Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
135s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20240611-en -
resource tags
arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system -
submitted
03/07/2024, 21:43
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe
Resource
win7-20240221-en
General
-
Target
2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe
-
Size
677KB
-
MD5
079d17694b6dbedf638fe580eb41c265
-
SHA1
22c1cb22ccb9885ba65c00befeb37dde40a56bd5
-
SHA256
43b75b436144894a3e095030fd5011e7aaa58d3d7f28e9b12d4a61cc1fb99933
-
SHA512
576b9b58e95963ee5c71eb3ecb96287650493bbfffb601624ebb925eed6e448b8feaecdcf6dfd2754737e2fcf5551d1122b4ad93da991d0f1496a615ae53df7b
-
SSDEEP
12288:bvXk1RUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8n:bk1Ratr0zAiX90z/F0jsFB3SQk0
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 4864 alg.exe 956 DiagnosticsHub.StandardCollector.Service.exe 4000 elevation_service.exe 4980 elevation_service.exe 1416 maintenanceservice.exe 4564 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\ae567e7d4bebce60.bin alg.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\chrome_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\keytool.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\DisabledGoogleUpdate.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\plugin-container.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\Source Engine\OSE.EXE alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jjs.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsimport.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\OFFICE16\LICLUA.EXE DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc-cache-gen.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jconsole.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdeps.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdate.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\klist.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\kinit.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe DiagnosticsHub.StandardCollector.Service.exe File created C:\Program Files (x86)\Mozilla Maintenance Service\logs\maintenanceservice.log maintenanceservice.exe File opened for modification C:\Program Files\dotnet\dotnet.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaw.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\orbd.exe alg.exe File opened for modification C:\Program Files\7-Zip\7zG.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\klist.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroLayoutRecognizer\AcroLayoutRecognizer.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javafxpackager.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\private_browsing.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ExtExport.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\ieinstal.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javaws.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateSetup.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARMHelper.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\MavInject32.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\idlj.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\32BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files\7-Zip\7z.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\pack200.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 956 DiagnosticsHub.StandardCollector.Service.exe 956 DiagnosticsHub.StandardCollector.Service.exe 956 DiagnosticsHub.StandardCollector.Service.exe 956 DiagnosticsHub.StandardCollector.Service.exe 956 DiagnosticsHub.StandardCollector.Service.exe 956 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 660 Process not Found 660 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2852 2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe Token: SeDebugPrivilege 4864 alg.exe Token: SeDebugPrivilege 4864 alg.exe Token: SeDebugPrivilege 4864 alg.exe Token: SeDebugPrivilege 956 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-03_079d17694b6dbedf638fe580eb41c265_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:2852
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:4864
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:956
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4000
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4980
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:1416
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:4564
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5fa27b802eb74f24686ae8fe52ff20c3c
SHA13db66e5450e204ea353b264be2263f44bce4b157
SHA2569d4c32aa24ae8f0692e1bd0ccd366b4e5d4a1730471feb12ffb048553fa4e9aa
SHA512b2ca30dc469d2762ace0cd785017aaa2247aa13f961055ac1d39733bceb965f7143474dfde837be53c4e359265543f1372749990ecaab3372bf749f20bd6a83a
-
Filesize
797KB
MD5d617c17ae4b527efb04d41b785b4967c
SHA11129e333d38a74ea7a5ccb4c2f104527f2fd120c
SHA2566725f93d37d8056ed810030ba7eefc3d124387c450e11a94196b5795a40643b4
SHA5128d6afab289fcc8c519996f4fbd67a75478c329b7d4f0c47f52beebfa5e019c0511268302a728e3eba625db3a5cb8f2ac394633310fa54617633e2f84ac233d1b
-
Filesize
1.1MB
MD5fa5f41f7c3b643bf4a676d5ce4c7e3b4
SHA1ecde993ba8583271977895f6974b43ad869fa2cc
SHA2563440eeb30363c7d8411d7b8b7c098a77a324c243699a158158df5fa68ec6702d
SHA512212222e1e8e627d122500bb0dc9dac1e6fe8752bc8ce10d177fdc514dac4aa17949dd7dc993ee6f263b0392dc3b84118ca46a8b723f99bcec93bc65db6f4fed4
-
Filesize
1.5MB
MD5d600d5fdeccd035d30ad967bdb918105
SHA183f1bde60b1751a72497b2964036f0ddb3bc1ed1
SHA256b9d6d21eca28f6e6dcb5443c430c8524f00832656f3e3c5710e5643cddd0aed0
SHA512642a9a5b1a312682bf25893737abe0d3e68004617e264429ac8b57f6b73c899481f566f93042f32b74292397cec2de134272551aa3f56e71d34dfa8726fd1c2f
-
Filesize
1.2MB
MD57895ecd31954bb892287f0c3536bd6c1
SHA1043d95fc578c7936347fb8dbc525495ece8a6cb6
SHA2565ee06417f2575c963203c04c8baf215041be256a5baf44a5b389faaf61bd165b
SHA5121f90ed768aa60fb1983edd92b9a3ad4aff2005919637d9365e9084b8fa0145276dfc362508b248c16bb98d0c8416be4e7b0ce49ed49d381dc7cf2c22a12b7dce
-
Filesize
582KB
MD5e5ee300fb7ab84a7e4804561f0f44020
SHA159e6615962295c54a9072eeddfc8f1f38ef6848c
SHA256369f4a8256ab3e1773ed003ee9ec96e90a7b494b41fd8623cd8e64e30cebe81c
SHA512e9b3cf3b7cdea61722c2186e7dc0f2b5b1a1fbf714864166ac41de00edb254bd3621d184f85a4761b8f61bd921dc62352511c3f51411b3e9571fdc4d9cf8b9a7
-
Filesize
840KB
MD5ccf6daad553adacfe023fd7eae8905da
SHA17f9da2697aee776f681d5b9ccb6247c9076d5425
SHA25642288609ec2de5b33161b3ec1b226f8ac5d8d52b1b3052e74bd50f27a3ded1a6
SHA5124cdc93b0083ae64b8517b3134dcbd56f14c134114771dde1ed52e68ec028bb7217bb90f7e8bb3882e27dac69136e640d93321febb7cc2c8a478a8e1b9fb210ef
-
Filesize
4.6MB
MD58695ebd53011117a1d8897ad5d514999
SHA1d42d97da715aeee208d44e4825d9a035167c4e90
SHA256e905a145aadb444acbbe587676d5267cb0bd82b378e52848bbb74d9b1eda4128
SHA512e8b7e5c881f046dae350ae60308152c088f56571cbf63dd3f5c0bf3eaad171c7f2b80c47a9d27ec29e52f90204bea23675ee83781b4c7c68cfbcaed1be5432da
-
Filesize
910KB
MD5c38273fe1fe4bc6d6881f100ebf910dd
SHA12c16d0989d9c57f5346ac7706da8e01305ce61ea
SHA2562bd3423c39331ff46061f4de0921653021627627a3ed59c70fe548c8c7d0f240
SHA512ca232bac9512029ab76b7fe0d40fa9c5cd1f40613ff6e9f98452a280788e1c7f02c04ffeabbcdd34ab92408d22341593e627936435ace1d18edf662ef85bce08
-
Filesize
24.0MB
MD575b4ccc533655cadba5dd4ed41d2563a
SHA1177558fb3f2c2c6ce5fe1aced83542cbae9c61d6
SHA2561fe437f6e599edb87d07207bd29fd5d2ae6f60832754daf2ff515baaa3acfa9c
SHA5126357d70b9ad87a4a3731a312dbfc1f19743c794b3b8f6e5dbb4ddbbe2df659ddc4ad8bc7b54221c7c69a44ef897eadc9d60184cd2f92cf192e35e5ebbdf75194
-
Filesize
2.7MB
MD56ede90d2da97af9258e53fb8e98bcf44
SHA1d863d2c6b38172f2259cb51e21be468bb506c8a5
SHA2563c06f222cdc207f96db3c0a9c288d3fe11666c278008085f52e79620d09f2162
SHA5129667fe9a6c11cad97b78e45263e1efeaf2dad11145880f486deaa4964b842fffe918ada8cbe5e95aff1efec1ff7250c2bfa6a23006b9f6a0aa4cc8cdb47cc25f
-
Filesize
1.1MB
MD5c6554ba72d925aa33b1d284a150c0cb3
SHA1135161f995eb85659357a09e384f045e603f9214
SHA256836a95a257210fa3160cd371e76b40410fd451f166eb3ca566c05a35e67785b8
SHA5124c49df594fb9bb4f216f301372ebbf64534858a451169445542bdcc1ddbe837ca7f4ec0f645156bfff6ff4cc2876bf996e19523b7e810d3022f7bd903ae10b2a
-
Filesize
805KB
MD5308e73e8fb5f36aae91d772c48a2a0f4
SHA1e2360b639fc32137d61a46bb7f4f7ed9da956569
SHA2565e2b9a52f8fac4662405bb1a69b5d04bcfd31e8c1aaceee9f229e860b95c0dd3
SHA5123a1e9b92d9c642a11c29e4fde484c940db3c61c6e3c7c4a57149e86a40e9f50debb737269323ba27489ddcc9e075c9c804b3e20501216240aeb36219e23e77d5
-
Filesize
656KB
MD5f6582fdb6f41cc234b6ef4d8230cb272
SHA1ae72339582aa3cfb933c3298985e60453b8440c6
SHA2567a967ea665422acfcdb1f509a109b62465fd0663946320ea35fd4be18947600c
SHA5128a7e4d9d6ea2203a808b7e9cf40e692dcecefda6c6eb16f400d6cc1f2753ab357c443e044cef55e99223989d719120fe18f6984c34b34b5ed80826e776ce1aed
-
Filesize
5.4MB
MD5470d7a816439c895265ffbd994f64798
SHA1170591e12f62ca847c3e6e61b855b66971bb0785
SHA256b6e1d24b63d1cac5afaeab1b7715c14a4acf3fce142d9de465054e2cf5977dfc
SHA5122e8777e1c52aed16b2a1235ece8a9d9ae9de1693915f66e265d270bf2f05dcc1e5d50bb12a83026fa4bea328c013d5dee550377d50640c5b30b2513f067780c1
-
Filesize
5.4MB
MD55316bf9ad27eef277586a824af2412c0
SHA10169a7239f7317b65f264f48371878a2d2e9a4ba
SHA256b7f4b08dfac88bc6d3e6142e9726cc798258e4ed7c42365cde4ac5fe1f7c0ee3
SHA5126adbdea3758ec058fa9b5c38c340b417c57898de70c403d5351948adf67b42e8c5863d84ec3dc9e0e4382204bea3ddd8d972afcfd9e2f0a309a0b8321f22ba84
-
Filesize
2.0MB
MD57bc2b3dfddd1f7f0450e6dfc255937ac
SHA12b7f07877ca7b608538ec4bba9095a71116c5a83
SHA25682b6eb9170582bae01ef70dd1d53e2d489b3e2d4fcc410217d89d2b4e8acdc04
SHA512ca8122bbb270612079492aef8565c5778aa045d6eb8a8628ccc21f5ac9179fa0fca10e18aa61876ff72bd0259779a9acf1c6ff49e468875d2c45857920b35862
-
Filesize
2.2MB
MD5fca36124312e812fbd233fa72dbf3dcd
SHA164ac6e806fb098cb23fde47592a5dd9e1eb96133
SHA25698d8667ce43b744db007d70704d08601324761bc6b61650f4827b09648bdaf37
SHA512f268a4af4220bd5f0d3676c8d8d28d7daaca0abb19d36b3df348e1533af71558eb6168d1aee8b32b7050c87541a0f96e3217d48b52604c79b389e512975fb4c8
-
Filesize
1.8MB
MD5b41a3e8ffd9f42a9800b928d738244e1
SHA1a2df4f082c50a0c662809c8e905779c5a9bf8351
SHA2563a7144dd76a5d94c773209d5655516e55c261fe74ba9387dd2ff7bc885621628
SHA5126af5f2ed127d092bf0ebea3e4cee42e19b122925e19031dfc53cae8317cf296e1367dbdd01a16acfe159f821da73c3140297ffb02ccd875c1992c0e6527df96f
-
Filesize
1.7MB
MD5d3d6fb5c386b75b8055ec8f4537b7fe5
SHA15bfbf5ae9798c7238afe346072749c8a6dfb17ee
SHA256363df8ac1cd976fde2fd8963109d803e431372d00a6de229b5aad934b22ba2b7
SHA5127d99604ea708da87d049e4104a54317f3986b91f05b84d41afdb64c79c8835ab026dcd39f52f2ca8a2eef4303bcf0d25c1aba680a06afe279b9e03f586376008
-
Filesize
581KB
MD559ad87dd454c8f07bd124fb541ad6223
SHA11fe609e012ae2768eaa698ed66a0622e62ab277f
SHA25673e17acda3c84125dae686388ab364fd3244b49d825464bfe46ec6fb3d75aff7
SHA5129959be924128f7d6b7b137546699973995ac28f2e2a131a5cf166319f97ed92534dca740a66418162e08ff08c33933bcb979b399f6d5fc09b3daa1a7078216f4
-
Filesize
581KB
MD538950228a32108d46107bd797fb1c578
SHA1469eb96142dbf45b146c3cea6de29fe1d5017aa0
SHA2565cba195ef6a68df5d552940798b654b80dbe50217c5f2ab79c55da785b353672
SHA512287bc2e408ac8513ebf218cdc291dfe7861455ed86f9d52a5acbfa0b7b00930c6493704c8476b9237874d74f776420da36ef151b7bcd838220ded91611b3cafc
-
Filesize
581KB
MD5970b6fefeddcf9e4fb236e0b62d403bd
SHA154c085892a04814b439a3f978f9a4dc4607eee4a
SHA2565564b9c6aa92dbac080db5dc6e09fb01d9dd0e6d5c76e378288d1d012a8690b0
SHA5123a63e091a11ddfbcb991569c6a26f1095d4021f221e92972bff6b4c46b39a17db7e5c237b9eb747fab96dab450ac47e8923439f0a1553e0f92b0316613d73c5a
-
Filesize
601KB
MD56d0381fc4ff13f6d465c0774e0ce1c02
SHA1c13b67f6953b6fe000bcf164b30ce8ccb8d11d70
SHA2562e3ac9eb377ebc57c6850a1405f25adb3f0982771f5d9d18b5d7267ea754cbb0
SHA512e49b1c384e482968b12e6f82b76ff8f6080a6d41b5d741b807794b026aaa5a8e0d3413a8af7bc3e0f24079ed833c1bc0b09aff1f2651829b2c8396258debeb66
-
Filesize
581KB
MD51845bb5a04f5e415916e71627a25960f
SHA1a31531b3bbdeb694e80306a295ba006ebbf29a8b
SHA256489c32ac8e06e6f48502c22e446b6ef45a1253c8051cdaf5778674a7b681f027
SHA51216f9954e07c0d9c4ecb030bb4b9034c0f02e86b0f389a91ead1d2d16468b829ca632e17530f6dd2df87ea5e9adc9d2aba76bb5d5e8ce9b8e3e25a7be4c84d57d
-
Filesize
581KB
MD590fa203cbea638f428c86ae9fb821e98
SHA1841fd5ab8b78c6bee3b54313f6657fa5613e0c15
SHA256afd18595ba63649e63c48fa24b5341a8c0b27df22fa2850c734ce6ad683eba72
SHA512c58f0aada3bfcff3593ec8ce55df5b75f3b330e55222f2394f507a72988f607b5d3d7b56177e5407852fdd990660a64bbaf2a947d900db1b16ace47142fcacf0
-
Filesize
581KB
MD5e19d97fba20c59ed4afea27ba9c3edaa
SHA1fa291eec346f6d0458c8d7e2cdf84ff883cf64ce
SHA256c320c405c2e4c6ec65df755265459e2eaf818f6129adb5f5d1f8528f9c7e0bee
SHA5125a1826e7260053699cbe513aab117256ac17cb02049b5595c60a3029a7b9bad4bda4e2b4a4b2eea8b0ae510b571cadbf19b9287e7d7ef6057939a31c7edbc780
-
Filesize
841KB
MD5de1ea0db17787ab3d6e194014934ca8c
SHA1ce19135914f7617d0f2dd2e4ef73546fd27aeb9d
SHA256d05136bb8ffa59b55895603914b8c35c2e392e6d2ff621301b55b18820e3f650
SHA5124b7d44167f143b4c7e006a13ad1bbd4738bfdbf4fe54a9d13515754de995c3a0fb03d2031c73d9e9fe57317bedecfd5d8cd6bc31459d82fbcf4edbfca97bfdaf
-
Filesize
581KB
MD58a62bf904d1e2a8af8c3337b8bd6de11
SHA13257db9948ea74569fe71acb6283b3f18152d4d8
SHA256f2d4d9182ed1e2480aad847b2a018f37e4673321f2c8844029d559882ff4927b
SHA512765673f78fe1f29a02284222f03ee7142811438246a8e508d0f81201f16e859b06db1e269de0e6194af8b1e9d6b71be4eecb023006cef1300cf7dc64950f32b6
-
Filesize
581KB
MD5c1aa55e9f4118c2f57220b5169133051
SHA15a3f0ac5254b619dddbf853d1394b5e0ac56d385
SHA256bcc36b8ba8914517dbe5fd5f11e8191513352d3336b0de17b2621e92d5645841
SHA512143a45b7d5fd2be33d5cba788965d75a9b606d7cec526a1c5c8ea5fb610e25c3be68f97dffb475d6fe6d8f4eb1340672e035cea9b0f4eafa3b6f1b61d60d0a54
-
Filesize
581KB
MD52f291dea15899a5156b97e745904a421
SHA194645b0ad36bc023dca29c439a7760000c4be7ac
SHA2565fecbcbf76ca38b07444cc76328a52d7eca934c61b1cca5da6e7b5f1413bc94d
SHA5122e4a74bc78b9a75c38201f2f33aad170114fcafc831db080fba63a924a4b1d2c3fc5fa8073d2c9c9c992b09cb4ae64ea7b25f830350f219239ccd11a08ead104
-
Filesize
581KB
MD5bf010caca8e645c41339b37797bfd1c8
SHA1bccc881fb913fbfed39d59264996e93861e95391
SHA256f142924886ccc2532c0a8aaa3ee2227a591a87e7b1bbe29d0874f53505982fcd
SHA51270e2b5e697a7c1d2a7169ea4368977f8af89a5f9d234501a9a05093779307b3298c9d3cd797132cca806f0310dc9cd51c3a6a08d826d34dddb6fc380d2f3ec7a
-
Filesize
717KB
MD5ab4d8fb029bb6b1f5dfdbbe689fb6ab6
SHA1573dcc1f478d2138c1992b71ec6aa2700c26353f
SHA25623128ba67506aa4bf0646e3ce9f4fc3901df9584281540d8539457aac1381e86
SHA512f934be7142a4c5468c37a4a49ebfb468d0e767dc1c093f915412e916066d06e30569f734d2f9b0d34d17c6d9e712fc532344f7afd35104df3e73513d789ddebf
-
Filesize
841KB
MD56be1aa42d11c5e24a943138ee57d64b7
SHA1f0127e73a6ef0b232908067bac3aeac0cf396166
SHA256b25a0e5e59588bb1f3886c14f75cc1ef357e15fe27833876f5ed62df68300dee
SHA5124d325ef4d9070b1bbac9cec8e6e1e292f7e3ef19e02f6ee706cebd58577cd642503f49c9311d6ca946ac25ac233200517d0afd9c10099ea99c60ca8a9e0ea23d
-
Filesize
1020KB
MD58dbc7a420754433512be1f0c0e409448
SHA14b46cc8a93b2df1b30586d5488d828231d52ec74
SHA256513dc2065a4043946ac47b3342d59d4e762bc09b506cb30962bde0d7065052e6
SHA5121f36199aa3a097ed04d8cb672ebd9fb9cc65c997d85dacff6c386fde6536ec43aa274a508a8b4293e44568fd4a21d35cadac807e631aff201349a3e15de7ddcd
-
Filesize
581KB
MD5dc52c3163eee6057734d45a6119552f8
SHA180ef6aac94a65009706f5aaff5bd54ac78ae3dbc
SHA256076ce6d7d8b854905f6662f68b38205dfb835a5361c6843d92724ca584e8f76d
SHA512550f1f0955c22ac2a959f66ee7c8b6b1845addf94d13eb82f43485139e8fb099e2ff8f42b9352ade9999bf79eaeac092adf8a6bf8b910b543267bc713fb162e4
-
Filesize
581KB
MD514abf2960ced20ed2b0c330f006756cb
SHA1e989124c1e63ea0846d6254fc0ca0421782646be
SHA256e7b42c3a5b5c8d5d769a780788056fa3d87fdb483e53d3be62fceb48a608ee8f
SHA5128bea7f5738a13b2f6905ea9469c8c2e92d4ad27cc7ff364a6deec8145319f1ed703ea12d472124cc40352aea84dd3ff9493cf6b4d59d39409b8625ed9c539891
-
Filesize
581KB
MD5d55cfd5ffbe57c07ab6debef428f634b
SHA15298f7557a95e1294af30cbe6c00ca124b3e9e7d
SHA2562200b8379a254cc582cfa786bcab8434adb8d467e5e2e8cea05ef2c339be847d
SHA512226d0785e3bbc317476e21450fdf0db3815cb99140bf3dadb691a5b3ad05fb0054768715dcce834f8792abd76fe8971ceeed5e77be95b8145d6b23d3f82669e0
-
Filesize
581KB
MD5933e02a5813ec05c378243b2f3829742
SHA1d80f8f800ba5930c87e68d85384201bc918d0741
SHA256e83d1c43c981391a097c027d73fc5361bd7776e73db4f2486c33b253d17e4ef7
SHA512000848a88f13fd5fe5fdcf1cf008c97c252c9d37b2da0514329612ef56367ae11f37fe0fb9af6ec590630d940b8afe980d7cf90f7fc734a1429051ef73102241
-
Filesize
581KB
MD59402016d3e65713f7a361ff184813f5c
SHA1c5c822f5f027dea74e7db388dbcf69712a7eb887
SHA25673e59461bb1a753b9a75efc84ab97a322635fdc48c6fec9fa84088e951bac730
SHA5126be58676ccd9fd7e8fc49a4d8d41a8cf64e67f1ab5566f2c852060cb99c3c40052bf00bddb964e4c0fc581731426c1836d40770ebf21d17e3faf01e77a3cf5b5
-
Filesize
581KB
MD588edd3cefbb0dc3215ac32d3100aa6f1
SHA184f8f35cf4428ada3fb4bc5c3a0a55cc0ae85bb0
SHA2561c4f3e834987b9319d7bced38557dd2cdd6c39edee2d02be4bfa62eb9c7b5c78
SHA51258f7c575f7a64526e2bda790b1feb58b76cab5b7d1eff121334c6d23281b7ecc138eee36d0385b2292b068525918e18bfc4336cd39e644253b19f709ec566c59
-
Filesize
581KB
MD5ae21dace66e0686a058e61b68cec1446
SHA16e59b05ae03bcca30b8f13a26295a667ecaa1e3c
SHA2565a46eb41de1c5d905bbb9fcd0143e780977b4c2e47da8bbbce5a9582db1e9f67
SHA5122df4720cb2ea21321ed8f58c514ff8cc2f202096f2b5122f482deb4831e304c9848646ab1babf96584fb9c571fd6109942acae82ed70e162710e81820e48ae28
-
Filesize
581KB
MD5cec9a70a6bdb299077fac0b2c4f79378
SHA193450acdcdc67a995fb4a35cf9a130ef308cfdc5
SHA2561e4fc55d7a73fb9bbeace68251537136925abef579cab87abe562be7b7a53f2e
SHA512b93c7e890901c22c95d137faab0e933c674323c53f636a65d5f05e2d4b6f8c541cd918967115a10cc9a51bf0258273fbd27166ec7b1da204ff07bc8b372a10e2
-
Filesize
581KB
MD544349c1c64e2f21cd93474e302a96acc
SHA1e268b6f33cca946ccf94d9774f502792d63f55c7
SHA2567b0d7f6258d007a1718734c62c68786656247e0cb03e1a3a08cf0f72447f8fe7
SHA512691d7cd7d7148cd2c6c12a579e0668a2135f4182b9982b9f2e3ab0fd5779b715e14d4fd7b0a3dc0d41a48eb0ed98ca7fd747c1267559ae1166f855a7a52c9c07
-
Filesize
581KB
MD571c2f82595363289d1b655ff52734579
SHA19c22a283c556c1f5cb7447ba1b996d208f9b56af
SHA2563f71e05c4aaa427bdee50ca1ecb0e7a0dd61212254d22ce09d058cf1abaa908c
SHA512c348f40987f3cbb487fe8816151019700aeff346acc153821c5e2ce6740163cf1d365562957138544127693ce537cbff266e9b21779000beb111e2ba40c81475
-
Filesize
581KB
MD5b06ec1e019a1d31adebbaf6ac5fb54d7
SHA1f0061cca26228a541b51e8ad49720b58f1e9131d
SHA25664520014515b7375e951ccd551de2ff089ac3e338a8199056db9d61e68a99740
SHA512517daede235a16a33a0f6d711362a03dc0b1ec799aeea845a6df3eb311180da6a91f1d4ede66eb941626b332e2119a77564c69b7aa332194d7f08c2c1c6c9f52
-
Filesize
581KB
MD575cf12eb37659d4c601c21e1d476772c
SHA1645576b0d07e5ada452c1fa425602a8e6cf8879f
SHA256627fe7f96695d3453a52345223bffe933e475093d6b8cd9fe1f23713de70536c
SHA51251b1463c3273f3e85d874bbc0e513083aa0b449c92946fa99a12d4fbcbefb1393906bdce4968b6bb548841770faeed90e5b8caa8204f0cc54614964f54594968
-
Filesize
581KB
MD589c1aa2530dc50b27a1eed09e04cd582
SHA172d70628ac977b8ad3b4520b4ec7291f4dfb88a2
SHA256492866622998f1568d81a7f7a46268aa6f60621fba2e9454e1a22859ca529ee5
SHA5120a132b71d8cbbeb0aeceb3769fc089448e601be8cf1eaf295085b0a6859758e367f5a9e7bfcd774bfc22e4827b3ee272d8edf60557a20970d954903813b5fab8
-
Filesize
581KB
MD5bb135846fe3a005422e367c0c604c287
SHA15d22d75c14a5e1fcdb071b40eca757aeeb9fa6e8
SHA256937489265e26e14cfda393e8269e67fffdbfb178124692502563ee29d85ecbdf
SHA512adace301dacd88cb048d6a39887efb55a061d518c9ae4a98c25f033b1789f8825d6561f5d4beae0b960e61b0ab65070333ac2db2a92758edab0d8a6a3c028d80
-
Filesize
581KB
MD5bf852bf95bc32f3beda8379a18537ae6
SHA157432c2e8b96e3803bcd3a2739a31429616e7dbc
SHA2561bc2ab097be5380a4a102515d3a1ccdac97ea848eefde70b12fb0d387176fc69
SHA5128b7717119bb7aaccf9a38d93f9ee2c929519483eb68de8359029669a904066ae12ddfb55b2ea9a00c381e6a6222ac94a21534274c8ae9207523b8426d1a99d84
-
Filesize
581KB
MD567a9fe301213ecf2c6b848da754166e6
SHA1af1d0c371189d253e42b93f0056f0f5b6ce7129b
SHA2568b380e859896a72c50203e3802a4fa6415b3b3a868f3b532a98e0b08022680ee
SHA5124f20372d0baa409da6636a7ce931a296da16a1a9b0fb57ddddc9c611635142f04fe09942ca6431454f5818275943e6e4ba9753ebad95eecf4cc0818bfb2f66fd
-
Filesize
581KB
MD5fe30961ac684b371c9fb64ac580bd731
SHA1994cf7ab5284a2de776fde41ad3a875c8f3431dd
SHA25600a746b4ef48c30a9a18c23a5705f149d561fcf20bff1e309a5124080d7ecf4f
SHA51265edbbe890421a304d14a25ca261db7b7ea9fc5b529ef7f6c1cfc8df3838aaeda9878c3302b188f3666770ea6b1f813b566dd5805327d9842ddfad07d24bfe96
-
Filesize
581KB
MD57014b4d4c679ec274f69511f39fb72d3
SHA1aea2ef38b57f07b8344fe21336f52f88bccd229a
SHA256e6a0c78386823a7499b2c647c8b9099903372decd40ea7920d18ea29d027eed7
SHA512a681f6b0c5ad3da214900c43fd3c1817ea63e309e2929db7e3a6ce54248524dc12d9e896318481c991a80df356a070efd05538cdfcdfb42d3056eed337acac2f
-
Filesize
581KB
MD521dcf80928afacba07dfba13bf9e683e
SHA1d6ce0331364924b2870fd860a35d291f0aeff56d
SHA25675625b396a9239f29f75a4a795d0e371c04853d63b1384e4c6bbc73ff4c10f70
SHA512bfdbc1c5928685c6657fb6364ab8e573613d8f5571d32ebab15e9c237e49fafc37ba5e4ca8069c9be116575eb9c4b7f018b62b859a6725d8c6c142053e16253b
-
Filesize
581KB
MD58a8f181ea53135675522919a919d7969
SHA11710970bd7e944b0d1d5bac02b83220db914639f
SHA25676597072f692b03a368a780a716821766c699b9348d64fbf3ff4f43f9ca46616
SHA51277899ccee7c3ad102ed10f6342d31400153f252840488c7f6df61c0a2cdec4fd8c86bcc317657570529fe62a5b1e3a3a149754b9f315ddcef06c81fbe886103a
-
Filesize
581KB
MD51fe6496845c57a0d7e4021c1654e556d
SHA18a78c29dda3fcd376a231b6c1c08ea3b4319af23
SHA256ea11aca722e15c91f639905954f381d11b5aafd738f553aa631fe51a6f819831
SHA512c5d4cf05546d1b7d658714eb12455beafc214a359694b0290041d7e7f4d4f7f3fe44e0cc5798c8a78a4df108cb6dc31b3e69661168e077d9ce11fc6d4ee90350
-
Filesize
581KB
MD59e8626b84b68ebcb28dd859f64f147f3
SHA12f9969dcfca4785beccf6baf2f53c6c8d44928d2
SHA25637db2b2d777490f97984ba0995e7e0a700e8d65a33bf72716996a50abeccf52e
SHA5125dcbbf2d19bc982d14cd77025ffeceaa2733bad96e115e34c61260383036660d618c5f82ce316ad14570fed535de2251d9f9cdf25bf8de42a8a8d54f31453814
-
Filesize
581KB
MD5d912ce6ecc03c3dc9cf1c101547bbf98
SHA15c9d8f8b3b9cb936f12fe191dc38d8daabf06311
SHA256a3c06cb501879238f55123d690200fb3279f880576593210b26e76b87ce74101
SHA512a2539345000a3b08627d2afbb8d55a4a05582cccd9e21c1aaa08acdc3526d2dada6dae8c2d9e48910cdc376160e68901dc4c17e7075f9e24a2b4c1b9b7410732
-
Filesize
701KB
MD5eabf11843589ecd6b7417f07b532a7b4
SHA17ad50673d54daa79d183e91e74a74bf141b34736
SHA2561f1112f68d16a357b1b25c850cf3e1f336c51de3bc11dd81a58265d67c680ea2
SHA5129ac8835c4c691a4e0096011d379ca805078cd3cb2b490d62a1443980ee971dec71cca4bcacc33b9c1c2e398c299cbb9e3746b1e05003aab83b13dc5ad424bad6
-
Filesize
659KB
MD5f0b75e15c85c5c63fab72424cf6fbe7b
SHA162a1ddb494547b931aa12de5e008356dce043402
SHA256dadd493db303c1dd33db45147a9095e2c4f231b323425c8a2087065e9ee208de
SHA5120ff1abf5caca77ac26128d3becff881b747809b49f33342bcd7f794835eee4aee3e063dfe84bb466cd6c96f35683af25a5b65b34207a42ff9e295d47becf3b59
-
Filesize
661KB
MD5bab9152fd4d250f4f73b603daac9be9e
SHA1c8c2964754d3c3ad8d834a0b81f4651b7dd28b7b
SHA256780d98d61c45323cb178edbce73b008b820821f496ef2412ef2e430cc5d16262
SHA512171c9ee9e7272a5c7e49b60dc0b9fcd072555af5ddd522c57de531c08ab1af7345e4bc4a2ec13f42b67a4c998d12704e79e1ad89b26a3018881369c105686bb7
-
Filesize
1.3MB
MD5580c88ef25e936b702ca815e2c24358b
SHA148efbf42ad51e4e5e17ea4302640c1e9124f36eb
SHA25628f247a85e9d14edc13a06470f62acecea50dbb948436962fc218a05bce450f9
SHA5123d0f872a0dbdb7528791bafab9dbdb9cb62195349f87e6c43f55eae4354866b3fde590d39b998a7841046c16a0cfcae6161f9883f50131d231c573b2d5d6251c