Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
12-01-2025 15:54
General
-
Target
2025-01-12_c1983a1cd5f398c3b41da4767625a9ed_wannacry.exe
-
Size
5.0MB
-
MD5
c1983a1cd5f398c3b41da4767625a9ed
-
SHA1
b74e4d0bf229969f14e9690699e62600b15dfaf6
-
SHA256
a38425e8fdf8c77aed1ca254f6d3726ca2801133190f6f09b06c5c4667192378
-
SHA512
3b1d9f5a01abd5935686566ff2771a0474c9b5e611cb5eecc8c314a0b045c73b6dde12871513f2981b02ebac88857f5adac4a5543fc6e49ec22956ba359c5f96
-
SSDEEP
98304:08qPoBhz1aRxcSUDk36SAEdhvxWa9P5uB/nZ/9SL2:08qPe1Cxcxk3ZAEUadwbi2
Malware Config
Signatures
-
Wannacry
WannaCry is a ransomware cryptoworm.
-
Wannacry family
-
Contacts a large (3209) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE 23 IoCs
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Drops file in System32 directory 28 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 7 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 42 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2025-01-12_c1983a1cd5f398c3b41da4767625a9ed_wannacry.exe"C:\Users\Admin\AppData\Local\Temp\2025-01-12_c1983a1cd5f398c3b41da4767625a9ed_wannacry.exe"1⤵
- Drops file in System32 directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
-
C:\WINDOWS\tasksche.exeC:\WINDOWS\tasksche.exe /i2⤵
- Executes dropped EXE
-
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Users\Admin\AppData\Local\Temp\2025-01-12_c1983a1cd5f398c3b41da4767625a9ed_wannacry.exeC:\Users\Admin\AppData\Local\Temp\2025-01-12_c1983a1cd5f398c3b41da4767625a9ed_wannacry.exe -m security1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5e96cbf7b189b1b0827d1b147f077e196
SHA134a7d71eb17e019ae72e44823897005283e0061e
SHA256df0692e2d1f4c75d101c23ecaf4a7575d95695ccf4ac237e7d38b2b5f56f4b2a
SHA512c64627f7a90c513941d4e55691d78f5aa11936be3a0b2d327cd1e9ed0e77cf57e679f6120095abcefb2c20b3515ce6a9a3fbdea92f97121be184189e3472526a
-
Filesize
1.5MB
MD5e9e63ccdcde387cf4028ca613206b746
SHA1bde1716cc0957722fa84223205160571431efb28
SHA256a405734fa7ed2715b4c24dbb22fdbaf5f4da4aa2886c0d904540459e09061b79
SHA51226e9b22a7baf80d4010ca2b5423fa83d50db96cb8d4d01116cab4a0120110a4d1001714c225275555ef3d479d0c0e754de1c88ccc7c69ce5e6ea63034a6d75be
-
Filesize
1.8MB
MD5b4b0a52840c44a5f626217c297002c76
SHA1be4d2ede2bd08b05dd91980ee1f18e31bb6df4d4
SHA2566461b857d0976f889c18891b9190d1d59a8586332b9345e1c51484bc804d5bb3
SHA5123d830dbdb59d9558724f78a9a50844fa94a581c3b38d071961bed5353f36ae253ed6284a06281de6669ba4a1a6842cea062a0b75e4f72a8b83f5213da76c4160
-
Filesize
1.5MB
MD55d2ac4998d1f52e9de7a90299e2c54bd
SHA1eea5264bc897a8948f934f054fdd3fe7386d66d1
SHA25601e3d32aa2da7fcdf819c5b8c2c0c9ee241720fb8158ab4f54e95a69a44255e7
SHA512fa7c8055764b05f96cdc61d8b4075458ac5cc11090d0d5b4949a6c24aa6369ec77d0c4fcd549bd4222be80e4e9e1da8b124426cf0ca996053d40e96eca867dda
-
Filesize
1.2MB
MD58e4ebc594337aaf37cc9882572dd0f01
SHA12138a633f7707aa64b9b927c04dd9c1a1629f201
SHA25652a0c6b760d3e993b8041616a2451d433217c25deec4cd1ca2baf243edc5b31c
SHA512ed57bc0b632c48367fb098cec2a78ee14327967bcf7500f8e5464e0fddd5f77c5a16a8ddddbcd9785f320d23b7c05cdb27b1aa11a5960ebf8917c59be7d05bcc
-
Filesize
1.3MB
MD5b68cb08b8f96506dece55cf19d19d063
SHA137ce77c61f74be539c90f8e69ab671a9252cac1e
SHA256bbcafd21a67420cfa820287aae5f97349bbdc13a3e2dfb74fbb846ac712a812d
SHA512ecdc5d41cf590b5416391084eaecb4c696ece4edf25b9eced12b491eac63bdc1559bd1a41c1b3b2fdf242d4aef6b4ae36dce186d16dc4b05c85fd01c97c4bca5
-
Filesize
1.5MB
MD56089cbf6e7566c70a5a2499eb63f161a
SHA11a04571c5cf0078b20f1b27b7c2e63c8e247ef0d
SHA2561baaa10980f4b480292b1088be8af3174412bfa612e478279d9fbfe65673a83e
SHA51236b06a3fbee6c7be0f9d6998ca3693c81580f74ebec35f78fcdba8c306116be51c96e54610fd014fd8541cd035d08bb82dede7ce53cd3c987a9ecd5ac4122d66
-
Filesize
4.6MB
MD52389c459f93628a91466e84188dd24bd
SHA1c3667456c118c43e4911153c9e82fe472480981d
SHA256d0bef2dd02cffcdc9d1e78317c8e43277cc658bb36cabd915e310e705cfd5961
SHA51278e0eab9af52582f8601a5331a496e426508610ed5f934011b0079847d3ddea3f06272edd659475684558fb072d24a680e2b5ac4845fd981f45e6b8cc99bc28d
-
Filesize
1.6MB
MD566cd2602d1c8a42062856b0dbcf534fe
SHA14277d05618294c7823c9b432224f39009fa9fe6a
SHA2560516ad7b8b61920e1db40ee3bd6aa7688ee99a672fc240f8d43522bbce27377d
SHA51251e1f3cd92081279e8cdae9b077e83663d8911259aa8fb616d3cac3155bdb1452561226fba0573eabadda10114bdafce1765b6db1888b47677db4b97536d6f54
-
Filesize
24.0MB
MD591e9a622b2ed972f8ac18825ac118d86
SHA1c52cff6338324e64c2604462f27a5f6563f139e4
SHA256e4106ed2b8971745e09c77f2b8a32cd3b0eaeb9d2392c95d3dd14950abdf4138
SHA512ee74323ba7da2513407749257b8395daab45c010dd1b3635041270b6604d06d44823a2eece12e403178da79585be4bdc3b69d9de44cf8441feb4602e4952f0f5
-
Filesize
2.7MB
MD5a4d91398ad89297d4207c7b75a711bd9
SHA1511704af80bbbf04f891654356a00f7e6a5b360a
SHA256f96c3878ff6faeb1c79a5c2f101edab0cf6bac681171f4c8528adcca21ed9950
SHA51220c02eea81534efb3a8f5faf4582572255901c8c0b73a1dbef8bf525498f0351e37e89264d742174d2a64609eed225ff7cd30d49bb76a49f0ee448ff5856b0de
-
Filesize
1.1MB
MD5ea6e89931cda6d4c91e81c854b4f095c
SHA15447e1bdbc46660d455ed2e7e39eda4b264692f5
SHA256d3c6c896e8deeb96e44459ece6c9a632e16ba304e7c5493f36cca332c5711bf3
SHA512964cb65d4d876829e23153c1d277af959084a75179ace8d82d78e1885d5509b10f8e278bccf6787b9a71cba52fa5a9f0a12d410bc1a761fae264c82cdd32e055
-
Filesize
1.5MB
MD55e32b430fa11a2616a2a22dae85ef3cc
SHA165e39f29bdb89685cdee1b12a1b77466facda895
SHA2567231d774d2be077c1863057fc9b8235df8f6b77d0786af0ed55024a231c0c3aa
SHA512792b082183dfebc9c257f142864879351f3eca5cc25c93c0e0e1d8242233d9561ac1cad47f10014e0e0410d81026d88ecc0b689b9269d5d3944822b199cd2e3f
-
Filesize
1.4MB
MD5e3afb1d8889bef74fbafe38b20bfcc6d
SHA1db7ea27341bc356fa6d66f228e18dd67bbaf2894
SHA256a909e82818f26e157fe9780717d414bf2c7f08dbf207cc0807b1c613f865684b
SHA512c2834c9c053d7e9794c5562973b89a98642a9862d8e99bc4de672a777a83ddd125e40097f1397a3189ddeb6b52da8c5ef3d6f534e3063f3467475c5d7dc05ef7
-
Filesize
4.6MB
MD5ad23240d1ad2b3338cb89e9c47defbcd
SHA1f65944cb0fddc7720773486b6b691c37a8cb8380
SHA256ff3bd429c4f8c4c57e2b0753da8118d6558a1f21699cd575cf476051509e66ff
SHA512bab34ff845ab0671a3424e6cd47e50d1414adfdf450e0072766b5bcfe3413b9999a877fed59fc029b63cc7da58a7e3f28b0cf4ddd160cfa6dac4cba20740f415
-
Filesize
4.6MB
MD5605e22c4e1ef3b48de7990e3c95e59a8
SHA10de7596af09c7937742a6dcafe63bedf7c4c5a81
SHA256ccf0058123988521c107dc90007e5eda6c141fc3b5c1f7e8cd017cf45069088e
SHA512b65cf0b2081f60e93f6f543270f8ec6404210010e350075048b8eceaab8241dc4364dfa9f9ae7e0a78e7ca333c0bd50c54ddfc7d38326ea13c64457d07a348b8
-
Filesize
1.9MB
MD5603201938d00faf5d5ee278f9a567046
SHA138e49fe47b261214869fe9cc0eec440f060d5e66
SHA256aecf3d3148ba8880872cfd59d7cd7f090f958f6784576b7f130f84b1ec6fba3e
SHA512df1ffacca53bcdb55315d9da0d8fa63643db138ca1bedcf47325456be2ff220a6fe64522d5c19dacefb4fc594bf41b42a9589994adc4ee653758ee849847d9be
-
Filesize
2.1MB
MD5f7fd587b5550916b9e76d5a01c82d621
SHA1f1c7a5a0d6c9db0ecfc8f5d52e4afc5edd54f97c
SHA256274757d35077251234a86dbbb2e485c2a7f9663db40b3158c7302c5244ae6126
SHA512acd623791ee5663e13117b4e2e341cf6a65fe5db00a0c0af81bc525d6071e4c9dd20c0db30cdde296922e8062d25215a816050d26f305ac4aaa5415c9cdc4c29
-
Filesize
1.8MB
MD53dda9886aca6da5f5fddb55d3a703b99
SHA125dd5d548b023c44b1f72329c61a3bcbede0e276
SHA25609e2bce83f6030ddc2394bb6881cc67d6a4ecb43b3c312ae66f22d4817cd4303
SHA5128b9dc16ebeabc02e93935b3bb781a2e31990f49ee11bbc294df4835d994523d2e542192a01301b941108bb56bdea15a6d8fb56a456b8ae9ffb3b660aa9819679
-
Filesize
1.6MB
MD50d95293fc2ddae05cdaa512ee5bdbd8a
SHA176eef4df599c487d03336fb76764e7b99baaf366
SHA256cd0ad517e030df438a6ad990aef980e041f7ea7efe8ca2b8d833f9f6292e1b04
SHA512d778e618ea9342adf8d373cf99b1d6774d74bbda182f1bb515da6780d6b9fd687fe2b00ac33cedfc19d7347fc250e806388f52a59d3c276dffffedbe78d45a29
-
Filesize
1.3MB
MD58c049837c4cdeb36f28d66ce8153c7ea
SHA110cccb3d0ae812cc975b0b17b1c3fe60e5ee736c
SHA256162645d347faaaf31e9c004dce406ca8b4e4bbd5523921cc9c8b16f72ef5340e
SHA512c3f06145a05eb0bbd1ca4c6d16d692bec17fea8565f12bed2e4c503d4f364475d783fb63e83a088461fe6d081743d25b5bac209338817e42e6784a565727a6f1
-
Filesize
1.3MB
MD5fbd4bea596b78c44ca0021e17a7d6f81
SHA102a3f05953f8e1400e618fc0114157e0185b2def
SHA256956172af033281b1425766f4b07cbb91d4c95b8d11e9569e9b697c19af20e141
SHA512e4077e4a9ccd8a637625672c868bf58b9c00790d0865eaa206cbdfa1556ebd761c6b38c3d51309e5508e03b9dc3704139f6f2a01c0e4a808fbde5045ebc476aa
-
Filesize
1.3MB
MD5987991e22ad20ffa90005b20a5ec1b3c
SHA1c886596ff274d6f66321be99e28b8038695510ac
SHA256c34904c83d7f9c118867be22a407ae0ff46b87e864bbd8f5112d3cd93c1a2234
SHA512b8c556bbdee0668ddfb4b4f9c169708a5a926b187845968ea21f80508ce656950dd0c4f1c9ed33301be3548b6d886e0f594bbf627a77ee97558afb269c4f53b6
-
Filesize
1.3MB
MD53c1923506c6252de7f71120881385aa0
SHA138abf1d6e4464a1003eb19969f83aaf725148e23
SHA2568bcbefa0c20584c268bd29a0a44dd521ce5218e7717895c7c961e0be5de9e4fc
SHA512e1477214fb3125f3b94c58c517956693d60b97103f3d7f4871750b258fbb12bc33709190eaedf1a4a50429fd73c58331b33ea527099bbb0278a164a4ab38448b
-
Filesize
1.3MB
MD5db578a0d590153cbea5c43c4f8935b1b
SHA1a8472b8accac812990b25392734dfa233a2523d1
SHA256e77a106e271cc6cc5ebb14e89fddffa42911653a7f9d37f15616d2e47b7efc4e
SHA512e4a977cf332a857f4b74675ae276bfd2d9021db6e9b26fadd148e4a84bf71fc7d364e3f00f0bdaa3d528dd5ca40406adc3d0d90a41a640972e226c3af39d2d14
-
Filesize
1.3MB
MD516492c3563cce00054bf952ebac411e6
SHA13ca0cb9ef56b1d08c19c27d95d45fd7db438da1d
SHA256266166ce1cfde2a0a2e8943a96f5aa5b55bc6af8c8f00c12912356a95db9b207
SHA512f306f551ead2e0d9c880d1219fe6413149c6e5a2fbd84d155a79f45ee07fe0723e354710df04540a2138242de9a3414f0fe0453206f2b08f00c6780c9d73f607
-
Filesize
1.3MB
MD533876720749c13f8617d97dc29cc2d59
SHA161fe030a88ea1610035ff184527a8ff3ab549a58
SHA256b8fb34cbea51daf307c614d0e865d23ab5784ea4cb22fa6d173d71b57fdced80
SHA512168b6e1e82ff178ca54ab79d390ec1f5cd0bf84f4c7743cfb006fc9e8a7569b46666ae857e098927d847ec7bf1ebf4b08bad66648240ed4f2212b705bf2e60e3
-
Filesize
1.5MB
MD591d5ee1a08242607206eab82919f4e0c
SHA1b20febcdb3b2750635fad7c73885f44a442f8906
SHA256976c798452642055726c6e85af5f8e6caa1f07ce3ae05a85c3dfb30e45389ab9
SHA512c14ab9547a786760df46ace326c54c6fbb83f7074211e228f2c8607c1eaf5c7705167699deed92224c9052133f4b0fb716ef669f17221fdc61b777b06b89a6d9
-
Filesize
1.3MB
MD5b9c8e96d3e0ac600c31957c923c1335e
SHA15112891dcfb65578a9301d8eaf75c35b3de2c9f1
SHA2568c622a33ae75d3ad97cc10dac3d6a64a9b012cd2925dcc0d8e4ec04a207b6e00
SHA5124aefe74d511792654346c0a5a1e1085373b95b3754ad4a779f70acb036eb44c61b8aa229fa7e78fc7e683367e6bbf7175dc391c007aedcb60d1c11f906544cb3
-
Filesize
1.3MB
MD589763508e3ee8428cbc34273a21bf598
SHA12f9a6ebefa66f18ef9fb2cae7edc60f3db9e9a7a
SHA25666a777e8ebe8685a4f030218baf03c4534d745755084d2836515a55216d48d19
SHA5127491a5d1de78675b1f6e6c16e47e969f797c0f12375cd4056260041e285fe87d8cf39925a1ab385346f8eef9e19f94a2eb26f44cbd6d0605585641c58e052ef9
-
Filesize
1.4MB
MD5818cf089422ee4d14a17d424777b32d0
SHA11fef0780932e733bbd81fece420990e3db191e36
SHA256def47a5794eb45fbfeabe42d5c53fb3f97e43c066a2cbb2916216ee7f71f4de0
SHA51294e09b77f5cf180efb9287a427991e8bbf490fb64dea67d9e5bfeb67e1aad385040d647c0ab17e254cb1206f058442450d4d3ce06826a6aa0a45d6856b966c95
-
Filesize
1.3MB
MD5b60763aa412a3dbea53ef03d77ad3a23
SHA190194a8559841fe5d8fcfcdab71e4a641f14a9c9
SHA2564b7b96a8b59347a6d2e443bac19f4856951c31f0d19502e707ca89d6889081e5
SHA512cbf8104e9832f0a788769de716f466c1f9058b6cb52a3b76fe6f3061e68cc4c1facc3dc66ddcb95c79c7820e9040d10e764b6debd59bb853583ac3de88e35b1d
-
Filesize
1.3MB
MD57884cb998979a54b0deae360a1179124
SHA1fa99d64c8ca9c9272fd1a6954dd49dbae417889e
SHA25633e85eba8f473ea766f2ae2a035c2455674b82dd0d19397323d67251d633099b
SHA51299760152b68ca42b6e44a194eb0dbaa806d1c1cccd6fc3ae566d6ec326a781f4244ba86e95b88a58fec00e41d1a98a338b4e881b785cd0005262a6378cb27576
-
Filesize
1.4MB
MD5a3e8824d5de4f306427dca8390e12451
SHA190c8a5226f22c7555395a7a9dcf34408f59eae5d
SHA2566efaf0cfbdf1863451da3a7e755cc30073d391775970d62a6c31c7c1f5d7fbdd
SHA512bdf45e6a409ca04bd7dcfa624750276795beb114c397f8c20c7de1ea33a3bbf76148762e09e9f4080dde195ddc5d6dbceed3c510fdc1c5c9ca4c9c622d9502e9
-
Filesize
1.5MB
MD542e28cc14cc65d437c01ac8aa28342d2
SHA1f824eac81ca65e6b7d365db32b5c945387c9b216
SHA2565cab04f629b9f97087c4968485c8a6809b0f97f8362caba5d021e61d5660d91c
SHA512e861c3a5a3997208b7d55b55ae5275d796270b7dce30a042b1e277d74b1f0f81241ce9bbab0accb303dcaed5fee1d658c956d85752c05a859221acd1f7c377bc
-
Filesize
1.7MB
MD5ce1ed53798db792a2f2dd0a9991b389e
SHA11d136edfa70102253c6d505a6d4d27a4702e32dd
SHA2564452bdd414cefcd91e6389bc8860571490d22bd09e33ad83497cb3f00b8d6d6f
SHA512427dd980e374a04beec9296cbb27939ee17a0963dbb3dcadb180cb1311c7bf789807b0160b1a1f22fb0bed2760794a75094600bb026c28bffad08ab95dfcc3a8
-
Filesize
1.3MB
MD57ea7bc84dff40c9a0ad2d90809492ce4
SHA1a54538909c604b7fbac1501a8e4827095f99541d
SHA25626c59f8fa19ff7f25483f4a66e41bd77ae2ab6b3554ce352f25e4791253afb70
SHA51208938c547218153458f2166a64c44b27028536d714d51a8c26b1cdda8fbd22c25be28df390210d2411f0f4013b95874956c0487936ad0d0093eec1cef81fb4ef
-
Filesize
1.3MB
MD5cba272a8b73f7f449033957a1812ab94
SHA16a555e44f0aba62d7d150755405bc30ca04cbc95
SHA2567b1d3680b6b85ac0105e41493d6604d98776fdc175e28c57edcfdd8d4288e1eb
SHA512ec353c91d5bfa71105d7f89c323de83af2d2996fe11f521651f3fbabe452a34250c7faaaaa40e439c928d3e221e6571a48b0fcf496b5658295b7d8a07af12a8f
-
Filesize
1.3MB
MD571bdf411401a8861fd44408da76d8f6e
SHA1d8424fdbe702bc409c49db558129031fffe7e7b1
SHA256a09010e9d00e04e92a0803ca82cdc2f862fe17a0ad4d4cbfff7e8eb7a9202560
SHA5127a2cdf8b11826b7741c542bc4a3e492293c5923278c7e2a04e9b856bccf38bed2b0d2182d8de5d577af96b50d59c43b0a4bb150f890a5a3a283f46c3df8f79f0
-
Filesize
1.3MB
MD5f024149eb663ee6fdb9b353bcc297a98
SHA14a4e9f5828a0439a59ac81350cf72a50fc0a2ab8
SHA2564b90639a6e9d5810fe29425dc06910e5b0addb5da5326a330a2955c15781ffc1
SHA512327dec8ce8fb09b344a85d0697adbae8b238fb5efa3cf0e88f42a496b7d2de00fc48b228193bad95ff3ac75d1d229147481a9138db6c7c5e7a3995155fe29382
-
Filesize
1.3MB
MD5448d772ec8bd3de157d7dfc6a2b45267
SHA1ac024d0fb3e15b16b2d4a44d0bcc99d40675b128
SHA25629588772f5d2b00c44fbce3f1ab86260a1398d6b9a9d6b1098c4152c88c8af8b
SHA512e04ab640356365179760c33587f185bd1557533637bd236d2d01dd35734f36a06ec14010a3c9f2eaf7bf7269f0cd3d72922b3a0667b89dd7d4e01204dbbe6478
-
Filesize
1.4MB
MD5293bb92252031a2d30fa1e2c18d0e935
SHA1c9f501d2799b41e14b0a6d9f9ba19e61f8c5d0d7
SHA256b292225e82c0d37dada10d0207ca98a3aab2eccc51a2dcf187d37e8450514226
SHA512903ec837b3b8497d4c147b1918d6ff597f2d29b41990cb5a1e09fefb4be5c4fb842324fbcbc8510d89d65fb98c21db6825e8503715ba53884a9371f122ed7727
-
Filesize
1.3MB
MD59797e51bce2a92d87144b176e671e40c
SHA1d4169fbafc205f6cfa5d099dd2c93c97dbe2eb33
SHA256ff08f4ca51625fbd2cb6a40dd70a3875ad0dafd841b4563b50590be369079ac3
SHA5126f47c4ca555063890c313650bdf45582b03165c01f789a3056f2dc8aecea9026bb059e9bb531277fb8148e92c5a8822b2249f4700727b9b8e0bccbcfa65a28a9
-
Filesize
1.7MB
MD562da509120bea0c7451b77e470e81913
SHA1f626717890b17b73db691fdff1c181ec20194290
SHA256321ba1abaa836f55ed60d62884fa388b12154614a37068662039fc1cc7b0c862
SHA512bba959fc46501d15d5e11e963352c329e72b1c4b65d988b627fb4919973bcd2eddac0b8ddcb1eccf4662aa6796cfcc5d5a887d1e86ec10bb0fa83a71c74557e1
-
Filesize
1.4MB
MD5e869768a21635a84863f06528351ff84
SHA1f01867a2bb54e8e153a08219be04ced3e812e931
SHA2566a1b9697231f4025f5ff160d638bbf09ad721211c99e8f611c64c982c3b7b30f
SHA5123fea2157110d07d304365ccacaa1a26b38af5d165960e5c140c0164a38482920d19cb241b5cc889ae64748e0500ce5c7333bd90f10626b1b8fc2633b3fd06c46
-
Filesize
1.2MB
MD52aa33eab1775c4a1ac6f55e7b80c8477
SHA1870c2adadf729ca91bbacfc55c7173c84d1651fb
SHA25612caea5bddb3dee1a835e386b3027b953f2b9e59cb9e4940606423a2b0e9d28d
SHA5127c1ed9d4a77e4d74880b6a8cce1b0e38b7ac6c75e46fa90ca93d8418a902239a88a00dacf3d003e28914677eee6f1d54e6f70d3ebe96f254e8454c41c6348d6e
-
Filesize
1.3MB
MD552c517a1c1a791aa7b1c6a8b9b13f9cc
SHA155c4e27d0484ce1c61dde52d066851e3dbd98411
SHA256693572ec1557db43e789a8629ddf28bf13edfcff932261cd691392bcc4e08f1e
SHA5128c49440a9c68133c1f123b89ff718c40d9fe2aa961c65cb2c92ddcecc252a7b9af4fba24b9efea51d75fa5556893fc6f6e62d7ef17a284d5ea603c71f6799f35
-
Filesize
1.6MB
MD53e3b36997df8dfb7fb0de88264f5bf3b
SHA17a4085aab3807fe379549ff61f9c0ec602a041ab
SHA25682a2476ae247be5f6aa51991f6ec5f4a9964022cbda2eed321f2fe784285cbcd
SHA512d0ddc49a8216c5b808963e9f91c36fd2fdd03deae7077a20f1344a0ab2b7a6150ab8e74f0403b62e39445c660bf75980d9e9687ffa85ae4aff7ea4a1e5b6f02a
-
Filesize
1.4MB
MD580ed22191f182f1319804eb70b130a71
SHA120f10428ce82c28028b59d4c7679bf8531140806
SHA256c285808152e1e914e46ebd2df9875256654b14611ba2f4a0a04f7d33f4048919
SHA512d5ddab6d66cbd5b1f0dc70a882f71cd915fb1e179e7b1c42f8ad23afc2734acb71f9cf0cd0cfcdbf5b0fa508de6d19cb901b886d9b33420ce9ad19c61b64a19f
-
Filesize
1.4MB
MD58a5509a1f176765c45ed1c02449f9655
SHA1baf3114798dc3f9bc79805feaeeca0334a37ca5f
SHA2563520542ebdad4a5fcb65a4f466473d7b405d3309729cd6524756259e451307d3
SHA512c70a6d494cab9c04d15e9298006f0bf5a1ca4e8d78700f1b0603c03f4b2aa63f33fd6118b2aded72908c0473ab1888cc6790dd8f8227cb54c721ff67c43c4289
-
Filesize
1.8MB
MD57926efc26a71c3804a9b36913b084ea9
SHA11adffb13b228f9b2ea927a01a2c3a6b1a4d4c6bb
SHA256b7b98d67045362779fbac91840ecdee8438f5db9ba0d8393c4186d00f2fdc809
SHA512828fce9c9caaab2f8f4a082635424923d5807e475eddbc668d39104cf7639fad9567d98f530420ded22ac885617206eebe3d3d6dbabe354d6ff54a3b5d345d29
-
Filesize
1.4MB
MD5f83867d6946f29d39529079e0521685d
SHA154e7f307022ca1e09182f42a0ff286458c697714
SHA256f3d817794f2261cb3fb1c228d40d654f25242a44e0b74506d2d0be77ae5b9f41
SHA51272fc251851f4bfb06c9eb4d203170bb068f0ff1fa0a951c96f7d6080b9eaeed1b146ae9db3da2fd3fc5941f54a797e939e9b60a8bca5e3b3c48af6ca29907bff
-
Filesize
1.6MB
MD59034b0eab35353ef016926427ae72e8a
SHA13cec7c0b4c8c3769227472dbacb73861e45e05e1
SHA25647537d537a3d3bc842a110c99855e6f5c093c200ef5977b93c7a7167b5f84869
SHA5122158351b297ae54bc2552bbec4c30e91d38d16c6982acd3587fe2a3e3c81ba36f87201e534aa910c7741041e324a3ebd41e5701d0a63a8aefbff1ece6f79bc6c
-
Filesize
2.0MB
MD5f6f5a496ad01d609ee600e747421a8bd
SHA176fa6085c87e8137a6c754e0f87f31b605f9ddd7
SHA256139f6e84b37aa0d1dbce6af7805826a7d7f148185a26409f3aef76feafaa1874
SHA512057f47d6cda5415ba51f60abb8c8398f906370aace15f298f3fe96c814a47d41713a5ef86a455c4b27117b61a25a2097330bc616c44c3d0e901205334d525436
-
Filesize
1.4MB
MD57e1081e5637e64d72007a76905bc1c7c
SHA1f58f53bf42482135c685e75d6fbf536bb80d356a
SHA2568818f14072206cd60b03c72ccc300709b8a72c2007cccded4562040504bdc2c8
SHA512556dd190cdacbbe66ae7d8fe39632291efe815b958ef1e612afdd1267157a3cee444f2088c94257414b3cc2a18ee890d3b1f1b0d7e0b0c8b2691af1959809f0b
-
Filesize
1.4MB
MD592d75013f014d1f90486dc56866b5ba8
SHA17091466dd3b2550fff2187e023866712450e8376
SHA2561c732d646d3a70cf80774e4f042bc99e20a9d28b8a34f2edc503b1bfad71c5ba
SHA512bf9453faef6ee9605097bdb3b365bc4add4b2ba11d9b3afadd337c6db6c08bc882233b8273d93d002ee5057e3d607502bc87cf6a0bc5714b0674c5dc6cb933b4
-
Filesize
1.3MB
MD599494be8ea9ea688c6f927a57300275a
SHA162bbf5dd40946f8ed1689417cc77bb43c53d86ea
SHA2565ad4ea4fd15b516d2784f6d57daddcac1c2ca643c9a354d8f1f6d6301efc9c99
SHA5126dd33cff74c2977a02a09c94c1044a4f7ad110a9c57ef04722a1bae91800f8a6b206e041c5148b9211f05b30d3604d057d198ca0173796540a90d83641557eee
-
Filesize
1.3MB
MD5519bcd97f9d10017c9a4096d3f5b1282
SHA19fc9801fab9d385b6500c964655908383834f8f0
SHA2563b6e98b0ff6b123f5f679c65ef0dfd1d3d880b941ffdd0864d4614c28f25b498
SHA5120f205ad51b12634ec4e5835672d54721384ae42b4466f067dbf5af362f2af465f6a5a467263f809181cee5ded71de0f76dd6b66f024bee27a4f730cfbd6f73e9
-
Filesize
1.5MB
MD5e1f53ad70032f7b5c25b43ef31ae2daa
SHA164b316d5dcbe78129d550d2385044e8ff1e25fc3
SHA2562aec653d21a2cd68bb692a6b21cb537b8c360ae7173f263bd79f4242c5031c15
SHA512c6383386a13d046636a32ccf49984596122dfc0190ed5d911aab4f2f59a6381d3c2f8606150d8fbe27d7c5b56b28b9c86d53c6b33b4c15f77c0213c4d1f22e7c
-
Filesize
2.1MB
MD58298d65b77a7bcc4d9c7a830408dc63f
SHA14a000bdd58e4bf4d9b23a77a677fc4874f137fbc
SHA256a6f8da22fe3faad3ecb5c103ebecc967a2e69953a9721a934e72dc36736e0835
SHA5121cb3ac8944b7d873bd65c394d320071939a0609b078ed67b70c0cf007e00e6ef895ee4ae52174ea65a3decd582f12304c33addc8feeef0c3c51fbea584b86a0e
-
Filesize
1.3MB
MD5e41479ff2e53cf1823cb5005a24f5207
SHA17ee7a5521ef07163294a3a0eb9f198c92608aa35
SHA2563f2e0c5925dc3bb62b306c8e297e11234e72b8eabb28e2eae130c113631b1133
SHA5128a8b5a902eb8a21a99e7828cc3e3624eb77da654b0bd45593a9464a8b380fa056c12f21c385912decf6065d17479daa70539726a1c7857db09a5c352f62168d5
-
Filesize
3.4MB
MD5962d4291a5dfac935ca1eff9b1e21d62
SHA14f68907deb3cbfeeb5133c44f12ae58d1c20b338
SHA25682d3aabbff37889695657e40fd52e38159757b7f909426d1a4a4657f48dd3c5c
SHA5126bbf39169cead50fdb9a5ce872ce73607627c05c5f5a040545f5c733ff2d45a4c33f54a4e2d33cad36b9d083110e947ba23d979ab570fc0917436b9e87c7f627
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
412KB
-
Filesize
7.0MB
-
Filesize
412KB
-
Filesize
7.0MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
7.0MB
-
Filesize
7.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.3MB
-
Filesize
1.3MB