Analysis
-
max time kernel
147s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
01/06/2024, 16:57
General
-
Target
2024-06-01_81f62fcd487daa2eaad11a6f531069b5_bkransomware_karagany.exe
-
Size
1.4MB
-
MD5
81f62fcd487daa2eaad11a6f531069b5
-
SHA1
b8227a36889ffb6ab06b746f0741143c063f7e5f
-
SHA256
fd69c095062c776b6debc7666af0b45aa16735f4d34e8e90a7ce40cf09a00475
-
SHA512
62759f0ed354f4450565acdcb8a7286a3a1db1a1c5cd200191892a8b4fe8c31abc1b2663aafa81e67d7241dc644762c1a7b2ad92d061620bb3226b43bdbd4397
-
SSDEEP
12288:JvXk1mvSbwoqg0fitGbna8dQcLk/+cb1q86pJDlAF44bE2cSX:Rk1mabl0fitGbna8FLk2m1X2D4brr
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 24 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 7 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 42 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-01_81f62fcd487daa2eaad11a6f531069b5_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-01_81f62fcd487daa2eaad11a6f531069b5_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5f902bc8b691db7006f0f48b26d99c9e7
SHA13de5ed4949247fa0e72fe44d8d7fcceb9dc60dc3
SHA25625ae45f5910de10fb1c431a8340bc1d122c417ad87ce0965f11abb4aa39e1771
SHA512de36b550cb31e405b7121fe4fad9ae0f86981ee2d6f2c692f45b684d78dd6bb3093a2140514db04455165b75898fba45311446f69791619868850f89b2db8883
-
Filesize
1.5MB
MD5aebfc897f50a7a01ed30cd130d30710b
SHA18646da5421ca1fa11903015aebaa916170cd1ba2
SHA256a169a122dc9fafb62832235ef127f3f4338d14e8f34f3bed3aaa679f837c1dca
SHA512b903c94a069c6f8ef119464ed1a3497a63c953b28269094d27c69669a64e1a73f1175a2f2d9f51fe582d119622493e72800f039c476135d5aaf8efff30c5dcce
-
Filesize
1.8MB
MD51070bfd18ff2a709c291546bb54cd0e0
SHA1d144e8ac70bb61d7af2b84f97c141a7924746cb1
SHA256b3d34c2b5e6f911f56d24efc8322a9d5ac384f087a733980517365830faeb238
SHA512dd2cca8fb9f162940f06e5362fa45df18611316c3130f7b7b642a4bcbd7161600fba1c47a6cc73c52913b4fb48c87c0b7b65f8941e76f136191189a1bc46f439
-
Filesize
1.5MB
MD5e2581c9fc147b07379060b321a60fcff
SHA1cf672a61517c6a3135e06df2c1d5b45cbab3a8b5
SHA256c3446682f15f0fac6c5be58da33ca00083913dd546fa3f6c73de991a9885b276
SHA51287ec9ec5bf4d7bfb5aa29cca234e5abf5a742bc73e913a15838a722b116e2f473d00c50d9937b651e717f1ec2190eecfdf546333d1e7aa16de387722dd9ef4ec
-
Filesize
1.2MB
MD536ee5d9cf0fa345b2c9bf33435ef51a5
SHA1a91ad90e4fb50dfe902643e5335201cb7fda7405
SHA256775fa7ba1dc74c0a07d20ec0a50cade4dfddc01a1d684d01783a769df72acf5a
SHA512d27744b0be62774014302a0bf717dee7005fe3ef814cf2ecf43d37a4040974ef8d2b6e7f39af86edc30e46b84bf7e57b2f86293a5ad19eefa013644d88a68528
-
Filesize
1.3MB
MD528917c0d79ceb2e7bf576ae6705b89fb
SHA196110c6ed927b0ed5337fdabe419962c48d95998
SHA256c1442233df03f8e78f232c36e00e585963896ab8d16ba389c5d71db2835eb41a
SHA512f890482c2ad8847686d65be54e272d67c1de5b536bef4c6f881855c6956549c8beb8206696e41a0b7a21e0260d2c8dd76a34ca5367d6ef47155598cfffe50e89
-
Filesize
1.6MB
MD5d9ff3ca48bef96b574914b6a1e00b210
SHA1192878d6447995c0c275d84d3e5086b3cc03b25d
SHA2563c15d5bc1165854776f3b1b9a3f28b3f401777750ba94bc15aabd05e9a4ce75e
SHA51232fb96df2b808f9f88e7dc480231b7ca58b41f14268608010d86fcf07d9a5ce2574621b13f48016eec77a806e9ac619cff94e5c8ec658967d803e08b7628dbcf
-
Filesize
4.6MB
MD58214ed9fa2968fa6c477e6570e6ce98b
SHA10c5ef50be1c4f27878f556808133a807ad1273b6
SHA2562a15ac6b0605839a24204afdfe555ae4ebd7e8211299fb407df391319681a92a
SHA512b2922253595f213098d4e2669d35c4a03a7d828bbf32d5bdff3b3e1209a23300022b53e0c1cc28bccfd23a98b5ce0ea15a4505fec6a5dce5fe13a40d312cff40
-
Filesize
1.6MB
MD54426347572de8e78c05619046d7afe8b
SHA177f68b1d049f33d98f56d784e8d6b669cf13850f
SHA25605a7eb0ab037262813759ae2cf4e35319a6ab1ae49ddf8b6145dd723eadfb7b7
SHA512f0c128283f47e3614d96520730f8379bc54471ce99ac7f6a0fa30ad9b82e8329172263fff83b20e1b97db1e2ff503c6bfc42810b44a153b1e6bddd855044bd78
-
Filesize
24.0MB
MD5e7d65284cae3539997a6b181c690f634
SHA189d42cb7f87127b8e1dc23add047b79d10912e3f
SHA25633b1918def94d982a479f6210e45508fa067175a02978d33cd2bcc68207ce415
SHA51282e17298ee13b7999bb29c7c9649d760b5c64a7d489d9d6aac0b138c3dee3e070a645f3cc9f31a04a44dd360acdf100190270d4be997cd9f3cd3691bc7889f3e
-
Filesize
2.7MB
MD58c44ebf7bec1db98990b7872885975d7
SHA1261219eeef741eff5e907f07ff693675f403abd3
SHA256e4d3f4af52544a95a517b689489c990c92b7a7a297ad5b7042ee080157c2ed04
SHA5124cc70d0001ed132cf527719a0e2fa8140cda63f08f92176e43fd2e71e821258a3ad47401333801fb816e289508e54310f23ecf78bc76e731f8c44ecff23e648e
-
Filesize
1.1MB
MD5475ab451ae5c278dfa291ac54e7ac0d0
SHA1ec93bab0fa4646334fa148ad6ef8525e0a69d9cf
SHA256ad4df02b4f89aec21e8e51d307644fa305fa53e9286add8610ba01fa53869bd2
SHA5129c6ded08b5071aafec265e8383818a057f8ceca3b59f7412ccdbf8369c68a6b17799db9dcc365d9644aca7eb2f944fa0037cc3811dea04823e9b36c1bd9282f5
-
Filesize
1.5MB
MD529cb0530ace8189cc7252c8fab4cf313
SHA1b4223130adc2d1b31ee06a142a2468df9d6d0105
SHA256a0de3aa0c73058ba274938fc9185a45619e54ed44e6faa91efd3a8b1df3bc6cb
SHA5121f0fe0092c28228d95da40c737f0d531e33ec56766cc75c921a6d51b2198204c3fa9e51c6ecf9f239451177b31d246c681e0baa319f606fea22f9ecaabda51c3
-
Filesize
1.4MB
MD5fbf40b5d355696a194712be5c924347b
SHA12dbc18a88a35046afcc454ca54ce5b617e4e8933
SHA25651a53c21b4be0b70495c3a708b2a1b0b6e79263234f465a4527fbf1a5259fd4e
SHA512064efd3f234ca21514cfbafc3edae289fcb70742002bc9a24ab89835d5eedb833f6de15c6f3ede82925cec6ea0461d369e1053cc09aa9911727d44ecadae1448
-
Filesize
5.4MB
MD5b461a68dccc108f2926df5529c26e9d1
SHA124c76c82de65fa4b76e0941c1fa907413b850bbf
SHA256a2635223104010aff8818f5bd0b81cfa0cb45949f78da4123f47f980bb05ebc0
SHA512fddf8cc0752ad8a2926e8af513beac2538b0f950a84d0291861ca0da62711c9d0f4fdd59a1d35a2c8d3757a16db3b2e18db90627d2013b3f0ab2d80ec015bcdf
-
Filesize
5.4MB
MD5f7199b4992fcc660a9422e1eb3a3109a
SHA18d8e5e03855c93b897319100ecbb654ca38e1a86
SHA256c223f542a6b27e8e15f82a9f7f1fcdc659ed21874b9625ec769a9c0f005a501a
SHA5120e1cbd8af0c2ba1adb3c4d67fe88e20e5a5b74efa1bee1e405775bee5688d1083e7a380e7bd7266a69dc710a231d455ed0460460e1c68bd44abb91f3278b061a
-
Filesize
2.0MB
MD5ec7c00238c4a7d114a3cc95d367b3d11
SHA10d9f08c82043d65134a22f0a973ace16f8fab3bd
SHA25692de14216000bfb57501c0e16ba01e5e74128cf8ca68e38f9a9a5f6e948edf8b
SHA51271b4f177a66b08fe87dcd27df5e786e035137f6dc4a51f512f8932000cb708ba18dbe0fbbbd673060065b933435c2b5ce414ef6a9960fe0dea55517dfe9036cf
-
Filesize
2.2MB
MD597e1caa089a7a237b232b496879f4881
SHA10c18be286c6b1e6e0ddab86aae9bc2b433f65704
SHA25643c8a09660494bebfd9853d46842f921a391bc0e78173f182d7530f99a718fdc
SHA5122831ee00eb633dde9a3672ed2f057dc6567d172deeed3cb3bfaf47ee871b822e8fa33266bde86f78eb0153c447d4b91ff303d227983e49bb28302ab55a588823
-
Filesize
1.8MB
MD56d56a6ecc26d370189b33cca7b930cf8
SHA107f70cde2f167afa7f29cf7179a1056ca27e131a
SHA256fbf8141cc2d8c95dd1210f2e68642da66d4b75fffd4470fb07490288d5e364e6
SHA512bebd3cf30a2dfb040fb4c5d7cbdf0ce566637affe46462b78daf8864c7073499481eb26b05e82a6b9af8b6ae976b425fb9df1499206a69a076d7a2cb17f87b0d
-
Filesize
1.7MB
MD566cf0a7c3817dedc0921b49206c1d620
SHA172445f57a3cecf089d8703356278bfc791ed8a3d
SHA256b770be4ef462b19bafb9ec4c097eff9959893305d5011bd036510b3ffe53a8df
SHA512169a4b6ded5f4e6ab81f621f0d4dd7f95bae8e0e537c4f3b4e83dde06907c41cf223526a7af9ac60ce611ed1e4285b3a6a8970b5ee5774ac9a52e8fccacb6e5e
-
Filesize
1.3MB
MD51a61986a54131fcf3d5970b0cf860979
SHA1db1b75cd7f34b6707fd4095559f38ad48abc4146
SHA2563c34c50e811c065d57391f7ca4098ad2311480e372f26bdc9db9c6eb830b1efa
SHA5123d30aef13db31e8b1f71aa76c5ea408e612d53eb98d412e8490f0e71c848980c6e5b23603ae2763bdd7a122f5604fe03cf56708f9e498ef6dd0eb4f27940c435
-
Filesize
1.3MB
MD54f3f5c14bd7253e808db0cf308e2a596
SHA11c591d5f487c1cd8b6161466f39b52e08e73ae01
SHA25636a819c7e46372d2a9819ccf33972cd73954cbf384813e2c26135310e2498c19
SHA512d6a4f747992d88ecf5d1eddead4a5fe342f526e596c2526e18ac031fe5ed026b791dbaac5b21fc526b8c03ae1d3b026292d7f9f962853d2f802dddaf2516b293
-
Filesize
1.3MB
MD5d8eaaf619a831757bd4ca01581043783
SHA13f87b27f4cae98f2f1f4b6276686f9e41596ee5b
SHA2561fa4000e2db67dcdab44742ab7e5c18b1f85228cae9e2b48deb1e71a359cb2a8
SHA512ed5bd9ad054c387417be189452c15227f614024c5f3eec8647fadd228a94436f8c91f5bed6118ce8259572934fbb6c5453ca165aaf169268a921a05120b1608d
-
Filesize
1.3MB
MD59d9e84bfee5114e3b72edcd9c1d77e44
SHA1b9ce4fd22b9dbec006c0ad85be1ed3a5f05e4e99
SHA2568802531e8b3a1b85a752c4076df04bcd9157f367c5958a3874afbb54061b1987
SHA512098208c5697bbf58d1c2ec8dca26e6c5a5cb7417ec7a2d8e7553e8e7a32db0affdd8f16f0ef5e54501d9eab6b3a1f4776d86a847db2102687bafba9a2678f646
-
Filesize
1.3MB
MD5f772bd09630185c93ccb853e61566673
SHA15925e6e4e61c494784829b4b41726de04176362f
SHA256c4fba6c13e3527d8158ed699a3b191aba4728bb3b2bc1c76c25ca904f0d6b3cc
SHA5125d1e36083260a39744952778fb073378297e9071e06688308adad01794f56423e2d938ce2a1d16fc4d2e1baa8bbdb2fd64fcc52e72d39e44c35ba02fd893d625
-
Filesize
1.3MB
MD58d37cbf12fd4065a9dc22d5d64c42482
SHA1b2d4ebfd05922a3c4bc00e953fda1b3a792584dc
SHA256226723a0b35f135512c338944d7b933221fff8d5d5738efdf993c8f1d71dcc85
SHA5128b65916d81a26dd68c640f743998cb8e56491c9527ab62db0e5448006a54d3b61a1d465c6342d1b73e3beeef19e32f33a85cbdb81f8a41436d7530ba28535c7c
-
Filesize
1.3MB
MD5b0f242f7e839f361aeed29c4c430c783
SHA1b3e34ee47adc6e07c8026caed36df6f95f36378f
SHA256077d89e22f89c2587a5b11a915423004d10180765914cffe334b85fcd0349865
SHA5125a78432e65d657969d2aecc148e50d6f0e7a870700828ec99594cd587a92bfdeff2160229637ec9a300fafb3ef71215b8182ca24d50b37b7ec0e568e3f8c81b0
-
Filesize
1.6MB
MD51807b32ce17215ad6ac0b3a6938d279d
SHA18b38ea5ef22bbc056d730f9ad43ddbe6d4cb17b3
SHA2560f74fecf1ec0ea62f72f4796e5d507c7d20a51d17d80ca9b2c2cda4b1a9ed681
SHA5123431eca2f2640389184fba486e03c5fb8d21e7622c087472a3e9a82c135c5fc685842ac98f21c69cb083fedf9536f2d88089495cfc7b3f66f90d32d46d4dd11c
-
Filesize
1.3MB
MD506398cf273962c938ce314d6bf16ed0d
SHA1cd49c64b70007ce4952933d64f6627624c286d64
SHA2566249299aa27ea41ec60cba906c77a6c8e45ffe9cfd5579d9000b9cd2a70327c9
SHA512c6e5e65c8a496bbf548476e0b2910a246c9875ac0e4eb9ad5bebbf28a77343a09623c77c1067cf86c69926932ac34947ad038b8e6784e839c9cb55e35010eae7
-
Filesize
1.3MB
MD5335a8950877c33c9c392300cee7c26fd
SHA141ec37831d9b77bab878bccda4b321530383eddc
SHA2565fc9fbfa59afd04a94179916c78241de9461de9f66c64cb0fa69e3b2ccda2a89
SHA512d20eb1d6e88ce6319dc737f42dab13dcd93b83a198351dd172e62381675234cfdfc3043f2137cf7634bf3c2e7832e3d60842b6b0a8cd17977265030567a78ebf
-
Filesize
1.4MB
MD5394455a8be471435d69be73c0872c048
SHA10c1f8c175c39f09bd2204cb23e0b15905b3259d0
SHA256b8641a02a07d0517a0630dd43544d682d24e8aefe69b6f6caa753dd1b1214e68
SHA5121353865c148cf4c52bc25f1d5615da032519b88fb72845c4e3321a6babdfb0c0292c3d708e78b443064e1964a496bcdc43986c6bb12b7e9f5f784b41de58a183
-
Filesize
1.3MB
MD5411ce50d303358a95e0c22819fa16161
SHA17367f798495018b32f518872f95bbfd84519a4a6
SHA2562ba267196ebd86632e86fb467b9f7d75b050b00e589cdc0132bb9f7861f11c48
SHA51254188b8e80b8b0ab106403625f89dc565ed9b8d4850073b7a0bd18811dda9691cb7349335984f842a16f84a9c2fae7fa6163df9a7ea402be878378fac48270f9
-
Filesize
1.3MB
MD5aadfa81dfc7e607945c6ebca91a72ad2
SHA1b76effbe26a70c12419f4647dd6a1540ce88ee8b
SHA256d42ee58c39096685b2e993b21bcba884b2f24b332e72eb66bb9a30bbbc14eebf
SHA51243a0ff2815d8bc4720ff3a7e6ffc10dfb6995b4e1ea78cc55d3457f1bce302911ef9374cc8293e8e5e506db2e532ffb3c95c43bda222f37a7d5c1b854693b59b
-
Filesize
1.4MB
MD5fdfa75521d23b4b0fbb44d3f81e1c048
SHA17bf983483383d8e3fafe2305e03f8bf046e07e86
SHA256e0d82eeabbc653c580e33ea599ee69047a857f1de6d8decf164c8819944cfcb5
SHA5127691ef15bf0f57d43c04b662b65516a32a54e74ca97e105a3dcb18c530311f1736856c993ae595e817645cdcfb63e7c0f463b3c450831f675e3c96074f2b5021
-
Filesize
1.6MB
MD5fc3192c040942bf6a0c639178a1c0770
SHA1bf4205e4d02383651ec4eefcd85d72e609ac6d54
SHA256b3f11e949331ab42fd5a0735808d7ec3db4180ad5536b16d910029b505440833
SHA51295747ebe9a308bfed87f65002d047a531b11c3a1b076e0afaa8eafdd2507188026a8e3a01262e445255dda98276a9ec33f9352fcc708dacb5b58493065c70f23
-
Filesize
1.7MB
MD51d1a4fa9971304f8e75c6fea1da85e03
SHA19c2ef43cf6f4c7865022930d2a4a9fa42f3f0f48
SHA256833d6261a73892badb266b89be00d87ffb4380663b2facd8a3c25e1061b97d35
SHA5128c44ee30067d04acb519a251cc38e424ed36753da4069f4bdb49a65589cc3420398beb18188f2b35e5f1f995824e9267eabc29d0c98c78cac58668268bb8e772
-
Filesize
1.3MB
MD58f051c57ad48f19918ec28c644f6abd6
SHA151595aed68a0b14c7bea9a1e9fc39b1afbc3fd31
SHA2564ad304f7707cbb15882bd23e08a337790b3e128f279adc636b3fb53a58da34bb
SHA512d244d4d684767dbfce9b5457b9aa348db0e659b28b587946e83651ac390132927995cf15a92cff189843fc2176cc03fa09197a5318e67d91ac76b7283761acaa
-
Filesize
1.3MB
MD5c649f40ba5144540963a3fdae7e63513
SHA1911ac33323cea25b64fd1d0040ccc133f75d65d3
SHA2561c0760f228374a5fe1cde5e216254fdeccf30e9f639a46819bca0aedfc1f8e89
SHA5121827068c0ffff1a91cecd9cf77b07b68d316336538289f39104f07f0e8a62d71694f770cf43f2d1fdc8576664df9ec286ba62fc4dc74bf44d06b213d030dbd50
-
Filesize
1.3MB
MD5be4203d6c5b4ca1198ff6b1c8c05a372
SHA13bff135439be2a0dfa543af18557f9bb508a45cb
SHA2569385e2ff9a7c0d832c25047d2bb9321e8fe46c0f2d1aa701b4234f39af02c645
SHA5126ad7bae7af6eaf31544e0efd26c2defac6702b94e49d9c2d99ac228cc2dd3476afa0d32f3b7d00ef3b10d15490d85dd5283aa4e70f80b40824d1781131549818
-
Filesize
1.3MB
MD5e9fef0de5c9746e1c3d60b1d54776a3f
SHA1577ac499bfc77ca647e18cc3f72e6be71f65ae73
SHA25641354c35f24a20f73b8f06483c7817fdd5edea14ca502280563ad966fda9d6ef
SHA512e46bd3b6926abc2151824cde676284c4678ad146b633d21b4872040ae80fc6f4d9c41b17483ab98b169d3d7ebe7b516ab6f9bf6b77bc27608b2bd912caf63206
-
Filesize
1.3MB
MD527901c8816569d25bd817224428195e0
SHA14aeed8eb2997e5f281d3b7da5a79c88b7aedda7d
SHA256defce3fa68248f00d7bce75967443e3aaf2ba8305b6e8cdfbdbca2d29cfbaf85
SHA512f03165ef73f43bbbc9bed44966d88a4e3f73476d239dc23bfcbc9637ed638b828be91c723503de231e710c7fdea1f4950aa8bb719b3e98e8e6124a84e8c2bf4f
-
Filesize
1.3MB
MD55b4ca01825f030f6aeb2bee8480a9ff7
SHA10e219b0154e2b1d174e6ad1a6f3a3df2dcd92075
SHA256b3e95929e997f6142a76480a0deebddac7afe342b5f619213e3470f3399bf404
SHA5127a27462f04c93a383123e0818326bbb1b97fc64e1682430a3f36fe50b2afed2cf3656f5fa3a79f9c2c91c6bbdf474945418804bd95324eb52aff65ee2a2ab64b
-
Filesize
1.3MB
MD5c8f3b6a29023ab87df3511dab0b6fbdc
SHA1fdc649dac04412f1cc5dbdfe6766ff7145615923
SHA256765aac0b3a94a7cd456f0b82c759774f037c2328c05c7eabdf93c2ae25097a48
SHA5124c96054758fad46fb8f616c4b2b6e928a290325c39d5de3ed3d27fb59aed2d404c444f3f7f821d556ea4461c5a11f9053cfb60b2ef60a1ad8f78c41e0a42da28
-
Filesize
1.4MB
MD50e1f75f3c2477bfe73867a3418519784
SHA104126f1617abff9bbe307cff78664cd7f597d3a4
SHA256d03f05a8b72fcc39f09ee52a62a18b2691f4ead415c6bf89af98bdad11eff62f
SHA512395c094eac667e35fe4e1af8eb59f04e00fb54ed1b6cec37ab03af49ecd480bb5cbea7ba09106da2f935b2f083ded2ad430dbf9a50c173ebdbc4e75f7eeeddf5
-
Filesize
1.3MB
MD540da38adbb2db005fc10131590b60b2e
SHA1124a2c17964db7cd8f9515334b9f221cd0b26639
SHA2566f7a8c9b393a0d1e1fae4bc5225d3e3733e5bbf5c80cec6bbd945b0ec548cf57
SHA51293815e51c04a95868039f36bfb6f8642f15534e37c98f83bbf94f879d345acc637c25fa96bdd333250c8300ccb5ac3d40ba81e66ebe7fe799cbd1b8059649b05
-
Filesize
1.7MB
MD575d42ebe205cef8649e242c60b002f6e
SHA100b5678cafa13ca53823cf3b0d5cc56ae85efbc3
SHA25671df287c9b0f8edc3ab85bc0aa273569f2b8adb0778dbc96dcd3974958a233ff
SHA512c453effa09ebe3428f04fc6059d93776d15c6ac48e8bd6a0a3a6af37fc0bbf444da6e3d435b4821aa17563b1aa849bc101b98b3242e9947ff04ac40fd31ebd34
-
Filesize
1.4MB
MD5e97d282fe11f1af0d05248915fbba123
SHA1399e9ca2c680c611a99e12e1e9af92d0dec33fe6
SHA256c59f9358c21bf01236349fd173bd520e9a9a20b8c49eae81398716ee2f81adf0
SHA51262e01bc39744e7894919edec548c6df5d7c96147725176982167742dc281a67741f35a404bbd904546b848139b9797aa2892dd79a8af6419bbd78405ca7b5142
-
Filesize
1.2MB
MD599ef851242145db18a496e8f63faa0de
SHA122a0607fb46df0d1f5727d943df1ae4bdbc2f5cd
SHA2563930147c235ccfe346d0488080fd8db8a9f224a2b59a40c82e857507605efa32
SHA512dfc2b7284a2264fb1dcfba5ca9a860980688f645b320b5a9e5023f7b12e1abaffb772317fca12e7d7aa450f140f7054e2790b9512bc1761c4fa580000717b5f9
-
Filesize
1.3MB
MD536628a9ef269fd292556318181a97043
SHA11c23a0fb50b73109edfdaceb1bc9d27233452f92
SHA256749163d912abb5676c9b8078b380455346774a81f7a684e3fb5a8c47ef0e10b7
SHA512ed596c39b56ed2b964d688cac7cfa74c8c6c78a151bdec0b8c06fb568851c99c0d0518a2206479e81da01baf48b5973669dc4bb9724da1a5664b9fd2622cbb1d
-
Filesize
1.7MB
MD50aa8f163460c3bbabb67855cfbf0e545
SHA19ed96da6b55a10cbef424c14d04309e47a209252
SHA256e2674a241492741ccfe8b791a1b497b0265e5bdd6e631ed7dc97944d0b064659
SHA51213dc55c9efede17d795d3f49ccfe367833afe17f8ea3ba2b8312e6610d4b80e8dbdfb60b2723d7e46148565ccd5b39fad1d2de8e86436c4e109ed33904c7d488
-
Filesize
1.4MB
MD50322101cdf3962141bd4d2928eb0d3d1
SHA10d8b83a6a65042637c26565277bbafb9d06ac338
SHA256c1aba965e29d3175949994e5118cf394ecff0de9d357e4af4d40f00b9bfe4e70
SHA512a5d7804b6e52a1fe8df73d7bdb4a2694b2c7eb8697d258396f15bcbb08b542afb3bbdd3e82dd37f7c1293d1c49e0429fbe46bd54bf9f30bebe9812b1bfd0cf34
-
Filesize
1.4MB
MD52c229ab84bcae1dea84a3b983445833a
SHA155c85f21fa2d326bfce8eae4331049b4e498d36a
SHA2562976ae7a84a8b09ca09b33f38f64661d34d66f6b4d5e08909657878265bca915
SHA5120a2dba11bed07166392f6a0039f960cb72c6f4fe037e200ea37dddf68809e3d8f2145a5854a1f70957315a88f91f3cda55c67236c59007e4843488e8da729d40
-
Filesize
1.8MB
MD5942d7219ba83f03c1de04639c931b9b7
SHA1bc451ba476cd4723b79418760e50ccd399d79c4e
SHA2562054659eba7cbb1b4ea9c29725cde120c538735247ab484e951f731b50db937d
SHA512be4b5a29ef1e76637b2b5bb8c5f71c45d7d6cbaa0add8bfbe9a45f529de705d20900f5d0b02831c21f57231f6df44d16a79fe0526b643db899b8e2531a91894d
-
Filesize
1.4MB
MD5224791e3cf4f4e9fb13588460acb34e6
SHA18d6dc7946051d5cb3b4b86c123728b4238d1dc9c
SHA2563ea4e27e4526c34ae351a863dacf82bc073f9007269f94a3e3ca0568b3d3f5e7
SHA5128a5de5e82071383f1e7c61240bcb604b4a69f44d89052465da6b5557263efee7675332f459c78781b8e7cec1164be1cc05f8841ff60561297e43c9de0d522948
-
Filesize
1.6MB
MD50a6df252eee2dbcb8074586719779334
SHA1686afc03ab3d8fafc36a7607aaa12f2120c9477f
SHA2564b574e751f091ae3fdc2bc3cb5194a2db99f67ea77c87f477768e12801a957a2
SHA512901f7571371d16120b50f72e85d1d4628ed211e35199d922384901c03a8a102427192e17def3a9af6cead9529e8fa531cdaca42f21bed560c1ecfa82e4462a0e
-
Filesize
2.0MB
MD5cf694e03daff6573275bbbaad86b4740
SHA19f849a49a0eec084b0cf40eb4ebbbce813ea25e3
SHA25605ec208e9179672c26dd63a88d155b0850bc48b049c228c970b8b941370df46e
SHA512d337ec48696ac36d17284862713c889c6ee13d3fdd6915be7fdab2ac66d3fb765021009c133ec6c14f48c9d670e68202901598315d4d5504f1e6f7d7f10e6a98
-
Filesize
1.4MB
MD5ee42003436f3806c901d42a3316e4af6
SHA1dfe747635543bea8a31430df27c81f4d73ca0158
SHA256bab5c65963b0423cdc0016c4e211a1512cb4d41b00f2adc3dcdbbd3b13b1ff03
SHA5128ad2dd67f45658040d32cc40a45d4a3be926abbacdcaeea21864b841a9faa0fba32f6ef5c29501cf6d2bf1e607f359583886f55611e96d96952a66d5e21a45a2
-
Filesize
1.4MB
MD5483d8b16d549769c2f7cd75c57830ae0
SHA147f8478028822eef2995f47306604f636ee7336f
SHA256e881460dd857d980c2ee66e619bad55a1cccb64f8058eec5cc8d7467cf3ecf0d
SHA5126423daaf4a668efdc2e92dbac9d43dce58d1b914a650f2d494e996958d8450efe8238c0b5e93853c23ca32b27c0e9c46f9a26dd266f4f46689c36fa2480ef13e
-
Filesize
1.3MB
MD5d8b03c0459ab7c4a87e9263b3e667e96
SHA1261c036b1d449f9f41fc4f83b8d8b65656381ef6
SHA256d2334bcbbd267b9fb2a5f3cec5c72d56dfc626d1c0b7cfe0429df534d936471c
SHA512c957b297cb8ddb643bf7b50989b62af17ee858b7f9b71dc1bc9c5e37f9b39979636d6f07e84b83160556182a262f9a809b0ad6e10f39e45fa1c75f9506965b72
-
Filesize
1.3MB
MD57034cdae8594ded6a4bcd367f7de1e73
SHA11ecf5f831feb1f0c9607e6aef63c6c9f27c5610c
SHA256baeff602305eb278287fe71109025fe6a3893d83e710e0cab82e88024366cbfb
SHA512090f22a9dc1961962d1891a578085b9a9fde6a24620f11642374ad6e6222cdaf5dd9b5a51558197d9cf2bc8a44889492ef61fbe062fa680e5e9b04ee77467815
-
Filesize
1.5MB
MD5c0a20f1f6f54f6f05fe7aa2c9ef98d31
SHA16794dda206c1c8807c4afa914c1093cfbc06e7ce
SHA2567f7681241689bce9154c0a60140f4b1d38eb8c4211cfced7312389acaf5bacf5
SHA5126a91560cb1ebb1e009623b56e23516fbb37e4d817e0ad568b93d1c32414772c9bce7a7b0d4ff1e40b37c7582e441cb0b7dde0a17ae52077a308b2cea12eecf1b
-
Filesize
2.1MB
MD59a88a619413ceafc11151831dbe704a7
SHA122db8f7c93d0cf6620049201193e6b715376558d
SHA256cd32cce6c3d90a7a0a89374b5a54d767e82d3d16d0dd873135d716d098cfa436
SHA5122d9b73b75eb67bcb63eb7b59e346682c167b3688de70bf3d490fa5ca2898062dcc61935f26962e0555788cba1110a7f56411a296d4608937c4342e7a9e4f9395
-
Filesize
2.5MB
-
Filesize
2.5MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
412KB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
412KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.4MB
-
Filesize
2.4MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
1.8MB
-
Filesize
1.8MB