Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
23-02-2024 11:10
General
-
Target
2024-02-23_ed5339622ae209d5cad98e62c677fa56_ryuk.exe
-
Size
2.1MB
-
MD5
ed5339622ae209d5cad98e62c677fa56
-
SHA1
cb93b157d0ace7b8ad7f31c87721b40f436c6ffc
-
SHA256
e85b774546dce3d8ff27729eb29cce67a33b62907a9dc77d45c5649d116dde7d
-
SHA512
183f5aea61d688fdc8f38b93cd01e1508bfc110c3dfb8e12fc386ecfb2975dc6142ae7f64c68549291dc8e4dc2090036b39a7cc5ec444385abeadafaa29f2a1e
-
SSDEEP
49152:La/3xXBSZ4K5MJ1LvTMxbfsYBYSgxu9+fw4TpRVlbnXf9gPTTW7H1GXC:7Z4K5MJabfsYN+RVlbnP9WXW7H6C
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 24 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 7 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 42 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-02-23_ed5339622ae209d5cad98e62c677fa56_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-02-23_ed5339622ae209d5cad98e62c677fa56_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5bbdd524d384293074e17a3b1de60a451
SHA1908edc6590fc233c540390f53f745429099ea54e
SHA256ebe9cc31c98f9106def5798358a1037fb8e4f226cf61c6b5691448be0356baad
SHA512390a66eb9e79569bc1aa04b92781a07287a839684e66b4857282fddb05cee03e1d96a3643d6f2bb051bc6eb1e2c73720bcd50d441c9dc42bb0ef44c8ab5b4a56
-
Filesize
1.4MB
MD5ceac91bc4458bc038c3cdd9f195368d5
SHA17d914f51aa6b16b6c3eb1d5ca76a3531021cb303
SHA256d208d603b42d38850cf8b83ccd020c3c0f5ce8ef777428fca8da62a93dd980b3
SHA5125f7152bd7bd7f805253391b6de97646061968df7afb4329f9d978a07d04080da7f5c60482c2b830dfb05c1b6b4db0bf46d369c9b1cd9ca122527f7aa05bbd7b2
-
Filesize
1.7MB
MD5e5134f31ad10c96b3a4047a7417cfb97
SHA10f2f7b2d36f7dab7596f37e8b853da6c1be6aeaa
SHA2567c83ef442667fa6a59a0a5b8cdd9623b72f5435c6ed75a8ecdd12a5d246dd6e0
SHA512883bd5507b2fca7243f486dd7d4ce474f81ade96cbb95619ad20f947e8c68e0d42b72da2de728a04f016b2da81717ffd2d8d27d1aceaf806cbfbfd3f36870fd2
-
Filesize
1.5MB
MD5a69e74888a677ecd4a6dfb070506eab7
SHA1bba3abbfb819bf3bc578d105366f0c10060409eb
SHA25695c73d30f1b8e87a97279208ea4621d94c50bf2de18a6952caeff26e312fce2c
SHA51233018a70ad09c60a0468fbf6d6d8ffe4373e43b82d32a356cb39ec87b3811295ee38b47ea1691997c3aff662e48e728c1be2372e4cb35e751d4a50f00ea8a322
-
Filesize
1.2MB
MD5e2b9ca763d967a4457d4044e7122575b
SHA14425d2980c2e3d218a36b950926cf711548eda01
SHA2567aad21b8a5f4cd54d6df8d53636b91fc7ccd6d8d61a3c816938c1b0d06d1b072
SHA512bcb79806f30ade65e8c2f6c1f5b5c92484610d306f2f270febe95a481b0c13c7f3d103ca72107f7c2ebc5a5c1a669c8cf9e8cd9d7c0614075b2e370eb24c5c02
-
Filesize
1.2MB
MD5d468bd79e555ee31d830c0d8f41c41c9
SHA1f48d614797e5e34fac0fc30069db456697548cda
SHA256aee9cb912f30abb602aa95b5ec49679b282e5e931e774335f323e2e85ef35af0
SHA5121e96059731c654d79cdff442e69e95a537b6e4362c99c9432d2285ccfd9763cb94a7c81078bfeb7d5869d6baa28e97742abcbe16f0262c990593a80d2a8c0185
-
Filesize
1.5MB
MD577fec619fa5af447ecadd69fca11a2d6
SHA18cedb577aa699e914a6b9922be33a497d7cc823c
SHA2560ab2fdf54e66c14567d26a6f572421f4bf92fee1fcb05a76c1bc4190dc39c081
SHA5124aa72f6b0e0e9e71db11e0a2d975fa57949ee7624adcbd1520da8e5e4ca75a855ce3bb481151755aa0790f713ca43f796f4f39b2eeb901f6877df60f88b5b69f
-
Filesize
4.6MB
MD5af2b6ccec6e7a810e06b52339ab20c5c
SHA182d5c1f385726acdea3acda95a7288a18fe79f3a
SHA256fff78767247b688c665c9155c4dc5eee55b8f788873873b48a71ca245fae8e99
SHA512bc5560b9fd9a2ce3260b13df71c1654f9665f052285f22a2860e479305d83e8d49f1e4510151b1b4594066ca543619666bd6bb45e61201b7dcfb227b903b6ca3
-
Filesize
1.6MB
MD579d1051922b483823a390eb0532f1b4d
SHA1475fc2ead5a8985d4ca8678eeda9fbea5d92abe1
SHA2563bc21df35b05554d6e459072b51a91f19ea545699ec2fbb74b65f6bf793d1167
SHA512a37d7cdaef419638b22231dfd9ec19ec535bb005318c3bdbdbbffcce0dcf6854f3ebfbbb6043db5a66a8bb0ccb9bf80796c1b6c5079c15fb460a0fe2b109ad43
-
Filesize
384KB
MD52c22fdf5bd2eeb376556444eb1713029
SHA18b6afc6fef49ef6b36045299eeeca2df4e95a7bf
SHA25637ec8b761576d41e487bce3b31fdf05fd7a309786a2126a76849ab5a7e6af503
SHA5127499dafae2eadc7a7c0949ec4dd1d3d878751ff3452a8e1570c5b6f19fb50d885659e5399dd67523321f8a93aff0d5fdeac9b98cf5854c34f2dca61dffc13e42
-
Filesize
2.7MB
MD5e21ab13ddc51ee39eff71ca2d7e27bbf
SHA10bbb156ab30bc634b80ce3a4d9ee13f867d14cee
SHA2567654e8c84cce2ac4e2f4b52915de4ecde850c4036360136e84e541bb98202641
SHA512e3a55b252a9adbc214c6bba31e82fd110b26af46365ba42bd517a25b51cc645ffe09112ecefa0e0acf947fd86c3779fe5167af3e0b9023c702e68cbb8c3aca6a
-
Filesize
1.1MB
MD5a03740225af304a2ed980bc29432a8b9
SHA16a22104cb0bab48ab4cfb273d3b677a2b451ee6b
SHA25642eca10a82d5716ce6da776c027f8bba52d5bff9b2c482876359305e28360f51
SHA512005310e65635b98fb8b02f7d846ee226771552451c7d8ecaed35fff6400ef1d1e54d122c6c616cc577d593de34ae63317b21988aa5b3f728003eb73324456b2e
-
Filesize
1.5MB
MD5c83de5a95d0d6c9335929b52cf785c12
SHA134503b2f3bb7e1449b73b38b6efb2d578bfc26ef
SHA256a8fc9b5254f2e4ce44d9f1596ce1e33457e1e0074d908685d5f306ca3994ed72
SHA512769357df394ef736cc1f541fb1e4c8e5c8688c122ca8b855db69f700a810f541e66758aa0e993a514700acff0bdbd23d577d955c36c61ed4fafa27ef9b59c19b
-
Filesize
1.3MB
MD5df711470ac6dd695c3cf3443bb7b8fd5
SHA1f6ff8ad963d71d75849ae6e76d7eeb8e0959f298
SHA2569d4fd49354dfa008719aabe930c4341ebb6892c9f5bb5a13643e9623c533aad2
SHA512b7af10e0a4da400ff08b5146ac6b6ea60c266af7db0b8d5991b9db2dc6a7a56b8c4d571250b41adbdff88854f8394323f7f4506fdf73038815a42d6a7032e7ce
-
Filesize
4.8MB
MD5e9eacfb2a72a4def0310dee2847c5c93
SHA1b458d8b67231f94559015a92b71b8ed0e0befa8c
SHA25610df5644125602840dcdecc2bfdf8e3895d6b64f5e5280d074982ad51947a3a0
SHA5120ae492fa36f75561c591395f5ea03754652866ef071734a35c6aca54ae9a86ff8f2e02cd60d3188299dc4b5cfaf199f00159fe1f62f20573fa8151a8959d0c99
-
Filesize
4.8MB
MD5019abf60bb3740c2613adf5afa7d1060
SHA194c82da5ca7673e12c85e66e70f071883681cb51
SHA256b4de95da2704b65a5d2f2936d2131c80c3bb3d08e21a1d164f6597f8a6387e01
SHA51248b97d86933216f2340396794cc493bed047e356ef31077297621ea4975d4262cb5376632122deeba084204a57e34e276c49e708f10813287046fb2cc0887715
-
Filesize
2.2MB
MD5579eca4eedc302ade95f5eccf6889868
SHA13a471c7d7aa420c96ec7dba822967f114e8acf15
SHA256c24f7b7f81a553401eda39b52abfcdd8e208bd499d62b5542a867e6f706b114f
SHA51206b11d243ffb490c5f5da32daa6422504fba6ff352f12daa3e8ac9e40d33968b015c867078f82c5076dc46a5673957e030acad3b8e2d0b0f3fcb7a1d6c3989aa
-
Filesize
2.1MB
MD52a7787c71b80721ed0d5c15b7e9607ee
SHA1c244c0aa4a8befb5387ca3bcc8e0e0afe7db00bf
SHA2561ecf3cb07dd4f76a90a1256a526146853d43e6968212ed6c2b5e66818410cf2e
SHA512b79157372830c8045f00a0679eaf1a55602a7063ef4793a1eb5a0de8dc35b06b278691075c4294392f8958cdb142b72a09cc2e85ee1caca98c52baf8c42b2f94
-
Filesize
1.8MB
MD5903b7d7c066ba9faefa3caa856c550cf
SHA1767ceac09e6478dab7ae5b0debebe3ceb04c81e2
SHA256339b8359e22e5144f9ab618cb6cb9af6a039f99b0d6702cab7881f51c40af7ac
SHA512795ffb0f29b6cc4daf81f899085487c917586baf454f7f1d5319328d129470a5ccd8f4c7e9587c2622bdf41855bf11809346dfe13320bef02df3595e36e754f0
-
Filesize
1.5MB
MD58e3b6e9582bcc9b3244558132ea003a9
SHA10c9dfc7a892186c789568837cb105e1280b99e71
SHA25610f232cb6a4448ffaab33f3bcadf92a0412e6ef82f058da4ad3e7705ab9c1e54
SHA5128740de79bcf2b99d5193d6e5af379d7ddbbfa92f7087d4bab383a442219ee08449b555bb9f7edafed5497fce7e5257b308f82fddd00257bc2f319678143c96bb
-
Filesize
1.2MB
MD5ea81ea5c10c7d353aaba5bbc89436751
SHA175c7d073fa62832a5bb79e6c62bbd7cf50357b8e
SHA256a999f24e8b118c4f8df7d74c32770b0839759d18418db248263c0fa80f9fecb4
SHA512cfe2b27ef1a89c1ba507ace384bb08065599c39b50c5f258c8bab41dc6fe766e1fdec13665f07ab6eaf6e2c2bdc7a57f9d3a270edc857c0c34a65cce7c2e3745
-
Filesize
1.2MB
MD5d58bc6d5c683d96c3b78a1ebec600b42
SHA11ef71eb1830e9908c9a521c7e2d0ed1a1197637d
SHA25665c80ec84e1e44aaaea0280e6ad31e1828a23418b45e01695670418a96654974
SHA51293098589bb1e2f86ee043884ebe7cf452cd4067e9b8178f22e96464432db7141665bf2deab8042fcf730c34c81a2e16ce6893022dee11ec652cf77b62cedc7bb
-
Filesize
1.2MB
MD5600ca42dc2f64750e50299273da85467
SHA1010965436a495cb22d636940f36ee93e428a0614
SHA256a1c07470d1ac09a07c9f0a1d470ea1c0113a158401edb6b7b43a54a074c875fd
SHA51229f87a708b2f3c18729d1a3a9f240b3a9e96624c92ab79e40fd60c86a1b29d580a0787f694505ecb8914994b819dae27e33a4263870d1184875ecee6a98ff057
-
Filesize
1.3MB
MD533c5db6e62bb0c1346a20cd975ea3aff
SHA1220ffd2367588fc289348903df10cd0353d9e2b9
SHA25627d6a2c6c285438015a2cc4dd6754f6536ba44dc30e5e1ebee59d1a060794f34
SHA512fe7512102ef3c6ccd22858353bd4b309fd3533fcbfd9ce425430bf052f82724ee32ecc39a89eafa792f4e7d7806f0d72dde87fcde58351d95d1c7d3a784e38de
-
Filesize
1.2MB
MD538a0531564b0e002c84a48c65189aeb6
SHA10b94c57a7ab250217c8f6eefa059a59f5711832b
SHA256c5788757df00fec63349e00d06c57c691f3c75af5007020456231beb599eb3d6
SHA512d22eb0f062c972d6acf6ff4edba3b7ea3c0c753c860c72a4d464aa848c7f7f35c71e81e6e49274ace771a6d4e936d24bc8808e2dafa068649df2c9f702ec855c
-
Filesize
1.2MB
MD5b0a222424b3e9c06d2baa6a22719364b
SHA127fd43048aaf185acf52d1a49404d13422f39d87
SHA256a22497f9a4bc3c40398910b4f80e881fec33fbb2fdbbfa5b308c23c4e6ab97f2
SHA512506b2303c073f39f2c41db80c413834688af6d381657f076e82cf9dab37d81273cb6c4f8e4d4790772724a7f89bf7d4baaca5bda5b54b3752126562d96b1b23b
-
Filesize
1.2MB
MD5028e2f4d0b97593691b2aaff8a7c4cde
SHA17a0daf8c48bf9c9550eee8efa1ada83ff0f039f8
SHA256b31dfd01e77d4ee7a9bae3ca522edaf5e9aeb395bd9622868ae28e40fb7cec33
SHA512956c6fff2b29f2631204336b8b969b478387d687d8b2583ba7a00e12ac15e9a1e25eb97406d2f44b1244848316a77a68e37056a7461a82855203d6d021953d5c
-
Filesize
1.5MB
MD5d2fac3aeefe0cc56d7353e5c57cdf93b
SHA1088250573b28b780205711e5a58d858b45717607
SHA256185771d673818ec855ecfec3676e7feb44ed07eaee8cf1811f60a03c74c4d982
SHA512108e1937224b5c18d17bfd43675135f95a707c3e889402f3af5ad62bf18c0e65501e2471f03a0380dec86f3970551aadb476032d3cd23c97d17055230df8e372
-
Filesize
1.2MB
MD5f1c877cf69b53e127ecd37c08245c489
SHA16207da3908e33db88165fb9cf6785e83408b60b5
SHA2569b791aeee77456ef0eb9a5094cbc94b6b882d125b421910d39eef9485555c666
SHA512f9da8aa8e9ee1cca015040f51599f1934df715163151bf5e32bb4f0303b0bd13e48d610e867101da7668c0853b2f2de6dc002ca70b0457b85a5446df21a24b45
-
Filesize
1.2MB
MD59a481d6d5579e276968918a8dcd94265
SHA1fb266e4c82ebbb0a1f4529eac2b5e6fb28d5ef27
SHA256e34a7a5e5dc53e7b190925c1fcec7bcfd3f2cd8b4b4dd54e74dafdee6cfb88e6
SHA5121913238626d6de87cbfced2fd5945fba79552c53efb71d011d7d5aa2ced7c608c322ce82f223595ae988f54b68b6dd34e7f9b78da76293f3a680dac035bdd063
-
Filesize
1.2MB
MD57ff89c478c141e01d09608f36b0159f2
SHA1d268038ab8587ffb122cb33e3d81579da586d650
SHA2565b7ef861095b39e5e78d2c2e1297a083852a4ce8973befb3abe1bb77af3ecd8f
SHA512b8ac88a957e7982400323944a35c1abc28750b6d740fef77d33549a072827bd82c5b91c566798817f4aa55a353a0338a9c203f7861ebf841c56e23f591d96699
-
Filesize
1.2MB
MD59b16a496b64b97fbb09614654bed3593
SHA19dfc3d8a4771503688dd6478bdee84b564d5d3bb
SHA25604a863b099265e2dc7996c1d770d7dc432860b8f34f368295d94d7e63604a903
SHA512af3b05b218fd997f2777db9bf1c8ca2d469648c12b571feb4acfe409ec52bc4d1b83cca2b91c154474c82f72dcbb60ec9716d029d6fbc7cc2a279a477497391a
-
Filesize
1.4MB
MD59f335c5433f3d9b2a94176eb620bcbde
SHA1909225a3aeeabf4310537358e767621b78450cfe
SHA256e8a9673c9bcdbb20bb2ecd1efcf72067a60aa2b8c8b59bb545e8a320ef143a06
SHA512031bff09e4c9b8d338fe8569328fe2ae9139d619e9624259a279778bfd02f3480f0e1cbb88f5de479aa75b97e1ef7cfe9178f0958dc131d91ceccec75a6cc374
-
Filesize
1.5MB
MD59e1251875b1dd0ba20df9ace72e06488
SHA1e1eca3372f63c4ab4c2d1102d04e808e045f0f3d
SHA256480f990e33731ce49a8f10f0d727992ae3515852ee9e5f2761598961a0cc1d2a
SHA512cea76bc79565183748273e4bff840187dccdfa737fecf443b1c0c5743cdc1d5cd2fe49772ab2054f8b12ce59f55c7c5ebac8bbd840941e142e7f2018314798b5
-
Filesize
256KB
MD549a5ae533a3c5910bf78bc9b95cb6f2d
SHA15037f6329912e5340d03d57f4bbc69ffbe84458b
SHA256cdcf9c96827c7bc632da362e5d073a691d14fa905cbf7251e59db7dad6c5676b
SHA512ddea4be07c74d1cb810e3146e717ff136a770f5b500091d1bd9b1713cd85188c0c337ec498cd429bde28779cd8fdc6dc124c6b954f4923dcb02e216acedd08f6
-
Filesize
256KB
MD566e0094be78e259d95b353caa1a45710
SHA103b0ce865bb25afc142861d2a5a3a4ce78644063
SHA256abb58894c7ba85ab8933da59a8cb745a753b8a5e18c5fb582b5e9376f8f07dc2
SHA512a55b3bf0a07f5faff65250da22066b415efbfbb642b2a818657c78e4a5e00f56ac8a9b2eddd55ccf7b19694bbb6f207235fd034bf1c7cc90b124674cb187704f
-
Filesize
256KB
MD5102050fb1541ed28d154db8ab23be297
SHA1e9fda44f452ca639cf13d7f1d6786e881b21821f
SHA25669027e8bf498af54acf5189410fad7c67beab002d222a023ddb8b79e2bd567c0
SHA512cc93cc6f9070c24d6b7affcf9d132fe9b8ba3640b7039bef7b1c3a7bec494fa11f9ccf736cd8f9757edd9441d19e790bf4c6d3a570145a87d4318adeae999e17
-
Filesize
256KB
MD53da91f0ed514f93937f2f6bc344b5d7a
SHA11a2f9848af2dfa080d31bb0e642896f9925037fd
SHA25614b5e5e747e5aa7d5c3e11da351cd3e339fc387608bae16823d47fd1ae3a0027
SHA512d394664d6c32454b93dbb6eefbb8e02109bb3944072bd86234e5939e758739d3e927c5bf1a2a1c6e171a21b51f6f278bf941c8ccb0285879be71e6040858eff3
-
Filesize
256KB
MD5788d57fc9958858fcb80071a63f33298
SHA1c5ac8cdd1b6ac4663e5fb4fd79a7886cdbe1cc5d
SHA256bdd68f831a19445325408f0e8f5cb277c90f11bb420ce41b2820b34db7aeecce
SHA512eaf0a23ddd78bc4665eb1915d26ca86be26e996b85daf4a11021fb04644c2878f1b9cdb47a893e46818e89cbcbd08f2e4fcc6a8262edacff5a10ce5241814996
-
Filesize
256KB
MD5559041c82c3c022e53cd65c2003e4731
SHA146db86032d63da1e090994ab2d7d4569d4d73789
SHA256a3102d27bfbf83effa1a16921f46ac1bf7bac95072b53633be890c44ac6baf95
SHA5121b34448f82a2035f901f03e14b28a0f056e5aaf88a6406b83ff2f2acd75787dc1f7635f463151391a2aee5c8f30e6a474876413771d101bd0a3890eb67ce3833
-
Filesize
256KB
MD5299386574fb48c1a9e12f671b8bac749
SHA1e142a08b5409bc3e49896cc160b27a6475e3f59c
SHA2560452c3bb1c9f2d3c8031e8ba43bdb1fbac9e75f98e468be8cc45e9b18e09a3d6
SHA51215f132724219a57e651fe4ffc98fda049d8658b0846240c5a26c634bfc1ce7d2f2ac50d8383bdecc2edfceb09f20f70d9712ef5503061bbbc66478f893b1c663
-
Filesize
1.3MB
MD58ef3bfe0022dc4e5188237f5ae1194b6
SHA18d6b002c3fae8efc8621cf3f3f33d8289f9f6b28
SHA256dead2ee6ccf06d968f1382779e07a44234001209dbcf44fa3fc25928bb7125ed
SHA512818f5e1407f7ecb2b479f3296c68e1a97efb12df0dfbe545a0cc9b95289ef721fcf26c22aca2680aae0d1435dff5e222d21fe4957247509ec2724b69adfab19f
-
Filesize
1.2MB
MD5710eb237acbffe6bba1d4d3f323be968
SHA1e31da5bb09b7d7b0f9ceda59c749b1156a9d1871
SHA256d2eac36b08eba1ede89c8a4d87890f32fda0db30fbae530f4447336804fdf60c
SHA5120e46448f768608ba274415e822de664fdeab52b2c98f0081732ab7204160af625d77800b91efe86f88dfec061f5b0c6caacd97014edf0070fa8e43ad44351eb8
-
Filesize
1.7MB
MD57197b62175053b72a618b3e451653dc4
SHA17b01b8c7cf74e6ff7c9063fdfea50447ba0f5779
SHA256fa72325218588d1afbbcf64a5f75b59da09a73d9e84c1f7f39bdaedbadb5c522
SHA5120a72ffee198a8381baf4b675ab0c2b77b35bf0ffacb2af1becc6096e68f231d67c7243358671027fb51efe007fd2cbeff976cd6e086409fb79b709319a28eb22
-
Filesize
1.3MB
MD5528f35a0e423403f8c6ffe79c87a32b6
SHA122c4a5b5d24e19e97e7490d6960ce8584dc30d78
SHA2568f3f04dd10d0306759e40e2307d98451d18251752f7093bb8cbb01e91d970111
SHA5120c75f4d5e407a73bba78edc93a38b12af383100eefacbdeeb95f0d7bb5b93434fe7592dac4ea3c64bd3636722358178d337b9e01bb3f8a6485fb4e7e3015f593
-
Filesize
1.2MB
MD52f2a9e6bf783b7ea7c7f4d292d3dcb9e
SHA1e590d25625e2a2279eaad8c48cde105bd00c08fe
SHA256aface79a044ab5f2595da6806db4b67c22a747f7f3184aabb544b430f3a0210e
SHA512a6f1b9a54c46dbcb6a4f621b723cf8ff17e577637141a8d12518a748bcbdab19bb934f584434558f53d1ce852b48d26e9fd46ba6a2db67c8e995646fc4d67a5a
-
Filesize
1.2MB
MD5a1e5ad86b815457e9dc19032535f794f
SHA1065bc8d3162409f0947ff805082a7882f6085dd0
SHA256aaf462b0c351a8fdffeb1662348a24b4488f27f74c99ea802ce462041a960562
SHA51265db61d798e244bde5785cbb7ee45395992ce82d32adaa06d0ff38744fba6291a577202ffe852a7251203c9e7e9a47b813b2a2b3da87d4c329f851ff8c59e51a
-
Filesize
1.6MB
MD5f661478a60fc624fa34bde4f96472508
SHA14ebe609d5d5064962278716d411ad648ca51bb14
SHA256261e285da6fa37a769f5b7e62eed8ce42072fad3e8839a8189e825fef006594d
SHA51209972ec06b58f98621f737743fd80e33cdf5ca314c597f1122cb96195a6b5f02dde79164a894a419395eea622a8ddaf8ce3b1308fc9f43e24ea12cb70ab4b96c
-
Filesize
1.3MB
MD5f570ae5e4cafae448cf8a4a3384444f0
SHA17d504199ac16d7fe4178e39ab1e8ff29ddd094a4
SHA2563881b459a852d2da4962f5b17e7de6e2070a4a95d1330e00c766a54a65423b9b
SHA512993bcd741106ce2383d394e710ff5fec729dd2ebdcbe72a9bfd3cb4f7a204ea175fb48730a1420bdd208b26cc06fe4c4b142c0a92116602dd20d98a32617785e
-
Filesize
1.4MB
MD5bba28d5b54ea268452ff24fbcb54cbf5
SHA1b32bbdbf7df2bee7e22881e15c3f1a4930062dc1
SHA25641a7c3c0ce4a4683f6d38255e1bf5fc4b8af03db900b8ff94b6d79fb5490465b
SHA5121f43b98c740ea1c0edeb0be91406986db5caff45711a7f4c6d0452d11d44f0d8a71c8d4e85d34f221f6bfff86777116d954781f99f9cdaa2e6aab3656229d78f
-
Filesize
1.8MB
MD5cddd2b36f9378aa58ca10b2976715563
SHA19897baa2159d2d275b7d81cd3d3a35046c430056
SHA25695deb70c434b238732be0639c9c42a817568e51a8dbb92699c7d8e849c9b6ad3
SHA51257e770445ee43d6866bd9bf5e574501b38392b9c530d95082c57bd6c0262216430c48d9185c1196fa04a7b0705d07b8877cc7f99a5618b1183f148c2e23ac4e9
-
Filesize
1.4MB
MD5e575e5b8fa577d69f8e3b38231507d53
SHA11d84735da545ac6626210d877d7e1a0fadb47033
SHA2568f968683e13b64c70f84f90c3927d98b8206b75bab8329c21b279e5a7234b742
SHA512c6572900969c29e33135b92bd078e003e160b6645ff754518aebd07859109bf752cad4efbe81cca59e0471427dbf9a6071e95ac3cc2bf7f2d4f8dbbd5097a04d
-
Filesize
1.5MB
MD5a0e434fd96b5f9ab95f89638044f8961
SHA17c9ddd0093e138e295255bc66671cd4be1769841
SHA2567a80a9d3862343fad2451497003abf139895ca2042bae3dc8126182d061c0d5e
SHA512ca58d3750e74ba0b73058773b32d3375f2c3ca74424c18e3450e9bd8cf8a27c70664279c1bacfd0d75b571b06a002c781679344308144dfbfca8af4033f91db2
-
Filesize
2.0MB
MD5d96b2b9c4ba7b565122eb052a7327bae
SHA104c35df77f22877b50a23ea6cb452cb6327a1e74
SHA256db476d14cd67272f1ad9a75f667fba54ef48c2fb80ad3792b03aacd08b17b42c
SHA5129cf09e2d33a51cb62f9cf79d662df392b35ebe9c213626f0a5b8d6d6eaafc2dd1696dcb74e6faf2d24b82a7d04ebf186c6b50bc3d1dd93a53c552be38df2a1c1
-
Filesize
1.3MB
MD5a736538981678aee3129b00baa4a0f21
SHA1bfa42c7cf4ef22b5d62812c3d483b0f5e8988ab0
SHA256a77c5b2bd1ad4a7174d4333011f4efd025e5658a385a9ee64de1a573604ca52d
SHA5127e9391152b4195efc068585825a4041bc4a411d203c97d4602a11864f11134dc1a9c5e495b9ec726a9fbd74e055a1adc6e9fbfb8d4945aea7fade285733ed3ec
-
Filesize
1.4MB
MD55ae123d390979406d79bf9d1f724796a
SHA16cca502648a48bfea3bbbd1379f1f9daa1e925e8
SHA256c3147876351a4096b9aabde07946f585b89034f63dd0870bec66c58b5ee66831
SHA5121c0734aae864f724546455351910a978400b960d7b0a3af961cf71a05733742fe6217cf9b0dd13287609b064e2bae1c8d069e8e7ec3c46ef777cd9dee31a7309
-
Filesize
896KB
MD5cc85c0b2ed0586e571b75a6baf8d8093
SHA16a0a8ef37d6192d1567a350fe92b53082a835dc7
SHA2566e1b10396a8c23c5008716c4ae5ca4c77806ba4b18b60bfc0924ee216ec453ba
SHA512b3341c9df3a764261b5a5a3569d3570a090ee5db64289acf3eadfa9f830175777ba194a077c4528d9a466104eac280a0afc364d781bba37cb2361f83d8cb18ee
-
Filesize
1.3MB
MD5d55faa9777f9fb77b7fc451fc3d44e48
SHA1f4a32da6be9294c8cd83dd70c0d07d3f5dcfab96
SHA256a4a1fdac3b985fba1d641609411e5824e44b2fae35bdc4da95dab987b55fb743
SHA51205047e3de8831c103ff24ddf5eec14455f40462542cc065b22db09e0dab099ca015df425a278ba03e9723dca2a0ad7a0a00f76a358debf05f4738bc697b7b836
-
Filesize
1.4MB
MD5281a2f0d1c99eb9390de1180941d3073
SHA1b340aa9809c2c951f7c6af48afac47c2f386271f
SHA256d915837bdf5c2feb5c73d4aea0e419aef8ca7c9f60ca26b55313a0475a6b08c2
SHA512d2c8e3145889875def431af057d44415907580c6334809411214633b3e38ce43f8b77f985ee8dcf5c64f00f23bd1a5350d34cdf87b3a9f999f85203184a3cae9
-
Filesize
2.1MB
MD52188b224fafa8dba737e4b2ad0123606
SHA18aa2ff61d1b527c6d5bfc347995810e1e559b202
SHA25685e4f1b13db34f1d2ec9c045762b7250195acefaf7ffa9143f144285e1b60096
SHA512c99c63e6d6008d3517a1b60edd2febe3a05dc2512e15cd6393554c1af7402fd8059e676456c9fd5bf2c7f1d201c53b2d209f18d353565698396ff1da6003f0db
-
Filesize
1.3MB
MD5e8ac41c2c22d9a173ff182ca158b77b9
SHA13d181a74bf8158d5eabba321e87357a8514fb4c3
SHA256d14e6d969ee4554c5bc0cdf7d4f622ae5706917523945b62e7be6add222fae8a
SHA5120bc42e6a8b47abaf57141721cc3776513f0b193bb78e09557bed69777251b99cc4b2f4dee2a9b2f9e388d53d8252a67fc21cc6c6db566b9f91919622be99d51a
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
412KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB