e4f8d32bac3d105c321bab150bbc9fc36449352097e0b5cb56c9295e3e1bde73

Resubmissions

10/05/2023, 17:31 UTC

230510-v3qsysbb8w 8

10/05/2023, 17:18 UTC

230510-vvc7wsbb3z 5

10/05/2023, 17:09 UTC

230510-vpfe3aba7s 5

10/05/2023, 16:54 UTC

230510-vev3rshb95 5

10/05/2023, 16:54 UTC

230510-vev3rshb94 5

10/05/2023, 16:54 UTC

230510-vereksah41 6

10/05/2023, 16:54 UTC

230510-vencxshb89 8

10/05/2023, 16:41 UTC

230510-t7bzxsag8s 8

Analysis

max time kernel
171s
max time network
169s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
10/05/2023, 16:54 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

sddp-17.2.4rc1-setupSIN.exe
Size

131.9MB
MD5

ae825adff57fc714ef89fa255b459a32
SHA1

981c827c50de885ab97fdfbc528640e572c023f6
SHA256

e4f8d32bac3d105c321bab150bbc9fc36449352097e0b5cb56c9295e3e1bde73
SHA512

7c71b771c5c6d8e3c711c998a704c3da62de209a43d694ca8f5ba44df9f66fd7d5c297d99df25183e2251edff39b7530c36aee63300ecf29d1b2ccc4818cd061
SSDEEP

3145728:C9SxS6xnkcgK35u5ap1hActag+rtJsVyu8gQFPoUWL9:C9VbBqhAcn2sVHw2

Score

5^/10

discovery

Malware Config

Signatures

Drops file in System32 directory 40 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\ASYCFILT.DLL	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\Msvcirt.dll	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\MFC40.DLL	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\glut32.dll	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-08G7I.tmp	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\ODBC32.DLL	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\sx32w.dll	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\VB5STKIT.DLL	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-U6015.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-9FOLG.tmp	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\VCFIWZ32.DLL	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-P2F6B.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-CE72S.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-EL8B4.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-2JICJ.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-FJV7O.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-Q5JF2.tmp	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\MFC42.DLL	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\Msvcrt40.dll	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-GD99I.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-K5MTS.tmp	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\msstdfmt.dll	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\MSVBVM50.DLL	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\vbalFlBr6.dll	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-LKDTO.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-F9AKE.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-HV6S0.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-PNLJ8.tmp	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\COMCAT.DLL	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\MSVBVM60.DLL	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\OLEAUT32.DLL	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\OLEPRO32.DLL	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-1221Q.tmp	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\CTL3D32.DLL	sddp-17.2.4rc1-setupSIN.tmp
File opened for modification	C:\Windows\SysWOW64\MSVCRT.DLL	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-HFI2F.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-JJAM6.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-Q5BG4.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-P0NBV.tmp	sddp-17.2.4rc1-setupSIN.tmp
File created	C:\Windows\SysWOW64\is-21KB0.tmp	sddp-17.2.4rc1-setupSIN.tmp

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Executes dropped EXE 3 IoCs

pid	Process
2532	sddp-17.2.4rc1-setupSIN.tmp
4120	Sddpihm.exe
1012	sddp.exe

Loads dropped DLL 24 IoCs

pid	Process
2532	sddp-17.2.4rc1-setupSIN.tmp
4868	regsvr32.exe
2488	regsvr32.exe
4952	regsvr32.exe
3148	regsvr32.exe
2964	regsvr32.exe
4728	regsvr32.exe
4884	regsvr32.exe
2584	regsvr32.exe
4372	regsvr32.exe
5112	regsvr32.exe
3932	regsvr32.exe
4412	regsvr32.exe
4416	regsvr32.exe
4296	regsvr32.exe
4304	regsvr32.exe
4244	regsvr32.exe
2700	regsvr32.exe
4024	regsvr32.exe
4120	Sddpihm.exe
4120	Sddpihm.exe
4120	Sddpihm.exe
4120	Sddpihm.exe
4120	Sddpihm.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies Internet Explorer settings 1 TTPs 64 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{53749718-F78D-4A67-8703-8AE050075170}\AlternateCLSID = "{25A3C2C9-8F6E-4140-BEF3-535D4B9709D8}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{612A8624-0FB3-11CE-8747-524153480004}\AlternateCLSID = "{29D5EC7E-6245-4DC9-9E53-A9A945AD4ABB}"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{97992019-74A6-46C7-9CA3-7F8C0D39940B}\Compatibility Flags = "1024"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{603C7E80-87C2-11D1-8BE3-0000F8754DA1}\Compatibility Flags = "1024"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{FE38753A-44A3-11D1-B5B7-0000C09000C4}\Compatibility Flags = "1024"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F91CAF91-225B-43A7-BB9E-472F991FC402}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{7DC6F291-BF55-4E50-B619-EF672D9DCC58}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{58DA8D8F-9D6A-101B-AFC0-4210102A8DA7}\AlternateCLSID = "{25A3C2C9-8F6E-4140-BEF3-535D4B9709D8}"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{612A8624-0FB3-11CE-8747-524153480004}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\AlternateCLSID = "{CCDB0DF2-FD1A-4856-80BC-32929D8359B7}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{1EFB6596-857C-11D1-B16A-00C0F0283628}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{0713E8D2-850A-101B-AFC0-4210102A8DA7}\AlternateCLSID = "{612685EF-57C8-469F-88AB-E4E0B595C5AB}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{6B7E638F-850A-101B-AFC0-4210102A8DA7}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F91CAF91-225B-43A7-BB9E-472F991FC402}\Compatibility Flags = "1024"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{9181DC5F-E07D-418A-ACA6-8EEA1ECB8E9E}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{97992019-74A6-46C7-9CA3-7F8C0D39940B}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{232E456A-87C3-11D1-8BE3-0000F8754DA1}\Compatibility Flags = "1024"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{627C8B79-918A-4C5C-9E19-20F66BF30B86}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{27395F85-0C0C-101B-A3C9-08002B2F49FB}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}\Compatibility Flags = "1024"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{9ED94440-E5E8-101B-B9B5-444553540000}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{0713E8A2-850A-101B-AFC0-4210102A8DA7}\AlternateCLSID = "{A289A6BA-6B23-4969-8981-9B2C28290D0F}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{79C784C5-8F0D-4A55-ADB3-590CCFC8EB0D}\AlternateCLSID = "{80B51087-CE4C-4FAE-8401-B6B3809DD234}"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\AlternateCLSID = "{8F0F480A-4366-4737-8265-2AD6FDAC8C31}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{35053A22-8589-11D1-B16A-00C0F0283628}\AlternateCLSID = "{A0E7BF67-8D30-4620-8825-7111714C7CAB}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{FE38753A-44A3-11D1-B5B7-0000C09000C4}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{627C8B79-918A-4C5C-9E19-20F66BF30B86}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{1EFB6596-857C-11D1-B16A-00C0F0283628}\AlternateCLSID = "{9A948063-66C3-4F63-AB46-582EDAA35047}"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{3B7C8860-D78F-101B-B9B5-04021C009402}\Compatibility Flags = "1024"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{79C784C5-8F0D-4A55-ADB3-590CCFC8EB0D}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{79C784C5-8F0D-4A55-ADB3-590CCFC8EB0D}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{44E266A2-CD46-47A0-9ED5-EEEC5F0C2A6E}\AlternateCLSID = "{703EAF2B-FD9F-41BC-BB81-6C6757A46E5E}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{603C7E80-87C2-11D1-8BE3-0000F8754DA1}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{DD9DA666-8594-11D1-B16A-00C0F0283628}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{8E3867A3-8586-11D1-B16A-00C0F0283628}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{9181DC5F-E07D-418A-ACA6-8EEA1ECB8E9E}\AlternateCLSID = "{95F0B3BE-E8AC-4995-9DCA-419849E06410}"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{6262D3A0-531B-11CF-91F6-C2863C385E30}\Compatibility Flags = "1024"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{FE38753A-44A3-11D1-B5B7-0000C09000C4}\AlternateCLSID = "{CFA7636D-CAA1-4F18-868F-8720624C8B86}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{2C247F23-8591-11D1-B16A-00C0F0283628}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{DD9DA666-8594-11D1-B16A-00C0F0283628}\AlternateCLSID = "{87DACC48-F1C5-4AF3-84BA-A2A72C2AB959}"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F08DF954-8592-11D1-B16A-00C0F0283628}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F08DF954-8592-11D1-B16A-00C0F0283628}\AlternateCLSID = "{0B314611-2C19-4AB4-8513-A6EEA569D3C4}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}\AlternateCLSID = "{2B577565-36F7-4351-B2E7-DAFC75E9D72A}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{44E266A2-CD46-47A0-9ED5-EEEC5F0C2A6E}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\Compatibility Flags = "1024"	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{24B224E0-9545-4A2F-ABD5-86AA8A849385}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{66833FE6-8583-11D1-B16A-00C0F0283628}\AlternateCLSID = "{8B2ADD10-33B7-4506-9569-0A1E1DBBEBAE}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}\AlternateCLSID = "{80B51087-CE4C-4FAE-8401-B6B3809DD234}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{232E456A-87C3-11D1-8BE3-0000F8754DA1}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{BDC217C5-ED16-11CD-956C-0000C04E4C0A}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{6B7E638F-850A-101B-AFC0-4210102A8DA7}\AlternateCLSID = "{962F28D6-107D-47A5-9515-2864454CFDD1}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{1906F94F-8256-480A-8CDF-60821592CB4B}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{1906F94F-8256-480A-8CDF-60821592CB4B}\AlternateCLSID = "{3D8152C1-0CFD-4968-9684-794046886E31}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{996BF5E0-8044-4650-ADEB-0B013914E99C}\AlternateCLSID = "{CCDB0DF2-FD1A-4856-80BC-32929D8359B7}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{8E3867A3-8586-11D1-B16A-00C0F0283628}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{373FF7F0-EB8B-11CD-8820-08002B2F4F5A}	regsvr32.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{B09DE715-87C1-11D1-8BE3-0000F8754DA1}\Compatibility Flags = "1024"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{2C247F23-8591-11D1-B16A-00C0F0283628}\AlternateCLSID = "{556C2772-F1AD-4DE1-8456-BD6E8F66113B}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{996BF5E0-8044-4650-ADEB-0B013914E99C}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{979127D3-7D01-4FDE-AF65-A698091468AF}\AlternateCLSID = "{CCDB0DF2-FD1A-4856-80BC-32929D8359B7}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{24B224E0-9545-4A2F-ABD5-86AA8A849385}	regsvr32.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{8B2ADD10-33B7-4506-9569-0A1E1DBBEBAE}\Implemented Categories\{7DD95802-9882-11CF-9FA9-00AA006C42C4}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{831FDD16-0C5C-11D2-A9FC-0000F8754DA1}\2.1\FLAGS\ = "2"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0713E8AE-850A-101B-AFC0-4210102A8DA7}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{86CF1D34-0C5F-11D2-A9FC-0000F8754DA1}\2.0\FLAGS	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\MSComctlLib.TreeCtrl.2\CLSID\ = "{C74190B6-8589-11D1-B16A-00C0F0283628}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{35053A20-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3B7C8862-D78F-101B-B9B5-04021C009402}\TypeLib\ = "{3B7C8863-D78F-101B-B9B5-04021C009402}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{703EAF2B-FD9F-41BC-BB81-6C6757A46E5E}\ToolboxBitmap32\ = "C:\\Windows\\SysWow64\\COMCTL32.OCX, 10"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{0713E8A3-850A-101B-AFC0-4210102A8DA7}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3B7C8860-D78F-101B-B9B5-04021C009402}\MiscStatus\1	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{34A5E089-7527-11D2-9718-000000000000}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{962F28D6-107D-47A5-9515-2864454CFDD1}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9C2CAD80-3424-11CF-B670-00AA004CD6D8}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{21645F62-90F0-11CE-86B3-444553540000}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A71FB706-A732-11CE-840F-00AA0042CB33}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{35053A22-8589-11D1-B16A-00C0F0283628}\Implemented Categories	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib\Version = "2.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\TypeLib\Version = "1.2"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{177BF2A2-7350-11CE-840F-00AA0042CB33}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{ED117630-4090-11CF-8981-00AA00688B10}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0BA686AB-F7D3-101A-993E-0000C0EF6F5E}\TypeLib\Version = "1.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E26C7700-756C-11CE-840F-00AA0042CB33}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{62375364-A17D-11CE-840F-00AA0042CB33}\TypeLib\ = "{5A721583-5AF0-11CE-8384-0020AF2337F2}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6B7E638F-850A-101B-AFC0-4210102A8DA7}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{20DD1B9E-87C4-11D1-8BE3-0000F8754DA1}\MiscStatus\1	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C74190B4-8589-11D1-B16A-00C0F0283628}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{30E3AE14-6AEB-11CE-A39E-00608CCA09C2}\ = "Database Property Page"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{9BA79C60-7403-11CE-840F-00AA0042CB33}\ProxyStubClsid32\ = "{00020420-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{27D2E7C5-D6D4-11D2-A3C0-005345000000}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{95F0B3BE-E8AC-4995-9DCA-419849E06410}\MiscStatus\1	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0BA686C3-F7D3-101A-993E-0000C0EF6F5E}\Control	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{859321D0-3FD1-11CF-8981-00AA00688B10}\ = "IOLEObjects"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0BA686AF-F7D3-101A-993E-0000C0EF6F5E}\InprocServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{38911D96-E448-11D0-84A3-00DD01104159}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{53749718-F78D-4A67-8703-8AE050075170}\ToolboxBitmap32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{9181DC5F-E07D-418A-ACA6-8EEA1ECB8E9E}\VersionIndependentProgID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628}\ToolboxBitmap32\ = "C:\\Windows\\SysWow64\\MSCOMCTL.OCX, 10"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{74DD2713-BA98-4D10-A16E-270BBEB9B555}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C4D651F2-7697-11D1-A1E9-00A0C90F2731}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0BA686B9-F7D3-101A-993E-0000C0EF6F5E}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{62375362-A17D-11CE-840F-00AA0042CB33}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3080E742-813F-11CE-BECC-00AA0042CB33}\ = "IVcMarker"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{15D837F5-9E3B-425F-A5ED-9E3A6608345D}\TypeLib\ = "{E4A05A59-6B1E-48AB-94A1-5CD4AD88CF6D}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{38911D92-E448-11D0-84A3-00DD01104159}\ProgID\ = "ComCtl3.CoolBar"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{E44F7BD4-3AB1-4D55-9190-FC53343AD2D2}\Implemented Categories\{7DD95801-9882-11CF-9FA9-00AA006C42C4}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{962F28D6-107D-47A5-9515-2864454CFDD1}\Version	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{66833FEB-8583-11D1-B16A-00C0F0283628}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{E9A5593C-CAB0-11D1-8C0B-0000F8754DA1}\TypeLib\Version = "1.2"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{58DA8D8A-9D6A-101B-AFC0-4210102A8DA7}\Implemented Categories\{0DE86A52-2BAA-11CF-A229-00AA003D7352}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{A289A6BA-6B23-4969-8981-9B2C28290D0F}\InprocServer32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{BDD1F04B-858B-11D1-B16A-00C0F0283628}\ToolboxBitmap32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{34A5E086-7527-11D2-9718-000000000000}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{27395F85-0C0C-101B-A3C9-08002B2F49FB}\InprocServer32\ = "C:\\Windows\\SysWow64\\PICCLP32.OCX"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C82141A0-7571-11CE-840F-00AA0042CB33}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{34A5E0E1-7527-11D2-9718-000000000000}\VERSION\ = "1.1"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2F6DD6A4-95E5-11CE-86B3-444553540000}\TypeLib\ = "{5A721583-5AF0-11CE-8384-0020AF2337F2}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{25A3C2C9-8F6E-4140-BEF3-535D4B9709D8}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{E6E17E84-DF38-11CF-8E74-00A0C90F26F8}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{F08DF952-8592-11D1-B16A-00C0F0283628}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2CE46480-1A08-11CF-AD63-00AA00614F3E}\TypeLib\Version = "5.0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{27395F85-0C0C-101B-A3C9-08002B2F49FB}\Implemented Categories\{0DE86A53-2BAA-11CF-A229-00AA003D7352}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{95C52B60-83B1-11CE-BECC-00AA0042CB33}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2334D2B3-713E-11CF-8AE5-00AA00C00905}\TypeLib\Version = "1.5"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{6262D3A0-531B-11CF-91F6-C2863C385E30}\Control	regsvr32.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2532	sddp-17.2.4rc1-setupSIN.tmp
2532	sddp-17.2.4rc1-setupSIN.tmp
2532	sddp-17.2.4rc1-setupSIN.tmp
2532	sddp-17.2.4rc1-setupSIN.tmp
2532	sddp-17.2.4rc1-setupSIN.tmp
2532	sddp-17.2.4rc1-setupSIN.tmp
2532	sddp-17.2.4rc1-setupSIN.tmp
2532	sddp-17.2.4rc1-setupSIN.tmp
2532	sddp-17.2.4rc1-setupSIN.tmp
2532	sddp-17.2.4rc1-setupSIN.tmp

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
2532	sddp-17.2.4rc1-setupSIN.tmp

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
4120	Sddpihm.exe
4120	Sddpihm.exe
4120	Sddpihm.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2332 wrote to memory of 2532	2332	sddp-17.2.4rc1-setupSIN.exe	66
PID 2332 wrote to memory of 2532	2332	sddp-17.2.4rc1-setupSIN.exe	66
PID 2332 wrote to memory of 2532	2332	sddp-17.2.4rc1-setupSIN.exe	66
PID 2532 wrote to memory of 4868	2532	sddp-17.2.4rc1-setupSIN.tmp	67
PID 2532 wrote to memory of 4868	2532	sddp-17.2.4rc1-setupSIN.tmp	67
PID 2532 wrote to memory of 4868	2532	sddp-17.2.4rc1-setupSIN.tmp	67
PID 2532 wrote to memory of 2556	2532	sddp-17.2.4rc1-setupSIN.tmp	68
PID 2532 wrote to memory of 2556	2532	sddp-17.2.4rc1-setupSIN.tmp	68
PID 2532 wrote to memory of 2556	2532	sddp-17.2.4rc1-setupSIN.tmp	68
PID 2532 wrote to memory of 2488	2532	sddp-17.2.4rc1-setupSIN.tmp	69
PID 2532 wrote to memory of 2488	2532	sddp-17.2.4rc1-setupSIN.tmp	69
PID 2532 wrote to memory of 2488	2532	sddp-17.2.4rc1-setupSIN.tmp	69
PID 2532 wrote to memory of 4952	2532	sddp-17.2.4rc1-setupSIN.tmp	70
PID 2532 wrote to memory of 4952	2532	sddp-17.2.4rc1-setupSIN.tmp	70
PID 2532 wrote to memory of 4952	2532	sddp-17.2.4rc1-setupSIN.tmp	70
PID 2532 wrote to memory of 3148	2532	sddp-17.2.4rc1-setupSIN.tmp	72
PID 2532 wrote to memory of 3148	2532	sddp-17.2.4rc1-setupSIN.tmp	72
PID 2532 wrote to memory of 3148	2532	sddp-17.2.4rc1-setupSIN.tmp	72
PID 2532 wrote to memory of 3852	2532	sddp-17.2.4rc1-setupSIN.tmp	73
PID 2532 wrote to memory of 3852	2532	sddp-17.2.4rc1-setupSIN.tmp	73
PID 2532 wrote to memory of 3852	2532	sddp-17.2.4rc1-setupSIN.tmp	73
PID 2532 wrote to memory of 2456	2532	sddp-17.2.4rc1-setupSIN.tmp	74
PID 2532 wrote to memory of 2456	2532	sddp-17.2.4rc1-setupSIN.tmp	74
PID 2532 wrote to memory of 2456	2532	sddp-17.2.4rc1-setupSIN.tmp	74
PID 2532 wrote to memory of 2964	2532	sddp-17.2.4rc1-setupSIN.tmp	75
PID 2532 wrote to memory of 2964	2532	sddp-17.2.4rc1-setupSIN.tmp	75
PID 2532 wrote to memory of 2964	2532	sddp-17.2.4rc1-setupSIN.tmp	75
PID 2532 wrote to memory of 4728	2532	sddp-17.2.4rc1-setupSIN.tmp	76
PID 2532 wrote to memory of 4728	2532	sddp-17.2.4rc1-setupSIN.tmp	76
PID 2532 wrote to memory of 4728	2532	sddp-17.2.4rc1-setupSIN.tmp	76
PID 2532 wrote to memory of 4884	2532	sddp-17.2.4rc1-setupSIN.tmp	77
PID 2532 wrote to memory of 4884	2532	sddp-17.2.4rc1-setupSIN.tmp	77
PID 2532 wrote to memory of 4884	2532	sddp-17.2.4rc1-setupSIN.tmp	77
PID 2532 wrote to memory of 2584	2532	sddp-17.2.4rc1-setupSIN.tmp	78
PID 2532 wrote to memory of 2584	2532	sddp-17.2.4rc1-setupSIN.tmp	78
PID 2532 wrote to memory of 2584	2532	sddp-17.2.4rc1-setupSIN.tmp	78
PID 2532 wrote to memory of 4372	2532	sddp-17.2.4rc1-setupSIN.tmp	79
PID 2532 wrote to memory of 4372	2532	sddp-17.2.4rc1-setupSIN.tmp	79
PID 2532 wrote to memory of 4372	2532	sddp-17.2.4rc1-setupSIN.tmp	79
PID 2532 wrote to memory of 3140	2532	sddp-17.2.4rc1-setupSIN.tmp	80
PID 2532 wrote to memory of 3140	2532	sddp-17.2.4rc1-setupSIN.tmp	80
PID 2532 wrote to memory of 3140	2532	sddp-17.2.4rc1-setupSIN.tmp	80
PID 2532 wrote to memory of 3944	2532	sddp-17.2.4rc1-setupSIN.tmp	81
PID 2532 wrote to memory of 3944	2532	sddp-17.2.4rc1-setupSIN.tmp	81
PID 2532 wrote to memory of 3944	2532	sddp-17.2.4rc1-setupSIN.tmp	81
PID 2532 wrote to memory of 3388	2532	sddp-17.2.4rc1-setupSIN.tmp	82
PID 2532 wrote to memory of 3388	2532	sddp-17.2.4rc1-setupSIN.tmp	82
PID 2532 wrote to memory of 3388	2532	sddp-17.2.4rc1-setupSIN.tmp	82
PID 2532 wrote to memory of 5112	2532	sddp-17.2.4rc1-setupSIN.tmp	83
PID 2532 wrote to memory of 5112	2532	sddp-17.2.4rc1-setupSIN.tmp	83
PID 2532 wrote to memory of 5112	2532	sddp-17.2.4rc1-setupSIN.tmp	83
PID 2532 wrote to memory of 3932	2532	sddp-17.2.4rc1-setupSIN.tmp	84
PID 2532 wrote to memory of 3932	2532	sddp-17.2.4rc1-setupSIN.tmp	84
PID 2532 wrote to memory of 3932	2532	sddp-17.2.4rc1-setupSIN.tmp	84
PID 2532 wrote to memory of 4412	2532	sddp-17.2.4rc1-setupSIN.tmp	85
PID 2532 wrote to memory of 4412	2532	sddp-17.2.4rc1-setupSIN.tmp	85
PID 2532 wrote to memory of 4412	2532	sddp-17.2.4rc1-setupSIN.tmp	85
PID 2532 wrote to memory of 4416	2532	sddp-17.2.4rc1-setupSIN.tmp	86
PID 2532 wrote to memory of 4416	2532	sddp-17.2.4rc1-setupSIN.tmp	86
PID 2532 wrote to memory of 4416	2532	sddp-17.2.4rc1-setupSIN.tmp	86
PID 2532 wrote to memory of 4296	2532	sddp-17.2.4rc1-setupSIN.tmp	87
PID 2532 wrote to memory of 4296	2532	sddp-17.2.4rc1-setupSIN.tmp	87
PID 2532 wrote to memory of 4296	2532	sddp-17.2.4rc1-setupSIN.tmp	87
PID 2532 wrote to memory of 4304	2532	sddp-17.2.4rc1-setupSIN.tmp	88

C:\Users\Admin\AppData\Local\Temp\sddp-17.2.4rc1-setupSIN.exe
"C:\Users\Admin\AppData\Local\Temp\sddp-17.2.4rc1-setupSIN.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:2332
- C:\Users\Admin\AppData\Local\Temp\is-RKTBA.tmp\sddp-17.2.4rc1-setupSIN.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-RKTBA.tmp\sddp-17.2.4rc1-setupSIN.tmp" /SL5="$8007A,137908507,151552,C:\Users\Admin\AppData\Local\Temp\sddp-17.2.4rc1-setupSIN.exe"
  2⤵
  - Drops file in System32 directory
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2532
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\PSR\Sddp17.2\Ihm\vbalFlBr6.dll"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:4868
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\COMCAT.DLL"
    3⤵
    PID:2556
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\ComCt332.ocx"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:2488
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\COMCTL32.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    - Modifies registry class
    PID:4952
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\Comdlg32.ocx"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    PID:3148
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MFC40.DLL"
    3⤵
    PID:3852
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MFC42.DLL"
    3⤵
    PID:2456
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSCOMCT2.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    - Modifies registry class
    PID:2964
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSCOMCTL.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    - Modifies registry class
    PID:4728
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSFLXGRD.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    - Modifies registry class
    PID:4884
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\msstdfmt.dll"
    3⤵
    - Loads dropped DLL
    PID:2584
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSVBVM50.DLL"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:4372
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\MSVBVM60.DLL"
    3⤵
    - Modifies registry class
    PID:3140
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\OLEAUT32.DLL"
    3⤵
    - Modifies registry class
    PID:3944
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\OLEPRO32.DLL"
    3⤵
    PID:3388
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\PICCLP32.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    - Modifies registry class
    PID:5112
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\RICHTX32.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    - Modifies registry class
    PID:3932
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\SPIN32.OCX"
    3⤵
    - Loads dropped DLL
    PID:4412
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\TABCTL32.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies Internet Explorer settings
    PID:4416
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\THREED32.OCX"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:4296
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\vbalFlBr6.dll"
    3⤵
    - Loads dropped DLL
    PID:4304
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\Vcf132.ocx"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:4244
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\vcfi32.ocx"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:2700
- - C:\Windows\SysWOW64\regsvr32.exe
    "C:\Windows\system32\regsvr32.exe" /s "C:\Windows\system32\glxCtl.ocx"
    3⤵
    - Loads dropped DLL
    - Modifies registry class
    PID:4024
- - C:\PSR\Sddp17.2\ihm\Sddpihm.exe
    "C:\PSR\Sddp17.2\ihm\Sddpihm.exe" -PAR
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious use of SetWindowsHookEx
    PID:4120
  - - C:\PSR\Sddp17.2\OPER\sddp.exe
      C:\PSR\Sddp17.2\OPER\sddp.exe ver
      4⤵
      Executes dropped EXE
      PID:1012

Network

DNS

62.13.109.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

62.13.109.52.in-addr.arpa

IN PTR

Response

40.74.98.194:443

322 B
7
178.79.208.1:80

322 B
7

8.8.8.8:53

62.13.109.52.in-addr.arpa

dns

71 B
145 B
1
1

DNS Request

62.13.109.52.in-addr.arpa

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\PSR\Sddp17.2\Example\12_stages\Case20\is-GLLLL.tmp

Filesize
116B

MD5
6854830662a8c0c0b793c36ea35b8c31

SHA1
d6cd41aa4c640c3e4f8520e3144bea7d3eae8d65

SHA256
a9559b2ad7f09bdd0ae2f5f785201b6b21754a02244fad96064aec88e272b373

SHA512
250c42433550785d03c2390330fa7d9b383735e05b64d2d15cb4aed6d951474cc3d0be5164ead9588ac0c823dfd03561cd00aa812980d7c161192ef682d2cd55

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case21\is-8H2HE.tmp

Filesize
19KB

MD5
f5236b6c3fe65b1f53876993f9a9122b

SHA1
4e4a354f35743d51ae2d504ca9cca28b2da64eec

SHA256
315cc7332defa0cb2fae6b6180e7bc14b8dd56ee0ab91dc6afeb8966853d08df

SHA512
2495d62b7a2a83e19d479b8b8a2ad30b043e1f42c294f85f4eb7e3da66c5938b9d36e6479562a8a2680ee70465b2f5430e5ed5060385fb5cbb98f3ffaabb4559

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case21\is-BA9UB.tmp

Filesize
10B

MD5
4439ceebd9e890cec0c16b247ccfb8f0

SHA1
38f0102a8b58c3a8a08598fac0f921bc0a922b76

SHA256
44ba9d7ccdeaf8cb4638b1ea2dc1ca9dcadd93c9945d42882a2b1ad5319baa34

SHA512
4e0a5fa1de3f89fb89af37954073061e7ce499299ecc2de290b6bd2ea64a9ec4ff03d169e631f87084532acd68d9eec6dfc4285c706179441898e0fa92e60127

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case21\is-HTEQJ.tmp

Filesize
62B

MD5
1233b19c5b6c0a69968713e16aaa1ff2

SHA1
de2ae289763da83937debdd2bec086018237374a

SHA256
533c732ac6cebf2bca8a6dfb6bb1a0d0fa0f663928fd4fc5562970aeb88ba14d

SHA512
ee7451ab681f1599959a51921ee797590467363c531f6a4519680986bf183c8d6b932e0af32e1b9eaf7f3081b9f218b471ec657769ed5592f7516c4b78ff734a

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case21\is-RCLRJ.tmp

Filesize
37B

MD5
b9d102329526329a16dcf2133d228c85

SHA1
b08289f8467ed9585b69b403376325aad57f50bc

SHA256
282319b963d4e02362ecdca753a91dff7c7983ff6f967c3e55a0e876837de3a3

SHA512
3e33f51765398e63d1f4621d316e91d70d6103df5cbac5bdca0a9ffd2813ccf3ffe7b20ada44eaff0a00848cdd5019e060753fa8c4cfe3a555176c9ec3996d99

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case22\is-3J6R7.tmp

Filesize
166B

MD5
93a020965ab0b53f4e02281806e7fa00

SHA1
0fbeeb04e245b1d027c8182d961f8ad78d35cfd7

SHA256
0f859d6ce4a1c60bbd94bdf86ff3edd9d6102cb07165a4c011fdd2d126e41ee3

SHA512
97f85f15765136ad481c33131517c390f42c7021067bbe2eb720b807b12a7c5781d03d841644b99750997f36207cc15daabe32faa343ed1af7977403f609ac5b

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case22\is-7G25S.tmp

Filesize
856B

MD5
8174c8ac832365a0a8e8630f9fc94c82

SHA1
adc56855679759739098e5340dfd9d552583c136

SHA256
4a6f2e19a324f24a1fdcd21fb6b3f16aef7b6d3773344f13b29db97013e8d334

SHA512
e3162e1c1c366bb3bb35942307e2769eb0c3acb80a0405485f1cd57b41d4b147b6098683ab29cf747a605f3eeaa34cb4b350ab257e1111530d71217febb79ea0

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case22\is-AU8H4.tmp

Filesize
240B

MD5
66d6e06c3aec1496661ec2f40fb51699

SHA1
c555379077398bcfe02a850c9731076057144c32

SHA256
4eb51079d43c19499760321621aca2c6eec5b1e85b27e28409e123eb56eb77a5

SHA512
c9414017c080fa22f4197fa902243887f24e1c91a799c1440c275a38d584504b16d91dbedf39b5979b095d64b447f1baa7a0178cfcbfef6294f75f4e0a49f2da

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case22\is-H1CE1.tmp

Filesize
62B

MD5
848c617e93151e03e73f8b155d5c6e53

SHA1
6eb3f7c174eb6cfe13eea2148971cbec02730db1

SHA256
56d8a8347d11af15ccdf769afaf7886bd2eda20eee05f8319e66c35a7b7e8cb8

SHA512
8d158e90a45afff70a6e155d4b106247ad8403d2635e856fb011a35f94544158311868d8e6a0040c5d8187f6815aea2db8230167467bf8c77845fb43b488e79a

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case23\is-3KDOB.tmp

Filesize
2KB

MD5
72351831840d11e69fc2a6390bb5beb1

SHA1
0d49c85df0f11d82a450fc6ae2b9666193de8e0c

SHA256
c45f12880386b2f8157a781d704a64da3af7e3bf83b44984adc88463971fc81c

SHA512
c45ded4dea4f77e8e0bb732a38a2f051a7bcfb86a7dcf60552926cc1d6f4ba02fd65e1410a956fa5dc899567f388ba305d904b7a307cf7b20fc97cf6945b836b

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case23\is-6LPF9.tmp

Filesize
116B

MD5
daa1cabdaac6bbd26ad15aabc0877504

SHA1
60d461ef5ed3e5e62e0b0967717531680b69bef6

SHA256
0c369c7b9ba09ea82a46451febfd6d38e6a48c919c3d86e7fdaf02cda1e8556f

SHA512
f99031094e85495544f7a89cbaef30f93f854498f459ec527cd0b7eb15264a4d024420de00e1a9c7dfdc8bebdc4b5086864468195733e95dfe755964a20c9ca6

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case23\is-JAB7B.tmp

Filesize
310B

MD5
b1b074a394948229b79045ee9208ccbf

SHA1
2d0648ca1201ca018d3128a299bc4ec2101277c0

SHA256
2f9b9c50fe743fe1848e4b99263fbabad671cb5c4ab6fbc5ffd85d00bc0b2a0b

SHA512
03cb46cec13dbb44f09dac097198cd6143216b4c5e1b449664b2b930ea86d719ed76adde7a1e025dd59e6a3852cc9738ad8072641dc46f67396aec9538da4154

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case23\is-RKBPF.tmp

Filesize
851B

MD5
13b81f7c2dccaf64827d607c5a85640d

SHA1
5aafbca54482a548ad1d9105f0a7971d3a9d4543

SHA256
151de630d8bfe934208e7930af2e1dfe3671398ba2f44ec06805438e3e12bd72

SHA512
52ccd80f981c28b5b5c2625c5192a109ca7b5157cfd995eb23cf2c1c685dea7e6f07eaffc6adc20478c87d9cdde3164f97d2f5b59b2c48a62189811731838b6d

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case24\is-08D62.tmp

Filesize
240B

MD5
78f69673fc31f0b4d986f4107fbef9a8

SHA1
4ec883329d78a7ed9bc228b4702a9c8a9966ad89

SHA256
c949a45951ba30395037f64e157dcc25748b0c568620671732c1153e71623a7e

SHA512
8105e8f49e3a4226c4e0cc5d6f13414840a3379f131c2d2f11c90b6e887a589daf9d3d77fd6185588c9a5e3f849aa1d5b253b94b139b750adf0f81b455e2dcfd

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case24\is-1A1P4.tmp

Filesize
94B

MD5
56ad3f936823e5074715c8be8808ff91

SHA1
b33df83219ac4998710f258992a9e317dca81655

SHA256
8171f07730bebb1e978977e1cec47b72ade0795a402458cd367801b992dcc71f

SHA512
24d71b104d67569fb247acda1b49b134846f89af692cd9f0aee88216a8c516c7709c1e5b647c793737991173f90121811c8b2e52c04a7442e86b4b975705c601

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case24\is-6EO2C.tmp

Filesize
62B

MD5
6f3ffd450d6024a231b9e46cbf6b458b

SHA1
0bac804d12f402beda89a4c5d245f48fbf688aa8

SHA256
ca9f938daf78942e02984d9de259d016e696cfdd8c6dd14ded8a57e5031c96bc

SHA512
b8a6e64d9cdf49bac489b3d43c8c7ada2a8d48ca23347f03c67a61c39c3485212c7fd4d4816e3009a71e49ca261a83aa7bc1c5005c50a0b64a7bdcb4c88c118a

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case24\is-NL4P8.tmp

Filesize
434B

MD5
3b32cab236c9e9fec9390e249bb0b4bb

SHA1
f493c5f8327a2e3e692abc243935edd70eebd920

SHA256
0da81e4e6331efcbb47834147e2b8857d60cbc59b41edb192ab627c0a6302667

SHA512
a539b2e376a10124f28648f4e038b21ce9712ff96461a711eabe0c72b292375ee35db85c570ee7069e577b03f5402e70cd1ec683f2d156c94c7d2b2a06169fe2

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case26\is-70D6L.tmp

Filesize
94B

MD5
e758cc642f2c8e6f96a9af68984c9638

SHA1
6e33b45a54c215698af753a09944df5f8e5c38d4

SHA256
f1fcdd4d2f1e8eee9c952ab96872a8e54396a7eeab73a7c81e0ea2ed55468d17

SHA512
9b13098952936c6d46c3c145927caa158af568b8b0b1510911d7cd5bd5fdd3fb4f9506ee47f807ac4f53638971996c012019f31b15179d7216c963604800050b

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case26\is-ELEC6.tmp

Filesize
240B

MD5
82020f7812f58417d23bbe672dc5167a

SHA1
2660b72f159fde60f92fa15f28e443ca49c34ab6

SHA256
e37575941fdb25da99c5101f06f1f4b3b5f44aa00a425def205f51bdaa29ac6f

SHA512
1815bbbbeb3dfb24cb3ae86069ae7fd3cd5d2bd10a29d845d31c659c3814819eaa6ffac1a76fdd7fc46e508f6ab7f0ae88f281489e031fc369fd6a15e0292093

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case26\is-LDKRU.tmp

Filesize
136B

MD5
e4e3485c09613921268fa8c2e49a697f

SHA1
8963e20a29e2dbcc915b62fe7c35e72b095cca6e

SHA256
d9042a185cf44818cd71d0fc8ad876c7d5e25d63729844470dd70b095d92527f

SHA512
fc8b9906c5ba01f06da606b7682f7e59bc90c66cc6366eb80b6f82a97191f44862aeb3242b453a4b59a2018ab24ee579a7349d9dd2da9d837ce6b6307f841037

Download Submit
C:\PSR\Sddp17.2\Example\12_stages\Case26\is-VRP4G.tmp

Filesize
62B

MD5
ee99a4f7573eb00b3570293464fa808f

SHA1
e048fda1d0d13db9afa98cbbc143933bc2b789c7

SHA256
a5ffa246ab5e61e4c649c8073f318cdf09e871cdd672a4bae4ad47c823a432d6

SHA512
937811d52d60653cd395b69b7465c17ee7ad863acb3cdd4a57cdb040aada3053fadc513f42b716e1dc803387fad28371e4ebcf358fec8fda7cf6df702962f4f6

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case02\is-1D47P.tmp

Filesize
93B

MD5
fce0e33adf0e0d6d6e063d1e3bacb9f6

SHA1
58cbeb26ad3e72bb91789365a9c7983c40ddb584

SHA256
e2b1194690e89181e7dd5466a203956e7cfbbe53a1161af4ad217e925929bd1b

SHA512
dd3ca9e2e0c97518b6c2abfc28deb89ff7d646df91ce733cf484c65fdf9896ae805aea51d5c9cd9f1cc5037d335a618fcc21e8cca57f9e2da9b7e6da4eb047ec

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case02\is-AAEE6.tmp

Filesize
68B

MD5
4dc3dbabab8aa60c05e1f5011f758f12

SHA1
4d35eef9446c35ed7ed579ac1db9af0c15134f34

SHA256
9202c15916b567b3b20a37b0499fac618c4dc9f1a566c2931e941f450fcecfe1

SHA512
f27e18ca97b9c05c692dc5be947de81f15588a93ce409a86fc327baf38393f38a5d8f04999aa408fd3cfe9346ad6a18dfe5f11527c2e865425d95c2a8c39edc0

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case02\is-FJMOQ.tmp

Filesize
174B

MD5
66a8b4b384519da225a623bc97afa558

SHA1
4625e7ea41e25453d15e9957dfb2ffbd5b3b2345

SHA256
d5842a1606896e22ae0f741b9d8980b14cff004465b20f2cce7001e8957ca943

SHA512
e36ddd8f7da9ab29fb8627b3341e8e545418616b07fcb1a2689e5ccf368ffbfce52913a85406a1d210753a19e396d1b1476efac4487c80f2eb2213937d4a8002

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case02\is-GDKTG.tmp

Filesize
62B

MD5
670da241ab88bf906fcbbd8d3f1dd9fd

SHA1
abcb5edb9615fc8f92444a1ff8dabedf36a03834

SHA256
3a945d851408bb8f3c5d983743774b3b2fc6fc54008862bc9684e595711af2c3

SHA512
f2f50b5ab2c37e487238e4e27c2b3127e0be47f2c732a440a8747e76cc44d701500999fc7c5ece08a52595435ba04f0fd285d50664bfa2ddda364d57798b3e91

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case02\is-RDC37.tmp

Filesize
856B

MD5
4fdbe65851e2331ec07762871f1280b2

SHA1
d87a6c7b2c7319b07184f4873f2a935f34cfdc5d

SHA256
eee6549f6e5cb16ebad85a272b7d44d5a7c9805c471de7f59841f8aaf5fe43b2

SHA512
22aec6217927d50e21f4f06495453b618b9ff2c79e4979cff9519ece6b116bc7486a0e611562a74249106603c0b994e08a82f269d642178cdec97fc869325b95

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case03\is-0AE1H.tmp

Filesize
240B

MD5
adbba68b87f91bfb0e45a3309faec8df

SHA1
93f8b7a696dfb1cbb6dea39ba46a6c356045a59b

SHA256
49c1692a922b9c0dbdf0fefe9d6ba93df1f29e3135f6dfe5af1bc785bd1d9ca4

SHA512
995a4124af5ef889dab8a9e617ac6d76246d699451905955909431ded768f8b57a0221676fad3fbf732f76b3bee41a44563e4c46c004c296f5e6bb4adcaa6148

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case03\is-QRUML.tmp

Filesize
248B

MD5
00ae29283e026214490b2de18c860cad

SHA1
21a55dc6c08e0d048aeacf851b62e9bf77b68a4c

SHA256
1776a7306d0067cb6716b4c4b2c9326022361bff1fc22d968c1f25df12fbc34e

SHA512
5ccfe70740b1497358096c0cae76ab2788f8f66f46eef34c9aa1368d3fb3e6036bf08bd451049707e7f7e1ae88db90fe8027a230c31abaace9211cebd7061c6c

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case04\is-N2UC5.tmp

Filesize
236B

MD5
1907012ab66698aa1bd2ef9b534614f6

SHA1
71eb7733df64f3ddf9339c9026aebb28b6255559

SHA256
a9f3d61c22c6349c4bd89e4afe2a7b05c1a35b622b8501a85c31e00363ac790b

SHA512
dc4465bcc28f739f8af8e1c0afe16fac8be65aa9c2daf634ac865f9aa7d520a9536684f88fd040dd7f9c04e3b5854ffc6db66a77c6f81b285f944f1517a072e3

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case14\is-1690A.tmp

Filesize
644B

MD5
83d1f0a35549ea0d3e344bb2db2fcf77

SHA1
f685a2d51470427ab51e8841c7f19e7ebe54378e

SHA256
6549acd5ba33384a86a58dceb12a4ae59760d2140c96cc151d5cdb234677f9e7

SHA512
f84c91833d3f58015ae88b74a6802fb39fdd0e901b53502c9f9c53629475a7ade9fae1d2eb7e43e7de0fcb9461c3e4f90a5fae010201a049b1c779c70cc4bdf9

Download Submit
C:\PSR\Sddp17.2\Example\1_stage\Case14\is-CR0VD.tmp

Filesize
48B

MD5
169bcfdf363c05239483c0840b42f029

SHA1
5415b12afd23793e1dfca3b48e14d5e271a19891

SHA256
d9f6bcf475bd27ef71a66821ead5ce1e85f0e855efe4e1bb4481881e1ec18368

SHA512
4cceeeb2fdd9e44c2e264b07df959378d90d3b924d2f13b3232e9d4368403b0c5fb4a20406d8dc46729f903e7b6a2f280ac49a7b5d8f4fc41c917b50d4c853f1

Download Submit
C:\PSR\Sddp17.2\Example\2_stages\Case16\is-0UDHQ.tmp

Filesize
114B

MD5
f8d6122b99013964e6e7876a375a134d

SHA1
7610283987b289277e908406fe244484e0cd989c

SHA256
b17b4f5562098a85bbf7a7972d88b9e125d60e3ccb45b9ebfc4497a4d64585db

SHA512
da6417de0449bc57bbfa47b2939dde1d59f0bf1ece19968353ca89c90d6bfd19368bf1276be3f42678f1e633809d5a97a8f18a7e0dd40246076fac60056eac2a

Download Submit
C:\PSR\Sddp17.2\Example\2_stages\Case16\is-78CJU.tmp

Filesize
310B

MD5
f3d6af42f34adb647325b9c5257d7474

SHA1
c765434fdd3d49fc7b59474237bc46f6c1e78c59

SHA256
9dc3e62e2235f7d4424de49e6aa3e649406a5af01843c46770e700e98fae1b13

SHA512
e8896023358aedc36d45729f4c3481560e576ebe7efef1aeec913c6fee9ea45e3601eed984d28fab4999c5a7f1d0735b7d6268bb66ee670bb830c3fc653c2757

Download Submit
C:\PSR\Sddp17.2\Example\2_stages\Case17\is-DT6JD.tmp

Filesize
240B

MD5
7858f1eb2b5f2245816e2a89895bd1bf

SHA1
3a018165da6fd73bc55cbcb02089acefd94f0c7e

SHA256
7978113ec4777c41a50b5e250d0a80db1e800960f76561ce74ce0fbabc74c596

SHA512
521c7b960324d390cd5040ae0b9f6bcc2a3c5a4e12ccc5acdb7a795e615162eff67aaabf2842e7ad66f02bc4d30c064cdb4204a73553565c4fdd47d23c12b9fb

Download Submit
C:\PSR\Sddp17.2\Example\2_stages\Case17\is-N8E14.tmp

Filesize
22B

MD5
3bbe8359e09a019509c9c062a6408ff4

SHA1
25a05cc9173463423e7d5773c521a43d17acf0a5

SHA256
8430fb3c3f75303f49b23fd87be7fb3be2caa97dfe24ffb2e60a42aeffeb0bce

SHA512
093f201a728e629793e5bb2046d96cb77f1340438a68e08d41ad713b4bea5b003e01ce45ab65d9c31b8fb059f2214fbe3c4965e0809b7c6b5dc41ac75100bf51

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-57V2U.tmp

Filesize
2KB

MD5
c3d4fc3e378cc094032d878830e03cf8

SHA1
41001bf2deef439e9431e35ceb8f88b6d2c5998e

SHA256
e105c9957ac9b7fecb53f820e27c54f51436049e9231726fa5a0369871efbbde

SHA512
fbd3f555b1975bde817f86fccabe4bc68f6014ee4578fc81ab50c6a47a467dd29a5ba71b26b78baedb95a87ee6e2555166dadcab4c0275a00fdc691a4695b9b1

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-6E2GQ.tmp

Filesize
404B

MD5
e874f37cfddac75e0d9d7c6bc1d083f3

SHA1
97f344b56ab95e90ac0ce35590142cb7872850a8

SHA256
a7633563f24de225468de49f9cf823f82811d99b8fac87f0f691ecb42170120f

SHA512
9a8fb0183d7c7a2a61e64522de9639bac7e830cf4ae2f4b5266bca37cf7023d8e4f8ef64d737d0734d238b4c042fb8f6bb8e4853a4d22cc44159a208580b7892

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-7PVN1.tmp

Filesize
2KB

MD5
a4d444b8eadb0076efeb5b6b19bdbec1

SHA1
b79ae0a5616da66c63373ffa2ddbe4283a6c9c6d

SHA256
7421af20382c4fb0e7a4c45cdc0c5c4fbb1136323c5857d3b627f2dabb2bf5a4

SHA512
69daf0e0d5188cebd59b8936057bd78b43cbea91cf6ff2c055999f942b7e4f2dcb028e12b002382ee563a2d7a71162523585cf578fd615726e1d27f75b007773

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-81I9O.tmp

Filesize
238B

MD5
43940d405829baeaeb565c75aeab24ba

SHA1
8b90d0cdfd7d5b9bedc5c15dfeae18a756662f81

SHA256
c63ba88bdd1b1fed37fa11e82946ee533ee89be3ee7487e85c6d0aee5272f88e

SHA512
f4f5d3ffb40bbe492f300452ad3364e0d1573c0510c9921106988f5ac52a2c7b918bb3227a5e4e78c2b1be750f94eae4919fd438237aaf05b0d796e61f6d58e6

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-91BU6.tmp

Filesize
30B

MD5
b0b28414f25353d9d114d05983ec8796

SHA1
beb6307d831039178c9c8acc00b10636784b27c4

SHA256
cfcd58377d9f22a537e5d8eb03c85760ce08fd7296b9ae964093d7df108d2aaf

SHA512
11717ede70651410e774718466dfc905933ce7032b2c97e2600864728fffdbcb39f74004ca8077b95058d6b2d22a371226104a827a8b71c168a1ff052a6e03ad

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-B5427.tmp

Filesize
1KB

MD5
00c685f0387915af21e7746177b37433

SHA1
b0e301b778aa0634c154a3dd68aa8e0948608751

SHA256
b5fcb07cc60b329a6bad4787b37b700c110992615b8c9f219648a0f067e1b25a

SHA512
0cb17099b6bd652345aaf361e8786eece0a40689ca0f3dda08bd4f93a3d4cb979b77303fb3de1059fb2827b96009b6a932838e059308960898b76e8a7553e979

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-BANDF.tmp

Filesize
310B

MD5
01190aba3b6c1a01685cd250f66a725d

SHA1
9fb7bb017d7d8a620d64d4c3527b9a275c2b0b82

SHA256
5a12cbdba565de48c60038b22e0a50b645f48ffe84ab0b0f2ea570b1d7f8e40b

SHA512
535cd3af4e21f59f5b9c5bd96e07913c073715e097c01ab1836e00c85e0e8576ede9263fd80751ec56f7a0817f445a2e30b1197167e1bd8fab1b4d025cd134c3

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-BFTLJ.tmp

Filesize
1KB

MD5
3c0a416dbd9f216e657bfa9ff0ee4b1a

SHA1
811e79d802a1a1f0fe0995a263214b32d7aa6972

SHA256
c95b192972cbc86ec2d4d003bc97555718a934be129ecb1cfa30abcc056e8eb7

SHA512
b0ecc6eec46557fa8768d5f52c0b560827d4d498988f360e2a7175ec55d5d3dabaa7e712d228c2025645cd117b0435949fcf7b6c41ef7760346e825aeac2f45b

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-C4LET.tmp

Filesize
158KB

MD5
f39e54b211c1f6f68e7f4055e1ac1329

SHA1
c065137c6708979136f464bc6312a2e97694e8af

SHA256
beb2bb923f4a8b743fa46f2ccdc8c083ffee9e0d283156f2cc9aefda651629ef

SHA512
88439971f036750a8f16d9d954ed19ac2e1a0825146981b3d59ab5ab55bb45abe816d3dc659dd55f2941bdd4cc89b67857518e69d68c6ccef75f35e2444a438f

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-O2RRO.tmp

Filesize
114B

MD5
f667a3907c1f83f1f68cd8047e7660d3

SHA1
db7773f8d4696bf55b356ae023fd288f110867f9

SHA256
78487a0b97a0bc9b6579df956d5ab8f3a4a3d702190256f476b6ff34f9170ef4

SHA512
ccf97ae06a554345a7272b3156657dcfe2ccf76ba220d3ac4979180d99fd6281f89deda0296ac87566f554781e91b14e5d567c2bcf8407578f13bc4e10d2ea3f

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-OHK47.tmp

Filesize
84B

MD5
5537df77f0b90b1d71ec4c49b83c50da

SHA1
8ceabe48b4d291242ad0cbe7cd2fb5928724f176

SHA256
4a3b361cf43f79aa7fbdf3a67f54251221cee07392a417c5d8cc64cd937f61e4

SHA512
8f891541b9ff50a62a992a5192da972a6916cbfb4c746dd9c3db4dcff08ed32db92726124f2c6b0fa8e2c2059181723178b1b5af6d7919eff457d17e9da48501

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-OPN8J.tmp

Filesize
95KB

MD5
b589fe0ce99462c2cddb86189be1ea56

SHA1
e97d407e96cbb5f41c5d358afc2a12031b06ac2c

SHA256
48357f2d226816e8d52472761f03614302574f4acdb1014a838873935f64cfdf

SHA512
3b03c7a185e6a33b6d96046fbc93186e3b7ebbfdcf97ae715b220c08054f23354e3f44da1dfaef1c4e274ca8adaa912ce637731a831f53c79686097fb17cac6e

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\is-VVJFI.tmp

Filesize
62B

MD5
d5b7d9d1e7b02178b787336b310d952c

SHA1
71a8730feb01da01ab43614304014ee959e06879

SHA256
a4b49d4cd0757ec89682adc03faaa81b2ec931bbdf5f2ac0d77e2307b3c3ad8d

SHA512
458c5c264bd37d4ecbe4d0bc6bc61119bf9cdb252813f20f6ea1d226202a21d7b043dc4fc9f098c00b01d49570735b73d2763c87b139918ecbaa07ae5c7e38f4

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case28\sistem.dat

Filesize
66B

MD5
1f609386c5502dc48073b413d4743db8

SHA1
e24e73bf1a394c80e71779a7043b3a487388c596

SHA256
f54a189df8d563fa2a864bad96bd181fdaa4f776b3003e159fc7e69afe0073ca

SHA512
c66600edf2d787d2e0d0b8e42b76c17fc37ca44e2987edeea5403338901b005af034d7eed5cc72aec33db4a86e9a5e09a832fc84b04ef3ee5278beb33ec99762

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-0LVA1.tmp

Filesize
202B

MD5
a8820e15a154a6415d2b86351e7a42aa

SHA1
02c3d990e0391d2e2b2b460382a4afeebcef64bb

SHA256
d32dd26455a09cde0fae0b9ffd11db57afdea908258d0ecf9c1cf5697c0f961e

SHA512
51a7df2efbe6e61d11057362338b81e79ad02df988ba72ea12ba35e906230d4c58dad3094dfc669c6a79ef626b6d1b094af0acb29f6eb8682a1e50239d17bd1a

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-7CHLF.tmp

Filesize
306B

MD5
02a0572890fb9df5f511fb18f4c70e27

SHA1
cf5a8b3079ceb4a8748345502f314b017048611f

SHA256
b4ea669c3d9a48396dcd8ee60550b02edab2917838aa097b07c898b43e51b6ed

SHA512
63989ca0c58b40203637ad5f77eef5ef3c9cf44e8a6e3b7698adb9882cc5a8eaf028b00b19d231f02b393573706405c76fc98ef549076397828b381c1ce045fc

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-G0PQR.tmp

Filesize
225B

MD5
1c649570f50b61490548fedb2e0c7172

SHA1
de11d92e0de5399eaaae3462a8e3b7161171c58d

SHA256
217b09466ebf752786213a444074b7a3e0ae709909da283fd36dd3e8f2f6b2d9

SHA512
fe11818dd5298375f195cd621c59e09df2648417df2b67e61754dbc5b038dea94a4bf10cb14de923d9ad7d952fbea2382dc6bd7e43f39c8aa5328240269f9e4d

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-I5HSL.tmp

Filesize
169KB

MD5
0a5426cfcd93ea80e5bb595778ece14b

SHA1
bb5b75c8ddd9d6dc2517d98526d506aa0db0eac9

SHA256
de2fcda1d36e786449845713d4194f7b79db286b80673c8dd8995d1234853825

SHA512
85815da6981eb511a541a50e0b56b6142a5500ba2b9318fbe46ca95041f8917d1828db5d4c4eca4add40449efd0b2bd4bf2f1015849388b4727ebbdfeebeea30

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-NAUFK.tmp

Filesize
451B

MD5
e049c30dc7ff386d8b5aabeb66cc57f0

SHA1
c108b656ea7086f2f3e2779b59c2c6ffaf90a8f5

SHA256
8975bf419ca21cc936c4c9c03ed1d763ab11f7ea9209724b65fdb874758db88d

SHA512
b2afc0bca0da2fd7bfea349b26c7a64711b5ddccc8c7dca4ef318d11db267d31ef08fd585eb2295c45fd2eb8ae132fad86601a2c06c7add2994a74973efae455

Download Submit
C:\PSR\Sddp17.2\Example\Hourly_representation\Case29\is-QPTGP.tmp

Filesize
1KB

MD5
5ea6bbe19f0a17536dcbb55b34d9dc4a

SHA1
2ee1ff9b50504580d2bbfa6645a8b12f9d01b303

SHA256
d524f5feee9946438d960feb396953b4aa93dc84c6dcb518e40b976bf7fce0af

SHA512
e9adaf3da975bf7276bd77809e3a955fe41951881f242184650083f13d18bcac95e5f74131436ec3bce73f9fbfc11512a428773e1c0bb8fbcb692267b0001b4b

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-2K3F2.tmp

Filesize
48B

MD5
cfcbf43af0aacaaaf68e61f91149c19f

SHA1
9ca2a207492c84ccd44387b31e0349c4b89a2ebe

SHA256
3b16dccac16222d81f329776f42133f4564276b1a1194b093ed9e2a83380b0fd

SHA512
5b360cb07d825b9112699332fe1d3ed6dda17602a0123c88531e48fc40894fe1920e70266c985b536b0bd1088857673e184c2af1494f41d5c21cb25444b3b609

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-9I9SK.tmp

Filesize
72B

MD5
c6fbd929021313e737ac003cc77c52fd

SHA1
dfb18d017e68b9f9fab5c832ea738bdb52294fbd

SHA256
ff6938db539580dadfbeaff6eb3a9b4d77c59907ebc4904ea0d037a7973dfe4d

SHA512
7c390dcb56c7e933b1d00503f86e15bc7bc3f102390fe68c385427d2db535a4242f455e590665700a97602e02ccfe2fbb9e3275fe36c169d9725cbeb197aed17

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-FMKVB.tmp

Filesize
48B

MD5
0be6c54465e221cef61c9a5aa4ff5466

SHA1
d49b3ec4129388c1761f67a08dd67b16c5343de8

SHA256
75ede13c3c9d01c763caa4c93bb9d61f3d7bedb62c236887c5e539b3900d8dd0

SHA512
8ef4c0303abf92c8ccf188f231b7d268c2eea78825dbed09974efd7c165c1278542d688b643be4b1f521a9c98ae602b18d082f70031b8d6429278c96413a6dd3

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-GOMFN.tmp

Filesize
10KB

MD5
c8095fa09f2775045b7cf0cc0e3b8431

SHA1
15582457d8a3d51ca12d24c8f729516bd52cdef0

SHA256
4af425d4b8a3539f0cf39d803dab04c63ead16c39e5c40005923a3d8a29b50bc

SHA512
16b20452780aa454fd06c95fac04c0230a81499046d9c6ad74a72e77aad7130c89edb3aaa65ba9d7417092808027376423c020a2e00e40cc167dd683119d5c6e

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-MG9EL.tmp

Filesize
84B

MD5
eb397c3092db12cd98f2b76796c7d2ef

SHA1
1a38fc75466035a680c4d760c2384b79e0deca1e

SHA256
266b68ff22700c09e5d4961dff3f4656869d30e86ecb33e6fcf8773076078feb

SHA512
fe3ecfe8b01f8f864c1dde406a1d51b19a218dd9da926c33bfc1aff2e8a59ecec30d67615d3b38f8a32fd411f996226d4d7c801e53b6b6971fb972898bc1adef

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-N6MSR.tmp

Filesize
48B

MD5
c55b452002b7bf1acc2f733181340f5e

SHA1
096f7a50c08e04d0b73dbd90db44c20956131ddb

SHA256
ad88758a09ba886f17833923c41081d151bac500c33cef46d8ed0904ed72fbee

SHA512
258cfdebbef98df2d392e4c4a4aa88dc87ce0b59b2ef9921758de4654112add7d580a6a1082b7e8c43a0eca958d96f41c49c1fb6c8aabe1db3cc77ee061ce8e2

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-QEKFQ.tmp

Filesize
1KB

MD5
f2650f979f51a1349e6dee35422350eb

SHA1
341c29c49fd8cac38b0dd4216fa147fcb2838814

SHA256
927a2676774c722a9743c22072925a83c51edd6e7ed7ed4d896fa7c5e15f43f6

SHA512
9dfbac58a282eb1752f18a921447de95d8de741b0dbd64d09c37772a8e2672df6c674241c113f6640e23d394fbbcd219550d7f726a3aae63e95dd3256ff25d38

Download Submit
C:\PSR\Sddp17.2\Example\Netplan_integration\Case33\is-UBDOK.tmp

Filesize
1KB

MD5
a1b59a52b350bdfe73e59b45b4e59d04

SHA1
86e7aaf32326e36c2741c96199f92d835f21b751

SHA256
ecd56e7567c89336bc17e804de6e3765809117e666f2b3221d0fad8afc9e547a

SHA512
2b9fcab400c09161a3ba4f386dc7d1947551112cfe3a54f7949fc479fda3fdee9831514520958e8aa4b615bb782b268de0e0b8e6954788972b06dbdc11e44d6d

Download Submit
C:\PSR\Sddp17.2\Example\sddp.dat

Filesize
3KB

MD5
4fc24078677d09825ac3c95b548106d9

SHA1
809616d0dbb0520562b2e11f790b2fb53ef9d352

SHA256
28779fa71424b7564059be5afa41de197c5a0fe02358ca40a7322b85bd3fd9d7

SHA512
0f9e7cbb022c22f696642e511f424ef6630a6f3a5eed6454fcc869c1c3e8edfbdbdc37d2c246d4aa8c4176388ff666ab7e968beefccee14023a2265e7d94125e

Download Submit
C:\PSR\Sddp17.2\IHM\ColunasSddp.xml

Filesize
33KB

MD5
dc880139944d70ad047e26e0073803a9

SHA1
c23b22ab443d2436e6b5fc41c74858c54b14f733

SHA256
1c606291782ca6e34bcdf7039de4f4424f3c9a779f63fdd8f833f9c93d6a6fcd

SHA512
d446bc0bfb2ca0f4f7731ea316c7c7dcfc6be020c8d27de560331594c8c0dc6005aec3bb6497ccdc4e2cbcd9f2ee5df3cc1f71915cc7997e54c44a13959be332

Download Submit
C:\PSR\Sddp17.2\IHM\GlossarioLegendasSddp.xml

Filesize
455KB

MD5
a0a35d369424483af07783dc854c951b

SHA1
ed4042b0276e53f72912aa04d480164315c4b9f7

SHA256
4f3ff837a1f8c8ad84f630d9a888a516ca2778033f6b4eae22829d3c436f0a0e

SHA512
70c28ab95676484bb27bcf4512446b2bda940e0c5bbcb4dfb279519d5b7b37c13ee097857ea1404e0b76e78d0ce6b74283d30fc476ddd2e4b0946865a4b581c0

Download Submit
C:\PSR\Sddp17.2\IHM\TelasSDDP-config.xml

Filesize
23KB

MD5
2d22d77be9f820095c4659bdd1870c49

SHA1
5729f62f94ed7074ff9490bc98d5b9393de04bdd

SHA256
079ef695d24081b44a761cdc22e2fcfa4c8f9413188d005d56a776211f69ade6

SHA512
034cbda082f653c6f40e1b19a5d642d4a01cd94b88496d80548faedd53828781e0d2b997fcb0a0f9a07d9989790e1621b27760172f7335a5a2a6a1f6887d0b71

Download Submit
C:\PSR\Sddp17.2\IHM\extensions.cfg

Filesize
616B

MD5
ded271dfc46a78335b928b04487281e5

SHA1
358ffe92262361c43f29b9c354a2f26db88894f1

SHA256
5925861e38e2a0cff6b5c29572016dc41fbcbc0c4c4e6d453cd878fd8e21f7ac

SHA512
f91103bcab4273bdae13f950116ae7eeb7aeaf5e22b4f7cffb7c3bc007bb44a2c7c8e687467d331f512a6e1d3e4d0663cb982f59056e0faa98f1289fac5080ab

Download Submit
C:\PSR\Sddp17.2\IHM\helpindex.csv

Filesize
8KB

MD5
88460d0d840b6e94928e3e2e82d6fff7

SHA1
4d09539b043d5d6c8b21d099f82dc9e0b505d513

SHA256
5a0b87d63113b51bd4f92f61183ee84b153c5788159a9d8c7627ff46c73c5b68

SHA512
93bbd91067d22ed146bd06c76a8f0a8c8897bb7a7b2e7e819a316c64c179391c4274c3a2ac542a6475d17721c83cdd2827552561de78f2ba23a74d4969851f42

Download Submit
C:\PSR\Sddp17.2\Ihm\ConversorUnidadesSddp.dll

Filesize
88KB

MD5
0b055a9be761845e8b8c7dc89d59b158

SHA1
b111268517b04cd62f86ee003c7140bd838f416c

SHA256
0c9c9ed5d17ec01f7369873f94ea59f8104409f206a2296bbd6294c62dc08b8b

SHA512
e1e996ca3d43e044803fabde859ccdc24f21b5dda4dfc2f86a4a4570ab919048ff4c8811d74acf9e4b35ad3486931e5ef841279ea29f0197023e410a95dfb15a

Download Submit
C:\PSR\Sddp17.2\Ihm\Sddpihm.exe

Filesize
27.4MB

MD5
d9f2fe0a8128dfd381d8e057f3758da8

SHA1
e872801d58bb8124af39286a29aafafe26c0c7ab

SHA256
1f620132c57a2d2e60e8cc50e291dd106835512a3c14c17f8ce6209453bab81f

SHA512
b911944e86332c9b55728b65e7d5adb95c531db7e17325c624cd6699d3905a90a149eaf3c0d4a3debba4df37e12a90fd434eb3e6dbc31c506cd872645b473199

Download Submit
C:\PSR\Sddp17.2\Ihm\Sddpihm.exe

Filesize
27.4MB

MD5
d9f2fe0a8128dfd381d8e057f3758da8

SHA1
e872801d58bb8124af39286a29aafafe26c0c7ab

SHA256
1f620132c57a2d2e60e8cc50e291dd106835512a3c14c17f8ce6209453bab81f

SHA512
b911944e86332c9b55728b65e7d5adb95c531db7e17325c624cd6699d3905a90a149eaf3c0d4a3debba4df37e12a90fd434eb3e6dbc31c506cd872645b473199

Download Submit
C:\PSR\Sddp17.2\Ihm\vbalFlBr6.dll

Filesize
40KB

MD5
9fdb8a72d927888796a4e6a14560cc5f

SHA1
ed49dcfe5fd16c658033373d816e61d8173368a3

SHA256
e692ab331fa5753d619b5fbe68bd5ac44c57ad13d046048414f75cfde4065a19

SHA512
040358819a95ac368e1a67523b409e7e18c1d37444b03a14bf346f5c9183b8743d4f97011c0c5ae177b2bec8aaacc687416b9a6abbc2d692cc2307dd0b56c1c2

Download Submit
C:\PSR\Sddp17.2\OPER\SDDPeng.fmt

Filesize
171KB

MD5
b7c9244de622edfd455d5d52378b8c25

SHA1
6a8941d20322229867403531f86d34b4b045e2f9

SHA256
736b5aeedbc55e73f60770df0b9741a3ab555c4c9d49b97f290cf508c99fe11f

SHA512
20ac93ec2e848ad386904c94a267a52335558c309734820d10e1e80fe0c47dfc0a5f6b3c8d3811f27cef3f69042570e0e40b1782bf9e90b6c01a39f4e1a9a8e4

Download Submit
C:\PSR\Sddp17.2\OPER\indexcls.fmt

Filesize
13KB

MD5
0c832e596dea0892dc0959a0f22621c7

SHA1
ddb367132ec9d5e7c1081e2974dabd9cad317bd8

SHA256
14f1c838c901a4a6ad11241c85b11bd3bedd63c35a1e80560ce9fcfebaa65d44

SHA512
1b80e2203742e15d0ccd4dd27c7c91a81ce6225453067fd16238928bc0da147eb7e4acb17f5323848b33a69f0cb46e69f581d32ba9adf56073e3c0ccc0f952c5

Download Submit
C:\PSR\Sddp17.2\OPER\indexdat.fmt

Filesize
157KB

MD5
b87815b3298cd007660f8b4d0ac58c24

SHA1
e976c9fe580a4dfca6687cf696574c5dff1fba4e

SHA256
e775d9a3e7da20dbd7152466d070b9c239a2539e471ab2ef338380a01ca9a25d

SHA512
173efc41627256b254267f6a90fdcdb9710d837f453e022518fc0446592392c1e880c273fca15d563e37f16bc3ee1203b4168b4ae5420304128ba5647f85dcfb

Download Submit
C:\PSR\Sddp17.2\OPER\indextyp.fmt

Filesize
509B

MD5
d929a8316954d6e089e9e83bed3cc19f

SHA1
588a43b1b6ce6df98b22272af2fc7b9d8373a509

SHA256
aaaba8d5eba619829c3d6f4371613b3e4f43e9d0f5222c31fb5648c544502af0

SHA512
417bd451a110f2554a694e5abf73a7456e280680bd71bfad76ec97c350987c42cdddf0ce6877783849f557cf59bd09a4528ed485cefc87f99b551c203a0dfce0

Download Submit
C:\PSR\Sddp17.2\OPER\sddp.exe

Filesize
15.4MB

MD5
cf5bc85d53073c08b25695ded2848ab3

SHA1
dda936dffabeebac033578285e1d5e1386c137fd

SHA256
83a7030c67a82d77096115e899ce967d3e5c783ecf40b65ceadd6989bbfe8a04

SHA512
bbda4d7ac51e82a33abfa8d41c2c65207cc83b2f0f8c27128203afcc54b339bd33f7119a1e3bb736b099bf25d8fb6f9c28f01f9438a542079db5fee082757067

Download Submit
C:\PSR\Sddp17.2\Oper\is-0K9KP.tmp

Filesize
45KB

MD5
8088cdfd98da9db2c9e5ba891a6a6a26

SHA1
80cbf43a5757f3f8fb8bd1df556a5e4002bcfa29

SHA256
ce61b80a3f4d3e8e76b54f0fbcf58f30a1a85d99d2c6f091a75d23985a414423

SHA512
3bfb511c9f92637aa2ff5c321fef09ddd5adbdf071b02907e1453ba666894f125e928a4ce816e3d76a8cac8f7e1c460bf5426383e81b976b7136f53bd6545bba

Download Submit
C:\PSR\Sddp17.2\Oper\is-HDGTA.tmp

Filesize
944KB

MD5
002838eb4de3b152d052f3ec339dc468

SHA1
c11d215476ea94236f91a30f16e27194905e4c1a

SHA256
d108c386064fb3ffc55c2c4729aaef3fbfc4d1ec0f4ec636a2cbb5e4ce038859

SHA512
5395ef5f3af986ec8bf4b256a4d36310dd235fbb64551f392fb36ab54794c4a775c3fc18c55db8ac2540c370fb1d4cc7ff4729d9f9efdcb73ed49a3fd0179eaa

Download Submit
C:\PSR\Sddp17.2\Oper\is-OS7IJ.tmp

Filesize
31.6MB

MD5
dcd66ed84bfd0c2c47ab9acb78894c55

SHA1
90484213d7525d97f22b1f2aef6866bac74d3d92

SHA256
82476976997566e447ae69e19ee0a6b7ca420e2042ebe0fbd434fc90235d2ea9

SHA512
6e60af8c8f2d180eed92faf5999e628929dae8da79d657ea0fab30aac0e8573d69fdc2cfc1a1c0ea059802ab712b72d8ada9face50d98e47e094d46e805ba3d2

Download Submit
C:\PSR\Sddp17.2\Oper\is-RKCMG.tmp

Filesize
445KB

MD5
2677f992b02e5752f9086c17b2fcbb5c

SHA1
2bfa718416b9b332953f288611092cba9f8a8e7b

SHA256
f4f81f635e67280bc7e05dfc59d9acea35153aac9ebd4398f5f1bcd26647bcf6

SHA512
70524a8c9d98436981bc49d6c447e2a3ea4783879692935cb71e378fa4c0a6ecb90b0e3b6cfd590ac76e32cd8cabb841401a62ad13ae74198d34fc8e13e7c56f

Download Submit
C:\PSR\Sddp17.2\Oper\is-VTDAF.tmp

Filesize
407KB

MD5
ee316128d98ded42e56ad7ece9aec7c1

SHA1
70dbc0971247663e9f8cb7a5ac8f8c1905bc1ccd

SHA256
8afa41605a143f531c8200361e137fc06830e3b3847bfecf207c87243af90942

SHA512
6b10b0a2591e67261db60b8c4110267fe5d17ea34871270b76efd5c887ad9d82b8807b246575105aeeb92084d5ecc7bd91627caaf6e7bd66bd7d014084e8bab5

Download Submit
C:\PSR\Sddp17.2\Oper\sddp.exe

Filesize
15.4MB

MD5
cf5bc85d53073c08b25695ded2848ab3

SHA1
dda936dffabeebac033578285e1d5e1386c137fd

SHA256
83a7030c67a82d77096115e899ce967d3e5c783ecf40b65ceadd6989bbfe8a04

SHA512
bbda4d7ac51e82a33abfa8d41c2c65207cc83b2f0f8c27128203afcc54b339bd33f7119a1e3bb736b099bf25d8fb6f9c28f01f9438a542079db5fee082757067

Download Submit
C:\PSR\Sddp17.2\Oper\sddpihm.chk

Filesize
3B

MD5
21438ef4b9ad4fc266b6129a2f60de29

SHA1
5eb8e2242eeb4f5432beeec8b873f1ab0a6b71fd

SHA256
13bf7b3039c63bf5a50491fa3cfd8eb4e699d1ba1436315aef9cbe5711530354

SHA512
37436ced85e5cd638973e716d6713257d692f9dd2e1975d5511ae3856a7b3b9f0d9e497315a058b516ab31d652ea9950938c77c1ad435ea8d4b49d73427d1237

Download Submit
C:\PSR\Sddp17.2\Oper\tslite\is-Q4AG6.tmp

Filesize
174KB

MD5
a1a8b1adc6e6f37b0fe79eef548c4f17

SHA1
8b7e0125c4a5e9e5928a7e05293cff7148dbb23e

SHA256
d3b17ce12f85c37091244da1c36818a957cc1c30c117e541d6cc2d3632b7a879

SHA512
528477b8c3ca2f5fc9e7f48657bf039ea89554f5eebcaa8a0b83346e8c33051e2760c561b7324d07c584b16897c6ccb9aec131e63b7451bd53879d05d34fd52f

Download Submit
C:\PSR\Sddp17.2\ihm\Sddpihm.exe

Filesize
27.4MB

MD5
d9f2fe0a8128dfd381d8e057f3758da8

SHA1
e872801d58bb8124af39286a29aafafe26c0c7ab

SHA256
1f620132c57a2d2e60e8cc50e291dd106835512a3c14c17f8ce6209453bab81f

SHA512
b911944e86332c9b55728b65e7d5adb95c531db7e17325c624cd6699d3905a90a149eaf3c0d4a3debba4df37e12a90fd434eb3e6dbc31c506cd872645b473199

Download Submit
C:\PSR\Sddp17.2\unins000.exe

Filesize
816KB

MD5
1e1549db7deb30e2fe863e33cb2413c0

SHA1
52ec734263e67d0f275ea7f328890f43e0477e07

SHA256
4f665bdf4ad66a2086257bff61a6dbefc28f92587b030bcb2791c1cf10a7eb28

SHA512
8e5eb8c8e477ac7b4ca075caf78790a12470dafa7186f78e98175696dad2b05123dac63bcda944eca048becf34affb6b6ca9d480231a2e07571e5d3c99e156b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-RKTBA.tmp\sddp-17.2.4rc1-setupSIN.tmp

Filesize
816KB

MD5
1e1549db7deb30e2fe863e33cb2413c0

SHA1
52ec734263e67d0f275ea7f328890f43e0477e07

SHA256
4f665bdf4ad66a2086257bff61a6dbefc28f92587b030bcb2791c1cf10a7eb28

SHA512
8e5eb8c8e477ac7b4ca075caf78790a12470dafa7186f78e98175696dad2b05123dac63bcda944eca048becf34affb6b6ca9d480231a2e07571e5d3c99e156b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-RKTBA.tmp\sddp-17.2.4rc1-setupSIN.tmp

Filesize
816KB

MD5
1e1549db7deb30e2fe863e33cb2413c0

SHA1
52ec734263e67d0f275ea7f328890f43e0477e07

SHA256
4f665bdf4ad66a2086257bff61a6dbefc28f92587b030bcb2791c1cf10a7eb28

SHA512
8e5eb8c8e477ac7b4ca075caf78790a12470dafa7186f78e98175696dad2b05123dac63bcda944eca048becf34affb6b6ca9d480231a2e07571e5d3c99e156b9

Download Submit
C:\Windows\SysWOW64\COMCTL32.OCX

Filesize
603KB

MD5
a436af9c8705735b98077471fa93e9cc

SHA1
4f6ff00cedb6d684d685bc0e66e2135b8d348a93

SHA256
0a5958691d595cf37e4d4e77dee4994ec031558c1e9a94f019655a9319166e08

SHA512
dc3880df28906ef3f3edb55a7473428c546aa21af2e2e3a01b2783d760887b97e0483f95dac71057d45e98d72d338552d0a01d97c3112f361007e43f746e3d1e

Download Submit
C:\Windows\SysWOW64\ComCt332.ocx

Filesize
405KB

MD5
c24f1e7c15c6d47eced9dbd3e9b90d52

SHA1
a62452316aac2c65f5dc551d7ee78c694bc4a1b2

SHA256
550e7cd6b1fb270139acbb6903aa48aed8844251b2233627e4d36240e054fd01

SHA512
9f59577dd7a9232ba49aa0f21e1a427f20e26dfcc22209568d189631bfa2c704d35fd1da653f9556980b78c3eb0848b618c04e7a428fb2c8a8a1f4248e59c5e6

Download Submit
C:\Windows\SysWOW64\Comdlg32.ocx

Filesize
152KB

MD5
ac9bd4138ba1cece3c25f62166b0ba70

SHA1
14b8593f4afc6dbd0f5b97d015bf50599d53a6a9

SHA256
00b5af20504fa3440ef3f9670a49963622d1a3557090e349f465746213761cef

SHA512
272d940a8eaff6820027e51b03adef1db66e5d7d909a39f0cf6532f792c9e22d47f18040247caa41c3d9bab44162a668b00a6845c445e58df7d1952b616c168e

Download Submit
C:\Windows\SysWOW64\MSCOMCT2.OCX

Filesize
643KB

MD5
3973673288371c24056feda47ad3cf96

SHA1
95c7e2bf35f899d0f59a6a89f10b9c0709e84e7d

SHA256
3f9deb6597ef95e5dcf094a56cc48f434e8686497f4628cc553c6e9c7d4c4797

SHA512
ec5df6e8d3828ae7a17c755637804c7e9b07e185bf0dedb281ae8a3b68a14c113a844cd39fc659d78ca73e742ce287e6b19236a870ce23517d78984f9f518ef2

Download Submit
C:\Windows\SysWOW64\MSCOMCTL.OCX

Filesize
1.0MB

MD5
e52859fcb7a827cacfce7963184c7d24

SHA1
35c4ae05d90f610c0520933faaca2a8d39e1b2a1

SHA256
45b6eef5bbf223cf8ff78f5014b68a72f0bc2cceaed030dece0a1abacf88f1f8

SHA512
013e6bf4762b1f90650ee6a1cb275607d1cad9df481362f42606a37f3a6f63de5cd0cdb0e9739df141b58f67ac079cf27be4ffe4937371972dd14eae18c58a94

Download Submit
C:\Windows\SysWOW64\MSFLXGRD.OCX

Filesize
252KB

MD5
20e06689d038e05795863694b5e1dcd7

SHA1
8183998f4cdc7fda02e45fed0b41bd90153ff944

SHA256
7827dbdbd340cee846a61238002e5d438b859c06c80e540f29130ce654cc0918

SHA512
cf47105c8bb236025b386f9c6e7cb96abd3484abf04960cdaee562f05c5c3b45e17699449d4e60333e55b0cb316433e6a0d63b94a9fe36d8e9adc2fc871d343b

Download Submit
C:\Windows\SysWOW64\MSVBVM50.DLL

Filesize
1.3MB

MD5
465025df6b3526d5708331ed3755c1a5

SHA1
75d05db7085de3222951eaa5fee2b74feaf88e17

SHA256
a441817f7497fa1c8b899b0a1f516e47d84582dbcc047f79d71d54c6ba8f5612

SHA512
905d695400bdb5a164a2a686ad380d211e265142a0110977f83e8c6922b51d2fd91cfe3d8db11b76f2c0bd893e9c6c792a1cc1129cd444e2d886252a13535131

Download Submit
C:\Windows\SysWOW64\PICCLP32.OCX

Filesize
97KB

MD5
0befc40200edaec3a9d0fb072013da6d

SHA1
00bfcf0a45a698176a537821888e8d1c0318f8a1

SHA256
1a1ce5aea1cb6667245a08016ec22fff06df2b896d94cb6419134e7212d31a84

SHA512
0164e3844bbbf606273f9317042a8c811ebcbe7c28bdf6b2de0d975203215aefbbef9ef578a20ca9cad06713ea429d403dca242534f5189f50d16871406d2834

Download Submit
C:\Windows\SysWOW64\RICHTX32.OCX

Filesize
213KB

MD5
4231528316b2acb6d40e797f55ccc1fb

SHA1
bae35cc2b2f6b62549793a3c5606cd14760f9411

SHA256
e777685f35a3c84e996d8090173a1df9b97c9be194ba3660d20d62b7cbe9cf12

SHA512
de0167df215ccb54f2939e1830923d3ec233c64069d4965d98bbeb5bc6d51d3c4e168dcea77d6301bd43ef916bfdf6b99bd108b778a764cd66f3ec199a527620

Download Submit
C:\Windows\SysWOW64\SPIN32.OCX

Filesize
51KB

MD5
c4b2459ea9bb1359be7bb4ed5c14d1f6

SHA1
e433d620200cfcb9129fb235d3bdf6c85f67be7d

SHA256
b7bf0aed206b180ea8647d0a1caf69290c9e006acf3afe31036afaab7a99c14a

SHA512
9e4e083d809b03ad924c5ffb024307207765e361d8cd11b8d1e7fcd617b6b5161cb6d8b7f75c5cab1f00d29cbb266906d0933d283e0be553a4657b06dc9979a3

Download Submit
C:\Windows\SysWOW64\TABCTL32.OCX

Filesize
216KB

MD5
79ed276aae03d4f62551871d8094f09a

SHA1
dd22410d74937caee7315c8e9c88cb018f4db8c6

SHA256
341d97cb88c04c4b566c82ec36d4ee1f2bca5e31bf04d240796277ce770b56c9

SHA512
9d3107d0e6d3c14e5e212e44e0fca49522a194095cf1fc57d67d8b707a524c231b0efc0c4229d8e2e6ea7d09e76a01c665ce488a39003ed47d6ee17892d9a896

Download Submit
C:\Windows\SysWOW64\THREED32.OCX

Filesize
196KB

MD5
51c9e8d775c6653acf5d87bdb2ebd33e

SHA1
74eb5f6a08b77c819bc53a0a5054877964d78ade

SHA256
8f317a229950e0393ab10e12554fd2c6be5b9496ffb5302ee6c24f567c944a34

SHA512
dd58b2f89fd7a589a4d33693d247cbb80732c29bd1b0fc0e982f992fa1dedc9833d0b509ce941e2182fb8566e4d90711525d36fa0b215a70b4b4e54fa2035bd0

Download Submit
C:\Windows\SysWOW64\Vcf132.ocx

Filesize
797KB

MD5
a2b042b1324143143b7a98d9c0268be0

SHA1
313b6e187f5e07c41d261be383775066f60bfb2e

SHA256
9fb4039eefce0d67f36f9a006b62ad99af5aec90c63b66d583355714a3af9f73

SHA512
9ceed7dea4bf379ff17366324ed00cb33e93311a052733c890b077e14c0f84ee69d0bf32265557af5413cf900aec9b97917a3d477be863de1ab5bac4ebac7cba

Download Submit
C:\Windows\SysWOW64\glxCtl.ocx

Filesize
732KB

MD5
380c8e00cd27fe19cd9cbf480b61c6bf

SHA1
e20f5af136d1a41be81f1820e60082fc28396314

SHA256
0c8a71954c04295a5682ee034ab0c55db0806b131efa8d8651efb8acd132e6ca

SHA512
a299d89be9ab79c4e1fe543dfa256ac5ef887fd511681bdf3c4d426a1637c0fb7e67193347a7c9eafb1caefa901140c205b1098c190e3b88397b20ad59b528f6

Download Submit
C:\Windows\SysWOW64\msstdfmt.dll

Filesize
117KB

MD5
719e0f4d1114f700f564e9ae47f0e3ee

SHA1
d0505b9cb3123e0f2407ab3271f9f2e33d251410

SHA256
3d5c3074fc645da3b68c859a709a5fbefb7df43f458af01ffda55bfc1456e7fc

SHA512
42c555262a9353ccbfd8dcb656a6396a82e5d7b9bacb37134450e3ad866dee06db292b40fd21cad17dd7bba43ed01acf0ba035e4fbf78d762e196de78bfd7748

Download Submit
C:\Windows\SysWOW64\vbalFlBr6.dll

Filesize
40KB

MD5
9fdb8a72d927888796a4e6a14560cc5f

SHA1
ed49dcfe5fd16c658033373d816e61d8173368a3

SHA256
e692ab331fa5753d619b5fbe68bd5ac44c57ad13d046048414f75cfde4065a19

SHA512
040358819a95ac368e1a67523b409e7e18c1d37444b03a14bf346f5c9183b8743d4f97011c0c5ae177b2bec8aaacc687416b9a6abbc2d692cc2307dd0b56c1c2

Download Submit
C:\Windows\SysWOW64\vcfi32.ocx

Filesize
1.2MB

MD5
df3633518d3ea42b93ade142f64fb558

SHA1
01b2b173592a7772a04ffa645a2514eab6a3ba16

SHA256
0ca2159790333ee8defb90a13651ae252bf101c5544ad4bf3bfad46806ee311b

SHA512
5679c244e809818a5826aa824954a9850330ffb9e6fe0f321d6375a443099e250591d155b9897b1e8fc31f53ded797bcfb715868f500184b92df4b0bf4ab778a

Download Submit
\PSR\Sddp17.2\Ihm\vbalFlBr6.dll

Filesize
40KB

MD5
9fdb8a72d927888796a4e6a14560cc5f

SHA1
ed49dcfe5fd16c658033373d816e61d8173368a3

SHA256
e692ab331fa5753d619b5fbe68bd5ac44c57ad13d046048414f75cfde4065a19

SHA512
040358819a95ac368e1a67523b409e7e18c1d37444b03a14bf346f5c9183b8743d4f97011c0c5ae177b2bec8aaacc687416b9a6abbc2d692cc2307dd0b56c1c2

Download Submit
\Users\Admin\AppData\Local\Temp\is-SQQRO.tmp\idp.dll

Filesize
216KB

MD5
b37377d34c8262a90ff95a9a92b65ed8

SHA1
faeef415bd0bc2a08cf9fe1e987007bf28e7218d

SHA256
e5a0ad2e37dde043a0dd4ad7634961ff3f0d70e87d2db49761eb4c1f468bb02f

SHA512
69d8da5b45d9b4b996d32328d3402fa37a3d710564d47c474bf9e15c1e45bc15b2858dbab446e6baec0c099d99007ff1099e9c4e66cfd1597f28c420bb50fdcc

Download Submit
\Windows\SysWOW64\COMCTL32.OCX

Filesize
603KB

MD5
a436af9c8705735b98077471fa93e9cc

SHA1
4f6ff00cedb6d684d685bc0e66e2135b8d348a93

SHA256
0a5958691d595cf37e4d4e77dee4994ec031558c1e9a94f019655a9319166e08

SHA512
dc3880df28906ef3f3edb55a7473428c546aa21af2e2e3a01b2783d760887b97e0483f95dac71057d45e98d72d338552d0a01d97c3112f361007e43f746e3d1e

Download Submit
\Windows\SysWOW64\ComCt332.ocx

Filesize
405KB

MD5
c24f1e7c15c6d47eced9dbd3e9b90d52

SHA1
a62452316aac2c65f5dc551d7ee78c694bc4a1b2

SHA256
550e7cd6b1fb270139acbb6903aa48aed8844251b2233627e4d36240e054fd01

SHA512
9f59577dd7a9232ba49aa0f21e1a427f20e26dfcc22209568d189631bfa2c704d35fd1da653f9556980b78c3eb0848b618c04e7a428fb2c8a8a1f4248e59c5e6

Download Submit
\Windows\SysWOW64\ComCt332.ocx

Filesize
405KB

MD5
c24f1e7c15c6d47eced9dbd3e9b90d52

SHA1
a62452316aac2c65f5dc551d7ee78c694bc4a1b2

SHA256
550e7cd6b1fb270139acbb6903aa48aed8844251b2233627e4d36240e054fd01

SHA512
9f59577dd7a9232ba49aa0f21e1a427f20e26dfcc22209568d189631bfa2c704d35fd1da653f9556980b78c3eb0848b618c04e7a428fb2c8a8a1f4248e59c5e6

Download Submit
\Windows\SysWOW64\Comdlg32.ocx

Filesize
152KB

MD5
ac9bd4138ba1cece3c25f62166b0ba70

SHA1
14b8593f4afc6dbd0f5b97d015bf50599d53a6a9

SHA256
00b5af20504fa3440ef3f9670a49963622d1a3557090e349f465746213761cef

SHA512
272d940a8eaff6820027e51b03adef1db66e5d7d909a39f0cf6532f792c9e22d47f18040247caa41c3d9bab44162a668b00a6845c445e58df7d1952b616c168e

Download Submit
\Windows\SysWOW64\Comdlg32.ocx

Filesize
152KB

MD5
ac9bd4138ba1cece3c25f62166b0ba70

SHA1
14b8593f4afc6dbd0f5b97d015bf50599d53a6a9

SHA256
00b5af20504fa3440ef3f9670a49963622d1a3557090e349f465746213761cef

SHA512
272d940a8eaff6820027e51b03adef1db66e5d7d909a39f0cf6532f792c9e22d47f18040247caa41c3d9bab44162a668b00a6845c445e58df7d1952b616c168e

Download Submit
\Windows\SysWOW64\MSCOMCT2.OCX

Filesize
643KB

MD5
3973673288371c24056feda47ad3cf96

SHA1
95c7e2bf35f899d0f59a6a89f10b9c0709e84e7d

SHA256
3f9deb6597ef95e5dcf094a56cc48f434e8686497f4628cc553c6e9c7d4c4797

SHA512
ec5df6e8d3828ae7a17c755637804c7e9b07e185bf0dedb281ae8a3b68a14c113a844cd39fc659d78ca73e742ce287e6b19236a870ce23517d78984f9f518ef2

Download Submit
\Windows\SysWOW64\MSCOMCTL.OCX

Filesize
1.0MB

MD5
e52859fcb7a827cacfce7963184c7d24

SHA1
35c4ae05d90f610c0520933faaca2a8d39e1b2a1

SHA256
45b6eef5bbf223cf8ff78f5014b68a72f0bc2cceaed030dece0a1abacf88f1f8

SHA512
013e6bf4762b1f90650ee6a1cb275607d1cad9df481362f42606a37f3a6f63de5cd0cdb0e9739df141b58f67ac079cf27be4ffe4937371972dd14eae18c58a94

Download Submit
\Windows\SysWOW64\MSCOMCTL.OCX

Filesize
1.0MB

MD5
e52859fcb7a827cacfce7963184c7d24

SHA1
35c4ae05d90f610c0520933faaca2a8d39e1b2a1

SHA256
45b6eef5bbf223cf8ff78f5014b68a72f0bc2cceaed030dece0a1abacf88f1f8

SHA512
013e6bf4762b1f90650ee6a1cb275607d1cad9df481362f42606a37f3a6f63de5cd0cdb0e9739df141b58f67ac079cf27be4ffe4937371972dd14eae18c58a94

Download Submit
\Windows\SysWOW64\MSFLXGRD.OCX

Filesize
252KB

MD5
20e06689d038e05795863694b5e1dcd7

SHA1
8183998f4cdc7fda02e45fed0b41bd90153ff944

SHA256
7827dbdbd340cee846a61238002e5d438b859c06c80e540f29130ce654cc0918

SHA512
cf47105c8bb236025b386f9c6e7cb96abd3484abf04960cdaee562f05c5c3b45e17699449d4e60333e55b0cb316433e6a0d63b94a9fe36d8e9adc2fc871d343b

Download Submit
\Windows\SysWOW64\MSVBVM50.DLL

Filesize
1.3MB

MD5
465025df6b3526d5708331ed3755c1a5

SHA1
75d05db7085de3222951eaa5fee2b74feaf88e17

SHA256
a441817f7497fa1c8b899b0a1f516e47d84582dbcc047f79d71d54c6ba8f5612

SHA512
905d695400bdb5a164a2a686ad380d211e265142a0110977f83e8c6922b51d2fd91cfe3d8db11b76f2c0bd893e9c6c792a1cc1129cd444e2d886252a13535131

Download Submit
\Windows\SysWOW64\PICCLP32.OCX

Filesize
97KB

MD5
0befc40200edaec3a9d0fb072013da6d

SHA1
00bfcf0a45a698176a537821888e8d1c0318f8a1

SHA256
1a1ce5aea1cb6667245a08016ec22fff06df2b896d94cb6419134e7212d31a84

SHA512
0164e3844bbbf606273f9317042a8c811ebcbe7c28bdf6b2de0d975203215aefbbef9ef578a20ca9cad06713ea429d403dca242534f5189f50d16871406d2834

Download Submit
\Windows\SysWOW64\RICHTX32.OCX

Filesize
213KB

MD5
4231528316b2acb6d40e797f55ccc1fb

SHA1
bae35cc2b2f6b62549793a3c5606cd14760f9411

SHA256
e777685f35a3c84e996d8090173a1df9b97c9be194ba3660d20d62b7cbe9cf12

SHA512
de0167df215ccb54f2939e1830923d3ec233c64069d4965d98bbeb5bc6d51d3c4e168dcea77d6301bd43ef916bfdf6b99bd108b778a764cd66f3ec199a527620

Download Submit
\Windows\SysWOW64\SPIN32.OCX

Filesize
51KB

MD5
c4b2459ea9bb1359be7bb4ed5c14d1f6

SHA1
e433d620200cfcb9129fb235d3bdf6c85f67be7d

SHA256
b7bf0aed206b180ea8647d0a1caf69290c9e006acf3afe31036afaab7a99c14a

SHA512
9e4e083d809b03ad924c5ffb024307207765e361d8cd11b8d1e7fcd617b6b5161cb6d8b7f75c5cab1f00d29cbb266906d0933d283e0be553a4657b06dc9979a3

Download Submit
\Windows\SysWOW64\TABCTL32.OCX

Filesize
216KB

MD5
79ed276aae03d4f62551871d8094f09a

SHA1
dd22410d74937caee7315c8e9c88cb018f4db8c6

SHA256
341d97cb88c04c4b566c82ec36d4ee1f2bca5e31bf04d240796277ce770b56c9

SHA512
9d3107d0e6d3c14e5e212e44e0fca49522a194095cf1fc57d67d8b707a524c231b0efc0c4229d8e2e6ea7d09e76a01c665ce488a39003ed47d6ee17892d9a896

Download Submit
\Windows\SysWOW64\THREED32.OCX

Filesize
196KB

MD5
51c9e8d775c6653acf5d87bdb2ebd33e

SHA1
74eb5f6a08b77c819bc53a0a5054877964d78ade

SHA256
8f317a229950e0393ab10e12554fd2c6be5b9496ffb5302ee6c24f567c944a34

SHA512
dd58b2f89fd7a589a4d33693d247cbb80732c29bd1b0fc0e982f992fa1dedc9833d0b509ce941e2182fb8566e4d90711525d36fa0b215a70b4b4e54fa2035bd0

Download Submit
\Windows\SysWOW64\THREED32.OCX

Filesize
196KB

MD5
51c9e8d775c6653acf5d87bdb2ebd33e

SHA1
74eb5f6a08b77c819bc53a0a5054877964d78ade

SHA256
8f317a229950e0393ab10e12554fd2c6be5b9496ffb5302ee6c24f567c944a34

SHA512
dd58b2f89fd7a589a4d33693d247cbb80732c29bd1b0fc0e982f992fa1dedc9833d0b509ce941e2182fb8566e4d90711525d36fa0b215a70b4b4e54fa2035bd0

Download Submit
\Windows\SysWOW64\Vcf132.ocx

Filesize
797KB

MD5
a2b042b1324143143b7a98d9c0268be0

SHA1
313b6e187f5e07c41d261be383775066f60bfb2e

SHA256
9fb4039eefce0d67f36f9a006b62ad99af5aec90c63b66d583355714a3af9f73

SHA512
9ceed7dea4bf379ff17366324ed00cb33e93311a052733c890b077e14c0f84ee69d0bf32265557af5413cf900aec9b97917a3d477be863de1ab5bac4ebac7cba

Download Submit
\Windows\SysWOW64\glxCtl.ocx

Filesize
732KB

MD5
380c8e00cd27fe19cd9cbf480b61c6bf

SHA1
e20f5af136d1a41be81f1820e60082fc28396314

SHA256
0c8a71954c04295a5682ee034ab0c55db0806b131efa8d8651efb8acd132e6ca

SHA512
a299d89be9ab79c4e1fe543dfa256ac5ef887fd511681bdf3c4d426a1637c0fb7e67193347a7c9eafb1caefa901140c205b1098c190e3b88397b20ad59b528f6

Download Submit
\Windows\SysWOW64\msstdfmt.dll

Filesize
117KB

MD5
719e0f4d1114f700f564e9ae47f0e3ee

SHA1
d0505b9cb3123e0f2407ab3271f9f2e33d251410

SHA256
3d5c3074fc645da3b68c859a709a5fbefb7df43f458af01ffda55bfc1456e7fc

SHA512
42c555262a9353ccbfd8dcb656a6396a82e5d7b9bacb37134450e3ad866dee06db292b40fd21cad17dd7bba43ed01acf0ba035e4fbf78d762e196de78bfd7748

Download Submit
\Windows\SysWOW64\vbalFlBr6.dll

Filesize
40KB

MD5
9fdb8a72d927888796a4e6a14560cc5f

SHA1
ed49dcfe5fd16c658033373d816e61d8173368a3

SHA256
e692ab331fa5753d619b5fbe68bd5ac44c57ad13d046048414f75cfde4065a19

SHA512
040358819a95ac368e1a67523b409e7e18c1d37444b03a14bf346f5c9183b8743d4f97011c0c5ae177b2bec8aaacc687416b9a6abbc2d692cc2307dd0b56c1c2

Download Submit
\Windows\SysWOW64\vbalFlBr6.dll

Filesize
40KB

MD5
9fdb8a72d927888796a4e6a14560cc5f

SHA1
ed49dcfe5fd16c658033373d816e61d8173368a3

SHA256
e692ab331fa5753d619b5fbe68bd5ac44c57ad13d046048414f75cfde4065a19

SHA512
040358819a95ac368e1a67523b409e7e18c1d37444b03a14bf346f5c9183b8743d4f97011c0c5ae177b2bec8aaacc687416b9a6abbc2d692cc2307dd0b56c1c2

Download Submit
\Windows\SysWOW64\vcfi32.ocx

Filesize
1.2MB

MD5
df3633518d3ea42b93ade142f64fb558

SHA1
01b2b173592a7772a04ffa645a2514eab6a3ba16

SHA256
0ca2159790333ee8defb90a13651ae252bf101c5544ad4bf3bfad46806ee311b

SHA512
5679c244e809818a5826aa824954a9850330ffb9e6fe0f321d6375a443099e250591d155b9897b1e8fc31f53ded797bcfb715868f500184b92df4b0bf4ab778a

Download Submit
memory/2332-121-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2332-136-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2332-2617-0x0000000000400000-0x000000000042C000-memory.dmp

Filesize
176KB

Download
memory/2532-2599-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-2124-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-2108-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-2096-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-2089-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-2134-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-126-0x00000000001E0000-0x00000000001E1000-memory.dmp

Filesize
4KB

Download
memory/2532-1656-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-2565-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-236-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-137-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-138-0x00000000001E0000-0x00000000001E1000-memory.dmp

Filesize
4KB

Download
memory/2532-2614-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download
memory/2532-230-0x0000000000400000-0x00000000004D6000-memory.dmp

Filesize
856KB

Download

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

DNS Request

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.