xworm | fb6a40f06d1fd02e4425b4a965d5a0da959997faca162e5bc4c62002c7d3977e

Analysis

max time kernel
112s
max time network
134s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
21/04/2023, 16:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

sddp-17.2.3-setup.exe
Size

155.0MB
MD5

cd8dfaef662e9516e39cad0c0500ce02
SHA1

23a7ae69bb06948b906ce225f6af51306696432d
SHA256

fb6a40f06d1fd02e4425b4a965d5a0da959997faca162e5bc4c62002c7d3977e
SHA512

dc641ea5214b5dd31cb7230bdac3a22294ad25873ffbf33b7ac5a2ef6d656e7ecf45082126c9176e68abaebc2e113c6fd1b4ebe78565671256a979a75d5d8f64
SSDEEP

3145728:zJSY+WE3GC9VfddaufCM2mwztxcOPfXKgo++SzRR8Op/K9oJWT5E+N:zJSBlVr42ChmItxtfXKgr+SlR8Op/6TN

Score

10^/10

xworm discovery evasion rat trojan

Malware Config

Signatures

Xworm
Xworm is a remote access trojan written in C#.
trojan rat xworm
Grants admin privileges 1 TTPs
Uses net.exe to modify the user's privileges.

Account Manipulation
T1098

Modifies Windows Firewall 1 TTPs 2 IoCs

evasion

Modify Existing Service

T1031

pid	Process
4480	netsh.exe
4660	netsh.exe

Executes dropped EXE 1 IoCs

pid	Process
2600	sddp-17.2.3-setup.tmp

Loads dropped DLL 17 IoCs

pid	Process
2600	sddp-17.2.3-setup.tmp
4664	regsvr32.exe
3000	regsvr32.exe
4700	regsvr32.exe
4348	regsvr32.exe
4324	regsvr32.exe
4340	Conhost.exe
700	Conhost.exe
3340	regsvr32.exe
3404	regsvr32.exe
4808	regsvr32.exe
3356	regsvr32.exe
364	regsvr32.exe
4280	regsvr32.exe
5116	regsvr32.exe
4256	regsvr32.exe
3120	regsvr32.exe

Modifies file permissions 1 TTPs 2 IoCs

discovery

File and Directory Permissions Modification

T1222

pid	Process
4696	icacls.exe
1336	icacls.exe

Drops file in System32 directory 40 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\is-594D8.tmp	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\MSVBVM50.DLL	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\VB5STKIT.DLL	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-NUBUP.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-SVG73.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-97CBB.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-JKI74.tmp	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\glut32.dll	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\Msvcrt40.dll	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\CTL3D32.DLL	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\MSVCRT.DLL	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-IEC4R.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-KMU6N.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-9M0VB.tmp	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\COMCAT.DLL	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\MSVBVM60.DLL	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-SRIOR.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-9SS4B.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-1FDMH.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-T139C.tmp	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\MFC42.DLL	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\OLEPRO32.DLL	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-NKEF1.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-HI3EA.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-QSIIA.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-092NI.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-5CF9V.tmp	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\Msvcirt.dll	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\VCFIWZ32.DLL	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\ODBC32.DLL	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-1LCUJ.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-OAN34.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-0LBRP.tmp	sddp-17.2.3-setup.tmp
File created	C:\Windows\SysWOW64\is-6473D.tmp	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\ASYCFILT.DLL	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\MFC40.DLL	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\vbalFlBr6.dll	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\sx32w.dll	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\msstdfmt.dll	sddp-17.2.3-setup.tmp
File opened for modification	C:\Windows\SysWOW64\OLEAUT32.DLL	sddp-17.2.3-setup.tmp

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies Internet Explorer settings 1 TTPs 64 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{6B7E638F-850A-101B-AFC0-4210102A8DA7}\AlternateCLSID = "{962F28D6-107D-47A5-9515-2864454CFDD1}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{9ED94440-E5E8-101B-B9B5-444553540000}\AlternateCLSID = "{703EAF2B-FD9F-41BC-BB81-6C6757A46E5E}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{E44F7BD4-3AB1-4D55-9190-FC53343AD2D2}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{E44F7BD4-3AB1-4D55-9190-FC53343AD2D2}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\AlternateCLSID = "{4D588145-A84B-4100-85D7-FD2EA1D19831}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{BDD1F04B-858B-11D1-B16A-00C0F0283628}	Conhost.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{627C8B79-918A-4C5C-9E19-20F66BF30B86}\Compatibility Flags = "1024"	Conhost.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{53749718-F78D-4A67-8703-8AE050075170}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{0713E8D2-850A-101B-AFC0-4210102A8DA7}\AlternateCLSID = "{612685EF-57C8-469F-88AB-E4E0B595C5AB}"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{E8F8E80F-02EB-44CC-ABB5-6E5132BA6B24}\Compatibility Flags = "1024"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{9ED94440-E5E8-101B-B9B5-444553540000}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{E44F7BD4-3AB1-4D55-9190-FC53343AD2D2}\AlternateCLSID = "{A289A6BA-6B23-4969-8981-9B2C28290D0F}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F91CAF91-225B-43A7-BB9E-472F991FC402}\AlternateCLSID = "{556C2772-F1AD-4DE1-8456-BD6E8F66113B}"	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{979127D3-7D01-4FDE-AF65-A698091468AF}\AlternateCLSID = "{CCDB0DF2-FD1A-4856-80BC-32929D8359B7}"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{53749718-F78D-4A67-8703-8AE050075170}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{B09DE715-87C1-11D1-8BE3-0000F8754DA1}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\Compatibility Flags = "1024"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{3B7C8860-D78F-101B-B9B5-04021C009402}\Compatibility Flags = "1024"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}\AlternateCLSID = "{80B51087-CE4C-4FAE-8401-B6B3809DD234}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{DD9DA666-8594-11D1-B16A-00C0F0283628}\AlternateCLSID = "{87DACC48-F1C5-4AF3-84BA-A2A72C2AB959}"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{996BF5E0-8044-4650-ADEB-0B013914E99C}	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{627C8B79-918A-4C5C-9E19-20F66BF30B86}	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{E8F8E80F-02EB-44CC-ABB5-6E5132BA6B24}\AlternateCLSID = "{962F28D6-107D-47A5-9515-2864454CFDD1}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{1EFB6596-857C-11D1-B16A-00C0F0283628}\AlternateCLSID = "{9A948063-66C3-4F63-AB46-582EDAA35047}"	Conhost.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{C74190B6-8589-11D1-B16A-00C0F0283628}\Compatibility Flags = "1024"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{0713E8A2-850A-101B-AFC0-4210102A8DA7}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{44E266A2-CD46-47A0-9ED5-EEEC5F0C2A6E}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{44E266A2-CD46-47A0-9ED5-EEEC5F0C2A6E}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{C74190B6-8589-11D1-B16A-00C0F0283628}\AlternateCLSID = "{95F0B3BE-E8AC-4995-9DCA-419849E06410}"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{9181DC5F-E07D-418A-ACA6-8EEA1ECB8E9E}	Conhost.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{6B7E638F-850A-101B-AFC0-4210102A8DA7}\Compatibility Flags = "1024"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{79C784C5-8F0D-4A55-ADB3-590CCFC8EB0D}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\AlternateCLSID = "{8F0F480A-4366-4737-8265-2AD6FDAC8C31}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{9181DC5F-E07D-418A-ACA6-8EEA1ECB8E9E}\Compatibility Flags = "1024"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{6262D3A0-531B-11CF-91F6-C2863C385E30}	Conhost.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{612A8624-0FB3-11CE-8747-524153480004}\AlternateCLSID = "{29D5EC7E-6245-4DC9-9E53-A9A945AD4ABB}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{E8F8E80F-02EB-44CC-ABB5-6E5132BA6B24}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{24B224E0-9545-4A2F-ABD5-86AA8A849385}\AlternateCLSID = "{9A948063-66C3-4F63-AB46-582EDAA35047}"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{3B7C8860-D78F-101B-B9B5-04021C009402}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{1906F94F-8256-480A-8CDF-60821592CB4B}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{1EFB6596-857C-11D1-B16A-00C0F0283628}	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{66833FE6-8583-11D1-B16A-00C0F0283628}\AlternateCLSID = "{8B2ADD10-33B7-4506-9569-0A1E1DBBEBAE}"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{27395F85-0C0C-101B-A3C9-08002B2F49FB}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{58DA8D8F-9D6A-101B-AFC0-4210102A8DA7}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{97992019-74A6-46C7-9CA3-7F8C0D39940B}\AlternateCLSID = "{29D5EC7E-6245-4DC9-9E53-A9A945AD4ABB}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{232E456A-87C3-11D1-8BE3-0000F8754DA1}\Compatibility Flags = "1024"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{FE38753A-44A3-11D1-B5B7-0000C09000C4}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{8E3867A3-8586-11D1-B16A-00C0F0283628}\Compatibility Flags = "1024"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{66833FE6-8583-11D1-B16A-00C0F0283628}	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{53749718-F78D-4A67-8703-8AE050075170}\AlternateCLSID = "{25A3C2C9-8F6E-4140-BEF3-535D4B9709D8}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{3B7C8860-D78F-101B-B9B5-04021C009402}\AlternateCLSID = "{894BA3A3-3CA3-402F-B4FE-CD08337E9535}"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{27395F85-0C0C-101B-A3C9-08002B2F49FB}\Compatibility Flags = "1024"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{0713E8A2-850A-101B-AFC0-4210102A8DA7}\Compatibility Flags = "1024"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{35053A22-8589-11D1-B16A-00C0F0283628}\AlternateCLSID = "{A0E7BF67-8D30-4620-8825-7111714C7CAB}"	Conhost.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{9ED94440-E5E8-101B-B9B5-444553540000}\Compatibility Flags = "1024"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{97992019-74A6-46C7-9CA3-7F8C0D39940B}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{996BF5E0-8044-4650-ADEB-0B013914E99C}\AlternateCLSID = "{CCDB0DF2-FD1A-4856-80BC-32929D8359B7}"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{979127D3-7D01-4FDE-AF65-A698091468AF}	Conhost.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0713E944-850A-101B-AFC0-4210102A8DA7}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0713E8A4-850A-101B-AFC0-4210102A8DA7}\ = "ITreeViewEvents"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{24B224E0-9545-4A2F-ABD5-86AA8A849385}\Implemented Categories	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE3C-8596-11D1-B16A-00C0F0283628}	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E44F7BD4-3AB1-4D55-9190-FC53343AD2D2}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{53749718-F78D-4A67-8703-8AE050075170}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0713E8D2-850A-101B-AFC0-4210102A8DA7}\Version	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FE38753A-44A3-11D1-B5B7-0000C09000C4}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{CCDB0DF2-FD1A-4856-80BC-32929D8359B7}\ProgID\ = "MSComctlLib.ListViewCtrl.2"	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MSComctlLib.ImageListCtrl.2\CLSID\ = "{2C247F23-8591-11D1-B16A-00C0F0283628}"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{C27CCE38-8596-11D1-B16A-00C0F0283628}	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8E3867A2-8586-11D1-B16A-00C0F0283628}	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\ = "IRichText"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0BA686B1-F7D3-101A-993E-0000C0EF6F5E}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{25A3C2C9-8F6E-4140-BEF3-535D4B9709D8}\VersionIndependentProgID\ = "COMCTL.ImageListCtrl"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\COMCTL.ImageListCtrl\CLSID\ = "{53749718-F78D-4A67-8703-8AE050075170}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E6E17E8A-DF38-11CF-8E74-00A0C90F26F8}\TypeLib\Version = "1.5"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{373FF7F2-EB8B-11CD-8820-08002B2F4F5A}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\ = "Common Dialog Open Property Page Object"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MSComctlLib.ProgCtrl	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0BA686B5-F7D3-101A-993E-0000C0EF6F5E}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\COMCTL.ImageListCtrl\ = "Microsoft ImageList Control, version 5.0 (SP2)"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E8F8E80F-02EB-44CC-ABB5-6E5132BA6B24}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5ACBB957-5C57-11CF-8993-00AA00688B10}\ = "ListView Images Property Page Object"	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{585AA280-ED8B-46B2-93AE-132ECFA1DAFC}	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BDD1F055-858B-11D1-B16A-00C0F0283628}\TypeLib	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib\ = "{5E9E78A0-531B-11CF-91F6-C2863C385E30}"	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0713E8A1-850A-101B-AFC0-4210102A8DA7}\TypeLib\ = "{6B7E6392-850A-101B-AFC0-4210102A8DA7}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{556C2772-F1AD-4DE1-8456-BD6E8F66113B}\MiscStatus	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{5E9E78A0-531B-11CF-91F6-C2863C385E30}\1.0\FLAGS\ = "2"	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9ED94441-E5E8-101B-B9B5-444553540000}\ = "ITabStrip10"	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{E44F7BD4-3AB1-4D55-9190-FC53343AD2D2}\CONTROL	regsvr32.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{66833FE6-8583-11D1-B16A-00C0F0283628}	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352}	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8E3867A3-8586-11D1-B16A-00C0F0283628}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{87DACC48-F1C5-4AF3-84BA-A2A72C2AB959}\Implemented Categories\{40FC6ED4-2438-11CF-A3DB-080036F12502}	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9C2CAD80-3424-11CF-B670-00AA004CD6D8}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib\ = "{BDC217C8-ED16-11CD-956C-0000C04E4C0A}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0BA686B3-F7D3-101A-993E-0000C0EF6F5E}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\vbalFolderBrowse6.cBrowseForFolder\ = "vbalFolderBrowse6.cBrowseForFolder"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{38911D91-E448-11D0-84A3-00DD01104159}\ProxyStubClsid	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\ToolboxBitmap32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5522DAF9-06D6-11D2-8D70-00A0C98B28E2}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\COMCTL.ImageListCtrl\CurVer\ = "COMCTL.ImageListCtrl.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MSComctlLib.ImageComboCtl\CurVer\ = "MSComctlLib.ImageComboCtl.2"	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\TypeLib\ = "{3B7C8863-D78F-101B-B9B5-04021C009402}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{373FF7F1-EB8B-11CD-8820-08002B2F4F5A}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F9043C87-F6F2-101A-A3C9-08002B2F49FB}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9A948063-66C3-4F63-AB46-582EDAA35047}\Programmable	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2C247F22-8591-11D1-B16A-00C0F0283628}\TypeLib	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MSSTDFMT.StdDataValue\CurVer\ = "MSSTDFMT.StdDataValue.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{042BADC8-5E58-11CE-B610-524153480001}\1.0\0\win32\ = "C:\\Windows\\SysWow64\\Vcf132.ocx"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{5522DAFA-06D6-11D2-8D70-00A0C98B28E2}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\COMCTL.ListViewCtrl\CurVer\ = "COMCTL.ListViewCtrl.1"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{612A8624-0FB3-11CE-8747-524153480004}\Implemented Categories\{40FC6ED5-2438-11CF-A3DB-080036F12502}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6B7E6390-850A-101B-AFC0-4210102A8DA7}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EC0AB1C0-6CAB-11CF-8998-00AA00688B10}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{20DD1B9D-87C4-11D1-8BE3-0000F8754DA1}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\ToolboxBitmap32	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A0E7BF67-8D30-4620-8825-7111714C7CAB}\Version	Conhost.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BDD1F051-858B-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	Conhost.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{79C784C5-8F0D-4A55-ADB3-590CCFC8EB0D}\MiscStatus\ = "0"	regsvr32.exe

Runs net.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2600	sddp-17.2.3-setup.tmp
2600	sddp-17.2.3-setup.tmp
2600	sddp-17.2.3-setup.tmp
2600	sddp-17.2.3-setup.tmp
2600	sddp-17.2.3-setup.tmp
2600	sddp-17.2.3-setup.tmp
2600	sddp-17.2.3-setup.tmp
2600	sddp-17.2.3-setup.tmp
2600	sddp-17.2.3-setup.tmp
2600	sddp-17.2.3-setup.tmp

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2600	sddp-17.2.3-setup.tmp

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2688 wrote to memory of 2600	2688	sddp-17.2.3-setup.exe	67
PID 2688 wrote to memory of 2600	2688	sddp-17.2.3-setup.exe	67
PID 2688 wrote to memory of 2600	2688	sddp-17.2.3-setup.exe	67
PID 2600 wrote to memory of 4664	2600	sddp-17.2.3-setup.tmp	68
PID 2600 wrote to memory of 4664	2600	sddp-17.2.3-setup.tmp	68
PID 2600 wrote to memory of 4664	2600	sddp-17.2.3-setup.tmp	68
PID 2600 wrote to memory of 4676	2600	sddp-17.2.3-setup.tmp	69
PID 2600 wrote to memory of 4676	2600	sddp-17.2.3-setup.tmp	69
PID 2600 wrote to memory of 4676	2600	sddp-17.2.3-setup.tmp	69
PID 2600 wrote to memory of 3000	2600	sddp-17.2.3-setup.tmp	70
PID 2600 wrote to memory of 3000	2600	sddp-17.2.3-setup.tmp	70
PID 2600 wrote to memory of 3000	2600	sddp-17.2.3-setup.tmp	70
PID 2600 wrote to memory of 4700	2600	sddp-17.2.3-setup.tmp	71
PID 2600 wrote to memory of 4700	2600	sddp-17.2.3-setup.tmp	71
PID 2600 wrote to memory of 4700	2600	sddp-17.2.3-setup.tmp	71
PID 2600 wrote to memory of 4348	2600	sddp-17.2.3-setup.tmp	72
PID 2600 wrote to memory of 4348	2600	sddp-17.2.3-setup.tmp	72
PID 2600 wrote to memory of 4348	2600	sddp-17.2.3-setup.tmp	72
PID 2600 wrote to memory of 4312	2600	sddp-17.2.3-setup.tmp	73
PID 2600 wrote to memory of 4312	2600	sddp-17.2.3-setup.tmp	73
PID 2600 wrote to memory of 4312	2600	sddp-17.2.3-setup.tmp	73
PID 2600 wrote to memory of 4328	2600	sddp-17.2.3-setup.tmp	106
PID 2600 wrote to memory of 4328	2600	sddp-17.2.3-setup.tmp	106
PID 2600 wrote to memory of 4328	2600	sddp-17.2.3-setup.tmp	106
PID 2600 wrote to memory of 4324	2600	sddp-17.2.3-setup.tmp	75
PID 2600 wrote to memory of 4324	2600	sddp-17.2.3-setup.tmp	75
PID 2600 wrote to memory of 4324	2600	sddp-17.2.3-setup.tmp	75
PID 2600 wrote to memory of 4340	2600	sddp-17.2.3-setup.tmp	114
PID 2600 wrote to memory of 4340	2600	sddp-17.2.3-setup.tmp	114
PID 2600 wrote to memory of 4340	2600	sddp-17.2.3-setup.tmp	114
PID 2600 wrote to memory of 700	2600	sddp-17.2.3-setup.tmp	113
PID 2600 wrote to memory of 700	2600	sddp-17.2.3-setup.tmp	113
PID 2600 wrote to memory of 700	2600	sddp-17.2.3-setup.tmp	113
PID 2600 wrote to memory of 3340	2600	sddp-17.2.3-setup.tmp	78
PID 2600 wrote to memory of 3340	2600	sddp-17.2.3-setup.tmp	78
PID 2600 wrote to memory of 3340	2600	sddp-17.2.3-setup.tmp	78
PID 2600 wrote to memory of 3404	2600	sddp-17.2.3-setup.tmp	79
PID 2600 wrote to memory of 3404	2600	sddp-17.2.3-setup.tmp	79
PID 2600 wrote to memory of 3404	2600	sddp-17.2.3-setup.tmp	79
PID 2600 wrote to memory of 3348	2600	sddp-17.2.3-setup.tmp	80
PID 2600 wrote to memory of 3348	2600	sddp-17.2.3-setup.tmp	80
PID 2600 wrote to memory of 3348	2600	sddp-17.2.3-setup.tmp	80
PID 2600 wrote to memory of 4924	2600	sddp-17.2.3-setup.tmp	81
PID 2600 wrote to memory of 4924	2600	sddp-17.2.3-setup.tmp	81
PID 2600 wrote to memory of 4924	2600	sddp-17.2.3-setup.tmp	81
PID 2600 wrote to memory of 3856	2600	sddp-17.2.3-setup.tmp	82
PID 2600 wrote to memory of 3856	2600	sddp-17.2.3-setup.tmp	82
PID 2600 wrote to memory of 3856	2600	sddp-17.2.3-setup.tmp	82
PID 2600 wrote to memory of 4808	2600	sddp-17.2.3-setup.tmp	83
PID 2600 wrote to memory of 4808	2600	sddp-17.2.3-setup.tmp	83
PID 2600 wrote to memory of 4808	2600	sddp-17.2.3-setup.tmp	83
PID 2600 wrote to memory of 3356	2600	sddp-17.2.3-setup.tmp	84
PID 2600 wrote to memory of 3356	2600	sddp-17.2.3-setup.tmp	84
PID 2600 wrote to memory of 3356	2600	sddp-17.2.3-setup.tmp	84
PID 2600 wrote to memory of 364	2600	sddp-17.2.3-setup.tmp	85
PID 2600 wrote to memory of 364	2600	sddp-17.2.3-setup.tmp	85
PID 2600 wrote to memory of 364	2600	sddp-17.2.3-setup.tmp	85
PID 2600 wrote to memory of 4280	2600	sddp-17.2.3-setup.tmp	86
PID 2600 wrote to memory of 4280	2600	sddp-17.2.3-setup.tmp	86
PID 2600 wrote to memory of 4280	2600	sddp-17.2.3-setup.tmp	86
PID 2600 wrote to memory of 5116	2600	sddp-17.2.3-setup.tmp	87
PID 2600 wrote to memory of 5116	2600	sddp-17.2.3-setup.tmp	87
PID 2600 wrote to memory of 5116	2600	sddp-17.2.3-setup.tmp	87
PID 2600 wrote to memory of 4256	2600	sddp-17.2.3-setup.tmp	88

C:\Users\Admin\AppData\Local\Temp\sddp-17.2.3-setup.exe
"C:\Users\Admin\AppData\Local\Temp\sddp-17.2.3-setup.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2688
- C:\Users\Admin\AppData\Local\Temp\is-J0KDG.tmp\sddp-17.2.3-setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-J0KDG.tmp\sddp-17.2.3-setup.tmp" /SL5="$701E6,162196296,151552,C:\Users\Admin\AppData\Local\Temp\sddp-17.2.3-setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in System32 directory
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2600
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\PSR\Sddp17.2\Ihm\vbalFlBr6.dll"
    3⤵
    - Loads dropped DLL
    PID:4664
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\COMCAT.DLL"
    3⤵
    PID:4676
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\ComCt332.ocx"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:3000
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\COMCTL32.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    - Modifies registry class
    PID:4700
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\Comdlg32.ocx"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    - Modifies registry class
    PID:4348
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MFC40.DLL"
    3⤵
    PID:4312
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MFC42.DLL"
    3⤵
    PID:4328
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSCOMCT2.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    - Modifies registry class
    PID:4324
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSCOMCTL.OCX"
    3⤵
    PID:4340
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSFLXGRD.OCX"
    3⤵
    PID:700
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\msstdfmt.dll"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:3340
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSVBVM50.DLL"
    3⤵
    - Loads dropped DLL
    PID:3404
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSVBVM60.DLL"
    3⤵
    PID:3348
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\OLEAUT32.DLL"
    3⤵
    - Modifies registry class
    PID:4924
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\OLEPRO32.DLL"
    3⤵
    PID:3856
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\PICCLP32.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    PID:4808
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\RICHTX32.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    - Modifies registry class
    PID:3356
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\SPIN32.OCX"
    3⤵
    - Loads dropped DLL
    PID:364
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\TABCTL32.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:4280
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\THREED32.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:5116
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\vbalFlBr6.dll"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:4256
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\Vcf132.ocx"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:3120
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\vcfi32.ocx"
    3⤵
    PID:5056
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\glxCtl.ocx"
    3⤵
    PID:5092
- - C:\PSR\Sddp17.2\oper\SddpShare.exe
    "C:\PSR\Sddp17.2\oper\SddpShare.exe"
    3⤵
    PID:752
  - - C:\Windows\SysWOW64\net.exe
      net localgroup Administrators sddpar /add
      4⤵
      PID:2184
    - - C:\Windows\SysWOW64\net1.exe
        
        C:\Windows\system32\net1 localgroup Administrators sddpar /add
        5⤵
        
        PID:1304
  - - C:\Windows\SysWOW64\icacls.exe
      icacls C:\ /e /P sddpar:F
      4⤵
      Modifies file permissions
      PID:4696
  - - C:\PSR\Sddp17.2\oper\rmtshare.exe
      rmtshare.exe \\WBIJUTSD\sddpar=C:\ /GRANT sddpar:f /GRANT WBIJUTSD\Admin:f /REMARK:"Share for SDDP Parallel"
      4⤵
      PID:4436
  - - C:\Windows\SysWOW64\icacls.exe
      icacls C:\ /e /P sddpar:F
      4⤵
      Modifies file permissions
      PID:1336
    - - C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        5⤵
        Loads dropped DLL
        Modifies Internet Explorer settings
        Modifies registry class
        
        PID:700
  - - C:\PSR\Sddp17.2\oper\rmtshare.exe
      rmtshare.exe \\WBIJUTSD\sddpdat_c=C:\ /GRANT sddpar:f /GRANT WBIJUTSD\Admin:f /REMARK:"Share for SDDP Parallel"
      4⤵
      PID:4676
  - - C:\Windows\SysWOW64\cmd.exe
      C:\Windows\system32\cmd.exe /c sddpar.bat
      4⤵
      PID:4612
    - - C:\Windows\System32\Conhost.exe
        
        \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
        5⤵
        Loads dropped DLL
        Modifies Internet Explorer settings
        Modifies registry class
        
        PID:4340
  - - C:\Windows\SysWOW64\netsh.exe
      netsh firewall add allowedprogram program = "C:\PSR\Sddp17.2\oper\sddptask.exe" name = "SDDP" profile = ALL
      4⤵
      Modifies Windows Firewall
      PID:4480
  - - C:\Windows\SysWOW64\netsh.exe
      netsh firewall add allowedprogram program = "C:\PSR\Sddp17.2\oper\sddp.exe" name = "SDDP" profile = ALL
      4⤵
      Modifies Windows Firewall
      PID:4660
- - C:\PSR\Sddp17.2\ihm\Sddpihm.exe
    "C:\PSR\Sddp17.2\ihm\Sddpihm.exe" -PAR
    3⤵
    PID:3548
  - - C:\PSR\Sddp17.2\OPER\sddp.exe
      C:\PSR\Sddp17.2\OPER\sddp.exe ver
      4⤵
      PID:1392
  - - C:\PSR\Sddp17.2\IHM\PSRUpdate.exe
      C:\PSR\Sddp17.2\IHM\PSRUpdate.exe --list-versions
      4⤵
      PID:820

C:\Windows\System32\Conhost.exe
\??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
1⤵
PID:4328

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Account Manipulation

T1098

Modify Existing Service

T1031

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Modify Registry

T1112

Credential Access

Account Manipulation

T1098

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\PSR\Sddp17.2\Example\12_stages\Case20\is-59G30.tmp

Filesize
116B

MD5
6854830662a8c0c0b793c36ea35b8c31

SHA1
d6cd41aa4c640c3e4f8520e3144bea7d3eae8d65

SHA256
a9559b2ad7f09bdd0ae2f5f785201b6b21754a02244fad96064aec88e272b373

SHA512
250c42433550785d03c2390330fa7d9b383735e05b64d2d15cb4aed6d951474cc3d0be5164ead9588ac0c823dfd03561cd00aa812980d7c161192ef682d2cd55

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case21\is-0L1DC.tmp

Filesize
10B

MD5
4439ceebd9e890cec0c16b247ccfb8f0

SHA1
38f0102a8b58c3a8a08598fac0f921bc0a922b76

SHA256
44ba9d7ccdeaf8cb4638b1ea2dc1ca9dcadd93c9945d42882a2b1ad5319baa34

SHA512
4e0a5fa1de3f89fb89af37954073061e7ce499299ecc2de290b6bd2ea64a9ec4ff03d169e631f87084532acd68d9eec6dfc4285c706179441898e0fa92e60127

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case21\is-AF8TC.tmp

Filesize
19KB

MD5
f5236b6c3fe65b1f53876993f9a9122b

SHA1
4e4a354f35743d51ae2d504ca9cca28b2da64eec

SHA256
315cc7332defa0cb2fae6b6180e7bc14b8dd56ee0ab91dc6afeb8966853d08df

SHA512
2495d62b7a2a83e19d479b8b8a2ad30b043e1f42c294f85f4eb7e3da66c5938b9d36e6479562a8a2680ee70465b2f5430e5ed5060385fb5cbb98f3ffaabb4559

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case21\is-P0J74.tmp

Filesize
62B

MD5
1233b19c5b6c0a69968713e16aaa1ff2

SHA1
de2ae289763da83937debdd2bec086018237374a

SHA256
533c732ac6cebf2bca8a6dfb6bb1a0d0fa0f663928fd4fc5562970aeb88ba14d

SHA512
ee7451ab681f1599959a51921ee797590467363c531f6a4519680986bf183c8d6b932e0af32e1b9eaf7f3081b9f218b471ec657769ed5592f7516c4b78ff734a

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case21\is-U6ERN.tmp

Filesize
37B

MD5
b9d102329526329a16dcf2133d228c85

SHA1
b08289f8467ed9585b69b403376325aad57f50bc

SHA256
282319b963d4e02362ecdca753a91dff7c7983ff6f967c3e55a0e876837de3a3

SHA512
3e33f51765398e63d1f4621d316e91d70d6103df5cbac5bdca0a9ffd2813ccf3ffe7b20ada44eaff0a00848cdd5019e060753fa8c4cfe3a555176c9ec3996d99

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case22\is-32IIM.tmp

Filesize
166B

MD5
93a020965ab0b53f4e02281806e7fa00

SHA1
0fbeeb04e245b1d027c8182d961f8ad78d35cfd7

SHA256
0f859d6ce4a1c60bbd94bdf86ff3edd9d6102cb07165a4c011fdd2d126e41ee3

SHA512
97f85f15765136ad481c33131517c390f42c7021067bbe2eb720b807b12a7c5781d03d841644b99750997f36207cc15daabe32faa343ed1af7977403f609ac5b

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case22\is-EMCBI.tmp

Filesize
240B

MD5
66d6e06c3aec1496661ec2f40fb51699

SHA1
c555379077398bcfe02a850c9731076057144c32

SHA256
4eb51079d43c19499760321621aca2c6eec5b1e85b27e28409e123eb56eb77a5

SHA512
c9414017c080fa22f4197fa902243887f24e1c91a799c1440c275a38d584504b16d91dbedf39b5979b095d64b447f1baa7a0178cfcbfef6294f75f4e0a49f2da

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case22\is-IIIOC.tmp

Filesize
856B

MD5
8174c8ac832365a0a8e8630f9fc94c82

SHA1
adc56855679759739098e5340dfd9d552583c136

SHA256
4a6f2e19a324f24a1fdcd21fb6b3f16aef7b6d3773344f13b29db97013e8d334

SHA512
e3162e1c1c366bb3bb35942307e2769eb0c3acb80a0405485f1cd57b41d4b147b6098683ab29cf747a605f3eeaa34cb4b350ab257e1111530d71217febb79ea0

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case22\is-R83JS.tmp

Filesize
62B

MD5
848c617e93151e03e73f8b155d5c6e53

SHA1
6eb3f7c174eb6cfe13eea2148971cbec02730db1

SHA256
56d8a8347d11af15ccdf769afaf7886bd2eda20eee05f8319e66c35a7b7e8cb8

SHA512
8d158e90a45afff70a6e155d4b106247ad8403d2635e856fb011a35f94544158311868d8e6a0040c5d8187f6815aea2db8230167467bf8c77845fb43b488e79a

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case23\is-1N18A.tmp

Filesize
310B

MD5
b1b074a394948229b79045ee9208ccbf

SHA1
2d0648ca1201ca018d3128a299bc4ec2101277c0

SHA256
2f9b9c50fe743fe1848e4b99263fbabad671cb5c4ab6fbc5ffd85d00bc0b2a0b

SHA512
03cb46cec13dbb44f09dac097198cd6143216b4c5e1b449664b2b930ea86d719ed76adde7a1e025dd59e6a3852cc9738ad8072641dc46f67396aec9538da4154

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case23\is-BU35A.tmp

Filesize
2KB

MD5
72351831840d11e69fc2a6390bb5beb1

SHA1
0d49c85df0f11d82a450fc6ae2b9666193de8e0c

SHA256
c45f12880386b2f8157a781d704a64da3af7e3bf83b44984adc88463971fc81c

SHA512
c45ded4dea4f77e8e0bb732a38a2f051a7bcfb86a7dcf60552926cc1d6f4ba02fd65e1410a956fa5dc899567f388ba305d904b7a307cf7b20fc97cf6945b836b

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case23\is-QP8IF.tmp

Filesize
851B

MD5
13b81f7c2dccaf64827d607c5a85640d

SHA1
5aafbca54482a548ad1d9105f0a7971d3a9d4543

SHA256
151de630d8bfe934208e7930af2e1dfe3671398ba2f44ec06805438e3e12bd72

SHA512
52ccd80f981c28b5b5c2625c5192a109ca7b5157cfd995eb23cf2c1c685dea7e6f07eaffc6adc20478c87d9cdde3164f97d2f5b59b2c48a62189811731838b6d

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case23\is-T5QHH.tmp

Filesize
116B

MD5
daa1cabdaac6bbd26ad15aabc0877504

SHA1
60d461ef5ed3e5e62e0b0967717531680b69bef6

SHA256
0c369c7b9ba09ea82a46451febfd6d38e6a48c919c3d86e7fdaf02cda1e8556f

SHA512
f99031094e85495544f7a89cbaef30f93f854498f459ec527cd0b7eb15264a4d024420de00e1a9c7dfdc8bebdc4b5086864468195733e95dfe755964a20c9ca6

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case24\is-9GR1V.tmp

Filesize
434B

MD5
3b32cab236c9e9fec9390e249bb0b4bb

SHA1
f493c5f8327a2e3e692abc243935edd70eebd920

SHA256
0da81e4e6331efcbb47834147e2b8857d60cbc59b41edb192ab627c0a6302667

SHA512
a539b2e376a10124f28648f4e038b21ce9712ff96461a711eabe0c72b292375ee35db85c570ee7069e577b03f5402e70cd1ec683f2d156c94c7d2b2a06169fe2

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case24\is-9H40Q.tmp

Filesize
240B

MD5
78f69673fc31f0b4d986f4107fbef9a8

SHA1
4ec883329d78a7ed9bc228b4702a9c8a9966ad89

SHA256
c949a45951ba30395037f64e157dcc25748b0c568620671732c1153e71623a7e

SHA512
8105e8f49e3a4226c4e0cc5d6f13414840a3379f131c2d2f11c90b6e887a589daf9d3d77fd6185588c9a5e3f849aa1d5b253b94b139b750adf0f81b455e2dcfd

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case24\is-BF6TI.tmp

Filesize
62B

MD5
6f3ffd450d6024a231b9e46cbf6b458b

SHA1
0bac804d12f402beda89a4c5d245f48fbf688aa8

SHA256
ca9f938daf78942e02984d9de259d016e696cfdd8c6dd14ded8a57e5031c96bc

SHA512
b8a6e64d9cdf49bac489b3d43c8c7ada2a8d48ca23347f03c67a61c39c3485212c7fd4d4816e3009a71e49ca261a83aa7bc1c5005c50a0b64a7bdcb4c88c118a

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case24\is-ERGEJ.tmp

Filesize
94B

MD5
56ad3f936823e5074715c8be8808ff91

SHA1
b33df83219ac4998710f258992a9e317dca81655

SHA256
8171f07730bebb1e978977e1cec47b72ade0795a402458cd367801b992dcc71f

SHA512
24d71b104d67569fb247acda1b49b134846f89af692cd9f0aee88216a8c516c7709c1e5b647c793737991173f90121811c8b2e52c04a7442e86b4b975705c601

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case26\is-26CKG.tmp

Filesize
62B

MD5
ee99a4f7573eb00b3570293464fa808f

SHA1
e048fda1d0d13db9afa98cbbc143933bc2b789c7

SHA256
a5ffa246ab5e61e4c649c8073f318cdf09e871cdd672a4bae4ad47c823a432d6

SHA512
937811d52d60653cd395b69b7465c17ee7ad863acb3cdd4a57cdb040aada3053fadc513f42b716e1dc803387fad28371e4ebcf358fec8fda7cf6df702962f4f6

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case26\is-CD26H.tmp

Filesize
94B

MD5
e758cc642f2c8e6f96a9af68984c9638

SHA1
6e33b45a54c215698af753a09944df5f8e5c38d4

SHA256
f1fcdd4d2f1e8eee9c952ab96872a8e54396a7eeab73a7c81e0ea2ed55468d17

SHA512
9b13098952936c6d46c3c145927caa158af568b8b0b1510911d7cd5bd5fdd3fb4f9506ee47f807ac4f53638971996c012019f31b15179d7216c963604800050b

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case26\is-I0RDB.tmp

Filesize
136B

MD5
e4e3485c09613921268fa8c2e49a697f

SHA1
8963e20a29e2dbcc915b62fe7c35e72b095cca6e

SHA256
d9042a185cf44818cd71d0fc8ad876c7d5e25d63729844470dd70b095d92527f

SHA512
fc8b9906c5ba01f06da606b7682f7e59bc90c66cc6366eb80b6f82a97191f44862aeb3242b453a4b59a2018ab24ee579a7349d9dd2da9d837ce6b6307f841037

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case26\is-P6CSL.tmp

Filesize
240B

MD5
82020f7812f58417d23bbe672dc5167a

SHA1
2660b72f159fde60f92fa15f28e443ca49c34ab6

SHA256
e37575941fdb25da99c5101f06f1f4b3b5f44aa00a425def205f51bdaa29ac6f

SHA512
1815bbbbeb3dfb24cb3ae86069ae7fd3cd5d2bd10a29d845d31c659c3814819eaa6ffac1a76fdd7fc46e508f6ab7f0ae88f281489e031fc369fd6a15e0292093

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case02\is-COBAU.tmp

Filesize
856B

MD5
4fdbe65851e2331ec07762871f1280b2

SHA1
d87a6c7b2c7319b07184f4873f2a935f34cfdc5d

SHA256
eee6549f6e5cb16ebad85a272b7d44d5a7c9805c471de7f59841f8aaf5fe43b2

SHA512
22aec6217927d50e21f4f06495453b618b9ff2c79e4979cff9519ece6b116bc7486a0e611562a74249106603c0b994e08a82f269d642178cdec97fc869325b95

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case02\is-FAP4R.tmp

Filesize
68B

MD5
4dc3dbabab8aa60c05e1f5011f758f12

SHA1
4d35eef9446c35ed7ed579ac1db9af0c15134f34

SHA256
9202c15916b567b3b20a37b0499fac618c4dc9f1a566c2931e941f450fcecfe1

SHA512
f27e18ca97b9c05c692dc5be947de81f15588a93ce409a86fc327baf38393f38a5d8f04999aa408fd3cfe9346ad6a18dfe5f11527c2e865425d95c2a8c39edc0

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case02\is-JU334.tmp

Filesize
93B

MD5
fce0e33adf0e0d6d6e063d1e3bacb9f6

SHA1
58cbeb26ad3e72bb91789365a9c7983c40ddb584

SHA256
e2b1194690e89181e7dd5466a203956e7cfbbe53a1161af4ad217e925929bd1b

SHA512
dd3ca9e2e0c97518b6c2abfc28deb89ff7d646df91ce733cf484c65fdf9896ae805aea51d5c9cd9f1cc5037d335a618fcc21e8cca57f9e2da9b7e6da4eb047ec

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case02\is-OQ24K.tmp

Filesize
174B

MD5
66a8b4b384519da225a623bc97afa558

SHA1
4625e7ea41e25453d15e9957dfb2ffbd5b3b2345

SHA256
d5842a1606896e22ae0f741b9d8980b14cff004465b20f2cce7001e8957ca943

SHA512
e36ddd8f7da9ab29fb8627b3341e8e545418616b07fcb1a2689e5ccf368ffbfce52913a85406a1d210753a19e396d1b1476efac4487c80f2eb2213937d4a8002

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case02\is-VGMRQ.tmp

Filesize
62B

MD5
670da241ab88bf906fcbbd8d3f1dd9fd

SHA1
abcb5edb9615fc8f92444a1ff8dabedf36a03834

SHA256
3a945d851408bb8f3c5d983743774b3b2fc6fc54008862bc9684e595711af2c3

SHA512
f2f50b5ab2c37e487238e4e27c2b3127e0be47f2c732a440a8747e76cc44d701500999fc7c5ece08a52595435ba04f0fd285d50664bfa2ddda364d57798b3e91

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case03\is-ECSJL.tmp

Filesize
248B

MD5
00ae29283e026214490b2de18c860cad

SHA1
21a55dc6c08e0d048aeacf851b62e9bf77b68a4c

SHA256
1776a7306d0067cb6716b4c4b2c9326022361bff1fc22d968c1f25df12fbc34e

SHA512
5ccfe70740b1497358096c0cae76ab2788f8f66f46eef34c9aa1368d3fb3e6036bf08bd451049707e7f7e1ae88db90fe8027a230c31abaace9211cebd7061c6c

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case03\is-MUR3L.tmp

Filesize
240B

MD5
adbba68b87f91bfb0e45a3309faec8df

SHA1
93f8b7a696dfb1cbb6dea39ba46a6c356045a59b

SHA256
49c1692a922b9c0dbdf0fefe9d6ba93df1f29e3135f6dfe5af1bc785bd1d9ca4

SHA512
995a4124af5ef889dab8a9e617ac6d76246d699451905955909431ded768f8b57a0221676fad3fbf732f76b3bee41a44563e4c46c004c296f5e6bb4adcaa6148

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case04\is-DRTSJ.tmp

Filesize
236B

MD5
1907012ab66698aa1bd2ef9b534614f6

SHA1
71eb7733df64f3ddf9339c9026aebb28b6255559

SHA256
a9f3d61c22c6349c4bd89e4afe2a7b05c1a35b622b8501a85c31e00363ac790b

SHA512
dc4465bcc28f739f8af8e1c0afe16fac8be65aa9c2daf634ac865f9aa7d520a9536684f88fd040dd7f9c04e3b5854ffc6db66a77c6f81b285f944f1517a072e3

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case14\is-FRKEB.tmp

Filesize
644B

MD5
83d1f0a35549ea0d3e344bb2db2fcf77

SHA1
f685a2d51470427ab51e8841c7f19e7ebe54378e

SHA256
6549acd5ba33384a86a58dceb12a4ae59760d2140c96cc151d5cdb234677f9e7

SHA512
f84c91833d3f58015ae88b74a6802fb39fdd0e901b53502c9f9c53629475a7ade9fae1d2eb7e43e7de0fcb9461c3e4f90a5fae010201a049b1c779c70cc4bdf9

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case14\is-V2VQ0.tmp

Filesize
48B

MD5
169bcfdf363c05239483c0840b42f029

SHA1
5415b12afd23793e1dfca3b48e14d5e271a19891

SHA256
d9f6bcf475bd27ef71a66821ead5ce1e85f0e855efe4e1bb4481881e1ec18368

SHA512
4cceeeb2fdd9e44c2e264b07df959378d90d3b924d2f13b3232e9d4368403b0c5fb4a20406d8dc46729f903e7b6a2f280ac49a7b5d8f4fc41c917b50d4c853f1

Download Submit
C:\PSR\Sddp17.2\Example\2_stages\Case16\is-55V4M.tmp

Filesize
114B

MD5
f8d6122b99013964e6e7876a375a134d

SHA1
7610283987b289277e908406fe244484e0cd989c

SHA256
b17b4f5562098a85bbf7a7972d88b9e125d60e3ccb45b9ebfc4497a4d64585db

SHA512
da6417de0449bc57bbfa47b2939dde1d59f0bf1ece19968353ca89c90d6bfd19368bf1276be3f42678f1e633809d5a97a8f18a7e0dd40246076fac60056eac2a

Download Submit
C:\PSR\Sddp17.2\Example\2_stages\Case16\is-H9TSO.tmp

Filesize
310B

MD5
f3d6af42f34adb647325b9c5257d7474

SHA1
c765434fdd3d49fc7b59474237bc46f6c1e78c59

SHA256
9dc3e62e2235f7d4424de49e6aa3e649406a5af01843c46770e700e98fae1b13

SHA512
e8896023358aedc36d45729f4c3481560e576ebe7efef1aeec913c6fee9ea45e3601eed984d28fab4999c5a7f1d0735b7d6268bb66ee670bb830c3fc653c2757

Download Submit
C:\PSR\Sddp17.2\Example\2_stages\Case17\is-EH95I.tmp

Filesize
240B

MD5
7858f1eb2b5f2245816e2a89895bd1bf

SHA1
3a018165da6fd73bc55cbcb02089acefd94f0c7e

SHA256
7978113ec4777c41a50b5e250d0a80db1e800960f76561ce74ce0fbabc74c596

SHA512
521c7b960324d390cd5040ae0b9f6bcc2a3c5a4e12ccc5acdb7a795e615162eff67aaabf2842e7ad66f02bc4d30c064cdb4204a73553565c4fdd47d23c12b9fb

Download Submit
C:\PSR\Sddp17.2\Example\2_stages\Case17\is-KQNPD.tmp

Filesize
22B

MD5
3bbe8359e09a019509c9c062a6408ff4

SHA1
25a05cc9173463423e7d5773c521a43d17acf0a5

SHA256
8430fb3c3f75303f49b23fd87be7fb3be2caa97dfe24ffb2e60a42aeffeb0bce

SHA512
093f201a728e629793e5bb2046d96cb77f1340438a68e08d41ad713b4bea5b003e01ce45ab65d9c31b8fb059f2214fbe3c4965e0809b7c6b5dc41ac75100bf51

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-0GSJP.tmp

Filesize
1KB

MD5
00c685f0387915af21e7746177b37433

SHA1
b0e301b778aa0634c154a3dd68aa8e0948608751

SHA256
b5fcb07cc60b329a6bad4787b37b700c110992615b8c9f219648a0f067e1b25a

SHA512
0cb17099b6bd652345aaf361e8786eece0a40689ca0f3dda08bd4f93a3d4cb979b77303fb3de1059fb2827b96009b6a932838e059308960898b76e8a7553e979

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-2K5OI.tmp

Filesize
66B

MD5
1f609386c5502dc48073b413d4743db8

SHA1
e24e73bf1a394c80e71779a7043b3a487388c596

SHA256
f54a189df8d563fa2a864bad96bd181fdaa4f776b3003e159fc7e69afe0073ca

SHA512
c66600edf2d787d2e0d0b8e42b76c17fc37ca44e2987edeea5403338901b005af034d7eed5cc72aec33db4a86e9a5e09a832fc84b04ef3ee5278beb33ec99762

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-7QCEQ.tmp

Filesize
62B

MD5
d5b7d9d1e7b02178b787336b310d952c

SHA1
71a8730feb01da01ab43614304014ee959e06879

SHA256
a4b49d4cd0757ec89682adc03faaa81b2ec931bbdf5f2ac0d77e2307b3c3ad8d

SHA512
458c5c264bd37d4ecbe4d0bc6bc61119bf9cdb252813f20f6ea1d226202a21d7b043dc4fc9f098c00b01d49570735b73d2763c87b139918ecbaa07ae5c7e38f4

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-7VD5O.tmp

Filesize
30B

MD5
b0b28414f25353d9d114d05983ec8796

SHA1
beb6307d831039178c9c8acc00b10636784b27c4

SHA256
cfcd58377d9f22a537e5d8eb03c85760ce08fd7296b9ae964093d7df108d2aaf

SHA512
11717ede70651410e774718466dfc905933ce7032b2c97e2600864728fffdbcb39f74004ca8077b95058d6b2d22a371226104a827a8b71c168a1ff052a6e03ad

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-ATIBO.tmp

Filesize
114B

MD5
f667a3907c1f83f1f68cd8047e7660d3

SHA1
db7773f8d4696bf55b356ae023fd288f110867f9

SHA256
78487a0b97a0bc9b6579df956d5ab8f3a4a3d702190256f476b6ff34f9170ef4

SHA512
ccf97ae06a554345a7272b3156657dcfe2ccf76ba220d3ac4979180d99fd6281f89deda0296ac87566f554781e91b14e5d567c2bcf8407578f13bc4e10d2ea3f

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-CPPO8.tmp

Filesize
404B

MD5
e874f37cfddac75e0d9d7c6bc1d083f3

SHA1
97f344b56ab95e90ac0ce35590142cb7872850a8

SHA256
a7633563f24de225468de49f9cf823f82811d99b8fac87f0f691ecb42170120f

SHA512
9a8fb0183d7c7a2a61e64522de9639bac7e830cf4ae2f4b5266bca37cf7023d8e4f8ef64d737d0734d238b4c042fb8f6bb8e4853a4d22cc44159a208580b7892

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-D9K7O.tmp

Filesize
95KB

MD5
b589fe0ce99462c2cddb86189be1ea56

SHA1
e97d407e96cbb5f41c5d358afc2a12031b06ac2c

SHA256
48357f2d226816e8d52472761f03614302574f4acdb1014a838873935f64cfdf

SHA512
3b03c7a185e6a33b6d96046fbc93186e3b7ebbfdcf97ae715b220c08054f23354e3f44da1dfaef1c4e274ca8adaa912ce637731a831f53c79686097fb17cac6e

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-DTRR3.tmp

Filesize
310B

MD5
01190aba3b6c1a01685cd250f66a725d

SHA1
9fb7bb017d7d8a620d64d4c3527b9a275c2b0b82

SHA256
5a12cbdba565de48c60038b22e0a50b645f48ffe84ab0b0f2ea570b1d7f8e40b

SHA512
535cd3af4e21f59f5b9c5bd96e07913c073715e097c01ab1836e00c85e0e8576ede9263fd80751ec56f7a0817f445a2e30b1197167e1bd8fab1b4d025cd134c3

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-FA63V.tmp

Filesize
2KB

MD5
c3d4fc3e378cc094032d878830e03cf8

SHA1
41001bf2deef439e9431e35ceb8f88b6d2c5998e

SHA256
e105c9957ac9b7fecb53f820e27c54f51436049e9231726fa5a0369871efbbde

SHA512
fbd3f555b1975bde817f86fccabe4bc68f6014ee4578fc81ab50c6a47a467dd29a5ba71b26b78baedb95a87ee6e2555166dadcab4c0275a00fdc691a4695b9b1

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-HAVAT.tmp

Filesize
238B

MD5
43940d405829baeaeb565c75aeab24ba

SHA1
8b90d0cdfd7d5b9bedc5c15dfeae18a756662f81

SHA256
c63ba88bdd1b1fed37fa11e82946ee533ee89be3ee7487e85c6d0aee5272f88e

SHA512
f4f5d3ffb40bbe492f300452ad3364e0d1573c0510c9921106988f5ac52a2c7b918bb3227a5e4e78c2b1be750f94eae4919fd438237aaf05b0d796e61f6d58e6

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-K5VTE.tmp

Filesize
2KB

MD5
a4d444b8eadb0076efeb5b6b19bdbec1

SHA1
b79ae0a5616da66c63373ffa2ddbe4283a6c9c6d

SHA256
7421af20382c4fb0e7a4c45cdc0c5c4fbb1136323c5857d3b627f2dabb2bf5a4

SHA512
69daf0e0d5188cebd59b8936057bd78b43cbea91cf6ff2c055999f942b7e4f2dcb028e12b002382ee563a2d7a71162523585cf578fd615726e1d27f75b007773

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-M5D4I.tmp

Filesize
1KB

MD5
3c0a416dbd9f216e657bfa9ff0ee4b1a

SHA1
811e79d802a1a1f0fe0995a263214b32d7aa6972

SHA256
c95b192972cbc86ec2d4d003bc97555718a934be129ecb1cfa30abcc056e8eb7

SHA512
b0ecc6eec46557fa8768d5f52c0b560827d4d498988f360e2a7175ec55d5d3dabaa7e712d228c2025645cd117b0435949fcf7b6c41ef7760346e825aeac2f45b

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-MS41L.tmp

Filesize
84B

MD5
5537df77f0b90b1d71ec4c49b83c50da

SHA1
8ceabe48b4d291242ad0cbe7cd2fb5928724f176

SHA256
4a3b361cf43f79aa7fbdf3a67f54251221cee07392a417c5d8cc64cd937f61e4

SHA512
8f891541b9ff50a62a992a5192da972a6916cbfb4c746dd9c3db4dcff08ed32db92726124f2c6b0fa8e2c2059181723178b1b5af6d7919eff457d17e9da48501

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-VQFE8.tmp

Filesize
158KB

MD5
f39e54b211c1f6f68e7f4055e1ac1329

SHA1
c065137c6708979136f464bc6312a2e97694e8af

SHA256
beb2bb923f4a8b743fa46f2ccdc8c083ffee9e0d283156f2cc9aefda651629ef

SHA512
88439971f036750a8f16d9d954ed19ac2e1a0825146981b3d59ab5ab55bb45abe816d3dc659dd55f2941bdd4cc89b67857518e69d68c6ccef75f35e2444a438f

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-5IC58.tmp

Filesize
202B

MD5
a8820e15a154a6415d2b86351e7a42aa

SHA1
02c3d990e0391d2e2b2b460382a4afeebcef64bb

SHA256
d32dd26455a09cde0fae0b9ffd11db57afdea908258d0ecf9c1cf5697c0f961e

SHA512
51a7df2efbe6e61d11057362338b81e79ad02df988ba72ea12ba35e906230d4c58dad3094dfc669c6a79ef626b6d1b094af0acb29f6eb8682a1e50239d17bd1a

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-IFP3A.tmp

Filesize
169KB

MD5
0a5426cfcd93ea80e5bb595778ece14b

SHA1
bb5b75c8ddd9d6dc2517d98526d506aa0db0eac9

SHA256
de2fcda1d36e786449845713d4194f7b79db286b80673c8dd8995d1234853825

SHA512
85815da6981eb511a541a50e0b56b6142a5500ba2b9318fbe46ca95041f8917d1828db5d4c4eca4add40449efd0b2bd4bf2f1015849388b4727ebbdfeebeea30

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-KV176.tmp

Filesize
225B

MD5
1c649570f50b61490548fedb2e0c7172

SHA1
de11d92e0de5399eaaae3462a8e3b7161171c58d

SHA256
217b09466ebf752786213a444074b7a3e0ae709909da283fd36dd3e8f2f6b2d9

SHA512
fe11818dd5298375f195cd621c59e09df2648417df2b67e61754dbc5b038dea94a4bf10cb14de923d9ad7d952fbea2382dc6bd7e43f39c8aa5328240269f9e4d

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-LN8LF.tmp

Filesize
451B

MD5
e049c30dc7ff386d8b5aabeb66cc57f0

SHA1
c108b656ea7086f2f3e2779b59c2c6ffaf90a8f5

SHA256
8975bf419ca21cc936c4c9c03ed1d763ab11f7ea9209724b65fdb874758db88d

SHA512
b2afc0bca0da2fd7bfea349b26c7a64711b5ddccc8c7dca4ef318d11db267d31ef08fd585eb2295c45fd2eb8ae132fad86601a2c06c7add2994a74973efae455

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-QDRF7.tmp

Filesize
1KB

MD5
5ea6bbe19f0a17536dcbb55b34d9dc4a

SHA1
2ee1ff9b50504580d2bbfa6645a8b12f9d01b303

SHA256
d524f5feee9946438d960feb396953b4aa93dc84c6dcb518e40b976bf7fce0af

SHA512
e9adaf3da975bf7276bd77809e3a955fe41951881f242184650083f13d18bcac95e5f74131436ec3bce73f9fbfc11512a428773e1c0bb8fbcb692267b0001b4b

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-SDHKD.tmp

Filesize
306B

MD5
02a0572890fb9df5f511fb18f4c70e27

SHA1
cf5a8b3079ceb4a8748345502f314b017048611f

SHA256
b4ea669c3d9a48396dcd8ee60550b02edab2917838aa097b07c898b43e51b6ed

SHA512
63989ca0c58b40203637ad5f77eef5ef3c9cf44e8a6e3b7698adb9882cc5a8eaf028b00b19d231f02b393573706405c76fc98ef549076397828b381c1ce045fc

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-23EPG.tmp

Filesize
72B

MD5
c6fbd929021313e737ac003cc77c52fd

SHA1
dfb18d017e68b9f9fab5c832ea738bdb52294fbd

SHA256
ff6938db539580dadfbeaff6eb3a9b4d77c59907ebc4904ea0d037a7973dfe4d

SHA512
7c390dcb56c7e933b1d00503f86e15bc7bc3f102390fe68c385427d2db535a4242f455e590665700a97602e02ccfe2fbb9e3275fe36c169d9725cbeb197aed17

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-2LFLF.tmp

Filesize
48B

MD5
c55b452002b7bf1acc2f733181340f5e

SHA1
096f7a50c08e04d0b73dbd90db44c20956131ddb

SHA256
ad88758a09ba886f17833923c41081d151bac500c33cef46d8ed0904ed72fbee

SHA512
258cfdebbef98df2d392e4c4a4aa88dc87ce0b59b2ef9921758de4654112add7d580a6a1082b7e8c43a0eca958d96f41c49c1fb6c8aabe1db3cc77ee061ce8e2

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-G4SIG.tmp

Filesize
84B

MD5
eb397c3092db12cd98f2b76796c7d2ef

SHA1
1a38fc75466035a680c4d760c2384b79e0deca1e

SHA256
266b68ff22700c09e5d4961dff3f4656869d30e86ecb33e6fcf8773076078feb

SHA512
fe3ecfe8b01f8f864c1dde406a1d51b19a218dd9da926c33bfc1aff2e8a59ecec30d67615d3b38f8a32fd411f996226d4d7c801e53b6b6971fb972898bc1adef

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-K1L2A.tmp

Filesize
10KB

MD5
c8095fa09f2775045b7cf0cc0e3b8431

SHA1
15582457d8a3d51ca12d24c8f729516bd52cdef0

SHA256
4af425d4b8a3539f0cf39d803dab04c63ead16c39e5c40005923a3d8a29b50bc

SHA512
16b20452780aa454fd06c95fac04c0230a81499046d9c6ad74a72e77aad7130c89edb3aaa65ba9d7417092808027376423c020a2e00e40cc167dd683119d5c6e

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-M04J6.tmp

Filesize
1KB

MD5
a1b59a52b350bdfe73e59b45b4e59d04

SHA1
86e7aaf32326e36c2741c96199f92d835f21b751

SHA256
ecd56e7567c89336bc17e804de6e3765809117e666f2b3221d0fad8afc9e547a

SHA512
2b9fcab400c09161a3ba4f386dc7d1947551112cfe3a54f7949fc479fda3fdee9831514520958e8aa4b615bb782b268de0e0b8e6954788972b06dbdc11e44d6d

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-QAM23.tmp

Filesize
48B

MD5
cfcbf43af0aacaaaf68e61f91149c19f

SHA1
9ca2a207492c84ccd44387b31e0349c4b89a2ebe

SHA256
3b16dccac16222d81f329776f42133f4564276b1a1194b093ed9e2a83380b0fd

SHA512
5b360cb07d825b9112699332fe1d3ed6dda17602a0123c88531e48fc40894fe1920e70266c985b536b0bd1088857673e184c2af1494f41d5c21cb25444b3b609

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-RKSBE.tmp

Filesize
48B

MD5
0be6c54465e221cef61c9a5aa4ff5466

SHA1
d49b3ec4129388c1761f67a08dd67b16c5343de8

SHA256
75ede13c3c9d01c763caa4c93bb9d61f3d7bedb62c236887c5e539b3900d8dd0

SHA512
8ef4c0303abf92c8ccf188f231b7d268c2eea78825dbed09974efd7c165c1278542d688b643be4b1f521a9c98ae602b18d082f70031b8d6429278c96413a6dd3

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-UKAR2.tmp

Filesize
1KB

MD5
f2650f979f51a1349e6dee35422350eb

SHA1
341c29c49fd8cac38b0dd4216fa147fcb2838814

SHA256
927a2676774c722a9743c22072925a83c51edd6e7ed7ed4d896fa7c5e15f43f6

SHA512
9dfbac58a282eb1752f18a921447de95d8de741b0dbd64d09c37772a8e2672df6c674241c113f6640e23d394fbbcd219550d7f726a3aae63e95dd3256ff25d38

Download Submit
C:\PSR\Sddp17.2\IHM\ColunasSddp.xml

Filesize
33KB

MD5
dc880139944d70ad047e26e0073803a9

SHA1
c23b22ab443d2436e6b5fc41c74858c54b14f733

SHA256
1c606291782ca6e34bcdf7039de4f4424f3c9a779f63fdd8f833f9c93d6a6fcd

SHA512
d446bc0bfb2ca0f4f7731ea316c7c7dcfc6be020c8d27de560331594c8c0dc6005aec3bb6497ccdc4e2cbcd9f2ee5df3cc1f71915cc7997e54c44a13959be332

Download Submit
C:\PSR\Sddp17.2\IHM\GlossarioLegendasSddp.xml

Filesize
455KB

MD5
a7dc398c9d3d9c2f4ae4d6fc031c2227

SHA1
2b6cb4a1e8854db7a5389ab228a06ae6f9ecbf67

SHA256
91b509c3f6e14b348a2e2879f586df6aedb832382fc063c3f6a2d63310cdd202

SHA512
5ae1e384c1250e9f508bc9bf145f6c480f0026af6f4bb0fd48c57f81f1f0e8a7045fc5c211fc70915c19560168836142856401691adee2c5b6eddd2d414dc2e4

Download Submit
C:\PSR\Sddp17.2\IHM\PSRUpdate.exe

Filesize
67.8MB

MD5
e65e130fd7f614271ef3ce66a4967d09

SHA1
0d64afc46b3100fcf7df8420a3c7b8559ce5e619

SHA256
52522444b2c692ab10d7f9fae7a85c93e60d90db9dcdf7940045751bbc7d6855

SHA512
93bda4b3730fe1df22de161daa0704a096abf1b874f0980cb1fb185df9e94d406243056e2a3729ec3dae27f7a5b3415d8b60024e2619b01d32b65b4a0b73f7ca

Download Submit
C:\PSR\Sddp17.2\IHM\TelasSDDP-config.xml

Filesize
23KB

MD5
2d22d77be9f820095c4659bdd1870c49

SHA1
5729f62f94ed7074ff9490bc98d5b9393de04bdd

SHA256
079ef695d24081b44a761cdc22e2fcfa4c8f9413188d005d56a776211f69ade6

SHA512
034cbda082f653c6f40e1b19a5d642d4a01cd94b88496d80548faedd53828781e0d2b997fcb0a0f9a07d9989790e1621b27760172f7335a5a2a6a1f6887d0b71

Download Submit
C:\PSR\Sddp17.2\IHM\extensions.cfg

Filesize
616B

MD5
ded271dfc46a78335b928b04487281e5

SHA1
358ffe92262361c43f29b9c354a2f26db88894f1

SHA256
5925861e38e2a0cff6b5c29572016dc41fbcbc0c4c4e6d453cd878fd8e21f7ac

SHA512
f91103bcab4273bdae13f950116ae7eeb7aeaf5e22b4f7cffb7c3bc007bb44a2c7c8e687467d331f512a6e1d3e4d0663cb982f59056e0faa98f1289fac5080ab

Download Submit
C:\PSR\Sddp17.2\IHM\helpindex.csv

Filesize
8KB

MD5
88460d0d840b6e94928e3e2e82d6fff7

SHA1
4d09539b043d5d6c8b21d099f82dc9e0b505d513

SHA256
5a0b87d63113b51bd4f92f61183ee84b153c5788159a9d8c7627ff46c73c5b68

SHA512
93bbd91067d22ed146bd06c76a8f0a8c8897bb7a7b2e7e819a316c64c179391c4274c3a2ac542a6475d17721c83cdd2827552561de78f2ba23a74d4969851f42

Download Submit
C:\PSR\Sddp17.2\Ihm\PSRUpdate.exe

Filesize
67.8MB

MD5
e65e130fd7f614271ef3ce66a4967d09

SHA1
0d64afc46b3100fcf7df8420a3c7b8559ce5e619

SHA256
52522444b2c692ab10d7f9fae7a85c93e60d90db9dcdf7940045751bbc7d6855

SHA512
93bda4b3730fe1df22de161daa0704a096abf1b874f0980cb1fb185df9e94d406243056e2a3729ec3dae27f7a5b3415d8b60024e2619b01d32b65b4a0b73f7ca

Download Submit
C:\PSR\Sddp17.2\Ihm\Sddpihm.exe

Filesize
27.4MB

MD5
d422b0cb72a8629000d766dce35a9a07

SHA1
618082ecd6bffdefa0db1c2dd7a21a98e249cc11

SHA256
c100642bdd59676317ccd196d28054ea3a9ccc97203b24ac351659572c557b8a

SHA512
a0990c9aece7dd3743a5f28ad4bde19eebf2fd8dcc275e61d5e2f3ea262cb44997e3a26822305e98b5dafd20328712d1a39defe1875434079063ef4e33b53e5c

Download Submit
C:\PSR\Sddp17.2\Ihm\Sddpihm.exe

Filesize
27.4MB

MD5
d422b0cb72a8629000d766dce35a9a07

SHA1
618082ecd6bffdefa0db1c2dd7a21a98e249cc11

SHA256
c100642bdd59676317ccd196d28054ea3a9ccc97203b24ac351659572c557b8a

SHA512
a0990c9aece7dd3743a5f28ad4bde19eebf2fd8dcc275e61d5e2f3ea262cb44997e3a26822305e98b5dafd20328712d1a39defe1875434079063ef4e33b53e5c

Download Submit
C:\PSR\Sddp17.2\Ihm\is-TKM70.tmp

Filesize
88KB

MD5
0b055a9be761845e8b8c7dc89d59b158

SHA1
b111268517b04cd62f86ee003c7140bd838f416c

SHA256
0c9c9ed5d17ec01f7369873f94ea59f8104409f206a2296bbd6294c62dc08b8b

SHA512
e1e996ca3d43e044803fabde859ccdc24f21b5dda4dfc2f86a4a4570ab919048ff4c8811d74acf9e4b35ad3486931e5ef841279ea29f0197023e410a95dfb15a

Download Submit
C:\PSR\Sddp17.2\Ihm\vbalFlBr6.dll

Filesize
40KB

MD5
9fdb8a72d927888796a4e6a14560cc5f

SHA1
ed49dcfe5fd16c658033373d816e61d8173368a3

SHA256
e692ab331fa5753d619b5fbe68bd5ac44c57ad13d046048414f75cfde4065a19

SHA512
040358819a95ac368e1a67523b409e7e18c1d37444b03a14bf346f5c9183b8743d4f97011c0c5ae177b2bec8aaacc687416b9a6abbc2d692cc2307dd0b56c1c2

Download Submit
C:\PSR\Sddp17.2\OPER\SDDPeng.fmt

Filesize
171KB

MD5
b7c9244de622edfd455d5d52378b8c25

SHA1
6a8941d20322229867403531f86d34b4b045e2f9

SHA256
736b5aeedbc55e73f60770df0b9741a3ab555c4c9d49b97f290cf508c99fe11f

SHA512
20ac93ec2e848ad386904c94a267a52335558c309734820d10e1e80fe0c47dfc0a5f6b3c8d3811f27cef3f69042570e0e40b1782bf9e90b6c01a39f4e1a9a8e4

Download Submit
C:\PSR\Sddp17.2\OPER\indexcls.fmt

Filesize
13KB

MD5
0c832e596dea0892dc0959a0f22621c7

SHA1
ddb367132ec9d5e7c1081e2974dabd9cad317bd8

SHA256
14f1c838c901a4a6ad11241c85b11bd3bedd63c35a1e80560ce9fcfebaa65d44

SHA512
1b80e2203742e15d0ccd4dd27c7c91a81ce6225453067fd16238928bc0da147eb7e4acb17f5323848b33a69f0cb46e69f581d32ba9adf56073e3c0ccc0f952c5

Download Submit
C:\PSR\Sddp17.2\OPER\indexdat.fmt

Filesize
157KB

MD5
b87815b3298cd007660f8b4d0ac58c24

SHA1
e976c9fe580a4dfca6687cf696574c5dff1fba4e

SHA256
e775d9a3e7da20dbd7152466d070b9c239a2539e471ab2ef338380a01ca9a25d

SHA512
173efc41627256b254267f6a90fdcdb9710d837f453e022518fc0446592392c1e880c273fca15d563e37f16bc3ee1203b4168b4ae5420304128ba5647f85dcfb

Download Submit
C:\PSR\Sddp17.2\OPER\indextyp.fmt

Filesize
509B

MD5
d929a8316954d6e089e9e83bed3cc19f

SHA1
588a43b1b6ce6df98b22272af2fc7b9d8373a509

SHA256
aaaba8d5eba619829c3d6f4371613b3e4f43e9d0f5222c31fb5648c544502af0

SHA512
417bd451a110f2554a694e5abf73a7456e280680bd71bfad76ec97c350987c42cdddf0ce6877783849f557cf59bd09a4528ed485cefc87f99b551c203a0dfce0

Download Submit
C:\PSR\Sddp17.2\OPER\sddp.exe

Filesize
15.5MB

MD5
4810c1a5dd524aa6f4d6495b1596398f

SHA1
064b7aa223f19cafd932f3970ad8da284fa2e0c5

SHA256
35c0b4cf3694c7f2a0a1587ea08352ed4d674be8b9de171176fcc5ded1953021

SHA512
2cc898c19a4aed7ca4788290710d6028ad52748e84f91a9c2c5ddb1f3262327aaaa227c4b5bd1ae210375340ee905c1b7efa0f1b9afac36fca79238e2aa2d4bf

Download Submit
C:\PSR\Sddp17.2\Oper\SddpShare.exe

Filesize
56KB

MD5
8595289f4cc20e3ee93e9b0effe5c3f2

SHA1
e12ef88671556a1d18148f3642b98d18f15a6598

SHA256
eed1b21070a13d0dcce6d0967aa0c7f7182e5b155e5c9eb78319d766673c8e65

SHA512
7050f53385d7a3d1f5be23fe62a9b73d4727fa23851cc1b370e2fe97dcd7ad641bb3556b41c238283057a04249ce40071be66f62263d54024fbb2b519b61418c

Download Submit
C:\PSR\Sddp17.2\Oper\is-3MDHG.tmp

Filesize
31.6MB

MD5
dcd66ed84bfd0c2c47ab9acb78894c55

SHA1
90484213d7525d97f22b1f2aef6866bac74d3d92

SHA256
82476976997566e447ae69e19ee0a6b7ca420e2042ebe0fbd434fc90235d2ea9

SHA512
6e60af8c8f2d180eed92faf5999e628929dae8da79d657ea0fab30aac0e8573d69fdc2cfc1a1c0ea059802ab712b72d8ada9face50d98e47e094d46e805ba3d2

Download Submit
C:\PSR\Sddp17.2\Oper\is-EOM9I.tmp

Filesize
944KB

MD5
002838eb4de3b152d052f3ec339dc468

SHA1
c11d215476ea94236f91a30f16e27194905e4c1a

SHA256
d108c386064fb3ffc55c2c4729aaef3fbfc4d1ec0f4ec636a2cbb5e4ce038859

SHA512
5395ef5f3af986ec8bf4b256a4d36310dd235fbb64551f392fb36ab54794c4a775c3fc18c55db8ac2540c370fb1d4cc7ff4729d9f9efdcb73ed49a3fd0179eaa

Download Submit
C:\PSR\Sddp17.2\Oper\is-K9J9E.tmp

Filesize
407KB

MD5
ee316128d98ded42e56ad7ece9aec7c1

SHA1
70dbc0971247663e9f8cb7a5ac8f8c1905bc1ccd

SHA256
8afa41605a143f531c8200361e137fc06830e3b3847bfecf207c87243af90942

SHA512
6b10b0a2591e67261db60b8c4110267fe5d17ea34871270b76efd5c887ad9d82b8807b246575105aeeb92084d5ecc7bd91627caaf6e7bd66bd7d014084e8bab5

Download Submit
C:\PSR\Sddp17.2\Oper\is-NKEQC.tmp

Filesize
445KB

MD5
2677f992b02e5752f9086c17b2fcbb5c

SHA1
2bfa718416b9b332953f288611092cba9f8a8e7b

SHA256
f4f81f635e67280bc7e05dfc59d9acea35153aac9ebd4398f5f1bcd26647bcf6

SHA512
70524a8c9d98436981bc49d6c447e2a3ea4783879692935cb71e378fa4c0a6ecb90b0e3b6cfd590ac76e32cd8cabb841401a62ad13ae74198d34fc8e13e7c56f

Download Submit
C:\PSR\Sddp17.2\Oper\is-O31UT.tmp

Filesize
45KB

MD5
8088cdfd98da9db2c9e5ba891a6a6a26

SHA1
80cbf43a5757f3f8fb8bd1df556a5e4002bcfa29

SHA256
ce61b80a3f4d3e8e76b54f0fbcf58f30a1a85d99d2c6f091a75d23985a414423

SHA512
3bfb511c9f92637aa2ff5c321fef09ddd5adbdf071b02907e1453ba666894f125e928a4ce816e3d76a8cac8f7e1c460bf5426383e81b976b7136f53bd6545bba

Download Submit
C:\PSR\Sddp17.2\Oper\rmtshare.exe

Filesize
29KB

MD5
eccf718d4ca90581716b280f35534d54

SHA1
4dc65fdc3a593bae8908be97f6bff80be765a145

SHA256
1dc789e8d6d28340053e6f146529da894ae302b1fe518393e7f56cdd500c91d0

SHA512
34b53709493fe91c932eb4f41687b3b605a778f01ecfd59aea899ce31851a4cd2b99c0aa06f311e531cb6d006ca5daaef5ce388f340a4178180f662287314385

Download Submit
C:\PSR\Sddp17.2\Oper\rmtshare.exe

Filesize
29KB

MD5
eccf718d4ca90581716b280f35534d54

SHA1
4dc65fdc3a593bae8908be97f6bff80be765a145

SHA256
1dc789e8d6d28340053e6f146529da894ae302b1fe518393e7f56cdd500c91d0

SHA512
34b53709493fe91c932eb4f41687b3b605a778f01ecfd59aea899ce31851a4cd2b99c0aa06f311e531cb6d006ca5daaef5ce388f340a4178180f662287314385

Download Submit
C:\PSR\Sddp17.2\Oper\sddp.exe

Filesize
15.5MB

MD5
4810c1a5dd524aa6f4d6495b1596398f

SHA1
064b7aa223f19cafd932f3970ad8da284fa2e0c5

SHA256
35c0b4cf3694c7f2a0a1587ea08352ed4d674be8b9de171176fcc5ded1953021

SHA512
2cc898c19a4aed7ca4788290710d6028ad52748e84f91a9c2c5ddb1f3262327aaaa227c4b5bd1ae210375340ee905c1b7efa0f1b9afac36fca79238e2aa2d4bf

Download Submit
C:\PSR\Sddp17.2\Oper\sddpar.pwd

Filesize
58B

MD5
d86864df19ac2c1bb63e7f9aee905ef5

SHA1
60d148a02247bcc2f3e5fe2b23a84d37013575a9

SHA256
19d38c2a2f4b49c8950d6d284c72ef05e604d90ddfcee822848838ee9e8757b7

SHA512
0816e8e5b0fd013d950bc0306720c69864ca5b81a86bb8ed30522088f80110531018a34a0cf68722a5dc25b6d58194a2e1832145cf458d3822b53df3adc89af3

Download Submit
C:\PSR\Sddp17.2\Oper\tslite\is-66IJ4.tmp

Filesize
170KB

MD5
519f0b49fc06997a288f7fc882fff250

SHA1
bad02e0ec5df78c3794344983a0b2caf74f7e880

SHA256
8fbbcfbe042293a78b499172deebff134693102f76fdd1f08575fd646125d506

SHA512
8d63673ec57e45c50ff8f8fabbec8d5be30d4a1461e13ce86b1f76ec8bc84e70a52e2226d6f02c7535f899379a27892217f98ab7efa9e4a9facfac4126e03254

Download Submit
C:\PSR\Sddp17.2\ihm\Sddpihm.exe

Filesize
27.4MB

MD5
d422b0cb72a8629000d766dce35a9a07

SHA1
618082ecd6bffdefa0db1c2dd7a21a98e249cc11

SHA256
c100642bdd59676317ccd196d28054ea3a9ccc97203b24ac351659572c557b8a

SHA512
a0990c9aece7dd3743a5f28ad4bde19eebf2fd8dcc275e61d5e2f3ea262cb44997e3a26822305e98b5dafd20328712d1a39defe1875434079063ef4e33b53e5c

Download Submit
C:\PSR\Sddp17.2\oper\SddpShare.exe

Filesize
56KB

MD5
8595289f4cc20e3ee93e9b0effe5c3f2

SHA1
e12ef88671556a1d18148f3642b98d18f15a6598

SHA256
eed1b21070a13d0dcce6d0967aa0c7f7182e5b155e5c9eb78319d766673c8e65

SHA512
7050f53385d7a3d1f5be23fe62a9b73d4727fa23851cc1b370e2fe97dcd7ad641bb3556b41c238283057a04249ce40071be66f62263d54024fbb2b519b61418c

Download Submit
C:\PSR\Sddp17.2\oper\rmtshare.exe

Filesize
29KB

MD5
eccf718d4ca90581716b280f35534d54

SHA1
4dc65fdc3a593bae8908be97f6bff80be765a145

SHA256
1dc789e8d6d28340053e6f146529da894ae302b1fe518393e7f56cdd500c91d0

SHA512
34b53709493fe91c932eb4f41687b3b605a778f01ecfd59aea899ce31851a4cd2b99c0aa06f311e531cb6d006ca5daaef5ce388f340a4178180f662287314385

Download Submit
C:\PSR\Sddp17.2\oper\sddpar.bat

Filesize
47B

MD5
bc007c3061bf7a516b5064632b6528a1

SHA1
78c3e8602b184d5ba47003e970d14f796f78a88d

SHA256
0cb4752e186c2ca61bfffc42e181dbce6161af6f3de75146b797aaba8ddd1b52

SHA512
a2e36188a5299893e571503d6d6a586177a89dc8c11b52b2ce8aaf2ce3ad007f1d6024bfb6ab155f9d88d259acc81c3dbb7d1958311fc646af3bbce32cd4554d

Download Submit
C:\PSR\Sddp17.2\oper\sddptask.exe

Filesize
754KB

MD5
b74c89d30d540273d013726c31677f1e

SHA1
6f4f23364ffec6bf6b5e812450eba95ad6c3fdf5

SHA256
421aadf61c18cd237768094d4b168abee31de471cba7456a4d35baedbd0e0422

SHA512
d4a8b4f970e7ebcbb753b63b3b0a0eac9fb21929c29d17a6cffa9806766fe1f09e5a4d5e92ecc33ec06eab5788555638e08339df8ad736b819085b2e7fa7e277

Download Submit
C:\PSR\Sddp17.2\unins000.exe

Filesize
816KB

MD5
1bcdb6a441ee9152b0ed4ab58f429037

SHA1
36f92f4f84a71fd7f11d5ae36f154b137e7b33f6

SHA256
9c8e5cb9d4ce01ee7ea6c8d7482011a6f8a48198f7530e72013d29ec3e036cdd

SHA512
c277551e83d2fd36603b45cc5e5b89c061db24060679041e794a03ba6c7c7713a3a4c1d1fc95cc0527c3cc2ce908547dd6dd8162db0fc47501d1f2cb8071732e

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-J0KDG.tmp\sddp-17.2.3-setup.tmp

Filesize
816KB

MD5
1bcdb6a441ee9152b0ed4ab58f429037

SHA1
36f92f4f84a71fd7f11d5ae36f154b137e7b33f6

SHA256
9c8e5cb9d4ce01ee7ea6c8d7482011a6f8a48198f7530e72013d29ec3e036cdd

SHA512
c277551e83d2fd36603b45cc5e5b89c061db24060679041e794a03ba6c7c7713a3a4c1d1fc95cc0527c3cc2ce908547dd6dd8162db0fc47501d1f2cb8071732e

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-J0KDG.tmp\sddp-17.2.3-setup.tmp

Filesize
816KB

MD5
1bcdb6a441ee9152b0ed4ab58f429037

SHA1
36f92f4f84a71fd7f11d5ae36f154b137e7b33f6

SHA256
9c8e5cb9d4ce01ee7ea6c8d7482011a6f8a48198f7530e72013d29ec3e036cdd

SHA512
c277551e83d2fd36603b45cc5e5b89c061db24060679041e794a03ba6c7c7713a3a4c1d1fc95cc0527c3cc2ce908547dd6dd8162db0fc47501d1f2cb8071732e

Download Submit
C:\Windows\SysWOW64\COMCTL32.OCX

Filesize
603KB

MD5
a436af9c8705735b98077471fa93e9cc

SHA1
4f6ff00cedb6d684d685bc0e66e2135b8d348a93

SHA256
0a5958691d595cf37e4d4e77dee4994ec031558c1e9a94f019655a9319166e08

SHA512
dc3880df28906ef3f3edb55a7473428c546aa21af2e2e3a01b2783d760887b97e0483f95dac71057d45e98d72d338552d0a01d97c3112f361007e43f746e3d1e

Download Submit
C:\Windows\SysWOW64\ComCt332.ocx

Filesize
405KB

MD5
c24f1e7c15c6d47eced9dbd3e9b90d52

SHA1
a62452316aac2c65f5dc551d7ee78c694bc4a1b2

SHA256
550e7cd6b1fb270139acbb6903aa48aed8844251b2233627e4d36240e054fd01

SHA512
9f59577dd7a9232ba49aa0f21e1a427f20e26dfcc22209568d189631bfa2c704d35fd1da653f9556980b78c3eb0848b618c04e7a428fb2c8a8a1f4248e59c5e6

Download Submit
C:\Windows\SysWOW64\Comdlg32.ocx

Filesize
152KB

MD5
ac9bd4138ba1cece3c25f62166b0ba70

SHA1
14b8593f4afc6dbd0f5b97d015bf50599d53a6a9

SHA256
00b5af20504fa3440ef3f9670a49963622d1a3557090e349f465746213761cef

SHA512
272d940a8eaff6820027e51b03adef1db66e5d7d909a39f0cf6532f792c9e22d47f18040247caa41c3d9bab44162a668b00a6845c445e58df7d1952b616c168e

Download Submit
C:\Windows\SysWOW64\MSCOMCT2.OCX

Filesize
643KB

MD5
3973673288371c24056feda47ad3cf96

SHA1
95c7e2bf35f899d0f59a6a89f10b9c0709e84e7d

SHA256
3f9deb6597ef95e5dcf094a56cc48f434e8686497f4628cc553c6e9c7d4c4797

SHA512
ec5df6e8d3828ae7a17c755637804c7e9b07e185bf0dedb281ae8a3b68a14c113a844cd39fc659d78ca73e742ce287e6b19236a870ce23517d78984f9f518ef2

Download Submit
C:\Windows\SysWOW64\MSCOMCTL.OCX

Filesize
1.0MB

MD5
e52859fcb7a827cacfce7963184c7d24

SHA1
35c4ae05d90f610c0520933faaca2a8d39e1b2a1

SHA256
45b6eef5bbf223cf8ff78f5014b68a72f0bc2cceaed030dece0a1abacf88f1f8

SHA512
013e6bf4762b1f90650ee6a1cb275607d1cad9df481362f42606a37f3a6f63de5cd0cdb0e9739df141b58f67ac079cf27be4ffe4937371972dd14eae18c58a94

Download Submit
C:\Windows\SysWOW64\MSFLXGRD.OCX

Filesize
252KB

MD5
20e06689d038e05795863694b5e1dcd7

SHA1
8183998f4cdc7fda02e45fed0b41bd90153ff944

SHA256
7827dbdbd340cee846a61238002e5d438b859c06c80e540f29130ce654cc0918

SHA512
cf47105c8bb236025b386f9c6e7cb96abd3484abf04960cdaee562f05c5c3b45e17699449d4e60333e55b0cb316433e6a0d63b94a9fe36d8e9adc2fc871d343b

Download Submit
C:\Windows\SysWOW64\MSVBVM50.DLL

Filesize
1.3MB

MD5
465025df6b3526d5708331ed3755c1a5

SHA1
75d05db7085de3222951eaa5fee2b74feaf88e17

SHA256
a441817f7497fa1c8b899b0a1f516e47d84582dbcc047f79d71d54c6ba8f5612

SHA512
905d695400bdb5a164a2a686ad380d211e265142a0110977f83e8c6922b51d2fd91cfe3d8db11b76f2c0bd893e9c6c792a1cc1129cd444e2d886252a13535131

Download Submit
C:\Windows\SysWOW64\PICCLP32.OCX

Filesize
97KB

MD5
0befc40200edaec3a9d0fb072013da6d

SHA1
00bfcf0a45a698176a537821888e8d1c0318f8a1

SHA256
1a1ce5aea1cb6667245a08016ec22fff06df2b896d94cb6419134e7212d31a84

SHA512
0164e3844bbbf606273f9317042a8c811ebcbe7c28bdf6b2de0d975203215aefbbef9ef578a20ca9cad06713ea429d403dca242534f5189f50d16871406d2834

Download Submit
C:\Windows\SysWOW64\RICHTX32.OCX

Filesize
213KB

MD5
4231528316b2acb6d40e797f55ccc1fb

SHA1
bae35cc2b2f6b62549793a3c5606cd14760f9411

SHA256
e777685f35a3c84e996d8090173a1df9b97c9be194ba3660d20d62b7cbe9cf12

SHA512
de0167df215ccb54f2939e1830923d3ec233c64069d4965d98bbeb5bc6d51d3c4e168dcea77d6301bd43ef916bfdf6b99bd108b778a764cd66f3ec199a527620

Download Submit
C:\Windows\SysWOW64\SPIN32.OCX

Filesize
51KB

MD5
c4b2459ea9bb1359be7bb4ed5c14d1f6

SHA1
e433d620200cfcb9129fb235d3bdf6c85f67be7d

SHA256
b7bf0aed206b180ea8647d0a1caf69290c9e006acf3afe31036afaab7a99c14a

SHA512
9e4e083d809b03ad924c5ffb024307207765e361d8cd11b8d1e7fcd617b6b5161cb6d8b7f75c5cab1f00d29cbb266906d0933d283e0be553a4657b06dc9979a3

Download Submit
C:\Windows\SysWOW64\TABCTL32.OCX

Filesize
216KB

MD5
79ed276aae03d4f62551871d8094f09a

SHA1
dd22410d74937caee7315c8e9c88cb018f4db8c6

SHA256
341d97cb88c04c4b566c82ec36d4ee1f2bca5e31bf04d240796277ce770b56c9

SHA512
9d3107d0e6d3c14e5e212e44e0fca49522a194095cf1fc57d67d8b707a524c231b0efc0c4229d8e2e6ea7d09e76a01c665ce488a39003ed47d6ee17892d9a896

Download Submit
C:\Windows\SysWOW64\THREED32.OCX

Filesize
196KB

MD5
51c9e8d775c6653acf5d87bdb2ebd33e

SHA1
74eb5f6a08b77c819bc53a0a5054877964d78ade

SHA256
8f317a229950e0393ab10e12554fd2c6be5b9496ffb5302ee6c24f567c944a34

SHA512
dd58b2f89fd7a589a4d33693d247cbb80732c29bd1b0fc0e982f992fa1dedc9833d0b509ce941e2182fb8566e4d90711525d36fa0b215a70b4b4e54fa2035bd0

Download Submit
C:\Windows\SysWOW64\Vcf132.ocx

Filesize
797KB

MD5
a2b042b1324143143b7a98d9c0268be0

SHA1
313b6e187f5e07c41d261be383775066f60bfb2e

SHA256
9fb4039eefce0d67f36f9a006b62ad99af5aec90c63b66d583355714a3af9f73

SHA512
9ceed7dea4bf379ff17366324ed00cb33e93311a052733c890b077e14c0f84ee69d0bf32265557af5413cf900aec9b97917a3d477be863de1ab5bac4ebac7cba

Download Submit
C:\Windows\SysWOW64\glxCtl.ocx

Filesize
732KB

MD5
380c8e00cd27fe19cd9cbf480b61c6bf

SHA1
e20f5af136d1a41be81f1820e60082fc28396314

SHA256
0c8a71954c04295a5682ee034ab0c55db0806b131efa8d8651efb8acd132e6ca

SHA512
a299d89be9ab79c4e1fe543dfa256ac5ef887fd511681bdf3c4d426a1637c0fb7e67193347a7c9eafb1caefa901140c205b1098c190e3b88397b20ad59b528f6

Download Submit
C:\Windows\SysWOW64\msstdfmt.dll

Filesize
117KB

MD5
719e0f4d1114f700f564e9ae47f0e3ee

SHA1
d0505b9cb3123e0f2407ab3271f9f2e33d251410

SHA256
3d5c3074fc645da3b68c859a709a5fbefb7df43f458af01ffda55bfc1456e7fc

SHA512
42c555262a9353ccbfd8dcb656a6396a82e5d7b9bacb37134450e3ad866dee06db292b40fd21cad17dd7bba43ed01acf0ba035e4fbf78d762e196de78bfd7748

Download Submit
C:\Windows\SysWOW64\vbalFlBr6.dll

Filesize
40KB

MD5
9fdb8a72d927888796a4e6a14560cc5f

SHA1
ed49dcfe5fd16c658033373d816e61d8173368a3

SHA256
e692ab331fa5753d619b5fbe68bd5ac44c57ad13d046048414f75cfde4065a19

SHA512
040358819a95ac368e1a67523b409e7e18c1d37444b03a14bf346f5c9183b8743d4f97011c0c5ae177b2bec8aaacc687416b9a6abbc2d692cc2307dd0b56c1c2

Download Submit
C:\Windows\SysWOW64\vcfi32.ocx

Filesize
1.2MB

MD5
df3633518d3ea42b93ade142f64fb558

SHA1
01b2b173592a7772a04ffa645a2514eab6a3ba16

SHA256
0ca2159790333ee8defb90a13651ae252bf101c5544ad4bf3bfad46806ee311b

SHA512
5679c244e809818a5826aa824954a9850330ffb9e6fe0f321d6375a443099e250591d155b9897b1e8fc31f53ded797bcfb715868f500184b92df4b0bf4ab778a

Download Submit
\PSR\Sddp17.2\Ihm\vbalFlBr6.dll

Filesize
40KB

MD5
9fdb8a72d927888796a4e6a14560cc5f

SHA1
ed49dcfe5fd16c658033373d816e61d8173368a3

SHA256
e692ab331fa5753d619b5fbe68bd5ac44c57ad13d046048414f75cfde4065a19

SHA512
040358819a95ac368e1a67523b409e7e18c1d37444b03a14bf346f5c9183b8743d4f97011c0c5ae177b2bec8aaacc687416b9a6abbc2d692cc2307dd0b56c1c2

Download Submit
\Users\Admin\AppData\Local\Temp\is-PST7A.tmp\idp.dll

Filesize
216KB

MD5
b37377d34c8262a90ff95a9a92b65ed8

SHA1
faeef415bd0bc2a08cf9fe1e987007bf28e7218d

SHA256
e5a0ad2e37dde043a0dd4ad7634961ff3f0d70e87d2db49761eb4c1f468bb02f

SHA512
69d8da5b45d9b4b996d32328d3402fa37a3d710564d47c474bf9e15c1e45bc15b2858dbab446e6baec0c099d99007ff1099e9c4e66cfd1597f28c420bb50fdcc

Download Submit
\Windows\SysWOW64\COMCTL32.OCX

Filesize
603KB

MD5
a436af9c8705735b98077471fa93e9cc

SHA1
4f6ff00cedb6d684d685bc0e66e2135b8d348a93

SHA256
0a5958691d595cf37e4d4e77dee4994ec031558c1e9a94f019655a9319166e08

SHA512
dc3880df28906ef3f3edb55a7473428c546aa21af2e2e3a01b2783d760887b97e0483f95dac71057d45e98d72d338552d0a01d97c3112f361007e43f746e3d1e

Download Submit
\Windows\SysWOW64\ComCt332.ocx

Filesize
405KB

MD5
c24f1e7c15c6d47eced9dbd3e9b90d52

SHA1
a62452316aac2c65f5dc551d7ee78c694bc4a1b2

SHA256
550e7cd6b1fb270139acbb6903aa48aed8844251b2233627e4d36240e054fd01

SHA512
9f59577dd7a9232ba49aa0f21e1a427f20e26dfcc22209568d189631bfa2c704d35fd1da653f9556980b78c3eb0848b618c04e7a428fb2c8a8a1f4248e59c5e6

Download Submit
\Windows\SysWOW64\Comdlg32.ocx

Filesize
152KB

MD5
ac9bd4138ba1cece3c25f62166b0ba70

SHA1
14b8593f4afc6dbd0f5b97d015bf50599d53a6a9

SHA256
00b5af20504fa3440ef3f9670a49963622d1a3557090e349f465746213761cef

SHA512
272d940a8eaff6820027e51b03adef1db66e5d7d909a39f0cf6532f792c9e22d47f18040247caa41c3d9bab44162a668b00a6845c445e58df7d1952b616c168e

Download Submit
\Windows\SysWOW64\MSCOMCT2.OCX

Filesize
643KB

MD5
3973673288371c24056feda47ad3cf96

SHA1
95c7e2bf35f899d0f59a6a89f10b9c0709e84e7d

SHA256
3f9deb6597ef95e5dcf094a56cc48f434e8686497f4628cc553c6e9c7d4c4797

SHA512
ec5df6e8d3828ae7a17c755637804c7e9b07e185bf0dedb281ae8a3b68a14c113a844cd39fc659d78ca73e742ce287e6b19236a870ce23517d78984f9f518ef2

Download Submit
\Windows\SysWOW64\MSCOMCTL.OCX

Filesize
1.0MB

MD5
e52859fcb7a827cacfce7963184c7d24

SHA1
35c4ae05d90f610c0520933faaca2a8d39e1b2a1

SHA256
45b6eef5bbf223cf8ff78f5014b68a72f0bc2cceaed030dece0a1abacf88f1f8

SHA512
013e6bf4762b1f90650ee6a1cb275607d1cad9df481362f42606a37f3a6f63de5cd0cdb0e9739df141b58f67ac079cf27be4ffe4937371972dd14eae18c58a94

Download Submit
\Windows\SysWOW64\MSFLXGRD.OCX

Filesize
252KB

MD5
20e06689d038e05795863694b5e1dcd7

SHA1
8183998f4cdc7fda02e45fed0b41bd90153ff944

SHA256
7827dbdbd340cee846a61238002e5d438b859c06c80e540f29130ce654cc0918

SHA512
cf47105c8bb236025b386f9c6e7cb96abd3484abf04960cdaee562f05c5c3b45e17699449d4e60333e55b0cb316433e6a0d63b94a9fe36d8e9adc2fc871d343b

Download Submit
\Windows\SysWOW64\MSVBVM50.DLL

Filesize
1.3MB

MD5
465025df6b3526d5708331ed3755c1a5

SHA1
75d05db7085de3222951eaa5fee2b74feaf88e17

SHA256
a441817f7497fa1c8b899b0a1f516e47d84582dbcc047f79d71d54c6ba8f5612

SHA512
905d695400bdb5a164a2a686ad380d211e265142a0110977f83e8c6922b51d2fd91cfe3d8db11b76f2c0bd893e9c6c792a1cc1129cd444e2d886252a13535131

Download Submit
\Windows\SysWOW64\PICCLP32.OCX

Filesize
97KB

MD5
0befc40200edaec3a9d0fb072013da6d

SHA1
00bfcf0a45a698176a537821888e8d1c0318f8a1

SHA256
1a1ce5aea1cb6667245a08016ec22fff06df2b896d94cb6419134e7212d31a84

SHA512
0164e3844bbbf606273f9317042a8c811ebcbe7c28bdf6b2de0d975203215aefbbef9ef578a20ca9cad06713ea429d403dca242534f5189f50d16871406d2834

Download Submit
\Windows\SysWOW64\RICHTX32.OCX

Filesize
213KB

MD5
4231528316b2acb6d40e797f55ccc1fb

SHA1
bae35cc2b2f6b62549793a3c5606cd14760f9411

SHA256
e777685f35a3c84e996d8090173a1df9b97c9be194ba3660d20d62b7cbe9cf12

SHA512
de0167df215ccb54f2939e1830923d3ec233c64069d4965d98bbeb5bc6d51d3c4e168dcea77d6301bd43ef916bfdf6b99bd108b778a764cd66f3ec199a527620

Download Submit
\Windows\SysWOW64\SPIN32.OCX

Filesize
51KB

MD5
c4b2459ea9bb1359be7bb4ed5c14d1f6

SHA1
e433d620200cfcb9129fb235d3bdf6c85f67be7d

SHA256
b7bf0aed206b180ea8647d0a1caf69290c9e006acf3afe31036afaab7a99c14a

SHA512
9e4e083d809b03ad924c5ffb024307207765e361d8cd11b8d1e7fcd617b6b5161cb6d8b7f75c5cab1f00d29cbb266906d0933d283e0be553a4657b06dc9979a3

Download Submit
\Windows\SysWOW64\TABCTL32.OCX

Filesize
216KB

MD5
79ed276aae03d4f62551871d8094f09a

SHA1
dd22410d74937caee7315c8e9c88cb018f4db8c6

SHA256
341d97cb88c04c4b566c82ec36d4ee1f2bca5e31bf04d240796277ce770b56c9

SHA512
9d3107d0e6d3c14e5e212e44e0fca49522a194095cf1fc57d67d8b707a524c231b0efc0c4229d8e2e6ea7d09e76a01c665ce488a39003ed47d6ee17892d9a896

Download Submit
\Windows\SysWOW64\THREED32.OCX

Filesize
196KB

MD5
51c9e8d775c6653acf5d87bdb2ebd33e

SHA1
74eb5f6a08b77c819bc53a0a5054877964d78ade

SHA256
8f317a229950e0393ab10e12554fd2c6be5b9496ffb5302ee6c24f567c944a34

SHA512
dd58b2f89fd7a589a4d33693d247cbb80732c29bd1b0fc0e982f992fa1dedc9833d0b509ce941e2182fb8566e4d90711525d36fa0b215a70b4b4e54fa2035bd0

Download Submit
\Windows\SysWOW64\Vcf132.ocx

Filesize
797KB

MD5
a2b042b1324143143b7a98d9c0268be0

SHA1
313b6e187f5e07c41d261be383775066f60bfb2e

SHA256
9fb4039eefce0d67f36f9a006b62ad99af5aec90c63b66d583355714a3af9f73

SHA512
9ceed7dea4bf379ff17366324ed00cb33e93311a052733c890b077e14c0f84ee69d0bf32265557af5413cf900aec9b97917a3d477be863de1ab5bac4ebac7cba

Download Submit
\Windows\SysWOW64\glxCtl.ocx

Filesize
732KB

MD5
380c8e00cd27fe19cd9cbf480b61c6bf

SHA1
e20f5af136d1a41be81f1820e60082fc28396314

SHA256
0c8a71954c04295a5682ee034ab0c55db0806b131efa8d8651efb8acd132e6ca

SHA512
a299d89be9ab79c4e1fe543dfa256ac5ef887fd511681bdf3c4d426a1637c0fb7e67193347a7c9eafb1caefa901140c205b1098c190e3b88397b20ad59b528f6

Download Submit
\Windows\SysWOW64\msstdfmt.dll

Filesize
117KB

MD5
719e0f4d1114f700f564e9ae47f0e3ee

SHA1
d0505b9cb3123e0f2407ab3271f9f2e33d251410

SHA256
3d5c3074fc645da3b68c859a709a5fbefb7df43f458af01ffda55bfc1456e7fc

SHA512
42c555262a9353ccbfd8dcb656a6396a82e5d7b9bacb37134450e3ad866dee06db292b40fd21cad17dd7bba43ed01acf0ba035e4fbf78d762e196de78bfd7748

Download Submit
\Windows\SysWOW64\vbalFlBr6.dll

Filesize
40KB

MD5
9fdb8a72d927888796a4e6a14560cc5f

SHA1
ed49dcfe5fd16c658033373d816e61d8173368a3

SHA256
e692ab331fa5753d619b5fbe68bd5ac44c57ad13d046048414f75cfde4065a19

SHA512
040358819a95ac368e1a67523b409e7e18c1d37444b03a14bf346f5c9183b8743d4f97011c0c5ae177b2bec8aaacc687416b9a6abbc2d692cc2307dd0b56c1c2

Download Submit
\Windows\SysWOW64\vcfi32.ocx

Filesize
1.2MB

MD5
df3633518d3ea42b93ade142f64fb558

SHA1
01b2b173592a7772a04ffa645a2514eab6a3ba16

SHA256
0ca2159790333ee8defb90a13651ae252bf101c5544ad4bf3bfad46806ee311b

SHA512
5679c244e809818a5826aa824954a9850330ffb9e6fe0f321d6375a443099e250591d155b9897b1e8fc31f53ded797bcfb715868f500184b92df4b0bf4ab778a

Download Submit
memory/2600-126-0x00000000001E0000-0x00000000001E1000-memory.dmp

Filesize
4KB

Download
memory/2600-140-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2600-2097-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2600-2114-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2600-2599-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2600-137-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2600-138-0x00000000001E0000-0x00000000001E1000-memory.dmp

Filesize
4KB

Download
memory/2600-1654-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2600-2748-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2600-189-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2600-2520-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2600-2127-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2600-240-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2688-121-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2688-2790-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2688-136-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download