20fe6a586148109a4e9ebdedcb688a06d30fa8cf63380cce84584acc4865c986

Analysis

max time kernel
67s
max time network
74s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
19/08/2024, 06:34

Sharing

Copy URL Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

WordMat130.exe
Size

179.8MB
MD5

50862563aa624426b06689a483519a7c
SHA1

bb4a2003ed06bb6c97854fdfe5f306fa12e974cb
SHA256

20fe6a586148109a4e9ebdedcb688a06d30fa8cf63380cce84584acc4865c986
SHA512

540a3b0086f4f70dc6900266f8408551e02ce0443cdb131f89d1f3cea9fba6614b39eddf348e485501c7757d57696dec383a41a41a90c47b9c46d3d1e3498858
SSDEEP

3145728:6iGM5vKvhGo8aDbXRvxbbmSFNYgfXQwSrcW0y1ojlT5AiBMYqxZtzo:NGYviHpvJaScICrqyy8iBMlt8

Score

7^/10

discovery persistence privilege_escalation

Malware Config

Signatures

Drops startup file 6 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\is-LEP41.tmp	WordMat130.tmp
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\is-IJGEI.tmp	WordMat130.tmp
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\is-NS4LH.tmp	WordMat130.tmp
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\is-9MFJI.tmp	WordMat130.tmp
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\WordMat.dotm	cmd.exe
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\WordMatP.dotm	cmd.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\doc\html\is-SR3RM.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\web3d\js\is-IIBRE.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\fftpack5\lisp\is-2LNOE.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\lapack\blas\is-DPSCK.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\misc\is-BDS4C.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\numericalio\is-18R9H.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\doc\html\is-ME8E0.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\doc\html\figures\is-SA7AJ.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\cobyla\is-F5GHF.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\contrib\format\is-3KNMG.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\contrib\rkf45\is-BGENU.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\odepack\is-N4HC7.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\src\is-5SBV3.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\GeoGebra 5.2\forum.ico	GeoGebra.exe
File created	C:\Program Files (x86)\GeoGebra 5.2\jre\bin\api-ms-win-core-namedpipe-l1-1-0.dll	GeoGebra.exe
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\bin\is-R5R0N.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\doc\is-87K18.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\contrib\diffequations\tests\is-R7S0T.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\misc\is-M53JL.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\src\numerical\slatec\is-2M6JH.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\doc\html\is-A5DPE.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\web3d\js\is-T11T4.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\bin\is-IPSB3.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\license\pixman\is-2J3AU.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\odepack\src\is-9TKFE.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\draw\is-VFP7V.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\simplex\Tests\is-5EACA.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\stringproc\is-7640U.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\test_batch_encodings\is-GS57M.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\share\PostScript\is-GAK14.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\odepack\src\is-OBUTJ.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\xmaxima\html\is-T5HSH.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\GeoGebra 5.2\jre\legal\java.base\c-libutl.md	GeoGebra.exe
File created	C:\Program Files (x86)\GeoGebra 5.2\jre\legal\jdk.naming.ldap\ADDITIONAL_LICENSE_INFO	GeoGebra.exe
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\bin\is-QTQHC.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\contrib\rand\is-927MS.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\lapack\lapack\is-N7104.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\odepack\src\is-IG7Q0.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\src\is-OU2B8.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\css\is-JNEMF.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\docs\psdoc\is-MVCAL.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\src\is-PAEL0.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\tests\is-7MIRS.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\GeoGebra 5.2\geogebra.jar	GeoGebra.exe
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\tests\wester_problems\is-Q6137.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\demo\is-USCAT.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\doc\html\is-8K831.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\is-V1UU6.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\hompack\lisp\is-V642R.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\numeric\is-3QNOT.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\GeoGebra 5.2\commons-io.jar	GeoGebra.exe
File created	C:\Program Files (x86)\GeoGebra 5.2\jre\legal\jdk.crypto.mscapi\ASSEMBLY_EXCEPTION	GeoGebra.exe
File created	C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\greek\is-B6S8S.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\license\jbig\is-CCP12.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\lapack\lapack\is-U1NS7.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\lapack\lapack\is-0I3TT.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\translators\m2mj\is-R6D3R.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\demo\is-KNBQP.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\share\texmf\tex\latex\gnuplot\is-P8UQA.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\doc\html\is-G2VF7.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\contrib\symplectic_ode\is-OM7CO.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\src\is-04IM9.tmp	WordMat130.tmp
File created	C:\Program Files (x86)\GeoGebra 5.2\jre\legal\java.datatransfer\LICENSE	GeoGebra.exe
File created	C:\Program Files (x86)\GeoGebra 5.2\jre\legal\java.sql.rowset\ASSEMBLY_EXCEPTION	GeoGebra.exe

Drops file in Windows directory 13 IoCs

description	ioc	Process
File created	C:\Windows\Fonts\is-PSB3B.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-R2NL7.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-JPRK1.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-375QL.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-CMABA.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-3G9M6.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-44472.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-34705.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-6K485.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-HA5QK.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-339G5.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-2BTMF.tmp	WordMat130.tmp
File created	C:\Windows\Fonts\is-9VNKU.tmp	WordMat130.tmp

Executes dropped EXE 5 IoCs

pid	Process
4836	WordMat130.tmp
1020	SetupGraph-4.4.2.exe
1900	SetupGraph-4.4.2.tmp
664	GeoGebra.exe
3032	Graph.exe

Loads dropped DLL 6 IoCs

pid	Process
664	GeoGebra.exe
664	GeoGebra.exe
664	GeoGebra.exe
2268	regsvr32.exe
2268	regsvr32.exe
664	GeoGebra.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Graph.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WordMat130.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SetupGraph-4.4.2.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GeoGebra.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cscript.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WordMat130.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SetupGraph-4.4.2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regsvr32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe

Modifies data under HKEY_USERS 15 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "1"	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271"	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	LogonUI.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{93A50068-DA04-31BA-9195-22BC6E6C13DF}	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C579C817-84A3-30E8-99A6-9962BF66FAB1}\InprocServer32\1.0.0.1\CodeBase = "file:///C:/Program Files (x86)/WordMat/MathMenu.DLL"	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WebViewWrap.WebViewWrap2	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WebViewWrap.LectioReportApi.ReportingApiV1Client\CLSID	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BFFB0740-695C-3E46-85BE-4652719ABD35}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	WordMat130.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{BFFB0740-695C-3E46-85BE-4652719ABD35}\TypeLib	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{39CF9C8B-5F0A-3F70-A544-14353BA46CAC}\ = "_NewsCompletedEventHandler"	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FD536B77-5DF5-448C-90D1-2C04B3C1D1BD}\ = "Graph system"	Graph.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{ED385DC6-153A-3A28-B2BA-E242F447E057}\InprocServer32\ThreadingModel = "Both"	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{ED385DC6-153A-3A28-B2BA-E242F447E057}\InprocServer32\CodeBase = "file:///C:/Program Files (x86)/WordMat/WebViewWrap/WebViewWrap.DLL"	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\MathMenu.com.eduap.WordMat.WebServiceWordMat\CLSID	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FD536B77-5DF5-448C-90D1-2C04B3C1D1BD}\DataFormats\DefaultFile\ = "Embed Souce"	Graph.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WebViewWrap.WebViewWrap2\CLSID	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WebViewWrap.FormBrowser\CLSID\ = "{B8BDEA62-D3F8-3232-8F8A-E32D253884A2}"	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2753E246-7FCE-3C52-AEAD-3448E07EF1E8}\TypeLib\Version = "1.0"	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\GraphFile\Clsid\ = "{FD536B77-5DF5-448C-90D1-2C04B3C1D1BD}"	Graph.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CD58328F-4DE0-4AA2-AA6A-41319A0EACE7}\InprocServer32\1.0.0.0	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CD58328F-4DE0-4AA2-AA6A-41319A0EACE7}\InprocServer32\1.0.0.0\RuntimeVersion = "v4.0.30319"	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{ABD9A47F-659E-3B08-BA5D-B2B46CB7D7C0}\InprocServer32\1.0.0.1	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\GraphFile\ShellEx\{BB2E617C-0920-11d1-9A0B-00C04FC2D6C1}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{93A50068-DA04-31BA-9195-22BC6E6C13DF}\TypeLib	WordMat130.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CD58328F-4DE0-4AA2-AA6A-41319A0EACE7}\Implemented Categories\{62C8FE65-4EBB-45e7-B440-6E39B2CDBF29}	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6ED02596-5DC9-3E2C-AC14-714CDADEC945}\InprocServer32\1.0.0.0	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2753E246-7FCE-3C52-AEAD-3448E07EF1E8}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	WordMat130.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CD58328F-4DE0-4AA2-AA6A-41319A0EACE7}\InprocServer32	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B8BDEA62-D3F8-3232-8F8A-E32D253884A2}\InprocServer32\1.0.0.0	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{ED385DC6-153A-3A28-B2BA-E242F447E057}\ = "WebViewWrap.LectioReportApi.ReportingApiV1Client"	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2753E246-7FCE-3C52-AEAD-3448E07EF1E8}\ = "_NewsCompletedEventArgs"	WordMat130.tmp
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\GraphTest	SetupGraph-4.4.2.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{FD536B77-5DF5-448C-90D1-2C04B3C1D1BD}\DataFormats\GetSet\1	Graph.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2B54AE14-0B4F-32DF-ABC4-FA12376CFE46}\InprocServer32\1.0.0.0\Class = "WebViewWrap.TimeSlot"	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WebViewWrap.Browser	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6ED02596-5DC9-3E2C-AC14-714CDADEC945}\InprocServer32\1.0.0.0\RuntimeVersion = "v4.0.30319"	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WebViewWrap.TimeSlot\CLSID	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{58B377E8-AD6E-424A-913D-57D1C023422F}	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{93A50068-DA04-31BA-9195-22BC6E6C13DF}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	WordMat130.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{39CF9C8B-5F0A-3F70-A544-14353BA46CAC}	WordMat130.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\WOW6432Node\CLSID\{FD536B77-5DF5-448C-90D1-2C04B3C1D1BD}\Insertable	Graph.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6ED02596-5DC9-3E2C-AC14-714CDADEC945}\ProgId	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C579C817-84A3-30E8-99A6-9962BF66FAB1}\InprocServer32\1.0.0.1\Assembly = "MathMenu, Version=1.0.0.1, Culture=neutral, PublicKeyToken=89e88f8548e16f37"	RegAsm.exe
Key created	\REGISTRY\MACHINE\Software\Classes\GraphFile	Graph.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{39D53E98-095F-3D17-842E-06C87BA07076}\InprocServer32\ThreadingModel = "Both"	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A1E863DB-A1E0-3007-B62A-88F4F3F8BFC7}\ = "_WebServiceWordMat"	WordMat130.tmp
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{ABD9A47F-659E-3B08-BA5D-B2B46CB7D7C0}\Implemented Categories	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{56CFD704-0BF9-324D-87DE-2F1C04FBCC4B}\InprocServer32\ = "mscoree.dll"	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BFFB0740-695C-3E46-85BE-4652719ABD35}	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{39CF9C8B-5F0A-3F70-A544-14353BA46CAC}\TypeLib\ = "{58B377E8-AD6E-424A-913D-57D1C023422F}"	WordMat130.tmp
Key created	\REGISTRY\MACHINE\Software\Classes\GraphFile\shell\open\command	Graph.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Record\{3ECEE700-0CD1-3CF1-8499-5E86D65FCD4D}	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{58B377E8-AD6E-424A-913D-57D1C023422F}\1.0\0\win64\ = "C:\\Program Files (x86)\\WordMat\\MathMenu.tlb"	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{93A50068-DA04-31BA-9195-22BC6E6C13DF}\ = "IMaximaConn"	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C579C817-84A3-30E8-99A6-9962BF66FAB1}\ProgId\ = "MathMenu.com.eduap.WordMat.WebServiceWordMat"	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{93A50068-DA04-31BA-9195-22BC6E6C13DF}\TypeLib	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2753E246-7FCE-3C52-AEAD-3448E07EF1E8}\TypeLib\ = "{58B377E8-AD6E-424A-913D-57D1C023422F}"	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{2753E246-7FCE-3C52-AEAD-3448E07EF1E8}\TypeLib\Version = "1.0"	WordMat130.tmp
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\GraphFile\DefaultIcon\ = "C:\\Program Files (x86)\\Graph\\Graph.exe,1"	Graph.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{6ED02596-5DC9-3E2C-AC14-714CDADEC945}\InprocServer32\ThreadingModel = "Both"	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FD536B77-5DF5-448C-90D1-2C04B3C1D1BD}\DataFormats\DefaultFile	Graph.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FD536B77-5DF5-448C-90D1-2C04B3C1D1BD}\ProgID\ = "GraphFile"	Graph.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CD58328F-4DE0-4AA2-AA6A-41319A0EACE7}	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{39D53E98-095F-3D17-842E-06C87BA07076}\ = "WebViewWrap.WebViewWrap2"	RegAsm.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{56CFD704-0BF9-324D-87DE-2F1C04FBCC4B}\InprocServer32\1.0.0.0\Assembly = "WebViewWrap, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null"	RegAsm.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node	Graph.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{FD536B77-5DF5-448C-90D1-2C04B3C1D1BD}\DataFormats\GetSet\3\ = "2,1,16,1"	Graph.exe

Office document contains embedded OLE objects 3 IoCs

Detected embedded OLE objects in Office documents.

resource	yara_rule
behavioral1/files/0x000700000001ac5c-163.dat	office_ole_embedded
behavioral1/files/0x000700000001ac5d-166.dat	office_ole_embedded
behavioral1/files/0x000700000001ac5e-169.dat	office_ole_embedded

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
4836	WordMat130.tmp
4836	WordMat130.tmp
1900	SetupGraph-4.4.2.tmp
1900	SetupGraph-4.4.2.tmp

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4080	WordMat130.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
4836	WordMat130.tmp
1900	SetupGraph-4.4.2.tmp

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3032	Graph.exe
32	LogonUI.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 4080 wrote to memory of 4836	4080	WordMat130.exe	73
PID 4080 wrote to memory of 4836	4080	WordMat130.exe	73
PID 4080 wrote to memory of 4836	4080	WordMat130.exe	73
PID 4836 wrote to memory of 1184	4836	WordMat130.tmp	75
PID 4836 wrote to memory of 1184	4836	WordMat130.tmp	75
PID 4836 wrote to memory of 1020	4836	WordMat130.tmp	77
PID 4836 wrote to memory of 1020	4836	WordMat130.tmp	77
PID 4836 wrote to memory of 1020	4836	WordMat130.tmp	77
PID 1020 wrote to memory of 1900	1020	SetupGraph-4.4.2.exe	79
PID 1020 wrote to memory of 1900	1020	SetupGraph-4.4.2.exe	79
PID 1020 wrote to memory of 1900	1020	SetupGraph-4.4.2.exe	79
PID 4836 wrote to memory of 664	4836	WordMat130.tmp	78
PID 4836 wrote to memory of 664	4836	WordMat130.tmp	78
PID 4836 wrote to memory of 664	4836	WordMat130.tmp	78
PID 1900 wrote to memory of 2268	1900	SetupGraph-4.4.2.tmp	81
PID 1900 wrote to memory of 2268	1900	SetupGraph-4.4.2.tmp	81
PID 1900 wrote to memory of 2268	1900	SetupGraph-4.4.2.tmp	81
PID 1900 wrote to memory of 3032	1900	SetupGraph-4.4.2.tmp	82
PID 1900 wrote to memory of 3032	1900	SetupGraph-4.4.2.tmp	82
PID 1900 wrote to memory of 3032	1900	SetupGraph-4.4.2.tmp	82
PID 4836 wrote to memory of 364	4836	WordMat130.tmp	84
PID 4836 wrote to memory of 364	4836	WordMat130.tmp	84
PID 4836 wrote to memory of 4396	4836	WordMat130.tmp	86
PID 4836 wrote to memory of 4396	4836	WordMat130.tmp	86
PID 4836 wrote to memory of 4396	4836	WordMat130.tmp	86
PID 4836 wrote to memory of 4620	4836	WordMat130.tmp	88
PID 4836 wrote to memory of 4620	4836	WordMat130.tmp	88
PID 4836 wrote to memory of 4620	4836	WordMat130.tmp	88
PID 4836 wrote to memory of 1440	4836	WordMat130.tmp	90
PID 4836 wrote to memory of 1440	4836	WordMat130.tmp	90
PID 4836 wrote to memory of 1440	4836	WordMat130.tmp	90
PID 4836 wrote to memory of 2888	4836	WordMat130.tmp	92
PID 4836 wrote to memory of 2888	4836	WordMat130.tmp	92
PID 4836 wrote to memory of 2888	4836	WordMat130.tmp	92
PID 4836 wrote to memory of 2280	4836	WordMat130.tmp	94
PID 4836 wrote to memory of 2280	4836	WordMat130.tmp	94
PID 4836 wrote to memory of 2280	4836	WordMat130.tmp	94
PID 4836 wrote to memory of 2056	4836	WordMat130.tmp	96
PID 4836 wrote to memory of 2056	4836	WordMat130.tmp	96
PID 4836 wrote to memory of 2056	4836	WordMat130.tmp	96

C:\Users\Admin\AppData\Local\Temp\WordMat130.exe
"C:\Users\Admin\AppData\Local\Temp\WordMat130.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4080
- C:\Users\Admin\AppData\Local\Temp\is-RAOGC.tmp\WordMat130.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-RAOGC.tmp\WordMat130.tmp" /SL5="$60116,187533448,875520,C:\Users\Admin\AppData\Local\Temp\WordMat130.exe"
  2⤵
  - Drops startup file
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4836
- - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegAsm.exe
    "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegAsm.exe" "C:\Program Files (x86)\WordMat\MathMenu.dll" /codebase
    3⤵
    - Modifies registry class
    PID:1184
- - C:\Program Files (x86)\WordMat\SetupGraph-4.4.2.exe
    "C:\Program Files (x86)\WordMat\SetupGraph-4.4.2.exe" /verysilent /SUPPRESSMSGBOXES
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:1020
  - - C:\Users\Admin\AppData\Local\Temp\is-SDFML.tmp\SetupGraph-4.4.2.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-SDFML.tmp\SetupGraph-4.4.2.tmp" /SL5="$700DA,9493943,203264,C:\Program Files (x86)\WordMat\SetupGraph-4.4.2.exe" /verysilent /SUPPRESSMSGBOXES
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:1900
    - - C:\Windows\SysWOW64\regsvr32.exe
        
        "C:\Windows\system32\regsvr32.exe" /s "C:\Program Files (x86)\Graph\Thumbnails.dll"
        5⤵
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:2268
    - - C:\Program Files (x86)\Graph\Graph.exe
        
        "C:\Program Files (x86)\Graph\Graph.exe" /regserver
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Modifies registry class
        Suspicious use of SetWindowsHookEx
        
        PID:3032
- - C:\Program Files (x86)\WordMat\GeoGebra.exe
    "C:\Program Files (x86)\WordMat\GeoGebra.exe" /S
    3⤵
    - Drops file in Program Files directory
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    PID:664
- - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegAsm.exe
    "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\RegAsm.exe" "C:\Program Files (x86)\WordMat\WebViewWrap\WebViewWrap.dll" /codebase
    3⤵
    - Modifies registry class
    PID:364
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\system32\cmd.exe" /c mkdir %appdata%\Microsoft\Word\STARTUP
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4396
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\system32\cmd.exe" /c mkdir %appdata%\Microsoft\Word\START
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4620
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\system32\cmd.exe" /c copy "C:\Program Files (x86)\WordMat\WordMat.dotm" %appdata%\Microsoft\Word\START
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1440
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\system32\cmd.exe" /c copy "C:\Program Files (x86)\WordMat\WordMat.dotm" %appdata%\Microsoft\Word\STARTUP
    3⤵
    - Drops startup file
    - System Location Discovery: System Language Discovery
    PID:2888
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\system32\cmd.exe" /c copy "C:\Program Files (x86)\WordMat\WordMatP.dotm" %appdata%\Microsoft\Word\STARTUP
    3⤵
    - Drops startup file
    - System Location Discovery: System Language Discovery
    PID:2280
- - C:\Windows\SysWOW64\cscript.exe
    "cscript.exe" C:\Program Files (x86)\WordMat\CopyWordMat.vbs
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2056

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x0 /state0:0xa3aea855 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:32

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\GeoGebra 5.2\jre\legal\java.desktop\ADDITIONAL_LICENSE_INFO

Filesize
49B

MD5
19c9d1d2aad61ce9cb8fb7f20ef1ca98

SHA1
2db86ab706d9b73feeb51a904be03b63bee92baf

SHA256
ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9

SHA512
7ec63b59d8f87a42689f544c2e8e7700da5d8720b37b41216cbd1372c47b1bc3b892020f0dd3a44a05f2a7c07471ff484e4165427f1a9cad0d2393840cd94e5b

Download Submit
C:\Program Files (x86)\GeoGebra 5.2\jre\legal\java.desktop\ASSEMBLY_EXCEPTION

Filesize
44B

MD5
7caf4cdbb99569deb047c20f1aad47c4

SHA1
24e7497426d27fe3c17774242883ccbed8f54b4d

SHA256
b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a

SHA512
a1435e6f1e4e9285476a0e7bc3b4f645bbafb01b41798a2450390e16b18b242531f346373e01d568f6cc052932a3256e491a65e8b94b118069853f2b0c8cd619

Download Submit
C:\Program Files (x86)\GeoGebra 5.2\jre\legal\java.desktop\LICENSE

Filesize
33B

MD5
16989bab922811e28b64ac30449a5d05

SHA1
51ab20e8c19ee570bf6c496ec7346b7cf17bd04a

SHA256
86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192

SHA512
86571f127a6755a7339a9ed06e458c8dc5898e528de89e369a13c183711831af0646474986bae6573bc5155058d5f38348d6bfdeb3fd9318e98e0bf7916e6608

Download Submit
C:\Program Files (x86)\Graph\Graph.exe

Filesize
14.0MB

MD5
8c892684774d0b071f2aa734282ef0a5

SHA1
056cf1b055edd438746e8254336119ea757816f9

SHA256
1ed0175e8041b1e8e272ac625000fab2d7d0ffcbd4a25bb9579b253af6dae3af

SHA512
da5713547f12701097648a52a7c12907a440ac3411855769d171b9c29ce81fef236167959c728e6da55fb8c50dd4feafced61b30fca26302c6e2bef953da3c72

Download Submit
C:\Program Files (x86)\Graph\Locale\is-S0I10.tmp

Filesize
83KB

MD5
84a6e811e51c3036a4a75ccd29d6cc52

SHA1
a583fd11362483003ff93a9e0b8c4c799204d14a

SHA256
6169e602805f06fc8903c1a05d227dcdaf1779859ee44124ffdad6a4ff80d33f

SHA512
0920a07c020e5aa2744a79b5f68fbb9f4b909b93c375e43bd6327924414c03105a29eabf68524b5c6f08401167a1f9756c564ef7151d064e742d837a5d4dd269

Download Submit
C:\Program Files (x86)\Graph\Thumbnails.dll

Filesize
542KB

MD5
7a7d0706d0aedea6974ef6a5bf03dcab

SHA1
ccd47d5f23f4676fed984fa5e153e98b659f35a7

SHA256
fe5293d17ba343ee388d100981acbe7145199ffcb85d5b8f384c8e38f3c1f60f

SHA512
d5cd46297b098f9f8c716274aed878ebb732b2b4e6269525b9f2f38aa6c4acbdd15b701de381cb8ad98274784a0f72716602a4692f25dd343057416d4677ffda

Download Submit
C:\Program Files (x86)\WordMat\MathMenu.dll

Filesize
34KB

MD5
1f9307ab90e692caad32e29975cb3cf3

SHA1
94f2d13b4b784998addc831a510124201a173aea

SHA256
69e613fa26ecba50311514fa3ebf0580c76cce6764b1d7c16e356efe57e645ab

SHA512
483ad31e3a6fdefdff19b6463e983f393c0bbef11bcd55f290440f3429654288fffc5e150c53fd32607117af0727802a6be035cc307338a78695b335db24aa8b

Download Submit
C:\Program Files (x86)\WordMat\Maxima-5.47.0\gnuplot\license\liblzma\is-QDU22.tmp

Filesize
34KB

MD5
4fe869ee987a340198fb0d54c55c47f1

SHA1
1de7bacb4fbbd7b6d391a69abfe174c2509ec303

SHA256
c53a65c2fd561c87eaabf1072ef5dcab8653042bc15308465f52413585eb6271

SHA512
17f139c3fcaa798930c32f3510acb3f74e200feddf9c0a8848307b8a073643f6fbb9bcfeb7625c6021573efd6193f234f3b6edc86bdb89980c9b699e9b2a5a9b

Download Submit
C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\contrib\symplectic_ode\is-OM7CO.tmp

Filesize
315KB

MD5
43456026a9f622742d43cbba561002ff

SHA1
edeb33282b2bffa0e608e9d2fd960fd08093c0ea

SHA256
64c8cf3d25ce6ca6209f221afd3d055cc5853af8116ba35d08b122454154c5ae

SHA512
1399fe26b4b0e8d362168042706bec1203b5bf3d5770de03cc4c88c92a7633f40d84d312402a28f7d451fceac034e203a559ce5a97ea98657f72de0a005fd7b9

Download Submit
C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\logic\is-L1DP2.tmp

Filesize
17KB

MD5
b234ee4d69f5fce4486a80fdaf4a4263

SHA1
4cc77b90af91e615a64ae04893fdffa7939db84c

SHA256
8177f97513213526df2cf6184d8ff986c675afb514d4e68a404010521b880643

SHA512
aee80b1f9f7f4a8a00dcf6e6ce6c41988dcaedc4de19d9d04460cbfb05d99829ffe8f9d038468eabbfba4d65b38e8dbef5ecf5eb8a1b891d9839cda6c48ee957

Download Submit
C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\logic\logic.t2p\logic.t2d\pdf\check_recorder\is-1F35I.tmp

Filesize
524B

MD5
a47467fe44d9260e41a4bd9dbefe2724

SHA1
d74695c566bfc1de38cd937bed53eed64f103531

SHA256
bc72cc48599f82b03db5c08fbacacb66531c46ce9a6a259d95b1317948ebfd4b

SHA512
78436c159e384295e01a1d21c543b2939d6bfce60f98fe13271e6d51dac5d9d1bf44861eae29af8e6c589dd5a0351c18b7c472cda3ece4079f1a5b3f7fdfc501

Download Submit
C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\logic\logic.t2p\logic.t2d\pdf\check_recorder\is-INJM7.tmp

Filesize
60B

MD5
491ffac790687716948ac3093581233f

SHA1
8aab9356610949796ddc34a3f8a30802e29aaaa2

SHA256
bf0dce3fc0202e38b24ce34af673dd098e7ca87ed28ab758a0902669003481fb

SHA512
802a402346e5fa308d58d5b0afcce18ed0834464b63835563860ac596b183def9f9f18c626817bbdbd1e4a2647676357a27fc8c50d304f173e794394d9d399db

Download Submit
C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\logic\logic.t2p\logic.t2d\version_test\is-CV64D.tmp

Filesize
24B

MD5
b0914d846485bd143058cf1ac976a701

SHA1
0f9ecd0156b2f432251fcdbeebf1bc04f47f7c22

SHA256
dbb64b3344888337b95c2c58d4b12a4cd01ec57fa75dbde409fac88a9adc6fd9

SHA512
37334179475ecb16ca20e9896f93f5eaea15b882fc9a07f193c77a15aa6be18df58f4fc942a6454b89a0da64d12e5b47ce53bad12c745e6a35ae5b5d5352534a

Download Submit
C:\Program Files (x86)\WordMat\Maxima-5.47.0\share\maxima\5.47.0\share\test_batch_encodings\is-P02FH.tmp

Filesize
411B

MD5
04008109220c032030510983beaf2543

SHA1
7fab36b6330c40ba937ffa562598418a22ad53c2

SHA256
64feb946d69cf991ea23b404e69c64eea617117a6e51125b2eb4bb596a4ab27b

SHA512
2194d2167ed9b7fb4a80af810742cbebfe8e90f263207ea168b2c64e3f33ce0b1ff4b94c041ea9e58782184718b72915cc8c5977a5c73af378b5abfbca0963e5

Download Submit
C:\Program Files (x86)\WordMat\SetupGraph-4.4.2.exe

Filesize
9.6MB

MD5
6422f446698599ceb375c8853e211b96

SHA1
49edec3950d727f521e437f53d5e5d3ec529f904

SHA256
2e67cd184632895192ee08cc684b6b91fba3ac8994342e249eb00750d7f2912a

SHA512
12ae0c88961904cf4aba16232bc75a21d31aa869b79bedf46a6a274ceb75ee1c9490a0d79072f85262fc6d33f636c5d1d3bd9fdbb2d15f14d1d7c80fcfcad88a

Download Submit
C:\Program Files (x86)\WordMat\WebViewWrap\WebViewWrap.dll

Filesize
51KB

MD5
260f44e9e33db897288dc6a8c966c245

SHA1
9416d8a81634fd1834b7eb2182f27dce860631f9

SHA256
d1567eb0c5b508094e390ddc6fb4deed09ba8b879e1b4840d62dc219406bf42e

SHA512
5ef944f864f8f4ba3bf5fd307147698bf16b378789b22bf784916fcc1ca67cbda781a5ea031d4f88f236bd3fe8ba522498c9f426380127f2c435b9f0a40393b6

Download Submit
C:\Program Files (x86)\WordMat\WordDocs\Formelsamling.dotx

Filesize
33KB

MD5
cb4a72fc79aa07d88dcf424949a1187e

SHA1
c36295e4c05606df6f99e993adc064123fee147a

SHA256
761db69b2f07445dc419d27310d331ad9d572805e7bac106bc42b2e6d80d07c7

SHA512
60bc6e1ce3e27d375f2c72eedf10d7b0e9a27237c174432593e1bc3cb38ddfacfa3d6c56f18c02e258cb2b36f52efed18d06f0c46237c5ddda9b59d03e3a0b1b

Download Submit
C:\Program Files (x86)\WordMat\WordMatP.dotm

Filesize
374KB

MD5
7fd917aadf86d82cc059e7640aba6233

SHA1
7b070b8839327aaab63283feab9e26512f32a6c4

SHA256
164bd42d03b928f8d1809577f402d4ac575cc154e9cc41666efefa7f5472e081

SHA512
3237219a21df427394ea8bd8e45ee59dbcc7543f544373414a59ef7b268f092d4e42b9391bd573a3b5423842b492384be94ad7ed7805b92f7c85e7c3f737f333

Download Submit
C:\Program Files (x86)\WordMat\WordMatP2.dotm

Filesize
53KB

MD5
4d58258330034e5cbaa260e3df7035d1

SHA1
e6a3a213a68e30428d16a926248471f1c63b7cb7

SHA256
9fcdcf7e50f9a8421f2cb524b7ea0d9de27eabf62e0de59a8b40bea599bfd04a

SHA512
c4f909ca553b20f7f6b6f261dd7fbc372933475e50cea49d0af42ef254860dfdf1071b710c8f4fcbc5e4f841eeb9c8111501b03278a88136881a39b139d1b404

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\css\bundles\is-LN2DG.tmp

Filesize
36KB

MD5
6971a3f70f33ebcc9c85453a59cbe35b

SHA1
9b6b8294a04ac54fed47114d297c2c6329dfe75c

SHA256
65721be150d6d907b325dfc6cfba629cc3acec270c9af4906db4b3722bdfa771

SHA512
eb6564d236f696493fe09469041fefdb1fd170eaa5fb687532548757f3e4662174651a1a882d2d8c4d26ef7b1fb1f7a004c0d0d1aad5820099a4ca627acf7293

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\css\is-Q4DET.tmp

Filesize
1B

MD5
68b329da9893e34099c7d8ad5cb9c940

SHA1
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc

SHA256
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b

SHA512
be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\css\is-V5DTK.tmp

Filesize
4KB

MD5
80ee812fa8c37449d53ca7cd5311abd1

SHA1
1bfacb9280b88f2c077e6f0ce247c8d234d77d7b

SHA256
f9ccd7f13b7e16c0107a3d9a3beff904a63aef6888dfdf556a47a6e1d0c9258f

SHA512
448b0161d3b17721d1bb4abe28c9e9be18a2d880ff43cd1065cfcbaebf3d4ab6086aa56ac59ea8cce904433b08e1c38b2c4eda5854e4353a6824c26ff50cdb74

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\base\is-DR4P2.tmp

Filesize
69KB

MD5
bcd52a7bb72c909d36794ffb65d1d583

SHA1
ae810534e7ed76c79f78025d14140587912851e3

SHA256
99943749890c7c57e01dd16b1292d4feacb035fc03745dd9077d0ccf2f103624

SHA512
74a7dc0e5ef51406101afd4cddf0134ede6d193871150c02c5f2712d8ba0362c14290f01046e167cddce1221cf7533614afebe9cfdeef8c7ca1c3fa524a9a8cb

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\base\is-J2LL2.tmp

Filesize
81KB

MD5
6e8b84f6601151ff1c51fda3cf2447c0

SHA1
76f04fd287605f2b5360a99027db3b11b6dc251b

SHA256
e75d176e86bf167cb482f72ce2bfdb11d80556eb6f75d3a82c598380d04c9e63

SHA512
7f282d9c0041c0579428343ac82de822cca1aa9ab6484dd6ffbf7a541edcd6447494eeac4a0a88bb082c3b258b768b87d3d8f5295cf29fda2913993a94b45485

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\cyrillic\is-53IT0.tmp

Filesize
48KB

MD5
7cd6cee6d00f3c852e6c3a4cc873ad4d

SHA1
14a19e752bf46a0af42f5c51a99dc97ae3faff91

SHA256
c9d99d9e7e105ec39afd2630886161b05e136adb7fba3fed0ee5cced2072fe6f

SHA512
923ef1f522aa6df4acd571e2a9b70b0f8cb1edb40ccf8c2ada5ada56d9c7e1fa7513d04dd15c7870c52924b8b4b19eaab034bdd4725e6f05fba843442f9b1285

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\cyrillic\is-B3BCQ.tmp

Filesize
153KB

MD5
b890cecb3cd748bb1c369a1fafa57f66

SHA1
1a2c9e9904dec7e0ed6c320ee609145aef6aba55

SHA256
7742c896aa97129e538fd1a29e3b7f77aedca94495b793f7f835e7803a18fc05

SHA512
258c3231f7c8fc4bf2e887ea72396d9ef65b670444173c32b6dfa457741746b21d408a9675ca1e555b991051c13e052a02aef4b72fab3d5b63e18aa527561d9a

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\cyrillic\is-H9K6V.tmp

Filesize
85KB

MD5
88106fb517d7971bd83a559853a33608

SHA1
12cb1b74a6b963d412d088cdb2802af83047b3d8

SHA256
66a8814b9098ba56656392c4132a533c6af99946ccbc2843f61632e200ab6acd

SHA512
abad82fc61bb83cde0966476b04953e1fdc402febaed00a2ddaa3517ebed55437ecc495e645736e099c7cf1a5f01b1f0f871d31be8e8130cb6b09af29041b8fe

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\cyrillic\is-N3T8A.tmp

Filesize
88KB

MD5
8671f54e7305c233e7491d0f039097c2

SHA1
7d8d2d982c35e886f1b29c847ea70ffc5ea28b3c

SHA256
35789ed6d1a1a70b9e5bb7614622fd35fa56926a115bebd95889283f5f4d2ccf

SHA512
4cb15b2f56fc1522bf6dfdea0acca343bf3764d02be4f474ed082e1a8e58740cf2ad7a20e8f1f6764c799fc5f2a6af61d2b6fa0071553e2f872ed05006b5d92d

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\cyrillic\is-PSLP1.tmp

Filesize
67KB

MD5
49e24d395a36714c1e0af0bf93b2928b

SHA1
62ddb1ace86d9df83b615605ec66ccf35b5fe220

SHA256
5ab4795551b9c32691736e11d20fadf5b38bc7787ae7959b86fe2daa39faf75d

SHA512
50db75491023d58623e7c08e4fdb01aa100d1487cbfdb960a994602e481a6df620acac34dc6c520a8ce7247668584bd4de4abf6a0741165a1b618c587610c0ec

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\cyrillic\is-UB2OF.tmp

Filesize
99KB

MD5
5c84484a6b3528f5f0d4b3568aede77f

SHA1
6754aae740fbf6028b022aab99669fe4142523b5

SHA256
6e1598cb21e385c5e0881b71a90c9f16628295a67e02595060e8ec5be4cc9e60

SHA512
11020e7215c1794858f49eb8dbea3555de45c993b38446ee5e6abc06f6413e6a2043d9b1f069e955eb17457d55e3e77e5be40840b41906ac9073ef441191526b

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\cyrillic\is-UCCKI.tmp

Filesize
147KB

MD5
6bbb4f77ead36a3eb2e0533ab2ce3934

SHA1
285ae8f7f920ffd0fd2307cf250df0129442cb3d

SHA256
13119cf310cfa80eca1d64e8c711b207ab0d9e765a053e9bd3ef48638b908a08

SHA512
f80da11f91cf03715a9246deb64ddee23d035c410c11cae7b96f7c8ddfc38bc1582d21324cf006c51dc6df757dc088010afac7a8535bfc416fce87541cf0ad26

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\cyrillic\jlm_wntt10.js

Filesize
92KB

MD5
451ec68214ecfcd19458b458d5f989b0

SHA1
4a3c6e6eafe429651b2cd5914212b165110f8788

SHA256
d73a2332c96e87228352ea9dc860a2937eac89e3861e1d31e705498450a9eb45

SHA512
63e8ab179feed54bf915bb85b743c55e012520650832b72452785b8c3526826d22aaa889ed0bae052dee0f0a2bcabb560ddfc658e1d447d97086f1cf9af793b7

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\euler\is-1PMP4.tmp

Filesize
55KB

MD5
df3cb72cc06caf99d37d5360ae8d5f07

SHA1
4a853ac278a7999f0fb0e0d9c077be0e60b95103

SHA256
7986522e2926f26177edb538e6d9ce58eca8eeb9c188b966c2676e0a73f5a794

SHA512
bf31260d278537cc278ca8ecbd4c81f185e15a1c85b751fcc99c88896441fab9038e6817a48b1e3d101cc2888a5ee074001920ea373f391433e22a065239cbb8

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\euler\is-D1LJ6.tmp

Filesize
57KB

MD5
890e838e93331c9f4c27de1f0ff835fb

SHA1
de454d7b2e2da43937b3020d7a9bf41308b9a78f

SHA256
4fce21db5b204fa29a41875370d02b68da21d65e08fecfd27c48cfb5a655154b

SHA512
35d3c6adf2a0a292d1bbd82a308ae1aaff2e219f730d63278bdb135ec97cae31d482b955be231e2979b8cb23ae3a6d5dc098a32588bd4a35ad21c3e00b2899c0

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\greek\is-11MHR.tmp

Filesize
138KB

MD5
48e6e0d05cfabb9a3fc2b05a4d4803d3

SHA1
1ac59f4e1b5c714802f51ced7d37c3474396e12c

SHA256
984ac62d52c2cd370dcd27f7365d61b82266b66d1139c38f0fb787e2517d9973

SHA512
a828cb2a13f3ac902e2330eb3273d292865667b64c1f40d77fde23aa252b5e82dba08116817ab8004afec52802230a954cb34eb19b30366f4f4fb8c61ed33b6c

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\greek\is-4OK43.tmp

Filesize
186KB

MD5
37d5e3ba38ec5ca127df104fa4cfcfb1

SHA1
62a5b9749d52cd7e3906255a9e1504ada934d60c

SHA256
9965740782ca00f5238ffc8f8f91c6a61775f5158b925f033c01f155c8f197b1

SHA512
202c63cb1630b0ee574941db55b7fbf67e7fa620e450bf71017e256121ce264559beab6565f5aa5f70060960e04e79ee1ffa5c52b9918d9c32f452e0f2c7f7b3

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\greek\is-8UC5O.tmp

Filesize
194KB

MD5
87069081457d741d343fe5360b401369

SHA1
4562584160ebf4ef3b982b82b6df4a133c5685e1

SHA256
01f25b65a79240b1e0a745a2d2e6c07d7096abe0155bd006e405efb926230e64

SHA512
fd4a3dd7bafc974fc8ebb0c190568d1d344976dcfe1c5aee275f0222c8288067ebf22a1ddb871a847000ccffc64c5b69d4f1d8eb2fba6c9164da0790d096650b

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\greek\is-AR5BC.tmp

Filesize
134KB

MD5
838fc0b411cf0d3c7576318024ecb17d

SHA1
2198ee0550d1e49ba2c5eb02d5c7b21c14b23b11

SHA256
4881edb5986e454bb82d5638e8f5e580161b06088b903b372ec3d9becec3812a

SHA512
7b12105a90453f6725ebf21445a0847adec8e4309963ce061132d89a5565b8bc5fa15916c446f30dcc430f435ab9e251a893247d9a77a15438bd2b19b9b40035

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\greek\is-B6S8S.tmp

Filesize
186KB

MD5
3b8d607a1305575b84306853537b24a0

SHA1
bb3ce6d67bfae6c2de2cde708bb54548cefe3dfe

SHA256
e6376b6f084749ef2bf87abc6f75cb1aedef2699f5d5694bb1d16eaf104ff750

SHA512
17fefd9b9a4f36fc9efb3d68db0f4236c011878b69c745dc737c23c25bc8e6d0df8d2b3fca8b8e2b6b6e2a283cee99fcda29093dbdc8af7f3fc920526680ece5

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\greek\is-KA3T5.tmp

Filesize
183KB

MD5
01cde86a67f59ef9a21219721244b30b

SHA1
b06d5b431a7547c0b499c820133a49eeba81ad27

SHA256
a4409e517004072997cb4fce746d0125e670db6d77343e8d36ce9fa582e1adda

SHA512
01b90f029309fcec8aed0f05214af3cc5ed988dab372e048820940af5182424708c88d3341106a0f68f101982a8ce7cf9c125845e2a62afdcbd72542c4e85556

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\greek\is-PI181.tmp

Filesize
167KB

MD5
96f569bd55d80b11627fd81ad3435173

SHA1
c9d0032fd117608b041877a631baec408f6be84f

SHA256
83b8c5cffbef19164354dcb76221c515bbff0a683a35c9366ca61979adf168cd

SHA512
aebd32741861c970f3cbfd2c6ee2147592998ef5c56133cb407fdfb1cf32815918c60115180f2a2055cd9d6b307027029a4da8d4b8c76e8d8627b6db26f80f73

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\greek\is-PQISS.tmp

Filesize
156KB

MD5
401e10d3e6aa51e7916cc1561ed660a7

SHA1
5440dac2e691a2a433e8697df901860087ee26d2

SHA256
f46d8cc7f8ae419752b39d5ab4d69ddd19629d499a5edf2aecd9bdcae743a14e

SHA512
a845b3cfafbeb55336ec5bbc93ce1a5dbc7fe24156fd8bee4307dc43cc08aba1f568da9b427707c38a842809afe9b41d00b2095b9301614066341b22cc3c4977

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\is-4866R.tmp

Filesize
5KB

MD5
f5c927ce05b7d1026fa1946d8270e696

SHA1
a1cb25140de4146d1d2156f61697513ae3bd28d0

SHA256
7b3a4b308db522a26557b3b28bf8946caf1b88351b37fc324c3d67387b22f6fa

SHA512
73cc04a94bbbbbe3df4c6daddba3a47f6df0ab4281c04d13de53e80948ded5fd74404b5cac5b1379348321babd92ca5e7aa23e03b90d38554bbf6221a56b24da

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\is-4PB7F.tmp

Filesize
4KB

MD5
4a2fec4a98e6ae35920cf22a3cb074be

SHA1
c8dbc0edcb0e8e675e6d374b5e30e24c8487667d

SHA256
da6c1c0e9ad3b69d45502568c1d87d0fe0ebad261f01120ffa89c989356ceb45

SHA512
ca089c71849505707ca5aae1cfcd29ddfa6aa717ab908f800e660b0070e14894fba3e6875aa89aad3935ce009cda261044b2abf29cb247c1592ed62f63305d68

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\is-78VMU.tmp

Filesize
8KB

MD5
960c4ec13c4d11286f6fa4f296deb126

SHA1
06754e9794ecd38da29d17c8c7fd1f64ae6153eb

SHA256
223da9a3fc3ba25488780a3977fa5bb4d9576fa986ffd56671d38fa3c3dbc956

SHA512
fcd532759391a7f035aee14c06737de0451719c5bf26971dd2cdb6d939a54ccf44a8c847acc15e4261214ce4080207d45ec429948617f5af3c8260b7bbc127ed

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\is-9ABQA.tmp

Filesize
6KB

MD5
9e11f75894b42ad4b21b36b9a7bf6fc4

SHA1
681cf9482403a1b6d885a06cb94c02d88df07491

SHA256
9c824b5e72a40eb3d24892ade386033a32f98255ef837c89d8ef493495438bdb

SHA512
41f185e57ce1e45de7309792f137290e5857ecc48503a610a7f1b3e830719e3151666494a45b26bf6839771d1017d998660f10a88cb8b2b9981389ac611083c2

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\is-BU17P.tmp

Filesize
4KB

MD5
540bf2a1c940549f1eac2a88386cf97e

SHA1
e2b583546f3176bc52e3c46560d464169be8ff51

SHA256
775c64591cee2840cd2509d13f903e632f30c876311b4685318d509f4e42b9cc

SHA512
0486d97898eab3ccbdcf171ce3bf9fe118463f2af71f50100d7fefac043ad4a47b49bd09facf8e4e52aadd31d79cb101865d56677da89e06cf938c45a49303f2

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\is-GQ9SC.tmp

Filesize
6KB

MD5
86c1ec0122b4db91ec3366ddab761af3

SHA1
99b23416c19045defbd8441476acde2dfb6c0929

SHA256
e06c00db26716747e8ed52bdca03e73a69ec2e88f16862628176206930702cb8

SHA512
ac398973f7cac7d7101798361ca83de9563634e7884530cc494f359aabbf8c3964d90b8e26ad00451fa39973e07a61ddb2e72b9b0a8a85ddcf04982fde818325

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\is-HFN4Q.tmp

Filesize
6KB

MD5
f0805caec99c1123d1aec8738ec5e7c5

SHA1
e872e04c0173369dbc038a20fc624eb6cfbb5a7d

SHA256
92ec8936f085424c1153f7ea35e70c3cf3b89c9a8aa006fbb310e3fefb6ff258

SHA512
a8c66fb9521baa793eec9d3553ae210e408d7c0ddbc11202b0c706da95fdd1685f2c0fa5171cd2b6df412fbe4a027b16a86a4cc2153ea8cea158783e2d760428

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\is-K57RL.tmp

Filesize
4KB

MD5
e5853d4ed387be744134fa4d6c0b145d

SHA1
a03054704d83f55fd77fce16ef88df90bb83d2f7

SHA256
94ac26a8d32eb1fc7b632bf8e114faec74a2b469f2e2551f6bf8fcd0857ef397

SHA512
00573da91b9ed0e0558b54d578cca8ecb369e213d88d053ac562ec450e7e95bdff7659704a996b814e78cea7d0b18faac37821de38564df392db961019d73b25

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\is-QFHTC.tmp

Filesize
6KB

MD5
6a87f3feddf646bb4bf56423ff256013

SHA1
3c0bfac0abaf546a496cd6497a81bd3684186ed9

SHA256
e901a4c13f8b9c8451476c620d1a0c843aa2db22a45a195a1246861d59818c2b

SHA512
3f94d5b8e00f34cf81f0eb17b9028d9dc353b50d9b96ff89205378d7b803e15a1fd8920c38adc3d91b8965151e634187ec07cedf33fd3a7a955ce0b15dc69588

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\is-R4ISH.tmp

Filesize
54KB

MD5
34cac466829f704d94f9b4e0758a9640

SHA1
1bf6984baa287cc80339539440c5f679fd212777

SHA256
bb511da6a41be435a5444db3747c3a0e52c038d4f79e3e87a19e5b87ba435e94

SHA512
49c1a0d2614cf033542d1675bc1afd7235db011bb6c432be67f61553c770230b247db275b36dee510ab8e9b90e9318de010a4f2e9f2a372c94a8694c8952fc98

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\optional\is-14B0U.tmp

Filesize
35KB

MD5
c8e46a83948ef2a56b34a5aab501274e

SHA1
c5221a6a1823f20476b42982df493c03e5d1941a

SHA256
8f2382c01e336640d20fb397f4b4f3e295d5c704c02105db29cf362e5d13386b

SHA512
909e4d48d0741b4671785ae07d09cca4393a125e54cac1c8f8774e3d4a2baa094713d51a8b131205b263b629a7b85d8832efbed8adec662c85a0883fa1dd67fe

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\optional\is-2IBQ7.tmp

Filesize
56KB

MD5
6b0337b3fd0bb1bc0e5deb4b26929347

SHA1
6ed59e4910d6e308cb7c9c58a3a2fce470bef1b0

SHA256
dc88769b6c8230a7c4d96095d18272f5c84cdf2a782057a1f21af4674a6110e0

SHA512
56ba80b41b9cecf30cd43d5daffd5be759ce76e3825541cba08b7e03d7528fd503cd2fac69431f5b220ade26e382c33758f72ea7f0157444bef40a7bb80d368c

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\optional\is-D975G.tmp

Filesize
66KB

MD5
47674bd24cdae434485f39c802bd47cd

SHA1
a78491e51a8a2def67af0f861ad40d81d850f967

SHA256
f7e378e37208b7d3cb30b191b29c8d71abc85c018972317dc034146ee5178737

SHA512
01469928d73e6c7a218f5feca0d7d110377e4d8e9d6c06ae03afdcaaf0dbb3e253f05873d84d1c6e9c47122263b459708c768eeff1af5cbac92e9b0f158acc46

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\optional\is-N4LR9.tmp

Filesize
83KB

MD5
7edf116227f76090d814acd06233a234

SHA1
2ca1e76e4a4e8dc509a4ab85ef239101bc57bfeb

SHA256
9e6682215b4356bf59bbf8e434ae26642b3c93a18a156de373b366cf84ecadc6

SHA512
67a98b829562960f71b7fb2c701155880993eec4ee5b756542957745fc04c6e84174854f0d527674f5a83a79db8f374d274c54adfd015543e801d79e8cfdb6fd

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\optional\is-SFRRL.tmp

Filesize
91KB

MD5
81ae638a905cbd3eb318a49a824c3363

SHA1
f745de7c8abddb238f2f8ffb5fd09e8a14e6f83c

SHA256
9e1be5c35e0e270eda2d8eab91afb70e3bbb69ce4d3d051a6fbd61ed4a2e026e

SHA512
c1b6ade381098f083411fc9739e8e36d144c90e339fde5b4e3868d1443a8c074590d3c4cdbe1461935e088df7487c9e0b4f3c88c57e19a9aad1e4bb9a315d445

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\latin\optional\is-V3V9R.tmp

Filesize
59KB

MD5
5ddc1681c8c34cda4fe17bc4327b4f84

SHA1
cd1f1b6e435e6fdd502caf398a472c443db4d928

SHA256
b60e86d9b0100a2dd1167d9adc3dd2d4e2831e0c9094ec1bbec5dd3b453593f4

SHA512
98cbc50cdb52a36368abea43d4392e26fc56ef761e1a7a34c154f25cb075d005edf8453fb6d6c0036c5cdff86fc426d20c8e28df410cb006cb8f754d8dfa448d

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\licences\is-5TARU.tmp

Filesize
4KB

MD5
38ae4c800f1f712042b19ec77b617be3

SHA1
874b0a7d878b525d00fb1ff36c1d5d3f864fdb06

SHA256
c5f826ca32b56a30e0f22467be9f51068b747a6e461314b7650238c3b90ee819

SHA512
d463bcc0614435c3ddf676ce646c75166d3fa676c67ede7757e59f3364b841841722cc8aa77dfb59fad4b78a5908a0d4793f76245a260c0545108572152a0f40

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\licences\is-8IRBS.tmp

Filesize
395B

MD5
4a98a26f2d3f4d8be318caf37dc01b75

SHA1
2cf5d8fe3ec737243c925593c07aeff5e3b44230

SHA256
8dfa2050f50d341636748e7ab0ed175dde130e33d722678cfa99351c6aded331

SHA512
b5af41fd616b6e32a5e7c8ae42b934cf205e7bbf3824685ccedf74b916d58a43aa107fb7988105c1695c300ef9a7aa15c905a05d1903061d30ccd53a422f91f3

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\licences\is-QMIM0.tmp

Filesize
260B

MD5
5ea60c8f192c4a0ad29d1f375f9ea695

SHA1
ca76b010e90c8f682433a6e388d313dcad3aba7e

SHA256
6c4321c24c91ce63ce7f77286207eddf59066b1daa9e393f3e697d578ce4789e

SHA512
cc1687351f84dd26075f7b786f5422a7a56e8592dd5f99ca3049f2dfca94a401169e3db0ec98325f1486f55c9ec46cec286ae3ac2a443bb2c706e24ec7e504c0

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\maths\is-ALPG2.tmp

Filesize
1KB

MD5
b39a4bce89c57414692dc8370370482b

SHA1
eba49201e8c7b79615b16c3bc93c6347f083e101

SHA256
47f742ee0e1e1673a3ed7b9d0034c2c1b6e1858c7630ad3e36a2f7705463d1d0

SHA512
df7cd5e1bf0eeb95adb442bf486815baa26d2a800080a29910c128046952ca382d49ab0d3db5406a6751d424b1b8b63d5078cdf0c02cf78a64f1d228a862cea9

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\maths\is-F8C8I.tmp

Filesize
79KB

MD5
d484fe3edec890c5c313c4b6fe22a3ff

SHA1
ad5dcdf15d703abcbf31f4840adfae9b0e387ad3

SHA256
af0e0ccee8935a1324f75e49fd6eabcd1573bade08f3a541d6fc626559e39c61

SHA512
862fa972e417fd78354eb0562e389f9c97d2ce46b6ed0c157eb820641e2f4bd51b7c1191089484b81f6083699753a9d4efd32116fb6a71b029d0a13cf308a0f1

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\maths\is-PLNEO.tmp

Filesize
50KB

MD5
02a8c567ac92859f50c4aeb888964348

SHA1
50d1148c356f4238c57db8f2f6e0351cc347c22e

SHA256
9abdfb92cf4a3bdd4b7ba74bce5c5784a089c110bfd1ae66b00ba77562a16a6d

SHA512
5ef7946dac246d01ff61a9b934ba139a9fceb0718ed46b04b03176214fb1a0b95602fa74f2357a5c3e6ae044388beea669064d7d294b4e0d7a1f1a1ef8aeb005

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\maths\is-RUTPQ.tmp

Filesize
62KB

MD5
1157423ad727ed89d0e0dc1c16a7e0bb

SHA1
27cf2c1be53224a903a3144ab894a4dd3e25dd6d

SHA256
920714e147973a51b8f095ef037c03bc4edca32502fd52043dce9fb9b72ca108

SHA512
0292b2d44ed1edef952bfbc70ab6c87c44873e9c5e8f600239e896af74862f641d0236657cb465bf91d209b333875d91df8c866c2a3bed54b8db5f58fe6f919a

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\maths\is-TUJVP.tmp

Filesize
29KB

MD5
2b7acb5a01543972c48615159129e462

SHA1
cdf6e78e5c97cc920afc4c5cf12d7c3ebaa11528

SHA256
e0f751e98f4c0b85f4af17283a64111f7d5618d8c15da3cd238abaec0ebd5144

SHA512
d761ad4c19b844716f1668ef40886ce0efd3141f9f0a9b6c297f1f88f00d36cb46968a32f99b26f24e127264f637e4d106c1986e7eaeba2418999855f2f9d5b1

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\maths\is-UE6GI.tmp

Filesize
52KB

MD5
1e5dc50c7b7748a755ce355afc082107

SHA1
7e1ccf2789293d61a33babccd9a99733e9af6d6f

SHA256
0bc61dea2bd894a941deee8c83e8ddc9f70eeac9fb9c52bff56cf512fabf68ce

SHA512
a920aba2d90561c147d056531048e119db11f89fd312a5c7603da2980f99d90cc99e6cfc434cd462b3a506f769634412fca437ec0fd6b1a09532e7a8c55b4a55

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\fonts\maths\optional\is-L71AD.tmp

Filesize
22KB

MD5
f22bbf07ee636fcd08a21f7054e70334

SHA1
ab859af6bb5a5a3a7e40da03ba3346e3dd58b650

SHA256
d60e4ece5d492a2bcf7d8bead4c697baf75097920a0a78db84d2bf6864facc88

SHA512
fe21ea1af5bb8051264d5c9fb2df1796bdec464cfdde769589378d7c8d5583201fffa0526e14c6e5f867c0960e1637ec9aaadd048746932e0c33d5eea187274e

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\html\is-830H4.tmp

Filesize
160B

MD5
bde560ef73d6e643c27609ae600a2cde

SHA1
db5dcdc1f7ac9b1a1cd692badd9384f7c194c107

SHA256
8c2387cf0977c70bbe2fce0e5bce1031518477a1393787ed82855a5949061501

SHA512
20600eb12d22e5a80e0a8b9c1eafdedfdfb4db027d369c3292b57bff4e31c84c72d230a93873a0361f30e4fe371a6cae2a668c830f783cc2690091573e4733cd

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\html\is-ARP3U.tmp

Filesize
19B

MD5
391a8bf3dcfe0b94037cb577f844c8bc

SHA1
d5246115e4191c19616c35e0b1651a7075a7ddc8

SHA256
42caa53408ab96b219600e99e06f0d3b9b9425cafb3a63321f945de0f1502ded

SHA512
a2f54c75d8d6409bba943d08f7b8a797a27e1df39b73d810b23313bec265c1a1c003f4a002017d550f5926d976a74e3d44b9d0b7ea57e7f502c774a0386273db

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\html\is-BVUVU.tmp

Filesize
708B

MD5
7d5d434e6da1cfb7407f438d9148b3c3

SHA1
21a2e9ace6f47d8900b95f774910b9e57778cbd2

SHA256
50502f1cd6832f18e27ab741afb3d9150c11ef71c468a01956ed1c025ae0319f

SHA512
2cd177b787bea074cb24e576f98d4e2cbc9eb8f17902e1fec972109541a962d1cfb53925a95771ea90ed40a3cb274ce7b36297f16109b6b19958aa79ea4ec046

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\is-SOBPH.tmp

Filesize
43B

MD5
6d22e4f2d2057c6e8d6fab098e76e80f

SHA1
b80b11203d97fe01c5597ca3be70406ea48f5709

SHA256
afe0dcfca292a0fae8bce08a48c14d3e59c9d82c6052ab6d48a22ecc6c48f277

SHA512
95dd0e4944b1541a9be48a60a1a105fcfa0d69dd215abaa9c1771adecc5ee0c0fe91d0eb367b6d46a4f8b2e06e6fb962d56dfc1c53f1f62cc8b314710628cb1e

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\js\is-945ME.tmp

Filesize
25KB

MD5
3b8993d56efe12d4dfd158e2ab786955

SHA1
646058b946d8e5256c146a417f64c3f2cdf5bcff

SHA256
85d41e59942640fc93ebe2555638ce20930120855335ceb753c8b458661d9731

SHA512
676c133660754c0da7a111b245996b24ed0e3c3bb66abea2d1e1d9888e5b1a3fbf9cf9d6e6d02ff7c9633344363db39a7934e4c941c5c43e67c98d0f59bfb2ae

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\js\is-ANSS9.tmp

Filesize
5KB

MD5
a4f2adb8a38579597b8f654bbc82f35c

SHA1
5014bbe8edaf508e3f62f3bf4e7db0d9bea12474

SHA256
c91aeadd939a6debd7975b8392484d7f329a8c39e46a0505c9d86c936b624cd1

SHA512
e7e4d4b264d10fa06a5a72df2de9df0e99cc3412f0a40f5aeffa73bf50caadb8c6e89b2b3bfe801270272b3fe8a66b79f9371210b11c12df0422033e90ceb6d5

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\js\is-AROL6.tmp

Filesize
26KB

MD5
6e3d6e3d9a791f822ea4aabde2a89b87

SHA1
b526bb1afb5ced0d5e4567fa2cc5d0356b739414

SHA256
ae18032d45cf3f2cd348b70ba7184e60ddf14b187143c7c204ff39745cb64088

SHA512
c7fbe026a30c849d2d28d15e3570f44e78e1768cdddfeaf0bcd624e589a9829b6f55ffffb1005b29527d87b14d3bb2f04f66e921f5f25a61490374673ecd535e

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\js\is-BG4MS.tmp

Filesize
17KB

MD5
d27e907d3d0ba8fd4b7014540bd7a52f

SHA1
2fcbd1f314850cb6c95afc17ee5f88fa06d85b4a

SHA256
bfff9c2966ed13f7e587789183afb444e3c104f0d17cbb3d882771ba1b7f2a8a

SHA512
46cd49edee015abe67c90e46ac071964a7b34f35900b3e110aec33c4239842efa1d60b3cfa980182de70620e6036f957cd8d3ef88a9d0b1ec7982643150e3240

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\js\is-QL5H8.tmp

Filesize
18KB

MD5
0636a4e21a12df786535163f4a250c45

SHA1
39aa34455bcbb49021dff10c4c022a667462dca5

SHA256
a1948f90ab3f61d73d669f6359f4f02db644c5d8d7f37f8713e87174d86d9b2f

SHA512
98e74c2db7c78404ebf5abe8e0aa4a18e0e1dee977a4b4cfb3372b51ed689e03c93acb3f0243129bade94b6b7b409bf2c05dcb5f0e7806f2ad0ad153052bf46f

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\js\is-RS696.tmp

Filesize
32KB

MD5
cab14f717481299ebd342af01adc5bcd

SHA1
f3bfae068e388069252b88aa0f5a89d8b5927975

SHA256
d91eade541a5f98fcb497718fc744c161a4bcb5f5bc8321da092fd9b3c324e8c

SHA512
0fd5d2c71ad30ceb6bfca6b937c2d56d4d50830f68e7cce4977ce8c7ba25bbe47ee1ececefec20513c5f322864201ef39644931a0649c0c437215219c6cbfbe3

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\js\is-S5F7J.tmp

Filesize
3KB

MD5
1f8a31855b36fa88bc8c8e76160b92d7

SHA1
636be8cf83372d5b07ea636660941da2a4add05a

SHA256
02cb2a3ba7ee4a411d83b8482bffe4986c01704fe9154cdd6bd4405604a64249

SHA512
1efb9f999f7f52ce070d25408dbd20117fc93f7c3889b79c17e80ee882e910f9376db9fd28ece026ceeee2cd99f576771e5569e424d7349d771433a7d67c69cc

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\webfont\is-B3IHF.tmp

Filesize
16KB

MD5
01e945dba088013516c4483fd3d76726

SHA1
50a1d8b0c0e817b994e16228e6616ed364cf233f

SHA256
19f57ae7f470e792f7ecf7bcab9ad60838e13994b21f559d16c5fa226aee3f45

SHA512
912fc911b6a8ce71ea4b5ef34186969e3929056c4f9345284dd96ac1a1f6e6de859eafbb9ba20aae8b3a00c00a86b913a70ec6ddf886365ff6bed6884cbf4dcc

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\webfont\is-CED2T.tmp

Filesize
12KB

MD5
811f6a5bb8162b82d1922ce2b8be6888

SHA1
373a2494524d254eeaaf15c603ea11a20975a742

SHA256
5fa20d91c9e94f0dcd1398f5e8909706c437748ca1800616ee76deb6cefbdf03

SHA512
dbc14670437a7007fa3f7705b030853efb3066e1a5634c220b68b663162d67f88fcc514bb12c6b5c3cec17240aff7d074bcbc5f50f1ce1f383b33ab07b895bd1

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\webfont\is-PMGP0.tmp

Filesize
12KB

MD5
0fbb2f1dcf08d0b4a0033e3e327a7efa

SHA1
e89c365e3913a5f07d1417053cc50e49cff25d0f

SHA256
6e6f93c81a4caf0c1d6d6144a1031378f8f8e60d67e5d5c5ff28d0c1619ea1b8

SHA512
e420233bac8280e9aa668a23837ebb9618df711e2a49451517618dc948c58ef60667905e19847d99f4ea29e9239c18a1e63c56a4dbbf09a6021504db0f7d288a

Download Submit
C:\Program Files (x86)\WordMat\geogebra-math-apps\GeoGebra\HTML5\5.0\webSimple\webfont\is-U1KDU.tmp

Filesize
74KB

MD5
9f25881251e8ac6eac53cf27452ce7cf

SHA1
03ebebde85772e3c4644fe8c57467388b633d17c

SHA256
8c9e8dd9848c0a926774acaf02fd466d6ed625648cd870649d287bd848ea4db2

SHA512
8096fee7e323195234688c4b52186be4e9795352ac50da41dd62d3f2e710f478f8d2da33feee9720774ab8a462bc78e6e2892d8080c65cdb8b43cf41dc9e56e0

Download Submit
C:\Program Files (x86)\WordMat\is-D79CN.tmp

Filesize
835B

MD5
ce318859eaa926473c968fa208f0988c

SHA1
3180e8acd0e20ce88b5746ff6706a0eecd94d870

SHA256
6b3613b58a4221b517391ca212bd0f4fed15618c4a0ec940f34d8e45f89787ff

SHA512
ed077dfd2211711bf3f4881081d5fdc62f4bc249e9a876239d5940e64f493af1ea9894672e6a2021743c4c8569a1a5bca4f60aa273c9277ccd652b2667033124

Download Submit
C:\Program Files\Microsoft Office\root\Office16\Bibliography\Style\BibWord_Stylesheet.xsl

Filesize
142KB

MD5
1edec1eb2d62f3c0d4bcdefc2f53e702

SHA1
584cea9e4b30a781ac615218c6975fe8a31e29a6

SHA256
e1fe350f34356f6edb39d9219012a675b8f09a6d5f18eb6b65a3220f33189f2e

SHA512
e7b82fe5b072640426fe68882915177ba1fcb3f5e895c9d5961f3f5c3846466725412ba39e520e8e4606e9c1182a233f215d54dd40992b053143377eb77f83e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\RegAsm.exe.log

Filesize
449B

MD5
5e7c4a4f7d6de1b86c8b336a07a193e6

SHA1
30088e1a0266c7f38536fe1a9f2e987d5b7e6bea

SHA256
df96f2e23560290d0a821381af45c42c0fa8b2e1105f4f6960460e06b4eb7616

SHA512
cfd6aaca27095ed8de1d78113a35f94fe20f40ce6ac473faa62c2feecf818563fb93a6233f84624f900db9eda8c62a47409fafd30b8f035e8d8fcc02d5105675

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-RAOGC.tmp\WordMat130.tmp

Filesize
3.0MB

MD5
3a90912e8930d667ad43288c6befa979

SHA1
4a2e92fb650d54a5393640771376e35a3a2f338d

SHA256
fd8dcd6740c73dbce6a79a3eab2d8ea66cf924bea1027d7a0e5a6caa2e95cc4a

SHA512
37bef42bd39e9fa59a2f8f8647b963eeb8ef93edfb85a5597bef760c9da970a55ed403d5d34b96f0b96706b817f0ff04690ad68bd61f281ed17ea74067465a46

Download Submit
C:\Users\Admin\AppData\Local\Temp\is-SDFML.tmp\SetupGraph-4.4.2.tmp

Filesize
1.2MB

MD5
6812c756b6a4f96b76f35d7a5836e2e2

SHA1
7d03fb84ee421b3e1c7a6f912033f46fcbe62481

SHA256
049f1268be073aae16e74476c6e4921985e50e39346be16b6dab75c7ff370e1d

SHA512
7afcd2e2ecfa45c2a3379477052a7a0791078dc49361879659fb59fd1a708bd83648fb8507dad64b75c2ca169282efd6fb80039228930148315a012899552239

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsuEB9A.tmp\Parameters.ini

Filesize
54B

MD5
b134a522cef61daa57dab7b1d1c03b0c

SHA1
3fbad73d581fc7580a27b20ac6f30ffc80d04d47

SHA256
8202e3d5079da6e6c4bdb7407eb9bd6cee5f6c883efdcf10b6a6488e0c494314

SHA512
b01634dde860485e5a90d3a6abafaa7551aa03c6bf8e85aa02e636acd9f12730fe7fa1801b541b90a059ca624695489a23b3ce1ab21ed48fa8cd4825ee3c1369

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsuEB9A.tmp\UserInfo.dll

Filesize
6KB

MD5
30b054c33c2ef209071faa27c38c06a6

SHA1
46a25a956e2b033d273e7afa064638ecda808cd0

SHA256
dcfdca060f6531e0b31ac6553d2133113479729cc8ecff7fde0e363ca86c17b8

SHA512
62c3b7fc2d041267628a358b4766c9d145b4ddbdbc3a3d112cce395e685121bf7103989380feb550c67932cc98f6ee1d082c898942fc35153ea39bcaed0ff8ce

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\WordMat.dotm

Filesize
2.3MB

MD5
794b705edf89b124eedaeeb7f5c33dcd

SHA1
837b6a832060a9e4e6c98acbf944e4718baed694

SHA256
1161746001d80b4a04022c119a05f9b2697ea192b0aaa56091a9f671caf6d648

SHA512
16f42001afdad2c20ea329db24240fe2ab61d06580c701c8e90fa7d29fd380e4efc42d758efd24a9322caa0466ebc5097f77d5a993bf45c263f5fe039964c1fc

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\ReaktiverWordMat.bat

Filesize
900B

MD5
1455df8b016e257f5bb2059d574793c8

SHA1
f8ac3c847b1273a88c5aacf8f233a3e27852a6a0

SHA256
27b524f8012d930d917d3883f05c2b25cbb56b5b97bd3c41cbf8dbe0508725c6

SHA512
78c7f52758f4d5c4111a1dac1cbfe97325b38985ec956a99d35763d11ef92bb65b6819fef3395b505df10b11af36fef31b2331f94198702defb47185f550bc3a

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\Figurer.docx

Filesize
112KB

MD5
adace4d11f1941741f9f5fd93c4983bf

SHA1
b3fd32cb283f8bbee3eee44537e4a1fae9198b7f

SHA256
3ab2d3a6bc4917b28a9bfb5e4cfc5dec1cc6dbcd35b3777f9851b06e01fd3112

SHA512
06898b1a0e3a16ad18b10442a2327260a16a80bb10824cd645011b21111865e786a2e7fce9f2f39a9a169f55421a67b141e37a32a998c206fe2144411410d124

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\Figurer_english.docx

Filesize
112KB

MD5
a2701ce7b2cfb51b416d93f693e902ae

SHA1
2ea97b22d6822d967092f5d5c4078b6df4356986

SHA256
5914e543914edf14ec030ed433767283c0c93a53535d4460736611ad03a17b91

SHA512
74942597bf6975a3061413cdda735f7e44d30bd1403a762bdfbb1c202c984e4c9d65f532bedf676bb65ac0abd26ed76317e904cf89ac52cb5d50362b486a3b7b

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\Figurer_spansk.docx

Filesize
113KB

MD5
33315ded3f5f99d09d19aa58b938f81f

SHA1
6113bd4f2c6b8b4d497a0e3417044a9e2068f287

SHA256
24c3ff246adae812daeac10d1f7aa3278f330882e45da4e3feda5036062599c4

SHA512
f0d827112cff6bee9b40e4c692171093cfb08416d147bb1e35c8ca8799c61dc34e02dce66f1702a77ef787096c60ba617af309e28d5de036c4b56eac506e47ff

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\FysikFormler.docx

Filesize
32KB

MD5
02127caf58658b837acae8385469d99d

SHA1
4550b47d9b527b5a9d20d7970fb1689e1516dc09

SHA256
44893bf358dc3510080741b69e09e20fe9624fdc598a94dda3ddb3eff3fe0072

SHA512
a8ccd356bb3736f6f6d3e4b95e1b39ba73c956a77515d4f870a4341cc3e02c5941081b27d32748b9bb35c0243d1a5a1aec212967f1caf7d935d59663ec29c7de

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\FysikFormler_Spansk.docx

Filesize
39KB

MD5
1a365dbaf3acff487cf027770ed94c44

SHA1
e2e2f997a5b906e07bfc5206b0a9705b1f00502c

SHA256
e6615ed1ebd4e6602ae92f0b4b7b69d67028373926f08166daef3dd6bfb451f9

SHA512
ddb89c6789a591fb16c22ec5a11f064490f184efa91df39201658ebc6b1a491cfdefa6f9fbf657df705851ff9d4cb29e06ed4825f07033b9262228db4879a44e

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\KemiFormler.docx

Filesize
22KB

MD5
8bbdacb61c07a25d481369019ef3533f

SHA1
06588128431cd0b9c479a4fcb31ff92800cdc1c3

SHA256
d4d55706e4a11b7711e04d3934a071ae831fba8d3090ed39a697e444bbc97fbe

SHA512
3b28ab58ad7a32b5a12a8714024eccefabea3d314fcdb774fbe69565974487babf3007c22ecf21d58a00c7774e95b2beedf180794d55671d884ebef8f0211e4b

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\KemiFormler_Spansk.docx

Filesize
22KB

MD5
e2207e77a27ed4e39a5daac918badd1b

SHA1
dfbfbbc67b5048db50a3e13046d7ac21a5c643fc

SHA256
59c2c1cc33ea2303e973cb86c5d6bd882428ae65028a4ce7da71f2c4c498bea3

SHA512
88025907d072001728b8c1ee88437437eccef039de5bc4903ce33870f177402909b5d7fe3ad81ffd3079caa55a9ad111418010b447d8e3805e0cad81adf56047

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\LatexWordTemplate.dotx

Filesize
30KB

MD5
5cabfa3e0c54c4eceaad4acb4d02a45d

SHA1
7031a7002cc01d425b68670310fcc8359bc5d149

SHA256
527637a132c28ba6ddb6999be8bb38785e5ba8eaaefa445b597631ea62e81d48

SHA512
3ec292b6d8c48fedddedbce92cf956ca5069b3e04dd4d8e7cd2a3009ae4cc00101f9b982c53946bd98108241d85c3b2aa202a0fd1e235b8d655ae437310dc68e

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\MatFormler.docx

Filesize
335KB

MD5
c98dd38e192b33b3b5781908e9b19cb3

SHA1
d13a4fd49ed20feee40e6d071ad9a8cb042ce540

SHA256
8ed87ca8c22dbe144a76e15b07e93368d760b343701d684a5ce25186149a3297

SHA512
208ff7764034ef880f976fc48927236596725ad43ec8a8c0a19e2ee544fb920e9253dc78e644df6762a7f66d64b1ec5c7fb04bc419fcea39ebc9a692e219b5f3

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\MatFormler_Spansk.docx

Filesize
334KB

MD5
6cf3a550f1cffe4d396dda1357281fcd

SHA1
2dac04435a16496d44f9a2a4fcf53e6c13dde82f

SHA256
722d67e729349ad54f50463c91e0b1ef32d57e58072adb6fbfdf7cd021e51b6c

SHA512
444cfe4bd8c50b3ca44d2b0f41cc4d3c90564afe83abea8364e43229dae50beb5796eeac8980fdcd349d624f874a8ca6b7001b69e7c8f3e9c305887bccf8c53b

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\MatFormler_english.docx

Filesize
335KB

MD5
c98e3968937fafd7bd8629bb20f426ab

SHA1
9c0ddd8a6792e217caf055d0b064fe00caeab920

SHA256
7d6e8e266a04a53384f89b50880b568d7f6f926578f4ccefca4402cd6ef1cf95

SHA512
39a7489b72cd5388779cdb4aa11cf13ee8ec79ccc691ce75056f155139689b47c68b71089753ff46791aeb0d642e0faf2187682573dcbbf92fe98af29c9feafa

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\WordMatManual.docx

Filesize
1.1MB

MD5
e471b2b2b1c92e565ccd7129e01dfbf8

SHA1
fe620c5dc0430398e0b28db62431a4b11959ad9d

SHA256
0954d733f520632fde73cfe24d16e510edd220dbd87d0759d0cdd8df778ebe22

SHA512
a14776a74ef59742a92e65e3ea5599c03db5fa24df100f6fc438f7ba03b20354b496618b23df5f4fd51c36d35f77e8e44ef13f6fc908d212eb28231857147f31

Download Submit
C:\Users\Admin\AppData\Roaming\WordMat\WordDocs\WordMatManual_english.docx

Filesize
1.1MB

MD5
a7afc934759b851538fa4a5f309f63fc

SHA1
8eec42a29eb0a9a7a2b44bf4a6b9139389c7c4c3

SHA256
3f46f62a33691bc3b40384a17a2c51b51346f06d9b6b06dcd6aeafc88e20839e

SHA512
1df661ab3cf1b3147245cb0f058d76d81852de1b4762f0e23709f20ae2a12d35ff8002e88405b0692b3ff44d081f596fde548088c183ac92a917cebf28976a30

Download Submit
C:\WINDOWS\FONTS\LATINMODERN-MATH.OTF

Filesize
716KB

MD5
3cd9e4424f6b4baaea5713c121ca52fd

SHA1
4f9305680fd5eb251f6ba57832dfe2fe1de4908d

SHA256
5fd255d4e7be6ffd4592e830aa37a0025133988a8f17d9f2373ce05cec0fc509

SHA512
c75cbb192b46952a347d61205e2582d390439e0b3b62b03b7c2cd3f898327004a386802eb8ff9b088cff3ce65c2c11c5370c6b4f28375718c53cdde7a7eadc2a

Download Submit
C:\WINDOWS\FONTS\LMROMAN12-REGULAR.OTF

Filesize
107KB

MD5
d844cffffa1af59f9d2bb1bfdb6f1a2c

SHA1
50cfe979e2c7a57e7fd57f299ce8872e7014442e

SHA256
e6be218ae83e61aa8a29990d3cdc401c678c1962188cb9a4a8b6359e4f5e5870

SHA512
b8fc77f2abbdaf86331def774d5e910b2f3494e637fe1aba580581d3002e7ed2ce43e446fda20b7d2c357db55df97cc73d415ac2032e77d68d79c7816103ee11

Download Submit
C:\WINDOWS\FONTS\STIX-BOLDITALIC.OTF

Filesize
168KB

MD5
006edc3f4a34939e0c45757cafafef3f

SHA1
e95f0ef516fe729bdcbe7641e8436a7a9fb00993

SHA256
584ef8059f13bcd2c4466acde41eb7876ce339c1af8cab0ec7121453391b281f

SHA512
7e1a34aaddbccb2d54a48bca86695d43db46a1f7afe02618aaca129e48460907f48b487927721a67cda389adf5b5089c0f5f498d3d0522e0a0402a94532767a3

Download Submit
C:\WINDOWS\FONTS\STIXMATH-REGULAR.OTF

Filesize
465KB

MD5
96afcad163384de9c3ab972b3636e041

SHA1
b6f4a77b9a3966745188f07a5d671f6ddb3c4ef8

SHA256
ffa86ff85660f452fe916ada2805026bde5b9b0d1e6ffafb5f73972675ecfd40

SHA512
c2b4492ced8faea3ed57abedce35cd045ab7e4a7ce4d87143adf03eb72b631e31f2c1237c6b1efb677c7c2f8055a43d3865b19315771b9a4c4832c24d5765e2b

Download Submit
C:\WINDOWS\FONTS\XITS-BOLDITALIC.OTF

Filesize
108KB

MD5
16e18215006322347677bffbbac179dc

SHA1
02705dacc4e7e2094e6a52d769f822f7eafd4392

SHA256
e1bbfcc7e67dbcab39051919200ae5970c8d908921e9db308850c5b25f2a1138

SHA512
80ff582bf0a3fb72fb3f9ede7c0377a17bdaaeef32e31121da7c14d973b229fd704962155a044a08337342b54ea3fd09a5d24c210862452af088851d48da9182

Download Submit
C:\WINDOWS\FONTS\XITS-MATHBOLD.OTF

Filesize
241KB

MD5
02b556f3a50dbd000c3339d8a0be4669

SHA1
fd9bf05891f1ba80b19d0ba4b6e4b43f38783f7e

SHA256
305831007f59eca4c9c4839fd913b64e6cc04ba3e04851557ec2cf769fd2c6e6

SHA512
533d5825246d259fa28655b4a98a0cc701a5eb01772e3ca9ff70d599cbd29faade758bb674024a26397c365cb76503480fdb85058504c21a7d5a2ce040932b6d

Download Submit
\Users\Admin\AppData\Local\Temp\nsuEB9A.tmp\System.dll

Filesize
26KB

MD5
825b584ea5fcb8f9173539ea0421cb65

SHA1
9a12a4b97dccf35ac89b92115a2dcc21a2123339

SHA256
21b23e46f2737b89200f90a2a783289f37d6b713161243677419849b2bceec66

SHA512
2ed5ffbdebcc038d1ec2ce118bbe30979191e0fb943b17f100b94684048029301aa3020696ed07cc351cfbcfd05abcc877ffeaed7a02724882f8b8b231c1d105

Download Submit
\Users\Admin\AppData\Local\Temp\nsuEB9A.tmp\WinShell.dll

Filesize
3KB

MD5
b1baad7753c8f7ba460b7b82227f0e8c

SHA1
228373b3eb334b503cd3687db203a60a6d25ee57

SHA256
fabc46d1491614f627637493c85208a64fda6fc0e918e890c6eb79ce5dfa34fb

SHA512
c51648237df19f45e91f15fd445229412b7a8e2774e8ebb103e4c9b6cc8583c65965327479383d2af132142a2e1a826d84eaf0fbd4807b4332f30aecd2b69c82

Download Submit
memory/364-8701-0x0000021A87960000-0x0000021A87974000-memory.dmp

Filesize
80KB

Download
memory/664-8698-0x0000000000400000-0x0000000000461000-memory.dmp

Filesize
388KB

Download
memory/1020-8059-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download
memory/1020-8307-0x0000000000400000-0x000000000043B000-memory.dmp

Filesize
236KB

Download
memory/1184-8054-0x0000017113D40000-0x0000017113D4E000-memory.dmp

Filesize
56KB

Download
memory/1184-8052-0x0000017112180000-0x0000017112190000-memory.dmp

Filesize
64KB

Download
memory/1900-8305-0x0000000000400000-0x000000000053E000-memory.dmp

Filesize
1.2MB

Download
memory/2268-8292-0x0000000000900000-0x000000000098D000-memory.dmp

Filesize
564KB

Download
memory/3032-8297-0x0000000000010000-0x0000000000E12000-memory.dmp

Filesize
14.0MB

Download
memory/3032-8301-0x0000000000010000-0x0000000000E12000-memory.dmp

Filesize
14.0MB

Download
memory/3032-8299-0x0000000000010000-0x0000000000E12000-memory.dmp

Filesize
14.0MB

Download
memory/4080-8720-0x0000000000400000-0x00000000004E3000-memory.dmp

Filesize
908KB

Download
memory/4080-2-0x0000000000401000-0x00000000004B7000-memory.dmp

Filesize
728KB

Download
memory/4080-0-0x0000000000400000-0x00000000004E3000-memory.dmp

Filesize
908KB

Download
memory/4080-32-0x0000000000400000-0x00000000004E3000-memory.dmp

Filesize
908KB

Download
memory/4836-8719-0x0000000000400000-0x0000000000705000-memory.dmp

Filesize
3.0MB

Download
memory/4836-7-0x0000000000400000-0x0000000000705000-memory.dmp

Filesize
3.0MB

Download
memory/4836-8714-0x0000000000400000-0x0000000000705000-memory.dmp

Filesize
3.0MB

Download
memory/4836-2099-0x0000000000400000-0x0000000000705000-memory.dmp

Filesize
3.0MB

Download
memory/4836-8712-0x0000000000400000-0x0000000000705000-memory.dmp

Filesize
3.0MB

Download
memory/4836-34-0x0000000000400000-0x0000000000705000-memory.dmp

Filesize
3.0MB

Download
memory/4836-33-0x0000000000400000-0x0000000000705000-memory.dmp

Filesize
3.0MB

Download
memory/4836-8065-0x0000000000400000-0x0000000000705000-memory.dmp

Filesize
3.0MB

Download