Analysis
-
max time kernel
142s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
22/12/2022, 21:01
Static task
static1
Behavioral task
behavioral1
Sample
iScreenKit.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
iScreenKit.exe
Resource
win10v2004-20220901-en
General
-
Target
iScreenKit.exe
-
Size
28.3MB
-
MD5
a197d19a71443b4e9214ce2ff11cd8d5
-
SHA1
481b429e469e75bcb10ce01821e8a8b3852d121b
-
SHA256
4432678c8a337e4bdf3fca48acbe7f1e5da4dfbdb9eea5959c7636ab7d0cab58
-
SHA512
687aa2e20b61756f3d10ce4ae914c09bfce473cdf987674f03e7bf328a16e13860e52fc8f444f23ce86475b12935b1ab21383408c23f7a389d9d32aab6e9f169
-
SSDEEP
393216:UXaHM4BfsmDxD8+vxr60kTgOX49fEJsanLH3hBvJC5SMOkpb5N0UCRBuplNzzg3y:UXasKxpWJHsaLRyFpFNVlNHU5bs
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
pid Process 2188 iScreenKit.tmp 1272 ScreenKit.exe -
Loads dropped DLL 32 IoCs
pid Process 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Program Files directory 64 IoCs
description ioc Process File opened for modification C:\Program Files (x86)\iScreenKit\api-ms-win-crt-environment-l1-1-0.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-Q7GOC.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\EditToolTemplate\is-GLCSB.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\video_output\is-4OTVP.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\ScreenKit.exe iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\api-ms-win-crt-utility-l1-1-0.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\msvcp140.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\opencv_imgproc2413.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\access\libfilesystem_plugin.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-UAVJ3.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\d3d11\is-OOQPR.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\codec\is-G6JH1.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_chroma\libi422_yuy2_sse2_plugin.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_chroma\libi420_yuy2_mmx_plugin.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-SHJU9.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\platforms\is-2R7HF.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_output\libdirect3d9_plugin.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-0I7HG.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\demux\libmp4_plugin.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\concrt140.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\Qt5Network.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_chroma\libi420_yuy2_plugin.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\codec\libavcodec_plugin.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\video_output\is-7L41I.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\api-ms-win-core-file-l1-2-0.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\video_chroma\is-H2VTJ.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-L59P8.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\Qt5Gui.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_output\libvmem_plugin.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-P399D.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-AARGQ.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_chroma\libi420_rgb_plugin.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_chroma\libyuy2_i420_plugin.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_output\libwgl_plugin.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\video_output\is-16C53.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\unins000.dat iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\audio_filter\is-OV6F6.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\video_chroma\is-4GVF9.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\video_output\is-AH4OL.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\api-ms-win-crt-string-l1-1-0.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_chroma\libchain_plugin.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\opencv_features2d2413.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-52KI4.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-U2KG3.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\opencv_highgui2413.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_chroma\librv32_plugin.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-3NMDB.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-JEF53.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\api-ms-win-core-localization-l1-2-0.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\video_chroma\libi420_yuy2_sse2_plugin.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\Languages\is-LO3QA.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\video_output\is-J1AV4.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\ucrtbase.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\plugins\d3d11\libdirect3d11_filters_plugin.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-9OCDC.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\plugins\audio_output\is-QRBCH.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\Qt5Widgets.dll iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\Languages\is-AEML4.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\Languages\is-6126K.tmp iScreenKit.tmp File created C:\Program Files (x86)\iScreenKit\is-NU8NS.tmp iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\libvlc.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\Qt5Multimedia.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\Qt5WinExtras.dll iScreenKit.tmp File opened for modification C:\Program Files (x86)\iScreenKit\ssleay32.dll iScreenKit.tmp -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
pid Process 1272 ScreenKit.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 2188 iScreenKit.tmp 2188 iScreenKit.tmp 1272 ScreenKit.exe 1272 ScreenKit.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1272 ScreenKit.exe -
Suspicious use of FindShellTrayWindow 6 IoCs
pid Process 2188 iScreenKit.tmp 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe -
Suspicious use of SendNotifyMessage 5 IoCs
pid Process 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 1272 ScreenKit.exe 1272 ScreenKit.exe 1272 ScreenKit.exe -
Suspicious use of WriteProcessMemory 6 IoCs
description pid Process procid_target PID 1336 wrote to memory of 2188 1336 iScreenKit.exe 82 PID 1336 wrote to memory of 2188 1336 iScreenKit.exe 82 PID 1336 wrote to memory of 2188 1336 iScreenKit.exe 82 PID 2188 wrote to memory of 1272 2188 iScreenKit.tmp 90 PID 2188 wrote to memory of 1272 2188 iScreenKit.tmp 90 PID 2188 wrote to memory of 1272 2188 iScreenKit.tmp 90
Processes
-
C:\Users\Admin\AppData\Local\Temp\iScreenKit.exe"C:\Users\Admin\AppData\Local\Temp\iScreenKit.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:1336 -
C:\Users\Admin\AppData\Local\Temp\is-NT128.tmp\iScreenKit.tmp"C:\Users\Admin\AppData\Local\Temp\is-NT128.tmp\iScreenKit.tmp" /SL5="$C003A,28899390,1046016,C:\Users\Admin\AppData\Local\Temp\iScreenKit.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:2188 -
C:\Program Files (x86)\iScreenKit\ScreenKit.exe"C:\Program Files (x86)\iScreenKit\ScreenKit.exe" -firsttime3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
PID:1272
-
-
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
236KB
MD50f6c09576b20b65b1dab828d160636ba
SHA17132482cb9550aa08abda60862613e59876093eb
SHA2561bb96885bc823f33d85e5cc0e99562511a103b48a218441d700c29a181c6e694
SHA51203f2bc63eb915c2802ecf60b953626a0ecb6be258b1835836aa81893b8eb8c6099c6181be1f1180bdb1ade9be5e2ae593e745962157e2ae13f48ea2e864fb762
-
Filesize
1.3MB
MD5a724f5da0a0184b5668ef2d85a7346e0
SHA17181fffaa6b8f0f29cf7cdd1b1b859c2b956d399
SHA2567f2284d3cca6171e50b47eabc4fddc8cd2c9641cab4edb12b26694427f559848
SHA512d9916d6581e5c25b6479445aef604e9e2dae6d64e1e7c6784516ef20616d2a8ab4253816ed7edbc289caaa9f1c88c6ba8441e8205616874ded5fd126644b83f2
-
Filesize
6KB
MD549c0d57e19d91071bf446968237b3f6b
SHA1ec0e4188f7a348c13f17d26b64f65b34d3fbd4d1
SHA2560dde88bd688d37e735af0bf9adac09e3498be1c8345c8c08ebc3d79771aaf04d
SHA512767c5433e215c83c9543b33ddb5a0c65bce89051991f54e0e66ed68efc30c971a40e2ed4a8dd0de634293d42e8d83d92029938ea8001d1d8f596c5ae8f04e3ed
-
Filesize
429KB
MD561414859fcb6ca5e03aedcb990bc5e50
SHA1b37dbd2dbbf3e45b3aed711c0fa8050cee969d7a
SHA256242db44cbd857272b66267f52afe8ecad9fbf6a7e1ffef4d1bd4beb5c1b6290f
SHA5121e1f6e71f017b37e051e8b2168d9832cc5b05d279cc2525f5ce9297cd0b9bdaaf5d515151f32a9810434bacbfef59d5fe1ee8f76be5acf07fcc5226aeddec366
-
Filesize
4.6MB
MD58897bb5341e8c47ca5882365ca15c24c
SHA10676a57f129591beed3826eb9cea530d9111ef9c
SHA2568a518ead59386b7f1912e043c498e0c08c4a6cca02013068c6454dae0fc87d1d
SHA5120f6c60f859ff11dca220b85fe79387d344e4fa28cfc78d4423453f8c4e9c20d93bc35b18d41bdcd7af98b04dfc7e506f13c447659d566ecd811777d00cf30312
-
Filesize
4.6MB
MD58897bb5341e8c47ca5882365ca15c24c
SHA10676a57f129591beed3826eb9cea530d9111ef9c
SHA2568a518ead59386b7f1912e043c498e0c08c4a6cca02013068c6454dae0fc87d1d
SHA5120f6c60f859ff11dca220b85fe79387d344e4fa28cfc78d4423453f8c4e9c20d93bc35b18d41bdcd7af98b04dfc7e506f13c447659d566ecd811777d00cf30312
-
Filesize
5.0MB
MD5ca96d2e79499528faad1e3636ed0d3a8
SHA14edfd718318c4a016009f0325f1b442340b7a551
SHA2562ec2c15ae82a3c402d9d3f7e4dd2d4da3b295ecb9e495b04eec7c098793af952
SHA512e85e685ab3eb6910f6e9459df41a600b4f4c56d8eadb76e31ef90228838036f8826117d043ca86eaf2c97f9f25d158b9d80030069193b38bde81bff5edb24891
-
Filesize
5.0MB
MD5ca96d2e79499528faad1e3636ed0d3a8
SHA14edfd718318c4a016009f0325f1b442340b7a551
SHA2562ec2c15ae82a3c402d9d3f7e4dd2d4da3b295ecb9e495b04eec7c098793af952
SHA512e85e685ab3eb6910f6e9459df41a600b4f4c56d8eadb76e31ef90228838036f8826117d043ca86eaf2c97f9f25d158b9d80030069193b38bde81bff5edb24891
-
Filesize
568KB
MD514bd82df0f84d7a561324ec6898576fe
SHA1560c23def2a0715e2462b75a7ebd7db5f2dc4b8e
SHA2568219e39bfb8ac7d97436555e53b66838812f9b166bb8198fd56e073b7209b14d
SHA512e3f05add40702edfe6eaab758e15d64af5ca4157613254aeeb132a4adbd0e92760f9b0c5a7a8428e1ce8d9617547aae381e4449c2d88160c35863019c709726c
-
Filesize
568KB
MD514bd82df0f84d7a561324ec6898576fe
SHA1560c23def2a0715e2462b75a7ebd7db5f2dc4b8e
SHA2568219e39bfb8ac7d97436555e53b66838812f9b166bb8198fd56e073b7209b14d
SHA512e3f05add40702edfe6eaab758e15d64af5ca4157613254aeeb132a4adbd0e92760f9b0c5a7a8428e1ce8d9617547aae381e4449c2d88160c35863019c709726c
-
Filesize
81KB
MD5bf564383974a15f0eb47370169974cb7
SHA131b9a84b40b7f1d94558ef7a5a03750298e3a8a9
SHA2561193d334e10b8d831e8f6d90390fb0693eae9c67a98869ad6363d26c8c0a7ace
SHA5128bcb7e713ac14f8bf2456c94a040a65953ddf4ff514ab5b94c72921dd68e317a2f0a9504ca37d08a0bce53c700ae0220e63623ce3adde6bcc590e6b7f84cea3b
-
Filesize
81KB
MD5bf564383974a15f0eb47370169974cb7
SHA131b9a84b40b7f1d94558ef7a5a03750298e3a8a9
SHA2561193d334e10b8d831e8f6d90390fb0693eae9c67a98869ad6363d26c8c0a7ace
SHA5128bcb7e713ac14f8bf2456c94a040a65953ddf4ff514ab5b94c72921dd68e317a2f0a9504ca37d08a0bce53c700ae0220e63623ce3adde6bcc590e6b7f84cea3b
-
Filesize
961KB
MD5f9d294fce83647f2db52271455ef3358
SHA1d5a1e2c5cb6df88e4289b61cb447037f0ab8dc6b
SHA256f104638510c03618edb54b717b8c25d6e5feb2a40e2b8f7df6ce52a211efb62b
SHA5120638a7731ebc2c9aabb6691559af5dba968e20625cecd9a5e6f358284a5213e6a1a0b6e839f3e5b2bac77a9d676167391c831f226a6330af96736e5e1b829ec0
-
Filesize
961KB
MD5f9d294fce83647f2db52271455ef3358
SHA1d5a1e2c5cb6df88e4289b61cb447037f0ab8dc6b
SHA256f104638510c03618edb54b717b8c25d6e5feb2a40e2b8f7df6ce52a211efb62b
SHA5120638a7731ebc2c9aabb6691559af5dba968e20625cecd9a5e6f358284a5213e6a1a0b6e839f3e5b2bac77a9d676167391c831f226a6330af96736e5e1b829ec0
-
Filesize
265KB
MD52c90f93068ed78ace01868ae99a50abf
SHA10db600241e8ae50cf4041374b214ff3a520b9321
SHA25625b07afb02d92c83ef198028a0f8717058cbf2512bb8649927b91668db95e209
SHA5122db296c1d404d941008912dd2fb78d3858bd23290d673dfc68cdc5fee7e017976dfe2528de0ffd241a2ca01a98b055a6c4e5da3eb4d1b16dded88d1cd6691a35
-
Filesize
265KB
MD52c90f93068ed78ace01868ae99a50abf
SHA10db600241e8ae50cf4041374b214ff3a520b9321
SHA25625b07afb02d92c83ef198028a0f8717058cbf2512bb8649927b91668db95e209
SHA5122db296c1d404d941008912dd2fb78d3858bd23290d673dfc68cdc5fee7e017976dfe2528de0ffd241a2ca01a98b055a6c4e5da3eb4d1b16dded88d1cd6691a35
-
Filesize
260KB
MD5cdd156de5c42e46e957394672aae9ee2
SHA1ce7129ade04876a143541518158b6b164e3bb30a
SHA256077339d4017bc8fb3a8cd0e3233775f3ae5df0f8f18507b4539f92e133965b38
SHA5127401b2f5cae46a4545cef80f082dacd03326b8f80446a566720ab0f6effe581f79f174651bb90bea4e53cf0a44791452c2fd495a1eaf6711c3647e3693e37bb0
-
Filesize
260KB
MD5cdd156de5c42e46e957394672aae9ee2
SHA1ce7129ade04876a143541518158b6b164e3bb30a
SHA256077339d4017bc8fb3a8cd0e3233775f3ae5df0f8f18507b4539f92e133965b38
SHA5127401b2f5cae46a4545cef80f082dacd03326b8f80446a566720ab0f6effe581f79f174651bb90bea4e53cf0a44791452c2fd495a1eaf6711c3647e3693e37bb0
-
Filesize
4.2MB
MD50204db097c94b3c7fa22105c8f921111
SHA11fb8f70bdd3b2351a7503300350b9246487462f2
SHA256efc6ac346c11dbbc68e30038898f3a05e875f9c3958954978c52ccec17bb0410
SHA512b09ecd2750b4867cd52973b14ff56cf51615482906292018ad7547d2fff0ea0fd9789b936c2140d8b208f66295bfee73bce31582aeff46b6b08b8fb1aa6bf1d4
-
Filesize
4.2MB
MD50204db097c94b3c7fa22105c8f921111
SHA11fb8f70bdd3b2351a7503300350b9246487462f2
SHA256efc6ac346c11dbbc68e30038898f3a05e875f9c3958954978c52ccec17bb0410
SHA512b09ecd2750b4867cd52973b14ff56cf51615482906292018ad7547d2fff0ea0fd9789b936c2140d8b208f66295bfee73bce31582aeff46b6b08b8fb1aa6bf1d4
-
Filesize
228KB
MD560b6d42c961d17c52d9a3f59ea0bfe4d
SHA168baf91d3478021a6c3759e46403677e09e105e5
SHA25628ac8a83f083a7cfddcbb0d19cd1b7a31d582ed93883de72da9761b6ead58ec0
SHA512060d8ccbb4e417649d91f99fce2a79562a0cf67d5a4c54b2f5d8901f7b0fd9a8edd3ed8fb8be0d9f6fdd84c7cf9c66d2a527b974954359dab3261dfa41f85bf4
-
Filesize
228KB
MD560b6d42c961d17c52d9a3f59ea0bfe4d
SHA168baf91d3478021a6c3759e46403677e09e105e5
SHA25628ac8a83f083a7cfddcbb0d19cd1b7a31d582ed93883de72da9761b6ead58ec0
SHA512060d8ccbb4e417649d91f99fce2a79562a0cf67d5a4c54b2f5d8901f7b0fd9a8edd3ed8fb8be0d9f6fdd84c7cf9c66d2a527b974954359dab3261dfa41f85bf4
-
Filesize
5.1MB
MD551790f9ca72eb4e121389d98f256efa6
SHA18eb13d2a9dac68ffea6a64108525d0ab2268df1d
SHA2561c3ceafc260fa540dbdff4d632c786f140e2c0385493c5d370979b9922f7dace
SHA512e8af1cac85c5dc05ff06564fe6e92280ff4d43d9fb3c82bf216101212a1292208e66d2a0e6f68fbb447a7f7adbf369cd0c1e175419bec6566068f777b1f3b2e3
-
Filesize
5.1MB
MD551790f9ca72eb4e121389d98f256efa6
SHA18eb13d2a9dac68ffea6a64108525d0ab2268df1d
SHA2561c3ceafc260fa540dbdff4d632c786f140e2c0385493c5d370979b9922f7dace
SHA512e8af1cac85c5dc05ff06564fe6e92280ff4d43d9fb3c82bf216101212a1292208e66d2a0e6f68fbb447a7f7adbf369cd0c1e175419bec6566068f777b1f3b2e3
-
Filesize
81KB
MD5c3b569faa8871739efe0a67e177adeab
SHA1a83a4ec70176d0dc0ac74de6bfa28890c18f1d25
SHA2562db24a9659e7f74fe5c5ad742bbd8350c8f5be460f9adf1c9fa11e0f3b4571be
SHA5121040f16e2fd068a7fcf0d2229a61a2c36e1493a1ff06d5289347b127e7dab9fa17c06dee59512b374b55a23f32cb8d6fa7a93fde994f3af194f8513a9b239ae3
-
Filesize
13.0MB
MD57dc78de2fbde9442978f432f9c7f8642
SHA18e41aafd0385f06fb9e9ec036d60982e61811670
SHA2565c1857684e3e9143fb3999bb2bc03e674a9789bcb44881d20748117393443fc8
SHA512b41d8a97205747af615c5cb9b03d255b5ea7ef029cb989bb061ed3c2e32b480d916c55ae0e08302213889f0f508278c9d7ebc8c36b5dd3ad839384ce5dacd337
-
Filesize
13.0MB
MD57dc78de2fbde9442978f432f9c7f8642
SHA18e41aafd0385f06fb9e9ec036d60982e61811670
SHA2565c1857684e3e9143fb3999bb2bc03e674a9789bcb44881d20748117393443fc8
SHA512b41d8a97205747af615c5cb9b03d255b5ea7ef029cb989bb061ed3c2e32b480d916c55ae0e08302213889f0f508278c9d7ebc8c36b5dd3ad839384ce5dacd337
-
Filesize
560KB
MD574ff20be95539fb673bceff2d5d150f6
SHA120e87bfa84abf4543fcca8ce626fac08e3b694d3
SHA25638dc5275a395cd733dac65b1e8d9387899565998882a5b233d2ab229b4ed112a
SHA512cdc0d48856f9347eb85d52a217bd0bcecb220e82f08c49161cc5ad55fdd3b57631865e0c259065b0ea607be69cc2220af55e9bb20b02b30147efcb697c81bcdc
-
Filesize
560KB
MD574ff20be95539fb673bceff2d5d150f6
SHA120e87bfa84abf4543fcca8ce626fac08e3b694d3
SHA25638dc5275a395cd733dac65b1e8d9387899565998882a5b233d2ab229b4ed112a
SHA512cdc0d48856f9347eb85d52a217bd0bcecb220e82f08c49161cc5ad55fdd3b57631865e0c259065b0ea607be69cc2220af55e9bb20b02b30147efcb697c81bcdc
-
Filesize
2.6MB
MD5c02a9f49b6d9040d60535a0f2e540440
SHA1349697d630f1b1472b8a39db0c50181f76d1d40b
SHA2569274a10cc40ed77f4cd0a9d97607421621e375e277d806e153d48d454d79cdc7
SHA512e0cec21b656d49d63949f87ac30b4111a009e4953eb50e65f286c40b0d3aed57d63cb29b356575a059d0a1c1e5b0ee02e827aaae4388bd2365217602c26e677e
-
Filesize
2.6MB
MD5c02a9f49b6d9040d60535a0f2e540440
SHA1349697d630f1b1472b8a39db0c50181f76d1d40b
SHA2569274a10cc40ed77f4cd0a9d97607421621e375e277d806e153d48d454d79cdc7
SHA512e0cec21b656d49d63949f87ac30b4111a009e4953eb50e65f286c40b0d3aed57d63cb29b356575a059d0a1c1e5b0ee02e827aaae4388bd2365217602c26e677e
-
Filesize
2.5MB
MD55fa67482430aaac3e4fe740e5dc7591e
SHA11b62e1418a39ab6755ae910432921baa841e369d
SHA256e4a8ec03ff4c83cf08f06b40fd1af6065b31b34e0987a3d53149bfd48d753c77
SHA512d0489a7c7bd4dd5ee8cf5eddf88d25233e60434f485e432ef7f77d92f376210c866b8441581e484382d92354f0effe59baae60afecc2b406a36307187fcb6baf
-
Filesize
2.5MB
MD55fa67482430aaac3e4fe740e5dc7591e
SHA11b62e1418a39ab6755ae910432921baa841e369d
SHA256e4a8ec03ff4c83cf08f06b40fd1af6065b31b34e0987a3d53149bfd48d753c77
SHA512d0489a7c7bd4dd5ee8cf5eddf88d25233e60434f485e432ef7f77d92f376210c866b8441581e484382d92354f0effe59baae60afecc2b406a36307187fcb6baf
-
Filesize
1.0MB
MD5f0f1d9e78a6a80571c504c0a4c0a1656
SHA102d8a190e982cc75349a66079a1e06d88ca0f079
SHA256feeb656ca635d2d36c23ded04f79427ab27b2ae4289869247ef2685d4ef5cf7f
SHA5126ec06134bd0e71834fd27cf5ccc8d44b6e6e3bf744f00efc9e6fe89925902b4fc3a1284cd17f8f70aeeee26cba2c6aaa57227b6eb993be54fb08a1d6a2bd0f95
-
Filesize
1.0MB
MD5f0f1d9e78a6a80571c504c0a4c0a1656
SHA102d8a190e982cc75349a66079a1e06d88ca0f079
SHA256feeb656ca635d2d36c23ded04f79427ab27b2ae4289869247ef2685d4ef5cf7f
SHA5126ec06134bd0e71834fd27cf5ccc8d44b6e6e3bf744f00efc9e6fe89925902b4fc3a1284cd17f8f70aeeee26cba2c6aaa57227b6eb993be54fb08a1d6a2bd0f95
-
Filesize
38KB
MD536a2dd7ac440f438545b5f56e9b7c292
SHA19b4ba7df5ed60b25235ebb0fbb734b882dc2e2f7
SHA2567c4e49b8b32ebef7fda9bfa0b9fcc8259a3e5249a2411231671f0edd6e84070f
SHA512707149c409f57928a78a867a1bae1a1b3765f66d27674794fee27ca0ddc58edd1bab6b21e35aa11b87ab96a339bedcf4f30e61f83f723b9af5093d878282684a
-
Filesize
38KB
MD536a2dd7ac440f438545b5f56e9b7c292
SHA19b4ba7df5ed60b25235ebb0fbb734b882dc2e2f7
SHA2567c4e49b8b32ebef7fda9bfa0b9fcc8259a3e5249a2411231671f0edd6e84070f
SHA512707149c409f57928a78a867a1bae1a1b3765f66d27674794fee27ca0ddc58edd1bab6b21e35aa11b87ab96a339bedcf4f30e61f83f723b9af5093d878282684a
-
Filesize
236KB
MD50f6c09576b20b65b1dab828d160636ba
SHA17132482cb9550aa08abda60862613e59876093eb
SHA2561bb96885bc823f33d85e5cc0e99562511a103b48a218441d700c29a181c6e694
SHA51203f2bc63eb915c2802ecf60b953626a0ecb6be258b1835836aa81893b8eb8c6099c6181be1f1180bdb1ade9be5e2ae593e745962157e2ae13f48ea2e864fb762
-
Filesize
26KB
MD55fb41b2556022b4af4f4d5472fbf337d
SHA18bbd5aed52021c3b4948d0a10971e3a09b8d7bec
SHA256c69ac7dbf15eab7b7142d9a119dc26a2894bc8973b8f408e2e9be1917cb3af1b
SHA51218bcaadeda1af69a84d90b1c3f223e900905737540460e17710d6e937aa2f8e84b83632cf6f341619c1b634629a4e95179bb5b2fb78864592d27099036308877
-
Filesize
290KB
MD53d1914b09f0074666753d9b5c904a03b
SHA1f25e61e382fc58d1c3d1c906e2b63f15d182c2cd
SHA2566e17316baeb68e777ccb6dd15737a20cfe44e286fbc04e4f46a7930f771f5641
SHA51265ba07c492cb43cd5393ee54431e1854ecae8e17af7e90abe31cd77b87043cad00f93270f9374eb4353bf0a5ad110c6725ac559d06e8fe5cf4c79b6285dfae2f
-
Filesize
1.3MB
MD5a724f5da0a0184b5668ef2d85a7346e0
SHA17181fffaa6b8f0f29cf7cdd1b1b859c2b956d399
SHA2567f2284d3cca6171e50b47eabc4fddc8cd2c9641cab4edb12b26694427f559848
SHA512d9916d6581e5c25b6479445aef604e9e2dae6d64e1e7c6784516ef20616d2a8ab4253816ed7edbc289caaa9f1c88c6ba8441e8205616874ded5fd126644b83f2
-
Filesize
174KB
MD572910ea101c97d85aaa12ca69c48ffa5
SHA1e082fc176d9e24ee04d3c8d90134963191c2fc08
SHA2565c225a931136c4ce812c5c7253f0a4b4618f83872280560073c78a130168cef2
SHA512bf90e138e22365c6a6d4a69c3c286fbbdb3869668b4d6d338fad74bb9ec730d98191dd00352490cccec32e2413b2f999c3244cfcf2a20b4bdad503fcb76ba7b6
-
Filesize
174KB
MD572910ea101c97d85aaa12ca69c48ffa5
SHA1e082fc176d9e24ee04d3c8d90134963191c2fc08
SHA2565c225a931136c4ce812c5c7253f0a4b4618f83872280560073c78a130168cef2
SHA512bf90e138e22365c6a6d4a69c3c286fbbdb3869668b4d6d338fad74bb9ec730d98191dd00352490cccec32e2413b2f999c3244cfcf2a20b4bdad503fcb76ba7b6
-
Filesize
2.5MB
MD52e4347a3f5726431b0da97a7735be154
SHA12aeaa1c23ee68958e25cc40807b09e13dc3abc5c
SHA2569ef725ea9e38058391f04761466ce9d3a0fae09b045807ad05605f64b6fdd266
SHA512894c2842182f85f7501bcb94f034fe88cf8dd69301b0d4a68abb801d846ef33f250037e1a89d7d95f78b322525d507b0f15b9c996e4f46897f28a60faccefda4
-
Filesize
2.5MB
MD52e4347a3f5726431b0da97a7735be154
SHA12aeaa1c23ee68958e25cc40807b09e13dc3abc5c
SHA2569ef725ea9e38058391f04761466ce9d3a0fae09b045807ad05605f64b6fdd266
SHA512894c2842182f85f7501bcb94f034fe88cf8dd69301b0d4a68abb801d846ef33f250037e1a89d7d95f78b322525d507b0f15b9c996e4f46897f28a60faccefda4
-
Filesize
429KB
MD561414859fcb6ca5e03aedcb990bc5e50
SHA1b37dbd2dbbf3e45b3aed711c0fa8050cee969d7a
SHA256242db44cbd857272b66267f52afe8ecad9fbf6a7e1ffef4d1bd4beb5c1b6290f
SHA5121e1f6e71f017b37e051e8b2168d9832cc5b05d279cc2525f5ce9297cd0b9bdaaf5d515151f32a9810434bacbfef59d5fe1ee8f76be5acf07fcc5226aeddec366
-
Filesize
1.9MB
MD5f9bee761cafcde8fc5deb86c6cbf0ecf
SHA12493e43d79fc84e41f3f2c4da4d47af3f2c01508
SHA2563d2dcb7f7207b7bfe4dedccda8792571c3e7d66715fd986afe46050990302bd2
SHA512d270e47b494275afa14f584c1803197bd111160445dc5ed3eb9db74f8a6eeee7c365d4d4529d878c01510d6899379508f994185e2da43f02e78a9bc46483ea5f
-
Filesize
1.9MB
MD5f9bee761cafcde8fc5deb86c6cbf0ecf
SHA12493e43d79fc84e41f3f2c4da4d47af3f2c01508
SHA2563d2dcb7f7207b7bfe4dedccda8792571c3e7d66715fd986afe46050990302bd2
SHA512d270e47b494275afa14f584c1803197bd111160445dc5ed3eb9db74f8a6eeee7c365d4d4529d878c01510d6899379508f994185e2da43f02e78a9bc46483ea5f
-
Filesize
1.7MB
MD5c922564534c024c9078719b395d31154
SHA19752d125f2563f041f7126f153fbc1facea6da70
SHA256e12a5af5fd97642c85a4b762d3faa9c06aa5938cc9ed58ab80e1d64cb1c7a579
SHA512d87f7e1194886b2c50d532be1453943f9444c32758d304fea27b8ee94eeaa8e617ab5b341fc0c4561d278f517b1be92d167e2d9ffdcfd260feea0b5f72d4d117
-
Filesize
1.7MB
MD5c922564534c024c9078719b395d31154
SHA19752d125f2563f041f7126f153fbc1facea6da70
SHA256e12a5af5fd97642c85a4b762d3faa9c06aa5938cc9ed58ab80e1d64cb1c7a579
SHA512d87f7e1194886b2c50d532be1453943f9444c32758d304fea27b8ee94eeaa8e617ab5b341fc0c4561d278f517b1be92d167e2d9ffdcfd260feea0b5f72d4d117
-
Filesize
1.1MB
MD559de5b2731e4d2f4f50da052dbba33f8
SHA1717ab8dbf1bc7fece41bf27bfd75b35dd0745a1f
SHA25681602b9cce99c0da22aff13febf7c4c86036602e5c1b5f4ee77ecf0f02547a1f
SHA5124f1a28d8244cbc560c00a452b245ca8c0a5c834fd80f2bebf4eec8e685f9cdad64f86e4164f808607145b298e4dc4e007b90147941b972f769a005a2813a4b11
-
Filesize
1.1MB
MD559de5b2731e4d2f4f50da052dbba33f8
SHA1717ab8dbf1bc7fece41bf27bfd75b35dd0745a1f
SHA25681602b9cce99c0da22aff13febf7c4c86036602e5c1b5f4ee77ecf0f02547a1f
SHA5124f1a28d8244cbc560c00a452b245ca8c0a5c834fd80f2bebf4eec8e685f9cdad64f86e4164f808607145b298e4dc4e007b90147941b972f769a005a2813a4b11
-
Filesize
330KB
MD5d34ecd24706dcfff478fe6fbe79026a9
SHA1e11540244a99a5d7c95643f14cce042de1710ac7
SHA2564a55ba7288d61c50d5f852c1d07877da46b036c49559e648006839a3cb932a55
SHA51216de6747156d1f7d6260e29a40706e4f81bc36e45246431bfcf0c097e8b598ed907edd4049240f080971efed07483876fad339a8940bda41d6ac6103fdf3b915
-
Filesize
330KB
MD5d34ecd24706dcfff478fe6fbe79026a9
SHA1e11540244a99a5d7c95643f14cce042de1710ac7
SHA2564a55ba7288d61c50d5f852c1d07877da46b036c49559e648006839a3cb932a55
SHA51216de6747156d1f7d6260e29a40706e4f81bc36e45246431bfcf0c097e8b598ed907edd4049240f080971efed07483876fad339a8940bda41d6ac6103fdf3b915
-
Filesize
120KB
MD5440d85d6f630184f6a62233aa29366b0
SHA132b3c7daf4b4727fdc1020b1eec978869e84aa37
SHA25603510febc456b68ad326bf13a9633fd1bbedb26550de62233c3bce3e68b4cb19
SHA512c6f1d800f455753d0ef36e8175dd11888f62020b8813615e3b2ca0e5ae9195ae0389955a71ffc929358030d2128249ac0a44e6e5e73960d7f3c3948b8e350e6e
-
Filesize
120KB
MD5440d85d6f630184f6a62233aa29366b0
SHA132b3c7daf4b4727fdc1020b1eec978869e84aa37
SHA25603510febc456b68ad326bf13a9633fd1bbedb26550de62233c3bce3e68b4cb19
SHA512c6f1d800f455753d0ef36e8175dd11888f62020b8813615e3b2ca0e5ae9195ae0389955a71ffc929358030d2128249ac0a44e6e5e73960d7f3c3948b8e350e6e
-
Filesize
510KB
MD59fabd2b05e234dab5753b0939b16174f
SHA1bf3c4a7f32af2142496d352a8af8c142d891f85c
SHA2568b14cee55ca73d3ae9545f02f066edcac9eb7e5213a050b486228a47140c5a88
SHA512eb6042ce5d8660fa9179e8b7d6379c9f37553b62f09a2d5e8ddeef65382db4596fbb444717d09da268149a15588585503c6497bb3722ad04149d03bec22b33d4
-
Filesize
510KB
MD59fabd2b05e234dab5753b0939b16174f
SHA1bf3c4a7f32af2142496d352a8af8c142d891f85c
SHA2568b14cee55ca73d3ae9545f02f066edcac9eb7e5213a050b486228a47140c5a88
SHA512eb6042ce5d8660fa9179e8b7d6379c9f37553b62f09a2d5e8ddeef65382db4596fbb444717d09da268149a15588585503c6497bb3722ad04149d03bec22b33d4
-
Filesize
936KB
MD5b7c4cf1db25e98a958866db76d30f5ac
SHA157633ab77fa87cd5c0c6f7c8b156a07e051a39bc
SHA256020671faa0c6139409fc8287e4bc188ae3882e3881802d37daade686de0471ce
SHA5128f70172d50d9ea39d3a8428c5ea93ef35b21cf9db62c5eb80b654b1acfbc03ed13b78e905d19a444b2cb5c77918b665e2c882a8562e367d12672b70ec3c08321
-
Filesize
936KB
MD5b7c4cf1db25e98a958866db76d30f5ac
SHA157633ab77fa87cd5c0c6f7c8b156a07e051a39bc
SHA256020671faa0c6139409fc8287e4bc188ae3882e3881802d37daade686de0471ce
SHA5128f70172d50d9ea39d3a8428c5ea93ef35b21cf9db62c5eb80b654b1acfbc03ed13b78e905d19a444b2cb5c77918b665e2c882a8562e367d12672b70ec3c08321
-
Filesize
81KB
MD5c3b569faa8871739efe0a67e177adeab
SHA1a83a4ec70176d0dc0ac74de6bfa28890c18f1d25
SHA2562db24a9659e7f74fe5c5ad742bbd8350c8f5be460f9adf1c9fa11e0f3b4571be
SHA5121040f16e2fd068a7fcf0d2229a61a2c36e1493a1ff06d5289347b127e7dab9fa17c06dee59512b374b55a23f32cb8d6fa7a93fde994f3af194f8513a9b239ae3
-
Filesize
81KB
MD5c3b569faa8871739efe0a67e177adeab
SHA1a83a4ec70176d0dc0ac74de6bfa28890c18f1d25
SHA2562db24a9659e7f74fe5c5ad742bbd8350c8f5be460f9adf1c9fa11e0f3b4571be
SHA5121040f16e2fd068a7fcf0d2229a61a2c36e1493a1ff06d5289347b127e7dab9fa17c06dee59512b374b55a23f32cb8d6fa7a93fde994f3af194f8513a9b239ae3
-
Filesize
2.7MB
MD593ad40cb8951e3a6c94c35358fed70f6
SHA18446707ef9ae92d49d45e0c6b59fc8b593fc4580
SHA256796cea842e091a8865349ce458a6198f2a3deedabe7c5a98543852fbe6d7cdfc
SHA51246d1bd9ce79b14ca5107f581b8673ccfff7dea0fdba0a7f78fe38a682c770313056afd8e93343df44ef695c89adb490044d79985686d5955c0ec9172ecc9e6f6
-
Filesize
2.7MB
MD593ad40cb8951e3a6c94c35358fed70f6
SHA18446707ef9ae92d49d45e0c6b59fc8b593fc4580
SHA256796cea842e091a8865349ce458a6198f2a3deedabe7c5a98543852fbe6d7cdfc
SHA51246d1bd9ce79b14ca5107f581b8673ccfff7dea0fdba0a7f78fe38a682c770313056afd8e93343df44ef695c89adb490044d79985686d5955c0ec9172ecc9e6f6