Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
24-08-2024 12:23
General
-
Target
2024-08-24_129ea9ff225d7ec1f8b1378d31aae6c5_bkransomware.exe
-
Size
2.3MB
-
MD5
129ea9ff225d7ec1f8b1378d31aae6c5
-
SHA1
5305a7a803a5a597ebf298fb1f725e62c2938a7e
-
SHA256
901cd1d56c07f1183e764ab2ecc299c680b4bebd7b3fff6149c7ae56ab72da98
-
SHA512
d4714a80d147a264895fcc6e2ebea1a10b5cab6242d8df8e157c4602058c0c9e061058eecf97393d8503ccb2d0418300ca215c09b209e1d8a923f38433e0c20c
-
SSDEEP
49152:Lf3ZoG3UCj5qzWt2skmzb2R3NBHCYcMpCqy+Xy9mp6IiAQgAT76sQuE:jZP3UCj50WtQwb2R3N9cMpCqy+XZqGs+
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 31 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 42 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 43 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-08-24_129ea9ff225d7ec1f8b1378d31aae6c5_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-08-24_129ea9ff225d7ec1f8b1378d31aae6c5_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 800 804 812 8192 808 7842⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5026b99312968559d5dc1b696a6fab1c8
SHA138e8ec3265598d48793269dd9d2ca133d4110415
SHA256fc363cdc8191f00f62c288bf1654afdd6f8c0d22dee7dd5ba8a4f14f7548a890
SHA51281ef5293f294c5db46b28578cf44514a4a574673dba36301d81c54d4577787bc85f45e0623b6eb8b58ab87d372bb49bf2b597325c46c397fd6cdb3fb27cd0314
-
Filesize
1.4MB
MD53713e79e9f75257da5f5cb6b63e7e845
SHA1b51cf267b17337fef74a1570b8559f560dc37a02
SHA256f85b374978089088dbfd38f4ffc8ec0d2ee41a559cc37772b14c94b33a351d71
SHA51207c5f6d2fc7da73f3ff868cf4438fc105a69ff083b8d66fddec9c378cd054fbb313e6a1b99ea6d7a1eb8e4265c3ae2da23677608810df01c4f241170f3706ea4
-
Filesize
1.8MB
MD5138a605cb4156a7c97ecdbf30aa9830d
SHA139b7e09de71fccb3fa04d45809c0d76d4afc2fb4
SHA25655ee1c215b9c28ab23e5e6dd97c20246aaa820b8bfdccbc98e45a11f9b56e2fc
SHA5128394f5aae115b0063d01dcbe070763d4449d275621aaedaef6117c2016d6b62b560b43f95f2a7aba391c03f8ac55a819309ce02733ba8700373ebb6ef5ffda9b
-
Filesize
1.5MB
MD571c98892c4d75452a2b5fb7a3bc89b97
SHA1f067a0cc558198753615a129bd6ddf3552aba46b
SHA256ef7cc813b3574040dad119be4f43d7a24686ef1697051a7b551e77b44fff10c9
SHA512c010e98434f6c342dad06b0cea0e67e36d664cf2f3569e1ec48762e65a50efbedf1decbf65486bc8ea419a999c3e412aa91e3af9e9ec409232a41f6ab8931aa3
-
Filesize
1.2MB
MD5548eb7631c59179e8850b37567e54acd
SHA1c3b57f47d0b735cbe751d28c097af1e13b0f48c2
SHA256f0bc1ddd5ff04f80c25ce127c0b01bd92f2a4dc0ced41a32dd6b2f153aa4d772
SHA5125c6a719a56d922e8de81f4fdc2a580659bf13c777bf530307a7b322de09b336ff4a606b74d4e5d5d0c4381280dfc25825fbade115eae50568dcb7882e0efae85
-
Filesize
1.2MB
MD5f2223e452822836b13feb0951fa50fc8
SHA14f62324c5d0e56f9f57615f073170205ba8d2ebe
SHA2564a016e62c90d130cb52e290a7196fbb9613321caf7d44d790a07fcf7bd7b4afc
SHA512a964e71595f66549ebf75d71b7de8b0a084f747e6cb4c4e3c80d5c315723494149bcf1ae0bee5e796b5fe7ff5ba2212827958d26ecbfdadbc74b7c25a64c3186
-
Filesize
1.5MB
MD50a38e5fd226bf3f4ad9f2f8aab94051e
SHA11becd36a289472aea1b217d7f965e678a4ec4327
SHA256cc03c31f7350c5dac6116a704f306af933e9590d8ceaf2bbc1d1379292bae153
SHA51217c568cac45837642596191a0238a2d2177cc33dc7722fa1d04c7a0e52ddf8d24b3e537ad21ef700d703ccd9715d90c38d08c9636ad1455f4c141cc1b3dfad29
-
Filesize
4.6MB
MD5571a48110dc4e16bf7ef07ac423e4881
SHA104885ef596004dbeb6d4dfb9db9ae4d62ef56cea
SHA256300525ae63bea47fa939d99802798714cce961f5397643a94d62aeef3905a61e
SHA512e82ad12750a130ce1f706b4025c9201fed7778feb53386b327f820b93abe8450233ff8428318a9c83a4bfd05564ede939913b549aa986f6872765483bfb86349
-
Filesize
1.6MB
MD5dfaee2b243da847698bb1afc2cabf8df
SHA18f754a655940f0ab9d144772edfaa8f82fe5ab74
SHA256f0a39b90fdbd0a956d10017472c67d29e30137a0b0753bf6ac511fa26e1f7dcf
SHA512d68bd57a23797adcf385a59da365b3f56add3e760c016bfeb06e55aa11661366e9ffd57ada84236fcfab598140eefbb78c95ae22bf969f7eda26b5056e99abba
-
Filesize
24.0MB
MD53a50e2acce67de560a1669490c176ea4
SHA1b35764d046f32bfcec09a6ce09936fa75f4d2ef3
SHA25659254f2a810be3da775905280b60444f4730208d23e900ea3f2f303b2a53297a
SHA5125275eb8c16338d256da722a833b3b4468a7d310ebf37a09df7db12dd59ac51f55b8c3aa850f1fc7d587bc322cdbd3c6c89aab748a013bce0c875a2ab1353217b
-
Filesize
2.7MB
MD55b94afd15bbda6d3e73d3f38cec097ec
SHA180bdec4727991221a9d4021523cefbe06894765e
SHA256fa92c61d6ae081a792411c87af8593d33ed2b0206665764124c3fef8882f31c9
SHA5128abedcc7e536cb233c687d9eeb5efe3e7d755a1fed676888a7ebad0682790291fa326ccdc135149fb101c4137158ec5a821689a16e70f6c035ef0fc40375b04b
-
Filesize
1.1MB
MD56d41533ddb0f2e3a5b2207bd8e50d9ef
SHA1d11e24ce4dff2962168edbe5223de2c0e5069e57
SHA25689dd69402157757384b39a834d1a4399639e8039c49f79b7823e2fcc8e4c66ec
SHA5128e5a5d83193dfa65d949f94c5c250df31b7202b3a04d78f64493b5685994774abefb900ecdf9029f1705f6841e5e63117c4d6e8b2090063515c0eb89bdfe1efd
-
Filesize
1.5MB
MD51374940f59232943f05123d51db7a70b
SHA1aa7fb9e7aa64caeedd864c2065b924796e370f2c
SHA2563f5f2e6e7a9e06b14e5ba636c2de428d09584769544f4da679c24b890d6ee40d
SHA512d0ff861d6dac5787af49a367d6cc24aa46eb34242267221cc6f915b0af030ad16f0bc19575b44bce7c23ad7a1f2e0b82218ea6f320a97103010eda87a44f0a62
-
Filesize
1.3MB
MD5e98cfbefb62c4a63ef5e82d7666a18b6
SHA1524bd890e6685efd8c22ef5db47c4d4dee3cc2c0
SHA25643f53bd142cc5e13daffdc3d86ea2129e9aee9852911291e49bdeae454b39db9
SHA512a91d868cb80b0aaedd33827e74192a812ac19ad0c7960f4b1fc840fc48c774053809598864c5bbbd8916c7b20dd9f021906e2ab1ec17fe9a7aba8cf978b2d40d
-
Filesize
4.6MB
MD516a976c295eac9ae0599e8b5b6ec7b31
SHA1828b9ae9ef6ea0b88a3934212956faf23c1c8d9c
SHA256fe2be1df9cf0ffe756dc97244a03839bdc808414c6c902428cd015ffcec46c91
SHA5129a7fbf0e14e2a9b79f61aaca0886d60940f880ff8e88d0c6d469bb2015bef543232971e4be059bb7b4f1b3dd49c5c6e09e130cc711bb683d24afa1282cada5cb
-
Filesize
4.6MB
MD5ba040b9c16dd053dfed39eed08675aff
SHA1c9e4c258ad4ca747b85c0b35996e514079a02e34
SHA256aa1a07301fdbcbbe45d76e073c9e3b1382906dc497e86da835629ee5b65d33d3
SHA51270782f586a81db4aff58e59b182a359f7c07b9d7d2d226bc3d4672f6cd575229091653bd711dc0472365e0a21c8a4f1af94e9e9c2bb44d2301bd5c2537a6a0bf
-
Filesize
1.9MB
MD5e05c08af145ed4090c8548f7ee03aa75
SHA1872b47121e41d38a7d359e77b8ae626c0e3b9805
SHA25618408f8e27b89c46fef26becd9057d53578aa51d42325f1f28f38c79aa636a43
SHA512967cfd7b7f4bcff44fb46f32709b72605c5d13c1feb36f1da5947ff6381d44fa23aef6df59dc50a68d62421ff5f81b37f0b0f7cf7833ab0af88a92d2fff31050
-
Filesize
2.1MB
MD53b668f909912e2b6473355b8d3d50e41
SHA10ddf3b186dab5d11ad896bfaf229e4915fa7bb66
SHA256d71ef4f50c0936b6a4c8935fa6e96617bc2ae5949e2d6fa6967e51095c49384b
SHA5122e5c3fdaf07b271acf2a2b682c4482337efdf134b0168dcb4d473abed01572599145d60463859f3b3949f75d9d0a2eebecdf401a4e1fddb605958497ac8510fc
-
Filesize
1.8MB
MD5544da9eca1949edb18ae9ae46f30d5a8
SHA1059576f2a7532fa53555ec222fde27e2a91b553f
SHA2565ec103ef0ec361a10e9df33b2a51f573a8dfd17bc40ddb48e729d6ed3846ecf4
SHA5120cf01b58bded64e242b7fc8fb1880b1addafe6fdc573f2ecb1d6c870b856921fac30533a29500fa6063834a55b71f423e21ae170aeebb57429d807b96fe22722
-
Filesize
1.6MB
MD559aa82274190bd1a7c37b3ecceeebb51
SHA1216bd131cc86f6d4f045fc348a68a457cc407766
SHA2560bb0bfa95f219402b4c02bc888a2fe74b8af4cd54b269193b3e05f0d3e23edcc
SHA5129f38a6f2abd3ab2c1533d337e8934cb8d267de881fe5349390235c8eceb79d39ac4c110aae6a7a8a8f32a676ecb02d9de5c6036b80ac7cdf14372ba65e02e8f1
-
Filesize
1.2MB
MD5695d03715f1586d97b9d61a6ed823ad2
SHA1820609f0b8231380997893cdaaf2e7dca22f7ea7
SHA256f5bd2ee08c688da57b1453c1ca5d9683a42a5d548b2fe6b982240f2eefa7f292
SHA51291808e26d45e93ae6f9b063febe41c367b9e666b187c89cb732e5df3ae4920752a2bed480c246b4bc0b678dd709fe1b692f2bc32d0efab22c915ea48c4136e26
-
Filesize
1.2MB
MD53d21c5461c85438b1bad244a13aab26d
SHA1ce3e659c4cac0368bc61a63568d4d68f7e4bee28
SHA256588d4060a46bd9113cc6b993aeedc862681f4df329078aa94d28bf28c8004afe
SHA512c07854a7bbc1b8729bd7c7aea377a9632d47cc9804c5f6669d456698280c1d681f36b8da610b2bdca1888f0bc28fbcaee9dc6089791901fd0a2840b0ae494c5b
-
Filesize
1.2MB
MD5aabc1f59f6e78ddaf0f59a78470dc0f5
SHA19c28855192c89d4da3f55252d1051226b25f1532
SHA2563cdd6d9e0c730e011d384769f56eeb51a9e72359fa72342a0ceb2a4ace4ca18a
SHA51240177521ebb7b651ca5c908c97627091758fdcdc2dc783bb3a7824948d2d0dd98f468870a4bf2277a4ed50124141fa5e0d7519e99ac2e7b7d3b648e9e42a0a28
-
Filesize
1.3MB
MD5f0c00420d7e6437d7145762a8a070a23
SHA1bcd7005e274839aef061ff153624cf30188b1681
SHA2564f875cf5378c8974f2c32fcec4398dca916be24eb7c1fdf4ee6a3ec750634058
SHA51243fef78c95cd8229ace8702789f3a8af265ddf192c699f654d1f3013e6492d439da151581c5de04fa999594dbf5900c0ca82cd99fbf53b2bd11c2ba68dfbda19
-
Filesize
1.2MB
MD5263ab8a075dbdb42624349421fdce465
SHA133921c3991ee8b0e9ae5990d636bd0d4cf3bc919
SHA256778f83ad9a21163fffed7d91ff6c65f9d1fc733d0abdf9498cd3163031163420
SHA5127d7790035bac5085cb25cefef7b0e930937d244da231e4c0f15200e092f7153226f5699f27c2981a77d8c19250b02210bed7ac5d8a69d07acb0726fb3bce2d96
-
Filesize
1.2MB
MD56804b22ae1d2bdb68eebc4f77fdd08df
SHA195e0e57b912f7c82fdb397b25bec81674af3c804
SHA2560d2584856d971180aef4a2297aeb390dd2281cd17b2957928e094a7af8b9a37d
SHA5124d79df4771e70fc5af5e9a0fe870b3f312d08ec349c59a2262a396e924d3e64cae93f70370e542ffd4922e5f4023fa6e623aa698840991a4298c68f8c5ea3145
-
Filesize
1.2MB
MD5f13db691067acba7855fb6d601d18a5e
SHA14a547fc71ecbcf20ade6c9027faa6146f0d0e1d3
SHA256ed61fc7f097d3324dc1797dac7306a768bd6416d44c8bdaeeba6952d97493fe7
SHA5125e8f05499996db7e03515928e0e3560c3a991512b2c57f899874a90c3fa3a9915357858a8cdb923d6fa75a2fb438dc00680acad3a2ea1e7020be6162a05a4220
-
Filesize
1.5MB
MD5374c5c4edb0d2b12057a7e5f9a165223
SHA128532666820200b7bfc9cfb8a444af8a8e65ec39
SHA256398c5dedf274579f15cd69dec787caa18c6cbdf0849959bae041a9f30aeb221e
SHA5122085a29349951f2033e975cc47f975c40f0b9916b1e7e18158d3dfe96a417db55d1fca01e09c2722bfc36382ee06f5dddc7152fc18174290bb83257ed14d57fc
-
Filesize
1.2MB
MD566fd4e960539821f43b577d1bc5faa07
SHA1c898a23a7c380641e7955885355cea0e92ae8838
SHA256b69565207f2c98296bb88433eebb6ac7fa916f30e29d724a272d04fa0553f3c6
SHA5127ffbf32dd4eb266f99199201040fecb6990cd49abf275160e7ff82778ae9b9bde4f79a44650595f34cb05eba580e2f00b4ad70f532005dc7725284ed43dc700f
-
Filesize
1.2MB
MD551d11711a0703c2767c4a6a435a25a40
SHA1c848c3ffbfa96b5863e296e4fc3926f5e7c31bd8
SHA256c1f5f39a3a5eb9c3c9dae1752118b28971e3ab6cb21f47f7e4897756a0170a4b
SHA51243d800d03f812fdb6cba3ff300fb0d6aa0eac739e3185442521fb27d462f483eeaba5173a7b27e74cd593f5f2f3c489e35e5f45f8206de8201dc4fe1ec6302d1
-
Filesize
1.4MB
MD5af00cca923d653f5b54148ca117090ed
SHA1697bd69898177581668f27c16d7c066dfd2f72ad
SHA256fd75a8ea72b37c0124f512c9584583ab941072a426e642213bda325412175dd7
SHA51213920e2a85b355e91947627a2f1408e84dd47e799ee0725b967882f08b49af11adb2f60f8d2524502d051868a1c516339bfe45d8d45699f0fb41f9d00c82e154
-
Filesize
1.2MB
MD585294d0b389229f8aff967c5c90f67eb
SHA1d1aea44b529c93dc23abeaadf977d9d62ad274ad
SHA25605f9e7085885ccd0a882da0bb6b58e562c21a9267f6209999c25f595b0d1bfb8
SHA512cb8ad82a8dc4a87ca001079b6a5fd1cc5ada60ac9a068c8d6a705f8c3f23e0cdf4a17902e5338af739f50c53a097c2f7c1778cf9fb701f3486a76b90edc0fc20
-
Filesize
1.2MB
MD5ba04cb2375018d7b535627ecebe1f36b
SHA194d8dd74634a8bce994336e4dbb71fa972ba3ca7
SHA25633c2376f0c1e0e010ae8ed61cac63ad81dc4402238a495c9ebdb7b0eaf8d78c7
SHA5125dbf46dc19fd383a6d010110cfb66929efb9e1204c440b6129e71f191e49f53ff54e1850ccb4782ea69dbae05a0fb866abc358c909ca5ed2ff238f6b08d6d12c
-
Filesize
1.4MB
MD5e7811615d7a0ea1c05b16dd67a4bc3ab
SHA1581f356d83f0735f2b939b75bf9b7214270877c4
SHA256624635230aa8ba42288f0da98606876bba306cba288357da56fd16881edfcff2
SHA512504da1a474582aa5c5795fcb802536d8e42755bd90926066c42261e5b86737158c40a72afaf6d8bb143a115c030e71a99efc1d8b1ce9454aa6ff54ef985e1bfc
-
Filesize
1.5MB
MD521cac9ed0fd4a8c0ae6f7d6f075b9638
SHA1a0ea9d6d59e54ff21458d2e8a7276d752f86c5db
SHA25690a3490ca93c006d74b5772b4bdda0a428b190a0e6e3eb9351f0355a08796bfb
SHA5120bc68b21a48eac70a364b75737c85d7b3069cd9c5070549ad187b53a0773cf4ba66167293b6d7cc643bf686a50619f38f97f8ebb8bf5f6cc9efb78a24b777d00
-
Filesize
1.7MB
MD5089dd6010de4cf0605f3f2430574feea
SHA10f7906cfbddc63a998f63845f658886c439c4a72
SHA2569607592f48fba0db32afb858818d0ec84b1e994860799f7e1fd23e368ba7e6a4
SHA51235a873a7e9d2b087cc97d233a1159ed40fc2261fe45dd130e31002feaaaf698a61cd4ff5c4288d88d546dcf853d90c286e97b3de715c129b48bdb8fa39f6c2d1
-
Filesize
1.5MB
MD57497a021fa958f9f720e45e6c00bee57
SHA123f64fadf08c65457e517264bd185301ca7a73b6
SHA256983b8adb3d2027c0266996092e5c5d9c955cce1e5736aa15dde4c1ae9350d63b
SHA5120d95aa591870d3557a75b28307c5b6d2e747863925880b83be306ab679336c3c57e0288f7c2aa7463ee079b7458b1cc998b8efb93998f134e48687ee8df6390d
-
Filesize
1.4MB
MD502ade0dcaa452295a71cde1b3b22ffd3
SHA128ee2ddfb5a66a00d93caa52b29e6f41551b3f7a
SHA256fe972b4e61bb447c150f9cdfbeccc4582dbb52aebca6fba77c253bd3bcc2e1f8
SHA512cccf1328640192853e1a42d30968e50990e245b1637a27a8508b012ce3708e77332a800fd58269efd6e5c1338e56d2866a793cef6c76c58e1a0b7506bba3886f
-
Filesize
1.2MB
MD514f145fc7d24f8d3b2ca7bb64cf0b925
SHA17d0c9a0d93057387158e39499b4a77803b68686f
SHA2568a47adf8709b21eadcc381e422ba93ca8a748420591bd3124f8dcda0a50aad06
SHA5122245935adce089007b04fbb35ff0c2bc404b912dcb34572a511f7fc19b2888c9b13c0b3392a4928324dff74505694aa28ea57ca237f13800e8118777d21de11e
-
Filesize
1.7MB
MD5573eb846b02cac6fd0a74f15c17ae923
SHA15c2fd2f976933e2e9e48657d3ed8c3d03ca204fc
SHA2569116b87c3981a74eece759f37c7bff4ec76daa156974b21c2174fc7bdd7eb9e6
SHA512163931c955ba5fbccc624119bcbfc88ebce4a828deab6317d527450b4cb4841695ecf674d472b97c6754038926065e1bf08620fcdfef31236c45c03b89edb201
-
Filesize
1.3MB
MD5b7da8c6ef5e1388b0c2a69d97210d247
SHA1064dceab256ae5755de9cb008e5a823109b54ec6
SHA256e86e7d2a71b5ae9dcf4c5e4697254098a51c9aa95c4b436677b935e022f092fa
SHA5124b0803387348b4946ed57a3120ec7a87ea6a0894f085014c23abeaa4b65517389f75503e66467813f757870282c27406de1fd7363de8e9add9a48796afb563c7
-
Filesize
1.2MB
MD5a25958ad04533162ea642e5c809e4ec8
SHA169d6c81876acb43c5fd2b6a061f4e7e867dd405c
SHA256d2e38b2855e843b6f2d80de7f17c4fb034c7fd42cbce1869910cdcfb47dd84ff
SHA5120dd0516d98f155b1ad4d43305a85f6e528a6b169abf45179a677b05c2d1efc2bfc5ebacc1a4376d9a9ebcc368a533af573498a1809241f00c3d67336d962d6bb
-
Filesize
1.2MB
MD5612c67ee8bf57f26f4315b4b1d86b240
SHA19df5875ceda77ecc2e8390f32ff300a5ec4bde0b
SHA2567394ca1970d5208e90be61b5cc828d21fc12db67e7afdffd6c9b29fd16f0eb81
SHA51257952ef7568051448bcc1111dd95b21a1cf95fa3b2f125f3ffe3cdb675830c46156d684ac72305ca3321b6efadfa7a9874ce864af3dea89c2b0dc9ceb22eb2fa
-
Filesize
1.6MB
MD5dcd8db12319bdf163acbaa1261081f72
SHA149284573a6cfd80041fb1f7ed8dd69dbbc94f5c9
SHA2567e027fd5f210630849e96435958b7bfe378011e1832e18150a3b5707b2ada7af
SHA51261ab83672c01d32bce51489f6a4b57e0a6afed7bd5c431ad04f57b8d129203b29c84159a7f3da3eee7dea13fd45d7f1ad37baeb09c5b30cacbb3f65c2c64c288
-
Filesize
1.3MB
MD52382451d291bef1bbdc934448b0b1569
SHA19529a10021f66e92d7e48246b957cdfb347bd527
SHA25639b287f5c801e989997190e2f36699ab1d2ce83dad30c307496dcc23d9a77ca3
SHA512debd02903be959fc61f7f3b328899c6aad3d269bfa20a0417153729cc7a4f4db9fe244f3a68dea7909d3a7abf2c01eaf884b438d3abdb1589ee0e3635ceba603
-
Filesize
1.4MB
MD5528ba0361d08023c8b06a5aaedd9b768
SHA1cfb5cf44ec325edb1cd474060e1beafcea968a25
SHA256b77b1ed118e5f538347e10d59b908f86071aa82ae63bddd51402e70a85d770fd
SHA5125de09dc8bd95df1e7361d83eb6cce496862377d6f0dd75fd380e017626c131d18b32e7c5a04db4b9295de741cfabb2fcb6a6a8a332e9731e3d4dfc4f396607de
-
Filesize
1.8MB
MD5cf405b9e7eb190f8ebceb45c5027a382
SHA1310d78281a95be150d26d22fe5d44a42c6e3edc9
SHA256c13bc14032e60684ba600e1b9192296a750deb2980e6c3b9ea0a2e924fd70e39
SHA512a01ffdcab881e08224cbc102d244aeb8d4ac9ce950a54c5ee871a1aa5d55c36c3d877313276b5da1d7acd5e79c06e53deb079b1491813f3ea6db24ed50ea169a
-
Filesize
1.4MB
MD5847ba82b7770479808a0342161446e23
SHA1eb37aad9f966b252b9ab3a54c7eb3f33c212d088
SHA256333308ed09ab50c0b472ca756f658c2dde01d193044c2da30732ceee3514bcc7
SHA5121031a6e40af3cd5be980bef480960b342b61de943d5b9b4ccb7019a487f148ceba56c4d56d34c7f2227d847df1c7a87c5ef1152005ab9fedffc3d6eb6ea3d2d1
-
Filesize
1.5MB
MD547ac9a570040e36a2dc29cb137f7d28d
SHA1046bac9672cc6f16866b2e4949ee1f33dd3798c1
SHA25669de954c4481492195c3e0cc313304c3e886e4ada350f3ca9ea9f76b991893ff
SHA5128e871c6c3060f4f8bb53a455c4174d95a02c17421fefdc0f63ec0224662c6975ccb1ef8e88a43b4a6aa69b997f3006cd73a2842eaa865a5ba82330692bb0bd31
-
Filesize
2.0MB
MD53a4daeedd8477174e44e24cb2ffe5bb6
SHA163f5daf808b222de9245074d0acca5ab5a3d59cc
SHA256fe7093ca97359ce5a420750c463bace4ab1f13f6761f5dacb90af7a0a01c2d0b
SHA512e3c3946384f8d9ed8680d2492badad5e02a8682f9fe6a4e1f680420c65cc3ee8e11372b1dd0ef8ddf0d348ea3407d98ef3534949191eebc4db0a16d891b2c418
-
Filesize
1.3MB
MD53f0c0086cf3929119510be09211579f5
SHA1eb911270bed60c3cd9519d64ef947075fa88d904
SHA256b0ca60344a5a173080535dd5da8793a60b0669905fd21e97f1ba219965f37b8c
SHA5121b2fd88347dd08b279b365f2615469d5376821f93fea0bb546d0d22fb0f474833a77adf46e915f95ce914992fdd6084111813183cc018e7ecf07939b6f0951b8
-
Filesize
1.4MB
MD5eb06081546382b5c81c90e6ec6cd43ab
SHA1e0f791689df48c5e03307d61577a972a0a722887
SHA25608fb33ad3a0a44500469248bf7bcf6fe4f53e842810176f45be80f2f57cff7ca
SHA512ebf550a4e61656c8fbe8c96172353676e214a7bd38cfc462a261fa1c7c408af3485fa1c75a1349057b4988f565e7152251b3f542c5081ca33b4c07bf232a428b
-
Filesize
1.2MB
MD5cd2aae2770e00bf80665d00ff5e17e4c
SHA17b4e7c92ae1d4634d28c4febd6affdb14a5772f0
SHA256e95f9719ff83571d4a64555e32971176af8fed222c3fec44fb91d2506bdcbcca
SHA51202c2098fbf6e2001f2988665e9e464b0cc4f1d547fcf075c03480ee6d67c0ba8160d79a9f5416af408074a8a7ff8f8ff7877975228ccb4bb53daefdf6c2a4e03
-
Filesize
1.3MB
MD52fd9dad5bd08367789e40f6bf116f976
SHA1b97e4c38049fb34fa3159edd9aad30c4f4994389
SHA25610a5d51b6e7bcbcc02020297f247b03365bbe10e7bcab9986c2cc32e3afb0f49
SHA51263c924bdb977a3eecae91e0c8bba7695a0696f70b70ef22ff06b94714de8f46ae3a6015c9bc1a16b145490a7d9c4102bb641132184099c90e321b73af22d6d7f
-
Filesize
1.4MB
MD5d367edd3239d420d19f4d19f52c37863
SHA11725f2f1c135074c4e4719bc1687340b0e73e94c
SHA256bbbcb4cc7eb51a8af827ed9904864c435505ac5aecda8df269a6e230a65f26b3
SHA512ce667dd4dc6279eb2e81445d4bcd1ffed16520b5308b40bd3c8c594e2def8fee44534737ed5ff6bdb409d804dafb5f830fab81698a3fa7d5d208581cf7b348cd
-
Filesize
2.1MB
MD50384a181402b20eca9888cc2d590836b
SHA11d7275e16ce397128bec8102cedb390c297392c4
SHA256cd829d0c1f2fc8a4809196494481b28cde154655059a7000665bf61c57990ccf
SHA512c51738b0e52c18977fb42b0350e62d12ee2b928a1d6deb19547c00997cc2bf06c9419a7e6fe6c23573d9e3acfba376064368ead06707455af55e9d0eae20db38
-
Filesize
1.3MB
MD5fa5cbdda476a9542526c97cac300e157
SHA13cd3bdaeb11fc093b397afb182865872ff5d8c70
SHA256dc2ca8eef23534bd07fee9957725f1f981f92cc1f07042645785ea51bfa0e20a
SHA51226666c3cbc29564ecd44621120cf69f99c8c66f84dcc3782cb630f71fa02a71f681a31a1a13efea3cbd36906a3bc4f0c5a2c3bc5e99c41c8b8b61bf6dc079548
-
Filesize
1.5MB
MD53ef28b9e21c83df5a291ff5cad2d9d5c
SHA1ccade2691eb99c01003e4ab504d3367adf1d713f
SHA2560967bcfe5280b73d39c6bb2af977c7f019a305e502265403dca3534bc7736929
SHA51225f403820d08d039ef735f3f72699eaff1420206e062471647d86ffbfed52e7300e2813288d83a3ac5eaf07499bc0e9542ea6d85b29841cdde4ff61abafa6157
-
Filesize
1.3MB
MD5be505c7f55826ba1826b8c8d85e3734c
SHA10fc01c49df1649dc98d754df61e4ef452a5f913e
SHA2568ef151bb485e816b134564a3223af890a96e910cc80ef59fcea96f1dcc3f2243
SHA512caab0772f6d6b91e4cd4a5d9a57de23947343a5f0a94594a7ee6408d12b60bfd3f7d5eefdaa2c71de078e952eec5b9209b70b089df6149404ac198bd91acdba4
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
408KB
-
Filesize
408KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.0MB