Analysis

  • max time kernel
    148s
  • max time network
    48s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    13/06/2023, 06:02

General

  • Target

    WMOSetup_4.1.8.121.exe

  • Size

    5.7MB

  • MD5

    5de060885334a3bbb4e50e044556182d

  • SHA1

    562824680819e534f396a26d0034bc65bf581641

  • SHA256

    563e1243b3cb67409e1c8e39cbb175a8962d6b3c49a8c3bfc551735fa1eb69e7

  • SHA512

    0673faff06e705daa7bc7c286a04f6b45117f62350b1548251fa87864e7441f961a4fb944d5c4a7a27d45543abf2b89553d0cc24c6b3d8914a40390e89d972cb

  • SSDEEP

    98304:x5IC1/FHOo8j+Lcxoxe9nQyYmjl8ASbTM/Dlss8M/aGixAhRLOaafbB:YC1tHO9jeyXnQVmjl8tOVaGixO1+bB

Malware Config

Signatures

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 59 IoCs
  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 8 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 26 IoCs
  • Modifies registry class 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 28 IoCs
  • Suspicious use of FindShellTrayWindow 9 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 15 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WMOSetup_4.1.8.121.exe
    "C:\Users\Admin\AppData\Local\Temp\WMOSetup_4.1.8.121.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Users\Admin\AppData\Local\Temp\is-D96S6.tmp\WMOSetup_4.1.8.121.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-D96S6.tmp\WMOSetup_4.1.8.121.tmp" /SL5="$70122,5581784,123392,C:\Users\Admin\AppData\Local\Temp\WMOSetup_4.1.8.121.exe"
      2⤵
      • Checks whether UAC is enabled
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1688
      • C:\Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe
        "C:\Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe"
        3⤵
        • Executes dropped EXE
        • Modifies registry class
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:1620
  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" -Embedding
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:316
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:316 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:1784

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Abkhazian.ini

          Filesize

          4KB

          MD5

          8f30584ab967629c5f958119b47e70ab

          SHA1

          1315f62bdf5c9d1bed492c35e581f80d7771c062

          SHA256

          1e8eac8a7fd7ed41c0b7674923027508a9eec512b06017067134ebb7394cce43

          SHA512

          f89364ea7a98a9ed4211faae5d5614c1ca08dc3ea5fe465388c24f3a7273fadac69c2d297a8074c0bd5f6b64bcb22ef821d11076376a7bfbd3f66c8da905501c

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Arabic.ini

          Filesize

          3KB

          MD5

          b3363d34c7c815efa5e597a94f8f5ea7

          SHA1

          82bdeabaa75f707e44f7ced8ef3f9d4b270e299a

          SHA256

          3be08c1523020113ecb74e572525c2fb398bc584208d2cc95b2852b36d90a490

          SHA512

          981b956aa6d2cce9f4aabbc2d7ef430e1243f477b03cebf910152fc8ba75dc67c1e2a5b848d1a5d9e3341abbe7ff7b73536117f07dbe82cf9c2e78e61d3a7112

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Armenian.ini

          Filesize

          4KB

          MD5

          d2f81e9b691314f845595adf27ad389e

          SHA1

          1d898f6ac0e4a180f675dc8dbc71c6e76815b455

          SHA256

          61e8fc0a481135de1367201fbcebdb4f4f06be87d4d878eaf44f8deb6be1482e

          SHA512

          7a1e3545348da393ad352fbef34d20901f62340978c1d03c08f63288f066a87ac7d8d5abb54467cc841f7896c1a6781d38a0955e0f2d84779c30258a38cf1d21

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Azeri(Latin Azerbaijan).ini

          Filesize

          3KB

          MD5

          081e9f670c510cec35818f49a2a59f2f

          SHA1

          56951d2fa071f241b08dc2e91bf4e7fc6688d688

          SHA256

          76c9c4bf94598f62805fd582ed5cf459a52a3e2745860c35f738896d1e4f0fb9

          SHA512

          df1ea4811170d08ddeb7f56ba2f173df7222771d1eebe3aca5738342156350d8d602248b203f5f7b19f6f95c192c1daa854928212b68eb213bbedde8fdbce2be

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Belorussian.ini

          Filesize

          4KB

          MD5

          4ee92029952e7017a69d53ab4f03a9dc

          SHA1

          0803bf11f6a4e3b515662cbfc12bff48b60162cc

          SHA256

          f8c9ebea6598222af909de2dd41f19b1ed66c4ea6e4a2ecad67c3cbb009f74d8

          SHA512

          5b5c20a58db795e6a88dd71b243fa3e6d1fcef48138b9a7c95e784f2e2c38a036b0d9c053c57b9cb45fd128f5eac34c97ab8e77f59a0370cb89cd8037a068cdf

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Bengali(India).ini

          Filesize

          3KB

          MD5

          3031f11cee49120bb1c86fd64675616c

          SHA1

          778a7dcae33198912be016b7f5df6cd07855e352

          SHA256

          178396933bd2649df77a978e5fec038794cd58a7365cac939e40e1c8e6f91195

          SHA512

          931450674794c655585d367a4743b9fa43e6ab6ddf64296067b7f56accad4b02404c4f0c31b7ec81bb56e14983e4d4bc4884fa0eb6a4f33f96cb7c786ba2418f

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Bulgarian.ini

          Filesize

          3KB

          MD5

          88cdc8f19d67215cbf2811fe6babe531

          SHA1

          dc9d415ec90e9bcddaca767452dc096fcef988c2

          SHA256

          c8630ce3fa24b69f63d120218d403345c0f86d5c1c1f02f7ccd2ce257a57f2d2

          SHA512

          97117dc76467d07fee5699c8dc84fa3e3d51828be63e0a23fdb2edde6edcde49a896d7d77f28994685588984b2e9198e499ba18f32533d1f8aac88f38f514666

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Catalan(Spain).ini

          Filesize

          4KB

          MD5

          fbb1e94c3e71ff1217e9b3f039f39c00

          SHA1

          37886d15d46a6b8bc672761ece8c37a20dada35a

          SHA256

          39366e3c44a6570ee5c75d86cced0816d6b77792e854b5589810423564a020b1

          SHA512

          82af594a2301a57ec3a1fc36c08ad819d333db8ff7095eab20b4bc56f40ab1c7b5ee56c8fb8687e97b5299c6b22b57b49e138fdcbd5530413f86e4bd7c1fb51e

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Chinese(Simplified).ini

          Filesize

          3KB

          MD5

          d2ef921e3f6df78fa78cf119ca2ecb24

          SHA1

          d84cc3b2324cbb9bd8b92cf04706c351dea8783a

          SHA256

          b1782dd3db7ec5ef5d05aad5e54d5fb0f3d8f237b65ab6ea81bfc3bdf8c0a483

          SHA512

          31cbe1b9a82fd62531b0b3faa7cfa9c357d34a9cd38d70a6614fe2640804dc4d06225dcf4a7395c256355bcdac5631bab5b716130d834dee22175541a86581d7

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Chinese(Traditional).ini

          Filesize

          3KB

          MD5

          a777afd66b5b585fc9a83da66d7ed4a9

          SHA1

          8bac1f84e66e9a38572f6b0fb2ec4f2580945def

          SHA256

          c4e2cc458d9e10f05d4c5b9eb24a436cdf5ef2e3ace1a809b6ad82529ecc3ec4

          SHA512

          ab08f0546f450e2c84de41051989dc3edc4d26d4aa397ceb084434529a07450c55d94262b3ccf615730f541fd6d61c1fcafa595978c182da95e298c4fd5f7aac

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Croatian.ini

          Filesize

          3KB

          MD5

          b3557914193aad70784116c37b10374e

          SHA1

          bd654a1a1bb2c95d107c849ae8f89e005e7060a9

          SHA256

          6ef39a025be45bb21ac990ac04421ba9e5342040b4120f685a303317cc3fd3e3

          SHA512

          23b9226906a5d8a067c8e8fa8750c973f2b061345d53c3b913cd880ede1228d8db757c888a43ef9e8d65e1b2a29a7a33910e95f21f2768fec596e6fa153a705e

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Czech.ini

          Filesize

          3KB

          MD5

          a1605e01793c87ac35bba7471a668fcd

          SHA1

          d453f7fc639a9db7def75df3fa4cf4a6481cc0b0

          SHA256

          d1485f476edd2372fb22ab1ceb5f18bbee1751c1482c8178241f23082b388d9e

          SHA512

          70dfe054be968374bb97196b21226c2ee166cd8762a318a3c83f5b91bbc3fb0bb7eb963e019e4de892d940937370efb89b62547175d91bf9ad68991491f470fb

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Danish.ini

          Filesize

          3KB

          MD5

          e2f1252696cf7b0d386da87e3dd10979

          SHA1

          063d2653d93952c9dd8b040cfb572d5517480087

          SHA256

          ee97b3d104065c760d25eb1c9d7ecea1f0236cd1e6edc3133d5ee7e2b2b96089

          SHA512

          494967dbdf8303da641c3a70f337debe1830be86e9bb16b4df111ef2985672438f13e1de998b53f5f41180c2ae006670b9ca679cc993ac76212a9777469f00eb

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Dutch(Nederlands).ini

          Filesize

          5KB

          MD5

          ce80fd506caba5b60c385dbab7c2bf3d

          SHA1

          6ee4fa37ee6a67bb4caa058977daabfe1aae87f4

          SHA256

          4ddcf665e5149402f88f3c7c275aaa50c9858b67fe311671fd301fe8132e8afd

          SHA512

          ece5723b23cc90654fc18baed1205cf1be05d157a4472873b9b398fa9006b6917d884d378ccf9b138f146c262311d22c09f49d3b6a63e2bbcc6418a27c063131

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\English.ini

          Filesize

          5KB

          MD5

          62938e10857eeb27cfaabae7b40376e9

          SHA1

          48bf4ce22faa7ec36176ec900cac9b47109a146e

          SHA256

          71bc321f19f4d0ff94d33ae9f5ebc1ff30c8e40ab9fa18f77c25c6a4a271e121

          SHA512

          ac40787aab3eb2439676e05b050529483460e85b2b5c724f75928f735a9d4545aba57208b9392d3d7e8c7260e8818d736a9afbe94ff7d08c0629e9f5e154f409

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Estonian.ini

          Filesize

          3KB

          MD5

          284e56a6ded64ab9562f9d611ac937ea

          SHA1

          87a55001849b9a61d8b4369b5df59d0d26ac841d

          SHA256

          9a8a63ac8a334c2ca700f90a3c09b44b29b8fb7beefc7a96bf3378e6803f2912

          SHA512

          4fbf6c8c17b242b97fe5e953e1751de0bd5f4053f4c7598f2076bfbb26d8362ce63d277da634c440b12be6aba77e67d14757321b04ce99cd8c734b14edbfff57

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Finnish.ini

          Filesize

          5KB

          MD5

          c41ab0a6b9177e4a8dc64ead1ba175d0

          SHA1

          87c34464e53840fea999a4d8538bf8597ce9b4bf

          SHA256

          1d56fd211f9c452592a9f953a7fe12009288b089a77b47418a70e376d9465d00

          SHA512

          a4976186fce8700d687bb70a966fc4a528ac534e0543e4df7e52c14687150e62e49639165132ec441e9cc5c96f62a294d919c150207b911314ebe17bb71c05c5

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\French.ini

          Filesize

          5KB

          MD5

          d633e60a2feb463e71576109d1dda11c

          SHA1

          072e77176a0b4f5e3478b9410cda25620c5c83e2

          SHA256

          8aaf68b67279fce5ab8fea4a5457308fc5eca33f3d4b42087868071322869140

          SHA512

          5f92163ab571e1a8e52f74789f22e49afb3d2e647c3282c359030714420d1b8d540a895d43c7d506c5f4fd9fcb24bcbbf623484f234a58c12a3800f4ccb39b28

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Georgian.ini

          Filesize

          3KB

          MD5

          a18bc14edc909a2caf6457835a6aee8d

          SHA1

          eb0d9ee871cf92daf2c8f47a58e3cd6b9188db2b

          SHA256

          584c25bb188f31a72b50c8b30720dea77ed117139f7a7910ea6639bee5682c1a

          SHA512

          554cd57c15b8d5d3abc6a8eaa37266e32b36449ea73ee5b9ca22a41f2c71bf0e89d67a21d3b674e6abb229a881cb3f6ca0999cbe30d7393425da3d1de0618085

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\German.ini

          Filesize

          4KB

          MD5

          bab781c6afca1b727c804262e01e5127

          SHA1

          fa4cc8c319156b49b1a04e602a2e5002b968e916

          SHA256

          ada7b10eb7d78ae72fcf5b20b3ebdee340bdf586ce117d71b8be7d014290a724

          SHA512

          ffac0d03d40c820f18d5034c49546a2867091202ffbcacd618e8c385c162ce12503f483ce93933271b0533437857187d1a3535b28447413f7715602364dd4a1a

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Greek.ini

          Filesize

          4KB

          MD5

          4ba4091b45fbd645bc76bccfef78f6d4

          SHA1

          982d6388609f5ce9751bd502b75206240505a62a

          SHA256

          d6ef27a7c52448634746b9ed03cc3cfb3099064ab6bcac40598dc7931a0ad19a

          SHA512

          69047c2637d7c7bdb3573bd21ac8839bfa91cc9d1b4c6ef9c155b0f0f6dbf8a5b7027c2642b469bd120de60da6f977a5434265b1bc329efdd6ce9c4e740f1dbd

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Hebrew.ini

          Filesize

          3KB

          MD5

          a15fbd6cb7b449b228006125d61a3152

          SHA1

          fb22274c585dabd3e2b4862ed6f5030c25642451

          SHA256

          7921aba89a6a1386925c28d44f87d23e8cb143e1591bc7b968dae01f987c4d66

          SHA512

          8326065b5ef750f80e783747ff64c2aae4234d299079583bbf10f1a7b71c412f7223167abf0c9ae16de12e893aec859360acf431d298f973503ea2ba94c1f530

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Hindi.ini

          Filesize

          4KB

          MD5

          254fd8a5a9b15a170d602c4310c2098a

          SHA1

          185b62cfa93e0c91efd6bd101c27a74aea54228f

          SHA256

          0f86802fc5de8219ab5b22e22f4be5d5fa027eae1b48abc0e8737fea7cc59fe7

          SHA512

          10ff7fd1d07a65e9a0bfe050d15b4ced3f8fdb91d9583df13ee0f91adc2a81e006c1e98585eb700b374f41b81cf12c9f4682020d6d7fff8f5a38ce9e2ca1cea6

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Hungarian.ini

          Filesize

          5KB

          MD5

          cf3c7a4b3b6a1dfe11c13d9b6c670ca5

          SHA1

          34bc38e6a9bec4754a966fc31695562c9a981f73

          SHA256

          ea19efc59d82f0772071723f7adfc9312e60cb8d96c131ccf86e169047dff2ca

          SHA512

          5fbd6879de1b2ee2af3925ed6f6cafbdd3201892e8ac28571f4c78ef07cd5c4583f8cc218f24007922d93ac1c26f4c90fb88e629e77c51ff200d4dbd3688350c

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Indonesian.ini

          Filesize

          4KB

          MD5

          bb65918de37eba3cbc9cbca2cd62feef

          SHA1

          87d6b547cedbba47ebc4445e05a2eb40a3d853aa

          SHA256

          bddb46ddc7754f7e57cd8e11c312e674f508169d9ade07c6aaede1d63f0417bb

          SHA512

          b437981554a8e6cd4bb35c7f36255a743130da9ac62648d438878ea2ab7a535f3e6d7500344b231605f663742eea580a921cbd2e634d29c96f2b6c0b3ffdbfaa

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Italian.ini

          Filesize

          5KB

          MD5

          050138b6f0e2e5ea413d9bc6000a5e54

          SHA1

          a1edf2c262674436a54d737673f2495dbfd14215

          SHA256

          0f823361082575230ad7d0b740770dc68fb7a3ec147502f482e1f72622de39d8

          SHA512

          7d7275a941f67953695a81f4935b5c877c255e82120d06d8bc380857857fa394da040f2f7304700d27ecad62fc63b65947a3ea5d639a801732e22c46e549ba51

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Japanese.ini

          Filesize

          3KB

          MD5

          fdc88c5f7e6fa238b1ed9c98f6152652

          SHA1

          3604a11194ca0d8ca2d2b770d9e3b74cd76b9248

          SHA256

          002a0a2abefe23aebcebcfa4619c0ff56538e1db46da9c48d89b0a60c33e04ba

          SHA512

          6bfad377732f629e1b5350253818c4ae22abce2d960aa26b517262141844473b88fdf391d02d5d104ebbe670deb9e9e4e7b59fe0a23ac3725c8667cee8339fdb

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Korean.ini

          Filesize

          3KB

          MD5

          5b9f4942f58e14a4228e54664390cc0e

          SHA1

          98a34fc30fd17a1f7d0afb59253c4243ccdcacb2

          SHA256

          d58cd66ba0631aeb3e5c63e4d57f5bb4320b9052ae340ca97eb5da2eb815fd0d

          SHA512

          9a6da41a5d3602eecbe0c25a4eebb68ec8ee0f655b706d083b21b992778503909ede0731a179884a87c21b0560531c8166a19221caf4b3771fac553ba22d7f66

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Kurdish.ini

          Filesize

          3KB

          MD5

          9cc0371febcc9129008f4c35337e99b8

          SHA1

          ed04c65b95f0676d6781a1e8973564f4badbe8cf

          SHA256

          6b7b1ff79ada9f95599ffbb8ad49cdcaf152e055832eaef653f065d4343a47f6

          SHA512

          edfda36c3f31afacd2f426d32bb3f7a6c305d731d05844eda956b035680cb501e51fd2e70936bd9cb4de5bb70fd86ea01ea2d1d57d497398da1daaab24cbe6c4

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Lithuanian.ini

          Filesize

          3KB

          MD5

          3dbdffa09f08279f434030976f6d6d0f

          SHA1

          b61c0e80696b843a16009338d3f1e3ab0cefbb1e

          SHA256

          d6dfabbdc51bff19293ec058f703a9b43918a7b32d275854872401961ee2e854

          SHA512

          8455ba58beec6c59ebfdca3291326587283e99388130659fa9d026f921aac687f673ef732b08fa8138d28664e89a388a14914cafaf2d5b05f403c3763f8c321a

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Malayalam.ini

          Filesize

          3KB

          MD5

          86271c5a2517d2fead2526123046517b

          SHA1

          b4b941be8b62343445d47d89de2636fafc9a5695

          SHA256

          954d8d6393494e3f6e75620e3442c51256514c632e0d59e4ad02db39d97311b0

          SHA512

          7c4ea8488a59d70318a57624d81b0182a7c621c065a0013e455065624547509c8971c1b88ef5d5b4f23b03f5472393ee47d485fba0abc3207a98a6cb0f246d94

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Myanmar(Zawgyi).ini

          Filesize

          3KB

          MD5

          7341470ddf7d22732d9ea82ec08cd174

          SHA1

          440d3fdf8c2d27cfa4bf4485d3363795bef8c076

          SHA256

          e9387615bb81b9083afe1218c5603624a5506da565ac5517f6a2279a9b4fc1b3

          SHA512

          3fad9f7ca944fca558621a34942a53dae7da0ae306f14353c117d2ae9b467dec0eddfab584ddd911bc6c4ffc651cb9b4f9f4c8cbf97e3157ac05514257911d2c

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Nepali.ini

          Filesize

          3KB

          MD5

          00cca7d51ebc2064d90674b16ea28bac

          SHA1

          ebda8110768d2f366e8ce2c46672a724a0dfad0d

          SHA256

          84c31ebc62f0f07cfd56205be78b097754bf73ee25ebd1234eb7beb50649d590

          SHA512

          573b3be6b61fc1e1854f3a416606897ac27984d54c8650af048c2201fa7876941c120229b23d16eba6e7f64451c749ea402e52fce689a9500c781f98e2a379f8

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Norwegian(Nynorsk).ini

          Filesize

          3KB

          MD5

          898d43845eac8be153deaddc6fdb9238

          SHA1

          d8047bea6edca5a2818ed702fadada169f7ef00f

          SHA256

          68af11aca53f77fa83e3e3277ffbf1d67cea4cfda4f0c7917ba1a15dd48d0116

          SHA512

          baf5020370e7351f5b741462d471d80d9b7d43dac1f5668e21a642a05c00ad7961bf2b2efcdded88a84251dd7397f07ba56f62afa3c00929bf0d52807789fa86

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Persian.ini

          Filesize

          3KB

          MD5

          8c1f30d9b69d9434311309f4c8838579

          SHA1

          403014b4e1713720887df3ae3a56429e9aef32ae

          SHA256

          6d7348b1a0518fc8a587787b142133c7f5319cddb04c766527f8d48d8a3b33c5

          SHA512

          52323b14de64a38875771b371c1274b8838099793837d89a843fe38b36089fde512152948835a587782a1c85279dc26d5080008626bf32875ab7cae243480fb0

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Polish.ini

          Filesize

          3KB

          MD5

          b3612b4b65c095c4922d157de98e3d0c

          SHA1

          26aeca8fb4137483edd9e95c117d75908b86bf95

          SHA256

          0b4339914812e321346d20ca8e86d4d7669f738ecdc0f57f95f2a9d82685856a

          SHA512

          bf2d085e5d3003298df825383f1d0e71cd2dcd846021034bd889b7528804f8c1897c3db191eb6cf2c07c1e3b10b0f6e63f4ed0e3ab769a1a64a550e4f7a53292

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Portuguese(Brazil).ini

          Filesize

          6KB

          MD5

          820d94ba2c875ae1aa72c9995e54658a

          SHA1

          394b6d5dd8e9095c22c8e2d4d7e2f0f50d7cc0fc

          SHA256

          399fffe5bec5f93b00a4a892a50c3c60d07dbf255f21d932b61f1d597c8fd9b1

          SHA512

          70c5d359d56a7ac71d477b7dfd216933684b65833e8e058428f59d06cc0f691c60b33ca67f71d6713d543d8a80a2ee87da91b397018e152be8f6dc049d9816bc

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Portuguese(Portugal).ini

          Filesize

          4KB

          MD5

          66329295d1648c6496f5c90a75ba913c

          SHA1

          014d3762bc2ec6abf727b2699a6e4c506d20157c

          SHA256

          910b2e25ec8b6d6b7f81dc31e895ffe4ae05adc8d911a6bddbc52a2f25ada224

          SHA512

          cc4edb38d9a107f2520c57f7feb25f33637809108a6078192b24a2521b8a3663a2073229f97a3fd09d02381e800aeb61215b2e4b657053dac19c8ee6950ea96c

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Romanian.ini

          Filesize

          5KB

          MD5

          5bfbfa365c8e345f44995a4f26f15b27

          SHA1

          b390198e34ee868800840837dccbd414d554ee92

          SHA256

          ebb9e1b26c9697389165ddf236396cb531b7e74b549d868cd969729b48c86da4

          SHA512

          aa8aa030f2d1c6068a0970e10473a0871dd16da0b5d207dd8d4eb129f6bfe97f5de94d19de121237aaf7af3727b5931c9fe0b9f9f1f39730a2685fcc00168675

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Russian.ini

          Filesize

          5KB

          MD5

          f0ffcc54002f4ad26a62bc6ec5cb2f35

          SHA1

          22cd2de407fcf61b28f41f378f70fe07008eb0a0

          SHA256

          24dee2fe56c5c5ec945fa57a1961b4fcb9b26ed5c5cafdf53ef89cd504a5061e

          SHA512

          b65eebc3acfa32c876602bd9b279ab20376f2e50286c197d7b76a9af23be8b5e6b1feb0ef208993c946770949bb484785cc4ea03a6b3b90c3b2e2b7b530aadf0

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Serbian(Latin).ini

          Filesize

          2KB

          MD5

          7e26afe5dd5dd0e39f8f0f740340cd7e

          SHA1

          24a5a9aa20483514d475c22514c21096598917dd

          SHA256

          91926986b8e33905f43dcc57e29ffc3d427e124a24f3a657ce89d6672fda45cb

          SHA512

          3bc1f9a107ca12eb589ce9289b5f2a1826b213e8f204c5e916b94a046d64832d811e717f1faeb02dac0b780bb609654ff0558a1c41999b9a5163d08a301cd03e

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Serbian.ini

          Filesize

          3KB

          MD5

          7d0054a71f1573a195b64fc163c8ad8e

          SHA1

          a428dee27eeff1a2df895babb853d793386bdebc

          SHA256

          ed1f8f6b1f9ff524d94a41c72a059d102550680a414e15f90706791fc1a8706b

          SHA512

          2e7f888f09c02177cac60c1f8a47ce03a9a41fd4c6f58a057979f9e82a960ed03dba82a35483bb22615300d8daf3ef85b58ca803e7f11311f7c87d44a677c145

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Slovak.ini

          Filesize

          5KB

          MD5

          00d6b6ffda8719c82b0f556c71cb69b7

          SHA1

          bdaade0a1e43ba6e950e9337e3ecebe803c2bbf8

          SHA256

          ce71951a292b23cd1e8e0ecac2f83df19e9b610f4e1d1c817bbd814826652b0d

          SHA512

          11d23e727c33cf263c05661274605b2bfaa1774277d6282ba6bb5977aae01095953539b160deed109e03ad1e991cdabd1c10404ef794d612bc2b105f3a2f7d16

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Slovenian.ini

          Filesize

          5KB

          MD5

          0b7af78db2bac4f93929a6366d650221

          SHA1

          8e20f7e5ae7b3e4a3e25b3e5af64ec7207c43321

          SHA256

          83e567c7127cd15709b08e3b3b40e433ac15cb84633f70d84d50aa75ade3d0fb

          SHA512

          334142b2f0a8374ea7edcad52c85238a986ce900e1a38213cdbdb311dbdea00eea6bd6691131f31a77dedd6abad56013f523605c532faa61af1f9c2ca239ffce

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Spanish(Spain).ini

          Filesize

          5KB

          MD5

          43bbba97d8a5da8280c8ca330116f3d9

          SHA1

          9794d0a6ade4ffb3f264bc4ca462bf7b7eb9babc

          SHA256

          803a43c372c919cce2150d0d78824811379d29bba8e2013a860c00d93f5a6def

          SHA512

          29d342d62b6125470b6726369045f80f85cffca377ac2333d472c6ee43e54bb458d17e33c7ca78c62486ab5150b650a900e09b03d17a835ffd3e6a624e9d3a81

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Swedish(Sweden).ini

          Filesize

          3KB

          MD5

          266dce8c02d2fd2f523a84de36c5c5dc

          SHA1

          fb2b32758f9fc8c70b79d7762905e3ca80f357c8

          SHA256

          f3890c6560680bae6be3112a60fa7aa68d1471be414bfa683a1718c4f94da765

          SHA512

          ba39c2b41aa137c3695a139f74ddb4621ebeeb0c57982799cb8048ba057c32b4796b999d8bc9dd76d4876060e0d1582b8ec1d8d6f9efaa8f789ac81d173e2c2b

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Tajikistan.ini

          Filesize

          4KB

          MD5

          b0f98eb302c90fe563015e44cb0f239d

          SHA1

          e2b9db4f1c4bab67de44369d572383aaadd7bd71

          SHA256

          3bba2522840dd66264a485dc2311162631f84d849d27b2ea646303261abe8a18

          SHA512

          b208d5da5405a82aa77eb83c24e6bc1478b7e96a8f523dfb1f38b5a6b71546d55333fcaafe5f110b8a149342256044faadbe7b45df44203c9c7693befd3f3d5d

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Thai.ini

          Filesize

          3KB

          MD5

          a5d892f023a837ee7c44277addbb0a89

          SHA1

          ee9ecf64a5db4e37da469e35cfb11f09b7ea9985

          SHA256

          46aae4ff25afa0f1a724c48e291af2fd3a97aeec7b20448cb05d1459f94f6cce

          SHA512

          6f65761f46f5286c14f2caa48523aeae7f6a840c3524e97cbd10c6ffb11539af9209edab32e02e05d15be0db92ed15ff3bada37a089959b78bfe9e1c6e33a684

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Turkish.ini

          Filesize

          3KB

          MD5

          8c6b89628ca9364b67e5d634d694d0b5

          SHA1

          abf9448659c935c5870a9021c9542bb65caea825

          SHA256

          61287524606be469306cece9933a45467475d8820d666c181117f0b53821d938

          SHA512

          02242e7abb71a3db654db50d56b07626b83865546932b362e7c631656732f1acfcd24407018dbdfd7e8b43a888ddd1c6b097e2be4c25538b883f38987a4213b9

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Ukrainian.ini

          Filesize

          5KB

          MD5

          e90fa890aba25543d6ebcd4c04c6ee80

          SHA1

          af261fc2f87d44203dc24af485cf4854b8225a54

          SHA256

          de4c53fb32fcda1b9a1dc396bb5bca858e768ce4be2194cb96cfe3e45ad79ebf

          SHA512

          0e91b91ab3ba37a3f68422c03c2b6f01496812f44e38ab33f9dd8fceeea668631235c91b4d88944ca2ae68d4b76f6db483de2bb4737993613ca40383dd6541a1

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Urdu.ini

          Filesize

          3KB

          MD5

          b1e18d8949b46ce3f9736f5a9d0ae9d8

          SHA1

          0296276b152004406864b4acc864e9c13981ace7

          SHA256

          fce01e1d0a35e90c0a87e102e7bcaf4ab1f4ab9d19ce4864d32bb6e2542f5b12

          SHA512

          6f5173598069433316263855dad63e0841ce0e811560d701cf9cf9fc0d5b9d5d433d317214fe35de51248ad8cb8533118fa99c8c464085c625b9a37fa5e10c48

        • C:\Program Files\Wise\Wise Memory Optimizer\Languages\Vietnamese.ini

          Filesize

          4KB

          MD5

          31b1131f7c3f6731aa24620ea8d949ba

          SHA1

          d9d2891aae8f398d74fb86aa46aee200f3e35085

          SHA256

          5d5c6da76cadf9ba6009949a9b29abc0f2d4078bb0a84ad60a05faa4e63fc6d4

          SHA512

          5b0ddee14cbe6cea1bf9121928f47f92e18968fcff8aba9706c7bd4e01afe24f06e674075fd0c12bc5805c3141dbad2aeb213b3108c6bd9ce936751c87ed4678

        • C:\Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe

          Filesize

          12.1MB

          MD5

          a05cd5d41620823a73ca4dd459a263fa

          SHA1

          aa10699cb4b2458bb686a4339a3a90663747e3e4

          SHA256

          cb8ea495d2ae77bf4b2365eecdadbe409bc73369844f83f410c60857ac688610

          SHA512

          4dfcbc79a3e2f88ad5d29d249c2e3d414acaf920bb0553c6bae128e318cca9d7da0ef1a37be1734680c7bdd4ea0a78e1afe306909b3d0cf91ecd188fb4af7efe

        • C:\Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe

          Filesize

          12.1MB

          MD5

          a05cd5d41620823a73ca4dd459a263fa

          SHA1

          aa10699cb4b2458bb686a4339a3a90663747e3e4

          SHA256

          cb8ea495d2ae77bf4b2365eecdadbe409bc73369844f83f410c60857ac688610

          SHA512

          4dfcbc79a3e2f88ad5d29d249c2e3d414acaf920bb0553c6bae128e318cca9d7da0ef1a37be1734680c7bdd4ea0a78e1afe306909b3d0cf91ecd188fb4af7efe

        • C:\Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe

          Filesize

          12.1MB

          MD5

          a05cd5d41620823a73ca4dd459a263fa

          SHA1

          aa10699cb4b2458bb686a4339a3a90663747e3e4

          SHA256

          cb8ea495d2ae77bf4b2365eecdadbe409bc73369844f83f410c60857ac688610

          SHA512

          4dfcbc79a3e2f88ad5d29d249c2e3d414acaf920bb0553c6bae128e318cca9d7da0ef1a37be1734680c7bdd4ea0a78e1afe306909b3d0cf91ecd188fb4af7efe

        • C:\Program Files\Wise\Wise Memory Optimizer\unins000.exe

          Filesize

          768KB

          MD5

          a742dbbc00411c27be705e6d60f18167

          SHA1

          ed1b0e768547247e98ec2108a289a9ddc34be996

          SHA256

          7620688e7e625765ed05d1053e9753473b119294b3bac0286a998e570f571d4e

          SHA512

          facca70773f05deb150be3d12f73eaf69ec4963626e68a0af48d66b6924f5a14399f3e187db16ae57a027cd6a35f3ed3041997ac93682559645c070fa7122616

        • C:\Users\Admin\AppData\Local\Temp\is-D96S6.tmp\WMOSetup_4.1.8.121.tmp

          Filesize

          768KB

          MD5

          a742dbbc00411c27be705e6d60f18167

          SHA1

          ed1b0e768547247e98ec2108a289a9ddc34be996

          SHA256

          7620688e7e625765ed05d1053e9753473b119294b3bac0286a998e570f571d4e

          SHA512

          facca70773f05deb150be3d12f73eaf69ec4963626e68a0af48d66b6924f5a14399f3e187db16ae57a027cd6a35f3ed3041997ac93682559645c070fa7122616

        • C:\Users\Admin\AppData\Local\Temp\is-D96S6.tmp\WMOSetup_4.1.8.121.tmp

          Filesize

          768KB

          MD5

          a742dbbc00411c27be705e6d60f18167

          SHA1

          ed1b0e768547247e98ec2108a289a9ddc34be996

          SHA256

          7620688e7e625765ed05d1053e9753473b119294b3bac0286a998e570f571d4e

          SHA512

          facca70773f05deb150be3d12f73eaf69ec4963626e68a0af48d66b6924f5a14399f3e187db16ae57a027cd6a35f3ed3041997ac93682559645c070fa7122616

        • C:\Users\Admin\AppData\Local\Temp\is-JG6DP.tmp\introduce.url

          Filesize

          98B

          MD5

          40a0697074484a2932e9184d03a86c9c

          SHA1

          2db57b34ad1caa98beaf67eea30bce057cf3bca6

          SHA256

          e5ddc6fb0c010fc03d1d6cb8c291cf41e2f053a8501bed5db2872f54fe0f2e5c

          SHA512

          34732baddd95942b406f47598af5f6c8c0787d83e645807bb4d64b9a1f4719c1572abcf61eab387a62d4a51195d476d314139d5ff4a431266b4257d6ecca61db

        • \Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe

          Filesize

          12.1MB

          MD5

          a05cd5d41620823a73ca4dd459a263fa

          SHA1

          aa10699cb4b2458bb686a4339a3a90663747e3e4

          SHA256

          cb8ea495d2ae77bf4b2365eecdadbe409bc73369844f83f410c60857ac688610

          SHA512

          4dfcbc79a3e2f88ad5d29d249c2e3d414acaf920bb0553c6bae128e318cca9d7da0ef1a37be1734680c7bdd4ea0a78e1afe306909b3d0cf91ecd188fb4af7efe

        • \Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe

          Filesize

          12.1MB

          MD5

          a05cd5d41620823a73ca4dd459a263fa

          SHA1

          aa10699cb4b2458bb686a4339a3a90663747e3e4

          SHA256

          cb8ea495d2ae77bf4b2365eecdadbe409bc73369844f83f410c60857ac688610

          SHA512

          4dfcbc79a3e2f88ad5d29d249c2e3d414acaf920bb0553c6bae128e318cca9d7da0ef1a37be1734680c7bdd4ea0a78e1afe306909b3d0cf91ecd188fb4af7efe

        • \Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe

          Filesize

          12.1MB

          MD5

          a05cd5d41620823a73ca4dd459a263fa

          SHA1

          aa10699cb4b2458bb686a4339a3a90663747e3e4

          SHA256

          cb8ea495d2ae77bf4b2365eecdadbe409bc73369844f83f410c60857ac688610

          SHA512

          4dfcbc79a3e2f88ad5d29d249c2e3d414acaf920bb0553c6bae128e318cca9d7da0ef1a37be1734680c7bdd4ea0a78e1afe306909b3d0cf91ecd188fb4af7efe

        • \Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe

          Filesize

          12.1MB

          MD5

          a05cd5d41620823a73ca4dd459a263fa

          SHA1

          aa10699cb4b2458bb686a4339a3a90663747e3e4

          SHA256

          cb8ea495d2ae77bf4b2365eecdadbe409bc73369844f83f410c60857ac688610

          SHA512

          4dfcbc79a3e2f88ad5d29d249c2e3d414acaf920bb0553c6bae128e318cca9d7da0ef1a37be1734680c7bdd4ea0a78e1afe306909b3d0cf91ecd188fb4af7efe

        • \Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe

          Filesize

          12.1MB

          MD5

          a05cd5d41620823a73ca4dd459a263fa

          SHA1

          aa10699cb4b2458bb686a4339a3a90663747e3e4

          SHA256

          cb8ea495d2ae77bf4b2365eecdadbe409bc73369844f83f410c60857ac688610

          SHA512

          4dfcbc79a3e2f88ad5d29d249c2e3d414acaf920bb0553c6bae128e318cca9d7da0ef1a37be1734680c7bdd4ea0a78e1afe306909b3d0cf91ecd188fb4af7efe

        • \Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe

          Filesize

          12.1MB

          MD5

          a05cd5d41620823a73ca4dd459a263fa

          SHA1

          aa10699cb4b2458bb686a4339a3a90663747e3e4

          SHA256

          cb8ea495d2ae77bf4b2365eecdadbe409bc73369844f83f410c60857ac688610

          SHA512

          4dfcbc79a3e2f88ad5d29d249c2e3d414acaf920bb0553c6bae128e318cca9d7da0ef1a37be1734680c7bdd4ea0a78e1afe306909b3d0cf91ecd188fb4af7efe

        • \Users\Admin\AppData\Local\Temp\is-D96S6.tmp\WMOSetup_4.1.8.121.tmp

          Filesize

          768KB

          MD5

          a742dbbc00411c27be705e6d60f18167

          SHA1

          ed1b0e768547247e98ec2108a289a9ddc34be996

          SHA256

          7620688e7e625765ed05d1053e9753473b119294b3bac0286a998e570f571d4e

          SHA512

          facca70773f05deb150be3d12f73eaf69ec4963626e68a0af48d66b6924f5a14399f3e187db16ae57a027cd6a35f3ed3041997ac93682559645c070fa7122616

        • memory/1620-262-0x0000000000220000-0x0000000000221000-memory.dmp

          Filesize

          4KB

        • memory/1620-288-0x0000000000400000-0x0000000001069000-memory.dmp

          Filesize

          12.4MB

        • memory/1620-298-0x0000000000400000-0x0000000001069000-memory.dmp

          Filesize

          12.4MB

        • memory/1620-294-0x0000000000400000-0x0000000001069000-memory.dmp

          Filesize

          12.4MB

        • memory/1620-292-0x0000000000400000-0x0000000001069000-memory.dmp

          Filesize

          12.4MB

        • memory/1620-291-0x0000000000400000-0x0000000001069000-memory.dmp

          Filesize

          12.4MB

        • memory/1620-290-0x0000000000400000-0x0000000001069000-memory.dmp

          Filesize

          12.4MB

        • memory/1620-289-0x0000000000220000-0x0000000000221000-memory.dmp

          Filesize

          4KB

        • memory/1620-265-0x00000000055C0000-0x00000000055C1000-memory.dmp

          Filesize

          4KB

        • memory/1620-264-0x00000000054F0000-0x00000000054F1000-memory.dmp

          Filesize

          4KB

        • memory/1620-263-0x00000000003E0000-0x00000000003E1000-memory.dmp

          Filesize

          4KB

        • memory/1688-66-0x0000000000400000-0x00000000004CE000-memory.dmp

          Filesize

          824KB

        • memory/1688-208-0x0000000000400000-0x00000000004CE000-memory.dmp

          Filesize

          824KB

        • memory/1688-64-0x0000000000400000-0x00000000004CE000-memory.dmp

          Filesize

          824KB

        • memory/1688-62-0x00000000002D0000-0x00000000002D1000-memory.dmp

          Filesize

          4KB

        • memory/1688-196-0x0000000004040000-0x0000000004042000-memory.dmp

          Filesize

          8KB

        • memory/1688-195-0x0000000000400000-0x00000000004CE000-memory.dmp

          Filesize

          824KB

        • memory/1992-211-0x0000000000400000-0x0000000000425000-memory.dmp

          Filesize

          148KB

        • memory/1992-63-0x0000000000400000-0x0000000000425000-memory.dmp

          Filesize

          148KB

        • memory/1992-54-0x0000000000400000-0x0000000000425000-memory.dmp

          Filesize

          148KB