Analysis
-
max time kernel
148s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
07-06-2024 01:23
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe
Resource
win7-20240221-en
General
-
Target
2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe
-
Size
1.5MB
-
MD5
17a3155a11d08a95b334b0e1a9f9c051
-
SHA1
000f1a218fd0fb18d855ad9d5718ceb3184d159c
-
SHA256
bbb51fbeed6e7fd9ebb4a1fb77f9f9251c07a6e7cf41488bd67186427af491f3
-
SHA512
7a9e11e84795c7ec55986ead425bdef8c4ba07c155e5d462f8142f4480ef687a622b8eb02ec17822aa729023e81e19c056765589c7006093a0eff05c6cc04afc
-
SSDEEP
24576:0k1q+L6VMRCPU6CENltmVVdpx7fLrQWd:0k1x6ZU6CENlc7dpJLrQWd
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 3316 alg.exe 876 DiagnosticsHub.StandardCollector.Service.exe 2132 elevation_service.exe 1484 elevation_service.exe 3656 maintenanceservice.exe 3056 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\AppVClient.exe 2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\System32\alg.exe 2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\b80cad72293b476c.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmid.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_102250\javaw.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ExtExport.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\serialver.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\32BitMAPIBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\32BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\keytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\serialver.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jar.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javacpl.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jps.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\ktab.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\policytool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\unpack200.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32Info.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\chrome_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaws.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 876 DiagnosticsHub.StandardCollector.Service.exe 876 DiagnosticsHub.StandardCollector.Service.exe 876 DiagnosticsHub.StandardCollector.Service.exe 876 DiagnosticsHub.StandardCollector.Service.exe 876 DiagnosticsHub.StandardCollector.Service.exe 876 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 676 Process not Found 676 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 660 2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe Token: SeDebugPrivilege 3316 alg.exe Token: SeDebugPrivilege 3316 alg.exe Token: SeDebugPrivilege 3316 alg.exe Token: SeDebugPrivilege 876 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-07_17a3155a11d08a95b334b0e1a9f9c051_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:660
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:3316
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:876
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:2132
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:1484
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:3656
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:3056
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD50604239c7bba28ace41e578610225e5b
SHA19bf10784a6ce34f6d10b12d703b80fedff785a4c
SHA25606fb75a5ea9a4b40f671786eedb657e8d9daaf798edc470885fd7ecc2097b2c6
SHA5126cda1e6afedc7ab2d4d66a3438f3bab9a4f133292837851944d691e9c61a6e911a270e96a75d2aac710d57a04a7c43bac3852493b564992d31c561c61d87da74
-
Filesize
1.6MB
MD5a0a7b89260a8b815e71e59f425d31761
SHA17eb745f4b59f53756c55f43ebe953fbcf07d1ae6
SHA2569462e775b994a4aa0af75699d00d3838c4620de5adafcdd590d3f5edac2546d3
SHA512e23a68ec61c978ed8cc80763dce254178b13bf05ae079da67f17a2426c3a3b13d0b7345c01ef164156be29010f4344f5b5597c8186bee83a87fd7d9872f2de3b
-
Filesize
2.0MB
MD55ce6b0c286f9330d5e0335383f8f23a3
SHA1dbffe6beb7c7b94448475d40865843db7e795cea
SHA256993dbbbfcda77fef3dc5177a15daedff78b9ea87c6aebbf50eac1f442c5c507a
SHA512672656a9313feef7a3bebc121120171788cd175266628ccc0dd0f85a8fcb4ad21f721a6f7387acac21e5bd7dc413d0bfc71106820742ff89029ebb279f92b763
-
Filesize
1.5MB
MD5e876cb53000625b757da058bd1725e11
SHA1e2585df8a30191ef0f1eaafadd1b1d034849a25c
SHA256172f221fe57957f09cab6fd70f7bec3294f26b1dae20ef0b98333c68b60b36c6
SHA5128cc4fd02c9ad3083605985840c65a54461510d2ff14b1532dde8a6c7462544a513fade4fa17c866571c4d1db8ca0f41d6816bea7449ec1a4efbc46c272808784
-
Filesize
384KB
MD57ce6ae2454b7afc849538b7f8b7dc2a9
SHA15ec5a1f1908fdcd2e926beb34bc30a8481484dda
SHA256fabb1dd6a823ca1cde018affa925751494c0720ca2a54a4ff4826ad10f82395d
SHA512e5fd57150dba9617fd79f0dbe0c5e9e5838fdfd5f90ad2e5c09a0619fb23bcb6e15cb5a2ff04928ee1566d91a5ec8b9982ffb06afe72bef9a1fe08ae5f241296
-
Filesize
1.4MB
MD5c93e541dac7b7a6ea470eb77562e7f41
SHA1c90923a3f3da35bd9b7b1ecc66a02fcfc4b386ef
SHA256c7f7a75161991cdb303ccefdff27d20804b2acfd5aa05866d6784eb847ca81f2
SHA5122dc482e42ccfa8c9f478a7e3374fe59f6249a695e2533fd151998abf0572441051ad43fb04e615982a2d9ab677f8d1b5f2bad8dd88b8699cf431afcea6e9d2cf
-
Filesize
1.7MB
MD5bd87e838b29f8c6f2eeb61cdf1c18517
SHA14c920d04d7ec7fe73542a516a95a9948e549affc
SHA2568f0abe322700492ec7d030bc5baf8faf05d42fcc00c9eff9d887b713ad30d05d
SHA512d7d8a23f1cd0646dc3f1c3b1f05029587724b8b25fab5c934e1302b4544bb272fbda953fedb7fcbb3c8c5621d09d989d867c9f73644e813bb70e8c55bac7e015
-
Filesize
448KB
MD50ee4136a47ace9cfbc60ecca17c10cb0
SHA1659e151445c25897568f51a38412076b6631e5a0
SHA25670be3a8261be1f7bdc3a9a170a4bd1f91c40a5380c97b9ccadccc1ef5dddbf0f
SHA512eb7012f3b90816434a2ba5aab64b1e48555c25670c2d65ae3ccd0b9c983f276da11d909d6d0a6725f6914cbe386802d7dddfd6a258ab88a36f3ec1e9a9ad47af
-
Filesize
1.8MB
MD5791d055553b5ece628436a298f74d2d1
SHA1550c3dee70a400ed06330ee9d624bf05cc8fd308
SHA256ba43940f680fa6b06607facb718960776debc3e907cc5484a9cbd489f86b8edb
SHA512fc6d58dfbeb310fb467895ed08b619fa4b1edda2f27db1f2c1e4b18e33ac45f5ee06a8dfa351d09436d6a027dfb74afc86fabcedbf20dd86c7c630738f283c10
-
Filesize
2.1MB
MD5ea2eff1202b3cf5c95eacaf3955a74a8
SHA192311b4e2d47ede1f0fd7c99019ae214e0863ee7
SHA25696f90cbbd6098e2bace69e8b147a5d291c7ad8ff06bece1c52da028d4bdb948c
SHA5127dabb22a7cf7cac1f7dcafb2926a36931a5f06eab59bab293299b4ec4ffd00ce8b68d5a75fb781950fe340249e1b9e648add184ca26fd8c36cab221147dd871d
-
Filesize
2.7MB
MD5396212e52a0eb7f3f7c64a39f776dae8
SHA1da133c579d6dea8f44c5025b5908d9bf52eca363
SHA25664b4f59b881a709c149e2007a8bc7cef6771069a9edfc0cee2798de8b9f0ac02
SHA512f640a3abb61ca3cfc9b2a3f494ac058dc0aec5114b7983a6e51fc62fef8479f99ecfae2a51171dd838e6464d128fe602e739aba1151b1ae77c519c8b5c66300f
-
Filesize
1.1MB
MD509ec53bd826809e078e18e5485b8af5e
SHA1ee2432504a55c2ed9511ad7ca052ec03075342c3
SHA2561c8ac392f7f3072ba9ed2107e18b52c540fd2d554ce80398a270cb07ab8e8e09
SHA51253be6aee701bdf7fd157f282cd7a40f5f6318c6a53c7bd7f107fe06bc52949886c26510101821c56a70b78df1b91690d472397d773a34784bb2cc85c734646a2
-
Filesize
1.7MB
MD504d32494e2adb114babd850e56b0323a
SHA1cfa41ae1b97bbad0552519004a8baa139aa428fe
SHA256e07401231dbb96e3d140dd6f54de8acb3a3fee10080d7a294c448ca0fbc49e91
SHA512bef9528aa261d56ac5c2644cec234bf49cc4f84f69c6ea7c2cd7934fcfc382cb5787204da12e8b00b9098e9f3afeb678291360516ebac1edf1599b784e2254be
-
Filesize
1.5MB
MD53fa16775c56d0401f519fd813ee52ee8
SHA171c6ed8c02694e81fe6adb55a22e0bc1b4f4b41a
SHA2561604967ffc06910018d61843c08bbc6752cc9cccacccad42f7bce397fe577604
SHA512b84390392e77f9cd7784e79da4c50f15354d1b30332459235987719f463176ffe2e5ede483a7c97ce96361369ced37334e20a82f3cb890ad56c84384056cd89c
-
Filesize
2.1MB
MD55c510615eb2a0abd35095724a939bdde
SHA1330276a1c4bda67ea4ffa2deeab2959ea536dd8d
SHA256d6a6e071e89432f4d0df03d972d712b2910eaf0c05c36a29b99de09e81c8f96a
SHA5127706c23b08eb5bc5cdf72ad9102c0fb5b2c5813a7bc815f1fefbfd8535189002a3246ee2f68f3f7fb7f45210c810b8f5af1fe2a9eb2966b5948621408ef291e1
-
Filesize
5.4MB
MD50ab3cdd3e03242f2c3d2b853556f62ef
SHA161d1fde35652a771a32eb0d46e80341c01343750
SHA2568b23bbfe8139e23a4063f441da4f0a209d78a37cb7fedff29fe8d803ba5b613f
SHA51284cf4c98612f27baa335018ca957fbaa652c68019d2adc3d793be71183bedab6deac8a0d1d1db80e6120408fd4b3241bf55ec19e67c21bc1b99542784c46b039
-
Filesize
2.0MB
MD50cc5b70d40c7913c139699df0516ba57
SHA190600fc15413f21add94fe170d278009954ce6ee
SHA25640a728b23240faa0bf89ef40488eccde81d101004720480521121c14b4e4b56e
SHA51291064a6e7ab5e7939372385a0735ea641438226d94bdc61aa4186a6f11d38c3b4c71cf4f050034ed1a518ec9a7d54df492aef06e42f0c4744a747a9da6999754
-
Filesize
2.2MB
MD50f40ce999167a93c7533ce08a2d7f896
SHA1a43af9d52733e1a364ca1b0920710ec58aa7ba05
SHA25691edfd27b8fe3601c1bb4315a29e3aa0477e1286169a1990df94cb439fbf7598
SHA512d1ab6c7f011f02ec04c95797e506d273832151343e8b4892266bc94e9b4e42643fc89f0e09ddd1bea6d5814202c07ad47e05b33c48acf6e137d4ad4f6310b285
-
Filesize
384KB
MD5512b3e90890d6db3622f3605291737ca
SHA12b644fa4db6ee2bab0b7988f97b9fed71c850150
SHA25672ee0398cf8598b63e2e015408504f8a92be8a31799aad38bcfea98e122a0cf8
SHA512bf58a4af97d863405b636e2faee641d02e18367374417397ff61c45a1f0950ad9e38109747d5490a90be9f6bb63b4fbe50df116054708264458fc08e613372d4
-
Filesize
1.7MB
MD5ebc56c792f58092ded4b840546090238
SHA189e1045dc05d935dec1db8fc7bb17f62c11f6728
SHA2566a0bc75d8b1972201de5d4debfed5e1d9e1e67f25825883e42070b2d4426fcbf
SHA51262fc7885ee0417cbb90d7c4ecccac6a3af45df00a43a7c277b2355ce138c277e298d3a7878554783f2970d3c3ec8f28f2dcd34171f446d81fa4cb8507611a853
-
Filesize
1.4MB
MD5c011f0cff1f41622e639c3504d7c56da
SHA11a0deca6ac6a0e1da0c3b573b191ba2ddc9c6c4d
SHA256a4cd93f6b44942b037f60c6edbedb0ba8f863587e61ccdf6654116a1abe458f2
SHA512ec75baffe5e5b71ea2df7545b8321ad42a5a26fcd73ccbb94f369a61a29b4580f8756b2c5214ffab79a6b8a2df982f706bc43a54bef9e3e7ce9e2a8a1a1932c9
-
Filesize
576KB
MD5418b584d018c79d8b960356f9af3cf1f
SHA109b09ba751e8683f7f5f566aeae52185e695f1c2
SHA25694185d25751df76b5982bea0e03ce4b4f64d4b47136095cfc2efbf582d32314c
SHA512306d3f5ff389b596ff06dd4aa028e1bb45d29832fce1a5bb2e3973398d0a2384eada84f3c0cf9f750d34be450ff4cd23908bc53ef2410254d7194a80d0ec6d54
-
Filesize
1.4MB
MD500f0279dbaeb4c4882a64ca095dafe46
SHA17b756ffc9ad5f894a2b92e5f4cf9defac67dfc64
SHA2561b38759d8e20f55e13224f9fa02f61751a62dc0e1d33727ef04c4f5bea792d96
SHA51297f5c8347ff26d6d6affea66b41abb1ce781e02c40ced52e851635a50686331235cbf553a3989324b60931cb9ef3c1c00f66bc8fc57acd88f2c71bb02e590ef8
-
Filesize
1.5MB
MD5aa1d80b9af500ce05b8f0832e608f16f
SHA10580807e86ce5575c7c99027351377c875e26f3c
SHA256f00f76fa581818bc8f819b1accf0c9679226bdc53c4c92594de971929bbbd191
SHA512fe40ce4fcb19663303f011eb7b8c6edaf29bf8dc5f8b2db482e9f8a8a1f3c7f899209f24c0bac4fc5201f2bd23918cbc0698fdd42a29ff7501eecc40880c2e92
-
Filesize
1.4MB
MD5bc24a115981c438583cdcffa4c002260
SHA151787ec3634a8474dc44bc1040a89473f00195c4
SHA256b17790babb1b382841af028cbd6ddf46b02464a50bd74e048e490dc1fe9f6bd2
SHA51268bb0c9fea2ff1e584ce5c45c73ae0afe28451d3c882a6a951cd836e00a69a8dc5ac56a94bdb9a4cdeb0d2aa02d4dcbc1b5e7e882801d7e5493cad5661b395a7
-
Filesize
512KB
MD57efd7bd6bcc11b6b694189e87c60aac8
SHA1cfa68b606acb792a4924cb7cf26f871b02497693
SHA256180b6c186640bae343504b0f40d7c30aa47c36310cb52af7b0133bac6a0d1833
SHA512c048241f2220395a61e0a5c28aebf1d3e3cc207872d722c95fab78fef87adff452293a149b6c95fab4d5ada4a0068c989a3d4940707348a7a2121ada1327eb1b
-
Filesize
1.4MB
MD5963afef48a9b158728c8731002af7109
SHA1a2f756bf53459535b98febf30383cb224f639043
SHA2565f89c9d279254e7f00878e0eb915076b9e69c239ee923835521b31a83ef40b22
SHA512c37712ee31ed225212dd36987c189f345e58ef9e820e037d5e45b774090ea9b5df95d738a80c7327880eaeb529aa16ae861f8aa2053367b9af50dc165a7d4961
-
Filesize
1.7MB
MD52a65c077c0b56fbdcee1720e98f7e3f1
SHA19d6015a5d82ff720f07b4913a50e5935c7105fe4
SHA25630a0831a5fbc218aa3e947e0e33f38c9b278752a4d70db853be80aed3ed49b79
SHA5127c55028b54466844aae6cbd6bba571c3b47d80d07d245824011b129ece3d1228a66e733b2b58d4f43073c6562b9d1398be7c81442b69710eafce2f2ab966ec2d
-
Filesize
1.4MB
MD520f546f12ba84097d0ea06572b112fbb
SHA11d385dfb0737776ae1e88c0c4a7bf6eba7981f0d
SHA2562be498854c1b18a9bd6bd554e35f0bb6d2d6617bcac2ca228c0cfc628ab97506
SHA512df3e790e86bfe3d604da198ef1e58806cd7fc21a5e9e480295a81f39db9b19b3cb75ff6e1882215e6cb7d5304bc85aef9dd83a508cb86e09318ef64a196ca74c
-
Filesize
1.4MB
MD5e74dc526b177bf996e6f558eec5de284
SHA1496d0b7141bec4d2d471d1e264dc4b0e6e6f8547
SHA25649ede687d73adec824b9146fbf6264f6d9b9a4393c116d707bf1ed5d9baf5ec9
SHA512d2ae9783fd487739461db1d5e0203b98451aeeede511454cf2c1c50d544e06f4f566aef9ac7b95401de5823b1372c20be9b523b10c994939fa0358c5fe5c3fe9
-
Filesize
512KB
MD500dc258f88a83090ddfffecfc870c576
SHA1a10139c23198a668ca26351cc3c2a5f160de94b1
SHA25682538f8d0726baa57502151ae3409f35d169006a76c4af97dbbca13d9249ce6b
SHA5124364450638948520138e79a14b93c2ea063829cf6ec188c1ecb248eb1ec856c265ff440d731a8d58b7c76e752e4a73906f490bf7fa3e2d5581da171c0b62be3b
-
Filesize
1.4MB
MD535b1b6c2b079e55b5f47e617e10befd1
SHA10d225b72b84c19b84f5a9103303611c052d3c7bd
SHA256a5162c525c29da0639a9ab45b3917902ee0b41c4a466562d205ceae379d80cb5
SHA51272819463352ef469ac22c8e6d31df1722c47f2d7703c04d1f85dbef3907e0a585ab1e23608e030e10f427c5a9df5ff95bcecaa2b7f05d6431046482ce31f81e9
-
Filesize
1.4MB
MD5bad260d401e64c7a79bdfa55cf36a26a
SHA14cea8d18b84ef812882879b4410435c53329d6a4
SHA256edf87578e9d64626f1c8a0bff67ff0f2d36368829df935ca5e055ac1b67919b8
SHA5127a7e94eb776161f65421eeac8e7c77d24aa1ef95d726533e4c5435a308340a8fb30cc092c63b2105d52e6e35680584b2d5fc4f46b1caf6cdddb0ae3876f5f470
-
Filesize
1.6MB
MD5c816133f1abb6f8dd08e99e455c18c81
SHA1231fd1a2d6bddfaddef48b69571e9ae2d7094215
SHA256b05631b90b75ceb124fdcfd4fdb7fc9812f9ebdfe3f75650e2514a98bd01ca70
SHA51223c6bdccc5f41f4a38902c235379784c608cc60c652b28ae0addd8864f25b64bcf480fafe902473e22cddb30c52c9179a06b5eabe65fe7c43a44247678163166
-
Filesize
576KB
MD5e9fcf735384036198ab477119a8700db
SHA1bac20c0fdcf34fc57412b0192cadd0a9dc011410
SHA2563e8baf5fa3fd275fd8a18365fbfed3b56c563cafc061f6d426af37c3cdf7a3d4
SHA512273913d47dd25c42ab0edac173f26812c77d3a87b282db54c9e5b6f821d4df1a7c13983479e3af23504d4ec4aac4873eb13322d1d014dec14fe9eb3f89a4a16e
-
Filesize
1.9MB
MD5ad73c897f7cb3f0028cdb1ac91cf4859
SHA10c3ea8fa9f48437d50117688b7f9a44747b831a8
SHA2568d7d82c1e5ed094023a3889ad9c11862a4076f50971fd80219d839bd3a392551
SHA51255dc6de3233433be7ebace17c33b19bb03d3b82582d68a7531b0d11bbf50c8b52fa9e41109945555100ce7c3976a840f2fdfeafa521753a6b637b8295105fdd5
-
Filesize
512KB
MD5cd1dfb6d1f609112a1ffbdb1ddbce509
SHA13f1aef96eaa060545d8276d4e2018e70bef9b483
SHA2564edc5531e629eb326b1931ed3f116dbfb27ee3c9ff858ed37c845b81f058982c
SHA5126e4106a850a21c8f717bc4459bfb2b0d9518908c1ebc65aca7df05142ffc03e9463fa1c8dc9e62a4580b3644356fef9cb888c8a0939ea2d9362f5e5978d785e5
-
Filesize
1.4MB
MD57b63954543c1ed4171a43f58911fef15
SHA1a9ddface4be843a95453272894a9ac291fe158c0
SHA256b82b0dbe741d60af0dbb355cf122e8ff952fcbef0946a369980b66228f0ef419
SHA512a0e6dfef05dd17e17202ffa05d7c97f955a60f9dd714d27ad6bd11c77f38842469227f52288c0bcc3f2800755cd88453bdde466d4b5e53254c2d6289c3fd1ba4
-
Filesize
1.4MB
MD5fed70f8c876b71aeced0247b0671a058
SHA10f4f1a3aba2a05c1d28117df789f6538c5fdf522
SHA2564e1037702c0b2ef4739255d7dc85681b56d4516749200db28d635c3950decb75
SHA51240139c939dd70caa6a44d72f011294988c4699f0f6162e8518f7ff0ed9cc7ed5092fad619a228ad44e6490de7567e061364999ebef8739510fc37be6c4925ac3
-
Filesize
1.4MB
MD54bfe4a84011eafa4c0730e2fea672ba7
SHA1f6ce489304f5c6b3af20d83d17c5b7138e74fbeb
SHA256068f93cf3673185af82e049c4cfc0965b4bdea0ab867deb8eed8ac4993406765
SHA5128a77ce98af9f0d0e792e122fbf19d5327629b0a4f5218c640982117676a7cd7005e276fd6b978c19409cdad8ccd5d7bef87abc6c3f17a674552daaa053352a43
-
Filesize
1.4MB
MD5efd4be2a53f825b7ce2527fbdbde90e4
SHA1d29062b01f0c45ec7db07307c0da40af0df993d8
SHA25691ea7fb2e68d1425f2c2e228bdfc8b9c24e9bedf9169e6a0c2f3252010523272
SHA5128cc48c27dde513b057c5bcc2b22791e2373871058d6d5db20f340b28b7996e9be643e38fe19c9a4545d9225a984028074b8b07aeeb9b92a3b583da3996ebadb5
-
Filesize
1.4MB
MD548b641ec696b5821ecacfcca13653b51
SHA1d9e098bb53c70f29618c759afafc9cd1ed1a96cf
SHA256b098889e3006f7587f598c51a8cfc4ded978a2c3678761f1755c61d20aef9c27
SHA512a9a7fed00cbc3120c95c1d6e9956aad10be878e026a18986bf5f98089746fad32726a4e4803093287bcf143702a139d9ee30c92b8bca9006d58b6439d6e235e5
-
Filesize
1.4MB
MD5c5df538ff5b3b2954ef702244f59cded
SHA158346e5a00107db9064f854a3ab0c6e49364a015
SHA2568c03439e3898187ad5ef21c916f1b34e73aa1fc91c76e2e5f9e6d44ab2abfcce
SHA512d70a84a21c49cfb8b66bc64b844f625bb93128e0f3de0194ebf3cbc7a8fd7b0a6658452456c541fe71e8bce4d09b7f88b4f3d197480912cebeee08bb84f19d15
-
Filesize
1.4MB
MD5f9f9f3e04a40dfbfea84eff07b975bd5
SHA1c4b8374b52412d866b3c373f9f3ba571d46a4eba
SHA256939a56551f45f9b10f72161ef62517217d7a0b347452c298c6593647d7134069
SHA5121e87bb5d67f27dad6d330015f8ca328e390cc63c1fa9b10ba19869e58e905d2ac93771bde330a91470e3eb12441878b0a54c49abebf3bb6bb182629741fe71fb
-
Filesize
1.4MB
MD54b7bd922029954be20ff8dbf08b8f0fb
SHA12e0eda80ad5eed640db7105573f089b2872b2107
SHA256fc4e62b3930e19b2c118ea84a2a0a3cc26e0ea45ac0020760feaa96ac22eff26
SHA512fecd722cafc644f590ae07e62fef016dcd3bd8d72726ed0f1f4e0f75a127f22b61de487acbf41410b8395d6b9dcb4d7394c547524be25f777944195a0a2ae9b5
-
Filesize
1.4MB
MD554b46a9c5adf48c6f47a3f2eb937d966
SHA1c75027cea0d5f4daab754e4ec6d79807f8e6bbf5
SHA2563b1ff7c1ec1aa3916030d5859632de696f022839be77e3c5a5c36bad0ee43f22
SHA512260aedbd74cd0660d2d6199d6ea0532e728a46cfebf0d5fdbbe5750f73bba6a20479089113c36a93048c881caf7d6e5813f3449bd0541bac72d16f18aec3104c
-
Filesize
576KB
MD5673a99c213072e713d84732f25fd3746
SHA151d50fdf58da1d490be05450326231d811981da0
SHA256cb4ca364f25045c9993012948ecfbc5a3030167b0d7c7a78e2fa13fba1879b22
SHA51206cd5b80957abdd6febebd6b3a3bed8f71a759dbfdd9582de559d1545f2d72394708bb7c0cc08f2e61436e06cb5fa9362e06fe78bc97c8617a784218b15411ad
-
Filesize
1.4MB
MD5461e25f29548e8399513aa45ce42aafc
SHA134c4870173d4f6af786809b88daa8e55fbcb82cc
SHA25603f6a017748bf836d6a610c461c4a83670cd77fae664c48a7abd40f2d9b3871b
SHA51265e106312ea6703833f34c962e3629aa5a3a9d964857081f0bf679dc04d578794b762bb4a596d9e7415a29f2c27b2cff59378a6f5ead12fe227a998cd2dab047
-
Filesize
1.4MB
MD57cc395c936b6b0138461461df6c7dccd
SHA1ffeecb962902a37598a03c08bcc93ac0c99174f6
SHA256adc9303ae4ade490c7dff619cf10d95edce8c6ef72561cac00bcb8f51c08ccee
SHA512b9384a126aa0627e75f7e06761e1f50e6340f5a9fff5e69ead331b40277a15bfd9f80873d26f5a04450a06e5ecf4a06e394a0d44ad1eb27e20930040d45e9fca
-
Filesize
1.4MB
MD591ab3aa6aa682e504ca386351a59b82e
SHA15205532c8b50ef6f808ffc9c779879a1f84f6198
SHA25675bf75ab0728a51c3277c460606c8286ac7bdb90c38083447ca2ceb03a1521da
SHA512b8a6364d7c3bdc067d4456043228911f726e46d7ee4d6f641dba42a7b28f1c35ff3dde12dce0e0e221c476cf37cee8c8871d7f55f9d2bf76c9dc9166ebfc7b45
-
Filesize
1.4MB
MD593a55ccf58285ac95a36c476a373eac1
SHA1cd4aec39202309b1868d438eab1ab628a367c1e4
SHA256b1bb20f90050d5e69e62486dfc57ffba8edb7358d3fc1a46e4ac4d0c9623dab2
SHA512c86559d2dc95bdc397c50f719fbac7e2b993c1da6514efa07819ea1e7b7e6e9c358e698a658e38449c333651e71f0d5032393932b994ad21c68933b7a57f325f
-
Filesize
1.4MB
MD55f9a543da48faf29a8a83e648bb637e5
SHA1142cabdb33c0022149a881120e2ba9c563ee5af4
SHA256c6b6f240a8fccf7df4103e8513185079b72ceea0226313211a5ae43ddd916f2b
SHA512f06eee20d03d3edeb58577962c9ada8b41b9d021cdcafb21f89f3c5d5e3cedbe91ba6de6161151b009b2d0ab75012938412751646950253ddac03ff0726b2c09
-
Filesize
576KB
MD5e81f5f0c879435c68a4922f7459d5da4
SHA191b7675d8e561e3f366cd60acbbb8a4bc1160975
SHA256f283e6e206e935bfa6682922c8c03d16b222b489cd788c7d958a9041c16032ef
SHA512512060faa14f04ade82b35d63ef34f793f8a184df1851f15724533580adb62946bd5b4092a10ed27670e9c66aa022ff4b2dfe91bc9907fb96fbc43dbfe74fd70
-
Filesize
1.4MB
MD566438335d9e3ac532449b03559b2331f
SHA17eb95e60a46ca8f742621ec204db44dd02b3a7d4
SHA2566b1ae0b91f1af62740e45b97264ce0bb5d2bce24c122950b76906c63e5cb55f4
SHA51288ef01db45c3f6ed882cca3fe6a10e44001a7245815fda248f12a846add2d688257e5e757a677e60c644fe99bd20d00b812cd68135e9c52c3dde9f4e79385fa8
-
Filesize
1.4MB
MD5c7cabc9df1b508ccaff29e25cc7531e9
SHA190a09c1b9bd785a23c14c5a5d28cc76546717192
SHA256f632185ee097a35352b632717b2783e2ba33fbfb11918c4e6cdd6e567cc450e1
SHA512439622ec078676d82b459ae5280b7a5f33c26d2b64d43e8f0fab9063154b71bda00f8b1a2d8f350c1e467cd56ec0a260d48f3c242b4727eeeb07585831a44da9
-
Filesize
1.4MB
MD5b024f622410d5f08113000e9570d2bd6
SHA11e78d83678aee023ca6785510c66660e364faaca
SHA25652b1ac3a69bcb61102445bfe8f47b9fa784bda5cf34dee57a4d3502bb254624f
SHA512db2ffd1fcd3fc847f6253cfaa87eb76ad6008eda6a1f7a78a9060a9cde443cb07959b4185f0681d0112b16129de27e48262c071f8a066eae1b216e135ffedaa9
-
Filesize
1.1MB
MD5ceb69adedea5479c59060bbb161e6c0b
SHA1f6789b58ffef29bc1c9c9aad6fbaf3a79af9551c
SHA256a2c85cccc91db197a624008230048f1165c15d65dcc3206e08e84ef308990679
SHA5126167c04b0441388ee84e845ab824cb3b3ed964f231ccaf80cf6f97566463e5194cb04c96f4a83b3e20068704308d80dafe53cf51d221b86c1f277b0125653e49
-
Filesize
1.4MB
MD52a5c2cebe0af102662fd3653bfe9b5c4
SHA19483166613446aa5f82b3af1b45761b50b11818c
SHA25632f6f05803e4d44d8945a591d6ba2f873f00b41fd112a613504139df1746179a
SHA512d80960d1a4edd1160a3753a9c57df9a087fc10d67060ca72a7d50aef5f83d4412f7f3bf4a1722a8622b04aa846a243915ef0648d2dc3bc3a702a81f60e9ceb5d
-
Filesize
1.1MB
MD56b168d196be8aabf364af12ec08288ee
SHA100093e40d9777bb690b8ecb2a26c0ecb87481147
SHA256ab2409dd928730fc7ef82d1574acdc3791e8f532e9248c40acee4c88779b5feb
SHA512c03962e1d9a86a691c6b8592a07575a4b1f93264e6a14636f0fcdd4502df2f669fe38037d4d3fc1c496de9a1fcc9793cb2e7a38b9689f574ecac3156f9332136
-
Filesize
1.6MB
MD5833b958ce435fc83327a4b17af981310
SHA14467086108a28febde1862c73b40a8b7a9c8b5aa
SHA2565f78c4f13435b03f656e64f671db3829eaee180b67f00f467b04294ae16abf67
SHA512b7132f174400c4aeea549448c4b6d72281b3d1a7ba0d9ef9ef28df44391501d78aa75f71dca6f128f7cb6241a8f0d483f42fc0a2c696feb4081b9842b76e3ee5
-
Filesize
1.5MB
MD5fe63ca18067d06870d965ccd5227e872
SHA12001126bcfc968564536ebfe1baa55a7796ce69d
SHA256abec52b4d51e88b6d4a774d0ede097589c0c960303a5c5e4030a4c5db8830588
SHA5125301f5006e84705415ae3f0115c64ced88035313c792cfe3ac831a3e47f9bca33a4f1f5ce49f0ee25675b13ce63295b7ca792b1790ff9273dc2b681ebd222387
-
Filesize
1.5MB
MD57ceb02db2767671f223221c81bd0e239
SHA103beebb02939eccb7124bfcac91f005b0df64d30
SHA256e883bec92fe2320550baed1f8cf7aa245813966ffd72b3eb93953e6f1a49aa9a
SHA5122d318f5a65494571ae1d53aafca6e3593612c57716f570b30ebddbd944b8e4305a93a439836cf607649015120adb0d0df2253dabba8bc019d0da6e5baf2d89ad
-
Filesize
1.3MB
MD58d6128192e8152ce93ab653cb166c925
SHA145fc72664839284c7064cf3aac7e9c7664085cc5
SHA256b3d94252b19b59c6d43f19fbb9df9ef00c6479c4a728af8cc5cea2a02325ef36
SHA5123be21a1c8a6de5898ad110fd4915b3f966fff75a9adb2280b22862f0aec7cda1a00206abf6c09a205c29a22bb3e0ce02c5e1d2f28c28bd3309b842fb848c22ec