Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system -
submitted
07/05/2024, 09:23
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe
Resource
win7-20240221-en
General
-
Target
2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe
-
Size
677KB
-
MD5
0570eaafff1e468e4b45554b814035b7
-
SHA1
2ee3b08c987f28942005f08bb2acd4ac4d2d6ee3
-
SHA256
ae72ac44d356e6edc2b0a8943f95c2e0efa2418a6627555f92910a73d84e77cb
-
SHA512
f186ebe50764d0382ddf2bc4a4ba0e597b4851d16ebbf5bb9a5d7ec3c2003de65ec8c0ca798cd97765a5090024ed8e05b18749e49f22539af341acc2ad8fbdab
-
SSDEEP
12288:RvXk1iJKQ1uBeAMlwesHU8wqy2VYCIbvpOBlU1RlgIDMCZgjtGlxHZ9/I:Jk131SwPHU8X31PfU17DhZy0lxHZ9/I
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 1096 alg.exe 3724 DiagnosticsHub.StandardCollector.Service.exe 5044 elevation_service.exe 2296 elevation_service.exe 5008 maintenanceservice.exe 3316 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\2fc65f1ad45b396.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Internet Explorer\ieinstal.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\extcheck.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\policytool.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdate.exe alg.exe File opened for modification C:\Program Files\dotnet\dotnet.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jar.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\klist.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mip.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jhat.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\extcheck.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\123.0.6312.106\chrome_pwa_launcher.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\setup.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdateCore.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsgen.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\pack200.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmid.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdateComRegisterShell64.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jmap.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdateBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\kinit.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\pingsender.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdateCore.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jar.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsimport.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_99140\javaw.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3724 DiagnosticsHub.StandardCollector.Service.exe 3724 DiagnosticsHub.StandardCollector.Service.exe 3724 DiagnosticsHub.StandardCollector.Service.exe 3724 DiagnosticsHub.StandardCollector.Service.exe 3724 DiagnosticsHub.StandardCollector.Service.exe 3724 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 656 Process not Found 656 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1724 2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe Token: SeDebugPrivilege 1096 alg.exe Token: SeDebugPrivilege 1096 alg.exe Token: SeDebugPrivilege 1096 alg.exe Token: SeDebugPrivilege 3724 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-07_0570eaafff1e468e4b45554b814035b7_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:1724
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:1096
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3724
-
C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"1⤵
- Executes dropped EXE
PID:5044
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:2296
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:5008
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:3316
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD579723887e26dce6c06062ae60861bf1d
SHA1fa9da9f2299e7e0c592797252085a1e678550395
SHA256a97c5ab3eb47aa775e9a477d538cf27ebdcbd436a49dc14ccdf28132cde83ae5
SHA5121ce9e0a6330aeff6aa2dff4fce97beb6e61a67da98f95f2b3406175caf8601e57ad16a66208542b84cee9631fc3440fb9268b4e687d49ae7ef0bc558797832cc
-
Filesize
789KB
MD5dbe6dc8cb2f8b7413f909fd266856963
SHA143c51137298c7e264d6fa48ea70b0d0e7c375fc5
SHA256ae4fca3ef54526e84824401ec7bb980b4b34288c6893bfb52d8410cfbf40e06e
SHA512f69f976d07f460e8e207a5dedb7800e9f9b8f0ec8bb6cab1dade690bf130106827f69fba07c8d49504834c1d9f7c580152d04e131454bbc09a885ace2aa5777d
-
Filesize
1.1MB
MD57a92b38d4d7d6495f864a4764e5e8443
SHA178289a7bf9a85ed31f45523580d5f1b855c1a434
SHA25672b3a8f5f98c9bb9ba9d65eb62432f7a36aa6e7f25fc0445c540e6cb18660e8c
SHA51217c4ad079a53f1b0694ff1c48e6ff0f558d0f1dd448d81ed46294571484869f0ef4f63703c3f917565b2cf59f3adcd3fce045bf6f5c5f74eae3021d53c6c9278
-
Filesize
1.5MB
MD5c2654ca0c3d5f10fad51fc0d0984a133
SHA1c2f3878ada0ddf33d5491027f74784b6617730bc
SHA256364c5a8bd4f1ccb100f425da0e4d8eaf5519df7c489536a44c43f87b817bdf99
SHA5127f88dfcd905af82c60d97799baf0025e731195668e06f26e07c0cbb3747535562567df658482b8c4d15db0c7726176cb455e07bf8e0eb0a20ba966ea038f29a8
-
Filesize
1.2MB
MD5c6baeb5d03a77015ecb1180c9afab5ea
SHA120965adecbbd63aedcd8f792d52e67f61268202d
SHA256164f52d028b349b71418b60d9b16ef6ec8b91400b008d365d00548a276079f52
SHA512e42526625a5ca5d77b8f880d4b587da5179189072449cca9b75736f0110f1ed2190278932f91da2450a62a965ca0753db743663bda43beeb8929838b9a2017de
-
Filesize
582KB
MD5f3e6e9983cb447e2c9ddd9377ba1eccb
SHA11b7ead139408795e0c08c8e4cc7362036cfb83df
SHA2563e00328b4977567693446ed4622676d0357fdac52bfea2a47d6cb51e992f2d98
SHA512c1997d11ebec81f2117b1a7388a1e72fae7d7519c6f864add56251b5c27b2c3e217c23d15bc7ddae6f55a91dc1755cfc2696e7fa69a23205e79350113aa18cdf
-
Filesize
840KB
MD5a219d4f37747a40981c431a2a272d84b
SHA101d3d491384c8d574a0a6d93a586d40f1b496fd0
SHA256452031e42f98103a1748ad343966a2465f665590cbc203043d8acb33b94a884d
SHA512be515e5677244312dec71b7c14c952032f8a94b756a21118724e791a329088bcf9183066decf9bf5db7a9cbd12d9c10bb3ab9aa8e53fe9edc3b76d5253adb4d4
-
Filesize
4.6MB
MD510ae4bc700398a6a3708b0a5299fd6e1
SHA112a64703d789720be4bba2bf8a371903e426fc45
SHA2563a4af22e01bec910a8605a22623ad6717fd47521a8ae1f282e051c443ede5292
SHA5129f0441a317fbd5a1400aacb056d33815c6603cc200bc09d2b629b6e89dd81cf448b819637a063a0d70dbe6ed7b5f72b424024b4ae7899f12992cb7878b284732
-
Filesize
910KB
MD51debf9840f44c7c7f0db8c01469a213d
SHA114cab2fc112041a217c379b2d2c75e1723a6ad9e
SHA256f198679cbfbf886c6f762600af66947c448580efe2c8ebc7355eff2edf25b576
SHA512278e1f8211d80aba0b322448dbdb1be9e1d27951f0ec09d9986fbdf272e63d0c836ca226ca3bb9e58f19791c2a6bbed661602874ff5563e0c7e5c3153dc598ab
-
Filesize
24.0MB
MD5478fea562fc80016acb6595223314a00
SHA1f454e29b2eeda91cc1087f8effedfbd0dc8316d3
SHA256a60cfcccef79994f7b52fd96ca089ccf37cff06189a05f0e88c7b07153b86b0c
SHA512f601be971c9030af6ab3c81f3bf1a715aa7c55b43dae44f1a8955da35f4b87ea13e4a0d9005c2abe4646f27b1f7d6d644bfd8c7344c2b9f8b86fcdafd90c2c81
-
Filesize
2.7MB
MD56290851e0d5c4b082db7f9b43e1bca62
SHA1992fea9ea2afe0210a905dae83bb4e6095f04050
SHA256341bbeaf20d3c5274b5e967b0074bc5c77d0faa9ed3efcfafc2fad01bc80bd82
SHA5121136d0b19aae968d82a392623b8ece42b08a4a2bf330b32b159e99298e06e13304c6d0f7c001253c7165e682b932a5801fc218bc370d111c5b184cabd5122c5c
-
Filesize
1.1MB
MD55e2a11d9e93af09889bbde0e2ce9f5de
SHA1c042043d03bbc17371116d43580f76cdd5d4adb7
SHA256b7abbb3557dd2b80482b8f94f5936297a0dd16593a4abb68260249d91ff48856
SHA512b17b09628519a87a430a2810a0f5bff3749c46b5dc25a8cd3fa9340cbfd6eababf67f131c7b46d8cfd8372f76d4e72a5ffd474ed0b3c63ff95b550958001bf57
-
Filesize
805KB
MD508208e498b4cc3895abccadfd0b5e111
SHA1ede375229d1e416c8fc06b94b2428aa4fc4aae5f
SHA2562a50ec626d0e8a6ee6d74221338727728470270da99447b2ee822bce32e16b12
SHA512dc57882174562762ebde4c9a7a8083c231f5d01c4971fd19556da401a598a4f011dc4ad7dc2ce5613a36979ecf7dbf76c06800becc7a7f6a15ef820caa10f213
-
Filesize
656KB
MD533742e6e08a277adb5b918a81ea2abbb
SHA1f94a559fa73eb6d7667562252c7137c7d75687d9
SHA256653d8c3ee414313917061d99d0590c89c8353834cc18400ac228a497e2b8fbc1
SHA5125314bb324d3d163e5f6776a073dd79a2ae536097ccdf3376ea3c71f8fcf420be9d36589c24ee4aeb5452cf113ac8c03e63d066f2875a904bb42ff00438179141
-
Filesize
4.6MB
MD55c22f8134f432e1a4cb5d6ca61f6ca30
SHA1532ace0b7ee09dfa02f4bd1584ffc477637f2fdd
SHA2560858d4c0ab9a1f55b752afaed7adb00aea26e79f26fb67708044192df8818aff
SHA512f28858d3ecdc49124d1a52f19fa5ecb0231c23047a7263737bf88d707cb742372c318f286a9efa783133d4d7037c5073b87b07707cb27e7bd12aee02df91d60f
-
Filesize
4.6MB
MD5148a72b730c0d37272df7bcc8d628120
SHA1256a9aff8cbdb9fcff5ca148c67b76af47084463
SHA25655af29d640c1c5d27a602ed592bd93a1cf6885833ca884f37bd3fe69bba74b16
SHA512c813ced2479e50ac63afdf874288a401b4f1a997126ef384242c16dc191129a5ece3137362e3f132dfc0ccf3139c3e2eb74413dfd1148ab26a57aed3b0e8b168
-
Filesize
1.9MB
MD5dafa30503c0f649e67144a7f34bacaad
SHA13dff742bf11f58ef310ed756ce65fdfc94e7ce19
SHA256d0e50078b6430ace5644295c3ff7d7ded285afd2c4575e696b84e4dfb5d4152c
SHA5120626e6d50f0713b7bf2059d970a1e78adbc57cdb11db47d594baf37199b496cb9c9a46634a07adf68a5efd47bf90b933648571ca1dae754a302633fc4830de8b
-
Filesize
2.1MB
MD5e547f7f89b994ca7bd1002a15a2fc1a8
SHA150cd568f20a5915c5ca93888d6629e4f13144119
SHA2564abc760009211a36c2fccf8f36fa9b6bec7bea749060a6446e4d49fe73c80f1d
SHA5127781a8d71babd172221aabfecade8c067145a2f18af3176dfb2e01fe3dccda02c2290ce7d7bfb99f57042b119fec51fc2b0fbed054b6333fbfeadd3391260abc
-
Filesize
1.8MB
MD5af32b69fe3a65bc7829a19b507d8584a
SHA1b46bf284b2f58b1d6ef6626e3476bf24c7207532
SHA2567bf4f5a98c9786027c1b398f6cccbfafd87cb51f7a266dd500ddac939313635f
SHA512d6750e491d95c65fed87510118ce43ff81b10c630442462c8aa49d3291cb78deaa0933d695248d0274634d82640c999f964e47e9dc8412cbbc95811bbcee3efe
-
Filesize
1.6MB
MD5274a1ac6ca49c8dfe457dc0f294c38e4
SHA1f6ac6c58b5039fea6ce2ae414a2626da1a49ee61
SHA256cb3301a3bebc3540285cf6ae106d5a0fe6e52d02af773c08dd2f270641181782
SHA512564e6e55f8678e48bca4c1ecf478d9b34807db56d5bdc2783e8f9ca994fbf6de2b0e75ad09187b90097e7eb6587d3b24f920dbbcee2d8c6dae36653e8bc321d3
-
Filesize
581KB
MD5e320d0fccacaf63ce8ed3ca7aab74499
SHA14ef961c68d1b8a30372fd762daac419493eaab37
SHA2560b94f7d5b771d3f6e3c2c86776a3ffdeac24280ce36b93be2aad539069278e12
SHA5129474eb9c600192e9e16b9afdecd918451e019d26876dfc4dc71034d2836cde86b5b2f1a14d3e653ffaaff1171cd79caa5ccd743ecabfa3e4f85ec53522c68f0d
-
Filesize
581KB
MD5f24156d4c767751d0f4b94e7df157044
SHA1c08c5437f590f0da62eda3177a53e4ba36d3c02d
SHA256f7ca6015fe9addc35c7ff27b61b18e2a69b7b951eebdd304d95782bad3fac904
SHA5120f33b9357dd9f71de8d95a9388664516a1db14a4e92cc3a6581902e03d896714943f74bc691ed6527691e6d9b8e5d163b7fc5cc2289f4f98e5d8f5d0c5707fff
-
Filesize
581KB
MD509896c023724d69e57bbc217daaa2b81
SHA18fd81636ad4cdb0c2c6258b5618b61f2320e58b7
SHA2561ecaaf9518756702025cd83e74cc0dfab376efac2905d718d24642e2b2612cc8
SHA512e9cc291932053fd2b4545152edb867513c2a70905bd114fac45ab7ae0b4a1522cefb487121c0926339e9aae33d84b48f061eece9b3426b1eddd4896a83eff84b
-
Filesize
601KB
MD5b5f7065fe20b6096ff866a0b0b8638ca
SHA13922eabb929c62f8ec6e9d297b709ea6370ade6d
SHA256c84505c0e6f0ac37a127c7ac9fa7ab26942e90e26896b24c133794a1077d12a0
SHA5121e5e8798e584b1ae0b0f3cd1cbdefbd5ec7fb78136fbdee5174b7e244b6ee90753a839a4767870785e5cbd7d8e713646acd3e259b99f40ee149ba0b08886736a
-
Filesize
581KB
MD5c3d4cc7647087610f0c7749c38c16fe7
SHA166250f9d6cca8b0dd517465b82aabf9c890ff7ba
SHA2569f85b1ff41bda941749247cd1255c6dc0d8b873a364c7d5db60cd320b9613aae
SHA5120350c6d48c5490c0d780c0d3486280c806ab3ade11abcf853c78b827a32c8aa15bae419ce230a9b251fd2f5a97212a0ae6a59d663c456f5c7ac42160355b113b
-
Filesize
581KB
MD556bfca7baf106e40224fda03888d3fe0
SHA1a654b7e8317367cecef3a7d60dc93ca0bd14841f
SHA25614bb01e761eea4ed88d22f4cd503df96395018d91f1b0afa9a6de7d1e36c9221
SHA5124ff3a95dcec87b5e61968a07b4f4f6d2eb0c93c4a5a3641a85fd934dfc806981c180f70285f4c120c368fde53a625995e920b7f3976fd950507994d97a97bc10
-
Filesize
581KB
MD5ce917180585e25a67ea46877874bd96f
SHA1e40ae39cc3dd6db73aaba38b21823e58fa11f29f
SHA25691a9b7ca2982f0ea83e9f9b8d5dd66745e439861c0aeb206ac491b8e4929709c
SHA51238cd59c16b89ca6aa95e1d9a28e8a2481aaba97e6e034065785ec6b3422cc4b0ca5a00f053553d38fb13529e06e9cb93812f94dfdcf4af31a24a95a34c055dd7
-
Filesize
841KB
MD5654423f3ad257a8ae7fce18495ab8950
SHA1dec28973deaacc15e0086b3b3686b8792736e313
SHA256d0c56614c6df8f7bca942afe9b53991950058be3ef10382c77d0ab7634f8db64
SHA512fdb0b7bb62cbaab929c4e20b180adf8698c5e134ca4781fa82cde93adb8b5c95aa0b81ab37931aecef689a6149f80c73a88baf1f64adcafc8df6afa6593504a1
-
Filesize
581KB
MD5d77e603d90ed0b53a82be0255f63da9f
SHA1e17c4d3e0cff11de6b747b542141a38572ab439a
SHA2565a01fee6cc6577455cb693c906d7ccd3ae90d351e938a3539a8cb88db3db79af
SHA512d5bfb3fffb1426bf0ff1b300aeb9e87b72e76b1c4346cf930871c0d1a462e63f6c8651c172ac19ce3bd6eefdc87abcd1b9973bddc7c991854b0c6c03322dbfa3
-
Filesize
581KB
MD5b0d74a48cd844bfdb65e1066d9b00887
SHA1ef48aeca69e526ed080dd7471a3d9ecd489197a3
SHA256b84f707c931db83dc78462b7ad5e01784000d11a6995f5bcf6d4c1b44796a823
SHA512e150549d7a0abb4745d9ca6fbc3878c91940c2e89bb37363e7b97ffdcb9262a4c65ffec512a4bcbc970019ed82aa5dad3b40a58353568609777637544ed8daf9
-
Filesize
581KB
MD5d70f3cf31bdd2aa287101b2106f733c1
SHA1b8c1f7130db883d109925fdad152647fd32cfe6e
SHA25607646b43948d8cd9cc4c9862612dd01453abbf4b7cc29aa47e2cacded8506aad
SHA5126cf9da50deb65c15eabcbcbe62b4606077e13acd2828b6e96390bae0e9bcac13dfe9c69049612036fb121f18da5d875cd2c3aa1bb34b877f809d64dcb173dcfa
-
Filesize
581KB
MD529bb2b7ed3257387cf20b2d68cab2ca2
SHA1250858b80c601e7f3677134a2f9db6687e2b0c81
SHA2563114660f9c2e55f6edf7c269ab8b69567db5432124047819a97f692415d22a0d
SHA51234c33c07d0dc12acfd1df33d61426a488aa1f22826744f7728437df9de87c6049b68be194fb058b2f5006be0c3ea113954d3366bca429993c69055cc3f7bb8e3
-
Filesize
717KB
MD5ad2d26e036c69fec49f3140376cd6102
SHA1906104d498c874ffe0168e9ee2703fc4fb03bb39
SHA2561289d39fd3d0e7cbe284596d1e8843917f6e8098aed54fc446357c4e65558bd6
SHA512d8dc4e06fdbee844c0194ecbe5d54e248fe041f76128b908b79eb10839246e18aca9959425a1324744e8c8bb149bb806383aeb15f1b6301502a06f0e85ecfd55
-
Filesize
841KB
MD5728bedacf7844b17de80d98c691e24e8
SHA1005e30a15d39db7de6ac8b0a31374a3be8be2878
SHA256b527250208eadc8424214d4c02b23e7380f2b01989483b6ae460a38c6c84f4c3
SHA512f8f2ddfedc79f0079f8787277a4f31b89b15030e158be0177db76187318e2545023d2ed95456639be3a6d9f1e7e324d5f8350bc83783ca10d8577f7e6d32bd5e
-
Filesize
1020KB
MD5312391145297fe6e378f00cd662e24f1
SHA1e74c5189cf1df3be9ad7723e7fee070fac5fb673
SHA2562ae411c89b8569b8faca21dbc7d2dc3daac162b507e7d55ebedf2d75de22b357
SHA512021240534b140804fd6f8e6cbca5f707f1a025de38008cc0039181dc2940a6212b84b5025f8e623ee4fd1947d385ace71e28d8307690930b456aff2839572f66
-
Filesize
581KB
MD5d4b6460642c557d7e645514e1422bef6
SHA1aa8ff419fa0b5788d2dc908d6fa6936ce1caf1f9
SHA256852ede5919654a29b5b5716e2f31d40d9c9ad406fc4bc21306cfbe29488ed25f
SHA5125c96e40d9789de6c5d367bb27baad9ee09c9e086fd493eea75b091abc23572b23f4900e7566986f30a7e92d083c144fb5a34df9715c8e04291026d51dece8946
-
Filesize
581KB
MD5f7b1d3206a29111e787436961e2bdd88
SHA1b103a7ed3aae48879ae079775d92ec1da9c03d60
SHA256622d26c0ca0d2c34476eeae00af2f488061f0a4b1f4408b654073845d58ee0f8
SHA51292f0ee4b765a7f26753b9cccbdbfe307f0dccc6955cd1fadb0fa40e60ee1747f688ed84506d3f5c951fddc235749719b9ee96f1b9250ae57cdc6324c4950c86c
-
Filesize
581KB
MD57b207fdfa7cea46a70b5ad6a155913a7
SHA1b2d476d6fe8e5aa466e43b59ad7c4ddd1506dd6f
SHA256b0c77d2e50d1e4e4565f68939ba212c2ac34ec0f09411109428f92f4d0f5cbe3
SHA5127de686eaed76aa35b50ba14efd73429d20423ba287eabee257a8c160506c677baa05d70eb31178273849783aa9502e0f43172c81d32887834da2067390790f76
-
Filesize
581KB
MD5b62ba59f82ebfe108422114347309119
SHA1435d368a7430c5a8531747b48f27e0fc7e73a614
SHA2568eda470c923ccb246e3fad81073558546c52ae589cbab28a99004025b7c89010
SHA51267a161e956d454e00726d539d733f25ac6d68b45efffdc8718d90d99751244ee6caa946b009e0044b066599be61781eeb63401e5034365cdfa148e9cc18c1ecb
-
Filesize
581KB
MD558072715feebb5ac999e9b0d9561a391
SHA1d4f351832b66862f236714a4fda43965a607e5c6
SHA25684ddc77fd19e29e482347a89c26ab6ea5c3418fe5f7534e1d6effbe66501c264
SHA5121552b981f36baecf6bc9410b98b4c8d6f35bcf95912c956a2fdebdfb7eb8bf94dca4afb806410b25b9670ff9a4ad547531e9289a6f850c2133bd5b58adb4c96b
-
Filesize
581KB
MD558b7b2da0b10dfd9f43e3136e3a91f99
SHA1981e14d0add8e6560da090915cbd7d3b2e933092
SHA25630f8f683a4919ab5bcda3dd6a0e7c88c173e8a0384de237e2d819349660f973e
SHA51269058f4fbfee6d2f216cfdd314da558dddc536b2df5aff87e50010529aa53f687ae3479532b87ec0dac7a5a33ae7c8b398266d35fd186ce8599cf9ce09615ef5
-
Filesize
581KB
MD595ed80fdd9b2604263c6a6474d2c4011
SHA1773f6e4b9461cf060737e5c1b460c2ef8a85ff57
SHA256a0aa2aa951363058c3262084b058ffdf7491cd6e9b6489b6555f8fda8f15458f
SHA512fcaa8a803a1807184ec7d7384cb7b187df59174d0fc432163d5d7c18cc22c489327e5490b3838b47c886d77903b5d5ea3e55e2a093deab988fd57772a787303e
-
Filesize
581KB
MD5ef019a901591b1213f7a4fd6a94dd587
SHA130a8bb4eb5a3efbc01b0fd276542914f3ce89810
SHA25644a76025109ad2f8b60770b7c822e50dbca448bca5bd7ab31a4ad4eabd8db67c
SHA512bae52c5ee4543f6551c346611655a681886214a093b719e38a8b1e47e0bf19c544380843b157d71eb52f4b47e0fa4bf0e3f27150285624eb1d57b1107d16e3fb
-
Filesize
581KB
MD54af3453b4fbbfeeca63becd5d161c77f
SHA1c1783e678f2a9f834105d1ea21bf5a33972db433
SHA256ed294d572a2485a0d90a25d0c6bd21df1c5f397c34f0eb414077519bd5dad970
SHA51244ad6dd97e7e7157b96854205e2aa9d865ac43b9231a3eae12ed2e474a41d981a4e8fcbb08a79137824e1b84fe37b59ef1ab770fbaca86a444db7ef286e1c8bb
-
Filesize
581KB
MD5632bff2e0d731ca8c96e04d9599ced1d
SHA1882b31728675fe753ea1cac821ba4850be635a7c
SHA256b40c2c1b1a0debdeb3cdd53bf5c81729713ee300ee02a7597cd5a1692c607e84
SHA5126dd29404f88714e62fe120b6b219aacdb034357d5cdadcefc4d84a27e237d026df24eaf9f21f32345b299da7bf98f0d4f4414b6f9bd10140d939cf82fa0ae58c
-
Filesize
581KB
MD505804cfb994a75d18ea061ae8acbf900
SHA1d1b71c4c115e3227024ba7a884958d82613086e7
SHA2562b89b7d5ae72059e0066c1f5494d83a5ef9033bb04e700c33ab564d6042f92e3
SHA5129f040867b15cd71292c431326250d9b0d9b0b9f64cd5f565fe62f4d75dfc5fb8d2f7c0900b6a8312c320cf41b6adebd8814c7ab7c15f447d6d71e7564dc80726
-
Filesize
581KB
MD53bb65ce6bc9adf983bac67c953d30e9b
SHA15677f4a9e87fdbb8dd7b6a59f580ddfbe55652ef
SHA256b0a84b096b39c2ab6003cd494c8a7cba1a4e90794fb2e0336f6e615bc14d7350
SHA512138026dda53d793e1bb29b5318e94f8ba7356ff35de4d5ea33e9624b2b286eec3df66a82ab302fb2d5f589a71ecef802a23416e5d7c9e20f05aca9e7c575b1bb
-
Filesize
581KB
MD557a6c0cc42d11317b36b9b95c32081d3
SHA1793759872829dfa8469f72478eb126309c7053ef
SHA256bf705690f35bc9fc28a43a831c05970caa2a6d1a88b321e3b5912d1b93058bf0
SHA512e409e0f481646469b99aa4e469b30d60af4f44013bc91be8ae12587188faaa9195a98e4e46a8007c69814fab6aa4b0d180bc60aa449ef4b94b29daf9748ba40b
-
Filesize
581KB
MD5c02cef48f235865789fecaa995b938f6
SHA1d0420816cd976715ce95f80ca1318700234c3788
SHA25689949105ebc3f25a2e84348c5260bdaee4eca971905448c10aba5c537b102fb7
SHA512cddb67626a3d9ca6c36c8aad4a8b0023198864deed7f9e2b7f5a4d805c9a874befbf2ff403f9c83ad1f79d81e3b5e8ab076b868eceae0b4d187a27b9442a29bb
-
Filesize
581KB
MD5735a7c68bd6fa28f4432075f6615214a
SHA1ca78a1bd67e2262c9167e672ac31222d16a0b95f
SHA256bed3734568dd9b3bee28809e3915154729397d50efd55d8745713cdeae684c24
SHA5125818c5a98075bd0827a2d1fdace0d077ec7bcf1db9eefe3ad4d2151883f80af4bb0677245f9afee26ba27ad6e9c04793fdc9058c8aa1722c0c5671bdbe4c6d91
-
Filesize
581KB
MD5bc9632365b582773c993189d342a16a6
SHA116368614db5d1eb470a774d71799bfd2b0c8c247
SHA25671ebd35073a0842b2e63a7508f22fb84fcbe7dfec659d13cb9a918b1b5253505
SHA5122d748c8208c61964588f3ad2f204c68067a83da4c1c7da329d7287ae7b620b1ea04978ee6768bfee471569c15434c1d0f48c8bb9abe2e9fd32d9a1b57b946aa3
-
Filesize
581KB
MD58e481ebcc4a3bd5ff84e71ea71b42622
SHA17c9e51927375fc98292b95ce8132422a81fd01d1
SHA25678ae982b9902a269f0dc6a2e8352424f011c820b7e082c3bc4da0dd718789502
SHA512aab9d9c3e34fff17f0e06d627cb476d6c31e97133a2fcba3e318ef41e23161156061a29612a047d827ed22c87e11cba05fad70094746182899a2ccbd7e13b5dc
-
Filesize
581KB
MD57290f3dfc687dd52e4438106d7f895f7
SHA19ea77600af276635cbb02a80662be32c8fb3ee26
SHA2565804df9dffd68b5fbd61f0722da94cb1ffa93d7b035e6e003d595f6dde18330e
SHA5123d6fc17bedfa96793789c08e26e1acd67c7afc0857d86bbea52d012ac51ffbd91552968f1cbf60df311cd44e3cb4a04589cd5757e29a85fda254b3cbaebb879f
-
Filesize
581KB
MD55aacfb8bfbcdabb2c59eb3de8e66f218
SHA1d81544b7d436f9f99c623e1371575cd929ec058d
SHA256f195c43bdf225d910067bbd93ddd634688e437a46d30e7dfb41073baf8e89c10
SHA5129267ccac9f9a8d7b54aca95e061bc794c87920645a6fbb75c2ea960059d97dd962e9dc039d0d039b292dbf9d0f5d946e81cf757ae4f7ede455ae342764de7d3a
-
Filesize
581KB
MD59ae5851f5698a60300a1f25ccd3957e1
SHA10ad9d73d887110e976b521bb79fdc6ecb9e6336e
SHA25675f2a64c9b687f41894856e90ea13a95cfee76ff53e66aaad4dcdc9587b60b52
SHA512c5239f27bd67e1835e2440a661a43be8e1f66da3899b95aa83e4a9ef9d83bcc2a2b71e1b0c46be6992ec69b59335df59dcd266338e9acf86a90ac03c552dbb74
-
Filesize
581KB
MD58eeec33ff753a8923479730f30b241c3
SHA1a44c5c2a3eb88890bb4e75cae56f421d737baa49
SHA2569827408cb07296684fa504a2f0b0ec52db2f413af0ca11b792c16e3981cc39db
SHA5121ed70edd2aee28396617080eb1c3872ce5564bc98026cb4092ca2bb945c8e01d93f0f3f6caf7bfb72a96b5173d800d2bd2c36f884016f859c48173da7dbe04f7
-
Filesize
581KB
MD52dca8a21d5c13375a879f42a8bba8720
SHA19d2e43cc0b29cf15775dedda38c015c8c253ce82
SHA256497c67e5c1edb1cc70e16049b828c0e57e23cb040b8f9510cd49bffa77faa242
SHA512a271b77fcab260cad8842938e574764602d59ed0c6c13438fbe53a27a69049f2d30c4f19119096405b2dedfb6d196ed3978da655aad5f74ec0d9b3de3b210238
-
Filesize
581KB
MD589d5a4b331894b6213b30615407a297b
SHA13cfe1a53e0729f19dc485b3324db4fa365d9043a
SHA256553abf22bbda96575feedd8ddbfe3d85d2c46c45e716b862bb04b54f5cbcd81e
SHA5125ca986e641fd5fd41833db06aec3fb2438303a068e944369f425984d02f0d18cefd764598058f7aeacf203db3acb7ae72c814cf35fd4a18511dc926163c7b5f9
-
Filesize
701KB
MD57ba471f483bbdc391b9bad576e0dade5
SHA1b5c7b8f54348a1b48403143987c5f4e9d6f196d3
SHA256111e60d01922a65450ce793e06bc7d0b4c3d8969732fb30a557e678eb0c1eb77
SHA512ff77d2e8d94141317b32b571a05c86e9e6b31804852781ac8df287068ea5e72f9f0ad148249897f8857572d2e7a963a8d4b8815224bdc5130122aba131d47a1f
-
Filesize
659KB
MD5b702ec71a3daf19e0acc666895f7d895
SHA1150e0d472c0ce14dc9fc62bd0c8908f4db167e48
SHA256a031d58a36e2836891c44dd0a46baaf74d37215dcc49489526680221e9d268ea
SHA5127fec7cd035991ede9b06b0eed414b0e87d939664e500776e2d5ede430ecd268753692bdf943242580a8b02e92d94494ceb8ee7e3e2e371a134aa4758e76e8cf5
-
Filesize
661KB
MD502bb5a77801cdd89f5fb882d09af1bd0
SHA12f047b2601483717b0f50c3de0be1d3fa40e147f
SHA256d5485071a40af36babbb101e26b6f0417fe0c3ded845e92aa0c88f7ab9593d77
SHA5123a4ca847d6f3e4e671e80916672d942d88d2a51042b5ab4df56d4a79441f995ad9bf3634f39bc7056a6dd12225aafc0709ee3f640a750dd2817a0fa51baa73be
-
Filesize
1.3MB
MD5a2f3f390a3c965f26352196d71d2e5bf
SHA1c74f77d32b14820f1091d7c70d5e9e218440ed2e
SHA256eae348f1888f01f394f349532df4686ca42b401765928abb3acf35772f21ef42
SHA5128bc6456e629abdc30de81e88f898816e0f37c646c5b397883aa3b80e6de88e4582bf1f54f234f34dc52d0626616ca63c9cdc12ca958d6b0a299a543147dddd80