Analysis
-
max time kernel
149s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
08/07/2024, 15:46
Static task
static1
Behavioral task
behavioral1
Sample
2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe
Resource
win7-20240705-en
General
-
Target
2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe
-
Size
1.3MB
-
MD5
24e816d738031190104a31f63b5c5166
-
SHA1
5a9f359c7bda7d6bfeea9236a140219494900e04
-
SHA256
566a4c51f280010714275d232f9b8e086ce527aaf6bde00d455f234dc9b96cda
-
SHA512
a7eef9518d6801e0cf2755e1827d9fcff85b9761e5d7aa0d5d64e2531bc1279d0805c3de591b189d248ae7017c91356deea678e0123b855c4ea64f1e1c827053
-
SSDEEP
12288:evXk1X+lCFcD1goThydrWUeB+QChZsrwbebPeVmfCUqVfZbdbHFK:ik1XUOoTqy8QCYrLLeYKUML
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 2932 alg.exe 3544 DiagnosticsHub.StandardCollector.Service.exe 1348 elevation_service.exe 2880 elevation_service.exe 1588 maintenanceservice.exe 5064 OSE.EXE -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\a9b246e316be280c.bin alg.exe File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\pingsender.exe alg.exe File opened for modification C:\Program Files (x86)\Internet Explorer\ielowutil.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jconsole.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstat.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmic.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ktab.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\maintenanceservice_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jps.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\ADelRCP.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\keytool.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateComRegisterShell64.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmid.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\ktab.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\chrome_installer.exe alg.exe File opened for modification C:\Program Files\Internet Explorer\ExtExport.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java-rmi.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\VSTO\10.0\VSTOInstaller.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstack.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jdb.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Internet Explorer\iexplore.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateCore.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Java\Java Update\jaureg.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_94843\javaws.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath\java.exe alg.exe File opened for modification C:\Program Files\7-Zip\Uninstall.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\unpack200.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ktab.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_94843\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javadoc.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\orbd.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jconsole.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\32BitMAPIBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\110.0.5481.104\chrome_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\native2ascii.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\servertool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\policytool.exe DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3544 DiagnosticsHub.StandardCollector.Service.exe 3544 DiagnosticsHub.StandardCollector.Service.exe 3544 DiagnosticsHub.StandardCollector.Service.exe 3544 DiagnosticsHub.StandardCollector.Service.exe 3544 DiagnosticsHub.StandardCollector.Service.exe 3544 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 664 Process not Found 664 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 3960 2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe Token: SeDebugPrivilege 2932 alg.exe Token: SeDebugPrivilege 2932 alg.exe Token: SeDebugPrivilege 2932 alg.exe Token: SeDebugPrivilege 3544 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-07-08_24e816d738031190104a31f63b5c5166_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- Suspicious use of AdjustPrivilegeToken
PID:3960
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:2932
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3544
-
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"1⤵
- Executes dropped EXE
PID:1348
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:2880
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
PID:1588
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:5064
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD5da7c6291354e73e03cfa59578ef4cb6e
SHA11cce585a8036db77726318cadcead38746c3c92e
SHA25680dfa2599113f25a1a73215186b0c1877aabfb747d796c6b4440dd0ca4426ffc
SHA512d1e729f1bd4550969d66120297d34253e5ac81743a5b5513c97f8043adf3c3729877b86a4fb29b7425e64ecf5962a3f728b2be74dc1134f917b4d8613b74e735
-
Filesize
1.4MB
MD535d95d3bd5c946967b1abda929559eaf
SHA18223bf322d364fc2ba9dc3ed0a7309563c7816fe
SHA2563c1e43b4578aa38c5fa939198019cdb903b522a66efb991991bb0e9e0cbe4876
SHA5127a19ab419ed961a821c0e39d563452c1d2489a579376faf6c45cb5ea6a44e5649f4fa6290465e6a3b0cd30461d1680f1b4a8a0c5df85d5924091e063f104b307
-
Filesize
1.7MB
MD5e0b7dc264049dc037f2eec1f60aed5c9
SHA1fe80208237308405674f75fd672327224c032e65
SHA256c19f2643c2fc2b458b1364e598988252ff67e95251b26c81708d2e14f2f607d0
SHA512aaf0882cd97fc36abdb4b9e58804cb05b193cf4763ad29d6761deb61cc487c401b9359fb5e70ff0ddf3067d9983cb822448b378ddec6cc8193c2349f96cf56ae
-
Filesize
1.5MB
MD5a0057c46d9b3946e31092b31c877085f
SHA1cff8c9edc8b8e237cf91baf51c794de130d6fcbd
SHA25678ee57410433ebfebac287faae3dfb9045124c5b46c535dac38900539f1f90e8
SHA5125784f678e315e820ddddb2919f4db0fde693559bf01eddd872657a4e6a7a1aa78789442bbf137a09d38d64c0725926af62e237e6dd827e9553585b45d0fcb2d6
-
Filesize
1.2MB
MD5d835ea86ec4528e22bbb4d40a537952a
SHA147c391a8f88ce2a00682098505ebb3d27e4fe100
SHA2563df0cd857415ceb0c7c79ce2c547a0236a63f519692a85d74585efd89268a9a2
SHA5121005193791c3be8e79fba11a93439ba10a702cab8f150a50a013cda71e4118a942f0ade81fd01293adc76a266a7300ec03689cb90987aa0932f216323d4d256c
-
Filesize
1.2MB
MD525309918e5dd6c2e61d3e83a750c3d44
SHA194b662d2c590254af3ef1fb8d961cb5c0fc7970b
SHA25611d96da1fefcee7723a1633b24865c60de0863f6a2f787f7961bdd227d82f4e0
SHA5129ff91201692a041a2685b956f4c12d9c829ef0b45cbee0fffe82b14992774f35d2d63c885e36787348f109e835a8701af85509ed7d6e8c05f9a041fd57893c2d
-
Filesize
1.4MB
MD5a3d1d631ebb1c57736064d48e462e4f9
SHA138e5d9cfe68085df0b03f34762c5e543033ae66f
SHA256e4c9f602290588cc9c62e5a7ea4528ac15eee199aeadc88c24536d47b6a9707f
SHA512f82925f6844c6477e72162e2874a76a1ca22799b51061bfbd82ede51119d68ed50036be91cea6e30834a472a8238fe1207e1c51957ae10e9791306269229eb3f
-
Filesize
4.6MB
MD51a505fa6f2bee2758214a13a90796e8b
SHA161ea72fd54236a0c5a8c6050cf621cf38cd36afe
SHA2561ecf608e84115b8ea86eb862b70eec767bb5675eedb9b1ca2d8aa970f2f060cf
SHA5125ee71040785f81118496fd027540b9f9e2958ead75a82e1a51f721e6073599bed328053ec573ef71d9b9ef033c97033624c30319ae54989138b4713766991a4e
-
Filesize
1.5MB
MD53f2af51aee77d9d2d96c54561382217d
SHA15ac946d170468fcbf6d600b0459e3848ef0cfe8c
SHA2562a8bb4ba92692964099b977c00b492609ab769b6432d05523a36351c935bc91c
SHA51272cf3b70c1e8cbd055e63e4300016460e6b0c02a0d5a283d389a1789bb7f48ae766d450edc09dd72192d010a40758c71dca5caa9af12424d6467ee7509863bae
-
Filesize
24.0MB
MD5f589549eed6ba920cd6057a81360d644
SHA12b5a92cd95165ff6691c583a6a5d79330e8c7c65
SHA256da7fe21e6ae7fac2a8005e6bbc415b5f58cc9a6fe85a60cd74a63a228049a47c
SHA51278f96af6336228c9baa13bba87c6dbd7e72c60ded2d6d07dc3c2266f942c05029689626c1642105fd0babeb4d0b32ca5bb2769fccb3e39cb7d625d5cb650b946
-
Filesize
2.7MB
MD5d4eb3a5fde2776f3535d5d04324f5742
SHA160edf748e9ae3b92795a52dadea9fc276edcf2fa
SHA25685299d0925d5cfbafe36212aeb558dc2526afab2b7c12bce4f660b61b858bf35
SHA512ca9667bb2deb624142b83851b6c88b6d58a0db5580168389352c68a5c7c90b1134305443f79e45c9f1dfe3cf6c3b813ca89bc3767c05e786e5b86f0ecbfa8f59
-
Filesize
1.1MB
MD5559968784785421137457b3a39858dd6
SHA1ee9be774a6da75c375381c40d2a88c484ae0cda5
SHA2564d9e308712a18087f834a4eb8a7fc45be940c1b6c535533930acf57d0da1b343
SHA5129ce7e98c709236bc126b64c428717dca549c5455b8d9a4725af484d225d394f92a2144d3c5cc7c327877c60e983d94024b17d66106cbb98212fa12985d590553
-
Filesize
1.4MB
MD51ca7a1a31069d1c216a6e508e84af00b
SHA1b0b981a9fb216dabd0caa658e12a7d82b78fb674
SHA256e9f9cf083f95b2e71fd9263809488190facf82fb202bd66cd6e31d20635883d2
SHA512f505908ecc424c1c9e76c6944067c8c010315db0387910d0745af747bd28721b99c6499be086044d2567490b378798beef91e512370c2a66af8f66f88cd5d12e
-
Filesize
1.3MB
MD5b039d0877a470d7d3587bc750a1695df
SHA14625439c24043d083cb70c3a9b853ee5679b2dad
SHA256c8569bc654162235ec826206f475cbfcadaf9f4c4c1a0791ba996e7880f38a62
SHA5126162a37a84ebe8758a68c326f1bd4d1c7bf524606ef84634c2237e983004cfe0aaa90b5f85770ccb1f2bd7c550e88db2780a3c9cce4ff9664828d52dff739e92
-
Filesize
5.4MB
MD538bf41f27f2cd6f5e2fc65aa7f670d39
SHA1d349e1280b39b9f7c25a63fe212a613947423dfb
SHA2562bcc9ff4475784947d16dd8e7a1f7bfbf133d9795b0ddfd30c8a8f582f05ee45
SHA51261213ed25c9eb0ae040d9beec51ce336f40fd9db78d11a47379440c06659f3c41c9897befed84e260fe4d8548ffae576c57934e67450a8ae737a32d5644d2d40
-
Filesize
5.4MB
MD5c9db6ef9507c3bd0b70449b459a88bd8
SHA1e1f93c119a61c0850e43ff5d2d34399b55dc13fe
SHA2566f5b08ab8afdca1e43fd3624d52cae3d635373a1dfd0bdea6a666bc08e32510d
SHA5127fe2aaf9872f7e02c8da5b43bafe1d619f1a252cf2699756c3b0ab5954c20a4348bd20914a52b66d296bf7ff12015f509d13da7c67bece155c1b2ef380e4219a
-
Filesize
2.0MB
MD58bd2837185e4a4481f6ceca697f20e53
SHA13278ee456b1cbb99648a51206454f280221307e2
SHA256c3e30aa74a8d7aa66b8aaba216b90b84952ad52a90f7a20f627c15a4c7cb80f5
SHA512592f2d3c787a5d469512a06647fca9b503705f2d2a796082f22a370d8ff2e89063bf158573f338fcab5dadb5867cfa28a55b6c20a1bce85bab0fff184d488674
-
Filesize
2.2MB
MD53c48ac28e8fc66dfc219c8aeca50b215
SHA1b05a8ecad9912625c8f6e48af065acde483df35b
SHA25602086c6341e2718712c515d83d9d0b0d5cfb9cae6ed710b045ff90bc3ac70150
SHA51244ca0656710bc328bb1633d2d1e30f8bb7735ab57e021fe779b1dadb8563be00af9c82c3ae7ed212772da0a48a6c846427c5b013cc0b1984d4e119eacd7e0ba8
-
Filesize
1.8MB
MD553feea4009227adc4e06048a9bc33ed9
SHA1018627eb278b819548afed9cf41fc302f5303423
SHA256bd87e6be8d45cadecc9c165daae41c57194e31d188b55a22906351f328d16d90
SHA5127d9d612ddb04dd6ba32dfdcfd7ecf9363d12afb41f3825f3f4be054b4dc4b11faa2ea99fe2eb08846de40d0998a3c1ff2e518e301f0e860ab51c5de538023be8
-
Filesize
1.7MB
MD5893cb7ccc26dd6b26f207e569946f7c1
SHA1b820d12c5eee7aee7766b33dc09812e13161530f
SHA256222df23cca2f35945a325f6f13b5c7e7865ccd942cde76feda2017322b3417c3
SHA512299adb6a74878670c07857f35b1c08db65a71f640b841f0a19dca06dfb3df91ef1fa105d487f36dc96313108db5e7bb674463605adfad6d786a9a61183f56711
-
Filesize
1.2MB
MD5c2ca6c3bed8441870b3e452ec143e12d
SHA1d6e12d19fab2e759f0eebf4838b1030b62f23f0a
SHA2561554a93624acafafb31205e4f36990d3fa030d0ee5df95ebec7ac9604cad03e7
SHA5128cbbad6e1c164e7ad328dffc5b6b643fc3047b369187495de2b54d6db28a6408902eafc1394e5179dc68c22e49d62017de5ef4f4cc619cb356952dc03cd05531
-
Filesize
1.2MB
MD5c067007b8bd5a42a09d57ae4f5b32152
SHA17fd6416559b5e8ed5fad5ca02f0748a557acf81a
SHA25666e624f5e43e1c94ad67dae7de177e87d78eefd7a824625bd54d09c193122cc0
SHA512f9223f77c33a3e706145d149a0f2e1009e024c3046218138f88df3bbeeeb70226104eb0eb217a878c994fe7d75ca42e1a9d7299c0b025562a00ec3591adc53e4
-
Filesize
1.2MB
MD5b883d027c07aad22ce60e8d2c66793d3
SHA1ef7c21f7fa7a62f6572b8a9bb2c9788d20e03f6d
SHA2562f6ea654f4c4846e126d9a806d36bbf18889410c6854dfef3f895d5f0bb94177
SHA512aab8f4f24a63e8dc6fc21463efb01cc659f4edb104acc1c57e9c200d1837eb14914e6730de41b5db41cea5070b721fae78ef03f183b49c391ff3055aa70e9555
-
Filesize
1.2MB
MD5cfb83d7ce5acd6e25a9bb24e1d764205
SHA15a04adcd79e496bb9528ba96c40663cfd7e64080
SHA2566647914d8307df79a9181e0a8af403b672ae6eb97381373a291d5da6c7258637
SHA51207915516648af554aed92e15bdb78abb16356924e65c2ceaf6dce4249a18e3f754a3247a776d24ca4cecbaf57ed9579f63241fd1fa757fa1c338c80cae528bae
-
Filesize
1.2MB
MD5d5f15e869885cfc2540c2ffebf617f83
SHA1220d894b519b6ef1e0864e4e7e9824637df81e7c
SHA25609f32ac4b155959aee2a9dc571f39055c2a0855723cf3257b75e63f4227adda4
SHA512017f0308bc2dbba231c122e1ff33bc0ee4903f20e6b358bba87e5e350ed2ba2e0c5b432a277d2cc5525b6aa2409c624f3a2d8c10eeb887c8b0f59132bf25540a
-
Filesize
1.2MB
MD56116811fd54523cfd2fd1cec6e9816ee
SHA15f34460a02969c65e51f35a1fbf09c89d2f55542
SHA2569dbfb7548cf992b6efcfb2880d7b7e7ad1b3a81585b4936741102d12be54d9ef
SHA512a7c8e5025723d577a1bf1a431919dc6a688e9ed72b5381117bb760ca4b390541c8c490339843507d18d13ee53d61e090d6c6ee7ebfa26ea18d6151e8c5fc7f1c
-
Filesize
1.2MB
MD569326ba94d01c335514161526da1dcdd
SHA12b7fc0c9750e6a4e87742e4cc18900432408df70
SHA2562d1a15f7ecb0d6012c62684264f4d3c241aa15669a5058da4d1c730a963af489
SHA5129853ddb51282a9b9920924d13d7bbd1adb991acc8e4a056e0cc7c48b1ae375d813424410b8559c55fa575fe0fcc59aa7d184bc2051d486fb0fec97a474cbe938
-
Filesize
1.4MB
MD5380856f38c666e6c364da168218198ad
SHA197c370d36a529259c69deb023f5d30a161543e84
SHA2562ea1b807bc156ec29a34c6bc88e493de3409074f382b58ddb6047fa2d4b79683
SHA512dd29ca2a5248b2cd0610c41db53838b13deb1c8d7d26ff89ae4e6ce5f47f95a7f766e7b3b270393e80d2a88e70f28c3ed5bb33b5b01bc89bf01508e506823df5
-
Filesize
1.2MB
MD5f46183b42ffe8e9c462ead0c13bbf66d
SHA183b21ceced1b98e81af589d3f412569e188eeff1
SHA25657f4bf4bf71a8d69c6d32d735df5aeb5ba812ce8027044ff6c82bbf5fea542bb
SHA5122f647505f8a04a3dd07ea46d0262971cfee9a4df9696d4c2227e1e538e1a7facb7372a10c3b4052b5e37d2387272d02f020c284d168c4a5836d84ea98ed3b4e4
-
Filesize
1.2MB
MD554d50f87a948a6de188b5b2bdce451f6
SHA1b3500a742358e251095cf68223ea6bc659b00c49
SHA2560aea18de653d3d8a62245596843d7156bd02e77e305f4b3f80b0cd7fd3a43e5c
SHA512b5b87b7f4b431935edcba26e7bb2fae3a21c873249e288e83e8a6584711dffe5f6d94beb0dd9a63737d80eb9d30542424ce4996c878ccfd377eeefa1b360a8f3
-
Filesize
1.3MB
MD5253e9ab78fd263e363fa12c716eaf42d
SHA1a7608bf338bef9e8d7a0c29b86d9de13288d16ee
SHA2564a56e6b27c27553c13e90d97c53f88116e3d9a0dc7f234b7bc9748709433974b
SHA5122aae3a58d101444cee78f7f3ef22aac9e6711249735dc6f78de85e300a0128f5e336200aff013cf8c73399d309ed5eb18e6897a787f885f1fde42bc35bde8795
-
Filesize
1.2MB
MD52bfaeea5ae8574161d4d5565c8f912aa
SHA13af410f833ac2ef58cb2dcdacfac7c5956aa7fc4
SHA2564bd7ddc8acf7fb03ce5f633333282b85a97590e450a6729167dd69e0509128d0
SHA51283f900a067a8a3052603c67f2f2d4d7e05c4f2d49d61c8e5b13a46366ecab86f3e031d958668382e16af2811739c7f09735d3c0b8ffed4c95f32d9b4ffc2cf0c
-
Filesize
1.2MB
MD5a919d858ec79c5019a8e5f277e33e09a
SHA12bf7a947ff78ef53a1355a1712b071662581f133
SHA256f92dd2edafba988d154e9692f43dc94bfe4c35de0abcdf36190a3dc56842be00
SHA5129ed44299a93dc850656438217b1f1dab07285ad54d6692145dcbfeb20241f25636d9f0736c3233fff8671b8c1eeb1c6f505ffd7741eac263c36ea135248b3f7f
-
Filesize
1.3MB
MD54b53797de475c36e207b4803214499ba
SHA11b235ec09923365fb44bfc53263f06e63ed6557b
SHA2564af3068da6155a0dd51845aff9e50e46360a350828779292fb067414109196a5
SHA512c5a267a9a2757858061d729ce49948e5dd795d4d7f3ee23ef4f722e24b67f4fb039e108e16237d307ce89fa6d8ba8e6f21374f165d98760ab0d33b32f70d0809
-
Filesize
1.4MB
MD52a775a6309dc8620a75ae5f630f6c4e0
SHA19dca4d5aeb9f9716e82ca988929406e432243380
SHA256e16f9311b966a7acbf73305e5ade570351faf534f85e2c3ecd651de5b0b538f3
SHA51243b0fef63397601a100511d19e0192fe69f670b0cedb619618d1381335ca996571b26b9bd5eeb8a77dfc798f864c5c34b90c895f9c62324f8de2917a6e7802b3
-
Filesize
1.6MB
MD5abee54bf59cdd0a4623677e88dcb0c8b
SHA14dc44338c86314e8080e1daac8899883b0fb9e8a
SHA256d9400c268db18b4574337b98345c9754986c8146cd268467f0a2a3831fb9d07d
SHA512dcef3ccd8782d0e3386a1bb038ea56b156478e73c1deb717aad36c8f39b4c9fce7d8ee1a82c1dedc809625806875291a695d4576a4c373699fa3f66380af1baf
-
Filesize
1.2MB
MD576d1e3958ac19e6b23ca62bac4b999fb
SHA1bfeeb0eba49f59d722f4330a17c43942b418f953
SHA2561e2f5624a1353706bfef5a7cef8e5857963773b8d69afe07b22184e5916d5dde
SHA512c4c15838baf42e6519b383d5417837bd9770824f18de90646244e7d824580fc1cbe74f9629184bf34fe5fa3c78e3ab92f1dbfd41bc8eb9c7ba4e9043b2b49e9c
-
Filesize
1.2MB
MD5be3b83b1e28fc804b3c641e0c7e2e1d6
SHA1e030d4e158145e7f69cf9d5f4dc8ef6635bbe19a
SHA2564f794a8530857c0e388409c3167b2e73b33c5e5ef72c55acd5f0de8e1d4cffc5
SHA5128a282192e77e1339c2b9757aaababc25f771430328c56e158c4f0a9a57ce1e2cab97e79a845157cdabb3fb2b6854798fb895821a2f3a8c013b7530281b3dfcd6
-
Filesize
1.2MB
MD5a90576c22f19eaabbe817da677c89bfd
SHA1433007c0c7c0956c41e684aa15bd19c02440b62d
SHA256626706ab0132e919c9a9436273a6fd556c842d68ec877ed3df4edbbf9fc44254
SHA51200009fff71256410c86a0b7ad94c218a18c2dbb4c20472a8db509ec31aba88114019789ee2c62548470e3ea06d10a0517473c849d58f18d425726d4762ef0a44
-
Filesize
1.2MB
MD56bae1608ad396365b3bc15deef94e61c
SHA108e01a2072b72a72ef71e7db20e8ef00f336a056
SHA2563782c909a3657fb205780c2f2942317c35cd851378eb765f926c4aa7ca58c106
SHA51248705a88886e65329ac3a922e72da86b9719ab9b1b2cc03e1e96d6ceb11099f33e68245e4526a42e484adb598e264db03d62275a93eec1b5123e226134eaf116
-
Filesize
1.2MB
MD5f22ced59863be656191c908d5319d0bf
SHA140564ab6b5b5af74708cce205aa1ff8fcbd338f9
SHA256c78f89cd5bd7457cd78343c757ff22e3708818e5973ec2f3162e6fd35a32b7e8
SHA512696e8af4a9180a9ddd55c862a4e3ea85dbb75dd16e54bb7ade2f7ba7c813f4d193f308beb0750df13c1c70d1e7014c60922d34327df8b119fb1c041e3aa79d89
-
Filesize
1.2MB
MD56cfea6d73bfa5100f1f7119fbd4ccc3e
SHA1aed12ab2e3ecebacdb0291b0a743014b9c5a0c37
SHA25641baaebc67459a8e1d4decc16da8ff65de3b2160f113fcc607da71e411bd079e
SHA512a12d65eedb8d8f24bc700fea152ed97fdbff6108d37bd0baeb6d52e73d6ef23efc6aae0fa3a17f5599db80fbb045393611fc8cb7420e0b3c6af5c198576b543c
-
Filesize
1.2MB
MD52ca34e8cd21f22180953193a64ac440b
SHA182aa3645d6668f65a8d1eabf3223ec6db2a315a3
SHA2564da9ddc683725ee975593fdb523c86974ede4c6f7a7b4b08c36c5074e9163324
SHA512a6124324a067ee07be4daea6fca18e6e1133ce6fb522812c756bf97a25fc80de240f3c3e71a01aec775d49be06de8d698943a8c5b50d3da75ce46ccc8917ad33
-
Filesize
1.2MB
MD57f78c63bb5ba77f890ed0683ea7e2b27
SHA1b1d8a4c40210401c94e6a6e82a85b02940d9610b
SHA256ab1f2ed47f4ba5e52296dd16c0b742d2585b8bf4db99890360be12503dd6f2e1
SHA5124757c0a0017406a66911daf3d30012b31cd3c8e9f769b22899d608a0d9929bb3d8560234c61da89a3dfcfbd8ff9b6fbca2899771e0b1734035ac1bd3a4a0b99c
-
Filesize
1.2MB
MD5eec23bffb7aa2a0dbd7d1ccf8e58957f
SHA1e2cb12bfb336a849250f715b1388fca876d55b37
SHA25675250305b718ba914183f0dca27d5d23b70d57e7dd311482c1fb299ea4524502
SHA5125256db3bd3fe19ea4e336a97900dc652009c292fc2f6dd3ff72fe17d1ba21911ae9a0e49b55605ff8484a606a1e96e85b3440e7b38288715d24a3f3dd119058d
-
Filesize
1.2MB
MD5aef7fd13caabf0170894a6e9d1ea273b
SHA11df3553fdce3f3343683349482356c957f769053
SHA256498dd8d2edf9e1f150a43f4ec11de982c6de561598fa894ab49c7e419f1c0067
SHA512356b93b420444f1890d405ee24c5bfb7ac0aef5d0750d7520015dc582f01ae9db63f7954d311fc73c8d17c78e3f1ebb9ba08ab81c2ce18309cc88562632c5afd
-
Filesize
1.2MB
MD52f1d1a38bad18bc0e8565a3a986fb230
SHA190ccfcc7a7aba10600a8e40ff3f4f9ca583f0e8a
SHA2568d9e3174df373bf29082fb2af27052ea9599afcffeb5f701cc8054186396ff8e
SHA5120d45870b083db1f1c19788bdc71f28332d44af33f5a152771f7f9708fdb188a590528185cf2a7bcc0f228cd38221bba3137c5dc8aa8fc1003b85dbc7e8dcbc66
-
Filesize
1.2MB
MD5939c8b2fc5946bfb4fd705fdcdab9be1
SHA1fe5616ff3b6281ba286b22284376dc9c911c937c
SHA25647f67b27acb7dc3a6c2914f4f7d1fa82e5383a9d38cfe36e063f587f607dd395
SHA512b8f6091a94f40ad88de23a05b5bbc058177b0f9ec17a9bf53ab7ea282bf50490ca7288ed1ae3766b983ac86670b9e080f3849e62b85ccbe6728cae32476d15cc
-
Filesize
1.2MB
MD534ee0658c06a3c7271eda8c0b4d23636
SHA118cd7263543fbea567deb7d287a939ea9ab9fc1c
SHA2565e9b462ab7d787f18903b645337d6364ae6ca6d658b54ea6ab4804e0dfdf81a4
SHA512ffa7496bb74fe2bafeed59c0ed56f48c830f370bdac99989f198eaaaf73f2238735f190f72d529c9b904473d0ada5e618f8386184960a63333fb61c9b3d96cea
-
Filesize
1.2MB
MD5791247dab22cf1d224d33cf09b7d0999
SHA151cd9c402af85d9f52953219caa03a0bc74cc3d9
SHA25664da8ecc2a738be7a2d3a21d175e594e665670005495c498100e123d8436581e
SHA512cd7b80d0a9255d4d09df8a7787d11b4e18fd8a67ae204e5638866b14db1331100ce57ed3ca92e5536450c8e282aed34a05b18427c4bebc07a72d69afff0f2b64
-
Filesize
1.2MB
MD58e7f6a746f3b0f5c5a2436c91b6ca04d
SHA1dbefc6a6db7f893f53c6daf1ee2b2a2f2c8e887e
SHA256cb4fe07cbc1e702143e732f608b78a8b6047f105243186b218ed19b62f5a712d
SHA512679b24deb624e21298056fd06520d273e2ba3d8a10b0e6f9eb8ce52aa76acf10e0a593392b69cd00f1f9077c0de8b3b1bb38b2a2a7881dada99b6560803287d7
-
Filesize
1.2MB
MD5edd656b52ed2ef30b7e3bb7ff3c5f63b
SHA180432c831ce7fe2d159c5f76e2bcffe812956cfc
SHA25608776122d3563b9261c5c7d038a8958b3541bb66578dbc8d29d0c2f281b5e9b6
SHA512c98c1a1d3b31cfffe5738d05b3ccd7b17901da4a8d8389e2d38c51fcd18bdac951626b1abc31031d651c07bf961a98aae8801f70a6d353e4f93aa152e0e62e41
-
Filesize
1.2MB
MD5f19529dbaa95b065f31eaac42f8a35fe
SHA10ad54707d10652da0a66ebe7a232fcdd74d33c60
SHA256a07f0f0344ec2d30daf123fe66a7350f723d182f71d63280834c122eed996f24
SHA512c39647d2e7aa901ac420edcfa9f61cf86ef0c3f5aa94b42846e1cc91650cf177fee38028a4f17c67b43abfa0b3c022f1837a43756ddf6f5b608804d9d4f6b6a2
-
Filesize
1.2MB
MD52ae9b4abf16b217fbb4b02e6f08bb281
SHA11dfb27ad6e87c06bef45708a1c5f2df2f69881bc
SHA256f0b8b6d8dbe611c5f5b4c5c6a7ebad0f072c58a2a8dbb7fdd593300d20e54537
SHA512ae34be1496d7b12ad08c445b6a68c31cdfb3ba14e28c6bef546e5c3748f644b92013079a0c383286d2370d19f3bf9263f036d405c3b690d64729422776a6b74d
-
Filesize
1.2MB
MD5f1866a4c4c9501d371f4cce7e3afcd96
SHA1f47541da69d8f9c2383e21d536720b341da69132
SHA2561d1bc3110d3877c22f370cc4eb6ea2f3d0358e27bcd4632cb32079992663da2e
SHA51260b5b941bb9d4193838d4419d448824d2347d13843dc6b47ec791d1206769f0f9bf684418e15269e3bb7c5617e9e7797f3c935142b8ac1677b66b4a1ecce4caf
-
Filesize
1.2MB
MD5bc0a611ae3f41041ebc1548a34b7d5da
SHA15a85a295017c2438a428b8e8271a253123b568ee
SHA25648e2ce03bda98ff293ab59e3cd5e905ca17913373813476a4541426606b71cf6
SHA5126b3e45da13ecb8deefe63ede7d00588cb24187aac1af41d1cbe0332be7a7e23057ffb1086bf67de159cb879ef66ea37b36c4f23e4af265aab301afdd94277daa
-
Filesize
1.2MB
MD5b5bf57247cb9eb631af9999c77e11448
SHA1af972b100977a8f7d53efd92febd3134e5e8a47c
SHA256b3980821849a763dd068d94e865966857b54cf40be0ef5e48211034f5f26c1b7
SHA512f94645011b637793c3d054bedb76bc52fb1b59bcf16d0eb65766089702798a4e72b217fe8cac468a7ba03a7f8848f04ac36049399928017f31245596145c8fc4
-
Filesize
1.2MB
MD593ff54cfc30760c72130e697e6edd897
SHA151516ecb2cd473c043002659d87de36604dc8689
SHA256780c3a3f81534c5d71cd377ccd3524cc7f2b931b26dae5830a151b795ab9d135
SHA512da2f945a7f6ee2d92a2d38726598df0987bc217240785d7b25d8c115a3101d663e18ed20eab28d7bda3008027264fe8181d861764d5150ee2217f506d8dd04ef
-
Filesize
1.2MB
MD5dd0e87bb10c50fa6be51c03b2b9ee5a3
SHA1a84f020520f37b9daaf8fcba727ee309ea7d1d78
SHA2565ba4006c2e54f49027e6ee7650402307189e7106cbe241bc650bc678b2853e7a
SHA512b4864878b0850b72878d508dd9e669a2364457966c6fd36d9a3b1f12ed832e71ebf508f86c236abef8f37f15327800f8ae5070f500e0647710cd3e0fc0dec5dc
-
Filesize
1.3MB
MD5b4f35c04b494657f5781cf1e3f8ac11e
SHA198e85e57cfc55132e77b1ace74c9a2a585d6936d
SHA256bdf19f1a41449785c9b46afa02c6d56ae3534065bfb546e463ac2331adbe26ae
SHA5120f7a1940482be2c8f22b10a5b428c916a4da1b501158de770f3d3ed8047ff1c7c1606ae51d65fb3f4ed3d96544970ad546ee890459f080a10100cf6366687194
-
Filesize
1.3MB
MD5e0cbc05248b133c1ba16b02f6a3a5f6e
SHA1b77fbd0a471902f9d70163054820249e11ee8c07
SHA256698c22337bc92bf29b1786634485643707270a541b804f097aa95cce05b01ed2
SHA512369772a4f317c3236d4dc227a96316b2fa3f1bcc14e3b9eaf3930bdf3745984c5e2416d2d8b087c72f4ec57bb55f5a415aa717328db52b40759d8d06c0bcc081
-
Filesize
1.3MB
MD500744c9c655b89cf200f0557e2e004f3
SHA14ce400776680f3a5924f0661bf2cb100099d4fc5
SHA25647fbbdab2f00744aab31a8cf816770d0887e0f720b510623483570872a41ab5c
SHA512677e2ee66a0cde84555317c7dc0823f030ae35ba3cfe4512d5305989280870be492b70a6ef4341a8c4708e7878eb3b34ed6266e55f54afce85b558f10fc399ed
-
Filesize
1.3MB
MD559ed7144a149c5b2dd48c31863b78949
SHA16568b4219f3a3a7e24ddba54fcba5a128342fd09
SHA2564dbb13011ec036f95e2e59ac2b1b068f9639199ee29c763c9fdd8c7585da9cd3
SHA5120eb8490b3787b74c8a2e6ae3f1c9345c10678cc3699dcb1bcbb0545116ed9a01f83779604424e5ab708be5a23fb48950c37903b462234bd3e62278f8f75d294f