Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
08/06/2024, 16:56
General
-
Target
2024-06-08_2b93125a4dec496e2b33c95d3bfc5316_bkransomware_karagany.exe
-
Size
1.3MB
-
MD5
2b93125a4dec496e2b33c95d3bfc5316
-
SHA1
6c6e3edb658254f249b609e8563800eeacb1e485
-
SHA256
ed7077d6e4189a592ab983e71a9b1c846610711d8249becf2cdf45b30db1b76c
-
SHA512
b2c5146a6c7f2325efc8113a8d3eb821a466e0404edb1883e42247f8c1bb264c84b21927bb2bdc0c536b3b5b3f28e75bb172db8a7ed112ba152380bb2b65d715
-
SSDEEP
12288:VvXk1P83AZQxPq4yqZ+kM4rGwSvyaY9S/TG50IevAs7q6s9UtcQhOUVNM:Fk10NxPq4yqF9p9OTG6WiqUtcQX
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 24 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 7 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 42 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-08_2b93125a4dec496e2b33c95d3bfc5316_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-08_2b93125a4dec496e2b33c95d3bfc5316_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 912 916 924 8192 920 8962⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5be9aacfd535b8e03d06dcf3bac3b417a
SHA11769aac6e2c33d43263ae191e902d8a5ee576a94
SHA25631a323d40a07221d12cea5a2f26786c386ac307283704cb25ab3224642625cc9
SHA5123b795314459fc77823227fb2951eff07c9bacc1bad9466d5047ce71af8e94a57abc960ea47d7b131cad72d942e58b228650ec8616c259d438aa215dc3feca60d
-
Filesize
1.4MB
MD56eb106d5941261ea8755bd9b2c97c1f5
SHA13f62553ca67e40ff974e07d1ef401c2006115540
SHA256cd1d89ffc5bd9935befd71e0125732bc5cfed4b6970b7668e8a83a2a0351f0cf
SHA512b4009247f2681d045ede1684534b60ad2753c27bf24d9b7759eab2a45c9cf6846be23f3ee9b951117d060135fd7f475cd0c92d5704730ebf792a75057a514e09
-
Filesize
1.7MB
MD52c658d83e48244acfcd1b38031c2ceee
SHA16fc57f35f021fe97cd687f8cec35293ffec4c25d
SHA25630de6ba11b878001732e26f63975449f0d4316a03b3240be9ffc45f6f879e9a2
SHA512b22c3777b14f79452bcd8fbee04c0fc7d828592ee7d646c71e6ef62a02356ed470b7ae208a014fc37e6f1580536aa5cdb4317707cc09fb97f54f9799fd50d784
-
Filesize
1.5MB
MD57c37db3e68c72902197c3fad728bd63e
SHA11bb621ba3d79b0b0f2e39d4e7aca28d1f9ede918
SHA256995df4357719a7f8ab5672c97a0418ee90e670deeef940942b0863a05f9c4b91
SHA512c649555faf22560d6dc6f9e4bcd0e4aa507c4e32224f1724ae399f7c76dc2d6e1b7b5074373a8e080e03d30f9a413885946aae469fb482aba453d46d38208382
-
Filesize
1.2MB
MD514ed35383466ee161ae69313b0d919bc
SHA17495f86f1fa37f49c2265e372eca005af8159f46
SHA256b17f17e08f45bc0d603e6fd7f8c21968dae38f104437fa6678fb7406b5065184
SHA51277225cffc22000bfedf4de0ca7691b4b7b18245193638da5f21ea228375abcc9845d6007743a9c473d4daec75ff028753916f411658dfeb1c41e3f38ffa60459
-
Filesize
1.2MB
MD5f200a942c7c4ab40207a21754b579ae9
SHA15b9a3274c146e502460cce225af0a1b7cbc5730c
SHA2568f9e09a3c11b7ac2ff87657f99fd58cbac1fc833164dd704080f721ca72e8c45
SHA512ea92f4bfd744445046f3c2e3cf55ef77793a0077c16e3af5623e67da7f789fcdeb79f8f36e54ccdbad796d6fd49f8c79351e14f439a9a46d5e99c84438e9b5e3
-
Filesize
1.4MB
MD579427d09d00f407c6e5f2c52a4956ec3
SHA1705097571a28fabe27a0391b43a4d14e429ca893
SHA256752d72953b8fd8eb3bff5e319cdf1f9809ac43850174f01b2840d01628861f03
SHA512eb64282ee893286737ebf05a9688b828e13ee24a2e7202f7c0c14ea25a393fee4529bbe1971f03874b552bad41eb1031c27f73d8000a1965b56540aeebef358d
-
Filesize
4.6MB
MD5d1fb73dd29ae49afb042b07e9c0504a8
SHA1472132196c613dc324f9cfc1703eb240f33e641c
SHA25605e1522c0e19501103d0397badc75d20b13969406b8bc89b3e38210d5246850c
SHA51226fcc0ec58cd585eda51dcc95f1960758d68ddbc716625a9b81efd391dccbb0728166f548a3f391512cdd7abf8d849024fda4659596dfb8c13d00db7973d6e04
-
Filesize
1.5MB
MD54cd3bf66b04d32da8a7fc889b0a3d18e
SHA111438cf41b19aa4115a0e698b653423f6ca76711
SHA256aa457b78120a17fcd9da7d083da63d491ed219357141cce67a686bcf1f9a6ec7
SHA512d6bc2fcb02c3a1fbd69522557ca8bb76dc938f90b57392b17c5f2371abadbc4efbb51ec0b39ac6601a2259611b32dd96ca246102a24b0c87005903a4f3cb87a8
-
Filesize
24.0MB
MD524dc61d0d730fd4cc2e4829e7cff6ab8
SHA1817f1c3cdd16ee948da3d4d3a1154a4c5163d346
SHA2560bb26aa25479cddd8d8fbdd885cc4a5ca80a93ab8d6966076abe38b71e2d61a0
SHA512d6279d128d2771d8b19a69f942730f516092546ad34cd4de9a5bd81b1b471de61ea56c16e235262124f2eaaf92ebb43634eef32657bfc46a2adb9046ba73ecff
-
Filesize
2.7MB
MD529479be219a2f85c5f2caf821013c933
SHA170d39bcf014d1d7a9f0b0253395432aeeccb4ae7
SHA25649aa50c66b3c1184458a700df6aa226ccf3a4bb6fc11795ccdcb8412410e0eec
SHA512e6dcf5a429fcca8de2770ca037231baa71ca83d2bd01a75da95b4d080709e62cbed251c7526f0a351f0512de0d300a0069e39ee812021356ec3313018a562dc4
-
Filesize
1.1MB
MD58675f1ebbfe51ef182b7299b46534843
SHA17b5dbd8f9c4e926b767117690c214aaa36e982b3
SHA256b639ade3aba454f8c9a18055bf95cf1cf642446ecff01314b00c4defead34826
SHA51285f290a70980df2dfccca54466bdc1fe16cf8a2753b124364541ecf7ebbc5a753aa3ba241720a0c0afde7196867603148e08de0c4c6c40a76ec98fcf31d09349
-
Filesize
1.4MB
MD5d57f45c6c53fd02cd07d3b83d065cd74
SHA1328bd88b2faee73a08e55b17d5dbc81c8877797e
SHA2565207bbd46744f1d72813c9b01b2d69beb8246c80abf3302c4af8738066afd892
SHA5125df59c96b68dd194e3205b0e21011693e25f19b3aeead30d51399946f8c868e4454518db881c4ad915fa9b9d86960be3239badea27fd40e6fad12b4a069bea87
-
Filesize
1.3MB
MD5732a8a2a369916c72826eeef5fc2d8e8
SHA1fb12428c14ff6c2bfd7a9ded31505e0772b1d9f1
SHA256edbbb0d6e1f31e7b2bcf539fdc05b2c007bbe81b93f7fedb301b1510ad91b0a5
SHA512cfe0b822f63198872bb1e3208d2d40e511d470cb5411d0703d4498a05f21da90aa4024e4940fe0c17f2eca061d8ffa3fc644545004cab71f527889db7665d4ea
-
Filesize
5.4MB
MD5689bf80ac18094b05bd43af5d034191d
SHA185fe47e909fbd24c5f7ddfdaac78cb11b7f641fa
SHA25682cee1222d1a4d200858182bfcfd773a677ab69c292a64a3898698aaf1e4ca7d
SHA512461ea9155db3d261697f8cfc908223d73b9b73b324baad90632e6c6bfd2725a3c0ce6de3084aab608de27c8b9dbc403aa6449b6392d1d22ff72d141630065c1e
-
Filesize
5.4MB
MD55c854cdec2d5eaf34464236a8d466ff6
SHA14d0b9774731b2c4be95ce227180977959d5e18e8
SHA256a7205489e4b44c3f98edb9c87fc244c02aea7ffef001db1bfb85c327447abc8c
SHA51206669d4aa45cc04edb6e35d4945fd1ddc01a394022e86bd5af2eadc58b8c83ae68ad830587deedbc0503448cf4ec5f2c763bbe81b73494535a640a9616aa476e
-
Filesize
2.0MB
MD5ed73e418acaa26e7300fc76a5b04d97b
SHA1b3c58db08e84f4eb134882a1f98fdfedb26221da
SHA256f3c046ee16aef2ea81976c2ac9c4cc9a8aba7884b12f23fbc208d8b3062c73e9
SHA5128d9ad73c94c36ea05300dad1112f1da4a9391421408daac9841b7a51aeefbae1c8a2eb235a1e28062a54f58b6a76edc9f1854af558e2defa3f4c30684f0e55d1
-
Filesize
2.2MB
MD5d4bc0560681cc9219470c0bf89e47a54
SHA1633fe61369bfc98c55422183b769693a29ae6a43
SHA256d3ca69e539d0a1e6301450af4331bbdd4a0f9fc0a42692648f96ad0874720fe8
SHA5123ccb1eae98cdc9ac12b6dd012a812a77ac32229f1523b76bdcdd6691ecd161fa627635c8130d06319eab6071351997a62bb6acf310041b5670a1c682fbeb3bc9
-
Filesize
1.8MB
MD5ee037e1b426099d22017f6570a5fb147
SHA188e5773b2470ad59d4f19209a178dcad2335c976
SHA25614298ebbfca5c485604a7b09f9bff107105c89b4f73ee1435ad15032bad5326b
SHA51293f199813ce0e8996048a26327aab86d0bee9de96d2b96819090d15cc8e9d67230abefc174c645bae2395eb01a09e50d12d7f0e9120bdf6e35fd41b2b4154de5
-
Filesize
1.7MB
MD5188e922a537c3953382cebd88abd7a47
SHA1dd846da824567ae643d48849bce7d8e0ca58391b
SHA256dae703a8d8c7f9c6b5f73855dcec95cae366a680d09538ec2b4602ab907a16a6
SHA512729aa9e00ab5864d826d29633e552f774e8fdc882e8d7083051398921f6340fa229fa33e1624cfa41a84133153ed1c2b5df13438f56151e5912e4b7d0cc43cab
-
Filesize
1.2MB
MD5aeb7ff34c8ca19785689849a4df7ce73
SHA17b3a336a6e92335091bce9996424c39872c52921
SHA256bc19c67b32859c0ce2cf15af8df724e9413e8d5a14fc31ed369bbd449f062318
SHA512c42bc70c9f57b88d4f9208e7309a9f39c60e52aefa6ad37242ab20e65a4070198b5aa4cadae240cdf0c26974f21bd1732a565502e9ee672b844d7bb6406c87a5
-
Filesize
1.2MB
MD5ff0a68b7925f3eddbc79850f28437b2f
SHA105140be815f6e39412e85cdd39b27e6577494b7c
SHA256aac7c3998e4fbd4f3da063c02d5db83f76d5cd4ed23d5423063cab7a64ba4458
SHA512caf594c397172bd272319a8eedcddd8e76cc63da505458e27815941319b3c902914196d6e664a3be5b099d22b7ac7484c16c2337913c2ea3035eb6fdc5e3915f
-
Filesize
1.2MB
MD597fbdc26db042eddbda7404abb4a64ec
SHA13f18e93c908eb7a19ee6c62309c9072d71073afe
SHA2561f15846215f53d6ba88f4926ca59906727adf59412f32b456125767b9b41e36c
SHA5120dee1141010eadd025fd9bc259911a6916d8119e1090fb096bf22fb82d5da15486f2cc07e040b0f5708993ce6bc371088f30832e88548dcd7036650107180ad5
-
Filesize
1.2MB
MD543123bfe905250b4170de858184052a6
SHA14534ed12d43a367e2af5d88a282edf32e493d4ab
SHA256ad89b0f381967a4c09b47ccea23a64a2f5f52552832ee33cbf164a8a7aaff1f1
SHA5127ce4631e7f4e7b6259a40de2daeb0b03445cdf506b0b25bbb2b599a76b6c873e0d3d6e4495dcb45e24f9af129cd9c5f77e2d975fb6bb8ee36bdc9425b0ddb803
-
Filesize
1.2MB
MD5e1a41baba7dc7c528abc840cea112d9a
SHA1a17c56453052b6415a2a3b8327d0cd9d1a243f06
SHA256340285a6484ac2b8c7f6c4c2194cde7898b406ba5bd2e25055b87b3004138b96
SHA512f768a2779768f1bd90af50e3787cb8f327176d266554885a7555c88621974c2ed3a3eac674f70cb22e096cde402ac7405c0bceb04468d373b9b3128a3ef5bd6a
-
Filesize
1.2MB
MD5320109716b3797db4a5cd8f528443dbf
SHA13ed993eedc9c4f0b7a6e3315530b06d5cc7a3946
SHA25650be3b670b20e45a3941b43424794477a04f3b0c5086314c417752382d1e70b4
SHA512382f2a43d22edafcce124087efbd7ab06ed734cb0b809be3015b171503511e5593d6469192416ea7fc4df5ac8d9387e127c2e645e5c8c146c0a8e220d21aba67
-
Filesize
1.2MB
MD5bd26fbe9c143594045726df20683fbdb
SHA13ca408ca1eaf22b6d4f89b339cc1e867aca9b05d
SHA2562de403d3fc69306a0b5eae603d8d8e9b09657e5788fd74a26fa617b340efd49c
SHA51278ad5d6150e480aa288d2d71d4bd0bbcf609d877a92a6e937be926f1c343d07e7886acb3ebc4301327de8b46128cb9b60217a9add8e416841a80b780fae2386f
-
Filesize
1.4MB
MD5eead1facc0d2c961230236058ba59c1f
SHA18351c0383815d7da8cac7dfa01e9684f31ea42d9
SHA2567fed6112e273c2ea4bfc696612bc88eb40f9be860dec82c7e94496c0c5563155
SHA51284422a062735d0b04ce2e9173950969d804b94465f7a42739b231e8029ca7148364a20930a061520ebd01d9131943b916b6b74516cd81cf9f21c3cda3cd5a675
-
Filesize
1.2MB
MD588a99a6f103d3802191ad259a99e9c48
SHA12937956f39ec3b455bcbe142247ef25f7af6d6e9
SHA25600d55ff2c2a32d60a3dbed80eaf9cd8d43864b4ec3e7dbd471e1bae5ee727c13
SHA5125ad11fc36bf324ff523219bf2686efacbe48037e053e48f67f131cad6a318eef8863c70dd0f8be73e56beb32f572b9c80088478fa36f9837840633015dedb6d8
-
Filesize
1.2MB
MD5ac1688740b9d0a5e7e05264b26a70b06
SHA194a99a67e8a81291e617e97007646c9b878da3bb
SHA256d5000b3f03db0d5beaadd7cdecf23533842df8651ede74d6ca7c061f3082afd8
SHA51269542c688cf4bb6cc5de0864fe5be848f30ca2eb5aa124bd474835f3f43ddc4f855dc426b7101b2c679ceed9cc495938904dc4c2ba0da57861183ec872fecc5f
-
Filesize
1.3MB
MD5489adcc1d32e1f5a03dc9d18094c4ece
SHA19530c2e846f2ceb79f1790f3bfb6efad7867f8ee
SHA256eb7f7c23b0e6878ed288b098a3f2981f5982dd792b228a85ca7c0f3281561f58
SHA51245d981a7765bc35c4dbdb63e1646ea6fd528435707da987f0aea6ea0f56d6276e367e958648334e72a33a8341ae9830ad6d1dd0b4cd34d180cc56e0fb18a41f5
-
Filesize
1.2MB
MD57640ea236c407319133aec63dcfc53d1
SHA19483da599efeb060fd1eef72b3837ec666200b6b
SHA2562b91f287219fea3cbda083fcc671393e1a1212420c5551f2ac7e073acef49c45
SHA51274e1550238aee87fc5153b51b227a707c8767c6c20f7e54d177ef57fe8ed575b0d838abb3bf71fbd857a6d84f6c046d67ca7f8ba4c3bffa544657a2ec4e246a1
-
Filesize
1.2MB
MD529b0ce9a850a627562a0d4c172eaef96
SHA1c2523964083a8667aa0c21b369992c5177f34ceb
SHA2567e3750cd9a5e80d4a07fb799904445af196210f49bbd4d18a43520ea8a768b36
SHA51291907f872f553009d128af83ccee034bff409f1445e3ab6a737537e0adefac548903447f7d84365b57829c67e3af119cdacc8fe9ed9ddc08aa742abec0319b52
-
Filesize
1.3MB
MD57e8c2c935efa30cc894577e3dbcc3a22
SHA12e69006545c20ae7b1dfa295c0a480ee28a05b9a
SHA256905aff6cb46bbc07cf0588cafab089a850ff366de4fbac7047244094eec9d8f4
SHA512d6439ea89180fde7f826e13b16f03eee7829a51c060620b6b9086ee16d365b8b4c7d6ccea06940eca8c1ab3e5b44fc5db602b61f92dfdd6199da28c1dab9df0a
-
Filesize
1.4MB
MD55abeb0f8d53577ec2f4eb927e16439b3
SHA11853aaeaa176701e5524747995cc040f787556d4
SHA25611bd2c563dd38ddf73ee28e6e982bf33d867ef16a1b03ec6fef287371b4cb4ad
SHA51262f39c2766baad4fc55ec4a16a0fcae6cc3dfc3664fb6da85d54ea1fd355688d5bce5190436ac0f2090214fd6de392d5d507fc8e60f5d9914d3301cfa09e638d
-
Filesize
1.6MB
MD5b69407bf6529184819e35a2fdc3710c5
SHA1dbd55aefefc56e0e8c5007320fc9d921f73a28e9
SHA2566faff1db2b1bd5eea25363a64c4a7d9a87d43dc8fe3d7465b00ede033582fb99
SHA512fdf799547dad64cadded5e9eeaf98316f8e8eae61b37b366c37840dcac547972af87fb4f4e5280553af980a6cd47bbc954c8f3901318825e5e508813c4baba58
-
Filesize
1.2MB
MD5c7e59648977ec99d896ac1fdbd565bb1
SHA1cdc11ec8e317f27b5d050f8a2a834f703c90b2f2
SHA2565d641b1b1616c33cd6cbf9456e46e35fdbfa0a58f45a2d9e2da3c7d7731e4416
SHA512fb17c67ec4c55402db093c6bf93e92dc6878b1f08e419b5bc835123663a400678c0b4b6af519f89af2bcf9797faec2a90e2d6ed9b7d4fb42c24091f4961b6f11
-
Filesize
1.2MB
MD554fb92fe7b22c893ea8a19a8f7a5615b
SHA172ccb3b7277383bf16bb2023823c8b892c4efb64
SHA2566983323fb4b6d26a8a0cd15dc4352b4405c540b1e095ade7b932a0a8a0e11fa8
SHA51255adfdd2e5561a1658d1fdcdbb0d5afd7052917cde7ea79b8e5c84def0231ff67de506f1f95ee027eaf7eda0e2d8107786e0830025c059f7059ffafbb3c43134
-
Filesize
1.2MB
MD56bba03dd04df4682e766d3ce5b9be4e1
SHA18846344098edff6bcff39c3d1f3e7e83776dc4fb
SHA2568fd33dc7564d584f88aaf7b6f82d7080d3f4a76c8a6bbf13ab57707ebcf71bb2
SHA512294bcdd7bdeae21367f89921d31d47f64d744c2b5c9f394ef02d9d9fe215d78ef2c770dfe8ebdf46cc4384cef10ae9d5f73c75c565caa5850e976f0acb9f2aad
-
Filesize
1.2MB
MD5b48b949c6da2e724100bd7b7ada9fe47
SHA1798543a35892c24b91f538b683e2b86707a0c9ac
SHA25611511b058f36f2f90c7ea8b7e395a36aeb87417e61ab9b392037f65e4336eae2
SHA512ca4bca4d4eb23f5f0fc3cbc47ae39edf87ef1db9953e847f2c05e5ace39779b729f37fb919eb796de89e3945d5b0fcaddac768c79e350bc09afe2ee869418bc0
-
Filesize
1.2MB
MD5658523fda6c74d4921c9ab9891fbfc5c
SHA1fd388849b2f1f6e855d06d3262653fcb9601f10f
SHA25693078caa4a22a070f81f86fc2d6abbe5b6f7530bd0d1cbe88641497df6122342
SHA5121bc9ecd762bf255edae5af6463bd9281e03aedcd40915ea16c459b3b54e904808e4a36f83b16b564eff70888ca66104dc15fa6db4eeec9be32753e089a9b0b81
-
Filesize
1.2MB
MD5f5932c1115d9e1b8463b5e1da07a5ef3
SHA1368d76130ebf7cc7b55d1bfe49c237615494c9eb
SHA2569ec9c2599c289af770d784d5172176936eb3a371f7b76d0cb1a70eb581ffb8cb
SHA512a21951cd0a17ba932e410e88f1bd929f926a9540bfe63edb805573babf9702e60966d8fea72ad6d01de11ade26923e7134aed746fa531438d464c21e16e6ead2
-
Filesize
1.2MB
MD5b02aaee5a96ca5790bf8d11157b0ea2b
SHA13d50a6eff20469099d8340b1f09348e11c63c008
SHA2568880c41c7552df6673b586aa6c9062f1dbce441bfe182eab3150421ea5f8fe7b
SHA51224012096461b2039f08775653af497fb9fe6d6a6b41bfc8616aa4e5d0ce0abb3d2709266e70b3da28d35b81962701c68c13f95704107cd8f383228665b2ba6dc
-
Filesize
1.3MB
MD58581bd2a0110a076c8a55d8d00e52b4a
SHA1009a99122c34ae6567125528d64f468b2b9c99f8
SHA256c272e332263bbc2becd6d17b05e2fdc9a9fdc37a997716098ec3a1fc71813ceb
SHA512e40c450864323724c1c0c0218a4cf6288f48beed9b3e661b4a418f9d8a44fce146a0e0270f05dec3dd6e3f02b8ad605275012bfebf20a286f7d0345e35257ddf
-
Filesize
1.2MB
MD5169329f5a26703f2f430ed3ba30fa833
SHA1d7b095611fb572ee440f081039c8bfbabd78f452
SHA2566421b00ebaee981d981643ec95b989c3e99bfb9fcfab042a4353e95950d32c1d
SHA512643b4fceef24c49717e228a4aadfb078aac8cbd96cc16e81aaa24add4d3e2aaa5e8d1c5ce38cd3c4a15c31dd6bc010b050dbca9fc822e7cbc2927db32cc7348c
-
Filesize
1.7MB
MD5e115c153b7ee50cf6bf16318243d4d2f
SHA19a0db10339ca372ccde43a779453ed3b6134d1f0
SHA2565f2987cd837f194434b51f8a27baeb1697ace8fd73806e43d246a61c6cbc9b9f
SHA5122d97590512c838c452daa11ecae019e2229732efeaa39bf142ca155ef4c2a47cc67ecb6c99a5564ace620cba3075e227f55be72c8b3c66c9b839b0185a2a4630
-
Filesize
1.3MB
MD5dc294473e1054118bdfb6f7fc019c204
SHA129bee0172c1988e237b2a4d1da1c68263a956bcb
SHA256329ffaf89e079f1468c3cfd59f12adea10fd14f6c3226c01afc831c0b41b5c73
SHA51209ccd9ce1a1b1ab2ac6c1da420669933f7d95e726894f1e3e710c3354fab1d9eaa3c0104f7809eeba7900d375c8ad4676b14295bff8d44736b11b6db9e22a3da
-
Filesize
1.2MB
MD51c90c44c7c1c49d4975fec637d57ae69
SHA1b59f446d88d2d8b3b30b21f17eb2fe382d8cb9b6
SHA2568b920eb27a4caddcc79248c32286a07e24112f745f4bb3ad2ee9a9bb07149bea
SHA5127043bd1e5c0d40b077bd807cef7009aba76dd79b481e8ea058bde52cc0ca63ba720e1b366f2c4a803d5729035758181d987eb6933e7dba68a5d191cfbb0c95f2
-
Filesize
1.2MB
MD5d6713e05b36b3af618a53e00f6920c2a
SHA1bfe70027826ce1797a905c689fa6ffe9f755d862
SHA256de1b45c67b70693337d93e211cdc76a2dd787e8d9b5c3f0134b52968677e3f76
SHA5128f6047fb26c27f8eefdb12345e2ceb0a8014eb4dac89d4ae0a1add733df3b0858fc803c562cd91bbe7c0d18b867b32ae7a6816a9cec0fb57dfba097d338eb9a6
-
Filesize
1.5MB
MD51e7aec50178453b3b395523f8d6a4427
SHA108ab957bae2ddc8d301470d1041ec06c0a273c1a
SHA256ee1268458c33731b8d191f9509f48498415f7541fda57514661341f981474e03
SHA512030392ab8aeb393362524c1cbed8daef8e795a6b6df223de5a226000a5d4d43c01ff2747b9976253d1bf20ffd1658c2bc6f96b4ad6df24804d3c34f1b6b43dcb
-
Filesize
1.3MB
MD5665d8fcb8a5473cd23cdfc0c2a27b85d
SHA193a6fe648c28b65998bb34b42b51bdf6001f2db9
SHA2565f40e83d913f60a8f0838b7ae04a56c7354f7cd669486a6cd9045fa63b3c7e80
SHA512e57c966f7f4cf023d2a25a5a1942f88d116e9e4bca5f9d276927b1bfb8cab70668a08ffa1eb08f5091b2a66290560a93dd70fd9454a768261cce60d0e9bc1712
-
Filesize
1.4MB
MD581547699e9a28d842082cc3e416981a5
SHA136c2f3890e89f6ac9f7afdc99ebbd21a85797e19
SHA2565d80cc14f484968c1a9c9bda222f956d1d28ba85b8469cc6aa0c2736863d3a03
SHA512ee946ab365aa62240f79fb56915e82cd279a73984e54b7b4da74a9368837072aab06722d7d8f96c4f6e3cb920da634474f6f8d49ad8e34fda20f1f91f7e5f063
-
Filesize
1.8MB
MD50d2b08201d472d2b088080416298bfcf
SHA152b0eba7ba2da64a4ba9eca580cd4918a8640cb5
SHA256fbb8e9e5cab158c7094e4d5651218688f6fd1bd77a7f6a801fe68f14e07f91c1
SHA51286b0785a3d91b76d4f30f13d7fa3ba87e1120c12f32bfbb327767f86d3c660613c237f9a729b48edc98cb450862bc9b819e9c8e61aa5fb15b15fc03b4a85b004
-
Filesize
1.4MB
MD5fc58e969d14b60e162f16f105fae6082
SHA1b9b0cb9caca2ad07c3f4294645384f5c342a72cb
SHA256c4d83a276af676c5f61281335288afedada17ee4031b83f2f107646fc8cbc64e
SHA512e0d76b24680ceeba288df80d94dc784e66cdce5750bf7131fc61bd9b607b4f4f0602ebb819398806ef932ef2c836765d250ae8ffb593dfbefae1b3438000b6e8
-
Filesize
1.5MB
MD5073701da69eba55c5ec4b45a04a73804
SHA1788692d700ba217ed6244a0ed7c2ff8830b24611
SHA256204f4f00753ab4fc94427f248fa8b5baf6e0b821b00b005d49b5c8b9338e94a0
SHA5126be750931494e17dbac68ade90644366babcc58a24628f6e8c2a612fdcd10a3d22f20806a4298eaa0d963e943178b49776f036c8aa60b8351d6bb85cef595058
-
Filesize
2.0MB
MD5f269b9ed91b8a03af5fc38a0271dbe04
SHA10fc3b271ff9846a7518c0d2c2cddc329e65d970c
SHA256ed1f3a8c85550f5749bfbfe4da53e8759ad9e042593ee4c75da90a549debb351
SHA512f54876c8ff76b6b6c037376776a9c60348e104095ee74172bf2a2a042e819babe2fd230bdc731b2cd5fb31e0bd35ca4832e1460ca1d2f61b086dee5e55c08fed
-
Filesize
1.3MB
MD5cea0a1ed86409d686052d06eb4cbfd32
SHA1d563fa6da5c2fe17aa3c14b5adfd6969e3fb6ad2
SHA256a1ac76353913ad11f2bb4023f07dad3f7a4d4687357531bf7ed451cbb9f65247
SHA51284787fcb9eeada1ebff6f35b18c23658b4b6fde180d76c4283061fab4280f68846627c16431c045c347d201fa83e3ae3cd53fca952f27fe855c6d3509f7868e5
-
Filesize
1.3MB
MD5904530bc607e96ada8e4120ac7da3d45
SHA171a665e727f116a693fe4bdcee0c30fe4dc6af6b
SHA2566e8ac6fce8a531c5864b9bbff5325ea16a25c18cfb2415745f8b1338b052ced5
SHA512e9b46b7fb68de03207a6f45d2d0485ff1c8b253739c4d2867a573350968758ab1cf858ca02c47f780742beff61a3e02352a1654a835d48c6ef1ea684f432ecf1
-
Filesize
1.2MB
MD58e782260ad4af6fbba6d11e9e77ae7c0
SHA16824ee9d2263581b14ed65576b872e232a315ba6
SHA256442f3eebc741c6031b9365d44282dfefe2177b41a43432f986ae0f573ee4cf8c
SHA51216c7554110fede318b3796a0232554a7296cc48fbdf23c4c51f46a3bc4ee256412a60c2cb2f472f371301566a6604f067267d06e94761342fb099b358bd72738
-
Filesize
1.3MB
MD57b7dd6bd18cad3618f03f057b983acaa
SHA17574123b193b9db31a0a9cd3eb6e5b1b28758858
SHA256120729db18d38085e59cc426961408282738d68e86bcb5243d66a34bcae35a91
SHA5127ad17f1254baf5b46840980b6a1ab6b4aafbabd6c8fab7121720f0b20e0ab06360bec77124b5e15193b0b6cff51c63faa0f6e4ff756c221fe7f4683d0621a0ca
-
Filesize
1.4MB
MD5ab2bee0edf4456c55ef5c5e36ce22a2b
SHA125bc1236d14ce9b6affe2e9ce99d91278725bc26
SHA25604c3033e70c7fcdf8e69bc4e0c52edb4ee3bb0f3be569db87b3bb73ec28b6644
SHA512014a24fb750d09c4b3475d6e3c36c5d0716ee9e09c92a96b36273d5defe635a193b9be016fe69f58e82319cbc1547053f9681fef6435a8e50d41929af87736c6
-
Filesize
2.1MB
MD58fa509984a72ac710e5a38410394174c
SHA1b8608a5f49509a84035ae882d409c1b992adb4e4
SHA256ec6395b58559ae62c74e86c48f6ca8b04faad853813d74fbfd9fc75c295bf648
SHA51281dfc2ba118e0a449a54a42da7b2ad2ad505ca4de8b078cb2c85dc4477234108d3d49fa1d049b2284c9d1ff034542660ff9f17e694c63e9881a95fffe32ac449
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
1.2MB
-
Filesize
384KB
-
Filesize
1.2MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
412KB
-
Filesize
1.9MB
-
Filesize
412KB
-
Filesize
1.9MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.2MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
1.8MB
-
Filesize
1.8MB