Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
16/05/2024, 16:55
General
-
Target
2024-05-16_68e7c1c77429052567b42c983315dd5d_ryuk.exe
-
Size
1.0MB
-
MD5
68e7c1c77429052567b42c983315dd5d
-
SHA1
837201f0efaa2d1b1e8a7e93e1ae41b98e7b6f2c
-
SHA256
b41821f81753dffbaec508e591a8ea815cd6ce3fe40afcda0dab76295657101f
-
SHA512
7b33ede41f73276861631820d41c2a5f2b0a62d1cd467bfcc8ab20912ed0531768b0b027a9e0d31aca8047d2f17e8f157f33d24cfcbce7d77d2fa4ca06518e16
-
SSDEEP
24576:66V6VC/AyqGizWCaFbyUH/i328ab4F+rM/aXq6bJfBUam6:66cbGizWCaFbHH/i3da1YS6ozB
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 24 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 7 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 42 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-16_68e7c1c77429052567b42c983315dd5d_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-16_68e7c1c77429052567b42c983315dd5d_ryuk.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD593f50eef11a15f81357a6c05fb65ae6f
SHA157b855bd9ff6d3f56067ea7abeb35198f23e4fe5
SHA2567867b411e5ced2fd86a21d11de4e6ec1894f1dd56a1f8369a8f02dda94f812ce
SHA512a78c70a97183c596cf67e35de0a6a77956ab3308c134007f999c51c01f99ccdfdf050668b6a8fc4cdfe61a2ab8ad1dc06342b5a9088dc77fb9a5eda247f4f699
-
Filesize
797KB
MD554481ed7258b58c324aa0cf2aaf742bc
SHA162e9042ccc1ed8ec7a531ebec2f5945aa6410a94
SHA256a975baec14d2a72d14206989758686b1d7987e543cb5a0d4802bfc59157755aa
SHA51244651eaac69a7766c7b5317514692aeebffe0855c0a4817a1181c144006d3339267ac1e4c508666b1ded50307707a3e25236fdd09a8dedf50850f8c1f33235b1
-
Filesize
1.1MB
MD5ecc2b17c3a4c7c4dbf6e52770b2da685
SHA119e2931490c1b1c649371a5d9c16b0aaf4279232
SHA2565b500c6d7a609bc105a79d5d721d2a9bed9f90202f7bfe2bf99bbe217331984a
SHA512c183acce650538ad98958b6f383d333d92d7d01ac3e66c4039f4e8d60c78ebaae1cf865325735878bd37caef42c2ec810697a6588a8ba585f95a4d436167093d
-
Filesize
1.5MB
MD56f89d747a88922ec171eb38c1122ad2d
SHA18b49bf3e3856dac7491c64f1966723e383187b35
SHA256b5ec20bd65c6eaf8b6be89339ef0270a36aa9ddc25463fc1b855613aaa8b5fb4
SHA51252cec26b0d2fc930bbf6fc08c8e809ba9533d7c03a324f75fcab23a6184c806f9571531b256abecaa93a7438507443218847c34b0030974d9370778f493b1a3d
-
Filesize
1.2MB
MD57663747521b3167a389a2690c5847bd7
SHA16a60f19aaff783e53b500d1da5460488584919b7
SHA25626678cbbc922f7d26831147c88953f8ca25cc6a50f6ae938024c2035486ac8f7
SHA512ec361fda05586a03c3f788f5ea8f07510be2c70465f93614ea4ff5e96bb9e5ad090d5e15dd6f5d8a9ef721f656fa464e760fd7d27406867dc696fce2cb7ee5f7
-
Filesize
582KB
MD5be26d777b632e7fab8ec737e0796b8a0
SHA1b7db923396b55987a9037b1a6007894afa764199
SHA256a345bdb31d51b4da0917f3002b37161f85fcccedfdb881dc2a5283eab52560d3
SHA51246f9e5ca5c2b94da844943688ceffab6dcb28d84b8338c7b737ee352b8b24521a64e13c85bd4524e890ce997e81fcabea6e53d3578a577056bc58bc1d3ff4bf7
-
Filesize
840KB
MD55b41bbdf5636a2179fa25c64ceb23e5a
SHA1e2861215a6d7fbf6bef8c55bc95db630fa79ea7c
SHA2565b5156808358d17ecf097bdf8cb7b3b3e17a3df8f2d65f615f5f788dc7e1cb2e
SHA512456e65002ec9989fc7d2fbfd88bc55e84672494d27c3693d9630c40a70a8d362f6eca90615ccfd24ed3c25dbf4648bd22aeb34823675b1462fcaece7a1b3a27a
-
Filesize
4.6MB
MD53595af320ad0fed224164eaa58a41913
SHA1fbc2249b331c07d097321553f0c1602f74fc40aa
SHA256fc111f0dfc02e2a8bd9e97844f7ba2a115ae2665f310456fc954b88e8cf85fe3
SHA512f26bce6bc2db519e94be16500a6b1e0fb6d6359d0454f6d435c8e4dec44d78c1adb5fda499507474d28e6382da7c01ae3325a632f39c22600796a6ec241d2b42
-
Filesize
910KB
MD507b9e8cab5f9704305af0289eae0436b
SHA14431b96a09b59738954946adfa7b62cf56a30b72
SHA256f3ceae71c3015773b6ba28885e4c17f7676860438d3ed6f3c66dbcee76a8afb1
SHA51266498f97c0bd2a9ed24cf9f4be587d1f443a8b8d24d0bbc8a55a27694e4b52efcece1ecf0d021589f794041aecde9cd5b61ebeb433112b7eeb8b757e8ef73d13
-
Filesize
24.0MB
MD5b54d908249d71ffa2fea3225ddeb49ff
SHA1fb9679d018bcdd2ce6f9613d1a851c4ca322d793
SHA256a725a5cec98d49e74fc2515d5d4fdccf1936036da749ff3eeeb65fa896a2e28e
SHA51262c1f8efe6bbedc50e5086a9cde8c0909af33544e4c82d05ff23d5ee09de83159e3428d755b41f0d19853ff5b5ddde75a3150f5e18fe482a6edff67cbc198f00
-
Filesize
2.7MB
MD5d00b4737f98054c8d487690d55b75d77
SHA16e4d52889172c7823e026738fbb8f5af02daa294
SHA256458bcd7d5ef8f1741bcb1871683595063c0152e1e482cbcd4313d9624f6e8723
SHA512b3af6fba449cafa41e36aa2f4f7bed8f34dea6d73e10b0235a585530636dffd7214c78fee64b3dfe43136a16c2f4d5f6e31e46757ad7a678b7d1a978f1b82cac
-
Filesize
1.1MB
MD5f1f6d53e473387c19dd9e1165ccdbfc1
SHA16b13ffb800426106743b213c244fd9cd850a9ff3
SHA2566beccefabfe145620f090fb93d1cee6ff10fde0ce135d25a378f7bd861576f27
SHA51232a5ff77dea3031f162c4b756682ddca8b9be1ae89722f08f73b1756fe7096d9bf867d24db8128c9f29b92f04f13695b5a6b502cc6fcfa6f7edf97886eca2415
-
Filesize
805KB
MD5dfd1e69ab5d989ad4d9dec731ab7756e
SHA1c67c22a8070facaf5b3b8a9d337b9d5172ac4512
SHA2562127f4d009856b8d1a73fbfa82739cc619c7ec189a1189aa2cfdef2b47cb3809
SHA512cac6ac6e90f9b9fdc280aa54989c4d23b617407b459233606e78280d8a1f90eebace182b18a9255348300c6ac3d81322ea64446dda0a71a3f04af5ae25b190d7
-
Filesize
656KB
MD5da875e9ed8cb67024fd9d8f20d6324f2
SHA148784fc639565d4efcefd890e77aca2d5a647a01
SHA2566bc1ad47768685bc543f36abbf62a916e546d45334c50f778d52b52042571be5
SHA5127c588153e0aa3ecd6282ae06bb48a636e2d93309bc5200fae391a50f1862643570c2f5c501de6a113834513bfdab8bf1b4fdd1e20743d2097255f3a706f1e60d
-
Filesize
5.4MB
MD5462eea95ea92c21a1064a081f68e4d4d
SHA1ccaa5b55b4f2a8202e80317f17254cfd9d7eafc1
SHA256eb8777ba0362f25794a3e0a4050e9603656b88fa7685c3f4aae8e318318a4b95
SHA51226a6fb77fe45c8b942e915590d99e02d3707ba4ba2202a570d4c57cccf6bee5e7b916409a725a78e8ad748f8b552a42c3c64435ac96dc23511e6c1a1440f8fd8
-
Filesize
5.4MB
MD565ceff7d463ef0db9306e70cd8cc0960
SHA19544bef565f55cf576a8bad417df818c8dbc6109
SHA2563d4c5b79847cd55f49f51397c143e2eb9dc36bd449a1117ffecc88403c9eb6dc
SHA512a3ccf25605a44a831464d08a0b6443818382ad4dbe243945d183cac4560a9eb15d32782bcce730b0ddd761791f031ffcbc42f48e63e315ceaf19cde2458a53e3
-
Filesize
2.0MB
MD511089a53a7e1be2e1e301d260f8c8c18
SHA1eccd31377d71e04d11f35c68172b726b9d6bc3b6
SHA25655caca2c618fecfa0419dc524b044971c2772f96f6f288d28413039963fcf342
SHA512ca32f53f1891ee94d3beed69eda9832be0e38ded6219bed9a57359362f9ec3cdd2a9d4b2013bd50dbf73fbb81e4d8b7aee816640742cef2beb002667bf7eead4
-
Filesize
2.2MB
MD53a4d9e9b7061acc55e79f943523377dc
SHA1694189418cf01fb2ca73e3450308d13fe5dbc4f2
SHA256bf6ce1005499bb9a27edd513257b6799d2fa99f6d3679537e6aa740ba7b62947
SHA5121fa433c45ffabd3026568b24957a5f6c9dae6e1ba9dc7b37d81f55258ea942136be64fc09b7bf2734e4404e3a431f579cea56f16f97cbab0f8fa5006cfa56f7a
-
Filesize
1.8MB
MD5e7c3590ec4c69d99b23e87b6122006bb
SHA101096ed2be351657b8f4c933d17e79bc02a99a35
SHA25607b506bc6f9b46f2a40db018e65c7e7f2130075a57db39583057376efd33f2fb
SHA512c5353874ca5eb8650d23d834db5f3b53088fb3fafabde650987aa8ae102a7f3eca8c90524e8213f2b3093cc616f9e13e0a29366373a587866755cd92af93a4e0
-
Filesize
1.7MB
MD589fdf8b5b24943b5f1ef1a797b7044e2
SHA19e3b0ee2624044922369ad8d480d03637f01fdf5
SHA25644eb5d2e848fdca7a0f679acc0acb57c45c1ee4287c6415967e2de3e291df3f4
SHA5123d2934f8d2c7e01efd665d0a894c4f398475af7221bcea9b83ac2816b2593b3d290896d8b211516bfa60dad69a6e621831c3883804b50e016d8a59ae30ed775f
-
Filesize
581KB
MD5872c5d30f28c3b5832c8402187a47db8
SHA11acd19c1583880f965750fbafdb4ec280085e648
SHA25677312605b1e07d9cfc094da7eb6de047bab63c3932d59a6908604a90a9cda04b
SHA512c128e1cf73f5f5196cde81ee007d0d20ad6123171f5b07271fb238f3587009209eb447653357516999f9f72a57c873179db63ececae4ef3c18f129e291a6d3d1
-
Filesize
581KB
MD518437c556ecb7462daac4eb5e3b5dcc0
SHA1c027a3a1e495b79c01e4cbaf0f61c52638cdfbc1
SHA256e808db04929045c4131ecfadac6c3b9ceb3e54032552cee5f9251fc2d276088c
SHA512d6feae1ac7621cb470787479f6fa50e32ddf72cc95714d19dace6308f9daf483d2d22805b1115b9f76552b049e6145e445b7960b3b018244953fca77f8c71f51
-
Filesize
581KB
MD5f55392f2daf9ce8bbbf2daac8dd642a4
SHA11f9160867c32f9099e5a46b92158352f841553b3
SHA25646c10e1dfe760ba0ad6ca30902c56a198d48d1b95467a40e38d8cc6baa905825
SHA512be402627599ab13a75726d9b21038396f7b27ebb6a0da04689e733f5d093ee978ef9346af483046aaf71a8eb15aed70db138ede883bba2f547ff760786955e1a
-
Filesize
601KB
MD5331f95c6c51fe6002442fd637c6f78ca
SHA1736dc80cd67236c0c283ce1f4db35530634ac1b5
SHA2566759726ab1b42a16f7ee7acc784df4429e2b5539501b4872e8488339ee839faf
SHA512d19fab3b5af06da14f5327a6b312a7b183a5d9d82c133ae5082bdd5f1bc763c20823f60132628bc36237660be688886a44b6bb130a1a4767d60c7bf307ece444
-
Filesize
581KB
MD593093c866a033ac39b35b53f3208da51
SHA105b0a1e1c98e92171c3832f0669ffbca9be5f521
SHA2564820ed3abf73a8105b8b6dd856a262b2215187ce38722b313a0e9a67d1b509c4
SHA512f34dad0ae4729b8ca3b425d1a2153621239837c0103e0bb7b6c4e045b95d035804035c2bb45a161bb0201c6702d576c35cfc416346b022e7028db8e75e6ebb35
-
Filesize
581KB
MD52460d89c42efce5b63e9b6c5902501f9
SHA125da3e1bc13d2ff3f57885d82e8bb32dfcacab5d
SHA25682b6cd7812a11c5a2f0877758c9b51fc1500f77efb5d9a0344bcedd542a981ab
SHA512fba9cfeec916abda5228f1389e84850ecb49831b406105d0528641518a3a615afe3b714036a670b8a52a16f490870062c740e3285ce795ae020cb755391b1dbe
-
Filesize
581KB
MD52cfcd9b7109aba783bc21e3c8a002767
SHA12885458df810bf4d6f29e730c34c7927fcec0efb
SHA256b0a4dba9230ab74608a62f69a61eb498d1f04b327dd63fa9d8fd82e3b07c33d9
SHA5120c8aaa44712b172f2ff7d8b559ea68bec4b3c5b95b66e7df216e456ff4ab69c167ea3ab198150320a76216e4d1b26db66141499467a01f76f5804b6a0e6dce9e
-
Filesize
841KB
MD56329966a73a996075588e1868542ddd7
SHA196087f6b4f2780d42f46ffc8417fdd058aa52a2e
SHA256161b835262875bb4798008504675c920deaf5e142208b805215fcf784c38fe93
SHA512d0ee89f8d0a29f13ff891cf13c7d792b61202234b2aff4edcdafec5d9bf7adf2f2a92297c312de2da24519b361b75fb59a750911f468c5f66dd651bcc912681f
-
Filesize
581KB
MD5dbd47bb45483fb3d29702d56e1ef04ae
SHA1398f24042cd611bc3f383cb03034b20ed7c6cf70
SHA2564ab3eec8e7942f762ebcf4332b3bdf71d2e4f045c4edf54d9d4baa60ee894388
SHA5128b52d326cb2c27a7e4c5dd042f4f8b4f200fe59e58c86ff8c51c2e0527fef669310558b4778bb6800d3ad8988ec81d0c0313c8fc2f18cdf2f89195b10804319a
-
Filesize
581KB
MD50609dc32ae5b715c36af68d34712e46d
SHA1a610ba4db5bc6654b17fdcefbcd9d5f55c19b0e0
SHA25672d43191e68b2428bdd18e5fa11d00cb8b21e94b479cc40fbabba8637863ae5d
SHA512ae04f4b8389c2df733dab29b154ec34539a00ecd1aaeb778e4b1a5f1c60937691552d0c3355bd8e8895154b33583d4125cef9a787aea75066f495017fa252601
-
Filesize
717KB
MD524bf13f7fb852d3e745f5e9406b7fb6a
SHA17ad9e23eed7e99f406d38d7efbc5aefd39408d7b
SHA2566559a6a3b2e38adfda8c10e93d8fdb0978db6435fc685d4274cbe9f4089ed784
SHA512b8fda25c3a2f506b0785f93bce69e58dd86c0ca7ec9c25e68a39c114a94d51b7c56814f014f5e8b06787a8e2607471b87290bb6573c7d70ba4a7a4f49ec3e7c3
-
Filesize
581KB
MD544f1d641524405026ac61969e5163799
SHA194a2584740babcb3d727e184cbdcdfe45fe8b00c
SHA2566b7b3baa92eee5d2f08bcf326a7aeaa5a818ecc5b4636383fc035a32de9d9e29
SHA5125dee17093be45a17e72d4f61b0d5f5aa2c41f15c2bbc8a4d91934e0525bc7473decdf001b3338a4d26271bebaa05d327d93d51e7fdc253cb8b89e0503b441c8a
-
Filesize
581KB
MD5b7eab9319fb4c104730e29edc37eeb06
SHA1084e9e77550f3d7e6e1c78ec19a005701def778b
SHA2565c82212c89171bf34b850735a2f98cc6fdf8101af86a93cd5fa0875b3f31876d
SHA5125beb4e07cfae771faddb35dd122ffe78d92e82b3a83bc1c443ae679cc63852413a2f498204986f32d9817d572d836fd261ad122044ad6af4613f3388ce82306b
-
Filesize
717KB
MD5a550fb3207ae629b09750c8fa00c9316
SHA1ef74da0a91191c105fb37e6653336eef74ebad43
SHA2569d198727cc97b440831c9ae5fa6ee9ab1d0e3714356f5f8d435eee425d9e2515
SHA5123c81f70679dc1092ac57ccd6d780dd48d210fcd1ae979f9ca872bad3c43d4ad21bd9baefd0ceea8e33a9ba4f65913adfdfa040044d7cdca2ede957560dcd5e53
-
Filesize
841KB
MD53a5a778414b9e9e7b47d73adad3fcd6e
SHA1c3b43df1492d7677ac40f5786c06a680629c86a2
SHA256aa958e5f16bfe9c386fcb98a6acf12790e993feacc53f30f49ececdaa6de0e40
SHA51294885f8419d80fc96d7b7f2abd57cff7185695ba6dc88c885880b5c3068bbc07f812d6aeb76df3f26564c9a2f65e4e6c1fb888af97751df21b2a3514f0e31ddc
-
Filesize
1020KB
MD594d7392e9a6d10ebc2169b8e10ba55b3
SHA129be40ee25c28a33904b2580398c2e07916285cf
SHA25667ec745ef6a8eba45b7136e61b9e0bda01a8a90d071c2ecf74aeb6905d49d9dc
SHA51212210e268cf42e991ffc9abf8ae38916c09615fd48c79cc2df9cddf7a230c55b2c47c6ae505f6be4d59cb2eed4a305735645c401964d00132e40dbe27bb0a9f6
-
Filesize
581KB
MD519416d0599ebf05faa5fe08a6fe81db4
SHA1c86d236cb4b3c88f3d8f70c0bed0534d791324b9
SHA2563e0972098ff5ba065a4a0f054b6b9511d843253625d7747e859006965d2035db
SHA51233630faa88bee1b1e45531dbaa570f411f34f7de129a98cbc77b3db3b68dfa680d94e965d6060e36de06b11fc27d0168b0f1344e7aedb0b81dca83315aabae88
-
Filesize
581KB
MD5dfd07e82eaa88d31d30e96291c7c53c2
SHA1ee302c7fbe72de65ad8f8f872f7ef33bb216e6d3
SHA256ba7d94a1192f651bc8366999171106b8a88b938a51ba16653afd9e4ab70d1c2c
SHA512ce28101b7cd9ad6eb839fe94d6773de1824f20197c6a2462f468c0d84c79d6fa4bf4e44f20a70d3e834554a965fba7b76040ae183c36ec43fb0e864477e9d8a6
-
Filesize
581KB
MD5d653a7d3987e99a57982c5424d18ea1f
SHA11a5d3165f17da39d564483c689727a2af3af3afe
SHA256b6e3af0296eed42165d5e768ba0578cad79b0f1cc023ce39bb27cf8cf843cd78
SHA51292bb2ad47171975ffa7d3d740cc96cf79fc58124d0a7b4835746eb03dde6fb53ad5fcc4ad31099ccfd5102feae9d77b2da74468d8a4bedcd1192e9a9b1df2769
-
Filesize
581KB
MD5f77a888d63a232e5da879bee28f9237f
SHA1f4ffc55d00bcbeceb879c529840734518424fb4f
SHA2560270d1d405a283428a747a7a58be14e85dca79d116a3e53211cf91f218336b77
SHA512f887659e42a0d3651795538ff3c252579d7b5bb75ac75c4f574400cba9c56d299b76440b184a4e0440512351b78205d3749c2468977dc6ab608305ae4ea4a4c1
-
Filesize
581KB
MD537adb6915478ea3709f81b679b8e788b
SHA1e9bf2dc2b589d8a0fcae08fecec6feb0a1e7ce6e
SHA256489a481de4b9894e177ad7696b3536346d567fc38f799a9c6bf2ba6e78dc9ce1
SHA512bd08d8868c379b7d738d38a18c1128a42eb90892b9a961ad47e816777067bcf4078cdd8551c3132b2d448e531ced3354716702aa4b355fe44af437ea7797371a
-
Filesize
581KB
MD5c48241f2e5695aa629e8b0fa6ff9d7b3
SHA1728f85a664959923d8112bec388a00d65a2bc775
SHA2566806a29afd3c3da30c9fbcdf8781e9738968ac8d9cd08e8a9d9071698a741e8e
SHA512664c69fa7248c1b0a3dd169a884ef6d5a9230b95ee3dbd8fbeec9cfc55d9faeb8130eafad1bf1efae767a7a50129dcf33cc2a09f26062d7c2d015b2f2552dddd
-
Filesize
581KB
MD5116386c315164ef2a0162b985418661c
SHA1212ed79200de2d45d9d11a90760d223e7ee38628
SHA2566f8010b29722f1fb0612daa079188b1ab6c79016d5b01b7abb3180b5054a2b7d
SHA51282dd6a480724a5be189e628324ec41da1835922ad43a922366f54cff3add437a0301d4f87d1c1b0de7f0b0ae7dce83220bd510805ead7232f6e91d45b444a3cd
-
Filesize
701KB
MD5ba98cf02759802029aecc9822e8502fa
SHA16e7ce8e14b70d7aef18fe512e718e39e53b74511
SHA2560383e7c370a1c79f0c43880bdd06942b3f6c39b2011f74f99daaf3542f979d28
SHA5126c9eddb6d46a74bc4f7b2eb88789579bbdb8e7db318d3d81cef1ba39d69082973131aa6152c31861faf9dc29998ac93747cad24761589b777224dc115d24f8d3
-
Filesize
588KB
MD550755214569a0abd58de7d3b52d26ad7
SHA17affeb377078045b0a953fd7583f030a1b3b9969
SHA256107b56dacd833dabd66f27bd17e776ab239783c3780eaabec382f9ecf741a3b3
SHA5126079f0d3f00ee72c32bd75fa2a28040b5d6621ac9ccdff748fe2f958ad0324d23c9b740847b55da7a4bc0c3ae0b7144ff4b31d65086e0605392583aea95008f4
-
Filesize
1.7MB
MD5aea2201a246c65c7475ff8977db14e72
SHA144f0bf9742eed51352f63b87aceda7536063b890
SHA25650fce606b6e6150498e0403dc22b15a93ec6defc46407f720bd61b2f7764dbf5
SHA51256e3e6fd94de2dc93b739ccf4ffc1af507030825de582e8997a7758eb14d8bbae4735015ec26fd43c75a3b217821fbd7ac944891a4ac4533ae43a51d76e7dd43
-
Filesize
659KB
MD5d9dff632b5d73121b7ac6e5280b73c26
SHA12f0f837f0735ad6d916c919da3f51850a05d4899
SHA256e81586c831457cf6787e2c675ba88874bcc574fc4c1101bb21f086a2b8f56c1c
SHA512f30a17c2880da04e0e06532b50f12b22ff4cc30fad89742ee1e2dfcdce07d1249e00dd87c1f25b88b451e5c45dbdd00d42a43f83edcd8b26c2c1bc08a9fac6f3
-
Filesize
1.2MB
MD574b67be38212cf904a522c14f5f35f30
SHA17bb9f303ff7d43460827268dc3b781c6b50e6566
SHA2560352b4ef5d41f941e6dc2af9a4392144c0140afecbff97193a05efdc5f8f94c2
SHA512b2c8d385ad314a6f944d4f79caf12468b3baebc929eb44b966cf92951e871992a5df5dd6921702655eb0e8991d8070fffed55b9ce60b810a6234d18aabfaab2a
-
Filesize
578KB
MD50915059176ae56bdad8602dad23b31ef
SHA141722cd6b4e1b9ab0f9d0d1a14de1b901d19a704
SHA25621cea85a5f1392a48860767655c897be4f2e848b34498ee1e3c2c1ef161b3876
SHA512d3552e1b5966f3c6478c0365588334d136f7759aa1328a5342453e1b624fcffbf1854d12a7395e1e8923049e45988abc17da3535d339b825034b0c1894513f7c
-
Filesize
940KB
MD58039242f1085b81bfe3752f2b827274b
SHA1afa1a6c4d3f150d8ae0d6c187763560f8222f526
SHA25636db8712cb5b46cba9d5fe043cde13426fe4b645e005c8254997a27b039d778d
SHA512ed361335a76c1b6f8a8a941cda71d0bb22920e6b10b96ff80df27166c6643aed592d48c864cf09cd8d164b09eea08a3cf56ce4e099bb67795e0ed03d795d08f9
-
Filesize
671KB
MD59d75f6ed359ee9c4e19201ba5aaf96d4
SHA187ac9c796aba5d3eacadef33fdc3fb14c85983ea
SHA256defcc2778a4f6b55d68147cd1d787576a80a2c41370450499f1365d8ef2c8ce1
SHA51238d7b294d2507ebcb398957310155676405001e145355e56245df55945a8c02de07f0d6db95f03b36b1672505e5c2822146aa52ac677415f3615bb9a269ce566
-
Filesize
1.4MB
MD5083e0daaf7536cb5ed342ad9f2ce3cd5
SHA173c2030438b613d768edfdd9e5be81c0f5c8758d
SHA256db924d433f1896e86d69d5509e93c7e6fdbb19647c7c8d6ba5b2d11d7f9d3659
SHA5128807a84217addeda7ea3150739fec7cb119d784b976439c49576ffc4037c4e8b6a3bd2cb025b4ebb8fa272f292e4289c3b5a2df8f74fac1aa4e52a670c79667b
-
Filesize
1.8MB
MD52f74b76239716e88d2e7d26dad8adb9f
SHA1501c3de82aa92003f6faa8e002869132481e50e0
SHA2568388694870811b7f2b1999842913049c73e75cf5c29558e3af443fd4b10dd720
SHA51260cacee07646e61abbc12f473025d16e6984dd926569271ab9f58db6d24488e707da0cf05544b9c437cf67b7fbf443f3b8a4e9708e36e84411f31ea705f36af4
-
Filesize
1.4MB
MD565f04e668601b2089bcecd720c2febb3
SHA1d23e40bcf87944ed61e39fde15c706400ee3e108
SHA256648cf263f79d9f283d1193eb7962ff298882d8e52bcea9240a2e3cd90ef1a713
SHA5123d4b4ea78a2e32efb79b1b1f835e0c4998064d1f70aa97877c0c9569f24416897befc9f8768bc16e20bb8fcf2460b85a75e5318a6d398a2c78c62b03d7e03255
-
Filesize
885KB
MD52c65574e8515762f2e35c7790e9f1545
SHA11fb552cc0c2da5c63d72b6655861b60df846e7da
SHA256b9ddc9e6d7bd3f72a9fae393d4cbefbca8d2d7cd07cc0257f17865908fcb1757
SHA51253a163e64072262ebe937fb3e5bde58da0841746e063c52df606e71f37865abcd4c9105a53d9cc9681222b36c9a98cd7e73dce6e447e3d30dc63d0ded7f7dc89
-
Filesize
2.0MB
MD53b96b3bc927afeeb162110fc8f1ac4c4
SHA1c5aae2462195037d323167bbd4ba6053e8f15b3a
SHA2561bbd7dc539a0eae921501d4037a0860ef5426f6664d19241e015de1c35fda22d
SHA512fb4f5962823b6707b22d69bba4275c9bf0b6036df2a23531595454eea443726b45831161552a3e059f37e84c661853f3416921b604613f8bec70b842f215be12
-
Filesize
661KB
MD5def3119ef3cd6a8ed6f1441e23e02830
SHA1ed0e9302b97e4b7d3049f4fa7fdeec164aa2b61d
SHA2560b4fd8f09bd78120847d0620cb8d3773cbccbca79fcc4b658ed749c32d5d52e9
SHA512fc33b1edcec2d666e83c69dba8fdede7d65916e4148fdf7d54968047550ae7a8d86de99706b3e46331f02e03a3ddaf5507b593eb4fb4b0f566dbdd33e187d07c
-
Filesize
712KB
MD58767cfe2ea05fa8d054bf17e577e4dcd
SHA1464075ffaf1be5e7e99bc1452b11511b293f6e02
SHA25653d33af2c5f1adccbafc91f2062c8b74457938123be46d8215f9d0ece6edb738
SHA5122e23a7eff0b12d3a9a216c14f0eaca694685ef24d9bdbc3a25907b546a448636c2164faba1bad8e9e4ac2aca14c85ced64f5fb49715597c5756117e1743ba935
-
Filesize
584KB
MD594a174ee201952208b82834755260574
SHA173b9618f9dc85947db04a1b78b23859d3cafef9b
SHA256550ceceb19d4f951dc990141b9495b59fe7c2890e5187aeabacae2026e1a1e1f
SHA512a550ab9e0fd8a0f2096a71dfd0ef50e17f38c401a25b2e5de35450c95aff192983bd1e2e8bccbe5ce3230db885fc64288c5882c16f343ecad3ca2add1d693c98
-
Filesize
1.3MB
MD53545bb3f8be121f5e2b3be0410e35bdd
SHA1a2768350aa5ce644510fa719215330dfdb893bd4
SHA25649e3ba0ca6a3c4fd008654c5b54cb9cec4e5f9dcb577c0a9a06f78599a43df08
SHA51272867703b969b9c1aba497eebbbabf043ce7e64a359401b98b63c31e78cc935eac13779dc56bb5596d8d8fd966608636a514ce625bb2d9683ddd7dbcbab3aca4
-
Filesize
772KB
MD5bd4d1b3a805c6053ca4526fc0107f8e1
SHA15c9aa5ca10ea5f68fe27b10bfab355c56657ff91
SHA256b0fce42ee1e85d4f5531cd142311a783b6bbc404aee2afff02b4c95fc98655ea
SHA512482f13f94d6b84562abcf957c54416236770c728c455766ec69d5398aafa16592941fcbaf3f50b15384d64dd06e176fbd33419e80393f70107d7462c468d4a4a
-
Filesize
2.1MB
MD549f29b862ec5b1be7f4eb9e0fd5dc4c8
SHA1fd8ec29c7ab69f46de9b60c7b44f36a05816648f
SHA256d71dc4284a4f44bc0574a714f83a1029552cb6d7b1fe964959170dd6458b29c3
SHA512f735907a9b88deeb4cb36bb25bfd6f3122ca15869e8699973a03736812e7fc762ae1941b93f2b9bd2c47ef861b4f74054629e02febf7efdb9ee42f3131052f22
-
Filesize
792KB
-
Filesize
792KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
1.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.1MB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
676KB
-
Filesize
384KB
-
Filesize
1.0MB
-
Filesize
1.0MB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
604KB
-
Filesize
604KB
-
Filesize
904KB
-
Filesize
904KB
-
Filesize
596KB
-
Filesize
596KB
-
Filesize
600KB
-
Filesize
600KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
680KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
680KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
740KB
-
Filesize
740KB
-
Filesize
2.1MB
-
Filesize
2.1MB