Analysis
-
max time kernel
1s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
30/06/2024, 19:56
Static task
static1
Behavioral task
behavioral1
Sample
141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe
-
Size
625KB
-
MD5
045f94d112b41eba47104f28ab869c70
-
SHA1
d464b19684ff6d14a5e22e12cabeb953e4615559
-
SHA256
141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33
-
SHA512
365b97dccb9775d25b14bfe5fdf4593e969791bee3502a67029b7509c5b54ac06d25835b34e54c4b5ada1cfec016cf352b1e47aaff6dd9dee03fcb0a132ea790
-
SSDEEP
12288:72LFCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHMki:qL8NDFKYmKOF0zr31JwAlcR3QC0OXxcm
Malware Config
Signatures
-
Executes dropped EXE 9 IoCs
pid Process 3508 alg.exe 2288 DiagnosticsHub.StandardCollector.Service.exe 3348 fxssvc.exe 4600 elevation_service.exe 1648 elevation_service.exe 4764 maintenanceservice.exe 4492 msdtc.exe 2504 OSE.EXE 512 PerceptionSimulationService.exe -
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\c03f6c7293b476c.bin alg.exe File opened for modification C:\Windows\system32\dllhost.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe File opened for modification C:\Windows\system32\fxssvc.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe File opened for modification C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe File opened for modification C:\Windows\system32\AppVClient.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe File opened for modification C:\Windows\System32\msdtc.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe File opened for modification C:\Windows\system32\msiexec.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe -
Drops file in Program Files directory 5 IoCs
description ioc Process File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe File created C:\Program Files (x86)\Mozilla Maintenance Service\logs\maintenanceservice.log maintenanceservice.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe -
Drops file in Windows directory 1 IoCs
description ioc Process File opened for modification C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe -
Modifies data under HKEY_USERS 5 IoCs
description ioc Process Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E\@fxsresm.dll,-1132 = "Store in a folder" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E\@fxsresm.dll,-1133 = "Print" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E\@fxsresm.dll,-1130 = "Microsoft Modem Device Provider" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E\@fxsresm.dll,-1134 = "Microsoft Routing Extension" fxssvc.exe Set value (str) \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a\52C64B7E\@fxsresm.dll,-1131 = "Route through e-mail" fxssvc.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 660 Process not Found 660 Process not Found -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 3568 141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe Token: SeAuditPrivilege 3348 fxssvc.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\141c6a12f1378e11d7f8459048433e21a0ceb630d547ee29f3d5b039f5da8a33_NeikiAnalytics.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
PID:3568
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
PID:3508
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
PID:2288
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵PID:180
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
PID:3348
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4600
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:1648
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:4764
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
PID:4492
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:2504
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
PID:512
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵PID:2772
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵PID:1440
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵PID:3680
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵PID:4960
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵PID:3404
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵PID:4236
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵PID:1584
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵PID:4032
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵PID:1656
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵PID:3424
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵PID:2416
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵PID:4756
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵PID:2596
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵PID:2220
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵PID:1788
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵PID:1096
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD59b91660b08c03cb6e733de47ac3bcf57
SHA148bb78ddee10a42e08a441ec255be06900610b85
SHA256f628bab5398e2b8a2877b34a08d224a6b7d9b95089697329f0f641729c1b6212
SHA512b978f088cfbab6df820fb4ccef5f7cb37f03854bb267c9ee46e900b10840acef4f841c3d71be7e75b302f42939000b3fc91aaf48f9fc91bcea3b8313e3f8526d
-
Filesize
797KB
MD5b139aa6faab471eb35d0c0f33a7c0c8c
SHA176756e9511e4372858b1f3a31045183d0f7f7730
SHA25601d92d2f76708ed6bb6654fe67cce1a46dab60e8d34b83ee1c3b6edc60bcaa09
SHA512d800fa3651c9bcd4558cb72b9cef96da912fa3d02ab81e85a8a465cd85e49018766f58d629cb410961b18bbe373db538f50579ee3952210fafed291fc079e69e
-
Filesize
1.1MB
MD5a62f4016bd32e88f86b8c682563f3ba9
SHA103cac21cc5c029dfa5e3113fce9006f2dc32f514
SHA256ec101084ba515c954d01ae0d3fcb8dd9706b303545cfbf5a00dcbe988bcd5c5a
SHA51296067911bd07633305e1546ffacd616df765cfadd0a7cd2d754cc28f3c19f0bf7fbce469648a4417aeb00dbe8bede908fd80988999edbdbb85f2ba8dab2b8f64
-
Filesize
1.5MB
MD5b5636291d5f970c80eb36fb9a5df36aa
SHA1ab6cf59948f03f2d3dede2adc730cd4835297d88
SHA256ed662b2849b6608948985a065fc8167b60fd62bcf54fa725ffc9ba0667380583
SHA512d103020a2b70b7e601c3e0184e8991bdce04bcb0d0888e98e4f85318e7c6acb5d83d6d7051fb76e09c77a281227c4f89dc3fe6beb2c255bf98e8e292fc10a9cf
-
Filesize
1.2MB
MD5f3b6e42d7ecdcfa2e8b6488a716f6fdd
SHA12170094b2ffef8b3292a9fe15314de82e9c637ae
SHA256dfc9e7ed20c7d21101513fcf9e896048a67b7b37a2614a6ac0b83ced2228cfcb
SHA512ad02312d01c6170c56a3c31ac07daa11c1bd83b381b338d0017aeb8c2bd9086aab1fe192c150234d7fc1430cad0e09e65c0d0bbb24fe4757b48f98e029170651
-
Filesize
582KB
MD5e3fa735d5db79627868dcca1a9a90367
SHA16c820a05c8abaaead8c3b705449b9850dc00bfeb
SHA2562fa5f711169aa07ceaaddf87dd9564c772391b7f8f1d95adfff7fcfa9286f7d6
SHA51277155b451aaca26f1d435c03878de290cb67ab04d1b515795cc8b551fb32be97164b365c0ad060bdc39ddc3bf5416752e0bcee16dd0c13fc1f187e5fb0167947
-
Filesize
840KB
MD547b85094482261eff1b18d043143a88d
SHA11a1831bd41b1508560f5d32039e7f0f471f11d3a
SHA256a19beae5f24f6763583dd92f07797853472f282a1c2bb666788286e83609e79b
SHA51223d03484b8c143e37a0b9a34c7264a3b148b500d2a5cc71c071835150a4b020ea2327ce19fe449bc000185b292653f7d8080a7354b018ade6502b3441fe17e3b
-
Filesize
4.6MB
MD5ad9158323b484018bc2ed0ab06c693b5
SHA153b74e58fb6984b46c040126e2cd12518aef621f
SHA2560b07b2979d6f6af438710bfe7fb9d672ef9d1d0ca0aeb4827be58edba088e07b
SHA5120ef70fa98ec12e74b04703f8b4c1fee4d7f432ac8944314fba87a18dec3fdeef39f0559edf30f8ca95292a2bb535c2efb2920b564197d9883c69fb545486afa3
-
Filesize
910KB
MD508c6c6068e2603926aa189a23a9b521c
SHA11e61a7e0625a0578c7eccf131d9db8d1084fed34
SHA256ced510bf54cfd243a82d7019334692270c107fb39fb097e2a4167393ae303d21
SHA5123a624a8e2966c1c492d106594aeb54a9b1331feba34c3e4167d5c46fbdcb1df7522b47b4dc7d43b81751bb9959175e4aa5761ce362f3e00a4861d9e028d1ca3a
-
Filesize
5.1MB
MD5df0cac62fb834320e1b088c44544d8e6
SHA1672af9519db144bcd45165c27cb7b7f8c9d4dab4
SHA256fe0332d72d23ca5c46dbbc7af4beac96f42e2dfdd793089af629540bf8f369a6
SHA512cda0cca85e664597d6142d1eab3df44b17b4778a46edcc4861c566d367099258aeba45f6f6fe0636d5d114e842d12e8c9b3f5c3fff5bc24c5aa52b1857ba66ae
-
Filesize
2.7MB
MD593977aa4f5313bc34540d4cef87552a2
SHA162109882a672002032a48d01bad68eda41de6216
SHA2568bd942634a5689da551a5b5f2ef0343631bb5425597c4594d88b021a40b1fd11
SHA5123ed482ef9eaa901626842fd6660fc2283e6d79af5edf2989027a0f23985199581e26970532b6da851bc82c72d0fc9c248c6f853a53aa6523aa2f772aa78a8b3b
-
Filesize
1.1MB
MD561c461a6d16c85d4e1ce317a76064c18
SHA12da36515e15756b82e860733bbcb220706e69c89
SHA2566212eacb00a6ec6a830fdd0db645523af217215d7698fde590a3f93673e81d02
SHA512f2f47f4831826f8ce30aac926060fe1d1463ad0555f1b2524a6c110c399fa88e984a3503e6d317f1ce5648411b11d466622c490edd2017fc51728300666d7e17
-
Filesize
805KB
MD5b7b6888f0ee980a1ea8155aaa82bf30a
SHA1bdd5db3bde8823f48e2ff7c312cfd01821d53582
SHA256a8486574d8304ea3a99cea68584fa73256eca0d10b0b05f4bf342c5e8e2eb9f8
SHA5127dd0243b9dcab87fdbb24b0abafc8e6b8983f0e7ff8e157c1386babde81b80642f6b775c1a0de90f51ebac189f94329f55b33e53b32ef8e07cb16328599a0efe
-
Filesize
656KB
MD585cf64580849adfb27614f1dc830d818
SHA10d60798aeaa03c46201c83b73b4189cc6aa33c42
SHA256244300ce8deaf2993b704acfee8b3fb7636b297c2fcc9d78f3620231bcffad64
SHA512cc97a160f72168bc759f0c21d5687f0e66eb96e86dcce6d8c4a133e1456b7614ce2fd3f01b1fc941583114460d66ba4c0b852acee0f4a42f5d900d635061471d
-
Filesize
5.4MB
MD5391977b3750852c60e55108b458edc04
SHA1406223d4ad54699a9a162ec37f1abf29af62737d
SHA256cbe0ac4e25751982bb96ce1df80045f43ab891a71cfee7a7acac8f8e54504c36
SHA512e4c0729299ca53f82cbed60649c17a21928cd70d388f2047f01e6f42bf29c39b1f1688ea396e52fc0522ef5638d4fb7f829a8948e0416097b93d91e64cb187c5
-
Filesize
5.4MB
MD58a73e59c9d57400bab67dbad5f7cf40a
SHA12ed43f5ae52fba092ed5765631189df25f37919b
SHA256038da95dc9aa2cbd35778367b1cb5a385e9a884a44f6d4b189e281d11ea40b26
SHA512a42778a9b60e08b351149f27b87fbd088b309b04f3c04bc6693942abcef38efd25f65282b9a2b6a256d8b63b1069222992f7e76cfc7cb558fce8005c70da0f03
-
Filesize
2.0MB
MD5bee92df47030a34ff9b407448c9d0414
SHA1b9690825b691c61c74a60b256064b210682d4ae3
SHA2563f8a0ba74ce7b0d7dc67bda461b0ee737a3595dc85afe7795a995780e9940907
SHA512324f400cb6c6522247a8f930ec0566c14caa739ff16b3dc376c9e9c5fffcca20d74b0f4dd37173f607ebe8f4c2fe898a7a8db13a83e6baf1b1f4f8c3cbaff83d
-
Filesize
2.2MB
MD590268245ac0197045627f3232c41e1ac
SHA125de773806f1289fc5fcf14478637fbe2408ae08
SHA2563086674a6babfb9a13d6f31e4e827370dde7721921c71bf754f6500a00ab1a11
SHA512f46adfe7b932e649cf7cbbf79d24d094cf1c2cad81510326e7af8acfc3c85d9db031374c011ab1f73ec46c4843f7cb1f084ab8788a6049314edb1da69d593b38
-
Filesize
1.8MB
MD5fd6c4f53dfb1a00e355b4757440de62c
SHA1741e1803f02ad0318a84b4736f7f8a4995706b46
SHA256e06e59a68d23d3c431e34b209b80f47d180a394c19072af1e33499d3a1635242
SHA5125ccc90483230f33ccc829a5994371f0df762738f3efce3baec30230212139a52fcead3b4fc6460b2cd57a4e8362ca473b7d338d11743334e5287b4604b9df53b
-
Filesize
1.7MB
MD55671707883db5d47d47132a8667cdb93
SHA1fde2a597200ea7d1fabadf4338e857612dd33e8f
SHA2569b114b20485bf55bb3661160086265f586f812a8d872a31a44f5bbe65cb91268
SHA5120c950c0ac373efda30cebb411f242c61ebca560816d699119a8421691fc9d9afdf208f117e5cb32b2c664590fb000c5b02c50766a422184dc28e4703f2cf7461
-
Filesize
581KB
MD55aeac030c7092bc947af14972d63780f
SHA184bde431af06a093225dc6f8770095dc29ba2085
SHA256b26501ae311584262704b3014f93c38d71c3e6ed4b686ffdfc395df96733e440
SHA51298b2af3910c30580b8784d7ce46c222862ed7e56fdf98ac3e3759519e4acdf39e754b1b7911b9bd7ffa6f38ed208f276714f22f215a13ca9f4c63067da948e32
-
Filesize
581KB
MD5a74588f667214ec85425ab0c50cdb753
SHA1e1e35d51c8770ef03d1c19fb8a9584066ab6fa97
SHA256da5ec16ed7d582d3809988289a6a09b67918b2b45518a8726d0d07804ccaa47b
SHA512fc88971ff36f3adf70b31724743c2aeac4ed53c76df838cf3e9badbccf252bb764edd84fee8c46a90fa3303d1fdf263b3d0126b006dd1153d4b987c28dfba666
-
Filesize
581KB
MD5c17024179341861da72e2391f2cb59c1
SHA1d2526f43de54f43c4996bfba46e98810fb69dbc8
SHA2566b8b1cb9ac2bfd248776b888c3ad3db720103b369b4b7684eef4ffd0e7117434
SHA512fa5a78bf0b9c6392f72d9d0146051ba2094251dc2a63f0572a7cd008ba0d46cf0b58ce58ade1714bf2a409e7359fb4a56e1b6bb3d68dac77babf9641ee571f67
-
Filesize
601KB
MD5535c483090d0d54385e6b2e28c8e2a3d
SHA1042aa34db443f9b11bada4fc36f648a7967ad495
SHA256747fa876b0eb0c565252ec5b4bcbb5fd0096fec3102d1f03b8de6d2c148a8a74
SHA512cdb7a6721ecf420e2c9dae188524de7b6a084911c45e4a3a17a973c6d07229b501754e56bc73f9d7007b2187b69e382e8a8ccbcdcce990c6e62901b16994f5af
-
Filesize
581KB
MD5a3c9a53c3d81a0cc8aca47b5311df9be
SHA1c9b84d32a71d2b5be783efad0fe56d1d218ac3b1
SHA2560384a2f5dfb194a02895f79a0641abe9a027f2ff9f426df46dfce3f4f9626ecf
SHA512a042cb516fadafe26750484a823b486a5973e987f3b65d2185f5afe2412b8a3a6e1742587c3b750afdbd03298328806ba1e1e2e2ddfc0422862e1de32e00f629
-
Filesize
581KB
MD52e4c1d3b8cd65a43356e08f813773903
SHA15e4349db567ee25408b82d143d3ec24bd6160020
SHA256494a82a9b0e0239b5b818ff738f5a081384e96b78e5072cf6add707472c57cff
SHA51295193f3f67ec8ded42dd221cf25740e8f0cb50615353cf6eab7a401c0a60682ed5b12781c6916491aa57f9be9f0f0ac9bb5449efd083550d5b49d209380f544c
-
Filesize
581KB
MD5a110cd5039a64181003931cec8031cea
SHA1e41a09b9f011605bde1d406234e359e8a4bd74a7
SHA256d85c017d1ad39eca684c231bfc8236a52f056af792f6b6bc34e01764a76ab947
SHA512b3f875088691b962f9c49fe4a31d9a978d296e7fe7b821c4daeb605cb4d0de992ea66480c1b58e5101719d638349103e3814381d072e140d33e1b5ca4363a389
-
Filesize
841KB
MD5c03e3a1fed3f14ec423c1a894b80f829
SHA181f825fff6cce2fd931b8172f94e72c445e01da1
SHA256d6983617c49f8fc89f9a107b6d906ce2e532801ff8de3dbebac1874a63b0f18b
SHA512f0411086ac0cc0f5bbf93fdc4d3bf1e4912d2b036b2053da09510dbca9fea45b73e86247eeee2e645a5fd0fcb276468aeb3351f6ed86e4879c363c5015daaa3f
-
Filesize
581KB
MD52b4b533f28ba89a129858db9d116a3cd
SHA128079c737ee697dd5311e601a0035fb0eb9b7cc3
SHA2562290c484e7741be41812998cc1796491d7c3beafc0853d4ae732b0aa39383120
SHA5128690c5746acadf410910df39d5526f906dfed7aa02f966f8b56042cba3b892fbc90a7fad8691a088054ee6d381ea075a380bd7669a2be6160066d93b4e57fd49
-
Filesize
581KB
MD5665294001bab22c4b7676356b2931e1b
SHA17b9bfa1b960cb9653ddf09f1614091d15eef8b16
SHA2569ca63b66150b8c61409424b7959049970622da514d05f7d59f183ac7c628b579
SHA512e06e3b6221efe0884fb82119e0e73f997a604ed17666c8f60c8b6421bd536b2f14f7397a4de9680993a60e8b08018942ecec3ae038ba1400fce4190000c534aa
-
Filesize
717KB
MD5ecd558b90398af09480389cc22918cb4
SHA10750a03434300804bb8d4de3e29b3eb125e4c910
SHA25666c8b3dd1aa474c089fc17ee1567ecf964b3e22b7df8f57a3e078e6f28157176
SHA512b8eb3b0fa1d8d8175366e31861dbc62ac0a9af0bc03289d1e5bdde4987c81cfece50c56ea61a5e7d69e74c509c180f04887c0408d677c7a4e4b43716b09fa8c7
-
Filesize
581KB
MD55e545af0628bb6ee10c71981900f8c5c
SHA10057c1c01bcd1f4c6e7a39752f68a44b007889e2
SHA256377dee0ef2817563f33bade2dff1ea3ea09426678d9d24b969112a0c8ad0d753
SHA5123bbe8147a1fbc26ae91a88ae7beb8f393dc4b3cb9274e306afb370e25df9004e77a66627b8bb41335c7f4d25eeed5caf89352cbc33b0fe97fd050366b9d7220a
-
Filesize
581KB
MD53e7673dc72e32e0d0c75dae0cea47a87
SHA11f83a86d89b271ef44d72cb123cbaa4e38ffbffb
SHA25648945b8f16ed0d43327efd335c67d3a11b8c7323f23fa6d9be90d9361dec39e3
SHA512370288447146b292ee08d2af308da2649735ae87f6f2af70cdcccc760037dcd3536083bf313e140309f0b8abe2673bce4dd30bac96f4d6dfd8b6596fdc11c731
-
Filesize
717KB
MD5d547b07b7645e696d86550b2d8005346
SHA1df5d3c3115bda33b41e29945d76c0f487affc9e6
SHA2564819e592fbe2bd98899718f1e5c20e3d22e688c671a621d85e95f0ec4fdff0d4
SHA512b2ea411e1d317ab263a46b09206e21f648a60613fb341ae6154bc308713a4ad87ac3c9d20f078af332cb989b9d5f352b782a6b580eeb64314c12afabfd8d2b3c
-
Filesize
841KB
MD564a66210dfede4644b00d7655dfb9a62
SHA1f543a7639e991e05d84fb93101ede2e8f13ccf6d
SHA256f6835fc0c3af3cf044ae7a091b69583e132481fa611ebab5af83dd743b5d1d5a
SHA512e0e4b809bb05d7a3f540138e23ac1d8fe8f2a4100abd0b0197e3ec58afca59bee69be460f3893dd1c2874ef82f26dcea1e1107facced6d25e7051fc8003aa4e8
-
Filesize
1020KB
MD50b17033ae08694a4882d418ab87c9139
SHA1b7b68a7ab4a358268a19b61014813fcd4fd890a5
SHA256a0ba87ed0f04983dbd23613a83bcaa7bd5f6f4a4ca60bc8bff955871ae8bef63
SHA5122b78f6ef090762c74a7f4c24908094d03b1440af09c2369b8d7de2e686126b5439e0c0a127fef01d5c3ab3011a80031f1e046913d2a9e29643a98a45e8e3d0fd
-
Filesize
581KB
MD5740c23ff3365877f1d6246edf9c82def
SHA122ebcaf3e637c85b3416567b101247218a68963d
SHA25669a0d642bf05e3eeda9d970b3d68f85fe1f9935caa1dc6f4cd5e6a58f69574fe
SHA512a4f2664339cf76c86f0c9d16c97efe93efc817dfa58a1b2451f3784576fafa2b18744f96943e0589bf5734c6cd64a8bbbc9eb23104472d45458833a2e361d072
-
Filesize
1.5MB
MD5d81bd2983e045c1dfb558f4be26443a5
SHA1dd2b02ea1f3a43d47504f39bcf95c2d5607d241f
SHA256feae6e412f9196d59ebb62e90e8594eb9b50b7a41de57fd12608945ae1d8a2d2
SHA5126f16aefe07f865af4c6dcba8747fed9483fcab5498dbcedbbc576eb2145103d855237264c580265d0f8cdd9bb8928ef7cc8085417fcd10d91c8fc8f80ae6d5de
-
Filesize
701KB
MD5b003452738851d36605dec2d2b6f13af
SHA196cac50d6fe96ebaa80326db742cef7393965d9c
SHA2564a169e6507f03bedaa2a7d78d7406c64dee0d1872694530a0fd86dce4f87ffc7
SHA5120422b0172f454342fb097b360f542c0188fbcda36007e15d9bbe161594a7c1e4b5a2e74a336cbdfdb2eb619e27740933c2f665c814a0e1816f3da0962532c6b5
-
Filesize
588KB
MD57583ecca7cf0781a38cf1c750aa4e9a9
SHA1d966d07fba15d4be45f235ec94d93935cfa0d7f8
SHA2560a6e3e1c0ddbfcb421e56d17f3790864c093c65dd182c05e22a44f0e0d7d627a
SHA512d3a89df90cd5f492f9c81e9085f198a18cf301d41f0999ae37782100e0901a2e1a39bbb33dee9dfe1e8a3c24f7a73b72338759e514ee77dda7a5fe416b6056fb
-
Filesize
1.7MB
MD557efd28afa254d07a357a72702f42cca
SHA107cf5e831f353d5890c26e86d85f3a7026ee1e73
SHA256fe88c299f0ff4f4d8118937cefe5c7e2aa864068a3aacb03f4cc6050b9bf1691
SHA512e76daa4220fa03e0e0dd1ee78e76b551c8c1492898e96c44f1d294e32ceed0c8aa9fbd88a6b26aeb79f66a7097bcc605dd56108c2acce7977e9e958e521072b3
-
Filesize
659KB
MD53900ffbb754e02ee6fcecdca11dbbb7a
SHA123ee9ed9d2b1c8409e3002efc5cb3e1a92ac9633
SHA25648bd09b1a3eace3739c30624765a9cfe7aa97c7ed842f93a4e05f759cf90c36c
SHA512178e97b32dfe90cd8fb7717ea427bbbf43a557d18bde0e6992350960ef6db8ad89ade49dc06e8f3b740e30b5bab5b81cf9a64ae94c9098c6628aec44b6a71b74
-
Filesize
1.2MB
MD53293300aa9e9641896a3b7245b451045
SHA16a5d08358e94bfccbb9d6ddad603e9d305268445
SHA256ceb5536cd1fa1628a7ad1a1599aab88aa1e86296a6e5bd0fca9ef87f465f10b1
SHA5125b59a3bdca89928fd53c34d7ece31561ff8572f6d56b8037446ac001ebe6d2ff115ace31556f71e13b6ff2d99fd39a29f6e53bcebe1d711ab7915222a9f87909
-
Filesize
578KB
MD51ade16c6887c6d2f646253dc79f98934
SHA1353d5b712327e44f9eb05f259b263cbab380abc4
SHA256e60ec3ed775a1b50d215e17ad1b0f2b1e583a4a698fb84cd893d10e59934705e
SHA51280f7cc1bf87e5f2ade9077a67ae2a5c4aed4cec92ccf7d6aaed9fe0038e774b775d24ada0ec81a1b465c4bd6fdbc499d7f9c5b0a36632fcbe3a1a5c62b0d382e
-
Filesize
940KB
MD5cbc2cd6a0f48fa9f9526d60f8480cdca
SHA150234d320638ce2dde968b47951c5e0031ef2c0c
SHA25690ce546474755ce49c227604d6ddb6177555cf2419fc4189788b22257f6929bb
SHA51277e840b31b7aa5e32a7af8191935259784eaabab3d215f49371d284c818cb69685dc7b07558079686b5783520e7984f7535bc21215e39ed9d8c98072c60766be
-
Filesize
671KB
MD5a938c7b60da7447a750f4fea858b10a7
SHA140901d7373fa3c22233801acd78eae625749e9ad
SHA256af4be026983678df01292c271a564aa2aed890772fe237c8eb4841caf820313f
SHA5125c959ab570a7182103c4102782eab41ea05030b744583c93de859b42cf9a29731c08b3a7fcb5be091e3883b3faea09440ff21624b94614007488fb77b26b76f4
-
Filesize
1.4MB
MD5693d04769446d5be98d07e68b0593242
SHA1b6e546a746f0748ca767063c39bf98dd84a97b3a
SHA2561b1aa5259f3f711da6ab772f5b11d8951bd8e56d6240e4a18992d75404dbd2e0
SHA512615227bcc367f1d7916610d9a6a0f19655a143b9d6a7138d428bb59637f6f2ca7da51b0447453f10927652933bd2d3f181e41ab2a7aee237f0caa0b4e93bf7bc
-
Filesize
1.8MB
MD5957fded58903273d9271384d31b2d3cd
SHA1e94604415caec792db4e95d076d8d8e763ba3047
SHA2560c57ae25e6ff6bdd8ed85df3335516ea7e0ae3046a3d3ff74b704ca71bf60d28
SHA51263d85c7b76e715bcfa450dac00016e791139f5f2f17e1b00a7367694deb3c35d49ee2921f1733a054a07f2a0699e192a36877a88f580dd23062c8a8bee3090f9
-
Filesize
1.4MB
MD58d16350bd783ba61acb601bb9316bace
SHA11f0b6f6ba5099ed14bdfbc8b5285e312ce73ea2c
SHA2565d8ef60c2ff3cda9e0ccb98343258c183d3f8a436fdd4f95a565d6a8f9dddaa3
SHA512acd3bf2742fff742e27e2715e9fcbe7cde71a71cd00b314dfc96a5a486bcc2a1cc2eadddb298fabfde325f1c52723d5d7457790d21c78441da7ca213cc24c739
-
Filesize
885KB
MD5d43608a1cabdb9950142875f30d19bce
SHA1b524b15271f5cee8118f19b8f8e5ec652468da85
SHA25610879646da19ece16380e537c223a5d82f331538efc5d74074a5bb8c9edb2e4b
SHA512304b54664893180bf5f7fb528bc44d6385281fae11b2cb228c6d5f4db70a2b93be91456bfdf7c7f396351a9d01f3c5bcf47d56a4a8396c8c87d9eead626fcc8b
-
Filesize
2.0MB
MD56659a8607f89cdaff41c49ed53012d60
SHA1624e63de95c4810818b3027b25e575040e34ebdf
SHA256512912f3743ac83abe1487d14cf16bdb32dd22be7658e78914a0ddc37244b2c4
SHA512684678ce0992263d3e94d176f8f6c0a78a6d6ac2308d12fe24769c2eead20eab9dc299600928902fabcba610d6b31475a9de60683b083efc8be9211cb7bcf6b3
-
Filesize
661KB
MD57d6f59b70c737968bd644c99ce242d11
SHA1f7cdc6149609a4eef6c4944f8ade68f8f1f4403f
SHA2561e7a945a0c96bfb9c967f2af947a5a9bf7ddc28c0e501c77e3ddf94363bc652b
SHA5123e26ab522c5a675009547f641d81f73f1803a21ecccb6a84fbc98ccfbb756ba98770930ac939291031f3509bc075bacfc7726ef7a267ba436d2e3bc10d0bbb1a
-
Filesize
712KB
MD56ed9de6257a4bc9fa41cecdc90c85c4f
SHA1eb45b9a1604110d5d8948382f7f51ee57acd4f86
SHA2564e7e70e59c25e2ab422e5359fee7c89fcfcfcac890c02ae05b94a83f5871815e
SHA512a084b10291cdac88dc0e4316c57b603a4445195397c2f5011a6e58a9395a3edca7b66cc563c018b7e69e28ceda93d02f5aa8c926431ca22653954165c7569e1c
-
Filesize
584KB
MD53dde13cacf78d3d41a78a5ededa16ef0
SHA14ff425db9b9c8230306bb083d1afeb86a6b830d6
SHA256aacdead0b102e5c10b69253d64abf7a341bc9c661de163374fb68de1e4fa38bc
SHA5123e20ca6636aa5cc512aae0d527af19e9b03b59cd325306051aec2cb7efea390e406dbdeda9f80a785afa006ddf10003e92554fef7a15202f8494ea423680c864
-
Filesize
1.3MB
MD5ee258df7333162d2bd3b6f4418ae6cec
SHA17a9fc6d8a3544e51a0d2441422c9e231e8470992
SHA25641e4c9dea4c43b4ed66805c902f17364f03e933b57032cef32ad413141090991
SHA512727f5ea51ca91025db6d3c28f8fc385e2e39b9979d843f72d0329517ee8c9239cd7fab69226f9445b4f555ae5839fa5954529d7c8c33ff582370bbe15c264ed6
-
Filesize
772KB
MD55f0fbe632aa36a32b78f4ef37faf64a6
SHA19ac9fa95854f22efd477c49b9100f77088ff73fc
SHA256a96f559ed16a7d5537c9f145f0533629c2c52348684cf254cb23afef7278e7b0
SHA512417e28b7b82377e327b10511110b20a3557055749f145fc0c6efe734939c2c9700f25b77e09376738116fbf2007bec85527a49753315d3abf04f9abcbaa0ca5a
-
Filesize
2.1MB
MD522f609fc28884e8bd818475da68cf29a
SHA115fcbf2d177e3e6a40fae8a8d4fdb81c00347f87
SHA256699af72355e299386f717b4cc21793a096965c7ea04c39128ea101a6e6626975
SHA5127c88c12a9eb8e3d46d6832f0d30e349ac4560e460d4381527471fcf92dc6d1b02e943553564f0ca524b922758b1b6b6c99c1d2e8bdc9aa0c9b4a117d628a6c45
-
Filesize
1.3MB
MD56ff7c7cdb979115bd1837482101c7f3b
SHA10620c07146e9054ab84f64c88ab86689a392a2a0
SHA25641387e3ea0291a5648f2c3dbdc886dc5d2b50c320e16aaeda51a3ffe6682e22b
SHA512db51d5d1c9499acb7fc15d3a8e1b05e4011b6dc7b8ea3af6b9d9e934676bf5a3def10cd088a2549e851393db5ab37f11a2a41ce3c2595da8f67835ecca840a42
-
Filesize
877KB
MD5af5f05e6ed26060d8d35f7c3300a3404
SHA19d417c05c52945f4a27b3032ac36451dca9a3ca9
SHA256460fcd585acff498b3ac3a04b2255943804af2b10d5156d0c34c81c68763277c
SHA5121e056c06c39626339b6191a1ee86268321d3cd2670a33edd3c68f8992c55ec6a521768f26abfff3a3fd64af1a8f1721db73cf589747d76c92b5fcd9b04f7d42e
-
Filesize
635KB
MD536b918c4f30580e7e1a6dfbf1943a3a7
SHA1fdd22d7a0619a3d8341e300c4b557fa995104957
SHA256c6312c553b8827a0fbccc42b61dff69568a57f07cf7a0a4634ae826270cc631d
SHA512171259a205f80d60934cbf691695e4c59b1fba0affcae979501dcb3221fcabf3ecf10c90efb8081e4598037003edd3f85461daf580ae9a008287b0527142c0a8