Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
29-06-2024 09:29
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe
Resource
win7-20240508-en
General
-
Target
2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe
-
Size
1.3MB
-
MD5
2ef5a1705bcc627e7f758cc78e82d55f
-
SHA1
07a5b3e6aa9d0d8b80196720617afce263cf18d0
-
SHA256
c7e12c0f002d3ab925359100321cadc33b5bbc16468379b2068fef4707d5d1ff
-
SHA512
74ca5d392c57e16ed89624686e6345e4efebc448a08b94ddf347184d0e10b8fce86998f4d6bfbd4d7da366524d3bc8917a4fe5343330066b2d38e2e5b0321d92
-
SSDEEP
12288:QvXk1cMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:Ek1tSkQ/7Gb8NLEbeZ
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 2664 alg.exe 3472 DiagnosticsHub.StandardCollector.Service.exe 3240 elevation_service.exe 5684 elevation_service.exe 5212 maintenanceservice.exe 3968 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\b74400e9b3b9834c.bin alg.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ktab.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Browser\WCChromeExtn\WCChromeNativeMessagingHost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstack.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_93546\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaw.exe alg.exe File opened for modification C:\Program Files\7-Zip\7zFM.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\xjc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\uninstall\helper.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\pingsender.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\tnameserv.exe alg.exe File opened for modification C:\Program Files\dotnet\dotnet.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\keytool.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\keytool.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\orbd.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\pingsender.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\wow_helper.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\orbd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateCore.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\32BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\extcheck.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jcmd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\unpack200.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe alg.exe File opened for modification C:\Program Files\7-Zip\7zG.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\iexplore.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\schemagen.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe DiagnosticsHub.StandardCollector.Service.exe File created C:\Program Files (x86)\Mozilla Maintenance Service\logs\maintenanceservice.log maintenanceservice.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jinfo.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\serialver.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe alg.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3472 DiagnosticsHub.StandardCollector.Service.exe 3472 DiagnosticsHub.StandardCollector.Service.exe 3472 DiagnosticsHub.StandardCollector.Service.exe 3472 DiagnosticsHub.StandardCollector.Service.exe 3472 DiagnosticsHub.StandardCollector.Service.exe 3472 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 660 Process not Found 660 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2176 2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe Token: SeDebugPrivilege 2664 alg.exe Token: SeDebugPrivilege 2664 alg.exe Token: SeDebugPrivilege 2664 alg.exe Token: SeDebugPrivilege 3472 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-29_2ef5a1705bcc627e7f758cc78e82d55f_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:2176
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:2664
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3472
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:3240
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:5684
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:5212
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:3968
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD58077422d5bcd83d0a7acb5ec4c42fb2e
SHA14b36340e8a081e154f7f169e77855bb44a29ee8a
SHA256aa104727f86443ebd2bc0b4238c43d783151f2e04d8340ab49315a5d3b5cc1cb
SHA5120b82ba2591dca119f5d757c95391ab677e2bac4ed7b5a6e81064a1205260b3e2e675d63ec900579be49afe1332aa4d24bf1c0473cf3611c73f12044acdd26c4a
-
Filesize
1.4MB
MD54c0f723f01859f35fd55291f016217c3
SHA1fbd5f517019342e2b94f2f40d37e5935eb450a0b
SHA25668ed9a60ba5b64bc48c78b783f8c53668cc6e6a8621d2831329eef423f9d429a
SHA5120ccd78adeb078bf5fd4e9795e70fed0e157fa8c2bf77a525fd737e7bc20ec0cd761fb2608203b49e1c25ba78360ebf8856a591f6a695cb58439447b0c948c85f
-
Filesize
1.7MB
MD58d70531a2018a377bb64d344ec5cf7a4
SHA1530eab9c063a030cb5b5c1243b795046a78a1b1a
SHA256b0d6c6d6ad5369b56814ece6ff9fd2457ed24c6b181bd37267a12754b40d1c4e
SHA51280139d96219c7d1c82e15e8887d1cb0f8cb830138465ab8eee2f437cc4770c9768de72db398e298e75773c9f1e3744816455ed9e7d6b894076b4e34508ac3c2f
-
Filesize
1.5MB
MD505b9cf3d6d8964cb697c550ba1e99eeb
SHA131263188272de7a750bd41057f3f1f4b29ab2d7f
SHA256e0d05bceeabdd0263e7021f4133782addde19c5cbf6a57beae09469d4c384fb0
SHA51279c42c2dda2e7e182cf4e5518456a412dbfe73b3f45cf8a7d0cad0e4bfe9ba7b11b314317b2d8ce3f8ea0793c18ec45165134d2b57c5781d0ef87a0b79173aa3
-
Filesize
1.2MB
MD56824b549380b599bf21d084fb6c34ddf
SHA104750ea8acb76556dc1f9fd77c8eb410d9e21ccd
SHA256c803eac3495c5371147c09460fb67ff3139a21e3346f05d77aebbb18b22108d6
SHA512d43a4dfb577b651fc681c187a469a885a4e0e70a358211ba7ca1e6be41e3b0de672f8430301454205f3ac1985233e66625d13f5002833ea21bbe327cf37d8772
-
Filesize
1.2MB
MD5c46ef2253d1578c788c4c4eb6350a204
SHA118f0e30139a5ddb0e9374b52e03283e2c2eca852
SHA256ce89c8faf369ba7b329360e5f688e68a0d3363d7d05f0e01317e21702575f644
SHA51201856f9daa234fc309b1c579e3d326de02753d88bab39a60908282082396c2def1c38644245b844c9d0dd08175fa129ca368d879222483e2274feeb45fd11560
-
Filesize
1.4MB
MD5db2b270b50cc79ee1f079fb9cc554e03
SHA1b592697c454b3f83693c8ac087a188d7d9596c87
SHA256de0f75e398090dcee23dec2ab658609218fc23031913c2fe6c3dcda6b52e3f65
SHA5120ee9b3233ce2a5380c0f1d21d0bd70d5e34588f22c362aeb89b9308c6df9d65fbddb1360f0b2972d0e9e0470a8327c926306a31e44c971bcc6a7d20566853404
-
Filesize
4.6MB
MD5f5f15454e8a9bb021e0aac0ce4f8643c
SHA1c90c9c0d2e64e51f47ad547c5452a79ebbb71e0e
SHA256fcba0caf9d204372deae6c010108bd3af9da9910ffec6c244fffe788d8be67f0
SHA5120c6c9a981fbc4b92ef499401bba50fbef82efbe6a2a59ef79fba10b9fde486ccb1aa83587d4f43e9bc3103361aa9738c3d08dd3e64e14fe05fd9a0bb93c1f9bd
-
Filesize
1.5MB
MD51f445710a93ad2e8590d55e5c79a836d
SHA15a09a2bc2738cdb47ce397a09d979c62391d84a4
SHA25671ef72d8d519d90753b51fcd29eade0e1ded5454eecebdc55591885e908ce8cf
SHA512509a149adfe982bdfb156ecd38658dcc54da626d6b46415d4636ce83021360d94b74659efac7f79042af389a336e8d4d4a1ba9d23519767a9e2942b7f9e12a97
-
Filesize
24.0MB
MD5c80b2ab4a2e73c4004ef91116cbada4a
SHA1d685ba4f67aa4847c21e4e97984f98ffeacef7e7
SHA2560981e55a8fa466ca9f3fba9e90baf7ce328aeb6584e6dbd22a0221f4c3fa5416
SHA51249c4fef543cb4ef0570bb9407ae8251a50501a132cea24a70ca8a2033703c6196cbf11c0e1a9400d4c749ae1c4267b727a7465eccee4b9e4f25185d49ccf411b
-
Filesize
2.7MB
MD5c342f21a800fee64d59bb7efc38fc3c9
SHA11bfa52dd2b0ba1c06236e856cefbb8d2c438b390
SHA256d8f49f5912d449a96eedba05eef0f20f0eaf314c13837ee9e362c4f9e51bd81a
SHA5125816a3bef443867067dc6b3862129b9af1ce747a2d35029542879a2ecbb05d686bbdb7d7adac8a8ff2e066c4f0793494856e54269ca2a946b72396f307394314
-
Filesize
1.1MB
MD5248f58c37d70bf59b37640164c5e3c92
SHA11c2941930afdbb98f994021824bdac4541df9626
SHA256ca18405e6bb47a82afa7af0ee0c5e950ba40d80af545a1110b46ff9b1d1f2ede
SHA5122e75240a18ee3359eb155bf95ee4fed5263b0621fc5ef58c451c6873e31f8355858e93aa17b4fb42fcab0ac83686d28c67e1ee9760b3cf058f48b3f00e03d2a1
-
Filesize
1.4MB
MD54122ec8ea8a61fcb816a8a51e89a3171
SHA12d0108edf716f0f4a3514e6fa99026a8be06a880
SHA2561a5a020d8aa95b106294a4a0eb7c6fa03fa5cac230b9003cca179a19521dfac3
SHA5120bc428c4ae6f4b5e1272d7ab195b8a064f51c89dbbc874afd21d7a9363274f8e521e53ee35723efda2f57be97b190acf951fee412ab8b7cec80394dfff2d01b8
-
Filesize
1.2MB
MD5e8e7171af22202bd3889799c916fd488
SHA1997c1bf5d91189cfcf7a7e7a019b0246d031b042
SHA2569584f99801a972fb3d2f2853210af995cae1de5cedfc7fe2f9233d9422f7bf8b
SHA512b2820cee1087f6485584929c10798da1176ac18ee0aeedf85623731a901e42e380c7ccfc5901e8ae20bccb6aae73f8e4866eaa0475174c31a9871ce5eaf19f45
-
Filesize
5.4MB
MD5bc0c6d29b8dc9ca29547421aed7d5b2f
SHA18b4a0e59314011d6eb3bbabc794713062e6012c3
SHA256b88465a5cacbd11f97b9736b88d9b9d650b016f33eedfd9285a771ec9cdc31c4
SHA5127ea348fa06c9e6d4c5ac7fce2a2a8dad1fc844fd0cb156ba19d73180b7100ce798497d74cab7de096e92795041df73d94b5b4e86b7db35deaa1f5a7749ffe180
-
Filesize
5.4MB
MD5b197ec4de15de80a8476114f89e77b0a
SHA106d94a1ff06cd8789c81318063e2241c42191e87
SHA2562271ca447aeb304b60a4c727720aee1b1a0151734afa45415c21b810523b7c34
SHA51276594b650dd53ee75f6668f200da421c6645f625a827f0df5432b600c9de4fa91a4f98e59dc31ff1c3e57100b4990290ee030826e6d80f14a560452d5577cb0e
-
Filesize
2.0MB
MD579dae5da302a75e1b279fd803b53c881
SHA11cebbfd85d74240466718457d5a65033f857cadf
SHA256ac703a4a20b07b45ee6e79e4cf9a4c56f3ac186e1303e57296524f525980fb9f
SHA512e9ec8f4e37ae6b86b1f2744dcbdded714e511002dabe7b3af6e920f61dd6cb32f83152fb4d9d7b0fb227838305d6bdc2d24159108e11652cbc5a0a45aefe8191
-
Filesize
2.2MB
MD58672f9f18f1699d8da098b1bae33cae1
SHA18d0dd250c27d9bfc619aa659a697a747eeac41c8
SHA256f74276fbce15b726c3018368d68947c79316473f21d063cc745d3a3cf6045874
SHA512408f50c2bac69de3ffd965e9802bc5c58206b0a202828e434c3f28f4110de7cc5753354f5785da8131934a3b5d26c508cb5e6510171816d833d3a78fb5417eed
-
Filesize
1.8MB
MD5cdbf4babe69aa10846d7dfb377ed5eee
SHA1ab0ec2f9796fbfe073eb26d9b5c56f0f0cdc2edc
SHA2569747f069494949f6f3f7e0b5603deb15e29006bfc73ff4dcb7652f05b93448e3
SHA51290b0e9e1c8753e1b01d5c321f0b2f9dae8c00ad1616ffc5bc03145d77597dfdd476e48bfdbeed4b32a66c9859c7f8ebc12abed6dbd59fb87fdd5ce03e5e0fecf
-
Filesize
1.7MB
MD53877658f1071f1c2bf5768f638b8da62
SHA1c19d254e6517bdc3f2db386f5e9b89b93ad7f3b7
SHA2561b0a83c77e7cac2776e7832a31cfe320f7a8a6629439c8b825c12ee6907d1405
SHA5124d45dc2c64c02df4c7b7e4d4ea27e431432c2cf97732eb37a48b111c7be069f1f6c311840d18f8d1e7f7c3671fe55bc42b58f21a2baad71237d50a1a2bc802ee
-
Filesize
1.2MB
MD53c655d585f58fa9d8fb310fc6f9c64dc
SHA1dd3a2e89caf9c89f66ea836ae4c67826105fc137
SHA256b389035b854e4636862158ff52565cde3702d80fbf9d20d14acb7dc444f5db52
SHA512c1c3b4aa61443b0d21ffe9c385375edb30f48c6f65d1a15f8dbf73a4093ee113adae5a67baaa6cffdce6cd35961dba525ebf7eba62e013d548122bc0d5a7c366
-
Filesize
1.2MB
MD58cb8b55cba3d7bbfef422f182b23a8ca
SHA155d48b8ecc7c080b74e95134b1897160adc2b1bc
SHA256f2520f4082aa303d7cac90e3801735663393282f080b86544a409955c1e7046f
SHA51200464424fbbc1268d675042e78e36241f3345e8ebeedcda2847fa9371ff4a3a173dc73f91a79d31e0e25778151b8c9108c9022c577ee5161c4b3ff220bf58db3
-
Filesize
1.2MB
MD5eaa2a670b59e7185d9b473d5e3b36b2e
SHA1c5ac6293ab12376c23f93fa52ea59333171d6373
SHA256287450f8de13e50c7336fbb1d853c318aec4fac43a47e522b5b81de252bd1a2e
SHA5125e7ce2d61a79d5673b64a37fe2df4098c880ec566b5210009d92351d6848614370e11f6a2e707d89aeb4a098f6d1236c690eef22f7d73120fbf2a94ea8714fa3
-
Filesize
1.2MB
MD5c801babd07f5adc29f1dca0acf6e2666
SHA15ebd07a5b7b21ceac810d65733ef7b8e24397160
SHA256f0a0ec7e6e8489856297e9d70b87ee5b09f885eb618ee1881f23205d55bab383
SHA5121b04b2f4e8c259411aaa2231cec9683a7f4841e66a5ba26dc62480882ed689a607a0e34d3967da5620ada3044d6b17f0480333d61a30af505fde42b78c84cadb
-
Filesize
1.2MB
MD54edd3cdeefe7223d0618cdada0a03e9d
SHA14d39ead8732fbb66392b544f0507636d01cf3a24
SHA256847bee65e7a32d272380832aeb9d703319fa75ae131b70001a8e2937f5cab7de
SHA512b14bff7103c197db18ee2687fcbfe7ded68cd18f194dd2a5038918ce357e18b2f78d3721607b0955c806bf10ac44401cc4e2c6727e3855f9ee30bcc4519860f7
-
Filesize
1.2MB
MD5c70fc9e6cd662a4cffef464895285561
SHA1dddac5bee35a436262d2f25d8730a16b9c63b7ee
SHA256b5a520075c5925871d510312fa865ac8213d371e91441fa0524cfd18a4000ed8
SHA5125077e8ee00ed21716762d02033f775e277f8994bd36620cf96565179c0a356f949eee089dd7dfe68a1a1175ac3a30cc1cd223e3b83883f30f9d972ba87352816
-
Filesize
1.2MB
MD540132057a62ac289ab6d42bca1add558
SHA1b19bb9a6cd6c620a025ab0cc07d2aa31a358b212
SHA256907227dd32998dc75d99196154921e05d30efa467876180d916e0bb723d0a334
SHA512a6f82827f8bdf15965430e273c22900c38812df007804d7a120da6853f225db81339dd3f4097d34c4fccb2a043130ef9b74025e6fc0257d65451cd020018b516
-
Filesize
1.4MB
MD58ff2ce5733f82c443b7fdf2bd8415640
SHA15e24a6cc5dc15ac964249596b1de82ff3475a58e
SHA25687705c38169ff6efc61e5182f8c3a60d43995ec167aedd412712515baf9b565e
SHA512bfe70c270c0cfba770447d7725ed1e391815bf24829ecb20d98188dc90fa5e9e927358e5821dd393128b12d470d0dfbd16ef67ab3e4a539dc0b0025440c0ab39
-
Filesize
1.2MB
MD58ceb6ffe8f62603a1a9300440f936355
SHA1710ca0a81084fa6de3ba4a63b42c3b8dc625c1fe
SHA256e43b793cb64f935177d790183bda61ac23638b2fe3132ae45d848fbbd5fab1cf
SHA512da7551c5f4cece22cbc360be58c2df5b6e5fedbdac9549892b44ca5e0eb1c0f99e40097d72d4dbf18e500bc40c264c779cc474c7252e17cc67edbfcbd3a09e0d
-
Filesize
1.2MB
MD5fc7b8601b49206215fe8e178f853d568
SHA1d531fdf0fd2025cc52ae9054a44232291ac42d05
SHA2561350f3035548975cb7fe89c92593ddaaedf4912f710c4e6915a39eab4ad17576
SHA512a1b03e2b0c116ff43eeb88989d17228122ea361cbaa189f8a0c6aac42c2af90a2634f7ca215e0859ad1a3becb8d666eb7c2dc433baf04a8603cea5b8f5d33d80
-
Filesize
1.3MB
MD54843196b227fb50778ca13688d9ff495
SHA179cace8d3253ac8ded50c7ef77c3446f828c81ec
SHA256084ac5583a99c03a98d16ce223174bcfc71e3e964ba23ba15e7647e9fe19fb49
SHA512791af860a3b4ad17bb6bf7e29ebef2852f305d8e27f5a6858153ce3075329099956758ddef98ee369f89991dcf473888bf68300ea2455124dcafe4baa1bbbecc
-
Filesize
1.2MB
MD5f955971f7e6f18127baba8aa81d0bc13
SHA16ba485c040610a405f52f33ed20f575a85d95a68
SHA256fc1beb5ac98311fa14cf45f0294ab33d2dd5c2470c1337c45ebeecdff7311450
SHA512afbdecbed3b13427c2da831939a509c99fc6c624e749abb7a12fb797052b2fc2207ff3708128a66cce872ff9428bb77472f7e9eb130053b29a45db4dd8cf0e1a
-
Filesize
1.2MB
MD5df47222d6cc0d772ffc67f3bf55b3679
SHA13967e8a789ae0230c29d13e979921abb042d69fc
SHA256ca769a8a334004b1ad6fa6b348cff247fd99f4f87b0b5d14ef77fb2076c99fd9
SHA51245d4a2f8132abe2e631338bf2f759a3841745783b8d61c6df9116ea780706428d1cf8e8b4c8627a30dab42a4b7b67e2aa579647f541817274f979dc079f0747a
-
Filesize
1.3MB
MD507a0dc1a7642b6b8a8550011fc7242c5
SHA18b2f022970d4bc76663570537453447ce869e6b5
SHA2562c15d878d8d25193f42c4adcef3f8ba0584620a8982b6c70796524312f500475
SHA512b67ae58b506397b2e33e1ee9d19ff4de99323a41e5add727177cd4411219093f4a7c075c3b9cf090ec507f2329ba66e62fd919444d0c8108333ad039260672b8
-
Filesize
1.4MB
MD5f179da8219ce1c7ce8c4918dd988fa81
SHA18892c109e06793fdb66f8c9f9db60f047faadd61
SHA256c2e20b4ab85de69c9a0bfdac76b9d83cc95e6d2f50751bde38b45f0c48c53f44
SHA51244f13af81179904d54f6b3b0ca2c77bd575be520d8d2e61d157999d3c2ba6901499df7172b7f0b4ebcec5f3c7bf3443ae2aa86233271d96a2fdf442c025326c5
-
Filesize
1.6MB
MD52cdc71336ea28225e8ae7c25c0e0f527
SHA19b4fdaca3042a9e729eacd3f257c6a5400b77cd6
SHA256da8f83d67a44191071851dde933d20be9cb7415c43e52872a6415c7f31392b34
SHA512e4d98800bd382bb62861c35683125892983f74230539bf94678f3e8e820251cb20684ecd6ae7aca9055bae76aeab370cca3dfa62209b1d1d6507fa55ae636cbd
-
Filesize
1.2MB
MD5508a5d4eee3c7a08ef188aa9585f11e8
SHA1347fdc945d336dc29cec52e580c0a0ebb0e2fde9
SHA256b5625ac96de1f12830a19799915aec56fae579200ed88359e9ca49b0c583bcb2
SHA512f58d0920086232c13c692d94cd245e42385d3d8cc328b41add7764de8cce9261b9ccfa62612b9aa16be43a24f47b0736ae83539f00d9396c8c0a0865a1695edd
-
Filesize
1.2MB
MD51e0c7b694bdaf2a0222eb63c306e3577
SHA108261ad85464a04c4259d9970d96af7ccc5b4725
SHA25679115f0d69a4d84d0e591b3ebc4f6c3ecb45e62f36dbd85374c80e934ec61cbb
SHA5128b34ee38921d9b3614a6af148a9044e25b1479e8cee6afe1f5700b7f9e6340f59b2b40711985eb4788998ef1d638f05f48ba2e06c86925ac92a9c767db7d9f99
-
Filesize
1.2MB
MD5f79cbd5c2b78da8f4db19d181c8ce4d8
SHA1df6b7e730d4805a63cd970236a383595dd0e36e3
SHA2568c5030dee5ed604b138d97650fce0d8a0f070411f54e2facc8c0c348dc972197
SHA5124360a28ab7dd562a509686e688ddf840c3b7e73efd817639f1e9b128aa1201cd0d4771340d59a2ecec095aaa186dfe3a6512d6c43eeecbc8e221786e9be825ea
-
Filesize
1.2MB
MD529d2d2b28aacbeba2087d04e59307f18
SHA1954654b315ac39a56494133dc15a530c0c4d0a7b
SHA2567c27247a7c78e2d789cc3d3d8699ef5ad649af1ff3763d14bcf7bf3148386270
SHA5122ec774f0876eec9f6b2db10415c3ab732577f1f6f810e2f584ecd48ab391a0738c61ee32d3b2bada58696876d855b42038318492b8c06898ac6f8927693ff1e3
-
Filesize
1.2MB
MD5ace3a5980fa6458d58b2428581f2a502
SHA1b21b987c9e417570d0cc9f235355bda2d73570d8
SHA2567251c654ee0387180bf22dfbfd7819f53eb4c37ce973462072f3fef86827f82e
SHA512a449046c7003906a242fc3b2e109c5bbb6bdd530850948ae309f9d64cd871a17ea8c1f3d4986d6d9957bc5c64d27dfe79554084d023411ada3eae97f08afd997
-
Filesize
1.2MB
MD54bd40c5c9969e8ad1c8d2df2d9015367
SHA1dfac37a65761ef76a9bea979f215e6b61407acf5
SHA2564b555d649a10275d20b1ef7efabcdc6bc39d892ea6ec43e46ad81b10cecba08d
SHA5120cc2d64b338e0a9f9afd9cda9e0fb100b7baa46532dd6d013483e2b276b0204901ac8501b63a4c7b209d45d489e32fcda971550b64942baf3cb27a99864b57fd
-
Filesize
1.2MB
MD50bd384c90a876f44b86c77c7c04cdd38
SHA14213631afb496c2a7eea01bebd8e85a52986cf60
SHA2567fe92a1d7c54a3cb3a7e9f8be425f16f17e73b844e380b5c387c9f2d78498162
SHA512c520ef1efc6e772d50984a1000685268a1aa857b377ced836df49af7faadc52e9c39c88c6f32b7e027e3fbe8ab2e7325b4c8ca5a388c5b7f2bfdba9fd6cfe0f2
-
Filesize
1.2MB
MD54e9a5e1cb535908ebbab88505c4c0c13
SHA1442452624062aa757b6c94e492989b101d3c9d22
SHA256cdf3ca0cd298ef67b6ad6a20c8900bea959c42c11db5685cb0512ad775f43d7e
SHA512ec7201f91d24e99e096acb3ee53a5b050c563a55e250e83e90742915c1e7c7d86d3b96f7b0618a8dbd3d56a0d06af23c5f0d574d23d492d83ad6b96ef2749715
-
Filesize
1.2MB
MD55ff4b9165ffbe33486adb0dc3baf7771
SHA13063a14d9edd62e83d713bab7a4215bc3b808fc0
SHA25683e19df47a5150d7055393dd0501f6baf4ff7bd83a31a064af9d0ab5582c65e6
SHA512b3b739bf1b6d4f28ae5f640a7f0179a4e18ff7eb2f160965d5f72720a16b9b74b246773dd1391dc4301bf3bb890b8f30f70cf1634ff04fb5f77fe05832a521c5
-
Filesize
1.2MB
MD5039570468ed3253d0f4242a660ef236e
SHA1ace45f9e1e9ef07349746a2a462a0661c01965cb
SHA256202a2267393009f97c6551a8b25393a6195a8f54258dbf21312684ef830387a0
SHA5128ee3ddc5f66b7bf79bd49f4e8ba32761f6d40a6457ee698255e0c46da58d0cbebf15c6653a98c113d659e53f9008dc9af3596d4dc14e5099159feecddb00e4e6
-
Filesize
1.2MB
MD56df1f45677f642135bec50ffa4480afe
SHA16e096b8a48b2367f6ccc3431aa635f89dcabda40
SHA2561524f0af4cf166204629d30cb59f01154cdf4425a0897372f7ee2d1c8a3a6f33
SHA512ce9730203eb9fc36d104fc693e55d7a8ca1012313180620a3777d84eac6228e053d0d6f76fe202a4ad7d10f9d6236b3c3907d258aff723265e938db12f556afd
-
Filesize
1.2MB
MD54ff8f86013b5a6c11415c157f92b10ce
SHA18d1eabd7581f6c26cffaed4919f76ac5decd596c
SHA2568b6e13bf1eadf496ff09ee07988fecaded13fda0cb90847721fe2ef41671c4f4
SHA5129460df81dc56b9a76fd0ad677f7d9228ad76bf48550655adf84b64c2ff9c1f0e5ddc56cb15c5f163ff170ae92d9234f5cc7103478e412efd488be6bc39fa7875
-
Filesize
1.2MB
MD5c926aa04c48a9de65409be43aac2f0a3
SHA1036ac4e591ae06e235ae9ea0a00fe3bd0bc342b7
SHA256c69b255106c10c25e56d372e046021dffc5b0003ad96d7cb9fe1faae8cc8c7ce
SHA5129485ea884d8f00463181eafd9042e2cbe78677b017158de77a86f4960a33cfa8179fd244a52d9a814e2c70b02841d074eb367b2a3d53d33a5a8679f62d867ddc
-
Filesize
1.2MB
MD5b6f42bf860fd5352fa07ce4a7826023b
SHA1813e8c35c54ed5ba110669f3eb627bae36c58848
SHA256b94696fc2f27f901d985d5ecf1efef81bf9ac164b15d36e8d57ed2ded32521ca
SHA512442b2d682e6c6deae01053b08ed9d3071cb7fa23dee537ebcd15af4657cf3a85f9472d3a725fde06ab1958d32e76ad3e812c5a1e3fcd4c7bb5a9120725cf5bfc
-
Filesize
1.2MB
MD52d6ebf019e102fb6776aa7ce5f6e6197
SHA172cf51fe4b9a31e848140c3867e40e75f4adbc68
SHA2568e9a25d7637490fa84af10e1a32bda70be6c92d2a396b4f92694d8159b616e8c
SHA512b78f507abb69e681274c24ac4c939336d213a83aa612540e2c04e637c0db8dd30f4edfeca5657bdddc80fd9e2346e7d606de82e0017d6c85757fa7a587daf694
-
Filesize
1.2MB
MD5d535692047c77beaefd4e1ad7f6edb1a
SHA1ba76d674e5a5b04ccf28d634347c346e25f0e1b9
SHA25646d3b71b009f10242408bb0f27aa1d0d20d4aacd6b628c062b9750439acb5429
SHA5122a75ea410832422686c5dcb8a71e8f3b197dcec109a680b86be1b3c551f374235eec0a66df3b03339afcc19cc465dc18c9771fa6ff1b1ee7eda421570b48a195
-
Filesize
1.2MB
MD5e9f2e5573422565656e499c02b954f32
SHA1da260b5be98496fb7d4e7c1623a9c8562eeba4f3
SHA256978d67ffb44ae4201398d527dac71cf27f7e1638d77f7f721fb280f1c2b394d2
SHA512c1a855325f3795e27394961652bda95a4be500b879b14c957ebc7048ced132af0efb69777f2dbbe2731784bc83d9f65199332e1e3ee0815f9b6ca3eac1cbace1
-
Filesize
1.2MB
MD5df2c9842342263d1dc5246c9083ebc3d
SHA1685767ff574e7ed35bd204ee4f1b7b4dc32f56f2
SHA2561245790d6a9bdcbfa6265f34af6fd56cb9a9f4120fa717fdf7c2ee5a3fbd90d9
SHA512f343c9829fff21650121cc04490faa9dc967c77b45c93180d6090871fbe4909d2d8094b4bac22079da2ff1a0b94f2d95ff918dfb1aa7dc2a8750011e51d2387b
-
Filesize
1.2MB
MD581a738584823d7cf98b8efd9a7cf799e
SHA17c86496552ac69d6751476d7bd5a763ea728004e
SHA256f36aced5553089479bd1c8863f32325a2426e2e93fbf12a2720f095fec3a421a
SHA5127d6490fb0779211a708c449703c13c0b2e5080978dc7f99421781c65e35633a6358a40bfd05fc66a8fed0fce693fffc2588dcd1576c69e86773386c4ddf13b52
-
Filesize
1.2MB
MD5222b9aff5f4b29f3eaefff9101229678
SHA170380ee3ccaf64e19c474cf01e84e3fbd1996c07
SHA256bc2b266bbf3a63466ea7bfaccd3f1e8106935303bc09753c459cb4b66652e6e1
SHA5127eda3bc4bc029bb5acb4786f8551b9abee2500d4ca5d89d7521c48d0d45f869e7d5fd9fd649f79acf7480d5b9fdd9b99f48b3e8ca89c2ffa443efb6049f6a752
-
Filesize
1.2MB
MD599626c5e42a73417580046e5bd5b7858
SHA1f4c9f1f000eb6fdb6e993bb57182b22019a98c29
SHA256169168bfa21be3628571210e7cb7f5acc6b82d72ff14ee3c7a358ae9afa13f26
SHA51222f6d1f666b14a09c9bc0903c14a3a4bcde74ce16845aa6e56662c69fa6ac871a86a88eac80a3b4383626a6ffa39ead2e309c3ff96f554c080fb4fc8f6105982
-
Filesize
1.2MB
MD516c755049c17f22d9373a12143f995d1
SHA13f7adc59f3144fdc23d3e7397a7ecda7db8b5833
SHA256a1bbd284f1b1f71342e025f16b4233e2a111f1104237e192818b1facc97807d8
SHA512826a2b94f50294763c494834519efbd178f77d0c0e83f3b23cdc68f7a37d1d980f8387f0c61d06f8efec62f370d4cb4087023cbb73f0f96d17658fb9b0eaedfd
-
Filesize
1.2MB
MD5bf3000d6a88128516bc66555207cbd90
SHA107e3428a779fb4e46d1be370b05cf74efd859dc7
SHA256c99182eaabdb92f0b6837ef68e10fc5c34bbb55e973788c2506c15278fdb3ab1
SHA51218710d5b8c58726cde3d52e4b9c83ff0a5e935488d5d01c1d10a3bdb95df0a09ec4e29bf0b3d2d559d3d2abc21ff636fff5cc33363d5944b99f2289e509bac49
-
Filesize
1.3MB
MD53d05c86e13ef93011237388f1fc2c2fd
SHA17982b410037b01cf9bf33acfc5e444f0b3372f66
SHA256cdde14c1a1ea5b4a61491c4186858d5ab91705c3dcc07442526cfdad88f86c9d
SHA512a5b65c980fac8186ff8baf1cc4cb9a862b38f7c6800930350bc87c736ecfdb6d308cf5956e429670cac80fc9c8c414f760d8760f1d82376d89eb6b4d8ce0609a
-
Filesize
1.2MB
MD5a3000ed2bec16c9c1ebcddb6afee7b1f
SHA1e941d1a69d96e8bd4d440ee150341b7aae1fbccf
SHA256c09839fb707f57dced11f3fcb5efd23a3e3dd5924f4cb7a914ebc644c1901e88
SHA512c41157d108d1a07730ce96ef56b331c602c0a9e02547041e77c54423e95d74111b2de4e196c00b8aa4ceee13b0d86e27ace7760309a9c18186dbe1465f866bc7
-
Filesize
1.2MB
MD59a8213f02ea25ac0d71d9e05838fbc9a
SHA1c6ca4961e145e0c6f45247a282a684fa909d70fd
SHA2569d77c2fe8495a72c16b47b8ba61a2907aa91beae5b63a790255c5a1217e983f0
SHA512713e252f18917361264f070db3801df7450905162b9ca35d929e4817273e4a2a0e9ea65e7dd512b2630ee4e8190ff9d8f418f761823b239ccce1bef12bf64916
-
Filesize
1.3MB
MD57df0521a88a47a8d06dc53e0802ee491
SHA1bcb6bf7080a0b0d78f09cc0240ce90d85154503e
SHA256257c5021abe3c13752c58915e59d45a317574f371bfcf2bcc89f09992031cb95
SHA5120b628a9c9a795990426a35f6f3166a7e6961589ba1cc06e0144b3e3467ec61964a6fb13b4ca2c0b6da1999725f9c7a134a1f88bac25a3108fd15bb4ade706e2e