Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
09/10/2024, 11:31
General
-
Target
2024-10-09_bb64fa43d42b05c2de5b49420c6f4315_bkransomware.exe
-
Size
2.3MB
-
MD5
bb64fa43d42b05c2de5b49420c6f4315
-
SHA1
8afab4cad1e1350e097cda0b9c596132ff392735
-
SHA256
86c19efb12ec3e2b7ce9fdeefa64ea196fca1435ace238dcaa660891d21803a2
-
SHA512
330e03cbc1b9b9ef5013e2428c1948a41d902408827f4fda9c85d7c1cf8d33dc48d4f1565f7186bc797f6bf0e26925667ecc894c14807e72de2faebfaad798d4
-
SSDEEP
49152:Gf3ZoG3UCj5qzWt2skmzb2R3NBHCYcMbCqy+XyTmp6IBCM/XxvYT/u1XMHM9:uZP3UCj50WtQwb2R3N9cMbCqy+XEM/XN
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 31 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 2 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 42 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 42 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-10-09_bb64fa43d42b05c2de5b49420c6f4315_bkransomware.exe"C:\Users\Admin\AppData\Local\Temp\2024-10-09_bb64fa43d42b05c2de5b49420c6f4315_bkransomware.exe"1⤵
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 800 804 812 8192 808 7842⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD567a97a04befeabf6ffba3e79a5fbb98b
SHA1f64e4dd2644815f7ee5d7e13cfe7e1c2d5dd3973
SHA256b29bab3e37f1425f7adfde4726e114a2073db9caaec7fe7b4e61e7626bb90957
SHA512d837ac21eeab4b7a969564359c169f06da986d76432e1607d1bba12600b7b53d8091b78cfa77b200f83372c66842f192ecabe892fef3de27f84a8d2f67ea3d98
-
Filesize
1.6MB
MD5c7fa1bb80ea42cd839b8537113bca106
SHA1d371954b11da5939d9d6e12e56e0ad9b51740b79
SHA25602ba7818256cd30bf868f51672360c03ed84b2b08918576963570374480a64dd
SHA512a86e6a1c9b707050087f2e0d3883e2b72294d2097eefe4d9e3ed5b8301adf1d5cfa741d3432f057597a488855389a37bb936a2b046ba2b23442ef556720cda06
-
Filesize
2.0MB
MD5025653e6a312b86373bc07850de965c2
SHA17f42f636f05bae47f2cc3a884791e95116c9395e
SHA25675d9fd00bf848f75df5a420141e4322325473836123f33f1a912d77ec65a1be6
SHA512a53c51f92b5a319d93089be57dcd300eb4a6afa173ddbcd65d557aa84aff38e0234cdc961a9af73ec5e44168bab2d2729b0cf970f2a359ee61c1068189c5949c
-
Filesize
1.5MB
MD5abbb1a5ab023ddc1708bd0d3457d7673
SHA1932d1e140114f1f1cb8b8d969a05bdb1eab641a4
SHA256e6b64ad4adb796d771cd9df5bda3f1c3ad1b01537b64cee3dcf16057ca2143fc
SHA512ea084c2689e6c8341c81fde33f213e0418145c2ec26da541f5daa5700fcbe0e2dffd9a2d9c27fc55ab5e6a1f3b5f15db52c4bb5fc5d819d61f5c383244256840
-
Filesize
1.2MB
MD55e49125f7ef0bc72fbbc5e7d1f6dff63
SHA12bd50ba37ecd7f7808bdfd22a8177dffef59c8fb
SHA256315d53b5b9f70e75f2026c090d2880a519cb700077d4817ac252f65b82d656a3
SHA5122911ec70f00fba4e52623ffee9cf9dc0778272c5366200b5349d1a695e559da575377872bf80f6ca3dcaadb612b4450f5b1b79b3bcfa7540c336a039691efa82
-
Filesize
1.4MB
MD5d84db43e9655433216c57164e770eb8c
SHA11cbe73d82a8861fa23acd78ff10ac72c12b80be7
SHA2562a76c37972306f8146f2848490eb5b30fc2853c9415a633d340f32999c3c9c53
SHA51260912e511db8553be684b0f2f437a4d8288563edfafc7582e2b740493e42d47c896c1174844b146d4e336f3d87f259641d40c883d1ed89e82b8b8ace5253927d
-
Filesize
1.7MB
MD5001ec96d8ed6885bc586007f5acafec9
SHA1a13b22628ad64595af8af304df0c0af38be422e9
SHA2568d90b4f59f533ebc82c09e9bb1cfcdb4b780107eefa8d0813a2b796e81b7be33
SHA512fef4483c92477049267c256a77371bb1c981094c3779f65f382ebcbac609f7b613605663f71171d4e248a28205cf6603c1f857fe17cd599f42f0f980e6e22c62
-
Filesize
4.6MB
MD5a48ca007e44211c76ca4c4daa25e58c4
SHA11f1d16ac1713566551956c549843146880d937cd
SHA2562de376aaeada25bbb6e84e1cab72a7106aacfa8b07cbda83767e7c0ddb28d28c
SHA512802e015b4cb7b880fb898edf4d172f2d954c2a4d69bf2cecd2796b45ff5d1df00aedd1344e21e2cad1d9c11f41a0a31ecf4085a1b05c4c68d2d208f3fff4e9f3
-
Filesize
1.8MB
MD57b4c290ad3fbdc2f600f8cd01e5d9af7
SHA1351498b22397ee16bb07efe07efc3678c08494f7
SHA256e3a7a2b2cf2d8b20e3e0d9856c248b098a2050a76209de0fc579ed3b94a0e65b
SHA5126d91141497a84a6975d7940066c936f05611090282731b53f91c4100d60cf31ced1788af50e0ae1328d322ffbc5881d770024ce9436ef1410b08b7f322432986
-
Filesize
24.0MB
MD51587186171e7f185a5fe3c96b741d620
SHA12431b98b31acffd567ea9f609f13a5fe5337ee4c
SHA256d2d47bd9a2e0252dec5981c8ceb8cd8130f22ce1f41407114b9a031214c57c69
SHA5121df3320425d117da23a9ff2ba1f02ec2bf574e821441532082049a3d8ca0166a294235880fba584bcfd28f9ee86203f6496c8d0305609ca2826c4c2f935527d5
-
Filesize
2.7MB
MD59ecdb7d2ee38f5e8425f7c5c61935c08
SHA130b58db5423467d22334891082ecaa90670c6878
SHA25632afaf44b9f9b1a49bd21fe0a0d178a40cea1647e93bd10a3f12fb5662095d01
SHA5123b2179a735291257ed222da497924b8be10bfa747abc5f074b0123692eb2e7d3911ff4c473d78a8466ef443140c7b41ec835e51d836ddd906c4e4892bca8ceb3
-
Filesize
1.1MB
MD5eee5cf1e0d8d22cf973b648b137f9db3
SHA11199088225d1d1629b4061b3fd627eafbacef9d6
SHA2565edecf31eeb37d991ce44b9ae81a7c09336a2b6c8ca1b0d5e326965485a817b0
SHA512edbfa75effc3a4fd1d7abfe714ddfa048bd0eca553ab5a629c9be7704389b61ce50705c2ed1242f99934c1b381b89c5199e73064b00e1c4c01ec680147c33e13
-
Filesize
1.7MB
MD58fe00f3d7886d0929a4418e6eb8f1144
SHA1b406a2ea6e21702a4f599bdca04c4a613cb04720
SHA256b0cf4ad214d61b23792c049d7d363062b787c6d8f6da9a472d796bea9c5ed5d6
SHA5128d4ded619fa578bfdba4ca7f5f901aa82fe7197a73044fafb373c70f9df2c05b57c6f9601f0f632ad1bf0d31e6b7472dd992358d79856742a0eb96689e368d2d
-
Filesize
1.5MB
MD5bf589754bb761ccdacd5e80d816da618
SHA1209d4d9872d5336d6b86b58d6e84cd88dd8052d6
SHA25661bda49c395fc5aa4ad74b01b123b94f90421d43bcb902fd0f2b44a50982ee3a
SHA51295d3ebec5ddc8f86c13d6037c65814832fa81b7126ea53843266f75436b39bacbac2dcdb6d9f9a41f811d91736dcd90ed110632cb5ed5a0c3b818b238bb0536c
-
Filesize
4.6MB
MD54de27041b9c3817d18847bb6f741e095
SHA150a8f191a85a4916a08a65ceccea01d7eac1c7a1
SHA2560fc8c5820895b4ea3182c0f3465bc0e29f05bd4e5de31a2947a6d94cf30aac95
SHA5120ed54ca979e4e7f551a7a2d79a0e39981b6050e217f2d55de238a22e6a6262e3c33fd0c1cc2b4cd323a7190b5bc8500c8568b578e9bfe3625532ed31f4b41010
-
Filesize
4.6MB
MD5e8331325410abd6ca8ac97e176902e26
SHA1627bd88af4c45a81746a81c73baf91d09f1fb9b7
SHA256411fd34b15cae60e011de2d9bcfd1b89bfe80b578915d19df55d0396f6c4a692
SHA5129f38305fc414542edb347a9c0f10c9c73392818cfddf1aa49bc37c48b0ae3d4ea60cd06bf49c1596e4833c33e031902c82ebb6ce4c12824431cda7424d36b81c
-
Filesize
1.9MB
MD5d0ada8e859f07c41a6d868d7c73f2360
SHA1318f1d63b7167f1c06cc859f4bed4204073ab4d0
SHA256a1447cb7dc69a6e8a6ec9715fb7a1fa04cabda7914c7e636e7b9007a10bdedb4
SHA5121403b6a4919126a7bf4e1b7a5079085c864faf8e17a919d62c1aed775b237d7345b88a3d800c70a9556869ff398208b1546eef1b259c57114082049aaedb1370
-
Filesize
2.1MB
MD5454ee3eecf629daedf8c695bd20002f3
SHA14319e11646c3a4a95059c3cf7138c1d38cc74984
SHA2563a565f7d55472d18a302ded590a60576d2ff0d1ee5d88cd2c434581025188ae3
SHA512ff331dfe4ef3cf7cb2d37d4173e6b21c40e7b9e98e2bc4c453b76eaa51167a30a5041fc3f3c765d20ae68b6260767d3896c88b71b54281421a10091bb4a31a24
-
Filesize
1.8MB
MD50f4d0ca0a91dbe8edc9901ea54045de6
SHA1c0f2fc13be87bd3616c2fd6710d8ac31735f269f
SHA256eca82641d85664ba4c7fbaf3efda331a70dcb7a3b74c4d2b5c1589b89af914e3
SHA512f95d6f963143e284226814b49dd6c3bef82cac39c4f89964df52e16b3817818f8516adb492be9e53de922ecf81146d2c9a3ce34a7f96ea2c5a94cb4a7f808857
-
Filesize
1.6MB
MD5126dd7b4664a004d548c7ccc427e01ae
SHA11a4611afc45afa4d27b3c37a0b4b003bd805d2d5
SHA2569be5ab4dbe11721053a752d2870fae600a1ce4e921b14fe0f6eccd5f60a09a8b
SHA512b1daa4dcca78b8a88cf8a24d45633bb09c96e21836ad455a50a119812ad4c3fa3baadc06dfe0310ca36b3633c4955536e9b8318f5b37bede81308157744f824c
-
Filesize
1.4MB
MD55889cac740ddc30cd92da8cc48838b0b
SHA1a3b0834f2228d57942fec0a6da42d9a239d328ae
SHA256c193571290195b7b3fb697877c30ef07f034f81ae579ba63ace6d1ca464f6836
SHA512cebeb8f6f147c1873395a9d17039d91f296995869185eaae3ef6ac36d708519cda17d40466af3e6994eb795de74621393e15ada811b9953b062a6595845b5e61
-
Filesize
1.4MB
MD50b439276fcc90962f759583781929bdf
SHA1dc50977f27abf3cb400963fd0998016292c40a95
SHA256dcebcc7306673087c424ec67a74d98d487b8e07f3df5d4eaa716a93195c2badc
SHA5127deff9571429aa8ee1a431e9d4ef950abbe725016acc5596be5114c7d42fb22ef2a97526eddcc24989c0ff8ea1358c54bb49d4ef28a6ad1b2489aae0b3421cdd
-
Filesize
1.4MB
MD57ab55318e0d99df0c17b4216cdd2fee1
SHA13c9de8d76adeff8597cbac50a6162dfced67ba84
SHA256a5ffaf66e3db1c1112edbe967fe38026a59b10ca0ee679ebc65eaee71cd840b0
SHA51249c4dbc770d886c160cf2a88b0a1288bc4416b3b541c06f8d653945805b1503f59a7ae18cdd1bf5d170587284ea28925a7c76bab9c97740ef3dc82e21352e162
-
Filesize
1.5MB
MD5db5d4a40ce3e3ae60985197ff3a5f3dc
SHA1defbe831d43005aeebd4780d83cc9eebc0d18f3a
SHA256cc6246b01575236a164118215e3f15adf3ebf512ced07fa85b293c740dce8788
SHA512667c322e4d6ff2de692b5c721a051df13e615ba989f2e9cd31bb577980e17443cb34beede2199bb79f8040b001499544bafa28c0debfaa01c261cf714522dee1
-
Filesize
1.4MB
MD566f55140e19dac5473ecd5d505ac07d9
SHA181a2ba50cc277adb0c1e7d02bb74f2c99ab88103
SHA25618cd0fa3aa3b84c64428aab6dc3d1ae6fd5ed08cdfa0f06fbec352e6db3b807a
SHA512523094ec5006e2befc3bec313b827c3d3c53742b4e9362e8656d2b2fa4608a90c8b423570a1193a358f61d63a5448c00e18f5f6daad6c58687d2e35c7a357fb8
-
Filesize
1.4MB
MD560368feee7b82067322b647b8e3f2a1c
SHA1babdece95df6e96e1ae8c26165bede249f264ea2
SHA25623a79f9549776690852d7a4dceb07817193076329bcda4c266183a11b5781cd7
SHA51290d3ea0cdc34e6ab2901934aaee2dcb7078cf18caeafbc7c5108faa24836c381d6c7952149fd41c6de9272900878710a06245ef80bb5b8ec1ef1e75479c51daf
-
Filesize
1.4MB
MD590cdc4ea0ea82203b619ed9773a26209
SHA13104d1b46ee3c85754d0b70d794739e9bf76df32
SHA256f8e80046142c56e2c7c2c3ac84ec120d6599b70315876bab5526dc785b71f650
SHA5128d867666d723d1e654239c59113ab0f576f1b8a2018a25b549ca3db8ef92a769ede3f209c4d394b9313059e76fde2e3527c0d47303e6adbd4a47fba9cfc152ff
-
Filesize
1.7MB
MD548722fc98c6d28cdceb346469c1ceb08
SHA18d5dd6a9fcac47d8959f8f1dafda7c7f45196eec
SHA25615eb88b93eadbc4ddf897e674df985052c9d9c4c473c94a5eaf637d95eef471d
SHA5126ec06f337e6b16eb48f3c518c38e65e0c777711a1e6407a16159e6c242fe3e21094236a866158295048662f81fe082582371eef5fbb756f642e5c1f794c3f348
-
Filesize
1.4MB
MD52b3f5ea10d8ef202b35819c2aa3ac1cf
SHA1fd91846998f91f48b9a04d839d4af21bc026605c
SHA2567b24be87f4268f44dee615f34248aafb4c26df88f1edb5a83fd560b35fd77e0f
SHA512cea456f33fdf94d6975c35b18b32d514e723a18e9addfe304b7b2a08f1b1810c86de9e04bdd9e2e47a338516137c183e66e1444487ee80f121c6a6f2d357dff4
-
Filesize
1.4MB
MD503c7f558f1a08e738d2718d1fb64ea3c
SHA1a9bcf09bd6fb63b5e504b2df2451f8bcd9725d9d
SHA2567a8a1dfd698273717a80015327f7b7c6f7030decb9ec4fddc21561db6d590c0a
SHA512508e5a40e9831060c0f9c6b31423c4d51711ed719bbaf7f59712a3fa1efc1dcecbda5cdab3b91784fb95a86c6043445eddd69256eb65a90d24a2ed77c5043275
-
Filesize
1.6MB
MD52e43ec9ed1c513e37693920bdcd4ce07
SHA123ce13dd79dfc8a11a911303589578b069bba493
SHA2565c72b227de0e7ea58fb4e10a23c04677f9dc5e239df4fa0549caea3d4c2bede2
SHA51297d46f19b5f50468c28c2737d6b82032fe95da4a08ff5026e97b89fe2fd8797fc65002a1d29d292cb9479f60560940698cd7b7037e4bed02d0c91caeba2e64f4
-
Filesize
1.4MB
MD52b74876d1bb69773b7dfc4717162efd8
SHA1e91f446b6fe8415cbf0909b84505570e0b3f79c4
SHA256c95f78b9335cafabb38172d2e6ccf9b5ea1b060123b05ffe9aa202f92058f901
SHA512f391157d502fe7018e222ff3c48530ed94e41f7ff30193875f98528bca14126cd18ab3987e7acf6feadf693bbb9f4f9f67f0a8a8d344c909505ed63ec2e5a945
-
Filesize
1.4MB
MD5e772b84afb49b272a4b7546c732e53c4
SHA11925b9d5573b7f9c9307bcd457925b8ff17c6146
SHA25653b8c98941970b15234537501995b5d61f813c1a0e9fba426bacfa464cb34289
SHA5120d3fe67ab309cc133a4d85d19bb584cf6bb349afe94e2faa61ffadd7aa54b88bfe3cdf598889504ece31ba9c7018567819315897f4c8a5bdef00fa3258e67165
-
Filesize
1.6MB
MD56e66dce6a5aba128032040c7282011b3
SHA1e8ed3ce1d1599ed8acdfbbea8db19c00bb2ccedd
SHA25603326d182fb8d1a5cd29581e9513c90351d63eb7bc7ae43442712bf87778f3f6
SHA512d8f2e4c2bb10ef57cdb610ffb63cef66d40bb079dc14b44eb83369d9e4f2b3326c59d51bbfe0d676a7d92165485a0ee0cbf966c4e550fa04967a11fd5911abd3
-
Filesize
1.7MB
MD566f21244e2eaa65d0416b1ab740dfa5d
SHA113a9748154d8fb5628334a93679578b5fb363ed3
SHA256536bfb67d550e1a2bc230e96d6be0d3ec56470de8b049bd0b7d5792bf025e540
SHA512fb51c74ecc307b04c53133c6d7acdc7cbff34e001fcb1bea7c2e9735bf56dfa40352349c92409dddfad1726bb95a1878d06f43d73d562b5a457e3a6f8690aff2
-
Filesize
1.9MB
MD5175855a7dfd8589da496018cd16449fb
SHA18dc26a87a8ccecff364cb7ae211282f97762ec76
SHA25632a67a8cb22cc8b0f25f1369fc1b6e458d97732ea8fac30945a7dc16202a077c
SHA512da585965f6c74eecf1d598394cd1d5e59404a342e88cc3f23e789f319a6ec40e3fe890796faa2ef09c35a2c316bc4ffbb60dba960df4081c96331cb9d5ef309a
-
Filesize
1.5MB
MD5bc83e762eee7047ced0a3848e151dfbe
SHA171ded957a3f703a452717661ecd4570f4474b0c6
SHA256f36ea933a30a0fad5f5437fd7c1564f555013c350e9acf12e21768740647c16d
SHA512fb9f8acf87b8312a99f68378337741386b76baf5ed34afae72b3ed86634b3c9a7265353c7df11e5022008ef989c24fcb157d73358268d49b66d82aee066f361f
-
Filesize
1.6MB
MD52f0782765866c79cf14be6550a8bce7b
SHA163e4b6ea5b2bfb194736ed3396a08063af1f2a7c
SHA2565e976ccc4951527ffd327346866d957b86207c1158234ee78ac4f7ecbfef4a8f
SHA51299ac3486ecec179e9383d1e7d5a8c407feb0cd867a34b0c77505e4f1b86b1aacb99a49d1d6c228b6e41dd3927c8caeff0696b0fca8aba9f99ed98345110488e0
-
Filesize
1.4MB
MD5a2380b79f205d317c1346cf3337ae2bc
SHA16709b006620363b868a86554ca058954ef4fbc04
SHA256e66088cdd7f9b83eab920bbea98f00c138a500252cd83aa507f03f8c944a2b74
SHA512a4cb44c18a871817971adae9bc8b6e3c6223608b8d938f22203e6c0244bcbc04ca7b37b993212d32708e66a1cbc36c7ef9bec6264cbb1ff0062b7a6cfaeca136
-
Filesize
1.7MB
MD502ed9bf2bcec22c615657632785c248f
SHA17e823850b8fab64931b809f94e9a4d172e77ffbe
SHA2569d2bd10130f2ea732bb2e214f13e939d5a2852f9821043897fd187698aa5f743
SHA5121fe5f24fed512258744978314dd1a765a1008651ad2ebda71f8fc180a22bc46c4d5422f1c601981cfdf7f374c08eaccb604b84faec22ec6c55ae922e4e9d7262
-
Filesize
1.5MB
MD5a37abb9e9041d06ebab4fb43a85287e2
SHA12629e23de9deb37ad550fb448c63ece5746ec94c
SHA25691d7d7333e8c869e2c33bace6ea1a61f34c5cce0a6cdefe0a466c8bbdcb81f42
SHA5125f596a0c14d78b44970b88fdd07e2604300a2a2b8c5df3827c35090f75a7696e8d221ad7f7d59c862e86d1620e94e8743587655dfed87922e844324dd0cee983
-
Filesize
1.2MB
MD51c3367a69682cf8adab96e6307fd7176
SHA12926c98062207b2ff0a2020cef50f538d9d38801
SHA2560a7b5c5f07bf11e7fa5a065fc6515782173af69224c09e509c5d5ef6118bc2a2
SHA5120845a4c5730d2ffb2e5c20a4d802d4b5c15f32d55d901f89e9b3c7b66b6aa7fea6529bc56bde40a504b5e27fa1547471d9c10cf932dcc208dc300a24b5fbb9db
-
Filesize
1.4MB
MD57f8e53a1d7d486e216a501938807c678
SHA13c0b818b5d080783d8edc538b04c13fead760735
SHA256ba8ad9c35e76e6b8a6891fa23710ae89887cf0d7779550c62a6460fb867a3525
SHA51267a5fd6bb81bea119b5cfd971c733833d60e33e9a4d548d986cbe87de50de926f6fa9342df91d206447370d8033ad04b7436622361c199d73940d1b47687fcaf
-
Filesize
1.8MB
MD5c3b01f10689e1c855ec9edf89a6275da
SHA1aec1565f144b26267567955d49cadeceb9177f21
SHA256fe1b0374059d011b27c306b8afc836490399bf6e6c931c47dee9db2397e34b4e
SHA5128e89615d9d4473371ecf78b99a82e89fb9f4613a658261b015bfb54431d50b59ce4beb81de6847197cd7d6c84d68ab842226db3e0318bcc405cefeb22949f640
-
Filesize
1.5MB
MD51a063ff805f4f6703d84bbaad5199cf9
SHA1c5f0f0380deeca1cda0f0742eb8a2378d717b34a
SHA2568bd0263c9b3ae4910826b15d7e4011faa721e50b6bfc86706a9adf9d98b37070
SHA512626951b17407fa709e581271536373e96cea67b919667cf6dbcc752536950232eefb07ad3cfc24e607a594fb8ea5a22b4456fd8927958006bec4e3ded636c26f
-
Filesize
1.4MB
MD506c1fb92ddd481c109087f65921b1108
SHA17d361daae4e669536baf82609a33c8516d0902cc
SHA256c17d9a6a2de1e29a41b31047e249318c3fab8d546f9ceedce5351983a8871f89
SHA5125bb37e4dde6c004af519d4fda725f85c4b93b636b06deba55f4d42626fb2dd58432be0c9fa04d9cafcc2796c3d8634fde4c46b33105ff0dd632c29fbf34166d8
-
Filesize
1.8MB
MD52ecee1588d62679b24a4bc621edaf1cc
SHA1c944c91ec17a39e3c36b5351fdca42f82e74c924
SHA256676336c518f0c41583810cce89abc1d5e0c0e48cb45585748b7073b2c33127b1
SHA51259901b4f2c5d96ea845a5073675875371f5d414a1d5e94c8acead9f306a08e07fb918698bb575a446b84561843534ffb0ec8e9b7aeaafc43ebff28283f40f326
-
Filesize
1.4MB
MD5c7b6c475ec8e72c4113dfbceb446ab4f
SHA1f92f2ed4990ae32280a8104ff6d65c0a9d31cb84
SHA2562e3278b8b312f16d5221d2559a9c6a257c0df57fd7c4748336fa0d50a268ce91
SHA5120f3a7cc7ff4a83107f03e2d7edbaafc293cd784f05bf558276ff2e537623b2e9cb1dedd982a0ed1ef5fbc9dca7e6cea4b25e9661c10fe836c864b50d8d2d640b
-
Filesize
1.7MB
MD565e363f4ee7c07c5254791880b3eb8f5
SHA1e14486a46700ca5d0dbd8fbd1e825fed656b1c4d
SHA2561715019a0b1dcd66be70375681ce6df675914fec71566c1fdad4b2a7b27fbb1c
SHA512248c7e9677c7125d10bd82c706846b9463156d5cfd4f9d813f15af0c82e5cc6d21c2264a8d3af8cc2fec4a67d39c486fca310c7e385ce1dd2691f2135f900a51
-
Filesize
2.0MB
MD5a0c43e0a743d837f95ae11dc49f3e0fe
SHA132bbebcc3180e56c267a510f2da48cfcb013e2e6
SHA256da066a2fad9c4ea296041df1ab955cf829dc45070537dd0d834a904670a707f1
SHA512d40f9369057618c063c8e326dae31409e3a8dd944e21015d477bbe482fad9b8ddd5aad1b39444544e13ebedd6a5ee49ce3f93af5f1f2d4747c68d9bdd52cdeed
-
Filesize
1.5MB
MD513ffcbc0a18d96de01bc3ea3c9184ea1
SHA182e4322cebf235adab51e0457b5c9c4210ca3711
SHA256d544628dcbd62dce15925f031351a35ade4d01794c72a0332267e13b74c157a7
SHA512056cc6936207e807b5b81ffdaa4421e6e2cbf94a407ed008b0be4a8fc4811389e5037accced951a4479fa6f21be17ccfc1e691b04edfdea4106adfe46fde67fc
-
Filesize
1.6MB
MD586158eed28e5fae01249d64be60a3fa3
SHA1dc9d3667da51bc920aa29892c6d659c8e4506154
SHA2561f3e159032fd4c25b14c1257da1237aaa53d9753b4bc1fbbdfa9724f20d7c692
SHA512908d4da064d9a1afeef2a40634449b2db462027a02f94af140baf46b2e69ce74186a68da78b5c286b068116d6dcf3bb554ee292339d6cf97e4b4b63bac68c614
-
Filesize
1.4MB
MD5fd78149540b38780b4143e8614ee53d5
SHA106af1dc9dd88b2d329b5defdf7ef9db9d344a0a7
SHA256050fba327c2e2f37400e330b742fdcae6bcb119984543d661d3f23ee9bde557c
SHA5127fae1dcdf733b915e537f611cdfbf887660a6222cc5da88aec115705add08ccf5003feebec73b25bc7db5f31bbece8d812fdb015e80b8ba6a83ad1d8854a9b8f
-
Filesize
1.3MB
MD5b4043077cf9b01975878b53411730e98
SHA1cd94340e7e523ce0f4a6ad059d8c870dea473a27
SHA2560d65942b26836e0db9895632bada4719f7f51932744d7f55dc49c1b45dae2aa1
SHA512e23d329c42f0c89232c01eec01aa07244d0a239e33197a665efd45d4c711959d3e672ad4f5dfaea28534b2f82a27ae0aa3133a33aca1f5cd8ae4347d5e02c6e8
-
Filesize
1.6MB
MD5fe32e10500686caf35de6fa1ac084ed1
SHA15aa745c1ff50758c514f5c9606bfafa885739df0
SHA2568f86b33e2eb2dbdfb5d1515e65aa495115dd3af2ec80b1cba86a2b9f47afd691
SHA5123a9ac2dad9204143c833f95f275b471fb068a80175ede0108af3c61f4a8eebd126bfbf9d8ed552326f09d41533d18738df9bdc5db0abf98373ab20e9088d72ef
-
Filesize
2.1MB
MD50621c4ababb8508e9e7b90d0f724d40d
SHA193c77a68e13d3971e3054f6cc56cba01dfa2f76b
SHA256c055d6262662266d2ac0e1293eac01135dd49ba10ed5d113ada5a797dd514b1a
SHA512eca41eb69879d40bbddf774ba9a76c2e23f2d5b71d7c8299615e11828d361c5bd8975cddd1e1bde793d9116a99517b6ace50c4a30b022433967cbe625e576686
-
Filesize
1.3MB
MD5829e40774062d8cac6ac530b00b68997
SHA188a9e81195b31f147839f80992da9830d84ac392
SHA2560159faaf5e26e2127d06e00c0644c8400f739bb116026f90eaa0b75c3c21dc57
SHA512c9fa1ba4eb675d88de4e3fc2e93a914078115228016f866927c479a293ac2768291bfeaae75c4fd0f243a2f7691d7a38b468f696d491be443400473041e2e240
-
Filesize
1.7MB
MD524764c4c459ee03f15c1ab6c1251c61f
SHA13594d9dda02739f1915ad7cfeb07fc1b799b4348
SHA2566804552257f5ceb3e89e55787c5f67b871ca068c6adfccd9ab6138e61aeaab8b
SHA5129db6a12599939de209361cf68e013df72c334ef6d7ff579bb407ba450c0e022e8395c49d6f24e1b89afa809df7563c4d97a5c71222ef4f6044a3f46c822cb9e4
-
Filesize
1.5MB
MD5368bbd4e6c4825f7b0a717531e98e3be
SHA1fa3dfcf941491d267b9d09f3a4bc32587913fad3
SHA256330c25ae408b68a9a99f514f55172b7fa0c8dcbe4b699c5563222486010a679a
SHA51214cb75f2d993b013c9a0fabc5bf0f0894fd77858f34225b9560fc6fcb42a2697439f02e0eb4d324016bf1f5be1a7d64a176a6802c8e88ac9613b8953b51ec18f
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
1.8MB
-
Filesize
1.3MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
1.9MB
-
Filesize
1.5MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
384KB
-
Filesize
1.7MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.6MB
-
Filesize
1.6MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
412KB
-
Filesize
1.5MB
-
Filesize
412KB
-
Filesize
1.5MB