Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
21-05-2024 14:27
General
-
Target
2024-05-21_7f012801af4f66f6a2510839b8a5cc4b_bkransomware_karagany.exe
-
Size
1.3MB
-
MD5
7f012801af4f66f6a2510839b8a5cc4b
-
SHA1
11b90e2b08635c2609a37e14f78b11ba63f26727
-
SHA256
5216f36047d10979c3262fef519857c42461071606ab9a680429fa52292f3a08
-
SHA512
4cea4d0da9bf32968dda91d0d9073d5f504f1a6b1ff399733daa24d71b445a69d0c91354d32e745aa32acc6e122fed6e1a4776f03af746ca840dd58998672ee7
-
SSDEEP
12288:5vXk1Q+Xq1gYgR+8DAoczI2ZfnwlQTePINayz+ByIne7xmmZjIUTSl+0/1:hk1pMdIuwe3zfIe7xmvH/
Malware Config
Signatures
-
Executes dropped EXE 21 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 30 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 7 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 42 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-21_7f012801af4f66f6a2510839b8a5cc4b_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-21_7f012801af4f66f6a2510839b8a5cc4b_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD51f8df26c20599d17c97c1399289590ca
SHA1357802943ecf6142225f941a87825e24d9320804
SHA25636e9888c36942501ee85e42cae6876789979804eb24946e561a5a87ca5f5ddfd
SHA5124c9132e2bb2e0c5386ea8462599726ff4a31ea03b8d0a887bcb392b25a509f235bfdb4f4418410a856cddef126b64a34574820dc6ed2b1cb055b0c9482031f54
-
Filesize
1.4MB
MD507addaefcb34370709b24f3339ed99e8
SHA12a7bcf613967d015f6361f0e4a3157b0eed44fb3
SHA2569e7a14bedf2c67d5e940bf3eaefebff7be18119c33392ae59d2b0f3f39749656
SHA51275c37cd37fcb535c93a39e0688110e3f1d208aa3a26e14a978b7d1f45feb63321f024f1b6239c4f03593097a3955c666a41d861bc344988bbb439a48abef9c52
-
Filesize
1.7MB
MD51eaf19bd54c4d7830a0cd84c471fc55a
SHA1c4f06b7b1291cf93d826a41617cb2ac7b228c731
SHA2562b07f222d4c18a270500923f2c5fe477468943459d9dca06aaa070a53a22f7f8
SHA51296f2182de2392dfb50d54f0161af14104d227c0de043fd8c19794450719eb9bbc04e963f65f526349e320b28930a092d543bdb0b82223e50dcf8f631d3abc688
-
Filesize
1.5MB
MD529cc8742726513c757347e755104607f
SHA1fa1a77879662f315cc5598fed2365011af11e651
SHA2564cfd768d5c2b3880c08ee81b017252a83e05c756347fda3fd88e280608613b81
SHA51232ff0d6d344da75fbf61eaed679c6ab89702938a03a88e0bfc366918597050d2cb91cd96153aa225d6298f8d9d521661fbfca7bee209e55fc0c3a7e843f4c3b1
-
Filesize
1.2MB
MD5c8d1a61af2e7c377c08ce70c0944b3d0
SHA145e5f4c960d89f2d29e1e34de54fec63631277e2
SHA25634f35c9cd5b85e85106a54ca4cec4bb11a2168a52f9cdefa4ec5538182c280b1
SHA512146b7ea83f0fd546b29c1fd41806be125f1ace9dd547b09fab95c7b08d6361f61dc7a357c21ccceeb0cb9beeae84268f5a5c24a3f0d0941c4d257edfa1545799
-
Filesize
1.2MB
MD585fe5f44c562daaeabc5b8955fededc7
SHA12394c08d3a0c889c3effef7377269afb2dd65e70
SHA2563d0632bc7f9abc70cb2e080abb983aadd76fe948141838f3710720c924548909
SHA512c3131d98574327bdc8cbe51d027c81b05bab80c987258e56ec77b7c06e811a8facfd4fdfb963efc47629a1827ed6ae5d00679dc2d2f4ad70a0a9cd700f87ebab
-
Filesize
1.4MB
MD52f070af97d3db1d2aa4e8e6375fb9410
SHA14d79c730296a80bdd130c759c2c2197b3db49c5a
SHA256785e713487c0e3afed6c31ef10098710312251bba52d8487e4bbe4bb040bb147
SHA51203c318e569465834d89a84d865c0dfb60789d45eb2978976294db0a921689c69f999b139b85be180258968cde78e9cb9588b4da1d31d3d35619f9d143fba498c
-
Filesize
4.6MB
MD5d4788e4b284aff464945b22f5a4ed380
SHA1797405dba3c021d2bfbdc3fd78dfc4f6e0d56972
SHA256a248eb69f4ed78c2a89b73ff53d92f1dcdc6b926f15dacc4dd5bd595c87a8a87
SHA5129c9ef0debf4e9cc5678b48d012b02d28e3230e1b76be6d58a4368d76523ecf6817b5d535260cfe4b712e22280aa84fb90723d94ba5d46e7c76ecceb438996c27
-
Filesize
1.5MB
MD594aee3b2f4740496c2b8414263c3cb94
SHA1282dc9e6b751b1cfe4fe9f37e1f9255777f4ffbd
SHA256cfc384a4dd24a8b431bf2fd498604e32cf865ed46b4119033481daca9febb07e
SHA51225c9ae92efbe819adca43f0573855f276726749177e7d8ffc523f86599d282ffdac8fd1a8ba74470aa764923d1425d0d3dd5494ee9030d8ffbfc1be114581327
-
Filesize
24.0MB
MD51cbc0757bb87254c8d574ba66c3dead7
SHA1beb7ea3ffcb516c4d682ffc686eb59a4c9f23794
SHA256ad1ecc81f5293e93448e600afe4fd84535e246cf723a1385f856bae648474ccc
SHA51278551c73d68b19b9b62223825f963014cc29180cdb70ee2a9eca8e23b667d31c756db1f16ca63e78068c015f962bbb2f18d2bdba1a0379ec0028730b469fe633
-
Filesize
2.7MB
MD59941bb91850d719dfb41ba41587d7a7d
SHA1ee946d9894cc1b54c2f30683256f419891f5d521
SHA256e938a14b20de0ef305c5d2be4e594dee0acc537987d856520ba72872561151bc
SHA5122d8b0ee246d15f6cbae4557d568eb8f38ec7e5b769a03287a485eec2f5804cdee37c08fad11a7f52eaa237b5dc737c1468de3d1b7c36899939f1ca5a59a717f0
-
Filesize
1.1MB
MD5822d748673b54f1c172881e3b346a319
SHA1984a182f4a52c06aef4b6fa1e437c0e0e2b2ffac
SHA2568aafcd63415a61fb4ec3de51aa4f943a5f57dc14b30e3b10ff36a80cd37b3d98
SHA5124874eb868572c3af3e3f1f85c8735251865ed6e06f8b326ebf49f687e4799185a69414cd1c34b2e6736d4b54f13026e45c855b4d37404d24b2e23d5d9d1f2a97
-
Filesize
1.4MB
MD5b313977eb0d48b9db3c1ad316ec4044e
SHA162711cd52110e468ffb94fc6dd6ed14d07e0a48a
SHA256e253f5162a962311b85fe491f32498812ff75840efb154ea110890b2c5a49f3a
SHA5129d2013d41411111530604f6e83db89535e2bf63480f608e6f6fd3a8e57c79a856c26f58836e552d041d336db3e3d5506144ebcb1ee22be92bac7665cc916107d
-
Filesize
1.3MB
MD5481ac7adac3c23162be1818650da51de
SHA16b16721a06ee230a5643883ef14dabeff20693e6
SHA256e36da49750f34cdebd66010bf143015437121b71f0178fea2b24519149b37530
SHA5129aeb21d72612510d0bfdf47ae8e8fc488690da66000a7ac9bcb95943e26b60b88124d7e3b6971a42b4ecf5c31e2942602db422eb43ea434d2325e4bb6c5482ff
-
Filesize
5.4MB
MD51a6d89b1785eee7d0535c507b9874705
SHA16162d00e646373a8914e6ab036ced9061e4669e0
SHA256c0134a1ca84273be46ad3e43ec9b5fade60e0bfeb445d31fa69f23ef289fb608
SHA512788537d5513afb962d770763f7eed2af84800a49e6b0c379e9c1525265fb3100d861317dfb41026c42d2ac1bda0031734ed64f9b333083a3c91b7b1643ad7dfb
-
Filesize
5.4MB
MD54961a7d279c793322ed369654a476176
SHA1c563258167ba14d58c094fe2f649f81332f7511a
SHA25627b9c7f28ddfee6e636cf56f59e7b60a9dccb3e449080f27363e903b93b5b51c
SHA5122d79e5487641bb98e178e5aa33b515936d0c05a2e958d1d433c4d95c4dccc50b3713ae3f70fd4d6a220c3bf75cfad27fbe81ee57bf56f04ad3517e40eaf721ca
-
Filesize
2.0MB
MD5d9654c779abc9e2f73c1c98a8614c3a4
SHA1f610cd5efd72919143bd5b4852ac4b9ed4940c2f
SHA25622d7e0a12e35fc7ce598502de904d83420b0471fe0ba8fc079c707f4e468088d
SHA512df01a3861b2febd68138398dd79eba8c1368e3ba470919341145806f4b342396a947e60b7dcc3894d615c40e7bfafe05b422a7eb388a0d4149842c4be7dbfb29
-
Filesize
2.2MB
MD57131a74f6777e08d682629adc2ac3ddc
SHA1af9cd21a816477ddd14c6f0f4bcd4de8e9554d05
SHA256f8b368fa64a430de42c016190211140c0e6546b6b3da43f28246ae50542cd04a
SHA5129af5f4e11a58fbecb14a8d6f979935d6272d4c9857f7347670e4c31f439acc8428c4e652f58a2a5d59cdc841ef88c29a1352ca3b767721fd0d3cdb4bdd98fd71
-
Filesize
1.8MB
MD50e164e70392576990e65cdf86eacd076
SHA138a5e57dcfff735c10c0a43b89964eceb2d8ee26
SHA256af521e55c5fbae56e4778808b10b79dbf301c84aef2f5efe7bcf527a081d7505
SHA51287f8cceb93a9976f0bf94899ed3f9777811d2a00ed31ed9ae0ecf1fce6d5b54b0b2ff13f5bc16a344e96340e4b04c0cf13909f1e9725045c00289af3f76ec3ab
-
Filesize
1.7MB
MD59d6436b1746236c88b3d45811f1b6e09
SHA1dc51291f4bf0e585d1cbbc8dbe7625640250bc51
SHA25671563c126ce842a8899e5be4637e01348b0582c7369e20fbdde8920aac7fd77f
SHA512f5baca0d3bef559e85fdfc42cb546a6d5a301fe085414238d8ae705a9a357ff33cf83eb4f629342ce40d9e037d46046f600fab7b9b845748eeb6614d282ac4e7
-
Filesize
1.2MB
MD57aaf892d7f987c864cfb7fe306c03759
SHA15f440697127b230a0a8965e25491c85776adca34
SHA25639c5f42d7c7fd9ed2da93d29cc3194155071288fa306336a8fdad586b6cc2fec
SHA5129262565bef438bf1b2cfba33bcf27ff7dbb33d2a2c7fd3226a6e07b832b7a81367d1ad754f2f940821cc8082e275eb0de9a1560e6b79120652275183e62526fc
-
Filesize
1.2MB
MD58921d75a2d07cde6f1990c0e0901ea2b
SHA1f9926e45d0b718c91d352c96bb22ef0f556424a3
SHA256a45939cf5d5403047c1196d9bc95f15e08f85d11f0fd4226618f3e5fd4e190da
SHA51215f5db336f602768edea36079fd73056e3ec925355608a698795354e9e34ff75359a1806eb11a21d52feca64297fbdd8b01d6d0aca4e3ca16482a2c60f576049
-
Filesize
1.2MB
MD54e5aeac7b73cccb9c1076295d287807c
SHA1f8952102b3c13f9f8644d08daff2c0c3859c439a
SHA256687c1724bfa1005b9849861b86544089a3eab222521abf8283127e554efd7f2e
SHA5122d2702c230e66e32da34869c5c897aa49f19394bfe056e118f4e9ea8d6323ab44ee2705c143a0b37071f92eb2b8fa828c8caba9e8a7428014a7b7eeacd6c9aaf
-
Filesize
1.2MB
MD5ebb69114f2611d08c3560447a7bb9c8b
SHA1bd6409bb3bfba5af33f01ab3d7865c6a6830f9b2
SHA2566523978a07646b43b00e87a0d1e5d9608aac7a323cb9f339191bb59359023a90
SHA5120aef47ea60a58f11badd1ba6afe3b131a6075a04d2f5b95aaa499a88c9952fd27bb2ee98a097018562ea42b9009bdc2b21350c3dabba4c8343c8d51b6a5040c6
-
Filesize
1.2MB
MD5b212da11986e7a4f022da9bd3b45b8d2
SHA18b25986b1e1224057ac2f4a374279f08ca08d79d
SHA256978fe8a05ba1071630e7e949a70ed05e99cecb11ae8de3dd83faa95abe9e73fe
SHA512ec011cfae83669d1196416aaa96c5bb9a50cf4a2613dbbaa969130fde0c2bcf02ad15b97739e1fec3d9fd650dd7d5ae7390289a99b102f06589a8594ac363f70
-
Filesize
1.2MB
MD556377f95638483ad80897a17494181a5
SHA12dca306032cb57cba56abb5862e1c8bba81fd919
SHA256ef1215b569c6ab30ce1b9e26096276aa249d1a86c2c2e7d85f07b6637457344c
SHA5128c7122239d3d6c838b44c3c285cf8658a1088448f6e9267cd2999fdb499456baffcce3a942102285839cd489c74c69302b2fe00982ae26719c26308eb1548b11
-
Filesize
1.2MB
MD52221a8949dad4ffdd846716246e58eff
SHA1d66757ab4b7db78b104e2a24d45c3429f432d640
SHA256157b4b2abc02ac0c791dff16e3b0725efde5115049879c89dfdfa3c87d5753ee
SHA512a2cc4349f4d0cbe01fee93150e0e53e7477aeb5af62558e59d2e1aa962870f39ec9a267983b98b00b81dfc121aec89b090eaf9002c298f3267a345f07c387ec1
-
Filesize
1.4MB
MD5d35fcb6a407b214117dd9bdce314f4fb
SHA1031da08e5d313abbb26e5b2b5ae8ec507ce6c028
SHA256c8cfeb37c4251dd70b3be13c6bf3257e3a909f850b1140aab74f59981f9e89b0
SHA5123dd8db089ab3ef5b75b81878451bb8f0dec377f98a0d64018cea60325d45338ec1db96f9df589fad076c5a95b3f8250fdd7820e64f96abea143b88fb717d0263
-
Filesize
1.2MB
MD56d946e977708da671995bfc6a5940677
SHA1f0df6aea53f3eb7a7170bee1578a0290c55bca9e
SHA256f5854da877e39579f7887942b0fb34ed244d81b80e667a3400fd17788413812f
SHA512b666036db0e2f1bdb761bd2bc20f98a1745f577dfb159e0ba61ce008ebe14e9882b46915fae8a4bf7c3de8227cad3e5eb28d5c4c3679e07f85323c77443746d6
-
Filesize
1.2MB
MD5041630a5343a8a91a5d49e7e45d3c9a6
SHA1deab28556f8ac7f96679415ea1ea43b7d624799c
SHA256b32cee49cf1e419e40aecf7b3432e2b48fdb86e4be00d59c943efbdc3bda67e7
SHA512608e55945d40ba58552320bb7564658609fd0bcdd17bd5d373d071e04fd1dc0b388f83ba4fc217f518c446b18ad51d42653ead11bede1668a4ed1ee1c8ef4cb9
-
Filesize
1.3MB
MD51998268f845e487ca14eec6bffae1d4f
SHA1c4ed1738eb62aa321ef87a90ce374bc4c100dd50
SHA2567cbc91b75c86d765797c12d45e31655a2f2516862062b43248baa4285b25921a
SHA5127b1884f91c31832571f423651564edd67abbbd03c189771e92a32c9555593af18d026b1ec4f0e63a64541fda2a0d083ea7e9b9deea5992f96c29ae2db6d9356e
-
Filesize
1.2MB
MD57ba7c1ad70453022642830f454aff1ff
SHA108ba21e8dfd483780ad1ad64971123c9aa213106
SHA2567012976de107eab03dc32a2d6a6cee87c404f0b8b4841ea449d222e18efb8984
SHA5126528fd1ebc97fe4334553295089d60ca4f785d8917102013d4c91094123a7d8184c7630753feba1452e06b62496d55d119c09f80c704afd3d1ed38daaa5f455c
-
Filesize
1.2MB
MD542ba01beaceeb7a56dd599971debbf78
SHA1710d013c1bb089b49dc2aff09ebe6e156176f592
SHA25617a712db9e83601d1c772472c9661abf144719437ab5044b8aeca05b42d96637
SHA512d8998cf08938c1d7708eeca66e86099a83a8b9a04dc20f38ee2ff7b82bfb8993359bb285971e5e5f01000a0c2ee2da3783e8970af8fdb8c97b8ebc52653ea934
-
Filesize
1.3MB
MD5aa45e834068b36abc166f79a950a9c69
SHA1ee1e55a6fdb96fefbdb154b53581631e2afa99eb
SHA256dc293df0426981e978712212ee8a0f9213d023e9e61ed9540e8f207cdcb51203
SHA512e2df5f11ad6c0acd084477a35e06097bb3e132e12a567e1d009e1320b1d693b88b52503068e4b514be324ca891bd58243091e69115537b786659130d621f4c44
-
Filesize
1.4MB
MD57f17cd289aa28a00a243bc48e90a2e6f
SHA1944951e15f93d435cb8d7bc2950deac07bf2bfd7
SHA2569664d144204ca13ed7d807e16e6639f0ab1d7433aa60ee3593ab43a29e7207e8
SHA512a49dfb3e385405dae980ee99102ff1c336ca0bf78d4289c797a89dbe22af3b330230b2f5933667c2c3de2adfed8955164f4b523eac47cf8ca1b8774f5bfc8598
-
Filesize
1.6MB
MD50e26b4f446a765a3a9d666f05d6141a4
SHA1280998dd4e7eef84e37778dc74a96313de3f68af
SHA256520768210c1deae03da8791e49350fa7858ed7d8eb6c780ca2c75d3a4f1b1c46
SHA512e996afa5523a0a58643641641d7051091373ca67d3df3976bfa03de6fea4616de5a2ddcc293ba4b98d945b7effb6defb6876ff7cc470bc755042fd942c8e291e
-
Filesize
1.2MB
MD5ede391c1b6f60710067ef18873bb8298
SHA16608ae32e3d969606e2c7dd6e2b38119731c9ea7
SHA2562e3d762c45581839826a5c3fdc68eaa505199847e0b3849b7e233b3c2c9a5f1f
SHA5124824bbd342d72269d3056590fea2d023da399068394699cec156ee04db3cde0bd9191b83bfde2af849e990885e5c2a44e8198f743b77a345c232928ade3f8ac1
-
Filesize
1.2MB
MD51831e008819411c6cd6ec4a5b032db9f
SHA120acc62d6eb4ccadef30eeb6c9bf1f0479a461b1
SHA256535bb0c9cfda8d13e7c7dfd8e0429397d63f752466e1b4d49512025fc2ac9be7
SHA512015c9c2e0157dd5ca0fd5507419d292babb4c9558a311266f4cca2be2bd39226d7306c5b52b73016b3f76a98a051b39eb7271940db933f47e7f8da20bf6ac8d3
-
Filesize
1.2MB
MD55cd3b35e9363e494080172a3bc9fc99a
SHA1dd159af0730008106618570bccdb744976f143c9
SHA2562647da6bbb647f1cb9ee95f45f8d98d7fc9b8202a1bdeb8820fed54e555292b1
SHA51249a7d61bfb008b404bbe53613b6c276c131c9603571ae66671c6192a54516dfa1404d674012cbfbbefa0537b7568930c3ea20701d9658f93028ffcf55c54719a
-
Filesize
1.2MB
MD58b67a8c9edfa5c10c8264c8d3268cf3c
SHA177f7bfc3c330041bb75649ada436dc3e8bd4ea89
SHA2560f89e3d4fdc64d9cde3075068e6f462ae57ba004b057ce05301d6465ded1d0fc
SHA512941fbbfff277c939f53285a530b0d81caf031ae5b9721a52902f9333cd906047bd0a0ede842fea80825b732d392d40619e0f889fce05c6b8b60041bac18e33b1
-
Filesize
1.2MB
MD5b4be9b26a9d95e3fc2fa487b9340d58c
SHA16257d1b5bc2d5031c2cb4feedbdc234014338f10
SHA256f0276f28e8338583487eb8a4e84d821bc4a83f05814be4751996b95e6dcf3c46
SHA512e592d4eb5a5c2424c23f764ad0964ebb1d2dae321ae065ed86861721d3c97c643530087afb877572101c56c2ca21597e160b2b0a63a7a80cfab697acd55f85d3
-
Filesize
1.2MB
MD5d2a89d173895a0a63db26cefce95b2eb
SHA1e9af379244d35e3099912283ec1914fb18963771
SHA25611d0041fc6dc4b5cabcda4ba010b8821166711f392f65c856e9cb3653196d2f6
SHA512ccfe8cdff62b35cdecab0870c20b5f4505ec7c3b175397dd371628e3bd59de8152a171ef356103ce318bbbed3df3cc38e724ac113a26461e0f8903dd8c75861c
-
Filesize
1.3MB
MD5c96d4c7dca7a737e56faa67e842c000e
SHA1ae840f397f42d59436af8716c84b8af858992a02
SHA256a7a776feee326dcf0d37600ee06e0afe3e9de4cb354acf719354e263f10614e4
SHA5122808ad9c8b6ba637dfb8a66a7d80586a5b8fca58a9c23439a516657edd8c8b0e41c2d9ed3b6bc2380ab6b38716206f1e77ff6a5d7941d4f9335890287e879ceb
-
Filesize
1.2MB
MD5edf726fc3d2fb90d3367b32f559ecd39
SHA16d6bdf6f1abbd95eabcdaf885762671968d5f426
SHA256b61bf0cb1f8ab44a72b4eff47e0af4feed7c22a47fd503ca25bb50acf994e099
SHA51214ed4a95f2c38704aea14da299381746d5d97c5d8126c48ea2070b07f7205b85c5fa72b25df0ac30b2f63c3f40ec096958403599cf4a51555e92ca95c0026d36
-
Filesize
1.7MB
MD5f2ac8170f3a1ef8ffa9b2cf70f50fca9
SHA16f3c2bb028f304cff5a03ff8281275bd91dd85ea
SHA2567dba5fcf80fc6764fa652052f78ebc04d9cf0bae2bf1d96b5c939733d874d2cf
SHA512e8cdf567bfe44cb61268f17f5341363cd1d626710d4387fa498f4d032a73f3510c6f581b8e7e4c492d3f2d108d2bec611aded258d383637cd3f8176ba2afcb2e
-
Filesize
1.2MB
MD5679cab5b781c56b573b494c88007935d
SHA1d866e195c09da00932805bcf8b3c1320a491ceba
SHA2562fb371461fce46c48e03a540ee4b30063cceae7a386eff2bc69a72e38c3ff982
SHA512dad84997951631e53ff551fc353a2892b1b23732e0c6ce174c8fe1773617b576d1b52d4a39a18487e4918d57f425b398cab3e04283ef5f78ad386bffe03eca99
-
Filesize
1.2MB
MD53b7612e276ced8ad489323e2f6114781
SHA1a85debda2e5ab79fe676c6bba52693a2c1219401
SHA25659a80e5f3050caa415c3b299a608bb6b8aaa7f9bbea725807b613ace598a768b
SHA5125f766fdf5f5c5c524404e4ca4095bf03c6f8d6db8bf57c82ea40536cc33c2660eeb7eae595283b64a5b0f48750207a1365fb4bdf60275ca65a42de0377de141e
-
Filesize
1.5MB
MD50fb3a15115ea9cb557f45ff263ccf70c
SHA1efcf65e2cc85db78c66c3791d15b05b2df66b341
SHA2564fbc6d4a6ba587556d0ebb8530bd76c371412552d86c2607cbd8a5077ba0e6c4
SHA512e3fec1e7b5fc6353a4b576545936f8cc0c1be502bd3d2961dae5e1e60eec61de5c4d9fc0d1493d391026228aee69683ed7101d08bbe1a97abf27413e33eebcf8
-
Filesize
1.3MB
MD55f8919299d0d5aaa1b7020a97c1ea293
SHA17388240f1d5bc7c7740e653e0d0e5ac22a3dee6e
SHA256dcbb7727fa7a6dc9453ab2b09afd3576e351680baa227e4c0c6beb67ca75d196
SHA512b743d7c547397fdc025366ae8063f4502d1945c9ac1b8350e9a4814b570154638a9f3a0084e8c1b2ab160f3e9b120ff698b2042b6c28bb882f153b54e41cd1cd
-
Filesize
1.4MB
MD5cf124a1aecdf09057b6c2845e812fecc
SHA1355c39f478bca7925b5ec6e86e00061ef344969f
SHA25628f85ff185375cc6c68e181a3f569c23901241634b15e6e00427b3b8e80f80da
SHA512aa5783de9b673e76cb79de6f4141ffc71c83479d66bca0025c0fbfad4f89b14fffcf943ee4cdc3f2a4e74316bffdb5544e46a3820d1e48e0d31b4108c64f4e29
-
Filesize
1.8MB
MD52f3f486847860f398477e5b45b1b91d2
SHA15e40d4a7aaffade316090ee57d21a1f7d5a8f4d0
SHA25693759f9f9f85a0f8fca9ea6503996be80173e3c0d4df605c5bcfa2308989b255
SHA5120d8eed7bd72233f30f4c79c72cc0fef670da41f52e8888939135b06af041bc6ecf5a8ffed747c901ecb2ecf140293e89bb05740118b923c546714273a67b0c50
-
Filesize
1.4MB
MD5585fe97b5dd891e1580ab0ee5c046267
SHA125aa0560a9110fc0c531024c7f223f7effacc13f
SHA25602405f8443a5cd42bb60721b49af3bf4a8afc4150e3a0e1c783e2c19c25809b7
SHA512228f80501322a8914db518b7ea380728b5c507abb5388150642f9b2763d569c7a7fc22acf19ca974dff0278d81459843fecfd857232f3a0370929152e7f362ed
-
Filesize
1.5MB
MD5c23500c2ef6b056540925ebe461809b7
SHA18d43155bb29b5d0c1445d0dfe6a017379f1d942a
SHA25685b6b7310f201af1dc20b3363aff3c95906e4a2fc41b9d252820a42e81ab9a38
SHA512b6e6d50a70cb6a5c5fb6f885a3875adf8d9b1def5f189e2ab50765446a67411cc2001e1b5d638375ee7f56fd7e74a94d4066d780e496ed81007fa198a9ad8da9
-
Filesize
2.0MB
MD533ab2a7a604adb2585a5b58d0d3fc9fe
SHA1b1e7fbcf0a6239a2e065afa01dd6b1a9f151ba43
SHA256d8fd26fb0fafc496ca9e9e994d051247278e6bb4928cbee701c2daf0735a7f83
SHA5124b22e683f863f312fd7ca0adfafe549e0845bd7ab8519bc9afd3511c36727960ce1d15fea76bfe5ae286f5be4c1c6a816e652e2d710568d8fcc939eecd23ffea
-
Filesize
1.3MB
MD5fefecbbc575ee4a8c497545947ebd603
SHA1e6cb4f349bc36fa3ea6e82d70f4be09459301d68
SHA256fc7f5f92fb5bc6efd6215dd4b383a3a38326dbcdfdcbebb132c36619c619c861
SHA512c38349824c05b61eaac0f1ff34a6fd4918190b39414cf3485e319613ffcb884023b5c6df803972c6f79ab3148f05ab4e1df3bbcbf86a3ca2023d388c613b31db
-
Filesize
1.3MB
MD5bc5d184a522b35270806ddccf82cf1f9
SHA1a21dce312007417f7d2a56d0e7fd7954289c379f
SHA2569c88458f4c58e524ce122ab2d54fe3864d08cbb66eac0563ccc3995239b2c881
SHA512be4603f889a283529ca1402c46b59840297070169afc8c8ecd24ff94ebcc892faff613bc9a2806654631f41329aecefddf1d6b90035ee72e1c81d52a6820224f
-
Filesize
1.2MB
MD51d18bd4ada838d935798f10d65b1597d
SHA11324c32ee167dd8e1c613ef481b34f901b0d0d7b
SHA2568ae27c3785a647f511830573e82c7b466fba6f0b56fce1e6fb4ad6572bf6d048
SHA51249f9fe97d6e2b67d1690b3efc5ca7a2c6fcb67745af22084e020a2b35c031cce92c475c40746d8a94294f740a9308652abb366767fba881e485142b08e2e8a13
-
Filesize
1.3MB
MD50df9c7ec37c372a41df3b68ffab7847b
SHA133e3007383fb2a3c4c7b06375d5aeffe03a81ac3
SHA2568da2e52b5b5b1c459315c396336d2dc9e4aac9c38c55788bf47729c8b91449b2
SHA5124a88ea39ec51cec2bf0834a819b997d61ae707b4bd9efb5ee33ba9480f3dbaf2d8431ec2c26135148431643139990a392f7ca6dd2b6a5e6a0ed5d6756f271681
-
Filesize
1.4MB
MD508c9431813b4e6967082209b732279ea
SHA184f8cc3aae2100a9332d9fac3e0b42e8ed55013d
SHA2569616d998ee45dd52fcd3cd391f6272bedd7de34ab3dc8f39fcf442e4ea247b56
SHA51298d6153fbb1c9df84c82f6da35fb2c0eca795b016f633e2d9ec2bd49ddfa37efd45aaef3a821106e768188c08f46d018eb0be3f9a8cc9c92514569633bbbe247
-
Filesize
2.1MB
MD5539a8da0a94c518958b7a226b57c12ac
SHA1a81586023f7e71d7fb31ba1c1efec8588715c0ed
SHA2566092c4886452eb71405f297031300a487e878d00c1e84333131750ed18d5aa42
SHA512a229cb723a83bd5b806bd5354cc35f484b66f6dbf1b5c532a33531d412334c46e140a8bc1000314ad74f3749673f47cef3a4902b32b19cbe71df9de408a4d035
-
Filesize
1.3MB
MD5908c42443b1e9f0083756422ebaa48c8
SHA1fd743de6ddfd4bea05debb460322b362cf3cf4e3
SHA25681cb674f7e084024bb418f0f59bea1a86e222266cfe78777d398181b7b3137ae
SHA512895b724077e01b10165911b9829a38d0de6a6e92731bd39e0f8ad141479b1a3816d00d6476ec38d716f9ef1b97e76ed3888f5799ad11917d5c4cff4e2e61023b
-
Filesize
1.3MB
MD5ea7ceabde7bad32ca5f7ab81ae594974
SHA1b2e8455538f78e3079021320351035048cf8e8e0
SHA256a6bcf66c691977d5578fb24c4c9af0345b6e007d43fb41973405001022b97168
SHA5123b6b4bc9c21bd06a4e4a29e9b09ba9fa23942a9e614e5c401c279f1f78cc9d35c61be5def9ff01cbd5f151ab18aee8eb37124ba3674e25a87bd2a88f0d7e01b3
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.9MB
-
Filesize
412KB
-
Filesize
412KB
-
Filesize
1.9MB
-
Filesize
1.8MB
-
Filesize
1.8MB