Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
12/05/2024, 19:28
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe
Resource
win7-20240221-en
General
-
Target
2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe
-
Size
1.6MB
-
MD5
09b8910a221a2f6d4d6a4009d02c11e6
-
SHA1
dd564afbcf303db62e60ab18025e47ce12f17654
-
SHA256
907160dc5f7955c72e16aa8fee77d9ae6c4b1da597e77f55a8a96cdadd51fd5b
-
SHA512
87ed7ea5189c0937eec1f73e20bf19dcdf15275a2be59ae5b481f59cef1463201cc729732f60349a470b57ba855d974d1812d958e257fd6505cd5f9ff7cfb0d6
-
SSDEEP
12288:XvXk1yV3VfCfHcqNS0zKepmlDlpVfjp8EizX+AuV27snt5odJMsk:vk1qVg9N9JMlDlfjRiVuVsWt5MJMsk
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 2176 alg.exe 2132 DiagnosticsHub.StandardCollector.Service.exe 4108 elevation_service.exe 4264 elevation_service.exe 4804 maintenanceservice.exe 1808 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\bdf0c3b6bb5459c0.bin alg.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\System32\alg.exe 2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jdk-1.8\bin\jhat.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\pack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ieinstal.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\serialver.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstat.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\pack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateSetup.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\32BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javapackager.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\orbd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateSetup.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\chrome_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmid.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_97390\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\keytool.exe alg.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\7zFM.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaws.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\minidump-analyzer.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateCore.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\tnameserv.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\pack200.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_97390\javaw.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2132 DiagnosticsHub.StandardCollector.Service.exe 2132 DiagnosticsHub.StandardCollector.Service.exe 2132 DiagnosticsHub.StandardCollector.Service.exe 2132 DiagnosticsHub.StandardCollector.Service.exe 2132 DiagnosticsHub.StandardCollector.Service.exe 2132 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 652 Process not Found 652 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2064 2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe Token: SeDebugPrivilege 2176 alg.exe Token: SeDebugPrivilege 2176 alg.exe Token: SeDebugPrivilege 2176 alg.exe Token: SeDebugPrivilege 2132 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-11_09b8910a221a2f6d4d6a4009d02c11e6_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:2064
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:2176
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2132
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4108
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4264
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:4804
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:1808
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD56d2166fbc5878d9fad4f97eb75189bac
SHA10aad152a86699853b42f079baa35397e2b798df2
SHA256a35dca865d6eb4aaa4e5fea31b7f5ac3297806cda98657e2e0d03bddb17f8017
SHA512154a982202f53fa5840857e45e291d133eafb97c892e1f70f857200afcc28ee1730d9865df969d16bbdb21188d5b764584e3c36567373b4904c3b150e925c650
-
Filesize
1.7MB
MD57a494bf6ab3aeff045ae487c2bee998d
SHA1dbaad930c9f875705d01ac7f177054515c13de91
SHA25625905a76c451217223cce7569a83f477db6325738723a2dcb87295288dffaeb9
SHA512eae9cc4b7f4087b4d0b503390723a2c0f09478da606faf385707ae2c9ee74cb885a043a4af3e5900ffb7e0cda1ea6ac8ce46fcc6fe1bfca4ac61b2c8dee4f32b
-
Filesize
2.0MB
MD5cbb3ab32d1465a534b6685c3405fc4f7
SHA1af1c890dbd128732a758f45f2d50a31dc8703013
SHA25666fe02dec69aa205e70c0a828a99ca4dd978992eb5b964d41fefb131499496fa
SHA512d9498d6d820a181922019eae3057fb3851ae693825b7d8737783022adb3e5e0d74c136e131c7f84d410cce529b55fd7c69b60dd5d39b81b3b6b00f76a4e294e3
-
Filesize
1.5MB
MD5222e9b90c5e60e5f7b11b2ec306f25be
SHA1dbbafe27c0014b5504e3ab50ea8eeeabad27660c
SHA25668accc12750f9c5b3991db8e746d2b4c28d77cb3741000b09cd130a7d6913538
SHA51299cfd65374389293aec4cbd36694810fa2ff81d88224731067a7380f2af02e54e4aca9f25dde7db480b688e03e10f80ddb6bf4f51f9edbc634f154c9f86f4f4e
-
Filesize
1.2MB
MD5213b9782c4c913770227bc838a993949
SHA16d11e8e5a564581c0a0ca1bd5c00c77875e1f591
SHA25680fa3213e90c63ff2552199fe9bf728ebc7ecdde51eae6650b1a316d4ef22406
SHA51247888a102d223fec25ab5dea4686eec22f418849bb95ea607542c076bb7daccb85626e40b277ec13a6f328a3a2349f01ee948f8dab2155b67bda1f67e69268f7
-
Filesize
1.5MB
MD5301ea3a7e60d843a7fbe85a8938b083b
SHA175b33a78cee35f1ae3d00a3578136107a636a2ca
SHA256d97467fb94993c2226a3818c0dc006adc794cd995c61a37ff458efa7fe0ecf84
SHA512766547dfb52f00d0061f8f845c0fa952e9ac6efa3eb1127dbb53d1e7c71866371dcecd292433863d762509cd4c25b7f7ea980edd5f4b5325f79a822c219d4a46
-
Filesize
1.7MB
MD52586b859f33c2ad808568bbd138ad7a0
SHA1b0327de530608e941e2a8c8afb3b4c79a2056f66
SHA256acd9e8727bcd2c5ebb457e1bb183fe88f03bdcc6de6e15327a8f152ff37cfbb8
SHA51255b7112ec7f0c2d63511b220d737e4b3a814ba6e2bc0152dce4660b1c4eb14a9f37dedcda90641aac9048d0eef8323e539b93e9f9e4bc6b014677df6a10e4475
-
Filesize
4.6MB
MD5d4511fcd1dcb2d684d7a10534a048772
SHA1b91e723cf0fd4cb65735881e9df50554a2dfbadf
SHA256ff4b71558e7e0ba1cf392f5ea85d20509bba75bbf2aef4dcc8c1aaa43ca489fe
SHA512c0a150bcf26b4538930ca0c873b1423482eaa75e43cb39fc56acb2552e68cff0433a87cbca24715c7d1e50e1e3d5afe14ae8be6fa7184ea1ad697b7e9833fc57
-
Filesize
1.8MB
MD5a98353f2fc3fea3e8199c00ce36f9618
SHA18e6142541f68f8a2329decbec54e57fdeb13c0c0
SHA256b6eb652b4489a7c2ac791e3ffcde439e000b5ab141bc54a1ffde8065414a3ca6
SHA512585be92859a5a67b0906d56105b494c9138c2d5bf9bc20cc171642587d0ba743381fca33c2125b7665a3a96aca2314ade3e8bcdb6ffa0bcca417051504439a3b
-
Filesize
24.0MB
MD5a49f62671dce524b9d156ebaafcebfe6
SHA1e31acb722e1cae1cf808436f7021507b2d2ae0b5
SHA256ae54a39f8b3f2620f8ff3aa46c0c632a241d7669f6a882154483949459922765
SHA5120675d1b3621aee9a175cd5d0920250ff7be42557d0fabb97b458a95e7b3a680da83ebed2f57d3bf06c27d8eb369df600c1aad22b46e004b74a73b5281e84e394
-
Filesize
2.7MB
MD5b515cc85bb5ae34ba25e0504522da34d
SHA167d87842038d014cb425bc3cec4d83469c34b35f
SHA256b4a4ae1af824c451664d4ccb78ee902c861a3012a865c1f660880b9b46b8b6f6
SHA51293434891dc871163a20bce9e42bbf79b7318e9254eebe44bb68da03f9c87a75c82e201f2a595dc2dd1500ab9e609ac9b7af9354af211646bf72cf243ce7ea857
-
Filesize
1.1MB
MD55b1e21dfbfa0a0d8becf42563475d5b3
SHA12396df319cb842a8ad6acd8176d24cfe4286a6ec
SHA256c6c1d8fa19d3429b02495bd89ba156ac75bad793ecccfb00dbe97b0fc36b0733
SHA5126ba0b745743543c49dde4792986dbc174b9542e63c8343347ce3368e3bb7f27ec53a8a5629cda520bd5f291dfc9812acbb5fa330291b3bac06cd795e7f5b548d
-
Filesize
1.7MB
MD5fc7674d112517b78dc10c6d6044cb998
SHA1eca1229d3dd27682f87d59bccdda2c6bb6587187
SHA256f30437d7625a413956f771d0a2e552c2c3e28e65db1cdf60897a1397ee8ef4b0
SHA5127547753f3a6e4c7d0bb098673832ff12003b4f22c1705d912d45f5221eabe26e3e7fc5f29aed44ad9285ede99131cc7fda36f1fec715e27268c64760ff7e5635
-
Filesize
1.5MB
MD51f0b352bca2bb4d8e2afa8432ca09188
SHA13e77cfb95ea45cc3331905ba85f8d5a20c1cedc7
SHA256a9e63264ff0d58d85e81253a5408c4657726a8ebac302e8254035fc70bb20d70
SHA512ed9b1176c5d56eb02af8a39bcbf349cba96541c386bff5658caffe12d1cdce7b47480824f4cfe29a70a16b3005a365138e83ca4edb5b0d98ccea411ea3fb1f85
-
Filesize
5.4MB
MD507ee58329a869ff2ca9897f6ba3fce49
SHA11b4f2999370b65dd5c995b363ff9eff9f19e27bb
SHA25693977a7cfc19bc9b2596fb0c94cc8a5fb9816a748c7045fe275429eddfb93357
SHA5129c9d0d3dd94545c4adc11790192eece223935466f513391b7bf4ac2c1e372d2425d8bbab40ce33c3b4cbdee57847d94de224154809da95149aa73fed0c9892bc
-
Filesize
5.4MB
MD5ea9d6f09223a050e61e95dcfd17eabdc
SHA15ff18f277f2fcfdd4f3318ce16a301069dc24900
SHA25632a0f81ea1bc6d46cec1d72877152acddaee76311ede57e5b1244b4ecbe51ff6
SHA512a4b3ca1381da4f3d297f57e2724233eb01d648ff290f52040acbae4741b75d4513b5d50fd3128ba362c93b60d460cc5a84f7ce764230260f0ac7e99ee493034f
-
Filesize
2.0MB
MD5581a86fad166ff71e24cdc6f6380f3c2
SHA1f5ef3bbbbb1a92a92d12b2fc916f238621026f1d
SHA256b958536fd354c9cfed5114276532184b3fb8f9a4245874d00dbfd2418d4e14e7
SHA512b8bd2c4d2306f7e7accb8f68a95b93fe1899c96db966b7c95f10078099bd5549fe63da4b7c4f216ba79fb794e45216accee15a5e55c56e80b088b30440f0610a
-
Filesize
2.2MB
MD5058f8fbec3b5407d207cae8ead87020b
SHA13c0c9679cfe4d5eccad28165ec6ea2b090852524
SHA2568bf85164e1b78b8a41cd185dc69ca740b8e09aa8b599be52e52045aa6911a483
SHA5123dc56237ff28217ef0e68465f049b88e378df684fcd929b80ccca69c1adb1388ff77c625459020dbc053a1f83b44896cc845c4f8bfdb3a8c6b596576f3872c2c
-
Filesize
1.8MB
MD515887496df7a1515b487603da9605d58
SHA19fee7113d8a4196a3ecda3970b7e748e43a60e01
SHA25686046d1b0b967e48f9a6decbd9501d57192b2f0c6b0b22fdb0e5291ba0b78ed3
SHA5121904a71e58472bf23262f1f54d3ce14324e2391c9c2d7c4f2b87b36b642d0d8aae90d0dbbbb4aa773d6cc4061b5bf62c6573e57f8df74af20036d1aff18d9878
-
Filesize
1.7MB
MD5c491b7ec91c30277eac36d1f09cfbb59
SHA182cd216fb3ee56dd9a95e6b9442167a04a76d129
SHA256d9ca76086931fd87cb9a4b193cacb5f46a9a19c2e5868fbf479b06be9f5ff3fb
SHA512db8233825074bece4741ba5b950fbf24b161d1e926dd0d7e59d7212e34fc3f5c1f24d01429852d6907cbd7d24ad73e05251afdf7d09b88fb6475f8b7f33b8c62
-
Filesize
1.5MB
MD57f281b01d2fd81e27c5071e26c59d0b1
SHA19c3eea540faba67035e3162bdbc1dad4b2a345fa
SHA25688236e9d1ba078d9e18443110b576f1641b4d98bd9d06f2ab795eb67dbcf4399
SHA51215f4537bc30ea2ad3463540092649fe9ceb1605177e7bda1af265eda7cc45da2d1c6eb4dbeb97419d7a93b2d2afabfdf952ca856024c5a99dfc39e4778381a05
-
Filesize
1.5MB
MD50651d74f5a9ec8bffe49048f3b424b8d
SHA176f8db58716c732d7918c5dc6100409fedff6011
SHA256ace89da06699512ac9a8d1df2f7df5dcf6245aa57d5adf43959056fd26d2522b
SHA5128433e668e3fa950e9eef8de3a2f0429a514656688680d3b7f59b133cd27b4f34e48babfdcf7e9ab660b839c97a96fb7a18922cd2d175c563eaf639c5cbd8bfdf
-
Filesize
1.5MB
MD5786889d2a0ea49fc3440c24512deb42d
SHA11a8996fc2e28f2dc5ae3d6d79b39a8d1daf73c7f
SHA256f6e8295d0becd1ddc800da4fa8304615e2d46b800e5333b59c4948597d52eaf5
SHA512754359cf4687aadee6f5c017651016790cf6408fc6f63b312b2670587fd01c111211a682a7ad439f1341e85404dfee4e1cec1bb02fa3e7aebe01340e4115c8e2
-
Filesize
1.5MB
MD5157ca42101fe4d3b004c0ae9764d3f7c
SHA186319732f8c98ffc1c15c605397b90b0df3090a6
SHA2560e8d5121b4be448f87cb8809756b7b926823e3af9bb1015e6b00708797ff86e7
SHA512b955362022d45b0663cf72c2d04c832e7368952e6f163148c068adc8a82a3f347f0a1988d9102970476598637ab3be1010cc2584e62237322273405d073d463f
-
Filesize
1.5MB
MD580e472e885a94424acf6a846448615c4
SHA18ef528ea0809775f9d35637b287ea578684c6b98
SHA2565a353c6a1980744cc22d7d9997d2895ea7cbfc65e938ae257437104bfc4036ed
SHA512b25e8b710457b2be1cc971f0ba1087851445edbe8503819964df12f91fe34bd3abf603215e1bbed2673d7273c98c1422198f08bbec6d67fe32a2dfa290f6a6ea
-
Filesize
1.5MB
MD55882f3feb5acf73fa666176c3d8db406
SHA1b9253700be2889f48bde5c8c9bc968bb75e54b99
SHA2562660a7fddcb9394c7d2a202d82fc27b8b5ae4e62cb9695b07aa6fadf68b81734
SHA512d0182fe283065b2bfee14390e5951aca602ae63b6970a6fdeec5da83342e8c07e0fdedf0fe90b5d9bb4eac0f3f11f7db812114cf1806f8af013074f4f4f41ab1
-
Filesize
1.5MB
MD564ead7c91e2763e4a6d3dac9d42bbf4b
SHA1e7d2fbee808ebfe0a499fb0278807be6e256d24e
SHA25614760673f84c37fec1c9de4f0a75862749590a3fd9dd4a1ad88a5e0a4c0218e5
SHA512e9ab4a7407be368a989008410c127bbbc0e47309ea4ca2d088306379c23022431179ebaddd5d6e4b3530a03e11b1344e0ef7da9de8658760bc7842c1dc7a6ec4
-
Filesize
1.7MB
MD5560b96170d07b6b597360dfa61d32313
SHA1113064658cca4e0690d744e56daffd9ff5153f70
SHA256311b734d7a9b2d649f2cb7037c70a28b051fddc33cba5d4141c12b265dab2085
SHA512b1e72835714d127a1028d09e6fca9c9f5ce23868708b462323ef502f220d5588f0c4b8919a7814c17f9b1005644e4b385d5850af345676eb7f82980105b093eb
-
Filesize
1.5MB
MD576662e52f053bdca3e62743104eb696e
SHA14d700123e8318157c21bb240e519b1b4fae29628
SHA256076f3c0fd9e2de84a6472b90547ff07c13a9761814673b75e3e7886ed6eb606f
SHA512043276a3ec2053ed1ae0e029ebb76cf59de9da02d9129bfe43bc3ba5841ce936d07d49c60b40aa227ff9ef374c081a61c15f9a7da869a5fef5dddaaba086436f
-
Filesize
1.5MB
MD5f7aa0ca4a18f0fb9f45d0230234a483d
SHA1d61b40a297714e8ceb1b2a7fc350e74d11eae983
SHA256e1d0f124d7d3d08a9b4c45e30bf7ab6b9b7ba6a5e48ebd569ff1644ae820cda0
SHA512e9a9570881ac5eef00027ea20536d4f46ab8a79d022245627fa9d1fc9b31ff5ae7bd1502716eec8e620eb6111bee679dd30a389f2eb6f6d09fca39b56f7c88ed
-
Filesize
1.6MB
MD586977809ba52bba849137fe726ac3fea
SHA1dc833d53da5e998daad319f73c24e00e383321f2
SHA2563a0069003d7889e8b2d744d0e85c05679dc005fbc4aece2f41154cd4b4cee31f
SHA51203a495bd2b8fafd0f40f6a67bdedb5ade220a2fd1686d4af046e2b84a40d42b2476ae4b7f401dc7fce98b2e0f6d89dc3cb02523145e0b16daf8b9bebeefe5531
-
Filesize
1.5MB
MD5a5c665ce494ac3dfc05c0a74cd4eafe5
SHA1216389a487cb0ea6b6f4d9ffd2bdbb80bbb47ca3
SHA256f3f583b9c268803910592bae247db4e3c0209f1e453402ad45f4ad3db6d49760
SHA512071630ad8452c597a98064152ca39adaa567e175eb639c2b4c578aa1305b78e5d3107fb0f382027144f905badb1d70b19b370eb51868a239bc1feb1c52aafe8b
-
Filesize
1.5MB
MD531a56b7ab4c9d5491a0306020d0d2b88
SHA13cc49561a8d77d883883da20768f51af0c0b4d66
SHA2563bc60d27ac4b5e204e1d6b5beee10d3ed5f7e4e5771a0b767057c81e2b48d548
SHA5122b04d91215847507efbbbeccaffe1a474a9daca79a8493596a493335e6f63219856479f2caccf8f6eb303cc4dc42cb752a639f44a41c7541e8250e0529a82ca0
-
Filesize
1.6MB
MD54412a1a3ce4ab66e37bb26b6bff53633
SHA11306e150ea39a2189cb85695abd7eb088e3e4985
SHA2565d465f7dac62c646e0d26a95be77dc94f33055bd6f7dff310f6be82e28523094
SHA512b08c420856daeb625142fb61b42e0182fdf77c26ed9253987f5c3a6b08a792df4950576086cc534405f00e4f9e4a3303f0997184392b67adb826058f0c274b0c
-
Filesize
1.7MB
MD5c5205bca95b871bc55958ac975bcb628
SHA1f1738d7faf44bfb7805f5b6a002895e7a1ec84ce
SHA25661217ff93897c84647999f8a4e25b39dcf76d45e584a933419e80d3ad8d956b8
SHA51278d5787f1b3868004b09452d68fd4dc076aa6b0be9f31dc0fa20021023d361baf449e165fcb8253e45d20696104926cfec11753635e6c414d43e283d78c18779
-
Filesize
1.9MB
MD5febc34db838aaf1f354ac3711a293327
SHA1007da2f585760080937e9e6f3c25c61f605c2ab5
SHA256ce42da6b522fb70e23fdab501a8dd835bf637bc64bc35a9f85949c503e627ed3
SHA5129f7e7764a158dc6d34f0e8e81ec2d2d627ef5706b7281c7c445fe7abfde6a73ad901724ae2805af3aef9fc213ac357ed75283b3f161b769a1e1cd721ae1867b5
-
Filesize
1.5MB
MD5a79fb4db568f845eb1d95323ee8d1e66
SHA1e93a01d1ff6e08d0b848671cdb1b4f1e6547a47b
SHA256745ab32b8ef75469d26c67d23aa55eabf69802667a85a1d7dc055252c8b70139
SHA512cc7acbde85375b9b7d60fe31d722e310dcd294210e7423556f2f5456423e2f67c08c3e226444f55805e15729f6a9e15a08b79f548f427e0da5ce10e6a27fadb4
-
Filesize
1.5MB
MD5ce51177c6055f40cfbb0606943f31395
SHA12a19e88c39ff95f83c488b5ed7be273f775ff849
SHA2566344d0b6d3d3cb9b88f6581c1311ab7c0d88da5bac37fbe4eccc8e0d8fe0c89b
SHA512d04d743e8b058ecb05bb9e2e052c927a983d6a7a3e0934c07cad4dbfa57e25db6c73a50722d6a6869e5e2df8c56745dfba93a6c42525fa60e8aaa25f1c10bb85
-
Filesize
1.5MB
MD56626caf0d33797355cd285821f5653e2
SHA15b608f71a92f9445da5d7dee64cb6a6352e7d675
SHA25641e5bbd511c4a0e9d893fa407baa96096189b7e275b77304a7b9a737a6f4795d
SHA5126b08eaac3d8f9584b0597993bdccf571160e909c6f30d6a83f608c0a908d88bd0132fccb65efd2d82080d0232a0cd7068d6e5bac07186d9935d7ba95c0d98361
-
Filesize
1.5MB
MD545b99d0f0d0b76763d08dd106ac7432d
SHA1b14617b4c5cb3c32d0c831b03706342ca9d36cbb
SHA256244f71bae66bda4f3bd696f5d7323b6ef975bb2c5870400115e7c2fdc4901776
SHA512188de21ff4d21ba22e31cde1061a2a7b07a79977430d9774918f75975a617d8bdabce5505fda48caf8e65e4546bff500e0e1d93f2a592edb462de8e334fbaf71
-
Filesize
1.5MB
MD58533426776908919a9d25d45caf3e8d3
SHA13d7a633d543e293cb770c7778303203a48af5faa
SHA2565eb70325ef7be262ca9dd4cee8db0f4859d53d420bd5e020fb0f40735444d94e
SHA5122e46e2df8b90be7883e224cf553b0069ac635201de5472f23a3cff6569a1749bb4c8be62ac6cbab965bb30460fc2c8118c30ce5eeb35b8aa055857a3716d45d3
-
Filesize
1.5MB
MD55efa285b4f980d5692f7ea93c90fb325
SHA1763212b66d9057b3f32bd638808a1f0dece9ab24
SHA256adf145d5ce375fadf09d2dbac0bdcc1539d20190cbc004d1bf69013ee6d41728
SHA5128e97cd69cf027b3990594b20b8b311d8d8a17eee19a75ec1070617874faf10ce3ad818a939b725eb64090bb99df0f2e283e7143293637b2c0dc64bf474b39192
-
Filesize
1.5MB
MD51d4a770864c9cd2d48dd56a2c11b53b6
SHA13ec224f8a85dd07dbc60fe5900efc708699a5a2d
SHA256ee59ae2654c0e22c630cd32bc0ef5f5ee54b4f9bd382d197a7bea5b6442feccc
SHA5127fc8449c84ae20f1bd36f392ec822e038ee0b75cbf964106f6e07677c3401ebb8ff2af805b4d05ac8a9416ebe62500f9f30698e67e02fbde1a1639f176b7de64
-
Filesize
1.5MB
MD5489d5751c3c10b86b8e902011371b33e
SHA186d4457f0199519649ab315700ed89bebd823cae
SHA2562fbf76e2d7e1af81ebe2aa2c217e9500aceeb5e6ee4e42fe01e7aace35a3cb23
SHA5126541f5add639863840a0da2224561c92537517c598966183752703f20542fed7403ff8ee1d6c936f8f769a6ada46a9e181c4fdda084770e5a0152164f3d3b376
-
Filesize
1.5MB
MD55df01454de9041f9b19e26c53f14de05
SHA1e5cc816840eee0d4eb7d17118ecad6ee1b4d79bf
SHA2562886f7e6fcd90f4beab702f1c1e2e2b085d8083a945c0e59c71db00d112ae8f5
SHA512e0a4e50d494a3098da4e8f2bb2c2c833b0915594f7e02a8835c2fa3dd1c899b7a3ae5de340e22dd7d26deaa14747fa2460e32453c3660e582eb3c876a52ec1dc
-
Filesize
1.5MB
MD59e99ed7d600d3d45f9692bffe1bc1cd0
SHA1372b16a62eefb49e6ad1b1c0c5d5a3539ba849fd
SHA256052b4c5e46fd06a713a34160ea6f2836d168fdb2e126168f0c21efdfec9e82f4
SHA512de5c284363259389ae79fe18f09d991b4d4fdc3b0792f164c1ee7e1829232348885bc2984a0f9d41b2e1e54a75f3af58b66377bbbb9cc02f035641a423b562ac
-
Filesize
1.5MB
MD5e60f6abc68d83ed4264bcf40db35ae50
SHA1bf4f83dce4e9ddec4c24d42c6ce0fd06ab1b0dd0
SHA256bc124d43ab8a7c214b89fa29758eff1342e1eb7efeb46064ba4df9070f93f7e8
SHA51207ae80ca7fc1eec31b92ed9244b12953107b4b15e0b7ff40dec2e5362af428f2623535c40b3a521f2f26a85164967499f0bda98d6ce2b5f68de57f23f3df5ef6
-
Filesize
1.5MB
MD5f47a8c4cc880196a3e8bdb3f0298a27c
SHA146598a82b55d88ef53898653f57fc35edc550ded
SHA256834adc32f79125ff7eafc783e0af819d921f763b5233fefec14e682ded71a8f0
SHA5123a15dd2367ffe1c2969dee4f9c949801fe029c13a8b872b05ed32ed4c62e0cc14fa88dfd14bd200294162811f6b3a27ffa9801ac363ba248ce367c2b4ca4486d
-
Filesize
1.5MB
MD57e8e0129680e301b84442b8dc31e8b78
SHA176e0ecca8667ef2400398cca1377d26adfc56f47
SHA2562ef74e7fb348f8563f36288a8b955afad8defcba27d12f25a52f90760ccb6766
SHA512422520e99d9a86633d72479042138a313af9c7a3ce209ba9c47d3f67215a78f39264ac9080ca66c7f8a128d40a2e002a7a0844bd88e4dc13492a9a8ac3c87891
-
Filesize
1.5MB
MD5741d478c95bf88f3f40684ebe0e020e1
SHA1c88eb0f3ae7ae7b6efb60d6864209553c7ccfbe2
SHA2563c687228f9598d6ce180a88422a40c61b6ddb4187d855e6eca23fbcb60bde371
SHA512cc3587c7cfb5859772b2432df908b92516434d21ff3819107912f2ccb5f5d86b644c2daa3dd1a3a0f801c58a9447bd3926210b3595f19d9cfe37a61d020d5d17
-
Filesize
1.5MB
MD55f6782b2f7cb21d33aa8dae693152367
SHA1084107e2dc83e5bf852fc9e1ed1755d4dc891fdf
SHA2569a0ea220b158ef0369532dc217353c5a697d7ed7dbc232ea57724107d9dee5c4
SHA5121d8a76c70f5f00685a4fc96a5447d052a8d619f71f0eaa6a5f43341bd1f2b079c687c337590da71c06b3c3571e2ca1fe246472c9708ebe3d7c6da0447ed19d8a
-
Filesize
1.5MB
MD506fe56fe755c86799f58d2a98a87fe8f
SHA1a7a0abbc04c1888680566e8c57ab76bb21dfa9aa
SHA25616124f2d32f6234c507c0b8d91e7259111967e87d5c8c70070e1d747bf1bf58e
SHA512f63bfcb8e86d119ef7d2abd406c056312658330c42558079443d999dc5b9977548f0ce4ac1230722071b0064803cbe499c6acda479dc4e323178c19e5a1c8b52
-
Filesize
1.5MB
MD5dcfc62b372cc4f0ec33cadfa8dcc626c
SHA1f1409845c12add19c050556118a6d5ba91651ed2
SHA2567a93f1ee06fcda42e8afdaeff64cb3a7dfa6fd8a18635b45d41b72e5d4900de2
SHA51299e95d428235181d676a61c835b27db91abec0898ec6371b94abd4e75bc7c093ffa23ccea15af51e6f8243b08db248c73e54f1a1719a32e6e911adb6777a1159
-
Filesize
1.5MB
MD57e36c8f591277233ae1fd8e2275fb680
SHA162a086dced1b2e7ace3b224621fc6596c322bafa
SHA256c5dd08c7815f7146524d4c9d1070356e678ba6581c7fbb0fdc4a8e14c964e051
SHA512ab7e086206ceeb0760f2f5314d3f45a850acd92d0cb8bb804a5dfb0d7b008279d1f6d3bfcb42b380a29ad0bc8591b0f8fd27624433b9d695be02ca02a09961b2
-
Filesize
1.5MB
MD54beedfd46acd41a20d4b8011f65c76db
SHA1df5256e9c7209275ecb5e7665eb849ac783fb11b
SHA2565a44e2ac3a7bdbd862dc0d4e0ee3d8d49ea68896cc834a8150406d0bfee061d4
SHA512f1b1f9b1e40e85869ea0d8072f68978b8dc074e14f6cb0a8de179d16998b7948a94e816c049103d3b9522f085cfecef087752e6cf4af9aedeb5e0c6a4a04e2bd
-
Filesize
1.5MB
MD524a48ca22353d86bb3c66f5b34031943
SHA1b3d929585cb390935d155a276aafd5a751ecfe37
SHA256e92f7d2c77cea83ae56ab39ecc45523c742ab850d5e675e4b44059786da4fb38
SHA512f3793b707579e22eead91b1746ec4fd68fa359ccbc1a1396e87cfabb927d9b57efed4af034b9dd73d13ac7e077acfaa112ba586abedb75bc1924d9c0207d62d3
-
Filesize
1.5MB
MD5e87955a2733198c70d51faac585a86e0
SHA1b5573b4bc2e3e43490f16b03dcbf243ff9bd2d58
SHA25622378db0535318786ce952531e02b3e157150a91c37cf5e424e2e7d831610e7d
SHA512542193e282bcda7c42e80af5129e60f3585bc3a39b7c9ccc1a198c429af39f393991f9c155277f1b5cede899b20a756f85ad4775afe9dfdba485656a4a5eb9a2
-
Filesize
1.5MB
MD5fe2b4ca1f76571f98cb8d3e07226d31d
SHA15f194e219c5439a9801b19c71393735dc95e02f7
SHA256d0a08f0e827cbf1761b6777b84b1a21bdcc3bff70f7796348dad26226cb5245c
SHA5123199cc51b83981384b2dd2387c80dced88400754eb9e261b7feb0f7a3f8129cc2e1652c2722dee9f655295dc4da187d572e45fc3964ae255e9b396c29189c383
-
Filesize
1.5MB
MD58d635c0f3e4a86eda9ed25c418e0fd54
SHA1466feeecb0f40ee1995e574cd7105352205febed
SHA256906146887f4883e7ae6a28ac891ac7c6e925a422a44f9d7aba1f5ea146067fca
SHA512c39addac1c22e6f93e6bd365ee0b75d16b4be6c988d20e2c8a8dd1ee6af75eaca7c18522dd9f2ed0db3197d4e6b30d5eb0c8b7bc774273c0a3e089e4e69449f3
-
Filesize
1.6MB
MD5a2360a2b45a8fea8818a6b9cbc229f7d
SHA161f3463083f3455310f4c25a9f5bd6231a8497cf
SHA25675c7c582dc75f5f13502c11d953e79fc41dbb64a266be8771712d2192c38f426
SHA5122273d6531fa877fa00e29918db0e76e229be9066ef2c2ebd5a8785b70785c9ad820ce314fad90d0ebe51a0f7a6706e55ee8f2688c9ff58d8563084e5e4bfd2c9
-
Filesize
1.5MB
MD5db87cbdb1d3664ba04e87e231ffecf7e
SHA13c0965581a5b8d54195f9bf8a5d44f7c53aa2ce8
SHA256a9a0a87873ec44f3a507ab4a6e307086e092b6ef7dde8cea7c4ef9934669b9b1
SHA512e7d2595adfb825021dd58efabf889f033e473004636dfb23f59169794e70285fc8e39982d9a8ff7f9dcbb07a5aac1660262e37b83be4b1ed68bd63432d472a49
-
Filesize
1.5MB
MD555423a9afaff636a7a886017a0b01adb
SHA1146bdea1441ce9370ec7e0eb6e9851cbc77b281f
SHA256a1ff87ab6a101c9b0e9416bf54c57b9f6fb83093abe640545282e6960d1454e3
SHA5128f28659f067c500fe8be00ff23a38163fc0ed9b7f05786a351bbe4e65a889eac9fa6c89e2d442fd03a50ca07ac38a528aa02a99e65705b6cf128f49c939437b1
-
Filesize
1.3MB
MD5944d9abeaf1014a0c810e76ec2d3af99
SHA10c730da5b7bdb037828d6664be7f9061e9b85a9c
SHA256b98e0606fab50a36faf6a8a8aa812253a0b7b3f4b3012f6e5ee6bc69c500528f
SHA5121a1fe67d2f0e6b8169404f966dbf0e747b427661ec26d172312b6139ba0b72b89f04e3a3687e75c393e239d71b5c63ca73803d5a75de1d2cce557ea13d899667