Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
24/05/2024, 22:17
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe
Resource
win7-20231129-en
General
-
Target
2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe
-
Size
1017KB
-
MD5
f77b4b8fe1498eefc5a0bc31acf3e07b
-
SHA1
a2be22139cb4504eca136677286db3ee6efa6ee7
-
SHA256
bf89071583aaee609af2587e63ca2e02404c8875fae6765fd0d719a868cb9b1f
-
SHA512
33bc8e0b4446fe61e4a45bd2439fbd2be35b19589aa3ffd57fa2864f50d931e41f15a69cfa6d14d582f6ba328f4d2f6ab8353f54705620c6896448b10a1e6ba1
-
SSDEEP
24576:Y2lm54RfTNjx+mZCkt76f/24pN+XNqNG6hditW:Y2M54RLf9Ckt7c20+9qNxUW
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 3260 alg.exe 2772 DiagnosticsHub.StandardCollector.Service.exe 3240 elevation_service.exe 4636 elevation_service.exe 3808 maintenanceservice.exe 3516 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\1e306e13d590e271.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\System32\alg.exe 2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jdk-1.8\bin\jconsole.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe alg.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jar.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\xjc.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\idlj.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsgen.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jconsole.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javapackager.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdeps.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jmap.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\minidump-analyzer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateOnDemand.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\kinit.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\chrome_installer.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mip.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javadoc.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\serialver.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\minidump-analyzer.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\7z.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jar.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\kinit.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\tnameserv.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ieinstal.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe alg.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2772 DiagnosticsHub.StandardCollector.Service.exe 2772 DiagnosticsHub.StandardCollector.Service.exe 2772 DiagnosticsHub.StandardCollector.Service.exe 2772 DiagnosticsHub.StandardCollector.Service.exe 2772 DiagnosticsHub.StandardCollector.Service.exe 2772 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 656 Process not Found 656 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4600 2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe Token: SeDebugPrivilege 3260 alg.exe Token: SeDebugPrivilege 3260 alg.exe Token: SeDebugPrivilege 3260 alg.exe Token: SeDebugPrivilege 2772 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 4600 2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe 4600 2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe 4600 2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-24_f77b4b8fe1498eefc5a0bc31acf3e07b_bkransomware.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4600
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:3260
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2772
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:3240
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4636
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:3808
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:3516
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD575e8d60a426ffe5f64c4ff8734932075
SHA1c0411d832d078ee092ca1e5a0bcf4a9701296ea5
SHA256577234a93be7ba8d560d4c0350e881575569d6c400ed0ed42b445ecd18fdf7bf
SHA5126273bc373ccfc5da8b4176ee40d90a012b5f2516da92e4e7e3313e5d33639de772bacab0240bba064a454451628b1d5a4f8e3045c2d8a60a9d0d1a2378761f46
-
Filesize
797KB
MD5a98cb7880a751f5ce1e76995e2b142fd
SHA1fd1318fdb67f08b703e6e3c6a2b71d784baba9c8
SHA25649d6d8c0c24b37bd8346e1ec549322a5b7bd3350f30aa1bec527387d272e2383
SHA512ea0db11500f2faeec5cfb5107838d07e62471f096128a502f5108a82b61cb903ab8a0a42bfd4382e14d688785d5a4c76d8d903c6559d9bb9f7a327c7a21cc693
-
Filesize
1.1MB
MD56eaf4bf54a5efed405bf9ac109c80a91
SHA1a7353c81f8117e248dd30c3b2b4edfc089a03d41
SHA256a75ecf9bd481fd1faf93255f725e1f05a8d0f2516df848428e07d39b6034ada2
SHA51222cdef1da3c0263c137cebaeb2b05c12e2fa72a4a71c2d5199642e5fa446a2f8510701cc9ed3a2410590c0ea9f1849dd18f20cb4f542bdd317ddaa4768aedf43
-
Filesize
1.5MB
MD53af7d3a6f73b7478df68f0cea7ac35d6
SHA18fefa33ffdffd4f7bed3764c26d32961b3013275
SHA256d51f871886736a3a29582e150d3f55df29e140bd738d6491f7ad07e7b78eb65c
SHA512721b2384f40e3e6640bff78fa7867dd559d1ceffafe5bfbeac54763589e2319b9e0534f347efa6cbf6bdb5e3b6d9d26a7b1fdfea446e2abab807771e764f6fce
-
Filesize
1.2MB
MD5842331aa06c4cf346c85b6b2b3e54d94
SHA14518ae12b3a54474377f21d62b8ab0838fb6978c
SHA2567439f83f23470d8433913e6234323706fc220fc67df0004000997e49f528b432
SHA51263f41467297b577f7b152677d07cdd48cfeb2b8c17aa31079a2aaa171c1302c544919550fa6814bc2e524d0239f11cba31200ce34a8fa88cdea2b92b8489e515
-
Filesize
582KB
MD57486ea6bce780c0ed16700667b9b2769
SHA1532151d8c71f24271119dfcfe1ac1919777546e8
SHA25616c79d707446f1f77314b415d24fa8a11926c11e1964c19d19947ed71e4f2958
SHA512435be23f5c123799b580281a619794be9b878a77253bf23b323e4024d8144cbedfe67037306cf35e71f52f16cb37de1a284890cd220bc369bf8112c53853a113
-
Filesize
840KB
MD5f6c2539ccf8ecc490a30776bfc0d6de2
SHA1dc09989d8c204c14b3d4c2515db57ffc0f328cce
SHA256238759b96c9029c51c4b27bfe61462e6c8ee3f1246f9a0548ebccabfe5b98e6a
SHA512d444d1ce3eac9b705f9811c45111b62a88c524de0245df75374ba4fe3c7ce65d367087b548594250c4430f25c55a59d00140d105b6efc5150bffb614445dcdc3
-
Filesize
4.6MB
MD5bf88f941a1c5388f61e2afd03f907ef2
SHA1854ee542f4cd6bb12263ccf57d9962fbd4cb28b9
SHA256999d453cffb739def793d7eba83d5a6b83ef1c48fac917e434926a8b30bec466
SHA51261df2f981e282130662cf691e891a9dfdc5af0d75a3b8588dda5020f98b2170c7664161be4b7a9b8d631b1b092223a17b29d2c42cbdb77534d59817121b3cab1
-
Filesize
910KB
MD505f6fd861ebf270a546f7d3549c3fc37
SHA168fc016d15a2b1b7afbd263a6d573a454bcd0ce8
SHA256b7b0743a77a27f9ca7875d9c2810334790db0744a04b50a830971b1b85d8e5f4
SHA51229305591edab3050b9195f319673e7fea2d93b5a59e45d8f569ed1ace99b450819d64d63260d0f37dc468407be891a39e0f80f8b84a00fe1793fa8a9e686e52c
-
Filesize
24.0MB
MD5ceaf856272ba88e5249b82fb6226d1d8
SHA127300690eccf6c2043505712cbb0ba9d37a47beb
SHA2562b80fc5c78f5c2ffd6ea217ab245650370456dd972602ae41c769608ba3d612e
SHA512eef218067b80bfcb6e8a942fd522cd9ddfffa7511a21c48e1ee9674024336b39d77a9c81042ff1dde60409312f4ffb760b031b07a6c26852a14264dbf8541b3f
-
Filesize
2.7MB
MD544f6213260dfa8a9242550379491c818
SHA1224838f1ee05d8dd59db3585de5d8ddddfa2fb64
SHA256d0d8b987b6871989842b53dd15906a010c74893b941062fbcb0fc84c1f9f6484
SHA5125b6a696824a7778280db3615769bff1ba781322909328d1d16457950650724ae49026bee14aec687b7e3d141033954dc1e789dbdfef30fa3e8d7305f8aacb2c7
-
Filesize
1.1MB
MD5b28f8b631b6b85c510ece57a15ae664e
SHA19d66228f72bdbd4ab2393b3381895513aa334549
SHA2568e27bc17a9bc79f8d27a9cca9eaf8f1c3b4aea8d45ab8cf58eb633f78679c64e
SHA512781354380b835e8445acc2fd50fae75220691afd45c11763efb430116a0db095fa8af0cefb663446bdf9d3d948165594f94cef683d04697dd81946dd43705077
-
Filesize
805KB
MD5e925d6a38f61e0d3105b92aeb8b9c0dc
SHA17f9960bd418fe0bcca5bdd3546c8c98781dc298c
SHA2563908957af03a76f9d63ad5961d00e2d9c1a6143cde41c230f9028b9d30e125f5
SHA5120e2e3d1f34c2254ecf3ac29c560fa038be6f6e81e99bc34f48d3bf61550aed9a0721b16545dca55655f54e33d6d0c10fa2f2c7f97785905b4e8d5dc1426971b6
-
Filesize
656KB
MD5138e6e51a2466dd79f12fe5d6f50f077
SHA12819160a66ebf0f4bbd55d17e9ca700e54c09d89
SHA25666cd1430b844bc4941aa1487e1277df96694ed0a5fe872c924cf3328a9ffc882
SHA5123f695d1c40cedd583a7e4c3188118152906ddd3472156f78195f42c4d145a5cf191b584bacd3893abf0adf0d197b9f10320d2d829949c3f2ef61f260c70ab783
-
Filesize
5.4MB
MD5dbd3ded9e8efc1d0f50eb173bc7b1c47
SHA150144fd5938590467de789714f2ffd361364e223
SHA2562dc0b487b37d18b6afee6f9c6df9ef4f0227fc0ac5b3c7898a8eb65a6ecb100b
SHA512d6bb4d7879a1e63fa4c78a5dc7dad805a612961d8b93f08b1ce4a2c74f7e4eb477161e577e1725b26968afbe89d278a476fc1a0589c2f02e635e608d0c2a4306
-
Filesize
5.4MB
MD54e5bc39b5ea036c3a2002e04fa1d50cf
SHA187f8cf48eee79a86781d0a0480a5be10794d4031
SHA256008c22d4282febc0e9ffa7b07ab4ad1bffa59285428d3618a78a4da28dd7e17f
SHA512129e01bcca9adfc4a2149767c0b60f3aaabb733c255526976337a1919d3f2c68fb79ac8bf1d95b6fb13a0ae6b752c26997e88b878508f1529e2d7cd5f2d5b087
-
Filesize
2.0MB
MD55e1cdccea5328a03187bf46936598b13
SHA1710940ab470ba91590e1cf62c5cf2016f581253d
SHA2560f465dd9e38eb5c19422230e84ec7f42ea065caa49d83eda19f9a565d4b278e2
SHA512ae0e4235eeaee69326779346a255108495ae716797bf3c7ca4c88ae38902085018b88b3491e021fc538866c0b72b5116eb0d47c89cd4af8104f580b953856847
-
Filesize
2.2MB
MD52c9979fbb547e709318e769f2d73833f
SHA1f32cce64dff3d9df9b97b7012dba4950f7e42117
SHA256ad3f7683c8b1059217b4a3f6006a31ba494ecba3a75b6ce1b8d4ea9f9809d6e4
SHA5120750ca75781fa8e79af59506924610169ba02d36d808efb94446ec404e1148f94bb0614c697f1c6c4ef675f26ce7221c2f44763d64f6aa0f0da86a4dde6b5c56
-
Filesize
1.8MB
MD59cd95623839a9c18f1b56ac785882271
SHA17b895751e038022af3f13b6fe9b2d42566fe8153
SHA256e4720863a53588d531eb833c7ba0926d19107e023f0e6926bb2e16d1abf2c6a9
SHA512ef8ac91b89b038f0ffb9ceffda8bea67dbac69203cf4f0d42c956e3235379d975f4aa5612ea1c2cf4cd2765135e05c024fe9baa7f947358c70775ea76f4ac9dd
-
Filesize
1.7MB
MD54125a7b4b1af69b1d14863f410c1f7e4
SHA173068430e4596c3b5816b304fc2da9e125c6f6aa
SHA2561b02ed0008cd7cb83e8da17d5f34ff3f747682a8c855cccbf901a98f5e5d167c
SHA51261165a4f338005bbe709f964fc550dfa6921a9bcd38d170829c79d468f9884369c825a39b97d8926ca06b0475e546834f9432ab9e46afb2e44d351fa817040b8
-
Filesize
581KB
MD5016addbee0c3951e5ad059ae4a61dcc2
SHA1b1d8e6272db8badcc9ef966b1edcbb3d69c6b0b8
SHA2569f7cf891b0edae86720bec8be2ca9afb8ae3e4d223b81deef8e99780012be567
SHA51235f8d2faa1681bc5a68b36d7ebaed2f0db9d4253b91c214f75a7927599c02e080fd3c269c9ca586ab23ceb7e34ce3d0597ee76b8a1893f179e2a051eeb1bc800
-
Filesize
581KB
MD52dc5522a06eb0dee492d47550f330599
SHA18269ca27cac73bd4a4b083323f20ee197858e9fd
SHA25642c3881aea456e4513a68a64d291083760d5d92ff7d50faadc7beb8aa9bf1b0c
SHA512192cd64d3b9d24d6b40a3ad7727145ea6147e795e792ddf07ff2ac1f433c1afb7edafd080906e0ea42871dc5f76a16a644de57f7489a25a4773755bc8377a6e8
-
Filesize
581KB
MD5552e2934b70b8dd4750bdea5d85b0deb
SHA1fd2ad8f80db6728d122a7b30de1ad76ca6618109
SHA256479329b00fbb9e5f9dc7ee3240023f7af698ab775d01ed45fd02e8c6d5dc4097
SHA512898b488382a49441b90dd3e133ac85bf257385e70aeefbe38528624f18a5324729a4e198c5afee3accad7aac55ae190c2087cd45723a0346a5e2d10ca8fad519
-
Filesize
601KB
MD55c3e3a45bbf5b1190a7c392f14253a3c
SHA121aa66ee6749baeffecb2125b18d1190c5888569
SHA2561f87601064cbeca34c81bc40ebb87824a5d2b79bf318470f74673c0a4ce8327c
SHA51275822cf496d052cb1f4797a2e101364baa6031b09887f8607971315f7c32f4d7de6b347e9bf3b6e154f04dbc0ed125d6f5c360f26dad16ea2a30a3852c564d49
-
Filesize
581KB
MD5bc74c7da9f0f12a33348910e2345f6f6
SHA163b12edd0bde21eec3ee5ae093014c013097d84e
SHA256d4e7384c5a1fad500fc2d28c0b640df175a699f520d50e939c46a8f7a8048b69
SHA5121b372634c6d3a7b39b2cdec60331ea8df6b96af386f610a62db096ee92390c2b10dd457f2c17c7ed94360159961fc2b921e740e9c36ad173e9c809c0e2c06444
-
Filesize
581KB
MD52d8e6c9db5c080e7db656f9650783c8d
SHA1cd3dcda31cf365f4f4bacf97c2a504cba32c7948
SHA25668621bc8ecddaea41c3663c35b777a1ecf74a0546689c5b37ccead5a2b105f67
SHA5125e163b7e74eefa2754c83fe1cf9a8deb3596b48537999d006948e476bd8c9b86515ca7f3b6357cbc3b6e7122644ea7b9da091cc86e9f9afd5e5aa66426a451ac
-
Filesize
581KB
MD5d351b0b64b6b248a4280ec9453a18e41
SHA16af2ebd93e835d72ee55f722a0bd07871343d320
SHA2563f3514d39bf21a86cef438bb28aa1464e6e6cc63aa9c7038c63a133534ac5abf
SHA512e7d4c80165b6149f2f198b53bb6cb4820bd6d57f09e12de87e16d90a24be2e758b63499c4149ea291e92a152bf667efe1cbd4e9f67be6c52409081018630df16
-
Filesize
841KB
MD57e0032185cdb93e5ccec7400fdb0f1ab
SHA1a8dfad3f9a62a00ef566a2f5cdf17d6febc11798
SHA256a16f56f09b3bb0870a5f8e5fa3f6d0819493aa88eac89ce3879933de83be68a7
SHA512f2c08b99f125c98e94339e05a339d61fda53e3b821221659226a1840b3c2a157a2c2eb6f27df854c79128b130031c4951d109de33030902bd3b2d4bd9af3dad5
-
Filesize
581KB
MD556d90e7216a7b5356658411ae2a4a47e
SHA1ad27bbff7b890e52cff569bee14019a807ea4b74
SHA25607ee3f85c3cd3462e85f48b235611d73dd27f1b4afd48bba03a5443d3b3910ec
SHA51297b3b909f5a47e60a13cc9f1ce5b605ca09593a98bfe2ecc1c03709a608a640799ea8a4315d012681561ceb90acb7668c21af66dd8a8a04d6b8ba4cc92e0a3e7
-
Filesize
581KB
MD5e090e7add71593ade963bbb712506b10
SHA1117393a6b3f29b3f00cce9f4fe6671badb649d2c
SHA256bda3ddd6c4d691c67d51a58d6fc2dc547f7afd1a759c212483519ab4ea1f1419
SHA512cd195e47601772f39931d54c0e28683e7ae6255fb6f8a9c901cca89622f79f43203e254cecdca7d728195ff074fe3a72899280097b50136fc149bdf061d93fa3
-
Filesize
717KB
MD582b9324b7c2dda3ccc3c7e237537ddd5
SHA17e011940cd050830dac0996de7c56aa7361f2bbe
SHA25633669d2470b5c792b3f0393fe6176eda9e24f7eee31d692fd1eff760b343d68c
SHA512548e8bbb989c581f9566e4d6a07794d4a2f61e5b53fa7bc14ab6c365178f18a3055164405597e8444230ab74484e0465a04edefbc4f3595607bfe370a08b9bfc
-
Filesize
581KB
MD5ce6ecceef353ca429b98d243945b2472
SHA11d186717812fd5548ee8ee171f4c796f8edca8e9
SHA256b8a9718d7ea219e88b18268dea1566b383c5ca7e9722144c70c20ef3c6ffb48f
SHA5125c35ef8c83c44165ef4abd58b87f8360197fa925fd9f9ade9199520e877a0a9a09901d726c46b0b337ad4e0276ce00d79be848a5ba004bb7e63c4772ca7af19e
-
Filesize
581KB
MD5c53612a5cfc9dde89a991c6c1b3ba96c
SHA1a46ba25bf3b390f53ebb984ae1672d0d3cb071d5
SHA2567b7f2a1a5823301ccdef5a1b5174d9b85726fb2b7316cee9690093d5af8de07f
SHA51296a8ebfcf523be3b994609ac02c453da383645e110cd416c6252d05d6593a8d359e4a8293395d54a814810e1b32c63a25d2adfffe45857f781294bf58bd87563
-
Filesize
717KB
MD5cef191d87e816b15471ec7c9e740390a
SHA12d02ea5b0ee31edf821a3ea3d4e116a029640f36
SHA25691587824676dc4b1c80abe77adbae0af6599e1dc0acc4e399d29260f7ea4c079
SHA512d123598077b0877463465d68478ccfa4f7f480c61e1875b2f936a92ed40972ac0c8ac73b59a58d334880cc5b78f7b7a842b204a24403b071f4191f8ecaebe415
-
Filesize
841KB
MD5dc7366c22308e291f63dfc683ea463f1
SHA1ddcd254ee29fb8c2be4dcac245eb7b261e93bd6b
SHA256dcc7eef731ac7f2c9478180fc5d835f86daab0d94b3804eae092659841cde683
SHA5120ebc03e469993881767af50c5f5f2f69d89c65647b2619a9990be4fde2e3944017a51e30df8e1e0a27712192a8db44845eb5b3f489ed69eb7031563e89cfb822
-
Filesize
1020KB
MD59bf21fd9a874e0a5039476eb1c55a17d
SHA120a4daafc582ce444d01aa6076bb017f2cebb95e
SHA256209679d48862c7384c3d5b743b0a90a5d6fdf5a0590fdd4f3f49cf15624ba6a6
SHA5122852032aa6c3e763de5cdaaa56117d68b21618b1ac99f07d3a122d5ce389468212ef03ca15df1888a71dae5aedad5e9ceccfff66d4b55a63adeb51a59ac7652f
-
Filesize
581KB
MD54c43802339623cb8a31fac9b9f55fafb
SHA16b769f6a5adbd2e359080fb18b0ed8577c2f0327
SHA256be54b514e3cb0fad5233f1e9ad40a8a4bf2e049f57f28f5d0f4d12fc354aff69
SHA512d5b949b931e3b367d7d20bba2461692ed4a938beb05ccb288f0cae2651e37e0274cb14bedac4faac855b815925e2b64ef565b405af9464e9798a347310004c29
-
Filesize
581KB
MD5179eb6cf4ca8865d0e5d0c5fe75a7c82
SHA18060ac109b23f729c99543bffeb59115c7f5fba5
SHA2564c331870f94a7397b3534d2d115205acc1a19c41985006d7325ec5ce9c6af786
SHA512844683cd8ebde52863b6d164cf55261d7f4b5f5f33dfd0bd0e7d2466d59017a408bdbc11b85e7e2c80da2b5706c25524a86efa7fa9e099dcd8b5000621d3cbd1
-
Filesize
581KB
MD596bd9016b5fcb25dcb0310c0f038ce22
SHA17afb4a00160c2c279ef1a68f622836a7f3ed20b0
SHA25680be4fbcf3bb0224cdae3914acc4a625c3abc6c63772f3ce61ec5e71df6c4021
SHA512bb6255208d12c096ccb8417a41bc0cd382dc6f9e6e716d223f616de967e84bb5d684dd81d6be8257bc9ac8fe9ffee61ac53e0db8008ec4f6d759704782ba2e21
-
Filesize
581KB
MD59293c535cafa5bfd4b2ba7f1297ae2ea
SHA143af9b265afec915ebb94cdafe79685694db3936
SHA2565e166ca33edc815867d598c04b90e98f409b6aa0b7d10ff2ded8f5e8569220eb
SHA512db6acb23fd711ab20ff93365244ccfec47027da5633de355b43430824b88bdaa42efc1f150c90a26e3b7cc0145453e488bed26b645a530359dfb46692aeaf744
-
Filesize
581KB
MD58194661f6832be54c0bbbfc7b8a815d5
SHA140bfa14dad088c01c57856b190e52ad0cb97d4a6
SHA2560f4760767e7f77c4b339c76813add948eb5e686b5e61bf1aec1fa04e47d4b288
SHA512df5d7fffe2551f331037b3f41a52a25cc07feeb836b6e7a512c6db41e6aa750f380c1edc4e6663eabcf121f70e5648becc419d4e0b2a22a0ab0209fb9c1df28a
-
Filesize
581KB
MD5ed01614288071f61d5f1dd801069c54a
SHA185692c3ba9e0942bdc416834a197c079588de9e8
SHA256a509786520a828cab670b3613d1f859e2dd3c7e8169aedd3cb3c8b5e89ddfb50
SHA51281f7e259ad1aa7dc2e6153664ce1eb43968545105f55c79e813fe78ecef593cb5843780a3bd31ca9232825881e894f138e3a57f284504ca165ae6e08b75d0756
-
Filesize
581KB
MD5a045163add360956deecd85ee3f07dc4
SHA1558d1ac99265c4a382e0509f30f3797074538a38
SHA256ab2a78dad7bf05ea89c2438fe2fa6c84799aed281375baaf6014a2ee6af3d2fb
SHA5127f0f6353a78632b827354b2ef38d3e2f3ce8773c565913589df673394fab2755ef4fae518c56a8e0143adbea752717d1aa70558d7807665a773937ed015d261e
-
Filesize
581KB
MD501665386376e2406efe5440268a90703
SHA1a6200360dd5c75aeba1a79ce017394134357005b
SHA256b2cd709ab850c27f057c7fcd0f0fbde58c3791f4b95b332b101cca3abc437bc9
SHA512a2cb70b70ed2f55b119f3e4a1795b41351960a455b5f81539cfb8d5680ca5f212ca2822698f5ffb1a4ac63c24cc3de2b0802dbf62da49ddadd62e93396a167f0
-
Filesize
581KB
MD58c5720a4c6ca893b0a35b14ce42c9094
SHA1dd9eadd4cbd5147e9a83c82bfe56bfd9e4f0e8e4
SHA256f76a091156c61bd042469c3264fcf14eb789e64ebc37d7f805cb3ed6ff1274c2
SHA51276f5ddf8ae5969591595d3979daf3a80c7895743a0103efc19499e4f8cb67bd6a80cb21c501bfcb3c739dde37f9f86601f56796b2f8cc8959ea591a223a8d7c6
-
Filesize
581KB
MD54f37a10d6cab70090af1c9ad5b21a8eb
SHA1e859bceed3041209ee82724e9e0d26f546462520
SHA2562071aaecf1b49fa293cca898ad4c339991856484d4b2b5caa54afb52bb9e0458
SHA512d15018f58ac3b4e080862adc887c855693d17f80da1ec6711ecc1033fc37bd1026ab424288109ce40fbd1f913cd79da817ccb941e508d23807a2db36df2769b2
-
Filesize
581KB
MD5ce9c96dc5790fe38ce8daec2e4520869
SHA1c95fd9820489f6cbcfaf216813778df7d6e676e4
SHA25625820b4208d4b77e4f4e93b503f1e606557fbe3e611f36a4d53c0dde03a3eb3b
SHA512dff093c5aafa8aeb0c03ac49407359bba8f60a43b46e4e26d699f5337811e406dd198f2168efff94c6352b716a304fd2cb2fc337e9289f8baa4bdf7a797892f5
-
Filesize
581KB
MD50c9a2a1e044e351be5fc3903a76e267f
SHA1138ff7cdc12734cc439df0dd416b6506c32163fe
SHA25611b8618ab272fdf3d5351ce009d631f87a9a06e4d9981ea397775736a8811514
SHA512e9058551f0a862a5660e92a79a9d5113bab06ef8a11d3c3bdcd6081fa3c8bf9d61d087caadf63bea363b39aa770af53b66c120c8ef7aedd76e3137e2bd02181d
-
Filesize
581KB
MD5621189ea3409d57d5ed388da9fe60164
SHA128019da70222f8e49f689c350ed9a90d403ef12b
SHA25678f39eb5138190b81e68e49ffa3ff58c85c862497b3d81071a8b492c3cff99cf
SHA512208b4cf4209401d00d294a5b93508a63cc3ba4018edb3bc04456707d5a312305420dbfb76c490ae5f9a7c5732dc53999ee6d630d3a0a2f5cdbcf3bae2fc9b383
-
Filesize
581KB
MD5f580ac4b4ac3e957f7b4f70eaee1bcad
SHA1e0ba7c6b9f79841f85a2f6b231e8b7c54ff8d4c5
SHA256660d80a4149c49c493b9644f082f85f1b781003825802704bad51c261d3010ce
SHA512cca7252817df62f9d897f8a0f2e95597576f24f118b08f74b1cbe07724bc52e2d0f87fb4a77e4d03809649cf20e75bbeebfd46ea5338c7ada29acd926f1c7cc7
-
Filesize
581KB
MD5180be2b2378003a9c364cb4e6ab8c314
SHA11493921eea41aed734858c99e6582bc9cbb06b48
SHA25629f93b5c38dbbfca0ef1d9ce52534d065eb8d984bf93bdc91809f69e6e489421
SHA512a71e710ca1da29d017ba6f4b956371a5586fd0f1d79f0bb5c5d96e926e52f89dece9723da1743ba5b6372d4e842527eaff44efe58f3e7dabd96b4bd1613bcf5c
-
Filesize
581KB
MD5f2196412b1aba96f8853f257e7c6ccd4
SHA123dfc84e3b5af5fe1f2da14deba8a08e11912914
SHA2567c63a4db0f87a181756aad379f6f408429f17e10ed5b7ab5200fe0fe5828a9ef
SHA512140392e25ae8c50faed4cb71743f4254549c3df389e72386bd0d402896528101de14bb695aaf03b6036e3f7b40f346ed401ad1be6675fafc7837b294f924ed9e
-
Filesize
581KB
MD50b566e57f9edc2ad40ddd171f515a00c
SHA1822525230771e7a91e276dc8885feb246961c01d
SHA256345e69bb49c16056ed592f01061fc4c26121522f159a4b69284a0adf5dd6a466
SHA5127c1d918f8fd89bec2d0e11d9b08013b7d9d66e7af974cb573b1cb83eb980d6ec8cd37dd87e94d662dd88b434637cff0f7f457ccd2ab0328e911a83c6507824b1
-
Filesize
581KB
MD57415e4424c70e888abe1eeadda9f90c7
SHA170339e7a31d80ee3f2708596b55f752f0aaa3d58
SHA256125c367ce0066d4a2ff16a3a10513d534388ab2e082a71a58194925fbec4ec66
SHA51287fc323317cc48863be1d5f3233dec5613b45cab6ae6c95dd9dfe23761cb0c01a204234fec2407adead67d4abf81f73d5444d9fcbafce9e382351f5c40abec9e
-
Filesize
581KB
MD5b8ca7df1fa9ca9ce0e0c04276622dedc
SHA170f55c2647ca4b856ab3eab1a19452f0ffe570b5
SHA25656fcfa39aeacfef0e77a1dc0d846db9bebc268409c2db78364fd41a1a8144dca
SHA51239da27dc0be5d9752e927e3571a1a480bf2e6f36ec5ffee01470885bb8cbbe7b060587edb91351364adae049140ba98a7abc839491e7c33c9ceb27e7e0345ccc
-
Filesize
581KB
MD553246d8ac4bb7b374f6ade37dc682eee
SHA12ff754abab7b759580a819bd642d0bc087eee737
SHA25698b68e63112f33a490f5316d2ed0606b2a4a79eb08bbf8956f7099c3439ece8b
SHA512c537bc0c4752ebe961fdc259b1de16a864df4d335f306985a86b6fe6c365060f53e7bc16d5b11b9a2a639ce0721053ee70aceac2e58a022a57e47c53d425c93f
-
Filesize
581KB
MD5297ed5de1f8be4e3cd7db3152a24a238
SHA13d5d62e5ecb1ff081e1e325c6aef9062cecebd2d
SHA256516c7555d60600e77057cada582a08350bcfc9c66f85caa25754d6f843aad499
SHA512bb60bbcabe27fcaba5965aa95f58133d3fb888424021b4d956885e8b35880a8df6c5188d7fda7e7cdd2af232a7895cca62bd0394bc911e7d10362cb39fe3beaf
-
Filesize
581KB
MD596fc77ce854eba2f085ecbcb73e0d093
SHA100aafa9911b3fb2a9a0793df37e64f0a51ae9ccd
SHA2566cef73b753030acee6257914854b11b417732741d755ab034c08d5b41f96ee67
SHA5128165f877057a71092d16dd557cf6b83330c83a34d22922a00c080c0212ab42996964e4610fbd5de086089485cb0eb577718baefd0c4415d512a3f51a36039a73
-
Filesize
581KB
MD507878a8593086bacbda9270e11e79f18
SHA193cd251010bc26173fe9cb035e8b9990bf855ddb
SHA2569106c75b04ff78aa4e6d42e0a737213b433f269cb56db11a248d7bf90927da47
SHA512e83a313add611f2518ebc524bfd6f9929eb2ba139b34d309cd8d5ab781fd84a15c3d88275cf502f23df8045935023629ffcf13f87abefccb81f44567972ba86e
-
Filesize
701KB
MD53ac4759ba001994ec3ad747d4d7d789d
SHA10e4915a855b58f52e983ea077eaa8f5b4dbf78c0
SHA2564fd72d686538266b1b9ad8d06a17f355c3c1f54e6244f8eb54be7b50d4e26c20
SHA5123cf887eeda3cdddad5d97a36681d3f66644162c2571ab87663a4a9338ea2865ac52df212fbfc4daaa2dfe151c79d0ca1e5a70ba423bbafbe67c5c1368e622da6
-
Filesize
659KB
MD5a272871be49673ac9a3c900634770bc5
SHA1efebf0943c238dc9fec8f8c92b6a8a0336d12e84
SHA2560600b3d8bf1c7d8ad03f0865ee263792edb6a45f213c9a10706bb06096986b90
SHA512e2d9ecd708479fbebb1befacec6260a266831faa5b4f01b389d9b6a2d328fe83ed77007a09c49ccfe22b65e96f39ac479ff1079f5f44b390810bddbec079c874
-
Filesize
661KB
MD5c0c0a181717007764d58da4578c27956
SHA1047b9cc55e13b81e0e9ebd5a61b6befdc96c981e
SHA2568df70247e84e0f44ed265486f4477c8e8f0e5a68d319ec3d378b4070d778b245
SHA5121a4b18e77e6fa7f2350d20a47fd1a5b44e393cd600ac8f8868d881efcfb15f05ab57f867adc0b8b355ca3af708c663654b9c439fac4a4567da29d62235015374
-
Filesize
1.3MB
MD58155f6a7115d69388da0c8fc0795b81d
SHA1e3bb4734108a707b55e39fcce6b04b67d96288d1
SHA25653edfe38c47a1a4195914e65e85e854a58408bf4a585e10413bf4f0caf45dcc9
SHA51257ec248ed1aaee75b1383c5081567be0a9137007f0218748f1d5f13ca39f481005706b2e7b2e033d18b3334750eaba35228741345f05ba506cfd198bdb4ca089