Analysis
-
max time kernel
151s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
02-12-2022 00:40
Behavioral task
behavioral1
Sample
1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe
Resource
win10v2004-20220812-en
General
-
Target
1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe
-
Size
512KB
-
MD5
ead68dd785f9885e4ff0e19a429ff7c1
-
SHA1
9910a6a717d4aa98b7458381ca3a9d5f93756b38
-
SHA256
1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730
-
SHA512
9fa363fcf0da375ea2a0aa02605cef1a6b4963000ff906ea56c50e0233b4183c561b5fb9b23588e78e417901825fad5af90257ee886210153d2d7605976b0940
-
SSDEEP
12288:eLjbs1utPPNBS7uoiKFBJns5K5ETLgIUNeIXoS:kjyaPNBS7uoiABJs5LTLl
Malware Config
Signatures
-
ACProtect 1.3x - 1.4x DLL software 64 IoCs
Detects file using ACProtect software.
resource yara_rule behavioral2/files/0x0008000000022e07-134.dat acprotect behavioral2/files/0x0008000000022e07-135.dat acprotect behavioral2/files/0x0008000000022e07-136.dat acprotect behavioral2/files/0x0008000000022e07-137.dat acprotect behavioral2/files/0x0008000000022e07-138.dat acprotect behavioral2/files/0x0008000000022e07-139.dat acprotect behavioral2/files/0x0008000000022e07-140.dat acprotect behavioral2/files/0x0008000000022e07-141.dat acprotect behavioral2/files/0x0008000000022e07-142.dat acprotect behavioral2/files/0x0008000000022e07-143.dat acprotect behavioral2/files/0x0008000000022e07-144.dat acprotect behavioral2/files/0x0008000000022e07-145.dat acprotect behavioral2/files/0x0008000000022e07-146.dat acprotect behavioral2/files/0x0008000000022e07-147.dat acprotect behavioral2/files/0x0008000000022e07-148.dat acprotect behavioral2/files/0x0008000000022e07-149.dat acprotect behavioral2/files/0x0008000000022e07-150.dat acprotect behavioral2/files/0x0008000000022e07-151.dat acprotect behavioral2/files/0x0008000000022e07-152.dat acprotect behavioral2/files/0x0008000000022e07-153.dat acprotect behavioral2/files/0x0008000000022e07-154.dat acprotect behavioral2/files/0x0008000000022e07-155.dat acprotect behavioral2/files/0x0008000000022e07-156.dat acprotect behavioral2/files/0x0008000000022e07-157.dat acprotect behavioral2/files/0x0008000000022e07-158.dat acprotect behavioral2/files/0x0008000000022e07-159.dat acprotect behavioral2/files/0x0008000000022e07-160.dat acprotect behavioral2/files/0x0008000000022e07-161.dat acprotect behavioral2/files/0x0008000000022e07-162.dat acprotect behavioral2/files/0x0008000000022e07-163.dat acprotect behavioral2/files/0x0008000000022e07-164.dat acprotect behavioral2/files/0x0008000000022e07-165.dat acprotect behavioral2/files/0x0008000000022e07-166.dat acprotect behavioral2/files/0x0008000000022e07-167.dat acprotect behavioral2/files/0x0008000000022e07-168.dat acprotect behavioral2/files/0x0008000000022e07-169.dat acprotect behavioral2/files/0x0008000000022e07-170.dat acprotect behavioral2/files/0x0008000000022e07-171.dat acprotect behavioral2/files/0x0008000000022e07-172.dat acprotect behavioral2/files/0x0008000000022e07-173.dat acprotect behavioral2/files/0x0008000000022e07-174.dat acprotect behavioral2/files/0x0008000000022e07-175.dat acprotect behavioral2/files/0x0008000000022e07-176.dat acprotect behavioral2/files/0x0008000000022e07-177.dat acprotect behavioral2/files/0x0008000000022e07-178.dat acprotect behavioral2/files/0x0008000000022e07-179.dat acprotect behavioral2/files/0x0008000000022e07-180.dat acprotect behavioral2/files/0x0008000000022e07-181.dat acprotect behavioral2/files/0x0008000000022e07-182.dat acprotect behavioral2/files/0x0008000000022e07-183.dat acprotect behavioral2/files/0x0008000000022e07-184.dat acprotect behavioral2/files/0x0008000000022e07-185.dat acprotect behavioral2/files/0x0008000000022e07-186.dat acprotect behavioral2/files/0x0008000000022e07-187.dat acprotect behavioral2/files/0x0008000000022e07-188.dat acprotect behavioral2/files/0x0008000000022e07-189.dat acprotect behavioral2/files/0x0008000000022e07-190.dat acprotect behavioral2/files/0x0008000000022e07-191.dat acprotect behavioral2/files/0x0008000000022e07-192.dat acprotect behavioral2/files/0x0008000000022e07-193.dat acprotect behavioral2/files/0x0008000000022e07-194.dat acprotect behavioral2/files/0x0008000000022e07-195.dat acprotect behavioral2/files/0x0008000000022e07-196.dat acprotect behavioral2/files/0x0008000000022e07-197.dat acprotect -
Sets DLL path for service in the registry 2 TTPs 1 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\WindowsClientServerRunTimeSubsystem\Parameters\ServiceDll = "%SystemRoot%\\csrss.dll" 1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe -
resource yara_rule behavioral2/memory/2088-132-0x00000000003C0000-0x0000000000454000-memory.dmp upx behavioral2/memory/2088-133-0x00000000003C0000-0x0000000000454000-memory.dmp upx behavioral2/files/0x0008000000022e07-134.dat upx behavioral2/files/0x0008000000022e07-135.dat upx behavioral2/files/0x0008000000022e07-136.dat upx behavioral2/files/0x0008000000022e07-137.dat upx behavioral2/files/0x0008000000022e07-138.dat upx behavioral2/files/0x0008000000022e07-139.dat upx behavioral2/files/0x0008000000022e07-140.dat upx behavioral2/files/0x0008000000022e07-141.dat upx behavioral2/files/0x0008000000022e07-142.dat upx behavioral2/files/0x0008000000022e07-143.dat upx behavioral2/files/0x0008000000022e07-144.dat upx behavioral2/files/0x0008000000022e07-145.dat upx behavioral2/files/0x0008000000022e07-146.dat upx behavioral2/files/0x0008000000022e07-147.dat upx behavioral2/files/0x0008000000022e07-148.dat upx behavioral2/files/0x0008000000022e07-149.dat upx behavioral2/files/0x0008000000022e07-150.dat upx behavioral2/files/0x0008000000022e07-151.dat upx behavioral2/files/0x0008000000022e07-152.dat upx behavioral2/files/0x0008000000022e07-153.dat upx behavioral2/files/0x0008000000022e07-154.dat upx behavioral2/files/0x0008000000022e07-155.dat upx behavioral2/files/0x0008000000022e07-156.dat upx behavioral2/files/0x0008000000022e07-157.dat upx behavioral2/files/0x0008000000022e07-158.dat upx behavioral2/files/0x0008000000022e07-159.dat upx behavioral2/files/0x0008000000022e07-160.dat upx behavioral2/files/0x0008000000022e07-161.dat upx behavioral2/files/0x0008000000022e07-162.dat upx behavioral2/files/0x0008000000022e07-163.dat upx behavioral2/files/0x0008000000022e07-164.dat upx behavioral2/files/0x0008000000022e07-165.dat upx behavioral2/files/0x0008000000022e07-166.dat upx behavioral2/files/0x0008000000022e07-167.dat upx behavioral2/files/0x0008000000022e07-168.dat upx behavioral2/files/0x0008000000022e07-169.dat upx behavioral2/files/0x0008000000022e07-170.dat upx behavioral2/files/0x0008000000022e07-171.dat upx behavioral2/files/0x0008000000022e07-172.dat upx behavioral2/files/0x0008000000022e07-173.dat upx behavioral2/files/0x0008000000022e07-174.dat upx behavioral2/files/0x0008000000022e07-175.dat upx behavioral2/files/0x0008000000022e07-176.dat upx behavioral2/files/0x0008000000022e07-177.dat upx behavioral2/files/0x0008000000022e07-178.dat upx behavioral2/files/0x0008000000022e07-179.dat upx behavioral2/files/0x0008000000022e07-180.dat upx behavioral2/files/0x0008000000022e07-181.dat upx behavioral2/files/0x0008000000022e07-182.dat upx behavioral2/files/0x0008000000022e07-183.dat upx behavioral2/files/0x0008000000022e07-184.dat upx behavioral2/files/0x0008000000022e07-185.dat upx behavioral2/files/0x0008000000022e07-186.dat upx behavioral2/files/0x0008000000022e07-187.dat upx behavioral2/files/0x0008000000022e07-188.dat upx behavioral2/files/0x0008000000022e07-189.dat upx behavioral2/files/0x0008000000022e07-190.dat upx behavioral2/files/0x0008000000022e07-191.dat upx behavioral2/files/0x0008000000022e07-192.dat upx behavioral2/files/0x0008000000022e07-193.dat upx behavioral2/files/0x0008000000022e07-194.dat upx behavioral2/files/0x0008000000022e07-195.dat upx -
Loads dropped DLL 64 IoCs
pid Process 4972 Process not Found 4900 Process not Found 4176 Process not Found 4828 Process not Found 1244 Process not Found 4116 Process not Found 4780 Process not Found 4724 Process not Found 4124 Process not Found 2024 Process not Found 1776 Process not Found 4476 Process not Found 3100 Process not Found 4708 Process not Found 4336 Process not Found 4228 Process not Found 1892 Process not Found 1796 Process not Found 2040 Process not Found 4252 Process not Found 4312 Process not Found 3420 Process not Found 220 Process not Found 960 Process not Found 1732 Process not Found 1832 Process not Found 2804 Process not Found 3168 Process not Found 5016 Process not Found 3380 Process not Found 3852 Process not Found 3456 Process not Found 544 Process not Found 4864 Process not Found 4928 Process not Found 3096 Process not Found 4528 Process not Found 2892 Process not Found 4416 Process not Found 4344 Process not Found 3572 Process not Found 3656 Process not Found 2360 Process not Found 1932 Process not Found 5020 Process not Found 3216 Process not Found 3904 Process not Found 2980 Process not Found 5104 Process not Found 4352 Process not Found 4148 Process not Found 1004 Process not Found 4940 Process not Found 3560 Process not Found 3376 Process not Found 388 Process not Found 696 Process not Found 2832 Process not Found 1220 Process not Found 1132 Process not Found 2288 Process not Found 1396 Process not Found 4784 Process not Found 3404 Process not Found -
Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs
Bootkits write to the MBR to gain persistence at a level below the operating system.
description ioc Process File opened for modification \??\PhysicalDrive0 1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe -
Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs
pid Process 2088 1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe -
Drops file in Windows directory 3 IoCs
description ioc Process File opened for modification C:\Windows\csrss.exe 1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe File opened for modification C:\Windows\csrss.dll 1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe File created C:\Windows\csrss.dll 1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe -
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeSecurityPrivilege 2088 1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe Token: SeRestorePrivilege 2088 1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe Token: SeTakeOwnershipPrivilege 2088 1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe"C:\Users\Admin\AppData\Local\Temp\1d4ac14097057b431ced90b0ca5049da4afc3724c78072000f3c88ad4659b730.exe"1⤵
- Sets DLL path for service in the registry
- Writes to the Master Boot Record (MBR)
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
PID:2088
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267
-
Filesize
319KB
MD5723ff7e6b3d5cf2415e9dc79b5b80024
SHA1a397eaba4390ce1ff75d7ba4a933be1b0415ca61
SHA256eca174a98aec3f47c174d6a59020325d5f06a292721f14a094e6d3bfbb773b50
SHA5127027f8b594a6d05a78bae09984bbcc8b3f68bd0ac736ac0dead21aefdad975cdfa47c609fc34fafcf5b1153e34fec4a27a6a170b6b09e7bed8a192e778b82267