Analysis
-
max time kernel
149s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
-
submitted
20-06-2024 10:57
General
-
Target
2024-06-20_a43a9fd03ba2d538fb82950692bc4323_bkransomware_karagany.exe
-
Size
1.3MB
-
MD5
a43a9fd03ba2d538fb82950692bc4323
-
SHA1
15f03611adebc267fa39fc3a06ec0479634daebd
-
SHA256
31bd739e93a9725799f4f776b5b4e7ff2acbdf96b0f88f9939ee5f84ede81db4
-
SHA512
f06808994a7f8eceb317faad2d79a11f7d6567d283ff02452f03dd8ce9b3b15e1ea9dc1e1ec454bf2d6f1afb4ac0059b35554c2596c575b261f42ae0644262d6
-
SSDEEP
12288:CvXk116EGpCR2rxWpsiZiGo5ffsVcIhP4aF9eUnkBXNBRU:uk11NIfQin5nsVcIhPF/vqs
Malware Config
Signatures
-
Executes dropped EXE 22 IoCs
-
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 30 IoCs
-
Drops file in Program Files directory 64 IoCs
-
Drops file in Windows directory 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Checks SCSI registry key(s) 3 TTPs 64 IoCs
SCSI information is often read in order to detect sandboxing environments.
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Modifies data under HKEY_USERS 64 IoCs
-
Suspicious behavior: EnumeratesProcesses 13 IoCs
-
Suspicious behavior: LoadsDriver 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 39 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
-
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-20_a43a9fd03ba2d538fb82950692bc4323_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-20_a43a9fd03ba2d538fb82950692bc4323_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Windows directory
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵
- Executes dropped EXE
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵
- Executes dropped EXE
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵
- Executes dropped EXE
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵
- Modifies data under HKEY_USERS
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 800 804 812 8192 808 7842⤵
- Modifies data under HKEY_USERS
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD586cd6d275a2beb8078f54394f764f475
SHA1031dfe98ec5af7e61a74d4bf0227533a4b600f63
SHA256c9b6bdedf2ebad3af9b10f125224b3e9271c9a754af57be4c64c2697b5d95362
SHA512c3d2242ac73aa5683408f0e13aab6c22503b9dbb8e5bcc07de8f272702dc3da3c73b49f17af4cfd8aee8fc994b13da4f257213bea6f1590ec2bf0c309acf92fd
-
Filesize
1.4MB
MD5f113312cae41267d9771d11903072866
SHA10a7ad6a546afefd5bb2c62cdbaf14f99dbc2d5d0
SHA25641cbc4a0e6bf2628dbfcf0af87837d36995fb2822c932decd18dedbe7d43e27e
SHA512bdb64f6587f19922510b4b6d5c7ffe6a7480f85dd7415c0ccda8832364bc6f9bbbeb958a1f4db6f0360ee48d07a725fd0161990d62188bc9161ae087a1b0ea7e
-
Filesize
1.7MB
MD5eba723d02a08f7ebdf9e5e5447f14bb4
SHA103d26fe2b16b47501d4766a5f413f390243155ff
SHA256922aa5b1c6810837a60576c5dc8f210a9112735d87af0fd0c083003cfa59e372
SHA512c6cfc680bb68fbb69be4f0b18a73abb51af699d523736efbcc1d9c619f113f66131841d14e9f0e2239035f6c03de980b65c20512297c8e4ab5945fa9031cfd32
-
Filesize
1.5MB
MD584289fc43e291c5c6b1d17a6f6d5e0af
SHA15bd47bac710d9726998cd49499549374a47292ac
SHA25616ddc6e7040507b0ba92c4883e6799a55fa55549930806d373fdd7ab8cc2b95e
SHA512d92e95f60514c8567fc7b18060d1dada01f5f1d544c3a46f28fd3ad3b129ee9de8f2b579cf6874f45b7a71ed41bba8f6ed42aa413410603ecf695dcbe72c5c19
-
Filesize
1.2MB
MD5be305eb31185ef92116f133ccb30c860
SHA1da1b2d794b7e9627b2431929f9c46df1a9ed171b
SHA25669c101d86f8ee2b2c117398f57734abbc62541c2ceb2595cb33dbddb1e7cd3de
SHA512f30b336e2e8e425e1e4593083d4d7c8aa233468593b9c3bb0dc74def1d235e03d2d3776a5d9b961beba28d206b5d27a63a0ce18e62b111d624f692b68fd204d9
-
Filesize
1.2MB
MD50290d37cbc67d10c88cbb00093d6e568
SHA19bfb52e72f83f5a28a4ffa224ccbad96105dd26a
SHA256499a8b8aa1097d981b679a0211705078b4e4e400b75230620fee2523ac61723c
SHA51264d264f7e8e8c02d9a9215e7d61d13ea1e6e032e850309977ac544fc2a5f5d445b254d73eeaaa44499d29167b13049ca7e119e4af5feeb315401e8abbace8e95
-
Filesize
1.4MB
MD5f58d932593594c59a1238a6c9dc66807
SHA1276e77454512c1b2f6819454463cd9b47a1a4ba3
SHA2569542a340114aafe3fd9ce125bef62a79f59bac6ab33b3549da7e5daa601570fb
SHA512718e8c8e217275d2192c7f6fff52c5b473103a3aa43958dff308a0f7a9c4a15fc99955a09639aa532f05e008130db9d02a47bcd6627025954e0a8b9d47dbb8f7
-
Filesize
4.6MB
MD51d6b888e4894a588516634b6d27e841e
SHA149896b10b2979ea197fab042fa844f54257d18ff
SHA2566cafff5a2b921bb2fa92a3cd6defbf75a8fcf9439548803507a8d15fb8feed8f
SHA512b404273728ed6cf50f3baeb4ed415a3d8881ecd00fb27dd98824859c580e93a21aec9c4984ad438df49dc0ec3e0996d2496fc41974ce7d4bfd48b5a2e661a31e
-
Filesize
1.5MB
MD50c0afdd9ba0a09dde5aa4c09b0182f6f
SHA14ac219b0bfed4b3f0230372044abeb717ef93497
SHA25678c9e477a582ca4e6215c0adf6544d624ee2a39043529fafeff494981ce5108a
SHA512266eaf7105bb1ed2999be3c4f372fe20a8253bb47b3b446444b2d5a9769ae5cbb50cf8c07a9fc5627b9a6bd0a592167e4ac9477d86c3c5b821bbc6ec6504bc9d
-
Filesize
24.0MB
MD56df0378ba6df088e72fbdd049c8ff82d
SHA16fee79143404bb2a89cc0808e1e1259eab717e1e
SHA256f12fc91069705320a0dc3e21a4c5c31cb7adaeeeed64b27ad2230f1de17c80ee
SHA5123f434f6790f170c586e85db8b4d6c8cefc4ff6919074cccbe57d5d06b2a0fc67242cd6e7bacccaf476cdfca3a2b883aa8c869cb3ad3c5ffd25ee8bbb19e0fdeb
-
Filesize
2.7MB
MD5dd82cb6377182b5004fac5e2a7546b0e
SHA18f4989e48c11a1c1971fbc5c0f26c86647911237
SHA256ce404e858534707d459fb64e539ae48e66fd03d922e2402dec9fc03dd6e17de2
SHA512579936c3589802de74236e6367248f5c77c9cb640f106827adb0e935246df4a37e05ec3902d7c8eceb818a3799f3e94d5c4addcc0c8abd830ac3ac5d53d5967a
-
Filesize
1.1MB
MD54abe90f8da9dee8efd82f5142f30b9a1
SHA148dca13186257a1657337f999ee2f9602576821e
SHA256795990795031c6fae828f6e0ad99af0b5379ec3e042e8df0821d9b4612574b44
SHA512fe8d73dcd0e6882f356a922294d0c51b207f8ccb476f8e8132a9ea6187502bb5e27ec744e56e0e6db6712e9585446eeae0466aacd9032832518d42ea04546ea7
-
Filesize
1.4MB
MD5845e22fec429038e74cdd8f1f4bf7be1
SHA1306499567ee71482fed3c56451c798ee2109193e
SHA2560fdf739cfaa6e25630faa082f54faa74abf5a715c4d6b7766fbd9ff86920d683
SHA5128ce3247a8ca923f24904f797b240fe2497e52248ca763833338af31d36b77b12d8ff1b633bacca97bdd5f80e1450b6eb61c6b191c7704805e13722d76a3cc510
-
Filesize
1.3MB
MD51a91426eacbe5b5ed7610e9d647c79ae
SHA119cf0797aef0ca11aae26f7170d85656974ac62b
SHA2566c87bb906ffb9fa04cd275eacbe526d22bf2f869a4d817a48bc968a7d8c50780
SHA512f9925a5eb37651d60e163aa6a4e92ea0016d30ec5462fe021372f8c9a98c0f4474a95e2a26425e2ffe36533c9d5adc5e9a9f2bc2a30f261a473d8f4412b9bedc
-
Filesize
5.4MB
MD5197c237049802e8e249e09dddb213a12
SHA10cc81373c664595b825266b6f161d512c83b5d29
SHA256efce0219b389cc4d7859a47598b2c9a576b95ddfbeedc80846ff6b7559957579
SHA5122d52f42642435733f3dcc34bc788111e4ebe3fbf3396b9d773b27e05bf00a1f7c0b2116b0771b65d3922c36aaf37b17ce5642dbe695aaeeb7e22d47d3b815c71
-
Filesize
5.4MB
MD51f4ad081b3dbc89dab3f9c61202b4420
SHA11c1bd0362d4152f58214c4127d5db8e5caba0f66
SHA256653db906665ee342b36be04042d04628eb9307ba5fbe2d9ed069e003059c2795
SHA512bccfacb4215ba98b5afbf8bf5761d7c9445808b01f469207d44a901e72fd0bc7dd6928690037ae7b1591b5f16ddf63cad7e1c34a982a57d65d104c8216758b70
-
Filesize
2.0MB
MD53be98d93c2af5055a64c4e12460b92b2
SHA1c1439e71fcc6c8b3412bcfa0d0060f349a65665a
SHA256fe3af695feed56084ed39bc19e3e2aa59443d6867df81f168dada951e414a2fb
SHA51296928bbd5a14b77daea9cfd1f6679d050b72d10408915a53a2ac71e4d9ac24fe2cb4b7622fb2011aa4e83960f7b073aadcaef2da5c7e4dbb64c69e22fc36f8eb
-
Filesize
2.2MB
MD53ad137a817a7bdd690f7b09753bfc8ee
SHA1c985a68369342214427fcb912270a51f781beb3c
SHA2560458c06957514652d8f9faebc199179668abdb8f3eae64df6714758e8086bafa
SHA51213ced47c887682e2bbb39925c4fa3bda3f99d1f0637da322d9e48eafad08c50e9eadddd145c682c427b8fbe88f23f8ca9b5b9205e25da1a517b9ba0a21a6a760
-
Filesize
1.8MB
MD5b05b158c2a5544f2aaf2f9d772c58181
SHA131f2c6c2cbeef351dfaa1052ab292e84bb8b80ca
SHA256a33a36c5e21de214fd213ce7bfdac76c21fb8cef1c13a615068af6ae22f2ee55
SHA512b3b5fb50765c189962e8b91969a8732fb663956c399b191e70297555c61f29ffc5d84a9f81fcd13dab0c1578ae6e254b72c703421f57768df189167ca24b68c6
-
Filesize
1.7MB
MD5d408afc8dd04aea84f318e1a393ae654
SHA17ad1c52f6c10a941537495a28c21f11ca76f6946
SHA2565514042e56313c6d461bfca3a70ce332b8f2b935d1076e0736f59811d3a0ee64
SHA5123dfc94bcb37cf47eed778a1f87d799b1d89d24377fd36066e98b67d624ca076c7ec7d8a4bbf2d42809cb8626ed16caf64b849220e022b082de8708b7e32c3011
-
Filesize
1.2MB
MD5be66ed361378c6426fd66c235274fa93
SHA14563a261749a0a5dfad8a9d895f40a41e09d9d92
SHA256dfbf8f50389aaca5737987c278fec9c70f70018554c9dbdb0ac68ad44b5a264c
SHA512e035c3cb344e97960b3de7f71ef8b6c03b1125843e071aedf9f6c4f059ca675aa47307fe6875c0ed2d29f3675a78f7b0fe8e833ef7b53054eb363e0aecbebec3
-
Filesize
1.2MB
MD54e4dfb087c39f61b765c41234f98be9b
SHA13636ae640569e64c4421463b47232314b4fef83f
SHA256894524259cd040d86257394964df5b498f5d13dcc8222abe28d123d275c2416d
SHA5126e667a33ed4f389eb4d8f9d53fe102a96b05f045ea4c612c7a3d1876c533f857cd7d39cf673741aed31eb17d0fe3b9a81f42f755f92bf6fd40a8fa40c4f2bef0
-
Filesize
1.2MB
MD5d986325ab3356c3d09ca138c1fa2d716
SHA19ca83ef7ecc9feeef6c8197e11e04b8cb8a73091
SHA256474fd4f733e75438e8b039bcf355e09d7d5cd8b882e1d3364c418fd6351b560d
SHA5120cfdde0f49d4d0be9ef51c0732f3f30153e2e67b6c147bf86d09dedd7340f0f981975edb378831182fbcf8f063b624c4761339cadaa3190b351606731cfef0f1
-
Filesize
1.2MB
MD5f8a53dc496c776bf4b45fa4fc4a45ee0
SHA187f5d072a1bbadb6aa9e5ca241c35b70e6444cd5
SHA256a72cd907a3d73d88ee1c01dff98030c941c91d3a02db033378d9bb6f130311be
SHA512b58c08e474eae002a244ae84afab7ee766abb1d700b2fd7229b87e08b16eeead5ecb0436cf22bf4f453fbdf9ee127965d0a114206b061a3ad03c293f2a9c6956
-
Filesize
1.2MB
MD54f2f68c9705e198409072866ad25d809
SHA1a21636ac4fadd34aa8414d657c6cc690bc0e1adf
SHA25614e4c55454a955c792acffe21f82a565b0fd3c27df62fc14440be763a1193c5e
SHA5120eb4ded17fcb438372aafbac528834eeaa0634f4071ade2f750e1e12146e8065e7c410a34cdc482860a792e9623255ef1a963cf8a345e16f60dae3d078d9acb5
-
Filesize
1.2MB
MD5c3e71c3945827170ca00aad64085afee
SHA129ad9dce61fae71c03c32e9291ea47f0d4f4b343
SHA25690bce58e813ff6a5b54223b6a1fb70cc52e7c4e81d033b997c2fae3364cf92f2
SHA5121e5bc44d604fb03688cd6b00d46bcf2c2da84ce2cb3c22f94b2b396d24ce3dadc50f5b834fd3676567219643ff94f85fb2516a3446762a1325774fe82143ed30
-
Filesize
1.2MB
MD5400abae5f5b5a24a31c5b288667b396e
SHA1341e2ed97f97de4927fb5a35285942bd63c9cf8b
SHA256f24477a79d9db456ef956002d2fcfcca46091044f7bb76d60f758cff027fd1c5
SHA512c2b98e217adc46328adba69d4ff977c89ff092414193e376d4c17c14ca5841bc1cf685ef0bb14e4f03fa8905f591a9dea8b407409851631567492d0fa96fdf8c
-
Filesize
1.4MB
MD5a952a4c8b0cb1749f0cb998bd55e45db
SHA10c23b6a50b082655dab74ff278b3c8ee901ecc41
SHA25690de0d371720e8e758fa52061aadf772e8ac02a5e11b4185a987789433caee64
SHA51270c2fbb811f728752868f98a6ae94f2b47b7d04d3acc46b2d179a0db5b5e91a1fbe6841796313eca5249b6e9c1cada1d40eef706a5aa4dd8304552fde693bb9a
-
Filesize
1.2MB
MD5e593256f126fa5493d93a1e135c162c0
SHA11ad0d2c4a81fb1f0c3fde240e8bee09c835f9ba3
SHA256acb5d3b12799d333efe8d2b8400cfbc26edc6fb9f625667e9192f06ad1c4dc90
SHA5129b8d6f88cd8625dfe0e8fae3e70aa0de15224a41f2f14b38333e68583a97cd6c5811e290c369fb192a068e2bd0b72b820cec0d1bf86a8883a39a72b30514f097
-
Filesize
1.2MB
MD5cf803edcc91bb65ea13846ed5165a056
SHA1c7c81beff7c38b9510a33a9895547ba965b588bd
SHA256aafe3fa9e37a531c83a15824f5326249d059229f767b303958d4b35823e7c62e
SHA512aecc9d1b1e2df081ebad675b617cc1d4b95ea40faa1c48414df70cbc1f1931b433c2f2094d86bc575032391275aebf04331c0076f150c45c4575be26f648803a
-
Filesize
1.3MB
MD57c90686bf6ce2004283815bd774c0845
SHA1b969589afa7377ccfe33eaf80338dcccc6241f46
SHA2569628885d8da5514a01d6a9bb5805c78e766355110023839e77003612d78b9daf
SHA5123d2aa60c8786581bd632e4110a46f295f5121e72b76db716f1a6048fe420408dcda17255b86ecf56011ae1bda15dc8d8fe6c089cb4b63ab276d64d3b3bf64842
-
Filesize
1.2MB
MD52e09a4816f941787e3429a3ccfdd502f
SHA1e35e35a50119c3ef8ce87d8bc877fbc440e68982
SHA2562c0887bae6dc66cdcfa4ba7673f1ed0268a2504d3f9b4295fa62b5536541d851
SHA51221d25e72f275f7a2cc332fbb4cee9da34568c62abd2e7e0750603c6112a7b5e743ee729f7d2de5cbc0a063ac874c82f259f1eeaed57bb254fa7d7cd3bf721d81
-
Filesize
1.2MB
MD56f28599ece3354fdd3608faffd93b042
SHA1a20a71a659eea5138a60da37a152fc34c2914c69
SHA256e8b3fe96764928694aa436fb32b3cbb1379e8d0315207473b2f00ecf30738574
SHA512bd5e83d787068d29a154b052785290db0e4885b24ed590b73fa0baeb42fc08f36ba990fc80d1047fbba4f82148a49214a58826ad712de96877ce1d2f2b1a57d3
-
Filesize
1.3MB
MD52912a8b348931b119feb83754905fb42
SHA18e18c806ce9e5ae4f41a642f66d89b855d235130
SHA2561de531a2ea9e775b4e419682aea1acb24972a5fca7821483c8e66dea3e454189
SHA512c65d5a1b9a1cbef6de6ef443726263ff6219ed57dba9a4e15f8db053a92bff16d55bf5d1f1eb716b96519073e64c98c7579ce3367e93e762edd52d9cea0f7210
-
Filesize
1.4MB
MD55b1fe68d4dbdb35a5e8f05dec7a341c3
SHA1babd87f4a6d36d41fcdce9abe3462060ff349f79
SHA2562ea43efa96073bd2b2fada5d1e8721926a5399e7cd372090bf6a0bd638fd3af0
SHA51258ed790816f91cc65535eef0d11abf658cf43076997260c46703dcbceddfcbf4969cbd8f09eb2c7f196b98eb988b63ff05b42cf559438111dc8917e2003cadb6
-
Filesize
1.6MB
MD537d1aeb55f5c4c8d68f83766f9ccf8a9
SHA1b2accc235c7340ce781c0c50236ed5fe8a566653
SHA256db41d7f4112c97141eb782e01f778212eea11caa435842ec3aabd86030d2d4ed
SHA512a47c27bbd6afa896b60420aa14c0fd84bc82ff7f27254fb56e5e9c7f4d08984ee220b1ca3708fb0ec9ef5dbb24b5e78f554ff5c34ed870b0eb4d559207094c2b
-
Filesize
1.2MB
MD5a1980304f3816b6fba640dfce51b694e
SHA1bf5a22b9407fbb7c7d999c20540b27d0f14c7a2a
SHA2569d453a23526f0cc88d6f3ca3908eeefb801fb28a1d381e980cddb3eb93532443
SHA512c95ca1e419598bafe3dcfee33b6d4fe3ae52f6a9a860ec6a5f2b5527eb939c0905615af1925a118a3790f1cafe4da387f09711c15e84aca6121a08c025fff0b1
-
Filesize
1.2MB
MD5b60cbd29e3de699104feebe4751a80ee
SHA125c268e6d0a536b5ba5c77ae624a0775a3fdb81f
SHA25688694cb26adb48fcc28d9979ffc6687ee5d8d33e2c75de95aaaef70b8c68b36c
SHA5123edb9da7d77fa97af6a8f830e906554a2c7ddd77dbef1fbb048066cd4f1b110f27863d576d5bc4caf7a4d94e842b4c05ac6b7908207503404f941a95c7f88d88
-
Filesize
1.2MB
MD598ed163fa62fc2cbb695172c3121086a
SHA177e7dbeb8c8b262c4ed3c26cee64eda19ea3bfb6
SHA25616d0dcb2da07ecd80b3f37d6f19e64259e0b2942a7f0970abf4f3c4c4ff8d860
SHA512440b82ef9451b98463eafdbb488c8acedb704ba084023cb7de02b13185bb2112f9d1e0a1d52948fd2e1195f17505fb60d8fc657911c4be9f02c8a04cc30fb533
-
Filesize
1.2MB
MD59e354157693a19dddcdacbe2f020deda
SHA1f0ca4369403ddc3a577c2c74a471f0cd049f44c6
SHA256dc2724e50741bdd93b9a3f570bee09dcf337e8fb2b844416a36cfe49c8951b4e
SHA512c6c922d9005c8e434e59c0360ed4f052d22d6ec3c1c127cb0f34f9981d270689c431554fc44ddb39d90adcad7fdfffa2eef34e1812ad2144458f43550fcc973b
-
Filesize
1.3MB
MD5560394b2bc0a528b9c02a24fa56bbf76
SHA19a259065ccdab7af443741ca602e66cdbd7c3440
SHA256b13213a9bbba1f9068453c9238a046ea6a03cb0bc366243e96308d42251c421a
SHA512d8c3c1f60b17272081afa9aa9e1b8f46053f4ba5b9c675ff92bc7600ced358deea27ac177278466c58455e0a054d7adf6ca6d6a571bc18e632b07658d7f3fc9a
-
Filesize
1.2MB
MD5223b0ec01e8190b5d6ad0fcf175fe4dc
SHA180624b973b4802e87706e6e1095ac0c34e25e294
SHA256413242ff57b2a088a2c08fabf69ab698b3e44f201229e5efbdc72e5fff8ef921
SHA512cc9592f8d175587c709ce2801509a1582fcb87975fb39c5de0e672f88e6a135041985b32c36d401b8c8e177b892fb175ceafc2306e76a1c1c42f45d9cbcd3b30
-
Filesize
1.7MB
MD5c834f2820b89e3d3c352e3881aadc7ba
SHA148ac9fd651ee58b1eab1070d524f600f6de3e287
SHA2561e80b4c09853bde4d07e462676c511da70c1f72c6d585ee123960815a1b9a416
SHA512c65b1e186d8b8ac7d20891c9a48b4d06fd8e1b1a6fa63b8e4ea231188325b83bffa25d9da4ef473632f35e715e94605d6fbf4961ed96afc1c11403dbc4b430ca
-
Filesize
1.3MB
MD58ea70fa7aacd8908d0decfdeb6cee183
SHA14393f67c16b48286b41097d38e08972974a41356
SHA256b04614706f462d2654635192574cdf6260dea0565ac27ee241e25fe0f220c3b4
SHA512607620ef1b10d9d3d8d4999d82add198b83bc5b4a54694edc3a23bdf66cda0d46aba474db72e8f5286ec9b7c6789de28076a48d6462a3f0d301fb7dd02b445aa
-
Filesize
1.2MB
MD5a7ab350ffd3166ba3e252e57fbd95a55
SHA14f8197cf21be02ce32a5ebda01bc24a289b6571c
SHA25649e1cd0b0db6d179dddb7af960c4a61c3cd1e9ae35f741f6f9fd2b87167df750
SHA5120116fff7a76a0385b6cb95e4dfeffbaba1d9f5f42e5af589579cd954f005df98e593dd626e5292e573e805ed5a0dac08fae3622d2433cb562dcd8102b7327f08
-
Filesize
1.5MB
MD500f7543c1cc5bda58a8610f69b2923c4
SHA113276452bfa37f15de416b4e197d6018438e4482
SHA256dd2ce36ba03e0a18636c1b4df8d2fef94b0b85567c9c99c3b25d8f99adb44197
SHA51226e2423d1e91c22fcc80b4a8c8c591b0c66a9f6fb7b5ba2847e1427d2f578a5f3717aa7c33ebdcdfa643895dc0100cfac1f7abbcec1236867489f57b5347072f
-
Filesize
1.3MB
MD5111ea1f36d20e2c4e6b96c2ecf49d38b
SHA1e6bd2ce80b038a1e9706b899f5ba9ee8d2c4b429
SHA2564fc0800aefff255354f9e82202e52d5b8430961b4e45843970240c7f05dfa98a
SHA5126e3153a3a49f912d2f5a6953accb8b17e5e0bcfa76dd4ae16de2049a76e266f354167f4569dcdfe24f3df33796f9ccf1031c81c3b5f0f550b24c9cfbbc667904
-
Filesize
1.4MB
MD59951684650f1d69fed807e4358bbcada
SHA193e3ea52aa9d452b75cfccecc5fe09a679adf02b
SHA2562acdfddb67a7c81e164874bf9957a245c617e5a8d97a85197dce624d7f6a6271
SHA51294cf41531978eec30c82a4a8b64261314fbf130584ff8679692d88cb7e68e6ee32e49d9487aaf85469716abf612724a797d6433bf3548d661f302ca07611814b
-
Filesize
1.8MB
MD524358c59369043346530746b4d6778e2
SHA13e8d018934046ff3bc0846ad3262f08e603a379a
SHA256c5e2b2ebc31d5a95765fab2116b25db93d24a931316887b3414ea3c4d352c1db
SHA51202050aae655223c9f7a5a604b67e579800a92b7d519032e17111f3ebf2c0325a0aaae8de4edbd6e1a4d32ea1cb502d838468643781e00094c51914f91ce6ddc7
-
Filesize
1.4MB
MD5956bfed30f3453f5ae00167d40a0f3a6
SHA10c60d9ed1f26eff20a3cc55731f1dc04176fbfc1
SHA256611652cee1cfc9a881d5c63dc9e5691fbdbcc53a66dc2493540629839bc05029
SHA5126289a14e7c5aff95653cf48ed028c6e7e2ef13222dd0186df006eec71121ec32dd5ba5040b99fc09cb46619dd7283e7125120192761a342ce118925fa54ed535
-
Filesize
1.5MB
MD53ca6d0ed3d6f33a726fe199a5245c488
SHA10cc3e267ed3180f51faaf3eefc8cfd960f4353ad
SHA2569d6801c6b94333e50f3cabcb2f06d022d67d785f16a5d2a9d67c3ae78513d7b7
SHA512aa1e9db18d2d2ad8ef4fbba331e95c018271a9e0c627c9793ec1632caf771c9718a08e7e27d38970f5b1a4ca128f1bb4ffadbb08a69e1879aaccca285a72105f
-
Filesize
2.0MB
MD5b8d6289d214a48da0c0f1ce2f6c54f27
SHA154167353f01334c310765cd002329606ab88c1ff
SHA256dc7ea7c4dcc5338dd5751250d5c3df63ccaeaf55bb72fccfbd65cab61bdc0f2a
SHA5126cc74bc002b2cb2f9f50220b9638d87d1c5dc3b27341d5960c1eef637c321ee65e6f68b81f28dc962ec8bf4d680cd7cb09f21fba508b1039b8ae7499389017a1
-
Filesize
1.3MB
MD5cb0ab5e531212e9c21d582579383808a
SHA1fffc94210fa2d699b983e2ee341206a56241ca0e
SHA256e7dbc7dd19c4a6eca538fc490956d66aaa1c06cc69a005d4d01f960d2d6d8ac0
SHA5120d21210ed970168d9c39e1688bb3c512ff0d82692cc553172b1d4bca337fdc86718b6858990dc7661730b55c39484e537faebb7c1f74ff243150c1cd0a53605f
-
Filesize
1.3MB
MD5ae8a3033f85f380ec00959482163108c
SHA19066eff03fa60774327b84ca31b7b52caad3e2cc
SHA2566fe890f30751350beef5352bc9d2557c78d64eeeabee5de5d17b0122d3888e6a
SHA5124d221fcae9902b1592988ba8758f303869868238de7ec5baadb000e30bb5c2f3e525d757d8060908e3568ac32fcc60e99b8af2ee0d3c19049065c8d4f0103d81
-
Filesize
1.2MB
MD5582f6a1fed3761cf8145b069e61646ab
SHA14be9fdef36d19b7b428099e4719913ce691d1c25
SHA256f7006133ace73fac1d851dc4c75e4f94386a4f2a7b3d2dff406fa03496d9940f
SHA512ec0a791a1cb0a1b89c23a44d9d2f09baa952ba1bcc3030c6016770e2c76e8062eb69d19662360b971ffdca65a3fb68189f7472481a8cce09eb1ae0f994bed01c
-
Filesize
1.3MB
MD51772c1a1223608386def8b491091ae6e
SHA1fcc5ab9598c9e5666c43bbfa36250feee188af5e
SHA256404cdd03926999e3c7fd54c09f9d7f6e28738286acbfa1da76aa6a211bf27ddb
SHA512a7ae4caee4fb391954ac5ce799233ba25cf0aec6dacbd90e2c7e654959f1da067085d7ef5ced7a7520d824dd92b9f4ffcc7620971ddb61c36f671b16787084ff
-
Filesize
1.4MB
MD5f891984419530f2f517c654d9735485f
SHA1f2be7d9b1c89d575a37f5418e8529e0b46712059
SHA256f82872f1ef29a0c6cdcd4c18d7306d77ddff376b3246f94342583827ced30ac9
SHA5123390b55f910455f154bd2c698d56fe3b2496b859c09db43a7899b56adbb24fe1e69da452c7b0aa1e264802beaf8fb01f8df98344a937ead1fd0883a32aaf87ca
-
Filesize
2.1MB
MD5d2610ee7d029bbdf6504cb815e0d8db5
SHA11cb81697018729e64b991992bf539ca82fe61445
SHA256247088e783ef6de5dc7c1ea2fca7ac6872cec122651c8d2735f691f96ef1df83
SHA5129474064b52823d1be9feaefebc200fc5ffa7a4a4d2d85906748316df823260be6fc2755aefaf493318f4acf8e0ed8550bb6b5291b511d536ae2c8127d35e2221
-
Filesize
1.3MB
MD54fe2a846048a4cb2cbae43199eb54ecb
SHA12e5020e0760df2d0a0b27061039cfa7bdf5e5013
SHA2566c53a8b064c241f784f8eb0e1b27a8ff2a242558b5f141aa25be247ab214c27b
SHA512ca3919ce5feb753d351f0bb4b4422a99f01cb0098cf1b0db105fb131424dd8ac0569b2b5de0bddc772f2346963420950b11549ce45160f236b759b522c016774
-
Filesize
1.2MB
MD5e454353785321f415d8e22ef42ee74bf
SHA15835093221703d36850367b913c128c61d3fc520
SHA2568d560323aa08c81f1696e7d9c7950c9131f704f0cb460eb08e97178bd6acb29b
SHA5126093746b87d7d6bcd63c8dd517ea01853aa287aa390a456bfe92553c77085d6b1ba0f5966c0165abdc5e67a017782b648942083f8f900f68430f4882d0d4c0eb
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
1.8MB
-
Filesize
1.4MB
-
Filesize
1.4MB
-
Filesize
412KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
412KB
-
Filesize
1.9MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
2.2MB
-
Filesize
384KB
-
Filesize
1.3MB
-
Filesize
1.3MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
384KB
-
Filesize
2.1MB
-
Filesize
2.3MB
-
Filesize
2.3MB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
1.9MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
1.8MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
2.1MB
-
Filesize
2.1MB
-
Filesize
1.2MB
-
Filesize
1.2MB
-
Filesize
1.8MB
-
Filesize
412KB
-
Filesize
1.8MB
-
Filesize
2.0MB
-
Filesize
2.0MB
-
Filesize
1.8MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.9MB
-
Filesize
384KB
-
Filesize
384KB