Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
30-05-2024 13:35
General
-
Target
2024-05-30_be239e8629d67a9cdf026e5335f43983_bkransomware.exe
-
Size
1.6MB
-
MD5
be239e8629d67a9cdf026e5335f43983
-
SHA1
164d3dfffea0f7dd6d7a04eea9db2d804d1a561c
-
SHA256
da95c63c3ee0d42e66d79da42d7bfa8683a2ef112b1099fc865106607e865cca
-
SHA512
2cf704183fe9904e5a504f1779cd0f52c80e211d2c4816c2aa92ff53be08e589fdad0a796621c16f2363609a00df2cdaad8c48c423f8661d0306598603b2a30d
-
SSDEEP
12288:/tOw6BaqSbwoqg0fitGbna8dQcLk/+cb1q86pJDlAF44bE2cSX:16BAbl0fitGbna8FLk2m1X2D4brr
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 31 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 35 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 45 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-30_be239e8629d67a9cdf026e5335f43983_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-30_be239e8629d67a9cdf026e5335f43983_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5252d40b40bd22b3117ac2ea336be81b3
SHA1f2bbecb1b6fb22ee19b3e549f895561a6bec9b90
SHA256266206690a0130abff7f7c2d267c0a6b268eb6b8c22770619d43d0e28c79267d
SHA512a5ed7f92cb63065370e19ec9bfc8f62968ba9ca90724581b375866bad7eb6b1b8f13cd5bb54daf5967da8d80a1bfe139972a1aa09967822510e35da4087786fd
-
Filesize
1.6MB
MD5c429852fc3962f2391ff6560f15ae580
SHA1450ae06ff78ec38081bbee88b257e11dab17025a
SHA256d64e62b8f8937bb42326e64bf6120065e60399c55696cc862bdebf6356020107
SHA512b297f65d18f9645785b38026d357c93e1984fb6c75179922eacb15a8a6e606046438f67b5362af1837950f83ab7b2c19c925941ae62c74e76c9075c8cd41ae92
-
Filesize
2.0MB
MD506f7fcc273cea4764d00812a391fd1a9
SHA1b17c8d91bdf71e1f961612c3ffc280c93a409261
SHA256cab483fe0fca0694e2a876a8fddf2cb8cfb4d45dca665421f6b026b4598fea67
SHA51222df38cd42e5ad06412ca838f41c5f8a8547b79f6451a58b6a4b8d80d12134e4a53b522f66638e1e18e50a7d455987394e4647a68645d73adb4de0eef96cdaeb
-
Filesize
1.5MB
MD5b211f71c56085045bebe8730cea1bb6e
SHA13598295c0ed1090749b0ab232565ce41b46d0b73
SHA25618c7c80aa5637965932da56856e132e0f8e7e50e63d05d77a9c644b1d4d1f475
SHA51276a4d405ed9bc110640931149d735fba7f338b387a8c9d873b840328f235349c9de92d0ef94a9b3ae9ab154c5605ccbe56ae309bcf14b14333af40b69bf6b596
-
Filesize
1.2MB
MD54d38b526330fbfb12965748e8bcc6281
SHA16b509cc86ac50482b7b3e429884d823051778499
SHA2569192f647118a55c3cacc56efac51514fb047e0ca60973b2b15222536b04100b8
SHA51296a6d3e16ad4210b5d15ba157ab31ad97490d43af7989e26c642020fbe2058fab4962da7a2913980965f0e6e7d1a80439fc3305ca9caf1b15815eedd8efd805b
-
Filesize
1.4MB
MD57c563aaa8028bd6ff34e0d2d733f2af4
SHA1ec7e022b06ec0f82e25ade220b7663b55ec3d51a
SHA2564bc063ce8313ef288061d5fd9c11e670bd4bfb95cd6990fd1bf9f839081da9cf
SHA512abf5ee1a391e749b7239474ccff27bd61d147a3d67302071b861f23b88ebe01c1b00de65e750879d244ab974e34f544412e944e1c9ac0466f77594a66580693a
-
Filesize
1.7MB
MD5241beec7afd70cabd635a9672c61edad
SHA163a21d1e2aeca115692a60b524e26f49f361a7dc
SHA2563819420e5086e0be6a86644982b927e5cd234cedc4666aaaaf70716bf1f054c4
SHA5121f96d18c36e0e72bb5e00e7e2126442015e1e212011a945bc175fb238811acca66a24d688ea52425dbcb0fabec54919159d48316d5d8868637baa149c570efec
-
Filesize
4.6MB
MD5aa42c774c9e6a8d77992e41cc747f113
SHA1ba31068a00187634e143d12ce060cb9e37b53c07
SHA2569792747c7e9ccea1518d9f5cd798edb7738df5aefefd64c4317f0f7d7c313ee7
SHA51237332f0b836fac171b8b7ea0af1e5ca580f158c4f9f93ecb068d41a7a202488e19e233999b9266981198f7c97b92ceaf74687d4c3700a49a96790766dd32c8a5
-
Filesize
1.8MB
MD51c0fa1f7eeb7fce60e6b2755774aeabe
SHA1294092ef99e97a384e3764bbf25c8d3655c4109e
SHA256d710b3388cd95f479f35234e8baae723bd87c0fd8e0233df9e51275e086eea8e
SHA512a1e42dd6af6e5ba451b9b4ae51dc22861aaaf5adf608400caecbe008c7ff62bb98cb3c5d8100ddcca9a6897066af76c1a8bf719d020e65c698320fb89ec10097
-
Filesize
24.0MB
MD5068aa6fce39581ef6e796ef00ca80c74
SHA1fda714d9e2ea870364b4a9d441efc977b7c29c3e
SHA25620202bf882c3a6809daeff4f86a704ba791cdacd8e1f5e255a2cc26abd393834
SHA512460fd026b42ddd6ee57302be07250163069af01e21f31e4c63e68ae932a0f98998e308a94aaef0954fe959f9df18c2fced0eaab102e84c8a7a5fd29a92c54284
-
Filesize
2.7MB
MD5f9fc0afd3739b1c90010fe6a77a2ea6f
SHA16c71c91ae494227505846df16d65690011784500
SHA256e897408872140df31331c07b118dc976320719e1b6fc1b952162839d31b518c9
SHA5127cc3489296101f227be0152b38f3c61687616fa9074d9068384e133b29f21d14f55d87ce84adef74407b579b3e2f93fe5cf047f537b78d678ede33ecb462db4b
-
Filesize
1.1MB
MD501ed6f736e9f5734f0a48a4202c6edf3
SHA1fde5360420c3a824390c57c533465a45cead6395
SHA256a1ab6eb040527e962d9a0292b929628a54a508c8002fd4c0b19b41cf1de1f49f
SHA5128f784003e4d229a284497721f2884b8f33d28c9b76feb2876c85ccb472ed206c1e0b2b2c07b7cb8d0303bef307dbcc7f093e4166789a17ea835128c8edafaa7d
-
Filesize
1.7MB
MD5072e0c0acd3c09df6953b96308b29e01
SHA1f7e8d9d7a7b301cdfb3919f28dbe81dcaddf748c
SHA256f8f11dfe1aecadf99bafcc5e3f41d688bb1242affa0952da1ddfda6a3883204a
SHA5128d3beed574b3ad1a78f9ac5dd67c6f9e8c4476cb4a4d6e69987710a453a6bd10ce02834c5e0af7e18e95b3d4df3409006cdbf3c68865a2377e17c02283e7b802
-
Filesize
1.5MB
MD55d2acf8951f2fb45e3c233f921f4ed2d
SHA1d5dd79be363ee2bab64011e12fb3d6f4539f5b1b
SHA256eeaec668897771315b7e4d5f5682ab9835742c2d15b2c906fbb2d0e4b408ead5
SHA51222779559c13d6d0fa87b014ea8e9024fc4dc97fb3f898d66cc5efe852b6031e10b52f40001835a5918ee4a105a29a40d4e585c953429ce54df5b8b4222eda320
-
Filesize
5.4MB
MD52a719d48fe0edb07e2d58c00bfcb8267
SHA164c8cd7b91c462bbebebaee21591b57ed77a2d9e
SHA2563d5cf006cce665f1ddc323ad67ff0801de7f649f0e6b23697b0a2d079f431ac6
SHA5126b0a1305b6479fe17437e729c505d2b631716caec4f7a4506ac5ffeb136263abd0988f6e02376ea3e5817bffb60a90d22324de1fa71f29e37d0cedae754ff553
-
Filesize
5.4MB
MD52f750e73dc2e573544ad723e3d472bff
SHA140cbf4feee0423b04d833c77cae01e0dd6839ca6
SHA2565046ff79b1b6f8285f124ffa57f1baef01fe791fbd42aa01319f379a7152ff6d
SHA5124844f75c4c83ab1245eb714e3da49923dd18cab02f7e2f5c3c20f27f5412d046a9777616e422bfde7e8b6d01b3fc88dba57400e240546306f027659e0848ee21
-
Filesize
2.0MB
MD517e8ce46d07a15e87a84611767eac2e3
SHA159e3dc1ebdc7e8182f74f19bfbdb928b3e272cd2
SHA2567e46a99256d4ccb7558547955c4af53a373efdcfc79972f0d1580f576f5bda04
SHA5129e170c944dd33c3fb9eda10c6c70150c79bc09ec04c76ad120f1ab59c3bc9788f52d82319c31d18b09d24f56d74d713512d05a30c29574ac11a2657524a7f1ee
-
Filesize
2.2MB
MD538bbbc0f1c3b482a6cbd25bfac77c5d1
SHA1e32fb7a4484eaa2d8d5a9d26b1cfc10ceeccabdb
SHA25657e957fa91fbb55613ebc9c62298800ddd7fe8127b4e83f8f355bb9ddf881055
SHA5121097f17c797b199a6957abd644981391d8223c4e83891dd6dd850f62f67544b4b0033ac6252d5c3d8cca69071c6da84c3f488863d491be8b772fcbcf46fa679d
-
Filesize
1.8MB
MD5b00444e539c1a559a3b369b3d360a1e8
SHA153cbc1c3a04c1dde68ecfca13d4289d0e925d0a8
SHA2560f0d603b55160e742f7fda086b7e7be75e43eaabc96d5ea311a2165a91ee6047
SHA512e1d003f510b02f7ed6a6b7a2492e9301796d27f4d660bf085f50e3f560360fb0437668abf12ab1bd92b055e5adba012b5dcca56ea575b4d7b0ec6d54f206d60c
-
Filesize
1.7MB
MD58d3d912548df24f401f5dc0e3bffb1bd
SHA1697fbc6040400721bd4c7a39412c5a0aa91997cc
SHA256e699a4cd8ea4b6ae16bf389a65de28f2beac256db329ecad1c1ce98a4b705481
SHA512101288ffdccde2473fbf38e6a7b336db87cd6a360e53961efc14e786ccf2af7aebe7ea08ad03d3c2806b6447ff5fd785b7a332f65519ea236818bf9de7cace00
-
Filesize
1.4MB
MD5ccaff14c5de6dbcd89024c21a2f284ac
SHA14ab1db9ff8f288aef3dad1f3b354e28eb2626cf3
SHA256030ab00bf059edafcef9aca1fedff308f93db95fc9edeb972c0e4b9316a119bb
SHA5128fc4620657dc8027e232d5057f18b56cf48545a5236aa4fd97be1de17675d4f1298b827c513770eed5964769e9883a2caa2dc4bc6438231ab9525755a8963191
-
Filesize
1.4MB
MD598b91cc00e5ff4a082eda945c4350d56
SHA12ffcab31e40ddd874ab1d167d786ee6948c87d40
SHA2562e2706dc9bc7e31847c32ab86a58f29f9d513d4b2d2fcfa6ac0a61966ddf3f41
SHA51261f02357c9968dced0db0c943299c041ec86f917751b8b9ef5fe9efb005dd6e3d323c7275fea099daaca8e4b7f399fb0ebd256dd212106a1a3c33f42423fcdb3
-
Filesize
1.4MB
MD58235d5778135e25569b207a387aaa679
SHA13303b0227cbad6346f1e7e0a3e7c26d9b4539396
SHA2563e3a7a54f924a44fd0e638238bc9b383a7e5316caa6e8c400d9dc66065c7a3c7
SHA5123f20c424e43babaf44d1775a56eabb878d0a593b61eaa1c94c2286429aa8d5fa06cb0944afe0414098f39c7c2c56b2e373f9585ea42c4710f0412b37adaa2d92
-
Filesize
1.5MB
MD586e4e726dadda8453dea74a9d2b6e566
SHA1f14348f17d712400c82849d7afeff4a79a628ccd
SHA2566105777f2419ba4c8430307fc7878abd1a727593782c54578944109d53db93e5
SHA51289468ad646c45fa3c4c23ce48e8f18062fae09b1e68ea6804b5a2b7037a664945d97c8c8c3f304eb7f9fda757b67def8420afa8dfb8bd634f4b7ffc6d0f42bbd
-
Filesize
1.4MB
MD58e598ed03d0fb8bfc9a99bd9e11e33b5
SHA19b727dcdde753aff576842473a9c6ad87c9214dc
SHA2568c40eb3baa9d642252d26b1494037dc92e4082aecb61e218788e4c8f6a72486c
SHA512cb301e202cbae54e91f49ec5b566944e7eda281a6945892b57d0c2008dd7de5caa51e5b3d0e5123962c1f6a441aee948303133f43280cfd15f1d3bc4e1867eba
-
Filesize
1.4MB
MD5f4812f29ccb2c1ecfb1bcdc973a13dd9
SHA12c3228543152ecc5934844e7cb34932062d89f09
SHA25638ccac52a30bd7742c51033ede3cb6865abb5e71351c593880ce027fb9458938
SHA5123f54df1fe8754e037a00d75835c60ef07bbd6b67cfe8a88e1416043dda0af837da8c5e63cd134b5266e4784fa193fb6dde31273a3a21f0176f8ee9c9fd271b03
-
Filesize
1.4MB
MD50c645f9e62d0d06e87191a9b5eb13663
SHA19132336ff4df4f28028a90a4e399ae3c887f9237
SHA25654073ceb80e4e9595e30fcf57d20493bd837193d5a1e2ffcedbe8c19293530b9
SHA5122375659dddfca900d09cbb9dba57fc20b8c165a08b7460dac218cfed688d737abd7edc9a8aff8f82f66236a6e764f3b2781d06f814b55c644edb11be55aac3d4
-
Filesize
1.7MB
MD5c64b1c390ae5cac29b9665b32dc259ce
SHA19e26aa151ebd83252c2febe21d234b595d13ec9a
SHA256d017cc51ea071ead1f15bdfd49617a985d42fadf2b8813b9b587f4e0c6d9e3d2
SHA512e54309ca30f73c064a7b4fa37061062b1c8af9584b2c6c73373442f692274089b320e6d77b7e80417e930c888f3fca5d786f6df4590f9a0fac3946de405ff183
-
Filesize
1.4MB
MD51552d9b3b99c9de1b85b14bf5c9fadcb
SHA194124e36ac446d17736e18eed9a53223a436afd7
SHA2563d63a86579a89207b20a330edae5b2046d13fea36696a0de1a20d9bb7b52d661
SHA512d4b511d45468d7211abecfbabe19ff48243fad0546191c4be06bf8368f290373ee9fad4cea16a3688c4a412ca338b07f031036ff905a4fdf89fcc619cec366c1
-
Filesize
1.4MB
MD5b5a27928a678839c89056eb30f3f639e
SHA1f4181906a7180b4a6e743e7e6ae0c96646bbfa36
SHA25641d14a97fb8ccc9793082e104428337ca8ed7a8416facd8d87a44b70743489b4
SHA512500887edc54d80fb6b477970d730073c0b828b4c2059dc83c3f6c4e1b362f29a838219bb8d2c3590067efc773c58df30057955447c72a088da3b1ab400fa338a
-
Filesize
1.6MB
MD507134e9a6a33c8df0210988fcde6115b
SHA175cc0d2696c8d4476957c2db43bce460c5e684c4
SHA256ceb67f42c95647e691960f5653aa38b26641d89f895fc39f4393cc4dabbe1f7b
SHA512c9f30d07bb4522b150348cfcc13b8e138e8d988fb65daad64bea6c5625bb1f8bdaec9ea97c0676a85e44fba8c6e707e5cf64254067a11ea95db315bd2302dc8a
-
Filesize
1.4MB
MD54956b60ff8019488e1db2b3620a5a9b2
SHA1fb409dad81739f5dac8aa0b44c512d9fda005538
SHA2562fac6b94a8f6faa994c7dcf55524c45b1bd01295e5b430e69b1abe1f7274f434
SHA5122e72c44d9c45ce85985c00bc0f990ff63c97e40c345917995f8d7e9a8d5714482a6a227d509a81173fe34fe9daa6c3e589089229132493b2cefe5f55c2ed9f63
-
Filesize
1.4MB
MD560b86c4e8d352a632ce394d12cc0e45e
SHA1cdf09b7c1c4107a63a2ad2dba94efee8ccadaccd
SHA2564292fb03f3edf29fca39a0e3d989596513ea2fccbd8cf4965b6dd279d1e18349
SHA5127618bf234f1433e0d77841fd7e6b992cbd4fe13384ab1ff584974b02dc4fbf0f2a026abe0e4b66e0c3e6968a5a822af2ae5436fe181f5fc964194373d5290893
-
Filesize
1.6MB
MD5831bf063f1c39bceb5489386528cde52
SHA115baa54ebfbd6b5f376e6d4e7940a197e0e7e97b
SHA25600818a87a128e035f116a1b632fd510c173ef02bb8ba81442836c389a734e76a
SHA51264406e4a340791360fd9493007d969abbc10021d4fe52ae701bd93174f9bb096c5c93a18b77193b1713b5a08a284139d49e41ca8c0390f0b67472d65ffff6d3f
-
Filesize
1.7MB
MD58529dc79b8c3227a35eddeb09dd0aa2b
SHA1243940596e1080fe4b1d5b6e45f777dea6cc4063
SHA256d0bc7010aea53caf7983db86da55851cd7e6494c467ab47174294362826b3671
SHA512c9345db1245363a5248bde878d7caeb2aae6288be9ba34a20876628590cdad534c4c309ebe72fbcd1a064f202010be9cfd594719c11a75f22e360b5759a791d6
-
Filesize
1.9MB
MD5ca5aafd0655041c25bd6df963a3e087b
SHA1ac7a1de1bbb070192d0db26d6ff3bea5f25a6893
SHA256fc9d20c105eab44d42bf1af11ad7c9feef1835d5ce0f190623b13057d19dc611
SHA512557f2305524968e730dc01d1d64854d255482c0a4695008e7b08df6a726f334a13afa57b750b4f1a86ee72c7aba5bbb17807f76e024ab09ca1049a325e9a5ee5
-
Filesize
1.5MB
MD5fe08f17bd29580c5dc781b1dbae0899e
SHA13af01617efdf616e6e7e2caff171444cef1d0e94
SHA256d157e1492cd76a25546cc1b65834f2e3d70c3f71e49255233cf2ce61b83cdfc5
SHA512c65ea8f90c78b4c86febfb7b6eeada2af2191fb9034c70f393c21325e51418163005f87988b71aa0903f66ce6ccc07b3dd61ed838eb1214538ac37d91d2f1de0
-
Filesize
1.6MB
MD5b33983f6bc29ff8c0c6a7d77ad85d158
SHA1681c80b51ab2626a1c660fe90740ce066401bf22
SHA2567aee9f61b62e96fd7aced913dfc577419a85dab1a10110fac4502213dd1a8e06
SHA5121ce5822eeddae03c3b12da2c39f4cb9a167c8aad4d4a7d8fca5aac3353ed39932927593c783032b7ce639a2c195bcaf6fc24038f50cfe1356e581429642b3a2a
-
Filesize
1.4MB
MD59840872910cb8fdd30d50e3dd1917b57
SHA155b20f9914056121b7c67d2d1dea22258e9cef4b
SHA256d036cf7caddd971525d9b4e26e91da8202a522b670e2195dffea04d4cfe4a47c
SHA51254152d375fadb428f1141c3451beeaa44ec2ffdb62d72828b3577ac54b50c863f63cc3b0209578fe311c2ee3824d05b73425fb7f19b422128a390e8b3044bd7c
-
Filesize
1.7MB
MD570c64d3c3e064ff8bd6c710595aa7060
SHA1398d06314d3d23babe5c2de1d664b0e74b0816b5
SHA2568711fb1070864c45cba8af260f39f6fd0da789a151c6ee0efa48db26026111d2
SHA51229c443fbe6d6f119c35d3b483766df13d16b8349fd9cf60095018ad4f2379f32c7692d1d966d296366952d948b41ffe2441709b71bb3cfef32fdd95d6518d156
-
Filesize
1.5MB
MD58515601652b0ceea2d53858a85006a8a
SHA1019e2209062772cad912f852af71a07df2cc04f6
SHA256bd3714653195dfc102cef484789ddd2abdf4c89275b6a75616b322b060ff4d48
SHA51216c363fe194edc09014c74e74098cde439f1b03b741872b693305feaa9ff7940db391e801fe7a4ab12a1433df3b0626a3425d33cd42ef015669b999f0e56f972
-
Filesize
1.2MB
MD563303173ebbb4e9fdc297ad05a54bc6d
SHA11aef7c0b19d102125be8e8df77e7f04c8e265105
SHA256a186bd1eb90e14bc5e66c066f5ac227b0b3d4584c573492e9e5ebae00a122e49
SHA51294e6eef9809818dc108a0d6c9f6c76a0dd39b9fe607d071c1108857838e033f2f92f3f57d187501ca742fe6b34d7e597d151f597c5d1696e36c0f95947d2e7f4
-
Filesize
1.4MB
MD52a448b6e07ee074efd8af01c91fb9a6d
SHA109cfd5be4595211c51d23c167dd90dc29b8f9e4b
SHA256e7298846edaeb5d7542b4d2e0a870ed2a47fb190eb6a307e53591f8338222d64
SHA5125b5b0492150200ca928e7a3f469d8a9ef96f71cc0143c4759a61a7dea3658a74e1a26ceea8f3cca1a543aa9aa541a49334433ccebd8130ac073ac00b17141894
-
Filesize
1.8MB
MD59d1174fc9fcd8d3fd53c55e1470f9325
SHA107595f880921f0d1d8f40b056d0e0fece3d9c6f4
SHA25600bbfecc3f12e33a073a9e5069be2d89996a815e6a9de5bf52fad51bf192c0ba
SHA512fe88b231763716da3793fb08e42453ac34594bbc0afed244169fc1440e8fe0496b545596ade42227e66aca3d2247e2e93affeefb93f17555a5fdb9145b43d993
-
Filesize
1.5MB
MD5fe81ea5b8961855b9a7ef2b468dfd927
SHA133a3921ed0384b31e71008c58d95ff4d60ecc287
SHA25622d06814b7004764d061f8d88aa89ab6a3e562d56010f388a45b902bc07c1f7f
SHA5128633637a819fadba8a64dcca4c27655c8ca3226bcd7b8fa8eb190e8030620fa63b69eeb90bec8deb3253c19355a8b8397bdf2804c068387496bb097bf149208b
-
Filesize
1.4MB
MD5714b1108beec900424311220015b4dce
SHA1f9e3d5bfc0cc6db7ce2fc73e5f866c1324e037e7
SHA2568a460e14fb22c7775dec5250313f9c858ca2bf7aee674b79ab0f4b94c95cb069
SHA5124726cb3652244069dfdfe8d0e02e24ea639236a7bcd1377693bb58854fb7d47d21839dbc4187648c9a25312cb2ae3d61ad7d6c1f261aa4cf1cf48ce90417b71e
-
Filesize
1.8MB
MD5363010bb8c4d0f8277583c1fd37ad552
SHA181b0753921e2c418063ed6c7dc3ee394c6070b1d
SHA256230e4f716b429befee4e83ad15005fe9bba5e700be3519f3d8c34f58423689d1
SHA51279b6b6c327fa8dadf044f036750394ed8f146fa6939d38a36e31c79ec4b5c5eed5246546d525e7023f159b62bc5fc4bac76279d4ad62b4bcc4740ec4a69be8dc
-
Filesize
1.4MB
MD5e8d160e5db85dc43392f3cddb303bb23
SHA18daecd47748091b471836402c0bdb82afe169535
SHA2567e4550926069da16e2191fd50fae5902143c90759969161959e4f18111f186dc
SHA51218dc00f24ec3cf183aea4edf41a543e2bad8003e7ea43aa96a1bce77a46a4268cc7fc1e7be0453e3bc8c216e5e2e3d2198db9dd95b45aa5b6bc0387c2fa3551d
-
Filesize
1.7MB
MD528d9f69aff05837c6d2eb5c530969cf5
SHA11ff67242f194f5730214bc546cef6045555fba3c
SHA256a5662be6091a9792a6d0d6709f0733436d6a04f86e4b3decf96dc2771dc09beb
SHA5128c742bbdc6da916c71dc14fc70879a315ef797a00811f59b0c9c77678b974728ce97ab9b6525a4e5e8c445a635bdd22885791eea35296eb8bd0b1bb3768643ef
-
Filesize
2.0MB
MD5753fe2c18ccb08f11e94d8ead4d12779
SHA18cf055c4e60247fdaae907f4156c281da9ec8034
SHA256b88f3f7e8b80e48dc60f95230cec363fe856c831a27f2728e16e5863b7509b65
SHA5127eba02d75f08b61c05288fb6c31a0ebf3c00671099ca01625aaddd55764a64ceb6b5088400092801d60c29656510e1bb33968bae3ef922309e99845c60ee9ea1
-
Filesize
1.5MB
MD56f3d3de2a82709c761c28170a35dd446
SHA1448f07e2fa870b5bba6119b89f871885bb3beaaa
SHA256c8967250f6f661432850c8bb399b3be3c994683cc579c3af4658da7fd12d5e9b
SHA51218d506615893cdfffdcd13abd2651bc1e65add5be3c662d7b28951e7b742c7f1357338f9df4155c3af04e66dd017afacfdd4d21bfa6161b27b8595c6ba970485
-
Filesize
1.6MB
MD5cd4af4d288bf09c43fdeec32a7a72abb
SHA102d43d5b469e278ec0c82fc9645defa9f6890650
SHA2566eacd17178e8d57202e22f9fbc813f0845ae88298e64fc3876740f64ecf54b22
SHA512680c04146a9196b1b55e851e95d8be241ec77c4d8551fa5a2bd3196cb1146c18b1f8a3b7600eb64bd3760dcc4359c98b88a73be0aeb7388314130fe7c335917b
-
Filesize
1.4MB
MD51cd22dbb315003e16d4f84327b087bb3
SHA1d8119e1e9421d3b2fddb8d5478ea9696da099000
SHA256e9f17610af3276765282aaad3adbe9b6f094c6e9989c79a77d31d7bc402fbcbe
SHA51275bafd9a5b8d4517849a55b17d8134ff9ce3fc5cfa5fa03a00d8b4a8d1d83ac1dffd352a7f2e81c3d7c6e19b8affff1b3e49872ae3b4fa3968a50299fd0a2c46
-
Filesize
1.3MB
MD5e81ca983f31deabefd24120046434483
SHA18b7564d6f624df069d359cb5c25134a401798fc9
SHA256c7c17344789d1846183cc235aa510b20468e8c7fa77a84b511c4aaf06699d834
SHA512a81057a1f07a040fd4c5bb5c3beba76f18fc7674fdae3ab0b96d49b8a1c35695832b5fb6875cf9a2f64f9c439e13e749185da94a76d7aaed111a59b47f5ed1c4
-
Filesize
1.6MB
MD561659c8cedd1a2260505e2c6397c2900
SHA1a585fa5e882523a3813eeb83835cef6593214f63
SHA2563670da0478c0a1256f6f5c48d90103b118c186319a081ed31e7d2d9401ada311
SHA51258a835c9513ab1a281d315a4e9c60c73f66eb880205023a10fc5dee23ad928351c6a5bc53115f7193b251a7e06550116c1aa5540cf3c2dde32a20925e4f7848d
-
Filesize
2.1MB
MD5632637fc7b50302e7a4d91e33876d0a6
SHA170aae5c794c64f998749cd0a2dd6d2c7478a10d6
SHA2565cfb789d48771d91ec2554a42786ac04331c502e303b6486c2a9067a53f3bd59
SHA512b1e8eef0ad2bacde23c84400992bfc28f7d5d2ca62edc097342c5d0f6f445b1e8c87c0385f6e63c39917e2fe85312edace96d3f8042e404180b3cdcbcad69c6c
-
Filesize
1.3MB
MD5d2a850cf61361f30f85c01ebb598cc49
SHA18978ec2c27da8558fb754692dbbd3fce136e14ad
SHA2561787ad7dbb390c611ef931b839cff105919264ca9c7630c454c4a149d58fb06e
SHA512177872f1499cf2880437db3851d1a6133bbf2ffc4c021d3a303e3700eb2895ee08225400ca5a6d8f6059f031d9e6e55059cbe114f294f989e443832e19b83c33
-
Filesize
1.7MB
MD5607ac7513da9c70714994a3f21228266
SHA164dc68d704bb7dc9a0103c668f585a7bc15f91ee
SHA256b9c1ecb03636f5d14930b258a6d9ce975a680d2dff777c4bf5752ed78e934326
SHA51283d599c5a933ff9a1b15d503a0a2911fc566a6d75bb3fd500aee727481e5a004cbe66eb77cb8315b56cd1e0d21c22ece63ff88e32c94f761825c2fda165d1efa
-
Filesize
1.5MB
MD53e791284fdaf16df0493e2bdf0d74f17
SHA112c740bc9144a557f99af431a26753a7720ee810
SHA256d1c3ac57ef3b2460518b8ee865241c5e5e05bbdee0a40e1efe642d99983821f0
SHA5122036fadeb7e58de94f1740a4ffb93d3fc0abf4d5b0d0ca3e133b157b48a92fc424ec58194743cd4b8edbbc02f1e86f420967d804d7f6fafd8b4271d66a8f30c1
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.4MB
-
Filesize
1.4MB