Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
01/06/2024, 13:36
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe
Resource
win7-20240221-en
General
-
Target
2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe
-
Size
1017KB
-
MD5
966c234fa6ac00db4784002343757c50
-
SHA1
f94f736f4010c46de242da559ce97d47f6c9bfe2
-
SHA256
81ec3f3289fb1ad5d821d8bf36335ae919b70666554765620564cf5fc2c024af
-
SHA512
9175fb7720633d50f880b256a8690ff64383378d2007c91644afd249c65b42d072dab3d7077f21066a00fbc5f49186b27531e6008450ca4c49d225f6e7fd5383
-
SSDEEP
12288:K2lWRPhhA9PRWg9H3Dbif4YAJ93y1NrLiLtJ8nBxu7DCOzRq8DvQgqAbhI:K2lmh4RzHofe3y1sInB2COzRq8DvFqt
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 3040 alg.exe 4644 DiagnosticsHub.StandardCollector.Service.exe 1612 elevation_service.exe 2000 elevation_service.exe 5028 maintenanceservice.exe 1596 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 12 IoCs
description ioc Process File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\bdaea45f293b476c.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\fxssvc.exe alg.exe File opened for modification C:\Windows\system32\fxssvc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe File opened for modification C:\Windows\system32\fxssvc.exe 2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jdk-1.8\bin\unpack200.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jcmd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstack.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\pingsender.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jjs.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\ktab.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe alg.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaws.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Eula.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateCore.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\schemagen.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32Info.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jar.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstatd.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\xjc.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\iexplore.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\extcheck.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe alg.exe File opened for modification C:\Program Files\7-Zip\7zFM.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\iexplore.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe alg.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe alg.exe File opened for modification C:\Program Files\7-Zip\7z.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jconsole.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\orbd.exe alg.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4644 DiagnosticsHub.StandardCollector.Service.exe 4644 DiagnosticsHub.StandardCollector.Service.exe 4644 DiagnosticsHub.StandardCollector.Service.exe 4644 DiagnosticsHub.StandardCollector.Service.exe 4644 DiagnosticsHub.StandardCollector.Service.exe 4644 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 660 Process not Found 660 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4572 2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe Token: SeDebugPrivilege 3040 alg.exe Token: SeDebugPrivilege 3040 alg.exe Token: SeDebugPrivilege 3040 alg.exe Token: SeDebugPrivilege 4644 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4572 2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe 4572 2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe 4572 2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-01_966c234fa6ac00db4784002343757c50_bkransomware.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4572
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:3040
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4644
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:1612
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:2000
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:5028
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:1596
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5f9df7c033c6da39182a4e5fd9dcabf28
SHA143b15995c9b7a3787abe59c251be68c385569f69
SHA256401f47fed9359ae3544562fd95cf23e7fbd6ca81ce2d4778d2d37ee0c51dba1a
SHA512e5c567fcc811318873498dc34ef0e64b1d10c318e64e89047ceed90a27356017234bb9cb7aa54ec9606a471f4278bfcde6b7db97b15ef12c0bdfeaeac921ada1
-
Filesize
797KB
MD571a8bf71e2cc1e690a5eae6f4ee52b25
SHA10fde91c4614dc538a86a15dbed304c68b7f08758
SHA2563c33aa77fbee96eba7d7064435889b94c9ddb4a40070aebd0e46922ce68cb9d6
SHA512de5a6ca88302ced45750b6422c95d8ca702e4e05cc1ffb4271f0a4a16e44e800d02cbb0008fefddd47269f1927d14606aaf90a6e434f790da42f37f6eb353254
-
Filesize
1.1MB
MD5e8aa169bb13555aba29209d383225bc4
SHA17964bb1307f97c82ed2ae2c2fc7fcb5358818d9c
SHA256f8a48d2339fa1c44a32fd7068aee33d018b9c8aef7b91bfaff1710831a319815
SHA512f6b564a38f7c51952512c5ff80db682ec8a462013822e1c4130c998c9d510598723bbff5d99c143b80aa66da1f8186a3919b9be77ed2e1a620ca65fbdac06249
-
Filesize
1.5MB
MD579c73afeb6ac5227d07494489cd19487
SHA1e369858f89c00d6d5ae3b2077eea41350c826c51
SHA2561c96d2491ae92fff6971c90e42d7498be5738eb43a3af0eb6709a7a1690ff260
SHA512bed6d4170f8d469a35dd1f4868a20f1dd171869947891555b7998c781a210f2c719846e691b3a6d2df367a98251cb7f63794783cf643285e8e0846cbe47a1c00
-
Filesize
1.2MB
MD5a33eddd4efc821e12b589ac7550566ff
SHA12485d03071ad14e36fe84eec6ccafaf803be537e
SHA25683217138afb7d7612998c95902fc61476fb24ccaccb265317c46bce060d867a5
SHA512f2ad47f0bb168bf96a71eebdc33778d89883dbbe71e90510d7f7c2e273677754740b5fb7c960a83fb3aadba1570c54fccc5f622380772908addceeea707cf6dd
-
Filesize
582KB
MD5159e48b9090fadabb06871984a6e9b6d
SHA1a5dc3345d9e7de8525038b390f3d651acdf304be
SHA256739ef9d0fe6d7b918d0106c04a93349003560540b47ce3e40420ff8c7d949fb4
SHA512ce82edde21cc3ed625ba4e116cee1f9dbb18908d87f7c9bb73d010e32b3ca7f34657d56fb2c3b6e492321971bb2d6327b2568321a6d73054b8bb7864571ebc46
-
Filesize
840KB
MD5cb4c82c94c129bbf3df6e7e38921d2db
SHA18b4bde7dee7bb0323d8d7999f3023e560fe47007
SHA256ea3ac011127ba78529ecee48c2f3f43765c5938dbf77056bd55908637810b393
SHA512bff0376f37cc2c783b29950781414a548f56b949fd6dd795937fdf34cd9b594d77fa2c187aa029d6357da8ba6e36f4d1fb39d453070f1c5c1d9fdff291bea371
-
Filesize
4.6MB
MD5a0943188cd4b77f470e78e8e15bd7149
SHA11c6f7af9b4bef27c3c5c2ba3bdce3fab53d233cc
SHA25639ce51adc9b43fc06912a5a4a12168a2d50819a2aec82771bfd1bac97bb99896
SHA512f5badb3f4b29424158a321dad9b746b2721139cd079ee58528490a593962820894ee8de12cb5bb65510ba5b2286edcd8c70c57fcdfa08f1f105ce6c1669e1595
-
Filesize
910KB
MD5b7530d8e385cbf04ec06c05df14e696e
SHA1b4287b4c95b5716aaae0ae937103b090a8ffa066
SHA2568ac36c4e29eb47f5eb3b58ce183dba887090d2a28cd25dce30d5669a1c5c0585
SHA5127f2a3f6748be30c6808067b14ea27a87d998e4c1ab81d5cca3e53e664a200115b153808b10027ed92159b567d75271e810e379f1f06bc474bb01ab979970b2ae
-
Filesize
24.0MB
MD5a3519e5e33efc96ee77f3ae9f8c8a1cd
SHA1be17a34fe1dbc17ad326e99d89abf78082c7c2a1
SHA256b0c51748579deb10cea8bf7073c5886a74a191183e66a20baf5e0c7aee8fe8c0
SHA512691255ed48bdaa803f6279974557e856e188fcd854200a133e23e4c0d462672f54fd108a77606a9a47e06a1f961b725c438d6d50cd2d35eddc587aafd517e1d8
-
Filesize
2.7MB
MD576a62d1bd133c2fcb0cd0fe49cd844a8
SHA18878389d160849c0258506244a83275597b04d4d
SHA2565951293def34a1e53ea4ac74cad61fa22caa0230d5dd2375ecf11da18508ec7f
SHA5125d264309f1f2fcf448c068ccbc6a63ece6109d4865be3d0d1a8600eb9bd3b742852bdd09a756f9ca91d0edbf30601efa14930927d2fe30d740e0348073fea5ca
-
Filesize
1.1MB
MD5a31302c209904f5d8fd1cfd56611ec49
SHA1ac7eadb158828710f7671977833e5775838dc789
SHA2563b6de18827a4338dc4723adc1a6aa6f4d3469f1378e579a3377ee3237ed05ade
SHA512ec851aba212d589a10a75b1b47ecc885223a50241915fd2e0c51f3ecc20642c119e67030a807f467253724d88c0cf770dd3cdee7dc6a1383c1123d84104cb384
-
Filesize
805KB
MD5e44f25d5a76822914eb64ace9e6a5325
SHA12c401c463eafe17518d8fd85b90b67c172372de0
SHA256d0e9c2c84dd109ff21179a6e6fe191424aeb2359d044d850f61fd58bcd4865eb
SHA512025e5f6d3f3c4c8512dd7cdaed41cfcd0fc82322e4a99f08dda81736dda5dcdefb720cea3961abd08c26551fa914fdb9c1167e5509c1d64ed71b1d6636af7f4e
-
Filesize
656KB
MD5f60d486aeadadaece4ada7c9d0408af2
SHA15fc1a9330c50b095f97f90941eff33db7feda2f7
SHA2560a3d54c3bd9606fee98f5c5f93ba6dd7fd8494f150767da9b06ac56a73b5e6cd
SHA512852099d099179f5d25d68c4ba8ee26a2b0ebd233416f846687a0a5bebd6198d11def4b84f01f1cc612389e1003f980ed33f71aaaf88342d48934fbbe652cede4
-
Filesize
5.4MB
MD5506d59ab9cb5c8f910f99841848b431f
SHA19bc472284c0e3b0cd26c25b6116276b9ad3fdc26
SHA25642540cbf1b5e78f09c08b86b1498ade662a574a860cf38948ffc5738398cd309
SHA5125f04c35a64d98c23d443c557dde76f18e2e94f1ae54b4ce6f407e500dbf70a2afba1c0d2f839c93248bd8466c8774ae0b124d50333586918ab86bf51fd653e9a
-
Filesize
5.4MB
MD50d69541be353bd7a07654bdd55ff86a3
SHA12dc4f34c91873c003bfb52f34631efcb59cd29c4
SHA256e58ce1d9ed7efe27897c5ccc3834668dc0b9c90b7350ff1cd43e0e0e740b3852
SHA51210288fcc6df92ce7769cccb695a3ea17f42f26b9feecf21d5a3d34ec3185c39b012e84e573e4a253b4629e22e9f51daad9484afdcfaaae96dde51319cf95d09a
-
Filesize
2.0MB
MD57d1311f9c348bb81f7633150d1c96f40
SHA1a79f29a8e6bd579c94d5fb88a157aa71ab7c19a4
SHA256dbd1b50a359df7a5d81210366baeab2d6954f50354137d219df8df7653e27592
SHA5128bd8abc7a5c16b64c40051ae9ed05d23020728e0f38863af20e5a7f0270432266acf6b860126188c86f09ff7cf06242b2c6100df25dd22a54c5cdf97a3626d19
-
Filesize
2.2MB
MD5ee92181e2002751dc198e5893ad73576
SHA1b3e372aa4838168d32caffb84a432d12cc61e8a4
SHA2561e559588ac5f8b93b31b32337a52a01fad4e834eb0b80c56ff3b6128762632c9
SHA512b8d79fcc63bc1987a7fcdc4149f947f37a943b38afe135e39465e0957d69417df24353df1d62627678e1a6d90b76a4259563ea14860b4ffd7f9ff87916b6853d
-
Filesize
1.8MB
MD538ba38846a7f8e9ee3421c54bdb06184
SHA1a062b2860d4a464d8464a7867bc72cb733e9908e
SHA2567ed24919a75b22bd84cd6c3e85e24a10a8267b7f039f3652667c9bff2af0625b
SHA512b4fd47219c9e61c89c4cc20d354a9ae9b4b785318f1d67bf58567e726e2818a4eb33c02659d062ddd3d2a4061dd8d0bf1114117b19d7d2d7346cf6c098566a0e
-
Filesize
1.7MB
MD5449b0d4a95acfb91cd30fb2e25d94762
SHA11691b70ea725da8d527637af8e9dd1d631089caa
SHA256a8a36b92ce1bedf64e80ad0898f1f0e2afef893cfc11a2e07e0fbf6e76116388
SHA51287b9b6b04f7fe198964788f39d41da7bcf49a7253c845977a2fc04e048b3a7cffa26a99220adc660c320ec76449f94739cd841b891acc113e710263625c78780
-
Filesize
581KB
MD5d1e34b12987f97b680b43317e2ec79ac
SHA16a2b91eb35698197010204e44a136dabc2bb3188
SHA25671b45348c02a105c1221f8149da76fdfd47d85b15622f6cdd43931b2fb332664
SHA5120266905cad110ff0d6eabb5db46480998c9ebece6b6e77b32d94f1a6602a086436f56760710cb068b39a3a20171d857df862daad0d4aed073bfc80b17bdfc8ad
-
Filesize
581KB
MD54a7bfcecb175197871c63d9730f4590a
SHA111606d59c0b970957e5b387ecbffae7d3e14a5dd
SHA25637c82a1f34150202a66b8a605584bd7c319ab73be95ac65590fbaf60dfecaa5b
SHA5124a1987b48fa3373069addcdc80f7d154597898b184dcbec2ab00c62dbae161072c36683e30826015a612c76dbf9199473074a49f14011d014a231232565397ad
-
Filesize
581KB
MD50472c22235ab87bfaa4b36a5d3b2c83c
SHA14690fa1e78b9fd201e38698244f28433e5fcb1b6
SHA2568659448102188bd3f8b0fd00fb7818c7e01afee03cc5f575f8c4fda39f207e0e
SHA5127c36fc18d61edbdd7b3d169e384108139d1b18a2ff3315e8d02d2e8db471257b984432f2b78c56c8f9699f8d9e33d0bbbdd7b2581f8a9e80eb23b26b2bd73a79
-
Filesize
601KB
MD5ed96c89ac270964c4426f4d85666aa95
SHA138497c3a2872f78ea344b15d7de1e606817652aa
SHA256697049313e3a58609e622fb3379a881798018e80149be89eed6dfa18aeac7709
SHA5122241da16304acb43f113c1e5dd1dbee3a083223316736da76064f7096404d2a7cd07a8df14c2a99209ea5f8a60fb78419f01a2ce37dc26811d5c10fa943ab205
-
Filesize
581KB
MD52c05e42616a08a7e8dc5e62e307a5b35
SHA1941873cb1f990e28fe9c683b08bbcbba53fb585d
SHA256fb0d808cdbed259dd13bf672fb2bdda08660f1c2f2b0d8e7e21431c7878d4df2
SHA51250473b772ed9d0be59f50f21cbdb72fc5136a553e200edbce332b54a18eabafda8a3b311a7c5bbb23533cff7e0e10290db85d461d64ff1ffbf7b4ce731daf162
-
Filesize
581KB
MD5b81d1ff9be25356237aa7bc2b2510083
SHA1c3e7bae60c7d879efd45883e5758839e810bc69e
SHA256bb22afae85ae95d6f6c64088479e8e865947c69e0a580e08304086a62225a14e
SHA512e269c26fd8e9a80b0907fc6f3870f239a40138a476908cff66662224b59d576802d2b73bd825a1fa9710e41ba70b3067b4a8f2f9ecacd848580664d99fab9ed1
-
Filesize
581KB
MD5aff4b26733fe5ab785a98a7c431bba13
SHA1837d43ed4fd0f2bcb9cfcbb7b3cc5ed27861c6a2
SHA25601df00201c31f4455b70f8b91cabd9e3f312737f24561af6252cc3f62b295014
SHA512be4abfb6b4763721d90f1317e10a412de9900cfbdc48dd23ad9bf407477af464f136da75a55d8e371512bdbd8e397f57d3a5a64f17ff3213406631e473f98f65
-
Filesize
841KB
MD5629035fd8fb74e43c0d8378a639acb7a
SHA1707630613ab279d00b591f46b5faa88089b7d9b6
SHA2565ca72b757ca9d807def3d1c2ac2c24fb3fe759d2fd0f2cd02acb2dabfdfafdba
SHA5122b057bdbc52e5c2ec7ebb0d8e262389e64a77704ebecce2782ac0bd770f1a0819739772471967697fc20af485f6c3417729ba042968cbed7c6762317bde63ab2
-
Filesize
581KB
MD5db12d22a47a661a0bbf75bfebb9bffed
SHA1104a7996c668fd3f491914f38c5d5c58d05efead
SHA2561610c422a2554bab2b611602edd52b8af3a3e89117a560fc13b2591937ac5cfd
SHA51230a50cecceeef7e9c0d7a1503814bd49f3fa09733f7a47e3f2cd77e3cf8d446f2db0c7c55aaeefed63a4400ebbb48555c9ec8d1556d7d8d8b2b05dc7a0c9bf0a
-
Filesize
581KB
MD5b84c68161adb892064a4861716675b49
SHA1db869bc799efb721dcf413d3011c4daec46982f5
SHA256051d30c8dad685f53519f5e68eaff4dd6b26257b3d07579e9a2ed9a89339fdce
SHA51206446bac7f4075d1f58799f7d968e67a3349260c88829b9f87ba24da956662f2ad25d446237ff55f0452eae66adb2f16501604dffa3eb166dda4f9b4467165f2
-
Filesize
717KB
MD56cf3699c52ae4eec3b3fc21715cb5640
SHA1f65206fcc9cb3aa2c2c2e77ca3f025cffdecdf10
SHA256b5d71fc8625aa98330c332dc8d67c8d1b2c5c70ebdaaa4045b15e4fb2783b17a
SHA51263c43f346ad643cc1cd62dc88ea3a1ac6c9b866444cd4ea313744fcc8f3d27c9e773007db36954beceb649f6584ba115a4288603f09cbc32072194c12225895b
-
Filesize
581KB
MD52cd4f0706b3e8b3933b0112268d0f6ea
SHA1bdf01d6b0ba962ca69092668efd234cca28180ef
SHA256560d9d973de578d5b49dc4f5d8f1b0b8bacf1c2246179e178b627f5609673e02
SHA5129a2761bf670799ccf19c91d7ac32533d4b8ecfe93943371dc4ddd20fd266a558c0bd8608c0b445c2eb655346cc2f18a08ca1f98c9dccad2dff99cd5c15424d53
-
Filesize
581KB
MD53922ed0019c18561bbbbbd3e2ef5e863
SHA1ec6771fc845aeecb690f4efac19437e76354b08b
SHA256c43214f429ba377a5c753a1faaa3fe79a85e838cee668e6cd7ac7494d6541399
SHA512a2dcce4b6b6b2cd74a199139a21ae361f76b12c178242207e69a92a6320296ff59536de3a2a1915fb4b26270663b9fc0188436048d11bcd968c8315caea21988
-
Filesize
717KB
MD53350efcd6e0d4b63cff44bb12d7f05dd
SHA19709d9ed7e3532cc2e25e29df26d6db930fee7b0
SHA25614c7ab845c914ceed7684923efb6801df65a30ec7a78323c2d42ecacf62c7b3f
SHA512bfc331624f22fbac33097902dbb77ff461edfa441060c646542855b68fb9405c28d16bcbffa9e0e502727d573815d6c74866296c7d7bef97cf7ebdd37e29b219
-
Filesize
841KB
MD55daea0c8e80369d4b6059741b51f7475
SHA12fc4dd905cbfaab7b5ce86cd9c56afefeb77ad47
SHA2566844b7e0e0722f2e08b808d8f48b0cd209de06cd7c64b4b0db96c86e2616e566
SHA512b38976424391b00f9b9f4d99eb0a6cb7382f1ee0b79e90409df81b389c553955f3326eab60233da5f4a709a4845bd3227c93701f511da429916b8c3051794254
-
Filesize
1020KB
MD51c74cb7c088c38fe27c870168d07d429
SHA1f7b0a8f81fe194628e2de3de7c814740759c8686
SHA2561250ece45547f95c44d82d24358823f3ebb74a9f881db8912661aa1aa40e17cc
SHA512e22641454374a63fcbb870c7e71594698b2d3c59782988cdb68f63d368e8892b8435ad87b01ba56f9ac7c0beb310ce31ce748f0098e71d03c76280430cba19a9
-
Filesize
581KB
MD5147a13bf815021e2328817e69c5770c6
SHA145791024dc20bba2b47deafa566c340686a893de
SHA25681c81e5336360a111bfb5e4879e87e55a708722223c8a8bd74ff339251567a61
SHA512aff83d71aa7de26fa7d7b70cc19d243b7bc46a276f6e8da8f24a15925442fcd908ed4ad178b41ed0ff98d45739ac0b1db47889e325979c0ad4c50ebb90fb6392
-
Filesize
581KB
MD5f8ce765d28d606005221803069cd0475
SHA1fd1624df621303e298d87b9e7631b52d5749f774
SHA256884003b48aba7cb8c62cc71f1eb2e38c9cdfe0eebeec0a0f088f58f04abfa905
SHA51259d1eb366a5058dbe57f5638760f7bc3b98e97723e6009e303cb07dd39d4cd7f65963b17750d719d6e50aba7da03afed1e73605908fe3964591069833d90989e
-
Filesize
581KB
MD5c7ce47872738fd8c798577b583bc4ff6
SHA149c9f570a8e1eceb537ab780deeeba60bf978b7e
SHA256a70cf358937821f21fc3b00ac17cac3619e36882f8000f7efa06e869e80cb85d
SHA5123060bbfc01a32aae05eb77e6bb96494fe57e5da3e2e8f203e3dbe07acf4a6c8b281443bebc4dbc5b57c96c0b499aa7ad831a93fdeb08d95424ee50519399556b
-
Filesize
581KB
MD5e02e2506bb350fb0c9b760a9ab4fb0a8
SHA1be152b463838687852e7b909dac794a48f31f96d
SHA256cd57b2a856639475b4792ca7d900f373d9b031652642dcbe72aefe5bc34572a1
SHA512598812d944c9bff0f53198f98525a07bdd6db3bf1f746472cc20f6b662422c963d31fbf5b90e8f3b200762517e4b35b11df7ed9322fe823e51e97d13e4cad720
-
Filesize
581KB
MD512d4d89c389684016bcac6c5156a1661
SHA1ca47f300b2b69629019cb51fc45d244632fc2273
SHA2565cf047aab036999c1dbb4f010aba56ca4e00e33adf1e3d443f425a23a578a90f
SHA512009162561173cc08e5e198e6f795f5876e5c6dc2b05d74d9b8cd0c0670443c02e0e82b49e3564fff3d6744914c3d92aa73775e03daf7773edd708f65cc87132f
-
Filesize
581KB
MD5272c072b3db1c50b5841829453ac1a0e
SHA1a3de9bf4d349539e7f7670e66c1dc583303b5818
SHA2567f94babb6b427fcccb2423ffa8a2fbd1e0aca076af708a5e7c7618092c466876
SHA512b24797702679cb5aa4099811fb17ff430e8526c7b36786b9b28f9a25ae9976a0a39eedba85d40e4d95b3ade55c6df95e552b3ea71f516c704cd317a81e7e2d06
-
Filesize
581KB
MD5edac6817068daa04bc1a6fdf1ec9eb6e
SHA123390e4867bb90dcc862f93bef882661db65da40
SHA2560323c22efc7451743f1c04ab5ef03d25ea250c145f3476c873bd14df1db6395d
SHA512bb158ce6d9254e4685234401deeb78a306dc2fcf6eb8b1985fb5fca091d81757383bca66bd15ae526f075f50ed0711c69929349e4cd056275e340a4249b70133
-
Filesize
581KB
MD5faf2da3471c1dc25162610cb16dc7116
SHA13c946f58a6fd0b04bdd8c733ed9ecc5d9c4be18a
SHA256b6ffac1776292ed5f429a0d48c72588a048baf02060e900d907c2cc223f4ea11
SHA51283028a81a126e575debad7ab68c4d461f88f84b633471f6d85dec2be10cc9ba3b37e08a3513bbf307af0fb6735dd79fd179b81af7ef70a1018267e029d4cfd8c
-
Filesize
581KB
MD5af51032e2106b052945cebcd83e11d24
SHA1d635f53744b78bd84c0a8e6d7bd0c2c03257a6eb
SHA25676e3704983629e94cd161b958b74cb72a2cd850cbbb82c21042c446e780512dd
SHA512c7a3a12a5c04edb8b85b15aaad0bfb9c7b7e79bd51062ba87e36a98ee613a031ed72b9a1016965d879a92a750c970e485b4a6b3ffcb293c414e275c2a95ff391
-
Filesize
581KB
MD5d715cf8e88cd7f501822d68613f9dbb9
SHA12f6fe515dd1ac53ea5fe74a6b6eb1b18617f827d
SHA256dae7258c1dce42cb9f3b1fc722f56a24951da4c75c1186a371002b8458e93469
SHA512b2d11c5c79d476cd768c4786edc5234e63cde3df645ea909f22b02b6689f7425f1a62bef6c07b24e8357e622d2779a36467986d9a7419e483d7df802c2b7e8f3
-
Filesize
581KB
MD59a7f02a311138eccb4868a5b3b8ed44a
SHA14d1d557320a7948b42b13620383f323fe5e3e50f
SHA256b78f022e376fad4b2d4486894f2d5917f1650838b74e47036a6a2156ac4bce7e
SHA512489338e301eb8312593abad3ab45b11740d3140d3c751d5a2b68864f63f0ca2406e82cfcc04c53dd72ba5c8a08f5be0ec7d57c52fa5e53f72f74995f6820917f
-
Filesize
581KB
MD51ff3ecf66db57c994aaec77e8b4fe02c
SHA1e088f8e7818d43d669c17668ffbd351534954698
SHA2563d936fb5d14443022fcea441733c648948c857a21852cf633e7e607661aab984
SHA512010aca1d46ae32982387394d6d9c70e1130093d17832e08e096bcc6e064992fa8ca4732766b13a12720642b0c37e64e33930981d314d3236f553e2dd8abbbdf5
-
Filesize
581KB
MD5975609b1b10145a5ae91d23f0f65f0b2
SHA157844a2f4c02dbb54a7caacb8efa8d324b03a917
SHA256fdfd8dd8488dee59e2f49053354a72613c5bb9808cf8c2de495f1c7a5a555e40
SHA5124afbf0fb37c8cb14933c83fea4d3df90787a06ab727a490ef51ae1c53a9afeea6e340651563255f57436c5059818eaac4bcd76c6a8c5acbfbb5de94dcf4c9664
-
Filesize
581KB
MD580de1c96af8a03a4ad568c4718bc41bc
SHA14e2cbdf20032c203cac47bad0c837836fba41535
SHA256fb6df1d47bd1151729764ce22fcd5335d00d49e44c531a507907ee72bf5f56c7
SHA51273db4666102fe38a5cfa258004aef3962b5707e3c291ba364704f00242beb0f0b5e313c8892ae2f723bedc4d61482a4501dcd1cae5ca0f7d6f0602736ed1cca7
-
Filesize
581KB
MD58dd57fca77fb8c3e43f68febccbdbdb7
SHA106ecc39bccde593b585a84524e56f4928656f6d9
SHA25619d1d3881d452960f6e94ce781a10c285e8851e55583d4edb18c0134f9b1419e
SHA5120409baf67ae044725b9018268696f93b25d14b2a06e9deacf28b1d2fa31fd8404f8108722d606d111165b2133478cc26704042ba58ceb9ed6eecd780242a5a7e
-
Filesize
581KB
MD57bf88468286721a02819358eef5fb917
SHA1f81e4ec7956be87581ea39d11b66a7e22c744acf
SHA256d99a26e6f8ea0027a5efc7a4b83d8f7a27fb100f7a3654f7706791b465720281
SHA512c2fb1044f892f3acf79d920b41c0797a6a31ee465b48231c439fd7a8f6ea4edf0409b576d0bea16563d3e90564421cf9e2238a9cea9e487854af1bf902a20373
-
Filesize
581KB
MD5665f71b6e6e48f8eb05c0e4b22c7f04c
SHA1d24ac5b36b681abf0a4271b545a2f6ff20e74327
SHA256706e0a6125c32531bc597b02a2dddb793ad5bc30957c5a171acfa3c090179d30
SHA512f9ea49aa8473c030df6c60ac494ed4ff144081ed3d469badf7bd62d6af59f96cbbf0f5238483119c39b9df65dd821c9264c92abeaa04d447f946e459f1ab633d
-
Filesize
581KB
MD5945750ed3f969d2aa9e21c3b1f64b08d
SHA1fb7f906d625afe14f44a8bb05cc9627b43f331fc
SHA2563c03f3205c5849a43773e235ddc5b03584fa7db5c3d0cf3c4641ab7ccd9153b1
SHA512e6b44fabe9242c924f965d652d63bbe1717a29c9348eb381562970a82bd8f5f46dc7c621143d951c70d41a239a2ed359020caf8c9ce491f9852744c61fa26dd5
-
Filesize
581KB
MD5328186cc4ed5e3e596b3c8dcf7327121
SHA16305e67803ee1e50fcfa28ad3351230758b0d94f
SHA256bf84998e2f593159602484f490e096722bf297c5a21aa1c4af720713818e6b11
SHA512d0d83dab8ce271d1127693dc2f8b93cd78e9385daf816fa8329dacc18518e760669fabf6d8c7374d220c40f893f990c6609ae92d26028fa3075192c7a67c519b
-
Filesize
581KB
MD5c5d474d2dc33788f80809b3db9e09c23
SHA1a9471a0190230b8cba9c9a0d3806f0ea04ee24af
SHA256d434dbf9dfbc91e5167642d701635594267db6431e6c94dbb36f65ea03f2fc3e
SHA51229260ccd923c1efd2ae23dedb5ce43a1f54b1ba99da8f176a5350cbd5584323a34aaf8f0ec2e1579412c3aeee9e775f86d4ca4e5ca72b9f3f99a38fd8db5ec6c
-
Filesize
581KB
MD5b4e9d6a5365d1acc3d009678ebb874b1
SHA1dcb12038c707094ca1e3d19b4ba28ea4222b33f5
SHA2561d73dfdf948e75e7e3566e617f67584132011a45627d3a10d9e1560085898059
SHA512de8275f1911a705b477e8f83ecb7175efe825a099e438d381bbbc3c56abf6ca9200538a5ff53269927fc044a78bcb68401aaa2fb7005692bc1a3f0786fa05cd6
-
Filesize
581KB
MD58cefd3af43e8c4f525f1bf7e19b7391c
SHA19e7e2d8af9731ecc2154025756b6caba69d9ef03
SHA25612271d31a437a897282e375c7eb3a5c4753108d29f4967f91194f6523c05929b
SHA512440e3c79ca457b1e784f8d92b8fe471bf9ad36eff3b0a447224f6bf5bdc5064b9b1ce55f9e4507ec35a38a150ca53d20e1267c16c193fce70f85a686d4645b12
-
Filesize
701KB
MD5b5be011f32f00b0fe23fbdbbc621285e
SHA1effc3db1d0e929aaf0e7398e6ac69cb378a1dd2c
SHA256f99b18690ce8c5130d906a13c739f890f2523dd588f3dfa6efccb43e270e3346
SHA512e8cd221baa7c1de46fef0b483ba52be8e059d1980186c2fb7c9b46f6dd25db0fbac90c2b5690ce920c9c1a49053e6e9d0cceb8869d2e9ff92e877e2957641e91
-
Filesize
659KB
MD59d4c08cc84bbda6a888098ae84839cd2
SHA16cb33471bb232db6dfd29278432493b1c4da8e6e
SHA2562812c515a824131e8036c465c799a932c62638279308746c6000f249e2be54cd
SHA512642a6c1cf4f4256f4688713fb011e1ab8465cbe94e03ee31ecd966b899a1d0ca4e3700219e50903093b0b938af9d2131730a83eea3238e75f2eff1837ee316dc
-
Filesize
661KB
MD56a6b3a4e68b3e2db280662f656b6ebf9
SHA1c90e38c61e9c8a7353b6183f6d075b43d5ea104f
SHA256b8849aa0a43b65c703698174730ca7c01d4963d9ced939d6b6c41728f15fd43f
SHA5127fe342948a5f2dfa83ea2b0f8af1a3b633e4f08f7223641130718d2e8d7edb7cdf45bf64a75f7ed53ad404b0d7e04fb1ac3fa88a98421b325dabb16decb0b8da
-
Filesize
1.3MB
MD515ea931990663f2f39f8b7265a1066de
SHA164689e589f92b2fee04375bb759c0e222e3b30a1
SHA256648d576509d3307f8c5841e9b4978bc79e59c03ad721e838d4207ed8850b90ce
SHA512dedb60917224304aa4e9c1befe6ea5fa77a8c953b2e01b750040c3e299e2b6b3235839fa0cd1d3d578e76a27174d0cc81723bdd2233d056c6f20065c45331bd2
-
Filesize
1.2MB
MD59ba7b5e43a130c4dc0ffdef1dd77f9b2
SHA1857b41300a517f38646e545ba1c06201d7bf49a8
SHA2561402b70cd97b91067bf839b54ae390fdf67d888ffcdef9e4f66a464332d6fe44
SHA512fe7206165d00bc3123eb43e8706ffd4789cd2904cbf6faaf512fc6ad4d434f44eda623cc1cedced6c8ec9a81e8656b223d77162bd6d1b0b125672fbb90cd47d7