Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
90s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30/01/2023, 12:25
Behavioral task
behavioral1
Sample
HuyNTVideo.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
HuyNTVideo.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
out.exe
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
out.exe
Resource
win10v2004-20221111-en
General
-
Target
HuyNTVideo.exe
-
Size
314.8MB
-
MD5
2537d96011fc12adbd3814700f73ba86
-
SHA1
77c0870b22138eac4e44f559e2f684c58d53c345
-
SHA256
5049de4c58ea923723389e4d732f1c134dc38582971f4872593e1153db945078
-
SHA512
c6883ff0c119f1ea6cbdbdcb7d10dc54200fccc4e52f0f8e31beb1107658342a1d35495696e818b0f4d64dabef2a11435ca5fe9930d17d9d936ddf663fdbbc19
-
SSDEEP
393216:BgwQpSMi96IB8AQPjluYUtoOOzSpVM5EKg70xV3DAii:BgwQpVi96JAQMAcbc/i
Malware Config
Signatures
-
Executes dropped EXE 1 IoCs
pid Process 2976 MicrosofOffice.exe -
resource yara_rule behavioral2/memory/4500-132-0x00007FF637F50000-0x00007FF638013000-memory.dmp upx behavioral2/memory/4500-200-0x00007FF637F50000-0x00007FF638013000-memory.dmp upx behavioral2/memory/4500-201-0x00007FF637F50000-0x00007FF638013000-memory.dmp upx -
Drops startup file 1 IoCs
description ioc Process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MS Excel.exe MicrosofOffice.exe -
Loads dropped DLL 44 IoCs
pid Process 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe 2976 MicrosofOffice.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2976 MicrosofOffice.exe -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 4500 wrote to memory of 2976 4500 HuyNTVideo.exe 79 PID 4500 wrote to memory of 2976 4500 HuyNTVideo.exe 79 PID 2976 wrote to memory of 4640 2976 MicrosofOffice.exe 80 PID 2976 wrote to memory of 4640 2976 MicrosofOffice.exe 80 PID 2976 wrote to memory of 4632 2976 MicrosofOffice.exe 84 PID 2976 wrote to memory of 4632 2976 MicrosofOffice.exe 84
Processes
-
C:\Users\Admin\AppData\Local\Temp\HuyNTVideo.exe"C:\Users\Admin\AppData\Local\Temp\HuyNTVideo.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4500 -
C:\Users\Admin\AppData\Local\Temp\onefile_4500_133195608778429698\MicrosofOffice.exe"C:\Users\Admin\AppData\Local\Temp\HuyNTVideo.exe"2⤵
- Executes dropped EXE
- Drops startup file
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2976 -
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"3⤵PID:4640
-
-
C:\Windows\system32\arp.exeC:\Windows\system32\arp.exe -a 10.127.0.773⤵PID:4632
-
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
13KB
MD5f2ca4a6e2407bcf67377d03f98142cd6
SHA1fff1a5250dda2b049e86b01990de6b5808df0241
SHA256c97cdcf64732821d8308627f0488b7259abb6a382027bdc2edfc92a9b170826a
SHA5128859533a4004d04056abde4e471b4cf92d5d3a8f8c5722854937d2a7235500834e0081a9034e0e4840728d3e1ebd139a814cc9a0171278e98384dae1fffeb603
-
Filesize
12KB
MD5e8af5bdf9b56fc0dc73007467484aecc
SHA115a446ce13abcda72276c77a82fccc83c51e7a17
SHA256784b715e8b281e7ff4e427043828bec8765acf36d152a48e37692c8296445d46
SHA512f03406130cd6402bd04f999e5ef5429fca28f0791f2e7a38ce867631e1758ad848e06ebaa975f4731c3d4df44b500eb41479b0c4d3d28e52a5f307e0b09db833
-
Filesize
13KB
MD57d405981c46bbc578bf46ee2fdd3079c
SHA1e93869e798812ab850c4fde58d152f989f5ecd38
SHA256d90115ed4dac2871c94ad732d312d767df0d0c2d63aaeed880fc85db7d53d963
SHA512e3c7375ea8294ae7abe3cbf82c1cdd86ae89591046e36e23448628c1c6ed84c952837b1cde650e482fb68850ec93d15d6818ce629c8797820d1f9840a395057a
-
Filesize
14KB
MD5335f119a67efd51c2d6fd959915ffbb3
SHA1b7d69a873ce9747528c977c87a1f1cec870fc094
SHA2569c149aade4e4a724c3945fed423300c41bb77ceebf61c9acf29d1b97d98260a2
SHA512285494499a16267abc0be756cb6ef9012ec8b26960f1d4c72ef950f6fee783144dfb4a6ea5b5788a444dbd7c93e084369fdf1012a2140fb90d17f8f46a3b92e1
-
Filesize
10KB
MD57435accde789b701a1df37462cc4e1ed
SHA17b3c8207f8a699cd2cd9428cd9740490555f7eed
SHA25637a05109296a76194baa7bb7473cdb032a83b73b4c5b2d5f67d93a35ab97b9b6
SHA512f9c5ca857be746ddc0587fe28d05840e9d72255f1ed001a74a0f8d25f97e5516d9e6ae3f58c8022832d663810969202efbe5d9dbdc40a1d4ab82f8fcd0bba67b
-
Filesize
12KB
MD549d3bc1462b7ee111103a0d15b90ff96
SHA1231f9e03eabe4169f66c6da0a71ac39d67e62b2e
SHA256d2634c15a52b56868f9231a5aaf22f17367746a9991a0eb22fff0f6af0b9caa0
SHA512cb85a2b0e89999ad55fcb2bba17d077cf5bf521b36ddd1c6fc46b01abdee00d686fa7a8874fce4c71d6bce9e62192b6c555b6977dad5f3621877e2fe60b68875
-
Filesize
14KB
MD5f299e2c1a3358bf676b7be3a81faf605
SHA18629e0e64d171613209b6bf351fa5d9281289e7b
SHA2566d03317222918284cd35d6851a073396a48dc4eb7981e801be2eb34de7cf9a02
SHA512bfa6cb0bc1b6c739943c6a0c5451f7dc67893439f2230bab7222acf6de9f2f40d9ce75fbef45d0d06a1de1041fa1760695b4e5c9c76907a2ec0131efc5e4af4a
-
Filesize
15KB
MD546014049d0c4b36e88138a858081207e
SHA12134cca129c14c439a2daa848e26eb9896d13ef0
SHA25660f717768ca9114fcc389baa37e33274e7c029e36bb1c3a32877df34205cd508
SHA512ebc15dff1ea02ba0b26619860cd6a33ec07b52fd8edcf877a266cc22e1c3b379c39a6cdd646cfb1a963ddeedf53a4cdbe36dc2828daf0009363a73a3c6051dcb
-
Filesize
17KB
MD5aeaa5ba622eb338b56061c6e01995b92
SHA13804ab47e89a73913070959019be94028b19e960
SHA256d5f9dfcb8bbae31f12960d1ab4fe54786d42529990cdb8c18446c9ae370ca038
SHA512e10a6ed626b5fe2888e82514d694804d9990526b64a6244c3ba426b84c527ddcde5ec5ec802431910d655875dfa532f10d89fd319451ea0d9a98e40ddeda9527
-
Filesize
21KB
MD51b646b2cb599f2b873737ab041fe7681
SHA1bbef9015f6beac1409cd4560b304f927eaca0ba0
SHA25610a511b1077952c40be8af99db5a2bba5589f99e1fe727623bd0be1bba24bce7
SHA5126bfc596f7a916d28058d6db8c66a6d12700a4a36a276e7a707c3a448de0e46f8120bb1f62adbdc5572b4b53e7d779f9532237a6ed0f7d6c4ad2ba85bb64a511f
-
Filesize
12KB
MD5f5735d559f34a1a247bfe335f3a65f67
SHA1c1fb50c084c136f6ed93b210ec540d2bd34e5b91
SHA25668888bff8e766bd17b02bf4b75b8071865c1b21362c00c44fad60a88ffad6f48
SHA512a9dc71b4c450832e62f5530033b0812959f3cbb582bcc5fb0eecba4b117c878a5e7281a0e46e11f3d405205a5f4bf130e88d71aa7e9c72fe928175168c4f664c
-
Filesize
10KB
MD5b2c388ce98d5b5e7b276c2ddd5e6f825
SHA1ef4e8a5537e583679359acb167354c8bb137ab29
SHA256741025596ebf9b2dbaa0b769aaf9cfe160d146507fee01456ef11b7a6d4cd417
SHA5125d3850b10ef7726f94642dc7747ae1632ba1319ff82174a39b65148b51f2f8934691986e88b943dfd5929c432eee7b6a020df20f42137c02bd68940144c62f2d
-
Filesize
81KB
MD5bbe89cf70b64f38c67b7bf23c0ea8a48
SHA144577016e9c7b463a79b966b67c3ecc868957470
SHA256775fbc6e9a4c7e9710205157350f3d6141b5a9e8f44cb07b3eac38f2789c8723
SHA5123ee72ba60541116bbca1a62db64074276d40ad8ed7d0ca199a9c51d65c3f0762a8ef6d0e1e9ebf04bf4efe1347f120e4bc3d502dd288339b4df646a59aad0ec1
-
Filesize
177KB
MD56f1b90884343f717c5dc14f94ef5acea
SHA1cca1a4dcf7a32bf698e75d58c5f130fb3572e423
SHA2562093e7e4f5359b38f0819bdef8314fda332a1427f22e09afc416e1edd5910fe1
SHA512e2c673b75162d3432bab497bad3f5f15a9571910d25f1dffb655755c74457ac78e5311bd5b38d29a91aec4d3ef883ae5c062b9a3255b5800145eb997863a7d73
-
Filesize
60KB
MD5d856a545a960bf2dca1e2d9be32e5369
SHA167a15ecf763cdc2c2aa458a521db8a48d816d91e
SHA256cd33f823e608d3bda759ad441f583a20fc0198119b5a62a8964f172559acb7d3
SHA51234a074025c8b28f54c01a7fd44700fdedb391f55be39d578a003edb90732dec793c2b0d16da3da5cdbd8adbaa7b3b83fc8887872e284800e7a8389345a30a6a4
-
Filesize
153KB
MD50a94c9f3d7728cf96326db3ab3646d40
SHA18081df1dca4a8520604e134672c4be79eb202d14
SHA2560a70e8546fa6038029f2a3764e721ceebea415818e5f0df6b90d6a40788c3b31
SHA5126f047f3bdaead121018623f52a35f7e8b38c58d3a9cb672e8056a5274d02395188975de08cabae948e2cc2c1ca01c74ca7bc1b82e2c23d652e952f3745491087
-
Filesize
29KB
MD552d0a6009d3de40f4fa6ec61db98c45c
SHA15083a2aff5bcce07c80409646347c63d2a87bd25
SHA256007bcf19d9b036a7e73f5ef31f39bfb1910f72c9c10e4a1b0658352cfe7a8b75
SHA512cd552a38efaa8720a342b60318f62320ce20c03871d2e50d3fa3a9a730b84dacdbb8eb4d0ab7a1c8a97215b537826c8dc532c9a55213bcd0c1d13d7d8a9ad824
-
Filesize
75KB
MD50f5e64e33f4d328ef11357635707d154
SHA18b6dcb4b9952b362f739a3f16ae96c44bea94a0e
SHA2568af6d70d44bb9398733f88bcfb6d2085dd1a193cd00e52120b96a651f6e35ebe
SHA5124be9febb583364da75b6fb3a43a8b50ee29ca8fc1dda35b96c0fcc493342372f69b4f27f2604888bca099c8d00f38a16f4c9463c16eff098227d812c29563643
-
Filesize
95KB
MD59f38f603bd8f7559609c4ffa47f23c86
SHA18b0136fc2506c1ccef2009db663e4e7006e23c92
SHA25628090432a18b59eb8cbe8fdcf11a277420b404007f31ca571321488a43b96319
SHA512273a19f2f609bede9634dae7c47d7b28d369c88420b2b62d42858b1268d6c19b450d83877d2dba241e52755a3f67a87f63fea8e5754831c86d16e2a8f214ad72
-
Filesize
155KB
MD59ddb64354ef0b91c6999a4b244a0a011
SHA186a9dc5ea931638699eb6d8d03355ad7992d2fee
SHA256e33b7a4aa5cdd5462ee66830636fdd38048575a43d06eb7e2f688358525ddeab
SHA5124c86478861fa4220680a94699e7d55fbdc90d2785caee10619cecb058f833292ee7c3d6ac2ed1ef34b38fbff628b79d672194a337701727a54bb6bbc5bf9aeca
-
Filesize
3.3MB
MD56f4b8eb45a965372156086201207c81f
SHA18278f9539463f0a45009287f0516098cb7a15406
SHA256976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541
SHA5122c5c54842aba9c82fb9e7594ae9e264ac3cbdc2cc1cd22263e9d77479b93636799d0f28235ac79937070e40b04a097c3ea3b7e0cd4376a95ed8ca90245b7891f
-
Filesize
686KB
MD58769adafca3a6fc6ef26f01fd31afa84
SHA138baef74bdd2e941ccd321f91bfd49dacc6a3cb6
SHA2562aebb73530d21a2273692a5a3d57235b770daf1c35f60c74e01754a5dac05071
SHA512fac22f1a2ffbfb4789bdeed476c8daf42547d40efe3e11b41fadbc4445bb7ca77675a31b5337df55fdeb4d2739e0fb2cbcac2feabfd4cd48201f8ae50a9bd90b
-
Filesize
75KB
MD55e9fc79283d08421683cb9e08ae5bf15
SHA1b3021534d2647d90cd6d445772d2e362a04d5ddf
SHA256d5685e38faccdf97ce6ffe4cf53cbfcf48bb20bf83abe316fba81d1abd093cb6
SHA5129133011ae8eb0110da9f72a18d26bbc57098a74983af8374d1247b9a336ee32db287ed26f4d010d31a7d64eacdc9cf99a75faab194eff25b04299e5761af1a79
-
Filesize
63KB
MD5c17b7a4b853827f538576f4c3521c653
SHA16115047d02fbbad4ff32afb4ebd439f5d529485a
SHA256d21e60f3dfbf2bab0cc8a06656721fa3347f026df10297674fc635ebf9559a68
SHA5128e08e702d69df6840781d174c4565e14a28022b40f650fda88d60172be2d4ffd96a3e9426d20718c54072ca0da27e0455cc0394c098b75e062a27559234a3df7
-
Filesize
134KB
MD5a44f3026baf0b288d7538c7277ddaf41
SHA1c23fbdd6a1b0dc69753a00108dce99d7ec7f5ee3
SHA2562984df073a029acf46bcaed4aa868c509c5129555ed70cac0fe2235abdba6e6d
SHA5129699a2629f9f8c74a7d078ae10c9ffe5f30b29c4a2c92d3fcd2096dc2edceb71c59fd84e9448bb0c2fb970e2f4ade8b3c233ebf673c47d83ae40d12a2317ca98
-
Filesize
28KB
MD5c119811a40667dca93dfe6faa418f47a
SHA1113e792b7dcec4366fc273e80b1fc404c309074c
SHA2568f27cd8c5071cb740a2191b3c599e99595b121f461988166f07d9f841e7116b7
SHA512107257dbd8cf2607e4a1c7bef928a6f61ebdfc21be1c4bdc3a649567e067e9bb7ea40c0ac8844d2cedd08682447b963148b52f85adb1837f243df57af94c04b3
-
Filesize
1.4MB
MD5aaf9fd98bc2161ad7dff996450173a3b
SHA1ab634c09b60aa18ea165084a042d917b65d1fe85
SHA256f1e8b6c4d61ac6a320fa2566da9391fbfd65a5ac34ac2e2013bc37c8b7b41592
SHA512597ffe3c2f0966ab94fbb7ecac27160c691f4a07332311f6a9baf8dec8b16fb16ec64df734c3bdbabf2c0328699e234d14f1b8bd5ac951782d35ea0c78899e5f
-
Filesize
1.1MB
MD54c8af8a30813e9380f5f54309325d6b8
SHA1169a80d8923fb28f89bc26ebf89ffe37f8545c88
SHA2564b6e3ba734c15ec789b5d7469a5097bd082bdfd8e55e636ded0d097cf6511e05
SHA512ea127779901b10953a2bf9233e20a4fab2fba6f97d7baf40c1b314b7cd03549e0f4d2fb9bad0fbc23736e21eb391a418d79a51d64402245c1cd8899e4d765c5a
-
Filesize
128KB
MD5e1f9fa54df00f36f17c2fabd135a8035
SHA15a83d32262381f11442cea84168e0705c0109986
SHA256e8af0bb8d611ee98573bc43f67e6d178a0eb8ad4204b0cd4aa3b09b2171876f9
SHA512fbc4a4fc03abda5079f6eba0843a7952926f517a0fa749307f4b74b45562425eecec041479fbb9d92e5cbda95b1993cc555e275ab8a73665df4a4ef71a826560
-
Filesize
13KB
MD5f2ca4a6e2407bcf67377d03f98142cd6
SHA1fff1a5250dda2b049e86b01990de6b5808df0241
SHA256c97cdcf64732821d8308627f0488b7259abb6a382027bdc2edfc92a9b170826a
SHA5128859533a4004d04056abde4e471b4cf92d5d3a8f8c5722854937d2a7235500834e0081a9034e0e4840728d3e1ebd139a814cc9a0171278e98384dae1fffeb603
-
Filesize
12KB
MD5e8af5bdf9b56fc0dc73007467484aecc
SHA115a446ce13abcda72276c77a82fccc83c51e7a17
SHA256784b715e8b281e7ff4e427043828bec8765acf36d152a48e37692c8296445d46
SHA512f03406130cd6402bd04f999e5ef5429fca28f0791f2e7a38ce867631e1758ad848e06ebaa975f4731c3d4df44b500eb41479b0c4d3d28e52a5f307e0b09db833
-
Filesize
13KB
MD57d405981c46bbc578bf46ee2fdd3079c
SHA1e93869e798812ab850c4fde58d152f989f5ecd38
SHA256d90115ed4dac2871c94ad732d312d767df0d0c2d63aaeed880fc85db7d53d963
SHA512e3c7375ea8294ae7abe3cbf82c1cdd86ae89591046e36e23448628c1c6ed84c952837b1cde650e482fb68850ec93d15d6818ce629c8797820d1f9840a395057a
-
Filesize
14KB
MD5335f119a67efd51c2d6fd959915ffbb3
SHA1b7d69a873ce9747528c977c87a1f1cec870fc094
SHA2569c149aade4e4a724c3945fed423300c41bb77ceebf61c9acf29d1b97d98260a2
SHA512285494499a16267abc0be756cb6ef9012ec8b26960f1d4c72ef950f6fee783144dfb4a6ea5b5788a444dbd7c93e084369fdf1012a2140fb90d17f8f46a3b92e1
-
Filesize
10KB
MD57435accde789b701a1df37462cc4e1ed
SHA17b3c8207f8a699cd2cd9428cd9740490555f7eed
SHA25637a05109296a76194baa7bb7473cdb032a83b73b4c5b2d5f67d93a35ab97b9b6
SHA512f9c5ca857be746ddc0587fe28d05840e9d72255f1ed001a74a0f8d25f97e5516d9e6ae3f58c8022832d663810969202efbe5d9dbdc40a1d4ab82f8fcd0bba67b
-
Filesize
12KB
MD549d3bc1462b7ee111103a0d15b90ff96
SHA1231f9e03eabe4169f66c6da0a71ac39d67e62b2e
SHA256d2634c15a52b56868f9231a5aaf22f17367746a9991a0eb22fff0f6af0b9caa0
SHA512cb85a2b0e89999ad55fcb2bba17d077cf5bf521b36ddd1c6fc46b01abdee00d686fa7a8874fce4c71d6bce9e62192b6c555b6977dad5f3621877e2fe60b68875
-
Filesize
14KB
MD5f299e2c1a3358bf676b7be3a81faf605
SHA18629e0e64d171613209b6bf351fa5d9281289e7b
SHA2566d03317222918284cd35d6851a073396a48dc4eb7981e801be2eb34de7cf9a02
SHA512bfa6cb0bc1b6c739943c6a0c5451f7dc67893439f2230bab7222acf6de9f2f40d9ce75fbef45d0d06a1de1041fa1760695b4e5c9c76907a2ec0131efc5e4af4a
-
Filesize
15KB
MD546014049d0c4b36e88138a858081207e
SHA12134cca129c14c439a2daa848e26eb9896d13ef0
SHA25660f717768ca9114fcc389baa37e33274e7c029e36bb1c3a32877df34205cd508
SHA512ebc15dff1ea02ba0b26619860cd6a33ec07b52fd8edcf877a266cc22e1c3b379c39a6cdd646cfb1a963ddeedf53a4cdbe36dc2828daf0009363a73a3c6051dcb
-
Filesize
17KB
MD5aeaa5ba622eb338b56061c6e01995b92
SHA13804ab47e89a73913070959019be94028b19e960
SHA256d5f9dfcb8bbae31f12960d1ab4fe54786d42529990cdb8c18446c9ae370ca038
SHA512e10a6ed626b5fe2888e82514d694804d9990526b64a6244c3ba426b84c527ddcde5ec5ec802431910d655875dfa532f10d89fd319451ea0d9a98e40ddeda9527
-
Filesize
21KB
MD51b646b2cb599f2b873737ab041fe7681
SHA1bbef9015f6beac1409cd4560b304f927eaca0ba0
SHA25610a511b1077952c40be8af99db5a2bba5589f99e1fe727623bd0be1bba24bce7
SHA5126bfc596f7a916d28058d6db8c66a6d12700a4a36a276e7a707c3a448de0e46f8120bb1f62adbdc5572b4b53e7d779f9532237a6ed0f7d6c4ad2ba85bb64a511f
-
Filesize
12KB
MD5f5735d559f34a1a247bfe335f3a65f67
SHA1c1fb50c084c136f6ed93b210ec540d2bd34e5b91
SHA25668888bff8e766bd17b02bf4b75b8071865c1b21362c00c44fad60a88ffad6f48
SHA512a9dc71b4c450832e62f5530033b0812959f3cbb582bcc5fb0eecba4b117c878a5e7281a0e46e11f3d405205a5f4bf130e88d71aa7e9c72fe928175168c4f664c
-
Filesize
10KB
MD5b2c388ce98d5b5e7b276c2ddd5e6f825
SHA1ef4e8a5537e583679359acb167354c8bb137ab29
SHA256741025596ebf9b2dbaa0b769aaf9cfe160d146507fee01456ef11b7a6d4cd417
SHA5125d3850b10ef7726f94642dc7747ae1632ba1319ff82174a39b65148b51f2f8934691986e88b943dfd5929c432eee7b6a020df20f42137c02bd68940144c62f2d
-
Filesize
25.4MB
MD56bf1c18a736e35458f189db5af5892b1
SHA1c447e9badcbd73ae73d3b45b90e426a65cc3ffcd
SHA25631ff983931b25478666c62efb57fa4bb01da57594b8bf6c4d9f5c579a9d3b849
SHA51266588eb7f98235914d709a9f66f5015b5fc25f52fbf415927778a509689799526c8e64f1c66b6af9128486dc1f9f3ba2d6dab32d82fc33497d74ea508ce04156
-
Filesize
106KB
MD5870fea4e961e2fbd00110d3783e529be
SHA1a948e65c6f73d7da4ffde4e8533c098a00cc7311
SHA25676fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644
SHA5120b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88
-
Filesize
81KB
MD5bbe89cf70b64f38c67b7bf23c0ea8a48
SHA144577016e9c7b463a79b966b67c3ecc868957470
SHA256775fbc6e9a4c7e9710205157350f3d6141b5a9e8f44cb07b3eac38f2789c8723
SHA5123ee72ba60541116bbca1a62db64074276d40ad8ed7d0ca199a9c51d65c3f0762a8ef6d0e1e9ebf04bf4efe1347f120e4bc3d502dd288339b4df646a59aad0ec1
-
Filesize
177KB
MD56f1b90884343f717c5dc14f94ef5acea
SHA1cca1a4dcf7a32bf698e75d58c5f130fb3572e423
SHA2562093e7e4f5359b38f0819bdef8314fda332a1427f22e09afc416e1edd5910fe1
SHA512e2c673b75162d3432bab497bad3f5f15a9571910d25f1dffb655755c74457ac78e5311bd5b38d29a91aec4d3ef883ae5c062b9a3255b5800145eb997863a7d73
-
Filesize
60KB
MD5d856a545a960bf2dca1e2d9be32e5369
SHA167a15ecf763cdc2c2aa458a521db8a48d816d91e
SHA256cd33f823e608d3bda759ad441f583a20fc0198119b5a62a8964f172559acb7d3
SHA51234a074025c8b28f54c01a7fd44700fdedb391f55be39d578a003edb90732dec793c2b0d16da3da5cdbd8adbaa7b3b83fc8887872e284800e7a8389345a30a6a4
-
Filesize
153KB
MD50a94c9f3d7728cf96326db3ab3646d40
SHA18081df1dca4a8520604e134672c4be79eb202d14
SHA2560a70e8546fa6038029f2a3764e721ceebea415818e5f0df6b90d6a40788c3b31
SHA5126f047f3bdaead121018623f52a35f7e8b38c58d3a9cb672e8056a5274d02395188975de08cabae948e2cc2c1ca01c74ca7bc1b82e2c23d652e952f3745491087
-
Filesize
29KB
MD552d0a6009d3de40f4fa6ec61db98c45c
SHA15083a2aff5bcce07c80409646347c63d2a87bd25
SHA256007bcf19d9b036a7e73f5ef31f39bfb1910f72c9c10e4a1b0658352cfe7a8b75
SHA512cd552a38efaa8720a342b60318f62320ce20c03871d2e50d3fa3a9a730b84dacdbb8eb4d0ab7a1c8a97215b537826c8dc532c9a55213bcd0c1d13d7d8a9ad824
-
Filesize
75KB
MD50f5e64e33f4d328ef11357635707d154
SHA18b6dcb4b9952b362f739a3f16ae96c44bea94a0e
SHA2568af6d70d44bb9398733f88bcfb6d2085dd1a193cd00e52120b96a651f6e35ebe
SHA5124be9febb583364da75b6fb3a43a8b50ee29ca8fc1dda35b96c0fcc493342372f69b4f27f2604888bca099c8d00f38a16f4c9463c16eff098227d812c29563643
-
Filesize
95KB
MD59f38f603bd8f7559609c4ffa47f23c86
SHA18b0136fc2506c1ccef2009db663e4e7006e23c92
SHA25628090432a18b59eb8cbe8fdcf11a277420b404007f31ca571321488a43b96319
SHA512273a19f2f609bede9634dae7c47d7b28d369c88420b2b62d42858b1268d6c19b450d83877d2dba241e52755a3f67a87f63fea8e5754831c86d16e2a8f214ad72
-
Filesize
155KB
MD59ddb64354ef0b91c6999a4b244a0a011
SHA186a9dc5ea931638699eb6d8d03355ad7992d2fee
SHA256e33b7a4aa5cdd5462ee66830636fdd38048575a43d06eb7e2f688358525ddeab
SHA5124c86478861fa4220680a94699e7d55fbdc90d2785caee10619cecb058f833292ee7c3d6ac2ed1ef34b38fbff628b79d672194a337701727a54bb6bbc5bf9aeca
-
Filesize
3.3MB
MD56f4b8eb45a965372156086201207c81f
SHA18278f9539463f0a45009287f0516098cb7a15406
SHA256976ce72efd0a8aeeb6e21ad441aa9138434314ea07f777432205947cdb149541
SHA5122c5c54842aba9c82fb9e7594ae9e264ac3cbdc2cc1cd22263e9d77479b93636799d0f28235ac79937070e40b04a097c3ea3b7e0cd4376a95ed8ca90245b7891f
-
Filesize
686KB
MD58769adafca3a6fc6ef26f01fd31afa84
SHA138baef74bdd2e941ccd321f91bfd49dacc6a3cb6
SHA2562aebb73530d21a2273692a5a3d57235b770daf1c35f60c74e01754a5dac05071
SHA512fac22f1a2ffbfb4789bdeed476c8daf42547d40efe3e11b41fadbc4445bb7ca77675a31b5337df55fdeb4d2739e0fb2cbcac2feabfd4cd48201f8ae50a9bd90b
-
Filesize
75KB
MD55e9fc79283d08421683cb9e08ae5bf15
SHA1b3021534d2647d90cd6d445772d2e362a04d5ddf
SHA256d5685e38faccdf97ce6ffe4cf53cbfcf48bb20bf83abe316fba81d1abd093cb6
SHA5129133011ae8eb0110da9f72a18d26bbc57098a74983af8374d1247b9a336ee32db287ed26f4d010d31a7d64eacdc9cf99a75faab194eff25b04299e5761af1a79
-
Filesize
63KB
MD5c17b7a4b853827f538576f4c3521c653
SHA16115047d02fbbad4ff32afb4ebd439f5d529485a
SHA256d21e60f3dfbf2bab0cc8a06656721fa3347f026df10297674fc635ebf9559a68
SHA5128e08e702d69df6840781d174c4565e14a28022b40f650fda88d60172be2d4ffd96a3e9426d20718c54072ca0da27e0455cc0394c098b75e062a27559234a3df7
-
Filesize
63KB
MD5c17b7a4b853827f538576f4c3521c653
SHA16115047d02fbbad4ff32afb4ebd439f5d529485a
SHA256d21e60f3dfbf2bab0cc8a06656721fa3347f026df10297674fc635ebf9559a68
SHA5128e08e702d69df6840781d174c4565e14a28022b40f650fda88d60172be2d4ffd96a3e9426d20718c54072ca0da27e0455cc0394c098b75e062a27559234a3df7
-
Filesize
4.3MB
MD5deaf0c0cc3369363b800d2e8e756a402
SHA13085778735dd8badad4e39df688139f4eed5f954
SHA256156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d
SHA5125cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989
-
Filesize
4.3MB
MD5deaf0c0cc3369363b800d2e8e756a402
SHA13085778735dd8badad4e39df688139f4eed5f954
SHA256156cf2b64dd0f4d9bdb346b654a11300d6e9e15a65ef69089923dafc1c71e33d
SHA5125cac1d92af7ee18425b5ee8e7cd4e941a9ddffb4bc1c12bb8aeabeed09acec1ff0309abc41a2e0c8db101fee40724f8bfb27a78898128f8746c8fe01c1631989
-
Filesize
134KB
MD5a44f3026baf0b288d7538c7277ddaf41
SHA1c23fbdd6a1b0dc69753a00108dce99d7ec7f5ee3
SHA2562984df073a029acf46bcaed4aa868c509c5129555ed70cac0fe2235abdba6e6d
SHA5129699a2629f9f8c74a7d078ae10c9ffe5f30b29c4a2c92d3fcd2096dc2edceb71c59fd84e9448bb0c2fb970e2f4ade8b3c233ebf673c47d83ae40d12a2317ca98
-
Filesize
28KB
MD5c119811a40667dca93dfe6faa418f47a
SHA1113e792b7dcec4366fc273e80b1fc404c309074c
SHA2568f27cd8c5071cb740a2191b3c599e99595b121f461988166f07d9f841e7116b7
SHA512107257dbd8cf2607e4a1c7bef928a6f61ebdfc21be1c4bdc3a649567e067e9bb7ea40c0ac8844d2cedd08682447b963148b52f85adb1837f243df57af94c04b3
-
Filesize
1.4MB
MD5aaf9fd98bc2161ad7dff996450173a3b
SHA1ab634c09b60aa18ea165084a042d917b65d1fe85
SHA256f1e8b6c4d61ac6a320fa2566da9391fbfd65a5ac34ac2e2013bc37c8b7b41592
SHA512597ffe3c2f0966ab94fbb7ecac27160c691f4a07332311f6a9baf8dec8b16fb16ec64df734c3bdbabf2c0328699e234d14f1b8bd5ac951782d35ea0c78899e5f
-
Filesize
1.1MB
MD54c8af8a30813e9380f5f54309325d6b8
SHA1169a80d8923fb28f89bc26ebf89ffe37f8545c88
SHA2564b6e3ba734c15ec789b5d7469a5097bd082bdfd8e55e636ded0d097cf6511e05
SHA512ea127779901b10953a2bf9233e20a4fab2fba6f97d7baf40c1b314b7cd03549e0f4d2fb9bad0fbc23736e21eb391a418d79a51d64402245c1cd8899e4d765c5a
-
Filesize
106KB
MD5870fea4e961e2fbd00110d3783e529be
SHA1a948e65c6f73d7da4ffde4e8533c098a00cc7311
SHA25676fdb83fde238226b5bebaf3392ee562e2cb7ca8d3ef75983bf5f9d6c7119644
SHA5120b636a3cdefa343eb4cb228b391bb657b5b4c20df62889cd1be44c7bee94ffad6ec82dc4db79949edef576bff57867e0d084e0a597bf7bf5c8e4ed1268477e88
-
Filesize
128KB
MD5e1f9fa54df00f36f17c2fabd135a8035
SHA15a83d32262381f11442cea84168e0705c0109986
SHA256e8af0bb8d611ee98573bc43f67e6d178a0eb8ad4204b0cd4aa3b09b2171876f9
SHA512fbc4a4fc03abda5079f6eba0843a7952926f517a0fa749307f4b74b45562425eecec041479fbb9d92e5cbda95b1993cc555e275ab8a73665df4a4ef71a826560