Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12/08/2024, 09:27
General
-
Target
2024-08-12_b91746fe49fc89e8a28df14f0208b61d_bkransomware.exe
-
Size
1.3MB
-
MD5
b91746fe49fc89e8a28df14f0208b61d
-
SHA1
396d22cc76cec1e938da3c9638a161a2830706a7
-
SHA256
3e3c283626fb0a1c6cfe2025ebe7cdeab51c2f25c798b2a3c158c63bf6d562cf
-
SHA512
b51f0eed07e3da2471946a5edf89e1e3d0ec7d189e197430accf418444a74a466d10c57a38bb9a6638ba221e7865d0e041bc60e42d92e8c56c45d6883a836fbc
-
SSDEEP
12288:JtOw6BaXMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:76BTSkQ/7Gb8NLEbeZ
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 31 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 35 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 45 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-12_b91746fe49fc89e8a28df14f0208b61d_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-12_b91746fe49fc89e8a28df14f0208b61d_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5a9f61daa7ada4893bf3c2b5050c162ad
SHA1b9932674410d33cab121f34f0e4c51fb39cadc75
SHA256de801826106fb17b617e772b1e779a77a178187bfe5ea656ea853516412e16c5
SHA512f519590f7c63e3d6b413d924a57f5cbc89147cbb8bfd268b1d7da6b65af9420e89c22e6bd67256247a587abdde0192ea6a4b266a44c02d318457d54ea7aee7da
-
Filesize
1.4MB
MD53811e8bda3ff8786676a471564871171
SHA1c3382a016004aeda88b97642ef411e56548c1097
SHA256756800c395a7c40c8521399fbe037d537036090afad614559fcd6f4250f99866
SHA51243e7c0ee91680d56f7a29a72aab2317c5d498cb6c0a4c30c329fec8c324f7b156bf29a6f885629919734e6131b9281e5c83b5c218de892cdc429e737b663b618
-
Filesize
1.7MB
MD5e25648be1a01fcb70d505bea6219f4da
SHA161f2f17c59b5c00d3e40d2b80f0e03bea9cfe12b
SHA25672e0a33b2b490d1499616861f7902741c7396c47e6569bba7700964014e7982b
SHA512bcbf6e554c50ac8553087550cbae70033437131815d5396f54bc56eefb92c20c63f27ce92ada8d381bc41b2744fcb442eadaefb9ba966d6adceefe3b0418078f
-
Filesize
1.5MB
MD51e9af745bfd14301ed4d8d4b3303ea17
SHA14f9c13f70a41583cc5447415889483313fddda77
SHA256268bae664ea2771e4b1dc18f7274d112a4056e9da0d1a4d876ad50a8ceb4f163
SHA5120e532f1704036595ce762a0c03b0738f9f9610c4fe50da54460d935bcfc03b24a63d3ee78fa0096d2f2026a4449cf89f51612866cfdc8534545eb17be23dee07
-
Filesize
1.2MB
MD55acedd79e8a53ab4cfe2ee5d1550997f
SHA195c6d83c0b790128697d0db1c697d5c542dee07e
SHA2561fca5c1ef603048f74a07fe7f4cc18aeed3585fed6a45b815f5bcc24fef6382c
SHA512b021a3d185aeaa7b4f1fc1e8a0fe12afbcde5565b75f0740cf8a287e974de95f4e6424f94b2e7a1ff22d0f6085bc996b025e1f7463faf63de1b21968963022ff
-
Filesize
1.2MB
MD5564141afdb0f2519e71c60c14a29e717
SHA1707bd86e20b9ced0d1de7a221df5497b464564dd
SHA256d435eb176823e0356bde13bb30f8b81b0385a23f62d16507f9ede4ac5f6822ef
SHA51211dd1e5831117ebc58f82be1cc1494d73029d8ce9e662c6af40b3e17a32e46f1121cf5c27c2e32cac98df4a43e86e0681b5e94db77400d76e61c01d4ff4a7f43
-
Filesize
1.4MB
MD5dc4e1d59f015fff31e7903b769f4335a
SHA16e3d7847a4a6b51b954c3889b8b37422caeb4dcd
SHA2561163627e7675f3a0748de55a29b3251a6b6e166742935262e10637b088b4cce8
SHA51223b5585338bf68e6c095900a2e93cda9caf983545046904736b015400171ac73364fae9d9e2634d6c5a24926c9c101ec228e5e980f31df293886fc3299a5b024
-
Filesize
4.6MB
MD5a7e83866471c992d179947b9d315785a
SHA120774253c9ab143ea450e779da579a72493cb702
SHA2562803ca6c39401fcec7d9dfc0fe2960e01b264c5eb8d779e426ea8232dbcb8060
SHA512406d98f11bbe6868a03779cfb474aa66c99d322c24f0f952ca623963c40115f8d666bb89e878a1ea2cec7c5e5abb186be7feab01f5136e5b4677864f9232e7e7
-
Filesize
1.5MB
MD57a7b82ae090c49cabda044a9b7658d11
SHA154f1c919ccbf52c0bac64b9df99486ff1298c04e
SHA2561873c1f19923e037ad579898ae01be432590d21cc09e8972b6f1f09a51fcf71f
SHA51279d9d1aafb32e7357e25292cde6ff225381024d792ec041c43124fc542973bf86450aef00f154249cb6e287a52e998c6421763daa460952e4635176712d88193
-
Filesize
24.0MB
MD50959f277e837f036e8d888a129273a28
SHA1ae8ffd361a1fc1a0fa8a1b777fccf815081541ae
SHA256d927f2b8870a5f1b1e4664fd4e6f0ffc23b94a3b8678536d1548e11de670cc2b
SHA512fe01516fb355caae7e53bc45ca6f9e817442a5cabc943a45c848b65e1d52309e62e5b09951da43131550aafd8748a155ceba42abb03a3c76fa6793d53c35f9a5
-
Filesize
2.7MB
MD5bc7c6bc943f13de006eea2660b9f0d90
SHA1a8d4153229598bb3d0262d16cb27937c50b66ca3
SHA2567d2f1aa6612eb5f5aae785292ab4944a9282b1414e163f7e88e26f96961e8dcb
SHA5129f9ee5e985db55320b32d2e29ac9d3c309a4d2a298e20232906f4beabe7e9540eb28fd1b4c2089fafa35d2a128441ccf017cd35464fa9f6d3360a955e2cb57ce
-
Filesize
1.1MB
MD56ec2d1094282423e2677450a9900c37f
SHA1177e14fd0ae82ba29f9e93b94ff5a13c04cfa3bc
SHA25624994bd938c105c8d642ef216ebd6e9fb93ac58fabbd1cfa8a8232257276ac1f
SHA512090b000983d743d1d84ec03fba91a66e6a417e20d8bd0d3e256ac19aa5f8c9c7141a05fa9abd34e5e853a891ed15c35ff832a3a065f108df1298c32de044847b
-
Filesize
1.4MB
MD56f2aba2da5e2c5397ae9ab93e1b34ee6
SHA166e5c2e8fbcddc5317de6ad49cce4ebb0c095608
SHA25655dfa6ef6d9cd66fbb5cd07d059ceaf90324ed999ce44b3e51d2b15215582a86
SHA512e958aeb2d636e67c7fe5bb3b93ce4282fe97d61992a9d73f6db5dc2cf81086edfe43ecac0e45bd762e3ca770bf2826a2c24ac6ea20978d99c8b4f892df106af3
-
Filesize
1.2MB
MD58464e0141a2a53e086a1ebc8292765f1
SHA1011a0ee017175f9f1382c4e2d260e9f137e8a1e8
SHA256d24fc9de4224e61a8bb3a180e9b77b53aa2e6e8cdef4b7fb3b974cb8e7e62de3
SHA512b7d6569003ea2af3b299902c4fdc1a4af1c9fd513c7576c7f1b8d6a2435328dafa1fc4e33651151e03e01ca22306417fbd7dc9bc155c4d5ea6a2b43156aab9f1
-
Filesize
4.6MB
MD50e82c6faa10471dcde826b45331365d4
SHA114d86bd53ea8d2560ce01f6b7fa4f6973468cf5f
SHA2566ffec581457e45d00de4e231ab6b16e521f00c4b93589cbbae1490e38e9226a9
SHA512e479f9ae2466848c88375744fb04eb5a2d727d60742cfdb41b630647450ac0853e5f218bb36acb0d99b8afb47851633aa531b403d97c68c3aba447512ea88824
-
Filesize
4.6MB
MD5331fe50f52b87e5c050fe9a060251e33
SHA1953f561d02d9178a4f64d55616391ab0fd92b3af
SHA25642b78862bc64fa3d0b4ce3bd023b8a8f5cccfacf2e3e7e16bc8023d724ae81c1
SHA512266bb9ed325a38330295dd5042f266534ddfa1b456c0a0c2a7c33912fc31f1427f17fde5326245a24c9d984088eab0fd5a8ea364820132c2bbbcb0ad755ca3dd
-
Filesize
1.9MB
MD5bbb961c23bfa7b893ac643ead6867e6f
SHA1bde6910e1cc71d61e79d5feaa97d1d0fd0d03376
SHA2565a8f143a44a29600d244581e4234b017adfd6b5b5bcf7268f2782647b20a9fd8
SHA512d79435a11a14fe81ee0e81cd70d0c4188197c421db8d7c355c0f65a1b1b6cbfbb020def995c839bc057bf1b4cab33384ddafa0fcd10e762b020cc6a1a1293850
-
Filesize
2.1MB
MD5266934fd27e44a2d07f4cf977716593a
SHA11e456a97df08d3baf9ea64a05c3068c859385466
SHA256a26cb8680702d73ff8c42451eca7a26939b4cc04be44a4ccc5ce83e411b5204b
SHA512f3fa918d77ab93d375cb0312300a379482696c852f36d77b27cff4069763450fcf57207bd7f55ce821e6df514ef8c111299440a64dba855b879d1eff97cf4dbc
-
Filesize
1.8MB
MD5148ee8516128629948c80424b009e8c6
SHA10fcda8a4bbc8e6cb67fa1ec97748b04c8ed5ca21
SHA256851b7007ace05aa76d7d5424177d2b4904ac5768dd9cb133e2844faef7de340e
SHA51232afde80d3bb2860ca47b55d0f780f08b64a82b32f7c1e73d248a286699432e3b75c395adcf6ad7a361338096dec73e75694bf6554660ab1e501a79d8fb3ebb2
-
Filesize
1.6MB
MD560a7c5b9a7b6b9cbf23d26f7c2eee0a3
SHA13b7530a08f2c31c63448d45ef35f00f30985ed12
SHA256afc78b61e355affd03bf6b2db32ff41df8c6ea7007372dc424990b32e5c48221
SHA512ad7dbdc1713b32cb255fc14564c15db47bf334859d72e219317be81895f9f6c632950070556efee7d526da03fd05f4a312c9479f6b6025563ceb858a74d17661
-
Filesize
1.2MB
MD54ec05a2fab5f82e64b8915143ee423e6
SHA17f52a343f4d3f5a43e934bf851bd1e8d8db33b0e
SHA2567d885135273ea11ac45fade8f2246c3131a304629973a10ba15293b638879a37
SHA512c5e62e56b1312adfb98df6d9c9933805fe26191d7aa7614540765d2ab03d7385fe5bbdcfaa33e55f6e973221537ad5a780bcc63e6123b19ad7963e2800ad1d5a
-
Filesize
1.2MB
MD5ec5eb2bdf59ad7d7f54abecdb363dce5
SHA1ebe2c23d6ed9ab8e743d10c24c4b1589a33f61f3
SHA256d963319b51ed503927538172f0c65bac24f621419c05823cca25779f0d07b047
SHA5120b6f2476b4862c83bab1a5d0c5b5f0c0dbe7e028a7bfad51b9ed8f6dff7a7189f2558a4291b1ea5e26f349e721ac9a68c0259540489debb4633ee9840634f1a0
-
Filesize
1.2MB
MD5a142883dbcc37b7000cdec58973dd362
SHA1c7a8323311d4e237c5c7eb0fc88bafc61848e95e
SHA256148743fd01c8cbd46a6ffa7198c4763aa62200a0c93d43c8ad2bedfc31a86d9c
SHA51244052adffcda14fc8ce9818d0b61635d97117b77105af65b025b8c3a0e37c591c48543a314d45d161517effb586330cf276a5113cf2b24d1717dc4bbc1079938
-
Filesize
1.2MB
MD50de95ed2b78daa713e98407635dad1bf
SHA1e991d0992650f9d147c6048b8ba5af0646786732
SHA256bc1f89f71a2c9434940917616c47fe8878aecfde16229aa6902607decf583f2b
SHA512583a800a388e1b598ec8974f9d0a4a6bae5ccf7c5998397a7eeead60ba70164483de6d452a773f7ce1249d31d834b1b805cbfe6022ba5ae80dc8283bf98b37ed
-
Filesize
1.2MB
MD5211430ced244adeacc3b9fa8d1cb9585
SHA1a4a38bba29976ceed7e18cfdcd88924e23755277
SHA25664edbe2b484f67be1550ef0131244acb53ae377a1cd9be3f24d207fcfcfa65c5
SHA512abf6c67553540700d0e7b13a404bba9957aa05507ce33da8d1114361f365c179cade1f9489f37d18e2f7d8c9a55cbd505855bffb9ea38c2701ae80b3b1bde386
-
Filesize
1.2MB
MD51454cd9e0679d7912baaf764ab356fd1
SHA15bda746fee86f924d5118750e1879df59e7a90e7
SHA256bd60cd5521001e31eff6a7f42e433359a5088645917ee6893bb1c7b1fd05e66d
SHA51266e72a92155662cd5544f261d957ac6077653ffb654cdf8e7798f32c96a095ea9900eda53bfe3f1ef3d4a4d7419377b54abebf2643920a74f4a96aaac07e7cd6
-
Filesize
1.2MB
MD5a3d65d0c71897d2e746c52731de6b15e
SHA1ce32f81dff58cd379a8e4794d78f7b926fe34ada
SHA256761db38f39debedf6a1e33e33a91dce6e09da8107b56592ddbaf58b1c2cbd908
SHA512853b6c522d2656d8dc9976df6c9fb43a155d6d9411ab0c0eb24733f152a3c906fdd362f54a0ab8cfdc0db7fbc4b49e0403477442764841948f172a9943292139
-
Filesize
1.4MB
MD5e5ca8652d60fd5227805ffac075ed258
SHA124ab4e7a807a573d9aa2127d7798847d9ca8956a
SHA256ac0bfff086581c8cc4b877f2f1d4fc0e0334ab700efd237dca393dc416199a31
SHA512971169d2055ec11fd02f93040109c3bb33c3cdaa361df55f68fe539c615dc3be4c8948d68c6f6fc3c78ac5117e69f3e4d808d52e5c59958a4e40fd93b5381670
-
Filesize
1.2MB
MD567bf03ddf1d76e4cb87c15ea93365ef3
SHA107dca5436523a0a364ab9e01d7ec9351f459ce93
SHA256fe07723adda833ccdf0e29801e7ceb8a5320e9f5fc1087777aa36423a9709fad
SHA512e062e002220b1c2f096baf6b06e68967879fc506c31e617e975a7502a541e99c6ab54248e2417e2ffb7a0dd6fb73585ebc993667389cd017447366bf31aba9fd
-
Filesize
1.2MB
MD57f8f1fd023b83dae8de3fc69a35f280e
SHA1ae2d48bdf2aedd5e81192de436f1f7887b2ec11f
SHA2563288b5175d1e0ec108a8a4f19b51bbd823a217803cdac4c3a4d696fe6007670b
SHA5127966166793568a5cfab74cbe1d2f944362e56c281d6b31eed1da46feb25a88d9449efe29dcadfae9df3f782dfa414b7de5cee0d10f9063d5e7642222f88bed29
-
Filesize
1.3MB
MD5e764d7c02c7b4aaf42577c652337010c
SHA131f04963f4e88acde42dae4e2335bcc42dbe9f49
SHA2568c3e8681c86dec16f2ddd1a4a0e047951a4d4723c90ef8a1926a6fa49d6749c3
SHA51242f131f4947cf9fac22ac7899ff5df9adb416f8e3c9e64797e3e6fd3d4c00b662587714b67659894c61c9984139e1cd0fbb6bce90321801e3b48f1bd961d87df
-
Filesize
1.2MB
MD591f23b6e5ed03e71cf3e6e17b4871a40
SHA1fea4edbf2d73db78420d2f6375d46f11fa6071f7
SHA2561518fc0dd27c4a4634abe03f2f1f35a831055b95b69b0e6216f490fe04b0f7c0
SHA5127e95c958024a69515aa4e97fc377c736520cc47a8f98eecac58c4340d993c7e1b8348fb6fdda70a27be0a2ae5187cab8c6e6482872dab37bd39731476f18d279
-
Filesize
1.2MB
MD5dcbb2bf1a3ef9abbeafefa1a94864ce5
SHA120cace5ecb2ebdd3b7447cc3ba5285228de19902
SHA2565247e66a58f755cd40c0717ad50daba352c72599f41f03fe3504a8ac0c820739
SHA512d1efd2778090b5064d76561e45c94c266d7d7614ae2624e55b5786668f8da1478149da3e01f5814b994c14f199a858c39694c7a45b02432ea79c89d0432cc4bd
-
Filesize
1.3MB
MD5da932fdd9fceb471d08d248b98283a0b
SHA137fe16dcb37d3b0d73c226222af17a8e6a608fca
SHA256a93a7a294173f0cee1d9f68e35a3d5627aa69fe2e4ec065de15912560d677af8
SHA5129d1517e23163aec45111eb32f3b48a49cd8245b3597cdc2749fbf257a36b81db1deeac5a9120792f0ea8001c0410abd99705bfd70e5c2c5b52bb7636d589d0d4
-
Filesize
1.4MB
MD5d54e67321164b7090c2c93de3d108ae5
SHA1ecd8fb5e1bea528c1b874141bfc8c922afcbaef3
SHA2562b90a7237cc3244c72eb801c126f448828d94edbc6bae211175d3d2c8623742b
SHA5126532075ac1821efb194d5dd15b37a818e51f8eba9d03237f286c924ca877655c9041c574634c6672d9cfbf90151c5cce5ef020e6a13a457e69e8c0db476c6ad8
-
Filesize
1.6MB
MD5b246839f216425b518f2af8c96b97ff3
SHA1370050a43adc9970d29bb5d795f2bb13fe69aa52
SHA256bba1987a8229a39bbc2ca3d3e61a3182f321e89ac3b31fcfcb19c4e6e211046a
SHA512ebd1bf8fd2e45c9ecfc8e706891fab4fff2abd8ca9dc1c8578c50bbb3b13a85080d2ddb97802c0db6f9f0614eee651608e9f646e82064b914cd5083d1ed12d68
-
Filesize
1.5MB
MD5f5e5d2a154774c7c7d0f945fb2aeb4e0
SHA1c2bdcd9f9b8b603f9ca28446495b06a4c7be6711
SHA25689115c320400de7b3c1f8eaf08fd54878e3a1e161e485df0d3e3292adc871ad9
SHA512a97fbcef050b87c6fc105ca65b96ea4af57e016bfa6a3a253dcf59278d4b51dd991ab5f03a0df20a856bea0f50f4bdddba82d08748708f2f40a01c68681c7b1f
-
Filesize
1.3MB
MD5305b9ea20f2dc594956cd05ad2a7a3f5
SHA12f32971f8bd56f24c83e109339f49c46dc1e4962
SHA256c522792197a0a149fe46942b4ef748c6aa948df137a622d7fd352a6119313d1e
SHA512c3c38f19b5014e8643582a456453d03c0ba4fcf7ef76799c0becdbc0946da87709dc33541305900b1a37607f42c90616ca4bde4a987850b37223c1e9be5fbd4e
-
Filesize
1.2MB
MD56f499ad608a4aa0149e5de3bec3c0f95
SHA15459ec62af606ad709c1999b4ccabe62e7647f7f
SHA256bebd8ff1c3ac76058f52cfb2ca5fadbf8d677088a8bf76856d0290d268f3b724
SHA512486fc235e089efb72886b84cb73db3a3cf2fde60b508dcf0635e3044a4e8fef7e3bf9f8b4c13d8875a6ded60f53c1eee89c66e3ae5a15690508e18c0e1c7b0ec
-
Filesize
1.7MB
MD5b36045eba6ce345fd6521b6d5dc8605f
SHA1c1a31163f9e8ba97bfd0039187f777d1fa243608
SHA256dd780b6c7c23e5e9973e0d5f90539631ded4f9e1dbf3fe37514ea440d6ae6e5b
SHA5121462bde22177baf8e18d2f91a7dd94d31c73e0c144177183dc1b8a945ed4f2f621f40b3e4ed2b92035efea380c8fe41c884984612fd4d9d9a9e442058e342252
-
Filesize
1.2MB
MD5ea44b08106a6c9a140a34a5ff0e312c6
SHA18ab3953886c25c320487f1cb1a5ce5475f0459af
SHA256aebf4b1c22c1c4c8397cba764cd4ede4f5cfc397f7a16d09034c9c1cd570d81b
SHA5122968d31368b6657e532fed7057bff1ccd8c9ad5a792a8fe4e6c0d98ef1ec4f26f7bd1650a87feba0d96b62de3e3f7c94b473ef531b6e23fce185e1ab135ef44e
-
Filesize
1.2MB
MD546d7e16ddbcb8a2af7087d56e3e40797
SHA1175fa60c8710a37b0bb2ffa215d209bea1fe4f3e
SHA25679f1744276485ca50506338c2fbe73adbc6be5173dc3e18fae63e706c439038b
SHA5122bef0b894145e64a4468ab39c14787740f91c157220ee7e4746f492139a5543821937d1c222a5ecd92e74178ac08ab896822133acdc3ebcd88459cfbc723d32a
-
Filesize
1.2MB
MD5f251791fc9e3aaf13eaaf6bd5796a335
SHA1468ea3282e3d8961165b7d0e2d1d8a76f39c6a9e
SHA256e87391a16dbf05edd0a93d53c996bcff575a02fa9537c24e49037d988fc31263
SHA51232ba0d65128f95ab1dbfad07a29d1d9ff6b20ad7019073732cc215f4fbef40bac0f81690443f592f19993264ece6da2f726886b37664b4600c21122772450b26
-
Filesize
1.5MB
MD5457210e97ba00e76b3b2eb9201d30c53
SHA145bd03577a316060ce41ec69b107b933a13e3e55
SHA25657969403bef6f0598b401452dbb103bfde3e7253a5e29eb12f9094f6f227a0fa
SHA512f236170c4a10c947e797943c8924ffac35b034dd7580111533ea698bb7a5bbe9e77617d0eef0044dcbf56e396042bdacd29b79812c76d49c5aac92789a57da93
-
Filesize
1.2MB
MD51fa6010ab2f86126258c20bc959a7dde
SHA105bc9b7c8231f7fd1948d3c5c5a2bcbe5aa2445d
SHA2563ecc41d99d4fa2c212479ca67c4ebb2c0bfd386e0da48db8c063ae3c1e6ea4e2
SHA5125d0ce95fea27b9381d75f21a022582005c3a1909f292cd3a34e2079f9dd8f81d65d92a55984eb82ea06fc5872e54ee2682b07c310a008a23f5c7fb2649ccb0b4
-
Filesize
1.4MB
MD52c4726ce6b119e30d6b072578c10a666
SHA1bf7835e6dee0e38b8556391483e061c74f8d988d
SHA256655d4d30347967b0da14ed17e2382047096cbc79129d5d2555bf3b817ea88c83
SHA512f7fb142db1c6f2cfacdecf712d8c2c28f1a71972b03668bc1b1c43a93dba7da5c25de2732f20bda9e0b07993a8a794227245ea205d246d12116f5a15c9c2b554
-
Filesize
1.8MB
MD583d344a5b7fab7e2cab5771d7d5a8b21
SHA1fab035663209023f9a4a148dd17309832bab031d
SHA25640830f9aacdc87d7e17ed464ecaf59206f8bf5f3e33bd6598d8ebac6e3dbf128
SHA512f36fb589bc29849b1ce6a5b1f320222371ad129b9afa10337bf9c1dc27e8107a3b56da568fa6909326b98133df8f4b400abbc340d3d68874d1696df5a79d2a63
-
Filesize
1.4MB
MD5c13c9c532306b6a963100b8eba07d94b
SHA1935b811337c63b77a5a208960c97bd8aa510cda6
SHA256075b0571f4f4e3fc975e185ad96f71e0f499364e84ebc518edf32a1714fd182b
SHA5124d553cb8f109aa3570ffb08823d5352b03c3d2d9c75d1e29e726b2be6bf4fb44d73322e1d0b64f1bb2d9996be4c30690eb9a4a37a200d174473aa6163fa6f615
-
Filesize
1.5MB
MD53ba0fb60966bb475bc0f4967f7210c8a
SHA1946b26118d0da73ae5761854c5e94c0f8cd79710
SHA256a94ba7dd4adb3d57d63056d71f8ceb51a20a36798408e86205d02685fa8c53a8
SHA51207e2127d04549ff14810a1a6b9a181267b6c1424a2e1da09ec3afde7539871c6e7fce1a6c547efb25b5c168927a5d5fab3097550700e248ae981559a37a19196
-
Filesize
2.0MB
MD5e7a6518307502b9ae2a63cc3e82bd116
SHA139ccc05116567768c307faedb71f9ae2f23ab1a0
SHA2563abc0303385c184689c2dce91f175ee6a9b0574186106e89e60d1981f83380e7
SHA51213ff52863843c858b0b4ffe10b6a37fabaa694b398e058562d099a8f28dd4bdfa14d7ab1f3acfd51d06818db49f229a58a189508b3c2c3cd6195aa3f882917d3
-
Filesize
1.2MB
MD59bc7e6edbe7d6c73661005d26686a763
SHA1273743e98bddd89bbfd9dc0f03d8355840f07499
SHA256f5a424c0054ec64613a42b6cab046911e00630233a00ee64de79911b6c1f896f
SHA5124aef194974df2887f6ced7e6a882ec84c37d035dfeece8b745197504a5b5ea09d18e94191a7994187fd726736e297269bfa6d44966c20f3645a559f44432b452
-
Filesize
1.3MB
MD53392ceca3da32e0b27901de921431e9b
SHA1bf69fe135e3b0675a905e5610ba1b29b361ee114
SHA25694e72d8fe29ea4513fb7f74a9cf54fc9d8a3f41b3a12da1b243aadffbf2da802
SHA512f9d67249965a34e071a288e862de8fc9d44723f1ced473465ade918ff6aabbbaef49985377473aeee92764de3fd318099adb9c5434a74395a733b65f90238b17
-
Filesize
1.2MB
MD5554670c8b2e286a5e9ef1b08b8ab077c
SHA1f863266b33eb42db6c9a01c5fab95943d5093f37
SHA256a220a4ba6adfc16bbad3f67f868220327e496cd6f0709839db87dbdc920d72b4
SHA5123e47cbc4e397c144bd2f6a8bd2cf9b0937d960160f654bc1e7de2906ee384a95983bd5db8ea678e85f40c437654fe201a2216715690622df268ac140b72c9e33
-
Filesize
1.3MB
MD50255979dfbffe834043e037ff01ce200
SHA10407eff892625e53f4227a93bad8bfa1f02a6112
SHA2561930c2b5c9e02df48772cb54a815062badaab481f27f48b2ab9e68dbacc08817
SHA51295a0c55cbf989ca1abad3af159bd3fe7cebfaf09e9913e479da781a0aaf5c4715149ffe45b277169a18f3c1e47fc679e3081e76baa8ee9faa5f645aacc030941
-
Filesize
1.3MB
MD5bed53d344cf35a3497516e164862d65f
SHA142e3fc3d36cdc9804ab7ecb52edff9bf0be6bffe
SHA256e082f1506efba185a055d3832e9168fe3ed0a1aef8105663ecbbeece7c2dbd6b
SHA5121a2e3332da370e9e6429bf2cadb18016666f3aece6d0173da07dbbf10b6a8ed99a49a4cb6af6b4a9ab59306d183fb03c14c475f8cc83a093b064be3a9b53268f
-
Filesize
2.1MB
MD520f8338a9ad1966d1108111b64138674
SHA1fb5b04eecf06a967af82b76ff2058cce86dbe023
SHA2561baa8d8264a01c183ded70f7c54f47cd560b4b2a02846d1c46e6c13f5ac96ae6
SHA5128fc794ded023832d3d5d11a000abb7d64bbeada1c32cfb9f19651fc37b2e13eeacc0c07536c807b1c22e5e03859baca79e4059fa28b283fd5cd483ca6013d62f
-
Filesize
1.3MB
MD5e6cafc0ff27448c77887ddee887f98e0
SHA1d0e00b8e9bb8414ce8b5ed9ad51c1bcb716267d5
SHA25628b4b23d5a71b7aa4ebb8b3eac4fa142a42dbc1931107bfbd204573ccee3318a
SHA5124c08a9ba2bea934a10e5dc2fbcb4ae6c42ade771a2c202e2bfaa51b06315ad11bba39fab23c0e9b2107797f601c0ba5d2f5851dca118b69c590e3c817a026221
-
Filesize
1.4MB
MD5fcdec24f61ea00c3ea44a04c83794932
SHA1d2405b4bca307e9097084a6e47be7aa764f9d347
SHA256c679a42be56d4ceb28baf86bcdf3ed3fb2104a0735343db9c9681e29c90aba71
SHA5121dde4db8f9c495ced5c7be7fd68df9af12b07e0d95899446d5de422c4ea9c12f12d57b88e3cb28e511d69694e268092b53da2345832b4e3ecc8e8159c917bc1b
-
Filesize
1.2MB
MD549ea1f3ca57ac6db15d4d09e2b194428
SHA18ebf035ac1b2b9cefb61f38727cca700b8c07a69
SHA256144b9ae4a2999afad0a708fd0ab07838c4da92b71fdd36f48bbe29bca600c3e3
SHA51235711b53e38f3b4a27568ea40c022318eb023724d16973709243c3ea03f9a670e8411d7bca08756cd0b264a8ce8161eb51bb6d68b0452fb12ee76d1a61822016
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.3MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.5MB
-
Filesize
1.5MB