Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
11/04/2024, 13:24
General
-
Target
2024-04-11_93c3263fc2104463d76831a89128e4d8_ryuk.exe
-
Size
3.4MB
-
MD5
93c3263fc2104463d76831a89128e4d8
-
SHA1
16d87b4e9869f444431c5e7c43ace35c197f3211
-
SHA256
6dbe5075dcc231b42afeea49379235f12f1b9ee8b96c598964ff01ab67333a26
-
SHA512
101299b36ee69d368c92004fa1028ccd6b33fb1c01d52bba4252a1a2f7ac1a6c730c82e4743864f4a129da712233ad22f1d321e4cd796eeb6f06b27c3f0b4dec
-
SSDEEP
49152:3Q+UuuLhdDM3xt+5YqcYsdJE1fyMt4cltQsx2eoqo5rN1ggWrJSdj5ixMdFrIe7y:3Qv5o7FeW5rN1UEj7TjYvH
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 24 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 7 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 42 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-11_93c3263fc2104463d76831a89128e4d8_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-11_93c3263fc2104463d76831a89128e4d8_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD53f6230dcdc82864365db12bf1fbe571b
SHA1e3551e63c2268f7c7b94dfb83e1e802fafea6301
SHA25660e1afd76e3fba19bb0c74a364b31eab743a6d032cdb8d7b21cb3bf7105bc308
SHA5121bef71f0258772d563266efbaa86eff4f7c591eb0e07474a7f8cdc040534e324e9272cb099417697d38665c2ecb44bd1c2a65c1e93823c49618ad837496bc7ea
-
Filesize
1.4MB
MD554cc9cafb7fc28079e7ab6083dddd922
SHA1221ac1359ed1342d7a554339a3422f1a790c82b3
SHA25660e7860176922848d47aa18a06d64b1df12fc582e25dec36e44f9e75ce01e9d9
SHA512e0a50c9245c5d4005346d91f6ba6ea1d264ac6e3957ca50ada63b54389a6a2cc5036028d095b792d734afe498c3ee869ceb6cc4eb832076fcf4bf8a83a7baaa2
-
Filesize
1.7MB
MD596140e11157ded90b9051ab9cd092212
SHA1ea8964555b7c25608ca4e930e5f4bf25cb079e67
SHA2562b9a4505f430944415b8b01091b9bda5e5b5baeaf3509e6837da39b3aaf94de4
SHA512cbfa384022f6d00fe4994f7b280ad8988db9bbd546104f1d338bc51b3214ccd9d88581f323514399b8cb5007faaa0bf2ce5b9b379e5b6707e71d08153415c7fd
-
Filesize
1.5MB
MD531177abb88a54d02736138b959bcf5ec
SHA1c7e601acee75779b96a4b0e0b0d01f92794617bb
SHA256ad9ea5355456e16d00249ac35e7e0d4a46213697ce63103bfb6bbfd7cef61df8
SHA51217c0e814b2b6dede40a2ba1dbcd6728578361f6e262f9fc943cfc8df5bc6134f1268c9660612d63ff60a8ac65180b0db2565a53a87db7421733b10a4c4555ea7
-
Filesize
1.2MB
MD531d75abd359dc52e8af65771a2073642
SHA1fa0e181289369b4aa103f5d870da029c77431ad2
SHA256bfa86cc4c0b823bc5d0895aeb689ae4dc425d714108083003436355207b8eb05
SHA5121bb34be9a633c1f08d3af92a438c95cc9598d893631377ea8e45bf173c413f3856eea97897500558dbe63eca175dbe26675701ed38f8de30e37fd3687477ca72
-
Filesize
1.2MB
MD514ada38bca412e66683fce718edf775c
SHA1a0ece2f8c8684a51d4f34d414cec1ea953f918fe
SHA25651c98420b499e2675d1035de97b84d0b3363a528fed32d394ef7251ed8f6fa27
SHA512b7c9fbea66376449d4f7154c16a60cf961176cdc48414069b7932251beeb3400b804aafef81111fc679a5973f68b12f593fca7fd4df4bf066f2ff3e0532bb6a1
-
Filesize
1.4MB
MD5d75ff43ce3acae7d3dc0e4804cb9b889
SHA1faad7bc55a98f8038b6bb34086686f3bccff81ae
SHA256d46ed4f1d89651c918742219bf1dbd16181c70a919da7627a750e2b377bb69f6
SHA512c98498712e0a398a4be19d8973e3e5e7cb3ce5d0f1ca3f8ce19647f539a208ba8b798b2e4880dce7fa56671017229562d3eb67ab101a43ac48adc57419b22195
-
Filesize
4.6MB
MD5b5f9b3667fa9dfffed28bdea147471aa
SHA15d86a1d9ad05c8dabf97fa2d20e318ff01974a00
SHA2562c0c74559b08ffb4dde11782b880929aa465228fa990af35f23cbc6c5a549561
SHA512b6e83ec4b3ae343d3d92e71ca1f9a5bacc8da22cdfeff5a2c90cd54ceaa54c86b30259f7a2e3c482b2a629b2b64c3e3489faa2eb81c4ebfffffbb7ae1d836555
-
Filesize
1.5MB
MD57bcb01cbf9328021d6cf490199166e8e
SHA164afc40db43899cb7f502e88d4eda88bc0237799
SHA256e6d8bcdbb7d1d0bb9129220bf9930861c8eab57cdba9fdb15acaad3f4bb06fba
SHA51216062e26e48769bbb25cde61e14c8fbb7e2e37b623ca33c4f4168b527f07cd1d0b30f9383fed4cf090fc21908261a68102f893ab411afd5137cb85654c665bd5
-
Filesize
24.0MB
MD54e0e3c796a4fa47393794754a5def42c
SHA1c5fddc78cf136c062bf0624ed7d027fbd32202c7
SHA256450525f8bf5ba2b4a5d368aaf75cdd2968d90c8c4b9e34d0c92ec49696c1f4bc
SHA5120d9009454602423124710814d4a634ee065aa77565e940fe46ab55dc5d50a051a7b5bdd0d23e57c6caac39901d6628f8d409be8c05b9f32a09f640135b38f97c
-
Filesize
2.7MB
MD5be58b7a9154513584dbb81a40f3a4126
SHA1bcd9e5540b9937ae9ba890b77e4e917038ee8f2b
SHA256790f7686a866a94113e0271b62b017fdbb3df259d9dedaed602cfaf6d5e57bcd
SHA5123e2922b7ca8156e59775e94d24da0c833a15f1d0e20ba7d1073097a9dd5190f88793f7a71b7cbd73a935148ce5b8a8b04411d5ff521b168074d3ffea0118f88b
-
Filesize
1.1MB
MD55c1b6ffc716cb9557fdf1dba90e2350e
SHA18194fcc7567015a0df70be76701c67114c26854b
SHA256405854851bccd1282e42cdda07f896298cd16f317304a37cbda153bddb0b93c8
SHA5120beefa6e11f01b8cef4188afb26f43ab1785c1ca80a998696b4070fc4d7aa2681eb93d7c4b6094cc5ee5a237c05c3fb038799030727e359cc94edaddfcf5c42a
-
Filesize
1.4MB
MD55c96115746e12b2e1c71c6ae54466365
SHA1427cb59e4f0457fdf8d4ebf8c106557f38f6bd94
SHA25688e30c2d6df6ccd7124963c7e7a2399ac15e4a09df9e22054182605e9c0b9ea9
SHA512de65a9ad302bc1653a15c38ad3883e98965206e15c89cede37b0852ca49c70f12aedec61a05f8f4998b72221e3c425ae70cfccdb5ec2331e97d86839b12a4e6b
-
Filesize
1.3MB
MD54fb016abfa58c44714b7b98012a07763
SHA1260118145bda7361d76e8d81cd310dab5601828b
SHA2568eb9d266469d99be8b254a38d30d1d34b934665623353c3bb2e899c24acf1e1c
SHA512cd0f16602dd3bee68be913997888817614a96e29e4a4f8cc30176527ec3d673dfac4bc5a56caa32b58ce5e82c7d5f5e91285c94c178d22b45d4b6d90b7f1e468
-
Filesize
4.8MB
MD586dad88cd6e84455289c5aabd91c70b2
SHA13c7d4f390853cd531aba82d03c20c831cfe26a5e
SHA256aabd7f2839a432b04d89cd9f60772d22278cc5a13a04acef3c9e23b7cb6cb814
SHA512a5d119f574844cec808f43e6281c3a014f28edc03e482b0c590d5e05fcb82d2e08fe4bfe6f08770dbde6344d7b159866b8f3c068483c84ed225d73e3b28850b3
-
Filesize
4.8MB
MD5f3cce7fc5d1c767e25db3f021db3ed73
SHA1128ebb6bee422c0ab0bde503cd2ab536fb41279d
SHA2561d18d1ccf0d931d5f5d583c953c88e7fe282cd7c754af8e5accfd80872b116bd
SHA512dab65cc74b1181ab244a7950496d0735a7a5179e2e00b0c70b8d4c8e83bf4c7947f4da5713f6b79cc3c2017a82323f8e8e54082ef82a58a58145c6d92f0ab6a1
-
Filesize
2.2MB
MD553bc8af9aef2de20434ce4589dca7523
SHA1fbeee8904c980fce969b92bd1809c3b51903e71c
SHA256a2760c4cebf4584f06fe5a0ad5797d57cad5cca523d3a4a0366f44c782503f01
SHA512b7c1d6c083304e7d70830a143f357b17542cc569ddb5dc2c949c1bbf2851e449126f35428b5bec88384c7f3a0f4487ee66cdbc5a1acdc1e8657ce88e0573ce9c
-
Filesize
2.1MB
MD577908dcf16f0a6f6509cbeffa2a87a61
SHA1321877ec088d631f5a4fd99fe81670b4d8c1f4b8
SHA2564688e674551de2c667550b7e50f266f2f97984a92e44cd23d78698ceae4389b9
SHA5124f229612b5142367cca04bf4152ef37989703c604e734327d071f90003bed6bcc043f5a777f8690cbd5f665af07b5260331f1e94d7b34ea2802a5b0690aa2a80
-
Filesize
1.8MB
MD5df64f61d038a141d2e2fa3c4c256628e
SHA1a11fa5480b1caf20ea94eb6ce43ff81db33369c2
SHA256fde293c4ffe7888c3bbe637cab866bb02bae98f351f5accb2e1c76db338a0721
SHA512998694101ed0b3041767b4027dcdbce05392d3e1f4a27cbd4eda67248b3c6edc8d7a3ee9eb9048f5eb74a80a8a0a7f9caa184b6b702ded1dae5d2a151336c192
-
Filesize
1.5MB
MD5c2757e1f443e4cb242f497039e156d9f
SHA1f860b2bc0d471d0065c5447c8b45b5ce6344a115
SHA256d3835c5aea7b95e3f736d2db39245c95f51ff6d38d1d51fce9be683725e154b3
SHA5128bc8d8f06f800f0229c40c8b9b63445b4c1be7f16fd512c32fbc548bed4f737a023e92ed658c43ab20dabdeb0fa57d30bbdc2bcd917670b5aa3f05f6a7551f3f
-
Filesize
1.2MB
MD50718d4735a53aff7bbae28aa4184e1a1
SHA17725e958eb7848eb6837f68110e0d91372118d69
SHA256535ef52807ce2523259e68151aaa06eeba7d9ffb87790c26752fc7354172516a
SHA512a56bc465335c18860d7dc68942b34e84c8de424e06bad4351d67e95ac4f278c2df57deee28d40a55f79c672e82b0be1d7469b2e2097a537c2c4c3659aab4ee5d
-
Filesize
1.2MB
MD5900665e00995a7fd82d9c7b4ab6a9c99
SHA16dd1058216ae26ad09e39f4408d8b052418696b4
SHA2569be07fdc402eef050804324aa99d5950109d33148025a43ed0ba621f40c18f67
SHA51293a1eca6a5efcd056a5e0769c5f7325cede0dd04c8858fdfd28635cb39845f5ba06132f105d7d3589cac97af98496ee43a98d882d21f6fe2fb457ad0c2669945
-
Filesize
1.2MB
MD54a3348df5be17687c8e408479d8e1a9d
SHA11c61375c21926061e94ca4563da9d5a39b62b7c4
SHA2563586c7830f23b1c7f405edc2302c6a97cfce439c5cf5fe966d9e416440ef929e
SHA512ce06caf1ff929a6ef26231e0cc5b58c8fff11c04aa3ef80120c630e4ac3511abc29465398047700fb0f48ab64ea1b19b7de17ac83d762f8f37b771494ee11a55
-
Filesize
1.2MB
MD552358712df2542ae95ed8c5c176679a8
SHA1d3b8f5cfc9ac0710cd4fce7255c6c4fc63b11385
SHA256911dec9cd08a8d9ea86e7d0e9b737cbce2072fb8319238d3b7747e36cb5a8852
SHA512869273185815e3e25ef451b0b57b9b146ea7a2196795a8460c2ac5c29ffdd5e6e8952e9ee78316d6a86a73730e8d34024826cadd8a349c0c5239e444e91b7cdd
-
Filesize
1.2MB
MD59fd24689ed250f50ad582ce916bb3203
SHA1e78b040227f5e5da9a8d932c1aaa677c64c88e02
SHA2567390ab2c43007b2b36c4075c767f589e4709183331b145f4aaed08e116de4cbb
SHA512057730998c7b25c16df7a394ebd10fa791c67c531c9b37cd294d75cb1330b9fe002b452b90cf06c152d74b69cdd077e903abc225069d38c15768f0cf492c2a2a
-
Filesize
1.2MB
MD52febd2ca4337b01e66adf1a7c665915d
SHA1dc5da764423bc30492aa0ce5f839397b7d21455f
SHA256523eb4d2fdfb0ab6a64c4e6768884057749aadf433f5827c50e32ab37f91562d
SHA5124288040255f35d312853a5560e657db6f4273f27f48475cbb2ab13dc6d5dcba141cbcddd79687a6a2c2dc42dc9bbd5c4eb342f7aedd71883fb9114595a374d81
-
Filesize
1.2MB
MD5e12ce39aac04bbfc7142f66902917852
SHA1c146e53f4176d296952fbb9c2a6950c4cc69b9b5
SHA256b0e0e9fa1eee41c59ac76542cc0fb7d979d106f580b09fbfea90f5733f785537
SHA51220fa00f796b02338be5e16571e4325ede22b5ef743d1b81c59de2b654f759b294055ae4b6519c4c09995970c841cd31771288c6043245f8eaeddc6b4fbbde051
-
Filesize
1.4MB
MD5883ca105e690d5b635b1d134935ef33d
SHA10c9b0e52016e85d9783ed2f26063fc4807ecdaf3
SHA256580cf49b6015a3b003c365758b2f50e1888006e46191521a115f695c65a46824
SHA512d182ea8fd6b111081cfc5c78e9546cda5bdb25b9ae4833e949d9eab61056954df57d0bc0156b67a92dd7979fb66beacd4925488b4179814fc8ae8bde6e302af1
-
Filesize
1.2MB
MD51b8ef4c69c961cee436aca58ba0f1970
SHA1cb49b1494e7cce65bc91443290122cd512f9aa0d
SHA256342e820fdf46fa2e1f600ab73decc913ab746f2843b246d31e26d6e8025772ef
SHA5124e6efe09a0d6bf8ba5349abaf1ec79ec77c7f973af3da409cdaacf2ecf7654600d7e17b24e15030f9e9a3333cb1da19a9238e062210878ae5a4b8b53c08ea741
-
Filesize
1.2MB
MD51f3d1188ca910cd962388f199384b101
SHA12e8926c7da9ca9a36649ff740b5668645e7080ca
SHA25638a69218eeb53388089ea200662f3887cca13fc6fc858fd858c60d70e9e9bc28
SHA5127785beb32adb48b641c1858f2a21e160e51df6388ae0b7f74ee786066f8b185f053177825bbb1cb2848b7b4566543688b5cade3b2090d6387cfa1d19099a52d7
-
Filesize
1.3MB
MD5dd21a469ed7bb44fe3d4e9da63ec5332
SHA1e94051a7575990483bf52faf1502d1a14e65b716
SHA256dde2a27bbc0f24e98d2e5e27422ec9331b3bc97f4a9d667589b9c30c1aae7a77
SHA512c7112a23765875e187d911d52c662a709665ceb9961c5ed7df0e92a75038019178b4d33adac30312c133b8accbae58d3b165984fb9a50ee769df14b3a42a737c
-
Filesize
1.2MB
MD565e285f1a0cdca1ae65b909e7c62cced
SHA1336f8f99bfee94aa8b8be8376127dd1aa16aa2dd
SHA2568d9b5bbbb386a06e470ea2466a45c041bff555215f7d37937cd132b472542340
SHA51269c4fed615a70c0c41f9a93800dbdf0c7f7e1f52cc974ad5d0b743009011b9acc8f585859e9a5dccbd9c5ca6584be87f81a33f2d766057662fb7a06a5ad0a5ee
-
Filesize
1.2MB
MD53cadad57132387566496db5c629e41b1
SHA1b32bf5c5102920ec49dbc1b145cb79f76dc065cd
SHA256116e24cfa037c0c3c9b296d39b2bfb0d25e95cf919b53c06c8fafc3e18997fa7
SHA512a973813f95a3466be1f29b14b74322bccbe9a413e682c83e11608b18a9de4aba7b7c883e1b2fc44c2f42271aedbca76d278753391e0ce4421d93f4f9efb2ba3e
-
Filesize
1.3MB
MD56631b6881ca89c42dc4e2c79ac21ea29
SHA17eae3582a634c7b196522368091f938a34dd90fb
SHA256296d52ed2acba669e44c2123289e4e5771515712cea80a900c6590025040e4c0
SHA512ae809aac08df9376b684c5e5bcf8f9ca46ba729ddb9248728e4967e79b783da5ca7181fa2ab38838cb562d1d33cce9f9f0d302b4d65d0a8a7b478650c3f324d4
-
Filesize
1.4MB
MD55e0cd36aa9623514c88f2506734c5f85
SHA13c79a09791f8821f1c8e45562c21d5f891b005d6
SHA2567aacc1517b37d88ccd96d3de143fc02b711bb21ece16286323e5852732c981a4
SHA51213ec7fb3252a41a6df605360cbbee1c6f5bedb4452faf1903782bb01cdcfd55b09d882180ab18cf191a46d504b3bdaea4ec0d010f5d348dfeb9669ecf801fe8a
-
Filesize
1.6MB
MD51912342e9afc21487850fe3f1d3c5dad
SHA17fba5eb6733671330c7ce9aa39b7b9c288ba31d8
SHA256f0f3aea018df095d458f57fd500098a8053287e1bce1cef14ee5937b68414879
SHA51232bf32b3a5f00a900fe728274017ca484ade838d6bf800a8381501848b1731ac323092c1aec3c94bb89009114aab1458ed142e5c49a605d7b80ff79683ffbec0
-
Filesize
1.2MB
MD58e1df46e1c9d92ae81f11da6dbfeba30
SHA1f1287cde504b6f11f4e30522a09a597c70de6a42
SHA2561d8d4b5839d913211c37477140b37d81a87e0a11a4ab50ced2c0cacae3b13eef
SHA51246191350fd409dda589821166cf94f2bfe19cf6df11e5d999c1b39f5d556af502e0cdd83c4b1383c4b48c69ff9932cff662f460ac8cccb4d4a895b195ed8f24a
-
Filesize
1.2MB
MD58576e514279fb5b10aed454ba13e8a3c
SHA1617591fdac3bc5c4d70397ea1106dc50f60d669e
SHA256492b1cd196dd5be89677adc79950f85fc5fef11fff662600c913321487ef21f2
SHA5120140bdbf4f46b1f9177484d6a6acc86dc227b00871708586ecd060dfdea44b3493585cdcd442e7646356d5f8e1234e42a38abd637b490cbbce06b6ea822346bd
-
Filesize
1.2MB
MD5a66af08221ab4f671a4a1503b8321b1b
SHA1c4b937afd1b35d363b0b7a80302f8b9cee6dea16
SHA25640f6ed1689e02dc9572f813d38108970de9ccde29c9859c6cef24a12106eaa8d
SHA512c4b31086170a7ff9f440d8a0975e7b69a3126d45892add4d81d26ed221cf1a31ed7a4c55e30c3df8251badc119edc848dfa7bfb796a1a60dc9dfaf8f832edb52
-
Filesize
1.2MB
MD52cee4c20c16ee617154874cff5fead87
SHA1c52aac67a7628780c32e15b4f2e9b4520d8a6139
SHA256ffe8e0c6061510f5023bff3f72fb3d97698195e808eaed49d4099479e628034e
SHA512bee38f11c3eab006f7abe4d291c01ee987dda94b63680bf85afa5e36adefd30c25dbc93fef346d099d41dd1c8933789cec2a8e2363c80cf7cd25861e2ebe7a0e
-
Filesize
1.2MB
MD5e0319e3d7a82967748556edee03f9c22
SHA16a6aac4f958a24138b0a926c2ce0a85740bdb9ab
SHA256b260f54b2c5834a0288849d2883d4944ce2d5b3a92e191ac1a63db0c3bcbca2a
SHA512cfdef14d417246e6458ef7726db14e57e57b2972a3d59763a622f46b89d1262d914a2e6fe2a08efb8b8535d8736c8fd0369e00978b5aeb55f66e122037f21f31
-
Filesize
1.2MB
MD5f360c97b48f9bfa5751249da6ce6863e
SHA137affd7c6f4c1622ef19ac31d88547591d562a8a
SHA2569607e30c1e734b578aea4a54bd0d4d466973fbea2daeb97371861c95c156a6ea
SHA512eef82cbef2b6fbf3821e378f250e083b0390f0e9f57c7464ee5cfddcb8f97319483dcb638f99dd832d0c4e30bb1aaedfdebe98a837b79edab48913ba262326d7
-
Filesize
1.3MB
MD51d2454f20c723b863859912e0c6fd067
SHA1eac2f82d634c9d14d0045e6e3f4a85c88a323532
SHA2564dcc3e93e631630442aaff5c0534533200d4f4cc347bd92d663b50fd220da176
SHA51221501735d6b375eeafa281986c12d2fa244d541704902efa42d375c44774b7698944fd68489ebcd00b2ec7d0eb1ff0700aa7162863344d8b130ab55226b7ab23
-
Filesize
1.2MB
MD5568f16ccfb8dda5a0f447c13ddc73399
SHA18bc089a6372a6dfff4be6051477ea58befd3a114
SHA256252957e2e667ead39dcc6a92df637fff550b1d1527751b6808c89d268c806d80
SHA51292d8b3f3d66b21b4e81eb83009f86f83d00e2eecbfd71bc8ae33f000ff7cdf37e83aa2c4c07223a2b6bc28c0ca1e68f15a98de80165032deb3988ed1b96693ef
-
Filesize
1.7MB
MD5564052a039c5254f4af0a56f38a631d7
SHA1812caa5e07ab31b0a0fe7c67c877a52b8b0262b0
SHA2565b87d2843856de026247dd36cf64c42961caa6ba5007d0e51aa23f73f5f8cd7d
SHA51267b1910e99d788c3ea27d23b304062f508c384c971f1c9735b6f0dfa9939015714f221f41ca759175ad63b2eec55d5eee351d6cddb2ae34e5b54ba529d7b525e
-
Filesize
1.3MB
MD503c75acbfa7a73bb395fbc47dad2e677
SHA15503f6039c3adf7a5801462344a2efe22ad5056e
SHA25634b6de3492085090cf38b9bfd30d42063f5e22ef460b2b675564e01af77c9c3c
SHA512c95cbab66daf668afb401f387aed6a1bdd258c4c838d82b013d7b09907e28581042a1ad48a6317b1fa1ffad71482596016e0cb5685c36827e9563d639e977900
-
Filesize
1.2MB
MD5c7a38a40b5901d7a4fb3f7347b49540e
SHA1cf2b39c99a5e6420ef48c4b11723089e5032da6f
SHA256f13c63dd4374cabd17c661ef41aa9010ce56d89e86451cff0211969857a71196
SHA512bd6bf304b558c4fcc66cb26b8ac62e54ba5e7d93ef07abdb218f3d96c8975ec1fee3177c4397eecc49e15ce349a6cabc0db32a21bd9c7b013c6af8a26c652595
-
Filesize
1.2MB
MD559f3dfd803669f9c98705829ac0be11b
SHA136739aa38b4574fcc9c921b58ad946a60b809ad9
SHA256cb28cf1ac5bd973c0fa55f7306c21700d3bb79e7eb0ae4d4f6a373bd8473e6c7
SHA5123eafd2a01b5089480502b48bf4e9421dc115f3e893e48e6aafcf7aca7df9e3846781562c25b2a874285cc0fdd8802b7c4362e3632eb3f3f7da6e552016aa7085
-
Filesize
1.5MB
MD5a089305a3be6500ee57fea5505e700ad
SHA17e23f40d29d9f56a7a1958ca98775ea31c7d5d8a
SHA256250390a42296e17e35923416c624c0c93017ba6d27f336623c0b43d09f84e0f6
SHA512f3c34bbfe73205dd55955167311ce28c2a39aa51acbf454f970db56c95e4f733fea6ee133cae4d55cd125163f7a014d637e376d8e4fb2a1f38ba42efe5201cc2
-
Filesize
1.3MB
MD5719a35e3e80f4349cc7b376c7ba6ef61
SHA1d659da1ffa6d202ebdca7a6f27837b8558e30419
SHA256d07e47dbfd678e785d04c498c43c7f2fa619d34a97d8668219931783fc94eb1f
SHA5121b6f12ec76994809ac854fd9c98a143b86144c4b1538a3637f7867bf982a05e045bb3baf861e3a96f167a5bb1e70729aab0b4210e10253ba0b458a02cb0507ac
-
Filesize
1.4MB
MD520def1221e42b626f5eb35e200345c65
SHA1d6b311e6c29ebadb4406a3cc31b9032b0fe093be
SHA256ced1108b4df1cde74a0d0e572c1597f39bf831d5cd5abbc8f1e87d19b0c6d385
SHA512be604f4f5a21e8f301796ad9eaa1d70a48180e4814fb1719d25537842a2a8fa03ced662508036e6bcf8508062db6e0475934480da7c3cf66cebd02e9d4ca32b5
-
Filesize
1.8MB
MD512e3aa7813f883de676b015e2761261d
SHA11924ff8e00bbc6a4eec40bcfe5f286571bbbb5dc
SHA25695fac16cf673cf53fdd5f28cee841183080ef151c24b5b05675e9eefce2323f8
SHA5127e54e27791ad016a60abe0cdcece18b23c74a03f8f9378abe22d4c1e9ac4d9e426e8dffdb4fe045515df8da165d8437588569e7be666f9e7e3bb133b3faeb1a4
-
Filesize
1.4MB
MD53700353622a7bfd620b3648d7fcd153d
SHA1c8aa11a76ca3a81af2e59feb0324387e59f3ead3
SHA25695a140cd1b437ef42ff9fa7a319ebaa83cb765f06ede395af9c4e69cdde29d9e
SHA5129562e6456940a460a0b68f927cacf0e7a173bf84290caa4ff1bc201a9eb4ba07a22e08ebf73f66631792c89cf901cf7742f70c4e358e772fe8c4443c95ee730c
-
Filesize
1.5MB
MD596d9b3aae284cb2888f179bec97103bf
SHA13cbe998e08eb323e0264f290d7974f08daff4d0c
SHA256428e8a165e62738b0e867a642c479a6e1e49158a9513dbdf841e1a2ba9e59500
SHA5122e5a0a69d670af7356905134a43c14ad773ec068ddf2ab39840586d2ff25d8082c4dd36ca876abef755728503da01fdf4092945a30cf2b21a463cc3ed222dabb
-
Filesize
2.0MB
MD59bc40ac942d13d390e8ddfc76d46201a
SHA1678cf8263fb076c3d2eddcc4e1352cb3492a2a61
SHA2565b77d438047486473d01a7b560ad84aa5beeae28deceb8b4c31e3c2b08fd6964
SHA512163e483ead63e7718b13b23bd04734d0e531728587dae3ebc9243b05c87ad23dfed94583cc63f18e7bc6206e52abcb7ae6f351c18cc2bff5293b683142478cf5
-
Filesize
1.3MB
MD540bbbd60fa80b2793042a057096e542b
SHA1deca6dcdeeecb85543316a54644bb42336067bc8
SHA256d405e6a04920e079834b3ba8a5f9ed19d5a1cbb8e4c11dbe6081700d3c670faa
SHA512e20f1e109f23dce2984d23cba6d6cec1681cfbb78874d975f369079a55f46f56dcc4b4b8643ea7a05e0b9de48e38e031d649f8886fca10ff04d5f63e8dfd20ee
-
Filesize
1.3MB
MD5905d109459c9437a533a42210382350c
SHA104de1f31d79238e79a3f405ddf1be1e4f0351fce
SHA256ef5d9df58a9213c3a1a179813e07d400e235dd67a63a2bb57916ee0e96cc422d
SHA512f9bf9da3e94c709a17cfdf567e5e53ded69c929289df2f5d01983f7a44bdd38e5a5547778ff470d752c77868293540cf8d388a299aea7bdaedcbca703982988f
-
Filesize
1.2MB
MD5433281da047a22c07e3fd27c7cc6a483
SHA1212ca0917988053384245770e2bcdb8bb86b76af
SHA2560c84a9a86ef98afbcb87c0c576cb92fd806a3d9f54d98a7e9188acc57a50da20
SHA512bf99925d5c613cba0e864bac17e6722338e0a1c96d2e9a27369229605421ceb5cc3328830dab8fd47d60934cb185de9107b3318cc46e743d20a8e248a57cd9b9
-
Filesize
1.3MB
MD59627425587b46c55c45fca151230a452
SHA1f7b5d22b1e87f011a93977113e76c7f9de71aad8
SHA256439597f5878a6726ebe391757a3fe50efeb45247dd9b85933f70e5ad7b6116b2
SHA512c67d0d2c43aed63937dd8ee2f1ffdf20d2375e5956f840bca308799b89bc04775b551a118253ef01a12c08559a47f7a53c19374bb53653d19cb8932995ffbe94
-
Filesize
1.4MB
MD5a1cc95089062dcd177d7e57485c77b60
SHA15fce41b871c8086b0755617b5374a28ca5b60b5a
SHA256ef8684cfcaee909156047d062d60d1596022cc8684c80f357f6b2aa34eded5d1
SHA51279263732f88f690c6f00bf1cb61e4eb22e5a96b39d6c9ffcf4e0eb428ea52c4d4e3a325d1692cdc78d7f75f3dffbb9360b87eaefdab917502dd102a16a7d0642
-
Filesize
2.1MB
MD5514521c97d2e5d7bea832daec004d656
SHA1e70ad2a5ed8665eaeae9fd48ccf6ca6e89fc31dd
SHA256af5eef2facb0876efa09aa2d69c6a89d2cefcda4f04dd16279078d2b31acd49b
SHA5125808dd6ebf92ead1d3d3a7326612ae215f5f2e6fbec3910bc60c6b0782813201adf545c0bb1e527222efcd3205f95dd734e88a8d8d63c144dbf3d1be59f4b8f0
-
Filesize
5.6MB
MD5fe3a85368b53f6c6721954f8434fee44
SHA1ef9f7ff859ad6f394e102eb81106d55671852bd9
SHA25684a4439aad4468bc9c2aac275131428668a1e56f41430336106a662b3fb54b53
SHA512f37108fa5eefbce412ead9d8a570f9b3de98537f455b4eb4d5aca9a71de77636d31220360494cf5a2321929dece918bbb81f973858ae29146a47f15e8479eb1c
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
3.5MB
-
Filesize
3.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
64KB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
384KB
-
Filesize
1.3MB