Analysis
-
max time kernel
99s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2023 23:31
Static task
static1
Behavioral task
behavioral1
Sample
slinky_crack.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
slinky_crack.exe
Resource
win10v2004-20230915-en
General
-
Target
slinky_crack.exe
-
Size
2.7MB
-
MD5
a455ed5640c3742ca183286f66b88e75
-
SHA1
304447ea6d3fc88b5adc1da292b1f99924135595
-
SHA256
c3e4dfe2c165f6e72ee73e6c92faa2fc5101c6d963a02738a903f78a511dd1df
-
SHA512
8ff09bdc6e8ad6969d9ad7b7fc9ee53b530c90ce92364e541ef63b3bc0e78c67a53961adec14a123cc273d3db1ff74a83b750a1bb4d1590f3c903fc652dd2016
-
SSDEEP
49152:aMy5yvvfSPhHiemQljVy4IU6iMgMqR4ta:Fy5+vKPhHiruJyH+MZqRGa
Malware Config
Signatures
-
Downloads MZ/PE file
-
Executes dropped EXE 5 IoCs
pid Process 3480 ins7F80.tmp 4636 SpotifySetup.exe 2680 SpWebInst0.exe 4316 Spotify.exe 1636 Spotify.exe -
Loads dropped DLL 4 IoCs
pid Process 4316 Spotify.exe 4316 Spotify.exe 1636 Spotify.exe 1636 Spotify.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 14 IoCs
description pid Process procid_target PID 4456 wrote to memory of 3480 4456 slinky_crack.exe 86 PID 4456 wrote to memory of 3480 4456 slinky_crack.exe 86 PID 4456 wrote to memory of 4636 4456 slinky_crack.exe 85 PID 4456 wrote to memory of 4636 4456 slinky_crack.exe 85 PID 4456 wrote to memory of 4636 4456 slinky_crack.exe 85 PID 4636 wrote to memory of 2680 4636 SpotifySetup.exe 92 PID 4636 wrote to memory of 2680 4636 SpotifySetup.exe 92 PID 4636 wrote to memory of 2680 4636 SpotifySetup.exe 92 PID 2680 wrote to memory of 4316 2680 SpWebInst0.exe 102 PID 2680 wrote to memory of 4316 2680 SpWebInst0.exe 102 PID 2680 wrote to memory of 4316 2680 SpWebInst0.exe 102 PID 4316 wrote to memory of 1636 4316 Spotify.exe 104 PID 4316 wrote to memory of 1636 4316 Spotify.exe 104 PID 4316 wrote to memory of 1636 4316 Spotify.exe 104
Processes
-
C:\Users\Admin\AppData\Local\Temp\slinky_crack.exe"C:\Users\Admin\AppData\Local\Temp\slinky_crack.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:4456 -
C:\Users\Admin\AppData\Local\Temp\SpotifySetup.exeC:\Users\Admin\AppData\Local\Temp\SpotifySetup.exe2⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:4636 -
C:\Users\Admin\AppData\Roaming\Spotify\SpWebInst0.exeSpWebInst0.exe /webinstall3⤵
- Executes dropped EXE
- Suspicious use of WriteProcessMemory
PID:2680 -
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exeSpotify.exe4⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:4316 -
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exeC:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Spotify\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Spotify\User Data" --url=https://crashdump.spotify.com:443/ --annotation=platform=win32 --annotation=product=spotify --annotation=version=1.2.22.982 --initial-client-data=0x474,0x478,0x47c,0x470,0x480,0x74d0b3d8,0x74d0b3e8,0x74d0b3f45⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1636
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=gpu-process --log-severity=disable --user-agent-product="Chrome/116.0.5845.190 Spotify/1.2.22.982" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=1864 --field-trial-handle=1868,i,16512909467883923523,10526430330804098487,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:25⤵PID:4916
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --log-severity=disable --user-agent-product="Chrome/116.0.5845.190 Spotify/1.2.22.982" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=2888 --field-trial-handle=1868,i,16512909467883923523,10526430330804098487,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:85⤵PID:3648
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="Chrome/116.0.5845.190 Spotify/1.2.22.982" --lang=en --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --mojo-platform-channel-handle=3088 --field-trial-handle=1868,i,16512909467883923523,10526430330804098487,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:85⤵PID:2236
-
-
C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe"C:\Users\Admin\AppData\Roaming\Spotify\Spotify.exe" --type=renderer --log-severity=disable --user-agent-product="Chrome/116.0.5845.190 Spotify/1.2.22.982" --disable-spell-checking --user-data-dir="C:\Users\Admin\AppData\Local\Spotify" --first-renderer-process --autoplay-policy=no-user-gesture-required --log-file="C:\Users\Admin\AppData\Roaming\Spotify\debug.log" --disable-blink-features=WebCodecs --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=4060 --field-trial-handle=1868,i,16512909467883923523,10526430330804098487,262144 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,DocumentPictureInPictureAPI /prefetch:15⤵PID:5096
-
-
-
-
-
C:\Users\Admin\AppData\Local\Temp\ins7F80.tmpC:\Users\Admin\AppData\Local\Temp\ins7F80.tmp2⤵
- Executes dropped EXE
PID:3480
-
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s DeviceAssociationService1⤵PID:3320
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
717B
MD5d69691e376f34c802696b9c3e9d1022f
SHA1d25d02664e8a4bedeb8c744663a327d8bd4600f2
SHA2562f10136ff8a1923a218a2103c70ebede1038721f56bd95bb54703d517a68c575
SHA51254b3d27ba0e4170239b9a8a2d38d4c6d96a1e64bfb09ebdd7a2443af221ac405524d2d68c2b91a36999347cbf058c18992c9cc3c7649b9abdf78cb04425147d5
-
Filesize
529B
MD5435c562755d9ec10d7009258cf02836f
SHA1297406ae99081c903ff60c64ce44f8f855799e24
SHA2561485f70b9e09b86d0e9b0c5229ffba447ce4708ca6d4945aa3dc959591d938c9
SHA5127ab5cefe5b580e443d6d77935540cbdfcb5ec97f573daee85ed8fd259fbdeb2c3cac6f4508149fda93e9217743eeef7b9fc4a5c9b390376d71d5b2fa208a0f55
-
Filesize
56B
MD581e524b76e1f58f9aecc4b8894ffdab0
SHA102d8f0875077a06ce7219952522e4149fca30568
SHA25679ed137c4ae006114c4e611d44172e04d633fb38c249ce91a0a559bc10486605
SHA512cab273e77ea54dde63daa7cc2d1bfee64331c5b5be323e8af125174c81520f0567011675a5ff69856b1f15851cfb09ddd0f6280f41d29bd6d4f0b032989c7065
-
Filesize
16B
MD5206702161f94c5cd39fadd03f4014d98
SHA1bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA2561005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA5120af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
901KB
MD549e06bb26c194912cad41d964343143c
SHA13ded7686fbc3ed3f001ea29733dfdbd5f55c63cb
SHA256ead80a1767978ed62dfa51443d12f17c0c9444850a8750f7677f82150c0e9598
SHA512c3774d26720cf6388d8dce7cc67459857ae5a00ef189efa48ee98feac86a5cd8c5a0247d533a02051758e06c53d27056fee00319b7b60dff54644b9d970c733e
-
Filesize
901KB
MD549e06bb26c194912cad41d964343143c
SHA13ded7686fbc3ed3f001ea29733dfdbd5f55c63cb
SHA256ead80a1767978ed62dfa51443d12f17c0c9444850a8750f7677f82150c0e9598
SHA512c3774d26720cf6388d8dce7cc67459857ae5a00ef189efa48ee98feac86a5cd8c5a0247d533a02051758e06c53d27056fee00319b7b60dff54644b9d970c733e
-
Filesize
2.1MB
MD50d8f9d0f85da51748f1af9b041a16d14
SHA10b0ebb3c791d8bd6434750165c0ae353cb972542
SHA256829def90819f9ba1a7c7ad5dfddc801db5aa4453073b7f70a13c8f25841463e4
SHA5122a2ae344ccd6830bcd9560ebee35a2736d5db73e8e8da78b1bde619fbd48dd9df26a80fc93c24103607959f7ea1a63cb98a8aac017c821304a8cafa794dc489c
-
Filesize
2.1MB
MD50d8f9d0f85da51748f1af9b041a16d14
SHA10b0ebb3c791d8bd6434750165c0ae353cb972542
SHA256829def90819f9ba1a7c7ad5dfddc801db5aa4453073b7f70a13c8f25841463e4
SHA5122a2ae344ccd6830bcd9560ebee35a2736d5db73e8e8da78b1bde619fbd48dd9df26a80fc93c24103607959f7ea1a63cb98a8aac017c821304a8cafa794dc489c
-
Filesize
1.4MB
MD598e4e37598b5eff31451108ec844281e
SHA1a515aace35a8113e895dfa9827017be4bdda6b9d
SHA256e22f1248364588e35bb7eda3a2556a614f2e8ba7b3acf5e4227713bc331d6d6c
SHA512981d0774f9079205529a433e4d9b02479713e3f1bcae1f7db14f574696a028e31a711908fac776c2aa77d25a38c7ac6a88c2a27f4ddd355ff957177e85d12689
-
Filesize
3.9MB
MD513a0d7009e6558b6a5a2da55bb354807
SHA17d51c92d48065d6b0e6450b28d1e3816826eff25
SHA2566bbe32c790364f0187e10dfa1784cbee64768f766926b9c027daa1d8c10c31b7
SHA51228bd2f033edceec1590b2e7a7eab42458279bb6329e2e13740362afe6ac9415adce5ba9a5900c9daf8166f9ff571765f469f7ee70b5afaebb9b206c1e27a9b5d
-
Filesize
87.2MB
MD51e953ae054d9466b5905ed58122719ab
SHA18c4532f273192592c0e5daf731b319b3578ef6b2
SHA256d6a30d16a6b77ebe946e399f3fd0e7c5142ba1bbfebb5b678d0e099613bb081d
SHA512761ce3280ae6927a7e309c4804f4b834dbf8bdc8a4faaa8aac7d472d8f804093ab7f9bafa22878367f6907f4cfa1adc047e5eb85002ec7b71c1db1bbbe44820c
-
Filesize
87.2MB
MD51e953ae054d9466b5905ed58122719ab
SHA18c4532f273192592c0e5daf731b319b3578ef6b2
SHA256d6a30d16a6b77ebe946e399f3fd0e7c5142ba1bbfebb5b678d0e099613bb081d
SHA512761ce3280ae6927a7e309c4804f4b834dbf8bdc8a4faaa8aac7d472d8f804093ab7f9bafa22878367f6907f4cfa1adc047e5eb85002ec7b71c1db1bbbe44820c
-
Filesize
20.7MB
MD50f08f4e83d5343a2546127dd1d0dbb50
SHA11354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6
SHA256f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627
SHA512dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73
-
Filesize
20.7MB
MD50f08f4e83d5343a2546127dd1d0dbb50
SHA11354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6
SHA256f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627
SHA512dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73
-
Filesize
20.7MB
MD50f08f4e83d5343a2546127dd1d0dbb50
SHA11354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6
SHA256f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627
SHA512dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73
-
Filesize
20.7MB
MD50f08f4e83d5343a2546127dd1d0dbb50
SHA11354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6
SHA256f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627
SHA512dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73
-
Filesize
20.7MB
MD50f08f4e83d5343a2546127dd1d0dbb50
SHA11354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6
SHA256f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627
SHA512dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73
-
Filesize
20.7MB
MD50f08f4e83d5343a2546127dd1d0dbb50
SHA11354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6
SHA256f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627
SHA512dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73
-
Filesize
20.7MB
MD50f08f4e83d5343a2546127dd1d0dbb50
SHA11354efe8cdfdebe9d1a3c7859d7d3e1d40e221b6
SHA256f6b839225d75b6472fdf1fd3098badbf38008360850d4fafe987f8b0eec45627
SHA512dabd0e233093b1be34a85284b2b562eca250070e8e047d7272ebd630979fea95856f4a6188e57352a2676769a099f5e2891c311cdab12ae9e3f59312c2e71a73
-
Filesize
626KB
MD554563e9a40deb9c8d545847b4b4064d4
SHA12b00b7839477c1dc9699c960f8eaa2b471cbf96d
SHA25640df7c1d2867c8b146d58b5ee80783ed36c5a38d410c1c3e55011cf042b58062
SHA51219c86cd39e836f76a6e4e87abd53686837193362d84fefc8fff3498fe1c96bccd313c94ff56a663c10d5eab648a1f39f7fb308a9985ec3b3bd0ee4f2f0214db9
-
Filesize
964KB
MD533c6e196e50f93d6647baf3a08d21de1
SHA138da6b75585750ba892e11c8fe23fb41a00d7307
SHA256b8b297eeab2e9fe8ecde1e18f1ee6b8c7adb90084bdeb541ad3746defcfd6f07
SHA5129fcdd378f11b2cfbe0617737fc268da9c032126fb038366d2a22cc7c4f8bc26980e9115184ac996652a03efbd7da0912f4bd4bf1159849ebf43149fb0518152d
-
Filesize
1.1MB
MD5107e8c2c1e95b052a77b2c9f03c8264b
SHA1ddb9fd95a911d1ede5c72722847d2e61337f7d76
SHA256b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6
SHA512e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb
-
Filesize
1.1MB
MD5107e8c2c1e95b052a77b2c9f03c8264b
SHA1ddb9fd95a911d1ede5c72722847d2e61337f7d76
SHA256b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6
SHA512e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb
-
Filesize
1.1MB
MD5107e8c2c1e95b052a77b2c9f03c8264b
SHA1ddb9fd95a911d1ede5c72722847d2e61337f7d76
SHA256b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6
SHA512e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb
-
Filesize
1.1MB
MD5107e8c2c1e95b052a77b2c9f03c8264b
SHA1ddb9fd95a911d1ede5c72722847d2e61337f7d76
SHA256b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6
SHA512e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb
-
Filesize
1.1MB
MD5107e8c2c1e95b052a77b2c9f03c8264b
SHA1ddb9fd95a911d1ede5c72722847d2e61337f7d76
SHA256b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6
SHA512e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb
-
Filesize
1.1MB
MD5107e8c2c1e95b052a77b2c9f03c8264b
SHA1ddb9fd95a911d1ede5c72722847d2e61337f7d76
SHA256b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6
SHA512e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb
-
Filesize
1.1MB
MD5107e8c2c1e95b052a77b2c9f03c8264b
SHA1ddb9fd95a911d1ede5c72722847d2e61337f7d76
SHA256b26169300512193cf4ac88ffe0069716219d2c85d45791a1d13c2f57743cfff6
SHA512e73e75e7b00eab3592d1f7d445829ccee633d9e4e13a9da93e583e9a9892c58347319e00bc2871cdb0c2ebb770d9f7ef3bdc2b5e6d0b2ca354d096b3c1a1e8eb
-
Filesize
681B
MD5b8fdc3c0e05551b0e5a8337b00e97e84
SHA1400507831588214a75498e724b2c63ce465456eb
SHA256d26eb351127ed03f7789d977f897369cf5727afc9f314df79d73ea921b58400c
SHA512f9277007a5ccca31c56041db1c09c1543b320458fff09c20a2dd30294fb589027c1e24a937b4f9f4bcc66fe69293b418f35ee63ab7dd17123c7eea0db3659f5f
-
Filesize
3.9MB
MD513a0d7009e6558b6a5a2da55bb354807
SHA17d51c92d48065d6b0e6450b28d1e3816826eff25
SHA2566bbe32c790364f0187e10dfa1784cbee64768f766926b9c027daa1d8c10c31b7
SHA51228bd2f033edceec1590b2e7a7eab42458279bb6329e2e13740362afe6ac9415adce5ba9a5900c9daf8166f9ff571765f469f7ee70b5afaebb9b206c1e27a9b5d
-
Filesize
10.1MB
MD562880b7d351a9f547b62b8da6c97ce25
SHA1057f11003013cfb3f1c63e6bdd4f2f9949ff0104
SHA2567c40c811d30d459dbf04a04c141b60eb4247cd58a008fb836605317df665748f
SHA5120d6f83175a91d90f4cc3ec4d9071b7acd0cd8ebbcc592322e46fde2adb7198e035af62c45a11a622f2a908e26d4dd8b8d1af023e634a74d0824d02c791ba3c1a
-
Filesize
375KB
MD58c423d19d562d964febd7ace2d272b56
SHA1e86f319e14f9dd99e2139f85dff925950f11773f
SHA2563abde44a86b9de78a6fd8490104bce197eee689e4687a9e5ef6fc1f9b127743a
SHA51220c98599791196e232399ed0d7485195c6074a57526e7957aa07adb4ce9d9a458abf724077c1bdb370e7d7c7348187fb0b21d28d8e32735a235024cdb7ffeb89
-
Filesize
6.2MB
MD5461a0afab1edcb5cfd54b62f56bbb621
SHA15122485f10f3b9735a0bb744c6588b4dfce209a7
SHA2564818209a2c351a19190a3824fc96a2ed662d73339fc7064c7fce0def4fa00f69
SHA512e8322874ecb2e54e1d0f913cfc3ba4b560a9a890933b7ce3ec8d5f631afc94ab04c1d23481001699a5a9e519723c2dc47b2b57d8eba6d7dd945fdf935ed99380
-
Filesize
111.4MB
MD5acdc2fb04610c0ea373d4f0e61d22fa1
SHA1f6d3ec7dc3e93a5eab76ef6527432b881cd52cae
SHA256bdc54d23538ffb97617fe3e56dd6a9617d3f30491fb52b6e0a87cf02ab3090e6
SHA51290894ee8f3cf125470f531a5c2863a0216a2ca009b8ce0528b3d37c08bc951477fd4e6022aca472f6a765058f981fddb2da6b541377865895a7f54b689d5df5e
-
Filesize
105.5MB
MD50e9fd35434d9f57e25b1b1283e581255
SHA1d3528a12a391bcaa363d67b07cfe2eb09dc6c80c
SHA2561ecc1a6cddad065ca5bcb967a62d7536e25bd63f538138d8ce6faf4062a9691f
SHA512a89f84d64f2ff497d8031598caea1dffdd68841f1b7a5769af508cdc86123ec5e750136fb40be3e770b29d1837312a718846e6e2662fd9336a55bd30b735b801
-
Filesize
104.4MB
MD5bf285d53fddfb5f63014a6caa407db98
SHA143259ba85c966c4023b6240ef5e7d7a3ac4e547b
SHA256e0c7c694d924325ce7f102e8f9df7f627419f88b8910d612f3af3a19e843e45f
SHA512eaae8b7506fd87bc4193e50499762220e5781ee0239220256da739789befb7894306f15ba825698104303d585741d57e02e2909fb4a4ee5d0cb4053d49958e19
-
Filesize
89.4MB
MD5b66de905840e70dc2e987a3c112f371c
SHA19717cfe80550384307fa02dde6ea05a86468a071
SHA256958bf20245f4ca54b39178e2480737c0990aa596b410dbdce75e3ce19a155dc6
SHA512169037bc6831faaccf0980bdef28fbe0f14005258d9bd67ba24b2fde1ea966bc5589691ebc611a76f5b93b4811ee6883b302385957a8a771fa2c4a4c3f745f0a
-
Filesize
78.3MB
MD55d4b42635f9dde0bdea6c8f3e483b8b4
SHA19c0b28bb64c32bef7c3db5fbb40a0a50790e5e4e
SHA256842c5fed92754e870ee7b864607681a3d20c85fbdfcdc78bbb694a703eaf1a54
SHA51213e2a91087fb0deba1c01027a81ceda9a49c975e301109a54b6ab269c3a840e2df506e6c5438cd5b7a0c06776f73bcff89435206aae58878ade034951904e29e
-
Filesize
78.6MB
MD57ec4e7c11f8881830c2fad18af291f90
SHA12e80f3f9127689e0a5ad6eac98ee0dc74ee6d2e2
SHA256a64c0a386a1a569c2ffecd8fca2c49462459f1ad1fba76298bbdf1164a08f9cf
SHA5127ce18733f6f22694926006fb79b5c66dfcb5ea3c067af664c1308655e9233704fd45bd0d881c35abaec1519a34d6c39de3957a768569c8883258304fbcc77593
-
Filesize
66.3MB
MD5b92a0b4398371e039f6e7bf74eefe60a
SHA1932e36c5c1aa2d1dd711d1993ea71596076752af
SHA25630cdddf55c1d8d6e36066d930002b17690fdc4be4a3f25b2c1f4d98b6a863c34
SHA51290876aaa7136c5b4b4bd68015ff86e68db6de3bc5e4c578e188a1cc7ea2caefb80c1b8cf5168f6f0c8c3e4ddb6108e73e2c05ce80e0d34f2c2548ae49b5ad12e
-
Filesize
375KB
MD58c423d19d562d964febd7ace2d272b56
SHA1e86f319e14f9dd99e2139f85dff925950f11773f
SHA2563abde44a86b9de78a6fd8490104bce197eee689e4687a9e5ef6fc1f9b127743a
SHA51220c98599791196e232399ed0d7485195c6074a57526e7957aa07adb4ce9d9a458abf724077c1bdb370e7d7c7348187fb0b21d28d8e32735a235024cdb7ffeb89
-
Filesize
6.2MB
MD5461a0afab1edcb5cfd54b62f56bbb621
SHA15122485f10f3b9735a0bb744c6588b4dfce209a7
SHA2564818209a2c351a19190a3824fc96a2ed662d73339fc7064c7fce0def4fa00f69
SHA512e8322874ecb2e54e1d0f913cfc3ba4b560a9a890933b7ce3ec8d5f631afc94ab04c1d23481001699a5a9e519723c2dc47b2b57d8eba6d7dd945fdf935ed99380
-
Filesize
404KB
MD5d35ff435ff91254246ae63984230e4bf
SHA14a780fc53e000d7eccabfeeff36bdbd01dfd8374
SHA2569d0df6a64559ff718c06963f740549ecead271b84cbdcc81c7782e0d0011041e
SHA5121854e88765b9a9ee372164e24756000e70b5bf23bdb2bbb82c0db7b95458ace266fd37880f4502a6b8f2820986d5770ec1d7eb63e99a7dfe9ae48b62b8c79ddb
-
Filesize
13KB
MD591440c7cb6c74055f565fccfa8625c8b
SHA1f2a1234cf7a8b9cf76fc07209ab28d87b909a342
SHA2568a304b9453b40a283db3a2a41d68fdf7ce0bf14c8904c2befa46d42c88e0f547
SHA51245973cbe5e3812d25e0bb9fb4172cd8e8c704efdf1bacb6821f21eba2bfb8c6035ae438fff2bf85e3028f1fe8a4beb3a050e2f6a2852cd785712b78849b84ccf
-
Filesize
7.5MB
MD514e36372dfd58bd65f5728ab73ff480e
SHA188f92b081e41cd0eb430abd2850b3c3af86542ba
SHA25651ce36475a08eae89d72495d168dcae055828265e7d0457dbe4c8d9100256822
SHA512094c11f96644461bad32ae9d44c88e79f9ff62394993c2067e5f7688e616335dbd0753f036e7132cbc5462ac79b047a2fb1c230641be56d840098bba4cc464b6
-
Filesize
570KB
MD57470be2a4d8c32fe706d161271a79494
SHA1aec9f49e88cc2441c394cc83c15d6c5df3d7792e
SHA256ce6833d515ce31856bbfcb785cee98a1e2cbd6167241f1ae0cdcbec7d3edf904
SHA51288bfe281f2c4a323bac07f0d2e0e47006746a4ca9fa664ab2f459d89caba32f4516f36f25134bfc8d142a4a2224bc6db4def6762553c3173809c207bb2557731
-
Filesize
4.2MB
MD519e0269c11838ee91cccc0d51f04b4f3
SHA1592d7d4053360e7af6b88f82376f669f6d73ca23
SHA256340c9a00f02171557e4c3e79cc2b86c87247a3f1a2426b7eca3efeffb88c99b7
SHA512e5706f253cb715979630b09e7f0aa5b07e91824156e6e72633f4803ca1bc4c1d37a37342f22124ea96b8e2596b29c8332e702454434874cbed819f08bd207e11
-
Filesize
4.2MB
MD519e0269c11838ee91cccc0d51f04b4f3
SHA1592d7d4053360e7af6b88f82376f669f6d73ca23
SHA256340c9a00f02171557e4c3e79cc2b86c87247a3f1a2426b7eca3efeffb88c99b7
SHA512e5706f253cb715979630b09e7f0aa5b07e91824156e6e72633f4803ca1bc4c1d37a37342f22124ea96b8e2596b29c8332e702454434874cbed819f08bd207e11