Malware Analysis Report

2024-10-16 06:28

Sample ID 240527-ses73agc7t
Target Mathcad15WixInstaller.msi
SHA256 678af36d28f8545fa45e3a7c3056a03cc95554d196a22fd2904a3552ca59a986
Tags
macro macro_on_action
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

678af36d28f8545fa45e3a7c3056a03cc95554d196a22fd2904a3552ca59a986

Threat Level: Likely malicious

The file Mathcad15WixInstaller.msi was found to be: Likely malicious.

Malicious Activity Summary

macro macro_on_action

Office macro that triggers on suspicious action

Enumerates connected drives

Executes dropped EXE

Drops file in Windows directory

Drops file in Program Files directory

Loads dropped DLL

Program crash

Suspicious behavior: EnumeratesProcesses

Suspicious use of FindShellTrayWindow

Suspicious use of AdjustPrivilegeToken

Modifies registry class

Modifies data under HKEY_USERS

Checks processor information in registry

Checks SCSI registry key(s)

Suspicious use of SetWindowsHookEx

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

Modifies Internet Explorer settings

Suspicious behavior: GetForegroundWindowSpam

Uses Volume Shadow Copy service COM API

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-05-27 15:03

Signatures

Office macro that triggers on suspicious action

macro macro_on_action
Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-05-27 15:02

Reported

2024-05-27 15:06

Platform

win7-20231129-en

Max time kernel

141s

Max time network

126s

Command Line

msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\Mathcad15WixInstaller.msi

Signatures

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\whgdata\whlstt3.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Wavelets\wavelet_filters.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Signal\whgdata\whlstf3.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Signal\whgdata\whlstfl5.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Improc\Wiener_filtering.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\ES\qsheet\Visualization\heatflow.txt C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Mcad.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Graphics\ODElhs.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Signal\whxdata\whfts.xml C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DAEP\whgdata\whlstfl9.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Improc\whskin_papplet.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Polynomial_functions.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\IMIUnitsXML.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\Script_VariantArrays.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\EN\qsheet\tutorial\Primers\tu_01.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\UserDLL_LRESULT.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\ES\qsheet\references\Science\popups\T107n.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\whgdata\whlstf32.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\messages\messages_ES.xml C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Signal\Welcome.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whgdata\whlstfl15.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\EN\qsheet\references\Solids\8_5.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Component_Matlab.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\ES\qsheet\Visualization\qwikgrad.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DAEP\whproxy.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\ES\qsheet\Visualization\unitsplt.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\whgdata\whlstf6.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Wavelets\whgdata\whlstfl1.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Wavelets\whgdata\whlstt8.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Cross_product_operator.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DAEP\Graphics\H5.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\funcdoc\wavelets_EN.xml C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Literal_Subscript_Operator.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\whgdata\whlstf37.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Author\Author.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Handbook\improc\cnvxhull.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Improc\whfdhtml.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whstart.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Fixing_Errors.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\whgdata\whlstt56.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\UserDLL_code.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\whgdata\whlstfl16.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\IMWParent.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\wht_logo2.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\EN\qsheet\Visualization\MONA.BMP C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\EN\qsheet\Data_Analysis\mydata1.xls C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Improc\whtdhtml.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Special_Symbolic_Results.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\efispecialr.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\IMIHasError.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\mclicense\ko\mclicense.resources.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Wavelets\Wavelet_packet_transforms.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_plist.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Wavelets\wht_abgi.jpg C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\EN\qsheet\references\Geometry\3_1_8.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Graphics\edexp100.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\whgdata\whlstf16.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\whgdata\whlstf19.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Signal\whrstart.ico C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\MathSoftDevRef.log C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Wavelets\whgdata\whlstt0.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Graphics\otherwise.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Technical_Support.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\IMAWorksheetOpenedEvent.html C:\Windows\system32\msiexec.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\WinSxS\InstallTemp\20240527150430472.2\mfc80ITA.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANT\Corporate Definitions.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Fonts\MathCadUniMath.otf C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ES\Table of Contents.xmct C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\$PatchCache$\Managed\00004109110000000000000000F01FEC\14.0.4763\ul_ATL80.dll.97F81AF1_0E47_DC99_FF1F_C8B3B9A1E18E C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\FR\E-book.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\JA\Microsoft Word.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANT\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150430456.0\8.0.50727.6195.policy C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\JA\HTMLtemplate.mlt C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\US\Microsoft Word.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANS\Report.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Corporate Definitions.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANS\HTMLtemplate.mlt C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\US\Normal.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150430472.5\8.0.50727.6195.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\US\Web Page.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANS\madewithmathcad.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\EN\Report.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\DE\Table of Contents.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Calculation Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150430472.1\8.0.50727.6195.policy C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20240527150430472.5 C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANS\Corporate Definitions.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Microsoft Word.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\FR\Normal.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\FR\madewithmathcad.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANS\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\EN\Web Page.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150430472.4\mfc80u.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Normal.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150430472.3\msvcp80.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\EN\Calculation Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\US\Calculation Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\IT\E-book.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150430472.1\8.0.50727.6195.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\{B24B6F31-6DA8-490A-8FCA-7BFA3101C2E4}\icon3.exe C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20240527150430472.0 C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Web Page.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\FR\Report.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\DE\Web Page.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\FR\Web Page.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\FR\default.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\FR\HTMLtemplate.mlt C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150430472.4\mfc80.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\JA\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\f76497e.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\DE\Corporate Definitions.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\JA\Corporate Definitions.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\JA\madewithmathcad.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Report.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\IT\Normal.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150430472.4\mfcm80.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20240527150430472.2 C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\{B24B6F31-6DA8-490A-8FCA-7BFA3101C2E4}\icon2.exe C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\IT\Calculation Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\IT\HTMLtemplate.mlt C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150430331.0\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_a4c618fa.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Specification Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150430472.2\mfc80JPN.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\JA\default.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\E-book.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ES\HTMLtemplate.mlt C:\Windows\system32\msiexec.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT\xmcddiff.exe = "0" C:\Windows\system32\msiexec.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust C:\Windows\system32\DrvInst.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D\52C64B7E C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2E C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\My C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\Certificates C:\Windows\system32\DrvInst.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D\52C64B7E\LanguageList = 65006e002d0055005300000065006e0000000000 C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\CRLs C:\Windows\system32\DrvInst.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\SmartCardRoot\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\Root\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\TrustedPeople\Certificates C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Policies\Microsoft\SystemCertificates\trust\CTLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\CRLs C:\Windows\system32\DrvInst.exe N/A
Key created \REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\SystemCertificates\CA\CTLs C:\Windows\system32\DrvInst.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{da6160ff-33aa-11d2-97a9-00104b38a38c}\Proxystubclsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\TypeLib\{13444a83-1a55-447e-a72a-1227a7da8e64}\1.0\Helpdir C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{013500b0-1122-11db-9380-000d56c6051a}\1.0\Flags C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{f4d94008-b0a9-4f1f-902a-e198be1986c7} C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{a05e25d1-be19-4b19-8189-8e5b48beba50}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1e0113c6-07e0-11d0-97e0-00a024cf05d1} C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{01350041-1122-11db-9380-000d56c6051a}\Miscstatus\ = "0" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{6883f3fc-2bd2-4021-8272-0a7f29404648}\Componenturl C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{ea5c7ed4-e4b9-11d4-87f3-444553540001}\ = "IDTDataObjectFiles" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Mathcad.InputTable.Component.3\ = "Input Table" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Mathcad.SmartSketch.Component.3\CLSID\ = "{013500A1-1122-11DB-9380-000D56C6051A}" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{bbf0c510-aaa2-11d0-a697-00a024cf05d1} C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{01350084-1122-11db-9380-000d56c6051a}\Control C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{013500d2-1122-11db-9380-000d56c6051a}\ = "F2D2A216-A21F-11D1-A596-0A1C32000000" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{19d04740-6fa3-3d94-b5c1-fe3fcb3a6e8a}\TypeLib\Version = "e.0" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2df4df31-8b62-11d0-a696-00a024cf05d1}\ = "IScriptItem" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6af8ef7b-b23b-11d1-b19d-0060971e663a}\Proxystubclsid\ = "{00020424-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Mathcad.MCM.DataAcquisition.3\CLSID C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{01b71de5-e015-11d4-87f3-444553540001}\Proxystubclsid C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\TypeLib\{013500f4-1122-11db-9380-000d56c6051a}\1.0 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{013500f4-1122-11db-9380-000d56c6051a}\1.0\Helpdir\ = "C:\\Program Files (x86)\\Mathcad\\Mathcad 15\\" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{0f8c5f99-ae35-11d1-b19d-0060971e663a}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{01350081-1122-11db-9380-000d56c6051a}\Inprocserver32 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{01350063-1122-11db-9380-000d56c6051a}\ = "Scripted Object" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{013500b1-1122-11db-9380-000d56c6051a}\Miscstatus C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{b08a4df3-a32e-30f7-b599-897b196569eb}\Proxystubclsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{0f8c5f99-ae35-11d1-b19d-0060971e663a}\Proxystubclsid32 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{c6faaeea-1852-34c8-8ade-999ab7effebf}\Proxystubclsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{01350011-1122-11db-9380-000d56c6051a}\Version C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{435b42cc-139b-42c6-a6b2-18d493d8fbf1}\Proxystubclsid32 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{f2d2a214-a21f-11d1-a596-0a1c32000000}\ = "IglAxis" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{013500f7-1122-11db-9380-000d56c6051a}\1.0\Helpdir\ = "C:\\Program Files (x86)\\Mathcad\\Mathcad 15\\" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{0f8c6002-ae35-11d1-b19d-0060971e663a}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{013500b1-1122-11db-9380-000d56c6051a}\Version C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{0f8c5f99-ae35-11d1-b19d-0060971e663a}\TypeLib\Version = "1.0" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Mathcad.Button.Control.3\ = "Mathsoft Button Control" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Mathcad.Button.Control.3\CLSID C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6325457b-c7cd-4fde-8ed9-c84219c32613}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{01350082-1122-11db-9380-000d56c6051a}\Miscstatus C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{af5992a5-69b0-11d0-a68e-00a024cf05d1}\Proxystubclsid\ = "{00020420-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{ea5c7eda-e4b9-11d4-87f3-444553540001}\TypeLib C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{013500c0-1122-11db-9380-000d56c6051a}\b.6\Helpdir\ C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{c6faaeea-1852-34c8-8ade-999ab7effebf}\TypeLib C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{94fbbd40-e791-4e8c-8f21-fa7a724654da}\TypeLib\ = "{A86F3A06-7127-4E0F-BCAF-56D15FA57AC4}" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{507c4627-7d3e-4c9b-84d3-72bac001d549}\ = "IDAVResource" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{6835b9c7-0235-11d3-989e-00104b38a38c}\Proxystubclsid32 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{6a0f8760-d8ae-3dc5-9b32-e3fe243ac058}\Proxystubclsid C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6febb7cf-668c-3f50-b974-c04bf2cd882b}\TypeLib\Version = "e.0" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{c98c54c0-6331-11d0-a68d-00a024cf05d1} C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{a26333e5-af5b-4c66-bad1-f88ff1326e6e}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{01350031-1122-11db-9380-000d56c6051a}\Miscstatus C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1e0113cd-07e0-11d0-97e0-00a024cf05d1}\TypeLib\Version = "1.0" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{cfeffb96-650a-42a7-965b-e179cc967a3f}\Proxystubclsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{fd177dac-9025-3c46-b2b1-2e6d1abd4ddc}\Proxystubclsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Mathcad.FileWrite.Wizard.3\CLSID C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{ea5c7ee4-e4b9-11d4-87f3-444553540001}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\CLSID\{01350061-1122-11db-9380-000d56c6051a}\Version C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6d644f1e-103d-4967-a7b2-0fabc5c87142}\TypeLib\Version = "1.0" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{c583c507-bc6d-431d-9c33-135c36e4d4b0}\Proxystubclsid C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Wow6432Node\Interface\{d7162326-1fcf-476e-90aa-1520da995b6e}\Proxystubclsid C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{e4915a6d-cfd3-40d4-a30d-0b3567e9e0c0}\TypeLib\Version = "e.0" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Mathcad xmcdz\Defaulticon\ = "\"C:\\Program Files (x86)\\Mathcad\\Mathcad 15\\mathcad.exe\",1" C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{1e0113c4-07e0-11d0-97e0-00a024cf05d1}\Proxystubclsid C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{f01c1538-681e-4934-9803-d0ae62214355}\1.0\0\Win32 C:\Windows\system32\msiexec.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A

Suspicious behavior: GetForegroundWindowSpam

Description Indicator Process Target
N/A N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateTokenPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeMachineAccountPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTcbPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreatePermanentPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeChangeNotifyPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSyncAgentPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeEnableDelegationPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeImpersonatePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\DrvInst.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Windows\system32\msiexec.exe N/A
N/A N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2896 wrote to memory of 1720 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2C00.tmp
PID 2896 wrote to memory of 1720 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2C00.tmp
PID 2896 wrote to memory of 1720 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2C00.tmp
PID 2896 wrote to memory of 1720 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2C00.tmp
PID 2896 wrote to memory of 2616 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2C9D.tmp
PID 2896 wrote to memory of 2616 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2C9D.tmp
PID 2896 wrote to memory of 2616 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2C9D.tmp
PID 2896 wrote to memory of 2616 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2C9D.tmp
PID 2896 wrote to memory of 2844 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2CCD.tmp
PID 2896 wrote to memory of 2844 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2CCD.tmp
PID 2896 wrote to memory of 2844 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2CCD.tmp
PID 2896 wrote to memory of 2844 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2CCD.tmp
PID 2896 wrote to memory of 2756 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2CFD.tmp
PID 2896 wrote to memory of 2756 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2CFD.tmp
PID 2896 wrote to memory of 2756 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2CFD.tmp
PID 2896 wrote to memory of 2756 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI2CFD.tmp
PID 2772 wrote to memory of 1112 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 2772 wrote to memory of 1112 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 2772 wrote to memory of 1112 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 2772 wrote to memory of 1112 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 2772 wrote to memory of 1112 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 2772 wrote to memory of 1112 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 2772 wrote to memory of 1112 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 2772 wrote to memory of 2660 N/A C:\Windows\system32\msiexec.exe C:\Windows\Installer\MSI53DC.tmp
PID 2772 wrote to memory of 2660 N/A C:\Windows\system32\msiexec.exe C:\Windows\Installer\MSI53DC.tmp
PID 2772 wrote to memory of 2660 N/A C:\Windows\system32\msiexec.exe C:\Windows\Installer\MSI53DC.tmp
PID 2772 wrote to memory of 2660 N/A C:\Windows\system32\msiexec.exe C:\Windows\Installer\MSI53DC.tmp
PID 2772 wrote to memory of 2712 N/A C:\Windows\system32\msiexec.exe C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe
PID 2772 wrote to memory of 2712 N/A C:\Windows\system32\msiexec.exe C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe
PID 2772 wrote to memory of 2712 N/A C:\Windows\system32\msiexec.exe C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe
PID 2772 wrote to memory of 2712 N/A C:\Windows\system32\msiexec.exe C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Windows\system32\msiexec.exe

msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\Mathcad15WixInstaller.msi

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Users\Admin\AppData\Local\Temp\MSI2C00.tmp

"C:\Users\Admin\AppData\Local\Temp\MSI2C00.tmp" "HandBooks"

C:\Users\Admin\AppData\Local\Temp\MSI2C9D.tmp

"C:\Users\Admin\AppData\Local\Temp\MSI2C9D.tmp" "userDlls"

C:\Users\Admin\AppData\Local\Temp\MSI2CCD.tmp

"C:\Users\Admin\AppData\Local\Temp\MSI2CCD.tmp" "templates"

C:\Users\Admin\AppData\Local\Temp\MSI2CFD.tmp

"C:\Users\Admin\AppData\Local\Temp\MSI2CFD.tmp" "export" "SOFTWARE\Mathsoft"

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\DrvInst.exe

DrvInst.exe "1" "200" "STORAGE\VolumeSnapshot\HarddiskVolumeSnapshot19" "" "" "61530dda3" "0000000000000000" "0000000000000564" "0000000000000060"

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding 56D031DCA7A1039986E9DC098CC79147

C:\Windows\Installer\MSI53DC.tmp

"C:\Windows\Installer\MSI53DC.tmp" "import"

C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe

"C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe" setkitnum

Network

N/A

Files

C:\Users\Admin\AppData\Local\Temp\MSI2C00.tmp

MD5 0281757b325bf343be1295410d2f04c0
SHA1 e5f3a857e64540bdf8ba0d589ef753f2fc6f833f
SHA256 8c65854968d8778269922b6d71b469264be03b969d7e47ea6c5eb98ac159f358
SHA512 b9d88a96499b1f1864e9a7bf3733b6a9656bec856bb15f0510b9a3eb655251475e9b2ee45eee4ca9a3cbf98ff16ae2a7316778a8fdc3ac28ac43098740dd257c

memory/1720-7-0x0000000074C61000-0x0000000074C62000-memory.dmp

memory/1720-15-0x0000000074C60000-0x000000007520B000-memory.dmp

\Windows\Installer\MSI4EBC.tmp

MD5 85221b3bcba8dbe4b4a46581aa49f760
SHA1 746645c92594bfc739f77812d67cfd85f4b92474
SHA256 f6e34a4550e499346f5ab1d245508f16bf765ff24c4988984b89e049ca55737f
SHA512 060e35c4de14a03a2cda313f968e372291866cc4acd59977d7a48ac3745494abc54df83fff63cf30be4e10ff69a3b3c8b6c38f43ebd2a8d23d6c86fbee7ba87d

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\whdata\whglo.htm

MD5 f9d8ae933a052c857e919f577656ffb5
SHA1 6c2f6c9c4339774a5d601bc5b8dc27a1791c15a5
SHA256 62dc4ef734c6aa235903c4335384b5c8f0387c73785012e5498feeb1699486c6
SHA512 3eef99c245b3ead4dc2398f3cbcd02b6631ba639eb9f321a9b96e5c9b9854737e23878f672b3bf8da13930374f245007d5bab469bae9b47ca7561030448f8d30

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\whgdata\whlstt34.htm

MD5 38d3c019e86f0a3044f1970736047ab2
SHA1 42a528da16f1d17d0fa250eae33b42a7ca948710
SHA256 693d656d818a37e6071a9b5381fe664cef33f186cccec4a6846b2a089e97765b
SHA512 fd43e27dd5f457388ae899e371608a5f1bc0b006b0a26e861d4c7a64864e0ce4d4e9c227a74f86cc9862f2c0bae0e724f2bb61da2bdfee4ad74010892527714c

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\whgdata\whlstt54.htm

MD5 0e8fcb6d207475de4c0cf5315431518b
SHA1 3b1065a5aee6e3161a1db94b87d47879939425c2
SHA256 23a93220753eb82a92dc04d74fc86f8ef514cad18457e9eb91cd1ae75dcb67fe
SHA512 23f47f62892d3292ac18d5f158d7227368cf1f008c5ceeccd6c7e5603b464bda493507278db33606334803e1ba9f87e3cd981e0022dd948f96a3d463f2b28fcd

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\about_mcad.png

MD5 ddfe25003c98a59a85e325b0a5b82515
SHA1 57fe25f7233725b3e383e62aabceab69805f45cd
SHA256 10aedda051079084e5dff40154d43d6de16af0d815643735707e3ab25b6834a4
SHA512 85a5ace7aa51b45c56737c60676c8c94290e3503c3bedb9fec4ebb8a25dcfb1a0720f258aec92873c5729f6e8a4776d5fe01259bd02396b8dae612ddb51fe28d

C:\Windows\ShellNew\JA\default.xmcd

MD5 f98686a60a4da2da0a940aa9595d5da7
SHA1 8eb666d7352c8845a817be762af8e28b22cbf2f4
SHA256 35f8659e25997a3e485be0ee9cf9611f870b528522ee6f32efa0325864d7bf0d
SHA512 3b23328ce8e1eb251cf222494b1255e9dc3344dfe022d657182443eab5289bae597de89db17469b03ec5483547daa135abf393b2f0773a1ee6e1464785f60364

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\ehlpdhtm.js

MD5 233550d317745f2e19d1b4ed1500352c
SHA1 26e190ea96aa12c301be78f5b20c204a6590727a
SHA256 1191964ebe828588808ab4d114e21f1494386ced9c5a22d4179a9d47f9157ba2
SHA512 fc5f75bd09b015d506e684f7c00c7090f78c3c45d54de013a43407c50218e0de1339a6e23745cbb2f71bbc575f49e216a7f20a593d59195121f6b010b36280fa

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\Graphics\H2.gif

MD5 43a5e632c72329bc9b34dd199e7e0e7f
SHA1 8d025962c724d4296e83423359c0cba4277013c8
SHA256 1507bbc1167e71fd54d69e1ba9f7cddda0040a19cd0c02e7c1a5d65a5b1cfc5b
SHA512 9a622161476d189595522b65d56a36632c501762fea68ee9d9f16320aca54e17b727caa9cecae94219f58f17dd5d8a6bc09c855958885b4db1b6947975b68075

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\H2.gif

MD5 e04be366660f302842183b9c6272e543
SHA1 89eeb0a2afe3a6c09a41c2176a67f16ad4bea2a9
SHA256 f7ddf590d71d2e5c8d734a66b8cb0928f0a06962011f5ab7c3725d80573156e8
SHA512 a9cd13c0670cd91703bee404889112c5dc2385a9af4376cf803239d4ba3d649aa751b1fee64ffadba0b335d1e8cada18c38b2be75ccc06c20eabb0c46d286bff

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\Graphics\H5.gif

MD5 bf41230ac97b4176bef1de3c6f246cda
SHA1 83e527dbc18b894cd8d53c432e248b775f1a92f9
SHA256 31a265f0c4788453b2db1f30c6c93ead7eb63387a0206cbd237d8e5cbf2181a7
SHA512 29a076ff77b5caee19e119937adc53507914a81f13cf9f15cb152c0e650d6c2382f8bfa1edd9dd4b5b11af8b2dd74e2ff21cc92a74e63f4585b82a275883ad20

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\H5.gif

MD5 443090415e98f628cf37f6748fae4d29
SHA1 c22cb910a74e7d3994f89ffe5568f1dcb6fe2850
SHA256 4f6c261e54cc556b0337a1907ff7a85b6e83630579f7168f551a8afe8513cb48
SHA512 f3b6bf43efb9a954347e20b5b485d32cf5ea30682645b7c98c5f971a01ccab153226c2a75ad39616b90e1f2892df652835c1b9691599f793fb4a1df4ed2cc8fb

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\home.css

MD5 6168a5b24457dc1795892ba9b5c95d60
SHA1 ab4f16ff2ebf535b12c3364b951405dea3c03a5c
SHA256 96e6e6252d07ea83bb85585df9512b1e64a44fda03131db9d7d55fb338e77913
SHA512 ce932424aba2ace2e211dddb461e5fa001357259ca012f86a3300a56e3cf4072075da7e437c39dd31cd13376d544a6d2b3d603d9e82dcc88079fa9d4d82623f9

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\home_ns.css

MD5 11bbfb2386e8471e31195cbae91023a0
SHA1 6bf1f95ad55e5ac5b825328f360f3916a01bc10a
SHA256 e7d90f85fc12a7ad7067d1e2fea50559e531a79a85d8349d2cc024de237c5bbd
SHA512 349d099f666aff7697ba5a78cdb3479341a46ac51868745bc5465206988a65d34b57f890d206afc97aeda667db4dd1388b6147a8918e8e34a44e26e0299137c9

C:\Windows\ShellNew\JA\HTMLtemplate.mlt

MD5 746e02ca7f6003df3b0e2f43c9c4c9a4
SHA1 01dbdd4a344795399bce3b41cbf239780a428e7f
SHA256 be721a548a3fc653f04768075320cac79fefce8558b7a443b97014e141626840
SHA512 682254f824626c47c5f2c0b09f39b5062fcde23db8c79881e2c8d0c674820c7c8ec793b0e4325fe6e26fbce3c558868bfc9f2c19d5c5688117ac7a692144e94d

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\kb_xor.gif

MD5 b3962c7a7569e11ebfc55d37f880251a
SHA1 9160cbf96d10c53951600a9877907fda2d72d86d
SHA256 ff90470a0d0990c058a655e24f97ed1765ecc5c77ed643e6dc13219f4c6e7c13
SHA512 4d576c087f1de43af0d382c8ed240e79e4bb7170bbeffa25a9b0a62799478b99a0f911b5a4d5689dd81891de0c7eade3c6a3b4fef345f36285ccb4be546896f3

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\kODERIVE1.GIF

MD5 f10eb37de3bcfc6533b43aab86c39baa
SHA1 cf123f0bc23afee314cc39cf61944a5288e2c12a
SHA256 d21d129d59ff813cf98a757578926e1537e5d915cc606598170cd4ebf3871b8d
SHA512 622a50c8de71e21aadb0c9f5e2e23680f34250229eec50f78b129e985feb539be2afffcf174e92fabead04e23e86241c4b743736879e36ca5541859e782c60ba

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\kOITERPR0.GIF

MD5 7a04dab8aef78584f56cc31a5074f0ec
SHA1 9ddb133c540b3017df6c89be0980720482610dae
SHA256 69d80d55e913b94d77c32f207cc108b4f4c4f86db06e3cf92a6e929c3989ce80
SHA512 39a0d9fbfb67e47a7d0f0ec07ed80001b47580cfb4a264fdb01202e85d7a626d1084de68f079ffb5aa4acfcf801eedce21ceaa6967793d6654eaad5736a8801e

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\kONTHSQRT.GIF

MD5 546db0b8f56ba206bdd0cc9e80d221f9
SHA1 2bb90f83edd79a9e8418d7eac5adfa2a5ed2c168
SHA256 81da3a31d1cc5082f2bcd4fe6146e600ac449bcbeac9f3ef86b812713ee7cb7c
SHA512 4defdc6745fe4db351cfc0c806e8289d1b68de56ed6f8514e6289773839045d75b6f5072fc726b21f0b58e9b85f2c9e592b9f32f1e15b31107688c403650e6e1

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\kOSQRT.GIF

MD5 2973fa29911f66b024ce5f4db2b3211f
SHA1 d58d43f8a614ca4c0457a3547a470c1a7695877c
SHA256 48f8e2d8ea4ad08ebfb56c69b6ea2751fd697d734a3029701d4ed249ef142ca6
SHA512 6c7d1f6e362c6e9295f662aafc550cde657d1d3da1228f58d87ae78938fcd45e408824fcf3896010ccdaa5bd127546c51e17f235e66e3bdd171757855829da92

C:\Program Files (x86)\Mathcad\Mathcad 15\mcm\FR\ListBox.mcm

MD5 689e41bf5e1e73ec20cc5da6a687d886
SHA1 8f2114164cf44185bf69f9278688384df12af233
SHA256 127d546158a5477257e0750b3cc25558880a7a3cae4000094c8d7d8dd291269f
SHA512 aee265e88970a24add5f72cddce6cde98f73b09e44cec38b0099897069cf9d9487a0575763d6a96863801109e62bca9e024ac180bb4942d94ef4946238e6c397

C:\Windows\ShellNew\IT\madewithmathcad.gif

MD5 2a0d003fde6ceb4f613f8f9b9feb4042
SHA1 06202913fc88d17b3a3193a5251941ad5469eab9
SHA256 4431c0d6fe472111ed848cd31cf6bd58d75dd09c21f263241048794e59aad913
SHA512 ca9e3718c959c255535b7a3c66cb849bc9d5da615c433f133350662dc7ac6170c03548127cf198c99ef956878b1a49ae76e2e70cfc100fa4b44468981627ce1f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Improc\MAIN_TOPIC.css

MD5 29266cdb102df30b4bf804cf2bedc579
SHA1 271454d00a3cb9bd917fedeae9bf33878f621324
SHA256 32e49ba7bbef28909cc33ecde3b551c81aa0852917e108da4ebe3abde27f97fb
SHA512 4c43ecca7c2b5087c1e79bdfca0cbfc2a51ba68ba81d69728821289d42cb665a099a91829ac4ea47b1a9125a2188a91e77544d9db0f50fe39600233863493898

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\MAIN_TOPIC_ns.css

MD5 a6e2b888a1a5a78155a0b66b6dacb058
SHA1 d26895f0c5b4499bc87f21592d75d4a194f7ee57
SHA256 e7e6688335a2c8038e571b7730249e06fcf4efce5b77cf23fd6c2e49c98d2205
SHA512 c975f95638cf8f4f737d898d07978d30212b2b72c222f819af9f5951e446d875be0ecc43d278a3da1379194c7dc6938cb02d9e1c463dd944afd841a08f3514a3

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\mathsoft.skn

MD5 3abf08d098f0a8410ad0e9e14356f026
SHA1 148e7a930f76aca374cee83c99f3442b2ddd87a0
SHA256 8a86c4115140b07d1ce1ec81343be18af1002b7da846414c40942a270c145abc
SHA512 7127ec9ec6f969e72513dade781dcd5053e85605c55d4cc4916ea7e1ec77a6532715d186a2f359fe4cfe12bf56e5f60e289693318e60134a1b85fc8db4ad7a6f

C:\Program Files (x86)\Mathcad\Mathcad 15\mcm\FR\McadDAQ.mcm

MD5 ed5a7e8a30f765cf4708c55b6e427865
SHA1 ffd6a0ce2cea1ba5767a7f8792b3235702d9c4b6
SHA256 dd3b5d3d2e8f5b38a20b7546d54113471ac0d7d9fd130a377b7c7bab576b0af5
SHA512 93ad5167412a0096d1700fcb0340b3c69df2f71c7f9a89e5812fe5917b0744d1200e7c37410ed270f7728a5a7e5a3f6d886a37d7f54c0c78303487f969da557a

C:\Program Files (x86)\Mathcad\Mathcad 15\Handbook\improc\MONA.BMP

MD5 4acdf0da3cccbe4475dce98b68307868
SHA1 47eefc64da0d44c7400e41dff1389fc2210cef9b
SHA256 8a1c5e1edbae855ce445c6d5a1b60fddd3315302b4bfbe7ec48359c36041d892
SHA512 880316fc33f2eff27cd11f4542af1cc2a8847762ecf857bff1da62d55cb841f9ab857237324a0f9b421cd077c7d1a1290372085601c217066cb92b0c38595baf

C:\Windows\ShellNew\IT\mycorp.gif

MD5 b6976b8783c463039b8f0c2230658f57
SHA1 39308590aaa528b2ca7532ab46ad2ec1fcf3a7d3
SHA256 aa167991240ba77afb2f8241338e8580112ae1da21e7511050fa54f2cb15cdbb
SHA512 2ba6fef15ace06d3729b881a338c75b9fe7916dd0ffcfdd80b6b8a6620bd09c5e1c7b85ac91e1b62c3065bf4ef0f9f0334411d6155f2b67c9f15e366d90c70cc

C:\Windows\ShellNew\JA\Normal.xmct

MD5 a8af780f0f9c956f32790e0ace31e7df
SHA1 0ea6e8bf5740b42e9372246132214be1c5601e70
SHA256 d158a8cd6cbb47592bbd093aa38844008b7d5b6d253a79ce230085088eab38f6
SHA512 e4b5caef34ed4f68c7096f450b25fcbb61920fa62b7f30901c1cdaced571b2b1e64743ec55928902c137a9469bc47625d9f756ab2997c0e03e89b267a6a280a3

C:\Program Files (x86)\Mathcad\Mathcad 15\Handbook\datapack\outlier.xmcd

MD5 eaba4a9ad2415a1bc6b020fab4b64f6b
SHA1 668f30e616f9ccacd833aea9d708771722819747
SHA256 9612144443615ab464b65afcb7180c00d29d8b22f8147e618df03eff7df1727c
SHA512 0cfac88513857b9b45fe8b0ffe250d6fcfcba1c1a1229396916ea2da4086b492b4cd892be19514a013a9d616c81a1e9114b6ee99d1247b2a8f9f1c6c5d62b997

C:\Program Files (x86)\Mathcad\Mathcad 15\mcm\FR\Slider.mcm

MD5 f16587b5b59c1b41bf4b83bed1beffcf
SHA1 b498a49e6838573aaf8448d44f4068187b92cd2b
SHA256 a27027e52a05de9c22e336b971a72b3579e76596f1a2bfe3d07cfcddc0e1f37c
SHA512 54b14e68ab07f4db977a7882a453cded564cdf56599c19bb444b3e0e3d17c52aaa8fcdc72c539a8e69e729f50b1f2a9c33b359296e1a52b61f0e1ee62df58ecf

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\small_ptc_logo.png

MD5 52063e3c133cfb28e6b2f512bbc9897d
SHA1 c6b1a0b6dd6b9841bb65dc61e162fa2fb599c449
SHA256 073cdccbf71d80fb21bbd357219cfaacec5e29ca74c230fe13e3171ff03f1eeb
SHA512 1e969ddd5853f3452b70beeb721a79f98e05e65f475ddcd614eb45c359703c0d4495e36a5dd1504b9c151379a42a669e66603493cc673bce8eb2309df7a99c53

C:\Program Files (x86)\Mathcad\Mathcad 15\mcm\FR\TextBox.mcm

MD5 831d5ba8de46600c74b4524112af489f
SHA1 15980097d346535b64c439ae731befd50a8e0fe4
SHA256 3a924cc8cbe401a71b9a7f4c580438e479d74d3abc344d655d4d572bb74e1150
SHA512 d43b09acf7e352bb7022ba8d03c6e3f5466b98daf0a3a0e73f1a40584f4bbd1474334fef822480e5ef365219e4a4f37f2fd48d408484750400796fb9e32eddc6

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\Graphics\tutor_button.gif

MD5 9c9f9348def6d454b09c671b836ce010
SHA1 50f4354fa12c55f763d73508aa558490590248e1
SHA256 8081787cdf5c3d459afb92f439136bcc0e139e5b552823b05f01a2b09eaf2bad
SHA512 1bb174a836f2e74337cf188e391b265a658cb2bb3b33e85484cea9a27fa12610003f74f44ac414cd7356f4116f50017beb32073ec0864d5c9405fb10ba949a29

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\webhelp.cab

MD5 68e643002c1c9ba0e2b67acdb148bd23
SHA1 99febdeeb122b0c3c04d2bed6f4b42f0df5dd220
SHA256 7765df74081557d1097268b6167337564f796f4cc1695e36ae0cb935bd1703ca
SHA512 0095c27c2a031e7e39d147272be13c70127e4c79003ec35186f401d10d11a7391e23a82cbd3138cd3a4e07217005b68f122c4048131cc6204c26691f14c0af50

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\webhelp.jar

MD5 92e10d8f436c3109351725391a20f306
SHA1 672f46ed17dbd580593939d16cdf907d0190587e
SHA256 a1a599d1956e034acaf227da1a457ba9cd9e74aaebcbeff51e65f1512adc08bb
SHA512 754231b9959ead1cac34fed151e6c789a7a21e0b2f66e77d419bc86b47b0b332dd8c13cd008692ed75d3df79895cfceeb51f66aac5a465c453524fe61dc001a7

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\Graphics\welcome.gif

MD5 8a8e4d6cf665bdde53fb65b7aa9f3638
SHA1 63298f576b6e229eb7ccd1d8b2a5fd3b57684016
SHA256 a2145ef27a9091842415cc1ed4ef8f81b3e18e2a4793ed9121cceadedd2174c8
SHA512 60aec3d5a7370923ce455468a434cda10786d8318662e1be0708d1421845c37904f29a624aa35a1e7d47d88bf45521930df1daca770dc95a7b9a44adaf270d62

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whestart.ico

MD5 dfffee8293870e4b29a513aa23bf4448
SHA1 39eb8e3e40924741b61165ffb9531b1066cfe707
SHA256 9b2efa1fa35b9adbe957b21d1f3a79c008a086eba299d0135524ca2ca99ec571
SHA512 ec0da3527198f3aa6f6544b2018a986b2308f303cfbf527d89e86c0ebcf2e6cefcfaee77ed92c2c75b4d18fbdb1745f9494a6b8d9957a0fadbfb16c9579ff126

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whgdata\whexpbar.gif

MD5 816d11a1f84f1bcd43c29ffba49e0b5e
SHA1 c9e22e58b5cef3d5343d7b7a7590aad834549aaf
SHA256 1dc51cc31d23aa72f50d9940c76a7ee0b741732cb3b5628323d54307c6bd27de
SHA512 6cbcf27eee69080db239fd504b8ee896e4e64310cf1242c6c89a47e88617a5501a2e6e55a102ff37925ec24fd568b28705a7d62310258e3a30d2b3ddf1eaa6c2

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whfbody.htm

MD5 99b537eb8930de7543933b525d608526
SHA1 088d0562cad2b5b3a45ab224efc1479a2b28df79
SHA256 42e3ff4ed7b2f005c14c2e9bed7d18d43b8b24c84c1eafb5eb8dfcfe17cd96f7
SHA512 d576dafddbe44e0c981acdcef9d165002cebb60df024da436a2c8e330c011b5c437f0d0017ff0c2e2aebb6cae5e9650950e2553207c4eff068e382c354d004e4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whfdhtml.htm

MD5 7cdf1bf51c35fb02bc27303d9a19cc00
SHA1 57a913e0b00007ce9729e6d4547dd3f81db5d89e
SHA256 bf43a61ca8f1cabf89188d61b8bfac6769a32de2057ee91ea27e05558e4cdb4b
SHA512 1af4d5e43c0b30c32671b91889ea463dc014f99cc3de9ad49d4a870426613cfbe80337d6e24c865f71d9e0544f86e0fd9f629d7c336561ca79f20f01800e12e4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whfform.htm

MD5 d67fd6bea81dbcec72d67db78d6095fa
SHA1 bc873c4710ae0842b18ff49f7344be7355dfcaf1
SHA256 81d38f9cf61ccd24e7abf0113c2556c9e22ca5d6dc9e97aa9abe250f8aeab554
SHA512 030e5c7a19f216a3c68551802deb824dd22b6d5df320423251f35b7340b37f8449e6cea2030d77b78dfdaa653065e701a8bb213de8c590305b8104e73df8fc36

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whfhost.js

MD5 0caa8b3d4f18c627fc35440c79ca8ed5
SHA1 d73511dd74067412599f91707f91b2c041824c75
SHA256 8444081544732f8bd1f9312a1fc3e7692818afa4ac9017277a7327e958f953a9
SHA512 1e3e7d1a0d504a25bb4e5bcc6f48c90478b1fd380d5d6b28b6eadf7eed83ddd415e2ddbc615c36d3d036dd4ec387b835408467ff4db67fcc5a9491557076a4be

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whform.js

MD5 9742be448bb16ca252490b0840b8c9d9
SHA1 4c03fab30050d3f8e3b4dc6199b284cde117ce9e
SHA256 dff828a76191574be029582c454ded2a3ba41a1428602a0d5c8a63b9fd5e8690
SHA512 90d6f673d4d3c68596b15cefa5632de26b9f53ab53e0ced52f46a9dcda43d547dfb3d91b4685b2f303a284b6c80e5e0fc5716e3ab21b8d02358977dbafe6433a

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whframes.js

MD5 08dcbdad40f3c8a386bf4805c0925a27
SHA1 7ca941b1d1940d1b20b5ea821651d16852b9d01d
SHA256 4fffb263908d1a73f1bdf69838fb2100d60f9e2f21e65c8047094a8330d4e25f
SHA512 9b8383846e04c8b97db1419fe55c492856d519a9092c744d18d20703e45ed8e302926dd940f9241842dbe7777102eb216efb4c07455fc83c207cb492940f6efe

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whftdata.js

MD5 d37333bd77175ace19330ec606734cbf
SHA1 9cdc581f0a0d921dc46a49db0730c5895b68b4ef
SHA256 3ff3a18817c8de59a39b7b46ab88b23be2c5ad1bc8c869bd8c735e2d3adecf4a
SHA512 fe4dfd30bb313398929b5bb7f9f3793f9f6011e0cc5773c6f54828449c54f87fcdf4e4c222de712e64189b6f604e86ac19534fd2a26a9d1a82248c9c03822dea

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whfts.js

MD5 50b49164efe0c3e98e9bc114b79f6e03
SHA1 cf07a1075d6ab1d9f8f87bb60c8e850dc22862fe
SHA256 e577af5b3e2c8065c1509e705e0cb12362fe1d0e4418e511ade23cc57e322ca0
SHA512 5092a2d63c9e68f61996f67e487efefb9a095f38347d9d7c61f49d5a1bf1d9ac2f6f0539feddf9baca89e6d7dc17626666a98b5de67bebf21c24d8edfb6b9432

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whfwdata.js

MD5 4bb0fc10713f9bea59892c959f147a97
SHA1 622ed4fde2ecaad1f415b060fa86ad422e4e0437
SHA256 7c64c6d6aae118d33e796d9a7c8cdae800b96e1274d5ca6c2a9d7a82658ccb75
SHA512 f9a403a0a85eca85b84b94311c0d1c42e6dd261a1ecb9f030fadb66ed941e08f3c226ba2d8bb21dab05db7fee37955e3d77346cc79de7aa024a1b1459a170665

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgbody.htm

MD5 0791671f3f64f40dd519c0d647d85837
SHA1 f9fbbd9bfd7f0ceb6eac64d4077af459b7927dd7
SHA256 feb6ce2c5f655d06b086ca69d99959a9b9f981aaa67871435228ebe8d1b955df
SHA512 88928bcfc4778e0146d8eb838ae402fe50813b680972e819c08185ab5d38589a8cb5a11394c000da3a435aa20c11023027415d076f647e4f351d93b97b7c424f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whgdata.js

MD5 9d9618570354d0b2d9e5f95c9629ded6
SHA1 090e9d21d845c7666af3bcaec1ce00a2ddaee7e7
SHA256 e0c5415f1a59a181b5bf34a6d5e68628115beca531b2fc4d5a6da57362cc4259
SHA512 1818301689a3f46aa86b215c6d33495d2920c118eb748fecc04b111a2d49c810e97a2ab516e80f70e73cc700978ae6b2fd1a33b4b59b212a5c49a3cc5b4b2e76

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdef.htm

MD5 8b1f2b79111e46ec3d95d9b3a59eb180
SHA1 f100a6cff77157e7b5e7f1f489d5869bb2d0204c
SHA256 25a855db12d6d894d156b5367b02a92a70e2d5ef5fd957c50639aa3b6e9196ce
SHA512 ad7c7ce21c2b8c4177c3f3e0bc4ab9e2881e6b274e6768f8f1fcd6da41dbae3ad0a38a92abf2dd8fdfaacc2062d138125b0073a90826c024ee49376a032fe508

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdhtml.htm

MD5 9413d748684279065fa55f48824c2186
SHA1 7697826346fe8eda2f7fb13d9a96f90b7099f3ef
SHA256 26d8273feb98b35123e081711c3d3d4285605ea23ea097e8063cbf12adad63f9
SHA512 cc1cc46a5966561fb134f85d2bfe4746e344b32652fb414728d1687daccd8bbd85b75aaae3eaaab3aa0980ada745251e75ea867ccb238243d2c98d4bca29a083

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whghost.js

MD5 4a7262053ce4cb5c876e0b14c41f1b04
SHA1 bc9fb589a94c0c59ecf9f9cd4756144a9f5fe588
SHA256 ca4c90af638d20384c0e025ce01d711f771d2febc4b13b65a7d59bcc52697334
SHA512 da7cf56bef2e71f3cbed366c299d6754138285a385f7aef19e662ff2a0488b944e61880a5ce0a5376a05c76e39ed0b69d846c543173a5bd289b7290605b559d4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whdata\whglo.htm

MD5 e4339db9c63c34c7e9da368712e49143
SHA1 4fd04fb2f845e43ab3a32e936baf500c63ea779c
SHA256 fe01d2213c13c3fb5f359c6284f28d70dcdc01760e524047f01aa7861f5ed408
SHA512 8c20a2a98c3cb71606e3a44aa19a0ed1b3170d5f0004813e60bdb70560e206306bdefcc1a657b275f62fd9f8966e46b47ed7250c5f4c5df8dafccee1236a9dde

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Author\whdata\whglo.js

MD5 93b6a954c7ee4c0da718b3424e49084a
SHA1 ce74082d44df3449d06776b3f2c8d853b1bb7c0f
SHA256 1290e86df540d4da82d3d3e7c8b00c981ef1f84e5229452da5a63c524f6c3d8c
SHA512 6af737e55e6ec11fc520809be826e5a409d23916a4d826c7da56cc3ce063bee29fb75e4b5306ec1f49c26e032dbffa14d45451fd1f9ef283db596b4b01e27440

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whxdata\whglo.xml

MD5 5e3fd7b7616dfeedee26da2a32d5f6f6
SHA1 0722917b95953285365d7c25b7059aa4bf3678a6
SHA256 2bf13d6bfbe22a91409de2b99c3ce59461a1ebd2c319d3f6d57c7ca48829589d
SHA512 1a4acdf11bc4cc457a128363979c00efea105d44f0fd2dc73a359160f81590b5c0748a3d34e306d1e0ccb799761bea865329d362c95283d9c61d8b935e5df64c

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whhost.js

MD5 fa1027c48ce7cd3962b73f923db59b74
SHA1 0fb8d69d583c86490b94ce20cf4f0666cde7b18b
SHA256 60d20355b2ff7ad38d21bd1e313652d1ff028c163e2656f5313b4f16f80df0d1
SHA512 5dee60188a568caf160b9fff96a5c9749b7ac2919fb8053eaa47c4c8b36595a1e57a39a6ee2d60342ad4fd415a51ac2ba95636d6e14b105cbaa062ae47d28c00

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whibody.htm

MD5 a16e8aedadb1e40464085bf4866ebd81
SHA1 b70827e8ee2a1c137b6f9a37762e413901ffd633
SHA256 187cd93a392e99cb317d30203c49b44135444a8b22a707bdf19bed1a9f604673
SHA512 3bccfda967a5faecac7fa16fff29fc66283f4e4a8af83239b4512ac873980bc5332b6ebe5e2cdd58d02f951eb81e4893f9b0b774d25fe9c2d64a2bef7841cd4f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whidata.js

MD5 9ebb8894cbdf7b255cab094cd6045755
SHA1 23ffbfea134959d185aab636fc10212b90bb7ec9
SHA256 b33ca99c0fe9b9c5540207225af8c8f423ac0b9082afe9e4d17bc707f3041401
SHA512 a533351f78f73bc3e712978c8afd232bf9b8d874054bf8bd01c29dde505fc390fdd3b52ee56c1dfd080752288c63a09456367ee56873fef5cb8f857c6a8a05da

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whidhtml.htm

MD5 9bcfb4fe90614a6875104826162eb054
SHA1 1e439ab03b84e2fe7083dd43ac4f2f00e62a7985
SHA256 8c3463b7c7f64d36b169c85b4b2ab6981b8cf33bec2d677a60f9e1c10253fc99
SHA512 b30853be3465e4ae9e8f4c9e169964bf88028e69b1428e83f7f0d84755d0eed70c4912de10b0b6a5e11c6ce832e1aa5fa6fd44b37f13bb8169e053190d0128d0

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whiform.htm

MD5 93ce8318f2f79185781affe3f5e6c40d
SHA1 8c406d8495bcb573cdb561f1ab6400cb5db5190c
SHA256 902c02f9a17020dc99e76617e5b7861bb72d95faef5df141c4cbd1fd418711a6
SHA512 eae226cca4bba5f416ab34a7a3717c99610258363270e69aa116fa0bad9910c4eaa0391004e4c6b6c73eb55ba047cb95bcd934f8ccd66af6b3b1abdcfbdd3650

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whihost.js

MD5 806e8e4d37fc635d2b7d675e98453af1
SHA1 280b2ae14375d81e762e1746ba83448462c967f3
SHA256 e5de80615f9107777a5e38f1ef87f801dc920e694eb5af14c43028acbd30ac5e
SHA512 10c513edbb5e77e6487ed0e159b677dfd8f925e68360c614262f62afc043af4db3dbe80f74a871c0fc15694fc1764288952507725952cd937c4cd58cedec1be0

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whlang.js

MD5 d5dc00814b8bfa076690d28dba02e2ef
SHA1 a952c3cdc968c2638e3cf03ec9ae3f0dd49cea23
SHA256 9e63dad88e1d0c75d6bdc72af3e7aecd2f8db831fa9646a13328137b5cffb350
SHA512 f65f7e78f21335077ce62f75fea7019129c5c4a7898dd73b3e7bee4d4f0afbf5fd662e71e3553d55ffe97ca26fdfa8cca7e5a75148596164ef1f66d9460de824

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whlstg0.htm

MD5 98739969c5a27c32512e0d45b9cc6f22
SHA1 b674d5ecf280d6567de60a0dc7f6cb796c181b5c
SHA256 28bbc0ed57fcbe60aa2d9f7b2a16706525e0139546f4ef4a1360fd1ec419d05a
SHA512 cb73bb5792f3a8df9b8f404046172b288ffc53816ecf7e6b0afd5097c09e711b4328ada0c83fd7787afebd3152b00e890e1bf385eba4bf240aa4b9b67356d7d4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whlstt30.htm

MD5 ddf4c1c16adc62904385a3b2221f8866
SHA1 e8f0de0305af31e8f723f3f2f22b7478faaf7cb7
SHA256 5f0e07bd96d3021fbb017bf6101bdf9971d9d2e31945547a25f5bacff37d2a09
SHA512 03e03398085e4491ef1d5db99671831c3b533e9782a8b5721726957c668067f41016bd81a74a7f78da128b51069ec461307a2476cd7c41ff546775e4a35d5c22

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whlstt34.htm

MD5 a55e76a688974e2f3c601977444511f2
SHA1 7b2c2f9f109b8bcfc55a63ef197790dbe022b883
SHA256 11e1df7fff9b3d39b57ed494c7784e989e504f83ddaa5b0d0d0298f00f3af61b
SHA512 6d23027c669d0e944f6bced4cf554978cc6cec9e9209f3d429dc44691d61b955e93efe9d350a14e86f1b00844d886bb1810f8054da2259c50cf67fe8d0d89475

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\whmozemu.js

MD5 22b846bf4d416129b45f63f2fa06bb51
SHA1 26155b51bb48ef104589b879d7a5233f57917705
SHA256 4087f21a9cdd86d0e249da648db6361e654965d8c28e14380e0dd61907ded999
SHA512 677b2670e6bebd06b5e8b2d26757fac91cbc3d5f8321b8b0a2271c872494f687fc32925c85580c54ec73e695f616568c4bfe46cbd8b81f0f93f557a7270b9e31

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whmsg.js

MD5 ea18bf7f581353d30a6365f3c8bbb6c2
SHA1 174fa8bd46ab9d5d4b27d66d76051d73b5deec19
SHA256 0a6e4968196ec12b6f4ee524e3339f375d4a6e749ebe6a0f467616733007543f
SHA512 76cbbad971210f9048fd83227fa791d7fdaceaebe4aaee9dd59fc7454a6ae9cdd7f080b0c12e025afb6252f5f2a492375d169f9236ee71b6899a9925e3c620da

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvf30.htm

MD5 3e2c971a4fc8a80c24217b18307ab0b3
SHA1 5ba85320e44543f58336d6ecac13fc5e98ca9b1a
SHA256 35f457d19af65ec57e4d297c3d78a67d105f94cea2a488d64d959d1bedfcf233
SHA512 f7c3d9aa479ae52e5bd0ee0dcdaaf74b0b85ea2137ca7ceb306e27cee0d47a13c8b5e8dd3313f4d8bbd1f078f03cc44c4a87837cb665115b54c4e77a4fc68dc0

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvf31.htm

MD5 e347ba82a43a1040fa9a3557805119af
SHA1 f096893a7ed47d8a15aff375d3ad8ae0b6980f8c
SHA256 cd268d5449e0df7b98022e343ae767fd7d8a3e9e067022a7842814e7dd467c42
SHA512 d8562b3207754e46f03b894d60c9c4bfc2e0e794b953be5dc6bfb7567fe706099aaf42bb6a40a7f40ec27bdfd29e5db2a6aeae325170e27b60788a8c152bac82

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvf32.htm

MD5 5fdfe66234621e9bf34149fcfd985efc
SHA1 edeb08e28325671f1143786ecc0e5a6553e23c28
SHA256 23a267de8fbd15fba1c27181d921d189c2bc46071c5bebd3dd4f6964ebf062ad
SHA512 a8354ce824e7b5395b75c4bf669f6de97f1a6819c10651e2b451b88eb4d67b9ac461050d641b6ebd380c811f5896f269cce084257991a8ff50bd605800d2b02c

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvf33.htm

MD5 081a9b3998b6e23a3c16299c501d9048
SHA1 c682e3c527cfc0ab551e7fbd2bae39c32a9f3fca
SHA256 02f8b24caf190db85c35d88a6ee73b2985a1166927f5a1208a1285d59fa01867
SHA512 da8c6c7285a945a9ef3d341378d19f27b357e8b92660b1b943c606e63f3573492a19fdc128e568f9cf099937d1501f37486d2894f4674de29b62301d3c2b95d8

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvl33.htm

MD5 2d0b25d38d15fa63846d0e908cc2fcfd
SHA1 769701b63a7cc2b33f096c1a61aabbcb83748bbe
SHA256 601aeb934480f34cbb5002ed646f3bcd3a6a14def030efb1c9030e8935b4298c
SHA512 2bc8591b5fcc9e552ca783d38f9e0807542cc292800cecb999e17fcb8d1452577ac1282c4fee2b75c5d536b1d04c9457f182e2fb3be6b394dec7615352cc7cb5

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvp30.htm

MD5 769329e0a3053e233f53b07139b25498
SHA1 f30fd22b6c0a2c6f08c0d781a432644fc96a42b8
SHA256 5e88a406601a839e75008c78076d6f71570befee5abfc3bec92ecb2d28ca38eb
SHA512 88904bd030d51dcef8d547e593460606aa95fe46508c7f48051bf3760b7e1ca4a5ff879d0de8223e0cf619f528e21b82408a9750956027f8184413dcd1cef893

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvp31.htm

MD5 de38f46930a5c6e687e7b110205140a7
SHA1 4fe1ddf0cba5dcd8ba982f5681aa0c22fbf36550
SHA256 5d92206afbcc0fbdbc183b3004358c1bfca013ec350dde75eebef69a6e8f2a8c
SHA512 b2fd8d496162821cde23548735070abcf457ce1291d2ba1e6b7fe583a9742c529df8f7b9e78b0a94b9c5228c93410db8ab81d18fd66d48cd351d5a0cd8c20118

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvp32.htm

MD5 501beebaf6add98c75c64ce42b1d8e1e
SHA1 c2a6ec41d6917da46c185313436f59d74e477577
SHA256 91d6fe92bfc37b1f2ea5a8d4dd913cfbe084d084f48ecb651196c95a95372bc7
SHA512 96e39349091d7317d3bbddf81359ca7758def7d377b4a6d894c205a7bc5e262043f6b801be406d4a66f5423b2c5035a2d3aa8602dc4126af562f1223fadc219a

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvp33.htm

MD5 f81502eb254bc2a838213fd11997a7f4
SHA1 6e0995c0c7003408d48197f556ade455131f76dd
SHA256 c8e1014c94361ee67d52cd0ab876d608e61495d0b6ece05437f1541ea698d9c8
SHA512 040df97e5d432fe12818b61f139e40e76d79b3dc9422e71c1a9c2a52029e1577ab42e584558a6e385a2a13e1c4c2f77d8a24cfbbb704284344cfa4c8e53d7a23

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvt30.htm

MD5 7ad52896c37e1d2a8ba2b5b12b7574ce
SHA1 440f9166f0a98016a3c324c677f7bf3afa2da95e
SHA256 2313c72572a7139d25f2c0da3d7854005110b1fa4ae4e9868e15085d6d56c8f7
SHA512 bc5d7fea1696235f4dc97799a93085427b4ace3aa8f38e30c089c14c0dd33f21785f0c1accfe6ff3223cf1fb17cd9f71f964bc1de9ce22a80f5f208821fed2bf

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvt31.htm

MD5 a3e8083d70c8cff3a1978577151a3074
SHA1 d3b3766b2e22f2ccd76c4c5c554f8252e0b4e143
SHA256 a754ae6fe4a890d3d21c8160694e6be0336190f6b87d8a37b54b3ebe2b66f594
SHA512 57a9af4eb17755205ca9a6695674433ce08e15cf870d418c84e971bd540ee1e9584dd7cc4bd111a6e827368e20438ee0aa43e9924b309ddb9da4b2eb3a8f875e

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvt32.htm

MD5 b38f5b310ffa74c91bc436705472b23e
SHA1 53e40be1616eee861277f009b802f134b54b8892
SHA256 716ffe90dd6a6159f00791ae429837958c7a8515fb8d879668de22439325974a
SHA512 a918f0ba4977fbc5d18b6d946202b0ad05165b825506390d397977dff4e85f5a3050bd23dc281dd7b4cbcec075431cdc4c70ac606ba8d10c5013f58431f1f9b8

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvt33.htm

MD5 0afeb43bcc8d7269a00b6ae7fc6d5bf9
SHA1 5cf9bb16be4b0ce2d25d93cf9c44d68ffa716dc8
SHA256 a72dcbd88a79d0033c89e45f4432d3039c0601e7e00d62b70e3a3e23113d49e1
SHA512 bddefe5a2df58958e2fecad8c2752449bc9676d815aea7900be3ef91ea67d15197d106491aaf5d6d6dab614874b6aad232bf08450099e1951aa26da23498d905

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\whphost.js

MD5 8d8bfe85030e99040eda5a9c70d10b0d
SHA1 e4a9e9b96d132c7d6c26ce3deb1eacc8ed98c869
SHA256 9b12c71e6e2e0c1a83096505af1af6445d4432756a2c4b45758843ba70f1cbf1
SHA512 2af0f0ed646a65e83abc28cce7379276394f541b54b1de011182b8a3229f233780709b9a9c8fa7c0eda0ed2bd394d3a22d5a08df13c30db73be5fa85ab83d38b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whproj.htm

MD5 517531845cad8b088c02fd94c775d8e9
SHA1 b162227ca23a68c18c1d30d49818e5e7db7afef5
SHA256 4d65b2c8464e612133c8fd99b4379d3ddfa74aa49b348801bd200ba1868d7fea
SHA512 7e375529c5204f788537533c8f805b203f0913e2bae12c20c2718591ef877d3603ed9c60632fd178e947689713f0568afc101b268cfc6c98487632389e874f4a

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whproj.js

MD5 242d275476902d17d6bb46c7c5b7990f
SHA1 081683137bf633a388d60e02780fc8c602d82135
SHA256 3a71008b82e1a1145ff1a652294759284c3e0f05cd7f8191148be3bac1e09131
SHA512 62871284eaeeb68d2d546fc41f72a3c78fe8b59f9a1b2f36033904e09fbe1672999d205f7869c41e7549c0df7c5fc0ea91c038e4e3f7935f4b2a4dd46dffe360

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whproj.xml

MD5 f9e81cd74cf6d00b0eb786d97128339d
SHA1 89fc7cbb1332693a44a6616107c03d1fd3a9ef04
SHA256 ecec62562d2471d047df33d36c54c706aa2d87ff88e2d1f81329f4c9a7a74793
SHA512 22dc331047160b7affd0dc6d48b165cd9909b2e510a133af2dc887f4a01d3cd3a2d2a41c37cea02b380d1361242a96d66dd9ae57dad13d2cd22810a1b240380b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whproxy.js

MD5 34ea03747542da77b750a80d34e650b9
SHA1 c67e8db728cf6efb6ac64d04d2706fdce347842f
SHA256 1af0f68a4d0a677febffca6ef72eec48713c6b44f6a564c0bb1c0d45732aeb45
SHA512 091661e996ff8bd075a51ec754a7827d5443208a51bce699872e7d7dd3449edb155a67ef6a2e7d4e989c186844e746550f12d7f5ae5cb2e79a1dca4e643e55da

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\whres.xml

MD5 78bb84d5816c5e51fb8e33890c25d853
SHA1 e745ee9cdd62c2fd9719659eccb7626930220924
SHA256 f9982c3d0a43fa001f5542669c51b44551da65f1b726b8586a1f555f3b87685e
SHA512 150e120fc91cad224edd0756e23b66456f9c9406d5e8825832285a3f0a3355a981a885a01b67efa4d100c84e8706d2f1dc2b0f03e0b49ba6fa500dbd98666cbc

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whrstart.ico

MD5 6e1f3bf8ec8fea0f9cb4ea51c7c1d165
SHA1 911c12d6b5d1cd43085122878eb66d7985700e13
SHA256 ed4401585d4a0611172f829f1f56a82a01ff24cdd89c72f6708a58724ce55c1b
SHA512 cb4f7a35974882cdf05478afc1058d92051bd86f4f8ca5672140ef8dc6e92ff10c8f3818cc7ce66690d028445fd612258debc1d9c9b7254022380a4c9f4877f6

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_banner.htm

MD5 0c6905c91f4cfb2c7e6efe134d90ca59
SHA1 3ebc0a08ddb91801757e201d5f6f50cdfc46d021
SHA256 f45aebe1ac4f045d1b6a0427413a67a39c805190360b39500a22459f36546b79
SHA512 814b25f7cbea23bd88617bc5173dcd35fec4abc1c29b8dc2abb2f862ce547803d68818fbf97b645f8b19b1313d9ecb87e1eba4c1ad09b7b702ac9b4639df4ac4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_blank.htm

MD5 d658ce6c4bd455babcd752878c3acdef
SHA1 92bcd16d20fa99a4630fde701c183e7acc04de16
SHA256 b7e65caf6fcbfe75c681b3dc18750bc4beb34d8bcf28b5f804b901fbef11e26a
SHA512 01d05a71ac7dbb91f952b15d863ab353c3120446dd5d8141a6405538ba995224ec19f09ef7fd8ff671052cd3a95c76c5f117fde923e09a2377b993e51620e689

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whskin_frmset01.htm

MD5 0bc0359cd508a95670c625b1180fae36
SHA1 3255722c3b3aa94bd510d9f09eaadf385c89087d
SHA256 2e0db80d59c5e271a1a3f044d55462738c792aee45fd059397f45c191b7b3300
SHA512 2f48967b684fd758a3548f43bcab4230195cf126a7a5f3614cb23eaee6e144a1736ac21a81fabdc5c1539596d22dfd8f34262c7b1c731f237067231d794fa8c2

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_frmset010.htm

MD5 299c62e5182843a6ce14b232aa4688ab
SHA1 d8f54ebf8e094dea23a96b1b8425011472eab104
SHA256 56544ae7066b1a85bcd0c3bd0ef5a8cb22a5d7110bb9621b6c1cf49362162843
SHA512 1951998f50292c0a4d9490060bf80c63e2b0a6008dba1deb86f1e2bfad14353aabd2acfb8d6a3a1a241be3d0f0bb5ccc4ddc148e3db3fe30a1d15a70616c354e

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_mbars.htm

MD5 da7f5206e813d5ff6a8a2ed21d16c7d2
SHA1 f56fd9a980e24ed4149488132cf345cd1b2d2eb8
SHA256 30fdf1fa3d52beb185da3a187c2b3f11794521e798eb2f2293f8430c46a99e9d
SHA512 8397300f4324281d69b041f581e4e7bc73812998428d0613ade12498126954b438586153f43d10ce748b799a5fea47cb7748b08cd636f00a241dd79471394470

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_papplet.htm

MD5 c134ee0d644cc6db9afaa226a0684f1d
SHA1 6efb6302c4d0e514f0ab65c49b6a140d7992b2a4
SHA256 ba162f95d479025ed5e59933d1a7497d03a9701e523cfdae16099e9b8cdd8965
SHA512 0d5618c67676626bb48c1f1d3651b3e58447d02f90766828f82ab8913fe70dad58f0acfb621282d6643debb799ac9bd0bf57170288ae462ea20cd2af82674b08

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_pdhtml.htm

MD5 0560a95365d7468f2a07bb0809a25b53
SHA1 ce28b13589bb7de6af918b4208c7ecc2a57cf7d3
SHA256 090bd277796e373d9faa0d6b7285c2a2ba8bf8dbd8065bade4ba5fed8a024152
SHA512 137aaaf0e50ffa838d56e6d7e83de9200962652c9ab16c5ef31d242b808b9675851ec9121c02402efd934069ed37654b05eebee08a6829b37a50c6490754a026

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_pickup.htm

MD5 4c7e089981953cfd1b6428709939c7a3
SHA1 2cb4026f6effbd085b4237e3e63a081e6ded1af7
SHA256 95d891b8e0d20ba2b4971490448c6676c7ae72b9a2b5deb135cd1bbe8eca816b
SHA512 08a8e355bf8f6a27221b737483a3f951c17cac5985f7ac63847c4e5e5acc82a2bf70c1dde0ca375b2ec4267f8544b5310482ad62803e7d0b93538f166104ed45

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_plist.htm

MD5 ee7eddeb0fb27141899d32ae6ea18bac
SHA1 8e67ee9c96d839a4b90ae2befd2d7cbe04459edd
SHA256 44461b57ed0a977da6c4fd5657fba6598ff16e31d8bcf446e2234fe392d9f176
SHA512 668bfcd825f65770c7c11c09dbc6206862fdf5dba8d561d59e8d659fd9746448d92f8246b6e0bea22bf2ae2402dde52645d988d4a34a8ad5407d8f34a79db8b7

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_tbars.htm

MD5 0afda53c062de77c5fc2cbad16f10b30
SHA1 eaffae3901ed6075af1f52800b490fdf6c8516c0
SHA256 b08d639a06634e1c41ea16d4b7441b9957249da7a357a578b8dc8e1ac1e9e71f
SHA512 3047143a019b26147402f684e197068eb26bb3743f91526d8c3f6f256112a5b61533d5d2f6122b1aa1a33ce03cb67b913d0ed348c92266b381873ee17436ebf7

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whst_topics.xml

MD5 e45edb7f73656a9277fe104ef80de6a5
SHA1 3c97bc7dbc228b5a6def316f925d10dc8128cc78
SHA256 834b8f8b30c2f6d47808677a23293d9fb4b4091f1034751adab17290d721b222
SHA512 5bb4f272703b87d058b0e0ab22268b9ad6ddff11e70f704e60eb473176ff86c20e04eaa26c3a5560fca5765af3553191b52818fd70f36a56d9e939292a90ac22

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whstart.ico

MD5 1e6458a407de1f20694d147b737b81f9
SHA1 ae563376e133425e65474dd40be9f11cb78155e3
SHA256 edd1ab0dde904564ffd0cb248d10cb7a1c584bdf7ddfd0d162eba784090652c3
SHA512 c952825e43783ec769bb6ba78d8abc459d43342038d0d6c6e48304308c459c598ddb846c9b87360890e6b0f1312ad10c72decc74a331c1294c9f4baa93f062d4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Wavelets\whstart.js

MD5 06e3b58d316fd4fe3d636430f5627d39
SHA1 ffa9b0af179146e174fb3f69a50364d1b3957142
SHA256 4fa46e1bc542da630f7ff72f6a06a69aad2e3f23267e35d8bf61e7001b02894e
SHA512 3a1bb9fcfbd24effff5b25a4164c1d547d7789297a3a41e17098c93d4b3b392bb2380aa0767121bbaf06f51705a03bc00474564a1938c3e02badf3eaefb212de

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whstub.js

MD5 fe44d7aaf6ae6c6ef38f7807c44a4bff
SHA1 4e21a3708c5d5e2b1245c73c8e8febfcc653d684
SHA256 81be343405df1d3eea82bbd03c67aff12bbce3cbc9161ab1b09b6143a3ae1135
SHA512 3edf123106aaf63b8e22f8b63575ba0142feb89d4771d34fd0e10e9c64339eeb0663b42e37ae1a1f769eab508b7afd02568a0ebe46024569bf10a3fad5723d41

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abge.jpg

MD5 586c64fc7cd75d0ea6cbbd424fbcb20e
SHA1 4ba026d8f73b55728e7f0adce5c85a12a053362c
SHA256 0c42e9982855b450e1e31ec9d5b88d25e39caaf71136a2ecac0c2df1a56e156b
SHA512 ba38789b8cb6dcfb744d0c83ed6ac4883680a0aa0fdab49c582e1ac316152f7ff2f3cbccdf77858b2b5eaa16b4433887fd73644538d73cb05550a3ab519e7c71

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abgi.jpg

MD5 12fd84e1817a2f19cce69e0a474f1af1
SHA1 e607cf49365aebcf037b9c7ae1d84503a1301bf2
SHA256 b5d776fef417cbba2cf4bb29d0e949fd074fb748a5dee70c802544b5b3dd4d69
SHA512 3fe12167e411dbac5c7985e1140787d51b236941168cb0292b83dd3e52aa06d98ce6dcee9b1b408b5c578803df9cff52aea9ec92c337b3671dd55337b9289fab

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abgw.jpg

MD5 91b858e0afa319b3256f1e6e39bcd31d
SHA1 050f7250984db30d387137ceca32335982d51650
SHA256 a62c6589222865adb6c07482b09aacacf6d53d92110ecd628d1384bcccf2994a
SHA512 fec0e3c5043245dc8a38a3ab5c5b93fb0d3ceb53241d4adb7990bc251278d61056ee4c0cfebb88187f986161fc38cc94f66640419064f095ed913806dbd49aaa

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abte.jpg

MD5 fa3cf7af426aa72620c9642ea7656e1e
SHA1 f8b1b8d1d439f4a60ab1e5ec372371e645a37075
SHA256 581683ded4a0d38ce57e034c3d73c6b2be4cce301ceea9ba4ed94ff3e7918d2e
SHA512 d720b15ec959e8aea4b54fc6557b2ec650d32510011fdbaaabaa22117e4e7dd0a3c42b2d0d1777123fc1180f7836264756d007b6a54ce116e077a59254f8d903

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abti.jpg

MD5 5e5520539bedbc77c33bd28712bc56d5
SHA1 da1d64b22889d4b7c2af585c714e98c66f767251
SHA256 19a831a9f6b0845a445987279b7cc408479baedc06735c001bafeabb2c8e1d2b
SHA512 6c5902305d98e67e21d9d9fab42f1e16465db03abe7d41d0080ceae02bb59f09adcd7a1a54da40f023739d2d6b655c26c233eddb2590ae0e706ca5da21f4a858

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abtw.jpg

MD5 3f439f76d1dd2e01e4640f016917f41f
SHA1 9199104874bd86a64d603fead5747256e93b6211
SHA256 040693296265c7f31cd6bb59c76ba8203735aeea22ff14ecec3580a857863da8
SHA512 a54720ca7c90050cf2f0a40d1d00bf0c650f4cbdff1d53fda96aaee007a10eadab8af3baf5e08a3325d17cc7706a1b781ef282fe26eb0d6766e73cc2662500c7

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_fts_h.gif

MD5 917366edb341f5cd1e26bc94d140c699
SHA1 b5864f56ecb610ca72796f7b56b72b28cce87e56
SHA256 858b2cbba1ace020114ade5a60fd61f531c36913bd0ecf5be25232e1ce094b22
SHA512 470e1639ca171884e1f6320fa2851bc39f50d7c68e28e714d7a4f336496bbb6ca3b96e86c00c78efa1e09329c2c0e544c9e34b05e5257cd0879938dfb8c6abc2

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_fts_n.gif

MD5 adadb15438c9715049c526c6eb88cef6
SHA1 6cc31eeac44441a24f9a4de1adbe803d3fd2a245
SHA256 0e7b777ef368a1ccd30cbd26252e884e9f2a82d39632c500d5c29fe2c8f7b80c
SHA512 8db9179990f13ea0ca45d57c57903b1d186213c96319c1acbac3486133e6508475cb6124a222261f266a7470b68e4f00c77bfe9b4cafb6bf276972c7e76f231b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_glo_h.gif

MD5 becef04c921e830655cb9977b332f35d
SHA1 1dadb17f6c53e7f6c3c9e1cec6332a8d8a3a3ffc
SHA256 7fac567d4476e14da40e666a2b0c5b05fbf93c9d8d37f7f8c3d51ac2d9c219eb
SHA512 8256e11f59f4893b3574fd17d7a1bdde64f6f0cf3912d3f142bd5a984bf415e8ec301d39b1c8dd6f7e6adf791aca424cf1f2413a47a8ad5435275ff5bddbb723

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_glo_n.gif

MD5 d8c8ceb5c2abf7d88bc9f894da0dda18
SHA1 270fed628ea3ba302d1d8e24b305ea83bf5df2ad
SHA256 f7a1733b49d2937909b854a324aae15a3f11364e78029552a40755ded1043096
SHA512 154b23f308b02177cd2ac5eddffa3bd05da21aa0422e04c78459b38aa0f9c7f2e5d6e5682f6c4f6783594d4810c3c3c08198f92ee78cdb70e3978e6e1d634611

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\wht_go.gif

MD5 edf56bbb0fee1f0b448127ae452249ec
SHA1 935b9270e79de934a6ab5228888e69e30eda936d
SHA256 6db28be2dfc94288b83c076a5703d17102f5f46c155f23d4993362d34cf064da
SHA512 922b2abfe3ff99a9e9e925869c5b470839cab26293a78a0e9aba2175b5b8d044961206b015a81094ca1527e5ad046b32a2ccb3490e6f50d7a4173dce297d17a9

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_hide.gif

MD5 c095baf1f671b2538e7f8f1e711feaf5
SHA1 c66799228f900aff0d6fb6c3104e7ed0ab958b82
SHA256 7c894c5fd5c8b8a6360c583823ad3db83e2ed5f06f7916fa1f1b0a23246df353
SHA512 ce6a9822962ca49ef9556f4076a15839353d05e4e2e8d187d1cef527fff70d6890e54c430a16d46d766f76daa32e623c753b41969a6a53b6766b11e53591828f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_idx_h.gif

MD5 2e0a50b1ee7aaa80b23c10087cf06fcd
SHA1 433d568f71c2269897a016d2a6f0756e1dc4cc71
SHA256 0afb8a8114c472a9e4e21e8ef89a6380a1ea56b149b82b9e1083a5737c135d6e
SHA512 46f87d28f8a30ef74475a809078346eb944812893a16106ad84637119e31e5832b0802960c3622f9640f6a29014e9056ecfd8b87a60dbc6b766ee9a6b633900f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_idx_n.gif

MD5 5f8b6560f73b8ca9ce129d54555bbc37
SHA1 55613cda0158c106c66369d360fe6df1579e1ab8
SHA256 b79e12c5554e41cf00edd88aba409dbdb13cb432f19169dbeef913ad3446349a
SHA512 5ae3e1c9bbbc32669ad5bfe2ab23ec77dd2d76faf728d10f42a6fabbd985e9264b59ba38e9ed6b667b4b6736d0311a5f628623ffbcefd6b86e7c40a458d4808d

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_logo1.gif

MD5 50cfd996e697f1f3174d7a299084bf28
SHA1 dd818dc1587dc97fc2589fc877556f72a374d721
SHA256 e85a1a4b2df57bd24e18f18cf8a9f0343268b6a7c1fd1f8fb4d87c390cbd3996
SHA512 2e295b83bef21c0745e1161bb28dee8118d3c9a2168bae59591d4373fff615946a431b2c053f6e130b76e5e23e0769c04c359e7245ce4432ba0e0d1cb05ff519

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_logo2.gif

MD5 5c1a2c820d4fed4c074004d90f8c1c99
SHA1 72b237aee0d60e8b09b3b4bcddb9b91be8a1f3da
SHA256 2ea30e663e286db51621f29b9c46792adbfda198eaa1692a78d442fc4e468ac9
SHA512 e2b42c011b28ed1e641e72d6e266e6277d5fc8f96dad6e51ae587d61b049349087a1490a91a2bc9cbb2dcf76d6404cdcdc4bf163e191316fa9021358898e9d13

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_next.gif

MD5 608a7da838b43443258e5199566713f3
SHA1 f6c382e7d565dc5ba642ce9d42c619eb30b78ef8
SHA256 cad9d3a7c0610b51bf5a891832f9ae2864429b68197ea1b31fa04d8a4249fd62
SHA512 bde7d7f21f9664b3dae243b651440461b0fb5b9f309f33c73f94b4a05d5539c7782b8afdab65f1da0acc7ed84a7ca0afd65aba5f7baa098e445a95d4cd396b4b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_next_g.gif

MD5 acd2543155c682d5c4b395ec6335c33a
SHA1 0a1e58537401183ce54b53d1b1037d284bd8b32d
SHA256 7406b9d0dbf064773874993c92832ba38fbf795f9f9499e27632061798698887
SHA512 5baecef4bb18cf25188955b62020b4cfccc9232d941681701e802ff73c985a9436bf0cfb08877067a9f2f8bc116451d5149f029fef2d7b1f2fa681f8c370a201

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_prev.gif

MD5 a7de8a63a7156eef42f2c5d5ec0d8ca3
SHA1 753ad4f10b85df009b4b4ac0e7d3051db329d896
SHA256 949da45d6905fcf07ef370a212fc42502e0efcfe2e5db979cbdb2413ec6ff15c
SHA512 71cb18f689fb02565e4e8a8df5518b373e24953beb788c36746021fe56369b02efdabb85fa4abe0862ebaf62917eacfd2df6290981d7cda8e42bdf00766f65bb

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_prev_g.gif

MD5 394d7f7a354ee81376956c392336fdee
SHA1 2df52ea2f115e045c1a8c3e3d469fd083a0b46ba
SHA256 87a64cbbcb9ba71d5c15eef642874f1574dc3ef23bd8e70498da9182b290731f
SHA512 5669e8b161671bf076e7fb722c5e03a680be6f8fa96c558eeb102903c52916bc4fc9b686c907f7b016731add914278ba4bd1317c3f5fa7f376549412b43c8291

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_spac.gif

MD5 221d8352905f2c38b3cb2bd191d630b0
SHA1 d804b495cb9b84b9007a25b5d85f9ae674004cde
SHA256 89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
SHA512 cb3397776f5ca1d15d24786896b2478c6548d0b14dec0832bfb16c4c419135300704f8a7a4dfbf56d625429c1598ee8110958648f25a3cca09e6956c1fd3335f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_sync.gif

MD5 9aa58ed8dbf256459d80066d06877113
SHA1 d8a4ecc593ef674a8872bebf8e77cc72f50ed481
SHA256 3039f099982e7aa10a6ade0eb1026696295d4536755b581f9caa80b09597d635
SHA512 cffb025efcea53d1c9fa4797d7152eba8a5505667f2d18e745ec82995687bb53a5e98b220f582de06b534eca2460a4839759ee8e25ee3cbe300c8811b85a1074

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab0.gif

MD5 7b192fd89c97b8f7af95ae178a6dfedb
SHA1 1151e22c5179138d6d8a7349cd38aaa02409687a
SHA256 c403eb07fbe25b966d43e8468eb7e3cac18edfaaca8c4b1e04628e5448e914fd
SHA512 575d191a1a40aa83db5749a2fa7513ab2ff871ca747d50192b784388f6389ca940fc949ae80aeb3e28a9291c6ef92654055f49b072beb248666a44b7310a4cc6

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab1.gif

MD5 6a082cb4901285175872f3b76268a597
SHA1 7ee9ece3e1e531b5fe929d7e834931c5afac3567
SHA256 192e945a7099fd87cdac4f99ae8144c20d8047130b7f121e9daec23d13557001
SHA512 fca3af91e676bb3dfccf8d7580da1bc599e80166c1cc7a9c15d9c4d1610aaf9f1a37837c5a65a48adcd73edc183f2fa21aab1f20a35bf58addfdfdc35f77b2ed

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab2.gif

MD5 ddab4754b9a4f3212c72879bc8dffb35
SHA1 f5878fae00c14a38f050ccf7e8a7711a4bdcfc41
SHA256 cab2860f8f88f82e80209c126f23fda9104c5de7b27ce0b11148ec7146a81c1c
SHA512 a88c26b9615325ae1eb494d2c27a19403d1f46ef0c8b7702d0a908ec2124a7de8dc79460488b278d128a8c4000e413bf903f6e131bcbf644eadc02af7893ffaa

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab3.gif

MD5 c63bef5aa8f0e6dc4fcf62182893d329
SHA1 34ca3e0835989ff93405538cbe68cd6d9d7b169c
SHA256 66aaaba618443f5d52513d38dd4fa00012c9d45892a543c259bce1b1556c1b49
SHA512 171b52fe4df38ac37cd02f0623c8af5647a66e57ab804822cb6b977ba0066cd0fe9123d85496a93624b444dd011e2f319a1e2c190eb8e69695f9d18615f19bac

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab4.gif

MD5 385bc1641e9a9ad25426996fbd7ce24d
SHA1 4a8a853ca478c16a97340925387462c51f873584
SHA256 20c1a206d04ac4c5b42f46d6f8408e66b5fa2780ad4575bbfa3509afcf7c0bd3
SHA512 dc53ce2d637a5e37fa9fae1f00f4cda9cdb360cb96e3ca11c6521586e4a282d62c44010cd24cc356c03a265d8457590a8b555a6c527cf5a1b0040a8fd0d6baef

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab5.gif

MD5 9bc1c90bf46a0f2be761bc8ccc45abb0
SHA1 026e485c9139d639a289eb55a7c6cc09b3111efc
SHA256 6d3c501fe83967e1a800411d5dc8195ce881918922c5438369ebf65a7dbe6572
SHA512 e960528fcca8323dbc168940759c0947f18240dc7a264eb7f8c9329c9b116ffb272bd780ed108b84d3c1677f8618e27ba922e2eb29390f554f813733a522b72f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab6.gif

MD5 3d31b2f71c1cc97a395d20bda0ffb068
SHA1 5ca9b2f213aceab3174aef3fbf457e83d0db6911
SHA256 875857f593299e344d62df95e4c58b3e951458976083b23e051fa5bee13bf5e2
SHA512 b65977ddf1f781c1ebdd8a851a30b14968adb0405c32c2c657c8629996293e1a83da43666faea3d33756e53fc44517378db88a78742752dda10508e885fdc373

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab7.gif

MD5 90fd70fe70058856ac3e63226003acec
SHA1 7e186bcd776931a196336f307e86b659a90f2e92
SHA256 20dda766b4e4700339a23874ff7c7e8c57c9e2c1ca313258f6c137fa52772eb8
SHA512 31cd5e45076c4691ed237b3ae6b96c7dba881ef167dcbb2abf5c1f105be2d85b3f7b078b7aaa3920957bff5fb4e4633d5d51a2d2a8470891b1af809c419c26d5

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab8.gif

MD5 2fa577b3a945f2c917849dd0ed1a0d56
SHA1 b037f0e7b80120816c7990888d8ff7312f616f55
SHA256 c51cc4f0eddb34fb470bfee5b72d2047af9b0256f564fcca02c4d4dadddeb3dc
SHA512 0f1b9eac52b61ea01dfc6d6f6915111a6482d4f50191283cf64bbc9d420c4ae69c91d10ce0296e1a6d87f0c501b7d6f70fd9a9ce6865928376afba1720c37895

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc_h.gif

MD5 fba75ec9e7eb2dd53aa6bf2d3dd8616e
SHA1 3ed71d75f631b13052ea59f4ee0bbaab6732984f
SHA256 9deb2413d98beadb35bc8c0d95fc7a3c2c57a5dffbed05471d8f82e913a64752
SHA512 ea3b2783902187b3c1d2df9be186cf5fe0ebfaac124542266ad7f5f9c734f881df7864a79b1605a885287d630ed7957084b81874af3023dede83d02aca0dd96d

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc_n.gif

MD5 92e601389caf4d027408e021fea59c9a
SHA1 404e1d20bf7ba3de6750b71fdd21bb3963825709
SHA256 85e56bec8f1f28a11952ccdd652b6bf5ea4d6351883ca8a3c9fd58b54d4baf13
SHA512 5d193457b0f42a96fcdc17cc219ce60707c144824e355406b14e8e326ba8b3824c11bac6c87e06e6989138f836791bfaa059fe9f37670807ba4549cce9872a8d

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc1.gif

MD5 8b0f87ed22abadf506d4677500dd1d0d
SHA1 c83362fea42e25ce67830a89c53340cf11190249
SHA256 705b9d14f68fdc08e4f32528b8a9381abe2db3e8c3329fe0668bed5b153a11e7
SHA512 4d04077dc3220c4a6949f4b4865276cca73413e3ad922c8702a478ee9c6c6709f89ea9087f97210cc8fb77d578100bbd41441949ddc42a7d5148091841e13097

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc2.gif

MD5 4cbbed93e97d583425fb71fea2470de4
SHA1 b25388b28fe2050f7ba5b761ed7b2060e1355909
SHA256 f2f9f96c588bd51890d70acbe65a212e6d848f09d7f8e27db9b7569692dd9c9d
SHA512 8b3ac2208f394f7c9560ded617a81804519c2e0abb1eafc26560b1ec3874a20c6bafbe24fcdc22096761a5e786812681f8e23c14260d547d1e8928b4b273fac6

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc3.gif

MD5 e64205919507ed59a897607bdc3d0f3e
SHA1 b5f55b0dddf5a1b4393dac0976e6714411c4720b
SHA256 ae930b3b16ea2781d3b422c2c6d2be78e52310d8ee1336b30a6632d321b6e6b9
SHA512 e5b1b3775eb7bfe5f59f0e641d6ca50ba5e48ac7bedf110c3e71e7685f481df479aa974b3c04c4675089d1ae5c82e7d90c389fb4ada7f6bbcd86e74e239acdf2

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc4.gif

MD5 92f684111f468f6bb9fc10e56f25e5f1
SHA1 3b2bd230d1ab036dc9386043352e921a445bd729
SHA256 36d445d3de511c8a67a8e5a5eb592ef9f693d9dbb0f19cbd5bffcd7a695825a0
SHA512 f3e521dc3d91e30d7ecaf7b684618ead22ed12d603b08e6bbb7cb3927fa4d7800f94c0daedfab78704d5c8c6c67d89bb41767b0b44ce9655a13f2e3a4e606318

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_ws.gif

MD5 89ec9cb7b5ce56eca6bb5cbcf0ce9716
SHA1 2416373c9e69973f0fcf12778efcb67fe2e2cf97
SHA256 2acff445360de401613d6e5926140e450ec2b38a8f5274848075f17a69d74eee
SHA512 ac63336b38ddb596d22fd3d83976c9fdd400d5b6acb22afbe635f6dbaa23ff26db3afe9af7e9201057708fa6b9d2daff8744831d8d0dfb72ba444438046dbb3b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_ws_g.gif

MD5 b31d7c29aa097a1eb85e9bbc09ffb7c7
SHA1 fa09382b292f21f68ad4e500bcea8583d7b33e24
SHA256 3b40857daa14581962f654a3ce52366485709c044a81eb9508e5a195b378a62e
SHA512 44abceb858d218e26ed0ab828fdf3283dd33ef578daecfef2d89f9f3a30e9d08ed2a4f37feae4343e43eb3a0bde3d0dda5772a33693afe66f46f7c28b8270ea1

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whtbar.js

MD5 e3f9871abbb312e5bf32c71138d9fbdb
SHA1 13b4fa0fbf05bf2c7c75e314bc98e6d4a6dfe305
SHA256 99fd09575a75385fffd011cbd2219bf4a3a4925b3cc607127f5d2526fe7fc025
SHA512 b652ae1f04091430a5127fee8de614807da7d3449eb16f24149f56a9db146bfc6d0de009c390ac372b6fbf1bd4abb5a1d2f88b8ef69984f2296a1b73a73d5a7a

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whtdata.js

MD5 6da969f9a04ac013d8fe85ede3022644
SHA1 07a3567e1eaec71c3fdb64055d5d0a913c97fa6a
SHA256 c7984e9e8f052779179d771cc74d91a2000018be127c01981290f2993df2cba8
SHA512 3b89d47cf7b57e9ecb15d03c2f7d00fcf3ed06f1ac49bc8dfc447f68dd59ca812f091c8389596913d030bc901bf8b552b910a99cf00d05c0e642b4f43ebe3360

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whtdhtml.htm

MD5 ef9c2e316a70cccc73dac0b91d8a7154
SHA1 2dfa02b49ad89ee82d2374f5203185a1f454f589
SHA256 99041c07809e1a9055c958dae82fcff2052231d3a9aac2f1ab77fac8e23cdac4
SHA512 08090a2bc38511d4cea7fedd18879874bbe60e169195b06b3b21d0f34043bc9d00b506e3f41db7bf7a6623d4aa4bff9d87739a30c34f7c3956f36c0641bbd9cc

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whthost.js

MD5 264799745c117e5e39dfcacbd1c4e74d
SHA1 999975d344afa7e44c0c2b09a8254218031add35
SHA256 c855072483ca6b2e25b75d08645c96f2018e10d60bf96d8887472c8e638b942d
SHA512 c794f4d2af3739143cac0724ae9ac7f5a6081786c25e9b679d8364f47664163c9eaf991d9c7f61adaf85ddfc9064d6c17f018a1ecfbe1a01746cd41317b2af0c

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whdata\whtoc.htm

MD5 20e9213914991442a7d0dec79521a1e3
SHA1 e13a470d1ab5f529c879b73e9b0415b6ae103dd0
SHA256 0255851a463488ec4c71f398564198641b95a2b6e86e3dfabaa8cb3027569b8a
SHA512 b4198bb9a79aea2193719f974934e8c301aaf1ff6450c89ca6245b6369fb751c5087b55de2a4263ac316f4a89e9f5f659adda311c35a18a569d28cc757506e93

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whtoc.js

MD5 d80138a89a89b86edcb985e7cf8f1e9a
SHA1 483c5e96210b2c21ae1fbd880204230a57c93c9e
SHA256 d999efdcde02d86012bd00eb3cddfeaa4bd688394e809e3ae1506f9af7120d9b
SHA512 d1d7e358756e56bc409025e3bf8e2be887a57dc1f589bb3f1d2e9d19e68da2b91699012a562ff783f0d26a5e6866b04e7394db06c23ef8ac58b46bdb2976f02e

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whxdata\whtoc.xml

MD5 d06ba9af1415206ad87672f37afa75f7
SHA1 7bc3a385a78e25f57008a009a3661cd54411e13a
SHA256 2a1366359349a38e4ebe70e000ee46c160bb189c4f2de6364171746f4542ad9f
SHA512 9ea1f8696211c3b059e7089dc19427f1b55647ebdb7bc31315152ae91b8477b9096a081d1bbefa714440db435779f1f945eaa832180ee1b6772b42f8b5805d35

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whtopic.js

MD5 4b02959825a6c5da1ad8b9c16c2a7f75
SHA1 63b3e929ca773825ba9e77a99cde12b28b6f24fa
SHA256 9f37bc7409722c3cf09e2d2da2db646a953cbc37bc7df9407e4038512fe01553
SHA512 b975ba59207821fdfc3bb9774d6c32959510c595fb52088d32fa0af8f96a110ee67ded15e133ff25e6c70e9e51740eb2c3283e8c8ab14fe6771ca4d4a411a971

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whutils.js

MD5 18df539d0d989533906c2f7ed14e5add
SHA1 ae338e812cf04386bc5a4ced43c0b9fd4480d993
SHA256 07d4c7a78699530c3f1d8e61830ab9369e969374f4209eec68dae96de0b61ecf
SHA512 41956b3af653fd0fa21a8577ea78e8a907a7747d38f63dc0bff23b4f80d454da241b1c0848328f46e740801fe7f5f46a74b271b88e9518f725df0dfda248ca2b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whver.js

MD5 ba774cae5d7edb2bfc15d3fcef92737d
SHA1 d2560cb107910774ff8e86524a3ac50755248eb2
SHA256 060c6bff9e03f625ee8119edda4374211946ecd9bbf931dd2bc1e3083baf6d84
SHA512 be800b25480d9813353ca29f5f6ab21d73fbfdfc027c98c832cbeee67a07ac3f1edb327e4048317636d0c0d0232ea1a74819944b28cee6e93962fb0158d31050

C:\Program Files (x86)\Mathcad\Mathcad 15\kitnum.txt

MD5 7456805bce5541d8d57152b89be0db9f
SHA1 68886becd8992b014160ab2e43bae76b98446279
SHA256 c42f0736aa3dfdf402795cf8e1def5faa0f2c95dd6700e72ade670c87b56afe1
SHA512 f54c43400b41b08abfbda0871775fb7a5c5131847d545cab3ef6e92646af7a559a8913560304da0e6545e16ef0a58184457a66daae2ef678f4a9791b7915a589

C:\Windows\Installer\{B24B6F31-6DA8-490A-8FCA-7BFA3101C2E4}\icon2.exe

MD5 d95e60bd3a7fc9f3643bc8878dd5870b
SHA1 05b1dcebd55fc58b05fe339c8633b61409bcb124
SHA256 f70f1d585ea8e0013166a21624f860dcaf57d050cb222ba87efad859e54a70a6
SHA512 361e90c5340561c93f4854aece0732e6ac3cbc59770e4ca6a7741a0848b49f83811d71dd8043c648b272b4a5cd4af113bd1e646df26629ad4fd0677e8a693820

C:\Windows\fonts\MathcadUniMathItalic.otf

MD5 9cf0cf93d051873b476a9a87d47ff91d
SHA1 ee4d802fcccb82deb0f2e25395c5aa9470ff0135
SHA256 f5702bc98a7437d2dfa8dea345abfc5bbd158d0601653a678022b41643749f13
SHA512 d24343c6c7251f081b4eb2147e708c4319d745f58392531b40a13e1a83e6f12381724e35b95aa3cfca60e708af32b182921ce736d6b977a1597e6802d3148a26

C:\Windows\fonts\MathCadUniMath.otf

MD5 3e8a3b4d94ef135c71c97c0e4751e63b
SHA1 a6d0839bfbb2ea104533effd2a080d44cbbc5bc9
SHA256 26b87f237d05fb5bc2ab382d58c52b6672d50feb2371608750842f382df9ed26
SHA512 08d26cceee63ddc69fc1bee58f5d1ae8f7d753e54b12d7aa2bb63ce7ee75c760c7dbf1b0e43140c4653b49021e604b335225207d94692d36f24c78c62274ef9e

Analysis: behavioral2

Detonation Overview

Submitted

2024-05-27 15:02

Reported

2024-05-27 15:06

Platform

win10v2004-20240508-en

Max time kernel

150s

Max time network

163s

Command Line

msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\Mathcad15WixInstaller.msi

Signatures

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\L: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\N: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Z: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\E: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\K: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\O: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\P: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\W: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Q: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\S: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\U: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\A: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\R: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\M: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\G: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\V: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\Y: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\B: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\H: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\I: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\J: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\T: C:\Windows\system32\msiexec.exe N/A
File opened (read-only) \??\X: C:\Windows\system32\msiexec.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\IMWiHeight.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\IMWName.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Signal\whgdata\whlstfl23.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Author\whtopic.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\3D_Plot_Format_Dialog_Box_Special_Tab.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Wavelets\whfbody.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Format_Menu.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\EN\qsheet\Symbolics\dilog.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Wavelets\whskin_homepage.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Graphics\coeffs_example3.GIF C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Signal\whtopic.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whdata\whftdata0.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Graphics\solving_quadratic.GIF C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Graphics\substitute1.GIF C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Graphics\b_or.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Keyboard\Graphics\ksym_keyword.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Improc\welcome.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whgdata\whlstfl22.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\whgdata\whlstfl10.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Graphics\PLACEHL.GIF C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Improc\Convex_hull.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\mcm\IT\McadDAQ.mcm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Author\whdata\whgdata.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Signal\wht_sync.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\ES\qsheet\references\Geometry\3_2_1.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\3d_Scatter_Plots.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Graphics\alignment_buttons.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\whgdata\whlstfl18.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Wavelets\eHelp.xml C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\ES\qsheet\Data_Analysis\2dspline.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\ES\qsheet\samples\vbasic\Msvbvm50.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Handbook\wavelets\Dwt.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Changing_the_Display_of_an_Operator.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Graphics\img_selectRow.png C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\mcm\CheckBox.mcm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\mpl\mcdunits.mpl C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Handbook\improc\MONA.BMP C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Graphics\bas_udf2.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Improc\whmsg.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Wavelets\func_eval_tables.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Resource Center\EN\qsheet\Vector_and_Matrix\spcchars.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\transform\assert.xslt C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whlstt46.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Improc\wht_prev_g.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Graphics\cauchy_example2.GIF C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Handbook\improc\TVColor.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DAEP\whgdata\whlstfl19.htm C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\about_mcad.png C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Graphics\STDERR.GIF C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whglo.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Improc\whstart.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Graphics\FHYPER.GIF C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\Graphics\ST2_GAMM.GIF C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Handbook\improc\frame2.bmp C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DAEP\wht_tab2.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Signal\whdata\whtdata.js C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Genfit.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\template\EN\madewithmathcad.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Graphics\RECURS.GIF C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\Graphics\Toolbar_picture.png C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\Handbook\wavelets\Fbm.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DAEP\home.css C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\IMathcadWorksheet.html C:\Windows\system32\msiexec.exe N/A
File created C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Wavelets\whgdata\whlstt1.htm C:\Windows\system32\msiexec.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created C:\Windows\WinSxS\InstallTemp\20240527150500610.0\msvcm80.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\EN\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ES\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500610.1\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b.manifest C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\JA\madewithmathcad.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500564.0\ATL80.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500595.2\8.0.50727.6195.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\EN\Web Page.xmct C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\MSIB882.tmp C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\DE\Calculation Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Fonts\MathcadUniMathItalic.otf C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\JA\Specification Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\DE\Table of Contents.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\FR\Table of Contents.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500595.3\mfc80KOR.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\SourceHash{B24B6F31-6DA8-490A-8FCA-7BFA3101C2E4} C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\IT\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\US\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Table of Contents.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANS\Table of Contents.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANT\Table of Contents.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500595.3\mfc80CHT.dll C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20240527150500595.2 C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\e57b0c2.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANS\Microsoft Word.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ES\Specification Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\US\Specification Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANS\Web Page.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Calculation Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANT\Calculation Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\EN\Specification Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ES\madewithmathcad.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\madewithmathcad.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500595.0\8.0.50727.6195.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500595.3\mfc80ENU.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500610.1\mfcm80u.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ES\default.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\DE\E-book.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\JA\E-book.xmct C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20240527150500595.3 C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20240527150500610.2 C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANT\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\IT\Report.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Report.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\IT\Specification Form.xmct C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\{B24B6F31-6DA8-490A-8FCA-7BFA3101C2E4}\icon4.exe C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\FR\default.xmcd C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\DE\HTMLtemplate.mlt C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANS\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\JA\Normal.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500595.0\8.0.50727.6195.policy C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\Installer\ C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\US\Calculation Form.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\US\E-book.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500610.1\mfc80u.dll C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\KO\Web Page.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\Installer\e57b0c2.msi C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\IT\HTMLtemplate.mlt C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANS\Report.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\DE\mycorp.gif C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\ZH-HANT\Report.xmct C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\WinSxS\InstallTemp\20240527150500610.1\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.6195_x-ww_150c9e8b.cat C:\Windows\system32\msiexec.exe N/A
File created C:\Windows\SHELLNEW\FR\Web Page.xmct C:\Windows\system32\msiexec.exe N/A
File opened for modification C:\Windows\WinSxS\InstallTemp\20240527150500595.1 C:\Windows\system32\msiexec.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Windows\syswow64\MsiExec.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr C:\Windows\system32\vssvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 C:\Windows\system32\vssvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000 C:\Windows\system32\taskmgr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A C:\Windows\system32\taskmgr.exe N/A

Checks processor information in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 C:\Windows\system32\taskmgr.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString C:\Windows\system32\taskmgr.exe N/A

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Key created \REGISTRY\MACHINE\Software\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT C:\Windows\system32\msiexec.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT\xmcddiff.exe = "0" C:\Windows\system32\msiexec.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Key deleted \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2a C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\2b C:\Windows\system32\msiexec.exe N/A
Key deleted \REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\2A\52C64B7E C:\Windows\system32\msiexec.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{013500d2-1122-11db-9380-000d56c6051a}\ = "F2D2A216-A21F-11D1-A596-0A1C32000000" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{c6faaeea-1852-34c8-8ade-999ab7effebf}\TypeLib\Version = "e.0" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{01350054-1122-11db-9380-000d56c6051a}\Inprocserver32\ThreadingModel = "Apartment" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{1e0113c7-07e0-11d0-97e0-00a024cf05d1}\ = "IVSObjectExec" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{ea5c7eda-e4b9-11d4-87f3-444553540001}\TypeLib C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{ae7c5340-d9bf-11cf-87c7-0000c021af0d}\Localserver32\ = "C:\\Program Files (x86)\\Mathcad\\Mathcad 15\\mathcad.exe" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{66dac326-99e3-32ad-a13c-1e43f9ae62d5}\TypeLib C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{70c5b503-e623-3842-ad55-881f54f304d9}\Proxystubclsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{da6160ff-33aa-11d2-97a9-00104b38a38c}\ = "IBackPlanePropSink" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Mcad.Wrap\CLSID\ = "{013500F3-1122-11DB-9380-000D56C6051A}" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Handbook.Document\Shell\Open C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{1e0113c7-07e0-11d0-97e0-00a024cf05d1}\Proxystubclsid32 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Mathcad.MCM.TextBox.3\CLSID C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{01350057-1122-11db-9380-000d56c6051a} C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4d2ee1e0-ab3a-4b3b-b76d-64f6e2d43402}\Inprocserver32\14.0.0.0\RuntimeVersion = "v2.0.50727" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{0f8c6000-ae35-11d1-b19d-0060971e663a}\Proxystubclsid C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{b116de3f-eb07-478b-80de-849b7a272af6} C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{b17ddfa7-a569-11d2-907e-00104b69ff23}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{01350011-1122-11db-9380-000d56c6051a}\Version C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{3803c7e0-c450-4c7b-8a55-4ac3c24ad105} C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{41814cf2-8c11-11d0-a696-00a024cf05d1}\Proxystubclsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{3734fbd8-2ecd-4b3c-9701-df7bb42067f3}\Proxystubclsid32 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{a4f1de31-222a-3e22-a198-7eefad4545ea} C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{bd4e383f-cec2-4b54-ac47-3962009468a1}\Programmable C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{ea5c7ee4-e4b9-11d4-87f3-444553540001}\TypeLib\Version = "8.1" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9208ab82-1c63-11d4-8cc2-00105a5e3416}\Proxystubclsid\ = "{00020420-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{e0d6ff87-b605-3ccd-bbdc-efcdf0a3c4f0}\TypeLib C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.mct\Shellnew\NullFile C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{013500a2-1122-11db-9380-000d56c6051a}\Progid\ = "Mathcad.SmartSketch.Wizard.3" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{12843065-894a-3835-91ab-b555a7fefc03}\Proxystubclsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{5f6db022-5e3b-3999-a620-9775b4b2822d}\TypeLib\Version = "e.0" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{93c85542-89da-11d0-883a-3c8b00c10000}\Proxystubclsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9208ab81-1c63-11d4-8cc2-00105a5e3416}\Proxystubclsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{01350012-1122-11db-9380-000d56c6051a}\Progid\ = "Mathcad.Web.Wizard.3" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{01350061-1122-11db-9380-000d56c6051a}\Inprocserver32 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Mathcad.DataAcquisition.Control.3\Insertable C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Mathcad\Shell\Open\Ddeexec\Application\ = "Mathcad_DDE" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{68ad1805-f696-4fbe-a8d8-3a9cc0b1371e}\Proxystubclsid32 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Mathcad.FileWrite.Wizard.3 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Mathcad.MCM.Slider.3 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{3803c7e0-c450-4c7b-8a55-4ac3c24ad105}\Inprocserver32\Class = "Mathsoft.Utils.BMPFormatter" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{c943c081-ac84-3125-9027-78fd4f9c4322}\ = "_Application" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{ddbc46ae-28c6-4fc4-ad20-979a09ee8d8d}\Proxystubclsid32 C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{013500f2-1122-11db-9380-000d56c6051a}\1.0\0\Win32\ = "C:\\Program Files (x86)\\Mathcad\\Mathcad 15\\mcadr.dll" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{6512dd05-e925-11d2-98b4-00104b69ff23}\TypeLib\Version = "1.0" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Mathcad xmcd\Shell\Open C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Mathcad\Shell\Open\Command C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2dfc26ce-3695-4d87-8625-b5261a6ce9e8}\Inprocserver32\Class = "Mathcad.Components.McxComponent" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{c66cfd94-3eb8-11d3-98ba-00104b38a38c}\Proxystubclsid32\ = "{00020424-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Mathcad xmct\Protocol\Stdfileediting\Server C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{9208ab82-1c63-11d4-8cc2-00105a5e3416}\Proxystubclsid32\ = "{00020420-0000-0000-C000-000000000046}" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{ddbc46ae-28c6-4fc4-ad20-979a09ee8d8d}\ = "_DSlider" C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{a59dc363-a0e0-48b7-a748-655b49113184}\Inprocserver32 C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{8de704e4-528c-36ad-91e8-3d0456d31a48}\TypeLib C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{01350052-1122-11db-9380-000d56c6051a}\Control\ C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{01350086-1122-11db-9380-000d56c6051a} C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{af5992a5-69b0-11d0-a68e-00a024cf05d1}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\TypeLib\{013500d0-1122-11db-9380-000d56c6051a}\9.1\Helpdir C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{4a9bd0a4-80e1-4d70-b25d-c72c47453660}\Progid C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{65010067-8f86-45ed-96d6-f2d3a213db09} C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{735c6261-687e-11d5-af2e-00a0241ba808}\TypeLib C:\Windows\system32\msiexec.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\WOW6432Node\Interface\{2ad10774-9a8d-4799-b8bc-70e8dbe25e85}\Proxystubclsid C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Mathcad.InputTable.Component.3\ = "Input Table" C:\Windows\system32\msiexec.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{13444a83-1a55-447e-a72a-1227a7da8e64}\1.0\0\Win32\ = "C:\\Program Files (x86)\\Mathcad\\Mathcad 15\\mclauncherr.dll" C:\Windows\system32\msiexec.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeShutdownPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateTokenPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeAssignPrimaryTokenPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeLockMemoryPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeMachineAccountPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTcbPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreatePermanentPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeChangeNotifyPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeSyncAgentPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeEnableDelegationPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeImpersonatePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeCreateGlobalPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\msiexec.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\msiexec.exe N/A

Suspicious use of SetWindowsHookEx

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A
N/A N/A C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 3216 wrote to memory of 3572 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6B5C.tmp
PID 3216 wrote to memory of 3572 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6B5C.tmp
PID 3216 wrote to memory of 3572 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6B5C.tmp
PID 3216 wrote to memory of 1172 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6D80.tmp
PID 3216 wrote to memory of 1172 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6D80.tmp
PID 3216 wrote to memory of 1172 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6D80.tmp
PID 3216 wrote to memory of 692 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6E3D.tmp
PID 3216 wrote to memory of 692 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6E3D.tmp
PID 3216 wrote to memory of 692 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6E3D.tmp
PID 3216 wrote to memory of 3764 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6F86.tmp
PID 3216 wrote to memory of 3764 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6F86.tmp
PID 3216 wrote to memory of 3764 N/A C:\Windows\system32\msiexec.exe C:\Users\Admin\AppData\Local\Temp\MSI6F86.tmp
PID 3380 wrote to memory of 3556 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\srtasks.exe
PID 3380 wrote to memory of 3556 N/A C:\Windows\system32\msiexec.exe C:\Windows\system32\srtasks.exe
PID 3380 wrote to memory of 2196 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 3380 wrote to memory of 2196 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 3380 wrote to memory of 2196 N/A C:\Windows\system32\msiexec.exe C:\Windows\syswow64\MsiExec.exe
PID 3380 wrote to memory of 3512 N/A C:\Windows\system32\msiexec.exe C:\Windows\Installer\MSIC333.tmp
PID 3380 wrote to memory of 3512 N/A C:\Windows\system32\msiexec.exe C:\Windows\Installer\MSIC333.tmp
PID 3380 wrote to memory of 3512 N/A C:\Windows\system32\msiexec.exe C:\Windows\Installer\MSIC333.tmp
PID 3380 wrote to memory of 1944 N/A C:\Windows\system32\msiexec.exe C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe
PID 3380 wrote to memory of 1944 N/A C:\Windows\system32\msiexec.exe C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe
PID 3380 wrote to memory of 1944 N/A C:\Windows\system32\msiexec.exe C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Windows\system32\msiexec.exe

msiexec.exe /I C:\Users\Admin\AppData\Local\Temp\Mathcad15WixInstaller.msi

C:\Windows\system32\msiexec.exe

C:\Windows\system32\msiexec.exe /V

C:\Users\Admin\AppData\Local\Temp\MSI6B5C.tmp

"C:\Users\Admin\AppData\Local\Temp\MSI6B5C.tmp" "HandBooks"

C:\Users\Admin\AppData\Local\Temp\MSI6D80.tmp

"C:\Users\Admin\AppData\Local\Temp\MSI6D80.tmp" "userDlls"

C:\Users\Admin\AppData\Local\Temp\MSI6E3D.tmp

"C:\Users\Admin\AppData\Local\Temp\MSI6E3D.tmp" "templates"

C:\Users\Admin\AppData\Local\Temp\MSI6F86.tmp

"C:\Users\Admin\AppData\Local\Temp\MSI6F86.tmp" "export" "SOFTWARE\Mathsoft"

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Windows\syswow64\MsiExec.exe

C:\Windows\syswow64\MsiExec.exe -Embedding 26B7B942066BEE225D773C225A365ABE

C:\Windows\Installer\MSIC333.tmp

"C:\Windows\Installer\MSIC333.tmp" "import"

C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe

"C:\Program Files (x86)\Mathcad\Mathcad 15\SaveRegTest.exe" setkitnum

C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe

"C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4236 -ip 4236

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 4236 -s 1016

C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe

"C:\Program Files (x86)\Mathcad\Mathcad 15\mathcad.exe"

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 528 -p 2160 -ip 2160

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 2160 -s 920

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /4

Network

Country Destination Domain Proto
US 8.8.8.8:53 58.55.71.13.in-addr.arpa udp
US 8.8.8.8:53 25.24.18.2.in-addr.arpa udp
US 8.8.8.8:53 g.bing.com udp
US 204.79.197.237:443 g.bing.com tcp
US 8.8.8.8:53 237.197.79.204.in-addr.arpa udp
NL 23.62.61.72:443 www.bing.com tcp
US 8.8.8.8:53 43.58.199.20.in-addr.arpa udp
US 8.8.8.8:53 72.61.62.23.in-addr.arpa udp
US 8.8.8.8:53 232.168.11.51.in-addr.arpa udp
US 8.8.8.8:53 164.189.21.2.in-addr.arpa udp
US 8.8.8.8:53 26.165.165.52.in-addr.arpa udp
US 8.8.8.8:53 198.187.3.20.in-addr.arpa udp
US 8.8.8.8:53 21.236.111.52.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp
US 204.79.197.200:443 tse1.mm.bing.net tcp

Files

C:\Users\Admin\AppData\Local\Temp\MSI6B5C.tmp

MD5 0281757b325bf343be1295410d2f04c0
SHA1 e5f3a857e64540bdf8ba0d589ef753f2fc6f833f
SHA256 8c65854968d8778269922b6d71b469264be03b969d7e47ea6c5eb98ac159f358
SHA512 b9d88a96499b1f1864e9a7bf3733b6a9656bec856bb15f0510b9a3eb655251475e9b2ee45eee4ca9a3cbf98ff16ae2a7316778a8fdc3ac28ac43098740dd257c

memory/3572-4-0x0000000075532000-0x0000000075533000-memory.dmp

memory/3572-5-0x0000000075530000-0x0000000075AE1000-memory.dmp

memory/3572-6-0x0000000075530000-0x0000000075AE1000-memory.dmp

memory/3572-8-0x0000000075530000-0x0000000075AE1000-memory.dmp

memory/1172-14-0x0000000075530000-0x0000000075AE1000-memory.dmp

memory/1172-15-0x0000000075530000-0x0000000075AE1000-memory.dmp

C:\Windows\Installer\MSIB882.tmp

MD5 85221b3bcba8dbe4b4a46581aa49f760
SHA1 746645c92594bfc739f77812d67cfd85f4b92474
SHA256 f6e34a4550e499346f5ab1d245508f16bf765ff24c4988984b89e049ca55737f
SHA512 060e35c4de14a03a2cda313f968e372291866cc4acd59977d7a48ac3745494abc54df83fff63cf30be4e10ff69a3b3c8b6c38f43ebd2a8d23d6c86fbee7ba87d

C:\Users\Admin\AppData\Local\Microsoft\CLR_v2.0_32\UsageLogs\MSIC333.tmp.log

MD5 b3ac9d09e3a47d5fd00c37e075a70ecb
SHA1 ad14e6d0e07b00bd10d77a06d68841b20675680b
SHA256 7a23c6e7ccd8811ecdf038d3a89d5c7d68ed37324bae2d4954125d9128fa9432
SHA512 09b609ee1061205aa45b3c954efc6c1a03c8fd6b3011ff88cf2c060e19b1d7fd51ee0cb9d02a39310125f3a66aa0146261bdee3d804f472034df711bc942e316

\??\Volume{5110105b-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{fc7b406b-b08b-4f00-8dcb-b0c3cf5d08f8}_OnDiskSnapshotProp

MD5 7a9be62df7d0382badceeb9feb382aa0
SHA1 735793687b7e0d7e7dee2dc1f722889156180c88
SHA256 e4567f9a2e40e92e2f6db25911fb73c131bbc8545cd8895ec03f264308f37c3e
SHA512 c1659c6ea44a3dc2252b7f7997aaeae3957c7d7036e8f240fdc5d6c38f781f95221e3d827fbe5f7e1068d9d9b46fc3cf0d0e4ce6b4b9ca1e2cb63aa73dfb77ec

\??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2

MD5 e16622c6b4850c6bef37dee86a025357
SHA1 9331a5b137713a33ce9dea710da0b5915f99c3e7
SHA256 181d21fed7edf68accfa7cbab8f56268fb17a3481f30c5d4742ac49988f20119
SHA512 4c7ded4cb821928d7f3e9c4e5c30fd2593dda3183ffb067a994119d40f32b70744c4134b6dafdef7925a934ec722ef1f9331c55edddcecc786213950e542a18b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Help\whdata\whglo.htm

MD5 f9d8ae933a052c857e919f577656ffb5
SHA1 6c2f6c9c4339774a5d601bc5b8dc27a1791c15a5
SHA256 62dc4ef734c6aa235903c4335384b5c8f0387c73785012e5498feeb1699486c6
SHA512 3eef99c245b3ead4dc2398f3cbcd02b6631ba639eb9f321a9b96e5c9b9854737e23878f672b3bf8da13930374f245007d5bab469bae9b47ca7561030448f8d30

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\whgdata\whlstt34.htm

MD5 38d3c019e86f0a3044f1970736047ab2
SHA1 42a528da16f1d17d0fa250eae33b42a7ca948710
SHA256 693d656d818a37e6071a9b5381fe664cef33f186cccec4a6846b2a089e97765b
SHA512 fd43e27dd5f457388ae899e371608a5f1bc0b006b0a26e861d4c7a64864e0ce4d4e9c227a74f86cc9862f2c0bae0e724f2bb61da2bdfee4ad74010892527714c

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Help\whgdata\whlstt54.htm

MD5 0e8fcb6d207475de4c0cf5315431518b
SHA1 3b1065a5aee6e3161a1db94b87d47879939425c2
SHA256 23a93220753eb82a92dc04d74fc86f8ef514cad18457e9eb91cd1ae75dcb67fe
SHA512 23f47f62892d3292ac18d5f158d7227368cf1f008c5ceeccd6c7e5603b464bda493507278db33606334803e1ba9f87e3cd981e0022dd948f96a3d463f2b28fcd

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\about_mcad.png

MD5 ddfe25003c98a59a85e325b0a5b82515
SHA1 57fe25f7233725b3e383e62aabceab69805f45cd
SHA256 10aedda051079084e5dff40154d43d6de16af0d815643735707e3ab25b6834a4
SHA512 85a5ace7aa51b45c56737c60676c8c94290e3503c3bedb9fec4ebb8a25dcfb1a0720f258aec92873c5729f6e8a4776d5fe01259bd02396b8dae612ddb51fe28d

C:\Windows\SHELLNEW\JA\default.xmcd

MD5 f98686a60a4da2da0a940aa9595d5da7
SHA1 8eb666d7352c8845a817be762af8e28b22cbf2f4
SHA256 35f8659e25997a3e485be0ee9cf9611f870b528522ee6f32efa0325864d7bf0d
SHA512 3b23328ce8e1eb251cf222494b1255e9dc3344dfe022d657182443eab5289bae597de89db17469b03ec5483547daa135abf393b2f0773a1ee6e1464785f60364

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\ehlpdhtm.js

MD5 233550d317745f2e19d1b4ed1500352c
SHA1 26e190ea96aa12c301be78f5b20c204a6590727a
SHA256 1191964ebe828588808ab4d114e21f1494386ced9c5a22d4179a9d47f9157ba2
SHA512 fc5f75bd09b015d506e684f7c00c7090f78c3c45d54de013a43407c50218e0de1339a6e23745cbb2f71bbc575f49e216a7f20a593d59195121f6b010b36280fa

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\Graphics\H2.gif

MD5 43a5e632c72329bc9b34dd199e7e0e7f
SHA1 8d025962c724d4296e83423359c0cba4277013c8
SHA256 1507bbc1167e71fd54d69e1ba9f7cddda0040a19cd0c02e7c1a5d65a5b1cfc5b
SHA512 9a622161476d189595522b65d56a36632c501762fea68ee9d9f16320aca54e17b727caa9cecae94219f58f17dd5d8a6bc09c855958885b4db1b6947975b68075

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\H2.gif

MD5 e04be366660f302842183b9c6272e543
SHA1 89eeb0a2afe3a6c09a41c2176a67f16ad4bea2a9
SHA256 f7ddf590d71d2e5c8d734a66b8cb0928f0a06962011f5ab7c3725d80573156e8
SHA512 a9cd13c0670cd91703bee404889112c5dc2385a9af4376cf803239d4ba3d649aa751b1fee64ffadba0b335d1e8cada18c38b2be75ccc06c20eabb0c46d286bff

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\Graphics\H5.gif

MD5 bf41230ac97b4176bef1de3c6f246cda
SHA1 83e527dbc18b894cd8d53c432e248b775f1a92f9
SHA256 31a265f0c4788453b2db1f30c6c93ead7eb63387a0206cbd237d8e5cbf2181a7
SHA512 29a076ff77b5caee19e119937adc53507914a81f13cf9f15cb152c0e650d6c2382f8bfa1edd9dd4b5b11af8b2dd74e2ff21cc92a74e63f4585b82a275883ad20

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\H5.gif

MD5 443090415e98f628cf37f6748fae4d29
SHA1 c22cb910a74e7d3994f89ffe5568f1dcb6fe2850
SHA256 4f6c261e54cc556b0337a1907ff7a85b6e83630579f7168f551a8afe8513cb48
SHA512 f3b6bf43efb9a954347e20b5b485d32cf5ea30682645b7c98c5f971a01ccab153226c2a75ad39616b90e1f2892df652835c1b9691599f793fb4a1df4ed2cc8fb

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\home.css

MD5 6168a5b24457dc1795892ba9b5c95d60
SHA1 ab4f16ff2ebf535b12c3364b951405dea3c03a5c
SHA256 96e6e6252d07ea83bb85585df9512b1e64a44fda03131db9d7d55fb338e77913
SHA512 ce932424aba2ace2e211dddb461e5fa001357259ca012f86a3300a56e3cf4072075da7e437c39dd31cd13376d544a6d2b3d603d9e82dcc88079fa9d4d82623f9

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\home_ns.css

MD5 11bbfb2386e8471e31195cbae91023a0
SHA1 6bf1f95ad55e5ac5b825328f360f3916a01bc10a
SHA256 e7d90f85fc12a7ad7067d1e2fea50559e531a79a85d8349d2cc024de237c5bbd
SHA512 349d099f666aff7697ba5a78cdb3479341a46ac51868745bc5465206988a65d34b57f890d206afc97aeda667db4dd1388b6147a8918e8e34a44e26e0299137c9

C:\Windows\SHELLNEW\JA\HTMLtemplate.mlt

MD5 746e02ca7f6003df3b0e2f43c9c4c9a4
SHA1 01dbdd4a344795399bce3b41cbf239780a428e7f
SHA256 be721a548a3fc653f04768075320cac79fefce8558b7a443b97014e141626840
SHA512 682254f824626c47c5f2c0b09f39b5062fcde23db8c79881e2c8d0c674820c7c8ec793b0e4325fe6e26fbce3c558868bfc9f2c19d5c5688117ac7a692144e94d

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\kb_xor.gif

MD5 b3962c7a7569e11ebfc55d37f880251a
SHA1 9160cbf96d10c53951600a9877907fda2d72d86d
SHA256 ff90470a0d0990c058a655e24f97ed1765ecc5c77ed643e6dc13219f4c6e7c13
SHA512 4d576c087f1de43af0d382c8ed240e79e4bb7170bbeffa25a9b0a62799478b99a0f911b5a4d5689dd81891de0c7eade3c6a3b4fef345f36285ccb4be546896f3

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\kODERIVE1.GIF

MD5 f10eb37de3bcfc6533b43aab86c39baa
SHA1 cf123f0bc23afee314cc39cf61944a5288e2c12a
SHA256 d21d129d59ff813cf98a757578926e1537e5d915cc606598170cd4ebf3871b8d
SHA512 622a50c8de71e21aadb0c9f5e2e23680f34250229eec50f78b129e985feb539be2afffcf174e92fabead04e23e86241c4b743736879e36ca5541859e782c60ba

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\kOITERPR0.GIF

MD5 7a04dab8aef78584f56cc31a5074f0ec
SHA1 9ddb133c540b3017df6c89be0980720482610dae
SHA256 69d80d55e913b94d77c32f207cc108b4f4c4f86db06e3cf92a6e929c3989ce80
SHA512 39a0d9fbfb67e47a7d0f0ec07ed80001b47580cfb4a264fdb01202e85d7a626d1084de68f079ffb5aa4acfcf801eedce21ceaa6967793d6654eaad5736a8801e

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\kONTHSQRT.GIF

MD5 546db0b8f56ba206bdd0cc9e80d221f9
SHA1 2bb90f83edd79a9e8418d7eac5adfa2a5ed2c168
SHA256 81da3a31d1cc5082f2bcd4fe6146e600ac449bcbeac9f3ef86b812713ee7cb7c
SHA512 4defdc6745fe4db351cfc0c806e8289d1b68de56ed6f8514e6289773839045d75b6f5072fc726b21f0b58e9b85f2c9e592b9f32f1e15b31107688c403650e6e1

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Keyboard\Graphics\kOSQRT.GIF

MD5 2973fa29911f66b024ce5f4db2b3211f
SHA1 d58d43f8a614ca4c0457a3547a470c1a7695877c
SHA256 48f8e2d8ea4ad08ebfb56c69b6ea2751fd697d734a3029701d4ed249ef142ca6
SHA512 6c7d1f6e362c6e9295f662aafc550cde657d1d3da1228f58d87ae78938fcd45e408824fcf3896010ccdaa5bd127546c51e17f235e66e3bdd171757855829da92

C:\Program Files (x86)\Mathcad\Mathcad 15\mcm\FR\ListBox.mcm

MD5 689e41bf5e1e73ec20cc5da6a687d886
SHA1 8f2114164cf44185bf69f9278688384df12af233
SHA256 127d546158a5477257e0750b3cc25558880a7a3cae4000094c8d7d8dd291269f
SHA512 aee265e88970a24add5f72cddce6cde98f73b09e44cec38b0099897069cf9d9487a0575763d6a96863801109e62bca9e024ac180bb4942d94ef4946238e6c397

C:\Windows\SHELLNEW\IT\madewithmathcad.gif

MD5 2a0d003fde6ceb4f613f8f9b9feb4042
SHA1 06202913fc88d17b3a3193a5251941ad5469eab9
SHA256 4431c0d6fe472111ed848cd31cf6bd58d75dd09c21f263241048794e59aad913
SHA512 ca9e3718c959c255535b7a3c66cb849bc9d5da615c433f133350662dc7ac6170c03548127cf198c99ef956878b1a49ae76e2e70cfc100fa4b44468981627ce1f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\Improc\MAIN_TOPIC.css

MD5 29266cdb102df30b4bf804cf2bedc579
SHA1 271454d00a3cb9bd917fedeae9bf33878f621324
SHA256 32e49ba7bbef28909cc33ecde3b551c81aa0852917e108da4ebe3abde27f97fb
SHA512 4c43ecca7c2b5087c1e79bdfca0cbfc2a51ba68ba81d69728821289d42cb665a099a91829ac4ea47b1a9125a2188a91e77544d9db0f50fe39600233863493898

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\MAIN_TOPIC_ns.css

MD5 a6e2b888a1a5a78155a0b66b6dacb058
SHA1 d26895f0c5b4499bc87f21592d75d4a194f7ee57
SHA256 e7e6688335a2c8038e571b7730249e06fcf4efce5b77cf23fd6c2e49c98d2205
SHA512 c975f95638cf8f4f737d898d07978d30212b2b72c222f819af9f5951e446d875be0ecc43d278a3da1379194c7dc6938cb02d9e1c463dd944afd841a08f3514a3

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\mathsoft.skn

MD5 3abf08d098f0a8410ad0e9e14356f026
SHA1 148e7a930f76aca374cee83c99f3442b2ddd87a0
SHA256 8a86c4115140b07d1ce1ec81343be18af1002b7da846414c40942a270c145abc
SHA512 7127ec9ec6f969e72513dade781dcd5053e85605c55d4cc4916ea7e1ec77a6532715d186a2f359fe4cfe12bf56e5f60e289693318e60134a1b85fc8db4ad7a6f

C:\Program Files (x86)\Mathcad\Mathcad 15\mcm\FR\McadDAQ.mcm

MD5 ed5a7e8a30f765cf4708c55b6e427865
SHA1 ffd6a0ce2cea1ba5767a7f8792b3235702d9c4b6
SHA256 dd3b5d3d2e8f5b38a20b7546d54113471ac0d7d9fd130a377b7c7bab576b0af5
SHA512 93ad5167412a0096d1700fcb0340b3c69df2f71c7f9a89e5812fe5917b0744d1200e7c37410ed270f7728a5a7e5a3f6d886a37d7f54c0c78303487f969da557a

C:\Program Files (x86)\Mathcad\Mathcad 15\Handbook\improc\MONA.BMP

MD5 4acdf0da3cccbe4475dce98b68307868
SHA1 47eefc64da0d44c7400e41dff1389fc2210cef9b
SHA256 8a1c5e1edbae855ce445c6d5a1b60fddd3315302b4bfbe7ec48359c36041d892
SHA512 880316fc33f2eff27cd11f4542af1cc2a8847762ecf857bff1da62d55cb841f9ab857237324a0f9b421cd077c7d1a1290372085601c217066cb92b0c38595baf

C:\Windows\SHELLNEW\IT\mycorp.gif

MD5 b6976b8783c463039b8f0c2230658f57
SHA1 39308590aaa528b2ca7532ab46ad2ec1fcf3a7d3
SHA256 aa167991240ba77afb2f8241338e8580112ae1da21e7511050fa54f2cb15cdbb
SHA512 2ba6fef15ace06d3729b881a338c75b9fe7916dd0ffcfdd80b6b8a6620bd09c5e1c7b85ac91e1b62c3065bf4ef0f9f0334411d6155f2b67c9f15e366d90c70cc

C:\Windows\SHELLNEW\JA\Normal.xmct

MD5 a8af780f0f9c956f32790e0ace31e7df
SHA1 0ea6e8bf5740b42e9372246132214be1c5601e70
SHA256 d158a8cd6cbb47592bbd093aa38844008b7d5b6d253a79ce230085088eab38f6
SHA512 e4b5caef34ed4f68c7096f450b25fcbb61920fa62b7f30901c1cdaced571b2b1e64743ec55928902c137a9469bc47625d9f756ab2997c0e03e89b267a6a280a3

C:\Program Files (x86)\Mathcad\Mathcad 15\Handbook\datapack\outlier.xmcd

MD5 eaba4a9ad2415a1bc6b020fab4b64f6b
SHA1 668f30e616f9ccacd833aea9d708771722819747
SHA256 9612144443615ab464b65afcb7180c00d29d8b22f8147e618df03eff7df1727c
SHA512 0cfac88513857b9b45fe8b0ffe250d6fcfcba1c1a1229396916ea2da4086b492b4cd892be19514a013a9d616c81a1e9114b6ee99d1247b2a8f9f1c6c5d62b997

C:\Program Files (x86)\Mathcad\Mathcad 15\mcm\FR\Slider.mcm

MD5 f16587b5b59c1b41bf4b83bed1beffcf
SHA1 b498a49e6838573aaf8448d44f4068187b92cd2b
SHA256 a27027e52a05de9c22e336b971a72b3579e76596f1a2bfe3d07cfcddc0e1f37c
SHA512 54b14e68ab07f4db977a7882a453cded564cdf56599c19bb444b3e0e3d17c52aaa8fcdc72c539a8e69e729f50b1f2a9c33b359296e1a52b61f0e1ee62df58ecf

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\small_ptc_logo.png

MD5 52063e3c133cfb28e6b2f512bbc9897d
SHA1 c6b1a0b6dd6b9841bb65dc61e162fa2fb599c449
SHA256 073cdccbf71d80fb21bbd357219cfaacec5e29ca74c230fe13e3171ff03f1eeb
SHA512 1e969ddd5853f3452b70beeb721a79f98e05e65f475ddcd614eb45c359703c0d4495e36a5dd1504b9c151379a42a669e66603493cc673bce8eb2309df7a99c53

C:\Program Files (x86)\Mathcad\Mathcad 15\mcm\FR\TextBox.mcm

MD5 831d5ba8de46600c74b4524112af489f
SHA1 15980097d346535b64c439ae731befd50a8e0fe4
SHA256 3a924cc8cbe401a71b9a7f4c580438e479d74d3abc344d655d4d572bb74e1150
SHA512 d43b09acf7e352bb7022ba8d03c6e3f5466b98daf0a3a0e73f1a40584f4bbd1474334fef822480e5ef365219e4a4f37f2fd48d408484750400796fb9e32eddc6

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\Graphics\tutor_button.gif

MD5 9c9f9348def6d454b09c671b836ce010
SHA1 50f4354fa12c55f763d73508aa558490590248e1
SHA256 8081787cdf5c3d459afb92f439136bcc0e139e5b552823b05f01a2b09eaf2bad
SHA512 1bb174a836f2e74337cf188e391b265a658cb2bb3b33e85484cea9a27fa12610003f74f44ac414cd7356f4116f50017beb32073ec0864d5c9405fb10ba949a29

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\webhelp.cab

MD5 68e643002c1c9ba0e2b67acdb148bd23
SHA1 99febdeeb122b0c3c04d2bed6f4b42f0df5dd220
SHA256 7765df74081557d1097268b6167337564f796f4cc1695e36ae0cb935bd1703ca
SHA512 0095c27c2a031e7e39d147272be13c70127e4c79003ec35186f401d10d11a7391e23a82cbd3138cd3a4e07217005b68f122c4048131cc6204c26691f14c0af50

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\webhelp.jar

MD5 92e10d8f436c3109351725391a20f306
SHA1 672f46ed17dbd580593939d16cdf907d0190587e
SHA256 a1a599d1956e034acaf227da1a457ba9cd9e74aaebcbeff51e65f1512adc08bb
SHA512 754231b9959ead1cac34fed151e6c789a7a21e0b2f66e77d419bc86b47b0b332dd8c13cd008692ed75d3df79895cfceeb51f66aac5a465c453524fe61dc001a7

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\Graphics\welcome.gif

MD5 8a8e4d6cf665bdde53fb65b7aa9f3638
SHA1 63298f576b6e229eb7ccd1d8b2a5fd3b57684016
SHA256 a2145ef27a9091842415cc1ed4ef8f81b3e18e2a4793ed9121cceadedd2174c8
SHA512 60aec3d5a7370923ce455468a434cda10786d8318662e1be0708d1421845c37904f29a624aa35a1e7d47d88bf45521930df1daca770dc95a7b9a44adaf270d62

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whestart.ico

MD5 dfffee8293870e4b29a513aa23bf4448
SHA1 39eb8e3e40924741b61165ffb9531b1066cfe707
SHA256 9b2efa1fa35b9adbe957b21d1f3a79c008a086eba299d0135524ca2ca99ec571
SHA512 ec0da3527198f3aa6f6544b2018a986b2308f303cfbf527d89e86c0ebcf2e6cefcfaee77ed92c2c75b4d18fbdb1745f9494a6b8d9957a0fadbfb16c9579ff126

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whgdata\whexpbar.gif

MD5 816d11a1f84f1bcd43c29ffba49e0b5e
SHA1 c9e22e58b5cef3d5343d7b7a7590aad834549aaf
SHA256 1dc51cc31d23aa72f50d9940c76a7ee0b741732cb3b5628323d54307c6bd27de
SHA512 6cbcf27eee69080db239fd504b8ee896e4e64310cf1242c6c89a47e88617a5501a2e6e55a102ff37925ec24fd568b28705a7d62310258e3a30d2b3ddf1eaa6c2

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whfbody.htm

MD5 99b537eb8930de7543933b525d608526
SHA1 088d0562cad2b5b3a45ab224efc1479a2b28df79
SHA256 42e3ff4ed7b2f005c14c2e9bed7d18d43b8b24c84c1eafb5eb8dfcfe17cd96f7
SHA512 d576dafddbe44e0c981acdcef9d165002cebb60df024da436a2c8e330c011b5c437f0d0017ff0c2e2aebb6cae5e9650950e2553207c4eff068e382c354d004e4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whfdhtml.htm

MD5 7cdf1bf51c35fb02bc27303d9a19cc00
SHA1 57a913e0b00007ce9729e6d4547dd3f81db5d89e
SHA256 bf43a61ca8f1cabf89188d61b8bfac6769a32de2057ee91ea27e05558e4cdb4b
SHA512 1af4d5e43c0b30c32671b91889ea463dc014f99cc3de9ad49d4a870426613cfbe80337d6e24c865f71d9e0544f86e0fd9f629d7c336561ca79f20f01800e12e4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whfform.htm

MD5 d67fd6bea81dbcec72d67db78d6095fa
SHA1 bc873c4710ae0842b18ff49f7344be7355dfcaf1
SHA256 81d38f9cf61ccd24e7abf0113c2556c9e22ca5d6dc9e97aa9abe250f8aeab554
SHA512 030e5c7a19f216a3c68551802deb824dd22b6d5df320423251f35b7340b37f8449e6cea2030d77b78dfdaa653065e701a8bb213de8c590305b8104e73df8fc36

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whfhost.js

MD5 0caa8b3d4f18c627fc35440c79ca8ed5
SHA1 d73511dd74067412599f91707f91b2c041824c75
SHA256 8444081544732f8bd1f9312a1fc3e7692818afa4ac9017277a7327e958f953a9
SHA512 1e3e7d1a0d504a25bb4e5bcc6f48c90478b1fd380d5d6b28b6eadf7eed83ddd415e2ddbc615c36d3d036dd4ec387b835408467ff4db67fcc5a9491557076a4be

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whform.js

MD5 9742be448bb16ca252490b0840b8c9d9
SHA1 4c03fab30050d3f8e3b4dc6199b284cde117ce9e
SHA256 dff828a76191574be029582c454ded2a3ba41a1428602a0d5c8a63b9fd5e8690
SHA512 90d6f673d4d3c68596b15cefa5632de26b9f53ab53e0ced52f46a9dcda43d547dfb3d91b4685b2f303a284b6c80e5e0fc5716e3ab21b8d02358977dbafe6433a

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whframes.js

MD5 08dcbdad40f3c8a386bf4805c0925a27
SHA1 7ca941b1d1940d1b20b5ea821651d16852b9d01d
SHA256 4fffb263908d1a73f1bdf69838fb2100d60f9e2f21e65c8047094a8330d4e25f
SHA512 9b8383846e04c8b97db1419fe55c492856d519a9092c744d18d20703e45ed8e302926dd940f9241842dbe7777102eb216efb4c07455fc83c207cb492940f6efe

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whftdata.js

MD5 d37333bd77175ace19330ec606734cbf
SHA1 9cdc581f0a0d921dc46a49db0730c5895b68b4ef
SHA256 3ff3a18817c8de59a39b7b46ab88b23be2c5ad1bc8c869bd8c735e2d3adecf4a
SHA512 fe4dfd30bb313398929b5bb7f9f3793f9f6011e0cc5773c6f54828449c54f87fcdf4e4c222de712e64189b6f604e86ac19534fd2a26a9d1a82248c9c03822dea

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whfts.js

MD5 50b49164efe0c3e98e9bc114b79f6e03
SHA1 cf07a1075d6ab1d9f8f87bb60c8e850dc22862fe
SHA256 e577af5b3e2c8065c1509e705e0cb12362fe1d0e4418e511ade23cc57e322ca0
SHA512 5092a2d63c9e68f61996f67e487efefb9a095f38347d9d7c61f49d5a1bf1d9ac2f6f0539feddf9baca89e6d7dc17626666a98b5de67bebf21c24d8edfb6b9432

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whfwdata.js

MD5 4bb0fc10713f9bea59892c959f147a97
SHA1 622ed4fde2ecaad1f415b060fa86ad422e4e0437
SHA256 7c64c6d6aae118d33e796d9a7c8cdae800b96e1274d5ca6c2a9d7a82658ccb75
SHA512 f9a403a0a85eca85b84b94311c0d1c42e6dd261a1ecb9f030fadb66ed941e08f3c226ba2d8bb21dab05db7fee37955e3d77346cc79de7aa024a1b1459a170665

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgbody.htm

MD5 0791671f3f64f40dd519c0d647d85837
SHA1 f9fbbd9bfd7f0ceb6eac64d4077af459b7927dd7
SHA256 feb6ce2c5f655d06b086ca69d99959a9b9f981aaa67871435228ebe8d1b955df
SHA512 88928bcfc4778e0146d8eb838ae402fe50813b680972e819c08185ab5d38589a8cb5a11394c000da3a435aa20c11023027415d076f647e4f351d93b97b7c424f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whgdata.js

MD5 9d9618570354d0b2d9e5f95c9629ded6
SHA1 090e9d21d845c7666af3bcaec1ce00a2ddaee7e7
SHA256 e0c5415f1a59a181b5bf34a6d5e68628115beca531b2fc4d5a6da57362cc4259
SHA512 1818301689a3f46aa86b215c6d33495d2920c118eb748fecc04b111a2d49c810e97a2ab516e80f70e73cc700978ae6b2fd1a33b4b59b212a5c49a3cc5b4b2e76

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdef.htm

MD5 8b1f2b79111e46ec3d95d9b3a59eb180
SHA1 f100a6cff77157e7b5e7f1f489d5869bb2d0204c
SHA256 25a855db12d6d894d156b5367b02a92a70e2d5ef5fd957c50639aa3b6e9196ce
SHA512 ad7c7ce21c2b8c4177c3f3e0bc4ab9e2881e6b274e6768f8f1fcd6da41dbae3ad0a38a92abf2dd8fdfaacc2062d138125b0073a90826c024ee49376a032fe508

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdhtml.htm

MD5 9413d748684279065fa55f48824c2186
SHA1 7697826346fe8eda2f7fb13d9a96f90b7099f3ef
SHA256 26d8273feb98b35123e081711c3d3d4285605ea23ea097e8063cbf12adad63f9
SHA512 cc1cc46a5966561fb134f85d2bfe4746e344b32652fb414728d1687daccd8bbd85b75aaae3eaaab3aa0980ada745251e75ea867ccb238243d2c98d4bca29a083

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whghost.js

MD5 4a7262053ce4cb5c876e0b14c41f1b04
SHA1 bc9fb589a94c0c59ecf9f9cd4756144a9f5fe588
SHA256 ca4c90af638d20384c0e025ce01d711f771d2febc4b13b65a7d59bcc52697334
SHA512 da7cf56bef2e71f3cbed366c299d6754138285a385f7aef19e662ff2a0488b944e61880a5ce0a5376a05c76e39ed0b69d846c543173a5bd289b7290605b559d4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whdata\whglo.htm

MD5 e4339db9c63c34c7e9da368712e49143
SHA1 4fd04fb2f845e43ab3a32e936baf500c63ea779c
SHA256 fe01d2213c13c3fb5f359c6284f28d70dcdc01760e524047f01aa7861f5ed408
SHA512 8c20a2a98c3cb71606e3a44aa19a0ed1b3170d5f0004813e60bdb70560e206306bdefcc1a657b275f62fd9f8966e46b47ed7250c5f4c5df8dafccee1236a9dde

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Author\whdata\whglo.js

MD5 93b6a954c7ee4c0da718b3424e49084a
SHA1 ce74082d44df3449d06776b3f2c8d853b1bb7c0f
SHA256 1290e86df540d4da82d3d3e7c8b00c981ef1f84e5229452da5a63c524f6c3d8c
SHA512 6af737e55e6ec11fc520809be826e5a409d23916a4d826c7da56cc3ce063bee29fb75e4b5306ec1f49c26e032dbffa14d45451fd1f9ef283db596b4b01e27440

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whxdata\whglo.xml

MD5 5e3fd7b7616dfeedee26da2a32d5f6f6
SHA1 0722917b95953285365d7c25b7059aa4bf3678a6
SHA256 2bf13d6bfbe22a91409de2b99c3ce59461a1ebd2c319d3f6d57c7ca48829589d
SHA512 1a4acdf11bc4cc457a128363979c00efea105d44f0fd2dc73a359160f81590b5c0748a3d34e306d1e0ccb799761bea865329d362c95283d9c61d8b935e5df64c

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whhost.js

MD5 fa1027c48ce7cd3962b73f923db59b74
SHA1 0fb8d69d583c86490b94ce20cf4f0666cde7b18b
SHA256 60d20355b2ff7ad38d21bd1e313652d1ff028c163e2656f5313b4f16f80df0d1
SHA512 5dee60188a568caf160b9fff96a5c9749b7ac2919fb8053eaa47c4c8b36595a1e57a39a6ee2d60342ad4fd415a51ac2ba95636d6e14b105cbaa062ae47d28c00

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whibody.htm

MD5 a16e8aedadb1e40464085bf4866ebd81
SHA1 b70827e8ee2a1c137b6f9a37762e413901ffd633
SHA256 187cd93a392e99cb317d30203c49b44135444a8b22a707bdf19bed1a9f604673
SHA512 3bccfda967a5faecac7fa16fff29fc66283f4e4a8af83239b4512ac873980bc5332b6ebe5e2cdd58d02f951eb81e4893f9b0b774d25fe9c2d64a2bef7841cd4f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whidata.js

MD5 9ebb8894cbdf7b255cab094cd6045755
SHA1 23ffbfea134959d185aab636fc10212b90bb7ec9
SHA256 b33ca99c0fe9b9c5540207225af8c8f423ac0b9082afe9e4d17bc707f3041401
SHA512 a533351f78f73bc3e712978c8afd232bf9b8d874054bf8bd01c29dde505fc390fdd3b52ee56c1dfd080752288c63a09456367ee56873fef5cb8f857c6a8a05da

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whidhtml.htm

MD5 9bcfb4fe90614a6875104826162eb054
SHA1 1e439ab03b84e2fe7083dd43ac4f2f00e62a7985
SHA256 8c3463b7c7f64d36b169c85b4b2ab6981b8cf33bec2d677a60f9e1c10253fc99
SHA512 b30853be3465e4ae9e8f4c9e169964bf88028e69b1428e83f7f0d84755d0eed70c4912de10b0b6a5e11c6ce832e1aa5fa6fd44b37f13bb8169e053190d0128d0

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whiform.htm

MD5 93ce8318f2f79185781affe3f5e6c40d
SHA1 8c406d8495bcb573cdb561f1ab6400cb5db5190c
SHA256 902c02f9a17020dc99e76617e5b7861bb72d95faef5df141c4cbd1fd418711a6
SHA512 eae226cca4bba5f416ab34a7a3717c99610258363270e69aa116fa0bad9910c4eaa0391004e4c6b6c73eb55ba047cb95bcd934f8ccd66af6b3b1abdcfbdd3650

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whihost.js

MD5 806e8e4d37fc635d2b7d675e98453af1
SHA1 280b2ae14375d81e762e1746ba83448462c967f3
SHA256 e5de80615f9107777a5e38f1ef87f801dc920e694eb5af14c43028acbd30ac5e
SHA512 10c513edbb5e77e6487ed0e159b677dfd8f925e68360c614262f62afc043af4db3dbe80f74a871c0fc15694fc1764288952507725952cd937c4cd58cedec1be0

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whlang.js

MD5 d5dc00814b8bfa076690d28dba02e2ef
SHA1 a952c3cdc968c2638e3cf03ec9ae3f0dd49cea23
SHA256 9e63dad88e1d0c75d6bdc72af3e7aecd2f8db831fa9646a13328137b5cffb350
SHA512 f65f7e78f21335077ce62f75fea7019129c5c4a7898dd73b3e7bee4d4f0afbf5fd662e71e3553d55ffe97ca26fdfa8cca7e5a75148596164ef1f66d9460de824

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whlstg0.htm

MD5 98739969c5a27c32512e0d45b9cc6f22
SHA1 b674d5ecf280d6567de60a0dc7f6cb796c181b5c
SHA256 28bbc0ed57fcbe60aa2d9f7b2a16706525e0139546f4ef4a1360fd1ec419d05a
SHA512 cb73bb5792f3a8df9b8f404046172b288ffc53816ecf7e6b0afd5097c09e711b4328ada0c83fd7787afebd3152b00e890e1bf385eba4bf240aa4b9b67356d7d4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whlstt30.htm

MD5 ddf4c1c16adc62904385a3b2221f8866
SHA1 e8f0de0305af31e8f723f3f2f22b7478faaf7cb7
SHA256 5f0e07bd96d3021fbb017bf6101bdf9971d9d2e31945547a25f5bacff37d2a09
SHA512 03e03398085e4491ef1d5db99671831c3b533e9782a8b5721726957c668067f41016bd81a74a7f78da128b51069ec461307a2476cd7c41ff546775e4a35d5c22

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whlstt34.htm

MD5 a55e76a688974e2f3c601977444511f2
SHA1 7b2c2f9f109b8bcfc55a63ef197790dbe022b883
SHA256 11e1df7fff9b3d39b57ed494c7784e989e504f83ddaa5b0d0d0298f00f3af61b
SHA512 6d23027c669d0e944f6bced4cf554978cc6cec9e9209f3d429dc44691d61b955e93efe9d350a14e86f1b00844d886bb1810f8054da2259c50cf67fe8d0d89475

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\whmozemu.js

MD5 22b846bf4d416129b45f63f2fa06bb51
SHA1 26155b51bb48ef104589b879d7a5233f57917705
SHA256 4087f21a9cdd86d0e249da648db6361e654965d8c28e14380e0dd61907ded999
SHA512 677b2670e6bebd06b5e8b2d26757fac91cbc3d5f8321b8b0a2271c872494f687fc32925c85580c54ec73e695f616568c4bfe46cbd8b81f0f93f557a7270b9e31

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whmsg.js

MD5 ea18bf7f581353d30a6365f3c8bbb6c2
SHA1 174fa8bd46ab9d5d4b27d66d76051d73b5deec19
SHA256 0a6e4968196ec12b6f4ee524e3339f375d4a6e749ebe6a0f467616733007543f
SHA512 76cbbad971210f9048fd83227fa791d7fdaceaebe4aaee9dd59fc7454a6ae9cdd7f080b0c12e025afb6252f5f2a492375d169f9236ee71b6899a9925e3c620da

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvf30.htm

MD5 3e2c971a4fc8a80c24217b18307ab0b3
SHA1 5ba85320e44543f58336d6ecac13fc5e98ca9b1a
SHA256 35f457d19af65ec57e4d297c3d78a67d105f94cea2a488d64d959d1bedfcf233
SHA512 f7c3d9aa479ae52e5bd0ee0dcdaaf74b0b85ea2137ca7ceb306e27cee0d47a13c8b5e8dd3313f4d8bbd1f078f03cc44c4a87837cb665115b54c4e77a4fc68dc0

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvf31.htm

MD5 e347ba82a43a1040fa9a3557805119af
SHA1 f096893a7ed47d8a15aff375d3ad8ae0b6980f8c
SHA256 cd268d5449e0df7b98022e343ae767fd7d8a3e9e067022a7842814e7dd467c42
SHA512 d8562b3207754e46f03b894d60c9c4bfc2e0e794b953be5dc6bfb7567fe706099aaf42bb6a40a7f40ec27bdfd29e5db2a6aeae325170e27b60788a8c152bac82

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvf32.htm

MD5 5fdfe66234621e9bf34149fcfd985efc
SHA1 edeb08e28325671f1143786ecc0e5a6553e23c28
SHA256 23a267de8fbd15fba1c27181d921d189c2bc46071c5bebd3dd4f6964ebf062ad
SHA512 a8354ce824e7b5395b75c4bf669f6de97f1a6819c10651e2b451b88eb4d67b9ac461050d641b6ebd380c811f5896f269cce084257991a8ff50bd605800d2b02c

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvf33.htm

MD5 081a9b3998b6e23a3c16299c501d9048
SHA1 c682e3c527cfc0ab551e7fbd2bae39c32a9f3fca
SHA256 02f8b24caf190db85c35d88a6ee73b2985a1166927f5a1208a1285d59fa01867
SHA512 da8c6c7285a945a9ef3d341378d19f27b357e8b92660b1b943c606e63f3573492a19fdc128e568f9cf099937d1501f37486d2894f4674de29b62301d3c2b95d8

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvl33.htm

MD5 2d0b25d38d15fa63846d0e908cc2fcfd
SHA1 769701b63a7cc2b33f096c1a61aabbcb83748bbe
SHA256 601aeb934480f34cbb5002ed646f3bcd3a6a14def030efb1c9030e8935b4298c
SHA512 2bc8591b5fcc9e552ca783d38f9e0807542cc292800cecb999e17fcb8d1452577ac1282c4fee2b75c5d536b1d04c9457f182e2fb3be6b394dec7615352cc7cb5

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvp30.htm

MD5 769329e0a3053e233f53b07139b25498
SHA1 f30fd22b6c0a2c6f08c0d781a432644fc96a42b8
SHA256 5e88a406601a839e75008c78076d6f71570befee5abfc3bec92ecb2d28ca38eb
SHA512 88904bd030d51dcef8d547e593460606aa95fe46508c7f48051bf3760b7e1ca4a5ff879d0de8223e0cf619f528e21b82408a9750956027f8184413dcd1cef893

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvp31.htm

MD5 de38f46930a5c6e687e7b110205140a7
SHA1 4fe1ddf0cba5dcd8ba982f5681aa0c22fbf36550
SHA256 5d92206afbcc0fbdbc183b3004358c1bfca013ec350dde75eebef69a6e8f2a8c
SHA512 b2fd8d496162821cde23548735070abcf457ce1291d2ba1e6b7fe583a9742c529df8f7b9e78b0a94b9c5228c93410db8ab81d18fd66d48cd351d5a0cd8c20118

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvp32.htm

MD5 501beebaf6add98c75c64ce42b1d8e1e
SHA1 c2a6ec41d6917da46c185313436f59d74e477577
SHA256 91d6fe92bfc37b1f2ea5a8d4dd913cfbe084d084f48ecb651196c95a95372bc7
SHA512 96e39349091d7317d3bbddf81359ca7758def7d377b4a6d894c205a7bc5e262043f6b801be406d4a66f5423b2c5035a2d3aa8602dc4126af562f1223fadc219a

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvp33.htm

MD5 f81502eb254bc2a838213fd11997a7f4
SHA1 6e0995c0c7003408d48197f556ade455131f76dd
SHA256 c8e1014c94361ee67d52cd0ab876d608e61495d0b6ece05437f1541ea698d9c8
SHA512 040df97e5d432fe12818b61f139e40e76d79b3dc9422e71c1a9c2a52029e1577ab42e584558a6e385a2a13e1c4c2f77d8a24cfbbb704284344cfa4c8e53d7a23

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvt30.htm

MD5 7ad52896c37e1d2a8ba2b5b12b7574ce
SHA1 440f9166f0a98016a3c324c677f7bf3afa2da95e
SHA256 2313c72572a7139d25f2c0da3d7854005110b1fa4ae4e9868e15085d6d56c8f7
SHA512 bc5d7fea1696235f4dc97799a93085427b4ace3aa8f38e30c089c14c0dd33f21785f0c1accfe6ff3223cf1fb17cd9f71f964bc1de9ce22a80f5f208821fed2bf

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvt31.htm

MD5 a3e8083d70c8cff3a1978577151a3074
SHA1 d3b3766b2e22f2ccd76c4c5c554f8252e0b4e143
SHA256 a754ae6fe4a890d3d21c8160694e6be0336190f6b87d8a37b54b3ebe2b66f594
SHA512 57a9af4eb17755205ca9a6695674433ce08e15cf870d418c84e971bd540ee1e9584dd7cc4bd111a6e827368e20438ee0aa43e9924b309ddb9da4b2eb3a8f875e

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvt32.htm

MD5 b38f5b310ffa74c91bc436705472b23e
SHA1 53e40be1616eee861277f009b802f134b54b8892
SHA256 716ffe90dd6a6159f00791ae429837958c7a8515fb8d879668de22439325974a
SHA512 a918f0ba4977fbc5d18b6d946202b0ad05165b825506390d397977dff4e85f5a3050bd23dc281dd7b4cbcec075431cdc4c70ac606ba8d10c5013f58431f1f9b8

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whgdata\whnvt33.htm

MD5 0afeb43bcc8d7269a00b6ae7fc6d5bf9
SHA1 5cf9bb16be4b0ce2d25d93cf9c44d68ffa716dc8
SHA256 a72dcbd88a79d0033c89e45f4432d3039c0601e7e00d62b70e3a3e23113d49e1
SHA512 bddefe5a2df58958e2fecad8c2752449bc9676d815aea7900be3ef91ea67d15197d106491aaf5d6d6dab614874b6aad232bf08450099e1951aa26da23498d905

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\whphost.js

MD5 8d8bfe85030e99040eda5a9c70d10b0d
SHA1 e4a9e9b96d132c7d6c26ce3deb1eacc8ed98c869
SHA256 9b12c71e6e2e0c1a83096505af1af6445d4432756a2c4b45758843ba70f1cbf1
SHA512 2af0f0ed646a65e83abc28cce7379276394f541b54b1de011182b8a3229f233780709b9a9c8fa7c0eda0ed2bd394d3a22d5a08df13c30db73be5fa85ab83d38b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whproj.htm

MD5 517531845cad8b088c02fd94c775d8e9
SHA1 b162227ca23a68c18c1d30d49818e5e7db7afef5
SHA256 4d65b2c8464e612133c8fd99b4379d3ddfa74aa49b348801bd200ba1868d7fea
SHA512 7e375529c5204f788537533c8f805b203f0913e2bae12c20c2718591ef877d3603ed9c60632fd178e947689713f0568afc101b268cfc6c98487632389e874f4a

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whproj.js

MD5 242d275476902d17d6bb46c7c5b7990f
SHA1 081683137bf633a388d60e02780fc8c602d82135
SHA256 3a71008b82e1a1145ff1a652294759284c3e0f05cd7f8191148be3bac1e09131
SHA512 62871284eaeeb68d2d546fc41f72a3c78fe8b59f9a1b2f36033904e09fbe1672999d205f7869c41e7549c0df7c5fc0ea91c038e4e3f7935f4b2a4dd46dffe360

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whproj.xml

MD5 f9e81cd74cf6d00b0eb786d97128339d
SHA1 89fc7cbb1332693a44a6616107c03d1fd3a9ef04
SHA256 ecec62562d2471d047df33d36c54c706aa2d87ff88e2d1f81329f4c9a7a74793
SHA512 22dc331047160b7affd0dc6d48b165cd9909b2e510a133af2dc887f4a01d3cd3a2d2a41c37cea02b380d1361242a96d66dd9ae57dad13d2cd22810a1b240380b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whproxy.js

MD5 34ea03747542da77b750a80d34e650b9
SHA1 c67e8db728cf6efb6ac64d04d2706fdce347842f
SHA256 1af0f68a4d0a677febffca6ef72eec48713c6b44f6a564c0bb1c0d45732aeb45
SHA512 091661e996ff8bd075a51ec754a7827d5443208a51bce699872e7d7dd3449edb155a67ef6a2e7d4e989c186844e746550f12d7f5ae5cb2e79a1dca4e643e55da

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DevRef\whres.xml

MD5 78bb84d5816c5e51fb8e33890c25d853
SHA1 e745ee9cdd62c2fd9719659eccb7626930220924
SHA256 f9982c3d0a43fa001f5542669c51b44551da65f1b726b8586a1f555f3b87685e
SHA512 150e120fc91cad224edd0756e23b66456f9c9406d5e8825832285a3f0a3355a981a885a01b67efa4d100c84e8706d2f1dc2b0f03e0b49ba6fa500dbd98666cbc

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whrstart.ico

MD5 6e1f3bf8ec8fea0f9cb4ea51c7c1d165
SHA1 911c12d6b5d1cd43085122878eb66d7985700e13
SHA256 ed4401585d4a0611172f829f1f56a82a01ff24cdd89c72f6708a58724ce55c1b
SHA512 cb4f7a35974882cdf05478afc1058d92051bd86f4f8ca5672140ef8dc6e92ff10c8f3818cc7ce66690d028445fd612258debc1d9c9b7254022380a4c9f4877f6

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_banner.htm

MD5 0c6905c91f4cfb2c7e6efe134d90ca59
SHA1 3ebc0a08ddb91801757e201d5f6f50cdfc46d021
SHA256 f45aebe1ac4f045d1b6a0427413a67a39c805190360b39500a22459f36546b79
SHA512 814b25f7cbea23bd88617bc5173dcd35fec4abc1c29b8dc2abb2f862ce547803d68818fbf97b645f8b19b1313d9ecb87e1eba4c1ad09b7b702ac9b4639df4ac4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_blank.htm

MD5 d658ce6c4bd455babcd752878c3acdef
SHA1 92bcd16d20fa99a4630fde701c183e7acc04de16
SHA256 b7e65caf6fcbfe75c681b3dc18750bc4beb34d8bcf28b5f804b901fbef11e26a
SHA512 01d05a71ac7dbb91f952b15d863ab353c3120446dd5d8141a6405538ba995224ec19f09ef7fd8ff671052cd3a95c76c5f117fde923e09a2377b993e51620e689

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whskin_frmset01.htm

MD5 0bc0359cd508a95670c625b1180fae36
SHA1 3255722c3b3aa94bd510d9f09eaadf385c89087d
SHA256 2e0db80d59c5e271a1a3f044d55462738c792aee45fd059397f45c191b7b3300
SHA512 2f48967b684fd758a3548f43bcab4230195cf126a7a5f3614cb23eaee6e144a1736ac21a81fabdc5c1539596d22dfd8f34262c7b1c731f237067231d794fa8c2

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_frmset010.htm

MD5 299c62e5182843a6ce14b232aa4688ab
SHA1 d8f54ebf8e094dea23a96b1b8425011472eab104
SHA256 56544ae7066b1a85bcd0c3bd0ef5a8cb22a5d7110bb9621b6c1cf49362162843
SHA512 1951998f50292c0a4d9490060bf80c63e2b0a6008dba1deb86f1e2bfad14353aabd2acfb8d6a3a1a241be3d0f0bb5ccc4ddc148e3db3fe30a1d15a70616c354e

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_mbars.htm

MD5 da7f5206e813d5ff6a8a2ed21d16c7d2
SHA1 f56fd9a980e24ed4149488132cf345cd1b2d2eb8
SHA256 30fdf1fa3d52beb185da3a187c2b3f11794521e798eb2f2293f8430c46a99e9d
SHA512 8397300f4324281d69b041f581e4e7bc73812998428d0613ade12498126954b438586153f43d10ce748b799a5fea47cb7748b08cd636f00a241dd79471394470

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_papplet.htm

MD5 c134ee0d644cc6db9afaa226a0684f1d
SHA1 6efb6302c4d0e514f0ab65c49b6a140d7992b2a4
SHA256 ba162f95d479025ed5e59933d1a7497d03a9701e523cfdae16099e9b8cdd8965
SHA512 0d5618c67676626bb48c1f1d3651b3e58447d02f90766828f82ab8913fe70dad58f0acfb621282d6643debb799ac9bd0bf57170288ae462ea20cd2af82674b08

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_pdhtml.htm

MD5 0560a95365d7468f2a07bb0809a25b53
SHA1 ce28b13589bb7de6af918b4208c7ecc2a57cf7d3
SHA256 090bd277796e373d9faa0d6b7285c2a2ba8bf8dbd8065bade4ba5fed8a024152
SHA512 137aaaf0e50ffa838d56e6d7e83de9200962652c9ab16c5ef31d242b808b9675851ec9121c02402efd934069ed37654b05eebee08a6829b37a50c6490754a026

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_pickup.htm

MD5 4c7e089981953cfd1b6428709939c7a3
SHA1 2cb4026f6effbd085b4237e3e63a081e6ded1af7
SHA256 95d891b8e0d20ba2b4971490448c6676c7ae72b9a2b5deb135cd1bbe8eca816b
SHA512 08a8e355bf8f6a27221b737483a3f951c17cac5985f7ac63847c4e5e5acc82a2bf70c1dde0ca375b2ec4267f8544b5310482ad62803e7d0b93538f166104ed45

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_plist.htm

MD5 ee7eddeb0fb27141899d32ae6ea18bac
SHA1 8e67ee9c96d839a4b90ae2befd2d7cbe04459edd
SHA256 44461b57ed0a977da6c4fd5657fba6598ff16e31d8bcf446e2234fe392d9f176
SHA512 668bfcd825f65770c7c11c09dbc6206862fdf5dba8d561d59e8d659fd9746448d92f8246b6e0bea22bf2ae2402dde52645d988d4a34a8ad5407d8f34a79db8b7

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whskin_tbars.htm

MD5 0afda53c062de77c5fc2cbad16f10b30
SHA1 eaffae3901ed6075af1f52800b490fdf6c8516c0
SHA256 b08d639a06634e1c41ea16d4b7441b9957249da7a357a578b8dc8e1ac1e9e71f
SHA512 3047143a019b26147402f684e197068eb26bb3743f91526d8c3f6f256112a5b61533d5d2f6122b1aa1a33ce03cb67b913d0ed348c92266b381873ee17436ebf7

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whst_topics.xml

MD5 e45edb7f73656a9277fe104ef80de6a5
SHA1 3c97bc7dbc228b5a6def316f925d10dc8128cc78
SHA256 834b8f8b30c2f6d47808677a23293d9fb4b4091f1034751adab17290d721b222
SHA512 5bb4f272703b87d058b0e0ab22268b9ad6ddff11e70f704e60eb473176ff86c20e04eaa26c3a5560fca5765af3553191b52818fd70f36a56d9e939292a90ac22

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whstart.ico

MD5 1e6458a407de1f20694d147b737b81f9
SHA1 ae563376e133425e65474dd40be9f11cb78155e3
SHA256 edd1ab0dde904564ffd0cb248d10cb7a1c584bdf7ddfd0d162eba784090652c3
SHA512 c952825e43783ec769bb6ba78d8abc459d43342038d0d6c6e48304308c459c598ddb846c9b87360890e6b0f1312ad10c72decc74a331c1294c9f4baa93f062d4

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\Wavelets\whstart.js

MD5 06e3b58d316fd4fe3d636430f5627d39
SHA1 ffa9b0af179146e174fb3f69a50364d1b3957142
SHA256 4fa46e1bc542da630f7ff72f6a06a69aad2e3f23267e35d8bf61e7001b02894e
SHA512 3a1bb9fcfbd24effff5b25a4164c1d547d7789297a3a41e17098c93d4b3b392bb2380aa0767121bbaf06f51705a03bc00474564a1938c3e02badf3eaefb212de

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whstub.js

MD5 fe44d7aaf6ae6c6ef38f7807c44a4bff
SHA1 4e21a3708c5d5e2b1245c73c8e8febfcc653d684
SHA256 81be343405df1d3eea82bbd03c67aff12bbce3cbc9161ab1b09b6143a3ae1135
SHA512 3edf123106aaf63b8e22f8b63575ba0142feb89d4771d34fd0e10e9c64339eeb0663b42e37ae1a1f769eab508b7afd02568a0ebe46024569bf10a3fad5723d41

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abge.jpg

MD5 586c64fc7cd75d0ea6cbbd424fbcb20e
SHA1 4ba026d8f73b55728e7f0adce5c85a12a053362c
SHA256 0c42e9982855b450e1e31ec9d5b88d25e39caaf71136a2ecac0c2df1a56e156b
SHA512 ba38789b8cb6dcfb744d0c83ed6ac4883680a0aa0fdab49c582e1ac316152f7ff2f3cbccdf77858b2b5eaa16b4433887fd73644538d73cb05550a3ab519e7c71

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abgi.jpg

MD5 12fd84e1817a2f19cce69e0a474f1af1
SHA1 e607cf49365aebcf037b9c7ae1d84503a1301bf2
SHA256 b5d776fef417cbba2cf4bb29d0e949fd074fb748a5dee70c802544b5b3dd4d69
SHA512 3fe12167e411dbac5c7985e1140787d51b236941168cb0292b83dd3e52aa06d98ce6dcee9b1b408b5c578803df9cff52aea9ec92c337b3671dd55337b9289fab

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abgw.jpg

MD5 91b858e0afa319b3256f1e6e39bcd31d
SHA1 050f7250984db30d387137ceca32335982d51650
SHA256 a62c6589222865adb6c07482b09aacacf6d53d92110ecd628d1384bcccf2994a
SHA512 fec0e3c5043245dc8a38a3ab5c5b93fb0d3ceb53241d4adb7990bc251278d61056ee4c0cfebb88187f986161fc38cc94f66640419064f095ed913806dbd49aaa

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abte.jpg

MD5 fa3cf7af426aa72620c9642ea7656e1e
SHA1 f8b1b8d1d439f4a60ab1e5ec372371e645a37075
SHA256 581683ded4a0d38ce57e034c3d73c6b2be4cce301ceea9ba4ed94ff3e7918d2e
SHA512 d720b15ec959e8aea4b54fc6557b2ec650d32510011fdbaaabaa22117e4e7dd0a3c42b2d0d1777123fc1180f7836264756d007b6a54ce116e077a59254f8d903

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abti.jpg

MD5 5e5520539bedbc77c33bd28712bc56d5
SHA1 da1d64b22889d4b7c2af585c714e98c66f767251
SHA256 19a831a9f6b0845a445987279b7cc408479baedc06735c001bafeabb2c8e1d2b
SHA512 6c5902305d98e67e21d9d9fab42f1e16465db03abe7d41d0080ceae02bb59f09adcd7a1a54da40f023739d2d6b655c26c233eddb2590ae0e706ca5da21f4a858

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_abtw.jpg

MD5 3f439f76d1dd2e01e4640f016917f41f
SHA1 9199104874bd86a64d603fead5747256e93b6211
SHA256 040693296265c7f31cd6bb59c76ba8203735aeea22ff14ecec3580a857863da8
SHA512 a54720ca7c90050cf2f0a40d1d00bf0c650f4cbdff1d53fda96aaee007a10eadab8af3baf5e08a3325d17cc7706a1b781ef282fe26eb0d6766e73cc2662500c7

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_fts_h.gif

MD5 917366edb341f5cd1e26bc94d140c699
SHA1 b5864f56ecb610ca72796f7b56b72b28cce87e56
SHA256 858b2cbba1ace020114ade5a60fd61f531c36913bd0ecf5be25232e1ce094b22
SHA512 470e1639ca171884e1f6320fa2851bc39f50d7c68e28e714d7a4f336496bbb6ca3b96e86c00c78efa1e09329c2c0e544c9e34b05e5257cd0879938dfb8c6abc2

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_fts_n.gif

MD5 adadb15438c9715049c526c6eb88cef6
SHA1 6cc31eeac44441a24f9a4de1adbe803d3fd2a245
SHA256 0e7b777ef368a1ccd30cbd26252e884e9f2a82d39632c500d5c29fe2c8f7b80c
SHA512 8db9179990f13ea0ca45d57c57903b1d186213c96319c1acbac3486133e6508475cb6124a222261f266a7470b68e4f00c77bfe9b4cafb6bf276972c7e76f231b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_glo_h.gif

MD5 becef04c921e830655cb9977b332f35d
SHA1 1dadb17f6c53e7f6c3c9e1cec6332a8d8a3a3ffc
SHA256 7fac567d4476e14da40e666a2b0c5b05fbf93c9d8d37f7f8c3d51ac2d9c219eb
SHA512 8256e11f59f4893b3574fd17d7a1bdde64f6f0cf3912d3f142bd5a984bf415e8ec301d39b1c8dd6f7e6adf791aca424cf1f2413a47a8ad5435275ff5bddbb723

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_glo_n.gif

MD5 d8c8ceb5c2abf7d88bc9f894da0dda18
SHA1 270fed628ea3ba302d1d8e24b305ea83bf5df2ad
SHA256 f7a1733b49d2937909b854a324aae15a3f11364e78029552a40755ded1043096
SHA512 154b23f308b02177cd2ac5eddffa3bd05da21aa0422e04c78459b38aa0f9c7f2e5d6e5682f6c4f6783594d4810c3c3c08198f92ee78cdb70e3978e6e1d634611

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\wht_go.gif

MD5 edf56bbb0fee1f0b448127ae452249ec
SHA1 935b9270e79de934a6ab5228888e69e30eda936d
SHA256 6db28be2dfc94288b83c076a5703d17102f5f46c155f23d4993362d34cf064da
SHA512 922b2abfe3ff99a9e9e925869c5b470839cab26293a78a0e9aba2175b5b8d044961206b015a81094ca1527e5ad046b32a2ccb3490e6f50d7a4173dce297d17a9

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_hide.gif

MD5 c095baf1f671b2538e7f8f1e711feaf5
SHA1 c66799228f900aff0d6fb6c3104e7ed0ab958b82
SHA256 7c894c5fd5c8b8a6360c583823ad3db83e2ed5f06f7916fa1f1b0a23246df353
SHA512 ce6a9822962ca49ef9556f4076a15839353d05e4e2e8d187d1cef527fff70d6890e54c430a16d46d766f76daa32e623c753b41969a6a53b6766b11e53591828f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_idx_h.gif

MD5 2e0a50b1ee7aaa80b23c10087cf06fcd
SHA1 433d568f71c2269897a016d2a6f0756e1dc4cc71
SHA256 0afb8a8114c472a9e4e21e8ef89a6380a1ea56b149b82b9e1083a5737c135d6e
SHA512 46f87d28f8a30ef74475a809078346eb944812893a16106ad84637119e31e5832b0802960c3622f9640f6a29014e9056ecfd8b87a60dbc6b766ee9a6b633900f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_idx_n.gif

MD5 5f8b6560f73b8ca9ce129d54555bbc37
SHA1 55613cda0158c106c66369d360fe6df1579e1ab8
SHA256 b79e12c5554e41cf00edd88aba409dbdb13cb432f19169dbeef913ad3446349a
SHA512 5ae3e1c9bbbc32669ad5bfe2ab23ec77dd2d76faf728d10f42a6fabbd985e9264b59ba38e9ed6b667b4b6736d0311a5f628623ffbcefd6b86e7c40a458d4808d

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_logo1.gif

MD5 50cfd996e697f1f3174d7a299084bf28
SHA1 dd818dc1587dc97fc2589fc877556f72a374d721
SHA256 e85a1a4b2df57bd24e18f18cf8a9f0343268b6a7c1fd1f8fb4d87c390cbd3996
SHA512 2e295b83bef21c0745e1161bb28dee8118d3c9a2168bae59591d4373fff615946a431b2c053f6e130b76e5e23e0769c04c359e7245ce4432ba0e0d1cb05ff519

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_logo2.gif

MD5 5c1a2c820d4fed4c074004d90f8c1c99
SHA1 72b237aee0d60e8b09b3b4bcddb9b91be8a1f3da
SHA256 2ea30e663e286db51621f29b9c46792adbfda198eaa1692a78d442fc4e468ac9
SHA512 e2b42c011b28ed1e641e72d6e266e6277d5fc8f96dad6e51ae587d61b049349087a1490a91a2bc9cbb2dcf76d6404cdcdc4bf163e191316fa9021358898e9d13

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_next.gif

MD5 608a7da838b43443258e5199566713f3
SHA1 f6c382e7d565dc5ba642ce9d42c619eb30b78ef8
SHA256 cad9d3a7c0610b51bf5a891832f9ae2864429b68197ea1b31fa04d8a4249fd62
SHA512 bde7d7f21f9664b3dae243b651440461b0fb5b9f309f33c73f94b4a05d5539c7782b8afdab65f1da0acc7ed84a7ca0afd65aba5f7baa098e445a95d4cd396b4b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_next_g.gif

MD5 acd2543155c682d5c4b395ec6335c33a
SHA1 0a1e58537401183ce54b53d1b1037d284bd8b32d
SHA256 7406b9d0dbf064773874993c92832ba38fbf795f9f9499e27632061798698887
SHA512 5baecef4bb18cf25188955b62020b4cfccc9232d941681701e802ff73c985a9436bf0cfb08877067a9f2f8bc116451d5149f029fef2d7b1f2fa681f8c370a201

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_prev.gif

MD5 a7de8a63a7156eef42f2c5d5ec0d8ca3
SHA1 753ad4f10b85df009b4b4ac0e7d3051db329d896
SHA256 949da45d6905fcf07ef370a212fc42502e0efcfe2e5db979cbdb2413ec6ff15c
SHA512 71cb18f689fb02565e4e8a8df5518b373e24953beb788c36746021fe56369b02efdabb85fa4abe0862ebaf62917eacfd2df6290981d7cda8e42bdf00766f65bb

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_prev_g.gif

MD5 394d7f7a354ee81376956c392336fdee
SHA1 2df52ea2f115e045c1a8c3e3d469fd083a0b46ba
SHA256 87a64cbbcb9ba71d5c15eef642874f1574dc3ef23bd8e70498da9182b290731f
SHA512 5669e8b161671bf076e7fb722c5e03a680be6f8fa96c558eeb102903c52916bc4fc9b686c907f7b016731add914278ba4bd1317c3f5fa7f376549412b43c8291

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_spac.gif

MD5 221d8352905f2c38b3cb2bd191d630b0
SHA1 d804b495cb9b84b9007a25b5d85f9ae674004cde
SHA256 89fe0ee6020314794fc2cfeacf3d10c31050cfe56f8ebddf1ed0a33fbe941fa7
SHA512 cb3397776f5ca1d15d24786896b2478c6548d0b14dec0832bfb16c4c419135300704f8a7a4dfbf56d625429c1598ee8110958648f25a3cca09e6956c1fd3335f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_sync.gif

MD5 9aa58ed8dbf256459d80066d06877113
SHA1 d8a4ecc593ef674a8872bebf8e77cc72f50ed481
SHA256 3039f099982e7aa10a6ade0eb1026696295d4536755b581f9caa80b09597d635
SHA512 cffb025efcea53d1c9fa4797d7152eba8a5505667f2d18e745ec82995687bb53a5e98b220f582de06b534eca2460a4839759ee8e25ee3cbe300c8811b85a1074

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab0.gif

MD5 7b192fd89c97b8f7af95ae178a6dfedb
SHA1 1151e22c5179138d6d8a7349cd38aaa02409687a
SHA256 c403eb07fbe25b966d43e8468eb7e3cac18edfaaca8c4b1e04628e5448e914fd
SHA512 575d191a1a40aa83db5749a2fa7513ab2ff871ca747d50192b784388f6389ca940fc949ae80aeb3e28a9291c6ef92654055f49b072beb248666a44b7310a4cc6

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab1.gif

MD5 6a082cb4901285175872f3b76268a597
SHA1 7ee9ece3e1e531b5fe929d7e834931c5afac3567
SHA256 192e945a7099fd87cdac4f99ae8144c20d8047130b7f121e9daec23d13557001
SHA512 fca3af91e676bb3dfccf8d7580da1bc599e80166c1cc7a9c15d9c4d1610aaf9f1a37837c5a65a48adcd73edc183f2fa21aab1f20a35bf58addfdfdc35f77b2ed

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab2.gif

MD5 ddab4754b9a4f3212c72879bc8dffb35
SHA1 f5878fae00c14a38f050ccf7e8a7711a4bdcfc41
SHA256 cab2860f8f88f82e80209c126f23fda9104c5de7b27ce0b11148ec7146a81c1c
SHA512 a88c26b9615325ae1eb494d2c27a19403d1f46ef0c8b7702d0a908ec2124a7de8dc79460488b278d128a8c4000e413bf903f6e131bcbf644eadc02af7893ffaa

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab3.gif

MD5 c63bef5aa8f0e6dc4fcf62182893d329
SHA1 34ca3e0835989ff93405538cbe68cd6d9d7b169c
SHA256 66aaaba618443f5d52513d38dd4fa00012c9d45892a543c259bce1b1556c1b49
SHA512 171b52fe4df38ac37cd02f0623c8af5647a66e57ab804822cb6b977ba0066cd0fe9123d85496a93624b444dd011e2f319a1e2c190eb8e69695f9d18615f19bac

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab4.gif

MD5 385bc1641e9a9ad25426996fbd7ce24d
SHA1 4a8a853ca478c16a97340925387462c51f873584
SHA256 20c1a206d04ac4c5b42f46d6f8408e66b5fa2780ad4575bbfa3509afcf7c0bd3
SHA512 dc53ce2d637a5e37fa9fae1f00f4cda9cdb360cb96e3ca11c6521586e4a282d62c44010cd24cc356c03a265d8457590a8b555a6c527cf5a1b0040a8fd0d6baef

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab5.gif

MD5 9bc1c90bf46a0f2be761bc8ccc45abb0
SHA1 026e485c9139d639a289eb55a7c6cc09b3111efc
SHA256 6d3c501fe83967e1a800411d5dc8195ce881918922c5438369ebf65a7dbe6572
SHA512 e960528fcca8323dbc168940759c0947f18240dc7a264eb7f8c9329c9b116ffb272bd780ed108b84d3c1677f8618e27ba922e2eb29390f554f813733a522b72f

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab6.gif

MD5 3d31b2f71c1cc97a395d20bda0ffb068
SHA1 5ca9b2f213aceab3174aef3fbf457e83d0db6911
SHA256 875857f593299e344d62df95e4c58b3e951458976083b23e051fa5bee13bf5e2
SHA512 b65977ddf1f781c1ebdd8a851a30b14968adb0405c32c2c657c8629996293e1a83da43666faea3d33756e53fc44517378db88a78742752dda10508e885fdc373

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab7.gif

MD5 90fd70fe70058856ac3e63226003acec
SHA1 7e186bcd776931a196336f307e86b659a90f2e92
SHA256 20dda766b4e4700339a23874ff7c7e8c57c9e2c1ca313258f6c137fa52772eb8
SHA512 31cd5e45076c4691ed237b3ae6b96c7dba881ef167dcbb2abf5c1f105be2d85b3f7b078b7aaa3920957bff5fb4e4633d5d51a2d2a8470891b1af809c419c26d5

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_tab8.gif

MD5 2fa577b3a945f2c917849dd0ed1a0d56
SHA1 b037f0e7b80120816c7990888d8ff7312f616f55
SHA256 c51cc4f0eddb34fb470bfee5b72d2047af9b0256f564fcca02c4d4dadddeb3dc
SHA512 0f1b9eac52b61ea01dfc6d6f6915111a6482d4f50191283cf64bbc9d420c4ae69c91d10ce0296e1a6d87f0c501b7d6f70fd9a9ce6865928376afba1720c37895

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc_h.gif

MD5 fba75ec9e7eb2dd53aa6bf2d3dd8616e
SHA1 3ed71d75f631b13052ea59f4ee0bbaab6732984f
SHA256 9deb2413d98beadb35bc8c0d95fc7a3c2c57a5dffbed05471d8f82e913a64752
SHA512 ea3b2783902187b3c1d2df9be186cf5fe0ebfaac124542266ad7f5f9c734f881df7864a79b1605a885287d630ed7957084b81874af3023dede83d02aca0dd96d

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc_n.gif

MD5 92e601389caf4d027408e021fea59c9a
SHA1 404e1d20bf7ba3de6750b71fdd21bb3963825709
SHA256 85e56bec8f1f28a11952ccdd652b6bf5ea4d6351883ca8a3c9fd58b54d4baf13
SHA512 5d193457b0f42a96fcdc17cc219ce60707c144824e355406b14e8e326ba8b3824c11bac6c87e06e6989138f836791bfaa059fe9f37670807ba4549cce9872a8d

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc1.gif

MD5 8b0f87ed22abadf506d4677500dd1d0d
SHA1 c83362fea42e25ce67830a89c53340cf11190249
SHA256 705b9d14f68fdc08e4f32528b8a9381abe2db3e8c3329fe0668bed5b153a11e7
SHA512 4d04077dc3220c4a6949f4b4865276cca73413e3ad922c8702a478ee9c6c6709f89ea9087f97210cc8fb77d578100bbd41441949ddc42a7d5148091841e13097

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc2.gif

MD5 4cbbed93e97d583425fb71fea2470de4
SHA1 b25388b28fe2050f7ba5b761ed7b2060e1355909
SHA256 f2f9f96c588bd51890d70acbe65a212e6d848f09d7f8e27db9b7569692dd9c9d
SHA512 8b3ac2208f394f7c9560ded617a81804519c2e0abb1eafc26560b1ec3874a20c6bafbe24fcdc22096761a5e786812681f8e23c14260d547d1e8928b4b273fac6

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc3.gif

MD5 e64205919507ed59a897607bdc3d0f3e
SHA1 b5f55b0dddf5a1b4393dac0976e6714411c4720b
SHA256 ae930b3b16ea2781d3b422c2c6d2be78e52310d8ee1336b30a6632d321b6e6b9
SHA512 e5b1b3775eb7bfe5f59f0e641d6ca50ba5e48ac7bedf110c3e71e7685f481df479aa974b3c04c4675089d1ae5c82e7d90c389fb4ada7f6bbcd86e74e239acdf2

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_toc4.gif

MD5 92f684111f468f6bb9fc10e56f25e5f1
SHA1 3b2bd230d1ab036dc9386043352e921a445bd729
SHA256 36d445d3de511c8a67a8e5a5eb592ef9f693d9dbb0f19cbd5bffcd7a695825a0
SHA512 f3e521dc3d91e30d7ecaf7b684618ead22ed12d603b08e6bbb7cb3927fa4d7800f94c0daedfab78704d5c8c6c67d89bb41767b0b44ce9655a13f2e3a4e606318

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_ws.gif

MD5 89ec9cb7b5ce56eca6bb5cbcf0ce9716
SHA1 2416373c9e69973f0fcf12778efcb67fe2e2cf97
SHA256 2acff445360de401613d6e5926140e450ec2b38a8f5274848075f17a69d74eee
SHA512 ac63336b38ddb596d22fd3d83976c9fdd400d5b6acb22afbe635f6dbaa23ff26db3afe9af7e9201057708fa6b9d2daff8744831d8d0dfb72ba444438046dbb3b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\wht_ws_g.gif

MD5 b31d7c29aa097a1eb85e9bbc09ffb7c7
SHA1 fa09382b292f21f68ad4e500bcea8583d7b33e24
SHA256 3b40857daa14581962f654a3ce52366485709c044a81eb9508e5a195b378a62e
SHA512 44abceb858d218e26ed0ab828fdf3283dd33ef578daecfef2d89f9f3a30e9d08ed2a4f37feae4343e43eb3a0bde3d0dda5772a33693afe66f46f7c28b8270ea1

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whtbar.js

MD5 e3f9871abbb312e5bf32c71138d9fbdb
SHA1 13b4fa0fbf05bf2c7c75e314bc98e6d4a6dfe305
SHA256 99fd09575a75385fffd011cbd2219bf4a3a4925b3cc607127f5d2526fe7fc025
SHA512 b652ae1f04091430a5127fee8de614807da7d3449eb16f24149f56a9db146bfc6d0de009c390ac372b6fbf1bd4abb5a1d2f88b8ef69984f2296a1b73a73d5a7a

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whtdata.js

MD5 6da969f9a04ac013d8fe85ede3022644
SHA1 07a3567e1eaec71c3fdb64055d5d0a913c97fa6a
SHA256 c7984e9e8f052779179d771cc74d91a2000018be127c01981290f2993df2cba8
SHA512 3b89d47cf7b57e9ecb15d03c2f7d00fcf3ed06f1ac49bc8dfc447f68dd59ca812f091c8389596913d030bc901bf8b552b910a99cf00d05c0e642b4f43ebe3360

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whtdhtml.htm

MD5 ef9c2e316a70cccc73dac0b91d8a7154
SHA1 2dfa02b49ad89ee82d2374f5203185a1f454f589
SHA256 99041c07809e1a9055c958dae82fcff2052231d3a9aac2f1ab77fac8e23cdac4
SHA512 08090a2bc38511d4cea7fedd18879874bbe60e169195b06b3b21d0f34043bc9d00b506e3f41db7bf7a6623d4aa4bff9d87739a30c34f7c3956f36c0641bbd9cc

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whthost.js

MD5 264799745c117e5e39dfcacbd1c4e74d
SHA1 999975d344afa7e44c0c2b09a8254218031add35
SHA256 c855072483ca6b2e25b75d08645c96f2018e10d60bf96d8887472c8e638b942d
SHA512 c794f4d2af3739143cac0724ae9ac7f5a6081786c25e9b679d8364f47664163c9eaf991d9c7f61adaf85ddfc9064d6c17f018a1ecfbe1a01746cd41317b2af0c

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whdata\whtoc.htm

MD5 20e9213914991442a7d0dec79521a1e3
SHA1 e13a470d1ab5f529c879b73e9b0415b6ae103dd0
SHA256 0255851a463488ec4c71f398564198641b95a2b6e86e3dfabaa8cb3027569b8a
SHA512 b4198bb9a79aea2193719f974934e8c301aaf1ff6450c89ca6245b6369fb751c5087b55de2a4263ac316f4a89e9f5f659adda311c35a18a569d28cc757506e93

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whdata\whtoc.js

MD5 d80138a89a89b86edcb985e7cf8f1e9a
SHA1 483c5e96210b2c21ae1fbd880204230a57c93c9e
SHA256 d999efdcde02d86012bd00eb3cddfeaa4bd688394e809e3ae1506f9af7120d9b
SHA512 d1d7e358756e56bc409025e3bf8e2be887a57dc1f589bb3f1d2e9d19e68da2b91699012a562ff783f0d26a5e6866b04e7394db06c23ef8ac58b46bdb2976f02e

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whxdata\whtoc.xml

MD5 d06ba9af1415206ad87672f37afa75f7
SHA1 7bc3a385a78e25f57008a009a3661cd54411e13a
SHA256 2a1366359349a38e4ebe70e000ee46c160bb189c4f2de6364171746f4542ad9f
SHA512 9ea1f8696211c3b059e7089dc19427f1b55647ebdb7bc31315152ae91b8477b9096a081d1bbefa714440db435779f1f945eaa832180ee1b6772b42f8b5805d35

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_EN\DevRef\whtopic.js

MD5 4b02959825a6c5da1ad8b9c16c2a7f75
SHA1 63b3e929ca773825ba9e77a99cde12b28b6f24fa
SHA256 9f37bc7409722c3cf09e2d2da2db646a953cbc37bc7df9407e4038512fe01553
SHA512 b975ba59207821fdfc3bb9774d6c32959510c595fb52088d32fa0af8f96a110ee67ded15e133ff25e6c70e9e51740eb2c3283e8c8ab14fe6771ca4d4a411a971

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whutils.js

MD5 18df539d0d989533906c2f7ed14e5add
SHA1 ae338e812cf04386bc5a4ced43c0b9fd4480d993
SHA256 07d4c7a78699530c3f1d8e61830ab9369e969374f4209eec68dae96de0b61ecf
SHA512 41956b3af653fd0fa21a8577ea78e8a907a7747d38f63dc0bff23b4f80d454da241b1c0848328f46e740801fe7f5f46a74b271b88e9518f725df0dfda248ca2b

C:\Program Files (x86)\Mathcad\Mathcad 15\doc\HELP_ES\DAEP\whver.js

MD5 ba774cae5d7edb2bfc15d3fcef92737d
SHA1 d2560cb107910774ff8e86524a3ac50755248eb2
SHA256 060c6bff9e03f625ee8119edda4374211946ecd9bbf931dd2bc1e3083baf6d84
SHA512 be800b25480d9813353ca29f5f6ab21d73fbfdfc027c98c832cbeee67a07ac3f1edb327e4048317636d0c0d0232ea1a74819944b28cee6e93962fb0158d31050

C:\Program Files (x86)\Mathcad\Mathcad 15\kitnum.txt

MD5 7456805bce5541d8d57152b89be0db9f
SHA1 68886becd8992b014160ab2e43bae76b98446279
SHA256 c42f0736aa3dfdf402795cf8e1def5faa0f2c95dd6700e72ade670c87b56afe1
SHA512 f54c43400b41b08abfbda0871775fb7a5c5131847d545cab3ef6e92646af7a559a8913560304da0e6545e16ef0a58184457a66daae2ef678f4a9791b7915a589

C:\Windows\Installer\{B24B6F31-6DA8-490A-8FCA-7BFA3101C2E4}\icon2.exe

MD5 d95e60bd3a7fc9f3643bc8878dd5870b
SHA1 05b1dcebd55fc58b05fe339c8633b61409bcb124
SHA256 f70f1d585ea8e0013166a21624f860dcaf57d050cb222ba87efad859e54a70a6
SHA512 361e90c5340561c93f4854aece0732e6ac3cbc59770e4ca6a7741a0848b49f83811d71dd8043c648b272b4a5cd4af113bd1e646df26629ad4fd0677e8a693820

C:\Config.Msi\e57b0c3.rbs

MD5 62377b6718d837410cae08e4f9ef3233
SHA1 d9b0846539614ef91e1f6de108d2466a2b639658
SHA256 8f96b16dbc3ecd2e88ffd76983004092dce438e7e9a310ec4df1c45a2b12bda2
SHA512 ef4e01502cd0b5ffa936aa4edee0db9e4793ad0bbe6077a9591060eec134a6118a1bf3bb1dcc78b5366b2ddff1f5d6738ee1fd2082d92303b2b5c9c9c3aa0169

C:\Program Files (x86)\Mathcad\Mathcad 15\newmsgr.dll

MD5 3b5bcdabc55e562dcaea79a5d8a2d1a5
SHA1 6459d7c777e87aa3dd7e398d96a4acfc999a0858
SHA256 0454fe78ef674f4ba91e94d39a552e0285f9c8cabbabf49a5a7fb6777c7caa53
SHA512 79b37d359c9be14f34a0424104320124923ae51c91d85fb0ea5907eb19503e60274a4a9276c7ed9cf254a236369eaca221ba870526869406306bb15b5510b8f3

C:\Program Files (x86)\Mathcad\Mathcad 15\uiutil2r.dll

MD5 dc35110f9b3df9b87e88ea85013d4621
SHA1 83df365414918eeca81c81f685df4d6d3f69f150
SHA256 b875afbc552208ac20a830678568c74fe83d39dde15f05226434abd87a13cb44
SHA512 a6e7e8b62bb6530f2198ef8923f17283b6b6716458fce015697ea7e06b74804d6a86d35881c9554cf1f058562e51a40e2ab369f6d05966298679d64e48edfeb6

C:\Program Files (x86)\Mathcad\Mathcad 15\mathdllr.dll

MD5 02f189d94c3708bca3e438d2661d953d
SHA1 63e2970508971eacd6ccdd65018091625f223cac
SHA256 321b8b67b7cc9e0d317d5e33e91d8624b5c8fe9b07888bf1d339649bcfccd960
SHA512 db662e9b5d01f2601fd27b2b9d1e99a2377c6833fa67195c2b438e4f1e1dd1c9f8a11490cc3083ced06810cd0fe8d88a8237c216e2a595f2309f53f104728711

memory/4236-7976-0x0000000000FC0000-0x0000000000FD2000-memory.dmp

C:\Program Files (x86)\Mathcad\Mathcad 15\webdavr.dll

MD5 1a6c70a8a0dc6d15aa1779c02e623b3a
SHA1 c95fc77ac75f2614ec757f6fe809a2fec435235a
SHA256 a2fcc952b75815dc2b80ed7aa86af439494d062e0b884733a3bb6be3b8baf82d
SHA512 37df1a0905dcf5cf94cb4c4bdf4a16c4b3b1446ff97f127e0588f520e06e3a602955e44bb8c0e655ad3a623f3a91b14c037220ea671b03d1eb35e38f17ad739c

C:\Program Files (x86)\Mathcad\Mathcad 15\boost_regex-vc80-mt-1_33_1.dll

MD5 e84556a7bc49923dd9b46277f231f9a4
SHA1 819337af3c78d2b167bd3d8943c9eb99f2bb5b7e
SHA256 adea967d5a33e2706093600bd7792fae7fe17ba7425c641e7ca8abc70ee90a77
SHA512 5a485bcdc0b7a016f7d12ad48e016894df8251c3968456cd43eb093d94e3c31630f86f9c8eca294f3aff7affb0b106d08abd9601468cfa22987f77a2ff376342

memory/4236-8022-0x0000000003560000-0x0000000003572000-memory.dmp

C:\Program Files (x86)\Mathcad\Mathcad 15\sxsregr.dll

MD5 205be3d7bb82abb34800ebb17f503371
SHA1 8d616649f68fedc4226d51b656fa32178cf61ba1
SHA256 644be451af520474410821aeadd342f1908cffdd246cd6721274e10d61d0032b
SHA512 8fc65648c830323a62681b5f572e6427d828950747a86f9a645bbe9b34fe8741a81d1cd8a7c5513a55a71366fd129d34187aedec8b74c5192cfd372a8a75d8be

C:\Program Files (x86)\Mathcad\Mathcad 15\engutilsr.dll

MD5 49c7a50907e4fdf4f838cc96a5ed0840
SHA1 73c800146c636f9e5df0a3a74fa5f8dfaa153e42
SHA256 f51b0df71d3b05787b1f3fe301409c572d22ec0478834cd939cd11b70bb826da
SHA512 6664971855868d9275158c6e70074efabe0e201fd8e0be3df63d75405def98091b9ee3f6ad979b1a58c45ebf1af77b77f15a6b579995744c43a82fd2830d7502

memory/4236-8016-0x00000000034C0000-0x0000000003544000-memory.dmp

memory/4236-8013-0x0000000003490000-0x00000000034AE000-memory.dmp

C:\Program Files (x86)\Mathcad\Mathcad 15\mshexr.dll

MD5 41e98dff643e960338db09f7bcfa0677
SHA1 8c8850e37e28d90dfbad67aed3de282ff93a5cd9
SHA256 ee20c1c5010c7254581497c574c3f87db17b5a357d42eaaddc50bba5227d28ff
SHA512 c684bb7f2dcc8e7bb47a71ac0681e562664af2f48dc4d92d451e9c258bc7e113ccadee7353ae54b769b9a1e86697c1c7a1e8122daebb2df27017860c5ee5fd60

C:\Program Files (x86)\Mathcad\Mathcad 15\mspconsr.dll

MD5 cafa6e88aaa7833ab966c540422121cf
SHA1 68b0b94a9fe11d050ec184b5e26eef66dadb2d61
SHA256 c20279fe321179b65b97c419c993e61e9b89e34199de979dd57f338819b7e236
SHA512 dbf8c2baf17c783e39b3d76eb58f1c044247230cabaa80ec507b8db2eec20e254469e362f1c8bc215868a3448b997233683ce6d0c648936ebe259d5307a0b6d6

memory/4236-8009-0x0000000001240000-0x0000000001257000-memory.dmp

C:\Program Files (x86)\Mathcad\Mathcad 15\mcxmlr.dll

MD5 52c2630dd593e3b526fa1af3626d5840
SHA1 9d73d4b6e9577b2298f4753fcaecf9e6aa00074c
SHA256 87c086082237333adeb6c52dd37bb79998f0949903554da7b28a0265ec0ab5ae
SHA512 b392645db3de69f9e3805ab17d482378c5ac283cd56884c7f5bc1bac5a8e38d6c5a839acb3f7520381fe150a554d13ffd5598c38ee85597b29576f7d4404e775

memory/4236-8006-0x00000000011F0000-0x0000000001230000-memory.dmp

C:\Program Files (x86)\Mathcad\Mathcad 15\vsfcr.dll

MD5 faf738b7db1d0d6c4266f85ae5a1a088
SHA1 bc0a2a7b66acffe2813bad270b626e113d6637aa
SHA256 88f28611bed93996d04fb1067ac16aea4afda768aacb14b29ad063ad580007ba
SHA512 950eba78f8bbc3292058a807a07567657c9bf79e46d37644aad688699ebbded872342aa29bd8077471da1734cbd4080e4f1eafa253246097ad7b786982038ce6

memory/4236-8003-0x00000000011A0000-0x00000000011E8000-memory.dmp

C:\Program Files (x86)\Mathcad\Mathcad 15\vsdataior.ocx

MD5 04a69d9bfe0086c4d070f508a53b107d
SHA1 d484310a4e448176bcf2c4d74647935873bae1cd
SHA256 590a727b88813d9c3e04d2360d5b15c7ca763ba0daac05c55623cef2a443def8
SHA512 6a43a5fa69211c01a1875d6e4b82d1447a1eae88dfd83a9c64d102002f92b527f33908ae01c2fb076d877551213ab123efb6d35d0e152f894133ac3ad79aeff8

memory/4236-8000-0x0000000001100000-0x0000000001195000-memory.dmp

C:\Program Files (x86)\Mathcad\Mathcad 15\mcaduser.dll

MD5 eed595f2f2e2b037cc6cb9a06fdc3d23
SHA1 379d3d4d5c1eceff170567eaca0b4e92e8e5be6c
SHA256 766a568fa40efd4c2b04dd35ffc65cb67d313e48a8612160bc60f098ad867bb4
SHA512 d83245efad8837571018d1812f7f9bad5d8f403efad20926e51a3dadff48f0e34a392015a1e96a8f56e12dd15e255a68c478640959d0728220575e143b79c3f4

memory/4236-7982-0x00000000026B0000-0x0000000002AFD000-memory.dmp

memory/4236-7980-0x0000000000FF0000-0x0000000001031000-memory.dmp

C:\Program Files (x86)\Mathcad\Mathcad 15\uiutilr.dll

MD5 023e8c1ab1b181776257e5c1929d73a1
SHA1 1fbb3043e337cb782785a3c3aadf9d077d7875ec
SHA256 77d4193baa0d25e0bf62d297e23df856be6397c3c20bbf491e13dbb81ffd5959
SHA512 55142f4011fbda40dbeb7c4a3ba31e205c506eed8d9302bf5f2ee8c21e3160e3b1c8191da4938c88a8e300420125d11cc8a1f45ce580d6b07a6d62c6b6aba6eb

C:\Program Files (x86)\Mathcad\Mathcad 15\utlr.dll

MD5 d5097271b8872df7b9c20800f04d0fff
SHA1 8ed06ef3456801ddc585fa0d5c6822a13c9df3f7
SHA256 77b9f7415bb7c202b007b346acfbb4ed90f6464238fe73f459fe124d56213e68
SHA512 3db423f79abf9224acbe8f2335daa926efcbede7bce4654e6219ac083a43c167d266c8531d2c280202be8d2861da2b660043dce97b7414968ce2d1f9aed0bf77

memory/4236-7973-0x0000000000F60000-0x0000000000F95000-memory.dmp

C:\Program Files (x86)\Mathcad\Mathcad 15\resdllr.dll

MD5 09bc624f8f9b6ba6c3e42d0dced45f19
SHA1 265b6d8edbad299c758f13a1a1281f96e7f130cd
SHA256 879c213c40b61964fbe858c134068c2157135dafe40d9e07c758a9798c251956
SHA512 2a667a9ef68b1b61110eaddba96a05a5f5c0cdad85de9a735d9494fd7ccc3d5349f8679c3bf6f512e3086ec536c0c6c8fd0969ab3e428d2052cc92e17469dc16

memory/2160-8031-0x00000000029D0000-0x0000000002A18000-memory.dmp

memory/2160-8042-0x0000000002AE0000-0x0000000002B64000-memory.dmp

memory/2160-8043-0x0000000002BB0000-0x0000000002BC2000-memory.dmp

memory/2160-8039-0x0000000002AC0000-0x0000000002ADE000-memory.dmp

memory/2160-8037-0x0000000002A70000-0x0000000002A87000-memory.dmp

memory/2160-8035-0x0000000002A20000-0x0000000002A60000-memory.dmp

memory/2160-8034-0x00000000010B0000-0x0000000001145000-memory.dmp

memory/2160-8030-0x0000000002580000-0x00000000029CD000-memory.dmp

memory/2160-8028-0x0000000001000000-0x0000000001041000-memory.dmp

memory/2160-8026-0x0000000000FD0000-0x0000000000FE2000-memory.dmp

memory/540-8047-0x0000020E46D40000-0x0000020E46D41000-memory.dmp

memory/540-8048-0x0000020E46D40000-0x0000020E46D41000-memory.dmp

memory/540-8046-0x0000020E46D40000-0x0000020E46D41000-memory.dmp

memory/540-8058-0x0000020E46D40000-0x0000020E46D41000-memory.dmp

memory/540-8057-0x0000020E46D40000-0x0000020E46D41000-memory.dmp

memory/540-8056-0x0000020E46D40000-0x0000020E46D41000-memory.dmp

memory/540-8055-0x0000020E46D40000-0x0000020E46D41000-memory.dmp

memory/540-8054-0x0000020E46D40000-0x0000020E46D41000-memory.dmp

memory/540-8053-0x0000020E46D40000-0x0000020E46D41000-memory.dmp

memory/540-8052-0x0000020E46D40000-0x0000020E46D41000-memory.dmp