Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
10-08-2024 00:31
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe
Resource
win7-20240708-en
General
-
Target
2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe
-
Size
1.6MB
-
MD5
b52bf30da50a1effa608daf04704541a
-
SHA1
72ae120f86768cd5b7be5bc9967c6299a89512eb
-
SHA256
cbee4d967d3b3b77031cca577e2742117d3b82f57ecc4fdb70ad7b1a9c964c75
-
SHA512
c5eda799702c26411ede5bfcd925b04f1839a3fbc010bfd039db1fb8ef7475a4a7ee0d1c912e1efcc9c9b8caf75cf226e96bd4ac2ba960bcc1b96ad09b330043
-
SSDEEP
12288:+85bM3nKxYfj63hgD1ZifMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:I3nKi63ibSkQ/7Gb8NLEbeZ
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 2588 alg.exe 3636 DiagnosticsHub.StandardCollector.Service.exe 552 elevation_service.exe 740 elevation_service.exe 4796 maintenanceservice.exe 5084 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\AppVClient.exe 2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\b385b0c020b56551.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\System32\alg.exe 2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Internet Explorer\ieinstal.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\ielowutil.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstat.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\AcroLayoutRecognizer.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\7zFM.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javacpl.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jmap.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleCrashHandler.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\private_browsing.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstat.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jjs.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\keytool.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\123.0.6312.123\Installer\chrmstp.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javapackager.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jjs.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\xjc.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_77703\javaw.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\idlj.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32Info.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jinfo.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsgen.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\private_browsing.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\keytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jmap.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmid.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdate.exe alg.exe File opened for modification C:\Program Files\7-Zip\7z.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\extcheck.exe alg.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3636 DiagnosticsHub.StandardCollector.Service.exe 3636 DiagnosticsHub.StandardCollector.Service.exe 3636 DiagnosticsHub.StandardCollector.Service.exe 3636 DiagnosticsHub.StandardCollector.Service.exe 3636 DiagnosticsHub.StandardCollector.Service.exe 3636 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 656 Process not Found 656 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1820 2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe Token: SeDebugPrivilege 2588 alg.exe Token: SeDebugPrivilege 2588 alg.exe Token: SeDebugPrivilege 2588 alg.exe Token: SeDebugPrivilege 3636 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1820 2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe 1820 2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe 1820 2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-10_b52bf30da50a1effa608daf04704541a_bkransomware.exe"1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1820
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:2588
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3636
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵
- Executes dropped EXE
PID:552
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:740
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:4796
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:5084
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD57e6695d7639737e5b051881fda73ea60
SHA181c6316b7673068a6ee43042eb3615b93ec29c44
SHA2560f9314c26b8319b36b077dd5c2a4226284e860e8c0cb94a39599dee48410b662
SHA512f893b6c31e5e6c470c295fcc86e083b2e092b0d40556109096e7e85b095861cf0041a57dcf850a767b53355e8485614c9fc8382d4dfcf4653136e5b7c7a0faac
-
Filesize
1.4MB
MD5ad913143ea7114907aea43aeb19d7e1a
SHA1e9598e31df4ef6fd90de2e31ed6c3cfcf1610f06
SHA256e8ddebde70b000227ff59c8c2afec1d56710d86fb6726eac2f59cc35d3de0434
SHA5123d2e9ae60ca1488d21d6c2a8754ddc0350031732444bf90913b20403472e5cf84694c0da22cfea92049ae5543038b824df5145733faf2ecba61d4799455beb5f
-
Filesize
1.7MB
MD5b63d99206b7d5e17e38fc08498b2519b
SHA1e9cfdd86728bef86427a580bf366daaaf63e8ab5
SHA256f19ea72990eb2f65a0e4d39cf8b812acbcecb0cedf26bcf2dfce82fe4111b61f
SHA51243b464fe1786cab803e93626eced829ca04c3480c1ea23cd68cc90ffe74aae6e002d53ce4a3d6274b89b492a2d5c6fc59fd7340ad10c90c81d58d7d693b90484
-
Filesize
1.5MB
MD55ffa366e498944c76d0cdb008ab5ecd7
SHA11d4861855450a5a38030aa6d8569ab23a660c3e2
SHA25634a2a794bb7ff1e90f3cf8572b526d0284b23c2f9f5c0602bf602e211798f80d
SHA5125fa0462149d2c36a46d3cf38074da0dae596cfa160165a9be073b81d379a98df102b8eb5b4f12b05563057aabbcc83e8e6085e216fac6303887b8c2d5fc32ad9
-
Filesize
1.2MB
MD5ff544628c3520ff7d33b57855dcc4acf
SHA11f9b4cb36d5c2f39d31b80a38418164542699604
SHA25649eac25a5d7fd5865f28910d3b35de21fa25e62db689eb291535d9c690ae5789
SHA5122e6c9a5344acf12ccac40892b2b144dd9007d15c937907ab919b140c8bdbe633d4f14f5850f1560c12604f007edf33c9ac70db7e54a5866faf5049fe2fbb4dac
-
Filesize
1.2MB
MD5e04b92107103e529aff24bc45680bf50
SHA15f7154c7ab1366391a25f8b78361d63440db835e
SHA256c3022818b657d6157d4023a865638dff7641fe9b0f9bcdde7221f7bf22c7192a
SHA512f5e3c3522f59ac3f9132e0cdefdba8c9cb7897123e8f2b1d311789db7ef1966e25840685c6bf22c1b75ac2ca5a18668343bac97f37659b45e8a783ad00cc5e7d
-
Filesize
1.4MB
MD5c247fcc20d888483bbde921f5bca283d
SHA1278387d8fda228c1dbe73362107e23487652c779
SHA256f867873ade34fc207a632ef48dd11de9541af334b5b5b7fb2714cf88c740824c
SHA512925f1bb7cf0c42de3cf45d9a664f096fe3088048b0229a6e695e3797bb1c531db6c081bfa55ee5626a13dc57307ad22302f8505dc3f569ed419f2c828ed60910
-
Filesize
4.6MB
MD53d5f3103db11fd87dd1515bf170164bc
SHA118e92554eb2c0e791185a518c09d99a7f2ab9960
SHA2563014bec24c34f87e6bf50fede21293b411695897e7af3fa0ab426bc29e701155
SHA51247d21e42fc65fc02413946c3713198b8147c4a9cb26c02ac2e71cb7552355de389773960806036106a50eeed5715e680302f2c39575fbcdf177e46f710506df1
-
Filesize
1.5MB
MD57d1056cc536bba6f04e00038d2e86152
SHA13574d198ec1a2483763e942b1a47370312e8d7fd
SHA25650a6afa2accd16af27478dd784487b4412b7f0cea7aaf9bfae6f5dc03d820545
SHA5120037e0db790e950d3939036ddc0b2ba5d515c40bca7e058197bb5ce35b435611bf9bba92ae7e4e7d9182eae677a8643bee1e8e0ee704f0bc167614379a9ad0b5
-
Filesize
24.0MB
MD5c6221dccb987ac006e190112f6a2ac63
SHA137963da6beb4c6303cae5639dc8926a1ad79d454
SHA2562f3299d75c4428e94545af1f510ba201475c36bfb331f1deda6035bee96dc70d
SHA512b25ec68b655dc7c0e0ae2ca08a3ca4fea5d1d84830254c8b642a3f627388af02c87e8c9be5765c18a288a9c25b3ffe747da9002a9a6c646fc2cf3922e201b102
-
Filesize
2.7MB
MD5ec5748d7d267c3336930f2cea10f9f39
SHA18729d5abc7659741b55e86f086d43376402f82f6
SHA256a966959b3eff4a1a105a323c998eed5c232f8bb64c072861358964d69ec6581e
SHA512f02cdb3e086e54bfbb7042eefbd1b284cc82e84e18e6d2c2fe1080cc69a4ad62bb07357a1752a89850633227d106f590eb58acf8d525189eb3e6b2d6117575ae
-
Filesize
1.1MB
MD5c80220edcdca3b5057120dd969829622
SHA193daa9eaa9e138ddc309604a4e85e96acef3260e
SHA256a79c210c2c9312d85afb40096dc39f036b211bb6526f2b6ee4848f581854f4c8
SHA512cd115b3868d562babf136d1a7977d98d2b9d9042b1de137ef18a2fe1abbd8f6a65fa2a19fff03be247e0c7ef79bb7ea6c09ac377c8ae92226135d71abfe126d8
-
Filesize
1.4MB
MD54eb1e49c26b2680d58782231b6c039cd
SHA16e93557ce08d93a42216c470429b445527039949
SHA256ec345b9aa0d756e41053c11f1fa41dd6bdd409623cb2c90657ab97c673f4204a
SHA5121a18522afcc217b62de062525ca483ec7a07ecc09be0108c32f5e8b4ad2dfc6deac17757944d530f4d641a473961a5082255f5a68733b9fc00935f63c6e0a6a5
-
Filesize
1.2MB
MD5267de6be5169bf02f2877206c000a446
SHA11396ad5c910fe332bce491b9dae1b31d3e25de3b
SHA25637ba0ac1cd870333f2ce645667a7c18e3655e90503711cd379ce9ecbac091d84
SHA512cfd7e213ac5d1464cc45ed29a212d567e0743b3680887f6a12b5bd1278c4e5d4dd1c256c4f470ef6ec8d03b207ae22bcfb4ced0c3c08fff2f30607588cb02aad
-
Filesize
4.6MB
MD5b81ceb9508fe8825d89d37ee53b5d43a
SHA104f669cb5a9e16a6de2b3bc066e246404acbc81a
SHA2569c8b6bca48afcd84ebd89ce614c5ace473d7b350240a0753c3bf12814553c9f1
SHA5126ac02e2abc848a765e0df87f1f1efe7a2c6247e22aa76dca340b1786d45f1160a592ff26bb63065857c168d17d85b712d3252d5d3b6f7da51345215d7ec50834
-
Filesize
4.6MB
MD5a80f23a03d18893b9986b545314f5479
SHA1dbecd83a67e4770bbb22bc279778e2683a737f0d
SHA25662cc23aa10cc9db3327cdbdeca5677a22987718b4ee47a12cf481cc23616c8fd
SHA5125037b732f65b2bbc0c9c85553e2da355042f6043b18c9354054f48c7c337235d9a936a2b62ce446b9d3be8fe7c23c46f215f06f297d8773465733004dbb4578c
-
Filesize
1.9MB
MD5867614c447e50034bf6e019f0567e997
SHA16b9368f8f8807ee497ea3b9512a6d0e519d8eda0
SHA2561824e4d23937cb6d196ed42fec3a8e5224a3e6ce6c7c940cf6a2dce0cd3b8860
SHA512172d52448e5df68342dd5ce9ee134130aa2325170cf621ca37f02a43816e089516cb474cc42848ce54e1a5fa74db696afb0fecc2da40f10e9b1d7b98bb811cbc
-
Filesize
2.1MB
MD52fa77b80513ca38efbd665941ec1bcff
SHA1933d2d93529bb83090cb865979a736c84e7afd5b
SHA256334a1bbe3b69a59aa8deec492a407316bab0416d5f977eb2b861d45188bf2d23
SHA5126fa57d6859788fa3809dac6a85bc63e76b456d900d0f0df65bcb39d7530d4d6ab510036682b79f39a4752e57867298ae721c841aed0c07de3a5f70b7a81497c2
-
Filesize
1.8MB
MD57dd7f5cac951c77f75fbf9a1c52df3a5
SHA1f04dacb73fa9012646e1cdba8dfb37d3eea73fdc
SHA256f36920edc803952bd2ade552bf0e54e39f2e708134685f9f868639d41948a5ae
SHA512c717e105f6c2e5c13ce3146f9f4c7bda4fd19408141313441678adf12eab9e55ae5e3b5bdb7aa381365436f941fcb4dfe5adfc1a32f89f4a92fe2ac42142e953
-
Filesize
1.6MB
MD560a26a03f214316ffec796c175002d64
SHA16bc1bad124dc7b7ca315116e20855c71a003ac9c
SHA256b2596f59435bb2fc1be36ea6efb33c03fe2cf6ea670eef65d0a871059c480f98
SHA5123815e4edb5fa784540318482a64822fff07691e4dfd64c27fa523b9259080f000dad8dea8c680c5a9c4bb18f10bb50b8fa2a27a2764f538ccf4feba9702b90b1
-
Filesize
1.2MB
MD5cb9179c2cf696aab9caa63b8eec12b1c
SHA1c7c828dbfbc5a4ee2a276f4b054c221fb70da5e4
SHA256e66c8a0fe4d58c7e6fd3568c2d54c2b732ff9a8081c68a142859d30ecdbba161
SHA512bc576d48ff97d6bda74a908d3b235be83b778119d23fb90479d1a51a4bda26fa7fbebaf1c6cd15582df3ca8c822db9df79b3106f18de8cc056507afa0870d3e6
-
Filesize
1.2MB
MD589264cab9a4e8596e9d99b85a42420a2
SHA1913077c6e646fa2ef8a046120c949c4aef036a52
SHA25631176e397d8c0ec01a91811ae84d026fb8889d84314f24d4d9ad9e1ce6b87b1d
SHA51287b258ab9a45c38139e4fc8aad573bbb7f9cbbfcd1197d948595fcda2aeb7754232a2e078a61263c3f57bb729d5623bbe281777c3fccc4e2b33fb3e3b1b364e6
-
Filesize
1.2MB
MD5fc65961fb21e29e4d5b232eafbbe6794
SHA1c9deda451cfa663d16f2612689c9fae7a143c341
SHA2562bad477c2cbcedf2820eb42f1eafac16000dd064920fb05d555f35a6900b0f7d
SHA5120be10ab14269455383ce6821ba905c8e0831b4a5c27c073fe886320b02539cd3568e490a2355d85ffc6b3ce775ccf78dd96c5f579ef72a7356ba110f08533fa9
-
Filesize
1.2MB
MD56de03aec20c4974a5d33d40a16a3774b
SHA13b0c96870913080d95ba882ee4a818632dbe4258
SHA25644c68eaf12bc3d264865b6282dea9995caf314b65156cd49085bc33569cd0bd6
SHA5124454c6e5f895196e1588307bfd97e50034e11eee6dd684200db8b0dfaeb5394f8616c68993ee471a498b651f0af6027a05abcb9a8308139a074f11b2376244fa
-
Filesize
1.2MB
MD55fa5835c9dfd91bd7a0ad5d9d2427469
SHA1b9ae8f3500436110c4f12ddadc2e0785d9b6a191
SHA2563ebf0e4bc01fb845cc00461a857916e09e0cc3894b4fbcded7f813d086680d9b
SHA512b1c368ae993768b9534e7b5520544fa0b5f81946dd290722e6cd7b5116f2b755f6bfc7f18da348d1b211c1f26273108920e4314914322219c4f5f3aa8d6cbd82
-
Filesize
1.2MB
MD5ebaed6921e8005377dd4598648b261a2
SHA1a168a03772fa9b73b38f58bd62064109adf21f53
SHA2569e026cdf8fd3aa3f7e0b72d8a60b86185c8d94ea07f683e6348d122285cdb041
SHA512384b68006e670b9f99b19951edb89cdb00a15541611c11cd06e0157c142053ceed424535e06338a0117b3589e2ab4ab4f3ee5392bdbd343b59ad314e73d271f9
-
Filesize
1.2MB
MD51ff341fcf854bb2f2585250933e7c1df
SHA10e29a8a61aac32f7b2e0114439ae832ccde7fc45
SHA2569a1167330e09c4c8498f789322aae88330db03ebfd27db90386d9ebffecf03ff
SHA512744996515ed7db72862cd69fb27a4362a9b165aea773b1e16df7487d3e7337454053e168c3ca23862127982e3b9713e6ee909f5ca7e3cc53748431c3fcbede44
-
Filesize
1.4MB
MD5ead5c5f25500a0b28f9df7fd22163d5e
SHA1b0b8fa266e91ea4066c7658ae1e24b6d2e8a4135
SHA256002430dfe0f8a265ad78ba1767652de6e45218e3a001bf256dda5bdada7f3a03
SHA5126958ebb428978a71eb7f683093c15ce10d62f22e04f52ace3368390071292ac840a0a46c3fac1013d1308b90a56c962809b53af9611450757137a96814aa6999
-
Filesize
1.2MB
MD5fde71c16371f6a842125d5b193a3d582
SHA14fa176ce18d687ac786b0b76acc3f43dd7555b54
SHA256923b56b97260b13307e6bbd938f38ddfa91ec7a925a693539c2cb78b2e9065f0
SHA5127f14b1edefcf0cfac02db4356a33943b3e658434345874e509e42ed172188fd88b6a6ff4fcedd37860cd5aaccfb40ca785d8cd8ed6c520d21cd892a257fed30e
-
Filesize
1.2MB
MD5e3707285c2c8949d9799e2bb4ef293e1
SHA146e41c27f087229e4a30a9361f90b643e0c8795e
SHA256b396afe404e2d9d8e39596af2daf000f468a8a107099540d5438d2dfcf276af7
SHA512420b8a07526fbc33d4a4761260ab3352a9951c31b49417f487193c89b9c739e8a4feb4d0617a71bf06a1ae7791d7c4b492606e9a58798dfbbe443254e9096e0c
-
Filesize
1.3MB
MD531f64c6c06658147fb8762e6d6c73448
SHA130bc67f1ee66c3beaa727d6e013dd308362a5a52
SHA256acd65f2f39edd5ab177bf334cc1983a82b706767896c4fe4099cc12413d03080
SHA5126b1234ab532d3a9dfe7559c09ca265f09da049cdf7bf69f3ee9ea67377fb4f0d0d0a6727055338913939d2aa481a7c87ac3fef2ba3e97d2aed1439885e01f898
-
Filesize
1.2MB
MD51decee67d582f05ed6a7e9c3161568ef
SHA12241b0ad5c98ed8bf48c102227f33ed95e1200e9
SHA256161e70e1207e44117e1f0b058d20d85443a59d2cd6bfc81add9a0db8f5438ae3
SHA512a74f34cba6d4d58f54df5f76c24d5e642786688f8c355ea2e96ea40e831f2efbb686979a070df8fb964eb2a56a7bdbd33f1c4dfa69957e21c54cbafc5203c6e6
-
Filesize
1.2MB
MD5c69d888d59d72d63f4cf55056255e016
SHA1472415a6c87a99263f65de344587ca6f386a67e5
SHA2568dec08b6d41f5ac4dba280d1eaf9d8cddf8d2c4ff33d1af4f5f8b63ccc976dc9
SHA5126a035d22d30195114b15c8b69ef56d7281f70bde9bfa57eabe33becdadc77fe2ca42c298d8a6f0b6ec42022682063d6910099a400c06426445cbba1d48deeada
-
Filesize
1.3MB
MD5c82c94a26a32434a161c5624ff631de9
SHA18e8aed4a1c9017f1400376722c0793e648f3e106
SHA256bba86d01b14ef25b6c74c90f421dc2b44a6a95d7a171c84474f55e2af5386ec7
SHA5127c789a3c5ab7fc5a753154565d47ec1e9fa98f3c13fe9c5195d320113636fcc167df6a9c50a8694253bc5292283d4e4de52d3e2925d5d34e7782ba527bceae5b
-
Filesize
1.4MB
MD55e262c66c71f9c680676e8655f305460
SHA1903dab2089e133f4e268950738141b2bbdeab055
SHA25605addd56925b6bc2f5a6426764049593ec1a8a620cbeb268eff08ae926869a0e
SHA51231f07c5f199d54b0bd262157a637d70460a287374a511d47c136318688f022bc24b678686b14046b8a332ed91c71e85a9f006d01d6ebfd411ce605ec02dbd677
-
Filesize
1.6MB
MD5049f9d63d36c8fe1b4abcb04b812dc63
SHA1604acb121b6152639212cb8bbbd7528a5978c5ec
SHA2565404ba4ff103be54dfee4f4214267481d3d795848b2ab9b704ebd010017711b0
SHA512636e8f08984078a750ef3e839986448fe111475d238ff6b87db36aeb7204e718004669c32320fd5f942f66f379cbc256414432e0c26a451835eeeca14dfeae8a
-
Filesize
1.2MB
MD514b217bf4458eaed40f3cf665ce2828f
SHA1b37ba23aeddf7b8fde9d7d4b63c3d8437018fbb2
SHA256ab94ca4e54e31389bc88eded244123aaf1a56faf877e47dffb604c776a478e90
SHA5122f0d8eceba8c75817ee9b3cc62709c20ce2807361c5d01590c444cfbfc49a4dbd69c0b6ebef748c1a25e61ce0911d601643ad344cc63ec9c8817fa68151fabe5
-
Filesize
1.2MB
MD563d7a0b08f854976c63ead183b7dc0e0
SHA190386662bf98a8da504ad8433d7ada58152ed5bd
SHA256b8c9875578d491769fdd450a8de7bb7936481e99f4a30629e059531062e7be13
SHA51263b7f56305d9737d45757455bbd48bf33b8c48e4fbf417168891f06fc36b2f2211f482ec41ed4d7487956ea71ff590b43e063eaca321d4675e484bbf9148444c
-
Filesize
1.2MB
MD5d506360150d3afa927f45fc413296e2a
SHA1205a4785be8b07b624d6d9b225307c19741c315d
SHA2563c4502d62711e49c8e0bb4ab1abe5134a296b4db36554d1b03849b4856bb48a8
SHA512f57e8d6b0d12c47879ce4c2eba15bb28e0cd95d5084a3cc6139859ed8bacaae39d6d658eddc3b9068e951c4a83ee2512d6e32f16ea333ffc0f1bfe2da4e14809
-
Filesize
1.2MB
MD5e3e6a5eee28f038920cf7877e62c1fe1
SHA1aa715eb1411e33db98c77e5c8c515df9a5889b32
SHA256030447cd6fb6f0e176412e10ba8667ebcd959e60826218a4fb30519d4581bd9d
SHA5126c31a01bf06df8d4a841ddd63966782b7208c3d03f83cd404d55fb3301eb2855b328187395b52f01db31fcf8f6161c5ba7f3d9b6977a029fceff3496f85d15c2
-
Filesize
1.2MB
MD5ec997e2eb445a5984f53363c1b922fef
SHA10c62706302f891d5464c903bd54880934a9d3633
SHA256f87f372373e5f898c0f53b2228a43d938c0a9aebf8fc9a857a4163d488ce63aa
SHA512a20a91a0effbd2a5bcf3cbddcdd1e9acb17b36feb62aa305d1aa479e09a3b52803180d1215f439ab488cd1f960a968254a4da1da626e9ed66e51cebd23d0b0c2
-
Filesize
1.2MB
MD546ac211e2fe693f9d2c9401e77c33c39
SHA166347fe864ef886eb18d9c11ae2b07f5f50c255f
SHA256f2e784d6d2fb6a42773579e2839b76abb0907b70a9cbc46acff01c6a265a303e
SHA5120143bceaab453398a1a75d2d432450a5fb62f80de33071fe0299fdce5006eb43f90351703ea084341e18342980e3981aab7c83136cdb06d56c1ad0c565bc191c
-
Filesize
1.2MB
MD5fc0ec95e92c839b43f14dceeb285cf55
SHA159b6d1645b88c7272a430235f943dbf7d22b3f8b
SHA2567a8ae9999baa76600534e56e6714dece84d2d0e3f060c2b0e5a958c3e2eddf40
SHA5128a380797bd0985bf7b3f79c6bfedb80f3866b46fa6687e7fda2c8a42dab7670038932780f846574573eeee2efeb0d07e6205c663c7d290002c39d20104095395
-
Filesize
1.2MB
MD5d2122a109c2bd2903808cc81d22944ba
SHA1b8cbab940b77bea1b86af029ebe5bfa384d75c94
SHA2569d774afd9dd0cc384f283bfe0414b3d0c489127a5fad5928e740f1fddf2f3e06
SHA512f39e0e3c59105e10f2ffe98086abb5b212fc0c814a05e66f3f4e6d12a738404a7c9be076b07c1600216291fa455a8848cb1745d2d0de261914e5f185a413aa84
-
Filesize
1.2MB
MD5c45b3e01a2aaa1c950c341c648895358
SHA177343fdbc8193e040384eb001d9db36afd0324af
SHA256d9b27e18dad681d29a438febfd7be5b27a0f3aeb48e1abbe7fdc63874b9e8b35
SHA512e1852fa2b7e535688197a1d1ab4a3fbdb66240ac92469fce9a101f250f0e8c8b2af4b0ad933a1ea69ebe73e0b9476ddcfe7165c0713a2d4d9be4b87298dab236
-
Filesize
1.2MB
MD5384a67028e740d06c80862886b951e8d
SHA13660fcf301e12754187c5b018c45dd401576fe8e
SHA256317a725cbecd16d76467e061402801ec5dc9138ef1e00887b84b4142356d8adb
SHA5120e4197e19a143d9070284adb30037403287a161e55f611536e3bbd0e6cf6a440940a885a8c0c02b61849a922d2ad5b0e9a3b8467827e374cc6354ffc37979a40
-
Filesize
1.2MB
MD5cf7cb4c98e3e8206a9f7a450a3765bd7
SHA13e172a753c50c778f4f310740b7bf405408a14b8
SHA256c84addab3486124c67522801f85c8feabd8df722dd3132aadda2cd0ae8e31623
SHA512f9532331d4bd5fe939e077e47c949a5474b666ea6f772c8b19fa111b7bb13e38a66aef0d9c50d010c2de7813606c66392ee24366dc0212de4691cb6ef1ed3bb8
-
Filesize
1.2MB
MD50e7465d8a571bbb36b2b123c499d18bd
SHA1fe9aa7bf7aa658c9685d1e74943f45893d651599
SHA256769127bd8e7939d7440c70fa70a4c3e8a4086f7496a8778a7c0f8294f8df7fb1
SHA51242f760d0cadfacb50c91a3033a1927eebad07c8b62d96fc5a7f6b1c809340f842d443f618dc74bcb525cf83a40718df5b3a7eb60e8ce8f5d320ab0e895635198
-
Filesize
1.2MB
MD51c8256f12edea306626d76828414d168
SHA1df165639abc6c345b0c5ecf740bcee11d97a3122
SHA2566d65ab265c44efa154d0d05e18a6a8ffa3f067bc622594dbc3d0962713b90e48
SHA51233b66bea77a5acac87fef13edba2866b2556218995a03829800da8ec3313f44ffeae647f5a1c6bed70cac4f952446f81e3549363470b06fd8946481c22d8869f
-
Filesize
1.2MB
MD559db8014d134709ff817c5f03c53aa4b
SHA19a1791769d53135d8943ccd4d2700b00a3ca5854
SHA256e1539dc35c2f97d758875ca5795a6913cd9ac4be75825f7082844b0ab179be99
SHA512008d91ea3553a45b1585ccd0d1684f82c6def33f178ca046adfea719f2a2caec4c5aadb94587a7d1ba14d60f045b264cc0b5acab61fc5ddbfc9348ae800508f7
-
Filesize
1.2MB
MD5146c6005cf9cc28a1f0df3f429c3b934
SHA16e40c4d8c93ec515998f6fe77344b80d8f9fc83d
SHA2564b572d77e7c720bc08b47ccf54ef0202d0318b14f9866102ee82b7b5be65c9e1
SHA5122953030bec9d5a69427d412ea3443cec373bad8b04aeb2aec61dda0e920ea8219fe3b890fb714cdbba022edfcf9b03b064a785a0e7e2306d499238c82f43f7d8
-
Filesize
1.2MB
MD5a0edc84e5524c8c9954200ac3df53c28
SHA15151d0431e25776eaadfe70ec67af51f14080ec7
SHA256d2e6c3d65ece512c9ab0e8e55cbe0bdb056bc9014eb2c2510f4b50d79de0302a
SHA51248a92e5a34e6d078dbf110e7821d8b9af53c84c731940f0e9ff3cc7d6a2d4e7443b42ab5bbbaebeb1e70de9927792196c0836ec11c79e57556aa01b4b88c9ee8
-
Filesize
1.2MB
MD5c3913066c5d30efe48863a19218b6cb4
SHA1687b10f4d44574c47491e1984f1f003c4e8e4b80
SHA25642e1b24a23b59915149f900e3dbab95e2a15ae09caf074d1a473878a21ce02a1
SHA512fa1246635bba96e719aef39778574624a31843b5a545c5793357286526cf231f7f9df260be0b169a4a41ca06ba51be3645805aeab354643099dbc83138491e2d
-
Filesize
1.2MB
MD5b6188a1b1fc8ccf44c00c29f51bb0180
SHA1ccd3810d57fd962d9d7c56426b1e8e1ae7a1d9a4
SHA256ab09c433912307009c445501cd04a7c6892369e1c31a4edfba1edc2806127c34
SHA5121a371c7ea03dcc9a52be5df729161125b31385589e4f1f67e910eba03806588e9f119ff7865fb46cd6a57a27b930f325ec8942b786a2414a22846e635ee8c799
-
Filesize
1.2MB
MD597395bf9449b011aadcb53f761a1c955
SHA1f792e4cac8f30bf1cb77f9c52a5665ea70712a7a
SHA256984e73e097ebcec7c2de30662f0256bbbf892b66d6c302ad77150760e147ea34
SHA5129b5bf1a3dc8784685d425df66d37eb18c1148fdd742b84b51d30109d2b8aaccedc22dfd09374180934703fa84ff47c8e3608907a16b590f4d7343b2b5c10ecd4
-
Filesize
1.2MB
MD580df960f03400bcd66663d056203d95c
SHA19a7c5adfffb0c024058578f1dafaab393bd9328b
SHA256517d58e6ef8866f5f2ed445b74ae626bffa59eb55ea90eb5491bb35d3685367f
SHA51235a9fc1f98dc2582b468639706f41571d7072d6ef8dc188ecaeabe61d1b0ee7a6b96bb4bf44b38ebaefd4ce8ea6dd4fc6b6ff58a66fe3447fbfc8940277f2403
-
Filesize
1.2MB
MD51675b5e40c855c5b251d84455f4daad5
SHA1251cc16ea083bed399c73442b84cbb1b4eb88ab9
SHA2560d8569d53f85ebd05a9c1d26d3212973f43b80d0d19daa812e66ea63b9203dc9
SHA512fc88ddf82976c03362396df0b1f3509e532fb8e743d37c21ccbef21eeecf6b3d6f362a029233dfb7f7855b145395cdde00654847a635029f9d1c27832662846c
-
Filesize
1.2MB
MD562f524bc9034fc72b367772f8f672afe
SHA1d646650864171477dfef92c20a1fbeb2c5e624f1
SHA2563149c7db9a2ea7beb5aa5cd89dd7bdfed2e04b55a2a8b956ce4c0bd1f7912de1
SHA512f6b0942b2cf07556df0b2fe06f15c3c92a0a4c0dfbbe5686a4386b1262ff5b6a5add724126396c91017b22e055570b9b4cd921fa7ff01c0b47b5250e6f57b253
-
Filesize
1.2MB
MD5c8bb000f521b81cfc5d93574f90ac5bb
SHA11a09aa9e3451297969b0adfcdbbff42b70efaff2
SHA256d2a0b41aff3ceaedc393054e9e5c5fc7deafa2466edacc1b545edba43cc51c0b
SHA5126c4bbc361c793c0b1032bd0303180e4ba54e9024d7652f33391e802fd2737f9eb91e85e54c1097d4bbc933f2e373b0003198d8cf498d9649020c9e802b8b9402
-
Filesize
1.3MB
MD5fc0a96e99c4482193416f08d21c6919d
SHA1ed074611fc9a7cda615c2ecd13fd2cf0cab7287e
SHA2567c447f4c8f88ba243998a356a5e16805090b04344e329ffbcbe4539d18356f02
SHA512855253bca116aab3b292792bdb15a8aa49358ecf7651d30faf04dcda105716ea10b238e8e0a11a2ed47131ebf71373eb0d2d484fe00a789cd2a0cc3cb104b7b5
-
Filesize
1.2MB
MD5c220d9353a16b910ffd64092b8c72fcd
SHA117cbcc9c23637f5b49673c5c639bce79c1adce22
SHA256e45620244475e318e80dbe41c1d15321836830f2dd2d1a388158aea070cb6f81
SHA5124754c4c36995e7955e3d5aa11f9fe7956c143a376d8aada8b397923dc0446514badc00b7101b3d434f30794ce65d8e9922aea43542a84bcc325db8f22b7f0f87
-
Filesize
1.2MB
MD57344c0e6ef0d030717997f4766b841de
SHA1c7500267bcc349689650f235dc3e4b7133b17f6f
SHA2561968b54234f5c561813e9e0372727aae4aac74e2e202907381050415fb9b2e0b
SHA51223929d461356421d11b1c83fd3ef6a011d9f3234993d1512fa28ff3c8f87a746c36b9fd5a2631b0eb711a004c5bfa66e11eea6111941e797086600511137c732
-
Filesize
1.3MB
MD5bf3bfafdff60a7d6db8126d041e12809
SHA1610dda0e6b7e97f55565f00be408cc49f7455afa
SHA2568b33db0a86559892916a51abec2518856e677c2cc9957856f81517551f49cc39
SHA5128020579f557df0526fd7d3670b3f4932959a830c03cd2d60c651f29d852afe1cb4bac4d25279762440a197ae4264e8e549fb12c22527969e4b4b33805b57b70a