sigma/builtin/security/win_security_susp_lsass_dump_generic.yml index bea53f3d5..da04386fb 100644 --- a/sigma/builtin/security/win_security_susp_lsass_dump_generic.yml +++ b/sigma/builtin/security/win_security_susp_lsass_dump_generic.yml @@ -8,7 +8,7 @@ references: author: Roberto Rodriguez, Teymur Kheirkhabarov, Dimitrios Slamaris, Mark Russinovich, Aleksey Potapov, oscd.community (update) date: 2019/11/01 -modified: 2023/10/11 +modified: 2023/12/19 tags: - attack.credential_access - car.2019-04-004 @@ -104,7 +104,13 @@ detection: ProcessName|contains: :\Windows\SystemTemp\ ProcessName|endswith: \GoogleUpdate.exe AccessList|contains: '%%4484' - condition: security and (1 of selection_* and not 1 of filter_main_*) + filter_optional_procmon: + ProcessName|endswith: + - \procmon64.exe + - \procmon.exe + AccessList|contains: '%%4484' + condition: security and (1 of selection_* and not 1 of filter_main_* and not 1 + of filter_optional_*) falsepositives: - Legitimate software accessing LSASS process for legitimate reason; update the whitelist with it diff --git a/sigma/builtin/security/win_security_workstation_was_locked.yml b/sigma/builtin/security/win_security_workstation_was_locked.yml index 765b1b988..d63469618 100644 --- a/sigma/builtin/security/win_security_workstation_was_locked.yml +++ b/sigma/builtin/security/win_security_workstation_was_locked.yml @@ -1,12 +1,8 @@ title: Locked Workstation id: 411742ad-89b0-49cb-a7b0-3971b5c1e0a4 status: stable -description: 'Automatically lock workstation sessions after a standard period of inactivity. - - The case is not applicable for Unix OS. Supported OS - Windows 2008 R2 and 7, - Windows 2012 R2 and 8.1, Windows 2016 and 10 Windows Server 2019. - - ' +description: Detects locked workstation session events that occur automatically after + a standard period of inactivity. references: - https://www.cisecurity.org/controls/cis-controls-list/ - https://www.pcisecuritystandards.org/documents/PCI_DSS_v3-2-1.pdf @@ -14,6 +10,7 @@ references: - https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=4800 author: Alexandr Yampolskyi, SOC Prime date: 2019/03/26 +modified: 2023/12/11 logsource: product: windows service: security @@ -24,6 +21,6 @@ detection: EventID: 4800 condition: security and selection falsepositives: - - Unknown -level: low + - Likely +level: informational ruletype: Sigma diff --git a/sigma/builtin/system/microsoft_windows_eventlog/win_system_eventlog_cleared.yml b/sigma/builtin/system/microsoft_windows_eventlog/win_system_eventlog_cleared.yml index 75081ef4e..081afcad6 100644 --- a/sigma/builtin/system/microsoft_windows_eventlog/win_system_eventlog_cleared.yml +++ b/sigma/builtin/system/microsoft_windows_eventlog/win_system_eventlog_cleared.yml @@ -15,7 +15,7 @@ references: - https://www.hybrid-analysis.com/sample/027cc450ef5f8c5f653329641ec1fed91f694e0d229928963b30f6b0d7d3a745?environmentId=100 author: Florian Roth (Nextron Systems) date: 2017/01/10 -modified: 2023/05/16 +modified: 2023/11/15 tags: - attack.defense_evasion - attack.t1070.001 @@ -29,16 +29,15 @@ detection: selection: EventID: 104 Provider_Name: Microsoft-Windows-Eventlog - filter: + filter_main_covered: Channel: - - Application - Microsoft-Windows-PowerShell/Operational - Microsoft-Windows-Sysmon/Operational - PowerShellCore/Operational - Security - System - Windows PowerShell - condition: system and (selection and not filter) + condition: system and (selection and not 1 of filter_main_*) falsepositives: - Rollout of log collection agents (the setup routine often includes a reset of the local Eventlog) diff --git a/sigma/builtin/system/microsoft_windows_eventlog/win_system_susp_eventlog_cleared.yml b/sigma/builtin/system/microsoft_windows_eventlog/win_system_susp_eventlog_cleared.yml index 881eea16b..edb0bee55 100644 --- a/sigma/builtin/system/microsoft_windows_eventlog/win_system_susp_eventlog_cleared.yml +++ b/sigma/builtin/system/microsoft_windows_eventlog/win_system_susp_eventlog_cleared.yml @@ -12,7 +12,7 @@ references: author: Florian Roth (Nextron Systems), Tim Shelton, Nasreddine Bencherchali (Nextron Systems) date: 2022/05/17 -modified: 2023/05/16 +modified: 2023/11/15 tags: - attack.defense_evasion - attack.t1070.001 @@ -27,7 +27,6 @@ detection: EventID: 104 Provider_Name: Microsoft-Windows-Eventlog Channel: - - Application - Microsoft-Windows-PowerShell/Operational - Microsoft-Windows-Sysmon/Operational - PowerShellCore/Operational diff --git a/sigma/builtin/system/service_control_manager/win_system_meterpreter_or_cobaltstrike_getsystem_service_installation.yml b/sigma/builtin/system/service_control_manager/win_system_meterpreter_or_cobaltstrike_getsystem_service_installation.yml index 559e301ca..0ca73ac59 100644 --- a/sigma/builtin/system/service_control_manager/win_system_meterpreter_or_cobaltstrike_getsystem_service_installation.yml +++ b/sigma/builtin/system/service_control_manager/win_system_meterpreter_or_cobaltstrike_getsystem_service_installation.yml @@ -6,9 +6,9 @@ description: Detects the use of getsystem Meterpreter/Cobalt Strike command by d references: - https://speakerdeck.com/heirhabarov/hunting-for-privilege-escalation-in-windows-environment - https://blog.cobaltstrike.com/2014/04/02/what-happens-when-i-type-getsystem/ -author: Teymur Kheirkhabarov, Ecco, Florian Roth +author: Teymur Kheirkhabarov, Ecco, Florian Roth (Nextron Systems) date: 2019/10/26 -modified: 2022/11/29 +modified: 2023/11/15 tags: - attack.privilege_escalation - attack.t1134.001 @@ -22,34 +22,23 @@ detection: selection_id: Provider_Name: Service Control Manager EventID: 7045 - selection: - - ImagePath|contains|all: - - cmd - - /c - - echo - - \pipe\ - - ImagePath|contains|all: - - '%COMSPEC%' - - /c - - echo - - \pipe\ - - ImagePath|contains|all: - - cmd.exe - - /c - - echo - - \pipe\ - - ImagePath|contains|all: - - rundll32 - - .dll,a - - '/p:' - - ImagePath|startswith: \\\\127.0.0.1\\ADMIN$\ - condition: system and (selection_id and selection) -fields: - - ComputerName - - SubjectDomainName - - SubjectUserName - - ImagePath + selection_cli_cmd: + ImagePath|contains|all: + - /c + - echo + - \pipe\ + ImagePath|contains: + - cmd + - '%COMSPEC%' + selection_cli_rundll: + ImagePath|contains|all: + - rundll32 + - .dll,a + - '/p:' + selection_cli_share: + ImagePath|startswith: \\\\127.0.0.1\\ADMIN$\ + condition: system and (selection_id and 1 of selection_cli_*) falsepositives: - - Highly unlikely -level: critical + - Unlikely +level: high ruletype: Sigma diff --git a/sigma/builtin/system/service_control_manager/win_system_susp_proceshacker.yml b/sigma/builtin/system/service_control_manager/win_system_service_install_pua_proceshacker.yml similarity index 100% rename from sigma/builtin/system/service_control_manager/win_system_susp_proceshacker.yml rename to sigma/builtin/system/service_control_manager/win_system_service_install_pua_proceshacker.yml diff --git a/sigma/builtin/system/service_control_manager/win_system_system_service_installation_by_unusal_client.yml b/sigma/builtin/system/service_control_manager/win_system_service_install_sups_unusal_client.yml similarity index 94% rename from sigma/builtin/system/service_control_manager/win_system_system_service_installation_by_unusal_client.yml rename to sigma/builtin/system/service_control_manager/win_system_service_install_sups_unusal_client.yml index ed97c2fb7..8f050e89f 100644 --- a/sigma/builtin/system/service_control_manager/win_system_system_service_installation_by_unusal_client.yml +++ b/sigma/builtin/system/service_control_manager/win_system_service_install_sups_unusal_client.yml @@ -8,7 +8,7 @@ description: Detects a service installed by a client which has PID 0 or whose pa has PID 0 references: - https://www.elastic.co/guide/en/security/current/windows-service-installed-via-an-unusual-client.html -author: Tim Rauch +author: Tim Rauch (Nextron Systems), Elastic date: 2022/09/15 modified: 2023/01/04 tags: diff --git a/sigma/builtin/system/service_control_manager/win_system_service_install_susp.yml b/sigma/builtin/system/service_control_manager/win_system_service_install_susp.yml new file mode 100644 index 000000000..b458d9437 --- /dev/null +++ b/sigma/builtin/system/service_control_manager/win_system_service_install_susp.yml @@ -0,0 +1,41 @@ +title: Suspicious Service Installation +id: 1d61f71d-59d2-479e-9562-4ff5f4ead16b +related: + - id: ca83e9f3-657a-45d0-88d6-c1ac280caf53 + type: obsoletes + - id: 26481afe-db26-4228-b264-25a29fe6efc7 + type: similar +status: test +description: Detects suspicious service installation commands +author: pH-T (Nextron Systems), Florian Roth (Nextron Systems) +date: 2022/03/18 +modified: 2023/12/04 +tags: + - attack.persistence + - attack.privilege_escalation + - car.2013-09-005 + - attack.t1543.003 +logsource: + product: windows + service: system +detection: + system: + Channel: System + selection: + Provider_Name: Service Control Manager + EventID: 7045 + ImagePath|contains: + - ' -nop ' + - ' -sta ' + - ' -w hidden ' + - :\Temp\ + - .downloadfile( + - .downloadstring( + - \ADMIN$\ + - \Perflogs\ + - '&&' + condition: system and selection +falsepositives: + - Unknown +level: high +ruletype: Sigma diff --git a/sigma/builtin/system/service_control_manager/win_system_tap_driver_installation.yml b/sigma/builtin/system/service_control_manager/win_system_service_install_tap_driver.yml similarity index 100% rename from sigma/builtin/system/service_control_manager/win_system_tap_driver_installation.yml rename to sigma/builtin/system/service_control_manager/win_system_service_install_tap_driver.yml diff --git a/sigma/builtin/system/service_control_manager/win_system_service_install_uncommon.yml b/sigma/builtin/system/service_control_manager/win_system_service_install_uncommon.yml new file mode 100644 index 000000000..193291319 --- /dev/null +++ b/sigma/builtin/system/service_control_manager/win_system_service_install_uncommon.yml @@ -0,0 +1,52 @@ +title: Uncommon Service Installation +id: 26481afe-db26-4228-b264-25a29fe6efc7 +related: + - id: ca83e9f3-657a-45d0-88d6-c1ac280caf53 + type: obsoletes + - id: 1d61f71d-59d2-479e-9562-4ff5f4ead16b + type: derived +status: test +description: Detects uncommon service installation commands +author: Florian Roth (Nextron Systems) +date: 2022/03/18 +modified: 2023/12/04 +tags: + - attack.persistence + - attack.privilege_escalation + - car.2013-09-005 + - attack.t1543.003 +logsource: + product: windows + service: system +detection: + system: + Channel: System + selection: + Provider_Name: Service Control Manager + EventID: 7045 + suspicious_paths: + ImagePath|contains: + - \\\\.\\pipe + - \Users\Public\ + - \Windows\Temp\ + suspicious_encoded_flag: + ImagePath|contains: ' -e' + suspicious_encoded_keywords: + ImagePath|contains: + - ' aQBlAHgA' + - ' aWV4I' + - ' IAB' + - ' JAB' + - ' PAA' + - ' SQBFAFgA' + - ' SUVYI' + filter_optional_thor_remote: + ImagePath|startswith: :\WINDOWS\TEMP\thor10-remote\thor64.exe + filter_main_defender_def_updates: + ImagePath|contains: :\ProgramData\Microsoft\Windows Defender\Definition Updates\ + condition: system and (selection and ( suspicious_paths or all of suspicious_encoded_* + ) and not 1 of filter_main_* and not 1 of filter_optional_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/builtin/system/service_control_manager/win_system_susp_service_installation.yml b/sigma/builtin/system/service_control_manager/win_system_susp_service_installation.yml deleted file mode 100644 index 2d4717d81..000000000 --- a/sigma/builtin/system/service_control_manager/win_system_susp_service_installation.yml +++ /dev/null @@ -1,56 +0,0 @@ -title: Suspicious Service Installation -id: 1d61f71d-59d2-479e-9562-4ff5f4ead16b -status: test -description: Detects suspicious service installation commands -author: pH-T (Nextron Systems) -date: 2022/03/18 -modified: 2022/11/14 -tags: - - attack.persistence - - attack.privilege_escalation - - car.2013-09-005 - - attack.t1543.003 -logsource: - product: windows - service: system -detection: - system: - Channel: System - selection: - Provider_Name: Service Control Manager - EventID: 7045 - suspicious1: - ImagePath|contains: - - ' -w hidden ' - - ' -nop ' - - ' -sta ' - - \Users\Public\ - - \Windows\Temp\ - - \Perflogs\ - - \\\\.\\pipe - - \ADMIN$\ - - C:\Temp\ - - .downloadstring( - - .downloadfile( - suspicious2a: - ImagePath|contains: ' -e' - suspicious2b: - ImagePath|contains: - - ' JAB' - - ' SUVYI' - - ' SQBFAFgA' - - ' aWV4I' - - ' IAB' - - ' PAA' - - ' aQBlAHgA' - filter_thor_remote: - ImagePath|startswith: C:\WINDOWS\TEMP\thor10-remote\thor64.exe - filter_defender_def_updates: - ImagePath|startswith: C:\ProgramData\Microsoft\Windows Defender\Definition - Updates\ - condition: system and (selection and ( suspicious1 or all of suspicious2* ) and - not 1 of filter_*) -falsepositives: - - Unknown -level: high -ruletype: Sigma diff --git a/sigma/builtin/powershell/powershell_classic/posh_pc_alternate_powershell_hosts.yml b/sigma/builtin/threat-hunting/powershell/powershell_classic/posh_pc_alternate_powershell_hosts.yml similarity index 74% rename from sigma/builtin/powershell/powershell_classic/posh_pc_alternate_powershell_hosts.yml rename to sigma/builtin/threat-hunting/powershell/powershell_classic/posh_pc_alternate_powershell_hosts.yml index 836c600b6..a8c6f0638 100644 --- a/sigma/builtin/powershell/powershell_classic/posh_pc_alternate_powershell_hosts.yml +++ b/sigma/builtin/threat-hunting/powershell/powershell_classic/posh_pc_alternate_powershell_hosts.yml @@ -10,10 +10,11 @@ references: - https://threathunterplaybook.com/hunts/windows/190815-RemoteServiceInstallation/notebook.html author: Roberto Rodriguez @Cyb3rWard0g date: 2019/08/11 -modified: 2023/11/03 +modified: 2023/12/11 tags: - attack.execution - attack.t1059.001 + - detection.threat_hunting logsource: product: windows category: ps_classic_start @@ -25,11 +26,13 @@ detection: Data|contains: HostApplication= filter_main_ps: Data|contains: + - HostApplication=?:/Windows/System32/WindowsPowerShell/v1.0/powershell + - HostApplication=?:/Windows/SysWOW64/WindowsPowerShell/v1.0/powershell + - HostApplication=?:\Windows\System32\sdiagnhost.exe + - HostApplication=?:\Windows\System32\WindowsPowerShell\v1.0\powershell + - HostApplication=?:\Windows\SysWOW64\sdiagnhost.exe + - HostApplication=?:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell - HostApplication=powershell - - HostApplication=C:\Windows\System32\WindowsPowerShell\v1.0\powershell - - HostApplication=C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell - - HostApplication=C:/Windows/System32/WindowsPowerShell/v1.0/powershell - - HostApplication=C:/Windows/SysWOW64/WindowsPowerShell/v1.0/powershell filter_optional_citrix: Data|contains: Citrix\ConfigSync\ConfigSync.ps1 condition: ps_classic_start and (selection and not 1 of filter_main_* and not diff --git a/sigma/builtin/powershell/powershell_script/posh_ps_remove_item_path.yml b/sigma/builtin/threat-hunting/powershell/powershell_script/posh_ps_remove_item_path.yml similarity index 70% rename from sigma/builtin/powershell/powershell_script/posh_ps_remove_item_path.yml rename to sigma/builtin/threat-hunting/powershell/powershell_script/posh_ps_remove_item_path.yml index 9f3bf6d83..82362d40c 100644 --- a/sigma/builtin/powershell/powershell_script/posh_ps_remove_item_path.yml +++ b/sigma/builtin/threat-hunting/powershell/powershell_script/posh_ps_remove_item_path.yml @@ -1,7 +1,7 @@ -title: Use Remove-Item to Delete File +title: Use Of Remove-Item to Delete File - ScriptBlock id: b8af5f36-1361-4ebe-9e76-e36128d947bf status: test -description: Powershell Remove-Item with -Path to delete a file or a folder with +description: PowerShell Remove-Item with -Path to delete a file or a folder with "-Recurse" references: - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1070.004/T1070.004.md @@ -12,6 +12,7 @@ modified: 2022/03/17 tags: - attack.defense_evasion - attack.t1070.004 + - detection.threat_hunting logsource: product: windows category: ps_script @@ -23,14 +24,15 @@ detection: - Microsoft-Windows-PowerShell/Operational - PowerShellCore/Operational selection: - ScriptBlockText|contains|all: - - Remove-Item - - '-Path ' - filter_reg: ScriptBlockText|contains: - - HKCU:\ - - HKLM:\ - condition: ps_script and (selection and not filter_reg) + - 'Remove-Item -Path ' + - 'del -Path ' + - 'erase -Path ' + - 'rd -Path ' + - 'ri -Path ' + - 'rm -Path ' + - 'rmdir -Path ' + condition: ps_script and selection falsepositives: - Legitimate PowerShell scripts level: low diff --git a/sigma/builtin/process_creation/proc_creation_win_office_svchost_parent.yml b/sigma/builtin/threat-hunting/process_creation/proc_creation_win_office_svchost_parent.yml similarity index 93% rename from sigma/builtin/process_creation/proc_creation_win_office_svchost_parent.yml rename to sigma/builtin/threat-hunting/process_creation/proc_creation_win_office_svchost_parent.yml index 3679527f9..17ef949b3 100644 --- a/sigma/builtin/process_creation/proc_creation_win_office_svchost_parent.yml +++ b/sigma/builtin/threat-hunting/process_creation/proc_creation_win_office_svchost_parent.yml @@ -14,10 +14,11 @@ references: - https://github.com/med0x2e/vba2clr author: Nasreddine Bencherchali (Nextron Systems) date: 2022/10/13 -modified: 2023/02/04 +modified: 2023/12/19 tags: - attack.execution - attack.defense_evasion + - detection.threat_hunting logsource: product: windows category: process_creation @@ -28,14 +29,14 @@ detection: selection: ParentProcessName|endswith: \svchost.exe NewProcessName|endswith: - - \winword.exe + - \eqnedt32.exe - \excel.exe - - \powerpnt.exe - \msaccess.exe - \mspub.exe - - \eqnedt32.exe + - \powerpnt.exe - \visio.exe - condition: process_creation and (all of selection*) + - \winword.exe + condition: process_creation and selection falsepositives: - Legitimate usage of office automation via scripting level: medium diff --git a/sigma/builtin/threat-hunting/process_creation/proc_creation_win_susp_elevated_system_shell.yml b/sigma/builtin/threat-hunting/process_creation/proc_creation_win_susp_elevated_system_shell.yml new file mode 100644 index 000000000..2af18b82d --- /dev/null +++ b/sigma/builtin/threat-hunting/process_creation/proc_creation_win_susp_elevated_system_shell.yml @@ -0,0 +1,47 @@ +title: Elevated System Shell Spawned +id: 61065c72-5d7d-44ef-bf41-6a36684b545f +related: + - id: 178e615d-e666-498b-9630-9ed363038101 + type: similar +status: experimental +description: 'Detects when a shell program such as the Windows command prompt or PowerShell + is launched with system privileges. Use this rule to hunt for potential suspicious + processes. + + ' +references: + - https://github.com/Wh04m1001/SysmonEoP +author: Nasreddine Bencherchali (Nextron Systems), frack113 +date: 2023/11/23 +tags: + - attack.privilege_escalation + - attack.defense_evasion + - attack.execution + - attack.t1059 + - detection.threat_hunting +logsource: + product: windows + category: process_creation +detection: + process_creation: + EventID: 4688 + Channel: Security + selection_shell: + - NewProcessName|endswith: + - \powershell.exe + - \pwsh.exe + - \cmd.exe + - OriginalFileName: + - PowerShell.EXE + - pwsh.dll + - Cmd.Exe + selection_user: + SubjectUserName|contains: + - AUTHORI + - AUTORI + SubjectLogonId: '0x3e7' + condition: process_creation and (all of selection_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/builtin/windefend/win_defender_antimalware_platform_expired.yml b/sigma/builtin/windefend/win_defender_antimalware_platform_expired.yml new file mode 100644 index 000000000..603cf8d29 --- /dev/null +++ b/sigma/builtin/windefend/win_defender_antimalware_platform_expired.yml @@ -0,0 +1,34 @@ +title: Windows Defender Grace Period Expired +id: 360a1340-398a-46b6-8d06-99b905dc69d2 +related: + - id: fe34868f-6e0e-4882-81f6-c43aa8f15b62 + type: obsoletes +status: stable +description: 'Detects the expiration of the grace period of Windows Defender. This + means protection against viruses, spyware, and other potentially unwanted software + is disabled. + + ' +references: + - https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-microsoft-defender-antivirus?view=o365-worldwide#event-id-5101 + - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1562.001/T1562.001.md + - https://craigclouditpro.wordpress.com/2020/03/04/hunting-malicious-windows-defender-activity/ +author: "J\xE1n Tren\u010Dansk\xFD, frack113" +date: 2020/07/28 +modified: 2023/11/22 +tags: + - attack.defense_evasion + - attack.t1562.001 +logsource: + product: windows + service: windefend +detection: + windefend: + Channel: Microsoft-Windows-Windows Defender/Operational + selection: + EventID: 5101 + condition: windefend and selection +falsepositives: + - Unknown +level: high +ruletype: Sigma diff --git a/sigma/builtin/windefend/win_defender_alert_lsass_access.yml b/sigma/builtin/windefend/win_defender_asr_lsass_access.yml similarity index 100% rename from sigma/builtin/windefend/win_defender_alert_lsass_access.yml rename to sigma/builtin/windefend/win_defender_asr_lsass_access.yml diff --git a/sigma/builtin/windefend/win_defender_psexec_wmi_asr.yml b/sigma/builtin/windefend/win_defender_asr_psexec_wmi.yml similarity index 100% rename from sigma/builtin/windefend/win_defender_psexec_wmi_asr.yml rename to sigma/builtin/windefend/win_defender_asr_psexec_wmi.yml diff --git a/sigma/builtin/windefend/win_defender_exclusions.yml b/sigma/builtin/windefend/win_defender_config_change_exclusion_added.yml similarity index 100% rename from sigma/builtin/windefend/win_defender_exclusions.yml rename to sigma/builtin/windefend/win_defender_config_change_exclusion_added.yml diff --git a/sigma/builtin/windefend/win_defender_exploit_guard_tamper.yml b/sigma/builtin/windefend/win_defender_config_change_exploit_guard_tamper.yml similarity index 88% rename from sigma/builtin/windefend/win_defender_exploit_guard_tamper.yml rename to sigma/builtin/windefend/win_defender_config_change_exploit_guard_tamper.yml index effda1ab5..7e5202cb1 100644 --- a/sigma/builtin/windefend/win_defender_exploit_guard_tamper.yml +++ b/sigma/builtin/windefend/win_defender_config_change_exploit_guard_tamper.yml @@ -1,8 +1,10 @@ title: Windows Defender Exploit Guard Tamper id: a3ab73f1-bd46-4319-8f06-4b20d0617886 status: test -description: Detects when someone is adding or removing applications or folder from - exploit guard "ProtectedFolders" and "AllowedApplications" +description: 'Detects when someone is adding or removing applications or folders from + exploit guard "ProtectedFolders" or "AllowedApplications" + + ' references: - https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/windows-10-controlled-folder-access-event-search/ba-p/2326088 author: Nasreddine Bencherchali (Nextron Systems) diff --git a/sigma/builtin/windefend/win_defender_config_change_sample_submission_consent.yml b/sigma/builtin/windefend/win_defender_config_change_sample_submission_consent.yml new file mode 100644 index 000000000..896474a69 --- /dev/null +++ b/sigma/builtin/windefend/win_defender_config_change_sample_submission_consent.yml @@ -0,0 +1,34 @@ +title: Windows Defender Submit Sample Feature Disabled +id: 91903aba-1088-42ee-b680-d6d94fe002b0 +related: + - id: 1321dc4e-a1fe-481d-a016-52c45f0c8b4f + type: similar + - id: a3ab73f1-bd46-4319-8f06-4b20d0617886 + type: similar + - id: 801bd44f-ceed-4eb6-887c-11544633c0aa + type: similar +status: stable +description: Detects disabling of the "Automatic Sample Submission" feature of Windows + Defender. +references: + - https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-microsoft-defender-antivirus?view=o365-worldwide + - https://bidouillesecurity.com/disable-windows-defender-in-powershell/#DisableAntiSpyware +author: Nasreddine Bencherchali (Nextron Systems) +date: 2022/12/06 +tags: + - attack.defense_evasion + - attack.t1562.001 +logsource: + product: windows + service: windefend +detection: + windefend: + Channel: Microsoft-Windows-Windows Defender/Operational + selection: + EventID: 5007 + NewValue|contains: \Real-Time Protection\SubmitSamplesConsent = 0x0 + condition: windefend and selection +falsepositives: + - Administrator activity (must be investigated) +level: low +ruletype: Sigma diff --git a/sigma/builtin/windefend/win_defender_history_delete.yml b/sigma/builtin/windefend/win_defender_history_delete.yml index fd3abe0e5..b2656e6b6 100644 --- a/sigma/builtin/windefend/win_defender_history_delete.yml +++ b/sigma/builtin/windefend/win_defender_history_delete.yml @@ -2,14 +2,12 @@ title: Windows Defender Malware Detection History Deletion id: 2afe6582-e149-11ea-87d0-0242ac130003 status: test description: Windows Defender logs when the history of detected infections is deleted. - Log file will contain the message "Windows Defender Antivirus has removed history - of malware and other potentially unwanted software". references: - https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/troubleshoot-microsoft-defender-antivirus - - https://answers.microsoft.com/en-us/protect/forum/mse-protect_scanning/microsoft-antimalware-has-removed-history-of/f15af6c9-01a9-4065-8c6c-3f2bdc7de45e + - https://web.archive.org/web/20160727113019/https://answers.microsoft.com/en-us/protect/forum/mse-protect_scanning/microsoft-antimalware-has-removed-history-of/f15af6c9-01a9-4065-8c6c-3f2bdc7de45e author: Cian Heasley date: 2020/08/13 -modified: 2022/10/09 +modified: 2023/11/24 tags: - attack.defense_evasion logsource: @@ -21,10 +19,7 @@ detection: selection: EventID: 1013 condition: windefend and selection -fields: - - EventID - - EventType falsepositives: - Deletion of Defender malware detections history for legitimate reasons -level: low +level: informational ruletype: Sigma diff --git a/sigma/builtin/windefend/win_defender_malware_and_pua_scan_disabled.yml b/sigma/builtin/windefend/win_defender_malware_and_pua_scan_disabled.yml new file mode 100644 index 000000000..b88e2fc26 --- /dev/null +++ b/sigma/builtin/windefend/win_defender_malware_and_pua_scan_disabled.yml @@ -0,0 +1,31 @@ +title: Windows Defender Malware And PUA Scanning Disabled +id: bc275be9-0bec-4d77-8c8f-281a2df6710f +related: + - id: fe34868f-6e0e-4882-81f6-c43aa8f15b62 + type: obsoletes +status: stable +description: Detects disabling of the Windows Defender feature of scanning for malware + and other potentially unwanted software +references: + - https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-microsoft-defender-antivirus?view=o365-worldwide#event-id-5010 + - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1562.001/T1562.001.md + - https://craigclouditpro.wordpress.com/2020/03/04/hunting-malicious-windows-defender-activity/ +author: "J\xE1n Tren\u010Dansk\xFD, frack113" +date: 2020/07/28 +modified: 2023/11/22 +tags: + - attack.defense_evasion + - attack.t1562.001 +logsource: + product: windows + service: windefend +detection: + windefend: + Channel: Microsoft-Windows-Windows Defender/Operational + selection: + EventID: 5010 + condition: windefend and selection +falsepositives: + - Unknown +level: high +ruletype: Sigma diff --git a/sigma/builtin/windefend/win_defender_amsi_trigger.yml b/sigma/builtin/windefend/win_defender_malware_detected_amsi_source.yml similarity index 100% rename from sigma/builtin/windefend/win_defender_amsi_trigger.yml rename to sigma/builtin/windefend/win_defender_malware_detected_amsi_source.yml diff --git a/sigma/builtin/windefend/win_defender_real_time_protection_disabled.yml b/sigma/builtin/windefend/win_defender_real_time_protection_disabled.yml new file mode 100644 index 000000000..ada017bc6 --- /dev/null +++ b/sigma/builtin/windefend/win_defender_real_time_protection_disabled.yml @@ -0,0 +1,35 @@ +title: Windows Defender Real-time Protection Disabled +id: b28e58e4-2a72-4fae-bdee-0fbe904db642 +related: + - id: fe34868f-6e0e-4882-81f6-c43aa8f15b62 + type: obsoletes +status: stable +description: 'Detects disabling of Windows Defender Real-time Protection. As this + event doesn''t contain a lot of information on who initaited this action you might + want to reduce it to a "medium" level if this occurs too many times in your environment + + ' +references: + - https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-microsoft-defender-antivirus?view=o365-worldwide#event-id-5001 + - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1562.001/T1562.001.md + - https://craigclouditpro.wordpress.com/2020/03/04/hunting-malicious-windows-defender-activity/ +author: "J\xE1n Tren\u010Dansk\xFD, frack113" +date: 2020/07/28 +modified: 2023/11/22 +tags: + - attack.defense_evasion + - attack.t1562.001 +logsource: + product: windows + service: windefend +detection: + windefend: + Channel: Microsoft-Windows-Windows Defender/Operational + selection: + EventID: 5001 + condition: windefend and selection +falsepositives: + - Administrator actions (should be investigated) + - Seen being triggered occasionally during Windows 8 Defender Updates +level: high +ruletype: Sigma diff --git a/sigma/builtin/windefend/win_defender_suspicious_features_tampering.yml b/sigma/builtin/windefend/win_defender_suspicious_features_tampering.yml index 48fda5bbc..f6390b2ec 100644 --- a/sigma/builtin/windefend/win_defender_suspicious_features_tampering.yml +++ b/sigma/builtin/windefend/win_defender_suspicious_features_tampering.yml @@ -1,10 +1,12 @@ -title: Windows Defender Suspicious Configuration Changes +title: Windows Defender Configuration Changes id: 801bd44f-ceed-4eb6-887c-11544633c0aa related: - id: 1321dc4e-a1fe-481d-a016-52c45f0c8b4f type: similar - id: a3ab73f1-bd46-4319-8f06-4b20d0617886 type: similar + - id: 91903aba-1088-42ee-b680-d6d94fe002b0 + type: similar status: stable description: Detects suspicious changes to the Windows Defender configuration references: @@ -12,6 +14,7 @@ references: - https://bidouillesecurity.com/disable-windows-defender-in-powershell/#DisableAntiSpyware author: Nasreddine Bencherchali (Nextron Systems) date: 2022/12/06 +modified: 2023/11/24 tags: - attack.defense_evasion - attack.t1562.001 @@ -29,7 +32,6 @@ detection: - '\Windows Defender\Scan\DisableScanningMappedNetworkDrivesForFullScan ' - '\Windows Defender\SpyNet\DisableBlockAtFirstSeen ' - '\Real-Time Protection\SpyNetReporting ' - - '\Real-Time Protection\SubmitSamplesConsent ' condition: windefend and selection falsepositives: - Administrator activity (must be investigated) diff --git a/sigma/builtin/windefend/win_defender_threat.yml b/sigma/builtin/windefend/win_defender_threat.yml index 369425147..6b5271f18 100644 --- a/sigma/builtin/windefend/win_defender_threat.yml +++ b/sigma/builtin/windefend/win_defender_threat.yml @@ -1,7 +1,7 @@ title: Windows Defender Threat Detected id: 57b649ef-ff42-4fb0-8bf6-62da243a1708 status: stable -description: Detects all actions taken by Windows Defender malware detection engines +description: Detects actions taken by Windows Defender malware detection engines references: - https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/troubleshoot-windows-defender-antivirus author: "J\xE1n Tren\u010Dansk\xFD" @@ -18,8 +18,8 @@ detection: selection: EventID: - 1006 - - 1116 - 1015 + - 1116 - 1117 condition: windefend and selection falsepositives: diff --git a/sigma/builtin/windefend/win_defender_virus_scan_disabled.yml b/sigma/builtin/windefend/win_defender_virus_scan_disabled.yml new file mode 100644 index 000000000..bd5b6fc81 --- /dev/null +++ b/sigma/builtin/windefend/win_defender_virus_scan_disabled.yml @@ -0,0 +1,30 @@ +title: Windows Defender Virus Scanning Feature Disabled +id: 686c0b4b-9dd3-4847-9077-d6c1bbe36fcb +related: + - id: fe34868f-6e0e-4882-81f6-c43aa8f15b62 + type: obsoletes +status: stable +description: Detects disabling of the Windows Defender virus scanning feature +references: + - https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/troubleshoot-microsoft-defender-antivirus?view=o365-worldwide#event-id-5012 + - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1562.001/T1562.001.md + - https://craigclouditpro.wordpress.com/2020/03/04/hunting-malicious-windows-defender-activity/ +author: "J\xE1n Tren\u010Dansk\xFD, frack113" +date: 2020/07/28 +modified: 2023/11/22 +tags: + - attack.defense_evasion + - attack.t1562.001 +logsource: + product: windows + service: windefend +detection: + windefend: + Channel: Microsoft-Windows-Windows Defender/Operational + selection: + EventID: 5012 + condition: windefend and selection +falsepositives: + - Unknown +level: high +ruletype: Sigma diff --git a/sigma/sysmon/driver_load/driver_load_win_mal_creddumper.yml b/sigma/sysmon/deprecated/driver_load_win_mal_creddumper.yml similarity index 96% rename from sigma/sysmon/driver_load/driver_load_win_mal_creddumper.yml rename to sigma/sysmon/deprecated/driver_load_win_mal_creddumper.yml index 0a9525e63..33550df19 100644 --- a/sigma/sysmon/driver_load/driver_load_win_mal_creddumper.yml +++ b/sigma/sysmon/deprecated/driver_load_win_mal_creddumper.yml @@ -3,7 +3,7 @@ id: df5ff0a5-f83f-4a5b-bba1-3e6a3f6f6ea2 related: - id: 4976aa50-8f41-45c6-8b15-ab3fc10e79ed type: derived -status: test +status: deprecated description: Detects well-known credential dumping tools execution via service execution events references: @@ -11,7 +11,7 @@ references: author: Florian Roth (Nextron Systems), Teymur Kheirkhabarov, Daniil Yugoslavskiy, oscd.community date: 2017/03/05 -modified: 2022/12/25 +modified: 2023/12/11 tags: - attack.credential_access - attack.execution diff --git a/sigma/sysmon/driver_load/driver_load_win_powershell_script_installed_as_service.yml b/sigma/sysmon/deprecated/driver_load_win_powershell_script_installed_as_service.yml similarity index 95% rename from sigma/sysmon/driver_load/driver_load_win_powershell_script_installed_as_service.yml rename to sigma/sysmon/deprecated/driver_load_win_powershell_script_installed_as_service.yml index a3bd643c3..4ec57b1cb 100644 --- a/sigma/sysmon/driver_load/driver_load_win_powershell_script_installed_as_service.yml +++ b/sigma/sysmon/deprecated/driver_load_win_powershell_script_installed_as_service.yml @@ -3,13 +3,13 @@ id: 46deb5e1-28c9-4905-b2df-51cdcc9e6073 related: - id: a2e5019d-a658-4c6a-92bf-7197b54e2cae type: derived -status: test +status: deprecated description: Detects powershell script installed as a Service references: - https://speakerdeck.com/heirhabarov/hunting-for-powershell-abuse author: oscd.community, Natalia Shornikova date: 2020/10/06 -modified: 2022/10/09 +modified: 2023/12/11 tags: - attack.execution - attack.t1569.002 diff --git a/sigma/sysmon/dns_query/dns_query_win_cloudflared_communication.yml b/sigma/sysmon/dns_query/dns_query_win_cloudflared_communication.yml new file mode 100644 index 000000000..a81faca68 --- /dev/null +++ b/sigma/sysmon/dns_query/dns_query_win_cloudflared_communication.yml @@ -0,0 +1,31 @@ +title: Cloudflared Tunnels Related DNS Requests +id: a1d9eec5-33b2-4177-8d24-27fe754d0812 +status: experimental +description: Detects DNS query requests to Cloudflared tunnels domains. +references: + - https://www.guidepointsecurity.com/blog/tunnel-vision-cloudflared-abused-in-the-wild/ + - Internal Research +author: Nasreddine Bencherchali (Nextron Systems) +date: 2023/12/20 +tags: + - attack.command_and_control + - attack.t1071.001 + - sysmon +logsource: + category: dns_query + product: windows +detection: + dns_query: + EventID: 22 + Channel: Microsoft-Windows-Sysmon/Operational + selection: + QueryName|endswith: + - .v2.argotunnel.com + - protocol-v2.argotunnel.com + - trycloudflare.com + - update.argotunnel.com + condition: dns_query and selection +falsepositives: + - Legitimate use of cloudflare tunnels will also trigger this. +level: medium +ruletype: Sigma diff --git a/sigma/sysmon/driver_load/driver_load_win_mal_drivers.yml b/sigma/sysmon/driver_load/driver_load_win_mal_drivers.yml index 2a959a44c..d1dc0223a 100644 --- a/sigma/sysmon/driver_load/driver_load_win_mal_drivers.yml +++ b/sigma/sysmon/driver_load/driver_load_win_mal_drivers.yml @@ -1,12 +1,12 @@ title: Malicious Driver Load id: 05296024-fe8a-4baf-8f3d-9a5f5624ceb2 status: experimental -description: Detects the load of known malicious drivers by hash value +description: Detects loading of known malicious drivers via their hash. references: - https://loldrivers.io/ author: Nasreddine Bencherchali (Nextron Systems) date: 2022/08/18 -modified: 2023/09/03 +modified: 2023/12/02 tags: - attack.privilege_escalation - attack.t1543.003 @@ -21,740 +21,795 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational selection: Hashes|contains: - - MD5=3f11a94f1ac5efdd19767c6976da9ba4 - - MD5=1325ec39e98225e487b40043faee8052 - - MD5=eb57f03b7603f0b235af62e8cd5be8c2 - - MD5=fb593b1f1f80d20fc7f4b818065c64b6 - - MD5=cd2c641788d5d125c316ed739c69bb59 - - MD5=5ebfc0af031130ba9de1d5d3275734b3 - - MD5=4e1f656001af3677856f664e96282a6f - - MD5=2bb353891d65c9e267eb98a3a2b694c3 - - MD5=58c37866cbc3d1338e4fc58ada924ffe - - MD5=7d86cdda7f49f91fdb69901a002b34e7 + - MD5=5be61a24f50eb4c94d98b8a82ef58dcf + - MD5=d70a80fc73dd43469934a7b1cc623c76 + - MD5=3b71eab204a5f7ed77811e41fed73105 + - MD5=528ce5ce19eb34f401ef024de7ddf222 + - MD5=ae548418b491cd3f31618eb9e5730973 + - MD5=72f53f55898548767e0276c472be41e8 + - MD5=508faa4647f305a97ed7167abc4d1330 + - MD5=ed2b653d55c03f0bffa250372d682b75 + - MD5=0d2ba47286f1c68e87622b3a16bf9d92 + - MD5=3164bd6c12dd0fe1bdf3b833d56323b9 + - MD5=70fd7209ce5c013a1f9e699b5cc86cdc + - MD5=c71be7b112059d2dc84c0f952e04e6cc + - MD5=acac842a46f3501fe407b1db1b247a0b + - MD5=01c2e4d8234258451083d6ce4e8910b7 + - MD5=c8541a9cef64589593e999968a0385b9 - MD5=e172a38ade3aa0a2bc1bf9604a54a3b5 - - MD5=0b9b78d1281c7d4ab50497cf6ea7452a - - MD5=844af8c877f5da723c1b82cf6e213fc1 - - MD5=aa98b95f5cbae8260122de06a215ee10 - - MD5=a236e7d654cd932b7d11cb604629a2d0 - - MD5=4dd6250eb2d368f500949952eb013964 - - MD5=5e9231e85cecfc6141e3644fda12a734 - - MD5=40b968ecdbe9e967d92c5da51c390eee - - MD5=fe508caa54ffeb2285d9f00df547fe4a - - MD5=fe9004353b25640f6a879e57f07122d7 - - MD5=4b058945c9f2b8d8ebc485add1101ba5 - - MD5=b52f51bbe6b49d0b475d943c29c4d4cb - - MD5=47e6ac52431ca47da17248d80bf71389 - - MD5=67daa04716803a15fc11c9e353d77c2f - - MD5=491aec2249ad8e2020f9f9b559ab68a8 + - MD5=6fcf56f6ca3210ec397e55f727353c4a + - MD5=2b80be31fbb11d4c1ef6d6a80b2e0c16 + - MD5=07056573d464b0f5284f7e3acedd4a3f + - MD5=c7b7f1edb9bbef174e6506885561d85d - MD5=d5918d735a23f746f0e83f724c4f26e5 - - MD5=4484f4007de2c3ee4581a2cff77ca3b4 - - MD5=ee6b1a79cb6641aa44c762ee90786fe0 - - MD5=7ebe606acd81abf1f8cb0767c974164b - - MD5=7f9309f5e4defec132b622fadbcad511 - - MD5=6b480fac7caca2f85be9a0cfe79aedfc - - MD5=bb5bda8889d8d27ef984dbd6ad82c946 - - MD5=0f16a43f7989034641fd2de3eb268bf1 - - MD5=6e625ec04c20a9dbd48c7060efbf5e92 + - MD5=84763d8ca9fe5c3bff9667b2adf667de + - MD5=fb593b1f1f80d20fc7f4b818065c64b6 + - MD5=909f3fc221acbe999483c87d9ead024a + - MD5=e29f6311ae87542b3d693c1f38e4e3ad + - MD5=aeb0801f22d71c7494e884d914446751 + - MD5=3f11a94f1ac5efdd19767c6976da9ba4 + - MD5=be6318413160e589080df02bb3ca6e6a + - MD5=0b311af53d2f4f77d30f1aed709db257 + - MD5=d075d56dfce6b9b13484152b1ef40f93 + - MD5=27384ec4c634701012a2962c30badad2 + - MD5=5eb2c576597dd21a6b44557c237cf896 + - MD5=f56db4eba3829c0918413b5c0b42f00f + - MD5=e27b2486aa5c256b662812b465b6036c - MD5=db86dfd7aefbb5be6728a63461b0f5f3 - - MD5=6ececf26ff8b03ed7ffbddadec9a9dab - - MD5=e939448b28a4edc81f1f974cebf6e7d2 - - MD5=26aedc10d4215ba997495d3a68355f4a - - MD5=d34b218c386bfe8b1f9c941e374418d7 - - MD5=17509f0a98dc5c5d52c3f9ac1428a21b - - MD5=65f800e1112864bf41eb815649f428d5 + - MD5=04a88f5974caa621cee18f34300fc08a + - MD5=5129d8fd53d6a4aba81657ab2aa5d243 + - MD5=cd2c641788d5d125c316ed739c69bb59 + - MD5=7073cd0085fcba1cd7d3568f9e6d652c + - MD5=24f0f2b4b3cdae11de1b81c537df41c7 + - MD5=88bea56ae9257b40063785cf47546024 + - MD5=63060b756377fce2ce4ab9d079ca732f + - MD5=50b39072d0ee9af5ef4824eca34be6e3 + - MD5=57c18a8f5d1ba6d015e4d5bc698e3624 + - MD5=7d26985a5048bad57d9c223362f3d55c + - MD5=ba54a0dbe2685e66e21d41b4529b3528 + - MD5=4ad8fd9e83d7200bd7f8d0d4a9abfb11 + - MD5=b52f51bbe6b49d0b475d943c29c4d4cb + - MD5=a837302307dace2a00d07202b661bce2 + - MD5=78a122d926ccc371d60c861600c310f3 + - MD5=bdb305aa0806f8b38b7ce43c927fe919 + - MD5=27053e964667318e1b370150cbca9138 + - MD5=6a4fbcfb44717eae2145c761c1c99b6a + - MD5=d13c1b76b4a1ca3ff5ab63678b51df6d - MD5=6a066d2be83cf83f343d0550b0b8f206 - - MD5=40170485cca576adb5266cf5b0d3b0bd - - MD5=e39152eadd76751b1d7485231b280948 - - MD5=1cd5e231064e03c596e819b6ff48daf9 - - MD5=01c2e4d8234258451083d6ce4e8910b7 - - MD5=b0770094c3c64250167b55e4db850c04 - - MD5=c71be7b112059d2dc84c0f952e04e6cc - - MD5=19b15eeccab0752c6793f782ca665a45 - - MD5=1e0eb80347e723fa31fce2abb0301d44 - - MD5=c62209b8a5daf3f32ad876ad6cefda1b - - MD5=3b71eab204a5f7ed77811e41fed73105 - - MD5=29047f0b7790e524b09a06852d31a117 - - MD5=c5ae6ca044bd03c3506c132b033be1dc - - MD5=0023ca0ca16a62d93ef51f3df98b2f94 - - MD5=0b311af53d2f4f77d30f1aed709db257 - - MD5=6d131a7462e568213b44ef69156f10a5 - - MD5=98d53f6b3bec0a3417a04fbb9e17fa06 - - MD5=8636fe3724f2bcba9399daffd6ef3c7e - - MD5=10c2ea775c9e76e7774ab89e38f38287 + - MD5=7108b0d4021af4c41de2c223319cd4c1 + - MD5=1cd158a64f3d886357535382a6fdad75 + - MD5=e939448b28a4edc81f1f974cebf6e7d2 + - MD5=4198d3db44d7c4b3ba9072d258a4fc2d - MD5=4a27a2bdc6fbe39eeec6455fb1e0ef20 - - MD5=f589d4bf547c140b6ec8a511ea47c658 - - MD5=77cfd3943cc34d9f5279c330cd8940bc - - MD5=07056573d464b0f5284f7e3acedd4a3f - - MD5=36f44643178c505ea0384e0fb241e904 - - MD5=79df0eabbf2895e4e2dae15a4772868c - - MD5=091a6bd4880048514c5dd3bede15eba5 - - MD5=b76aee508f68b5b6dccd6e1f66f4cf8b - - MD5=32282e07db321e8d7849f2287bb6a14f - - MD5=c5fc3605194e033bdf3781ff2adaeb61 - - MD5=bd5b0514f3b40f139d8079138d01b5f6 - - MD5=27384ec4c634701012a2962c30badad2 - - MD5=ac6e29f535b2c42999c50d2fc32f2c9c - - MD5=24d3ea54f25e32832ac20335a1ce1062 - MD5=30ca3cc19f001a8f12c619daa8c6b6e3 - - MD5=63060b756377fce2ce4ab9d079ca732f + - MD5=fe9004353b25640f6a879e57f07122d7 + - MD5=06c7fcf3523235cf52b3eee083ec07b2 - MD5=364605ad21b9275681cffef607fac273 - - MD5=8b75047199825c8e62fdcc1c915db8bd + - MD5=968ddb06af90ef83c5f20fbdd4eee62e - MD5=ba50bd645d7c81416bb26a9d39998296 - - MD5=b164daf106566f444dfb280d743bc2f7 - - MD5=508faa4647f305a97ed7167abc4d1330 - - MD5=6a4fbcfb44717eae2145c761c1c99b6a - - MD5=97264fd62d4907bdac917917a07b3b7a - - MD5=629ee55e4b5a225d048fbcd5f0a1d18b - - MD5=a33089d4e50f7d2ea8b52ca95d26ebf3 - - MD5=48394dce30bb8da5ae089cb8f41b86dc - - MD5=70fd7209ce5c013a1f9e699b5cc86cdc - - MD5=be6318413160e589080df02bb3ca6e6a - - MD5=528ce5ce19eb34f401ef024de7ddf222 - - MD5=27053e964667318e1b370150cbca9138 - - MD5=e29f6311ae87542b3d693c1f38e4e3ad - - MD5=acac842a46f3501fe407b1db1b247a0b - - MD5=2d37d2fb9b9f8ac52bc02cba4487e3cb - - MD5=c7b7f1edb9bbef174e6506885561d85d - - MD5=4198d3db44d7c4b3ba9072d258a4fc2d + - MD5=29e03f4811b64969e48a99300978f58c + - MD5=b0770094c3c64250167b55e4db850c04 + - MD5=40b968ecdbe9e967d92c5da51c390eee - MD5=b6b530dd25c5eb66499968ec82e8791e - - MD5=ae548418b491cd3f31618eb9e5730973 - - MD5=f69b06ca7c34d16f26ea1c6861edf62a - - MD5=a9df5964635ef8bd567ae487c3d214c4 - - MD5=2b80be31fbb11d4c1ef6d6a80b2e0c16 + - MD5=f209cb0e468ca0b76d879859d5c8c54e - MD5=76f8607fc4fb9e828d613a7214436b66 - - MD5=24f0f2b4b3cdae11de1b81c537df41c7 - - MD5=550b7991d93534bc510bc4f237155a7a - - MD5=4ad8fd9e83d7200bd7f8d0d4a9abfb11 - - MD5=57c18a8f5d1ba6d015e4d5bc698e3624 - - MD5=10f3679384a03cb487bda9621ceb5f90 - - MD5=1cd158a64f3d886357535382a6fdad75 - - MD5=1fc7aeeff3ab19004d2e53eae8160ab1 - - MD5=ed2b653d55c03f0bffa250372d682b75 - - MD5=5129d8fd53d6a4aba81657ab2aa5d243 - - MD5=bf445ac375977ecf551bc2a912c58e8a - - MD5=968ddb06af90ef83c5f20fbdd4eee62e - - MD5=80219fb6b5954c33e16bac5ecdac651b - - MD5=fb7c61ef427f9b2fdff3574ee6b1819b - - MD5=ae338d91d1b05a72559b7f6ed717362d + - MD5=4b058945c9f2b8d8ebc485add1101ba5 + - MD5=faae7f5f69fde12303dd1c0c816b72b7 - MD5=89d294ef7fefcdf1a6ca0ab96a856f57 - - MD5=0bdd51cc33e88b5265dfb7d88c5dc8d6 + - MD5=ef0e1725aaf0c6c972593f860531a2ea - MD5=bbdbffebfc753b11897de2da7c9912a5 + - MD5=5ebfc0af031130ba9de1d5d3275734b3 + - MD5=22949977ce5cd96ba674b403a9c81285 + - MD5=77cfd3943cc34d9f5279c330cd8940bc + - MD5=311de109df18e485d4a626b5dbe19bc6 + - MD5=2730cc25ad385acc7213a1261b21c12d - MD5=87dc81ebe85f20c1a7970e495a778e60 - - MD5=14580bd59c55185115fd3abe73b016a2 + - MD5=154b45f072fe844676e6970612fd39c7 + - MD5=5a4fe297c7d42539303137b6d75b150d + - MD5=d6a1dd7b2c06f058b408b3613c13d413 + - MD5=a6e9d6505f6d2326a8a9214667c61c67 + - MD5=7fad9f2ef803496f482ce4728578a57a - MD5=5076fba3d90e346fd17f78db0a4aa12c - - MD5=d70a80fc73dd43469934a7b1cc623c76 - - MD5=c9d4214c850e0cedf033dc8f0cd3aace - - MD5=84763d8ca9fe5c3bff9667b2adf667de - - MD5=32b67a6cd6dd998b9f563ed13d54a8bc - - MD5=920df6e42cf91bbe19707f5a86e3c5c5 + - MD5=79df0eabbf2895e4e2dae15a4772868c + - MD5=14580bd59c55185115fd3abe73b016a2 + - MD5=1f2888e57fdd6aee466962c25ba7d62d + - MD5=5e9231e85cecfc6141e3644fda12a734 - MD5=dc564bac7258e16627b9de0ce39fae25 - - MD5=97539c78d6e2b5356ce79e40bcd4d570 - - MD5=a5bcaa2fc87b42e2e5d62a2e5dfcbc80 - - MD5=6fcf56f6ca3210ec397e55f727353c4a - - MD5=0ae30291c6cbfa7be39320badd6e8de0 - MD5=4e4c068c06331130334f23957fca9e3c - - MD5=a837302307dace2a00d07202b661bce2 - MD5=1ee9f6326649cd23381eb9d7dfdeddf7 - - MD5=93130909e562925597110a617f05e2a9 - - MD5=2730cc25ad385acc7213a1261b21c12d - - MD5=40f35792e7565aa047796758a3ce1b77 - - MD5=22949977ce5cd96ba674b403a9c81285 - - MD5=7d26985a5048bad57d9c223362f3d55c - - MD5=29e03f4811b64969e48a99300978f58c - - MD5=72f53f55898548767e0276c472be41e8 + - MD5=4e1f656001af3677856f664e96282a6f + - MD5=36f44643178c505ea0384e0fb241e904 + - MD5=6b480fac7caca2f85be9a0cfe79aedfc + - MD5=c1ab425977d467b64f437a6c5ad82b44 + - MD5=fe508caa54ffeb2285d9f00df547fe4a + - MD5=d3af70287de8757cebc6f8d45bb21a20 + - MD5=990b949894b7dc82a8cf1131b063cb1a + - MD5=c62209b8a5daf3f32ad876ad6cefda1b + - MD5=c159fb0f345a8771e56aab8e16927361 + - MD5=19b15eeccab0752c6793f782ca665a45 + - MD5=1d51029dfbd616bf121b40a0d1efeb10 + - MD5=157a22689629ec876337f5f9409918d5 + - MD5=3dd829fb27353622eff34be1eabb8f18 + - MD5=8636fe3724f2bcba9399daffd6ef3c7e + - MD5=3d0b3e19262099ade884b75ba86ca7e8 + - MD5=97539c78d6e2b5356ce79e40bcd4d570 + - MD5=0308b6888e0f197db6704ca20203eee4 + - MD5=091a6bd4880048514c5dd3bede15eba5 - MD5=7e92f98b809430622b04e88441b2eb04 + - MD5=bb5bda8889d8d27ef984dbd6ad82c946 + - MD5=b76aee508f68b5b6dccd6e1f66f4cf8b + - MD5=a822b9e6eedf69211013e192967bf523 - MD5=df52f8a85eb64bc69039243d9680d8e4 - - MD5=ef0e1725aaf0c6c972593f860531a2ea - - MD5=754e21482baf18b8b0ed0f4be462ba03 - - MD5=e0cc9b415d884f85c45be145872892b8 - - MD5=840a5edf2534dd23a082cf7b28cbfc4d - - MD5=7108b0d4021af4c41de2c223319cd4c1 - MD5=bfbdea0589fb77c7a7095cf5cd6e8b7a - - MD5=85093bb9f027027c2c61aee50796de30 - - MD5=0ea8389589c603a8b05146bd06020597 - - MD5=d13c1b76b4a1ca3ff5ab63678b51df6d - - MD5=a822b9e6eedf69211013e192967bf523 - - MD5=e8eac6642b882a6196555539149c73f2 + - MD5=44857ca402a15ab51dc5afe47abdfa44 + - MD5=f9844524fb0009e5b784c21c7bad4220 + - MD5=d34b218c386bfe8b1f9c941e374418d7 + - MD5=0ca010a32a9b0aeae1e46d666b83b659 + - MD5=93496a436c5546156a69deb255a9fed0 + - MD5=1cd5e231064e03c596e819b6ff48daf9 + - MD5=70a71fe86df717ac59dbf856d7ac5789 + - MD5=a33089d4e50f7d2ea8b52ca95d26ebf3 + - MD5=e0cc9b415d884f85c45be145872892b8 - MD5=a42249a046182aaaf3a7a7db98bfa69d - - MD5=e27b2486aa5c256b662812b465b6036c - - MD5=3d0b3e19262099ade884b75ba86ca7e8 - - MD5=78a122d926ccc371d60c861600c310f3 - - MD5=d3af70287de8757cebc6f8d45bb21a20 - - MD5=a26363e7b02b13f2b8d697abb90cd5c3 - - MD5=2406ea37152d2154be3fef6d69ada2c6 + - MD5=c5ae6ca044bd03c3506c132b033be1dc + - MD5=7ebe606acd81abf1f8cb0767c974164b + - MD5=b5dcc869a91efcc6e8ea0c3c07605d63 + - MD5=62c18d61ed324088f963510bae43b831 + - MD5=093a2a635c3a27aac50efd6463f4efa1 - MD5=28102acca39ad0199f262ba9958be3f4 - - MD5=3164bd6c12dd0fe1bdf3b833d56323b9 - - MD5=70a71fe86df717ac59dbf856d7ac5789 - - MD5=0ca010a32a9b0aeae1e46d666b83b659 - - MD5=c4a517a02ba9f6eac5cf06e3629cc076 - - MD5=bd25be845c151370ff177509d95d5add - - MD5=4e906fcb13e2793c98f47291fd69391b - - MD5=c277c4386a78fae1b7e17eaecf4f472b - - MD5=7fad9f2ef803496f482ce4728578a57a - - MD5=35e512f9bedc89dca5ce81f35820714c - - MD5=2c39f6172fbc967844cac12d7ab2fa55 - - MD5=f7f31bccc9b7b2964ac85106831022b1 - - MD5=0d2ba47286f1c68e87622b3a16bf9d92 - - MD5=62c18d61ed324088f963510bae43b831 - - MD5=bdb305aa0806f8b38b7ce43c927fe919 - - MD5=311de109df18e485d4a626b5dbe19bc6 - - MD5=f242cffd9926c0ccf94af3bf16b6e527 - - MD5=5be61a24f50eb4c94d98b8a82ef58dcf - - MD5=4118b86e490aed091b1a219dba45f332 - - MD5=6771b13a53b9c7449d4891e427735ea2 + - MD5=650ef9dd70cb192027e536754d6e0f63 - MD5=32eb3d2bf2c5b3da2d2a1f20fffbac44 - - MD5=faae7f5f69fde12303dd1c0c816b72b7 - - MD5=7073cd0085fcba1cd7d3568f9e6d652c - - MD5=68caf620ef8deaf06819cf8c80d3367b + - MD5=6771b13a53b9c7449d4891e427735ea2 + - MD5=072ba2309b825ce1dba37d8d924ea8ed + - MD5=2d37d2fb9b9f8ac52bc02cba4487e3cb + - MD5=1325ec39e98225e487b40043faee8052 + - MD5=4484f4007de2c3ee4581a2cff77ca3b4 + - MD5=a236e7d654cd932b7d11cb604629a2d0 + - MD5=17509f0a98dc5c5d52c3f9ac1428a21b + - MD5=840a5edf2534dd23a082cf7b28cbfc4d + - MD5=77a7ed4798d02ef6636cd0fd07fc382a + - MD5=a9df5964635ef8bd567ae487c3d214c4 + - MD5=8b75047199825c8e62fdcc1c915db8bd - MD5=d416494232c4197cb36a914df2e17677 - - MD5=157a22689629ec876337f5f9409918d5 - - MD5=3dd829fb27353622eff34be1eabb8f18 - - MD5=88bea56ae9257b40063785cf47546024 - - MD5=a37ed7663073319d02f2513575a22995 - - MD5=abc168fdca7169bf9dc40cec9761018d - - MD5=f56db4eba3829c0918413b5c0b42f00f - - MD5=c1ab425977d467b64f437a6c5ad82b44 - - MD5=5eb2c576597dd21a6b44557c237cf896 - - MD5=909f3fc221acbe999483c87d9ead024a - - MD5=6b3c1511e12f4d27a4ea3b18020d7b84 - - MD5=aeb0801f22d71c7494e884d914446751 - - MD5=f9844524fb0009e5b784c21c7bad4220 - - MD5=5fec28e8f4f76e5ede24beb32a32b9d7 - - MD5=e37a08f516b8a7ca64163f5d9e68fe5a + - MD5=4cf14a96485a1270fed97bb8000e4f86 + - MD5=35e512f9bedc89dca5ce81f35820714c + - MD5=40f35792e7565aa047796758a3ce1b77 + - MD5=f7f31bccc9b7b2964ac85106831022b1 + - MD5=26aedc10d4215ba997495d3a68355f4a + - MD5=10f3679384a03cb487bda9621ceb5f90 + - MD5=80219fb6b5954c33e16bac5ecdac651b - MD5=cee36b5c6362993fa921435979bfbe4a - - MD5=a90236e4962620949b720f647a91f101 - - MD5=c8541a9cef64589593e999968a0385b9 + - MD5=e37a08f516b8a7ca64163f5d9e68fe5a + - MD5=49518f7375a5f995ebe9423d8f19cfe4 + - MD5=920df6e42cf91bbe19707f5a86e3c5c5 - MD5=2ec877e425bd7eddb663627216e3491e - - MD5=bd91787b5dcb2189b856804e85dfa1d9 - - MD5=c94f405c5929cfcccc8ad00b42c95083 - - MD5=1d51029dfbd616bf121b40a0d1efeb10 - - MD5=e1a9aa4c14669b1fb1f67a7266f87e82 - - MD5=4cf14a96485a1270fed97bb8000e4f86 - - MD5=c159fb0f345a8771e56aab8e16927361 - - MD5=5aeab9427d85951def146b4c0a44fc63 - - MD5=d6a1dd7b2c06f058b408b3613c13d413 - - MD5=44857ca402a15ab51dc5afe47abdfa44 + - MD5=550b7991d93534bc510bc4f237155a7a + - MD5=98d53f6b3bec0a3417a04fbb9e17fa06 - MD5=13a57a4ef721440c7c9208b51f7c05de - - MD5=b5dcc869a91efcc6e8ea0c3c07605d63 - - MD5=5917e415a5bf30b3fcbcbcb8a4f20ee0 - - MD5=5a4fe297c7d42539303137b6d75b150d - - MD5=d075d56dfce6b9b13484152b1ef40f93 - - MD5=4748696211bd56c2d93c21cab91e82a5 - - MD5=072ba2309b825ce1dba37d8d924ea8ed - - MD5=06c7fcf3523235cf52b3eee083ec07b2 - - MD5=04a88f5974caa621cee18f34300fc08a - - MD5=990b949894b7dc82a8cf1131b063cb1a - - MD5=093a2a635c3a27aac50efd6463f4efa1 - - MD5=77a7ed4798d02ef6636cd0fd07fc382a - - MD5=3359e1d4244a7d724949c63e89689ef8 - - MD5=49518f7375a5f995ebe9423d8f19cfe4 - - MD5=ba54a0dbe2685e66e21d41b4529b3528 - - MD5=50b39072d0ee9af5ef4824eca34be6e3 - - MD5=650ef9dd70cb192027e536754d6e0f63 - - MD5=f838f4eb36f1e7036238776c7a70f0b0 - - MD5=f209cb0e468ca0b76d879859d5c8c54e - - MD5=1f2888e57fdd6aee466962c25ba7d62d + - MD5=c5fc3605194e033bdf3781ff2adaeb61 + - MD5=6e625ec04c20a9dbd48c7060efbf5e92 + - MD5=0b9b78d1281c7d4ab50497cf6ea7452a + - MD5=4e906fcb13e2793c98f47291fd69391b + - MD5=2bb353891d65c9e267eb98a3a2b694c3 + - MD5=7d86cdda7f49f91fdb69901a002b34e7 + - MD5=f69b06ca7c34d16f26ea1c6861edf62a + - MD5=ee6b1a79cb6641aa44c762ee90786fe0 + - MD5=1fc7aeeff3ab19004d2e53eae8160ab1 + - MD5=24d3ea54f25e32832ac20335a1ce1062 + - MD5=c94f405c5929cfcccc8ad00b42c95083 + - MD5=b164daf106566f444dfb280d743bc2f7 + - MD5=93130909e562925597110a617f05e2a9 + - MD5=f589d4bf547c140b6ec8a511ea47c658 + - MD5=bf445ac375977ecf551bc2a912c58e8a + - MD5=629ee55e4b5a225d048fbcd5f0a1d18b + - MD5=0023ca0ca16a62d93ef51f3df98b2f94 - MD5=a3d69c7e24300389b56782aa63b0e357 - - MD5=154b45f072fe844676e6970612fd39c7 - - MD5=05dd59bd4f175304480affd8f1305c37 - - MD5=0308b6888e0f197db6704ca20203eee4 - - MD5=a6e9d6505f6d2326a8a9214667c61c67 - - MD5=19bdd9b799e3c2c54c0d7fff68b31c20 - - MD5=93496a436c5546156a69deb255a9fed0 - MD5=cbd8d370462503508e44dba023bdf9bc + - MD5=67daa04716803a15fc11c9e353d77c2f + - MD5=c9d4214c850e0cedf033dc8f0cd3aace + - MD5=bd5b0514f3b40f139d8079138d01b5f6 + - MD5=19bdd9b799e3c2c54c0d7fff68b31c20 + - MD5=f242cffd9926c0ccf94af3bf16b6e527 + - MD5=5aeab9427d85951def146b4c0a44fc63 + - MD5=40170485cca576adb5266cf5b0d3b0bd + - MD5=c277c4386a78fae1b7e17eaecf4f472b + - MD5=58c37866cbc3d1338e4fc58ada924ffe + - MD5=0f16a43f7989034641fd2de3eb268bf1 + - MD5=0ae30291c6cbfa7be39320badd6e8de0 + - MD5=05dd59bd4f175304480affd8f1305c37 + - MD5=f838f4eb36f1e7036238776c7a70f0b0 + - MD5=85093bb9f027027c2c61aee50796de30 + - MD5=ae338d91d1b05a72559b7f6ed717362d + - MD5=bd91787b5dcb2189b856804e85dfa1d9 + - MD5=6b3c1511e12f4d27a4ea3b18020d7b84 + - MD5=97264fd62d4907bdac917917a07b3b7a + - MD5=6ececf26ff8b03ed7ffbddadec9a9dab + - MD5=47e6ac52431ca47da17248d80bf71389 + - MD5=eb57f03b7603f0b235af62e8cd5be8c2 + - MD5=e1a9aa4c14669b1fb1f67a7266f87e82 + - MD5=29047f0b7790e524b09a06852d31a117 + - MD5=4dd6250eb2d368f500949952eb013964 + - MD5=fb7c61ef427f9b2fdff3574ee6b1819b + - MD5=844af8c877f5da723c1b82cf6e213fc1 + - MD5=e39152eadd76751b1d7485231b280948 + - MD5=ac6e29f535b2c42999c50d2fc32f2c9c + - MD5=2406ea37152d2154be3fef6d69ada2c6 + - MD5=0ea8389589c603a8b05146bd06020597 + - MD5=754e21482baf18b8b0ed0f4be462ba03 + - MD5=c4a517a02ba9f6eac5cf06e3629cc076 + - MD5=32282e07db321e8d7849f2287bb6a14f + - MD5=32b67a6cd6dd998b9f563ed13d54a8bc + - MD5=3359e1d4244a7d724949c63e89689ef8 + - MD5=5917e415a5bf30b3fcbcbcb8a4f20ee0 + - MD5=0bdd51cc33e88b5265dfb7d88c5dc8d6 + - MD5=a90236e4962620949b720f647a91f101 - MD5=ccde8c94439f9fc9c42761e4b9a23d97 - - SHA1=acb8e45ebd1252313ece94198df47edf9294e7d3 - - SHA1=b5a8e2104d76dbb04cd9ffe86784113585822375 - - SHA1=87e20486e804bfff393cc9ad9659858e130402a2 - - SHA1=064de88dbbea67c149e779aac05228e5405985c7 + - MD5=68caf620ef8deaf06819cf8c80d3367b + - MD5=5fec28e8f4f76e5ede24beb32a32b9d7 + - MD5=e8eac6642b882a6196555539149c73f2 + - MD5=aa98b95f5cbae8260122de06a215ee10 + - MD5=a5bcaa2fc87b42e2e5d62a2e5dfcbc80 + - MD5=abc168fdca7169bf9dc40cec9761018d + - MD5=7f9309f5e4defec132b622fadbcad511 + - MD5=4748696211bd56c2d93c21cab91e82a5 + - MD5=48394dce30bb8da5ae089cb8f41b86dc + - MD5=65f800e1112864bf41eb815649f428d5 + - MD5=bd25be845c151370ff177509d95d5add + - MD5=a37ed7663073319d02f2513575a22995 + - MD5=2c39f6172fbc967844cac12d7ab2fa55 + - MD5=491aec2249ad8e2020f9f9b559ab68a8 + - MD5=1e0eb80347e723fa31fce2abb0301d44 + - MD5=a26363e7b02b13f2b8d697abb90cd5c3 + - MD5=4118b86e490aed091b1a219dba45f332 + - MD5=6d131a7462e568213b44ef69156f10a5 + - MD5=10c2ea775c9e76e7774ab89e38f38287 + - SHA1=994e3f5dd082f5d82f9cc84108a60d359910ba79 + - SHA1=4f7989ad92b8c47c004d3731b7602ce0934d7a23 + - SHA1=f2fe02e28cf418d935ec63168caf4dff6a9fbdfe + - SHA1=af42afda54d150810a60baa7987f9f09d49d1317 + - SHA1=09375f13521fc0cacf2cf0a28b2a9248f71498d7 + - SHA1=c75e8fceed74a4024d38ca7002d42e1ecf982462 + - SHA1=03e82eae4d8b155e22ffdafe7ba0c4ab74e8c1a7 + - SHA1=e730eb971ecb493b69de2308b6412836303f733a + - SHA1=6a95860594cd8b7e3636bafa8f812e05359a64ca + - SHA1=5fef884a901e81ac173d63ade3f5c51694decf74 + - SHA1=a8ddb7565b61bc021cd2543a137e00627f999dcc + - SHA1=6451522b1fb428e549976d0742df5034f8124b17 + - SHA1=8ad0919629731b9a8062f7d3d4a727b28f22e81a + - SHA1=cc65bf60600b64feece5575f21ab89e03a728332 + - SHA1=bbc8bd714c917bb1033f37e4808b4b002cd04166 + - SHA1=4f2d9a70ea24121ae01df8a76ffba1f9cc0fde4a - SHA1=f6a18fc9c4abe4a82c1ab28abc0a7259df8de7a3 - - SHA1=39169c9b79502251ca2155c8f1cd7e63fd9a42e9 - - SHA1=d1fb740210c1fa2a52f6748b0588ae77de590b9d - - SHA1=4dd86ff6f7180abebcb92e556a486abe7132754c - - SHA1=ebd8b7e964b8c692eea4a8c406b9cd0be621ebe2 - - SHA1=4b882748faf2c6c360884c6812dd5bcbce75ebff - - SHA1=ba430f3c77e58a4dc1a9a9619457d1c45a19617f - - SHA1=1048f641adf3988d882a159bf1332eeb6d6a7f09 - - SHA1=98588b1d1b63747fa6ee406983bf50ad48a2208b - - SHA1=34b677fba9dcab9a9016332b3332ce57f5796860 + - SHA1=c42178977bd7bbefe084da0129ed808cb7266204 + - SHA1=766949d4599fbf8f45e888c9d6fedf21e04fb333 + - SHA1=b7ff8536553cb236ea2607941e634b23aadb59ee + - SHA1=76789196eebfd4203f477a5a6c75eefc12d9a837 + - SHA1=e5566684a9e0c1afadae80c3a8be6636f6cad7cf + - SHA1=7638c048af5beae44352764390deea597cc3e7b1 + - SHA1=6a6fe0d69e0ea34d695c3b525e6db639f9ad6ac5 + - SHA1=08dd35dde6187af579a1210e00eadbcea29e66d2 + - SHA1=9ee31f1f25f675a12b7bad386244a9fbfa786a87 + - SHA1=3ef30c95e40a854cc4ded94fc503d0c3dc3e620e + - SHA1=a804ebec7e341b4d98d9e94f6e4860a55ea1638d + - SHA1=505546d82aab56889a923004654b9afdec54efe6 + - SHA1=0fe2d22bd2e6b7874f4f2b6279e2ca05edd1222a + - SHA1=8aa0e832e5ca2eb79dafabadbe9948a191008383 + - SHA1=844d7bcd1a928d340255ff42971cca6244a459bf + - SHA1=9e2ebc489c50b6bbae3b08473e007baa65ff208f + - SHA1=7e836dadc2e149a0b758c7e22c989cbfcce18684 + - SHA1=2480549ec8564cd37519a419ab2380cf3e8bab9e + - SHA1=8b9dd4c001f17e7835fdaf0d87a2f3e026557e84 + - SHA1=d3f6c3ea2ef7124403c0fb6e7e3a0558729b5285 + - SHA1=40df7a55c200371853cc3fd3cc03b5ac932f5cd6 + - SHA1=607387cc90b93d58d6c9a432340261fde846b1d9 + - SHA1=2779c54ccd1c008cd80e88c2b454d76f4fa18c07 + - SHA1=46c9a474a1a62c25a05bc7661b75a80b471616e6 + - SHA1=a2fe7de67b3f7d4b1def88ce4ba080f473c0fbc6 + - SHA1=b8b123a413b7bccfa8433deba4f88669c969b543 + - SHA1=bf2f8ada4e80aed4710993cedf4c5d32c95cd509 - SHA1=e3a1e7ce9e9452966885371e4c7fb48a2efdef22 - - SHA1=fe237869b2b496deb52c0bc718ada47b36fc052e - - SHA1=3b6b35bca1b05fafbfc883a844df6d52af44ccdc - - SHA1=dcc852461895311b56e3ae774c8e90782a79c0b4 - - SHA1=1f25f54e9b289f76604e81e98483309612c5a471 - - SHA1=1b526cbcba09b8d663e82004cf24ef44343030d3 - - SHA1=6972314b6d6b0109b9d0a951eb06041f531f589b + - SHA1=c7f0423ac5569f13d2b195e02741ad7eed839c6d + - SHA1=a111dc6ae5575977feba71ee69b790e056846a02 + - SHA1=ac4ace1c21c5cb72c6edf6f2f0cc3513d7c942c3 + - SHA1=d4304bc75c2cb9917bb10a1dc630b75af194f7b2 + - SHA1=0de86ec7d7f16a3680df89256548301eed970393 + - SHA1=b2fb5036b29b12bcec04c3152b65b67ca14d61f2 + - SHA1=0883a9c54e8442a551994989db6fc694f1086d41 + - SHA1=01cf1fe3937fb6585ffb468b116a3af8ddf9ef16 + - SHA1=98c4406fede34c3704afd8cf536ec20d93df9a10 + - SHA1=1048f641adf3988d882a159bf1332eeb6d6a7f09 + - SHA1=867652e062eb6bd1b9fc29e74dea3edd611ef40c + - SHA1=78fd06c82d3ba765c38bad8f48d1821a06280e39 + - SHA1=6debce728bcff73d9d1d334df0c6b1c3735e295c + - SHA1=fdbcebb6cafda927d384d7be2e8063a4377d884f + - SHA1=994dc79255aeb662a672a1814280de73d405617a - SHA1=6abc7979ba044f31884517827afb7b4bdaa0dcc1 - - SHA1=a5914161f8a885702427cf75443fb08d28d904f0 - - SHA1=1ce17c54c6884b0319d5aabbe7f96221f4838514 - - SHA1=b6eb40ea52b47f03edb8f45e2e431b5f666df8c5 - - SHA1=3d27013557b5e68e7212a2f78dfe60c5a2a46327 - - SHA1=f6728821eddd14a21a9536e0f138c6d71cbd9307 - - SHA1=d4cf9296271a9c5c40b0fa34f69b6125c2d14457 + - SHA1=1768f9c780fe7cf66928cfceaef8ed7d985e18f5 - SHA1=5fa527e679d25a15ecc913ce6a8d0218e2ff174b - - SHA1=0fe2d22bd2e6b7874f4f2b6279e2ca05edd1222a - - SHA1=02a9314109e47c5ce52fa553ea57070bf0f8186a - - SHA1=a48aa80942fc8e0699f518de4fd6512e341d4196 - - SHA1=6ae26bde7ec27bd0fa971de6c7500eee34ee9b51 + - SHA1=f11188c540eada726766e0b0b2f9dd3ae2679c61 + - SHA1=8416ee8fd88c3d069fbba90e959507c69a0ee3e9 + - SHA1=ab4399647ebd16c02728c702534a30eb0b7ccbe7 + - SHA1=98588b1d1b63747fa6ee406983bf50ad48a2208b + - SHA1=86e6669dbbce8228e94b2a9f86efdf528f0714fd + - SHA1=c9e9198d52d94771cb14711a5f6aaf8d82b602a2 + - SHA1=17fa047c1f979b180644906fe9265f21af5b0509 + - SHA1=1b526cbcba09b8d663e82004cf24ef44343030d3 + - SHA1=4e0f5576804dab14abb29a29edb9616a1dbe280a + - SHA1=eb76de59ebc5b2258cff0567577ff8c9d0042048 + - SHA1=d4f5323da704ff2f25d6b97f38763c147f2a0e6f + - SHA1=6802e2d2d4e6ee38aa513dafd6840e864310513b + - SHA1=ac18c7847c32957abe8155bcbe71c1f35753b527 + - SHA1=beed6fb6a96996e9b016fa7f2cf7702a49c8f130 + - SHA1=7d453dccb25bf36c411c92e2744c24f9b801225d + - SHA1=9648ad90ec683c63cc02a99111a002f9b00478d1 + - SHA1=31cc8718894d6e6ce8c132f68b8caaba39b5ba7a + - SHA1=31fac347aa26e92db4d8c9e1ba37a7c7a2234f08 + - SHA1=fde0fff1c3e4c053148748504d4b9e0cc97f37ec + - SHA1=73bac306292b4e9107147db94d0d836fdb071e33 + - SHA1=9382981b05b1fb950245313992444bfa0db5f881 + - SHA1=acb8e45ebd1252313ece94198df47edf9294e7d3 + - SHA1=9c36600c2640007d3410dea8017573a113374873 + - SHA1=53f776d9a183c42b93960b270dddeafba74eb3fb + - SHA1=1fdb2474908bdd2ee1e9bd3f224626f9361caab7 + - SHA1=3533d0a54c7ccd83afd6be24f6582b30e4ca0aab - SHA1=cb25a5125fb353496b59b910263209f273f3552d - - SHA1=0320534df24a37a245a0b09679a5adb27018fb5f + - SHA1=a5f1b56615bdaabf803219613f43671233f2001c + - SHA1=6c7663de88a0fba1f63a984f926c6ef449059e38 + - SHA1=e514dfadbeb4d2305988c3281bf105d252dee3a7 + - SHA1=632c80a3c95cf589b03812539dea59594eaefae0 + - SHA1=e6966e360038be3b9d8c9b2582eba4e263796084 - SHA1=675cc00de7c1ef508ccd0c91770c82342c0ad4ab - - SHA1=d4304bc75c2cb9917bb10a1dc630b75af194f7b2 - - SHA1=552730553a1dea0290710465fb8189bdd0eaad42 - - SHA1=92138cfc14f9e2271f641547e031d5d63c6de19a + - SHA1=6ae26bde7ec27bd0fa971de6c7500eee34ee9b51 + - SHA1=80e4808a7fe752cac444676dbbee174367fa2083 + - SHA1=77b4f0c0b06e3dc2474d5e250b772dacaac14dd0 + - SHA1=7277d965b9de91b4d8ea5eb8ae7fa3899eef63a2 + - SHA1=3825ebb0b0664b5f0789371240f65231693be37d - SHA1=de9469a5d01fb84afd41d176f363a66e410d46da - - SHA1=01cf1fe3937fb6585ffb468b116a3af8ddf9ef16 - - SHA1=6451522b1fb428e549976d0742df5034f8124b17 - - SHA1=71469dce9c2f38d0e0243a289f915131bf6dd2a8 + - SHA1=91568d7a82cc7677f6b13f11bea5c40cf12d281b + - SHA1=4b882748faf2c6c360884c6812dd5bcbce75ebff + - SHA1=599de57a5c05e27bb72c7b8a677e531d8e4bf8b5 + - SHA1=1d373361d3129d11bc43f9b6dfa81d06e5ca8358 + - SHA1=c5bd9f2b3a51ba0da08d7c84bab1f2d03a95e405 + - SHA1=89165bbb761d6742ac2a6f5efbffc80c17990bd8 + - SHA1=97812f334a077c40e8e642bb9872ac2c49ddb9a2 + - SHA1=d417c0be261b0c6f44afdec3d5432100e420c3ed + - SHA1=37e6450c7cd6999d080da94b867ba23faa8c32fe + - SHA1=9481cd590c69544c197b4ee055056302978a7191 + - SHA1=ff3e19cd461ddf67529a765cbec9cb81d84dc7da + - SHA1=6972314b6d6b0109b9d0a951eb06041f531f589b - SHA1=dd94a2436994ac35db91e0ec9438b95e438d38c5 + - SHA1=dcc852461895311b56e3ae774c8e90782a79c0b4 + - SHA1=3489ed43bdd11ccbfc892baaeae8102ff7d22f25 - SHA1=e38e1efd98cd8a3cdb327d386db8df79ea08dccc - - SHA1=30a80f560f18609c1123636a8a1a1ef567fa67a7 - - SHA1=86e6669dbbce8228e94b2a9f86efdf528f0714fd - - SHA1=b2f5d3318aab69e6e0ca8da4a4733849e3f1cee2 - - SHA1=31cc8718894d6e6ce8c132f68b8caaba39b5ba7a - - SHA1=6c7663de88a0fba1f63a984f926c6ef449059e38 - - SHA1=fee00dde8080c278a4c4a6d85a5601edc85a1b3d - - SHA1=ed86bb62893e6ffcdfd2ecae2dea77fdf6bf9bde - - SHA1=3533d0a54c7ccd83afd6be24f6582b30e4ca0aab - - SHA1=0291d0457acaf0fe8ed5c3137302390469ce8b35 - - SHA1=e42bd2f585c00a1d6557df405246081f89542d15 - - SHA1=994e3f5dd082f5d82f9cc84108a60d359910ba79 - - SHA1=17fa047c1f979b180644906fe9265f21af5b0509 - - SHA1=1f3799fed3cf43254fe30dcdfdb8dc02d82e662b - - SHA1=fe54a1acc5438883e5c1bba87b78bb7322e2c739 - - SHA1=2779c54ccd1c008cd80e88c2b454d76f4fa18c07 - - SHA1=cb3f30809b05cf02bc29d4a7796fb0650271e542 - - SHA1=76789196eebfd4203f477a5a6c75eefc12d9a837 + - SHA1=d4cf9296271a9c5c40b0fa34f69b6125c2d14457 + - SHA1=10fb4ba6b2585ea02e7afb53ff34bf184eeb1a5d + - SHA1=f6793243ad20359d8be40d3accac168a15a327fb + - SHA1=b34a012887ddab761b2298f882858fa1ff4d99f1 + - SHA1=71469dce9c2f38d0e0243a289f915131bf6dd2a8 + - SHA1=10115219e3595b93204c70eec6db3e68a93f3144 + - SHA1=161bae224cf184ed6c09c77fae866d42412c6d25 + - SHA1=07f78a47f447e4d8a72ad4bc6a26427b9577ec82 + - SHA1=2929de0b5b5e1ba1cce1908e9d800aa21f448b3d - SHA1=745335bcdf02fb42df7d890a24858e16094f48fd - - SHA1=b7ff8536553cb236ea2607941e634b23aadb59ee - - SHA1=e6966e360038be3b9d8c9b2582eba4e263796084 - - SHA1=02534b5b510d978bac823461a39f76b4f0ac5aa3 - - SHA1=3825ebb0b0664b5f0789371240f65231693be37d - - SHA1=c3ca396b5af2064c6f7d05fa0fb697e68d0b9631 - - SHA1=beed6fb6a96996e9b016fa7f2cf7702a49c8f130 - - SHA1=dac68b8ee002d5bb61be3d59908a61a26efb7c09 - - SHA1=0883a9c54e8442a551994989db6fc694f1086d41 - - SHA1=fff4f28287677caabc60c8ab36786c370226588d - - SHA1=03506a2f87d1523e844fba22e7617ab2a218b4b7 - - SHA1=91568d7a82cc7677f6b13f11bea5c40cf12d281b - - SHA1=9ee31f1f25f675a12b7bad386244a9fbfa786a87 - - SHA1=0a62c574603158d2d0c3be2a43c6bb0074ed297c - - SHA1=3ef30c95e40a854cc4ded94fc503d0c3dc3e620e - - SHA1=9c1c9032aa1e33461f35dbf79b6f2d061bfc6774 - - SHA1=fcae2ea5990189f6f230b51e398e3000b71897f2 - - SHA1=766949d4599fbf8f45e888c9d6fedf21e04fb333 - - SHA1=5ed22c0033aed380aa154e672e8db3a2d4c195c4 + - SHA1=2a202830db58d5e942e4f6609228b14095ed2cab + - SHA1=0167259abd9231c29bec32e6106ca93a13999f90 + - SHA1=c23eeb6f18f626ce1fd840227f351fa7543bb167 + - SHA1=613a9df389ad612a5187632d679da11d60f6046a + - SHA1=1ce17c54c6884b0319d5aabbe7f96221f4838514 + - SHA1=025c4e1a9c58bf10be99f6562476b7a0166c6b86 + - SHA1=c3aafe8f67c6738489377031cb5a1197e99b202d + - SHA1=50c6b3cafc35462009d02c10f2e79373936dd7bb - SHA1=6df35a0c2f6d7d39d24277137ea840078dafb812 - - SHA1=867652e062eb6bd1b9fc29e74dea3edd611ef40c - - SHA1=af42afda54d150810a60baa7987f9f09d49d1317 - - SHA1=0de86ec7d7f16a3680df89256548301eed970393 - - SHA1=d02403f85be6f243054395a873b41ef8a17ea279 - SHA1=f92faed3ef92fa5bc88ebc1725221be5d7425528 - - SHA1=10fb4ba6b2585ea02e7afb53ff34bf184eeb1a5d - - SHA1=161bae224cf184ed6c09c77fae866d42412c6d25 - - SHA1=48f03a13b0f6d3d929a86514ce48a9352ffef5ad - - SHA1=18693de1487c55e374b46a7728b5bf43300d4f69 + - SHA1=3bd1a88cc7dae701bc7085639e1c26ded3f8ccb3 + - SHA1=a3ed5cbfbc17b58243289f3cf575bf04be49591d + - SHA1=552730553a1dea0290710465fb8189bdd0eaad42 + - SHA1=0291d0457acaf0fe8ed5c3137302390469ce8b35 + - SHA1=07f282db28771838d0e75d6618f70d76acfe6082 - SHA1=e6765d8866cad6193df1507c18f31fa7f723ca3e - - SHA1=e5566684a9e0c1afadae80c3a8be6636f6cad7cf - - SHA1=a804ebec7e341b4d98d9e94f6e4860a55ea1638d - - SHA1=b2fb5036b29b12bcec04c3152b65b67ca14d61f2 - - SHA1=8cd9df52b20b8f792ac53f57763dc147d7782b1e - - SHA1=465abe9634c199a5f80f8a4f77ec3118c0d69652 - - SHA1=da970a01cecff33a99c217a42297cec4d1fe66d6 - - SHA1=89a74d0e9fd03129082c5b868f5ad62558ca34fd + - SHA1=22c9da04847c26188226c3a345e2126ef00aa19e + - SHA1=43501832ce50ccaba2706be852813d51de5a900f + - SHA1=cb3f30809b05cf02bc29d4a7796fb0650271e542 + - SHA1=ed86bb62893e6ffcdfd2ecae2dea77fdf6bf9bde + - SHA1=3b6b35bca1b05fafbfc883a844df6d52af44ccdc - SHA1=928b5971a0f7525209d599e2ef15c31717047022 - - SHA1=8e126f4f35e228fdd3aa78d533225db7122d8945 - - SHA1=221717a48ee8e2d19470579c987674f661869e17 - - SHA1=9b2ef5f7429d62342163e001c7c13fb866dbe1ef - - SHA1=632c80a3c95cf589b03812539dea59594eaefae0 - - SHA1=7e836dadc2e149a0b758c7e22c989cbfcce18684 - - SHA1=97812f334a077c40e8e642bb9872ac2c49ddb9a2 - - SHA1=a3ed5cbfbc17b58243289f3cf575bf04be49591d - - SHA1=fde0fff1c3e4c053148748504d4b9e0cc97f37ec - - SHA1=f6793243ad20359d8be40d3accac168a15a327fb - - SHA1=f2fe02e28cf418d935ec63168caf4dff6a9fbdfe - - SHA1=85076aa3bffb40339021286b73d72dd5a8e4396a - - SHA1=bf5515fcf120c2548355d607cfd57e9b3e0af6e9 - - SHA1=844d7bcd1a928d340255ff42971cca6244a459bf - - SHA1=91f832f46e4c38ecc9335460d46f6f71352cffed - - SHA1=50c6b3cafc35462009d02c10f2e79373936dd7bb - - SHA1=c257aa4094539719a3c7b7950598ef872dbf9518 - - SHA1=a111dc6ae5575977feba71ee69b790e056846a02 - - SHA1=c42178977bd7bbefe084da0129ed808cb7266204 - - SHA1=f11188c540eada726766e0b0b2f9dd3ae2679c61 + - SHA1=b5696e2183d9387776820ef3afa388200f08f5a6 + - SHA1=ebd8b7e964b8c692eea4a8c406b9cd0be621ebe2 - SHA1=fe18c58fbd0a83d67920e037d522c176704d2ca3 - - SHA1=4f7989ad92b8c47c004d3731b7602ce0934d7a23 - - SHA1=0167259abd9231c29bec32e6106ca93a13999f90 - - SHA1=c5bd9f2b3a51ba0da08d7c84bab1f2d03a95e405 - - SHA1=b34a012887ddab761b2298f882858fa1ff4d99f1 - - SHA1=492e40b01a9a6cec593691db4838f20b3eaeacc5 - - SHA1=9086e670e3a4518c0bcdf0da131748d4085ef42b - - SHA1=6b5aa51f4717d123a468e9e9d3d154e20ca39d56 - - SHA1=599de57a5c05e27bb72c7b8a677e531d8e4bf8b5 - - SHA1=1768f9c780fe7cf66928cfceaef8ed7d985e18f5 + - SHA1=9c1c9032aa1e33461f35dbf79b6f2d061bfc6774 + - SHA1=8e126f4f35e228fdd3aa78d533225db7122d8945 + - SHA1=064de88dbbea67c149e779aac05228e5405985c7 + - SHA1=30a80f560f18609c1123636a8a1a1ef567fa67a7 - SHA1=98130128685c8640a8a8391cb4718e98dd8fe542 - - SHA1=0bec69c1b22603e9a385495fbe94700ac36b28e5 - - SHA1=a63e9ecdebaf4ef9c9ec3362ff110b8859cc396d - - SHA1=6a6fe0d69e0ea34d695c3b525e6db639f9ad6ac5 - - SHA1=9382981b05b1fb950245313992444bfa0db5f881 - - SHA1=31fac347aa26e92db4d8c9e1ba37a7c7a2234f08 - - SHA1=1d373361d3129d11bc43f9b6dfa81d06e5ca8358 + - SHA1=a5914161f8a885702427cf75443fb08d28d904f0 + - SHA1=48f03a13b0f6d3d929a86514ce48a9352ffef5ad + - SHA1=fff4f28287677caabc60c8ab36786c370226588d + - SHA1=bb5b17cff0b9e15f1648b4136e95bd20d899aef5 + - SHA1=b2f5d3318aab69e6e0ca8da4a4733849e3f1cee2 + - SHA1=635a39ff5066e1ac7c1c5995d476d8c233966dda + - SHA1=5ed22c0033aed380aa154e672e8db3a2d4c195c4 + - SHA1=87e20486e804bfff393cc9ad9659858e130402a2 + - SHA1=4dd86ff6f7180abebcb92e556a486abe7132754c + - SHA1=39169c9b79502251ca2155c8f1cd7e63fd9a42e9 - SHA1=7f7d144cc80129d0db3159ea5d4294c34b79b20a - - SHA1=062457182ab08594c631a3f897aeb03c6097eb77 - - SHA1=025c4e1a9c58bf10be99f6562476b7a0166c6b86 - - SHA1=2480549ec8564cd37519a419ab2380cf3e8bab9e + - SHA1=8692274681e8d10c26ddf2b993f31974b04f5bf0 + - SHA1=ea4a405445bb6e58c16b81f6d5d2c9a9edde419b + - SHA1=da970a01cecff33a99c217a42297cec4d1fe66d6 + - SHA1=1f3799fed3cf43254fe30dcdfdb8dc02d82e662b + - SHA1=3d2309f7c937bfcae86097d716a8ef66c1337a3c + - SHA1=02a9314109e47c5ce52fa553ea57070bf0f8186a + - SHA1=91f832f46e4c38ecc9335460d46f6f71352cffed - SHA1=76568d987f8603339b8d1958f76de2b957811f66 - - SHA1=25bf4e30a94df9b8f8ab900d1a43fd056d285c9d + - SHA1=e841c8494b715b27b33be6f800ca290628507aba - SHA1=b555aad38df7605985462f3899572931ee126259 - - SHA1=a249278a668d4df30af9f5d67ebb7d2cd160beaa - - SHA1=40df7a55c200371853cc3fd3cc03b5ac932f5cd6 - - SHA1=07f282db28771838d0e75d6618f70d76acfe6082 - - SHA1=ac4ace1c21c5cb72c6edf6f2f0cc3513d7c942c3 - - SHA1=8ad0919629731b9a8062f7d3d4a727b28f22e81a - - SHA1=bb5b17cff0b9e15f1648b4136e95bd20d899aef5 - - SHA1=613a9df389ad612a5187632d679da11d60f6046a + - SHA1=115edd175c346fd3fbc9f113ee5ccd03b5511ee1 + - SHA1=3d27013557b5e68e7212a2f78dfe60c5a2a46327 - SHA1=bb6ef5518df35d9508673d5011138add8c30fc27 - - SHA1=4f2d9a70ea24121ae01df8a76ffba1f9cc0fde4a + - SHA1=9086e670e3a4518c0bcdf0da131748d4085ef42b + - SHA1=f6728821eddd14a21a9536e0f138c6d71cbd9307 + - SHA1=34b677fba9dcab9a9016332b3332ce57f5796860 + - SHA1=a63e9ecdebaf4ef9c9ec3362ff110b8859cc396d + - SHA1=8cd9df52b20b8f792ac53f57763dc147d7782b1e + - SHA1=fcae2ea5990189f6f230b51e398e3000b71897f2 - SHA1=27371f45f42383029c3c2e6d64a22e35dc772a72 - - SHA1=9c36600c2640007d3410dea8017573a113374873 - - SHA1=ff3e19cd461ddf67529a765cbec9cb81d84dc7da - - SHA1=e514dfadbeb4d2305988c3281bf105d252dee3a7 - - SHA1=36dca91fb4595de38418dffc3506dc78d7388c2c - - SHA1=80e4808a7fe752cac444676dbbee174367fa2083 - - SHA1=23f562f8d5650b2fb92382d228013f2e36e35d6c - - SHA1=bc62fe2b38008f154fc9ea65d851947581b52f49 - - SHA1=a8ddb7565b61bc021cd2543a137e00627f999dcc - - SHA1=538bb45f30035f39d41bd13818fe0c0061182cfe - - SHA1=7638c048af5beae44352764390deea597cc3e7b1 - - SHA1=5fef884a901e81ac173d63ade3f5c51694decf74 - - SHA1=89165bbb761d6742ac2a6f5efbffc80c17990bd8 - - SHA1=bf2f8ada4e80aed4710993cedf4c5d32c95cd509 - - SHA1=09375f13521fc0cacf2cf0a28b2a9248f71498d7 - - SHA1=6debce728bcff73d9d1d334df0c6b1c3735e295c - - SHA1=3d2309f7c937bfcae86097d716a8ef66c1337a3c - - SHA1=cc65bf60600b64feece5575f21ab89e03a728332 - - SHA1=b2f955b3e6107f831ebe67997f8586d4fe9f3e98 - - SHA1=3489ed43bdd11ccbfc892baaeae8102ff7d22f25 - - SHA1=a5f1b56615bdaabf803219613f43671233f2001c - - SHA1=e841c8494b715b27b33be6f800ca290628507aba - - SHA1=4c8349c6345c8d6101fb896ea0a74d0484c56df0 - - SHA1=948368fe309652e8d88088d23e1df39e9c2b6649 + - SHA1=b6eb40ea52b47f03edb8f45e2e431b5f666df8c5 - SHA1=9f27987c32321f8da099efc1dc60a73f8f629d3a - - SHA1=a14cd928c60495777629be283c1d5b8ebbab8c0d - - SHA1=6a95860594cd8b7e3636bafa8f812e05359a64ca - - SHA1=c75e8fceed74a4024d38ca7002d42e1ecf982462 - - SHA1=8302802b709ad242a81b939b6c90b3230e1a1f1e - - SHA1=c23eeb6f18f626ce1fd840227f351fa7543bb167 - - SHA1=37e6450c7cd6999d080da94b867ba23faa8c32fe - - SHA1=83506de48bd0c50ea00c9e889fe980f56e6c6e1b - - SHA1=4da007dd298723f920e194501bb49bab769dfb14 - - SHA1=d6de8211dba7074d92b5830618176a3eb8eb6670 - - SHA1=c7f0423ac5569f13d2b195e02741ad7eed839c6d - - SHA1=fcf9978cf1af2e9b1e2eaf509513664dfcc1847b - - SHA1=ab4399647ebd16c02728c702534a30eb0b7ccbe7 - - SHA1=77b4f0c0b06e3dc2474d5e250b772dacaac14dd0 - - SHA1=9648ad90ec683c63cc02a99111a002f9b00478d1 - - SHA1=e730eb971ecb493b69de2308b6412836303f733a - - SHA1=115edd175c346fd3fbc9f113ee5ccd03b5511ee1 - - SHA1=635a39ff5066e1ac7c1c5995d476d8c233966dda - - SHA1=fdbcebb6cafda927d384d7be2e8063a4377d884f - - SHA1=46c9a474a1a62c25a05bc7661b75a80b471616e6 - - SHA1=4e0f5576804dab14abb29a29edb9616a1dbe280a - - SHA1=d4f5323da704ff2f25d6b97f38763c147f2a0e6f - - SHA1=ea4a405445bb6e58c16b81f6d5d2c9a9edde419b - - SHA1=020580278d74d0fe741b0f786d8dca7554359997 - - SHA1=7277d965b9de91b4d8ea5eb8ae7fa3899eef63a2 - - SHA1=2929de0b5b5e1ba1cce1908e9d800aa21f448b3d - - SHA1=607387cc90b93d58d6c9a432340261fde846b1d9 - - SHA1=6802e2d2d4e6ee38aa513dafd6840e864310513b - - SHA1=e2d98e0e178880f10434059096f936b2c06ed8f4 - - SHA1=78fd06c82d3ba765c38bad8f48d1821a06280e39 - - SHA1=cf9baf57e16b73d7a4a99dd0c092870deba1a997 - - SHA1=3c1c3f5f5081127229ba0019fbf0efc2a9c1d677 - - SHA1=994dc79255aeb662a672a1814280de73d405617a - - SHA1=197811ec137e9916e6692fc5c28f6d6609ffc20e - - SHA1=08dd35dde6187af579a1210e00eadbcea29e66d2 - - SHA1=8b9dd4c001f17e7835fdaf0d87a2f3e026557e84 - - SHA1=e0b263f2d9c08f27c6edf5a25aa67a65c88692b0 - - SHA1=53f776d9a183c42b93960b270dddeafba74eb3fb - - SHA1=8692274681e8d10c26ddf2b993f31974b04f5bf0 - - SHA1=9e2ebc489c50b6bbae3b08473e007baa65ff208f - - SHA1=43501832ce50ccaba2706be852813d51de5a900f - - SHA1=b8b123a413b7bccfa8433deba4f88669c969b543 + - SHA1=40372b4de2db020ce2659e1de806d4338fd7ebef + - SHA1=18693de1487c55e374b46a7728b5bf43300d4f69 + - SHA1=b2f955b3e6107f831ebe67997f8586d4fe9f3e98 - SHA1=005754dab657ddc6dae28eee313ca2cc6a0c375c - - SHA1=98c4406fede34c3704afd8cf536ec20d93df9a10 - - SHA1=7d453dccb25bf36c411c92e2744c24f9b801225d - - SHA1=d3f6c3ea2ef7124403c0fb6e7e3a0558729b5285 - - SHA1=3bd1a88cc7dae701bc7085639e1c26ded3f8ccb3 - - SHA1=c9e9198d52d94771cb14711a5f6aaf8d82b602a2 + - SHA1=0bec69c1b22603e9a385495fbe94700ac36b28e5 - SHA1=bd39ef9c758e2d9d6037e067fbb2c1f2ac7feac8 - - SHA1=10115219e3595b93204c70eec6db3e68a93f3144 - - SHA1=ac18c7847c32957abe8155bcbe71c1f35753b527 - - SHA1=07f78a47f447e4d8a72ad4bc6a26427b9577ec82 - - SHA1=6d09d826581baa1817be6fbd44426db9b05f1909 - - SHA1=8416ee8fd88c3d069fbba90e959507c69a0ee3e9 - - SHA1=2a202830db58d5e942e4f6609228b14095ed2cab - - SHA1=40372b4de2db020ce2659e1de806d4338fd7ebef + - SHA1=23f562f8d5650b2fb92382d228013f2e36e35d6c + - SHA1=a48aa80942fc8e0699f518de4fd6512e341d4196 + - SHA1=e42bd2f585c00a1d6557df405246081f89542d15 + - SHA1=bf5515fcf120c2548355d607cfd57e9b3e0af6e9 + - SHA1=89a74d0e9fd03129082c5b868f5ad62558ca34fd + - SHA1=948368fe309652e8d88088d23e1df39e9c2b6649 + - SHA1=a14cd928c60495777629be283c1d5b8ebbab8c0d + - SHA1=1f25f54e9b289f76604e81e98483309612c5a471 + - SHA1=25bf4e30a94df9b8f8ab900d1a43fd056d285c9d + - SHA1=d1fb740210c1fa2a52f6748b0588ae77de590b9d + - SHA1=dac68b8ee002d5bb61be3d59908a61a26efb7c09 + - SHA1=a56598e841ae694ac78c37bf4f8c09f9eaf3271f + - SHA1=465abe9634c199a5f80f8a4f77ec3118c0d69652 - SHA1=a0cefb5b55f7a7a145b549613e26b6805515a1ad - - SHA1=1fdb2474908bdd2ee1e9bd3f224626f9361caab7 - - SHA1=bbc8bd714c917bb1033f37e4808b4b002cd04166 - - SHA1=9481cd590c69544c197b4ee055056302978a7191 + - SHA1=36dca91fb4595de38418dffc3506dc78d7388c2c + - SHA1=92138cfc14f9e2271f641547e031d5d63c6de19a + - SHA1=fcf9978cf1af2e9b1e2eaf509513664dfcc1847b + - SHA1=d02403f85be6f243054395a873b41ef8a17ea279 + - SHA1=4da007dd298723f920e194501bb49bab769dfb14 + - SHA1=85076aa3bffb40339021286b73d72dd5a8e4396a + - SHA1=221717a48ee8e2d19470579c987674f661869e17 + - SHA1=a249278a668d4df30af9f5d67ebb7d2cd160beaa + - SHA1=6b5aa51f4717d123a468e9e9d3d154e20ca39d56 + - SHA1=b5a8e2104d76dbb04cd9ffe86784113585822375 + - SHA1=02534b5b510d978bac823461a39f76b4f0ac5aa3 + - SHA1=538bb45f30035f39d41bd13818fe0c0061182cfe + - SHA1=6d09d826581baa1817be6fbd44426db9b05f1909 + - SHA1=197811ec137e9916e6692fc5c28f6d6609ffc20e + - SHA1=c3ca396b5af2064c6f7d05fa0fb697e68d0b9631 + - SHA1=cf9baf57e16b73d7a4a99dd0c092870deba1a997 + - SHA1=0320534df24a37a245a0b09679a5adb27018fb5f + - SHA1=4c8349c6345c8d6101fb896ea0a74d0484c56df0 + - SHA1=9b2ef5f7429d62342163e001c7c13fb866dbe1ef + - SHA1=6abbc3003c7aa69ce79cbbcd2e3210b07f21d202 + - SHA1=062457182ab08594c631a3f897aeb03c6097eb77 - SHA1=947c76c8c8ba969797f56afd1fa1d1c4a1e3ed25 - - SHA1=505546d82aab56889a923004654b9afdec54efe6 - - SHA1=a56598e841ae694ac78c37bf4f8c09f9eaf3271f - - SHA1=03e82eae4d8b155e22ffdafe7ba0c4ab74e8c1a7 - - SHA1=c3aafe8f67c6738489377031cb5a1197e99b202d + - SHA1=d6de8211dba7074d92b5830618176a3eb8eb6670 + - SHA1=8302802b709ad242a81b939b6c90b3230e1a1f1e + - SHA1=492e40b01a9a6cec593691db4838f20b3eaeacc5 + - SHA1=83506de48bd0c50ea00c9e889fe980f56e6c6e1b + - SHA1=fe54a1acc5438883e5c1bba87b78bb7322e2c739 + - SHA1=020580278d74d0fe741b0f786d8dca7554359997 + - SHA1=3c1c3f5f5081127229ba0019fbf0efc2a9c1d677 + - SHA1=e2d98e0e178880f10434059096f936b2c06ed8f4 + - SHA1=03506a2f87d1523e844fba22e7617ab2a218b4b7 + - SHA1=fee00dde8080c278a4c4a6d85a5601edc85a1b3d + - SHA1=ba430f3c77e58a4dc1a9a9619457d1c45a19617f + - SHA1=c257aa4094539719a3c7b7950598ef872dbf9518 + - SHA1=bc62fe2b38008f154fc9ea65d851947581b52f49 + - SHA1=fe237869b2b496deb52c0bc718ada47b36fc052e + - SHA1=0a62c574603158d2d0c3be2a43c6bb0074ed297c - SHA1=86f34eaea117f629297218a4d196b5729e72d7b9 - - SHA1=22c9da04847c26188226c3a345e2126ef00aa19e - - SHA1=8aa0e832e5ca2eb79dafabadbe9948a191008383 - - SHA1=6abbc3003c7aa69ce79cbbcd2e3210b07f21d202 - - SHA1=eb76de59ebc5b2258cff0567577ff8c9d0042048 - - SHA1=b5696e2183d9387776820ef3afa388200f08f5a6 - - SHA1=73bac306292b4e9107147db94d0d836fdb071e33 - - SHA1=a2fe7de67b3f7d4b1def88ce4ba080f473c0fbc6 - - SHA1=d417c0be261b0c6f44afdec3d5432100e420c3ed - - SHA256=d41e39215c2c1286e4cd3b1dc0948adefb161f22bc3a78756a027d41614ee4ff - - SHA256=f936ec4c8164cbd31add659b61c16cb3a717eac90e74d89c47afb96b60120280 - - SHA256=e8743094f002239a8a9d6d7852c7852e0bb63cd411b007bd8c194bcba159ef15 - - SHA256=818787057fc60ac8b957aa37d750aa4bace8e6a07d3d28b070022ee6dcd603ab - - SHA256=19dfacea1b9f19c0379f89b2424ceb028f2ce59b0db991ba83ae460027584987 - - SHA256=be70be9d84ae14ea1fa5ec68e2a61f6acfe576d965fe51c6bac78fba01a744fb - - SHA256=5f6fec8f7890d032461b127332759c88a1b7360aa10c6bd38482572f59d2ba8b - - SHA256=62036cdf3663097534adf3252b921eed06b73c2562655eae36b126c7d3d83266 - - SHA256=85b9d7344bf847349b5d58ebe4d44fd63679a36164505271593ef1076aa163b2 - - SHA256=770f33259d6fb10f4a32d8a57d0d12953e8455c72bb7b60cb39ce505c507013a - - SHA256=3033ff03e6f523726638b43d954bc666cdd26483fa5abcf98307952ff88f80ee + - SHA1=e0b263f2d9c08f27c6edf5a25aa67a65c88692b0 + - SHA256=9dc7beb60a0a6e7238fc8589b6c2665331be1e807b4d2b3ddd1c258dbbd3e2f7 + - SHA256=06ddf49ac8e06e6b83fccba1141c90ea01b65b7db592c54ffe8aa6d30a75c0b8 + - SHA256=822982c568b6f44b610f8dc4ab5d94795c33ae08a6a608050941264975c1ecdb + - SHA256=082a79311da64b6adc3655e79aa090a9262acaac3b917a363b9571f520a17f6a + - SHA256=618b15970671700188f4102e5d0638184e2723e8f57f7e917fa49792daebdadb + - SHA256=5b932eab6c67f62f097a3249477ac46d80ddccdc52654f8674060b4ddf638e5d + - SHA256=82ac05fefaa8c7ee622d11d1a378f1d255b647ab2f3200fd323cc374818a83f2 + - SHA256=29d765e29d2f06eb511ee88b2e514c9df1a9020a768ddd3d2278d9045e9cdb4a + - SHA256=f461414a2596555cece5cfee65a3c22648db0082ca211f6238af8230e41b3212 + - SHA256=beef40f1b4ce0ff2ee5c264955e6b2a0de6fe4089307510378adc83fad77228b + - SHA256=9a42fa1870472c38a56c0a70f62e57a3cdc0f5bc142f3a400d897b85d65800ac + - SHA256=f03f0fb3a26bb83e8f8fa426744cf06f2e6e29f5220663b1d64265952b8de1a1 + - SHA256=50819a1add4c81c0d53203592d6803f022443440935ff8260ff3b6d5253c0c76 + - SHA256=6b5cf41512255237064e9274ca8f8a3fef820c45aa6067c9c6a0e6f5751a0421 + - SHA256=575e58b62afab094c20c296604dc3b7dd2e1a50f5978d8ee24b7dca028e97316 - SHA256=26bea3b3ab2001d91202f289b7e41499d810474607db7a0893ceab74f5532f47 - - SHA256=cf9451c9ccc5509b9912965f79c2b95eb89d805b2a186d7521d3a262cf5a7a37 + - SHA256=b169a5f643524d59330fafe6e3e328e2179fc5116ee6fae5d39581467d53ac03 + - SHA256=b8807e365be2813b7eccd2e4c49afb0d1e131086715638b7a6307cd7d7e9556c + - SHA256=28f5aa194a384680a08c0467e94a8fc40f8b0f3f2ac5deb42e0f51a80d27b553 + - SHA256=9bb09752cf3a464455422909edef518ac18fe63cf5e1e8d9d6c2e68db62e0c87 + - SHA256=8578bff36e3b02cc71495b647db88c67c3c5ca710b5a2bd539148550595d0330 + - SHA256=a32dc2218fb1f538fba33701dfd9ca34267fda3181e82eb58b971ae8b78f0852 + - SHA256=2c14bea0d85c9cad5c5f5c8d0e5442f6deb9e93fe3ad8ea5e8e147821c6f9304 + - SHA256=23e89fd30a1c7db37f3ea81b779ce9acf8a4294397cbb54cff350d54afcfd931 + - SHA256=f6c316e2385f2694d47e936b0ac4bc9b55e279d530dd5e805f0d963cb47c3c0d + - SHA256=b0a27ac1a8173413de13860d2b2e34cb6bc4d1149f94b62d319042e11d8b004c + - SHA256=897f2bbe81fc3b1ae488114b93f3eb0133a85678d061c7a6f718507971f33736 + - SHA256=497a836693be1b330993e2be64f6c71bf290c127faca1c056abd0dc374654830 + - SHA256=8e035beb02a411f8a9e92d4cf184ad34f52bbd0a81a50c222cdd4706e4e45104 + - SHA256=f9f2091fccb289bcf6a945f6b38676ec71dedb32f3674262928ccaf840ca131a + - SHA256=40556dd9b79b755cc0b48d3d024ceb15bd2c0e04960062ab2a85cd7d4d1b724a + - SHA256=ac5fb90e88d8870cd5569e661bea98cf6b001d83ab7c65a5196ea3743146939a - SHA256=12b0000698b79ea3c8178b9e87801cc34bad096a151a8779559519deafd4e3f0 - - SHA256=a7a665a695ec3c0f862a0d762ad55aff6ce6014359647e7c7f7e3c4dc3be81b7 - - SHA256=e1cb86386757b947b39086cc8639da988f6e8018ca9995dd669bdc03c8d39d7d + - SHA256=9e56e96df36237e65b3d7dbc490afdc826215158f6278cd579c576c4b455b392 + - SHA256=ec96b15ce218f97ec1d8f07f13b052d274c4c8438f31daf246ccfaaee5e1bebd + - SHA256=da70fa44290f949e9b3e0fcfe0503de46e82e0472e8e3c360da3fd2bfa364eee + - SHA256=accb1a6604efb1b3ce9345c9fd62fe717a84c3e089e09c638e461df89193ef01 + - SHA256=083f821d90e607ed93221e71d4742673e74f573d0755a96ad17d1403f65a2254 + - SHA256=c7bccc6f38403def4690e00a0b31eda05973d82be8953a3379e331658c51b231 - SHA256=0740359baef32cbb0b14a9d1bd3499ea2e770ff9b1c85898cfac8fd9aca4fa39 - - SHA256=f8236fc01d4efaa48f032e301be2ebba4036b2cd945982a29046eca03944d2ae + - SHA256=32882949ea084434a376451ff8364243a50485a3b4af2f2240bb5f20c164543d - SHA256=3ca5d47d076e99c312578ef6499e1fa7b9db88551cfc0f138da11105aca7c5e1 - - SHA256=139f8412a7c6fdc43dcfbbcdba256ee55654eb36a40f338249d5162a1f69b988 - - SHA256=0f58e09651d48d2b1bcec7b9f7bb85a2d1a7b65f7a51db281fe0c4f058a48597 - - SHA256=492113a223d6a3fc110059fe46a180d82bb8e002ef2cd76cbf0c1d1eb8243263 - - SHA256=9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c - - SHA256=793b78e70b3ae3bb400c5a8bc4d2d89183f1d7fc70954aed43df7287248b6875 - - SHA256=9a67626fb468d3f114c23ac73fd8057f43d06393d3eca04da1d6676f89da2d40 - - SHA256=2da2b883e48e929f5365480d487590957d9e6582cc6da2c0b42699ba85e54fe2 - - SHA256=6d68d8a71a11458ddf0cbb73c0f145bee46ef29ce03ad7ece6bd6aa9d31db9b7 - - SHA256=9a42fa1870472c38a56c0a70f62e57a3cdc0f5bc142f3a400d897b85d65800ac - - SHA256=c8f9e1ad7b8cce62fba349a00bc168c849d42cfb2ca5b2c6cc4b51d054e0c497 - - SHA256=497a836693be1b330993e2be64f6c71bf290c127faca1c056abd0dc374654830 - - SHA256=6839fcae985774427c65fe38e773aa96ec451a412caa5354ad9e2b9b54ffe6c1 - - SHA256=06c5ebd0371342d18bc81a96f5e5ce28de64101e3c2fd0161d0b54d8368d2f1f + - SHA256=f8236fc01d4efaa48f032e301be2ebba4036b2cd945982a29046eca03944d2ae + - SHA256=05b146a48a69dd62a02759487e769bd30d39f16374bc76c86453b4ae59e7ffa4 + - SHA256=8922be14c657e603179f1dd94dc32de7c99d2268ac92d429c4fdda7396c32e50 - SHA256=aafa642ca3d906138150059eeddb6f6b4fe9ad90c6174386cfe13a13e8be47d9 - - SHA256=da70fa44290f949e9b3e0fcfe0503de46e82e0472e8e3c360da3fd2bfa364eee - - SHA256=5295080de37d4838e15dec4e3682545033d479d3d9ac28d74747c086559fb968 - - SHA256=accb1a6604efb1b3ce9345c9fd62fe717a84c3e089e09c638e461df89193ef01 - - SHA256=4b97d63ebdeda6941bb8cef5e94741c6cca75237ca830561f2262034805f0919 - - SHA256=569fe70bedd0df8585689b0e88ad8bd0544fdf88b9dbfc2076f4bdbcf89c28aa - - SHA256=1485c0ed3e875cbdfc6786a5bd26d18ea9d31727deb8df290a1c00c780419a4e - - SHA256=42b22faa489b5de936db33f12184f6233198bdf851a18264d31210207827ba25 - - SHA256=f9b01406864ab081aa77eef4ad15cb2dd2f830d1ef54f52622a59ff1aeb05ba5 - - SHA256=9e56e96df36237e65b3d7dbc490afdc826215158f6278cd579c576c4b455b392 - - SHA256=efa56907b9d0ec4430a5d581f490b6b9052b1e979da4dab6a110ab92e17d4576 - - SHA256=30061ef383e18e74bb067fbca69544f1a7544e8dc017d4e7633d8379aff4c3c3 - - SHA256=60ee78a2b070c830fabb54c6bde0d095dff8fad7f72aa719758b3c41c72c2aa9 - - SHA256=c42c1e5c3c04163bf61c3b86b04a5ec7d302af7e254990cef359ac80474299da - - SHA256=e858de280bd72d7538386a73e579580a6d5edba87b66b3671dc180229368be19 - - SHA256=888491196bd8ff528b773a3e453eae49063ad31fb4ca0f9f2e433f8d35445440 - - SHA256=d032001eab6cad4fbef19aab418650ded00152143bd14507e17d62748297c23f - - SHA256=fd223833abffa9cd6cc1848d77599673643585925a7ee51259d67c44d361cce8 - - SHA256=f6157e033a12520c73dcedf8e49cd42d103e5874c34d6527bb9de25a5d26e5ad - - SHA256=50819a1add4c81c0d53203592d6803f022443440935ff8260ff3b6d5253c0c76 - - SHA256=a78c9871da09fab21aec9b88a4e880f81ecb1ed0fa941f31cc2f041067e8e972 - - SHA256=e4b2c0aa28aac5e197312a061b05363e2e0387338b28b23272b5b6659d29b1d8 - - SHA256=ea50f22daade04d3ca06dedb497b905215cba31aae7b4cab4b533fda0c5be620 - - SHA256=06ddf49ac8e06e6b83fccba1141c90ea01b65b7db592c54ffe8aa6d30a75c0b8 - - SHA256=96bf3ee7c6673b69c6aa173bb44e21fa636b1c2c73f4356a7599c121284a51cc - - SHA256=baf7fbc4743a81eb5e4511023692b2dfdc32ba670ba3e4ed8c09db7a19bd82d3 - - SHA256=30e083cd7616b1b969a92fd18cf03097735596cce7fcf3254b2ca344e526acc2 - - SHA256=bcb774b6f6ff504d2db58096601bc5cb419c169bfbeaa3af852417e87d9b2aa0 - - SHA256=9c2f3e9811f7d0c7463eaa1ee6f39c23f902f3797b80891590b43bbe0fdf0e51 - - SHA256=82ac05fefaa8c7ee622d11d1a378f1d255b647ab2f3200fd323cc374818a83f2 - - SHA256=fa9abb3e7e06f857be191a1e049dd37642ec41fb2520c105df2227fcac3de5d5 - - SHA256=a74e8f94d2c140646a8bb12e3e322c49a97bd1b8a2e4327863d3623f43d65c66 - - SHA256=4999541c47abd4a7f2a002c180ae8d31c19804ce538b85870b8db53d3652862b - - SHA256=ad938d15ecfd70083c474e1642a88b078c3cea02cdbddf66d4fb1c01b9b29d9a - - SHA256=deade507504d385d8cae11365a2ac9b5e2773ff9b61624d75ffa882d6bb28952 - - SHA256=d37996abc8efb29f1ccbb4335ce9ba9158bec86cc4775f0177112e87e4e3be5c - SHA256=087270d57f1626f29ba9c25750ca19838a869b73a1f71af50bdf37d6ff776212 - - SHA256=a0931e16cf7b18d15579e36e0a69edad1717b07527b5407f2c105a2f554224b2 - - SHA256=4bd4715d2a7af627da11513e32fab925c872babebdb7ff5675a75815fbf95021 - - SHA256=4bca0a401b364a5cc1581a184116c5bafa224e13782df13272bc1b748173d1be - - SHA256=b0a27ac1a8173413de13860d2b2e34cb6bc4d1149f94b62d319042e11d8b004c - - SHA256=82b7fa34ad07dbf9afa63b2f6ed37973a1b4fe35dee90b3cf5c788c15c9f08f7 - - SHA256=7f4555a940ce1156c9bcea9a2a0b801f9a5e44ec9400b61b14a7b1a6404ffdf6 - - SHA256=36f45a42ebf2de6962db92aaf8845d7f9fd6895bedc31422adcf31c59a79602d - - SHA256=07beac65e28ee124f1da354293a3d6ad7250ed1ce29b8342acfd22252548a5af - - SHA256=2456a7921fa8ab7b9779e5665e6b42fccc019feb9e49a9a28a33ec0a4bb323c4 - - SHA256=26ef7b27d1afb685e0c136205a92d29b1091e3dcf6b7b39a4ec03fbbdb57cb55 - - SHA256=ee7b8eb150df2788bb9d5fe468327899d9f60d6731c379fd75143730a83b1c55 - - SHA256=1ef7afea0cf2ef246ade6606ef8b7195de9cd7a3cd7570bff90ba1e2422276f6 - - SHA256=29348ebe12d872c5f40e316a0043f7e5babe583374487345a79bad0ba93fbdfe - - SHA256=bc49cb96f3136c3e552bf29f808883abb9e651040415484c1736261b52756908 - - SHA256=82b0e1d7a27b67f0e6dc39dc41e880bdaef5d1f69fcec38e08da2ed78e805ef9 - - SHA256=b0f1fbadc1d7a77557d3d836f7698bd986a3ec9fc5d534ad3403970f071176f7 - - SHA256=49c827cf48efb122a9d6fd87b426482b7496ccd4a2dbca31ebbf6b2b80c98530 - - SHA256=a32dc2218fb1f538fba33701dfd9ca34267fda3181e82eb58b971ae8b78f0852 - - SHA256=18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7 - - SHA256=24c900024d213549502301c366d18c318887630f04c96bf0a3d6ba74e0df164f - - SHA256=88076e98d45ed3adf0c5355411fe8ca793eb7cec1a1c61f5e1ec337eae267463 - - SHA256=f0474e76cfd36e37e32cfe5c0a9e05ddee17dd5014d7aa8817ea3634a3540a3f - - SHA256=773b4a1efb9932dd5116c93d06681990759343dfe13c0858d09245bc610d5894 - - SHA256=5bc3994612624da168750455b363f2964e1861dba4f1c305df01b970ac02a7ae - - SHA256=3b2cd65a4fbdd784a6466e5196bc614c17d1dbaed3fd991d242e3be3e9249da6 - - SHA256=56066ed07bad3b5c1474e8fae5ee2543d17d7977369b34450bd0775517e3b25c - - SHA256=d43520128871c83b904f3136542ea46644ac81a62d51ae9d3c3a3f32405aad96 - - SHA256=06a0ec9a316eb89cb041b1907918e3ad3b03842ec65f004f6fa74d57955573a4 - - SHA256=a2d32c28eb5945b85872697d7cfbe87813c09a0e1be28611563755f68b9cb88b - - SHA256=e8ec06b1fa780f577ff0e8c713e0fd9688a48e0329c8188320f9eb62dfc0667f - - SHA256=200f98655d1f46d2599c2c8605ebb7e335fee3883a32135ca1a81e09819bc64a - - SHA256=b9dad0131c51e2645e761b74a71ebad2bf175645fa9f42a4ab0e6921b83306e3 - - SHA256=c4f041de66ec8cc5ab4a03bbc46f99e073157a4e915a9ab4069162de834ffc5c + - SHA256=008fa89822b7a1f91e5843169083202ea580f7b06eb6d5cae091ba844d035f25 - SHA256=b2486f9359c94d7473ad8331b87a9c17ca9ba6e4109fd26ce92dff01969eaa09 - - SHA256=8d9a2363b757d3f127b9c6ed8f7b8b018e652369bc070aa3500b3a978feaa6ce - - SHA256=f03f0fb3a26bb83e8f8fa426744cf06f2e6e29f5220663b1d64265952b8de1a1 - - SHA256=7662187c236003308a7951c2f49c0768636c492f8935292d02f69e59b01d236d - - SHA256=89698cad598a56f9e45efffd15d1841e494a2409cc12279150a03842cd6bb7f3 - - SHA256=15cf366f7b3ee526db7ce2b5253ffebcbfaa4f33a82b459237c049f854a97c0c - - SHA256=4f02aed3750bc6a924c75e774404f259f721d8f4081ed68aa01cf73ca5430f85 - - SHA256=d7aa8abdda8a68b8418e86bef50c19ef2f34bc66e7b139e43c2a99ab48c933be - - SHA256=fefc070a5f6a9c0415e1c6f44512a33e8d163024174b30a61423d00d1e8f9bf2 - - SHA256=14b89298134696f2fd1b1df0961d36fa6354721ea92498a349dc421e79447925 - - SHA256=6908ebf52eb19c6719a0b508d1e2128f198d10441551cbfb9f4031d382f5229f - - SHA256=b0eb4d999e4e0e7c2e33ff081e847c87b49940eb24a9e0794c6aa9516832c427 - - SHA256=47356707e610cfd0be97595fbe55246b96a69141e1da579e6f662ddda6dc5280 - - SHA256=42ff11ddb46dfe5fa895e7babf88ee27790cde53a9139fc384346a89e802a327 - - SHA256=618b15970671700188f4102e5d0638184e2723e8f57f7e917fa49792daebdadb - - SHA256=083f821d90e607ed93221e71d4742673e74f573d0755a96ad17d1403f65a2254 - - SHA256=8684aec77b4c3cafc1a6594de7e95695fa698625d4206a6c4b201875f76a5b38 - - SHA256=8578bff36e3b02cc71495b647db88c67c3c5ca710b5a2bd539148550595d0330 - - SHA256=0d10c4b2f56364b475b60bd2933273c8b1ed2176353e59e65f968c61e93b7d99 - - SHA256=b7956e31c2fcc0a84bcedf30e5f8115f4e74eed58916253a0c05c8be47283c57 - - SHA256=e7af7bcb86bd6bab1835f610671c3921441965a839673ac34444cf0ce7b2164e - - SHA256=93aa3066ae831cdf81505e1bc5035227dc0e8f06ebbbb777832a17920c6a02fe - - SHA256=2ce4f8089b02017cbe86a5f25d6bc69dd8b6f5060c918a64a4123a5f3be1e878 - - SHA256=c0d88db11d0f529754d290ed5f4c34b4dba8c4f2e5c4148866daabeab0d25f9c - - SHA256=897f2bbe81fc3b1ae488114b93f3eb0133a85678d061c7a6f718507971f33736 - - SHA256=94ba4bcbdb55d6faf9f33642d0072109510f5c57e8c963d1a3eb4f9111f30112 - - SHA256=8b30b2dc36d5e8f1ffc7281352923773fb821cdf66eb6516f82c697a524b599b - - SHA256=af7ca247bf229950fb48674b21712761ac650d33f13a4dca44f61c59f4c9ac46 - - SHA256=80e4c83cfa9d675a6746ab846fa5da76d79e87a9297e94e595a2d781e02673b3 - - SHA256=d25b5e4d07f594c640dcd93cfc8ab3f0a38348150bd0bfae89f404fbb0d811c6 - - SHA256=94c71954ac0b1fd9fa2bd5c506a16302100ba75d9f84f39ee9b333546c714601 - - SHA256=ac5fb90e88d8870cd5569e661bea98cf6b001d83ab7c65a5196ea3743146939a - - SHA256=95e5b5500e63c31c6561161a82f7f9373f99b5b1f54b018c4866df4f2a879167 - - SHA256=40556dd9b79b755cc0b48d3d024ceb15bd2c0e04960062ab2a85cd7d4d1b724a - SHA256=dfc80e0d468a2c115a902aa332a97e3d279b1fc3d32083e8cf9a4aadf3f54ad1 - - SHA256=d50cb5f4b28c6c26f17b9d44211e515c3c0cc2c0c4bf24cd8f9ed073238053ad - - SHA256=52d5c35325ce701516f8b04380c9fbdb78ec6bcc13b444f758fdb03d545b0677 - - SHA256=f9f2091fccb289bcf6a945f6b38676ec71dedb32f3674262928ccaf840ca131a - - SHA256=0f7bfa10075bf5c193345866333d415509433dbfe5a7d45664b88d72216ff7c3 - - SHA256=e99580e25f419b5ad90669e0c274cf63d30efa08065d064a863e655bdf77fb59 - - SHA256=ece76b79feafb38ae4371e104b6dcbb4253ff3b2acbe5bd14ce6e47525c24f4a + - SHA256=0d10c4b2f56364b475b60bd2933273c8b1ed2176353e59e65f968c61e93b7d99 + - SHA256=5bc3994612624da168750455b363f2964e1861dba4f1c305df01b970ac02a7ae - SHA256=36c65aeb255c06898ffe32e301030e0b74c8bca6fe7be593584b8fdaacd4e475 - - SHA256=443c0ba980d4db9213b654a45248fd855855c1cc81d18812cae9d16729ff9a85 - - SHA256=6964a5d85639baee288555797992861232e75817f93028b50b8c6d34aa38b05b - - SHA256=c7cd14c71bcac5420872c3d825ff6d4be6a86f3d6a8a584f1a756541efff858e - - SHA256=f461414a2596555cece5cfee65a3c22648db0082ca211f6238af8230e41b3212 - - SHA256=b34e2d9f3d4ef59cf7af18e17133a6a06509373e69e33c8eecb2e30501d0d9e4 - - SHA256=1d23ab46ad547e7eef409b40756aae9246fbdf545d13946f770643f19c715e80 - - SHA256=52f3905bbd97dcd2dbd22890e5e8413b9487088f1ee2fa828030a6a45b3975fd - - SHA256=1a5c08d40a5e73b9fe63ea5761eaec8f41d916ca3da2acbc4e6e799b06af5524 - - SHA256=62764ddc2dce74f2620cd2efd97a2950f50c8ac5a1f2c1af00dc5912d52f6920 - - SHA256=28f5aa194a384680a08c0467e94a8fc40f8b0f3f2ac5deb42e0f51a80d27b553 - - SHA256=a85d3fd59bb492a290552e5124bfe3f9e26a3086d69d42ccc44737b5a66673ec - - SHA256=bed4285d0f8d18f17ddaa53a98a475c87c04c4d167499e24c770da788e5d45f4 + - SHA256=30e083cd7616b1b969a92fd18cf03097735596cce7fcf3254b2ca344e526acc2 + - SHA256=15cf366f7b3ee526db7ce2b5253ffebcbfaa4f33a82b459237c049f854a97c0c + - SHA256=be70be9d84ae14ea1fa5ec68e2a61f6acfe576d965fe51c6bac78fba01a744fb + - SHA256=7b846b0a717665e4d9fb313f25d1f6a5b782e495387aea45cf87ad3c049ac0db + - SHA256=85b9d7344bf847349b5d58ebe4d44fd63679a36164505271593ef1076aa163b2 - SHA256=749b0e8c8c8b7dda8c2063c708047cfe95afa0a4d86886b31a12f3018396e67c + - SHA256=4999541c47abd4a7f2a002c180ae8d31c19804ce538b85870b8db53d3652862b + - SHA256=56066ed07bad3b5c1474e8fae5ee2543d17d7977369b34450bd0775517e3b25c + - SHA256=e6a7b0bc01a627a7d0ffb07faddb3a4dd96b6f5208ac26107bdaeb3ab1ec8217 + - SHA256=0f58e09651d48d2b1bcec7b9f7bb85a2d1a7b65f7a51db281fe0c4f058a48597 + - SHA256=cf9451c9ccc5509b9912965f79c2b95eb89d805b2a186d7521d3a262cf5a7a37 + - SHA256=2456a7921fa8ab7b9779e5665e6b42fccc019feb9e49a9a28a33ec0a4bb323c4 + - SHA256=7a7e8df7173387aec593e4fe2b45520ea3156c5f810d2bb1b2784efd1c922376 + - SHA256=eab9b5b7e5fab1c2d7d44cd28f13ae8bb083d9362d2b930d43354a3dfd38e05a + - SHA256=c7cd14c71bcac5420872c3d825ff6d4be6a86f3d6a8a584f1a756541efff858e + - SHA256=ece76b79feafb38ae4371e104b6dcbb4253ff3b2acbe5bd14ce6e47525c24f4a + - SHA256=42b22faa489b5de936db33f12184f6233198bdf851a18264d31210207827ba25 + - SHA256=d7aa8abdda8a68b8418e86bef50c19ef2f34bc66e7b139e43c2a99ab48c933be + - SHA256=4af8192870afe18c77381dfaf8478f8914fa32906812bb53073da284a49ae4c7 + - SHA256=21617210249d2a35016e8ca6bd7a1edda25a12702a2294d56010ee8148637f5a + - SHA256=c0d88db11d0f529754d290ed5f4c34b4dba8c4f2e5c4148866daabeab0d25f9c + - SHA256=19dfacea1b9f19c0379f89b2424ceb028f2ce59b0db991ba83ae460027584987 + - SHA256=4136f1eb11cc463a858393ea733d5f1c220a3187537626f7f5d63eccf7c5a03f + - SHA256=f6157e033a12520c73dcedf8e49cd42d103e5874c34d6527bb9de25a5d26e5ad + - SHA256=e7af7bcb86bd6bab1835f610671c3921441965a839673ac34444cf0ce7b2164e + - SHA256=f9b01406864ab081aa77eef4ad15cb2dd2f830d1ef54f52622a59ff1aeb05ba5 + - SHA256=a2d32c28eb5945b85872697d7cfbe87813c09a0e1be28611563755f68b9cb88b + - SHA256=569fe70bedd0df8585689b0e88ad8bd0544fdf88b9dbfc2076f4bdbcf89c28aa + - SHA256=a78c9871da09fab21aec9b88a4e880f81ecb1ed0fa941f31cc2f041067e8e972 - SHA256=b8c71e1844e987cd6f9c2baf28d9520d4ccdd8593ce7051bb1b3c9bf1d97076a - - SHA256=69866557566c59772f203c11f5fba30271448e231b65806a66e48f41e3804d7f + - SHA256=af7ca247bf229950fb48674b21712761ac650d33f13a4dca44f61c59f4c9ac46 + - SHA256=6908ebf52eb19c6719a0b508d1e2128f198d10441551cbfb9f4031d382f5229f + - SHA256=06a0ec9a316eb89cb041b1907918e3ad3b03842ec65f004f6fa74d57955573a4 + - SHA256=fd223833abffa9cd6cc1848d77599673643585925a7ee51259d67c44d361cce8 + - SHA256=31b66a57fae0cc28a6a236d72a35c8b6244f997e700f9464f9cbf800dbf8bee6 + - SHA256=2fd43a749b5040ebfafd7cdbd088e27ef44341d121f313515ebde460bf3aaa21 + - SHA256=773b4a1efb9932dd5116c93d06681990759343dfe13c0858d09245bc610d5894 + - SHA256=52f3905bbd97dcd2dbd22890e5e8413b9487088f1ee2fa828030a6a45b3975fd - SHA256=86047bb1969d1db455493955fd450d18c62a3f36294d0a6c3732c88dfbcc4f62 - - SHA256=bb2422e96ea993007f25c71d55b2eddfa1e940c89e895abb50dd07d7c17ca1df - - SHA256=0aab2deae90717a8876d46d257401d265cf90a5db4c57706e4003c19eee33550 - - SHA256=2faf95a3405578d0e613c8d88d534aa7233da0a6217ce8475890140ab8fb33c8 - - SHA256=e6f764c3b5580cd1675cbf184938ad5a201a8c096607857869bd7c3399df0d12 - - SHA256=07759750fbb93c77b5c3957c642a9498fcff3946a5c69317db8d6be24098a4a0 - - SHA256=c4c9c84b211899ceb0d18a839afa497537a7c7c01ab481965a09788a9e16590c + - SHA256=aaf04d89fd15bc61265e545f8e1da80e20f59f90058ed343c62ee24358e3af9e + - SHA256=e5ddfa39540d4e7ada56cdc1ebd2eb8c85a408ec078337488a81d1c3f2aaa4ff + - SHA256=8b30b2dc36d5e8f1ffc7281352923773fb821cdf66eb6516f82c697a524b599b + - SHA256=469713c76c7a887826611b8c7180209a8bb6250f91d0f1eb84ac4d450ef15870 + - SHA256=a906251667a103a484a6888dca3e9c8c81f513b8f037b98dfc11440802b0d640 + - SHA256=49c827cf48efb122a9d6fd87b426482b7496ccd4a2dbca31ebbf6b2b80c98530 - SHA256=bcca03ce1dd040e67eb71a7be0b75576316f0b6587b2058786fda8b6f0a5adfd - - SHA256=7b846b0a717665e4d9fb313f25d1f6a5b782e495387aea45cf87ad3c049ac0db - - SHA256=704c6ffe786bc83a73fbdcd2edd50f47c3b5053da7da6aa4c10324d389a31db4 - - SHA256=5c1585b1a1c956c7755429544f3596515dfdf928373620c51b0606a520c6245a - - SHA256=87565ff08a93a8ff41ea932bf55dec8e0c7e79aba036507ea45df9d81cb36105 - - SHA256=0181d60506b1f3609217487c2c737621d637e1232f243f68c662d045f44d4873 - - SHA256=4136f1eb11cc463a858393ea733d5f1c220a3187537626f7f5d63eccf7c5a03f - - SHA256=c4fb31e3f24e40742a1b9855a2d67048fe64b26d8d2dbcec77d2d5deeded2bcc - - SHA256=6b5cf41512255237064e9274ca8f8a3fef820c45aa6067c9c6a0e6f5751a0421 + - SHA256=0aab2deae90717a8876d46d257401d265cf90a5db4c57706e4003c19eee33550 + - SHA256=406b844f4b5c82caf26056c67f9815ad8ecf1e6e5b07d446b456e5ff4a1476f9 + - SHA256=10ad50fcb360dcab8539ea322aaf2270565dc835b7535790937348523d723d6b + - SHA256=c4f041de66ec8cc5ab4a03bbc46f99e073157a4e915a9ab4069162de834ffc5c + - SHA256=139f8412a7c6fdc43dcfbbcdba256ee55654eb36a40f338249d5162a1f69b988 + - SHA256=793b78e70b3ae3bb400c5a8bc4d2d89183f1d7fc70954aed43df7287248b6875 + - SHA256=492113a223d6a3fc110059fe46a180d82bb8e002ef2cd76cbf0c1d1eb8243263 + - SHA256=b34e2d9f3d4ef59cf7af18e17133a6a06509373e69e33c8eecb2e30501d0d9e4 + - SHA256=f936ec4c8164cbd31add659b61c16cb3a717eac90e74d89c47afb96b60120280 + - SHA256=60ee78a2b070c830fabb54c6bde0d095dff8fad7f72aa719758b3c41c72c2aa9 - SHA256=c8ae217860f793fce3ad0239d7b357dba562824dd7177c9d723ca4d4a7f99a12 - - SHA256=eab9b5b7e5fab1c2d7d44cd28f13ae8bb083d9362d2b930d43354a3dfd38e05a - - SHA256=a1e6b431534258954db07039117b3159e889c6b9e757329bbd4126383c60c778 - - SHA256=469713c76c7a887826611b8c7180209a8bb6250f91d0f1eb84ac4d450ef15870 - - SHA256=083a311875173f8c4653e9bbbabb689d14aa86b852e7fa9f5512fc60e0fd2c43 - - SHA256=23e89fd30a1c7db37f3ea81b779ce9acf8a4294397cbb54cff350d54afcfd931 - - SHA256=b169a5f643524d59330fafe6e3e328e2179fc5116ee6fae5d39581467d53ac03 - - SHA256=af4f42197f5ce2d11993434725c81ecb6f54025110dedf56be8ffc0e775d9895 - - SHA256=0d676baac43d9e2d05b577d5e0c516fba250391ab0cb11232a4b17fd97a51e35 + - SHA256=29348ebe12d872c5f40e316a0043f7e5babe583374487345a79bad0ba93fbdfe + - SHA256=5f6fec8f7890d032461b127332759c88a1b7360aa10c6bd38482572f59d2ba8b + - SHA256=e8ec06b1fa780f577ff0e8c713e0fd9688a48e0329c8188320f9eb62dfc0667f + - SHA256=770f33259d6fb10f4a32d8a57d0d12953e8455c72bb7b60cb39ce505c507013a + - SHA256=b0b80a11802b4a8ca69c818a03e76e7ef57c2e293de456439401e8e6073f8719 + - SHA256=bc49cb96f3136c3e552bf29f808883abb9e651040415484c1736261b52756908 - SHA256=4c89c907b7525b39409af1ad11cc7d2400263601edafc41c935715ef5bd145de - - SHA256=9dc7beb60a0a6e7238fc8589b6c2665331be1e807b4d2b3ddd1c258dbbd3e2f7 - - SHA256=082a79311da64b6adc3655e79aa090a9262acaac3b917a363b9571f520a17f6a - - SHA256=b8807e365be2813b7eccd2e4c49afb0d1e131086715638b7a6307cd7d7e9556c - - SHA256=8b32fc8b15363915605c127ccbf5cbe71778f8dfbf821a25455496e969a01434 - - SHA256=02ebf848fa618eba27065db366b15ee6629d98f551d20612ac38b9f655f37715 - - SHA256=7a84703552ae032a0d1699a081e422ed6c958bbe56d5b41839c8bfa6395bee1d - - SHA256=ec96b15ce218f97ec1d8f07f13b052d274c4c8438f31daf246ccfaaee5e1bebd - - SHA256=21617210249d2a35016e8ca6bd7a1edda25a12702a2294d56010ee8148637f5a + - SHA256=0440ef40c46fdd2b5d86e7feef8577a8591de862cfd7928cdbcc8f47b8fa3ffc + - SHA256=200f98655d1f46d2599c2c8605ebb7e335fee3883a32135ca1a81e09819bc64a + - SHA256=b0eb4d999e4e0e7c2e33ff081e847c87b49940eb24a9e0794c6aa9516832c427 + - SHA256=673bbc7fa4154f7d99af333014e888599c27ead02710f7bc7199184b30b38653 + - SHA256=4b97d63ebdeda6941bb8cef5e94741c6cca75237ca830561f2262034805f0919 + - SHA256=d50cb5f4b28c6c26f17b9d44211e515c3c0cc2c0c4bf24cd8f9ed073238053ad + - SHA256=62764ddc2dce74f2620cd2efd97a2950f50c8ac5a1f2c1af00dc5912d52f6920 + - SHA256=6994b32e3f3357f4a1d0abe81e8b62dd54e36b17816f2f1a80018584200a1b77 - SHA256=751e9376cb7cb9de63e1808d43579d787d3f6d659173038fe44a2d7fdb4fd17e - - SHA256=a906251667a103a484a6888dca3e9c8c81f513b8f037b98dfc11440802b0d640 + - SHA256=87565ff08a93a8ff41ea932bf55dec8e0c7e79aba036507ea45df9d81cb36105 + - SHA256=2da2b883e48e929f5365480d487590957d9e6582cc6da2c0b42699ba85e54fe2 - SHA256=627e13da6a45006fff4711b14754f9ccfac9a5854d275da798a22f3a68dd1eaa - - SHA256=10ad50fcb360dcab8539ea322aaf2270565dc835b7535790937348523d723d6b - - SHA256=beef40f1b4ce0ff2ee5c264955e6b2a0de6fe4089307510378adc83fad77228b - - SHA256=f6c316e2385f2694d47e936b0ac4bc9b55e279d530dd5e805f0d963cb47c3c0d - - SHA256=575e58b62afab094c20c296604dc3b7dd2e1a50f5978d8ee24b7dca028e97316 - - SHA256=51805bb537befaac8ce28f2221624cb4d9cefdc0260bc1afd5e0bc97bf1f9f93 + - SHA256=94ba4bcbdb55d6faf9f33642d0072109510f5c57e8c963d1a3eb4f9111f30112 + - SHA256=704c6ffe786bc83a73fbdcd2edd50f47c3b5053da7da6aa4c10324d389a31db4 + - SHA256=d41e39215c2c1286e4cd3b1dc0948adefb161f22bc3a78756a027d41614ee4ff + - SHA256=0f7bfa10075bf5c193345866333d415509433dbfe5a7d45664b88d72216ff7c3 + - SHA256=14b89298134696f2fd1b1df0961d36fa6354721ea92498a349dc421e79447925 + - SHA256=3b2cd65a4fbdd784a6466e5196bc614c17d1dbaed3fd991d242e3be3e9249da6 + - SHA256=2ce4f8089b02017cbe86a5f25d6bc69dd8b6f5060c918a64a4123a5f3be1e878 + - SHA256=e99580e25f419b5ad90669e0c274cf63d30efa08065d064a863e655bdf77fb59 + - SHA256=a74e8f94d2c140646a8bb12e3e322c49a97bd1b8a2e4327863d3623f43d65c66 + - SHA256=47356707e610cfd0be97595fbe55246b96a69141e1da579e6f662ddda6dc5280 + - SHA256=18c909a2b8c5e16821d6ef908f56881aa0ecceeaccb5fa1e54995935fcfd12f7 + - SHA256=95e5b5500e63c31c6561161a82f7f9373f99b5b1f54b018c4866df4f2a879167 + - SHA256=5c1585b1a1c956c7755429544f3596515dfdf928373620c51b0606a520c6245a + - SHA256=82b7fa34ad07dbf9afa63b2f6ed37973a1b4fe35dee90b3cf5c788c15c9f08f7 + - SHA256=a85d3fd59bb492a290552e5124bfe3f9e26a3086d69d42ccc44737b5a66673ec + - SHA256=ea50f22daade04d3ca06dedb497b905215cba31aae7b4cab4b533fda0c5be620 + - SHA256=d032001eab6cad4fbef19aab418650ded00152143bd14507e17d62748297c23f - SHA256=4d42678df3917c37f44a1506307f1677b9a689efcf350b1acce7e6f64b514905 - - SHA256=f3ec3f22639d45b3c865bb1ed7622db32e04e1dbc456298be02bf1f3875c3aac - - SHA256=ddf427ce55b36db522f638ba38e34cd7b96a04cb3c47849b91e7554bfd09a69a + - SHA256=30061ef383e18e74bb067fbca69544f1a7544e8dc017d4e7633d8379aff4c3c3 + - SHA256=7433f14b40c674c5e87b6210c330d5bcaf2f6f52d632ae29e9b7cf3ca405665b + - SHA256=818787057fc60ac8b957aa37d750aa4bace8e6a07d3d28b070022ee6dcd603ab + - SHA256=c4fb31e3f24e40742a1b9855a2d67048fe64b26d8d2dbcec77d2d5deeded2bcc + - SHA256=5295080de37d4838e15dec4e3682545033d479d3d9ac28d74747c086559fb968 - SHA256=7824931e55249a501074a258b4f65cd66157ee35672ba17d1c0209f5b0384a28 - - SHA256=31b66a57fae0cc28a6a236d72a35c8b6244f997e700f9464f9cbf800dbf8bee6 - - SHA256=b0b80a11802b4a8ca69c818a03e76e7ef57c2e293de456439401e8e6073f8719 + - SHA256=07759750fbb93c77b5c3957c642a9498fcff3946a5c69317db8d6be24098a4a0 + - SHA256=51805bb537befaac8ce28f2221624cb4d9cefdc0260bc1afd5e0bc97bf1f9f93 + - SHA256=e6f764c3b5580cd1675cbf184938ad5a201a8c096607857869bd7c3399df0d12 + - SHA256=2faf95a3405578d0e613c8d88d534aa7233da0a6217ce8475890140ab8fb33c8 + - SHA256=af4f42197f5ce2d11993434725c81ecb6f54025110dedf56be8ffc0e775d9895 + - SHA256=baf7fbc4743a81eb5e4511023692b2dfdc32ba670ba3e4ed8c09db7a19bd82d3 - SHA256=a42f4ae69b8755a957256b57eb3d319678eab81705f0ffea0d649ace7321108f - - SHA256=8922be14c657e603179f1dd94dc32de7c99d2268ac92d429c4fdda7396c32e50 - - SHA256=41ad660820c41fc8b1860b13dc1fea8bc8cb2faceb36ed3e29d40d28079d2b1f - - SHA256=5b932eab6c67f62f097a3249477ac46d80ddccdc52654f8674060b4ddf638e5d - - SHA256=8e035beb02a411f8a9e92d4cf184ad34f52bbd0a81a50c222cdd4706e4e45104 + - SHA256=4bca0a401b364a5cc1581a184116c5bafa224e13782df13272bc1b748173d1be + - SHA256=e4b2c0aa28aac5e197312a061b05363e2e0387338b28b23272b5b6659d29b1d8 + - SHA256=69866557566c59772f203c11f5fba30271448e231b65806a66e48f41e3804d7f + - SHA256=93aa3066ae831cdf81505e1bc5035227dc0e8f06ebbbb777832a17920c6a02fe + - SHA256=bed4285d0f8d18f17ddaa53a98a475c87c04c4d167499e24c770da788e5d45f4 + - SHA256=fa9abb3e7e06f857be191a1e049dd37642ec41fb2520c105df2227fcac3de5d5 + - SHA256=07beac65e28ee124f1da354293a3d6ad7250ed1ce29b8342acfd22252548a5af + - SHA256=9a67626fb468d3f114c23ac73fd8057f43d06393d3eca04da1d6676f89da2d40 + - SHA256=7f4555a940ce1156c9bcea9a2a0b801f9a5e44ec9400b61b14a7b1a6404ffdf6 + - SHA256=7a84703552ae032a0d1699a081e422ed6c958bbe56d5b41839c8bfa6395bee1d + - SHA256=ddf427ce55b36db522f638ba38e34cd7b96a04cb3c47849b91e7554bfd09a69a + - SHA256=64d4370843a07e25d4ceb68816015efcaeca9429bb5bb692a88e615b48c7da96 + - SHA256=c8f9e1ad7b8cce62fba349a00bc168c849d42cfb2ca5b2c6cc4b51d054e0c497 + - SHA256=fefc070a5f6a9c0415e1c6f44512a33e8d163024174b30a61423d00d1e8f9bf2 + - SHA256=8d9a2363b757d3f127b9c6ed8f7b8b018e652369bc070aa3500b3a978feaa6ce + - SHA256=d43520128871c83b904f3136542ea46644ac81a62d51ae9d3c3a3f32405aad96 + - SHA256=efa56907b9d0ec4430a5d581f490b6b9052b1e979da4dab6a110ab92e17d4576 + - SHA256=1d23ab46ad547e7eef409b40756aae9246fbdf545d13946f770643f19c715e80 + - SHA256=62036cdf3663097534adf3252b921eed06b73c2562655eae36b126c7d3d83266 + - SHA256=6661320f779337b95bbbe1943ee64afb2101c92f92f3d1571c1bf4201c38c724 + - SHA256=3033ff03e6f523726638b43d954bc666cdd26483fa5abcf98307952ff88f80ee + - SHA256=6964a5d85639baee288555797992861232e75817f93028b50b8c6d34aa38b05b + - SHA256=06c5ebd0371342d18bc81a96f5e5ce28de64101e3c2fd0161d0b54d8368d2f1f + - SHA256=1485c0ed3e875cbdfc6786a5bd26d18ea9d31727deb8df290a1c00c780419a4e + - SHA256=6839fcae985774427c65fe38e773aa96ec451a412caa5354ad9e2b9b54ffe6c1 + - SHA256=deade507504d385d8cae11365a2ac9b5e2773ff9b61624d75ffa882d6bb28952 + - SHA256=c42c1e5c3c04163bf61c3b86b04a5ec7d302af7e254990cef359ac80474299da + - SHA256=8dafe5f3d0527b66f6857559e3c81872699003e0f2ffda9202a1b5e29db2002e + - SHA256=88076e98d45ed3adf0c5355411fe8ca793eb7cec1a1c61f5e1ec337eae267463 + - SHA256=b0f1fbadc1d7a77557d3d836f7698bd986a3ec9fc5d534ad3403970f071176f7 + - SHA256=bcb774b6f6ff504d2db58096601bc5cb419c169bfbeaa3af852417e87d9b2aa0 + - SHA256=4dc24fd07f8fb854e685bc540359c59f177de5b91231cc44d6231e33c9e932b1 + - SHA256=82b0e1d7a27b67f0e6dc39dc41e880bdaef5d1f69fcec38e08da2ed78e805ef9 + - SHA256=ad938d15ecfd70083c474e1642a88b078c3cea02cdbddf66d4fb1c01b9b29d9a + - SHA256=443c0ba980d4db9213b654a45248fd855855c1cc81d18812cae9d16729ff9a85 + - SHA256=f3ec3f22639d45b3c865bb1ed7622db32e04e1dbc456298be02bf1f3875c3aac + - SHA256=0181d60506b1f3609217487c2c737621d637e1232f243f68c662d045f44d4873 - SHA256=c13f5bc4edfbe8f1884320c5d76ca129d00de41a1e61d45195738f125dfe60a7 + - SHA256=8684aec77b4c3cafc1a6594de7e95695fa698625d4206a6c4b201875f76a5b38 + - SHA256=c4c9c84b211899ceb0d18a839afa497537a7c7c01ab481965a09788a9e16590c + - SHA256=d37996abc8efb29f1ccbb4335ce9ba9158bec86cc4775f0177112e87e4e3be5c + - SHA256=1a5c08d40a5e73b9fe63ea5761eaec8f41d916ca3da2acbc4e6e799b06af5524 + - SHA256=9c2f3e9811f7d0c7463eaa1ee6f39c23f902f3797b80891590b43bbe0fdf0e51 + - SHA256=bb2422e96ea993007f25c71d55b2eddfa1e940c89e895abb50dd07d7c17ca1df + - SHA256=94c71954ac0b1fd9fa2bd5c506a16302100ba75d9f84f39ee9b333546c714601 + - SHA256=6d68d8a71a11458ddf0cbb73c0f145bee46ef29ce03ad7ece6bd6aa9d31db9b7 + - SHA256=80e4c83cfa9d675a6746ab846fa5da76d79e87a9297e94e595a2d781e02673b3 + - SHA256=e858de280bd72d7538386a73e579580a6d5edba87b66b3671dc180229368be19 + - SHA256=ee7b8eb150df2788bb9d5fe468327899d9f60d6731c379fd75143730a83b1c55 + - SHA256=8206ce9c42582ac980ff5d64f8e3e310bc2baa42d1a206dd831c6ab397fbd8fe + - SHA256=4f02aed3750bc6a924c75e774404f259f721d8f4081ed68aa01cf73ca5430f85 - SHA256=81c7bb39100d358f8286da5e9aa838606c98dfcc263e9a82ed91cd438cb130d1 - - SHA256=e6a7b0bc01a627a7d0ffb07faddb3a4dd96b6f5208ac26107bdaeb3ab1ec8217 - - SHA256=4dc24fd07f8fb854e685bc540359c59f177de5b91231cc44d6231e33c9e932b1 - - SHA256=673bbc7fa4154f7d99af333014e888599c27ead02710f7bc7199184b30b38653 - - SHA256=aaf04d89fd15bc61265e545f8e1da80e20f59f90058ed343c62ee24358e3af9e - - SHA256=32882949ea084434a376451ff8364243a50485a3b4af2f2240bb5f20c164543d - - SHA256=ee525b90053bb30908b5d7bf4c5e9b8b9d6b7b5c9091a26fa25d30d3ad8ef5d0 - - SHA256=29d765e29d2f06eb511ee88b2e514c9df1a9020a768ddd3d2278d9045e9cdb4a - - SHA256=05b146a48a69dd62a02759487e769bd30d39f16374bc76c86453b4ae59e7ffa4 - - SHA256=008fa89822b7a1f91e5843169083202ea580f7b06eb6d5cae091ba844d035f25 - - SHA256=2c14bea0d85c9cad5c5f5c8d0e5442f6deb9e93fe3ad8ea5e8e147821c6f9304 - - SHA256=7433f14b40c674c5e87b6210c330d5bcaf2f6f52d632ae29e9b7cf3ca405665b - - SHA256=e5ddfa39540d4e7ada56cdc1ebd2eb8c85a408ec078337488a81d1c3f2aaa4ff - - SHA256=4af8192870afe18c77381dfaf8478f8914fa32906812bb53073da284a49ae4c7 - - SHA256=822982c568b6f44b610f8dc4ab5d94795c33ae08a6a608050941264975c1ecdb - - SHA256=c7bccc6f38403def4690e00a0b31eda05973d82be8953a3379e331658c51b231 - - SHA256=6994b32e3f3357f4a1d0abe81e8b62dd54e36b17816f2f1a80018584200a1b77 - - SHA256=406b844f4b5c82caf26056c67f9815ad8ecf1e6e5b07d446b456e5ff4a1476f9 - - SHA256=8dafe5f3d0527b66f6857559e3c81872699003e0f2ffda9202a1b5e29db2002e - - SHA256=7a7e8df7173387aec593e4fe2b45520ea3156c5f810d2bb1b2784efd1c922376 - SHA256=0f98492c92e35042b09032e3d9aedc357e4df94fc840217fa1091046f9248a06 + - SHA256=9b1b15a3aacb0e786a608726c3abfc94968915cedcbd239ddf903c4a54bfcf0c + - SHA256=b9dad0131c51e2645e761b74a71ebad2bf175645fa9f42a4ab0e6921b83306e3 + - SHA256=26ef7b27d1afb685e0c136205a92d29b1091e3dcf6b7b39a4ec03fbbdb57cb55 + - SHA256=a1e6b431534258954db07039117b3159e889c6b9e757329bbd4126383c60c778 + - SHA256=d25b5e4d07f594c640dcd93cfc8ab3f0a38348150bd0bfae89f404fbb0d811c6 + - SHA256=1ef7afea0cf2ef246ade6606ef8b7195de9cd7a3cd7570bff90ba1e2422276f6 + - SHA256=083a311875173f8c4653e9bbbabb689d14aa86b852e7fa9f5512fc60e0fd2c43 + - SHA256=89698cad598a56f9e45efffd15d1841e494a2409cc12279150a03842cd6bb7f3 + - SHA256=a7a665a695ec3c0f862a0d762ad55aff6ce6014359647e7c7f7e3c4dc3be81b7 + - SHA256=02ebf848fa618eba27065db366b15ee6629d98f551d20612ac38b9f655f37715 + - SHA256=8b32fc8b15363915605c127ccbf5cbe71778f8dfbf821a25455496e969a01434 + - SHA256=ee525b90053bb30908b5d7bf4c5e9b8b9d6b7b5c9091a26fa25d30d3ad8ef5d0 + - SHA256=41ad660820c41fc8b1860b13dc1fea8bc8cb2faceb36ed3e29d40d28079d2b1f + - SHA256=42ff11ddb46dfe5fa895e7babf88ee27790cde53a9139fc384346a89e802a327 + - SHA256=36f45a42ebf2de6962db92aaf8845d7f9fd6895bedc31422adcf31c59a79602d + - SHA256=4bd4715d2a7af627da11513e32fab925c872babebdb7ff5675a75815fbf95021 - SHA256=4734a0a5d88f44a4939b8d812364cab6ca5f611b9b8ceebe27df6c1ed3a6d8a4 - - SHA256=8206ce9c42582ac980ff5d64f8e3e310bc2baa42d1a206dd831c6ab397fbd8fe + - SHA256=e8743094f002239a8a9d6d7852c7852e0bb63cd411b007bd8c194bcba159ef15 + - SHA256=f0474e76cfd36e37e32cfe5c0a9e05ddee17dd5014d7aa8817ea3634a3540a3f + - SHA256=a0931e16cf7b18d15579e36e0a69edad1717b07527b5407f2c105a2f554224b2 + - SHA256=52d5c35325ce701516f8b04380c9fbdb78ec6bcc13b444f758fdb03d545b0677 + - SHA256=e1cb86386757b947b39086cc8639da988f6e8018ca9995dd669bdc03c8d39d7d + - SHA256=7662187c236003308a7951c2f49c0768636c492f8935292d02f69e59b01d236d + - SHA256=24c900024d213549502301c366d18c318887630f04c96bf0a3d6ba74e0df164f + - SHA256=b7956e31c2fcc0a84bcedf30e5f8115f4e74eed58916253a0c05c8be47283c57 + - SHA256=96bf3ee7c6673b69c6aa173bb44e21fa636b1c2c73f4356a7599c121284a51cc - SHA256=d7c81b0f3c14844f6424e8bdd31a128e773cb96cccef6d05cbff473f0ccb9f9c - - SHA256=6661320f779337b95bbbe1943ee64afb2101c92f92f3d1571c1bf4201c38c724 - - SHA256=2fd43a749b5040ebfafd7cdbd088e27ef44341d121f313515ebde460bf3aaa21 - - SHA256=0440ef40c46fdd2b5d86e7feef8577a8591de862cfd7928cdbcc8f47b8fa3ffc - - SHA256=64d4370843a07e25d4ceb68816015efcaeca9429bb5bb692a88e615b48c7da96 - - SHA256=9bb09752cf3a464455422909edef518ac18fe63cf5e1e8d9d6c2e68db62e0c87 + - SHA256=0d676baac43d9e2d05b577d5e0c516fba250391ab0cb11232a4b17fd97a51e35 + - SHA256=888491196bd8ff528b773a3e453eae49063ad31fb4ca0f9f2e433f8d35445440 + - IMPHASH=8d070a93a45ed8ba6dba6bfbe0d084e7 + - IMPHASH=7641a0c227f0a3a45b80bb8af43cd152 + - IMPHASH=7df0d3ee663fc0e7c72a95e44ba4c82c + - IMPHASH=70e1caa5a322b56fd7951f1b2caacb0d + - IMPHASH=beceab354c66949088c9e5ed1f1ff2a4 + - IMPHASH=caa08a0ba5f679b1e5bbae747cb9d626 + - IMPHASH=420625b024fba72a24025defdf95b303 + - IMPHASH=65ccc2c578a984c31880b6c5e65257d3 + - IMPHASH=e717abe060bc5c34925fe3120ac22f45 + - IMPHASH=41113a3a832353963112b94f4635a383 + - IMPHASH=3866dd9fe63de457bdbf893bf7050ddf + - IMPHASH=3fd33d5b3b52e2db91983ac4b1d7a3c4 + - IMPHASH=a998fe47a44bfbf2399968e21cfdf7ca + - IMPHASH=c9a6e83d931286d1604d1add8403e1e5 + - IMPHASH=cf0eb2dce2ba2c9ff5dd0da794b8b372 + - IMPHASH=ea37e43ffc7cfcba181c5cff37a9be1f + - IMPHASH=8e35c9460537092672b3c7c14bccc7e0 + - IMPHASH=7bf14377888c429897eb10a85f70266c + - IMPHASH=b351627263648b1d220bb488e7ec7202 + - IMPHASH=ce10082e1aa4c1c2bd953b4a7208e56a + - IMPHASH=a7bd820fa5b895fab06f20739c9f24b8 + - IMPHASH=be0dd8b8e045356d600ee55a64d9d197 + - IMPHASH=63fd1582ac2edee50f7ec7eedde38ee8 + - IMPHASH=6c8d5c79a850eecc2fb0291cebda618d + - IMPHASH=c32d9a9af7f702814e1368c689877f3a + - IMPHASH=6b387c029257f024a43a73f38afb2629 + - IMPHASH=df43355c636583e56e92142dcc69cc58 + - IMPHASH=e3ee9131742bf9c9d43cb9a425e497dd + - IMPHASH=c214aac08575c139e48d04f5aee21585 + - IMPHASH=3c5d2ffd06074f1b09c89465cc8bfbf7 + - IMPHASH=059c6bd84285f4960e767f032b33f19b + - IMPHASH=a09170ef09c55cdca9472c02cb1f2647 + - IMPHASH=fca0f3c7b6d79f494034b9d2a1f5921a + - IMPHASH=0262d4147f21d681f8519ab2af79283f + - IMPHASH=832219eb71b8bdb771f1d29d27b0acf4 + - IMPHASH=514298d18002920ee5a917fc34426417 + - IMPHASH=26ceec6572c630bdad60c984e51b7da4 + - IMPHASH=dbf09dd3e675f15c7cc9b4d2b8e6cd90 + - IMPHASH=4b47f6031c558106eee17655f8f8a32f + - IMPHASH=a6c4a7369500900fc172f9557cff22cf + - IMPHASH=3b49942ec6cef1898e97f741b2b5df8a + - IMPHASH=28dc68bb6d6bf4f6b2db8dd7588b2511 + - IMPHASH=27f6dc8a247a22308dd1beba5086b302 + - IMPHASH=7d017945bf90936a6c40f73f91ed02c2 + - IMPHASH=d51f0f6034eb5e45f0ed4e9b7bbc9c97 + - IMPHASH=0ad7da35304c75ccf859bc29fe9ed09e + - IMPHASH=bf9d32a6ab9effcd2fd6a734e5be98f9 + - IMPHASH=87fd2b54ed568e2294300e164b8c46f7 + - IMPHASH=2de3451f3e7b02970582bb8f9fd8c73a + - IMPHASH=e97dc162f416bf06745bf9ffdf78a0ff + - IMPHASH=2a008187d4a73284ddcc43f1b727b513 + - IMPHASH=f8e4844312e81dbdb4e8e95e2ad2c127 + - IMPHASH=4c7cc13a110ccdbb932bb9d7d42efdf4 + - IMPHASH=45bfe170e0cd654bc1e2ae3fca3ac3f4 + - IMPHASH=3db9de43d5d530c10d0cd2d43c7a0771 condition: driver_load and selection falsepositives: - Unknown diff --git a/sigma/sysmon/driver_load/driver_load_win_mal_drivers_names.yml b/sigma/sysmon/driver_load/driver_load_win_mal_drivers_names.yml index 0dcdb5316..5d3acb8c3 100644 --- a/sigma/sysmon/driver_load/driver_load_win_mal_drivers_names.yml +++ b/sigma/sysmon/driver_load/driver_load_win_mal_drivers_names.yml @@ -1,12 +1,12 @@ title: Malicious Driver Load By Name id: 39b64854-5497-4b57-a448-40977b8c9679 status: experimental -description: Detects the load of known malicious drivers via their names only. +description: Detects loading of known malicious drivers via the file name of the drivers. references: - https://loldrivers.io/ author: Nasreddine Bencherchali (Nextron Systems) date: 2022/10/03 -modified: 2023/09/12 +modified: 2023/12/02 tags: - attack.privilege_escalation - attack.t1543.003 @@ -21,79 +21,79 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational selection: ImageLoaded|endswith: - - \malicious.sys - - \daxin_blank5.sys - - \ntbios.sys - - \kt2.sys - - \7.sys - - \daxin_blank1.sys + - \wfshbr64.sys + - \ktmutil7odm.sys - \ktes.sys - - \e29f6311ae87542b3d693c1f38e4e3ad.sys - - \wantd_3.sys - - \mlgbbiicaihflrnh.sys - - \poortry.sys - - \daxin_blank2.sys - - \spwizimgvt.sys - - \daxin_blank6.sys - - \nlslexicons0024uvn.sys - - \daxin_blank.sys - - \air_system10.sys + - \a26363e7b02b13f2b8d697abb90cd5c3.sys + - \kt2.sys - \4748696211bd56c2d93c21cab91e82a5.sys - - \a9df5964635ef8bd567ae487c3d214c4.sys - - \daxin_blank3.sys - - \mimikatz.sys + - \malicious.sys + - \a236e7d654cd932b7d11cb604629a2d0.sys + - \spwizimgvt.sys + - \c94f405c5929cfcccc8ad00b42c95083.sys - \fur.sys - - \gftkyj64.sys - - \gmer64.sys - - \mimidrv.sys - - \dkrtk.sys + - \wantd.sys + - \windbg.sys - \4118b86e490aed091b1a219dba45f332.sys + - \gmer64.sys - \1fc7aeeff3ab19004d2e53eae8160ab1.sys - - \msqpq.sys - - \lctka.sys - - \c94f405c5929cfcccc8ad00b42c95083.sys - - \pciecubed.sys - - \telephonuafy.sys - - \poortry1.sys + - \poortry2.sys + - \wintapix.sys + - \daxin_blank6.sys - \6771b13a53b9c7449d4891e427735ea2.sys - - \834761775.sys - \blacklotus_driver.sys - - \fgme.sys - - \kapchelper_x64.sys - - \typelibde.sys - - \wfshbr64.sys - - \wantd_2.sys - - \a26363e7b02b13f2b8d697abb90cd5c3.sys + - \air_system10.sys + - \dkrtk.sys + - \7.sys - \sense5ext.sys - - \nodedriver.sys - - \a236e7d654cd932b7d11cb604629a2d0.sys - - \ktmutil7odm.sys - - \wintapix.sys - - \prokiller64.sys - - \reddriver.sys + - \ktgn.sys + - \ndislan.sys + - \nlslexicons0024uvn.sys + - \be6318413160e589080df02bb3ca6e6a.sys - \4.sys + - \wantd_2.sys + - \e29f6311ae87542b3d693c1f38e4e3ad.sys + - \daxin_blank3.sys + - \gftkyj64.sys + - \daxin_blank2.sys + - \wantd_4.sys + - \reddriver.sys + - \834761775.sys + - \mlgbbiicaihflrnh.sys + - \mjj0ge.sys + - \daxin_blank.sys + - \daxin_blank5.sys + - \poortry1.sys + - \msqpq.sys + - \mimidrv.sys + - \e939448b28a4edc81f1f974cebf6e7d2.sys + - \prokiller64.sys + - \nodedriver.sys + - \wantd_3.sys + - \lctka.sys + - \kapchelper_x64.sys + - \daxin_blank4.sys + - \a9df5964635ef8bd567ae487c3d214c4.sys - \wantd_6.sys - - \ktgn.sys - - \poortry2.sys - - \ntbios_2.sys + - \ntbios.sys + - \wantd_5.sys + - \pciecubed.sys + - \mimikatz.sys - \nqrmq.sys - - \wantd_4.sys + - \2.sys + - \poortry.sys + - \ntbios_2.sys + - \fgme.sys + - \telephonuafy.sys + - \typelibde.sys + - \daxin_blank1.sys - \ef0e1725aaf0c6c972593f860531a2ea.sys - - \wantd.sys - - \be6318413160e589080df02bb3ca6e6a.sys - - \ndislan.sys - \5a4fe297c7d42539303137b6d75b150d.sys - - \wantd_5.sys - - \e939448b28a4edc81f1f974cebf6e7d2.sys - - \2.sys - - \windbg.sys - - \mjj0ge.sys - - \daxin_blank4.sys condition: driver_load and selection falsepositives: - False positives may occur if one of the vulnerable driver names mentioned above didn't change its name between versions. So always make sure that the driver - being loaded is the legitimate one and the non-vulnerable version. + being loaded is the legitimate one and the non vulnerable version. - If you experience a lot of FP you could comment the driver name or its exact known legitimate location (when possible) level: medium diff --git a/sigma/sysmon/driver_load/driver_load_win_pua_process_hacker.yml b/sigma/sysmon/driver_load/driver_load_win_pua_process_hacker.yml index 5dfb87b1c..a4e5e08bf 100644 --- a/sigma/sysmon/driver_load/driver_load_win_pua_process_hacker.yml +++ b/sigma/sysmon/driver_load/driver_load_win_pua_process_hacker.yml @@ -38,7 +38,7 @@ detection: - 6E7B34DFC017700B1517B230DF6FF0D0 condition: driver_load and (1 of selection_*) falsepositives: - - Legitimate use of process hacker or system informer by low level developers - or system administrators + - Legitimate use of process hacker or system informer by developers or system + administrators level: high ruletype: Sigma diff --git a/sigma/sysmon/driver_load/driver_load_win_susp_temp_use.yml b/sigma/sysmon/driver_load/driver_load_win_susp_temp_use.yml index e921c7cf5..bc231aa80 100644 --- a/sigma/sysmon/driver_load/driver_load_win_susp_temp_use.yml +++ b/sigma/sysmon/driver_load/driver_load_win_susp_temp_use.yml @@ -1,4 +1,4 @@ -title: Suspicious Driver Load from Temp +title: Driver Load From A Temporary Directory id: 2c4523d5-d481-4ed0-8ec3-7fbf0cb41a75 status: test description: Detects a driver load from a temporary directory diff --git a/sigma/sysmon/driver_load/driver_load_win_vuln_drivers.yml b/sigma/sysmon/driver_load/driver_load_win_vuln_drivers.yml index 122bea177..969febc16 100644 --- a/sigma/sysmon/driver_load/driver_load_win_vuln_drivers.yml +++ b/sigma/sysmon/driver_load/driver_load_win_vuln_drivers.yml @@ -1,12 +1,12 @@ title: Vulnerable Driver Load id: 7aaaf4b8-e47c-4295-92ee-6ed40a6f60c8 status: experimental -description: Detects the load of known vulnerable drivers by hash value +description: Detects loading of known vulnerable drivers via their hash. references: - https://loldrivers.io/ author: Nasreddine Bencherchali (Nextron Systems) date: 2022/08/18 -modified: 2023/09/03 +modified: 2023/12/02 tags: - attack.privilege_escalation - attack.t1543.003 @@ -21,3111 +21,4438 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational selection: Hashes|contains: - - MD5=2da269863ed99be7b6b8ec2adc710648 - - MD5=d0a5b98788e480c12afc65ad3e6d4478 + - MD5=c996d7971c49252c582171d9380360f2 + - MD5=da7e98b23b49b7293ee06713032c74f6 + - MD5=9496585198d726000ea505abc39dbfe9 + - MD5=649ff59b8e571c1fc6535b31662407aa + - MD5=4429f85e2415742c7cf8c9f54905c4b9 + - MD5=a610cd4c762b5af8575285dafb9baa8f + - MD5=d5e76d125d624f8025d534f49e3c4162 + - MD5=9c8fffef24fc480917236f9a20b80a47 + - MD5=65b979bcab915c3922578fe77953d789 + - MD5=598f8fb2317350e5f90b7bd16baf5738 + - MD5=6691e873354f1914692df104718eebad + - MD5=4814205270caa80d35569eee8081838e + - MD5=7f9128654c3def08c28e0e13efff0fee + - MD5=ce952204558ea66ec1a9632dcbdde8bd + - MD5=0c0195c48b6b8582fa6f6373032118da + - MD5=370a4ca29a7cf1d6bc0744afc12b236c + - MD5=67e03f83c503c3f11843942df32efe5a + - MD5=8a70921638ff82bb924456deadcd20e6 + - MD5=8a212a246b3c41f3ddce5888aaaaacd6 + - MD5=a346417e9ae2c17a8fbf73302eeb611d + - MD5=d4f7c14e92b36c341c41ae93159407dd + - MD5=748cf64b95ca83abc35762ad2c25458f + - MD5=79ab228766c76cfdf42a64722821711e + - MD5=ce67e51b8c0370d1bfe421b79fa8b656 + - MD5=25190f667f31318dd9a2e36383d5709f + - MD5=1f263a57c5ef46c8577744ecb32c9548 + - MD5=c6cfa2d6e4c443e673c2c12417ea3001 + - MD5=cceb3a7e3bd0203c807168b393a65a74 + - MD5=56b54823a79a53747cbe11f8c4db7b1e + - MD5=988dabdcf990b134b0ac1e00512c30c4 + - MD5=09e77d71d626574e6142894caca6e6dd + - MD5=c832a4313ff082258240b61b88efa025 + - MD5=44499d3cab387aa78a4a6eca2ac181fb + - MD5=6ff59faea912903af0ba8e80e58612bc + - MD5=7461f0f9b931044a9d5f1d44eb4e8e09 + - MD5=08bac71557df8a9b1381c8c165f64520 + - MD5=fea9319d67177ed6f36438d2bd9392fb + - MD5=6dd82d91f981893be57ff90101a7f7f1 + - MD5=d4119a5cb07ce945c6549eae74e39731 + - MD5=cf1113723e3c1c71af80d228f040c198 + - MD5=0e625b7a7c3f75524e307b160f8db337 + - MD5=6e1faeee0ebfcb384208772410fe1e86 + - MD5=58a92520dda53166e322118ee0503364 + - MD5=916ba55fc004b85939ee0cc86a5191c5 + - MD5=f16b44cca74d3c3645e4c0a6bb5c0cb9 + - MD5=db2fc89098ac722dabe3c37ed23de340 + - MD5=6f5cf7feb9bb8108b68f169b8e625ffe + - MD5=d2588631d8aae2a3e54410eaf54f0679 + - MD5=72acbdd8fac58b71b301980eab3ebfc8 + - MD5=9cc757a18b86408efc1ce3ed20cbcdac + - MD5=230fd3749904ca045ea5ec0aa14006e9 + - MD5=79329e2917623181888605bc5b302711 + - MD5=3e4a1384a27013ab7b767a88b8a1bd34 + - MD5=bafd6bad121e42f940a0b8abc587eadf + - MD5=02a1d77ef13bd41cad04abcce896d0b9 + - MD5=de331f863627dc489f547725d7292bbd + - MD5=29122f970a9e766ef01a73e0616d68b3 + - MD5=2b8814cff6351c2b775387770053bdec + - MD5=332db70d2c5c332768ab063ba6ac8433 + - MD5=40f39a98fb513411dacdfc5b2d972206 - MD5=644d687c9f96c82ea2974ccacd8cd549 - - MD5=97221e16e7a99a00592ca278c49ffbfc - - MD5=e3fda6120dfa016a76d975fdab7954f6 - - MD5=eb525d99a31eb4fff09814e83593a494 - - MD5=ab4ee84e09b09012ac86d3a875af9d43 - - MD5=e7ab83a655b0cd934a19d94ac81e4eec - - MD5=75e50ae2e0f783e0caf912f45e15248a - - MD5=1c31d4e9ad2d2b5600ae9d0c0969fe59 - - MD5=d6b259b2dfe80bdf4d026063accd752c - - MD5=936729b8dc2282037bc1504c2680e3ad - - MD5=7951fa3096c99295d681acb0742506bf + - MD5=825703c494e0d270f797f1ecf070f698 + - MD5=afae2a21e36158f5cf4f76f896649c75 + - MD5=dd050e79c515e4a6d1ae36cac5545025 + - MD5=6133e1008f8c6fc32d4b1a60941bab85 + - MD5=0e2fc7e7f85c980eb698b9e468c20366 + - MD5=94c80490b02cc655d2d80597c3aef08f + - MD5=4d487f77be4471900d6ccbc47242cc25 + - MD5=2e3dbb01b282a526bdc3031e0663c41c + - MD5=93a23503e26773c27ed1da06bb79e7a4 + - MD5=ffd0c87d9bf894af26823fbde94c71b6 + - MD5=a86150f2e29b35369afa2cafd7aa9764 + - MD5=6126065af2fc2639473d12ee3c0c198e + - MD5=c1d3a6bb423739a5e781f7eee04c9cfd + - MD5=f0db5af13c457a299a64cf524c64b042 + - MD5=e5e8ecb20bc5630414707295327d755e + - MD5=659a59d7e26b7730361244e12201378e - MD5=8f47af49c330c9fcf3451ad2252b9e04 - - MD5=fd80c3d38669b302de4b4b736941c0d1 - - MD5=547971da89a47b6ad6459cd7d7854e12 - - MD5=590875a0b2eeb171403fc7d0f5110cb2 - - MD5=e1ebc6c5257a277115a7e61ee3e5e42f - - MD5=1392b92179b07b672720763d9b1028a5 - - MD5=c02f70960fa934b8defa16a03d7f6556 - - MD5=d1f9ffe5569642c8f8c10ed7ee5d9391 - - MD5=c9390a8f3ca511c1306a039ca5d80997 - - MD5=6d4159694e1754f262e326b52a3b305a - - MD5=a5f637d61719d37a5b4868c385e363c0 - - MD5=9638f265b1ddd5da6ecdf5c0619dcbe6 - - MD5=0703c1e07186cb98837a2ae76f50d42e - - MD5=5f4a232d92480a1bebbe025ef64dc760 - - MD5=798de15f187c1f013095bbbeb6fb6197 + - MD5=dd9596c18818288845423c68f3f39800 + - MD5=a7d3ebfb3843ee28d9ca18b496bd0eb2 + - MD5=20125794b807116617d43f02b616e092 + - MD5=46cae59443ae41f4dbb42e050a9b501a + - MD5=21e13f2cb269defeae5e1d09887d47bb + - MD5=5bab40019419a2713298a5c9173e5d30 + - MD5=7314c2bc19c6608d511ef36e17a12c98 + - MD5=24061b0958874c1cb2a5a8e9d25482d4 + - MD5=31a4631d77b2357ac9618e2a60021f11 + - MD5=130c5aec46bdec8d534df7222d160fdb + - MD5=592065b29131af32aa18a9e546be9617 + - MD5=2d64d681d79e0d26650928259530c075 + - MD5=1ce19950e23c975f677b80ff59d04fae + - MD5=318e309e11199ec69d8928c46a4d901b + - MD5=d78a29306f42d42cd48ad6bc6c6a7602 + - MD5=6a094d8e4b00dd1d93eb494099e98478 + - MD5=0be80db5d9368fdb29fe9d9bfdd02e7c + - MD5=ba23266992ad964eff6d358d946b76bd + - MD5=560069dc51d3cc7f9cf1f4e940f93cae + - MD5=a785b3bc4309d2eb111911c1b55e793f + - MD5=ac591a3b4df82a589edbb236263ec70a + - MD5=a664904f69756834049e9e272abb6fea + - MD5=19f32bf24b725f103f49dc3fa2f4f0bd + - MD5=2509a71a02296aa65a3428ddfac22180 + - MD5=9988fc825675d4d3e2298537fc78e303 + - MD5=dab9142dc12480bb39f25c9911df6c6c + - MD5=2c47725db0c5eb5c2ecc32ff208bceb6 + - MD5=bdfe1f0346c066971e1f3d96f7fdaa2c + - MD5=7644bed8b74dc294ac77bf406df8ad77 + - MD5=9ade14e58996a6abbfe2409d6cddba6a + - MD5=5212e0957468d3f94d90fa7a0f06b58f + - MD5=96e10a2904fff9491762a4fb549ad580 + - MD5=0c55128c301921ce71991a6d546756ad + - MD5=97e90c869b5b0f493b833710931c39ed + - MD5=f36b8094c2fbf57f99870bfaeeacb25c + - MD5=b3d6378185356326fd8ee4329b0b7698 + - MD5=9321a61a25c7961d9f36852ecaa86f55 + - MD5=f758e7d53184faab5bc51f751937fa36 + - MD5=1f7b2a00fe0c55d17d1b04c5e0507970 + - MD5=239224202ccdea1f09813a70be8413ee + - MD5=996ded363410dfd38af50c76bd5b4fbc + - MD5=0fc2653b1c45f08ca0abd1eb7772e3c0 + - MD5=79b8119b012352d255961e76605567d6 + - MD5=2e1f8a2a80221deb93496a861693c565 + - MD5=697bbd86ee1d386ae1e99759b1e38919 + - MD5=ddc2ffe0ab3fcd48db898ab13c38d88d + - MD5=2971d4ee95f640d2818e38d8877c8984 + - MD5=962a33a191dbe56915fd196e3a868cf0 + - MD5=7575b35fee4ec8dbd0a61dbca3b972e3 + - MD5=2d7f1c02b94d6f0f3e10107e5ea8e141 + - MD5=057ec65bac5e786affeb97c0a0d1db15 + - MD5=483abeee17e4e30a760ec8c0d6d31d6d - MD5=f23b2adcfab58e33872e5c2d0041ad88 - - MD5=903c149851e9929ec45daefc544fcd99 - - MD5=42f7cc4be348c3efd98b0f1233cf2d69 - - MD5=e65fa439efa9e5ad1d2c9aee40c7238e - - MD5=1440c0da81c700bd61142bc569477d81 - - MD5=7c22b7686c75a2bb7409b3c392cc791a - - MD5=f0aeb731d83f7ab6008c92c97faf6233 - - MD5=7aa34cd9ea5649c24a814e292b270b6f - - MD5=a17c58c0582ee560c72f60764ed63224 - - MD5=3ab94fba7196e84a97e83b15f7bcb270 - - MD5=37086ae5244442ba552803984a11d6cb - - MD5=68726474c69b738eac3a62e06b33addc - - MD5=bf74d0706f5ab9c34067192260f4efb0 - - MD5=520c18f50d3cb2ce162767c4c1998b86 - - MD5=c046ca4da48db1524ddf3a49a8d02b65 - - MD5=29872c7376c42e2a64fa838dad98aa11 - - MD5=839cbbc86453960e9eb6db814b776a40 - - MD5=bce7f34912ff59a3926216b206deb09f - - MD5=9b9d367cb53df0a2e0850760c840d016 - - MD5=0898af0888d8f7a9544ef56e5e16354e - - MD5=d1bac75205c389d6d5d6418f0457c29b - - MD5=1549e6cbce408acaddeb4d24796f2eaf - - MD5=2d465b4487dc81effaa84f122b71c24f - - MD5=a2c5f994e9b4a74b2f5b51c7a44c4401 - - MD5=0a2ec9e3e236698185978a5fc76e74e6 - - MD5=2a5ccd95292f03f0dd4899d18b55b428 + - MD5=2601cf769ad6ffee727997679693f774 + - MD5=b4598c05d5440250633e25933fff42b0 + - MD5=2e5f016ff9378be41fe98fa62f99b12d - MD5=75d6c3469347de1cdfa3b1b9f1544208 - - MD5=bedc99bbcedaf89e2ee1aa574c5a2fa4 - - MD5=f56f30ac68c35dd4680054cdfd8f3f00 - - MD5=3e796eb95aca7e620d6a0c2118d6871b - - MD5=3fda3d414c31ad73efd8ccceeaa3bdc2 - - MD5=e9a30edef1105b8a64218f892b2e56ed - - MD5=4a85754636c694572ca9f440d254f5ce - - MD5=41339c852c6e8e4c94323f500c87a79c - - MD5=4c76554d9a72653c6156ca0024d21a8e - - MD5=f51065667fb127cf6de984daea2f6b24 + - MD5=828bb9cb1dd449cd65a29b18ec46055f + - MD5=1bd38ac06ef8709ad23af666622609c9 + - MD5=e747f164fc89566f934f9ec5627cd8c3 + - MD5=a01c412699b6f21645b2885c2bae4454 + - MD5=a216803d691d92acc44ac77d981aa767 + - MD5=112b4a6d8c205c1287c66ad0009c3226 + - MD5=68dde686d6999ad2e5d182b20403240b + - MD5=2d854c6772f0daa8d1fde4168d26c36b + - MD5=9a9dbf5107848c254381be67a4c1b1dd + - MD5=3ecd3ca61ffc54b0d93f8b19161b83da + - MD5=1ad400766530669d14a077514599e7f3 + - MD5=4f27c09cc8680e06b04d6a9c34ca1e08 + - MD5=eaea9ccb40c82af8f3867cd0f4dd5e9d + - MD5=043d5a1fc66662a3f91b8a9c027f9be9 + - MD5=a0e2223868b6133c5712ba5ed20c3e8a + - MD5=2b3e0db4f00d4b3d0b4d178234b02e72 + - MD5=1610342659cb8eb4a0361dbc047a2221 + - MD5=c842827d4704a5ef53a809463254e1cc + - MD5=bf2a954160cb155df0df433929e9102b + - MD5=81b72492d45982cd7a4a138676329fd6 + - MD5=2a2867e1f323320fdeef40c1da578a9a + - MD5=b3f132ce34207b7be899f4978276b66d + - MD5=3247014ba35d406475311a2eab0c4657 + - MD5=88d5fc86f0dd3a8b42463f8d5503a570 + - MD5=0be5c6476dd58072c93af4fca62ee4b3 + - MD5=3cf7a55ec897cc938aebb8161cb8e74f + - MD5=931d4f01b5a88027ef86437f1b862000 + - MD5=d253c19194a18030296ae62a10821640 + - MD5=c5f5d109f11aadebae94c77b27cb026f + - MD5=15dd3ef7df34f9b464e9b38c2deb0793 + - MD5=e913a51f66e380837ffe8da6707d4cc4 + - MD5=c552dae8eaadd708a38704e8d62cf64d + - MD5=1f8a9619ab644728ce4cf86f3ad879ea + - MD5=f7edd110de10f9a50c2922f1450819aa + - MD5=be17a598e0f5314748ade0871ad343e7 + - MD5=aa1ed3917928f04d97d8a217fe9b5cb1 + - MD5=880686bceaf66bfde3c80569eb1ebfa7 + - MD5=bc1eeb4993a601e6f7776233028ac095 - MD5=9ab9f3b75a2eb87fafb1b7361be9dfb3 - - MD5=2c54859a67306e20bfdc8887b537de72 - - MD5=1bca427ab8e67a9db833eb8f0ff92196 - - MD5=15814b675e9d08953f2c64e4e5ccb4f4 - - MD5=98763a3dee3cf03de334f00f95fc071a - - MD5=ca6931fcbc1492d7283aa9dc0149032e - - MD5=c2585e2696e21e25c05122e37e75a947 - - MD5=9b91a44a488e4d539f2e55476b216024 - - MD5=7bdf418a65ec33ec8ff47e7de705a4e1 + - MD5=3a1ba5cd653a9ddce30c58e7c8ae28ae - MD5=5054083cf29649a76c94658ba7ff5bce - - MD5=e027daa2f81961d09aef88093e107d93 - - MD5=1a234f4643f5658bab07bfa611282267 - - MD5=f8a13d4413a93dd005fad116cbd6b6f7 - - MD5=adc1e141b57505fd011bc1efb1ae6967 - - MD5=bc6ff00fb3a14437c94b37ac9a2101d4 - - MD5=c9cb486b4f652c9cfb8411803f8ed5f0 - - MD5=1ed043249c21ab201edccb37f1d40af9 - - MD5=46edb648c1b5c3abd76bd5e912dac026 - - MD5=7c4e513702a0322b0e3bce29dea9e3e9 - - MD5=07f83829e7429e60298440cd1e601a6a - - MD5=483abeee17e4e30a760ec8c0d6d31d6d - - MD5=ea14899d1bfba397bc731770765768d1 - - MD5=4e90cd77509738d30d3181a4d0880bfa - - MD5=2b8814cff6351c2b775387770053bdec - - MD5=e0bfbdf3793ea2742c03f5a82cb305a5 - - MD5=384370c812acb7181f972d57dc77c324 - - MD5=76355d5eafdfa3e9b7580b9153de1f30 - - MD5=2850608430dd089f24386f3336c84729 - - MD5=750d1f07ea9d10b38a33636036c30cca - - MD5=6bada94085b6709694f8327c211d12e1 - - MD5=79b8119b012352d255961e76605567d6 - - MD5=c4f5619ce04d4bee38024d08513c77fd - - MD5=7b9e1e5e8ff4f18f84108bb9f7b5d108 - - MD5=7c72a7e1d42b0790773efd8700e24952 - - MD5=2348508499406dec3b508f349949cb51 - - MD5=0eb3dfeffb49d32310d96f3aa3e8ca61 - - MD5=66066d9852bc65988fb4777f0ff3fbb4 - - MD5=2927eac51c46944ab69ba81462fb9045 - - MD5=97e3a44ec4ae58c8cc38eefc613e950e - - MD5=4ad30223df1361726ff64417f8515272 - - MD5=f44f6ec546850ceb796a2cb528928a91 - - MD5=fef9dd9ea587f8886ade43c1befbdafe - - MD5=c5d1f8ed329ebb86ddd01e414a6a1718 - - MD5=7f7b8cde26c4943c9465e412adbb790f - - MD5=b4598c05d5440250633e25933fff42b0 - - MD5=1f3522c5db7b9dcdd7729148f105018e - - MD5=2d91d45cd09dfc3f8e89da1c261fd1ac - - MD5=0809f48fd30845d983d569b847fa83cf - - MD5=a1547e8b2ca0516d0d9191a55b8536c0 - - MD5=6e25148bb384469f3d5386dc5217548a - - MD5=054299e09cea38df2b84e6b29348b418 - - MD5=6b16512bffe88146a7915f749bd81641 - - MD5=649ff59b8e571c1fc6535b31662407aa - - MD5=de4001f89ed139d1ed6ae5586d48997a - - MD5=9a9dbf5107848c254381be67a4c1b1dd - - MD5=6fa271b6816affaef640808fc51ac8af - - MD5=65e6718a547495c692e090d7887d247b - - MD5=569676d3d45b0964ac6dd0815be8ff8c - - MD5=ba2c0fa201c74621cddd8638497b3c70 - - MD5=a4fda97f452b8f8705695a729f5969f7 - - MD5=592065b29131af32aa18a9e546be9617 - - MD5=ba21bfa3d05661ba216873a9ef66a6e2 - - MD5=06897b431c07886454e0681723dd53e6 - - MD5=230fd3749904ca045ea5ec0aa14006e9 - - MD5=be54aabf09c3fa4671b6efacafa389e3 - - MD5=31469f1313871690e8dc2e8ee4799b22 - - MD5=477e02a8e31cde2e76a8fb020df095c2 - - MD5=fa222bed731713904320723b9c085b11 - - MD5=d9e7e5bcc5b01915dbcef7762a7fc329 - - MD5=748cf64b95ca83abc35762ad2c25458f - - MD5=08c1bce6627764c9f8c79439555c5636 - - MD5=6dd82d91f981893be57ff90101a7f7f1 - - MD5=2e7d824a49d731da9fc96262a29c85ce - - MD5=67e03f83c503c3f11843942df32efe5a - - MD5=cb22776d06f1e81cc87faeb0245acde8 - - MD5=c006d1844f20b91d0ea52bf32d611f30 - - MD5=63e333d64a8716e1ae59f914cb686ae8 - - MD5=d48f681f70e19d2fa521df63bc72ab9e - - MD5=53bb10742e10991af4ad280fcb134151 - - MD5=b2e4e588ce7b993cc31c18a0721d904d - - MD5=5cd0ec261c8c2a39d9105fbbcad4e5b9 - - MD5=27d21eeff199ed555a29ca0ea4453cfb - - MD5=d6c4baecff632d6ad63c45fc39e04b2f + - MD5=dedd07993780d973c22c93e77ab69fa3 + - MD5=3aacaa62758fa6d178043d78ba89bebc + - MD5=f1a203406a680cc7e4017844b129dcbf + - MD5=2399e6f7f868d05623be03a616b4811e + - MD5=0d5774527af6e30905317839686b449d + - MD5=5bbe4e52bd33f1cdd4cf38c7c65f80ae + - MD5=047c06d4d38ea443c9af23a501c4480d - MD5=a72e10ecea2fdeb8b9d4f45d0294086b - - MD5=26d973d6d9a0d133dfda7d8c1adc04b7 - - MD5=e4266262a77fffdea2584283f6c4f51d - - MD5=d104621c93213942b7b43d65b5d8d33e - - MD5=5cc5c26fc99175997d84fe95c61ab2c2 - - MD5=a785b3bc4309d2eb111911c1b55e793f - - MD5=65c069af3875494ec686afbb0c3da399 - - MD5=c7a57cd4bea07dadba2e2fb914379910 - - MD5=d4a299c595d35264b5cfd12490a138dc - - MD5=88d5fc86f0dd3a8b42463f8d5503a570 - - MD5=f690bfc0799e51a626ba3931960c3173 - - MD5=0e207ef80361b3d047a2358d0e2206b4 - - MD5=490b1f404c4f31f4538b36736c990136 - - MD5=664ad9cf500916c94fc2c0020660ac4e - - MD5=95c88d25e211a4d52a82c53e5d93e634 - - MD5=1f15a513abc039533ca996552ba27e51 - - MD5=0a6a1c9a7f80a2a5dcced5c4c0473765 - - MD5=8942e9fa2459b1e179a6535ca16a2fb4 - - MD5=084a13f18856d610d44d3109a9d2acde - - MD5=b0baac4d6cbac384a633c71858b35a2e - - MD5=c901887f28bbb55a10eb934755b47227 - - MD5=ccb09eb78e047c931708149992c2e435 - - MD5=9e0659d443a2b9d1afc75a160f500605 - - MD5=f4b2580cf0477493908b7ed81e4482f8 - - MD5=659a59d7e26b7730361244e12201378e - - MD5=1b76363059fef4f7da752eb0dfb0c1e1 - - MD5=f7393fb917aed182e4cbef25ce8af950 - - MD5=e700a820f117f65e813b216fccbf78c9 - - MD5=d78a29306f42d42cd48ad6bc6c6a7602 - - MD5=d424f369f7e010249619f0ecbe5f3805 - - MD5=7ee0c884e7d282958c5b3a9e47f23e13 - - MD5=b5326548762bfaae7a42d5b0898dfeac - - MD5=8b287636041792f640f92e77e560725e - - MD5=118f3fdba730094d17aa1b259586aef6 - - MD5=2e3dbb01b282a526bdc3031e0663c41c - - MD5=34069a15ae3aa0e879cd0d81708e4bcc - - MD5=178cc9403816c082d22a1d47fa1f9c85 - - MD5=aa1ed3917928f04d97d8a217fe9b5cb1 - - MD5=bdc3b6b83dde7111d5d6b9a2aadf233f - - MD5=8fc6cafd4e63a3271edf6a1897a892ae - - MD5=ddc2ffe0ab3fcd48db898ab13c38d88d - - MD5=f60a9b88c6ff07d4990d8653d0025683 - - MD5=8ac6d458abbe4f5280996eb90235377c - - MD5=0cd0fe9d16b62415b116686a2f414f8c - - MD5=537e2c3020b1d48b125da593e66508ec - - MD5=4e67277648c63b79563360dac22b5492 - - MD5=8b779fe1d71839ad361226f66f1b3fe5 - - MD5=5dd25029499cd5656927e9c559955b07 - - MD5=916ba55fc004b85939ee0cc86a5191c5 - - MD5=3b23808de1403961205352e94b8f2f9b - - MD5=fbf729350ca08a7673b115ce9c9eb7e5 - - MD5=4e4b9bdcc6b8d97828ae1972d750a08d - - MD5=d9ce18960c23f38706ae9c6584d9ac90 - - MD5=9945823e9846724c70d2f8d66a403300 - - MD5=64efbffaa153b0d53dc1bccda4279299 - - MD5=29ccff428e5eb70ae429c3da8968e1ec - - MD5=13bd61916343d94ebefc9a7911d7bf88 - - MD5=2e219df70fccb79351f0452cba86623e - - MD5=349fa788a4a7b57e37e426aca9b736d5 - - MD5=edbf206c27c3aa7d1890899dffcc03ec - - MD5=c31610f4c383204a1fc105c54b7403c9 - - MD5=4a06bcd96ef0b90a1753a805b4235f28 - - MD5=d660fc7255646d5014d45c3bca9c6e20 - - MD5=2e1f8a2a80221deb93496a861693c565 - - MD5=045ef7a39288ba1f4b8d6eca43def44f + - MD5=c9c25778efe890baa4087e32937016a0 + - MD5=0ba6afe0ea182236f98365bd977adfdf + - MD5=e626956c883c7ff3aeb0414570135a58 + - MD5=3e796eb95aca7e620d6a0c2118d6871b + - MD5=f3f5c518bc3715492cb0b7c59e94c357 + - MD5=4e92f1c677e08fd09b57032c5b47ca46 - MD5=f22740ba54a400fd2be7690bb204aa08 - - MD5=300c5b1795c9b6cc1bc4d7d55c7bbe85 - - MD5=f30db62d02a69c36ccb01ac9d41dc085 - - MD5=f310b453ac562f2c53d30aa6e35506bb - - MD5=828bb9cb1dd449cd65a29b18ec46055f - - MD5=51e7b58f6e9b776568ffbd4dd9972a60 - - MD5=aa69b4255e786d968adbd75ba5cf3e93 - - MD5=7461f0f9b931044a9d5f1d44eb4e8e09 - - MD5=6822566b28be75b2a76446a57064369f - - MD5=0be5c6476dd58072c93af4fca62ee4b3 - - MD5=92927c47d6ff139c9b19674c9d0088f6 - - MD5=02198692732722681f246c1b33f7a9d9 - - MD5=9532893c1d358188d66b0d7b0784bb6b - - MD5=a5afd20e34bcd634ebd25b3ab2ff3403 - - MD5=0e14b69dcf67c20343f85f9fdb5b9300 - - MD5=75dbd5db9892d7451d0429bec1aabe1a - - MD5=daf11013cf4c879a54ed6a86a05bee3c - - MD5=7e6e2ed880c7ab115fca68136051f9ce - - MD5=afc2448b4080f695e76e059a96958cab - - MD5=00143c457c8885fd935fc5d5a6ba07a4 - - MD5=f8dce1eb0f9fcaf07f68fe290aa629e4 - - MD5=def0da6c95d14f7020e533028224250e - - MD5=370a4ca29a7cf1d6bc0744afc12b236c - - MD5=79483cb29a0c428e1362ec8642109eee - - MD5=7e7e3f5532b6af24dcc252ac4b240311 - - MD5=6f5cf7feb9bb8108b68f169b8e625ffe - - MD5=5e35c049bc8076406910da36edf9212d - - MD5=f4e1997192d5a95a38965c9e15c687fc - - MD5=4a23e0f2c6f926a41b28d574cbc6ac30 - - MD5=dca1c62c793f84bb2d8e41ca50efbff1 - - MD5=89c7bd12495e29413038224cb61db02e - - MD5=0be80db5d9368fdb29fe9d9bfdd02e7c - - MD5=010c0e5ac584e3ab97a2daf84cf436f5 - - MD5=b1b8e6b85dd03c7f1290b1a071fc79c1 - - MD5=6c28461e78f8d908ca9a66bad2e212f7 - - MD5=a223f8584bcb978c003dd451b1439f8d - - MD5=a22626febc924eb219a953f1ee2b9600 - - MD5=2cc65e805757cfc4f87889cdceb546cd - - MD5=08e06b839499cb4b752347399db41b57 - - MD5=3f39f013168428c8e505a7b9e6cba8a2 - - MD5=60e84516c6ec6dfdae7b422d1f7cab06 - - MD5=e747f164fc89566f934f9ec5627cd8c3 - - MD5=9b157f1261a8a42e4ef5ec23dd4cda9e - - MD5=7962d91b1f53ce55c7338788bd4eb378 - - MD5=17719a7f571d4cd08223f0b30f71b8b8 - - MD5=1db988eb9ac5f99756c33b91830a9cf6 - - MD5=eba6b88bc7bca21658bda9533f0bbff8 - - MD5=1b5c3c458e31bede55145d0644e88d75 - - MD5=11dc5523bb559f8d2ce637f6a2b70dea - - MD5=95e4c7b0384da89dce8ea6f31c3613d9 - - MD5=d2588631d8aae2a3e54410eaf54f0679 - - MD5=cf1113723e3c1c71af80d228f040c198 - - MD5=09927915aba84c8acd91efdaac674b86 - - MD5=f0470f82ba58bc4309f83a0f2aefa4d5 - - MD5=daf800da15b33bf1a84ee7afc59f0656 - - MD5=7bd840ff7f15df79a9a71fec7db1243e - - MD5=a179c4093d05a3e1ee73f6ff07f994aa - - MD5=87982977500b93330df08bf372435641 - - MD5=e913a51f66e380837ffe8da6707d4cc4 - - MD5=821adf5ba68fd8cc7f4f1bc915fe47de + - MD5=3467b0d996251dc56a72fc51a536dd6b + - MD5=198b723e13a270bb664dcb9fb6ed42e6 + - MD5=bdc3b6b83dde7111d5d6b9a2aadf233f + - MD5=3651a6990fe38711ebb285143f867a43 + - MD5=7db75077d53a63531ef2742d98ca6acc + - MD5=55c36d43dd930069148008902f431ea5 + - MD5=f026460a7a720d0b8394f28a1f9203dc + - MD5=cb22776d06f1e81cc87faeb0245acde8 + - MD5=b994110f069d197222508a724d8afdac + - MD5=e6eaee1b3e41f404c289e22df66ef66b + - MD5=29872c7376c42e2a64fa838dad98aa11 + - MD5=d21fba3d09e5b060bd08796916166218 + - MD5=880611326b768c4922e9da8a8effc582 + - MD5=9c3c250646e11052b1e38500ee0e467b + - MD5=178cc9403816c082d22a1d47fa1f9c85 + - MD5=2c1045bb133b7c9f5115e7f2b20c267a + - MD5=707ab1170389eba44ffd4cfad01b5969 + - MD5=ddf2655068467d981242ea96e3b88614 + - MD5=7907e14f9bcf3a4689c9a74a1a873cb6 + - MD5=b3424a229d845a88340045c29327c529 + - MD5=0b0447072ada1636a14087574a512c82 + - MD5=0be4a11bc261f3cd8b4dbfebee88c209 + - MD5=7dd538bcaa98d6c063ead8606066333f + - MD5=8a108158431e9a7d08e330fd7a46d175 + - MD5=e6ea0e8d2edcc6cad3c414a889d17ac4 + - MD5=288471f132c7249f598032d03575f083 + - MD5=11fb599312cb1cf43ca5e879ed6fb71e + - MD5=2348508499406dec3b508f349949cb51 + - MD5=fe820a5f99b092c3660762c6fc6c64e0 + - MD5=c508d28487121828c3a1c2b57acb05be + - MD5=91755cc5c3ccf97313dc2bece813b4d9 - MD5=2f8653034a35526df88ea0c62b035a42 - - MD5=40bc58b7615d00eb55ad9ba700c340c1 - - MD5=986f083e5fd01eea4ec3b2575a110a95 + - MD5=3dbf69f935ea48571ea6b0f5a2878896 + - MD5=7e3a6f880486a4782b896e6dbd9cc26f + - MD5=2850608430dd089f24386f3336c84729 + - MD5=a711e6ab17802fabf2e69e0cd57c54cd + - MD5=2eec12c17d6b8deeeac485f47131d150 + - MD5=e7ab83a655b0cd934a19d94ac81e4eec + - MD5=a91a1bc393971a662a3210dac8c17dfd + - MD5=2fed983ec44d1e7cffb0d516407746f2 + - MD5=18439fe2aaeddfd355ef88091cb6c15f + - MD5=592756f68ab8ae590662b0c4212a3bb9 + - MD5=d63c9c1a427a134461258b7b8742858f + - MD5=6e25148bb384469f3d5386dc5217548a + - MD5=700d6a0331befd4ed9cfbb3234b335e7 + - MD5=e68972cd9f28f0be0f9df7207aba9d1d + - MD5=b2a9ac0600b12ec9819e049d7a6a0b75 + - MD5=c796a92a66ec725b7b7febbdc13dc69b + - MD5=5b6c21e8366220f7511e6904ffeeced9 + - MD5=8741e6df191c805028b92cec44b1ba88 + - MD5=b47dee29b5e6e1939567a926c7a3e6a4 + - MD5=dff6c75c9754a6be61a47a273364cdf7 + - MD5=d86269ba823c9ecf49a145540cd0b3df + - MD5=3c55092900343d3d28564e2d34e7be2c + - MD5=fef9dd9ea587f8886ade43c1befbdafe + - MD5=96c5900331bd17344f338d006888bae5 + - MD5=7e7e3f5532b6af24dcc252ac4b240311 + - MD5=c6f8983dd3d75640c072a8459b8fa55a + - MD5=1caf5070493459ba029d988dbb2c7422 + - MD5=2b653950483196f0d175ba6bc35f1125 + - MD5=15814b675e9d08953f2c64e4e5ccb4f4 + - MD5=de4001f89ed139d1ed6ae5586d48997a + - MD5=dc943bf367ae77016ae399df8e71d38a + - MD5=524cd77f4c100cf20af4004f740b0268 + - MD5=e5f8fcdfb52155ed4dffd8a205b3d091 - MD5=925ee3f3227c3b63e141ba16bd83f024 - - MD5=ba23266992ad964eff6d358d946b76bd - - MD5=2ff629de3667fcd606a0693951f1c1a9 - - MD5=d5556c54c474cf0bff25804bfbe788d3 - - MD5=eaea9ccb40c82af8f3867cd0f4dd5e9d - - MD5=01f092be2a36a5574005e25368426ad2 - - MD5=02a1d77ef13bd41cad04abcce896d0b9 + - MD5=fbf729350ca08a7673b115ce9c9eb7e5 + - MD5=eb0a8eeb444033ebf9b4b304f114f2c8 + - MD5=c7a57cd4bea07dadba2e2fb914379910 + - MD5=384370c812acb7181f972d57dc77c324 + - MD5=d43dcba796b40234267ad2862fa52600 + - MD5=b0954711c133d284a171dd560c8f492a + - MD5=262969a3fab32b9e17e63e2d17a57744 + - MD5=05a6f843c43d75fbce8e885bb8656aa4 + - MD5=992ded5b623be3c228f32edb4ca3f2d2 + - MD5=13a0d3f9d5f39adaca0a8d3bb327eb31 + - MD5=f5051c756035ef5de9c4c48bacb0612b - MD5=1276f735d22cf04676a719edc6b0df18 - - MD5=a0074303fe697a36d9397c0122e04973 - - MD5=ad6d5177656dfc5b43def5d13d32f9f6 - - MD5=e04ff937f6fd273b774f23aed5dd8c13 - - MD5=ecdc79141b7002b246770d01606504f2 - - MD5=22ca5fe8fb0e5e22e6fb0848108c03f4 - - MD5=e076dadf37dd43a6b36aeed957abee9e - - MD5=b418293e25632c5f377bf034bb450e57 - - MD5=f8fe655b7d63dbdc53b0983a0d143028 + - MD5=d4a299c595d35264b5cfd12490a138dc + - MD5=f4e1997192d5a95a38965c9e15c687fc + - MD5=05369fa594a033e48b7921018b3263fb + - MD5=ed07f1a8038596574184e09211dfc30f + - MD5=e1ebc6c5257a277115a7e61ee3e5e42f + - MD5=821adf5ba68fd8cc7f4f1bc915fe47de + - MD5=b12d1630fd50b2a21fd91e45d522ba3a + - MD5=729dd4df669dc96e74f4180c6ee2a64b + - MD5=c6b5a3ae07b165a6e5fff7e31ff91016 + - MD5=e36f6f7401ae11e11f69d744703914db + - MD5=9ba7c30177d2897bb3f7b3dc2f95ae0a + - MD5=b5326548762bfaae7a42d5b0898dfeac + - MD5=f2f728d2f69765f5dfda913d407783d2 + - MD5=637cf50b06bc53deae846b252d56bbdc + - MD5=c37b575c3a96b9788c26cefcf43f3542 + - MD5=e4266262a77fffdea2584283f6c4f51d + - MD5=054299e09cea38df2b84e6b29348b418 + - MD5=4cc3ddd5ae268d9a154a426af2c23ef9 - MD5=d717f8de642b65f029829c34fbd13a45 - - MD5=d21fba3d09e5b060bd08796916166218 - - MD5=688a10e87af9bcf0e40277d927923a00 - - MD5=2ddd3c0e23bc0fd63702910c597298b4 - - MD5=715f8efab1d1c660e4188055c4b28eed - - MD5=7c0b186d1912686cfcb8cd9cdebabe58 - - MD5=eb4de413782193e824773723d790cfc4 - - MD5=9496585198d726000ea505abc39dbfe9 - - MD5=1f950cfd5ed8dd9de3de004f5416fe20 - - MD5=a17c403c4b74d4fa920c3887066daeb2 - - MD5=df9953fa93e1793456a8d428ba7e5700 - - MD5=c533d6d64b474ffc3169a0e0fc0a701a - - MD5=8407ddfab85ae664e507c30314090385 - - MD5=b971b79bdca77e8755e615909a1c7a9f - - MD5=8f5b84350bfc4fe3a65d921b4bd0e737 - - MD5=c5f5d109f11aadebae94c77b27cb026f - - MD5=b994110f069d197222508a724d8afdac + - MD5=e79c91c27df3eaf82fb7bd1280172517 + - MD5=fd7de498a72b2daf89f321d23948c3c4 + - MD5=6682176866d6bd6b4ea3c8e398bd3aae + - MD5=eb525d99a31eb4fff09814e83593a494 - MD5=e323413de3caec7f7730b43c551f26a0 - - MD5=9ade14e58996a6abbfe2409d6cddba6a - - MD5=715ac0756234a203cb7ce8524b6ddc0d - - MD5=a60c9173563b940203cf4ad38ccf2082 - - MD5=4b817d0e7714b9d43db43ae4a22a161e - - MD5=a31246180e61140ad7ff9dd7edf1f6a1 - - MD5=4b60ef388071e0baf299496e3d6590ae - - MD5=1c9001dcd34b4db414f0c54242fedf49 - - MD5=05bf59560656c8a9a3191812b0e1235b - - MD5=fd3b7234419fafc9bdd533f48896ed73 + - MD5=353e5d424668d785f13c904fde3bac84 + - MD5=3b9698a9ee85f0b4edf150deef790ccd + - MD5=3f8cdaf7413000d34d6a1a1d5341a11b + - MD5=dcd966874b4c8c952662d2d16ddb4d7c + - MD5=3fda3d414c31ad73efd8ccceeaa3bdc2 + - MD5=ca6931fcbc1492d7283aa9dc0149032e + - MD5=084bd27e151fef55b5d80025c3114d35 + - MD5=7c887f2b1a56b84d86828529604957db + - MD5=c24800c382b38707e556af957e9e94fd + - MD5=f84da507b3067f019c340b737cd68d32 + - MD5=d3026938514218766cb6d3b36ccfa322 + - MD5=6917ef5d483ed30be14f8085eaef521b + - MD5=945ef111161bae49075107e5bc11a23f + - MD5=44a3b9cc0a8e89c11544932b295ea113 + - MD5=6cc3c3be2de12310a35a6ab2aed141d6 + - MD5=085d3423f3c12a17119920f1a293ab4d + - MD5=547971da89a47b6ad6459cd7d7854e12 + - MD5=aa5dd4beca6f67733e04d9d050ecd523 + - MD5=903c149851e9929ec45daefc544fcd99 + - MD5=ba5f0f6347780c2ed911bbf888e75bef + - MD5=1873a2ce2df273d409c47094bc269285 + - MD5=97e3a44ec4ae58c8cc38eefc613e950e + - MD5=1cb26adeca26aefb5a61065e990402da + - MD5=17fe96af33f1fe475957689aeb5f816e + - MD5=c5b8e612360277ac70aa328432a99fd6 + - MD5=62f8d7f884366df6100c7e892e3d70bf + - MD5=a5deee418b7b580ca89db8a871dc1645 + - MD5=5f44a01ccc530b34051b9d0ccb5bb842 + - MD5=25ede0fd525a30d31998ea62876961ec + - MD5=1c61eb82f1269d8d6be8de2411133811 + - MD5=338a98e1c27bc76f09331fcd7ae413a5 - MD5=f66b96aa7ae430b56289409241645099 - - MD5=8abbb12e61045984eda19e2dc77b235e - - MD5=86bec99cd121b0386a5acc1c368a9d49 - - MD5=80b4041695810f98e1c71ff0cf420b6d - - MD5=a641e3dccba765a10718c9cb0da7879e - - MD5=778b7feea3c750d44745d3bf294bd4ce - - MD5=f9d04e99e4cab90973226a4555bc6d57 - - MD5=c1d063c9422a19944cdaa6714623f2ec - - MD5=4c6d311e0b13c4f469f717db4ab4d0e7 - - MD5=296bde4d0ed32c6069eb90c502187d0d - - MD5=880686bceaf66bfde3c80569eb1ebfa7 - - MD5=978cd6d9666627842340ef774fd9e2ac - - MD5=e626956c883c7ff3aeb0414570135a58 - - MD5=b79475c4783efdd8122694c6b5669a79 - - MD5=2391fb461b061d0e5fccb050d4af7941 - - MD5=c6cfa2d6e4c443e673c2c12417ea3001 - - MD5=332db70d2c5c332768ab063ba6ac8433 - - MD5=51207adb8dab983332d6b22c29fe8129 + - MD5=8ea94766cd7890483449dc193d267993 + - MD5=75fa19142531cbf490770c2988a7db64 + - MD5=ee3b74cdfed959782dff84153e3d5a6e + - MD5=fdf975524d4cdb4f127d79aac571ae9e + - MD5=688a10e87af9bcf0e40277d927923a00 + - MD5=62792c30836ae7861c3ca2409cd35c02 + - MD5=b62e2371158a082e239f5883bd6000d1 + - MD5=1f01257d9730f805b2a1d69099ef891d + - MD5=b934322c68c30dceca96c0274a51f7b0 + - MD5=76355d5eafdfa3e9b7580b9153de1f30 + - MD5=9fdcd543574a712a80d62da8bfd8331c + - MD5=1440c0da81c700bd61142bc569477d81 + - MD5=4c76554d9a72653c6156ca0024d21a8e + - MD5=148bd10da8c8d64928a213c7bf1f2fca + - MD5=95e4c7b0384da89dce8ea6f31c3613d9 + - MD5=e6cb1728c50bd020e531d19a14904e1c + - MD5=62f02339fe267dc7438f603bfb5431a1 + - MD5=0a4e6bd5cc2e9172e461408be47c3149 + - MD5=28cb0b64134ad62c2acf77db8501a619 + - MD5=4ecfb46fcdce95623f994bd29bbe59cb + - MD5=7ee0c884e7d282958c5b3a9e47f23e13 + - MD5=dbc415304403be25ac83047c170b0ec2 + - MD5=0c7f66cd219817eaab41f36d4bc0d4cd + - MD5=3c9c537167923723429c86ab38743e7d + - MD5=a57b47489febc552515778dd0fd1e51c + - MD5=680dcb5c39c1ec40ac3897bb3e9f27b9 + - MD5=5f9785e7535f8f602cb294a54962c9e7 + - MD5=e4ea7ebfa142d20a92fbe468a77eafa6 + - MD5=32365e3e64d28cc94756ac9a09b67f06 + - MD5=be9eeea2a8cac5f6cd92c97f234e2fe1 + - MD5=5bd30b502168013c9ea03a5c2f1c9776 + - MD5=ba21bfa3d05661ba216873a9ef66a6e2 + - MD5=dad8f40626ed4702e0e8502562d93d7c + - MD5=8fbb1ffc6f13f9d5ee8480b36baffc52 + - MD5=bedc99bbcedaf89e2ee1aa574c5a2fa4 + - MD5=9dd414590e695ea208139c23db8a5aa3 + - MD5=270052c61f4de95ebfbf3a49fb39235f + - MD5=19c0c18384d6a6d65462be891692df9c + - MD5=a26e600652c33dd054731b4693bf5b01 + - MD5=8b779fe1d71839ad361226f66f1b3fe5 + - MD5=8ad9dfc971df71cd43788ade6acf8e7d + - MD5=2dbc09c853c4bf2e058d29aaa21fa803 + - MD5=13ee349c15ee5d6cf640b3d0111ffc0e + - MD5=fef60a37301e1f5a3020fa3487fb2cd7 + - MD5=4353b713487a2945b823423bbbf709bd + - MD5=875c44411674b75feb07592aeffa09c1 + - MD5=b971b79bdca77e8755e615909a1c7a9f + - MD5=ad03f225247b58a57584b40a4d1746d3 + - MD5=2229d5a9a92b62df4df9cf51f48436f7 + - MD5=5bb840db439eb281927588dbce5f5418 + - MD5=fd80c3d38669b302de4b4b736941c0d1 + - MD5=d1440503d1528c55fdc569678a663667 + - MD5=d1e57c74bafa56e8e2641290d153f4d2 + - MD5=c9b046a6961957cc6c93a5192d3e61e3 + - MD5=ff795e4f387c3e22291083b7d6b92ffb + - MD5=782f165b1d2db23f78e82fee0127cc14 + - MD5=002a58b90a589913a07012253662c98c + - MD5=0211ab46b73a2623b86c1cfcb30579ab + - MD5=d0a5b98788e480c12afc65ad3e6d4478 + - MD5=d6cc5709aca6a6b868962a6506d48abc + - MD5=08001b0cdb0946433366032827d7a187 + - MD5=8fc6cafd4e63a3271edf6a1897a892ae + - MD5=0e207ef80361b3d047a2358d0e2206b4 + - MD5=b10b210c5944965d0dc85e70a0b19a42 + - MD5=006d9d615cdcc105f642ab599b66f94e + - MD5=b32497762d916dba6c827e31205b67dd + - MD5=f766a9bb7cd46ba8c871484058f908f0 + - MD5=546db985012d988e4482acfae4a935a8 - MD5=700e9902b0a28979724582f116288bad - - MD5=ddf2655068467d981242ea96e3b88614 - - MD5=84ba7af6ada1b3ea5efb9871a0613fc6 - - MD5=a92bf3c219a5fa82087b6c31bdf36ff3 - - MD5=c08063f052308b6f5882482615387f30 - - MD5=6b2df08bacf640cc2ac6f20c76af07ee - - MD5=f778489c7105a63e9e789a02412aaa5f - - MD5=3411fdf098aa20193eee5ffa36ba43b2 - - MD5=1d768959aaa194d60e4524ce47708377 - - MD5=e79c91c27df3eaf82fb7bd1280172517 - - MD5=935a7df222f19ac532e831e6bf9e8e45 - - MD5=5c4df33951d20253a98aa7b5e78e571a - - MD5=d4119a5cb07ce945c6549eae74e39731 - - MD5=9d884ecd3b6c3f2509851ea15ffefbef - - MD5=3db2afc15e7cc78bd11f4c726060db5c - - MD5=37c3a9fef349d13685ec9c2acaaeafce - - MD5=7b43dfd84de5e81162ebcfafb764b769 - - MD5=d6e9f6c67d9b3d790d592557a7d57c3c + - MD5=0395b4e0eb21693590ad1cfdf7044b8b + - MD5=d95c9a241e52b4f967fa4cdb7b99fc80 + - MD5=ee91da973bebe6442527b3d1abcc3c80 + - MD5=1a234f4643f5658bab07bfa611282267 + - MD5=1898ceda3247213c084f43637ef163b3 + - MD5=1b5c3c458e31bede55145d0644e88d75 + - MD5=42132c7a755064f94314b01afb80e73c + - MD5=1b76363059fef4f7da752eb0dfb0c1e1 + - MD5=cc8855fe30a9cdef895177a4cf1a3dad + - MD5=6d4159694e1754f262e326b52a3b305a + - MD5=b7ca4c32c844df9b61634052ae276387 + - MD5=361a598d8bb92c13b18abb7cac850b01 + - MD5=27bcbeec8a466178a6057b64bef66512 + - MD5=f310b453ac562f2c53d30aa6e35506bb + - MD5=14add4f16d80595e6e816abf038141e5 - MD5=ab53d07f18a9697139ddc825b466f696 - - MD5=be9eeea2a8cac5f6cd92c97f234e2fe1 - - MD5=ed07f1a8038596574184e09211dfc30f - - MD5=4f191abc652d8f7442ca2636725e1ed6 - - MD5=b89b097b8b8aecb8341d05136f334ebb - - MD5=db72def618cbc3c5f9aa82f091b54250 - - MD5=21e72a43aedefcd70ca8999cc353b51b - - MD5=8291dcbcbccc2ce28195d04ac616a1b5 - - MD5=f7edd110de10f9a50c2922f1450819aa - - MD5=047c06d4d38ea443c9af23a501c4480d - - MD5=b941c8364308990ee4cc6eadf7214e0f - - MD5=3f8cdaf7413000d34d6a1a1d5341a11b - - MD5=641243746597fbd650e5000d95811ea3 - - MD5=cebf532d1e3c109418687cb9207516ad + - MD5=278761b706276f9b49e1e2fd21b9cb07 + - MD5=60e84516c6ec6dfdae7b422d1f7cab06 + - MD5=20afd54ca260e2bf6589fac72935fecf + - MD5=3ad7b36a584504b3c70b5f552ba33015 - MD5=9f3b5de6fe46429bed794813c6ae8421 - - MD5=29122f970a9e766ef01a73e0616d68b3 - - MD5=b0809d8adc254c52f9d06362489ce474 - - MD5=6f7125540e5e90957ba5f8d755a8d570 - - MD5=2c1045bb133b7c9f5115e7f2b20c267a + - MD5=7b9717c608a5f5a1c816128a609e9575 + - MD5=798de15f187c1f013095bbbeb6fb6197 + - MD5=66066d9852bc65988fb4777f0ff3fbb4 - MD5=13dda15ef67eb265869fc371c72d6ef0 - - MD5=5c5f1c2dc6c2479bafec7c010c41c6ec - - MD5=94ccef76fda12ab0b8270f9b2980552b - - MD5=3b9698a9ee85f0b4edf150deef790ccd - - MD5=2d8e4f38b36c334d0a32a7324832501d - - MD5=ce67e51b8c0370d1bfe421b79fa8b656 - - MD5=3a48f0e4297947663fbb11702aa1d728 - - MD5=c996d7971c49252c582171d9380360f2 - - MD5=b47dee29b5e6e1939567a926c7a3e6a4 - - MD5=f406c5536bcf9bacbeb7ce8a3c383bfa - - MD5=5efbbfcc6adac121c8e2fe76641ed329 - - MD5=b0954711c133d284a171dd560c8f492a - - MD5=1c294146fc77565030603878fd0106f9 + - MD5=63e333d64a8716e1ae59f914cb686ae8 + - MD5=3411fdf098aa20193eee5ffa36ba43b2 + - MD5=ad6d5177656dfc5b43def5d13d32f9f6 + - MD5=97221e16e7a99a00592ca278c49ffbfc + - MD5=010c0e5ac584e3ab97a2daf84cf436f5 + - MD5=29b1ddc69e89b160cc3722e5e0738fd8 + - MD5=aad4fb47cb39a9ab4159662a29e1ee88 + - MD5=4e093256b034925ecd6b29473ff16858 + - MD5=51c233297c3aa16c4222e35ded1139b6 + - MD5=9945823e9846724c70d2f8d66a403300 + - MD5=aa2ef08d48b66bd814280976614468a7 + - MD5=33fc573c0e8bedfe3614e17219273429 + - MD5=c08063f052308b6f5882482615387f30 + - MD5=c8c6fadcb7cb85f197ab77e6a7b67aa9 + - MD5=3f29f651a3c4ff5ce16d61deccf46618 + - MD5=08c1bce6627764c9f8c79439555c5636 + - MD5=1da1cfe6aa15325c9ecf8f8c9b2cd12d + - MD5=c1d063c9422a19944cdaa6714623f2ec + - MD5=b0809d8adc254c52f9d06362489ce474 + - MD5=a22626febc924eb219a953f1ee2b9600 + - MD5=5a615f4641287e5e88968f5455627d45 + - MD5=de2aac9468158c73880e31509924d7e0 + - MD5=dd38cc344d2a0da1c03e92eb4b89a193 + - MD5=c1fce7aac4e9dd7a730997e2979fa1e2 + - MD5=0634299fc837b47b531e4762d946b2ae - MD5=e4ff4edce076f21f5f8d082a62c9db8b - - MD5=67e3b720cee8184c714585a85f8058a0 - - MD5=afae2a21e36158f5cf4f76f896649c75 - - MD5=25ebe6f757129adbe78ec312a5f1800b - - MD5=2da209dde8188076a9579bd256dc90d0 - - MD5=fea9319d67177ed6f36438d2bd9392fb - - MD5=9f70cd5edcc4efc48ae21e04fb03be9d - - MD5=66e0db8a5b0425459d0430547ecbb3db - - MD5=0d8daf471d871deb90225d2953c0eb95 - - MD5=530feb1e37831302f58b7c219be6b844 - - MD5=40f39a98fb513411dacdfc5b2d972206 - - MD5=aa9adcf64008e13d7e68b56fdd307ead - - MD5=2a2867e1f323320fdeef40c1da578a9a + - MD5=43ed1d08c19626688db34f63e55114fb + - MD5=6c28461e78f8d908ca9a66bad2e212f7 + - MD5=8aa9d47ec9a0713c56b6dec3d601d105 + - MD5=c9390a8f3ca511c1306a039ca5d80997 + - MD5=c60a4bc4fec820d88113afb1da6e4db3 + - MD5=6b3abe55c4d39e305a11b4d1091dfaac + - MD5=f4a31e08f89e5f002ef3cf7b1224af5f + - MD5=d7cf689e6c63d37bc071499f687300dd + - MD5=7c0b186d1912686cfcb8cd9cdebabe58 - MD5=8cb2ffb8bb0bbf8cd0dd685611854637 - - MD5=0d5774527af6e30905317839686b449d - - MD5=79f7e6f98a5d3ab6601622be4471027f - - MD5=d77fb9fb256b0c2ec0258c39b80dc513 - - MD5=5970e8de1b337ca665114511b9d10806 - - MD5=f7a09ac4a91a6390f8d00bf09f53ae37 - - MD5=e6cb1728c50bd020e531d19a14904e1c - - MD5=2b3e0db4f00d4b3d0b4d178234b02e72 - - MD5=1dc94a6a82697c62a04e461d7a94d0b0 - - MD5=c6f8983dd3d75640c072a8459b8fa55a - - MD5=0752f113d983030939b4ab98b0812cf0 - - MD5=05a6f843c43d75fbce8e885bb8656aa4 - - MD5=cec257dcac9e708cefb17f8984dd0a70 - - MD5=c5e7e8ca0d76a13a568901b6b304c3ba - - MD5=cd9f0fcecf1664facb3671c0130dc8bb - - MD5=212bfd1ef00e199a365aeb74a8182609 - - MD5=46cae59443ae41f4dbb42e050a9b501a - - MD5=5ca1922ed5ee2b533b5f3dd9be20fd9a - - MD5=dc943bf367ae77016ae399df8e71d38a - - MD5=7a6a6d6921cd1a4e1d61f9672a4560d6 - - MD5=aaa8999a169e39fb8b48ae49cd6ac30a - - MD5=0a653d9d0594b152ca835d0b2593269f - - MD5=72acbdd8fac58b71b301980eab3ebfc8 - - MD5=a89ca92145fc330adced0dd005421183 - - MD5=23b807c09b9b6ea85ed5c508aab200b7 + - MD5=9b359b722ac80c4e0a5235264e1e0156 + - MD5=09927915aba84c8acd91efdaac674b86 + - MD5=e4b50e44d1f12a47e18259b41074f126 + - MD5=0ec361f2fba49c73260af351c39ff9cb + - MD5=65ad6a7c43f8d566afd5676f9447b6c1 + - MD5=ddb7da975d90b2a9c9c58e1af55f0285 + - MD5=8291dcbcbccc2ce28195d04ac616a1b5 + - MD5=2da269863ed99be7b6b8ec2adc710648 + - MD5=2ab9f5a66d75adb01171bb04ab4380f2 + - MD5=3a7c69293fcd5688cc398691093ec06a + - MD5=13a2b915f6d93e52505656773d53096f + - MD5=7bd840ff7f15df79a9a71fec7db1243e + - MD5=0a6a1c9a7f80a2a5dcced5c4c0473765 + - MD5=a1547e8b2ca0516d0d9191a55b8536c0 + - MD5=e04ff937f6fd273b774f23aed5dd8c13 + - MD5=fac8eb49e2fd541b81fcbdeb98a199cb + - MD5=cb31f1b637056a3d374e22865c41e6d9 + - MD5=c69c292e0b76b25a5fa0e16136770e11 + - MD5=cebf532d1e3c109418687cb9207516ad + - MD5=eeb8e039f6d942538eb4b0252117899a + - MD5=4d99d02f49e027332a0a9c31c674e13b + - MD5=e9a30edef1105b8a64218f892b2e56ed + - MD5=dd04cd3de0c19bede84e9c95a86b3ca8 + - MD5=70196d88c03f2ea557281b24dad85de5 + - MD5=708ac9f7b12b6ca4553fd8d0c7299296 + - MD5=cafbf85b902f189ba35f3d7823aad195 + - MD5=d48f681f70e19d2fa521df63bc72ab9e + - MD5=6ae9d25e02b54367a4e93c2492b8b02e - MD5=f14359ceb3705d77353b244bb795b552 - - MD5=5e9d5c59ba1f1060f53909c129df3355 - - MD5=00685003005b0b437af929f0499545e4 - - MD5=d63c9c1a427a134461258b7b8742858f - - MD5=d556cb79967e92b5cc69686d16c1d846 - - MD5=7907e14f9bcf3a4689c9a74a1a873cb6 - - MD5=21be10f66bb65c1d406407faa0b9ba95 - - MD5=9c8fffef24fc480917236f9a20b80a47 - - MD5=bd067efb8cafd971142bc964b4f85df1 - - MD5=c49a1956a6a25ffc25ad97d6762b0989 - - MD5=d5e76d125d624f8025d534f49e3c4162 - - MD5=ae5eb2759305402821aeddc52ba9a6d6 - - MD5=825703c494e0d270f797f1ecf070f698 - - MD5=25190f667f31318dd9a2e36383d5709f - - MD5=d43dcba796b40234267ad2862fa52600 - - MD5=239224202ccdea1f09813a70be8413ee - - MD5=0fc2653b1c45f08ca0abd1eb7772e3c0 - - MD5=4d487f77be4471900d6ccbc47242cc25 - - MD5=1c61eb82f1269d8d6be8de2411133811 - - MD5=353e5d424668d785f13c904fde3bac84 - - MD5=71fffc05cff351a6f26f78441cfebe26 - - MD5=f33c3f08536f988aac84d72d83b139a6 - - MD5=361a598d8bb92c13b18abb7cac850b01 - - MD5=0dff47f3b14fb1c1bad47cc517f0581a - - MD5=7c40ec9ed020cc9404de8fe3a5361a09 - - MD5=14add4f16d80595e6e816abf038141e5 - - MD5=acd221ff7cf10b6117fd609929cde395 - - MD5=257483d5d8b268d0d679956c7acdf02d - - MD5=c06dda757b92e79540551efd00b99d4b - - MD5=259381daae0357fbfefe1d92188c496a - - MD5=f4b7b84a6828d2f9205b55cf8cfc7742 - - MD5=94c80490b02cc655d2d80597c3aef08f - - MD5=3e87e3346441539d3a90278a120766df - - MD5=389823db299b350f2ee830d47376eeac - - MD5=5212e0957468d3f94d90fa7a0f06b58f - - MD5=996ded363410dfd38af50c76bd5b4fbc - - MD5=52b7cd123f6d1b9ed76b08f2ee7d9433 - - MD5=ffd0c87d9bf894af26823fbde94c71b6 - - MD5=0395b4e0eb21693590ad1cfdf7044b8b - - MD5=e425c66663c96d5a9f030b0ad4d219a8 - - MD5=1c591efa8660d4d36a75db9b82474174 - - MD5=be17a598e0f5314748ade0871ad343e7 - - MD5=130c5aec46bdec8d534df7222d160fdb - - MD5=e5e8ecb20bc5630414707295327d755e - - MD5=b17fb1ad5e880467cf7e61b1ee8e3448 - - MD5=c8c6fadcb7cb85f197ab77e6a7b67aa9 - - MD5=ce65b7adcf954eb36df62ea3d4a628c7 - - MD5=f7d963c14a691a022301afa31de9ecef - - MD5=6ab7b8ef0c44e7d2d5909fdb58d37fa5 - - MD5=a926b64be7c27ccb96e687a3924de298 - - MD5=120b5bbb9d2eb35ff4f62d79507ea63a - - MD5=c60a4bc4fec820d88113afb1da6e4db3 - - MD5=6e2178dc5f9e37e6b4b6cbdaef1b12b1 - - MD5=9007c94c9d91ccff8d7f5d4cdddcc403 - - MD5=4cc3ddd5ae268d9a154a426af2c23ef9 - - MD5=10e681ce84afdd642e59ddfdb28284e9 - - MD5=dbc415304403be25ac83047c170b0ec2 - - MD5=a5deee418b7b580ca89db8a871dc1645 - - MD5=82854a57630059d1ce2870159dc2f86b + - MD5=0d992b69029d1f23a872ff5a3352fb5b + - MD5=9993a2a45c745bb0139bf3e8decd626c + - MD5=6d67da13cf84f15f6797ed929dd8cf5d - MD5=c2eb4539a4f6ab6edd01bdc191619975 - - MD5=394e290aff9d4e78e504cedfb2d99350 - - MD5=6b6dfb6d952a2e36efd4a387fdb94637 - - MD5=030c8432981e4d41b191624b3e07afe2 - - MD5=790ccca8341919bb8bb49262a21fca0e - - MD5=36527fdb70ed6f74b70a98129f82ad62 - - MD5=aa5dd4beca6f67733e04d9d050ecd523 - - MD5=3dbf69f935ea48571ea6b0f5a2878896 + - MD5=349fa788a4a7b57e37e426aca9b736d5 + - MD5=4c016fd76ed5c05e84ca8cab77993961 + - MD5=ea14899d1bfba397bc731770765768d1 + - MD5=4ec08e0bcdf3e880e7f5a7d78a73440c + - MD5=e65fa439efa9e5ad1d2c9aee40c7238e + - MD5=0898af0888d8f7a9544ef56e5e16354e + - MD5=10e681ce84afdd642e59ddfdb28284e9 + - MD5=b5f96dd5cc7d14a9860ab99d161bf171 + - MD5=37c3a9fef349d13685ec9c2acaaeafce - MD5=027e10a5048b135862d638b9085d1402 - - MD5=c098f8aeb67eeb2262dbf681690a9306 - - MD5=013719e840e955c2e4cd9d18c94a2625 - - MD5=08bac71557df8a9b1381c8c165f64520 - - MD5=ada5f19423f91795c0372ff39d745acf + - MD5=b0baac4d6cbac384a633c71858b35a2e + - MD5=d0a5f9ace1f0c459cef714156db1de02 + - MD5=b34361d151c793415ef92ee5d368c053 + - MD5=f0fdfdf3303e2f7c141aa3a24d523af1 + - MD5=d424f369f7e010249619f0ecbe5f3805 + - MD5=639252292bb40b3f10f8a6842aee3cd4 + - MD5=7e6e2ed880c7ab115fca68136051f9ce + - MD5=f8dce1eb0f9fcaf07f68fe290aa629e4 + - MD5=fa222bed731713904320723b9c085b11 + - MD5=aa69b4255e786d968adbd75ba5cf3e93 + - MD5=06ffbb2cbf5ac9ef95773b4f5c4c896a + - MD5=00685003005b0b437af929f0499545e4 + - MD5=85e606523ce390f7fcd8370d5f4b812a + - MD5=23cf3da010497eb2bf39a5c5a57e437c + - MD5=dc9be271f403e2278071d6ece408ff28 + - MD5=6b16512bffe88146a7915f749bd81641 + - MD5=c2585e2696e21e25c05122e37e75a947 - MD5=165178829b5587a628977bfca6fd6900 - - MD5=1b32c54b95121ab1683c7b83b2db4b96 - - MD5=5a615f4641287e5e88968f5455627d45 - - MD5=962a33a191dbe56915fd196e3a868cf0 - - MD5=1ed08a6264c5c92099d6d1dae5e8f530 - - MD5=e3bdb307b32b13b8f7e621e8d5cc8cd3 - - MD5=6846c2035b4c56b488d2ce2c69a57261 - - MD5=5c9f240e0b83df758993837d18859cbe - - MD5=4eb4069c230a5dc40cd5d60d2cb3e0d0 - - MD5=5093f38d597532d59d4df9018056f0d1 - - MD5=e8ebba56ea799e1e62748c59e1a4c586 - - MD5=4ff880566f22919ed94ffae215d39da5 - - MD5=4b194021d6bd6650cbd1aed9370b2329 - - MD5=6beb1d8146f5a4aaa2f7b8c0c9bced30 - - MD5=da8437200af5f3f790e301b9958993d2 - - MD5=a01c412699b6f21645b2885c2bae4454 - - MD5=96e10a2904fff9491762a4fb549ad580 - - MD5=969f1d19449dc5c2535dd5786093f651 - - MD5=ee91da973bebe6442527b3d1abcc3c80 - - MD5=7eeb4c0cb786a409b94066986addf315 - - MD5=96b463b6fa426ae42c414177af550ba2 - - MD5=812e960977116bf6d6c1ccf8b5dd351f - - MD5=1610342659cb8eb4a0361dbc047a2221 - - MD5=f16b44cca74d3c3645e4c0a6bb5c0cb9 - - MD5=ccf523b951afaa0147f22e2a7aae4976 - - MD5=e7273e17ac85dc4272c4c4400091a19e - - MD5=21e13f2cb269defeae5e1d09887d47bb - - MD5=6a094d8e4b00dd1d93eb494099e98478 - - MD5=3c4154866f3d483fdc9f4f64ef868888 - - MD5=34edf3464c3f5605c1ca3a071f12e28c - - MD5=8bf290b5eda99fc2697373a87f4e1927 - - MD5=356bda2bf0f6899a2c08b2da3ec69f13 - - MD5=79329e2917623181888605bc5b302711 - - MD5=0420fa6704fd0590c5ce7176fdada650 - - MD5=05b4463677e2566414ad53434ad9e7e5 - - MD5=0d992b69029d1f23a872ff5a3352fb5b - - MD5=02fc655279b8ea3ef37237c488b675cc - - MD5=154fd286c96665946d55a7d49923ad7e - - MD5=595363661db3e50acc4de05b0215cc6f - - MD5=91755cc5c3ccf97313dc2bece813b4d9 - - MD5=96a8b535b5e14b582ca5679a3e2a5946 - - MD5=30efb7d485fc9c28fe82a97deac29626 - - MD5=ceac1347acae9ad9496d4b0593256522 - - MD5=c9c7113f5e15f70fcc576e835c859d56 - - MD5=3473faea65fba5d4fbe54c0898a3c044 - - MD5=ed6348707f177629739df73b97ba1b6e - - MD5=aae268c4b593156bdae25af5a2a4af21 - - MD5=992ded5b623be3c228f32edb4ca3f2d2 - - MD5=803a371a78d528a44ef8777f67443b16 - - MD5=f65e545771fd922693f0ec68b2141012 - - MD5=c8f88ca47b393da6acf87fa190e81333 - - MD5=0490f5961e0980792f5cb5aedf081dd7 - - MD5=592756f68ab8ae590662b0c4212a3bb9 - - MD5=c475c7d0f2d934f150b6c32c01479134 - - MD5=8b47c5580b130dd3f580af09323bc949 - - MD5=13ee349c15ee5d6cf640b3d0111ffc0e - - MD5=4e093256b034925ecd6b29473ff16858 - - MD5=6691e873354f1914692df104718eebad - - MD5=e4a0bba88605d4c07b58a2cc3fac0fe9 - - MD5=4ae55080ec8aed49343e40d08370195c - - MD5=79ab228766c76cfdf42a64722821711e - - MD5=f141db170bb4c6e088f30ddc58404ad3 - - MD5=1b2e3b7f2966f2f6e6a1bb89f97228e5 - - MD5=c1fce7aac4e9dd7a730997e2979fa1e2 - - MD5=79bfbeb4e8cfdd0cb1d73612360bd811 - - MD5=db2fc89098ac722dabe3c37ed23de340 - - MD5=4f27c09cc8680e06b04d6a9c34ca1e08 - - MD5=73a40e29f61e5d142c8f42b28a351190 - - MD5=fd7de498a72b2daf89f321d23948c3c4 - MD5=24156523b923fd9dcfdd0ac684dcdb20 - - MD5=d3e40644a91327da2b1a7241606fe559 - - MD5=2fed983ec44d1e7cffb0d516407746f2 - - MD5=e6eaee1b3e41f404c289e22df66ef66b - - MD5=bafd6bad121e42f940a0b8abc587eadf - - MD5=3ad7b36a584504b3c70b5f552ba33015 - - MD5=28cb0b64134ad62c2acf77db8501a619 - - MD5=7e3a6f880486a4782b896e6dbd9cc26f - - MD5=3c55092900343d3d28564e2d34e7be2c + - MD5=750d1f07ea9d10b38a33636036c30cca + - MD5=fc90bcc43daa48882be359a17b71abf7 + - MD5=09672532194b4bff5e0f7a7d782c7bf2 + - MD5=212bfd1ef00e199a365aeb74a8182609 + - MD5=e3d290406de40c32095bd76dc88179fb + - MD5=715572dfe6fb10b16f980bfa242f3fa5 + - MD5=c8f88ca47b393da6acf87fa190e81333 + - MD5=d0c2caa17c7b6d2200e1b5aa9d07135e + - MD5=16a8e8437b94d6207af2f25fd4801b6d + - MD5=7bdf418a65ec33ec8ff47e7de705a4e1 + - MD5=31f34de4374a6ed0e70a022a0efa2570 + - MD5=cfad9185ffcf5850b5810c28b24d5fc8 + - MD5=6ba221afb17342a3c81245a4958516a2 + - MD5=f44f6ec546850ceb796a2cb528928a91 + - MD5=34a7fab63a4ed5a0b61eb204828e08e5 + - MD5=a92bf3c219a5fa82087b6c31bdf36ff3 + - MD5=fa0d1fca7c5b44ce3b799389434fcaa5 + - MD5=affe4764d880e78b2afb2643b15b8d41 + - MD5=f80ceb0dbb889663f0bee058b109ce0e + - MD5=25ebe6f757129adbe78ec312a5f1800b + - MD5=7f7b8cde26c4943c9465e412adbb790f + - MD5=bfe96411cf67edb3cee2b9894b910cd5 + - MD5=6e2178dc5f9e37e6b4b6cbdaef1b12b1 + - MD5=0420fa6704fd0590c5ce7176fdada650 + - MD5=7ed6030f14e66e743241f2c1fa783e69 + - MD5=61e8367fb57297a949c9a80c2e0e5a38 + - MD5=7951fa3096c99295d681acb0742506bf + - MD5=bcd60bf152fdec05cd40562b466be252 + - MD5=376b1e8957227a3639ec1482900d9b97 + - MD5=7331720a5522d5cd972623326cf87a3f + - MD5=8e78ab9b9709bafb11695a0a6eddeff9 + - MD5=8abbb12e61045984eda19e2dc77b235e + - MD5=0199a59af05d9986842ecbdee3884f0c + - MD5=729afa54490443da66c2685bd77cb1f0 + - MD5=95c88d25e211a4d52a82c53e5d93e634 + - MD5=aa55dd14064cb808613d09195e3ba749 + - MD5=ef1afb3a5ddad6795721f824690b4a69 + - MD5=db46c56849bbce9a55a03283efc8c280 + - MD5=991230087394738976dbd44f92516cae + - MD5=3af19d325f9dcdf360276ae5e7c136ea + - MD5=98763a3dee3cf03de334f00f95fc071a + - MD5=4b194021d6bd6650cbd1aed9370b2329 + - MD5=517d484bdbad4637188ec7a908335b86 + - MD5=2ddd3c0e23bc0fd63702910c597298b4 + - MD5=120b5bbb9d2eb35ff4f62d79507ea63a + - MD5=6bada94085b6709694f8327c211d12e1 + - MD5=5c5f1c2dc6c2479bafec7c010c41c6ec + - MD5=ab81264493c218a0e875a0d50104ac9f + - MD5=ea2ff60fcce3b9ffe0bd77658b88512d + - MD5=76d1d4d285f74059f32b8ad19a146d0c + - MD5=b9cf3294c13cdea624ab95ca3e2e483f + - MD5=0cd0fe9d16b62415b116686a2f414f8c + - MD5=2503c4cf31588f0b011eb992ca3ee7ff + - MD5=f0470f82ba58bc4309f83a0f2aefa4d5 + - MD5=db72def618cbc3c5f9aa82f091b54250 + - MD5=2ff629de3667fcd606a0693951f1c1a9 - MD5=119f0656ab4bb872f79ee5d421e2b9f9 - - MD5=d1440503d1528c55fdc569678a663667 - - MD5=e4b50e44d1f12a47e18259b41074f126 - - MD5=002a58b90a589913a07012253662c98c - - MD5=2e887e52e45bba3c47ccd0e75fc5266f - - MD5=2e5f016ff9378be41fe98fa62f99b12d - - MD5=3ae11bde32cdbd8637124ada866a5a7e - - MD5=0634299fc837b47b531e4762d946b2ae - - MD5=7d84a4ed0fcca3d098881a3f3283724b - - MD5=0ef05030abd55ba6b02faa2c0970f67f - - MD5=65b979bcab915c3922578fe77953d789 - - MD5=7b9717c608a5f5a1c816128a609e9575 - - MD5=bf2a954160cb155df0df433929e9102b - - MD5=9a5a35112c4f8016abcc6363b44d3385 - - MD5=76bb1a4332666222a8e3e1339e267179 - - MD5=6682176866d6bd6b4ea3c8e398bd3aae - - MD5=07efb8259b42975d502a058db8a3fd21 - - MD5=b5f96dd5cc7d14a9860ab99d161bf171 - - MD5=de1cc5c266140bff9d964fab87a29421 - - MD5=5c5e3c7ca39d9472099ea81c329b7d75 - - MD5=31a4631d77b2357ac9618e2a60021f11 - MD5=55a7c51dc2aa959c41e391db8f6b8b4f - - MD5=3482acba11c71e45026747dbe366a7d9 - - MD5=9af5ae780b6a9ea485fa15f28ddb20a7 - - MD5=91203acddac81511d17a68a030d063a8 - - MD5=b10b210c5944965d0dc85e70a0b19a42 - - MD5=56b54823a79a53747cbe11f8c4db7b1e - - MD5=be5f46fd1056f02a7a241e052fa5888f - - MD5=524cd77f4c100cf20af4004f740b0268 - - MD5=3aacaa62758fa6d178043d78ba89bebc - - MD5=96421b56dbda73e9b965f027a3bda7ba - - MD5=dd050e79c515e4a6d1ae36cac5545025 - - MD5=6133e1008f8c6fc32d4b1a60941bab85 - - MD5=fe71c99a5830f94d77a8792741d6e6c7 - - MD5=5bb840db439eb281927588dbce5f5418 - - MD5=a3af4a4fa6cba27284f8289436c2f074 - - MD5=8d14b013fc2b555e404b1c3301150c34 - - MD5=81b72492d45982cd7a4a138676329fd6 - - MD5=9eb524c5f92e5b80374b8261292fdeb5 + - MD5=009876ab9cf3a3d4e3fc3afe13ae839e + - MD5=f8a13d4413a93dd005fad116cbd6b6f7 + - MD5=5093f38d597532d59d4df9018056f0d1 - MD5=00f887e74faad40e6e97d9d0e9c71370 - - MD5=8065a7659562005127673ac52898675f - - MD5=6cce5bb9c8c2a8293df2d3b1897941a2 - - MD5=1493d342e7a36553c56b2adea150949e - - MD5=20afd54ca260e2bf6589fac72935fecf - - MD5=34686a4b10f239d781772e9e94486c1a - - MD5=70dcd07d38017b43f710061f37cb4a91 - - MD5=71858fa117e6f3309606d5cdb57e6e09 - - MD5=5e71c0814287763d529822d0a022e693 - - MD5=95a95e28cf5ee4ece6ffbaf169358192 - - MD5=dcd966874b4c8c952662d2d16ddb4d7c - - MD5=c42caa9cdcc50c01cb2fed985a03fe23 - - MD5=f5051c756035ef5de9c4c48bacb0612b + - MD5=0215d0681979987fe908fb19dab83399 + - MD5=7962d91b1f53ce55c7338788bd4eb378 + - MD5=1bca427ab8e67a9db833eb8f0ff92196 + - MD5=a730b97ab977aa444fa261902822a905 + - MD5=a453083b8f4ca7cb60cac327e97edbe2 + - MD5=afc2448b4080f695e76e059a96958cab + - MD5=4f963d716a60737e5b59299f00daf285 + - MD5=ee59b64ae296a87bf7a6aee38ad09617 + - MD5=1c9d2a993e99054050b596d88b307d95 + - MD5=5cd0ec261c8c2a39d9105fbbcad4e5b9 + - MD5=4c6d311e0b13c4f469f717db4ab4d0e7 + - MD5=84fb76ee319073e77fb364bbbbff5461 + - MD5=d660fc7255646d5014d45c3bca9c6e20 + - MD5=ecccbf1e7c727f923c9d709707800e6c + - MD5=94ccef76fda12ab0b8270f9b2980552b + - MD5=f853abe0dc162601e66e4a346faed854 + - MD5=154fd286c96665946d55a7d49923ad7e + - MD5=a5afd20e34bcd634ebd25b3ab2ff3403 + - MD5=c9c7113f5e15f70fcc576e835c859d56 + - MD5=ad22a7b010de6f9c6f39c350a471a440 + - MD5=7a6a6d6921cd1a4e1d61f9672a4560d6 + - MD5=9af5ae780b6a9ea485fa15f28ddb20a7 + - MD5=1f15a513abc039533ca996552ba27e51 + - MD5=d1bac75205c389d6d5d6418f0457c29b + - MD5=36527fdb70ed6f74b70a98129f82ad62 + - MD5=3d5164e85d740bce0391e2b81d49d308 + - MD5=30550db8f400b1e11593dffd644abb67 + - MD5=b17fb1ad5e880467cf7e61b1ee8e3448 + - MD5=6f5d54ab483659ac78672440422ae3f1 + - MD5=f042e8318cf20957c2339d96690c3186 + - MD5=5158f786afa19945d19bee9179065e4d + - MD5=328a2cb2da464b0c2beb898ff9ae9f3a + - MD5=e7273e17ac85dc4272c4c4400091a19e + - MD5=d74d202646e5a6d0d2c4207e1f949826 + - MD5=9ce1b0e5cfa8223cec3be1c7616e9f63 + - MD5=55cd6b46ac25bbe01245f2270a0d6cb8 + - MD5=b8b6686324f7aa77f570bc019ec214e6 + - MD5=d104621c93213942b7b43d65b5d8d33e + - MD5=8cc5a4045a80a822cbc1e9eadff8e533 + - MD5=ef18d594c862d6d3704b777fa3445ac2 + - MD5=b941c8364308990ee4cc6eadf7214e0f + - MD5=2ca1044a04cb2f0ce5bd0a5832981e04 + - MD5=f8fe655b7d63dbdc53b0983a0d143028 + - MD5=cd9f0fcecf1664facb3671c0130dc8bb + - MD5=3e9ee8418f22a8ae0e2bf6ff293988fa + - MD5=3bf217f8ef018ca5ea20947bfdfc0a4d + - MD5=778b7feea3c750d44745d3bf294bd4ce + - MD5=4514a0e8bcab7de4cff55999cdf00cd1 + - MD5=5228b7a738dc90a06ae4f4a7412cb1e9 + - MD5=159f89d9870e208abd8b912c3d1d3ae9 + - MD5=e425c66663c96d5a9f030b0ad4d219a8 - MD5=85b756463ab0c000f816260d49923cde - - MD5=a86150f2e29b35369afa2cafd7aa9764 - - MD5=31f34de4374a6ed0e70a022a0efa2570 - - MD5=a0e2223868b6133c5712ba5ed20c3e8a - - MD5=343ada10d948db29251f2d9c809af204 - - MD5=76c643ab29d497317085e5db8c799960 - - MD5=6b3abe55c4d39e305a11b4d1091dfaac - - MD5=ad866d83b4f0391aecceb4e507011831 - - MD5=663f2fb92608073824ee3106886120f3 - - MD5=07fc1e043654fdde56da98d93523635c - - MD5=4d99d02f49e027332a0a9c31c674e13b - - MD5=1f7b2a00fe0c55d17d1b04c5e0507970 - - MD5=84b17daba8715089542641990c1ea3c2 + - MD5=acd221ff7cf10b6117fd609929cde395 + - MD5=a87689b1067edacc48fddf90020dee23 + - MD5=0d123be07e2dfd2b2ade49ad2a905a5b + - MD5=3ae11bde32cdbd8637124ada866a5a7e + - MD5=cc35379f0421b907004a9099611ee2cd + - MD5=23b807c09b9b6ea85ed5c508aab200b7 + - MD5=26d973d6d9a0d133dfda7d8c1adc04b7 + - MD5=eba6b88bc7bca21658bda9533f0bbff8 + - MD5=9eb524c5f92e5b80374b8261292fdeb5 + - MD5=4a23e0f2c6f926a41b28d574cbc6ac30 - MD5=c61876aaca6ce822be18adb9d9bd4260 - - MD5=e5f8fcdfb52155ed4dffd8a205b3d091 - - MD5=6212832f13b296ddbc85b24e22edb5ec - - MD5=085d3423f3c12a17119920f1a293ab4d - - MD5=f41eea88057d3dd1a56027c4174eed22 - - MD5=c796a92a66ec725b7b7febbdc13dc69b - - MD5=69ba501a268f09f694ff0e8e208aa20e - - MD5=729afa54490443da66c2685bd77cb1f0 - - MD5=8de7dcade65a1f51605a076c1d2b3456 - - MD5=c1d3a6bb423739a5e781f7eee04c9cfd - - MD5=2315a8919cfb167e718d8c788ed3ceca - - MD5=3467b0d996251dc56a72fc51a536dd6b - - MD5=5f9785e7535f8f602cb294a54962c9e7 - - MD5=6ae9d25e02b54367a4e93c2492b8b02e - - MD5=949ef0df929a71d6cc77494dfcb1ddeb - - MD5=3bf217f8ef018ca5ea20947bfdfc0a4d - - MD5=86635fdc8e28957e6c01fc483fe7b020 - - MD5=2128e6c044ee86f822d952a261af0b48 - - MD5=9226339848e359f5e4cd519bef7dcd39 - - MD5=cc8855fe30a9cdef895177a4cf1a3dad - - MD5=fb7637cfe8562095937f4d6cff420784 - - MD5=34a7fab63a4ed5a0b61eb204828e08e5 - - MD5=7dd538bcaa98d6c063ead8606066333f - - MD5=564d84a799db39b381a582a0b2f738c4 - - MD5=cb31f1b637056a3d374e22865c41e6d9 - - MD5=8ea94766cd7890483449dc193d267993 - - MD5=fef60a37301e1f5a3020fa3487fb2cd7 - - MD5=7ed6030f14e66e743241f2c1fa783e69 - - MD5=3a7c69293fcd5688cc398691093ec06a - - MD5=fe820a5f99b092c3660762c6fc6c64e0 - - MD5=9ba7c30177d2897bb3f7b3dc2f95ae0a - - MD5=c832a4313ff082258240b61b88efa025 - - MD5=f670d1570c75ab1d8e870c1c6e3baba1 - - MD5=b8b6686324f7aa77f570bc019ec214e6 - - MD5=69ac6165912cb263a656497cc70155e6 - - MD5=fa173832dca1b1faeba095e5c82a1559 - - MD5=8a108158431e9a7d08e330fd7a46d175 - - MD5=d86269ba823c9ecf49a145540cd0b3df - - MD5=23cf3da010497eb2bf39a5c5a57e437c - - MD5=d74d202646e5a6d0d2c4207e1f949826 - - MD5=8580165a2803591e007380db9097bbcc - - MD5=99c131567c10c25589e741e69a8f8aa3 - - MD5=d253c19194a18030296ae62a10821640 - - MD5=084bd27e151fef55b5d80025c3114d35 - - MD5=45c2d133d41d2732f3653ed615a745c8 - - MD5=9650db2ef0a44984845841ab24972ced - - MD5=94999245e9580c6228b22ac44c66044c + - MD5=aae268c4b593156bdae25af5a2a4af21 + - MD5=de711decdd763a73098372f752bf5a1c + - MD5=1b32c54b95121ab1683c7b83b2db4b96 + - MD5=9aa7ed7809eec0d8bc6c545a1d18107a - MD5=07493c774aa406478005e8fe52c788b2 - - MD5=1762105b28eb90d19e9ab3acde16ead6 - - MD5=12cecc3c14160f32b21279c1a36b8338 - - MD5=d5db81974ffda566fa821400419f59be - - MD5=9258e3cb20e24a93d4afdee9f5a0299c - - MD5=bf581e9eb91bace0b02a2c5a54bf1419 - - MD5=dad8f40626ed4702e0e8502562d93d7c - - MD5=f1a203406a680cc7e4017844b129dcbf - - MD5=3d5164e85d740bce0391e2b81d49d308 - - MD5=bcd60bf152fdec05cd40562b466be252 - - MD5=6917ef5d483ed30be14f8085eaef521b - - MD5=cfad9185ffcf5850b5810c28b24d5fc8 - - MD5=d5a642329cce4df94b8dc1ba9660ae34 - - MD5=9cbdb5fb6dc63cb13f10b6333407cbb9 - - MD5=270052c61f4de95ebfbf3a49fb39235f - - MD5=d6cc5709aca6a6b868962a6506d48abc - - MD5=84fb76ee319073e77fb364bbbbff5461 - - MD5=6ae4dec687ac6d1b635a4e351dddf73e - - MD5=148bd10da8c8d64928a213c7bf1f2fca - - MD5=6f5d54ab483659ac78672440422ae3f1 - - MD5=e4d4a22cbf94e6b0a92fc36d46741f56 - - MD5=85e606523ce390f7fcd8370d5f4b812a - - MD5=dd38cc344d2a0da1c03e92eb4b89a193 - - MD5=2503c4cf31588f0b011eb992ca3ee7ff - - MD5=fc6dadb97bd3b7a61d06f20d0d2e1bac - - MD5=507a649eb585d8d0447eab0532ef0c73 - - MD5=0c0195c48b6b8582fa6f6373032118da - - MD5=e140cb81bd27434fc4fd9080b7551922 - - MD5=31eca8c0b32135850d5a50aee11fec87 - - MD5=7f258c0161e9edca8e7f85ac0dd68e46 - - MD5=09672532194b4bff5e0f7a7d782c7bf2 - - MD5=288471f132c7249f598032d03575f083 - - MD5=13a0d3f9d5f39adaca0a8d3bb327eb31 - - MD5=4cee9945f9a3e8f2433f5aa8c58671fb + - MD5=9b9d367cb53df0a2e0850760c840d016 + - MD5=70c2c29643ee1edd3bbcd2ef1ffc9a73 + - MD5=766f9ea38918827df59a6aed204d2b09 + - MD5=f670d1570c75ab1d8e870c1c6e3baba1 + - MD5=34edf3464c3f5605c1ca3a071f12e28c + - MD5=bae1f127c4ff21d8fe45e2bbfc59c180 + - MD5=31469f1313871690e8dc2e8ee4799b22 + - MD5=79483cb29a0c428e1362ec8642109eee + - MD5=c607c37af638fa4eac751976a6afbaa6 + - MD5=fb7637cfe8562095937f4d6cff420784 + - MD5=d98d2f80b94f70780b46d1f079a38d93 + - MD5=35fbc4c04c31c1a40e666be6529c6321 + - MD5=969f1d19449dc5c2535dd5786093f651 + - MD5=986f083e5fd01eea4ec3b2575a110a95 + - MD5=ccf523b951afaa0147f22e2a7aae4976 + - MD5=978cd6d9666627842340ef774fd9e2ac + - MD5=9d8cb58b9a9e177ddd599791a58a654d + - MD5=e3fda6120dfa016a76d975fdab7954f6 + - MD5=e99e86480d4206beb898dda82b71ca44 + - MD5=a2be99e4904264baa5649c4d4cd13a17 + - MD5=563b33cfc3c815feff659caaa94edc33 + - MD5=18b4bbeae6b07d2e21729b8698bbd25a + - MD5=f51065667fb127cf6de984daea2f6b24 + - MD5=35c8fdf881909fa28c92b1c2741ac60b + - MD5=477e02a8e31cde2e76a8fb020df095c2 + - MD5=6b6dfb6d952a2e36efd4a387fdb94637 + - MD5=f7d963c14a691a022301afa31de9ecef + - MD5=9638f265b1ddd5da6ecdf5c0619dcbe6 + - MD5=2e48c3b8042fdcef0ed435562407bd21 + - MD5=ada5f19423f91795c0372ff39d745acf + - MD5=702d5606cf2199e0edea6f0e0d27cd10 + - MD5=0809f48fd30845d983d569b847fa83cf + - MD5=743c403d20a89db5ed84c874768b7119 + - MD5=ed6348707f177629739df73b97ba1b6e + - MD5=f33c3f08536f988aac84d72d83b139a6 + - MD5=34686a4b10f239d781772e9e94486c1a + - MD5=d77fb9fb256b0c2ec0258c39b80dc513 + - MD5=b2e4e588ce7b993cc31c18a0721d904d + - MD5=eda6e97b453388bb51ce84b8a11d9d13 + - MD5=d90cdd8f2826e5ea3faf8e258f20dc40 - MD5=736c4b85ce346ddf3b49b1e3abb4e72a + - MD5=b5ada7fd226d20ec6634fc24768f9e22 + - MD5=843e39865b29bb3df825bd273f195a98 + - MD5=7671bbf15b7a8c8f59a0c42a1765136a + - MD5=6c5e50ef2069896f408cdaaddd307893 + - MD5=67b5b8607234bf63ce1e6a52b4a05f87 + - MD5=24589081b827989b52d954dcd88035d0 + - MD5=8fcf90cb5f9cb7205c075c662720f762 + - MD5=812e960977116bf6d6c1ccf8b5dd351f + - MD5=a4fda97f452b8f8705695a729f5969f7 + - MD5=6f7125540e5e90957ba5f8d755a8d570 + - MD5=5a1ee9e6a177f305765f09b0ae6ac1c5 + - MD5=4b42a7a6327827a8dbdecf367832c0cd + - MD5=663f2fb92608073824ee3106886120f3 + - MD5=d6c4baecff632d6ad63c45fc39e04b2f + - MD5=4ae55080ec8aed49343e40d08370195c + - MD5=21be10f66bb65c1d406407faa0b9ba95 + - MD5=e9ccb6bac8715918a2ac35d8f0b4e1e6 + - MD5=a223f8584bcb978c003dd451b1439f8d + - MD5=f30db62d02a69c36ccb01ac9d41dc085 + - MD5=d396332f9d7b71c10b3b83da030690f0 + - MD5=715ac0756234a203cb7ce8524b6ddc0d + - MD5=b94ffce20e36b2930eb3ac72f72c00d6 + - MD5=efb4ed2040b9b3d408aab8dc15df5a06 + - MD5=8f1255efd2ed0d3b03a02c6b236c06d6 + - MD5=530feb1e37831302f58b7c219be6b844 + - MD5=2e219df70fccb79351f0452cba86623e + - MD5=99c131567c10c25589e741e69a8f8aa3 + - MD5=6fb3d42a4f07d8115d59eb2ea6504de5 + - MD5=839cbbc86453960e9eb6db814b776a40 - MD5=3c1f92a1386fa6cf1ba51bae5e9a98dd + - MD5=46edb648c1b5c3abd76bd5e912dac026 + - MD5=bd067efb8cafd971142bc964b4f85df1 + - MD5=3db2afc15e7cc78bd11f4c726060db5c + - MD5=01f092be2a36a5574005e25368426ad2 + - MD5=65c069af3875494ec686afbb0c3da399 + - MD5=ce65b7adcf954eb36df62ea3d4a628c7 + - MD5=ae5eb2759305402821aeddc52ba9a6d6 + - MD5=048549f7e9978aff602a24dea98ee48a + - MD5=da8437200af5f3f790e301b9958993d2 + - MD5=590875a0b2eeb171403fc7d0f5110cb2 + - MD5=bc71da7c055e3172226090ba5d8e2248 + - MD5=d76b56b79b1c95e8dcd7ee88cb0d25ab + - MD5=14eead4d42728e9340ec8399a225c124 + - MD5=1b2e3b7f2966f2f6e6a1bb89f97228e5 + - MD5=5e9d5c59ba1f1060f53909c129df3355 + - MD5=0ac31915ec9a6b7d4d4bba8fe6d60ff7 + - MD5=6909b5e86e00b4033fedfca1775b0e33 + - MD5=2b4e66fac6503494a2c6f32bb6ab3826 + - MD5=a125390293d50091b643cfa096c2148c + - MD5=79bfbeb4e8cfdd0cb1d73612360bd811 + - MD5=389823db299b350f2ee830d47376eeac + - MD5=a17c403c4b74d4fa920c3887066daeb2 + - MD5=1793e1d4247b29313325d1462dec81e2 + - MD5=c31610f4c383204a1fc105c54b7403c9 + - MD5=0ec31f45e2e698a83131b4443f9a6dd7 + - MD5=4885e1bf1971c8fa9e7686fd5199f500 - MD5=f83c61adbb154d46dd8f77923aa7e9c3 - - MD5=16472fca75ab4b5647c99de608949cde - - MD5=0be4a11bc261f3cd8b4dbfebee88c209 - - MD5=61b068b10abfa0776f3b96a208d75bf9 - - MD5=88a6d84f4f1cc188741271ac1999a4e9 - - MD5=98583b2f2efe12d2a167217a3838c498 - - MD5=a610cd4c762b5af8575285dafb9baa8f - - MD5=31a331a88c6280555859455518a95c35 - - MD5=697bbd86ee1d386ae1e99759b1e38919 - - MD5=272446de15c63095940a3dad0b426f21 - - MD5=dd39a86852b498b891672ffbcd071c03 - - MD5=279f3b94c2b9ab5911515bc3e0ecf175 - - MD5=2714c93eb240375a2893ed7f8818004f - - MD5=35c8fdf881909fa28c92b1c2741ac60b - - MD5=c24800c382b38707e556af957e9e94fd - - MD5=557fd33ee99db6fe263cfcb82b7866b3 + - MD5=5cc5c26fc99175997d84fe95c61ab2c2 + - MD5=49832b4f726cdff825257bee33ad8451 + - MD5=1493d342e7a36553c56b2adea150949e + - MD5=df9953fa93e1793456a8d428ba7e5700 + - MD5=40bc58b7615d00eb55ad9ba700c340c1 + - MD5=ba2c0fa201c74621cddd8638497b3c70 + - MD5=3c9f9c1b802f66cf03cbe82dec2bd454 + - MD5=7d84a4ed0fcca3d098881a3f3283724b + - MD5=0e14b69dcf67c20343f85f9fdb5b9300 + - MD5=17b97fbe2e8834d7ad30211635e1b271 - MD5=7fbd3b4488a12eab56c54e7bb91516f3 - - MD5=dbf11f3fad1db3eb08e2ee24b5ebfb95 - - MD5=2ca1044a04cb2f0ce5bd0a5832981e04 - - MD5=715572dfe6fb10b16f980bfa242f3fa5 - - MD5=6126065af2fc2639473d12ee3c0c198e - - MD5=113056ec5c679b6f74c9556339ebf962 - - MD5=2d7f1c02b94d6f0f3e10107e5ea8e141 - - MD5=7db75077d53a63531ef2742d98ca6acc - - MD5=0761c357aed5f591142edaefdf0c89c8 - - MD5=702d5606cf2199e0edea6f0e0d27cd10 - - MD5=f2f728d2f69765f5dfda913d407783d2 - - MD5=3651a6990fe38711ebb285143f867a43 - - MD5=6d97ee5b3300d0f7fa359f2712834c40 - - MD5=a711e6ab17802fabf2e69e0cd57c54cd - - MD5=e6ea0e8d2edcc6cad3c414a889d17ac4 - - MD5=da7e98b23b49b7293ee06713032c74f6 - - MD5=0e51d96a3b878b396708535f49a6d7cb - - MD5=1f263a57c5ef46c8577744ecb32c9548 - - MD5=0d4306983e694c1f34920bae12d887e6 - - MD5=6a1ff4806c1a6e897208f48a1f5b062f - - MD5=5bab40019419a2713298a5c9173e5d30 - - MD5=f84da507b3067f019c340b737cd68d32 - - MD5=55c36d43dd930069148008902f431ea5 - - MD5=bc5366760098dc14ec00ae36c359f42b - - MD5=1c9d2a993e99054050b596d88b307d95 - - MD5=1a22a85489a94db6ff68cd624ef43bad - - MD5=2f1ebc14bd8a29b89896737ca4076002 - - MD5=8e78ab9b9709bafb11695a0a6eddeff9 - - MD5=f758e7d53184faab5bc51f751937fa36 - - MD5=a5ff71e189b462d2b1f0e9e8c4668d79 - - MD5=f3d14fcdb86db8d75416ce173c6061af - - MD5=8fbb1ffc6f13f9d5ee8480b36baffc52 - - MD5=ff7b31fa6e9ab923bce8af31d1be5bb2 - - MD5=5a1ee9e6a177f305765f09b0ae6ac1c5 - - MD5=ba5f0f6347780c2ed911bbf888e75bef - - MD5=4e92f1c677e08fd09b57032c5b47ca46 - - MD5=7d46d0ddaf8c7e1776a70c220bf47524 - - MD5=779af226b7b72ff9d78ce1f03d4a3389 - - MD5=d0a5f9ace1f0c459cef714156db1de02 - - MD5=7056549baa6da18910151b08121e2c94 - - MD5=aa55dd14064cb808613d09195e3ba749 - - MD5=a57b47489febc552515778dd0fd1e51c - - MD5=83601bbe5563d92c1fdb4e960d84dc77 - - MD5=61e8367fb57297a949c9a80c2e0e5a38 - - MD5=0067c788e1cb174f008c325ebde56c22 - - MD5=de711decdd763a73098372f752bf5a1c - - MD5=f042e8318cf20957c2339d96690c3186 - - MD5=ab7b28b532beba6a6c0217bc406b80ee - - MD5=988dabdcf990b134b0ac1e00512c30c4 - - MD5=766f9ea38918827df59a6aed204d2b09 - - MD5=100fe0bc0c183d16e1f08d1a2ad624a8 - - MD5=6fb3d42a4f07d8115d59eb2ea6504de5 - - MD5=ee59b64ae296a87bf7a6aee38ad09617 - - MD5=b12d1630fd50b2a21fd91e45d522ba3a - - MD5=fac8eb49e2fd541b81fcbdeb98a199cb - - MD5=b32497762d916dba6c827e31205b67dd - - MD5=785045f8b25cd2e937ddc6b09debe01a - - MD5=27bcbeec8a466178a6057b64bef66512 - - MD5=df5f8e118a97d1b38833fcdf7127ab29 - - MD5=c2c1b8c00b99e913d992a870ed478a24 - - MD5=d011d5fecdc94754bf02014cb229d6bc - - MD5=9beecfb3146f19400880da61476ef940 - - MD5=c9c25778efe890baa4087e32937016a0 - - MD5=1cb26adeca26aefb5a61065e990402da - - MD5=b34361d151c793415ef92ee5d368c053 - - MD5=549e5148be5e7be17f9d416d8a0e333e - - MD5=7437d4070b5c018e05354c179f1d5e2a - - MD5=dd9596c18818288845423c68f3f39800 - - MD5=93a23503e26773c27ed1da06bb79e7a4 - - MD5=59f6320772a2e6b0b3587536be4cc022 - - MD5=9b359b722ac80c4e0a5235264e1e0156 - - MD5=318e309e11199ec69d8928c46a4d901b - - MD5=d4a10447fdaff7a001715191c1f914b6 - - MD5=3cf7a55ec897cc938aebb8161cb8e74f - - MD5=9321a61a25c7961d9f36852ecaa86f55 - - MD5=0ec361f2fba49c73260af351c39ff9cb - - MD5=4885e1bf1971c8fa9e7686fd5199f500 + - MD5=9007c94c9d91ccff8d7f5d4cdddcc403 + - MD5=260eef181a9bf2849bfec54c1736613b + - MD5=dbde0572d702d0a05c0d509d5624a4d7 + - MD5=5c5973d2caf86e96311f6399513ab8df + - MD5=0703c1e07186cb98837a2ae76f50d42e + - MD5=5970e8de1b337ca665114511b9d10806 + - MD5=2580fb4131353ec417b0df59811f705c + - MD5=fa63a634189bd4d6570964e2161426b0 - MD5=ee57cbe6ec6a703678eaa6c59542ff57 - - MD5=a87689b1067edacc48fddf90020dee23 - - MD5=26ce59f9fc8639fd7fed53ce3b785015 - - MD5=12908c285b9d68ee1f39186110df0f1e - - MD5=4c016fd76ed5c05e84ca8cab77993961 - - MD5=6ff59faea912903af0ba8e80e58612bc - - MD5=515c75d77c64909690c18c08ef3fc310 - - MD5=a4531040276080441974d9e00d8d4cfa - - MD5=2a3ce41bb2a7894d939fbd1b20dae5a0 - - MD5=2229d5a9a92b62df4df9cf51f48436f7 - - MD5=70c2c29643ee1edd3bbcd2ef1ffc9a73 - - MD5=a26e600652c33dd054731b4693bf5b01 - - MD5=300d6ac47a146eb8eb159f51bc13f7cf - - MD5=62eed4173c566a248531fb6f20a5900d - - MD5=312e31851e0fc2072dbf9a128557d6ef - - MD5=c69c292e0b76b25a5fa0e16136770e11 - - MD5=d0c2caa17c7b6d2200e1b5aa9d07135e - - MD5=c508d28487121828c3a1c2b57acb05be + - MD5=e140cb81bd27434fc4fd9080b7551922 + - MD5=49fe3d1f3d5c2e50a0df0f6e8436d778 + - MD5=a3af4a4fa6cba27284f8289436c2f074 + - MD5=192519661fe6d132f233d0355c3f4a6d + - MD5=394e290aff9d4e78e504cedfb2d99350 + - MD5=2e7d824a49d731da9fc96262a29c85ce + - MD5=f7cbbb5eb263ec9a35a1042f52e82ca4 + - MD5=2d8e4f38b36c334d0a32a7324832501d - MD5=443689645455987cb347154b391f734d - - MD5=700d6a0331befd4ed9cfbb3234b335e7 - - MD5=11fb599312cb1cf43ca5e879ed6fb71e - - MD5=db46c56849bbce9a55a03283efc8c280 - - MD5=b2a9ac0600b12ec9819e049d7a6a0b75 - - MD5=1414629b1ee93d2652ff49b2eb829940 - - MD5=fa63a634189bd4d6570964e2161426b0 - - MD5=75fa19142531cbf490770c2988a7db64 - - MD5=32365e3e64d28cc94756ac9a09b67f06 - - MD5=fadf9c1365981066c39489397840f848 - - MD5=4d17b32be70ef39eae5d5edeb5e89877 - - MD5=e36f6f7401ae11e11f69d744703914db - - MD5=238769fd8379ec476c1114bd2bd28ca6 - - MD5=c3fea895fe95ea7a57d9f4d7abed5e71 - - MD5=49938383844ceec33dba794fb751c9a5 - - MD5=a346417e9ae2c17a8fbf73302eeb611d - - MD5=0283b43c6bc965175a1c92b255d39556 - - MD5=17b97fbe2e8834d7ad30211635e1b271 - - MD5=ddb7da975d90b2a9c9c58e1af55f0285 - - MD5=b7ca4c32c844df9b61634052ae276387 - - MD5=444f538daa9f7b340cfd43974ed43690 - - MD5=1cff7b947f8c3dea1d34dc791fc78cdc - - MD5=f5e6ef0dcbb3d4a608e9e0bba4d80d0a - - MD5=44a3b9cc0a8e89c11544932b295ea113 - - MD5=e9e786bdba458b8b4f9e93d034f73d00 - - MD5=bbe4f5f8b0c0f32f384a83ae31f49a00 - - MD5=1e1a3d43bd598b231207ff3e70f78454 - - MD5=9982da703f13140997e137b1e745a2e3 - - MD5=875c44411674b75feb07592aeffa09c1 + - MD5=9258e3cb20e24a93d4afdee9f5a0299c + - MD5=0067c788e1cb174f008c325ebde56c22 + - MD5=79f7e6f98a5d3ab6601622be4471027f + - MD5=1c31d4e9ad2d2b5600ae9d0c0969fe59 + - MD5=2f1ebc14bd8a29b89896737ca4076002 - MD5=43830326cd5fae66f5508e27cbec39a0 - - MD5=7a16fca3d56c6038c692ec75b2bfee15 - - MD5=5b1e1a9dade81f1e80fdc0a2d3f9006e - - MD5=58a92520dda53166e322118ee0503364 + - MD5=df5f8e118a97d1b38833fcdf7127ab29 + - MD5=8de7dcade65a1f51605a076c1d2b3456 + - MD5=fadf9c1365981066c39489397840f848 + - MD5=2c957aa79231fad8e221e035db6d0d81 - MD5=fd81af62964f5dd5eb4a828543a33dcf - - MD5=c842827d4704a5ef53a809463254e1cc - - MD5=7644bed8b74dc294ac77bf406df8ad77 - - MD5=24061b0958874c1cb2a5a8e9d25482d4 - - MD5=9a237fa07ce3ed06ea924a9bed4a6b99 - - MD5=e0fb44aba5e7798f2dc637c6d1f6ca84 - - MD5=ce57844fb185d0cdd9d3ce9e5b6a891d - - MD5=9d8cb58b9a9e177ddd599791a58a654d - - MD5=743c403d20a89db5ed84c874768b7119 - - MD5=a7d3ebfb3843ee28d9ca18b496bd0eb2 - - MD5=2e48c3b8042fdcef0ed435562407bd21 - - MD5=b5ada7fd226d20ec6634fc24768f9e22 - - MD5=991230087394738976dbd44f92516cae - - MD5=1898ceda3247213c084f43637ef163b3 - - MD5=3e4a1384a27013ab7b767a88b8a1bd34 - - MD5=0211ab46b73a2623b86c1cfcb30579ab - - MD5=ad22a7b010de6f9c6f39c350a471a440 - - MD5=76d1d4d285f74059f32b8ad19a146d0c - - MD5=e4788e5b3e5f0a0bbb318a9c426c2812 - - MD5=0ba6afe0ea182236f98365bd977adfdf - - MD5=260eef181a9bf2849bfec54c1736613b - - MD5=f853abe0dc162601e66e4a346faed854 - - MD5=81df475ab8d37343f0ad2a55b1397a8f - - MD5=d4f7c14e92b36c341c41ae93159407dd - - MD5=28d6b138adc174a86c0f6248d8a88275 - - MD5=187ddca26d119573223cf0a32ba55a61 - - MD5=710b290a00598fbb1bcc49b30174b2c9 + - MD5=045ef7a39288ba1f4b8d6eca43def44f + - MD5=90f8c1b76f786814d03ef4c51d4abb6d + - MD5=17719a7f571d4cd08223f0b30f71b8b8 + - MD5=bdd8dc8880dfbc19d729ca51071de288 + - MD5=d79b8b7bed8d30387c22663b24e8c191 - MD5=57cd52ed992b634e74d2ddf9853a73b3 - - MD5=96c850e53caca0469e1c4604e6c1aad1 - - MD5=3836e2db9034543f63943cdbb52a691a - - MD5=eeb8e039f6d942538eb4b0252117899a - - MD5=bbbc9a6cc488cfb0f6c6934b193891eb - - MD5=9f94028cbcf6789103cb5bb6fcef355d - - MD5=f7cbbb5eb263ec9a35a1042f52e82ca4 - - MD5=598f8fb2317350e5f90b7bd16baf5738 - - MD5=da6f7407c4656a2dbaf16a407aff1a38 - - MD5=a91a1bc393971a662a3210dac8c17dfd + - MD5=1c294146fc77565030603878fd0106f9 + - MD5=b7946feaeae34d51f045c4f986fa62ce + - MD5=86fd54c56dcafe2de918c36f8dfda67e + - MD5=adc1e141b57505fd011bc1efb1ae6967 + - MD5=6822566b28be75b2a76446a57064369f + - MD5=d9ce18960c23f38706ae9c6584d9ac90 + - MD5=935a7df222f19ac532e831e6bf9e8e45 + - MD5=664ad9cf500916c94fc2c0020660ac4e + - MD5=356bda2bf0f6899a2c08b2da3ec69f13 - MD5=dacb62578b3ea191ea37486d15f4f83c - - MD5=0e625b7a7c3f75524e307b160f8db337 - - MD5=0d6fef14f8e1ce5753424bd22c46b1ce - - MD5=708ac9f7b12b6ca4553fd8d0c7299296 - - MD5=5228b7a738dc90a06ae4f4a7412cb1e9 - - MD5=5eabc87416f59e894adfde065d0405fa - - MD5=392d7180653b0ca77a78bdf15953d865 - - MD5=dedd07993780d973c22c93e77ab69fa3 - - MD5=f0fdfdf3303e2f7c141aa3a24d523af1 - - MD5=3ecd3ca61ffc54b0d93f8b19161b83da - - MD5=bfe96411cf67edb3cee2b9894b910cd5 - - MD5=5adebdb94abb4c76dad2b7ecb1384a9d - - MD5=43bfc857406191963f4f3d9f1b76a7bf - - MD5=b3424a229d845a88340045c29327c529 - - MD5=f544f9925cab71786e57241c10e08633 - - MD5=18439fe2aaeddfd355ef88091cb6c15f - - MD5=c9a293762319d73c8ee84bcaaf81b7b3 - - MD5=aa12c1cb47c443c6108bfe7fc1a34d98 - - MD5=84c4d8ae023ca9bb60694fa467141247 - - MD5=14eead4d42728e9340ec8399a225c124 - - MD5=945ef111161bae49075107e5bc11a23f - - MD5=338a98e1c27bc76f09331fcd7ae413a5 - - MD5=90f8c1b76f786814d03ef4c51d4abb6d - - MD5=62f02339fe267dc7438f603bfb5431a1 - - MD5=aad4fb47cb39a9ab4159662a29e1ee88 - - MD5=56a515173b211832e20fbc64e5a0447c - - MD5=1c4acf27317a2b5eaedff3ce6094794d - - MD5=e28ce623e3e5fa1d2fe16c721efad4c2 + - MD5=89c7bd12495e29413038224cb61db02e + - MD5=f60a9b88c6ff07d4990d8653d0025683 + - MD5=710b290a00598fbb1bcc49b30174b2c9 + - MD5=5c9f240e0b83df758993837d18859cbe + - MD5=cb0c5d3639fcd810cde94b7b990aa51c + - MD5=4d17b32be70ef39eae5d5edeb5e89877 + - MD5=0d4306983e694c1f34920bae12d887e6 + - MD5=2751c7fd7f09479fa2b15168695adebc + - MD5=84ba7af6ada1b3ea5efb9871a0613fc6 + - MD5=0a653d9d0594b152ca835d0b2593269f + - MD5=02198692732722681f246c1b33f7a9d9 + - MD5=9d884ecd3b6c3f2509851ea15ffefbef + - MD5=3473faea65fba5d4fbe54c0898a3c044 + - MD5=013719e840e955c2e4cd9d18c94a2625 + - MD5=5e71c0814287763d529822d0a022e693 + - MD5=9f94028cbcf6789103cb5bb6fcef355d + - MD5=0d8daf471d871deb90225d2953c0eb95 + - MD5=ad612a7eb913b5f7d25703cd44953c35 + - MD5=fe3fb6719e86481a3514ab9e00a55bcf + - MD5=3e87e3346441539d3a90278a120766df + - MD5=fa173832dca1b1faeba095e5c82a1559 + - MD5=6ab7b8ef0c44e7d2d5909fdb58d37fa5 + - MD5=803a371a78d528a44ef8777f67443b16 + - MD5=257483d5d8b268d0d679956c7acdf02d + - MD5=02fc655279b8ea3ef37237c488b675cc + - MD5=94999245e9580c6228b22ac44c66044c + - MD5=88aada8325a3659736b3a7201c825664 + - MD5=92927c47d6ff139c9b19674c9d0088f6 + - MD5=05bf59560656c8a9a3191812b0e1235b + - MD5=c098f8aeb67eeb2262dbf681690a9306 - MD5=eb61616a7bc58e3f5b8cf855d04808c3 - - MD5=18b4bbeae6b07d2e21729b8698bbd25a - - MD5=2509a71a02296aa65a3428ddfac22180 - - MD5=8741e6df191c805028b92cec44b1ba88 - - MD5=2b4e66fac6503494a2c6f32bb6ab3826 - - MD5=68dde686d6999ad2e5d182b20403240b - - MD5=517d484bdbad4637188ec7a908335b86 - - MD5=4f5ca81806098204c4dea0927a8fec66 - - MD5=6d67da13cf84f15f6797ed929dd8cf5d - - MD5=c516acb873c7f8c24a0431df8287756e - - MD5=f1e054333cc40f79cfa78e5fbf3b54c2 - - MD5=043d5a1fc66662a3f91b8a9c027f9be9 - - MD5=70196d88c03f2ea557281b24dad85de5 - - MD5=9aa7ed7809eec0d8bc6c545a1d18107a - - MD5=e9ccb6bac8715918a2ac35d8f0b4e1e6 - - MD5=19f32bf24b725f103f49dc3fa2f4f0bd - - MD5=42132c7a755064f94314b01afb80e73c - - MD5=0ccc4e9396e0be9c4639faec53715831 - - MD5=1bd38ac06ef8709ad23af666622609c9 - - MD5=ef5ba21690c2f4ba7e62bf022b2df1f7 - - MD5=c56a9ed0192c5a2b39691e54f2132a2f - - MD5=49fe3d1f3d5c2e50a0df0f6e8436d778 - - MD5=2dbc09c853c4bf2e058d29aaa21fa803 - - MD5=4814205270caa80d35569eee8081838e - - MD5=dd04cd3de0c19bede84e9c95a86b3ca8 - - MD5=7475bfea6ea1cd54029208ed59b96c6b - - MD5=9e0af1fe4d6dd2ca4721810ed1c930d6 - - MD5=cf7aeedd674417b648fc334d179c94ae - MD5=e3aaa0c1c3a5e99eb9970ebe4b5a3183 - - MD5=b94ffce20e36b2930eb3ac72f72c00d6 - - MD5=bae1f127c4ff21d8fe45e2bbfc59c180 - - MD5=8d63e1a9ff4cafee1af179c0c544365c - - MD5=0797bb21d7a0210fedf4f3533ee82494 - - MD5=9cc757a18b86408efc1ce3ed20cbcdac - - MD5=680dcb5c39c1ec40ac3897bb3e9f27b9 + - MD5=5efbbfcc6adac121c8e2fe76641ed329 + - MD5=4eb4069c230a5dc40cd5d60d2cb3e0d0 + - MD5=e0528f756bbb2ab83c60f9fd6f541e42 + - MD5=eb4de413782193e824773723d790cfc4 + - MD5=5ca1922ed5ee2b533b5f3dd9be20fd9a + - MD5=97580157f65612f765f39af594b86697 + - MD5=21e72a43aedefcd70ca8999cc353b51b + - MD5=d6b259b2dfe80bdf4d026063accd752c + - MD5=ca7b41ce335051bf9dd7fa4a55581296 + - MD5=084a13f18856d610d44d3109a9d2acde + - MD5=a5f637d61719d37a5b4868c385e363c0 + - MD5=1392b92179b07b672720763d9b1028a5 + - MD5=1a5a95d6bedbe29e5acf5eb6a727c634 + - MD5=a71020c6d6d42c5000e9993425247e06 - MD5=a9f220b1507a3c9a327a99995ff99c82 - - MD5=a453083b8f4ca7cb60cac327e97edbe2 + - MD5=7c40ec9ed020cc9404de8fe3a5361a09 + - MD5=fe937e1ed4c8f1d4eac12b065093ae63 + - MD5=4ca0dba9e224473d664c25e411f5a3bd + - MD5=2a8662e91a51d8e04a94fa580c7d3828 + - MD5=942c6a8332d5dd06d8f4b2a9cb386ff4 + - MD5=0283b43c6bc965175a1c92b255d39556 + - MD5=2d91d45cd09dfc3f8e89da1c261fd1ac + - MD5=187ddca26d119573223cf0a32ba55a61 + - MD5=1549e6cbce408acaddeb4d24796f2eaf + - MD5=6beb1d8146f5a4aaa2f7b8c0c9bced30 + - MD5=6cce5bb9c8c2a8293df2d3b1897941a2 + - MD5=e0fb44aba5e7798f2dc637c6d1f6ca84 + - MD5=de1cc5c266140bff9d964fab87a29421 + - MD5=66e0db8a5b0425459d0430547ecbb3db + - MD5=03ca3b1cff154ab8855043abadd07956 + - MD5=2a5fb925125af951bd76c00579d61666 + - MD5=a2c5f994e9b4a74b2f5b51c7a44c4401 + - MD5=5c55fcfe39336de769bfa258ab4c901d + - MD5=aa12c1cb47c443c6108bfe7fc1a34d98 + - MD5=8407ddfab85ae664e507c30314090385 + - MD5=be54aabf09c3fa4671b6efacafa389e3 + - MD5=296bde4d0ed32c6069eb90c502187d0d + - MD5=1d768959aaa194d60e4524ce47708377 + - MD5=dca1c62c793f84bb2d8e41ca50efbff1 + - MD5=2a5ccd95292f03f0dd4899d18b55b428 + - MD5=1f950cfd5ed8dd9de3de004f5416fe20 + - MD5=35493772986f610753be29121cd68234 + - MD5=6212832f13b296ddbc85b24e22edb5ec + - MD5=9b157f1261a8a42e4ef5ec23dd4cda9e + - MD5=b89b097b8b8aecb8341d05136f334ebb + - MD5=8942e9fa2459b1e179a6535ca16a2fb4 + - MD5=64efbffaa153b0d53dc1bccda4279299 + - MD5=70dcd07d38017b43f710061f37cb4a91 + - MD5=537e2c3020b1d48b125da593e66508ec + - MD5=05b4463677e2566414ad53434ad9e7e5 + - MD5=7be3a7a743f2013c3e90355219626c2c + - MD5=7f258c0161e9edca8e7f85ac0dd68e46 + - MD5=81df475ab8d37343f0ad2a55b1397a8f + - MD5=f0aeb731d83f7ab6008c92c97faf6233 + - MD5=507a649eb585d8d0447eab0532ef0c73 + - MD5=5c5e3c7ca39d9472099ea81c329b7d75 + - MD5=a31246180e61140ad7ff9dd7edf1f6a1 + - MD5=9226339848e359f5e4cd519bef7dcd39 + - MD5=f544f9925cab71786e57241c10e08633 + - MD5=88d2143ae62878dada3aa0a6d8f7cea8 + - MD5=c06dda757b92e79540551efd00b99d4b + - MD5=41ce6b172542a9a227e34a45881e1d2a + - MD5=9bcb97a1697a70f59405786759af63b8 + - MD5=17c7bcae7ebabb95af2f7c91b19c361c + - MD5=aaa8999a169e39fb8b48ae49cd6ac30a + - MD5=9a5a35112c4f8016abcc6363b44d3385 + - MD5=6b2df08bacf640cc2ac6f20c76af07ee + - MD5=ab4656d1ec4d4cc83c76f639a5340e84 + - MD5=697f698b59f32f66cd8166e43a5c49c7 + - MD5=4e90cd77509738d30d3181a4d0880bfa + - MD5=e3bdb307b32b13b8f7e621e8d5cc8cd3 + - MD5=16472fca75ab4b5647c99de608949cde - MD5=24fe18891c173a7c76426d08d2b0630e - - MD5=a216803d691d92acc44ac77d981aa767 - - MD5=560069dc51d3cc7f9cf1f4e940f93cae - - MD5=56a9e9b5334f8698a0ede27c64140982 - - MD5=ea2ff60fcce3b9ffe0bd77658b88512d - - MD5=376b1e8957227a3639ec1482900d9b97 - - MD5=8aa9d47ec9a0713c56b6dec3d601d105 - - MD5=2971d4ee95f640d2818e38d8877c8984 - - MD5=1ce19950e23c975f677b80ff59d04fae - - MD5=d79b8b7bed8d30387c22663b24e8c191 - - MD5=7331720a5522d5cd972623326cf87a3f + - MD5=2faa725dd9bb22b2100e3010f8a72182 + - MD5=251e1ce4e8e9b9418830ed3dc8edd5e3 + - MD5=1f3522c5db7b9dcdd7729148f105018e + - MD5=d5a642329cce4df94b8dc1ba9660ae34 + - MD5=b2600502a5b962b8cdfac2ead24b17b4 + - MD5=c9cb486b4f652c9cfb8411803f8ed5f0 - MD5=73c98438ac64a68e88b7b0afd11ba140 - - MD5=c607c37af638fa4eac751976a6afbaa6 - - MD5=33b3842172f21ba22982bfb6bffbda27 - - MD5=86fd54c56dcafe2de918c36f8dfda67e - - MD5=f026460a7a720d0b8394f28a1f9203dc - - MD5=729dd4df669dc96e74f4180c6ee2a64b - - MD5=8ad9dfc971df71cd43788ade6acf8e7d - - MD5=3247014ba35d406475311a2eab0c4657 + - MD5=ab7b28b532beba6a6c0217bc406b80ee + - MD5=75dbd5db9892d7451d0429bec1aabe1a + - MD5=d4a10447fdaff7a001715191c1f914b6 + - MD5=31eca8c0b32135850d5a50aee11fec87 + - MD5=2cc65e805757cfc4f87889cdceb546cd + - MD5=96b463b6fa426ae42c414177af550ba2 + - MD5=ef5ba21690c2f4ba7e62bf022b2df1f7 + - MD5=f406c5536bcf9bacbeb7ce8a3c383bfa + - MD5=1ed043249c21ab201edccb37f1d40af9 + - MD5=86635fdc8e28957e6c01fc483fe7b020 + - MD5=520c18f50d3cb2ce162767c4c1998b86 + - MD5=569676d3d45b0964ac6dd0815be8ff8c + - MD5=3f39f013168428c8e505a7b9e6cba8a2 + - MD5=68726474c69b738eac3a62e06b33addc + - MD5=c04a5cdcb446dc708d9302be4e91e46d + - MD5=a179c4093d05a3e1ee73f6ff07f994aa + - MD5=1a22a85489a94db6ff68cd624ef43bad + - MD5=4ad30223df1361726ff64417f8515272 + - MD5=4cee9945f9a3e8f2433f5aa8c58671fb + - MD5=f56f30ac68c35dd4680054cdfd8f3f00 + - MD5=31a331a88c6280555859455518a95c35 + - MD5=650f6531db6fb0ed25d7fc70be35a4da + - MD5=82854a57630059d1ce2870159dc2f86b + - MD5=d556cb79967e92b5cc69686d16c1d846 + - MD5=5b1e1a9dade81f1e80fdc0a2d3f9006e + - MD5=d9e7e5bcc5b01915dbcef7762a7fc329 + - MD5=a60c9173563b940203cf4ad38ccf2082 + - MD5=95a95e28cf5ee4ece6ffbaf169358192 + - MD5=397580c24c544d477688fcfca9c9b542 + - MD5=c5d1f8ed329ebb86ddd01e414a6a1718 + - MD5=ab4ee84e09b09012ac86d3a875af9d43 + - MD5=c9a293762319d73c8ee84bcaaf81b7b3 + - MD5=a641e3dccba765a10718c9cb0da7879e + - MD5=dd39a86852b498b891672ffbcd071c03 + - MD5=715f8efab1d1c660e4188055c4b28eed + - MD5=c046ca4da48db1524ddf3a49a8d02b65 + - MD5=f5e6ef0dcbb3d4a608e9e0bba4d80d0a + - MD5=bf581e9eb91bace0b02a2c5a54bf1419 + - MD5=d6c2e061b21c32c585aca5f38335c21c + - MD5=7aa34cd9ea5649c24a814e292b270b6f + - MD5=5eabc87416f59e894adfde065d0405fa + - MD5=7ffdd78d63ca7307a96843cfe806799e + - MD5=bbbc9a6cc488cfb0f6c6934b193891eb + - MD5=113056ec5c679b6f74c9556339ebf962 + - MD5=f7745b42882dec947f6629ab9b7c39b7 + - MD5=4b60ef388071e0baf299496e3d6590ae + - MD5=c006d1844f20b91d0ea52bf32d611f30 + - MD5=a0074303fe697a36d9397c0122e04973 + - MD5=ff7b31fa6e9ab923bce8af31d1be5bb2 + - MD5=2e887e52e45bba3c47ccd0e75fc5266f + - MD5=7eeb4c0cb786a409b94066986addf315 + - MD5=e28ce623e3e5fa1d2fe16c721efad4c2 + - MD5=0eb3dfeffb49d32310d96f3aa3e8ca61 + - MD5=a15235fcec1c9b65d736661d4bec0d38 + - MD5=0ad87bba19f0b71ccb2d32239abd49ec + - MD5=1c9001dcd34b4db414f0c54242fedf49 + - MD5=490b1f404c4f31f4538b36736c990136 + - MD5=1dc94a6a82697c62a04e461d7a94d0b0 + - MD5=555446a3ca8d9237403471d4744e39f4 + - MD5=100fe0bc0c183d16e1f08d1a2ad624a8 + - MD5=37086ae5244442ba552803984a11d6cb + - MD5=5d4df0bac74e9ac62af6bc99440b050b + - MD5=94cdf2cf363be5a8749670bea4db65cd + - MD5=3a48f0e4297947663fbb11702aa1d728 + - MD5=98583b2f2efe12d2a167217a3838c498 + - MD5=7437d4070b5c018e05354c179f1d5e2a + - MD5=7d46d0ddaf8c7e1776a70c220bf47524 + - MD5=3c4154866f3d483fdc9f4f64ef868888 + - MD5=91203acddac81511d17a68a030d063a8 + - MD5=7d87a9c54e49943bf18574c6f02788ee + - MD5=8d63e1a9ff4cafee1af179c0c544365c + - MD5=34069a15ae3aa0e879cd0d81708e4bcc + - MD5=e4788e5b3e5f0a0bbb318a9c426c2812 + - MD5=1c591efa8660d4d36a75db9b82474174 + - MD5=e9e786bdba458b8b4f9e93d034f73d00 + - MD5=d5db81974ffda566fa821400419f59be + - MD5=a926b64be7c27ccb96e687a3924de298 + - MD5=1c4acf27317a2b5eaedff3ce6094794d + - MD5=cd1c8a66e885b7a8b464094395566a46 + - MD5=edfa69e9132a56778d6363cd41843893 + - MD5=1ed08a6264c5c92099d6d1dae5e8f530 + - MD5=f690bfc0799e51a626ba3931960c3173 + - MD5=7c983b4e66c4697ad3ce7efc9166b505 + - MD5=4a06bcd96ef0b90a1753a805b4235f28 + - MD5=c28b4a60ebd4b8c12861829cc13aa6ff + - MD5=e700a820f117f65e813b216fccbf78c9 + - MD5=515c75d77c64909690c18c08ef3fc310 + - MD5=7056549baa6da18910151b08121e2c94 + - MD5=61b068b10abfa0776f3b96a208d75bf9 + - MD5=c901887f28bbb55a10eb934755b47227 + - MD5=0761c357aed5f591142edaefdf0c89c8 + - MD5=f141db170bb4c6e088f30ddc58404ad3 + - MD5=6d97ee5b3300d0f7fa359f2712834c40 + - MD5=53f103e490bc11624ef6a51a6d3bdc05 + - MD5=3482acba11c71e45026747dbe366a7d9 + - MD5=7475bfea6ea1cd54029208ed59b96c6b + - MD5=d011d5fecdc94754bf02014cb229d6bc + - MD5=42f7cc4be348c3efd98b0f1233cf2d69 + - MD5=45c2d133d41d2732f3653ed615a745c8 + - MD5=71fffc05cff351a6f26f78441cfebe26 + - MD5=da6f7407c4656a2dbaf16a407aff1a38 + - MD5=5dd25029499cd5656927e9c559955b07 - MD5=a82c01606dc27d05d9d3bfb6bb807e32 + - MD5=8a973be665923e9708974e72228f9805 + - MD5=312e31851e0fc2072dbf9a128557d6ef + - MD5=4ff880566f22919ed94ffae215d39da5 + - MD5=fcc5de75c1837b631ed77ea4638704b9 + - MD5=279f3b94c2b9ab5911515bc3e0ecf175 + - MD5=61d6b1c71ad94f8485e966bebc36d092 + - MD5=300c5b1795c9b6cc1bc4d7d55c7bbe85 + - MD5=4a829b8cf1f8fdb69e1d58ae04e6106e + - MD5=e4d4a22cbf94e6b0a92fc36d46741f56 + - MD5=e4a0bba88605d4c07b58a2cc3fac0fe9 + - MD5=272446de15c63095940a3dad0b426f21 + - MD5=f160ecce1500a5a5877c123584e86b17 + - MD5=0a2ec9e3e236698185978a5fc76e74e6 + - MD5=21ca6a013a75fcf6f930d4b08803973a + - MD5=e432956d19714c65723f9c407ffea0c5 + - MD5=4e4b9bdcc6b8d97828ae1972d750a08d + - MD5=67e3b720cee8184c714585a85f8058a0 + - MD5=03c9d5f24fd65ad57de2d8a2c7960a70 + - MD5=f65e545771fd922693f0ec68b2141012 + - MD5=7a16fca3d56c6038c692ec75b2bfee15 + - MD5=5adebdb94abb4c76dad2b7ecb1384a9d + - MD5=003dc41d148ec3286dc7df404ba3f2aa + - MD5=0490f5961e0980792f5cb5aedf081dd7 + - MD5=d3e40644a91327da2b1a7241606fe559 + - MD5=49938383844ceec33dba794fb751c9a5 + - MD5=f7393fb917aed182e4cbef25ce8af950 + - MD5=549e5148be5e7be17f9d416d8a0e333e + - MD5=9a237fa07ce3ed06ea924a9bed4a6b99 + - MD5=96fb2101f85fa81871256107bdd25169 + - MD5=aa9adcf64008e13d7e68b56fdd307ead + - MD5=62eed4173c566a248531fb6f20a5900d + - MD5=87982977500b93330df08bf372435641 + - MD5=9e0af1fe4d6dd2ca4721810ed1c930d6 + - MD5=9b5533c4af38759d167d5399e83b475f - MD5=bd5d4d07ae09e9f418d6b4ac6d9f2ed5 - - MD5=20125794b807116617d43f02b616e092 - - MD5=697f698b59f32f66cd8166e43a5c49c7 - - MD5=e68972cd9f28f0be0f9df7207aba9d1d - - MD5=6909b5e86e00b4033fedfca1775b0e33 - - MD5=650f6531db6fb0ed25d7fc70be35a4da - - MD5=880611326b768c4922e9da8a8effc582 - - MD5=262969a3fab32b9e17e63e2d17a57744 - - MD5=5158f786afa19945d19bee9179065e4d - - MD5=ad03f225247b58a57584b40a4d1746d3 + - MD5=22ca5fe8fb0e5e22e6fb0848108c03f4 + - MD5=7b43dfd84de5e81162ebcfafb764b769 + - MD5=ccb09eb78e047c931708149992c2e435 + - MD5=8c1d181480796d7d3366a9381fd7782d + - MD5=b5192270857c1f17f7290acbaadf097d + - MD5=fe71c99a5830f94d77a8792741d6e6c7 + - MD5=238769fd8379ec476c1114bd2bd28ca6 + - MD5=cf7aeedd674417b648fc334d179c94ae + - MD5=52b7cd123f6d1b9ed76b08f2ee7d9433 + - MD5=8d14b013fc2b555e404b1c3301150c34 + - MD5=2e492f14a1087374368562d01cd609aa + - MD5=65e6718a547495c692e090d7887d247b + - MD5=51e7b58f6e9b776568ffbd4dd9972a60 + - MD5=84c4d8ae023ca9bb60694fa467141247 + - MD5=69ac6165912cb263a656497cc70155e6 + - MD5=30efb7d485fc9c28fe82a97deac29626 + - MD5=f4b2580cf0477493908b7ed81e4482f8 + - MD5=fc6dadb97bd3b7a61d06f20d0d2e1bac + - MD5=595363661db3e50acc4de05b0215cc6f + - MD5=cec257dcac9e708cefb17f8984dd0a70 + - MD5=0e51d96a3b878b396708535f49a6d7cb + - MD5=f34489c0f0d0a16b4db8a17281b57eba + - MD5=80b4041695810f98e1c71ff0cf420b6d - MD5=7978d858168fadd05c17779da5f4695a - - MD5=94cdf2cf363be5a8749670bea4db65cd - - MD5=d3026938514218766cb6d3b36ccfa322 - - MD5=9dfd73dadb2f1c7e9c9d2542981aaa63 - - MD5=707ab1170389eba44ffd4cfad01b5969 - - MD5=d2fd132ab7bbc6bbb87a84f026fa0244 - - SHA1=75649b228a22ce1e2a306844e0d48f714fb03f28 - - SHA1=e2e7a2b2550b889235aafd9ffd1966ccd20badfe - - SHA1=0b01c4c1f18d72eb622be2553114f32edfe7b7aa - - SHA1=da42cefde56d673850f5ef69e7934d39a6de3025 - - SHA1=c614ab686e844c7a7d2b20bc7061ab15290e2cfd - - SHA1=5abffd08f4939a0dee81a5d95cf1c02e2e14218c - - SHA1=c8d87f3cd34c572870e63a696cf771580e6ea81b - - SHA1=f4728f490d741b04b611164a7d997e34458e3a5e - - SHA1=729a8675665c61824f22f06c7b954be4d14b52c4 - - SHA1=8325e8d7fd2edc126dcf1089dee8da64e79fb12e - - SHA1=78834ff75e2ff8b7456e85114802e58bc9fda457 - - SHA1=977fd907b6a2509019d8ef4f6213039f2523f2b5 - - SHA1=7626036baf98ddcb492a8ec34e58c022ebd70a80 - - SHA1=78b9481607ca6f3a80b4515c432ddfe6550b18a8 - - SHA1=7859e75580570e23a1ef7208b9a76f81738043d5 - - SHA1=5a7dd0da0aee0bdedc14c1b7831b9ce9178a0346 - - SHA1=f95b59cab63408343ecbdb0e71db34e83f75b503 - - SHA1=449ff4f5ce2fdddac05a6c82e45a7e802b1c1305 - - SHA1=cf664e30f8bd548444458eef6d56d5c2e2713e2a - - SHA1=3f67a43ae174a715795e49f72bc350302de83323 - - SHA1=01779ee53f999464465ed690d823d160f73f10e7 - - SHA1=7fb52290883a6b69a96d480f2867643396727e83 - - SHA1=6a60c5dc7d881ddb5d6fe954f10b8aa10d214e72 - - SHA1=6d9e22a275a5477ea446e6c56ee45671fbcbb5f6 - - SHA1=8626ab1da6bfbdf61bd327eb944b39fd9df33d1d - - SHA1=247065af09fc6fd56b07d3f5c26f555a5ccbfda4 - - SHA1=5a55c227ca13e9373b87f1ef6534533c7ce1f4fb - - SHA1=5f8356ffa8201f338dd2ea979eb47881a6db9f03 - - SHA1=cc0e0440adc058615e31e8a52372abadf658e6b1 - - SHA1=022f7aa4d0f04d594588ae9fa65c90bcc4bda833 - - SHA1=43419df1f9a07430a18c5f3b3cc74de621be0f8e - - SHA1=30e7258a5816a6db19cdda2b2603a8c3276f05c2 - - SHA1=5c2262f9e160047b9f4dee53bbfd958ec27ec22e - - SHA1=634b1e9d0aafac1ec4373291cefb52c121e8d265 - - SHA1=22fc833e07dd163315095d32ebcd3b3e377c33a4 - - SHA1=091df975fa983e4ad44435ca092dbf84911f28a5 - - SHA1=8275977e4b586e485e9025222d0a582fcb9e1e8f - - SHA1=ba3faca988ff56f4850dede2587d5a3eff7c6677 - - SHA1=7d34bb240cb5dec51ffcc7bf062c8d613819ac30 - - SHA1=b0c7ec472abf544c5524b644a7114cba0505951e - - SHA1=ea37a4241fa4d92c168d052c4e095ccd22a83080 - - SHA1=91530e1e1fb25a26f3e0d6587200ddbaecb45c74 - - SHA1=c834c4931b074665d56ccab437dfcc326649d612 - - SHA1=40d29aa7b3fafd27c8b27c7ca7a3089ccb88d69b - - SHA1=48a09ca5fdbc214e675083c2259e051b0629457b - - SHA1=d62fa51e520022483bdc5847141658de689c0c29 + - MD5=557fd33ee99db6fe263cfcb82b7866b3 + - MD5=7b9e1e5e8ff4f18f84108bb9f7b5d108 + - MD5=9b91a44a488e4d539f2e55476b216024 + - MD5=3b23808de1403961205352e94b8f2f9b + - MD5=13bd61916343d94ebefc9a7911d7bf88 + - MD5=936729b8dc2282037bc1504c2680e3ad + - MD5=9f70cd5edcc4efc48ae21e04fb03be9d + - MD5=75e50ae2e0f783e0caf912f45e15248a + - MD5=444f538daa9f7b340cfd43974ed43690 + - MD5=8b47c5580b130dd3f580af09323bc949 + - MD5=daf11013cf4c879a54ed6a86a05bee3c + - MD5=eff3a9cc3e99ef3ddae57df72807f0c7 + - MD5=9982da703f13140997e137b1e745a2e3 + - MD5=f778489c7105a63e9e789a02412aaa5f + - MD5=723381977ce7df57ec623db52b84f426 + - MD5=1db988eb9ac5f99756c33b91830a9cf6 + - MD5=c02f70960fa934b8defa16a03d7f6556 + - MD5=5e35c049bc8076406910da36edf9212d + - MD5=241a095631570a9cef4f126c87605c60 + - MD5=bbe4f5f8b0c0f32f384a83ae31f49a00 + - MD5=b418293e25632c5f377bf034bb450e57 + - MD5=4f191abc652d8f7442ca2636725e1ed6 + - MD5=34e55ccceec34a8567c8b95d662ba886 + - MD5=4f5ca81806098204c4dea0927a8fec66 + - MD5=8b287636041792f640f92e77e560725e + - MD5=56a515173b211832e20fbc64e5a0447c + - MD5=2315a8919cfb167e718d8c788ed3ceca + - MD5=2d465b4487dc81effaa84f122b71c24f + - MD5=29ccff428e5eb70ae429c3da8968e1ec + - MD5=28d6b138adc174a86c0f6248d8a88275 + - MD5=9beecfb3146f19400880da61476ef940 + - MD5=d5556c54c474cf0bff25804bfbe788d3 + - MD5=f7a09ac4a91a6390f8d00bf09f53ae37 + - MD5=0d6fef14f8e1ce5753424bd22c46b1ce + - MD5=06897b431c07886454e0681723dd53e6 + - MD5=c533d6d64b474ffc3169a0e0fc0a701a + - MD5=c52dce2bee8ec88748411e470ff531f6 + - MD5=71858fa117e6f3309606d5cdb57e6e09 + - MD5=259381daae0357fbfefe1d92188c496a + - MD5=ceac1347acae9ad9496d4b0593256522 + - MD5=4124de3cb72f5dfd7288389862b03f2a + - MD5=edbf206c27c3aa7d1890899dffcc03ec + - MD5=a5ff71e189b462d2b1f0e9e8c4668d79 + - MD5=c49a1956a6a25ffc25ad97d6762b0989 + - MD5=c475c7d0f2d934f150b6c32c01479134 + - MD5=eb7f6d01c97783013115ad1a2833401a + - MD5=e98f4cc2cbf9ec23fd84da30c0625884 + - MD5=bf74d0706f5ab9c34067192260f4efb0 + - MD5=0752f113d983030939b4ab98b0812cf0 + - MD5=7c22b7686c75a2bb7409b3c392cc791a + - MD5=07efb8259b42975d502a058db8a3fd21 + - MD5=def0da6c95d14f7020e533028224250e + - MD5=d4a9f80ecb448da510e5bf82c4a699ee + - MD5=c5e7e8ca0d76a13a568901b6b304c3ba + - MD5=59f6320772a2e6b0b3587536be4cc022 + - MD5=0cd2504a2e0a8ad81d9a3a6a1fad7306 + - MD5=0ccc4e9396e0be9c4639faec53715831 + - MD5=c15eb30e806ad5e771b23423fd2040b0 + - MD5=f3d14fcdb86db8d75416ce173c6061af + - MD5=637f2708da54e792c27f1141d5bb09cd + - MD5=779af226b7b72ff9d78ce1f03d4a3389 + - MD5=a17c58c0582ee560c72f60764ed63224 + - MD5=c2c1b8c00b99e913d992a870ed478a24 + - MD5=2b6a17ec50d3a21e030ed78f7acbd2af + - MD5=76bb1a4332666222a8e3e1339e267179 + - MD5=0ef05030abd55ba6b02faa2c0970f67f + - MD5=56a9e9b5334f8698a0ede27c64140982 + - MD5=9e0659d443a2b9d1afc75a160f500605 + - MD5=bc6ff00fb3a14437c94b37ac9a2101d4 + - MD5=2da209dde8188076a9579bd256dc90d0 + - MD5=11dc5523bb559f8d2ce637f6a2b70dea + - MD5=12908c285b9d68ee1f39186110df0f1e + - MD5=73a40e29f61e5d142c8f42b28a351190 + - MD5=0797bb21d7a0210fedf4f3533ee82494 + - MD5=6846c2035b4c56b488d2ce2c69a57261 + - MD5=dbf11f3fad1db3eb08e2ee24b5ebfb95 + - MD5=41339c852c6e8e4c94323f500c87a79c + - MD5=ce57844fb185d0cdd9d3ce9e5b6a891d + - MD5=3ab94fba7196e84a97e83b15f7bcb270 + - MD5=0291ced808eafe406d3d9b56d2fc0c26 + - MD5=3836e2db9034543f63943cdbb52a691a + - MD5=0dff47f3b14fb1c1bad47cc517f0581a + - MD5=e8ebba56ea799e1e62748c59e1a4c586 + - MD5=2c54859a67306e20bfdc8887b537de72 + - MD5=4e67277648c63b79563360dac22b5492 + - MD5=26ce59f9fc8639fd7fed53ce3b785015 + - MD5=2927eac51c46944ab69ba81462fb9045 + - MD5=1a6e12c2d11e208bdf72a8962120fae7 + - MD5=daf800da15b33bf1a84ee7afc59f0656 + - MD5=9cbdb5fb6dc63cb13f10b6333407cbb9 + - MD5=9650db2ef0a44984845841ab24972ced + - MD5=96a8b535b5e14b582ca5679a3e2a5946 + - MD5=33b3842172f21ba22982bfb6bffbda27 + - MD5=2391fb461b061d0e5fccb050d4af7941 + - MD5=8bf290b5eda99fc2697373a87f4e1927 + - MD5=5fade7137c14a94b323f3b7886fba2a9 + - MD5=a89ca92145fc330adced0dd005421183 + - MD5=96421b56dbda73e9b965f027a3bda7ba + - MD5=d6e9f6c67d9b3d790d592557a7d57c3c + - MD5=6fa271b6816affaef640808fc51ac8af + - MD5=94d45bb36b13f4e936badb382fc133fe + - MD5=e027daa2f81961d09aef88093e107d93 + - MD5=b1b8e6b85dd03c7f1290b1a071fc79c1 + - MD5=07fc1e043654fdde56da98d93523635c + - MD5=118f3fdba730094d17aa1b259586aef6 + - MD5=2714c93eb240375a2893ed7f8818004f + - MD5=641243746597fbd650e5000d95811ea3 + - MD5=449bb1c656fa30de7702f17e35b11cd3 + - MD5=96c850e53caca0469e1c4604e6c1aad1 + - MD5=12cecc3c14160f32b21279c1a36b8338 + - MD5=949ef0df929a71d6cc77494dfcb1ddeb + - MD5=8065a7659562005127673ac52898675f + - MD5=1033f0849180aac4b101a914bc8c53b4 + - MD5=8f73c1c48ffddfca7d1a98faf83d18ff + - MD5=648adec580746afbbf59904c1e150c73 + - MD5=e84605c8e290de6b92ce81d2f6a175d2 + - MD5=300d6ac47a146eb8eb159f51bc13f7cf + - MD5=392d7180653b0ca77a78bdf15953d865 + - MD5=f0e21ababe63668fb3fbd02e90cd1fa9 + - MD5=e0bfbdf3793ea2742c03f5a82cb305a5 + - MD5=00143c457c8885fd935fc5d5a6ba07a4 + - MD5=c8d3784a3ab7a04ad34ea0aba32289ca + - MD5=9532893c1d358188d66b0d7b0784bb6b + - MD5=564d84a799db39b381a582a0b2f738c4 + - MD5=fd3b7234419fafc9bdd533f48896ed73 + - MD5=be5f46fd1056f02a7a241e052fa5888f + - MD5=2128e6c044ee86f822d952a261af0b48 + - MD5=4b817d0e7714b9d43db43ae4a22a161e + - MD5=eaec88a63db9cf9cee53471263afe6fb + - MD5=ecdc79141b7002b246770d01606504f2 + - MD5=ad866d83b4f0391aecceb4e507011831 + - MD5=88a6d84f4f1cc188741271ac1999a4e9 + - MD5=8580165a2803591e007380db9097bbcc + - MD5=5c4df33951d20253a98aa7b5e78e571a + - MD5=27d21eeff199ed555a29ca0ea4453cfb + - MD5=43bfc857406191963f4f3d9f1b76a7bf + - MD5=0fbf893691a376b168d8cdf427b89945 + - MD5=1762105b28eb90d19e9ab3acde16ead6 + - MD5=b41dcdb2e710dffba2d8ea1defb0f087 + - MD5=c42caa9cdcc50c01cb2fed985a03fe23 + - MD5=c516acb873c7f8c24a0431df8287756e + - MD5=343ada10d948db29251f2d9c809af204 + - MD5=790ccca8341919bb8bb49262a21fca0e + - MD5=51207adb8dab983332d6b22c29fe8129 + - MD5=f1e054333cc40f79cfa78e5fbf3b54c2 + - MD5=7c4e513702a0322b0e3bce29dea9e3e9 + - MD5=8ac6d458abbe4f5280996eb90235377c + - MD5=6a1ff4806c1a6e897208f48a1f5b062f + - MD5=a4531040276080441974d9e00d8d4cfa + - MD5=d1f9ffe5569642c8f8c10ed7ee5d9391 + - MD5=09b3d078ffa3b4ed0ad2e477a2ee341f + - MD5=83601bbe5563d92c1fdb4e960d84dc77 + - MD5=1414629b1ee93d2652ff49b2eb829940 + - MD5=84b17daba8715089542641990c1ea3c2 + - MD5=6ae4dec687ac6d1b635a4e351dddf73e + - MD5=9dfd73dadb2f1c7e9c9d2542981aaa63 + - MD5=1e1a3d43bd598b231207ff3e70f78454 + - MD5=07f83829e7429e60298440cd1e601a6a + - MD5=7c72a7e1d42b0790773efd8700e24952 + - MD5=f41eea88057d3dd1a56027c4174eed22 + - MD5=f53fa44c7b591a2be105344790543369 + - MD5=08e06b839499cb4b752347399db41b57 + - MD5=c3fea895fe95ea7a57d9f4d7abed5e71 + - MD5=785045f8b25cd2e937ddc6b09debe01a + - MD5=53bb10742e10991af4ad280fcb134151 + - MD5=76c643ab29d497317085e5db8c799960 + - MD5=bce7f34912ff59a3926216b206deb09f + - MD5=c4f5619ce04d4bee38024d08513c77fd + - MD5=2a3ce41bb2a7894d939fbd1b20dae5a0 + - MD5=86bec99cd121b0386a5acc1c368a9d49 + - MD5=e076dadf37dd43a6b36aeed957abee9e + - MD5=4a85754636c694572ca9f440d254f5ce + - MD5=f4b7b84a6828d2f9205b55cf8cfc7742 + - MD5=8f5b84350bfc4fe3a65d921b4bd0e737 + - MD5=f9d04e99e4cab90973226a4555bc6d57 + - MD5=bc5366760098dc14ec00ae36c359f42b + - MD5=b79475c4783efdd8122694c6b5669a79 + - MD5=5f4a232d92480a1bebbe025ef64dc760 + - MD5=1cff7b947f8c3dea1d34dc791fc78cdc + - MD5=69ba501a268f09f694ff0e8e208aa20e + - MD5=030c8432981e4d41b191624b3e07afe2 + - MD5=c56a9ed0192c5a2b39691e54f2132a2f + - SHA1=38a863bcd37c9c56d53274753d5b0e614ba6c8bb + - SHA1=87d2b638e5dfab1e37961d27ca734b83ece02804 + - SHA1=1a56614ea7d335c844b7fc6edd5feb59b8df7b55 + - SHA1=f02af84393e9627ba808d4159841854a6601cf80 + - SHA1=75649b228a22ce1e2a306844e0d48f714fb03f28 + - SHA1=b242b0332b9c9e8e17ec27ef10d75503d20d97b6 + - SHA1=eb93d2f564fea9b3dc350f386b45de2cd9a3e001 + - SHA1=388068adc9ec46a0bbc8173bcb0d5f9cf8af6ea5 + - SHA1=fce3a95b222c810c56e7ed5a3d7fb059eb693682 + - SHA1=f4728f490d741b04b611164a7d997e34458e3a5e + - SHA1=4d516b1c9b7a81de2836ab24ba6b880c11807255 + - SHA1=bda26e533ef971d501095950010081b772920afc + - SHA1=ec4cc6de4c779bb1ca1dd32ee3a03f7e8d633a9b + - SHA1=30a224b22592d952fbe2e6ad97eda4a8f2c734e0 + - SHA1=b82c034e41d463f4e68b0a7d334f2d7611049bcb + - SHA1=8795df6494b724d9f279f007db33c24c27a91d08 + - SHA1=b8d19cd28788ce4570623a5433b091a5fbd4c26d + - SHA1=10e15ba8ff8ed926ddd3636cec66a0f08c9860a4 + - SHA1=72f16e6a18ba87248dd72f52445c916ad2e4edc2 - SHA1=c0568bcdf57db1fa43cdee5a2a12b768a0064622 - - SHA1=21edff2937eb5cd6f6b0acb7ee5247681f624260 - - SHA1=f36a47edfacd85e0c6d4d22133dd386aee4eec15 - - SHA1=b7a2f2760f9819cb242b2e4f5b7bab0a65944c81 - - SHA1=24f6e827984cca5d9aa3e4c6f3c0c5603977795a - - SHA1=d612165251d5f1dcfb1f1a762c88d956f49ce344 - - SHA1=444f96d8943aec21d26f665203f3fb80b9a2a260 - - SHA1=012db3a80faf1f7f727b538cbe5d94064e7159de - - SHA1=82dbac75b73ff4b92bdcbf6977a6683e1dcfe995 - - SHA1=205c69f078a563f54f4c0da2d02a25e284370251 - - SHA1=6003184788cd3d2fc624ca801df291ccc4e225ee - - SHA1=414cd15d6c991d19fb5be02e3b9fb0e6c5ce731c - - SHA1=377f7e7382908690189aede31fcdd532baa186b5 - - SHA1=9d07df024ec457168bf0be7e0009619f6ac4f13c - - SHA1=dcfeca5e883a084e89ecd734c4528b922a1099b9 - - SHA1=9feacc95d30107ce3e1e9a491e2c12d73eef2979 - - SHA1=175fb76c7cd8f0aeb916f4acb3b03f8b2d51846a - - SHA1=ccd547ef957189eddb6ee213e5e0136e980186f9 - - SHA1=637d0de7fa2a06e462dad40a575cb0fa4a38d377 - - SHA1=c0100f8a8697a240604b3ea88848dd94947c7fd3 - - SHA1=a57eefa0c653b49bd60b6f46d7c441a78063b682 - - SHA1=4885cd221fa1ea330b9e4c1702be955d68bd3f6a - - SHA1=c05df2e56e05b97e3ca8c6a61865cae722ed3066 - - SHA1=a9ea84ee976c66977bb7497aa374bba4f0dd2b27 - - SHA1=8f266edf9f536c7fc5bb3797a1cf9039fde8e97c - - SHA1=762a5b4c7beb2af675617dca6dcd6afd36ce0afd - - SHA1=2fc6845047abcf2a918fce89ab99e4955d08e72c + - SHA1=ddbe809b731a0962e404a045ab9e65a0b64917ad + - SHA1=f1c8c3926d0370459a1b7f0cf3d17b22ff9d0c7f + - SHA1=0edf51a0fac3b90f6961c2b20bbaeb4ccfc1ea84 + - SHA1=6102b73489e1d319c0db7b84cb2c426c5f680120 + - SHA1=c16d7b2fbe69a28ccbcf87348903277f22805bf3 + - SHA1=c21510569fd84a5fe04508aa28e3cf9c8cc45b7a + - SHA1=2207cdee7deaba1492ae2349392864f19eb4dfaf + - SHA1=2f86a4828ba86034f0c043db3e3db33aa2cf5da5 + - SHA1=569f4605c65c2a217b28aefeb8570f9ea663e4b7 + - SHA1=cd828ee0725f6185861fd0a9d3bd78f1d96e55bf + - SHA1=c8d87f3cd34c572870e63a696cf771580e6ea81b + - SHA1=af6e1f2cfb230907476e8b2d676129b6d6657124 + - SHA1=7877bd7da617ec92a5c47f0da1f0abcf6484d905 + - SHA1=3adea4a3a91504dc2e3c5e9247c6427cd5c73bab + - SHA1=55015f64783ddd148674a74d8137bcd6ccd6231d + - SHA1=f8d7369527cc6976283cc73cd761f93bd1cec49d + - SHA1=8fb149fc476cf5bf18dc575334edad7caf210996 + - SHA1=091df975fa983e4ad44435ca092dbf84911f28a5 + - SHA1=928d26cce64ad458e1f602cc2aea848e0b04eaaf + - SHA1=a7baff6666fc2d259c22f986b8a153c7b1d1d8be + - SHA1=90d73db752eac6ffc53555281fc5aa92297285ec + - SHA1=282bb241bda5c4c1b8eb9bf56d018896649ca0e1 + - SHA1=a0bf00e4ef2b1a79ccf2361c6b303688641ed94c - SHA1=4a2bb97d395634b67194856d79a1ee5209aa06a7 - - SHA1=fbc6d2448739ddec35bb5d6c94b46df4148f648d - - SHA1=3784d1b09a515c8824e05e9ea422c935e693080c - - SHA1=4f30f64b5dfcdc889f4a5e25b039c93dd8551c71 - - SHA1=70bb3b831880e058524735b14f2a0f1a72916a4c - - SHA1=34ec04159d2c653a583a73285e6e2ac3c7b416dd - - SHA1=bebf97411946749b9050989d9c40352dbe8269ea - - SHA1=42eb220fdfb76c6e0649a3e36acccbdf36e287f1 - - SHA1=30a224b22592d952fbe2e6ad97eda4a8f2c734e0 + - SHA1=e0ee5ea6693c26f21b143ef9b133f53efe443b1e + - SHA1=c70989ed7a6ad9d7cd40ae970e90f3c3f2f84860 + - SHA1=c9cbfdd0be7b35751a017ec59ff7237ffdc4df1f + - SHA1=c05df2e56e05b97e3ca8c6a61865cae722ed3066 + - SHA1=dbf6e72c08824fe49c29b7660c9965c37d983e93 + - SHA1=bed323603a33fa8b2fc7568149345184690f0390 + - SHA1=2365a66c1eddfcf8385d9ff38ba8bd5f6f2e4fc2 + - SHA1=59b0b8e3478f3d21213a8afda84181c4ed0a79a7 + - SHA1=297fdf58e60d54bcddf2694c21ceb9da9ec17915 + - SHA1=bfe55cacc7c56c9f7bd75bdb4b352c0b745d071b + - SHA1=adf9328e60c714ff0b98083bcf2f4ee2d58b960b + - SHA1=78834ff75e2ff8b7456e85114802e58bc9fda457 + - SHA1=0a5ef5b72e621a639860c03f1cac499567082f39 + - SHA1=aadaec4c31d661c249e4cf455ec752fffa3e5cfc + - SHA1=492a47426b04f00c0d5b711ad8c872aad3aa3a1d + - SHA1=064847af77afca8a879a9bf34cb87b64b5e69165 + - SHA1=468cc011807704c04892ed209cf81d7896a12a0c + - SHA1=1013d5a0fd6074a8c40dbf3a88e3e06fbf3bcf41 + - SHA1=fc62b746e0e726537bf848b48212f46db585af6d + - SHA1=dc0e97adb756c0f30b41840a59b85218cbdd198f - SHA1=eceb51233f013e04406da11482324d45e70281c7 - - SHA1=8d0ae69fbe0c6575b6f8caf3983dd3ddc65aadb5 - - SHA1=ce549714a11bd43b52be709581c6e144957136ec - - SHA1=6df42ea7c0e6ee02062bf9ca2aa4aa5cd3775274 - - SHA1=0a6e0f9f3d7179a99345d40e409895c12919195b - - SHA1=ff9048c451644c9c5ff2ba1408b194a0970b49e6 - - SHA1=619413b5a6d6aeb4d58c409d54fe4a981dd7e4d9 - - SHA1=2e546d86d3b1e4eaa92b6ec4768de79f70eb922f - - SHA1=dc7b022f8bd149efbcb2204a48dce75c72633526 - - SHA1=61f5904e9ff0d7e83ad89f0e7a3741e7f2fbf799 - - SHA1=00b4e8b7644d1bf93f5ddb5740b444b445e81b02 - - SHA1=7d7c03e22049a725ace2a9812c72b53a66c2548b - - SHA1=bca4bbe4388ebeb834688e97fac281c09b0f3ac1 - - SHA1=f77413ec3bd9ed3f31fc53a4c755dc4123e0068f - - SHA1=8d0f33d073720597164f7321603578cd13346d1f - - SHA1=7a1689cde189378e7db84456212b0e438f9bf90a - - SHA1=460008b1ffd31792a6deadfa6280fb2a30c8a5d2 - - SHA1=a4b2c56c12799855162ca3b004b4b2078c6ecf77 - - SHA1=8183a341ba6c3ce1948bf9be49ab5320e0ee324d - - SHA1=0f780b7ada5dd8464d9f2cc537d973f5ac804e9c - - SHA1=5853e44ea0b6b4e9844651aa57d631193c1ed0f0 - - SHA1=b4f1877156bf3157bff1170ba878848b2f22d2d5 - - SHA1=6afc6b04cf73dd461e4a4956365f25c1f1162387 - - SHA1=9f22ebcd2915471e7526f30aa53c24b557a689f5 - - SHA1=9c24dd75e4074041dbe03bf21f050c77d748b8e9 - - SHA1=fe10018af723986db50701c8532df5ed98b17c39 - - SHA1=e039c9dd21494dbd073b4823fc3a17fbb951ec6c - - SHA1=351cbd352b3ec0d5f4f58c84af732a0bf41b4463 - - SHA1=d0452363b41385f6a6778f970f3744dde4701d8f - - SHA1=5e6ddd2b39a3de0016385cbd7aa50e49451e376d + - SHA1=ff9887cfd695916a06319b3a96f7ab2e6343a20e + - SHA1=67e87ca093da64a23cf0fc0be2b35e03d1bf1543 + - SHA1=b9807b8840327c6d7fbdde45fc27de921f1f1a82 + - SHA1=62244c704b0f227444d3a515ea0dc1003418a028 - SHA1=4d6e532830058fadd861ff9eac16de8cfc6974ce - - SHA1=f1c8c3926d0370459a1b7f0cf3d17b22ff9d0c7f - - SHA1=93aa3bb934b74160446df3a47fa085fd7f3a6be9 - - SHA1=d1ba4c95697a25ec265a3908acbff269e29e760c + - SHA1=ebced350ea447df8e10ebb080e3a3e5b32aca348 + - SHA1=6de3d5c2e33d91eef975a30bc07b0e53a68e77b8 + - SHA1=d5fd9fe10405c4f90235e583526164cd0902ed86 + - SHA1=0be77bb3720283c9a970a97dab25d2a312e86110 + - SHA1=213ba055863d4226da26a759e8a254062ea77814 + - SHA1=9099482b26e9ba8e1d303418afc9111a3bffd6b3 + - SHA1=623cd2abef6c92255f79cbbd3309cb59176771da + - SHA1=f6b3577ea4b1a5641ae3421151a26268434c3db8 + - SHA1=01a578a3a39697c4de8e3dab04dba55a4c35163e + - SHA1=461882bd59887617cadc1c7b2b22d0a45458c070 + - SHA1=f6d826d73bf819dbc9a058f2b55c88d6d4b634e3 + - SHA1=8278db134d3b505c735306393fdf104d014fb3bf + - SHA1=22c909898f5babe37cc421b4f5ed0522196f8127 + - SHA1=e8311ba74bc6b35b1171b81056d0148913b1d61c - SHA1=3eea0f5fb180c6f865fc83ac75ef3ad5b1376775 - - SHA1=2f991435a6f58e25c103a657d24ed892b99690b8 - - SHA1=e40ea8d498328b90c4afbb0bb0e8b91b826f688e - - SHA1=d126c6974a21e9c5fdd7ff1ca60bcc37c9353b47 + - SHA1=8e2511ae90643584ceb0d98f0f780cd6b7290604 + - SHA1=8a922499f7a1b978555b46c30f90de1339760c74 + - SHA1=2540205480ea3d59e4031de3c6632e3ce2596459 + - SHA1=8edcd4b35f5ae88d14e83252390659c6fc79eae3 + - SHA1=aaffdc89befa42e375f822366bbded8c245baf94 + - SHA1=1d9fd846e12104ae31fd6f6040b93fc689abf047 - SHA1=3d3b42d7b0af68da01019274e341b03d7c54f752 - - SHA1=623cd2abef6c92255f79cbbd3309cb59176771da + - SHA1=88811e1a542f33431b9f8b74cb8bf27209b27f17 + - SHA1=67b45c1e204d44824cd7858455e1acedbd7ffbb3 + - SHA1=fff7ee0febb8c93539220ca49d4206616e15c666 + - SHA1=205c69f078a563f54f4c0da2d02a25e284370251 + - SHA1=d302ae7f016299af323a3542d840004888ab91ff + - SHA1=15d1a6a904c8409fb47a82aefa42f8c3c7d8c370 + - SHA1=228b1ff5cd519faa15d9c2f8cfefd7e683bc3f2b + - SHA1=63cf021c8662fa23ce3e4075a4f849431e473058 + - SHA1=ca4d2bd6022f71e1a48b08728c0ac83c68e91281 + - SHA1=d43b2ac1221f2eaf2c170788280255cfef3edd72 + - SHA1=db3ce886a47027c09bb668c7049362ab86c82ceb + - SHA1=e5114fd50904c7fb75d8c86367b9a2dd4f79dfb1 + - SHA1=745bad097052134548fe159f158c04be5616afc2 + - SHA1=a7d827a41b2c4b7638495cd1d77926f1ba902978 + - SHA1=0e47bd9b67500a67ce18c24328d6d0db8ae2c493 + - SHA1=ef95f500b60c49f40ed6ce3014ffdb294b301e95 + - SHA1=2ee7b3f6bcc9e95a9ae60bcb9bbc483b0400077d + - SHA1=b3f5185d7824ea2c2d931c292f4d8f77903a4d2a + - SHA1=029c678674f482ababe8bbfdb93152392457109d + - SHA1=aadebbcbde0e7edd35e29d98871289a75e744aad + - SHA1=a88546fb61a2fa7dab978a9cb678469e8f0ed475 + - SHA1=90abd7670c84c47e6ffc45c67d676db8c12b1939 + - SHA1=4fe873544c34243826489997a5ff14ed39dd090d + - SHA1=d06d119579156b1ec732c50f0f64358762eb631a + - SHA1=27eab595ec403580236e04101172247c4f5d5426 + - SHA1=d1670bd08cfd376fc2b70c6193f3099078f1d72f + - SHA1=7ee675f0106e36d9159c5507b96c3237fb9348cd + - SHA1=fde6ab389a6e0a9b2ef1713df9d43cca5f1f3da8 + - SHA1=d61acd857242185a56e101642d15b9b5f0558c26 + - SHA1=9d44260558807daff61a0cc0c6a8719c3adacd2d + - SHA1=3f17ff83dc8a5f875fb1b3a5d3b9fcbe407a99f0 - SHA1=4a235f0b84ff615e2879fa9e0ec0d745fcfdaa5c - - SHA1=ec4cc6de4c779bb1ca1dd32ee3a03f7e8d633a9b - - SHA1=96ec8c16f6a54b48e9a7f0d0416a529f4bf9ac11 - - SHA1=537923c633d8fc94d9ae45ad9d89e5346f581f17 - - SHA1=0cb14c1049c0e81c8655ab7ee7d698c11758ea06 - - SHA1=89909fa481ff67d7449ee90d24c167b17b0612f1 - - SHA1=32888d789edc91095da2e0a5d6c564c2aebcee68 - - SHA1=f42aa04b69a2e2241958b972ef24b65f91c3af12 - - SHA1=f7b3457a6fd008656e7216b1f09db2ff062f1ca4 + - SHA1=a951953e3c1bb08653ed7b0daec38be7b0169c27 + - SHA1=35f803d483af51762bee3ec130de6a03362ce920 + - SHA1=ed3f11383a47710fa840e13a7a9286227fa1474c + - SHA1=004d9353f334e42c79a12c3a31785a96f330bbef + - SHA1=0b77242d4e920f2fcb2b506502cfe3985381defc + - SHA1=8146ed4a9c9a2f7e7aeae0a0539610c3c1cd3563 + - SHA1=2261198385d62d2117f50f631652eded0ecc71db + - SHA1=947db58d6f36a8df9fa2a1057f3a7f653ccbc42e + - SHA1=ef0504dd90eb451f51d2c4f987fb7833c91c755b + - SHA1=34b2986f1ff5146f7145433f1ef5dfe6210131d0 + - SHA1=472cc191937349a712aabcbc4d118c1c982ab7c9 + - SHA1=7c43d43d95232e37aa09c5e2bcd3a7699d6b7479 + - SHA1=de2c073c8b4db6ffd11a99784d307f880444e5d3 + - SHA1=e88259de797573fa515603ad3354aed0bce572f1 + - SHA1=f70eb454c0e9ea67a18c625faf7a666665801035 + - SHA1=4a2e034d2702aba6bca5d9405ba533ed1274ff0c + - SHA1=8788f4b39cbf037270904bdb8118c8b037ee6562 + - SHA1=d94f2fb3198e14bfe69b44fb9f00f2551f7248b2 + - SHA1=ac600a2bc06b312d92e649b7b55e3e91e9d63451 + - SHA1=4b009e91bae8d27b160dc195f10c095f8a2441e1 + - SHA1=5b866f522bcdf80e6a9fda71b385f917317f6551 - SHA1=4a7d66874a0472a47087fabaa033a85d47413379 - - SHA1=e5114fd50904c7fb75d8c86367b9a2dd4f79dfb1 - - SHA1=b52886433e608926a0b6e623217009e4071b107e - - SHA1=d19d1d3aa30391922989f4c6e3f7dc4937dcefbf - - SHA1=e3c1dd569aa4758552566b0213ee4d1fe6382c4b - - SHA1=bed5bad7f405aa828a146c7f71d09c31d0c32051 + - SHA1=517504aaf8afc9748d6aec657d46a6f7bbc60c09 + - SHA1=f0d6b0bcd5f47b41d3c3192e244314d99d1df409 + - SHA1=3f43412c563889a5f5350f415f7040a71cc25221 + - SHA1=8031ecbff95f299b53113ccd105582defad38d7b + - SHA1=a6fe4f30ca7cb94d74bc6d42cdd09a136056952e + - SHA1=55c64235d223baeb8577a2445fdaa6bedcde23db + - SHA1=12154f58b68902a40a7165035d37974128deb902 + - SHA1=fa60a89980aad30db3a358fb1c1536a4d31dff6c + - SHA1=d0d39e1061f30946141b6ecfa0957f8cc3ddeb63 + - SHA1=9310239b75394b75a963336fbd154038fc13c4e3 + - SHA1=7673cebd15488cbbb4ca65209f92faab3f933205 + - SHA1=3a3342f4ca8cc45c6b86f64b1a7d7659020b429f + - SHA1=190c20e130a9156442eebcf913746c69b9485eec + - SHA1=3c9c86c0b215ecbab0eeb4479c204dba65258b8e + - SHA1=8dc2097a90eb7e9d6ee31a7c7a95e7a0b2093b89 + - SHA1=c00ad2a252b53cf2d0dc74b53d1af987982e1ad1 + - SHA1=3f223581409492172a1e875f130f3485b90fbe5f + - SHA1=ea877092d57373cb466b44e7dbcad4ce9a547344 + - SHA1=7cd4aea9c1f82111bf7f9d4934be95e9bb6f8ae0 + - SHA1=d32408c3b79b1f007331d2a3c78b1a7e96f37f79 + - SHA1=a6a71fb4f91080aff2a3a42811b4bd86fb22168d + - SHA1=a0c7c913d7b5724a46581b6e00dd72c26c37794d + - SHA1=6f8b0e1c7d7bd7beed853e0d51ca03f143e5b703 + - SHA1=91ee32b464f6385fc8c44b867ca3dec665cbe886 + - SHA1=976777d39d73034df6b113dfce1aa6e1d00ffcfd + - SHA1=75dd52e28c40cd22e38ae2a74b52eb0cddfcb2c4 + - SHA1=14bf0eaa90e012169745b3e30c281a327751e316 + - SHA1=f9cced7ccdc1f149ad8ad13a264c4425aee89b8e + - SHA1=4e826430a1389032f3fe06e2cc292f643fb0c417 - SHA1=e4e40032376279e29487afc18527804dce792883 - - SHA1=d302ae7f016299af323a3542d840004888ab91ff - - SHA1=aaffdc89befa42e375f822366bbded8c245baf94 - - SHA1=6053d258096bccb07cb0057d700fe05233ab1fbb - - SHA1=e88259de797573fa515603ad3354aed0bce572f1 - - SHA1=c948ae14761095e4d76b55d9de86412258be7afd - - SHA1=3b8ddf860861cc4040dea2d2d09f80582547d105 - - SHA1=ce31292b05c0ae1dc639a6ee95bb3bc7350f2aaf - - SHA1=1fd7f881ea4a1dbb5c9aeb9e7ad659a85421745b - - SHA1=2bcb81f1b643071180e8ed8f7e42f49606669976 - - SHA1=1e09f3dd6ba9386fa9126f0116e49c2371401e01 - - SHA1=b7fa8278ab7bc485727d075e761a72042c4595f7 - - SHA1=2f9b0cd96d961e49d5d3b416028fd3a0e43d6a28 - - SHA1=8453fc3198349cf0561c87efc329c81e7240c3da - - SHA1=0aecdc0b8208b81b0c37eef3b0eaea8d8ebef42e - - SHA1=6bb68e1894bfbc1ac86bcdc048f7fe7743de2f92 - - SHA1=d1c38145addfed1bcd1b400334ff5a5e2ef9a5c6 - - SHA1=7877bd7da617ec92a5c47f0da1f0abcf6484d905 - - SHA1=1768fb2b4796f624fa52b95dfdfbfb922ac21019 - - SHA1=2b0bb408ff0e66bcdf6574f1ca52cbf4015b257b - - SHA1=f7ce71891738a976cd8d4b516c8d7a8e2f6b0ad6 - - SHA1=58fe23f1bb9d4bcc1b07b102222a7d776cc90f6c - - SHA1=ec457a53ea03287cbbd1edcd5f27835a518ef144 - - SHA1=6e58421e37c022410455b1c7b01f1e3c949df1cd - - SHA1=fad8e308f6d2e6a9cfaf9e6189335126a3c69acb - - SHA1=643383938d5e0d4fd30d302af3e9293a4798e392 - - SHA1=4927d843577bada119a17b249ff4e7f5e9983a92 - - SHA1=ce5681896e7631b6e83cccb7aa056a33e72a1bbe - - SHA1=4789b910023a667bee70ff1f1a8f369cffb10fe8 - - SHA1=5c94c8894799f02f19e45fcab44ee33e653a4d17 + - SHA1=bebf97411946749b9050989d9c40352dbe8269ea + - SHA1=cfcecf6207d16aeb0af29aac8a4a2f104483018e + - SHA1=b21cba198d721737aabd882ada6c91295a5975ed + - SHA1=8f540936f2484d020e270e41529624407b7e107e + - SHA1=32888d789edc91095da2e0a5d6c564c2aebcee68 + - SHA1=10fc6933deb7de9813e07d864ce03334a4f489d9 + - SHA1=09d3ff3c57f5154735e676f2c0a10b5e51336bb3 - SHA1=d022f5e3c1bba43871af254a16ab0e378ea66184 - - SHA1=986c1fdfe7c9731f4de15680a475a72cf2245121 - - SHA1=6523b3fd87de39eb5db1332e4523ce99556077dc - - SHA1=008a292f71f49be1fb538f876de6556ce7b5603a - - SHA1=5bdd44eb321557c5d3ab056959397f0048ac90e6 - - SHA1=a21c84c6bf2e21d69fa06daaf19b4cc34b589347 - - SHA1=47df454cb030c1f4f7002d46b1308a32b03148e7 - - SHA1=622e7bffda8c80997e149ac11492625572e386e0 - - SHA1=53f7fc4feb66af748f2ab295394bf4de62ae9fcc - - SHA1=628e63caf72c29042e162f5f7570105d2108e3c2 - - SHA1=b9807b8840327c6d7fbdde45fc27de921f1f1a82 - - SHA1=16d7ecf09fc98798a6170e4cef2745e0bee3f5c7 - - SHA1=6dac7a8fa9589caae0db9d6775361d26011c80b2 - - SHA1=ace6b9e34e3e2e73fe584f3bbdb4e4ec106e0a7d - - SHA1=891c8d482e23222498022845a6b349fe1a186bcc - - SHA1=dbf6e72c08824fe49c29b7660c9965c37d983e93 - - SHA1=dd4cd182192b43d4105786ba87f55a036ec45ef2 - - SHA1=256d285347acd715ed8920e41e5ec928ae9201a8 - - SHA1=44a3a00394a6d233a27189482852babf070ffebe - - SHA1=f6f11ad2cd2b0cf95ed42324876bee1d83e01775 - - SHA1=e71caa502d0fe3a7383ce26285a6022e63acda97 - - SHA1=ad60e40a148accec0950d8d13bf7182c2bd5dfef - - SHA1=12d38abbc5391369a4c14f3431715b5b76ac5a2a - - SHA1=4f0d9122f57f4f8df41f3c3950359eb1284b9ab5 - - SHA1=6ed5c2313eecd97b78aa5dcdb442dd47345c9e43 - - SHA1=5e9538d76b75f87f94ca5409ae3ddc363e8aba7f - - SHA1=b67945815e40b1cd90708c57c57dab12ed29da83 - - SHA1=a5f9aef55c64722ff2db96039af3b9c7dd8163e3 - - SHA1=bb1f9cc94e83c59c90b055fe13bb4604b2c624df + - SHA1=6c445ceb38d5b1212ce2e7498888dd9562a57875 + - SHA1=cf9b4d606467108e4b845ecb8ede2f5865bd6c33 + - SHA1=c4ce0bb8a939c4f4cff955d9b3cdd9eb52746cc9 + - SHA1=8325e8d7fd2edc126dcf1089dee8da64e79fb12e + - SHA1=2bb68b195f66f53f90f17b364928929d5b2883b5 - SHA1=d3a6f86245212e1ef9e0e906818027ec14a239cb - - SHA1=490109fa6739f114651f4199196c5121d1c6bdf2 - - SHA1=7115929de6fc6b9f09142a878d1a1bf358af5f24 - - SHA1=40dba13a059679401fcaf7d4dbe80db03c9d265c - - SHA1=34b0f1b2038a1572ee6381022a24333357b033c4 - - SHA1=928b9b180ff5deb9f9dd3a38c4758bcf09298c47 - - SHA1=ea877092d57373cb466b44e7dbcad4ce9a547344 - - SHA1=caa0cb48368542a54949be18475d45b342fb76e5 - - SHA1=fbfabf309680fbf7c0f6f14c5a0e4840c894e393 - - SHA1=562368c390b0dadf2356b8b3c747357ecef2dfc8 - - SHA1=15f16fe63105b8f9cc0ef2bc8f97cfa5deb40662 - - SHA1=b97a8d506be2e7eaa4385f70c009b22adbd071ba - - SHA1=850f15fd67d9177a50f3efef07a805b9613f50d6 - - SHA1=879e327292616c56bd4aafc279fbda6cc393b74d - - SHA1=0be77bb3720283c9a970a97dab25d2a312e86110 - - SHA1=fe1d909ab38de1389a2a48352fd1c8415fd2eab0 - - SHA1=3fbe337b6ed1a1a63ae8b4240c01bd68ed531674 - - SHA1=c3a893680cd33706546a7a3e8fbcc4bd063ce07e - - SHA1=86e893e59352fcb220768fb758fcc5bbd91dd39e - - SHA1=eb0d45aa6f537f5b2f90f3ad99013606eafcd162 - - SHA1=e1bf5dd17f84bce3b2891dffa855d81a21914418 - - SHA1=696d68bdbe1d684029aaad2861c49af56694473a - - SHA1=94144619920bd086028bb5647b1649a35438028c - - SHA1=b242b0332b9c9e8e17ec27ef10d75503d20d97b6 - - SHA1=9b3f57693f0f69d3729762d59a10439e738b9031 - - SHA1=deaf7d0c934cc428981ffa5bf528ca920bc692dc - - SHA1=02316decf9e5165b431c599643f6856e86b95e7c - - SHA1=4f077a95908b154ea12faa95de711cb44359c162 - - SHA1=bd87aecc0ac1d1c2ab72be1090d39fab657f7cc6 - - SHA1=0e60414750c48676d7aa9c9ec81c0a3b3a4d53d0 - - SHA1=d979353d04bf65cc92ad3412605bc81edbb75ec2 + - SHA1=5672e2212c3b427c1aef83fcd725b587a3d3f979 + - SHA1=7cee31d3aaee8771c872626feedeeb5d09db008c + - SHA1=a00e444120449e35641d58e62ed64bb9c9f518d2 + - SHA1=4f0d9122f57f4f8df41f3c3950359eb1284b9ab5 + - SHA1=59c4960851af9240dded4173c4f823727af19512 + - SHA1=ace6b9e34e3e2e73fe584f3bbdb4e4ec106e0a7d + - SHA1=9393698058ce1187eb87e8c148cfe4804761142d + - SHA1=ed219d966a6e74275895cc0b975b79397760ea9f + - SHA1=4dba2ac32ed58ead57dd36b18d1cb30cc1c7b9aa + - SHA1=d2be76e79741454b4611675b58446e10fc3d0c6c + - SHA1=e83458c4a6383223759cd8024e60c17be4e7c85f + - SHA1=6b54b8f7edca5fb25a8ef1a1d31e14b9738db579 + - SHA1=52d9bbe41eea0b60507c469f7810d80343c03c2b + - SHA1=f7330a6a4d9df2f35ab93a28c8ee1eb14a74be6e + - SHA1=589a7d4df869395601ba7538a65afae8c4616385 + - SHA1=61d44c9a1ef992bc29502f725d1672d551b9bc3f + - SHA1=da689e8e0e3fc4c7114b44d185eef4c768e15946 + - SHA1=170a50139f95ad1ec94d51fdd94c1966dbed0e47 + - SHA1=05c0c49e8bcf11b883d41441ce87a2ee7a3aba1d + - SHA1=bfff0073c936b9a7e2ad6848deb6f9bf03205488 + - SHA1=1586f121d38cc42e5d04fe2f56091e91c6cdd8fa + - SHA1=96ec8c16f6a54b48e9a7f0d0416a529f4bf9ac11 + - SHA1=bbc1e5fd826961d93b76abd161314cb3592c4436 + - SHA1=4d4535c111c7b568cb8a3bece27a97d738512a6b + - SHA1=258f1cdc79bd20c2e6630a0865abfe60473b98d5 + - SHA1=4789b910023a667bee70ff1f1a8f369cffb10fe8 + - SHA1=2c2fc258871499b206963c0f933583cedcdf9ea2 + - SHA1=6a2912c8e2aa4373852585bc1134b83c637bc9fd + - SHA1=9923c8f1e565a05b3c738d283cf5c0ed61a0b90f + - SHA1=1951ae94c6ee63fa801208771b5784f021c70c60 + - SHA1=8b53284fb23d34ca144544b19f8fba63700830d8 + - SHA1=6bfeac43be3ebd8d95a5eba963e18d97d76d2b05 + - SHA1=2ae1456bb0fa5a016954b03967878fb6db4d81eb + - SHA1=63f9ee1e7aefd961cf36eeffd455977f1b940f6c + - SHA1=ac13941f436139b909d105ad55637e1308f49d9a + - SHA1=baa94f0f816d7a41a63e7f1aa9dd3d64a9450ed0 + - SHA1=c52cef5b9e1d4a78431b7af56a6fdb6aa1bcad65 + - SHA1=bff4c3696d81002c56f473a8ab353ef0e45854c0 + - SHA1=64df813dc0774ef57d21141dcb38d08059fd8660 + - SHA1=bdfb1a2b08d823009c912808425b357d22480ecc + - SHA1=470633a3a1e1b1f13c3f6c5192ce881efd206d7c - SHA1=65f6a4a23846277914d90ba6c12742eecf1be22d - - SHA1=186b6523e8e2fa121d6d3b8cb106e9a5b918af4f - - SHA1=3f43412c563889a5f5350f415f7040a71cc25221 - - SHA1=22c9cd0f5986e91b733fbd5eda377720fd76c86d - - SHA1=3a3342f4ca8cc45c6b86f64b1a7d7659020b429f + - SHA1=ed40c1f7da98634869b415530e250f4a665a8c48 + - SHA1=1ab702c495cb7832d4cc1ff896277fa56ed8f30d - SHA1=684786de4b3b3f53816eae9df5f943a22c89601f - - SHA1=254dce914e13b90003b0ae72d8705d92fe7c8dd0 - - SHA1=6293ff11805cd33bccbcca9f0132bff3ae2e2534 - - SHA1=1acc7a486b52c5ee6619dbdc3b4210b5f48b936f - - SHA1=59c0fa0d61576d9eb839c9c7e15d57047ee7fe29 - - SHA1=09c567b8dd7c7f93884c2e6b71a7149fc0a7a1b5 - - SHA1=1586f121d38cc42e5d04fe2f56091e91c6cdd8fa - - SHA1=bed323603a33fa8b2fc7568149345184690f0390 - - SHA1=5e4b93591f905854fb870011464291c3508aff44 - - SHA1=3d8cc9123be74b31c597b0014c2a72090f0c44ef - - SHA1=d8adf4f02513367c2b273abb0bc02f7eb3a5ef19 - - SHA1=bd421ffdcc074ecca954d9b2c2fbce9301e9a36c - - SHA1=005ac9213a8a4a6c421787a7b25c0bc7b9f3b309 - - SHA1=35f803d483af51762bee3ec130de6a03362ce920 - - SHA1=dc8fa4648c674e3a7148dd8e8c35f668a3701a52 - - SHA1=eacfc73f5f45f229867ee8b2eb1f9649b5dd422e - - SHA1=27d3ebea7655a72e6e8b95053753a25db944ec0f - - SHA1=8f540936f2484d020e270e41529624407b7e107e - - SHA1=6c445ceb38d5b1212ce2e7498888dd9562a57875 - - SHA1=0ac0c21ca05161eaa6a042f347391a2a2fc78c96 - - SHA1=309a799f1a00868ab05cdbb851b3297db34d9b0d - - SHA1=20cf02c95e329cf2fd4563cddcbd434aad81ccb4 - - SHA1=bad84fca57ab0ef0af9230a93e0cc3d149f9ccd0 - - SHA1=4d516b1c9b7a81de2836ab24ba6b880c11807255 - - SHA1=d7f7594ff084201c0d9fa2f4ef1626635b67bce5 - - SHA1=55015f64783ddd148674a74d8137bcd6ccd6231d - - SHA1=3f223581409492172a1e875f130f3485b90fbe5f - - SHA1=5a7bcb1864d1e8ecde0b58d21b98518ca4b2f1f2 - - SHA1=f9519d033d75e1ab6b82b2e156eafe9607edbcfb - - SHA1=66e95daee3d1244a029d7f3d91915f1f233d1916 - - SHA1=63bb17160115f16b3fca1f028b13033af4e468c6 - - SHA1=b99a5396094b6b20cea72fbf0c0083030155f74e - - SHA1=6679cb0907ade366cf577d55be07eabc9fb83861 - - SHA1=aca8e53483b40a06dfdee81bb364b1622f9156fe - - SHA1=03a56369b8b143049a6ec9f6cc4ef91ac2775863 - - SHA1=bfe55cacc7c56c9f7bd75bdb4b352c0b745d071b - - SHA1=88d00eff21221f95a0307da229bc9fe1afb6861b - - SHA1=4243dbbf6e5719d723f24d0f862afd0fcb40bc35 - - SHA1=87d47340d1940eaeb788523606804855818569e3 - - SHA1=e33eac9d3b9b5c0db3db096332f059bf315a2343 - - SHA1=a7d827a41b2c4b7638495cd1d77926f1ba902978 - - SHA1=5520ac25d81550a255dc16a0bb89d4b275f6f809 - - SHA1=bc949bc040333fdc9140b897b0066ef125343ef6 - - SHA1=96323381a98790b8ffac1654cb65e12dbbe6aff1 - - SHA1=1f7501e01d84a2297c85cb39880ec4e40ac3fe8a - - SHA1=e7d8fc86b90f75864b7e2415235e17df4d85ee31 - - SHA1=e5021a98e55d514e2376aa573d143631e5ee1c13 - - SHA1=d28b604b9bb608979cc0eab1e9e93e11c721aa3d + - SHA1=b3b523504af5228c49060ec8dea9f8adce05e117 + - SHA1=108575d8f0b98fed29514a54052f7bf5a8cb3ff0 + - SHA1=8fafd70bae94bbc22786c9328ee9126fed54dbae + - SHA1=d3b23a0b70d6d279abd8db109f08a8b0721ce327 + - SHA1=190ec384e6eb1dafca80df05055ead620b2502ba + - SHA1=6b25acbcb41a593aca6314885572fc22d16582a2 - SHA1=341225961c15a969c62de38b4ec1938f65fda178 - - SHA1=631fdd1ef2d6f2d98e36f8fc7adbf90fbfb0a1e8 - - SHA1=483e58ed495e4067a7c42ca48e8a5f600b14e018 - - SHA1=eb1ecad3d37bb980f908bf1a912415cff32e79e6 - - SHA1=2db49bdf8029fdcda0a2f722219ae744eae918b0 - - SHA1=054a50293c7b4eea064c91ef59cf120d8100f237 - - SHA1=d2fb46277c36498e87d0f47415b7980440d40e3d - - SHA1=cc51be79ae56bc97211f6b73cc905c3492da8f9d - - SHA1=6a3d3b9ab3d201cd6b0316a7f9c3fb4d34d0f403 - - SHA1=a7baff6666fc2d259c22f986b8a153c7b1d1d8be - - SHA1=a197a02025946aca96d6e74746f84774df31249e - - SHA1=5fece994f2409810a0ad050b3ca9b633c93919e4 - - SHA1=57cc324326ab6c4239f8c10d2d1ce8862b2ce4d5 - - SHA1=ebced350ea447df8e10ebb080e3a3e5b32aca348 - - SHA1=baa94f0f816d7a41a63e7f1aa9dd3d64a9450ed0 - - SHA1=f6d826d73bf819dbc9a058f2b55c88d6d4b634e3 - - SHA1=f18e669127c041431cde8f2d03b15cfc20696056 - - SHA1=0cca79962d9af574169f5dec12b1f4ca8e5e1868 - - SHA1=8ec28d7da81cf202f03761842738d740c0bb2fed - - SHA1=5f8ae70b25b664433c6942d5963acadf2042cfe8 - - SHA1=f86ae53eb61d3c7c316effe86395a4c0376b06db - - SHA1=8fb149fc476cf5bf18dc575334edad7caf210996 - - SHA1=a528cdeed550844ca7d31c9e231a700b4185d0da - - SHA1=d72de7e8f0118153dd5cf784f724e725865fc523 - - SHA1=fce3a95b222c810c56e7ed5a3d7fb059eb693682 - - SHA1=282bb241bda5c4c1b8eb9bf56d018896649ca0e1 - - SHA1=49174d56cce618c77ae4013fe28861c80bf5ba97 - - SHA1=e9f576137181c261dc3b23871d1d822731d54a12 - - SHA1=9329a0ce2749a3a6bea2028ce7562d74c417db64 - - SHA1=738b7918d85e5cb4395df9e3f6fc94ddad90e939 - - SHA1=164c899638bc83099c0379ea76485194564c956c - - SHA1=d7b20ac695002334f804ffc67705ce6ac5732f91 - - SHA1=89656051126c3e97477a9985d363fbdde0bc159e - - SHA1=85941b94524da181be8aad290127aa18fc71895c - - SHA1=540b9f9a232b9d597138b8e0f33d83f5f6e247af - - SHA1=3048f3422b2b31b74eace0dab3f5c4440bdc7bb2 - - SHA1=bff4c3696d81002c56f473a8ab353ef0e45854c0 - - SHA1=90a76945fd2fa45fab2b7bcfdaf6563595f94891 - - SHA1=a00e444120449e35641d58e62ed64bb9c9f518d2 - - SHA1=2dd916cb8a9973b5890829361c1f9c0d532ba5d6 - - SHA1=0307d76750dd98d707c699aee3b626643afb6936 - - SHA1=12154f58b68902a40a7165035d37974128deb902 - - SHA1=1fb12c5db2acad8849677e97d7ce860d2bb2329e - - SHA1=4c021c4a5592c07d4d415ab11b23a70ba419174b - - SHA1=dce4322406004fc884d91ed9a88a36daca7ae19a - - SHA1=dd893cd3520b2015790f7f48023d833f8fe81374 - - SHA1=8031ecbff95f299b53113ccd105582defad38d7b - - SHA1=49d58f7565bacf10539bc63f1d2fe342b3c3d85a - - SHA1=af50109b112995f8c82be8ef3a88be404510cdde - - SHA1=ad1616ea6dc17c91d983e829aa8a6706e81a3d27 - - SHA1=c969f1f73922fd95db1992a5b552fbc488366a40 - - SHA1=1d2ab091d5c0b6e5977f7fa5c4a7bfb8ea302dc7 + - SHA1=faa870b0cb15c9ac2b9bba5d0470bd501ccd4326 - SHA1=5812387783d61c6ab5702213bb968590a18065e3 - - SHA1=d9c1913a6c76b883568910094dfa1d67aad80c84 - - SHA1=7c43d43d95232e37aa09c5e2bcd3a7699d6b7479 - - SHA1=6a60f5fa0dfc6c1fa55b24a29df7464ee01a9717 - - SHA1=29a190727140f40cea9514a6420f5a195e36386b - - SHA1=02a8b74899591da7b7f49c0450328d39b939d7e4 - - SHA1=7eec3a1edf3b021883a4b5da450db63f7c0afeeb + - SHA1=e700fcfae0582275dbaee740f4f44b081703d20d + - SHA1=a2167b723dfb24bf8565cbe2de0ecce77307fb9e + - SHA1=7cf7644e38746c9be4537b395285888d5572ae1b + - SHA1=3b8ddf860861cc4040dea2d2d09f80582547d105 + - SHA1=1a17cc64e47d3db7085a4dc365049a2d4552dc8a + - SHA1=9b3f57693f0f69d3729762d59a10439e738b9031 + - SHA1=63bb17160115f16b3fca1f028b13033af4e468c6 + - SHA1=631fdd1ef2d6f2d98e36f8fc7adbf90fbfb0a1e8 + - SHA1=06ec56736c2fc070066079bb628c17b089b58f6c + - SHA1=d1ba4c95697a25ec265a3908acbff269e29e760c + - SHA1=e40182c106f6f09fd79494686329b95477d6beb5 + - SHA1=c74f6293be68533995e4b95469e6dddedd1c3905 + - SHA1=ec457a53ea03287cbbd1edcd5f27835a518ef144 + - SHA1=1a01f3bdbfae4f8111674068a001aaf3363f21ea + - SHA1=ce1d0ebaeaa4fe3ecb49242f1e80bc7a4e43fd8c + - SHA1=f77413ec3bd9ed3f31fc53a4c755dc4123e0068f + - SHA1=17614fdee3b89272e99758983b99111cbb1b312c + - SHA1=8b63eb0f5dbb844ee5f6682f0badef872ae569bf + - SHA1=c4d7fb9db3c3459f7e8c0e3d48c95c7c9c4cff60 + - SHA1=c8674fe95460a37819e06d9df304254931033ca7 + - SHA1=273634ac170d1a6abd32e0db597376a6f62eb59e + - SHA1=dd4cd182192b43d4105786ba87f55a036ec45ef2 + - SHA1=f9eb4c942a89b4ba39d2bdbfd23716937ccb9925 + - SHA1=94144619920bd086028bb5647b1649a35438028c + - SHA1=2871a631f36cd1ea2fd268036087d28070ef2c52 + - SHA1=57cf65b024d9e2831729def42db2362d7c90dcfa + - SHA1=d3daa971580b9f94002f7257de44fcef13bb1673 + - SHA1=8ac5703e67c3e6e0585cb8dbb86d196c5362f9bb + - SHA1=756fd2b82bf92538786b1bd283c6ef2f9794761e + - SHA1=c775ca665ed4858acc3f7e75e025cbbda1f8c687 + - SHA1=a8be6203c5a87ecc3ae1c452b7b6dbdf3a9f82ae + - SHA1=085c0ea6980cb93a3afa076764b7866467ac987c + - SHA1=09f117d83f2f206ee37f1eb19eea576a0ac9bdcc + - SHA1=c41ff2067634a1cce6b8ec657cdfd87e7f6974e3 + - SHA1=ddec18909571a9d5992f93636628756b7aa9b9a2 + - SHA1=fbf8b0613a2f7039aeb9fa09bd3b40c8ff49ded2 + - SHA1=06ec62c590ca0f1f2575300c151c84640d2523c0 + - SHA1=f95b59cab63408343ecbdb0e71db34e83f75b503 + - SHA1=1f7501e01d84a2297c85cb39880ec4e40ac3fe8a + - SHA1=9360774a37906e3b3c9fab39721cb9400dd31c46 + - SHA1=2a6e6bd51c7062ad24c02a4d2c1b5e948908d131 + - SHA1=dc393d30453daa1f853f47797e48c142ac77a37b + - SHA1=b70321d078f2e9c9826303bdc87ba9b7be290807 + - SHA1=4cd5bf02edf6883a08dfed7702267612e21ed56e + - SHA1=910cb12aa49e9f35ecc4907e8304adf0dcca8cf1 + - SHA1=296757d5663290f172e99e60b9059f989cba4c4e + - SHA1=0caf4e86b14aaab7e10815389fcd635988bc6637 + - SHA1=449ff4f5ce2fdddac05a6c82e45a7e802b1c1305 + - SHA1=2dfcb799b3c42ecb0472e27c19b24ac7532775ce - SHA1=f5696fb352a3fbd14fb1a89ad21a71776027f9ab - - SHA1=2739c2cfa8306e6f78c335c55639566b3d450644 - - SHA1=9449f211c3c47821b638513d239e5f2c778dc523 + - SHA1=4818d7517054d5cba38b679bdf7f8495fd152729 + - SHA1=47df454cb030c1f4f7002d46b1308a32b03148e7 + - SHA1=28fa0e9429af24197134306b6c7189263e939136 + - SHA1=186b6523e8e2fa121d6d3b8cb106e9a5b918af4f + - SHA1=9dbd255ee29be0e552f7f5f30d6ffb97e6cd0b0d + - SHA1=76a756cc61653abcadd63db4a74c48d92607a861 + - SHA1=15df139494d2c40a645fb010908551185c27f3c5 + - SHA1=64879accdb4dbbaac55d91185c82f2b193f0c869 + - SHA1=55777e18eb95b6c9c3e6df903f0ac36056fa83da + - SHA1=d7f7594ff084201c0d9fa2f4ef1626635b67bce5 + - SHA1=135b261eb03e830c57b1729e3a4653f9c27c7522 + - SHA1=deaf7d0c934cc428981ffa5bf528ca920bc692dc + - SHA1=309a799f1a00868ab05cdbb851b3297db34d9b0d + - SHA1=d5beca70469e0dcb099ba35979155e7c91876fd2 - SHA1=376d59d0b19905ebb9b89913a5bdfacde1bd5a1e - - SHA1=804013a12f2f6ba2e55c4542cbdc50ca01761905 - - SHA1=8db869c0674221a2d3280143cbb0807fac08e0cc - - SHA1=b8de3a1aeeda9deea43e3f768071125851c85bd0 - - SHA1=26c4a7b392d7e7bd7f0a2a758534e45c0d9a56ab - - SHA1=ecb4d096a9c58643b02f328d2c7742a38e017cf0 - - SHA1=ffabdf33635bdc1ed1714bc8bbfd7b73ef78a37c - - SHA1=4f94789cffb23c301f93d6913b594748684abf6a - - SHA1=3f338ab65bac9550b8749bb1208edb0f7d7bcb81 - - SHA1=dd55015f5406f0051853fd7cca3ab0406b5a2d52 - - SHA1=2eeab9786dac3f5f69e642f6e29f4e4819038551 - - SHA1=05ac1c64ca16ab0517fe85d4499d08199e63df26 - - SHA1=5b83c61178afb87ef7d58fd786808effcaaae861 - - SHA1=6da2dd8a0b4c0e09a04613bbabfc07c0b848ec77 - - SHA1=6bfeac43be3ebd8d95a5eba963e18d97d76d2b05 - - SHA1=90abd7670c84c47e6ffc45c67d676db8c12b1939 - - SHA1=152b6bb9ffd2ffec00cc46f5c6e29362d0e66e67 - - SHA1=029c678674f482ababe8bbfdb93152392457109d - - SHA1=0a19a9c4c9185b80188da529ec9c9f45cbe73186 - - SHA1=6df6d5b30d04b9adb9d2c99de18ed108b011d52b - - SHA1=1d5d2c5853619c25518ba0c55fd7477050e708fb - - SHA1=b314742af197a786218c6dd704b438469445eefa - - SHA1=a5596d4d329add26b9ca9fa7005302148dfacfd8 - - SHA1=af5b7556706e09ee9e74ee2e87eab5c0a49d2d35 - - SHA1=064847af77afca8a879a9bf34cb87b64b5e69165 - - SHA1=2ade3347df84d6707f39d9b821890440bcfdb5e9 - - SHA1=fac870d438bf62ecd5d5c8c58cc9bfda6f246b8b - - SHA1=5d6b9e80e12bfc595d4d26f6afb099b3cb471dd4 - - SHA1=2207cdee7deaba1492ae2349392864f19eb4dfaf - - SHA1=0d8a832b9383fcdc23e83487b188ddd30963ca82 - - SHA1=1292c7dd60214d96a71e7705e519006b9de7968f - - SHA1=fbf8b0613a2f7039aeb9fa09bd3b40c8ff49ded2 - - SHA1=7e8efd93a1dad02385ec56c8f3b1cfd23aa47977 - - SHA1=97bc298a1d12a493bf14e6523e4ff48d64832954 - - SHA1=84d44e166072bccf1f8e1e9eb51880ffa065a274 - - SHA1=388068adc9ec46a0bbc8173bcb0d5f9cf8af6ea5 - - SHA1=6ecfc7ccc4843812bfccfb7e91594c018f0a0ff9 - - SHA1=655a9487d7a935322e19bb92d2465849055d029d - - SHA1=d5326fea00bcde2ef7155acf3285c245c9fb4ece - - SHA1=6887668eb41637bbbab285d41a36093c6b17a8fa - - SHA1=28b1c0b91eb6afd2d26b239c9f93beb053867a1a - - SHA1=e1069365cb580e3525090f2fa28efd4127223588 - - SHA1=3bb1dddb4157b6b8175fc6e1e7c33bef7870c500 - - SHA1=dc55217b6043d819eadebd423ff07704ee103231 - - SHA1=4d4535c111c7b568cb8a3bece27a97d738512a6b - - SHA1=7cee31d3aaee8771c872626feedeeb5d09db008c - - SHA1=6714380bc0b8ab09b9a0d2fa66d1b025b646b946 - - SHA1=34c85afe6d84cd3deec02c0a72e5abfa7a2886c3 - - SHA1=4786253daac6c60ffc0d2871fdd68023ec93dfb3 - - SHA1=33285b2e97a0aeb317166cce91f6733cf9c1ad53 - - SHA1=1f1ce28c10453acbc9d3844b4604c59c0ab0ad46 + - SHA1=460008b1ffd31792a6deadfa6280fb2a30c8a5d2 + - SHA1=dfd801b6c2715f5525f8ffb38e3396a5ad9b831d + - SHA1=92befb8b3d17bd3f510d09d464ec0131f8a43b8f + - SHA1=b671677079bf7c660579bee08b8875a48ff61896 + - SHA1=0d6fb0cb9566b4e4ca4586f26fe0631ffa847f2c + - SHA1=bca4bbe4388ebeb834688e97fac281c09b0f3ac1 + - SHA1=0b3836d5d98bc8862a380aae19caa3e77a2d93ef + - SHA1=b394f84e093cb144568e18aaf5b857dff77091fa - SHA1=7329bb4a7ca98556fa6b05bd4f9b236186e845d1 - - SHA1=57cf65b024d9e2831729def42db2362d7c90dcfa - - SHA1=d569d4bab86e70efbcdfdac9d822139d6f477b7c - - SHA1=0fd700fee341148661616ecd8af8eca5e9fa60e3 - - SHA1=9a35ae9a1f95ce4be64adc604c80079173e4a676 - - SHA1=c02cb8256dfb37f690f2698473fe5428d17bc178 - - SHA1=7838fb56fdab816bc1900a4720eea2fc9972ef7a - - SHA1=53acd4d9e7ba0b1056cf52af0d191f226eddf312 - - SHA1=290d6376658cf0f8182de0fae40b503098fa09fd - - SHA1=ec04d8c814f6884c009a7b51c452e73895794e64 - - SHA1=7a107291a9fad0d298a606eb34798d423c4a5683 - - SHA1=f02af84393e9627ba808d4159841854a6601cf80 - - SHA1=a64354aac2d68b4fa74b5829a9d42d90d83b040c - - SHA1=c8864c0c66ea45011c1c4e79328a3a1acf7e84a9 - - SHA1=8dc2097a90eb7e9d6ee31a7c7a95e7a0b2093b89 - - SHA1=c1c869deee6293eee3d0d84b6706d90fab8f8558 - - SHA1=3fd7fda9c7dfdb2a845c39971572bd090bee3b1d - - SHA1=f0c463d29a5914b01e4607889094f1b7d95e7aaf - - SHA1=f052dc35b74a1a6246842fbb35eb481577537826 - - SHA1=e2f40590b404a24e775f781525d8ed01f1b1156d - - SHA1=b4dcdbd97f38b24d729b986f84a9cdb3fc34d59f - - SHA1=5291b17205accf847433388fe17553e96ad434ec - - SHA1=df58f9b193c6916aaec7606c0de5eba70c8ec665 - - SHA1=736531c76b8d9c56e26561bf430e10ecabff0186 - - SHA1=e35a2b009d54e1a0b231d8a276251f64231b66a3 - - SHA1=4e826430a1389032f3fe06e2cc292f643fb0c417 + - SHA1=0307d76750dd98d707c699aee3b626643afb6936 + - SHA1=e22495d92ac3dcae5eeb1980549a9ead8155f98a - SHA1=2740cd167a9ccb81c8e8719ce0d2ae31babc631c - - SHA1=db3538f324f9e52defaba7be1ab991008e43d012 - - SHA1=8a922499f7a1b978555b46c30f90de1339760c74 - - SHA1=de0c16e3812924212f04e15caa09763ae4770403 - - SHA1=470633a3a1e1b1f13c3f6c5192ce881efd206d7c + - SHA1=77a011b5d5d5aaf421a543fcee22cb7979807c60 + - SHA1=a197a02025946aca96d6e74746f84774df31249e + - SHA1=82ba5513c33e056c3f54152c8555abf555f3e745 + - SHA1=c71597c89bd8e937886e3390bc8ac4f17cdeae7c + - SHA1=4a705af959af61bad48ef7579f839cb5ebd654d2 + - SHA1=e71caa502d0fe3a7383ce26285a6022e63acda97 + - SHA1=446130c61555e5c9224197963d32e108cd899ea0 + - SHA1=218e4bbdd5ce810c48b938307d01501c442b75f4 + - SHA1=57511ef5ff8162a9d793071b5bf7ebe8371759de + - SHA1=0cb14c1049c0e81c8655ab7ee7d698c11758ea06 + - SHA1=f3c20ce4282587c920e9ff5da2150fac7858172e - SHA1=dd49a71f158c879fb8d607cc558b507c7c8bc5b9 - - SHA1=b9b72a5be3871ddc0446bae35548ea176c4ea613 - - SHA1=814200191551faec65b21f5f6819b46c8fc227a3 - - SHA1=dc69a6cdf048e2c4a370d4b5cafd717d236374ea - - SHA1=d2be76e79741454b4611675b58446e10fc3d0c6c - - SHA1=2a6e6bd51c7062ad24c02a4d2c1b5e948908d131 - - SHA1=e4cbb48aa1aff6cf4ea94ef3b7afb6c245ac47e8 - - SHA1=d3daa971580b9f94002f7257de44fcef13bb1673 - - SHA1=9c256edd10823ca76c0443a330e523027b70522d - - SHA1=ef0504dd90eb451f51d2c4f987fb7833c91c755b - - SHA1=806832983bb8cb1e26001e60ea3b7c3ade4d3471 - - SHA1=d04e5db5b6c848a29732bfd52029001f23c3da75 - - SHA1=252157ab2e33eed7aa112d1c93c720cadcee31ae - - SHA1=51b60eaa228458dee605430aae1bc26f3fc62325 - - SHA1=2f86a4828ba86034f0c043db3e3db33aa2cf5da5 - - SHA1=756fd2b82bf92538786b1bd283c6ef2f9794761e - - SHA1=f5d58452620b55c2931cba75eb701f4cde90a9e4 - - SHA1=1f84d89dd0ae5008c827ce274848d551aff3fc33 - - SHA1=723fd9dd0957403ed131c72340e1996648f77a48 - - SHA1=06ecf73790f0277b8e27c8138e2c9ad0fc876438 - - SHA1=cc3e5e45aca5b670035dfb008f0a88cecfd91cf7 - - SHA1=75d0b9bdfa79e5d43ec8b4c0996f559075723de7 - - SHA1=58b31fb2b623bd2c5d5c8c49b657a14a674664a4 - - SHA1=bec66e0a4842048c25732f7ea2bbe989ea400abf - - SHA1=585df373a9c56072ab6074afee8f1ec3778d70f8 - - SHA1=1e959d6ae22c4d9fa5613c3a9d3b6e1b472be05d - - SHA1=8d6d6745a2adc9e5aa025c38875554ae6440d1ad - - SHA1=92f251358b3fe86fd5e7aa9b17330afa0d64a705 - - SHA1=5236728c7562b047a9371403137a6e169e2026a6 - - SHA1=6c1bb3a72ebfb5359b9e22ca44d0a1ff825a68f2 - - SHA1=398e8209e5c5fdcb6c287c5f9561e91887caca7d - - SHA1=7d1ff4096a75f9fcc67c7c9c810d99874c096b6b - - SHA1=4818d7517054d5cba38b679bdf7f8495fd152729 - - SHA1=ba0d6c596b78a1fc166747d7523ca6316ef87e9f - - SHA1=82ba5513c33e056c3f54152c8555abf555f3e745 - - SHA1=7ce978092fadbef44441a5f8dcb434df2464f193 - - SHA1=f3c20ce4282587c920e9ff5da2150fac7858172e - - SHA1=fc8fbd92f6e64682360885c188d1bdfbc14ca579 - - SHA1=d61acd857242185a56e101642d15b9b5f0558c26 - - SHA1=4268f30b79ce125a81d0d588bef0d4e2ad409bbb - - SHA1=a93197c8c1897a95c4fb0367d7451019ae9f3054 - - SHA1=2bc9047f08a664ade481d0bbf554d3a0b49424ca - - SHA1=4044e5da1f16441fe7eb27cff7a76887a1aa7fec - - SHA1=a0bf00e4ef2b1a79ccf2361c6b303688641ed94c - - SHA1=5dd2c31c4357a8b76db095364952b3d0e3935e1d - - SHA1=27aa3f1b4baccd70d95ea75a0a3e54e735728aa2 - - SHA1=d3d2fe8080f0b18465520785f3a955e1a24ae462 - - SHA1=4a705af959af61bad48ef7579f839cb5ebd654d2 - - SHA1=b0a684474eb746876faa617a28824bee93ba24f0 - - SHA1=a87d6eac2d70a3fbc04e59412326b28001c179de - - SHA1=c6bd965300f07012d1b651a9b8776028c45b149a - - SHA1=86b1186a4e282341daf2088204ab9ff2d0402d28 - - SHA1=2dfcb799b3c42ecb0472e27c19b24ac7532775ce - - SHA1=5b866f522bcdf80e6a9fda71b385f917317f6551 - - SHA1=c0a8e45e57bb6d82524417d6fb7e955ab95621c0 - - SHA1=8edcd4b35f5ae88d14e83252390659c6fc79eae3 - - SHA1=fe0afc6dd03a9bd7f6e673cc6b4af2266737e3d1 - - SHA1=18f09ec53f0b7d2b1ab64949157e0e84628d0f0a - - SHA1=f6f7b5776001149496092a95fb10218dea5d6a6b - - SHA1=e74b6dda8bc53bc687fc21218bd34062a78d8467 - - SHA1=f52c2d897fa00910d5566503dd5a297970f13dc6 - - SHA1=cea540a2864ece0a868d841ab27680ff841fcbe6 + - SHA1=7d34bb240cb5dec51ffcc7bf062c8d613819ac30 + - SHA1=0b01c4c1f18d72eb622be2553114f32edfe7b7aa + - SHA1=7d7c03e22049a725ace2a9812c72b53a66c2548b + - SHA1=4186ac693003f92fdf1efbd27fb8f6473a7cc53e + - SHA1=01b95ae502aa09aabc69a0482fcc8198f7765950 + - SHA1=4c18754dca481f107f0923fb8ef5e149d128525d + - SHA1=55ab7e27412eca433d76513edc7e6e03bcdd7eda + - SHA1=c614ab686e844c7a7d2b20bc7061ab15290e2cfd + - SHA1=2cf75df00c69d907cfe683cb25077015d05be65d - SHA1=f9feb60b23ca69072ce42264cd821fe588a186a6 - - SHA1=1a83c8b63d675c940aaec10f70c0c7698e9b0165 - - SHA1=1045c63eccb54c8aee9fd83ffe48306dc7fe272c - - SHA1=08596732304351b311970ff96b21f451f23b1e25 - - SHA1=e11f48631c6e0277e21a8bdf9be513651305f0d5 - - SHA1=fb25e6886d98fe044d0eb7bd42d24a93286266e0 - - SHA1=9360774a37906e3b3c9fab39721cb9400dd31c46 - - SHA1=fde6ab389a6e0a9b2ef1713df9d43cca5f1f3da8 - - SHA1=57511ef5ff8162a9d793071b5bf7ebe8371759de - - SHA1=c6920171fa6dff2c17eb83befb5fd28e8dddf5f0 - - SHA1=8800a33a37c640922ce6a2996cd822ed4603b8bb - - SHA1=40abf7edb4c76fb3f22418f03198151c5363f1cb + - SHA1=a528cdeed550844ca7d31c9e231a700b4185d0da + - SHA1=8ec28d7da81cf202f03761842738d740c0bb2fed + - SHA1=e606282505af817698206672db632332e8c3d3ff + - SHA1=47830d6d3ee2d2a643abf46a72738d77f14114bc + - SHA1=57ea07ab767f11c81c6468b1f8a3d5f4618b800b + - SHA1=34b0f1b2038a1572ee6381022a24333357b033c4 - SHA1=2c5ff272bd345962ed41ab8869aef41da0dfe697 - - SHA1=3d6d53b0f1cc908b898610227b9f1b9352137aba - - SHA1=6b54f8f137778c1391285fee6150dfa58a8120b1 - - SHA1=61d44c9a1ef992bc29502f725d1672d551b9bc3f - - SHA1=d8498707f295082f6a95fd9d32c9782951f5a082 + - SHA1=a14d96b65d3968181d57b57ee60c533cb621b707 + - SHA1=cd248648eafca6ef77c1b76237a6482f449f13be + - SHA1=6100eb82a25d64a7a7702e94c2b21333bc15bd08 + - SHA1=64ff172bafc33f14ca5f2e35f9753d41e239a5e4 + - SHA1=74bf2ec32cb881424a79e99709071870148d242d + - SHA1=943593e880b4d340f2548548e6e673ef6f61eed3 + - SHA1=3c81cdfd99d91c7c9de7921607be12233ed0dfd8 + - SHA1=c1a5aacf05c00080e04d692a99c46ab445bf8b6e + - SHA1=1768fb2b4796f624fa52b95dfdfbfb922ac21019 + - SHA1=5e6ddd2b39a3de0016385cbd7aa50e49451e376d + - SHA1=6df6d5b30d04b9adb9d2c99de18ed108b011d52b + - SHA1=8589a284f1a087ad5b548fb1a933289781b4cedc + - SHA1=0f780b7ada5dd8464d9f2cc537d973f5ac804e9c + - SHA1=ecb4d096a9c58643b02f328d2c7742a38e017cf0 + - SHA1=f5bafebfbfb67a022452870289ac7849e9ee1f61 + - SHA1=5965ca5462cd9f24c67a1a1c4ef277fab8ea81d3 + - SHA1=804013a12f2f6ba2e55c4542cbdc50ca01761905 + - SHA1=30c6e1da8745c3d53df696af407ef095a8398273 - SHA1=2fed7eddd63f10ed4649d9425b94f86140f91385 - - SHA1=f8d7369527cc6976283cc73cd761f93bd1cec49d - - SHA1=b4d1554ec19504215d27de0758e13c35ddd6db3e - - SHA1=79f1a6f5486523e6d8dcfef696bc949fc767613d - - SHA1=25d812a5ece19ea375178ef9d60415841087726e - - SHA1=10e15ba8ff8ed926ddd3636cec66a0f08c9860a4 - - SHA1=c9cbfdd0be7b35751a017ec59ff7237ffdc4df1f - - SHA1=7ab4565ba24268f0adadb03a5506d4eb1dc7c181 - - SHA1=c71597c89bd8e937886e3390bc8ac4f17cdeae7c + - SHA1=8626ab1da6bfbdf61bd327eb944b39fd9df33d1d + - SHA1=5ce273aa80ed3b0394e593a999059096682736ae + - SHA1=36397c6879978223ba52acd97da99e8067ab7f05 + - SHA1=8a23735d9a143ad526bf73c6553e36e8a8d2e561 + - SHA1=2f991435a6f58e25c103a657d24ed892b99690b8 + - SHA1=f2ce790bf47b01a7e1ef5291d8fa341d5f66883a + - SHA1=f52c2d897fa00910d5566503dd5a297970f13dc6 + - SHA1=256d285347acd715ed8920e41e5ec928ae9201a8 + - SHA1=58fe23f1bb9d4bcc1b07b102222a7d776cc90f6c + - SHA1=55d84fd3e5db4bdbd3fb6c56a84b6b8a320c7c58 + - SHA1=a71c17bfeefd76a9f89e74a52a2b6fdd3efbabe2 + - SHA1=83b5e60943a92050fccb8acef7aa464c8f81d38e + - SHA1=152b6bb9ffd2ffec00cc46f5c6e29362d0e66e67 + - SHA1=b4d014b5edd6e19ce0e8395a64faedf49688ecb5 + - SHA1=9db1585c0fab6a9feb411c39267ac4ad29171696 + - SHA1=2eddb10eecef740ec2f9158fa39410ec32262fc3 + - SHA1=ad60e40a148accec0950d8d13bf7182c2bd5dfef + - SHA1=a21c84c6bf2e21d69fa06daaf19b4cc34b589347 + - SHA1=5a7bcb1864d1e8ecde0b58d21b98518ca4b2f1f2 + - SHA1=d6de8983dbd9c4c83f514f4edf1ac7be7f68632f + - SHA1=07f60b2b0e56cb15aad3ca8a96d9fe3a91491329 + - SHA1=6b90a6eeef66bb9302665081e30bf9802ca956cc + - SHA1=634b1e9d0aafac1ec4373291cefb52c121e8d265 + - SHA1=af50109b112995f8c82be8ef3a88be404510cdde + - SHA1=ec04d8c814f6884c009a7b51c452e73895794e64 + - SHA1=fdf4a0af89f0c8276ad6d540c75beece380703ab + - SHA1=76046978d8e4409e53d8126a8dcfc3bf8602c37f + - SHA1=13df48ab4cd412651b2604829ce9b61d39a791bb + - SHA1=cb25d537f4e2872e5fcbd893da8ce3807137df80 - SHA1=2b4d0dead4c1a7cc95543748b3565cfa802e5256 - - SHA1=511b06898770337609ee065547dbf14ce3de5a95 - - SHA1=b49ac8fefc6d1274d84fef44c1e5183cc7accba1 - - SHA1=722aa0fa468b63c5d7ea308d77230ae3169d5f83 - - SHA1=eb93d2f564fea9b3dc350f386b45de2cd9a3e001 - - SHA1=d6b1b3311263bfb170f2091d22f373c2215051b7 - - SHA1=70258117b5efe65476f85143fd14fa0b7f148adb - - SHA1=f5293ac70d75cdfe580ff6a9edcc83236012eaf1 - - SHA1=19bd488fe54b011f387e8c5d202a70019a204adf - - SHA1=2fe874274bac6842819c1e9fe9477e6d5240944d - - SHA1=a38aac44ee232fb50a6abf145e8dd921ca3e7d78 - - SHA1=363b907c3b4f37968e9c8e1b7eeca5a5c5d530f8 - - SHA1=a4ae87b7802c82dfb6a4d26ab52788410af98532 - - SHA1=b03b1996a40bfea72e4584b82f6b845c503a9748 + - SHA1=34c85afe6d84cd3deec02c0a72e5abfa7a2886c3 + - SHA1=c1fe7870e202733123715cacae9b02c29494d94d + - SHA1=9c256edd10823ca76c0443a330e523027b70522d + - SHA1=079627e0f5b1ad1fb3fe64038a09bc6e8b8d289d + - SHA1=e3c1dd569aa4758552566b0213ee4d1fe6382c4b + - SHA1=291b4a88ffd2ac1d6bf812ecaedc2d934dc503cb + - SHA1=3f338ab65bac9550b8749bb1208edb0f7d7bcb81 + - SHA1=723fd9dd0957403ed131c72340e1996648f77a48 + - SHA1=e0d83953a9efef81ba0fa9de1e3446b6f0a23cc6 + - SHA1=1d5d2c5853619c25518ba0c55fd7477050e708fb + - SHA1=838823f25436cadc9a145ddac076dce3e0b84d96 + - SHA1=64e4ac8b9ea2f050933b7ec76a55dd04e97773b4 + - SHA1=363068731e87bcee19ad5cb802e14f9248465d31 + - SHA1=02a8b74899591da7b7f49c0450328d39b939d7e4 + - SHA1=0d8a832b9383fcdc23e83487b188ddd30963ca82 + - SHA1=db6170ee2ee0a3292deceb2fc88ef26d938ebf2d + - SHA1=a9ea84ee976c66977bb7497aa374bba4f0dd2b27 + - SHA1=7859e75580570e23a1ef7208b9a76f81738043d5 + - SHA1=e067024ec42b556fb1e89ca52ef6719aa09cdf89 + - SHA1=0ed0c4d6c3b6b478cbfd7fb0bd1e1b5457a757cc + - SHA1=54a4772212da2025bd8fb2dc913e1c4490e7a0cd + - SHA1=68ca9c27131aa35c7f433dc914da74f4b3d8793f + - SHA1=468e2e5505a3d924b14fedee4ddf240d09393776 + - SHA1=cc3e5e45aca5b670035dfb008f0a88cecfd91cf7 + - SHA1=8d676504c2680cf71c0c91afb18af40ea83b6c22 + - SHA1=ba5b4eaa7cab012b71a8a973899eeee47a12becc + - SHA1=1901467b6f04a93b35d3ca0727c8a14f3ce3ed52 - SHA1=8f5cd4a56e6e15935491aa40adb1ecad61eafe7c - - SHA1=51b9867c391be3ce56ba7e1c3cba8c76777245b2 - - SHA1=14bf0eaa90e012169745b3e30c281a327751e316 - - SHA1=37364cb5f5cefd68e5eca56f95c0ab4aff43afcc - - SHA1=4a7324ca485973d514fd087699f6d759ff32743b - - SHA1=24daa825adedcbbb1d098cbe9d68c40389901b64 - - SHA1=4dba2ac32ed58ead57dd36b18d1cb30cc1c7b9aa - - SHA1=ba0938512d7abab23a72279b914d0ea0fb46e498 - - SHA1=57ea07ab767f11c81c6468b1f8a3d5f4618b800b - - SHA1=2bf6b88b84d27cdf0699d6d18b08a1b36310cdd1 - - SHA1=e09b5e80805b8fe853ea27d8773e31bff262e3f7 - - SHA1=dc0e97adb756c0f30b41840a59b85218cbdd198f - - SHA1=3e406325a717d7163ca31e81beae822d03cbe3d8 - - SHA1=a3224815aedc14bb46f09535e9b8ca7eaa4963bf - - SHA1=5bb2d46ba666c03c56c326f0bbc85cc48a87dfa3 - - SHA1=e40182c106f6f09fd79494686329b95477d6beb5 - - SHA1=15df139494d2c40a645fb010908551185c27f3c5 + - SHA1=116679c4b2cca6ec69453309d9d85d3793cbe05f + - SHA1=b4d1554ec19504215d27de0758e13c35ddd6db3e + - SHA1=e702221d059b86d49ed11395adffa82ef32a1bce + - SHA1=dd085542683898a680311a0d1095ea2dffe865e2 + - SHA1=69849d68d1857c83b09e1956a46fe879260d2aab + - SHA1=a23a0627297a71a4414193e12a8c074e7bbb8a2e + - SHA1=91530e1e1fb25a26f3e0d6587200ddbaecb45c74 + - SHA1=247065af09fc6fd56b07d3f5c26f555a5ccbfda4 + - SHA1=e840904ce12cc2f94eb1ec16b0b89e2822c24805 + - SHA1=e5bfb18f63fcfb7dc09b0292602112ea7837ef7a + - SHA1=dc6e62dbde5869a6adc92253fff6326b6af5c8d4 + - SHA1=f9519d033d75e1ab6b82b2e156eafe9607edbcfb + - SHA1=40dba13a059679401fcaf7d4dbe80db03c9d265c - SHA1=acb5d7e182a108ee02c5cb879fc94e0d6db7dd68 - - SHA1=5711c88e9e64e45b8fc4b90ab6f2dd6437dc5a8a - - SHA1=32f27451c377c8b5ea66be5475c2f2733cffe306 - - SHA1=63f9ee1e7aefd961cf36eeffd455977f1b940f6c - - SHA1=ac600a2bc06b312d92e649b7b55e3e91e9d63451 - - SHA1=bea745b598dd957924d3465ebc04c5b830d5724f - - SHA1=d2e6fc9259420f0c9b6b1769be3b1f63eb36dc57 - - SHA1=39e57a0bb3b349c70ad5f11592f9282860bbcc0a - - SHA1=1d0df45ee3fa758f0470e055915004e6eae54c95 + - SHA1=543933cce83f2e75d1b6a8abdb41199ddef8406c + - SHA1=0f2fdfb249c260c892334e62ab77ac88fcb8b5e4 + - SHA1=81a319685d0b6112edee4bc25d14d6236f4e12da + - SHA1=05ac1c64ca16ab0517fe85d4499d08199e63df26 + - SHA1=488b20ed53c2060c41b9a0cac1efb39a888df7c5 + - SHA1=e1069365cb580e3525090f2fa28efd4127223588 + - SHA1=c1d5cf8c43e7679b782630e93f5e6420ca1749a7 + - SHA1=67dfd415c729705396ce54166bd70faf09ac7f10 + - SHA1=c8ec23066a50800d42913d5e439700c5cd6a2287 + - SHA1=07f62d9b6321bed0008e106e9ce4240cb3f76da2 + - SHA1=a57eefa0c653b49bd60b6f46d7c441a78063b682 + - SHA1=a4ae87b7802c82dfb6a4d26ab52788410af98532 + - SHA1=bc949bc040333fdc9140b897b0066ef125343ef6 + - SHA1=d04e5db5b6c848a29732bfd52029001f23c3da75 + - SHA1=6bb68e1894bfbc1ac86bcdc048f7fe7743de2f92 + - SHA1=a54ae1793e9d77e61416e0d9fb81269a4bc8f8a2 + - SHA1=51b60eaa228458dee605430aae1bc26f3fc62325 + - SHA1=054a50293c7b4eea064c91ef59cf120d8100f237 + - SHA1=844d2345bde50bf8ee7e86117cf7b8c6e6f00be4 + - SHA1=4b8c0445075f09aeef542ab1c86e5de6b06e91a3 + - SHA1=d0452363b41385f6a6778f970f3744dde4701d8f + - SHA1=d72de7e8f0118153dd5cf784f724e725865fc523 + - SHA1=340ce5d8859f923222bea5917f40c4259cce1bbc + - SHA1=e1bf5dd17f84bce3b2891dffa855d81a21914418 + - SHA1=e4cbb48aa1aff6cf4ea94ef3b7afb6c245ac47e8 + - SHA1=0e1df95042081fa2408782f14ce483f0db19d5ab + - SHA1=d2fb46277c36498e87d0f47415b7980440d40e3d + - SHA1=351cbd352b3ec0d5f4f58c84af732a0bf41b4463 + - SHA1=4a887ae6b773000864f9228800aab75e6ff34240 + - SHA1=283c7dc5b029dbc41027df16716ec12761a53df8 + - SHA1=dcdc9b2bc8e79d44846086d0d482cb7c589f09b8 + - SHA1=ec8c0b2f49756b8784b3523e70cd8821b05b95eb + - SHA1=16c6bcef489f190a48e9d3b1f35972db89516479 + - SHA1=ffabdf33635bdc1ed1714bc8bbfd7b73ef78a37c + - SHA1=7c625de858710d3673f6cb0cd8d0643d5422c688 + - SHA1=faa61346430aedc952d820f7b16b973c9bf133c3 + - SHA1=1e959d6ae22c4d9fa5613c3a9d3b6e1b472be05d + - SHA1=f18e669127c041431cde8f2d03b15cfc20696056 - SHA1=1de9f25d189faa294468517b15947a523538ce9d - - SHA1=15d1a6a904c8409fb47a82aefa42f8c3c7d8c370 - - SHA1=2027e5e8f2cfdfbd9081f99b65af4921626d77f9 - - SHA1=d697a3f4993e7cb15efdeda3b1a798ae25a2d0e9 - - SHA1=dbf3abdc85d6a0801c4af4cd1b77c44d5f57b03e - - SHA1=ca33c88cd74e00ece898dca32a24bdfcacc3f756 - - SHA1=34a07ae39b232cc3dbbe657b34660e692ff2043a - - SHA1=a4e2e227f984f344d48f4bf088ca9d020c63db4e - - SHA1=b5dfa3396136236cc9a5c91f06514fa717508ef5 - - SHA1=a3d612a5ea3439ba72157bd96e390070bdddbbf3 + - SHA1=d8e8dcc8531b8d07f8dabc9e79c19aac6eeca793 + - SHA1=7ba19a701c8af76988006d616a5f77484c13cb0a + - SHA1=6c1bb3a72ebfb5359b9e22ca44d0a1ff825a68f2 + - SHA1=4786253daac6c60ffc0d2871fdd68023ec93dfb3 + - SHA1=ea58d72db03df85b04d1412a9b90d88ba68ab43d + - SHA1=48a09ca5fdbc214e675083c2259e051b0629457b - SHA1=ea63567ea8d168cb6e9aae705b80a09f927b2f77 - - SHA1=cf9b4d606467108e4b845ecb8ede2f5865bd6c33 - - SHA1=99bd8c1f5eeedd9f6a9252df5dbd0e42ef5999a4 - - SHA1=ad05bff5fe45df9e08252717fc2bc2af57bf026f - - SHA1=5622caf22032e5cbef52f48077cfbcbbbe85e961 - - SHA1=0b63e76fad88ac48dbfc7cf227890332fcd994a5 - - SHA1=5965ca5462cd9f24c67a1a1c4ef277fab8ea81d3 - - SHA1=24b47ba7179755e3b12a59d55ae6b2c3d2bd1505 - - SHA1=1e7c241b9a9ea79061b50fb19b3d141dee175c27 - - SHA1=078ae07dec258db4376d5a2a05b9b508d68c0123 - - SHA1=5672e2212c3b427c1aef83fcd725b587a3d3f979 + - SHA1=8347487b32b993da87275e3d44ff3683c8130d33 + - SHA1=4471935df0e68fe149425703b66f1efca3d82168 + - SHA1=eaddeefe13bca118369faf95eee85b0a2a553221 + - SHA1=98600e919b8579d89e232a253d7277355b652750 + - SHA1=444a2b778e2fc26067c49dde0aff0dcfb85f2b64 + - SHA1=89cd760e8cb19d29ee08c430fb17a5fd4455c741 + - SHA1=3ee2fd08137e9262d2e911158090e4a7c7427ea0 + - SHA1=6210dabb908cc750379cc7563beb884b3895e046 + - SHA1=22c08d67bf687bf7ddd57056e274cbbbdb647561 + - SHA1=1a8b737dff81aa9e338b1fce0dc96ee7ee467bd5 + - SHA1=a9b8d7afa2e4685280aebbeb162600cfce4e48c8 + - SHA1=8800a33a37c640922ce6a2996cd822ed4603b8bb + - SHA1=4f94789cffb23c301f93d6913b594748684abf6a + - SHA1=511b06898770337609ee065547dbf14ce3de5a95 + - SHA1=c32e6cddc7731408c747fd47af3d62861719fd7b + - SHA1=a93197c8c1897a95c4fb0367d7451019ae9f3054 + - SHA1=7eec3a1edf3b021883a4b5da450db63f7c0afeeb + - SHA1=a59006308c4b5d33bb8f34ac6fb16701814fb8dc + - SHA1=3e917f0986802d47c0ffe4d6f5944998987c4160 + - SHA1=b406920634361f4b7d7c1ec3b11bb40872d85105 + - SHA1=9ec6f54c74bcc48e355226c26513a7240fd9462d + - SHA1=79f1a6f5486523e6d8dcfef696bc949fc767613d + - SHA1=dce4322406004fc884d91ed9a88a36daca7ae19a + - SHA1=dbe26c67a4cabba16d339a1b256ca008effcf6c8 + - SHA1=9f5453c36aa03760d935e062ac9e1f548d14e894 - SHA1=da361c56c18ea98e1c442aac7c322ff20f64486b - - SHA1=7ba4607763c6fef1b2562b72044a20ca2a0303e2 - - SHA1=5635bb2478929010693bc3b23f8b7fe5fdbc3aed - - SHA1=a838303cda908530ef124f8d6f7fb69938b613bc - - SHA1=b53c360b35174bd89f97f681bf7c17f40e519eb6 - - SHA1=1013d5a0fd6074a8c40dbf3a88e3e06fbf3bcf41 - - SHA1=431550db5c160b56e801f220ceeb515dc16e68d2 - - SHA1=4b009e91bae8d27b160dc195f10c095f8a2441e1 - - SHA1=18f34a0005e82a9a1556ba40b997b0eae554d5fd + - SHA1=14c9cd9e2cf2b0aae56c46ff9ad1c89a8a980050 + - SHA1=21e6c104fe9731c874fab5c9560c929b2857b918 + - SHA1=ef80da613442047697bec35ea228cde477c09a3d + - SHA1=c834c4931b074665d56ccab437dfcc326649d612 - SHA1=aa2ea973bb248b18973e57339307cfb8d309f687 - - SHA1=82034032b30bbb78d634d6f52c7d7770a73b1b3c - - SHA1=e35969966769e7760094cbcffb294d0d04a09db6 - - SHA1=0d9c77aca860a43cca87a0c00f69e2ab07ab0b67 - - SHA1=388819a7048179848425441c60b3a8390ad04a69 - - SHA1=c8a4a64b412fd8ef079661db4a4a7cd7394514ca + - SHA1=bf87e32a651bdfd9b9244a8cf24fca0e459eb614 + - SHA1=977fd907b6a2509019d8ef4f6213039f2523f2b5 + - SHA1=b89a8eef5aeae806af5ba212a8068845cafdab6f + - SHA1=a45687965357036df17b8ff380e3a43a8fbb2ca9 + - SHA1=59aead65b240a163ad47b2d1cf33cdb330608317 + - SHA1=8c377ab4eebc5f4d8dd7bb3f90c0187dfdd3349f + - SHA1=ddd36f96f5a509855f55eed9eb4cba9758d6339a + - SHA1=a838303cda908530ef124f8d6f7fb69938b613bc + - SHA1=84d44e166072bccf1f8e1e9eb51880ffa065a274 + - SHA1=88d00eff21221f95a0307da229bc9fe1afb6861b + - SHA1=9ca90642cff9ca71c7022c0f9dfd87da2b6a0bff + - SHA1=a98734cd388f5b4b3caca5ce61cb03b05a8ad570 + - SHA1=bad84fca57ab0ef0af9230a93e0cc3d149f9ccd0 + - SHA1=ce5681896e7631b6e83cccb7aa056a33e72a1bbe + - SHA1=0634878c3f6048a38ec82869d7c6df2f69f3e210 + - SHA1=eacfc73f5f45f229867ee8b2eb1f9649b5dd422e + - SHA1=dc8fa4648c674e3a7148dd8e8c35f668a3701a52 + - SHA1=02316decf9e5165b431c599643f6856e86b95e7c + - SHA1=cc3186debacb98e0b0fb40ad82816bea10741099 + - SHA1=87f313fc30ec8759b391e9d6c08f79b02f3ecebd + - SHA1=56af49e030eb85528e82849d7d1b6147f3c4973e + - SHA1=62fdb0b43c56530a6a0ba434037d131f236d1266 + - SHA1=5088c71a740ef7c4156dcaa31e543052fe226e1c + - SHA1=64d0447cbb0d6a45010b94eb9d5b0b90296edcbf + - SHA1=0aecdc0b8208b81b0c37eef3b0eaea8d8ebef42e + - SHA1=2fe874274bac6842819c1e9fe9477e6d5240944d + - SHA1=33cdab3bbc8b3adce4067a1b042778607dce2acd + - SHA1=ba0938512d7abab23a72279b914d0ea0fb46e498 + - SHA1=3d8cc9123be74b31c597b0014c2a72090f0c44ef + - SHA1=1f1ce28c10453acbc9d3844b4604c59c0ab0ad46 + - SHA1=724dde837df2ff92b3ea7026fe8a0c4e5773898f + - SHA1=8ab7e9ba3c26bcd5d6d0646c6d2b2693e22aac1c + - SHA1=b480c54391a2a2f917a44f91a5e9e4590648b332 + - SHA1=9c24dd75e4074041dbe03bf21f050c77d748b8e9 + - SHA1=bea745b598dd957924d3465ebc04c5b830d5724f + - SHA1=e35a2b009d54e1a0b231d8a276251f64231b66a3 + - SHA1=99bd8c1f5eeedd9f6a9252df5dbd0e42ef5999a4 + - SHA1=5dd2c31c4357a8b76db095364952b3d0e3935e1d + - SHA1=2e3de9bff43d7712707ef8a0b10f7e4ad8427fd8 - SHA1=f42f28d164205d9f6dab9317c9fecad54c38d5d2 - - SHA1=4f7a8e26a97980544be634b26899afbefb0a833c - - SHA1=d32408c3b79b1f007331d2a3c78b1a7e96f37f79 - - SHA1=f736ccbb44c4de97cf9e9022e1379a4f58f5a5b8 - - SHA1=0edf51a0fac3b90f6961c2b20bbaeb4ccfc1ea84 - - SHA1=468cc011807704c04892ed209cf81d7896a12a0c - - SHA1=4d41248078181c7f61e6e4906aa96bbdea320dc2 - - SHA1=ea360a9f23bb7cf67f08b88e6a185a699f0c5410 - - SHA1=fb349c3cde212ef33a11a9d58a622dc58dff3f74 - - SHA1=38a863bcd37c9c56d53274753d5b0e614ba6c8bb - - SHA1=cfdb2085eaf729c7967f5d4efe16da3d50d07a23 - - SHA1=b671677079bf7c660579bee08b8875a48ff61896 - - SHA1=160a237295a9e5cbb64ca686a84e47553a14f71d - - SHA1=3def50587309440e3b9e595bdbe4dde8d69a64e7 - - SHA1=7ee675f0106e36d9159c5507b96c3237fb9348cd + - SHA1=5520ac25d81550a255dc16a0bb89d4b275f6f809 + - SHA1=d25340ae8e92a6d29f599fef426a2bc1b5217299 + - SHA1=43f53a739eda1e58f470e8e9ff9aa1437e5d9546 + - SHA1=879e92a7427bdbcc051a18bbb3727ac68154e825 + - SHA1=be270d94744b62b0d36bef905ef6296165ffcee9 + - SHA1=108439a4c4508e8dca659905128a4633d8851fd9 + - SHA1=fe0afc6dd03a9bd7f6e673cc6b4af2266737e3d1 + - SHA1=343ec3073fc84968e40a145dc9260a403966bcb4 + - SHA1=0d9c77aca860a43cca87a0c00f69e2ab07ab0b67 + - SHA1=c60cf6dea446e4a52c6b1cfc2a76e9aadd954dab + - SHA1=bd3e1d5aacac6406a7bcea3b471bbfa863efbc3d + - SHA1=aca8e53483b40a06dfdee81bb364b1622f9156fe + - SHA1=53a194e1a30ed9b2d3acd87c2752cfa6645eea76 + - SHA1=06ecf73790f0277b8e27c8138e2c9ad0fc876438 + - SHA1=a22c111045b4358f8279190e50851c443534fc24 + - SHA1=d2c7aa9b424015f970fe7506ae5d1c69a8ac11f6 + - SHA1=2eeab9786dac3f5f69e642f6e29f4e4819038551 + - SHA1=8ea50d7d13ff2d1306fed30a2d136dd6245eb3bc + - SHA1=490109fa6739f114651f4199196c5121d1c6bdf2 + - SHA1=877c6c36a155109888fe1f9797b93cb30b4957ef + - SHA1=66e95daee3d1244a029d7f3d91915f1f233d1916 + - SHA1=175fb76c7cd8f0aeb916f4acb3b03f8b2d51846a + - SHA1=0536c9f15094ca8ddeef6dec75d93dc35366d8a9 + - SHA1=65886384708d5a6c86f3c4c16a7e7cdbf68de92a + - SHA1=d7e8aef8c8feb87ce722c0b9abf34a7e6bab6eb4 + - SHA1=25d812a5ece19ea375178ef9d60415841087726e + - SHA1=24b47ba7179755e3b12a59d55ae6b2c3d2bd1505 + - SHA1=a547c5b1543a4c3a4f91208d377a2b513088f4a4 + - SHA1=604870e76e55078dfb8055d49ae8565ed6177f7c + - SHA1=37364cb5f5cefd68e5eca56f95c0ab4aff43afcc + - SHA1=962e2ac84c28ed5e373d4d4ccb434eceee011974 + - SHA1=94b014123412fbe8709b58ec72594f8053037ae9 + - SHA1=c969f1f73922fd95db1992a5b552fbc488366a40 + - SHA1=6dac7a8fa9589caae0db9d6775361d26011c80b2 + - SHA1=cd7b0c6b6ef809e7fb1f68ba36150eceabe500f7 + - SHA1=1d2ab091d5c0b6e5977f7fa5c4a7bfb8ea302dc7 + - SHA1=729a8675665c61824f22f06c7b954be4d14b52c4 + - SHA1=814200191551faec65b21f5f6819b46c8fc227a3 + - SHA1=59c0fa0d61576d9eb839c9c7e15d57047ee7fe29 + - SHA1=48be0ec2e8cb90cac2be49ef71e44390a0f648ce + - SHA1=0e030cf5e5996f0778452567e144f75936dc278f + - SHA1=6003184788cd3d2fc624ca801df291ccc4e225ee + - SHA1=6cc28df318a9420b49a252d6e8aaeda0330dc67d + - SHA1=59e6effdb23644ca03e60618095dc172a28f846e + - SHA1=df177a0c8c1113449f008f8e833105344b419834 + - SHA1=5d6b9e80e12bfc595d4d26f6afb099b3cb471dd4 + - SHA1=c0a8e45e57bb6d82524417d6fb7e955ab95621c0 + - SHA1=3599ea2ac1fa78f423423a4cf90106ea0938dde8 + - SHA1=363b907c3b4f37968e9c8e1b7eeca5a5c5d530f8 + - SHA1=53f7a84a8cebe0e3f84894c6b9119466d1a8ddaf + - SHA1=7ee65bedaf7967c752831c83e26540e65358175e + - SHA1=e525f54b762c10703c975132e8fc21b6cd88d39b + - SHA1=3a1f19b7a269723e244756dac1fc27c793276fe7 + - SHA1=d6b61c685cfaa36c85f1672ac95844f8293c70d0 + - SHA1=6714380bc0b8ab09b9a0d2fa66d1b025b646b946 + - SHA1=96523f72e4283f9816d3da8f2270690dd1dd263e + - SHA1=5db61d00a001fd493591dc919f69b14713889fc5 + - SHA1=b3c111d7192cfa8824e5c9b7c0660c37978025d6 + - SHA1=49b1e6a922a8d2cb2101c48155dfc08c17d09341 + - SHA1=282fca60f0c37eb6d76400bca24567945e43c6d8 + - SHA1=2a06006e54c62a2e8bdf14313f90f0ab5d2f8de8 + - SHA1=4692730f6b56eeb0399460c72ade8a15ddd43a62 + - SHA1=fe10018af723986db50701c8532df5ed98b17c39 + - SHA1=b34fc245d561905c06a8058753d25244aaecbb61 + - SHA1=2ade3347df84d6707f39d9b821890440bcfdb5e9 + - SHA1=5e9538d76b75f87f94ca5409ae3ddc363e8aba7f + - SHA1=5a69d921926ef0abf03757edf22c0d8d30c15d4b + - SHA1=986c1fdfe7c9731f4de15680a475a72cf2245121 + - SHA1=42eb220fdfb76c6e0649a3e36acccbdf36e287f1 + - SHA1=7192e22e0f8343058ec29fb7b8065e09ce389a5b + - SHA1=b2b01c728e0e8ef7b2e9040d6db9828bd4a5b48d + - SHA1=b99a5396094b6b20cea72fbf0c0083030155f74e + - SHA1=628e63caf72c29042e162f5f7570105d2108e3c2 + - SHA1=1fb12c5db2acad8849677e97d7ce860d2bb2329e + - SHA1=e5021a98e55d514e2376aa573d143631e5ee1c13 + - SHA1=46be4e6cd8117ac13531bff30edcf564f39bcc52 + - SHA1=377f7e7382908690189aede31fcdd532baa186b5 + - SHA1=5b4619596c89ed17ccbe92fd5c0a823033f2f1e1 + - SHA1=bda102afbc60f3f3c5bcbd5390ffbbbb89170b9c + - SHA1=ca33c88cd74e00ece898dca32a24bdfcacc3f756 + - SHA1=7d1ff4096a75f9fcc67c7c9c810d99874c096b6b + - SHA1=1a83c8b63d675c940aaec10f70c0c7698e9b0165 + - SHA1=f8e88630dae53e0b54edefdefa36d96c3dcbd776 + - SHA1=e33eac9d3b9b5c0db3db096332f059bf315a2343 + - SHA1=5635bb2478929010693bc3b23f8b7fe5fdbc3aed + - SHA1=3fd7fda9c7dfdb2a845c39971572bd090bee3b1d + - SHA1=3e790c4e893513566916c76a677b0f98bd7334dd + - SHA1=738b7918d85e5cb4395df9e3f6fc94ddad90e939 + - SHA1=5ca6a52230507b1dffab7acd501540bc10f1ab81 + - SHA1=820d339fd3dbb632a790d6506ddf6aee925fcffe + - SHA1=0ac0c21ca05161eaa6a042f347391a2a2fc78c96 + - SHA1=c95db1e82619fb16f8eec9a8209b7b0e853a4ebe + - SHA1=4f077a95908b154ea12faa95de711cb44359c162 + - SHA1=29a190727140f40cea9514a6420f5a195e36386b + - SHA1=dbf3abdc85d6a0801c4af4cd1b77c44d5f57b03e + - SHA1=de0c16e3812924212f04e15caa09763ae4770403 + - SHA1=3b1f1e96fc8a7eb93b14b1213f797f164a313cee + - SHA1=cc51be79ae56bc97211f6b73cc905c3492da8f9d + - SHA1=4c021c4a5592c07d4d415ab11b23a70ba419174b + - SHA1=9d191bee98f0af4969a26113098e3ea85483ae2d + - SHA1=ac31d15851c0af14d60cfce23f00c4b7887d3cb7 - SHA1=b25170e09c9fb7c0599bfba3cf617187f6a733ac - - SHA1=01a578a3a39697c4de8e3dab04dba55a4c35163e - - SHA1=bdfb1a2b08d823009c912808425b357d22480ecc - - SHA1=8b86c99328e4eb542663164685c6926e7e54ac20 - - SHA1=8db4376a86bd2164513c178a578a0bf8d90e7292 + - SHA1=5f8ae70b25b664433c6942d5963acadf2042cfe8 + - SHA1=a37616f0575a683bd81a0f49fadbbc87e1525eba + - SHA1=33285b2e97a0aeb317166cce91f6733cf9c1ad53 + - SHA1=c22c28a32a5e43a76514faf4fac14d135e0d4ffd + - SHA1=7c996d9ef7e47a3b197ff69798333dc29a04cc8a + - SHA1=cb0bc86d437ab78c1fbefdaf1af965522ebdd65d + - SHA1=4a1a499857accc04b4d586df3f0e0c2b3546e825 + - SHA1=c3a893680cd33706546a7a3e8fbcc4bd063ce07e + - SHA1=df58f9b193c6916aaec7606c0de5eba70c8ec665 + - SHA1=fc69138b9365fa60e21243369940c8dcfcca5db1 + - SHA1=3fbe337b6ed1a1a63ae8b4240c01bd68ed531674 + - SHA1=07c244739803f60a75d60347c17edc02d5d10b5d + - SHA1=cc0e0440adc058615e31e8a52372abadf658e6b1 + - SHA1=6e191d72b980c8f08a0f60efa01f0b5bf3b34afb + - SHA1=d697a3f4993e7cb15efdeda3b1a798ae25a2d0e9 + - SHA1=5cfec6aa4842e5bafff23937f5efca71f21cf7ca + - SHA1=def86c7dee1f788c717ac1917f1b5bbfada25a95 + - SHA1=c22dc62e10378191840285814838fe9ed1af55d7 + - SHA1=58b31fb2b623bd2c5d5c8c49b657a14a674664a4 + - SHA1=80fa962bdfb76dfcb9e5d13efc38bb3d392f2e77 + - SHA1=b62c5bae9c6541620379115a7ba0036ecfa19537 + - SHA1=585df373a9c56072ab6074afee8f1ec3778d70f8 + - SHA1=64ab599d34c26f53afe076a84c54db7ba1a53def + - SHA1=f130e82524d8f5af403c3b0e0ffa4b64fedeec92 + - SHA1=bd87aecc0ac1d1c2ab72be1090d39fab657f7cc6 + - SHA1=5499f1bca93a3613428e8c18ac93a93b9a7249fb + - SHA1=7ab4565ba24268f0adadb03a5506d4eb1dc7c181 + - SHA1=2f9b0cd96d961e49d5d3b416028fd3a0e43d6a28 + - SHA1=1da0c712ff42bd9112ac6afadb7c4d3ae2f20fb7 + - SHA1=ef8de780cfe839ecf6dc0dc161ae645bff9b853c - SHA1=feb8e6e7419713a2993c48b9758c039bd322b699 + - SHA1=d9b05c5ffc5eddf65186ba802bb1ece0249cab05 + - SHA1=08596732304351b311970ff96b21f451f23b1e25 + - SHA1=687b8962febbbea4cf6b3c11181fd76acb7dfd5a + - SHA1=9d0b824892fbfb0b943911326f95cd0264c60f7d + - SHA1=2ed4b51429b0a3303a645effc84022512f829836 + - SHA1=1a40773dc430d7cb102710812b8c61fc51dfb79b + - SHA1=4f7a8e26a97980544be634b26899afbefb0a833c + - SHA1=983a8d4b1cb68140740a7680f929d493463e32e3 + - SHA1=c4b6e2351a72311a6e8f71186b218951a27fb97f + - SHA1=6b090c558b877b6abb0d1051610cadbc6335ecbb + - SHA1=fcde5275ee1913509927ce5f0f85e6681064c9d2 + - SHA1=92f251358b3fe86fd5e7aa9b17330afa0d64a705 + - SHA1=400f833dcc2ef0a122dd0e0b1ec4ec929340d90e + - SHA1=27aa3f1b4baccd70d95ea75a0a3e54e735728aa2 + - SHA1=005ac9213a8a4a6c421787a7b25c0bc7b9f3b309 + - SHA1=eb0d45aa6f537f5b2f90f3ad99013606eafcd162 + - SHA1=c1777fcb7005b707f8c86b2370f3278a8ccd729f + - SHA1=00a442a4305c62cefa8105c0b4c4a9a5f4d1e93b + - SHA1=cfa85a19d9a2f7f687b0decdc4a5480b6e30cb8c + - SHA1=0e60414750c48676d7aa9c9ec81c0a3b3a4d53d0 + - SHA1=7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c + - SHA1=4268f30b79ce125a81d0d588bef0d4e2ad409bbb - SHA1=5fb9421be8a8b08ec395d05e00fd45eb753b593a - - SHA1=1a01f3bdbfae4f8111674068a001aaf3363f21ea - - SHA1=b34fc245d561905c06a8058753d25244aaecbb61 + - SHA1=540b9f9a232b9d597138b8e0f33d83f5f6e247af + - SHA1=19bf65bdd9d77f54f1e8ccf189dc114e752344b0 + - SHA1=f36a47edfacd85e0c6d4d22133dd386aee4eec15 + - SHA1=9f22ebcd2915471e7526f30aa53c24b557a689f5 + - SHA1=562368c390b0dadf2356b8b3c747357ecef2dfc8 + - SHA1=f999709e5b00a68a0f4fa912619fe6548ad0c42d + - SHA1=03a56369b8b143049a6ec9f6cc4ef91ac2775863 + - SHA1=82034032b30bbb78d634d6f52c7d7770a73b1b3c + - SHA1=3059bc49e027a79ff61f0147edbc5cd56ad5fc2d + - SHA1=af5f642b105d86f82ba6d5e7a55d6404bfb50875 + - SHA1=f86ae53eb61d3c7c316effe86395a4c0376b06db + - SHA1=3fd55927d5997d33f5449e9a355eb5c0452e0de3 + - SHA1=d942dac4033dcd681161181d50ce3661d1e12b96 + - SHA1=dd55015f5406f0051853fd7cca3ab0406b5a2d52 + - SHA1=336ed563ef96c40eece92a4d13de9f9b69991c8a + - SHA1=5711c88e9e64e45b8fc4b90ab6f2dd6437dc5a8a + - SHA1=ada23b709cb2bef8bedd612dc345db2e2fdbfaca + - SHA1=bd421ffdcc074ecca954d9b2c2fbce9301e9a36c + - SHA1=42f6bfcf558ef6da9254ed263a89abf4e909b5d5 + - SHA1=9eef72e0c4d5055f6ae5fe49f7f812de29afbf37 + - SHA1=007b2c7d72a5a89b424095dbb7f67ff2aeddb277 + - SHA1=4243dbbf6e5719d723f24d0f862afd0fcb40bc35 + - SHA1=35a817d949b2eab012506bed0a3b4628dd884471 + - SHA1=9d07df024ec457168bf0be7e0009619f6ac4f13c + - SHA1=5f8356ffa8201f338dd2ea979eb47881a6db9f03 + - SHA1=a65fabaf64aa1934314aae23f25cdf215cbaa4b6 + - SHA1=21edff2937eb5cd6f6b0acb7ee5247681f624260 + - SHA1=34ec04159d2c653a583a73285e6e2ac3c7b416dd + - SHA1=4f30f64b5dfcdc889f4a5e25b039c93dd8551c71 + - SHA1=13572d36428ef32cfed3af7a8bb011ee756302b0 + - SHA1=17d28a90ef4d3dbb083371f99943ff938f3b39f6 + - SHA1=a4b2c56c12799855162ca3b004b4b2078c6ecf77 + - SHA1=3ae56ab63230d6d9552360845b4a37b5801cc5ea + - SHA1=c8a4a64b412fd8ef079661db4a4a7cd7394514ca + - SHA1=24343ec4dfec11796a8800a3059b630e8be89070 + - SHA1=a55b709cec2288384b12eafa8be4930e7c075ec9 + - SHA1=5853e44ea0b6b4e9844651aa57d631193c1ed0f0 - SHA1=e3266b046d278194ade4d8f677772d0cb4ecfaf1 - - SHA1=fb1570b4865083dfce1fcff2bd72e9e1b03cead5 - - SHA1=2c2fc258871499b206963c0f933583cedcdf9ea2 - - SHA1=166759fd511613414d3213942fe2575b926a6226 - - SHA1=a95a126b539989e29e68969bfab16df291e7fa8a - - SHA1=e4fcb363cfe9de0e32096fa5be94a41577a89bb0 - - SHA1=67b45c1e204d44824cd7858455e1acedbd7ffbb3 - - SHA1=d1670bd08cfd376fc2b70c6193f3099078f1d72f - - SHA1=7c6cad6a268230f6e08417d278dda4d66bb00d13 - - SHA1=a3636986cdcd1d1cb8ab540f3d5c29dcc90bb8f0 - - SHA1=b21cba198d721737aabd882ada6c91295a5975ed - - SHA1=983a8d4b1cb68140740a7680f929d493463e32e3 - - SHA1=14c9cd9e2cf2b0aae56c46ff9ad1c89a8a980050 - - SHA1=8ac5703e67c3e6e0585cb8dbb86d196c5362f9bb - - SHA1=fdf4a0af89f0c8276ad6d540c75beece380703ab - - SHA1=d5fd9fe10405c4f90235e583526164cd0902ed86 - - SHA1=4a2e034d2702aba6bca5d9405ba533ed1274ff0c - - SHA1=c21510569fd84a5fe04508aa28e3cf9c8cc45b7a - - SHA1=135b261eb03e830c57b1729e3a4653f9c27c7522 - - SHA1=962e2ac84c28ed5e373d4d4ccb434eceee011974 - - SHA1=085c0ea6980cb93a3afa076764b7866467ac987c - - SHA1=52d9bbe41eea0b60507c469f7810d80343c03c2b - - SHA1=16c6bcef489f190a48e9d3b1f35972db89516479 - - SHA1=55d84fd3e5db4bdbd3fb6c56a84b6b8a320c7c58 - - SHA1=e840904ce12cc2f94eb1ec16b0b89e2822c24805 - - SHA1=f61e56359c663a769073782a0a3ffd3679c2694a - - SHA1=517504aaf8afc9748d6aec657d46a6f7bbc60c09 - - SHA1=fc62b746e0e726537bf848b48212f46db585af6d - - SHA1=2a06006e54c62a2e8bdf14313f90f0ab5d2f8de8 - - SHA1=c4d7fb9db3c3459f7e8c0e3d48c95c7c9c4cff60 + - SHA1=717669a1e2380cb61cc4e34618e118cc9cabbcd0 + - SHA1=0adc1320421f02f2324e764aa344018758514436 + - SHA1=7e900b0370a1d3cb8a3ea5394d7d094f95ec5dc0 + - SHA1=0c74d09da7baf7c05360346e4c3512d0cd433d59 + - SHA1=68b97bfaf61294743ba15ef36357cdb8e963b56e + - SHA1=e0d12e44db3f57ee7ea723683a6fd346dacf2e3e + - SHA1=31529d0e73f7fbfbe8c28367466c404c0e3e1d5a + - SHA1=04967bfd248d30183992c6c9fd2d9e07ae8d68ad + - SHA1=4d14d25b540bf8623d09c06107b8ca7bb7625c30 + - SHA1=01779ee53f999464465ed690d823d160f73f10e7 + - SHA1=e83fc2331ae1ea792b6cff7e970f607fee7346be + - SHA1=c8864c0c66ea45011c1c4e79328a3a1acf7e84a9 + - SHA1=a92207062fb72e6e173b2ffdb12c76834455f5d3 + - SHA1=6e58421e37c022410455b1c7b01f1e3c949df1cd + - SHA1=cb22723faa5ae2809476e5c5e9b9a597b26cab9b + - SHA1=4885cd221fa1ea330b9e4c1702be955d68bd3f6a + - SHA1=f7413250e7e8ad83c350092d78f0f75fcca9f474 + - SHA1=78b9481607ca6f3a80b4515c432ddfe6550b18a8 + - SHA1=970af806aa5e9a57d42298ab5ffa6e0d0e46deda + - SHA1=fe02ae340dc7fe08e4ad26dab9de418924e21603 + - SHA1=85941b94524da181be8aad290127aa18fc71895c + - SHA1=8183a341ba6c3ce1948bf9be49ab5320e0ee324d + - SHA1=9cc694dcb532e94554a2a1ef7c6ced3e2f86ef5a + - SHA1=398e8209e5c5fdcb6c287c5f9561e91887caca7d + - SHA1=4e56e0b1d12664c05615c69697a2f5c5d893058a + - SHA1=ee877b496777763e853dd81fefd0924509bc5be0 + - SHA1=3f347117d21cd8229dd99fa03d6c92601067c604 + - SHA1=61f5904e9ff0d7e83ad89f0e7a3741e7f2fbf799 + - SHA1=7ce978092fadbef44441a5f8dcb434df2464f193 + - SHA1=b03b1996a40bfea72e4584b82f6b845c503a9748 + - SHA1=1fd7f881ea4a1dbb5c9aeb9e7ad659a85421745b + - SHA1=91d026cd98de124d281fd6a8e7c54ddf6b913804 + - SHA1=db006fa522142a197686c01116a6cf60e0001ef7 + - SHA1=d2e6fc9259420f0c9b6b1769be3b1f63eb36dc57 - SHA1=089411e052ea17d66033155f77ae683c50147018 - - SHA1=27eab595ec403580236e04101172247c4f5d5426 - - SHA1=33cdab3bbc8b3adce4067a1b042778607dce2acd - - SHA1=c6d349823bbb1f5b44bae91357895dba653c5861 - - SHA1=97f668aa01ebbbf2f5f93419d146e6608d203efd - - SHA1=81a319685d0b6112edee4bc25d14d6236f4e12da - - SHA1=a8be6203c5a87ecc3ae1c452b7b6dbdf3a9f82ae - - SHA1=a32232a426c552667f710d2dcbd2fb9f9c50331d - - SHA1=d9c09dd725bc7bc3c19b4db37866015817a516ef - - SHA1=68ca9c27131aa35c7f433dc914da74f4b3d8793f - - SHA1=84341ed15d645c4daedcdd39863998761e4cb0e3 - - SHA1=7cd4aea9c1f82111bf7f9d4934be95e9bb6f8ae0 - - SHA1=609fa1efcf61e26d64a5ceb13b044175ab2b3a13 - - SHA1=13572d36428ef32cfed3af7a8bb011ee756302b0 - - SHA1=a54ae1793e9d77e61416e0d9fb81269a4bc8f8a2 - - SHA1=9c6749fc6c1127f8788bff70e0ce9062959637c9 - - SHA1=fa60a89980aad30db3a358fb1c1536a4d31dff6c - - SHA1=fad014ec98529644b5db5388d96bc4f9b77dcdc3 - - SHA1=cfdf9c9125755f4e81fa7cc5410d7740fdfea4ed - - SHA1=09f117d83f2f206ee37f1eb19eea576a0ac9bdcc - - SHA1=a6816949cd469b6e5c35858d19273936fab1bef6 - - SHA1=d3b23a0b70d6d279abd8db109f08a8b0721ce327 - - SHA1=faa870b0cb15c9ac2b9bba5d0470bd501ccd4326 - - SHA1=c1fe7870e202733123715cacae9b02c29494d94d - - SHA1=7cf7644e38746c9be4537b395285888d5572ae1b - - SHA1=c4ed28fdfba7b8a8dfe39e591006f25d39990f07 - - SHA1=ae344c123ef6d206235f2a8448d07f86433db5a6 - - SHA1=2cc70b772b42e0208f345c7c70d78f7536812f99 - - SHA1=1568117f691b41f989f10562f354ee574a6abc2d - - SHA1=87f313fc30ec8759b391e9d6c08f79b02f3ecebd - - SHA1=9eef72e0c4d5055f6ae5fe49f7f812de29afbf37 - - SHA1=a59006308c4b5d33bb8f34ac6fb16701814fb8dc - - SHA1=543933cce83f2e75d1b6a8abdb41199ddef8406c - - SHA1=4a04596acf79115f15add3921ce30a96f594d7ce - - SHA1=0c26ab1299adcd9a385b541ef1653728270aa23e - - SHA1=160c96b5e5db8c96b821895582b501e3c2d5d6e7 - - SHA1=69849d68d1857c83b09e1956a46fe879260d2aab - - SHA1=45e8f87afa41143e0c5850f9e054d18ec9c8a6c0 - - SHA1=1e6c2763f97e4275bba581de880124d64666a2fe - - SHA1=2d503a2457a787014a1fdd48a2ece2e6cbe98ea7 - - SHA1=b0032b8d8e6f4bd19a31619ce38d8e010f29a816 - - SHA1=89cd760e8cb19d29ee08c430fb17a5fd4455c741 - - SHA1=8a23735d9a143ad526bf73c6553e36e8a8d2e561 + - SHA1=263181bc8c2c6af06b9a06d994e4b651c3ab1849 + - SHA1=30e7258a5816a6db19cdda2b2603a8c3276f05c2 + - SHA1=96047b280e0d6ddde9df1c79ca5f561219a0370d + - SHA1=c6bd965300f07012d1b651a9b8776028c45b149a - SHA1=4c6ec22bc10947d089167b19d83a26bdd69f0dd1 - - SHA1=ebafebe5e94fdf12bd2159ed66d73268576bc7d9 - - SHA1=4e56e0b1d12664c05615c69697a2f5c5d893058a - - SHA1=2eddb10eecef740ec2f9158fa39410ec32262fc3 - - SHA1=687b8962febbbea4cf6b3c11181fd76acb7dfd5a - - SHA1=e6305dddd06490d7f87e3b06d09e9d4c1c643af0 - - SHA1=a958734d25865cbc6bcbc11090ab9d6b72799143 - - SHA1=3e917f0986802d47c0ffe4d6f5944998987c4160 - - SHA1=3abb9d0a9d600200ae19c706e570465ef0a15643 - - SHA1=f56186b6a7aa3dd7832c9d821f9d2d93bc2a9360 - - SHA1=a98734cd388f5b4b3caca5ce61cb03b05a8ad570 - - SHA1=492a47426b04f00c0d5b711ad8c872aad3aa3a1d - - SHA1=1c3f2579310ddd7ae09ce9ca1cc537a771b83c9f - - SHA1=a7bd05de737f8ea57857f1e0845a25677df01872 - - SHA1=0cc60a56e245e70f664906b7b67dfe1b4a08a5b7 - - SHA1=c22c28a32a5e43a76514faf4fac14d135e0d4ffd - - SHA1=7241b25c3a3ee9f36b52de3db2fc27db7065af37 - - SHA1=dfd801b6c2715f5525f8ffb38e3396a5ad9b831d - - SHA1=ada23b709cb2bef8bedd612dc345db2e2fdbfaca - - SHA1=eb44a05f8bba3d15e38454bd92999a856e6574eb - - SHA1=6d3c760251d6e6ea7ff4f4fcac14876fac829cf9 + - SHA1=ccd547ef957189eddb6ee213e5e0136e980186f9 + - SHA1=8d3be83cf3bb36dbce974654b5330adb38792c2d + - SHA1=d0216ebc81618c22d9d51f2f702c739625f40037 + - SHA1=18f34a0005e82a9a1556ba40b997b0eae554d5fd + - SHA1=3784d1b09a515c8824e05e9ea422c935e693080c + - SHA1=5c94c8894799f02f19e45fcab44ee33e653a4d17 + - SHA1=88839168e50a4739dd4193f2d8f93a30cd1f14d8 + - SHA1=2fc6845047abcf2a918fce89ab99e4955d08e72c + - SHA1=5742ad3d30bd34c0c26c466ac6475a2b832ad59e + - SHA1=d452fc8541ed5e97a6cbc93d08892c82991cdaad + - SHA1=eac1b9e1848dc455ed780292f20cd6a0c38a3406 + - SHA1=bc2f3850c7b858340d7ed27b90e63b036881fd6c + - SHA1=d48757b74eff02255f74614f35aa27abbe3f72c7 + - SHA1=9c6749fc6c1127f8788bff70e0ce9062959637c9 - SHA1=08efd5e24b5ebfef63b5e488144dc9fb6524eaf1 + - SHA1=cb212a826324909fdedd2b572a59a5be877f1d7d + - SHA1=b0aede5a66e13469c46acbc3b01ccf038acf222c + - SHA1=0c26ab1299adcd9a385b541ef1653728270aa23e + - SHA1=d34a7c497c603f3f7fcad546dc4097c2da17c430 + - SHA1=75d0b9bdfa79e5d43ec8b4c0996f559075723de7 + - SHA1=1bd4ae9a406bf010e34cdd38e823f732972b18e3 - SHA1=b74338c91c6effabc02ae0ced180428ab1024c7d - - SHA1=f0d6b0bcd5f47b41d3c3192e244314d99d1df409 - - SHA1=947db58d6f36a8df9fa2a1057f3a7f653ccbc42e - - SHA1=88839168e50a4739dd4193f2d8f93a30cd1f14d8 - - SHA1=3c81cdfd99d91c7c9de7921607be12233ed0dfd8 - - SHA1=de2b56ef7a30a4697e9c4cdcae0fc215d45d061d - - SHA1=fcd615df88645d1f57ff5702bd6758b77efea6d0 - - SHA1=a7948a4e9a3a1a9ed0e4e41350e422464d8313cd - - SHA1=dc6e62dbde5869a6adc92253fff6326b6af5c8d4 - - SHA1=45a9f95a7a018925148152b888d09d478d56bbf5 + - SHA1=6679cb0907ade366cf577d55be07eabc9fb83861 - SHA1=6ce0094a9aacdc050ff568935014607b8f23ff00 - - SHA1=879fcc6795cebe67718388228e715c470de87dca - - SHA1=108439a4c4508e8dca659905128a4633d8851fd9 - - SHA1=26a8ab6ea80ab64d5736b9b72a39d90121156e76 - - SHA1=bc47e15537fa7c32dfefd23168d7e1741f8477ed - - SHA1=3f347117d21cd8229dd99fa03d6c92601067c604 - - SHA1=f6b3577ea4b1a5641ae3421151a26268434c3db8 - - SHA1=65886384708d5a6c86f3c4c16a7e7cdbf68de92a - - SHA1=43b61039f415d14189d578012b6cb1bd2303d304 - - SHA1=d702d88b12233be9413446c445f22fda4a92a1d9 - - SHA1=5742ad3d30bd34c0c26c466ac6475a2b832ad59e - - SHA1=079627e0f5b1ad1fb3fe64038a09bc6e8b8d289d - - SHA1=a09334489fb18443c8793cb0395860518193cc3c - - SHA1=e067024ec42b556fb1e89ca52ef6719aa09cdf89 - - SHA1=da03799bb0025a476e3e15cc5f426e5412aeef02 - - SHA1=471ca4b5bb5fe68543264dd52acb99fddd7b3c6d - - SHA1=5db61d00a001fd493591dc919f69b14713889fc5 - - SHA1=6b090c558b877b6abb0d1051610cadbc6335ecbb - - SHA1=17614fdee3b89272e99758983b99111cbb1b312c - - SHA1=a37616f0575a683bd81a0f49fadbbc87e1525eba - - SHA1=400f833dcc2ef0a122dd0e0b1ec4ec929340d90e - - SHA1=862387e84baaf506c10080620cc46df2bda03eea - - SHA1=1951ae94c6ee63fa801208771b5784f021c70c60 - - SHA1=c95db1e82619fb16f8eec9a8209b7b0e853a4ebe - - SHA1=282fca60f0c37eb6d76400bca24567945e43c6d8 - - SHA1=263181bc8c2c6af06b9a06d994e4b651c3ab1849 - - SHA1=def86c7dee1f788c717ac1917f1b5bbfada25a95 - - SHA1=4b8c0445075f09aeef542ab1c86e5de6b06e91a3 - - SHA1=3805e4e08ad342d224973ecdade8b00c40ed31be - - SHA1=7e900b0370a1d3cb8a3ea5394d7d094f95ec5dc0 - - SHA1=343ec3073fc84968e40a145dc9260a403966bcb4 + - SHA1=f7b3457a6fd008656e7216b1f09db2ff062f1ca4 + - SHA1=89656051126c3e97477a9985d363fbdde0bc159e + - SHA1=1ecb7b9658eb819a80b8ebdaa2e69f0d84162622 + - SHA1=aaaf565fa30834aba3f29a97fc58d15e372500b5 + - SHA1=b49ac8fefc6d1274d84fef44c1e5183cc7accba1 + - SHA1=9f2b550c58c71d407898594b110a9320d5b15793 + - SHA1=3f6a997b04d2299ba0e9f505803e8d60d0755f44 + - SHA1=ec0c3c61a293a90f36db5f8ed91cbf33c2b14a19 + - SHA1=d73dabcb3f55935b701542fd26875006217ebbbe + - SHA1=dda8c7e852fe07d67c110dab163354a2a85f44a5 + - SHA1=643383938d5e0d4fd30d302af3e9293a4798e392 + - SHA1=9e8a87401dc7cc56b3a628b554ba395b1868520f + - SHA1=35b28b15835aa0775b57f460d8a03e53dc1fb30f + - SHA1=09c567b8dd7c7f93884c2e6b71a7149fc0a7a1b5 + - SHA1=9f6883e59fd6c136cfc556b7b388a4c363dc0516 + - SHA1=53acd4d9e7ba0b1056cf52af0d191f226eddf312 + - SHA1=9a35ae9a1f95ce4be64adc604c80079173e4a676 + - SHA1=5abffd08f4939a0dee81a5d95cf1c02e2e14218c + - SHA1=ea360a9f23bb7cf67f08b88e6a185a699f0c5410 + - SHA1=5eb693c9cc49c7d6a03f7960ddcfd8f468e5656b - SHA1=4518758452af35d593e0cae80d9841a86af6d3de - - SHA1=28fa0e9429af24197134306b6c7189263e939136 - - SHA1=c47b890dda9882f9f37eccc27d58d6a774a2901f - - SHA1=7ee65bedaf7967c752831c83e26540e65358175e - - SHA1=35829e096a15e559fcbabf3441d99e580ca3b26e - - SHA1=d0216ebc81618c22d9d51f2f702c739625f40037 - - SHA1=cd828ee0725f6185861fd0a9d3bd78f1d96e55bf - - SHA1=e4436c8c42ba5ffabd58a3b2256f6e86ccc907ab - - SHA1=558aad879b6a47d94a968f39d0a4e3a3aaef1ef1 - - SHA1=9d191bee98f0af4969a26113098e3ea85483ae2d - - SHA1=eba5483bb47ec6ff51d91a9bdf1eee3b6344493d - - SHA1=c201d5d0ab945095c3b1a356b3b228af1aa652fc - - SHA1=190ec384e6eb1dafca80df05055ead620b2502ba - - SHA1=d48757b74eff02255f74614f35aa27abbe3f72c7 + - SHA1=da42cefde56d673850f5ef69e7934d39a6de3025 + - SHA1=c32dfdb0ee859de618484f3ab7a43ee1d9a25d1c + - SHA1=471ca4b5bb5fe68543264dd52acb99fddd7b3c6d + - SHA1=290d6376658cf0f8182de0fae40b503098fa09fd + - SHA1=2bc9047f08a664ade481d0bbf554d3a0b49424ca + - SHA1=1f84d89dd0ae5008c827ce274848d551aff3fc33 + - SHA1=6053d258096bccb07cb0057d700fe05233ab1fbb + - SHA1=cb5229acdf87493e45d54886e6371fc59fc09ee5 + - SHA1=2db49bdf8029fdcda0a2f722219ae744eae918b0 + - SHA1=eeff4ec4ebc12c6acd2c930dc2eaaf877cfec7ec + - SHA1=24f6e827984cca5d9aa3e4c6f3c0c5603977795a + - SHA1=db3debacd5f6152abd7a457d7910a0ec4457c0d7 + - SHA1=96323381a98790b8ffac1654cb65e12dbbe6aff1 + - SHA1=7241b25c3a3ee9f36b52de3db2fc27db7065af37 + - SHA1=3c956b524e73586195d704b874e36d49fe42cb6a + - SHA1=fb25e6886d98fe044d0eb7bd42d24a93286266e0 + - SHA1=caa0cb48368542a54949be18475d45b342fb76e5 + - SHA1=4c16dcc7e6d7dd29a5f6600e50fc01a272c940e1 - SHA1=1f3a9265963b660392c4053329eb9436deeed339 - - SHA1=745bad097052134548fe159f158c04be5616afc2 - - SHA1=ddbe809b731a0962e404a045ab9e65a0b64917ad - - SHA1=9b8c7eda28bfad07ffe5f84a892299bc7e118442 - - SHA1=f544f25104fe997ec873f5cec64c7aa722263fb4 - - SHA1=ca4d2bd6022f71e1a48b08728c0ac83c68e91281 - - SHA1=272ffcda920a8e2440eb0d31dcd05485e0d597ad - - SHA1=90d73db752eac6ffc53555281fc5aa92297285ec - - SHA1=c8ec23066a50800d42913d5e439700c5cd6a2287 - - SHA1=fff7ee0febb8c93539220ca49d4206616e15c666 - - SHA1=59e6effdb23644ca03e60618095dc172a28f846e - - SHA1=05eff2001f595f9e2894c6b5eee756ae72379a6d - - SHA1=19977d45e98b48c901596fb0a49a7623cee4c782 - - SHA1=4471935df0e68fe149425703b66f1efca3d82168 - - SHA1=8788f4b39cbf037270904bdb8118c8b037ee6562 - - SHA1=36a6f75f05ac348af357fdecbabe1a184fe8d315 - - SHA1=3ca51b23f8562485820883e894b448413891183a - - SHA1=80fa962bdfb76dfcb9e5d13efc38bb3d392f2e77 - - SHA1=5088c71a740ef7c4156dcaa31e543052fe226e1c - - SHA1=35f1ba60ba0da8512a0b1b15ee8e30fe240d77cd - - SHA1=016aa643fbd8e10484741436bcacc0d9eee483c8 - - SHA1=eac1b9e1848dc455ed780292f20cd6a0c38a3406 - - SHA1=0adc1320421f02f2324e764aa344018758514436 - - SHA1=50e2bc41f0186fdce970b80e2a2cb296353af586 - - SHA1=bf87e32a651bdfd9b9244a8cf24fca0e459eb614 - - SHA1=63cf021c8662fa23ce3e4075a4f849431e473058 - - SHA1=ed219d966a6e74275895cc0b975b79397760ea9f - - SHA1=970af806aa5e9a57d42298ab5ffa6e0d0e46deda - - SHA1=b304cb10c88ddd8461bad429ebfd2fd1b809ac2b - - SHA1=77a011b5d5d5aaf421a543fcee22cb7979807c60 - - SHA1=2ed4b51429b0a3303a645effc84022512f829836 - - SHA1=07f60b2b0e56cb15aad3ca8a96d9fe3a91491329 - - SHA1=b480c54391a2a2f917a44f91a5e9e4590648b332 - - SHA1=19f3343bfad0ef3595f41d60272d21746c92ffca - - SHA1=21e6c104fe9731c874fab5c9560c929b2857b918 - - SHA1=0f78974194b604122b1cd4e82768155f946f6d24 - - SHA1=e8234c44f3b7e4c510ef868e8c080e00e2832b07 - - SHA1=aadaec4c31d661c249e4cf455ec752fffa3e5cfc - - SHA1=10b9ae9286837b3bf6a00771c7e81adbdea3cbfe - - SHA1=d5beca70469e0dcb099ba35979155e7c91876fd2 - - SHA1=976777d39d73034df6b113dfce1aa6e1d00ffcfd - - SHA1=99201c9555e5faf6e8d82da793b148311f8aa4b8 - - SHA1=a2167b723dfb24bf8565cbe2de0ecce77307fb9e - - SHA1=7192e22e0f8343058ec29fb7b8065e09ce389a5b - - SHA1=469c04cb7841eedd43227facaf60a6d55cf21fd7 - - SHA1=879e92a7427bdbcc051a18bbb3727ac68154e825 - - SHA1=e83458c4a6383223759cd8024e60c17be4e7c85f - - SHA1=2ae1456bb0fa5a016954b03967878fb6db4d81eb - - SHA1=f2ce790bf47b01a7e1ef5291d8fa341d5f66883a - - SHA1=291b4a88ffd2ac1d6bf812ecaedc2d934dc503cb + - SHA1=b0c7ec472abf544c5524b644a7114cba0505951e + - SHA1=622e7bffda8c80997e149ac11492625572e386e0 + - SHA1=4ffa89f8dbdade28813e12db035cf9bd8665ef72 + - SHA1=5fece994f2409810a0ad050b3ca9b633c93919e4 + - SHA1=f50c6b84dfb8f2d53ba3bce000a55f0a486c0e79 + - SHA1=2fa92d3739735bc9ac4dc38f42d909d97cc5c2a8 + - SHA1=fece30b9b862bf99ae6a41e49f524fe6f32e215e + - SHA1=ae344c123ef6d206235f2a8448d07f86433db5a6 + - SHA1=ad1616ea6dc17c91d983e829aa8a6706e81a3d27 + - SHA1=c127c4d0917f54cee13a61c6c0029c95ae0746cf + - SHA1=84341ed15d645c4daedcdd39863998761e4cb0e3 + - SHA1=fb4ce6de14f2be00a137e8dde2c68bb5b137ab9c - SHA1=22c905fcdd7964726b4be5e8b5a9781322687a45 - - SHA1=589a7d4df869395601ba7538a65afae8c4616385 - - SHA1=ac13941f436139b909d105ad55637e1308f49d9a - - SHA1=2261198385d62d2117f50f631652eded0ecc71db - - SHA1=da9cea92f996f938f699902482ac5313d5e8b28e - - SHA1=b4d014b5edd6e19ce0e8395a64faedf49688ecb5 - - SHA1=35b28b15835aa0775b57f460d8a03e53dc1fb30f - - SHA1=7c1b25518dee1e30b5a6eaa1ea8e4a3780c24d0c - - SHA1=116679c4b2cca6ec69453309d9d85d3793cbe05f - - SHA1=d94f2fb3198e14bfe69b44fb9f00f2551f7248b2 - - SHA1=bbc0b9fd67c8f4cefa3d76fcb29ff3cef996b825 - - SHA1=01b95ae502aa09aabc69a0482fcc8198f7765950 - - SHA1=877c6c36a155109888fe1f9797b93cb30b4957ef - - SHA1=dd085542683898a680311a0d1095ea2dffe865e2 - - SHA1=213ba055863d4226da26a759e8a254062ea77814 - - SHA1=a380aeb3ffaecc53ca48bb1d4d622c46f1de7962 - - SHA1=72966ca845759d239d09da0de7eebe3abe86fee3 - - SHA1=0b6ec2aedc518849a1c61a70b1f9fb068ede2bc3 - - SHA1=c3be2bbd9b3f696bc9d51d5973cc00ca059fb172 - - SHA1=9cc694dcb532e94554a2a1ef7c6ced3e2f86ef5a - - SHA1=ef80da613442047697bec35ea228cde477c09a3d - - SHA1=00a442a4305c62cefa8105c0b4c4a9a5f4d1e93b - - SHA1=c775ca665ed4858acc3f7e75e025cbbda1f8c687 - - SHA1=6100eb82a25d64a7a7702e94c2b21333bc15bd08 - - SHA1=4fe873544c34243826489997a5ff14ed39dd090d - - SHA1=cfa85a19d9a2f7f687b0decdc4a5480b6e30cb8c - - SHA1=c8674fe95460a37819e06d9df304254931033ca7 - - SHA1=3599ea2ac1fa78f423423a4cf90106ea0938dde8 - - SHA1=eaddeefe13bca118369faf95eee85b0a2a553221 - - SHA1=9db1585c0fab6a9feb411c39267ac4ad29171696 - - SHA1=3ee2fd08137e9262d2e911158090e4a7c7427ea0 - - SHA1=55c64235d223baeb8577a2445fdaa6bedcde23db - - SHA1=eb2496304073727564b513efd6387a77ce395443 - - SHA1=9099482b26e9ba8e1d303418afc9111a3bffd6b3 - - SHA1=83b5e60943a92050fccb8acef7aa464c8f81d38e - - SHA1=8b6aa5b2bff44766ef7afbe095966a71bc4183fa - - SHA1=4075de7d7d2169d650c5ccede8251463913511e6 - - SHA1=1c537fd17836283364349475c6138e6667cf1164 - - SHA1=19bf65bdd9d77f54f1e8ccf189dc114e752344b0 - - SHA1=f56fec3f2012cd7fc4528626debc590909ed74b6 - - SHA1=d942dac4033dcd681161181d50ce3661d1e12b96 - - SHA1=f3db629cfe37a73144d5258e64d9dd8b38084cf4 - - SHA1=3296844d22c87dd5eba3aa378a8242b41d59db7a - - SHA1=c16d7b2fbe69a28ccbcf87348903277f22805bf3 - - SHA1=62fdb0b43c56530a6a0ba434037d131f236d1266 - - SHA1=4cd5bf02edf6883a08dfed7702267612e21ed56e - - SHA1=a22dead5cdf05bd2f79a4d0066ffcf01c7d303ec - - SHA1=1ecb7b9658eb819a80b8ebdaa2e69f0d84162622 - - SHA1=48be0ec2e8cb90cac2be49ef71e44390a0f648ce - - SHA1=3270720a066492b046d7180ca6e60602c764cac7 - - SHA1=3f17ff83dc8a5f875fb1b3a5d3b9fcbe407a99f0 - - SHA1=0466e90bf0e83b776ca8716e01d35a8a2e5f96d3 - - SHA1=4692730f6b56eeb0399460c72ade8a15ddd43a62 - - SHA1=a714a2a045fa8f46d0165b78fe3eecf129c1de3a - - SHA1=7eb34cc1fcffb4fdb5cb7e97184dd64a65cb9371 - - SHA1=d7597d27eeb2658a7c7362193f4e5c813c5013e5 - - SHA1=76046978d8e4409e53d8126a8dcfc3bf8602c37f - - SHA1=4f376b1d1439477a426ef3c52e8c1c69c2cb5305 - - SHA1=437b56dc106d2e649d2c243c86729b6e6461d535 - - SHA1=35a817d949b2eab012506bed0a3b4628dd884471 - - SHA1=cd248648eafca6ef77c1b76237a6482f449f13be + - SHA1=4927d843577bada119a17b249ff4e7f5e9983a92 + - SHA1=d083e69055556a36df7c6e02115cbbf90726f35c + - SHA1=f0c463d29a5914b01e4607889094f1b7d95e7aaf + - SHA1=86e59b17272a3e7d9976c980ded939bf8bf75069 - SHA1=eb0021e29488c97a0e42a084a4fe5a0695eccb7b - - SHA1=e702221d059b86d49ed11395adffa82ef32a1bce - - SHA1=d0d39e1061f30946141b6ecfa0957f8cc3ddeb63 - - SHA1=59c4960851af9240dded4173c4f823727af19512 - - SHA1=74e4e3006b644392f5fcea4a9bae1d9d84714b57 + - SHA1=388819a7048179848425441c60b3a8390ad04a69 + - SHA1=611411538b2bc9045d29bbd07e6845e918343e3c + - SHA1=43011eb72be4775fec37aa436753c4d6827395d1 + - SHA1=18938e0d924ee7c0febdbf2676a099e828182c1c + - SHA1=1743b073cccf44368dc83ed3659057eb5f644b06 + - SHA1=fb1570b4865083dfce1fcff2bd72e9e1b03cead5 + - SHA1=96c2e1d7c9a8ad242f8f478e871f645895d3e451 + - SHA1=fcd615df88645d1f57ff5702bd6758b77efea6d0 + - SHA1=70258117b5efe65476f85143fd14fa0b7f148adb + - SHA1=90a76945fd2fa45fab2b7bcfdaf6563595f94891 + - SHA1=24b3f962587b0062ac9a1ec71bcc3836b12306d2 + - SHA1=663803d7ab5aff28be37c2e7e8c7b98b91c5733e + - SHA1=2739c2cfa8306e6f78c335c55639566b3d450644 + - SHA1=2027e5e8f2cfdfbd9081f99b65af4921626d77f9 + - SHA1=eb44a05f8bba3d15e38454bd92999a856e6574eb + - SHA1=d7597d27eeb2658a7c7362193f4e5c813c5013e5 + - SHA1=35f1ba60ba0da8512a0b1b15ee8e30fe240d77cd + - SHA1=1e6c2763f97e4275bba581de880124d64666a2fe + - SHA1=19977d45e98b48c901596fb0a49a7623cee4c782 + - SHA1=27d3ebea7655a72e6e8b95053753a25db944ec0f - SHA1=a2e0b3162cfa336cd4ab40a2acc95abe7dc53843 - - SHA1=58ebfb7de214ee09f6bf71c8cc9c139dd4c8b016 - - SHA1=108575d8f0b98fed29514a54052f7bf5a8cb3ff0 - - SHA1=b89a8eef5aeae806af5ba212a8068845cafdab6f - - SHA1=0c74d09da7baf7c05360346e4c3512d0cd433d59 - - SHA1=af5f642b105d86f82ba6d5e7a55d6404bfb50875 - - SHA1=db006fa522142a197686c01116a6cf60e0001ef7 - - SHA1=f50c6b84dfb8f2d53ba3bce000a55f0a486c0e79 - - SHA1=bbc1e5fd826961d93b76abd161314cb3592c4436 - - SHA1=7480c7f7346ce1f86a7429d9728235f03a11f227 - - SHA1=8cc8974a05e81678e3d28acfe434e7804abd019c - - SHA1=1a56614ea7d335c844b7fc6edd5feb59b8df7b55 - - SHA1=dcdc9b2bc8e79d44846086d0d482cb7c589f09b8 - - SHA1=24343ec4dfec11796a8800a3059b630e8be89070 - - SHA1=8347487b32b993da87275e3d44ff3683c8130d33 - - SHA1=e525f54b762c10703c975132e8fc21b6cd88d39b - - SHA1=0b8b83f245d94107cb802a285e6529161d9a834d - - SHA1=e92817a8744ebc4e4fa5383cdce2b2977f01ecd4 - - SHA1=9dbd255ee29be0e552f7f5f30d6ffb97e6cd0b0d - - SHA1=0904b8fa4654197eefd6380c81bbb2149ffe0634 - - SHA1=3ae56ab63230d6d9552360845b4a37b5801cc5ea - - SHA1=a34adabde63514e1916713a588905c4019f83efb - - SHA1=9310239b75394b75a963336fbd154038fc13c4e3 - - SHA1=f3029dba668285aac04117273599ac12a94a3564 - - SHA1=af6e1f2cfb230907476e8b2d676129b6d6657124 - - SHA1=30c6e1da8745c3d53df696af407ef095a8398273 - - SHA1=22c909898f5babe37cc421b4f5ed0522196f8127 - - SHA1=fece30b9b862bf99ae6a41e49f524fe6f32e215e - - SHA1=1e8bccbd74f194db6411011017716c8c6b730d03 - - SHA1=10fc6933deb7de9813e07d864ce03334a4f489d9 - - SHA1=a65fabaf64aa1934314aae23f25cdf215cbaa4b6 - - SHA1=8c377ab4eebc5f4d8dd7bb3f90c0187dfdd3349f - - SHA1=9393698058ce1187eb87e8c148cfe4804761142d - - SHA1=13df48ab4cd412651b2604829ce9b61d39a791bb - - SHA1=55ab7e27412eca433d76513edc7e6e03bcdd7eda - - SHA1=fe02ae340dc7fe08e4ad26dab9de418924e21603 - - SHA1=838823f25436cadc9a145ddac076dce3e0b84d96 - - SHA1=943593e880b4d340f2548548e6e673ef6f61eed3 - - SHA1=d083e69055556a36df7c6e02115cbbf90726f35c - - SHA1=f9eb4c942a89b4ba39d2bdbfd23716937ccb9925 - - SHA1=ed3f11383a47710fa840e13a7a9286227fa1474c - - SHA1=2cf75df00c69d907cfe683cb25077015d05be65d - - SHA1=468e2e5505a3d924b14fedee4ddf240d09393776 - - SHA1=d7e8aef8c8feb87ce722c0b9abf34a7e6bab6eb4 - - SHA1=64df813dc0774ef57d21141dcb38d08059fd8660 - - SHA1=be797c91768ac854bd3b82a093e55db83da0cb11 - - SHA1=cb25d537f4e2872e5fcbd893da8ce3807137df80 + - SHA1=3d6d53b0f1cc908b898610227b9f1b9352137aba + - SHA1=8d0f33d073720597164f7321603578cd13346d1f + - SHA1=229716e61f74db821d5065bac533469efb54867b + - SHA1=dc7b022f8bd149efbcb2204a48dce75c72633526 + - SHA1=ccdd3a1ebe9a1c8f8a72af20a05a10f11da1d308 + - SHA1=469c04cb7841eedd43227facaf60a6d55cf21fd7 + - SHA1=722aa0fa468b63c5d7ea308d77230ae3169d5f83 + - SHA1=bfd8568f19d4273a1288726342d7620cc9070ae5 + - SHA1=17b3163aecd1f512f1603548ef6eb4947fbec95e + - SHA1=ce549714a11bd43b52be709581c6e144957136ec + - SHA1=a3224815aedc14bb46f09535e9b8ca7eaa4963bf + - SHA1=ba0d6c596b78a1fc166747d7523ca6316ef87e9f + - SHA1=f85f5e5d747433b274e53c8377bf24fbc08758b6 + - SHA1=2e9466d5a814c20403be7c7a5811039ca833bd5d + - SHA1=3bb1dddb4157b6b8175fc6e1e7c33bef7870c500 + - SHA1=b0032b8d8e6f4bd19a31619ce38d8e010f29a816 + - SHA1=a958734d25865cbc6bcbc11090ab9d6b72799143 + - SHA1=11fcaeda49848474cee9989a00d8f29cb727acb7 + - SHA1=45328110873640d8fed9fc72f7d2eadd3d17ceae + - SHA1=8db869c0674221a2d3280143cbb0807fac08e0cc + - SHA1=3fd5cd30085450a509eaa6367af26f6c4b9741b6 + - SHA1=f1b3bdc3beb2dca19940d53eb5a0aed85b807e30 + - SHA1=948fa3149742f73bf3089893407df1b20f78a563 + - SHA1=e039c9dd21494dbd073b4823fc3a17fbb951ec6c + - SHA1=5eed0ce6487d0b8d0a6989044c4fcab1bd845d9e + - SHA1=ce31292b05c0ae1dc639a6ee95bb3bc7350f2aaf + - SHA1=1a53902327bac3ab323ee63ed215234b735c64da + - SHA1=078ae07dec258db4376d5a2a05b9b508d68c0123 + - SHA1=609fa1efcf61e26d64a5ceb13b044175ab2b3a13 + - SHA1=f052dc35b74a1a6246842fbb35eb481577537826 + - SHA1=ba3faca988ff56f4850dede2587d5a3eff7c6677 + - SHA1=8f266edf9f536c7fc5bb3797a1cf9039fde8e97c - SHA1=d57c732050d7160161e096a8b238cb05d89d1bb2 - - SHA1=07f62d9b6321bed0008e106e9ce4240cb3f76da2 - - SHA1=bb962c9a8dda93e94fef504c4159de881e4706fe - - SHA1=7667b72471689151e176baeba4e1cd9cd006a09a - - SHA1=3e790c4e893513566916c76a677b0f98bd7334dd - - SHA1=cb22723faa5ae2809476e5c5e9b9a597b26cab9b - - SHA1=f640c94e71921479cc48d06b59aba41ffa50a769 - - SHA1=d363011d6991219d7f152609164aba63c266b740 - - SHA1=2540205480ea3d59e4031de3c6632e3ce2596459 - - SHA1=65d8a7c2e867b22d1c14592b020c548dd0665646 - - SHA1=296757d5663290f172e99e60b9059f989cba4c4e - - SHA1=22c08d67bf687bf7ddd57056e274cbbbdb647561 + - SHA1=7480c7f7346ce1f86a7429d9728235f03a11f227 + - SHA1=40abf7edb4c76fb3f22418f03198151c5363f1cb + - SHA1=43b61039f415d14189d578012b6cb1bd2303d304 + - SHA1=1e7c241b9a9ea79061b50fb19b3d141dee175c27 + - SHA1=a809831166a70700b59076e0dbc8975f57b14398 + - SHA1=22c9cd0f5986e91b733fbd5eda377720fd76c86d + - SHA1=d7b20ac695002334f804ffc67705ce6ac5732f91 + - SHA1=fe1d909ab38de1389a2a48352fd1c8415fd2eab0 + - SHA1=a64354aac2d68b4fa74b5829a9d42d90d83b040c + - SHA1=72a5ac213ec1681d173bee4f1807c70a77b41bf6 - SHA1=485c0b9710a196c7177b99ee95e5ddb35b26ddd1 - - SHA1=62244c704b0f227444d3a515ea0dc1003418a028 - - SHA1=ac31d15851c0af14d60cfce23f00c4b7887d3cb7 - - SHA1=604870e76e55078dfb8055d49ae8565ed6177f7c - - SHA1=c1d5cf8c43e7679b782630e93f5e6420ca1749a7 - - SHA1=3adea4a3a91504dc2e3c5e9247c6427cd5c73bab - - SHA1=6102b73489e1d319c0db7b84cb2c426c5f680120 - - SHA1=3cd037fbba8aae82c1b111c9f8755349c98bcb3c - - SHA1=c70989ed7a6ad9d7cd40ae970e90f3c3f2f84860 - - SHA1=9ca90642cff9ca71c7022c0f9dfd87da2b6a0bff - - SHA1=64e4ac8b9ea2f050933b7ec76a55dd04e97773b4 - - SHA1=05c0c49e8bcf11b883d41441ce87a2ee7a3aba1d - - SHA1=d17656f11b899d58dca7b6c3dd6eef3d65ae88e2 - - SHA1=444a2b778e2fc26067c49dde0aff0dcfb85f2b64 - - SHA1=6a2912c8e2aa4373852585bc1134b83c637bc9fd - - SHA1=e3048cd05573dc1d30b1088859bc728ef67aaad0 - - SHA1=ef95f500b60c49f40ed6ce3014ffdb294b301e95 - - SHA1=1901467b6f04a93b35d3ca0727c8a14f3ce3ed52 - - SHA1=96523f72e4283f9816d3da8f2270690dd1dd263e - - SHA1=2c27abbbbcf10dfb75ad79557e30ace5ed314df8 + - SHA1=891c8d482e23222498022845a6b349fe1a186bcc + - SHA1=6a60c5dc7d881ddb5d6fe954f10b8aa10d214e72 + - SHA1=b4dcdbd97f38b24d729b986f84a9cdb3fc34d59f + - SHA1=e40ea8d498328b90c4afbb0bb0e8b91b826f688e + - SHA1=356172a2e12fd3d54e758aaa4ff0759074259144 + - SHA1=7115929de6fc6b9f09142a878d1a1bf358af5f24 + - SHA1=1b84abffd814b9f4595296b3e5ede0c44e630967 + - SHA1=40d29aa7b3fafd27c8b27c7ca7a3089ccb88d69b + - SHA1=1c3f2579310ddd7ae09ce9ca1cc537a771b83c9f + - SHA1=f3db629cfe37a73144d5258e64d9dd8b38084cf4 + - SHA1=879fcc6795cebe67718388228e715c470de87dca - SHA1=b33b99ae2653b4e675beb7d9eb2c925a1f105bd4 - - SHA1=4186ac693003f92fdf1efbd27fb8f6473a7cc53e - - SHA1=d34a7c497c603f3f7fcad546dc4097c2da17c430 - - SHA1=07c244739803f60a75d60347c17edc02d5d10b5d - - SHA1=6210dabb908cc750379cc7563beb884b3895e046 - - SHA1=cb5229acdf87493e45d54886e6371fc59fc09ee5 - - SHA1=30846313e3387298f1f81c694102133568d6d48d - - SHA1=49b1e6a922a8d2cb2101c48155dfc08c17d09341 - - SHA1=8d59fd14a445c8f3f0f7991fa6cd717d466b3754 - - SHA1=569f4605c65c2a217b28aefeb8570f9ea663e4b7 - - SHA1=ec8c0b2f49756b8784b3523e70cd8821b05b95eb - - SHA1=5b4619596c89ed17ccbe92fd5c0a823033f2f1e1 + - SHA1=160c96b5e5db8c96b821895582b501e3c2d5d6e7 + - SHA1=8b6aa5b2bff44766ef7afbe095966a71bc4183fa + - SHA1=c31049605f028a56ce939cd2f97c2e56c12d99f8 + - SHA1=a380aeb3ffaecc53ca48bb1d4d622c46f1de7962 + - SHA1=c4ed28fdfba7b8a8dfe39e591006f25d39990f07 + - SHA1=3048f3422b2b31b74eace0dab3f5c4440bdc7bb2 + - SHA1=4d41248078181c7f61e6e4906aa96bbdea320dc2 + - SHA1=0ff2ad8941fbb80cbccb6db7db1990c01c2869b1 + - SHA1=6d3c760251d6e6ea7ff4f4fcac14876fac829cf9 + - SHA1=20cf02c95e329cf2fd4563cddcbd434aad81ccb4 + - SHA1=414cd15d6c991d19fb5be02e3b9fb0e6c5ce731c - SHA1=e835776e0dc68c994dd18e8628454520156c93e3 - - SHA1=2e3de9bff43d7712707ef8a0b10f7e4ad8427fd8 - - SHA1=b3c111d7192cfa8824e5c9b7c0660c37978025d6 - - SHA1=3f6a997b04d2299ba0e9f505803e8d60d0755f44 - - SHA1=d6de8983dbd9c4c83f514f4edf1ac7be7f68632f + - SHA1=99201c9555e5faf6e8d82da793b148311f8aa4b8 + - SHA1=97bc298a1d12a493bf14e6523e4ff48d64832954 + - SHA1=fb349c3cde212ef33a11a9d58a622dc58dff3f74 + - SHA1=8cc8974a05e81678e3d28acfe434e7804abd019c + - SHA1=b0a684474eb746876faa617a28824bee93ba24f0 - SHA1=a01c42a5be7950adbc7228a9612255ac3a06b904 - - SHA1=42bb38b0b93d83b62fe2604b154ada9314c98df7 - - SHA1=eeff4ec4ebc12c6acd2c930dc2eaaf877cfec7ec - - SHA1=f3cce7e79ab5bd055f311bb3ac44a838779270b6 - - SHA1=86e59b17272a3e7d9976c980ded939bf8bf75069 - - SHA1=3c9c86c0b215ecbab0eeb4479c204dba65258b8e - - SHA1=456a1acacaa02664517c2f2fb854216e8e967f9d - - SHA1=356172a2e12fd3d54e758aaa4ff0759074259144 - - SHA1=218e4bbdd5ce810c48b938307d01501c442b75f4 - - SHA1=3fd55927d5997d33f5449e9a355eb5c0452e0de3 - - SHA1=43011eb72be4775fec37aa436753c4d6827395d1 - - SHA1=0d6fb0cb9566b4e4ca4586f26fe0631ffa847f2c - - SHA1=1d9fd846e12104ae31fd6f6040b93fc689abf047 - - SHA1=db6170ee2ee0a3292deceb2fc88ef26d938ebf2d - - SHA1=910cb12aa49e9f35ecc4907e8304adf0dcca8cf1 - - SHA1=6cc28df318a9420b49a252d6e8aaeda0330dc67d - - SHA1=e22495d92ac3dcae5eeb1980549a9ead8155f98a - - SHA1=91ee32b464f6385fc8c44b867ca3dec665cbe886 - - SHA1=1a17cc64e47d3db7085a4dc365049a2d4552dc8a - - SHA1=e606282505af817698206672db632332e8c3d3ff - - SHA1=a92207062fb72e6e173b2ffdb12c76834455f5d3 - - SHA1=4d14d25b540bf8623d09c06107b8ca7bb7625c30 - - SHA1=aadebbcbde0e7edd35e29d98871289a75e744aad - - SHA1=cce9b82f01ec68f450f5fe4312f40d929c6a506e - - SHA1=461882bd59887617cadc1c7b2b22d0a45458c070 - - SHA1=9923c8f1e565a05b3c738d283cf5c0ed61a0b90f - - SHA1=8fafd70bae94bbc22786c9328ee9126fed54dbae - - SHA1=bdfb25cc4ed569dc0d5849545eb4abe08539029f - - SHA1=4a887ae6b773000864f9228800aab75e6ff34240 - - SHA1=f9c916d163b85057414300ca214ebdf751172ecf - - SHA1=80ea425e193bd0e05161e8e1dc34fb0eae5f9017 - - SHA1=a23a0627297a71a4414193e12a8c074e7bbb8a2e - - SHA1=17b3163aecd1f512f1603548ef6eb4947fbec95e - - SHA1=72f16e6a18ba87248dd72f52445c916ad2e4edc2 - - SHA1=c4ce0bb8a939c4f4cff955d9b3cdd9eb52746cc9 - - SHA1=7c625de858710d3673f6cb0cd8d0643d5422c688 - - SHA1=755349d56cdd668ca22eebc4fc89f0cccef47327 - - SHA1=432fa24e0ce4b3673113c90b34d6e52dc7bac471 - - SHA1=e700fcfae0582275dbaee740f4f44b081703d20d - - SHA1=cb3de54667548a5c9abf5d8fa47db4097fcee9f1 - - SHA1=c52cef5b9e1d4a78431b7af56a6fdb6aa1bcad65 - - SHA1=0d27a3166575ec5983ec58de2591552cfa90ef92 - - SHA1=e41808b022656befb7dc42bbeceaf867e2fec6b2 - - SHA1=36397c6879978223ba52acd97da99e8067ab7f05 + - SHA1=a22dead5cdf05bd2f79a4d0066ffcf01c7d303ec + - SHA1=f7ce71891738a976cd8d4b516c8d7a8e2f6b0ad6 + - SHA1=441f87633ee6fbea5dee1268d1b9b936a596464d + - SHA1=da9cea92f996f938f699902482ac5313d5e8b28e + - SHA1=32f27451c377c8b5ea66be5475c2f2733cffe306 + - SHA1=58ebfb7de214ee09f6bf71c8cc9c139dd4c8b016 + - SHA1=f5293ac70d75cdfe580ff6a9edcc83236012eaf1 + - SHA1=2d503a2457a787014a1fdd48a2ece2e6cbe98ea7 + - SHA1=0b63e76fad88ac48dbfc7cf227890332fcd994a5 - SHA1=3ccf1f3ac636a5e21b39ede48ff49fa23e05413f - - SHA1=8f4b79b8026da7f966d38a8ba494c113c5e3894b - - SHA1=4c16dcc7e6d7dd29a5f6600e50fc01a272c940e1 - - SHA1=a9b8d7afa2e4685280aebbeb162600cfce4e48c8 - - SHA1=cb212a826324909fdedd2b572a59a5be877f1d7d - - SHA1=663803d7ab5aff28be37c2e7e8c7b98b91c5733e - - SHA1=b70321d078f2e9c9826303bdc87ba9b7be290807 - - SHA1=6e191d72b980c8f08a0f60efa01f0b5bf3b34afb - - SHA1=67dfd415c729705396ce54166bd70faf09ac7f10 - - SHA1=56af49e030eb85528e82849d7d1b6147f3c4973e - - SHA1=53f7a84a8cebe0e3f84894c6b9119466d1a8ddaf - - SHA1=d73dabcb3f55935b701542fd26875006217ebbbe - - SHA1=a6fe4f30ca7cb94d74bc6d42cdd09a136056952e - - SHA1=2871a631f36cd1ea2fd268036087d28070ef2c52 - - SHA1=844d2345bde50bf8ee7e86117cf7b8c6e6f00be4 - - SHA1=0634878c3f6048a38ec82869d7c6df2f69f3e210 + - SHA1=160a237295a9e5cbb64ca686a84e47553a14f71d + - SHA1=f5d58452620b55c2931cba75eb701f4cde90a9e4 + - SHA1=a24840e32071e0f64e1dff8ca540604896811587 + - SHA1=fad8e308f6d2e6a9cfaf9e6189335126a3c69acb + - SHA1=6da2dd8a0b4c0e09a04613bbabfc07c0b848ec77 + - SHA1=35829e096a15e559fcbabf3441d99e580ca3b26e + - SHA1=f049e68720a5f377a5c529ca82d1147fe21b4c33 + - SHA1=c4454a3a4a95e6772acb8a3d998b78a329259566 + - SHA1=5291b17205accf847433388fe17553e96ad434ec + - SHA1=8b037d7a7cb612eabd8e20a9ce93afd92a6db2c2 + - SHA1=0cca79962d9af574169f5dec12b1f4ca8e5e1868 + - SHA1=87d47340d1940eaeb788523606804855818569e3 + - SHA1=272ffcda920a8e2440eb0d31dcd05485e0d597ad + - SHA1=e28b754d4d332ea57349110c019d841cf4d27356 + - SHA1=d1c38145addfed1bcd1b400334ff5a5e2ef9a5c6 + - SHA1=c201d5d0ab945095c3b1a356b3b228af1aa652fc + - SHA1=39e57a0bb3b349c70ad5f11592f9282860bbcc0a + - SHA1=5622caf22032e5cbef52f48077cfbcbbbe85e961 + - SHA1=d8498707f295082f6a95fd9d32c9782951f5a082 + - SHA1=da03799bb0025a476e3e15cc5f426e5412aeef02 + - SHA1=b5dfa3396136236cc9a5c91f06514fa717508ef5 + - SHA1=ba63502aaf8c5a7c2464e83295948447e938a844 - SHA1=21ce232de0f306a162d6407fe1826aff435b2a04 - - SHA1=4c18754dca481f107f0923fb8ef5e149d128525d - - SHA1=ccdd3a1ebe9a1c8f8a72af20a05a10f11da1d308 - - SHA1=ed40c1f7da98634869b415530e250f4a665a8c48 - - SHA1=7ba19a701c8af76988006d616a5f77484c13cb0a - - SHA1=d8e8dcc8531b8d07f8dabc9e79c19aac6eeca793 - - SHA1=f999709e5b00a68a0f4fa912619fe6548ad0c42d - - SHA1=bc2f3850c7b858340d7ed27b90e63b036881fd6c - - SHA1=d25340ae8e92a6d29f599fef426a2bc1b5217299 - - SHA1=94b014123412fbe8709b58ec72594f8053037ae9 + - SHA1=36a6f75f05ac348af357fdecbabe1a184fe8d315 + - SHA1=03257294ee74f69881002c4bf764b9cb83b759d6 + - SHA1=6b54f8f137778c1391285fee6150dfa58a8120b1 + - SHA1=1045c63eccb54c8aee9fd83ffe48306dc7fe272c + - SHA1=8f4b79b8026da7f966d38a8ba494c113c5e3894b + - SHA1=f736ccbb44c4de97cf9e9022e1379a4f58f5a5b8 + - SHA1=d612165251d5f1dcfb1f1a762c88d956f49ce344 + - SHA1=fac870d438bf62ecd5d5c8c58cc9bfda6f246b8b + - SHA1=86b1186a4e282341daf2088204ab9ff2d0402d28 + - SHA1=b8de3a1aeeda9deea43e3f768071125851c85bd0 + - SHA1=0cac0dbaa7adb7bba6e92c7cd2d514be7e86a914 + - SHA1=1b25fbab2dbee5504dc94fbcc298cd8669c097a8 + - SHA1=28b1c0b91eb6afd2d26b239c9f93beb053867a1a + - SHA1=8d6d6745a2adc9e5aa025c38875554ae6440d1ad + - SHA1=f42aa04b69a2e2241958b972ef24b65f91c3af12 + - SHA1=44a3a00394a6d233a27189482852babf070ffebe + - SHA1=3e406325a717d7163ca31e81beae822d03cbe3d8 + - SHA1=fc154983af4a5be15ae1e4b54e2050530b8bc057 + - SHA1=a3636986cdcd1d1cb8ab540f3d5c29dcc90bb8f0 + - SHA1=f9c916d163b85057414300ca214ebdf751172ecf + - SHA1=195b91a1a43de8bfb52a4869fbf53d7a226a6559 + - SHA1=d62fa51e520022483bdc5847141658de689c0c29 + - SHA1=9329a0ce2749a3a6bea2028ce7562d74c417db64 + - SHA1=cfdb2085eaf729c7967f5d4efe16da3d50d07a23 + - SHA1=184729ec2ffd0928a408255a23b3f532ffb3db3d + - SHA1=45a9f95a7a018925148152b888d09d478d56bbf5 + - SHA1=a5f9aef55c64722ff2db96039af3b9c7dd8163e3 + - SHA1=483e58ed495e4067a7c42ca48e8a5f600b14e018 + - SHA1=b9b72a5be3871ddc0446bae35548ea176c4ea613 + - SHA1=18f09ec53f0b7d2b1ab64949157e0e84628d0f0a + - SHA1=de2b56ef7a30a4697e9c4cdcae0fc215d45d061d + - SHA1=e2e7a2b2550b889235aafd9ffd1966ccd20badfe + - SHA1=016aa643fbd8e10484741436bcacc0d9eee483c8 + - SHA1=5c88d9fcc491c7f1078c224e1d6c9f5bda8f3d8a + - SHA1=86e893e59352fcb220768fb758fcc5bbd91dd39e + - SHA1=1568117f691b41f989f10562f354ee574a6abc2d + - SHA1=5c2262f9e160047b9f4dee53bbfd958ec27ec22e + - SHA1=cb3de54667548a5c9abf5d8fa47db4097fcee9f1 + - SHA1=8db4376a86bd2164513c178a578a0bf8d90e7292 + - SHA1=4a04596acf79115f15add3921ce30a96f594d7ce + - SHA1=16a091bfd1fd616d4607cac367782b1d2ab07491 + - SHA1=cf664e30f8bd548444458eef6d56d5c2e2713e2a + - SHA1=0466e90bf0e83b776ca8716e01d35a8a2e5f96d3 + - SHA1=f544f25104fe997ec873f5cec64c7aa722263fb4 + - SHA1=be797c91768ac854bd3b82a093e55db83da0cb11 + - SHA1=cea540a2864ece0a868d841ab27680ff841fcbe6 + - SHA1=b4f1877156bf3157bff1170ba878848b2f22d2d5 + - SHA1=55cffb0ef56e52686b0c407b94bbea3701d6eccd + - SHA1=b6543d006cb2579fb768205c479524e432c04204 + - SHA1=879b32fcf78044cbc74b57717ab3ae18e77bc2fb + - SHA1=e92817a8744ebc4e4fa5383cdce2b2977f01ecd4 + - SHA1=4a7324ca485973d514fd087699f6d759ff32743b + - SHA1=e41808b022656befb7dc42bbeceaf867e2fec6b2 + - SHA1=1e09f3dd6ba9386fa9126f0116e49c2371401e01 + - SHA1=5bdd44eb321557c5d3ab056959397f0048ac90e6 + - SHA1=42bb38b0b93d83b62fe2604b154ada9314c98df7 + - SHA1=c47b890dda9882f9f37eccc27d58d6a774a2901f + - SHA1=2cc70b772b42e0208f345c7c70d78f7536812f99 + - SHA1=a7948a4e9a3a1a9ed0e4e41350e422464d8313cd + - SHA1=b7a2f2760f9819cb242b2e4f5b7bab0a65944c81 + - SHA1=7a1689cde189378e7db84456212b0e438f9bf90a + - SHA1=1d0df45ee3fa758f0470e055915004e6eae54c95 + - SHA1=c6920171fa6dff2c17eb83befb5fd28e8dddf5f0 + - SHA1=0a6e0f9f3d7179a99345d40e409895c12919195b + - SHA1=2dd916cb8a9973b5890829361c1f9c0d532ba5d6 + - SHA1=bb962c9a8dda93e94fef504c4159de881e4706fe + - SHA1=dcfeca5e883a084e89ecd734c4528b922a1099b9 + - SHA1=f56fec3f2012cd7fc4528626debc590909ed74b6 + - SHA1=d126c6974a21e9c5fdd7ff1ca60bcc37c9353b47 - SHA1=a6aa7926aa46beaf9882a93053536b75ef2c7536 - - SHA1=3059bc49e027a79ff61f0147edbc5cd56ad5fc2d - - SHA1=fcde5275ee1913509927ce5f0f85e6681064c9d2 - - SHA1=0ed0c4d6c3b6b478cbfd7fb0bd1e1b5457a757cc - - SHA1=a6a71fb4f91080aff2a3a42811b4bd86fb22168d - - SHA1=c1a5aacf05c00080e04d692a99c46ab445bf8b6e - - SHA1=10b30bdee43b3a2ec4aa63375577ade650269d25 - - SHA256=d9e8be11a19699903016f39f95c9c5bf1a39774ecea73670f2c3ed5385ebfe4c - - SHA256=ddbf5ecca5c8086afde1fb4f551e9e6400e94f4428fe7fb5559da5cffa654cc1 - - SHA256=6f55c148bb27c14408cf0f16f344abcd63539174ac855e510a42d78cfaec451c - - SHA256=146d77e80ca70ea5cb17bfc9a5cea92334f809cbdc87a51c2d10b8579a4b9c88 - - SHA256=7c0f77d103015fc29379ba75d133dc3450d557b0ba1f7495c6b43447abdae230 - - SHA256=c470c9db58840149ce002f3e6003382ecf740884a683bae8f9d10831be218fa2 - - SHA256=bceaf970b60b4457eca3c181f649a1c67f4602778171e53d9bdc9b97a09603ca - - SHA256=7462b7ae48ae9469474222d4df2f0c4f72cdef7f3a69a524d4fccc5ed0fd343f - - SHA256=c0ae3349ebaac9a99c47ec55d5f7de00dc03bd7c5cd15799bc00646d642aa8de - - SHA256=7c933f5d07ccb4bd715666cd6eb35a774b266ddd8d212849535a54192a44f667 - - SHA256=ac63c26ca43701dddaa7fb1aea535d42190f88752900a03040fd5aaa24991e25 - - SHA256=29a90ae1dcee66335ece4287a06482716530509912be863c85a2a03a6450a5b6 - - SHA256=d7ddf874304556f8a10942a29b3d387cb5155a7419f87813557fe728cb14806d - - SHA256=6b71b7f86e41540a82d7750a698e0386b74f52962b879cbb46f17935183cd2c7 - - SHA256=b6fd51e1f57a03006953e84fd56cc2821cc19e7c77c0474e1110aabaacaf03df - - SHA256=e3b257357be41a18319332df7023c4407e2b93ac4c9e0c6754032e29f3763eac - - SHA256=6c5c6c350c8dd4ca90a8cca0ed1eeca185ebc67b1100935c8f03eb3032aca388 - - SHA256=475e5016c9c0f5a127896f9179a1b1577a67b357f399ab5a1e68aab07134729a - - SHA256=49f75746eebe14e5db11706b3e58accc62d4034d2f1c05c681ecef5d1ad933ba - - SHA256=a2096b460e31451659b0dde752264c362f47254c8191930bc921ff16a4311641 - - SHA256=14938f68957ede6e2b742a550042119a8fbc9f14427fb89fa53fff12d243561c - - SHA256=34e0364a4952d914f23f271d36e11161fb6bb7b64aea22ff965a967825a4a4bf - - SHA256=385485e643aa611e97ceae6590c6a8c47155886123dbb9de1e704d0d1624d039 - - SHA256=bdcacee3695583a0ca38b9a786b9f7334bf2a9a3387e4069c8e6ca378b2791d0 - - SHA256=f8d6ce1c86cbd616bb821698037f60a41e129d282a8d6f1f5ecdd37a9688f585 - - SHA256=41eeeb0472c7e9c3a7146a2133341cd74dd3f8b5064c9dee2c70e5daa060954f - - SHA256=eea53103e7a5a55dc1df79797395a2a3e96123ebd71cdd2db4b1be80e7b3f02b - - SHA256=84bf1d0bcdf175cfe8aea2973e0373015793d43907410ae97e2071b2c4b8e2d4 - - SHA256=32e1a8513eee746d17eb5402fb9d8ff9507fb6e1238e7ff06f7a5c50ff3df993 - - SHA256=423d58265b22504f512a84faf787c1af17c44445ae68f7adcaa68b6f970e7bd5 - - SHA256=52a90fd1546c068b92add52c29fbb8a87d472a57e609146bbcb34862f9dcec15 - - SHA256=d9a3dc47699949c8ec0c704346fb2ee86ff9010daa0dbac953cfa5f76b52fcd1 - - SHA256=950a4c0c772021cee26011a92194f0e58d61588f77f2873aa0599dff52a160c9 - - SHA256=87e094214feb56a482cd8ae7ee7c7882b5a8dccce7947fdaa04a660fa19f41e5 - - SHA256=543991ca8d1c65113dff039b85ae3f9a87f503daec30f46929fd454bc57e5a91 - - SHA256=326b53365f8486c78608139cac84619eff90be361f7ade9db70f9867dd94dcc9 - - SHA256=4da08c0681fbe028b60a1eaf5cb8890bd3eba4d0e6a8b976495ddcd315e147ba - - SHA256=1c8dfa14888bb58848b4792fb1d8a921976a9463be8334cff45cc96f1276049a - - SHA256=45ba688a4bded8a7e78a4f5b0dc21004e951ddceb014bb92f51a3301d2fbc56a - - SHA256=ae6fb53e4d8122dba3a65e5fa59185b36c3ac9df46e82fcfb6731ab55c6395aa - - SHA256=e5b0772be02e2bc807804874cf669e97aa36f5aff1f12fa0a631a3c7b4dd0dc8 - - SHA256=5f487829527802983d5c120e3b99f3cf89333ca14f5e49ac32df0798cfb1f7aa - - SHA256=9254f012009d55f555418ff85f7d93b184ab7cb0e37aecdfdab62cfe94dea96b - - SHA256=eef68fdc5df91660410fb9bed005ed08c258c44d66349192faf5bb5f09f5fa90 - - SHA256=ada4e42bf5ef58ef1aad94435441003b1cc1fcaa5d38bfdbe1a3d736dc451d47 - - SHA256=0e9072759433abf3304667b332354e0c635964ff930de034294bf13d40da2a6f - - SHA256=3ec5ad51e6879464dfbccb9f4ed76c6325056a42548d5994ba869da9c4c039a8 - - SHA256=4e3eb5b9bce2fd9f6878ae36288211f0997f6149aa8c290ed91228ba4cdfae80 - - SHA256=88df37ede18bea511f1782c1a6c4915690b29591cf2c1bf5f52201fbbb4fa2b9 - - SHA256=7149fbd191d7e4941a32a3118ab017426b551d5d369f20c94c4f36ae4ef54f26 - - SHA256=f29073dc99cb52fa890aae80037b48a172138f112474a1aecddae21179c93478 - - SHA256=1c1251784e6f61525d0082882a969cb8a0c5d5359be22f5a73e3b0cd38b51687 - - SHA256=5e27fe26110d2b9f6c2bad407d3d0611356576b531564f75ff96f9f72d5fcae4 - - SHA256=60c6f4f34c7319cb3f9ca682e59d92711a05a2688badbae4891b1303cd384813 - - SHA256=626fae47811450d080d08c3d9fd890aa64bfecdc45eacd42a40850c1833c8763 - - SHA256=04a85e359525d662338cae86c1e59b1d7aa9bd12b920e8067503723dc1e03162 - - SHA256=1aa8ba45f9524847e2a36c0dc6fd80162923e88dc1be217dde2fb5894c65ff43 - - SHA256=bb0742036c82709e02f25f98a9ff37c36a8c228bcaa98e40629fac8cde95b421 - - SHA256=c8f0bb5d8836e21e7a22a406c69c01ba7d512a808c37c45088575d548ee25caa - - SHA256=b4c07f7e7c87518e8950eb0651ae34832b1ecee56c89cdfbd1b4efa8cf97779f - - SHA256=59626cac380d8fe0b80a6d4c4406d62ba0683a2f0f68d50ad506ca1b1cf25347 - - SHA256=6c64688444d3e004da77dcfb769d064bb38afceeef7ff915dfc71e60e19ff18a - - SHA256=e2d6cdc3d8960a50d9f292bb337b3235956a61e4e8b16cf158cb979b777f42aa - - SHA256=9fa120bda98633e30480d8475c9ac6637470c4ca7c63763560bf869138091b01 - - SHA256=3301b49b813427fa37a719988fe6446c6f4468dfe15aa246bec8d397f62f6486 - - SHA256=ee3ff12943ced401e2b6df9e66e8a0be8e449fa9326cab241f471b2d8ffefdd7 - - SHA256=7837cb350338c4958968d06b105466da6518f5bb522a6e70e87c0cad85128408 - - SHA256=45c3d607cb57a1714c1c604a25cbadf2779f4734855d0e43aa394073b6966b26 - - SHA256=1aaf4c1e3cb6774857e2eef27c17e68dc1ae577112e4769665f516c2e8c4e27b - - SHA256=9fc29480407e5179aa8ea41682409b4ea33f1a42026277613d6484e5419de374 - - SHA256=0d30c6c4fa0216d0637b4049142bc275814fd674859373bd4af520ce173a1c75 - - SHA256=19a212e6fc324f4cb9ee5eba60f5c1fc0191799a4432265cbeaa3307c76a7fc0 - - SHA256=a7c2e7910942dd5e43e2f4eb159bcd2b4e71366e34a68109548b9fb12ac0f7cc - - SHA256=9f1229cd8dd9092c27a01f5d56e3c0d59c2bb9f0139abf042e56f343637fda33 - - SHA256=092349aebdac28294dbad1656759d8461f362d1a36b01054dccf861d97beadf0 - - SHA256=bb68552936a6b0a68fb53ce864a6387d2698332aac10a7adfdd5a48b97027ce3 - - SHA256=84739539aa6a9c9cb3c48c53f9399742883f17f24e081ebfa7bfaaf59f3ed451 - - SHA256=be8dd2d39a527649e34dc77ef8bc07193a4234b38597b8f51e519dadc5479ec2 - - SHA256=b61869b7945be062630f1dd4bae919aecee8927f7e1bc3954a21ff763f4c0867 - - SHA256=2298e838e3c015aedfb83ab18194a2503fe5764a862c294c8b39c550aab2f08e - - SHA256=08eb2d2aa25c5f0af4e72a7e0126735536f6c2c05e9c7437282171afe5e322c6 - - SHA256=707b4b5f5c4585156d8a4d8c39cf26729f5ad05d7f77b17f48e670e808e3e6a0 - - SHA256=31f4140c12ac31f5729a8de4dc051d3acd07783564604df831a2a6722c979192 - - SHA256=19d0fc91b70d7a719f7a28b4ad929f114bf1de94a4c7cba5ad821285a4485da0 - - SHA256=c9014b03866bf37faa8fdb16b6af7cfec976aaef179fd5797d0c0bf8079d3a8c - - SHA256=e50b25d94c1771937b2f632e10eea875ac6b19c57da703d52e23ad2b6299f0ae - - SHA256=e3f2ee22dec15061919583e4beb8abb3b29b283e2bcb46badf2bfde65f5ea8dd - - SHA256=d15a0bc7a39bbeff10019496c1ed217b7c1b26da37b2bdd46820b35161ddb3c4 - - SHA256=8d6febd54ce0c98ea3653e582f7791061923a9a4842bd4a1326564204431ca9f - - SHA256=79e87b93fbed84ec09261b3a0145c935f7dfe4d4805edfb563b2f971a0d51463 - - SHA256=9eba5d1545fdbf37cf053ac3f3ba45bcb651b8abb7805cbfdfb5f91ea294fb95 - - SHA256=841335eeb6af68dce5b8b24151776281a751b95056a894991b23afae80e9f33b - - SHA256=c825a47817399e988912bb75106befaefae0babc0743a7e32b46f17469c78cad - - SHA256=b37b3c6877b70289c0f43aeb71349f7344b06063996e6347c3c18d8c5de77f3b - - SHA256=97363f377aaf3c01641ac04a15714acbec978afb1219ac8f22c7e5df7f2b2d56 - - SHA256=3ac5e01689a3d745e60925bc7faca8d4306ae693e803b5e19c94906dc30add46 - - SHA256=45abdbcd4c0916b7d9faaf1cd08543a3a5178871074628e0126a6eda890d26e0 - - SHA256=7cb497abc44aad09a38160d6a071db499e05ff5871802ccc45d565d242026ee7 - - SHA256=29e0062a017a93b2f2f5207a608a96df4d554c5de976bd0276c2590a03bd3e94 - - SHA256=a0e583bd88eb198558442f69a8bbfc96f4c5c297befea295138cfd2070f745c5 - - SHA256=a6f7897cd08fe9de5e902bb204ff87215584a008f458357d019a50d6139ca4af - - SHA256=2bbe65cbec3bb069e92233924f7ee1f95ffa16173fceb932c34f68d862781250 - - SHA256=f05b1ee9e2f6ab704b8919d5071becbce6f9d0f9d0ba32a460c41d5272134abe - - SHA256=fa875178ae2d7604d027510b0d0a7e2d9d675e10a4c9dda2d927ee891e0bcb91 - - SHA256=ea3c5569405ed02ec24298534a983bcb5de113c18bc3fd01a4dd0b5839cd17b9 - - SHA256=b9a4e40a5d80fedd1037eaed958f9f9efed41eb01ada73d51b5dcd86e27e0cbf - - SHA256=43ba8d96d5e8e54cab59d82d495eeca730eeb16e4743ed134cdd495c51a4fc89 - - SHA256=af095de15a16255ca1b2c27dad365dff9ac32d2a75e8e288f5a1307680781685 - - SHA256=ce231637422709d927fb6fa0c4f2215b9c0e3ebbd951fb2fa97b8e64da479b96 - - SHA256=d0e25b879d830e4f867b09d6540a664b6f88bad353cd14494c33b31a8091f605 - - SHA256=0b542e47248611a1895018ec4f4033ea53464f259c74eb014d018b19ad818917 - - SHA256=0da746e49fd662be910d0e366934a7e02898714eaaa577e261ab40eb44222b5c - - SHA256=81939e5c12bd627ff268e9887d6fb57e95e6049f28921f3437898757e7f21469 - - SHA256=dde6f28b3f7f2abbee59d4864435108791631e9cb4cdfb1f178e5aa9859956d8 - - SHA256=453be8f63cc6b116e2049659e081d896491cf1a426e3d5f029f98146a3f44233 - - SHA256=5da0ffe33987f8d5fb9c151f0eff29b99f42233b27efcad596add27bdc5c88ff - - SHA256=8138b219a2b1be2b0be61e5338be470c18ad6975f11119aee3a771d4584ed750 - - SHA256=cbf74bed1a4d3d5819b7c50e9d91e5760db1562d8032122edac6f0970f427183 - - SHA256=00b3ff11585c2527b9e1c140fd57cb70b18fd0b775ec87e9646603056622a1fd - - SHA256=c35f3a9da8e81e75642af20103240618b641d39724f9df438bf0f361122876b0 - - SHA256=8c748ae5dcc10614cc134064c99367d28f3131d1f1dda0c9c29e99279dc1bdd9 - - SHA256=aaa3459bcac25423f78ed72dbae4d7ef19e7c5c65770cbe5210b14e33cd1816c - - SHA256=1cedd5815bb6e20d3697103cfc0275f5015f469e6007e8cac16892c97731c695 - - SHA256=0296e2ce999e67c76352613a718e11516fe1b0efc3ffdb8918fc999dd76a73a5 - - SHA256=436ccab6f62fa2d29827916e054ade7acae485b3de1d3e5c6c62d3debf1480e7 - - SHA256=69e3fda487a5ec2ec0f67b7d79a5a836ff0036497b2d1aec514c67d2efa789b2 - - SHA256=c50f8ab8538c557963252b702c1bd3cee4604b5fc2497705d2a6a3fd87e3cc26 - - SHA256=b583414fcee280128788f7b39451c511376fe821f455d4f3702795e96d560704 - - SHA256=6e944ae1bfe43a8a7cd2ea65e518a30172ce8f31223bdfd39701b2cb41d8a9e7 - - SHA256=53bd8e8d3542fcf02d09c34282ebf97aee9515ee6b9a01cefd81baa45c6fd3d6 - - SHA256=3c4207c90c97733fae2a08679d63fbbe94dfcf96fdfdf88406aa7ab3f80ea78f - - SHA256=71ff60722231c7641ad593756108cf6779dbaad21c7b08065fb1d4e225eab14d - - SHA256=54488a8c7da53222f25b6ed74b0dedc55d00f5fa80f4eaf6daac28f7c3528876 - - SHA256=1f15fd9b81092a98fabcc4ac95e45cec2d9ff3874d2e3faac482f3e86edad441 - - SHA256=b17507a3246020fa0052a172485d7b3567e0161747927f2edf27c40e310852e0 - - SHA256=c08581e3e444849729c5b956d0d6030080553d0bc6e5ae7e9a348d45617b9746 - - SHA256=1963d5a0e512b72353953aadbe694f73a9a576f0241a988378fa40bf574eda52 - - SHA256=ffc72f0bde21ba20aa97bee99d9e96870e5aa40cce9884e44c612757f939494f - - SHA256=87e38e7aeaaaa96efe1a74f59fca8371de93544b7af22862eb0e574cec49c7c3 - - SHA256=a13054f349b7baa8c8a3fcbd31789807a493cc52224bbff5e412eb2bd52a6433 - - SHA256=c344e92a6d06155a217a9af7b4b35e6653665eec6569292e7b2e70f3a3027646 - - SHA256=dfaefd06b680f9ea837e7815fc1cc7d1f4cc375641ac850667ab20739f46ad22 - - SHA256=16e2b071991b470a76dff4b6312d3c7e2133ad9ac4b6a62dda4e32281952fb23 - - SHA256=8ae383546761069b26826dfbf2ac0233169d155bca6a94160488092b4e70b222 - - SHA256=dbc604b4e01362a3e51357af4a87686834fe913852a4e0a8c0d4c1a0f7d076ed - - SHA256=7133a461aeb03b4d69d43f3d26cd1a9e3ee01694e97a0645a3d8aa1a44c39129 - - SHA256=0cfb7ea2cc515a7fe913ab3619cbfcf1ca96d8cf72dc350905634a5782907a49 - - SHA256=4ab41816abbf14d59e75b7fad49e2cb1c1feb27a3cb27402297a2a4793ff9da7 - - SHA256=cf3a7d4285d65bf8688215407bce1b51d7c6b22497f09021f0fce31cbeb78986 - - SHA256=e51ec2876af3c9c3f1563987a9a35a10f091ea25ede16b1a34ba2648c53e9dfc - - SHA256=c089a31ac95d41ed02d1e4574962f53376b36a9e60ff87769d221dc7d1a3ecfa - - SHA256=30abc0cc700fdebc74e62d574addc08f6227f9c7177d9eaa8cbc37d5c017c9bb - - SHA256=ea85bbe63d6f66f7efee7007e770af820d57f914c7f179c5fee3ef2845f19c41 - - SHA256=49ef680510e3dac6979a20629d10f06822c78f45b9a62ec209b71827a526be94 - - SHA256=d9a2bf0f5ba185170441f003dc46fbb570e1c9fdf2132ab7de28b87ba7ad1a0c - - SHA256=49ed27460730b62403c1d2e4930573121ab0c86c442854bc0a62415ca445a810 - - SHA256=2b186926ed815d87eaf72759a69095a11274f5d13c33b8cc2b8700a1f020be1d - - SHA256=dd573f23d656818036fc9ae1064eda31aca86acb9bc44a6e127db3ea112a9094 - - SHA256=dafa4459d88a8ab738b003b70953e0780f6b8f09344ce3cd631af70c78310b53 - - SHA256=e279e425d906ba77784fb5b2738913f5065a567d03abe4fd5571695d418c1c0f - - SHA256=455bc98ba32adab8b47d2d89bdbadca4910f91c182ab2fc3211ba07d3784537b - - SHA256=5f6547e9823f94c5b94af1fb69a967c4902f72b6e0c783804835e6ce27f887b0 - - SHA256=28999af32b55ddb7dcfc26376a244aa2fe297233ce7abe4919a1aef2f7e2cee7 - - SHA256=9a91d6e83b8fdec536580f6617f10dfc64eedf14ead29a6a644eb154426622ba - - SHA256=73fddd441a764e808ed6d6b8f3d0d13713e61221aa3cfef7da91cdaf112fe061 - - SHA256=bcfc2c9883e6c1b8429be44cc4db988a9eecb544988fbd756d18cfca6201876f - - SHA256=c725919e6357126d512c638f993cf572112f323da359645e4088f789eb4c7b8c - - SHA256=cbb8239a765bf5b2c1b6a5c8832d2cab8fef5deacadfb65d8ed43ef56d291ab6 - - SHA256=8cfd5b2102fbc77018c7fe6019ec15f07da497f6d73c32a31f4ba07e67ec85d9 - - SHA256=a903f329b70f0078197cb7683aae1bb432eaf58572fe572f7cb4bc2080042d7e - - SHA256=b3e645e8817696fa5d5e2255f9328f3b6a2e5fce91737f4d654ff155dc9851e5 - - SHA256=2d195cd4400754cc6f6c3f8ab1fe31627932c3c1bf8d5d0507c292232d1a2396 - - SHA256=84df20b1d9d87e305c92e5ffae21b10b325609d59d835a954dbd8750ef5dabf4 - - SHA256=d6827cd3a8f273a66ecc33bb915df6c7dea5cc1b8134b0c348303ef50db33476 - - SHA256=f37d609ea1f06660d970415dd3916c4c153bb5940bf7d2beb47fa34e8a8ffbfc - - SHA256=16a2e578bc8683f17a175480fea4f53c838cfae965f1d4caa47eaf9e0b3415c1 - - SHA256=613d6cc154586c21b330018142a89eac4504e185f0be7f86af975e5b6c046c55 - - SHA256=636b4c1882bcdd19b56370e2ed744e059149c64c96de64ac595f20509efa6220 - - SHA256=14adbf0bc43414a7700e5403100cff7fc6ade50bebfab16a17acf2fdda5a9da8 - - SHA256=bac709c49ddee363c8e59e515f2f632324a0359e932b7d8cb1ce2d52a95981aa - - SHA256=67e9d1f6f7ed58d86b025d3578cb7a3f3c389b9dd425b7f46bb1056e83bffc78 - - SHA256=32cccc4f249499061c0afa18f534c825d01034a1f6815f5506bf4c4ff55d1351 - - SHA256=2da330a2088409efc351118445a824f11edbe51cf3d653b298053785097fe40e - - SHA256=ee45fd2d7315fd039f3585a66e7855ba4af9d4721e1448e602623de14e932bbe - - SHA256=7da6113183328d4fddf6937c0c85ef65ba69bfe133b1146193a25bcf6ae1f9dd - - SHA256=77c5e95b872b1d815d6d3ed28b399ca39f3427eeb0143f49982120ff732285a9 - - SHA256=033c4634ab1a43bc3247384864f3380401d3b4006a383312193799dded0de4c7 - - SHA256=923ebbe8111e73d5b8ecc2db10f8ea2629a3264c3a535d01c3c118a3b4c91782 - - SHA256=d7a61c671eab1dfaa62fe1088a85f6d52fb11f2f32a53822a49521ca2c16585e - - SHA256=0c512b615eac374d4d494e3c36838d8e788b3dc2691bf27916f7f42694b14467 - - SHA256=8bf01cd6d55502838853851703eb297ec71361fa9a0b088a30c2434f4d2bf9c6 - - SHA256=4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1 - - SHA256=845f1e228de249fc1ddf8dc28c39d03e8ad328a6277b6502d3932e83b879a65a - - SHA256=18f306b6edcfacd33b7b244eaecdd0986ef342f0d381158844d1f0ee1ac5c8d7 - - SHA256=1228d0b6b4f907384346f64e918cc28021fe1cd7d4e39687bca34a708998261a - - SHA256=5ee292b605cd3751a24e5949aae615d472a3c72688632c3040dc311055b75a92 - - SHA256=85866e8c25d82c1ec91d7a8076c7d073cccf421cf57d9c83d80d63943a4edd94 - - SHA256=12eda8b65ed8c1d80464a0c535ea099dffdb4981c134294cb0fa424efc85ee56 - - SHA256=6bfc0f425de9f4e7480aa2d1f2e08892d0553ed0df1c31e9bf3d8d702f38fa2e - - SHA256=46d1dc89cc5fa327e7adf3e3d6d498657240772b85548c17d2e356aac193dd28 - - SHA256=cff9aa9046bdfd781d34f607d901a431a51bb7e5f48f4f681cc743b2cdedc98c - - SHA256=31f4cfb4c71da44120752721103a16512444c13c2ac2d857a7e6f13cb679b427 - - SHA256=7ef8949637cb947f1a4e1d4e68d31d1385a600d1b1054b53e7417767461fafa7 - - SHA256=572c545b5a95d3f4d8c9808ebeff23f3c62ed41910eb162343dd5338e2d6b0b4 - - SHA256=daf549a7080d384ba99d1b5bd2383dbb1aa640f7ea3a216df1f08981508155f5 - - SHA256=8f23313adb35782adb0ba97fefbfbb8bbc5fc40ae272e07f6d4629a5305a3fa2 - - SHA256=d7c79238f862b471740aff4cc3982658d1339795e9ec884a8921efe2e547d7c3 - - SHA256=d205286bffdf09bc033c09e95c519c1c267b40c2ee8bab703c6a2d86741ccd3e - - SHA256=65329dad28e92f4bcc64de15c552b6ef424494028b18875b7dba840053bc0cdd - - SHA256=6cb51ae871fbd5d07c5aad6ff8eea43d34063089528603ca9ceb8b4f52f68ddc - - SHA256=5fad3775feb8b6f6dcbd1642ae6b6a565ff7b64eadfc9bf9777918b51696ab36 - - SHA256=fc22977ff721b3d718b71c42440ee2d8a144f3fbc7755e4331ddd5bcc65158d2 - - SHA256=26f41e4268be59f5de07552b51fa52d18d88be94f8895eb4a16de0f3940cf712 - - SHA256=de3597ae7196ca8c0750dce296a8a4f58893774f764455a125464766fcc9b3b5 - - SHA256=2f60536b25ba8c9014e4a57d7a9a681bd3189fa414eea88c256d029750e15cae - - SHA256=89b9823ed974a5b71de8468324d45b7e9d6dc914f93615ba86c6209b25b3cbf7 - - SHA256=b179e1ab6dc0b1aee783adbcad4ad6bb75a8a64cb798f30c0dd2ee8aaf43e6de - - SHA256=247aadaf17ed894fcacf3fc4e109b005540e3659fd0249190eb33725d3d3082f - - SHA256=18deed37f60b6aa8634dda2565a0485452487d7bce88afb49301a7352db4e506 - - SHA256=fed0fe2489ae807913be33827b3b11359652a127e33b64464cc570c05abd0d17 - - SHA256=e7cbfb16261de1c7f009431d374d90e9eb049ba78246e38bc4c8b9e06f324b6f - - SHA256=7164aaff86b3b7c588fc7ae7839cc09c5c8c6ae29d1aff5325adaf5bedd7c9f5 - - SHA256=ffd1aef19646ffed09b56a2ace4fc8cdf5b2f714fcca1e7ffb82256264c94b18 - - SHA256=bced04bdefad6a08c763265d6993f07aa2feb57d33ed057f162a947cf0e6668f - - SHA256=07b6d69bafcfd767f1b63a490a8843c3bb1f8e1bbea56176109b5743c8f7d357 - - SHA256=76e807b6c0214e66455f09a8de8faad40b738982ca84470f0043de0290449524 - - SHA256=654c5ba47f74008c8f49cbb97988017eec8c898adc3bb851bc6e1fdf9dcf54ad - - SHA256=119c48b79735fda0ecd973d77d9bdc6b329960caed09b38ab454236ca039d280 - - SHA256=4941c4298f4560fc1e59d0f16f84bab5c060793700b82be2fd7c63735f1657a8 + - SHA1=eb1ecad3d37bb980f908bf1a912415cff32e79e6 + - SHA1=3805e4e08ad342d224973ecdade8b00c40ed31be + - SHA1=7ba4607763c6fef1b2562b72044a20ca2a0303e2 + - SHA1=bec66e0a4842048c25732f7ea2bbe989ea400abf + - SHA1=fd87b70f94674b02d62bb01ae6e62d75c618f5c8 + - SHA1=d17656f11b899d58dca7b6c3dd6eef3d65ae88e2 + - SHA1=c1c869deee6293eee3d0d84b6706d90fab8f8558 + - SHA1=f56186b6a7aa3dd7832c9d821f9d2d93bc2a9360 + - SHA1=e9d7d7d42fd534abf52da23c0d6ec238cefde071 + - SHA1=8d0ae69fbe0c6575b6f8caf3983dd3ddc65aadb5 + - SHA1=b67945815e40b1cd90708c57c57dab12ed29da83 + - SHA1=806832983bb8cb1e26001e60ea3b7c3ade4d3471 + - SHA1=a4e2e227f984f344d48f4bf088ca9d020c63db4e + - SHA1=a34adabde63514e1916713a588905c4019f83efb + - SHA1=3270720a066492b046d7180ca6e60602c764cac7 + - SHA1=2bcb81f1b643071180e8ed8f7e42f49606669976 + - SHA1=3296844d22c87dd5eba3aa378a8242b41d59db7a + - SHA1=bb1f9cc94e83c59c90b055fe13bb4604b2c624df + - SHA1=fbc6d2448739ddec35bb5d6c94b46df4148f648d + - SHA1=d702d88b12233be9413446c445f22fda4a92a1d9 + - SHA1=6ecfc7ccc4843812bfccfb7e91594c018f0a0ff9 + - SHA1=2b0bb408ff0e66bcdf6574f1ca52cbf4015b257b + - SHA1=c520a368c472869c3dc356a7bcfa88046352e4d9 + - SHA1=254dce914e13b90003b0ae72d8705d92fe7c8dd0 + - SHA1=e9f576137181c261dc3b23871d1d822731d54a12 + - SHA1=ec1eafb87340b18c7ef3bc349fed1ddd5d3678f6 + - SHA1=1c537fd17836283364349475c6138e6667cf1164 + - SHA1=cfdf9c9125755f4e81fa7cc5410d7740fdfea4ed + - SHA1=252157ab2e33eed7aa112d1c93c720cadcee31ae + - SHA1=97f668aa01ebbbf2f5f93419d146e6608d203efd + - SHA1=9feacc95d30107ce3e1e9a491e2c12d73eef2979 + - SHA1=26c4a7b392d7e7bd7f0a2a758534e45c0d9a56ab + - SHA1=0f78974194b604122b1cd4e82768155f946f6d24 + - SHA1=3cd037fbba8aae82c1b111c9f8755349c98bcb3c + - SHA1=d363011d6991219d7f152609164aba63c266b740 + - SHA1=89909fa481ff67d7449ee90d24c167b17b0612f1 + - SHA1=db3538f324f9e52defaba7be1ab991008e43d012 + - SHA1=008a292f71f49be1fb538f876de6556ce7b5603a + - SHA1=e35969966769e7760094cbcffb294d0d04a09db6 + - SHA1=5236728c7562b047a9371403137a6e169e2026a6 + - SHA1=862387e84baaf506c10080620cc46df2bda03eea + - SHA1=c0100f8a8697a240604b3ea88848dd94947c7fd3 + - SHA1=ad05bff5fe45df9e08252717fc2bc2af57bf026f + - SHA1=a87d6eac2d70a3fbc04e59412326b28001c179de + - SHA1=637d0de7fa2a06e462dad40a575cb0fa4a38d377 + - SHA1=0904b8fa4654197eefd6380c81bbb2149ffe0634 + - SHA1=928b9b180ff5deb9f9dd3a38c4758bcf09298c47 + - SHA1=432fa24e0ce4b3673113c90b34d6e52dc7bac471 + - SHA1=bbc0b9fd67c8f4cefa3d76fcb29ff3cef996b825 + - SHA1=444f96d8943aec21d26f665203f3fb80b9a2a260 + - SHA1=e74b6dda8bc53bc687fc21218bd34062a78d8467 + - SHA1=eba5483bb47ec6ff51d91a9bdf1eee3b6344493d + - SHA1=e3048cd05573dc1d30b1088859bc728ef67aaad0 + - SHA1=537923c633d8fc94d9ae45ad9d89e5346f581f17 + - SHA1=022f7aa4d0f04d594588ae9fa65c90bcc4bda833 + - SHA1=d979353d04bf65cc92ad3412605bc81edbb75ec2 + - SHA1=7a107291a9fad0d298a606eb34798d423c4a5683 + - SHA1=12d38abbc5391369a4c14f3431715b5b76ac5a2a + - SHA1=0fd700fee341148661616ecd8af8eca5e9fa60e3 + - SHA1=3aba6dd15260875eb290e9d67992066141aa0bb0 + - SHA1=a5596d4d329add26b9ca9fa7005302148dfacfd8 + - SHA1=e6305dddd06490d7f87e3b06d09e9d4c1c643af0 + - SHA1=22fc833e07dd163315095d32ebcd3b3e377c33a4 + - SHA1=558aad879b6a47d94a968f39d0a4e3a3aaef1ef1 + - SHA1=c9522cf7f6d6637aaff096b4b16b0d81f6ee1c37 + - SHA1=d11659145d6627f3d93975528d92fb6814171f91 + - SHA1=d3d2fe8080f0b18465520785f3a955e1a24ae462 + - SHA1=6afc6b04cf73dd461e4a4956365f25c1f1162387 + - SHA1=ea37a4241fa4d92c168d052c4e095ccd22a83080 + - SHA1=72966ca845759d239d09da0de7eebe3abe86fee3 + - SHA1=93aa3bb934b74160446df3a47fa085fd7f3a6be9 + - SHA1=dc69a6cdf048e2c4a370d4b5cafd717d236374ea + - SHA1=24daa825adedcbbb1d098cbe9d68c40389901b64 + - SHA1=2bf6b88b84d27cdf0699d6d18b08a1b36310cdd1 + - SHA1=dc55217b6043d819eadebd423ff07704ee103231 + - SHA1=2ba0db7465cf4ffb272f803a9d77292b79c1e6df + - SHA1=52ea274e399df8706067fdc5ac52af0480461887 + - SHA1=d8adf4f02513367c2b273abb0bc02f7eb3a5ef19 + - SHA1=6887668eb41637bbbab285d41a36093c6b17a8fa + - SHA1=d6b1b3311263bfb170f2091d22f373c2215051b7 + - SHA1=fad014ec98529644b5db5388d96bc4f9b77dcdc3 + - SHA1=a714a2a045fa8f46d0165b78fe3eecf129c1de3a + - SHA1=a09334489fb18443c8793cb0395860518193cc3c + - SHA1=49d58f7565bacf10539bc63f1d2fe342b3c3d85a + - SHA1=e4fcb363cfe9de0e32096fa5be94a41577a89bb0 + - SHA1=6a60f5fa0dfc6c1fa55b24a29df7464ee01a9717 + - SHA1=8b86c99328e4eb542663164685c6926e7e54ac20 + - SHA1=431550db5c160b56e801f220ceeb515dc16e68d2 + - SHA1=50e2bc41f0186fdce970b80e2a2cb296353af586 + - SHA1=dd893cd3520b2015790f7f48023d833f8fe81374 + - SHA1=7626036baf98ddcb492a8ec34e58c022ebd70a80 + - SHA1=0b8b83f245d94107cb802a285e6529161d9a834d + - SHA1=c01caaa74439af49ca81cb5b200a167e7d32343c + - SHA1=26a8ab6ea80ab64d5736b9b72a39d90121156e76 + - SHA1=bdfb25cc4ed569dc0d5849545eb4abe08539029f + - SHA1=f6f7b5776001149496092a95fb10218dea5d6a6b + - SHA1=166759fd511613414d3213942fe2575b926a6226 + - SHA1=cce9b82f01ec68f450f5fe4312f40d929c6a506e + - SHA1=0a89a6f6f40213356487bfcfb0b129e4f6375180 + - SHA1=f640c94e71921479cc48d06b59aba41ffa50a769 + - SHA1=16d7ecf09fc98798a6170e4cef2745e0bee3f5c7 + - SHA1=8d59fd14a445c8f3f0f7991fa6cd717d466b3754 + - SHA1=3ca51b23f8562485820883e894b448413891183a + - SHA1=8275977e4b586e485e9025222d0a582fcb9e1e8f + - SHA1=30846313e3387298f1f81c694102133568d6d48d + - SHA1=b52886433e608926a0b6e623217009e4071b107e + - SHA1=d19d1d3aa30391922989f4c6e3f7dc4937dcefbf + - SHA1=d569d4bab86e70efbcdfdac9d822139d6f477b7c + - SHA1=091a039f5f2ae1bb0fa0f83660f4c178fd3a5a10 + - SHA1=6293ff11805cd33bccbcca9f0132bff3ae2e2534 + - SHA1=6523b3fd87de39eb5db1332e4523ce99556077dc + - SHA1=7667b72471689151e176baeba4e1cd9cd006a09a + - SHA1=1479717fab67d98bbc3665f6b12adddfca74e0ef + - SHA1=fc8fbd92f6e64682360885c188d1bdfbc14ca579 + - SHA1=3abb9d0a9d600200ae19c706e570465ef0a15643 + - SHA1=6df42ea7c0e6ee02062bf9ca2aa4aa5cd3775274 + - SHA1=c40ff3ebf6b5579108165be63250634823db32ec + - SHA1=cef5a329f7a36c76a546d9528e57245127f37246 + - SHA1=7c46ecc5ce8e5f6e236a3b169fb46bb357ac3546 + - SHA1=a32232a426c552667f710d2dcbd2fb9f9c50331d + - SHA1=755349d56cdd668ca22eebc4fc89f0cccef47327 + - SHA1=e4436c8c42ba5ffabd58a3b2256f6e86ccc907ab + - SHA1=d496a8d3e71eaacd873ccef1d1f6801e54959713 + - SHA1=437b56dc106d2e649d2c243c86729b6e6461d535 + - SHA1=f10ec1b88c3a383c2a0c03362d31960836e3fb5f + - SHA1=f3cce7e79ab5bd055f311bb3ac44a838779270b6 + - SHA1=7503a1ed7f6fbd068f8c900dd5ddb291417e3464 + - SHA1=24aafe3c727c6a3bd1942db78327ada8fcb8c084 + - SHA1=8453fc3198349cf0561c87efc329c81e7240c3da + - SHA1=51b9867c391be3ce56ba7e1c3cba8c76777245b2 + - SHA1=a7bd05de737f8ea57857f1e0845a25677df01872 + - SHA1=eb2496304073727564b513efd6387a77ce395443 + - SHA1=43419df1f9a07430a18c5f3b3cc74de621be0f8e + - SHA1=736531c76b8d9c56e26561bf430e10ecabff0186 + - SHA1=00b4e8b7644d1bf93f5ddb5740b444b445e81b02 + - SHA1=19f3343bfad0ef3595f41d60272d21746c92ffca + - SHA1=74e4e3006b644392f5fcea4a9bae1d9d84714b57 + - SHA1=5a7dd0da0aee0bdedc14c1b7831b9ce9178a0346 + - SHA1=0b6ec2aedc518849a1c61a70b1f9fb068ede2bc3 + - SHA1=c948ae14761095e4d76b55d9de86412258be7afd + - SHA1=80ea425e193bd0e05161e8e1dc34fb0eae5f9017 + - SHA1=2e546d86d3b1e4eaa92b6ec4768de79f70eb922f + - SHA1=b91c34bb846fd5b2f13f627b7da16c78e3ee7b0f + - SHA1=a6816949cd469b6e5c35858d19273936fab1bef6 + - SHA1=c02cb8256dfb37f690f2698473fe5428d17bc178 + - SHA1=c2d18ce26ce2435845f534146d7f353b662ad2b9 + - SHA1=05eff2001f595f9e2894c6b5eee756ae72379a6d + - SHA1=0a19a9c4c9185b80188da529ec9c9f45cbe73186 + - SHA1=e7d8fc86b90f75864b7e2415235e17df4d85ee31 + - SHA1=8e64c32bcfd70361956674f45964a8b0c8aa6388 + - SHA1=97941faf575e43e59fe8ee167de457c2cf75c9eb + - SHA1=7e8efd93a1dad02385ec56c8f3b1cfd23aa47977 + - SHA1=850d7df29256b4f537eddafe95cfea59fb118fe2 + - SHA1=e2f40590b404a24e775f781525d8ed01f1b1156d + - SHA1=ff9048c451644c9c5ff2ba1408b194a0970b49e6 + - SHA1=53f7fc4feb66af748f2ab295394bf4de62ae9fcc + - SHA1=3def50587309440e3b9e595bdbe4dde8d69a64e7 + - SHA1=c6d349823bbb1f5b44bae91357895dba653c5861 + - SHA1=f3029dba668285aac04117273599ac12a94a3564 + - SHA1=adab368ed3c17b8f2dc0b2173076668b6153e03a + - SHA1=c45d03076fa6e66c1b8b74b020ad84712755e3df + - SHA1=0d27a3166575ec5983ec58de2591552cfa90ef92 + - SHA1=d28b604b9bb608979cc0eab1e9e93e11c721aa3d + - SHA1=70bb3b831880e058524735b14f2a0f1a72916a4c + - SHA1=5a55c227ca13e9373b87f1ef6534533c7ce1f4fb + - SHA1=b97a8d506be2e7eaa4385f70c009b22adbd071ba + - SHA1=4075de7d7d2169d650c5ccede8251463913511e6 + - SHA1=e09b5e80805b8fe853ea27d8773e31bff262e3f7 + - SHA1=619413b5a6d6aeb4d58c409d54fe4a981dd7e4d9 + - SHA1=012db3a80faf1f7f727b538cbe5d94064e7159de + - SHA1=d9c1913a6c76b883568910094dfa1d67aad80c84 + - SHA1=49174d56cce618c77ae4013fe28861c80bf5ba97 + - SHA1=e11f48631c6e0277e21a8bdf9be513651305f0d5 + - SHA1=f6f11ad2cd2b0cf95ed42324876bee1d83e01775 + - SHA1=d5326fea00bcde2ef7155acf3285c245c9fb4ece + - SHA1=e8234c44f3b7e4c510ef868e8c080e00e2832b07 + - SHA1=9449f211c3c47821b638513d239e5f2c778dc523 + - SHA1=456a1acacaa02664517c2f2fb854216e8e967f9d + - SHA1=2c27abbbbcf10dfb75ad79557e30ace5ed314df8 + - SHA1=b314742af197a786218c6dd704b438469445eefa + - SHA1=7eb34cc1fcffb4fdb5cb7e97184dd64a65cb9371 + - SHA1=fbfabf309680fbf7c0f6f14c5a0e4840c894e393 + - SHA1=d9c09dd725bc7bc3c19b4db37866015817a516ef + - SHA1=6ed5c2313eecd97b78aa5dcdb442dd47345c9e43 + - SHA1=1f26424eaf046dbf800ae2ac52d9bb38494d061a + - SHA1=b7fa8278ab7bc485727d075e761a72042c4595f7 + - SHA1=10b9ae9286837b3bf6a00771c7e81adbdea3cbfe + - SHA1=850f15fd67d9177a50f3efef07a805b9613f50d6 + - SHA1=696d68bdbe1d684029aaad2861c49af56694473a + - SHA1=164c899638bc83099c0379ea76485194564c956c + - SHA1=15f16fe63105b8f9cc0ef2bc8f97cfa5deb40662 + - SHA1=b304cb10c88ddd8461bad429ebfd2fd1b809ac2b + - SHA1=a95a126b539989e29e68969bfab16df291e7fa8a + - SHA1=4f02fb7387ca0bc598c3bcb66c5065d08dbb3f73 + - SHA1=1e8bccbd74f194db6411011017716c8c6b730d03 + - SHA1=0cc60a56e245e70f664906b7b67dfe1b4a08a5b7 + - SHA1=7838fb56fdab816bc1900a4720eea2fc9972ef7a + - SHA1=19bd488fe54b011f387e8c5d202a70019a204adf + - SHA1=879e327292616c56bd4aafc279fbda6cc393b74d + - SHA1=45e8f87afa41143e0c5850f9e054d18ec9c8a6c0 + - SHA1=b53c360b35174bd89f97f681bf7c17f40e519eb6 + - SHA1=c3be2bbd9b3f696bc9d51d5973cc00ca059fb172 + - SHA1=5bb2d46ba666c03c56c326f0bbc85cc48a87dfa3 + - SHA1=9b8c7eda28bfad07ffe5f84a892299bc7e118442 + - SHA1=762a5b4c7beb2af675617dca6dcd6afd36ce0afd + - SHA1=6d9e22a275a5477ea446e6c56ee45671fbcbb5f6 + - SHA1=1292c7dd60214d96a71e7705e519006b9de7968f + - SHA1=7c6cad6a268230f6e08417d278dda4d66bb00d13 + - SHA1=65d8a7c2e867b22d1c14592b020c548dd0665646 + - SHA1=f61e56359c663a769073782a0a3ffd3679c2694a + - SHA1=dd2b90c9796237036ac7136a172d96274dea14c8 + - SHA1=af5b7556706e09ee9e74ee2e87eab5c0a49d2d35 + - SHA1=57cc324326ab6c4239f8c10d2d1ce8862b2ce4d5 + - SHA1=bed5bad7f405aa828a146c7f71d09c31d0c32051 + - SHA1=34a07ae39b232cc3dbbe657b34660e692ff2043a + - SHA1=3f67a43ae174a715795e49f72bc350302de83323 + - SHA1=a3d612a5ea3439ba72157bd96e390070bdddbbf3 + - SHA1=655a9487d7a935322e19bb92d2465849055d029d + - SHA1=f70989f8b17971f13d45ee537e4ce98e93acbbaf + - SHA1=4044e5da1f16441fe7eb27cff7a76887a1aa7fec + - SHA1=7b4c922415e13deaf54bb2771f2ae30814ee1d14 + - SHA1=8c11430372889bae1f91e8d068e2b2ad56dfc6bf + - SHA1=4f376b1d1439477a426ef3c52e8c1c69c2cb5305 + - SHA1=1acc7a486b52c5ee6619dbdc3b4210b5f48b936f + - SHA1=6a3d3b9ab3d201cd6b0316a7f9c3fb4d34d0f403 + - SHA1=7fb52290883a6b69a96d480f2867643396727e83 + - SHA1=82dbac75b73ff4b92bdcbf6977a6683e1dcfe995 + - SHA1=5b83c61178afb87ef7d58fd786808effcaaae861 + - SHA1=bc47e15537fa7c32dfefd23168d7e1741f8477ed + - SHA1=ebafebe5e94fdf12bd2159ed66d73268576bc7d9 + - SHA1=5e4b93591f905854fb870011464291c3508aff44 + - SHA1=a38aac44ee232fb50a6abf145e8dd921ca3e7d78 - SHA256=aafb95a443911e4c67d4e45ffa83cca103c91b42915b81100534dc439bec0c1b - - SHA256=786f0ba14567a7e19192645ad4e40bee6df259abf2fbdfda35b6a38f8493d6cc - - SHA256=7cfa5e10dff8a99a5d544b011f676bc383991274c693e21e3af40cf6982adb8c - - SHA256=4cd80f4e33b713570f6a16b9f77679efa45a466737e41db45b41924e7d7caef4 - - SHA256=a66d2fb7ef7350ea74d4290c57fb62bc59c6ea93f759d4ca93c3febca7aeb512 - - SHA256=8f68ca89910ebe9da3d02ec82d935de1814d79c44f36cd30ea02fa49ae488f00 - - SHA256=dcb815eb8e9016608d0d917101b6af8c84b96fb709dc0344bceed02cbc4ed258 - - SHA256=2732050a7d836ae0bdc5c0aea4cdf8ce205618c3e7f613b8139c176e86476d0c - - SHA256=c6feb3f4932387df7598e29d4f5bdacec0b9ce98db3f51d96fc4ffdcc6eb10e1 - - SHA256=f8886a9c759e0426e08d55e410b02c5b05af3c287b15970175e4874316ffaf13 - - SHA256=1d0397c263d51e9fc95bcc8baf98d1a853e1c0401cd0e27c7bf5da3fba1c93a8 - - SHA256=d5586dc1e61796a9ae5e5d1ced397874753056c3df2eb963a8916287e1929a71 - - SHA256=39cfde7d401efce4f550e0a9461f5fc4d71fa07235e1336e4f0b4882bd76550e - - SHA256=823da894b2c73ffcd39e77366b6f1abf0ae9604d9b20140a54e6d55053aadeba - - SHA256=6191c20426dd9b131122fb97e45be64a4d6ce98cc583406f38473434636ddedc - - SHA256=a0728184caead84f2e88777d833765f2d8af6a20aad77b426e07e76ef91f5c3f - - SHA256=7c731c0ea7f28671ab7787800db69739ea5cd6be16ea21045b4580cf95cbf73b - - SHA256=6e0aa67cfdbe27a059cbd066443337f81c5b6d37444d14792d1c765d9d122dcf - - SHA256=16768203a471a19ebb541c942f45716e9f432985abbfbe6b4b7d61a798cea354 - - SHA256=b8b94c2646b62f6ac08f16514b6efaa9866aa3c581e4c0435a7aeafe569b2418 - - SHA256=3b2ad08123e8ed2516548240cfcdf5eefd89293f31070a6cd3949ee1b66fed14 - - SHA256=b0b6a410c22cc36f478ff874d4a23d2e4b4e37c6e55f2a095fc4c3ef32bcb763 - - SHA256=e4a7da2cf59a4a21fc42b611df1d59cae75051925a7ddf42bf216cc1a026eadb - - SHA256=4d19ee789e101e5a76834fb411aadf8229f08b3ece671343ad57a6576a525036 - - SHA256=b7a20b5f15e1871b392782c46ebcc897929443d82073ee4dcb3874b6a5976b5d - - SHA256=2b188ae51ec3be082e4d08f7483777ec5e66d30e393a4e9b5b9dc9af93d1f09b - - SHA256=ca34f945117ec853a713183fa4e8cf85ea0c2c49ca26e73d869fee021f7b491d - - SHA256=3ff39728f1c11d1108f65ec5eb3d722fd1a1279c530d79712e0d32b34880baaa - - SHA256=a7b000abbcc344444a9b00cfade7aa22ab92ce0cadec196c30eb1851ae4fa062 - - SHA256=4a9093e8dbcb867e1b97a0a67ce99a8511900658f5201c34ffb8035881f2dbbe - - SHA256=cf4b5fa853ce809f1924df3a3ae3c4e191878c4ea5248d8785dc7e51807a512b - - SHA256=4d0580c20c1ba74cf90d44c82d040f0039542eea96e4bbff3996e6760f457cee - - SHA256=bb50818a07b0eb1bd317467139b7eb4bad6cd89053fecdabfeae111689825955 - - SHA256=65025741ecd0ef516da01319b42c2d96e13cb8d78de53fb7e39cd53ea6d58c75 - - SHA256=96df0b01eeba3e6e50759d400df380db27f0d0e34812d0374d22ac1758230452 - - SHA256=f15962354d37089884abba417f58e9dbd521569b4f69037a24a37cfc2a490672 - - SHA256=b50b11e2203942695380869c6072e15479290bc57da2ec5df3481a36b8a8561e - - SHA256=58a74dceb2022cd8a358b92acd1b48a5e01c524c3b0195d7033e4bd55eff4495 - - SHA256=30706f110725199e338e9cc1c940d9a644d19a14f0eb8847712cba4cacda67ab - - SHA256=08828990218ebb4415c1bb33fa2b0a009efd0784b18b3f7ecd3bc078343f7208 - - SHA256=ac26150bc98ee0419a8b23e4cda3566e0eba94718ba8059346a9696401e9793d - - SHA256=c8940e2e9b069ec94f9f711150b313b437f8429f78d522810601b6ee8b52bada - - SHA256=e61a54f6d3869b43c4eceac3016df73df67cce03878c5a6167166601c5d3f028 - - SHA256=9d58f640c7295952b71bdcb456cae37213baccdcd3032c1e3aeb54e79081f395 - - SHA256=cdfbe62ef515546f1728189260d0bdf77167063b6dbb77f1db6ed8b61145a2bc - - SHA256=3724b39e97936bb20ada51c6119aded04530ed86f6b8d6b45fbfb2f3b9a4114b - - SHA256=5177a3b7393fb5855b2ec0a45d4c91660b958ee077e76e5a7d0669f2e04bcf02 - - SHA256=83a1fabf782d5f041132d7c7281525f6610207b38f33ff3c5e44eb9444dd0cbc - - SHA256=984a77e5424c6d099051441005f2938ae92b31b5ad8f6521c6b001932862add7 - - SHA256=6cf1cac0e97d30bb445b710fd8513879678a8b07be95d309cbf29e9b328ff259 - - SHA256=019c2955e380dd5867c4b82361a8d8de62346ef91140c95cb311b84448c0fa4f - - SHA256=3e07bb866d329a2f9aaa4802bad04fdac9163de9bf9cfa1d035f5ca610b4b9bf - - SHA256=cf66fcbcb8b2ea7fb4398f398b7480c50f6a451b51367718c36330182c1bb496 - - SHA256=4c859b3d11d2ff0049b644a19f3a316a8ca1a4995aa9c39991a7bde8d4f426a4 - - SHA256=a072197177aad26c31960694e38e2cae85afbab070929e67e331b99d3a418cf4 - - SHA256=8688e43d94b41eeca2ed458b8fc0d02f74696a918e375ecd3842d8627e7a8f2b - - SHA256=9790a7b9d624b2b18768bb655dda4a05a9929633cef0b1521e79e40d7de0a05b - - SHA256=6befa481e8cca8084d9ec3a1925782cd3c28ef7a3e4384e034d48deaabb96b63 - - SHA256=15fb486b6b8c2a2f1b067f48fba10c2f164638fe5e6cee618fb84463578ecac9 - - SHA256=c9b49b52b493b53cd49c12c3fa9553e57c5394555b64e32d1208f5b96a5b8c6e - - SHA256=65e3548bc09dffd550e79501e3fe0fee268f895908e2bba1aa5620eb9bdac52d - - SHA256=5192ec4501d0fe0b1c8f7bf9b778f7524a7a70a26bbbb66e5dab8480f6fdbb8b - - SHA256=7539157df91923d4575f7f57c8eb8b0fd87f064c919c1db85e73eebb2910b60c - - SHA256=3ff50c67d51553c08dcb7c98342f68a0f54ad6658c5346c428bdcd1f185569f6 - - SHA256=58c071cfe72e9ee867bba85cbd0abe72eb223d27978d6f0650d0103553839b59 - - SHA256=d366cbc1d5dd8863b45776cfb982904abd21d0c0d4697851ff54381055abcfc8 - - SHA256=d74755311d127d0eb7454e56babc2db8dbaa814bc4ba8e2a7754d3e0224778e1 - - SHA256=a59c40e7470b7003e8adfee37c77606663e78d7e3f2ebb8d60910af19924d8df - - SHA256=6f1ff29e2e710f6d064dc74e8e011331d807c32cc2a622cbe507fd4b4d43f8f4 - - SHA256=3943a796cc7c5352aa57ccf544295bfd6fb69aae147bc8235a00202dc6ed6838 - - SHA256=0be4912bfd7a79f6ebfa1c06a59f0fb402bd4fe0158265780509edd0e562eac1 - - SHA256=d21aba58222930cb75946a0fb72b4adc96de583d3f7d8dc13829b804eb877257 - - SHA256=0909005d625866ef8ccd8ae8af5745a469f4f70561b644d6e38b80bccb53eb06 - - SHA256=0dc4ff96d7e7db696e0391c5a1dda92a0b0aedbf1b0535bf5d62ebeec5b2311c - - SHA256=77950e2a40ac0447ae7ee1ee3ef1242ce22796a157074e6f04e345b1956e143c - - SHA256=600a2119657973112025db3c0eeab2e69d528bccfeed75f40c6ef50b059ec8a0 - - SHA256=3e1d47a497babbfd1c83905777b517ec87c65742bee7eb57a2273eca825d2272 - - SHA256=000547560fea0dd4b477eb28bf781ea67bf83c748945ce8923f90fdd14eb7a4b - - SHA256=9bd8b0289955a6eb791f45c3203f08a64cbd457fd1b9d598a6fbbca5d0372e36 - - SHA256=5b9623da9ba8e5c80c49473f40ffe7ad315dcadffc3230afdc9d9226d60a715a - - SHA256=42e170a7ab1d2c160d60abfc906872f9cfd0c2ee169ed76f6acb3f83b3eeefdb - - SHA256=9b1ac756e35f795dd91adbc841e78db23cb7165280f8d4a01df663128b66d194 - - SHA256=2a6212f3b68a6f263e96420b3607b31cfdfe51afff516f3c87d27bf8a89721e8 - - SHA256=46621554728bc55438c7c241137af401250f062edef6e7efecf1a6f0f6d0c1f7 - - SHA256=ab8f2217e59319b88080e052782e559a706fa4fb7b8b708f709ff3617124da89 - - SHA256=881bca6dc2dafe1ae18aeb59216af939a3ac37248c13ed42ad0e1048a3855461 - - SHA256=1b7fb154a7b7903a3c81f12f4b094f24a3c60a6a8cffca894c67c264ab7545fa - - SHA256=2121a2bb8ebbf2e6e82c782b6f3c6b7904f686aa495def25cf1cf52a42e16109 - - SHA256=405a99028c99f36ab0f84a1fd810a167b8f0597725e37513d7430617106501f1 - - SHA256=b9ed73af3aef69dc1fb91731d6d0a649e93f83d0f07ddb9729d71c2d00ed0801 - - SHA256=cdd2a4575a46bada4837a6153a79c14d60ee3129830717ef09e0e3efd9d00812 - - SHA256=e4eca7db365929ff7c5c785e2eab04ef8ec67ea9edcf7392f2b74eccd9449148 - - SHA256=e005e8d183e853a27ad3bb56f25489f369c11b0d47e3d4095aad9291b3343bf1 - - SHA256=1c425793a8ce87be916969d6d7e9dd0687b181565c3b483ce53ad1ec6fb72a17 - - SHA256=cc687fe3741bbde1dd142eac0ef59fd1d4457daee43cdde23bb162ef28d04e64 - - SHA256=b9695940f72e3ed5d7369fb32958e2146abd29d5895d91ccc22dfbcc9485b78b - - SHA256=747a4dc50915053649c499a508853a42d9e325a5eec22e586571e338c6d32465 - - SHA256=6e76764d750ebd835aa4bb055830d278df530303585614c1dc743f8d5adf97d7 - - SHA256=2afdb3278a7b57466a103024aef9ff7f41c73a19bab843a8ebf3d3c4d4e82b30 - - SHA256=fda93c6e41212e86af07f57ca95db841161f00b08dae6304a51b467056e56280 - - SHA256=e728b259113d772b4e96466ab8fe18980f37c36f187b286361c852bd88101717 - - SHA256=775000c4083c8e4dcfc879d83fcd27b40b46820c9834ae4662861386a4d81fe9 - - SHA256=aa9ab1195dc866270e984f1bed5e1358d6ef24c515dfdb6c2a92d1e1b94bf608 - - SHA256=d1c78c8ba70368e96515fb0596598938a8f9efa8f9f5d9e068ee008f03020fee - - SHA256=c181ce9a57e8d763db89ba7c45702a8cf66ef1bb58e3f21874cf0265711f886b - - SHA256=26c28746e947389856543837aa59a5b1f4697e5721a04d00aa28151a2659b097 - - SHA256=86a8e0aa29a5b52c84921188cc1f0eca9a7904dcfe09544602933d8377720219 - - SHA256=d8459f7d707c635e2c04d6d6d47b63f73ba3f6629702c7a6e0df0462f6478ae2 - - SHA256=a8027daa6facf1ff81405daf6763249e9acf232a1a191b6bf106711630e6188e - - SHA256=7893307df2fdde25371645a924f0333e1b2de31b6bc839d8e2a908d7830c6504 - - SHA256=a9706e320179993dade519a83061477ace195daa1b788662825484813001f526 - - SHA256=be54f7279e69fb7651f98e91d24069dbc7c4c67e65850e486622ccbdc44d9a57 - - SHA256=46cf46e1073b7c99142964b7c4bef1e5285fabcf2c6dbe5be99000a393d9f474 - - SHA256=31d8fc6f5fb837d5eb29db828d13ba8ee11867d86a90b2c2483a578e1d0ec43a - - SHA256=47f08f7d30d824a8f4bb8a98916401a37c0fd8502db308aba91fe3112b892dcc - - SHA256=fcdfe570e6dc6e768ef75138033d9961f78045adca53beb6fdb520f6417e0df1 - - SHA256=15c53eb3a0ea44bbd2901a45a6ebeae29bb123f9c1115c38dfb2cdbec0642229 - - SHA256=5d7bfe05792189eaf7193bee85f0c792c33315cfcb40b2e62cc7baef6cafbc5c - - SHA256=4422851a0a102f654e95d3b79c357ae3af1b096d7d1576663c027cfbc04abaf9 - - SHA256=c3d479d7efd0f6b502d6829b893711bdd51aac07d66326b41ef5451bafdfcb29 - - SHA256=c60fcff9c8e5243bbb22ec94618b9dcb02c59bb49b90c04d7d6ab3ebbd58dc3a - - SHA256=6071db01b50c658cf78665c24f1d21f21b4a12d16bfcfaa6813bf6bbc4d0a1e8 - - SHA256=2b120de80a5462f8395cfb7153c86dfd44f29f0776ea156ec4a34fa64e5c4797 - - SHA256=221dfbc74bbb255b0879360ccc71a74b756b2e0f16e9386b38a9ce9d4e2e34f9 - - SHA256=57a389da784269bb2cc0a258500f6dfbf4f6269276e1192619ce439ec77f4572 - - SHA256=36e3127f045ef1fa7426a3ff8c441092d3b66923d2b69826034e48306609e289 - - SHA256=d7b743c3f98662c955c616e0d1bb0800c9602e5b6f2385336a72623037bfd6dd - - SHA256=0aca4447ee54d635f76b941f6100b829dc8b2e0df27bdf584acb90f15f12fbda - - SHA256=80cbba9f404df3e642f22c476664d63d7c229d45d34f5cd0e19c65eb41becec3 - - SHA256=9b2f051ac901ab47d0012a1002cb8b2db28c14e9480c0dd55e1ac11c81ba9285 - - SHA256=26453afb1f808f64bec87a2532a9361b696c0ed501d6b973a1f1b5ae152a4d40 - - SHA256=dbb457ae1bd07a945a1466ce4a206c625e590aee3922fa7d86fbe956beccfc98 - - SHA256=76614f2e372f33100a8d92bf372cdbc1e183930ca747eed0b0cf2501293b990a - - SHA256=19bf0d0f55d2ad33ef2d105520bde8fb4286f00e9d7a721e3c9587b9408a0775 - - SHA256=38d6d90d543bf6037023c1b1b14212b4fa07731cbbb44bdb17e8faffc12b22e8 - - SHA256=9e3430d5e0e93bc4a5dccc985053912065e65722bfc2eaf431bc1da91410434c - - SHA256=d5562fb90b0b3deb633ab335bcbd82ce10953466a428b3f27cb5b226b453eaf3 - - SHA256=dbe9f17313e1164f06401234b875fbc7f71d41dc7271de643865af1358841fef - - SHA256=3871e16758a1778907667f78589359734f7f62f9dc953ec558946dcdbe6951e3 - - SHA256=3e274df646f191d2705c0beaa35eeea84808593c3b333809f13632782e27ad75 - - SHA256=3a5ec83fe670e5e23aef3afa0a7241053f5b6be5e6ca01766d6b5f9177183c25 - - SHA256=42f0b036687cbd7717c9efed6991c00d4e3e7b032dc965a2556c02177dfdad0f - - SHA256=d2e843d9729da9b19d6085edf69b90b057c890a74142f5202707057ee9c0b568 - - SHA256=c7f64b27cd3be5af1c8454680529ea493dfbb09e634eec7e316445ad73499ae0 - - SHA256=0bc3685b0b8adc97931b5d31348da235cd7581a67edf6d79913e6a5709866135 - - SHA256=1023dcd4c80db19e9f82f95b1c5e1ddb60db7ac034848dd5cc1c78104a6350f4 - - SHA256=8137ce22d0d0fc5ea5b174d6ad3506a4949506477b1325da2ccb76511f4c4f60 - - SHA256=c628cda1ef43defc00af45b79949675a8422490d32b080b3a8bb9434242bdbf2 - - SHA256=e68d453d333854787f8470c8baef3e0d082f26df5aa19c0493898bcf3401e39a - - SHA256=b9b3878ddc5dfb237d38f8d25067267870afd67d12a330397a8853209c4d889c - - SHA256=2003b478b9fd1b3d76ec5bf4172c2e8915babbbee7ad1783794acbf8d4c2519d - - SHA256=a899b659b08fbae30b182443be8ffb6a6471c1d0497b52293061754886a937a3 - - SHA256=c190e4a7f1781ec9fa8c17506b4745a1369dcdf174ce07f85de1a66cf4b5ed8a - - SHA256=3b19a7207a55d752db1b366b1dea2fd2c7620a825a3f0dcffca10af76611118c - - SHA256=c9c60f560440ff16ad3c767ff5b7658d5bda61ea1166efe9b7f450447557136e - - SHA256=65c26276cadda7a36f8977d1d01120edb5c3418be2317d501761092d5f9916c9 - - SHA256=f15ae970e222ce06dbf3752b223270d0e726fb78ebec3598b4f8225b5a0880b1 - - SHA256=e6a2b1937fa277526a1e0ca9f9b32f85ab9cb7cb1a32250dd9c607e93fc2924f - - SHA256=f74ffd6916333662900cbecb90aca2d6475a714ce410adf9c5c3264abbe5732c - - SHA256=4737750788c72d2fc9cf95681c622357263075d65b23e54c4dc3f31446cad37b - - SHA256=1766fd66f846d9a21e648d649ad35d1ff94f8ca17a40a9a738444d6b8e07aacb - - SHA256=38b3eb8c86201d26353aab625cea672e60c2f66ce6f5e5eda673e8c3478bf305 - - SHA256=8ed0c00920ce76e832701d45117ed00b12e20588cb6fe8039fbccdfef9841047 - - SHA256=3d9e83b189fcf5c3541c62d1f54a0da0a4e5b62c3243d2989afc46644056c8e3 - - SHA256=a6c05b10a5c090b743a61fa225b09e390e2dd2bd6cb4fd96b987f1e0d3f2124a - - SHA256=ffd03584246730397e231eb8d16c1449aef2c3bc79bf9da3ebf8400a21b20ae7 - - SHA256=0e10d3c73596e359462dc6bfcb886768486ff59e158f0f872d23c5e9a2f7c168 - - SHA256=3243aab18e273a9b9c4280a57aecef278e10bfff19abb260d7a7820e41739099 - - SHA256=677c0b1add3990fad51f492553d3533115c50a242a919437ccb145943011d2bf - - SHA256=b4d47ea790920a4531e3df5a4b4b0721b7fea6b49a35679f0652f1e590422602 - - SHA256=405472a8f9400a54bb29d03b436ccd58cfd6442fe686f6d2ed4f63f002854659 - - SHA256=38fa0c663c8689048726666f1c5e019feaa9da8278f1df6ff62da33961891d2a - - SHA256=48891874441c6fa69e5518d98c53d83b723573e280c6c65ccfbde9039a6458c9 - - SHA256=9a54ef5cfbe6db599322967ee2c84db7daabcb468be10a3ccfcaa0f64d9173c7 - - SHA256=c7079033659ac9459b3b7ab2510805832db2e2a70fe9beb1a6e13c1f51890d88 - - SHA256=8939116df1d6c8fd0ebd14b2d37b3dec38a8820aa666ecd487bc1bb794f2a587 - - SHA256=ded2927f9a4e64eefd09d0caba78e94f309e3a6292841ae81d5528cab109f95d - - SHA256=506f953bbb285aeb8af0549eb24f52f3b7af36afe740afa36735bac70573ce28 - - SHA256=e4d9f037411284e996a002b15b49bc227d085ee869ae1cd91ba54ff7c244f036 - - SHA256=f85eb576acb5db0d2f48e5f09a7244165a876fa1ca8697ebb773e4d7071d4439 + - SHA256=dfaefd06b680f9ea837e7815fc1cc7d1f4cc375641ac850667ab20739f46ad22 + - SHA256=66a20fc2658c70facd420f5437a73fa07a5175998e569255cfb16c2f14c5e796 + - SHA256=e8eb1c821dbf56bde05c0c49f6d560021628df89c29192058ce68907e7048994 + - SHA256=5e3bc2d7bc56971457d642458563435c7e5c9c3c7c079ef5abeb6a61fb4d52ea - SHA256=b8ffe83919afc08a430c017a98e6ace3d9cbd7258c16c09c4f3a4e06746fc80a - - SHA256=592f56b13e7dcaa285da64a0b9a48be7562bd9b0a190208b7c8b7d8de427cf6c - - SHA256=45f42c5d874369d6be270ea27a5511efcca512aeac7977f83a51b7c4dee6b5ef - - SHA256=f1c8ca232789c2f11a511c8cd95a9f3830dd719cad5aa22cb7c3539ab8cb4dc3 - - SHA256=a11cf43794ea5b5122a0851bf7de08e559f6e9219c77f9888ff740055f2c155e - - SHA256=edfc38f91b5e198f3bf80ef6dcaebb5e86963936bcd2e5280088ca90d6998b8c - - SHA256=ad8fd8300ed375e22463cea8767f68857d9a3b0ff8585fbeb60acef89bf4a7d7 - - SHA256=50db5480d0392a7dd6ab5df98389dc24d1ed1e9c98c9c35964b19dabcd6dc67f - - SHA256=316a27e2bdb86222bc7c8af4e5472166b02aec7f3f526901ce939094e5861f6d - - SHA256=61d6e40601fa368800980801a662a5b3b36e3c23296e8ae1c85726a56ef18cc8 - - SHA256=69640e9209f8e2ac25416bd3119b5308894b6ce22b5c80cb5d5f98f2f85d42ce - - SHA256=f929bead59e9424ab90427b379dcdd63fbfe0c4fb5e1792e3a1685541cd5ec65 - - SHA256=8e92aacd60fca1f09b7257e62caf0692794f5d741c5d1eec89d841e87f2c359c - - SHA256=9a523854fe84f15efc1635d7f5d3e71812c45d6a4d2c99c29fdc4b4d9c84954c - - SHA256=88992ddcb9aaedb8bfcc9b4354138d1f7b0d7dddb9e7fcc28590f27824bee5c3 - - SHA256=b03f26009de2e8eabfcf6152f49b02a55c5e5d0f73e01d48f5a745f93ce93a29 - - SHA256=3cb75429944e60f6c820c7638adbf688883ad44951bca3f8912428afe72bc134 - - SHA256=38c18db050b0b2b07f657c03db1c9595febae0319c746c3eede677e21cd238b0 - - SHA256=5351c81b4ec5a0d79c39d24bac7600d10eac30c13546fde43d23636b3f421e7c - - SHA256=3124b0411b8077605db2a9b7909d8240e0d554496600e2706e531c93c931e1b5 - - SHA256=d9500af86bf129d06b47bcfbc4b23fcc724cfbd2af58b03cdb13b26f8f50d65e - - SHA256=93b266f38c3c3eaab475d81597abbd7cc07943035068bb6fd670dbbe15de0131 - - SHA256=8cb62c5d41148de416014f80bd1fd033fd4d2bd504cb05b90eeb6992a382d58f - - SHA256=2bbc6b9dd5e6d0327250b32305be20c89b19b56d33a096522ee33f22d8c82ff1 - - SHA256=89108a15f009b285db4ef94250b889d5b11b96b4aa7b190784a6d1396e893e10 - - SHA256=a15325e9e6b8e4192291deb56c20c558dde3f96eb682c6e90952844edb984a00 - - SHA256=3ac8e54be2804f5fa60d0d23a11ba323fba078a942c96279425aabad935b8236 - - SHA256=54841d9f89e195196e65aa881834804fe3678f1cf6b328cab8703edd15e3ec57 + - SHA256=9b6a84f7c40ea51c38cc4d2e93efb3375e9d98d4894a85941190d94fbe73a4e4 + - SHA256=c673f2eed5d0eed307a67119d20a91c8818a53a3cb616e2984876b07e5c62547 + - SHA256=506f56996fbcd34ff8a27e6948a2e2e21e6dbf42dab6e3a6438402000b969fd1 + - SHA256=4c2d2122ef7a100e1651f2ec50528c0d1a2b8a71c075461f0dc58a1aca36bc61 + - SHA256=9dee9c925f7ea84f56d4a2ad4cf9a88c4dac27380887bf9ac73e7c8108066504 + - SHA256=5a661e26cfe5d8dedf8c9644129039cfa40aebb448895187b96a8b7441d52aaa + - SHA256=a47555d04b375f844073fdcc71e5ccaa1bbb201e24dcdebe2399e055e15c849f + - SHA256=86721ee8161096348ed3dbe1ccbf933ae004c315b1691745a8af4a0df9fed675 + - SHA256=06508aacb4ed0a1398a2b0da5fa2dbf7da435b56da76fd83c759a50a51c75caf + - SHA256=1766fd66f846d9a21e648d649ad35d1ff94f8ca17a40a9a738444d6b8e07aacb + - SHA256=6f55c148bb27c14408cf0f16f344abcd63539174ac855e510a42d78cfaec451c + - SHA256=247aadaf17ed894fcacf3fc4e109b005540e3659fd0249190eb33725d3d3082f + - SHA256=dde6f28b3f7f2abbee59d4864435108791631e9cb4cdfb1f178e5aa9859956d8 + - SHA256=dfe57c6a4ef4d2491be325d67428698a61d9c5d2a24dbada10043d313be2c8cc + - SHA256=362c4f3dadc9c393682664a139d65d80e32caa2a97b6e0361dfd713a73267ecc + - SHA256=46cf46e1073b7c99142964b7c4bef1e5285fabcf2c6dbe5be99000a393d9f474 - SHA256=b019ebd77ac19cdd72bba3318032752649bd56a7576723a8ae1cccd70ee1e61a - - SHA256=f4c7e94a7c2e49b130671b573a9e4ff4527a777978f371c659c3f97c14d126de - - SHA256=e1980c6592e6d2d92c1a65acad8f1071b6a404097bb6fcce494f3c8ac31385cf - - SHA256=7cb594af6a3655daebc9fad9c8abf2417b00ba31dcd118707824e5316fc0cc21 - - SHA256=f85784fa8e7a7ec86cb3fe76435802f6bb82256e1824ed7b5d61bf075f054573 - - SHA256=3a65d14fd3b1b5981084cdbd293dc6f4558911ea18dd80177d1e5b54d85bcaa0 - - SHA256=8b92cdb91a2e2fab3881d54f5862e723826b759749f837a11c9e9d85d52095a2 - - SHA256=1e9c236ed39507661ec32731033c4a9b9c97a6221def69200e03685c08e0bfa7 - - SHA256=9679758455c69877fce866267d60c39d108b495dca183954e4af869902965b3d - - SHA256=18e1707b319c279c7e0204074088cc39286007a1cf6cb6e269d5067d8d0628c6 - - SHA256=cfc5c585dd4e592dd1a08887ded28b92d9a5820587b6f4f8fa4f56d60289259b - - SHA256=fb1183ef22ecbcc28f9c0a351c2c0280f1312a0fdf8a9983161691e2585efc70 - - SHA256=4db1e0fdc9e6cefeb1d588668ea6161a977c372d841e7b87098cf90aa679abfb - - SHA256=263e8f1e20612849aea95272da85773f577fd962a7a6d525b53f43407aa7ad24 - - SHA256=5d530e111400785d183057113d70623e17af32931668ab7c7fc826f0fd4f91a3 + - SHA256=4d5059ec1ebd41284b9cea6ce804596e0f386c09eee25becdd3f6949e94139ba + - SHA256=9d58f640c7295952b71bdcb456cae37213baccdcd3032c1e3aeb54e79081f395 + - SHA256=d636c011b8b2896572f5de260eb997182cc6955449b044a739bd19cbe6fdabd2 + - SHA256=a15325e9e6b8e4192291deb56c20c558dde3f96eb682c6e90952844edb984a00 + - SHA256=e3dbafce5ad2bf17446d0f853aeedf58cc25aa1080ab97e22375a1022d6acb16 + - SHA256=26f41e4268be59f5de07552b51fa52d18d88be94f8895eb4a16de0f3940cf712 + - SHA256=e2d8dd5dacc24051709f55a35184f5f99aef957a83bd358b0608b4479e1ec24f + - SHA256=06bda5a1594f7121acd2efe38ccb617fbc078bb9a70b665a5f5efd70e3013f50 + - SHA256=626fae47811450d080d08c3d9fd890aa64bfecdc45eacd42a40850c1833c8763 + - SHA256=d25904fbf907e19f366d54962ff543d9f53b8fdfd2416c8b9796b6a8dd430e26 + - SHA256=5fae7e491b0d919f0b551e15e0942ac7772f2889722684aea32cff369e975879 + - SHA256=68671b735716ffc168addc052c5dc3d635e63e71c1e78815e7874286c3fcc248 + - SHA256=3e274df646f191d2705c0beaa35eeea84808593c3b333809f13632782e27ad75 + - SHA256=d7ddf874304556f8a10942a29b3d387cb5155a7419f87813557fe728cb14806d + - SHA256=f088b2ba27dacd5c28f8ee428f1350dca4bc7c6606309c287c801b2e1da1a53d + - SHA256=cdd2a4575a46bada4837a6153a79c14d60ee3129830717ef09e0e3efd9d00812 + - SHA256=b50b11e2203942695380869c6072e15479290bc57da2ec5df3481a36b8a8561e + - SHA256=2bbc6b9dd5e6d0327250b32305be20c89b19b56d33a096522ee33f22d8c82ff1 + - SHA256=f85eb576acb5db0d2f48e5f09a7244165a876fa1ca8697ebb773e4d7071d4439 - SHA256=72322fa8bba20df6966acbcf41e83747893fd173cd29de99b5ad1a5d3bf8f2de - - SHA256=2ce81759bfa236913bbbb9b2cbc093140b099486fd002910b18e2c6e31fdc4f1 + - SHA256=d1c78c8ba70368e96515fb0596598938a8f9efa8f9f5d9e068ee008f03020fee + - SHA256=3503ea284b6819f9cb43b3e94c0bb1bf5945ccb37be6a898387e215197a4792a + - SHA256=ff6729518a380bf57f1bc6f1ec0aa7f3012e1618b8d9b0f31a61d299ee2b4339 + - SHA256=3ac5e01689a3d745e60925bc7faca8d4306ae693e803b5e19c94906dc30add46 - SHA256=a6f8aa3de5b4aea58eddd45807d722c864d4bc4a38ad573174af864e21f0d526 + - SHA256=0c018eaa293c03febe2aef1e868fca782a06b49d7d2f9f388ae5fb57604c5250 + - SHA256=223f61c3f443c5047d1aeb905b0551005a426f084b7a50384905e7e4ecb761a1 + - SHA256=18047c2d45758a43d6b7e56bcd4aa90354c899795baf944f037850c48d8e892a + - SHA256=442d506c1ac1f48f6224f0cdd64590779aee9c88bdda2f2cc3169b862cba1243 + - SHA256=7d4ca5760b6ad2e4152080e115f040f9d42608d2c7d7f074a579f911d06c8cf8 + - SHA256=b1867d13a4cab66a76f4d4448824ca0cb3a176064626f9618c0c103ee3cb4f47 + - SHA256=0cf91e8f64a7c98dbeab21597bd76723aee892ed8fa4ee44b09f9e75089308e2 + - SHA256=9e3430d5e0e93bc4a5dccc985053912065e65722bfc2eaf431bc1da91410434c + - SHA256=b773511fdb2e370dec042530910a905472fcc2558eb108b246fd3200171b04d3 + - SHA256=3ff50c67d51553c08dcb7c98342f68a0f54ad6658c5346c428bdcd1f185569f6 + - SHA256=a369942ce8d4b70ebf664981e12c736ec980dbe5a74585dd826553c4723b1bce + - SHA256=d3b5fd13a53eee5c468c8bfde4bfa7b968c761f9b781bb80ccd5637ee052ee7d + - SHA256=8bda0108de82ebeae82f43108046c5feb6f042e312fa0115475a9e32274fae59 + - SHA256=16a2e578bc8683f17a175480fea4f53c838cfae965f1d4caa47eaf9e0b3415c1 + - SHA256=16ae28284c09839900b99c0bdf6ce4ffcd7fe666cfd5cfb0d54a3ad9bea9aa9c + - SHA256=0bd164da36bd637bb76ca66602d732af912bd9299cb3d520d26db528cb54826d + - SHA256=c3d479d7efd0f6b502d6829b893711bdd51aac07d66326b41ef5451bafdfcb29 + - SHA256=4eb1b9f3fe3c79f20c9cdeba92f6d6eb9b9ed15b546851e1f5338c0b7d36364b + - SHA256=fb1183ef22ecbcc28f9c0a351c2c0280f1312a0fdf8a9983161691e2585efc70 + - SHA256=7236c8ff33c0e5cfa956778aa7303f1979f3bf709c361399fa1ce101b7e355b8 + - SHA256=7149fbd191d7e4941a32a3118ab017426b551d5d369f20c94c4f36ae4ef54f26 + - SHA256=fb81b5f8bf69637dbdf050181499088a67d24577587bc520de94b5ee8996240f + - SHA256=399effe75d32bdab6fa0a6bffe02dbf0a59219d940b654837c3be1c0bd02e9aa + - SHA256=dbc604b4e01362a3e51357af4a87686834fe913852a4e0a8c0d4c1a0f7d076ed + - SHA256=6de84caa2ca18673e01b91af58220c60aecd5cccf269725ec3c7f226b2167492 + - SHA256=5fad3775feb8b6f6dcbd1642ae6b6a565ff7b64eadfc9bf9777918b51696ab36 + - SHA256=e81230217988f3e7ec6f89a06d231ec66039bdba340fd8ebb2bbb586506e3293 + - SHA256=cbd4f66ae09797fcd1dc943261a526710acc8dd4b24e6f67ed4a1fce8b0ae31c + - SHA256=fafa1bb36f0ac34b762a10e9f327dcab2152a6d0b16a19697362d49a31e7f566 + - SHA256=b2364c3cf230648dad30952701aef90acfc9891541c7e154e30c9750da213ed1 + - SHA256=5f5e5f1c93d961985624768b7c676d488c7c7c1d4c043f6fc1ea1904fefb75be + - SHA256=a11cf43794ea5b5122a0851bf7de08e559f6e9219c77f9888ff740055f2c155e + - SHA256=d0bd1ae72aeb5f3eabf1531a635f990e5eaae7fdd560342f915f723766c80889 + - SHA256=4bf4cced4209c73aa37a9e2bf9ff27d458d8d7201eefa6f6ad4849ee276ad158 + - SHA256=d366cbc1d5dd8863b45776cfb982904abd21d0c0d4697851ff54381055abcfc8 + - SHA256=f15962354d37089884abba417f58e9dbd521569b4f69037a24a37cfc2a490672 + - SHA256=f4dc11b7922bf2674ca9673638e7fe4e26aceb0ebdc528e6d10c8676e555d7b2 + - SHA256=3cb111fdedc32f2f253aacde4372b710035c8652eb3586553652477a521c9284 + - SHA256=45abdbcd4c0916b7d9faaf1cd08543a3a5178871074628e0126a6eda890d26e0 + - SHA256=1675eedd4c7f2ec47002d623bb4ec689ca9683020e0fdb0729a9047c8fb953dd + - SHA256=b37b3c6877b70289c0f43aeb71349f7344b06063996e6347c3c18d8c5de77f3b + - SHA256=1a42ebde59e8f63804eaa404f79ee93a16bb33d27fb158c6bfbe6143226899a0 + - SHA256=bac7e75745d0cb8819de738b73edded02a07111587c4531383dccd4562922b65 + - SHA256=8138b219a2b1be2b0be61e5338be470c18ad6975f11119aee3a771d4584ed750 + - SHA256=04a85e359525d662338cae86c1e59b1d7aa9bd12b920e8067503723dc1e03162 + - SHA256=03680068ec41bbe725e1ed2042b63b82391f792e8e21e45dc114618641611d5d + - SHA256=af16c36480d806adca881e4073dcd41acb20c35ed0b1a8f9bd4331de655036e1 + - SHA256=ad40e6d0f77c0e579fb87c5106bf6de3d1a9f30ee2fbf8c9c011f377fa05f173 + - SHA256=9f4ce6ab5e8d44f355426d9a6ab79833709f39b300733b5b251a0766e895e0e5 + - SHA256=38d6d90d543bf6037023c1b1b14212b4fa07731cbbb44bdb17e8faffc12b22e8 + - SHA256=e68d453d333854787f8470c8baef3e0d082f26df5aa19c0493898bcf3401e39a + - SHA256=ae3a6a0726f667658fc3e3180980609dcb31bdbf833d7cb76ba5d405058d5156 + - SHA256=a0728184caead84f2e88777d833765f2d8af6a20aad77b426e07e76ef91f5c3f + - SHA256=df0cc4e5c9802f8edaefeb130e375cad56b2c5490d8ebd77d8dbdcc6fdc7ecb6 + - SHA256=d0543f0fdc589c921b47877041f01b17a534c67dcc7c5ad60beba8cf7e7bc9c6 + - SHA256=f9bc6b2d5822c5b3a7b1023adceb25b47b41e664347860be4603ee81b644590e + - SHA256=916c535957a3b8cbf3336b63b2260ea4055163a9e6b214f2a7005d6d36a4a677 + - SHA256=ebe2e9ec6d5d94c2d58fbcc9d78c5f0ee7a2f2c1aed6d1b309f383186d11dfa3 - SHA256=e86cb77de7b6a8025f9a546f6c45d135f471e664963cf70b381bee2dfd0fdef4 - - SHA256=5a661e26cfe5d8dedf8c9644129039cfa40aebb448895187b96a8b7441d52aaa - - SHA256=9b6a84f7c40ea51c38cc4d2e93efb3375e9d98d4894a85941190d94fbe73a4e4 - - SHA256=3813c1aab1760acb963bcc10d6ea3fddc2976b9e291710756408de392bc9e5d5 - - SHA256=51480eebbbfb684149842c3e19a8ffbd3f71183c017e0c4bc6cf06aacf9c0292 - - SHA256=a0dd3d43ab891777b11d4fdcb3b7f246b80bc66d12f7810cf268a5f6f4f8eb7b - - SHA256=7dfc2eb033d2e090540860b8853036f40736d02bd22099ff6cf665a90be659cd - - SHA256=21ccdd306b5183c00ecfd0475b3152e7d94b921e858e59b68a03e925d1715f21 - - SHA256=7cf756afcaf2ce4f8fb479fdede152a17eabf4c5c7c329699dab026a4c1d4fd0 - - SHA256=2a652de6b680d5ad92376ad323021850dab2c653abf06edf26120f7714b8e08a - - SHA256=79440da6b8178998bdda5ebde90491c124b1967d295db1449ec820a85dc246dd - - SHA256=f9895458e73d4b0ef01eda347fb695bb00e6598d9f5e2506161b70ad96bb7298 - - SHA256=0e8595217f4457757bed0e3cdea25ea70429732b173bba999f02dc85c7e06d02 - - SHA256=a4680fabf606d6580893434e81c130ff7ec9467a15e6534692443465f264d3c9 - - SHA256=88e2e6a705d3fb71b966d9fb46dc5a4b015548daf585fb54dfcd81dc0bd3ebdc - SHA256=7d43769b353d63093228a59eb19bba87ce6b552d7e1a99bf34a54eee641aa0ea - - SHA256=2a9d481ffdc5c1e2cb50cf078be32be06b21f6e2b38e90e008edfc8c4f2a9c4e - - SHA256=c3e150eb7e7292f70299d3054ed429156a4c32b1f7466a706a2b99249022979e - - SHA256=f85cca4badff17d1aa90752153ccec77a68ad282b69e3985fdc4743eaea85004 - - SHA256=3140005ce5cac03985f71c29732859c88017df9d41c3761aa7c57bbcb7ad2928 - - SHA256=1d804efc9a1a012e1f68288c0a2833b13d00eecd4a6e93258ba100aa07e3406f - - SHA256=d80714d87529bb0bc7abcc12d768c43a697fbca59741c38fa0b46900da4db30e - - SHA256=d92eab70bcece4432258c9c9a914483a2267f6ab5ce2630048d3a99e8cb1b482 + - SHA256=3871e16758a1778907667f78589359734f7f62f9dc953ec558946dcdbe6951e3 + - SHA256=45e5977b8d5baec776eb2e62a84981a8e46f6ce17947c9a76fa1f955dc547271 + - SHA256=fa875178ae2d7604d027510b0d0a7e2d9d675e10a4c9dda2d927ee891e0bcb91 + - SHA256=ff987c30ce822d99f3b4b4e23c61b88955f52406a95e6331570a2a13cbebc498 + - SHA256=3301b49b813427fa37a719988fe6446c6f4468dfe15aa246bec8d397f62f6486 + - SHA256=e6a2b1937fa277526a1e0ca9f9b32f85ab9cb7cb1a32250dd9c607e93fc2924f + - SHA256=f27febff1be9e89e48a9128e2121c7754d15f8a5b2e88c50102cecee5fe60229 + - SHA256=0f016c80c4938fbcd47a47409969b3925f54292eba2ce01a8e45222ce8615eb8 + - SHA256=81939e5c12bd627ff268e9887d6fb57e95e6049f28921f3437898757e7f21469 + - SHA256=3e07bb866d329a2f9aaa4802bad04fdac9163de9bf9cfa1d035f5ca610b4b9bf + - SHA256=cf3180f5308af002ac5d6fd5b75d1340878c375f0aebc3157e3bcad6322b7190 + - SHA256=cf69704755ec2643dfd245ae1d4e15d77f306aeb1a576ffa159453de1a7345cb + - SHA256=0bc3685b0b8adc97931b5d31348da235cd7581a67edf6d79913e6a5709866135 + - SHA256=9679758455c69877fce866267d60c39d108b495dca183954e4af869902965b3d + - SHA256=ce0a4430d090ba2f1b46abeaae0cb5fd176ac39a236888fa363bf6f9fd6036d9 + - SHA256=3c4207c90c97733fae2a08679d63fbbe94dfcf96fdfdf88406aa7ab3f80ea78f + - SHA256=eaa5dae373553024d7294105e4e07d996f3a8bd47c770cdf8df79bf57619a8cd + - SHA256=a10b4ed33a13c08804da8b46fd1b7bd653a6f2bb65668e82086de1940c5bb5d1 + - SHA256=53eaefba7e7dca9ab74e385abf18762f9f1aa51594e7f7db5ba612d6c787dd7e + - SHA256=9ca586b49135166eea00c6f83329a2d134152e0e9423822a51c13394265b6340 + - SHA256=8cf0cbbdc43f9b977f0fb79e0a0dd0e1adabe08a67d0f40d727c717c747de775 + - SHA256=37073e42ffa0322500f90cd7e3c8d02c4cdd695d31c77e81560abec20bfb68ba + - SHA256=7a48f92a9c2d95a72e18055cac28c1e7e6cad5f47aa735cbea5c3b82813ccfaf + - SHA256=7c933f5d07ccb4bd715666cd6eb35a774b266ddd8d212849535a54192a44f667 + - SHA256=72288d4978ee87ea6c8b1566dbd906107357087cef7364fb3dd1e1896d00baeb + - SHA256=76b86543ce05540048f954fed37bdda66360c4a3ddb8328213d5aef7a960c184 + - SHA256=c0ae3349ebaac9a99c47ec55d5f7de00dc03bd7c5cd15799bc00646d642aa8de + - SHA256=904e0f7d485a98e8497d5ec6dd6e6e1cf0b8d8e067fb64a9e09790af3c8c9d5a + - SHA256=3a5ec83fe670e5e23aef3afa0a7241053f5b6be5e6ca01766d6b5f9177183c25 + - SHA256=e83908eba2501a00ef9e74e7d1c8b4ff1279f1cd6051707fd51824f87e4378fa + - SHA256=c825a47817399e988912bb75106befaefae0babc0743a7e32b46f17469c78cad + - SHA256=e8b51ab681714e491ab1a59a7c9419db39db04b0dd7be11293f3a0951afe740e + - SHA256=dbe9f17313e1164f06401234b875fbc7f71d41dc7271de643865af1358841fef + - SHA256=159e7c5a12157af92e0d14a0d3ea116f91c09e21a9831486e6dc592c93c10980 - SHA256=05f052c64d192cf69a462a5ec16dda0d43ca5d0245900c9fcb9201685a2e7748 - - SHA256=bda99629ec6c522c3efcbcc9ca33688d31903146f05b37d0d3b43db81bfb3961 - - SHA256=d636c011b8b2896572f5de260eb997182cc6955449b044a739bd19cbe6fdabd2 - - SHA256=f9bc6b2d5822c5b3a7b1023adceb25b47b41e664347860be4603ee81b644590e - - SHA256=4429f32db1cc70567919d7d47b844a91cf1329a6cd116f582305f3b7b60cd60b - - SHA256=cfcf32f5662791f1f22a77acb6dddfbc970fe6e99506969b3ea67c03f67687ab - - SHA256=4d5059ec1ebd41284b9cea6ce804596e0f386c09eee25becdd3f6949e94139ba - - SHA256=a495ffa623a5220179b0dd519935e255dd6910b7b7bc3d68906528496561ff53 - - SHA256=115034373fc0ec8f75fb075b7a7011b603259ecc0aca271445e559b5404a1406 - - SHA256=b01ebea651ec7780d0fe88dd1b6c2500a36dacf85e3a4038c2ca1c5cb44c7b5d - - SHA256=496f4a4021226fb0f1b5f71a7634c84114c29faa308746a12c2414adb6b2a40b - - SHA256=20e52e0d7f579dc6884cc6e80266fddceda69ea5fdd0b095c0874b0d877e48a2 - - SHA256=1e8b0c1966e566a523d652e00f7727d8b0663f1dfdce3b9a09b9adfaef48d8ee - - SHA256=87aae726bf7104aac8c8f566ea98f2b51a2bfb6097b6fc8aa1f70adeb4681e1b - - SHA256=bdcacb9f373b017d0905845292bca2089feb0900ce80e78df1bcaae8328ce042 - - SHA256=72c0d2d699d0440db17cb7cbbc06a253eaafd21465f14bb0fed8b85ae73153d1 - - SHA256=b1334a71cc73b3d0c54f62d8011bec330dfc355a239bf94a121f6e4c86a30a2e - - SHA256=93d873cdf23d5edc622b74f9544cac7fe247d7a68e1e2a7bf2879fad97a3ae63 - - SHA256=6de84caa2ca18673e01b91af58220c60aecd5cccf269725ec3c7f226b2167492 - - SHA256=368a9c2b6f12adbe2ba65181fb96f8b0d2241e4eae9f3ce3e20e50c3a3cc9aa1 - - SHA256=e75714f8e0ff45605f6fc7689a1a89c7dcd34aab66c6131c63fefaca584539cf - - SHA256=3e1f592533625bf794e0184485a4407782018718ae797103f9e968ff6f0973a1 - - SHA256=01aa278b07b58dc46c84bd0b1b5c8e9ee4e62ea0bf7a695862444af32e87f1fd - - SHA256=9d5ebd0f4585ec20a5fe3c5276df13ece5a2645d3d6f70cedcda979bd1248fc2 - - SHA256=4324f3d1e4007f6499a3d0f0102cd92ed9f554332bc0b633305cd7b957ff16c8 - - SHA256=2270a8144dabaf159c2888519b11b61e5e13acdaa997820c09798137bded3dd6 - - SHA256=2a6db9facf9e13d35c37dd468be04bae5f70c6127a9aee76daebddbdec95d486 - - SHA256=1e16a01ef44e4c56e87abfbe03b2989b0391b172c3ec162783ad640be65ab961 - - SHA256=7e81beae78e1ddbf6c150e15667e1f18783f9b0ab7fbe52c7ab63e754135948d + - SHA256=14adbf0bc43414a7700e5403100cff7fc6ade50bebfab16a17acf2fdda5a9da8 - SHA256=810513b3f4c8d29afb46f71816350088caacf46f1be361af55b26f3fee4662c3 - - SHA256=5bdba1561ec5b23b1d56ea8cee411147d1526595f03a9281166a563b3641fa2a - - SHA256=11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5 - - SHA256=442c18aeb09556bb779b21185c4f7e152b892410429c123c86fc209a802bff3c - - SHA256=a334bdf0c0ab07803380eb6ef83eefe7c147d6962595dd9c943a6a76f2200b0d - - SHA256=b9ad7199c00d477ebbc15f2dcf78a6ba60c2670dad0ef0994cebccb19111f890 - - SHA256=db73b0fa032be22405fa0b52fbfe3b30e56ac4787e620e4854c32668ae43bc33 - - SHA256=67cd6166d791bdf74453e19c015b2cb1e85e41892c04580034b65f9f03fe2e79 - - SHA256=6ffdde6bc6784c13c601442e47157062941c47015891e7139c2aaba676ab59cc - - SHA256=f2ed6c1906663016123559d9f3407bc67f64e0d235fa6f10810a3fa7bb322967 - - SHA256=bdbceca41e576841cad2f2b38ee6dbf92fd77fbbfdfe6ecf99f0623d44ef182c - - SHA256=c2a4ddcc9c3b339d752c48925d62fc4cc5adbf6fae8fedef74cdd47e88da01f8 - - SHA256=c673f2eed5d0eed307a67119d20a91c8818a53a3cb616e2984876b07e5c62547 - - SHA256=db711ec3f4c96b60e4ed674d60c20ff7212d80e34b7aa171ad626eaa8399e8c7 - - SHA256=f8965fdce668692c3785afa3559159f9a18287bc0d53abb21902895a8ecf221b - - SHA256=1078af0c70e03ac17c7b8aa5ee03593f5decfef2f536716646a4ded1e98c153c + - SHA256=42b31b850894bf917372ff50fbe1aff3990331e8bd03840d75e29dcc1026c180 + - SHA256=f74ffd6916333662900cbecb90aca2d6475a714ce410adf9c5c3264abbe5732c + - SHA256=1963d5a0e512b72353953aadbe694f73a9a576f0241a988378fa40bf574eda52 + - SHA256=67e9d1f6f7ed58d86b025d3578cb7a3f3c389b9dd425b7f46bb1056e83bffc78 + - SHA256=7049f3c939efe76a5556c2a2c04386db51daf61d56b679f4868bb0983c996ebb + - SHA256=0aca4447ee54d635f76b941f6100b829dc8b2e0df27bdf584acb90f15f12fbda + - SHA256=49ae47b6b4d5e1b791b89e0395659d42a29a79c3e6ec52cbfcb9f9cef857a9dd + - SHA256=0dc4ff96d7e7db696e0391c5a1dda92a0b0aedbf1b0535bf5d62ebeec5b2311c + - SHA256=e89cb7217ec1568b43ad9ca35bf059b17c3e26f093e373ab6ebdeee24272db21 + - SHA256=01aa278b07b58dc46c84bd0b1b5c8e9ee4e62ea0bf7a695862444af32e87f1fd + - SHA256=41eeeb0472c7e9c3a7146a2133341cd74dd3f8b5064c9dee2c70e5daa060954f + - SHA256=d54ac69c438ba77cde88c6efd6a423491996d4e8a235666644b1db954eb1da9c + - SHA256=b617a072c578cea38c460e2851f3d122ba1b7cfa1f5ee3e9f5927663ac37af61 + - SHA256=e428ddf9afc9b2d11e2271f0a67a2d6638b860c2c12d4b8cc63d33f3349ee93f + - SHA256=42e170a7ab1d2c160d60abfc906872f9cfd0c2ee169ed76f6acb3f83b3eeefdb + - SHA256=6fb5bc9c51f6872de116c7db8a2134461743908efc306373f6de59a0646c4f5d + - SHA256=c9c60f560440ff16ad3c767ff5b7658d5bda61ea1166efe9b7f450447557136e + - SHA256=7164aaff86b3b7c588fc7ae7839cc09c5c8c6ae29d1aff5325adaf5bedd7c9f5 + - SHA256=680ddece32fe99f056e770cb08641f5b585550798dfdf723441a11364637c7e6 + - SHA256=1c425793a8ce87be916969d6d7e9dd0687b181565c3b483ce53ad1ec6fb72a17 - SHA256=955dac77a0148e9f9ed744f5d341cb9c9118261e52fe622ac6213965f2bc4cad - - SHA256=97b32ddf83f75637e3ba934df117081dd6a1c57d47a4c9700d35e736da11d5bd - - SHA256=66f8bd2b29763acfbb7423f4c3c9c3af9f3ca4113bd580ab32f6e3ee4a4fc64e - - SHA256=8c95d28270a4a314299cf50f05dcbe63033b2a555195d2ad2f678e09e00393e6 - - SHA256=e3eff841ea0f2786e5e0fed2744c0829719ad711fc9258eeaf81ed65a52a8918 - - SHA256=01e024cb14b34b6d525c642a710bfa14497ea20fd287c39ba404b10a8b143ece - - SHA256=909de5f21837ea2b13fdc4e5763589e6bdedb903f7c04e1d0b08776639774880 + - SHA256=4db1e0fdc9e6cefeb1d588668ea6161a977c372d841e7b87098cf90aa679abfb + - SHA256=a13054f349b7baa8c8a3fcbd31789807a493cc52224bbff5e412eb2bd52a6433 + - SHA256=27cd05527feb020084a4a76579c125458571da8843cdfc3733211760a11da970 + - SHA256=0452a6e8f00bae0b79335c1799a26b2b77d603451f2e6cc3b137ad91996d4dec + - SHA256=5df689a62003d26df4aefbaed41ec1205abbf3a2e18e1f1d51b97711e8fcdf00 + - SHA256=3140005ce5cac03985f71c29732859c88017df9d41c3761aa7c57bbcb7ad2928 + - SHA256=bced04bdefad6a08c763265d6993f07aa2feb57d33ed057f162a947cf0e6668f + - SHA256=ad8ffccfde782bc287241152cf24245a8bf21c2530d81c57e17631b3c4adb833 + - SHA256=1078af0c70e03ac17c7b8aa5ee03593f5decfef2f536716646a4ded1e98c153c + - SHA256=38e6d7c2787b6289629c72b1ec87655392267044b4e4b830c0232243657ee8f9 + - SHA256=38c18db050b0b2b07f657c03db1c9595febae0319c746c3eede677e21cd238b0 + - SHA256=ae6fb53e4d8122dba3a65e5fa59185b36c3ac9df46e82fcfb6731ab55c6395aa + - SHA256=0b8887921e4a22e24fd058ba5ac40061b4bb569ac7207b9548168af9d6995e7c + - SHA256=8a982eed9cbc724d50a9ddf4f74ecbcd67b4fdcd9c2bb1795bc88c2d9caf7506 + - SHA256=6cb6e23ba516570bbd158c32f7c7c99f19b24ca4437340ecb39253662afe4293 + - SHA256=e4cf438838dc10b188b3d4a318fd9ba2479abb078458d7f97591c723e2d637ce + - SHA256=1ddfe4756f5db9fb319d6c6da9c41c588a729d9e7817190b027b38e9c076d219 + - SHA256=385485e643aa611e97ceae6590c6a8c47155886123dbb9de1e704d0d1624d039 + - SHA256=5f69d6b167a1eeca3f6ac64785c3c01976ee7303171faf998d65852056988683 + - SHA256=b8b94c2646b62f6ac08f16514b6efaa9866aa3c581e4c0435a7aeafe569b2418 - SHA256=b51ddcf8309c80384986dda9b11bf7856b030e3e885b0856efdb9e84064917e5 - - SHA256=bc7ebd191e0991fd0865a5c956a92e63792a0bb2ff888af43f7a63bb65a22248 - - SHA256=cb57f3a7fe9e1f8e63332c563b0a319b26c944be839eabc03e9a3277756ba612 - - SHA256=6c6c5e35accc37c928d721c800476ccf4c4b5b06a1b0906dc5ff4df71ff50943 - - SHA256=2b4c7d3820fe08400a7791e2556132b902a9bbadc1942de57077ecb9d21bf47a - - SHA256=00c02901472d74e8276743c847b8148be3799b0e3037c1dfdca21fa81ad4b922 - - SHA256=910aa4685c735d8c07662aa04fafec463185699ad1a0cd1967b892fc33ec6c3c - - SHA256=98a123b314cba2de65f899cdbfa386532f178333389e0f0fbd544aff85be02eb - - SHA256=b1867d13a4cab66a76f4d4448824ca0cb3a176064626f9618c0c103ee3cb4f47 - - SHA256=e81230217988f3e7ec6f89a06d231ec66039bdba340fd8ebb2bbb586506e3293 - - SHA256=b7aa4c17afdaff1603ef9b5cc8981bed535555f8185b59d5ae13f342f27ca6c5 - - SHA256=ea0b9eecf4ad5ec8c14aec13de7d661e7615018b1a3c65464bf5eca9bbf6ded3 - - SHA256=e4c154a0073bbad3c9f8ab7218e9b3be252ae705c20c568861dae4088f17ffcc - - SHA256=2a11b4f125d8537e69af7b684494e49ef2a30a219634988e278177fa36c934eb - - SHA256=72b99147839bcfb062d29014ec09fe20a8f261748b5925b00171ef3cb849a4c1 - - SHA256=ece0a900ea089e730741499614c0917432246ceb5e11599ee3a1bb679e24fd2c - - SHA256=5de78cf5f0b1b09e7145db84e91a2223c3ed4d83cceb3ef073c068cf88b9d444 - - SHA256=54bf602a6f1baaec5809a630a5c33f76f1c3147e4b05cecf17b96a93b1d41dca - - SHA256=7227377a47204f8e2ff167eee54b4b3545c0a19e3727f0ec59974e1a904f4a96 - - SHA256=f27febff1be9e89e48a9128e2121c7754d15f8a5b2e88c50102cecee5fe60229 - - SHA256=fca10cde7d331b7f614118682d834d46125a65888e97bd9fda2df3f15797166c - - SHA256=78d49094913526340d8d0ef952e8fe9ada9e8b20726b77fb88c9fb5d54510663 - - SHA256=79e2d37632c417138970b4feba91b7e10c2ea251c5efe3d1fc6fa0190f176b57 - - SHA256=8e5aef7c66c0e92dfc037ee29ade1c8484b8d7fadebdcf521d2763b1d8215126 - - SHA256=d998ea6d0051e17c1387c9f295b1c79bacb2f61c23809903445f60313d36c7fd - - SHA256=60b163776e7b95e0c2280d04476304d0c943b484909131f340e3ce6045a49289 - - SHA256=20f11a64bc4548f4edb47e3d3418da0f6d54a83158224b71662a6292bf45b5fb - - SHA256=133e542842656197c5d22429bd56d57aa33c9522897fdf29853a6d321033c743 - - SHA256=ae5cc99f3c61c86c7624b064fd188262e0160645c1676d231516bf4e716a22d3 - - SHA256=ad0309c2d225d8540a47250e3773876e05ce6a47a7767511e2f68645562c0686 - - SHA256=36b9e31240ab0341873c7092b63e2e0f2cab2962ebf9b25271c3a1216b7669eb - - SHA256=3fa6379951f08ed3cb87eeba9cf0c5f5e1d0317dcfcf003b810df9d795eeb73e - - SHA256=3a95cc82173032b82a0ffc7d2e438df64c13bc16b4574214c9fe3be37250925e - - SHA256=22418016e980e0a4a2d01ca210a17059916a4208352c1018b0079ccb19aaf86a - - SHA256=dd4a1253d47de14ef83f1bc8b40816a86ccf90d1e624c5adf9203ae9d51d4097 - - SHA256=ef86c4e5ee1dbc4f81cd864e8cd2f4a2a85ee4475b9a9ab698a4ae1cc71fbeb0 - - SHA256=11a4b08e70ebc25a1d4c35ed0f8ef576c1424c52b580115b26149bd224ffc768 - - SHA256=42851a01469ba97cdc38939b10cf9ea13237aa1f6c37b1ac84904c5a12a81fa0 - - SHA256=06bda5a1594f7121acd2efe38ccb617fbc078bb9a70b665a5f5efd70e3013f50 - - SHA256=b531f0a11ca481d5125c93c977325e135a04058019f939169ce3cdedaddd422d - - SHA256=d25904fbf907e19f366d54962ff543d9f53b8fdfd2416c8b9796b6a8dd430e26 - - SHA256=1e0eb0811a7cf1bdaf29d3d2cab373ca51eb8d8b58889ab7728e2d3aed244abe - - SHA256=3f2fda9a7a9c57b7138687bbce49a2e156d6095dddabb3454ea09737e02c3fa5 - - SHA256=72288d4978ee87ea6c8b1566dbd906107357087cef7364fb3dd1e1896d00baeb - - SHA256=b47be212352d407d0ef7458a7161c66b47c2aec8391dd101df11e65728337a6a - - SHA256=a56c2a2425eb3a4260cc7fc5c8d7bed7a3b4cd2af256185f24471c668853aee8 - - SHA256=42579a759f3f95f20a2c51d5ac2047a2662a2675b3fb9f46c1ed7f23393a0f00 - - SHA256=37073e42ffa0322500f90cd7e3c8d02c4cdd695d31c77e81560abec20bfb68ba - - SHA256=83fbf5d46cff38dd1c0f83686708b3bd6a3a73fddd7a2da2b5a3acccd1d9359c - - SHA256=4e37592a2a415f520438330c32cfbdbd6af594deef5290b2fa4b9722b898ff69 - - SHA256=38bb9751a3a1f072d518afe6921a66ee6d5cf6d25bc50af49e1925f20d75d4d7 - - SHA256=2101d5e80e92c55ecfd8c24fcf2202a206a4fd70195a1378f88c4cc04d336f22 - - SHA256=828a18b16418c021b6c4aa8c6d54cef4e815efca0d48b9ff14822f9ccb69dff2 + - SHA256=3724b39e97936bb20ada51c6119aded04530ed86f6b8d6b45fbfb2f3b9a4114b + - SHA256=33bc9a17a0909e32a3ae7e6f089b7f050591dd6f3f7a8172575606bec01889ef + - SHA256=8111085022bda87e5f6aa4c195e743cc6dd6a3a6d41add475d267dc6b105a69f + - SHA256=53b9e423baf946983d03ce309ec5e006ba18c9956dcd97c68a8b714d18c8ffcf + - SHA256=0fd2df82341bf5ebb8a53682e60d08978100c01acb0bed7b6ce2876ada80f670 + - SHA256=2a9d481ffdc5c1e2cb50cf078be32be06b21f6e2b38e90e008edfc8c4f2a9c4e + - SHA256=ee45fd2d7315fd039f3585a66e7855ba4af9d4721e1448e602623de14e932bbe + - SHA256=76940e313c27c7ff692051fbf1fbdec19c8c31a6723a9de7e15c3c1bec8186f6 + - SHA256=eae5c993b250dcc5fee01deeb30045b0e5ee7cf9306ef6edd8c58e4dc743a8ed + - SHA256=3279593db91bb7ad5b489a01808c645eafafda6cc9c39f50d10ccc30203f2ddf + - SHA256=ae79e760c739d6214c1e314728a78a6cb6060cce206fde2440a69735d639a0a2 + - SHA256=727e8ba66a8ff07bdc778eacb463b65f2d7167a6616ca2f259ea32571cacf8af + - SHA256=f85cca4badff17d1aa90752153ccec77a68ad282b69e3985fdc4743eaea85004 + - SHA256=88df37ede18bea511f1782c1a6c4915690b29591cf2c1bf5f52201fbbb4fa2b9 + - SHA256=67cd6166d791bdf74453e19c015b2cb1e85e41892c04580034b65f9f03fe2e79 + - SHA256=71c0ce3d33352ba6a0fb26e274d0fa87dc756d2473e104e0f5a7d57fab8a5713 + - SHA256=8ae383546761069b26826dfbf2ac0233169d155bca6a94160488092b4e70b222 + - SHA256=7b0f442ac0bb183906700097d65aed0b4b9d8678f9a01aca864854189fe368e7 + - SHA256=a2096b460e31451659b0dde752264c362f47254c8191930bc921ff16a4311641 + - SHA256=29f449fca0a41deccef5b0dccd22af18259222f69ed6389beafe8d5168c59e36 + - SHA256=7553c76b006bd2c75af4e4ee00a02279d3f1f5d691e7dbdc955eac46fd3614c3 + - SHA256=56a3c9ac137d862a85b4004f043d46542a1b61c6acb438098a9640469e2d80e7 + - SHA256=9790a7b9d624b2b18768bb655dda4a05a9929633cef0b1521e79e40d7de0a05b + - SHA256=3943a796cc7c5352aa57ccf544295bfd6fb69aae147bc8235a00202dc6ed6838 + - SHA256=7e3b0b8d3e430074109d85729201d7c34bc5b918c0bcb9f64ce88c5e37e1a456 + - SHA256=0de4247e72d378713bcf22d5c5d3874d079203bb4364e25f67a90d5570bdcce8 + - SHA256=2ce81759bfa236913bbbb9b2cbc093140b099486fd002910b18e2c6e31fdc4f1 + - SHA256=36505921af5a09175395ebaea29c72b2a69a3a9204384a767a5be8a721f31b10 + - SHA256=8137ce22d0d0fc5ea5b174d6ad3506a4949506477b1325da2ccb76511f4c4f60 + - SHA256=4737750788c72d2fc9cf95681c622357263075d65b23e54c4dc3f31446cad37b + - SHA256=fd388cf1df06d419b14dedbeb24c6f4dff37bea26018775f09d56b3067f0de2c + - SHA256=18712a063574bfec315d58577dfe413ab45b650e54747d1e18a56c3c7337a12c + - SHA256=3b2ad08123e8ed2516548240cfcdf5eefd89293f31070a6cd3949ee1b66fed14 + - SHA256=edbb23e74562e98b849e5d0eefde3af056ec6e272802a04b61bebd12395754e5 + - SHA256=11d258e05b850dcc9ecfacccc9486e54bd928aaa3d5e9942696c323fdbd3481b + - SHA256=39134750f909987f6ebb46cf37519bb80707be0ca2017f3735018bac795a3f8d + - SHA256=0eab16c7f54b61620277977f8c332737081a46bc6bbde50742b6904bdd54f502 + - SHA256=5da0ffe33987f8d5fb9c151f0eff29b99f42233b27efcad596add27bdc5c88ff + - SHA256=e4522e2cfa0b1f5d258a3cf85b87681d6969e0572f668024c465d635c236b5d9 + - SHA256=4b5229b3250c8c08b98cb710d6c056144271de099a57ae09f5d2097fc41bd4f1 + - SHA256=bceaf970b60b4457eca3c181f649a1c67f4602778171e53d9bdc9b97a09603ca + - SHA256=5192ec4501d0fe0b1c8f7bf9b778f7524a7a70a26bbbb66e5dab8480f6fdbb8b + - SHA256=db711ec3f4c96b60e4ed674d60c20ff7212d80e34b7aa171ad626eaa8399e8c7 + - SHA256=32bd0edb9daa60175b1dc054f30e28e8dbfa293a32e6c86bfd06bc046eaa2f9e - SHA256=0cd4ca335155062182608cad9ef5c8351a715bce92049719dd09c76422cd7b0c - - SHA256=36aafa127736c7226c50061ea065f71e14f64ec60321f705bc52686d24117e0d - - SHA256=4880f40f2e557cff38100620b9aa1a3a753cb693af16cd3d95841583edcb57a8 - - SHA256=e428ddf9afc9b2d11e2271f0a67a2d6638b860c2c12d4b8cc63d33f3349ee93f - - SHA256=7cc9ba2df7b9ea6bb17ee342898edd7f54703b93b6ded6a819e83a7ee9f938b4 - - SHA256=fb81b5f8bf69637dbdf050181499088a67d24577587bc520de94b5ee8996240f - - SHA256=de8f8006d8ee429b5f333503defa54b25447f4ed6aeade5e4219e23f3473ef1c + - SHA256=bdcacb9f373b017d0905845292bca2089feb0900ce80e78df1bcaae8328ce042 + - SHA256=db90e554ad249c2bd888282ecf7d8da4d1538dd364129a3327b54f8242dd5653 + - SHA256=f744abb99c97d98e4cd08072a897107829d6d8481aee96c22443f626d00f4145 + - SHA256=f29073dc99cb52fa890aae80037b48a172138f112474a1aecddae21179c93478 + - SHA256=b7aa4c17afdaff1603ef9b5cc8981bed535555f8185b59d5ae13f342f27ca6c5 + - SHA256=edfc38f91b5e198f3bf80ef6dcaebb5e86963936bcd2e5280088ca90d6998b8c + - SHA256=a2353030d4ea3ad9e874a0f7ff35bbfa10562c98c949d88cabab27102bbb8e48 + - SHA256=0484defcf1b5afbe573472753dc2395e528608b688e5c7d1d178164e48e7bed7 + - SHA256=8e6363a6393eb4234667c6f614b2072e33512866b3204f8395bbe01530d63f2f + - SHA256=b3a191ccd1df19cdf17fe6637d48266ac84c4310b013ad6973d8cb336b06ff69 + - SHA256=e05eeb2b8c18ad2cb2d1038c043d770a0d51b96b748bc34be3e7fc6f3790ce53 + - SHA256=70211a3f90376bbc61f49c22a63075d1d4ddd53f0aefa976216c46e6ba39a9f4 + - SHA256=c186967cc4f2a0cb853c9796d3ea416d233e48e735f02b1bb013967964e89778 + - SHA256=0d30c6c4fa0216d0637b4049142bc275814fd674859373bd4af520ce173a1c75 - SHA256=5bd41a29cbba0d24e639f49d1f201b9bd119b11f5e3b8a5fefa3a5c6f1e7692c - - SHA256=a5a50449e2cc4d0dbc80496f757935ae38bf8a1bebdd6555a3495d8c219df2ad + - SHA256=bfc2ef3b404294fe2fa05a8b71c7f786b58519175b7202a69fe30f45e607ff1c + - SHA256=be54f7279e69fb7651f98e91d24069dbc7c4c67e65850e486622ccbdc44d9a57 + - SHA256=00c3e86952eebb113d91d118629077b3370ebc41eeacb419762d2de30a43c09c + - SHA256=7a1105548bfc4b0a1b7b891cde0356d39b6633975cbcd0f2e2d8e31b3646d2ca + - SHA256=3b19a7207a55d752db1b366b1dea2fd2c7620a825a3f0dcffca10af76611118c + - SHA256=fe2fb5d6cfcd64aeb62e6bf5b71fd2b2a87886eb97ab59e5353ba740da9f5db5 + - SHA256=7fd90500b57f9ac959c87f713fe9ca59e669e6e1512f77fccb6a75cdc0dfee8e + - SHA256=0c925468c3376458d0e1ec65e097bd1a81a03901035c0195e8f6ef904ef3f901 + - SHA256=e642d82c5cde2bc40a204736b5b8d6578e8e2b893877ae0508cfa3371fc254dc + - SHA256=440883cd9d6a76db5e53517d0ec7fe13d5a50d2f6a7f91ecfc863bc3490e4f5c + - SHA256=1273b74c3c1553eaa92e844fbd51f716356cc19cf77c2c780d4899ec7738fbd1 + - SHA256=146d77e80ca70ea5cb17bfc9a5cea92334f809cbdc87a51c2d10b8579a4b9c88 + - SHA256=3c18ae965fba56d09a65770b4d8da54ccd7801f979d3ebd283397bc99646004b + - SHA256=65e3548bc09dffd550e79501e3fe0fee268f895908e2bba1aa5620eb9bdac52d + - SHA256=0e10d3c73596e359462dc6bfcb886768486ff59e158f0f872d23c5e9a2f7c168 + - SHA256=afdd66562dea51001c3a9de300f91fc3eb965d6848dfce92ccb9b75853e02508 + - SHA256=060d25126e45309414b380ee29f900840b689eae4217a8e621563f130c1d457f + - SHA256=38fa0c663c8689048726666f1c5e019feaa9da8278f1df6ff62da33961891d2a + - SHA256=2a6db9facf9e13d35c37dd468be04bae5f70c6127a9aee76daebddbdec95d486 + - SHA256=36875562e747136313ec5db58174e5fab870997a054ca8d3987d181599c7db6a + - SHA256=642857fc8d737e92db8771e46e8638a37d9743928c959ed056c15427c6197a54 + - SHA256=55a1535e173c998fbbc978009b02d36ca0c737340d84ac2a8da73dfc2f450ef9 + - SHA256=1aaa9aef39cb3c0a854ecb4ca7d3b213458f302025e0ec5bfbdef973cca9111c + - SHA256=e3b257357be41a18319332df7023c4407e2b93ac4c9e0c6754032e29f3763eac + - SHA256=6c5aef14613b8471f5f4fdeb9f25b5907c2335a4bc18b3c2266fb1ffd8f1741d + - SHA256=1ce9e4600859293c59d884ea721e9b20b2410f6ef80699f8a78a6b9fad505dfc + - SHA256=33d7046a5d41f4010ad5df632577154ed223dac2ab0ca2da57dbf1724db45a57 + - SHA256=653f6a65e0e608cae217bea2f90f05d8125cf23f83ba01a60de0f5659cfa5d4d + - SHA256=20dd9542d30174585f2623642c7fbbda84e2347e4365e804e3f3d81f530c4ece + - SHA256=3d008e636e74c846fe7c00f90089ff725561cb3d49ce3253f2bbfbc939bbfcb2 + - SHA256=65329dad28e92f4bcc64de15c552b6ef424494028b18875b7dba840053bc0cdd + - SHA256=a66d2fb7ef7350ea74d4290c57fb62bc59c6ea93f759d4ca93c3febca7aeb512 + - SHA256=133e542842656197c5d22429bd56d57aa33c9522897fdf29853a6d321033c743 + - SHA256=79e2d37632c417138970b4feba91b7e10c2ea251c5efe3d1fc6fa0190f176b57 + - SHA256=5ee292b605cd3751a24e5949aae615d472a3c72688632c3040dc311055b75a92 + - SHA256=51e91dd108d974ae809e5fc23f6fbd16e13f672f86aa594dae4a5c4bc629b0b5 + - SHA256=613d6cc154586c21b330018142a89eac4504e185f0be7f86af975e5b6c046c55 + - SHA256=f9895458e73d4b0ef01eda347fb695bb00e6598d9f5e2506161b70ad96bb7298 + - SHA256=b738eab6f3e32cec59d5f53c12f13862429d3db6756212bbcd78ba4b4dbc234c + - SHA256=caa85c44eb511377ea7426ff10df00a701c07ffb384eef8287636a4bca0b53ab + - SHA256=7da6113183328d4fddf6937c0c85ef65ba69bfe133b1146193a25bcf6ae1f9dd + - SHA256=854bc946b557ed78c7d40547eb39e293e83942a693c94d0e798d1c4fbde7efa9 + - SHA256=6191c20426dd9b131122fb97e45be64a4d6ce98cc583406f38473434636ddedc + - SHA256=aa0c52cebd64a0115c0e7faf4316a52208f738f66a54b4871bd4162eb83dc41a + - SHA256=23ba19352b1e71a965260bf4d5120f0200709ee8657ed381043bec9a938a1ade - SHA256=71fe5af0f1564dc187eea8d59c0fbc897712afa07d18316d2080330ba17cf009 - - SHA256=db90e554ad249c2bd888282ecf7d8da4d1538dd364129a3327b54f8242dd5653 - - SHA256=83f7be0a13c1fccf024c31da5c68c0ea1decf4f48fc39d6e4fd324bbe789ae8a - - SHA256=61a1bdddd3c512e681818debb5bee94db701768fc25e674fcad46592a3259bd0 - - SHA256=cd4a249c3ef65af285d0f8f30a8a96e83688486aab515836318a2559757a89bb - - SHA256=3d23bdbaf9905259d858df5bf991eb23d2dc9f4ecda7f9f77839691acef1b8c4 - - SHA256=607dc4c75ac7aef82ae0616a453866b3b358c6cf5c8f9d29e4d37f844306b97c - - SHA256=c8eaa5e6d3230b93c126d2d58e32409e4aeeb23ccf0dd047a17f1ef552f92fe9 - - SHA256=f581decc2888ef27ee1ea85ea23bbb5fb2fe6a554266ff5a1476acd1d29d53af - - SHA256=7b0f442ac0bb183906700097d65aed0b4b9d8678f9a01aca864854189fe368e7 - - SHA256=1e9ec6b3e83055ae90f3664a083c46885c506d33de5e2a49f5f1189e89fa9f0a - - SHA256=b1d96233235a62dbb21b8dbe2d1ae333199669f67664b107bff1ad49b41d9414 + - SHA256=2003b478b9fd1b3d76ec5bf4172c2e8915babbbee7ad1783794acbf8d4c2519d + - SHA256=03e0581432f5c8cc727a8aa387f5b69ff84d38d0df6f1226c19c6e960a81e1e9 + - SHA256=69640e9209f8e2ac25416bd3119b5308894b6ce22b5c80cb5d5f98f2f85d42ce + - SHA256=074ae477c8c7ae76c6f2b0bf77ac17935a8e8ee51b52155d2821d93ab30f3761 + - SHA256=16e2b071991b470a76dff4b6312d3c7e2133ad9ac4b6a62dda4e32281952fb23 + - SHA256=092d04284fdeb6762e65e6ac5b813920d6c69a5e99d110769c5c1a78e11c5ba0 + - SHA256=cff9aa9046bdfd781d34f607d901a431a51bb7e5f48f4f681cc743b2cdedc98c + - SHA256=9d5ebd0f4585ec20a5fe3c5276df13ece5a2645d3d6f70cedcda979bd1248fc2 + - SHA256=f2ed6c1906663016123559d9f3407bc67f64e0d235fa6f10810a3fa7bb322967 + - SHA256=e005e8d183e853a27ad3bb56f25489f369c11b0d47e3d4095aad9291b3343bf1 + - SHA256=c190e4a7f1781ec9fa8c17506b4745a1369dcdf174ce07f85de1a66cf4b5ed8a + - SHA256=5027fce41ed60906a0e76b97c95c2a5a83d57a2d1cd42de232a21f26c0d58e48 + - SHA256=cc383ad11e9d06047a1558ed343f389492da3ac2b84b71462aee502a2fa616c8 + - SHA256=ffc72f0bde21ba20aa97bee99d9e96870e5aa40cce9884e44c612757f939494f + - SHA256=d7b743c3f98662c955c616e0d1bb0800c9602e5b6f2385336a72623037bfd6dd + - SHA256=636b4c1882bcdd19b56370e2ed744e059149c64c96de64ac595f20509efa6220 + - SHA256=fb6b0d304433bf88cc7d57728683dbb4b9833459dc33528918ead09b3907ff22 + - SHA256=7d8937c18d6e11a0952e53970a0934cf0e65515637ac24d6ca52ccf4b93d385f - SHA256=4cff6e53430b81ecc4fae453e59a0353bcfe73dd5780abfc35f299c16a97998e - - SHA256=c299063e3eae8ddc15839767e83b9808fd43418dc5a1af7e4f44b97ba53fbd3d - - SHA256=7048d90ed4c83ad52eb9c677f615627b32815066e34230c3b407ebb01279bae6 - - SHA256=7d4ca5760b6ad2e4152080e115f040f9d42608d2c7d7f074a579f911d06c8cf8 - - SHA256=2bf29a2df52110ed463d51376562afceac0e80fbb1033284cf50edd86c406b14 - - SHA256=50d5eaa168c077ce5b7f15b3f2c43bd2b86b07b1e926c1b332f8cb13bd2e0793 - - SHA256=131d5490ceb9a5b2324d8e927fea5becfc633015661de2f4c2f2375a3a3b64c6 - - SHA256=d3eaf041ce5f3fd59885ead2cb4ce5c61ac9d83d41f626512942a50e3da7b75a - - SHA256=1aaa9aef39cb3c0a854ecb4ca7d3b213458f302025e0ec5bfbdef973cca9111c - - SHA256=d0bd1ae72aeb5f3eabf1531a635f990e5eaae7fdd560342f915f723766c80889 - - SHA256=927c2a580d51a598177fa54c65e9d2610f5f212f1b6cb2fbf2740b64368f010a - - SHA256=3326e2d32bbabd69feb6024809afc56c7e39241ebe70a53728c77e80995422a5 - - SHA256=7877c1b0e7429453b750218ca491c2825dae684ad9616642eff7b41715c70aca - - SHA256=916c535957a3b8cbf3336b63b2260ea4055163a9e6b214f2a7005d6d36a4a677 - - SHA256=34bee22c18ddbddbe115cf1ab55cabf0e482aba1eb2c343153577fb24b7226d3 - - SHA256=63af3fdb1e85949c8adccb43f09ca4556ae258b363a99ae599e1e834d34c8670 - - SHA256=61befeef14783eb0fed679fca179d2f5c33eb2dcbd40980669ca2ebeb3bf11cf - - SHA256=b773511fdb2e370dec042530910a905472fcc2558eb108b246fd3200171b04d3 - - SHA256=c640930c29ea3610a3a5cebee573235ec70267ed223b79b9fa45a80081e686a4 - - SHA256=19696fb0db3fcae22f705ae1eb1e9f1151c823f3ff5d8857e90f2a4a6fdc5758 - - SHA256=d884ca8cc4ef1826ca3ab03eb3c2d8f356ba25f2d20db0a7d9fc251c565be7f3 - - SHA256=0cf91e8f64a7c98dbeab21597bd76723aee892ed8fa4ee44b09f9e75089308e2 - - SHA256=e77786b21dbe73e9619ac9aac5e7e92989333d559aa22b4b65c97f0a42ff2e21 - - SHA256=53eaefba7e7dca9ab74e385abf18762f9f1aa51594e7f7db5ba612d6c787dd7e - - SHA256=552f70374715e70c4ade591d65177be2539ec60f751223680dfaccb9e0be0ed9 - - SHA256=9c10e2ec4f9ef591415f9a784b93dc9c9cdafa7c69602c0dc860c5b62222e449 - - SHA256=fe2fb5d6cfcd64aeb62e6bf5b71fd2b2a87886eb97ab59e5353ba740da9f5db5 - - SHA256=1ee59eb28688e73d10838c66e0d8e011c8df45b6b43a4ac5d0b75795ca3eb512 + - SHA256=7837cb350338c4958968d06b105466da6518f5bb522a6e70e87c0cad85128408 + - SHA256=4b4ea21da21a1167c00b903c05a4e3af6c514ea3dfe0b5f371f6a06305e1d27f + - SHA256=be8dd2d39a527649e34dc77ef8bc07193a4234b38597b8f51e519dadc5479ec2 + - SHA256=c60fcff9c8e5243bbb22ec94618b9dcb02c59bb49b90c04d7d6ab3ebbd58dc3a + - SHA256=6a4875ae86131a594019dec4abd46ac6ba47e57a88287b814d07d929858fe3e5 + - SHA256=22418016e980e0a4a2d01ca210a17059916a4208352c1018b0079ccb19aaf86a - SHA256=0ee5067ce48883701824c5b1ad91695998916a3702cf8086962fbe58af74b2d6 - - SHA256=cb9890d4e303a4c03095d7bc176c42dee1b47d8aa58e2f442ec1514c8f9e3cec - - SHA256=258359a7fa3d975620c9810dab3a6493972876a024135feaf3ac8482179b2e79 - - SHA256=003e61358878c7e49e18420ee0b4a37b51880be40929a76e529c7b3fb18e81b4 - - SHA256=7f375639a0df7fe51e5518cf87c3f513c55bc117db47d28da8c615642eb18bfa - - SHA256=8cf0cbbdc43f9b977f0fb79e0a0dd0e1adabe08a67d0f40d727c717c747de775 - - SHA256=8797d9afc7a6bb0933f100a8acbb5d0666ec691779d522ac66c66817155b1c0d - - SHA256=478917514be37b32d5ccf76e4009f6f952f39f5553953544f1b0688befd95e82 - - SHA256=78827fa00ea48d96ac9af8d1c1e317d02ce11793e7f7f6e4c7aac7b5d7dd490f - - SHA256=0aafa9f47acf69d46c9542985994ff5321f00842a28df2396d4a3076776a83cb - - SHA256=fd33fb2735cc5ef466a54807d3436622407287e325276fcd3ed1290c98bd0533 - - SHA256=238046cfe126a1f8ab96d8b62f6aa5ec97bab830e2bae5b1b6ab2d31894c79e4 - - SHA256=9ca586b49135166eea00c6f83329a2d134152e0e9423822a51c13394265b6340 - - SHA256=db2a9247177e8cdd50fe9433d066b86ffd2a84301aa6b2eb60f361cfff077004 - - SHA256=0ce40a2cdd3f45c7632b858e8089ddfdd12d9acb286f2015a4b1b0c0346a572c - - SHA256=ff9623317287358440ec67da9ba79994d9b17b99ffdd709ec836478fe1fc22a5 + - SHA256=b48a309ee0960da3caaaaf1e794e8c409993aeb3a2b64809f36b97aac8a1e62a + - SHA256=9fa120bda98633e30480d8475c9ac6637470c4ca7c63763560bf869138091b01 + - SHA256=dcb815eb8e9016608d0d917101b6af8c84b96fb709dc0344bceed02cbc4ed258 + - SHA256=101402d4f5d1ae413ded499c78a5fcbbc7e3bae9b000d64c1dd64e3c48c37558 + - SHA256=d633055c7eda26dacfc30109eb790625519fc7b0a3a601ceed9e21918aad8a1b + - SHA256=c586befc3fd561fcbf1cf706214ae2adaa43ce9ba760efd548d581f60deafc65 + - SHA256=0040153302b88bee27eb4f1eca6855039e1a057370f5e8c615724fa5215bada3 + - SHA256=f583cfb8aab7d084dc052dbd0b9d56693308cbb26bd1b607c2aedf8ee2b25e44 + - SHA256=d8459f7d707c635e2c04d6d6d47b63f73ba3f6629702c7a6e0df0462f6478ae2 + - SHA256=bac1cd96ba242cdf29f8feac501110739f1524f0db1c8fcad59409e77b8928ba + - SHA256=d92eab70bcece4432258c9c9a914483a2267f6ab5ce2630048d3a99e8cb1b482 + - SHA256=e4c154a0073bbad3c9f8ab7218e9b3be252ae705c20c568861dae4088f17ffcc + - SHA256=ac3f613d457fc4d44fa27b2e0b1baa62c09415705efb5a40a4756da39b3ac165 + - SHA256=73fddd441a764e808ed6d6b8f3d0d13713e61221aa3cfef7da91cdaf112fe061 + - SHA256=ff322cd0cc30976f9dbdb7a3681529aeab0de7b7f5c5763362b02c15da9657a1 + - SHA256=c181ce9a57e8d763db89ba7c45702a8cf66ef1bb58e3f21874cf0265711f886b + - SHA256=5177a3b7393fb5855b2ec0a45d4c91660b958ee077e76e5a7d0669f2e04bcf02 + - SHA256=51145a3fa8258aac106f65f34159d23c54b48b6d54ec0421748b3939ab6778eb + - SHA256=08eb2d2aa25c5f0af4e72a7e0126735536f6c2c05e9c7437282171afe5e322c6 + - SHA256=31d8fc6f5fb837d5eb29db828d13ba8ee11867d86a90b2c2483a578e1d0ec43a + - SHA256=1aaf4c1e3cb6774857e2eef27c17e68dc1ae577112e4769665f516c2e8c4e27b + - SHA256=61a1bdddd3c512e681818debb5bee94db701768fc25e674fcad46592a3259bd0 + - SHA256=83a1fabf782d5f041132d7c7281525f6610207b38f33ff3c5e44eb9444dd0cbc + - SHA256=8047859a7a886bcf4e666494bd03a6be9ce18e20dc72df0e5b418d180efef250 + - SHA256=61f3b1c026d203ce94fab514e3d15090222c0eedc2a768cc2d073ec658671874 + - SHA256=7133a461aeb03b4d69d43f3d26cd1a9e3ee01694e97a0645a3d8aa1a44c39129 + - SHA256=a6f7897cd08fe9de5e902bb204ff87215584a008f458357d019a50d6139ca4af + - SHA256=0f035948848432bc243704041739e49b528f35c82a5be922d9e3b8a4c44398ff + - SHA256=6297556f66cd6619057f3a5b216b314f8a27eebb5fa575ee07a1944aca71ae80 + - SHA256=09b0e07af8b17db1d896b78da4dd3f55db76738ee1f4ced083a97d737334a184 + - SHA256=f581decc2888ef27ee1ea85ea23bbb5fb2fe6a554266ff5a1476acd1d29d53af + - SHA256=3e1f592533625bf794e0184485a4407782018718ae797103f9e968ff6f0973a1 + - SHA256=94be67c319a67de75ebed050d5537cfaa795d72bba52f3d8cf349e7bd075410e + - SHA256=8939116df1d6c8fd0ebd14b2d37b3dec38a8820aa666ecd487bc1bb794f2a587 + - SHA256=98b734dda78c16ebcaa4afeb31007926542b63b2f163b2f733fa0d00dbb344d8 + - SHA256=ab8f2217e59319b88080e052782e559a706fa4fb7b8b708f709ff3617124da89 + - SHA256=72b67b6b38f5e5447880447a55fead7f1de51ca37ae4a0c2b2f23a4cb7455f35 + - SHA256=eea53103e7a5a55dc1df79797395a2a3e96123ebd71cdd2db4b1be80e7b3f02b + - SHA256=b11e109f6b3dbc8aa82cd7da0b7ba93d07d9809ee2a4b21ec014f6a676a53027 - SHA256=0507d893e3fd2917c81c1dc13ccb22ae5402ab6ca9fb8d89485010838050d08d - - SHA256=d44848d3e845f8293974e8b621b72a61ec00c8d3cf95fcf41698bbbd4bdf5565 - - SHA256=86a1b1bacc0c51332c9979e6aad84b5fba335df6b9a096ccb7681ab0779a8882 - - SHA256=0a89a6ab2fca486480b6e3dacf392d6ce0c59a5bdb4bcd18d672feb4ebb0543c - - SHA256=40da0adf588cbb2841a657239d92f24b111d62b173204b8102dd0e014932fe59 - - SHA256=8e88cb80328c3dbaa2752591692e74a2fae7e146d7d8aabc9b9ac9a6fe561e6c - - SHA256=94c226a530dd3cd8d911901f702f3dab8200d1d4fdc73fcb269f7001f4e66915 - - SHA256=c2fcc0fec64d5647813b84b9049d430406c4c6a7b9f8b725da21bcae2ff12247 - - SHA256=ad215185dc833c54d523350ef3dbc10b3357a88fc4dde00281d9af81ea0764d5 - - SHA256=e2d8dd5dacc24051709f55a35184f5f99aef957a83bd358b0608b4479e1ec24f + - SHA256=c26b51b4c37330800cff8519252e110116c3aaade94ceb9894ec5bfb1b8f9924 + - SHA256=5aee1bae73d056960b3a2d2e24ea07c44358dc7bc3f8ac58cc015cccc8f8d89c + - SHA256=09bedbf7a41e0f8dabe4f41d331db58373ce15b2e9204540873a1884f38bdde1 + - SHA256=1023dcd4c80db19e9f82f95b1c5e1ddb60db7ac034848dd5cc1c78104a6350f4 + - SHA256=37dde6bd8a7a36111c3ac57e0ac20bbb93ce3374d0852bcacc9a2c8c8c30079e + - SHA256=93b266f38c3c3eaab475d81597abbd7cc07943035068bb6fd670dbbe15de0131 + - SHA256=2470fd1b733314c9b0afa19fd39c5d19aa1b36db598b5ebbe93445caa545da5f + - SHA256=8a0702681bc51419fbd336817787a966c7f92cabe09f8e959251069578dfa881 + - SHA256=9d9346e6f46f831e263385a9bd32428e01919cca26a035bbb8e9cb00bf410bc3 + - SHA256=dd2c1aa4e14c825f3715891bfa2b6264650a794f366d5f73ed1ef1d79ff0dbf9 + - SHA256=da6ca1fb539f825ca0f012ed6976baf57ef9c70143b7a1e88b4650bf7a925e24 + - SHA256=9a54ef5cfbe6db599322967ee2c84db7daabcb468be10a3ccfcaa0f64d9173c7 + - SHA256=c628cda1ef43defc00af45b79949675a8422490d32b080b3a8bb9434242bdbf2 - SHA256=f51bdb0ad924178131c21e39a8ccd191e46b5512b0f2e1cc8486f63e84e5d960 - - SHA256=deecbcd260849178de421d8e2f177dce5c63cf67a48abb23a0e3cf3aa3e00578 - - SHA256=e7b79fe1377b3da749590c080d4d96e59e622b1013b2183b98c81baa8bf2fffe + - SHA256=07b6d69bafcfd767f1b63a490a8843c3bb1f8e1bbea56176109b5743c8f7d357 + - SHA256=b17507a3246020fa0052a172485d7b3567e0161747927f2edf27c40e310852e0 + - SHA256=1698ba7eeee6ff9272cc25b242af89190ff23fd9530f21aa8f0f3792412594f3 + - SHA256=092349aebdac28294dbad1656759d8461f362d1a36b01054dccf861d97beadf0 + - SHA256=87aae726bf7104aac8c8f566ea98f2b51a2bfb6097b6fc8aa1f70adeb4681e1b + - SHA256=673b63b67345773cd6d66f6adcf2c753e2d949232bff818d5bb6e05786538d92 + - SHA256=bb1135b51acca8348d285dc5461d10e8f57260e7d0c8cc4a092734d53fc40cbc + - SHA256=cbb8239a765bf5b2c1b6a5c8832d2cab8fef5deacadfb65d8ed43ef56d291ab6 + - SHA256=837d3b67d3e66ef1674c9f1a47046e1617ed13f73ee08441d95a6de3d73ee9f2 + - SHA256=db73b0fa032be22405fa0b52fbfe3b30e56ac4787e620e4854c32668ae43bc33 + - SHA256=773999db2f07c50aad70e50c1983fa95804369d25a5b4f10bd610f864c27f2fc + - SHA256=f64a78b1294e6837f12f171a663d8831f232b1012fd8bae3c2c6368fbf71219b + - SHA256=733789d0a253e8d80cc3240e365b8d4274e510e36007f6e4b5fd13b07b084c3e + - SHA256=7cb594af6a3655daebc9fad9c8abf2417b00ba31dcd118707824e5316fc0cc21 + - SHA256=9b1ac756e35f795dd91adbc841e78db23cb7165280f8d4a01df663128b66d194 + - SHA256=e16dc51c51b2df88c474feb52ce884d152b3511094306a289623de69dedfdf48 + - SHA256=747a4dc50915053649c499a508853a42d9e325a5eec22e586571e338c6d32465 + - SHA256=903d6d71da64566b1d9c32d4fb1a1491e9f91006ad2281bb91d4f1ee9567ef7b + - SHA256=6cf1cac0e97d30bb445b710fd8513879678a8b07be95d309cbf29e9b328ff259 + - SHA256=19a212e6fc324f4cb9ee5eba60f5c1fc0191799a4432265cbeaa3307c76a7fc0 + - SHA256=de3597ae7196ca8c0750dce296a8a4f58893774f764455a125464766fcc9b3b5 + - SHA256=55b5bcbf8fb4e1ce99d201d3903d785888c928aa26e947ce2cdb99eefd0dae03 + - SHA256=f7e0cca8ad9ea1e34fa1a5e0533a746b2fa0988ba56b01542bc43841e463b686 + - SHA256=4ba224af60a50cad10d0091c89134c72fc021da8d34a6f25c4827184dc6ca5c7 + - SHA256=40eef1f52c7b81750cee2b74b5d2f4155d4e58bdde5e18ea612ab09ed0864554 + - SHA256=1c2f1e2b0cc4da128feb73a6b9dd040df8495fefe861d69c9f44778c6ddb9b9b + - SHA256=53810ca98e07a567bb082628d95d796f14c218762cbbaa79704740284dccda4b + - SHA256=7048d90ed4c83ad52eb9c677f615627b32815066e34230c3b407ebb01279bae6 + - SHA256=6e76764d750ebd835aa4bb055830d278df530303585614c1dc743f8d5adf97d7 + - SHA256=db2a9247177e8cdd50fe9433d066b86ffd2a84301aa6b2eb60f361cfff077004 + - SHA256=43ba8d96d5e8e54cab59d82d495eeca730eeb16e4743ed134cdd495c51a4fc89 + - SHA256=841335eeb6af68dce5b8b24151776281a751b95056a894991b23afae80e9f33b + - SHA256=38d87b51f4b69ba2dae1477684a1415f1a3b578eee5e1126673b1beaefee9a20 + - SHA256=00d9781d0823ab49505ef9c877aa6fa674e19ecc8b02c39ee2728f298bc92b03 + - SHA256=84df20b1d9d87e305c92e5ffae21b10b325609d59d835a954dbd8750ef5dabf4 + - SHA256=d9e8be11a19699903016f39f95c9c5bf1a39774ecea73670f2c3ed5385ebfe4c + - SHA256=6ef0b34649186fb98a7431b606e77ee35e755894b038755ba98e577bd51b2c72 + - SHA256=dbb457ae1bd07a945a1466ce4a206c625e590aee3922fa7d86fbe956beccfc98 + - SHA256=55963284bbd5a3297f39f12f0d8a01ed99fe59d008561e3537bcd4db4b4268fa + - SHA256=7e81beae78e1ddbf6c150e15667e1f18783f9b0ab7fbe52c7ab63e754135948d + - SHA256=3e85cf32562a47d51827b21ab1e7f8c26c0dbd1cd86272f3cc64caae61a7e5fb + - SHA256=e7cbfb16261de1c7f009431d374d90e9eb049ba78246e38bc4c8b9e06f324b6f + - SHA256=b50ffc60eaa4fb7429fdbb67c0aba0c7085f5129564d0a113fec231c5f8ff62e + - SHA256=760be95d4c04b10df89a78414facf91c0961020e80561eee6e2cb94b43b76510 + - SHA256=b749566057dee0439f54b0d38935e5939b5cb011c46d7022530f748ebc63efe5 + - SHA256=85866e8c25d82c1ec91d7a8076c7d073cccf421cf57d9c83d80d63943a4edd94 + - SHA256=0f17e5cfc5bdd74aff91bfb1a836071345ba2b5d1b47b0d5bf8e7e0d4d5e2dbf + - SHA256=221dfbc74bbb255b0879360ccc71a74b756b2e0f16e9386b38a9ce9d4e2e34f9 + - SHA256=6948480954137987a0be626c24cf594390960242cd75f094cd6aaa5c2e7a54fa + - SHA256=bc7ebd191e0991fd0865a5c956a92e63792a0bb2ff888af43f7a63bb65a22248 + - SHA256=ac26150bc98ee0419a8b23e4cda3566e0eba94718ba8059346a9696401e9793d + - SHA256=81aafae4c4158d0b9a6431aff0410745a0f6a43fb20a9ab316ffeb8c2e2ccac0 + - SHA256=3ff39728f1c11d1108f65ec5eb3d722fd1a1279c530d79712e0d32b34880baaa + - SHA256=9254f012009d55f555418ff85f7d93b184ab7cb0e37aecdfdab62cfe94dea96b + - SHA256=2732050a7d836ae0bdc5c0aea4cdf8ce205618c3e7f613b8139c176e86476d0c + - SHA256=0a9b608461d55815e99700607a52fbdb7d598f968126d38e10cc4293ac4b1ad8 + - SHA256=87e38e7aeaaaa96efe1a74f59fca8371de93544b7af22862eb0e574cec49c7c3 + - SHA256=3fa6379951f08ed3cb87eeba9cf0c5f5e1d0317dcfcf003b810df9d795eeb73e + - SHA256=ec5fac0b6bb267a2bd10fc80c8cca6718439d56e82e053d3ff799ce5f3475db5 + - SHA256=927c2a580d51a598177fa54c65e9d2610f5f212f1b6cb2fbf2740b64368f010a + - SHA256=2f8b68de1e541093f2d4525a0d02f36d361cd69ee8b1db18e6dd064af3856f4f + - SHA256=b2ba6efeff1860614b150916a77c9278f19d51e459e67a069ccd15f985cbc0e1 + - SHA256=8ef59605ebb2cb259f19aba1a8c122629c224c58e603f270eaa72f516277620c + - SHA256=4324f3d1e4007f6499a3d0f0102cd92ed9f554332bc0b633305cd7b957ff16c8 + - SHA256=bb68552936a6b0a68fb53ce864a6387d2698332aac10a7adfdd5a48b97027ce3 + - SHA256=80eeb8c2890f3535ed14f5881baf2f2226e6763be099d09fb8aadaba5b4474c1 + - SHA256=d74755311d127d0eb7454e56babc2db8dbaa814bc4ba8e2a7754d3e0224778e1 + - SHA256=19bf0d0f55d2ad33ef2d105520bde8fb4286f00e9d7a721e3c9587b9408a0775 + - SHA256=ad0309c2d225d8540a47250e3773876e05ce6a47a7767511e2f68645562c0686 + - SHA256=62f5e13b2edc00128716cb93e6a9eddffea67ce83d2bb426f18f5be08ead89e0 + - SHA256=3f9530c94b689f39cc83377d76979d443275012e022782a600dcb5cad4cca6aa + - SHA256=3e758221506628b116e88c14e71be99940894663013df3cf1a9e0b6fb18852b9 + - SHA256=314384b40626800b1cde6fbc51ebc7d13e91398be2688c2a58354aa08d00b073 + - SHA256=fca10cde7d331b7f614118682d834d46125a65888e97bd9fda2df3f15797166c + - SHA256=86a8e0aa29a5b52c84921188cc1f0eca9a7904dcfe09544602933d8377720219 + - SHA256=025e7be9fcefd6a83f4471bba0c11f1c11bd5047047d26626da24ee9a419cdc4 + - SHA256=ce23c2dae4cca4771ea50ec737093dfafac06c64db0f924a1ccbbf687e33f5a2 + - SHA256=77c5e95b872b1d815d6d3ed28b399ca39f3427eeb0143f49982120ff732285a9 + - SHA256=11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5 + - SHA256=7cfa5e10dff8a99a5d544b011f676bc383991274c693e21e3af40cf6982adb8c + - SHA256=c8f0bb5d8836e21e7a22a406c69c01ba7d512a808c37c45088575d548ee25caa - SHA256=11208bbba148736309a8d2a4ab9ab6b8f22f2297547b100d8bdfd7d413fe98b2 - - SHA256=c082514317bf80a2f5129d84a5a55e411a95e32d03a4df1274537704c80e41dd - - SHA256=2a4f4400402cdc475d39389645ca825bb0e775c3ecb7c527e30c5be44e24af7d + - SHA256=7893307df2fdde25371645a924f0333e1b2de31b6bc839d8e2a908d7830c6504 + - SHA256=d2182b6ef3255c7c1a69223cd3c2d68eb8ba3112ce433cd49cd803dc76412d4b + - SHA256=c490d6c0844f59fdb4aa850a06e283fbf5e5b6ac20ff42ead03d549d8ae1c01b + - SHA256=8e5aef7c66c0e92dfc037ee29ade1c8484b8d7fadebdcf521d2763b1d8215126 + - SHA256=81d54ebef1716e195955046ffded498a5a7e325bf83e7847893aa3b0b3776d05 + - SHA256=d5c4ff35eaa74ccdb80c7197d3d113c9cd38561070f2aa69c0affe8ed84a77c9 + - SHA256=828a18b16418c021b6c4aa8c6d54cef4e815efca0d48b9ff14822f9ccb69dff2 + - SHA256=182bbdb9ecd3932e0f0c986b779c2b2b3997a7ca9375caa2ec59b4b08f4e9714 - SHA256=f88ebb633406a086d9cca6bc8b66a4ea940c5476529f9033a9e0463512a23a57 - - SHA256=fd388cf1df06d419b14dedbeb24c6f4dff37bea26018775f09d56b3067f0de2c - - SHA256=20dd9542d30174585f2623642c7fbbda84e2347e4365e804e3f3d81f530c4ece + - SHA256=c299063e3eae8ddc15839767e83b9808fd43418dc5a1af7e4f44b97ba53fbd3d + - SHA256=5cfad3d473961763306d72c12bd5ae14183a1a5778325c9acacca764b79ca185 + - SHA256=f1fbec90c60ee4daba1b35932db9f3556633b2777b1039163841a91cf997938e + - SHA256=9917144b7240b1ce0cadb1210fd26182744fbbdf145943037c4b93e44aced207 + - SHA256=c6feb3f4932387df7598e29d4f5bdacec0b9ce98db3f51d96fc4ffdcc6eb10e1 + - SHA256=0be4912bfd7a79f6ebfa1c06a59f0fb402bd4fe0158265780509edd0e562eac1 + - SHA256=ad215185dc833c54d523350ef3dbc10b3357a88fc4dde00281d9af81ea0764d5 + - SHA256=e2d6cdc3d8960a50d9f292bb337b3235956a61e4e8b16cf158cb979b777f42aa + - SHA256=8797d9afc7a6bb0933f100a8acbb5d0666ec691779d522ac66c66817155b1c0d + - SHA256=dbebf6d463c2dbf61836b3eba09b643e1d79a02652a32482ca58894703b9addb + - SHA256=cd4a249c3ef65af285d0f8f30a8a96e83688486aab515836318a2559757a89bb + - SHA256=e6d1ee0455068b74cf537388c874acb335382876aa9d74586efb05d6cc362ae5 + - SHA256=af095de15a16255ca1b2c27dad365dff9ac32d2a75e8e288f5a1307680781685 + - SHA256=70b63dfc3ed2b89a4eb8a0aa6c26885f460e5686d21c9d32413df0cdc5f962c7 + - SHA256=909f6c4b8f779df01ef91e549679aa4600223ac75bc7f3a3a79a37cee2326e77 + - SHA256=e3eff841ea0f2786e5e0fed2744c0829719ad711fc9258eeaf81ed65a52a8918 + - SHA256=90574d2c406b9738aae8fc629c3983c5e47a6282a43b052f38b5dd313380c30a + - SHA256=823da894b2c73ffcd39e77366b6f1abf0ae9604d9b20140a54e6d55053aadeba + - SHA256=5daa8fa3b5db2e6225a2effea41af95fe7ffc579550c4081c8028ed33bc023b8 + - SHA256=115034373fc0ec8f75fb075b7a7011b603259ecc0aca271445e559b5404a1406 + - SHA256=a072197177aad26c31960694e38e2cae85afbab070929e67e331b99d3a418cf4 + - SHA256=93d873cdf23d5edc622b74f9544cac7fe247d7a68e1e2a7bf2879fad97a3ae63 + - SHA256=ac63c26ca43701dddaa7fb1aea535d42190f88752900a03040fd5aaa24991e25 + - SHA256=1f8168036d636aad1680dd0f577ef9532dbb2dad3591d63e752b0ba3ee6fd501 + - SHA256=592f56b13e7dcaa285da64a0b9a48be7562bd9b0a190208b7c8b7d8de427cf6c + - SHA256=d783ace822f8fe4e25d5387e5dd249cb72e62f62079023216dc436f1853a150f + - SHA256=e0b5a5f8333fc1213791af5c5814d7a99615b3951361ca75f8aa5022c9cfbc2b + - SHA256=c50f8ab8538c557963252b702c1bd3cee4604b5fc2497705d2a6a3fd87e3cc26 + - SHA256=b3d1bdd4ad819b99870b6e2ed3527dfc0e3ce27b929ad64382b9c3d4e332315c + - SHA256=4a9093e8dbcb867e1b97a0a67ce99a8511900658f5201c34ffb8035881f2dbbe + - SHA256=f190919f1668652249fa23d8c0455acbde9d344089fde96566239b1a18b91da2 + - SHA256=c9b49b52b493b53cd49c12c3fa9553e57c5394555b64e32d1208f5b96a5b8c6e + - SHA256=4c807bacfcf5c30686e26812ec8d5581a824b82fee7434260c27c33eee2dfbe2 + - SHA256=000547560fea0dd4b477eb28bf781ea67bf83c748945ce8923f90fdd14eb7a4b + - SHA256=700b9839fde53e91f0847053b4d2eb8d9bd3aca098844510f1fa3bab6a37eb24 + - SHA256=d474ea066d416ded9ed8501c285ca6b1c26a1d1c813c8f6bd5523eeb66c5d01e + - SHA256=4e3eb5b9bce2fd9f6878ae36288211f0997f6149aa8c290ed91228ba4cdfae80 + - SHA256=6b830ea0db6546a044c9900d3f335e7820c2a80e147b0751641899d1a5aa8f74 + - SHA256=2a4f4400402cdc475d39389645ca825bb0e775c3ecb7c527e30c5be44e24af7d + - SHA256=075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85 + - SHA256=1ee59eb28688e73d10838c66e0d8e011c8df45b6b43a4ac5d0b75795ca3eb512 + - SHA256=b6fd51e1f57a03006953e84fd56cc2821cc19e7c77c0474e1110aabaacaf03df + - SHA256=ff55c1f308a5694eb66a3e9ba326266c826c5341c44958831a7a59a23ed5ecc8 + - SHA256=a7c2e7910942dd5e43e2f4eb159bcd2b4e71366e34a68109548b9fb12ac0f7cc + - SHA256=5d7bfe05792189eaf7193bee85f0c792c33315cfcb40b2e62cc7baef6cafbc5c + - SHA256=a7b000abbcc344444a9b00cfade7aa22ab92ce0cadec196c30eb1851ae4fa062 + - SHA256=4ce8583768720be90fae66eed3b6b4a8c7c64e033be53d4cd98246d6e06086d0 + - SHA256=7ef8949637cb947f1a4e1d4e68d31d1385a600d1b1054b53e7417767461fafa7 + - SHA256=bdcacee3695583a0ca38b9a786b9f7334bf2a9a3387e4069c8e6ca378b2791d0 + - SHA256=4c859b3d11d2ff0049b644a19f3a316a8ca1a4995aa9c39991a7bde8d4f426a4 + - SHA256=50db5480d0392a7dd6ab5df98389dc24d1ed1e9c98c9c35964b19dabcd6dc67f + - SHA256=d969845ef6acc8e5d3421a7ce7e244f419989710871313b04148f9b322751e5d + - SHA256=da617fe914a5f86dc9d657ef891bbbceb393c8a6fea2313c84923f3630255cdb + - SHA256=e58bbf3251906ff722aa63415bf169618e78be85cb92c8263d3715c260491e90 + - SHA256=cf66fcbcb8b2ea7fb4398f398b7480c50f6a451b51367718c36330182c1bb496 + - SHA256=79e87b93fbed84ec09261b3a0145c935f7dfe4d4805edfb563b2f971a0d51463 + - SHA256=1e24c45ce2672ee403db34077c88e8b7d7797d113c6fd161906dce3784da627d + - SHA256=0c512b615eac374d4d494e3c36838d8e788b3dc2691bf27916f7f42694b14467 + - SHA256=4045ae77859b1dbf13972451972eaaf6f3c97bea423e9e78f1c2f14330cd47ca + - SHA256=b78eb7f12ba718183313cf336655996756411b7dcc8648157aaa4c891ca9dbee + - SHA256=c5050a2017490fff7aa53c73755982b339ddb0fd7cef2cde32c81bc9834331c5 + - SHA256=771a8d05f1af6214e0ef0886662be500ee910ab99f0154227067fddcfe08a3dd + - SHA256=61d6e40601fa368800980801a662a5b3b36e3c23296e8ae1c85726a56ef18cc8 + - SHA256=5ab48bf8c099611b217cc9f78af2f92e9aaeedf1cea4c95d5dd562f51e9f0d09 + - SHA256=274340f7185a0cc047d82ecfb2cce5bd18764ee558b5227894565c2f9fe9f6ab + - SHA256=89bc3cb4522f9b0bf467a93a4123ef623c28244e25a9c34d4aae11f705d187e7 + - SHA256=e3f2ee22dec15061919583e4beb8abb3b29b283e2bcb46badf2bfde65f5ea8dd + - SHA256=b7a20b5f15e1871b392782c46ebcc897929443d82073ee4dcb3874b6a5976b5d + - SHA256=ea0b9eecf4ad5ec8c14aec13de7d661e7615018b1a3c65464bf5eca9bbf6ded3 + - SHA256=a566af57d88f37fa033e64b1d8abbd3ffdacaba260475fbbc8dab846a824eff5 + - SHA256=98a123b314cba2de65f899cdbfa386532f178333389e0f0fbd544aff85be02eb + - SHA256=afda5af5f210336061bff0fab0ed93ee495312bed639ec5db56fbac0ea8247d3 - SHA256=e3936d3356573ce2e472495cd3ce769f49a613e453b010433dafce5ea498ddc2 - - SHA256=9d9346e6f46f831e263385a9bd32428e01919cca26a035bbb8e9cb00bf410bc3 - - SHA256=99f4994a0e5bd1bf6e3f637d3225c69ff4cd620557e23637533e7f18d7d6cba1 - - SHA256=fafa1bb36f0ac34b762a10e9f327dcab2152a6d0b16a19697362d49a31e7f566 - - SHA256=be683cd38e64280567c59f7dc0a45570abcb8a75f1d894853bbbd25675b4adf7 - - SHA256=727e8ba66a8ff07bdc778eacb463b65f2d7167a6616ca2f259ea32571cacf8af - - SHA256=f088b2ba27dacd5c28f8ee428f1350dca4bc7c6606309c287c801b2e1da1a53d - - SHA256=80a59ca71fc20961ccafc0686051e86ae4afbbd4578cb26ad4570b9207651085 - - SHA256=2470fd1b733314c9b0afa19fd39c5d19aa1b36db598b5ebbe93445caa545da5f - - SHA256=2594b3ef3675ca3a7b465b8ed4962e3251364bab13b12af00ebba7fa2211abb2 - - SHA256=2aa1b08f47fbb1e2bd2e4a492f5d616968e703e1359a921f62b38b8e4662f0c4 - - SHA256=082c39fe2e3217004206535e271ebd45c11eb072efde4cc9885b25ba5c39f91d - - SHA256=c9cf1d627078f63a36bbde364cd0d5f2be1714124d186c06db5bcdf549a109f8 - - SHA256=af1011c76a22af7be97a0b3e0ce11aca0509820c59fa7c8eeaaa1b2c0225f75a - - SHA256=1deae340bf619319adce00701de887f7434deab4d5547a1742aeedb5634d23c6 - - SHA256=9ee33ffd80611a13779df6286c1e04d3c151f1e2f65e3d664a08997fcd098ef3 - - SHA256=11d258e05b850dcc9ecfacccc9486e54bd928aaa3d5e9942696c323fdbd3481b - - SHA256=b11e109f6b3dbc8aa82cd7da0b7ba93d07d9809ee2a4b21ec014f6a676a53027 - - SHA256=26e3bfef255efd052a84c3c43994c73222b14c95db9a4b1fc2e98f1a5cb26e43 - - SHA256=80eeb8c2890f3535ed14f5881baf2f2226e6763be099d09fb8aadaba5b4474c1 - - SHA256=da11e9598eef033722b97873d1c046270dd039d0e3ee6cd37911e2dc2eb2608d - - SHA256=0a9b608461d55815e99700607a52fbdb7d598f968126d38e10cc4293ac4b1ad8 + - SHA256=9c8ed1506b3e35f5eea6ac539e286d46ef76ddbfdfc5406390fd2157c762ce91 + - SHA256=97030f3c81906334429afebbf365a89b66804ed890cd74038815ca18823d626c + - SHA256=ef6d3c00f9d0aa31a218094480299ef73fc85146adf62fd0c2f4f88972c5c850 + - SHA256=065a34b786b0ccf6f88c136408943c3d2bd3da14357ee1e55e81e05d67a4c9bc + - SHA256=3c11dec1571253594d64619d8efc8c0212897be84a75a8646c578e665f58bf5d + - SHA256=c188b36f258f38193ace21a7d254f0aec36b59ad7e3f9bcb9c2958108effebad + - SHA256=7539157df91923d4575f7f57c8eb8b0fd87f064c919c1db85e73eebb2910b60c + - SHA256=aaa3459bcac25423f78ed72dbae4d7ef19e7c5c65770cbe5210b14e33cd1816c - SHA256=900dd68ccc72d73774a347b3290c4b6153ae496a81de722ebb043e2e99496f88 - - SHA256=4ba224af60a50cad10d0091c89134c72fc021da8d34a6f25c4827184dc6ca5c7 - - SHA256=95d50c69cdbf10c9c9d61e64fe864ac91e6f6caa637d128eb20e1d3510e776d3 - - SHA256=358ac54be252673841a1d65bfc2fb6d549c1a4c877fa7f5e1bfa188f30375d69 - - SHA256=5f7e47d728ac3301eb47b409801a0f4726a435f78f1ed02c30d2a926259c71f3 - - SHA256=7108613244f16c2279c3c917aa49cef8acf0b92fdaa9ace19bf5cf634360d727 - - SHA256=0c925468c3376458d0e1ec65e097bd1a81a03901035c0195e8f6ef904ef3f901 - - SHA256=9529efb1837b1005e5e8f477773752078e0a46500c748bc30c9b5084d04082e6 - - SHA256=8111085022bda87e5f6aa4c195e743cc6dd6a3a6d41add475d267dc6b105a69f - - SHA256=f62911334068c9edd44b9c3e8dee8155a0097aa331dd4566a61afa3549f35f65 - - SHA256=8e6363a6393eb4234667c6f614b2072e33512866b3204f8395bbe01530d63f2f - - SHA256=1afa03118f87b62c59a97617e595ebb26dde8dbdd16ee47ef3ddd1097c30ef6a - - SHA256=6c5aef14613b8471f5f4fdeb9f25b5907c2335a4bc18b3c2266fb1ffd8f1741d - - SHA256=0f035948848432bc243704041739e49b528f35c82a5be922d9e3b8a4c44398ff - - SHA256=760be95d4c04b10df89a78414facf91c0961020e80561eee6e2cb94b43b76510 - - SHA256=1c2f1e2b0cc4da128feb73a6b9dd040df8495fefe861d69c9f44778c6ddb9b9b - - SHA256=d783ace822f8fe4e25d5387e5dd249cb72e62f62079023216dc436f1853a150f - - SHA256=0040153302b88bee27eb4f1eca6855039e1a057370f5e8c615724fa5215bada3 - - SHA256=f596e64f4c5d7c37a00493728d8756b243cfdc11e3372d6d6dfeffc13c9ab960 - - SHA256=22e125c284a55eb730f03ec27b87ab84cf897f9d046b91c76bea2b5809fd51c5 + - SHA256=c9cf1d627078f63a36bbde364cd0d5f2be1714124d186c06db5bcdf549a109f8 + - SHA256=22be050955347661685a4343c51f11c7811674e030386d2264cd12ecbf544b7c + - SHA256=509628b6d16d2428031311d7bd2add8d5f5160e9ecc0cd909f1e82bbbb3234d6 + - SHA256=a9706e320179993dade519a83061477ace195daa1b788662825484813001f526 + - SHA256=a29093d4d708185ba8be35709113fb42e402bbfbf2960d3e00fd7c759ef0b94e + - SHA256=ad23d77a38655acb71216824e363df8ac41a48a1a0080f35a0d23aa14b54460b + - SHA256=86a1b1bacc0c51332c9979e6aad84b5fba335df6b9a096ccb7681ab0779a8882 + - SHA256=4b4c925c3b8285aeeab9b954e8b2a0773b4d2d0e18d07d4a9d268f4be90f6cae + - SHA256=5be106b92424b12865338b3f541b3c244dce9693fe15f763316f0c6d6fc073ee + - SHA256=b84dc9b885193ced6a1b6842a365a4f18d1683951bb11a5c780ab737ffa06684 + - SHA256=dda2a604bb94a274e23f0005f0aa330d45ca1ea25111746fb46fa5ef6d155b1d + - SHA256=3af9c376d43321e813057ecd0403e71cafc3302139e2409ab41e254386c33ecb + - SHA256=f93e0d776481c4ded177d5e4aebb27f30f0d47dcb4a1448aee8b66099ac686e1 + - SHA256=8bf01cd6d55502838853851703eb297ec71361fa9a0b088a30c2434f4d2bf9c6 + - SHA256=80cbba9f404df3e642f22c476664d63d7c229d45d34f5cd0e19c65eb41becec3 + - SHA256=c1c4310e5d467d24e864177bdbfc57cb5d29aac697481bfa9c11ddbeebfd4cc8 + - SHA256=1aa8ba45f9524847e2a36c0dc6fd80162923e88dc1be217dde2fb5894c65ff43 + - SHA256=654c5ba47f74008c8f49cbb97988017eec8c898adc3bb851bc6e1fdf9dcf54ad + - SHA256=a3975db1127c331ba541fffff0c607a15c45b47aa078e756b402422ef7e81c2c + - SHA256=7ad0ab23023bc500c3b46f414a8b363c5f8700861bc4745cecc14dd34bcee9ed + - SHA256=cf4b5fa853ce809f1924df3a3ae3c4e191878c4ea5248d8785dc7e51807a512b + - SHA256=5ae23f1fcf3fb735fcf1fa27f27e610d9945d668a149c7b7b0c84ffd6409d99a + - SHA256=70afdc0e11db840d5367afe53c35d9642c1cf616c7832ab283781d085988e505 + - SHA256=76276c87617b836dd6f31b73d2bb0e756d4b3d133bddfe169cb4225124ca6bfb + - SHA256=0da746e49fd662be910d0e366934a7e02898714eaaa577e261ab40eb44222b5c + - SHA256=1e8b0c1966e566a523d652e00f7727d8b0663f1dfdce3b9a09b9adfaef48d8ee + - SHA256=1072beb3ff6b191b3df1a339e3a8c87a8dc5eae727f2b993ea51b448e837636a + - SHA256=ef438a754fd940d145cc5d658ddac666a06871d71652b258946c21efe4b7e517 + - SHA256=0af5ccb3d33a9ba92071c9637be6254030d61998733a5eb3583e865e17844e05 + - SHA256=4d0580c20c1ba74cf90d44c82d040f0039542eea96e4bbff3996e6760f457cee + - SHA256=94911fe6f2aba9683b10353094caf71ee4a882de63b4620797629d79f18feec5 + - SHA256=f8965fdce668692c3785afa3559159f9a18287bc0d53abb21902895a8ecf221b + - SHA256=9b2f051ac901ab47d0012a1002cb8b2db28c14e9480c0dd55e1ac11c81ba9285 + - SHA256=20f11a64bc4548f4edb47e3d3418da0f6d54a83158224b71662a6292bf45b5fb + - SHA256=d9500af86bf129d06b47bcfbc4b23fcc724cfbd2af58b03cdb13b26f8f50d65e + - SHA256=b531f0a11ca481d5125c93c977325e135a04058019f939169ce3cdedaddd422d + - SHA256=fa77a472e95c4d0a2271e5d7253a85af25c07719df26941b39082cfc0733071a + - SHA256=6ffdde6bc6784c13c601442e47157062941c47015891e7139c2aaba676ab59cc + - SHA256=5c9e257c9740561b5744812e1343815e7972c362c8993d972b96a56e18c712f3 + - SHA256=76614f2e372f33100a8d92bf372cdbc1e183930ca747eed0b0cf2501293b990a + - SHA256=b4c07f7e7c87518e8950eb0651ae34832b1ecee56c89cdfbd1b4efa8cf97779f + - SHA256=786f0ba14567a7e19192645ad4e40bee6df259abf2fbdfda35b6a38f8493d6cc + - SHA256=17687cba00ec2c9036dd3cb5430aa1f4851e64990dafb4c8f06d88de5283d6ca + - SHA256=212c05b487cd4e64de2a1077b789e47e9ac3361efa24d9aab3cc6ad4bd3bd76a + - SHA256=5c80dc051c4b0c62b9284211f71e5567c0c0187e466591eacb93e7dc10e4b9ab + - SHA256=79440da6b8178998bdda5ebde90491c124b1967d295db1449ec820a85dc246dd + - SHA256=9eba5d1545fdbf37cf053ac3f3ba45bcb651b8abb7805cbfdfb5f91ea294fb95 + - SHA256=c8940e2e9b069ec94f9f711150b313b437f8429f78d522810601b6ee8b52bada + - SHA256=45c3d607cb57a1714c1c604a25cbadf2779f4734855d0e43aa394073b6966b26 + - SHA256=e4d9f037411284e996a002b15b49bc227d085ee869ae1cd91ba54ff7c244f036 + - SHA256=ee3ff12943ced401e2b6df9e66e8a0be8e449fa9326cab241f471b2d8ffefdd7 + - SHA256=ae73dd357e5950face9c956570088f334d18464cd49f00c56420e3d6ff47e8dc + - SHA256=b2bc7514201727d773c09a1cfcfae793fcdbad98024251ccb510df0c269b04e6 - SHA256=708016fbe22c813a251098f8f992b177b476bd1bbc48c2ed4a122ff74910a965 - - SHA256=8ef0ad86500094e8fa3d9e7d53163aa6feef67c09575c169873c494ed66f057f - - SHA256=76660e91f1ff3cb89630df5af4fe09de6098d09baa66b1a130c89c3c5edd5b22 - - SHA256=6f1fc8287dd8d724972d7a165683f2b2ad6837e16f09fe292714e8e38ecd1e38 - - SHA256=025e7be9fcefd6a83f4471bba0c11f1c11bd5047047d26626da24ee9a419cdc4 - - SHA256=3e9b62d2ea2be50a2da670746c4dbe807db9601980af3a1014bcd72d0248d84c - - SHA256=d5c4ff35eaa74ccdb80c7197d3d113c9cd38561070f2aa69c0affe8ed84a77c9 + - SHA256=eef68fdc5df91660410fb9bed005ed08c258c44d66349192faf5bb5f09f5fa90 + - SHA256=582b62ffbcbcdd62c0fc624cdf106545af71078f1edfe1129401d64f3eefaa3a + - SHA256=326b53365f8486c78608139cac84619eff90be361f7ade9db70f9867dd94dcc9 + - SHA256=9bd8b0289955a6eb791f45c3203f08a64cbd457fd1b9d598a6fbbca5d0372e36 + - SHA256=655110646bff890c448c0951e11132dc3592bda6e080696341b930d090224723 + - SHA256=8d6febd54ce0c98ea3653e582f7791061923a9a4842bd4a1326564204431ca9f + - SHA256=9529efb1837b1005e5e8f477773752078e0a46500c748bc30c9b5084d04082e6 + - SHA256=f2a4ddc38e68efd2eac27b2562529926f5ade93575a82e8d3e0abb2b37347257 + - SHA256=e89afd283d5789b8064d5487e04b97e2cd3fc0c711a8cec230543ebdf9ffc534 + - SHA256=78827fa00ea48d96ac9af8d1c1e317d02ce11793e7f7f6e4c7aac7b5d7dd490f + - SHA256=57a389da784269bb2cc0a258500f6dfbf4f6269276e1192619ce439ec77f4572 + - SHA256=81fbc9d02ef9e05602ea9c0804d423043d0ea5a06393c7ece3be03459f76a41d + - SHA256=2ad8c38f6e0ca6c93abe3228c8a5d4299430ce0a2eeb80c914326c75ba8a33f9 + - SHA256=89b9823ed974a5b71de8468324d45b7e9d6dc914f93615ba86c6209b25b3cbf7 + - SHA256=5b9623da9ba8e5c80c49473f40ffe7ad315dcadffc3230afdc9d9226d60a715a + - SHA256=36e3127f045ef1fa7426a3ff8c441092d3b66923d2b69826034e48306609e289 + - SHA256=71423a66165782efb4db7be6ce48ddb463d9f65fd0f266d333a6558791d158e5 + - SHA256=4941c4298f4560fc1e59d0f16f84bab5c060793700b82be2fd7c63735f1657a8 + - SHA256=848b150ffcf1301b26634a41f28deacb5ccdd3117d79b590d515ed49849b8891 + - SHA256=14938f68957ede6e2b742a550042119a8fbc9f14427fb89fa53fff12d243561c + - SHA256=49ef680510e3dac6979a20629d10f06822c78f45b9a62ec209b71827a526be94 + - SHA256=a495ffa623a5220179b0dd519935e255dd6910b7b7bc3d68906528496561ff53 + - SHA256=a7c8f4faf3cbb088cac7753d81f8ec4c38ccb97cd9da817741f49272e8d01200 + - SHA256=e1980c6592e6d2d92c1a65acad8f1071b6a404097bb6fcce494f3c8ac31385cf + - SHA256=c8ff7c9f510f7a2ed88d9b336d8c9339698d5e1ee14bfb91aa89703ec06dce42 + - SHA256=0b542e47248611a1895018ec4f4033ea53464f259c74eb014d018b19ad818917 + - SHA256=348dc502ac57d7362c7f222e656c52e630c90bef92217a3bd20e49193b5a69f1 + - SHA256=f42eb29f5b2bcb2a70d796fd71fd1b259d5380b216ee672cf46dcdd4604b87ad + - SHA256=5fbfd7c4ea3db1197ad38d5a945acf6f2f42cb350380cf8ae276bc80b0dedb77 + - SHA256=77950e2a40ac0447ae7ee1ee3ef1242ce22796a157074e6f04e345b1956e143c - SHA256=de6bf572d39e2611773e7a01f0388f84fb25da6cba2f1f8b9b36ffba467de6fa - - SHA256=1284a1462a5270833ec7719f768cdb381e7d0a9c475041f9f3c74fa8eea83590 - - SHA256=09043c51719d4bf6405c9a7a292bb9bb3bcc782f639b708ddcc4eedb5e5c9ce9 - - SHA256=0c42fe45ffa9a9c36c87a7f01510a077da6340ffd86bf8509f02c6939da133c5 + - SHA256=45ba688a4bded8a7e78a4f5b0dc21004e951ddceb014bb92f51a3301d2fbc56a + - SHA256=36aafa127736c7226c50061ea065f71e14f64ec60321f705bc52686d24117e0d + - SHA256=7c8ad57b3a224fdc2aac9dd2d7c3624f1fcd3542d4db804de25a90155657e2cc + - SHA256=7462b7ae48ae9469474222d4df2f0c4f72cdef7f3a69a524d4fccc5ed0fd343f + - SHA256=d205286bffdf09bc033c09e95c519c1c267b40c2ee8bab703c6a2d86741ccd3e + - SHA256=39f137083e6c0200543e1f8d3c074f857d141bdb8c8f09338d48520537b881aa + - SHA256=0b547368c03e0a584ae3c5e62af3728426c68b316a15f3290316844d193ad182 + - SHA256=455bc98ba32adab8b47d2d89bdbadca4910f91c182ab2fc3211ba07d3784537b + - SHA256=bdbceca41e576841cad2f2b38ee6dbf92fd77fbbfdfe6ecf99f0623d44ef182c + - SHA256=a0dd3d43ab891777b11d4fdcb3b7f246b80bc66d12f7810cf268a5f6f4f8eb7b + - SHA256=3326e2d32bbabd69feb6024809afc56c7e39241ebe70a53728c77e80995422a5 + - SHA256=e9919d1546c7dfef62ff01b87f739812de0a57463611c12012013ae689023ce1 + - SHA256=3124b0411b8077605db2a9b7909d8240e0d554496600e2706e531c93c931e1b5 + - SHA256=f6cd7353cb6e86e98d387473ed6340f9b44241867508e209e944f548b9db1d5f + - SHA256=506f953bbb285aeb8af0549eb24f52f3b7af36afe740afa36735bac70573ce28 + - SHA256=b9ed73af3aef69dc1fb91731d6d0a649e93f83d0f07ddb9729d71c2d00ed0801 + - SHA256=607dc4c75ac7aef82ae0616a453866b3b358c6cf5c8f9d29e4d37f844306b97c + - SHA256=e4eca7db365929ff7c5c785e2eab04ef8ec67ea9edcf7392f2b74eccd9449148 + - SHA256=2270a8144dabaf159c2888519b11b61e5e13acdaa997820c09798137bded3dd6 + - SHA256=5e27fe26110d2b9f6c2bad407d3d0611356576b531564f75ff96f9f72d5fcae4 + - SHA256=cb57f3a7fe9e1f8e63332c563b0a319b26c944be839eabc03e9a3277756ba612 + - SHA256=6bfc0f425de9f4e7480aa2d1f2e08892d0553ed0df1c31e9bf3d8d702f38fa2e + - SHA256=316a27e2bdb86222bc7c8af4e5472166b02aec7f3f526901ce939094e5861f6d + - SHA256=48891874441c6fa69e5518d98c53d83b723573e280c6c65ccfbde9039a6458c9 + - SHA256=648994905b29b9c4a1074eef332bf6932b638bad62df020b5452c74e2b15d78f + - SHA256=6278bc785113831b2ec3368e2c9c9e89e8aca49085a59d8d38dac651471d6440 + - SHA256=b8321471be85dc8a67ac18a2460cab50e7c41cb47252f9a7278b1e69d6970f25 - SHA256=673bcec3d53fab5efd6e3bac25ac9d6cc51f6bbdf8336e38aade2713dc1ae11b - - SHA256=ecfc52a22e4a41bf53865b0e28309411c60af34a44e31a5c53cdc8c5733e8282 - - SHA256=a961f5939088238d76757669a9a81905e33f247c9c635b908daac146ae063499 - - SHA256=e32ab30d01dcff6418544d93f99ae812d2ce6396e809686620547bea05074f6f - - SHA256=2d83ccb1ad9839c9f5b3f10b1f856177df1594c66cbbc7661677d4b462ebf44d - - SHA256=8399e5afd8e3e97139dffb1a9fb00db2186321b427f164403282217cab067c38 + - SHA256=8c95d28270a4a314299cf50f05dcbe63033b2a555195d2ad2f678e09e00393e6 + - SHA256=e2e79f1e696f27fa70d72f97e448081b1fa14d59cbb89bb4a40428534dd5c6f6 + - SHA256=22e125c284a55eb730f03ec27b87ab84cf897f9d046b91c76bea2b5809fd51c5 + - SHA256=60b163776e7b95e0c2280d04476304d0c943b484909131f340e3ce6045a49289 + - SHA256=42f0b036687cbd7717c9efed6991c00d4e3e7b032dc965a2556c02177dfdad0f + - SHA256=3ec5ad51e6879464dfbccb9f4ed76c6325056a42548d5994ba869da9c4c039a8 + - SHA256=b7bba82777c9912e6a728c3e873c5a8fd3546982e0d5fa88e64b3e2122f9bc3b + - SHA256=aebcbfca180e372a048b682a4859fd520c98b5b63f6e3a627c626cb35adc0399 + - SHA256=80a59ca71fc20961ccafc0686051e86ae4afbbd4578cb26ad4570b9207651085 + - SHA256=f8d6ce1c86cbd616bb821698037f60a41e129d282a8d6f1f5ecdd37a9688f585 + - SHA256=910479467ef17b9591d8d42305e7f6f247ad41c60ec890a1ffbe331f495ed135 + - SHA256=2d195cd4400754cc6f6c3f8ab1fe31627932c3c1bf8d5d0507c292232d1a2396 + - SHA256=d21aba58222930cb75946a0fb72b4adc96de583d3f7d8dc13829b804eb877257 + - SHA256=16768203a471a19ebb541c942f45716e9f432985abbfbe6b4b7d61a798cea354 + - SHA256=2665d3127ddd9411af38a255787a4e2483d720aa021be8d6418e071da52ed266 + - SHA256=478917514be37b32d5ccf76e4009f6f952f39f5553953544f1b0688befd95e82 + - SHA256=be03e9541f56ac6ed1e81407dcd7cc85c0ffc538c3c2c2c8a9c747edbcf13100 + - SHA256=0b57569aaa0f4789d9642dd2189b0a82466b80ad32ff35f88127210ed105fe57 + - SHA256=e50b25d94c1771937b2f632e10eea875ac6b19c57da703d52e23ad2b6299f0ae + - SHA256=ece0a900ea089e730741499614c0917432246ceb5e11599ee3a1bb679e24fd2c + - SHA256=cb59a641adb623a65a9b5af1db2ffd921fd1ca1bc046a6df85d5f2e00fd0b5a5 + - SHA256=a3e507e713f11901017fc328186ae98e23de7cea5594687480229f77d45848d8 + - SHA256=ef86c4e5ee1dbc4f81cd864e8cd2f4a2a85ee4475b9a9ab698a4ae1cc71fbeb0 + - SHA256=51480eebbbfb684149842c3e19a8ffbd3f71183c017e0c4bc6cf06aacf9c0292 + - SHA256=2afdb3278a7b57466a103024aef9ff7f41c73a19bab843a8ebf3d3c4d4e82b30 + - SHA256=3d23bdbaf9905259d858df5bf991eb23d2dc9f4ecda7f9f77839691acef1b8c4 + - SHA256=83fbf5d46cff38dd1c0f83686708b3bd6a3a73fddd7a2da2b5a3acccd1d9359c + - SHA256=9c10e2ec4f9ef591415f9a784b93dc9c9cdafa7c69602c0dc860c5b62222e449 + - SHA256=51f002ee44e46889cf5b99a724dd10cc2bd3e22545e2a2cb3bd6b1dd3af5ba11 + - SHA256=7dfc2eb033d2e090540860b8853036f40736d02bd22099ff6cf665a90be659cd + - SHA256=e728b259113d772b4e96466ab8fe18980f37c36f187b286361c852bd88101717 + - SHA256=2b4c7d3820fe08400a7791e2556132b902a9bbadc1942de57077ecb9d21bf47a + - SHA256=b9ad7199c00d477ebbc15f2dcf78a6ba60c2670dad0ef0994cebccb19111f890 + - SHA256=bc8cb3aebe911bd9b4a3caf46f7dda0f73fec4d2e4e7bc9601bb6726f5893091 + - SHA256=6575ea9b319beb3845d43ce2c70ea55f0414da2055fa82eec324c4cebdefe893 + - SHA256=a56c2a2425eb3a4260cc7fc5c8d7bed7a3b4cd2af256185f24471c668853aee8 + - SHA256=63865f04c1150655817ed4c9f56ad9f637d41ebd2965b6127fc7c02757a7800e + - SHA256=8f23313adb35782adb0ba97fefbfbb8bbc5fc40ae272e07f6d4629a5305a3fa2 + - SHA256=082c39fe2e3217004206535e271ebd45c11eb072efde4cc9885b25ba5c39f91d + - SHA256=26d69e677d30bb53c7ac7f3fce76291fe2c44720ef17ee386f95f08ec5175288 + - SHA256=b2247e68386c1bdfd48687105c3728ebbad672daffa91b57845b4e49693ffd71 + - SHA256=38b3eb8c86201d26353aab625cea672e60c2f66ce6f5e5eda673e8c3478bf305 + - SHA256=952199c28332bc90cfd74530a77ee237967ed32b3c71322559c59f7a42187dc4 + - SHA256=4e37592a2a415f520438330c32cfbdbd6af594deef5290b2fa4b9722b898ff69 + - SHA256=40061b30b1243be76d5283cbc8abfe007e148097d4de7337670ff1536c4c7ba1 + - SHA256=d7a61c671eab1dfaa62fe1088a85f6d52fb11f2f32a53822a49521ca2c16585e + - SHA256=74a846c61adc53692d3040aff4c1916f32987ad72b07fe226e9e7dbeff1036c4 + - SHA256=238046cfe126a1f8ab96d8b62f6aa5ec97bab830e2bae5b1b6ab2d31894c79e4 + - SHA256=478bcb750017cb6541f3dd0d08a47370f3c92eec998bc3825b5d8e08ee831b70 + - SHA256=1e9c236ed39507661ec32731033c4a9b9c97a6221def69200e03685c08e0bfa7 + - SHA256=e77786b21dbe73e9619ac9aac5e7e92989333d559aa22b4b65c97f0a42ff2e21 + - SHA256=d1f4949f76d8ac9f2fa844d16b1b45fb1375d149d46e414e4a4c9424dc66c91f + - SHA256=c3e150eb7e7292f70299d3054ed429156a4c32b1f7466a706a2b99249022979e + - SHA256=4ace6dded819e87f3686af2006cb415ed75554881a28c54de606975c41975112 + - SHA256=696679114f6a106ec94c21e2a33fe17af86368bcf9a796aaea37ea6e8748ad6a + - SHA256=9778136d2441439dc470861d15d96fa21dc9f16225232cd05b76791a5e0fde6f + - SHA256=6ed35f310c96920a271c59a097b382da07856e40179c2a4239f8daa04eef38e7 + - SHA256=76e807b6c0214e66455f09a8de8faad40b738982ca84470f0043de0290449524 + - SHA256=202d9703a5b8d06c5f92d2c5218a93431aa55af389007826a9bfaaf900812213 + - SHA256=47f0cdaa2359a63ad1389ef4a635f1f6eee1f63bdf6ef177f114bdcdadc2e005 + - SHA256=97b32ddf83f75637e3ba934df117081dd6a1c57d47a4c9700d35e736da11d5bd + - SHA256=00c02901472d74e8276743c847b8148be3799b0e3037c1dfdca21fa81ad4b922 + - SHA256=d7bc7306cb489fe4c285bbeddc6d1a09e814ef55cf30bd5b8daf87a52396f102 - SHA256=3c6f9917418e991ed41540d8d882c8ca51d582a82fd01bff6cdf26591454faf5 - - SHA256=0b547368c03e0a584ae3c5e62af3728426c68b316a15f3290316844d193ad182 - - SHA256=6948480954137987a0be626c24cf594390960242cd75f094cd6aaa5c2e7a54fa - - SHA256=ae42afa9be9aa6f6a5ae09fa9c05cd2dfb7861dc72d4fd8e0130e5843756c471 - - SHA256=a19fc837ca342d2db43ee8ad7290df48a1b8b85996c58a19ca3530101862a804 - - SHA256=e89cb7217ec1568b43ad9ca35bf059b17c3e26f093e373ab6ebdeee24272db21 - - SHA256=e0b5a5f8333fc1213791af5c5814d7a99615b3951361ca75f8aa5022c9cfbc2b - - SHA256=a7c8f4faf3cbb088cac7753d81f8ec4c38ccb97cd9da817741f49272e8d01200 - - SHA256=0ae8d1dd56a8a000ced74a627052933d2e9bff31d251de185b3c0c5fc94a44db - - SHA256=d59cc3765a2a9fa510273dded5a9f9ac5190f1edf24a00ffd6a1bbd1cb34c757 - - SHA256=2fbbc276737047cb9b3ba5396756d28c1737342d89dce1b64c23a9c4513ae445 + - SHA256=c2a4ddcc9c3b339d752c48925d62fc4cc5adbf6fae8fedef74cdd47e88da01f8 + - SHA256=b61869b7945be062630f1dd4bae919aecee8927f7e1bc3954a21ff763f4c0867 + - SHA256=7877c1b0e7429453b750218ca491c2825dae684ad9616642eff7b41715c70aca + - SHA256=c0c52425dd90f36d110952c665e5b644bb1092f952942c07bb4da998c9ce6e5b + - SHA256=c2562e0101cb39906c73b96fc15a6e6e3edd710b19858f6bbd0c90f1561b6038 + - SHA256=21ccdd306b5183c00ecfd0475b3152e7d94b921e858e59b68a03e925d1715f21 + - SHA256=d5562fb90b0b3deb633ab335bcbd82ce10953466a428b3f27cb5b226b453eaf3 + - SHA256=f1c8ca232789c2f11a511c8cd95a9f3830dd719cad5aa22cb7c3539ab8cb4dc3 + - SHA256=2bf29a2df52110ed463d51376562afceac0e80fbb1033284cf50edd86c406b14 + - SHA256=50d5eaa168c077ce5b7f15b3f2c43bd2b86b07b1e926c1b332f8cb13bd2e0793 + - SHA256=258359a7fa3d975620c9810dab3a6493972876a024135feaf3ac8482179b2e79 + - SHA256=405a99028c99f36ab0f84a1fd810a167b8f0597725e37513d7430617106501f1 + - SHA256=17927b93b2d6ab4271c158f039cae2d60591d6a14458f5a5690aec86f5d54229 + - SHA256=72b99147839bcfb062d29014ec09fe20a8f261748b5925b00171ef3cb849a4c1 + - SHA256=405472a8f9400a54bb29d03b436ccd58cfd6442fe686f6d2ed4f63f002854659 + - SHA256=1c1251784e6f61525d0082882a969cb8a0c5d5359be22f5a73e3b0cd38b51687 + - SHA256=ca34f945117ec853a713183fa4e8cf85ea0c2c49ca26e73d869fee021f7b491d + - SHA256=b9ae1d53a464bc9bb86782ab6c55e2da8804c80a361139a82a6c8eef30fddd7c + - SHA256=fd33fb2735cc5ef466a54807d3436622407287e325276fcd3ed1290c98bd0533 + - SHA256=a4680fabf606d6580893434e81c130ff7ec9467a15e6534692443465f264d3c9 + - SHA256=11a9787831ac4f0657aeb5e7019c23acc39d8833faf28f85bd10d7590ea4cc5f + - SHA256=771015b2620942919bb2e0683476635b7a09db55216d6fbf03534cb18513b20c + - SHA256=2a11b4f125d8537e69af7b684494e49ef2a30a219634988e278177fa36c934eb + - SHA256=e32ab30d01dcff6418544d93f99ae812d2ce6396e809686620547bea05074f6f + - SHA256=37022838c4327e2a5805e8479330d8ff6f8cd3495079905e867811906c98ea20 - SHA256=3b6e85c8fed9e39b21b2eab0b69bc464272b2c92961510c36e2e2df7aa39861b - - SHA256=af298d940b186f922464d2ef19ccfc129c77126a4f337ecf357b4fe5162a477c - - SHA256=afdd66562dea51001c3a9de300f91fc3eb965d6848dfce92ccb9b75853e02508 - - SHA256=36875562e747136313ec5db58174e5fab870997a054ca8d3987d181599c7db6a - - SHA256=17687cba00ec2c9036dd3cb5430aa1f4851e64990dafb4c8f06d88de5283d6ca + - SHA256=c7f64b27cd3be5af1c8454680529ea493dfbb09e634eec7e316445ad73499ae0 + - SHA256=3c7e5b25a33a7805c999d318a9523fcae46695a89f55bbdb8bb9087360323dfc + - SHA256=8d57e416ea4bb855b78a2ff3c80de1dfbb5dc5ee9bfbdddb23e46bd8619287e2 + - SHA256=e4a7da2cf59a4a21fc42b611df1d59cae75051925a7ddf42bf216cc1a026eadb + - SHA256=9a91d6e83b8fdec536580f6617f10dfc64eedf14ead29a6a644eb154426622ba + - SHA256=a8027daa6facf1ff81405daf6763249e9acf232a1a191b6bf106711630e6188e + - SHA256=b179e1ab6dc0b1aee783adbcad4ad6bb75a8a64cb798f30c0dd2ee8aaf43e6de - SHA256=0e53b58415fa68552928622118d5b8a3a851b2fc512709a90b63ba46acda8b6b - - SHA256=37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 - - SHA256=84c5f6ddd9c90de873236205b59921caabb57ac6f7a506abbe2ce188833bbe51 - - SHA256=5ab48bf8c099611b217cc9f78af2f92e9aaeedf1cea4c95d5dd562f51e9f0d09 - - SHA256=a7860e110f7a292d621006b7208a634504fb5be417fd71e219060381b9a891e6 - - SHA256=0452a6e8f00bae0b79335c1799a26b2b77d603451f2e6cc3b137ad91996d4dec - - SHA256=e83908eba2501a00ef9e74e7d1c8b4ff1279f1cd6051707fd51824f87e4378fa - - SHA256=9d530642aeb6524691d06b9e02a84e3487c9cdd86c264b105035d925c984823a - - SHA256=1fac3fab8ea2137a7e81a26de121187bf72e7d16ffa3e9aec3886e2376d3c718 - - SHA256=f4ff679066269392f6b7c3ba6257fc60dd609e4f9c491b00e1a16e4c405b0b9b - - SHA256=f2a4ddc38e68efd2eac27b2562529926f5ade93575a82e8d3e0abb2b37347257 - - SHA256=dec8a933dba04463ed9bb7d53338ff87f2c23cfb79e0e988449fc631252c9dcc - - SHA256=f48f31bf9c6abbd44124b66bce2ab1200176e31ef1e901733761f2b5ceb60fb2 - - SHA256=67734c7c0130dd66c964f76965f09a2290da4b14c94412c0056046e700654bdc - - SHA256=ed2f33452ec32830ffef2d5dc832985db9600c306ed890c47f3f33ccbb335c39 - - SHA256=f40435488389b4fb3b945ca21a8325a51e1b5f80f045ab019748d0ec66056a8b - - SHA256=76fb4deaee57ef30e56c382c92abffe2cf616d08dbecb3368c8ee6b02e59f303 - - SHA256=7e3b0b8d3e430074109d85729201d7c34bc5b918c0bcb9f64ce88c5e37e1a456 - - SHA256=70211a3f90376bbc61f49c22a63075d1d4ddd53f0aefa976216c46e6ba39a9f4 - - SHA256=6001c6acae09d2a91f8773bbdfd52654c99bc672a9756dc4cb53dc2e3efeb097 - - SHA256=a3975db1127c331ba541fffff0c607a15c45b47aa078e756b402422ef7e81c2c - - SHA256=1ce9e4600859293c59d884ea721e9b20b2410f6ef80699f8a78a6b9fad505dfc - - SHA256=cfb7af8ac67a379e7869289aeee21837c448ea6f8ab6c93988e7aa423653bd40 - - SHA256=2665d3127ddd9411af38a255787a4e2483d720aa021be8d6418e071da52ed266 - - SHA256=d0543f0fdc589c921b47877041f01b17a534c67dcc7c5ad60beba8cf7e7bc9c6 + - SHA256=ffd03584246730397e231eb8d16c1449aef2c3bc79bf9da3ebf8400a21b20ae7 + - SHA256=c344e92a6d06155a217a9af7b4b35e6653665eec6569292e7b2e70f3a3027646 + - SHA256=ff115cefe624b6ca0b3878a86f6f8b352d1915b65fbbdc33ae15530a96ebdaa7 + - SHA256=c640930c29ea3610a3a5cebee573235ec70267ed223b79b9fa45a80081e686a4 + - SHA256=88e2e6a705d3fb71b966d9fb46dc5a4b015548daf585fb54dfcd81dc0bd3ebdc + - SHA256=16b591cf5dc1e7282fdb25e45497fe3efc8095cbe31c05f6d97c5221a9a547e1 + - SHA256=24e70c87d58fa5771f02b9ddf0d8870cba6b26e35c6455a2c77f482e2080d3e9 + - SHA256=5a826b4fa10891cf63aae832fc645ce680a483b915c608ca26cedbb173b1b80a + - SHA256=8e92aacd60fca1f09b7257e62caf0692794f5d741c5d1eec89d841e87f2c359c + - SHA256=4bc0921ffd4acc865525d3faf98961e8decc5aec4974552cbbf2ae8d5a569de4 + - SHA256=fd8669794c67b396c12fc5f08e9c004fdf851a82faf302846878173e4fbecb03 + - SHA256=cc687fe3741bbde1dd142eac0ef59fd1d4457daee43cdde23bb162ef28d04e64 + - SHA256=677c0b1add3990fad51f492553d3533115c50a242a919437ccb145943011d2bf + - SHA256=d8b58f6a89a7618558e37afc360cd772b6731e3ba367f8d58734ecee2244a530 + - SHA256=d9a2bf0f5ba185170441f003dc46fbb570e1c9fdf2132ab7de28b87ba7ad1a0c + - SHA256=0d133ced666c798ea63b6d8026ec507d429e834daa7c74e4e091e462e5815180 + - SHA256=b0b6a410c22cc36f478ff874d4a23d2e4b4e37c6e55f2a095fc4c3ef32bcb763 + - SHA256=bfc121e93fcbf9bd42736cfe7675ae2cc805be9a58f1a0d8cc3aa5b42e49a13f + - SHA256=b9695940f72e3ed5d7369fb32958e2146abd29d5895d91ccc22dfbcc9485b78b + - SHA256=4a3d4db86f580b1680d6454baee1c1a139e2dde7d55e972ba7c92ec3f555dce2 + - SHA256=5bdba1561ec5b23b1d56ea8cee411147d1526595f03a9281166a563b3641fa2a + - SHA256=cc586254e9e89e88334adee44e332166119307e79c2f18f6c2ab90ce8ba7fc9b + - SHA256=66f8bd2b29763acfbb7423f4c3c9c3af9f3ca4113bd580ab32f6e3ee4a4fc64e + - SHA256=49f75746eebe14e5db11706b3e58accc62d4034d2f1c05c681ecef5d1ad933ba + - SHA256=1e16a01ef44e4c56e87abfbe03b2989b0391b172c3ec162783ad640be65ab961 + - SHA256=1c8dfa14888bb58848b4792fb1d8a921976a9463be8334cff45cc96f1276049a + - SHA256=9724488ca2ba4c787640c49131f4d1daae5bd47d6b2e7e5f9e8918b1d6f655be + - SHA256=b03f26009de2e8eabfcf6152f49b02a55c5e5d0f73e01d48f5a745f93ce93a29 + - SHA256=fc3e8554602c476e2edfa92ba4f6fb2e5ba0db433b9fbd7d8be1036e454d2584 + - SHA256=bef87650c29faf421e7ad666bf47d7a78a45f291b438c8d1c4b6a66e5b54c6fc + - SHA256=3a95cc82173032b82a0ffc7d2e438df64c13bc16b4574214c9fe3be37250925e + - SHA256=5351c81b4ec5a0d79c39d24bac7600d10eac30c13546fde43d23636b3f421e7c + - SHA256=4d777a9e2c61e8b55b3c34c5265b301454bb080abe7ffb373e7800bd6a498f8d + - SHA256=59b09bd69923c0b3de3239e73205b1846a5f69043546d471b259887bb141d879 + - SHA256=36b9e31240ab0341873c7092b63e2e0f2cab2962ebf9b25271c3a1216b7669eb + - SHA256=5c04c274a708c9a7d993e33be3ea9e6119dc29527a767410dbaf93996f87369a + - SHA256=59626cac380d8fe0b80a6d4c4406d62ba0683a2f0f68d50ad506ca1b1cf25347 + - SHA256=34bee22c18ddbddbe115cf1ab55cabf0e482aba1eb2c343153577fb24b7226d3 + - SHA256=f4c7e94a7c2e49b130671b573a9e4ff4527a777978f371c659c3f97c14d126de + - SHA256=567809308cfb72d59b89364a6475f34a912d03889aa50866803ac3d0bf2c3270 + - SHA256=523d1d43e896077f32cd9acaa8e85b513bfb7b013a625e56f0d4e9675d9822ba + - SHA256=b074caef2fbf7e1dc8870edccb65254858d95836f466b4e9e6ca398bf7a27aa3 + - SHA256=4422851a0a102f654e95d3b79c357ae3af1b096d7d1576663c027cfbc04abaf9 + - SHA256=8d3347c93dff62eecdde22ccc6ba3ce8c0446874738488527ea76d0645341409 + - SHA256=f14da8aa5c8eea8df63cf935481d673fdf3847f5701c310abf4023f9d80ad57d + - SHA256=60c6f4f34c7319cb3f9ca682e59d92711a05a2688badbae4891b1303cd384813 + - SHA256=c089a31ac95d41ed02d1e4574962f53376b36a9e60ff87769d221dc7d1a3ecfa + - SHA256=5f487829527802983d5c120e3b99f3cf89333ca14f5e49ac32df0798cfb1f7aa + - SHA256=9e2622d8e7a0ec136ba1fff639833f05137f8a1ff03e7a93b9a4aea25e7abb8d + - SHA256=f05b1ee9e2f6ab704b8919d5071becbce6f9d0f9d0ba32a460c41d5272134abe + - SHA256=6e944ae1bfe43a8a7cd2ea65e518a30172ce8f31223bdfd39701b2cb41d8a9e7 + - SHA256=c470c9db58840149ce002f3e6003382ecf740884a683bae8f9d10831be218fa2 + - SHA256=3ac8e54be2804f5fa60d0d23a11ba323fba078a942c96279425aabad935b8236 + - SHA256=468b087a0901d7bd971ab564b03ded48c508840b1f9e5d233a7916d1da6d9bd5 + - SHA256=496f4a4021226fb0f1b5f71a7634c84114c29faa308746a12c2414adb6b2a40b + - SHA256=ac1af529c9491644f1bda63267e0f0f35e30ab0c98ab1aecf4571f4190ab9db4 - SHA256=b95b2d9b29bd25659f1c7ba5a187f8d23cde01162d9b5b1a2c4aea8f64b38441 - - SHA256=ab0925398f3fa69a67eacee2bbb7b34ac395bb309df7fc7a9a9b8103ef41ed7a - - SHA256=0fd2df82341bf5ebb8a53682e60d08978100c01acb0bed7b6ce2876ada80f670 - - SHA256=771a8d05f1af6214e0ef0886662be500ee910ab99f0154227067fddcfe08a3dd - - SHA256=f583cfb8aab7d084dc052dbd0b9d56693308cbb26bd1b607c2aedf8ee2b25e44 - - SHA256=4b4c925c3b8285aeeab9b954e8b2a0773b4d2d0e18d07d4a9d268f4be90f6cae - - SHA256=76276c87617b836dd6f31b73d2bb0e756d4b3d133bddfe169cb4225124ca6bfb - - SHA256=1a4f7d7926efc3e3488758ce318246ea78a061bde759ec6c906ff005dd8213e5 - - SHA256=082d4d4d4ba1bda5e1599bd24e930ae9f000e7d12b00f7021cca90a4600ea470 + - SHA256=82fbcb371d53b8a76a25fbbafaae31147c0d1f6b9f26b3ea45262c2267386989 + - SHA256=0fc3bc6e81b04dcaa349f59f04d6c85c55a2fea5db8fa0ba53d3096a040ce5a7 + - SHA256=daf549a7080d384ba99d1b5bd2383dbb1aa640f7ea3a216df1f08981508155f5 + - SHA256=bac709c49ddee363c8e59e515f2f632324a0359e932b7d8cb1ce2d52a95981aa + - SHA256=7f375639a0df7fe51e5518cf87c3f513c55bc117db47d28da8c615642eb18bfa + - SHA256=aa9ab1195dc866270e984f1bed5e1358d6ef24c515dfdb6c2a92d1e1b94bf608 + - SHA256=7cf756afcaf2ce4f8fb479fdede152a17eabf4c5c7c329699dab026a4c1d4fd0 + - SHA256=f8d45fa03f56e2ea14920b902856666b8d44f1f1b16644baf8c1ae9a61851fb6 + - SHA256=0b2ad05939b0aabbdc011082fad7960baa0c459ec16a2b29f37c1fa31795a46d + - SHA256=e75714f8e0ff45605f6fc7689a1a89c7dcd34aab66c6131c63fefaca584539cf + - SHA256=0abca92512fc98fe6c2e7d0a33935686fc3acbd0a4c68b51f4a70ece828c0664 + - SHA256=dafa4459d88a8ab738b003b70953e0780f6b8f09344ce3cd631af70c78310b53 + - SHA256=f48f31bf9c6abbd44124b66bce2ab1200176e31ef1e901733761f2b5ceb60fb2 + - SHA256=984a77e5424c6d099051441005f2938ae92b31b5ad8f6521c6b001932862add7 + - SHA256=475e5016c9c0f5a127896f9179a1b1577a67b357f399ab5a1e68aab07134729a + - SHA256=543991ca8d1c65113dff039b85ae3f9a87f503daec30f46929fd454bc57e5a91 + - SHA256=3678ba63d62efd3b706d1b661d631ded801485c08b5eb9a3ef38380c6cff319a - SHA256=ab2632a4d93a7f3b7598c06a9fdc773a1b1b69a7dd926bdb7cf578992628e9dd - - SHA256=ad23d77a38655acb71216824e363df8ac41a48a1a0080f35a0d23aa14b54460b - - SHA256=4744df6ac02ff0a3f9ad0bf47b15854bbebb73c936dd02f7c79293a2828406f6 - - SHA256=86721ee8161096348ed3dbe1ccbf933ae004c315b1691745a8af4a0df9fed675 - - SHA256=c1c4310e5d467d24e864177bdbfc57cb5d29aac697481bfa9c11ddbeebfd4cc8 - - SHA256=fd8669794c67b396c12fc5f08e9c004fdf851a82faf302846878173e4fbecb03 - - SHA256=591bd5e92dfa0117b3daa29750e73e2db25baa717c31217539d30ffb1f7f3a52 - - SHA256=ad40e6d0f77c0e579fb87c5106bf6de3d1a9f30ee2fbf8c9c011f377fa05f173 - - SHA256=862d0ff27bb086145a33b9261142838651b0d2e1403be321145e197600eb5015 - - SHA256=62f5e13b2edc00128716cb93e6a9eddffea67ce83d2bb426f18f5be08ead89e0 - - SHA256=03e0581432f5c8cc727a8aa387f5b69ff84d38d0df6f1226c19c6e960a81e1e9 - - SHA256=e4cf438838dc10b188b3d4a318fd9ba2479abb078458d7f97591c723e2d637ce - - SHA256=a10b4ed33a13c08804da8b46fd1b7bd653a6f2bb65668e82086de1940c5bb5d1 - - SHA256=077aa8ff5e01747723b6d24cc8af460a7a00f30cd3bc80e41cc245ceb8305356 - - SHA256=65deb5dca18ee846e7272894f74d84d9391bbe260c22f24a65ab37d48bd85377 - - SHA256=7f84f009704bc36f0e97c7be3de90648a5e7c21b4f870e4f210514d4418079a0 - - SHA256=81aafae4c4158d0b9a6431aff0410745a0f6a43fb20a9ab316ffeb8c2e2ccac0 - - SHA256=22be050955347661685a4343c51f11c7811674e030386d2264cd12ecbf544b7c - - SHA256=818e396595d08d724666803cd29dac566dc7db23bf50e9919d04b33afa988c01 - - SHA256=f744abb99c97d98e4cd08072a897107829d6d8481aee96c22443f626d00f4145 - - SHA256=922d23999a59ce0d84b479170fd265650bc7fae9e7d41bf550d8597f472a3832 - - SHA256=362c4f3dadc9c393682664a139d65d80e32caa2a97b6e0361dfd713a73267ecc + - SHA256=c082514317bf80a2f5129d84a5a55e411a95e32d03a4df1274537704c80e41dd + - SHA256=3813c1aab1760acb963bcc10d6ea3fddc2976b9e291710756408de392bc9e5d5 + - SHA256=f13f6a4bf7711216c9e911f18dfa2735222551fb1f8c1a645a8674c1983ccea6 + - SHA256=3a65d14fd3b1b5981084cdbd293dc6f4558911ea18dd80177d1e5b54d85bcaa0 + - SHA256=898e07cf276ec2090b3e7ca7c192cc0fa10d6f13d989ef1cb5826ca9ce25b289 + - SHA256=834a3d755b5ae798561f8e5fbb18cf28dfcae7a111dc6a03967888e9d10f6d78 + - SHA256=d15a0bc7a39bbeff10019496c1ed217b7c1b26da37b2bdd46820b35161ddb3c4 + - SHA256=c9014b03866bf37faa8fdb16b6af7cfec976aaef179fd5797d0c0bf8079d3a8c + - SHA256=46621554728bc55438c7c241137af401250f062edef6e7efecf1a6f0f6d0c1f7 + - SHA256=8001d7161d662a6f4afb4d17823144e042fd24696d8904380d48065209f28258 + - SHA256=4b465faf013929edf2f605c8cd1ac7a278ddc9a536c4c34096965e6852cbfb51 + - SHA256=1336469ec0711736e742b730d356af23f8139da6038979cfe4de282de1365d3b + - SHA256=65025741ecd0ef516da01319b42c2d96e13cb8d78de53fb7e39cd53ea6d58c75 + - SHA256=c8eaa5e6d3230b93c126d2d58e32409e4aeeb23ccf0dd047a17f1ef552f92fe9 + - SHA256=2b186926ed815d87eaf72759a69095a11274f5d13c33b8cc2b8700a1f020be1d + - SHA256=85fdd255c5d7add25fd7cd502221387a5e11f02144753890218dd31a8333a1a3 + - SHA256=31e2e5c3290989e8624820cf5af886fd778ee8187fed593f33a6178f65103f37 + - SHA256=1deae340bf619319adce00701de887f7434deab4d5547a1742aeedb5634d23c6 + - SHA256=442c18aeb09556bb779b21185c4f7e152b892410429c123c86fc209a802bff3c + - SHA256=ebf0e56a1941e3a6583aab4a735f1b04d4750228c18666925945ed9d7c9007e1 + - SHA256=53bd8e8d3542fcf02d09c34282ebf97aee9515ee6b9a01cefd81baa45c6fd3d6 + - SHA256=f62911334068c9edd44b9c3e8dee8155a0097aa331dd4566a61afa3549f35f65 + - SHA256=e61a54f6d3869b43c4eceac3016df73df67cce03878c5a6167166601c5d3f028 + - SHA256=f929bead59e9424ab90427b379dcdd63fbfe0c4fb5e1792e3a1685541cd5ec65 + - SHA256=dd573f23d656818036fc9ae1064eda31aca86acb9bc44a6e127db3ea112a9094 + - SHA256=87e094214feb56a482cd8ae7ee7c7882b5a8dccce7947fdaa04a660fa19f41e5 + - SHA256=c35cab244bd88bf0b1e7fc89c587d82763f66cf1108084713f867f72cc6f3633 + - SHA256=78d49094913526340d8d0ef952e8fe9ada9e8b20726b77fb88c9fb5d54510663 + - SHA256=436ccab6f62fa2d29827916e054ade7acae485b3de1d3e5c6c62d3debf1480e7 + - SHA256=67734c7c0130dd66c964f76965f09a2290da4b14c94412c0056046e700654bdc + - SHA256=b1334a71cc73b3d0c54f62d8011bec330dfc355a239bf94a121f6e4c86a30a2e - SHA256=be66f3bbfed7d648cfd110853ddb8cef561f94a45405afc6be06e846b697d2b0 - - SHA256=bc13adeb6bf62b1e10ef41205ef92382e6c18d6a20669d288a0b11058e533d63 - - SHA256=ac1af529c9491644f1bda63267e0f0f35e30ab0c98ab1aecf4571f4190ab9db4 - - SHA256=7c830ed39c9de8fe711632bf44846615f84b10db383f47b7d7c9db29a2bd829a + - SHA256=7108613244f16c2279c3c917aa49cef8acf0b92fdaa9ace19bf5cf634360d727 + - SHA256=bcfc2c9883e6c1b8429be44cc4db988a9eecb544988fbd756d18cfca6201876f + - SHA256=20e52e0d7f579dc6884cc6e80266fddceda69ea5fdd0b095c0874b0d877e48a2 + - SHA256=6c64688444d3e004da77dcfb769d064bb38afceeef7ff915dfc71e60e19ff18a + - SHA256=ecd07df7ad6fee9269a9e9429eb199bf3e24cf672aa1d013b7e8d90d75324566 + - SHA256=b3e645e8817696fa5d5e2255f9328f3b6a2e5fce91737f4d654ff155dc9851e5 + - SHA256=3b7177e9a10c1392633c5f605600bb23c8629379f7f42957972374a05d4dc458 + - SHA256=6c7120e40fc850e4715058b233f5ad4527d1084a909114fd6a36b7b7573c4a44 + - SHA256=32cccc4f249499061c0afa18f534c825d01034a1f6815f5506bf4c4ff55d1351 + - SHA256=31f4140c12ac31f5729a8de4dc051d3acd07783564604df831a2a6722c979192 + - SHA256=d6801e845d380c809d0da8c7a5d3cd2faa382875ae72f5f7af667a34df25fbf7 + - SHA256=e4658d93544f69f5cb9aa6d9fec420fecc8750cb57e1e9798da38c139d44f2eb + - SHA256=077aa8ff5e01747723b6d24cc8af460a7a00f30cd3bc80e41cc245ceb8305356 + - SHA256=d330ab003206ce5e9828607562790aa8dd0453f6b7452f5c6053e3c6b6761d25 + - SHA256=ad2477632b9b07588cfe0e692f244c05fa4202975c1fe91dd3b90fa911ac6058 - SHA256=91314768da140999e682d2a290d48b78bb25a35525ea12c1b1f9634d14602b2c - - SHA256=f42eb29f5b2bcb2a70d796fd71fd1b259d5380b216ee672cf46dcdd4604b87ad - - SHA256=dd2f1f7012fb1f4b2fb49be57af515cb462aa9c438e5756285d914d65da3745b - - SHA256=b9ae1d53a464bc9bb86782ab6c55e2da8804c80a361139a82a6c8eef30fddd7c - - SHA256=fded693528f7e6ac1af253e0bd2726607308fdaa904f1e7242ed44e1c0b29ae8 + - SHA256=0ce40a2cdd3f45c7632b858e8089ddfdd12d9acb286f2015a4b1b0c0346a572c + - SHA256=5fe5a6f88fbbc85be9efe81204eee11dff1a683b426019d330b1276a3b5424f4 + - SHA256=18e1707b319c279c7e0204074088cc39286007a1cf6cb6e269d5067d8d0628c6 + - SHA256=a334bdf0c0ab07803380eb6ef83eefe7c147d6962595dd9c943a6a76f2200b0d + - SHA256=71ff60722231c7641ad593756108cf6779dbaad21c7b08065fb1d4e225eab14d + - SHA256=af298d940b186f922464d2ef19ccfc129c77126a4f337ecf357b4fe5162a477c + - SHA256=6001c6acae09d2a91f8773bbdfd52654c99bc672a9756dc4cb53dc2e3efeb097 + - SHA256=818e396595d08d724666803cd29dac566dc7db23bf50e9919d04b33afa988c01 + - SHA256=6befa481e8cca8084d9ec3a1925782cd3c28ef7a3e4384e034d48deaabb96b63 + - SHA256=be683cd38e64280567c59f7dc0a45570abcb8a75f1d894853bbbd25675b4adf7 + - SHA256=2288c418ddadd5a1db4e58c118d8455b01fd33728664408ce23b9346ae0ca057 + - SHA256=42579a759f3f95f20a2c51d5ac2047a2662a2675b3fb9f46c1ed7f23393a0f00 + - SHA256=64a8e00570c68574b091ebdd5734b87f544fa59b75a4377966c661d0475d69a5 + - SHA256=7de1ce434f957df7bbdf6578dd0bf06ed1269f3cc182802d5c499f5570a85b3a + - SHA256=8b92cdb91a2e2fab3881d54f5862e723826b759749f837a11c9e9d85d52095a2 + - SHA256=ea3c5569405ed02ec24298534a983bcb5de113c18bc3fd01a4dd0b5839cd17b9 + - SHA256=f4e500a9ac5991da5bf114fa80e66456a2cde3458a3d41c14e127ac09240c114 + - SHA256=8ed0c00920ce76e832701d45117ed00b12e20588cb6fe8039fbccdfef9841047 + - SHA256=0584520b4b3bdad1d177329bd9952c0589b2a99eb9676cb324d1fce46dad0b9a + - SHA256=1b7fb154a7b7903a3c81f12f4b094f24a3c60a6a8cffca894c67c264ab7545fa + - SHA256=4cd80f4e33b713570f6a16b9f77679efa45a466737e41db45b41924e7d7caef4 + - SHA256=a0e583bd88eb198558442f69a8bbfc96f4c5c297befea295138cfd2070f745c5 + - SHA256=9bfd24947052bfe9f2979113a7941e40bd7e3a82eaa081a32ad4064159f07c91 + - SHA256=38bb9751a3a1f072d518afe6921a66ee6d5cf6d25bc50af49e1925f20d75d4d7 + - SHA256=d80714d87529bb0bc7abcc12d768c43a697fbca59741c38fa0b46900da4db30e + - SHA256=83f7be0a13c1fccf024c31da5c68c0ea1decf4f48fc39d6e4fd324bbe789ae8a + - SHA256=1f4d4db4abe26e765a33afb2501ac134d14cadeaa74ae8a0fae420e4ecf58e0c + - SHA256=ea85bbe63d6f66f7efee7007e770af820d57f914c7f179c5fee3ef2845f19c41 + - SHA256=42851a01469ba97cdc38939b10cf9ea13237aa1f6c37b1ac84904c5a12a81fa0 + - SHA256=1e9ec6b3e83055ae90f3664a083c46885c506d33de5e2a49f5f1189e89fa9f0a + - SHA256=a59c40e7470b7003e8adfee37c77606663e78d7e3f2ebb8d60910af19924d8df + - SHA256=2203bd4731a8fdc2a1c60e975fd79fd5985369e98a117df7ee43c528d3c85958 + - SHA256=5f6547e9823f94c5b94af1fb69a967c4902f72b6e0c783804835e6ce27f887b0 + - SHA256=47f08f7d30d824a8f4bb8a98916401a37c0fd8502db308aba91fe3112b892dcc + - SHA256=15c53eb3a0ea44bbd2901a45a6ebeae29bb123f9c1115c38dfb2cdbec0642229 + - SHA256=d44848d3e845f8293974e8b621b72a61ec00c8d3cf95fcf41698bbbd4bdf5565 + - SHA256=f15ae970e222ce06dbf3752b223270d0e726fb78ebec3598b4f8225b5a0880b1 + - SHA256=a5a50449e2cc4d0dbc80496f757935ae38bf8a1bebdd6555a3495d8c219df2ad + - SHA256=37c637a74bf20d7630281581a8fae124200920df11ad7cd68c14c26cc12c5ec9 + - SHA256=a97b404aae301048e0600693457c3320d33f395e9312938831bc5a0e808f2e67 + - SHA256=d45600f3015a54fa2c9baa7897edbd821aeea2532e6aadb8065415ed0a23d0c2 - SHA256=c64d4ac416363c7a1aa828929544d1c1d78cf032b39769943b851cfc4c0faafc - - SHA256=8bda0108de82ebeae82f43108046c5feb6f042e312fa0115475a9e32274fae59 - - SHA256=0d3790af5f8e5c945410929e31d06144a471ac82f828afe89a4758a5bbeb7f9f - - SHA256=24e70c87d58fa5771f02b9ddf0d8870cba6b26e35c6455a2c77f482e2080d3e9 - - SHA256=3c5d7069f85ec1d6f58147431f88c4d7c48df73baf94ffdefd664f2606baf09c - - SHA256=98ec7cc994d26699f5d26103a0aeb361128cff3c2c4d624fc99126540e23e97e - - SHA256=6cb6e23ba516570bbd158c32f7c7c99f19b24ca4437340ecb39253662afe4293 - - SHA256=9a1d66036b0868bbb1b2823209fedea61a301d5dd245f8e7d390bd31e52d663e - - SHA256=e05eeb2b8c18ad2cb2d1038c043d770a0d51b96b748bc34be3e7fc6f3790ce53 - - SHA256=b48a309ee0960da3caaaaf1e794e8c409993aeb3a2b64809f36b97aac8a1e62a - - SHA256=9f4ce6ab5e8d44f355426d9a6ab79833709f39b300733b5b251a0766e895e0e5 - - SHA256=5ae23f1fcf3fb735fcf1fa27f27e610d9945d668a149c7b7b0c84ffd6409d99a - - SHA256=1a42ebde59e8f63804eaa404f79ee93a16bb33d27fb158c6bfbe6143226899a0 - - SHA256=673b63b67345773cd6d66f6adcf2c753e2d949232bff818d5bb6e05786538d92 - - SHA256=66a20fc2658c70facd420f5437a73fa07a5175998e569255cfb16c2f14c5e796 - - SHA256=27cd05527feb020084a4a76579c125458571da8843cdfc3733211760a11da970 - - SHA256=a3e507e713f11901017fc328186ae98e23de7cea5594687480229f77d45848d8 - - SHA256=cc586254e9e89e88334adee44e332166119307e79c2f18f6c2ab90ce8ba7fc9b - - SHA256=d2182b6ef3255c7c1a69223cd3c2d68eb8ba3112ce433cd49cd803dc76412d4b - - SHA256=ad2477632b9b07588cfe0e692f244c05fa4202975c1fe91dd3b90fa911ac6058 - - SHA256=bc8cb3aebe911bd9b4a3caf46f7dda0f73fec4d2e4e7bc9601bb6726f5893091 - - SHA256=7d8937c18d6e11a0952e53970a0934cf0e65515637ac24d6ca52ccf4b93d385f - - SHA256=ae79e760c739d6214c1e314728a78a6cb6060cce206fde2440a69735d639a0a2 - - SHA256=3d8cfc9abea6d83dfea6da03260ff81be3b7b304321274f696ff0fdb9920c645 - - SHA256=d1f4949f76d8ac9f2fa844d16b1b45fb1375d149d46e414e4a4c9424dc66c91f - - SHA256=4bc0921ffd4acc865525d3faf98961e8decc5aec4974552cbbf2ae8d5a569de4 - - SHA256=771015b2620942919bb2e0683476635b7a09db55216d6fbf03534cb18513b20c - - SHA256=ef1abc77f4000e68d5190f9e11025ea3dc1e6132103d4c3678e15a678de09f33 - - SHA256=696679114f6a106ec94c21e2a33fe17af86368bcf9a796aaea37ea6e8748ad6a - - SHA256=8fe9828bea83adc8b1429394db7a556a17f79846ad0bfb7f242084a5c96edf2a + - SHA256=c725919e6357126d512c638f993cf572112f323da359645e4088f789eb4c7b8c + - SHA256=69e3fda487a5ec2ec0f67b7d79a5a836ff0036497b2d1aec514c67d2efa789b2 + - SHA256=55fee54c0d0d873724864dc0b2a10b38b7f40300ee9cae4d9baaf8a202c4049a + - SHA256=d1463b7fec911c10a8c96d84eb7c0f9e95fa488d826647a591a38c0593f812a4 + - SHA256=2a652de6b680d5ad92376ad323021850dab2c653abf06edf26120f7714b8e08a + - SHA256=c35f3a9da8e81e75642af20103240618b641d39724f9df438bf0f361122876b0 + - SHA256=ae5cc99f3c61c86c7624b064fd188262e0160645c1676d231516bf4e716a22d3 + - SHA256=6cb51ae871fbd5d07c5aad6ff8eea43d34063089528603ca9ceb8b4f52f68ddc + - SHA256=f40435488389b4fb3b945ca21a8325a51e1b5f80f045ab019748d0ec66056a8b + - SHA256=7aaf2aa194b936e48bc90f01ee854768c8383c0be50cfb41b346666aec0cf853 + - SHA256=6f1fc8287dd8d724972d7a165683f2b2ad6837e16f09fe292714e8e38ecd1e38 + - SHA256=950a4c0c772021cee26011a92194f0e58d61588f77f2873aa0599dff52a160c9 + - SHA256=3f3684a37b2645fa6827943d9812ffc2d83e89e962935b29874bec7c3714a06f + - SHA256=7fc01f25c4c18a6c539cda38fdbf34b2ff02a15ffd1d93a7215e1f48f76fb3be + - SHA256=6b71b7f86e41540a82d7750a698e0386b74f52962b879cbb46f17935183cd2c7 + - SHA256=18f306b6edcfacd33b7b244eaecdd0986ef342f0d381158844d1f0ee1ac5c8d7 + - SHA256=99f4994a0e5bd1bf6e3f637d3225c69ff4cd620557e23637533e7f18d7d6cba1 + - SHA256=7cb497abc44aad09a38160d6a071db499e05ff5871802ccc45d565d242026ee7 + - SHA256=88992ddcb9aaedb8bfcc9b4354138d1f7b0d7dddb9e7fcc28590f27824bee5c3 + - SHA256=4da08c0681fbe028b60a1eaf5cb8890bd3eba4d0e6a8b976495ddcd315e147ba + - SHA256=bda99629ec6c522c3efcbcc9ca33688d31903146f05b37d0d3b43db81bfb3961 + - SHA256=46d1dc89cc5fa327e7adf3e3d6d498657240772b85548c17d2e356aac193dd28 - SHA256=73c03b01d5d1eb03ec5cb5a443714b12fa095cc4b09ddc34671a92117ae4bb3a - - SHA256=0b8887921e4a22e24fd058ba5ac40061b4bb569ac7207b9548168af9d6995e7c - - SHA256=da6ca1fb539f825ca0f012ed6976baf57ef9c70143b7a1e88b4650bf7a925e24 - - SHA256=af16c36480d806adca881e4073dcd41acb20c35ed0b1a8f9bd4331de655036e1 - - SHA256=8ef59605ebb2cb259f19aba1a8c122629c224c58e603f270eaa72f516277620c - - SHA256=bb1135b51acca8348d285dc5461d10e8f57260e7d0c8cc4a092734d53fc40cbc + - SHA256=f37d609ea1f06660d970415dd3916c4c153bb5940bf7d2beb47fa34e8a8ffbfc + - SHA256=bc13adeb6bf62b1e10ef41205ef92382e6c18d6a20669d288a0b11058e533d63 + - SHA256=da11e9598eef033722b97873d1c046270dd039d0e3ee6cd37911e2dc2eb2608d + - SHA256=922d23999a59ce0d84b479170fd265650bc7fae9e7d41bf550d8597f472a3832 + - SHA256=8fe9828bea83adc8b1429394db7a556a17f79846ad0bfb7f242084a5c96edf2a + - SHA256=bb0742036c82709e02f25f98a9ff37c36a8c228bcaa98e40629fac8cde95b421 + - SHA256=7227377a47204f8e2ff167eee54b4b3545c0a19e3727f0ec59974e1a904f4a96 + - SHA256=6071db01b50c658cf78665c24f1d21f21b4a12d16bfcfaa6813bf6bbc4d0a1e8 + - SHA256=49ed27460730b62403c1d2e4930573121ab0c86c442854bc0a62415ca445a810 + - SHA256=1fac3fab8ea2137a7e81a26de121187bf72e7d16ffa3e9aec3886e2376d3c718 + - SHA256=11a4b08e70ebc25a1d4c35ed0f8ef576c1424c52b580115b26149bd224ffc768 + - SHA256=6e0aa67cfdbe27a059cbd066443337f81c5b6d37444d14792d1c765d9d122dcf + - SHA256=5449e4dd1b75a7d52922c30baeca0ca8e32fe2210d1e72af2a2f314a5c2268fb + - SHA256=54488a8c7da53222f25b6ed74b0dedc55d00f5fa80f4eaf6daac28f7c3528876 + - SHA256=98ec7cc994d26699f5d26103a0aeb361128cff3c2c4d624fc99126540e23e97e + - SHA256=65008817eb97635826a8708a6411d7b50f762bab81304e457119d669382944c3 + - SHA256=f596e64f4c5d7c37a00493728d8756b243cfdc11e3372d6d6dfeffc13c9ab960 + - SHA256=de8f8006d8ee429b5f333503defa54b25447f4ed6aeade5e4219e23f3473ef1c + - SHA256=b1d96233235a62dbb21b8dbe2d1ae333199669f67664b107bff1ad49b41d9414 + - SHA256=4ab41816abbf14d59e75b7fad49e2cb1c1feb27a3cb27402297a2a4793ff9da7 + - SHA256=9f1229cd8dd9092c27a01f5d56e3c0d59c2bb9f0139abf042e56f343637fda33 + - SHA256=b47be212352d407d0ef7458a7161c66b47c2aec8391dd101df11e65728337a6a + - SHA256=1cedd5815bb6e20d3697103cfc0275f5015f469e6007e8cac16892c97731c695 + - SHA256=01e024cb14b34b6d525c642a710bfa14497ea20fd287c39ba404b10a8b143ece + - SHA256=b0dcdbdc62949c981c4fc04ccea64be008676d23506fc05637d9686151a4b77f + - SHA256=7a2cd1dc110d014165c001ce65578da0c0c8d7d41cc1fa44f974e8a82296fc25 + - SHA256=6f806a9de79ac2886613c20758546f7e9597db5a20744f7dd82d310b7d6457d0 + - SHA256=f84f8173242b95f9f3c4fea99b5555b33f9ce37ca8188b643871d261cb081496 - SHA256=2d2c7ee9547738a8a676ab785c151e8b48ed40fe7cf6174650814c7f5f58513b - - SHA256=0de4247e72d378713bcf22d5c5d3874d079203bb4364e25f67a90d5570bdcce8 - - SHA256=1273b74c3c1553eaa92e844fbd51f716356cc19cf77c2c780d4899ec7738fbd1 - - SHA256=76b86543ce05540048f954fed37bdda66360c4a3ddb8328213d5aef7a960c184 - - SHA256=ecd07df7ad6fee9269a9e9429eb199bf3e24cf672aa1d013b7e8d90d75324566 - - SHA256=26d69e677d30bb53c7ac7f3fce76291fe2c44720ef17ee386f95f08ec5175288 - - SHA256=37dde6bd8a7a36111c3ac57e0ac20bbb93ce3374d0852bcacc9a2c8c8c30079e - - SHA256=adc10de960f40fa9f6e28449748250fa9ddfd331115b77a79809a50c606753ee - - SHA256=48b1344e45e4de4dfb74ef918af5e0e403001c9061018e703261bbd72dc30548 - - SHA256=bac1cd96ba242cdf29f8feac501110739f1524f0db1c8fcad59409e77b8928ba - - SHA256=7aaf2aa194b936e48bc90f01ee854768c8383c0be50cfb41b346666aec0cf853 - - SHA256=e07211224b02aaf68a5e4b73fc1049376623793509d9581cdaee9e601020af06 - - SHA256=3390919bb28d5c36cc348f9ef23be5fa49bfd81263eb7740826e4437cbe904cd - - SHA256=eaa5dae373553024d7294105e4e07d996f3a8bd47c770cdf8df79bf57619a8cd - - SHA256=7f190f6e5ab0edafd63391506c2360230af4c2d56c45fc8996a168a1fc12d457 - - SHA256=89b0017bc30cc026e32b758c66a1af88bd54c6a78e11ec2908ff854e00ac46be - - SHA256=51e91dd108d974ae809e5fc23f6fbd16e13f672f86aa594dae4a5c4bc629b0b5 - - SHA256=ef6d3c00f9d0aa31a218094480299ef73fc85146adf62fd0c2f4f88972c5c850 - - SHA256=7e0124fcc7c95fdc34408cf154cb41e654dade8b898c71ad587b2090b1da30d7 - - SHA256=7a48f92a9c2d95a72e18055cac28c1e7e6cad5f47aa735cbea5c3b82813ccfaf - - SHA256=b738eab6f3e32cec59d5f53c12f13862429d3db6756212bbcd78ba4b4dbc234c - - SHA256=5027fce41ed60906a0e76b97c95c2a5a83d57a2d1cd42de232a21f26c0d58e48 - - SHA256=b2ba6efeff1860614b150916a77c9278f19d51e459e67a069ccd15f985cbc0e1 + - SHA256=0fc0644085f956706ea892563309ba72f0986b7a3d4aa9ae81c1fa1c35e3e2d3 + - SHA256=ad8fd8300ed375e22463cea8767f68857d9a3b0ff8585fbeb60acef89bf4a7d7 + - SHA256=a7860e110f7a292d621006b7208a634504fb5be417fd71e219060381b9a891e6 + - SHA256=2f60536b25ba8c9014e4a57d7a9a681bd3189fa414eea88c256d029750e15cae + - SHA256=b583414fcee280128788f7b39451c511376fe821f455d4f3702795e96d560704 + - SHA256=63af3fdb1e85949c8adccb43f09ca4556ae258b363a99ae599e1e834d34c8670 + - SHA256=4880f40f2e557cff38100620b9aa1a3a753cb693af16cd3d95841583edcb57a8 + - SHA256=3cb75429944e60f6c820c7638adbf688883ad44951bca3f8912428afe72bc134 + - SHA256=131d5490ceb9a5b2324d8e927fea5becfc633015661de2f4c2f2375a3a3b64c6 - SHA256=e0cb07a0624ddfacaa882af49e3783ae02c9fbd0ab232541a05a95b4a8abd8ef - - SHA256=5fe5a6f88fbbc85be9efe81204eee11dff1a683b426019d330b1276a3b5424f4 - - SHA256=b749566057dee0439f54b0d38935e5939b5cb011c46d7022530f748ebc63efe5 - - SHA256=06508aacb4ed0a1398a2b0da5fa2dbf7da435b56da76fd83c759a50a51c75caf + - SHA256=8c748ae5dcc10614cc134064c99367d28f3131d1f1dda0c9c29e99279dc1bdd9 + - SHA256=b9a4e40a5d80fedd1037eaed958f9f9efed41eb01ada73d51b5dcd86e27e0cbf + - SHA256=d0e25b879d830e4f867b09d6540a664b6f88bad353cd14494c33b31a8091f605 + - SHA256=ba40b1fc798c2f78165e78997b4baf3d99858ee39a372ca6fbc303057793e50d + - SHA256=76660e91f1ff3cb89630df5af4fe09de6098d09baa66b1a130c89c3c5edd5b22 + - SHA256=0e8595217f4457757bed0e3cdea25ea70429732b173bba999f02dc85c7e06d02 - SHA256=c8926e31be2d1355e542793af8ff9ccc4d1d60cae40c9564b2400dd4e1090bda - - SHA256=65db1b259e305a52042e07e111f4fa4af16542c8bacd33655f753ef642228890 - - SHA256=f6cd7353cb6e86e98d387473ed6340f9b44241867508e209e944f548b9db1d5f - - SHA256=7ad0ab23023bc500c3b46f414a8b363c5f8700861bc4745cecc14dd34bcee9ed - - SHA256=c8ff7c9f510f7a2ed88d9b336d8c9339698d5e1ee14bfb91aa89703ec06dce42 - - SHA256=440883cd9d6a76db5e53517d0ec7fe13d5a50d2f6a7f91ecfc863bc3490e4f5c - - SHA256=e89afd283d5789b8064d5487e04b97e2cd3fc0c711a8cec230543ebdf9ffc534 - - SHA256=65008817eb97635826a8708a6411d7b50f762bab81304e457119d669382944c3 - - SHA256=e4522e2cfa0b1f5d258a3cf85b87681d6969e0572f668024c465d635c236b5d9 + - SHA256=3384f4a892f7aa72c43280ff682d85c8e3936f37a68d978d307a9461149192de + - SHA256=0a89a6ab2fca486480b6e3dacf392d6ce0c59a5bdb4bcd18d672feb4ebb0543c + - SHA256=dee384604d2d0018473941acbefe553711ded7344a4932daeffb876fe2fa0233 + - SHA256=478d855b648ef4501d3b08b3b10e94076ac67546b0ce86b454324f1bf9a78aa0 + - SHA256=423f052690b6b523502931151dfcc63530e3bd9d79680f9b5ac033b23b5c6f18 + - SHA256=f8886a9c759e0426e08d55e410b02c5b05af3c287b15970175e4874316ffaf13 + - SHA256=ae71f40f06edda422efcd16f3a48f5b795b34dd6d9bb19c9c8f2e083f0850eb7 + - SHA256=7cc9ba2df7b9ea6bb17ee342898edd7f54703b93b6ded6a819e83a7ee9f938b4 + - SHA256=cdfbe62ef515546f1728189260d0bdf77167063b6dbb77f1db6ed8b61145a2bc + - SHA256=a855b6ec385b3369c547a3c54e88a013dd028865aba0f3f08be84cdcbaa9a0f6 + - SHA256=d59cc3765a2a9fa510273dded5a9f9ac5190f1edf24a00ffd6a1bbd1cb34c757 + - SHA256=11832c345e9898c4f74d3bf8f126cf84b4b1a66ad36135e15d103dbf2ac17359 + - SHA256=1a450ae0c9258ab0ae64f126f876b5feed63498db729ec61d06ed280e6c46f67 + - SHA256=2695390a8a7448390fe383beb1eee06d582202683f0273d6e72ef39a8cf709e1 + - SHA256=ffd1aef19646ffed09b56a2ace4fc8cdf5b2f714fcca1e7ffb82256264c94b18 + - SHA256=2101d5e80e92c55ecfd8c24fcf2202a206a4fd70195a1378f88c4cc04d336f22 + - SHA256=b9e0c2a569ab02742fa3a37846310a1d4e46ba2bfd4f80e16f00865fc62690cb + - SHA256=19696fb0db3fcae22f705ae1eb1e9f1151c823f3ff5d8857e90f2a4a6fdc5758 + - SHA256=ff9623317287358440ec67da9ba79994d9b17b99ffdd709ec836478fe1fc22a5 + - SHA256=a188760f1bf36584a2720014ca982252c6bcd824e7619a98580e28be6090dccc + - SHA256=442f12adebf7cb166b19e8aead2b0440450fd1f33f5db384a39776bb2656474a + - SHA256=58a74dceb2022cd8a358b92acd1b48a5e01c524c3b0195d7033e4bd55eff4495 + - SHA256=600a2119657973112025db3c0eeab2e69d528bccfeed75f40c6ef50b059ec8a0 + - SHA256=0f30ecd4faec147a2335a4fc031c8a1ac9310c35339ebeb651eb1429421951a0 + - SHA256=94c226a530dd3cd8d911901f702f3dab8200d1d4fdc73fcb269f7001f4e66915 + - SHA256=175eed7a4c6de9c3156c7ae16ae85c554959ec350f1c8aaa6dfe8c7e99de3347 + - SHA256=47c490cc83a17ff36a1a92e08d63e76edffba49c9577865315a6c9be6ba80a7d + - SHA256=a66b4420fa1df81a517e2bbea1a414b57721c67a4aa1df1967894f77e81d036e + - SHA256=c6a5663f20e5cee2c92dee43a0f2868fb0af299f842410f4473dcde7abcb6413 + - SHA256=082d4d4d4ba1bda5e1599bd24e930ae9f000e7d12b00f7021cca90a4600ea470 + - SHA256=84739539aa6a9c9cb3c48c53f9399742883f17f24e081ebfa7bfaaf59f3ed451 + - SHA256=64dddd5ac53fe2c9de2b317c09034d1bccaf21d6c03ccfde3518e5aa3623dd66 + - SHA256=a899b659b08fbae30b182443be8ffb6a6471c1d0497b52293061754886a937a3 + - SHA256=2a6212f3b68a6f263e96420b3607b31cfdfe51afff516f3c87d27bf8a89721e8 + - SHA256=bb50818a07b0eb1bd317467139b7eb4bad6cd89053fecdabfeae111689825955 + - SHA256=9399f35b90f09b41f9eeda55c8e37f6d1cb22de6e224e54567d1f0865a718727 + - SHA256=7196187fb1ef8d108b380d37b2af8efdeb3ca1f6eefd37b5dc114c609147216d + - SHA256=96df0b01eeba3e6e50759d400df380db27f0d0e34812d0374d22ac1758230452 + - SHA256=df4c02beb039d15ff0c691bbc3595c9edfc1d24e783c8538a859bc5ea537188d + - SHA256=3c95ebf3f1a87f67d2861dbd1c85dc26c118610af0c9fbf4180428e653ac3e50 + - SHA256=119c48b79735fda0ecd973d77d9bdc6b329960caed09b38ab454236ca039d280 + - SHA256=3c5d7069f85ec1d6f58147431f88c4d7c48df73baf94ffdefd664f2606baf09c + - SHA256=0c42fe45ffa9a9c36c87a7f01510a077da6340ffd86bf8509f02c6939da133c5 + - SHA256=cf3a7d4285d65bf8688215407bce1b51d7c6b22497f09021f0fce31cbeb78986 + - SHA256=41765151df57125286b398cc107ff8007972f4653527f876d133dac1548865d6 + - SHA256=f877296e8506e6a1acbdacdc5085b18c6842320a2775a329d286bac796f08d54 + - SHA256=d884ca8cc4ef1826ca3ab03eb3c2d8f356ba25f2d20db0a7d9fc251c565be7f3 + - SHA256=453be8f63cc6b116e2049659e081d896491cf1a426e3d5f029f98146a3f44233 + - SHA256=7c0f77d103015fc29379ba75d133dc3450d557b0ba1f7495c6b43447abdae230 + - SHA256=39336e2ce105901ab65021d6fdc3932d3d6aab665fe4bd55aa1aa66eb0de32f0 + - SHA256=910aa4685c735d8c07662aa04fafec463185699ad1a0cd1967b892fc33ec6c3c + - SHA256=6d2cc7e1d95bb752d79613d0ea287ea48a63fb643dcb88c12b516055da56a11d + - SHA256=89b0017bc30cc026e32b758c66a1af88bd54c6a78e11ec2908ff854e00ac46be + - SHA256=05c15a75d183301382a082f6d76bf3ab4c520bf158abca4433d9881134461686 + - SHA256=a6c05b10a5c090b743a61fa225b09e390e2dd2bd6cb4fd96b987f1e0d3f2124a + - SHA256=ce231637422709d927fb6fa0c4f2215b9c0e3ebbd951fb2fa97b8e64da479b96 + - SHA256=26ecd3cea139218120a9f168c8c0c3b856e0dd8fb2205c2a4bcb398f5f35d8dd + - SHA256=ec1307356828426d60eab78ffb5fc48a06a389dea6e7cc13621f1fa82858a613 + - SHA256=fed0fe2489ae807913be33827b3b11359652a127e33b64464cc570c05abd0d17 + - SHA256=37d999df20c1a0b8ffaef9484c213a97b9987ed308b4ba07316a6013fbd31c60 + - SHA256=72c0d2d699d0440db17cb7cbbc06a253eaafd21465f14bb0fed8b85ae73153d1 + - SHA256=49329fa09f584d1960b09c1b15df18c0bc1c4fdb90bf48b6b5703e872040b668 + - SHA256=9dab4b6fddc8e1ec0a186aa8382b184a5d52cfcabaaf04ff9e3767021eb09cf4 + - SHA256=b1e4455499c6a90ba9a861120a015a6b6f17e64479462b869ad0f05edf6552de + - SHA256=8cb62c5d41148de416014f80bd1fd033fd4d2bd504cb05b90eeb6992a382d58f + - SHA256=0aafa9f47acf69d46c9542985994ff5321f00842a28df2396d4a3076776a83cb + - SHA256=50aa2b3a762abb1306fa003c60de3c78e89ea5d29aab8a9c6479792d2be3c2d7 + - SHA256=b9b3878ddc5dfb237d38f8d25067267870afd67d12a330397a8853209c4d889c + - SHA256=6c6c5e35accc37c928d721c800476ccf4c4b5b06a1b0906dc5ff4df71ff50943 + - SHA256=61e7f9a91ef25529d85b22c39e830078b96f40b94d00756595dded9d1a8f6629 - SHA256=2ef7df384e93951893b65500dac6ee09da6b8fe9128326caad41b8be4da49a1e - - SHA256=72b67b6b38f5e5447880447a55fead7f1de51ca37ae4a0c2b2f23a4cb7455f35 + - SHA256=d998ea6d0051e17c1387c9f295b1c79bacb2f61c23809903445f60313d36c7fd + - SHA256=8ef0ad86500094e8fa3d9e7d53163aa6feef67c09575c169873c494ed66f057f + - SHA256=7ec93f34eb323823eb199fbf8d06219086d517d0e8f4b9e348d7afd41ec9fd5d + - SHA256=e5b0772be02e2bc807804874cf669e97aa36f5aff1f12fa0a631a3c7b4dd0dc8 + - SHA256=29a90ae1dcee66335ece4287a06482716530509912be863c85a2a03a6450a5b6 + - SHA256=0909005d625866ef8ccd8ae8af5745a469f4f70561b644d6e38b80bccb53eb06 + - SHA256=ed3448152bcacf20d7c33e9194c89d5304dee3fba16034dd0cc03a3374e63c91 + - SHA256=0cf84400c09582ee2911a5b1582332c992d1cd29fcf811cb1dc00fcd61757db0 + - SHA256=b1920889466cd5054e3ab6433a618e76c6671c3e806af8b3084c77c0e7648cbe + - SHA256=28999af32b55ddb7dcfc26376a244aa2fe297233ce7abe4919a1aef2f7e2cee7 + - SHA256=adc10de960f40fa9f6e28449748250fa9ddfd331115b77a79809a50c606753ee + - SHA256=48b1344e45e4de4dfb74ef918af5e0e403001c9061018e703261bbd72dc30548 + - SHA256=87b4c5b7f653b47c9c3bed833f4d65648db22481e9fc54aa4a8c6549fa31712b + - SHA256=54bf602a6f1baaec5809a630a5c33f76f1c3147e4b05cecf17b96a93b1d41dca + - SHA256=dec8a933dba04463ed9bb7d53338ff87f2c23cfb79e0e988449fc631252c9dcc + - SHA256=b4d47ea790920a4531e3df5a4b4b0721b7fea6b49a35679f0652f1e590422602 - SHA256=df0dcfb3971829af79629efd036b8e1c6e2127481b3644ccc6e2ddd387489a15 - - SHA256=36505921af5a09175395ebaea29c72b2a69a3a9204384a767a5be8a721f31b10 - - SHA256=40061b30b1243be76d5283cbc8abfe007e148097d4de7337670ff1536c4c7ba1 - - SHA256=b0f6cd34717d0cea5ab394b39a9de3a479ca472a071540a595117219d9a61a44 - - SHA256=6fb5bc9c51f6872de116c7db8a2134461743908efc306373f6de59a0646c4f5d - - SHA256=d04c72fd31e7d36b101ad30e119e14f6df9cbc7a761526da9b77f9e0b9888bc4 - - SHA256=274340f7185a0cc047d82ecfb2cce5bd18764ee558b5227894565c2f9fe9f6ab - - SHA256=101402d4f5d1ae413ded499c78a5fcbbc7e3bae9b000d64c1dd64e3c48c37558 - - SHA256=952199c28332bc90cfd74530a77ee237967ed32b3c71322559c59f7a42187dc4 + - SHA256=fded693528f7e6ac1af253e0bd2726607308fdaa904f1e7242ed44e1c0b29ae8 + - SHA256=45f42c5d874369d6be270ea27a5511efcca512aeac7977f83a51b7c4dee6b5ef + - SHA256=7e0124fcc7c95fdc34408cf154cb41e654dade8b898c71ad587b2090b1da30d7 + - SHA256=3d9e83b189fcf5c3541c62d1f54a0da0a4e5b62c3243d2989afc46644056c8e3 + - SHA256=8edab185e765f9806fa57153db1ede00e68270d2351443ee1de30674eca8d9b6 + - SHA256=52a90fd1546c068b92add52c29fbb8a87d472a57e609146bbcb34862f9dcec15 + - SHA256=8b688dd055ead2c915a139598c8db7962b42cb6e744eaacfcb338c093fc1f4e7 + - SHA256=c08581e3e444849729c5b956d0d6030080553d0bc6e5ae7e9a348d45617b9746 + - SHA256=77da3e8c5d70978b287d433ae1e1236c895b530a8e1475a9a190cdcc06711d2f + - SHA256=64f9e664bc6d4b8f5f68616dd50ae819c3e60452efd5e589d6604b9356841b57 + - SHA256=3c0a36990f7eef89b2d5f454b6452b6df1304609903f31f475502e4050241dd8 + - SHA256=8cfd5b2102fbc77018c7fe6019ec15f07da497f6d73c32a31f4ba07e67ec85d9 + - SHA256=5a0b10a9e662a0b0eeb951ffd2a82cc71d30939a78daebd26b3f58bb24351ac9 + - SHA256=c7079033659ac9459b3b7ab2510805832db2e2a70fe9beb1a6e13c1f51890d88 + - SHA256=bbbeb5020b58e6942ec7dec0d1d518e95fc12ddae43f54ef0829d3393c6afd63 + - SHA256=38535a0e9fc0684308eb5d6aa6284669bc9743f11cb605b79883b8c13ef906ad + - SHA256=65deb5dca18ee846e7272894f74d84d9391bbe260c22f24a65ab37d48bd85377 + - SHA256=7f5dc63e5742096e4accaca39ae77a2a2142b438c10f97860dee4054b51d3b35 + - SHA256=263e8f1e20612849aea95272da85773f577fd962a7a6d525b53f43407aa7ad24 + - SHA256=f0605dda1def240dc7e14efa73927d6c6d89988c01ea8647b671667b2b167008 + - SHA256=bc453d428fc224960fa8cbbaf90c86ce9b4c8c30916ad56e525ab19b6516424e + - SHA256=df96d844b967d404e58a12fc57487abc24cd3bd1f8417acfe1ce1ee4a0b0b858 + - SHA256=1d0397c263d51e9fc95bcc8baf98d1a853e1c0401cd0e27c7bf5da3fba1c93a8 + - SHA256=159dcf37dc723d6db2bad46ed6a1b0e31d72390ec298a5413c7be318aef4a241 + - SHA256=d6827cd3a8f273a66ecc33bb915df6c7dea5cc1b8134b0c348303ef50db33476 + - SHA256=cbf74bed1a4d3d5819b7c50e9d91e5760db1562d8032122edac6f0970f427183 + - SHA256=2b188ae51ec3be082e4d08f7483777ec5e66d30e393a4e9b5b9dc9af93d1f09b + - SHA256=033c4634ab1a43bc3247384864f3380401d3b4006a383312193799dded0de4c7 + - SHA256=0ebaef662b14410c198395b13347e1d175334ec67919709ad37d65eba013adff + - SHA256=1228d0b6b4f907384346f64e918cc28021fe1cd7d4e39687bca34a708998261a + - SHA256=2d83ccb1ad9839c9f5b3f10b1f856177df1594c66cbbc7661677d4b462ebf44d + - SHA256=ae42afa9be9aa6f6a5ae09fa9c05cd2dfb7861dc72d4fd8e0130e5843756c471 + - SHA256=2121a2bb8ebbf2e6e82c782b6f3c6b7904f686aa495def25cf1cf52a42e16109 + - SHA256=368a9c2b6f12adbe2ba65181fb96f8b0d2241e4eae9f3ce3e20e50c3a3cc9aa1 + - SHA256=070ff602cccaaef9e2b094e03983fd7f1bf0c0326612eb76593eabbf1bda9103 + - SHA256=89108a15f009b285db4ef94250b889d5b11b96b4aa7b190784a6d1396e893e10 + - SHA256=4744df6ac02ff0a3f9ad0bf47b15854bbebb73c936dd02f7c79293a2828406f6 + - SHA256=f77fe6b1e0e913ac109335a8fa2ac4961d35cbbd50729936059aba8700690a9e + - SHA256=dd4a1253d47de14ef83f1bc8b40816a86ccf90d1e624c5adf9203ae9d51d4097 + - SHA256=7f190f6e5ab0edafd63391506c2360230af4c2d56c45fc8996a168a1fc12d457 + - SHA256=5bf3985644308662ebfa2fbcc11fb4d3e2a0c817ad3da1a791020f8c8589ebc8 + - SHA256=a19fc837ca342d2db43ee8ad7290df48a1b8b85996c58a19ca3530101862a804 + - SHA256=f8430bdc6fd01f42217d66d87a3ef6f66cb2700ebb39c4f25c8b851858cc4b35 + - SHA256=3e1d47a497babbfd1c83905777b517ec87c65742bee7eb57a2273eca825d2272 + - SHA256=ed2f33452ec32830ffef2d5dc832985db9600c306ed890c47f3f33ccbb335c39 + - SHA256=3390919bb28d5c36cc348f9ef23be5fa49bfd81263eb7740826e4437cbe904cd + - SHA256=39cfde7d401efce4f550e0a9461f5fc4d71fa07235e1336e4f0b4882bd76550e + - SHA256=29e0062a017a93b2f2f5207a608a96df4d554c5de976bd0276c2590a03bd3e94 + - SHA256=0ae8d1dd56a8a000ced74a627052933d2e9bff31d251de185b3c0c5fc94a44db + - SHA256=2b120de80a5462f8395cfb7153c86dfd44f29f0776ea156ec4a34fa64e5c4797 + - SHA256=d5586dc1e61796a9ae5e5d1ced397874753056c3df2eb963a8916287e1929a71 + - SHA256=6945077a6846af3e4e2f6a2f533702f57e993c5b156b6965a552d6a5d63b7402 + - SHA256=2298e838e3c015aedfb83ab18194a2503fe5764a862c294c8b39c550aab2f08e + - SHA256=61befeef14783eb0fed679fca179d2f5c33eb2dcbd40980669ca2ebeb3bf11cf + - SHA256=767ef5c831f92d92f2bfc3e6ea7fd76d11999eeea24cb464fd62e73132ed564b + - SHA256=dba8db472e51edd59f0bbaf4e09df71613d4dd26fd05f14a9bc7e3fc217a78aa + - SHA256=f85784fa8e7a7ec86cb3fe76435802f6bb82256e1824ed7b5d61bf075f054573 + - SHA256=797c1f883d90d25e7fd553624bb16bfd5db24c2658aa0c3c51c715d5833c10fd + - SHA256=591bd5e92dfa0117b3daa29750e73e2db25baa717c31217539d30ffb1f7f3a52 + - SHA256=cfc5c585dd4e592dd1a08887ded28b92d9a5820587b6f4f8fa4f56d60289259b + - SHA256=0296e2ce999e67c76352613a718e11516fe1b0efc3ffdb8918fc999dd76a73a5 + - SHA256=8f68ca89910ebe9da3d02ec82d935de1814d79c44f36cd30ea02fa49ae488f00 + - SHA256=d9a3dc47699949c8ec0c704346fb2ee86ff9010daa0dbac953cfa5f76b52fcd1 + - SHA256=15fb486b6b8c2a2f1b067f48fba10c2f164638fe5e6cee618fb84463578ecac9 + - SHA256=572c545b5a95d3f4d8c9808ebeff23f3c62ed41910eb162343dd5338e2d6b0b4 + - SHA256=65c26276cadda7a36f8977d1d01120edb5c3418be2317d501761092d5f9916c9 + - SHA256=af1011c76a22af7be97a0b3e0ce11aca0509820c59fa7c8eeaaa1b2c0225f75a + - SHA256=91afa3de4b70ee26a4be68587d58b154c7b32b50b504ff0dc0babc4eb56578f4 + - SHA256=5de78cf5f0b1b09e7145db84e91a2223c3ed4d83cceb3ef073c068cf88b9d444 + - SHA256=7c731c0ea7f28671ab7787800db69739ea5cd6be16ea21045b4580cf95cbf73b + - SHA256=ada4e42bf5ef58ef1aad94435441003b1cc1fcaa5d38bfdbe1a3d736dc451d47 + - SHA256=76fb4deaee57ef30e56c382c92abffe2cf616d08dbecb3368c8ee6b02e59f303 + - SHA256=40da0adf588cbb2841a657239d92f24b111d62b173204b8102dd0e014932fe59 + - SHA256=7277130afa0b1506998d7bc58567b0d83f52a27175f4c7c4a7186347095fceed + - SHA256=6c5c6c350c8dd4ca90a8cca0ed1eeca185ebc67b1100935c8f03eb3032aca388 + - SHA256=862d0ff27bb086145a33b9261142838651b0d2e1403be321145e197600eb5015 + - SHA256=775000c4083c8e4dcfc879d83fcd27b40b46820c9834ae4662861386a4d81fe9 + - SHA256=125e4475a5437634cab529da9ea2ef0f4f65f89fb25a06349d731f283c27d9fe + - SHA256=8e88cb80328c3dbaa2752591692e74a2fae7e146d7d8aabc9b9ac9a6fe561e6c + - SHA256=08828990218ebb4415c1bb33fa2b0a009efd0784b18b3f7ecd3bc078343f7208 + - SHA256=2e665962c827ce0adbd29fe6bcf09bbb1d7a7022075d162ff9b65d0af9794ac0 + - SHA256=e51ec2876af3c9c3f1563987a9a35a10f091ea25ede16b1a34ba2648c53e9dfc + - SHA256=26e3bfef255efd052a84c3c43994c73222b14c95db9a4b1fc2e98f1a5cb26e43 + - SHA256=deecbcd260849178de421d8e2f177dce5c63cf67a48abb23a0e3cf3aa3e00578 + - SHA256=1f15fd9b81092a98fabcc4ac95e45cec2d9ff3874d2e3faac482f3e86edad441 + - SHA256=dd0bd7b8fae8e8835ba09118a02a06a51e111fccbe16916414844aab91cfeed4 + - SHA256=17942865680bd3d6e6633c90cc4bd692ae0951a8589dbe103c1e293b3067344d + - SHA256=3243aab18e273a9b9c4280a57aecef278e10bfff19abb260d7a7820e41739099 + - SHA256=fc22977ff721b3d718b71c42440ee2d8a144f3fbc7755e4331ddd5bcc65158d2 + - SHA256=909de5f21837ea2b13fdc4e5763589e6bdedb903f7c04e1d0b08776639774880 + - SHA256=db0d425708ba908aedf5f8762d6fdca7636ae3a537372889446176c0237a2836 + - SHA256=ecfc52a22e4a41bf53865b0e28309411c60af34a44e31a5c53cdc8c5733e8282 - SHA256=1b00d6e5d40b1b84ca63da0e99246574cdd2a533122bc83746f06c0d66e63a6e - - SHA256=3279593db91bb7ad5b489a01808c645eafafda6cc9c39f50d10ccc30203f2ddf - - SHA256=648994905b29b9c4a1074eef332bf6932b638bad62df020b5452c74e2b15d78f - - SHA256=17927b93b2d6ab4271c158f039cae2d60591d6a14458f5a5690aec86f5d54229 - - SHA256=6c7120e40fc850e4715058b233f5ad4527d1084a909114fd6a36b7b7573c4a44 - - SHA256=ad8ffccfde782bc287241152cf24245a8bf21c2530d81c57e17631b3c4adb833 - - SHA256=0ebaef662b14410c198395b13347e1d175334ec67919709ad37d65eba013adff - - SHA256=8d57e416ea4bb855b78a2ff3c80de1dfbb5dc5ee9bfbdddb23e46bd8619287e2 - - SHA256=1ddfe4756f5db9fb319d6c6da9c41c588a729d9e7817190b027b38e9c076d219 - - SHA256=49329fa09f584d1960b09c1b15df18c0bc1c4fdb90bf48b6b5703e872040b668 - - SHA256=bbbeb5020b58e6942ec7dec0d1d518e95fc12ddae43f54ef0829d3393c6afd63 - - SHA256=5c04c274a708c9a7d993e33be3ea9e6119dc29527a767410dbaf93996f87369a - - SHA256=cf69704755ec2643dfd245ae1d4e15d77f306aeb1a576ffa159453de1a7345cb - - SHA256=38d87b51f4b69ba2dae1477684a1415f1a3b578eee5e1126673b1beaefee9a20 - - SHA256=854bc946b557ed78c7d40547eb39e293e83942a693c94d0e798d1c4fbde7efa9 - - SHA256=e61004335dfe7349f2b2252baa1e111fb47c0f2d6c78a060502b6fcc92f801e4 - - SHA256=11a9787831ac4f0657aeb5e7019c23acc39d8833faf28f85bd10d7590ea4cc5f - - SHA256=1f4d4db4abe26e765a33afb2501ac134d14cadeaa74ae8a0fae420e4ecf58e0c - - SHA256=075de997497262a9d105afeadaaefc6348b25ce0e0126505c24aa9396c251e85 - - SHA256=3384f4a892f7aa72c43280ff682d85c8e3936f37a68d978d307a9461149192de - - SHA256=b50ffc60eaa4fb7429fdbb67c0aba0c7085f5129564d0a113fec231c5f8ff62e - - SHA256=4045ae77859b1dbf13972451972eaaf6f3c97bea423e9e78f1c2f14330cd47ca - - SHA256=09bedbf7a41e0f8dabe4f41d331db58373ce15b2e9204540873a1884f38bdde1 - - SHA256=525d9b51a80ca0cd4c5889a96f857e73f3a80da1ffbae59851e0f51bdfb0b6cd - - SHA256=0bd164da36bd637bb76ca66602d732af912bd9299cb3d520d26db528cb54826d - - SHA256=ec1307356828426d60eab78ffb5fc48a06a389dea6e7cc13621f1fa82858a613 - - SHA256=6a4875ae86131a594019dec4abd46ac6ba47e57a88287b814d07d929858fe3e5 - - SHA256=7196187fb1ef8d108b380d37b2af8efdeb3ca1f6eefd37b5dc114c609147216d - - SHA256=ebe2e9ec6d5d94c2d58fbcc9d78c5f0ee7a2f2c1aed6d1b309f383186d11dfa3 - - SHA256=f77fe6b1e0e913ac109335a8fa2ac4961d35cbbd50729936059aba8700690a9e - - SHA256=47f0cdaa2359a63ad1389ef4a635f1f6eee1f63bdf6ef177f114bdcdadc2e005 - - SHA256=4bf4cced4209c73aa37a9e2bf9ff27d458d8d7201eefa6f6ad4849ee276ad158 - - SHA256=55963284bbd5a3297f39f12f0d8a01ed99fe59d008561e3537bcd4db4b4268fa - - SHA256=910479467ef17b9591d8d42305e7f6f247ad41c60ec890a1ffbe331f495ed135 - - SHA256=70b63dfc3ed2b89a4eb8a0aa6c26885f460e5686d21c9d32413df0cdc5f962c7 - - SHA256=8b688dd055ead2c915a139598c8db7962b42cb6e744eaacfcb338c093fc1f4e7 - - SHA256=0cf6c6c2d231eaf67dfc87561cc9a56ecef89ab50baafee5a67962748d51faf3 - - SHA256=523d1d43e896077f32cd9acaa8e85b513bfb7b013a625e56f0d4e9675d9822ba - - SHA256=97030f3c81906334429afebbf365a89b66804ed890cd74038815ca18823d626c - - SHA256=175eed7a4c6de9c3156c7ae16ae85c554959ec350f1c8aaa6dfe8c7e99de3347 - - SHA256=d7e091e0d478c34232e8479b950c5513077b3a69309885cee4c61063e5f74ac0 - - SHA256=cc383ad11e9d06047a1558ed343f389492da3ac2b84b71462aee502a2fa616c8 - - SHA256=c26b51b4c37330800cff8519252e110116c3aaade94ceb9894ec5bfb1b8f9924 - - SHA256=0f016c80c4938fbcd47a47409969b3925f54292eba2ce01a8e45222ce8615eb8 - - SHA256=399effe75d32bdab6fa0a6bffe02dbf0a59219d940b654837c3be1c0bd02e9aa - - SHA256=41765151df57125286b398cc107ff8007972f4653527f876d133dac1548865d6 - - SHA256=567809308cfb72d59b89364a6475f34a912d03889aa50866803ac3d0bf2c3270 - - SHA256=159e7c5a12157af92e0d14a0d3ea116f91c09e21a9831486e6dc592c93c10980 - - SHA256=7a2cd1dc110d014165c001ce65578da0c0c8d7d41cc1fa44f974e8a82296fc25 - - SHA256=94be67c319a67de75ebed050d5537cfaa795d72bba52f3d8cf349e7bd075410e - - SHA256=fb6b0d304433bf88cc7d57728683dbb4b9833459dc33528918ead09b3907ff22 + - SHA256=30706f110725199e338e9cc1c940d9a644d19a14f0eb8847712cba4cacda67ab + - SHA256=7f84f009704bc36f0e97c7be3de90648a5e7c21b4f870e4f210514d4418079a0 + - SHA256=cb9890d4e303a4c03095d7bc176c42dee1b47d8aa58e2f442ec1514c8f9e3cec + - SHA256=19d0fc91b70d7a719f7a28b4ad929f114bf1de94a4c7cba5ad821285a4485da0 + - SHA256=3d8cfc9abea6d83dfea6da03260ff81be3b7b304321274f696ff0fdb9920c645 + - SHA256=58c071cfe72e9ee867bba85cbd0abe72eb223d27978d6f0650d0103553839b59 + - SHA256=34e0364a4952d914f23f271d36e11161fb6bb7b64aea22ff965a967825a4a4bf + - SHA256=07af8c5659ad293214364789df270c0e6d03d90f4f4495da76abc2d534c64d88 + - SHA256=423d58265b22504f512a84faf787c1af17c44445ae68f7adcaa68b6f970e7bd5 + - SHA256=f4ff679066269392f6b7c3ba6257fc60dd609e4f9c491b00e1a16e4c405b0b9b + - SHA256=ef1abc77f4000e68d5190f9e11025ea3dc1e6132103d4c3678e15a678de09f33 + - SHA256=1afa03118f87b62c59a97617e595ebb26dde8dbdd16ee47ef3ddd1097c30ef6a + - SHA256=270547552060c6f4f5b2ebd57a636d5e71d5f8a9d4305c2b0fe5db0aa2f389cc + - SHA256=cfcf32f5662791f1f22a77acb6dddfbc970fe6e99506969b3ea67c03f67687ab + - SHA256=fa21e3d2bfb9fafddec0488852377fbb2dbdd6c066ca05bb5c4b6aa840fb7879 + - SHA256=5b3705b47dc15f2b61ca3821b883b9cd114d83fcc3344d11eb1d3df495d75abe + - SHA256=31f4cfb4c71da44120752721103a16512444c13c2ac2d857a7e6f13cb679b427 + - SHA256=7c79e5196c2f51d2ab16e40b9d5725a8bf6ae0aaa70b02377aedc0f4e93ca37f + - SHA256=09043c51719d4bf6405c9a7a292bb9bb3bcc782f639b708ddcc4eedb5e5c9ce9 - SHA256=9a95a70f68144980f2d684e96c79bdc93ebca1587f46afae6962478631e85d0c - - SHA256=d7bc7306cb489fe4c285bbeddc6d1a09e814ef55cf30bd5b8daf87a52396f102 - - SHA256=0af5ccb3d33a9ba92071c9637be6254030d61998733a5eb3583e865e17844e05 - - SHA256=ce23c2dae4cca4771ea50ec737093dfafac06c64db0f924a1ccbbf687e33f5a2 - - SHA256=ec5fac0b6bb267a2bd10fc80c8cca6718439d56e82e053d3ff799ce5f3475db5 - - SHA256=74a846c61adc53692d3040aff4c1916f32987ad72b07fe226e9e7dbeff1036c4 - - SHA256=55fee54c0d0d873724864dc0b2a10b38b7f40300ee9cae4d9baaf8a202c4049a - - SHA256=e16dc51c51b2df88c474feb52ce884d152b3511094306a289623de69dedfdf48 - - SHA256=ff115cefe624b6ca0b3878a86f6f8b352d1915b65fbbdc33ae15530a96ebdaa7 - - SHA256=5f20541f859f21b3106e12d37182b1ea39bb75ffcfcddb2ece4f6edd42c0bab2 - - SHA256=2e665962c827ce0adbd29fe6bcf09bbb1d7a7022075d162ff9b65d0af9794ac0 + - SHA256=d7c90cf3fdbbd2f40fe6a39ad0bb2a9a97a0416354ea84db3aeff6d925d14df8 + - SHA256=2aa1b08f47fbb1e2bd2e4a492f5d616968e703e1359a921f62b38b8e4662f0c4 + - SHA256=9ee33ffd80611a13779df6286c1e04d3c151f1e2f65e3d664a08997fcd098ef3 + - SHA256=358ac54be252673841a1d65bfc2fb6d549c1a4c877fa7f5e1bfa188f30375d69 + - SHA256=26c28746e947389856543837aa59a5b1f4697e5721a04d00aa28151a2659b097 + - SHA256=4ec7af309a9359c332d300861655faeceb68bb1cd836dd66d10dd4fac9c01a28 + - SHA256=1284a1462a5270833ec7719f768cdb381e7d0a9c475041f9f3c74fa8eea83590 + - SHA256=defde359045213ae6ae278e2a92c5b4a46a74119902364c7957a38138e9c9bbd + - SHA256=4429f32db1cc70567919d7d47b844a91cf1329a6cd116f582305f3b7b60cd60b + - SHA256=d0e4d3e1f5d5942aaf2c72631e9490eecc4d295ee78c323d8fe05092e5b788eb + - SHA256=9fc29480407e5179aa8ea41682409b4ea33f1a42026277613d6484e5419de374 + - SHA256=e7b79fe1377b3da749590c080d4d96e59e622b1013b2183b98c81baa8bf2fffe + - SHA256=a6c11d3bec2a94c40933ec1d3604cfe87617ba828b14f4cded6cfe85656debc0 + - SHA256=47eaebc920ccf99e09fc9924feb6b19b8a28589f52783327067c9b09754b5e84 + - SHA256=525d9b51a80ca0cd4c5889a96f857e73f3a80da1ffbae59851e0f51bdfb0b6cd - SHA256=4ed2d2c1b00e87b926fb58b4ea43d2db35e5912975f4400aa7bd9f8c239d08b7 - - SHA256=f877296e8506e6a1acbdacdc5085b18c6842320a2775a329d286bac796f08d54 - - SHA256=6b830ea0db6546a044c9900d3f335e7820c2a80e147b0751641899d1a5aa8f74 - - SHA256=fa21e3d2bfb9fafddec0488852377fbb2dbdd6c066ca05bb5c4b6aa840fb7879 - - SHA256=1675eedd4c7f2ec47002d623bb4ec689ca9683020e0fdb0729a9047c8fb953dd - - SHA256=18712a063574bfec315d58577dfe413ab45b650e54747d1e18a56c3c7337a12c - - SHA256=56a3c9ac137d862a85b4004f043d46542a1b61c6acb438098a9640469e2d80e7 - - SHA256=be03e9541f56ac6ed1e81407dcd7cc85c0ffc538c3c2c2c8a9c747edbcf13100 - - SHA256=202d9703a5b8d06c5f92d2c5218a93431aa55af389007826a9bfaaf900812213 - - SHA256=3b7177e9a10c1392633c5f605600bb23c8629379f7f42957972374a05d4dc458 - - SHA256=4a3d4db86f580b1680d6454baee1c1a139e2dde7d55e972ba7c92ec3f555dce2 - - SHA256=caa85c44eb511377ea7426ff10df00a701c07ffb384eef8287636a4bca0b53ab - - SHA256=a566af57d88f37fa033e64b1d8abbd3ffdacaba260475fbbc8dab846a824eff5 - - SHA256=5f69d6b167a1eeca3f6ac64785c3c01976ee7303171faf998d65852056988683 - - SHA256=8a0702681bc51419fbd336817787a966c7f92cabe09f8e959251069578dfa881 - - SHA256=df0cc4e5c9802f8edaefeb130e375cad56b2c5490d8ebd77d8dbdcc6fdc7ecb6 - - SHA256=68671b735716ffc168addc052c5dc3d635e63e71c1e78815e7874286c3fcc248 - - SHA256=59b09bd69923c0b3de3239e73205b1846a5f69043546d471b259887bb141d879 - - SHA256=a855b6ec385b3369c547a3c54e88a013dd028865aba0f3f08be84cdcbaa9a0f6 - - SHA256=23ba19352b1e71a965260bf4d5120f0200709ee8657ed381043bec9a938a1ade - - SHA256=07af8c5659ad293214364789df270c0e6d03d90f4f4495da76abc2d534c64d88 - - SHA256=074ae477c8c7ae76c6f2b0bf77ac17935a8e8ee51b52155d2821d93ab30f3761 - - SHA256=5f5e5f1c93d961985624768b7c676d488c7c7c1d4c043f6fc1ea1904fefb75be - - SHA256=478d855b648ef4501d3b08b3b10e94076ac67546b0ce86b454324f1bf9a78aa0 - - SHA256=d969845ef6acc8e5d3421a7ce7e244f419989710871313b04148f9b322751e5d - - SHA256=dd2c1aa4e14c825f3715891bfa2b6264650a794f366d5f73ed1ef1d79ff0dbf9 - - SHA256=50aa2b3a762abb1306fa003c60de3c78e89ea5d29aab8a9c6479792d2be3c2d7 - - SHA256=314384b40626800b1cde6fbc51ebc7d13e91398be2688c2a58354aa08d00b073 - - SHA256=b7bba82777c9912e6a728c3e873c5a8fd3546982e0d5fa88e64b3e2122f9bc3b - - SHA256=dbebf6d463c2dbf61836b3eba09b643e1d79a02652a32482ca58894703b9addb - - SHA256=a2f45d95d54f4e110b577e621fefa0483fa0e3dcca14c500c298fb9209e491c1 - - SHA256=4c2d2122ef7a100e1651f2ec50528c0d1a2b8a71c075461f0dc58a1aca36bc61 - - SHA256=c2562e0101cb39906c73b96fc15a6e6e3edd710b19858f6bbd0c90f1561b6038 - - SHA256=0b2ad05939b0aabbdc011082fad7960baa0c459ec16a2b29f37c1fa31795a46d - - SHA256=a2353030d4ea3ad9e874a0f7ff35bbfa10562c98c949d88cabab27102bbb8e48 - - SHA256=159dcf37dc723d6db2bad46ed6a1b0e31d72390ec298a5413c7be318aef4a241 - - SHA256=773999db2f07c50aad70e50c1983fa95804369d25a5b4f10bd610f864c27f2fc + - SHA256=bd3cf8b9af255b5d4735782d3653be38578ff5be18846b13d05867a6159aaa53 + - SHA256=84c5f6ddd9c90de873236205b59921caabb57ac6f7a506abbe2ce188833bbe51 + - SHA256=32e1a8513eee746d17eb5402fb9d8ff9507fb6e1238e7ff06f7a5c50ff3df993 + - SHA256=e34afe0a8c5459d13e7a11f20d62c7762b2a55613aaf6dbeb887e014b5f19295 + - SHA256=d8fc8e3a1348393c5d7c3a84bcbae383d85a4721a751ad7afac5428e5e579b4e + - SHA256=0e9072759433abf3304667b332354e0c635964ff930de034294bf13d40da2a6f + - SHA256=0cfb7ea2cc515a7fe913ab3619cbfcf1ca96d8cf72dc350905634a5782907a49 + - SHA256=13ae4d9dcacba8133d8189e59d9352272e15629e6bca580c32aff9810bd96e44 - SHA256=2e6b339597a89e875f175023ed952aaac64e9d20d457bbc07acf1586e7fe2df8 - - SHA256=7f5dc63e5742096e4accaca39ae77a2a2142b438c10f97860dee4054b51d3b35 - - SHA256=3c7e5b25a33a7805c999d318a9523fcae46695a89f55bbdb8bb9087360323dfc - - SHA256=c188b36f258f38193ace21a7d254f0aec36b59ad7e3f9bcb9c2958108effebad - - SHA256=653f6a65e0e608cae217bea2f90f05d8125cf23f83ba01a60de0f5659cfa5d4d - - SHA256=f7e0cca8ad9ea1e34fa1a5e0533a746b2fa0988ba56b01542bc43841e463b686 - - SHA256=55a1535e173c998fbbc978009b02d36ca0c737340d84ac2a8da73dfc2f450ef9 - - SHA256=6ed35f310c96920a271c59a097b382da07856e40179c2a4239f8daa04eef38e7 - - SHA256=5c0b429e5935814457934fa9c10ac7a88e19068fa1bd152879e4e9b89c103921 - - SHA256=3c18ae965fba56d09a65770b4d8da54ccd7801f979d3ebd283397bc99646004b - - SHA256=cf3180f5308af002ac5d6fd5b75d1340878c375f0aebc3157e3bcad6322b7190 - - SHA256=1f8168036d636aad1680dd0f577ef9532dbb2dad3591d63e752b0ba3ee6fd501 - - SHA256=3503ea284b6819f9cb43b3e94c0bb1bf5945ccb37be6a898387e215197a4792a - - SHA256=7049f3c939efe76a5556c2a2c04386db51daf61d56b679f4868bb0983c996ebb - - SHA256=9724488ca2ba4c787640c49131f4d1daae5bd47d6b2e7e5f9e8918b1d6f655be - - SHA256=9f1025601d17945c3a47026814bdec353ee363966e62dba7fe2673da5ce50def - - SHA256=16b591cf5dc1e7282fdb25e45497fe3efc8095cbe31c05f6d97c5221a9a547e1 - - SHA256=82fbcb371d53b8a76a25fbbafaae31147c0d1f6b9f26b3ea45262c2267386989 - SHA256=18776682fcc0c6863147143759a8d4050a4115a8ede0136e49a7cf885c8a4805 - - SHA256=c5050a2017490fff7aa53c73755982b339ddb0fd7cef2cde32c81bc9834331c5 + - SHA256=845f1e228de249fc1ddf8dc28c39d03e8ad328a6277b6502d3932e83b879a65a + - SHA256=9a523854fe84f15efc1635d7f5d3e71812c45d6a4d2c99c29fdc4b4d9c84954c + - SHA256=c6db7f2750e7438196ec906cc9eba540ef49ceca6dbd981038cef1dc50662a73 + - SHA256=8399e5afd8e3e97139dffb1a9fb00db2186321b427f164403282217cab067c38 + - SHA256=d7e091e0d478c34232e8479b950c5513077b3a69309885cee4c61063e5f74ac0 + - SHA256=18deed37f60b6aa8634dda2565a0485452487d7bce88afb49301a7352db4e506 + - SHA256=0cf6c6c2d231eaf67dfc87561cc9a56ecef89ab50baafee5a67962748d51faf3 + - SHA256=5f7e47d728ac3301eb47b409801a0f4726a435f78f1ed02c30d2a926259c71f3 + - SHA256=5c0b429e5935814457934fa9c10ac7a88e19068fa1bd152879e4e9b89c103921 + - SHA256=2da330a2088409efc351118445a824f11edbe51cf3d653b298053785097fe40e + - SHA256=ab0925398f3fa69a67eacee2bbb7b34ac395bb309df7fc7a9a9b8103ef41ed7a + - SHA256=e502c2736825ea0380dd42effaa48105a201d4146e79de00713b8d3aaa98cd65 + - SHA256=8fe429c46fedbab8f06e5396056adabbb84a31efef7f9523eb745fc60144db65 + - SHA256=552f70374715e70c4ade591d65177be2539ec60f751223680dfaccb9e0be0ed9 - SHA256=eba14a2b4cefd74edaf38d963775352dc3618977e30261aab52be682a76b536f - - SHA256=5b3705b47dc15f2b61ca3821b883b9cd114d83fcc3344d11eb1d3df495d75abe - - SHA256=509628b6d16d2428031311d7bd2add8d5f5160e9ecc0cd909f1e82bbbb3234d6 - - SHA256=e2e79f1e696f27fa70d72f97e448081b1fa14d59cbb89bb4a40428534dd5c6f6 - - SHA256=5cfad3d473961763306d72c12bd5ae14183a1a5778325c9acacca764b79ca185 - - SHA256=3f9530c94b689f39cc83377d76979d443275012e022782a600dcb5cad4cca6aa - - SHA256=f84f8173242b95f9f3c4fea99b5555b33f9ce37ca8188b643871d261cb081496 - - SHA256=7ec93f34eb323823eb199fbf8d06219086d517d0e8f4b9e348d7afd41ec9fd5d - - SHA256=98b734dda78c16ebcaa4afeb31007926542b63b2f163b2f733fa0d00dbb344d8 - - SHA256=9e2622d8e7a0ec136ba1fff639833f05137f8a1ff03e7a93b9a4aea25e7abb8d - - SHA256=f1fbec90c60ee4daba1b35932db9f3556633b2777b1039163841a91cf997938e - - SHA256=3e85cf32562a47d51827b21ab1e7f8c26c0dbd1cd86272f3cc64caae61a7e5fb - - SHA256=092d04284fdeb6762e65e6ac5b813920d6c69a5e99d110769c5c1a78e11c5ba0 - - SHA256=4eb1b9f3fe3c79f20c9cdeba92f6d6eb9b9ed15b546851e1f5338c0b7d36364b - - SHA256=904e0f7d485a98e8497d5ec6dd6e6e1cf0b8d8e067fb64a9e09790af3c8c9d5a - - SHA256=d8b58f6a89a7618558e37afc360cd772b6731e3ba367f8d58734ecee2244a530 - - SHA256=7fc01f25c4c18a6c539cda38fdbf34b2ff02a15ffd1d93a7215e1f48f76fb3be - - SHA256=834a3d755b5ae798561f8e5fbb18cf28dfcae7a111dc6a03967888e9d10f6d78 - - SHA256=ff987c30ce822d99f3b4b4e23c61b88955f52406a95e6331570a2a13cbebc498 - - SHA256=da617fe914a5f86dc9d657ef891bbbceb393c8a6fea2313c84923f3630255cdb - - SHA256=0484defcf1b5afbe573472753dc2395e528608b688e5c7d1d178164e48e7bed7 - - SHA256=ff6729518a380bf57f1bc6f1ec0aa7f3012e1618b8d9b0f31a61d299ee2b4339 - - SHA256=47eaebc920ccf99e09fc9924feb6b19b8a28589f52783327067c9b09754b5e84 - - SHA256=e58bbf3251906ff722aa63415bf169618e78be85cb92c8263d3715c260491e90 - - SHA256=7fd90500b57f9ac959c87f713fe9ca59e669e6e1512f77fccb6a75cdc0dfee8e - - SHA256=f8430bdc6fd01f42217d66d87a3ef6f66cb2700ebb39c4f25c8b851858cc4b35 - - SHA256=7236c8ff33c0e5cfa956778aa7303f1979f3bf709c361399fa1ce101b7e355b8 - - SHA256=aebcbfca180e372a048b682a4859fd520c98b5b63f6e3a627c626cb35adc0399 + - SHA256=5f20541f859f21b3106e12d37182b1ea39bb75ffcfcddb2ece4f6edd42c0bab2 + - SHA256=bae4372a9284db52dedc1c1100cefa758b3ec8d9d4f0e5588a8db34ded5edb1f + - SHA256=2594b3ef3675ca3a7b465b8ed4962e3251364bab13b12af00ebba7fa2211abb2 + - SHA256=a961f5939088238d76757669a9a81905e33f247c9c635b908daac146ae063499 + - SHA256=2fbbc276737047cb9b3ba5396756d28c1737342d89dce1b64c23a9c4513ae445 + - SHA256=31ffc8218a52c3276bece1e5bac7fcb638dca0bc95c2d385511958abdbe4e4a5 + - SHA256=e279e425d906ba77784fb5b2738913f5065a567d03abe4fd5571695d418c1c0f + - SHA256=95d50c69cdbf10c9c9d61e64fe864ac91e6f6caa637d128eb20e1d3510e776d3 - SHA256=0466dac557ee161503f5dfbd3549f81ec760c3d6c7c4363a21a03e7a3f66aca8 - - SHA256=b617a072c578cea38c460e2851f3d122ba1b7cfa1f5ee3e9f5927663ac37af61 - - SHA256=9778136d2441439dc470861d15d96fa21dc9f16225232cd05b76791a5e0fde6f - - SHA256=0eab16c7f54b61620277977f8c332737081a46bc6bbde50742b6904bdd54f502 - - SHA256=ac3f613d457fc4d44fa27b2e0b1baa62c09415705efb5a40a4756da39b3ac165 - - SHA256=f0605dda1def240dc7e14efa73927d6c6d89988c01ea8647b671667b2b167008 - - SHA256=53810ca98e07a567bb082628d95d796f14c218762cbbaa79704740284dccda4b - - SHA256=94911fe6f2aba9683b10353094caf71ee4a882de63b4620797629d79f18feec5 - - SHA256=64f9e664bc6d4b8f5f68616dd50ae819c3e60452efd5e589d6604b9356841b57 - - SHA256=9dab4b6fddc8e1ec0a186aa8382b184a5d52cfcabaaf04ff9e3767021eb09cf4 - - SHA256=0f17e5cfc5bdd74aff91bfb1a836071345ba2b5d1b47b0d5bf8e7e0d4d5e2dbf - - SHA256=09b0e07af8b17db1d896b78da4dd3f55db76738ee1f4ced083a97d737334a184 - - SHA256=5a826b4fa10891cf63aae832fc645ce680a483b915c608ca26cedbb173b1b80a + - SHA256=66f851b309bada6d3e4b211baa23b534165b29ba16b5cbf5e8f44eaeb3ca86ea + - SHA256=d3eaf041ce5f3fd59885ead2cb4ce5c61ac9d83d41f626512942a50e3da7b75a + - SHA256=a5a4a3c3d3d5a79f3ed703fc56d45011c21f9913001fcbcc43a3f7572cff44ec + - SHA256=8781589c77df2330a0085866a455d3ef64e4771eb574a211849784fdfa765040 + - SHA256=748ccadb6bf6cdf4c5a5a1bb9950ee167d8b27c5817da71d38e2bc922ffce73d + - SHA256=12eda8b65ed8c1d80464a0c535ea099dffdb4981c134294cb0fa424efc85ee56 + - SHA256=9a1d66036b0868bbb1b2823209fedea61a301d5dd245f8e7d390bd31e52d663e + - SHA256=1d804efc9a1a012e1f68288c0a2833b13d00eecd4a6e93258ba100aa07e3406f + - SHA256=d04c72fd31e7d36b101ad30e119e14f6df9cbc7a761526da9b77f9e0b9888bc4 + - SHA256=019c2955e380dd5867c4b82361a8d8de62346ef91140c95cb311b84448c0fa4f + - SHA256=923ebbe8111e73d5b8ecc2db10f8ea2629a3264c3a535d01c3c118a3b4c91782 + - SHA256=97363f377aaf3c01641ac04a15714acbec978afb1219ac8f22c7e5df7f2b2d56 + - SHA256=cac5dc7c3da69b682097144f12a816530091d4708ca432a7ce39f6abe6616461 + - SHA256=30abc0cc700fdebc74e62d574addc08f6227f9c7177d9eaa8cbc37d5c017c9bb + - SHA256=07d0090c76155318e78a676e2f8af1500c20aaa1e84f047c674d5f990f5a09c8 + - SHA256=43136de6b77ef85bc661d401723f38624e93c4408d758bc9f27987f2b4511fee + - SHA256=dd2f1f7012fb1f4b2fb49be57af515cb462aa9c438e5756285d914d65da3745b + - SHA256=fda93c6e41212e86af07f57ca95db841161f00b08dae6304a51b467056e56280 + - SHA256=ded2927f9a4e64eefd09d0caba78e94f309e3a6292841ae81d5528cab109f95d + - SHA256=a34e45e5bbec861e937aefb3cbb7c8818f72df2082029e43264c2b361424cbb1 + - SHA256=a903f329b70f0078197cb7683aae1bb432eaf58572fe572f7cb4bc2080042d7e + - SHA256=881bca6dc2dafe1ae18aeb59216af939a3ac37248c13ed42ad0e1048a3855461 + - SHA256=13ae3081393f8100cc491ebb88ba58f0491b3550787cf3fd25a73aa7ca0290d9 + - SHA256=54841d9f89e195196e65aa881834804fe3678f1cf6b328cab8703edd15e3ec57 + - SHA256=3e9b62d2ea2be50a2da670746c4dbe807db9601980af3a1014bcd72d0248d84c + - SHA256=1a4f7d7926efc3e3488758ce318246ea78a061bde759ec6c906ff005dd8213e5 + - SHA256=9d530642aeb6524691d06b9e02a84e3487c9cdd86c264b105035d925c984823a + - SHA256=c2fcc0fec64d5647813b84b9049d430406c4c6a7b9f8b725da21bcae2ff12247 + - SHA256=d7c79238f862b471740aff4cc3982658d1339795e9ec884a8921efe2e547d7c3 + - SHA256=fcdfe570e6dc6e768ef75138033d9961f78045adca53beb6fdb520f6417e0df1 + - SHA256=1076504a145810dfe331324007569b95d0310ac1e08951077ac3baf668b2a486 + - SHA256=e61004335dfe7349f2b2252baa1e111fb47c0f2d6c78a060502b6fcc92f801e4 + - SHA256=0d3790af5f8e5c945410929e31d06144a471ac82f828afe89a4758a5bbeb7f9f + - SHA256=a2f45d95d54f4e110b577e621fefa0483fa0e3dcca14c500c298fb9209e491c1 + - SHA256=386745d23a841e1c768b5bdf052e0c79bb47245f9713ee64e2a63f330697f0c8 + - SHA256=163912dfa4ad141e689e1625e994ab7c1f335410ebff0ade86bda3b7cdf6e065 + - SHA256=e6023b8fd2ce4ad2f3005a53aa160772e43fe58da8e467bd05ab71f3335fb822 + - SHA256=e07211224b02aaf68a5e4b73fc1049376623793509d9581cdaee9e601020af06 + - SHA256=003e61358878c7e49e18420ee0b4a37b51880be40929a76e529c7b3fb18e81b4 + - SHA256=d2e843d9729da9b19d6085edf69b90b057c890a74142f5202707057ee9c0b568 + - SHA256=cfb7af8ac67a379e7869289aeee21837c448ea6f8ab6c93988e7aa423653bd40 + - SHA256=65db1b259e305a52042e07e111f4fa4af16542c8bacd33655f753ef642228890 + - SHA256=d9a73df5ac5c68ef5b37a67e5e649332da0f649c3bb6828f70b65c0a2e7d3a23 + - SHA256=3670ccd9515d529bb31751fcd613066348057741adeaf0bffd1b9a54eb8baa76 + - SHA256=e26a21e1b79ecaee7033e05edb0bd72aca463c23bd6fdf5835916ce2dfdf1a63 + - SHA256=00b3ff11585c2527b9e1c140fd57cb70b18fd0b775ec87e9646603056622a1fd + - SHA256=707b4b5f5c4585156d8a4d8c39cf26729f5ad05d7f77b17f48e670e808e3e6a0 + - SHA256=6f1ff29e2e710f6d064dc74e8e011331d807c32cc2a622cbe507fd4b4d43f8f4 + - SHA256=b0f6cd34717d0cea5ab394b39a9de3a479ca472a071540a595117219d9a61a44 + - SHA256=b01ebea651ec7780d0fe88dd1b6c2500a36dacf85e3a4038c2ca1c5cb44c7b5d + - SHA256=5d530e111400785d183057113d70623e17af32931668ab7c7fc826f0fd4f91a3 + - SHA256=9f1025601d17945c3a47026814bdec353ee363966e62dba7fe2673da5ce50def + - SHA256=793a26c5c4c154a40f84c3d3165deb807062b26796acaae94b72f453e95230d5 + - SHA256=2bbe65cbec3bb069e92233924f7ee1f95ffa16173fceb932c34f68d862781250 + - SHA256=26453afb1f808f64bec87a2532a9361b696c0ed501d6b973a1f1b5ae152a4d40 + - SHA256=1e0eb0811a7cf1bdaf29d3d2cab373ca51eb8d8b58889ab7728e2d3aed244abe + - SHA256=8688e43d94b41eeca2ed458b8fc0d02f74696a918e375ecd3842d8627e7a8f2b + - SHA256=7c830ed39c9de8fe711632bf44846615f84b10db383f47b7d7c9db29a2bd829a + - SHA256=84bf1d0bcdf175cfe8aea2973e0373015793d43907410ae97e2071b2c4b8e2d4 + - SHA256=4d19ee789e101e5a76834fb411aadf8229f08b3ece671343ad57a6576a525036 + - SHA256=3f2fda9a7a9c57b7138687bbce49a2e156d6095dddabb3454ea09737e02c3fa5 + - IMPHASH=88e21ed9e717781eaf87209acbdbb567 + - IMPHASH=481d7bb63a8e5eaba756137e6ef22e54 + - IMPHASH=cef6a450f196b28e634aa3c0655d8eda + - IMPHASH=0e0722c16a5ded199f64b26fccd2115a + - IMPHASH=f0cd7cce1d03cf9df1b8266701f92b46 + - IMPHASH=cc88330f6dca52a40e258f689d3e2db4 + - IMPHASH=835e364e2175338d970c2aaee365f3dc + - IMPHASH=82e75304c5b7ed87121b8b89c82f2389 + - IMPHASH=9470f56376e665fb981a35b303436041 + - IMPHASH=37b1eada43ad08093dfa4de7a411d15f + - IMPHASH=a2d936fa82b7340d28a697fb344046d8 + - IMPHASH=16b23f4c6ea47d01340a2cce4bf613f7 + - IMPHASH=32b632f6379bfaac9f4f3a030a694f55 + - IMPHASH=052280a42374b8d779c10cd0d8118691 + - IMPHASH=540992ba6f31301ba27604515a78ad79 + - IMPHASH=a5fd3b0143c8db98017ec1b2b2528360 + - IMPHASH=1e13511288689b63b2e1348bf5eb567b + - IMPHASH=dd406d43857d7f5ad1b0aec04fdb7e5f + - IMPHASH=cf1a39b9408348cddaa4a2827283534c + - IMPHASH=0dcd262801389f839ce909cb173448e2 + - IMPHASH=9e15ce38f071c916bea830247f1241bb + - IMPHASH=5716c52252afe18d09f6c1bc6e5ef3ef + - IMPHASH=ecf8495ba751a7e38d6be4c5c80f2bef + - IMPHASH=f475387e3959dbea86854d61602db136 + - IMPHASH=98dc1b41bda471f7eabdce8a5d16c09d + - IMPHASH=8b7e7c20da6ca9ac4bdb3927fe2b266a + - IMPHASH=14075e605bff546182d682f41afefea2 + - IMPHASH=b8302791cd2edfe6dd562c4854ea495f + - IMPHASH=a1d29a3af6402793ec9d23883512938a + - IMPHASH=aa01c534155ce919d797860feb531eae + - IMPHASH=ebb99842fa08915eb8b7f67d8dc7a13a + - IMPHASH=89f3f52b23bdf03bd2bb7eb3cfab8817 + - IMPHASH=8605f70bcc472025c2e78082388ed00b + - IMPHASH=27365d8741d23e179699f1f11a619c7d + - IMPHASH=dc0a0f2d424a59b4d17033f58f01b027 + - IMPHASH=48e2ef3c2d32ecca62510d90e12b6632 + - IMPHASH=a793af44219650b4dd07d8a19ede33f1 + - IMPHASH=5f4063ab963abff76d0d83d239697e36 + - IMPHASH=7716b766e630388f64de1961719be3d4 + - IMPHASH=8ed3fbdefcc1982cd7decc40ace9d2e7 + - IMPHASH=6e796fd10b55f58fd0ec9f122a14e918 + - IMPHASH=2d7766896629499b1484227afaf43dd7 + - IMPHASH=0579e15c488a56c544e8fac130d826ba + - IMPHASH=e1d88d0526dfa369c3661355dbd8773d + - IMPHASH=8ec78cf864273fd81203678b61c41f04 + - IMPHASH=ff605557fd515d7ab30ff41dbd8bd24a + - IMPHASH=234f0978e7f2aa0beb9501ff53d94e5b + - IMPHASH=77d6a7153b3015318622b793227fb394 + - IMPHASH=6c42ea981bc29a7e2ed56d297e0b56dc + - IMPHASH=23eb5ffc060c6c52546d38e2b63019bd + - IMPHASH=ee9cc2f584c2f06fbff67d484adcf426 + - IMPHASH=d6dc99d60798b2647006ddba21671160 + - IMPHASH=1427c5f0f4fb100e26a3911f8209504b + - IMPHASH=a095f31019d7a32d0a0507879a1822b1 + - IMPHASH=b8a35d469bc164d86ac7c64e93b0037b + - IMPHASH=0e9dfd08346bbe128159bff440d13389 + - IMPHASH=bd607d71fdc1444aa96dc431591c5c44 + - IMPHASH=f4b8d579fbdb32eabd01954394f5bf3a + - IMPHASH=edc2197e927392567cf09f7de410b5bb + - IMPHASH=7fb9382c0d754d5aac897d7a3e72b10c + - IMPHASH=1422b8d354b95d9cd880c8726df45dfc + - IMPHASH=0c959096cf4b3180530cc7865ef29157 + - IMPHASH=aca7bbc6be02770c50b07eb6f94d1d78 + - IMPHASH=3f4c9025125027e307b7e52dd577303b + - IMPHASH=68062e8b9d3c1e6cc62a9cae16a12b81 + - IMPHASH=228bac53e82887d1ed92f51a667a8231 + - IMPHASH=8919b7bae28d98c4a9e5967c9c55ce70 + - IMPHASH=7e798c3abcbd0f1cfa8b2b9688e01936 + - IMPHASH=8add42784f4693f421d85a2bcbadc620 + - IMPHASH=fbcdb079e9c13a82f98b79bb6ce86175 + - IMPHASH=a94892b77a6474429b9f692d9952a9d5 + - IMPHASH=aa03d5a319bc221875846e19e01276f7 + - IMPHASH=26150d69f50aa9247c3f3f17521d18a2 + - IMPHASH=beb40a1e9d5c89308d1c56958ddac27d + - IMPHASH=59b3f3fa2775e407721c2491ddb2890b + - IMPHASH=c314c92b5c25c6f4323e3efaf8bde47a + - IMPHASH=d8752c1d5954bea175ac00df5acebb09 + - IMPHASH=54e54063abbf1edaa9cf9ed8a18916d6 + - IMPHASH=4aaef0105216f062a5f3ee071a72770c + - IMPHASH=67f975f0734a5b0598223fbe00b3367e + - IMPHASH=175c5711f3c49a0d929e9e2314b21c6b + - IMPHASH=12befc0a82dcb0585359d335ed47af19 + - IMPHASH=24b344cd341f8b20003ac85be08df979 + - IMPHASH=08c7f29f5cb29ba70e49879da2e8ddce + - IMPHASH=fc9c0ba924e7f104eda5254aaeacc5e8 + - IMPHASH=5192bc7311bdeb1f3977bdc0d2e943e4 + - IMPHASH=7363079b9aae7d58bd33c691a613c83c + - IMPHASH=e2c63196ed5368f03dabed73b1ff3409 + - IMPHASH=8211bd4f00a3d9928a11a6ac3329fc46 + - IMPHASH=2699b7ae36fcadd71425ebafd231d0d1 + - IMPHASH=8d2a933d039e8b8134ef41236d5ea843 + - IMPHASH=cc335217d6f7ab7a53dcfa55cbda5fb0 + - IMPHASH=f9141c3df8f7ec7b3f2d46265a3b5528 + - IMPHASH=e0813a780309a0af84b605d95bd194e4 + - IMPHASH=e5fd4339e7b94543b16624a27ba1c872 + - IMPHASH=fffbca93e6322995552b841c7d65b033 + - IMPHASH=105b74485670215ab231a942c9101ccf + - IMPHASH=74081c86ad3e9771011f162c107927de + - IMPHASH=2df11474daf362b1b2fa3d3a89b6acbe + - IMPHASH=22a9d7a42282b48c566b4423363d3a3e + - IMPHASH=4fbdc03e4487f98fb59360ea5b3e640d + - IMPHASH=b262e8d078ede007ebd0aa71b9152863 + - IMPHASH=abbab73b191d90dc642cbbc1f31d750d + - IMPHASH=a5b3ea8c2012c517c472ad6befd37134 + - IMPHASH=9d7183c1d8107495354c4fad9dae3452 + - IMPHASH=7d004bbe0f546a91c93562d324307fa7 + - IMPHASH=b84820037d6a51ba108e0e81ce01db0b + - IMPHASH=68b717fa2ab9431cd176776363359d48 + - IMPHASH=b0356152212dc6e33752847235064fb0 + - IMPHASH=baa420e9d4e3baf0d65d4fc2bf497708 + - IMPHASH=85fd19df117fbc21efbcb1d587063e12 + - IMPHASH=8122311437457ccae22578e301c6a17d + - IMPHASH=f939ef0b7f792672866386600f82aa04 + - IMPHASH=d7de998e454f947f62d4a6b66490563b + - IMPHASH=17a9b50297a2334d8e9dfc3411bbe8ab + - IMPHASH=6816dabcee7b7d027bfbb93a16297afa + - IMPHASH=6723b1d5bd0f1fc13216cb44541e619e + - IMPHASH=71e84092e69114f0792419cb8b2b0fd1 + - IMPHASH=9c8c681f74950997cd571fd838a847b8 + - IMPHASH=95fe5e937e5acf9bea948fe0256e46ae + - IMPHASH=fc789f89340a45f1ab6c49e61b1f6b40 + - IMPHASH=b8d0a36d2b14d79dfa08fb2e121f0920 + - IMPHASH=6ce93eab57a73915ecd5c202a339f6ce + - IMPHASH=59b168c8ba0db46cb70d1d5a103e6c41 + - IMPHASH=3edc60bda68569cac7ad7604728ff40d + - IMPHASH=3e8e7e5e779c7064e6bab177167e9e7a + - IMPHASH=b05ee5c816a30bc52378c759486af0b9 + - IMPHASH=f7d07bcaa23837d219dcb64e76290252 + - IMPHASH=d658b06ec1ce39670b02a2dd83e29d03 + - IMPHASH=11bfcbdb0787ef461d442f973c392cf6 + - IMPHASH=f531646e31cc12dfaac5b8352653c384 + - IMPHASH=9b3ad85a76080f989d24cd89da90175a + - IMPHASH=5f6fd4ffba177389f414dd1a6ded24b4 + - IMPHASH=4b0b017b23567cf8b9e1268957acd032 + - IMPHASH=b4a71a1265f5f82cf383af17e229acb5 + - IMPHASH=0ebf1214948a636eba076b14cd8f72d5 + - IMPHASH=c05e71aad32edcbe71ae0ef1621f8693 + - IMPHASH=427cd9c70cca88ca1db61a5ddc3b8450 + - IMPHASH=236bc37dff7a92a4d25d807cf038e674 + - IMPHASH=e38cca61999fb8a0308c0eb798b07989 + - IMPHASH=3815f9107b799b863cd905178e6e07d0 + - IMPHASH=3c91d549b68e320924bcde3856993e87 + - IMPHASH=bb56f25a810b329868a0ff8e94080bad + - IMPHASH=f5030145594c486434040aa2636a5dde + - IMPHASH=d8101af81fd826b492ced1994ebd3268 + - IMPHASH=b5967a61e1a4e1d57b3d8ffefc5721ed + - IMPHASH=799c9c020c6fcfd11a4172bc861f74af + - IMPHASH=2b9471e7bb8c05dc55d0a2ff0591ea98 + - IMPHASH=6a47c957830ccce7ef43ed96aacf7c2c + - IMPHASH=b1e749ba779687a5127817da3d47af2c + - IMPHASH=202a0f2f992ec379e2876776ae9de661 + - IMPHASH=f5df2479285c7b593b3630b8357032e3 + - IMPHASH=32204eaf2afa5b348ab17de07362885c + - IMPHASH=1de2e6e58f6b19c4ec9ad6ca9fce5c14 + - IMPHASH=64d934652c680b7759f6e75d05ee3072 + - IMPHASH=176d8e75a27a45e2c6f5d4cceca4d869 + - IMPHASH=f0820e8f674e44e5c2a3f899ec561c1d + - IMPHASH=f4fa225abfb5a5263241a01a2c3f2b8f + - IMPHASH=a18b467c3b43f334ca455c495a3ef70d + - IMPHASH=a8633e68c2ad9f3dc83775d8d5b21c5b + - IMPHASH=9d5a58052468c8e07ff3d5bd730e5d00 + - IMPHASH=69260cce3156aa2dc0540fb78f5fe826 + - IMPHASH=b1336b0cb67918ed39f1f88c354910d0 + - IMPHASH=f119bff607049d431d0968fbaf6532f3 + - IMPHASH=c91146dfe120f6e8fbed2150d9e020ca + - IMPHASH=1e6875beefe8571686d3e8530f8c4bfb + - IMPHASH=acdf419d1d03923be256205b9c33eec8 + - IMPHASH=756adaea6a3f9f0cdaff73d1a49ca201 + - IMPHASH=28dc68bb6d6bf4f6b2db8dd7588b2511 + - IMPHASH=6e7cd05c0da9f82449a8b3795418ee00 + - IMPHASH=8c3af6c25ab40c4daefb4f836d12e1c8 + - IMPHASH=4792bcb395d06f9efb72e8020c4af5e6 + - IMPHASH=d5bc15465b63888cc8b98ecc63a81517 + - IMPHASH=7f53340c91c108efedb5b8678c5207b3 + - IMPHASH=3f4a90b2976641ad2c0164792b24d322 + - IMPHASH=d221afaadf43ceedb581e665435c56c7 + - IMPHASH=f212bbc758bb52fc661839b1d194b76e + - IMPHASH=e938b727f5a033818337f7ba0584500f + - IMPHASH=3ac083b0ee2b752436a8a1532179f032 + - IMPHASH=2e9ef79ea88178e29516dfa435a58900 + - IMPHASH=24c3d3be20e794c17844d030be03fd2f + - IMPHASH=700a9350ac8b218ab9fc62cf25337ad3 + - IMPHASH=e586fd1c5af87b43696b9d29b09bf1b1 + - IMPHASH=2233472cee6457ad207017803048aaff + - IMPHASH=f046e37fa7914491dc25a6f7718da341 + - IMPHASH=683bc425e3d8c21f9473a238a0645a4e + - IMPHASH=f08e2ac6ca73cd2a924ed25dc6813638 + - IMPHASH=e2306e26abfd90a5ce4dad0e266b3905 + - IMPHASH=10917aa77669c6ae714f074d89be9ab8 + - IMPHASH=db62897eb9d2098e988f830159c04c82 + - IMPHASH=51780bba04121d6be13f69de08721445 + - IMPHASH=29a2e15ac1622a3daf7da5a78f0cef08 + - IMPHASH=5988ec9f159fefbdf89d893aa634dd92 + - IMPHASH=05d3de62beab8e88de1dafd3b24a16f6 + - IMPHASH=88380fdfc880da4da407c38f34fe8a3c + - IMPHASH=8a424cd36ae3eab0d11332ce3b982a02 + - IMPHASH=60a2fba979aaa0d0ccd09c12ca3d9e57 + - IMPHASH=85f86c7c8ce81a78e84efa545d7edc65 + - IMPHASH=9523103b30fb194643b97ccc3ab7abb0 + - IMPHASH=0c2219c9c5eab786fa876f74356eea20 + - IMPHASH=7abb0911ca4cc4697ee1e9897932d3ac + - IMPHASH=c6a0f65ba653ee78255cc9e314abc442 + - IMPHASH=44e6f2f64092b48f8eb926c36ebd1d56 + - IMPHASH=13300d56528646611f26704266713952 + - IMPHASH=095c0cdb9c0421da216371c1f4e8790e + - IMPHASH=45f8f347e3fb919f3164a4a3278f1c71 + - IMPHASH=0e4f5481813eeec4e5dd96e36020135f + - IMPHASH=1d05fb30a58133da2e9dbdfcf51b80fd + - IMPHASH=2561727ac42d399030b3c46477c428f4 + - IMPHASH=be69e763a6a858c3e7e1ea6e3af12691 + - IMPHASH=7fba20994f76fb31b9f5a2b3f0c00055 + - IMPHASH=1d9cdf46ff335712634c292180c06755 + - IMPHASH=ad4586d21c9469bf636b5e8660e9d702 + - IMPHASH=958dd67f866ae27cf716e30a025b266f + - IMPHASH=1dd3b83f2b007f862a1d8de4a1d3303f + - IMPHASH=b4c562c2c654abd2cc71658646314976 + - IMPHASH=679eba16ab2d51543b7007708838ef7c + - IMPHASH=a1603fe7f02448c6b33687ddb9304c7f + - IMPHASH=9e2cf28fe320bbf74972509536569c8e + - IMPHASH=f233a65b937c69b447824889fb7425ff + - IMPHASH=b3204707f6e489cd5a2484881eaf78ca + - IMPHASH=c61a46ffe79d3f7d6307c0d2ae5f391e + - IMPHASH=28c5045218461018dbde27212ab0f227 + - IMPHASH=af34db96db910a3fa7a56f2fac8ed5e1 + - IMPHASH=e80eeed7225a880bbde0d038a5fe1af4 + - IMPHASH=62473b41d695f075ad96abc4a408de5b + - IMPHASH=56307b5227183c002e4231320a72b961 + - IMPHASH=dd7c5c0c762169d40ee01280e4ac74fc + - IMPHASH=9915439d37f385dbffc72bf835f3ee02 + - IMPHASH=4199ed50502e00f57d9b66e9305450f5 + - IMPHASH=71c580daf556775f690f0af3db12506f + - IMPHASH=c1ab6741cd29de98a138f2bd639f620a + - IMPHASH=32247962aa01af8ad5dca696260a05ab + - IMPHASH=1d774a94ad511efe5ebfe70acc6f8c85 + - IMPHASH=690a0fb27a0c47c785d6bbbfc2e56501 + - IMPHASH=78727a5fac8bd281903014ee00dcd553 + - IMPHASH=f5ebade1d3a6d3bde264b0c7f9f639e7 + - IMPHASH=4343c9c0b78ee21e895f10d929c240d4 + - IMPHASH=f510a429c6ce5c8d414550518b3823d2 + - IMPHASH=45acfe4a83f61d872fb904a1f08ef991 + - IMPHASH=cbf26c6e8cf7e294bda273e7026a2789 + - IMPHASH=84d83741445d9f5a6717b874fed3d8f3 + - IMPHASH=0b40636205c64cacfd2e4f407518ad58 + - IMPHASH=b4627789883457d50964a248104cb4c2 + - IMPHASH=a7ff164c1ee5113a0a09e66b2cd03544 + - IMPHASH=a0a13575e37906924a0b79043b4005c6 + - IMPHASH=955e7b12a8fa06444c68e54026c45de1 + - IMPHASH=8f52e36711c80bb9d7e30995e0092e83 + - IMPHASH=05fbe4619edf747787879d9323951439 + - IMPHASH=865c945f842a3f5f5453fb90d12f6765 + - IMPHASH=89f925b54b95944513671d79eba5fe07 + - IMPHASH=f4c5b0399665885a7dd34f7cdbbc586f + - IMPHASH=2ece23bdef16ee294bd905c7ba1be589 + - IMPHASH=e800cd3299d4cda0d9e02255acc3b7dd + - IMPHASH=a86fb9a41955bda815ab902fb58baa27 + - IMPHASH=2f7ea575cf15da16c8f117eee37046d8 + - IMPHASH=223a76f59831e1a59980b603f81c271d + - IMPHASH=c17c0bd619c1e188ffe27bd328dd7d08 + - IMPHASH=1429d5c551f71d3ce6a7cc54c9348e95 + - IMPHASH=3552d8a0022e7f3136b667e6d1e402f2 + - IMPHASH=67d92a28cd2923a923adf7fd958905d8 + - IMPHASH=3c9af2347198d96c8ab5b189b4e3db37 + - IMPHASH=f43aa654b4bfb882a0af098ad3f899e9 + - IMPHASH=518e77c070ae21af7c558962cd1854a3 + - IMPHASH=8e96d1a56746c6f6f30f1a0963ce2f26 + - IMPHASH=b19743993dc7f1d48b2a86fe9b9c91e3 + - IMPHASH=acd1b0130287133223d26c91f27f6899 + - IMPHASH=82942c060f79cefd3bf1acdf5c207561 + - IMPHASH=bc5c06a7fa9555f3f34043d828d9b123 + - IMPHASH=ccdeab2a83fbf2fef2e418cccd133ec1 + - IMPHASH=2424cf613f90884493009dd6bee95693 + - IMPHASH=5c77661ac2951da388949d9a834eb694 + - IMPHASH=2a20cc9578bb34a4bb10b87b49b24982 + - IMPHASH=3ee1cb6085fbe05e46e2b88493426848 + - IMPHASH=cb876abd8c6ca8a47d50aec4a520a020 + - IMPHASH=80ae2342fd6c7f5e1c642918e33dafb1 + - IMPHASH=aa274f6b4b15691fd725d7044f98bf36 + - IMPHASH=5e4c9e685f9b7d77c90ff710972bb7dd + - IMPHASH=4fb06df8cb54846e42943f0d3ae96e2f + - IMPHASH=74cc5d779ee7dbc9f389bab9dcccac50 + - IMPHASH=0707fe3c02c8d2a4d6219bd0596d76f3 + - IMPHASH=7863a0f25a0647ed7d52641222bd709a + - IMPHASH=75018719e85e67b75e73c57d682dbcbf + - IMPHASH=e08b2d7c450761f01ec9ed4ef0ca56a4 + - IMPHASH=2263350df91a5a4f5e10e68b3b822029 + - IMPHASH=6f0b9814da4da038669c47e77c2f268f + - IMPHASH=9fb64527ca6d4541cc256b1abd1e4101 + - IMPHASH=27db67ffa112f866f1d34c32226e09cf + - IMPHASH=5bb79a6caa12076a6d140085cb53892e + - IMPHASH=d169b0949781ca2a6efea5a106266a02 + - IMPHASH=5a50a9a44f5d36af5df1bde995d22e42 + - IMPHASH=626c8ecbc636968157d73f18ac315926 + - IMPHASH=f12ae9073d95c22ed89247253d59f500 + - IMPHASH=44cbd2ee295f1a35795eb4cd7cdd0864 + - IMPHASH=840e656bdb2987fa422092ec9d588895 + - IMPHASH=d57ef6278dcd7049063e8fb6ade9effc + - IMPHASH=392aa6863da8d7c14ad7386026e93b58 + - IMPHASH=5662b51943d85b7ca47a99cac81af985 + - IMPHASH=8418ac0d7aaa9015794e55ea54733342 + - IMPHASH=163436e69f8e582bdc1c1e6f735de23b + - IMPHASH=24e4c876bb5db0b0e0a4e92f0a3d3a48 + - IMPHASH=3198fc43051f03c6c71587dbf232f75c + - IMPHASH=9321f9c47129fbc728ead2710e22f1a5 + - IMPHASH=1a0d0d460994cfde55ee908d62330ee0 + - IMPHASH=82f5b92ccd99d13f4dd6ed6aaf0441bc + - IMPHASH=634f3c43b014dc8845b086c9328a678c + - IMPHASH=81acb4bb89ef49c4e7f30513b4750e53 + - IMPHASH=d61d30746681d0fda9bfd9e8af061b2a + - IMPHASH=7453e39bd87c63550451ba2fa354dd8e + - IMPHASH=bb437241f56020db0fcbf8f8629bdb07 + - IMPHASH=1e8ee6407390a2d52051bec21c771fdb + - IMPHASH=7c24141cdcfc23f5eb0e2b6792d80740 + - IMPHASH=a7f2c2e8e9d6c90e28819d1a3ab84bc8 + - IMPHASH=1b0788bb68804273159b8ace9cba7ea3 + - IMPHASH=9521d8684357766840dbcac2b4cee67d + - IMPHASH=b4c2607b2af5376910bf80b561e9a18a + - IMPHASH=f138fdbc6c7fbf73e135717c7d7eac27 + - IMPHASH=82525a4a571f0f8d4e4f42ec6bb3900e + - IMPHASH=8bbc742eaed888736a715757f0584fb6 + - IMPHASH=be527e5f470fbc661f914c81bfc9af38 + - IMPHASH=ad374977f06fefefbb9c77155f7a0733 + - IMPHASH=111e6d92e02f02f737654c5b1cfe9f6f + - IMPHASH=31907ffcac211e27136b14bb2f442070 + - IMPHASH=60e068470635cf20cc19b7f8e8cbfc5f + - IMPHASH=8a5edbe5251fe141ea0262d5d572178b + - IMPHASH=0265c50548889ffd5c2d3a2539885efe + - IMPHASH=9376f1c4ab79240cc948b77bf9e8814b + - IMPHASH=82b2288ac7f842e42de15c5bc96f1772 + - IMPHASH=317f02ddc9809d608a9bf63ce24e9550 + - IMPHASH=65abf5c92cc2239f2dc9d589458569c9 + - IMPHASH=12fef92a55cb5e1533b89d8e6a5892b2 + - IMPHASH=fd133033a24971502ff0b2f189215c56 + - IMPHASH=050d389675730da0d9d75367659cd53b + - IMPHASH=c590cbf2d6cbf206a2e47e8ed91dd944 + - IMPHASH=505e0a016962137ca6169bce64ba2f53 + - IMPHASH=02a27dc9a48b694b7df4b821eb65178c + - IMPHASH=bfe13c695e41d3eee414d3929b1bd523 + - IMPHASH=5095ddaed3abc22c1510a141d72735cc + - IMPHASH=8f96c3ef5dda3fe697d4a4d6326dbe37 + - IMPHASH=e1ecbd956bd016618b07e7dddcaf6e60 + - IMPHASH=07a42e80559d960b176c0fc8fd309bfe + - IMPHASH=f86759bb4de4320918615dc06e998a39 + - IMPHASH=c9f08d92efe88afb2545eb82a8870233 + - IMPHASH=6b867dee14a77d0ada8ccad99b16291e + - IMPHASH=744af2b62301859b4ccdffba53551b15 + - IMPHASH=ec5ee9a38e54ed3d4a6e6545672cb651 + - IMPHASH=c3c9e6c0c33bad17eb055ec795fc113e + - IMPHASH=31a3c2c72c9a565dc4ba75ef26677569 + - IMPHASH=7bc998aaa9fe4b4fd5e133554f42d913 + - IMPHASH=bb981f82c2bfc3c22471df92d9d0fb89 + - IMPHASH=ad34ea17f90a34f6f84a399a96383ada + - IMPHASH=30c0ed518c03fa46fa0bfe76f2db0e42 + - IMPHASH=587191d77c08023e6e95463153e45463 + - IMPHASH=c83f076c00d2b0a6ba9dc82f56a97631 + - IMPHASH=cb8db41ab8c06472574e58b9466f4070 + - IMPHASH=391ffad95759bc4bac2b737d0d0eaa84 + - IMPHASH=c52384bc825d2414de3195672971339e + - IMPHASH=b0e74761cced2dde5173ae05ec562085 + - IMPHASH=4bd0bd7710a7f71d38f056241c8ce0a7 + - IMPHASH=ad0cdf3bab32983050527655bce40f96 + - IMPHASH=e1a5435877b427be967867a25b1d263e + - IMPHASH=61b719638eacc2c5ca299805d4819e69 + - IMPHASH=7687d0eba49315582228ef660f61b471 + - IMPHASH=e7cbb1ce75bfc69f53855066a936042d + - IMPHASH=bc44fdc145156a15d0a803d18877b218 + - IMPHASH=d5e7fc56a905088dbc79b8e27b98faea + - IMPHASH=3702511999371bac8982d01820dd70f2 + - IMPHASH=d14ea0e632fc8485d77e7eba3c4d4537 + - IMPHASH=2e7d3b001306473cbff3d0dc11a6fcbc + - IMPHASH=e717a2158439123c6fca79b6b2c0ba49 + - IMPHASH=6736c04d5ff512e5e2eb608414276513 + - IMPHASH=225e24ee3c4081a16ef32831b70bf8ef + - IMPHASH=48028b3b694466c1c0eb1d91ef5c02cb + - IMPHASH=37f7c6238c9ce110408e01ae1bc45635 + - IMPHASH=b95bc1a99081d695b1c0b37b90a4a0be + - IMPHASH=78eaf4d62617f6b614d318cc70c6548a + - IMPHASH=55db306bc2be3ff71a6b91fd9db051b8 + - IMPHASH=021fd02a8adad420116496b6f2759960 + - IMPHASH=b3e26c5e0de2d01597dca208ef27cc38 + - IMPHASH=67affe6126c1d4a774b2504061c96a2e + - IMPHASH=656ad5c2eac95f75d3fe6d5ca59e0d8d + - IMPHASH=5ea78a193212fe61ac722f45f0b0eab9 + - IMPHASH=77ec8b2c372741f12098f084a13a56a8 + - IMPHASH=f27327907e57c0c2c9fddc68eab2eb7b + - IMPHASH=b679ac08daf4b4ce8a58d85a8e0904ac + - IMPHASH=f2c2ee1ff03c54f384f4eee8c2533107 + - IMPHASH=c12f7aec6ebe84a8390c82720adfc237 + - IMPHASH=0a8eeabf5981efb2116244785cb03900 + - IMPHASH=7f8c74638fcf297f8216aa5b184f61d6 + - IMPHASH=d41fa95d4642dc981f10de36f4dc8cd7 + - IMPHASH=8d616e68080def2200312de80392efa7 + - IMPHASH=cde9174249f04dad0f79890c976c0792 + - IMPHASH=858ceae385cdcfcbc7814644564c23e6 + - IMPHASH=d232ae5bad7ce02f4eece90ef370c7a0 + - IMPHASH=c7f08aed5725fe6a53a62ebe354ff135 + - IMPHASH=cc81a908891587ccac8059435eda4c66 + - IMPHASH=bd4f9a93da2bb4b5f6e90d4f9381661c + - IMPHASH=01aa65221a48929f0a34a27c4e3011b1 + - IMPHASH=409d2ab916237fb129c57aacbb7cb4fe + - IMPHASH=65181bc89a1c2b5854548236269846c1 + - IMPHASH=787e32b3fd816479fb93f9af0b6d0da3 + - IMPHASH=8e89024d2c0ef0451c12b956a2b55b91 + - IMPHASH=0cba56fa162378bc4ee09e94a4e2fe33 + - IMPHASH=b7a0100fe60d7a8263da64820f7d0120 + - IMPHASH=d16f507665603095c26147a7adcb93b8 + - IMPHASH=0b663530751cc11f34273fee7921c431 + - IMPHASH=604b5bd94f1892fd9e9025ef7a2bbe54 + - IMPHASH=cb8397a3262c80b558aff93ab75b6a7b + - IMPHASH=d6c920c10d4d0f92f0ac14c3fefed233 + - IMPHASH=9fd359d308a1e93106189b4ebd945855 + - IMPHASH=c94e5ad0f33374535392364a5a193253 + - IMPHASH=751c6b5c201f8c52f5512350cad88ddc + - IMPHASH=eac62dd0c27ed557fa4b641fa4050d04 + - IMPHASH=506a31d768aec26b297c45b50026c820 + - IMPHASH=60805da513b95c3d18a93b988bdfb58f + - IMPHASH=3aa0ceb8fcd07cf2514d1cb0b9bccf4b + - IMPHASH=c1579e4266fbdc47a5abc493a2d9d597 + - IMPHASH=adfd4c0b031598afecb6f3f585f5f581 + - IMPHASH=7a286ef4179598007a8afe9e5af95a48 + - IMPHASH=c7912c850407aa93c979d95c4f593507 + - IMPHASH=bec5dc89f030df7a96d19483fad4cc0a + - IMPHASH=b91054cdc4c8b3169cfe6c157f6d9f07 + - IMPHASH=d67b7c7501e5261df5e66b3219fa52ee + - IMPHASH=b142d772a67c40535c8d8fabb6861748 + - IMPHASH=1957e33acbc826c69f452ae1d1b89ac9 + - IMPHASH=7a4a0df0bde1f8da6547a580d5bee7c3 + - IMPHASH=085a78615099ffefa2df0a31da3058d8 + - IMPHASH=e804d4ee2c20f3eb1d3c955e38a2fe11 + - IMPHASH=6f2d756d22c285a46206de3bfde6c79d + - IMPHASH=071356ee9d8c7f91cbe8fa3c448286a2 + - IMPHASH=ebf30b4cd57a4f4548a03eab0f6c418c + - IMPHASH=08ab07a2bc35aea02cd6d1efbb954cb3 + - IMPHASH=cb15f8046e159c17b0510738fa18f758 + - IMPHASH=07a513d1599c93bd34f01323b1ef7430 + - IMPHASH=2430f988dcdc3828f6079e1e2cc71dc8 + - IMPHASH=8b41eacbfbe5f5348579e27d30767e74 + - IMPHASH=afee876e89b51e2cc7c91353fb588fe6 + - IMPHASH=e11e41c95c1872ac3ebbd7768b16cf9e + - IMPHASH=e9077c03c44a511c2c8eaf5bad9ab90b + - IMPHASH=d6d76f43ccc3872b879b0df583364c78 + - IMPHASH=62dbb90b4be9282d52aff9ae1a101d6b + - IMPHASH=3ec1e7e215efad2711248558465da9ad + - IMPHASH=96f270be3f73ec3fc2f2237fe84efca0 + - IMPHASH=9ad5f7496f8c918d6c0536751d3accae + - IMPHASH=b1ed268dfdf4f39960971eb5822a4755 + - IMPHASH=4c0161f638d5acafe23fcee3c5e86f15 + - IMPHASH=9928d53dbe860aba1b7c891831680629 + - IMPHASH=d122c1eaa50839be14c31876d0d4e0be + - IMPHASH=8f4588156ea7d9af8e4c162ce4c3ff23 + - IMPHASH=abdaca21ab5c831000b0aa4b8f357716 + - IMPHASH=0555907292d07d9f78205416eb1924d3 + - IMPHASH=832f0fb3579a07b1c4bec82b4478306b + - IMPHASH=340e874a1ca966e45fc2a314ef228cce + - IMPHASH=b35d1d3faa6c97b106b343823d5df867 + - IMPHASH=7e1327419d10a7eeece5579526f75d9f + - IMPHASH=084b99aebda8a13e4f774a2ced272e85 + - IMPHASH=81ba5280406320ce6f03a9817d7d6035 + - IMPHASH=e4f1a9234e4ea105321909d4c0e597ae + - IMPHASH=68a12eb3f32f7e193bd0d722ea6be4ab + - IMPHASH=c3fd2e688276a184b2528ee590054e5a + - IMPHASH=531d2392dbdd314fb1d9318fe9e5c4d2 + - IMPHASH=29a1da8841f5363423dcba1a9773809a + - IMPHASH=9fc4a96d982ebfd6b9d87c0f3ebef681 + - IMPHASH=304c4fcf70cfc8299a3b6eed8e7bbb31 + - IMPHASH=3415f704b3149ea9a3d3a54036b208dd + - IMPHASH=7cf815757705e26b809574488ed56d0e + - IMPHASH=28d780857f0f6616f938aca3a38b5072 + - IMPHASH=235102691b04f562ae8aa7ece38d8bc9 + - IMPHASH=262d8fbbf1f514399bb3f230cddc12af + - IMPHASH=0f3ddbe229201f6fa9a3dbbaf842a556 + - IMPHASH=bd093a7d5ba5632ee52f3466a688ee55 + - IMPHASH=a9e22f5e8f4965960716d94ba7639c9f + - IMPHASH=528ac7a1e034801d1f20238971c6ec19 + - IMPHASH=45bfe170e0cd654bc1e2ae3fca3ac3f4 + - IMPHASH=7c8c655791b5c853e45aa174e5cc1333 + - IMPHASH=a53b095a8d7366075d445892070cde51 + - IMPHASH=f079f8637a1d4fe2fb93af2a267b68ef + - IMPHASH=0ebd5902a82ddfef8ed96678c1573a7b + - IMPHASH=9a970527986cd03e5a25d18b372624a1 + - IMPHASH=87fde0c3f8e7dff7ab0d718d6b1252c8 + - IMPHASH=959dce366573a7aae10b74a08931722a + - IMPHASH=fce118020e70919e5c8c629687f89e56 + - IMPHASH=86682585c620fa85096a7bedaf990cd1 + - IMPHASH=5f9cf5b0511f3c1129b467d273b921f2 + - IMPHASH=543f80399f79401471523d335ea61642 + - IMPHASH=3ca448454c33a5c72ad5e774de47930a + - IMPHASH=51ecd9b363fde1f003f4b4f20c874b1b + - IMPHASH=1f2627fc453dc35031a9502372bd3549 + - IMPHASH=2cf48a541dc193e91bb2a831adcf278e + - IMPHASH=805e4a267f9495e7c0c430d92b78f8bd + - IMPHASH=92caaf6ebb43bbe61f3da8526172f776 + - IMPHASH=421730c2b3fa3a7d78c2eda3da1be6a8 + - IMPHASH=aa54fa0523f677e56d6d8199e5e18732 + - IMPHASH=8ee2435c62b02fe0372cde028be489cb + - IMPHASH=50b6a9c4df6d0c9f517c804ad1307d7c + - IMPHASH=037b9d19995faadf69a2ce134473e346 + - IMPHASH=2c19472843b56c67efb80d8c447f3cfe + - IMPHASH=a74f61fdcea718cb9579907b2caf54ab + - IMPHASH=84d45ee8df6f63b5af419d89003a97bc + - IMPHASH=69dbb4c8bbe4d8c2e1493f82170b93c4 + - IMPHASH=6903b92e7760c5d7f7c181b64eb13176 + - IMPHASH=d6f977640d4810a784d152e4d3c63a6b + - IMPHASH=473c3773ca11aa7371dbf350919c5724 + - IMPHASH=87842ffa59724bda8389394bcaeb5d73 + - IMPHASH=18502b56d9ea5dea7f9d31ef85db31d5 + - IMPHASH=b6f67458e30912358144df4adf5264fd + - IMPHASH=a49a51d7f2ae972483961eb64d17888e + - IMPHASH=81e2eb25e24938b90806de865630a2b2 + - IMPHASH=96861132665e8d66c0a91e6c02cc6639 + - IMPHASH=69163e5596280d3319375c9bcd4b5da1 + - IMPHASH=4946030efb34ab167180563899d5eb27 + - IMPHASH=4c304943af1b07b15a5efa80f17d9b89 + - IMPHASH=821d74031d3f625bcbd0df08b70f1e77 + - IMPHASH=1bef18e9dda6f1e7bbf7eb76e9ccf16b + - IMPHASH=21f58b1f2de6ad0e9c019da7a4e7317b + - IMPHASH=91387ac37086b9b519f945b58095f38d + - IMPHASH=dcd41632f0ad9683e5c9c7cc083f78f7 + - IMPHASH=ced7ea67fdf3d89a48849e0062278f7d + - IMPHASH=5713a0c2b363c49706fa0e60151511a8 + - IMPHASH=089e8a8f2bb007852c63b64e66430293 + - IMPHASH=383be1d728b0be96be1b810a131705ee + - IMPHASH=3d42ff70269b824dd9d4a8cb905669f9 + - IMPHASH=363922cc73591e60f2af113182414230 + - IMPHASH=fa084cdc36f03f1aeddaa3450e2781b1 + - IMPHASH=3c61f9a38aaa7650fcd33b46e794d1bb + - IMPHASH=42e3f2ffa29901e572f2df03cb872159 + - IMPHASH=4c5fc4519f1417f0630c3343aab7c9d2 + - IMPHASH=d5d40497d82daf7e44255ede810ce7a6 + - IMPHASH=91ee149529956a79a91eeb8c48f00b3d + - IMPHASH=a387f215b4964a3ca2e3c92f235a6d1b + - IMPHASH=ca6e77f472ebd5b2ade876e7c773bb57 + - IMPHASH=67bace81ce26ddf73732dd75cbd0c0f2 + - IMPHASH=18b8de84bd7aa83fec79d2c6aaf0a4f5 + - IMPHASH=519cf5394541bf5e2869edeec81521e1 + - IMPHASH=cae90f82e91b9a60af9a0e36c1f73be4 + - IMPHASH=643f4d79f35dddc9bb5cc04a0f0c18d3 + - IMPHASH=6b7d4c6283b9b951b7b2f47a0c5be8c7 + - IMPHASH=b4c857bd3a7b1d8125c0f62aec45401e + - IMPHASH=49a12b06131d938e9dc40c693b88ba7f + - IMPHASH=f74aa24adc713dbb957ccb18f3c16a71 + - IMPHASH=6faad89adbfc9d5448bb1bd12e7714cd + - IMPHASH=5759d90322a7311eaccf4f0ab2c2a7c4 + - IMPHASH=8b6c1a09e11200591663b880a94a8d18 + - IMPHASH=eade2a2576f329e4971bf5044ab24ac7 + - IMPHASH=8b47d6faba90b5c89e27f7119c987e1a + - IMPHASH=4433528b0f664177546dd3e229f0daa5 + - IMPHASH=c0f234205c50cc713673353c9653eea1 + - IMPHASH=b4b90c1b054ebe273bff4b2fd6927990 + - IMPHASH=f2dc136141066311fddef65f7f417c44 + - IMPHASH=12a08688ec92616a8b639d85cc13a3ed + - IMPHASH=296afaa5ea70bbd17135afcd04758148 + - IMPHASH=8232d2f79ce126e84cc044543ad82790 + - IMPHASH=e10e743d152cf62f219a7e9192fb533d + - IMPHASH=e5af2438da6df2aa9750aa632c80cfa4 + - IMPHASH=3a4e0bc46866ca54459753f62c879b62 + - IMPHASH=10cb3185e13390f8931a50a131448cdf + - IMPHASH=4fb27d2712ef4afdb67e0921d64a5f1e + - IMPHASH=a96a02cf5f7896a9a9f045d1986bd83c + - IMPHASH=fd894d394a8ca9abd74f7210ed931682 + - IMPHASH=ca07de87d444c1d2d10e16e9dcc2dc19 + - IMPHASH=1aa10b05dee9268d7ce87f5f56ea9ded + - IMPHASH=485f7e86663d49c68c8b5f705d310f50 + - IMPHASH=5899e93373114ca9e458e906675132b7 + - IMPHASH=be2d638c3933fc3f5a96e539f9910c5f + - IMPHASH=fbfa302bf7eb5d615d0968541ee49ce4 + - IMPHASH=f9b9487f25a2c1e08c02f391387c5323 + - IMPHASH=ef102e058f6b88af0d66d26236257706 + - IMPHASH=0f371a913e9fa3ba3a923718e489debb condition: driver_load and selection falsepositives: - Unknown diff --git a/sigma/sysmon/driver_load/driver_load_win_vuln_drivers_names.yml b/sigma/sysmon/driver_load/driver_load_win_vuln_drivers_names.yml index 9bfea809e..fd3bdc4f5 100644 --- a/sigma/sysmon/driver_load/driver_load_win_vuln_drivers_names.yml +++ b/sigma/sysmon/driver_load/driver_load_win_vuln_drivers_names.yml @@ -1,12 +1,13 @@ title: Vulnerable Driver Load By Name id: 72cd00d6-490c-4650-86ff-1d11f491daa1 status: experimental -description: Detects the load of known vulnerable drivers via their names only. +description: Detects the load of known vulnerable drivers via the file name of the + drivers. references: - https://loldrivers.io/ author: Nasreddine Bencherchali (Nextron Systems) date: 2022/10/03 -modified: 2023/09/12 +modified: 2023/12/02 tags: - attack.privilege_escalation - attack.t1543.003 @@ -21,244 +22,284 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational selection: ImageLoaded|endswith: - - \lv561av.sys - - \hpportiox64.sys - - \d2.sys - - \rtcore64.sys - - \gdrv.sys - - \fiddrv.sys - - \fiddrv64.sys - - \asio32.sys - - \cpupress.sys - - \chaos-rootkit.sys - - \eio.sys - - \kfeco11x64.sys - - \atillk64.sys - - \gvcidrv64.sys - - \eneio64.sys - - \lgdcatcher.sys - - \ene.sys - - \t7.sys - - \hwrwdrv.sys - - \bs_rciow1064.sys - - \amp.sys - - \mhyprot2.sys + - \panmonfltx64.sys + - \dbutil.sys + - \fairplaykd.sys + - \nvaudio.sys + - \superbmc.sys + - \bsmi.sys + - \smarteio64.sys + - \bwrsh.sys - \agent64.sys - - \asupio.sys - - \d4.sys - - \wiseunlo.sys - - \msrhook.sys - - \winiodrv.sys - - \driver7-x64.sys - - \proxy32.sys - - \bsmemx64.sys - - \msio64.sys - - \amigendrv64.sys - - \ni.sys - - \smep_namco.sys - - \bs_rcio64.sys - - \black.sys - - \testbone.sys + - \asmmap64.sys + - \dellbios.sys + - \chaos-rootkit.sys + - \wcpu.sys + - \dh_kernel.sys + - \sbiosio64.sys + - \bw.sys + - \asrdrv102.sys + - \nt6.sys + - \mhyprot3.sys + - \winio64c.sys + - \asupio64.sys - \blackbonedrv10.sys - - \nchgbios2x64.sys - - \lgcoretemp.sys - - \hostnt.sys - - \viraglt64.sys - - \t.sys - - \kbdcap64.sys - - \winflash64.sys - - \windows-xp-64.sys - - \asribdrv.sys - - \citmdrv_amd64.sys + - \d.sys + - \driver7-x86.sys + - \sfdrvx32.sys - \enetechio64.sys - - \vproeventmonitor.sys - - \amifldrv64.sys + - \gdrv.sys + - \sysinfodetectorx64.sys + - \fh-ethercat_dio.sys + - \asromgdrv.sys - \my.sys - - \amdpowerprofiler.sys - - \80.sys - - \dbutil_2_3.sys - - \asrrapidstartdrv.sys - - \b3.sys - - \nbiolib_x64.sys - - \nicm.sys - - \bs_flash64.sys - - \kevp64.sys - - \hw.sys - - \bwrs.sys - - \wcpu.sys - - \nt6.sys - - \asrsmartconnectdrv.sys - - \phymem64.sys + - \dcprotect.sys + - \irec.sys + - \gedevdrv.sys + - \winio32a.sys + - \gvcidrv64.sys - \winio32.sys - - \dbutildrv2.sys - - \segwindrvx64.sys - - \netproxydriver.sys - - \ctiio64.sys - - \inpoutx64.sys - - \nscm.sys - - \procexp.sys - - \nstrwsk.sys - - \tmcomm.sys - - \asrdrv103.sys - - \smep_capcom.sys - - \gametersafe.sys - - \piddrv.sys - - \fairplaykd.sys - - \sfdrvx32.sys - - \kfeco10x64.sys - - \phymemx64.sys - \bs_hwmio64.sys - - \asrdrv101.sys - - \hwos2ec10x64.sys - - \rzpnk.sys - - \asrsetupdrv103.sys - - \winio32b.sys - - \phlashnt.sys - - \bs_def.sys - - \d.sys - - \dcr.sys - - \nt5.sys - - \citmdrv_ia64.sys - - \driver7-x86.sys - - \asrdrv104.sys - - \bwrsh.sys - - \asrdrv106.sys - - \atszio64.sys - - \directio64.sys - - \elrawdsk.sys - - \ucorew64.sys - - \fidpcidrv64.sys - - \bsmi.sys + - \nstr.sys + - \inpoutx64.sys + - \hw.sys + - \winio64.sys + - \hpportiox64.sys + - \iobitunlocker.sys - \b1.sys - - \magdrvamd64.sys + - \aoddriver.sys - \elbycdio.sys - - \winio64.sys - - \winio64a.sys - - \physmem.sys - - \monitor_win10_x64.sys - - \panio.sys - - \asio64.sys - - \fidpcidrv.sys - - \aswvmm.sys - - \atszio.sys - - \mhyprot3.sys - - \gameink.sys - - \alsysio64.sys + - \protects.sys - \kprocesshacker.sys - - \d3.sys - - \ncpl.sys - - \asupio64.sys - - \bw.sys - - \iobitunlocker.sys - - \rtkio.sys + - \speedfan.sys + - \radhwmgr.sys + - \iscflashx64.sys + - \black.sys + - \b4.sys + - \hwos2ec10x64.sys + - \winflash64.sys + - \corsairllaccess64.sys - \bs_i2cio.sys - - \amdryzenmasterdriver.sys - - \81.sys + - \d3.sys + - \windows-xp-64.sys + - \aswvmm.sys + - \bs_i2c64.sys + - \1.sys + - \nchgbios2x64.sys + - \cpuz141.sys + - \segwindrvx64.sys + - \tdeio64.sys + - \ntiolib.sys + - \gtckmdfbs.sys + - \iomap64.sys + - \avalueio.sys + - \semav6msr.sys + - \lgdcatcher.sys - \b.sys - - \asio.sys - - \otipcibus.sys + - \hwdetectng.sys + - \nt4.sys + - \tgsafe.sys + - \mydrivers.sys + - \eneio64.sys + - \procexp.sys + - \viragt64.sys + - \fpcie2com.sys + - \lenovodiagnosticsdriver.sys + - \cp2x72c.sys + - \kerneld.amd64 + - \bs_def64.sys + - \piddrv.sys + - \amifldrv64.sys + - \cpuz_x64.sys + - \proxy32.sys + - \wsdkd.sys + - \t8.sys + - \ucorew64.sys + - \atszio.sys + - \lmiinfo.sys + - \80.sys + - \nt3.sys + - \ngiodriver.sys + - \lv561av.sys + - \gpcidrv64.sys + - \fd3b7234419fafc9bdd533f48896ed73_b816c5cd.sys + - \rtport.sys + - \full.sys + - \viragt.sys + - \fiddrv64.sys + - \cupfixerx64.sys + - \cpupress.sys + - \hwos2ec7x64.sys + - \driver7-x86-withoutdbg.sys + - \asrdrv10.sys + - \nvflsh64.sys + - \asrrapidstartdrv.sys + - \tmcomm.sys + - \wiseunlo.sys + - \rwdrv.sys + - \asio64.sys + - \nvoclock.sys + - \panio.sys + - \mtcbsv64.sys + - \amigendrv64.sys + - \capcom.sys + - \netflt.sys + - \phlashnt.sys + - \dbutil_2_3.sys + - \ni.sys + - \ntiolib_x64.sys + - \atszio64.sys + - \lgcoretemp.sys + - \lha.sys + - \phymem64.sys + - \dbutildrv2.sys + - \asrdrv103.sys + - \rtcore64.sys + - \bs_hwmio64_w10.sys + - \ene.sys - \winio64b.sys + - \piddrv64.sys - \directio32.sys - - \panmonfltx64.sys - - \vboxusb.sys - - \t3.sys - - \semav6msr.sys - - \etdsupp.sys + - \monitor_win10_x64.sys + - \nt5.sys + - \asrsmartconnectdrv.sys + - \rtif.sys + - \atillk64.sys + - \directio.sys + - \asribdrv.sys + - \kfeco11x64.sys + - \citmdrv_ia64.sys + - \sysdrv3s.sys + - \amp.sys - \vboxdrv.sys - - \proxy64.sys - - \lurker.sys - - \winio32a.sys - - \nt3.sys + - \adv64drv.sys + - \hostnt.sys + - \phymem_ext64.sys + - \echo_driver.sys + - \winiodrv.sys + - \pdfwkrnl.sys - \glckio2.sys + - \asrdrv106.sys + - \nscm.sys + - \bs_rcio64.sys + - \ncpl.sys - \sandra.sys - - \asmmap64.sys + - \fiddrv.sys + - \hwrwdrv.sys - \mhyprot.sys - - \driver7-x86-withoutdbg.sys - - \nt2.sys + - \asrsetupdrv103.sys - \iqvw64.sys - - \lmiinfo.sys - - \dh_kernel_10.sys - - \naldrv.sys - - \c.sys - - \bs_hwmio64_w10.sys - - \bsmixp64.sys - - \t8.sys - - \dbk64.sys - - \asrdrv102.sys - - \windows7-32.sys - - \1.sys - - \dh_kernel.sys - - \ntiolib.sys - - \viragt64.sys - - \lenovodiagnosticsdriver.sys + - \b3.sys + - \ssport.sys + - \bs_def.sys + - \computerz.sys + - \windows8-10-32.sys + - \nstrwsk.sys + - \lurker.sys + - \bsmemx64.sys + - \wyproxy64.sys + - \asio.sys + - \t3.sys - \cpuz.sys - - \cpuz141.sys - - \speedfan.sys + - \rtkio.sys + - \driver7-x64.sys + - \netfilterdrv.sys + - \ioaccess.sys + - \testbone.sys + - \gameink.sys + - \kevp64.sys + - \mhyprot2.sys - \se64a.sys - - \mtcbsv64.sys - - \tgsafe.sys - - \nvflash.sys - - \nt4.sys - - \irec.sys - - \lha.sys - - \echo_driver.sys - - \cupfixerx64.sys - - \winio64c.sys - - \dbutil.sys - - \viragt.sys - - \msio32.sys + - \vboxusb.sys + - \windows7-32.sys + - \vproeventmonitor.sys + - \winio64a.sys + - \asrdrv101.sys + - \netproxydriver.sys + - \elrawdsk.sys + - \zam64.sys + - \cg6kwin2k.sys + - \asupio.sys + - \stdcdrvws64.sys + - \81.sys + - \citmdrv_amd64.sys + - \amdryzenmasterdriver.sys - \vmdrv.sys + - \sysinfo.sys + - \alsysio64.sys + - \directio64.sys + - \rzpnk.sys + - \amdpowerprofiler.sys + - \truesight.sys + - \wirwadrv.sys + - \phymemx64.sys + - \msio64.sys + - \sepdrv3_1.sys + - \gametersafe.sys + - \bs_rcio.sys + - \d4.sys + - \t.sys + - \eio.sys + - \nt2.sys + - \winring0.sys + - \physmem.sys + - \libnicm.sys + - \msio32.sys + - \asrautochkupddrv.sys + - \asio32.sys + - \etdsupp.sys + - \smep_namco.sys + - \bandai.sys + - \d2.sys + - \magdrvamd64.sys + - \nvflash.sys + - \goad.sys + - \proxy64.sys + - \amsdk.sys + - \kbdcap64.sys + - \vdbsv64.sys - \pchunter.sys - - \ssport.sys - - \asromgdrv.sys - - \adv64drv.sys - - \superbmc.sys - - \asrdrv10.sys - - \paniox64.sys - - \mydrivers.sys + - \sysconp.sys + - \dh_kernel_10.sys + - \msrhook.sys - \bedaisy.sys - - \aswarpot.sys - - \rwdrv.sys - - \amsdk.sys - - \bs_def64.sys - - \sysdrv3s.sys - - \openlibsys.sys - - \netflt.sys - - \protects.sys - - \cpuz_x64.sys - - \bs_i2c64.sys - - \nvflsh64.sys + - \dcr.sys + - \panmonflt.sys + - \bsmixp64.sys + - \otipcibus.sys + - \fidpcidrv.sys + - \kfeco10x64.sys + - \asrdrv104.sys + - \c.sys + - \tdklib64.sys - \bsmix64.sys - - \b4.sys - - \bandai.sys - - \bs_rcio.sys - - \libnicm.sys - - \corsairllaccess64.sys - - \iomap64.sys + - \bs_flash64.sys + - \stdcdrv64.sys + - \naldrv.sys + - \ctiio64.sys + - \bwrs.sys + - \nicm.sys + - \winio32b.sys + - \paniox64.sys + - \ecsiodriverx64.sys - \iomem64.sys - - \wyproxy64.sys - - \full.sys - - \winring0.sys - - \nstr.sys - - \fd3b7234419fafc9bdd533f48896ed73_b816c5cd.sys + - \fidpcidrv64.sys + - \aswarpot.sys + - \bs_rciow1064.sys + - \asmio64.sys + - \openlibsys.sys + - \viraglt64.sys + - \dbk64.sys + - \t7.sys + - \atlaccess.sys + - \nbiolib_x64.sys + - \smep_capcom.sys - \iqvw64e.sys - - \netfilterdrv.sys - - \zam64.sys - - \hwos2ec7x64.sys - - \ntiolib_x64.sys - - \capcom.sys - - \asrautochkupddrv.sys - - \directio.sys - - \windows8-10-32.sys - - \sysinfo.sys - - \panmonflt.sys - - \piddrv64.sys - - \goad.sys condition: driver_load and selection falsepositives: - False positives may occur if one of the vulnerable driver names mentioned above didn't change its name between versions. So always make sure that the driver - being loaded is the legitimate one and the non-vulnerable version. + being loaded is the legitimate one and the non vulnerable version. - If you experience a lot of FP you could comment the driver name or its exact known legitimate location (when possible) level: low diff --git a/sigma/sysmon/file/file_event/file_event_win_creation_new_shim_database.yml b/sigma/sysmon/file/file_event/file_event_win_creation_new_shim_database.yml index 114687f5a..3e19f406d 100644 --- a/sigma/sysmon/file/file_event/file_event_win_creation_new_shim_database.yml +++ b/sigma/sysmon/file/file_event/file_event_win_creation_new_shim_database.yml @@ -1,4 +1,4 @@ -title: New Shim Database Created in the Default Directory +title: New Custom Shim Database Created id: ee63c85c-6d51-4d12-ad09-04e25877a947 status: test description: 'Adversaries may establish persistence and/or elevate privileges by executing @@ -16,7 +16,7 @@ references: - https://andreafortuna.org/2018/11/12/process-injection-and-persistence-using-application-shimming/ author: frack113, Nasreddine Bencherchali (Nextron Systems) date: 2021/12/29 -modified: 2023/08/01 +modified: 2023/12/06 tags: - attack.persistence - attack.t1547.009 diff --git a/sigma/sysmon/file/file_event/file_event_win_office_uncommon_file_startup.yml b/sigma/sysmon/file/file_event/file_event_win_office_uncommon_file_startup.yml index 48f25b948..cc829427c 100644 --- a/sigma/sysmon/file/file_event/file_event_win_office_uncommon_file_startup.yml +++ b/sigma/sysmon/file/file_event/file_event_win_office_uncommon_file_startup.yml @@ -10,7 +10,7 @@ references: - https://en.wikipedia.org/wiki/List_of_Microsoft_Office_filename_extensions author: frack113, Nasreddine Bencherchali (Nextron Systems) date: 2022/06/05 -modified: 2023/06/23 +modified: 2023/12/13 tags: - attack.resource_development - attack.t1587.001 @@ -34,6 +34,8 @@ detection: - .docm - .docx - .dotm + - .mdb + - .mdw - .pdf - .wll - .wwl @@ -45,20 +47,20 @@ detection: - \XLSTART filter_exclude_excel_ext: TargetFilename|endswith: + - .xll - .xls - .xlsm - .xlsx - .xlt - .xltm - - .xll - .xlw filter_main_office_click_to_run: - Image|startswith: C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ + Image|contains: :\Program Files\Common Files\Microsoft Shared\ClickToRun\ Image|endswith: \OfficeClickToRun.exe filter_main_office_apps: - Image|startswith: - - C:\Program Files\Microsoft Office\ - - C:\Program Files (x86)\Microsoft Office\ + Image|contains: + - :\Program Files\Microsoft Office\ + - :\Program Files (x86)\Microsoft Office\ Image|endswith: - \winword.exe - \excel.exe @@ -66,6 +68,6 @@ detection: or (selection_excel_paths and not filter_exclude_excel_ext)) and not 1 of filter_main_*) falsepositives: - - Other legitimate extensions used by either excel or word + - False positive might stem from rare extensions used by other Office utilities. level: high ruletype: Sigma diff --git a/sigma/sysmon/file/file_event/file_event_win_ps_script_policy_test_creation_by_uncommon_process.yml b/sigma/sysmon/file/file_event/file_event_win_ps_script_policy_test_creation_by_uncommon_process.yml index b33c795cf..d3cccd4c2 100644 --- a/sigma/sysmon/file/file_event/file_event_win_ps_script_policy_test_creation_by_uncommon_process.yml +++ b/sigma/sysmon/file/file_event/file_event_win_ps_script_policy_test_creation_by_uncommon_process.yml @@ -8,7 +8,7 @@ references: - https://www.paloaltonetworks.com/blog/security-operations/stopping-powershell-without-powershell/ author: Nasreddine Bencherchali (Nextron Systems) date: 2023/06/01 -modified: 2023/10/18 +modified: 2023/12/11 tags: - attack.defense_evasion - sysmon @@ -26,10 +26,12 @@ detection: - :\Program Files\PowerShell\7-preview\pwsh.exe - :\Program Files\PowerShell\7\pwsh.exe - :\Windows\System32\dsac.exe + - :\Windows\System32\sdiagnhost.exe - :\Windows\System32\ServerManager.exe - :\Windows\System32\WindowsPowerShell\v1.0\powershell_ise.exe - :\Windows\System32\WindowsPowerShell\v1.0\powershell.exe - :\Windows\System32\wsmprovhost.exe + - :\Windows\SysWOW64\sdiagnhost.exe - :\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell_ise.exe - :\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe condition: file_event and (selection and not 1 of filter_main_*) diff --git a/sigma/sysmon/file/file_event/file_event_win_susp_executable_creation.yml b/sigma/sysmon/file/file_event/file_event_win_susp_executable_creation.yml index 1c6a52f27..1b6d6df5d 100644 --- a/sigma/sysmon/file/file_event/file_event_win_susp_executable_creation.yml +++ b/sigma/sysmon/file/file_event/file_event_win_susp_executable_creation.yml @@ -9,6 +9,7 @@ references: - https://app.any.run/tasks/76c69e2d-01e8-49d9-9aea-fb7cc0c4d3ad/ author: frack113 date: 2022/09/05 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.t1564 @@ -22,15 +23,13 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational selection_double: TargetFilename|endswith: + - :\$Recycle.Bin.exe + - :\Documents and Settings.exe + - :\MSOCache.exe + - :\PerfLogs.exe + - :\Recovery.exe - .bat.exe - .sys.exe - selection_folder: - TargetFilename: - - C:\$Recycle.Bin.exe - - C:\Documents and Settings.exe - - C:\MSOCache.exe - - C:\Recovery.exe - - C:\PerfLogs.exe condition: file_event and (1 of selection_*) falsepositives: - Unknown diff --git a/sigma/sysmon/file/file_event/file_event_win_susp_recycle_bin_fake_exec.yml b/sigma/sysmon/file/file_event/file_event_win_susp_recycle_bin_fake_exec.yml index 9d79a0635..60169f68f 100644 --- a/sigma/sysmon/file/file_event/file_event_win_susp_recycle_bin_fake_exec.yml +++ b/sigma/sysmon/file/file_event/file_event_win_susp_recycle_bin_fake_exec.yml @@ -11,7 +11,7 @@ references: - https://unit42.paloaltonetworks.com/cloaked-ursa-phishing/ author: X__Junior (Nextron Systems) date: 2023/07/12 -modified: 2023/11/06 +modified: 2023/12/11 tags: - attack.persistence - attack.defense_evasion @@ -27,11 +27,9 @@ detection: - Image|contains: - RECYCLERS.BIN\ - RECYCLER.BIN\ - - RECYCLE.BIN\ - TargetFilename|contains: - RECYCLERS.BIN\ - RECYCLER.BIN\ - - RECYCLE.BIN\ condition: file_event and selection falsepositives: - Unknown diff --git a/sigma/sysmon/network_connection/net_connection_win_malware_backconnect_ports.yml b/sigma/sysmon/network_connection/net_connection_win_susp_malware_callback_port.yml similarity index 85% rename from sigma/sysmon/network_connection/net_connection_win_malware_backconnect_ports.yml rename to sigma/sysmon/network_connection/net_connection_win_susp_malware_callback_port.yml index a203b9ae6..ec24a5442 100644 --- a/sigma/sysmon/network_connection/net_connection_win_malware_backconnect_ports.yml +++ b/sigma/sysmon/network_connection/net_connection_win_susp_malware_callback_port.yml @@ -1,13 +1,18 @@ -title: Suspicious Typical Malware Back Connect Ports +title: Potentially Suspicious Malware Callback Communication id: 4b89abaa-99fe-4232-afdd-8f9aa4d20382 +related: + - id: 6d8c3d20-a5e1-494f-8412-4571d716cf5c + type: similar status: test -description: Detects programs that connect to typical malware back connect ports based +description: 'Detects programs that connect to known malware callback ports based on statistical analysis from two different sandbox system databases + + ' references: - https://docs.google.com/spreadsheets/d/17pSTDNpa0sf6pHeRhusvWG6rThciE8CsXTSlDUAZDyo author: Florian Roth (Nextron Systems) date: 2017/03/19 -modified: 2023/05/02 +modified: 2023/12/11 tags: - attack.persistence - attack.command_and_control @@ -54,10 +59,9 @@ detection: - 5649 - 6625 - 7210 - - 8080 + - 7777 - 8143 - 8843 - - 8888 - 9631 - 9943 - 10101 @@ -77,9 +81,9 @@ detection: - 65520 - 65535 filter_optional_sys_directories: - Image|startswith: - - C:\Program Files\ - - C:\Program Files (x86)\ + Image|contains: + - :\Program Files\ + - :\Program Files (x86)\ filter_main_local_ips: DestinationIp|startswith: - '10.' @@ -105,5 +109,5 @@ detection: 1 of filter_optional_*) falsepositives: - Unknown -level: medium +level: high ruletype: Sigma diff --git a/sigma/sysmon/network_connection/net_connection_win_susp_malware_callback_ports_uncommon.yml b/sigma/sysmon/network_connection/net_connection_win_susp_malware_callback_ports_uncommon.yml new file mode 100644 index 000000000..d1133a7f3 --- /dev/null +++ b/sigma/sysmon/network_connection/net_connection_win_susp_malware_callback_ports_uncommon.yml @@ -0,0 +1,60 @@ +title: Communication To Uncommon Destination Ports +id: 6d8c3d20-a5e1-494f-8412-4571d716cf5c +related: + - id: 4b89abaa-99fe-4232-afdd-8f9aa4d20382 + type: similar +status: test +description: Detects programs that connect to uncommon destination ports +references: + - https://docs.google.com/spreadsheets/d/17pSTDNpa0sf6pHeRhusvWG6rThciE8CsXTSlDUAZDyo +author: Florian Roth (Nextron Systems) +date: 2017/03/19 +modified: 2023/12/11 +tags: + - attack.persistence + - attack.command_and_control + - attack.t1571 + - sysmon +logsource: + category: network_connection + product: windows +detection: + network_connection: + EventID: 3 + Channel: Microsoft-Windows-Sysmon/Operational + selection: + Initiated: 'true' + DestinationPort: + - 8080 + - 8888 + filter_main_local_ips: + DestinationIp|startswith: + - '10.' + - '127.' + - 172.16. + - 172.17. + - 172.18. + - 172.19. + - 172.20. + - 172.21. + - 172.22. + - 172.23. + - 172.24. + - 172.25. + - 172.26. + - 172.27. + - 172.28. + - 172.29. + - 172.30. + - 172.31. + - 192.168. + filter_optional_sys_directories: + Image|contains: + - :\Program Files\ + - :\Program Files (x86)\ + condition: network_connection and (selection and not 1 of filter_main_* and not + 1 of filter_optional_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/sysmon/network_connection/net_connection_win_susp_prog_location_network_connection.yml b/sigma/sysmon/network_connection/net_connection_win_susp_prog_location_network_connection.yml index 5c8b78238..dd79ce75c 100644 --- a/sigma/sysmon/network_connection/net_connection_win_susp_prog_location_network_connection.yml +++ b/sigma/sysmon/network_connection/net_connection_win_susp_prog_location_network_connection.yml @@ -7,7 +7,7 @@ references: - https://docs.google.com/spreadsheets/d/17pSTDNpa0sf6pHeRhusvWG6rThciE8CsXTSlDUAZDyo author: Florian Roth (Nextron Systems), Tim Shelton date: 2017/03/19 -modified: 2022/05/26 +modified: 2023/12/11 tags: - attack.command_and_control - attack.t1105 @@ -22,21 +22,18 @@ detection: EventID: 3 Channel: Microsoft-Windows-Sysmon/Operational selection: - - Image|contains: - - \Users\All Users\ - - \Users\Default\ - - \Users\Public\ - - \Users\Contacts\ - - \Users\Searches\ - - \config\systemprofile\ - - \Windows\Fonts\ - - \Windows\IME\ - - \Windows\addins\ - - Image|endswith: \$Recycle.bin - - Image|startswith: C:\Perflogs\ - false_positive1: - Image|startswith: C:\Users\Public\IBM\ClientSolutions\Start_Programs\ - condition: network_connection and (selection and not 1 of false_positive*) + Image|contains: + - :\$Recycle.bin + - :\Perflogs\ + - :\Users\Default\ + - :\Users\Public\ + - :\Windows\Fonts\ + - :\Windows\IME\ + - \config\systemprofile\ + - \Windows\addins\ + filter_optional_ibm: + Image|contains: :\Users\Public\IBM\ClientSolutions\Start_Programs\ + condition: network_connection and (selection and not 1 of filter_optional_*) falsepositives: - Unknown level: high diff --git a/sigma/sysmon/pipe_created/pipe_created_susp_adfs_namedpipe_connection.yml b/sigma/sysmon/pipe_created/pipe_created_adfs_namedpipe_connection_uncommon_tool.yml similarity index 79% rename from sigma/sysmon/pipe_created/pipe_created_susp_adfs_namedpipe_connection.yml rename to sigma/sysmon/pipe_created/pipe_created_adfs_namedpipe_connection_uncommon_tool.yml index e9fb8baa4..14500952a 100644 --- a/sigma/sysmon/pipe_created/pipe_created_susp_adfs_namedpipe_connection.yml +++ b/sigma/sysmon/pipe_created/pipe_created_adfs_namedpipe_connection_uncommon_tool.yml @@ -1,4 +1,4 @@ -title: ADFS Database Named Pipe Connection +title: ADFS Database Named Pipe Connection By Uncommon Tool id: 1ea13e8c-03ea-409b-877d-ce5c3d2c1cb3 status: test description: 'Detects suspicious local connections via a named pipe to the AD FS configuration @@ -14,7 +14,7 @@ references: - https://github.com/Azure/SimuLand author: Roberto Rodriguez @Cyb3rWard0g date: 2021/10/08 -modified: 2023/04/20 +modified: 2023/11/30 tags: - attack.collection - attack.t1005 @@ -36,19 +36,22 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational selection: PipeName: \MICROSOFT##WID\tsql\query - filter: + filter_main_generic: Image|endswith: - - \Microsoft.IdentityServer.ServiceHost.exe - - \Microsoft.Identity.Health.Adfs.PshSurrogate.exe + - :\Windows\System32\mmc.exe + - :\Windows\system32\svchost.exe + - :\Windows\System32\wsmprovhost.exe + - :\Windows\SysWOW64\mmc.exe + - :\Windows\SysWOW64\wsmprovhost.exe + - :\Windows\WID\Binn\sqlwriter.exe - \AzureADConnect.exe + - \Microsoft.Identity.Health.Adfs.PshSurrogate.exe + - \Microsoft.IdentityServer.ServiceHost.exe - \Microsoft.Tri.Sensor.exe - - \wsmprovhost.exe - - \mmc.exe - \sqlservr.exe - \tssdis.exe - - C:\Windows\system32\svchost.exe - condition: pipe_created and (selection and not filter) + condition: pipe_created and (selection and not 1 of filter_main_*) falsepositives: - - Processes in the filter condition -level: high + - Unknown +level: medium ruletype: Sigma diff --git a/sigma/sysmon/pipe_created/pipe_created_hktl_efspotato.yml b/sigma/sysmon/pipe_created/pipe_created_hktl_efspotato.yml index d9875e975..a1acbeff9 100644 --- a/sigma/sysmon/pipe_created/pipe_created_hktl_efspotato.yml +++ b/sigma/sysmon/pipe_created/pipe_created_hktl_efspotato.yml @@ -7,7 +7,7 @@ references: - https://github.com/zcgonvh/EfsPotato author: Florian Roth (Nextron Systems) date: 2021/08/23 -modified: 2023/08/07 +modified: 2023/12/21 tags: - attack.defense_evasion - attack.privilege_escalation @@ -34,8 +34,10 @@ detection: - \pipe\srvsvc filter_optional_ctx: PipeName|contains: \CtxShare + filter_optional_default: + PipeName|startswith: \pipe\ condition: pipe_created and (selection and not 1 of filter_optional_*) falsepositives: - - Unknown + - \pipe\LOCAL\Monitorian level: high ruletype: Sigma diff --git a/sigma/sysmon/pipe_created/pipe_created_powershell_alternate_host_pipe.yml b/sigma/sysmon/pipe_created/pipe_created_powershell_alternate_host_pipe.yml index 7f03c4476..79e30f097 100644 --- a/sigma/sysmon/pipe_created/pipe_created_powershell_alternate_host_pipe.yml +++ b/sigma/sysmon/pipe_created/pipe_created_powershell_alternate_host_pipe.yml @@ -1,5 +1,8 @@ title: Alternate PowerShell Hosts Pipe id: 58cb02d5-78ce-4692-b3e1-dce850aae41a +related: + - id: ac7102b4-9e1e-4802-9b4f-17c5524c015c + type: derived status: test description: Detects alternate PowerShell hosts potentially bypassing detections looking for powershell.exe @@ -32,8 +35,6 @@ detection: PipeName|startswith: \PSHost filter_main_generic: Image|contains: - - :\Program Files\Citrix\ - - :\Program Files\Microsoft\Exchange Server\ - :\Program Files\PowerShell\7-preview\pwsh.exe - :\Program Files\PowerShell\7\pwsh.exe - :\Windows\system32\dsac.exe @@ -51,9 +52,14 @@ detection: - :\Program Files - \Microsoft SQL Server\ Image|endswith: \Tools\Binn\SQLPS.exe + filter_optional_citrix: + Image|contains: :\Program Files\Citrix\ + filter_optional_exchange: + Image|contains: :\Program Files\Microsoft\Exchange Server\ filter_main_null: Image: null - condition: pipe_created and (selection and not 1 of filter_main_*) + condition: pipe_created and (selection and not 1 of filter_main_* and not 1 of + filter_optional_*) falsepositives: - Programs using PowerShell directly without invocation of a dedicated interpreter. level: medium diff --git a/sigma/sysmon/pipe_created/pipe_created_powershell_execution_pipe.yml b/sigma/sysmon/pipe_created/pipe_created_powershell_execution_pipe.yml index 76fe1d1d2..a2538b49d 100644 --- a/sigma/sysmon/pipe_created/pipe_created_powershell_execution_pipe.yml +++ b/sigma/sysmon/pipe_created/pipe_created_powershell_execution_pipe.yml @@ -1,14 +1,17 @@ -title: PowerShell Execution Via Named Pipe +title: New PowerShell Instance Created id: ac7102b4-9e1e-4802-9b4f-17c5524c015c +related: + - id: 58cb02d5-78ce-4692-b3e1-dce850aae41a + type: derived status: test -description: Detects execution of PowerShell via creation of named pipe starting with - PSHost +description: Detects the execution of PowerShell via the creation of a named pipe + starting with PSHost references: - https://threathunterplaybook.com/hunts/windows/190610-PwshAlternateHosts/notebook.html - https://threathunterplaybook.com/hunts/windows/190410-LocalPwshExecution/notebook.html author: Roberto Rodriguez (Cyb3rWard0g), OTR (Open Threat Research) date: 2019/09/12 -modified: 2022/08/04 +modified: 2023/11/30 tags: - attack.execution - attack.t1059.001 @@ -32,6 +35,6 @@ detection: PipeName|startswith: \PSHost condition: pipe_created and selection falsepositives: - - Unknown + - Likely level: informational ruletype: Sigma diff --git a/sigma/sysmon/pipe_created/pipe_created_csexec_default_pipe.yml b/sigma/sysmon/pipe_created/pipe_created_pua_csexec_default_pipe.yml similarity index 96% rename from sigma/sysmon/pipe_created/pipe_created_csexec_default_pipe.yml rename to sigma/sysmon/pipe_created/pipe_created_pua_csexec_default_pipe.yml index cbe656d47..dc869c7b1 100644 --- a/sigma/sysmon/pipe_created/pipe_created_csexec_default_pipe.yml +++ b/sigma/sysmon/pipe_created/pipe_created_pua_csexec_default_pipe.yml @@ -1,4 +1,4 @@ -title: CSExec Default Named Pipe +title: PUA - CSExec Default Named Pipe id: f318b911-ea88-43f4-9281-0de23ede628e related: - id: 9e77ed63-2ecf-4c7b-b09d-640834882028 @@ -10,6 +10,7 @@ references: - https://github.com/malcomvetter/CSExec author: Nikita Nazarov, oscd.community, Nasreddine Bencherchali (Nextron Systems) date: 2023/08/07 +modified: 2023/11/30 tags: - attack.lateral_movement - attack.t1021.002 diff --git a/sigma/sysmon/pipe_created/pipe_created_paexec_default_pipe.yml b/sigma/sysmon/pipe_created/pipe_created_pua_paexec_default_pipe.yml similarity index 94% rename from sigma/sysmon/pipe_created/pipe_created_paexec_default_pipe.yml rename to sigma/sysmon/pipe_created/pipe_created_pua_paexec_default_pipe.yml index aa5491a53..cb2eda2d5 100644 --- a/sigma/sysmon/pipe_created/pipe_created_paexec_default_pipe.yml +++ b/sigma/sysmon/pipe_created/pipe_created_pua_paexec_default_pipe.yml @@ -1,9 +1,10 @@ -title: PAExec Default Named Pipe +title: PUA - PAExec Default Named Pipe id: f6451de4-df0a-41fa-8d72-b39f54a08db5 status: test description: Detects PAExec default named pipe references: - https://github.com/microsoft/Microsoft-365-Defender-Hunting-Queries/blob/efa17a600b43c897b4b7463cc8541daa1987eeb4/Command%20and%20Control/C2-NamedPipe.md + - https://github.com/poweradminllc/PAExec author: Nasreddine Bencherchali (Nextron Systems) date: 2022/10/26 tags: diff --git a/sigma/sysmon/pipe_created/pipe_created_remcom_default_pipe.yml b/sigma/sysmon/pipe_created/pipe_created_pua_remcom_default_pipe.yml similarity index 96% rename from sigma/sysmon/pipe_created/pipe_created_remcom_default_pipe.yml rename to sigma/sysmon/pipe_created/pipe_created_pua_remcom_default_pipe.yml index cca59d63a..ae86db4b0 100644 --- a/sigma/sysmon/pipe_created/pipe_created_remcom_default_pipe.yml +++ b/sigma/sysmon/pipe_created/pipe_created_pua_remcom_default_pipe.yml @@ -1,4 +1,4 @@ -title: RemCom Default Named Pipe +title: PUA - RemCom Default Named Pipe id: d36f87ea-c403-44d2-aa79-1a0ac7c24456 related: - id: 9e77ed63-2ecf-4c7b-b09d-640834882028 @@ -10,6 +10,7 @@ references: - https://github.com/kavika13/RemCom author: Nikita Nazarov, oscd.community, Nasreddine Bencherchali (Nextron Systems) date: 2023/08/07 +modified: 2023/11/30 tags: - attack.lateral_movement - attack.t1021.002 diff --git a/sigma/sysmon/pipe_created/pipe_created_scrcons_wmi_consumer_namedpipe.yml b/sigma/sysmon/pipe_created/pipe_created_scrcons_wmi_consumer_namedpipe.yml index 27f751ef9..8055e6443 100644 --- a/sigma/sysmon/pipe_created/pipe_created_scrcons_wmi_consumer_namedpipe.yml +++ b/sigma/sysmon/pipe_created/pipe_created_scrcons_wmi_consumer_namedpipe.yml @@ -6,7 +6,7 @@ references: - https://github.com/RiccardoAncarani/LiquidSnake author: Florian Roth (Nextron Systems) date: 2021/09/01 -modified: 2022/10/09 +modified: 2023/11/30 tags: - attack.t1047 - attack.execution @@ -31,5 +31,5 @@ detection: condition: pipe_created and selection falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/pipe_created/pipe_created_mal_namedpipes.yml b/sigma/sysmon/pipe_created/pipe_created_susp_malicious_namedpipes.yml similarity index 100% rename from sigma/sysmon/pipe_created/pipe_created_mal_namedpipes.yml rename to sigma/sysmon/pipe_created/pipe_created_susp_malicious_namedpipes.yml diff --git a/sigma/sysmon/process_access/proc_access_win_lsass_memdump.yml b/sigma/sysmon/process_access/proc_access_win_lsass_memdump.yml index d39571e3e..27dd3815f 100644 --- a/sigma/sysmon/process_access/proc_access_win_lsass_memdump.yml +++ b/sigma/sysmon/process_access/proc_access_win_lsass_memdump.yml @@ -1,4 +1,4 @@ -title: Credential Dumping Activity Via Lsass +title: Potential Credential Dumping Activity Via LSASS id: 5ef9853e-4d0e-4a70-846f-a9ca37d876da status: experimental description: 'Detects process access requests to the LSASS process with specific call @@ -15,7 +15,7 @@ references: - https://research.splunk.com/endpoint/windows_possible_credential_dumping/ author: Samir Bousseaden, Michael Haag date: 2019/04/03 -modified: 2023/11/29 +modified: 2023/12/13 tags: - attack.credential_access - attack.t1003.001 @@ -31,16 +31,11 @@ detection: selection: TargetImage|endswith: \lsass.exe GrantedAccess|contains: + - '0x1000' - '0x1038' - - '0x143a' - '0x1438' - - '0x1000' - - '0x01000' - - '0x1010' - - '0x1400' - - '0x1410' + - '0x143a' - '0x1fffff' - - '0x40' CallTrace|contains: - dbgcore.dll - dbghelp.dll @@ -63,5 +58,5 @@ detection: of filter_optional_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_access/proc_access_win_susp_direct_syscall_ntopenprocess.yml b/sigma/sysmon/process_access/proc_access_win_susp_direct_ntopenprocess_call.yml similarity index 86% rename from sigma/sysmon/process_access/proc_access_win_susp_direct_syscall_ntopenprocess.yml rename to sigma/sysmon/process_access/proc_access_win_susp_direct_ntopenprocess_call.yml index 938ceeff3..561fc2430 100644 --- a/sigma/sysmon/process_access/proc_access_win_susp_direct_syscall_ntopenprocess.yml +++ b/sigma/sysmon/process_access/proc_access_win_susp_direct_ntopenprocess_call.yml @@ -1,13 +1,12 @@ -title: Direct Syscall of NtOpenProcess +title: Potential Direct Syscall of NtOpenProcess id: 3f3f3506-1895-401b-9cc3-e86b16e630d0 status: experimental -description: Detects the usage of the direct syscall of NtOpenProcess which might - be done from a CobaltStrike BOF. +description: Detects potential calls to NtOpenProcess directly from NTDLL. references: - https://medium.com/falconforce/falconfriday-direct-system-calls-and-cobalt-strike-bofs-0xff14-741fa8e1bdd6 author: Christian Burkard (Nextron Systems), Tim Shelton (FP) date: 2021/07/28 -modified: 2023/11/27 +modified: 2023/12/13 tags: - attack.execution - attack.t1106 @@ -65,9 +64,14 @@ detection: GrantedAccess: '0x1000' filter_optional_evernote: TargetImage|endswith: \Evernote\Evernote.exe + filter_optional_adobe_acrobat: + SourceImage|contains: :\Program Files\Adobe\Acrobat DC\Acrobat\ + SourceImage|endswith: \AcroCEF.exe + TargetImage|contains: :\Program Files\Adobe\Acrobat DC\Acrobat\ + TargetImage|endswith: \AcroCEF.exe condition: process_access and (selection and not 1 of filter_main_* and not 1 of filter_optional_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_cloudflared_portable_execution.yml b/sigma/sysmon/process_creation/proc_creation_win_cloudflared_portable_execution.yml new file mode 100644 index 000000000..4b00e56d8 --- /dev/null +++ b/sigma/sysmon/process_creation/proc_creation_win_cloudflared_portable_execution.yml @@ -0,0 +1,37 @@ +title: Cloudflared Portable Execution +id: fadb84f0-4e84-4f6d-a1ce-9ef2bffb6ccd +status: experimental +description: 'Detects the execution of the "cloudflared" binary from a non standard + location. + + ' +references: + - https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/do-more-with-tunnels/trycloudflare/ + - https://github.com/cloudflare/cloudflared + - https://www.intrinsec.com/akira_ransomware/ + - https://www.guidepointsecurity.com/blog/tunnel-vision-cloudflared-abused-in-the-wild/ + - https://github.com/cloudflare/cloudflared/releases +author: Nasreddine Bencherchali (Nextron Systems) +tags: + - attack.command_and_control + - attack.t1090.001 + - sysmon +date: 2023/12/20 +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 1 + Channel: Microsoft-Windows-Sysmon/Operational + selection: + Image|endswith: \cloudflared.exe + filter_main_admin_location: + Image|contains: + - :\Program Files (x86)\cloudflared\ + - :\Program Files\cloudflared\ + condition: process_creation and (selection and not 1 of filter_main_*) +falsepositives: + - Legitimate usage of Cloudflared portable versions +level: medium +ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_cloudflared_quicktunnel_execution.yml b/sigma/sysmon/process_creation/proc_creation_win_cloudflared_quicktunnel_execution.yml new file mode 100644 index 000000000..1e8923fa6 --- /dev/null +++ b/sigma/sysmon/process_creation/proc_creation_win_cloudflared_quicktunnel_execution.yml @@ -0,0 +1,95 @@ +title: Cloudflared Quick Tunnel Execution +id: 222129f7-f4dc-4568-b0d2-22440a9639ba +related: + - id: 7050bba1-1aed-454e-8f73-3f46f09ce56a + type: similar + - id: 9a019ffc-3580-4c9d-8d87-079f7e8d3fd4 + type: similar +status: experimental +description: 'Detects creation of an ad-hoc Cloudflare Quick Tunnel, which can be + used to tunnel local services such as HTTP, RDP, SSH and SMB. + + The free TryCloudflare Quick Tunnel will generate a random subdomain on trycloudflare[.]com, + following a call to api[.]trycloudflare[.]com. + + The tool has been observed in use by threat groups including Akira ransomware. + + ' +references: + - https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/do-more-with-tunnels/trycloudflare/ + - https://github.com/cloudflare/cloudflared + - https://www.intrinsec.com/akira_ransomware/ + - https://www.guidepointsecurity.com/blog/tunnel-vision-cloudflared-abused-in-the-wild/ +author: Sajid Nawaz Khan +tags: + - attack.command_and_control + - attack.t1090.001 + - sysmon +date: 2023/12/20 +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 1 + Channel: Microsoft-Windows-Sysmon/Operational + selection_img: + - Image|endswith: + - \cloudflared.exe + - \cloudflared-windows-386.exe + - \cloudflared-windows-amd64.exe + - Hashes|contains: + - SHA256=2fb6c04c4f95fb8d158af94c137f90ac820716deaf88d8ebec956254e046cb29 + - SHA256=b3d21940a10fdef5e415ad70331ce257c24fe3bcf7722262302e0421791f87e8 + - SHA256=1fbd8362b2d2d2e6a5750ae3db69cd1815e6c1d31da48a98b796450971a8e039 + - SHA256=0409c9b12f9d0eda86e461ed9bdabeefb00172b26322079681a0bdf48e68dc28 + - SHA256=7cfb411d04bac42ef93d1f0c93c0a481e38c6f4612b97ae89d4702595988edc7 + - SHA256=5b3c2d846ab162dc6bc595cce3a49de5731afde5d6060be7066d21b013a28373 + - SHA256=ce95df7f69664c3df19b76028e115931919a71517b776da7b42d353e2ff4a670 + - SHA256=1293525a19cfe3bc8296b62fbfe19f083632ed644a1c18c10b045a1d3030d81a + - SHA256=af2b9161cfcb654b16408cd6b098afe9d1fb61a037d18d7090a119d4c0c8e0f0 + - SHA256=39ddceb56a15798826a5fc4892fa2b474c444bb4d7a8bf2fa95e41cab10fa7a1 + - SHA256=ccd11f2328023a0e7929e845d5b6e7bc783fb4650d65faef3ae090239d4bbce2 + - SHA256=b6e5c5d2567ae8c69cc012ebcae30e6c9b5359d64a58d17ba75ec89f8bce71ac + - SHA256=f813484ea441404f18caad96f28138e8aaf0cb256163c09c2ab8a3acab87f69f + - SHA256=fc4a0802ab9c7409b892ca00636bec61e2acfc911bccfdeb9978b8ab5a2f828d + - SHA256=083150724b49604c8765c1ba19541fa260b133be0acb0647fcd936d81f054499 + - SHA256=44303d6572956f28a0f2e4b188934fb9874f2584f5c81fa431a463cfbf28083b + - SHA256=5d38c46032a58e28ae5f7d174d8761ec3d64d186677f3ec53af5f51afb9bfd2f + - SHA256=e1e70fa42059911bc6685fafef957f9a73fc66f214d0704a9b932683a5204032 + - SHA256=c01356092a365b84f84f0e66870bd1a05ba3feb53cafd973fa5fea2534bee234 + - SHA256=b3f9c06151e30ee43d39e788a79cd918a314f24e04fe87f3de8272a2057b624f + - SHA256=cd81b2792f0739f473c31c9cb7cf2313154bfa28b839975802b90e8790bb5058 + - SHA256=9ec7e6c8e1bfd883663d8d9d62c9e4f9ae373b731407181e32491b27a7218a2c + - SHA256=c2cfd23fdc6c0e1b1ffa0e545cbe556f18d11b362b4a89ba0713f6ab01c4827f + - SHA256=53f8adbd76c0eb16f5e43cadde422474d8a06f9c8f959389c1930042ad8beaa5 + - SHA256=648c8d2f8001c113d2986dd00b7bbd181593d462bef73522cee212c4f71f95b3 + - SHA256=ae047e2095e46c3f9c518b2be67ec753f4f0aad23b261a361fcb6144dcdb63b4 + - SHA256=3153d2baa462978dd22ab33d1c2274ecc88c200225d6a3327f98d5b752d08f5c + - SHA256=f49cde976e628012c9db73e1c8d76081944ecf2297cdafeb78bb13290da274c4 + - SHA256=d2513e58bb03ccc83affde685c6ef987924c37ce6707d8e9857e2524b0d7e90f + - SHA256=bb67c7623ba92fe64ffd9816b8d5b3b1ea3013960a30bd4cf6e295b3eb5b1bad + - SHA256=b34b3c3a91e3165d1481f0b3ec23eab93a1cfba94345a6cbfe5b18ddbd48eac7 + - SHA256=f7848034e010d55f15e474ca998f96391e320ff29b00cfcc4c5e536529703e75 + - SHA256=b6fc9493778cbe3bfc062d73f5cc604bc0ff058bc5e5dc6aac87f3a4008b54b6 + - SHA256=f5c5e962577e2293c4ad10603816dce7cc273585969615fbf4e4bfa9eaff1688 + - SHA256=d14c52d9220b606f428a8fe9f7c108b0d6f14cf71e7384749e98e6a95962e68f + - SHA256=d3a0e1a79158f3985cd49607ebe0cdfcc49cb9af96b8f43aefd0cdfe2f22e663 + - SHA256=2fbbfc8299537ff80cadf9d0e27c223fe0ccb9052bf9d8763ad717bbfa521c77 + - SHA256=19074674c6fbdaa573b3081745e5e26144fdf7a086d14e0e220d1814f1f13078 + selection_param: + - CommandLine|contains|all: + - -url + - tunnel + - CommandLine|contains: + - .exe -url + - .exe --url + selection_other: + CommandLine|contains|all: + - -url + - -no-autoupdate + condition: process_creation and ((selection_img and selection_param) or selection_other) +falsepositives: + - Legitimate usage of Cloudflare Quick Tunnel +level: medium +ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_cloudflared_tunnel_cleanup.yml b/sigma/sysmon/process_creation/proc_creation_win_cloudflared_tunnel_cleanup.yml index f819b9ec4..fd7fbd453 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_cloudflared_tunnel_cleanup.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_cloudflared_tunnel_cleanup.yml @@ -8,6 +8,7 @@ references: - https://developers.cloudflare.com/cloudflare-one/connections/connect-apps author: Nasreddine Bencherchali (Nextron Systems) date: 2023/05/17 +modified: 2023/12/21 tags: - attack.command_and_control - attack.t1102 @@ -26,8 +27,8 @@ detection: - ' tunnel ' - 'cleanup ' CommandLine|contains: - - ' --config ' - - ' --connector-id ' + - '-config ' + - '-connector-id ' condition: process_creation and selection falsepositives: - Legitimate usage of Cloudflared. diff --git a/sigma/sysmon/process_creation/proc_creation_win_cloudflared_tunnel_run.yml b/sigma/sysmon/process_creation/proc_creation_win_cloudflared_tunnel_run.yml index 09ef253f1..d38e42a6b 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_cloudflared_tunnel_run.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_cloudflared_tunnel_run.yml @@ -10,6 +10,7 @@ references: - https://developers.cloudflare.com/cloudflare-one/connections/connect-apps author: Janantha Marasinghe, Nasreddine Bencherchali (Nextron Systems) date: 2023/05/17 +modified: 2023/12/20 tags: - attack.command_and_control - attack.t1102 @@ -28,12 +29,12 @@ detection: - ' tunnel ' - ' run ' CommandLine|contains: - - ' --config ' - - ' --credentials-contents ' - - ' --credentials-file ' - - ' --token ' + - '-config ' + - '-credentials-contents ' + - '-credentials-file ' + - '-token ' condition: process_creation and selection falsepositives: - - Legitimate usage of Cloudflared. + - Legitimate usage of Cloudflared tunnel. level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_conhost_susp_child_process.yml b/sigma/sysmon/process_creation/proc_creation_win_conhost_susp_child_process.yml index d0411d8f6..4b9203a86 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_conhost_susp_child_process.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_conhost_susp_child_process.yml @@ -7,7 +7,7 @@ references: - http://www.hexacorn.com/blog/2020/05/25/how-to-con-your-host/ author: omkar72 date: 2020/10/25 -modified: 2023/06/01 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.t1202 @@ -21,36 +21,16 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational selection: ParentImage|endswith: \conhost.exe + filter_main_conhost: + Image|endswith: :\Windows\System32\conhost.exe + filter_main_null: + Image: null + filter_main_empty: + Image: '' filter_optional_provider: Provider_Name: SystemTraceProvider-Process - filter_optional_git: - Provider_Name: Microsoft-Windows-Kernel-Process - Image|endswith: \git.exe - ParentCommandLine|contains: - - ' show --textconv ' - - ' cat-file -s ' - filter_optional_git_show: - ParentCommandLine|contains: C:\WINDOWS\system32\conhost.exe 0x4 - CommandLine|contains: - - ' show --textconv ' - - ' cat-file -s ' - filter_optional_image_conhost: - Provider_Name: Microsoft-Windows-Kernel-Process - ParentCommandLine|contains: - - ' cat-file -s ' - - show --textconv - Image: C:\Windows\System32\conhost.exe - filter_optional_image_conhost2: - ParentCommandLine: - - \\\?\?\\C:\\WINDOWS\\system32\\conhost.exe 0x4 - - \\\?\?\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1 - Image: C:\Windows\System32\conhost.exe - filter_optional_image_git: - ParentCommandLine: - - \\\?\?\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1' - - \\\?\?\\C:\\WINDOWS\\system32\\conhost.exe 0x4' - Image: C:\Program Files\Git\mingw64\bin\git.exe - condition: process_creation and (selection and not 1 of filter_optional_*) + condition: process_creation and (selection and not 1 of filter_main_* and not + 1 of filter_optional_*) falsepositives: - Unknown level: medium diff --git a/sigma/sysmon/process_creation/proc_creation_win_hh_chm_execution.yml b/sigma/sysmon/process_creation/proc_creation_win_hh_chm_execution.yml index 0100cba17..99b221d38 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_hh_chm_execution.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_hh_chm_execution.yml @@ -1,14 +1,14 @@ title: HH.EXE Execution id: 68c8acb4-1b60-4890-8e82-3ddf7a6dba84 status: test -description: Detects the usage of "hh.exe" to execute ".chm" files. +description: Detects the execution of "hh.exe" to open ".chm" files. references: - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1218.001/T1218.001.md - https://eqllib.readthedocs.io/en/latest/analytics/b25aa548-7937-11e9-8f5c-d46d6d62a49e.html - https://www.zscaler.com/blogs/security-research/unintentional-leak-glimpse-attack-vectors-apt37 author: E.M. Anhaus (originally from Atomic Blue Detections, Dan Beavin), oscd.community date: 2019/10/24 -modified: 2023/02/04 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.t1218.001 @@ -28,5 +28,5 @@ detection: condition: process_creation and (all of selection_*) falsepositives: - False positives are expected with legitimate ".CHM" -level: medium +level: low ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_add_rule.yml b/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_add_rule.yml index 67002ff2e..cc9140724 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_add_rule.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_add_rule.yml @@ -26,18 +26,13 @@ detection: CommandLine|contains|all: - ' firewall ' - ' add ' - filter_dropbox: + filter_optional_dropbox: CommandLine|contains: - - \netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow - "program=C:\Program Files (x86)\Dropbox\Client\Dropbox.exe" enable=yes - profile=Any - - \netsh.exe advfirewall firewall add rule name=Dropbox dir=in action=allow - "program=C:\Program Files\Dropbox\Client\Dropbox.exe" enable=yes profile=Any - filter_thor: - ParentImage|startswith: C:\Windows\Temp\asgard2-agent\ - ParentImage|endswith: \thor64.exe - CommandLine|contains: advfirewall firewall show rule name=all - condition: process_creation and (all of selection_* and not 1 of filter_*) + - advfirewall firewall add rule name=Dropbox dir=in action=allow "program=?:\Program + Files (x86)\Dropbox\Client\Dropbox.exe" enable=yes profile=Any + - advfirewall firewall add rule name=Dropbox dir=in action=allow "program=?:\Program + Files\Dropbox\Client\Dropbox.exe" enable=yes profile=Any + condition: process_creation and (all of selection_* and not 1 of filter_optional_*) falsepositives: - Legitimate administration activity - Software installations diff --git a/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_allow_program_in_susp_location.yml b/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_allow_program_in_susp_location.yml index 4c4b1f89e..bf7c0a62f 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_allow_program_in_susp_location.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_allow_program_in_susp_location.yml @@ -8,7 +8,7 @@ references: - https://www.hybrid-analysis.com/sample/07e789f4f2f3259e7559fdccb36e96814c2dbff872a21e1fa03de9ee377d581f?environmentId=100 author: Sander Wiebing, Jonhnathan Ribeiro, Daniil Yugoslavskiy, oscd.community date: 2020/05/25 -modified: 2023/02/10 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.t1562.004 @@ -37,11 +37,9 @@ detection: - program= selection_paths: CommandLine|contains: - - '%Public%\' - - '%TEMP%' - - '%TMP%' - :\$Recycle.bin\ - - :\RECYCLER\ + - :\RECYCLER.BIN\ + - :\RECYCLERS.BIN\ - :\SystemVolumeInformation\ - :\Temp\ - :\Users\Default\ @@ -59,6 +57,9 @@ detection: - \Downloads\ - \Local Settings\Temporary Internet Files\ - \Temporary Internet Files\Content.Outlook\ + - '%Public%\' + - '%TEMP%' + - '%TMP%' condition: process_creation and (all of selection_*) falsepositives: - Unknown diff --git a/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_allow_rdp.yml b/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_allow_rdp.yml index d6768a2ce..6eefb6ff0 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_allow_rdp.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_allow_rdp.yml @@ -7,7 +7,7 @@ references: - https://labs.sentinelone.com/sarwent-malware-updates-command-detonation/ author: Sander Wiebing date: 2020/05/23 -modified: 2023/02/13 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.t1562.004 @@ -22,18 +22,15 @@ detection: selection_img: - Image|endswith: \netsh.exe - OriginalFileName: netsh.exe - selection_cli_1: + selection_cli: CommandLine|contains|all: - 'firewall ' - 'add ' - 'tcp ' - '3389' - selection_cli_2: - - CommandLine|contains: portopening - - CommandLine|contains|all: - - advfirewall - - rule - - allow + CommandLine|contains: + - portopening + - allow condition: process_creation and (all of selection_*) falsepositives: - Legitimate administration activity diff --git a/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_delete_rule.yml b/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_delete_rule.yml index 01c501b9a..895072e11 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_delete_rule.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_delete_rule.yml @@ -26,10 +26,10 @@ detection: CommandLine|contains|all: - firewall - 'delete ' - filter_dropbox: + filter_optional_dropbox: ParentImage|endswith: \Dropbox.exe CommandLine|contains: name=Dropbox - condition: process_creation and (all of selection_* and not filter_dropbox) + condition: process_creation and (all of selection_* and not 1 of filter_optional_*) falsepositives: - Legitimate administration activity - Software installations and removal diff --git a/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_rules_discovery.yml b/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_rules_discovery.yml index 8da64bbc3..ec9307835 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_rules_discovery.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_netsh_fw_rules_discovery.yml @@ -1,4 +1,4 @@ -title: Suspicious Firewall Configuration Discovery Via Netsh.EXE +title: Firewall Configuration Discovery Via Netsh.EXE id: 0e4164da-94bc-450d-a7be-a4b176179f1f status: experimental description: Adversaries may look for details about the network configuration and @@ -8,7 +8,7 @@ references: - https://ss64.com/nt/netsh.html author: frack113, Christopher Peacock '@securepeacock', SCYTHE '@scythe_io' date: 2021/12/07 -modified: 2023/02/14 +modified: 2023/12/11 tags: - attack.discovery - attack.t1016 diff --git a/sigma/sysmon/process_creation/proc_creation_win_powershell_set_policies_to_unsecure_level.yml b/sigma/sysmon/process_creation/proc_creation_win_powershell_set_policies_to_unsecure_level.yml index 3a2db4661..fc16ea20d 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_powershell_set_policies_to_unsecure_level.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_powershell_set_policies_to_unsecure_level.yml @@ -8,7 +8,8 @@ related: - id: fad91067-08c5-4d1a-8d8c-d96a21b37814 type: similar status: test -description: Detects use of executionpolicy option to set insecure policies +description: Detects changing the PowerShell script execution policy to a potentially + insecure level using the "-ExecutionPolicy" flag. references: - https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-7.1 - https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.core/about/about_execution_policies?view=powershell-7.1 @@ -16,7 +17,7 @@ references: - https://thedfirreport.com/2021/11/01/from-zero-to-domain-admin/ author: frack113 date: 2021/11/01 -modified: 2022/09/10 +modified: 2023/12/13 tags: - attack.execution - attack.t1059.001 @@ -28,23 +29,24 @@ detection: process_creation: EventID: 1 Channel: Microsoft-Windows-Sysmon/Operational + selection_img: + - OriginalFileName: + - PowerShell.EXE + - pwsh.dll + - Image|endswith: + - \powershell.exe + - \pwsh.exe selection_option: CommandLine|contains: - - ' -executionpolicy ' + - '-executionpolicy ' - ' -ep ' - ' -exec ' selection_level: CommandLine|contains: + - Bypass - Unrestricted - - bypass - - RemoteSigned - filter: - CommandLine|contains: - - C:\Program Files - - C:\ProgramData - - \AppData\Roaming\Code\ - condition: process_creation and (all of selection* and not filter) + condition: process_creation and (all of selection_*) falsepositives: - - Administrator script + - Administrator scripts level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_pua_nmap_zenmap.yml b/sigma/sysmon/process_creation/proc_creation_win_pua_nmap_zenmap.yml index 21a44f052..b8012d49a 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_pua_nmap_zenmap.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_pua_nmap_zenmap.yml @@ -9,7 +9,7 @@ references: - https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1046/T1046.md#atomic-test-3---port-scan-nmap-for-windows author: frack113 date: 2021/12/10 -modified: 2023/02/20 +modified: 2023/12/11 tags: - attack.discovery - attack.t1046 @@ -30,6 +30,6 @@ detection: - zennmap.exe condition: process_creation and selection falsepositives: - - Network administrator computer -level: high + - Legitimate administrator activity +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_pua_nsudo.yml b/sigma/sysmon/process_creation/proc_creation_win_pua_nsudo.yml index d0405397c..c3505fdcb 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_pua_nsudo.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_pua_nsudo.yml @@ -44,10 +44,7 @@ detection: - '-M=S ' - '-M=H ' - -ShowWindowMode:Hide - condition: process_creation and (all of selection*) -fields: - - CommandLine - - ParentCommandLine + condition: process_creation and (all of selection_*) falsepositives: - Legitimate use by administrators level: high diff --git a/sigma/sysmon/process_creation/proc_creation_win_pua_process_hacker.yml b/sigma/sysmon/process_creation/proc_creation_win_pua_process_hacker.yml index be8f57223..6ae277a11 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_pua_process_hacker.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_pua_process_hacker.yml @@ -4,16 +4,21 @@ related: - id: 5722dff1-4bdd-4949-86ab-fbaf707e767a type: similar status: experimental -description: Detects the execution of Process Hacker based on binary metadata information - (Image, Hash, Imphash, etc). Process Hacker is a tool to view and manipulate processes, - kernel options and other low level options. Threat actors regularly abuse it to - manipulate system processes. +description: 'Detects the execution of Process Hacker based on binary metadata information + (Image, Hash, Imphash, etc). + + Process Hacker is a tool to view and manipulate processes, kernel options and + other low level options. + + Threat actors abused older vulnerable versions to manipulate system processes. + + ' references: - https://processhacker.sourceforge.io/ - https://www.crowdstrike.com/blog/falcon-overwatch-report-finds-increase-in-ecrime/ author: Florian Roth (Nextron Systems) date: 2022/10/10 -modified: 2023/05/08 +modified: 2023/12/11 tags: - attack.defense_evasion - attack.discovery @@ -65,5 +70,5 @@ detection: falsepositives: - While sometimes 'Process Hacker is used by legitimate administrators, the execution of Process Hacker must be investigated and allowed on a case by case basis -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_pua_radmin.yml b/sigma/sysmon/process_creation/proc_creation_win_pua_radmin.yml index 1e7de6038..64687c416 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_pua_radmin.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_pua_radmin.yml @@ -8,7 +8,7 @@ references: - https://www.radmin.fr/ author: frack113 date: 2022/01/22 -modified: 2023/02/14 +modified: 2023/12/11 tags: - attack.execution - attack.lateral_movement @@ -28,5 +28,5 @@ detection: condition: process_creation and selection falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_rar_susp_greedy_compression.yml b/sigma/sysmon/process_creation/proc_creation_win_rar_susp_greedy_compression.yml index eccea9177..9a29e5c87 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_rar_susp_greedy_compression.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_rar_susp_greedy_compression.yml @@ -7,7 +7,7 @@ references: - https://decoded.avast.io/martinchlumecky/png-steganography author: X__Junior (Nextron Systems), Florian Roth (Nextron Systems) date: 2022/12/15 -modified: 2023/02/05 +modified: 2023/12/11 tags: - attack.execution - attack.t1059 @@ -32,14 +32,14 @@ detection: - ' -r ' selection_cli_folders: CommandLine|contains: - - ' C:\\\*.' - - ' C:\\\\\*.' - - ' C:\Users\Public\' + - ' :\\\*.' + - ' :\\\\\*.' + - ' :\Users\Public\' - ' %public%' - - ' C:\Windows\' - - ' C:\PerfLogs\' - - ' C:\Temp' - - ' C:\$Recycle.bin\' + - ' :\Windows\' + - ' :\PerfLogs\' + - ' :\Temp' + - ' :\$Recycle.bin\' condition: process_creation and (1 of selection_opt_* and all of selection_cli_*) falsepositives: - Unknown diff --git a/sigma/sysmon/process_creation/proc_creation_win_reg_desktop_background_change.yml b/sigma/sysmon/process_creation/proc_creation_win_reg_desktop_background_change.yml new file mode 100644 index 000000000..ff044acc3 --- /dev/null +++ b/sigma/sysmon/process_creation/proc_creation_win_reg_desktop_background_change.yml @@ -0,0 +1,64 @@ +title: Potentially Suspicious Desktop Background Change Using Reg.EXE +id: 8cbc9475-8d05-4e27-9c32-df960716c701 +related: + - id: 85b88e05-dadc-430b-8a9e-53ff1cd30aae + type: similar +status: experimental +description: 'Detects the execution of "reg.exe" to alter registry keys that would + replace the user''s desktop background. + + This is a common technique used by malware to change the desktop background to + a ransom note or other image. + + ' +references: + - https://www.attackiq.com/2023/09/20/emulating-rhysida/ + - https://research.checkpoint.com/2023/the-rhysida-ransomware-activity-analysis-and-ties-to-vice-society/ + - https://www.trendmicro.com/en_us/research/23/h/an-overview-of-the-new-rhysida-ransomware.html + - https://www.virustotal.com/gui/file/a864282fea5a536510ae86c77ce46f7827687783628e4f2ceb5bf2c41b8cd3c6/behavior + - https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsDesktop::Wallpaper + - https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.ControlPanelDisplay::CPL_Personalization_NoDesktopBackgroundUI +author: Stephen Lincoln @slincoln-aiq (AttackIQ) +date: 2023/12/21 +tags: + - attack.defense_evasion + - attack.impact + - attack.t1112 + - attack.t1491.001 + - sysmon +logsource: + product: windows + category: process_creation +detection: + process_creation: + EventID: 1 + Channel: Microsoft-Windows-Sysmon/Operational + selection_reg_img: + - Image|endswith: \reg.exe + - OriginalFileName: reg.exe + selection_reg_flag: + CommandLine|contains: add + selection_keys: + CommandLine|contains: + - Control Panel\Desktop + - CurrentVersion\Policies\ActiveDesktop + - CurrentVersion\Policies\System + selection_cli_reg_1: + CommandLine|contains|all: + - /v NoChangingWallpaper + - /d 1 + selection_cli_reg_2: + CommandLine|contains|all: + - /v Wallpaper + - /t REG_SZ + selection_cli_reg_3: + CommandLine|contains|all: + - /v WallpaperStyle + - /d 2 + condition: process_creation and (all of selection_reg_* and selection_keys and + 1 of selection_cli_reg_*) +falsepositives: + - Administrative scripts that change the desktop background to a company logo + or other image. +level: medium +ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_reg_dumping_sensitive_hives.yml b/sigma/sysmon/process_creation/proc_creation_win_reg_dumping_sensitive_hives.yml index f2e09a00f..95b0564e4 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_reg_dumping_sensitive_hives.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_reg_dumping_sensitive_hives.yml @@ -6,8 +6,8 @@ related: - id: 4d6c9da1-318b-4edf-bcea-b6c93fa98fd0 type: obsoletes status: test -description: Detects the usage of "reg.exe" in order to dump sensitive registry hives, - which includes SAM, SYSTEM and SECURITY +description: Detects the usage of "reg.exe" in order to dump sensitive registry hives. + This includes SAM, SYSTEM and SECURITY hives. references: - https://www.slideshare.net/heirhabarov/hunting-for-credentials-dumping-in-windows-environment - https://eqllib.readthedocs.io/en/latest/analytics/aed95fc6-5e3f-49dc-8b35-06508613f979.html @@ -17,7 +17,7 @@ references: author: Teymur Kheirkhabarov, Endgame, JHasenbusch, Daniil Yugoslavskiy, oscd.community, frack113 date: 2019/10/22 -modified: 2023/02/06 +modified: 2023/12/13 tags: - attack.credential_access - attack.t1003.002 @@ -37,10 +37,10 @@ detection: - OriginalFileName: reg.exe selection_cli_flag: CommandLine|contains: - - save - - export - - "\u02E2ave" - - "e\u02E3port" + - ' save ' + - ' export ' + - " \u02E2ave " + - " e\u02E3port " selection_cli_hklm: CommandLine|contains: - hklm diff --git a/sigma/sysmon/process_creation/proc_creation_win_regasm_regsvcs_uncommon_extension_execution.yml b/sigma/sysmon/process_creation/proc_creation_win_regasm_regsvcs_uncommon_extension_execution.yml new file mode 100644 index 000000000..f38298812 --- /dev/null +++ b/sigma/sysmon/process_creation/proc_creation_win_regasm_regsvcs_uncommon_extension_execution.yml @@ -0,0 +1,45 @@ +title: Potentially Suspicious Execution Of Regasm/Regsvcs With Uncommon Extension +id: e9f8f8cc-07cc-4e81-b724-f387db9175e4 +related: + - id: cc368ed0-2411-45dc-a222-510ace303cb2 + type: derived +status: experimental +description: Detects potentially suspicious execution of the Regasm/Regsvcs utilities + with an uncommon extension. +references: + - https://www.fortiguard.com/threat-signal-report/4718?s=09 + - https://lolbas-project.github.io/lolbas/Binaries/Regasm/ + - https://lolbas-project.github.io/lolbas/Binaries/Regsvcs/ +author: Nasreddine Bencherchali (Nextron Systems) +date: 2023/02/13 +tags: + - attack.defense_evasion + - attack.t1218.009 + - sysmon +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 1 + Channel: Microsoft-Windows-Sysmon/Operational + selection_img: + - Image|endswith: + - \Regsvcs.exe + - \Regasm.exe + - OriginalFileName: + - RegSvcs.exe + - RegAsm.exe + selection_extension: + CommandLine|contains: + - .dat + - .gif + - .jpeg + - .jpg + - .png + - .txt + condition: process_creation and (all of selection_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_regasm_suspicious_execution.yml b/sigma/sysmon/process_creation/proc_creation_win_regasm_regsvcs_uncommon_location_execution.yml similarity index 67% rename from sigma/sysmon/process_creation/proc_creation_win_regasm_suspicious_execution.yml rename to sigma/sysmon/process_creation/proc_creation_win_regasm_regsvcs_uncommon_location_execution.yml index 3ffbbe4bf..6790e6829 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_regasm_suspicious_execution.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_regasm_regsvcs_uncommon_location_execution.yml @@ -1,7 +1,11 @@ -title: Regasm/Regsvcs Suspicious Execution +title: Potentially Suspicious Execution Of Regasm/Regsvcs From Uncommon Location id: cc368ed0-2411-45dc-a222-510ace303cb2 +related: + - id: e9f8f8cc-07cc-4e81-b724-f387db9175e4 + type: derived status: experimental -description: Detects suspicious execution of Regasm/Regsvcs utilities +description: Detects potentially suspicious execution of the Regasm/Regsvcs utilities + from a potentially suspicious location references: - https://www.fortiguard.com/threat-signal-report/4718?s=09 - https://lolbas-project.github.io/lolbas/Binaries/Regasm/ @@ -29,24 +33,13 @@ detection: - RegAsm.exe selection_dir: CommandLine|contains: - - \Users\Public\ - \AppData\Local\Temp\ - - \Desktop\ - - \Downloads\ + - \Microsoft\Windows\Start Menu\Programs\Startup\ - \PerfLogs\ + - \Users\Public\ - \Windows\Temp\ - - \Microsoft\Windows\Start Menu\Programs\Startup\ - filter_main_dll: - CommandLine|contains: .dll - filter_main_no_cli: - CommandLine|endswith: - - \Regasm.exe" - - \Regasm.exe - - \Regsvcs.exe" - - \Regsvcs.exe - condition: process_creation and (all of selection_* or (selection_img and not - 1 of filter_main_*)) + condition: process_creation and (all of selection_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_renamed_cloudflared.yml b/sigma/sysmon/process_creation/proc_creation_win_renamed_cloudflared.yml new file mode 100644 index 000000000..99f6ec451 --- /dev/null +++ b/sigma/sysmon/process_creation/proc_creation_win_renamed_cloudflared.yml @@ -0,0 +1,93 @@ +title: Renamed Cloudflared.EXE Execution +id: e0c69ebd-b54f-4aed-8ae3-e3467843f3f0 +status: experimental +description: Detects the execution of a renamed "cloudflared" binary. +references: + - https://github.com/cloudflare/cloudflared/releases + - https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/do-more-with-tunnels/trycloudflare/ + - https://github.com/cloudflare/cloudflared + - https://www.intrinsec.com/akira_ransomware/ + - https://www.guidepointsecurity.com/blog/tunnel-vision-cloudflared-abused-in-the-wild/ +tags: + - attack.command_and_control + - attack.t1090.001 + - sysmon +author: Nasreddine Bencherchali (Nextron Systems) +date: 2023/12/20 +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 1 + Channel: Microsoft-Windows-Sysmon/Operational + selection_cleanup: + CommandLine|contains|all: + - ' tunnel ' + - 'cleanup ' + CommandLine|contains: + - '-config ' + - '-connector-id ' + selection_tunnel: + CommandLine|contains|all: + - ' tunnel ' + - ' run ' + CommandLine|contains: + - '-config ' + - '-credentials-contents ' + - '-credentials-file ' + - '-token ' + selection_accountless: + CommandLine|contains|all: + - -url + - tunnel + selection_hashes: + Hashes|contains: + - SHA256=2fb6c04c4f95fb8d158af94c137f90ac820716deaf88d8ebec956254e046cb29 + - SHA256=b3d21940a10fdef5e415ad70331ce257c24fe3bcf7722262302e0421791f87e8 + - SHA256=1fbd8362b2d2d2e6a5750ae3db69cd1815e6c1d31da48a98b796450971a8e039 + - SHA256=0409c9b12f9d0eda86e461ed9bdabeefb00172b26322079681a0bdf48e68dc28 + - SHA256=7cfb411d04bac42ef93d1f0c93c0a481e38c6f4612b97ae89d4702595988edc7 + - SHA256=5b3c2d846ab162dc6bc595cce3a49de5731afde5d6060be7066d21b013a28373 + - SHA256=ce95df7f69664c3df19b76028e115931919a71517b776da7b42d353e2ff4a670 + - SHA256=1293525a19cfe3bc8296b62fbfe19f083632ed644a1c18c10b045a1d3030d81a + - SHA256=af2b9161cfcb654b16408cd6b098afe9d1fb61a037d18d7090a119d4c0c8e0f0 + - SHA256=39ddceb56a15798826a5fc4892fa2b474c444bb4d7a8bf2fa95e41cab10fa7a1 + - SHA256=ccd11f2328023a0e7929e845d5b6e7bc783fb4650d65faef3ae090239d4bbce2 + - SHA256=b6e5c5d2567ae8c69cc012ebcae30e6c9b5359d64a58d17ba75ec89f8bce71ac + - SHA256=f813484ea441404f18caad96f28138e8aaf0cb256163c09c2ab8a3acab87f69f + - SHA256=fc4a0802ab9c7409b892ca00636bec61e2acfc911bccfdeb9978b8ab5a2f828d + - SHA256=083150724b49604c8765c1ba19541fa260b133be0acb0647fcd936d81f054499 + - SHA256=44303d6572956f28a0f2e4b188934fb9874f2584f5c81fa431a463cfbf28083b + - SHA256=5d38c46032a58e28ae5f7d174d8761ec3d64d186677f3ec53af5f51afb9bfd2f + - SHA256=e1e70fa42059911bc6685fafef957f9a73fc66f214d0704a9b932683a5204032 + - SHA256=c01356092a365b84f84f0e66870bd1a05ba3feb53cafd973fa5fea2534bee234 + - SHA256=b3f9c06151e30ee43d39e788a79cd918a314f24e04fe87f3de8272a2057b624f + - SHA256=cd81b2792f0739f473c31c9cb7cf2313154bfa28b839975802b90e8790bb5058 + - SHA256=9ec7e6c8e1bfd883663d8d9d62c9e4f9ae373b731407181e32491b27a7218a2c + - SHA256=c2cfd23fdc6c0e1b1ffa0e545cbe556f18d11b362b4a89ba0713f6ab01c4827f + - SHA256=53f8adbd76c0eb16f5e43cadde422474d8a06f9c8f959389c1930042ad8beaa5 + - SHA256=648c8d2f8001c113d2986dd00b7bbd181593d462bef73522cee212c4f71f95b3 + - SHA256=ae047e2095e46c3f9c518b2be67ec753f4f0aad23b261a361fcb6144dcdb63b4 + - SHA256=3153d2baa462978dd22ab33d1c2274ecc88c200225d6a3327f98d5b752d08f5c + - SHA256=f49cde976e628012c9db73e1c8d76081944ecf2297cdafeb78bb13290da274c4 + - SHA256=d2513e58bb03ccc83affde685c6ef987924c37ce6707d8e9857e2524b0d7e90f + - SHA256=bb67c7623ba92fe64ffd9816b8d5b3b1ea3013960a30bd4cf6e295b3eb5b1bad + - SHA256=b34b3c3a91e3165d1481f0b3ec23eab93a1cfba94345a6cbfe5b18ddbd48eac7 + - SHA256=f7848034e010d55f15e474ca998f96391e320ff29b00cfcc4c5e536529703e75 + - SHA256=b6fc9493778cbe3bfc062d73f5cc604bc0ff058bc5e5dc6aac87f3a4008b54b6 + - SHA256=f5c5e962577e2293c4ad10603816dce7cc273585969615fbf4e4bfa9eaff1688 + - SHA256=d14c52d9220b606f428a8fe9f7c108b0d6f14cf71e7384749e98e6a95962e68f + - SHA256=d3a0e1a79158f3985cd49607ebe0cdfcc49cb9af96b8f43aefd0cdfe2f22e663 + - SHA256=2fbbfc8299537ff80cadf9d0e27c223fe0ccb9052bf9d8763ad717bbfa521c77 + - SHA256=19074674c6fbdaa573b3081745e5e26144fdf7a086d14e0e220d1814f1f13078 + filter_main_known_names: + Image|endswith: + - \cloudflared.exe + - \cloudflared-windows-386.exe + - \cloudflared-windows-amd64.exe + condition: process_creation and (1 of selection_* and not 1 of filter_main_*) +falsepositives: + - Unknown +level: high +ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_rundll32_executable_invalid_extension.yml b/sigma/sysmon/process_creation/proc_creation_win_rundll32_executable_invalid_extension.yml deleted file mode 100644 index be359ec31..000000000 --- a/sigma/sysmon/process_creation/proc_creation_win_rundll32_executable_invalid_extension.yml +++ /dev/null @@ -1,67 +0,0 @@ -title: Rundll32 Execution Without DLL File -id: c3a99af4-35a9-4668-879e-c09aeb4f2bdf -status: experimental -description: Detects the execution of rundll32 with a command line that doesn't contain - a .dll file -references: - - https://twitter.com/mrd0x/status/1481630810495139841?s=12 -author: Tim Shelton, Florian Roth (Nextron Systems), Yassine Oukessou (fix + fp) -date: 2022/01/13 -modified: 2023/11/14 -tags: - - attack.defense_evasion - - attack.t1218.011 - - sysmon -logsource: - category: process_creation - product: windows -detection: - process_creation: - EventID: 1 - Channel: Microsoft-Windows-Sysmon/Operational - selection: - - Image|endswith: \rundll32.exe - - OriginalFileName: RUNDLL32.EXE - filter_empty: - CommandLine: null - filter_generic: - - CommandLine|contains: .dll - - CommandLine: '' - filter_parent_null: - CommandLine|startswith: C:\Windows\system32\rundll32.exe C:\Windows\system32\inetcpl.cpl,ClearMyTracksByProcess - filter_iexplore: - ParentImage|endswith: :\Program Files\Internet Explorer\iexplore.exe - CommandLine|contains: .cpl - filter_msiexec_syswow64: - ParentImage|endswith: :\Windows\SysWOW64\msiexec.exe - ParentCommandLine|startswith: C:\Windows\syswow64\MsiExec.exe -Embedding - filter_msiexec_system32: - ParentImage|endswith: :\Windows\System32\msiexec.exe - ParentCommandLine|startswith: C:\Windows\system32\MsiExec.exe -Embedding - filter_splunk_ufw: - ParentImage|endswith: :\Windows\System32\cmd.exe - ParentCommandLine|contains: ' C:\Program Files\SplunkUniversalForwarder\' - filter_localserver_fp: - CommandLine|contains: ' -localserver ' - filter_mcafee: - - ParentCommandLine|startswith: 'C:\Windows\system32\rundll32.exe" "C:\Program - Files\McAfee\MSC\mcmscins.dll",DllUninstallFunction ' - - CommandLine|startswith: C:\Windows\system32\rundll32.exe" /uninstall /longpath - "C:\Program Files\McAfee\MSC\mscrem.inf - filter_edge_update: - ParentImage|startswith: C:\Users\ - ParentImage|contains: \AppData\Local\Microsoft\EdgeUpdate\Install\{ - ParentImage|endswith: \setup.exe - filter_zzzzInvokeManagedCustomActionOutOfProc: - CommandLine|contains|all: - - C:\Windows\Installer\MSI - - .tmp - - zzzzInvokeManagedCustomActionOutOfProc - condition: process_creation and (selection and not 1 of filter_*) -fields: - - Image - - CommandLine -falsepositives: - - Unknown -level: high -ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_rundll32_uncommon_dll_extension.yml b/sigma/sysmon/process_creation/proc_creation_win_rundll32_uncommon_dll_extension.yml new file mode 100644 index 000000000..311d3355c --- /dev/null +++ b/sigma/sysmon/process_creation/proc_creation_win_rundll32_uncommon_dll_extension.yml @@ -0,0 +1,45 @@ +title: Rundll32 Execution With Uncommon DLL Extension +id: c3a99af4-35a9-4668-879e-c09aeb4f2bdf +status: experimental +description: Detects the execution of rundll32 with a command line that doesn't contain + a common extension +references: + - https://twitter.com/mrd0x/status/1481630810495139841?s=12 +author: Tim Shelton, Florian Roth (Nextron Systems), Yassine Oukessou +date: 2022/01/13 +modified: 2023/12/13 +tags: + - attack.defense_evasion + - attack.t1218.011 + - sysmon +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 1 + Channel: Microsoft-Windows-Sysmon/Operational + selection: + - Image|endswith: \rundll32.exe + - OriginalFileName: RUNDLL32.EXE + filter_main_null: + CommandLine: null + filter_main_empty: + CommandLine: '' + filter_main_known_extension: + CommandLine|contains: + - .cpl + - .dll + - '.inf' + filter_main_localserver: + CommandLine|contains: ' -localserver ' + filter_main_zzzzInvokeManagedCustomActionOutOfProc: + CommandLine|contains|all: + - C:\Windows\Installer\MSI + - .tmp + - zzzzInvokeManagedCustomActionOutOfProc + condition: process_creation and (selection and not 1 of filter_main_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_schtasks_env_folder.yml b/sigma/sysmon/process_creation/proc_creation_win_schtasks_env_folder.yml index 49f383248..e30a31368 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_schtasks_env_folder.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_schtasks_env_folder.yml @@ -11,7 +11,7 @@ references: - https://www.joesandbox.com/analysis/514608/0/html#324415FF7D8324231381BAD48A052F85DF04 author: Florian Roth (Nextron Systems) date: 2022/02/21 -modified: 2023/03/14 +modified: 2023/11/30 tags: - attack.execution - attack.t1053.005 @@ -28,21 +28,21 @@ detection: CommandLine|contains: ' /create ' selection1_all_folders: CommandLine|contains: - - '%AppData%' + - :\Perflogs + - :\Windows\Temp - \AppData\Local\ - \AppData\Roaming\ - - '%Public%' - \Users\Public - - C:\Windows\Temp - - C:\Perflogs + - '%AppData%' + - '%Public%' selection2_parent: ParentCommandLine|endswith: \svchost.exe -k netsvcs -p -s Schedule selection2_some_folders: CommandLine|contains: - - '%Public%' + - :\Perflogs + - :\Windows\Temp - \Users\Public - - C:\Windows\Temp - - C:\Perflogs + - '%Public%' filter_mixed: - CommandLine|contains: - update_task.xml @@ -76,5 +76,5 @@ falsepositives: installations - Software that uses the AppData folder and scheduled tasks to update the software in the AppData folders -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_schtasks_susp_pattern.yml b/sigma/sysmon/process_creation/proc_creation_win_schtasks_susp_pattern.yml index c4d69a176..dc83543e2 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_schtasks_susp_pattern.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_schtasks_susp_pattern.yml @@ -9,7 +9,7 @@ references: - https://www.ncsc.gov.uk/static-assets/documents/malware-analysis-reports/devil-bait/NCSC-MAR-Devil-Bait.pdf author: Florian Roth (Nextron Systems) date: 2022/02/23 -modified: 2023/05/15 +modified: 2023/12/21 tags: - attack.execution - attack.t1053.005 @@ -51,15 +51,14 @@ detection: - mshta http - mshta.exe http selection_anomaly_1: - CommandLine|contains|all: + CommandLine|contains: + - :\Windows\Temp\ - \AppData\ - '%AppData%' - '%Temp%' - '%tmp%' - - C:\Windows\Temp\ selection_anomaly_2: - CommandLine|contains|all: - - /xml C:\Users\ + CommandLine|contains: - cscript - curl - wscript diff --git a/sigma/sysmon/process_creation/proc_creation_win_sdbinst_shim_persistence.yml b/sigma/sysmon/process_creation/proc_creation_win_sdbinst_shim_persistence.yml index f6562e7b6..ad531f329 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_sdbinst_shim_persistence.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_sdbinst_shim_persistence.yml @@ -14,7 +14,7 @@ references: - https://www.mandiant.com/resources/blog/fin7-shim-databases-persistence author: Markus Neis date: 2019/01/16 -modified: 2023/08/01 +modified: 2023/12/06 tags: - attack.persistence - attack.privilege_escalation @@ -34,7 +34,9 @@ detection: CommandLine|contains: .sdb filter_optional_iis: ParentImage|endswith: \msiexec.exe - CommandLine|contains: iisexpressshim.sdb + CommandLine|contains: + - :\Program Files (x86)\IIS Express\iisexpressshim.sdb + - :\Program Files\IIS Express\iisexpressshim.sdb condition: process_creation and (all of selection_* and not 1 of filter_optional_*) falsepositives: - Unknown diff --git a/sigma/sysmon/process_creation/proc_creation_win_sdbinst_susp_extension.yml b/sigma/sysmon/process_creation/proc_creation_win_sdbinst_susp_extension.yml index a7721c699..ed4c0fba2 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_sdbinst_susp_extension.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_sdbinst_susp_extension.yml @@ -1,4 +1,4 @@ -title: Suspicious Shim Database Installation via Sdbinst.EXE +title: Uncommon Extension Shim Database Installation Via Sdbinst.EXE id: 18ee686c-38a3-4f65-9f44-48a077141f42 related: - id: 517490a7-115a-48c6-8862-1a481504d5a8 @@ -15,7 +15,7 @@ references: - https://www.fireeye.com/blog/threat-research/2017/05/fin7-shim-databases-persistence.html author: Nasreddine Bencherchali (Nextron Systems) date: 2023/08/01 -modified: 2023/11/11 +modified: 2023/12/13 tags: - attack.persistence - attack.privilege_escalation @@ -33,14 +33,9 @@ detection: - OriginalFileName: sdbinst.exe filter_main_legit_ext: CommandLine|contains: .sdb - filter_main_svchost1: - ParentImage|endswith: :\Windows\System32\svchost.exe - Image|endswith: :\Windows\System32\sdbinst.exe - CommandLine|contains: ' -m -bg' - filter_main_svchost2: - ParentImage|endswith: :\Windows\System32\svchost.exe - Image|endswith: :\Windows\System32\sdbinst.exe - CommandLine|endswith: ' -mm' + filter_main_svchost: + - CommandLine|endswith: ' -mm' + - CommandLine|contains: ' -m -bg' filter_main_null: CommandLine: null filter_main_empty: @@ -48,5 +43,5 @@ detection: condition: process_creation and (selection and not 1 of filter_main_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_susp_bad_opsec_sacrificial_processes.yml b/sigma/sysmon/process_creation/proc_creation_win_susp_bad_opsec_sacrificial_processes.yml index 27e6815ed..233424d91 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_susp_bad_opsec_sacrificial_processes.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_susp_bad_opsec_sacrificial_processes.yml @@ -25,7 +25,7 @@ references: author: Oleg Kolesnikov @securonix invrep_de, oscd.community, Florian Roth (Nextron Systems), Christian Burkard (Nextron Systems) date: 2020/10/23 -modified: 2023/11/14 +modified: 2023/12/02 tags: - attack.defense_evasion - attack.t1218.011 @@ -65,7 +65,7 @@ detection: Image|endswith: \rundll32.exe CommandLine|endswith: rundll32.exe condition: process_creation and (1 of selection_* and not 1 of filter_main_* and - 1 of filter_optional_*) + not 1 of filter_optional_*) falsepositives: - Unlikely level: high diff --git a/sigma/sysmon/process_creation/proc_creation_win_susp_copy_lateral_movement.yml b/sigma/sysmon/process_creation/proc_creation_win_susp_copy_lateral_movement.yml index c275402db..9d40a20f7 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_susp_copy_lateral_movement.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_susp_copy_lateral_movement.yml @@ -1,7 +1,8 @@ -title: Copy from Admin Share +title: Copy From Or To Admin Share Or Sysvol Folder id: 855bc8b5-2ae8-402e-a9ed-b889e6df1900 status: test -description: Detects a suspicious copy command to or from an Admin share or remote +description: Detects a copy command or a copy utility execution to or from an Admin + share or remote references: - https://twitter.com/SBousseaden/status/1211636381086339073 - https://drive.google.com/file/d/1lKya3_mLnR3UQuCoiYruO3qgu052_iS_/view @@ -10,7 +11,7 @@ references: author: Florian Roth (Nextron Systems), oscd.community, Teymur Kheirkhabarov @HeirhabarovT, Zach Stanford @svch0st, Nasreddine Bencherchali date: 2019/12/30 -modified: 2023/02/02 +modified: 2023/11/15 tags: - attack.lateral_movement - attack.collection @@ -26,6 +27,10 @@ detection: process_creation: EventID: 1 Channel: Microsoft-Windows-Sysmon/Operational + selection_target: + CommandLine|contains: + - \\\\*$ + - \Sysvol\ selection_other_tools: - Image|endswith: - \robocopy.exe @@ -55,14 +60,9 @@ detection: - move-item - ' mi ' - ' mv ' - selection_target: - - CommandLine|contains|all: - - \\\\ - - $ - - CommandLine|contains: \Sysvol\ condition: process_creation and (selection_target and (selection_other_tools or all of selection_cmd_* or all of selection_pwsh_*)) falsepositives: - Administrative scripts -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_susp_elevated_system_shell.yml b/sigma/sysmon/process_creation/proc_creation_win_susp_elevated_system_shell.yml deleted file mode 100644 index a3f759d6b..000000000 --- a/sigma/sysmon/process_creation/proc_creation_win_susp_elevated_system_shell.yml +++ /dev/null @@ -1,111 +0,0 @@ -title: Elevated System Shell Spawned -id: 178e615d-e666-498b-9630-9ed363038101 -status: experimental -description: Detects when a shell program such as the Windows command prompt or PowerShell - is launched with system privileges. -references: - - https://github.com/Wh04m1001/SysmonEoP -author: frack113, Tim Shelton (update fp) -date: 2022/12/05 -modified: 2023/10/11 -tags: - - attack.privilege_escalation - - attack.defense_evasion - - attack.execution - - attack.t1059 - - sysmon -logsource: - product: windows - category: process_creation -detection: - process_creation: - EventID: 1 - Channel: Microsoft-Windows-Sysmon/Operational - selection_shell: - - Image|endswith: - - \powershell.exe - - \pwsh.exe - - \cmd.exe - - OriginalFileName: - - PowerShell.EXE - - pwsh.dll - - Cmd.Exe - selection_user: - User|contains: - - AUTHORI - - AUTORI - LogonId: '0x3e7' - filter_main_generic: - ParentImage|contains: - - :\Windows\System32\ - - :\Program Files (x86)\ - - :\Program Files\ - Image|endswith: - - \cmd.exe - - \powershell.exe - filter_optional_manageengine: - ParentImage|endswith: :\ManageEngine\ADManager Plus\pgsql\bin\postgres.exe - Image|endswith: \cmd.exe - filter_optional_citrix: - ParentImage|contains: :\Windows\SysWOW64\config\systemprofile\Citrix\UpdaterBinaries\ - ParentImage|endswith: \CitrixReceiverUpdater.exe - Image|endswith: \cmd.exe - filter_optional_asgard: - CommandLine|contains: :\WINDOWS\system32\cmd.exe /c " - CurrentDirectory|contains: :\WINDOWS\Temp\asgard2-agent\ - filter_optional_dell_update: - ParentImage|contains: :\Windows\Temp - ParentImage|endswith: \invcol.exe - ParentCommandLine|contains: :\ProgramData\Dell\UpdateService\ - Image|endswith: \cmd.exe - filter_main_compattelrunner: - ParentImage|contains: - - :\Windows\System32 - - :\Windows\WinSxS\ - ParentImage|endswith: \CompatTelRunner.exe - ParentCommandLine|contains: :\Windows\system32\CompatTelRunner.exe -m:appraiser.dll - -f:DoScheduledTelemetryRun - filter_optional_ibm_spectrumprotect: - ParentImage|contains: :\IBM\SpectrumProtect\webserver\scripts\ - CommandLine|contains: :\IBM\SpectrumProtect\webserver\scripts\ - filter_main_msiexec: - ParentImage|endswith: :\Windows\SysWOW64\msiexec.exe - ParentCommandLine|contains: :\Windows\syswow64\MsiExec.exe -Embedding - CommandLine|contains: \RegisterMicrosoftUpdate.ps1 - filter_optional_avira_update: - CommandLine|contains: :\Windows\system32\cmd.exe" /C copy "C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe" - filter_main_empty_parent_1: - CommandLine|startswith: - - 'powershell.exe -ExecutionPolicy Restricted -Command $res = 0; ' - - 'powershell.exe -ExecutionPolicy Restricted -Command Write-Host ' - CommandLine|endswith: - - Write-Host 'Final result:', $Res; - - Write-Host "Final result:", $res - - 'Write-Host ''Final result: 1'';' - filter_main_empty_parent_2: - Image|endswith: \cmd.exe - CommandLine|contains: /d /c C:\Windows\system32\silcollector.cmd - filter_main_empty_parent_3: - Image|endswith: \cmd.exe - CommandLine|endswith: - - cmd.exe /c btool server list replication_port --no-log - - cmd.exe /c btool server list general --no-log - filter_main_empty_parent_4: - Image|endswith: \cmd.exe - CommandLine|contains: :\Windows\system32\reg.exe query hklm\software\microsoft\windows\softwareinventorylogging - /v collectionstate /reg:64 - filter_main_empty_parent_5: - Image|endswith: :\Windows\System32\cmd.exe - CommandLine|endswith: :\Windows\system32\cmd.exe /c PAUSE - filter_optional_empty_parent_6: - ParentImage: '' - CommandLine|contains: :\IBM\SpectrumProtect\webserver\scripts\ - filter_optional_empty_parent_7: - ParentImage: null - CommandLine|contains: :\IBM\SpectrumProtect\webserver\scripts\ - condition: process_creation and (all of selection_* and not 1 of filter_main_* - and not 1 of filter_optional_*) -falsepositives: - - Unknown -level: medium -ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_susp_elevated_system_shell_uncommon_parent.yml b/sigma/sysmon/process_creation/proc_creation_win_susp_elevated_system_shell_uncommon_parent.yml new file mode 100644 index 000000000..1a6494da0 --- /dev/null +++ b/sigma/sysmon/process_creation/proc_creation_win_susp_elevated_system_shell_uncommon_parent.yml @@ -0,0 +1,68 @@ +title: Elevated System Shell Spawned From Uncommon Parent Location +id: 178e615d-e666-498b-9630-9ed363038101 +related: + - id: 61065c72-5d7d-44ef-bf41-6a36684b545f + type: similar +status: experimental +description: Detects when a shell program such as the Windows command prompt or PowerShell + is launched with system privileges from a uncommon parent location. +references: + - https://github.com/Wh04m1001/SysmonEoP +author: frack113, Tim Shelton (update fp) +date: 2022/12/05 +modified: 2023/11/23 +tags: + - attack.privilege_escalation + - attack.defense_evasion + - attack.execution + - attack.t1059 + - sysmon +logsource: + product: windows + category: process_creation +detection: + process_creation: + EventID: 1 + Channel: Microsoft-Windows-Sysmon/Operational + selection_shell: + - Image|endswith: + - \powershell.exe + - \pwsh.exe + - \cmd.exe + - OriginalFileName: + - PowerShell.EXE + - pwsh.dll + - Cmd.Exe + selection_user: + User|contains: + - AUTHORI + - AUTORI + LogonId: '0x3e7' + filter_main_generic: + ParentImage|contains: + - :\Program Files (x86)\ + - :\Program Files\ + - :\ProgramData\ + - :\Windows\System32\ + - :\Windows\SysWOW64\ + - :\Windows\Temp\ + - :\Windows\WinSxS\ + filter_optional_manageengine: + ParentImage|endswith: :\ManageEngine\ADManager Plus\pgsql\bin\postgres.exe + Image|endswith: \cmd.exe + filter_optional_asgard: + CommandLine|contains: :\WINDOWS\system32\cmd.exe /c " + CurrentDirectory|contains: :\WINDOWS\Temp\asgard2-agent\ + filter_optional_ibm_spectrumprotect: + ParentImage|contains: :\IBM\SpectrumProtect\webserver\scripts\ + CommandLine|contains: :\IBM\SpectrumProtect\webserver\scripts\ + filter_main_parent_null: + ParentImage: null + filter_main_parent_empty: + ParentImage: '' + condition: process_creation and (all of selection_* and not 1 of filter_main_* + and not 1 of filter_optional_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_network_sniffing.yml b/sigma/sysmon/process_creation/proc_creation_win_susp_network_sniffing.yml similarity index 100% rename from sigma/sysmon/process_creation/proc_creation_win_network_sniffing.yml rename to sigma/sysmon/process_creation/proc_creation_win_susp_network_sniffing.yml diff --git a/sigma/sysmon/process_creation/proc_creation_win_susp_non_exe_image.yml b/sigma/sysmon/process_creation/proc_creation_win_susp_non_exe_image.yml index 992f67f10..d3b3dc0e0 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_susp_non_exe_image.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_susp_non_exe_image.yml @@ -1,14 +1,19 @@ title: Execution of Suspicious File Type Extension id: c09dad97-1c78-4f71-b127-7edb2b8e491a status: experimental -description: Checks whether the image specified in a process creation event doesn't - refer to an .exe file (caused by process ghosting or other unorthodox methods - to start a process) +description: 'Detects whether the image specified in a process creation event doesn''t + refer to an ".exe" (or other known executable extension) file. This can be caused + by process ghosting or other unorthodox methods to start a process. + + This rule might require some initial baselining to align with some third party + tooling in the user environment. + + ' references: - https://pentestlaboratories.com/2021/12/08/process-ghosting/ author: Max Altgelt (Nextron Systems) date: 2021/12/09 -modified: 2023/10/10 +modified: 2023/11/23 tags: - attack.defense_evasion - sysmon @@ -21,9 +26,12 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational known_image_extension: Image|endswith: + - .bin + - .cgi + - .com - .exe - - .tmp - .scr + - .tmp filter_main_image: Image: - System @@ -31,82 +39,47 @@ detection: - MemCompression - vmmem filter_main_msi_installers: - Image|startswith: C:\Windows\Installer\MSI + Image|contains: :\Windows\Installer\MSI filter_main_driver_store: - Image|startswith: C:\Windows\System32\DriverStore\FileRepository\ + Image|contains: :\Windows\System32\DriverStore\FileRepository\ filter_main_msi_rollbackfiles: - Image|startswith: C:\Config.Msi\ + Image|contains: :\Config.Msi\ Image|endswith: - .rbf - .rbs - filter_main_windows_helper: - ParentImage|startswith: C:\Windows\Temp\ - Image|startswith: C:\Windows\Temp\Helper\ - filter_main_com: - Image|startswith: - - C:\Windows\System32\ - - C:\Windows\SysWOW64\ - Image|endswith: .com + filter_main_windows_temp: + - ParentImage|contains: :\Windows\Temp\ + - Image|contains: :\Windows\Temp\ filter_main_deleted: - Image|startswith: C:\$Extend\$Deleted\ - filter_optional_empty: + Image|contains: :\$Extend\$Deleted\ + filter_main_empty: Image: - '-' - '' - filter_optional_null: + filter_main_null: Image: null filter_optional_avira: - ParentImage|startswith: C:\ProgramData\Avira\ + ParentImage|contains: :\ProgramData\Avira\ filter_optional_nvidia: Image|contains: NVIDIA\NvBackend\ Image|endswith: .dat - filter_optional_winscp: - Image|endswith: \WinSCP.com - filter_optional_vscode: - Image|contains|all: - - C:\Users\ - - \AppData\ - - .tmp - - CodeSetup - filter_optional_libreoffice: - Image|endswith: \program\soffice.bin - filter_optional_openoffice: - Image|endswith: \program\unopkg.bin - filter_optional_emc_networker: - Image: - - C:\Program Files\EMC NetWorker\Management\GST\apache\cgi-bin\update_jnlp.cgi - - C:\Program Files (x86)\EMC NetWorker\Management\GST\apache\cgi-bin\update_jnlp.cgi filter_optional_winpakpro: - Image|startswith: - - C:\Program Files (x86)\WINPAKPRO\ - - C:\Program Files\WINPAKPRO\ + Image|contains: + - :\Program Files (x86)\WINPAKPRO\ + - :\Program Files\WINPAKPRO\ Image|endswith: .ngn filter_optional_myq_server: - Image: - - C:\Program Files (x86)\MyQ\Server\pcltool.dll - - C:\Program Files\MyQ\Server\pcltool.dll - filter_optional_visualstudio: - Image|startswith: - - C:\Program Files\Microsoft Visual Studio\ - - C:\Program Files (x86)\Microsoft Visual Studio - Image|endswith: .com + Image|endswith: + - :\Program Files (x86)\MyQ\Server\pcltool.dll + - :\Program Files\MyQ\Server\pcltool.dll filter_optional_wsl: Image|contains|all: - \AppData\Local\Packages\ - \LocalState\rootfs\ filter_optional_lzma_exe: Image|endswith: \LZMA_EXE - filter_optional_dell_dock: - ParentImage|startswith: C:\Windows\Temp\ - ParentImage|endswith: \TBT_Dock_Firmware\GetDockVer32W.exe - filter_optional_firefox_crashreporter: - Image|startswith: C:\Program Files\Mozilla Firefox\tobedeleted\ - filter_optional_office_c2r: - ParentImage: C:\Windows\UUS\amd64\MoUsoCoreWorker.exe - Image|startswith: C:\$Extend\$Deleted\ - CommandLine|contains|all: - - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe - - /update UPDATEORCHESTRATOR displaylevel=False + filter_optional_firefox: + Image|contains: :\Program Files\Mozilla Firefox\ filter_optional_docker: ParentImage: C:\Windows\System32\services.exe Image|endswith: com.docker.service @@ -114,5 +87,5 @@ detection: and not 1 of filter_optional_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_susp_recycle_bin_fake_execution.yml b/sigma/sysmon/process_creation/proc_creation_win_susp_recycle_bin_fake_execution.yml index be7109c41..1226398cd 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_susp_recycle_bin_fake_execution.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_susp_recycle_bin_fake_execution.yml @@ -11,7 +11,7 @@ references: - https://unit42.paloaltonetworks.com/cloaked-ursa-phishing/ author: X__Junior (Nextron Systems) date: 2023/07/12 -modified: 2023/11/06 +modified: 2023/12/11 tags: - attack.persistence - attack.defense_evasion @@ -27,7 +27,6 @@ detection: Image|contains: - RECYCLERS.BIN\ - RECYCLER.BIN\ - - RECYCLE.BIN\ condition: process_creation and selection falsepositives: - Unknown diff --git a/sigma/sysmon/process_creation/proc_creation_win_susp_sysnative.yml b/sigma/sysmon/process_creation/proc_creation_win_susp_sysnative.yml index 187c7698b..99942122d 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_susp_sysnative.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_susp_sysnative.yml @@ -7,7 +7,10 @@ references: - https://thedfirreport.com/2021/08/29/cobalt-strike-a-defenders-guide/ author: Max Altgelt (Nextron Systems) date: 2022/08/23 +modified: 2023/12/14 tags: + - attack.defense_evasion + - attack.privilege_escalation - attack.t1055 - sysmon logsource: @@ -18,11 +21,9 @@ detection: EventID: 1 Channel: Microsoft-Windows-Sysmon/Operational sysnative: - CommandLine|startswith: C:\Windows\Sysnative\ + - CommandLine|contains: :\Windows\Sysnative\ + - Image|contains: :\Windows\Sysnative\ condition: process_creation and sysnative -fields: - - CommandLine - - ParentCommandLine falsepositives: - Unknown level: medium diff --git a/sigma/sysmon/process_creation/proc_creation_win_svchost_susp_parent_process.yml b/sigma/sysmon/process_creation/proc_creation_win_svchost_uncommon_parent_process.yml similarity index 71% rename from sigma/sysmon/process_creation/proc_creation_win_svchost_susp_parent_process.yml rename to sigma/sysmon/process_creation/proc_creation_win_svchost_uncommon_parent_process.yml index 6f61d76dd..78bae9042 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_svchost_susp_parent_process.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_svchost_uncommon_parent_process.yml @@ -1,7 +1,7 @@ -title: Suspicious Svchost Process +title: Uncommon Svchost Parent Process id: 01d2e2a1-5f09-44f7-9fc1-24faa7479b6d -status: test -description: Detects a suspicious svchost process start +status: experimental +description: Detects an uncommon svchost parent process author: Florian Roth (Nextron Systems) date: 2017/08/15 modified: 2022/06/28 @@ -18,25 +18,22 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational selection: Image|endswith: \svchost.exe - filter: + filter_main_generic: ParentImage|endswith: - - \services.exe - - \MsMpEng.exe - \Mrt.exe - - \rpcnet.exe + - \MsMpEng.exe - \ngen.exe + - \rpcnet.exe + - \services.exe - \TiWorker.exe - filter_null1: + filter_main_parent_null: ParentImage: null - filter_null2: - ParentImage: '' - filter_emptysysmon: - ParentImage: '-' - condition: process_creation and (selection and not 1 of filter*) -fields: - - CommandLine - - ParentCommandLine + filter_main_parent_empty: + ParentImage: + - '-' + - '' + condition: process_creation and (selection and not 1 of filter_main_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_tapinstall_execution.yml b/sigma/sysmon/process_creation/proc_creation_win_tapinstall_execution.yml index 30d0b7ac4..89cf836be 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_tapinstall_execution.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_tapinstall_execution.yml @@ -5,7 +5,7 @@ description: Well-known TAP software installation. Possible preparation for data using tunneling techniques author: Daniil Yugoslavskiy, Ian Davis, oscd.community date: 2019/10/24 -modified: 2023/02/13 +modified: 2023/12/11 tags: - attack.exfiltration - attack.t1048 @@ -19,15 +19,15 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational selection: Image|endswith: \tapinstall.exe - filter_avast: - Image: - - C:\Program Files\Avast Software\SecureLine VPN\tapinstall.exe - - C:\Program Files (x86)\Avast Software\SecureLine VPN\tapinstall.exe - filter_openvpn: - Image|startswith: C:\Program Files\OpenVPN Connect\drivers\tap\ - filter_protonvpn: - Image|startswith: C:\Program Files (x86)\Proton Technologies\ProtonVPNTap\installer\ - condition: process_creation and (selection and not 1 of filter_*) + filter_optional_avast: + Image|contains: + - :\Program Files\Avast Software\SecureLine VPN\ + - :\Program Files (x86)\Avast Software\SecureLine VPN\ + filter_optional_openvpn: + Image|contains: :\Program Files\OpenVPN Connect\drivers\tap\ + filter_optional_protonvpn: + Image|contains: :\Program Files (x86)\Proton Technologies\ProtonVPNTap\installer\ + condition: process_creation and (selection and not 1 of filter_optional_*) falsepositives: - Legitimate OpenVPN TAP insntallation level: medium diff --git a/sigma/sysmon/process_creation/proc_creation_win_teams_suspicious_command_line_cred_access.yml b/sigma/sysmon/process_creation/proc_creation_win_teams_suspicious_command_line_cred_access.yml index b0b6be90a..2310c8462 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_teams_suspicious_command_line_cred_access.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_teams_suspicious_command_line_cred_access.yml @@ -1,14 +1,19 @@ -title: Suspicious Command With Teams Objects Paths +title: Potentially Suspicious Command Targeting Teams Sensitive Files id: d2eb17db-1d39-41dc-b57f-301f6512fa75 status: experimental -description: Detects an access to authentication tokens and accounts of Microsoft - Teams desktop application. +description: 'Detects a commandline containing references to the Microsoft Teams database + or cookies files from a process other than Teams. + + The database might contain authentication tokens and other sensitive information + about the logged in accounts. + + ' references: - https://www.bleepingcomputer.com/news/security/microsoft-teams-stores-auth-tokens-as-cleartext-in-windows-linux-macs/ - https://www.vectra.ai/blogpost/undermining-microsoft-teams-security-by-mining-tokens author: '@SerkinValery' date: 2022/09/16 -modified: 2023/02/05 +modified: 2023/12/18 tags: - attack.credential_access - attack.t1528 @@ -24,10 +29,10 @@ detection: CommandLine|contains: - \Microsoft\Teams\Cookies - \Microsoft\Teams\Local Storage\leveldb - filter: + filter_main_legit_locations: Image|endswith: \Microsoft\Teams\current\Teams.exe - condition: process_creation and (selection and not filter) + condition: process_creation and (selection and not 1 of filter_main_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_whoami_all_execution.yml b/sigma/sysmon/process_creation/proc_creation_win_whoami_all_execution.yml new file mode 100644 index 000000000..d587ffedd --- /dev/null +++ b/sigma/sysmon/process_creation/proc_creation_win_whoami_all_execution.yml @@ -0,0 +1,34 @@ +title: Enumerate All Information With Whoami.EXE +id: c248c896-e412-4279-8c15-1c558067b6fa +status: experimental +description: Detects the execution of "whoami.exe" with the "/all" flag +references: + - https://brica.de/alerts/alert/public/1247926/agent-tesla-keylogger-delivered-inside-a-power-iso-daa-archive/ + - https://app.any.run/tasks/7eaba74e-c1ea-400f-9c17-5e30eee89906/ + - https://www.youtube.com/watch?v=DsJ9ByX84o4&t=6s +author: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) +date: 2023/12/04 +tags: + - attack.discovery + - attack.t1033 + - car.2016-03-001 + - sysmon +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 1 + Channel: Microsoft-Windows-Sysmon/Operational + selection_main_img: + - Image|endswith: \whoami.exe + - OriginalFileName: whoami.exe + selection_main_cli: + CommandLine|contains: + - ' -all' + - ' /all' + condition: process_creation and (all of selection_main_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_whoami_execution.yml b/sigma/sysmon/process_creation/proc_creation_win_whoami_execution.yml index a7c49664c..c8babedd7 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_whoami_execution.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_whoami_execution.yml @@ -8,7 +8,7 @@ references: - https://app.any.run/tasks/7eaba74e-c1ea-400f-9c17-5e30eee89906/ author: Florian Roth (Nextron Systems) date: 2018/08/13 -modified: 2023/02/28 +modified: 2023/11/30 tags: - attack.discovery - attack.t1033 @@ -29,5 +29,5 @@ falsepositives: - Admin activity - Scripts and administrative tools used in the monitored environment - Monitoring activity -level: medium +level: low ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_whoami_execution_from_high_priv_process.yml b/sigma/sysmon/process_creation/proc_creation_win_whoami_execution_from_high_priv_process.yml index 41da9935c..f201d4390 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_whoami_execution_from_high_priv_process.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_whoami_execution_from_high_priv_process.yml @@ -1,4 +1,4 @@ -title: Suspicious Whoami.EXE Execution From Privileged Process +title: Whoami.EXE Execution From Privileged Process id: 79ce34ca-af29-4d0e-b832-fc1b377020db related: - id: 80167ada-7a12-41ed-b8e9-aa47195c66a1 @@ -11,7 +11,7 @@ references: - https://nsudo.m2team.org/en-us/ author: Florian Roth (Nextron Systems), Teymur Kheirkhabarov date: 2022/01/28 -modified: 2023/02/28 +modified: 2023/12/04 tags: - attack.privilege_escalation - attack.discovery diff --git a/sigma/sysmon/process_creation/proc_creation_win_whoami_susp_flags.yml b/sigma/sysmon/process_creation/proc_creation_win_whoami_output.yml similarity index 79% rename from sigma/sysmon/process_creation/proc_creation_win_whoami_susp_flags.yml rename to sigma/sysmon/process_creation/proc_creation_win_whoami_output.yml index 30c47aac8..9bcc505b0 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_whoami_susp_flags.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_whoami_output.yml @@ -1,15 +1,16 @@ -title: Suspicious Whoami.EXE Execution +title: Whoami.EXE Execution With Output Option id: c30fb093-1109-4dc8-88a8-b30d11c95a5d status: experimental -description: Detects the execution of "whoami.exe" with the "/all" flag or with redirection - options to export the results to a file for later use. +description: Detects the execution of "whoami.exe" with the "/FO" flag to choose CSV + as output format or with redirection options to export the results to a file for + later use. references: - https://brica.de/alerts/alert/public/1247926/agent-tesla-keylogger-delivered-inside-a-power-iso-daa-archive/ - https://app.any.run/tasks/7eaba74e-c1ea-400f-9c17-5e30eee89906/ - https://www.youtube.com/watch?v=DsJ9ByX84o4&t=6s author: Florian Roth (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) date: 2023/02/28 -modified: 2023/11/10 +modified: 2023/12/04 tags: - attack.discovery - attack.t1033 @@ -27,8 +28,6 @@ detection: - OriginalFileName: whoami.exe selection_main_cli: CommandLine|contains: - - ' -all' - - ' /all' - ' /FO CSV' - ' -FO CSV' selection_special: @@ -36,5 +35,5 @@ detection: condition: process_creation and (all of selection_main_* or selection_special) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_whoami_parent_anomaly.yml b/sigma/sysmon/process_creation/proc_creation_win_whoami_parent_anomaly.yml index 60b34524c..79b5e4f83 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_whoami_parent_anomaly.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_whoami_parent_anomaly.yml @@ -8,7 +8,7 @@ references: - https://www.youtube.com/watch?v=DsJ9ByX84o4&t=6s author: Florian Roth (Nextron Systems) date: 2021/08/12 -modified: 2023/02/28 +modified: 2023/12/04 tags: - attack.discovery - attack.t1033 @@ -24,22 +24,23 @@ detection: selection: - Image|endswith: \whoami.exe - OriginalFileName: whoami.exe - filter_generic: + filter_main_known_parents: ParentImage|endswith: - \cmd.exe + - \powershell_ise.exe - \powershell.exe - \pwsh.exe - - \powershell_ise.exe - filter_ms_monitoring_agent: - ParentImage: C:\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe - filter_parent_null: + filter_optional_ms_monitoring_agent: + ParentImage|endswith: :\Program Files\Microsoft Monitoring Agent\Agent\MonitoringHost.exe + filter_main_parent_null: ParentImage: null - filter_parent_empty: + filter_main_parent_empty: ParentImage: '' - condition: process_creation and (selection and not 1 of filter_*) + condition: process_creation and (selection and not 1 of filter_main_* and not + 1 of filter_optional_*) falsepositives: - Admin activity - Scripts and administrative tools used in the monitored environment - Monitoring activity -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_winget_add_susp_custom_source.yml b/sigma/sysmon/process_creation/proc_creation_win_winget_add_susp_custom_source.yml index c20899032..fb74c505c 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_winget_add_susp_custom_source.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_winget_add_susp_custom_source.yml @@ -12,6 +12,7 @@ references: - https://github.com/nasbench/Misc-Research/tree/b9596e8109dcdb16ec353f316678927e507a5b8d/LOLBINs/Winget author: Nasreddine Bencherchali (Nextron Systems) date: 2023/04/17 +modified: 2023/12/04 tags: - attack.defense_evasion - attack.execution @@ -36,5 +37,5 @@ detection: condition: process_creation and (all of selection_*) falsepositives: - Unknown -level: high +level: medium ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_wmic_recon_system_info.yml b/sigma/sysmon/process_creation/proc_creation_win_wmic_recon_system_info.yml new file mode 100644 index 000000000..821e2c22d --- /dev/null +++ b/sigma/sysmon/process_creation/proc_creation_win_wmic_recon_system_info.yml @@ -0,0 +1,71 @@ +title: System Information Discovery Via Wmic.EXE +id: d85ecdd7-b855-4e6e-af59-d9c78b5b861e +related: + - id: 9d5a1274-922a-49d0-87f3-8c653483b909 + type: derived +status: experimental +description: 'Detects the use of the WMI command-line (WMIC) utility to identify and + display various system information, + + including OS, CPU, GPU, disk drive names, memory capacity, display resolution, + baseboard, BIOS, + + and GPU driver products/versions. + + ' +references: + - https://github.com/redcanaryco/atomic-red-team/blob/a2ccd19c37d0278b4ffa8583add3cf52060a5418/atomics/T1082/T1082.md#atomic-test-25---system-information-discovery-with-wmic + - https://nwgat.ninja/getting-system-information-with-wmic-on-windows/ + - https://blog.sekoia.io/aurora-a-rising-stealer-flying-under-the-radar + - https://blog.cyble.com/2023/01/18/aurora-a-stealer-using-shapeshifting-tactics/ + - https://app.any.run/tasks/a6aa0057-82ec-451f-8f99-55650ca537da/ + - https://www.virustotal.com/gui/file/d6f6bc10ae0e634ed4301d584f61418cee18e5d58ad9af72f8aa552dc4aaeca3/behavior +author: Joseliyo Sanchez, @Joseliyo_Jstnk +date: 2023/12/19 +tags: + - attack.discovery + - attack.t1082 + - sysmon +logsource: + category: process_creation + product: windows +detection: + process_creation: + EventID: 1 + Channel: Microsoft-Windows-Sysmon/Operational + selection_wmic: + - Description: WMI Commandline Utility + - OriginalFileName: wmic.exe + - Image|endswith: \WMIC.exe + selection_get: + CommandLine|contains: get + selection_classes: + CommandLine|contains: + - baseboard + - bios + - cpu + - diskdrive + - logicaldisk + - memphysical + - os + - path + - startup + - win32_videocontroller + selection_attributes: + CommandLine|contains: + - caption + - command + - driverversion + - maxcapacity + - name + - osarchitecture + - product + - size + - smbiosbiosversion + - version + - videomodedescription + condition: process_creation and (all of selection_*) +falsepositives: + - Unknown +level: low +ruletype: Sigma diff --git a/sigma/sysmon/process_creation/proc_creation_win_wmic_recon_system_info_discovery.yml b/sigma/sysmon/process_creation/proc_creation_win_wmic_recon_system_info_uncommon.yml similarity index 74% rename from sigma/sysmon/process_creation/proc_creation_win_wmic_recon_system_info_discovery.yml rename to sigma/sysmon/process_creation/proc_creation_win_wmic_recon_system_info_uncommon.yml index 66edf0474..173eb37b2 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_wmic_recon_system_info_discovery.yml +++ b/sigma/sysmon/process_creation/proc_creation_win_wmic_recon_system_info_uncommon.yml @@ -1,5 +1,8 @@ -title: Potential System Information Discovery Via Wmic.EXE +title: Uncommon System Information Discovery Via Wmic.EXE id: 9d5a1274-922a-49d0-87f3-8c653483b909 +related: + - id: d85ecdd7-b855-4e6e-af59-d9c78b5b861e + type: derived status: experimental description: 'Detects the use of the WMI command-line (WMIC) utility to identify and display various system information, @@ -18,9 +21,10 @@ references: - https://blog.sekoia.io/aurora-a-rising-stealer-flying-under-the-radar - https://blog.cyble.com/2023/01/18/aurora-a-stealer-using-shapeshifting-tactics/ - https://app.any.run/tasks/a6aa0057-82ec-451f-8f99-55650ca537da/ + - https://www.virustotal.com/gui/file/d6f6bc10ae0e634ed4301d584f61418cee18e5d58ad9af72f8aa552dc4aaeca3/behavior author: TropChaud date: 2023/01/26 -modified: 2023/05/05 +modified: 2023/12/19 tags: - attack.discovery - attack.t1082 @@ -38,17 +42,8 @@ detection: - Image|endswith: \WMIC.exe selection_commands: CommandLine|contains: - - baseboard get product - - baseboard get version - - bios get SMBIOSBIOSVersion - - cpu get name - - DISKDRIVE get Caption - LOGICALDISK get Name,Size,FreeSpace - - MEMPHYSICAL get MaxCapacity - - OS get Caption,OSArchitecture,Version - - path win32_VideoController get DriverVersion - - path win32_VideoController get name - - path win32_VideoController get VideoModeDescription + - os get Caption,OSArchitecture,Version condition: process_creation and (all of selection_*) falsepositives: - Unknown diff --git a/sigma/sysmon/registry/registry_set/registry_set_desktop_background_change.yml b/sigma/sysmon/registry/registry_set/registry_set_desktop_background_change.yml new file mode 100644 index 000000000..99eb77f20 --- /dev/null +++ b/sigma/sysmon/registry/registry_set/registry_set_desktop_background_change.yml @@ -0,0 +1,57 @@ +title: Potentially Suspicious Desktop Background Change Via Registry +id: 85b88e05-dadc-430b-8a9e-53ff1cd30aae +related: + - id: 8cbc9475-8d05-4e27-9c32-df960716c701 + type: similar +status: experimental +description: 'Detects regsitry value settings that would replace the user''s desktop + background. + + This is a common technique used by malware to change the desktop background to + a ransom note or other image. + + ' +references: + - https://www.attackiq.com/2023/09/20/emulating-rhysida/ + - https://research.checkpoint.com/2023/the-rhysida-ransomware-activity-analysis-and-ties-to-vice-society/ + - https://www.trendmicro.com/en_us/research/23/h/an-overview-of-the-new-rhysida-ransomware.html + - https://www.virustotal.com/gui/file/a864282fea5a536510ae86c77ce46f7827687783628e4f2ceb5bf2c41b8cd3c6/behavior + - https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsDesktop::Wallpaper + - https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.ControlPanelDisplay::CPL_Personalization_NoDesktopBackgroundUI +author: Nasreddine Bencherchali (Nextron Systems), Stephen Lincoln @slincoln-aiq (AttackIQ) +date: 2023/12/21 +tags: + - attack.defense_evasion + - attack.impact + - attack.t1112 + - attack.t1491.001 + - sysmon +logsource: + product: windows + category: registry_set +detection: + registry_set: + EventID: 13 + Channel: Microsoft-Windows-Sysmon/Operational + selection_keys: + TargetObject|contains: + - Control Panel\Desktop + - CurrentVersion\Policies\ActiveDesktop + - CurrentVersion\Policies\System + selection_values_1: + TargetObject|endswith: NoChangingWallpaper + Details: DWORD (0x00000001) + selection_values_2: + TargetObject|endswith: \Wallpaper + selection_values_3: + TargetObject|endswith: \WallpaperStyle + Details: '2' + filter_main_svchost: + Image|endswith: \svchost.exe + condition: registry_set and (selection_keys and 1 of selection_values_* and not + 1 of filter_main_*) +falsepositives: + - Administrative scripts that change the desktop background to a company logo + or other image. +level: medium +ruletype: Sigma diff --git a/sigma/sysmon/registry/registry_set/registry_set_persistence_shim_database_susp_application.yml b/sigma/sysmon/registry/registry_set/registry_set_persistence_shim_database_susp_application.yml index 95666c11f..2dfc6b50c 100644 --- a/sigma/sysmon/registry/registry_set/registry_set_persistence_shim_database_susp_application.yml +++ b/sigma/sysmon/registry/registry_set/registry_set_persistence_shim_database_susp_application.yml @@ -8,7 +8,7 @@ references: - https://www.fireeye.com/blog/threat-research/2017/05/fin7-shim-databases-persistence.html author: Nasreddine Bencherchali (Nextron Systems) date: 2023/08/01 -modified: 2023/08/17 +modified: 2023/12/06 tags: - attack.persistence - attack.t1546.011 @@ -26,10 +26,13 @@ detection: - \csrss.exe - \dllhost.exe - \explorer.exe + - \RuntimeBroker.exe - \services.exe + - \sihost.exe - \svchost.exe - \taskhostw.exe - \winlogon.exe + - \WmiPrvSe.exe condition: registry_set and selection falsepositives: - Unknown diff --git a/sigma/sysmon/registry/registry_set/registry_set_powershell_execution_policy.yml b/sigma/sysmon/registry/registry_set/registry_set_powershell_execution_policy.yml index 091933fdf..5b5a2b4ed 100644 --- a/sigma/sysmon/registry/registry_set/registry_set_powershell_execution_policy.yml +++ b/sigma/sysmon/registry/registry_set/registry_set_powershell_execution_policy.yml @@ -14,7 +14,7 @@ references: - https://learn.microsoft.com/en-us/powershell/module/microsoft.powershell.security/set-executionpolicy?view=powershell-7.3 author: Nasreddine Bencherchali (Nextron Systems) date: 2023/01/11 -modified: 2023/10/18 +modified: 2023/12/14 tags: - attack.defense_evasion - sysmon @@ -31,7 +31,6 @@ detection: - \Policies\Microsoft\Windows\PowerShell\ExecutionPolicy Details|contains: - Bypass - - RemoteSigned - Unrestricted filter_main_svchost: Image|contains: diff --git a/sigma/sysmon/registry/registry_set/registry_set_susp_reg_persist_explorer_run.yml b/sigma/sysmon/registry/registry_set/registry_set_susp_reg_persist_explorer_run.yml index 6041af981..19bee4c54 100644 --- a/sigma/sysmon/registry/registry_set/registry_set_susp_reg_persist_explorer_run.yml +++ b/sigma/sysmon/registry/registry_set/registry_set_susp_reg_persist_explorer_run.yml @@ -7,7 +7,7 @@ references: - https://researchcenter.paloaltonetworks.com/2018/07/unit42-upatre-continues-evolve-new-anti-analysis-techniques/ author: Florian Roth (Nextron Systems), oscd.community date: 2018/07/18 -modified: 2023/08/17 +modified: 2023/12/11 tags: - attack.persistence - attack.t1547.001 @@ -21,19 +21,15 @@ detection: Channel: Microsoft-Windows-Sysmon/Operational selection: TargetObject|endswith: \Microsoft\Windows\CurrentVersion\Policies\Explorer\Run - selection2: - - Details|startswith: - - C:\Windows\Temp\ - - C:\ProgramData\ - - C:\$Recycle.bin\ - - C:\Temp\ - - C:\Users\Public\ - - C:\Users\Default\ - - Details|contains: \AppData\ - condition: registry_set and (selection and selection2) -fields: - - Image - - ParentImage + Details|contains: + - :\$Recycle.bin\ + - :\ProgramData\ + - :\Temp\ + - :\Users\Default\ + - :\Users\Public\ + - :\Windows\Temp\ + - \AppData\Local\Temp\ + condition: registry_set and selection falsepositives: - Unknown level: high diff --git a/sigma/sysmon/registry/registry_set/registry_set_susp_run_key_img_folder.yml b/sigma/sysmon/registry/registry_set/registry_set_susp_run_key_img_folder.yml index 4a7159558..2a1fc6e13 100644 --- a/sigma/sysmon/registry/registry_set/registry_set_susp_run_key_img_folder.yml +++ b/sigma/sysmon/registry/registry_set/registry_set_susp_run_key_img_folder.yml @@ -7,7 +7,7 @@ references: - https://www.fireeye.com/blog/threat-research/2018/08/fin7-pursuing-an-enigmatic-and-evasive-global-criminal-operation.html author: Florian Roth (Nextron Systems), Markus Neis, Sander Wiebing date: 2018/08/25 -modified: 2023/08/17 +modified: 2023/12/11 tags: - attack.persistence - attack.t1547.001 @@ -25,12 +25,12 @@ detection: - \SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ selection_details: - Details|contains: - - C:\Windows\Temp\ - - C:\$Recycle.bin\ - - C:\Temp\ - - C:\Users\Public\ - - C:\Users\Default\ - - C:\Users\Desktop\ + - :\$Recycle.bin\ + - :\Temp\ + - :\Users\Default\ + - :\Users\Desktop\ + - :\Users\Public\ + - :\Windows\Temp\ - \AppData\Local\Temp\ - '%temp%\' - '%tmp%\' diff --git a/sigma/sysmon/file/file_event/file_event_win_dump_file_creation.yml b/sigma/sysmon/threat-hunting/file/file_event/file_event_win_dump_file_creation.yml similarity index 96% rename from sigma/sysmon/file/file_event/file_event_win_dump_file_creation.yml rename to sigma/sysmon/threat-hunting/file/file_event/file_event_win_dump_file_creation.yml index a7b3c9bf3..292da8e4e 100644 --- a/sigma/sysmon/file/file_event/file_event_win_dump_file_creation.yml +++ b/sigma/sysmon/threat-hunting/file/file_event/file_event_win_dump_file_creation.yml @@ -10,6 +10,7 @@ author: Nasreddine Bencherchali (Nextron Systems) date: 2023/09/07 tags: - attack.defense_evasion + - detection.threat_hunting - sysmon logsource: category: file_event diff --git a/sigma/sysmon/image_load/image_load_dll_amsi_uncommon_process.yml b/sigma/sysmon/threat-hunting/image_load/image_load_dll_amsi_uncommon_process.yml similarity index 64% rename from sigma/sysmon/image_load/image_load_dll_amsi_uncommon_process.yml rename to sigma/sysmon/threat-hunting/image_load/image_load_dll_amsi_uncommon_process.yml index 7ef5e3e82..6f167da7f 100644 --- a/sigma/sysmon/image_load/image_load_dll_amsi_uncommon_process.yml +++ b/sigma/sysmon/threat-hunting/image_load/image_load_dll_amsi_uncommon_process.yml @@ -8,11 +8,12 @@ references: - https://github.com/surya-dev-singh/AmsiBypass-OpenSession author: frack113 date: 2023/03/12 -modified: 2023/06/01 +modified: 2023/12/18 tags: - attack.defense_evasion - attack.impact - attack.t1490 + - detection.threat_hunting - sysmon logsource: category: image_load @@ -24,29 +25,29 @@ detection: selection: ImageLoaded|endswith: \amsi.dll filter_main_exact: - Image: - - C:\Windows\explorer.exe - - C:\Windows\Sysmon64.exe + Image|endswith: + - :\Windows\explorer.exe + - :\Windows\Sysmon64.exe filter_main_generic: - Image|startswith: - - C:\Program Files (x86)\ - - C:\Program Files\ - - C:\Windows\System32\ - - C:\Windows\SysWOW64\ - - C:\Windows\WinSxS\ + Image|contains: + - :\Program Files (x86)\ + - :\Program Files\ + - :\Windows\System32\ + - :\Windows\SysWOW64\ + - :\Windows\WinSxS\ filter_optional_defender: - Image|startswith: C:\ProgramData\Microsoft\Windows Defender\Platform\ + Image|contains: :\ProgramData\Microsoft\Windows Defender\Platform\ Image|endswith: \MsMpEng.exe filter_main_dotnet: - Image|startswith: - - C:\Windows\Microsoft.NET\Framework\ - - C:\Windows\Microsoft.NET\Framework64\ + Image|contains: + - :\Windows\Microsoft.NET\Framework\ + - :\Windows\Microsoft.NET\Framework64\ Image|endswith: \ngentask.exe filter_main_null: Image: null filter_main_empty: Image: '' - condition: image_load and (selection and not 1 of filter_*) + condition: image_load and (selection and not 1 of filter_main_* and not 1 of filter_optional_*) falsepositives: - Legitimate third party apps installed in "ProgramData" and "AppData" might generate some false positives. Apply additional filters accordingly diff --git a/sigma/sysmon/image_load/image_load_wmi_module_load_by_uncommon_process.yml b/sigma/sysmon/threat-hunting/image_load/image_load_wmi_module_load_by_uncommon_process.yml similarity index 86% rename from sigma/sysmon/image_load/image_load_wmi_module_load_by_uncommon_process.yml rename to sigma/sysmon/threat-hunting/image_load/image_load_wmi_module_load_by_uncommon_process.yml index dd371d0d1..e99baab38 100644 --- a/sigma/sysmon/image_load/image_load_wmi_module_load_by_uncommon_process.yml +++ b/sigma/sysmon/threat-hunting/image_load/image_load_wmi_module_load_by_uncommon_process.yml @@ -1,15 +1,16 @@ -title: WMI Module Loaded By Non Uncommon Process +title: WMI Module Loaded By Uncommon Process id: 671bb7e3-a020-4824-a00e-2ee5b55f385e status: test -description: Detects a WMI modules being loaded by an uncommon process +description: Detects WMI modules being loaded by an uncommon process references: - https://threathunterplaybook.com/hunts/windows/190811-WMIModuleLoad/notebook.html author: Roberto Rodriguez @Cyb3rWard0g date: 2019/08/10 -modified: 2023/11/27 +modified: 2023/12/11 tags: - attack.execution - attack.t1047 + - detection.threat_hunting - sysmon logsource: category: image_load @@ -31,13 +32,13 @@ detection: - \wmiutils.dll filter_main_generic: Image|contains: + - :\Program Files (x86)\ + - :\Program Files\ - :\Windows\explorer.exe - - :\Windows\Sysmon.exe - - :\Windows\Sysmon64.exe + - :\Windows\Microsoft.NET\Framework\ + - :\Windows\Microsoft.NET\Framework64\ - :\Windows\System32\ - :\Windows\SysWOW64\ - - \Microsoft\Teams\current\Teams.exe - - \Microsoft\Teams\Update.exe filter_optional_other: Image|endswith: - \WindowsAzureGuestAgent.exe @@ -48,15 +49,14 @@ detection: - \thor64.exe filter_optional_defender: Image|endswith: \MsMpEng.exe - filter_optional_dotnet: - Image|contains: - - :\Windows\Microsoft.NET\Framework\ - - :\Windows\Microsoft.NET\Framework64\ - Image|endswith: \ngentask.exe - filter_optional_programfiles: + filter_optional_teams: Image|contains: - - :\Program Files\ - - :\Program Files (x86)\ + - \Microsoft\Teams\current\Teams.exe + - \Microsoft\Teams\Update.exe + filter_optional_sysmon: + Image|endswith: + - :\Windows\Sysmon.exe + - :\Windows\Sysmon64.exe condition: image_load and (selection and not 1 of filter_main_* and not 1 of filter_optional_*) falsepositives: - Unknown diff --git a/sigma/sysmon/process_access/proc_access_win_lsass_uncommon_access_flag.yml b/sigma/sysmon/threat-hunting/process_access/proc_access_win_lsass_uncommon_access_flag.yml similarity index 99% rename from sigma/sysmon/process_access/proc_access_win_lsass_uncommon_access_flag.yml rename to sigma/sysmon/threat-hunting/process_access/proc_access_win_lsass_uncommon_access_flag.yml index 3b747012a..a0d43651b 100644 --- a/sigma/sysmon/process_access/proc_access_win_lsass_uncommon_access_flag.yml +++ b/sigma/sysmon/threat-hunting/process_access/proc_access_win_lsass_uncommon_access_flag.yml @@ -19,6 +19,7 @@ tags: - attack.credential_access - attack.t1003.001 - attack.s0002 + - detection.threat_hunting - sysmon logsource: category: process_access diff --git a/sigma/sysmon/process_creation/proc_creation_win_office_svchost_parent.yml b/sigma/sysmon/threat-hunting/process_creation/proc_creation_win_office_svchost_parent.yml similarity index 93% rename from sigma/sysmon/process_creation/proc_creation_win_office_svchost_parent.yml rename to sigma/sysmon/threat-hunting/process_creation/proc_creation_win_office_svchost_parent.yml index 99f77a04f..9e99eb934 100644 --- a/sigma/sysmon/process_creation/proc_creation_win_office_svchost_parent.yml +++ b/sigma/sysmon/threat-hunting/process_creation/proc_creation_win_office_svchost_parent.yml @@ -14,10 +14,11 @@ references: - https://github.com/med0x2e/vba2clr author: Nasreddine Bencherchali (Nextron Systems) date: 2022/10/13 -modified: 2023/02/04 +modified: 2023/12/19 tags: - attack.execution - attack.defense_evasion + - detection.threat_hunting - sysmon logsource: product: windows @@ -29,14 +30,14 @@ detection: selection: ParentImage|endswith: \svchost.exe Image|endswith: - - \winword.exe + - \eqnedt32.exe - \excel.exe - - \powerpnt.exe - \msaccess.exe - \mspub.exe - - \eqnedt32.exe + - \powerpnt.exe - \visio.exe - condition: process_creation and (all of selection*) + - \winword.exe + condition: process_creation and selection falsepositives: - Legitimate usage of office automation via scripting level: medium diff --git a/sigma/sysmon/threat-hunting/process_creation/proc_creation_win_susp_elevated_system_shell.yml b/sigma/sysmon/threat-hunting/process_creation/proc_creation_win_susp_elevated_system_shell.yml new file mode 100644 index 000000000..2ad637111 --- /dev/null +++ b/sigma/sysmon/threat-hunting/process_creation/proc_creation_win_susp_elevated_system_shell.yml @@ -0,0 +1,48 @@ +title: Elevated System Shell Spawned +id: 61065c72-5d7d-44ef-bf41-6a36684b545f +related: + - id: 178e615d-e666-498b-9630-9ed363038101 + type: similar +status: experimental +description: 'Detects when a shell program such as the Windows command prompt or PowerShell + is launched with system privileges. Use this rule to hunt for potential suspicious + processes. + + ' +references: + - https://github.com/Wh04m1001/SysmonEoP +author: Nasreddine Bencherchali (Nextron Systems), frack113 +date: 2023/11/23 +tags: + - attack.privilege_escalation + - attack.defense_evasion + - attack.execution + - attack.t1059 + - detection.threat_hunting + - sysmon +logsource: + product: windows + category: process_creation +detection: + process_creation: + EventID: 1 + Channel: Microsoft-Windows-Sysmon/Operational + selection_shell: + - Image|endswith: + - \powershell.exe + - \pwsh.exe + - \cmd.exe + - OriginalFileName: + - PowerShell.EXE + - pwsh.dll + - Cmd.Exe + selection_user: + User|contains: + - AUTHORI + - AUTORI + LogonId: '0x3e7' + condition: process_creation and (all of selection_*) +falsepositives: + - Unknown +level: medium +ruletype: Sigma