Analysis
-
max time kernel
23s -
max time network
29s -
platform
windows11-21h2_x64 -
resource
win11-20240508-en -
resource tags
arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system -
submitted
14-06-2024 01:45
Static task
static1
Behavioral task
behavioral1
Sample
Buildbox_2.3.3-1986.exe
Resource
win11-20240508-en
General
-
Target
Buildbox_2.3.3-1986.exe
-
Size
73.1MB
-
MD5
9b2ecb1f95301a8e76ffbaed050fff82
-
SHA1
67dc37f65486db3c590531b0641e8dd903d24d5d
-
SHA256
7652dd1511c8d8e8a00f90ce3cb576ed948c1e198ccb9b84a6a40e5cc951d5a0
-
SHA512
dc58176acbab4a6ede103bffbdcb76813b9cd426758a6ba0b329fa4dfb4012354025a5d28f942138a6c1de5f378f08c405d67ab8995245ce47f92c04f8b47b33
-
SSDEEP
1572864:5lEPKDpk+3Pxd32li14xgms5bSdZXpW9QUqAPOy+xYyaFJGWI:5jpr3PxdmliqxQ5uJW9QUqjxY5FJ5I
Malware Config
Signatures
-
Executes dropped EXE 2 IoCs
Processes:
Buildbox_2.3.3-1986.tmpBuildBox.exepid process 4056 Buildbox_2.3.3-1986.tmp 4168 BuildBox.exe -
Loads dropped DLL 45 IoCs
Processes:
BuildBox.exepid process 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe -
Adds Run key to start application 2 TTPs 2 IoCs
Processes:
Buildbox_2.3.3-1986.tmpBuildBox.exedescription ioc process Set value (str) \REGISTRY\USER\S-1-5-21-2457560273-69882387-977367775-1000\Software\Microsoft\Windows\CurrentVersion\Run\Buildbox = "\"C:\\Program Files (x86)\\Buildbox\\BuildBox.exe\"" Buildbox_2.3.3-1986.tmp Set value (str) \REGISTRY\USER\S-1-5-21-2457560273-69882387-977367775-1000\Software\Microsoft\Windows\CurrentVersion\Run\Buildbox = "\"C:\\Program Files (x86)\\Buildbox\\BuildBox.exe\"" BuildBox.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
Processes:
flow ioc 3 checkip.dyndns.org -
Drops file in Program Files directory 64 IoCs
Processes:
Buildbox_2.3.3-1986.tmpdescription ioc process File created C:\Program Files (x86)\Buildbox\translations\is-KT9NQ.tmp Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\Qt5Svg.dll Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\LICENSES\is-KH3I0.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\LICENSES\is-FKM32.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\LICENSES\is-L5QCB.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\QtGraphicalEffects\is-62K1G.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-O4V07.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-SJIAP.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\QtQuick\Window.2\is-A5QOB.tmp Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\libGLESV2.dll Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\BugSplatRc.dll Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\unins000.dat Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\is-7E126.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\qmltooling\is-RJG1U.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\QtGraphicalEffects\is-M5CUN.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-HVERE.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\translations\is-T6VTI.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\is-QSU8E.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\QtQml\Models.2\is-PH9EM.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-AJTTQ.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\translations\is-JVILL.tmp Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\Qt5Widgets.dll Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\QtQuick\Controls\is-R7HQ7.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-2QJMU.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\is-M6DQV.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\imageformats\is-BDCJA.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-OHMBJ.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-67EG9.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\translations\is-SPTEJ.tmp Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\vcredist_x86.exe Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\libtiff.dll Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\is-64NJ1.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\is-E23GL.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\is-8H3GG.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\translations\is-OB36O.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\translations\is-9RFV9.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\LICENSES\is-F4LS7.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\qmltooling\is-K0GFU.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\QtGraphicalEffects\is-7HAED.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-7L9TR.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-P478J.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-3BKJH.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\translations\is-N29U9.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\QtQuick\Layouts\is-0HNO2.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-90R74.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\LICENSES\is-KDEGQ.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\LICENSES\is-M6350.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\is-9KIUI.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-MJVAE.tmp Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\msvcr100.dll Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\qmltooling\qmldbg_profiler.dll Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\is-E6POJ.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\is-C9DN1.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\QtQuick\Controls\Styles\is-6SVNS.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-R9CKP.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\Resources\presets\is-90HCD.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\QtGraphicalEffects\is-5KLKE.tmp Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\audio\qtaudio_windows.dll Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\mediaservice\dsengine.dll Buildbox_2.3.3-1986.tmp File opened for modification C:\Program Files (x86)\Buildbox\bearer\qgenericbearer.dll Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\is-SQRGI.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\is-KT0VQ.tmp Buildbox_2.3.3-1986.tmp File created C:\Program Files (x86)\Buildbox\LICENSES\is-RTOM7.tmp Buildbox_2.3.3-1986.tmp -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 8 IoCs
Processes:
Buildbox_2.3.3-1986.tmpdescription ioc process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Build_Box_Project\shell\open Buildbox_2.3.3-1986.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Build_Box_Project\shell\open\command\ = "\"C:\\Program Files (x86)\\Buildbox\\BuildBox.exe\" \"%1\"" Buildbox_2.3.3-1986.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\.bbdoc Buildbox_2.3.3-1986.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.bbdoc\ = "Build_Box_Project" Buildbox_2.3.3-1986.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Build_Box_Project Buildbox_2.3.3-1986.tmp Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Build_Box_Project\ = "Buildbox Project" Buildbox_2.3.3-1986.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Build_Box_Project\shell\open\command Buildbox_2.3.3-1986.tmp Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Build_Box_Project\shell Buildbox_2.3.3-1986.tmp -
Suspicious behavior: AddClipboardFormatListener 1 IoCs
Processes:
BuildBox.exepid process 4168 BuildBox.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes:
Buildbox_2.3.3-1986.tmpBuildBox.exepid process 4056 Buildbox_2.3.3-1986.tmp 4056 Buildbox_2.3.3-1986.tmp 4168 BuildBox.exe 4168 BuildBox.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
Processes:
Buildbox_2.3.3-1986.tmppid process 4056 Buildbox_2.3.3-1986.tmp -
Suspicious use of SetWindowsHookEx 6 IoCs
Processes:
BuildBox.exepid process 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe 4168 BuildBox.exe -
Suspicious use of WriteProcessMemory 6 IoCs
Processes:
Buildbox_2.3.3-1986.exeBuildbox_2.3.3-1986.tmpdescription pid process target process PID 756 wrote to memory of 4056 756 Buildbox_2.3.3-1986.exe Buildbox_2.3.3-1986.tmp PID 756 wrote to memory of 4056 756 Buildbox_2.3.3-1986.exe Buildbox_2.3.3-1986.tmp PID 756 wrote to memory of 4056 756 Buildbox_2.3.3-1986.exe Buildbox_2.3.3-1986.tmp PID 4056 wrote to memory of 4168 4056 Buildbox_2.3.3-1986.tmp BuildBox.exe PID 4056 wrote to memory of 4168 4056 Buildbox_2.3.3-1986.tmp BuildBox.exe PID 4056 wrote to memory of 4168 4056 Buildbox_2.3.3-1986.tmp BuildBox.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\Buildbox_2.3.3-1986.exe"C:\Users\Admin\AppData\Local\Temp\Buildbox_2.3.3-1986.exe"1⤵
- Suspicious use of WriteProcessMemory
PID:756 -
C:\Users\Admin\AppData\Local\Temp\is-8NAB7.tmp\Buildbox_2.3.3-1986.tmp"C:\Users\Admin\AppData\Local\Temp\is-8NAB7.tmp\Buildbox_2.3.3-1986.tmp" /SL5="$70232,76352150,56832,C:\Users\Admin\AppData\Local\Temp\Buildbox_2.3.3-1986.exe"2⤵
- Executes dropped EXE
- Adds Run key to start application
- Drops file in Program Files directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4056 -
C:\Program Files (x86)\Buildbox\BuildBox.exe"C:\Program Files (x86)\Buildbox\BuildBox.exe"3⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:4168
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
300KB
MD524e4da53ab6b3b7bb924eacbd46a59ec
SHA109f2796118ac55d14382d674e1f6e151278a737a
SHA2561058c80da7643d8446b18a6f657dafc5d2530fea839d6f763d29599d36ddb002
SHA5120197fe449573b774d032b1dbcee6d9b38901c718dc7380ce4311979b243e11d2384c8f038e9e8521c7200f2144e4b0be840b72e94fc105e8d1e310bdf89eb3fe
-
Filesize
23.7MB
MD529211004fe19a0b2d549dc7e09431e30
SHA16ec77df7afe978c0be258a71c64cb0ae9a5da80a
SHA25687259f60583c8efd5a9f496c68b9aa8e0f700d4efa6c0f094cc821c781ffad00
SHA5125f0c330bcc75904b9b6bf3d46dc1913209c11eb9984e3e8dca3804c0df39360daae9e6dd843323ea00e3524eb73e3c223381c8de3836c2b8d42d0a2a6ddab598
-
Filesize
106KB
MD5235355a8dd26903e75d5e812ecf50e53
SHA18316319341a0f9054e19e4a7b21df3dc49386fee
SHA2561797d150a2e23af4f390f5c33eb598c6f58d0454011d74941f5316add900bbdd
SHA5125beb9343028790f993d0acb1007fd112b7e2ef6f9fbedfdb62b0140d2bbadf3b6368417ea19edb0bc8674d19418e5784fef4430ce1c329de8e83c304706d39ac
-
Filesize
24KB
MD5db5eb6b661069bff193a73278bf01220
SHA1a9908f4be826c951ba6db2b726bd99a24e114874
SHA2565c2442dc0f8aef9e57c0c191645fc5cf89c0f2a749ec549595d65c577510bbbd
SHA5124a10d4aace186676792391007a237d865f950d258e9ea10c49474331c47843f21918863579716ce93701122061121c51a54d4d2869a2a63410e38e603dafeaad
-
Filesize
4.4MB
MD5aff1410e04d4951ee99ae2f9a590f5eb
SHA1517a6ae0364b8f014e23a671cccda9947ba5eede
SHA2568a02bfc68a23a2b329aa367465b9f1084f88c213956eee25a2e51e45ad15b920
SHA5126c462a84fad9c8401cc0355c10e7dcb075bd259642d7909809a08fed7c1d24f7c17fb619c7cf97edcc261e5a3161a3cc69ace594fe2c2b52557447c462e1d7f9
-
Filesize
4.8MB
MD55da3f3db9c706d6f6c4bfb9a9166d4fb
SHA115484532a0ca2951a5c2377ea6f576134ac13652
SHA256183a47dbb0fd24ed8c992c83e2701dc303615f97bc7a23c3866fa6ea2d2246ee
SHA512ec3beefaeea95024c8c3ef5556fe9a9e8678637d72a42ecd3fb469ca8360eede6256ee69d4bc06e585e3ee9c63432bd99b94e4e29abcf3f4dbab84dc22e34e64
-
Filesize
570KB
MD5768c23339bdde83cdc48b5c342294761
SHA148d08dd5ea343562d282f8acddd78abb4c606efc
SHA256855a4e8beac933f852814aa826628f1a40daedd990b6e644904aec162078ea37
SHA512f1d5087261a39fddd20f67a5221494f96a9ab608bf187c52fe32eb08becf556abec159636bc203bb3a2fbe5074c9825c59e22a0a608227b2e427a65a2a43cce7
-
Filesize
832KB
MD54cda8d643b69a4bf252c72f59d60f0de
SHA16f9b3bb2c222f54b9917c2a7e6d2d81c2cbf8aa7
SHA25624d9de8928483b430ab58ade592569d3cf8c16afea86222fbcedeef574379fe1
SHA512c07f2ea6fc73d44775343df4b2ee97ad135d64c15826de77d7c024ae9ff68f8f210dd2e88b8b1701e8483f8745f23c706420d86fc568a18d18a48c23be3dbca5
-
Filesize
269KB
MD593b9040684854ad1c9a8b1596d1349eb
SHA1d94a0f862113d445e2b59f46141dcc1fd73c6956
SHA256281271288b3069a391b1566c8d5a48385185709d1f54df7e863a155e84320e8f
SHA51271ecb5dbb365ad7059ffee6fbfc81b534ed5226c4ca9095e6ba928b96ff00890a405d9dc75c53e95fb9667268c18f102bd0a663d4c54cb63dd3f5473a2d8c598
-
Filesize
2.4MB
MD53a813d71523345354abdf740db0a3483
SHA139b3f1c2192dac27c30ace85d422becac090a975
SHA256dd8b7c26cf6ce16ba06170f488a32418a0736cd664d451b6933751aa798bf4ca
SHA5122b268c11a2dd2d5c0f7e8b9487207fa6ecb1af884ad5922cc7939fe22f01bab35290ba19a2405ab9e506b54d97da7a2856dbcea698a3fea650d0c89c3acfcffe
-
Filesize
2.4MB
MD543cf2d911934efd8df5cbc1de5690d92
SHA18389d7fde1977108ac76f682aea6bfde7452ff3f
SHA256861e76c4d8d467a046c4205a7c66921f19efe35267c4a9a53e7c680f2a67bf62
SHA5128f0e61a39a2b32c8d83c0caa36dd48e7dc4618f1af101170586d81a4619838f6d7733bff3d1f0d0b990099bb024e5911083fe617625a8a7e1e9608ca8066ca8a
-
Filesize
54KB
MD5f4681cb0fd76a85d51cb79b0d4dba66a
SHA1063482b7a23b1bb4523fdaf99e0f973937d09f36
SHA256151fda07305e751ac685e7f786868c7d91062580339cee7aff373b3478bf2eea
SHA5129776f8b5934a3966852f1b19a0104df1246f3dedea89614f628dc2441c0e23f524ee3c00239aef198d78070bb447c793bac9eec5f92b85da1368d3662acf1ce1
-
Filesize
249KB
MD5e6fcc448413e4ad9c469baf9c0ed3f74
SHA14674c785a67eb884b2cc168f94f20438ccf238b5
SHA256e7ed455e744aacdbe64210b03d38616fedff3c15d80a521d3f879f90ede9fb4c
SHA512afe23657a84fb72b22b8a525617a305b1321c6ea695a47da690e927065d311a537881afac7a3d78917338eddf4b1094c98c882431ba9006a75ad841e2493b58d
-
Filesize
4.2MB
MD5ce8e2ec1bb6db7861f11f87f1465c3f8
SHA12c60dd9b5671f5d6874172ce371f1ff1f7f86de5
SHA25603041ee863f0db435dd5324f5dd74ccea7ab5065378a716012725ee1d396410a
SHA512cb1ae581e4b79d0a97408765d7d3cbe0f62fbeb4d70a97cb6a8bd66b394fb8809e50d7f40c7367b671ab902f0920f21789d30562e803cc4a68bcc455d0dbdcfb
-
Filesize
1.1MB
MD54c5d8b2fb660736e60fa8bc8858d61c2
SHA199e441f83c2119929b7222fe9c75e8d395ac662d
SHA256d366c6ff48537015cc8e13532d24085ef8e4619fe0fb08cc52604c13fcb379ff
SHA5125287eedaf476c03bc84dcd084f1c5a8815187ea93de2f0a7bf553e713c090199ac1906dc3cf61630d4066a3b98e03f6706661d824b23ce3c360b08043c0216d9
-
Filesize
39KB
MD5ea2a69ffa86f276ca2ccf884795458d8
SHA1da8f1713eeba13475afb4eb6a2e7686d83de6f93
SHA25679429d20eef5d2f94aaab2b033658caaf4b373005862884d5a4809c5d3839640
SHA512b23de1521f92bf62c0dc51bbe5a488d39892e147341a5352c8d12bd3d213dcdd8ff988eadb85af8ceadafa3c36bc32c353a9a62762e5aaffafb92f1bf723c315
-
Filesize
41KB
MD5f3520c8e3826958b84e296b997059831
SHA14d8f5da58c6b6ab8f54d6bbb3cbd284df3cf3ec7
SHA25639887f5ec6246d37bfa6310f810860852c8e7b7e2235872d50c233dfa1ffbe31
SHA5121c78a382ae76194405065be2c1c9154fb23907350ff565f1ecefa2962d12f3e380eaae23872a7bd504502ace1770f4465152a5a84686588b17398b8e0113c703
-
Filesize
405KB
MD5b1bc787d201208e4ac31481e69aa7945
SHA1ec66ba4c7971e945fafb196341781093727810b5
SHA2561e599fc5780f37c00045d11a89e8b67162eca6c34f2be9b220a070961df55dce
SHA5121586528d233ec8c85ab7ba2349d2c29705436f2c62a05906d4eee39aca95fa03f9ee604c81de77f6c0962600ab7c24b59c839b317d137365a9f11ab7402815bb
-
Filesize
1.1MB
MD54aa1de28ba1b547dbf2588f9648eef4b
SHA179dc7a438d4b5760e6be1898d49a3699746c1606
SHA256d203d7ab373e07e09c2e23c40557592ef95b0c7f6b728c9379524a1469f7222c
SHA51200b372761c331ba4b75eb4205aa18e3a6d493a881e7946313334d6ea8c895db6c51dee4def894b1e41c8eee95489f70afd4426446abab35e7dfa283800102aee
-
Filesize
143KB
MD517811849ce38b1e58f9616b808868f1f
SHA1095188023246f531cd00e9239b6d4daa20ebd3a6
SHA256d1510777414af5f915cd1a6b8bd4a9b6a9df2ff01b801990c5dc051902548616
SHA5127c8b71a8d3df861cdc52f34a845271dabb1e0a04d0fbee4fc5021f0ca5f9c56e88484366e3612c178410116c40f48ea49d551c5521382b7e80e0c43e9fb3f3dd
-
Filesize
64KB
MD5b184c38711f42e3fa96a08402297bf56
SHA1812da38a9ae9cdbe9290c4fbf74d8cad3a962744
SHA256dd342fa7482c586fe522fa1422eee5ee6cbf76fe256dce5973fb42ea62c003fa
SHA512f0bbd7d3604f33bcf03fd16c5082aed4ab24111bbcd1861a01f499501fbf22245be5a3c1662ac823130e9f4f65106d3238ddb98bfdd59add527bd9d24be7b6a6
-
Filesize
155KB
MD582f18505c175685a037a298472ea9f71
SHA1b45935ffdaaaaa1446c0080937b78c890036d718
SHA256726b6a9211b0776d67635d9c4f681ad918df3c9ab00e5b99eb5b1dbffafbb769
SHA51297998f414f108cf6359ac5244d0c66eb0f4056b22eba93767d7f58dc7b0b93745e1ebe179eff34dec1ab85c62aff191da5e1075b256669ed467525bab99af196
-
Filesize
513KB
MD5c741db91cddb32c0ccd1fab980b1a5a4
SHA108f624cff407b25c6ecca087f763bd02e69231bb
SHA2562d7b7f76089829aac2fa043d712e3a908563bf77f4e7da6e82d86bb0467a9feb
SHA5127f92e7cdc0feb16ca42eb9f588a92a481b402ef00c0e02b8236f8925bd828507a4e6c1b576d9639184a15322107d0d3810817d1529ebf6f94ff18ea070c67e76
-
Filesize
1.2MB
MD5eaaddbca6c8795fdc0f4cd6c4ccff600
SHA12d451d109509b1e848f52add6d0ee454b29ccd40
SHA256cc4a198a1ab684724f35c367b97e3f9258662b158be9a96a190b921bdfaf12dc
SHA512b4c5338b740ddaa39603865a3dbc422750f66c052f266be037b2b38483d1088e3a4dacfb22581a18796f0901e611028ff00076f2a5c959c7443903d3659e1d81
-
Filesize
108KB
MD500faf4fbd1e93e4ccc297ff9cb52a3d0
SHA1b17477634fc45bdbe9194ac33ae0be59b6cb9052
SHA256a332c2396ea1a1a38ff9a225dbbe5d68d72ffa5779a205e04dc60ccaa211cae4
SHA5121ddb776790df2690738b095bb550c2bcb3bb23771b142f00adea0a7151e860c0d79f3541f30d4af387477bc53b94ec73d71e8d08bf789af241173ec958cf62ae
-
Filesize
988KB
MD5e7561e3750925f4d731d9366194dd493
SHA1b56f62063d2334d47b1d54bdb68102e41e559c74
SHA256c0030d1fcc93235ea90097855628bb937a70a778441741d2aa27c8278c50d8c3
SHA512c0d266af87e977ea85a5a9589ee93500bee1f5277db2b09402b5c8ab95085d46e99242498fd011152200edde14ac6f14f1bb0b04ea33136ef97c8a1345e417c0
-
Filesize
76KB
MD5ae4ae0ef65becf8684db223ceecbfba7
SHA11826006ee9ca5090eacfdca63bcc370e2be701e6
SHA25627a8bd5814bf5e67858856f5090952e558c6e03fbebcbd66f7d8eb8fda2b369c
SHA512880b38c69a38c02923988ccafba630e8a5a12ec885d713fc863f69174b475e408427fb68acdf6a3415a3bbd6cb80a1eb81eb752b18ef03a4590cdb36c9f52e3e
-
Filesize
105KB
MD5b8a9e91134e7c89440a0f95470d5e47b
SHA13cbcee30fc0a7e9807931bc0dafceb627042bfc9
SHA25642967a768f341d9ce5174eb38a4d63754c3c41739e7d88f4e39cd7354c1fac71
SHA512e8583ea94b9d1321889359317e367abc88e90e96d0d9243258244a527ffa2b13ab97d0787693ca328960ceb934ea11eefd14abafd640a654473c26e420d2ec54
-
Filesize
13.3MB
MD52fe9702861e9f93a53be8dab361291a6
SHA117b381d3adb22f00e4ab47cbd91ce0a5b1ccbc70
SHA2564ff07492947c3e52607aa8de0c241898aa35c439c442de1cea5d17de5b7c7f01
SHA512dbd4023d3919ffcca2d21ff01bece68bc58004b966f0484eeef54fac0192ced1601859dd72f2214a38dc53c2c18582b74711d8b80e4bac60b9a6ad03b72fe803
-
Filesize
694KB
MD545086337c414f5a811acfafd1d30ebf1
SHA16bebabb52d4ec2978307eeb9fe52894cd94d50c5
SHA2566dc029d8b17090783e2733392bffe3b16febc4badb2721db059c6150fa9315e1
SHA512a7f7394f8d1f344c89fb946f6e508f23a8453074f1747130a9b242e253d7816880dac0cfac12eb8858e7b741c827e432e77141b708cfe03f481b1c71f8174f73