crylock | b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a

Analysis

max time kernel
125s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
05-11-2024 14:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
Size

202KB
MD5

5f43ead2fcf68ab420a0b563dd1b23f4
SHA1

15b4dd41a806ce1c23164735f997f4b0b09f3db8
SHA256

b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a
SHA512

e3511218e4ff9b8db11d1124a5106b5e63d3aa18af1980744552b5b0fa172b9d3c0257b2b34f231addf057d04cbb8a4ec1709d1e1e1b8d3d651822b278863638
SSDEEP

3072:NjnBqm4O2oVkkdIqWaFcdG/GYAuv9vX01FBdvuVOe5/XhVRXf4cVbMTjIlmR:9nBFRqqWe2Z3DisYP1v1Fl

Score

10^/10

crylock credential_access discovery persistence ransomware spyware stealer

Malware Config

Extracted

Path

C:\$Recycle.Bin\S-1-5-21-2872745919-2748461613-2989606286-1000\how_to_decrypt.hta

Ransom Note

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">  <html> <title>VXUG Ransomware</title> <hta:application showInTaskBar="no" APPLICATION="yes" ICON='msiexec.exe' SINGLEINSTANCE='yes' SysMenu="no" applicationname="CryLock" border="thick" contexmenu="no" scroll="no" selection="yes" singleinstance="yes" windowstate="normal" MAXIMIZEBUTTON="NO" BORDER="DIALOG" width="100" height="100" MINIMIZEBUTTON="NO"></hta:application> <script language="JavaScript"> var max_discount = 50; var start_date = new Date('November 5 2024 14:28:50'); var discount_date = new Date('November 10 2024 14:28:50'); var end_date = new Date('November 12 2024 14:28:50'); var main_contact = '[email protected]'; var hid = '[25E0EC0E-DD8DAF01]'; var second_contact = '@vxunderground'; var sd = end_date; var dn = new Date(); var zoc, ddGlobal; function document.onblur() { alert('Attention! This important information for you!'); } function setContacts() { document.getElementById('main_contact').innerHTML = main_contact; document.getElementById('second_contact').innerHTML = second_contact; document.getElementById('hid').innerHTML = hid; } function countDiscount() { var term_current = new Date().getTime() - start_date.getTime(); var term_full = discount_date.getTime() - start_date.getTime(); var delta = discount_date.getTime() - new Date().getTime(); delta = new Date(delta); var dt = document.getElementById('pwr'); var timer_discount = document.getElementById('timer_discount'); var discount = document.getElementById('discount'); var hours_to_end = Math.floor(term_full / 1000 / 3600); var hours_current = Math.floor(term_current / 1000 / 3600); if (discount_date.getTime() > dn.getTime()) { var disc_per_hour = parseFloat(max_discount / hours_to_end).toFixed(2); var cur_discount = Math.floor(max_discount - (disc_per_hour * hours_current)); if (discount) { discount.innerHTML = cur_discount + '% discount'; } } if (cur_discount <= 25) { dt.style.cssText = 'border: 1px solid #FFC000;'; if (timer_discount) { timer_discount.style.background = '#FFC000'; } } if (sd.getTime() < dn.getTime() || cur_discount < 5) { dt.style.cssText = 'border: 1px solid #F53636; background-color: #F53636; padding: 16px 20px;'; dt.innerHTML = '<div style="font-size: 16px; color: #ffffff; text-align: center; display: block; font-weight: bold;">Decryption key can be bought at standard cost.</div><div style="font-size: 13px; color: #fff; text-align: center; margin-top: 10px">You need to hurry up to decrypt your data because all your files will be destroyed soon.</div>'; } var dd = (delta.getUTCDate()-1) + ((delta.getUTCMonth()) * 31); var hh = delta.getUTCHours(); var mm = delta.getUTCMinutes(); var ss = delta.getUTCSeconds(); if (dd!=1) { dd=dd+' days'; } else { dd=dd+' day'; } if (hh<10) { hh='0'+hh; } if (mm<10) { mm='0'+mm; } if (ss<10) { ss='0'+ss; } if (timer_discount) { timer_discount.innerHTML = dd + ' ' + hh+':'+mm+':'+ss; } } function ChangeTime() { var sd = end_date; var dn = new Date(); if (sd.getTime() < dn.getTime()) { var dt = document.getElementById('lctw'); dt.innerHTML = '<b>Soon, you won\'t be able to decrypt your files. Contact us immediately!</b>'; dt.style.cssText = 'background-color: #F53636; color: #ffffff; font-weight: bold; padding: 19px 24px; margin: 17px 0 24px; text-align: center; font-size: 20px;'; zoc = 2; } else { var delta = sd.getTime() - dn.getTime(); delta = new Date(delta); var dd = (delta.getUTCDate()-1) + ((delta.getUTCMonth()) * 31); ddGlobal = parseInt(dd); var hh = delta.getUTCHours(); var mm = delta.getUTCMinutes(); var ss = delta.getUTCSeconds(); if (dd!=1) { dd=dd+' days'; } else { dd=dd+' day'; } if (hh<10) { hh='0'+hh; } if (mm<10) { mm='0'+mm; } if (ss<10) { ss='0'+ss; } var dt = document.getElementById('file_lost'); if (dt) { dt.innerHTML= dd+'     '+hh+':'+mm+':'+ss; } } } var count = 100, interval = 10, intervalID; function blink() { if (ddGlobal == 0 && zoc != 2) { var dt = document.getElementById('file_lost'); var dt2 = document.getElementById('text_file_lost'); var test = document.getElementById('test'); if (count == 100) { intervalId = setInterval(function () { dt.style.filter = 'alpha(opacity='+count+')'; dt2.style.filter = 'alpha(opacity='+count+')'; count = count - 2; if (count == 20) clearInterval(intervalId); }, interval); } if (count == 20) { intervalId = setInterval(function () { dt.style.filter = 'alpha(opacity='+count+')'; dt2.style.filter = 'alpha(opacity='+count+')'; count = count + 2; if (count == 100) clearInterval(intervalId); }, interval); } } } function getRandomArbitrary(min, max) { min = Math.ceil(min); max = Math.floor(max); return Math.floor(Math.random() * (max - min)) + min; } function Rndom() { var dt=document.getElementById('rc'); var xx=''; var i=0; while (i < 40) { xx=xx+getRandomArbitrary(0,2); i=i+1; } rc.innerHTML= xx; } function Start() { window.resizeTo(850,720); setContacts(); ChangeTime(); setInterval(ChangeTime, 1000); countDiscount(); setInterval(countDiscount, 1000); setInterval(blink, 100); setInterval(Rndom,100); } function copytext(s) { window.clipboardData.setData("Text",s); alert(s+' copied to clipboard'); } function Restart() { alert('Attention! This important information for you!'); } </script> <body style="background: #000; font: 12px 'Arial', sans-serif; padding: 0; margin: 0;" onload="Start();"> <div style="height: 100%; position: absolute; top: 0; left: 0; background-color: #ffffff; box-sizing: border-box; padding: 20px; overflow-x: hidden;overflow-y: hidden;"> <div style="background-color: #000000; width: 100%; height: 55px;" id="header"> <div style="color: #F53636; font-weight: bold; font-size: 40px; text-transform: uppercase; line-height: 54px; padding-left: 8px; float: left;">ENCRYPTED BY VXUG</div> <div style="font-size: 18px; color: #7E7E7E; float: right; line-height: 55px; padding-right: 17px;" id="rc">11100001111011111111100001111011111100</div> </div> <div style="clear: both; float: none; height: 18px; width: 100%;"></div> <div> <div style="float: left; width: 144px; height: 110px; background-color: #000000; color: #ffffff; text-align: center; line-height: 1;"> <b style="display: block; font-size: 43px; margin-top: 24px;">What</b> <b style="display: block; font-size: 20px;">happened?</b> </div> <div style="float: right; width: 630px;"> <b style="font-size: 13px; color: #F53636;">All your documents, databases, backups, and other critical files were encrypted by vx-underground.</b> <div>Our software used the AES cryptographic algorithm (you can find related information in Wikipedia).</div> <br> <div>It happened because of security problems on your server, and you cannot use any of these files anymore. The only way to recover your data is to buy a decryption key from us. </div> <br> <div>To do this, please send your unique ID to the contacts below.</div> </div> <div style="clear: both; float: none; height: 18px; width: 100%;"></div> </div> <div> <div style="float: left; width: 540px;"> <div style="background: #EDEDED; height: 63px; line-height: 63px; margin-bottom: 5px; cursor: pointer;" OnClick="copytext(main_contact)"> <div style="width: 80px; float: left; font-size: 16px; color: #737373; padding-left: 18px;">E-mail:</div> <b style="float: left; font-size: 14px; padding-left: 76px;" id="main_contact"></b> <div href="#" style="float: right; padding-right: 18px; font-size: 16px; color: #828282; font-weight: bold;" >copy</div> <div style="clear: both; float: none;"></div> </div> <div style="background: #EDEDED; height: 63px; line-height: 63px; margin-bottom: 5px; cursor: pointer;" OnClick="copytext(hid)"> <div style="width: 80px; float: left; font-size: 16px; color: #737373; padding-left: 18px;">Unique ID:</div> <b style="float: left; font-size: 14px; padding-left: 76px;" id="hid"></b> <div href="#" style="float: right; padding-right: 18px; font-size: 16px; color: #828282; font-weight: bold;" >copy</div> <div style="clear: both; float: none;"></div> </div> <div style="margin-top: 17px; line-height: 18px;">Right after payment, we will send you a specific decoding software that will decrypt all of your files. If you have not received the response within 24 hours, please contact us on twitter <span style="text-decoration: underline;" OnClick="copytext(second_contact)" id="second_contact"></span>.</div> </div> <div style="float: right; width: 230px;"> <div style="border: 1px solid #2FAB61;" id="pwr"> <div style="padding: 13px 14px 3px 14px; text-align: center; font-size: 14px;">During a short period, you can buy a decryption key with a </div> <div style="font-size: 25px; text-align: center; display: block; font-weight: bold;" id="discount">50% discount</div> <div id="timer_discount" style="margin-top: 10px; background-color: #219653; padding: 5px 0; text-align: center; font-size: 25px; font-weight: bold; color: #ffffff;">--:--:-- left</div> </div> <div style="margin-top: 17px; line-height: 18px;">The price depends on how soon you will contact us.</div> </div> <div style="clear: both; float: none;"></div> </div> <div style="background-color: #F53636; color: #ffffff; font-weight: bold; padding: 19px 24px; margin: 17px 0 24px" id="lctw"> <div style="float: left; font-size: 20px; padding-top: 3px;" id="text_file_lost">All your files will be deleted permanently in:</div> <div style="float: right; font-size: 25px;" id="file_lost"></div> <div style="clear: both; float: none;"></div> </div> <div> <div style="float: left; width: 540px;"> <b style="margin-bottom: 11px; font-size: 14px; display: block;">Attention! <div id="test"></div></b> <ul style="list-style: none; padding: 0; margin: 0;"> <li style="position: relative; padding-left: 20px; font-size: 12px; margin-bottom: 14px;"> <span style="position: absolute; font-size: 27px; left: 0; color: #F53636; top: -1px;">!</span> <span style="color: #F53636;">Do not try to recover files yourself.</span> this process can damage your data and recovery will become impossible.</li> <li style="position: relative; padding-left: 20px; font-size: 12px; margin-bottom: 14px;"> <span style="position: absolute; font-size: 27px; left: 0; color: #F53636; top: -1px;">!</span> <span style="color: #F53636;">Do not waste time trying to find the solution on the Internet.</span> The longer you wait, the higher will become the decryption key price.</li> <li style="position: relative; padding-left: 20px; font-size: 12px margin-bottom: 14px;"> <span style="position: absolute; font-size: 27px; left: 0; color: #F53636; top: -1px;">!</span> <span style="color: #F53636;">Do not contact any intermediaries.</span> They will buy the key from us and sell it to you at a higher price.</li> </ul> </div> <div style="float: right; width: 230px;"> <b style="margin-bottom: 11px; font-size: 14px; display: block;">What guarantees do you have?</b> <div>Before payment, we can decrypt three files for free. The total file size should be less than 5MB (before archiving), and the files should not contain any important information (databases, backups, large tables, etc.)</div> </div> <div style="clear: both; float: none;"></div> </div> </div> </body> </html>

Emails

[email protected]

Signatures

Crylock
Ransomware family, which is a new variant of Cryakl ransomware.
ransomware crylock
Crylock family
crylock
Renames multiple (8382) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
credential_access stealer

Windows Credential Manager
T1555.004

Drops startup file 1 IoCs

Processes:

2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\how_to_decrypt.hta	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Windows\CurrentVersion\Run\25E0EC0E-DD8DAF01hta = "C:\\Users\\Admin\\AppData\\Local\\Temp\\how_to_decrypt.hta"	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Windows\CurrentVersion\Run\25E0EC0E-DD8DAF01 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe"	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\1070772 = "1070772"	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.

Query Registry
T1012

Peripheral Device Discovery
T1120

System Information Discovery
T1082

Processes:

2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

description ioc process

File opened (read-only) \??\F: 2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

description	ioc	process
File opened (read-only)	\??\F:	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

Drops file in Program Files directory 64 IoCs

Processes:

2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

description	ioc	process
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Full\NavigationRight_ButtonGraphic.png	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\BrightOrange.css	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\server_ok.gif	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0297759.WMF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Concourse.xml	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\APPTS.ICO	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Port_Moresby	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.e4.rcp_1.3.100.v20141007-2033\feature.properties	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\ui-bg_flat_10_000000_40x100.png	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\SendMail.api	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\bin\how_to_decrypt.hta	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File created	C:\Program Files\VideoLAN\VLC\locale\hu\LC_MESSAGES\how_to_decrypt.hta	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01152_.WMF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File created	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\how_to_decrypt.hta	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0279644.WMF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\utilityfunctions.js	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Library\Analysis\PROCDB.XLAM	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCAL.DPV	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\ar-SA\tipresx.dll.mui	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\numbers.xml	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21304_.GIF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Indiana\Winamac	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Analysis Services\AS OLEDB\10\Cartridges\Sybase.xsl	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\RECYCLE.WMF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-core-ui_ja.jar	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FieldTypePreview\how_to_decrypt.hta	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\ant-javafx.jar	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.ja_5.5.0.165303.jar	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jre7\release	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\favicon.ico	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\SATIN\SATIN.INF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\BG_ADOBE.GIF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\EN00222_.WMF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\AddToViewArrow.jpg	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Mozilla Firefox\defaults\pref\channel-prefs.js	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\how_to_decrypt.hta	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BLUEPRNT\BLUEPRNT.ELM	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\REFINED\THMBNAIL.PNG	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Kaliningrad	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Microsoft Games\Purble Place\it-IT\PurblePlace.exe.mui	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Trek.xml	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.diagnostic_5.5.0.165303.jar	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\MSOUC_F_COL.HXK	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-nodes_zh_CN.jar	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Niue	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\requests\how_to_decrypt.hta	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\msadc\ja-JP\msdaremr.dll.mui	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00373_.WMF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.docs.ja_5.5.0.165303.jar	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Shatter\shatter.png	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0216874.WMF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Slate\TAB_OFF.GIF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\jmc.exe	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0198494.WMF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15057_.GIF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.help.ui.nl_zh_4.4.0.v20140623020002.jar	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-windows.jar	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File created	C:\Program Files\Common Files\Microsoft Shared\Triedit\es-ES\how_to_decrypt.hta	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files\Common Files\System\msadc\ja-JP\msadcer.dll.mui	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File created	C:\Program Files\Microsoft Games\FreeCell\ja-JP\how_to_decrypt.hta	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105496.WMF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18256_.WMF	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

Processes:

2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exemshta.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs
adware spyware

Modify Registry
T1112

Processes:

mshta.exe

description ioc process

Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main mshta.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main	mshta.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

Processes:

2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

pid	process
2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes:

2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

description	pid	process
Token: SeDebugPrivilege	2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
Token: SeDebugPrivilege	2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
Token: SeDebugPrivilege	2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
Token: SeDebugPrivilege	2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

Suspicious use of WriteProcessMemory 4 IoCs

Processes:

2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe

description	pid	process	target process
PID 2524 wrote to memory of 4460	2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe	mshta.exe
PID 2524 wrote to memory of 4460	2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe	mshta.exe
PID 2524 wrote to memory of 4460	2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe	mshta.exe
PID 2524 wrote to memory of 4460	2524	2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe	mshta.exe

C:\Users\Admin\AppData\Local\Temp\2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe
"C:\Users\Admin\AppData\Local\Temp\2024-11-05_5f43ead2fcf68ab420a0b563dd1b23f4_cryakl_darkgate.exe"
1⤵
- Drops startup file
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2524
- C:\Windows\SysWOW64\mshta.exe
  "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\how_to_decrypt.hta"
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  PID:4460

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Windows Credential Manager

T1555.004

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-2872745919-2748461613-2989606286-1000\how_to_decrypt.hta

Filesize
13KB

MD5
43db186dea0ec19fd609aa1c118060de

SHA1
48d7fa4f08d5332937b03d29b645e1c42cabb0ec

SHA256
51d5289460520ed54467a256223999b6a3233ba2db809fcd68b1806524b6cc71

SHA512
4f7d49703e3b79c5b49a7af340e0e61dbaf9efabe7bf55bbee7f24ae511898e096c0fbb70c0744281e9d3187b960f469583fd917cf8db7ba62e813781d25853c

Download Submit
C:\ProgramData\Adobe\Acrobat\9.0\Replicate\Security\directories.acrodata[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
e36819a41dcb6f8b0ebb6b3f97702fde

SHA1
3bd925e51bdc2db59346048a6c3df33d9480ce4f

SHA256
c7f1756c038fc1de086e27e73ced3ab489243cbd045aa9a303e314f693d3aa17

SHA512
dee2b36e1fe6007dfc296e70af53317454c46a4b821ef4afd6aa43bb7f6703e8e646364cd213c82b2e88ab14232b3d58538a04fe703964aa5fd913e6e5687d44

Download Submit
C:\ProgramData\Adobe\Updater6\AdobeESDGlobalApps.xml[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
936B

MD5
d311be838be4c8f76e479dae83913994

SHA1
623087d273f79473aec0aa5c139467716ea42cfc

SHA256
f72e18140f754fad31170a20a6d5d9fe18543339fd2c3a1348aa27b0afc379bd

SHA512
ad23354e6b7043554a7183801f1860cd30ba0a5abcab9fa0aa26c9172dbe0927be3e65c9e1071c5d24a35a51eb61a9d54b0061cafaf8b9d9699d707374ac5634

Download Submit
C:\ProgramData\Microsoft Help\Hx.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
951B

MD5
4c20cf1cbcdecd065d11056f919bcbda

SHA1
a6ff72abc6cba999ff3b2346e1485e338b4fdcea

SHA256
c7ce619ea9a96cace24f86f7bb3e32ad7fb872cee215f5e3f96a984ca24ff891

SHA512
362842b5b97f354d0867d1b4e52c13a87d97fad859da91cd99118fd3b3385090c879825122d7077e7e145462ed6e47adbbfc00a43e83ac7dbfb10e9d774c2630

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MKWD_K.HxW[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
14KB

MD5
31e93cf230951015dee0d035c5e5480f

SHA1
d65bed368ac6fa498dadbc044eb36939ba1bcca4

SHA256
381360203088f44fd675a58232b714150cec7d4b9486e26f17df9512cf84658d

SHA512
f447723bd24255bf696b5bd5b027a1fa29763a7fa37ac5755e8d0aae7ae3a20c1605524e3d24686571ced06467fe5ce4793146ed74f827ce2e5a9ecf8a8929ca

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MKWD_NamedURL.HxW[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
14KB

MD5
27b738b9278b755e716d0bf7aa2d6833

SHA1
70334e9468557a3a80391667e4de022c4c6b402a

SHA256
c162dd58016b87da7ed86de4e8b9d36c14fe715e42fa9e92caefb794f8ba2c73

SHA512
67a5360e20df9d1cc528e87aa533741117d345db403643d878464c93bb2ad5b8ddbfd2b9d46b26347af75919e3e938899bdf07f8a3e185a47108a48069b6de4d

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MTOC_Hx.HxH[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
10KB

MD5
5d9fd36cdc0139ff00a25f0ba005a97c

SHA1
9e16d1cbc4112eb12442da8fb1d03f7b01d76716

SHA256
57cd8e14ee6fe8108684ec92bd7e71ef56b8e7a9c19b989142a8ee650d7945e1

SHA512
f6b61b2dad522bd637d736ac043d47afc3fd249f493f693ee801ec3289478235156819e8c23016e9a8990d728d7d7da1e088714e7ac633fde4f248608793e953

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MValidator.HxD[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
10KB

MD5
4d468111faa3ba227b9029adf35aaa63

SHA1
360ac3658239ae0215d289351dbecbbd1e4335be

SHA256
aae2bc80dc4e08712a0fabe2466700cdaf9ffde6e8b93acd87cea2a7540c90ed

SHA512
cf77e70db820842d57be6aa5a10282ace812796874c68500dafb238d548b52af0cec478df42bd2f353618acf0fb8eae49c95c5dccefa9f6734057949a46bfca4

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MValidator.Lck[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
659B

MD5
55e9c18b4c2f53eca7f7855f656aab1b

SHA1
c0f3b73e2038b948146e1a8417b273f39a9e0f6d

SHA256
17f22d7836d03cb1bfa88aa90179b009155bc4ffc32b060a369e049f638945c2

SHA512
801349d32a41ebde6b0a8fdfcac078ac5982524a5e8b776fc3c4e636c14286b9a1e648e17b381e8a9dbb01e091f049f4beae3a004c4d008051b8f8dfa8768b10

Download Submit
C:\ProgramData\Microsoft Help\MS.EXCEL.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
995B

MD5
082e69afc8f8343d09cdb9cdec6e8665

SHA1
0d3e9a8f8cff9c30f65835281c156863f898489b

SHA256
c62407853e189e69242bd4676851f29eb37e330fa8c0892cc503d9689831910d

SHA512
d2a07251eb511472ec19c9b3ed7d7b47a0797872e189e34ed023efe1317b6a05803ff55704f50307af58c6a715c856132f005d37df95aaaa775843d5d9634c58

Download Submit
C:\ProgramData\Microsoft Help\MS.EXCEL.DEV.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
d3faf2d69f295694e19eb98ab70831f9

SHA1
0e128ae6fc1501e285e0065caa31b58de159d35b

SHA256
b1a02466f11fd46397b2a187ab52740750ca58f1abb440cc6aa2cad9843aa056

SHA512
fcfeabc48a57325c6d53884702516a5b3ec9ed3b516cc8b3f9efc9dbdb9faeb9c49516e32a21c8007cc6564f5178994c7040f3d1b24f8852b97b7df2ffbe2ca6

Download Submit
C:\ProgramData\Microsoft Help\MS.GRAPH.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
995B

MD5
2f3e509fd16d4962c76b7edd02a5168e

SHA1
df68582595a9b57f6d585c524086a30fb3a82f4f

SHA256
bfbc2ea63c87f6d7cfc718032e89ec3fb991c0f8e36ea98afeaf757051c1dc4e

SHA512
ce61b98497b74fbf7e0f6400ecf76e358b769e7bd27c96fb8ed98e157d661b535c0568290109a9dbf7c35bd1cf4b3d918a46d1b376f2b3920c3377a72efd505a

Download Submit
C:\ProgramData\Microsoft Help\MS.GROOVE.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1007B

MD5
6a980a8c33dfba699ca3c2eb6ffc725d

SHA1
24e4fbe9c96a1d8293829b2fbd2fdda684124ffa

SHA256
9a28b414c8ae80169d88d0a26e5df6eeb7ffe50ea04ad6a2e575e3d816c9662b

SHA512
dcd9f4eabdbce10f35896ab5a89d219869f92fa1f3240b7cb4ef97e6a74da4e6e729591a767d8a0ebb73235581fda2652136d55171a71dd6fd6c45db59ef4d4f

Download Submit
C:\ProgramData\Microsoft Help\MS.INFOPATH.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
ff8f47b654313b10e03d5771deaecb42

SHA1
e0923265e348cf05ce57624dca09754f9592d2e1

SHA256
bc4c93bcd42edfc0da88408007381913ea441f4f33cef0e3a753837046a587ae

SHA512
ffcd07d8c09733f0ecb5d85090a95b253ca300e869d5f08a0873eeab13093240eb2857d2684f8d0b55eaf7d752f397b8c313bab4cd1b5e93e7bab2c77d24a5e5

Download Submit
C:\ProgramData\Microsoft Help\MS.INFOPATHEDITOR.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
79965ef3c0603812528b345e8e638cf4

SHA1
6df78bbf9d6dc1652bb4850351faf00b15735d8e

SHA256
2e0f13b1271e53b5b1a6869a1ddda1da598f127c322598c4e17b6dc5755c6ea5

SHA512
497edea3d82880bcd4ddbcd32c08f398e4cdac8864b74837f4b0a0f71c8321f4481892f2dc62bd053dba8041570b5bb1a2037e0502ced76b75694036cf37372a

Download Submit
C:\ProgramData\Microsoft Help\MS.MSACCESS.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
defb7dfe1c87d3020c60f070af963872

SHA1
0eb17077b8b8d3d3c0c4c0d673bbc0d9629e58cf

SHA256
4771aff4891d5e0e4d4185ef185b2132e7f3df7d7d199c9781f0a8bc61bfe067

SHA512
bf656409eb1fd085acfbf56568b98c9d6ee0f5df41e82bbc84fe926d6d529b364d665d365301337b70c4673d2ba9b73e81e4024f57cbccacca6858788f5c0ff0

Download Submit
C:\ProgramData\Microsoft Help\MS.MSACCESS.DEV.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
9f5813373bc5c21e8088522ce8f35aab

SHA1
b4c4263ea0d1515f22bf892b2fa03cc733252d49

SHA256
02f4cf679a48e32c3942c9c3306c6bae5968ce4e4d82e963e681a2d53cc770cf

SHA512
1a4fba1f5f383ba35fd53c436dcaf044ee74df77052231036f21ea64cf40eb23803d5af2d8a1178dc3a2d3a8dc72a0e3a556e38b096ff1d69d571da33313961d

Download Submit
C:\ProgramData\Microsoft Help\MS.MSOUC.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
995B

MD5
73e0fd89b2cca005a0d767c07c5de6fb

SHA1
5bd9c41c18f172834a21734a40094e74ea62a0aa

SHA256
f031524a828905c0b428852d4cd8b29d39727f151d4ac5605ccbbb6de5a60b0d

SHA512
1b66f4f23310d77f4bef7d4830d7bbd762e46a19829930ab952285af080f61220f747a30de29a2fcc35ba45a884a8081cdd33c0541d1b6a6b9ed561549f2b23b

Download Submit
C:\ProgramData\Microsoft Help\MS.MSPUB.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
995B

MD5
eeee8a90ce78435075b1e02d7d3f1769

SHA1
1b92d72d2d6d7868d771dc9d546a3ab95ea5bc05

SHA256
37f0771b8ffff67a56eb9581cd8f4a1e6c52840ba901f067712649343907b04b

SHA512
fe4fbcbdddf7aac4d72403ddda501b572ad58b12178656be8c9a485d152769f4b972b9ec4136ebdaecee321ac1fec2a70af4d37c0c8c6fc29919eb6ca3b874ef

Download Submit
C:\ProgramData\Microsoft Help\MS.MSPUB.DEV.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
c9b27c10a0a3e9186d10f6d3656ad353

SHA1
eee17e9317ef0dcda78b6f865978e1ab00e65a78

SHA256
babad5fea22bf701cdac5f62b51356eae2f40751bd1c82e62b6bd232a4d9d6c3

SHA512
4aced302097a67716e3d594b18f0c920bb032475fbd903aafb84428c9d0149c13ddda6a25c2800190a7715762f5f8aa3ae12ceee633814c84d5a049a2f3fdf5c

Download Submit
C:\ProgramData\Microsoft Help\MS.MSTORE.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1007B

MD5
e8f5a67fc5663adc788d54ebc7abde9e

SHA1
e7920c7607579b4c633fa87db1d7fb1278c0791b

SHA256
8a70443bed94469e527185ce32f360671ace17df70363e6f35019f238f0a30af

SHA512
e8a13c9cad9adf269e82f130465a1333ee57bc17bc1efd14c59e4fb5933fd886009bc02f2b04350292d607f3619417251c88e83469e46dc38369ed098b3f2e02

Download Submit
C:\ProgramData\Microsoft Help\MS.OIS.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
971B

MD5
bc7c31aca34c160aae3fb1b965ac3cda

SHA1
43f139953b679e4ce60ef64f914768873b139297

SHA256
5a631bbd318cdc6296e435e23c867a818346b49152a6910838d8e508b169afbf

SHA512
af5ba21f9a4501a7ff00e312adb3a35e370e1ac77a5274ecf4eaadbc7d6e4f4e0a57f4a24dc1cbb1d619818f257ba56df2ac8b6e7aa45a8bbf0e604acd381198

Download Submit
C:\ProgramData\Microsoft Help\MS.ONENOTE.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1019B

MD5
5cd2f670eb7c67455ebeadcd60d8b32a

SHA1
2aa5845cc7d4a5a8108dc4ce9e8613d7142dc8f5

SHA256
7840b10c2b7638dccbb4bed4e3b953b150683d73307eac9ded8f9cfed44cd4a7

SHA512
d595cfc00f5b0548b9ef6ff47140f5eab74fffc43b5cacf3f84f937f15ec17631fd6832b7c41cbf551d904bae0e6bc3209fd980813dff5500febb58261d5fa1c

Download Submit
C:\ProgramData\Microsoft Help\MS.OUTLOOK.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1019B

MD5
94f12c1451ddc663edc3334476b6325c

SHA1
ad2a8cb11d4db5c27841873a28f8652b40b66e4d

SHA256
072cb1626801309fc7029712d03c1b22e15e934b4b5e2e58651dbef72d514edc

SHA512
77ebefc5c7da3fc8387fef3bc78158e78407fa22e69f3fce8ed3311e0610b90c257eb9a7077efb04aa33c263ef1de5a706b354441a4979cfbdb96701f218cb35

Download Submit
C:\ProgramData\Microsoft Help\MS.OUTLOOK.DEV.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
63669a506e527cf1aa16ec1a8d28d430

SHA1
ff7e21649db654eace61360ae2e8b9d0701e74c1

SHA256
4e794a7aaf68355af22908424baf6ba631a34819adc4d51b98a9a4b0f438f295

SHA512
ab6859651243e89f9492e78f31a443c24e0d3e91ac1979c8edd7e8a49d7b716f445b15113d57d54b7bc16b85f94784e863d1f3b0ba618300375c96709fbf97c6

Download Submit
C:\ProgramData\Microsoft Help\MS.POWERPNT.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
5f3f229e0fd9630a6b76cc8e10d0d9ea

SHA1
a444d7de92c96366215d5234cc92dc1b65038504

SHA256
b2da385208f7eca696986e76be94560c0bebbc1bb34c5ec068e8d48f33132362

SHA512
8ae1eed5b9cc71be689f4a19c57ecdb029066b90c4672e30783ab4b87f74ceed69a6f42e0819d5622d9d3bf2cb6dd26fe4fa5bdc2d6ae648dcd2f4db79de1d8c

Download Submit
C:\ProgramData\Microsoft Help\MS.POWERPNT.DEV.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
c843065f5be85b7808c880ab428ea120

SHA1
e624ffd0e1ebc113786bc6e6822c390ccbeef1c8

SHA256
1898810f07f3ddd9ab1e0d7a56d67c193f38e560a20ba57e87732584fff60c64

SHA512
caf119a7df8c61ed9ebf007496ee475587bf3e7b20c2776e6929f8a160209f973f339e675c4cccb044d57e0779b21a58c7fbfaeb3b7f298c27f0ed6bb085f119

Download Submit
C:\ProgramData\Microsoft Help\MS.SETLANG.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1019B

MD5
34443dfa4cea42b4ae0efae9814b3ff0

SHA1
d15ed23af2c022c331c694f409c56c2926a6f5ba

SHA256
c7e1be89580f75d12070a517c4149fd91e5ba2a6e40a26ad4fdbd848a50327db

SHA512
00aec1b0213d6f4d3516874733e6055af438621a90f30f5b728ce31679a1fe099207b92769a30dd3e5563eb1a177fcf893033c0a8ecc177ce882e3eb2163b832

Download Submit
C:\ProgramData\Microsoft Help\MS.WINWORD.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1019B

MD5
2c44cae4dbe0a27492e8c5f0a03fd890

SHA1
8da9647d292bdb5beddbfa541f550d9e7d219296

SHA256
e32896dea89c717d20b15635c67a3a23ef500d4d11bbbceac6450717b99fb604

SHA512
50e04c1d74d22494c9acde95eef9025180c8fd873c91d42524254915bbb056f3490133156a7fcd254e09b6a1eec74392477b8c4a6076c80cb53635ac3bc73c25

Download Submit
C:\ProgramData\Microsoft Help\MS.WINWORD.DEV.14.1033.hxn[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
b28074c0327bd86a8b0afbb7863e31d7

SHA1
9aea6f915bd54af0ec41fd319016d550554ed386

SHA256
2a7452a9e872a13f5d9a9b391d18eee6eec2be15eddf5cb9138a8ceeb480141f

SHA512
f1f9b1ada269a74846cb44aec6d4ff0c9c2a7002682d3089461e67975ddedd2daf0abc6ee30832bb691bd724d212ffa81cc588d30ba8492b4fee6cde9e1022ba

Download Submit
C:\ProgramData\Microsoft Help\nslist.hxl[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
7KB

MD5
a01bee4b364dcad377261fb09a00df30

SHA1
2e24ff8fb89e90d92e092ce90189d6c3e4bb67c5

SHA256
3833aad89b50a1c119138013c0025195b1818124b8aaefb9007e5d2b60d0f8ec

SHA512
6ee49235f2a0f230771dcedbbd796cb32335e71a0af791204a3cf02e95a7c9d69cd7db159fee1081d33b5e09f433f54f3f6c131a4725738bd4efbdade449d98d

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_CValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
12KB

MD5
b197c2678147d346019fd630abe571b7

SHA1
7f457eaf9283de4cfb34ecba9e4957fda6197ab4

SHA256
b7fd2192a14c3a1fedcabf6fd3349620ba2efa5192bd4a5c6598c4b35ad9f714

SHA512
3358575082b91fa6ee64548b922bb8cf6a346462e089eab9fd0fd004d3dcccff37453f51ede6a6bed76feaa20b3fdfc504b3cf2f3c917e5453d821639778b5aa

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MKWD_AssetId.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
230KB

MD5
2715a5dfba983d5db6de473f4fa280d3

SHA1
0aa4d9a17f7e41d07ec34b4ab2a9119ab7906b8a

SHA256
12f6580577d83d9ffbc10708ad8a5b763a31ab7d219669cb85461777ead9a5dc

SHA512
e8eab0f7431c78e89fa6189049deb4008a109070a7427d504fb5ca4f2ce0d0564f37654b68b1e4136b25f06645b396bfb2e957c1ca1c02b1418bc0b296b5b9d7

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MKWD_BestBet.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
410KB

MD5
091c6b5e07d6f0e97a880959b97c5bf2

SHA1
722e8d93c65ca15d3147ce61399134423e7d0c09

SHA256
83443684eaf392436c7ed3130b3b61e548ea396a548eb0bff0d3f2d632a98b51

SHA512
37c0efb94d3bfe985f5434c6202b0e5908fe9c8d0202b71e5f495e3c825393c77f0c2dd1ed43c481787b99e0eed51ca94a01734b29cb806c8b982b15918992ad

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MTOC_help.H1H[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
532KB

MD5
e29434974135daaabd47e9357792bb26

SHA1
1e6f3580cd31edb3dcd286032f61668d7ac3ae38

SHA256
bef00d36ee9d47e6f92bcd55c4323a92c8b4268cadbd5e1f86fcf96ba7a98118

SHA512
2fd5dc8de89c09666ea82cc1a5016e3ec1a9e9cda5c0b0a66acd3913fcb33538db71560b05cc0c2771e93830565a65a0a2ab7aaa65fb93b5b8d134790a948f44

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
15KB

MD5
fe9c326d149804d4642f340db6ae8b6f

SHA1
35a84947ae2c395897313087347dcb0aec137f76

SHA256
90ef1211a137181dea231dcb30bddfbdb6f8bf86a78417f7b4bf4a79839f4616

SHA512
621b22d923f9cf3581e288501411d191f90b224ad3af08a8bb9945db5de136d27e6b92758eaec224fafbf68a43dea78eff75577e4e881d17683871dadca16731

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MValidator.Lck[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
641B

MD5
8f588227b7829e2b1e0874d41029cdba

SHA1
05da2f6269876892e0e180aea2c252bac248f2c4

SHA256
ab32552973bb5ef260b99ee2f7bb6e71bf59ff88f8fa65023925f605a2c38701

SHA512
1e105f4eed8cbb725b76e4f2116334d2339a90cab1a356236c55b8a5f2a1732615a191cecb71365d6e8e0a7d994328037c0d4b9045c0f42c649a49773fde819c

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help{45EACA36-DBE9-4E4A-A26D-5C201902346D}.H1Q[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1.2MB

MD5
404e7b12a9fec799c1c8bfabb85733a6

SHA1
9d9609c9bf60d64e0a7aa3c49fa737a94a013eb1

SHA256
58283a5ea1fce36c373f250c22cbacb56f5ec9999b76677e60facd0d74f50bf9

SHA512
26a496574bb59ef38955d2ac4b76522e5b250b46d09ac8376213ed5825d3413ade7b3d48de9abb429daab4f95afc7c2c9d123fbbaabc53bc5db22ef874bec8a7

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_CValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
12KB

MD5
d5deb0d9384f904707476b156de49604

SHA1
0e7a6a298b351fc47c193dd5892097c2f8aaedee

SHA256
cde970f53297a94b94fc1e710621b054fbc73fe2279d0d1e00044103488f6766

SHA512
4cee9f9bf95bc4f3f847cd6611ef0a378ff79dfee4fc594dd1be2911fc0fb52e0a630afd688da0de25d0dba64e97f9ba40b3eaf46001c8e5ee2724a841693bfa

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_AssetId.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
230KB

MD5
2c2883d076a8ee9a22247c452d6e73bc

SHA1
6749ed3d662233a5abd8617196b7905690f6c0ab

SHA256
d225de93cbb9438cfc572bbfcc8f8525b6808ac101ea943536519557b7286bd2

SHA512
97d6b329b9a6c0092ab704482199ff9dd0011cd9944ceff1de872a772a90932f5f120030732bce2735cef5f55f3de3558ac3d70153698c9b969730fa98b0218c

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_BestBet.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
202KB

MD5
3d4a759198bc4e28a3939c98a0f51d8a

SHA1
fc2b8e340619ca590f25d3db62177aa40ec2654a

SHA256
60160bb7c66b9ae04e40498d07491bd5bc69647593d3560ef5d7df8e60007522

SHA512
adf4987fabf16715efaccd56f6665df2177f4ddcc0794db3b2fa0c73630b1ba130e410a6c5ab4b7c615dbfc5d6f4b83ea3f45cb40bac34beba857549afa94764

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MTOC_help.H1H[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
491KB

MD5
384e10da55af3fd6f42f059d63c8e593

SHA1
b0fa4a90a76cdeafea77113edda5bc02ab6b1ef3

SHA256
f413dc91294184b1c192c05a2b151510406cf36219ff74bb8c66bb4802ff583d

SHA512
758bd016ce44360fc0524e4b007a642800e8edf3c986113bfe4172071162e6494a01f6c6066793284fbb38b6723d0058baa028954dc0fd986bbd70773263ba68

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
15KB

MD5
89627223c5209b783892155e7726d448

SHA1
6972cb924e9512ae24a80f5ae57c53e4a1688eb2

SHA256
c044f201ac30f8d23ae050e8c7d02f44816be415907600e4c7d3f1f246160adb

SHA512
884306866b7175e173170613fd8dc49f61bc963eccb0ba40d322ebadb52ff4ccd345032984b4c28a139031319ac07fbc6eb9b620b81b9b25122aa9a6662fa3bd

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.Lck[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
641B

MD5
8808220290bf3920d7d122396d0d6db2

SHA1
db8797aa3a7efb9e613fa48158288c9920d1ac96

SHA256
85caf465c4502ec34fde07c66558f47c9ba9671f4f10a9966975a29657d584a3

SHA512
4f92d9f5d03e13ee23907ce1575c5fc8496c917232434f16986bb21a1f2eec2be3fae31ad824e9da29270b3d67db1adada645a2c3b5f0c5a70e02e7762be5bd4

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
865KB

MD5
f673c892a3aa5316ae01c47dc9f1d9db

SHA1
b8b627d4e2920125c3dad0ce0a2387cee3cde8de

SHA256
cba5cdccedada08c8e6f0ede0e2558232aa4a1bb551ca650b054572015e45e0e

SHA512
89ed9a870a720b006c09a360e11e3e1b37a522bc36a5755505b71c0f99ad41684b515ba96380e7e87f0c95434d630cc76402a0029c54164419081ff8c1efb6ae

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_CValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
12KB

MD5
edd69a76323770a142d8b626bcf34f13

SHA1
b896bb6b5d12c53dbc33393691b2c15e1a94435e

SHA256
a822bae3751b3edc7d14709ed1a1e9ab587049a3fcb928597aab5dcb35aa2249

SHA512
21398237f15914575bc2a562d65737d76244c7e8dad3a9e56e48cdef5d8b200499af366553be588a267b217cd9a1ca950b55273c35599f357adc5f7df77b31ef

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MKWD_AssetId.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
230KB

MD5
60fc2b4a800dc3535c1315231e7e9fca

SHA1
c449c6a92b9384186a6f0995dbe498e6fc4750ef

SHA256
038e455d2c1df3618fa2c05ffdcceaaf177fab49638b0b98ed2187ea68e08434

SHA512
35e4b16e1a448972250c8c97021527dfa6fe9cf96938134a2236831cd8abb180ca93d2c5537399c20ba0c9321fedeff34e6e33c3a18086b0401999298ddae323

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MKWD_BestBet.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
426KB

MD5
4ed4aa4f9bbf5eb7b05ebd5ecc1cb957

SHA1
694bcf6280e97e656ae10ea3862ab67aa0b89081

SHA256
3a5beefb78f6b53309bd868ca3db40a92da94e1f5b60aaea4e1cb3561a16a236

SHA512
b64bf37252df2801b1e4a496475ded446f4707a8f0e10d2adc690649ad522ad32d88e6471fabe9adef7f003fdc4e133548e7b49e7cd8cf4cce8c652b90df2247

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MTOC_help.H1H[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
531KB

MD5
93add8dcc96ff20ae58605216ce9d74b

SHA1
4cc453d1cebce36c4e9aaec47de353cf3dc1b9ca

SHA256
62abd263313d61567febfb545ac57b796236f5061077895d097dc22ce9e03b38

SHA512
07ba8ef3c1e96f0f0b331143f09c91e850f25ee2486e9cf5de83e0fa7a4f11a0a39c5d92db09abb4a413a644a8d1e9fbf90638f061a3d787a5dce3dd02a51715

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
15KB

MD5
920fb8c1ec861b243fb5f124b15216b2

SHA1
1dcd22b2f15347f90432f8e87d75b47eff1d67e3

SHA256
f8ac92bca5abb5a2dc764a284d09d53bf64872790490cf43c787c0e6419e3a3b

SHA512
be318c79a4b25c0c46167509e9f708985bbf45840ccac6484f81ff4d50eb7e4aaff7d175e2e010badb4ea7d8f06e4f389076f23d83497021d3fec480b2c4db6a

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MValidator.Lck[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
641B

MD5
5e4c7e76ee37ea6588b817f98586b662

SHA1
4d11c0de329af91bcad781f6280335c4699d5143

SHA256
3ecd25eacb9ebf94caf69f14d7aef61598d7f77599c78e1d436694bc8d4373f3

SHA512
28173179361094f2432a591fac53ddd710dc0d8b09bdc2cc46ffae333b92417f0204f4625d90b37efcab28cd723d8313e41c436ef6e54a74d81a9ba0ad932fc6

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help{68DC71DC-2327-4040-8F03-50D6A9805049}.H1Q[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1.0MB

MD5
6ea4e5c7cf6ba83c8bc45e61e376109e

SHA1
2948961819d59ec8e90e6643ef9ad3157b0e74a5

SHA256
890a4ee1f2d8f1fc1afbf29a811579af3e429193511a0f6a6bc975b5f96d4d42

SHA512
0822c38f197c900cfa2c422d7af349461b2c3ee52a442cca29b0f3f706381512025f52de318acc999d07042cadee7a0f59467e0ed794f99fbafdea2be422bdb9

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_CValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
12KB

MD5
8b6cc304c7e8778ab59e73ea97bcb3bf

SHA1
1583be7e7914a9a55e0c1afbf5815aefda5147b1

SHA256
2467affb6d5709bfb1cb1162ef66b4891bd3c702abda94ac5278da79e5108b16

SHA512
6edde4a5d2e410872eeda09758eccbac02d74082368d1cb97761a4e07ae8e7f0510b0e6a7456ae45400978532a33264fce402c587aa62cf782ee4822fe40bdb8

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MKWD_AssetId.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
230KB

MD5
839878e72e26446db52f4c20692c5fa3

SHA1
10cd4a7a2648c79177236999c77d4007f64dca50

SHA256
37881032d48cdc1f315f42aceb672fc7866ec510486df2a9432b40d16811046c

SHA512
273e1536d395bc503a1aed87710a0f821d348d9f0b0c7925fda32d4217dea51fcfac0bb2d509e82e5bc9fdfb49ac699318dcb1666e7bfae01fb08288f2e470fa

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MKWD_BestBet.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
422KB

MD5
bf57c58ed36df0d79a1cdd00a173a3b2

SHA1
d2a25971eb193ab220df2edc7befedd9d92840c3

SHA256
f890b02035ee277a73202d161a4bf394adc44c4e1033e42bca060a81a6bc5685

SHA512
920750e576cbef09d90d7620011aa5d29892582a5ea9d97156c69ffbaa2c7a2edd4ae0994580abbc6bb9cd8ece6711406cefdb0e5aca67696979a97a086cf187

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MTOC_help.H1H[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
546KB

MD5
ddba28292d46426cebb2610a075445e3

SHA1
364bf95139873ade51ab35ccd71808461fc1933a

SHA256
7d96e766c96b6f1a1cb4df089f1f37a2e067a708debd617d9e5b43515b3d121a

SHA512
e6a4ef1c3b8d3d0d330906d038aadc17a376cdfb576371ced38d687287f8c004307c5dcc73da57f2c64a6c40fc6cd8184aaf822a32de2d6f250328dbda59ec12

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
15KB

MD5
7d75207939d95eeb94a0e19826d84784

SHA1
3ea94f5aacadb2fe14690083dbe28b947f28ced1

SHA256
ab0dbefee26298adb2d01f175182fcb0da1c7dfbd2daeb1a1a470562993450bf

SHA512
ff0534af3a171a4de91e242d29a068cae4fd23e3ec0cffb1ded5a36c46567e94144d624c00310a9377893d0ab7a29ee98f161e1b0ceffd58796affb1c422fbfd

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MValidator.Lck[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
641B

MD5
65614acc04b4b2800e902caf96d6ea0f

SHA1
fbf36095ce1af213acc85bba00fd7431ea2e0695

SHA256
8bbb3a9fb74b36ce34f4dbc25cbb6ee7c384bb6522af7f6f03f8a66087de8dc6

SHA512
0a8d5e92d6340bcc096a80cd4e664351fa6addab5b67cb8c69704c258c956e752d1173fc69d53bdb8b8030522e7a4a08e6e38133cd0eb636df9ba0bdb356d3bd

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help{92F2118A-E813-4A4D-9DE2-F96A9DC02C53}.H1Q[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1.1MB

MD5
d145c68a9b4ce4ecc0d5aef6bdc2dbe4

SHA1
45f21d2e8b0ce52a1da8abb60b8987a83b978501

SHA256
ed539c08c0c35e57b0c05110c7f27d23f8e3f7c13cbc0a225d85252ab263c433

SHA512
2cc5bae7604a82356c2122e56b39ff5c28ccf6aa0088f4eb6620b990fc43a450c8496cde9914844d3d43c74a62f9d0133b612572d1b892954ab963aa4bdab087

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_CValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
12KB

MD5
c39430e86b9df0058079b2b4fd479443

SHA1
8d599a0a17ed2b9a244a41308dbfc639de76f41e

SHA256
6c11c3a35484f88e82139529bb2173eb11c4c8cb4fa00212e48bc2fe1357825b

SHA512
6c4226673102ea565f10989b48fd7e406a51afaef3f46f46f62d93f5fed34b593ca9b66c30b2132f72715a7f6092a231b6ebb88b9ea8110d284c4fc4ff4452aa

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MKWD_AssetId.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
230KB

MD5
3c79731be759e3031a46871b470b940f

SHA1
191fdd72b115901e92e67aac57ba2a78d2b4ae95

SHA256
9c307aca45bfd37615063f551ba94388d4ab2bb1eeb3efa52460136dff442f8d

SHA512
e3e725dc77b06c00bc6e8d5b8de0cfbbe1a354c49e1ae725b6b8dbcee209a1445b7e5faa66b16e8350f068780d598e0b08dea4b6c423b77d0e0bec2c600b55dd

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MKWD_BestBet.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
422KB

MD5
4ef16ade8942b73ced0fd98bbd7392e9

SHA1
32513b658c83a79368587945d5b364959f20bbbb

SHA256
d751dc572a516a3adb0674eed75ce5f585713e8f5589c92467a213e899891fe1

SHA512
2528f30b61fa29f39c45c60ba126305403cb120232024a13d798da06bbaff38e116a45d8bbe4f54108905d8cd052a978d75cf66a3a31341260076e6ddfa029e3

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MTOC_help.H1H[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
531KB

MD5
d54f60835e595c110d6ae72aef310fcf

SHA1
a78d138d2a83406b48613ad4354dfd9b46395e67

SHA256
49bb46dd7af121249607edfcf95341a21930a866225b38ea0189175b27f20408

SHA512
a6ef44cee137083bc1f6c02bc3dbfbbf6379f8426ee051d37bdff51bfb8dbc679def6cb1db908130cec0ed32e0098265b4c81671f6cbccce89d0429ac9cd6ffa

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
15KB

MD5
216515869ada3df275eb48ce0f9a7e1a

SHA1
30ba34e4ae2bb307b7e47043c90050ed84bfefb8

SHA256
1344afd1c7fb69d1e3ab9ea7c16d8218f49db89d099b2bd481f8e0bb8ed324e6

SHA512
7a01999d629295eeb86d47b6d4e3888d2fbd81d6e0df29bc02250f9426c657564940f8d27dbeb866b23afe05ec88a181116d93d3d8a5d0f557de06abc9dfb933

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MValidator.Lck[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
641B

MD5
d85ea37931f5a430dc83750b83bad04a

SHA1
d5822d76258e894cfac22762d631ca7da40c3576

SHA256
f186bdfff5c8d70332a64c86fa75bf15c5b80be2647e998d417258b56c401c9e

SHA512
892d2a51563ced8957d7e07d682f62310e7e656cb872c1a66a035f8e375807ed157fc3a982a795ee92b1d1c6e65989c2299ddb9648fa59ccad7c563dec5f8c10

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help{7E352021-69D6-4553-86AC-430B0D8FF913}.H1Q[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1.0MB

MD5
b76b4391e905a7cacd0512cbdcb5a7e9

SHA1
bcf86755dad0220a728ff52daff88a0e62ef0274

SHA256
a52473a8fbd13072ec73214d6c2ea89d998c1022e8e7c481e25b99d2f963b64a

SHA512
8aee4655f6eff892e9346e776c4f6e28d81c932cfb71e859508cc91df8bab2581a5893d511d57905595d446c7c997caef3a932038fb4c3656636c282a4a41691

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_CValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
12KB

MD5
d945fda2bca062cd1f659ddd32c4a421

SHA1
f03f57effd469cdcf15adff9d4c8e7add6e7b875

SHA256
8fe25dd3b44e27ccef94399471c0fc72b0569470f059ede6def8ffdf7b292808

SHA512
08631d727de9b0fa3ba240930500c235ce6c5c0cdd691785df63d117fb9315af86c9be316b6e99539b64b2aa167168a8c7039dde853bce3aa3463af3befa92a4

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MKWD_AssetId.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
230KB

MD5
43b29e541418f0d1d011ac29babd2550

SHA1
c4ec03e3d04dce2dc921c7c8ddebc50536b554f2

SHA256
26471b65f1f9f8d312472afdae42f6abce3e877b035723810e3f1c7bccc250a9

SHA512
1fa832cdb2a6b05ad0d6efb744674d34dd91ea79e93de88b7b079edc208eb80eea33a3b0088165f8b332c87602aaa4f92298fae97d06273f772c0936b87fe04f

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MKWD_BestBet.H1W[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
358KB

MD5
1f0a7265baecd3616d58f04897eb256a

SHA1
d5b0ac3a01f7582c533e8397a83614d9a4584fc7

SHA256
4b2a4450ebfea91f5bdbf576e6a515911f91cc9c6990d5dae6cab7f3d7ee16d4

SHA512
c0b8d651a7176cdfbf00a0cc7ff86736d118bcca3c7a44114eefb1dd2ce907bb7677d174822d45b6e9563f8af0976ee827a7efb1b4c9cf86f003a35a04ed1aa0

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MTOC_help.H1H[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
352KB

MD5
bd8752fecc9fed18eb89d3a824700c69

SHA1
4a6559450e96b5d4710cae04b79716e2189fcbdd

SHA256
c08ee3a8d185f52414b519103357f9e55234f6161b8cf2e5deeb35ad311f695b

SHA512
6364423cf6a938f8ff8473d86f657ad7eca600a4542f790d7e83a60a5bc7db45fb7894626da741667d0169641bfdf0a1f53e02bb0de7aaf0817bdcf1153552d3

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MValidator.H1D[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
15KB

MD5
fcd8e94619a8673818246017399b85c2

SHA1
22b6addcfd3e0fd8a46f0b082cf7241edb7f3fd4

SHA256
f2d065dd11549c492902d1b99c6b96da3bfea8e3ca6499caede3b60ffe1f3354

SHA512
5cd3894c398f53b761fae2b51971bdebf3b8fa3c0890382c1758854dd661e26b06b02a0e827d55b8d15461c0d12a21e8141003c67101b56c14c87379340a2f14

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MValidator.Lck[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
641B

MD5
c6c54f55ed65ae728895a5deb0d37647

SHA1
5f42120020c14a6a2ca1d267a44d9be170e82992

SHA256
24dc1427a3130d9ca1f48f5a2bb15eb04c84b9bf214742d5cdd9c41b74a39daa

SHA512
23d286c0b59e9846f4f2834b054845f0c5513143698c2262866836d355aa3eff27acd69f8e7a96aa2fca38893e5d23b29ade48515a795460a1cb5ad9b4206ba0

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help{E1E8F15E-8BEC-45DF-83BF-50FF84D0CAB5}.H1Q[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1.2MB

MD5
282ec19181070634d79656cabfa107f1

SHA1
61f6b30f0ed3b3c88a20b6aa171a55ea2d165bc2

SHA256
08720b7b9085bc55526c47593575a647c6f1346a210e3d19c4315aa10afd30ba

SHA512
8bff27aeeec5a4cb54d6aa915c1a30966614f0cd8773c369a5aed2e911b6174fd21b736465928278a86dfe6db988f3101bcf41fd49da9f64d6b4e68bb910239e

Download Submit
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\6d14e4b1d8ca773bab785d1be032546e_4d69f9e1-559c-46cf-82ac-67913db47c55[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
985B

MD5
7c569d0f2ee596bd385b1283fa651592

SHA1
0ea8f3bee2b26706c15be0882fa452e1688947fa

SHA256
25df8993ad9b2b52357a24eec8b7a8edfde06a86dfa921b91845022aca791ba0

SHA512
db3e096c6f91a4df497ab7c1e1a28e9d0fd2a2f563a8fcea91e4093077ef2b7b1dd7cae805f3e2776cf2c01886c415c41b013d858d08144d81f1f7f553bbbe2f

Download Submit
C:\ProgramData\Microsoft\MF\Active.GRL[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
15KB

MD5
b4a3e0cf0288dc99a5fe26a81a1c8983

SHA1
2c061a6aae051eb055e23e509c11059019903db4

SHA256
ecaf736ef366dff1e030dcf7130978dc323c3ed1209cc83639287d90a2c45ee5

SHA512
d5a451976a6b68f80d6787fd6204e908c9bb64ac67af9d1127a1bd535a176524019905883d2de3f3aad33e93db7501bcedd5ff2e4a38e36870ff91e82371c077

Download Submit
C:\ProgramData\Microsoft\MF\Pending.GRL[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
15KB

MD5
9fcd7b41a6b7a818d01fe156ee2cee7e

SHA1
d7527c1a0c9922047a51eabed0913c10f17b13c0

SHA256
d1dcce89ada805e9e430922a88ae6a2fbd7fac47693f37411e87e6c8a2aa0e73

SHA512
556dc30bebc615af9ef5a5f559190a5c0a3277f4293c0e5b3fea14af51cb9d7b7df3880ea4216c0047f10d609968d8c56b090240aaba8758e5ba8e1c86005414

Download Submit
C:\ProgramData\Microsoft\OFFICE\AssetLibrary.ico[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
5KB

MD5
75058d8643ff04aa109a54a212a71d8e

SHA1
1560ad337d0e945be3b0e327d704139bde6fb742

SHA256
e0c33e4491dcaa683bb0c73177e714757071965914b8a411f5d3c40a62a9d874

SHA512
72e100541a9039c4928f0348c027f67acd0861650a27cc775246260f22c2cdc383d33211276700e0aa5b3640efa1c9d90877b09ab1b0fce957b9a0fa00bbd9a2

Download Submit
C:\ProgramData\Microsoft\OFFICE\DocumentRepository.ico[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
25KB

MD5
bc9dce9834c0e43988f13315525a9579

SHA1
a69b4faa2125ad0f46ecb245c1b77378ea42f28e

SHA256
cb84aae6f2152ba324396e4b2444a3d3cfae42ceeefe7b62a23e7fa86ba938be

SHA512
17b4fb300c85c52f4a840b0a69f703aa82acdcc16332ea2bffce1cbf653889d9f2c41cfceab463f013cb972607e1225bbb0d02434b918b14a4f51ae9015a0760

Download Submit
C:\ProgramData\Microsoft\OFFICE\MySharePoints.ico[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
341KB

MD5
2fe21afa20b8392e10ec9a03697f9564

SHA1
363e2e283dc9ccd011c80aa95572285fef11e845

SHA256
a18ead7fa81f1d7cc0083db38f4b60669a85c73d79258e86d72231619281cd76

SHA512
8c3cdf90f09f0ee36dd5071045b69b31a419a217e14bf407001052af67732257135b67120e7fb1be23a3889642c4d5fd096a6fa9656c04b9dee2a38b8a65ed74

Download Submit
C:\ProgramData\Microsoft\OFFICE\MySite.ico[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
25KB

MD5
a04e12d24c0471433c47addd44d8f5e6

SHA1
6c2fda58095501d933ff18b97a036bbc8ba7527a

SHA256
1f4937648082a6f71b0cd582705e0c9443688e370ef2d7df80d40bedef8f3d09

SHA512
40574719bbd20703da32c7c9eccfb8403bc6a375c375b44013843ca2286f589e03fb9f98d8f1265722192d49bb9170f759cfb2ba4f6ba08c3acf284b8e084221

Download Submit
C:\ProgramData\Microsoft\OFFICE\SharePointPortalSite.ico[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
25KB

MD5
b23e112f9564d377c2d877c33f81de58

SHA1
0dd7372f9badfdea57ffa5aaeacc36351be4a7d4

SHA256
f071b0242ecf4bb918de8515ee66bb629d9caabd55231fb855fc0c62fe19372f

SHA512
bbe74f5be81fa3e9444065c1e596d75022d9d23acc43c373298e7c25fb1bcab6a7964ecded620e9529f7d8e1d83d956ee19f7d6684482ca62e79372e42215eb2

Download Submit
C:\ProgramData\Microsoft\OFFICE\SharePointTeamSite.ico[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
25KB

MD5
9a878a544fa6c892dd6a68133a885d0c

SHA1
c7778a32db45830e2523fa28091d227d8bb278cb

SHA256
27b3a5cb6c9eb31d1332cc99c156266b29011c5403bd879d785e509f28ac378f

SHA512
61cc2ab6d37d1d36c574c0b41d6323fe04b28c20c967d8508e68c56857e9c8fd40c858dd6b7b7ee6efee49926fcecd1f5fe16396a430c43ecde747832dcabddd

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ENVELOPR.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
14KB

MD5
463ecfbdf0d18358adde9d84dbc42a7f

SHA1
03421fb5a1411a17310244e0d0c6f7377bfa386f

SHA256
4dcbc6f6aca2d9f9d6b474adbf9f127f239ea9ff3abc4f41f9f156eba1fd7d0d

SHA512
d1c4dc3c52a198e70de4d6229e91b340f42138ed92fe95f994582d306b83f0080ad96a68654fc96480316d228977b69a033cf0c9d17753938c39cc5315714078

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\GRINTL32.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
48KB

MD5
6c5257e011169ab797b92fc5abb81cf2

SHA1
f5197453da86fa45d5e0305e152226586cc586bb

SHA256
8994821ac8a47b73a4456fdf595e3dcb6715c6233c148427d58d21bd0d7cc1a0

SHA512
fe7d58b4978d3f19f77863ea43c3a80d179f1501001c6e4dc59b1fa4c28769388e1cc36720558e5f86e99ea165533a3d4ae8dfd2f4f4f01a88c64711f646b5b0

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\GRINTL32.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
246KB

MD5
bc604d478c78a5e14d1edb678c15a933

SHA1
23b18f929f56a72f601b5844788d976fb4e0a92d

SHA256
8f8fbdce9f8d639ef7325296fc73b00434f517880c6efb2c56947c4de6753d77

SHA512
0444b6a013c7cacef733717bf0269e6aaca84b527f9be4a381eeaa2370a7d31498898713e40a0949bd0b6af1dfc840f0890f0e553902ca9c2ab26adafd275ee3

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MAPIR.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
296KB

MD5
fed083007bc1924989ba29928f50111a

SHA1
e551280510f0d9a55af3a5c9bb8fa13f7fb977db

SHA256
a0a1889654753cbb05693cc5f53457e4a631119c000fa615b650ab3ea82f66a7

SHA512
6a77b24f9c32563c75e8176803f5b79699055cf86f740963773a8882bb1a884cc4b75ce32974ba3890b02b6cc14e51c0861f7b8895fad6fbab9f3ac54b247fb8

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MOR6INT.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
48KB

MD5
ecfb93ce2ee196aa272ad64b40263c7a

SHA1
f82c662898dd387a816c94281aed0d647f5ce960

SHA256
c3995a06a2dd3f656d97b3aa6899a692128d658f59182b0db98e91eaf01e70d6

SHA512
405c51e1cde90ef3395beb40ebf8b754cc98e3623a6ca86706a9679dc122f12f5bff2624a68d37ee5b1d0a46d8a40ea6e4dcc6eb7977a73fd5a4caff24e6cc70

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MSOINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
94KB

MD5
34f707f17055d8e2215d67f882c14013

SHA1
084c88d9651adae10f2a5bdc10c49df01f13843c

SHA256
40de733506a3884e52dd2a18fe0766571cfdf7d1a916db954a8a709b4350cd32

SHA512
b55f3b429693f9f317f044a6e7e09e7442ccf13328a7c32e28e298062e30a535f2e80e00cc8a91dd9c2a74a8bf0a00903b8b5c09b4688749cb50f5b581598037

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MSOINTL.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
2.8MB

MD5
6a1460e0dc82fee5fdd97de8b3c1d41a

SHA1
b654600e39c2f4644e143b1fe596bb2452917ab9

SHA256
9629cf34b9e68ffda693f8ec62a525d421b95a9b9f4615cfbaebca5e1fc1a012

SHA512
a0eece50826b66960b49d9972582127b286791979ecb95292a6ec30dee82d4ec04fcc7970c374ad929945399bbebdf598e4eada8f0d9d0c75e96629eafd39c15

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OMSINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
45KB

MD5
a5e9fee6020ab16f6221c090ab6ba12f

SHA1
56e074665a67ed331c8f13305f22940c05649ae9

SHA256
da60c895cd58635cdbd90a50ac1eb5d6d14f457d680e6537c7f4a1665d39cbd2

SHA512
5dd3f16508ed59cf0cf3efc6fa2b00db3f2f192955b7c2582e90d5ad482ae27c24dcd84f92dd71baa506d37c8ccb2771e2ed8ef39fed0f4615bfe1da7e5972a0

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
31KB

MD5
a291e016b22c3fdca9f109c3361e4fc0

SHA1
3b85bd3e0c8bad0d0a34b36f5f5d21b73317f53c

SHA256
e7acfa64060b3e505d54704fdab6b6d84617e71f23c59b057529dd911f281da4

SHA512
254cd196a8ee18eecea7a6a7fd7a81132bb34b0063a00aa892e4ad5762912006a576b81986ad0f6e529a577e023d47ede09f42094e95bf7d604f6c41127a3d42

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
255KB

MD5
6c6a48c52a996d1bf797923719413bef

SHA1
d8ba9ae5581a32ae12f335b145b229a9149a75d9

SHA256
2d93eadcb938f5d4bbeda32e6b8b644924b92e8eeb34bfd00615d9c9719b17a2

SHA512
6d7b7b04a753cc8cfc29e1304e79369c45ced4d12740d21e364df49b6d05f0a7b30d384ef0ba4bb2e2c2c2629190631f5cb81bc7338a97f53e68b59bbf8d1d3d

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLLIBR.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
221KB

MD5
0c0a020533e1c5cebeff68f6e857df0b

SHA1
5d592f3d6e85892cbf01dcf7cc67c21339b2dde9

SHA256
e479da4dbd9cec9bd2a3dae5f2b5684743b4ee5643ff2643fdc090c14cfc097c

SHA512
17b52eb96d1ac1acc2903c03a2d75ef178cbc037e1a3b0732229c5a9016816f8f9e05e959019f5341838202dd9713c65478f4a7eea7f0e76e27158a58d61554b

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLLIBR.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
665KB

MD5
c0880abe9d874163cf19e67a82e510fb

SHA1
611a257fc5d3f60d0000ad232efea1f3a1d17624

SHA256
6e508e35f5efd09b96b359ebe183301a022e97219d31901dafcf137d40217332

SHA512
0931fa7195bf44e53d37c829141e17c0bb476b013b5f580a052d0df07e7f8c333b997238a57eb5574e7b5a0e5bfcd5f70dc91cae5c8a9619be901f7b311bb568

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLWVW.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
11KB

MD5
dbb98823ed8db81aa6c23e1775c8941f

SHA1
9459f988f4cd1c10f3ef00af6e1b56513f3cee76

SHA256
7bc4250dacec25246b0c21ca2a3a9658a537c1630fa74eb33feb5701da2fb19b

SHA512
45d522026b0ecddb7e0043e5cb4ecac4322f1b2ddc1d08f96880be8444addaf73142267a5a3f08a173a576883057c881fa26c881b1e8fb6de65eb6f3bcd82ee3

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PPINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
51KB

MD5
44c6184d2a112823b4729e6b40a09f03

SHA1
0f4a886951a8e8ac40a9c4a5ead32391b167b04f

SHA256
009d5585c4ca2f5f6bc506aa08eeffdd822131604bcaf917ebdff342a5c05df8

SHA512
df70bb81ac46b95c5fba29472d7ff9cd8a6f0107dcf51536aa5840278138b3686fa99d53f94b9a0ba776e772dd08de0fd357a92c55f74f29dc4320da2cb231b1

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PPINTL.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
280KB

MD5
d77abe3ced581d1e0e26ee067e0bafa8

SHA1
c076d605833ab85a030bc38c48d2998bb60b2026

SHA256
f68bbc707cf8f324ace30d2e3c1c91a98752bb4a5c7a1205d523dffebb4d9b5a

SHA512
ddd401d334c9ebae7756cd8b450a19b8c1395d1f8d73c71d95437c543d176721b2e584ace69b4bd7c256e1a7c3d5842aed8aafddef1d0a95c18ab6ed847a645f

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUB6INTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
105KB

MD5
826d4298d5334c0c33cc9e1c284839f0

SHA1
ea6bc1fa94649bb2b0d01a0104c2afcef94ad595

SHA256
c5c82439fd30696333268bf1a0df9deb71cbf5b7c241d8f6903e78df6d1172a3

SHA512
1a935f78a0bd30ba2ed4a11268c747bfc8dc60b9054f1c297d63da77fc170d29263909a859fa08331df757035b935586fe98eda699c0a1c0241d6c0dfee99ec1

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUB6INTL.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
568KB

MD5
1b19e6feb05749ade0c7cf6cbab5955f

SHA1
a650cc31878655aaa0d7f0c69a517c3da64587ae

SHA256
a6c0a1c6ad27aa4949528f6c9c3c192cf70e68bbd03897ec39ac5a2be5860c7f

SHA512
cdd378529fbc43374240e259e1cbd3befad9c48d52b403693ed1d6f045389930baf070c1e5750b734b2a85b7895de55ad80f7ebf34d6b1aabbd91d65eb8bb1db

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUBWZINT.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
363KB

MD5
09e5022e0e36012e41b245c0c66dbe5a

SHA1
0cd4d24c495b6debdc6cca5c1a7a765937469fc7

SHA256
1be777959c9d2d25cd16a97307850ccac4f387d0c60e4753af80953c84252e2b

SHA512
6d36fd03c463ae02e8cd7b01d79bc295369c9da8addd91c4a8b2e5997657533dff1d2a5e711a36cd2a15e46ef72399d06b8e0becbec87cb145c5bfc90b319e26

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\SGRES.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
13KB

MD5
ccbae8956a4bb9e7580d27889574494e

SHA1
4bf981827565f3721d8cc9797d231c3b18115c7e

SHA256
0b15c83a673fc33375310e5ddee5290475d85e1f5852bfbeec8a5f8730626c22

SHA512
14f8834cfb824356a4619caa1180ec5317f54a937d971022cfcf525ab28aa7464a149b6a35b0eeb193e9876ac59f7b8f5d82108585c1e1a854e30228803e3500

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\STINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
16KB

MD5
f38caa763eafc9721da7e59222e7c226

SHA1
9f6a8624b260475d0c2bf6a307b0c3ac6ea2193a

SHA256
586145a389e329a4e8d192cc2ae4660b21aaef63f141e2f50412679d5d16c379

SHA512
4d60ecab37825fd80083849a178f13fce0d49cf416a211996c8da7efb86e72e64b4a31a9e075e96e6ca139e37f0d99bfc5045c75dd809e088178546ffd0cac1f

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISBRRES.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
26KB

MD5
8d77256e963fd5f86b36aaaecf208597

SHA1
368355fa30cef988daeb9bcec4ba1da4f37577e8

SHA256
fc55b1c6f97285f4c34e496b046c7a993e17f433368486a97a7b73ec2cf50fe9

SHA512
b03ab29df55f7da321c36d746b27b6ff2a8459b5138e7ba5e66161b9764dcdda7d0d13e34379b634d9ece67789745f5ecb2b4da463320eb1570b79f3090c7cf0

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
477KB

MD5
e670727945091b39db9e7e969a53a3df

SHA1
be67e769e60aa6e88d8656ec47f89f0eaab9eff9

SHA256
0ab65a6e097b27246d34dc2c00acf87e57d446995a62b4202447e8a98da47cc4

SHA512
ac19d8e34823f2de82847626f078ad24319a32c39554b665aa737f4af61e04c116ce9b24067b242257ec3a530b937c4d34543f4bca35e7135ba189055b0a688e

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
151KB

MD5
b5cf962ab473d295429cf11b8b4790df

SHA1
3c5347136d5f2f6fcef3d135c01453aad112319c

SHA256
067a5d9c163670de05705e42441eebfe206fe55e62286cdf7eed26a3ccfce88a

SHA512
bb4b57a1213feb13f86b0c563e7b2f16c0dd691d15d6931e6e70dcfaa0fa922c5f7a6cfadb092c1bb7d99a858b815ffd3469a5fe12b01015516438058e227d11

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1.1MB

MD5
aaffa9be126dcf6a21ae95358a5f3054

SHA1
14c5912355be49c1d72d58b4782b78a75dbc2d28

SHA256
378bac5fd02d02632c7c370309da2834bccc9786715824ec604198c0e6239c04

SHA512
ae39eafea47d3d294367b27da471831295cebb3c4e2a6fe5d5afb0077d0562e133fd64522ce046056be1bafbf9d44cb5e0ef2609031d28fc72538cdf90609895

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
149KB

MD5
d36fee17e671ab784685758acd2627aa

SHA1
9bf81837f7fa934fa45fea8421e944e54214cac8

SHA256
1c7dd8a1745f63f3ea939d5503d44d0cf0a5b4cb4cffd1e00f33ef929662cf1d

SHA512
c5030095b8b642e20a392245f4f9ae35073465f1d331766f24405c734c14826aac0cc0af2856ec0df9a84b164086cfbbc73fa9bcc0f407c87906a6f03482cb0f

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1.2MB

MD5
c651bafc337f847658d27f8360bc524b

SHA1
db40907cef589b72f5ff1960257aaac6abdd92bc

SHA256
30c9f475ed958a281380bb9bd82ba475996d2fb614e15a408c9ab7021c5687a2

SHA512
7d8842e77340201ca29b0f8ade118c43bf4bfa591e8be90e3d252d1be55247183e361c39e83ef7f900e387670f2b427d48ecc47e6d3bc77ff7bd5e6a4b03f34d

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLSLICER.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
15KB

MD5
79ced42b3af2d3ea7cf6a38bcecf354c

SHA1
ace5f2c72ad10189571b573804a8e6aa2675deae

SHA256
35b868916ff983a0fa855021d36641de2442f5e2dc6904fb85284d5384853c94

SHA512
6c8e2b00316fea31950d0cf01304fe5865305712934e31d4fe37bcb9ca70ef3502556042b8bd3713635eeaf7bcc9a4a2d80d125e2f4d690888abbca19127c161

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ENVELOPR.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
14KB

MD5
d29098f77c3e97b4bb7765522c57cf3e

SHA1
9aa013ea59eb4c71e6e8e8093b381b7ca9791d58

SHA256
a9dab017fe8615c6a08d12cc20d9b6e9740d4d6320e820a232c43fc671d7cfce

SHA512
c865097ec2417cd61f74e215b3d8014df7057dee0836fff5048e90984d0c356c6d641ed84ad47d98b6cb037efe44703c56853d38a56d4e9ef47f56104b064bd9

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\GRINTL32.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
46KB

MD5
ce58fad6e8a2025c647a694a83ff4b02

SHA1
602daf2b9f75d69a703ae9f7eb9846301b44c96e

SHA256
c2082438528b627700c7c7f35d22d8caf523b375f77d49db0db4e4e046c8a5f9

SHA512
0e670a5e145b41e72853b4f3026cefb1a6c54630744ccfc29f95a0ba1a39f511fcbfcda7d60a09f23107ff79efe75308d0c11f4944d2be85bbd56668eb01d3a6

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\GRINTL32.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
230KB

MD5
c07b44babdfd59ac80b1d67d544abb3b

SHA1
0541a40a7852db6c7f136ed111bc8f2a3d466ffa

SHA256
a869f648608d4e76e19b64cfb2564c5b1a288a379d9643e37b916a97726d14e9

SHA512
991fdc5d10cea201aaf2817711ef3c5cab9ca2881a45bc5fbd2429f0d8abf342689b951907cb8c5120011aee5a0f5370e91996c42aba9ebd779f3a94f8e29868

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MAPIR.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
287KB

MD5
dc6d9eec4e596a923d0adb4f8eaabb17

SHA1
f1b449c6dad183883e413e89c83f65d3c655e943

SHA256
5057e9b3a1323dfc0435ec2521f0e39116327b7dc6eb617b1de0b8956aafeaf6

SHA512
c2a133a995c8a1ac20b8f70d4c158a8fe3d0f26039cb726af4cee036e1be8ea00a3c89235624091afdbb1e1a2873e7a0927f99510d7c125d004ede941dd4a6a0

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MOR6INT.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
48KB

MD5
febd54b61a5d36234008ca6037a6d81c

SHA1
0f15a9a4e17c465b1b04f57036053c2c22a6ea3b

SHA256
19e70440e5a48ada2e51663c30f56c89a28e94de16451590599d2fb8f31822dd

SHA512
c3f87373fd8540293094986263430edab9bde79e7a3022cf209c55ed99430ee42e8ada72891dd67dbdf5ede026b44951c108328138bd7aa1a1ae0e15551f8676

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
92KB

MD5
1953700ce69861e6b8d27d82e21119d5

SHA1
e934df64e0f56b59ccc5ec8242193f0729d53730

SHA256
912ddb39f41ab6cf147cc1daf6dcf48ee4bb90840d95916488e24796a9871564

SHA512
31cfe201444be1166dd90b3e0dced36a222c7073274cb6a67591cdd9e063c1213ba048d2496c66d1ab02f58edcf79ce420a310470f801a4e40b612cfef02cad5

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
2.7MB

MD5
089bdb3ba9001c46515a9f6388bcf046

SHA1
24b68f7a8e3aea13b00f8e358e63618e05e303c2

SHA256
4df3201f6eeb39ad6429d33d674dea87f9ea6cd2c93fa24aeee14c2ebabbc569

SHA512
3a50d1a2640982d52fd053e9b38b1f959bd4fa5a7011cbeac361b836d86b87e1889a3a6e5dc5baca941d851b5b91782f0895fa54829c8bcb17ffb7df16ddf611

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OMSINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
45KB

MD5
f83da02b714eb06644be6b77d97c3035

SHA1
ca9e977c343bd1840180980009ee6258032ec5b5

SHA256
24a8a0490eba88ca569597f5eefa06481f8ff360f0b40b62c1b22ec3493f6f3c

SHA512
f47e974da034e8efd40b017ce44472706c88a6f718158cd831ef71ea8929a05a13b9eb9427288e06dc94540451b9c8fb37404ff1b53b5bd316fbe5c0adffee6b

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ONINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
31KB

MD5
30fe421c5665f5925a1dd1a950f9009e

SHA1
d8140a34bb6fec5e099ff39ce537bfa8a71afcb1

SHA256
bc3daeb26f9bc7b63adf2600f1a7dc27b0b9267b8afddf97a2ba1ff532fc3d70

SHA512
6d10fbef8ce0436006dde2aaf68fd432d800f40d44bc7b9e2b2871eec2f9d1cf690ab2227c8fb7a0b6c9890ae0f3bd3d3454df3f032ebb47de4a2d6f47ad40e3

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ONINTL.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
246KB

MD5
562970e9948e09961cf6858447f2449d

SHA1
edf91aa73f5c8163bb63b8e8c30efb797debda1b

SHA256
a83966aa5ab0d9b59a4b5f814ce4afab19d9b49d6f647ce367d21a22757d1057

SHA512
78f1d3f81822784b29c4a85892449753f2544c402b3abad32e0045d21fb34d8091c7b74c3aab49883d27a7b6431b44d4c74a1cbe3455eabdfe055df26b327740

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLLIBR.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
214KB

MD5
a18b85a33c55db5c731c750e982d78d9

SHA1
ccd250bc350a62f042d0ec8377ec547b247897b1

SHA256
d8bcd7ffe97e0b27bb07facec0a74ce0a25c3084e503bfc8374f3b9f87336aa8

SHA512
df14b24b7cf4706b01725789d013500f1773afddba1d0908bbf1426e51976f792ed5c3a670287bdd0123914c65827e81f1b7137a6bf82d7f259f1875c3d2e774

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLLIBR.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
637KB

MD5
b4e83b52a82201de25f6358332143c3a

SHA1
703e0f4c8c77e65f45863eefe86717000c8cc8fe

SHA256
ff5ab27c5c4a91a9a73cd66518070481ef2a857d87aa0ff506fac6201597071b

SHA512
5fc2c468814b3bcc819039f16999a48762be4bfeaa3311c6e6db4f56ce6aeab5b3795b6a6061243fa3542bb4070cc35ca42819ebda11401276fc37b1e591c2dc

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLWVW.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
11KB

MD5
4aaf2e7f4bfdaa9b3fd48d8f5e4c58bc

SHA1
3c16e09863dd92bf516dda5228dbdcfb34a6ce8b

SHA256
0940770fbb434d08335be877df0c49913f168b2a15afabd59d023c96e4342286

SHA512
bb8879af6f5b8016867c9eb6c81741993392a1a2dbd8a19cc779b78a3a54723cc51a2b92e90108c3f4e733698d4cae3bec79b63d49d99096183caaf025035a0e

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PPINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
52KB

MD5
b52e057f9515f2397e393ad3d8dc2eca

SHA1
dea6a17897abf051931e6699b1afd4ce2f51dc66

SHA256
0c4852627cc2202945c13161c166dbc5effe0594b85b2d98325c3874ed843e3e

SHA512
84b25999f6091f1778bc39596e14fccee34b44dd622bffc3568220ce9957d8635747647b076878dbb3eb05fa6cd0457b4f96d4054b561354fd4a026effdefac0

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PPINTL.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
269KB

MD5
1672d9a8e6322bcf96d55ca158898667

SHA1
3590182edbff50a391a9f15cc207bcb5d7a93364

SHA256
5aa32ddc0a5d892359b9e98a13442d06c5bbe2d0584a51c708ad87ab5ebf20eb

SHA512
a8b10249b35db5b4920d5369d476e9d2f53e33feed936195b5de9ba21fee6da45e2e86e6fc49a4dfbce3a681adbc41517c6ab10737e14b99105a607b582801d7

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUB6INTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
105KB

MD5
5684b1846b123e402b9df4590a40dc28

SHA1
03b009659ffd5ab4eee161ab32c0ca21b825e3fd

SHA256
941a8a7f4f05cf8d5426ed2ca072616618956d8da8febb414c7955fd8c6ebbfb

SHA512
2eb25c571fada6259874b08eb5ccbcda447231c84d29eb486698f8760753d24d6d2f0fada4e403f141bd40f9c6cd3ed860a14fec5c7f215c44a44098a3917054

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUB6INTL.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
544KB

MD5
08b51505f3c4a180b18cbc730ea9080a

SHA1
326c0a2c8f0db6e78ad870d91ec2d19d9a6aaeaf

SHA256
90e8ba23e7efa29258a66dd18bfaf1c509abef71c83d92b057af0f8bec8741ff

SHA512
afcf4c2235efe53f2cd833da80198eb8ad2de6f6eb4437be8a45d73580f34efb1c6d22dac11f22f0938693af07fe9eaedb944c92ac3ebe5fada9da60722a7a30

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUBWZINT.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
352KB

MD5
9a0e6d867f2c912240dc6420417a0120

SHA1
1ce4605aab71d1833aa3212a8604b2d01e5cefa1

SHA256
76d0995400fba6ac420343865695f5762b1ebc0bfe00c63d52e7e83897e039d2

SHA512
676eedbd7ff3452cc476ad27493b8efd9c2f003850b5678740f5e6ffa54ce9f828b5bb18d0869d66ddfe1549d55702a10a9ed14b261e0010109721c1fc6387ed

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\SGRES.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
13KB

MD5
91a7fd2916c373a85e1430cf507a8b98

SHA1
2bce1d063dee6001750607c7b818c76c30ec953f

SHA256
88c7cad9a226d1ebf729e6e581ef2c18f0155ce7ce5b8b4a3e259bcdfa8fe304

SHA512
240d895e173a1a1f52d78d9a6b55d8dc01e616fc9a984db474fcdfd811664522ba72d9cc6f5a991f969dc53764ff4b80c3be3963038b537f1a855bd247b8087e

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\STINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
17KB

MD5
f06f14c98f2db3b70f97a1f884f8a11a

SHA1
af27790640dc0af08b14809ab9db4d7735df8698

SHA256
7e8f053bd163f3125b266bcd303ecf7c375dc600f06352dee4ffe34f96d2165e

SHA512
9e95f245e408db42f99ea33bf8b930693b30d31828549cc0ed13b6492a4b8e10e375e443529be38aec914d3d327efcba50d2b42cd72ac466f434efeccf8eb175

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\VISBRRES.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
26KB

MD5
e7231564f9bfc8d19d6af8384ab4ceda

SHA1
cf302a593ea11f93592d6d8406dff7ce4fd938ba

SHA256
026a8838624cb4859f4a722dfb643d143b00389bf0d22a5fe60b87ba4c0ce470

SHA512
50315a6753d5d88ecaa4feb12bbaaf9dd03d0db7d5fc3919850d716ae9c59bf48a71a14177e6f75f6cde544fa9fc07f345473c8dc75641ce44b195e4762246ea

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\VISINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
462KB

MD5
152740e9e97b8391ad69076f626f9a1b

SHA1
7ca94819c92bdcd5a76054ea28c8bd893a118332

SHA256
ca090e56cebecfcc7acece7658d63ebc11452c45ef45a795101ee3f15b224016

SHA512
8e26bb805bd19b645d0cc12d212265405bb26964733be918c8248077072db2f09cc3c37c089312931bf12f3aedef81256b9fac7045166096f9cdd6f8cb1bf815

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
145KB

MD5
7c0fabb1a6b7c180efdfa1002542520f

SHA1
3a556b3ce4dfaab083f8e6dfff92dffa36a37fd1

SHA256
479da0642b60a1051974d857fbbafe0f42b12ae06c6e6c87d509ffef761f183e

SHA512
c52da50c74da5bb5c494d60fac6f6b9d6f7fe59e1d81ec43447612da01813733683a552b991ee1be782f8162bfd2a4ff039cbb3a39509729caa3a38a62018fcb

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1.1MB

MD5
5c54ab3bac3ee15d40c1ee644b314392

SHA1
5f9d6d2264dbf0ea80b80b7fb4e92cf2a40356df

SHA256
93666f25c7a57bece74d6dcbd58f123c6db4848de6a4be18b4f1744ab9a4059a

SHA512
b06da6564cd19ce31b70c7c70e94415446eabc5ca12aabb98ef7fa8b8c937353bc82a3691bfdcbb4b9c61667ad6e88a8165e8d2788e29c46007256256a960826

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
142KB

MD5
676979ae85de048a270b9fd5cb7be457

SHA1
8ef48649b3d9ff102160f2c560330fb621b123b3

SHA256
99bfac751f10b12b0b2747817e385c643a764e6bb22f329ae921e31fa248f354

SHA512
9d8b7f6add0afc0ff5d60013faf873730766473da5f323d0839c6ef256b4b7703039fdd645244ca57896ac063840482671c4504f1925ac0b49340ce54610c8d4

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.REST.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1.2MB

MD5
2221e104fe494a23c442bfd63c5ff716

SHA1
5db25d767e892ce174fe5fe7c8a3dc202b766ccd

SHA256
dd2a610ca75d5598c19ea2b312d08a4fb052aecc21c276055421e519edb2f308

SHA512
15b83f4ba023d5f8d2bf62eb19b9dbc52236010a645a7f9d3ca80e6421d26867399f4de879f308b9614b5c8665c32c39b82e91b21b3e6e03795dc21c78b9a73e

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLSLICER.DLL.trx_dll[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
14KB

MD5
3b6952dfc948e3f9c97814d284af2214

SHA1
55981776c1e120a495bf76dc7c7bdc04cd4fbc7b

SHA256
640b9169f28f9baf48ddf2d77aa4a2bb2ae0ebd970629622047ad5c8ff1f8ab7

SHA512
73cae185c872f32730c5cce12b3b8e0ea2afb21a9c94806f21db17ec7aae3d87611440878a3bafda49e616faf77eea863b02e9a87839563e1c9484911d8f307d

Download Submit
C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
32KB

MD5
ad7b8adb033c6d05914e637d98e153af

SHA1
590167470a3e9f1b051c0f67ebbef65bc34b45d4

SHA256
4506f8fa0a98b911311f80e2a1bd84a50900e4008e01c30191b7f94ddea34b16

SHA512
4590403fa7d8a2dbc2cd61319a1f4af7c4ed7530eff5ca9bf3b217baa9a3a9cc03d310673711385ba30365032425dcabb2301a413ad4cb8cf9be0e568875f123

Download Submit
C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\tokens.dat[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
2.3MB

MD5
6197e5e109327f6e9d591a35191e122f

SHA1
346961771a46949d33ec0bd1aab2886069643142

SHA256
9e0f9210a782dbc82f565d279e8997757ab275c040b91fa2956a2b804aba3583

SHA512
8d03d5cb241f63fa6f62b6e46367d209f95f65cb47745e735dd93a7fcc1adafda3f74a35e7bce110b589cb7c0d595ba2f201f7ea3e459fdd3d3f4918f9f87cd3

Download Submit
C:\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
617B

MD5
51a04f50a1bcc1a87d4536337278ef8f

SHA1
488e68c7a0052f300cdf18974f7f28ca2f6aba96

SHA256
32871ba50069edbbbccb11b84b33ae15ce1b88bd6b0ebe9ac581ddbea9b2d29f

SHA512
6ae25c148c3e1d3e554c893a484003114a9a9fa0d354351f986c7c467094b563387cee097c1dc52745fedef52fbf4ac87a7e4edddb3b579aafa1d34c4c9f62ca

Download Submit
C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\update-config.json[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
735B

MD5
e023c5372ea97bbb3c38121f010aac81

SHA1
176bbced5d33faaa88ea444c509c0454b1d89b82

SHA256
16b44a3bf9bf62c4ba6184d3edbcd6bf6d92df831f98b1c33401064af88da8e1

SHA512
17688df4c6cdc9bdb108f8173ced7f9623371ad0eed948f4d0b66cc1ddef22cd657f92d53b4b426417d3e94399dd1d2c6913077a6b4eb2669993984b394a297a

Download Submit
C:\ProgramData\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1010KB

MD5
d0aecb8aa2ee21d5f24956827976e419

SHA1
1f93d5541b6825dd833605539c972eb8ad04ae83

SHA256
e9a7e95b1ebf0e8558190bf0f844f15a8b56e7a8b9739404475cec6785bac63c

SHA512
224387d526f2939043da64a8f169735d955266390fa9167f4dc66a93a903ea7da31729c49b35ef0405916bd0cf26f3f7767ca12880059e0d830b1d66121c749e

Download Submit
C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
4f7e4f0bff91416f3471f996195fea00

SHA1
6d79ad1fd8834665ae3d92204917c770185f281e

SHA256
222776795898aeb7db12b0ff760b2f344fc22a3b79360e0138771fe471e07339

SHA512
970daff55de968c5881353edfd55b833cc14ea3a851a062d8a6b9052b82b0ffbf7b7232b3b96cd5ee93d5b591fc292c282f8320bff17882b1351247d3a40e287

Download Submit
C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
148KB

MD5
4428f69f6e846144ae34b99b2c5e30de

SHA1
67eadff164cebc5e64eb84df8af71a09c4521720

SHA256
3d22ea64c84d745ee8a86896523c476c8f9c4deb5b12ec40bd2037fd38cfa84a

SHA512
4d34ddb3402b5b46db36212f617d9ecd74e7626c8175a990ff9483e31ed5f90d8395749eb8099db85fb4ec2df51ca5d832c40bba1a7aec1c061b0e3267704ce2

Download Submit
C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\state.rsm[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
3a1945f0947207325c3cc8e33168fdfb

SHA1
6364497c4c65501fcfb76973b3904ae6898fe155

SHA256
61707a2ce0414943990137019eb5afb2dd5f4503a316558ff1877a399b3eb2c0

SHA512
2d5d5ece52396062d67d1e9ba79e9a16b2587e06e8619401f31d0bb5d855404ac40133b4753f18db3438c87988af64595a0f3d88d35d37c28cfa872f759a070a

Download Submit
C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
140KB

MD5
c1413cd828ab5c381fc86dfd217722d6

SHA1
49836e1342206d922077e3379f555bcf4eeccfc8

SHA256
7f58dec78a2d474c4a7fee92ebedcb2df51e7a995752f0f1167fa71e5e4551be

SHA512
c0168d2f030344d67ecde4e6e12aad24655d2988b596dabd8ddaeb8d911e4a9a41c6cb4b3ba56f0a7f46c664e2dfc2ac2faa550909c012f7e270c27675cea64a

Download Submit
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\state.rsm[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
1ad7f5a5a80b5204194c78100d01b851

SHA1
b32d3a303a836334eb005089b1aca17fc907da53

SHA256
457df1e29b76b177f4c172e60de8a7f6fb9845378e918d69ad14ec53b4dac210

SHA512
b39c70958631abc078f6aca031bf45064226163ddb20338b6153a31324cba0d6efca43eef0afe2afd53582223411dc8229d734c3030153d69bf15d17df5db7fa

Download Submit
C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\state.rsm[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
02118c98c1a5762ea9e481cbbe3fcb61

SHA1
9f1cab0709c99c153d862868d732912bba400b8c

SHA256
7082fba998633d85aff6be15b7615e63bb6fb3ad3d6c72dd07aed0eba3c6c199

SHA512
58e39bb040505477ecf243087a836298c44a40bf39c19418d6e09ebad9db378b884fc8e68789d7bb1e043d426bb7dc84d19ce04dd350a891878a0a2edea22f01

Download Submit
C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
180KB

MD5
9e05366657dc0ac0459dd4e282d8d6bd

SHA1
08e1fa6b4518f5cf8e15e1d29474f60aa4aad5db

SHA256
928bbb7ffb7b2a552260f32f82031fc30ea7201fb9462ca7ecba4e033553db03

SHA512
d94f6534ccdf99a14f063fd97a7ef0f10dd9e15e6baf051d1084dc7969211b1825ff1bf80fedbff70db3255c4173fdfeaf8d9338a9001d4d1ff21875e32acac4

Download Submit
C:\ProgramData\Package Cache\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}v14.30.30704\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
180KB

MD5
bdead805b66331f23966f35343de4595

SHA1
20c1a92b3308b103d3d055fa4eb3238c4b2fbc77

SHA256
dc6df533fd4e52a6b597086c0295022cee3a5f8f076c4cbb41b1fd414ff25553

SHA512
1b85abc24d3c8796fb17eb7cc13feed43c92e5f64ce0a94bb8b1b7ba63ffff73bf364d53cc0280de5be9928aa2add05a40683982c3853612bb113962f67f54cb

Download Submit
C:\ProgramData\Package Cache\{7DAD0258-515C-3DD4-8964-BD714199E0F7}v12.0.40660\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
140KB

MD5
b90d069bdf88e36b624a6b523aeba7d5

SHA1
dae7aa00ca7646f6967e99ab700e054e0e283d83

SHA256
25efc1df285e50329386dfb9f48aea0d699456f6bddf708d6025d05c41a6860f

SHA512
d00a33c33754555a4e18e8a0e91c3bf9ac6093ca69624ef0fffb59fbdcb6c5701d6febabf2846f33b63e087e73ff9b4e5f2591324bcfd3e6e0e3600e797c501b

Download Submit
C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
148KB

MD5
76df885cecf13130147c7cb5e2059a5d

SHA1
e16e3d2f19f8a84a1ba3848f697e4695fecae747

SHA256
de633dc100ee4a327971a8b8fb7b9a3433320d0efce26d7007797842b0ddf883

SHA512
690b232dea19213e7e7695bff1781feb17aad95c3f90068596f94825af9a3262d6a8638e8bc123527aab53af688b74738245af9a9b757c914a43b077caf50ef3

Download Submit
C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
148KB

MD5
6c11bef4912a6d74caa8357f8984eb67

SHA1
27f7bd2695aedfa61fcb4a337e8427d2ce930855

SHA256
42eecbaac1dab84713767ec9aca98aef6bed1713f3dec4db04822567c66969b6

SHA512
43c9c73deddc65c10a29d6d7c1ef610b170d9f5d220c30e5f4f5fb8f0bdd3596d2691a56d79b0a43be96bd064d69559aab11d7a86c7502bf3a93ced7b02ae50e

Download Submit
C:\ProgramData\Package Cache\{BF08E976-B92E-4336-B56F-2171179476C4}v14.30.30704\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
180KB

MD5
54ecd5a310c508e4d05c59dd36863b95

SHA1
187eb9d458101342d6f81fc5367c3dc7c269ea0d

SHA256
47709fe7010eb158fc29c6f117b89d5c56ba59335628254e5ac1cec63c878363

SHA512
9af5938d87a2c76c52def5aec8fc948cc64aa933e1cbd315e5b254c866f8d60589a2a4f63d002fce1d35828efd78b251eee4fa98726a59b659389812febbf416

Download Submit
C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
140KB

MD5
4a9c365d5190dc31defef7ed6506b1d9

SHA1
c507532fecf7ceaa7340063898f581045c89e6dc

SHA256
6684695d76fb198642235886309a84880511fbdb46590831b2e9e0ff7fd42d0c

SHA512
16337942fc980180609d66fdf8fe817011afd5c1ac6c956ecc87767df4faf8448984ad2a8529a2221a9eb80ab094c2140e915a8dab3e234bf1617568ea21851f

Download Submit
C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
148KB

MD5
38eecc8568e5abbbc93e7388c8d7ceaa

SHA1
19e5dc48606617a37a6141de8ebfc194b1eda064

SHA256
23c2b4142b0f670db7c3979d66c5e5a1d9e6610c466d7180ca96629373a85d65

SHA512
58558ab25095cc80e214891ccd5a969305ef3038ca982442dfa892716fa117269c9bf026b0745ad0de2b5074e22abcbc0c1aec24b72c34c2f306011cd1b22fa2

Download Submit
C:\ProgramData\Package Cache\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}v12.0.40660\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
140KB

MD5
ccca0a492c89f3b63dd2f2feec912bfb

SHA1
ce4cf826bbd2c39f29cf91f00d369f41d57c47c4

SHA256
de9cdfd2b27b02bd43a31d7933498e621668adea476d2f0f9611a7f4a74707eb

SHA512
3f29214a839d725d5105c2f7b82829cc28a1c3875956c27fb5fa6abed26609391310798e2833361820c0b75773ae98b7cbe1e09089d81bfcefb96047bbfdf868

Download Submit
C:\ProgramData\Package Cache\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}v14.30.30704\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
180KB

MD5
5c0ce5c36bb967756a44e38be6e48958

SHA1
9ba6f5001a384deb5f191426ac17d54fcd9856a1

SHA256
c6304c1321022d17e03ad8bb2d47432b774f81eb698aa23bba92c72d12cf737a

SHA512
a7fee12d7022c380cd3611c3e00bbad16abce0177675772400b719675eb5b313e581417636b88096bd9b6c81d95dc2cd2bb58b0f35188b3b74506dd71a1a8b06

Download Submit
C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
0a5c05e0f32688e253e1479e091d60ca

SHA1
2efb87e350d5753e86d5c16d97a28a8e9c383bfe

SHA256
e2b9aed0c484b106c4a637ef44f0fe5b94e9ed20165a29bddef0530299861695

SHA512
154bd98cf0d04da3013d29de7f71ad3a57a459879a42cf4583910189823a9362099a702c95b700c08bf14584198f90da39d6a8954af6d2bd2fc75e93103122cb

Download Submit
C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\state.rsm[[email protected]][1].[25E0EC0E-DD8DAF01]

Filesize
1KB

MD5
badf039bcad72bdaf4c2d622d8c47d3f

SHA1
44d7b9443089634dcf32ab6340d24c0601b6c2dc

SHA256
c7fe64ffab7f73b7ef174704953b289748f7be412a15a20c5a45c240186e76ac

SHA512
214f4f3f8b5ccc72c5a018401c8005d09f22018c83fa5d54af56ce6843df971f2ec0b6dba30d59e2051a20f3e5b867b7c355c9a37fec2754e1116cc1e656e90a

Download Submit
memory/2524-924-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-23128-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-11613-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-1-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-8-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-7-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-6-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-23920-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-23921-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-23925-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-24036-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-27298-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2524-27299-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download