Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
31/05/2024, 22:32
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-31_4c8a242b25b35af148ea44345a101e93_bkransomware_karagany.exe
Resource
win7-20240221-en
General
-
Target
2024-05-31_4c8a242b25b35af148ea44345a101e93_bkransomware_karagany.exe
-
Size
677KB
-
MD5
4c8a242b25b35af148ea44345a101e93
-
SHA1
9791f2381303fb644754fff45d8ea9248cd34a27
-
SHA256
518351c92bc1598a77c68937e9a1fba1d556c805a324a557f6a094dca629a512
-
SHA512
099713a6986b27e11ef07d9aa7d14eabaf97fd09f8ccb2668b6f787dd8892f88711c1283fcd3db2d913f7c1581c04f7b73336172772aa6c67bca7a0d2c6cc8d8
-
SSDEEP
12288:evXk1aMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:ik1PSkQ/7Gb8NLEbeZ
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 3832 alg.exe 3584 DiagnosticsHub.StandardCollector.Service.exe 3432 elevation_service.exe 2740 elevation_service.exe 1504 maintenanceservice.exe 2280 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-05-31_4c8a242b25b35af148ea44345a101e93_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-05-31_4c8a242b25b35af148ea44345a101e93_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-05-31_4c8a242b25b35af148ea44345a101e93_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-05-31_4c8a242b25b35af148ea44345a101e93_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\ba7c2eddc8648821.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32Info.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\FullTrustNotifier.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\extcheck.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\kinit.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ExtExport.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mip.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\minidump-analyzer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_96109\java.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\appletviewer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\keytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe alg.exe File opened for modification C:\Program Files\7-Zip\Uninstall.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ssvagent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateComRegisterShell64.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmic.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jinfo.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\orbd.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\wow_helper.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification \??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdeps.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmic.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsimport.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\AcroLayoutRecognizer.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe alg.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3584 DiagnosticsHub.StandardCollector.Service.exe 3584 DiagnosticsHub.StandardCollector.Service.exe 3584 DiagnosticsHub.StandardCollector.Service.exe 3584 DiagnosticsHub.StandardCollector.Service.exe 3584 DiagnosticsHub.StandardCollector.Service.exe 3584 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 656 Process not Found 656 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 116 2024-05-31_4c8a242b25b35af148ea44345a101e93_bkransomware_karagany.exe Token: SeDebugPrivilege 3832 alg.exe Token: SeDebugPrivilege 3832 alg.exe Token: SeDebugPrivilege 3832 alg.exe Token: SeDebugPrivilege 3584 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-31_4c8a242b25b35af148ea44345a101e93_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-31_4c8a242b25b35af148ea44345a101e93_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:116
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:3832
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3584
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:3432
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:2740
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:1504
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:2280
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5cb2bf9c52852e40f96c31f9aeb9cb3aa
SHA1e2d092d350299e9191e57fea26e511e5ba8bf6b1
SHA256069ec43cd581ad6ba5be78c5722749abc2b37020a498287360c650f4622aea39
SHA512855724c746e1d1e18593293309a6e8c7c09d75b5d7074b4f9af91021352be59c86ac612b1050b4e2dfd9b3a24289c8034ad6f6fd473670fb7cc8cd74c487754c
-
Filesize
797KB
MD5c6ad9912f78efcf039ea7a2583d6dba0
SHA1e5418cb13dcfc1d808081523d4c419d3da7fd380
SHA256dffa0f14056b28a051ee03232703d1daf90ecb308d6460e23643ea627e457bf6
SHA512a228bdab369fa8cba38eb4cb48f717a94a8a70cc7dc8be7020f8805f254f694ffcf556f09427b6d2ee35e3db991cf6150e28906b11f2b5084d709b20ef2783bb
-
Filesize
1.1MB
MD50334815b88c752fd26d6b69c3611a0d9
SHA12aca12c4777de522bc568feb903178192d7ffa99
SHA25691d98f036fe44be5fa91184a6b950b75bf7bbcd1bec7a8336283df0d32c4d1b0
SHA512e050ac2d1f0576ae27d1a37d5aaec2d5b67a74b84700aed6941b7c7e330121856e79555c5e9957e27af09f0c69d33b299bfe3b41df9b5a2e44ee074c47db940a
-
Filesize
1.5MB
MD52ad6d11e9d9422e2267cdb108bc6db28
SHA1f4e8f9bf1211724bdca07ed7d20d2579c85ff127
SHA2563e7b8a8341d4d66e048ec65720abe8e7b35f8b95cd5a37048209b31c689e8f59
SHA51217494f6422168c33969c901a9c21abeb5ee6511c019ec7ed3efcdfede4d4d85f7c707d360c3f81972221910bf2ab0dd3ead7771b463c3a1bde961782fdc476e3
-
Filesize
1.2MB
MD5545762a004a0489fb5ca91d0a58bf3c6
SHA1438dc0fb88bd93429519dc91aa14ab2aa3811356
SHA25652456af1bd194fd2bedf5a71a76747851d7ec06e3538ec4bb2552d6336d568ed
SHA512f440e9d650f0a299dbd81087cfe0a8e544870ee5010de2759eac9fac8150f5d139f27212e9fd7552b0ab829b5f36a58ed23a0cb835fc5ebc847570b3f1927424
-
Filesize
582KB
MD501550aa3699891e9c104b54777c34e84
SHA198c0ac8f5d5890aea4e08b9dd4b09418f0ea3fd9
SHA256293bdc3adce812b48fd7099183056c23f395018f86d9fc8e4fc57dd048b1c371
SHA5123972614e3210c80b2b08fd59a2c970ed080e09ffbb48735f7551637860d8b08173f8367f5596d7af4ba9279faf96085cd8136f9bb368f8d12e58f26f22cc4e21
-
Filesize
840KB
MD55a7ade380298acec7a6d0f7b32841de6
SHA1483a937bc4f2aac80bce697ec2664e1202ad32ad
SHA256c632c72175043c3c467a4f0819f8abe754a13602c71cd95c8b48e79ab8280fe2
SHA512523d32b32438e1ca737cb0d2bd659869bcc59d44d3856a80377ff736f20079839853648fb4e1706c5026da08d8b2e7397b03d07ac692d576e036bc38002e04d4
-
Filesize
4.6MB
MD592dd1006ace97dfa957e370bc72728b7
SHA161e432400ec232b4683cd289cc9cd3016bc9d8ee
SHA256e5f63ddf83bb39918f5edeb492e6273072a88f981aa311239efa2438ea773e1c
SHA512db7b70f00b7668c4eb7c052358425f5d819ce7610938c3ebe8ce363d38b19154d53629b41c4cc849a574b435a84a9cf7ba1134a121ba320a0e33703098017fbd
-
Filesize
910KB
MD5b27feff9ec40e6f6af49e1c80a9135b1
SHA1eab43a0af581dd5fe4ca04ca9df93ee779809f53
SHA256683da3a44c14ead69ddb5af5361b5acb7a5683d44fa8a8861a951b713fea7ad8
SHA5125dc0df3f30c8021f55cee9846f5a6bc8baa2c434ca20cb01d83098898691382f52e1d2b461be9cff81d8ed7ec48db7f08361770c66c9c3f9f322608486ec3876
-
Filesize
24.0MB
MD5e00fac834c1e0edc9617115a3b15c50a
SHA123636c1027d68da6b3164fe6af9d219e396e59e2
SHA256cf2a1028e61fda09a0779606c0e8d1538becaa9df4337391af703ce011604871
SHA512959992e789ea3a314e4a756378aae0c8724fe7528b2be324a5c4abe0d1929ad9155a7f7c61c1e47be1c9dcc5a973e9ade222ad060fa1d65cc520770575618bc3
-
Filesize
2.7MB
MD59e287b203439ebe1068f1317320cc5c3
SHA124333a65c8736293ba2ca8e89b325fe263c16311
SHA256a5d0f03ab6adf6c381dbbe208c684be4ff4ca0a0107701f1e14c25fb6368f6e8
SHA512e0486b609bdb59b3b6be2549b39b46cd6848cf76deb286e85b6764a02f1a88d2b6e0dcf5a9ad383d0a7eb979b1414452391f25f2bc25c564b303e3e0c05a9f7c
-
Filesize
1.1MB
MD55ab3622ff045e703fcb8fec75d26115e
SHA1b692d3f17152761dfde19a0520e8260c83ac16dc
SHA2561b4840315940fe97997cceede6546b847bcb7b2f470df89f337f72e59c795ef4
SHA51263c7d3bd5c6a55792b27d838f47fa05e094b2adb4e5e59061f8a6751f357f542741f7702d36778e83b3f58dad375d2979d6fe85fcc6c5e903c0805281b754a36
-
Filesize
805KB
MD508803eb352f9ec2115ccf69b86cdb89f
SHA16f596b7efddcd229d9136db5c540df31f100456c
SHA256e8df74389a9fb32001cb10015bc2555df9e9b7f84524384adcb6bb28b2f54680
SHA5124e517b98f5ed6f1ba1a3d6390a29bf27674cbea4b4186eb705e3b626f94274409c068a258ee293ed02e894c25f043382a60169cb7dc5d95252391679b63ddfa8
-
Filesize
656KB
MD573e50796ee76522a892ea3b4ce82e40b
SHA1e8e4198c1aae3a2599e17054c009cf5739dfa9c7
SHA256e07fb0a51b0dcbe31ab55bfedfe66020d3941e9eb2ad4cb9c049ab0077aed727
SHA51269590b04ab22b23c673d8f229b85fe146b50945f14b01be10aa42d611fed3de66a339858f8768e41ce020073be4d64a18de6470fd652df16d32cdefb7e92b0db
-
Filesize
5.4MB
MD5fb9d602d03642d73aff34cef3681b14a
SHA1e60bc7e5a697dea27d64156f8a849d9da44f775c
SHA256434ce6a5400520aba00fc6c8d9736361f7a45d21d1b1096bb40ac5ec6e22c75d
SHA512a4e484119da1168c3accea49ddaf3ffab4c3077c0b6d03bad54ffa722654027401813dfa2a4d51d63344f27ad5154aabeeb24673989d2debcb0547a643b09555
-
Filesize
5.4MB
MD5255e7f6fb6f9d1b85a032af2fd10a7d3
SHA1f8e8d21d36e12a466fe7ae225d0f59e46a71fbe2
SHA256c9323b9e9acf9111b31b447eb7d0f60e492abf387696207759e5c61bd5e1a7ab
SHA51234ac9b35e75acad8beb3484fc106cc6a83e3523199f73031aa2a901f5b2353f485bb1b888049da967d7a12597bdb740c4d7f288392fce03bacce3f52dbac268d
-
Filesize
2.0MB
MD5e2fdd2ae55c509b372f4524bbb99c654
SHA1873b1322c644f32213c477363c814f36901a88a1
SHA256bf49cfc76e75bfcbe533213ac62a957411fb439ea48c122e0528f96a64f1710a
SHA512b942a2898c600ceada1c8e81cfc65d1ae04d3f35b4b9512318d544f750247ff3f5b7700413c8768c1da47fac5a4933d7d7d10ea1d928ff963b76685968804343
-
Filesize
2.2MB
MD56cfb580439346253296ca07fdf34172b
SHA1e417e16dd89d76cbc6f387279fd3957de9314efb
SHA25650a222cbdfc8739cedd1c8a3ea54da63fc488f45351f29bfd049717f0d77b689
SHA512a47906d29712d1d2333756672356c932446b8856fe8f40fbc461db8507d35f615388335b772221159f9a0234713bbc8d4402d85299ed2e4459bcd82c8ee484cb
-
Filesize
1.8MB
MD5ba62bfae3cab2bfcd5c6db952e28e313
SHA1c13208e2aee5879f61033d0dce09353a8a83364e
SHA25619775fb3441a42522268395f7a077275ba9d5f7621922037fbffad62c4dfac43
SHA51214a539986f120377b11e8f84c78619fe16715d00bbdc66140ed558524edffcc4f63618dfc64dddd115dc56455b6b2a68b2dadacc94bf01dc89eb914a1dc11121
-
Filesize
1.7MB
MD59790536a6cf41f212848c706bffd958d
SHA13b4f1b9a4d4de5d4cc7a76affe5f73f4de207827
SHA2565127e117ab6c63ab63986cb6e90d19a8ece37d1e5bede7c66216fc06dde3a658
SHA51236b425e20416c15861c476cb807d468b2f0be543dea2fb05b1b5f7ecd6f130f136d76db0a55a92e3eadb0aacdb45fa82766b7d58df10da68f4684ae921896e0a
-
Filesize
581KB
MD570504c8a8027fd1369350bd6a84a342d
SHA157e344e47cc550352746b305a4c67ab6a7c1bfa2
SHA2569af5280a0950f1e97fbbb7bda87e805139067fd3fb447f2869ae3f9e557b5ec2
SHA512c40b1638651c3fb06cf1944df229c6cb685f57447f951ea9d7b570106272fa5d73d1b22579a7601d529f0039d5e193031bf2e7ed265dda461142d9102b28aa6e
-
Filesize
581KB
MD53c2d71f977033131baf7e22a40454167
SHA1dd82424d4efa9f9391d477fa114eee51a9e07639
SHA2564b3e356b541f13665a8941817528d2fbeefa224ec08695b514a45eeb7cc85581
SHA51287fa87d6a829a1756dab0a0c99096db709c46915c7ddb8ce9993b497b0d5e2cb3abac769740efcffce9b21e5d7d62fe0497c2c31300e230eaa3e2e6aa22c8b48
-
Filesize
581KB
MD57f909235a349ffb51cc895a782cb97a6
SHA13829429c413a7f52989445ab3d05f00d5ed5416d
SHA2566877e2bb09daabfad8d1dc29241379c1ee1302964fd4e2dcd664a1f42a394aa6
SHA5121f46576b8a117d3ad76551f854a9f9f066be7eb7846c8929e835ce90f53a759101929812508705c39ef45b08374e7d2205859b4f5ebe2cc864974c74de186030
-
Filesize
601KB
MD5f1f1d17bf3771cd47f03b4cd62e0ca65
SHA11c93e34f6a02ef31f01f06f576222d5090fe2497
SHA256d00b15fcd82aebb3c8f0a157d952e68f33633f6e07ce9f6bffe58cc71e0adf91
SHA51205952feb1e74277ea940fc5c08ca6182ad7829750a067f6a62c0110b4302cd6d9d133e8afdf0ca6fe47768f560c13b4753e7e6324518ef91113c37008b165d87
-
Filesize
581KB
MD55fc0e15140adac8200fbd75ba37d2f69
SHA172080cf3ca1558e88c0171a07c930fa5e3998fd1
SHA256dee067b551a92a2ddbccde26bc0504d12f834fa1e0d6451f24f1aed148ce0bee
SHA512ed98aa052e39f0f663fdb20135469b8a2d83141ffe3442d8561045cfced069a2785d21d9552a570a67648ff5ac246344727c9c0ed7dd6c8ffb5f510561d72eaf
-
Filesize
581KB
MD51bfd6ca8ef8b1fb72c162c2fbab1ec65
SHA14d6f4f7099fda2c7ceb8bcc9fe542673deb31d55
SHA256423bb77c209cd25d68c49f336fe2893cad5ac2ac128f5fbef3fc24c35f271d5a
SHA5124f7bb33f71312b29830bdfb36c305495601fccb488777c1bb490c7ca38e6900846427687c7474e0957976b2523477253e31f2bff388b561b79934f278660ef25
-
Filesize
581KB
MD5c39909efe3a16a017be3c4f7eff2b0ff
SHA13656df2ac125f540eb4f77e20b4e6388b851921f
SHA2561ff3d0b8e092007e07ec6169c85bf10e203cfcf186bf5b998293b72d0529b819
SHA512892e6223e1d06f28581634b385add5ccfd4193cb06d841f4ea405a4362b16b15991fcca82cebb46b76f760e9b543f165b0d9267def377dcae09d0fcda779334a
-
Filesize
841KB
MD5a9e66a2124e53a2b5260526423830a0b
SHA170ef34fb52bba6571093e44d002fa4decef5918b
SHA256ab5ec86b09e5eab5e660240188b80823bfca011754b724ffad1814ac8b626470
SHA51203e82c0155a1c5ad196ba6402387151f6be54ef92334ac89451a159d6ee27cdda4e7302e25ffc6ad5a7d554b815e945553f1fa25aa5b982f46bd04fa172ab327
-
Filesize
581KB
MD55ed7ea8558959964d12ef06280291b05
SHA1fd62156381650f265014994547146651a6180ffb
SHA2566d2193a3de76dc8206c4864483e42576b9d071eab071b97c76fe89f34e783b4b
SHA512c746b49381388f416304793e136e4c41b183eed096f7552872bdee386f7da8c845b8338da507274162f0125554ccaacbd0166fd39fd36f0446b098af0ba19e9d
-
Filesize
581KB
MD53da449dc841c169b3d21e286b93bc546
SHA106f4a09ae8a36ee38603d7adbc6f0dfa3c3784b2
SHA256b3fa82818345b02a137a51688bf5d061dd931a168f5632f2c53632bba45ec26f
SHA5128f085082f7e8105301819d55dea01f9ca14ac24aab6427498104ef5259eec3a71c2d9ceb965d67377c716ac7612a50540650ff7cb5d1ddb27ca958e0d9c782a5
-
Filesize
581KB
MD5ba3a4ef68a9df1de8af81c90fb42bc35
SHA158b49b1667cf9abfe36f34c899238a07830cb555
SHA2568f0e992afed0044f657a0d72c5e79ca624f4009c98c5f014f63ff1dba773af6b
SHA5123f222dac36317e108b954670b1970395d952235d9ef418fdf6bf5c901c90d4b8eaa620ac53039f1dd1e573c0325c5b7c18b5c410c9682658ca9889a9649e79c1
-
Filesize
581KB
MD54b1045f664e9921aa8b4163ca2336520
SHA18cff25949255c1d6b76bb6f89159991e1c1641db
SHA256f862ecee2546d6281943edb023b000ae2434e60bb5fd2dbbaddddfb8bc525c4e
SHA5124e73fca76924e4f50d19fbd832068f1802ef9f635490ab4a908eaea1f3e47c3e356d6227cbfb11a5ad1252e5ba0b3aa55178ace857ac6a59a002609fcbfde270
-
Filesize
717KB
MD52107a22bc2e1f22faa2ad2f052551ba4
SHA16287a36cc9e59f756b152cce0534018572963c57
SHA256ee57a6e9a0fe4ef384175bf0cdd9427deb8bb8c28fe33253590dcdcc082cebb5
SHA512ac5fabac832e497d37a3e7d036c6d9f01aaff71c2262f141af695692a06b58a25315a783d84a3d285c7dee4742cf92accc18a3fce9b0b867a5d057c4d8331d88
-
Filesize
841KB
MD5deade0b3de058fbd28739e9daf87567a
SHA1e537a309d1bc66d4512e595c93f48cb95e41bae1
SHA256fa2ad7d5b8b5514af4848c0da5fe51ee2a5cec880ee7052ae33e7705d84486e1
SHA512d190da7b94b275db56b4935a564f761623067343a2e2aea093e055b70cadfade5637373e77a1a260d56b41413d60beaef5583c767a418b12f921cd21e6676b54
-
Filesize
1020KB
MD5d66cf6094ad996554256b1934a6844d6
SHA1e0a44d208f38c6e1db8eeef7a7d09647b5834513
SHA256b3d233a2d477a0f56b1eecfbdbf4c8c1346c8446ca16671cdd2c14e64e104c70
SHA5128df24d25fc7de709d51ee72c41d0b7596a5c8a054d72b34498dc08c310ffbbd3af93a2ec8cf6a9793877505625b2f1264362b47b97c8e320141c0943543ee124
-
Filesize
581KB
MD5386527b4b106ef0e989aa99530468036
SHA105e4b6f765c4d7e258da4a9725e89ba63164a94b
SHA2565244e59378e273534c3abb0ed26475f39deddac68a10289c0f7804c430569348
SHA51277646b422dc1c59c597493bf1236572f68d6a110cf349e976ec378117aebe52a320446e92adc8362faf2a0908ddd2eedd652c9d6955bff7462f5866a29dd542a
-
Filesize
581KB
MD5a11e996797bf40a766db016d1f78e3ab
SHA1dd415b34b1b32cbfdc5237601f7ea42204f0a307
SHA2565be24180de643938d62d063c6cf542ef2a3697e124821a0de8e7b935000fc14e
SHA5123cb863c1a39dc82d174398e76c3db8365bca087aa46637a61dde2ad57a690fa301b5bc15f60831374cf137d4527b74167742818f94f731322d62ca2351396c75
-
Filesize
581KB
MD5ca2bb7e6f7971e7037ec586f465448c3
SHA1873c073e13b627355350a99923bbcb89cfe99111
SHA256a016d0f34120e0d0a4e76c345fd42a60a2e6134436f459175746c87154e407d7
SHA5125b6753dbde96c1f8e0ca5888250bec875b74ac3912bddfaae3490048f75f3b6a150a771f87730f5cc54514c25ef587a94061a710bb86325fb9cdcc55c2378430
-
Filesize
581KB
MD5817a2242b8f8e8ccf597d956492bb5f6
SHA1d468c55765f7fef0974ec1800a948cd78c9a541c
SHA256e774e5a4208fb6777b0074e8335612bc98ee895821157ff6b77bd385f10925e1
SHA512f3b3df4d21aa22b490efcd9ce58c88eb9d8f7331dc2938693d7480cb8bbd516d2073e57460eb9bc60ffa7e8daa3055ae0dd63eaa1f2c34bb32c07a8bcb99159a
-
Filesize
581KB
MD5ae2a35ed58917c7e5ba4b256bfa7e6f5
SHA1737e1cd10f19517feec54b989cd71d0843b76410
SHA2566dd9460731dc9e73b383d300db91b9ed19f7a1b6246edf0c97d3f4389b672386
SHA512d9e801076b3f036f19d2487aaea6bc413082a9648fda5b7793fdd79d55da32c53da11c5f7c91d32352d2389e63df45c871cdf5689814536dcc8415126d128964
-
Filesize
581KB
MD5258d121fd142faa72a60f6c75d43ef8e
SHA13771b7e5695b05e6b2b342f7c08e5bed93f679c5
SHA256a42c21677d57734093b916e19c97f421c57aa0e99bc2183164804221140ddea9
SHA512589f7c4254585eaa0f1548ab408e9ac7f3de1b614d7738a204009eb567ebd6f2ea280d11a854d09fd3b4f518088f632c01e773fe648fa236ee5668a7a30a1df6
-
Filesize
581KB
MD5ab08c3e802eb977c816dd05c334f3eac
SHA1e60ca2a200d755b2ef4d6ce9216cc2d261fc098d
SHA25691444f7ed3bae9f3d722b1bcce894fcc35a44944e7ed95ea0d7a0e2a88508fb3
SHA5122a553d5c66f9184706539767fed1d0b7ed38c63088e86fa41e9b1f7e775ffc423a09836b02c353c874c0788d778754206a72771ff195bcf0214603e4580d78e0
-
Filesize
581KB
MD549b3ff244211e19e7ee660ffa5365a7b
SHA144ef1b31929f7cae92cf57f64f99d1bf5bf9d3c3
SHA256ad3aff95609b355a20df5281c62e273a59d3cf0e5f936a3c589bfe3f4fe67717
SHA51259d45d9507c235a671003be7bdecc5064d5ef994e69fd47b2d0890caa2746a26bd8ae2b23950d1a9d7212d2d569e3608e12b8882806d5fbfbfd0a14b716289a4
-
Filesize
581KB
MD5a12e37155564e8c714d0e9c015c66409
SHA1427939f010d7f61202524c78ac0a092fe6ca0e9c
SHA25633a572dadbf36e9a10deafafd12cc21b152e543a21a78b2fea1e1e2482d14d67
SHA512415c26f838054c47a6cff1a3404cb852be4ceb724d734d68d5d814a7897f914b3d4b1c0726fd8fa64b843587bf936b1c4cb3608648f6757f4be934534e63a535
-
Filesize
581KB
MD57df7af604b0871faabfba7093e95f70f
SHA1dd901fb2d6c7eff774f0ce84b4e330f92bc15e54
SHA2561b8eb562336435ef378a0463ee9fa9d9eabe3042e38af411e1feda2457d1fd55
SHA512120d6388226075493fd44846f7d5ac7ce1bde9036de43575dea9cb60861a35865cee4caae4146f577ca4334bc28d5cbf560c100973fe4f82975a81c6f9e42cd2
-
Filesize
581KB
MD5cd890c8ed573258886445ab544e6df01
SHA15b9e1537a7300223a01a72f2c5399db30dd17ed6
SHA2563476e2efcfd5db59510aeb16424172823960112da4673ce64c42ad2c2a2a7065
SHA512913763cf9bbe77de5ad0b2cc7c262b571a1eb3c8a86728196aca9d50aae63c53a5cf3eecfc543534753e2e0610ba6384702cd81ac124e58fc49b1252635bced5
-
Filesize
581KB
MD57d6be1fcb914fbb766956d059b5b5c7d
SHA1136d8ac588b77fcdde0006ab6bcbde563e077f87
SHA256423fed38f5dda6d10f4c2ad7f13d1576596bbac2aaab7ffcaaf3f79d3959c56b
SHA5124bdbcc192453b795fb4bc30275191a2cda7f1dd08ffac2735cd042239b3868fc5a853902c5a0293b8d681a7fc09f9449c69dc23dc44fc879c22574282b1e694e
-
Filesize
581KB
MD56eb129a71f202dfc780c8a636b229795
SHA19fa08bfa342dce158e67f4e26f362f814b6cbff9
SHA2568c62700035dea49aed8c8b5da34cb19c87db9c2f082548dbe4eae157c039b3b3
SHA51201f8a08d7973aff698ba905cd2fdc113c40caa4c8e60776046f7b7d6b4f38ef180a4a79f0c1c923423adeb3474a21707843bcc4ceae12571b7ea08ca5024a2ba
-
Filesize
581KB
MD54e161707d7b9b29ffbc1af1008e678d9
SHA1b81de0ca1ed4227e52fea9907c6e5e05bde331bc
SHA256c47eb636314238f2610d694f253aad6357e335f49c398b5a7dbf6ad077d3afd8
SHA5123b550688a4d2b3649e1c603109aa6766cb00a14fd9c0488181d7da922cbedaee594a20dc874cc2b9aa7907ba454a97ce31a46915433684af21d369cb66d2887f
-
Filesize
581KB
MD5b6a5e3de18148d7f2185ebafa33281f4
SHA1fe051f2b6fc90d9d5a12113e37bd10a619466c0e
SHA256c37e2439705c0525725afb3ad104ac3ee3a9ff9ef84a2086375b485eaa755dba
SHA5127c9f47f25530f515093b25e2c13de062c8e0ad9a7e55057ddc6cda2a53e228c815063822a3bc5d4b2246598beed9b4189b888a456a9201cd10e3a234674456f8
-
Filesize
581KB
MD5cac99965a2cea83165cd5b4a4cbf8a11
SHA193264b32009b58c6591054f744846e3a412cc428
SHA256a7e08d7f1680fc48ae3aa1f0aa776c0c86ae5bcb8451916fc3859e7068b22299
SHA51290f91a59bdd3e9a3e502213b4571fe6e170116746abe6fec04f2b9b04a9246199ad8f0b60a0de5bcbc715dec8fcf4c161aaf41d79f52b0813b6fad486e5bc640
-
Filesize
581KB
MD5ccf2d806e5186a52cb097634cb98d6bb
SHA126f471f4d941e0c47b087b4f1b66864720c7a8a5
SHA2568cd4b345f8d71f4fbd4cc804dccb2b4cebd9aba9764aae5a6a1efab8dcff4e59
SHA512b87057eb21f3e20ab3e1784af914d69dcb9d1cab08be8ee96721194b104fd143ff7f39be3bb27bcf37a26f8c2f6657655e81a68186de2f1656a57a7086a3191c
-
Filesize
581KB
MD505f303fc865b7eae884aeab6ff32f76f
SHA19b746e529c0717affdcaae5ddb8f740826b152c2
SHA256a4073bf30be1eec54da6187507c70534cff25a807504b99db669ec2355abc170
SHA512d3027d8a72dc6a5b95ab5453ddb6ef7f38d82acd30a7e6990d40df67e303a4ca21a89e87dfaff3f0c7d748c7d3b4dc8d17b158db176480c78291d7148de838d1
-
Filesize
581KB
MD5a5f903b08969b4c2ac8ae184b47d654e
SHA14d60566515c0870f492ed2470c984bd305fd03a5
SHA25617dc3d10e6f659701fe530c41c15741faacd74df68e8290ba146a05ffe28c952
SHA5124dc5748d1cc30dac1fdb9d44edd7697e6d263ee1e0375a2c4aa3735d264532848f5840323d2fd86d8da5c9cb3e5d01519522b9e19bdc4bf52681e0feb46b3d41
-
Filesize
581KB
MD559f1176132b393923007e97b7a97d58a
SHA1f328e61783966bcb9e7484c2b36cc662a49dd15a
SHA256ecdeeee7a14003400d776e1636bbf1689e9cf1d3ad73f0d8ac3751fe63545382
SHA5127e6123c16b6fcd9c5de2af812ac4453677a4ace1cd0e8ca3edcf20f2d24e3922cc26e64fa0d18b07d2e9132f26c1d28e61c68a0f87667acfb2197d6e05ce03aa
-
Filesize
581KB
MD56e21a4667ce8d7e3bf1d48c005a62b69
SHA1ae3c3d5fff7f6e31f7cb7218732c6e3663eab81d
SHA256194c4952ef94041620576f1dc8bea23f4b1d93955b69c347f916f713ed5e05ef
SHA51291e8099c5cf3ba3a10242a5ea84ca87529783a69a82bd77468213b57fd3276c35c11ec84f744c833511ca5e9ea15e283fc54ebc521390b2dcb3e04afb8b85c4b
-
Filesize
581KB
MD5a8da722b44e63aa20a6c0eb303416822
SHA1eec0dfa24fa9251e310e6c36a676c617e14f1cc5
SHA2563a007ce3f04f6b7983035c06708498a007fcddca809f6082e3c177f740c12b3f
SHA5122d41655051b0473955d18bcb3e67d944b173ad12c2168f7d7c326dfb4b0db50a3c10268d5dc09ad8e83750de685d3af5781b9b8dfee5008a22c2c4a110527412
-
Filesize
581KB
MD5551fe3f0f3ace800394bd85e9e71ff78
SHA1196b3d322a2c784c4da3af8e5eac936cc6d30af5
SHA2560009dda2e726e21760ab970d0bab448d089a52745af2123a0b283916f4d77406
SHA512adbe5d8aec088449e17e1077640af3e8ad40734e15725f54e52661cee8758cf6627b60ca322b4d4359937351684c2a4eb7fa01edfb031e52a2d34f2d7666455e
-
Filesize
701KB
MD57e63dc5a2b072ad15b82be5b6aedc71e
SHA1cff8dae0d9613c54c2f27497989d6d5986246da5
SHA25621159eb7f8f52ec98a6bf551d6aa8795e03f3f874bb4af8d5a6130ce5c310249
SHA512781dcf392d175e23e2aeb8d770a3403bc13886372342147a4c99857024311718f50555141ce950546b2a23852adc569110a771758dbcf7b809417c5769185863
-
Filesize
659KB
MD53e94a72831a19386338893c7f62194ac
SHA1531249ca4c515c7853358c3f6dc3cf734409562c
SHA2569338051cadc2763d50dfc23479a1cf1283c6fbdb95b51e76f0cf45c09b5d5ac8
SHA5124d76980dbc9ea6d96380cd14ff4342b346140806399dc1053b3f93f388a2b1c28b15c4dc26f81ab5c768ba22989d1737fb7bdd7d6488ba1e7404461ff7055623
-
Filesize
661KB
MD5b0095418e81874cd8d4944834ed1a161
SHA12a03cb8ab3c0bfb4d39b689323a9d4fe2cf10cc5
SHA25632b251523d057e99ec8c81baa0328866b5b0851b0954a8c28acb0de2cf563a39
SHA51248e46fda88e4491de64a2b244e57da835e6107fc909318c235dd72700b2c0cc496aa0ef1be32681990a27052b529ef669160c2807098990a5f8d680394e2d147
-
Filesize
1.3MB
MD5a14bc84b253a1e463cc49ffd993d89f0
SHA15496d849767b17a060df0db45f7d9efbe9dd0957
SHA256d8951df143e28f3f871f32951902b0d19f5c81d76e708df5546568cf9ebdfcb4
SHA512a8589c139e3262da0a153de7a962adc9f00972953e9f1e6a17495dac680bbcde8366ef65d77d6a78f1756daee4c49a5f6fb0af76c2f6fcd66b8a7744d026bf70