Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
28-04-2024 11:12
General
-
Target
2024-04-28_81e9bfdedd6efd6129a2f1837cd1a68e_bkransomware.exe
-
Size
1.6MB
-
MD5
81e9bfdedd6efd6129a2f1837cd1a68e
-
SHA1
5e0379879fcf1a9efdca5fb31706f5da061e18d9
-
SHA256
f05f66428acedcbc55a83f16335ae8004494f075bf4712c47015ad53d35a6728
-
SHA512
494579e9008bfefc0973ca7e59a809dbd4224054457bd853c7483ede6ae031c1d38cc762ee51d054a11c7343235ed695fa804cb08313c14eea00813c256f29d7
-
SSDEEP
12288:ktOw6Ba2TduSZpUdxB30GHrVxGnXQSaWt+DNISOgv3isiyWcJ0:66BZTduSZpUR0GHrVQ1aW4mSOgv3isi
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 31 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 42 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 43 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-04-28_81e9bfdedd6efd6129a2f1837cd1a68e_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-04-28_81e9bfdedd6efd6129a2f1837cd1a68e_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 800 804 812 8192 808 7842⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD562ca60cdd72e94ae67853c32e855a621
SHA14ba95dc2e7e0df5d91a3e771bb16b8f1ea2340f5
SHA2566f57d710d2179630362d03894666617abdbc1580241c8bfe8877dad2794ee128
SHA512d6dd2545dea29fec2a7c6b779d6ae87192cf2f4415a4fba5f452f46ee0b30f8dd63dc047728949db01ee1888cf0fd880fad23dd4734d2ef2086f33b974953516
-
Filesize
1.6MB
MD53e59961d0f4675ab4cb4664ace9f6cb4
SHA157c9e8869ae3c93dd214121f8eb8faae121433ce
SHA2560bdd13d336557aa7ecbf6ca6a977f33dba5d047d36c18546997dd600c9fee68a
SHA5128d8992eedaf78bec9850e2f8960f5076b0d5670e6d48746f24c3b9cd8dae90f72af25b75e52c4680141c3c34c657e31985bb7dc095d72d52b2e5385552c06286
-
Filesize
2.0MB
MD51aaaa2709ad32aeb88416d5f2cd19f00
SHA1e606bdca9e53e0bcedc86a833d88b931482ea0ec
SHA256d93572253a61998a17c62184e5a78215a7e3cd9a87572863086d6f4fdaf1953c
SHA5126d362d96ce08188f4b3833914d236bc07d4536eaca96a213f2f8e20a2d79411733a91014cb5db939e2bce6010dcdca600e119af6faff554f13b967e503e20197
-
Filesize
1.5MB
MD51c5939a76aa5c31d083e5e9edb319207
SHA1927b1f37a71868d70d6a1beadab10630c3d1561a
SHA2563c26c75aaca082d9c59c50e5d67ccec9c6a5cf9301cffade7b3186541f835235
SHA512b5943c2c53b95c42ab866649b1df63f537a86cb44862f07698838706eb3fead3889492ee41c18e3c4007e5a75b3b61f4092fe5e95105f57a2146c365df95ef3f
-
Filesize
1.2MB
MD553025e33fb9d38bba6d90cffad420863
SHA1b4578da4b311ed10b65e3e44e49f42a4eaf0904a
SHA256d57236bd82c0b82f5283def267127a68a7d7bb00fd6efdde96531b0f51b6e5a6
SHA512fc4ce313e419311cdcf53eb3756fe9231401c45ea2582c3bb674760596dcfb381d3ae24fbc2e9b500658eef51e412c9dcacba0694c69ec5cee880198a17e9410
-
Filesize
1.4MB
MD51aab6fe39bb8a3929f3f580d4671e9a7
SHA19ef046c5cabc624b53ac0efa5644e0cb1d2cea98
SHA256ebcb5eaad37e1828b507acdd1882d1ab1e79f8badbb0ff6657919ce1db22a9c6
SHA51268ffb616c1de578cf0aef017ae590753fc375cb219b15a38c057ae590bce6c3d6ff16613fdc2ae5b29f3acbea7dbc37b68baed3ce8e662bb805f542f871e818f
-
Filesize
1.7MB
MD50a286235f54ec860729624b1efc72c9c
SHA117e0a7480412ed51a25e74541ef9327cb2492fdf
SHA256543dd4f96369130a96149240355e449f8b7166153074c314f24791a91888a69e
SHA512b90370a7eb36823256b488ba0ec17b79eaf27d9d854cc3aaabcb77eda5e652ce3edba8ac130e1dfbceb5e0a73d1e8aaa2be51cf9bef4906ae109a0f3ddf2dacd
-
Filesize
4.6MB
MD574894aa9479a56ae2bc433eae7011bbc
SHA1a84579e404457f35efa2c9ac12e606db751cf4fb
SHA256dd96cb48064a0ad0fa5c0feeb5365b4cdb4a3bf24e7fb28fe35cea25a693976f
SHA512a863085c81153f3d50a455d8da6cc7a5a25f6f765db9c5db8212d7af6ff960ded449e0a1b4e0cfed695b8d0dc90759ff8a4d7eb228149c6b3454f90d409f9b3e
-
Filesize
1.8MB
MD5f537a49af2be7f797cadd87860f04568
SHA11ceeeae3c6de35f77c37cb22a91a6d619949357d
SHA2561fa1538449d41e62c5508e3250d8304f0ce9c66c9449be3caded8f61b3b90a52
SHA512391a142c7c7a0b704cd3b82b117ea51069fb36828eef8f16dc6e0541b759bd6ea5c9196185aff8c7dc688dbc06077ec10912b90a1bfd5d664b1bdfcd54d25faa
-
Filesize
24.0MB
MD59e603a859f4219196725ec89880651ae
SHA13c2242d78df7a138d1266484e4b11d01c0003b14
SHA25675a4c2ea5287fd30f8bb32f3a1d4e17a72eb7ad45341843e7080c7a90ae200c7
SHA5124f74abb6ddeff2c626019186fe45084cab64d253f576014fb02899af010d63e4f1552283c8448a0fcf170d05c93b895043820f35abc8f126febf7b94b4477605
-
Filesize
2.7MB
MD583adf9152c35f7452a4789dcf1af0f37
SHA142b0250f175b6c9e26bee0228cdd7c95db7ec8f9
SHA256fe235e7d65fdb6914eb1b2817e8cfac2ff5783e178da75ac19680a126a63a430
SHA512cc3ee8cedabb49f9fb70e16e5fc1b1eb2aec4db6d72c675506c800943ed8b4767aa82aa3c719f1e18b8eb2deb18f88630eb74be5089c1829da70d300b9888d0f
-
Filesize
1.1MB
MD5b7ca0a0d7fac47a590e59e045ef24e9c
SHA135f393c707d109486a21845434a53f5a5f6a7eb1
SHA25601efc6fa6cacdf24a64218618b1bd345ba14fbdcc8146ce81819d5577347cb33
SHA512074667124d86cd1cb8c21e738a3018ec3f01693d841f337a0b3e4cb5b411b003bbca11ad4095dbe4e206d287dd815d5c4fb898495ddf46182dc7ff645099a56f
-
Filesize
1.7MB
MD54809fff9de0d49b817a1d5e1b7b2eed9
SHA11ed727b3de9a6e8f8280a4212509ebeb62e85627
SHA2566947896611f9bd54f3798bd585d68773f08fb60188c60212a1c3bbe254843175
SHA5122f475a38d36260a8b842759087b9e392ce19ca097028c9dd509cd5abce8f95d729421bfabb8dec48544223f7da5bc9d30c7767fddec7c8b0b810e90fe3ffac4b
-
Filesize
1.5MB
MD55360e3e090bbb187b7a49e9ca1003312
SHA131951c4bb511f8af8ae97da9f8ba2973cde0e23d
SHA2563e10072f37e252db195accf4b053948b002660d0549d2b98780927884a109cdb
SHA51290ceadb78136cfd91bd32ab68d84ed955e893852d99ae0e7695cc4b5d69d9ff5c6374d0e61ab82aabf6a209dbfee40101b11f67a97c3e159f0348834aae4fb7a
-
Filesize
4.6MB
MD5944b3fbe338ac07da0692ca1554eb71a
SHA1f3d83d03661b97e544ef56baf215dabe92a8f2f3
SHA256a8edf802eed4b5716ae3368c275b50ab1296e163ca1949d6bbf80ccf3a22afa5
SHA512cde2bef54a9fd2ff7f3d2a9318067eb4643abb25d2e893f175c2e888cc99d88ca9ce6ab9a48cf3283276c2fd9a2231ae1e1f1d20e67873a8c0e958aac211f804
-
Filesize
4.6MB
MD5a2b3d0f65054ae7206988e87fd3a7cb7
SHA14fc3950bc251ee82d70ab55105318b084e875da1
SHA256c40aa634e2f8ec0b1226a1db8bb9d4a4d7d7f1483910d7d6fa60e6daa391be55
SHA512b55aa85d14493a4df6bc9e356540d49f1241a5db20e8713dea98262c7579f1d1899425b26794a1221852c52a79b353646ef12115787052b0136c1b21be91603b
-
Filesize
1.9MB
MD5ece0bc78f6b33e3ad0ed76bbc98a6540
SHA1c145932bb3e5b1623a617c0032545ecfaa297b93
SHA256ce9e9a856a5cb596cf733bb5e8983209ea16173a6a7a5f8e15df10ac5fdd5e95
SHA512b8bd9c22e80686f938860e6e8b47d327b4e6b974f42c8d381b0609a323da82fe968a3f6f74a54ca257ccc93d0ee4622d4e0bc5cb3bf55a26ece3a67719b32df5
-
Filesize
2.1MB
MD54d08ee81c437da73e59b9c5159ea5cef
SHA104fd67cd86f8b292657f4cf520ed898c8493a4a0
SHA2567956972e9a95ddc098676f23ffbc4b3710624f70dde5aa8040156442fca75605
SHA5128a92ce018ab1dcc0fac47e233da25f0d8563d2a354f26eb8a0878f4595c0c6293c00c260a279d5f0ebd21a714241f6e9ed09590036ed9ca859bbca6b26dbc475
-
Filesize
1.8MB
MD5833db6804439b98fa5aee33c2c2fb636
SHA13305e64fdda3847504c719a9baebdff9d2f5f3d5
SHA256bbba88cc5867a144d0891bbdfbdbec90d1087661c01009ee8afa8a1f49e19ac5
SHA51233ebb6134bbceda798c11e9e85686fd340e3f455079e1196c6908e959997756666fc33f13439917736b645f469a7685e648c69481d4d031e425be55147510040
-
Filesize
1.6MB
MD5ae0860aba97122e3403e2d73ad28c162
SHA1ba6f2cdfc1934fb3fbfd54f050512f858bb1d1fe
SHA256c04a51a96a6cd8e6e18e699c72ec6e4a7782f31a0d51d05a8246f955b39270a2
SHA512e2f1b8cd583212301c4c206a2f91e010b8a0351a46b4323987f0ac2a1241728c62113722e101b59fd3e91a36c335be4da1267c6ae11f129bd3b59e7b6a524020
-
Filesize
1.4MB
MD5d5800a29c7b889ed0937f2c43fc332a8
SHA1155bc41c5d7121f2bcf0f443b8040b1653358cdd
SHA256a33839df7f34a4033d22770165fcfdf76b047d73bb3cbd99706e54ec8130aa8a
SHA512583f7b280751293e28f5610f6f1e753ab63e64446dbf8c001c812804ade94078fbe0c74a64ff7957ab38a95c54a218ee45c73fde7532ccef9ed54c15afb2cf52
-
Filesize
1.4MB
MD5b52b846c1428c447f8317ab17e66c6a3
SHA119c7c8dc1c4a864f6a102ba9f934413c1ce7526f
SHA25661830a7a58ee227a7ec32e708e624dca0095f042a8d45ef0fd56b813ab1354ab
SHA5123d8a1aebf4af569dc66de5a3e7d9200aa1888c5c3e42b2c68dd53706a947e08b838c24b06b35a3dd4f1de2e4be1a0b76b0059099014da350fa58e856c3aad6af
-
Filesize
1.4MB
MD5232c05a69cc7fb7d10d80c891442d074
SHA120cc54828c5302b39b8dd89d1a998ad4e7d4b3a8
SHA256b93173000312be40f8fae6b5773a230abe1c8f121b578e674c345d09de1b67e7
SHA512c118030aa06b7041aea6f481e4c35d2ab36d6b8a7d75829cd486503201a51e8d470e79ae9a33a3c0ddf0efc26bb0d136bf2d6d0cc599ef86c5c37170096457dd
-
Filesize
1.5MB
MD566cf492997cfb85171f79cb3ef495fb5
SHA1d4ae84aba60b8e598e6e97742136b059d6aa16b5
SHA25672bad0b8810997836c4a311b99759463ef5b40b101cdfc55fea448bbd901c375
SHA51272450e10198a6ccdfdf858c6762841b47d9c18813e06f8467391a315eeac8e4c9f33309fff03ce1ba632c543836d1570903b8356b3eba4a44489039bdd869756
-
Filesize
1.4MB
MD5adbdb0a1f18fee7c54ed21b46202fe78
SHA1fc6d644be03e0dc1089af02349969704636e540d
SHA256c5ca4c18da82fc26d4c8360cca301cf41dff844013c7396cc0c5926c421aba92
SHA5129ab5e7ad50c6f88e5e7b8e348da5bec165033cb96ef75b7df54234963f1f2b1c9447dc2b6971195c457a62240ec712037dbcc6291d549eece26887fa83e83c3f
-
Filesize
1.4MB
MD51fd8e61c85172026fbdc0f3b326cc22d
SHA111d400a47e9bd3f209eda46aa94d9fb6ed9b6ce8
SHA256117896ce90caf3bb55ae771e9fceb65be1e2bb2011a7564dfce63ae65ba1a287
SHA512a7743ab3351a7aca4dafd69eb07d09d3a3ec755e758ba7f95f0c7138794dfd13042533d078b488574b1fbc0cb2961f3543627259d4055df123471d8bc3d3ac1c
-
Filesize
1.4MB
MD5470bf287f429d9fc99989bed9a8f47b1
SHA11259ceee9ad439b387efc9abff6ac4b181a87991
SHA256e85d0cf0352fe55585639a5f307c83abe042daa9378c273a90622cf640cc3a13
SHA512ea82628b5ae898ecf16bb67323f5c44fc8c5c578977cf9e2ed470fb7b2de96f96d2a5285764a76daa62262d32486931a33ad708553d393e330271e86dd7a1550
-
Filesize
1.7MB
MD58c47725bb93bd14dbe958f74076fa836
SHA1503138fca78a17f1f551e1f35e3a2ed32529093f
SHA25660c9e16f8ad3cd8af8bdb128789ad060278f6147957b0123e78a9d5e4ba9f24e
SHA512e6b0b97d2c599c7689bcf12cd0b09ff2063030c91c49a397b3c956886dffa76cd056e17ddb128a75fb92e0eb31d55680fa62d55c1cc1416c463d50d559207005
-
Filesize
1.4MB
MD52c427beb8768349f1d1ba8728d4fed8c
SHA185731d2b3e6d0679d89376701b74e199271743a5
SHA256b407a3628c234b47a09eca7646859ca8031f501dc355f4085607c53de54f82a0
SHA5122672a0f00875ca2d63f619707ef9aadb3330e87b7d5c1f7940e28a942c2ebf2c5bb157d4f07564cc0119780360d9a09d6b8fd9c25d34a5ec6c792eae6a8fefd5
-
Filesize
1.4MB
MD53bc9e0cda94e824ec0101c82d3175189
SHA13f18466bda9f97cf2d980ae26e49ec5b35111887
SHA256cb48fc6b4d530f4082af302f85860868288b9066889fdd2ed02767b73039bc6b
SHA51246a3775ef50a9f55277cde90ee15c3608c4a1f924a6f1dc50c6cedcf001b7056457a62d1c163d8c09f4e3c409c9f944437c3c8b240529dffaeaaa2a1dd3d5421
-
Filesize
1.6MB
MD53d8152e6f5edfa859ddf440706880c9f
SHA1237fec87bcebe74032c8f4840955e9429dc941e3
SHA2567015e1e69276120a4c6e5c898c826c19e48a3608718951e9693d9f8a484a9ded
SHA51270293ae49e03cdb6d1cc31ab472530df9fedaf4e5589fe21bc81cc606e668fd208eb4185bb326e933c5a7298b50813bf478b304359e63527f2dc6a5293c03a88
-
Filesize
1.4MB
MD5b37ac058bc2a3ab61f6e939d4daec61f
SHA1ad6fd63a575d33336ddee824103f4a9cb666f827
SHA256a2b45dda47ce9d2ad734a69288e6b805e180d66606a5264109ee82f3e222879e
SHA51216873e7e3154ffaeed71e78c1b3d63a25ebab8e374919c7c62681a8e5831691826d3863a7d4c7cddb4b1239c6dd16e0f610c028f5a1683e98aacc3638f67c3c3
-
Filesize
1.4MB
MD5aad88da7392f858b8f48361f5f3f8766
SHA1ffb719c3d35f03bf61e008fa78db199c505df49c
SHA256ac0282cd2382c8b5057a6770302c3573a022ab27c21579a4370ada7ba0fb60c6
SHA512c379c39fdab6742b61c1333d3da78812613206b46a28b2e28419f2d97776a40e5b405970e2f9cb4e9071a9a8b6dbce365164fa011f8cd68a15b36546fa602d45
-
Filesize
1.6MB
MD569ed3f4a31fa7c898d18b1bde5e11d5b
SHA1e38e884cb863f7bbb3c13fbfdc8d5d25a4330978
SHA25601a6f3150e5268f5519a2ab0918572b0e2334abf7178200317ac5a07afbcefc4
SHA51282c3896b3b1ce5933266952716fdf324cb3edb20ef9db6965fc900b955afcfe5cafb981b14a2bbfa9c01aae23401780ec7a437fef9c6f8d439a354886ed8ce61
-
Filesize
1.7MB
MD583ec4c8d2e4278f2db0b0e0b9d7b64e8
SHA1e7dfc25c600643deb79f08648a701d293c6700c1
SHA256d5e1ff81afdc1ada80a02286ae48a2c16209c76c87c8e366739dee11424633be
SHA51296ef19893576de0133900c14b5124e4e9862d5a818f6e0be6a80fcd1da4641a47de24b797ca75cecd9aad383d7a0cf91ab5f4b6e47e94fb9c30d85c340136eb9
-
Filesize
1.9MB
MD5646b5a1239d6e9cacad335a065884a09
SHA1da44282f02961e6fcc01a233b89cbee08a608601
SHA256c9804441427968ebbb2020e47fc4344498519624dacc672cb158f10e28cac7ad
SHA5125d2ccf73f2218502423539a2b2ae9b26c2ea63d8be40862ca6083f78957c965823c66a5cedb138795bcd083afcd6705d381124af073b571e829a9f2bf694b7a3
-
Filesize
1.5MB
MD5dace3f017ca22d5e592ca329dd31ba39
SHA16e9840bbfa1f7ed035f6b7f489a5c94a86089359
SHA25637c756bc66f8b3426be05ca95a1782a0174bdffadb044100cfbacc37b984d4f8
SHA512d2c4cfd62ec11cc535949a3e048bc1a3104d15c623b63171ce0ee2741ab24f4e744b0ad7e09d51548f200cbb80f784c33e0c99e354ca824e87b99f7567ba969a
-
Filesize
1.6MB
MD5ac17f0eae2fe9365003673c2a5a908a6
SHA16578ea82e74d0aa4e981f80c19ed327d8b562cc2
SHA256da5a8693e57f666aaed2d3e2cbaacc8068db0488255ff77fb19ef6981373b7a0
SHA512f1a1ee5ff8007938a67f2a2f3edbae4256732b34c935179cccff1a268e38a30b961fe21400a5ef70d291895b7ae28bb0c9d0d82f91b51926ae37a7618d94f698
-
Filesize
1.4MB
MD5183649f67bfac09dd6e6ed7c204f5116
SHA16fc3b67781b0f7a0ccd70241a87cae5abb4a98b6
SHA256e43e3c805d4f174c2c63013cc19be0299ee0ccdfab38843b28d0b495ac9b26b4
SHA51212d6f7c2031452411fe0307967a7fd1e38900581a2a51bca42c6d0043073858580a17106972e6bcf602bc29fd23c19b2ad1204b1c68188de1fbcc8c524f8d470
-
Filesize
1.7MB
MD527f69627ddd9e952db1a4e6113a4a8ad
SHA1f329e8e8f3890211b7e3850364d128fceba98c9b
SHA2568eabbe32e4cf678eea23748c7b0e6db1c9f61a18e5a78c7d700158843de53010
SHA512995ea3e63e38672d471123e3b374bb313856cd7cb369cad6f92969439385590ddbd1f121ae346f38448d4d5e7db7981d68225ddeca7d28af17dad54332580af0
-
Filesize
1.5MB
MD50c079e632faff40fd0c5a04a1b5f3b42
SHA113ba192d75596249d1054dfcdd3e9d3267a9d447
SHA2561fb6cc82df42043f4ef023561533d669192f66896f39bef2f50ed026be478647
SHA5126bcdd9c65c5c221bb1200d89529bb6d03762a5a0739de4bddceeff84cee9cf3a1f0c621570c184dbf43147491c7398f2255a46321e166164fba05ac5bf77dfec
-
Filesize
1.2MB
MD56fae70eb5e2465a9b70d99ae9843a68f
SHA148bd46202ca48ab9c2b565140120fcfe61fea7f7
SHA25616b8cf0ef40a3cee005486f33966d6a3072a897aefaeab936b73d896ba9d00ad
SHA5123ec3a55b53980e2e58075f888a3a2f3e65b22a3b23a943a5b7f22488f752675817d63a996c45b1610d98e11a3fd3c30513049d4738e56eb582ddcfa0049b950a
-
Filesize
1.4MB
MD58aefaf87137774a12482ff9caee5e534
SHA18ea5f40e62671317afcfd83b790bb7717b9ec8fe
SHA256caf6e2884401bfddef57ed300d00638d2a6103dcaabfd4d6e3360d1746579367
SHA5123e249fad7edcdad0d5d79a1f5120c1e8c65d297602b92a89d144663e1ab7bb5837b4711c25f856edd23d67adfc01eea04e550304232559c7340378adc52bf88b
-
Filesize
1.8MB
MD53a076665ba212a81356e46894d3e4c43
SHA1edab0d0df76657a2c3078cd9564877e6b17a41fa
SHA25683e0fd91ed7ed2223c3ae2d1c6e2f4e31f10345040ed4c12fca9708ba28a6cdc
SHA512c3fd349d287bb2a9793c7c1b54cb2ab192e06d9159645a97783ed5a7993462f51c6b21f1e7306df48f721a36c429289caa9ee5aef0daea217f4d43414c9e0895
-
Filesize
1.5MB
MD566d14fac7cf6f7e80e6230697df1bfc7
SHA1e89973827c1e4fb62c90c9046dccd37ab3a76b6b
SHA256ad07102db47801a5eda545d05ffae53eb0988db39060da464fb2493a7622b089
SHA512938723579ae1162a58f84758fc8e253159514e5b06e7c00f0b2edf32d53fb02f632dc6df4d83fc78cc0b1b3b748cf10ec944b3b10c80e59e0425afabbf5ab5c1
-
Filesize
1.4MB
MD5c34551aa0bc17aafeaa7960c110dabd0
SHA1dc549e566e5cf3da860d480cdfab450ba541ccec
SHA2569d1494642d9bd6f45a33f1659e4fc85bc005a215be69555b7b29527a9b4764e4
SHA51276bbe60d442c673d3f4cd7951b95d4dfc8681bd9ed7d04b91409c3eb43c78b5a9598c0f03ac9fa3a5595db65f89accf9ff8cb62e0969f905d46bbfa41b50065f
-
Filesize
1.8MB
MD57c4761468522dfcfd31575b07be3afdc
SHA1d6e9739166e1ccb9b48d6e2ea1e629b209529b9f
SHA256eff47d2e92e197f033a75dea0dbb67afac51815d42b70f59601cbc30c7a1f665
SHA512fc7174f69e6d2d225b7b81e98eae1709537cfbe9107a51242d441c259896544bb323c20dbd15a0a9b9211d867100a2419c482b83747c367e499c0b0a15c84e88
-
Filesize
1.4MB
MD5bc7fb76a940599a52f94d27c06b25a95
SHA104bddd16c73247abbb6846b26dc986cac2819712
SHA256fed3b7c164cebe2962d76310eaff4d000e1e16fb9dc04763ea9569abcb52c760
SHA5126049110915e0bbf0466ce66b8436c15edd6b0443ddceaf90e71dd2e2569755e567aa9551a9e2f9c356b194bbab71b9588f460eb9437cb4d65b668f183216f97f
-
Filesize
1.7MB
MD517cabbaf840ae9d7350b34dd95025d9d
SHA124f6584e36de33fc4bdad1362b587910096af25d
SHA256f53b494225291b05130f3c2cf4b31179a14f1f0a4644d1a99409f5d75bbdf0ad
SHA512e768aa92013af1c06b946d397f7d22aa0b387b44bdc9090a660178839ab92a9181f09b73e79fcbeba8957635673702614a5cbd4a039f887fd48696c4b520e48a
-
Filesize
2.0MB
MD5c425085a49c8e896adf84d839ce6e34e
SHA19b862011d857c4ebc403dae13139683ce3c572ad
SHA2569ee88dd6f5f37249a416f7e7a546cfb3cae09df3e9fc9e39df9c68ff9e507335
SHA512caf9e4075dece37a44fb07bafb42b8c688c0c53eb124e8e35e8cf4dedc73a10a1c4c068391e7fb0754584e26da7d8be49d306ac7a12877c799af81c329e4a025
-
Filesize
1.5MB
MD5987475d569ba10370f4d9f35725ac920
SHA12a015b50e69da07cea44800bf81b09d1965ded95
SHA25676f3b9a3ecf6549d88d1d98aa03c9df19892a3c8e8d62b76c50199b08c0f55c9
SHA512ec0cb8e7bac2d5c477d8d28312137916ac9c328c7290d816d3bdc842173cb3acb6b1398d88f7863f28cdf98b99aef79eab6ae45757979572f4452636b5b7301f
-
Filesize
1.6MB
MD52839ae9accc3de55df6d274885d9a509
SHA19f09fff7548abdfd84ea53fee106cfb25456b311
SHA2560279715896506244e126a14814c2278098e61d0cb4ebf3c4fdc4121cd146f75b
SHA5125470cfc5080393f539e06ae5ccf46ee40ec1af57493d080951025d670210b699ceb60d58a1ecef0a55fb35d770bbc33213d81209c749434803e15b96525ec716
-
Filesize
1.4MB
MD5a2a33daa2acecc40c17c5ec0ee437432
SHA159d5ee43be2b2567aa08ebe8f06c0a3218c90080
SHA2567aefbc19cec3e465f07f0e59fff6c21fc296801dc8be1f5f89cb9afd889979e6
SHA512568cad1cb65bed84cfa40306a9736a4322e46f5a5d28f9bba26bc9f539562a4369fcbd9dc18e165053a4ecb3d1976abf2bface3be22bc7966148c68b47205a2f
-
Filesize
1.3MB
MD51a49f198b3a5cb159f27c249e438daf4
SHA1c5150334a4962a3ef11efd716bd3fa88a87f7793
SHA256a0feabb884d164ae84bcd31094377672bc4cb0718b22209534878a90ef368a19
SHA512232dbda229ec7a69a5eebce3ae3bf69bd792b1f2d459afb7739c7e1b4e58579d0fec7ec4ec342fe54819f60ea0686533afd3b65f6c9b7b3d7f4baa70dd664cf7
-
Filesize
1.6MB
MD5446eaf480958953b186c5a799ed2c3af
SHA1c4a5c4240183eeccf4618c205b113dc2f67ad88b
SHA256490f8381103f98ffd2c1ff1a2bd15a04a7cb0c48f7f30443a8f1a095789d6e9a
SHA512f8e82b45018cc798d01377614b81b7ef5e949f14759667ce9d9e3efde4d2cacb011f545dc7c999e49265d8e4a7a02de9b3824de7d02a83965fddc2c2707a2acf
-
Filesize
2.1MB
MD590b6856ff00452d15bc0a1e43c233078
SHA1143c6d8b67e25505b969953224f8bbda004ee4b8
SHA2567284ff085d1d251e9bdfcafee7409fb004055502295396efe85f13eef4fd3acc
SHA51230df6ea79cf105c56545d3c661c7337b96d87f1dc6834f886397ed09978db132895ab7461db5b9f461e567d984700eb43a22fbd7900e0c175e4fc42b4072ecd6
-
Filesize
1.3MB
MD5bebd093777af80d9fd4228c3fe3990b9
SHA19d8df275ef3f41cc0edd97cb0e2bf71e1ee3ad24
SHA2564e39120c78aa566109a4260f1fdc0c9c278b1113d79a4228b82850676f29c9dd
SHA512bb472ca895919092b52bf6e4c577aab2b25ad9fd8a1cc1cd962bccd0bb8f6bb240d67f2747c51109d100866b1686c0c0e2b7b32dad3ffeae5d44cf8fb8eb4555
-
Filesize
1.7MB
MD5630ba069b8f3b6ea7aede8d820dc4ad5
SHA136b481b861045960631a3f2fc2b53ae91d0fad9c
SHA256eb0438dc4274334f79d97ee7db37ecb73a2e5bee0851c1fd1e20a2236964832c
SHA512f225f23d046581bde19f621aab647be54a7e8ec7b7513cc1daec1ffa7208531e314a6ee9eec8d667cd6949a93c9eefd7a15a056d70a9ab6c8397571a50c192b5
-
Filesize
1.5MB
MD55d08046b57836ec39c6db920ec84cf61
SHA1cf05b8c6af5b46f8be608eb65a40ec55a3b3f0f3
SHA256d59cb78846151131603f42f37371accf4637c2d724a1110c089e76eba3ffd2e5
SHA5122311c0dcbf658092e9f6998d75c60018f5dbfcd55dd0b8fad1cb102a75445e3257208e50615e5250351939aa69518053de1c263bf50879446be65ed1a12e18da
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
384KB
-
Filesize
2.4MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.3MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.3MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.3MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
2.8MB
-
Filesize
2.8MB
-
Filesize
2.6MB
-
Filesize
2.6MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
412KB
-
Filesize
3.3MB
-
Filesize
3.3MB
-
Filesize
412KB
-
Filesize
412KB