Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
16/06/2024, 13:27
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe
Resource
win7-20240611-en
General
-
Target
2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe
-
Size
677KB
-
MD5
18b4398987e0429db323d0f3f41e4c61
-
SHA1
6c2670a5785ef8ebf865328071ed4ea07f6471f0
-
SHA256
1f1f03010a879eda414348d0f439fcce094f76a51464c8db22ca8b222033d5f1
-
SHA512
dfa5e8ebaf40b6aa4c1f8daccb533d0c285a6eab4e0563481b46ac539407d5130abfab2c247915d6f4031cdeebf2efa78a0f294aa759d6cb8a7a6e28ecc3d514
-
SSDEEP
12288:ivXk1qYlc+pFByStv9JRa//inz86NRo1qiRlUWC4kXzVC3:Ok1Xc+pFB5z+//ufNRoZW
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 60 alg.exe 4508 DiagnosticsHub.StandardCollector.Service.exe 3508 elevation_service.exe 4268 elevation_service.exe 2068 maintenanceservice.exe 4584 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 12 IoCs
description ioc Process File opened for modification C:\Windows\system32\AppVClient.exe 2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\fxssvc.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\8656f786c3136770.bin alg.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe File opened for modification C:\Windows\system32\fxssvc.exe 2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\fxssvc.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jps.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\private_browsing.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\iexplore.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmic.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateCore.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\keytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\minidump-analyzer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jmap.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\keytool.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\7z.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javadoc.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\iexplore.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\unpack200.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroTextExtractor.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\Uninstall.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javadoc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaws.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateComRegisterShell64.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javacpl.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\AcroLayoutRecognizer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe alg.exe File opened for modification C:\Program Files\7-Zip\7zFM.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\xjc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jps.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4508 DiagnosticsHub.StandardCollector.Service.exe 4508 DiagnosticsHub.StandardCollector.Service.exe 4508 DiagnosticsHub.StandardCollector.Service.exe 4508 DiagnosticsHub.StandardCollector.Service.exe 4508 DiagnosticsHub.StandardCollector.Service.exe 4508 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 656 Process not Found 656 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 116 2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe Token: SeDebugPrivilege 60 alg.exe Token: SeDebugPrivilege 60 alg.exe Token: SeDebugPrivilege 60 alg.exe Token: SeDebugPrivilege 4508 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-16_18b4398987e0429db323d0f3f41e4c61_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:116
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:60
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4508
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:3508
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4268
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:2068
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:4584
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5c2af5941f6ca01d0964ffd34a37c5ede
SHA15ca8aa08ec69bfa381ae96e5fb7bdd0c5610c0b3
SHA256fb8df2d5bdd67b0ad68063ae841e33dbc7cc00c15c63f87aff2d84a1be7009ac
SHA512a20b1cec138384d65dbc86c249013135d8c7f6595573baae83bb15c9d800c9a8ca26c6c4c869d91b7616057036ff7effaf661618c8bb0a817a5f1fddd0fe37ec
-
Filesize
797KB
MD54fbb0ededdbb2111b3b70c5b1268e54e
SHA199d381115f46aa23b1cfc9fbd2a0dfac10d691ea
SHA2569de26e1b45b6711ae89ba93f41df166ef167fb85e86ebacf0c4491033f0d8bf3
SHA5128e16acfb39096570a8b2a1ad6128e79b838f3c978eccb29729cd025717fc24f353c5e2ff7dee2efffb5062d2d730294e271f82de51a5e3df4ff06ba85175a730
-
Filesize
1.1MB
MD5702d6b120652810cae58aee42202c590
SHA130aa5d90f6570a6227d1988ccae1c232fe422a14
SHA256bc46096d9fc35434f74427352fd1e47b04a7d52b200421259fb2e1b2b72a4865
SHA5126b547625fb782381cba50f736dc8ef249f0a6e01668764a846a7539d5c9fc1d2324ff3589daf02967e2bfbb2b92262f6f54515bab30046bb78ef206b0dba1316
-
Filesize
1.5MB
MD5de11664ed3e6089f007a085e4b27ca57
SHA1e833e6d3b0d940b4c1e72405b9f5a44fde6dbd06
SHA2565412fb4c4f369a3f971023790b659c1cf43a60bbc14a2de769cb0b8415648369
SHA5128d9373484ed7e0d6b50432b4cc2c200ec0178ef842e77a4168ca5fc8e1e91e25101b78af1ea02973159ee67c639002590bfc3cab4da35d7b2b7c6b8d674c0b3c
-
Filesize
1.2MB
MD51046d7b0031fc876f4ac2b0f52d9cc0b
SHA1350d19ffef5f149faeb57c4180395f3073d108f2
SHA2563d2673a375da1962ce7c4bf070dab501d80d835e08aac2a0b1ac8b17696d0758
SHA512be3ae1ec812b5d99c386d3f9cecc83ff09f64a504ec6cc7bb4f5cb88215dd6f621b16bb83639b2244dec9eb9d2702c55dca150bdaa95d5727dc6b1b0b40adbe0
-
Filesize
582KB
MD596d7b5dddb128ace630557de4f32bf6f
SHA1040d33b35772ebb8125885dc14260105fe732bf2
SHA2564fe665f3974397a1fedaa4c720bfeb341fe39da23b5dfc91121dfe285a185f0f
SHA512158a6c511127d53b21300298f2680f2fe31dd59ab10569ea6dfa60adeae6edee0c06333907193d914939147ca3a86a2b4903b40284b002a7088d667be3aba27f
-
Filesize
840KB
MD5c5e59442b4b7568819ee544ef16619c3
SHA1c8cbd49a9a63de64d00bc929da28426a3d50c3bc
SHA2562acc25cab3aba18c02589900aad80c59ac05e14145dab3fc0633ea6bc449880f
SHA5124cd30ec0536535254af8eca40717a0573eb0cfe39ac76ba22842d667bb98ec36e6cb11fbf153da3b7963363608918531edec1614e36b932e41558dd8c293ca6f
-
Filesize
4.6MB
MD5e9ac9b0ced4122b5fcf242250d7660f9
SHA1e82464831ad9a84ab3ca1ca40c066b302ff2b1ae
SHA2560b8e3e6c6e271f739650e04f689a44669deb4d5413e3f69aa272dda9ed316e6d
SHA51283518b6cf28a08da06f892ebc24414ce19f326b69d969f027a14c560d77b03d55708acf2b5109b9fa176485bbeca0ff097ce06c9308f4a9c8552ebf4a85a2ae4
-
Filesize
910KB
MD5d62865ea958ffab0e64fc672de1a9a3f
SHA1c28b04e602ee1e13ce099fd655fa159d43118c50
SHA256f67157fec9bf8d9ce21868cff15760dbf9b91573505e782ec15ff67682227dbb
SHA51244912287b91da3cc4362300a888d7417b3d866d1577729c4835a253f6da89be7bd459fbb8724d20e237270d4384812e347da4c6005f29646fc2352b0d09cf229
-
Filesize
24.0MB
MD55a4792ee5e648ae78d0a0879d5516387
SHA1a5288fdebba124608803e2ea1c2b085808d7a613
SHA256024023d79a337afcf65eefd72c2cab13080c106f5fdb9007837d3090192a5e72
SHA512ef3e3b06eab71ebb55a084ed4628f9f00446b0f7d97813d646f585843344fd2f9428b1efd0abfb68a5be00ae90f473942b5f8d41b07bf1d8d9e974ac24a161a1
-
Filesize
2.7MB
MD546ff6078cbc0521cdb84e6665bdc0183
SHA14a01e84c4daa966701c499bc7ff95627f652030f
SHA25666c94306f2062a409634a16d980a61f1525934a39298418a3592274a2b60ad62
SHA51238d15957a4c563d0ef9455ad8aafa3dfb729ad87e24ce3bdacd75d700a2e9e468b905d17fb7453486d1dd9a9aa91635325671afc02480cd1e7877afcfbab3d82
-
Filesize
1.1MB
MD5b8c5c536e0f10b09337d1b9aca227659
SHA1a9f43b08f5b9d68fcfa5ef060a5d5c0b7d3d49c2
SHA25653cd8b4607b797ec836c40adbd95ef36587cc95becf139e583b8025c1b51fe10
SHA512028f2780c3b221ac514bcba37117cb6ebfce29c91df8b2b6522ae01a74f5654a6d66e54ef24113d71e9831e61f59884b96b0acec405c71956715045d3ab6884a
-
Filesize
805KB
MD5c316082e37f06b524c6f60f112950b77
SHA1ef9c9044f07b3bae5f8ccb22ff5f20f7ab46b332
SHA25611a180f51e14b41c84e4a761f94a2ce78bf01a0ec92eaacdfe901a6838915f14
SHA5128346df43adba6baead0fe86db7aa43fedd771ca727ab30a5c9f21eba42c500e6f3a320b31f5fcb97de496428abea53f32e42f9b57c0c3579fe9f61173edc92f1
-
Filesize
656KB
MD5e70ca60240e48dacfa1467bf2a614873
SHA1d6c3eeb7ed74bd8e353f3ea2412c28787585ae92
SHA256ee8f401699bb50e077584bae42b2390e0620c8a4f1603f6f317379cd7606bc3d
SHA5128f0d8e32ddcb1909775dd2f91b2a4b11ad816341606cda7c5fe9154e5e0c9e85cc524ce2de608e033616b15a61df940b125a5bce8c58380bbf496b0f4b8cfa96
-
Filesize
5.4MB
MD543159179eaa18ae82fbfccb6bdbbd4d5
SHA12ecc9b5f808ccf44b9ec4b0acdb15b60073ffa8e
SHA2563d25f9916f2655f7e57e4b0e4f24da6a5743a472e904df1a45d36fdb169c91a5
SHA51297117cd8f0a1a7eb691678cca04a8b824399cfcce8924a0483fa346b0a70169ebd140fccf8c6c1380ebb818b89173cfabb64c35362414a441b98aa3899377f57
-
Filesize
5.4MB
MD59912ab2f9f80883c245e08f371b098d9
SHA156b1ef9740deab4a122a7055efde0d0843eaeb9d
SHA25683082814744f16c5b7deb4f184bf51ab3c42388ee970452081eeb1d5c8d5e0b4
SHA5125217e6182beff2e59f95563373028af2f66968267b09814868d2e1af81aa00e06b55f228e9a664c4525d24103658554182b2c08319c70cb6b677a45705a1cc86
-
Filesize
2.0MB
MD589a6824caa52169cccfbdd7246809a43
SHA1c8901e3ebd1414184bce85b24de6f29d140ebedf
SHA256b7cf918f22a3906b4ab3db359bd19d6b479df9311098d89cfd90dc0a2788bb4c
SHA512e17bf3a12f2b9d028ef634e9f6ce5720e8e078b3dd5dbe9e0f601b129a80754d0a4155532108711e092f6bd54f2f493de414f5391499ba9235e5d4ca122e7623
-
Filesize
2.2MB
MD5e78bf5f1d232f0eb78dd31e355f74020
SHA144b6c5814d2358aac3cbf01fa99aaaa8d7ad13d1
SHA256fa1dec8267ddf46499ab2cfcf8446816a81e106cd61261c1e8e8914745ef2c65
SHA512b3f8a5911a03c2aa160e6f42adfe9bb773404d3d4de727986176f312919a5f50cf85e1742b6726a0d61cb327a14e99f097e5d1c2422ef4f13afa299f160033ce
-
Filesize
1.8MB
MD58e51557a1c2b18a2805164637ae9859b
SHA15ff4310d52413da7a71a9e295e1f3ed16c6b437b
SHA256a83e64accc33b59b3fe37dde331fad6c3764570dacba385036133a39cc81bd5c
SHA512d548b1244d029f5d0e9bafa27e9ee8eea51e56ecb2a95e8eb871d3c99431b5410ca6efd2470b7987f84f096c6d89536185ed592fc9f06cb7a7d3ee06af16713b
-
Filesize
1.7MB
MD5278c681509df2bb6d7595adf03af279e
SHA1bbe2263d57b18820b7f80c1f63e4cbce03ebadf7
SHA256ecdaa89c650afdc1d28c558d70e96a39759e8807b7f7bc429c2f7aa4dcf33602
SHA5127548ca6b8f4099b553ab5b7b7e0e0a47541e357bb964b04cc2554e48b77d1c452858feeaf8645c95dfc869760c2702201683d08a9fba42d4bbdd23e0798ea6c2
-
Filesize
581KB
MD5d24630ec43aa0133863e4f2490c0c73e
SHA1332a11d727e97cdb4f59a2be0f92951fd5d79c32
SHA256232194586256d1b8fcc7bcde8497d14dbcb966eeada00dd965cacfa562f563dc
SHA51221114b44a6b9ef8b5a64135952bad803bd9c72f714a54d4881243f603376a5fa41b4b39e044385bb78c2deb112a8cd6137e056c5c69ead85a7ec8927b9e43407
-
Filesize
581KB
MD53fb0ffecb1cbcfa011d5762050f12cb4
SHA1c06aef55468bac66f76099573a8a9b8d864a5cb1
SHA256d3fc55d28d902465deb639be342470b154e3a1a702606b708072c8b84901a7da
SHA512ca7ffa1b25c9d40cc537e8ccab708c2925bac08208f16ed5bd24de87e24201ad83f09f5d3579cff226b9436b1588cf71c88da274be2125a73c1d071a6af3c583
-
Filesize
581KB
MD58f89804df846647444cf8a65c0ce1fc9
SHA1ff47fbf70f770f46c2e9dd867c75091ed96e4623
SHA256d987b2f9b624f78e1ce2c09a5c0bc5dbbd768819e7e121e8e0743a6a99fd5f88
SHA512400d8a26eeef08a4084fd2fb23321abfce89d6171826a6ddc97ead34004485bf3201656ff45eb4014148507854750db0476693d150d27b04721e45369cb643d4
-
Filesize
601KB
MD5548371acf917970348600025d453cfd2
SHA1fef83398e9cab3e474739462a6cf86775a2b819d
SHA256165ff300df4983f5d42c8ee613e8b03824a9913747fc1276739d5bddafc4dc81
SHA512e0bed10954cce84b8b5221c978f9480ae1b3712f905066346b52aeaeb7c5776b5abc17977d824e5c5587e4edb3e0a6461abdbbcfea850f59e41752373b636cf7
-
Filesize
581KB
MD56bd1e4873c6ed83b29f9351e7707e6dd
SHA16eef1ec37346c9036817178b16893207bacdbc72
SHA25630f9445b8b365312385dce68bb0df380404aa570fa6b549d13d79b3bd56bf485
SHA51231dee74aa2dd427fbbd624b8a748ac8c73f138ae927a07261dcc7ef402d9188224ca38930634bbb2e6a431251feb8b9809ca02161125f2b21e4cdec02607493f
-
Filesize
581KB
MD59a7700c5e9cd1fe285111b5c1c6490d7
SHA16f891be0e579697339a66a1d5f6f94f5ab5c1d3e
SHA256103a7335c04d80ae6ce7efeb9021a1c5901d18a6cab89b2d7714667aebe1c425
SHA5122797f4840d7cb351cc0177a28bb8419290b134806b5e46ef33faa5ce948c7134899711eb02585f4880c37416a595565677a6cd7575b62ecaae3f016e6b873c76
-
Filesize
581KB
MD5d6ea9d951da85b40fa10dea11af0dad6
SHA1c944a473f21e2a8894b0ca241c88c932aa4caa39
SHA2568665806c2f2fd74271acf978818a328c68cc670616e9459c84350fccb46de680
SHA5126e361c060c24e113c021c777e5715c6327afc1b0144512fc9c55fc625dbe937d16f70cdb28dc2df406e0fda0a57888ddf165652f6e657d0d7bc860ba332a4edd
-
Filesize
841KB
MD50f73431fb3ed8d0662076c8e7f1dff1f
SHA1b0e7fd190908914ff3aab5fa914394b52517a46c
SHA2568db54df093909d14681f66ac82748110c28a01847fcc6cad74da96ebd713aaab
SHA5120c5a79e7ff2d036bc60c2e9ba0304f11df00fb8b1eae2ef65f31fbc2caecf886631ec8c450efc2eaba4054567392394203e829742d33fadd422cf57b0deb5a39
-
Filesize
581KB
MD5b7c3cd16908618b548409579a95ccc97
SHA1b79233c6ad5b6f8729d3d84d83ea456112e3d119
SHA256ef34955123e4a83ee491f517d66d78e3910e0f3b95832ab5286e9a83fce947c3
SHA5121b0bb5cb0bf60a2e7c9e0bf883d185197caccb5d3848ea89e73bd8ab74fa0f9a7311253cf8884f0a9fb0b86a4ca7553c9168b5794fb6004451d8b4e566523702
-
Filesize
581KB
MD53b92e6ac407dd515fc0add976cb1658e
SHA1916eb2638cabce0f96ac39a9321314a8fb693301
SHA25641264c934287420e113d360ddf8366ac0bd2e2d10321292f454694170d628f4d
SHA5129429205d28c955bc88b04d2cc68e00bd8241ef348d64d2a5c8817e0fed29cd61535867f57dda04b5cbaa79be8c2d145903034958e8f1e6961f62b0151563db24
-
Filesize
717KB
MD55f880cc271acb4c3e38f66b85ae9b156
SHA1fbee138bb3bcf5e1cff08cad7ae6f20676d66bae
SHA2566ba1200bdac2d6a4df219a668e8cfed4004123e6f5b140e11055f03104c79970
SHA512218b3f6adb12bfa04aa0aaa790c5936360bebda6c9e848d68812b9e8288027a15f906bb579e1e204a938328c63a6ba2e3c95f94a240f104f13c4e711c5733f84
-
Filesize
581KB
MD5c356332a8e3b3a5f2dc27f7fb3abe083
SHA19b8634d934ae5cf2815ef8f20e158ff8d2f98f73
SHA256f95b7043c35c4746175ca2759fb90c288edb8dfdebb5c132299019d2d4f8cc00
SHA5120c0ff31c2ea868d6aac43a442b6eff33c9b4e608620ba4e08fc24403af9130c83f36d5188f732fd0bcb608a46090d0d40f96d79071d7becdc82a34492b6f1ec5
-
Filesize
581KB
MD5efd9ba03779d60dd737105c4aada9d79
SHA159c855154d37ac73eb64abe6ec452635a289e606
SHA256388bc03bde4f1fbee3f66870a376a70633d2a7079563034669a423aee13bf635
SHA51262d315c9e9b460c5663d6792b561d1dd66bbd19d61174e8616cd70ab6ca6559610ae67aa859d0267eb5453e5dd34e34c30bcaffaff20d239d4a53b53af5b6af7
-
Filesize
717KB
MD57aec98689c876d7ae2318c9c46d6f260
SHA10424d1433537a5ee2d351e21ba92f1810c1dd80c
SHA256916fb5a4c87a457e09bef345bccf4203a08aed42b90a3b04a7961eef335feb4d
SHA5127ea19fd466716007d9fdffb7a5b88b55d2ca6966049652c52a237071a218f62d56c3a79fdd936f021767d59aa3fa5c03cdee1b87493054a74c6dd8426466b38e
-
Filesize
841KB
MD50a0303283b08721bd296c6c4978b883b
SHA10bbfdfb87e825efb02236cbd95788f3a37ac3d10
SHA2568fef7f456c99b397553f9592d291d47f60e0a0c3ee118216bb2b8427965c02fc
SHA5126f5e3105b82b1bf33da72e2e79a845ee33b08560f9822fa7ac6af2f0b16a10777cf2da4e6d8337064b8c535de84f74c2540621b153b51823380aa61f779f295e
-
Filesize
1020KB
MD5d77e8161326f2c06c607272c3a0a958b
SHA12882ba98da6f749ba1dd501e47c76f8ee179358c
SHA2564583868a15dc4eb13e7078389562e7b1c3ebb010cfe4a0cecb909b97c49c4e3f
SHA5121bc108c181b5ecccfd1be87ff5c27dd0e161c758beb4082aeb50879d9e54c55988d8082cdfb8c8ccc491ad7ba98287b26bedcfae098843d3f9042d14e4e87db3
-
Filesize
581KB
MD54782a4aec9bd9d1119d60277e5df59b0
SHA1b108cd390150a13b56bab19f54e0bac044194beb
SHA25678b49061d5234650c2f246bff17a0dfe767a0b96c75037faa52192fbeebc152b
SHA512c812f01c6e946e06449606c416f6e6dd2322323dec00629a8b8fb9156398a30da9f4a50f8d370b338b7f0345e3aa827215fd4003353279a2b45daae28ee7e435
-
Filesize
581KB
MD5372ddbd50cc5d22dfb13da6eb2182771
SHA147e1c107098c9c180c68eb1cd5eb2743de88c191
SHA256f6a463052094d3d026dea8f79619cacf7840eec6b2b54214938ba2dd186f61f9
SHA512fe3c769ee209900a9661ca7ce936db139a3c8c2895466e473815c353bfba9c9d952abc1280bdb6ea5b79b12a6618937de96041e1f787f37f910cd899e39438a0
-
Filesize
581KB
MD5d6a41e1c9726599e60d403681685b348
SHA1a419913e0c069be53c1e5d253fe282980ae82160
SHA2568ed39b63b6cc85e84c498a0b80f7fd748b137a89abe7863ca54a049932af2d2d
SHA512bc2047bb4a1d544e5ee41f70d62b866e00f57b16b8711c0650a0bc0d8ff67b82db0c5543be7013030707ab40f3f6b0ec6c435e6609d66d3261c441622560f0ad
-
Filesize
581KB
MD52ff6be92da4b428084587d9bab0aae3e
SHA135102e93d04b427aed54093970e1604c4d5a2f7f
SHA256f89a2fd67d2b50a0fdb2138b32e974f17a2210f342adabf3ee09268618511a6e
SHA5129ca21cbed26d4f1f3607369eec680c936fc2eed3140c55f521d484fa1cee944f9ccb745572689081b6e016be606f8975ce53e5e353b89d9b437938f30c728d5a
-
Filesize
581KB
MD5d8c7fa07c73d850ed5684158a491fc91
SHA14f3ec1a362d3d696118b34951cbc24641a4fc23e
SHA256ad279f7f663204d7bd11203e9846a86b636ae77fd99c38583d9be49401871cc7
SHA5127c14ecbcea3670bae5baf1e957907ac4da31b15beedf3c014b98878093977f62d8084b3254e644a3d8f961755c2862049d306677f0011f907a7764451f2939e1
-
Filesize
581KB
MD578d1f5296bda454d38e4cc0634f5a362
SHA125585d1063c24a017cd1d33f0dc39e7746cd77c6
SHA256e0ce93a1f3eac100e21ca130aa86c46be62e4d2455410ccdc21c037412e3e044
SHA512aa8328dfd639f55642d5491781db50f9b4fa93dbbb0f5a91aef335e1b4eb2be1b8bb018d265172ddfedd0f7611dc5eb3963bbeb2e634f6dd9232b6e38cb818b4
-
Filesize
581KB
MD5ab4c41d365890ef587b5190651f343b5
SHA1c6238d33f5c2cd08dbdb9ff91abff174a47754b0
SHA25610b93d3237dfebcca119aaf7ac30332c092b8765b18e0ae018db66cacc643d0c
SHA512f0b7bf0b181011f77706e210379e25c9f6a13c68d638a1bac237d1aad96c02b5ad4d5815b227dd92afba4ada061eae4575781c9c32184428b31923a3a5162c6f
-
Filesize
581KB
MD55381150c7a635531bd8777ded64cfe82
SHA1cd34887f0063c4caf9ebacbac052951dc22cfc54
SHA25615e4b48662ad9b1c8b066443090a3c32c52c068b33c732e8e880a040e85e340e
SHA512230ade89d5684c57483f7ff2a8f3694709a5b52926b35f2e4bc835472d88c6c7c5a2ee67bc757bc2f7d88a84afd7688a81f15136b4f555dc8f3b2ae90f3be0db
-
Filesize
581KB
MD5fba0d4116d0d23fd6925ebded5f9e605
SHA1368397fdcfbb4551ef1c4d08d99b4497b58e8dd9
SHA2568828a7a0a561f28844a03b3f0268fa863d56c50458437d08be378b53117ac016
SHA512a29e1d5ef0019e2cf0a9d22efd39c35b2e5dab98664f3cf17a06b7db325c8877f18b99f5e226f75cd703d5a104c9154783b4762f55beae5d8e973939d5195b21
-
Filesize
581KB
MD5795b29d65b0941ae19ca6538ee39dc60
SHA1753d30de9e7179d6d05db20a3b7e6d7dd889936f
SHA25696d672e53b4163c461b608c0f8cf9be9e965f6d1718856b7e67de813c60b88ac
SHA512b33fe94ac8151fd27b06f0282c3aae0ede18cd292b0965c79816b36cd0582f8401577b4be9405de71b5c92437a7f018c5b6f133564de4b6a17876bbc67f855e1
-
Filesize
581KB
MD5c1033170d0ee94b7d16657639ae25389
SHA1903adbcdf775a858660850ba916f4954c8e648af
SHA256fd1521872fddb7f957ab7626ad616ede82684b68859cd6cafdbc3d9271d111c5
SHA51291be317ef318c9c7a0400a375b8bc4e003d7003bfd95c4517d463711846a813d3a131692ce5205d149f6ad70df0e2bc9df6597e6c47cbe8fca085e3ee3400a65
-
Filesize
581KB
MD5fc6abbbba43044035dfb76a6d98dca4c
SHA18dcd4915c9f263a63ec9ed6607bc89d28a7820c4
SHA25612c69925512661db41da00c8b2c5e58dcbe0cac7a4752b06cc7fbd4d28ef1250
SHA51201987f6b9fd6fa463df59f2422eb8cf785dc5d8f6b31fa2a462676aeeb6177227e62cdb027f6ca29e88bf5db1ae36eb600b5dd1bfef72cf9272553b6ad429cd8
-
Filesize
581KB
MD5f71528f57eadc90f1c8cda54ed38aea5
SHA16efde615ba0223abcb6ec35904707411602244cb
SHA25641c81ab902a001098f75d9fc641ef5b0c0f293ada32f78674f5769ba68d4d8e4
SHA51204582c23065bb8c5090bad9c7a8fbe6548f48f6bffd9d7ad5ca157f6ab2216d1c4a26f8b1a07d50955d6a325ab81ccfe8ec8ac82bc8e0f4d5111fc28d163a380
-
Filesize
581KB
MD514d192cdce484f8215beb6bbf558d2b0
SHA17223a6e3b0e8e4a7487b3fb5a29f8d1ba3f2a8fd
SHA2562e8d4fdcc6cd87cf8695b37e063f666b016410dcef066f4924c3834134ae01bc
SHA512868fb9cdd76f5ba888145731924d9c6b3b2488ad3a6515eb379d5260e342cc36048ca892ca5eb13ed7c16677523c6a385c58ce1ade220f18567e6f554920ea40
-
Filesize
581KB
MD51cc9a668077aafbc64153188324d5d29
SHA1f3890ddae45805ef40e980f0fdc6a294c3e1f0ef
SHA25696e8e032f263c1ada2bb9e2ef75dd6b0c86c90c4b62d802681215c11e8193604
SHA512dd70a175468921a5ed0e6e5191c7af796e41ed577de784a317faca00db37c70b20b843259c5fbe309ae6458391147a98d53cc829331ed2b74df55806c3c02a17
-
Filesize
581KB
MD522138f7b3635c1f8fd4705d170ae992f
SHA13ad663604cbf8bef2569646008349f0f119dd925
SHA256b00b3892fe52f9a463988a3d4017e458012cfa45e455658df7c0fec506d9d84d
SHA5127ec4c5ed8990d8ed710de86d6c28f88a9eb9feba2092ad6f170f2959bc4ed876c128a6943c6f8d22d30c6c8f7a69750ee6868a7ca990aef1d116e7cdb01d31cc
-
Filesize
581KB
MD5a39346964faf28eaedbf75c11a03fa9b
SHA1b68aa326342f959ab8de59ce9499536521b0a4df
SHA2561590b3f641aaf608261e65cd26c61bf621b90e0459eb72bc679ba246d91ff2f4
SHA51251e11ac4074e229d2669a05c8fd3c2a6ac4e3a363a8a126429eeab1142b0d5a6963c65e1632c319c0f88bb6b877ee64a77c5be50ddaeacb2baa921f12efc04dd
-
Filesize
581KB
MD5d4587c2dc1087b045702739ec0bd54e8
SHA18606a9f6ce8677eb92c80569db3c2b1ca4560dfd
SHA256d523b8e431a5d764ee1ebfee7b718422e223034f9064f102c407eb176a1e72b3
SHA512c46f7d91fefdfd83dd79f5af445aef94f6a2a8e615e66d666c9e7298e580a6231e4bbae08c04e35e594d809247f4a367676f1e44f4d4de40f0340d961927abf0
-
Filesize
581KB
MD53b11182eb0389c0811964cf030e2f375
SHA197f0675fcac6166757b08d7ff95090ef14c4c3c6
SHA2560baba5fdccd5b2f892a9630bf2e3ebcd08b872c6a2d3343faaddeb59461df5f0
SHA512b89dc3647702f6e8d11719355cf543998c19b23094f708d61be7be96a1b897899325a87d840461068261f5c3fa2ffdc5dda5d689781ccad3ce43a315d2c17631
-
Filesize
581KB
MD5fd1ea098c0b46a7975a680225e686fb7
SHA185aa2c88d5b84aacf4b9a139c38b7999abcc16a9
SHA256463ddd7e7b6447b33da791ecdc7683c2b678dcf8bfe85fb1d7166ec61cbca836
SHA5120665ef0f723b97f1e08e07b2233dbb868e9638763f7daa8e5cec7c4f530960ff3d59f3f52723c29643b86d12219ed95aa0d1066c6536d8a721baab8648392ab5
-
Filesize
581KB
MD52c8887180773208dfac2422f0bcbfc7d
SHA14bd5d29bc0545e2a17846b434bc8a4f9fcc96f56
SHA2564b5a2a6aa81111456871ddf5bf72f29f000d4217f2b8189e4655b0fff28ffff1
SHA51222a881cdea03e1cf7679268f2dee1588e71e30f5b9e57c1f4b83a6743571e1e83663d4b8f213f7ebdc9ee515e87e9a494a833a029719f849c4de40d5fcd6e605
-
Filesize
581KB
MD53d88b5df944b15521c8b95f19c4ebd4b
SHA1078d00534e7c0a573e4f71613159e0a88dc705f9
SHA2561153ae42e246a717b8460c774d6bf68145f7f4e099b13d56a05e3cff6d2ccec0
SHA5129edbd0b020ba251c54f90937df46798f72efeb107aaa2979cfe8396b1efa3e7badcfb3443f75a676f5d723fab2017bdc9c3fd95ec8616c59fb5712a0116b1ae5
-
Filesize
701KB
MD5c437179fd4cc444d39317ad358c258cf
SHA1e557255f61ebb7eda1bad0bcd7e50918e388b65c
SHA25655cea1feefd4738bdaab03c44bd65581c52f3aa61394c793e4e7d3967f02fd8a
SHA512767269ae7485776b6557c51f1d2df90aed58842a9467a1b50102e222494eb711f3ea78ab1218b56d31138c9afc3d1f31a32b85471a1db3735ba3a653fe1b73bc
-
Filesize
659KB
MD57596ddae72458fc0ca58e18fea42bd50
SHA1df54d28970ba42d57764150cab1e509095c2f12f
SHA256e5f0755c892f8e5381d6cbed6bcefdd0be3fc2ce7335b0ef48a35e385bf0eb60
SHA51247989e62d492ee00e287d8bd57539fcc8d452df2bc91dd2f3b3e4fa8f3ea3c3819450d67fe3537fe0329401d242a4d136dd7ac21f250d03307ce634bc93e0515
-
Filesize
661KB
MD5257bb7254e13f8a3279930ec5ca8de79
SHA1ce8ac131b76d27c528cb5501395194c1c1f29428
SHA25664f04d4735f441eb5384a6e74f6e708559f81085c2c0865c6a841bc8615aa0bc
SHA51278e26f9db1043ecc8d6cd0b8524c704f67075c5d3d9232beb47385f0d564978b8e0bac5e155add6a86d804e3d77cb73452f4facd81957344f35dbc0301554761
-
Filesize
1.3MB
MD57247d6ca1ad4e9f97a4042f8a591c662
SHA151eb481b5accda1bb60ade00166406e0457acdf0
SHA2562da96baf18dc02c531179de268364f6a2115bc88a9368af8f5881b182f74f682
SHA512189625cbcd979333e64921c8a3a5ffcc591c971c2a29eefa6fa212dd6d36d438aefbbe850a1cab52c7ebbcb09ecc17d40521133dfc0c50cc856f5a2c3a816f80
-
Filesize
1.2MB
MD569569905cc9404f77b2134adc7bb2856
SHA1f611ad7c17a70a05bccbaed6ca6d57752d078de8
SHA256f7e44ec217916195a4d298b9daf27082c2d0088c6f26a7c471d5b970ab6b3025
SHA5127a5ef788cef9fc4031d5b4164b4972725feef516ce511f39b7977c2a8fe61dd01960482057ba206283b92eb27efa52e48a913141ab017cbe4ede9255f8f8dd83