Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09-11-2024 13:38
General
-
Target
2024-11-09_d811e79792809ed4bfcdfe44e5eea72e_wannacry.exe
-
Size
5.0MB
-
MD5
d811e79792809ed4bfcdfe44e5eea72e
-
SHA1
aa96311a346bc874647fd0845dfdbc0fa3dfbff2
-
SHA256
88ee23d0001b325653602351eb898af0ab82a7f8c2413d1f44fea7557c46eabb
-
SHA512
4deaada5614f5e1b61ba900a18147952f595189db8f3bc5dc8ca558ac656bd4740217db684ae434d684bd9c3e48c6a4957a016d19b0510cc010661f16559a532
-
SSDEEP
98304:9DqPoBhz1aRxcSUDk36SAEdhvxWa9P593R8yAVp2HeU023W:9DqPe1Cxcxk3ZAEUadzR8yc4Hep4W
Malware Config
Signatures
-
Wannacry
WannaCry is a ransomware cryptoworm.
-
Wannacry family
-
Contacts a large (3239) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE 23 IoCs
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory 30 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 5 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 3 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 14 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 40 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-11-09_d811e79792809ed4bfcdfe44e5eea72e_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2024-11-09_d811e79792809ed4bfcdfe44e5eea72e_wannacry.exe"1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
-
C:\WINDOWS\tasksche.exeC:\WINDOWS\tasksche.exe /i2⤵
- Executes dropped EXE
-
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Users\Admin\AppData\Local\Temp\2024-11-09_d811e79792809ed4bfcdfe44e5eea72e_wannacry.exeC:\Users\Admin\AppData\Local\Temp\2024-11-09_d811e79792809ed4bfcdfe44e5eea72e_wannacry.exe -m security1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
- Drops file in Program Files directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 800 804 812 8192 808 7842⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD591dc735073e51a50a2c1a8f2999ce166
SHA100729233de9300117af6acd52fbcc478b1881b38
SHA2569f456773b7d3139561da84485af9b2cf40779c07866561295c50c7fbed848a53
SHA512618ae9bd96e3f7d09796d6b2692f0a67a11a51806746e91510d6e57d712ad7158beced3c5a929075164b34ff4213fe78bcc2c4acdb68e7cbff27c74016ad7c27
-
Filesize
1.7MB
MD55f0a2b768dd245f7e4cf175c8283785a
SHA1fc59d3e84a061cca7d30dbf2257b76afc801de66
SHA256b88bc64d5d9a6949791a697cdc05c03fc31b7b2161f5e77a00f9a949a7d4ab16
SHA512db1c61a51250595ee9b57042ab6b95bb96b7dc18882aaae3dfe87be27830a1aa252232fec060210d22f38b6f365c5dfb1c7f273d6ecde7fb8a1e61637de6b874
-
Filesize
2.0MB
MD5830e8db8a595d912735d1c1fa7ef5434
SHA1c0a6cadf0bcdf09e38d4c3809a32616a2fa5f86c
SHA2560a5064c884d1b8e80b2dbdafa9e99cfc249194b4afc40c7f82fa0eeb8e5a7a26
SHA512465ee0d1c7e952b6915807e71d986749db3a70cc3fedb04fd6836b8094f90da822c1f1fac3151c66351b5c95c044ff862f4a557418b7ef30492e6d556006d0f8
-
Filesize
1.5MB
MD5d4eaae3335f2f558cd39d56089c89de5
SHA169699146a2b7410acca8518aaca4f2e3ff7e0616
SHA2561a3469d424f9b23fb7a85f0827be4df147461eee791baff05a0ec378ff2ce1c2
SHA5120db37917b36b0e8d73e329542aceeecab06ddd1ec2e74c0cc51662a989cae23304a92862a81c61de9fbe371aae1c09f388acfa490bf20f91f24fd352ea2a949b
-
Filesize
1.2MB
MD54d383c2d9ca3d2346555a0395a99e5a5
SHA1d177e3bd45bb9727b79b3caf82d77d1450f6f28a
SHA2563d9e4b074b8b03cc17c972365283b0c21e21e2321585003c1d0a3e494a788def
SHA5125fa8e01836fd996acf7c7951a3b3d55e750bdfd18456e464a9f060467a1a862d3abcd45c75ea2c93cd6f83f851fc68a9559941adfc3d5c67c7168a169d109f0e
-
Filesize
1.5MB
MD5789d7b847c12eba35ff995f92cea60a5
SHA189dd03b77681b85c8d23ab3ccd22f98e481759b7
SHA2560034fa40f44fb5fdc991484aee4b4fed8d2c9968bb23684334bb358bbe424b68
SHA5129929387c4f98200874168b11bb9e148bcd5502a0df8f282ac453cb24f1815b35b0bd39eca52672382ac11c7ace6f329d2592e18fe1eab56f468ead590666da28
-
Filesize
1.8MB
MD5caff860d2f77206c970e95fdcab8efbc
SHA15b210f2082be757390d25c93d9bad41dc9ad5f6d
SHA256829146682c293c1a4275d1e774b3c8886984546463f1338b700ca5b840043a4a
SHA512eb58490343728947944d1b0110825d1dd66f8599b4285875aea5a50bd60a3ece58580e55ba1f521928705c88af2ef7968b032204581074da65d730c854161b4f
-
Filesize
4.6MB
MD50bad2a56744a854c6f48e73563509973
SHA112c43ccec36b17f58b131783d0f2199030db03f3
SHA2565d4750b4a59834c87a5593860e980437f53f2e00966f17dd1a4b5f06c102f05e
SHA51267f6cfc2c3f7e6b1b2781e15bf3635f231818736677967a61307f5876b31697af29a3a551e7cca779920fb8d62989aeca12e577fac9ea2b84d48c3c9931546cc
-
Filesize
1.8MB
MD573f52c40792650dd46c9de2429ce225c
SHA1d7e712c3fd5634dcd5b22ea24a024ef1a524023d
SHA2569d4c92a8b1832baabfb7e9cf5685d58cb97df9e114334728b556c3cc1f0b630e
SHA5121ae3a45447f9fbc6b649981fca981550b29dc85b56098ea3769434dce3b53754ec630eb5e5587e23b0b3900147dc3438989e3e88efe79cf37fd9cb35418df477
-
Filesize
24.0MB
MD5b42e56355f4df1c6e3beb48d50b76a42
SHA1a5f22eadd856ab5bbdff09a2148ea5903df0a83a
SHA256a349f3bd7d81da6c0e84118b51ec6fb12673762ff26033153f09d205da14ddfe
SHA512387d9b1d3f7e9722214fd0cd14327f5adf10d878cb3f615a3ba487313dd9ee22991e013b2eff6b4b4f663d02e950a1f0ed6c13c8a3b5d48bc65ec3bbf04f2efa
-
Filesize
2.7MB
MD5a48620c56784bdf90af45bc83258bd77
SHA1c3d170f6777b7f9656afce0163df0cca3379e6e4
SHA2563368baa1b6ca6dedbb2644916e6ea6bec5f06f96d1cafe2eb6b064910fe961b7
SHA512be8b1567b4bbe19ef4124755a55b8cc603491c441a953b664927f17e4905ac2ff22cb2670d1fe53da4881ed2d6f0f17107dbf56fff0a3dfb18247ee862eb1788
-
Filesize
1.1MB
MD51b1bad83a8d08c76ccd8a1307fcd7861
SHA134ee13f452eda4cf99a8fb0b5cf32301c0310e41
SHA256dcdea071ac00247b64b8f900c796cc9672c7c4a91cdfce9818f6fdd42d3a7b84
SHA512f7f298a760718029779fc90af7921f980be68429de67ada040d8ba112d165277b9e68a3975c2a037fd61ba6d22ca22ac7ef643e75666b6a0b0770b357925e770
-
Filesize
1.7MB
MD52d7c73ecc6d7f8dec8762d3bbb5925de
SHA1e9ead94e05f8be0a21d476cb4045c3b7887d9bff
SHA2566d1eac67c3d9784f36a69070e228d8fc7a270ae8ba5faa1b70afdab4be9f4dfc
SHA512b407353596a75c85475e9987bac0a4df8a9367d1d26952b86324bba55c5bd43446212d1a6c39d88087391a13f9c115fbc4e5d4164234079584f5b600592b996b
-
Filesize
1.6MB
MD54d5f91d3ae46561d1a89d5e38588f60f
SHA13727d1338a336c2e02c8ffb3a735a9591fe1c7b6
SHA256fb9711e22d5a0413506440cd9a055c6bc804da13909a434a090142638a762610
SHA512f34b00a6ca1baec966b6c9abc239c2c682dc8e86552ce8e044ed8e9835d2de81ddd151dc1b7c5d83732f5a6bd60a9d57329863aed03cd4fd45567c99a98958b2
-
Filesize
4.6MB
MD593712db0cfd561450e1feeddf7f28cd2
SHA13703054301ecd38af5b6943947d7717a92ab8b52
SHA256826806232324d5b03140d64eb702109713cc44b43e0c5dd89cfb9862b6980c90
SHA512ba3fabd9ffc87759840b751353be1b262effb30d40a3445e9ef11a7b95cffd02674353db0f46bd613fc4bf072ccdf091903269300463c7ab386b15f660b0bd19
-
Filesize
4.6MB
MD5c39e37f02e1a048dc2c0481335ab5c86
SHA1a90c2160ce13291cf01b3f95b2aab3e2acf13035
SHA2566e63f9cceac131d6912c90789dd6e5553969daa5503e351664d026adab4cfd56
SHA512b2af7944e3c180011018f083637628200d11c46cdd3d5551620a10ee6ef94180ea742b88f192cd8270d3b220118e003b40a2ded919b3650f4a058989f812ba06
-
Filesize
1.9MB
MD5e18e85c042fad1d33ab34638f93f8651
SHA18c879ada396347e3b904da8d5d9b3edc07db0b8a
SHA256b899df3202eb7160dcd42c1ddd647d31b04695a01c7b763b68a63c4d9c3213a5
SHA5123311b0472a1b12375a1243d1d62385044c78d8d7d3a4927741a363e7ddba3e8ffe9d72fb7b572956b0a3cadbf2be246f6f39b29919a9376fe0dfa3f931fb2ded
-
Filesize
2.1MB
MD5872feb58a5b6b60a6a34fc62c4adc5a4
SHA147e5b582e8e334ba705fc72d31c8600bb0bff3f9
SHA256934a1afe90479305733a8aac5231d82732c0e8fc8f9951d8343203523865eac5
SHA5123d27f90a5477738ff926a67c574f98966662c95f009b6ebae83f8e29d35122452d67728219dc4ef926ebc7513f75528a508c6b90ec1596b20d89835d19324464
-
Filesize
1.8MB
MD5dc4395ea03241cf41f8d4ca1ac952055
SHA1982a5234265aa39589f782dc95749653155d4149
SHA25620d2dec29dc21a859615e8957bb36e8053466ce15e3a9854c10b5365d939116c
SHA51260fc3f07f31acb3154600b640e0e2bedfaebb05f72c241ea17f5915ba5f29ecb51edcf0d03c0879bd38fc70bf5061922dc99f493a5b9a884cf3d996753b6ee82
-
Filesize
1.6MB
MD5db3efa22d8314b444c01bd562d661e5f
SHA1988c539e334deb6c92c6ded328517b801280d329
SHA256b6324227efaebe865a89dd381f3811b1c80da7f37e84abdd0b1c1391ed07b6f1
SHA51251b1bb73d926e3dd248eecece70b16b95ac36bf91a52e2e87b4e460c06ac905106ed73daa0564dc4e358beb925b16af12dcc6d14246ed2075279f1ff3ec0454d
-
Filesize
1.5MB
MD54e0debd43ded6faec8c6798ac47bde7d
SHA101b6464c26ed00cc8a4039710c8c19a384fc9316
SHA2563df8d4ba2e68968f3a9e4307e1451e4b9c9d2417ccbd62d9d408beac896fbd02
SHA512523d23161bcae354a41a0e01eeffbe46ee084c9aeaeab42da291242d714fdb74261a8ce9a6a6b88e05a898f0b64c6498c1f24633e08800e042c2e76c66e88085
-
Filesize
1.5MB
MD5ae3213af41d4073d15910b985aba81ef
SHA1da37a90a058c8645a60a5e5487816ee29f008b87
SHA256d5fb73adbef75e1b1a9b30b8d957a5cfa5b7c27cfd3c892f839e4d62cf848017
SHA512c7653bca87ad46c162cb02a7869b462da4e7dfb677a7156f35c7de2dd5a30d4eae24692996763ebd67699ccc632b9091c4e7b50845ac04d4763810e4ba7f07f2
-
Filesize
1.5MB
MD5cfb1c612751adcc96f929f7be06441a4
SHA162fd317e913964bba040dc8e7ef16117399476a4
SHA2561ca7f10ae459787e4f12cc308fcf45f46d4053dcc59f83a9d5d55b66e60dd214
SHA5125d26792fe84c0653eab047ac13dcac32f4af21b4eb73ab0be3c61066a2a9ce0ae76401e1077b4c5cf13d18a0f7083f371a8be30f2cb59af366b38f470a719a4e
-
Filesize
1.5MB
MD530c01f1813b1e729b89411c370d16f78
SHA13c026ed264ad90b5769e66ec2c802e080e103d5b
SHA2566aa74fc29550b280d1857d3dba21112b3787298fb0e7a88c1fb54ec805465961
SHA512ac671e57319afcb8085c5c6dfa768667ee466f02a0ee7fa3840f77367c4ef92e4d872603071a2c4c13975ed5d06edbe0e57f505e4738d4c8a71fdf53c0741754
-
Filesize
1.5MB
MD552aa6f0c203517039a592acace18c262
SHA11586e8e39302625522a556c8799961a4501ee528
SHA256251f1763a7cae5b3be573bd8ad1c2ec798621709ed39cfb739091f40dadec918
SHA512c106b21126634d6b611f5438adf7ba3ccce03c2fc12ea6b6ffec011f8987e7ef34383ef5becbeb2a0a92fa042c5fd5925af30b8c87aa116658d1e457cd3d3b20
-
Filesize
1.5MB
MD5e5b4827c7bff8aa60e7cbf3fa4d82f02
SHA1ebc1a3c257a84303d74b4314ae9de71b70e9bbe3
SHA25627cb31935c215767207d51210e7f69484d16775959f58dd9aa7706a2926a78ba
SHA512cfb87dbf76aa39404912c90c81c2e6291d21083619ac65a104a52a012d0c65d462ae011cd400e58580d9d9ee0ea265ae5ccb6d7146ea4d016fa71120ad3f02f9
-
Filesize
1.5MB
MD556324eb6285c82368b3d61b8c744a9d4
SHA1f280e27def0d1e7bc017d437b1d49250d64b3607
SHA2568545133951c0ca1ee6fca28124abab531b1bd39354181f769e5662f887e2bba2
SHA512c64714616f798553a961e3eb6d6ad991cf03a1e080c6993f82c466d0185b26dbbbe2732dd5571078e0bf5ac270533e0599da85311e6f4e715769e52ccc1caf48
-
Filesize
1.8MB
MD58fa1f20f9ab82c8cf1e91151a8514a36
SHA16b5a160c7cd3554571821ebe0b3632413e7005ba
SHA256daf03e44d2a6d5940cbebb0be53847399657cd053eb83ca2c3282c4b4b0919fe
SHA512b41ec5d171b2a97edeb194a66b0abad57fd1f416faace089108e198e4ab4573368a1af88382e1c08963a3e4d367b20761915d4e9bc82bece55be1e841fb16dbd
-
Filesize
1.5MB
MD559e5b45063a6174268687e7281630630
SHA14321136f9dfdb54d4f4eb654751a8f511d89e673
SHA25611773313f99811c5fb3fd2349fd6e7f624ef12d4077f2714f6d208bb2747e2fb
SHA51290b4a34285f9349e587fc4da01dd66d5b7544dbdb7411099e910f077f647a2cef0ff39c80085cb5cf41913d920b01772b665d43f4104d2104b33362c05f87d2e
-
Filesize
1.5MB
MD53ebac5e3b8e3c464a0fab55fe6303a59
SHA15737171c81684180291b4253b91c9f5cfcab6b95
SHA256509d63548a19f54a0c7b54a592b78664c5a205617fa6f6258b94d2988bfd456c
SHA512acef027da1a86f463a90a784509ea13dfa2ebcb859df1f9e2ea7fbe15bcd7b34dd3ba159f3dd1fab30973fec146a0081c45d19dbbe62b1eea60244ecc6f48bad
-
Filesize
1.6MB
MD5a78e6658a64b2f8033e141155daac397
SHA1ffdf8ad27534a75397b20a9fed51caeacfac61e7
SHA256ef7604c5c89bbbe31166a1dfbeb5170493f407714f8df827d165aa10ce0c60bb
SHA5128e96fe7ddeb3faedcd48456c9ed71bce5c11c859054e5d25d5eef40133a875ebdd0812f7bec50829a08044a3fcfc4b3529ad6948b78cf5fa4f5a4021b170ad60
-
Filesize
1.5MB
MD521702c5a3f30e760b8c0099199df2203
SHA17ba5192ea9abdec98ef1574cda3ff1ba22ef1be0
SHA256e2d468ad0bdda6f4220a2ac24f8ce4bf73f1d6a9ba01eb6c1b44fcaa8da4dff5
SHA5124c5489c40c6dc223612c4d406b5a0e86c753e6461cf88de10efc83f2231bacf2b5eda7baa0583f920dd85a5799d913ecdaed2a2debfa8d77dad4f6ffc2bff1eb
-
Filesize
1.5MB
MD5c82cf781426dd9b578efc581e306cf97
SHA1123ae1b46ffea6a676a6bd7b40c1bd371c2c7894
SHA256392e0f68b1a63ff05908ccae443e300fe49df2773731f2741d9bdcd66857fcde
SHA5123800b02aca6da9058da71ce07e5807ebb1c3eba7f1a4fa62a87e888b28d1eb799f66795b912686d78e5159c9e822c0dbf9573f58dc16ed0637fb0bb84b5eca00
-
Filesize
1.6MB
MD59c8c480d0ce5a5239768be54d77ef353
SHA1a9ba91c753ec4ec57c7ebf968fa4ed8a2ea5ef5b
SHA2568fcb9ec05cfe648522ecc64085f5d4114e99a1c9e96c726a3c5ba21e33673321
SHA512406b4e6cece1baf9c170f2dd4e83af0e34770ce0ddf3b2824c63ee71a424c086e86726fe645769e5fba2ca27a064a866a7e08fbdd54f544aa5ecc30837e52dcc
-
Filesize
1.8MB
MD5cf7a6fdadea7b8da8b75e2c6850a79b3
SHA13eac9d013b96ec0538325775e34ad8e9d5bee3dd
SHA256a8b62343398399bedc387a3f012e4f31afe32859c32b14ecb0cc245a6f4d9f5e
SHA512d7ef83b0a791314b013b0b90bfbd9e93ccc2ac0d7c3f482cc4746e0dc7470c57e63c94f499adf0c0b807c25e659f1789d2a38c47b1a31cd4bd5bea819ac8ae3c
-
Filesize
1.9MB
MD52ad3f6794faaeab7a17ea4bedde9799b
SHA10520c5647b008f1ff969a6a976aac8baa526eea7
SHA25693349c9a8cc78885e689ddc76ff11508cd1e1f18e6bf0e64ed61568385323444
SHA51222c4b29fe1d5995b41d78d0fd5a7843efee26fae415cb98705a0e37de9405ac745c3e44e122da8eea3b7d3e92a7f040d76e3af31898aaa5fe87746df2b57d497
-
Filesize
1.5MB
MD527533e8a54225b87334099ed5e111e2f
SHA1eec0ff3d45ade72b0fd5f9bc7893963c756f5691
SHA256a45faed2d1d4bf17647d253abece677b928e8c6a14cddffdb91c11efdca3eefe
SHA5122b85dfefe5bcbe2316be890176f48860b59423c15565c4cc889c998a49dd7469b022c097482624e7ab2f7c1fa40ab0245ced14c2c72c2fd1406ad09a3b48c9c3
-
Filesize
1.5MB
MD5ea8c38e4b86d90931a879417dd73f6db
SHA1b55eca80af702d32f6c380789936a14808b55aa4
SHA256dd9b10d89296ab0bcef65f428de98ddb39e7750e04e875f784fa52335e2c30e6
SHA5122e2268968832860dd37ff5c00ebccef4c2d386c6c77ea0b89a3ea1511f927ea770947c6f290380fb2e347a663ce089dbd43fded925dd69c800cee54ec181f998
-
Filesize
1.5MB
MD5f8232b32033fe7e8a9949c200eaaa3d9
SHA1ceb96d249f029def256acd281cfa42d9a50c738d
SHA2568cc0601bc10f07c6c92751fe6fb543ff1b75e6ef29bf2eceaea190c66bc2b257
SHA5127ef210f2c275604f53dc46cce09ae85b8c18a2fe33bfe15386af062017f5abc9d439f82ef87dfe626b2cc26d567e456fc55c1a6fde14a09a2cdb7e8786819b83
-
Filesize
1.5MB
MD53b2641d78126d802ec17b2c7d1358cfc
SHA10077ce1db245ff21b92e9a56fe8effcdc106ebd8
SHA25684a52b3aa28001535de8c82be5ff3075915232641f9656a17a2f610873716250
SHA512e6758626c0d155d09741cfe2b5d55839940b543d4d0b7097d046c3adeb209e73cba9a216c44b8b21ab088246f7f2ec5e0292b3ad8c2320c860ccb3068919b11f
-
Filesize
1.6MB
MD5011b20f1623c3ffb149f51c0ee2f6b86
SHA1f9347a06acb34d94840f4dd95d95fc3fe21d66ce
SHA2568ba1b314caf0e7da010b6ab1e18e33f5f4ae7e9889193b8ae1f089dcd0b6d26a
SHA51246b611532ebc75a8dbf2a8ab0b5c34cbce323cdfb41bceb96471f8e9803c7c4ade8113c2fa0f49820748734431e1ce0c27fd597f47ad483d3a47cde767fa69d9
-
Filesize
1.5MB
MD5e923d73c228ea2ae6bc144dbb8fea4fb
SHA12d20613380ab1cd394c9f50ffd2fa583f2839845
SHA25615472ffc6bc4a99843ef2e79cb3d85a9de4780830edd646aaa4937b564b76500
SHA512e9d2fb302324d631dc3455f29310e6f7ef657c6780c9b0abfc42557fdccbd6a4f880b83da822c2c5bbb4c948e87e2fa84123cd30ba5a7717d25e80f6bad65b61
-
Filesize
1.7MB
MD5b11ca5778894a41aadefe142bf3e1381
SHA166100f0f79cc6eeea0a1ebd353cfa144eeec18df
SHA256ed5d3a867973b9ecbdee8b66df5b86e8259392f76e34933bd34992a9e1ef76ed
SHA5128a805af2dae9eeda3b7d348e9d0bb7bbfb476515b12860bc96233049e8cc68bd05609222d0967ab60e259b27d6f4efea181f87507bb1f92c60d1201e0fe9780a
-
Filesize
1.6MB
MD554ccd114a7702ea1923784d7286875af
SHA1fd650ddc10ab2b8b1edffaacf1bd09cfc223d04b
SHA256339b121fb223e8609f650f780a1fa855ac8db46bf76967f5bff4f86121f0cdc4
SHA512022c48202d56f24b3d5ed36abc119ede676065eb98e53eb6db8d09f582e1d703bf96530290e3efa2e90be17b7775d4e1e3db321ea3c153a84a3bf4e49e9d4950
-
Filesize
1.2MB
MD502fbe7b924aae9435f67e5c907e12985
SHA1bb5915dbd542858b57619ef0a707a3d7aedc16f4
SHA25618d6edef9419064527798f714b8f6f3c4ef4400955939e197b87fed1ab53b7a3
SHA5128f5e0a39bd8add4e6025295b259861976ae357891e41cf1b914dda7a503586b2e6cd1cd47dfc3e81ce8d6fecc7b924fcdbe8613506ca0d4d12b15eddba13135e
-
Filesize
1.5MB
MD5a7bbc835f9a36fda311b2ade97059537
SHA19e53ed45d79914276703ef4f1be9a1c002d2f755
SHA25644674fc36ed1d377af87c8ef97fc040ebb70e40ce9173893b7efae24827afa0c
SHA512d889ae564c09e735ada59967f03e955ee8599e438a05ce063d0f78cbe15ee511fce1a32c59c424d9d1c725198f3d4447441c914c81d007a2463649c7ccf7abbd
-
Filesize
1.8MB
MD52e69bdd5eafb43e4fee6dd409de475e0
SHA1f1f77daa088ace3289daabdad4c42d4800611853
SHA256733eaf8af02d9fe752c2757834e96d688ce221881205e1b47726caa4211e66a4
SHA5129e8ce232948877a1915795237ad49c20f7a513a8c8b45eeb1eb15e41b1e2f4733d724db12d5910218faf08a7c585d93d111817227527d43ca5b0c64efd7a922c
-
Filesize
1.6MB
MD522112f99797dbaab5e021dd1a1d9e554
SHA1eed1c03ffd99bac59cd44864955240f45dd83ed6
SHA2569f7f63ce215606c3f9fec25d9af710f5748b3ab847aeda204c70e79a7fd8c109
SHA5123a918fe8ecd47cc4f2e8cf935870f5edf9ec1f9945663da7c07ed746beffcf72cb87ea8c37f97f07b23d1d9bbe2ecfbedcc6b1273ae308a008232b7ca51bec62
-
Filesize
1.4MB
MD5daca9df17310d7870cd60244f6e3bcf6
SHA1f90a11fc1b6b059c1c6ba4f7b64bfc9b20b52582
SHA256f4b7906c49489f0bd030ad01bd2fd27573367e05bc4e444e66db97448979e075
SHA512e9f5d103a37499ae7898e59328d691003d79d441562314f74bcca76ab8f362b83045722405203be802cfecf673326f64f947e6e153e0f7107c1d3d41d4026e34
-
Filesize
1.8MB
MD550d120caed6c68da1e67f12657696a1a
SHA1fbcb5783e4d698a5bc6b1c96b7fa622cc35588f3
SHA25691b68421125f6e9e6ce985d642f18dc9f6ba19b1bf77d19714fcec75f5fd2fbc
SHA5123a8ce8727f306c3a2de676e86dc539d03b8278812978873aa3fcca2a8308c4baff07a3851b16359eed138f7bf9fe33a391a75f72ee97696c39152e341e7ead04
-
Filesize
1.4MB
MD5d54cdde98e0cc0e31e711ecac9fbe4ca
SHA1cf43794c941e1592506262160d9d2cf54d2ee296
SHA2563f44f19ef74d7dd8d7770c28da543cc02d4b64558b2d1b919103558ba2306dfc
SHA512d96540c701863cbc4e255830268f6caaaaa73e7386bb6580b713ca1f76f97447bf8d9e5288e6c2e292b3b9024a619b4ba17804fef65646a302b38f63da5b6232
-
Filesize
1.8MB
MD5dff00fde407a2e6179db3dd8344e20d6
SHA16d4e5fe916d85eed8fa4a75f4b538e1eb27de7e2
SHA256cc27fa5e49235d59d9d4b4a084eb8059ec164d7d4b49975de2107783449884a0
SHA512ead1cbfb44417bf21517d3e35f763143b49f4a840e99ebd8931a022427cc114b8b9b151892d64ecc8d91e672d0d97cf94e20a57093c16576f7348e912cbb0c78
-
Filesize
2.0MB
MD57dc8d2b49d2dcae09438cc93c3b3f2ee
SHA1dfd665bc87f92f92030f3b84aa9790fe5a2c352c
SHA256a61b9b1fc15bcff9480ed25d99076b8021ef7c8d57fc2ecee733cfba38cc397b
SHA5122f9376ef96febcb348212cc6a166ec3a4f0f1ac21eea221119cb221863650c3430daa22b22e92d9e7cc79cd0a621dca86247df3248c1c43461a8a6df1c2c287a
-
Filesize
1.6MB
MD563cfea94551fa0c417248662737619b2
SHA1f4e18b517361953d756422fe3c42b62991f027b3
SHA2563d40e19fc680f507f02e8bdaa7755f1b46a094673a7b47d80484d8aca62227ea
SHA512dc2ae1c0903736bd056ce3dbe08f850698ad2897be08072046ca7da8bc3a2caf66c3fa67d1eaec78309371ff885125903f036540f59aba952b3b1bbf88560fe0
-
Filesize
1.6MB
MD57f1900ed2da69278349fc3abcb34d07d
SHA14933ad9620b9f1abca2289f1b2e19fc97565d434
SHA2565c475cefc014150e1902dcd70a0b4ea7f83da8c146bea8c323edf2c302548c93
SHA5126e1d484eb1a3fac57c9a84c4c8ce3e485f152fd639e09896cb18c7c4c0d3d4e28ecf3f323675d68c1081095a6e1fb34b0671482acea625e6f702b5d75d54dd77
-
Filesize
1.5MB
MD5412f3a99a42351c96ac7417242224a1e
SHA11e1ba5958b6db3c2fb268e529e4d84eb5422c110
SHA25685e9412e83cb444f89bee691b0d5b8579d45b3fc95a6e1b7d4498ad6537ef9bf
SHA51208ccd6b04d890ad5095210681f81a94c90526e01a64723ce17d7165733665b21aaf2ae3dc2b48bda844b756215a1189ad3486dfb6c03ff0bcc36f8857d4d5f6b
-
Filesize
1.3MB
MD5e3dffeb7cd4049356b8c33fbaebf3ed8
SHA14b285973afce1472550517067c0b19e82cda05ed
SHA25640ef8e9cb04ab956260646e70cd088c507d9bdd94443b4c2170e797b898dcff1
SHA512587b47097dfb512e1b280585f01c9185c1988b738305ecfb760f69a845077a9da169f8dc38d04748d61ee2c9d7fe68c5b60177aae8f79902c6b1146a1c578a67
-
Filesize
1.7MB
MD54a00795e51e423f6e9410c8b0cc7108a
SHA188c7979ff536f2512751eb914e7fbf7a49c892c5
SHA256ac1079313f73851c78b0cec8eb403463a1c5182bfd98dd8ce0c828e10f81083a
SHA512e821b8c872f36b86905c48a1549a264759a7aa03883db8dbdc9d9c82170cf7bd1c075da0affdaed02ca452a8284a9d1fd92d4b3396b787473f73008c2eab95d0
-
Filesize
2.1MB
MD5c182df8de1f92aa24ce42ad28adf969a
SHA148730652ae9f14638636922bfc8569f24144e31e
SHA256e19ebe9f80db480db867f8d7dff821b42c65bdc8dc7b1472216443d09847332b
SHA512fd084b4f627d5a727c6e66c10be85dd79f43b1f5447fa62d06cbf76042e54e96010fd8193611b2ec6c1db09a6cbadf731aeb5f7870d7368838aaf7da2f7bd7e3
-
Filesize
1.3MB
MD5bb90019fc10164ec817bd96da29f2730
SHA1c35ef1ded97f4f05ebe595957a9ed8eb25c70663
SHA256fd6e9e1e65d9a2ee1eb6a4aa16f5e8b4378cecc28cdbc91eff6c7be3217f7976
SHA51253506e1701d922caf540fc96ee6b50df23e53b18d9d078bf8f9446ae410c64a5686a6c7827a0396afd12fe6ae535e88faf66f097c4e440dbdc29dbe7357e7777
-
Filesize
3.4MB
MD57f7ccaa16fb15eb1c7399d422f8363e8
SHA1bd44d0ab543bf814d93b719c24e90d8dd7111234
SHA2562584e1521065e45ec3c17767c065429038fc6291c091097ea8b22c8a502c41dd
SHA51283e334b80de08903cfa9891a3fa349c1ece7e19f8e62b74a017512fa9a7989a0fd31929bf1fc13847bee04f2da3dacf6bc3f5ee58f0e4b9d495f4b9af12ed2b7
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
412KB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
412KB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB