Analysis
-
max time kernel
2s -
max time network
132s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
06/06/2024, 06:58
Static task
static1
Behavioral task
behavioral1
Sample
da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe
Resource
win10v2004-20240508-en
General
-
Target
da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe
-
Size
622KB
-
MD5
37ca30cb7328c64a6b3b4f6dbf1404d4
-
SHA1
b0442cb5583ba87468b066d8efddf50509079838
-
SHA256
da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3
-
SHA512
3ea76fcd3c5b1e0885581d3ef3da9de82fee8f656feb859bdd54849d2702ca9995db269a07b5bcf301d0d124ca20cdaa0a9e5dc2f29a89a1501f2cad520db034
-
SSDEEP
12288:MuE58LKdnq1xmZw8UIftWcaoNntnPTEYHYab+ehBjukSeyTy7:MuPOdSv8Ucaod1Po6YK92y
Malware Config
Signatures
-
Executes dropped EXE 7 IoCs
pid Process 4544 alg.exe 3972 DiagnosticsHub.StandardCollector.Service.exe 752 fxssvc.exe 4248 elevation_service.exe 4692 elevation_service.exe 540 maintenanceservice.exe 2500 msdtc.exe -
Drops file in System32 directory 7 IoCs
description ioc Process File opened for modification C:\Windows\system32\AppVClient.exe da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe File opened for modification C:\Windows\system32\dllhost.exe da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe File opened for modification C:\Windows\system32\fxssvc.exe da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe File opened for modification C:\Windows\System32\msdtc.exe da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe File opened for modification C:\Windows\System32\alg.exe da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\b9be5587293b476c.bin alg.exe -
Drops file in Program Files directory 4 IoCs
description ioc Process File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe File created C:\Program Files (x86)\Mozilla Maintenance Service\logs\maintenanceservice.log maintenanceservice.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe -
Modifies data under HKEY_USERS 5 IoCs
description ioc Process Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E\@fxsresm.dll,-1130 = "Microsoft Modem Device Provider" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E\@fxsresm.dll,-1134 = "Microsoft Routing Extension" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E\@fxsresm.dll,-1131 = "Route through e-mail" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E\@fxsresm.dll,-1132 = "Store in a folder" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E\@fxsresm.dll,-1133 = "Print" fxssvc.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 652 Process not Found 652 Process not Found -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 8 da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe Token: SeAuditPrivilege 752 fxssvc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe"C:\Users\Admin\AppData\Local\Temp\da71c41040f4113d80075a4a0a5fd6bb0b8c98bbfdff42d49e03c03d84632cd3.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
PID:8
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:4544
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
PID:3972
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵PID:4180
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
PID:752
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4248
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4692
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:540
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
PID:2500
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵PID:4260
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵PID:3248
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵PID:900
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵PID:4956
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵PID:3260
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵PID:2248
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵PID:1408
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵PID:2404
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵PID:2584
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵PID:432
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵PID:4092
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵PID:4032
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵PID:4656
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵PID:1752
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵PID:5068
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵PID:4728
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵PID:1600
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵PID:2984
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5e8ebdcd2d880f7f0256d050c0a2820ab
SHA1f6d7b70f98e44a80e499cfe1d10e745aee0744a9
SHA256adb7c34345779f6aa9920099c5f0b98cbf7396f2872afa689ec4cead0aa67814
SHA5123a91f06ef2e2faa227e5910659425aa114d00372db0b672dd74c6f7f280301f60120c032d2d2ef62739f17b6167419b1e12ef27744b88659e055a0bd1b8787c0
-
Filesize
411KB
MD563d1bdec764fae70145437f1b9beaeff
SHA13c04dc92e8a7b70ef26eaf387dc28129c5a73f1b
SHA2562468f9b225f0daee169db4640002f08e1bcff70979e6f0e8020338b9ea34a6b8
SHA512684838c313c2d41f5531fc738e291a4c09aecc238761060933a3cebf02532150bc00d01d2ebd044910a18b5d11e3f0b93427c37fb8a3c746509e59a6d775af8f
-
Filesize
797KB
MD54c3e7abeae8d66f435b7e558c062fb50
SHA1ef96e271c870fb12d1dd0bbb204259e6cdba33bf
SHA256cdde8b8d1a1786af3774f90edd7a21690a4a4b94095666c652e3ccc75466987a
SHA512fe8c019a445bd3cb0bdfdccd76a5298d0acf1d3ef85a57dca6b299c786827968ad56d3948c4abf4cc5ae396ab8ae2ebda5e40d0d8a91d83a3674bc42d9123a23
-
Filesize
448KB
MD549fcf1280b8aab4988c6d329d2118e74
SHA15f92693db21c62c281d2ebe60d9b171dc07a1135
SHA25619116ffa47230ea95ec0f8363cc0e9b468c259e2c8fc289d4a182cf396ca7ae1
SHA5121f68651c1a3cb3f8d8098ffabec6fd1ebf9bcee44f15a6da594e469bda1bb8f40dd2dfc43010dea4e6adb664b67b1860ea9bc51914001591206c4d2ea63eb83a
-
Filesize
448KB
MD529f2f7952d866e89cfdd3063c46f3355
SHA1631b846c4e5e74c2059dabb0f7bc52f2573e5542
SHA25665727505149ca001274d0c38818d85bdd97890b3eb3d9d457d2aa02a7ec07321
SHA5123e48fb1ae4731a38eae82acad20f75306005943dc3cb32e270f497f2210525873fa62f93c2d382e4155089f54aa5db33dd150e4b63581059fa0ea6c3a2f24914
-
Filesize
448KB
MD5f3362f06c7d0344512d6f84c96eb7a4f
SHA14cd2f3c2b0ea247a650b1a573b6af23bf72e37f4
SHA2565a614bf9c931a46e75763da21edaec88e9198e1a5959f6b23ae2366d896e08a5
SHA51274d9d36f71143f34652b588838fb1e7085fcc325fa41a3d5a0fac90152c66b841639d04c944719e5e10f19e7146b022075ac04eb3d3ad113efa76497a56cd0b7
-
Filesize
448KB
MD50fa4b19a1b1aaa5d53b284a09ea747e4
SHA1ecb10afe8f72effa3f8624366e7bd84bbbbd7b2b
SHA256e463021f8efb3f0e013744dcd1a8091bc5457682fe6b5959af4d6754b30ac66d
SHA512f5d35a5cf3cf166eb6a0c4f62ac6be40ca089706a54bff4e43e82d3694c4838e7c6c7c5eb18e42c14043fb8b97edfe77000bc31fb8195f9d2eeef041e581b681
-
Filesize
448KB
MD57fd9dfa196e80ff79f90d279f3b11b2d
SHA12b5ac8c9208ce6640dbb322b0a1ba6c5ab9c8563
SHA2562bfd75f2271d0cb92e2610a00f19fe0d4f0f7bc7930986fa03e8f9c766a59dd3
SHA512ff72ac9786366d3fabda2c8fae3271c505665a7dbadabd92f300577cc142212d073045c469ca2f60d9a8031bfaaad199953ed95f65acc035cb5620bfe3707862
-
Filesize
448KB
MD5f16b719e803cd4296c007e763b370919
SHA18e25870224d0c6d71ed2f73aede6502a20942070
SHA256d144a63568913ee64c4d9b3b546279b74eb8ebf858e8ec47e4b3f1073d390c8f
SHA5122a1043248cea38540d41c943ccbd0e994ed07223de87e37b7e2b02e2dd7ea7623ea2f7b0b00eede1cd4745cfb79ed56fe4a43a441628c98ab5f314e437b6d796
-
Filesize
448KB
MD5c55c793b2d063cbc636f2cc2fbab7bba
SHA1554898f31db38d53280da5cc4714f8cbb147d73f
SHA256c1e36dc6beab91050e14e0c7432e5b5f6f29f265cb236e40d5f7335fbc9deea7
SHA512fdfb5100f2d238c53db7e6f4ebcfc20e33a66ed5fafdfc272ce08b69f9ea068685f65fb8fbd356b14e4c4fe1b105f64f2e24822dc6efcc39412a438cc513b528
-
Filesize
448KB
MD5ba3f9080af84e9bbe5c006599f60b238
SHA1ebcdf525aed85e6ca104ebaa51e2994b3736e60c
SHA25657f6c22229d851b5ad1f80128cffc06da21fa097f041c41186c0694362b0cad1
SHA51276102dd21b6a0afc2dd8c8794854e9bc8adb70e700d04d20d423f06aae0d79a7cce2abdea3223254f39a9b285437bd4ad0d092075695ee503b621e38e045dfa6
-
Filesize
448KB
MD5113e8fe5c6cf30f0e11af34080f2a10b
SHA14e387b24278a6ff84c8254ea6c5406d71cc7fbc1
SHA2562a8ac3577c5faac0b5fdca0d97b010100c7d0d81a12f48fc6fe90fb538bf4dc9
SHA51204c0ac116c15a66cfc396a657bda7a7945d7b7f9b9df808277414a8dfe5c7871214b2dedf48a3a82b63a66485c1d7ed7480785ec55a0dd3bf788ce09035fe27b
-
Filesize
448KB
MD5bd934313f7a14c8aac16a28efc8390d1
SHA161482c093fdeb789697a0d29547fee57a3fb77fe
SHA256382b1f48a644a07fafd393385cd8033f69e4c00331120749487084e02844112f
SHA512d4f4b6e6306cf9687a38b571568116f3e571fe92920e4037c0b35600d6d8b3d34e7fae9ef6eed698412aae43c1f56f0220e4f1fb68ab21bd7c8e84ad21096a9c
-
Filesize
805KB
MD5e40f0d7c5257a593e5d792bbe5a3cb1e
SHA121166e013f57443f1337186ac93583637cecae7d
SHA2563ad055aa8fe49d6b8cd2bf86ce3c279f0ae9e6b15c3fb958295cb47eebdacad3
SHA512217eed9cf92a55f0c70e0c72d79368ce9a07d624f086e42dc1716e7e17c13d7efd43ad6899e6957a858e17ee0cf4b0157cdfa7f3f1070317363e96cfae476d9a
-
Filesize
448KB
MD5b4c6d499f9d45bd0dfc849b8e44f9f18
SHA1e416aa469eb87628c2c8f7a2966a2c405c580da9
SHA256649ee7716e2793972f815301acc3076f6cdb87592550b29dc005a07dd8b8db4b
SHA5128c8383ec048d6196c8b0690c048039ddbbecd3c289a0459bcd191e1f127097b44c0e1629097f7191da76620dfae3e5ad63d38e3696a3d7877d84a2a53a51373e
-
Filesize
448KB
MD5f03556942ae532d6cff16f68f6b0181a
SHA11e2e3739c9bf7cfc8738d3aec294b475f94fd5d0
SHA25661a0df4dc57bdd3d41a0aeda83e59c4dfe7e1150a04dc8b0d57b6ef9f11dc376
SHA512dbb4450d8c87dcfadcc7003522ea6283d1742b30eefcf8b77e29f201d9cd0466d1542f0c281be7b6a334d49571ac23969b1bb75352280418ef823032086fe45c
-
Filesize
448KB
MD5506f55bf3aba139c0cc0c00f6dcc5d70
SHA1bf6bc916e0f5803f5096c3b9da1a57dec99710f7
SHA25630b1d70f7cabb5f098f0e70f26877bc5706ff0714c67d419026314e2df2fddf8
SHA51272f9585933baa635f92cadf73fb2491eb0258f311c4aaba2b8a34eb8be2f9536e63762e40223089e88553440d121028c2c5fad538f9a1964a471ba4a048bc3cb
-
Filesize
448KB
MD5a61d8587b5484f3ff65ebae75c7e7552
SHA16199baaa9f99ac99487cdc79583ab53fc9eff522
SHA2566ff1e15cf9edaff0adcb142cbd71e083c4a530e4ab33c6893aa28e6dee54f5fc
SHA5124e8a0463c80c57e9a5cf697e80504aa6266cee548861544d6edcf55db123a2f1b8d70fd34b1ffbf20ae70d7fe1af207fb26d19f26092616f7644b76d98d11f43
-
Filesize
2.2MB
MD541a30fee9526aadcafa87265446c3279
SHA1b2a95d281833e56dac3ad0c139d29f8d7fa910bf
SHA256c2436789ab9b8313868135c9a90dbb2f3899f9dea27ab683b2a27f1b903f14e6
SHA5127e41f50a8c1bf062d4e5ec7d1aaa26f3f646ee48b704017d4f5374a449669fb3e76e5ac06f1bef886b4939e5261441474eda73a69312b0725a04491e08d1a589
-
Filesize
411KB
MD50d70702c199845f54e3142fc26e6eee0
SHA102692f13afd6b507d36a1f1b4bea18caa4751520
SHA2561d2214775a65b713b68426d10f3d9549a82e4170ca485593bc1b30db7d28735a
SHA51272fc18074270ee62e376ffffcd62ec2fd82ad3685d4a7e2596d10dadaa4a8b3bb2dc78cfbb3c9d80936fe6cbede73deb93c98458f263066382739417135ce96c
-
Filesize
411KB
MD5246df1f304ba0e01287b2e74142d81ea
SHA12121c176a7b9c5106fd1ffa3bde8dcb0d0a2a2fa
SHA256e7811398c3d731f17b78d19b3a07ae33588943c94088fbfc91616fd5123bc39a
SHA512d996c165566d6a1e220aa432a5fc8ef3c4a9e130d5f8ba870ee954f01405f21460c08b1e9a968122cb3e5f6f3f8df600ae62c42003304f014244b7dcfbd64da1
-
Filesize
448KB
MD5c82dde33a816787570e8d230ccb05a28
SHA1a323cbd904f54e7bc18dcc760c1fe4a3047e5544
SHA2565c67883a481b5eba58bde88c3f77f05c51ef0e71ca3cf4f7a2181926f2adeea3
SHA512622746961a4ff3f3cfcdf6b7b7454e8c99c548b0bd35f5c1cdb6b39731966697f784d9b2564f89b5dc3f5cda079b41ff2dc1b7654bb0af9a4e83577dbbd339cb
-
Filesize
411KB
MD586942c57d5ae4531479cc8a93abe6b50
SHA15c1c4706cbb601ca72d0292bb20b0ad6626f60b9
SHA256c3be6568bf0c354773d492e2b1859a67d3a9cc82ac2eefce8f8d11e73db5fb73
SHA512673c5bbbb78dc5533c0ef3e8fa7e3c226a2a430b6982fde554d2c78478070b66f827de8d9d0ca4a7e77fed3ce8833b4425ce99a5d4db52931d6e2dce65a01721
-
Filesize
411KB
MD560f34a7c33052dd88e1af01133a607aa
SHA11338b3499a5350b679e3d2b944b11bd7282ccd63
SHA256de33ca1799c2ad5a1a05137060eae47a969a72bb3e042bc5512ffab37ceae169
SHA512612b3289f75063d05116192ce2d712e84af610caf00951cdb8029b42fa3f3dda57afc29daf8713e46bc19495c85a62454d2a4d345a71c36714705a5056c37759
-
Filesize
448KB
MD59b1d2f5e6f47bd607ac9524ce7cb34a5
SHA1d4a6cbee09553f3ce7c0015fd162f7be5010a6c9
SHA25668db734882830f1991392a368dda8917234a19567c9412776a07468a5609777a
SHA512b65a50d4e29dcbefeca8945d00551462726556a3db98cd33ce234e203f8cf13ccbc75cffbf27bf0aab6c3b55b02abf7a15e260edd01ed2cbf02cb0912e2cbef2
-
Filesize
448KB
MD599fb1982d0790cc55a8f4d380b799090
SHA1f8462bec4f7b0671c6f6509bb98a43cd5fd0d4d0
SHA25665d1b9e6cd09443336e868d6d33e2d15095f336da94a67c53d4013095badf369
SHA512732162919ca0867b93ce8e2bf0b0a9fa61b7278f85c55d3d1dfdeff7c83df914b9a18a690b87880323798e61ae726eafbf6a752be2b773a10d9239d824fa6aca
-
Filesize
411KB
MD52293bcb071608ba0945972b762cfa46d
SHA1f3376421738ce298822515c595ecc89ca2c71e99
SHA25682259eea31babfb30a723fbff3aab9ff895b8c94129fb8397a75190f009911d3
SHA512331f83b672bdf56f138df1e01053467f91b93f30bd820720ce2dc410443a4ba67efe378766e5dc0c93f26819f70df425c268b29f47194bb41fc89073f042feec
-
Filesize
411KB
MD5721adf38d0a256ee1cc5e57759ff461d
SHA1123de0c55ea45a60a42028d145601d8627e640db
SHA256740d9d656b5c845c382c88c014cd5d9e4295dbac80c14768e7205a7221ad4e62
SHA5121e0efcfcdc2152ce2a07b9f39cf84fd5a68400db7d8c04530ca42597aec38b239096e92a1920ec127ba3f08278eb88778c8da7286a0a344505b197d24266ddfd
-
Filesize
448KB
MD5b567d6749eb721e8b2b450b341ecfcf5
SHA1a31a7ed4cb1ac75bb209bd7d22f7438de0f50271
SHA256c1db86b1c74026d986855057c21891e65a235ce4788dbab8a3b0cdf2351b0d89
SHA512f8a4ba65ed66db7923433356f5f929f6e406a00c5c2a8e6c9eb4ea4d6b3ae1c2f0027c2bcfaffa8401c2e237f24d1bb63234db051dc96f98ba7e592b273e1416
-
Filesize
448KB
MD57912d1184031b5c4b3df97ea8362aaed
SHA1bd92ad4e5c5a06a27846da51e0d05bdd997d8ab9
SHA256cf1e063f580031b1a3b59dabdc38a07f7799cf63133802cca4aa99c6ff6fe2de
SHA5128c48f7171a6f52a0fce41868b5d682105adc9bda3bb561a0d47c9d62ff97a5148c61666ba4a557f36c9fc3f6ab365bb647a8c7745d55b3a6a0593d2eca455aa5
-
Filesize
448KB
MD5ca64a02ef3b1703fdd37252fe8c12ee8
SHA1ccfea068fbae28b8753211d5166304266b4036f9
SHA256e2f6823c03f7dd6d031cc615e0850124eaf649e07a99cd3a57e460c447521a0c
SHA5123393d2f77fbdc96a09d0b2ad93098b98ae9616b015bcff97ec67a42a0cd29dc9c2ef756389dff1f44286daa14d9553ead864d18dad1b1c1891e856f5768c2d4b
-
Filesize
411KB
MD522c6efe87ddbe80adecb17ed539d2b88
SHA168d43344da3b85a17045726a82653f37fb40d60d
SHA256f3237cfdc876ad9b5a1f8a8db205b409841e5a14adb8dacdaa34c2721e8db949
SHA512fccc9a1f4cc7b70be87a6b17e49292cbb71706869138d7dc98e8bc1cee26026da1b0505160a125bed4acf35c35c16644e1e5cb36b2596e8c244e163459b12c03
-
Filesize
411KB
MD5af6ea0bca7d8b68059171ba3ca00b072
SHA14500b8ed6b1f04be1d7597fbf98ecc4e4f98c498
SHA2561b40dd97604ec091bcccd0450013951be28c8c3c11886a112b3a83dd6db17cd7
SHA5124032767d529ebdb2bede7ec35f5d2142097f33af5cf7b2cf545aeb2b9c0dbcba6030f74d7254f431e6fe92056a75b51cfb98413235a52731df31e1cf706ea895
-
Filesize
128KB
MD5a5fe33e89bbfd428cd83a6a7154a6f94
SHA124d9269981a449d898b2a3320e8be3b30af35c30
SHA2561a1bf022899a233885cb98132fcc9b2347d0941d26504669bc5b0aec8743e814
SHA51263c2a4d07f124896deae8c3f2c59a4b38d92359f7a57ceaa2d2f97edc8e69da0374050480b6b8216d65b5aca8cfdc15348aec4ca7b71040080cf78044f534930
-
Filesize
411KB
MD5c4569912fee2544e62e6559f839f403a
SHA1ebb352873aca5e1e5d161448f8ae70bdbe5f9370
SHA2564ba7d93f22e6539af561fe3b44a9654c9a3bd81801a9c3c70153b2c4408fdc07
SHA51247054fd41155cce46ebfda93c692074dc4821cbee38e83ad3dcd58f24b1676666abcb953085111ecab6fea5661b75bdef076706ec3ac6e8e1754d7bf41334398
-
Filesize
411KB
MD5bcce2a10540199997451e450e078ef03
SHA1295d5fed1182b2e56527fa234f90fb7de391e043
SHA25613314ff51b9d7d3cd337c53ea9898eedd4b3dfc607e03d67cb7bf404131caa97
SHA51284d205bd4ed22c28adabbb25346037904d32601f7188f75bd4004fb8eb979179ded6e39e2eb2c689ba3af704119e65ee1e74eb70cda0c92c76703b5175444c03
-
Filesize
448KB
MD5883ed19b58f1e13a1b89ed85c209d2a7
SHA1e1fb5d689a049e86e841b982e618e497a7d1c222
SHA256be4e6b7b3dcc1260e3faef6f49899fbd541f247f524dfdbd5c2d75704e99b981
SHA51267b4574a73825741c174aa753245aa9e96f5c5e073c7c1f22e6c41d68b2c1b7e0e34e1dd95f5ddac9da0ae8bd2a37cc1490e397a2694192c95ef9d011d29b8c6
-
Filesize
411KB
MD50f70ef2dd012b15447e57885215c3866
SHA190be0812eb96060044d97ad59d38e93478da1822
SHA256797312fbd20840fce60a338c258f6142503344acc6a802537df093d15befeaaa
SHA5124a2fd4e4ceac769f454c8cf5f0395714ccbd96a9cd9e9ac68675cd0a2b6a3f3e57ac0ded1716651f9cbcd0fccf1ea1fe5287d2ba1f12087f14b4298ac5e0d8ca
-
Filesize
411KB
MD58611c4437fa76df004a41196fcff061e
SHA1e0eef6062a91eacdc5af357c995c7b4254d75cb2
SHA256adf6a8d81ac8b37d4c1b221e7e8174545a3dc56fe878d3b3a7e961883661bdde
SHA512b59d527c87ac1ab33e735f10dc52c14652c16d9c216b4015d890fc52697bff95a9931ba32ef8e458bf36a67c7e3cf95449250776132f20dcc781ee8bcd3840d5
-
Filesize
588KB
MD5b032085317c4886835a73be68f11cb20
SHA165e87f68ad7aa91bd6e5ed0c13fd11f02b9db5d2
SHA2561a368376e6f01af92bab1bb531e17f753fcb65bba1857130faffc34703938494
SHA5125769572e3fc2c95b043b04670a7a47a7a73b1d0d26ed60558e48f068bc7f9cad18b304ee692ed84e08f24fe0218cf4b57f9a72991cf167d0c9c8a55ded75fab1
-
Filesize
1.7MB
MD5029603414f1409407ebca7908acfcde1
SHA1e9a424c25941d45a294e6479ac76375043a4be76
SHA2568f63e2ad6d98932871c802fe10645f40b792a1b4d907b2206511f887afb51d8b
SHA512364682d838c996462643223f9475e1f997252305b3a92b6a955e88e4d03b2f306d3e8861c4abf74bf2f0de917003d731b21d335b99261a477b890d7d52b00911
-
Filesize
659KB
MD515ff17f15e1aaaa75e71764ea41d57e2
SHA1fd9cd72c72df7e18a6b98d4d24107fa306843b32
SHA256327983baaa5710861c2d66c1bab71055d464c429190162797896190c19bbea6e
SHA5120e386f771ec23ca6a96e5edc583a95087d70919a050a9f21231ffc2a2223896cd92f85912fcbdfc8d2b0d5887ffb1e0981b8d6f427ac0735e836b2185c0c38ad
-
Filesize
1.2MB
MD5d7b045fef29272761d5e328b5ce72650
SHA106af5ca944381d9d3704ab2323c704b33c760646
SHA256564378d3e50f39ffa2b3e303848f89879fa3d33e5b78c9c0c5f1ffc6ce062f1d
SHA5126983e7919562c4754a73bf90f56c622cbf95baa2a1ce6b09039b419a829657683c6383085edc99313c627898b2b764b6fe622e27af48c05f06cd1d72da1ba382
-
Filesize
578KB
MD51c4f7cdaea4a1b8c445b7193f8831663
SHA131f2e76ecabd19e2c91a868357c79a4bb4f95648
SHA25660f5be560d492b6ab7d367cbe23c70f03bd5c5ad6f9fa04ceaf4db15c2b396e7
SHA512bbe1512a168d7f8cae2a2b7adbdb0f43c3c25f2bc33214857af391d5083232a08cabdd812cb092b9f16223c9f00e20f89dc0acc4fed2aa39ab606c528cd7163e
-
Filesize
940KB
MD5000b1537f66a4396c37164433e4742e7
SHA1c91204edbc31670f35318a0c2c937973bf19add3
SHA256c2844365f74f005dc9445f18121420bd7c94475cd9649ba87ce8b9f9192a4bdb
SHA512473575718fbfb4f1c8040de6f2233a3f921c6c59de7527dcb1c0a16665888fd2948ba3e357a58fa195e5eb314538b80f4e0a6c16f497f842f9a3391cf0c4ff9b
-
Filesize
671KB
MD52a4bc14dee36cdffb6352f04d3ffbded
SHA1ea44c10a644055d0ed4431bb17ec1a36e0acc039
SHA256dfddc4d4137475aaa727fd99f35fe86c1b9ec0b60895b885a29fd2921d1b98fd
SHA512502c2a96747069effb9f448c2e84cf40f71b8411ab6cf40a0c0474682b87680224763b8de6ae2f71de84d47cc6028bc79215748dae2ac0c1b7ed82a91151bbb5
-
Filesize
1.4MB
MD5f1adc9e88b1fc3504024f455acfc8c2a
SHA17aa606826a47698e45ff672e955dc01a167e5700
SHA25679dd12927f6d3aee392b9bc3a7f78fa53a088f59a547b9f2f9841202b2b9328d
SHA51284349485f74247f3651048b9dd25854164d9fbc5d4f0cb0c5deb7aba627033f9c8710e86b4ef3d748d4f151f5abf6fac4d8c7a72f9ea7cd4fc2dd88ede38c1e1
-
Filesize
1.8MB
MD56389622986d0ee977d91bf7eeb1f23c8
SHA16f0b0214a0ec39a9b1643e1242eb8f92cc3617af
SHA25639050a1ad6d7ad2a13b456e1343d114e76e6045cfe24a3651ae54170d6252540
SHA51207ce611faa5f56b1a75c1696c089736f6d9e759a8b5999709ad3ff1a08384b90b94f6081a83753ecba24800120f6a011b889ee1cb8e2346f94321e400b6bb681
-
Filesize
411KB
MD5f4f8743302fd078203ee143d0e221255
SHA12c9ecff0079ec708f3591fe31c02ac8bb0897b84
SHA2561413dbc39d6e2c13f37011c892b74a52429ac8de0a46fc442b4a0cfeae90347c
SHA5124c6aba2b35fe2e6c3f6542b00c63b184db5d388ae0047bd7093ad95104e292ddce16f822266db9f19d47319ebbcfd9e36bd56adca5f5b19a3c421d47100fa0ab
-
Filesize
1.4MB
MD561f94fe1ac0eccc242e70e22b282d540
SHA1a83a669413cd3cecfcb85807aa4114f0c82d2548
SHA2561506f0caf33216610eabed0aef1aa5332df86b66f286d007a79ebc624749e00b
SHA5126d60244e52fd6fa8b5a4221272d2e8821768ddf7d0ac7ae681989eb521315cc28a664615fa4608198e1e1c45c7fdb69fc1cefe66616c1f128ff032650b768a4d
-
Filesize
885KB
MD5b58d94584d35a68a1ec5a43062e18d30
SHA14dafb469629896c399863e9a7033fd41bb4c35e8
SHA2569e92b65a26a2404d765a966656ac4a2a31800487846ba3edc80978053bac573d
SHA512459146f404c59d7d9b4d296170d5c4d6c8348cc5e5e6942dfd94bbcf877b182f2c370d3a39c979475df0e5f019d3cdb685bb54629776945d8c2bbc7eaa58de67
-
Filesize
2.0MB
MD58db19ebd0ae34fee4af97fbcbb9e6d12
SHA17867d9f20e27f5835ec91d6eb0ec54334800855a
SHA25630f1cbde34d0598a7ff65278a67ccc0186bc76fe26eb8439c546a904b44ab8c0
SHA5127c3e833ea2dd67838d60a184a52b214bd928e7452e212c4611e33f7c0902eea03d69368b69690d570b510ef7a29b97aeb2778182879e32fc4d28ee84b7237ece
-
Filesize
661KB
MD5c5546382f8b914edec98648069fd46b3
SHA1d9522ce3841965dcaefa0e0485b496ed08a14764
SHA256cd77dfe90106f53ee82a15bdc033c5a6020ae358a0ca05160ccc436b2022c87f
SHA5128d72ea41a06ca83cf3c2b024a71c13e644c3d5808659d4428a0c03558b8572531ad20125ff3d126c71c73179fe9f8aeef25c342b776d6fcab65564ac6681deea
-
Filesize
712KB
MD5c8a5b2b0b2fa5abd443e021df8678c52
SHA1be93677ec0d956cea076d364a8ecd8f0d8ad6091
SHA256a2a42cc580aa151a52aea03ad4a0432a3a62c2070a7c9d6f28080a55fc172a63
SHA5128d7bb5a75f208be58bf99cfc0760d54ada4f37207894d92602b7f09a96377bd52f9df6e3c0d0a9e2035ff184918c99bfa41fbd18ba210f4e74ed8078c7a1425c
-
Filesize
584KB
MD557f0a96995dc140ad87fbebb372ae958
SHA15405086bac45f227d600c60e405004010241147c
SHA256afdce0ec2766527240ee4221cd707dcf1a761eb6805f8367e523722b1a0d9684
SHA512c5cff5008ee876092b763fa72d1de9d4278d0c803d9697d40e7040d69e665e8500742899268f39ca6d5b02499dbd02373e8c85a583639b6c61b858bece914f86
-
Filesize
1.3MB
MD52c7d8065a52d1752870a775299e9fa13
SHA1b1acc8ed01cc58a8f1ff93308a1faad4f8a91326
SHA256e6768c60355703f13ca1736d10597148e65256f87a4b9697d153ba4c92fe7160
SHA5129b4e7b19d871cc0ac6f4e4812bd674fc9d79fda299f7133623c6ae1bcc618bf15b3cd391771cfa96b756a8358e522b832b63f528174cc868a15fc2ce10a1bd55
-
Filesize
772KB
MD5c77bb7519c88dd150c6a44e5532fff73
SHA1d9c49b3353f62537da32961c57ead13744e0ebdd
SHA256c5e8a0e41424e9f94ca95eb3b709e66e866676042616aeac3f75d4789e0cb448
SHA512e67dc03b7670dd6f8839ce641995507af4f144cd025fc911b5e9d2ddc296a0eb218b595055e8bd71b6208f68426b0d8551e473d4461114303f09471a0266e879
-
Filesize
2.1MB
MD59e203df487f9433fa1e6d34300d4e213
SHA1195a38318bfe9e49b7c9202b02f38f75b9f62a17
SHA2564f447ad672e533bb7cc61bcbcabb33ee2efaaa10054441821f12b9a023021954
SHA512d0924e1b8fd2ee620d4f360b8ecc794b60639461ed692fa7036caaad8b670d8bca1d9f9ca71dd1d638c4c3711de67f5b76ae686c97f6d5c6471a589c0e0aa3b4
-
Filesize
448KB
MD50c80fd709d86e74e123d0526094b685d
SHA1b1ea5ae7eceee6c1f233bb8f997dce367502b76e
SHA256b05ae13773ea2840070a1dbd6431edebc866b9896839c40edaabd787da1db117
SHA512a5b96c572d95cec929074f59ecc31620ea516589bbd6cf781420a684d37b686e872b551dea53965108dd116ac6d9edd6efe3a59b4b5a1d1bfee35f4f030b4c55
-
Filesize
448KB
MD59f4fc7840017178c0e7a87ab3b30d2b2
SHA11453b6fca1da2e74da250c56858040aee4346e35
SHA2564dee83ca9b72dd59ff3b8981e53110f11d02fd7ab7c989e6585375e58ff6c5d4
SHA512881c08c61115535d7347218cbdc140a994942d9775e8b4baa390e3084a077a935b5d43ad6fcbfdbe3c2906dfd500a482089f9333d0b0b1308e26ce06f59b0d30
-
Filesize
411KB
MD5ceaf21d0c59793ea037928fb24df6f35
SHA1726c119372bf88d7f1b5d87eed4ab0ce6383fe40
SHA256e31c72562ebd6946a74bda6763c591d008375268bf2241814933538f34e9e7ee
SHA5120bbc79037c11d00ff8332102314a5d407878b77e0be51d16ea31fb57129eab8375c6f19cb198eb69e8ba3a478dbe9f16cd54c5e77a85c811331f704e83731fc9
-
Filesize
448KB
MD5a59e7915df07ae8b0e6c940fd6f67f86
SHA1f0635e8154d47cb781659f0d3261a4e91d99e6bc
SHA2569abdb298e4c82057336d884f9d1b07d01eddd17b14de86d5ec74d964295b3f18
SHA5124d97945650dc1007dea8364f940ff824d040781a970c3c2e8047c08ea9665128931ade82067a790e972fbb453aef5232d922cb1fcf1501d3f57193f51be36537
-
Filesize
128KB
MD570fec1ab3a72b33ba0f59c4894d5f371
SHA16ea006d2ccef843784c3dd340b8a089c81adb6cc
SHA2569d9293e23cb6e0e3c46727486f93ba43ff3d02c81e1736cd1d9f9fce69ae42da
SHA51278a55b86fafa826a4bf18f07c844ead681efc131b0225a7838c36ce90c4342f72186000caa0377bba04e6caa0ebc3997a033d9b5ca3ba3df35cc0b6b2d031e80