Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
05/06/2024, 08:45
General
-
Target
2024-06-05_03de3628f337a93f1989978680b7f6eb_bkransomware.exe
-
Size
712KB
-
MD5
03de3628f337a93f1989978680b7f6eb
-
SHA1
c348005a10c4fc48e81059ea8cbe318c81bdbd4a
-
SHA256
290e1b9ec3562b4df16096a4efdcf32ea3391e7427e68f90cc33efb9c0280cf2
-
SHA512
3958b72645db9daaf3e545005dded272c277c998aa18636805a2b9c9118a4714a8e6b09c2e5ea8a1ef91a8dd0b0f4ac05503b53ceae928204187a4d0f28367eb
-
SSDEEP
12288:vtOw6BaMSbwoqg0fitGbna8dQcLk/+cb1q86pJDlAF44bE2cSX:F6Bubl0fitGbna8FLk2m1X2D4brr
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 31 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 35 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 45 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-05_03de3628f337a93f1989978680b7f6eb_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-05_03de3628f337a93f1989978680b7f6eb_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5ce164c9d8b6115c0eea28986b4c4e076
SHA176b55d42afc5c52323d8fb8908eab53ce8e3ccab
SHA256305f6b429105474412bd3e902a61fb2e268a255178b16d120e4956fbef539cc0
SHA512179d4a18fd708cbc7baa3ab70e99357504539a3d8c8fc6b27ccb3c99e561c1c10e1770a5dd337c167b9c8b33165318bf98b5e90ceb96b54781cd4b4667d83e53
-
Filesize
797KB
MD5894ce7aa3d956a056c79eb16e42e6365
SHA17c4c6376359a1007c7bee4f7f265a0632042b44b
SHA2562aa5a8150bf3c5551f4536b4e375c41a333db1f958f02c2b90a52266ad06f548
SHA51256cbaa27600c7a0cc349161ffc97b10fe208477171fe9f5a64b64bc92ac9418bf6b84094f73b34f22526feaec8a87ac32c6a880bdb57dc3c5d7b2babd206a9c8
-
Filesize
1.1MB
MD55ea2935ec0ca241367251c0d30d4ff45
SHA1d6420df21e5f27236369d759f19600faad6eaece
SHA256f3928a127c19620f356fb66598a22b8ad210787be72b577fbaf7a09cbab3f60a
SHA51226f00064721c631efae361ef033a0437b6bd7e761f8e956b00f387f2b94926faab45c0fee90d28a3e681dc2c98235ce5ff52cae61b638df04afd6fc1f1758529
-
Filesize
1.5MB
MD57a7ce616a1f2f12bd75274f3117155de
SHA17b2be5629b5e9d0e768c97d1169dd4cc984ae4f2
SHA25693318381b61c9c7ccce25eb4463463ffdb47afdf8207094b3fd4a27bbd8e059d
SHA51231c576c0396d75a06068cf75c9cfa4c12c06dc1f13ce8b994c37b418d0ad02035ad77411a035698269da77a37afc00f5d5aea1ee1e31649a075fd5b114d82a5c
-
Filesize
1.2MB
MD5d92f04c7390e414154bf57b5e94b663f
SHA11cdd683ef2e47cbb10b1be9a67f008f2d0b793ac
SHA2567ba9f6708135c73afaa7289392e5c39c1983d4a48dd0024c2340aba32b0ad5a0
SHA5126565103f8017980d7a30d8ac4507d3189d15969495efe7c920905f29afece83f2b9146ae2fad6712c3d72434702e146bbc21e2a942d7fb15315634c69ef706a3
-
Filesize
582KB
MD51ce2b9e730e7dab24a1909c9a356064b
SHA10683d6c910ea1c28fe1da780333f7b7268c552f1
SHA256b84a765e742fc5e7c5995e150d07b73c12d2924e2d2c316167d422544e141853
SHA512507acaea19e0878129ce95810453904fe9337a9d92bcf0a5e9ae1c4d7885101afc3b764194fc3a77d946a58b30c449a3889b2a6a1b482e3e996637642f7b2c77
-
Filesize
840KB
MD56073f7b4c1b2fe7032813673a31b1bd4
SHA12cb302ce1e4e3a9820fb142e76ccf9867cbe29b5
SHA256e2976073f75a421dc67bb277879fc25e51f9a03cffae9e576ecda277768a89d4
SHA51299a6bfe24fa6f44ab401f0f5d0e246190504aaecfd803041ce405092e91ab052c2d6cf4b38b38dac31b430803d3571417f41f79f91e6e6757fd8a2df270c1049
-
Filesize
4.6MB
MD5b01abdde7dc1e3c00974a5b3f91b23ba
SHA1d901e207942761d786e5dea8e7b196b37b4bca36
SHA2565c4ed46f7070624118d71c499e7a68dce24d7297138aefff674f3eb2aed2350f
SHA512589a0d75827a211af52a984ef87ed5bf789e6080385ab5ca43548608af8214610f8db3c1ddaca1d7a650633a369fed57e1bf2e60237e74612e196028742c3d65
-
Filesize
910KB
MD5a3fdc2a96790730fd0818045e66bf8da
SHA11cc4067c8cae0179b0e2090b0add273925695172
SHA2561456280d4ab17552923204054804827da3739a3aabfeb12b2963e385bc01a509
SHA512ff95abccca21ae308391516fe600f1cbbd561ea6b04eff068975407d724196549bd4bf7af45ce06476b97cb83a4897e2931db88ec0e436f078e887b3b1b2f17a
-
Filesize
24.0MB
MD59705144db06861a8bd9c11f841aa4954
SHA1155c304cf7d0f7d5cf36b4f13518b94a845fc20e
SHA25690ab43f2f5ae79b95f620eacb944b12b03986baf464719fec70b3d712435cca2
SHA512b580edc5f79e50c7cf2de285ff514c24fbfdb1ac925bc25af41f25cd86860f534dfb2edf0b35c507092e34a6bb3bfad20e32b5d3a48d3148ebd2d751ddff0f1d
-
Filesize
2.7MB
MD5295abed0f69537e21f62a4e1f9b745c7
SHA123a148bd28a0167a8eb0b08f73fe5a244bd0ce2d
SHA2567f6c449ba0f29434a042b22d89fc1ee656f2d487961601aff408474a56e3f7a0
SHA5120ec434b2ad155cfd0aafe406c405cdc1de38af672cf2283e6edec526b422c4c6809fd3deca48bbc359ff55e760571b004288a9bfdaab34534cc655751df8b777
-
Filesize
1.1MB
MD5fc66c634014f12d17f0dc4425d199c3e
SHA136975f581a83dce58fdf2fe5e16acb3d1d4a446e
SHA256ddd094062bc9fa1240973f8eb79f7513d9d6dfb30c4447e1fcdff1a37985a723
SHA512e73b5659cce3a7db302ce8c0c478846192644030d30704b664b2873a95e399b3e53a263299682365b2f31d4db6f16083b72c32d3a1bf60f4851f4d847ad92421
-
Filesize
805KB
MD58fd6eebc90890e44b630277425ebf2ba
SHA19b8c0f1dedefdefdfe830a4003eff7a25f570322
SHA2560062489fcd36afa4c6d324104ea7007c4952f7b76f13beb50f4ba07d4ad7aceb
SHA512783fd040677c2933ffb5c7d2174cdd5f846070071025ec1e017493067e415f230823f882daa409a20bcfa50b44917f89624b6ff7380874e630c2666c481e9f95
-
Filesize
656KB
MD59e6302c65b85dca5ff4f889a10645fa8
SHA162225d621c5e17aba2c70fec3fd0cb42b2e4e960
SHA2569aaa243527dad77ccc553bb24d22967ef5d01dd9fea79808bf6a6ee3d3199edf
SHA512015efc66b13e624bf39b6fd46ab463f359025ef5647cee5fb2610addbdab5b9cc8e66ed6bd5652a0eaa25a4f70364f702a944602faf729735e93ce637dc33e06
-
Filesize
5.4MB
MD5b4f6c88cff744b4fccc30864d2f566ff
SHA148ea73d7a7b3633960a411d30c43717cedc02c20
SHA256740dc6027106bd3098c00a21ce42a63b77d1f6c90ee7cb1790707a47262dd8df
SHA512e07135d8260433486dd13343e3010e9ab096cf5d3a011fbfb1a008ecebea7476b5e4e4ea489560e4e8829d99a85f567585873d9d5c14c140a544f9f179159b1f
-
Filesize
5.4MB
MD5d6bb015f9dfc8d62276a67fb4e948d5c
SHA1eae388adf9feac381583e333f792f212e9e2b5eb
SHA25606b038247d061e513801480c9dadaf09c18d9597fafba38578997818c82dda87
SHA512d922d25a618cc03b239f2f32af6e83976bec79557d780816768e9b8e8eb788f380f915ad423eb3317c77bd76d580a9e69450865a782fc7d6a93cbc1d5a37ba43
-
Filesize
2.0MB
MD54787a6b0b5bb54566d955914cd8d8f9e
SHA12280126ebba6b974cf07f740d863211728c56e6f
SHA256c3c2a72ebd709f2c436892992b1bd8230bff24325913f5257aa66c7d4a0ee054
SHA51256254f0a62acafa7650f86466fa1cfa60c67831ad67fea1abb3f15af2c65cd76880c16ba20321cfa7e53d8899438f150cccc9195fe7e86766f4791173898319e
-
Filesize
2.2MB
MD59e40cd88d95ffa71aa2bbeead31ad989
SHA1aac1305d4ad9da2cd1879d8af04a47c836a57805
SHA256222733c6d3314f0e00c9f6ff2b06b93f9ef7836b91c6cabd326aae28c58115ee
SHA512d8e70710cf33f35d4943290c8700da22bbe43b27059f7e963954e750673793c24dcbffc25375d816963999366bfe127572758c950bf2c598d5d698f2317785f8
-
Filesize
1.8MB
MD53d7eb92c8d2a539628c8ce2b564117ea
SHA15f03b63a112d0c20d131314bd97ec7d1b022376b
SHA25641b6478abc4aac58449ab38875e8d3f47d4608d8e24d611dff2a3f843a120137
SHA51273bb3331af7192313a0fc6fb5bf927d6920b010dd436eff8960ff60cc48488bc98da75c5a69d8e27c226ba06635b8d392b8216b2b8503d964ea73fda74a55f16
-
Filesize
1.7MB
MD5ab404729ae4bb03041811f38b177ea52
SHA1ce1e364001ceaf472facb8c48ec244be74080ea3
SHA256b42fed1895de151913db6bc2293d43e6f5959bf2872d6ac9cded8061a7eac132
SHA512cdd763d4342eeddb0f96f1db01a44a8a4ceb95fcc8f60c5e75d8e836f31d00f3581c08d812fb9158432e2d720764ce59571029253f3c2f103b69885679d8f5ef
-
Filesize
581KB
MD59b3e204958a83e9dc47a31137b453f3e
SHA1ccbabb20f41288d9f95e24ca108841e3d781b945
SHA256bed9a79b52cafdbe25365393e37a68dca182c2fb3355d1868bd15f1e167030b8
SHA512a316b87e0b3b85e840c73a8e2728631c5ecb09af73714feb226fdb88524f1450fdb085dca87c29ccf4f3ff279f75048e695aa06e3e112ea39ec96be793ea6290
-
Filesize
581KB
MD5aefef7eb690e3e743adf000732321729
SHA1aeb79b5c6f7e0e7a963bfbd379c69ccd00183795
SHA256f032131c8d791b41ce706c0d16ef663eb9eedf65b76e03544307a37e355b4462
SHA512e3d18b5368a925cac43cb5172f0fcb1c34d6852611eb11101a9e569374b5908b1f2916652ed55181596992f5f94bb3676c0853e2a87867985a7264324d171a54
-
Filesize
581KB
MD5ad306de378a1d22ef704491ed4519cfb
SHA13de380411316d537376b0d2a74154b3b8500cb18
SHA256635c37bcd6bbd60a928eca6e658460b1c7dc5dd8060f12433361da1230fddc35
SHA512c3098ea0515854332f4df8c1e63e95be288518c28d3729bd62fbb5290ec45e359154dbdbae2e0fbe27aa433359b8b09fd4e167dfb18b3f2f8f0b6f55d009e325
-
Filesize
601KB
MD53796ec832ae1a1a187b40e05764e94a4
SHA1008750d044898a0d1293f57c853ea73626425754
SHA2565998d96daf8263c7c451822f4bd781ae55cb20c18ab4d26a04de6a48c6aa0a7a
SHA512edd70c2a66df2e8ce07913dc101066c6b82d3b198923e8c4ea7c09ee4663193049c06af5334f4bddaf9cb8baea2e372f87ee56f4729aa47591f6d6702520eb14
-
Filesize
581KB
MD59c3749daf6e8a89f59c372f521ddb194
SHA1202ef9d0031c80b300ff99ee41732ba92ad31edc
SHA2563bae35e205b9b93395c09071cabfefd901ec6870b635d326c99af14807861416
SHA51207f2119aa4b7c63eb58d0966041348ec4a3ecc35db73ec90f8adca8670fa1fac879682ef72639a08d045a8f4cc43b82b35900fdc52143058ec7af14da778c04b
-
Filesize
581KB
MD5fe6e3135ae15ea15a7cb407477ad733f
SHA1ccdf182a9753711a2f74db7e0dc28a0196201b06
SHA256ae5ebbb1dbe48eb2d61e92695afb8a7bde90cbdf0488be0e29e84428ecb2934c
SHA512298f61c1ff40e8fe06ac7216101cbceba5ff25e1a061a1a7362c21abf18713432202347a9dbb8a584452576645d1c5231a38434727eafe51b890ea9a1988dcef
-
Filesize
581KB
MD5e37c7b4d88312860bdcd036f28aca6e3
SHA13f6f6e5380e76bfd50bda12369a4e1668e63e84d
SHA2567760f4bcfc4c81f83036efb20ab81b8388c15cbc0e91f7a8ed04b2e62cb5997a
SHA51259747b4e45e3321c81c1624cbb98c0a308748d2374ac9a46a689f8be7e62c5db430dcedb703a12cddee23b30baee1e8bb182a56e8770d1ff03bb937447a1fc73
-
Filesize
841KB
MD57aa9555b474306f437fdbf64e35ebe56
SHA18d3cc247ad235d64b4c276200adc8b5a00372a5f
SHA256a9c55ee897263820c5dd317e647606a2a73c66b431e590b5a8eb20dee0f65fb0
SHA51244bb919d43cee8299184b30bf0d06aae9d578630fa40ce68c437cd345440de26060c35f97521be17bbc140ee75745305f2d3e3c97ca3e78fd659b8e88f30b933
-
Filesize
581KB
MD53db8a971ee00528434ad4393bc3bab85
SHA195a5f0cd75c36c754dc007e7c7e5dc6d9e61b9a0
SHA256e01cdcbb15c61a9038e3433e9e04c8e146e27b7f88ec9d777498a6509e0e6d00
SHA512d4ad75a2da3a80940b9ae35fe1a1cb90831cfef9498930a3a562b29ad2c5a0d6f89e0a4518cd2d9c0e1759e0b9c30a7a0b1b88bee5100163e786268e6c06cea4
-
Filesize
581KB
MD533068a42835c40b72814579f6bd3988d
SHA16ff1a5ab941e7829050c90e434b583005b81f30f
SHA256121c903dee95baa736e49520459b30bf6cfe57cff2587894aafcdd0820c5318e
SHA512dbb64612e03d2222f70145450e8f303b11665992d6eec5d962a5231f20bfe38a13b4c10fadf0abfe89df68b3c04d298248707f2659673c55ad83008df6d6f8f6
-
Filesize
717KB
MD52076f8eca44fed03f867d42decdd68d1
SHA12c9e76028a2179cfede7b9aacc97bbe16d2f02a9
SHA256bb538aa6a6947ab9386df081800ebc69c07b19a9d04ac719b60486df325d63b7
SHA5126e3625a5fcdf3249afa171dbf3b4474dbd6796020a4b60894317fa5214775fd7a06bd13d46925abe28cdb398045bb8facb44d3dc683edce0928d71af969d5d49
-
Filesize
581KB
MD54894c6b09ab8b77d2e97aa1b6aa46ccd
SHA157fe9782e24dbdcb58a3c3c649e06d1cd048f14e
SHA2569315faca4ff579c91a5dae68db0d653ae34afc78f3802ab27f96138660091825
SHA512e3fb4044d49a19b2c3ce2ea3a5b01c8fedc683609b87b53eb79eefbd114a91a4ecbfa32a87f9d5589bb41d2c062eee9260142c0a3820f209dfd2dc7528404d5d
-
Filesize
581KB
MD5b15e1c7f8176af95f4a84aa68c24f362
SHA18c3d2bc50ccf231dadd7607e7895b7da756fc28d
SHA2569194c2b89acaa906813b9bc14eaf927d2783a728933be6f12873e428b543d709
SHA512e6f6f7777a07366732b1f26ea231e3a1ec9aee0bff1e67c6be0aeac33566cd23d9e56699d6e234b5c51b42a68c74cf68103309068c0b1a5ae3a47ff30dfef844
-
Filesize
717KB
MD5196a0867c999a1e69c839f76ddcad6d3
SHA12706d7bacc65931dca63c9e4e8183dec488060d6
SHA25648c3bda636fb498763b78e86487886a94ea278db1359fe31c8d8f3f7c34c658b
SHA512327fa333c9fa8292759e49fff33a477b820ce8f54611ac3f4c77372ebb88d31db94931a328d8b7b159eb9d816ab3386dcf07f3ec393af1ebd8aca068f00edc1a
-
Filesize
841KB
MD5dab4e0aabd7b56e950a0523cf0d6a534
SHA1b5d8bf11721e77b77e2ac6cf1d185a209e73ee99
SHA2566e01466c72fe5de14edbbb306cb91be5773c3e7415b8b3094a96b8e7b087e119
SHA512cf7851f5a7c81418409b6d2497880cea606996167e06b1e7c75ef35e4cb1ca6035bffcf4eed0fe5c14757facfc6688720d0a8fe2d7ac4069a3ed82ce910bbf0a
-
Filesize
1020KB
MD5581e5f4176423b2f2c7ddf84d2667b11
SHA1a582a37fbfa79cc856ff65d8bc03dc40f4ec731a
SHA256d17ab0d726375d7951490abeae9a0cd52591cf486a992f0c525911eb19780868
SHA512256625e1ce283503faab533313e1b102a3941a579e6b2977f4085c807c40e4be8729d07e18b7e971804094fb09143a929b06d49a7b9f1c742a808ec5c8b3d67f
-
Filesize
1.5MB
MD53675235c6d5e24220e7178a5427277f1
SHA18d3852b1465a98cb4771fb14f91a95b9ad040d09
SHA256c7dd0802fa960a094027fe432489c52f48a285b813293e60e1bb037673cb9fd2
SHA512d385ad4ce578990a7ab5d15b3b15e4596455ca41cc760ee9db244a7082542fe45cde16b61ab8c708a5a0120a4408cdda431fd8bffda183f6d29b2a663152f5fb
-
Filesize
701KB
MD5d75757d58483a77147f92665dac64c24
SHA1f7e75d3abcd238f71762912a440952dc71258fd7
SHA256131d184d7e609add7693b54062c8716b8a0ff5833cee7e8fbe98ff291770a779
SHA512672426ea568a4f6f510a2ce1caa185f8e1e1b2a5e23fd783c88d9b719177e38117e134e7efa2a60c184c0e259b8a417f5222d342b7ba23546bfc544033930b06
-
Filesize
588KB
MD527f55d757e9d6c49a0c11c99b2323b68
SHA10a82f3c66b1707adc1e80953928de68377c5a770
SHA256815177ff24389a9af2b77ff37596660e8e27190f57e429ce0d9f3a29b1d0a0dd
SHA512f683869e6b2955c6b14a460a59054d78fd12d0d2d7e572a9430a1b83282d8fc08ac46fa6064978f19456c73ff3180fb84eb8c5b3d8bf14290766451dafe932b9
-
Filesize
1.7MB
MD5ed5dbdb05093238cfa385f5a84a974b2
SHA1a61ee7f7cdee21eef3539898fcf3c5ec7af31fbf
SHA2568b9de9f0b4cc91f69e030dea2b0527667914eef6cdcd5a989546a1a8da4249ea
SHA5122e59a55d72b7a1c8c166b788399281ec85ad1d145d6b361a0af28451b3f05a594ec9a77a8c5fae2b150b8752b204daf9a3f82dd88d48b61ac9eabf39599fcea9
-
Filesize
659KB
MD5fb82deeab243d3dcc32c6827e304c2a2
SHA1def64f9f2d8a5f54799344b3e5875cedc6934ba8
SHA256f8e72e0d12e01afe30ccdf637b76148bedade158def73ce205309587f1a15b0d
SHA5123cdf11a56dc9e9c1299c58b411201e57a06d5cd7123824178dad3eb995a0a8021fadba278fec8c77c35bf79cf6ca8d4840c511e4b2824bf2f518bc28ea9e66c0
-
Filesize
1.2MB
MD50de2875fdc35fa5f541a69b0faee7fb5
SHA1341d1a6912822fc4ba25a54bf6089f4bc1ebee3a
SHA256e74422fb7d7519883d51d91f3bf3820b0e5a44a4b973257079731c83a96bc16d
SHA512ac83a9538860bd93bea749d7414b35d9443828a5cebf8541953128c2f79fb16e89a41d209f688d125072aa5fddc9788e6b95d73c1666a909ec86461fd5602ed2
-
Filesize
578KB
MD59082ec2f9a9e44567c6a4ab847d5d84d
SHA11fb2eafb2aec8ac86e9289ccd26cd2520b39de92
SHA2564be8556c41c981cf7cc18dd7a02eef37ad49121809b6ba7d65ec3dd07a32a4b0
SHA51203dd2f044b1b54d1ec696d8361f404c63d66534d62f179e6b8e561321354810464bcda1250ced60d5fcc2c322b7fd44adbd7404a8c78b26a99623c6993affd40
-
Filesize
940KB
MD5c4567a2332fe8d75741eec80e9b6c896
SHA156da64fe12637369c010198a9a32edb43da6cd4a
SHA256e4a1482b63db8bd312c0318646d212bc88004d9c38af03a6db3dfa337ef171cf
SHA512ad69af1fe299acb2ca440f4426bb75bcf2e8dbd0b842e61eab1eed6c853d0a06d728e88bd26b0445b651d52ba03510e65e307f1b7d0b34cacc4ce323ec428640
-
Filesize
671KB
MD59586b7131685ae0bab80f5cd6bd78118
SHA100865958f3e999220cd090005d78c2201cd786d4
SHA256d55f4c00ca7cf1886fc20dfff4acb11fe9aa155d7510653dfc8eb1176dcfa93f
SHA5121a0dfdfc96f2c04ea5f6db11afdd84e5ca374d8408d29ba43468d1b154a8c4462f566cb5016e4f672e39fdedc4140ed5e5ac5f6a5a2ef5d19c4fed3894bd6c7e
-
Filesize
1.4MB
MD537f55910a65138cefbc711291e22a3d8
SHA1a4bcd271d3b9e34d5e571aa0478e9e1b6d087268
SHA256459593215139b780aac9caed1b54fbe27de2e02a882d1d6306089459c0b16686
SHA512443a713f95c2f05a492f8c5251541b68c2217ca647bc4f1c868895b76ae36b2366301c6618d00e26506ad5337996fba0ab0ac4dbd4541d6f403d1ac738b3378a
-
Filesize
1.8MB
MD5af43cc87b27123ba0dfef19e6a688091
SHA112bb978ec98e393e863f5e4238a9df3bd718dab4
SHA2562d4c9df69e13b579cc3c2200d0200574e46a011aa6bbe8511797eb20af950e02
SHA512c8e2208817e00162e45ca137c52b8b097c03660b38aeb840eb47c459963b536894217e09f39129f537d33181160fc75dd904c5b62cbc03c5bfc16e4a5e3cef5f
-
Filesize
1.4MB
MD5bbddc6098d80ca1fc0e9dbf09235931f
SHA10744127d34c9724f28936134903fc904dc242426
SHA256b34ab35cd1cdac77ad477e8341ce22d15728de1b1ed03f1c8d3fef03922cfeb8
SHA512db4fcd2595c7488f9429c2e2e7f055a770c687f0c0053a5dc314b9bf70f52585006775380c261882f05641bd2242d4866ff6f57d8cb77ce04e56071f0ce7e356
-
Filesize
885KB
MD55af38ed5ba10e7ba5764150559c7fccf
SHA14552a607f9dfa09c26a2c8fd2035083c9ef3fde8
SHA2565bbda61e868bcb364f1c2a61233faaaa878f9768754f09450b2cab88e18db7ff
SHA512592eb76fbf9fa316bb5305c7530135287a2c70ed568dce8b92d9261df1bcc9f84d5385f1994f5ff90a2cff2334a0699630f0857edb0ea34e5969cab0819d9c47
-
Filesize
2.0MB
MD515e51a26a11cdd6df073ef41e7d9addd
SHA1b194ae570fd864c85df14aa754ac91b05c9133f9
SHA25663d8be968452f52c4defce74fe5050f46cd3ecd34da0795841b9956a6388c76b
SHA5127823babdd419fe96bf0c2d36c9b86ce9093a66218ffbaf9415c9925e4c25b85ca24c7b029a09484f046f804e45a2dca712596f6df66bdafac8c45fecdd74d1ce
-
Filesize
661KB
MD5061e0145bc5535b2b00ce3aa7b31d02a
SHA17c409ec740edda772354149cd033ed11b563e9e0
SHA25615748e522b86a535fc8e519c567711b4b04de293c0175fdf919ea43e0c629432
SHA512076b2dbf405beff56fd585ff56f0cf89d5d25d340c21951db828414cac97d5c9d2922fc1c729d632393605ae3f7496b8b6535fefbadfd1c783a153ecb88f262a
-
Filesize
712KB
MD5850bb977ad0b71fa373dbb4d3d78690c
SHA1c9e23e064f94e7d33db72418936ae6e64c45fd17
SHA2566e1f6e2e2d8a580d84a28d722f7d2472ed20de33d8ac115732fb0fc5c96a3e68
SHA512b2ebb23f407a3c7f78786feda8db4cdc2ba74d05c2598002739fc7e1f66afd60253aa042ab18c64cecf0463b0f5f6da1b69bc151321d5a3c3c48a02fb8b07b68
-
Filesize
584KB
MD53880b30556e99c25e603b1c6467ca086
SHA1d69b4dc2150a6516dc592fed131649cffdd93628
SHA256349163762754bf250b0cf36a8820eaaad4140ae51c5452323e7b71ae99082967
SHA512e8c97e0076baab807c41e3cf4b5b4c4a8ed9ee487a043733984d555bd7c2484f9ee799ea08abfaf3bbaac6ffef3b075a379158136cf09ace109b40cd709b6b23
-
Filesize
1.3MB
MD5499fb4352b6931c4cb767f37478edfbc
SHA163319dee0c7605f09b25fc941d861b1192357662
SHA2561a94aa2c2da4ad7b79fa519d08ad6b54f87d390fe38f0edea0615211746401b4
SHA512087c5c7c576589625023085b9c0cfd41e2037e55830201c08c1c465d8bed89f5468c5ba4c53249890482c54f2190ac6e9b6e9b18d54581130a88986f13e92a1a
-
Filesize
772KB
MD59159bd3142caec1cd61aec57fe7ac674
SHA19ebbc89505d32b92d898e34565e93ffe4ad762fb
SHA256261a4ec600b314803936e7e9ea8cedc16aff0c2e645d76b23395b5a42e84081d
SHA5128ffe84476408dd6dcf463f53d1ba82dfad13fe087c97dfd8cdd1d239caef25653d211a6bc0f586f0a73f57a78a0331224e8e6ed10adfda6b91d0d7204575399f
-
Filesize
2.1MB
MD57b24520dd04057310c69b07b06502211
SHA1199af4340f567062bb47560e8e475750ebc1b6e5
SHA256514c319600e3e659a813ed25e8a56dab957ebd1b66b13d54ca5d9cb7e9012051
SHA51277f3346f70a756f04f7c09a894f3de02e03755db88bf049f436b8dec55ff42cb43c0f6fa15ce03ba87c3e0689560b0a0c3fc558a8a6514b1b85e4c6c6d432ab0
-
Filesize
1.3MB
MD5c9d8482abc673a4cb154279c1b6a9193
SHA1fae3f2e5ef81829f9ffca1d85c8e5db3e264a413
SHA2563ab84b7c8a8d3c636bd672fab03e130cee8e4aaba1404f80d94cee27bd9ca4f7
SHA51261c2f31e41df2b0a9564c5aba58efc1e0f5aecc8aa0d48cfd6e9e2e4480c475456b92f82d5ad20194037eb813d9b3d9ccc2ecf2ad81b3720f38a5a84dcd67c1d
-
Filesize
877KB
MD587e63319707856f320e91aebc5cc21f2
SHA15633ad91ba3fdd5a49f6b2ab8d19219c9bc4d35c
SHA256ba5eaaffa77da0a43f69d2c4ce7c773ecb24cc59607378381fd00677469a89e3
SHA5125733ee6f201b7f3fbf188e9fc193341976465a142c9ca046141197664835404553db68f29b87c99eaf4f41df7abfc98e40d5eeb587a44ff63996841a521708e9
-
Filesize
635KB
MD5175e1bd3bbf6e8fb701b2ea9b22f3fa4
SHA193ba5d1349dfd5802d030ee650749ebcac0daaa0
SHA25611a267941dc873527f1cb027760b980d30bf3d99dae45665127f83c2bd1201fc
SHA51283f6dd77d8d7101fc3b516b9fd4b71eedbb6ee3e01d90b72cc9115f50e248b074d7dd1d05d97f973fbd8382046df0739b9dd49787bf602836d0e91c93820c4f1
-
Filesize
740KB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
604KB
-
Filesize
604KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
676KB
-
Filesize
676KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
596KB
-
Filesize
792KB
-
Filesize
792KB
-
Filesize
684KB
-
Filesize
684KB
-
Filesize
904KB
-
Filesize
904KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
828KB
-
Filesize
828KB
-
Filesize
384KB
-
Filesize
600KB
-
Filesize
600KB
-
Filesize
1.0MB
-
Filesize
384KB
-
Filesize
680KB
-
Filesize
384KB
-
Filesize
680KB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.8MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
828KB
-
Filesize
828KB