Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
20-06-2024 16:52
General
-
Target
2024-06-20_5c92a8dfcffb2c4effe07a9a5ab3fcd2_bkransomware.exe
-
Size
1.8MB
-
MD5
5c92a8dfcffb2c4effe07a9a5ab3fcd2
-
SHA1
346174df758cafdbbafc9338aab44a3891d4a94e
-
SHA256
c84a3f16b4a1cf7f8294d29a1aa966206903de7533bfc150db437266ed892189
-
SHA512
66888615c4c68c479fbb212b1f3748eebfe3c1c4618e7eae19dcd37abe4042e34d6a2ce6bf9614616b290f0fe60ddcbb2bca6c0e15c154e43cc871debdf61f7b
-
SSDEEP
49152:lEy9+ApwXk1QE1RzsEQPaxHNGxlMPdlR8v4UC0Eg6ET7M/I:993wXmoK6l2/V0cETQ/I
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 31 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 35 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 45 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-20_5c92a8dfcffb2c4effe07a9a5ab3fcd2_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-20_5c92a8dfcffb2c4effe07a9a5ab3fcd2_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD56eaf61bce9ff46c7bca02c1d21dfaeb6
SHA111bec09e0565363862036f4825c7d92b4b34d85c
SHA2562d07e94c83eb23bd70a0abd311bbbc204eb1f84801057520c6a564c0ee61d80c
SHA5120196e55a7f486235508552e7d90576fc96b32873f915f7fa22bbdd6713c7cdd807f26d6c7d2e7e41708e5547111679f2b7d2994168d2da8aca29ea876aeaca75
-
Filesize
1.5MB
MD500a76e6a5903643aad37f6857a1c95fd
SHA1d21ed7ed2d6af8ea440746dfdf2445309b9c1bd5
SHA256030f62ff12dc3274e8cc5ddaf212ca63b42b3433f558166d5aa391fc231f7921
SHA512af949f1a1646ecc2e752ab83d6aa806bf5d764788901a71697b1d23e8d729a676f280b4344335a39848e96a37b4543f2693a61bdeeae00eae12813aff121e45d
-
Filesize
1.8MB
MD533bda13a687670c3e6d6f6018b18a24a
SHA111d364839ff59d77be4ec760e10b940eb5de83c1
SHA256b88e624210e3b73d9804ca4b94de05de5d41480b0f6e96186ac410ca473148e6
SHA512688bc7c3a1430dca9a7c660fc722c114acf31cac41319fad5da4ca920145aaceeb31c170633afced7f7a137565f6be0e2cead73f63d1d3e95c74a5b8e53feb91
-
Filesize
1.5MB
MD563dede05bd1d131bd03199594d82cf70
SHA1c4ad7ae3db8c74ec9865147cb68c0ae95a740d44
SHA25697753bcd115971b5d1fe10542cbba913c623756347b1402c2380762d8a783340
SHA512b1574bda9471fb8c23f24be547c4b29da71f24868cffebc14367021bc5d81566258191ad3e393229c6796f6dbae8649e28ebf3de6974fec0712923e8c88ab9d0
-
Filesize
1.2MB
MD58e880bc8a999523795776fada2810a5a
SHA1cdb2547f64e5558e75bd04739667d687779d9d03
SHA256e9a3e086743ae8d92c3d64cfa9a5f9a74918b97a96c929f68ff0ff5e3c9e45ab
SHA512f294db25d7437f64234e4d401923d30161c9ee3c1adf0b1de53218aeb6d2724d2540b9e35fde0101e772fe85df30a62b4a626a120183cd36a0cc63dde5b9ea72
-
Filesize
1.3MB
MD5bac52ca8d6a9cf75bb5d47e4a317df01
SHA1d334a531d60ecdac99c5223a689cf574d5994c2b
SHA25642680fea05640f94a0d2dd36de8796654dcc25971cd910f94619efa8b62e6601
SHA5127f20b0ebcdbca202e93ea9ca1eedca402419380a07597ddbbfb0d136168c237df591ea433276cdbbe5ff06d331705a6632542a842d5ea62cd89dea382c9bcfc6
-
Filesize
1.6MB
MD56e2dbb41d625b0017ac6ab6aaae1823f
SHA18dba864dd1c5f81a08711e84e570d058c2201b40
SHA2567dce7922dd508a8434917dda181155f3d340d3fbb1144ee8e6f9946bb1bf8ec0
SHA512731e8da8d8850e72c397747451cb0a5cc89673d744e85397b419ab9e360531bbbc3de4835e71ff50819e34f020c371a5c015da2e5b76dba6d47ffe3cc319c159
-
Filesize
4.6MB
MD51df571a9f2bd0c201d31d3c39ae4a2fb
SHA182b474bad645402375c29c669dc351ff386ae1ce
SHA256244858d349dd2ba3a2c268254115aee3fa8d215ba380f0f96dddcfe1e1da91b9
SHA51289d8c0f4cb7aa0bc619dae3d77652db571f5d315028b7e6a85faeba776a5b2939276eaaf4c481e17b89a379390c9bf5753c86275bfe65eb45e859cd0370e907f
-
Filesize
1.6MB
MD59cb0fb3a326a6cdc8d8898f6671915eb
SHA17ea6d362dbfc78c626cd49a133fc31ffc0e5a832
SHA25637ba8dc4ce9bcbb9ddf2d7cecb82723a1f95293941ca0190e138c04331b5a505
SHA5126627942c4425bcd5037b087f81fa82ddbcda45bfed653206a29bbe1a31bc5fb5c20d3af36e95ed8bd67857249f13d511dd9e67599f8c4c117cf6ede35bee9b8f
-
Filesize
24.0MB
MD54c6d0cb9fddd9e2c532f064409c75c0c
SHA1c901d3a49ed7d1a38f2f6afba93abcfdd2c00cc4
SHA256401145b5ab89c7b38fb8882e5a0b2a93139e25de7fdb6d1e67c6cbdbe6640d36
SHA512f19afef981c09978070a4b89ba929d2ffadbf8c0909c4f9f2bb9a25b92286dd72bcd0cd4829cc2c42a0af0ba3d9e2c083b2435976bc0bbfb837a450a07176e99
-
Filesize
2.7MB
MD5bfb90440eb9097bae4c8b80df46455e2
SHA1043808a316d990988d295c8d3fe3532b8205df52
SHA2566873e792fee70ce020de8473fada9910544809728aadebffc95fe68693638f99
SHA5127cfdf4974a1c56b3b626aa2631770b2ad8bfa1ce088e0ecf43f3a52e5399c6ef7880274dc6a8aea8990cac975beda150bf3b33f6b5d09d05240365601bc7698c
-
Filesize
1.1MB
MD541bacc1996798756b44bd93a51a77c29
SHA15f8a5b2afea69664535825d447aa10b68d2acef0
SHA256d3d9864fa8d2d99a990c34319b4be88d445471317a4b47880e322ba233b20e4d
SHA51211bfb8c950e7e6f904ddc9762467189d997f0507728f8ab6211697782f844921c48ecac5336aa0979c66241d41b587f29759f2a5197bbe4cbcb27c964b51a691
-
Filesize
1.5MB
MD5382f6dee0bdcc0b050f23514fb1cd68f
SHA164c6bd4b7eba29af03bfab250bb408773b007563
SHA256bebc318d85191594430d4771b5612781345f213f3e408809fa2405971672b2cd
SHA512ab09a08f5ac282691eae68fa45b2ae1d7ac852af8c86da63b52450226485c1d5d0545d2a47997ecd056f09d82b40d9320234f23e6f01e3d439b2dbe57f37683a
-
Filesize
1.4MB
MD59d5db1e79935b8157d20af0367f316b2
SHA1e7f5102ee4c5905c584cbceddd1048f67648f156
SHA256260b897b4f94b57810a49506ccc5d927cda1c194c1b966de37bd8e8acc026ab6
SHA5128368d7d8612aeda75766225fdb663548247297f499218a6840ee823cf00588d885a13c3824b1b97d93a0d3c6beec6c5505fb2faa02c673ff2a6ae803cdcc8bdb
-
Filesize
5.4MB
MD52fc02fd79ef8406517fe4fee63daea6d
SHA1b0a162c3cad58d6859f2f07608ce3bda70db61dd
SHA2569055185c507fb27b67a2f031abbd95618b4d7a432ff6dfdff6c0ab7aa1f4276b
SHA5124d7d9dfb6f4b9c0a7b7f221f1f9a27f5c1188d3fd4d43cbda0a520b446215eb6138dc1b9da1a5d58a5c599a0ac3613725eabb7307442e3772124f8f17db27e68
-
Filesize
5.4MB
MD5283eb40f292d8ce40123300efbe46e7f
SHA16646fd0a79135b11b12a75fbb6e2deaf5a03262f
SHA256f1a27ca2f849d331951618f456630fa5e5b2a47ed9f8236a113138b2d503ae8e
SHA512c631ab76405ddee8ae85b591fc8aa9f0121371e94d83eb795b9eccd3ad96d32e0d221f65bce83b7b3bdefb72584a8ca63a0880acd630e69a460bf4467127f714
-
Filesize
2.0MB
MD51c0d07f40b32b38ab10303cd9675f244
SHA15df85cbba71d7d0dc851a834091cdd038850cd97
SHA25687393a6f89e2516169e746d972c996409f2f2d91bb1e05099e394d762394d0ae
SHA512fdfd7bec0a2ed07dbfb15f0afcd48c7f7772ba948741456a3832d38447a27e3570e6661774719438929791af1aeaeb4f861f12395c4677c442842f9ce4eb7e0b
-
Filesize
2.2MB
MD5b7343c7ac8cd7549010480ddb9e2a8e2
SHA15524ca0e990754ce0bbd4045dc11b329177a64ce
SHA256bbcc1afd6ab2c1c0f49abb037210c8622ebc6e6e43e75b7f9ab205599d6ba0c6
SHA5120ee9d49ada683e15146179848db646c52a4b1ea679f21461c090e1173d33411e8756132c9d32fb44bfa9466101d001dd84da6dbbb143d1c5e8761ba03d9a4727
-
Filesize
1.8MB
MD51e99d363ed87349e5c5a13f17855196b
SHA15c66ba42dd41eb00b90e2451d508e55c92039ae8
SHA2565202700ac7ec384a0f5effd8a0f64e8b9e99064c0fd4fe880d3e6bf560706086
SHA5126ba7eea7939b843d8ea83bc348777224bb7ceaa777767bd23da7af808a0a01d6702fa1ac2bec816ec0aca032df99c79d515ad256dd695e08d1c4053e715be82d
-
Filesize
1.7MB
MD51bbffcef93708c9f862b9cabee815ca7
SHA16cf4f659ab380cbd35c98a4fdd0eedc514bb6107
SHA256bca530bfa893bb1b41e045c9ff3c6a206426424a007cd021d29034cd5f415a21
SHA51240668f326d149af090567493ac09014c4d106a1ad00b2f0d73922bfdd7d4a2cb838c777612b9be99537095c3f40642f5d23f5294a8d87efbafa62c00002ac83c
-
Filesize
1.3MB
MD564ca1f2e871d5add8c74c4c3754b3db5
SHA1c7e67193b9ae23c7d28ac3276c72360b1c55ed5d
SHA256ee10e4626ff517b8550cf84cb7922be95075a1884715d9c037b0dd561ee64892
SHA512a1fe28d8f9833d31509334b285e517608f2c026917b4258c516de09f9eec8054cc01e55743fd9ead7c17b3e678df635c0385367e11db5fb3baa3d2236d2d5e31
-
Filesize
1.3MB
MD5f83e757ae26d874508fc8181261ad96b
SHA17d84885257ca003f25c161dc8ffc3520bef6def6
SHA256a055a93daf151129fb36b09983d9ff9adb8b22aa1713b9c590eba225d2569a51
SHA512b24b1a8a30b1bd70379bfb08c4ce7737cb221e6a6d976a1735ba70dae5db5a4dcebc8f90972fb931309fa8899764b83bae34d8517545acff7f0c990c70830f6a
-
Filesize
1.3MB
MD51e1710bb598c62e2b3553591d969dc25
SHA1ba01c33ba01833653d98f0263435ac9992a12421
SHA2568f2fa720ef1cec840d4cb2f9f38f30371193fe6d691542feac73f0467244c4c2
SHA5126276f84dee8c2f57f18a561509af84abda62c0fbd6141c204858c21cd85bcb352cc5292eba86a4aa06552f1dd709846801c68f30d342828bda37b6976df7556a
-
Filesize
1.3MB
MD51191a0c7343af7f2fb1b0a07becc98ca
SHA15a0468f495726d0341b0f409a3e9cdf1d487eb7d
SHA256e0ada3f9c532aae7c51bf45ccf577bac8b15088de346904fff96e415dfd61336
SHA512b648531e473faa7caa2c6b102b53b7cb61e952b4cb66571ef2159c5c249a747660a39b9d98594ddf44f2573cea0d3bb1c02e5d98a112593232851108e230abe6
-
Filesize
1.3MB
MD5baec0bd03ce630ea674e80d11dd08da1
SHA18774b8ccb14e8ad606ea0a49cbf6744ff8ba591e
SHA2567a914b759ee5430017e612d28e5c6bce8f05844032dc841bbd326474df02cffe
SHA512e98509a10b089717e5aef8c24bbc4d52c61719d79744880db82fa41b6b4389a7e74e90dd13996ab00ddfcf3f9053f6b73dabe1d97915f54690f7624b6f9fd434
-
Filesize
1.3MB
MD5ecf1ff08eb663347c5c2b442ce790250
SHA1546eeafe29df916de4a797447f8b9a5a57c8d3e1
SHA256699a00950410513f6e46270fde898b401ffef02af5f1d43dfd0903b2248b8d27
SHA512e7ea97dd0af7fb4b337f726f0ec07b6b92f194a4a2a105d997e2294ba1edae5f4071a2687e4ef1c4b36fe791152e88b381b0c56fabe5aa01a53512b97b9c2b74
-
Filesize
1.3MB
MD5eef2cecff91e7b0f38e2012a37f181e8
SHA15bd641c01024b25778fc5e5093a162e854da12fe
SHA256d93fab2a80dfd0da5f9ad02c1a9295e80f45f855d98c58a8d20a5442843f7359
SHA5128f120c3f3baec3246b4910d8b11e014f594c1ca13c8faa870905643cdad88240eda227802427f1ed51113e23ec8b8af7ba629701ee3cffcb18a440c62602125b
-
Filesize
1.6MB
MD5bbd5a2c7b10eb67b3ad2b98d5e0f7263
SHA1f87f4c6973447240b89ad330978d82154619f6c7
SHA2560b70832d9a604d3002e23572e109a67c7ff535cd7bbc05385d999c7533004aa6
SHA5121edac588048db7bd23166951b256264b9a2966e616eef72cf0150903365805ad447532157425302727a3703583df356e7f3d50ab61932ec751660ad6daea936e
-
Filesize
1.3MB
MD5f6bff43f0ec5b24a32e4ab73800cdaa6
SHA100600bf3d3cc6381e60dd7e46f575baf5ac60d6b
SHA2569177f1a23c2237ed217130f8d245fbfe9c7918b201c1361680c69a90e65be1fb
SHA512af2897aba46b3fd93c686fe6426c65f6fbdad0b57e5c6e81ee7900c5c050c67cb8c2418ad28d555cb53b09b26b4f7988a25591ffa555841d20b501cede0c1b5e
-
Filesize
1.3MB
MD5782fc3aa3295fa6baa53bc7e60113b20
SHA14f709a9b0c42c0cac3ab029580609b512a558a1c
SHA256589e9254542d5667c00f7e44d3d3c2f88972e0a22454577d67e832760c3d47f2
SHA512842accaef4232c5c4581f54185e7ef5d14108bc957dc76758e5841fb5b4d999a7d984d3d94bfdf855f9e85cd65770bcd4e7bafab6fb73d3187db2d60f1a996b7
-
Filesize
1.5MB
MD5bf949a47034c150c87262139894f3be1
SHA13a7f75f85f7e470d7ba035ed9a2c5564501ab3b9
SHA25623d18ebd3dd386bfb2bab3adc0ff456be3e123be92de1d0fd479ef212dcb7727
SHA512a9b993facae9a387c24a1768024527de652aaca39a9ba6c268b0302e77876feec4ca9b69c962f061f7c40a64dd1c6c25e5c0527f01e5c6f8975dae4476a782aa
-
Filesize
1.3MB
MD54e8c52aee118fa1c2ca9cc7d4b5611d7
SHA1ec9b092b0961c9e1f8401ef0c46ced90bb47f949
SHA25608ad62e991a10c441ac6fd2aabec1861795ebaabbe2bb013457b0ca15d3a40b0
SHA512af9da896bc2d5585a041e8704226b62f582fec6ef43e091da3c52d238ac0a7ff892a36b4f04488a12f57248372a49cb541084ab6b2ced07582c95718057e963d
-
Filesize
1.3MB
MD51f202cb452bade7b2a8ab750088a48a6
SHA135252be3dde8b3536827b296c2f2f2ff4cf2c458
SHA2568dbe3439a72236b084a883931a68b9be5deba65e866b94169858b0cfb2aca74a
SHA512d58121b2e5909c1c733e1ad85da7c628ae3fd1e9eca398517c04ede882d3dd4966d6a550ef1e39cfe2e3f91d3458bcec67bf234ae8187e34eac9d1ae2c42636e
-
Filesize
1.5MB
MD56349e5c82a264cba6d6d18826049df18
SHA11be6d9de1fdd0be92bd7c8f6611b37e2380ab6cf
SHA256d0eb41a5664a508aabbbe3b2e0464d40b90db81fd43e0f424fdc649d6a1832c2
SHA5120150d9fa88e940291cab0d64fa3d814d314a9ab3a24e74c415eba26ab39ab425c89ec11fd92e24da0aaf97df5f897192a923e3dad9f472e3f0886e9a07baf9a8
-
Filesize
1.6MB
MD575156fe2e6342cd7fd8fad95a14f69ea
SHA1f3a9413708da24893a299d56fb549cdd4c7d800b
SHA25637f4a9a53c0dddcb752fe8728baeea18466c908810e7ea1269e778f99b96832d
SHA512414f3b21e6abf436de0cc74f38d64bc949d56713b228688400036ee1a19b41d71da882962ed07ecfc2a78a85b4f3ce0e8e8474285816bab9725f1af888b2a468
-
Filesize
1.8MB
MD51fdf56d743da6e56d29e0af12d186f45
SHA1bd0bc6e2ba6a60fd763cf70c9145d940d6648470
SHA256e66f3179e7b8b3b056fe3829a3968687aa6ebb4d73772a958eca63dd9d524442
SHA512a57ddfad537dddff7bfbd86a67034dc686f2998408e87fb4ec363143455165cbaa61d5d2967748db7d4e41e89a6f4f4e94aa82b736f80f3a7837d213c400a244
-
Filesize
1.5MB
MD5af53f6371bc984a1e27da83d40fa52e5
SHA18f361987890224661582c090a84daa63725820b8
SHA2564054e9a53db30bc6999bb963a1f614d1f90ea8e67b640f4ea73125f5b8d7c54e
SHA5121d3c8db45d85b8a1884271614b6829385023588c61f29901da0a836824ba13395562caa1805ab369958a7a145560d7e980d5b07d2388e783da3721dd00a682fc
-
Filesize
1.4MB
MD54fbd1de96e1123bcb43515ec98c27d63
SHA18fa5b89fe9110e916c4e93d0155e6f71d6234dbc
SHA25607f294eb93baf28db74f06e543441229abeed1a91f743ef52ef22b9d064d470d
SHA51286ed9abc20bec5cd0824d2844a867f37e91149bf73f876eac4bf7e05ecdfa34a5625c54b0caaf18107b1e392fa3656ec15969b718a28f723986f5fa57cc6ddea
-
Filesize
1.3MB
MD585e922d02afbf4a86b27d89ff9dc753c
SHA19ad00fcc18a4a3be75f3f4dcf6bf5e72eb77b50e
SHA256417a849e8b25a5631f1672888071ba5e4e9e4d1793f32057283ec61946554689
SHA512928f63ed12d75a584d48b661b6ee27941f7c6b3d9683c2de1373e4df5617538576c98d932e1f933da81ad03cdb6a08195048854c2b152413df8ba5e48f23662c
-
Filesize
1.7MB
MD588bd44f5a33d047211ba8d618fda461b
SHA1c993d143b768a4fd8ac3648f0e82889d48783651
SHA25652ec29179fff1c52665e3e40a694e2410e56b094c4b038b5a776cf31dfe8e6fc
SHA5123126f351bb9c8317835afeba73d3f9ad6b63044c5e43038a246177cc29cb8edfcb1c364de3507548092e1dd2c918a75d9570459c700eebe4d9237475eede7b1c
-
Filesize
1.4MB
MD59e6f8ad967e52c9301efe1f0f64cc16b
SHA12bdcd5bfd42aa2c0ba7b8a0e32ece4b5c09aaf33
SHA2563a555ede39d1bfe6987791542cf886ebffd5045c20ef074ca27b15a4d5a700de
SHA512d5be6214a4ab221d04c0f7d2abb4093981d48702a943ab0b95f562391f32d72292f6c300f8f3f2a748c1c2c16d49861b5ad0f0fb87640dc5b803bd05b448dbf3
-
Filesize
1.2MB
MD59303515b9e78cb5da33db323d94dd478
SHA1150b2fe0bab29b0db7740e48f3a4be71ec3f2aee
SHA256137306d28791b4a2ee03accf04ae0e1c643e14655ec342d8cd0f8ce273c30007
SHA51277630b5568ecf5a49db18b9b4178a129d0a9a4707115790ac0b3e460ce62f478e68e0d965faa2c886f1acb83749f89d865df1ca4b5ef4d0122150a290e8cae29
-
Filesize
1.3MB
MD5ef73d6741ed8c23c9ef367575a269b2e
SHA172c63944e13166da1db7bcf8cca042dd4a3300a6
SHA2560960748bc5d4586511e2d1e305e7aa17d85e13452c8ce162411c886d58df0c7a
SHA5129b7d104fcd681f870f08e47fed5a729695a7ac19726a3a682838e55485d00a2e3c544a0ff3d4932b9c453bbd029167b8d2dc39addb3f59ef60084bf7db82dff3
-
Filesize
1.7MB
MD50fcfd683d1cc3cae61c583299f8cf042
SHA1f341644bd39c2058f939adac3847978c4957d1f1
SHA25656d8fe552c0dfc6b9ef3ce4eec3d712bf2b8ab2dd5abb240a7bc5dcd9ec990c2
SHA512356172b708289bb08e14bae7c55a4535ff83d52265720f8c5ba0c38524bbac480a0f983173143b1078876beeb08bf0d5eaac159df25a0dbdbb16641c6093fb97
-
Filesize
1.4MB
MD534dbb8c99f6f82be1ee52665657a9fb1
SHA195a2bf016ddb1cd04054926f972f0650dbeec275
SHA256d993f42dc085885689536e2ca62d51089c5c8ed91c32b386e04460d8abefe568
SHA5124fff7fc6ee240a1cad7cec8314b7cb8bb5ab7b205a58040c4da6979a20e979141d12ce92b1a6475a3a11deaff4a3f9dd2300e55060a1a6824c74d96ef2af993f
-
Filesize
1.4MB
MD5aece7e74e7c93d01ac764e070274e966
SHA1d60f1471df891aa15e71413420cf6acabd836df7
SHA256422275ff45d7c66754045480966e30d542cf0ca93497b1f09530680c1bb9a3b6
SHA512e69ec47a832af211b2b0a2980efaea9fc115a7aa54bd58b832d37e98f066fc7bfd1b4595d6ac3d891ee70681c22900ec2361998a0d70457eca5f26f024a3707a
-
Filesize
1.8MB
MD5adfb79eb5962926183cf7c8cc880fe6c
SHA1e308cc7d7450bfbd5b62d52893d5a043576f0cab
SHA25676b23155c996f5a710ccb94b2bee980196fdab902bf842d1a67fbeaeb57751bf
SHA512b190f88735c91792153bf183b181aa78c90f8c1ff18093db6fd7c513e81bc97c19396b6a2bb92cc13b4f9871b3c3409018f9629d5ff5e0d690a2b7117adc6c07
-
Filesize
1.4MB
MD5571762de1d612e1728eac55d1b1b12c9
SHA1f19b1ce5ddd3a2f3307dbd4c97de168ec0dd0c86
SHA2561ffc2092e5d876abb82ebbe8aa3d7f8681599c0d9373415d8a0978baa39805e6
SHA512e7c5241b7b35a868c9a9f8cc9cc6db58eb9c9a74574441f7511764b027d7573e8f114d2986124d335f90c3568518cb2504d785d731cce0ecf87bebde5463bc11
-
Filesize
1.6MB
MD55d0b6f8cc82f248aa54c89cddb3823dc
SHA11ec71a675f8b59372b8ba2966614b32f97b02ffe
SHA256bd0560dfa0f0e7c96a655eefa1bbf63d8acddb701337c71c792b1bf80efdfdd3
SHA512f35f131081af2bf698abb2cf259c3454d9e2f740f78812e6104afc0e6bbbcbd1662476a1b99f9e21cfda0e2d6708cced57ddb83a1f3259bf8ed57a08b0ef6024
-
Filesize
2.0MB
MD5ce276b635a92d2554b58dd171b39a1f6
SHA14b5dab035b86f013de24c0f2e2764522f59cdfc7
SHA2567956598c0131db4c4a5e1976cf2bc6c1f3f9bd2f22f2d85c6809ea8760e5a3a0
SHA5120de4a803d006c088559dfdceeedba78dccd1f6949d61aa688659d53dec1100385f7d8f622d1bb3aee7181a2bf97ec3ad0b7f7d5b83936ff2fc0883491c4df779
-
Filesize
1.4MB
MD5aad4bf0292a07f18fce152af7024a91d
SHA15e1155ab2785ff9c1cc62cc7592907fa3801d4e8
SHA2564d3636678efb100d9aef2bfa75e6d82c351a05456c0af18e5ddad50d9931b144
SHA512e5d9390b78a4d72db0d5aabda6d7d5ab78abccdb8b2d4606581a9f41613f4c5a60c1173f987c384537b9c96070292dfb8ca2f1ec74016b489e8287f07ef3b306
-
Filesize
1.4MB
MD5116958a9b105e22ac309a16cdd10694a
SHA17662353fc8c6bbcf834a03a129c254ea6c6cd749
SHA2567fd48fef378c3345dc31efc752b83ebb58e3ffc38de6bad49431ae7db4af241a
SHA5127ba03ec1554489185e8e253d66077413f41cba8d3974985523674c0b2f2960ca123d374aaa0b4ff2a6039296b727b8a62411c4ff7e9b0451b1cbab64da704262
-
Filesize
1.3MB
MD55861de52a9a3d0f5ba7228eb0018389a
SHA17049a723db9fa953d3691067757769c00c2bfb14
SHA2561dd0f53e33e25c616a821bdd9416e096c9ef7b0057e5614943068afc188d8776
SHA512b1368d3df92765fdd1187b88b591f6f116f6d1f86cc116d6ede574a85deec8013d363ab4fb2a49712693546efc0cae74c0c5a2303672ad03456e215ea2ded64e
-
Filesize
1.3MB
MD52feb19222a5b5ed06419bd43a4bc75dd
SHA1d21d4930e36a7238208e9ae511fc843bc323c7b1
SHA256237650e64c1bd609a1a77c34573d81e64116aa92990222259da390034cca0a2c
SHA51281e6c4b7f2a7742fa81d1c6291ac6146225b70a1cf23a48f187a75de52ca24400486db54e6648b9b73ac631645dac22427b9dd7794b2f24d6f41c8164b0c8a79
-
Filesize
1.5MB
MD512e190acaaa299bd60177ad9d677559f
SHA192ae6011c05ea168cf3d4a3516d47f86a809f47f
SHA25647801d105cd5edb33dd2468213fbaf8a94824ee472438ad74000948e8d727387
SHA51225e0e9404183e842f8cb0011a4eb1bb8ead70ec32dffdf201f414fef848d1dc180fcb7ad07c38e9fe180b9f38e981cc81332d33837d010144e2d4d7b7f90271a
-
Filesize
2.1MB
MD50f15d90e29112d13eba943cb06873e2d
SHA1426ae76f63ade60127615921333cb570a3e9c231
SHA256f26a22531aa125b5bfb4f23155018043fd519d0ab6c9f477c2c1eea302bd5737
SHA512ed48e85b5921c6ec1d93989984a56fa593d4024b4496e3c57b1c1d6ecbc2512ada677602d9f074a05e4137560db464a488dc04deb807601d196812788474d2f4
-
Filesize
1.3MB
MD563b08b8d1e15b4f8a0b9ac1dc10ee457
SHA1a0aba83e58986e8b37a50c66882d3c1e42da20aa
SHA2560ea2777a36b3058b521dcd353082018e940a764a80e7aa6347559143c826ae31
SHA5120897cfd4fdbf69fab0fe76c161ccba90448b66246d6d9d879119d3332dac4861bd184058af87c6e5380a9f9934254a225bde0e4f2ed237b26e30e7c2da1f3c8d
-
Filesize
1.6MB
MD537f714893070a6ae995e7674c7ccc93b
SHA14914a5c26e1f6e7109c3bb69d72a666c25d6f2c4
SHA25618a12d7875ec5cde72ba471ee4b7920475888a6320ed919cbd5808c16a402a2e
SHA512d6bee97fe132bcc0c4cac8e6f2f590c4a85cce5ae68c565d7610f9d8537cafa626bbf2fc8c8dba7e578a4c7ddd1d4e70f61bb33968b9e4118ea41e5655839172
-
Filesize
1.4MB
MD55fdfd934c61ad90536867ecda70f1521
SHA1f7531071a94d108fcd6b1a2592e401400fc908f8
SHA2569591d02574b9479100307d823b2cdf1ff6df3e4a83e545871eaa157cd77b32c9
SHA5122c602f9f8f997e81492f37bc801d3dbbe534969b02258075e481553af091eb5f381c4a033428dc32e63cf81e4569b3c8cd056e5695e062ced041c4398fee29b1
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
384KB