Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
18/10/2024, 04:13
Static task
static1
Behavioral task
behavioral1
Sample
2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe
Resource
win7-20241010-en
General
-
Target
2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe
-
Size
677KB
-
MD5
e684f78b68c567204320198a6d631f03
-
SHA1
bd7d59e1cf6ccb4366738a7f35a9826b45929683
-
SHA256
2da894bf4407dfe035cf13b396511a028d8a4bcc6252fc9698d67bc5759d087c
-
SHA512
b41c337e6dcae94891243354a280f02359fd579a4c4f076cf2a88013c05d94bf22770a9688156a7ec71f211423138d9c975d05d29d54a1d1a7f49aab678e5e3d
-
SSDEEP
12288:2vXk19TNjYGgpK/vnRsmH5Ckt73qfKrrzD89f24pWYbCXGah2JoHq1MGJlyw9hdT:qk19TNjx+mZCkt76f/24pN+XNqNG6hdn
Malware Config
Signatures
-
Executes dropped EXE 6 IoCs
pid Process 3380 alg.exe 4536 DiagnosticsHub.StandardCollector.Service.exe 1200 elevation_service.exe 4648 elevation_service.exe 2812 maintenanceservice.exe 1220 OSE.EXE -
Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Drops file in System32 directory 9 IoCs
description ioc Process File opened for modification C:\Windows\system32\dllhost.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\system32\dllhost.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Windows\System32\alg.exe 2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe File opened for modification C:\Windows\system32\config\systemprofile\AppData\Roaming\ce6320c099262766.bin alg.exe File opened for modification C:\Windows\system32\dllhost.exe 2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe File opened for modification C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe 2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe File opened for modification C:\Windows\system32\AppVClient.exe alg.exe File opened for modification C:\Windows\system32\AppVClient.exe 2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe -
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files\Java\jre-1.8\bin\javacpl.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jjs.exe alg.exe File opened for modification C:\Program Files\VideoLAN\VLC\vlc.exe alg.exe File opened for modification C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_87484\java.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\rmiregistry.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javah.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AdobeCollabSync.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\default-browser-agent.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jjs.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\arh.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\unpack200.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jmap.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\java-rmi.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\servertool.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmid.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\java.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\ktab.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdate.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmic.exe DiagnosticsHub.StandardCollector.Service.exe File created C:\Program Files (x86)\Mozilla Maintenance Service\logs\maintenanceservice.log maintenanceservice.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\firefox.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdate.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\123.0.6312.123\chrome_installer.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\servertool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleCrashHandler.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\7-Zip\7z.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\rmiregistry.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\jabswitch.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\crashreporter.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroBroker.exe alg.exe File opened for modification C:\Program Files\Google\Chrome\Application\123.0.6312.123\chrome_pwa_launcher.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\keytool.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\wsgen.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\ktab.exe alg.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mip.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\MSInfo\msinfo32.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javap.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Google\Update\1.3.36.371\GoogleUpdateBroker.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mip.exe alg.exe File opened for modification C:\Program Files\Mozilla Firefox\updater.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jstat.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32Info.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\jrunscript.exe alg.exe File opened for modification C:\Program Files (x86)\Google\Update\Download\{8A69D345-D564-463C-AFF1-A69D9E530F96}\123.0.6312.123\chrome_installer.exe alg.exe File opened for modification C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\kinit.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files\Google\Chrome\Application\chrome_proxy.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\bin\javac.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe alg.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\ktab.exe alg.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\javaw.exe alg.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroCEF\RdrServicesUpdater.exe DiagnosticsHub.StandardCollector.Service.exe File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\Eula.exe DiagnosticsHub.StandardCollector.Service.exe -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language 2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe -
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 4536 DiagnosticsHub.StandardCollector.Service.exe 4536 DiagnosticsHub.StandardCollector.Service.exe 4536 DiagnosticsHub.StandardCollector.Service.exe 4536 DiagnosticsHub.StandardCollector.Service.exe 4536 DiagnosticsHub.StandardCollector.Service.exe 4536 DiagnosticsHub.StandardCollector.Service.exe -
Suspicious behavior: LoadsDriver 2 IoCs
pid Process 656 Process not Found 656 Process not Found -
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 3936 2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe Token: SeDebugPrivilege 3380 alg.exe Token: SeDebugPrivilege 3380 alg.exe Token: SeDebugPrivilege 3380 alg.exe Token: SeDebugPrivilege 4536 DiagnosticsHub.StandardCollector.Service.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe"C:\Users\Admin\AppData\Local\Temp\2024-10-18_e684f78b68c567204320198a6d631f03_bkransomware_karagany.exe"1⤵
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:3936
-
C:\Windows\System32\alg.exeC:\Windows\System32\alg.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious use of AdjustPrivilegeToken
PID:3380
-
C:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exeC:\Windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4536
-
C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"1⤵
- Executes dropped EXE
PID:1200
-
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe"1⤵
- Executes dropped EXE
PID:4648
-
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"1⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:2812
-
\??\c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"c:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"1⤵
- Executes dropped EXE
PID:1220
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.1MB
MD51b34cc408378d37328ff899954c304ee
SHA138066fcc73e83a8b30c8c403e923f265c4e957a8
SHA256821721f5b4b57bbf65ec4f9d1eb817a07d17297ef3d96120b34bbf78cd12e3fa
SHA51294553c3b32cc26f0a1f2e15a85a5c2a4328a0c86c208b98d1185ea65ca99ca5b8e85e337e950769491209b991ba16cc804499ff081fe1adc12928c39eba25a06
-
Filesize
789KB
MD57dfd6b764ebefc5d43808dfa06e6569b
SHA1e7e9d03322eb09fa504ceb41eadce163766f529d
SHA25640821b42551cbe39524f96831a119d2e3e4acd9d496c26024b58ff1f5b4de5be
SHA5128106de08babb525f749bb531fe6ac0acc78cdcb9a3ef40c7f9274d0d0532c4f9764b30657f6aa39a0be27a1f9d87002fe9dc39a28ab515051d9404a7ff32aefa
-
Filesize
1.1MB
MD503b08d68b1ae6cb12839b2923d030f84
SHA1d1aed551839b84bc440bc570d05ad5d96a49ee19
SHA256e6bf9740bb4cb1399a40e2dbbc1454c82e9bc5c86b3115082fca8b79f9d399f7
SHA512887d4cf58f1b8a5dd253d99360278c6fa3a53b2f72c1557d937073f0788f71e8f32d2210d51cbee474128831097fc4a86d0622f6e9ab6b1070f9ae14048e7ff7
-
Filesize
1.5MB
MD5e05636129c9829143a705307fe970c96
SHA1e5b0c701ef64b09ce56c1b4656eb211aadbb1931
SHA256a4674b38d6c9c28da9e0265040f5f21e122ae50269e350d68c11969ab5336493
SHA512cefa64b1ae3b44297c8b678b3302c2609f45850064297ef4255aaff28191730fe81f2911266b6492856636bc9298e98b8957d27208260612523ec4039c3a6206
-
Filesize
1.2MB
MD51892ad2b1451dd47dc8bc41ac3a538e7
SHA12b48a842daffa428a7188e66f016cdff4e7f30b6
SHA25666934567b4076599c5591eb05ff20fbf8e0d08efd529b5f394e03eb8d2fbc8da
SHA5122947182ddfdeee32705943b0e4c1097dc2b38f044f18d904649d5d5e64b81c7c49de0563eb889acd96fcb3ae7a3cdaeeb109e502477908637994ac5dceaaa407
-
Filesize
582KB
MD5a0e3a56b535f49e9799d4e3c933eb7b5
SHA1115e87eca5a891e6c79c21d417fc157414977e9f
SHA2562b193153f6145f22a93305c04cffb698accf094aef31bb74402b514658047ef2
SHA512960bd2fc0118655f1020b300759bdaa3e098c46d47bcb7fea1b14bc11fbcf12754b38e7c40eaefb4e889678cd22a6c1829ecba718de1b21f9ef538f11bf6ca51
-
Filesize
840KB
MD5996c51cde55d7618b4b49c82d448c81c
SHA1babf229e322081c32ffb76615041a4bc81f2c791
SHA256eb126ea65ab2dc5b07cfbd9a576d656e5b5f6fe2ed368e752f1093cf973746a8
SHA512fb95c2399512d94bed4732b5beb004e0a7615099dbcb162892a92adbe3cfd781da4262dd24f91c339baeffc953db2dd6fadd52b192411a56b3e1d750cc4da9f9
-
Filesize
4.6MB
MD53b768b3d3245013d594955c8416c7519
SHA16f64f0bcf8b0a6b0312ab4cec8c208568ffa8f5f
SHA2560bb681369e8e6eb3832727a76499324ae05881d145779975a05c0aec0406fbb7
SHA5120d2302c73fe404251d2fcbc9ed6d5193d5ffeb3a2997cc75e445193d504aadee6731f32f912a7aed3fea7d8a238effd3f5fa76d22b4868266e3cf8dd17d8b15a
-
Filesize
910KB
MD53df72649047b2042869a2d683177ac30
SHA16c0b03c704cc9336faa167e79024c191fcd24b64
SHA256fd9af4dfc09f69eb0af4a901141691466929d229814778fd98acf11c245fee88
SHA5124f5575ec503f3f6be1b1953dec7693fc3ff3142ce8d48e247a5919b8dd8b45817feaae2bcffb7afad4f9ed5bbe306d5443899032a1822c22bcea2343ec51cbc6
-
Filesize
24.0MB
MD5594b09f5c637ddebe4d93688f9d701fe
SHA18d1fa14cd5943de94f506d6324e63270a7060d0e
SHA2561b45337edafa7c87cc044276a762c7929d0e2e63e95aa854c4715861fba0b401
SHA512bf31980b75c13132ff0708baa68057b17fe07d8ea516b35126da21b979572b75fb1c4bc22d28bebb13a0d453b04d631ad37a51f77b087a3c6373d589a9f9b732
-
Filesize
2.7MB
MD543e62fcf42df79369acda45838647473
SHA1bf127ad7f3de05973e00601b6a991cde224ad0d1
SHA256a57768285884414ed6352ef31e6274e32fe6856b246c0ad546eef1f8fca4ba02
SHA512142e88d12f05c304562daf89e2c2c9052b2df15a94355718ce2e4c0260009d5087f818049854dcac3659a8eda092959c131e258cbdc9346d652ef96362582c91
-
Filesize
1.1MB
MD5fe1d6a31fc206f3a938744b2995d5805
SHA16c8dc6e0b986befd9c77e774f4dba0d2bef2927a
SHA256b7ba721174463be090a707a93777b528a99bc2238d6e81f281515977114613f5
SHA512dec77b7c00570fc10bf85ddcdd81ccc8eb501cb5106a185b8dfeb9aded0e6b44af05622ce2d924d7637677d197dc3c6927bf2b3f60bf58795c130f5c19933ace
-
Filesize
805KB
MD59f13b8393cb0f988b00c6a447f081f13
SHA1121eabda4c603d763b47f8a0215cd075f9f5a79d
SHA256351bb59a9004bf694a93e8a7a6d98e903609200d06396f8d6a544bd7633513de
SHA5125dc48f845b3af43e41902bf11626889a0349d114687ccc9aac9b6a4f851b656f0ac64599a9f113df339abf1deaf749a097b3e6af4e3ac3cf6ee8ebecb549c934
-
Filesize
656KB
MD5fc1b24c71ff94c7ef505a455a3e5f8ce
SHA1fd00dea1fec90ca896a794c247fc3b459ed02937
SHA256f75cfcc4da02dcc3eafa8dc50d85d4265924cb0a390ddc217a94a0e9efa1f374
SHA512143a0a15572908cbad3b905701de431100dc8f5c4040babbcde84035ba292d064f18b1f4fde1e393fc48eaffe69d1ae9dabe89ea689f94eb8dd2421f8df3f41f
-
Filesize
4.6MB
MD5ecb93fe89a01cd77290658b681e03dee
SHA1fa2ddbbac63f523151812b189ed863d974e30283
SHA256c2e3b14131c7adac75b8b7a2b339a8eb7643b894525758ff2a5e31e7a649f7dd
SHA512cff0729533bfbe2e9f0bd77c0665947da21079192da5d8d1c2147373acae392f929bf4a56980aa282c97138dfc04299e2e616732c11be41c51f70ee4001eb947
-
Filesize
4.6MB
MD5694d2137aa2f326f09a0426fdab93dc9
SHA1a9abdf64dd94b8608ff59c56b0190db85d093af8
SHA256c4736c26c9c305f9d1aeee874590084cbbb6b50c67770ccde0b458c1e3224c83
SHA512b4896ae1000e235edd7a817a4d597ee7ef21bbc7a1d3d6933504df2dce855a176a262bef65db869faa99f3bc0f1d4bc680e8d18941b71de8d67a118e1c7dce45
-
Filesize
1.9MB
MD56d9401f7491e03bc0a22be26e5bf7f21
SHA1cdb0800bbde3aaebeab2ed1b284d3af9802dcfed
SHA256beab8eb375c86fb789d6365c379d6a59aaab1197c5bc8178325909d3b8eef4fd
SHA5128f10d6b010b1797b8a72597ced93f7c6e6bdbd92148614c0bc7d8bd6f6fe6f54a5df6c875c53992a00286ab6f0056e3cf517d96a8bb3be5aeefde80254ad8520
-
Filesize
2.1MB
MD5a4526080a2068125920dae955f1f1887
SHA17e881c6ea9416b2e58220e0eb3bbc84ae1da3cec
SHA256d35acb4ad25d1b03e27044b724c1955f749bf1212983697483faf715836a7a93
SHA5123665da98d9cc78a1d826c38a5c84d3014525ccf7deaf3680de5d1d114adb5b7def8140393c41f49d29704437db228b6361ce0df897e9eae6c4f50c9272d941d5
-
Filesize
1.8MB
MD54d4327abbdedf94b5c48d67909a07162
SHA13088548ccfc55985a1f971bd3fc007fdf7da0f46
SHA256e8c629f1406dbb8316c6cec52be4dc5378203d36f5522582fb7a50da5cb59f43
SHA512b4856ecdf2eb361149ee1a7cd5f2bcc8aee5d51bcc2e5fb95f8dbf87d00f1b3bded6a7babd14f22b62c1b2e2597f963fc1c49da14bbd8fccc6cdaf6186b9edb6
-
Filesize
1.6MB
MD51d3183f9c8cca8f1feb9539836b7627f
SHA14dfb90e1d9d702787dd3dd6070c41486857dad8f
SHA256e7575d0c091fdf8581fb904181bbe68b8df0030c1bc55acdc444b8858038d71b
SHA512f4e773ac8a7c3e3be99d0d5ef577d143e279bc07282ad6a638a4a33ebecd29ad6fb9bd1f4b7a73988cf06b8657fd56bb57cf4efd9b9539a0810451681dfba3be
-
Filesize
581KB
MD51b10ca87c21cec543310ca8ca73ba112
SHA1e628777226a112df63ba5e01d33e7376e27d8a88
SHA2561340b088d54a66bbf6cd9efb2844d99fa2458774afd8f724346213d5b55046d9
SHA5120fe1af8dbd38ed076acc2fd577402925af7a54e97b709e9bf5342185b6d27b52b2f08092f01080fc23e5f47a24d60cb214b73b99c664679365fa1f99da93f3a0
-
Filesize
581KB
MD5c130ac58a91a127ea20fbc0344b89b86
SHA1cc929381b2d77ae40432076eaf0d81f243dd3a6e
SHA25682ea3b2787a28ae2face970dc73a6bf3266c07456e6a4df4081d03aa6522ddf0
SHA51267f23abaf7653be61158078010b248343b5031b9fd29bd7daae5a61cbece48c54348d538f7e80fe554a519f0ef0d2b0eeec44540ba7f20e02ce767deb48f90fe
-
Filesize
581KB
MD54384bc8a11011ba9a06ae172eaa2bcc3
SHA1c88789464228d7ad604e0c584007183283020f6c
SHA2567e3f25a59be557b9f3592f1c6c4c23e0ecfa5d5dea850548af7dfa5dd581e655
SHA512ef4508d34965ccd7b480c32e241dccdfc257b303bd72c8d5fc0b262e016502dec18a423ceb221ef25555e3ebe0c1c8ec65189541ba391c8976f027e12ec3bccb
-
Filesize
601KB
MD5c1b28651e7772d5752258316214c7179
SHA15a8951f990abb0491e8fc93c2439583a32ab18da
SHA256538014ca7dafa47bdeed9f6545e1a258ee8d4b9e5af2435f4f0981404665bd40
SHA512e4ff82ca1c69f6bd67e44a5414c429c1dd8744927f3a109e471a09c3039920911e0c3d25495db803b486f76b3f24901d7ec289eac0542e32251234817762c8ac
-
Filesize
581KB
MD5ae56c050f656d3360009abe501209ea9
SHA131241b9d3fb3d849431816a7284f33ddfef6106d
SHA256af30f8f56ecfb49f44f6835c49e78a17200eec22d2d5a2dab70ed77081c9a0d4
SHA512ba4e5f1d3ddc87a5a1d326bf98c8a13bf241db3adce989338d0b54459b847ced871fa124f037571a11503a378d25a9e7b8d80a349d4c2ae058f09d1dea7cfcbb
-
Filesize
581KB
MD5c957ba2ee4b4fcc7184716a96ce8677c
SHA15e89bb6749aff9ce1522dfae8888b4e9f4834c5c
SHA256c3d0000c2ed084db7cd9e55489571d1cb7a1c8b86659fedb9cb6067e04cf513d
SHA512806956f1ce2ada8e8f5bd2876b9874f7265ee82395d3a1a3db6fb78a773b0ddc6251c3f7770a1f3a66649312f0541a4ed6ad01ddae3d4664b852ee777e0aa2de
-
Filesize
581KB
MD59e9ffab939af15c0a9343eca030f2fec
SHA16f897b74f24367025d2b14f4c3bebac60f596386
SHA256babd4e1b77ca1d3c593506b350c47bc9a200e886a767f0223e74ef148cc9669e
SHA5126f395dfe731bea7d9f015b08b071e3ed1cbf3765175402178d22d5b3170b4f66e43d75fc84485c86911c9d2396d40262ca69d0ac58413fa108b8cb989be262b8
-
Filesize
841KB
MD5776d165013b30fe765d94f543e68913e
SHA1c1d2160072460fc15e8db52657327af93f3b7613
SHA256361ae9f50b3c40696e51adbfd0d305028fbc4acae6cd62ab5fb147d616a48dd7
SHA512d08296a561f1a181cd64061f4a5ed1d84b6018b56c499d0837174d611345ffebc82005605da821b66cc261b505f3b55ff4967b62b7e062757b7e0e82623bf2ff
-
Filesize
581KB
MD5de1b63e1e6cf72242c6089f2a297b27b
SHA15efebcace2b02618e9b7375cb0bb91aa4bf95eda
SHA256aa6f05b18056deaa8261c213262a79810f79066ec8a14e934f9659f9ed830654
SHA512b2b458975b9c59967d77ca5dbbe831236dafe4f936fb62ea33961210e94c0a850986887663343d73aef08929bb19abac1196a5383959050910340e355e9e2cde
-
Filesize
581KB
MD5ab00aba2e6fa951129560040620448eb
SHA1f47bf2788904c0566ad6e9814c54d875c7655907
SHA25675a1032f574861587a006ab7a3108b701a2192962d2ac8efa30bf096541f9f7f
SHA512b22a6c52dc6605fcac7cba592df297ae37915bcc8511a8c30cb5c905ba5e136e1d87611de739e07abca472ff1a2823cc1963736bdb73cd14c2c7c05133cec9bb
-
Filesize
717KB
MD5937025eec7eea62f8e60a65b3663a97b
SHA1afde8e2b7960bc6ebc25d516f81c332baef920c5
SHA2569ac9c628d5e26b717f017c508ac6a66fba5e98bea3fcd700f0f318bd08096da7
SHA5120fa34c3670c2b06353bfcc384917340b095967f69ed9e90b03e99442947f8ef1ee678b778f2f60afdd828f02551e1b1555047774c9eb0e6d123eb4aacbb9ff2a
-
Filesize
581KB
MD51264f3d2df2431b6a82eea9fab97046d
SHA1c7a0e84d989d79367aaf7174e544f3324ff51ee2
SHA256a42078728090c33f3cc815021a1cfd7ce5ca8e5ac7a68396ffb575511087f3fc
SHA512feb86b9e736cdc373946a4e16692a94a5fac31a537478e5883028dfafa6339418a993a4d1be16935f77ede3577f5ee68a6ea9282902c62de4defd4783c2a3b99
-
Filesize
581KB
MD5217d2ee7b526af88382ffb22bb1fb590
SHA1111d053d60d1fb41b270ed2b08b9debb6a3ffac4
SHA256a1e7d78a3cf8ac855575b7dbfde6403fa9143e33ef3913f3aee98ec6be4e362d
SHA5126213ab0843202053e25b4485762a43d57d61c31f4ba77c9f94732b880a9a6463a8aadbb38239d41734cf8cf1ac7c79c0ad78e8ea44971332db4fb1eada59631e
-
Filesize
717KB
MD5988b6c5675b73a7d4e8a77825e7e2058
SHA105a743d4f757e8065e29e397247224ed27d044c7
SHA2569efb4f46fd8e4d22a5a7774acd32d8394454678ccd63e54f3d5253d849b937f7
SHA5128466ad09461e1fc93c869dbb884ce1d76478a24a97dafa01fd231f559f09357c86df82c06083f5fe5e68813721fa11fc5ba18c19b14ae9096243662b301a1925
-
Filesize
841KB
MD5da83fcff3092ff43ac89f39b2d869f10
SHA1b4b5d247801ec9088f8861ef779b04c7fa800e4d
SHA25694b9c44907a47d26571e3f0706bac6b0518530e3357919fa93e1ef7ccbdac9c0
SHA51200aedfe2ee288effab8c19f0bc5ea708f74472fa122c3fd7d18721e65e114869f3b78fd857026a984fbed52d51e29cd22dc36cd9016575c9748c3ac36c1db792
-
Filesize
1020KB
MD5c5fb8beec38b81ce8ebe916382a380c9
SHA13b86112d7fbf9fa0e3621c1f9133abb8d5565171
SHA256c0caa949f2a6d374cd1676fca647dd9a5305e3cd41516110e766d97ba00fcfc2
SHA512f63a1cede71a1d8de7097de2abc98a302e5fa2b1533478ce1001b69b27ee1a83dc3c6b1560483cfc7bf335d7f84e659c431f4ba82585eac2078fc893b3e7cab0
-
Filesize
581KB
MD5ff104565da147f5d1b3fee69d4739912
SHA19b105423017e62f737ead130b90fc1fc52331952
SHA256cde77d2b069b8a20de55f1b18a35e8f8b344596f955176b913bfb2b10f779b34
SHA5120ea3eba5ba145ae4d871934149f39cc3627089fd8d333261faea0326b1d192d00129eb1592242c2efdc08ba27471570b36637b947603f6b34b527dbc73e8a2a0
-
Filesize
581KB
MD5a4c647d2aad889fe3df39dd037a2ed24
SHA1aadc5e4aa56775eeebd97af9411debde10beb862
SHA256108f18123494c65090080a83ab5dc07c16f9e1fe1ba629a828c6af3c8445884c
SHA512c4e9dfaf752e1f0f2a2a06a7fdbd6ec728ed66aa124b7da10411ebd11b8b8947e2b8a6bd86bb7aa0ceffe46b54e6809badb99b688bc6d13310e2909d05f17d30
-
Filesize
581KB
MD5de5531dd9e9201a8ea6d646204e7de96
SHA180a17b3046575b315d1a0f8f97caa604fda95f9c
SHA25639319d07d6a3d635abd95fd0f0ae9a3c74ba09842cf6a590264001490753c6a9
SHA5124a695f4249f7948626e6209562e8f35c73cafcab7ffdb2af5f4bc2c475e6539cf7b4c9a5329a4b68c934bd7649421b41ee7116be0d3a769c67288ba989c56d50
-
Filesize
581KB
MD55d72a7c987fc06767b6b79a6a01cccef
SHA16c56cf15631d865ebc82c238157d50b4bba213e2
SHA2566acda1163a9e5db57ed2913886d47b9d18bff1153ebf7d1f1bf9da6a43995bc6
SHA51280d0d2b6169efc24ebe566d3fe3cdf702eddd1dcffc866a7855507adc41cabcc2192e9688e2a6a497e57a44c64afb99bc1493920bdca93051a676c7ab9bde612
-
Filesize
581KB
MD5f6140fd6e7e96c67576ef070513104ae
SHA1b03432b6f775772fdace565d9647bf506d26e4ed
SHA256ba180951b87c25f297f802fbedc81b96b483a6bdb2ea94656a373b39ef840850
SHA5120579cc7fd516bfe2260ceb59a859b0aeca5217cb9cdca10f2307784ac2850b5bb8af9fead9413c8d0f10fba53a6ea0e9228f935f6c3f69d86049d74ea8431401
-
Filesize
581KB
MD5fb471e4572ae3fb11db9afc129821c69
SHA13656a7e4d2f38f214f539c00b0632dbfb437972c
SHA256a84cb0e1882638f4beac1bc18d8cd42b0ce5ce20ef1c9633fef5055c9b07abcc
SHA512ba0f60b7e95319dfd386431bccbc988117cbd2ffb2dfb3c37dcf9f9df02e09863cfe39213db4a34c40dde13a29a897167d038967f992dfda0e7b5cd6a7003671
-
Filesize
581KB
MD57eef7e08f6f79dee09ccaddf754ced34
SHA17ae480418eb296c8e1cd4db4f27fc5b90b41ce9f
SHA2564ee6a36fa208518a46c809fea181546653c49ff52c60f2df87468d3231a032a1
SHA51203a0d56651e3e55f6663a3fd03c09ef2a3c1e691cb40de9d4c23c5be2d91ffb08e870c85f0c05cd76324399ee980a766e3e509aafc4a7df464c7177fbb7c8ca9
-
Filesize
581KB
MD5d2a04c69449667f93cdc96552c06cb2c
SHA13721a7a087d2d6ae0809e22eff190bd7fea14296
SHA256442e8c1c390f1e95498709763d9626a092b78d3d71f81d6d7164e85471147e6d
SHA5122b2cf73b7ddab5a6bf68884a3de3c2e23d7d30662a52120bb88c1f96f16224b3edb5ef1813839d808ca8823ff0c1d9ee63f4f84f82aaaf805066075f7ebc2a7c
-
Filesize
581KB
MD54bc1c97ffe801b2a636f754eb742ff14
SHA1c17323164f0b9bd6dcc04474978ff2036d4d01e5
SHA2562361dd0626c4a4c4e1b538e023a60e54fe3f8b65513832f3b8a82dc083208710
SHA512a459fa2cec4d58f7f0a48bc748ffc8110cd7f0d01bd95a1945297b8e575066d59d7d5d4c5e48331e7006759f3b77923ddeebc81f5a6bd8abb10e9302575cc41d
-
Filesize
581KB
MD50b24df40dc2709e8c70f2cd7d7fb5cdd
SHA1fa766c5180691e9f23046f22468c38882c8fd8fe
SHA25678200f5e08aaf4f6174df58e28dd42ba68379dd04d3fb92ff55e49017a3dd8a1
SHA5124d29ae25a6744c912a5149b6b5e41be24ea8110647be4c88b12cbe110552ff06c6b1859d905a7d92bbf354bd1bbe0ab6c17d93d8a7e2667ff4cbfd46d8e19aba
-
Filesize
581KB
MD5b35d65ddf6fc1aaca3eb1a8e414a331a
SHA1dacdb610260e53cb4cb66f77e0babb3d5cb5add5
SHA25645587a4ff5db6396b98784de8537990944a0aeabbd7aac063d6a337ec8b783c6
SHA512d47f0f308351ced71e06d96ed701496d87e6f59d04b3aaed2531e800f2d0b73331699e358020805fcbf36f637960ba0b697e77af12dcb9ae983ba17af70bf8f8
-
Filesize
581KB
MD5609eb89b442df130a8fa12065d87bb5e
SHA1d7a7430296475b9d36144d9bef0e5fa28959dd89
SHA2561c9adb17f340fdd237eea38573811a48574967cca2f42199ace37594f142c5be
SHA512bec80235e9f295e0914f1556457cde797d1de645df59a0a7d4fa8bbf3e0e306729aa8c187fca08a39f0830e464f67e595ae7785652aa70e14d6a3eb2ede351d6
-
Filesize
581KB
MD5e8779eae5e2cf2fcd9ee55c1d546a405
SHA1db32cdfae5c1701b3f3612669491ebf6c1cb9de9
SHA2566f5733d9e7e79330dec5979dfd33f56031c75032292bc213dc73855de7c1c15d
SHA512cb6edbce6881a073ea6c06a60c06d77b9558c2ec1fb0e773ea889d573cf3d5383fcd003b10eabae1ccec7ad0028f3bcaa64bcfc27009f2cdb1fcfe3b72335e51
-
Filesize
581KB
MD5b347201484ca69c8af1bf1be2073cf5f
SHA1337273158247002e8be3ea31a0f55350de5ee4dc
SHA256a25d93209772ff92f52667f144f2fbccadc181d5bd93bf9238a1ff6da9514df9
SHA512c1dcdfdb18a97446d9ea2ae0f75384cd6f934c1f42816c8673e930f3d06546ffcf7ceffeaebc404955473007eec48979365241cfb7f5432b0a01aaefe7c24c6d
-
Filesize
581KB
MD58af69a6ae1ce8cf1b7de0e5561a4611f
SHA17c02ba73bcb094225dd931eacaafa201d7cdc28d
SHA256b89c9d6b51f1948ae019bd6236457d34d5f7e1008e967302c259f7592f567042
SHA5121da9845702b948019c7e411ccfa99a908cc36bffe727b62cb8fad8badf8df213d97069ab118c849939aa54d6fb9d9b503f6890ca8c51e75fc2df94550d409c2f
-
Filesize
581KB
MD5bf0822f4d5a459a172f4dcbe1e15a4c5
SHA1debb0d17cf71d85ee49e1b59adaf3f07c80d56f1
SHA2565b3c4e51b607a7aa1f33b6820e34da16b85c7f57f97295344b9e776bf9bde2c9
SHA512c1f14f3887daa86af84fe2ed4e6e253ff7882f7e42fc1432d91843bd5161727384e27ee7ea6596a5aef923f7bf816df8eff55ee2b20c4d67a8afaa238883c6f8
-
Filesize
581KB
MD5bcd8343a3fe55cabfa7c26749c39aece
SHA10ee10067a10616f5a810ee5fa1107bb0fba64629
SHA25699ee5d77e164a1b25436f632bef871b9cf65d8629a136ec8f512896ff48882fe
SHA5124081897dfc1e29af90eb9f2aa571b274177eb4fd9447588573ff8a05ae51cb9fc79e9348d967bc34fd09f9ffa20cac5134a7af6ba2d6e2ccf64eb35fe4626f8f
-
Filesize
581KB
MD5d7f7189f2e0aac2fced091af417e165a
SHA141702a58f41ce6a7aa1c8651ec4d764076c6bf71
SHA256cc68c3468e7cc035f3daf4b6c737ede68ef79997e21c78a2c5c0c856d0593db5
SHA5126a3aad923835787b20dfd266373fdab45f5043d8ad5bf5afde68047da77423760141cbfe825ed13d9359a0edea97b1c26be1d75aa72af34d94a492bc54cc6a0f
-
Filesize
581KB
MD54a1a8c999c6373be32fda4842edce38b
SHA1405b4c63d083166bc1c9744f7f962842b01951bd
SHA256af431eda8a549d4bd35e981bc9b7b1ace0383fa2f78c3ba2ac1ee6d56d3df646
SHA5125989144abd7151d5b602f6d72e1bf0ce0c172ca50732dd90d831ffdf33409333856c73033f467dcb9cfeff97f22dd2220bf557bea820222aff6abd773449838c
-
Filesize
581KB
MD53c05c04adf2a94fe117f2277251930f6
SHA102d3724e3a011ed7c7c8d7ee416b9e83c61f477f
SHA2565e0686dd49f9e9019b2bee20aed958bd41496b4ca34a25e77a77546b7ef2cf55
SHA51263567ba0cf62397ad8c3b44fed254728bd72d3195bbe8179aa9ff9852bb4edff3a9b26110a352a054dc2c9795ebcb82888580c5b162f8f7261e7b59643fbd98c
-
Filesize
581KB
MD5d9b0ce2feee8c42f9e0bfaef3ba74b79
SHA1b8228d1b00c89ba2c6dec2b372305cd18a3dd5c1
SHA256cb3bdb4b5c37f1a2ac6002a541cd872506cda53d14f5f565b15e201b66007951
SHA512f835afb7f6b818e7c8bb8932c69c806b35630970c75f6bcaef7b023f6a1192a05e5a0ef3db410579455667c2f0b9a26cbbf0ec8674966cb841e2654eafc5f7fd
-
Filesize
581KB
MD5d942ae38c216473656c3f6fbc4819296
SHA1ac87c0cb017cd3ec6ad19e9bce8f96651a0e96cb
SHA256b0819333348fb665bb54bd88700ab61561ca30ccc08dd300e6368df2bbda4f96
SHA5127661aa7da99667aa3250d1109898d4096715a2d7ddee046ddd8c5241979fdcd429bc689f3c7bd6eaa1a7dc1469dc5648cf92ecff4471f4df4955e9cb09ad6733
-
Filesize
581KB
MD524f34bba7ba952252edf1d6bfb9772a8
SHA179f93a396f04771c8b50a60099688c11fa1bf8a1
SHA256f19465b929490d5f9f79cd1a8d69726062b89b72c6c3d64a34cfaef070c967f8
SHA5126d76f35c92a2e4f562e02146d763678020a946d8bf432681d9198ecf8b1ec907f99df2d2193edee6e66098de250cc22051ed9e9b4fa83c16f1ffc668e55f0ced
-
Filesize
701KB
MD589e6279867cb98cd7cffd0d75cbfc9d7
SHA1a2c87e00221427f66959e125871f3b182223ae61
SHA2569539255ea915210f3f7e13ad283a603dec3718d12758e1bd48353600c17c0442
SHA5128f02eefab10b2f47ac333ebf6f0bfb03032d7de97d14b040fe08fc87ef4953c574bb560122616944639de5fe43d38d92ac3a6085f8cc21a95f11af890db1dba1
-
Filesize
659KB
MD5a165db5dcbf6e7c5105eb4ab5edcb560
SHA1a7c16857c0630be5f3904f0d5bba5018e9a294cc
SHA2568148565a1de073bfadf1f40899a2b8156460f5bf6114c617abff25f68b995c66
SHA5122d0f78540ecbefc1123638c9e5169c0d911d293aa6d736df0c244609d847c8d5b17ecb38a205fc5a99d82c0d97ad47c36bcedd97aae48c60ba6aa551bd3cc5c8
-
Filesize
661KB
MD592ebd51c095b48fc634c8fab6fdce24f
SHA14501290234368641bb0839368e3170197edf5b9b
SHA25638c442021037d6cf65e5863b8af4eb9c436f9f865d37f52f485af206e569bb04
SHA5124c120a5dbe1639a4bcec087c2ba9666286a524c7a99d7755b4f909203622c1e4f0459c717fc188a978ba1fa61b57c354c544a1792b82ef738c3084e053dc70db
-
Filesize
1.3MB
MD55fafa06bca718c1dbe0bfad3a1350dc8
SHA1b5f0293c677955de83d39287b790323814eeec98
SHA2561cf88e6b067d0711857052665439a35ef18ccceb1477efd8d10ee3439ed6ed23
SHA512264af274bdecc0e9f46b5ba50d7163593768d2990990ebaf1ff601540cac374eb7470eab0a0a5753ce771a08af6bc8755f0b01328def095f599c76f84bed74c9