Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
11/06/2024, 18:05
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-11_b09eca574a459878097165cfb007bf88_bkransomware_karagany.exe
Resource
win7-20240215-en
General
-
Target
2024-06-11_b09eca574a459878097165cfb007bf88_bkransomware_karagany.exe
-
Size
677KB
-
MD5
b09eca574a459878097165cfb007bf88
-
SHA1
d7d623feb3f279fb3528e4dfdd81ff4350148eae
-
SHA256
db20ebe76e5a4666cd0f5cee7b26d208143cb335463a0ea9d6916670f86a01b1
-
SHA512
98620b8d1a46aa6a0efdd6a6e3f94fa8792fabe9adf3851997846bb3a94ab3947b5ca57869f6329d842db519fbdb0d3c1fab886bfc0ec117a6d0f5a9d6b89717
-
SSDEEP
12288:UvXk1x6FggLbrQXbR7jqkf1Hm7tJc0FS3jicGWVSI7dMua43Ek0cIHAN4:gk1x6LaRFdGJm0Q3WKVSwdr13Ek0VA
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 2516 alg.exe 3428 DiagnosticsHub.StandardCollector.Service.exe 2816 elevation_service.exe 3564 elevation_service.exe 4760 maintenanceservice.exe 1096 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\AppVClient.exe 2024-06-11_b09eca574a459878097165cfb007bf88_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-06-11_b09eca574a459878097165cfb007bf88_bkransomware_karagany.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-06-11_b09eca574a459878097165cfb007bf88_bkransomware_karagany.exe File opened for modification C:\Windows\System32\alg.exe 2024-06-11_b09eca574a459878097165cfb007bf88_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\5fceecfd590e271.bin alg.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jre-1.8\bin\pack200.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javah.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\ieinstal.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jhat.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateCore.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\klist.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ssvagent.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ssvagent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstack.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\unpack200.exe alg.exe File opened for modification C:\Program Files\dotnet\dotnet.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe alg.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javadoc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmid.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe alg.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\orbd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmic.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\keytool.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateOnDemand.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\iexplore.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\private_browsing.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\extcheck.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\kinit.exe DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3428 DiagnosticsHub.StandardCollector.Service.exe 3428 DiagnosticsHub.StandardCollector.Service.exe 3428 DiagnosticsHub.StandardCollector.Service.exe 3428 DiagnosticsHub.StandardCollector.Service.exe 3428 DiagnosticsHub.StandardCollector.Service.exe 3428 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 656 Process not Found 656 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1228 2024-06-11_b09eca574a459878097165cfb007bf88_bkransomware_karagany.exe Token: SeDebugPrivilege 2516 alg.exe Token: SeDebugPrivilege 2516 alg.exe Token: SeDebugPrivilege 2516 alg.exe Token: SeDebugPrivilege 3428 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-11_b09eca574a459878097165cfb007bf88_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-11_b09eca574a459878097165cfb007bf88_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:1228
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:2516
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3428
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:2816
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:3564
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:4760
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:1096
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5bb2784f9a8d480396b07724a6ef2eddb
SHA13c71b36facd52ef30bb6eb6edea0d6c869549b89
SHA25648cd3a8f4ce856570e98b3872e0702afa2178fe2ce47c67ae08baf7bd5ad9952
SHA5122f23f2e1ca04609e3e84fea0e05dae828bf3159f1bbb4e16ab69a88c6fa85fe29f8b69ede3fa516c9cf4f654b2f0dc4a18a793ab68bf51eb53461202d4fbba14
-
Filesize
797KB
MD5ef58e841fe22e6405524d3f1fc50f869
SHA1cf5db68a0cd949e18824c97dc5f69ea4463af613
SHA25670e17131525d83bef329269bed579b3e1cdd797efd4cf0845e0409f3afcb73e2
SHA5126b4a4f15c82bffc1a7de62bb25de31feca71667873206809c2a0bcba027190e47cee3249bd19143e6881d54b23fb9667ef3f67292d49655344f939038c9eb980
-
Filesize
1.1MB
MD5275a78a317cf51e5c848a36d7badc11c
SHA11cda9b787dd61bde5e25cf746da9d49572732fcd
SHA256671773d801ac63f69dbb467872a6a42ed244056ac267512e83d8b3a3b2c12310
SHA512758fbc4e29293eb44ad0259781e6561ad98b55884691dd3cd98adfa471bac487387cadc57c7ed66259da80c4d87265e5030bd6e0b4179f5ee706d99920264905
-
Filesize
1.5MB
MD59570e4c2729ad74dd85dbd76125e66b3
SHA1a027df0ea1764a4148df6fd2d4b908e6de3e49fb
SHA25615ae1f157963a3a4b50692385e0581985a9da633a22cbd1807c35886a755b244
SHA512a949f26231518f557db50ab32e4ac8af754108e5a4f4c2c36071c36b7f145c2970fe82a3458e96bdb4dee750bd0086cc4d2a32c134f3fd6f3809456b155efe5c
-
Filesize
1.2MB
MD58f0d7830b6d1783f2bb1c43fa58e39a5
SHA11469f19aa170ca5d64e3f682496ca7ef4ab25aac
SHA256e8ac121b6d22c77e83ef0a1767010460c4b45324304e1cdaaeb2bb7216354004
SHA5124dbd2bc457fb2910c583b7d1374b43cdb3b7455a43e8347f66a640e707b4864e076bd89dc85625808397a0caced87c35e0e190c89d75c388c7b335423cde105b
-
Filesize
582KB
MD5ee80bccbf323304fc9c4c05f88d60e77
SHA1468330fe3dbd279c555e6d010933ffe0d581cca0
SHA25642623424b924684c2d85b76b375f86f3ab47a469e0e8ae84986b65bec9de4c26
SHA51235a47f934aa92b240082fc869de92b288c82b200a69a90c6ebb56c20d09ae356b8a748b74e28e3edcb4cd713ce4fbb2bfbd5f6673746cd75d2832de38a8c988c
-
Filesize
840KB
MD51ea7888d6179ffef9178d1ac9fe354eb
SHA1b781b752908c672a94c835dafcfaacc5a8fa82cf
SHA256bbb7592df80a45241d20875215f2a929b02805374f7e05e52f77e0aedba01b37
SHA5120a9646184a2cb394321780b7ac3d339d6976c26729fa9d9b6c17518d63c400566a78a487e584b1b42d7cfa8b27a7b43ba81f6b9ed95cdb4383f6458a0ad7e378
-
Filesize
4.6MB
MD58ef22696cd23d0a549df755e663b5a03
SHA12cfcff48dba74482cdbaec92252fc495f29329a1
SHA256628e16d10b8527751a060fa67283c9d1b9afdb1557c418273eb1fb7312236f8e
SHA512d5ca44b9ec6f3bb61a8f2ff22c4e740f0413efd571f0d412909385062d07b8adebc85110e39ea1b2403632398cb673f7e242290551847abd89e51e48d5bb7fc1
-
Filesize
910KB
MD5b1160d149f4ac3914a392abea03f9486
SHA13709675d69a0528bf0fce65298b7f4e5248a9b1a
SHA256615e22ba12922b0e467e9bf6996371818df34b931eddf8ca28de441ed9850e3c
SHA5121668b3737262fa28252225d8a4704cce5666c8c57ed4acd7edc06913c497c4a129ea9f300d329916838177555e03090db649f898f9fcefd72b1b14696a003cb8
-
Filesize
24.0MB
MD5ed49d6f554c5bddaee6824401a2c50d1
SHA18b9b518de2dc08845981860693e6cbbb520ee87c
SHA256366f976814da95e23ab82dee715fc0a5bdd54bbd9fa6376ab84d9f29ab4cf005
SHA512551bec4f4c7088b94134aa9ebae5e27129c4399ab72ee0cee072c52ec6358c1f276037c83da8c8944eed961ec8a9ac5fc6620ea56887ce8ba96c37e371cac8aa
-
Filesize
2.7MB
MD5845c21e4328baf794280c95694d99871
SHA1de07eb49b97cfa72921923d6a525ab5ebf256c77
SHA256db5b57e2fd5dc042788033aa0e50b584944e386b6a5d02518f63572029d05c8c
SHA512d7e4d966bdbd1ec2f869c0c75155e0f2503d173a14101aec759feebbe4174fb8866385cbb32ad9ed4415e30620ef537051ae2917917cca609887a982ee0ee87b
-
Filesize
1.1MB
MD53dbdb9159d42e1fa93092dcac7db397d
SHA140cf8eba26e805cd3e747b30a9dafce982881d27
SHA256d008ad361357956e646908046a01fcb6a6df118fdfdb25cb07cd73119dbe5447
SHA512275ffa2f5d3f7b7e2fd1b9b322584c0be49741fe038f99335217758b986c871ffe8fc5fd043d77ab7b509194cb78f73c5f11489be4ebd768e5640450d66aff81
-
Filesize
805KB
MD5e16eca7f7994fab3bd62a2bab611c1f3
SHA1c9ab4551c7b68bfdaa3d9f567e514b9a31951497
SHA256c9641385b5a03c229a6b3156875081716f0c6f8e421517ac1895ba2a3d8f0837
SHA512b1253f9507330e79d7ee9c8353b13b40c95a3a4fb6159f6f0821d72e618999421a6857eb947c44ee2b372b9ff28983471a8e4be0db4b671e6813133535f814f2
-
Filesize
656KB
MD5ff70e6874f7e63b8bb21f4bbb67f5237
SHA18166ec9e0a3d468232ca529f4bc2ec8034dee9e4
SHA2565854ad069353c23ca3b33e5d340b7532938cf813c2c6ff64db04bb65d6077a8c
SHA5120d6a1ce3cbee8533ad1f97ce13d9712dc14c48a2c40810fb4d384450f34cdce460a8556fc59d25ade54a4df61d19fa46bd226a36817a665b9c0d683c276b8e7d
-
Filesize
5.4MB
MD596c36557a4c69f15e7b2213dc1d6e073
SHA1dc1597d0f3bf2d155dbdfa357fa20ac30be77e15
SHA2565ccf38aa85b7c65861627d84667291d85611ae0c433d49ae1e2bea742dc4db5d
SHA512dade1f6c365db34132e5b8c9f221585384271b7306bbc4ad9c8242846e3b71f4e78fd3a0c7b9a3539c158013c6171991a0605e8c2866e798e7fb417031fc46b1
-
Filesize
5.4MB
MD5c613f3008e10326b45de7d9e8980c225
SHA1444760548eed2835d4b6e10d8978262392cbcc8b
SHA256e8de3abb8bca2644c128d985fea0583c9c6360b4373f72ff79a8c533ad2cd72d
SHA512488cc14baa4f406d5e6d92c02f37d65963c50684790138340b733dcb3a024195e23c62d6ddc4ee658de5e4044a8e39f73cdaca609f860132990dd513d67f0b8d
-
Filesize
2.0MB
MD5726e9fbcbf069fd86a41a7b9bbfb688d
SHA14d7d3e3a8a6d67094abd496e0096803f7840abb8
SHA2566c5a0d4c04d8d020cca380620263e2c1014d16a8ea63e9a990d14cba35b7d453
SHA5128f8897b1d2e946c23e0cfabc4e403eb379f031e4c37b22c27f947c177b35a88ff947972e8a9576ca6d90c345bfd5def14b3853e6aad15fee4b262cc15d4f100c
-
Filesize
2.2MB
MD522807eec54bd7ddef713c156d5aceec7
SHA1ffc47ccf08eb43b38e7e61266e82296299b23558
SHA2563ff2f651f7bddf053e8bf5216794438f043a0d495adfb8aa5f497f333f79e102
SHA5123a1620ce3cf15e4493e65ce07217440eebc5a13e22f828e3a3031a520b44b7f91b63fb001ddf123035ef8353eaf6d3c0c8d698ac30c6a51278e589257440a386
-
Filesize
1.8MB
MD594fe700b398c67c08ee305bc0c66aae8
SHA10a405e0bd88044285220397625ae92798a1f6307
SHA2563ad8ff2eefece37d4ed3c576b02cdb891edc1f913860db302d1c3824ab97a545
SHA5121f6e796684355d7cc407edec4c4dddf16813065e8c0091fe0a1068c33c289d2544d54eee49716f22a82af100fde9d88b448332bd025cbdff807abebe77e499f3
-
Filesize
1.7MB
MD58d190f12a3554fcd7f313b8776e0f68a
SHA1f39f3625080e1da888926634b3e5ff3cbeed3f8d
SHA256bb9b9ec009932f1c251b4faa5b52053e32cf786c2d14796ad1e55ae6ef15e92d
SHA5128d9b87cf39f38a2561a62656127e3efd0bf4028f9d96c915c1620924e9bf9e331c1d7d68b05315c1ce69f60096a412d0196357cd5bc78e907e9c51c52ebb5a8e
-
Filesize
581KB
MD5ca7340d395a76df7d09cc9775823bb6f
SHA1809aab63a3a1326ab74547ae5ad2bca54b3f1ceb
SHA256a4431d971f3c6593ed9561df4f16ca564371365a43fcf24759e1abb4f9acdb67
SHA5125317fdd5ab76cc9371521b63ac5df30f49cac0c2b438c2077c1b5078f220e45eb8caac611860cfc14806b6f77b2d14cfcf766faff706adcb63d1e91ad4cd855b
-
Filesize
581KB
MD5069ae740c3ddd243c3305a935b8e5948
SHA18b8cbf9f9b7281433fc18710d2065eefae7111f2
SHA256cd7fb6f26e9cedd423ad47159844b0f78b5c5e2a6998f2079d576228ff2e938f
SHA51224602c90fffbadf5ec6742690e3e3022218795196679a14a4c9680d55d6cd49f9eb59ece2a1c77b06499e8874e2420353813c5e8fcc80184a259e4dfa4a4e274
-
Filesize
581KB
MD5f82494f42cefce2a8b92a790cb37f3ba
SHA1f56ff3d515c7896227b9017c27c216b0feb54767
SHA256df792a5cf5350cd8c27d7c71cb0e483ab02f8e3b1345b0f2f682c4c7f0c44cd8
SHA512a32a27644590057075e57ff7018e176cadd29adf380bca9de1373150030bd496aa8fb925148e436c52cb4771f7a210fc41a140b2496a6d591094ceea52a22f7a
-
Filesize
601KB
MD597d6ba35b6e1627c59b70137b68ad745
SHA1b3c8a78771da9c6c7f61f530f156dbdcc35bb09b
SHA256165093cbb1d2ee399ecb3c8eb52b3e035eddc2b8716525119f935913be23580b
SHA512e04dd3d6fedff4c0821e802dd73b118ad650a20362f85372ee0527143a73c6c5b192f59f682d97e991b49539dbcc7bcc2c8e446354439075bec979b87d0342fb
-
Filesize
581KB
MD578c5c029b6b90c6c141f9437056e5e6c
SHA1e1b3bb33ddb33382cd17a3cb078f9452fec458ff
SHA256f93f075610fe5d67db83d7e6f542310a4a48973b1934d4db23f85daf4116e54c
SHA512db6b102d8805bf6685ecde737e7b3eda99a66c17d05e65426d108cf36b431983c085c9bf5088b790e950fd4fa717ef4dc9802044b3c5e4d557a5b002b32658a5
-
Filesize
581KB
MD57eb6c840daa298571c5ac2c46d0ab925
SHA15e7e7d6840fbc67995ba6e4e52d96e8bc50d5c9d
SHA25610740230401dbfb2b396a0bd8fc77c1b60b9b0ab21d76c1d10e83c6e40a94a6e
SHA512610d260d8b9a359a17e0c3c0bb086725c9d9a9cff778f18bbf13b1207da488b16706b6410181629aefe9bba7211ca6e4fbc17e2e0a7a94c539db85d735bc7c7f
-
Filesize
581KB
MD5cddb2f21844529b991a123dbb618670c
SHA19dbed72e065a1580235518fa9e44a1c9342e5aa9
SHA256cd1a8e6eb0bb62d30e5c8d0295fdf3094b945c1522d5beac1e469b63af67d0b2
SHA512f4e6b69389705520ee8ccb4e2a942a07d00cbb42f2ee52f9a341fdc19b6d6f58e5e2ae801d7cef8794f19cb28a0e3f1d998677d2a3be786bb7a8a874df30efec
-
Filesize
841KB
MD5ee1cb52193699ad93de3f8b8bc2cf812
SHA12dfd12c1650d7f081ce4e7390f0578522f355c34
SHA256115466efbec0a67b15339e0155b9884738f9e9c4d1f183c971d4e6aa4a1fc8d7
SHA512e0f1b551c878cf8527ff330cfec2baaa80bf8390d4b14916568d033151b51c61502d91335a91f11dc594972f8457213abdb35b371b8ab20cd7b7c2f10e9f11f0
-
Filesize
581KB
MD51c3790db6e538c597ffc0b78eb4fb3f8
SHA1b1e843513c3268c4425dec34b76e3a904d15ebce
SHA256cf94f428cae9ecf6f4b9e8f6fc3b9773ee9c75e1a6c73f02a00e2e5123091bcf
SHA51297035f7da56884160785e24cbc281784af6bb956e3b450dfa2b0b8b2bcf7fc483c6b5cbf51870ed21f130098f7362fea214ebf4588b83641208c62c5dc5dfda6
-
Filesize
581KB
MD5814c589fa6f410abfce22b42d33e69c5
SHA114df436c568f235fcb44732d4b184651a9612812
SHA2562b07b2a990e29a70d0ad55d01ccf7e5cf373fac86599835dfe9096afbc9d8470
SHA512d3c17a0c0009ad3900e2f0e5de833717868b2ba75e368f758fadf0a5bef4726a8cfe2d1d9330d2fcae551d015f7c1f09da5858237a98ed755bcb1ebdbe1a8255
-
Filesize
581KB
MD5831ed4939c3296aa78e68f6b1dc09971
SHA1b79b10a714e295b81523cc08dfaecf90d47f3be0
SHA256a0a22f620cb312abde7ec3def7bf1ebaf8069abdac623d7e66bd764d445e1527
SHA512eea74f8c5a37e7ad166f78a1f231ee3ca08487e1a998f3ca7edbf41740e4c6e81456aabb3c1d54c4d1fb592d76774e64a1e41e554f94dbe2e4f3b95cdb048c87
-
Filesize
581KB
MD53cd92eb866c60e98e8e7c7938f78fcc7
SHA1d6c6e5e1a57664b68eec43674a40f171f5d0d241
SHA256f47bd74ff984f4938315f27d1904fee3a41e5cade80b30556abaf1b1e210d5f7
SHA5125e40060a71c33b397a672370a9c155e4f1c59100ce5028ac40b1c0eea78357c63d832d94fd42b3f56233b573050f160e75436668e21f7542fb60285857151692
-
Filesize
717KB
MD572d1a4c982d531757944cc972b5b9f2b
SHA17b594c2f62f4ff0ccd2b363efde2d038692eb3d6
SHA25686ca83a48bed5a23cfdab5208186a609ff7533be24716efa472ae30c26942d64
SHA51260982c356abda0497428edecb5e58180586f7586485dadea9b9412993efe60f0132bce4734543ec6cf6dde8440ab705d467cfd866574d4544f29d793ee22954a
-
Filesize
841KB
MD56efdd7e293d596eda2ecadc812c554a9
SHA1d4dc95ba94d35b6ca2f4ac840bb081967e7bf404
SHA2565b79b4dce9a8e46090c63ec74750e97bbaf418615c3e83b07afd4d88cc03a366
SHA512f7ccd76a7a248377d7ed402cbbd7c1297002668fdcf41950785ffa5cc3ff98cade9007747d146cb9ddb43a63bb71cd944224c5f3d0bfd6728848400163ca6cdb
-
Filesize
1020KB
MD5e0439cac14c763d8c1648fe3df06e34d
SHA17b67767b9b8dc3513ea51ded7f56a3cd59a7eb56
SHA25625e2cdbeb73373e7958a1b6387cba21813f08c74bd32df1005b0984eb2d4abd4
SHA5127bca4ae45ba0321ce24f0fa346cdc1d14f8da5f8f089ce9e08c5eace8c35b75b4438d86e7192984c6b7716ae28909814a636c73645aff73d93fc103cf704499b
-
Filesize
581KB
MD5771f6bc41616b254ec9231dcefbe1f3b
SHA1bb3c47c2f70382185c9eb471aeac4cb0d2525a56
SHA2564ad229f1880a304cf50eccec04862220ebf43524baf64fcdf6802e9f21302266
SHA512e17423800cb11cf0423d6effd4e547e5563d4a2d09ee6ecf6253d9608515ac17c83cb3b99f1d0fd8f44cf83993d2952f32e4ff27d142d7250ad2869cec92649c
-
Filesize
581KB
MD5b8ced3168921d30c5f340d82dac42d5e
SHA1254bad2eb6b5cc466d7de56e31245c209f33f4a4
SHA2561134c83cf57cedd70759e095c93cc932288dc391bc5a1e3a9da5fdb58d1f57ef
SHA512da6481808b7295b2180ffce9bd21f5a5233013a48b02b29713c55036d602bb2f6e9686e4609e0a97fc7aa36142ba32a56dbad20a8161cb9dc4e3eac06729e93c
-
Filesize
581KB
MD5f42a2252d126b84eabe427f5b1f208cb
SHA12024a2074cab065e340476b6593aab051c7db558
SHA25654f0917eae2bd79f5c0086d4645448276b3762758502ac30d9ab43b930ce7f80
SHA5122419e08b3ab1fc7359fe85b86d56e983e38d4f2a4951fcf43938fb97b0b8d77f4a55bbf8771eb00c1b349a2f381e2badc7388fbb894869e6af8d80b45af38543
-
Filesize
581KB
MD59848dad3a3d1b98485cdf082e2f2d4dd
SHA16945de3f69f0eaf6a828f557427b800d28048393
SHA25669614ceba8702ff97b31b80fb99da14c3ad9dab5d75c7f28c4cd0749c1b2f22e
SHA512264fbc925031e8236dc9c5c61d3ffc697db24b3c0c372e8ca09669d12d625c4310ac674c307be32d4b3d1fa55ffcd0881a31a75dfa0a20a3667dbb406c98e25c
-
Filesize
581KB
MD5c0ada730850ed1090aa3ba9ac3d6ad38
SHA1f6d983491f6b0dd79608b19720631fd6e57222f9
SHA25633e87e93414a1265e61e0f7f16b9c1fe595b6963bc768f99851f5eb7387cbc5a
SHA51215c95f23e136818144a07d0d1258f9e19c0f804abe60770b27e23b07111b8374cae797c088aee724b97850cf5bdba98e2025f6cf33bdc901679c85a83036f0b1
-
Filesize
581KB
MD5c28d6d37db30cba0c85904be7856c334
SHA1e6b7f08c38b603f30c967f6b924ad219f160862a
SHA256213c5958c45c4cc375e1473464654bbea92d39fdc544f4ec51f8d4193ceb5a56
SHA512ef98f32fc5b50b5cf80385f778ac5dcdbb045c5aae57756fad53bb64f50ed63a90f1a6a8a95cfc1062cd0c1bbef9ece84b78abbe1f6de3559edd1329778dc158
-
Filesize
581KB
MD5d7e43f1fadbb03f1d9140292ec5627af
SHA17c9e107692340f82f67c61b27ddb3d9ec209b1c2
SHA256fa857d17ff0bef63ea8173588634097d72f79450123e575ab9194b23471139b3
SHA51252524ebf3fd444fa4fa486fd39503ca6278872f7a2b112912b23fbfa0a67249ac4773fdf8a558f3c8e9f3ce8ed4ba46c9ecec26d4c20ab3751851bf1173f192a
-
Filesize
581KB
MD588f2ae93fd9804bc236f74efb5958b6d
SHA186ac7e752e256f08e60420a204ccc35bc3accf75
SHA25650dc0b34dbc2a6752f06ac648064cba8d9dee9af36914a168efc7fbce132b0c9
SHA51293d9cc1252749237638d6b22f7d6f7978e31835d97c4cb44bdf6fe057cb4df890865f7e006aeb41a48f2922f76093afd918e15634380abc7e0e9b8278d0d94e8
-
Filesize
581KB
MD5c22283bbcd5c314a0eaa8873b84a0cb1
SHA13c0a5480022f232d503a9eb4dcd2a9ea515546d4
SHA256013909ecbb2d4780acd21a3df6c04e935d6a0cc5a48912cc47d7ec157ebabbf3
SHA512335df7404dac51e296031224c48d2babcc9783419a30aaac4072f2a5ac685a81f22f672dff4d69329665cd07a7f9e9c9e895ef16e2ac638cb2eb041a99e0662f
-
Filesize
581KB
MD5e191cf39cb3ce44bbe63f5147ca52150
SHA1d43adb47fa580ef9a9e8c45001f2f04359d7d030
SHA256afa84426f5291e57ca2136175a06611691478dca2460c9d0d97bb1135c2cc895
SHA512b6f947bd8d6c796b75cdb07c74e221b936a14504612b6576f0bd32ccd7484f0f7a30c29deb44fc30f86f3b62fcefc6b96fb53d8268cdb4f6f8b3a2b88c0bc2e5
-
Filesize
581KB
MD568c86e99d80e3f65c76d178149edeb0c
SHA1dc7608298cf3ac6d9f0a082d426c080fa3a95da6
SHA256e40d9a59082080a638f5d1881b44bca3c3b5716a3304a2db42a10165bb747c01
SHA5126640fd7592d0cc05f0df45e349a3d825d3a264f09ca37fc19af39e25edb1e8aeb4a5658c93a539cd1b58cec53e9264f24c5c17e7b05b662a59f9ac1c650b1210
-
Filesize
581KB
MD52d96984e9a49475df333ff4286300074
SHA1eb073aa64e3295e79ecde522879f7a0e61db645e
SHA2565ec6723c68887f60a46069eaae9c734a440d2435d8dd126c5ea1f85b0d66e313
SHA51206b02f820acdd0c553dd3a3cedd0d63e6122abfc73bf6dee6e2bf5a622a1e6b77ac102932d2efb32d1b300fa1cc5d5468e15a9bf784bb0c0b13e8b1cfbc063a7
-
Filesize
581KB
MD5965358f5d6712c3b00bba54abc8a695b
SHA1893186aabd2cda68a86a98e59212b661c69f6737
SHA2563af17afee24994f5f747e06861bef70a1d818d25808340f19145200f48822ac1
SHA51243963144d6f96b9e39cfb30ae77587071216cc7a15c75aee9962f4b4d42768ee5ebe0250b07225780d419a5b96825ba9457852380f04dc1f1d43b8ec9c29b2e3
-
Filesize
581KB
MD50b4e8dab73b9c4ade5e523568b333c04
SHA1d528427c2a86c7daf363670b239305a026e7b933
SHA256ca1ec041d8e46efd9b5d898ea84346d1b56e0ad9533ccd9b4da2a37c657178a8
SHA512280209562ea218229e7af6c24cf0001965645a26a70f96507d9b7ef409b5655e3d19f9a151689a837b2b33d52f68174b1a991e92ea2b613b95ae88328d32a4fe
-
Filesize
581KB
MD562c00947cc308992cf4b5f7ac62753f3
SHA1bcf70953aa6e09ceef305b10b8d5b96362251c10
SHA256b58e9262979af9e8f62dbbd0476dd31121dde0230a32467b18aae9ecbde056f4
SHA51204724ea2d2c855c61f886faf1682b589c7f4a089e26588a2989c4731bcca7b719d52898c5e781f8162500e540073d42f13a2398feb4c41467b45dddc8baa1d4a
-
Filesize
581KB
MD5084a2df888d0907aec2c3d224b23b71e
SHA1e3d7811086537f274e0b5473104b144c444fdcca
SHA256c9eb210ae660ee3bbee8ce26146f6afdd238e58a7982c3f1dd7d098f1880c355
SHA512a1ed38f4362aaba4492797170aa84bd454ea04fe80854d617445e1adfb8202c79b9b625b40e07f904e698a42b47f94b2d43fcf0d4239460a7c189f734362e8b7
-
Filesize
581KB
MD5222edf514ad57e5757476b77597286da
SHA1e736e44c1bfed53bb6530f76c698d76dea9151a1
SHA256ea3acbe3ac64fea99d5f3457071373dbbebac57628a32c39e93303eb26a31524
SHA5126b499fb5e7af9e3efeaf0466005bd5009df4e7be65ecdba6df9676a88e6fd76b5e3c33d3df5c829e6431f12dfc9e1919530f669063e2b91c8e646f1ab94d9670
-
Filesize
581KB
MD51cea8a7da3c1a3ff6f39312849bddb77
SHA184ac4583cab285f44161819823c94403064e1379
SHA256c6bfaac451e842f94f5628dae060bef4a8fd0b28704e140901214fa2c0de5b2a
SHA5126e30f3186d416e65d68eaacf3947bff6274019c87b2cfd74c885dc07ea121dc8f0a788703ccb9c95345e54364431d0d53505fc6c60350c9109e57364e48ea986
-
Filesize
581KB
MD5d9ff3568112c211ddf20acd3c622a07f
SHA1d6ef674278a673258e21f50355ffe4aadc6e3e2b
SHA256828126fb87fe690eee139e1acdaf50d509ef7bb4fd762e17c799e88e6170aa5e
SHA512d4432a0828e3e2b3ba2d335173bb84c038b20cdce523a67814ff75ee30b4c61b92d9b48916ccd2a4082eb950af382d36e4abe8593716e2df243b9cdefd7c82cc
-
Filesize
581KB
MD5320ffd8a8d4eb4eaef999555a6f9cd34
SHA1a438311a55cad7eb78e10744de393c5392ed225d
SHA2560eab6ddf7705e1c1a57554a0b7dd7803b178938efa2b67aa1d2b468b94bfaf32
SHA51214d6b3cae4425ab602e4df58a0bddbaa2c29fc281e0e0e97ee36b3eb4450402be320438b83b8fe27e3b194beb12dac2446b66267fd8e6840726d1c25a7cf4bcd
-
Filesize
581KB
MD5b7b9ce00f5d6eb7281adcf2ee35dcbb2
SHA1b7a36e3eb41d44562467bb3519ccf8c1e55ea42a
SHA2566abd99bde6a095ffb584400ec1b3ef7d20c64f9a1049cbecbc1044fe58761b94
SHA512756dece6287028f7cbb20caf15231295d21a95ef0d8cc5fe0d5eeb91f105eb7195921bbdf76f696f95e2fc0feadfe3e58982565e08c7dc229224bb4674b4ede7
-
Filesize
581KB
MD50e08d1c9af79a3b363752b6c4c4ba1ea
SHA108e1d7305521a0d8859f98d67acfbd72a151d0d3
SHA25605898bcc31693db9218b984838d90665c76a886e4d3036dbd2c9ba7032de8d68
SHA512bb2debcaad07c7c30a36c04e46268fcaa68531106eee6425c0bebd5854bc61b4e16f52adbf44033ef9840ddc9c255c3c64dd5ae2845e1e426cfc28f341eeae13
-
Filesize
581KB
MD5c46d06115197200724139e2adf5cdc7b
SHA14bda1b2ba7ea2c13dda63756a6b065f6d3b4063f
SHA256b91ca16ab80bb4a57f903392cd37aef37656b13440db395daf9b2966eb0ff80a
SHA512b3e81642c7d69559dc181a7bf08d863dca4ecb6468b3aa0ee8fcea273dbea7f22988ce17673eaf158dbb8b4193722bde3d3a811532c945cdffd0eef233191c05
-
Filesize
701KB
MD5ac027d86d6fb778e86d31dd38844edf7
SHA16e3ea4083cb0c756476efd64342cb87e2ceaa43a
SHA2567b480d9cfda3d61aa115ae633075268faa183a1d8bb0426de60c695309e6fb7b
SHA512bae807be9d43882ac720b5966f2632c6a9901a36eee5ce3c9b6241e840f1a0b3c47e285e2d9cfd7f94d9533cbd9e70882c8cce4e6b52db3bb316830934784434
-
Filesize
659KB
MD501d12106887a8579c8bd6ca279e030fc
SHA159b32bb0284e84c27e47f88d3fa0eaaecd41edbf
SHA256a692bf7bc57ec13c3b4500da3bb270490eb0dc11823acf3a2c1ec98cda800ad3
SHA51254e069748a9ba669029dc875c2aa4335a83b8105e5013ff1a5339d1cc4ac01954ab6fde50b2255b487c1b02213055a60164df6b6f3875fcd8dc663492d685043
-
Filesize
661KB
MD5b252d1ff8e2a1bb7b198ed76a107e80a
SHA1d501791b737d03fe6d2d845908dbc1311680af70
SHA256c7e0028a181c19a24ec892caeeac425e5d0cf062c6506d23942f715927601068
SHA51203c666d309649bc6318d1c31ee286b3439908fe2d8ea30d9694cebd5ddf7586e4c56d5640268ba922fa274f1be1fb92e7fe5b0e43ac01c4c0d424a131b7984b7
-
Filesize
1.3MB
MD5677679f46652c49449c0fea4a9706e35
SHA14101a471f372bfb10b2760a5367c24612d92bed5
SHA2568b7bef2bbf68bbe35522d7c97df8c24205193ffc8f6faa3c876b3c1dcfb14e51
SHA512215129d3e3563964faf07bbf19758102ada87c4c878ce519a029e444d35f0a6fcaac6c130415b36fcc760e1b701d5445ebe12096657d0c83eaa20ebda5128f3d