crylock | b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06-11-2024 15:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
Size

202KB
MD5

5f43ead2fcf68ab420a0b563dd1b23f4
SHA1

15b4dd41a806ce1c23164735f997f4b0b09f3db8
SHA256

b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a
SHA512

e3511218e4ff9b8db11d1124a5106b5e63d3aa18af1980744552b5b0fa172b9d3c0257b2b34f231addf057d04cbb8a4ec1709d1e1e1b8d3d651822b278863638
SSDEEP

3072:NjnBqm4O2oVkkdIqWaFcdG/GYAuv9vX01FBdvuVOe5/XhVRXf4cVbMTjIlmR:9nBFRqqWe2Z3DisYP1v1Fl

Score

10^/10

crylock credential_access discovery persistence ransomware spyware stealer

Malware Config

Extracted

Path

C:\$Recycle.Bin\S-1-5-21-1488793075-819845221-1497111674-1000\how_to_decrypt.hta

Ransom Note

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">  <html> <title>VXUG Ransomware</title> <hta:application showInTaskBar="no" APPLICATION="yes" ICON='msiexec.exe' SINGLEINSTANCE='yes' SysMenu="no" applicationname="CryLock" border="thick" contexmenu="no" scroll="no" selection="yes" singleinstance="yes" windowstate="normal" MAXIMIZEBUTTON="NO" BORDER="DIALOG" width="100" height="100" MINIMIZEBUTTON="NO"></hta:application> <script language="JavaScript"> var max_discount = 50; var start_date = new Date('November 6 2024 15:10:32'); var discount_date = new Date('November 11 2024 15:10:32'); var end_date = new Date('November 13 2024 15:10:32'); var main_contact = '[email protected]'; var hid = '[35CB212D-DB7B5D9E]'; var second_contact = '@vxunderground'; var sd = end_date; var dn = new Date(); var zoc, ddGlobal; function document.onblur() { alert('Attention! This important information for you!'); } function setContacts() { document.getElementById('main_contact').innerHTML = main_contact; document.getElementById('second_contact').innerHTML = second_contact; document.getElementById('hid').innerHTML = hid; } function countDiscount() { var term_current = new Date().getTime() - start_date.getTime(); var term_full = discount_date.getTime() - start_date.getTime(); var delta = discount_date.getTime() - new Date().getTime(); delta = new Date(delta); var dt = document.getElementById('pwr'); var timer_discount = document.getElementById('timer_discount'); var discount = document.getElementById('discount'); var hours_to_end = Math.floor(term_full / 1000 / 3600); var hours_current = Math.floor(term_current / 1000 / 3600); if (discount_date.getTime() > dn.getTime()) { var disc_per_hour = parseFloat(max_discount / hours_to_end).toFixed(2); var cur_discount = Math.floor(max_discount - (disc_per_hour * hours_current)); if (discount) { discount.innerHTML = cur_discount + '% discount'; } } if (cur_discount <= 25) { dt.style.cssText = 'border: 1px solid #FFC000;'; if (timer_discount) { timer_discount.style.background = '#FFC000'; } } if (sd.getTime() < dn.getTime() || cur_discount < 5) { dt.style.cssText = 'border: 1px solid #F53636; background-color: #F53636; padding: 16px 20px;'; dt.innerHTML = '<div style="font-size: 16px; color: #ffffff; text-align: center; display: block; font-weight: bold;">Decryption key can be bought at standard cost.</div><div style="font-size: 13px; color: #fff; text-align: center; margin-top: 10px">You need to hurry up to decrypt your data because all your files will be destroyed soon.</div>'; } var dd = (delta.getUTCDate()-1) + ((delta.getUTCMonth()) * 31); var hh = delta.getUTCHours(); var mm = delta.getUTCMinutes(); var ss = delta.getUTCSeconds(); if (dd!=1) { dd=dd+' days'; } else { dd=dd+' day'; } if (hh<10) { hh='0'+hh; } if (mm<10) { mm='0'+mm; } if (ss<10) { ss='0'+ss; } if (timer_discount) { timer_discount.innerHTML = dd + ' ' + hh+':'+mm+':'+ss; } } function ChangeTime() { var sd = end_date; var dn = new Date(); if (sd.getTime() < dn.getTime()) { var dt = document.getElementById('lctw'); dt.innerHTML = '<b>Soon, you won\'t be able to decrypt your files. Contact us immediately!</b>'; dt.style.cssText = 'background-color: #F53636; color: #ffffff; font-weight: bold; padding: 19px 24px; margin: 17px 0 24px; text-align: center; font-size: 20px;'; zoc = 2; } else { var delta = sd.getTime() - dn.getTime(); delta = new Date(delta); var dd = (delta.getUTCDate()-1) + ((delta.getUTCMonth()) * 31); ddGlobal = parseInt(dd); var hh = delta.getUTCHours(); var mm = delta.getUTCMinutes(); var ss = delta.getUTCSeconds(); if (dd!=1) { dd=dd+' days'; } else { dd=dd+' day'; } if (hh<10) { hh='0'+hh; } if (mm<10) { mm='0'+mm; } if (ss<10) { ss='0'+ss; } var dt = document.getElementById('file_lost'); if (dt) { dt.innerHTML= dd+'     '+hh+':'+mm+':'+ss; } } } var count = 100, interval = 10, intervalID; function blink() { if (ddGlobal == 0 && zoc != 2) { var dt = document.getElementById('file_lost'); var dt2 = document.getElementById('text_file_lost'); var test = document.getElementById('test'); if (count == 100) { intervalId = setInterval(function () { dt.style.filter = 'alpha(opacity='+count+')'; dt2.style.filter = 'alpha(opacity='+count+')'; count = count - 2; if (count == 20) clearInterval(intervalId); }, interval); } if (count == 20) { intervalId = setInterval(function () { dt.style.filter = 'alpha(opacity='+count+')'; dt2.style.filter = 'alpha(opacity='+count+')'; count = count + 2; if (count == 100) clearInterval(intervalId); }, interval); } } } function getRandomArbitrary(min, max) { min = Math.ceil(min); max = Math.floor(max); return Math.floor(Math.random() * (max - min)) + min; } function Rndom() { var dt=document.getElementById('rc'); var xx=''; var i=0; while (i < 40) { xx=xx+getRandomArbitrary(0,2); i=i+1; } rc.innerHTML= xx; } function Start() { window.resizeTo(850,720); setContacts(); ChangeTime(); setInterval(ChangeTime, 1000); countDiscount(); setInterval(countDiscount, 1000); setInterval(blink, 100); setInterval(Rndom,100); } function copytext(s) { window.clipboardData.setData("Text",s); alert(s+' copied to clipboard'); } function Restart() { alert('Attention! This important information for you!'); } </script> <body style="background: #000; font: 12px 'Arial', sans-serif; padding: 0; margin: 0;" onload="Start();"> <div style="height: 100%; position: absolute; top: 0; left: 0; background-color: #ffffff; box-sizing: border-box; padding: 20px; overflow-x: hidden;overflow-y: hidden;"> <div style="background-color: #000000; width: 100%; height: 55px;" id="header"> <div style="color: #F53636; font-weight: bold; font-size: 40px; text-transform: uppercase; line-height: 54px; padding-left: 8px; float: left;">ENCRYPTED BY VXUG</div> <div style="font-size: 18px; color: #7E7E7E; float: right; line-height: 55px; padding-right: 17px;" id="rc">11100001111011111111100001111011111100</div> </div> <div style="clear: both; float: none; height: 18px; width: 100%;"></div> <div> <div style="float: left; width: 144px; height: 110px; background-color: #000000; color: #ffffff; text-align: center; line-height: 1;"> <b style="display: block; font-size: 43px; margin-top: 24px;">What</b> <b style="display: block; font-size: 20px;">happened?</b> </div> <div style="float: right; width: 630px;"> <b style="font-size: 13px; color: #F53636;">All your documents, databases, backups, and other critical files were encrypted by vx-underground.</b> <div>Our software used the AES cryptographic algorithm (you can find related information in Wikipedia).</div> <br> <div>It happened because of security problems on your server, and you cannot use any of these files anymore. The only way to recover your data is to buy a decryption key from us. </div> <br> <div>To do this, please send your unique ID to the contacts below.</div> </div> <div style="clear: both; float: none; height: 18px; width: 100%;"></div> </div> <div> <div style="float: left; width: 540px;"> <div style="background: #EDEDED; height: 63px; line-height: 63px; margin-bottom: 5px; cursor: pointer;" OnClick="copytext(main_contact)"> <div style="width: 80px; float: left; font-size: 16px; color: #737373; padding-left: 18px;">E-mail:</div> <b style="float: left; font-size: 14px; padding-left: 76px;" id="main_contact"></b> <div href="#" style="float: right; padding-right: 18px; font-size: 16px; color: #828282; font-weight: bold;" >copy</div> <div style="clear: both; float: none;"></div> </div> <div style="background: #EDEDED; height: 63px; line-height: 63px; margin-bottom: 5px; cursor: pointer;" OnClick="copytext(hid)"> <div style="width: 80px; float: left; font-size: 16px; color: #737373; padding-left: 18px;">Unique ID:</div> <b style="float: left; font-size: 14px; padding-left: 76px;" id="hid"></b> <div href="#" style="float: right; padding-right: 18px; font-size: 16px; color: #828282; font-weight: bold;" >copy</div> <div style="clear: both; float: none;"></div> </div> <div style="margin-top: 17px; line-height: 18px;">Right after payment, we will send you a specific decoding software that will decrypt all of your files. If you have not received the response within 24 hours, please contact us on twitter <span style="text-decoration: underline;" OnClick="copytext(second_contact)" id="second_contact"></span>.</div> </div> <div style="float: right; width: 230px;"> <div style="border: 1px solid #2FAB61;" id="pwr"> <div style="padding: 13px 14px 3px 14px; text-align: center; font-size: 14px;">During a short period, you can buy a decryption key with a </div> <div style="font-size: 25px; text-align: center; display: block; font-weight: bold;" id="discount">50% discount</div> <div id="timer_discount" style="margin-top: 10px; background-color: #219653; padding: 5px 0; text-align: center; font-size: 25px; font-weight: bold; color: #ffffff;">--:--:-- left</div> </div> <div style="margin-top: 17px; line-height: 18px;">The price depends on how soon you will contact us.</div> </div> <div style="clear: both; float: none;"></div> </div> <div style="background-color: #F53636; color: #ffffff; font-weight: bold; padding: 19px 24px; margin: 17px 0 24px" id="lctw"> <div style="float: left; font-size: 20px; padding-top: 3px;" id="text_file_lost">All your files will be deleted permanently in:</div> <div style="float: right; font-size: 25px;" id="file_lost"></div> <div style="clear: both; float: none;"></div> </div> <div> <div style="float: left; width: 540px;"> <b style="margin-bottom: 11px; font-size: 14px; display: block;">Attention! <div id="test"></div></b> <ul style="list-style: none; padding: 0; margin: 0;"> <li style="position: relative; padding-left: 20px; font-size: 12px; margin-bottom: 14px;"> <span style="position: absolute; font-size: 27px; left: 0; color: #F53636; top: -1px;">!</span> <span style="color: #F53636;">Do not try to recover files yourself.</span> this process can damage your data and recovery will become impossible.</li> <li style="position: relative; padding-left: 20px; font-size: 12px; margin-bottom: 14px;"> <span style="position: absolute; font-size: 27px; left: 0; color: #F53636; top: -1px;">!</span> <span style="color: #F53636;">Do not waste time trying to find the solution on the Internet.</span> The longer you wait, the higher will become the decryption key price.</li> <li style="position: relative; padding-left: 20px; font-size: 12px margin-bottom: 14px;"> <span style="position: absolute; font-size: 27px; left: 0; color: #F53636; top: -1px;">!</span> <span style="color: #F53636;">Do not contact any intermediaries.</span> They will buy the key from us and sell it to you at a higher price.</li> </ul> </div> <div style="float: right; width: 230px;"> <b style="margin-bottom: 11px; font-size: 14px; display: block;">What guarantees do you have?</b> <div>Before payment, we can decrypt three files for free. The total file size should be less than 5MB (before archiving), and the files should not contain any important information (databases, backups, large tables, etc.)</div> </div> <div style="clear: both; float: none;"></div> </div> </div> </body> </html>

Emails

[email protected]

Signatures

Crylock
Ransomware family, which is a new variant of Cryakl ransomware.
ransomware crylock
Crylock family
crylock
Renames multiple (8379) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
credential_access stealer

Windows Credential Manager
T1555.004

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\how_to_decrypt.hta	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Windows\CurrentVersion\Run\35CB212D-DB7B5D9E = "C:\\Users\\Admin\\AppData\\Local\\Temp\\b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe"	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\915368 = "915368"	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Windows\CurrentVersion\Run\35CB212D-DB7B5D9Ehta = "C:\\Users\\Admin\\AppData\\Local\\Temp\\how_to_decrypt.hta"	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\7-Zip\Lang\fur.txt	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Microsoft Games\More Games\en-US\MoreGames.dll.mui	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\msadc\en-US\msadcor.dll.mui	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0341534.JPG	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0384895.JPG	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\META-INF\MANIFEST.MF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Europe\Amsterdam	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Mozilla Firefox\browser\omni.ja	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File created	C:\Program Files (x86)\Common Files\System\msadc\es-ES\how_to_decrypt.hta	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rcp.application_5.5.0.165303.jar	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\core\how_to_decrypt.hta	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Module.thmx	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21348_.GIF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\BrightYellow.css	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.swt.nl_ja_4.4.0.v20140623020002.jar	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.update.configurator_3.3.300.v20140518-1928.jar	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\tipresx.dll.mui	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Port-au-Prince	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\SystemV\PST8	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE02957_.WMF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01563_.WMF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\bin\klist.exe	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-io_zh_CN.jar	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\hwrenalm.dat	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\jfr\default.jfc	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CANYON\THMBNAIL.PNG	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolBMPs\Form_StatusImage.jpg	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\MENUS.JS	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\userContent_16x9_imagemask.png	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Port_Moresby	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Common Files\SpeechEngines\Microsoft\TTS20\en-US\enu-dsk\M1033DSK.CRT	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\msadc\adcjavas.inc	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\DD00413_.WMF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0188669.WMF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PARNT_08.MID	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\DEEPBLUE\DEEPBLUE.ELM	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\NETWORK\how_to_decrypt.hta	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0216588.WMF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15034_.GIF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\BG_ADOBE.GIF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGACCBAR.XML	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_200_percent.pak	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\javax.xml_1.3.4.v201005080400.jar	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\fr-FR\rtscom.dll.mui	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Chicago	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Scenes_INTRO_BG_PAL.wmv	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\skins\skin.catalog	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BOATINST.WMF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15168_.GIF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Maroon.css	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Gaza	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA00390_.WMF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolIcons\PersonalContact.ico	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File created	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\how_to_decrypt.hta	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\GRPHFLT\MS.WPG	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15018_.GIF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD15272_.GIF	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Groove\Sounds\People\how_to_decrypt.hta	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_VelvetRose.gif	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\PROG98.POC	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File created	C:\Program Files\Microsoft Games\Purble Place\es-ES\how_to_decrypt.hta	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File created	C:\Program Files\VideoLAN\VLC\locale\am_ET\how_to_decrypt.hta	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Excel.en-us\how_to_decrypt.hta	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\1033\CAGCAT10.MML	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1488793075-819845221-1497111674-1000\Software\Microsoft\Internet Explorer\Main	mshta.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeDebugPrivilege	2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
Token: SeDebugPrivilege	2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
Token: SeDebugPrivilege	2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
Token: SeDebugPrivilege	2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2416 wrote to memory of 4240	2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe	32
PID 2416 wrote to memory of 4240	2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe	32
PID 2416 wrote to memory of 4240	2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe	32
PID 2416 wrote to memory of 4240	2416	b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe	32

C:\Users\Admin\AppData\Local\Temp\b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe
"C:\Users\Admin\AppData\Local\Temp\b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a.exe"
1⤵
- Drops startup file
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2416
- C:\Windows\SysWOW64\mshta.exe
  "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\how_to_decrypt.hta"
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  PID:4240

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Windows Credential Manager

T1555.004

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-1488793075-819845221-1497111674-1000\how_to_decrypt.hta

Filesize
13KB

MD5
22f9167f0ca9bc272960e5e21363b5b4

SHA1
9839d78c0f9088118a677a34c1f8b1ab3116e481

SHA256
2428a55befedb8141767783292599ecb6937a07988ecded36f6940a97c6f79ba

SHA512
51a3bb224cb55cfdebd92631e09dd3ebed24c09d9e861bf54f136790ba64af7003c2ecce5d933af03737c151e06a2ef47675517a3bb5833a47e327d3abcd278d

Download Submit
C:\ProgramData\Adobe\Acrobat\9.0\Replicate\Security\directories.acrodata[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
658f3dc06600689874ea7398f0281c79

SHA1
98f8dec5d515710d3097e019f3dd0279f5b4c7e7

SHA256
ca0ba594614e3244b3684fd0ca62cfc60d13daa0c9609884ef547531e84e3f7d

SHA512
22efdf232190760f15316ff5b9492146ff9a880e295627362065b5f4e036dc438176b70cdaf0ce3a9bfd6cef2d460584f6296f6989412742dd022e9da739e360

Download Submit
C:\ProgramData\Adobe\Updater6\AdobeESDGlobalApps.xml[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
936B

MD5
faba7c44734e8aae47f49c15e33277a2

SHA1
5aa5dd99e684da226ee8ca72e6bf15af97173e3e

SHA256
af934420b38c4636bedd37c0cda2e2bcb7463012a950ccda12206a01c2c30f0b

SHA512
c7618c85f53f9031c66e7d5612075baa7ff4066bd941bcefd4a332024ac54ba6f6d1534b4a0cdd8281a78e8b9ed72c4d3ce73b09ffceeaa76a9dfeb491938d9b

Download Submit
C:\ProgramData\Microsoft Help\Hx.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
951B

MD5
7af9d71ecc159c56cce41c0704fbcc70

SHA1
fc2dcb9eb2163868ee4d4ee0ceef1b0213775925

SHA256
e59cc230e76c5ef7b5d783c5f155a53efab722c884a2a445db7cd569159a3bf3

SHA512
5c86f5994083ebb217751f193b3eb79a1674086214a26a8ad515d1fc7c058a53813f24d587abc236985916966040ebb3c5fc1794afc07b111c03a8c7f6d1739b

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MKWD_K.HxW[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
14KB

MD5
cb5180cc55cd3c5977c8e52d358190f7

SHA1
9c8d77c33513394d7ef7d839bc3f8a3a4be1bd5e

SHA256
7c49014a0413328132ba7599e72a35dcf395d660d5f9239f3e1b91b1d82437cd

SHA512
b3ae4951a6b513829e7aaedea5d37aec2dafa3731310c31806a4c41c6e58f5da7c476a9538916f82e8793c161557d58768b34cbe1d9437b0e67783050c78d24f

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MKWD_NamedURL.HxW[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
14KB

MD5
b143772ccafb6e60fac5673f81315155

SHA1
bf64139607fbb9d11924f4c38a5b32109e7b990e

SHA256
a01981cf34a2f1fd3b0e8d8f5a545973f60902303b6b16b1506346de0f7efe3d

SHA512
c927fa1ce474a3774bc13899804d6c7637bca5eda79b8ad662e05b22d5bc1fba17c341a766c1122a12cb9d03b9cce982a01d8c314137237b24bb30ef4bbbfc4d

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MTOC_Hx.HxH[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
10KB

MD5
3d8d5c4820115c69845acfec27048277

SHA1
7c7246064380bc18ff212f09c1561ef0a1b7796a

SHA256
dfd20c4cbe1cdae260343ea072aa496dd2d47805c011c8d95e8e21069e7f5109

SHA512
1d78f312651d08cfb52e2bc54a8232f692301205fc4080c0654d60811e965dbbce255a841b06826f9e7fe7aab086906dde1ff7d93392d78c1dbeec6a2dc524ae

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MValidator.HxD[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
10KB

MD5
1c93b192fc3f95a95ca00fb03405d680

SHA1
b58f880e763eb8207fe893426d58b9f4c29495d4

SHA256
9e32fbb2d9ecb59271c3f4aa5a0167997210f920058687c56119fe68befe7425

SHA512
a02714cf53d6ec2967c814c683dc9bfb2a91a5b3d4e4a974fd783d98512e9e4ba50542cb340e1c37208bde681e705d2d3efd2a5420f598eecd945723e47adc6a

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MValidator.Lck[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
659B

MD5
a7387b6830091aaaadbbdf212184ff7e

SHA1
a002c1d70d757ede21a053304adedc476ff50886

SHA256
91e38e6244661aa7f8360d1bee23c34a30deb62077a7fdc87e29f31941b83b6c

SHA512
808963ee55da0b90b498d9abf47c347eb4f261fad823e67f5e2578413f41db3c6e8caebd44a59ff364496682f9e7000d6aba01ef43f2ac3a62598d83ea6ae41c

Download Submit
C:\ProgramData\Microsoft Help\MS.EXCEL.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
995B

MD5
3c788922bb8753fdc907885254ce4645

SHA1
8df3d2992098f5f1a3c5466133f824637021e096

SHA256
627884357828c083eaefe2dc69c1213df48dbaf80e538bb526b0f9e815cb6934

SHA512
5e13e5eca336a631212d68d73585d3566c7cecf8e7ad518f804035da1cf4c5f9b888d01408abcdb25668f7d31eff0822101e6ffbb7ab1974e79501ce2f358ae2

Download Submit
C:\ProgramData\Microsoft Help\MS.EXCEL.DEV.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
a8883d4dd5aee06a3e085249d3df6255

SHA1
a91b0312d0c95f42551c9fe8253a754938951edb

SHA256
97a799992f48c35e3888022f926760ed70ea02a52b20b1e8429bda5ad3d34ff0

SHA512
de1d5cbcd7e66356b2e8cf8f1337b4045adb191eecdd228fde0257781ee68b203e925adecbfa6117d6560c7fd6bd5e5fe84737c0bc078235c16e7a73bd8a7a11

Download Submit
C:\ProgramData\Microsoft Help\MS.GRAPH.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
995B

MD5
90c667bef2bc4366bc711f03c87fbab9

SHA1
3d95e0c5ec385ec0528a4ddb7eb8dd4981b4c742

SHA256
0c9fab069789a59d512acd95022fc58b0d7fe29d9cb3047a3b6942d8e7b80b6d

SHA512
df460493113d101ea64b4e2771569328fcce152138be1f78687710cf13171236738a7a299f2c901901c74d6cc31f1740e40306df77d9003baecb862022bf7cff

Download Submit
C:\ProgramData\Microsoft Help\MS.GROOVE.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1007B

MD5
fd956c52b71e59c58179597a3669eb29

SHA1
2a89e961d00767d23b23373ecb030178e95621bc

SHA256
48e34e8ad43c5bb037975cc75b4d47bfeb1ea5c1a40d3f0bb5f97f78a0901c1e

SHA512
2a80ae06968a72d1fcbc1e0eb2269468905cdf1f649bd0d6630e04303927f0426f7e7261dca5ddf8a57c84f5c9d2fb4ddc6ca922d28cb71658a297bde9bce7bb

Download Submit
C:\ProgramData\Microsoft Help\MS.INFOPATH.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
b7913ad294260af1b5e13da262a3eaeb

SHA1
da8b1a0f0c346659e823ce5b81e51a0fc08a4077

SHA256
963d8570873acfb0cf9507540dc49901bad5d4580997594a72832371895a2ff3

SHA512
bfdae04ec63bbb3cd74fe821f44d3de341083efb8439b562d30db2aa8f5a293d4ba740b31dd83a39a916207a1e62e38ee8246c1088738ce200bb40b7dbb0ba4e

Download Submit
C:\ProgramData\Microsoft Help\MS.INFOPATHEDITOR.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
166f15094e43c123bbc5d8194fa04f21

SHA1
81f0350ae9d25a02ece5031069a8f88b272f354d

SHA256
4a8582b51715778d20e4a348f6a34430fc0d4ab7bc0571fb12c3df62e08877d2

SHA512
a76160e0dd2a7a20a590c559407e3c49c571568ed3cb68f005aad3d75dbd285c4571d6a8c334e392f19b5f454a4e9fdb862a77574f52c564e547a43cc476bd09

Download Submit
C:\ProgramData\Microsoft Help\MS.MSACCESS.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
3979f29cce716833eb3fbbbdf8cf2e8d

SHA1
d7f8d006f7340e3840a499c13de8183b684bba4f

SHA256
5246b2813db875c73f67c584cc5a329dff59f6b7bf9a597ae4fab7ee735e1a04

SHA512
3375c47ecb964ea3ccdf840fd410cd11e19ab5e99a6f3deed9abfa4c3e0606c0d31c9fea0786717a5722cd47d6c57d5b8936987e568472867a9f482cb58309e8

Download Submit
C:\ProgramData\Microsoft Help\MS.MSACCESS.DEV.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
26600506c87d59a46a4accdbdfb43b6b

SHA1
63f6f98c0f669be7649666357bded9ab0374d8eb

SHA256
2fd09546abb4bbd4d4af86f2c12e98a9abf56ef92140cd3a99c8732aeda92799

SHA512
83fbac41196f50e9268903519075b659c316421cc3dec985badfe9c700e62a6e95ba8e3146c6f05d6f1930cea4e1cb6347c516cbcc4511fe66bbbd8400a1736e

Download Submit
C:\ProgramData\Microsoft Help\MS.MSOUC.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
995B

MD5
f708830a5da27496757e67e2ab4e87af

SHA1
dca655df3b24ee560bf28047e2411fd5eb0588bb

SHA256
d4aac1e57590b0ffde481299f92aec98d577c96f919a6603feba6531d2308391

SHA512
294231bcd3fea2683a3ec8774525c33624652a143d21149bb2ddae91a1b048360ae2e4b836b35f94ef451de294aa929f49174b4ebe32b63fea8229dceeb976f4

Download Submit
C:\ProgramData\Microsoft Help\MS.MSPUB.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
995B

MD5
b7024142da857b636f137bc9467473eb

SHA1
32b14d03a3c2de5ada3708edc227699b00ed1c11

SHA256
67d70f0b6b4eb7483063d0dcb1bf995faff947d298aa8660895ce9db6b30185d

SHA512
93ce1da793e2b3edaf8cf73316f01088402b7d4146f17dc01bbbfb39341a19cbaa9fbf15fdf39825cf9f2a25f55cbcbf7f656bf2c4c88ff8fe20d3d00a1d1c40

Download Submit
C:\ProgramData\Microsoft Help\MS.MSPUB.DEV.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
a7c3f284b14bae635513e9cd04d5dae1

SHA1
3b608ebdd3eadc0c3d31cefde38811727b5f4537

SHA256
ce21eef5d2276fd634866a0de85f31789b508e776aef2c6548bff0222c84c9fb

SHA512
99108d07860e8d65537d9cb535d7d6632e37a17e9996bdcda2e9803348628db8de6dad8e7413ac4fc9c74dde4a6801eeb541185fb20b21b088f6df0f88ed09ad

Download Submit
C:\ProgramData\Microsoft Help\MS.MSTORE.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1007B

MD5
b90428463097a2fdf4463a77d8b1d444

SHA1
91832315ca2d11bf3cb23b606a5b36cc605bcf13

SHA256
4f878777aad94d323d54b3b642d92fc4bd2699600670640e7115b40a2b040a9f

SHA512
e12dc1c730fd0330c6431838598e12733e40512e79cd1c8aebe246fc5e6b4ef61894bc901ec8b21dc3e40a9ce9f8b6800228f4b0b56d53bd8f9e63cb8f730ad7

Download Submit
C:\ProgramData\Microsoft Help\MS.OIS.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
971B

MD5
4644bb3787bc0a1435f9361b157fcb29

SHA1
14867dff44ef2b1630e07db74a9f00a1b6666aae

SHA256
b40042618a0cc950b919081df7bd9e1bddcd2d4012bd28abf424f9c67935bccb

SHA512
6b6c03a203675913b5122f69d075edca777d4caffcddd705b761b7d200e7c9298a9614faaeec4b5237e82e18af55caaa78673819ad6ce2d161fdc5a9f259bdfb

Download Submit
C:\ProgramData\Microsoft Help\MS.ONENOTE.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1019B

MD5
810b62a412a4fd4761ef39a3c18b02ba

SHA1
82530b97ecf0de030e78b6ddec477a1a3d48a4f5

SHA256
9584bb31dfcbaa8b3391e007e98504c8178fcb2551b9ca17ee5c9630445eb7b1

SHA512
42cd29548f5c8373da3540e5537bc68d3bd19659c86aa95fa367f4cc4ad7a5b23cfe706ecf7cc04f870d723baae5f5bbf69078774f62efc5111b3365a3739d28

Download Submit
C:\ProgramData\Microsoft Help\MS.OUTLOOK.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1019B

MD5
c276daad05ee6334e1328b2c7c141082

SHA1
fa233c7fb3d8b56173fbdf436e9c980ba0d00818

SHA256
7bed763bfef3dcb546ccf75e3b95ee9ef471ed124839c0488765ae068218f4f7

SHA512
59c8b328334f0f00fc983b75265c3a0cc5d6ca0c86ceaeff05caeba1bfb136ac2ef00dd3ab2a9674e60a3f42356c70a7416076aaad3c96b1bd1cfcf4fa519edb

Download Submit
C:\ProgramData\Microsoft Help\MS.OUTLOOK.DEV.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
6a7ae1482324ef8902b78ca1f6b31a97

SHA1
c03aa67073d2f0d0ecef80779b2322b2699b936a

SHA256
cd738f0c8fca050ee6554979e25ac3256a3098e5335fd600846faa5f6c8e21c0

SHA512
7842734e1388f79492f0063a5f32579e86d9436e22f028fef8687177e21a9424e75f2bac19a23228ec35745ae94ce76bc33a7dabcfc2a1ad8ea46971437b3830

Download Submit
C:\ProgramData\Microsoft Help\MS.POWERPNT.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
cf7053a7c13e46723765bc1e27b928f5

SHA1
7806a54bbc5a2ec699edbea3c566ee1b914d6464

SHA256
d515889cae1634b8514a2792ec1d2d78e462a54d1df6fa6d11b83d057c9943c0

SHA512
ae9d743d3bdbfa39968af290affec316f83a1dc5dedba9252d5c33dea2276573d8db713381ea4950d78e9e8e105d6ea679e4e303be085fdc858777e3871c8551

Download Submit
C:\ProgramData\Microsoft Help\MS.POWERPNT.DEV.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
24a066efd9eacff9c9362bc3eeb65803

SHA1
845004c6c86628d3dce903036655208423774eaf

SHA256
82a98734e36b830994e8946e0ea4491e5916289974aff743fdc3119dd37ed1bc

SHA512
1bc3e1afd37aa802023fc9c80afc158a8ffccf534e6e0ff2f080b0a246dee0420a2e9835b26c8e5cd0140f0fb608bdbba19a9216f8d5ff2ec20bf0906f50e806

Download Submit
C:\ProgramData\Microsoft Help\MS.SETLANG.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1019B

MD5
ff7c06bd6015e7f181bc75eab2ccc187

SHA1
78ccdee6153d401cfe8d21b9f9c1a96732d7342d

SHA256
d124a245f22e6ee697b109395aeab857bc1c8f9a23d49085b2e35cf5e1b5bccb

SHA512
480ec90ff188469c30602a6c8df48670548b4e61d66ec689fa0fbc6cad6e476440f7c71664c872cb689cdf70dd42f0a0c0d4d0962d4e85061e1a1f7681609360

Download Submit
C:\ProgramData\Microsoft Help\MS.WINWORD.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1019B

MD5
b76030f0cef54ee778ae14b7e8d75a06

SHA1
f496c044431e89b19abe3789638344a8dd529ff6

SHA256
b90034e10f40f7b1f19eadb104f937737e4312c198d00cbaa5b2ea86f8c31b83

SHA512
9da4a3c56b768a3bf2d4432222bfbd9bc99c3306b4b258b78ee7c1e7037f06623e09f23c151cd56aa48b24822523114d0f869a0f510fc3940a66eddd3ad28c04

Download Submit
C:\ProgramData\Microsoft Help\MS.WINWORD.DEV.14.1033.hxn[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
f7ca976f5900a4549ac2557261766d59

SHA1
bf843446939f63f5819f63ebd551aae771806eac

SHA256
4f3e23a85e8a6cfd02a49d3e806c777bf6328c3739b8adfebaa4faaf8ed1e48d

SHA512
4836329f3a9973b4c99faf4e2acde37f7c59ed8d15da943352c120a2293c31cb840f16cea5c6b59ced805334e0dd9a30ebcbe86e4b7fa4b83d071c6defcb369c

Download Submit
C:\ProgramData\Microsoft Help\nslist.hxl[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
7KB

MD5
dc564ea39bde342a422108fc71b2accb

SHA1
3bdb6b4d4a4746395bc460eb93b839f2bf3a553d

SHA256
1c5644a053700dd2a6a6f4a10e165accff846170bccb2bce413df1f76ac2118b

SHA512
4a0813129e2be0ee15442898ed8a7302d056f60288d5cf3aafae814b943a1389dc0606b6bbc60af9d914664703aa04db6ad1415f1f748d4f6418be1c3552c130

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_CValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
12KB

MD5
74c5cf039d256f760bd54752114add3a

SHA1
75da1f47215406bef0dfccbaea0fb224af42aabc

SHA256
56412a48da4773a81f5df370dac6efe7cde913ca3ffcf9aa85d2c87f33e1c37d

SHA512
80ad962525d4ca05628036fff9afcfe9bfd68950690a02c69a39a12bd83a8b2bb4e4e06d8f3bea40fcd0268030bb8e45e515ed11f093c27f4bfeeb57c438fd47

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MKWD_AssetId.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
230KB

MD5
b238c4c9eb16426f685c707861f79221

SHA1
e2523ce1916d42d2d902d875f61c4cb7c0b7abb1

SHA256
2e91eb8f6e3adfbe9c4fe0d30dcecf30c59e1ca7ad00201f77500c469405f01d

SHA512
213e20c420df70e41b6da834edc8cad5d14c9f5afe5981b14c86202c7a2b0f216cdfbb3edba04464cd22f6e4aec158821292ec31220ac6412a210e2638e35c67

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MKWD_BestBet.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
410KB

MD5
d5cce2f8605de177b8d8625782ea412d

SHA1
abaad0d33973825f7c537b04ea7eaabf9d65ab80

SHA256
18dbbc59bbf26e549677b4f278452f9dfd4463b65bc205b11a506c5cf2ea9f9c

SHA512
b4d1aca437aadec42c35c66156d551bb715fe233147b5a7cf6256045b94c348a71df24fe94f1bc7ba73b00ed4a6791ca5fa659ae58d4f523c7ce143365b80f42

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MTOC_help.H1H[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
532KB

MD5
5869403c1e6d753a79312403b9b1c06f

SHA1
5ed1f9781c9952ad1c09080e29ac72eb87c7a9aa

SHA256
28716171495bf57aba91b424842dd69e70bb8ebacfb7c9c76e26fd2a51efcf3f

SHA512
1da38ea268e5b5bba74e637211c16090b678327528271faa0beca1d41879165cec279ea6e66946e984dda2acde629da001d1b49a7215c9326d0d2d0f05bfbab8

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
15KB

MD5
6272e5dd5ad5eb3078c270cd34634c56

SHA1
57390f6ff91aac56d0ad94933f2c81a0e0538920

SHA256
2dec6171001f33ecd53c324e21cc85362795179756893204869507f67d9ed740

SHA512
594d6a137307be9278de93337eadf5e45e6a5c6e1e0f81fceb3cc93807c20c76d236c5de979226cb06e4e8694c7e585fd3c3afce4350abe376b77e86d96cd368

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MValidator.Lck[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
641B

MD5
685e94c1a42bacff3b1d532b2e37d0a5

SHA1
0ab43bdd844d5279a7862c5d7b26c26000af85fd

SHA256
8f29cafe6f3d9b4fad5b8e61e748c80557fad6931c0f3a7787a6920b30a10c35

SHA512
718fd75f0c02fe111b2395f14bc24a85ed9760ca54a750ad1e2546324843042b9858430b76be702b16c1dc5eb3450c250c5be4e72534fc30a0df7068f836ae1d

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help{45EACA36-DBE9-4E4A-A26D-5C201902346D}.H1Q[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1.2MB

MD5
2162da1d70c42404c881c67f618a0127

SHA1
040439edfe212688099d1d4fb5b3b8ef4b5f5009

SHA256
0ccd46026fdef555b3e157bcce88308183571d4c0ef12061b853e4cb8fcf53ea

SHA512
78eb2d3dc0ffd4616baef980790a15c5eb8f4dbcaa91ba57d0cc6eb3e3e1dd0dc61e084e44f4a20254c1a1d5e38e70754e22e0d0a0a8abc6ac1691949c056506

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_CValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
12KB

MD5
f8eea6f0ad025df28b578ac81edc63b4

SHA1
689d90181e11256b531bafa2085a6eef5ecd24f8

SHA256
85aee509fb9f525d3205c3340173480764fb12b75e3a9a3ae571955c22474053

SHA512
9fd1a7804609e1448efa3dc81eda8debd7a2898e0a53099c8072a10573fe84398f225a9b39487aec552ee9263e3d17e230820b6ed131a0d504611a677de0a513

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_AssetId.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
230KB

MD5
f1e2f2f24adffe01b575e6c7f72d7af1

SHA1
67886ced301751888cf25fc0967284a270ffc3bb

SHA256
f03896a299cca936426967a5c9d0fb31f335185b8d0c2f800daaf57424756460

SHA512
6ada61c30ca3a03a04269b042fd9b2ef01e6b20134c0ac1a7decedd70bddc90e5522c589f80214db3f02a257c1d455a583d0beef239b4805cd2dc77a444858db

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_BestBet.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
202KB

MD5
1655b598e894c29795782a416a205705

SHA1
926c4f78c07e1b0a1c69753f66c5d6700520892c

SHA256
d7257181505f6dc5c76ab55717e40f31b283fcd17dfd2cf3edaa0e71cca70690

SHA512
062ecfcabb663f2c36eeb27047cc029759d5e4305d4d78b92e24699a0c0a80158a2aedaf7300646f21469ca94d4898b38fd206e1a0c25a86449f71b9c78bedbc

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MTOC_help.H1H[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
491KB

MD5
02710d40f8dce1a40c942f27f87f3f67

SHA1
e062da8b422458ba093f02b162763ddfd34ff3dc

SHA256
d84f7a450025f8431e8ac89fc74da9abac44f7b58b4747720a1ecfd04730c7ce

SHA512
e701ab1a02cee12c7f9538ae1769352c66acba6a47c3694e33c8abe2bfbbfb38c54a568ba4f6b86c86b453e98251ba5f280dcb56b5c21c514f24121a1472f659

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
15KB

MD5
555c7c975635d3fce18479c14d592712

SHA1
f1f76a06ebf8df874abf0ae5fc7bb89311b2a4b4

SHA256
ce96678b3bedbe5bed3647f577af75252f964bac6f185e425555a24ffea6d2c0

SHA512
ba3acffea378059eee03fe16a7c830687a5260dfbdfa171fb88f0c10f339b7ff7d4d8a9dfda068e5c7e78bfd902cd3e0170d19c79f4fff0e5e87c752cbd74d05

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.Lck[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
641B

MD5
0b8dba952f14b4f218465969f09acc31

SHA1
f21583977db622230a3aec3e41175f655519d807

SHA256
8bbd026fec26dc5df5b29ca972db415c3a2d128c62226e4b0c9dbedc4ee6022b

SHA512
92a025c61b7311420dd8b2c390f10415e20296bfa6271c2ef8200f0efb6f5537adc801a3d8c84bc2cb383b5280235318c3d67d6c66dd963ca32b476cd8e1a239

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
865KB

MD5
bb466580322de313ff7fd815cf6cb69e

SHA1
7e83cd3b2989d53190b46cec4817e870510dad84

SHA256
04311dc60ac5385cd476c9adcc7cef788345fcb84f9d2ba6459438f408b3d58d

SHA512
e33142d11df8b686cc7b0ed71acdad84e6061f0cb1e9b4d6eb655ff6e87a3478ef06b621544b1c8ab3c5497593dc63b2517a0e3b2d621a8f69b8dc13ed03eb63

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_CValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
12KB

MD5
1d1bf54fda4dc502ea324387f3f767a3

SHA1
5bbfdedd3b4bb4f0088464d71dd31dfc6768b5c3

SHA256
61cc07d62346bdaa3ca371c569e0ca22b6eacb5b7afcfe15c25f232e2ac383bf

SHA512
f085c1a61dc0165559b06bc0c4834c92f51ee91b7c457771748372fe2512c731261e2b6554dce1dfece10f6684ab507001b81060b39b268670551c585b72a022

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MKWD_AssetId.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
230KB

MD5
f7961d4d07a201eaec0768ecf5808707

SHA1
b6046b83b21380336b3653c13b90148799516a10

SHA256
8eec541c23ab7b380cb09f5672196ae51f0109afb138c84737fbaf1896183677

SHA512
63dd0349559f34e2a0b4c505a7348f06bd5437fe6b3c86f6a3419d07d461b34a552ba785f9a24d7be3949a2b6b178434e0e096434affa5cb146f9b5d0b004214

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MKWD_BestBet.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
426KB

MD5
a8021c7392c7261e8a4c09cd1dbeb127

SHA1
4a7c16547d853a494e043a686d4d73ed9de0b13b

SHA256
14319601f0306e75c5eee4c7c202934a1f6cf2384680d8228eaff7977b083d2b

SHA512
cbfb9f3a823a5d8185fbf9f364dd0c8c59dd14ba106d97447115874cdbc7ad9fb390ccb09f366e3cc33a4385b1a0cf8b172eb48d53a754e814ad6f4b2c6f8732

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MTOC_help.H1H[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
531KB

MD5
fd448897fc60c111f4c24ae21cdb28e4

SHA1
e2bde21e37db480117ffd413257a236f256dc51e

SHA256
729bc0c9f21b563abda38bd9bc8a046000c4a0a5c66a5ffcf64f3241b7240e88

SHA512
ec5bc47e08d132f0a05ce1455c87bbe26b7781bb5b9c801b164ba5c63068b6fff74b00232f22ff773bfb0e0db42cb0ed478dbc312dcda626a75c809f776fb2f9

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
15KB

MD5
9ec95907d114a8ad54b400a9672543e0

SHA1
2c12f64120db19662776fe7e11b8d2ab8eda08f6

SHA256
650ec199ba221fb1d9ca6cd571561a7e5437d29638b3e312a76d51c130909ceb

SHA512
37f914b97be346a7311ee1f0fe8b394f20a67227a87e4d5e8bc43e15638df14772ec820a678dc881d449e7a803a930b723d792e8aebf2e5f1b0c1b2f5ef9b8e9

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MValidator.Lck[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
641B

MD5
102a315048bf43bb883cf4ef841ab444

SHA1
46954263f0c61d35a62cfef86ec9f8874e970c19

SHA256
740ced51adbfcfeca445f5d2d65cc662252de1e20914f76acc8b4ee104919464

SHA512
15e36f565b9a2f5e02256bba356bcf46e37a8cab272a9530493ea56a89de2ea2a5a60243369ccba2720dcc16035c2e59485ada73c617e9b2e1f50da16bce0f45

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help{68DC71DC-2327-4040-8F03-50D6A9805049}.H1Q[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1.0MB

MD5
b2708a28e7c1085b4a45a72e2735f975

SHA1
4ed77ef8b52ef144c1c540733eff0fbf117c41c2

SHA256
79319b4decc05ffaa7cf79c908a2fbdadf97f14242509a2f3aec731f66fed004

SHA512
074744de6f23ec45a2b83e1ec1724ffd26bbcda77e60d7268cabf65e31314370802190f1d034ca3f36bedc939258964fed977a2e2cd089d6caaffaf5706cf43d

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_CValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
12KB

MD5
249678b3a2c6706eacc3a2074fe6c2e7

SHA1
43703affb17e8224f40fcbac86a657208955cc6e

SHA256
1cc7ba5742281976dcbd30e805163714f8a74259ef4190aa525b911554d31ab9

SHA512
ea821b87f5f528e6912c2b66cdd8199a96efda86a58b60bf386fe3f83f25af0bef499f8c1418373993e2aa18db0bcd8bd15e821f6ddfbf84e71980bcab7dbc2a

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MKWD_AssetId.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
230KB

MD5
cc8f60330b5f058f979b3e2ce1d864e6

SHA1
595d136a7f96c4ed70626c8430c53850bd89ccab

SHA256
9c6a4c7930efcc766ee47bae664ad20462463ca5a23a19ed8b20dd5025ea3726

SHA512
c54cb13d5b632a29efa60a112e330949d04a24c8df7aa0efcd65327af6a346e5e95c66be50eb382d37c0ae0c72a4ef258d599f6f5f6f70366a4e3c9264b32513

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MKWD_BestBet.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
422KB

MD5
4190bdd80ad07166927c01234ae37c1c

SHA1
4a6b9a180269a13b604261f2b0fd9d4038ab0ea4

SHA256
653d40c16761b494250ad899f10282d33ab185f439fdec004bbe66de8778e1e7

SHA512
6a8fe7f12a4285ab7255d59949ac18d9f73dc749a665174ac582b291ca40c45eaf448fc8f3ea5e1566d79abe76a92af314af62b74c35257967622c6c49c2b9e8

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MTOC_help.H1H[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
546KB

MD5
5dc2cec6d5941338a0604cf5ce592156

SHA1
eb1093ffca2b858ae540efde020afe504caa3eea

SHA256
78392e7dc31da949e392b50555d8b87732eb863fdb50f20f5e49fde4ac76e967

SHA512
dd1912fe7aee84ccd46882cdccaf4301f001f4560a224cb44c202ba8eafa5b93be72cbf32a998abdf89119a3c71953a4ef28d0f71d6194bd64268771bb470e4a

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
15KB

MD5
63f45135744573fbd274e123cdc86152

SHA1
44a061e608f8387b223f5d9ca1a7bc72527f87ba

SHA256
b565aa30303af08641b5adabbbe2c0e5343448b66eb8a0898d6ae130be666934

SHA512
4d4dfbd990fb474c6507ff41e3ff64025c5f9b86f5108965a857585abe5fad8a74ef42f09cff183b2639ee933559d52d09065bd88e7a5cdb2f46546ab0612e27

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MValidator.Lck[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
641B

MD5
4c05b472b596b7ea0d3b9023d4b11bc9

SHA1
4aebb6aeb6eaccfcf19dcb65e2389e292628eb77

SHA256
79097ecd210636492fceb8c2e54c6b2d56fe5702d15b825ddba9488cf3e3e8f3

SHA512
78f54cb49705e08f022fff29eedd94a63c3cf7648e889d022f77cd01fcfdadb3078eda3d1db8ae6ac0176596e7b05998ee4fa646bc65c6ca7f8d802c0855c2bb

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help{92F2118A-E813-4A4D-9DE2-F96A9DC02C53}.H1Q[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1.1MB

MD5
5d924f9952a5f32cfcd2ade44ae32f2d

SHA1
481bf5d391ac7b485604273e01502ac23e0a2ee6

SHA256
36188a1cf71e769459170fe5f717d1c16cddafd5bed949a09d8170620487f11a

SHA512
d10a297e658103b86348550ef306857254b940e645c766f84ff369d500f567f3f643a2299a3081644f17e4f48ecfd99feddcfdefc977403c22b7d8c5af7d799d

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_CValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
12KB

MD5
78bf338e9d2c80032cddf827c0e947e0

SHA1
0b0320dc87114b9d41a9e04db868754e74e265d7

SHA256
80fe4eb198befdd916f922523127a76d8eb591fe5e0b4690200aebc0a990d9b0

SHA512
1a4929327107c77b9fbbafb273ac4ca6c0d5b1fbceb717da99e135414f5724206dc3e6f9320b4645d5a8b7b82ba2a5a3df7a6d2c64e358b2874e70cfd0c940ac

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MKWD_AssetId.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
230KB

MD5
bde38972548af93c1c2119c74d4f66e9

SHA1
bbeb5ebd4546adf6b5d4f9a52f5af624605278b6

SHA256
4d96a68d04c00f39fb8e2e0048fce70d2fa5ce1d6f63e80aafa81fee14c93f86

SHA512
4da2527ba1deee28f577e6c61f3e6d046257bba1b146eb683b830cfce5775d5db7724bdb6af0e20942deebc6aa64b82bec629bf6698247c80a965b034d0f1a40

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MKWD_BestBet.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
422KB

MD5
2b18c01e95250820c9a0d58b1549971f

SHA1
8bef5a141856d3016616dea229bcad06535b09c7

SHA256
af402849163e913c64067aa892612bb3cf1cbcde53218a4848b808f573bbdfbc

SHA512
62d4d8bf9b56603562d1b60376c0d290f4a8e11fef4b19f81e8998d3537c0958891e5b43e02ceef00aacc1ef6cfc0038bc47275d6dee0bf70fb0b8eb1364795f

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MTOC_help.H1H[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
531KB

MD5
49e07db610d1201382951c2aedeff3f4

SHA1
178b56f11e386eefd0943aed40f7604020a027da

SHA256
701786e3b522330130f9ed54bec87f2f0ee90497c241d3a2044d82c82593126e

SHA512
a63caafcb9b410d0ecbd5f482513f3e52046ab2a9604c5c4ca61074666b6c95d625f5f725a164391880262002450eed06696014af8238dbf3cbd9fdf3dd44da7

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
15KB

MD5
c99711e05410cd9fb92bdccfe2df157c

SHA1
ae45686e02d60b44a09dbb0eaa4d48edc0447db4

SHA256
308141af9b6c513ac36f3767c5050bacb8e3d41dab8fbfc992263638c55e2aac

SHA512
da299df323826d7d57f27fb2676c5fa4fed065870ce4b48333cbcd393a1498106240467d9dc40528c69e9a3026c31f5bd0e7fdc5838cc1dafd6bf7336124d921

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MValidator.Lck[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
641B

MD5
195c572c452400e07216ebcbf6fa4c9f

SHA1
caa186466feaa12a4a0a22fac9c5f5e04d86a19d

SHA256
6409c703ee84801e4024a41c7e31b1dcf7fdf73547da19291d0b7e4dc60a99c9

SHA512
e9bf2361a31bda2db8c0b10215c665039b2cd802bece6ede00592c03cf9b576fa580a782eec83f13a177a8fc40b712471d5a0b97595c53d2ce83b25ae73b9ecd

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help{7E352021-69D6-4553-86AC-430B0D8FF913}.H1Q[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1.0MB

MD5
bf242fa81daa66e1bc13c7afe1ab0f81

SHA1
fa075103b807b8fa81e7a2a3c817848cae9752e9

SHA256
7008b733dafbfbb1c39751fe96119e423c2b3c2ebcb5e8f33dc7c0c4b56033a0

SHA512
f8bea51aca3e6b7be28be629fb182ef3631702a592c3e2b82a7cc722585280f56a01f1e18ad87a86d71f8c8fc83e0a807679ff7acfe9fb06ff08592825527f34

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_CValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
12KB

MD5
2d053e5604343eb074e1198b7c476a18

SHA1
a61b41266064ef04f12306c9463224292b087865

SHA256
df3d7de648569f3c2dba79d603ae848cdaee47a63ac0b817dbea1de8cac96874

SHA512
4a5e867752166f29cd2faa41c1bc45d43f521e1ece59d6b83edab54e9b9e359fb8be6bae6a3769e9edb2b797f0e22f0657e97ef6e709c45d429156ea90fa5c0e

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MKWD_AssetId.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
230KB

MD5
165d8744d0493364003c35b114293121

SHA1
f59a1c79cef1be85e556135d92ada1cfc8020137

SHA256
a608f9571dec81290594a45554894acdd8f641f842e719ca08587410a76f491a

SHA512
524e1c3274bb8168a7f772d176b561cc63f93f7f897b607d7451d221387f76aa7682f32aa43bb074dfce63bf2f7dce3d6d16d449133316e39233baf01af5b7bb

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MKWD_BestBet.H1W[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
358KB

MD5
c761cbbd1dcc168dbdeec1671b743912

SHA1
b3dc619f87cafe30e2c452d7fd8b19cd43649863

SHA256
9e54243b02613ccf494a6848675ae3a5983f723471c3e9d1f68f55e2b463cc50

SHA512
b7b227951e75753337677fdbd9585481d4c40369beecf5ef16c6b80d9e70e8687eb61845e0e7dc3742f90192b30af68f2ba40de17eb56c151879cd26ba52a8d4

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MTOC_help.H1H[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
352KB

MD5
8da728fc5714756e4b931792117f6801

SHA1
9043c5e181d6e969bd4bc79e59d973947b99498b

SHA256
552c13d4412e744c9cd39efeca7cde994a334385f23d5382366f6812e27011be

SHA512
ccf988ecd9e3fe9f36012916eeb78aeccccdb34b68b7cf14af4844fe296c3420202706a095936a73ea44bd06bde4ca0bc50f725b6d894f3454d0ddd70affc5de

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MValidator.H1D[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
15KB

MD5
4d41e9240a861ee7157232591e0b68ea

SHA1
0eeef0b4da75c72bc43347f76068a65585fbb771

SHA256
9b4246de4ca83052476581c8d0129f267709d98d1fac1b5adb6e86d670eea7c0

SHA512
2076e88342ef72e86c06fec008d449ad0f8e1f34ce89dea195a4189a9833b1494773634077a52ebe85d413d8aaf3dcaf8ffe88e591d258fcc681994e82b61e55

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MValidator.Lck[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
641B

MD5
01652234f33fe6c8312933fc948d8cd7

SHA1
beba7b76ab473ed9de6ededadcf1a92c836e4198

SHA256
b2c0a5b0d4f8f9fce8d6de700b5a8899aa336919fe921a6641d1d8154ddd8516

SHA512
e54c7a724f870f27d7dd5aa104b578eccfbf200469bb9a653fdc304dceb3706aa01b8994768ac5a09df42f24ee6155c67b249fd550b0d433ece40e0c9271e3dc

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help{E1E8F15E-8BEC-45DF-83BF-50FF84D0CAB5}.H1Q[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1.2MB

MD5
6f8bb54de6690fbf56bf4aab6c87f4d0

SHA1
1dafc4ef44b16ac078728e3b2e9a08954d07e34a

SHA256
ac1f9ec5e93381291178eaf317b4c038ac97a9bce090346c76a74c6f16413aaf

SHA512
106e7e8ba731d01c9d932eb8bb78718128a63d2f30fb67644bcded6972889d304e7723d9095ca48509bec679ab2dcb7d038778c5b038277ee75ff9c5974355a1

Download Submit
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\6d14e4b1d8ca773bab785d1be032546e_18cc84e5-41c1-45e6-bdc9-06ff0c9e128a[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
985B

MD5
de2e9bd137ab7e663d5289f3f4544174

SHA1
5baa2c09c63c5627a7e6c3068bc6eae1c0a5506f

SHA256
bc5fbfa63aebc2beb27cbc2a470128d3cdb537c28cb57eb3697ed1a043dac9a9

SHA512
ab916ade1e3b709fcd4dd47469ff701c02102581c8111408ce2dc3e3a84b5d91e7d000027e1bc9510df3dd4890cc548ff8d9b989a9da61ab4363eca29df86f91

Download Submit
C:\ProgramData\Microsoft\MF\Active.GRL[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
15KB

MD5
ae32b855430d0c651bab0e0d163a28a1

SHA1
f4e568b671c7fba0a2822aed5f4b599023fa50b7

SHA256
91e6fa758d94d610ff4ed080bfedbc63a6a1118ac0ca255b8bb895161e37b02f

SHA512
f26ebfdf44ef1f6484461de132a666d561772fe03a922071b4875d3dcab04c2c184908dfad8ccc4d871590ed981bc53237e72f1b1e0825f0c5a692b4844a9915

Download Submit
C:\ProgramData\Microsoft\MF\Pending.GRL[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
15KB

MD5
caa287a9d302e030dbcc7a1e6eb9e943

SHA1
c77c97b93e532779af2d82b1b23d83f5d93c67df

SHA256
43338f59e5ccd68d4ba8700659673ec159ba4ef1b34a0a3d1fe6757d0aee9196

SHA512
673cfe9040bffc075851c810241d1d55d9a94ee9ddb4296d52de69a97736114194085b67439d57b022579ca050de7b90d98b07d4b216cdd2555d53d2fc513f6d

Download Submit
C:\ProgramData\Microsoft\OFFICE\AssetLibrary.ico[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
5KB

MD5
44bf3eb9237590dd419dbd3d95e45003

SHA1
d2c48aac3557a9d680c558e20d4d96bfebf47fe4

SHA256
21d6db07431b0e65d3852618832b616de7c41b0eb8cf3c2171a7c060ff4b761e

SHA512
0a125c16e9cbc71eca5f03bc67c2eb860e25d63cf2db07ed1d77f16f81612af3e4be489cc943784a832b72cfa51641c3358d47b9072f03958933a12b4d8b0ee4

Download Submit
C:\ProgramData\Microsoft\OFFICE\DocumentRepository.ico[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
25KB

MD5
9946eff4d4bab428e902f45712ac5f83

SHA1
c762f89c8540926f9ed680dfbc64c2a68af3b120

SHA256
55424bcace2f7bb0ae2e2ad4bd19f34db790f0b976f21588d3ad9437efb8f26a

SHA512
3c1faa875399093c09867e91c25fd66cadbc116662e521d819e14baae78a339f93bbc8e2b075c4d5d4c1eb71be67ceff51d1503c6147c1d7cd631f374a180129

Download Submit
C:\ProgramData\Microsoft\OFFICE\MySharePoints.ico[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
341KB

MD5
ba275e1b4a7354fca54c6d2e64cd15d6

SHA1
89d87a6768b60ab22eb04e696b6fb20aefa78683

SHA256
943759b29830acbd719ecb73f33eb5cbd2ead509c4f1e30c8b9e1cf87f3a06c2

SHA512
d9bfbcbe4845f3504341b7cf27b4869584472593fef20c262a25de496d4eb6a34bcb8c54b9443e88273f27b43b4383798e34329bf6e069026db8bba67f5656d5

Download Submit
C:\ProgramData\Microsoft\OFFICE\MySite.ico[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
25KB

MD5
e256688b35710896d93054674c903c2b

SHA1
5f41e8fbdf8cd7542efd40d52a5432982cb71530

SHA256
606aa1bf000e6d6b5aac20de5b4d43eddf46ba641ba4ac6ecc4b0f4862194a1e

SHA512
3bcfea7986fe5bc4f592e94ad61389fc2445ebf87c5d33107a9514c7e831fab99b708dae45ec23e43ea93f2f24ef87d905a1993cbb5edb9eb0dc1bb7b466023d

Download Submit
C:\ProgramData\Microsoft\OFFICE\SharePointPortalSite.ico[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
25KB

MD5
d458b6bac0bfbb235980330bd49f317a

SHA1
a485f56f48c8e7b5dd3c395fbdb47d87646223bc

SHA256
b96665d8597f6f53df769acf08c3d7fa857173ca85cfd587aeb15314805f1918

SHA512
41da9628bd5009020d17fa32550222e9b5862d4387e157bc55d443e57cce03fa7bef2130b24823a76efa686fa010e9c2a69c11e2fae7f419b7dc1c5b99f71cf8

Download Submit
C:\ProgramData\Microsoft\OFFICE\SharePointTeamSite.ico[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
25KB

MD5
2c253ef2d96d843e5afbe4a8f8b5843b

SHA1
a3d034700c33ff89fdd779fd5f5d55ad151806b0

SHA256
ba6d57234138cf481fdd2b0d1f5bd9ccd8e5571eb9cfa1756f56dbb56b1d75ab

SHA512
6700dfd5d5b128a8a35c44af20b0ad67cd6ec11d1fc8311a11aa2a93aad4427e2bb0520b80866adad84bf483222e22b9556f2efb02aab6a3f8f90c3f741e9d31

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ENVELOPR.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
14KB

MD5
c16de6f326b0047e39b30a6dc5bb7ee3

SHA1
b13b0165e69d51bfe95557932fd2ffc0fd6c3103

SHA256
c2ebe88c9a805e52267a5ac068acba1066e7b651921300598a225b8cd2f7d413

SHA512
e67bfaf513670da0a41e74d0e6ef04199d427259fcded7b0e6da1d503b3de83541199f56ae7c9883d49ae3e246b1dd809ea873cec71f5fbd8e2f766bc18a6b31

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\GRINTL32.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
48KB

MD5
1bfe5e64e078a14c31e21b21477a7c67

SHA1
0f93090a1e4a7488a524e98b077b4d111e135781

SHA256
a587c8b03b2f786115ae1ea61731dd059dc1e4b39d1db4e0ae0f588b0635c06e

SHA512
8e2a4ae6978f995c5be88e6518ceb126c637de50f6d8f88af9b0ca6e7253aaa5f0828d3a4e05510fb3d783ced68162d0df11bcd23ba4c68d06be6bf73acd607b

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\GRINTL32.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
246KB

MD5
d2fb33e14e6b56bd03d6bf64ca273904

SHA1
60a909c4fd71ca89598363878af1c948b0dfef24

SHA256
a9cdacbcd9edfe9a735f6a8940153baee2c8760cb643ee665b22cc213646f4c4

SHA512
c36ba5f37fa9f605c3273f7775caa4c4bfbcdbaf02a3c5a2287e33ba5d74a2fabe38e3bc06f92486b4a8ce2a7d93c21eb435e04455dc674b825034f3b9e76dae

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MAPIR.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
296KB

MD5
9336013439e225059d30bb82fc94dc89

SHA1
39489730eca7b93fcbf242ed8c5a36b0381b5598

SHA256
577084d6e61fbe805704028a59b55720bcd94264a80dc98fa27072c45ab5e087

SHA512
71e2ca08c88b6b5953a08ed4d50758fb64a60b17f24b6ec3d094d4439a9e9c5ef2b42e5f9c2210416f5f07dc88942a7f2b9bd4b295647eed998374117fc086d7

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MOR6INT.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
48KB

MD5
4f9686af0c1a1051456e0aea4700558d

SHA1
6c6f9ebfaa0b6d36929f796841719fba84c1962e

SHA256
6efcec56975d8c606485f601c311d524eec114d695823e7e95fab4bc13653f43

SHA512
93100930ce4c48220c3e590c445e0f0a821ff9c7efa3d720f70770700c8613dcdad305dd518d3b7f9254d734fa0e461e095b71ec6faedeba112e700c1d728b2a

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MSOINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
94KB

MD5
484030922d36a4df9c8e82d2c9954757

SHA1
97fb5fe096886928bf24342087c5322bc6da343b

SHA256
3c6f85b95fddfe8e743b044a2a1d77a74a23c0d7137ff952eaac09468b71d5f1

SHA512
d21d42f5fbac33cdce781bdd48a2cc4eda479335c0b2178679dd65a8972a0573a466b06289a802915893636083d0e7eb1f1cb635795518a2d934d26a30ee9c37

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MSOINTL.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
2.8MB

MD5
1d6f119492b1f39aaf06ffe250fa5f77

SHA1
2ca34a314ea2e0c302527657ca8c0799a06ffc60

SHA256
ab392b0ded22c0490c997df461b0c2221643c05b12a4c9d3ba477d96af5912ce

SHA512
3fdd2a990a6f0a114290bbe199d40bd753151c6c575307165658301a8b82a49cd186bb464ae79cbf2953027bd1c29a19de762313b6a9d5e43a48113f2dc53d60

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OMSINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
45KB

MD5
5a71fc7ff584e2fd5845c66db3ba63e9

SHA1
675a91de6e004e9310b987bc0bb9da9e61c86dd0

SHA256
7f70e26b2a734c00cc6821d1a90081219b65f59e85efff26a9607f0e14774bf9

SHA512
283169f092c82956ea7f16fa720ae32a937b648483652eb3e5aed9bab8c02450ae9d09523c1d468ca1c9cee50ce5670dcc372610317223cdd6cf9fab3390cabc

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
31KB

MD5
476c03d3fbaf710c2b43951ac1304d05

SHA1
9f548f9d843045d48b98626fc5e70f70962a5113

SHA256
6f8af0cb18bf2064014be7a0f179903c38e78e1b18a09aadb6c2c1095f227a37

SHA512
b0ae36db28e7c9d8bf0037ea4e6184b391d870fc2cd9649a3720f38ef725d67c525a048a09419debcd39a409ff55491eaab0ca3daddcf8570877f12b76c5cdf4

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
255KB

MD5
82eaa079569f95c45a50a5e17e6cd5ba

SHA1
1c8fd4a3c274407ae40a5a27bb9772d5d53d3020

SHA256
6bcc2d5ed2b328185a503aaf37b662957bc5568d8d179e145145cdab3f6ee819

SHA512
95d2e2d65eb42fd38815056599ff508ed43af6a9ff035fe0e4fe04da3b5acf4a2fa1b2fa9cd191a7ab739dd3c7ae20480664c1c1a2e0e7c9d6caf8aa96986025

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLLIBR.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
221KB

MD5
82fa727fd8e7ae23df0f424de62cc6e6

SHA1
7c108917eb31907d93e2c7f67e5f502d418950ff

SHA256
e05f579c4f08267b2f074331d4b110143f47759e361593a6f012a9a84681bfa4

SHA512
d2ac82295c9431b590de5ff0d718c13cd9f0290c13eeb18f4a7edf252e87e4ed5fe0bf8bd0ea1dd57dccbef3f0e274cef19703e072a18d691e0b2a8a3beeee42

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLLIBR.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
665KB

MD5
95917523e8eff4d17078cf10ad139142

SHA1
4d41922bb81d12351d6f23d3178cce09bdc446e5

SHA256
1a14e053ef62bc0109b9a00e3e09825e3ed0c80e58a9b7c4f589cab7f396b5ab

SHA512
b44c9171713b58530e5b0f9cb8c1194e006d13a35d538600168bd85ba73d5bb822f4a920560bd33b88e14c18d61928f34d44ed21d35f27009444645f35e47c2c

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLWVW.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
11KB

MD5
56f88e244f3d0445d025e69e4b47584a

SHA1
124da504feaa24e1d8e6504003a68cfd3e58eeb5

SHA256
ae1deac3a01cfb37e6940fc0619451df99949b47e12a8781d8654cb360fc18a7

SHA512
d5cf49eb5cb4c2300be33b4933f7b0e1532580fa2e1b9fd455a25971ce42a36befe7987ebe9aea6d221401d6594aaac0c81315964ebd6294c85ced14ca25586b

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PPINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
51KB

MD5
5e53b5fa32224c61f39ed74ba69d5ba3

SHA1
6717ed2f1c0402b9953e675a8e63b3251331f225

SHA256
191afcce687657802d8631766d404e91da9402240436a6ead07503dab9456803

SHA512
6259e196f9f283c3ab07ea6f1e2efc56ca52176e0079efe30d758d308bf54ade26d43e0f953de2092573cedc71701b08f6fedc502103a807f0c4912852411f72

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PPINTL.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
280KB

MD5
bd33aaa4196485b13c148bb06e515518

SHA1
be9497880f23c3083540cfe9e8d83ff9fde8a27a

SHA256
e66c415e940e5c0873c24099f965f9b816fa8dffd9bae69fb78a38aab5b3ea5b

SHA512
92cd3ca5053b811d0e84f72217b39ef481a45e894ceb68b3a07d4283663c0cd4a72cda8cf8ffa0247636e549e02d2f42765b9accbd3942d77398bd0a9af96884

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUB6INTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
105KB

MD5
8ac49443f55cb6ff9e596caf233cd9a9

SHA1
99c5bb7fa53cfeeae43988792cd3cb7ff632eb28

SHA256
4d4db9b4ac6f7d94415349c014a6941b3ee364b460095d96f88539050eb5e613

SHA512
dc91988d6a6d8a26b3ee2eaaf489dbb5b63e4b22fc78f027cd3df9d9a0cabb8b23dd97bfab7d091e9390f6ed26ab6736dbb3877bce142b9af119cc71815a6fc5

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUB6INTL.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
568KB

MD5
5969456f1900faf30869511034004f0e

SHA1
f633cb4712d9b776a09f5c0ccbeb9700a3c467f9

SHA256
6cea6d5367f0e9083b0e114a9e0eb7915bdcb8037abed049c8e97554c21bb530

SHA512
f565cc0e715ea4266be31bb68567255d72533a6895eaf1fa674a0453b12e655125bf6b2743914e3497614544265e7d4f4c1a40834e855799ad7a4a771a5fabe0

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUBWZINT.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
363KB

MD5
e9f430a3430c31b63fc3ecaa6eb4e8ea

SHA1
fd148bd35e2dcab94b0285c8c3cfe078ad565f11

SHA256
6a75e7d8a8252b6cf9de163fe8f6da3deef2bebfb954de79ca4e0a92acf4483b

SHA512
9217e0587e0e6a82b7c8a089857738f7749ccab23f1d2bff25c3a3193cdc8060c308605f3cbc5e1e5b9d1b31589623272aefc6919af0a8478dad7d486fe6ebe3

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\SGRES.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
13KB

MD5
5b04950bfc5512bb1aaa820288003a7b

SHA1
58731ffa06761d07929be09e7922cc20504c83ac

SHA256
ad18d40e62addfde407dbf1f02d79acc4b938cefcc6bbd47a9c57093ca330e44

SHA512
5e09c4625a68bbd1a329e9a29ae65cc7a82b0dfa336a4d4e0a705c74d68f1ed16e310448469b756972ba0ed22d0443fff9662550d44efa4ebef0d7805ec5ab97

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\STINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
16KB

MD5
bed76caa28d5cdb6b72f88ff2346b63b

SHA1
bb5c0195d7a76fcaaf84732ed7d48ab3a5249caf

SHA256
d1b66c7cae763d2fe6c1995606c3444b8e85fec70fdff8953cdd8027b47799b8

SHA512
14f34138f7f95cf503091abee2deb80b3758ce549837025e2ee999bd216b6a1b308e99aab55acb28e03d33dd105c96c8a05f0553e4ba78927d40e0795cc02bec

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISBRRES.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
26KB

MD5
5d23869f1622c645b7a85b073a93b1ac

SHA1
dd376af3d8f3ce24d1d09cb2bee4f88ddd5546bc

SHA256
350888fd836ad9f507e402b675db5cf0936e5de57e7084250286cc9110029ad6

SHA512
8115d3f060a6a9efdd9034114bfc6bc38fbc0065fa59ab39b45cc34f21afef761dd044cd537d92280d6ef6279a3e1b08432bc8d663ed4b37a15a36ff1f1f97f4

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
477KB

MD5
e83fecd34146d237914eca0ac490dc66

SHA1
7b1fb6c65921ab026ccb2af1127b8faefee7e992

SHA256
e47300ca6276b18ba0745ddcd93d25fc5b44f3f4d1730a0d4937680a1c34ea58

SHA512
d207a6087b69bc31a0c23d39fb72cdf883ddc2397d51a9e1f74bdc781933aecff321b0b3ad86c5eb14e4bedbf5e52bec3931fccbefd3639c4c8f4543b7c2d61f

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
151KB

MD5
9eda1e21eb8e51d1d172be58e908d965

SHA1
d3b60725d9996a963d3ff268a72c9d2a8ba9a70a

SHA256
a0de92f1f9579e3a2006b31d60cdf0251a4fb089a14b50f5075803d47c9958e9

SHA512
8e70b5686bdabc02afb8ca85430b48549138081b8b4be9d8b182b644d02cb0bb3c4f26009899ec77079d997c48ccf376215aebc7f52ff169eef9dde4f3611d5c

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1.1MB

MD5
2d5efa6d8ce577162591da83748155fe

SHA1
8480a0c95e77bdc053f3a2de7a0f688e40fec920

SHA256
d3d1d441827c05de1abdba3ee8a470fc07ab33739b4863ea58a8477a6b3e3cab

SHA512
5ea18c75b688d9a6fa1511fa555caa39194b9b9a98adbb227ddcdda5fd78afa2486c958a0ae1cb93eefc9a03c35ed41052085ac7c032168f308648a84bb2024f

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
149KB

MD5
5b95877f4e0d434e81346d4484b9b092

SHA1
847168094ec68690a792d3daabab2627add324f0

SHA256
05be4ed67442e4a227aacf32360cf4ab775440e3c78c005c5761d2ff9fa683d2

SHA512
0ad2390581e8d9f7a1e852faecde978dc95ef052099dffca33dadf78e538c64a451ceb15748252ecc0017bb539c5fb31ca42998a77303c6b10d9402c831449a5

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1.2MB

MD5
1ac03772ff8388bd247eb7ea7d244f02

SHA1
4b93f013c820c5ba2bcdcc71f49e43510e0c046e

SHA256
e6fa0fe56f11a70f468627ac319b6629f90b393f153498cb34980f5fa8bb7b49

SHA512
6365aeb6d427cfd318dfb161d77a3d6d16223c4d40d175bef6dfbac201bc162e720390e9a61f06572b997b38a89756eadc0431ebf80fc837370f66873fd6f065

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLSLICER.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
15KB

MD5
4a7ccbbff94cc4f855e3a6f18a56c795

SHA1
2d340cb0c7e88f8c696b0e236004a4f793a1a0a4

SHA256
72fb6d5fbbe22d7848fedc72a92eb78853fc69fe757cdf467f45cc3a6d6e41f7

SHA512
d633f57a89428e685bb65921e33b5df587e2862e633c8491f1f9bd3ba3c572308b6e72c507d4f82a673b89e2cb94454944965d1faa909b427835818bb550ecfb

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ENVELOPR.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
14KB

MD5
b39d1eb1d64034731f279f80fbea351c

SHA1
079e95001a0d13c58126c9e709a87b2899b2b6a7

SHA256
9b5fdfc19013d992d7956fbd3b1f8571f968004bb0600f1b10c97357906a1293

SHA512
7442f9c0fa9aa7a5fc4893c9a69ca5acb7ef4340e1a4df74c546b4a0e60e914d79f4c795f436f167861e6c329f7d95421f1a93a5b725c1854a9571281a2cff7c

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\GRINTL32.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
46KB

MD5
a933d072bd07f4994d4eab6e7e919378

SHA1
e6418a2e052baaf4a1ca65a805ba009b266949bc

SHA256
314b69f6d81bb418d0761db5c4691332cc9020cd7f9dae44af2d2f88d483c04d

SHA512
9fd9aad3bedab1a0f0bfab7040cc058d54ed3101d7325c3fe3067bee7a25ddb7d1a841de2921771672ec639983f6027bfdd514963578efc307802a3c510ac938

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\GRINTL32.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
230KB

MD5
18ef88532fb365acf7d415acf48e564a

SHA1
2cc174a6c348a96fd347f5cd62eda2c997a1e81a

SHA256
340e2528d6c4322f7ca2cdf3b32f1c6f0a225653a2bdbf927aa226c99e1aac57

SHA512
5961e5dfe9da562d9952913a70f5e7cd80cd2769b5bbbb97807e8b8edd53c5b4bb7e12d00e3f2b0dd6985608904bd718ced7d524e2ad92240f0ee642968c24bd

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MAPIR.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
287KB

MD5
4f65702e8dbfb1335fa9dcc813f6349b

SHA1
d0e47fd9e8109a953a6667adb9d143566f6b9bee

SHA256
8ee51c3331ed15682c8da0b07f1950b8cbd5737a3548553542e5950cd8b61663

SHA512
9a0ab3d9e94475060f72b812be47da550ccc5b8d4138f2cf67852a2dd235a68e05169f06c35df956cf913f502120b38530bdedfd7ca3a039c11a5ace2bbd9fb8

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MOR6INT.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
48KB

MD5
98be2c255695d323da7e2d068835f49b

SHA1
9a22aa65040c71dd9bcb5c2b6e27414047ef946f

SHA256
0253f580a3e5564bbb468c8026fb1a6522680aefcc704ae67f82698ae23f582d

SHA512
f24609fe84ce347ee160b00e213ddf88400a4b65f7eecb9d6a187cc7ffaf888f036e2c04fd7df2f67536e5261ee9596535064881d4f81406ab6dbf5beeedd580

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
92KB

MD5
7c0ffcf8e8e9fc6421cdaba1589c706a

SHA1
be8ab605a954c23f010a6c6ab6417c0c732623b4

SHA256
0eb1fba5e2ea7d31915ddf1d8f24c157f1556684ea6fe87f6e92bbce6681fe90

SHA512
af7253f948143368b53727cea408a1635c63bd3bf1da76450d37226efe06c15bd542332a9132db8c69343f41f6412cc8320628d49aa98c3dc97251a5aef76d3e

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
2.7MB

MD5
f86dc7d33fa7bcbf7c651da4973f505c

SHA1
c375cd0f1f5d8feaaeb26766e2325ee1a7e6a09b

SHA256
a01f2f80357ba67de06c196e379b153fe5884d1c44db4f14f9c369cc1413cff5

SHA512
710e582068c68c4bcc5a066a59b723065fef728ddfe38f431ca44c06b2181e49f8e774100efb60aea2a87cea1a1540dc0d7e6cec161a5cc5d7d75b029fa83667

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OMSINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
45KB

MD5
4eef2206f69ef8a15336eb8e5e0bca9e

SHA1
404fe0824d3f04c8c7543155644b03dde5c0c932

SHA256
31906f4235cd3eac9480235390e9c7a53bcb13506e7c23ca6ce50ab3ab145937

SHA512
c0d9585a17e3e2b725bf491f45308bc159af372069da39cb4938c0213b18cf38efd6e497b190e1e5f1d9dc3af26d664ccafc7363618693a65b321e98726ede75

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ONINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
31KB

MD5
0285e6ffa868f06e438e5e8a6a99e739

SHA1
37835dee8e41468caaff643f97fe5f4fbb40778c

SHA256
cc53273866c3c36fe11ee0a85d027bd6fca6acd786b6559505962d52253109c9

SHA512
aaffd02b1daf553bd040a8bbb4e808e3cd28abdce979a966094fd634dc65673733ba51e6f2ca4e01df8ffbb1e89681616fc6fce47326d0572c8546ac4ce68117

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ONINTL.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
246KB

MD5
8a006df9e47a74e0f9b6d8b57e1ba9b0

SHA1
9262a905e6d5854d3e7a57a804d91eb821998357

SHA256
90eb905d630aa05fef85771bf1dfb7cdbbdc33c5ca07bbdd4563a0f57ea39a8e

SHA512
b3f98c07b67e796ab1dd126bb300914122b2163906fc8081a4de943a443f9be8da27fec878f62379fc15705ae608eb8b7bfddcdc71d64e66c6bea87f492f33f2

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLLIBR.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
214KB

MD5
ba270dc254e3e20cae817e13ae963dcb

SHA1
7cd84c1d29ada6aece1d6957825526bea1407f62

SHA256
8773a61e0cbd514c6c7a6c6dfb47dfc2566682debbed4f40fdedb586de0d7bdc

SHA512
411da3f17d71d0e596847c94b6c8e4c39e70ec3fc1e1ff0de3d796753bfe3613787bd6c44d514f83559dcb70ce1398e136a185590d906cd925f46334ac3f8261

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLLIBR.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
637KB

MD5
03979ce75a01632fdc3fd11826489c00

SHA1
62ecc3e0c9d3829ee7ea3e48cdd4bc3f23ff27ca

SHA256
0cff0af3b3039372952ee7dc9cd9fd8eb40c368053148c62242421aa435762dd

SHA512
a742befaf89aa9a0d8c1a6724509d64bf8fce7218b675529e89ffcb84b714bf163f6a90eaf73e7caac0611549c898146430b202ac37ee094d690cb49852a0e34

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLWVW.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
11KB

MD5
5359e7ea0259db79a555fa694d00e1b3

SHA1
1b67db86ef98d122936a782c64b00313c909ca03

SHA256
e392480453bfe8aa7a1ee9972ea882b4dc5ce1a83824b2d976066068892d8f56

SHA512
7f40b49f561e422014ff4d1fcb79d19528cc9d872a31330cbc18833f75f2d2675311a7b1a907610f130e7e7428064f8f23ff0569e12fe9a50420081fffd31c6e

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PPINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
52KB

MD5
3d59266f77302fd3bf69afff198cf59e

SHA1
0d95fdebb37ce63742cb93bd7fb29185cd8fdc4a

SHA256
a9a6ccb5fdb12278e0bfa8807634f4f437d8eb86891a146eba50b66185b2e73f

SHA512
814ee9bcca859fa70824d844a890d708b35940719067fe0694048fd0525f11aa2ab0e8ca22cd0ab53a14e0174b6f579e1f2ddd6fa44c2e40a1b88de7af14633c

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PPINTL.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
269KB

MD5
a7ce318b5fafe9ea6d24d339ddfac7d5

SHA1
8579c84628aee0d9b4bad0ed791cfe40280e06a3

SHA256
5c22975ce7b012625ee90331edf04ab63cc325ac0c25278268f1b068927f53c3

SHA512
e0a96c97cf1f19db4003dddfe2729fbfaf395ad4224c6381d3818515e64c77eb4c6affea479c0caab50a70eea30dd24a04fd53dd3fa2646258778ff6ec1de21c

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUB6INTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
105KB

MD5
d25eb20d4d35bb7b4b1b8c3ca65ecd44

SHA1
32be2f48d23a8fa5eafeb56c3e8b409374496013

SHA256
67fe70d717fa3881cb2ecf8ab0c9e931f5058a546260f874f7c83f6ff4e0de7c

SHA512
6547d87578500a6ac857ea49f637f7ff2cdc2b009c6d1d82bd0f70924ee1fce24651577db2229c3deb478752fd4f17c16a608b25ec98cf5adfa4f5df79c60eac

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUB6INTL.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
544KB

MD5
359390335ad8c8f7fc152dd30764ca6a

SHA1
c8784ef4d54c573b021cab39a7be9c4173fa2bbd

SHA256
f10d4879ca1445dd4ec382d446b4bf04329a7dc22761bddccfc179b277a30b68

SHA512
d824b59a41e3203fd50a7530dda55e736effd73cd695c53c3059454dfd4c75898433eed61af4db026954495d4428e99e07a9588bf7877eb3449ddf5b2e972288

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUBWZINT.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
352KB

MD5
9246fce3622b7b165f3f6fc36d6d2f44

SHA1
080c00c2c7c9112b2640eeb63b388d34421b70b9

SHA256
0fa425cd44d9812a290c6dbec9ef146fade3858686c495e9de3e38cb0a25f267

SHA512
c8b5e79223c8bae721ed279128c72fa9b4ab64387e9c23aa40be8211866dbd70727c8c72d5c734be83d5e7f3155b61a99d4d7dacc6382f46ac9e9040799eb479

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\SGRES.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
13KB

MD5
b9c5e5a5176f164624dc91f1988f821b

SHA1
6e92ee5f317f1afe117fd925ab8b0c41cfec09d0

SHA256
51b5e88a2523756fb66bc645738b1bd63239f0a6d1ac049d0355749787ba47c7

SHA512
3f5112bc64bfe07ccc3996e5e969e6af69c3070a631852194f8ce73316c7a12d7c191793fb7a65b5267a2bbd2b4640b907bd1c655d73fac620a92721e3d3b2bc

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\STINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
17KB

MD5
43eb2ced09901b65e8287194a4e163d5

SHA1
969604f48f4e181b6d77fd6557f4df4a1fbf2c2b

SHA256
3e04a9d859b832336f400457bc88485a97fcc02fd901853af3547ce0428a60d6

SHA512
c4f0d45277291cd259b8b2701c24a99775181de981004b64f2ded6c687977ae01fcea2b297bff87a52c29d613cb2b012623cbf423abb16a3695a5be779060eae

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\VISBRRES.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
26KB

MD5
0f461c1d0003a320a832f4b23209a15e

SHA1
5fbbccbb07b9c2ab00701d348e8e1e5e7b569da5

SHA256
32ba911c151da85b93899a01485560dbe0c3db2f12a50b0996321e562dd0ee55

SHA512
8cc17f415a31bd9a1fd0babe36f109b9a26d97c51f86ba801e4d9eb801eab5a093ce0f9abcdb9b2f754d2bab8f6dcfb4b47e824b68b9b4248f871f94f131d3a5

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\VISINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
462KB

MD5
6f90d82358c4caa9904d40225bb6ffe2

SHA1
c617b7799d099d60ce6c2d7f86ca0f4e82683b2c

SHA256
7f08f941a112a0985d59d2a54076b6d8986e2b763a216e3e6ceaf0bece84bbb1

SHA512
83c855c01906ba7b4774ea83181bcc30f004f50a7d80576f5fa90c2a3e2e72c08565204a380ad9edb17026b89c0058705d4db26bae933c09533374723e9a5c07

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
145KB

MD5
32cd6d5b88d4163f568a24b198b45ee4

SHA1
ac4a3e2829d52518d175a9074d60b0cf254c0139

SHA256
fbfdf1bfb6bffaf5e2d6d0bf70b73d3b08be224403a6943a365cc25e9bac2b42

SHA512
3157f6e4e7b6789e33ef927536b8ba5073ee683b44b71dde78c3d6e42cff5e77b07c1aa8c1ae433f208da15fe75c7f10ca49f97a4afdfa602bb5a3ad86f31e53

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1.1MB

MD5
f16d7bd941b292809c40093c83277824

SHA1
cdf7d15713bc5732062e7b5139350068ee313591

SHA256
a6ea2086cd5b529458f824a7f117f020de521b69075660075fd50639b3a1064e

SHA512
b504ce0b5dbb5a987b4ca46a79142bed908f4e05f62d23c85843f40a94dabea8bb79ccf9ae59f2774bc4aa5f4501f3c8225210d57b1e0c17265bdafae98650c5

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
142KB

MD5
f13034a5af710315702da32ffc15d7b5

SHA1
4878965862891181cdd64aa2cb82b43bd6134bac

SHA256
d35e385c1698ff7ad06e98f20bd654780c3497639b202c9fd4a4549b0ac4ecbd

SHA512
eb8d76b0fd7c0ed19e3bafd88119b301a2fb79153b92049800cfe1aa14277aa3f87610f085ab478f0f61c82c2cf55147a32af8b6cad383abb5216ce66e2d5a87

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.REST.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1.2MB

MD5
66aed7e10e8cab844c1fe2f0511a644a

SHA1
c54a8048c0bd28560ad108167e289efc868776c9

SHA256
3cfe0b6294df547d141b8695972548c7b52ed8bc14a9041593ed6380d85f3f47

SHA512
c3bcc2bdb46fe128608e773d78ccc902e262885bd7ff66fb09a82724d4b9741e9c9405f9cd75ba057c08587664bc71086be724955f796f92401ef8d53eb4fe99

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLSLICER.DLL.trx_dll[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
14KB

MD5
2934c1412dff31390dabd5edeef4ff2d

SHA1
1ab2c178148aa9696bcfe6b5ebc411b4c988a518

SHA256
15a2e4b114f82ed22e9816879e777fced127a957b3bbc40cd0881b687f93a228

SHA512
14fea89243d85b12cc17b2be28ae4beca4d439c45d87a4317c51062c0cea023d2e31aa68ed384bc9af590348c5a7c8def3dbf7b8ea1857ef11be27a89459caac

Download Submit
C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
32KB

MD5
d1f569e3a2c56d41facba3f47185b1c9

SHA1
baf94308f909c3254d6af090984e6b03bf370c13

SHA256
d1a78db6125baea0262e3d8136d7e60f063aaf6deeb2dad0411b9da2f97a1c4d

SHA512
2e8d4e02e2a94091bec96cb5af0627724bfaf3feed3af666c0535cca47ef708b5cb23ede1c7cb4e8f7e51a6a5a348dd7539162421a76cbab54483446ff0b370e

Download Submit
C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\tokens.dat[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
2.3MB

MD5
a674482ac2befad79aa3d49231bbfc38

SHA1
f79226dac6f4396c84ee8bb9ced1a7eb965588e6

SHA256
5d5c0183a759e2b9d656d787dae90b4775128dc524685422f8de07570cd361b9

SHA512
58759364ca5ef94e6ec4aeedac5d3095ca3d5f8b2dec843fac9e862830b1876fc835890e0e55fcb7cb58f9e213f96ffc371e0f101a9bc07475dfabbf66c9a4fe

Download Submit
C:\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
617B

MD5
77a2b1207f9f16966a1eca2e1563ec99

SHA1
1f2478d02c2cd92af72fb7c96d9c42d63c0418ed

SHA256
25c8c1015ddbb6b6887f59cf696bf7d36feb91f7b3618b3a2c5897a1a447a490

SHA512
25a9880aa30917072d11f6debbf8bb29bbd3b0a1865299ab8d379f28000645d6681024f54a93f1e6bea57b2454c53d90abd97af13eb2f1fd45d3d111efd83413

Download Submit
C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\update-config.json[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
735B

MD5
414ceda2b616370d48d315f01fa0456c

SHA1
6936a4312bb3893dbb5e2e6eb86ffb3b190a05e6

SHA256
57df7dff2015e19cb0d36423b5d76d0c4c4aa28ffe3e8c4a2bbe0a0ce8d50958

SHA512
91cf89becdd97721b9e978b0f5959909a6740f3d09aa99cf29286d76dec5747393107c5c60a915331cf542f5b6feea9282dee44a306092752949608cdc1bbf6e

Download Submit
C:\ProgramData\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1010KB

MD5
80ac6e031f97e25f921400970057887e

SHA1
14a905078b5e41661bd286a762179bd3799dd50c

SHA256
c71d2f7518406798d4f559aee1830691e2e760bebf5bf00b2443fee201fffff0

SHA512
e96ea0c7b3ea6081bf9d5f560d9e9b73181961ca0d8084ca3c6a0341a53a47ff325c3cf4f90cf294485ea46604367e8875d4661312bd88dd435f3221fc937a88

Download Submit
C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
7f77299b19dbd0536e18658b26f52c11

SHA1
0661babae94bf339064c70bad5271e42026fe319

SHA256
e6aceb8cf12252abc39f36bbc45dc6f23d1c11594f4196143de3f340292b07d6

SHA512
905a9e231d6cc3c2cdcbaefeb11809e6d85b42660688643e340078e9a55a10d721aad122876686655faeba6a24a6f596ffcf393fa8becec8df05743ddf3c54d1

Download Submit
C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
148KB

MD5
34f2e921b57275f089761b2a00220367

SHA1
0ccf1a12e46c969513bc8e5319ec455289ae32a4

SHA256
22f11044f6ae88f56b04a6087e8661745f0d4d7ee41bfcf7ac23698ac007612c

SHA512
09e7eee7058e705ba645cf7027f02d0dafa949b4a9982246422a9a065c37b496b96838470f31b59ed89fcf5dddda2ade67579297ae65bfa9317c9f43d2496536

Download Submit
C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\state.rsm[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
27dc7bbc5c6c5b2a794a7800a5a612e9

SHA1
794f110b159074e7a10001ea28b798075c5975f2

SHA256
bbc9c557621fc5886b7828d643e3bc11c5bd029458ad4b37291a4494414a071b

SHA512
b45c12007fc807060f18c785987d3e1866895a99ba2942840143e8a817aec75d83ab1367f69728672ca18f58c4fb7e29d3e08ae6d09ea8cc331bc150d3d6eb55

Download Submit
C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
140KB

MD5
e0a38055ad7bc903a9ec5db8a19a0978

SHA1
1317d61b6e9acda4377906f5d6cd991e52b77060

SHA256
3a4beec6bc78462319537c0e7b46fb2140688832197bc98bbd7ef6e0e7b20ea1

SHA512
751e915a23a3f70d66c88ea6dbe6b8a3110616048949456af163f1de749f7e49cf8395796a5fb010464ccafc3d08bfcd2fd445694afa504d7009d998a2e39782

Download Submit
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\state.rsm[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
88204bd68e832c48bc11e724d7c8284f

SHA1
62acd4b9c05c1f6c63d833f9c8c1cbae028a2322

SHA256
fd594ccf5cb72ec72c9dc0f4c9547c64e9ace37a9bdf0c830208356f98885f52

SHA512
1f9c9338024f197bb6842f5861984f6224518f2e7170df880d62cd4649325fcdb1909eb0eb9ca348f5d9fec3c91487acdc5434064d1d84997af82c6780e9c02e

Download Submit
C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\state.rsm[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
7b6affe0f61cf6dedbcb865801bb9cc9

SHA1
48a1f0edea216b51fefe1fe17e30577ab2f13c1b

SHA256
05438714f5e2c3b3689a5bf661ecaad465c17090752055d44e620ac432345d9d

SHA512
c8042ee2ec25a339cdc80a06541719d0b5ba2cf45d23198d71f356cd59fa7d6dfd77d182a088b618ef52c38cb36c0eb0fb43da3b6206c44d09be707c6d0f2329

Download Submit
C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
180KB

MD5
52d0b1ed0b29e15dc3534f4ed7c60dd7

SHA1
f029858c2ff953b6ca4fff9c453d7054c6449fd3

SHA256
db7ce61ecbbe4f5871d6d833d57db5e9877494638c7b7fb11a7073971167088d

SHA512
5782837eaf48df1435049a2c5a79c43f457b69ea65e205866264c95bfefadeddcfa5cefb88b405bdef6176197f62eef21b8ea1e3f863d55f1919879a8377dc47

Download Submit
C:\ProgramData\Package Cache\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}v14.30.30704\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
180KB

MD5
b4cfcb6a0aa50012af0bf441b090f0b9

SHA1
eb06157818a39fcabeb540955cd61e5edd1bee08

SHA256
d796ecf51613356602e64f1430effda25157ba76526de2fb5852830ff7de1b8f

SHA512
a7f20d346b64e9850355ac516e97c893f66a2f2df4f27e2ead9577bfb4192b6581776d372e954a2021f40324869b011e9dd3abb8c3227d51e1b9fba1c634011f

Download Submit
C:\ProgramData\Package Cache\{7DAD0258-515C-3DD4-8964-BD714199E0F7}v12.0.40660\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
140KB

MD5
7872225f9495b97643a7a34b8049f0f4

SHA1
3477371f6d317c31ba1bb31f655e5f900967de9a

SHA256
40a4812a4c804b2b57ee2d0ea67502d07a14053099ab6d092aad31851d75772a

SHA512
46d81315215bf34360e7128581838866a21cfa347ff31151945a9c217ab4916b70fc1ae6ec5b87d9124c41787e4e63c2ea3413989e1f93d097b8d2a53da53079

Download Submit
C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
148KB

MD5
aa3825aaeaab13816c0578c71d232975

SHA1
02c9e255d2273d0e0ddefcd6fdd8b30671b52d50

SHA256
046ab9b9953a9fc80e8a154bf6c55a287b8f077ba1a94869ea51d56774af6db1

SHA512
cee698e82361334298fc963fcaad35231bfbb8cec3d91eb8711012bd25ebbe393faf38b6073a98bf46a5e9350f5ddff60ca0f762129f4ad70445541ff71f8b65

Download Submit
C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
148KB

MD5
189f71590ee86a2afeee73f23fd099e0

SHA1
ebed2d5235ad55b19cd4b6855016dd025bdb7f10

SHA256
5c5521e72ff0e94cdc0ed8979254b18fb91e7782fbaaf2418c28c47fe5755f54

SHA512
e386d9ed79d239a50671bf777a7143b536b38be47d842c9c73b0f29f1e6ccdc120ba6130a6ed3c064f700cbf16de0b924eb0e79597ee7886086cb8ed6f97f921

Download Submit
C:\ProgramData\Package Cache\{BF08E976-B92E-4336-B56F-2171179476C4}v14.30.30704\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
180KB

MD5
6ea831acda0e181980183ff016f3269c

SHA1
431ef990abdfaf3613cd7ae5f20a6ffe4d792f88

SHA256
de4265014f9ec83c3575ecc537ccdc95ab09e819dcd7efce7300e48f8eda3101

SHA512
996f584059742c4c93048555e135582a661054ec602761e2541b5d1268ae04ea1d646ff3ec74a331f840ecbd728e6e262135775209b9bbe2397d374739ef610f

Download Submit
C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
140KB

MD5
8f552cb57b5a28cc4f12f6e95bca0233

SHA1
076bb3be579607f8b59cafa05cf75506e0232a24

SHA256
184aef5e5aaea8853fbeec98167134414708569834e3ebd2ec7fa98506f9886c

SHA512
04a019a7925c1493757bc6df4fefa08084df95272a9c7be7d90234faddb53e5a0b290d6904dc20b8c7f730904c7dae660a60cc011f0b1e745787a439e8d673c7

Download Submit
C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
148KB

MD5
786b5c181665daf53a7631946396e373

SHA1
645ea4aaac227e720117cfa57cb0fa27681539a1

SHA256
db12b1ba6e62f1f09e2c95dccf1b5b2ff7f10359cf6a33c79f8fd2be7994413c

SHA512
c4096a186197bc7e66d8970c92dc8f89f5cf11654dbb69a4813d38cdc17c58dfae4f103dae31da4cd8ad12785b1d1d41f77f77f59522de39c35eeea71b06f4d6

Download Submit
C:\ProgramData\Package Cache\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}v12.0.40660\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
140KB

MD5
d294d1abeaa5b6dc0e4cf5dbc60dbc1b

SHA1
1e96d88c5ba346841ab1f6670185855c9f79c199

SHA256
460c1f546dae157b380356182ba22fb23cd634237bad95fabd0695464bd22e3a

SHA512
3d88ff9df169b0bb88fe79ea275fd7087196249e8645db35dc5ccfab93bd6eda9d65528f47ad692250c4533c85dc216ad74a41e159ee1d57989ac927c9837def

Download Submit
C:\ProgramData\Package Cache\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}v14.30.30704\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
180KB

MD5
bb1669adcf37ea8ea8982b4c12b0753b

SHA1
8c02602a1bd3b1378a82cd845d01d1e25c40d99c

SHA256
05749163589b2a51d2622d57a4312a74ce37f410c11ab28c6ed0da7f0b39052d

SHA512
1990df1dd21be7f2452b2f1f9e569eb42665a9092945d8635c58d9eef50c70de28eec95f4124ab8ddd9dfe1660049a34e8f7c9f6122a6cdd5deef905ee08e108

Download Submit
C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
c726c87df08bf7a5c3c88b840de802d5

SHA1
b9430025b2df4c1f845d4e4b456094bbaa4dac98

SHA256
d3bcdb066ca05f82c5544c5c3be1d48d43711cd6869572a462c76b7de95a003f

SHA512
d3605eafdc84989d7112f6b9f1e7c5c2205dac139fec276e47ed9a0f55738fde621cfbb62c3e5aaf806a317cd1a7771ec9ab69c484ff2ee8b2d1af15765eaaf4

Download Submit
C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\state.rsm[[email protected]][1].[35CB212D-DB7B5D9E]

Filesize
1KB

MD5
ed2b28627f503c0a1488d605649cb0ba

SHA1
c9ab606e0beb56a6b0551cca05de031228e1d908

SHA256
d0df78c790fb3e27902503acaab72d8b9653839b0ed4b77d9cb6bb15ec80a8e1

SHA512
581233c6768ee8c02930c4fd2378edadb3b7304e0543b8cb5748ff418d5d501d52f875403e41c57471c0d8c2e8efbc12a56110cf417fd31ec959313bdb25a3c7

Download Submit
memory/2416-1603-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-17734-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-1-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-8-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-7-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-6-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-23893-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-23900-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-23901-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-23902-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-27058-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2416-27279-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download