Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
12-06-2024 12:54
Static task
static1
Behavioral task
behavioral1
Sample
3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe
Resource
win10v2004-20240508-en
General
-
Target
3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe
-
Size
167KB
-
MD5
3bfa3d83c3f20dc4f54fc325832f3020
-
SHA1
22bbcb15f27130599ce5fcfb75a63353e75d690f
-
SHA256
68c3cda2c15cbe2cbbd84e254c6ec00c6c7bb7a0a5d66c3f0498d9bfcd1c465f
-
SHA512
3d327220cf5603beec056d55618274375712ff6ec846998c02d2091121c21ab0a877adfe31b4f9d87422ef6346cde7018d950dc446effce31574f7e3aa5b8aa8
-
SSDEEP
384:GBt7Br5xjL9AgA71FbhvoBlLLTBSBFBt7Br5xjL9AgA71FbhvoBlLLTBSBLE7Es:W7BlpppARFbhF7BlpppARFbhQ
Malware Config
Signatures
-
Renames multiple (5148) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
-
Executes dropped EXE 2 IoCs
Processes:
_Desktop.ini.exeZombie.exepid process 208 _Desktop.ini.exe 2504 Zombie.exe -
Drops file in System32 directory 2 IoCs
Processes:
3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exedescription ioc process File created C:\Windows\SysWOW64\Zombie.exe 3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe File opened for modification C:\Windows\SysWOW64\Zombie.exe 3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe -
Drops file in Program Files directory 64 IoCs
Processes:
_Desktop.ini.exeZombie.exedescription ioc process File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL011.XML.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGMN120.XML.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\WordVL_KMS_Client-ul-oob.xrm-ms.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeStudentR_OEM_Perp-ul-oob.xrm-ms.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial2-ppd.xrm-ms.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Office16\mscss7fr.dll.tmp Zombie.exe File created C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-memory-l1-1-0.dll.tmp _Desktop.ini.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\klist.exe.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Retail-ul-phn.xrm-ms.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019R_Retail-ul-phn.xrm-ms.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Office16\LogoImages\PowerPntLogoSmall.scale-100.png.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL010.XML.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\PROOF\LTSHYPH_EN.LEX.tmp Zombie.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power View Excel Add-in\BI-Report.png.tmp Zombie.exe File created C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-memory-l1-1-0.dll.tmp _Desktop.ini.exe File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main\baseAltGr_rtl.xml.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\it\UIAutomationClientSideProviders.resources.dll.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial-ul-oob.xrm-ms.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelInterProviderRanker.bin.tmp Zombie.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000018\cardview\lib\native-common\assets\[email protected] _Desktop.ini.exe File created C:\Program Files\Common Files\microsoft shared\ink\en-US\mip.exe.mui.tmp Zombie.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Dynamic.Runtime.dll.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Licenses16\Professional2019R_Trial-ul-oob.xrm-ms.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Office16\LogoImages\OneNoteLogoSmall.scale-80.png.tmp _Desktop.ini.exe File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\symbols\symbase.xml.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\Microsoft.Win32.Registry.AccessControl.dll.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Licenses16\VisioProR_Retail-pl.xrm-ms.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Office16\LivePersonaCard\images\default\linkedin_logo_large.png.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Common Files\System\msadc\msdaremr.dll.tmp Zombie.exe File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\deploy\messages_sv.properties.tmp Zombie.exe File opened for modification C:\Program Files\Java\jre-1.8\lib\cmm\PYCC.pf.tmp Zombie.exe File opened for modification C:\Program Files\Java\jre-1.8\lib\deploy.jar.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ExcelR_Retail-ul-phn.xrm-ms.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\MondoR_Subscription-ppd.xrm-ms.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Licenses16\ProPlusR_OEM_Perp6-ppd.xrm-ms.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000042\index.win32.bundle.map.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Runtime.Intrinsics.dll.tmp _Desktop.ini.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\8.0.2\System.Linq.dll.tmp _Desktop.ini.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\zh-Hans\ReachFramework.resources.dll.tmp Zombie.exe File created C:\Program Files\Google\Chrome\Application\110.0.5481.104\110.0.5481.104.manifest.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\PersonalR_Trial-ppd.xrm-ms.tmp Zombie.exe File created C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Runtime.CompilerServices.Unsafe.dll.tmp Zombie.exe File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\auxpad\auxbase.xml.tmp Zombie.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\6.0.27\ja\PresentationCore.resources.dll.tmp _Desktop.ini.exe File created C:\Program Files\Java\jdk-1.8\jre\bin\msvcp140.dll.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Java\jre-1.8\bin\api-ms-win-core-processthreads-l1-1-0.dll.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_OEM_Perp2-ppd.xrm-ms.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Licenses16\StandardR_Retail-pl.xrm-ms.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-heap-l1-1-0.dll.tmp _Desktop.ini.exe File created C:\Program Files\Google\Chrome\Application\110.0.5481.104\Locales\gu.pak.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Office16\FPA_f3\FA000000003.exe.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Office16\msoutilstat.etw.man.tmp Zombie.exe File created C:\Program Files\Common Files\microsoft shared\ink\es-ES\TipTsf.dll.mui.tmp _Desktop.ini.exe File created C:\Program Files\Java\jdk-1.8\bin\jconsole.exe.tmp Zombie.exe File opened for modification C:\Program Files\Java\jdk-1.8\lib\jconsole.jar.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Licenses16\O365ProPlusR_SubTrial1-ul-oob.xrm-ms.tmp _Desktop.ini.exe File created C:\Program Files\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\VISUALIZATIONENGINE.DLL.tmp Zombie.exe File created C:\Program Files\Microsoft Office\root\Templates\1033\LoanAmortization.xltx.tmp _Desktop.ini.exe File created C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\7.0.16\ko\UIAutomationTypes.resources.dll.tmp _Desktop.ini.exe File opened for modification C:\Program Files\dotnet\shared\Microsoft.NETCore.App\6.0.27\System.Net.Requests.dll.tmp Zombie.exe File created C:\Program Files\Java\jdk-1.8\bin\api-ms-win-core-debug-l1-1-0.dll.tmp _Desktop.ini.exe File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\SkypeForBusinessBasic2019_eula.txt.tmp Zombie.exe -
Suspicious use of WriteProcessMemory 6 IoCs
Processes:
3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exedescription pid process target process PID 1016 wrote to memory of 208 1016 3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe _Desktop.ini.exe PID 1016 wrote to memory of 208 1016 3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe _Desktop.ini.exe PID 1016 wrote to memory of 208 1016 3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe _Desktop.ini.exe PID 1016 wrote to memory of 2504 1016 3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe Zombie.exe PID 1016 wrote to memory of 2504 1016 3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe Zombie.exe PID 1016 wrote to memory of 2504 1016 3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe Zombie.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe"C:\Users\Admin\AppData\Local\Temp\3bfa3d83c3f20dc4f54fc325832f3020_NeikiAnalytics.exe"1⤵
- Drops file in System32 directory
- Suspicious use of WriteProcessMemory
PID:1016 -
C:\Users\Admin\AppData\Local\Temp\_Desktop.ini.exe"_Desktop.ini.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:208 -
C:\Windows\SysWOW64\Zombie.exe"C:\Windows\system32\Zombie.exe"2⤵
- Executes dropped EXE
- Drops file in Program Files directory
PID:2504
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
167KB
MD5f15e921a53909cd58de553aef8fcc15c
SHA19097d24cba8f642aa5ff2fbb18158814e22ba760
SHA256f1f0cca6defa9de27e0308b3bab57b26123412244ebacccf5695dbbc84f7a132
SHA5120bfc478a0364a31846625a439eb4955938fb266a3b20045153d4fa707e8e9f18ed769eeb04ca45bc6f3db6fb39d6391043cb0dddd39d9e8de36b891ce49610e1
-
Filesize
84KB
MD52bf39b61cd2cc9be04c3f480458cc95f
SHA1f62393cb7c9ab1fff0f5129dee0b4037d2083b1c
SHA256d44303428d6c0f07da3d291782d4328e2ad67834cd5c54d80debd4fc5424c543
SHA512550680d1451a262e2ad56868ded0c7e8ff4922e1d6bce8e933cd613600798d02dcb9ddf15c2fe084f546efcb726f2678469131272350e6e35df7b72550551905
-
Filesize
196KB
MD59cb9517095f070079ef40a4c129eae4a
SHA17db28471b679e799897c37f0d54b9e068c47ec15
SHA256fa3e836446c59df0b43b2e708dd19092ae2babda0b2257f6bfde35b9de8f0874
SHA512f2744114500b43b980d3a72e4ff6dae0da167a6eef70e57933897736315c074612aa8f98d7a6b67b8c6462f362d2e1c19a2e204f1986bce9f40fe23a1d90ad23
-
Filesize
183KB
MD55740d7d45af281c1370d3583c00b9bad
SHA11b88b860e39bb331dc0a005e1ba54a2712fe19bc
SHA2561d871c2c85bc5cd381d6a5f45b79f0c37359c651ef2844394260d40b7f5da57d
SHA5127123ad8049d9d5822246cc1a440d96895dcfb3764311d20cbefebf2656d5b5ccf5d6502db20be2e33afc264487de302ef6386f12d09ef2dec7074da4dad3821a
-
Filesize
627KB
MD50898a9fb8045c9391715aa5f9146d8b8
SHA1af1b7e1ac891894ee06e78351804bee19b24990e
SHA2568f7219ba23d728aea968248cb02786aefd6de93d598a554a313580c4e298edbd
SHA51296b097f501ee3b425884595d6c1cd8b150c2b42a3035a949203295df4a2c714d579af55446255cb8a814f55917a5cef22ad129c773ab212b8d546080627d114a
-
Filesize
272KB
MD5d7f692cf5da8360f02f072101d753d50
SHA1c1766cd973f8a7578503f11dae915e2683c5aa96
SHA25609f3244c8c5578e41e6fafc5b20422144ee50acf183f9b9a7055f8571e74c3fe
SHA512a2fcdea3fed6a0070b49bf73f9d5c31f22c3866effa13cd90318101b0497f3320ab830df68c91bcda2c33eceab9a7559d3e6e58db119ff77fca5d5b789203e8d
-
Filesize
1014KB
MD5631fed2c2b3f7d22cdabd3702830891c
SHA1bc6153f3187bf70f44c8134b614ef2816226549a
SHA256a0d50ffe6a5dd8876c2b1ec29481dce294a46260cae70a6e0dbb15f494dda8c1
SHA512316f5fff98040bee787adf51cf5a61415efc5f0440ba45725c6f8871aac7fbc87aa57a5c6550a34105dea44ef9bd854ba9a3f04b522fb163b79601cb636b00c8
-
Filesize
768KB
MD5c8fced7f225edc86660b42762df7104a
SHA17d8092481478bbdd2243c96a52c513750d37c523
SHA256e9c0e50a36eaea0a23c87db34782e8dbf55e71d0f258c06e3e65105618e46e12
SHA51251ba33de51253a215f95362a34d6e481adce71915a0979049f3c026fa43bc48977878d74c5828b2df6e145f74260b509435bc7fe7bcdd52f4730d5f4b379e3a2
-
Filesize
141KB
MD531351695d730a1d41f6b05624dca0ade
SHA159cf4ed251c119599f8b6a7e62836774e0ddf734
SHA256ce704b8366f5a0b9043698c8c865b5805f1d4cc8c7689bc78dc94c54047c2569
SHA512d6aa9e29968d69ee6cd10e5b3305e6732c5728f4d93370c3e4b6b28d77901243ab4d97ba301816a4726c956c36d045f86dd964e3c0e04f840e3607d4c07fdd33
-
Filesize
93KB
MD564d03b6a01ae2fa6e416b2ecb3205f46
SHA19a53ce604f7ca5aee52ca7892d8c4d50fd212b1b
SHA2568c1f61e228ba573945e36200d22d655ab91ba8b27d83ac8bb592567e889183d2
SHA51203996426d6caae2431941d248b2e8dbcbdc4ffadc1a0e66e4ce66531f41156d75a528d20e9eb2aa9e33e3ebb906f3cede82b40504b5fd79f778a56c8d207c791
-
Filesize
91KB
MD522fc35bc0180c5d649066098bd11333d
SHA15fd29f587b5f73a43365ab74b948df850d33dad7
SHA2565dc963bcc20f8b3d4d0428d5284a22e478bbe871d782d54e5b3e37c7ae6adef9
SHA512c60cea8c8e67246ecda8e75e88bd3b9794931b3ce44508d0081ae55fcd7207064be7dad27028c78ce9bf4422be8172ac8e7d5c9a6d8270271e387f0944b12539
-
Filesize
95KB
MD5653ee127d6b109ac3eaaf5c2895efc29
SHA1a25da97bbe0663c7e03f5af19cb4c2137ee59cbd
SHA256f693926ab9c3d642582be4fe761d89695ad60bf1c801ba5afd5ab66f7f223f8d
SHA512d3ff8aa1f7952c7829f5a1be9dd498e87b14f855f6159a40101fbff18f13c484a0c815f6afbffd28919fa4e8a942a2137634b0ff51219c6dabfe9a0f08c00b5f
-
Filesize
93KB
MD5177b8492673b8f03be7237c7dc83d10e
SHA1d0121eb7be9727f96ca2d63d02e8378a0091735a
SHA25665ba23cedfadc9c09c6cc2b4fd3f3266e86ed1560f1e457b10be884c38de3e0d
SHA5120b0c36e43fec388c9633d3f740c2f6614d31b17b9a611fc0895c4d9fa6c30560df3e7ec0a8dc47697058705f104675f19a32ef97eeb7f8eb64dfb98d6365cd05
-
Filesize
96KB
MD59baa51a8fec4f8b83e6915167f72bf54
SHA137c40c6ecdd14f5e59e5d6d2a2ba85f3320757e9
SHA2569d5250527538f9176fcc2766cdbe3f4c221f5afe5e6505fd881c93e3bfb1067a
SHA512212e06bef91c16841158001a1e72dd635e031d7e444ec1b0888631778a971a1d70ea41aa70a01284ed03f052412ca15a56918242d8959a3c645b07649adbb6d1
-
Filesize
98KB
MD5b73bfe87f2b4031df9d0a34bbf11fc07
SHA1437bb6af080014950ce3fae8931f9fb7530a00cd
SHA25698de47c6df933306becea2ec116ddc0086f8534a5974e39470e284e241bf818e
SHA512137ff6c63a1e32137c55e7850d5e88b9b4743bdac58f9860b2f682f7e59be689d1fc77bc6072d431ec035324891c05820ab954881f4e609c2f0e510a0ff5791e
-
Filesize
94KB
MD5ec74150022fd25bfabb77a1e718246ff
SHA1520bc071e4d98318456b162bb8088c682650e570
SHA25698ec98dfd87f7be0d611209a05c5c1f0ec2031bfb86cd2fd349c192d1c61b57e
SHA51238b669f74e4ee0d9105b25521b70c51cc9e30e310a08b33ab6a445631f576f088714a274980a975fd1a31ec259f1e4a0bdf4cc783379cdf92332d0d93d8a2fc3
-
Filesize
88KB
MD5aea6f1d7d3d238db9b61b81a0f4247d7
SHA109a9a11e485339a273f15c7b9ca32a4c031be30f
SHA256dce232cebfdf14986745c83160a88e1278266c86c5345aff4d984ba0f0aa9a08
SHA5125600fa3872f3f775795c10d3abd8f4cc45873f6b6fbed857c309ecb39ead968632d838a59e60297a7a4482467f04a2dc8ab2834a2741721eb0b176cbb6da578b
-
Filesize
92KB
MD5cc6986c134f872066492e2ae8223a7bb
SHA1cfa318827beadde6fc386bbea22c1c15741ed6f9
SHA256bee605980b2a2b4175217755a0afa97f8ae784cf14677ca25bbf916a9c647ac9
SHA512b38c570abdd0440c76458a2a302d44d35cd3257f8f9eb10a50ddd1d2a890c6091d21500bbfc50c8cd7c8d1bda0cc00c74dbc3b44114760cea47717baa1d21f2a
-
Filesize
99KB
MD5651afa9c83fb04468ea8b46bd942702a
SHA1a396284ce5cd76433b5670b96e4db3d3c56c9098
SHA2562d462026dd85945ebeae2b5bd2c06c25146a5898ee1e12b2711a77a7cbfc3bd7
SHA512cfbc20740667332248e4107a8fa7d945929d18bb21648c4919d9f561d153f24c227c2644456cfc8d38fcd52e616d5351be4b601750097852c5eb6e86bbcad5bd
-
Filesize
88KB
MD578c527a0b4313f20e27cb5ac01cf56fa
SHA10a9dbaead4ed2e66f801cbcb3691baf4e910be2f
SHA256dc05336b52b04eb255d7eb80523767139ed40469c065ecab884947421672feeb
SHA512d49ee1247443be88e82152867417c05d5265c09fd7bee345af73af310e463c33bedf33f1307f0c3bfbb6c74522db99cf4ab439406711eeccdd55510df7abde4c
-
Filesize
93KB
MD5f9ac873990a9dbf1225c7d82a80a0b2b
SHA1a38a19c8225949777b5f4e674e0c13f0f72f46b4
SHA256219aa1451c43c10af95202cc9e118dc01eb2d2ae83ca1e5885c8f6071181a6c2
SHA5129d22533c0fc50c6d7e730ba7d3f3a87b5f1fc6738ad32e138cccf615df969b894ef2af2c674fbb21f2fcafefc883a8bfab7b5cf70edcdc418a12a046aa59e3f3
-
Filesize
90KB
MD58def4d6a3fa2285e7d434dcd673170e6
SHA15c548cb30fedf37f9a8d4be2e94347ffaee10a5c
SHA256e07170e17ed32183036ce270467a99b4888a5845f5579f7308e2340d33c8adf8
SHA51226c9aae2d97436a2eec8134f8e344d1159db029beea44436b15429914b7a51e5f1e2015590fc9321ac642d36425d230fcae41046eb9b54cf5b2ad6a9f7f2eaf9
-
Filesize
97KB
MD52a7081aba356ae88c5dbc6d912edbaa4
SHA1677f13c59431fd57347dfdc1d9bbfee43699d041
SHA25655d47e8d73f3a48bfc5c9202c3ceac9d2501425a2f9a57df0b210236cbbc1266
SHA512a4fb76f172a6668ab84e2899ffe22b485d64af1ead5a441c10054e1778e622be7940c8acf0be8182bdb4592142fd01c0ec7bec6ab4afe8f93cdd8070ff33f826
-
Filesize
92KB
MD5901897824392bfd1c5e1ae2f0db49ef3
SHA114bcd8c385fb3a3f3ce73aab1a7843ed9b08e8d6
SHA2560469573f5bc3f778711c12e231f921a2f1a34265bc346a5cf9575c22bf09564e
SHA512f1ffb87f4d6c43e14082fb68a22177b773b20fb0685ca074f890650b4488b42b0adbae427e361df3acdcd8ffb769a1ca9bdcd23b81944dee8f0a9db20bd8dec0
-
Filesize
92KB
MD55b916e33110a28c588bdc79403a6fcf6
SHA18efa35dd7f8881e58ecd6a3209654b702baef87f
SHA256c07f1c0dcc1d014c92578ec789bedf20d13d0da654ec8069a0c3bc4ee93e4402
SHA512a34ecd21150e2ef6c88ceb81aea208fa0d1310d07c5ed0885a13cebe36c02d1fb115e637ef35b36091cc3849671b9091cbbf607f9602212a0a70ecf53d24ffc3
-
Filesize
101KB
MD569b4eebfddcdb8c2e85e40c5416bca69
SHA125a03bde66874fd5d9e7c6d45dfb44be1df4a230
SHA256c0738fb013820b9c45befd5e2346cf35157cdbb4ff512f512d73ec9a711e7315
SHA512bcfc6bc85dbd348d639d26f69732486da7faf888678f3baed697b05a8a8a26fcf794100a5f495cce40ad55a49742b317e631c1ff5a466e226b77ce61d72a0a57
-
Filesize
92KB
MD583da7d0db94d1e7ed8b093bcc5270183
SHA1670f1df19e14549a87fbdca18af9ea6d2906fb70
SHA256a029fb1fe586c40b3e6d571055c6dc9af5102195f9456a2a1cf50f83937d849d
SHA512d6a2e6a78fce4e69e51d8fbb6335523c00e807850cfab0e88653a2dd8559e9b09527c2cdc9329bf18aad542e3615e5ccf36c3f905d0f576b1b6c7ddd38b07aa9
-
Filesize
94KB
MD5f542de822fd6eaaea4184c6cc9695c35
SHA19ddb8bb658b6e79c8579860ecc23a0c1297ca838
SHA2562fef5f82cc1bc3ce6c5ab2ae8c5a2c8b3851e81c1a812bd0a0d67da2c45a2cf4
SHA5120030b7cabe586149dccc54f8e9528545d1bf2bc42fa746ef1f55c1b5de37e4ea3de2f9623bd8c5013b245810e7fa95e3ae283ee5d1bdc8004b59d8a17874a88d
-
Filesize
91KB
MD597f5d860ceef05d6acfed735de341cae
SHA1e18902474bba036900f159a54c181b46fa6aeb60
SHA256a65a90cd4356b639f433bbb1ef49b26bc5556933e6429d518f2fc7a1f4f80ec9
SHA51204275f75e4595aa550f2f415fe2c7ecc5d45db0cc1c5d6ce4aa5d68f53690bb7f157fac3db1b44de8c0c65ce334483dd959f8f40cdc790d76f5821abc4ea9186
-
Filesize
91KB
MD5333c9697a47fba41b5b59c227b016f36
SHA1194e479e615956621eb48afcbf761da1ba142b21
SHA256f7c184afed8597a3d2826ac2eb53efd21bf67b63dd88bb36e27154bdd433dc8f
SHA51267dcb83f8c728a9c52485ba7cf40bed3e38951248262ec77072fcbb15446b98c1688d6952ce174ab94ed43f84996663c03964645f6c843c6efb9959589aef5e0
-
Filesize
95KB
MD503aa344b20c857fcd627bf187611bea9
SHA1ad931aa7e217fba0df29d5ef2fba7a846a7d629d
SHA2568e671c1c98922292761376f756cdcc95dc28ff2a632394a61c34006a2a4164dd
SHA512152371452ad4f90fb5c5bbbe1eafbcca999bc3344f9ce43d956ab415e11818fb39e18792995b8f0fa837b80a0c60275ef2146f48bef888734053ca9f87d8a968
-
Filesize
101KB
MD5daeae39676a43e98f938f12043c08a80
SHA16361aab353d1db00ac80aeff5bb6bbf6310388aa
SHA256a68fc568dd6bdc521a5e7bec1291a04a8007501565542efdc5fdf5ed4fad0a6f
SHA5125f35a10e7ac55e4c194ff4b9b394dca1df223cec49e416f355f7611cfde96255a8fce51e9b516456f41f7b9cf1a233e0f819a07ecc272b1f816c20ba0bf1d87e
-
Filesize
84KB
MD5b55fa96fcc354a4515dc22ec59efbc7e
SHA17686f9098a1cdbe40c8274f7ed023a2ae2be1c16
SHA2569d8a74422aaaed5fa8bc06205c05933fa23776dcb0034ece53539c7d827a4334
SHA5125d11104f835beb01a46f7210c889d37d18501d8b66a93e48cfceee9c67a75248646c778597f20e31728397b3ee46cca4f10aa6ac0c32da16c73c0cdedff3b3d3
-
Filesize
91KB
MD584b215fbe435da8ce0d65b74a3188399
SHA11ab1008767c2715491670a0159cd170103638ea6
SHA2566a221e82aaca74a7aaa911eab4ac1167f2b1c566aa1e2806c7c0ef241644a9a9
SHA5123ac6726458920a1591e129365c9bfc4d9eb98321ed1b63841fbc9ee7634129cbc0c95ce06ebc8292e221e26689fd14ff4d754503023e9f1f327eab274f708e17
-
Filesize
93KB
MD5db454b5b2fcf7623eac00a6ae23abbc8
SHA14b26dc0f88e51bebf4762b43f850527d7eaebe8f
SHA256f1775d69a9df79184f2facd262aecb15b5f0c3b801be36f34fbbee9373059afb
SHA512a86b7669ce3d456efea91d3a592d5d49ba697b8f34844f91b8ba0f6baca9478c2ecc548b4cb4f9edd3d83012a247c09bbaacd273a425f8267ae513093fb58b48
-
Filesize
83KB
MD5ae2cdcf81c62b0772546cc9cafda862b
SHA1e797948a9dd0825fd39f3599f68106c5479ee426
SHA25652ef551c536e546e4b3d62ae229af4e13776110700e37d442a6718761e898e96
SHA51265f6224c3106fbe58b3313e0492bfcff8cd204ac9b604584f79091527eac9d1b9b645c7898414baa9478338a0f02950e7bf16149736250f617812dc542e072ad
-
Filesize
93KB
MD5f0a31b4fa807235c7560ececeb817336
SHA15f819ebe0b2c25e8d5c71ea31675f939568f7c8d
SHA256d9517e546d87f398d2aeda6bedcaaccc13d5fc123a00117eadf98057e8863348
SHA51240af5d607ebfa8ac3623d2ec1b58ac5449e9d1c4f2319bc8366252b34ba22c4667b04c0ee80aceb67cd4979c09007344e4555e736e9ef6f7c43b6d8ad603b639
-
Filesize
89KB
MD5304469e0e49f0afe8eb28f5389c45131
SHA18b1f317762bb128cabbd592ee840a363d7923c54
SHA2564c5106b7befb5dcfc5c1b3281daabb8c766750563696d87c258fc9f29f30e603
SHA51207878e3c07f56f9f35700e0681b651d147258c38f0c212cd93b649ae939724a25c830a0f2334b2b12dcced843b39dac1c60aa7460c156cc0fd5059d961d2fc96
-
Filesize
92KB
MD578da18bd57ed7510b65d18b8332b3c47
SHA1b9410d715a9f998acd7b689528cf61d71b4f53a3
SHA256a313ace57cafc9b7b4001805610d6c43985bc007efea076d5c682cb6e96cfa35
SHA512049a305550fcf0f9bbabe3bf370491d8621fff46f990343e7eb5a53577b04ad9073369a7cd1f85cff8365043d0c44bf282de24bef6956ef4ab2c4265cf058f1b
-
Filesize
103KB
MD5b44919c3c5c3dcd3c6bf981959180f6d
SHA18a55fe303893864f0fcf5ca5552836c566973760
SHA2565b6d52d2f2553661f324216257b35bd47025ed348f5e31a0f27bfaade9f17cad
SHA512b64bb8a12c85fea87c8bd03d592ceed1d1e03ae4b8cc1126486f6bb081b8ea321f5664e136b7942b89f7652e335f6dd72dd8781192cdcfcca1ad49ca456ade9c
-
Filesize
105KB
MD5c4c551233a9fc3d82e54a63e33def809
SHA1e0a6dd918df4ea58688adad449cd6f14804d756c
SHA256a2687202f5dc17a663e4f3e83ca5a8def28b29e36fd2bea2dd5457777ed3b4ee
SHA5121a2ab77b18385b00aa1e0c633203c25774f8731f61ab8b74dcff50fd56c47f33a95e6f8bc413912dd81fc1b583beef9b435b89a4b9fb9cf2863fb74eefbd04c7
-
Filesize
90KB
MD51f0c93d975dcaba95c33733cab1a7d17
SHA12d79ac9569c11a2664be7728c63e7291752af671
SHA25669dbd796aad784330ccd6d04b6292af11ff0a31514f903b5fede2e1656a36a02
SHA512321580f2f63e3d7ca72fe63be71919fd939feda7818736763f3c7ec853e2b4646248f9f7820f2dc6763b90effcb026db0058affd532ec46dda61d297c761ff97
-
Filesize
96KB
MD503803687099f77f92914349df273bf19
SHA10fe25b8f46c6c8a607cf5bb33e5128fc16d0eee7
SHA2569720522375a08707b1586e3c23932d31770a63ea565a13ce18b7c4c9565a4c4a
SHA512ff227cd4426f01140b3b5a842cd341d9e468a8fa63ff9c2ffd7c77aeacd38c32dbf0238ca94935d07171553fe695bd406de9628efbf7522c67e330428f4e9235
-
Filesize
98KB
MD5f451f622712d51409727ab83b092bf29
SHA140ca548897500ab96c23456cfbd263fb62b66819
SHA256a90337ff2bc1629afd052b0127fd4a8acd04838d98729e9c485ae20f4f10f8c1
SHA51245eafbcb2dee13f1e3b2987bf2e605abb3887218e74b4c97f26bf76954b7c766cf9bce79f087709493e466d95141ed770dad0358aa8de509c643051363516057
-
Filesize
92KB
MD515fe65d480d6b49e65fc8cc5150ca1c5
SHA1e0a38eecb3611df73d52ccf8b601762db75525d6
SHA256e896b96bd2120244dfad5a7e6968d31dd6336088f649b3c2272a8c431d669625
SHA512e9509883b1ef5f1b8919d2a61f59743a121d6e04071abecef7103bc5e2d76928076fa2fd81028e1b6bc07a3f54e449d71e14e7846b06245b28561462f7f32cb1
-
Filesize
93KB
MD5149cd336d84f7c98d9dc5a8c902090c1
SHA1b46a00b0aaf99a21fe38e24952c404b2e4feac11
SHA256ef1dfc978b4bb153afea47e28b2a531dfd157be26757c20675ba1be5f67f815e
SHA512ee33bc79263b4a8bdbd35317278fbc92b37498b119a5e6490ec29889d0c29fcbc4fc75cc23968a1b58101990472f9c4b0c814053631b16b26d17a61411457862
-
Filesize
102KB
MD5ceb9ff5dcdee7d405c0927e6c48df046
SHA18444e84850d8a13b44e4086931bebb0ac4cafb48
SHA256666848d260de5e5949ebd1da1428e08ade2a9f94162bfa8e56347311fade1dc5
SHA51203af2632e57eddbcf77234f4cee356c30d122acfb084f5f473260fb28a004fe2bbe1adda08c996718af770bcdcd8d3d682cad3e4654f85fe3b0f174765fca74a
-
Filesize
102KB
MD50d12d23f43410a4c6ad30cef32057401
SHA1b24bab4dc6036520b1d9fefd96bd9b53452c38c3
SHA2564deaafc5cb95107714b947dc3de7d9773c843c69caf6280aff9fd51208e8ea20
SHA5124b68f5c8f3705e64dd306b0b55b32852ef4476d16c9c589f7ffdc1e442c08f85e71d1c7de58425abedc419842ce7f46aa90b971afd078082c4c6ba753e67f598
-
Filesize
93KB
MD5198e32b65f79c46bdbdc55811717db59
SHA1fc3e57899fd9cdbd110d68f98db2300128b3c523
SHA25684adc659b98aa7e8980ec03e160594179760c8ef9fe402afbfcfecc338243255
SHA5124870dc3aeb902d7ac2a301364d81bf93473e28fddb036100a7a0af314dfb0af20c04a354b7b8f5494f0cd21e46c0b19cc9a94b483c93478be92a692e78016195
-
Filesize
92KB
MD52a6151d41a049e76ff0363e07a5dd323
SHA1287e80a31332978f2eea7a499632a1a8beffddfd
SHA256cd3661efa9263d5d21fde7fd4aff6d7283d5b28e7636ab541a729d12b2338244
SHA5125e52e29b2bf295880ab65fa4388576380469dea09d481e7a2e837265c41dc3e01fff4a5e3f34055cb20d77868aa056ad5ca7fd4075d534bf608269ee5921fa40
-
Filesize
99KB
MD536915892750c5f64919d8d6c554659bc
SHA17adf8727aea938901ebd751d90ac2e938fe1a5df
SHA256aa5ee42711de0a180e3a70a73e8d1f3f765bcd8f4c8db499aa914e2178b0b4b8
SHA512178961610724e9b5035ca1e90604134b559f9a47129e453c6fa3cb15bd18bfc8e13baea36ea4500766957bab5c44437b38336d3a103d22e22b736e343bc73836
-
Filesize
92KB
MD5dd71bb2ba8048c6ca602531ce523c377
SHA149752d9ddadb980440cf3619a8bcc02a4dc9fa1f
SHA256e586c9dcb9145aa5ef97ecfcb8691779cc3717e8c8339c67f3d2cc56dc1d6870
SHA512d8e0443570ec5b538be0f9e3073d1766396fbb9a3815a8e91a8637ebbd9b426a686e8bf99378416005a5fa1cdcc6c7910594d9cd54a8d63bc24b37ffd126ef50
-
Filesize
93KB
MD5a2cde4d360ed314a6f392a3d9f717082
SHA175165d3f213ccf018e4fc5670d79a16ef1e8beed
SHA256e65e9e1c5fbc28253f32a153f2fc972138072324e3db8cf14eb0a8146e210296
SHA5123c6f57709a5f7bd727a7c96373004171cd86c93aa584497268863b33feee5b705bc7206d25323ffa3ec7638da709fb5c91cdfbe04ede721fdcc593fb818f7b2e
-
Filesize
94KB
MD5ff184937da81a9151f27e92ebcab0978
SHA16b464f6b9b6fb0d89c1d09cea9fd96938a742cb2
SHA25685f3768201e8568809d20cc24876c34ee4a61c75d906e2e7bd740bd5b28abb1e
SHA5121a2395871da190c3aca88f6c9d283ecc5f0866b7e4f8117a2235ce3f7487e3e24f5224be455957745997cd0b73e92f6125d9c53a5b9c70da190001d494687fea
-
Filesize
99KB
MD554143c062772543ce7c124c04fcd80ae
SHA1d7b63713135122349d2cf46b216e55b65916261b
SHA25616b2fae7bb23a5e4a27872069f1b868679c98e4ca61d18d108d40b9c6c09de85
SHA512b73c9c72691e21a886d1050e9e18c957709f45ba1c435a52e342433d304cbf9df32d68e8b6a427960e236cef417ec178487609591069c812194297a3fd867058
-
Filesize
98KB
MD5103133fcf5080511c164a5b2eece21dd
SHA1f0bbdec53a495d44a8a8a4fc3ff59fc9d646d8bc
SHA25635c06abe508f465201721cb5ac6880e62bfd83a5ab7fdd8a6b58e4b732e2cfc9
SHA512d10a995ab3c65af5cf76c610ee9b784cc95f27de1011fbad909ca07d6f3c18f42be4c64d14755d4b0842ce0167e235c11f188662bb3ebfea11445cf79afe1f23
-
Filesize
89KB
MD5e7967da7d7252da1dc54497e6168b74a
SHA18f4e1d0511c5c050f6f40c76e7ea3dcaecc44b54
SHA2569d6dd8b094eb76756494262b194f973f45b8aa6ed0ee4636ed360dad6d5fc6e0
SHA5128bad1a11056d961a9978cbfd733f9e9d47cb11430f76547b10e11997d1f135fd3430f17cc21ad6247c9c8f2b8b3bb086771845269cd1522b2c6174c520fed19e
-
Filesize
84KB
MD59a3f16bf70e791d7f469f66d066b876e
SHA1fa9c66b2ad169015c5d96748fe1132b77fe40c95
SHA25634252b535a4d80c9b0f124577008c2e38addbeab7e9f1b90390228554d804a0c
SHA5123b6f2d6eeab96ec52fa036db1dba2f9478aeb4fdd61bd5eb5c6c0bf0b4c1a33c800ac17bc1c55d9f8ed8e0bea3ec3f0308a0b2d75b652384fc3dab7709980350
-
Filesize
93KB
MD52631b0ae225ee5e7cef7853a22962e3b
SHA199fbb208e1c066cfa0fa71034c3fb4a0a0f7c277
SHA256bd9ac7da20a97c12e7b20cd3891c8639d8422dccd68fbb07cd7378d9807b1fa9
SHA512bd425ae26830c94317f352f5e237f861d9bea4086d7c3b5d6315a5aa0fd13c2427143dcaf44f15cc65f074649f7936961be9af99c224462b5464c39629fb557e
-
Filesize
84KB
MD51aca7c9ea2aa00d865c74d418cd8713c
SHA115f75e30447bfc9b0928c91c328e90b817404b6a
SHA2568c0427c5c977e6f377b92f8b7ae73f0b3e70eb0b21bd17aca6f5db8164cbfa28
SHA512c5c62d0f13db73bef7e9a650aef9ac9b5bcb4cbaa58bb8d15b04ad8563d1ea6c9881ef06e31b72f39dc3e85207721b7862f4eb8cdb4aaa53c2c14a39d79b091c
-
Filesize
83KB
MD5a27b842097da8fe8d4237a6bc88cde16
SHA1e086d437d569538638b494d03d10f37fb4bc96f8
SHA25617fe786f798fb1a7502748d16988136fdec18f622d908379cd1f7366e7261724
SHA51203341ec801b4ef229ce6c9ee650f87cc8ba77ae1f2d7c51dd406fdfe4984a1ca56bfbb16f21868e8a67a10420d5e1f7dd7687398b1581962ceb23f7174f87a22