e642de5564a66dba2c2da9bd657d79153b6e65c2c1ad55f8da5be0d471bac242

Resubmissions

13-11-2024 01:28

241113-bvnh3stkfz 8

13-11-2024 01:26

241113-bthw7svarq 10

12-11-2024 21:01

241112-zvah8avjej 10

12-11-2024 20:33

241112-zb5v1stnhp 5

Analysis

max time kernel
1438s
max time network
1236s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12-11-2024 20:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

mkp.exe
Size

1.2MB
MD5

2055bbde7b5a1afd6ea79974d1435a98
SHA1

e249c4f1d0910cb4660a3d41593692a02796472f
SHA256

e51abdb2023b560244802f7d9687944dc0dff3042c28d7bc7a2b517df6e24942
SHA512

f21f963ea6f3c394f61780825a0971f432450a7ca94353db0ba5915a0e190f0d65025c40756597b0170a3c23fb160e27011ce4a098afe2a518efc47a06874d55
SSDEEP

24576:AQkBF2DuFBsfrCbHdtvIwTGp+olFTPPxQoZeKVbygpgPh3aFMI9R2uacQs:AQIBsfrCHdtvdTCTO2pdygpiAJads

Score

5^/10

discovery

Malware Config

Signatures

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

Processes:

mkp.exe

pid process

4200 mkp.exe
Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

1900 4200 WerFault.exe mkp.exe
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
discovery

System Language Discovery
T1614.001

Processes:

mkp.exe

description ioc process

Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language mkp.exe

pid	process
4200	mkp.exe

pid	pid_target	process	target process
1900	4200	WerFault.exe	mkp.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mkp.exe

Modifies registry class 4 IoCs

Processes:

BackgroundTransferHost.exeMiniSearchHost.exe

description	ioc	process
Set value (str)	\REGISTRY\USER\S-1-5-21-2253712635-4068079004-3870069674-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix	BackgroundTransferHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2253712635-4068079004-3870069674-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	BackgroundTransferHost.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2253712635-4068079004-3870069674-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoftwindows.client.cbs_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:"	BackgroundTransferHost.exe
Key created	\REGISTRY\USER\S-1-5-21-2253712635-4068079004-3870069674-1000_Classes\Local Settings\MuiCache	MiniSearchHost.exe

Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

mkp.exeMiniSearchHost.exe

pid process

4200 mkp.exe
2856 MiniSearchHost.exe

pid	process
4200	mkp.exe
2856	MiniSearchHost.exe

C:\Users\Admin\AppData\Local\Temp\mkp.exe
"C:\Users\Admin\AppData\Local\Temp\mkp.exe"
1⤵
- Suspicious use of NtSetInformationThreadHideFromDebugger
- System Location Discovery: System Language Discovery
- Suspicious use of SetWindowsHookEx
PID:4200
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 4200 -s 692
  2⤵
  - Program crash
  PID:1900

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 4200 -ip 4200
1⤵
PID:4548

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4424

C:\Windows\system32\BackgroundTransferHost.exe
"BackgroundTransferHost.exe" -ServerName:BackgroundTransferHost.13
1⤵
- Modifies registry class
PID:1984

C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2856

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa3a34855 /state1:0x41c64e6d
1⤵
PID:1608

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x0 /state0:0xa3a35855 /state1:0x41c64e6d
1⤵
PID:2444

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\PerfLogs

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
C:\Program Files\AddBlock.ram

Filesize
904KB

MD5
85dc10d22c6c3ad29a56b277abacbe89

SHA1
11126fec5930086efb226926107605ca5e6f8a75

SHA256
828123e7874e7c8587da78bf1baed0a5fadfd707e79d1ddaf626bd22a0f066ce

SHA512
9a94856550c374f74c24d2a9a6b6be4eea0e64ca9fce22ebc2cf84738ea819bcf63dd4d9525e2e45641ba114687f2f2638a53e408c0278d0146a9590776388c9

Download Submit
C:\Program Files\ApproveDebug.otf

Filesize
816KB

MD5
a370ceed9ae7c7feaae81e740da017cf

SHA1
e4a4b65400d0388187c1cbff72a7303fb8441d36

SHA256
75f7e6fc953c7a27f43ed81245d9864453d66c9f99dce0918fef16a23fd09dff

SHA512
e44d5bfde4bcbaa17ea7290068a7c842905bb6df9f7849712dae88b4ed766415979a75c4f266e285ffae0f0ab2fda1174d3092e9dc2fb9cde7140ac9aa0a4e98

Download Submit
C:\Program Files\AssertConvert.odt

Filesize
639KB

MD5
1eae274c40cf1d5fc4102eb5c23e5e4f

SHA1
5d3be40895bbc1ebfe2565c1b4a4cb6e736a2307

SHA256
be863f20084c17f9667d8598f742318a31be116ed5f175cfe6d10af173fcbdfc

SHA512
a54c6edba04b4886673f1d7711f37caef012816c1dcbe1dcde0f91af3c0ad623027555dfb3399087ea39879fdd7aa1fc83c32e9215b14a4924cbfb836351cdd8

Download Submit
C:\Program Files\ConvertJoin.search-ms

Filesize
1.0MB

MD5
af2064e9e50c59bd872e653db8dbee8c

SHA1
2d95609d7e66bd0b9582ed4d5efdc82c42cffc29

SHA256
2870f06cdce626649c1ff17126dcfa24d2f46983b10384dfa109003ba1d77a93

SHA512
6cceab3a6120d21f1d099fd73151f93559a763644380b730d3dd8ad689343327c347863dbd973e397ad9376772172199ba87d9c02fdf947a4afe0b0778fbd87d

Download Submit
C:\Program Files\DenyTest.3g2

Filesize
683KB

MD5
d482c53a7c9165633af557b2b5002e93

SHA1
1464067525d8bc326f483cadf2ff831566a826e8

SHA256
a37ebbfe30c1868645e6bead9e59b1dbe10b8f70a931d315d7657279e88668dd

SHA512
ec64241db36bb986ed3c4141c1e70533f7568f6467e1821f7dc66256d1fb06189de0bdc483a012b777b640c50c256d91f6d04f22bae72da9caee378bb6044440

Download Submit
C:\Program Files\FindWatch.temp

Filesize
727KB

MD5
efd00408e81a3c49c9da89c23fba0055

SHA1
45199e883ceaf26ea395c48106ad8c9b8c704941

SHA256
5675c4cf2fe8cd54f1e078676bcece2263b667e07192224d6086d551f535d208

SHA512
10ff92aa0f350ba5f234a6803a3c592eaad6c6dbf5d38980fd06233d97d280bda444e13028e94e4dc1748b9e9ca19c2fdd40f61dceeafcd1c05e3a8440c9952a

Download Submit
C:\Program Files\LimitRevoke.xla

Filesize
992KB

MD5
75c1ae3c1c16a0ee1c2390c1ef6e9a7a

SHA1
9209cc5198913c2e28b030fd1b22a2e23c912665

SHA256
6cbcac1861e423a411f74e9d6bd2ffb3feeb9a20578364d617da9fcdea733bdc

SHA512
df54dc23ba0254b5b94acdbda85fd107be3ed7a16c96051893df16c79cdc0540bddc5fe8d50440497e05ba4e718584e1220f5c4567365236259225d765e8c155

Download Submit
C:\Program Files\MeasureTrace.rm

Filesize
1.2MB

MD5
573bf3bac85e1acc681f7b9077230d23

SHA1
f0ca7ed70054f83772add8800e529541bc9c382a

SHA256
ccaea31cc3b1bb4b166e518acac85a120cd69a0d6fdc6149510dcc9a06d62ca3

SHA512
e2ebe266ead2b5d624e2bc72cea1146fe5ea793492ee96f8b776fa2718eec316c3fc170b13023d9e75fb7779fcef07a7b2c7cd0107fc1965ec115645e19a8ec4

Download Submit
C:\Program Files\MergeUninstall.tif

Filesize
1.3MB

MD5
8b78e26a28145d02fa9002fab45184da

SHA1
71fbd9dd0df9a32dd52942ea45aee463c8205538

SHA256
5ea6308ddeddc62797f0912fa083faeecc1e3e879a7e151dfdff4e884bbb98b8

SHA512
e8c032b8b84ad9e905213a4dbeca63328fcdd488195eee386b75e3f274a7e79859ea6d85605f45cc97df93498b915f2427ab5f961b66b1f1caceeb852df5877b

Download Submit
C:\Program Files\MountUnlock.MTS

Filesize
772KB

MD5
6b1d36cb5e225dcf2d93096125e960e7

SHA1
9da4aeefa7810061b85a504079e89e4f10ccc592

SHA256
d5546aaca756f5d50e610094f25ff97f0708d87729e3e2540f4e02ecbdffb06d

SHA512
5abd6220d9a88184efbb6851fef07d768682af7479c66219d663f0d353c075443f6d0235c37a36c82f818e6cbe088ded32b4f66bdcc08ea61cff1d55b0fd1d45

Download Submit
C:\Program Files\PushBlock.css

Filesize
463KB

MD5
3f3fa517108a2b67637931b12909435a

SHA1
d5b83a51a1cacc356ee1d00d289573cd0b649790

SHA256
806ac5a2c9e2e2dd05d6f1f1900376caeb1c06fb0d528f96554d3277fc928586

SHA512
472b3d1c9d9fde7daffb7b607b02e391e456913f88f3a9f2dbf7294fc4b230ca5cfc55fe461de9b43c5455daf1e1e82a7eb2c73a671b604c4016e17aa1c25a12

Download Submit
C:\Program Files\ReadStep.wma

Filesize
1.1MB

MD5
2f9aee9e024cde86d36ce88ed0016642

SHA1
fde847d7e26115a614cbb3745ce77ade46393279

SHA256
cbad9ea7e4dab4c69bca7e65d15f028460c917e59fc55cdaf6fe4aaa28722b0f

SHA512
63e6be910e61ce43ef52d1491a4e5d733430cbeb40d229408e55a946e57ac8a8ab75753ce3ec4e4c8c4011146df5d1213acef68786a5a79825840f96918920d9

Download Submit
C:\Program Files\ReceiveUnblock.mpeg

Filesize
948KB

MD5
69b4e9f097767e5b27805f92fe757b54

SHA1
1b2efa597ad55ab06cba7e344b190c6d63737005

SHA256
fc6c84fe41104659412fd806c845594584d35174b85cf1ed3a32fad5a73777ce

SHA512
164137a37c13f303e0635393fb87cef17608e9683afc1fcd379edfca9a00a5b961f99495a8cadd838917f24332a0a46f7a71ea5621f201d1d10ad537ca6b70b4

Download Submit
C:\Program Files\RevokeWrite.mp4

Filesize
507KB

MD5
65c981ecdc2ba0ed8b254352ffbb4538

SHA1
307d690bd40d95e45bcde7813938ef713ecaaefd

SHA256
e353b7a682c3fc706557396eba9ae569460fc6e76b7cdda2a78117f8eb2dcbc6

SHA512
7d28d008ab4892230b535215af58bf628ae51b68366f1124d864da20ba39fc7d494f9a512485cc1ee8d6ffc0d7483a5d05653dfe7826f7f3ab62b7880258ec57

Download Submit
C:\Program Files\SaveStop.rtf

Filesize
551KB

MD5
442945aa5a22b33d48b2942b0223c708

SHA1
9d68103104f852f5da453073579a14bb36b3d9cb

SHA256
1b0ad573ea46b6ef09844e030be3e20e0f06e6254185fe2693bd05033d81546b

SHA512
6b4adf025e80bb3ce5158b4bd610a42d018d716ff12d024c494aca5f999fbae1e2713e690f3f4d5f6856f08ebfd872a1e3e708ba00162c3eb3546c84229955f8

Download Submit
C:\Program Files\SetAdd.wmf

Filesize
1.2MB

MD5
64ce45fc40e43d436f169990f7921cae

SHA1
e324201600530c5353b58f72e1763c5d3ded01d0

SHA256
e2e5776b10e892d9cee764bbd972929ca13ac5dff17b8c5cc08c44a4a8e4769e

SHA512
9d652fbe56ca004cd91438ffb88da6f2b8f0669c523f00474cfbfcb63c26f3df51136fd4f2590404b62efd26eaf3202c5b785ef87cf63a66a2066159c06dfd7e

Download Submit
C:\Program Files\SetExit.cr2

Filesize
595KB

MD5
859260d957a9c9ddefc6dae5c086ef97

SHA1
898d8ae1aaa0a2703753ccf6113b86af9d575463

SHA256
598e94fde36a3d3e277fcfd96cb04b51b4f42850285a5550060b17f97cb8321d

SHA512
f85dc00ffe2a60ba828734cc76fc843fa4db369f259ce578e18d6aec53d5542e96bd0da4394308fba48ab79038e7ae845177a9171844226da439ee9440864e78

Download Submit
C:\Program Files\SubmitEnter.xla

Filesize
1.1MB

MD5
f0f6b246f3a315a728b3b0cd625ee2d4

SHA1
71b18bc316bc8dcbb0add58f983749bdecb3410c

SHA256
64d88b44f6fd190050d02c839125e1eb83ff2fd0c7867d607551b83ba2d8dcdb

SHA512
72a6bfbb80e8f5840c5825dd8ccb588993924bc8c8b37988d8a90360b180dc6a90baa3f9bb35e14b55ebcec93fccb0aa328bc799e373aafd2cb9112fe9ccd992

Download Submit
C:\Program Files\UndoRedo.pps

Filesize
1.1MB

MD5
6a828f9d49d91d1dbe66ebc0942cbd79

SHA1
872cf5df02dea5972fd74eb5dd95b9a46e04ece0

SHA256
f01b1d6cc4a6a76c68226ae1d77aff5d0d3f5fe7c8e7c5b23d73b25b78a6addb

SHA512
e0941676f935a3f1a7cb2e3d0cc10543245b2e7e13930b2fe282d805638e5d8c27cc145c4cbdc0bf154e4bcae07f114f3b1824f87beb4e1ce685eeceada8b1ec

Download Submit
C:\Program Files\UndoResize.xls

Filesize
1.8MB

MD5
53660d2515de0cd4cf2eec5e3fbd6833

SHA1
2fbd43de90a84b87d9a62bcb7791fe06035d4366

SHA256
396b70dad47f5f44a23376842e8a68ad990d96d8fcd9ce36c8dcbf62735a54af

SHA512
1f378bfbdd9638410b75d9c838aa113d985154a7f5997e55b5a30ac28cf4a75dd5ef1e250eaf52b682af879a3f19a1cbfe9acfc2b919fc99a3602556febb11eb

Download Submit
C:\Program Files\UnregisterRevoke.odp

Filesize
860KB

MD5
e8f2e88665dfd1cd53ba715f10852615

SHA1
ae2b192be55e68aea4cea3ed5d04c1298ee85cba

SHA256
2db71f6650db4d950c7e0ec56d502107db3e70484fcdba41d8b880d1cbcfe62f

SHA512
82f3ddc2df6e5d24d77e0190963dc4a254db4b7ef7fb65e679845122fcdc69c1a4ba79d03fec2a3a9af033b556759d439ea9de70f5f36a24be8110e15a5587c3

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

Filesize
10KB

MD5
77a8b2c86dd26c214bc11c989789b62d

SHA1
8b0f2d9d0ded2d7f9bff8aed6aefd6b3fdd1a499

SHA256
e288c02cbba393c9703519e660bf8709331f11978c6d994ea2a1346eef462cb8

SHA512
c287e3ae580343c43a5354347ca5444f54840fba127a2b1edc897b1dfea286fa37b5808f6e89f535c4022db8b3f29448aa4cc2f41ab0f308eec525a99fac4e5e

Download Submit
C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

Filesize
10KB

MD5
b32ca2853a2ebe84f1da4830bae142f1

SHA1
3487e691b7688e9e0929d3957d6aa4aeba9153fc

SHA256
fe2d95baff1aadf624c7b954a6b86bb7e578c9064ca5de84bded4c80bb916fa3

SHA512
b861cb3fd2c52c85938a253fc7c04032fe74a635816867fefe9865414e454b5305e29e79aef7581380266fce4720bb4eb680e547df32c072c56d2783844e6338

Download Submit
C:\vcredist2010_x64.log-MSI_vc_red.msi.txt

Filesize
380KB

MD5
45472faf3c2910367287921c93c7683b

SHA1
dc31ab299abe03806ba64dd24695133c1705e556

SHA256
76e5d176194c67eb4ddb191b2f63c85fcad78fe8951593ab7bd57cc22d730b23

SHA512
203e1a051ef2a864369e90bd91d15527b1210b6678ce9dd6e8d3237a360d5fe9f5729bb22a6f10861fd61bceb25556da89992cbf00a5c40a81d62588e91647ef

Download Submit
C:\vcredist2010_x64.log.html

Filesize
86KB

MD5
4b0f9f4e04eaf377ffd14c6e0318628f

SHA1
b9862f73c5be57d761cd8651aa2368cafc29d7b3

SHA256
0dc0acf0494400af3632b1cd464c1fff4de7c311746124b2d0f93bfbcc543a93

SHA512
d9bbd2d44631ac52db10b5a1d4de82a250663e26124d8e2f2c03cd506987b4b086c386cc7a42531be8823bb77962c178f3f8f5b43f1ea00835c67cb9e1faa013

Download Submit
C:\vcredist2010_x86.log-MSI_vc_red.msi.txt

Filesize
394KB

MD5
84ef629acb1fafa4805377e257c2f559

SHA1
857ce19e56ef3169aae0bdbada831e170b673e9b

SHA256
08cc5bad753d9f760d7305cf805afa1666e594147989a60d02f8ea46ee6fdaa5

SHA512
885fb53539671970181e89ace376adac08dfdcbc70b7fbb41c3d9f4f292b1eb8a053ff9cf27c56f3bbee2ad3813cfa600eaf40dee4c0e5412880e89ae9920445

Download Submit
C:\vcredist2010_x86.log.html

Filesize
80KB

MD5
24d1cda5a4a1932cd2a5ce95c741bee2

SHA1
dd9ab20f931754af4161ba35849b6cacae1a16e4

SHA256
f165b27a79391f7204060081680217d4a24579354a1dc72c3af5d299d4490056

SHA512
540de58e80c1048e8ad27c4bd5d4fa3b05b36d333d74b469850859a12b339757f30197a0462d5818579f2a24e3d6da9474c525b7c43e15d97f6be66e994f9611

Download Submit
C:\vcredist2012_x64_0_vcRuntimeMinimum_x64.log

Filesize
167KB

MD5
110f8896bd6995a50088872b8425d18f

SHA1
f596d6c6bdcf36fe5eaa50518087338b6b230058

SHA256
098a9cdf70a1dfbbe4a354a840044dad55897286e80b6710f2727ce618e9d664

SHA512
05eb9924a1349aa8844cd428743c5a26c695e48ff858a261adec83d9ae7b93ba026633360c473f6aca844b32a5a99520287026d678893388ad4d9389c7645521

Download Submit
C:\vcredist2012_x64_1_vcRuntimeAdditional_x64.log

Filesize
195KB

MD5
f23935e3bf4e47bc855f18f53f0ff9d7

SHA1
24f8e36dbd5e2a88d03c1f0938553e47e34bc945

SHA256
d0b5f0414a18d57c9ef4c1d7535a359513047281c8c9a146174d6af294fa907e

SHA512
82402db4c891794ce0f6f8eb4c9dc4301ab2fca7e947ea1e19ff3d6e7259b44bfd57a531a0c91d69f5f3a37cb7038980f8dba9e0b1d695ffce16252323ec6bb8

Download Submit
C:\vcredist2012_x86_0_vcRuntimeMinimum_x86.log

Filesize
171KB

MD5
1ddce34ac076a0cf8c3f27e62c632439

SHA1
d35236fdf250abe29f83662a96ecad6cde73613f

SHA256
398b2e7919d73fad158bfaa1d03d0c77bf941a41de856b131a43ff2ae5f4b86d

SHA512
d38be11692677a609a01945a4bcf0f017321493fb095f10751cd53270e293af97f78068c22d6d60398a1189d8de2696ade9d29efbfbb74b114d2cdd99a59b091

Download Submit
C:\vcredist2012_x86_1_vcRuntimeAdditional_x86.log

Filesize
208KB

MD5
4b94ba6b35458115482a7b79969212dc

SHA1
a1e10135b9441a8b06b20b831cf94040da4e2c78

SHA256
8e3faaef0b9aa2f8bcd058690291668d07f598104a4c722b9afab909f4009bc4

SHA512
884e8ddd073828b38d2aee23dbba7dbcdf2c2d224ca69cc1495d139c2dcba97c28c68df2d5b5c7c7912f659f1b3b9b65d54cd7fda7eaffb2db369ac2907f9289

Download Submit
C:\vcredist2013_x64_000_vcRuntimeMinimum_x64.log

Filesize
170KB

MD5
c45253f1cd270b47abf407258f2a929a

SHA1
ac95bc18bffa4b27e84b5918392ec9843692910a

SHA256
789ed594a57e8a0e63805adfe8598b67b381a4f37269fb3e597b6e84a8dc9d3c

SHA512
f5338f14dbac5658e0062f8dc5b013b330e1841a97310373f6c641a3b970c277b6063816e20a4c612467a50904c60f41be0681bb6002fc2525a75aeb90b6aee6

Download Submit
C:\vcredist2013_x64_001_vcRuntimeAdditional_x64.log

Filesize
190KB

MD5
50292fbf1cb4a25578732e9a5c85c756

SHA1
78fcddea899758a3c6bb360b6a40f7f19d242938

SHA256
0d5131b21dec47aaa8365e239cc756f994f43cccce7d2aa9ac97773c701a75ca

SHA512
9e64fd9b0ac573b76494a7fc624ea55b28ff6c91ef4f6c73e07fd3b1798396cbbc44771245625aa0715fc9976f531024c2e3a121e6554c80bbecd0e04e673dde

Download Submit
C:\vcredist2013_x86_000_vcRuntimeMinimum_x86.log

Filesize
170KB

MD5
5ae055efd0dc783aa52ee3f3993bb795

SHA1
1763011edeae31315ea3f954cd736e62c60090a7

SHA256
ada0d02f382c6c754dffea7f7492f502e7a0015d5d1c2ee98978a3b0e9017696

SHA512
f77a63d5101b01a5f6fa1a278fb4236ce8ed01bba404bd0615612661ca8f26361e5be7d5c22a34567d19de16edbd5cb836e77793f1d7b027552430e269fa7b52

Download Submit
C:\vcredist2013_x86_001_vcRuntimeAdditional_x86.log

Filesize
198KB

MD5
74118f38742b54b163355436a059972a

SHA1
7651266362e189ab01cc8ee0d32af84ff35b7440

SHA256
e1a10fd701c4f80315fb08374bfad33de8b80757774a9fcc83ed8745f9664001

SHA512
cd22f9b6259470f750463b6ac85309844b2bed90b069b209980813d14542d83d4081c5b2122e45382d4bfa182c7c60773169fa7b382be138e7363301c9534a8f

Download Submit
C:\vcredist2022_x64_000_vcRuntimeMinimum_x64.log

Filesize
123KB

MD5
4ff44769f799686daad4a688d5485bbf

SHA1
bbc1bf88dbed625a603426b333ad1ff267deb644

SHA256
68075ea1134f35212e32ca3ca67f1e2c0bb9eba88236e50496d08261d40c47e8

SHA512
d7dedb39b543659ea45d79621107fdb57fe22e0c5bf9de9b67a58c0183aad2b0e492a0f6b13a95346ee939e1046aaacac3da765298f7d71d612330f644996f25

Download Submit
C:\vcredist2022_x64_001_vcRuntimeAdditional_x64.log

Filesize
129KB

MD5
341c4ff621096538db858ded797adc9d

SHA1
5686f0bda36d1e5a290c14a981ac49f9dca01d1b

SHA256
64af4613816c24aac55a4acce9183e13ba53fc7416b0d3ae5c88d7602b16cf23

SHA512
4f0b8c8383bb3bbe9dfd6ffd66c884b94078595164ec1946eef578fc99931e74750390a87a85bf73683bd9ff28847771c43c3852e663b6cdb5667319a5b5983b

Download Submit
C:\vcredist2022_x86_000_vcRuntimeMinimum_x86.log

Filesize
123KB

MD5
acc47a6d4db386de2cb40f02bacec025

SHA1
93249d5f8f4c7700a00aee8d17c9a5dd7f54677c

SHA256
3ebd8c59e34de166f5f5201ccbb7b2075d20c2a031f1b36f7d6dc8fb13d1b08d

SHA512
8a086c4b5191b5e4bf2279cb9d9a7f0da2f43507726302ad79a5025619d1948ee5726135e36ac68d849a11e7514c229b8924c7104acf9a0ae0c14f7442a4a10e

Download Submit
C:\vcredist2022_x86_001_vcRuntimeAdditional_x86.log

Filesize
135KB

MD5
1f8e0937fcb824fb6cee4e697e23af79

SHA1
f571457a9c3ee73b25230e426c2919b372549262

SHA256
970126124f826e1c5b174704d363054490331bf0fa05e87bd7838d60421d1846

SHA512
c80d1bbbf265466b0aece0218c0f83149a60df0a6d846ff2adbde0fbe41c46f94aa98b7178e5cad996f823e8ee193a2b58308ecfff0f4c067a84cc591da5def7

Download Submit
memory/2856-82-0x00007FFC352F0000-0x00007FFC35319000-memory.dmp

Filesize
164KB

Download
memory/2856-92-0x00007FFC287D0000-0x00007FFC28A2F000-memory.dmp

Filesize
2.4MB

Download
memory/2856-96-0x00007FFC32E20000-0x00007FFC32E2C000-memory.dmp

Filesize
48KB

Download
memory/2856-77-0x00007FFC34E10000-0x00007FFC35188000-memory.dmp

Filesize
3.5MB

Download
memory/2856-78-0x00007FFC33DE0000-0x00007FFC33E5F000-memory.dmp

Filesize
508KB

Download
memory/2856-79-0x00007FFC2F540000-0x00007FFC2FAF8000-memory.dmp

Filesize
5.7MB

Download
memory/2856-89-0x00007FFC2A690000-0x00007FFC2A6BD000-memory.dmp

Filesize
180KB

Download
memory/2856-88-0x00007FFC2F1B0000-0x00007FFC2F1F4000-memory.dmp

Filesize
272KB

Download
memory/2856-87-0x00007FFC30EB0000-0x00007FFC30EE8000-memory.dmp

Filesize
224KB

Download
memory/2856-86-0x00007FFC30EF0000-0x00007FFC30FE3000-memory.dmp

Filesize
972KB

Download
memory/2856-90-0x00007FFC2E490000-0x00007FFC2E710000-memory.dmp

Filesize
2.5MB

Download
memory/2856-91-0x00007FFC2DD80000-0x00007FFC2E482000-memory.dmp

Filesize
7.0MB

Download
memory/2856-85-0x00007FFC30940000-0x00007FFC30A72000-memory.dmp

Filesize
1.2MB

Download
memory/2856-97-0x00007FFC1E8C0000-0x00007FFC1E91D000-memory.dmp

Filesize
372KB

Download
memory/2856-84-0x00007FFC34680000-0x00007FFC346B1000-memory.dmp

Filesize
196KB

Download
memory/2856-83-0x00007FFC33AB0000-0x00007FFC33BC2000-memory.dmp

Filesize
1.1MB

Download
memory/2856-98-0x00007FFC279C0000-0x00007FFC27A5D000-memory.dmp

Filesize
628KB

Download
memory/2856-81-0x00007FFC345B0000-0x00007FFC3465E000-memory.dmp

Filesize
696KB

Download
memory/2856-93-0x00007FFC21A90000-0x00007FFC21AA9000-memory.dmp

Filesize
100KB

Download
memory/2856-80-0x00007FFC2BBD0000-0x00007FFC2BE82000-memory.dmp

Filesize
2.7MB

Download
memory/2856-95-0x00007FFC27B90000-0x00007FFC27D59000-memory.dmp

Filesize
1.8MB

Download
memory/2856-94-0x00007FFC2EB40000-0x00007FFC2EEAD000-memory.dmp

Filesize
3.4MB

Download
memory/4200-0-0x0000000000400000-0x00000000035E5000-memory.dmp

Filesize
49.9MB

Download
memory/4200-4-0x0000000000400000-0x00000000035E5000-memory.dmp

Filesize
49.9MB

Download
memory/4200-3-0x0000000005410000-0x000000000541C000-memory.dmp

Filesize
48KB

Download
memory/4200-2-0x00000000038D0000-0x00000000039D0000-memory.dmp

Filesize
1024KB

Download