Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
23-05-2024 03:14
General
-
Target
802f2f28956a4ffcbd162868b6f180f0_NeikiAnalytics.exe
-
Size
1.3MB
-
MD5
802f2f28956a4ffcbd162868b6f180f0
-
SHA1
601e2cba3c0f55fd1c92352db8c931a6f28a2b32
-
SHA256
c0a599064f2b144c7c21163f966a4ffc012e30c10a3dbf8ecc8833cf20f186bb
-
SHA512
feb7bf491560823e670644ab2ac645442bd2ed276143441a77e4cde9f8256a0d1feca7b562a199fe1b70744fba510f96baefdd8463d81dd8c7a868d8109793af
-
SSDEEP
12288:BTLJiQhJWGasF4+/x8J7ct3z5htUcQ1MlhrmQgwwJzt5+7fyZkCtXFiWZF/3o:BLpWGH4+mIJz5IcuMlQHJxrDiSi
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 24 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 7 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 42 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\802f2f28956a4ffcbd162868b6f180f0_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\802f2f28956a4ffcbd162868b6f180f0_NeikiAnalytics.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
- Drops file in Program Files directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD52591bf4460b9c4bca1cd8f625d04b633
SHA19d88401625e6840312a6eba66c8af8b360d2a8f6
SHA256b8d69d7d6d5bda1116a75ca158517289df8e2c6e775baccb73cd850e92841a9c
SHA512e47f6dbad927c8bcd3647fdd4becfbd8a01ce8e037230676487b83fd2f91db06f998c27c2c4823db2e379ff53bbd27c0e27ae4d84db6ff6bce1a6cff0c9f04f8
-
Filesize
1.4MB
MD511761e8cbea2d8a632a260636eaba946
SHA16509b8fb7a16ee0ba1fd9299bb60a206e35c25b8
SHA256f9d4195afbb84fa410736dcd8f91d5f62f64da6b5a61be41c1a8b71400055273
SHA512e8d8993ca09318656c9b58c675eeefe986c7322a23dceadab98bdeb56110b42ca4c2eaa52167948518b9df2915c64e6b56513fe893c9153ef04146f8a821ef42
-
Filesize
1.7MB
MD55e862f542412db37e7fa963af4d65dc3
SHA1d0869aa281f0ed5327da56fcc4d65930bbca74ae
SHA256130ae51f524cba48e765cbaca2a57b63903884a443f8d84743c9c34f2f31d896
SHA5126224ca2e4b643462f0538ab8bf843dfeeac263b0542cf2db053a8b9f875d45c8731b023bbc53e2872b9db199c57e30695673ad79987c62f8f974bdaeab9d84e2
-
Filesize
1.5MB
MD5ad34d8e4c8b24705487cd99cc49b6221
SHA103c812e04d9e5d185c69e09e9d4d384a93033cfb
SHA25689eb096a6485464d59a442569c857f73411b22259ee50c9fb369e4c697bd7218
SHA5125137a3d465abf31d135440268b34f2f70690cfbf0373ac6205ea7e694e08eadd3d8cec8c9fc76d0c9721a21ccfb20cd0c686e0778167db7bc01140e9139f88f9
-
Filesize
1.2MB
MD5e4c47976314acd5b82ad5484a725a1a5
SHA1a4a11859a265726f27f513afb37a3597ebd276b0
SHA2561d613ec2c2833cf8627c77ca522041a0ce7e58db510d141f35a7fc5083215275
SHA51237eedf19d12d9a4380ad20a34db97ded20cc56f5e6e9cf610c37e642a34014405b4e4bb614889b3d4116769e87fd625589e799ee5bbc6d72a665b993212b429c
-
Filesize
1.2MB
MD52982d522d3c6ed9c88fbeed3197635e3
SHA1030a79639dfb151cf3606446e6e1b20d959f5f92
SHA256318d29046a17d7b48d4d901a6083c30b8a0c4b9536d68932ded99011faf4a1fe
SHA512eb052692bfd4c7448dbb37f9af5ed44aa4becd3c80721a18e94d8a00135b32d1c9a313b2cff1d3762821ca5100fbbef6de855a40f93bdc9bec74ca737cab4265
-
Filesize
1.4MB
MD5e1613c38a1ac82ce5b26f786c47a2ff0
SHA101c89d67d98eef48505c5a990b033063b141e800
SHA25617a42ac70012cf789eaed72cf82ac56051f8a26b000bbee40cf6544b6b1e7c59
SHA5122a3dc232f56b80381b78d8b3c5c95f4430ad8d15213a1d790a53ba6a69b8ba4fd9086454b3c2bc87661a1a45f2848369b133c4988cc55b64f0ded487f6786377
-
Filesize
4.6MB
MD509e5ab4c062f2d576778c46fc5218df9
SHA1f4a1c14ede6eeba235eb72a7705377b2c215372d
SHA2563296eb04a51af1626e7ffba7d44025fabed32f204796a15076d49cc79c959958
SHA5125214fd93fb3044ff4460328aca3f634da2f559021d8caff2afb0e110645d166c102ed527535f1f6a2c36573d7ee5675a5832514d8fd76a03ed07d48266c07231
-
Filesize
1.5MB
MD5e650a0dc892c2903650891ac5c59b459
SHA163a806bd361b073b5abd76691be4648ad45d8c48
SHA2569da869b35228f69ee4be2428381884a5bcc84be7f724721811644a56ebc05ae7
SHA512b19a3ceeb3f8a226192f711251079bd9b3f6f2963c66aae40f5e35f20c79308924368ca13389f7405bdea816dabc296341b47a62a3613c6eea85a10e5bdfdb9c
-
Filesize
24.0MB
MD52ce9584a9e66c613adb7f37c49bc834d
SHA154e7eb9f2c105f51eecc4a2c89ef26f06da1cbf8
SHA256069969904ec6234df2e95f90789efc8cbf8fbed47abad2bb356c21d1c5ed6a32
SHA51237c53a7469f28b658a1b71ca2ba32d249181e537bb312a9dcf5b7eb45b5e6527d52f72b6a52b663b8dc065260959b234206a9b01db2a32d8ac161d8d9fd3ff0f
-
Filesize
2.7MB
MD52127a51124e7704f6b0e5114033523a9
SHA1a8f0565abd13a15c98305a3c7a10093dfbe51537
SHA256962eada731f826b1ac9f0a70e00e30190dfb337e4164967ec89dd0a5294157a6
SHA512a9282fe0bcc5c33b98a9683eefb7dce5e7495bd39c3602a8d4766c979c55ddfd217e727199cbda6da31b696c984921b6c9b3942d72e30d36ff63e2db401c431e
-
Filesize
1.1MB
MD5d71906d1ac95769e1ec0c67a121c10d0
SHA1febdd46595678d64a9f013333b70259f2eb5aa20
SHA2565bf8e8059d1d9c6de5b325d2f882a0b52c25248362b1d38641295fe2e9a5e2e1
SHA5124d92a446ed15639e642d3918d434d9e6ce4a7ccfc5131323be963e493bacf19194bb43c458ac6cd04c7a661d526c6fa7a54a0fd30346ea64a347053561eba891
-
Filesize
1.4MB
MD5dba551d4585778cd7a6dbd398b3e47d8
SHA10d72106efd761b85973d1d2a9ce87b7dde8a00cb
SHA256a2d1177958c8efcd3fbfb06d6011eaa10fce2b8835a840e69e76a13ba6b8cf2c
SHA5122a63f97aa5fbf00fc3b5ef5415d818f1966edfbb447e36f56da8cb6b417cd1c8ba511e224d29d5151c3576b5b3ed9cf0bcf370a7a8ddc4aa47c8815cb91b1000
-
Filesize
1.2MB
MD556b715ad4927599dd9e8e216198a7067
SHA14e58ccbaa0e071e43f7e9ec671eedb09bc21bbe8
SHA2567579860f545aec2e8680c495a503d1955a169b1876e91f81fa257d97b42f2880
SHA5128c88ab55601209e4a0dd0966f67ad28a23cafb8f62a06999135eb0bbdcb616c99e1cc738f540cc245325a121e31c9a92434071e101f4043f33d609c6906ab6a4
-
Filesize
5.4MB
MD5aa0292484082d559ccc98c2133e75a1f
SHA1f37edf30ec7f264180dd6d6f47fea90ebcc56898
SHA256ba428d0f9f7d921d1eff06e7007209c93cde00fd8875921c843526a3dd678e6a
SHA512c54e68ad86dba21d92de1c6bca2ad15c0119a63317542054df896a36234953d86c10f01a1e8df880e0ddf687d0a65e2a9e3e1d332f927f71cb65828121efe3fd
-
Filesize
5.4MB
MD549a50871e509a2507f2609e95bf54b5a
SHA1e1f85c3e5da4bbc7305ba7ad0befc11584ba9395
SHA256df8efc4489c879a0a822e25855db99f72e9031ceea2f2d7e2958f1cbe48aa90f
SHA512891aae660e865ed04c23d1895f0c0d645001bf042160964ea6cae53459f3e0de1604b08353bc26a44849e1d72496d1bfd2ac64c4688e8a59f62bd2c6d07fb09a
-
Filesize
2.0MB
MD5206d06144bdf9a54ed021732150b18d0
SHA1fe4e903db00e280f6e5d7f56720ef315e3df2c7b
SHA25653d4e8aaf09b0688758225ff74192d3aab1ec3d1008bda28c762695ed07fa621
SHA512f14df0a7983331e05b389c15f28b719285ecbdcf23c5c112e352f70cf431565b465b5849af453cdda75b02c10a50752f075240f2a8a70e635882cdae546f8d66
-
Filesize
2.2MB
MD5294bf4188da9b7e8bf23a330ce2d9bfa
SHA11b49eec635951a1fcd24071888a4dc54a11007a5
SHA256eaf935edd8d8e1b98be7ecbf10a1faf38a223db496f23d48c35d0fe762c00f3d
SHA512eda6a5c596b900751745ff732530101f36d4d05a063ef86b30a763c0b58e7ac116f4958ab853e37fa2b50baa9fcf9d79a2e511e4a4ee5075dddc2074f37bbf05
-
Filesize
1.8MB
MD586120a41ff3a898549240605e33db87d
SHA1f6d5c4a29c77ab6a267b5021865bfc839cbb0488
SHA256102786451114c249f357c53af3b65bfaf71a21439741af58b17f48ae1d587085
SHA512c8627b8cb88f063b9a0e8f5f8c295969e11456f5632192bc9202bd80fd1e1c411052a54dcfa20bbe7103789840782f387be70a260185631a8d8c632139815e98
-
Filesize
1.7MB
MD59d65760a17977d0f45d3dd47beecf516
SHA142843eeca51120eeb441f4947881ad9fe8c51d1b
SHA256e959b8b18e879b5d62477bfb0fdbf2f72522282b1a103cd593c4d76e9886a098
SHA5129887e32a28f514bb8d7ed54c04adb111ceedb482fb75b9b47c0d136c25a83fb2cae63b13b1919b8e0655a3a1d344e117b32f2d5c2cc93f7c319ef96d51c8c34a
-
Filesize
1.2MB
MD56f2f58f73fffe9b3eff53acd8f62ffe9
SHA144c07f3e273e64ca3472bc25310d9ad3e225e86f
SHA2569810f143c16d130806b6d48c9aa2c0a3aadc7657f0c7805eaadc95a4543a54df
SHA5120bb7d110f4ac8426764b388b78174fb6196f5617a71d4971afbf206a88d26beff625187bd78ec8b2c668fec087e3698379a323de0a0eb9c022073b572005ad5b
-
Filesize
1.2MB
MD516ac9ccffb24dbc015f39314a3582aab
SHA185a256d2009af1e122fd5e9e033c0a7e07281f66
SHA2568aaf75e4c56ea367afc356beae6e6d6a46457189ff72290421db887416bb577f
SHA51215512a5d87ec509dc321494ebb655a1031544ce4b0ad039f30599a2b0ad1f4514ce17232345a987c8c619af0593f1aa1abc852331c7fef410d49dafd9d5f1288
-
Filesize
1.2MB
MD5174fad099cf53c6d6830e7b8ea51bed3
SHA131a9c7b4fb1b1d40ac3bc9696cf43ca439610e5e
SHA2565624d23eb4bbb68f77d13c6a3b165265d278b016e9a292f9e9a82fd3cade4f53
SHA5126317e548bd30aac164b7378ab6125a4a3da54b16c82cf280ba8abf9e2306386d691b11d33653bbd4eb27d7cdb65e16643109318ddfb927f2791ce95d58f08000
-
Filesize
1.2MB
MD50f3e5484874188b374a4ceae1c48d04a
SHA143f1d43db999904afa945b2a6df1e112b70fe98b
SHA256ee7a0de781724e266b222236d944a437ecff7c0466d8317c1a836b96a2a6db29
SHA512e404ec623831ad1fe6228e7558de192943fda95b52ac9e5a7513efb47c09bc22e7d9969e1a1a3315bcd3b6fe386066fcfb5eb35cb4d947e29b487663f244e140
-
Filesize
1.2MB
MD525d40ab7131d8c6da76d844d082bcb5c
SHA19aaef5ec79e409db26999d8b31115ab65dd366bc
SHA2563f68749793a223d48279bf609bbad35c9b2638aa4fdd06666cf92662114b7597
SHA5124fd3f5531e71a62801e9138ef30a4ae64fd1cbff32f271e49f8cb5ba74c7517a41025c568c64685def9d8057589243cba5f419257a59eec53417881989d61814
-
Filesize
1.2MB
MD58916229b82946023157a1e8b79322258
SHA1cd2af5964d4026767b00032ec03b4011561cca11
SHA2562871cc17e8271c089a8f79b927c41b29c3341842df7b03aa0790e362f8ab31ac
SHA51286f85b02307a126ee30c29f01081d789a0ab20f074225c03d521ee01157bc389c54adc437182ae184d9b2f360774cb9e2268962dd5d3f3e07aef231cb6857b93
-
Filesize
1.2MB
MD515dd992aae5017b2e5652fb282ad2333
SHA137b303bad02286b385f107dcf51e43131e3703f6
SHA256c057bd193078949d46da5184b518be380e969ec07fb045d404954c4f33f99fea
SHA512489441eba8cf63739ae336d9883f8eeec0308c96078b178925d3d5d37c27f4a0e5705f2cede87a2b2258f9fdaa7317bcebc155d379491f51d8bde4817f6259fe
-
Filesize
1.4MB
MD5bdf64574801ee66d055dfbb1433b8c28
SHA176785da7ff5a91db7ef88586991ae3641f7b2c4f
SHA25650a19b9dea3f1bec926a5f220e17e36f71d3b9f51d994138c573af10d0b2a08e
SHA512b81b979406c35fc6fe879cc496aa5a33656f395b85e3423241d82c83e00bed212a41a57c46add2f545b50e4c947ec2a66a99155045e6a5e724fac707a75f1fa2
-
Filesize
1.2MB
MD51e13e0a9f3accbffa93af139baa0400e
SHA1d7595a0ef22fb7134fa99a8ff8d6ca2e1bd3883a
SHA256a8845b735207e54d5e64b5e84b53304c3adf901e2b789631e0d9ef03625cd7a2
SHA51259b4eb93009e6aa8b65a9a006a4cb74e82854a3fdf7e6f0a9ba064ea9a78838fce7ef3681682d126cbace7c4da04859419848bcc104065aa7ff0645d4789b445
-
Filesize
1.2MB
MD5806fc0c16164e1fccab2f58b99451973
SHA1916cd5f17a8ede5d5389106ac0089b457607ed48
SHA25605f2bf43d9c489671e7ae1e900fd4759eb560b027cb69a9ae257dbf5ec7cdbd3
SHA51267f869c61dfbc969246dc182b08366673cffea09cdb75d363aac2a6618e85b01f93826011ea213856481d40fb9ade5739eac443ffb8942496c105203a7c8ea63
-
Filesize
1.3MB
MD582dad1067876efc94b69f3904ebc1733
SHA1fcd366359d07a406b06003141a23f6317dbb0a15
SHA256d3ffa4ddf9f5484ebaa6c4eaa2135f117e8fac3865f55623d2ccb40d7509c98c
SHA512301cc34d656b60dbe586a6d714dd24e250db05b7ded7c617b7d07855c14d5f420d417e0ce77a429d5e726303f273b1810b07b3568b5c7fab5c0188500994c042
-
Filesize
1.2MB
MD53c08b86b09877df5dcd140ba4c0fd581
SHA1087b8fbad1a48597f53a3bfe6ef1dafada6b5dd4
SHA256ae146c660f522ad4b15b85c28e49f09ccf5cf25dd08260d281c259e9cf496f9a
SHA5125469d911d94a83ba3309c730e6b8bd1b8c3eaba442fb38f7a6a9b901f30771334e498da414be368c861cfedd9dc3732e47f22bd4663638e3635aeee6551b202b
-
Filesize
1.2MB
MD5fbdf923f49d86924e039c8c415b26731
SHA1c37c435b0035f15c7be54d750b7145197e8e5b1c
SHA25699ce9b977013737cb5f648b67bee76f54398c40ea9fde012f2c2957d4080e6ea
SHA5121c4630b6b0984fae0e62a02b2449980a059f19edc143d0310a517a50c5532c34e8b282cafdc8b6a8df825c2944c299a11bdb245a167ba2b115397a8eb68be484
-
Filesize
1.3MB
MD5396b27b53288feea81bc1eb5cc1a72c0
SHA149399f2188e9e55759ce634ffcd002523f319aa3
SHA256791aa200f103bc26474e1f5744e2f03ee737d84d69700176eae1d6de1f3f2c43
SHA5127aacb283fab872950c3d5a53e84d4989c7667e20cb86564c5d8d618c53bc0e76016acc4159c4f981791f8ea7abd9d0fc4a253d898da61850bc38fce4c0b63301
-
Filesize
1.4MB
MD5607756761b021e6527ec573fbe8acc1b
SHA15ae17bd73d1bab1bd310afb6a802de2e47aa4eed
SHA2567e587af2e478a0cb9aa42dffb6fa3e8a16a525d87ef2b3d211b7a5f2792d800c
SHA512a54a135144b7ac85a08a6f35ac09dfdeaaee9383bc7a3b5cd554acb0bf52dc23cd8edf2d2ea4bde97ef747d0279768011e680976c02facd2d30ba889bb901a56
-
Filesize
1.6MB
MD559da49879f7dbb8cabce4bab70a7b63a
SHA1ac129b2305ead82605c6784f409b001c9f83bfcf
SHA256747e37867b75578f5fcac916304a2d8dc7ca169e2156cdac642f1503d64301e0
SHA51275cfb8685a38a8624cdd45346a7b5444a27acf4f5e248aad8668f6824407e6f77b5a1ce0337a55c6db4838b191690f05fa28c08fb93d57b483bb6f8c1161adda
-
Filesize
1.2MB
MD5a1b2bdcb91fa52f015007f8443ab0b42
SHA12e7db0a1219935a90b8147007e37be6b275acace
SHA25651134f2008895dc41d51ff06ce25ec76a35fce01fdda79b2652caaca690b289f
SHA51253567c05169d09fb8f9dee2756bc636380b90906888339323460d36a0ec77cc816db569aaad31f19e24ea433eae010d17a323d646ec60cab3c4c4bf45a4cc15c
-
Filesize
1.2MB
MD5ac6826cc1b636bdab097efc562d4db34
SHA1d10d33ef75717a2b3118b7123f4bd5d566483063
SHA256dcfa08008fd7df4904940d4bae1d58aa1f0ce114378809391c1bfb2c4fbfdfc0
SHA5120e8dcc495a17e6f1bc2fc1c98bed695d0637e9e020a43af0fed2049ac6fc022c586a45955b868b4d09b3d3791fc1fed3c0c0d2c125d833430c1252cfd9d50502
-
Filesize
1.2MB
MD5d19f94bffaba2b7a44f0e3d99268fa6d
SHA1b57ed624dd4c3ffaa91ab9803f841a5b2fc9868a
SHA256cc0377b42e25168575147fac9f3144f9ac1ef6942405e3ee302fde364916ad26
SHA51238a112a6a11659409ebdb0a257026bad7acb52172f8be2e467bb57ea311d0958da89ae5731f2f58ba1c80000be8dfd0d5a88a58ad7e44dd10637f712db0d9982
-
Filesize
1.2MB
MD54c54b68b0cd39d7b5c17dd0b476bdf72
SHA154726984078e637442275e1c633fe669153dda99
SHA2565206add0284e43ce1bd8e3b4bed64c400ebc01e520c77a1817cfb02af43ccc08
SHA51262da6ea8a603eff7d081d2f267885a2a1ba4ee762f30ff9511cb76e48c8bd84ff7c8ddd7aa33daf00c4843ee7966348b3004397cbc4a8e1da63699cf8af10c02
-
Filesize
1.2MB
MD538ff97df14431efb7f978da7dae152be
SHA14f4055914d605521d661b1729dd6326a69de23ba
SHA25671083b2e0feb4963a441bba3186527a319a3686de45f963358cf3e6be3c20e24
SHA5124937e5cd04afd995245cc7826df981f3474ea65945aa12cfc1aa080d2e2be4ad203307712f850155f1b4e85f1c4db82a78147884694a424ed407bdf39c89b873
-
Filesize
1.2MB
MD5d28ccd152543c6c987af79c2b33315c5
SHA19b2b793f77377ef8edc1a3a96f896437a9d1dba5
SHA256830256a5062e8c5a6e3fdfbbf7396b2fb3a8af2314fec25d7b8b620bac183a8e
SHA51223e04cb11c36af4fa65c3b366b4c82f7995b03998a7de456cbfafa8b900a5b68a725eb037314dc956da3443265a6c4f63bbe6a1e3edac285f810d61642ccca70
-
Filesize
1.2MB
MD5f663d542ac6cd8974d769452ef7e89b7
SHA1ba8d3d85b2806c9a13882d82a6aba311240fbb66
SHA256879304637edb1e91d29cdb085a2761936aff89bcafdc68b02b61e031c2eb749a
SHA51251fcd7ec4e39dfc441b35b6dafc3447b94bf4370537047d5f953c1086964e2e2ef98f87655c927353e639677e427dafe22ffa6dbe4d0bcb7f38052611961de1a
-
Filesize
1.3MB
MD5cd2e6faad4d4bf8cc8349722a0d9aa79
SHA14fbad287b87c6c90699fcc1dfe504a4f49f2964a
SHA2567937e96dee3084f596f5e9e96b2341564c581304bc11d0594d1eedbdcbc5d5b5
SHA512ff9b02672ea4399358691118e728cc7516024e66ef3aad3bbbf1166b02d86fb02390a53563f8bf9afb174d9d0b83da93cc8d4990b83e9364863e028be68ef1b3
-
Filesize
1.2MB
MD57d02c111d6f3b7cd2f09cfda2e86b772
SHA1da354f8bccff9fa8559ce184dd276b9014b31bd6
SHA25689458e5ce012c89d0a230d1b37f1e021fa5c502d2b9f11fb7bb758499ff77791
SHA512410942ff97b94e3b3b7c30a03adf6e5871ddb6f9d91c6a498329ce230fd9e93190634a5ccaf82476b9ec50bcea8746e9ef339699e4f2daf2aed523d5ee600315
-
Filesize
1.7MB
MD52b8357d59b601489e4539320d50d1f99
SHA149d80748f6be9e0587ad6fd2e8d2f09b554d0519
SHA256870f757ba8486617ae37eddeb7b2e346b92efd40cfc06fcf3956d193eb7b1a97
SHA51278a4f99c212aedcddf9a2b21c3837ebf5526cf23a403b799bdae4d429c5668df2c99bbcfad82dbe1942cc9c3e8fc66959e3649a9b71a804f332b00864dc9dd11
-
Filesize
1.2MB
MD5f65613898d8b867b8ee550023a6a8bf2
SHA1bf9492e2484ee2997cd9094808530e079997d3dd
SHA25655de505ba893ac4b9f9e8e2ceae395749f495d4a1d4616fbf5bee992a1c2296e
SHA512eecd3d5a0c67422614f0d60cd042a8e6132188f6093ec9d11aeb25269c51e8a572a7478714b6b23b8f1033769774db4921d87e3780f9d4e04c72cd4a49d16ebf
-
Filesize
1.2MB
MD5936b3199711c1e79f09c9b9064ed7218
SHA1235d443064ad74563ca29146b2027623daa4f969
SHA256ec697c0a02024aed600e348dcf82bc21623afca617b7fbdfc3668fbca7994e15
SHA5121e5d535106593dfec59b6eb948708f5b52601e860e2cbead3fed0fdf80dbe8b6117fdee56cea5f8cf44083aea0cb462eb22f83611dc6edc68bb4cf302a7443bd
-
Filesize
1.2MB
MD56bf67e3aa9d4027d4478dce4de58e440
SHA17b9104eb90d5e591f7df47312b87641231099290
SHA256cbf67a7f51958fd0cd0a2b48e334f614b38d0bafea08d078927e5a462b7d1820
SHA512ce1ca85eae4fca6fb49ade0d647d5dd06aa41d4ed8fdc04ca78f989e6c6c9bdbd704bcd193537c4008951b4387623f0089e704a710323044083897591472d3ed
-
Filesize
1.5MB
MD521eece3870bcf2f7e2b890bb54db7da5
SHA15a3964a8627134eb646c2f90a9e1bf457ee790a4
SHA2567295fb7e4aa735be3c5b2c90cfdf97376eae06807c248dc8dab8b9f139e723cb
SHA51294c0c36d9c492341aca064ccda4a0188b91b044cd79b3c1f68b8ee87b94e1cbce9dd55f94cb2c74f921fecc03064ae4a406ee8bfee8dfef3306f367f72b58829
-
Filesize
1.2MB
MD53a590d49e02dd14c9e731ebfdff7e082
SHA1594e883024eb684b7f1ad21ec128ae5d06ac992d
SHA25620fa145b0d6098c480cbfed8bf3f2636f28474f67056cde05d74db3e854cb94f
SHA5123dca5da2933150a8da8b03d1d2ddfe12af21b87f9b29b29d1f0bebeda01a69bb796f5501b8de1da2cdfd46dd7c698995b80af3d6524be376845be637a3f91709
-
Filesize
1.4MB
MD5dace3ed80257c72f161e8b1ffe768f87
SHA1692dad84564f27e9953f5c7b41e7a68ab3624567
SHA256119bb451274ce5b30d3ee188510fcc8cf88c44837e0c2df967f18191ef96fa72
SHA51277beb95438306f22cb08a6552528bbfe165aa9c4ea000b38bd1e729b0ef73ae2b68dad1e341c57ab8408e192ed440c49645216f57a77aaa8868c8359f50b8df9
-
Filesize
1.8MB
MD5cb0a7b4c78b41163c07e5c93a2392f5d
SHA19fde2edeb01306ade91d58f27bc84df6e7c5ff21
SHA256ad0a3b4246a417c3eebb0cb9e1560f39e9885b8b50dc1540221929aaf7bdb0bb
SHA5128e7057ed4c289a98dc662cac887428576193d7604e224c57dbfeab90c91f0656791ef18229e0d95a775c897ec20ef552004fb0fa43820defe62b16fd50e16d42
-
Filesize
1.4MB
MD5b23c565e38b2bf7d2c6e8b39378d98f6
SHA1a77544106f9436719ae922d630ec47cf1791d9bc
SHA256a6796b95c9bc4fa99bbe5260d39d23f04a664dcb0b7f78d428f3976054a6fc0d
SHA51222f1cc4ae104643a695b25070ad6eb3bdbdb1f3b60e795167d1f901672ad26c25d2908bbe2b86d10d21581f8f47bba8050aa9019987280787b022b482850ea8d
-
Filesize
1.5MB
MD50fa1f1af8041b54292dc40483935e47d
SHA10665d2b0bc239ea63bd1d15af8146eca3a638392
SHA256f9c9f4f60cd9c8124f2025aa3770108b72dde59ad508f90ab7e46e1558babf33
SHA512ed714e9ff44d2a57756ba3371b8a797726cf3604bf1c9577dd95d1ddf2c61abcb6f879eed6af01669ac827d55dcd407102e58a670dc4713180416cfb56b0b158
-
Filesize
2.0MB
MD5eda319d594c58120be4a52a3d6a51ba7
SHA11eef2ecf622d09f4198851f82336f423990d780b
SHA256e854c944d8898f1cfd9e1b2be50154e49973b7828eb9f732fe362058d91cb243
SHA512b66cc349d1b2e92115f89e5a271af6f44c8151bf498e18a8fae5518d6a87b9ddb68f562aa1724dcd73544a898067c230633739c5870814d45d938f0c29797170
-
Filesize
1.2MB
MD5ec13c86d7c1192d07b710470e196c2cf
SHA17022b48da8efe8fc7332c4ecc5bbf86cc82ad095
SHA2566984e53373ca5d8b68ded663a95e4ddd21de467830ff5b912b1a363e241a4914
SHA5126fee4e1f17d3e3ca41e1084f21c6cfa428863713a7afe6ce88fbb0e133cc2a1ab62d58293cd836667eb3d80381110a23005d7a6efb8968f78ca48113eead7563
-
Filesize
1.3MB
MD5a44efade3f6312849c4c31e12f29e09c
SHA14717b8928a1e4cc9d9beb0edbdce398637503271
SHA2567b98a58adf90c836e08afa3393fded350e4bf86da0d80799a593ffaddcc0abf9
SHA51254e5aab29ee1189eb770457c2b21b805b1de097e7229e7fc614a337a865a635b4e3d66811c24ca0eaf762efbcb1ab632b7a91bc01bdd96438b577a9c0a5dec0d
-
Filesize
1.2MB
MD55b6366b80d8c210b1b2427e66c93d52a
SHA1b52f00b84f89261490ae3bae3db45875531f53a2
SHA256947740b0cb2559dc7ea055293526363a70be64f1199b3208d49866d0093cc56e
SHA512d5e4cf30b7bd78c575c7d278804c59480064d1ad2b50f718420ef0b30c4d2680b41fb207ea21023708ac3ae384b20bee094cdc99b096e12c07a0a51fe01e5562
-
Filesize
1.3MB
MD55c8f45234a56ff56b7437ec07dd02cb4
SHA1d0b050452e3fd87e7db26238e2650b648af6d8ed
SHA2563164317d33b3984b344315c3d01f979b9426f157125c1bf91bed70024123cb26
SHA51213d539d51cd88141f5ac51c620a595b19fb35d0f818ba8a0d02858649ca0bb828c39805840e1afd80cda2ad092ea81bd09c9a31aa6a23e4de8ab5cea11566fbc
-
Filesize
1.3MB
MD5f417d0a0d2ed0451a8cbd154fad68430
SHA1fedb75ada07bf56e73f3e9d6291436d9773f6b42
SHA2564fc10f280bd9161342ad8adab2fce1170a6756095ee3eb2ada25f584298e370f
SHA5120d52f52a0084d980efce64460099d5d21e4f861637396fb3de14863369c0ab3e0a40c73b4acd7be8892b15691adbde01cb7d8afafc113c670d816d5d41d9181c
-
Filesize
2.1MB
MD573d09ddbfcaf11482fa6353538bf90f5
SHA10033619d278963d23b045aea5e4b890d1776758c
SHA2566747cff9b4ba350d0a440641a1d5148e771b71c3ea98292dea32c91fa599d83a
SHA51220cc0e7200cc76157c62e42fffee0fc3874dd801174e9586bc10db54c8276219cc847a00e918844fdffcb930a0e0019eceb8005b9716a3ecacfa549f5c77232a
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.3MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
384KB