Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
28/05/2024, 19:53
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe
Resource
win7-20240215-en
General
-
Target
2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe
-
Size
677KB
-
MD5
d6ed41a105a77941c0c36054fbb506ad
-
SHA1
934f74a725afa9f174397e97677a256bfa3583f7
-
SHA256
f901107bfa65ce0b92b46f81117b7ac1264e93a2d76badeabce9129f1afc7e37
-
SHA512
1d697ef628c2b422a044a24cee3aa8f53b713bbbbcf6e1dd86f9b339c6f6a62a18d26c7858ddfe2b0816d40d2a55040c28627a6ed7b1dc391a0dad6e790b728c
-
SSDEEP
12288:svXk1J6JvY67VMBNO/aXpXI22+VufvdIOKek1h4TA8bXQJYe:Ik1J6J17W8CX32+KJNA80T
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 4520 alg.exe 2792 DiagnosticsHub.StandardCollector.Service.exe 4316 elevation_service.exe 2300 elevation_service.exe 1416 maintenanceservice.exe 644 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\dllhost.exe 2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\2b44ccd1293b476c.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\pack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\private_browsing.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\wow_helper.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\Uninstall.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\xjc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe alg.exe File opened for modification C:\Program Files\7-Zip\7z.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\kinit.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\32BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_102250\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\AcroLayoutRecognizer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmic.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\orbd.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmid.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\iexplore.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javah.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ExtExport.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsgen.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\pack200.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_102250\javaws.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\pack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsimport.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsimport.exe alg.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\tnameserv.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_102250\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\tnameserv.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\schemagen.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jcmd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jhat.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jinfo.exe DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 2792 DiagnosticsHub.StandardCollector.Service.exe 2792 DiagnosticsHub.StandardCollector.Service.exe 2792 DiagnosticsHub.StandardCollector.Service.exe 2792 DiagnosticsHub.StandardCollector.Service.exe 2792 DiagnosticsHub.StandardCollector.Service.exe 2792 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 660 Process not Found 660 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4572 2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe Token: SeDebugPrivilege 4520 alg.exe Token: SeDebugPrivilege 4520 alg.exe Token: SeDebugPrivilege 4520 alg.exe Token: SeDebugPrivilege 2792 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-28_d6ed41a105a77941c0c36054fbb506ad_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:4572
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:4520
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2792
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4316
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:2300
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:1416
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:644
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5223dd9cf94388f9273d99dd6a6d0b54b
SHA12576919621671b81f81f2b4ebc1ff4d978055e6d
SHA256d6d82ee80755c3927a6af1e13e2c93e17c117591c5784188708e939b34e11e76
SHA512e9ea709ce4822be704a81c4e5f52e7ee8b9502eba3c93d9b9cd3cb11fedee0190160fde53679eeee57b01cf039cdf7b2e91447b0dd401d285fb3f5623aa9ed25
-
Filesize
797KB
MD5cd71e5a0032d1031b78b2ef67e3349b1
SHA13a6fc7009c7c9c426fb682c1f0a7743d1618c71f
SHA2568ca0a213095ab386f3426299216d5981f10100ed16e8c8fa03d6aace2d05ddb9
SHA512bb0186a33bd245bde1ff19ee9b6011f4bac708046e2cd2d1440b0500937574fc3aa420ae39de2be12b9d715ffd35fdbcc264cceebee6666223761e7a7f1311c8
-
Filesize
1.1MB
MD591fee889e959923f508c64e45b3fcd99
SHA1fff291e6eec0959b793790aaf25e95d0d2570341
SHA256ba5b9d7c5a0f905e6e3b14b69a63575790776298e5315193804164346d97bf72
SHA512e38d606cce5f048d2d2e7494cf30e3c4a3bfedc61184ffdc8eac3c0f30d2138ebfe18636f2143d120914e2c27577e39e216435be927622c8dec415f1a176ae11
-
Filesize
1.5MB
MD5338bee8a7b78e53741dadabcd33790f9
SHA146387e1b74048d78927af23c4696bdd0b64bf339
SHA2561cb7f90193b25564497d3b662710fcc99226a7a1c3ca48b04a386a675532701d
SHA51207d7b8b9bf0e3aa4a50dc04a38afe728570fe2b0ad9b63eea65b36dd243b9b65d18e140a3a622392cd5e8f8b28ad9c3028baafd1b99e9c1ee8707cd8a6b19a27
-
Filesize
1.2MB
MD51df634fcd03bc48bba099b5df5792bda
SHA147be2eb80e3fb94ac99697d9d60ae3b26f825bbb
SHA2563932e8d5d8e785e1041982e39df069c33aef12b6255bf05bfe02609613f336ff
SHA5123b4e81bce31dafe10c10844770d6291343f12674ad8d1a116294de65428c10288c262a30d1db7b108bea2fe3d11e171aad93d2ccb793dea26946520011e9a4c6
-
Filesize
582KB
MD5187d6c10c23f6365ffc744a74ef6f6cb
SHA12637039d4e1e591e78b54c43b42024cc0d44507d
SHA256e8f4e7260922dd44680ab37ab1b7d7aa2df39a7c61f1e4fc58b63954f6da63e4
SHA51264c6837c820dd473857d5b947c896c464a4bad493a24a8ad81366a7d6dd0d06dc84a4b2a4c56da69ae25f531f6c0515bca3d6489834e296ef3029af5c00fb836
-
Filesize
840KB
MD54d5fd9a14c53a918de0cdfe6581ea4d3
SHA15a1d514fe6bbbf7c29d824c0e773994fb3bf3a04
SHA2562c9bb519e839392edf7161582c965af560a23db9b88c18500a18b329b9571301
SHA512dc959deb8f78ce3f211e6842fe99f77bd94f939b9bbbdc67774bf08b271882517d14abc1fee712e658f6024599cc7f17b2dc753e7acb6c8e27c166e5facd231f
-
Filesize
4.6MB
MD5a3f355a5c2d8fa5f3d21b5c89410308f
SHA1fbf5e27498866d1be86596bf8efbbfaf974e5510
SHA256a76902bf2cc4d6795a336a8f77fc11ab25bbd1b7b93006ed718519be03116292
SHA512def6dde29558be3e5496536b0d33252ebdd52bb85a39e51b56e7c7ec99d785869a2b2ae75fab4adbc1902e74a1f6768c7f49e2d0120b3ef7120e18ddc14766b9
-
Filesize
910KB
MD5a5faceab8d1fd79053cc5b205a1260b1
SHA1592074dbbff7fae2c1522fdc3a51ee71145cd10b
SHA25626d968a334416e74e2e07ae7fd99ffe6a47dd056da275cb1e9abde56dda5a924
SHA512842055e6cf8b0aa1dbed30c282a6f59ed0b26dbcd298e8ac7b7f4dc7e81cde1f269eb9c75033f43d76fe55a193141acd3a9ced971421373ce0f5e3f39f293939
-
Filesize
24.0MB
MD5bf83be35276315417eb79f44ca374360
SHA19586faaa7b74532206bf540ec1711088b85f95ee
SHA256017dc471af88b1e0671a6e88a31a42d68e016dd31ac20f6ec8b13e1c37b39e87
SHA51256726d2e6a8ec995f8dcc85f64d2228f4f12b5b3e77314188920eeb9a47ce3c6fe6f531614a66500a6b50930f6d40ab08534753787e5b1ccc50d1647a035469b
-
Filesize
2.7MB
MD59f807df1db89fcd83e1476d587514e68
SHA1e07b5056216cd7dd24694fbf410e238570600365
SHA25613d97b48f4f376ffe9e021d4a91e5668514155f1dcb8e0c1e71a4f86b7ab200d
SHA5121e11d82d8d391157078a71bb044d95974ac3a9e1f08f89e3b03e625cb440cfe964a57bbede4ca33e37fdad0dcc825df759bd1729ada3e6340471e0ab81715484
-
Filesize
1.1MB
MD508b381b5b60b5c0a3c27a0e1e8f6c7b7
SHA1ec22e067c8cc0ce62225c17e1d636db8d627b9cf
SHA2564c985ce52cde71969b5a5a5618720f1ecefd1abc0d0156df224c6a5e0e77767b
SHA51209d7ba0b8b2f0b9baefa903b84a6ed47bfbffc7263ba2d59d575a4cf1e41ead1601ca88c005f0f8ea90cef7d5570e6009cb7de2513490de3afa4497e797833b4
-
Filesize
805KB
MD5f1ec5db1e3fc9018cee9cc41beabcc4f
SHA1ea4b6e519bbd88b184f6cad1f2c7d8de470321da
SHA2562c0964b2fceb9967e855975fd2e5beb4aee11f4de9a05f2cf1b5dc93da57eccf
SHA5128073729e6fb240caf87c6baa8b4424026d6ded96a4745b3c9cb97fbd335124e97907eeb450582a0c98d6fdb846e8a2afa35a0d1f1fdd3ec3131251b75ddc5431
-
Filesize
656KB
MD50d5b0cbade1d7a8affe8779eacb3c256
SHA1e0906222125b2a0b33c50817cabecc127bb0e256
SHA25659e16ab6c259afb67593a8bb7f016c2220247c99a9df1571e129032e487472bc
SHA512b1fd1c6d079db9d434c99fc1e356fe878ca507329232e9250f7a6340090617886fd47e7877b3e9ad47e8d7cf4bca60b4281f6278d4898df3c4bbb15fd2a22fb8
-
Filesize
5.4MB
MD58c3525d3bd429e8923f720b426d4d60b
SHA188bf03b2ef6126cef16e31cc6b60b23e3d738143
SHA2562657768c8cd87ed0c93310e0bd286dfcfa8f96a70d747e60e9f4bdb562dbc010
SHA512f0d2d876cd1329a26378d8d75167587fbacd6746278cd2f159329f095f7ffcbecaf89a0c9e292db0887a13c4394c8bb3efb2d40f2d6c72bcd2a82bf147257f1c
-
Filesize
5.4MB
MD5ca29a4438473ce584050e8e8591343e3
SHA1e65b6c6adc9fc15177b77c5fe56de6af8afd1963
SHA2564c71cdd55469000ff20a2b0d898761eaaba2e822c75ac0f7bab3bc38eaf94b81
SHA5125f6b3482cdb60dce1263afd7ec681db745ff6e8e78d894ebd20ad3541c549e186dc2d515441e84785776bcfee56e5d225c8ab0168496f798071b1e3ed13be850
-
Filesize
2.0MB
MD52272294ea0c7234fefb9a688a2a92219
SHA1b160b2960b5600ea5c088a3a82fcaf23119132b0
SHA256e4cad9e7797a0540ee46ded409f6efb02c9566cb3ff09d22c80a825aee755092
SHA512adb34163295c250b225702dd570e9938e93e752c2a66f2d951531d82704d1207dddc808ceb161798768c047968b226c87cfad7fe85aee51b79ec3f54b499f491
-
Filesize
2.2MB
MD575ef0abeab66524aa1473e807313c3ca
SHA13f96bfcf7ff0b818e333d03979a33ddf85a8d4b2
SHA25660f7ae6c8dbb60d20a75e84480c667a5aead34c705439c19a5a9200bab9aeb32
SHA512d52f202bb4ea9e0b0020f1a29e82b4b717fb6d1dfcb511ce2f6076057fb34bccc45c231bf614cade8b44828af99fb221776739005de2cc967871f39509c83f23
-
Filesize
1.8MB
MD539a18209b9cfa17d64790a75e69c7bbf
SHA13842c35cb1857ac61839c7ab057aeabd2c9aeb4f
SHA256417e40fb75b837ad62988cc51f21013d3884d3b8923dfccf9154f1778781614b
SHA5128b784a74bc65bfeb6d0a8d6c9ae18891bbf9606bcb640fb7a21e7281ef7b3fc9a4dc99fc0b2397f6d91ad3483521aa8c7078bb65f2cb69fa35784bb1f1db38ef
-
Filesize
1.7MB
MD5f5c96a02e8f151c8a76056b81aff94dd
SHA192c12cf67f3c8a5407f25d909ba8d84047a48a40
SHA25619bad9ab16ea77400b2d2a63bb0515c2096bc440e2f4879581e0f28619cd8c80
SHA5125f8a704be5438426e5bcca1b117848879a7577a3eb1bc1f2e5cd4137e132c44a465ee3ff4d9ccf85ceecf5f54d1880c32c5d038e3d83a2b7ffd8e88eeb38b0ef
-
Filesize
581KB
MD53d27d790a2e68997467bb458d78df81e
SHA14701548959baef9c4c3db5ce0fff5a10b647e36f
SHA256d1acb8ef7fc4ed62cefd4cd02ee5e9ca52009d073f24432d07b2ec94057027b6
SHA5124691a49074c5b226479c4f50421d150918a4a591aa237c9223179030c1e67c6ff9c77d00df3b04d456e4580de748e091d33be25caec44bbd68ccc3c74bcd9d0f
-
Filesize
581KB
MD509c468a21111cf5cbc95d892ecec666f
SHA1cbdb5b17ad50eabbb5c6aa4cace5175bb6e8ce42
SHA2564a6b7bbeee2fd70ad599eafc30d2bd1eb8745ebb8e5d823a12d485f2a0670e6f
SHA5123756b3a8725ae82ec65eacebf83b13f918b4ca998c815a289681e9a7835ebb4322c794d248c3cb4d14651b6107aa5dbca79dee0bce74d709333ea1e67dc1704c
-
Filesize
581KB
MD5562bb92b40d27edeb13bde8f65d9a54d
SHA11a2769149c8ca12801dc07e8b75c6df572e2a750
SHA256d35cba8de9d90bddde494c0efbe5a8f581dd9278dd32ab6e31dcf4f37a541b95
SHA512824dc84b24752d3d4d8da672ebdef0d6bbf7934c10a388cd463f20361e5bc9d40869dc327694c18f8a450e23c794c98391d1291e70890f986965aec7860ee64c
-
Filesize
601KB
MD5fefb1f0b767b34b67a5d70ac8c3f1ac9
SHA1476abecbf72ca642aa81c53542c8f7947c1a1429
SHA25622a56001b889fbc8a4e75a6055835aa89692f1b534c7332ef58d4c51f2f8f3dd
SHA512b17cfdacec4a05b4432c2d05260854598642091e8b115b234d2d1fba316a32dec9959fea4bbf9f56402419e067d7d6870ced4713927a6593ea392142742b68db
-
Filesize
581KB
MD54ccf46704cdf9e3295ecc690f96b8728
SHA1ad57cd247c4652c28a7ab880f69fc8b133a11d1b
SHA2564c8adbb1b0e5ad70a7cc93c6d486ca1dc76775c8ea0fa2f3a5fb97358212e0e0
SHA512f05db49297ed7c5e5368ed4f41a710df95e8170197944c3d155fd081b46644b6fe1a5da7ffe2b1c83848996b42b48a8a42db2875ad659b659269aaa0d5c207dc
-
Filesize
581KB
MD594365ee13c87c733169fb36779a3091b
SHA1d17f5d090002578ea795ffcfb5912e567c713c70
SHA2563c1b87bf9b71e69a2c312ee8088813545222646ec07b407b6f86e6bc245785f5
SHA512e6bcaad9d1911e360617d1c8dc17fa046a7cd5689c0ec8c067b21c4b6c73de70b1121c72fb4d0c261d0ca7034a91e89bfc6c52853a30894693ef826fbe7002a5
-
Filesize
581KB
MD5bd6c550249701a83dfda254c762d896d
SHA18a3205d025f391423754b63417103669c27005a0
SHA256a41e4938d7e0860eec6b119f82f0e4f8b89174e99774f91dd873cc3d4bb2a69d
SHA5129fee4ebc2ffaa949b662da278b3e1b02e8c7dc92fa9ddacf0cd5759dc76c79d2aa55ad2f27b3a48b1f01a843448fcd4d70d6d1dfe785ca2b36fd88ffad489533
-
Filesize
841KB
MD56a88c02a41beca6a500ced47268dc208
SHA11cf748e378968ff6b3eafe68396a0572d0ed715b
SHA256521fa9398717d23a4b0cc39cea4160946fd300a0edd346036100d58a2574cca7
SHA512ab7d41fea4b4a6dd859bdbb7d3c683643c037972fbfabdb9291151ec96e508121d95bf9a9941bb8c242f154521264dd846161b6f97809e9c1eb9e53083a96d59
-
Filesize
581KB
MD52fdebd5bf68117ac6a0e41118cbed2f1
SHA11d97ab55e0fe0127a343ecf6b9c0bc0342d7ff0e
SHA25635aaf0472d59f031481ae0c0c056f28f8548831643c3490c365267989c1b18a2
SHA512c47127152abdc6b8ec4c3d05d61a4982c5d8bc0150404ee7906f9d5c1970ae30e72ccebb23c6947723d044a5f524917b039c7ca8d475a134ab31dd0ef6aa3916
-
Filesize
581KB
MD5bceec6c5f18dda7d582b2adf618637ff
SHA1bee0b6d00cfd55d0632c8e1841811be55c8f626f
SHA256e273fbd823827f9e76b093a649dbc8eff64f69da43c7d2bf2740615b7d3372de
SHA512697004724666da87a8b5df44cfb27b2852539fbf96770f52f55dabbdc970160ac4cb02bc369b97f14c113f8a28c7d880909a79fd2c96f17fd78a63b735d8e32c
-
Filesize
717KB
MD50b34ad14ec1ad8fcc2db5de9369cba94
SHA18d57aee6ab69365ce23d52f33f58953a64a4164a
SHA256b055cab2912ba6e7e92dfeabd64b4f93dd176b5e580ea3982f3a17c11f76c2f7
SHA5128add48c4ed25b2c44df4c88a2f72833f3247e19222c8aa786d9f0e45f12df1f53e020dc50c031927b86f7b81b910a260104356696df7cc986b834bdf2e970acc
-
Filesize
581KB
MD5f94ac24831ba5e40e27d338197b14f0b
SHA1a6c73bc56d676e789d9fe5512e23f969601ae804
SHA256b13c740ba1e12f1d8345a709f0e9bdeb6fca4930c6f8350321b59552c4fabaf2
SHA5121f3656a1f6e91015be10ed0114eae5893b0b4a73a5cf00c40cd2057c102d56e3ad1d34314524bc5d5bb500ecf848f29fd87e2007c26c11e6465ac84d186fdf1e
-
Filesize
581KB
MD586625b9d092596d639f09a7d6f3296ba
SHA17057752aceee62b5af457b3706142cd4432e9528
SHA25643fd3c671774498ed22e394eded717a0642dc01de9371def224e582d81e787ae
SHA5120d74f367b7e196f051b608ab1e28c48ecb8dbac1b0386e3741cf29e27a8d4bda222de8b09e6f44a93611c76624b42c24a3e9e37a7447ede6041cf6d6b1168b93
-
Filesize
717KB
MD52ba60617507070746af1aba453b04f42
SHA11084c61892bd76a211d09bc42ff00f79e4fe96fb
SHA2561edcfa0a399c6db36bc7800df7ae0b97b4a374054ea3a20d65240f661d0b898a
SHA512b3806367f93b6c83a783ded7a324321838bf7c6e9c390c8757aa3caf7c90c36a850a1831dab03ce16b90cc0bf97e53af58d9278e73a70765d003449c8d689c04
-
Filesize
841KB
MD554a9b2a121afe7dd7311153bb2453cfc
SHA1f4bcf3a68a79ab206a4544c76531ef216aaeb65d
SHA256e89af4351b28477ac05a007bad28b861a23f38a31c9c9fb4c74298a756b2e9b2
SHA5129e86316c2ec89e2d76a0c48e0e85f3aa26dc8407e866f00c7860e4c380a42727192061db2918d0258e085743e9803c9a2bb562ffe48081886e3a48f4f8684226
-
Filesize
1020KB
MD54e40a6450b12400388507897dc8dc263
SHA1b4613ed5bb264ad27b48e093ea90a01c915ccbb5
SHA256496b64d4e0740d5e5bb36322e672dc97134e7e8d6688e58fa7a8b92f60221afb
SHA512c577e06b3c99b6bc893532df3105ea4d1d2311c2c1fd0bb9adf38aeda7f0ee62a862dd7e1a79b3b20296b76fdfc6c3531adc2e7baec05bd1c01a2db583dfe93f
-
Filesize
581KB
MD57434ed88f6ed402f47dec8fc03917fb8
SHA18eb342b92c90e219b175daaef87b1a7e662245f4
SHA256e7a5aca803b7827b66d3fb2a9dee49806a2b659d47165f8a7c801e021a9c314f
SHA5121eb35e7eeb5b3b8da207df55c0daf1d334dc2be019b8fae842f270a85bc1a79ac41afdfe85da56c6f5fac17c45dd6ad0cb8b09378628c769b7362cd0965520f9
-
Filesize
581KB
MD5a774ebc52ff5cb6e5982c99193e68544
SHA19c3d04ca776fc2407d6d4b26f2e41a3fea147073
SHA256ba0348759b18099b8abe86835f4f6e3abd1bea9420df039e4ac0537d7c8168c5
SHA51229d403ac41c34be6c53815c58cdefd79f479f8b92a6f80d9caa61aa7d5f7fdd1ca09edc70f06f49bf6bc56a4ec917ae5cea97bde26b56c8a1b994f3597b4c272
-
Filesize
581KB
MD567b941f508441e912e935e527094842a
SHA1e224265f37ac7297aeeebcb65bba9c2482fc494f
SHA2566f3fa6658b925e55ead9b7c76545c7ce0b0b7a286c932dfcbb017d49305d5a06
SHA5124dc110bd47fb520819ba00ca20a36460d0e6e7950ce55d7321e64da39560bdd660ebf341618b14a99b852c240dfa87ab24ff528bbe84fb97e2efab88a86df6b3
-
Filesize
581KB
MD5b38902b2601a41277679e3691c6bbdbb
SHA1356b631e62cb2fa00e613dcb6827eac70d145e14
SHA256b76d635d7a4661eca90a7d0b5c8f72aaa96f5ffb8c616da96a527444af748ea7
SHA512eba5387c3e5fc2ab7dafe883078215eff55d5ba5b340ed2662ac969ff7e98a6014e5e435708c037875fa132fd1cdc3df01b6eaa6a7b2b55df6e269a21abbbcca
-
Filesize
581KB
MD507b961e730cdb432a29c0ecf5b79bdcc
SHA1982b92218701ea98b01d4f08ed4e01cdaae70a2c
SHA256de8df1545fd7dcb6d0ebfe6810dbde34cfb9f6c1e09c28f586119aca9ab87c52
SHA51293b4d1a0f3aa5232e10f423392d4232d1dd39c0e28b5620c4a658312dc293c1170d8851a58cc0ded35175f81fc31323c1d44349fcdb4818c3ac1269a5b9b1159
-
Filesize
581KB
MD5e6d645e682f912d890ecfefe8f409180
SHA1ce2da65a319454dc382712179ce756557c96ff19
SHA2562a46d6b862b9b6acc739431a473eb034ccdd3e64708520eccb36910c389e3aa0
SHA512777c9878034ae611e1b5df85d5e9d8613d1979852c3a7623cf914dd4ec27fad52505a68d6b4f7b6e90010639f84ca56e0fe793ddcb00e8d483da635f757cc862
-
Filesize
581KB
MD5668c61f8699992c9b86735ecbaea3b63
SHA161d38bc33171ce2f9ab8ef247f6e834ef9421f77
SHA2565ff94ce2e2ba38b29c0b3e66bb04b5b531256e1df62da3257a14c5e51f932a57
SHA51264379aa327dd1cfc68a9be814c2f2d8f0d4adfc978c7eaa92399cf738368cdf0e6fcadb2247d7c44d4fb4c60b0d9c1840256d09774c1e9c8994032c30165b0b7
-
Filesize
581KB
MD5b7b50ceef2ab92464a3f43d7d496f5c1
SHA134ab30e42ea098e67abbca4a8a8590ced0eafc46
SHA256fa1766e75af129fe966ef77e375265f28c44fce2aa23613ab93d2b2e65177466
SHA5125cbe6bbb5e7ed96bd9f29b42a5f2ceaf4198fb6ee9b6172074e4d896c50c104575e8f382bdddcfb645323f3449b87e262df20226fdbe317a3b51c43e8786441d
-
Filesize
581KB
MD5317b5306752402421847d87bff39e4df
SHA194ab4385db48dd3189cdab5f248db4abad00e73d
SHA2564150b89938976584c7c95215184598795a20143eb71098dc583514686dc2f0ec
SHA5124d8670467b06d4f78795dc24740b03a324a562469a7319cb4d8e8ecbe5350d1cea48c074d2543d70e173ef836c577b7640937ff04ea487ec6cc23b5925583b17
-
Filesize
581KB
MD5995a02b1ce49fb6e9f92fe1c64a4c71a
SHA1aaa32fc33aac190b9e8b2d85ccbd0abd7a607c12
SHA256ff0fc14c169d6cbb8cdd0823f4efafb6939d8ddbbdf4e98502d285a11400a966
SHA512f3f23efd80f275d8c4c94499dd6a8a5d7feddadcb432aa0803211c1e9aead188f3dcf48070e3300f443528abae493cbbf2236a69c89dca419607c906b024eb7d
-
Filesize
581KB
MD59353c5f4f90193b9c23b2d7c62a5072b
SHA1890be59f0b0708ba0b60eb6797ffc6ba53037a3a
SHA2561d459ef9a7b7669fa6ab532358bd7362aaecc912f20ec8c3512a4c5313c9e794
SHA512f06cc300e2efa0f8277d23a1620be08e1b3356f0bf9b937e8a1c385b84a9f9ba174835c8df7689d1e0578822ff51f38b3b4669b5a6bd9b7a3aeca0cb3f0dfcab
-
Filesize
581KB
MD5e1b572159d008c8fc5c5f6f3f990d981
SHA139d67a407e8965ad2c5614d58a7bc4c087705ebc
SHA25656a2575c21591e61c9b997331a583db85fc37ca20fdfed2e75f041e4e4479f5b
SHA512b9a8305499eb399e41d385b710ab7884320aac875e334093680bce0d640e10444564183a521e19e26059d9c0d63eba68024a1201eededd85f2bd8ba2b813a42c
-
Filesize
581KB
MD586817cadb5d6c44d75703b6188ac4839
SHA1a0c9b885dbbac70399a84262383b84df3d1103a2
SHA256debf3f6bead5cebe7be0bce9b83a032e74505296658567a4d41de884afb20284
SHA5126e2b013d629657a6de3599b125ac63d424ffa714bef9c85cee3d90d6b6c3f66d53cca64e4a20b1a442eae8e1b856de31feb2596b2ee5f4e2b27aa13b4f1e708a
-
Filesize
581KB
MD51a587818ced847882c3b77328f0cfb65
SHA1709c2559c7c964bbec3aa37ed3fcb608d51bd8b1
SHA25648e07405e5f349b72463591c0f5ac8980f674895cdebae4901e077aba31e0c30
SHA512278084b973ff577b006c2f56ca0de0da2cd6d1742f0bf90553aadad0be7663ba39fbe28ceb87fc040cdb2147e3a0e5ea076bc4ff1b357e7a26d7653bfa38f1c6
-
Filesize
581KB
MD52007c7c670543e3dd20153c4a5cc5bc6
SHA142b2b3ea03b84d203939a7a0ecd34c142a829ce6
SHA25602aacd631fb97fe89d1e77a832445a3ed95bac16da53ac716e0d381deff9f3e3
SHA5124c6cd2c6bcbe915a38f4ae5e326c882144ee70970e61fbbd95b8c6ee8bdf0da9c92db8894665ed368c5b9adb46dab259f5592569386c240ee635e3842e4a89b2
-
Filesize
581KB
MD558d816a994258deee4cfcb1d76dcd07a
SHA13c7d80a59c126c6b35a91807fe15852926d4ee44
SHA256da09e57ee0d31fe43552c697f801eb6023bb03b6c02b6464a6253a20a6f7e764
SHA51286c3bb3481aa291e497b6bbf186e2afc10f9eae1ad330ea1f1d27bc228f3b19bd014280aa8e43a1d5e939bc1159ee380a3a142bec932871afb9344db9dec32b7
-
Filesize
581KB
MD597fd958316b259fe4710fe95316ac6ca
SHA1615916b91c9f560e1655fe6c2207816ce7636032
SHA2562f9df2b452dbbc9a41ac441199e2a921da261a7e94ba574149a3db992e5ce036
SHA51216ef4112f5e9474ad4779fd745f44aee83f00eee68441c1b7b5128c7d49fe69b5d26accc3b8377270ab273aad5a46f3a2dcf48fb821ba60b58d6b025e05a620c
-
Filesize
581KB
MD56639d28dcf5ab3f6f71fb2e6e8dcb264
SHA1acebbf4cf09369d048c6015895547fcf69f38050
SHA2569201858828278f1dc3acd66644ef7db62490925ed41aac943d2a9bd26bc7ee70
SHA512307a6e7b0bfbde05beff5ac2346bf503bb9f15984f45433710cec1f292c977fb8d759b603c1ac1448f5ddf39d988e0b545fe37f8870e9a577b27ddb12ca8135f
-
Filesize
581KB
MD58799ead92063b76eda3e96a97986b2b5
SHA107c35c2caf8b123931ce93d6ae092602aff24ec2
SHA256d465b46c36cf4dad4c977dcd01f272d538d573fe583e713135ffe6fc8d2dcee6
SHA512fd0db27f4f7b45f21e2c24b70074517a687a0a78f8f6c8fb147579434b03b3a76067d9bdebc19a6db2fa5cf92110424e9eed3b221bd5ad1be089c2f7b1e42771
-
Filesize
581KB
MD5b000f8b91a784cce0cc6cf2bfb938c8f
SHA14fe20866125e23302ae3c372f41575f2562f04fa
SHA256fd6654d9a62772e53f3ca10321a3e0ca49931091cb1264002eaf6d7b3e5549b3
SHA512b8b5c14190e2f4f88d1258622daac16dffc905a5827e4022149c27160380bfcede300f49df2e8d8f8b66f3450f64cca2cebec1efcf91ca5a0a90f17a038a3e88
-
Filesize
581KB
MD5a5c137cb8c56e59805ab64df2cc1746e
SHA1e21910c32fe5a694c83da219107645511b71821a
SHA25645c56116301046976ec21ef266d091f5fa871a6ec51dedf2cf6c29013a4e5edd
SHA512f53a758847a6e648856d1757162df0b06b47293a731380c9d442e9006c9e44646ca79af6451116d9062f9048848686488bff58d8aa92adbfb9d40e87da10cfbe
-
Filesize
581KB
MD5ae32cbf4410023f855100ca9b85ba9c3
SHA1518d5ee4a4320015b9c8c75427897f8fb374f8c9
SHA2563bd2ec4e2ca676157bd8355f9b1a214ea6ca0dc981cf3a6f267fe62fe6345a9d
SHA5120104ec2893260d66fb5837c77ece076c9e9b8d8ab5ae76a923493c105b6243c9e59cc4ba7c8745b60b3944806293748ed5034df6da3215fefe0fef2a8a987f23
-
Filesize
581KB
MD52fc699558824e924aef0d9111be22856
SHA1130fe9344732460c5c51958cffb8287d018a0ff7
SHA2565dcae8bff0088bb9d8eacf027942bd4b57bef2e469ab4d44be8d7aa0fa9cdf93
SHA512bd82487a4a208fc2af2f57dc68bb256ec58d035b03537ffdc5a36c02e4795d1ada746beadea544138f110bb8912c14aa5c19a9b8f8c6b9639527382e744b5d69
-
Filesize
701KB
MD5a99b84c4d63eace7c3cade419c0f3860
SHA1df29f6f77fb8137007d104a9b39f44cdecda34e7
SHA256c0b097fa104db408827edfcb9190281ee42eea149e9f2ca9b95b936768023413
SHA5126f88275a75be66ca48e2901b175f32876db7e706281fd8ac603877142a65e766f97efec622f340422dd22c08064a4daf62689dc86a4647718a06093d77e2facc
-
Filesize
659KB
MD533b5470043999bf316862b4a04904f90
SHA1d71f8875418837c5e86846b9a462e45c4caf4bf6
SHA25613d8369ed5fd7af25e488f78ff70eb2eb0f3da64f622e47d2d192de6657db52b
SHA5122a457f014710fe3fc2622133ebb89791cd8fed759147c79053385db7b397b20759ba7e658a5ef1dfbeef344f2079693d03c8d9610c17fdd129ff1044a0e82614
-
Filesize
661KB
MD5bd0dd2f24b11e6e1dd82dd31cab56c08
SHA1310b64070a412b4e9e9b78e3300cb2b8ba76ec9e
SHA256d2b7e6ff4e9f33eca783724f9c7815917fb4db244a2a94b2e8eb0eda3ea82b18
SHA512f2d081565f5e1e1597785009666f967fa36df9dc05d16b6de1c2e60bb4930a99f92812177f8fff908de3a4465da6410b7f907f2ba18d0cf89d39414ce6a799e0
-
Filesize
1.3MB
MD5e9c8a303e8dad4f4a071c1be6bf4f23f
SHA18cb935c25edb39babe9e9ce5639db3ffe6ce37bb
SHA256e34e88930ee41576ab5fe6778cb7458dcd352a81ff4a17c3970885ad554dc892
SHA51247d9085ab8fc371fe81300eefd93afd76776b34653ac8d9606467a4d13ae1cf7c9b391da66b318b8cdc6fc96522c7768ea8d8a340e49898fa1d9949254bbc628