Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
153s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
10/05/2024, 14:23
General
-
Target
2024-05-10_093cffaa92f8957eb93dc82ecb6c7e94_bkransomware.exe
-
Size
1.6MB
-
MD5
093cffaa92f8957eb93dc82ecb6c7e94
-
SHA1
c7abeef9b5baaad6285fae9633f45c3b8363c621
-
SHA256
0342516f60a034b899f51c497265f03f615ac8ff334b5aaf5b5dc4f6a6fa9b3d
-
SHA512
2c4fc5317084c7d5d16d58e2438055117adf2ce85c545a4fb1938e502e898e1cf356ad0a04f851ae2da4b05cad91fb0e090af2524227172681823a19c5ced3b6
-
SSDEEP
24576:c6Bo8NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:hBogDUYmvFur31yAipQCtXxc0H
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 31 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 35 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 45 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-10_093cffaa92f8957eb93dc82ecb6c7e94_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-10_093cffaa92f8957eb93dc82ecb6c7e94_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.52\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.52\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
- Drops file in Program Files directory
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3708 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
MD53eb94ab1fe333db60d56f67591ddcd8f
SHA186b4945b0d338f26d71cc693ef6c600733e10958
SHA2560c562eded580421c4514bcf9a3b4f2a4dfee7d1983f8f40eca208ca3c6bd2cb1
SHA512198a23cf9b54b3307d904f3004ba5e7f5d2643437f15ea930ddb6225daff68115b888f99c8e21e60efb16513c251e9c56491b8c5ba846f089b8ff058f9e369a6
-
Filesize
1.6MB
MD557aed0a5fdf9473e4b72fd61a5480379
SHA1b1c62ad46fb00e2f2453e027b46f7deb4ee95516
SHA25665f65b7e278c32b6c8fd9214a38691c93a0d2712e0c54b72bb69fc355183061c
SHA51290103eeaa6c065beaed9e8d8757d7b64927ff109fba2f07b83f1f74e69e3e485f6353fcc0628e19e39604065cf0b51a46e36ddfdf29824afee69994e3084b9c3
-
Filesize
2.0MB
MD5e05518fa74c203a2a41822c83d3ee0b0
SHA136500b99fe606ebcb1093848b4773864abf7f267
SHA256a54ae87d001b5f0c7934f0e7ab92f9766e35e6f28090f89bd8ffd0e9c734ffbc
SHA512961d58920a56cbbed30c4f1ddcaf00cdeaa688cef1e598e49c79d89b76b19d3810212b33793d900fdf0c5fe71cbff1d3daeca8f70d84b3ce7cdf8d45bdccc853
-
Filesize
1.5MB
MD589a762dad41c118ee5777510885893f7
SHA10ab56f59de89302d4d2b131e23057abeb7121b6a
SHA256b507e8ca6e8e6472fa40ccce66a3ffaf647864d81e510dd09f3bbeba8fbd8c33
SHA51280c0d57f24ef7f640c03612df313c5e80f7a157971aa7f3547f6205c379d1106bbf2fd9b750ef7fb5e6dcc507e9c13dd2cdb942791eb691e36934801e4297c82
-
Filesize
1.2MB
MD5316f200cb6f460ad5eb7b25a16a6c928
SHA1190408512314b5e57388ed87b3e2a21dcdf332ad
SHA25683cae19ce42b16ed48f494d7133b6f3426f8e8ad16aa092b9464e84d4faf7521
SHA51228c4b9cd0d55ddbdd646688bad69a86f8fb69bb0820552976a40bb7668c0b833eb0f30c658f5336dfd907afc045ea3d5bd3a55330a635e34f2691b5a91cc9164
-
Filesize
1.4MB
MD5925e3a5a66a3544047227f6e6436a2f6
SHA149cdf5c094fd493369f69a99d1ae23f1aae3f317
SHA256f077442e30f23cd3b015edd2f1cec6d5a0ff03da340fbb9bed4516016027bd66
SHA512d00f23b609a95567f64691a884e806d6bd7acbfe1ca288599d3c5a810a7feb830db48b25c1df2d23509a72371d5a51db5539f7c32f15d37d4f69aaff4c3e97f6
-
Filesize
1.7MB
MD5ff7df4777b08e133dba9068ff70b0420
SHA1d890f4236cf37a9cb6e090239bf4c341b9df04a9
SHA25664db9cec4be4990265c01cec6b9825e51cc2befe08b7c8066c2d890983289263
SHA512f45f80b7bf77e636ccb4067aa17d4ecee4e121d2c4985ef7837e679072d3aa11470ddc71820d6e9730f1d7e59c8287e5605774d03220234174392aadd9960141
-
Filesize
4.6MB
MD57593eea2c9c334d67a5afd84e9e7260c
SHA1801d05bcb4f638342595a5ea946eb60ef734aee0
SHA256bda76e16e09c16f7d75e9dd8fca4bfd42f271a7c0c60d9f02065327bef65ec0d
SHA5126da8a9073356b9d31fa8e68afa6b4e30e37caa662366bc5a0b683d9b5f1dd292b0812b079ab4bd484639e70e7640d080c6dcb6bff08d236b039e4b08c603211e
-
Filesize
1.8MB
MD524da9e442f7b414f261be2a3ed0b37dd
SHA1952a55cd45d8d016b599011371bd7ae0f264023e
SHA256f0fca413a47c2ebae5cbb69ffae3ecbaaf0fd37634050a14e5d776dbf6ad8690
SHA512a8fd6b99807678784ccd6fe98392117b1a45e991eb390cb1818c19032c0dced330d6091292b6c060d83ecab7aaf175c018ac9a2a753b84d6116e5eaf82108777
-
Filesize
24.0MB
MD55ef518e3fa6cfd469e9020617b5ce9cd
SHA1f10375dc1dc8c23cf6212c2eb6a63a06deb50244
SHA25686e0b30821f7d1395dc73422cb5fddbd18202c4e603962dfd133cd6563640a81
SHA51219b1c5b5e237576c9fba45a6f907b568944bff67c8d7675f1eb2c088835d90cbf33aa86efc991a7d4316ecb712d99b27fc3199a7e747c15e139cc3d0b9b5a9bd
-
Filesize
2.7MB
MD53bcfc808231a9fbda4dcef20cafa0e0f
SHA192e8a50cd5217f80f628b9856b4a9aa67cab4bf9
SHA25698461d0eefd97faab5bc254efbfbe6fecadaf9c6ea7991c913824f8c082b4ee7
SHA5126f3426e9378fed3c60c32611796935b3b9b6952addf0221a78293f06931731aba3d4dd67abbef66693e990fbbd97005ddc2ab9d81c86e10e3bf246daa94dc00c
-
Filesize
1.1MB
MD5b945c3963ead6442a77cbe2f577dadb5
SHA11cf679a37212899ffd603eba281d1e5862739964
SHA25697e18db048c19647482011d1da90158ee62bc59046c6c257b80d598e803cef64
SHA512eb8638426b877db75088418ef4ae378b7703ba442da2376a052b873903c6152e48670332c2408aebc79ceacc1986b9012d45577e285f892400fc2ac73f3c4f2f
-
Filesize
1.7MB
MD5a53e1fad95d25eb7c020d8ffec093f86
SHA1a3480d6059bcb04274da442f78240c6cead9d809
SHA25638f0a8c759eb4e19f20dcdf102d03270f7ac55805082865541f185ec821c5d3b
SHA512949dbb7237ec522aa3f94f42d9c429e3a5cd675253a63dc560e4137c90f283c4f2e763e4937759d59110c984d0bfa8e23323ebaa7a00e60a7e31e3717375a517
-
Filesize
1.5MB
MD5baece7efe1f489181bf169d796c9d9c7
SHA17abd49925f69cf9b7c2a1b8b0fd3c2b2dd1c3f4d
SHA256a659e63f3cd48cb19ba8fdeabdce7990784fffc9ebe48c7cb5632beb53dff3bf
SHA512bdd5184989729eca1d600922f1edd585a6d4bb9e4bfd47efba8850841805f25ce248fb2ea65ce3f54100f8519600bc26cfaf0df9c11ad2e54b6fe62dae08d665
-
Filesize
4.8MB
MD54a7951f9d6debcad74393109384e31c9
SHA185172cf441e48399d57ccde05b2c0b7326a907b5
SHA256689e3f1e8c402942715bb9cf8392c8eae664db922fcbdf7200cff39e508347e7
SHA51234e5c23d4fc8968de7b2bd248138b2945f2e2aba3214ffdd106fe3201e1257a55c291b571d22ef260dbc615f87fd3701467298ac29d63b0e360778f58eff3825
-
Filesize
4.8MB
MD54d3e4c7e3bd015ee82b245712211c7cd
SHA1c11599068054b013d4ed71e9e064f83cc2644840
SHA2561ff35a97819d5edaf416b12d09033594749518f0e8371076c448ead31a428154
SHA51295a2864277aa0e139e7432440eb89bd682f9d38af31733b46cc4f559af61ccd9fb441edfd161c612e777a123bd82f46088a2f86c06ef8bf1b32562da25b03622
-
Filesize
2.2MB
MD5b38403b4e32f2068a011bf50dcbebd92
SHA18cbcf9cce0cb8c6ed8a324bf4ca13e7e02ed0653
SHA2563427b62b3e63b4729f7cb0e2cf64eb2b69a12399fa20624e00ed829226f22f19
SHA512920c34c465ac0f63768ac54473b43328e0cd7aeb1da67ee72de7ae4b8dbeeaac742bbef1e89df47089a3674b98af6c6da64784e604820987e9af5dc41f8fcea5
-
Filesize
2.1MB
MD5524512b9c61f54f0af7e1486264019d9
SHA1e4ee84a40ac649d1e89c260554d0182ed4042c89
SHA25603868b897c9f16325e5a00cda4964048e8ef5b1ab047bf16e2002e802ed9a8de
SHA512e38b890e2b84097a22baaec5224d553e781903f69d66f221649e1d01b862712b70c5295fdce18a9a3f82a1a378916aef283b9d4212cb4e8abbfe2efa67d07157
-
Filesize
1.8MB
MD5ea4aa4da6a26efaa49ede2bff37e03a8
SHA1c1da2c8bf6adb6ee1b840182d41f296fc3cefca3
SHA256bdefd515a440cca2264a35c2f1f92feb0e76202165c0f35aff80b90a438d1148
SHA5122832658889f1127f905b2c26e62bd402c4184efec57916941f738d5aa882798a005b1bc6e5945dd4b1d9f6e8484db215f8401dacaab86a9aec0b2b9bc2ec3f6f
-
Filesize
1.5MB
MD5f80e66570852fc70edf8bd8126cae1b4
SHA1001d7282321a6ba0ded8df0a34ef51a264c3a98f
SHA2564f89f58b2301a86a5d8fa456a81bbb60f8330a1b4b3bb76513684c709d2951d1
SHA5124a5badafc922e91ad8b222ce09cc6153f8141a6eeb2e6d03e50df1b5bbd74d1882e18d2ae749f6d2f309e64e9bec2fe06700a9a10280662a0a668fac7364944e
-
Filesize
1.4MB
MD560a38572cfad9c793ad538703cc3807a
SHA1cff5d0966cc1df6c76d37a56cf5302d512ad6e48
SHA2565696beb5bf3c9466829e7800d7afdd49f7bb5e12dcd5d17e41cc880280972931
SHA512d06dcf57011c883a11eba3217098d8bee3330f16626535d4300e82e3386bd257c1717c187d57e489b3cb45c64a9f6ec9fc9af2c466fb79bee304a903dd320bc0
-
Filesize
1.4MB
MD5a85844410eafc4d41b8c4d8a4e08730e
SHA15ea7b8a099976f69466a813e6c3c9e8c238f9cb9
SHA25670a9dab01baee118ad31de54139c05134a0b4792bbdb6fded8f49c8edf5d77ac
SHA5120c32a4bef1149ce1ac714a4a9fb09d86722dd6cc8813c50927f5b0edc13049c917c27a9d8efc03b0d9c5ddfbffaca4f7c13ffd09f6d573caef22dac7dcdd26c4
-
Filesize
1.4MB
MD59bd214e757248914ee136865e2c1cd39
SHA107d72d55c20cfdd8cf5011fabc1e4f9e9c93cbbc
SHA2565e2251a214387bd3f1020de6ad2ae5f5f5c052a0ab50548c5a9bef7e6872895f
SHA5128b48c4486d65c00588c12961c85b783efee914cc2dffbab6657b5e9e92ab1aea5dd2122835d14a46cfe7dec048abfd95546ef089a24d722ee29160a50ce06008
-
Filesize
1.5MB
MD5a047a73dc512f3b6996d3a602c817e37
SHA1965e695c9bbfece700c1a59d4e1d373d807c7be0
SHA2561b2e73f4b9872eff41d6e1fb48ade8cd4861da183d31fd4562281ad2608e4836
SHA512c9879e33b0e4b4b42e1c3a7e624aa8a7f360818b25188ffc80051d31b2a10b3e21c6db5b14d3e89fa2a70ff3425c26b95bee57cea732aba3599e0f2925254132
-
Filesize
1.4MB
MD595ec1216b402e9123d0bf19b823ea52e
SHA162ce7824ddb3ab600312afd96a9b07c662d9c1c4
SHA2562872cdf5126ac3f6eeab96f3c029d6af5092f5ead04f88a0f18054e366a8a14a
SHA512aa5588ff8b09aeb916354acfdb3afb15d592382df9ae2804097e5f740af96f31983e0da9fc2a7f0b79f7ee9a77e9456063aae05b69ce924459a69e512644db19
-
Filesize
1.4MB
MD52d4732dd03829bd90bb627b94e698cff
SHA1288a940dbd5f1320efb4d841287cb1146476fd96
SHA256b805d58a58885190a886ea083d67e9028f0e31bafe45508ea3f2f7be2273a0f2
SHA512dd41104392df0267052c7d7faec75d665d633a88a25fe0f63631b469529156bc32854c44ab970f134e9764bdb4d4964f53a95b927e5dfd0e5463a1b1c1b92a33
-
Filesize
1.4MB
MD502e2cbc031faa487f3e016671143f819
SHA1978b172c03318278a1c05f9df73da0a1f0b4b1f1
SHA256cbc980962f638cad369f6b84ac2ba358dd925f5e230edc823f1692f973915c6d
SHA512674bdc21d16dac2a717cbe4b23413d8aa728ebcddfb0f1acd773ba7039b15b67a480afada02c235a90cef64d3dd05c035d9e0d55f2e93ad133877b1214aa6067
-
Filesize
1.7MB
MD5ce4885d7a45a3079bee72c626270f1fa
SHA1d9e0da02d969b00d41ba747257671ed40c6a72fb
SHA256dfd00ff6a178f4ac30c2133dfac161d2cc9d8575cedb83932e9c29514e81b271
SHA5124bcbaddf7c72897bed7f98eb446e0c81ada094bcd7f68df05efadd06439cfc94d6c3cf141ced5359a09a80172a2dba81d98c9bc4fef121a1eb1c24152521c411
-
Filesize
1.4MB
MD5636170ed90680e89302492b8c31c44b9
SHA1a3a3cedcf205715d0c6a37e87ffc98e358393a71
SHA2565d8b0339ec500e83a769b77467f4599a96a4a29b7a7cb51dccbc0bc39b949ebc
SHA512d147a80b53aecee8c53381346507a2fc0dd5576ba3c777ad5228cbcd78514d77a96d68446b3e4d940873840d5e0d147465cf6c199ee3ea1f88868b8ce6765473
-
Filesize
1.4MB
MD5d5b7089a2da221441f79d952858e310f
SHA14bde791abfba9ce6cf1073051a866d5a7cde1544
SHA25643e29f472d30105e4a0a5258a5ab97181cdbd1698eb412b6f371de99ec76a0d7
SHA5129987014d5c57b2f98c20749e337b94c344f4ed5d800d21daedaa0fad10b28639e1b184c15cc3404f0ba7ab900c6cc8b7b1f2a18bb7c8490549240a8647657218
-
Filesize
1.6MB
MD5ebea7cb11a0ddfd420fa190344b7afb9
SHA19c01564b7db71afa698d06205f537da46cacfa9a
SHA256698c6556d6a96031ccb7ea357f6d972bd671845b1ebb44deb245a1c7a3728329
SHA512668e4e7afb438a7a3974d0fa185c12e8185402804154aa10e55d57f98b41a21ba49e9266a454da717795f3107cfb1f99dc2a24cb2b5d0e5c10602df157e22954
-
Filesize
1.4MB
MD57b75e3d6cc59ba411b8e1772cfe2d776
SHA197d771d7175d312254126a24d1f1ace467735e31
SHA25637bd77b74b8c5ef2a87f007d8cfed12e62840f05df0ce8ddf66717bbaa1567a9
SHA512548d01270674556d2f75b329c9b08c25d395bbd3737025e7df284a258f1b74115119a3d2819fc55c0d76554baed848ec96d5fd24c1242959bc91015ea0f295e6
-
Filesize
1.4MB
MD5ab8f6dac908bc8cb3defbba9e9c726ce
SHA1c4ab3286e4156d62c3658f47c4da6734f550be8b
SHA25698ed78c28559fb74eb0d1c957f220cfb9d3b56de93bcf74a09b29fbbfda5cce5
SHA512620fdd55837be504c266a0f267623fad8574dfc8e2f3312d1b5e5dc1402cbbd8112c5018eba7286271e8206b2aa8b11f05c469f66803116b4c23c8938bd3f564
-
Filesize
1.6MB
MD57c979b40f82ff02fd241cc1c283d9470
SHA11b90201cb592cc3a25524dd6ff4d33d0e67af075
SHA25628394721c215171b8c9905a522358b90053252c1650b02aed214bd4d60282464
SHA512f26dbf07a8de4d7a65e8154fb847c1b8886c6e23b81dea33a089c4b68c0cb2ad8ad8e321b0af1e45dc4026402b77d892046b9029ab368ef2264202d5f77743e6
-
Filesize
1.7MB
MD575112c2cd49bb332b34dec17ba7fe8d0
SHA1e00638e7f2c3eb13dbe2c28e300b55ee3c57f584
SHA25607cf07f1c3b7e3a5b956aa684d702fff8ea0995aae962a6eb50c70bbf5952b18
SHA512dc0da8498a5661b9415d5f13ab6facfbbe466b9a28b9bafb42908baa693b86af2f9041518561166794db2f0499b0991121aec0934e0c56533d50b924c94057f6
-
Filesize
1.5MB
MD5d5f9e9c28a8965c846bf9203ac60cccf
SHA1218a6ebe28452775aafa9eb9af91688000c80316
SHA256558be33a67b99924a210f547ea9538cda4308320a27e0c8123e3299baad2bc3e
SHA512ef586217aedfd1a86a0b15d3edc9223f33425920b21868843b1408f7d95c4748c3d5385fb5d7150f5a869c48c139ac853ba718a5017ac04c50b94442b4623966
-
Filesize
1.6MB
MD55585662082b0e3e954b93b921c3fc352
SHA169b9d400ca2825ba9d0df9d33b5a695f4522a7d9
SHA256746fab91d46a8b200ad5f82cdb988652dfb6e0535d5e24e6bd88bc3990c3bea4
SHA5123387f427f6c5601bddd79a4c47a138ffd276e89807525a31865831ee6952cada5b665babd25ed03f322668318cf1024f0d84ebf43d4abf4b263d44f1bf53c8ce
-
Filesize
1.4MB
MD5ef5a7c40cbdb307d6ad1b3f8251f17f2
SHA1b1f0029fb3299e02dba2769131b1c994a39898ab
SHA25632a0673a0a9c45348fe4344bbd107e264d3918f29bc5678b04854af98736f7a9
SHA5120475753b91d744ab5f12e030512db6a140b0b4f918a84da3a6bd86a2fe05fbb2cbe9247cd5dc82783a1e20dbf8985c4db25e9c880b1b9a8b3686e4b4a4554c7b
-
Filesize
1.7MB
MD5478ab3902c3bb7ce0b8a2e436167e64d
SHA1a558017e3c5faefc0580cd7fd539c1da5765574e
SHA256101fab47631288c004380a5ed81a1df6bf27e23813b1274a63d213774c5d3e1a
SHA512b8a25a86d2133fcbba7ed63f9726549351886aa68d62ec3794eb19ef741901be601d4f678d6c325c9e8b088e5ccf4cbd96bf1ef43be64a12d32e1a3e65d26313
-
Filesize
1.5MB
MD5175124baf044e8ffdb61d96c5b284d5a
SHA12526954d9bc8e3dc363122e35eb072ee3b94cc23
SHA25644a4fa96b1a10a28de9086b04382be230ead8f19e4e8989477645926ecccc0c8
SHA512a54ad509321c31fd9acc7a3ec828d1d89a69e60bb4d683a6b2e8173e244fc7317bf3934587f4c012720d223bf4f59509dec1f9a6d20b8d939490e87087393157
-
Filesize
1.2MB
MD55a4f1468665972e22775ec14e746bb0d
SHA1ccfb93f6a8c3224dc6d42aaffc68f9084e9aa410
SHA2563a4f7d9bd30fe21d9d8a95da539ef33eabb1d5cf9553a7c06cc9905b992c3ee1
SHA512bc6894bd32242def5ad9279bac78b5ed5ddb1064a3dbb207149e99dd511e62c93a5b35905d1b344ce70237cde17a23be347fb3a0b67aab044857581c4a79be90
-
Filesize
1.4MB
MD58d597dd387fd1d83ab83f686c9707103
SHA1a788fae33f8d470208e43d2cf393fc3b471a370b
SHA2569bd49e0ccca488228f98e17aec0f809b77538e7671377739618f7311427d8590
SHA512cbddb421134a51b2cfb543aae5b833dbbfde60fb250d2ce24d6a708fd85c1d2fea01aacb5f18d87c73dc5ba779209630d72688aaa8edabef52dca86212b5486a
-
Filesize
1.8MB
MD536e11f0b1ec571c29c6d7dc52c0bfa29
SHA17ee543b93cdf3161101ac1d7548721f6902060a1
SHA256b421ac1ec9239022d57d7b1e62237f9e03293297fec18745ccef63c99be0fca6
SHA51221031422f2563e889d96e6931ed14b27771b218925f63eb63bc7a0f8115a924dc90f156a9952bb956a5272385e68f3e7b72aff3494c1ffd9d0a073d069d9c23f
-
Filesize
1.5MB
MD57d4cb0353d609d77996fcf5a929071e3
SHA1c4bcc5a68290525363bdd5615505824736fc021c
SHA25643ab2337c35ac3e6dd4909a1039ce91747219108d1d4665efa9d9e6793e0205a
SHA5126fbeb500612ffbdc021b5c16182d50b25b2302a11a47e1dc18a0a9d01a46457c371c8bfde27f7e6ab90c26922519062dd8140b7213eb04534673ea7fe50647d0
-
Filesize
1.4MB
MD5f3108aa1e6ddb9f9dbe77bc7ff4afaf4
SHA18d59ab8e2b9ba8ffa34bf332853eb9fd081491ec
SHA25693f1ed02908bcf7a265ad7c77c0e87128fd283d63872f5da9dc5bf256094a40e
SHA512576983d7fd73d03cde578ac47952a37f36461789d82d2befa0a41977fec90f8bebb2e369223be1443cad74fb80b86b4c96df2097468a81165f38d0c1597594d1
-
Filesize
1.8MB
MD57541ea3a779f05feaf75c60764cc7541
SHA10b4d404cf0333de4fc533b81dae2d325a75f5ccb
SHA256897e6f0fd1b69c9519ba917ef172ee59479134803744ef9337375c85a3836843
SHA5128528b2d1ad2b9e42cc7ef0c578f82b0cd3a8259f9471f0d265312a2087ea61535bc99fec15dfbe3de2b6adbe3edbb8372e48c37792f19fe0b6999631ca8e8525
-
Filesize
1.4MB
MD576a7343835eb751716825995922cd1f7
SHA1d65b6ad6986a59b3b88737e5c2ab405229e38d26
SHA25670aa590d02a5cf20296af211f8f3a7cb8b9fec5b0e6ad7675653b6453686b53f
SHA5127e90c44e654c488f44dcbaca4b1e15ddb3482d4a09c457c548c47e179e8b0018ede023322fd07e09ebadc34f958f8eecba520457f89cbb5d4bdae1c29f3a0dce
-
Filesize
1.7MB
MD5b59739a897f9e42f1f756c8cb0ff1abf
SHA1751f9dae1b06784858aea33c423a5fb6fa3565fa
SHA2564b633741438dbe75586307164f465d2978ae17c97310342ad7ad40d34bd24c43
SHA5127c4a31546134e038ef0636561657ffc0b0da1b60a9391d282c16c4b36f8f552ea82717cc4229db0b270322e08a249aaf059f44e1de78ad0a2e869beb0f5ab925
-
Filesize
2.0MB
MD5e68e79df2cee9c5430ebd3cd97cc6fd2
SHA19c466738ea3aa2996102b93b762efc2d880ab72b
SHA256749fd181b2eca884367eafec0b2b75820206fabae54348f78aba664de3378048
SHA512f4732e095c8131e504264f25e30832ed4c05bf3e9251a4dc173abd63f3de9600bad4ab06f5ce734c89a0145655d58b60f61a4d5a24ac8a55c0362340e373c1ed
-
Filesize
1.5MB
MD593ccd392ae851d525194dced39b3e96b
SHA127c748e1853a367d703f678f30607a60f1465f10
SHA256d6feee6adaed95567cdf0391e0e3c824b8b09e92d40916084dbe22d87e4da757
SHA512d8594a82e5826a02e174d926f824946a0f42d0dd151660a13d0ee7a43e0b1cdcea55b8793480f9e1611c19f6923a1b247ddc965a7cf9d6886b9c48d8b4bed8ef
-
Filesize
1.6MB
MD5b0f8b82063833a10f8d5c497e87d5090
SHA1f792215504d1713ab2ae5a6a94881eef396d52f8
SHA2562f615e55b5cee85ac3fad215b74ccca503b13aeab00f727422a9ae968aec1498
SHA5125eaf435bee821e0e0c465d9ae72797bff5977a66f05ed065f91c90c5d2cb29eee90190cd8b1dafb28ecac42928c3571b71325d6a13e9de33243210be8eb2006b
-
Filesize
1.4MB
MD5a3d2f47bceca8592971932b22e32b3ca
SHA1dfd322d48ab408300d923a5f679222b7971829d3
SHA256eb6a2796053f43a58676c6c8b417a9df345e9bb315461253755dab65b7dab856
SHA51295b1dbdead26e9bcffcad2c31518ca4d85ceefc73fc33dee41d9410c0deb28f36ce35bc047736f3da75ff1cbeca14a313cfdb481125277cd4e681086b6097860
-
Filesize
1.3MB
MD57645b9247da18622f7fdc13119fd8681
SHA17ee458eba4e2add5125803847c10b778c697ed46
SHA2563fb6c9678493d4fdfa578267b415f060509e710c2ec151e7a0c7bc90c73bab9d
SHA512efbf1e639c4b4d989936099a1d162be4ff0f4a1f7ff4409781b93d6f7a08a3997312a60654421f6edccd51d56bd9bb13660db31262300cd382db0cc33472648d
-
Filesize
1.6MB
MD5e2b0d9d38ab8e31b172efa07c2e6668b
SHA172a97f362e6767f64fdec954c88b5596ff8e9a68
SHA25614564baddbd4d2bfedf9c79518da9771d81aef7ac263566d8a4632bd7a7835e7
SHA5120d2b679ec4f9be93fc75fb33bb9c1c564c6cd71635df87d6a11ccdb2c60da40da50971d7b1850210d57db5856ee31253851674853eb6a3307a2b80f63e722bfb
-
Filesize
2.1MB
MD5cab7101a27f36a61e0a09d461b5974ae
SHA17fdda58692f9fe7d0f5e2843b6a51f6f0c7b4b44
SHA256bbf5f7744b878429e59d6e576e0c79cf9a1662e8e4189f25df6bd533bb3f39bf
SHA5122eb6b8a7a350e20fe5ec9d52806033674442615601448e6cc36ffad5ef95298b4ed1d3dac52eee1064cba9ae21c01e3ff04712f4c24f924c85286c603d24407e
-
Filesize
1.3MB
MD594b4e7c127cf5982c157f8438191027e
SHA17cf546cbcdc58d4ebb966f44f694d23724b6e5bd
SHA256280188f947aca887629186af9c2ab03672d1e8a49a929d19fee3f6eb1fa8d71d
SHA512cb900ecb6da16e3037fa0414bda069ca52a157dcc2c972a49a40fe6c0cee06b79bea506b55b07aff3698b4b7c11ef66e5c31d48defeff8862256f7fe577f99bf
-
Filesize
1.7MB
MD56c5489ca704a7e2eb1d5042590b937d8
SHA1cc3fda9211d307bf8bfe5beb22917388659454bc
SHA256103838c83c2e7aa27939801737e1d81be951c1c58de3ab60e40202060b946500
SHA51269686906f3d4f6e2bb84536a8be2b1e42816759ca7548d3f489596dc7f32c43d9b34f99fcad138fac6d6831436ef1f6d852c10fe92eedfb1e580679a2a6ec1db
-
Filesize
1.5MB
MD5f71fa9f706389a01702ac9f48e9537b6
SHA16a873897be82911f3e39394eccde225f2024027f
SHA256a46aeec98543ed81180fe741151575ed7462d7259124285e0cecb0a8b7b97368
SHA5124fd9745cd70e53ae53a2d1d853594925896ca5b79fb86a03c8a3b4f4d5fa9c07a5cb9256e7aedb24a33564ee26143c74ddd47e8db058c04cf5dbbfb4e845663c
-
Filesize
5.6MB
MD54c625ae23d91181ce7d3d2046d86f478
SHA11d6efdbfeb549dd4d66a246276cfb82d3015713a
SHA2569ceafbf413d5071c38830270444622640e288f87a068e77c9906381300ecda1e
SHA51274b2a3827d3a290851381b53e74da5dfb6cfe729734342a342d234f98817e2eac82eb82ba376ebdb96ab61db7d6bd70f1ea89e21843dc7b237496e4f9fcb6334
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.7MB
-
Filesize
1.7MB