Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
01/06/2024, 11:51
General
-
Target
2024-06-01_3734f4f04cc3428bb6a5d769563749d6_ryuk.exe
-
Size
1.1MB
-
MD5
3734f4f04cc3428bb6a5d769563749d6
-
SHA1
7cfec88d6eb4b0527312d51576b813c9cf7cdea7
-
SHA256
ea0dcdcafb5fcaede3ec255a5c497ebd72cb9a9ec612d55a17ef2693dcdd533b
-
SHA512
57f761eef76c31c6196b1a83b529abc5db71697f5fe8a3f6d42b0cf5a67364761f9b5f1a8af1546eb5c83b9ac628866e8a54a0c313474027fcd9ed1ffbfb6740
-
SSDEEP
24576:NSi1SoCU5qJSr1eWPSCsP0MugC6eThRSkr2dw0tbBFWWCKPlpp1IOn:1S7PLjeTfl50VB2KPDnIOn
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 37 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 4 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 7 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 41 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-01_3734f4f04cc3428bb6a5d769563749d6_ryuk.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-01_3734f4f04cc3428bb6a5d769563749d6_ryuk.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5cab3be8d6e205b460047d13e3551b089
SHA1564d7b48507a55adba3c03387805698513fc87a3
SHA25601e0e81e7420fc329c2bd9fbeea56202e9c0c8a83b9c33862bf7a459d03e8490
SHA5128ef9a0ce04c668186d73168199b8cd2a4aabf3afa599357d427682f9b06b24aef8ca3715cacca6c11732b28c2b7df8a0030d6494a2a7958191747b6385b28791
-
Filesize
1.4MB
MD5dd0570899918948be186e2e831b7f033
SHA1f8cf77a069bcf1988c4d30c764badb29a6a7ad39
SHA256462f41db2f5e50ff30c77e9ac842cb8903a48046b69b02a702ee717ff5f7b385
SHA512455bfeae0c4c83b503db13534b4828dd6240d64caf342630077bccb29c2e7933b14807a31e9a579b90a5053c0b7f19a97d04372cfa2303c840ea63b3c5bae7f2
-
Filesize
1.7MB
MD5b734aff55f1804be7a02806a4b6fbae2
SHA13abaf7155ff297d22b4c49edec38516f42efe3e9
SHA2563a9b7e4bc92f12151f3cffc0d122db223a31839050fadc83ba262ad0cd72a6ac
SHA5126096306bb66d0aeb951c19450d36cab624e76d68bf25b799b99bb9f1d5c69d8a4747ffc52de3acac6f73d738819c48109ed4ef06ffb800f2b31449f3bb3ed6d9
-
Filesize
1.5MB
MD50a64398fac25f0e3b1d27d0d375a5a88
SHA127263a7d9d1deff46521f1d8a554e29290219fc9
SHA25687816f36e3dae78f5426161ea3a4e43a9fcab37bfc92e5255c12f903fa7308f5
SHA51247b4ffcc6e1d909438185d7b0669bce0ae1dee9d778af6ef1fc2a04a93ec9da16a757b76e21ef305743f95d78e6af74cd070c497af1eb16ed0574e6ecf466dd6
-
Filesize
1.2MB
MD58ba00a01c8fd500a868c19d59a38086a
SHA19212a53fc1720e303b219aa354458ddaef0a6614
SHA256d1ffbd1ba77056999771cf5a86ac7c30970b8583c4969fe01e6890ab0c735903
SHA5120e2db01ad7235631343b11a66c6e70124b13477b4f0e90e97ef0208b605984b38599ac37146d8a3a6976e99ac0c5136125a258ef04de6887706b202bed51bf06
-
Filesize
1.2MB
MD5655c6304beb2de9af36294bd63e9af84
SHA16e51975081e784b863bee332015486fe724f153f
SHA2560970bc2838f7a5079037c1a726f19b9c054fe8fce3b0234b234fe28e737cf210
SHA5123427d09f750cb14fb90499cabd5607909e95b4e5a606046816162f2d4a8d9b84de3a6ee7d39fa3b3e52ef372b5f52d166f671f79630e97e5c5bc553e9fe57ebb
-
Filesize
1.4MB
MD581e64f34b1475b5d13b19915e1eadc23
SHA1226aa9592df4aadcc1244e8c39ac623e7bfcb87d
SHA25647160bc5256fd0d38be6a7cce107ad39eb6257017f93f69a8bab9f85a109fac4
SHA512086889e6c92fadd1627ee7ddc2a48f1ecfcc4b61b41df5de5b1abbad7f3653e59badcf67c6e495127d613aa4df5395baaa450f2a3e3c84890bb5cf08c2aed41e
-
Filesize
4.6MB
MD5dea88e2a5e504db58597320930ccd2ee
SHA1b6bd7cf5f342e2f85b9e90b5a1a2d30182631faf
SHA25643b479fbbec0a28763b41e08b63cf4ac237158cffcd6512d6de6c40bddcb8949
SHA512c08bd800f4111a9e513bbb0d58a7599313aa34edbe32d1be87255a9bc35d05b9789905359aef8caeb9e9159eefd599c1776bd9186c7b2afb8d834a6ed4591642
-
Filesize
1.5MB
MD548a1966f485beedfd88ce884a1bcdf4b
SHA1b0024a2682179f6ac0344b0a91828135a212d3f5
SHA256e56bc4ba93500d963f6216f2e2fbbd61398e60ccbeceb91caf95f5771ed825b2
SHA512adedb7f9f83e818cdc8e164616a898aef3c5636169968bb9c8201019ce450aaf23107b71153ad23aba7a0bec3a3f560803461bf028ce6baf97756caeca59baee
-
Filesize
24.0MB
MD537913b268d07e05cb0bab8d63af8d4bb
SHA177311c05fcf0368f779805a7ff435ac245050f2e
SHA25621bc613a54aec304fb1e1c77d4b68db3d7c94881d560fc11d7392d3cebb4f540
SHA512a5885051abfdc0353ddc858a957a07009d61b839f58b216e618023e1949992698becb0bb308e9658e059d294525e9d3b6cbce291499bbd1e347b62304f8c8bed
-
Filesize
2.7MB
MD551a7d5e30ae5216e0f361c975ad295e0
SHA10ac66235d979a96e9eba2763fc5556d88ae9f457
SHA2563933e5f78b7fd0f9a6eebd776dcd903362241b754579eb1aacd2abd0d370b9d5
SHA51261b3a66fbacb7713a2f24878ecac856af25419f753e32b32d2fa86288a9099c488499ffcccbf77cf92eea24386229fd6f9eed7e85efc08aecdf764ed7b8567e7
-
Filesize
1.1MB
MD5b382f1ce53085798cc5fdee8cf9b81e4
SHA1c12f81146932ce9a1e499c2099fb06c1fb914d77
SHA2565f6e0e07341dc9ea4de4927206dd129b62837e9053bad6d2c22dcd8761ffcf1d
SHA5120fd4f4ff3475ad79746f6c3b352bd53b8152cd24d8c8c1046a960287150028084ea864253460baea3cbaf35bb45fea4ce1e500ea1d57f3d36627f7414db28dee
-
Filesize
1.4MB
MD597dc20a7e609473d00fee9c2cdd7dbcc
SHA178ff3753ae0a235cf760245e5e5702eed3779cc5
SHA256f18065e639305e637b1ffdb04961f051e48fd772e5f825da09ecd51da50d4c20
SHA51257921f5e0c4a3cf2cf8f38f411e2a8200a5fd40678c0d70378bf7944948489fd8061a6c3a15398ae28475ae61820e84d70d96d44a44a0b32091a941de8cbadde
-
Filesize
1.3MB
MD504ff6fdb1d2ae20628e2e89757ed5b07
SHA1ac2542522cf7d633bd90a91c6c20961b1b069ebe
SHA2568631bea5dba8fac767905f5fb6b5c492caa0b712396a59953d83cedc7d2e6674
SHA512a6eb94860a47b00e3e33deb049e05be7e3a1e89f151f57d383717453bdbb6daa4437f858e4484c1832fd09828e6581ea331254d9b797b813e0673b2a08681af4
-
Filesize
5.4MB
MD57b6de5aaa9ae2259be60f34fce7f8ace
SHA1e1a700fbb86f1a24c002fc1d59353dc629240d23
SHA256fce2c581eb88d61a648c2d2e1ccf4ca2659c0b8b11fbeafc9ca3a25e48cc80df
SHA512b6150f7394e2664d4df4fce7277c6646d89de8f5c79e28b51c540d2b7deb3f086043dbbcf16a1b7ddecb6526efebd97a37f7ac71baddcad4f9dc25e117d94968
-
Filesize
5.4MB
MD5ece8e0eaf735a213b842aaf55d066399
SHA10d3e6eb521579d675c37048b49343ddf1644c40d
SHA25664ed8862594709be68577245bbcae3952578c5f4d7076f446c3bee03d5081db7
SHA512ec1b9eba0686b1a1e6ad405db295c49c8dddb21820da4af9091cca871af39d8de32f81feaa0aab91f1d3e4247e0fa1855c74b362a31eb1f801563a3ae2b8fad2
-
Filesize
2.0MB
MD51d90e2145f63beaf0e7e160aea2aac16
SHA1f146ac683caf4bc8bd2140bb31200806ed30d38e
SHA256df5e71a79673e8be835ad34307e7bbaa6562ec2327149feb76d969bfff6212aa
SHA51299837c30c15e06fbce6ed7f7551ca9cb7c909c2e4bb8ec0c61e2b1579a2ce457f00043f828a15507d6b7dc445dc635fa190a6818e2cb8efe18d8f56999658162
-
Filesize
2.2MB
MD5d4372f3e8681bc9621b2040fa7e07897
SHA13cff91d92ae35e72e6bed5a94c95f5a00e1fbb63
SHA2567fe7f909760b69b277f6fa49dc2eb76a8d080ffd17cca6eced296d5e515da826
SHA512e962a0b4a5cdc3b5913f8e346eabdaafbbfe0251929f56c712e9de1f6dc23e82844d280c83dd26aabd555abef6bc987f96107f9413a7d44a562f8032eb9c8192
-
Filesize
1.8MB
MD5cd1564d9fb24e787cbdb2519495a1765
SHA1cdb8c691461bbbf40e980e4418ce241f59336bd4
SHA256747aad74328275e39cd1d39207943d77f410657b7690c5d6dc5bdc73c7e1bbe2
SHA5126e1417ca902e426cdfd4510ac08b3150f5d860066642c155453a1aecd037e66540f9aecbf8bc24600418998ebee4444aa4adf6ce8dd827da7fffcce95bb1ab3e
-
Filesize
1.7MB
MD528c1e4af21c3f92f4ee27eeef6b00433
SHA1f78f846a69e01268ff113bc1a78fcdc6921fc7cb
SHA256af96a9af0d5010b13bd5a6da5bdda787dfa4d5b44e7d9d27eaf3f0bc05ca00db
SHA512758b395114fd19633181d056fd7e7bc5bfc61af5621ad8e9e56b3de03a2fc4ea790a3280b7fca7901874dd82416ad24d8a376e081f1d86a2b8ac7cb00f7a7690
-
Filesize
1.2MB
MD5ac4fd215186617987f14e17ca0b00392
SHA1c59c635861a7acf316f38b7dab557ce1685bce56
SHA256823b764918a6934e91ade54b244608bfeebc529cce5323837425295fd8bd6e5f
SHA512b43f49aee5303ff2fdd637ee70f955c3cc928da0ff6db7d53e87ee714170db7dc6aa9776ea8cbc02bd3b0221cc73011215d540520473ec23c1b330dec94fe32c
-
Filesize
1.2MB
MD5f202eaf1451c35d324998c0ea557a38a
SHA10a8350abcb13f803ae135b4b73af1c937b54e86a
SHA25673c5a459606280ba0702a2064fad2828b0f752ef11f5b680bdb02632ffbed9b9
SHA512fb97c43f09b5f363af0c264f3aaf0820ce7eb8e1bdffdcb1ab88761bf7791ed6fdbace0574221eca13b3af563bfc10db34e52379bab4bb617429c1a8cc592c85
-
Filesize
1.2MB
MD5325e49a414c8f5a740a776af225d2cb2
SHA1e0367b463a65816e985b6aca985bafdb2f091676
SHA25655be384e86159793e12be1e44f64c4a021d7cb388ef2d275a406d320aadd7077
SHA51261b2ad498d44596be897a53fb7ed9b846568d983b5944ef71669dad3928eba61e9edec8d06b9b54c680eb59304a238fabfa8a0c1c206679952356b77d21eac0b
-
Filesize
1.2MB
MD526036851fe8fc85908b4cd290495314e
SHA191712a1586788fc48543c6aecfedc388cd747ef0
SHA256a6bcbc0c3a208291a7aba2b2681b0ee2cdbfe1a73c43076a0161c3ac3b16d29e
SHA512c4cd3a6a49c6e0e86b31aaf961493a4835ab6125e3f7833ec6022e28ac1389d1968a6dd9e60d118dd51a149dda553177b579f85e43b20eb6bfe7f7ac5c0d82a0
-
Filesize
1.2MB
MD586fed66a6b1091a25209aa9ed43334e6
SHA120e6cc7a129b31b9e753d35c8fa5d742692b14e6
SHA256d18ea8ef79290e176bda22d6a485fd6365ef5a360f4a5d4931f288f1d1e7542c
SHA512dc0171b04839caf0a515ddbd556fd357ef26a62732a74f4a8d1db6be9d5c8f06faedcb9cd04b8db84075947fa93ad554b3b08d5e9f95665e8e7501d4f5a919d9
-
Filesize
1.2MB
MD5bebc7dfa35f6ea9367611cafceab6393
SHA15ecd204c83621d288a468842970ca8fccf175ed6
SHA256edb0efec07d6e27d1c21e21675d046cb364271baa9c6e1db2d3acf258fc563c1
SHA5120ae92e4a91f630bd703cb5ff31e84ab8906994c6ed32fbc5b39304560f24df2b6757c662cc35395fd0fa1b3ef2bfb7b1ede4beefc6cbca651c24239ad887b5a9
-
Filesize
1.2MB
MD5bdd2e632eeb21b1ab5ce5d42a4bde230
SHA177633616388d8e3bf9affa6e5b77ab58aef12e84
SHA256a64a80fb93343eb27e8b045f85af5a66c5cebff7e0db57a84b7e41470ec72fa7
SHA512302fe3bfe9d1b06c6f9c09ab1b5ff78de579080a5e1f7c7f430b3e7e73113b6e8c43559bbcbfd0caeb05474ca7dbde12e318f460e48f36a56792170afed5f758
-
Filesize
1.4MB
MD577c491c1e0a2476a9767db2d484bf2d2
SHA13425ea7e9a36b30301e7dc30e3226dcb55abd073
SHA256c8fc2716a47dfa9ba6746db656b454f489c5eb7f3a0036e0a415352177e26c01
SHA5124696a8d6fef15d842edfeb4298cd4c3f37b6d8330a68dc2eb915a8c1745fe49e75eb06ae475d931f7bead4e505ab30d02904c5591e20e18902a21c9be57cd5fa
-
Filesize
1.2MB
MD5e5dce5fc9fbba1e325dee0cbdcd107dd
SHA1d24b79ad2ee8cb99c06b475ed667a22dd8d870d9
SHA2567c3ce1802c99e3fad450461a50b3611124a29175aa2a085f6a2c355b9107f3e6
SHA512407eea332e9fe09a64ca2490facb303abbf3f4ffa57498d36d4d30252359e8db91696e605f2a63b3e6480351608bc57c4b5f2179854e50d29290b15a0385136a
-
Filesize
1.2MB
MD5a16abe264a9a4c9f476863147bdc698d
SHA1e9d229a047cbc99a9b152d4446091d1b38e602e9
SHA256f979d8cbfdcb45cd9eb09973b7d811be42069d7cbefb9f9c06bb3608fec3003a
SHA512f208f0303b86f12ab74abe7be88943073948336e884c028d3f23eceff76cbbebf3e2f02f0b34a1fedb489caee893b1455b8386992b7f5dab51610a93c4b54916
-
Filesize
1.3MB
MD5ca9f961ef78652bdd1a38e88ba9915d0
SHA1f1b352d72e000db78749483dd5c97b990e1ef620
SHA2568058da9568fbb9ce10f5ac983037715621cfbdd1cfd3786c428a10f93b7f1ef7
SHA512cf7e0c40c1ee025d14ac0502582965f09c6cbeebd002aff93abe95be76cac1fb2c4a0702e7a5b731c2a5d014d019accfd8d49171fc6b3d3c72f88c67799a3aef
-
Filesize
1.2MB
MD5188c691d9580f7a16a5e74d1136a9226
SHA12446e7c92eb78d3d1692336505dbd9e0686e1d33
SHA256ad5a880bed09f409550b7ca844a2ed656104bfe9eda38ccd0e1c954e05877537
SHA5125b1f38ea96879dc21184efb39bbd2eb40dde5197982d0ff45c1956cac7fd31f1ddde80cec4eab14eaaa86fffe7b80de89e892bfed08fece765386ba43ee4f6c9
-
Filesize
1.2MB
MD5359b88eb5ce733ba8d1956f6df6e27ee
SHA17b64c331ce5eb95c9c0d4c779c7e6a848d6d0fea
SHA25690cdf6e00c8b4eb10945e52051531736041bb34a3e3f69924367ce532a9de375
SHA5122fc8e43f0c6ff265f9bdb348f1e79fab3143c1d24ba6d50b9d479d148494346fa9177e55ff8e66e510e33788a6e4aea8ab5445f7b64e985514a04b9caee54ce6
-
Filesize
1.3MB
MD50e326c740dad482651e3ea666b0fbd46
SHA1381369bce50dd0c7f4e1f17e65a257ea0300842e
SHA25608505e403c5869b94766999eaf2b398d8f75aca50bb89f3182cc05e8f8666ca3
SHA512fcd74e6d15cff839c130a58701882f6179b542e434a7ffbd6513f9889181e3cb001d31add28d55f4e6e46f16862f4cf068e4859672b2d105d11a24a902f043bb
-
Filesize
1.4MB
MD58634ca5c1ec2d3500b4269fab5af7aab
SHA1fa82824c6bc76ea74580fa1ae112672387d9ec50
SHA256dae0a8c8d548f70d20317661e3b72abf6f67c04f4d0560f2059f17eef7ca53b4
SHA512c6a14d55b09d422c10a2c1d8e7abb3f6c83391283b14d65786f52b2b5ad5abfe8401e44e04a6daa41f7ed239c5db7ac7c944bf658076e0b4ae19531bbd9ab487
-
Filesize
1.6MB
MD5bc354b8201108ee10fbd6be55f9e4beb
SHA149faaab2357e03372565e5966cd4aba485fbca33
SHA2563460c3f509f698a5a11011c25f92de82b6ea01e9ddc1b76f39306c845d818337
SHA5126cc677883b060f25774a087385a868659335e3fdef3926bfb201b42f467cac3f39d94079ea171d833b8b5a9a3b079e03e15498704a061471a8be20539d368f9e
-
Filesize
1.2MB
MD53760ae38d81b86e8cbefda5aacf3cb63
SHA1d47f7d34b259997b9c05de1ab2aa3253613db429
SHA256c3e95d00f97d4411ed7691bb7afa9a244dc85af640c30759c336b1f47a0277d7
SHA512d1beb528bea1c4ac4f22b80a526aa34a1d4218bf1afd58dc29a208e9b2f1667286481822e70967c0ca1d3c41e44bf80b5a87d155883240985ff053c5b0336dd4
-
Filesize
1.5MB
MD544feb6a9ad7798710bd419b9c73a07bc
SHA190ed38b02c071e432920496617783b5cae30f064
SHA2568d20f3f17c93fd11c9c34d8bc894304b84d7f36505e24b4c832efc48066598fe
SHA5123df28e7a4ac142368461ee9da39b5275d7049cbd64cbbd0f87960ba16a8efef6f4214c6de27750aed71728b5149e923829ee6dfffc944332097f1ac903b21256
-
Filesize
1.3MB
MD5b0ff609785f2326e970f0a8374c4a571
SHA12fbd70989bbf88890779c78954c7bc3a3fa98941
SHA256439d864c8b80d0db4a33f7f3f809355da6a34bf5304d984a6549aa037ffaf685
SHA5123f60de64ae22d32a27f0db8cb5820b7239b46409f403559d945883284adec995bc2d948052168e46d2d01b585db696f8391cf6861e13fce441bfa8218cf29131
-
Filesize
8KB
MD5d1f9bc582f6df6921f901aad75c8fe2e
SHA1aa0ce9570cb5e078a01ba1735395756d16f1f7a4
SHA256822235218475010b3021ce482b7362ab6e64f2c6144099d80ea06983b6a4eff5
SHA512057572523ffa9bedb52fa7e81ca6f2b2d9b2cbb931adc7813a3957fec4df8b209a5e71e4bcf6b49117b388b7ceb2895315089fae581c0fe29762c5c184a85d7a
-
Filesize
1.2MB
MD5cbf2e783c1a0effe297477068124c9e6
SHA1ee0cf2d53c97a8254c124c95d6e745201c344f4e
SHA2565af23b44c956ad916ff9d5ec17d8f87e08168431c80bf97c8b878f6b53b19876
SHA512be94721de143ed085428e6ef7cff893acc27c8798e26c6226219ffa50aa34b7c98fa008045a095435fb8941837e48d1a1809f072e9c53454ce744538a5b947bb
-
Filesize
1.7MB
MD5de0d3f753c5d70415940960436047065
SHA1048c06752828283f3f4192ea9544afd4d56bb1ec
SHA2566e130a7cc118e1a473ee541ad2c2046d5c55b537af31d4e194da3623c0e9f926
SHA5127e4328813e07b8502d91154fb6c5746f4f2aa8032d310088be7bfeb9eeea947462a884ca3ef4a9961ef7a16e37f2c0b47029f973fedd53fb115e4ccd45ce02b4
-
Filesize
1.3MB
MD53e4401c17c3ec3602d76a0de4bbc2312
SHA1b9dab5d74ce3aba18c3b9ef679fb845e5d20a4b8
SHA2569ad2da96161cae81b5457e95091f579fa17a525c893e7e75d6cbafbfd359fa8e
SHA512f74e8881d7b91b52800f5dc30dc600bc83874670cce8d9b67c8279deaf5018958e098c862894a4873638c717bc1325e55004db2f2757419b4e862966e8049c0b
-
Filesize
1.2MB
MD574cbabc509dbd0e3ecfb4f7eb1218113
SHA1cd1e86b60966f97c775cbbcf15739347ef36237b
SHA256aa7ffac2109acfe1fb24f37327e3e9ce5448218dacd6d2b6908542583a8540ec
SHA5124c14dd4f0b72c276e0ca7614e514aef2faebb0451211025d0941c85aff9b7cc2bc53f8b5691767697990fca563dba14c3b3efb50791c8cf97dfd4d5a40a6550d
-
Filesize
1.2MB
MD5fca69a452ba944b1330ae4554053d323
SHA1adaa04b6ab04f12c7aed55c1e57465fb1e2b4a80
SHA2561c4e94ba3337c6c02a6e533695e189a5f3d471e32cf4805932610871afc3dbbc
SHA512bee2153c6e5051f978625fff60585a2b83f64ff18960c6f2185107a3960b6c8c20f64d3aee12fad7339c9d26cf96e39e8fba8fae832fb447fa3fc55c6f40119e
-
Filesize
1.5MB
MD5c0b42954429775832d329752cedfbf8b
SHA1a116bca9c8c4c89f577e2751af453cac2e49e663
SHA25659d955cd4faa73c012346fc62d4a27a69abac11b668ec043f9c7a8008974dea4
SHA5122b778c11f4681a959b91444f53e5e6545ab90842c48b9574cd94f60b7a9be15442f8efee6a95b9b74983f3d73025254edd8a42e0b1a19f19b087a20e6d5dafb9
-
Filesize
1.3MB
MD5e7533376d63392585bfccdba4adf97a0
SHA184678929c9a319641c96757b334536450d094c29
SHA2567a184206d8b5344bbe79bf27cb3c1856c6329b70c6bb50fb0153415c81973757
SHA512bded2255f9eb2b6506684c3daef61a7804dabb2b4820132c52ac7c3f84addd21b4f3e644715f86eb3729cbd38905fde690f5ea29a9499a515bdcc18bf83a6b51
-
Filesize
1.4MB
MD5aa81c6d1fb700766700f8227fb611243
SHA1be8b630a9a98cffec4e65eeb8f3d459db13199bf
SHA2562af5c59bb7d05fb2e98512c6ca14cfbef8864ff6e96f74b3d04531fbcc16de04
SHA51269a74a34e87444afe6a3f64f58cdd342df557317067daa1b54be664b8f2324c8d40762f157aef078bff125b75ebc97cf4f0a8656b0833589906c46db9069b301
-
Filesize
1.8MB
MD567a7feac4df5e3dac8762d6207f5b42a
SHA1d7b6d35914338ab297ec6345542c8b9b9100a9b5
SHA25632ba7b2f10ed2280966572cf37cd6300e4ee53c17bf18811d2f95000e516821b
SHA51249197d93a82aa175041578fae64be032d293db417cc55d35ac140ac8511c2bb2a17cb2e2996a5af4c6ec733f317e4f3d97a0fa683644a2e1dc28a95799205f83
-
Filesize
1.4MB
MD5bd27021db5f2cc02d278c63680aef3ae
SHA1f643f110689948d7ee9f3a95a948676a03414421
SHA256a5708a5f512627e43e6859bdcb0f1dfa176f713c2b53e6ea30555cadf1930ba5
SHA512a6928582e194f08afe7f88c66d399ab4e53fc95f98c328b95f12b1af7846666819312e0f7461a525cc1a4364adc2da610398617dd37c0bd01313c1774328a1fb
-
Filesize
1.5MB
MD5af9b53b6d6eedcfe68d3c13506640063
SHA19be12d03b6ecdbdf06e83e7ee8da95ad6d96e6b6
SHA2563079cddeb53de5b2580fb2256cab9b9b9a946400dc0597288e84dab9ebf72a23
SHA512491236def2f6f559aa8de046dea57c3ff874738c400b9bdc7a5d9823dc5a980a2b63368040141d5e93eacdbce862d9a5e366fc8cbb094c188ee804d447bf7a62
-
Filesize
2.0MB
MD579657a61eda268ca9c05d2ad94c5fce2
SHA12c4129dd1d22a4c0d41e5b5a32dd6225ec359466
SHA256a9337b4f919585af58c92861a3271703a1a73a9ce66442c0fd0dc87318453a20
SHA5126d50c2f530cda9871a469fe16249b91307f569e7a303ea3a5bffdcac013d53ac0f34cbee9231508176f248045d83258a57ac3e4c1589158af0cf1551ed991889
-
Filesize
1.3MB
MD5a397c03b71844b570797f2f2060cd42e
SHA19f4394c4d751bad3367388c1b70e5cc9980a1c6d
SHA256e3e38237a28a6e63a0e503eb2355654a771ef2e46f4114c95080f9dd7d2c583e
SHA51280206a46e1833af53a99e93c4c083a2a1fe44d548e9430aa07bec30d639a46842c8736356c6af0cc38e8a35b6d7ffa3a290a0ebd1fee1c514ac96b62fa8d5efe
-
Filesize
1.3MB
MD52f4a8944919e4088e0028961347aea79
SHA1a200f510ad4cad7c449ab7a2c3ccff16fa11249b
SHA25622b479d0ceb8d0d94ba4777fc7c910191a6b25f9d58853130efb1ef8d50dd358
SHA5127e627fbb4693fe62776b0f4b6dac0427b12cf3dfa026532f936fe2de477ee68485ad4155488e74065c96e3f0f1fd340a26cbd55f969521db9b68489a54205267
-
Filesize
1.2MB
MD5e4b1819b9b0f28e32d6b45495819844c
SHA12c1c1a7b799e86ccb04e662f0d2990da722a686a
SHA256e0b3a206e0ec21d5395bab1ee606be3325f76a33fe5ed47f3b884b68e69eabcb
SHA512fd469c159af973a5fe6913900ca3d6a5f825c2601e29d0bc62c79ee636db8f6a1b772861c0138dcd148e2d011fdcb276041fda70d553bfa80975cb57b31b796e
-
Filesize
1.3MB
MD513dd9bf237467d7b15bad3d7b59c5bb0
SHA1f30e269128cd8a800528d2cef3b0eb7eca8973e6
SHA256430c83a5de91524f768590115a6c797eb286ac71e5c3ce0602cef0c46664cd69
SHA5124b415dde33c7d682ce8096f36f5f079ca167b97d07b1eb310b39675bbc1612bf01acb0816d709254313c1978c6e574a263be8937515534bcc1412d947aad015e
-
Filesize
1.4MB
MD5486ab3b05847a95307a3a758bf825877
SHA1d51dd50015bc588c7aa9b0b014a75d40ef9c7243
SHA25664c72ebc4faabd494bc3b7ce2487e32d98471dbd4a09e189c482b76cacdc2435
SHA5125b9f8423aa5b3318b7bd21e056c6c92aa6a85ad571b5e36724237e8a6a4ea4bf94b03cb55c699c50015292bcb6491fa9df32a83e3b6169a4b7d8762815c8285e
-
Filesize
2.1MB
MD5eb0ce24f7ea3ca37c7f1d4b665832de4
SHA1650dba39563e68988936892e5e04647def7d283f
SHA256504257666296987c5330a7b02ce902bf9c0fde5ad80ce9c74df646b38412b6e2
SHA51266c41655fa5eb79385782c8b68238795f60e30c241fcb888e496e6e59a6d749feb88cb4ad1b83ff7d6d82903348b6a57011f1ec14e9ff0710b9e5c32aff7c3d2
-
Filesize
1.3MB
MD505860f11bb37e01233843cc4b9608708
SHA15123344fe91bfec07e4e2f19e56fe3550a9d194e
SHA256a99a7c1f7768bd2ab9a3fbcbcf9b67850af9b21f47614fa76047efc36e0d4fec
SHA512be78a3c9551bc6b871715781e33ce6b18a13360116c55ae4cfc9d6eada4521d7028f4409d83bb78673e43bf0ab269ccad9ef748213941d26b0d4b2a946c25120
-
Filesize
1.5MB
MD5b6173020e1951c730093948515deb618
SHA13621af1c5775dc323b23f38ac6513d904f2f7fab
SHA256ed15c2a50903566cd9e61fdb76900178e57e17f0f2240503779041d350f44bde
SHA51251267e8cfdfd86f1689e835339ee7d92d24ac07a963d315c46e83bc019c2d5633e70af618fb0b0079a1fef56cf1d574a85f2628cc1ed649400406acbdfb02f22
-
Filesize
1.2MB
MD57c4cb9eb8aa434c4aa752fea768cc7ee
SHA1681f2d50cbcd49a5befe681c4a5f007d32df6496
SHA256c076cc7a1e23e502e478dc2863741badb5cb64bf66839b424242d34735a39338
SHA512186687a69c753b0ab359585a07a7a6b71a4c37a367a4160237367263fd14d761356724952f38b7568f862d9a4e66a1e904b34dde888e1e8186b4342064219c0e
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
2.1MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.3MB
-
Filesize
1.8MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
1.1MB
-
Filesize
384KB
-
Filesize
1.1MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.8MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
1.4MB