Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
20/06/2024, 17:50
General
-
Target
2024-06-20_4210e70325aa1b671aa7a1caae65bb7f_bkransomware.exe
-
Size
1.8MB
-
MD5
4210e70325aa1b671aa7a1caae65bb7f
-
SHA1
69237a4e836092b02d7d974800958671b5e2009b
-
SHA256
7b19e1ed0daf46bdd7bced280d1628c37039603388eaee648644cdbbdfde7aa0
-
SHA512
a5f0f2c5d21722f630b35703c574efe0e5c41e8e015c412a3242405a29be3dd344436627a064a270fbfc86fc41b7754dde1286744fa9ebbe1f9f07e121bc089f
-
SSDEEP
49152:aE19+ApwXk1QE1RzsEQPaxHNQblI7a8K2mFhbrr:/93wXmoKMlI7K2mF9
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 31 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 35 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 42 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-20_4210e70325aa1b671aa7a1caae65bb7f_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-20_4210e70325aa1b671aa7a1caae65bb7f_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.52\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\122.0.2365.52\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 916 920 928 8192 924 8962⤵
- Modifies data under HKEY_USERS
-
-
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3684 --field-trial-handle=2900,i,14549994492153927475,12895178890800740987,262144 --variations-seed-version /prefetch:81⤵
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.2MB
MD59943bab6f6af7d7c4ca4352446a62334
SHA1f20366ad27312ec6d23d6c0c834e8abe9fbe63e2
SHA2568aa3ae0cec26ba3b7d81093edae2a9a167d4ace3608e0d51f9249b3cba74e2f6
SHA5120eed6a2ad4917c17fa8930b76e1217e140aa18cefc90bc029b8a44f7b349123af60c1bda0afb2d237c066a37d815cb765d4dc13c6c8c61ecb5167e0815deae52
-
Filesize
1.6MB
MD53b6979ec3b91733b1f65b89ff2a31068
SHA13eb350e6c33350d73aea2a1e38d321a37d1a4597
SHA25696ce891fbcfe7e2c6d7035a59ed9564a118f6463bf30d21ccb6affc4353587ed
SHA5126e942c54a15b39cd2e49f6708fa3d2b08e4681ff18d41d40f74ae1534a5cb91d005676535634dfb70eb745de7b0dc5bf09b0c69b5057c4d4a3712d6f6f405f36
-
Filesize
2.0MB
MD5a2e507a1a8e87b76c1de2a80b3377d38
SHA1ff68cf66d8331d78999224dc04d40b9d60aff30e
SHA256bbc9ddeba752eb82e482d63e533464c6cf31e40739d50c9e4edf0656ba4cbd4c
SHA5122b6af84ab71c8ed3a5e4a7535ef7079e573876ec7bdeaf748f4f36f4ff45c8b05a949e1dae5c246d27a00dab996a278fcf5676e2422acd2890000b156265c1e9
-
Filesize
1.5MB
MD5a680bc71ed757c037dad90b7d5e5961c
SHA12b063ce9195981dada23390f2d470b525a1c7dbc
SHA25632de08686ec01092a24b4272e1ea906c630e843bf1707682936312631ec4835a
SHA51266cafd57ddf9c253858a92b9f241842367422c49fb0e7b071a1b9a935bf72b948f471fa4996bb5ec61186cb580553011603b960a94c3c9d09ef6d45981847e94
-
Filesize
1.2MB
MD508e4480d361ddbb422f111bda0b410d3
SHA1d505b097dcbe403ab2cafe72f5058284b562e3a9
SHA25641385de105ed93498f8148a322c4ab598b59201dd7d3594849bb6e870024ba7c
SHA5120be9b3e88553eef8a4b1cc586ff0e1332472c97b49842d55805ce5bd3517e631a52c660495a89ca6aaa7a912df811edb7e71d7090e9177c66bc331d6dfaeefc7
-
Filesize
1.4MB
MD5aa2dad121791a75453179fbc28f6e7fa
SHA1c2bb0365b247f0a8e28fe4e8b99feecb7bb9f531
SHA256fa8d035e7909e84bd7093ec3b157447f7bbc991f4693cb0e9c590876419072af
SHA512c74db6492755893d1bc9f2b40a3d202481f60d5b7ab4d4a15d563a380ffe674dda4ff5944ec47f0f1957f55fdabe166c517b977be70efa94df730a0239eba2f5
-
Filesize
1.7MB
MD56ae73a7316338b4aa536f7463b93b56a
SHA1ff9d2826423f5700a07e6b036bb0097c69a32012
SHA2561efefc3a0b1a816010173c5ceb3037eaeae1bd1f55b5eb1cdcf5a30e014ed734
SHA51283c413a0370d6a0f2c6a0b08543b0e9c7751d07026c635d4cec0e69d76cd97f1cbd3977dc13ae7bc3724bcdee8f2ff083cb64c6699e14816defe20fc016ba132
-
Filesize
4.6MB
MD5b81d92502e84aa826a27808f6de795e2
SHA1ca2e06a87585973b8d4623c801b7fc47053773d2
SHA2565be6becfdde6651e1e2300e51809b743bad322482fae4de9ba08c65674dac275
SHA5121a471a60be3c36cc01663c926f98d89578e013b423523aca4acf980b23c9d1451010b2f1c0726acaeb0051c51e26165ef33cfd15e487c666794a7c301b42991b
-
Filesize
1.8MB
MD547f261e6e4d19535d1f17e0ad7696840
SHA14a0617345293447b5ffeab2fc1f1cd1aadfb62a3
SHA256522feb7f0592019311368f60eda63a6f4fc06a61fdea63d7652510def6472d2b
SHA5123d7d498a5879de85fb72add4fa8b428cfaa921e2ebd6e90bb25065060228193c0aaa4f91ee4015526485970513b7d65a0d47d47fc2ec8b7d115c77174132763b
-
Filesize
6.2MB
MD59969c74ab770fe1d329e987f2012bc86
SHA162a002ec044213e13fc88e2a2e53e919b95097d3
SHA256b9bebe4c96ff96322b6c5b3a8184b4445465d21278411d3888d8275ec8e4f111
SHA5120fe385745972d7da0f9bb278ea3ef29e5f2e5f6569b8c3750f0ed2b09d0a4f04be39f554cda9710b291cde29b60c3e6d55f607fb6c6d6118357e007c4ad6a7ca
-
Filesize
2.7MB
MD53a808339bfcc4091232b2d797b847da6
SHA148936297b0cb835bc0fc82cbe946379d23f8002f
SHA2561105686ae6b90afd672a33a8ca9c63f07d19f27ca492ce13df6815190abbf611
SHA51249fb0af0c32b0f8ba3f1fe05e7ec3b0097fbff57c916552456e1094ced8cc568c65cb20a2eb1a2c6f1adc83445946cf01ab91a3115cb5ccd31a06ffabbf7e985
-
Filesize
1.1MB
MD516acca7c4ff985f5fda581e590046d78
SHA1467c23f297f90329ab987f5d0f46117b88119eb6
SHA2569486439a7b0fafe445d54b9953c37122eb5f9baa2e9e669e0330c5ec0f32e4db
SHA51202f1aa5dec640719d1242113ef665ba4278778b26a96e98c7bf1b2288239db98f02130b794197e689a68d25dd6f0fd519bdb3aa478fe29aea9271814770db0d6
-
Filesize
1.7MB
MD587561459df74ad5d4530447ffef6656b
SHA1165969757aa77f2e976a34fccc40e147ac200476
SHA256ae8e730dd7f686756d0fe4a5177f20779a592bbc015942cc51b39936bfe5da5f
SHA5125ebf835323c262062c45da50cbb7720c060e4ae9ec0cacf7eff7f8eeee5e6a0cdbcb90f34ad199ebf274871412074a471426db0f0325b83482bfe5316d9999d8
-
Filesize
1.5MB
MD5e4ad5b4c58d25bec37e1f3b1ed26d78d
SHA15dde12cc96735e4d7166d93034ded38fa0484eef
SHA2567a6c3b21a7176b34c61955a8d4ad707cd4f739689263f795f39764d91dd6289a
SHA512f1d3f7807e5beda10520e963b2de9a92c930287961622be3661304f791d7dba0c73105dad2c1d705247e65cb270decc4321090ecb18d40a2e3a838d2efaf422b
-
Filesize
4.8MB
MD5172a9f65d82de856e2cdf569be59014e
SHA10bdb2429aaa57e03717930420726e9d49565fedb
SHA256b1862dfb73518564f814fd74024af52e13f2c15f8c4eb57cb11d368b1014d078
SHA51254255865be54970e939f93b8ea76aeeebc018263122ed707dc69a181306fea3e205f0f6dec32da02a0c59aa836bfe120f944cebddbed2a1688cbb0de666beb29
-
Filesize
2.3MB
MD59623d6d376c33f0fe23b08fefc8af9ad
SHA1e1ddc5a2aa810c2c71a4f723e16f2e1b996836a1
SHA25606cda06258a304eea233cb647e636376b21c47286a8f7bb498b80f12fd5e5431
SHA51233c465e155aea1417871a47cafebf3b75d3b3c50505d65c00062b5947c60130f0fa50da2a5843b478546cc9e8ba17b6c5fa606de01847702e4e3c9bd71bd97a4
-
Filesize
2.2MB
MD53b48f728dd39168659918b87850d179f
SHA1057c6a1ca930107e852684efd54735e6ad782c24
SHA25669e85a5b53b48d2ba5da38574532d61333cdbeeeb249f3950cb6b01d4df6dcf6
SHA5129dcae6d6e7138d1e6e26f810bd7b9929c1d421b96ae2c84b06e86bd1e5ab5ebf15c6624e38456fc8d671c055b5a14e4795c8569d79059b7106cddd5fa1df1e74
-
Filesize
2.1MB
MD5220a557302a7d2dc20f904619283ec32
SHA1eb6483faa8c8298e6c766c14de2232fce3546909
SHA256bc8c10664e57a49c8b17ab0163974a5423fdab1d4bf41c3943b4e2b36b4097d2
SHA512542c9d58d6d6a6745d861d099f03ff5cf79c68840b20c83a38082a4b669b7683b6281353643a8446335e1471ac43eb62117c0b7ec30bd6c63366390b4cd7ca6c
-
Filesize
1.5MB
MD523ba23372b54b88df1d0baa90fc3d08a
SHA1ebc868e1fbafe27393b1b8b36bcae6682a9c7e62
SHA256232daa721ee43fa4bff9189135b97fdaf057b61dc6f7ab927602627303d63242
SHA5126a7e8ce2f74174bc54fad7e14ad8af18f1a78ab2a327024d0df1ae1b456555cd4c6be7b067b8868308468f1a890a0a89f94253988d7910dac8b8b5e9499b8872
-
Filesize
1.4MB
MD55475b4619bc0125eb97fdcf2bb2bda6a
SHA1fdf8e90a6d2fc6e2be3b212bf9323121d1cda853
SHA2564ae3c9d7a29650cdbc8a3abcc16138f90dcea86e39e2425ff6afbd5fa3011cdf
SHA512c80e533ec28959478e609f25f46c37a5b35ec53c6fe7e56b4c9ba6d2dc6aa5a7f5a0971a32e9cf2e074b26eccfa47df6c1a0d2e508a1a1664ba0d65dfe1edf7e
-
Filesize
1.3MB
MD5938da4f8a80b362616a6dbf2f8beddaf
SHA1366e7d959f7ca57306353f43f04075a5b726aa64
SHA256b9b2ad8ffaa93aaf2737e7ded7ae1917119d6387ae0dc304c986454bd64984fa
SHA5124d3a11835864adfb040aa01238a6536810fd305d05cf1534d27fea746aa4cf540b2d3970ee9976196479faa7068dfab7fd54fba4b7226ef16bc44312e067c2b6
-
Filesize
1.3MB
MD5ede6e530526f23fa7fccb89cedfc1034
SHA101b508ff6ca0176ee18c9bb5e79dce47b0815861
SHA256c7aafe811d22ab3db430a3fe4bf864e37a6ae4ac95a0263d1a167aba9674a77a
SHA5127c699ac1250f9c22e807a2796a9603537606170fe44ed5e9a27639551a857b65cc433ce717f0119abc48eb0b93607fcbb2d25b843d3f38d9bfc207047c02899b
-
Filesize
1.2MB
MD5f24b2cdd8f4b2c296d450a1cf1202b94
SHA1250405a7083e589b10fb9906962472cf855b47de
SHA25684beeaba271ce094b0a1f3c128ea5a90e7b797582a0e8756a50448da965f7b94
SHA5124c18aaa99249316669128f04f6a05a0e8b84423a66071427ee89731c6bdf4c626f98f2397f5a7104845d239bf6aad024dcbf30668b8350643b0e04c5834b3ea9
-
Filesize
1.3MB
MD50088c49d5dfaf81d028450ae9c41018b
SHA1a14af337df3876bed7fa37d21e68fa8da7624ac6
SHA256cb5e0114d2bd645a05000ecc2e1bc50300f1ff5a5a4c5a89f9bb1579a5bbfd3c
SHA512c778e9d2d9c887f75776c514b0472d2b007a1792f88b18c39864d7fd241b257d93835202e3d25337a94c09127f5c0fe607584c2314079832ec2dc7008cb5402f
-
Filesize
1.3MB
MD59f3f79421b443e6522001433b30e6dfb
SHA1019a64492fcc670963b2f1f283576fee68af6305
SHA256d7c569890d76c2461b1eb54a2ecc775125413ec4d4db20a16434167aeb918e35
SHA512c8a0621b68fcc777ee02af0f06569400ca7e69f72af7d002e50a9bd693bdf099b8211ffa51b3990a07625225ef83cd6ef8d67abf4766c2c0fab16b450180159b
-
Filesize
1.3MB
MD57e62e2776b4b16d9380fbccc5006ae45
SHA139a7d7657b27df4522e94238fa697cdd2e0010e6
SHA25669a3d9fec18cb144803ba69c33bb334cb25a3e038699e245c0fa3a3bfa757e8e
SHA51252ccaa8adaf079c20cc13e49fdf1121548e5852bbf99d018b9180e91336cccc1e272119cfc5d994832f84fedb276c2a8bf164589455309bb5ceff3ab88b3c2f7
-
Filesize
1.3MB
MD513ed4e500abdac7675618ec590c7a50d
SHA11987cd5cbf0af7d3ff55aed38ba53b953f0a4e55
SHA256ed12c2d96e34fb28a8718a5f9311a260db4352a697dfc78bd347b8708ceb2f5b
SHA5124df7d5a3c6d560cfbc59e5f2fc3c5bef8b6d8b137358c29b260c92a0a1785747d9aac249c3ecbde14a8af78ab5d71c0fa76851056aecb00ccc80b58e902ca818
-
Filesize
1.3MB
MD5521cbf8ba1fc4fbf28747b507e7407be
SHA19df91181aaa51f4d39f9da29854b2caec11b6360
SHA2565aa4262497308975868b40ab6baac3678e2e2d376ca5857881a67a23bedabcab
SHA5124bb262b3d0032eae5364dc581b936b14fd0b0aa14e52aa66f89733596b62ff815e73c0e008dd22cacbb80d6c49cc6f90e171f7b3ea765fd99fabe68528dbd197
-
Filesize
1.3MB
MD5944f1c8c3557ced1b7d135dbe1f69aa4
SHA15876aab00c0fa66ffb3a6748b231ae0b7c332844
SHA2563faa66575d15f0c6fb7e7c80ad04ab96c9fa6e8c296c249beb8040f90525a9d0
SHA512eb706a6c2720b588e26d01872d223fa7a3ba27221d74faee93350c04b51520f4af48d7b2badbcfa02f9e81ff7eb168bd286501daab097dca0e1f40fc1890d2c3
-
Filesize
1.3MB
MD5e90220ceb45e4c54e38121a7466d116a
SHA14a7bd350fbb7aaaddad15a9dfc89f9554409b84a
SHA25611ab0807bb78e8514e2672a4fd42ea0e322f10d80359fe3d98e4a92bd912e6c1
SHA5128303d64178d6f73d9a934baa77201fa48563bcb17f5dce169d2f653ea1bba93ab24a76d9df1df491d7731e254ff33f86541c16024d520c7f94fc8e7e096c4377
-
Filesize
1.3MB
MD51eee0adac2378037612d1c14c5f1a6bc
SHA19b4899ec066e65032fd27b925e440a4714d6bf99
SHA256f323e4b296f2b62ee873288b84c8eb279199e5fbfcdfd0138db2612568c4baff
SHA5125f57025e8180c494b18a12fb2345518bf15edf81907b7ea50dc9a216dc0b0f4fb61f281a66a042638b3222e3bc70bcd5e90bccfb943bbbdc498fa992c34a3181
-
Filesize
1.2MB
MD53fda925366a59bd773bf8d3cb271c58d
SHA1a85ad02db157a012dec5cd13b17e033224483114
SHA2562504b894a6df0574d0d2598b50fe29078940b3a80f70419509fc201574aa3941
SHA512b9f903556bda6d77bfe7720c469584f65a33cb24361f19d1f6f6e3a59a414675bf61972936be276ef3008574552f8df909d62dcd07e59bde745f29493d786f3f
-
Filesize
1.2MB
MD5572200b5254908775ee3a65fd28407f0
SHA139411beb6af29598e69fd2d7b6ea1ad4a18de3c5
SHA256afd7728ae0f2a915eb84226b5bc131a17a81be8b8fd461b0cb7ecd9c01566e48
SHA512f7a36bfe2b289aa2431846170899bbc992f6e720283c1dbbb61543cad6e4e024f1700785f35714ac228b06fe44df88887460f782912027d1ad792f0ffb60a63f
-
Filesize
1.2MB
MD5ee5d2677c2491f044f17c4803b9b629c
SHA15f86d4cb1ab3653765299f941f81cfc61936ebb1
SHA2561d4f7200d6d55cd05af463773479d27ece1f5d39db8493cd11a7901a9737c28e
SHA512300fdc479686e341c9604c456278083621d84494697e2e62bd0a236e0ba747fb94bd587362d70040c31bc2400238e2c3672887cee169b2769f647c249dbfba36
-
Filesize
1.2MB
MD5e91dd96d7042f5dddefe4b4140a206c0
SHA1303a8c7e9978a82eb482865cd7c5e720bb6ed6f6
SHA256d18cad47cc540da02d79c90a44ec8a46e9d35d631043252df29fcd7814d2fb38
SHA512bcbe31d141f681022f74de86818e481df0690e48ccd8e43a3b80d7b6cc5529812ba8e5b8afcdd8dffd76d793d779208f4f878cf8421761298c5faf260207421d
-
Filesize
1.5MB
MD52a963019b83164b18fdb786a9459d537
SHA170e3e6852fd066e5ce23ea03074dd01a5a852b71
SHA256df1e263c0430c025a615a41bb7781f012f25dc22f8db0697e1f596a9f0cc6f7c
SHA512f712e2c62a709b8825997dd3fe784acfd4b539472c0abc0bd1b356c9f0360fa5d4415b92a25c683da6db8e3f086bc69546f6955308da5c7f6ae3b23c5f7e1334
-
Filesize
1.6MB
MD506cc67706771554dfb03c59a8836b9df
SHA1fa025168eb9e2ad0b390814ec0ad75587702b863
SHA25625aaa424a460b5b19b2963004731e8daf825cb068e4e39da9f3719c8c853f649
SHA5129b0f48b87bd0f6b05dfc9c612edbc950045f5762ac71a5fb6b7520da5984ec777d043ce7dc0f8783992ac6c880d3e364f8f1fe642d3d847bf7119b85143693d8
-
Filesize
1.4MB
MD51167066a465df2f189addfd7e49b34c0
SHA136fa9f52a251c174f3aa6dba059fbc9cfc6c1467
SHA256d9a6120a6e2879680f345f4ea822028d3a0b4b294e1d196d32d18602c7446515
SHA5127e3b61ca5238cc0362d79a997724efc542e9911ede60b01e75c19f97c92c0a6d1df2e066b1b9a0fd0dd8780e0c0135f6caed39b899d9e280eb9e53c9eadad29f
-
Filesize
1.7MB
MD53512a96da35e3a345e435b81d3e865e3
SHA1c45a3d3036ce60ae4a39b21f05238842f821a738
SHA2563cac1a6771c6c42dc944747a4743d502e2e78b2fd92b8b0e7f1af27ad7b4a0f2
SHA512d130fe76f4489e4bc8d56ef5c17bea7f302f7bf62171101f3911995b682e4b4381a4e2ea069ec3e3bf4aea90cdfc934e6f463caea251fa14ccf304036896ed42
-
Filesize
1.5MB
MD56222d4f54011bd72e8856d0c786bd75b
SHA130689b00acbc9a4587e4e1653a7331d568a36542
SHA2560090c8ba2dbaa6d26f424ee4321599c3528b3d92f37dd13a32905b73f12e974d
SHA51264f02d5c761f3d1ab4915d8129398fc1de102a9f1d68201912c2ddd560b751f2adda52c6263c9b7af15660536586e176378b650d082140c7e2bf99cc045fd960
-
Filesize
1.2MB
MD5235577ca26dffb4f15efeadab77b9bec
SHA1c60dac38a299727986bae295d8b6a2f89520ddfd
SHA2568fccf6d00dbc6034e2f77f1955083f3c44d7eb63a1583098618b05a77e350074
SHA512897cd9460c83ae179ee1912cad988b7f9fb8232293c7928d845d34c73c28591ff3b78b96ee5a0ecbd504ed61a4ddecd2bbfa7019af78c3974c560d0b51baa325
-
Filesize
1.4MB
MD5cecd83bc674434d8a22f0707e9763e43
SHA19e5d77afdacc0db323e1e5055f41f79eaf2746aa
SHA2567795c41b856ec40c50e9616a9db7cb73845989c95cdaaa447b8bd957c6ca5f81
SHA512c6f6439ea3480c07dfc0de395c2ec537b93f0bfc3cd687f7b9bbe27a5d67bf2aa74410964e166c0985877392ba0e99bff592c09fcbde427e9a4a02b89047682e
-
Filesize
1.8MB
MD53a396d829ce9c6980db5cdf143091b1a
SHA118178cfb7520c96a607c32693f47e8dffb9f17df
SHA256e06f3c586786fb07adf4ed9eff44585538e2f7c9d323f0b777cf50a279262c69
SHA512515f7f6d813254409f7b81d5696ba39c5ae3cf76c239ff80b61aee9a3058603f41d7c9c2ad61a45960f007b8515b6436e56449e3e33a5fc6c9dbe230ee94f4a1
-
Filesize
1.5MB
MD5ec3eaa78c5b16fc7c7612eea64ade992
SHA13d0f85c6853844d6c5e9d4f3251a076b76028376
SHA256b59d4fd12a14b51c0fa08af44c8aae76f91e02496e743f8a3c33fa199b3efeb2
SHA5128500378063597a25286c075c17536deec1356fe5442a68895c0dcc9ca2db2577f06f656ab566d0edc1e2c1573cd766e5e85a3f9c687d3e83b1aaa7a87629f18e
-
Filesize
1.4MB
MD5800071a3361ddccc5955af84b81939cf
SHA15ef85542dbe054a976e01c51a29c3b39a8ec5a5f
SHA256b83c234ff200fc6c8f0da3f74eb8f825c32f60d033451c8f2f261aab33e24e71
SHA51291003e16fe9efb9313609c5e88f692150a184df3a1b0e4d049acbc4560a67f5ceb6a0ae4fd94ffcfb02b682ef3b0e4e07d87e7e2c1ac1891e7b1399bf2412efe
-
Filesize
1.8MB
MD57250dca100b448ce70ef0fd17465b9b9
SHA1da0f422bfbbd78547a5a4c66db7aeebf8a1f0639
SHA256929103d7bd6303cc4917c930fe710ebea12875a1c1a8698e4821f09c21cf6bc0
SHA5122b6412654b1401eaceff202c3a0025a3b1d6711ab1e6eb8e8080aa64ab7782874588b8dc3f719815fa44da1c0dd63b41742c9f0eb752cabc70ba774262b3a7b0
-
Filesize
1.4MB
MD52a05c22327ff8f2ddcfecf23e3a747ec
SHA1c80ced06b73ed409f9760a068426aebb150a1743
SHA2565fb0613ab818125609960ded15e000e7a9ca39ee3007ae8b61a6e74b1bd607da
SHA51291ac9368f1df6eecc34ae03eecf53970f7405bf9ae265de736071f700c1cebd0eb8e4949fb01d3d7b17c2e40aace8c0ceae815de3d3ccd3811b582eb1c7b936c
-
Filesize
1.7MB
MD57f759dd9ebfb98a7d240a4e9d4c9ef25
SHA14feaa70214bec8ef1325e6851001d9bc917971f8
SHA25658e8a2dbd73656b501ecad4b5e786e07d3820b1a96cc4bf28dff61f8b937268a
SHA5121e78a029248003882f44f2e56c7e404cee4139c952ccc2bc4a883deedebf18cd0228e633e5dac543e10570777da962030dec525515a455d3a2ec8aa7fc74c1a0
-
Filesize
2.0MB
MD57f523a2b7247b295edcd9ca5a3f22956
SHA1e17ec3307ddf7e125a04f99bc70438522393aa3b
SHA2565b41fa1158d54d550e4c990c2a412286eaa6f313e32cdf911d33770f9f337c72
SHA512bb371ec95e313c809c98ec2415bd3dfbb4ae4bb64de71c64da15bdabd9290bf51f45c66846d72abbbd02d6efa0d7e6a112cfa3eeec8a0183eb7f477188c26f69
-
Filesize
1.5MB
MD5017da374b6b0890b1bb24300e0d0c960
SHA1933fc4da4bae5a7e15abf9a7b4148d3b65a4be94
SHA256c65bdb65ad21100a49507c1ced2ff445f4b7ad742ba5e14c391a43709c0bd249
SHA5122c3654969a0430227b354e6264b480baadac6eec00c6616a67484ecd47ca022f27e92274faf6df6f8a16bbaf9232542dda18ab830571da788130365980c78ff7
-
Filesize
1.6MB
MD5c1b12bc69ae8542fe94043ebbe313806
SHA161a1142074f8be3426dcb139f92677413d3745ae
SHA256ed453f2365b8249c584c70d1a0f3d48c4d9a93302ad09c4a0913418ff1b7145c
SHA5127b91e48d0194ccdd9880689a09467e6266cd7bad351272981269e6b177baf6e7900c4eece18c6138cd457b28d1f3fa4dc10aa6300cf9759f5e06d1b9e743be50
-
Filesize
1.4MB
MD5df7ce959e63c6f513c9193e2a4dff0bf
SHA142a7e8989fddabbab3398b81e6cc3ed46b1c17d9
SHA256e021cb99984d8a759395d5479c24026d36675032123a0307c41a5c3ee8b1205c
SHA512f45cda95bdd9160fbe62b49608f62384f507a84d696323d3646b0abd5d3936f1faa0d355e8b86a5dd81f3bf95fa9f70e9f6ec1e7ec6531d05ff592c085500e05
-
Filesize
1.3MB
MD5dbbb0c74f7ccb1884d0cfc87fb9b7448
SHA12439c720c8c9374f2e82aa337f3919a775435efb
SHA2569b8f9e5e51b4098ae3d95b0b5fdc3787d36e13310665c81ece11786c19490d12
SHA5120dc0bfcbe69c3e901bb2d99ef298b1a0869bdf916bf4f7ed2127777dc63df7713f2c23b432af96f1997c0e0887f89cfc07e3cb2a565ecbabed6082c32269cf5d
-
Filesize
1.6MB
MD502fe5d419d381a01f4ebbf5dd52ac73f
SHA1214ad967659bc3a0497da8c992735014868bc725
SHA2569ac5aa50069acbed86bc4c96a8ebf048605c093a74a9f0de1d02939ef73e1ca1
SHA512abc444931c0cd0a4e085b5b070ed2556d3a08348d68470145cfd9ec97c41f5f63bf33fc54ebe4af860db36fda6921114eb7d3de99893070aea0880e3ea61753a
-
Filesize
2.1MB
MD5731eafff26358fde13ac436007da62e0
SHA11bd12df64965379e67d59134891f33832430ee39
SHA256f5cac456fb5b310172127cba25d6bc6d0b88b7384a4b834ffc2782b5ee71d527
SHA512ec10762628cac891f06f4d88a19592c6617fff7c9745269241e352a1354f82c9e1defbcb6807160b0bf3ee7583a508a7e6e13347e5937428103b45fcf1729913
-
Filesize
1.3MB
MD5f9f2ac3f06b0528b0e5ab36a36f2c670
SHA1102750b029f4cac055c3d078a26f8208f441a0d3
SHA25682b844bb45e942105784a9644f5e2f2897fabfd2d6641d48ae2eaaa3d063ec3a
SHA5122ff8816e2924031cdbca30cd83019271ab173b621479a93a3d2a93b9a6d06d6377b44d90a3c797fab4652c5a02286adfaea2df855875541308ab9da77bbe83b4
-
Filesize
1.7MB
MD514b03e0d596eacc0cb09a24813ad2edb
SHA1f407e5cfc0df7d9f8c11d16b19d7edf00acfafc4
SHA256f6785b6c78967429a779bac99be512e1827c300d89f6d96fb89869a0d0b96dae
SHA5128b8e3375650e548f370e352c213798694f7c005c1725256cffd4dd6174e8269ab00b792ffa084fcf1f17f13883f03971b3ac9cfd19152b6f46091243179cabb2
-
Filesize
1.5MB
MD5bb60b92097a9a6bef8d1c80f6666bf0d
SHA14b640388f78dd8d28ace68e71a2f0c3072d20432
SHA256f0f91cb28ebb0775111a1e108202704919baff9addae8f1753ee5e32d500e2c2
SHA512d38d5e8fc7c82507a33443e9fff5b534456db565a2ba181ddbe12fd0b9bdfcf5b94d34e7179c5fb8a942ed7cf6279de3eb473cab6377f8c9e1e2b116f8d2c233
-
Filesize
5.6MB
MD5ede02b1ca115da9d4361da4e9c0a2a40
SHA10a7425c6e95c04daa449e6199b78d2f4a1409d3b
SHA2564bef9dcbe1d3bf4e1196c925173f16ee181caeb072697180bfc0fd7ce1fb7e17
SHA5128654d50ee761f61aa68622945efbce37db0b6cc31f33d281160f41583f563f8c8a1def0ef7e955f2c0bb4e0144fbca6a2aa617f5b74c2b549ea85385e35eabb4
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.8MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.8MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB