Analysis
-
max time kernel
11s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
30/06/2024, 14:42
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-30_ceb497b6b174d69dc005ebd013d2eec9_bkransomware_karagany.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2024-06-30_ceb497b6b174d69dc005ebd013d2eec9_bkransomware_karagany.exe
Resource
win10v2004-20240508-en
General
-
Target
2024-06-30_ceb497b6b174d69dc005ebd013d2eec9_bkransomware_karagany.exe
-
Size
677KB
-
MD5
ceb497b6b174d69dc005ebd013d2eec9
-
SHA1
d18f89898772a37c0e9d9ebdab78bbb4d0e243bb
-
SHA256
7fc03e78fce9c8db386f4d599cf46d0f3c627f6fe52f876017b17cd8410941fb
-
SHA512
981844c38621787da21b9391eee9bd2cd3d8bd7d86760fc21e8938e2c85abd80aa919249c857635634cbff8a003788c5cb0e5283ffba6d5cc6570fe13b60062f
-
SSDEEP
12288:gvXk1rLD7bHVKMQ4O4vSjNsyMLpRNO2FLzTGT/SRel8lkEoiqAj:0k1rX7bHsMQ4/O6yMLprOInyT/Swl8Mg
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 224 alg.exe 3420 DiagnosticsHub.StandardCollector.Service.exe 4516 elevation_service.exe 1580 elevation_service.exe 1488 maintenanceservice.exe 2504 OSE.EXE -
Drops file in System32 directory 7 IoCs
description ioc Process File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-06-30_ceb497b6b174d69dc005ebd013d2eec9_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-06-30_ceb497b6b174d69dc005ebd013d2eec9_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-06-30_ceb497b6b174d69dc005ebd013d2eec9_bkransomware_karagany.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-06-30_ceb497b6b174d69dc005ebd013d2eec9_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\32bb7292293b476c.bin DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\LogTransport2.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jar.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsimport.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\pack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrCEF.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\ieinstal.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jinfo.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jsadebugd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\minidump-analyzer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\7zG.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\tnameserv.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32Info.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jcmd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jhat.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\AcroLayoutRecognizer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\InspectorOfficeGadget.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\ShapeCollector.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\VideoLAN\VLC\uninstall.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\keytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdeps.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstatd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\ktab.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jarsigner.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\reader_sl.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\orbd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\pingsender.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\32BitMAPIBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\iediagcmd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\iexplore.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javapackager.exe DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 676 Process not Found 676 Process not Found -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4840 2024-06-30_ceb497b6b174d69dc005ebd013d2eec9_bkransomware_karagany.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-06-30_ceb497b6b174d69dc005ebd013d2eec9_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-06-30_ceb497b6b174d69dc005ebd013d2eec9_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:4840
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
PID:224
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
PID:3420
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4516
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:1580
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:1488
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:2504
-
C:\Windows\System32\svchost.exeC:\Windows\System32\svchost.exe -k NetworkService -p -s TapiSrv1⤵PID:2636
-
C:\Windows\system32\fxssvc.exeC:\Windows\system32\fxssvc.exe1⤵PID:3692
-
C:\Windows\System32\msdtc.exeC:\Windows\System32\msdtc.exe1⤵PID:3492
-
C:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exeC:\Windows\system32\PerceptionSimulation\PerceptionSimulationService.exe1⤵PID:440
-
C:\Windows\SysWow64\perfhost.exeC:\Windows\SysWow64\perfhost.exe1⤵PID:4188
-
C:\Windows\system32\locator.exeC:\Windows\system32\locator.exe1⤵PID:4996
-
C:\Windows\System32\SensorDataService.exeC:\Windows\System32\SensorDataService.exe1⤵PID:2244
-
C:\Windows\System32\snmptrap.exeC:\Windows\System32\snmptrap.exe1⤵PID:4056
-
C:\Windows\system32\spectrum.exeC:\Windows\system32\spectrum.exe1⤵PID:1424
-
C:\Windows\System32\OpenSSH\ssh-agent.exeC:\Windows\System32\OpenSSH\ssh-agent.exe1⤵PID:3284
-
C:\Windows\system32\svchost.exeC:\Windows\system32\svchost.exe -k LocalService -p -s SharedRealitySvc1⤵PID:5108
-
C:\Windows\system32\TieringEngineService.exeC:\Windows\system32\TieringEngineService.exe1⤵PID:4360
-
C:\Windows\system32\AgentService.exeC:\Windows\system32\AgentService.exe1⤵PID:2944
-
C:\Windows\System32\vds.exeC:\Windows\System32\vds.exe1⤵PID:1396
-
C:\Windows\system32\vssvc.exeC:\Windows\system32\vssvc.exe1⤵PID:2992
-
C:\Windows\system32\wbengine.exe"C:\Windows\system32\wbengine.exe"1⤵PID:1256
-
C:\Windows\system32\wbem\WmiApSrv.exeC:\Windows\system32\wbem\WmiApSrv.exe1⤵PID:3576
-
C:\Windows\system32\SearchIndexer.exeC:\Windows\system32\SearchIndexer.exe /Embedding1⤵PID:2996
-
C:\Windows\system32\SearchProtocolHost.exe"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"2⤵PID:1692
-
-
C:\Windows\system32\SearchFilterHost.exe"C:\Windows\system32\SearchFilterHost.exe" 0 800 804 812 8192 808 7842⤵PID:3408
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5e386616707b9788de67da1c32b905928
SHA1808ad2bdbf99b06cb21a077baf9513082a5e0c8e
SHA2563dd7a920042d5ab5df726f1a8b1916a04f626db21c07c99155a93729f156f775
SHA512470ad4c299030e053d5cbc44d95ac48d8afa5ecd413d3ecf4e8c228f4e05174b21b63bfeef06a4ea1eb54ae477c837da24231b35c146ac155ee47e446f865cb6
-
Filesize
797KB
MD566a18ae99d08b91e7b27ecd5ebe640c0
SHA1e39cbe3177824b454a3cef4266086fea41632829
SHA2564ef27743bde330ef9056bae3728783a3d2a208319a33d0f5f4641c8d4221bae4
SHA512dbf97460b55f65cfd7b537eec5495f0757ae312762af2e58f093b87a7b2401935d35c0d32da026bf5634e159f419e3ebdf8e6a8ce7b9be501efd710fae7753fb
-
Filesize
1.1MB
MD587e8cfdbf3f98f3a4984449b08a2e4f0
SHA1f23cabb19e4002b5b0034c954ccb7432cb1e78a0
SHA256165f49d4f82334d9186ed72c7408b0b69f9bcdf87f7ac8cab9c1d992e5817b06
SHA512257cd4cfed9ab0f3246a8b4e363ac08eb43486bfae1ce2fb15939e13f40b3825335d7c135816fb588699d41f50bc548c06fb12a8db13ca88ea33074a37ce91c6
-
Filesize
1.5MB
MD5571a0c18b029167297fb7fb1f19400ae
SHA170951c06872aeb033b2bf54f818b84002c7b2190
SHA256386650d71f85100841438539a332955067c39fb4104d0d1824508480f5ae6666
SHA51232105d3d4460886bd585ca4a45c43a8aac6af729e21c40bfc84c605aa4d77dfbcca3e2673facb185ead368cbd2e6302402addca70f3d54c2974988ace3044e50
-
Filesize
1.2MB
MD5b23353d5dd3c4c258b976843a3ac2a93
SHA12b9bd5db91c587f83a9e1aba512ce3113e5ff040
SHA256a1890606aa6cd28b8e7864add9ea578c6e4c91c182d4ba56ca1003a1335662e7
SHA51278a205989af3ff4b22e585109b824c3a885fb31a515e60ad4ad91d9d758feb53c2f34715b4fdb7505a4e61888fe52057f5c8f9e583d967ad68f7d304094cc426
-
Filesize
582KB
MD57726cb211e2bd90049f349e50acf6ff9
SHA1c6779b5819bd2d1b18ccfae0a513ac7684f2c0e8
SHA2563978e6fa8f81885d101f89a235c754e999fc24d04b5bad65839a1447bf76ad3f
SHA51259f21b6a4fcd9f64e0182b0268dbfc893b1115960781032b5f956911d15e56a4b7958ebdf99e21d750d5bca1ae7ea38c6573c3fdc6420ec7083396bad14d4036
-
Filesize
840KB
MD5bd3fa2cc734eee63779240a2f534d4fa
SHA1cc81849c44628d39f7e120293300ebf3c64b1c09
SHA2569f6145e4ffd96bd04ed3e7d217c6bb27aefde961af642176f5b1013efb5d1381
SHA512055a57fc2d944e7b3de9956d6581d9b19da3fe034a7a84617ddee8ac3824cb45eba1496857bd62dcf3e570c0527aed480352462502d65b83d7eb91ad8c5f8dd9
-
Filesize
1.2MB
MD5855f12454421bbfb55ea168776ee4689
SHA10b932f54f8915cba93b913f02dc596e4c7e14313
SHA2563e8dcc4022c3fe908078a9713fceab210f6d0cd56e5ae2e350c3aa474436776f
SHA512dd34e96c151568db3baa284d71b8ca08485b2b78e201716758fac77876392c11e400e511bcf2dec0ab8bace34bff5d1189ab5c127bf2017a01f9d5f35b033836
-
Filesize
910KB
MD580b9b2edb56f5e0be8848123f0fde36e
SHA1d529a962f16e1979f272280645119db9057e4ff2
SHA25648a1dfab59bcab71eb5f5a7efbf8c303146ca3505a71b91764997b19557bd458
SHA51281944dd75d7f06e89f7ef4e69211d79fd392826d03131c5ef5e5b6b9871dfe82526407acce7041b7f432105486b422f424deeab5fc4aa05514265b7a4cbafc8e
-
Filesize
1.6MB
MD55edbc055acfce9e60daa9d9be8ef6b8f
SHA186b5390bc3b9c9380ecbf8d9eb7292b789412fc5
SHA256ee4bf0b574fdfa80e69e0d8579e3151a472e9197068e0c0fe7d3b4163431df55
SHA512e975ebcf8697f979a5783072ad9fa80903b0d463eef7f0140e6d1e1cd6f86f71328512d6699b07e87d3a267f1031cbde1cfbc7175c7f1b4a0f9116a20ceef4ad
-
Filesize
1.8MB
MD574703754d7c2fa9d2dd75502212e756a
SHA1fda70932a4e0831556558c147effcbddb772bc53
SHA256237ad9e2a3c01e889308585aa7e3b6a7612102213597267f3c44414bcc62358a
SHA51270cd48e66184fae79d52179e85349ebe12f7016c31d4e6245aec4b404a73a9ea03f94c086d9f5f00528c9a7d57ac70f1d2b559ac839602aa069376db5de203f2
-
Filesize
1.1MB
MD56318924675029baee68112661b4cda30
SHA18fd88109159f2403a2a7771398f2a45b033e4942
SHA256c77c0d0316850ec6b0eb0b0dabac14598810fc9eab0d0645b99f23a42ee1ba4a
SHA512cc1801a3b53c76b96226c2a82ec8aa5e21de003471e4af1eabcaae3d50241ae229548d5940d4bbeae7ef0966e58c0d029310c7aa29b9b236df85f15302b3b1c4
-
Filesize
805KB
MD5def1aa467b7e325884b28542fb0cdb39
SHA14665d47cebcd2c6bd2a6c7591f83915d47e52f3d
SHA256e7ba36b5118627673606de7c1c8128d03edfa967553470c73e8aa18e78b3b11c
SHA512d651ed05d21a7e17d283151beaa553de6b5673c664f2dca440bb8ee50cb738ad7aff2721905b9edb6a8a2314db86a2db108d87a39b423222a6a6cef004c8594b
-
Filesize
656KB
MD5f10d7ac171067dcdf1d06a7a859f9cc5
SHA1b81b31854897fc7e06da795f5177903cc1fcb7f1
SHA2565300f4f56816be70b2122f1ae368587b72e4ee403924c1128c8e7e7af9d0ad9f
SHA5121cb49f98a80b048d37a116370cf62e07e0358c58265a3cfba1625818f415c00d99db380ccee44d458d6c6cbfb37a175970640fab9943767f6813f2db3d48727a
-
Filesize
1.1MB
MD50832d77aa753de538d70e04fe8e57eac
SHA1ff95e0618695ce855730e159ff426b9f44dc04ea
SHA2561adabffb2b44cbfcaa77ffccf6ef45320192c9b3d29ed1f74464fbebcb1c1339
SHA5127606bcf5d1d027c081c3417aa3fa7af2dea85642f42cc237e5b70f78fae6c61b808415510dc6bac11f342806bcf77927805d5ba19f4a81ff24331cd5594d1821
-
Filesize
1.8MB
MD58b1aaa7737b28e304e74fa6f60ec0bec
SHA1c3faf202d10fa6b82b37169175a7d152ba536504
SHA256f447061db29762d061f6e1879438c314152582d3fe36e12ac3dea26ff2ca8bcc
SHA5125a064b7e438e0ae6eccaebc6b6c77f2ca81169289cc3c9aa05062cbb507ca151c310eaa0b7e30911745a514737b650b38a5f98607377edd44c767e3b7610c968
-
Filesize
1.9MB
MD5feab7eabbbc4565e85d4e11567734ba5
SHA1b4f81b3486b392365fe8134b0e14e7a0d3add8f9
SHA2566bf22834ebcf773cda3cfeb2431fb5b166c9434fe999fa04a5e8e27bd60f2dd9
SHA5121765b57e494f8326b92cde55589b8d2f8a00cdf1ab2567185664a6eb29c42d7dd6b80e5337c4c9cf28ccd1be14dec7c7e0831114c217ad19630c9e2a74b93aac
-
Filesize
2.2MB
MD58573f5a8c6007d76e4e81ccf50d9c21c
SHA16f244f4744b7eb1db87ce32454eaeaa316539c77
SHA256829cf5871de0b80e407fb90ce3509661201c0cffa85e8351c2c3501896fa386a
SHA512222c5f84c0cb4758c8e4e22afb69d81e780adeca9a164033dd238050c8265590efafedb5fade3cf3c9a08382d7e1d74b5d542575d45934717fe98a73975e776b
-
Filesize
1.4MB
MD52908c7b4fbf8fd79a79df0912bf4ae01
SHA177608a1ab5313fb1f27984562498a97b9b7a9c28
SHA2567fb108816d413e621255db1e8e19b8198f6c98f7b693b8e5a00c6920871758ba
SHA51250875c1734ffb0590c43fed7c4254cee53e962ae5d838de2a162631183e1a3183ec215cc157154757862eff94738da8c36fc9c7a6700c988a6e17e8f79e7fc05
-
Filesize
1.6MB
MD5c5ba8a6577e409757ada8c7204c6e5a2
SHA1e0317d997b8f7932ae0d60e92a3bf050f7c80f44
SHA25634dbbf521de38ea0701f1babb887fc9dc5be79f2d36ce2b29b2f7e5fd1c00b7e
SHA5120f63dc611fef7621a1fb1cf842320652cfded187d8662aba502ba07c905db2f1cc45b4766fa9d8c08a6f3fb47c4f0a1a1f9a53489e339c27066021e647deef96
-
Filesize
581KB
MD5cbcf96d38bd9d77b733574acac9cb7ee
SHA165b3adfffe08f01aab905fbc6c60052efdd3954b
SHA256d162a1c6d9eda0ad1302ec4ebf33bbb3a1a1586b180113c7955f0910535a25c2
SHA512b72127566da272145d831e1fbe92eef5b3eaf26c92f0aee1189533418c9792ad5c514ab0a745462ed9054df5b205839a0458bcb6bf85daf04b503763621ad984
-
Filesize
581KB
MD543bd1290e825543a2bd15130f39d91d5
SHA171006f0238033ec7611d9d6f21a9cabf3c4957b0
SHA25612cabffb04450c04a634a7362a59eaa179e095e54d24dcdd7a51ef5fd1b82e9b
SHA512fb819aea9a248abf6d133488de48f16bbe713bead0830380dc993bb204e08b926255a2dc1eea95c2cfc880827ffd6476905442fa8a3e516d1959d7fb88b10a0b
-
Filesize
581KB
MD53b3e9ba5ca47f03b845a94ce09231c44
SHA1117c1592b07cd86207a3cca4db95d90cfbd81f0b
SHA25648b57edc486d0002b7d1919d1d813a984987186bf9b965cfad22582a535fbc61
SHA5124e40a472dab9ed8e720f3f86abc221abaa83f260b0c891d01c5d477b9d11c565afe664a2eed3c283acafd3fea417dbef1d9d62e8f647428d89320f139a89edf2
-
Filesize
601KB
MD571224f127cac630e4539da5b859abdd2
SHA1d440d99821b11b0f9b2e1e6893bfca5884bb4fc2
SHA256c1ded8bd0bffd7d727c6e76b24d8f5014da824a4c43a9bb65650891fc79171d7
SHA51242819c6ea1242bf300c4b18111ccf5375dcfe8080d1a9931447a07bbfe9e09c3196427d2cf68ee8dc38ea0c34eb5687bb3b684f5c7cc0f6b431861bed0aba5eb
-
Filesize
581KB
MD572c2ef02e7ad30bf35f3730041d8b832
SHA1f87179329693dd1bb1bd38d14a11ff8773d64b26
SHA2565579dfbaf37064e312a4ad5ccbde2576ba7d6859ca26941ea64c51b5532ff9b8
SHA512d7c11641c7f7b54d3fbdfa6f2b135896599f7a6bfadceb12865fd5d3142631bfde94020b4a60114d014cda54a2283bd44f72a8da694d00f6842584387049fb42
-
Filesize
581KB
MD54d535b7dbc794b192bbffcf9d435fd5a
SHA13d8af6c77ad3ae8a1e52630a302c887f1d05519a
SHA256d365a06a1ded29d87cf11fc85005b6ac03386e8cd8ed69423adec25f102b0dce
SHA512291ede6e8d6a27669ccf2d112db71e0f4787bda2c5597453ae42502417a19369d20a9911ebce04c2e5edbd98bd372675d694a95f70e8d702823268eb038bba8f
-
Filesize
581KB
MD53e2dea392fc3780c0117c8828940ad8c
SHA13c127dc365ea5b8ac77a4ad1b5fcadce57839c27
SHA2567d46a64dbe7fb28d24f8acb04fd428da94349051faff7b2bd23e3c082dee5193
SHA512be60bb757e12f6d514b09746b61db4da9ee2b0be01a862edc0a34e69f50ca07db590b8eb8eea6eb9c1b9edf2d6e8d843eaed990cd79314dd157904b8b8e57353
-
Filesize
841KB
MD58a99a6a5620d9edd174127915c513f68
SHA19aa4ea00083fd4c83f8259d1d2af5efd3bccc0c9
SHA2562949d24ed2a32566f6ac18f2a36c356c5ce168ec10ae3dfd84637d26f9a754b9
SHA51235af1d22dd47ad6359cebd47cfd0ff698d7e53475c63977b101598b43d90ff5308552297bf69a460bb3ede9ea39f2ef01dde7506be1cec3f9fcd4cbd6a11f1be
-
Filesize
581KB
MD53661067d71006f667952cf53eea8c6f1
SHA138c0ddf0c87845d525401d347d76c3864604fa29
SHA256d5ddb453c6768713db13fa40fbd9020e086eb9e8193f6b5c34444c65a7e57e4d
SHA5126639bf832914e62639e7b7e7a7fe33661c352a19a4815ccf20abfd4d824f64502178a4725739ff3d2c43a51bd7d2da57972a1e5898d4db670a820f8e7aa68667
-
Filesize
581KB
MD56985041968cc9b0451fc9fe8e7b72f45
SHA1b3a0d013d8d5a5ecead351b90f7d7dfece0f569d
SHA2568f2b9783fcfec018c55c8149bcaf7f637630761087ae202f909e767163318495
SHA51220167459231300c4c4f255f0f06aceeabe30d4a785b3823f6645dc8a4352155208e0e4e9e32acc9b65dbc887303da12abe90525d8a6b38043fd27166f8f1784a
-
Filesize
717KB
MD5d7ced8e4eb310602d590c6c5286d2870
SHA120d6b4645f5e1293641b3bb84b1f51c23f14dea8
SHA256baa38c249cd9941b78f5eef7ac4e36aad90eaccd85c56272f5ac6b1d9cd5468b
SHA51220d314589fa8b7d4edfd00f96fcc689b67125213fa31d8e4027418371ef8c6a48e187208c96a1f7d6b3d254ed09054b50edc029128e1730671352d6b1854a7dc
-
Filesize
581KB
MD54918ef525dee4a794c6190e3bdece383
SHA1dfb94127ef649476ca410c8504f90b282326ae75
SHA256b02fff9d6e9ddedc11b1a5066dd0f5465ec12056ea42ad0cc23c5b359848ef2d
SHA512224519309679447918b10a858cc768827430b364b044f84fa674fa8798991a52cf32ddbd63acfa66aca392110ea2f12e67f1df9c8b7b6b1057f4f66d9811d5fa
-
Filesize
581KB
MD5618e541cdd624c51de17f035a0afef46
SHA1b6293d23b502f53fb9f8c4d963a8a58c6d5088d7
SHA256f0c02200c156d704cac9d1132b24a8f20165b323b25a6894a1118e7df0ff5e8e
SHA512a4302fb12e7fbe296d456ed87b680223ec81404a556e786e242ac87dbd6c066de75a4d9edbf59018430f84ad912b3a785629cc9c4b61b86295342e70cb92da51
-
Filesize
717KB
MD5001ff30aa8ba8381439f61179bfbf04e
SHA195fa9de8c7079cc4c4cdcb6855ce40b205192e4b
SHA2568be6bb9c87a457bdadb22c8c7427db981a8286fbd328d51198cd43f34a80ffba
SHA512a4336a9b569a74095adb244747fdeecd28edea64f326a02be289ef89777e92e48b687237c865984a9957d5aa39d9c6a314d01772e453d6063549d618e29a9115
-
Filesize
841KB
MD5d1928c929e9311be258243e21f4e265d
SHA10286039ec2b0200bc2c2fa46ae8d6faa3552a887
SHA2560cd8c317430f8de29fa5777479a39468ebb5ed29f01aaa379c7fecef97918f02
SHA512661467153ce02c457b091387a9235230f27f8182d64f2e842a6c3ecd1ce91e83dd38700d872f72f5e8b0d95c6ca00acb8d3effb334e9d516e43813831534fc0e
-
Filesize
1020KB
MD5a663d53b613fe670bb0b0600546c6a16
SHA159d180784e3889fb367bb855bcae7dbafa71a906
SHA256827513a934a87441629e0e1b028f3f54f481e4aadd950b2f68c616f9b82d09b7
SHA512f03501935a6748feac94f8181a20d7aa565e71a931c1ba5cb671a62b67da831b92586e307726f8736d1d600b968652fc16d1ae6852da545ce4b7cd14e1070357
-
Filesize
581KB
MD528cbe7512cdc7b3e7d6e2eea616c1c96
SHA105165829156ef7004a80fc77b8b7c9196e89ee64
SHA256a2ae66bff1e9722ca76731d74e40cff8ff588167bc1d8824705b5e04af03d2a0
SHA5123a48d22ab588d14b8a2022fd72209130c04c7e3da26516f293927b0575045852f4e75902985165b99b58f2680c25ee05cc002b8b506552be0d00640f3cf69fcd
-
Filesize
581KB
MD5c57609d5e3658f3905409ff1c54084ce
SHA15917c5da9c4a339c51df3bffd754357a279e4c3b
SHA2566b43c8a469907f7bd4d5e9a0b5169f3eea5b06b69eeac837877f70d8ceb7f86b
SHA512d708ec7ab853584feddea853bd5cac02ffc23cc409c69db993705b040d525b65f287a8080fdbcc2ae4078cdb69557ab07bedd29be09984d91b8ea445860b3e91
-
Filesize
581KB
MD5ebb978fd4421e0a18bf358b209b9e760
SHA168600848d1061017f614e3fc584911f3d7ac1430
SHA25689169c0229a54df23477e3347bcf44554b7e1871acf79bb70e72667678985e91
SHA51269e4df3f1e04b87a503e5c7a41bb8efe77c70f896cbd4f02511f979636efa6c55f5e66a3402d7d5ded2eec693bfd9bbe7b6b522387f78e206d1fd6738d644106
-
Filesize
581KB
MD5dd3adf9c28df8cd410886e5456d15c18
SHA152031b4e5dd50df39c6ef22f9caea44cbff7f5c6
SHA256b96ea3864a0db0dd6fd485c559d76ac09ec0ab515427fec8572ecb7f47eb3ff3
SHA5126ab64ef35d5057b0d4156d36549c0e1f6e744c733dce064e97e72f72f4903ff676bea4c584fa5b9072d536d4f5f55ffe9083c27e2da5106316a9bf292d7553bc
-
Filesize
581KB
MD50ed7b68c5127c52767d8734565e3b06d
SHA1eea38f0ce7746c2495630420cc6eae9e9d8eb11c
SHA256e6c940d6d01854460cad13f227854533d21e616c169dcca7946c4508154b93fd
SHA512fdcd09d435a818d8215c7dbf8f22b84cea3ee443088d3d33d946ff6e1ffbee1cd6bed5ad38afb7e72ef4528bb0f5d74dc0c510ed001d90cdc21f226e66eb6f8b
-
Filesize
581KB
MD59ff74c71d4890e399a02a88097757f78
SHA11d3b4dea6ea0e3f306556cfe6dba2ed6aeb833b4
SHA256f15b460850d3a47a8a65a19d6ba929d1ce71dc599c9dad27cb131d7e4610ce50
SHA51216c086c8a11a12be59d4b24921bc6a51f0d5052b7443d56a42c6000ee22aa2ce90c0ec132d7f60e036922a7f7c55d0341dc51e4a382823733b20b4dc3eadc052
-
Filesize
701KB
MD5606f8bde35276123b2ef247f461ae797
SHA127d376ba2ceb57da55a4dc2d95fc54504480ff8a
SHA2562d2dcb344fb3f4e20367d65f6774b47fbee70c350ceae775ecb3de7fa0c59370
SHA512756ef64c249d47541c40e71e6cf211889644d5f39253ccc17a10b5d92dccf1441bc1173b2fc79705c0420ca71019c501926d0482e03b7270be4faf8c91a0d574
-
Filesize
588KB
MD5468e17cc999ca382fc0711d8a8abcb57
SHA1c3741f600acd8038ea17f81fcad24f48a6bc2eba
SHA256626ea5ec512eea558afa94a51815f3079f799c15d15df5bededea2df8756f09c
SHA5128ef3f786cda146447799a19657071465ff4684a71192713512c59b216fa3d10c1451b13750fcaa4ab3f9d13e1150a82c3737ab4b58a437ab506a6ed298910fd0
-
Filesize
1.4MB
MD52a6bc0a76504dec1444ce8a46e9290c3
SHA154420cd26d76b95537b252d531ff97b0ff0ad3d7
SHA256ec922e926c071b1f2e00e2f6cf5bdb7b47681d70f21185d81a68d1367383908c
SHA512a3c1139058d5f2371da8061c172c1ae9e03587224566c67b370d292b710487945a9fdcef64dfab2104409727f75b700ac9abd821a220ac9942a25d2c7ebeb376
-
Filesize
659KB
MD5b54efa72a1448fcfe57997830aa4238f
SHA1c00a87d2c436f12d070fc8116b70b4bf50f3a4d7
SHA2568e2589abac015050efc5eb62bd123ebf1f7eb7d348e912b9237992a17601380d
SHA5128885f46a280407f23cfafba3a0c44eddce0b1c2fe6d98633f0b10fd4745aa8a287923bd0fa063a33222f189d3a80d34f8479b7cde766e62725b07658520c1f1d
-
Filesize
1.2MB
MD56cc5194a0f85f7c8b03bf58a77bc9223
SHA13a95647b4019594b740fb1fcfc342aa7d86d8ce2
SHA256040fbd10ab571d620f62acfec479161a67365f0f67f41b3ba887ddd24534602c
SHA512374749b90eb90b6aa721ea5a604e33a7767d4baf64823967c32377630156f19815a0c6891094e51315e57615a57285260ad51195162f862bc5b1920ab3cb9473
-
Filesize
578KB
MD5bb2c20b264ca1072386ca5a758ccc97b
SHA12b9ea7d9d050e168327434af83a4bdc9cd5e0ba0
SHA256ed6fc553ea7b9d46623c81b0684bc3336a34ff70328be1bb2908cf5cb20b4ced
SHA512740fbdf660dc6c32523a0d4e6d203e974d6675ff95a2b0386c6e97c83b70d8c0d265154f7b84a278e01d0d0e676dd6c8c10dd6fb566af70ee91609bc19e7669d
-
Filesize
940KB
MD5f6bd9efe7f9b6f92c4ae1934a082fa10
SHA143d226b10420a396798c169eef35333961758060
SHA256a3e3b2ad77e1f195978c860477dbcd00044de1697af303e4fbb588b8ced6fdb9
SHA512b1684def0870810e32a3ed044f803510aab40b7ae162cfefeec22e8f63bbc09c0a0c7b355e450376209825ee59abc6c4228bab9f28ca933a829f2e2cf3aff5fb
-
Filesize
671KB
MD5490f6d1b5ff722ab992ff5d1acfbb2d3
SHA1aff37fd33b592187ed443926522e4b1ad63008b6
SHA256db54687afc66e7978b48840cdb96164a14cf1d0f7c4afc625a3ca13c29f7d377
SHA51267c672f70c50df1fe3afe26cdbc2b1f381907c333f0d80ddbd53c5d7f4b16cf3efe4111cc25f37a487d5808cebdddc49be6478f0579cb14fc12c7e29aad34970
-
Filesize
1.4MB
MD5373348b16290d5930b4ff50e001e8fd0
SHA1c4ef48368a4f1766444f1c6cac184fbf85a6bc24
SHA2568474a2711064262e1e32c324fb6746c2c5567dcc02db1000f393e33959b1e4c3
SHA5129142da6527f0e3a89c3a8d371c39a1211bfebddc05281681108b6219ce60926570082f7ab665294e50fd5bfbd3f6667e867d11f38261441bde71c20b862873a4
-
Filesize
1.8MB
MD5dcd24992d4055d03c1ff1ec1e4e9071f
SHA1f9cc6a966c95c49978d0e3d8e3f6d95cbc5fa7e7
SHA256051043d0d7ab96973e8cc8621d00c6858103028f8b7f96ff0e5864ce93608bef
SHA5128f663d8ecbbbf9e480acef160666f6dc2afbe2892108e786337981c3f0a561d1f297c849a86a3814cd1378c7e928031f9bcb3530d08931f0f0eab9b001ced7db
-
Filesize
1.4MB
MD5fb009a93b98c8dd5fe2c380872bd8a7b
SHA10a41742b402961c8a574359a65cdfa8490bcf819
SHA256d663131245949144b0bc2cae2d71cc4efdb99cc28c947aabc9594f96b6df0799
SHA512c62c2be282db66d1c80ebf09c83a96e24d42f169e5b48bec87545c873ce231019776963fe66f690c2b6fade18599241fec33c706530783ec374670c4174bbb9a
-
Filesize
885KB
MD5116b72aacf6de868326b2d4c901e09cc
SHA1237d0b5d8fe14bf81cfc5abbb712c040b039a6c5
SHA256be6773046981a72d90cb6da6b62e6bfa54a3193573fea8650269bfbb744e5323
SHA51235a6d479f01e25f6dc37ab82ee4e410b8a80cd951115824acf24326a3308e93af74f158a9211eab5490dd71bb368b861d960941ab209c32e678b85d6b0d7b15a
-
Filesize
2.0MB
MD57976d7bc2cd52aac09f095c2aa450509
SHA1361b5abb33568f9e798cbf7397958c947d66295c
SHA2561edce5d464830e1d96c4607796c1020c61ec3d1437201ebdd5facd299554aa3c
SHA51257226855a827a600bb27aed465be32b662743407400c3f8013fdc82ab34158ba61fdb3e85a27c974ed6f2eac342992e5ec4b8c22c2d92af24476a0e77f348c8e
-
Filesize
661KB
MD58abd5e53923155a998ef413da24b3e9f
SHA1eaa299f0433871dcb3b9c51683881cd5138c98f2
SHA256911e78754341127e526dd594b52d3902f11d7fd122548e5b210f805c0f86f084
SHA5129c7b84798c31313aabd198b2601db84b1e4bb65b3eaef4786688e84f1c1d993c5ea831f0251e64d084555d197710b1fb5c0ce96c49e5ad176f4f3f93fe8e3d08
-
Filesize
712KB
MD531dd61d4ef1f7390aa365271a4b5437c
SHA1d18cd04cc4a7baafa1fb4cede8ae97f919e095cf
SHA25659ad6da60bcad87d6291848cf39baac97b32cc41eb181b80872c7893e2ee0dd0
SHA51271559137d5ac4448aca0fa95ea7613fd78e7ef3fa3339e44f250424917cf89d781c8a2c4b1b1796a0332cc13ad1c65ae348dd995c6f6b80d25bfbd4a63388c4d
-
Filesize
584KB
MD505350f68ce66c037f917b7d1ab1aba32
SHA10d34cb58f818415cd7726fadcf3f55a75ea7cfa2
SHA256028016725994d8d37cebd4de9cecc6946b8aba15796231701cc2953cfa01dce6
SHA51247c73d961ade21d9be3ae78abbc711eea379a2606d3e899089d121101e66338718626d4449c76d95d47c22b83d4881c8f49d033b8e95391846fccfcbd7b96a05
-
Filesize
1.0MB
MD5b2b45cd852031a82033378e093ff11e4
SHA198937a0ce48fbf596446edc22f9b6804a3726842
SHA256597db0b18f9b4d99d3b810b2102f1cb1b77fc710b02d8b596652177a325f8a66
SHA51254ffcb520a34e2e77f7eb7c9ee9c60ecc6ccb03cb90a9d2c9246c678a7d966a1c6c284d02ad4cd363099d0b7d7f80dacf38f0417a8abfc6d268ba9e8ba307a68
-
Filesize
772KB
MD5350f6e92e4e8f5b794b25ce1e24f2771
SHA1025e03b027bf120bc142cc3e62ee6e721adb80b5
SHA256ce3f9405fcc27d45a52b38637a724edf18f93d986bc3228a1929cf016ad3fa4b
SHA51213852fb9b8fa9be1a86f4e1c1ab340a6f2d9f6ff7f9eb4f0e5ba5f8fffe646b01410e683ea3d764ea4b93697fcc29a821cae8b549d2568f78824d889724d6fa7
-
Filesize
1.5MB
MD559f4913994df6e74d0a1c64f88560d1d
SHA1bcda7dc25295bd6da75ddf5bf6bfbe8c4a0e09ec
SHA2566b6790d4de9ca0e5c87298983b0dc024c358707d10ea29fada120f1906b999a0
SHA5120ae3a1cc5a3f518286462ff4554f2705803ec019be0d4bdfb3bc23b49c0f643d3a799de1f8f3d1abc81100d06d261c008a933c495a6398721b3ed75d1c015f87
-
Filesize
1.3MB
MD5e9bf6fc416a0b0c8234f93e1335ffa4c
SHA1e03b181811ba0838f0bf2694b9a9408c48211722
SHA2561ed09565776cc9fb4de28da797ab81095a18b4d70365488d329e441b5cf71dee
SHA512ca88b1a3e1ff906fda851f3016f0d47055c8488797f070fc8399b9cd57dd65c61085c642845f4075f6fa73322a7e1d2354cfe4c9aa158b046cb1403d8e08e039