Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
21-05-2024 16:42
General
-
Target
2024-05-21_01cce8056d8dacf74d446ecc05af16a2_bkransomware.exe
-
Size
1.3MB
-
MD5
01cce8056d8dacf74d446ecc05af16a2
-
SHA1
8f4a197a8855daa0925a0f0de059b685ffe80346
-
SHA256
d21154fc454ce1914bc6819f99795d25a7e3a9042a5e703cf7fc4e6166f610ee
-
SHA512
f682dea3b726bd39c7d32b20d4eb5c54dd5a47b4791b243e9f3d7e8f40855b600963b67ad776a8655268bf59e30313013a662cd8ff3b1c78bd8ae50040cc85bc
-
SSDEEP
12288:BtOw6BaW+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSl+0/1:z6BiMdIuwe3zfIe7xmvH/
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 31 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 35 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 45 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-21_01cce8056d8dacf74d446ecc05af16a2_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-21_01cce8056d8dacf74d446ecc05af16a2_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD563d8e08477d40a81225e7f073f8dcf23
SHA19a413ff10b6e7e2fc5eb4854b67cc534d7256c43
SHA2569a1b088153c6ed3c40358a503d9bd12e0e4a66e32c5b11fd20de1d2f34e7c336
SHA512c578c2535008cbe62d80bc5f52e5452cec05f9e7ae72bb979c69136f58246203e9b8e27f1ce838ce042b51d1022fd072d98c750345c5e587635e11952b57a651
-
Filesize
1.4MB
MD5aa86a9f50924c2af97d365c2c5a6605d
SHA1b35150822f5ee4f7fef1b7f35a0385c89e4a221b
SHA256589f6001b092082ce96667bbf791094498e849105025ca8dec31be983db43b39
SHA5121809ba758bf40ec33d7fe7749bc4255d1c6e69fa8fa6825eea8c87b6134d280c42afcb9a4c88ea6d22ed8a1b066bc053bc556d4bf03f1f65a1ddae435848145e
-
Filesize
1.7MB
MD5ae11cda11028962a77b618b90f40ded9
SHA113fefd5e23a2e96ffcb869ede5f13937dc2517f4
SHA2569c89f412944b7067ef1b5b968fed8a02ee10be58f4ef7b71860ae147c0b1541f
SHA512284e8f7ef5c42f6626df330ce0a4798ef4a07a9444df2e312737dea200634db020f5e937381e05a46df9a2a8615469edcba1be6a4e0bb6014ef6467823b10935
-
Filesize
1.5MB
MD57815035aa64ca367ddca017ad4d3c9bf
SHA10a24f7a160d7f196b0d9abecd32305a77857950e
SHA256850e84a95ecfec00abd1a57ec88ae1839d841b6eac0ee44f7209ecffd0f3201a
SHA51240333c2e9fa2b2617c8970d1b51af1233cd8f6ba6cd5883366d128070d6c87a7ebd62b4998a8206db3f547cbd683098e5a7c52f48746d2020271c7d9ba1f83f0
-
Filesize
1.2MB
MD58a78f8c2bf7a48296d265d0baf9abd1a
SHA187f88961a40b0bc3d19368c8bb19461f537f78d6
SHA25683791ee647494f086df2463852e33d185a9f6e467893058cdf2d66b31cba9cec
SHA5120910feb67f4d579c22916ae0d9a0450dec54194b94437c06ff3b790dcb2241698dcf2617f0bc4a02512f12ce01b1a50249bb5c8b44401a5c3c76f9e05d2bf4d5
-
Filesize
1.2MB
MD5a80aaec19263945a1be3b76f73074361
SHA1fd589b0479bba0a644068b847bb0bf570f6508cf
SHA256c73ec0324b2dd62c08820d5c5bd0e1cfdd253857748069cc500fcfbd9be47372
SHA512f9b3d8ead9d13dfc0f6b1e1e6c77a2ef46b44368124f83aadab5805dd3826d69c3e96e665b18780ebf5f0fc66139b8d3d7d146ed0ca677ad721f61efeb6679a4
-
Filesize
1.4MB
MD519de1a9fd6e35cb39406cd57adb46cbd
SHA18c8a8d6756e589bbb3be97b44d1a9d7121058691
SHA256bdeeda41afb12b8656b8d9a8bab8ea0f338e44d3c56af7fc3d097dd733508420
SHA51210d534873c3389025818b822429f5edd749dfea1759e6cb54e4e5910ff5f5f480ce3ed1bca51e8f782eec17be2a7ba402ced5d7e7bd8696089fe56baec00114c
-
Filesize
4.6MB
MD548561600539c1e206a2b571da032dad2
SHA134d6495800d87c4584371d5167bba5afe0b618e7
SHA256bc917fa9463bda0f24b05aab0cb406741193a8730ab53cf67ff9403180740aa7
SHA512b1ac6f647f818ee6c72549ad7734178efb2c7f7ea9b235f6f81bf8518dfc7c4f3c43f6e3651695b4166b1aeaa77336391b5cc8253083abe3bc18533a21b3c2cf
-
Filesize
1.5MB
MD5d668b9211689bf1fea0ebcb8f904844b
SHA177c445e968080e49973d3bc0713290336a7d0a65
SHA25645444ccc842acf98826cda454c579d0acecd3491281b139fe3e2bf5e32ade3d0
SHA512b1b9b09e0284edf1b01b4c14809d81f202e2168a54da1e77ea1dd5ead0bb7a75be0751430be25b1bb92d19016a36042093205fbc241d771bff1c1b2193600baf
-
Filesize
24.0MB
MD58006dca017a217320cc049e9d7e95e2d
SHA13dfc159e194cc0a5168ade081c401dd44a28fa58
SHA256d87229521be218af475374b3ad3ae2195681af4a97dc93ba5120982e04089133
SHA5124c5a6b4dc4207f89394ad59a55a4f017771ad78dfc474810798cdebb54f9f0a7c84b85e48274c247d6643854d8f69efc97b3e56baf38a249cec370a0fb45c5b2
-
Filesize
2.7MB
MD598154d66c1d588bc72fcacba26f26ff5
SHA1a961042484830054c8fafe6509875d30ac15111c
SHA25624d1bff97439b27158dbcb095340ff62f35ab19758c779f36150b3523e6b8a23
SHA51203b46b7d58ca202f0008a030e6527dfc63502916bf36bd992da15dad539afd2aa6a9011d2b471fa372050e43e568c8fc2be8e3d2dc4b2898cc6a5dad709dfc70
-
Filesize
1.1MB
MD5b523fcba129b2c3216982f4990f4e285
SHA1d7d9133126afc7eeaeecd2ee1e81766b5f1b623b
SHA25634c7eb16a92e1365eafe32928b81bbe607ddbc348be8023d6d5d40b38056df01
SHA512c63d84a5934e6d6054216990e33a41f588a8476f8cbc16d91e492183510600d0e27d6a0dbd282d587c3d8ae42bd360b7619ed9eaa83a9f0feaf000e1510fea97
-
Filesize
1.4MB
MD54fbfa5103af5d83b039e998d296b25d7
SHA17d29959af35bba450334f1cc42c53566a81b7c9f
SHA256a794e85546320e0ee80471b83dbb3ff94d1633b58aa2820c941e335c412cc2ee
SHA5124b9973fc4b404c193dd2254abc6af618b29f4e2b20b8fd1be8b1ef343f485b1a85af4e006ffb768144b1fa681e25724aa4dca7bd569a9154484866a22dd55d57
-
Filesize
1.3MB
MD5d073148c31736af37827506e07417f24
SHA125bb5a1bd726efc95dbd7bbe2f0296d41508c14b
SHA2566859f7b70b1cb4b015d82a66ac86c3ee6dc34a065c3c627a7d33132a038f0136
SHA512ea781bb7b4361a7ec41191d52ae6224703eacd56ab1912cdd87e410202f76a070ee5e1f4141f222bae09eb4eb9a9f6ec4b888094175219f666de6a856e7ef941
-
Filesize
5.4MB
MD5ecbd689773faac8f5b9ce3e26211019e
SHA14c2776a13c5c3135ac62a31fc98913952a5c3d89
SHA256b675cad5fd6bb68dcff8c337b86e41607839a0b7c065992e87555716cdddcabd
SHA5123d8678c30f1ce9a75871dc6670230186e501730fb61e5ebd0d24e3268c57aae253eb3090f3586a2e3c3f483f711f0bf97f523d6ba64f4e25839940e2cc53cac0
-
Filesize
5.4MB
MD5baf25b77897d4d9da42866d3a5e1f7d9
SHA151e7ad4852c48c20b5f790d614b62253ceef5e1f
SHA25642ebf235bd21081baaa6500def4a156641ca2b77cc13cd7c15ff3081b178959f
SHA512f3b25c9c257caf3efb2efeaafc4e61599c0aec762aa1c8a3577100fb01875a41dcb6a9e21789fc857e790af08e453101157c08f59952d5c7779e1e6feb6acef8
-
Filesize
2.0MB
MD5df45965123426115c432787c47bee445
SHA1c94381b74b4a63642e66505e0078bf9bdb341c24
SHA256310cf98a278facab47bc9447b1a4f7bdbeec92c1119d1643c74e198fdf3a472c
SHA5128626b5c63fec030a82eff6cefc419f5d442335628463cb3905221a622d0453422b094a87d61411210bc62cf626e27d5618425d752630d391fb6aa5ea7a8ce7f7
-
Filesize
2.2MB
MD542dfb898dc9fdd6799a2fbf83af05ebe
SHA151794a75a89cfb4cffa1f6bbfbdaf46daa30d327
SHA256e503dc4494f1b0dd54c685e3c683f3f257885f8edcaeb7f1eefbe4358651ee79
SHA512274c1f5258d2dfc129ffe2e2327a88756fc46e82b8a4e71567721ee602b59daf02d561cf59e94a369d1541c4414c4a81364d21d2c1b473995633e998745c11dd
-
Filesize
1.8MB
MD5a695fb25c59de26bbccd76e232c679f1
SHA1c0843edd61a361e61b1a4138c903077cab0a8fe9
SHA25695a72815a3af8adb2754cb5e2dc51d2ac3947736f7f542208dfbfabfeac99212
SHA51278a76d4a4ea5cf8d45d6738f6c577e9d30a61edc80bd8bfb9a6a2d1bd35feaeeb5fd964703e02f5a8cb29191d6d1e3898f8996149cc2b69dae2d1a17db578c4e
-
Filesize
1.7MB
MD523b7b9621fc7fe2a2914aeb3c2465f39
SHA1d622e683f4321ef22a8af0b72f8f621090da3534
SHA25666afe866215a90be15cd6822ce69a20af9d31428c9df073381af7138febc40ac
SHA512cb9a9cd3f470bfff4efbbdf47057d13027b1bc853b168b55336f55f55638ad759b4faf0bf92a341a5e284988a3b74b3b10b4972bb98b6cee76d232a3ff691805
-
Filesize
1.2MB
MD5f927e9096077fbec442833344edf63a0
SHA121b5f33116c6eca3147f97cef041deeb600b9769
SHA256409b7a0f628aa04de0bde31cbd0b0323141988db07f3e0639d6147f8d9152e5d
SHA5122aa7a654645e5b8185da1165dcf528b139d9ba1c2e680b23a9c61c3006d310495e7d1d34ef5d4877580e1e3ddbfaceb4567f091b2dafcd9da6d7de8e7f10bf00
-
Filesize
1.2MB
MD5e74f634a9c239c7e7dfc83abaf550a2e
SHA198a3307c7151400557c9730e8efc26a9d40f7001
SHA256d49466a33720b8c1a13d54a6a6536a6fee42d6d49d806c8e0ea90f2cc3e496f0
SHA512dbd7f9eeebe5cf535fdc1b6ac5cfd86654f0bc944ebfbb0c304d013091fc39c063fb93489bcb2f9e2ffe10d9f3004138b1b1ea08d9e7a4b6089d15cd29c99abd
-
Filesize
1.2MB
MD5ae12b839d8c5941b8fc7703d8264fdff
SHA166f7a676380b423efd0a432a246b64b57f22e4c8
SHA256814bd6fbb2d2e8d58d8f2341d3d0ef9540080929d98a116b1fc9c77c9d458bd2
SHA51244de869ffd750f7138f50e354ac23067f7b0096d3235415893a4a7d4aeb8055d5d02a88a48dad9157529cf47068c9e8cf23febddbdd53becc00e20e260d3ec72
-
Filesize
1.2MB
MD519fa64f781d09d02e21270bc30cc9de3
SHA1f77eabd2ea05fa4a4bcbc7795912136d01b07b77
SHA2560c1d07eb571313004d23a83c9b1e8436622248f7c65ad150498403043ea2269f
SHA512591c34dc4e0f96f2e70d22ec23f930581d3bd5c501ca95c0eb729cc04f4c31a5315386580bf710fd42bcc93f5c6e7ff583af36b6174254e31b21945a04941bbc
-
Filesize
1.2MB
MD5c695d2bf9ed3d8751d9c6a2252d5f1b5
SHA1acfd113e290fadde2add86c8fd635d5b7e42109c
SHA256e58c9afbf2f97197081d0266cc51f76ec07ee41023e66381e6c713574c2d609b
SHA512e09381c9e48cf4045f74f60b006b3a739b57f0d8d61b14ede1d871a1a90cad49e6987e71bb836d052e1302959ef746cfa5fa9f9a96af7dbcf90897435abfc908
-
Filesize
1.2MB
MD5629f09e54f826061e2397487a13d697f
SHA163850a7e524a772ba422a4afbdfb6cc29f83aa03
SHA256435f2c251420ec8fdfbe74a0d629890e9504ee9ac7e91adc94081e9f114bedd4
SHA512c106f052b222c96948c1b2671afc00d700fb773e8a7849691c9ef417a01599e992bec2e5df022864701ea671edf2254de99e6a026a745e1e003685599001087f
-
Filesize
1.2MB
MD5a89ef6ae8220b26e08116b7d0bbdbbba
SHA1d9b137772c09978a2149d55662b241588ecb2335
SHA2565ba9d04f982e2fdb51bcbe4ca5e14e858ea24a52ee8d99845c17a0d3f5300050
SHA512aa6d7cc173371500ccb6046a01f6d1dffa0ebaa7071a52634800caaecff5f6f39aad3a504d15c77593b659ffbf842a8b45ca496ec8bd2c273696a2a5c6feedc5
-
Filesize
1.4MB
MD5210c157141b327f2f434e8e8040ee470
SHA12aa483b793f31eaf57db899a5b330acb770745d5
SHA256dcbc6f53b429dde40b32a8178abb2397c5e1799cca8425d7384a3a19cfb5ad06
SHA5127906ca694997985d57cd3b58e05d7057a4c9c7f4663e0294f1ca86506aa162f4218043dade3e0da1f08d9b348e8320ecf0c3ad240e0b2c4fc6f7d8f9be5215e5
-
Filesize
1.2MB
MD543fa886fbe4bd9d70b193d59c924503a
SHA1435e3325ebbe3272f8a9f1abca909232340a6201
SHA2567d1b186fe4e777e6319dcad1e3807ee58968c34a68efa442e265bae8d654f243
SHA512c419555d37f303571aeb78b7ee89a48094dbb65f3dff446b064c355d063ed02c1a862f322bd6df4520de2940eac9350e20f94b9d59ea2a8afbccb1bc7c85f04e
-
Filesize
1.2MB
MD513d0485626f4cde4c5851c4da20de6ec
SHA18e06809d6fe338e6f2ce65c43ace5e95c88fb510
SHA2562a36b1c3f8a26778293d98eb7aa93cac6e067eb9a435ec3e5064ee94cabaa952
SHA512a304afa06aadddf6fbe4faf6312a470c6fa5c7beeee13bc8fffd0784ee5f1245068638d4fcce03bc64ba1fcdc556c07ed041063dc8ef7ed4d837bc55e81c7dcf
-
Filesize
1.3MB
MD5541c59a74ceb764598b5f88a4e47415f
SHA1b244a78e98b7d791862884c0b7b4b45d52635d9f
SHA2564ab767ac8e5ed0cca35bf6fecf5d1dade66a557800fc9d4d187f08084efee118
SHA512ee721549b3a6d5926eecbebb9aebb908393cf60b472f6874b2ed16991274dcd2cf19a4cbcd094aeb16d7a9989ffc194638450b6c01aa4e6268d5c3e88e34bce6
-
Filesize
1.2MB
MD58c01fb52c8133316d4480badee7be671
SHA16c172e6b24eb0a566fe3f0385a88297316343134
SHA256dfe5e3ae54c031f6fcb3afdf1b50af193678f172f0f14958930c0f9cfbb3b44c
SHA51221646f5f3acd2ba90cee20925bb789cab091a5b1216b88dba74bda557d792490fcd48db6625a6726d844b49f030b476a80f06d14fe4eff605e856c93c1805602
-
Filesize
1.2MB
MD5c596b7dbb4624f08471a2d6abf48694e
SHA163bf215629d073e6478792e1bc5e1881221deb35
SHA256ca56239e71e46925d3bbe53b8c1c5c95cfd7c3f61e26db3805f7ddb68bb72fa8
SHA5127a7e386a35ebbd3115c912ee7f5c45272b63bd3f4b57de0f7b68fc470f265ee2df9e2dcf32126bad241f6d340e71535bcfd3b90b248bba7051e06d4778257cfd
-
Filesize
1.3MB
MD58ac9e28a2b9b1ee8e6788c1646be9602
SHA11e0e1b3180bd62a71480b4cd16f1dd45d65e7b2a
SHA256b49c2621d97d9f6c8526a617ff51a56fc80123c3a2fb62e41a1387bbe066c125
SHA5120b734c1d658669b81eff9e3cb8b78c79cfc3abd7e44ba8e907c67dcc99ea7addb262c30276923285cd99d384c2ba482bf084f1349951a460170810b02db50220
-
Filesize
1.4MB
MD5db8eda9a63151ead08c47b68ec87e2e2
SHA1182a6714adc308a3d8960f484914ea73ce54879c
SHA256238ce0c594728929429e3cf258d4228a3c078a0e9c82cd5d7d12c7e095a9ef99
SHA512fda30d24ab68ca01e74e2a1dc0fc23f4d98a924adf74517451ff586559f9cc575cccc0b9dc40bb0f6af57113c9fac1ab67faf6156578b917fbfeb66804d59f64
-
Filesize
1.6MB
MD5658df6ec74b707a32ce2f66694333553
SHA17c6df66525809603cec9176bf31eb5570982f402
SHA2564eb3a01c6e1cf910b7fd155e5c15e83a19a1d9a2565c9174ea160b71b0fb51e8
SHA512cd67d441299b18b4a3b1dc6764176eefa1b4d8e3eb73a8c775755732621542afcd88a3c3d0932dbc84cd893f5a97896585103180134ef26eddb06cf6bef41894
-
Filesize
1.5MB
MD5b578e9c3a58584d9594b53bbfb516889
SHA138961afe799f06160ab70afce190a9028c4a6315
SHA2568c81d56fefbd3a17c81345b7149f0a7baadc79728a85e8aee93c28d4ab54ac27
SHA512352d4a90c67a3bfc06dac66b3f96f6bd0f5d4ffb197ece3d945100d88b59ddf0e405adfd735220dd699a55597779949781d588742ed00e8e7e58edcead96d172
-
Filesize
1.3MB
MD51adb1317db6ef9e812155509451188d6
SHA19e7e415d25c024d6077e41d03cb84bfafe67c8ac
SHA256257f2afaa44408562b1e5fb0b3c2ff431cbcfee8d4d41c692d1e9511c92228d3
SHA51262c083457f633df5891f373ec0b23ff3aea89125b7779543475b8dae86f6f1a2fe04f4f14a1c22617d6f9672d6adf9d219481db08720b5e736f4114aef86b326
-
Filesize
1.2MB
MD515a1d479bcc4f30687b5e4f3c95d1f5e
SHA1bbced45070d35d78b866a79cc323369f2e492e3e
SHA256f402024e4783d579eae4f7fa76d39a47b2ac7412875f9971d105a332b15cbe26
SHA51234c973274f5b0d9b8c60f592959aa633ab5f3254cff7f87467d6c547511d7b470aae24a687f893c11df182c59f8a91a120b0f61a0997877e087462fad153bd37
-
Filesize
1.7MB
MD51c3ac5fb8880b3b61a2178f3d4c4ed6c
SHA1906e4122481d9645cd911843e95d7cc9b558ebb4
SHA256c6a454e9878b8d7011de905f62cc4f164b9e331ccfeb3d5b6a3ff5cdfc8ddb9f
SHA5125d9067e165318e38fe79715bbde5837d4ce7b0b1afdd60db8e7e2e32c95b45e5271b868f8c9619de0a7385acd97f9f2cca6fdc218dc34c578ce0d1ef3fa18f74
-
Filesize
1.3MB
MD5abd45f029ac6e64558d3a3328f20b80b
SHA1f8f81dd9fbe2134b411d06b9387872c75e2c3c7d
SHA2568b40de28608f54d106963b6ee08be0f36c9a3a6f442489ab07663b15942fbe3d
SHA5126cdec89632c4c37ce876b116c0c095cc46074993fbec4be268e10fe7945fe00e779caf80ba6153e44294d80c8cf2c29852de3dcfc62f949caa539a31e7df5f06
-
Filesize
1.2MB
MD56e21560af5d90591ae9261054cac4e8e
SHA1219ecf9c63d3a8162b370b4d3346493f991c12d7
SHA256fa2afc3209122a28afe7bcead572691ff1d618bdfbd4b5652634ccdf872cdbe8
SHA512e66724a124e2f690687346f8a07ff009f78fdcec8bb291102a5805ad217b43f592f80628de7ffa79ef603e14bf145695699a026532323f3b2611ba8ca079ef86
-
Filesize
1.2MB
MD5540fc0703ca93cb7e06491147298070a
SHA127832d1a313bdd48ec2ab4758c3363054363dba0
SHA2561936f2272306f6ef6e3ca3a5121e8f51940d8cb54b66cc7002b636e47dc56e6f
SHA5125a50128e7218c45c2142ba3712b39f66dd7f47cabe0788fe5f6cf393996a50622a80111610cfefad481474a498d35ffae522322ab990baf7a392f8c0be1dc51b
-
Filesize
1.5MB
MD57db53493ca3623fab6b0d89c9454e3c8
SHA1b07b0b4afd34aae21930a423be7ace696c59a7ba
SHA25635c6cd1abac58bcddc9d31d5f7e8ea597f37247e560fa16d87e62f2373c57005
SHA512563c70c71da2581cec0d4597a79c030175332c64c4f0d61738c5adb4fcd31cf2cd19d5c788a5b8acc9c2e5e70b29a27c326e85a4eb218087cf3bc9a73696c009
-
Filesize
1.3MB
MD5e30ea7f2a9d38acb8495532adf11e4d8
SHA1176ca8316ed529a2b199173dde584471328f75c8
SHA256af86dce4b466aceef1ccd6e5d6a53d7843c16694ed6a61ad7ddfd9500c406fac
SHA51248ca7261699c13b857c642b7ecb876ade09a212a157c0ea725bc04921b21690d4f54aca2f3f463ae9559dd3696d9e699378eb8d13c1452d25138d97be3b17f0a
-
Filesize
1.4MB
MD5c279beae58a412bdf8e1bface13c99a4
SHA1f82c8822b48b9d7b8ca291d64362a3c24d18c946
SHA25677dcba793a62c747010f68a0c093be908ac1f4b98ff5609b15bc966905b7b8af
SHA512c5ed5f86bb365a05080d51f57b0f4f12e575c02fc1011be50e4fabe6f002b2fc7ca4f2f39374d77ccc8d4c42e048da5650745b7a0bbd6335e7873c65b265d48f
-
Filesize
1.8MB
MD5d64319a75a94278a8e3399e96155e79a
SHA1e8cbe36b1b62511ce11176e6d74f4a1e26a6aa56
SHA256031184af5e1e61059d4982c84cc1284f098a0f18afd09b2d6a859d72e593cf39
SHA512b7c700cfa93eda7883c625f81f15951cd066652e5107c9d9452656f0e7e52902833d54bc3ab675de9488ca1173e4f6bd21c5e2e7005602cefdc22e9268bc02e8
-
Filesize
1.4MB
MD5931d6c04c1f2a164104db0dfdbc3ea3f
SHA12d2e498ce8c5bf30d7e3a70439123b763db113a1
SHA25679c26f1019bca5c75230beaf9c3d132b1251bf0252a385b5336404098aa329de
SHA512fd05bfeb9a2d3e8aba528c90507987f43ebeccbd6c140eeb3a0c652e9f25628d44492922b3891fb8d31479c96724a2c2a3482d93371dc2048b2f24178f354218
-
Filesize
1.5MB
MD592c74da96fb73321882554494ef30e9a
SHA1a9e3617245be766356ab2e509a2b30f7b22d24d8
SHA256b8635af5e2c52e28fc11833590dd95dd24df1d38e48e5060f36d0adb85ada044
SHA512a6ae94ddde037784eb60a2ee91b2fc323d7319a504b93f5545acbfa764a9d2b552ff8b53995a430986d14335cea8e6f57b649e3133c5fb6f40c4dddc92f4bc3c
-
Filesize
2.0MB
MD5cf55d977678c1090944ffda2c428cd8e
SHA1ad629abd8ac5e01e04268c2594fde3abf802da40
SHA256cca6ceebb979c567e5b964adebe55de4da71dcf64bb1f47fead3c731b8a7bcb8
SHA512591d9ed3aefead4587bdda328c2537b474bf0d1a2a12a992eaf9e2253f5ddec84e9b1b276b8e5a7a5e074a15a38e28a777b9b69cf3d5104f59ac739ae79cedd6
-
Filesize
1.3MB
MD5cc50d79b70fa93e7bef75a2b51292b27
SHA1da3941453d9655cd999dff90552d8dfe7059fbba
SHA2563d677f17553d1431ea9f75b308bbd5cd9f301d126cd76fef499df5f68d5b5cc8
SHA51202721005db6bde5944f4beae4481aee43e26a888876b1fbd013307b36773d5ffed19c5f1dd9d19b0395061c3e293cd6d98f2bd6d3e3e6561b39fdc45d75040f9
-
Filesize
1.3MB
MD5d2ea82b3640ebcb861bbea7b9b13438b
SHA164634580a77856c54a7ea41a2d28618db646fe1e
SHA256bf2ba74998126d62996de3d675388f5de63f17be4cf3ac7a04812f5f00410711
SHA512a47d4c53ecd78bb222e62779b7ebc4e5d0331de0d757a32a43d66af6213e73d304f3af14cd51fde992a31aabc821b869565b0f41b1e84fd6829b0a6fd8ff1ba9
-
Filesize
1.2MB
MD562218677e4ff9f7911c5e275418dae48
SHA15f1dc378c9159adebac09e96aaf2c6ad842c93aa
SHA2562db727aa28bfbee7910be82ed451e5a0a965abe0e91edef65f42126338c59e9d
SHA5127ae4f3a15b823a145439dbfcbdbdd87904ec70f18a17cd5875ee9b407876586b3a72361c27b05972ad8fbe9ac7f56b3bbf97bb2eb4f880b0b9bce95738d5395e
-
Filesize
1.3MB
MD5b21168671fc6dc31ba61270d752de2de
SHA1278f421a83bc2e15e1f46d9b585ac663c1f9e9e3
SHA2561fb3b8ec994c6aaaa7ebe94e981830aa038991f08c53cf93d97662837c534ca3
SHA5125d11329ae9e7f4f9370d673bbe141adbb4580a61bee97bdec17abe9d0ba6a9080a319672ab5ca8aeaf83c4f3ed2d05a5435ff1034faecfe485bef3d2a2d4885a
-
Filesize
1.4MB
MD5e888cb59e60bf3a204c2a59f0f3c63e1
SHA1e5347e3ff9089dde829044f566daae34b3a8b618
SHA2566d2b6379871044dbacae1e2bceea3fef9fd71605eebdcbda4f8315429b8fc762
SHA5121678224c19f4d67c82414935121ec3c44030f1eb0f919dff294f6437804bf84883daef1ddc30c3f175b7ea7cb1e43f9a2ff266a85e91e4b790d79c9dd38e77bc
-
Filesize
2.1MB
MD51102c589008a2cb91f5cfdfcb768db0d
SHA1600bc1298d014d746b3f4c2d7ea115fbcd9058da
SHA25612a6accfbeecec2b8252a1866843abe30a07742d5fdee6ccf2e21825009dc2ce
SHA51287aa2bb6ab03a8005390de7df9569918454b615d16dbed6d7648f2d7b5fc0041e3ae4c37a5d2caa2c88351165d408e1f8f8501675a82c54af8be8911c2a44ecb
-
Filesize
1.3MB
MD531ffb93f29ae1de5956ca2e96a8bdd21
SHA13d97e164e99b996d0e1c7908cd7676ae8fe491c4
SHA256b0b83ae13ef63774e5027b9d5aed77266008e900ed00b46c0e8b7e3e0fd5b11c
SHA512636a48b8dc60f0d59c7ce7846b2400c55fc988c5d5488f0e56b45d35b19e7f61f624406fc8b51896f3599889618aa645ac87075008ab1dffa84c5a3474a58081
-
Filesize
1.5MB
MD57580dc69a1ebe6d896aa6f98862021ee
SHA1682c4516dd8675dda4f436b133ee0ed4eb543ac2
SHA256558e24e2e5b2fb865b52ee15ba25b4d940c31e798234982da7b854a860684830
SHA51248913e99d9860d28dea33613ed8dabee517cc201086332f01eea912d4fdc1d7e6c111023a746c0938d3f60b923cb8880cf69a73822c5b6f6b26aeef215384f12
-
Filesize
1.2MB
MD5a6d1fa5271c9cbfdd3bdec8c5b895080
SHA134242fad8afd43b46ba22a006854958e6825e831
SHA256ad139d79d094bedafd13f745e6a80868c0518d41bb25707197660a75993c4108
SHA5129b05b197322d49bb377d8c1f97b01d2095f5c519175a6a33db750a1571e65228a577781acabed8fd7e6dd7d205dc5fdfc505cb730170e784295f48116ade8263
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.8MB
-
Filesize
2.8MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
2.0MB