Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
29/05/2024, 07:10
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe
Resource
win7-20240221-en
General
-
Target
2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe
-
Size
1017KB
-
MD5
31adead6cc21e3236f333441d30beea2
-
SHA1
e20811627f77200cfc16b43025c6e21af2435aee
-
SHA256
8df5ecfe5464d5d4e83f5eab54ea600648edf7548a31f03238ea72533b95a2aa
-
SHA512
8bc34209003958a3261d5b732ba74a2e251b50089421288e1ef3fc0cd3c2480bde09b7701a6ecd95918aa629b3be43edc728649527f97302d4d70eac487a56b7
-
SSDEEP
24576:I2lm54RdFbmXHHYHKEGGyPIruSv9yWzp/u:I2M54RdRmX4HRGGpuSlyWz
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 860 alg.exe 1148 DiagnosticsHub.StandardCollector.Service.exe 1104 elevation_service.exe 2096 elevation_service.exe 2472 maintenanceservice.exe 4488 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\cdc9b557b4b1389a.bin alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\7zFM.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\ieinstal.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstatd.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\wow_helper.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateCore.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsgen.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\private_browsing.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\xjc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javah.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jcmd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javacpl.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\idlj.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\FullTrustNotifier.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmic.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jconsole.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\chrome_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateBroker.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\iexplore.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaw.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe alg.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\32BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\schemagen.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\7zG.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdeps.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\servertool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ssvagent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32Info.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javadoc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\Install\{28C8484C-303E-4CB2-A704-E3FF47E10F7C}\chrome_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\xjc.exe alg.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 1148 DiagnosticsHub.StandardCollector.Service.exe 1148 DiagnosticsHub.StandardCollector.Service.exe 1148 DiagnosticsHub.StandardCollector.Service.exe 1148 DiagnosticsHub.StandardCollector.Service.exe 1148 DiagnosticsHub.StandardCollector.Service.exe 1148 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 660 Process not Found 660 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 3540 2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe Token: SeDebugPrivilege 860 alg.exe Token: SeDebugPrivilege 860 alg.exe Token: SeDebugPrivilege 860 alg.exe Token: SeDebugPrivilege 1148 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3540 2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe 3540 2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe 3540 2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-29_31adead6cc21e3236f333441d30beea2_bkransomware.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3540
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:860
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1148
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:1104
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:2096
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:2472
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:4488
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD59e880569423cf69c0c59537e9586b655
SHA169dc10a79099874ea13afb6ddab092b1cf0945a7
SHA256d2a06fbb8e4600a7a5c6dfd68297c4bab8b966f96b0e433bb905c528b1fad4d1
SHA5127e20fdc940b07508793b6f97f0b90170da2248a1e8da2a4d13ec232786e1e6274ec5179ea18e6456acbe6994542fd8e47c3debdd9251d5ba170e76e1f945f7b1
-
Filesize
797KB
MD57967f14c73a47f5cc54918d39ad3b872
SHA128eea1561f469bf3015a648746aaa94763570064
SHA2561544c8f30359d84038713215e517514f1b2d8a1ec30c98e1ff2f7fab309e4c90
SHA5120fc7e9b507872959b9832fbd87c1c50543fd4ddb91f8e23c8fe8b34b22cc2ca82b1e635c42bdc9650b84a43cc71031eb6e645544284f9bd69fd37c80e876f670
-
Filesize
1.1MB
MD53edf0fce6fe28e2cada294f55225edbf
SHA1bf10442865fc29820fd517762527e85b21a5df3d
SHA2567415e296c49411427bf1a83ef33cec17fd1d18f3b63383f866bed678c01c8afe
SHA5125f7a6b42b8adcff4c91d7ecfff1eea87ba990d86c40b9e5631465531853e5ea670bcc8f73996c5c8014bd083145286eb679dcd300927c25d3d30798be8ebd607
-
Filesize
1.5MB
MD559d4af16bfdcdb5ad8ada53f89c35a15
SHA10218b7934e96ae41b3ce1d926d046e7b382b26f5
SHA256d43de8a0749912d0edccc7aa109ae1e56baa540c52d914c0f3fa67359d9b97cc
SHA512c9b4f9b0d63d1e36a089ce5034160a11ea53285aa852a52c90c13d00eeb6e493e8322aa2682258fae9d08731422a75ac89798d19d7a469b4e316aa4309386461
-
Filesize
1.2MB
MD583c301cb48537d271501939fc79b38a9
SHA1b74c6934f2ef5f083fd0be94dd2723e3a04a2e5b
SHA256fe90bc71cc88aeec6ca7b513bceaa3d0cc517750b0e247d58f0f2cbdac5ec14f
SHA51244ea367f0aee19aa1c5c6afac3b9e9cc909047a2e3f8d956a86523ecab13f4c11dcfe38b036d8cd6b333cce73c4357085fd29c9d1a4b464d7736cc1f38e873a3
-
Filesize
582KB
MD5e050fee9217471fc2768df20992d22a9
SHA16f3a7420781c54d46fe1cdc1a85a682a3e1f33cc
SHA2568f1924d2988d09efbf19797fa5b56426356aab8b5a89456e6f914a4c4711b3aa
SHA5128735599d61355aa0b4cfed1eafa03326f22e10231dc04b74ecb489b9500a8ba2007c1ee5093b46c9e65b4da7cc8ccf8d16f433c530a8b5638988d52e21fae157
-
Filesize
840KB
MD5155bd92a722547bf461ff1891dfaafeb
SHA1c60689dac88f85953f1d860be0f56e3502dba7a0
SHA256512c2f14d0dd86be8af2f10ca78e8e7bf2f6f3e182112461088da1707d516a72
SHA5124e1ed95aca65075ee278f1ce1f389782fb46c8c91fc26ea452b15c5aa73d9cdd3dc7a24811577550a87eec2b3a73bde5df839ad79220e9a7070873cdece1b541
-
Filesize
4.6MB
MD51b2629ee6ca17a77f7c0fb0715374375
SHA1a28ac9b251db0fd9e1e0eaaf12c170c79f9f3848
SHA25646bed2455d17f77307f5575e4d111e70b24137e0fe791a69ea57572ecb721011
SHA512fc7437c7f78b131bee6a92d760f43b5f8b25a39088ea7ae4b9a9a0d512f43bbd56f58c332bbdb8af29a6cdf416f2335142bde66a9fbc2c65e199783dcccc98d8
-
Filesize
910KB
MD52c8dacf2c153d88bf8998dc11ec4d48c
SHA1db20c5623e08c9de0c778359dcdfd47fe36d071b
SHA25669a84e6c20df6a48fd8f7ef2855e21d8f599765a8478ed37670db6a2ed18da91
SHA512a6bbe153363eca6861528465758c9bb29ebae7bc5165e2366ee9e27a4e6f8cc90e452ad1ee44efa11a9499e1c77d0f0e99b6e8ff243d074d5f46ec9292e0f6ad
-
Filesize
24.0MB
MD50483aeb745089e88e6cb0bce53ab1ee5
SHA158a38e30b1cbf48d028d57d1e61360403571bab5
SHA256df73c062facfec7ffa406ba0ce4428241fb57cbb4f436feeb493adf3212685b4
SHA5126bc7bc948b806bf48f2d18a3bbd946ad47a5bde56b56838c4955466b3dacecfe947a206766e52bae9a5307c4d3dbb7037f616aac17b6bcb463d868ced6a7f5ec
-
Filesize
2.7MB
MD55c720443b7810fd1f17938713643b97b
SHA176a7a0546deaad77d431557c9217455431905a95
SHA256f1c5dd7020da3389f4781f7f9e7f3a99b4fbdee0543679a16e8cd87e8af1e805
SHA51248dfffff06d3fbc58574e5828c083bb9b640eda84c0cdc14e9c10bd76c9bec898d1859c1ba8d0262a7781412d36345afe8c0c29af7e83a410c1034a675e37a0f
-
Filesize
1.1MB
MD5b102c2adfa21ae3452ec6ba54dd19904
SHA13e4c9391be943b75526d605ce2d8d7c0afdd6aed
SHA25602e883047075bb551be3fc81d042f74cddd8be777f90b948b08d358fa120625e
SHA512381fe8debd1476244efbdc17377ceb4f94d64029585e639274a281acdbf23626b08a2e75259926948d0fa881e1b54a31199579b25c47c7f793af38d45035c665
-
Filesize
805KB
MD54041c2680392c46d0ece6740b210ad7a
SHA158a62b9f61c2d3160e12171d538bc42c4aa2ee41
SHA256ceb4702d94d21ec4e4ec5324009efb4480f3efa62824023efd667d345e0405d4
SHA51239e0633521f3b12d5d1a1153b6909a946f0aed363935455518ca72577829cd90cc45656e2d3644d70578646ff7c94b5140162bcfcd334d5b1d8c1565dba83a4b
-
Filesize
656KB
MD5d2d51297750f9fe5d15579e93dbd1e1e
SHA1db56b6ece4689725f7ba35a0039869470b0252ee
SHA256efa7d3940982110be9725078c06af6f8c75cdb2c1961d71ea50dfce18ea90884
SHA5129fc267cf72cb8108b4edd22aed88122a65abf37c2068eaf9eeb68989fc72a4013739eb57449fa1630ede47875e91c3f49f35e649227275e2f718ee0963270a2d
-
Filesize
5.4MB
MD57e581c35d4ba2541fe121c7c5feafdf9
SHA18cff270904f94e739b636bf3111c0d3fcc21e83b
SHA2565f8f126f068d771b0f208f0ea1ff74c8ecb90366ff47fdb8bd602c8559194de2
SHA512b0b9b750ac1bce52ebd0f9329ab9706044a45f7204a616a09209b5702277839ef3834ede992242493fee56949ae6eac660002795f565bc5caa4867c0e379fef8
-
Filesize
5.4MB
MD5bfff38407818091b4655fa970a3ec5f1
SHA16b61dc56f06e19a3e3cc6b25a3b98199d61f9900
SHA2569172681ed778104a7ffe551f337945096501a666742dfc788ff75520d9edce6b
SHA51210d6573c0356bce5cf8ee4527ff3f8aa9d0c85c6057d98c28efb9a01b1e43be16c8d17aaa3e6a766f58a2f5f881cf15c14a6bbc97db36f227013da0d977788c0
-
Filesize
2.0MB
MD51a760c8016a606e7a8607afb86d4398b
SHA11d9fd505070c1764d8cdb3530b5ca0ecf7cbd796
SHA256b450dbfa8a4f60b7effbe3ea6c32f198e66eb62a74c1d075da6b2a8b6885e370
SHA5124269867709040ebaa1dc593646cc3c2e2c9e62412e64e846cc85d40d1403d6411b36be895a51577ca2d61b487254ef70e963581768204e8589a6e56e5c555adc
-
Filesize
2.2MB
MD5d0fb24f5dfec2ccc1499754cac57dae4
SHA16c2e6cf06df051fb63a05710a72d5e004b15de58
SHA256ad7cd66d6d06a1575f355c1afe091d2fece95ff8caab1c5c9af0c40c30849f4f
SHA5124540fa95e8ae97c7d02c69881789be474892b31ff90a9690b09474375a9b6a9a27da17a8c4b3fed3dc062682b0fcfc47ddc9280b084f5ccdd1d45de0fd9d3a98
-
Filesize
1.8MB
MD534873c35f433d285e80080217e463d91
SHA11ca7d7a5896e8d632f84a16f6d47ff4da39560d4
SHA2566b21d760d0f95dff4566455bed4ec74d9ca2956f342bb9b606706d7b44793c4f
SHA5121dca9eb0daba301fb3e7118aabb04e81226e1e0c171ad8a81d44de62ef368ba44d638acebb4931f36a6152cd71d1e69beb3bb74d3fa51b0a4fe8fd14710e1775
-
Filesize
1.7MB
MD5b26d73db7e3b90d6fdc54253f4644a5b
SHA1fd2178a80d271400d8320af34bd7a97c120c197d
SHA25688c0f433428c17a4842a0a7c52d818e4cb46a4b516536c7d4ec0c80ddef7740d
SHA512a120f7f5044a35d109a32c4ff17f9afcad0dd35ae3563425099b2e62be14eb569df7b1c4ac389e6bf24d75767a9ab0873affb9a137a1682d5214d5197805dcd1
-
Filesize
581KB
MD54c7548614a8eaeba0dc06e8be06574a9
SHA1cd8e6ee0a187ba1c18525995b21a55f6a1179ea3
SHA256b5b81ff92b1fb0f61a4438cbf3c10f124476b0331174c91f27067a40fb3c5b6c
SHA512bceb331c5c2aa597fe11b1fc8abaf2d1e38df357c0fa49f0e586ac7defe22af8755a8d8d263ef211034991bfa034448e427f9f19b8f648e8115c25f5e24844dc
-
Filesize
581KB
MD5d9050c59d3b71d01524a5a21e29d3d5d
SHA1723ca0b16f46f313693bf4d878c2e53af35872fd
SHA256a60c0bc0e18a57bc0855e55f452f84cd0297af6d53b62a7622029a015681ff79
SHA51210a123c3feae1bec98e940043ba26b6a7477067bbee9424f93d4efd76afebea8535fe3b18be2eedf6af8372e1cc899368d5127879058e9178fabd6be982fee14
-
Filesize
581KB
MD55e6d4d4e39fb48f3062dcea92e23d0bb
SHA1ea85541eb5be4e3f6c320b9d3e6a806f02473995
SHA256f2a9ec8a449ee5cf4e4f6d36c1323ac6c9666793642f050b95843d814e8e0493
SHA512a45ec1dd5a0c00aca9c44ae57b4d8c655beefc83ee573c240331965d143e92cb0ee933b36ae205a1a9af12fd923224284f373c7ae63d2a1ae555c418f1ed4e29
-
Filesize
601KB
MD511d5313629abe2cf5f3c32c4a6bf3497
SHA1cb134dcbe475010b3dcf8f42be209d8d2a6fde47
SHA256833e0b2e843d144cc16ca4d937b761a9d369a24f570a907aac88966bc0601250
SHA512fa78e7d51246cb93b120f618b823672e5949f3a2b330129242e4880558141c60c20189ec0b4f4244cc5e7659ae9bdac7132bb9ac869037b30b989e04e2d8e131
-
Filesize
581KB
MD5a17ebb8ae15dd9766eebd3e5f0d9067d
SHA16a7973ee991485b2f0cfb9d3926e878d17d3b647
SHA2566746f05efaa8bd8009d4da884113901e96e7d34b09834a494713060b6e71e9b5
SHA512b66d08ca6ded64972b97df538cdb0b1f6e8e5d6e823ade8047aaaabd602184f6e3f9c1a132582445c2d17b9e37f38b8534f637a83db4bbfeb8f9b67bce55cb2a
-
Filesize
581KB
MD55248a76e05949b454204604764ec656d
SHA1a4201ac6bccdeea421fca3a005e919e5ea7d5a02
SHA256c6dba9b94ba7d6208f10304b25d5448f59a1d0aecd7e280106ff3b18edba1f24
SHA5127f72264d4b93d6db9c8ff2900fe846c83d289771a0fb2b2fa4fe0415295cd7095353720068f6dcf67e50f15051e450699c599c9775a00f8b579abba673945f76
-
Filesize
581KB
MD5c34c448d6dd3e9acafb49bf81664b07a
SHA1ffb4373bd34902df797b28ac73daf1d6d355d131
SHA25661d140f9025f3fedcc1b6d9710774b49f6251be1d941c338ca2c46ac9edfe329
SHA5127bb1655dcd9b7e97c8ab14a314dee1a98f2d481454bd6af2777b3e066c4c222b9dd2b83280a99bbe7141180c520a13eef131bb3aa4cc61706ea32eb9ce30de6c
-
Filesize
841KB
MD566596d40d14e215ca5074aeab58f0ede
SHA15ae2bb1fe33493ecc758f71aae579a86df3c28c5
SHA256b84411dd5de8f7a8b82d3a2e5fe19fc98b1373d05e0eb7383f20a654e4ad1eb5
SHA512a446beb8f74361b2d40086349787aa7136c0f9e81e08ca5fab64ff39cbeb386e8fba4b1e6f48debd3ccb4c9fe862610e088c812137122b14ec5a4b1f71b551d7
-
Filesize
581KB
MD5a613939d98d13728666367381fc515fc
SHA14b2a719300b0efa476d7fc35c7062bcb1d785730
SHA2568d579491be8d35583943b836e75efa9bacb2d917f5cdfcf0fd7e7bf08f519e7a
SHA512d8645fe132cc158b30571f7e77271a75e19957bb2d5c971d80254dac992f37dc2de10b3b25f2557f02586926a8bae36b1dc1d85b034c4f16e2c61c16b4f58e7d
-
Filesize
581KB
MD57cf352a143f51fba33fff38143213bcb
SHA1b37006f7051fd9e642e4fab4be7709502acff3ed
SHA2562f02c6c5655fa7541619268c0efced871423f56c67586379d72872ba00158bb7
SHA512e32ea0d427b14a2fb1729ab590680924735c04e22b63e203cd8b1b584eebcf181670f03ffe9b8602e5b74c8fa6f3b28b59be061e1b747a5a643b9a011e840a6c
-
Filesize
717KB
MD57e231eac0ece119e48c85c7b4b4e1fa1
SHA1f0dcda5e9c1ad6417b79e7d4821b6c922eff237a
SHA2567d8944b26ead7023a1447118cc1c061b9542afd4841d5b1b742c3a8d26f773b2
SHA512819a7dad48a957d2842dfd9e3f5ddc4fcbaec6bc1fb596c8babb106a1b22bd3242a21327d1c71fd084addd28ecfe85b1f69d5a94da17df42fe4624792e7b42c4
-
Filesize
581KB
MD5cab59282fc029cde28fe73710dd6a055
SHA168282f5504022e44d23f064830eb4f6b4a6fa3c8
SHA2565e8cdbf7d7c28c706c39d794eef1e64ba1581c9830f5d09bd14103764aea4688
SHA5123be988f0605405374cc727548602511f862fe654c0d9dbc30a6ea0d21268fd80cfb104347da28df17212e4c48c0c7a465126cb10f396bfd577e328eb1bd55827
-
Filesize
581KB
MD5b0931dcdc0c8bceb4b2f33ad30aad1a3
SHA1ef6351fbed2c971114da9ae113e461efb9a5fed3
SHA256cea7bdd00085bf0520d2f10855f51dbb654849f0c121a7cbe20723f575a7fda7
SHA512b6f861a512f3b938ed0be7d4367cf362a8b90e57c8a5e229087fa3e67afea741c750029720b14ce28978ded1e55e8a68c0d060df8ec9ca992681d0ff17363b22
-
Filesize
717KB
MD5f7da6daee7647368ab99806603611203
SHA1cf66af670c081de4108f485c2a519d3e048c8d45
SHA256b680a8e5d085e2151ebfbd2b2d2a5a01930da07ea80931752960befbc077271e
SHA51244d02c00bdf4a81312a49b7918e4cd6ac563bccc51e3ddcda8629b315fb8d22d1c601a0a23571c96f428274e65d020604532051d49a1d3a787b230998663496e
-
Filesize
841KB
MD5555c7e0edf44c1b1d4ff5b2f68d124a6
SHA1715220cf26a5119d50851f410528212688b39ff6
SHA2568fca71eeeecba06419c3ccc52ee510133d47aa340267b40e52da2e442d3f3cb6
SHA512a8af49b5e7049e9f8c039378a7ef29a262b0c128fce33afb02e052ff06fc3b48d6a29771007c071f1890c083b3dd3e43b3089d5e1b99710a8541d6836a7d8f4c
-
Filesize
1020KB
MD508e3f9c7b6249c2e8ba608ff7dec1563
SHA1724123c4baa7fcc3d8c0b9d13cd1d39a077bf5c7
SHA256bc30803adfcdb5e7c0a061b6ea7d4928cd0b0a1fa2467cee5fa791929ef59e40
SHA51279f41b050efb1729564c003ea0db9bb3f186f4e211131d53c1b5061a0fcae3c6ec40167fecd3a2b040705632a3ab2dfd2c7fbac6294f5d759d172deb6dc6c2f1
-
Filesize
581KB
MD56bd71665de25ac92cf6d53b19a20030c
SHA12dfaf06c97837c46e67267e005db2011b9e9f739
SHA256e616c37211ca7ee76c4e1739d9feb04882c9d7c6ea3b9e9bb053f42e0cbed1c0
SHA512a82750f53d1af14c2dbcdc8d98852b85c9d34f179936eb57918d273b8a9ccfe9012e8a3d23487a5812d5e0fdce2bfcdd6f3637b1a6368001f5a89f52f2ac096f
-
Filesize
581KB
MD53745a7f33b165aeaa5b3c5a452ed6bdf
SHA1942c80afc981514955a7b35c8390121a1a5ad156
SHA256de78a267f7d41628bfd83b490574e9dd04474fa2aa19a7333ff379b7a394f825
SHA5120c037bcf01ee6b2741082311e43cb7cf833b0c246c56b2f0c680399caf0a2f5020354c7d566ac175ee11e89ef0873a958840454248ac457cd3c1174507f30aaf
-
Filesize
581KB
MD589006f7f1d2db3a9d86902cfa8412627
SHA1a853a5ae8d41ea3adee2d3913c07dc73229693c9
SHA256bb5d67d8cf62e00d23ce8787274f101ff2659085726d843e7d03abb78d030542
SHA51201dd34b0accabaff3dc679b84a09f732721100dc999fc3d8223a57b77ed1b1c861bef076c13174c089a22e6d21e7eaaaa14fe814d62233f8c8b15aef9c41892c
-
Filesize
581KB
MD5e95b68581cb0c9e5b1419ff66d558fe6
SHA1c08509569a697903d4848257e2ea73d154a5fc89
SHA2563b4f7b0194ec1559681898da25a89fd46a0cdbdf1e3f43c2ae371f1665fd1c03
SHA512ae4fbeae83ceaf7242ce787c58a16259f772762faf92a9208a04df94ba2a34bb6e6da66d98f3cd0c3da3a75f89a5d01c646b7a8831912ad889420b5684af2d58
-
Filesize
581KB
MD58e0825869caf1a7edcc85f901f895398
SHA1049e9f14d7afc6d88c2cf68caefd38bd5f72465c
SHA256bb73acb848b932286be740a2ecb9a4058c6eaee9f13b0f586cb3fa0c934cbbfb
SHA512a4886f71e9c957deff228dd765af03b25e53b577526a106679eb40d7a1ea8fbde52db1f7e68ba73df24c9f4099c6a9904d6221406ab14a20b5d2a047f4c0adb1
-
Filesize
581KB
MD5876a8dae16abd5d7c6918eb75d7e755d
SHA1b2136d6b9a9007f413d0be1afc2794f44d16ccb8
SHA256e57b1153e2b978c799fc3ecdac6849e9c9571bc8e2f71fad2045fdf9add33ae1
SHA512d7b5e439196948bd59a79f182a5ceee8498b411bd71a8bfe3f860daaa84e29c5d719328d41737cae5d3f29f58d1582d75ac6cbcbac7ee820bad63e14f2357ead
-
Filesize
581KB
MD50575dc567f3083a98c3469fa69668405
SHA174590b9dfca593be79c6fa7f1bbd893de0b70b53
SHA256eeb16c31323fff12007c7f533525b76160181ebc4df2f29f5a4d5e9e2629f40f
SHA51208270d8e20fdcf0f65fea5ceadf323c15780abb221fdfb847703d9010bab5e8a5498c42488b6c87a78e7cafd76e2c46979e92a01451a3e417d38e497ef2bbdf2
-
Filesize
581KB
MD5f6b0d330843cdf39be98d4857a4ef8de
SHA1dc740d9636d8987630b42b6c938058d7235f24c5
SHA2566959cca4cf353eb5cd921cd5964bce4083d0268f19849b8161a0d9ac7e441daa
SHA5128b80d860bfedb9cd4eb600588e7480a9f69fb4a0ae581c1232ed3e2b8f51519836e509d5e5499909f5b56973b47e2c534879ea78465480e7a9d0e9b2aa2232c7
-
Filesize
581KB
MD54d3cd8b49fe804d8e363657f2172ff63
SHA12a08ece06f6d8d5ac10de5bf37ab72bdba769108
SHA256fc903dc8095b88c04853b319497aaa8ceec7732b4c00bd97173b8f03363f5d24
SHA512f3ead64f11c6c23c12cf273093b474c5e4aad94d09456f4084cdf0d9f44d403e5d5d799248237e7abb11384b8cabebb38af236a2ba4d3d3a136126e7d59fe09c
-
Filesize
581KB
MD506590aed165d6026edaa71ca7c643a8d
SHA1598dc031222e2da1ba18926e76f5e771351bebee
SHA2563c96030eb589457e7055d02cce95bdccf724e33285c821cb783321d8de19213d
SHA512ee0b80d5f17782f109778185c3736662bb8450e9412c911d8a557d7cede26ef5e8b2a24c451f5f38d00949e2d72fd27c9f13d7910d34d44a16be1806c0435bd7
-
Filesize
581KB
MD50dca59030b7d6b82f20ebfe9620cbd88
SHA1b67109412d737eaf4ed4f81004d73b0429f87838
SHA2565a677000bddae96b966e4393944b67397eb3100968a0d348f7542cbb1e3a9ba2
SHA512bfff2c72bb9daa3cccccd8b494e7fad31e0c360b273279ea1dcfcb506f53878464809c883532c9b50181d124e964380be652b2350f5213828d41c1c20b69ec87
-
Filesize
581KB
MD5bda807c62a83ec042a3056f0699747d1
SHA1692580c4b7419c5fc7e4018c9142a65b7a773183
SHA256942f632a465378b700baf04dafb01b1a3cef7c66622de61fa128cb8797c06010
SHA5127fd6fbf1a4ed0b72d08d97c862a5889638def6ee2266f10aa01cac8a9a03bd80ab66050444a88c45e09a19fd6168e99e98a29eb2a21ecf8bb898d21d16d33a4a
-
Filesize
581KB
MD5eeaecd16a79489bdc852f4d97a66c83e
SHA14e57a00c56ed7654b2fe4b0ca6b446eb4eafa587
SHA256fff5b7a3817fbe87e6aab7b7e61f935687280e5a8320ed61d49d0624c661aaea
SHA5127adeecea93fb367ccba6dc3620ab9fe3a6d64de7cd057374f96a2123303fe6ad3514844974fc1694d72799c81a6f35a0fe6b34247b0eb98df3ae9815f29a1704
-
Filesize
581KB
MD513bcade9571f3be9675028886fa9088c
SHA1c9c315099cd9b1aba8068f4bc2d9510fed8dfcc3
SHA2560c5aaadd42984461569f7d56107688d89f296e5c2d91c6c6e3ba625142e89e27
SHA512621cf02597687133a0f54e7adcf4e4fae15fb372a58f56dd88793a0fd585b5bf89853fd9ac565752b81aaf6c6f0c83de40f8d41e96ec0a99562d047d2fbdf523
-
Filesize
581KB
MD5011923a14ac3fcfd8ae9e68b0a391f11
SHA12c48b68062dff06613557264baf7e3016d4864a3
SHA2560d85a300000af2a3f066cdce782c99a17f6094d47bb0cc11dac129062c506b94
SHA512ecbe79fc145372c05d5456e90e11319aa80d05f071553881660ed22d2f355a8cd376136cab6216ccd642975e36871aef411de42bd4b7858d08441ca99ff0d6f1
-
Filesize
581KB
MD521bbbf0b4c2b2fa120c4a7a9ef7674e9
SHA1bdda3d8d55a03210f8ad643bcc87ed22f05a3782
SHA2561085c1b5e38ac39c6b1e1ae62eea2f4a2ed82d79b70429d31e89960c0c0f3a4f
SHA51262b09228ed93a4e6100a7462ab3f9f9bce144deb400b648872a8f01c139c3149cf3dca6002124a0e7926251be1fb0965fdb376e831182a019c1bf92781e9779d
-
Filesize
581KB
MD530e70dc12dfa35f8587383f6a04bd9ac
SHA1f10a1284ef22fe8f07d701ecb5cba91dfd22c784
SHA256072d982b5db29a1c815984a60f9940f9a1c6da04d84ebee2aad8ac65441e9a9f
SHA5120b7f8164a6c2ff9e4004c7cb5488242ff790f2f5fd032b3a0b156921f00891af0be6dd17567fbb80551003ffce31dc10f0e66f79da455bb6a9b2f737759cbd9e
-
Filesize
581KB
MD5936d6df401827b33ea1fc281d95c8d4b
SHA1a658923c0ae239e14652f2b231f09259eaef4776
SHA2568f2982271c3cbb64bc3901452f8bda7d9bc8cfa4ec89a8c7b2163bfde89e1765
SHA5122f986be8321dc33837bbf50f012291adf005c50296656ca085562a992390d5a5c6e1e9a929df97ed60a4517ea134dee6c79454856ece43c184110a4bfd1b24f5
-
Filesize
581KB
MD53fddbdcb58fc23de9bc0a373a76e85bf
SHA13c0dafb3d9f0d17e62d656f28109b704d6f699df
SHA256d79a44486899c3fbb4c2a4370ff56ebaf949788a5cb5ec82eb6695ef376521d7
SHA512f23daecf02538eb07adee79d65a26c57807db3df2218ba11205d700305d74cadb45a886cc2e7885807487e2f7ea705b228bfa9ba5630f5382a666b970c273839
-
Filesize
581KB
MD52d1db305c17544c62571a78b9cb31556
SHA161d14fdfba5702ce7e8042ea7be2995c43e48204
SHA25643d9ed3591d7be6e640058d262bb5c0a5711b7184e6ba3e041a2d937842c295e
SHA51216930aac841d2d8c25d6168e7c2e4b6cdc2655eeeaf96f9bd2b21ee7ccf2e22524884b06c182aebc431490c5fd29fd6dd7c43583ce8c31e82b506347af3a4696
-
Filesize
581KB
MD58d089da850f7f9b5d8251cba73d3d2df
SHA1dda52e83e3abeaeafc81ca06ca7d326be2c41982
SHA2561c0381bc9d730b3b0c4f01afbca0a35a0364f0761b7df3089b0655f0d348376f
SHA512dc8395225a647be2589cad1b242d6571536d617c54cfd492cab9028bc7a5d1faf7f7f15d67aa1453de0ae4bdd9468e6b9587f11ef4489e08a5dacfe9414413a4
-
Filesize
581KB
MD557a4bad5e198105d678075565f51b90a
SHA11b937b4cf448114e8c56aa6dd72fe9ecf89582b4
SHA2562ff73eeba6c3c94ab27ec18c84df1b3e222396ff88733560c94b804fb933e37d
SHA5121fc5b03a3777decba7004908a8021da9f2cf146da9ffdd2ad91e4419f9f355f415e1da0b5c111d5d51a533adc36428c7fecc52a7be1852f2a1130e3b26798ffd
-
Filesize
581KB
MD5a168ca699ef4278bfe6e3495eed3d7eb
SHA143a8227c58fe9142d888436ef018d56fdc5fbd25
SHA2566adbe0e463648be0dea3098d12aa722ea55d1d6cfe4aaa4b0b6eaddec8e6e67f
SHA512104ee4acd393ec73b7ec16d41a587fe92bcfe654de504b8ad487c6705a0ceb4987f7aca3df3632609f5a88b82eb70664978dff49662642a384c86be1d90d1c69
-
Filesize
701KB
MD51989f16f3f9e6e6962f6825a4a4f7765
SHA1936d90c12cb5a7bd1163bfc1954fb0b1ac2c67e3
SHA2563d5195d6eb077487619c8371ec8826cc4f1821b5b672840f23a77c4f3038ec25
SHA512ecd8fd3c5db56e6dd677b581e1d68b15adc7960ed2fa4f362276a0b6b52517df9edcea3093641d2935a9e72c036add6a40694ed5de544457b173da7ec8b7030f
-
Filesize
659KB
MD56babcebbb307fa1692be457c70e33755
SHA18b579f7fdff7ea3a3a7ad83f7adcd3e867b8ef11
SHA2563df52b96027bcefc5c09615157c7e555769e3d98fa7260cc0e1e0248a2a6d175
SHA512862ff80d8e50e2666fa6c3eced30c29c359065be21e1e632fa1d0e87ddad48c80883a71b36d99852e33d3e36a4c1c73c7809d925805bf85436f8a337d1e216c0
-
Filesize
661KB
MD56d7ef4c5e96ed469426c2b6d7197aaa2
SHA1839c2be3a3f1bc1a986e3c83b0afc69abb253831
SHA256a84ce4d13369dac6d5a0bede110d02a3002273dc9fe5c23edfd895c0c6dc73c4
SHA51221a5d1adc7f83f713ceb60db28c85dce1a2d0bcc5a562434c6a8bade1e7651522381d326bb78ddcd1fd0344595a86214e3f192a17dba12acec5473a4e4a7199d
-
Filesize
1.3MB
MD50444b3ea645bfa8fd67bad1d989ba818
SHA1ee9e21ddc346ac6a2560bbd66e49c44bb0303365
SHA256da9f5a1ab98d91a1b985c71c558ad425679a306b8bf832582d4d9a25fce966a7
SHA512829b7e1f49b0c0271209112c0d19551973f7a69a19a1d2d8f9b5eeadc559d8095e11f497edb68c518ee4468e634855f92b5414cf30bfa3a2e84791dcae3b97aa