3e4f8a15...7f8a

Remarks

Max File Reputation Requests Reached (0x200001b): The maximum number of file reputation requests per analysis (20) was exceeded.

Filters:

Filename	Category	Type	Severity	Actions

C:\Users\FD1HVy\Desktop\singleupdate.exe

Sample File

Binary

Suspicious

Also Known As	C:\Users\FD1HVy\AppData\Roaming\osk.exe (Dropped File)
Mime Type	application/vnd.microsoft.portable-executable
File Size	746.00 KB
MD5	545c7d2d0c5b7686dd4a2012399148a9
SHA1	a481c02f8cb988279431aae959b2cbc2638443cb
SHA256	3e4f8a1598f9dd834766d5184c3347947a201ff9a559fa275f048b14267d7f8a
SSDeep	12288:S9CZOU8dEgeDiSrnR32F8RB1laLv6GcxJ5Wj/o9ZPlThRqdbMSz+NHH+gD1axZF8:jZOU8dEgeDDrnR3losxyU9ZNThSwNHHr
ImpHash	7b0897ba013cd1473311ad371e7e3ad9

File Reputation Information

Severity	Suspicious
First Seen	2019-04-12 11:09 (UTC+2)
Last Seen	2019-04-12 11:18 (UTC+2)
Names	Win32.Trojan.Genkryptik
Families	Genkryptik
Classification	Trojan

PE Information

Image Base	0x400000
Entry Point	0x431a9e
Size Of Code	0x4fe00
Size Of Initialized Data	0x6a600
File Type	FileType.executable
Subsystem	Subsystem.windows_gui
Machine Type	MachineType.i386
Compile Timestamp	2019-04-11 21:36:07+00:00

Version Information (10)

Comments	Reset Handler Affordances
CompanyName	CJ Games
FileDescription	Reset Handler Affordances
FileVersion	6.3.20.6
InternalName	Oemactivity
Languages	English
LegalCopyright	©. All rights reserved. CJ Games
PrivateBuild	6.3.20.6
ProductName	Oemactivity
ProductVersion	6.3.20.6

Sections (6)

Name	Virtual Address	Virtual Size	Raw Data Size	Raw Data Offset	Flags	Entropy
.text	0x401000	0x4fc5b	0x4fe00	0x400	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ	6.55
.rdata	0x451000	0x1c61c	0x1c800	0x50200	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	6.24
.data	0x46e000	0x2cbec	0x2b200	0x6ca00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	7.96
.text	0x49b000	0x8175	0x8200	0x97c00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE	7.98
.rsrc	0x4a4000	0x17690	0x17800	0x9fe00	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ	5.68
.reloc	0x4bc000	0x302c	0x3200	0xb7600	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ	6.55

Imports (17)

KERNEL32.dll (97)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateFileA	0x0	0x451048	0x6c764	0x6b964	0xc3
CreateFileW	0x0	0x45104c	0x6c768	0x6b968	0xcb
GetComputerNameExW	0x0	0x451050	0x6c76c	0x6b96c	0x1de
EnumSystemGeoID	0x0	0x451054	0x6c770	0x6b970	0x14e
GetConsoleWindow	0x0	0x451058	0x6c774	0x6b974	0x207
LocalAlloc	0x0	0x45105c	0x6c778	0x6b978	0x3ca
LocalFree	0x0	0x451060	0x6c77c	0x6b97c	0x3cf
Sleep	0x0	0x451064	0x6c780	0x6b980	0x57d
HeapSize	0x0	0x451068	0x6c784	0x6b984	0x34e
DeleteFileW	0x0	0x45106c	0x6c788	0x6b988	0x115
GetProcessHeap	0x0	0x451070	0x6c78c	0x6b98c	0x2b4
SetStdHandle	0x0	0x451074	0x6c790	0x6b990	0x54a
SetEnvironmentVariableW	0x0	0x451078	0x6c794	0x6b994	0x514
FreeEnvironmentStringsW	0x0	0x45107c	0x6c798	0x6b998	0x1aa
GetEnvironmentStringsW	0x0	0x451080	0x6c79c	0x6b99c	0x237
GetCommandLineW	0x0	0x451084	0x6c7a0	0x6b9a0	0x1d7
GetCommandLineA	0x0	0x451088	0x6c7a4	0x6b9a4	0x1d6
GetOEMCP	0x0	0x45108c	0x6c7a8	0x6b9a8	0x297
GetModuleHandleA	0x0	0x451090	0x6c7ac	0x6b9ac	0x275
IsValidCodePage	0x0	0x451094	0x6c7b0	0x6b9b0	0x38b
FindNextFileW	0x0	0x451098	0x6c7b4	0x6b9b4	0x18c
FindFirstFileExW	0x0	0x45109c	0x6c7b8	0x6b9b8	0x17b
FindClose	0x0	0x4510a0	0x6c7bc	0x6b9bc	0x175
HeapReAlloc	0x0	0x4510a4	0x6c7c0	0x6b9c0	0x34c
ReadConsoleW	0x0	0x4510a8	0x6c7c4	0x6b9c4	0x470
SetFilePointerEx	0x0	0x4510ac	0x6c7c8	0x6b9c8	0x523
GetLocalTime	0x0	0x4510b0	0x6c7cc	0x6b9cc	0x262
ReadFile	0x0	0x4510b4	0x6c7d0	0x6b9d0	0x473
GetConsoleMode	0x0	0x4510b8	0x6c7d4	0x6b9d4	0x1fc
GetConsoleCP	0x0	0x4510bc	0x6c7d8	0x6b9d8	0x1ea
FlushFileBuffers	0x0	0x4510c0	0x6c7dc	0x6b9dc	0x19f
EnumSystemLocalesW	0x0	0x4510c4	0x6c7e0	0x6b9e0	0x154
GetUserDefaultLCID	0x0	0x4510c8	0x6c7e4	0x6b9e4	0x312
IsValidLocale	0x0	0x4510cc	0x6c7e8	0x6b9e8	0x38d
LoadLibraryA	0x0	0x4510d0	0x6c7ec	0x6b9ec	0x3c1
CreateFileMappingW	0x0	0x4510d4	0x6c7f0	0x6b9f0	0xc8
CreateEventA	0x0	0x4510d8	0x6c7f4	0x6b9f4	0xbc
lstrlenA	0x0	0x4510dc	0x6c7f8	0x6b9f8	0x63b
UnmapViewOfFile	0x0	0x4510e0	0x6c7fc	0x6b9fc	0x5b0
GetACP	0x0	0x4510e4	0x6c800	0x6ba00	0x1b2
MapViewOfFile	0x0	0x4510e8	0x6c804	0x6ba04	0x3de
CloseHandle	0x0	0x4510ec	0x6c808	0x6ba08	0x86
DeviceIoControl	0x0	0x4510f0	0x6c80c	0x6ba0c	0x11d
GetStdHandle	0x0	0x4510f4	0x6c810	0x6ba10	0x2d2
GetFileSize	0x0	0x4510f8	0x6c814	0x6ba14	0x24b
WaitForSingleObject	0x0	0x4510fc	0x6c818	0x6ba18	0x5d7
GetLastError	0x0	0x451100	0x6c81c	0x6ba1c	0x261
GetEnvironmentStrings	0x0	0x451104	0x6c820	0x6ba20	0x235
HeapFree	0x0	0x451108	0x6c824	0x6ba24	0x349
HeapAlloc	0x0	0x45110c	0x6c828	0x6ba28	0x345
WriteConsoleW	0x0	0x451110	0x6c82c	0x6ba2c	0x611
GetFileType	0x0	0x451114	0x6c830	0x6ba30	0x24e
GetModuleFileNameW	0x0	0x451118	0x6c834	0x6ba34	0x274
WriteFile	0x0	0x45111c	0x6c838	0x6ba38	0x612
GetModuleHandleExW	0x0	0x451120	0x6c83c	0x6ba3c	0x277
LoadLibraryExW	0x0	0x451124	0x6c840	0x6ba40	0x3c3
FreeLibrary	0x0	0x451128	0x6c844	0x6ba44	0x1ab
RtlUnwind	0x0	0x45112c	0x6c848	0x6ba48	0x4d3
RaiseException	0x0	0x451130	0x6c84c	0x6ba4c	0x462
ExitProcess	0x0	0x451134	0x6c850	0x6ba50	0x15e
TerminateProcess	0x0	0x451138	0x6c854	0x6ba54	0x58c
GetCurrentProcess	0x0	0x45113c	0x6c858	0x6ba58	0x217
IsProcessorFeaturePresent	0x0	0x451140	0x6c85c	0x6ba5c	0x386
VirtualAlloc	0x0	0x451144	0x6c860	0x6ba60	0x5c6
GetProcAddress	0x0	0x451148	0x6c864	0x6ba64	0x2ae
GetFileSizeEx	0x0	0x45114c	0x6c868	0x6ba68	0x24c
LockResource	0x0	0x451150	0x6c86c	0x6ba6c	0x3db
GetStartupInfoW	0x0	0x451154	0x6c870	0x6ba70	0x2d0
SetUnhandledExceptionFilter	0x0	0x451158	0x6c874	0x6ba74	0x56d
SetEndOfFile	0x0	0x45115c	0x6c878	0x6ba78	0x510
UnhandledExceptionFilter	0x0	0x451160	0x6c87c	0x6ba7c	0x5ad
IsDebuggerPresent	0x0	0x451164	0x6c880	0x6ba80	0x37f
InitializeSListHead	0x0	0x451168	0x6c884	0x6ba84	0x363
GetCurrentThreadId	0x0	0x45116c	0x6c888	0x6ba88	0x21c
GetCurrentProcessId	0x0	0x451170	0x6c88c	0x6ba8c	0x218
QueryPerformanceCounter	0x0	0x451174	0x6c890	0x6ba90	0x44d
GetCPInfo	0x0	0x451178	0x6c894	0x6ba94	0x1c1
GetStringTypeW	0x0	0x45117c	0x6c898	0x6ba98	0x2d7
GetLocaleInfoW	0x0	0x451180	0x6c89c	0x6ba9c	0x265
LCMapStringW	0x0	0x451184	0x6c8a0	0x6baa0	0x3b1
CompareStringW	0x0	0x451188	0x6c8a4	0x6baa4	0x9b
MultiByteToWideChar	0x0	0x45118c	0x6c8a8	0x6baa8	0x3ef
DecodePointer	0x0	0x451190	0x6c8ac	0x6baac	0x109
WideCharToMultiByte	0x0	0x451194	0x6c8b0	0x6bab0	0x5fe
EnterCriticalSection	0x0	0x451198	0x6c8b4	0x6bab4	0x131
LeaveCriticalSection	0x0	0x45119c	0x6c8b8	0x6bab8	0x3bd
DeleteCriticalSection	0x0	0x4511a0	0x6c8bc	0x6babc	0x110
SetLastError	0x0	0x4511a4	0x6c8c0	0x6bac0	0x532
InitializeCriticalSectionAndSpinCount	0x0	0x4511a8	0x6c8c4	0x6bac4	0x35f
SwitchToThread	0x0	0x4511ac	0x6c8c8	0x6bac8	0x587
TlsAlloc	0x0	0x4511b0	0x6c8cc	0x6bacc	0x59e
TlsGetValue	0x0	0x4511b4	0x6c8d0	0x6bad0	0x5a0
TlsSetValue	0x0	0x4511b8	0x6c8d4	0x6bad4	0x5a1
TlsFree	0x0	0x4511bc	0x6c8d8	0x6bad8	0x59f
GetSystemTimeAsFileTime	0x0	0x4511c0	0x6c8dc	0x6badc	0x2e9
GetModuleHandleW	0x0	0x4511c4	0x6c8e0	0x6bae0	0x278
EncodePointer	0x0	0x4511c8	0x6c8e4	0x6bae4	0x12d

USER32.dll (28)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateWindowExA	0x0	0x451228	0x6c944	0x6bb44	0x74
SendMessageA	0x0	0x45122c	0x6c948	0x6bb48	0x314
MoveWindow	0x0	0x451230	0x6c94c	0x6bb4c	0x296
SetWindowPos	0x0	0x451234	0x6c950	0x6bb50	0x376
GetDlgItem	0x0	0x451238	0x6c954	0x6bb54	0x149
SendDlgItemMessageA	0x0	0x45123c	0x6c958	0x6bb58	0x30f
IsWindowEnabled	0x0	0x451240	0x6c95c	0x6bb5c	0x23e
CreateAcceleratorTableA	0x0	0x451244	0x6c960	0x6bb60	0x5c
ShowWindow	0x0	0x451248	0x6c964	0x6bb64	0x387
CheckMenuItem	0x0	0x45124c	0x6c968	0x6bb68	0x42
EnableMenuItem	0x0	0x451250	0x6c96c	0x6bb6c	0xe8
TrackPopupMenuEx	0x0	0x451254	0x6c970	0x6bb70	0x3a2
LoadBitmapA	0x0	0x451258	0x6c974	0x6bb74	0x248
UnhookWindowsHookEx	0x0	0x45125c	0x6c978	0x6bb78	0x3ac
SetWindowWord	0x0	0x451260	0x6c97c	0x6bb7c	0x37c
InsertMenuItemA	0x0	0x451264	0x6c980	0x6bb80	0x211
SetRect	0x0	0x451268	0x6c984	0x6bb84	0x357
FillRect	0x0	0x45126c	0x6c988	0x6bb88	0x10f
GetSysColor	0x0	0x451270	0x6c98c	0x6bb8c	0x1bb
ClientToScreen	0x0	0x451274	0x6c990	0x6bb90	0x4c
GetCursorPos	0x0	0x451278	0x6c994	0x6bb94	0x13e
MessageBoxA	0x0	0x45127c	0x6c998	0x6bb98	0x289
GetClientRect	0x0	0x451280	0x6c99c	0x6bb9c	0x130
SetWindowTextA	0x0	0x451284	0x6c9a0	0x6bba0	0x37a
GetDC	0x0	0x451288	0x6c9a4	0x6bba4	0x13f
SetForegroundWindow	0x0	0x45128c	0x6c9a8	0x6bba8	0x337
SetActiveWindow	0x0	0x451290	0x6c9ac	0x6bbac	0x31c
UnionRect	0x0	0x451294	0x6c9b0	0x6bbb0	0x3ad

GDI32.dll (6)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GetObjectA	0x0	0x45102c	0x6c748	0x6b948	0x2a5
SetStretchBltMode	0x0	0x451030	0x6c74c	0x6b94c	0x386
GetStockObject	0x0	0x451034	0x6c750	0x6b950	0x2b8
CreateSolidBrush	0x0	0x451038	0x6c754	0x6b954	0x59
CreatePen	0x0	0x45103c	0x6c758	0x6b958	0x4f
TextOutA	0x0	0x451040	0x6c75c	0x6b95c	0x39c

ADVAPI32.dll (6)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SetSecurityDescriptorDacl	0x0	0x451000	0x6c71c	0x6b91c	0x2e8
AllocateAndInitializeSid	0x0	0x451004	0x6c720	0x6b920	0x20
FreeSid	0x0	0x451008	0x6c724	0x6b924	0x134
InitializeSecurityDescriptor	0x0	0x45100c	0x6c728	0x6b928	0x18f
SetEntriesInAclA	0x0	0x451010	0x6c72c	0x6b92c	0x2d7
IsTextUnicode	0x0	0x451014	0x6c730	0x6b930	0x198

SHELL32.dll (2)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SHGetFolderPathA	0x0	0x451208	0x6c924	0x6bb24	0x153
SHBrowseForFolderA	0x0	0x45120c	0x6c928	0x6bb28	0x86

ole32.dll (4)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CoCreateInstance	0x0	0x4512ac	0x6c9c8	0x6bbc8	0x28
StringFromGUID2	0x0	0x4512b0	0x6c9cc	0x6bbcc	0x1ca
CoInitialize	0x0	0x4512b4	0x6c9d0	0x6bbd0	0x5d
CoTaskMemFree	0x0	0x4512b8	0x6c9d4	0x6bbd4	0x89

OLEAUT32.dll (1)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SystemTimeToVariantTime	0xb8	0x4511e8	0x6c904	0x6bb04	-

MSVFW32.dll (1)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
ICCompressorChoose	0x0	0x4511d8	0x6c8f4	0x6baf4	0x15

MSIMG32.dll (1)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
GradientFill	0x0	0x4511d0	0x6c8ec	0x6baec	0x2

SHLWAPI.dll (4)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
SHIsLowMemoryMachine	0x0	0x451214	0x6c930	0x6bb30	0xca
PathCompactPathA	0x0	0x451218	0x6c934	0x6bb34	0x40
SHGetInverseCMAP	0x0	0x45121c	0x6c938	0x6bb38	0xc4
ColorRGBToHLS	0x0	0x451220	0x6c93c	0x6bb3c	0xd

COMCTL32.dll (3)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
ImageList_Add	0x0	0x45101c	0x6c738	0x6b938	0x4d
ImageList_GetIconSize	0x0	0x451020	0x6c73c	0x6b93c	0x63
ImageList_Create	0x0	0x451024	0x6c740	0x6b940	0x53

pdh.dll (1)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
PdhCollectQueryData	0x0	0x4512c0	0x6c9dc	0x6bbdc	0x12

RPCRT4.dll (2)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
UuidCreate	0x0	0x4511f0	0x6c90c	0x6bb0c	0x216
UuidToStringW	0x0	0x4511f4	0x6c910	0x6bb10	0x21f

dbghelp.dll (3)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
MapDebugInformation	0x0	0x45129c	0x6c9b8	0x6bbb8	0x1c
SymCleanup	0x0	0x4512a0	0x6c9bc	0x6bbbc	0x34
SymFindFileInPath	0x0	0x4512a4	0x6c9c0	0x6bbc0	0x56

SETUPAPI.dll (2)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CM_Detect_Resource_Conflict	0x0	0x4511fc	0x6c918	0x6bb18	0x23
CM_Delete_Range	0x0	0x451200	0x6c91c	0x6bb1c	0x22

urlmon.dll (1)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
CreateAsyncBindCtx	0x0	0x4512c8	0x6c9e4	0x6bbe4	0x25

NTDSAPI.dll (1)

API Name	Ordinal	IAT Address	Thunk RVA	Thunk Offset	Hint
DsGetRdnW	0x0	0x4511e0	0x6c8fc	0x6bafc	0x34

Icons (1)

Memory Dumps (34)

Name	Process ID	Start VA	End VA	Dump Reason	PE Rebuilds	Bitness	Entry Points	Actions
buffer	1	0x02200000	0x02207FFF	First Execution	-	32-bit	0x02201540, 0x02200000	... Memory Dump Actions Download Dump Go to process
buffer	1	0x02150000	0x02150FFF	First Execution	-	32-bit	0x02150000	... Memory Dump Actions Download Dump Go to process
buffer	1	0x02200000	0x02207FFF	Content Changed	-	32-bit	0x02205844, 0x022030F4	... Memory Dump Actions Download Dump Go to process
buffer	1	0x02200000	0x02207FFF	Content Changed	-	32-bit	0x02204CB4	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Marked Writable	-	32-bit	-	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00401110	... Memory Dump Actions Download Dump Go to process Go to AV Match
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x0040EB38, 0x0040F130	... Memory Dump Actions Download Dump Go to process Go to AV Match
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x0040B764	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00417D3C	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00410838	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00413074	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x0042A5C8	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x0042B67C, 0x0042CC58	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00423564, 0x00429864	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00414000	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00420000, 0x0041FA70, ...	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00426B84	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	1	0x00400000	0x004BFFFF	Process Termination	-	32-bit	-	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Marked Writable	-	32-bit	-	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00401110	... Memory Dump Actions Download Dump Go to process Go to AV Match
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x0040EB38, 0x0040F130	... Memory Dump Actions Download Dump Go to process Go to AV Match
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x0040B764	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00417D3C	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00410838	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00413074	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x0042A5C8	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x0042B67C, 0x0042CC58	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00423564, 0x00429864	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00414000	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00420000, 0x0041FA70, ...	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00415904	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00416000	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Content Changed	-	32-bit	0x00426B84	... Memory Dump Actions Download Dump Go to process
singleupdate.exe	5	0x00400000	0x004BFFFF	Process Termination	-	32-bit	-	... Memory Dump Actions Download Dump Go to process

C:\588bce7c90097ed212\1025\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	7.39 KB
MD5	6e9dfc57d11fa7101c21bd252f08b095
SHA1	3cded2d18c5ff141ca73a9277328dc1baf5bde12
SHA256	3a501338eea17204e395640720f365113d838e03689bfc159e4d1bf58118f8b0
SSDeep	192:sf3yLpQxL75CD7sH08JUXthIT2M+bOx7BnT7QUm9:AyLpQxL7YsH08JUXQT2M+s7BnT7QUm9

RTF Information

Document Content

MICROSOFT MICROSOFT .NET FRAMEWORK 4 WINDOWS MICROSOFT MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE WINDOWS MICROSOFT Microsoft Corporation ( ) . Microsoft Windows ( ) ( "") . . . . . . . . . 1. f0 . Microsoft www.support.microsoft.com/common/international.aspx . 2. f0 MICROSOFT .NET FRAMEWORK . . NET Framework ( " NET ."). . go.microsoft.com/fwlink/?LinkID=66406 . Microsoft Microsoft NET . go.microsoft.com/fwlink/?LinkID=66406 .

C:\588bce7c90097ed212\1029\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.64 KB
MD5	b12830159c861c3896b7be8a18a6341a
SHA1	dd77a4d9973f29dc3d52b1c6949b70324f8caf51
SHA256	63467be881eb57025fb86f9b2ecb2e094ae2808431e1377d48186cdd70dcd10d
SSDeep	96:4BfgejTQpTfD/g7OyGBB2nZsEAVxfw8EMpDRI/YFkvvApzdYPBGx9:sfN7OHn2nZsEmf+Oa/c9

RTF Information

Document Content Snippet

DODATKOV LICENN PODMNKY PRO SOFTWARE SPOLENOSTI MICROSOFT MICROSOFT .NET FRAMEWORK 4 PRO OPERAN SYSTM MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE PRO OPERAN SYSTM MICROSOFT WINDOWS A PIDRUEN JAZYKOV SADY Licenci k~tomuto dodatku vm poskytuje spolenost Microsoft Corporation (nebo nkter z~jejch afilac v~zvislosti na tom, kde bydlte). Mte-li licenci k uit operanho systmu Microsoft Windows (pro nj je tento dodatek uren) (software"), smte tento dodatek uvat. Tento dodatek nesmte uvat, pokud licenci k~softwaru nemte. Kopii tohoto dodatku smte uvat s~kadou platn licencovanou kopi softwaru. Nsledujc licenn podmnky popisuj dal podmnky uvn pro tento dodatek. Na vae uvn tohoto dodatku se vztahuj tyto podmnky a~li cenn podmnky pro software. V~ppad konfliktu plat tyto dodatkov licenn podmnky. Pouitm dodatku pijmte tyto podmnky. Pokud je nepijmte, dodatek nepouvejte. Dodrte-li tyto licenn podmnky, mte nsledujc prva. 1. f0 SLUBY TECHNICK PODPORY PRO DODATEK. Spo ...

C:\588bce7c90097ed212\1030\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.24 KB
MD5	b18d37460e22d731481054408a9241c4
SHA1	7a9f617c6976f25dc858b751e2a65938141346f4
SHA256	e82051fabbb60b61ba9ba3471573049c4a9999bcea8693b7fdd1d1c438e8c784
SSDeep	96:MTBfIGPzxT1B9TwDXOC1uJzGTcDC5bhPqljShnEGiBe4YOMpDIbu0L9D+Ogp+Ogm:If/Jqn1uJzGTcDC5bhSljShnEGioDOOR

RTF Information

Document Content Snippet

TILLG TIL LICENSVILKR FOR MICROSOFT-SOFTWARE MICROSOFT .NET FRAMEWORK 4 TIL MICROSOFT WINDOWS-OPERATIVSYSTEM MICROSOFT .NET FRAMEWORK 4-KLIENTPROFIL TIL MICROSOFT WINDOWS-OPERATIVSYSTEM OG TILKNYTTEDE SPROGPAKKER Microsoft Corporation (eller, afhngigt af hvor De bor, et af dets associerede selskaber) licenserer dette tillg til Dem. Hvis De har licens til at bruge Microsoft Windows-operativsystemsoftware (som dette tillg glder for) ("softwaren"), m De anvende dette tillg. De m ikke bruge dette tillg, hvis De ikke har licens til softwaren. De m bruge en kopi af dette tillg sammen med hver gyldigt licenseret kopi af softwaren. De flgende licensvilkr beskriver yderligere vilkr for dette tillg. Disse vilkr og licensvilkrene for softwaren glder for brug af dette tillg. Hvis der er konflikt mellem disse, er det licensvilkrene til tillgget, der er gldende. Ved at tage tillgget i brug accepterer De disse vilkr. Sfremt De ikke kan acceptere vilkrene, har De ikke ret til at brug ...

C:\588bce7c90097ed212\1031\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.34 KB
MD5	79c25925d28f80c1fab1969007fbddde
SHA1	4632be0865f1ddc1fe1baff37c5b312ced7d4303
SHA256	22722a48b026faf6b828d5756ceb51c4249b3ecd4f6d1d0306dcd925d43d4396
SSDeep	96:MWBfVBITvyTqDyiRc3E5Zob0MpDmqgH4KYXsY/49Uo9:VffWX5Zm0O3Q39

RTF Information

Document Content Snippet

ERGNZENDE LIZENZBESTIMMUNGEN FR MICROSOFT-SOFTWARE MICROSOFT .NET FRAMEWORK 4 FR MICROSOFT WINDOWS-BETRIEBSSYSTEM MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE FR MICROSOFT WINDOWS-BETRIEBSSYSTEM UND ZUGEHRIGE LANGUAGE PACKS Microsoft Corporation (oder eine andere Microsoft-Konzerngesellschaft, wenn diese an dem Ort, an dem Sie leben, die Software lizenziert) lizenziert diese Softwareergnzung an Sie. Wenn Sie ber eine Lizenz fr Microsoft Windows-Betriebssystem-Software verfgen (fr die diese Softwareergnzung gilt) (die Software"), knnen Sie diese Softwareergnzung verwenden. Sie sind nicht berechtigt, sie zu verwenden, wenn Sie keine Lizenz fr die Software haben. Sie sind berechtigt, eine Kopie dieser Softwareergnzung mit jeder ordnungsgem lizenzierten Kopie der Software zu verwenden. In den folgenden Lizenzbestimmungen werden zustzliche Nutzungsbestimmungen fr diese Softwareergnzung beschrieben. Diese Bestimmungen und die Lizenzbestimmungen fr die Software gelten fr Ihre Verwendung der ...

C:\588bce7c90097ed212\1032\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	8.67 KB
MD5	6d8ac269df6b36e04444ee4d00419b1a
SHA1	5e327d810459947b38baf4cdecefc0910fcd36b8
SHA256	d292d781f84953a7fba84366f02aea979f65dec81730bb74a66d7a19d4354054
SSDeep	192:/foOHY6P6Km5NHMQaEjxPSuHON0SuQI69:R46Pm5Ns0jxpeuQV9

RTF Information

Embedded URLs (1)

URL	First Seen	Categories	Threat Names	Reputation Status	WHOIS Data
http://go.microsoft.com/fwlink/?LinkID=66406	-	-	-	Unknown	Not Queried

Document Content

MICROSOFT MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS - MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS Microsoft Corporation ( , ) . Microsoft Windows ( ) ( ""), . . . . . , . , . , . , . 1. lang1032 . Microsoft , www.support.microsoft.com/common/international.aspx . 2. lang1032 MICROSOFT .NET FRAMEWORK. .NET Framework ( .NET). .~ , http://go.microsoft.com/fwlink/?LinkID=66406 . Microsoft, , Microsoft .NET, http://go.microsoft.com/fwlink/?LinkID=66406 .

C:\588bce7c90097ed212\1033\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.11 KB
MD5	cb1a9445ca204a5b90ae49308c0775f4
SHA1	627f41f9efbe2d4615e03a438eab7d7fff69ccb5
SHA256	70e90a723ae1986ae16b2b0ff2e850bd9f255d2b0977e1ce18ad96fab0df00a9
SSDeep	96:MHfTLNnTkWBTkFDZ8f4wHlre7MUxprfKmMb0+MW+1Ep9qeelN+sznM+IEp+Lk9:yfyTLillHW+mMhyAspz9

RTF Information

Embedded URLs (3)

URL	First Seen	Categories	Threat Names	Reputation Status	WHOIS Data
http://go.microsoft.com/fwlink/?LinkID=66406&clcid=0x409	-	-	-	Unknown	Not Queried
http://go.microsoft.com/fwlink/?LinkID=66406	-	-	-	Unknown	Not Queried
http://www.support.microsoft.com/common/international.aspx	-	-	-	Unknown	Not Queried

Document Content Snippet

MICROSOFT SOFTWARE SUPPLEMENTAL LICENSE TERMS MICROSOFT .NET FRAMEWORK 4 FOR MICROSOFT WINDOWS OPERATING SYSTEM MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE FOR MICROSOFT WINDOWS OPERATING SYSTEM AND ASSOCIATED LANGUAGE PACKS Microsoft Corporation (or based on where you live, one of its affiliates) licenses this supplement to you. If you are licensed to use Microsoft Windows operating system software (for which this supplement is applicable) (the "software"), you may use this supplement. You may not use it if you do not have a license for the software. You may use a copy of this supplement with each validly licensed copy of the software. The following license terms describe additional use terms for this supplement. These terms and the license terms for the software apply to your use of the supplement. If there is a conflict, these supplemental license terms apply. By using this supplement, you accept these terms. If you do not accept them, do not use this supplement. If yo ...

C:\588bce7c90097ed212\1036\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.44 KB
MD5	dda55771175159470a17f3d0e94c95ff
SHA1	53efb2caba662ed2de74f672ee9879c51233cf86
SHA256	55da4108f4b78266489e2c8c83678554d66894203b97db90e1da40a6feaa13c5
SSDeep	96:MTBfEhmvTf8vTR/DSIem21HDpHD1cT+Tot4er42xzK8/ptMpDLaFNsNGlDPsCU9:IfJw95eJlx1E+Tot4er42xzKuOKPU9

RTF Information

Document Content Snippet

TERMES DE CONTRAT DE LICENCE D'UN SUPPLMENT MICROSOFT MICROSOFT .NET FRAMEWORK~4 POUR LE SYSTME D'EXPLOITATION MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK~4 CLIENT PROFILE POUR LE SYSTME D'EXPLOITATION MICROSOFT WINDOWS ET LES LANGAGE PACKS ASSOCIS Microsoft Corporation (ou, en fonction du lieu o vous vivez, l'un de ses affilis) vous accorde une licence pour ce supplment. Si vous tes titulaire d'une licence d'utilisation du logiciel de systme d'exploitation Microsoft Windows (auquel s'applique le prsent supplment) (le ~logiciel~), vous tes autoris utiliser ce supplment. Vous n''eates pas autoris utiliser ce supplment si vous n''eates pas titulaire d'une licence pour le logiciel. Vous pouvez utiliser une copie de ce supplment avec chaque copie concde sous licence du logiciel. Les termes du contrat de licence suivants dcrivent les conditions d'utilisation supplmentaires pour le supplment. Les prsents termes et les termes du contrat de licence du logiciel s'appliquent l'uti ...

C:\588bce7c90097ed212\1037\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	6.69 KB
MD5	d31163e31dcee78f5a9ef63164ecb461
SHA1	508251ea6d8037b67a497f406a18ab37976a13f8
SHA256	2ef89774360ee1bb5f2404ccd6a6eb0f77bf41421a61e2589efa8c298441540e
SSDeep	96:2Rf64JJR1vTJ3R1vTJZZDg1YGZmF1plypIuw75TYgnMJ9nqIQ2fPMpicPtxScRtk:0fXRskPWIHxYnJVPOxScl9ZnlfZ4LH9

RTF Information

Embedded URLs (1)

URL	First Seen	Categories	Threat Names	Reputation Status	WHOIS Data
http://go.microsoft.com/fwlink/?LinkID=66406	-	-	-	Unknown	Not Queried

Document Content

MICROSOFT MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS Microsoft Corporation ( , ) . Microsoft Windows ( ) (""), . . . . . , . , . , . , . 1. f0 . Microsoft , www.support.microsoft.com/common/international.aspx . 2. f0 MICROSOFT .NET FRAMEWORK . .NET Framework ( .NET ). .~ .NET , http://go.microsoft.com/fwlink/?LinkID=66406 . Microsoft , , - Microsoft NET . , http://go.microsoft.com/fwlink/?LinkID=66406 .

C:\588bce7c90097ed212\1038\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	4.16 KB
MD5	c99ae1d0448cefa79a039587ee78cff5
SHA1	6c06dd939f6addd0ffc60f90c4204dd8c614590e
SHA256	650cc86e5d10e4599a797f17574338f77a4f1559ee2afbdab6215e30c105daed
SSDeep	96:k8BfeEfTtXeTjXyZD+dtQRzrGJ6JwtxYMpDNeb6CZXKEp5/Eupwy9Ep+LM9:kgffCXPdOzSJ6JwkOBjC0V9

RTF Information

Embedded URLs (2)

URL	First Seen	Categories	Threat Names	Reputation Status	WHOIS Data
http://go.microsoft.com/fwlink/?LinkID=66406&clcid=0x409	-	-	-	Unknown	Not Queried
http://go.microsoft.com/fwlink/?LinkID=66406	-	-	-	Unknown	Not Queried

Document Content Snippet

KIEGSZT LICENCFELTTELEK MICROSOFT SZOFTVERHEZ MICROSOFT .NET-KERETRENDSZER 4 MICROSOFT WINDOWS OPERCIS RENDSZERHEZ MICROSOFT .NET-KERETRENDSZER 4 GYFLPROFIL MICROSOFT WINDOWS OPERCIS RENDSZERHEZ S A KAPCSOLD NYELVI CSOMAGOK Ezen kiegszts licenct a Microsoft Corporation (vagy az n lakhelye alapjn egy trsvllalata) nyjtja nnek. n akkor hasznlhatja ezt a kiegsztst, ha rendelkezik licenccel a (jelen kiegsztssel hasznlhat) Microsoft szoftver (a tovbbiakban szoftver") hasznlathoz. Amennyiben nem rendelkezik rvnyes licenccel a szoftverhez, gy nem hasznlhatja a kiegsztst. n a szoftver minden rvnyes licenccel elltott pldnyval hasznlhatja a kiegszts egy pldnyt. A kvetkez licencfelttelek tovbbi hasznlati feltteleket hatroznak meg a kiegsztshez. A kiegszts hasznlatra a szoftverre vonatkoz licencfelttelek s ezek a felttelek rvnyesek. Egymsnak ellentmond felttelek esetn ezen kiegszt licencfelttelek alkalmazandk. A kiegszts hasznlatval n elfogadja a jelen feltteleket. Amennyiben nem fo ...

C:\588bce7c90097ed212\1040\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.56 KB
MD5	e107ec156304408c8b5c5cf465dfb527
SHA1	9fe1b58315e68cdca56c9fe5d5ad0f348194d2ee
SHA256	c5d33b954b2a416601e0b15ad57417a7c2d5499f6c6256bf80e2e7d32146f8ca
SSDeep	96:rwBfYOP/TfVTJDwXtxjCJEZ+jw/Njppm/F/ZaFgcT/okOct9:yfYXRzMjsA9/EFxDt9

RTF Information

Embedded URLs (2)

URL	First Seen	Categories	Threat Names	Reputation Status	WHOIS Data
http://go.microsoft.com/fwlink/?LinkID=66406	-	-	-	Unknown	Not Queried
http://www.support.microsoft.com/common/international.aspx	-	-	-	Unknown	Not Queried

Document Content Snippet

CONDIZIONI DI LICENZA SOFTWARE MICROSOFT SUPPLEMENTARI MICROSOFT .NET FRAMEWORK 4 PER IL SISTEMA OPERATIVO MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE PER IL SISTEMA OPERATIVO MICROSOFT WINDOWS E RELATIVI LANGUAGE PACK Microsoft Corporation (o, in base al luogo di residenza del licenziatario, una delle sue consociate) concede in licenza al licenziatario il presente supplemento. Qualora il licenziatario sia autorizzato a utilizzare il software per il sistema operativo Microsoft Windows (per il quale il presente supplemento applicabile) (il "software"), potr usare il presente supplemento. Il licenziatario non potr utilizzarlo qualora non disponga di una licenza per il software. Il licenziatario potr utilizzare una copia del presente supplemento con ciascuna copia del software validamente concessa in licenza. Nelle condizioni di licenza che seguono sono descritte le condizioni di utilizzo aggiuntive relative al presente supplemento. Tali condizioni e le cond ...

C:\588bce7c90097ed212\1041\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	9.89 KB
MD5	74f75e0aeede1d2a9a0f8829263853a0
SHA1	a9ae69b14fef9b1a37fb7f2d682a59bc07480f55
SHA256	79a6677c495ccb6ec44b4dde5770d7a0081fd4227e6c3f6b3b587ba07edb27a4
SSDeep	192:tEf13/qC2+PCsANROmuuU8EhZFJEj2VQoKOwyWAOxzpOh+uqaJgt9:tBtQoCnGDzhuqz9

RTF Information

Embedded URLs (1)

URL	First Seen	Categories	Threat Names	Reputation Status	WHOIS Data
http://go.microsoft.com/fwlink/?LinkID=66406	-	-	-	Unknown	Not Queried

Document Content

MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE LANGUAGE PACK Microsoft Corporation ( ) Microsoft Windows ( ) ( ) 1 1. lang1041 www.support.microsoft.com/common/international.aspx 2. f1 MICROSOFT .NET FRAMEWORK .NET Framework ( .NET ) 1 http://go.microsoft.com/fwlink/?LinkID=66406 go.microsoft.com/fwlink/?LinkID=66406 .NET

C:\588bce7c90097ed212\1042\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	12.39 KB
MD5	ed07d3cb14237d69b17704ecde15e1a0
SHA1	fb2d806f8a05b723c2d30403641aeb9e638f0c09
SHA256	72cb28dacd10cc1a7f3abb62cedc75c9c16a1367bbd4412e65e0be86e3c4c988
SSDeep	192:MUf0PVF4MjeKojIfE6wK+b/mIr4tIAcAIce5rD6O1IuonKZim+dfNAW6qUK84Znl:aK0wB/Tr4TmckIuCm+TAWdUN/re9

RTF Information

Embedded URLs (2)

URL	First Seen	Categories	Threat Names	Reputation Status	WHOIS Data
http://go.microsoft.com/fwlink/?LinkID=66406&clcid=0x409	-	-	-	Unknown	Not Queried
http://go.microsoft.com/fwlink/?LinkID=66406	-	-	-	Unknown	Not Queried

Document Content

MICROSOFT MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE Microsoft Corporation( ) . Microsoft Windows (" ") . . . . . . . . . 1. lang1042 . Microsoft www.support.microsoft.com/common/international.aspx . 2. MICROSOFT .NET FRAMEWORK . .NET Framework (.NET ) . . http://go.microsoft.com/fwlink/?LinkID=66406 . , Microsoft Microsoft http://go.microsoft.com/fwlink/?LinkID=66406 .NET .

C:\588bce7c90097ed212\1043\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.46 KB
MD5	6fb53ff62b5a55e60e6905b9d1a4fd6c
SHA1	87dccc3874ebeea7d2c32da6650634f2e35382b0
SHA256	0b756c71dc43190b4e0661dded1694413f5e74b4925a7cc0bc70b506beea3677
SSDeep	96:rTBfrnjTsVT08DfQhtJlIcm3wEM8LPMpDlGu3x+O0H+Ozo+SBT+OZt6S9:ZfLltGwEMAPOkukO0eONNOT9

RTF Information

Document Content Snippet

AANVULLENDE LICENTIEVOORWAARDEN VOOR MICROSOFT-SOFTWARE MICROSOFT .NET FRAMEWORK 4 VOOR HET BESTURINGSSYSTEEM MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE VOOR HET BESTURINGSSYSTEEM MICROSOFT WINDOWS EN GERELATEERDE TAALPAKKETTEN Microsoft Corporation (of, afhankelijk uw locatie, een van haar gelieerde ondernemingen) geeft dit supplement aan u in licentie. Als u een licentie hebt voor het gebruik van Microsoft Windows-besturingssysteemsoftware (waarop dit supplement van toepassing is) (de 'software'), mag u dit supplement gebruiken. U mag dit supplement niet gebruiken als u niet over een licentie voor de software beschikt. U mag een exemplaar van dit supplement gebruiken bij elk geldig in licentie gegeven exemplaar van de software. De volgende licentievoorwaarden beschrijven aanvullende gebruiksvoorwaarden voor deze aanvulling. Deze voorwaarden zijn samen met de licentievoorwaarden voor de software van toepassing op uw gebruik van dit supplement. Als deze ...

C:\588bce7c90097ed212\1044\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	2.98 KB
MD5	64d042afc291318654e35dac5410c032
SHA1	2e81d3588c8095beb8c41954b242da270d0b57ef
SHA256	af1f7796aebd8f5c8c3c2d11e69f2016dfc14024e1c858ee81d1be66f1384feb
SSDeep	48:rPN3nffnyzInT7BjTgLDRn0l392N4S2ZOMb5XgNRc9q5QB34pg5lqM9TX/ufMpDa:rPBffyUnT7BjTADRn0lN2N4S2wG5wNRh

RTF Information

Document Content Snippet

TILLEGGSLISENSVILKR FOR MICROSOFT-PROGRAMVARE MICROSOFT .NET FRAMEWORK 4 FOR MICROSOFT WINDOWS-OPERATIVSYSTEM MICROSOFT .NET FRAMEWORK 4-KLIENTPROFIL FOR MICROSOFT WINDOWS-OPERATIVSYSTEM OG TILKNYTTEDE SPRKPAKKER Microsoft Corporation (eller, avhengig av hvor du bor, et av dets tilknyttede selskaper) lisensierer dette tillegget til deg. Hvis du er lisensiert til bruke Microsoft Windows-operativsystemprogramvare (som dette tillegget gjelder for) ("programvaren"), har du rett til bruke dette tillegget. Du har ikke tillatelse til bruke det hvis du ikke har lisens for programvaren. Du kan bruke et eksemplar av dette tillegget sammen med hvert enkelt gyldig lisensierte eksemplar av programvaren. Flgende lisensvilkr beskriver ekstra brukervilkr for dette tillegget. Disse vilkrene og lisensvilkrene for programvaren gjelder din bruk av dette tillegget. Ved en eventuell konflikt er det disse tilleggsvilkrene som gjelder. Ved ta i bruk dette tillegget godtar du disse vilkrene ...

C:\588bce7c90097ed212\1045\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.95 KB
MD5	790ff08f4b77f917a8dab82bc9fddd61
SHA1	5ab49d7886cd9e35dadcc49b04f2df8fae0aada0
SHA256	420ba7b44ccb4a1f50488c4afbbe38e9b061d879d3af1c09cc4417a850d39d97
SSDeep	96:rTBfQaJRTIRTjzH+oDgQUoIs89FcG5ywI5Et/+TMm9MpDcA/+MvsNcUOsG9jeLd0:Zfo+Bs18ncG5Y5Et/+Z9OwAjs7OtRwd0

RTF Information

Document Content Snippet

UZUPENIAJCE POSTANOWIENIA LICENCYJNE DOTYCZCE OPROGRAMOWANIA MICROSOFT MICROSOFT .NET FRAMEWORK 4 DLA SYSTEMU OPERACYJNEGO MICROSOFT WINDOWS PROFIL KLIENTA PROGRAMU MICROSOFT .NET FRAMEWORK 4 DLA SYSTEMU OPERACYJNEGO MICROSOFT WINDOWS I POWIZANYCH PAKIETW JZYKOWYCH Microsoft Corporation (lub, w~zalenoci od miejsca zamieszkania Licencjobiorcy, jeden z~podmiotw stowarzyszonych Microsoft Corporation) udziela Licencjobiorcy licencji na to uzupenienie. Licencjobiorca moe z~niego korzysta, pod warunkiem e uzyska licencj na system operacyjny Microsoft Windows (oprogramowanie"). Licencjobiorca nie moe korzysta z~uzupenienia, jeli nie posiada licencji na to oprogramowanie. Licencjobiorca moe uywa kopii tego uzupenienia z~kad kopi oprogramowania, na ktr uzyska wan licencj. Poniej przedstawiono dodatkowe postanowienia licencyjne dotyczce uywania tego uzupenienia. Korzystanie z~uzupenienia podlega niniejszym uzupeniajcym postanowieniom licencyjnym oraz postanowieniom licencyjnym dot ...

C:\588bce7c90097ed212\1046\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.60 KB
MD5	8bb35201f972d5bf2786f3b5f8f6e8d5
SHA1	f79e796b258a8cdda8fe3f7f496f46125eabb0cb
SHA256	9e8010501acc2f5663604e0e54eb4f2a7cd9f9e7c0361564b0f6a172ba1e0f83
SSDeep	96:rTBfAlMu9fTp/9fTdIDsGJ1KlhREerHr7uStmESWp55ztFuMpDl/BRwZ+qf+J4EY:ZfeuqhGeHVIErn1zuO9BC8q2WEHt+B9

RTF Information

Document Content Snippet

TERMOS DE LICENA COMPLEMENTARES PARA SOFTWARE DA MICROSOFT MICROSOFT .NET FRAMEWORK 4 PARA SISTEMA OPERACIONAL MICROSOFT WINDOWS PERFIL DO CLIENTE DO MICROSOFT .NET FRAMEWORK 4 PARA SISTEMA OPERACIONAL MICROSOFT WINDOWS parE PACOTES DE IDIOMAS ASSOCIADOS A Microsoft Corporation (ou, dependendo do local em que voc esteja domiciliado, uma de suas afiliadas) fornece a voc a licena deste suplemento. Se voc possui a licena de uso do software do sistema operacional Microsoft Windows (ao qual este suplemento se aplica) (o "software"), pode usar este suplemento. Voc no poder us-lo se no possuir a licena para o software. Voc poder usar uma cpia deste suplemento com cada cpia licenciada vlida do software. Os termos de licena a seguir descrevem termos adicionais de uso deste suplemento. Estes termos e os termos da licena do software se aplicam ao uso do suplemento. Em caso de conflito, aplicar-se-o os termos de licena deste suplemento. O uso deste suplemento representa sua aceita ...

C:\588bce7c90097ed212\1049\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	53.18 KB
MD5	a3cd414134dded06b8df994b8e2e5613
SHA1	240c9de56956cc9edbacebda5c2659966d088b55
SHA256	3e32543701a5946cca27268a9e5ac38419a621c72e6f62862833217a5deca778
SSDeep	768:3CR6rdlWFJv3zGz9tWQ2ni8UNo/8PZrS14k:3CcrMeDk

RTF Information

Creator	karenor
Revision	2
Create Time	2010-03-05 10:46:00+00:00
Modify Time	2010-03-05 10:46:00+00:00

Document Information

App Version	32771
Company	Microsoft
Page Count	1
Word Count	291
Character Count	2340
Chars With Spaces	2626
operator	karenor

Document Content Snippet

MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE MICROSOFT WINDOWS ( LANGUAGE PACKS ) Microsoft ( , , ). , , ( ), Microsoft Windows. , . . . . , . , . , . , . 1. . Microsoft , www . support . microsoft . com / common / international . aspx ...

C:\588bce7c90097ed212\1053\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.78 KB
MD5	03cc0059a82eee79c116d536885df070
SHA1	a159a3e46c8bf726b8442163318b0e9ddfb0c68d
SHA256	34aae7ebd91888eb9a80edb0f0787b7155472d705d2853f2dc541141da9a82ab
SSDeep	96:rTBfv+/9TfHTGDXtZEOuAs50Y1EIF19VWMpDHvuKMLDBD+d54+QFEp5Tf+8K+l1p:5ffduAs591EIb9gOpqDoDZQmx2W9

RTF Information

Embedded URLs (2)

URL	First Seen	Categories	Threat Names	Reputation Status	WHOIS Data
http://go.microsoft.com/fwlink/?LinkID=66406&clcid=0x409	-	-	-	Unknown	Not Queried
http://go.microsoft.com/fwlink/?LinkID=66406	-	-	-	Unknown	Not Queried

Document Content Snippet

TILLGGSLICENSVILLKOR FR PROGRAMVARA FRN MICROSOFT MICROSOFT .NET FRAMEWORK 4 FR OPERATIVSYSTEMET MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE FR OPERATIVSYSTEMET MICROSOFT WINDOWS OCH ASSOCIERADE SPRKPAKET Microsoft Corporation (eller beroende p var du bor, ett av dess koncernbolag) licensierar detta tillgg till dig. Om du innehar licens fr programvara fr operativsystemet Microsoft Windows (som detta tillgg gller fr) ("programvaran") har du rtt att anvnda detta tillgg. Du fr inte anvnda tillgget om du inte har ngon licens fr programvaran. Du har rtt att anvnda ett exemplar av detta tillgg med varje giltigt licensierat exemplar av programvaran. Fljande licensvillkor beskriver ytterligare anvndningsvillkor fr detta tillgg. De hr villkoren och licensvillkoren fr programvaran gller fr din anvndning av tillgget. Om de str i konflikt med varandra gller dessa tillggslicensvillkor. Genom att anvnda detta tillgg accepterar du dessa villkor. Om du inte accepterar d ...

C:\588bce7c90097ed212\1055\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.77 KB
MD5	88241596f4c18675ca413b717e9eb870
SHA1	772301443bba3bc58e5f2657ee40761a3cf0f119
SHA256	45aa6e0c804279e1f0c9ddd8036a88375a09ee48f42b8d0254807f21ca9f28ea
SSDeep	96:VSfjQOTqfRRTqfSD+vmScfQEz04jMpDLiIzhZLlZhD9:wfcFpcfEo4jOT9

RTF Information

Document Content Snippet

MICROSOFT YAZILIM EK LSANS KOULLARI MICROSOFT WINDOWS LETM SSTEMLER N MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS LETM SSTEMLER N MICROSOFT .NET FRAMEWORK 4 STEMC PROFL VE LKL DL PAKETLER Microsoft Corporation (veya yaadnz yere gre bir bal irketi) bu ekin lisansn size vermektedir. Bu ekin geerli olduu Microsoft Windows iletim sistemi yazlmn ("yazlm") kullanma lisansnz varsa bu eki kullanabilirsiniz. Yazlm iin lisansnz yoksa bu eki kullanamazsnz. Bu ekin bir kopyasn yazlmn geerli lisans olan her kopyasyla kullanabilirsiniz. Aadaki lisans koullar, bu ek ile ilgili ek kullanm koullarn aklamaktadr. Eki kullanmnz, bu koullara ve yazlmn lisans koullarna tabidir. Bir ihtilaf olmas durumunda, bu ek lisans koullar geerlidir. Bu eki kullanmanz bu koullar kabul ettiiniz anlamna geli r. Bu koullar kabul etmiyorsanz, bu eki kullanmayn. Bu lisans koullarna uyduunuz takdirde aadaki haklara sahip olursunuz. 1. lang1055 EK N DESTEK HZMETLER. Microso ft, bu yazlm iin www.suppor ...

C:\588bce7c90097ed212\2052\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	5.69 KB
MD5	92bfb1fcf92cc12bfab626416a3b9971
SHA1	a06f563b2347882351a6e5156c3e2c439350f3d4
SHA256	6d5996ab5b44e7cc7dfd3df772c2e0d3ae396c1b023c65010b32558a162c63f4
SSDeep	96:M5DBmf0jLTCLLgLTCLLmDjxrDT2k9rkKp7aDKaXzaWZMa/O9wzy6n/MpDTKTGptT:EmfJXoQkRGDtXeWZv/O9XmOdZzQJWBB5

RTF Information

Document Content

MICROSOFT MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE Microsoft Corporation Microsoft Corporation Microsoft Windows "lang2052"lang2052 1. lang2052 Microsoft www.support.microsoft.com/common/international.aspx 2. f0 MICROSOFT .NET FRAMEWORK .NET Framework ".NET "f1 go.microsoft.com/fwlink/?LinkID=66406 Microsoft Microsoft .NET go.microsoft.com/fwlink/?LinkID=66406

C:\588bce7c90097ed212\2070\eula.rtf

Modified File

Text

Unknown

Mime Type	text/rtf
File Size	3.92 KB
MD5	67737ddbe10fa6324d6346114b5ad04e
SHA1	d37a4348c4b283da76b846523cf45b60acf218f3
SHA256	206542b81480d4a0c609dadd6d235bca40f96369e143f2cb6d5d411f701e4418
SSDeep	96:r4IffB09DkTLGTHD28ygHx0LlHKe1rvGA9mE0Eyh+iH/OMpiKwIurpEpiT0T8x8v:VfB8ygHclqe1ruAYEBm+imOvurerV9

RTF Information

Embedded URLs (2)

URL	First Seen	Categories	Threat Names	Reputation Status	WHOIS Data
http://go.microsoft.com/fwlink/?LinkID=66406&clcid=0x409	-	-	-	Unknown	Not Queried
http://go.microsoft.com/fwlink/?LinkID=66406	-	-	-	Unknown	Not Queried

Document Content Snippet

TERMOS DE LICENCIAMENTO SUPLEMENTARES PARA SOFTWARE MICROSOFT MICROSOFT .NET FRAMEWORK 4 PARA O SISTEMA OPERATIVO MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE PARA O SISTEMA OPERATIVO MICROSOFT WINDOWS E PACOTES DE IDIOMAS ASSOCIADOS A Microsoft Corporation (ou, dependendo do pas em que reside, uma das respectivas empresas afiliadas) licencia este suplemento para o Adquirente. Se o Adquirente estiver licenciado para utilizar software do sistema operativo Microsoft Windows (ao qual este suplemento se aplica)) (o "software"), poder utilizar este suplemento. O Adquirente no poder utiliz-lo se no tiver uma licena para o software. Poder utilizar uma cpia deste suplemento com cada cpia do software licenciada de modo vlido. Os seguintes termos de licena descrevem termos adicionais de utilizao deste suplemento. Estes termos e os termos de licenciamento para o software aplicam-se utilizao deste suplemento por parte do Adquirente. Caso se verifique um conflito, apl ...

C:\588bce7c90097ed212\1028\eula.rtf

Modified File

Text

Unknown

Also Known As	C:\588bce7c90097ed212\3076\eula.rtf (Modified File)
Mime Type	text/rtf
File Size	6.16 KB
MD5	0d77355877192eaaa1f8f705e296e4fe
SHA1	6752328e44e2369e6685eba616eb96c510e75632
SHA256	c1c02f0e59c9540481b586738140c14c59d154eb6ecf2268c248f5da89a51aa7
SSDeep	96:/R8NRf8TTVKTu4LuTu4LrzZD41raZM4HbegdxqKZJQ1/FSMZJujgzc/MpD1JzIf9:/R4Rfm2NBZMjOfro2n6CA9

RTF Information

Embedded URLs (1)

URL	First Seen	Categories	Threat Names	Reputation Status	WHOIS Data
http://go.microsoft.com/fwlink/?LinkID=66406	-	-	-	Unknown	Not Queried

Document Content

MICROSOFT MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 Microsoft ( ) Microsoft Windows ( ) ( ) 1. lang1028 Microsoft www.support.microsoft.com/common/international.aspx 2. f0 MICROSOFT .NET FRAMEWORK .NET Framework (.NET ) http://go.microsoft.com/fwlink/?LinkID=66406 Microsoft http://go.microsoft.com/fwlink/?LinkID=66406 Microsoft .NET

C:\BOOTNXT

Modified File

Stream

Not Queried

Mime Type	application/octet-stream
File Size	0.00 KB
MD5	d07d34efac6328007ad67c7e0a985e00
SHA1	aa3e5dcdd77b153f2e59bd0d8794fde33cb4e486
SHA256	06eb7d6a69ee19e5fbdf749018d3d2abfa04bcbd1365db312eb86dc7169389b8
SSDeep	3:A:A

C:\BOOTNXT

Modified File

Stream

Not Queried

Also Known As	C:\=aapkMF4BrfwjEq1AE4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	0.20 KB
MD5	627ac254b46ce3aefd14b0a57cd49a4f
SHA1	f2f70a38f49bd0d859069665bb5ed971355f452f
SHA256	cf5a8369639937456fbf26fb33b49aba64d57b302865eff6e9087b0123ec1d92
SSDeep	6:gkGq+5VK/pRX0UXejWmXhcBCsKWiumTTQUSUWQR1/:aVcpRX08qWmSGZSPQR1

C:\BOOTSECT.BAK

Modified File

Stream

Not Queried

Mime Type	application/octet-stream
File Size	8.00 KB
MD5	92443a66c62b9703630d51364a5a4f51
SHA1	a911368d7b2b8dbf9edfa5a5f90c68532fb60d39
SHA256	5d5f63f0c05ab955ccb116e98b27708965e5b374b23bb690cd34186ea2738ba2
SSDeep	96:vwaNcdCmGUyH52j0V6nPt4ihC/U8remKrQUqjfyJB7y4AIwVooui:52d/5yHEj3Pt4ihCvresUDBm4lwVJ

C:\BOOTSECT.BAK

Modified File

Stream

Not Queried

Also Known As	C:\0CwF8lftsEXdJY+5HdQoCyPOgwgzMKve.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	8.20 KB
MD5	5d8cb0702ca7353571ab889226187b8f
SHA1	43bcbc2e350b5798bbb1d0a54772706fa9422a62
SHA256	500cf654a12e8e16fe26e3d2ddb71d3ea8cbf70cf6827b02a931a0a3dfc12075
SSDeep	96:c202UiHGSZnV6nPt4ihC/U8remKrQUqjfyJB7y4AIwVoouPd:Q2UgsPt4ihCvresUDBm4lwVs

C:\588bce7c90097ed212\DHtmlHeader.html

Modified File

Text

Not Queried

Mime Type	text/html
File Size	15.74 KB
MD5	003581313d8566591c2dbde148ca7426
SHA1	2cb1b652a6d11318bcf8d3378d8b82c07b0df977
SHA256	596ace17775784cb6aad4a4045200d25d3bfebafc1c663f022faefab69edfd3f
SSDeep	192:7Ddx3KOTczFQ21Kp4n5DTx1iDecPeLHLHQFJFjZWblWUxFzJzcKHjW:fdsOT01KcBUFJFEWUxFzvH6

C:\588bce7c90097ed212\DHtmlHeader.html

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\Oye6Orm9Wa6BwMMDUOA8uplze8AQ6=kea5QA3YzSafs.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	15.94 KB
MD5	53680ca733f50dfb0b9a5da92f056063
SHA1	5374c7fee71d7f1818bd5748162af931c45ef1d4
SHA256	dc3d30c2286a50bdbacebfdd03a5985e3f7321fd9ed3126d714d12577881ddcf
SSDeep	192:aortF+y1x3KOTczFQ21Kp4n5DTx1iDecPeLHLHQFJFjZWblWUxFzJzcKHjU6:RZF+csOT01KcBUFJFEWUxFzvHz

C:\588bce7c90097ed212\DisplayIcon.ico

Modified File

Image

Not Queried

Mime Type	image/x-icon
File Size	86.46 KB
MD5	b763aee7c3d3ab58024de243d1e11831
SHA1	56ad59453634c50a0c4796281f7cc34ad12827a6
SHA256	5954cad5053e7d6c6ed676426f806dc8d1ac6f2dd68e31fe6156a10338cff8d4
SSDeep	1536:xWayqxMQP8ZOs0JOG58d8vo2zYOvvHAj/4/aXj/Nhhg73BVp5vEd+:e/gB4H8vo2no0/aX7C7Dco

C:\588bce7c90097ed212\DisplayIcon.ico

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\p+AUurmLLA4pklFbQwsS0h4tR97v8pPB3rEzEPCA.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	86.67 KB
MD5	db71dcc85a68f2ee1c176dbe3bccf7e1
SHA1	3ab8627170b7b1f83fe8376c1b92c7bceb062ede
SHA256	f96935dead2c5b2545dccc8aa94abaae0eccd9bac61ce900a7d5b8bfcb1e1fa5
SSDeep	1536:FWayqxMQP8ZOs0JOG5UGd8vo2zYOvvHAj/4/aXj/Nhhg73BVp5vEdG:i/gB4u8vo2no0/aX7C7DcI

C:\588bce7c90097ed212\header.bmp

Modified File

Image

Not Queried

Mime Type	image/x-ms-bmp
File Size	3.54 KB
MD5	e057afd3bd8916c297462fbbd9eb91f2
SHA1	4f30842b3a222fa74c09f728930355af4401a330
SHA256	8b9e791f89110a3f5119b5a2d3fbfaf17d664d44e173868757197d246d85ee61
SSDeep	48:f0sO8Kdwc6o5NF5ghwwpnMOccFpscGqfkemvIQpQK/xHiggTfGRgVC0h:cMa1krnrJmdQ+EgyfGq

C:\588bce7c90097ed212\header.bmp

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\g4rsV=1JAEUoJ0X5BZ9a5CevqxA.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.74 KB
MD5	2af340298aa27c7511eaad4c566d10a7
SHA1	bb792d35432656ff7d64cc62b364e03c8b6b33cf
SHA256	1042e3dd42f9869bc7ee324c59085024285d4040981487106203d05d1c58e7a7
SSDeep	48:kqG1kwXXb8vkiBaB1DdJeHnMOccFpscGqfkemvIQpQK/xHiggTfGRgVC0z2zY:APXXYvbEXdJEnrJmdQ+EgyfGkkY

C:\588bce7c90097ed212\netfx_Core_x64.msi

Modified File

Unknown

Not Queried

Mime Type	application/x-msi
File Size	1.81 MB
MD5	58d98cdb68d187e948f84d1ba30a8976
SHA1	e346779aeb2e6164122f4102e18b09879e600317
SHA256	80c5a91bd8001eb3eb176e099cc1f72baafb3478cda8a64ff228d9b38fca2d82
SSDeep	24576:f/zZ6tsNrQpc+BQbPyxbs4rONSnfiPBC6xahsovoMfjhOGxZWxw0Q:V6tuQpcxisfQf2M6FGoMLt

C:\588bce7c90097ed212\netfx_Core_x64.msi

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\4DCD2YPTdhotX=asIt4J8zy1VCc9YvYshWaT6skDL9DOFGOL.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	1.81 MB
MD5	d3ed2365b416d455ff62e72764ce9602
SHA1	a1dc939149e89b1bd5f3447b9bb565f23a38da5f
SHA256	be6582e7d1cd73d55e382b185012255fe604ec4b1de1f37ec45fda01c10d215e
SSDeep	24576://dm64sNnQpcAmQvPbkb99rOFfnJisBY6VahWoNoLfjT10MuPxxWP:g64mQpc269sZJVG6fgoLLTj

C:\588bce7c90097ed212\netfx_Core_x86.msi

Modified File

Unknown

Not Queried

Mime Type	application/x-msi
File Size	1.11 MB
MD5	58a928eac77b0ff8f7a8f0e7f4d06bf9
SHA1	39be61fb7ca06307f53cdacc5ab05047ef863d36
SHA256	a155dfc2dc29ead9a657994e6c4c4e620ef3bf77533621f100c18177cecfdda6
SSDeep	24576:Df6szx1u6dsNbQXcUwabPx9bswH/fd6pxr3:DfhzxI6d+QXcWDsK1e

C:\588bce7c90097ed212\netfx_Core_x86.msi

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\sXAut9lWVsdOR85XBHd8+OmFAIQ8OoqUce4piCwT9RU4n2K5.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	1.11 MB
MD5	3013c3fdd29aa5f8e88fac6af5af8b98
SHA1	3e665b608c8417031257017cb7853a72efaf264f
SHA256	671ff33fff82e33e5d920b4c87014029fa3e6b32817abf514a1e8e56ede10c80
SSDeep	24576:1f6szxVX6d9NLQXcyUbPB9b7odfHhIxkP:1fhzx56dPQXcRT0vv

C:\588bce7c90097ed212\netfx_Extended_x64.msi

Modified File

Unknown

Not Queried

Mime Type	application/x-msi
File Size	852.00 KB
MD5	dc5dd99d9d1b280923073ab531b49f2c
SHA1	1df9770570dbe9f33f711778af0eb8f131c657fc
SHA256	51856ed4c706b2acc0633d9c2e2dfa48f3f03d3c88a1f91c6a746930f76b8fd6
SSDeep	24576:E/J96doNrQlcqGRpOQSpKiPBD6txBkkkkk5SVe:W6dKQlc4Fc216XmSI

C:\588bce7c90097ed212\netfx_Extended_x64.msi

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\0ddYhtihEnON4DYged=tnvJRa7Ly2RNFpqHOxDvupcmn0moBCuCN2RwMccQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	852.40 KB
MD5	8697ed3589861988334f60a722b5a1e9
SHA1	e905e28fe4a6315d2fa1bcefcf4de571908b2d1b
SHA256	4f6e013f6c5c1a0649e1c4d89918943624d9eda5f46d816f40c0dcd67fe289a7
SSDeep	24576:1rDsx6IoNUQlcmzSpOhSCKiPOQ6/QBkkkkkNSlG:Vk6IVQlccEv2764KSA

C:\588bce7c90097ed212\netfx_Extended_x86.msi

Modified File

Unknown

Not Queried

Mime Type	application/x-msi
File Size	484.00 KB
MD5	3f11ae649f1966dc4290b6eb9094ba9e
SHA1	a87f5bbfb3542da4a7caca900a3ba870085c17c8
SHA256	26894355223944b35d9911225180c14e60e8554d341129ab7e3d71f2208892fd
SSDeep	6144:DRHfepsrxRrGh/JD6sAOiOk05c+Q+OjUIsLQUIcFxZSBVv+lYjsm6FBQ0ssT5Hf:dHfepsrx1GX6sEsNz7QXcFxZ+VhjEr/

C:\588bce7c90097ed212\netfx_Extended_x86.msi

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\BQNm0bd=m2wUvOvhllqDAlYwmoAH7=95JexDcqm+YgHUlUGsktIlxNEVreE.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	484.31 KB
MD5	3558c5a1de8eaf0350f7307f90cc2e8c
SHA1	9dc338934a2ae7f263598f58aee8ff29d84380b3
SHA256	05cc65bd6f58af3cd3ef3c346b5f609f92ef32733f256a04135d39c37dce02f6
SSDeep	6144:b+tHfepsrxgrGL/JD6sAkiOk05c+Q+MjUrsLQUIcmZSOV0+lOjKm6FBQ0ssi5Hp:oHfepsrxAGt6s2sN1SQXcmZJV0jO8J

C:\588bce7c90097ed212\ParameterInfo.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	265.67 KB
MD5	6d4dcd6c60cc7a4f3f8d27564734c101
SHA1	7c91c52a80dc62933aaf1e5218e900e6add685f2
SHA256	1e373959646b582e36a21e8b62175288e41a75ec0c5ec4ba163d2368bd90e132
SSDeep	384:EYSROAGiYNVrkT+8TodTBltw11VTvcL1wCiUj78leRqmH9Hej2iXWKYP4JUaGML5:EFROYoVQTLTQTDFdhaaot6PcbrIA

C:\588bce7c90097ed212\ParameterInfo.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\loW03LH1NrST9RV272o=mVVOVcn9zheBPHduhp6ymTWmKQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	265.93 KB
MD5	1c1aa2e250f0ba1913a2d859ad14fa14
SHA1	4ff84157cdca386654e1091727946abf98bc4fef
SHA256	779943c5a32a9aa0633a6d0374155fa8f428ee4ec3ce473e8b68cc4240f00a54
SSDeep	768:5uFROYoVQTLTQTD9Mh8HLPsdnOLaEvbc6PcbrI2:5uFRJovNHLPEOLaC+I2

C:\588bce7c90097ed212\RGB9RAST_x64.msi

Modified File

Unknown

Not Queried

Mime Type	application/x-msi
File Size	180.50 KB
MD5	5d97e0136c6a6081be8323427d0f6f6e
SHA1	868cf21f2ffca117e2b97a0ff55795a671ced30d
SHA256	782f19b0afe1474c4a411f02d2cd54e6f79bfab47f91b99efff9c3608c8275dd
SSDeep	3072:SMZbdgC73Q5H0Un0li+G9A7Kve3Hg5BszizUVQzB7m09g47aEqPNWZKq5uXp0v:SMddgq38l1A7Km3Hg5CzizuE99gVEqi7

C:\588bce7c90097ed212\RGB9RAST_x64.msi

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\UPgLyPV2diQJZdGyWSnwjKjO061ZPq9Ayp1QdGV3ZJg.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	180.74 KB
MD5	2739878fd35dfdd1858bc4a5289ebf02
SHA1	fcb603cb00e0929c221edb82338de20672e1da1b
SHA256	ecdbac9aff8bb1da1efc5d33f121ca0da4ca0f4285c408cf89af17b0eda848f3
SSDeep	3072:vMZbdgC73Q5H0Un0lHG9A7KYve3Hg5BsziBUVQzB7m0rg47aEqPNWZKq5uXp0F:vMddgq38rA7KV3Hg5CziBuE9rgVEqiB7

C:\588bce7c90097ed212\RGB9Rast_x86.msi

Modified File

Unknown

Not Queried

Mime Type	application/x-msi
File Size	92.50 KB
MD5	aeb5bee995ef617d2031a1694d7d0dc9
SHA1	aa9bf755c424b90773476344b2a5eec3201c0fa9
SHA256	e82bbf2062ae1d40c86aaf8ab76f57ac2e84d4b65471396ef240fabbb79e2f5a
SSDeep	1536:upZdWM41picgCjX3QAoHwDHL0fWi0lrmsIjyG9heHApNR3YHaeAHaeeeY:ugZbdgC73Q5H0Un0li+G9AsxqQY

C:\588bce7c90097ed212\RGB9Rast_x86.msi

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\=Jf=nC9t4puo4VnykhdQ=9bwFpk1fQSmspcHmyzvQCQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	92.71 KB
MD5	175f4ce3b0384881c32bc77b0978ba32
SHA1	fb4051735baa869945fcf2e99f8f4dc2eb16e173
SHA256	b051d7b0d4747f26d85dd1d62e76c6b89396420580d913dffa9f3bc4a5f30763
SSDeep	1536:OpZdWM41picgCjX3QAoHwDHL0fWi0lrmsIjyGWeHApNR3YHaeAHaeeeB:OgZbdgC73Q5H0Un0li+GTsxqQB

C:\588bce7c90097ed212\SetupUi.xsd

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	29.42 KB
MD5	1727b8b53979bf77c511236b12af3a6e
SHA1	ea6f8b8a374102f9c0d275e8071726969205cfcb
SHA256	7fdbb0201c2b410b27be3db7b7964c6621ea80490c663ff611465a6b9740edbd
SSDeep	768:hlzLm8eYhsPs05F8/ET/chT+cxcW8G2P4oeTMZ:1wchT+cxcDt

C:\588bce7c90097ed212\SetupUi.xsd

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\44fkMpst+ZFPdo5GyV03+K6xJCNrL4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	29.61 KB
MD5	0fd177f40e7ae78e97bced3721c9bf04
SHA1	a24a6710721cb5d6b62d0b96cee0f1398ad47e81
SHA256	494d942cc68e22363bfd460e7dd40f4c46389eba359eb1868042a06d233c4f71
SSDeep	768:WfcLm8eYhsPs05F8/ET/chT+cxcW8G2P4oeTMZ:XwchT+cxcDd

C:\588bce7c90097ed212\SplashScreen.bmp

Modified File

Image

Not Queried

Mime Type	image/x-ms-bmp
File Size	40.12 KB
MD5	99528d37b5b883360b6194f1fb356bb0
SHA1	ef8af4600be6032a856efb593069b980e5c4a3de
SHA256	c35101e353bf5cc1ce5647421952c167c97366a033b2c4da3e93f7764d717ba2
SSDeep	384:G1o2kgxmJGEsU3pP28+Qq1ms68/tUqHUlHGwM7bwv3ETbFrp:kkpoapTbimsqHGn

C:\588bce7c90097ed212\SplashScreen.bmp

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\s2LSvD=NcOGoBE3gvPDoDv7TK6pxoLmJP8qtZ3nLZ2o.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	40.32 KB
MD5	e99d54121217f27aad1a5b7bd81b6d5d
SHA1	61d0deb786d85cfea5556d4d2221a49287c97bd1
SHA256	13a7999d032eca47bf23f31f4d46bd05ac16d71ecda27e4ce25150f821662a32
SSDeep	384:FrJo2kgxmJGEsU3pP28+Qq1ms68/tUqHUlHGwM7bwv3ETbFrLq:FrJkpoapTbimsqHGc

C:\588bce7c90097ed212\Strings.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	13.75 KB
MD5	f2dce0e8f9eb52507e073c2c32a6204c
SHA1	ece0ae23e0691f2bfd91653316e3a94da08b62a7
SHA256	90ef1dd31229cc4d5a46cccfc20a2c96038c4a57f59d6167af267be657af33ed
SSDeep	384:VqZo71GHY3vqaqMnYfHHVXIHjfBHwnwXCa+g:Vqs

C:\588bce7c90097ed212\Strings.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\yDmN+p4a06mqUUb8m3ormI2YKcdhH4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	13.95 KB
MD5	68369dac8a380c0cf20a527b9e93936c
SHA1	bd03a183faa4c4fc6c24865870ac241b80378ec6
SHA256	de76b91850fce2bbdbc0129eea747094dc9c263d1b6f99671a4badc0b356949c
SSDeep	384:7Mqi4ZZo71GHY3vqaqMnYfHHVXIHjfBHwnwXCa+h:7bi4Zt

C:\588bce7c90097ed212\UiInfo.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	37.99 KB
MD5	6894b0892e02278747b8eaf5f9ae7342
SHA1	756f3699861d039ee1ce6de29ecf1a5b2642051f
SHA256	45719cb4ac8898b1289893d5765ee045a9f29e062d5e405d98dbabd4aad063eb
SSDeep	768:24UR0d5vssgP7ZgZ/vSguJQvFQXvDINJh6Fmhvk71sO0Nep3UL9Eu+dOtOcOdOj3:24UR0d5vsTPuZXQYQLIN/6Fmhvk71sO8

C:\588bce7c90097ed212\UiInfo.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\hQp3uesheT3411KZ+oimCXjXrhQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	38.19 KB
MD5	9872bc6dde5031daa48f7fd5e73115b4
SHA1	3a2bc1a671a5a36e25ed990d91baf5701326b137
SHA256	4a0eda9de70df073a8dbbc4f96ce1e0c6c6d54deae0f76969457c0d6602392d9
SSDeep	768:h5sE4UR0d5vssgP7ZgZ/vSguJQvFQXvDINJh6Fmhvk71sO0Nep3UL9Eu+dOtOcO7:N4UR0d5vsTPuZXQYQLIN/6Fmhvk71sOZ

C:\588bce7c90097ed212\watermark.bmp

Modified File

Image

Not Queried

Mime Type	image/x-ms-bmp
File Size	101.63 KB
MD5	e720441d1b972913d6ef74ae0c05747d
SHA1	d515c6e9e4c5a02562d89a0282ad1fa237e1cfd6
SHA256	1181effcfe3d1333dd48146979c4bf117ab9baaa912ebdb9b38cfd9cf3be583b
SSDeep	768:QKUpOeBmAj72KbvEvffvCv7cTIMUHuRzHA8X9H51T9ho4xw7CgBQ:QKULmAfbvEv47cIHzE9vo4SuUQ

C:\588bce7c90097ed212\watermark.bmp

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\KjJAqeiW7OiuvFOnvguy9GekaspZSp9hGmY.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	101.85 KB
MD5	b538f8af9c4b49408040ba385c55f92a
SHA1	40ba806e1a30b67940f2441fde26f98bc715a59e
SHA256	f28bb9241eefec2abf9dabbf94be0f64d6d299cea1b84447f68a69e5931c4520
SSDeep	768:0VKUpOeBmAj72KbvEvffvCv7cTIMUHuRzHA8X9L91T9ho4xw7Cgt1:sKULmAfbvEv47cIHzE9Xo4Suo1

C:\588bce7c90097ed212\1025\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1025\7J8z6r=FbrhnXjlmaUdH2k.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	7.59 KB
MD5	2159e916c587208ebe03a866dcfb9d65
SHA1	e94a706cb1930cf81f18f1c3228e4ad5f243ddc1
SHA256	f3df2eca3f7f62cf18b51f42b415407e2fa4fca7e9f711613bb8a450f7e7771d
SSDeep	192:rUl3Tk4pQxL75CD7sH08JUXthIT2M+bOx7BnT7QUmRn:rUpQ4pQxL7YsH08JUXQT2M+s7BnT7QUq

C:\588bce7c90097ed212\1025\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	72.48 KB
MD5	62be808cb418b9aee20ce0b335a2cbe0
SHA1	c211e60daa1d907d1b87416e990c2011cae0f1d9
SHA256	a5c869162dc8e052194405c1835db018c899a7f2de1ca7e61b49cd9ffe5cc0e1
SSDeep	384:4w1hDxsSsxGMZzhKtQOsitz0SBijTJ3ejrwddC:PhDxsnxGMdAVBijTJ3eHt

C:\588bce7c90097ed212\1025\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1025\qaNxm6B02FaQDzOdwMFjddbB5ivaevj+Jer4lHn7tibiik.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	72.69 KB
MD5	e2f3b021d15fbae08485184685111d58
SHA1	c6631f5183ad3d423d35fef1da59a1e6bbc61780
SHA256	b12281d34c272a194f4d6db8a8526f776ffae6fbfea9e5184b36b8ae18e3132d
SSDeep	384:jlQXhDxsSsxGMZzhKtQOsitz04PosyQBijTJ3ejrwddc:uXhDxsnxGMdARPLzBijTJ3eHV

C:\588bce7c90097ed212\1028\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1028\N0wcIUl71B6RrUSPtf=fwQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	6.36 KB
MD5	4b463de3bafeb30a1322664ce85ce436
SHA1	92736ee6569d09bcc1bc2bf4e32e581c95ec37b7
SHA256	dc65bf2d8c97fd27a0978fbcba610543393d943feaf0d3fdf7ff7a7d0d0ad9de
SSDeep	96:v05LzOzZD41raZM4HbegdxqKZJQ1/FSMZJujgzc/MpD1JzIfcHvR2k0cvzr7DDrr:4A2NBZMjOfro2n6CAs/E0

C:\588bce7c90097ed212\1028\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1028\3zW=ZDHckgtLy9orglBgca+iALjOPx7guEsICStouibmC4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	59.60 KB
MD5	6722e9b6b5afe871720c4b01fa3ebdd2
SHA1	fd598751260c9e1b08548a8860a306dd466befbf
SHA256	e2b810d69c091ed1b7ba1ea87c4019c8d32d3d51c62d585177e0bc04301d936a
SSDeep	384:pDGbCWB6rFk+2jP8lxtrzh1hsPN7ODPnPgQy50sJCXnofDPiFi:UbCWYFrewYTJCc

C:\588bce7c90097ed212\1029\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1029\nnXbshs0gTtt93z86HCqnA.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.84 KB
MD5	3172c6a6659a3bc1dbca4af9242fd420
SHA1	6721143ec8f8365a4cdc56e14e04b2685afd9be5
SHA256	c3ffd9eea7c588635bf1b13e96208e17b678ca5a7581751c1a7de84bee9d9f86
SSDeep	96:DjIBZtjGLmGBB2nZsEAVxfw8EMpDRI/YFkvvApzdYPBGxz4:DjIBZtj2Ln2nZsEmf+Oa/cU

C:\588bce7c90097ed212\1029\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	79.07 KB
MD5	b34054eac07d60b9de5afdf9590d0162
SHA1	e49123be1ca1ca930cb46a1a25e64633233dfea8
SHA256	a49b7e9b1202d097e315e6e9e1171a6b4b842a0009ff10b1dcb7b78ea5866b09
SSDeep	384:4w9jRY/svLov/QvQovOLeyndT/jfB7eyNdT9eTiyn15byYOMbqav8qAMrZEXw/Ft:Wt/jPvoZJZ02

C:\588bce7c90097ed212\1029\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1029\Xr9XWHD3q3c1Fg3i2Ii73VkXbJ58MuPdimNq3evBbo=DWA.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	79.29 KB
MD5	5aec85ed0769c9399146112a527840f3
SHA1	cd2027026a6897db31b5642c45b0a57d706727a4
SHA256	97a57e6551ad0e4d63b928c571b194b63dbb0baab44471193f4a3e4663c0400d
SSDeep	384:cT4fjRY/svLov/QvQovOLeyndT/jfB7eyNdT9eTiyn15byYOMbqav8qAMrZEdP/a:cEmt/jPv3ZJZ05

C:\588bce7c90097ed212\1030\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1030\hpR+GnPFxfD8T1ZyFrqwJk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.43 KB
MD5	02e06061a81eb498e132e670d3e340bd
SHA1	198ebaba78385d830dd04450b85dba8d7af9d882
SHA256	264cbc3090b4f5db2d0f896d0f26c317b795aeab986adadc7557c6ce3c244a3d
SSDeep	96:dZoNKtMDpIg8uJzGTcDC5bhPqljShnEGiBe4YOMpDIbu0L9D+Ogp+OgiKB5P6z+w:YQtGiuJzGTcDC5bhSljShnEGioDOOAuT

C:\588bce7c90097ed212\1030\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	75.93 KB
MD5	c5fefa1dd8465e1f2b8738a630ac367d
SHA1	d1cca9b490d0e07a46128b06146a431ce95dc06e
SHA256	26726e1c2eed1f318ea010a3fca0110415d26e7948d52792480ee1d7720871b9
SSDeep	384:4wvo3sGYQTjtLCpCggWuUyl+JMcf/zmSmRLAgRQJmS+e/JAu1O2Xx+C:9o8GYQTjtLCYggWuUMe+e/JL

C:\588bce7c90097ed212\1030\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1030\PuLmg4kz4iUO+YSlFvB9Oqwpx=FRN0JeW5Al8oED+Cn8e4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	76.14 KB
MD5	2a3e9900d77747b2a76f362e067f9a9e
SHA1	6fef04bc33c02664c55e8e3b061d33fd299ba0a6
SHA256	d272bd10d23cdd1eb64162848738751c1a373b17de7b838591f99de9a4d1bdb7
SSDeep	384:x3sGYQTjtLCpCggWuUyl+JMcf/zmSmRLAgRQaJ54kS+e/JAu1O2Xx+c:x8GYQTjtLCYggWuUM34H+e/JT

C:\588bce7c90097ed212\1031\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1031\G7l440rGzpCUoNv5+Vf=94.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.54 KB
MD5	5988401950bafcf897691e615542f41f
SHA1	55aff643f4d881cbc5fad4785ab10d242fc49c2a
SHA256	4f468949add086c6b3f03a63324d7b0c738c021ca3010cd1252cfdc1464e926b
SSDeep	96:WGRZ/UeQXqr5Zob0MpDmqgH4KYXsY/49UoDF:pf/Nsqr5Zm0O3Q3h

C:\588bce7c90097ed212\1031\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	80.42 KB
MD5	24b1175bcc3df901c74dfc113ebfbd7e
SHA1	bbca01a801ad1e74ef03861d307acde8d388a4cb
SHA256	952cbad0bc2eeddb767f97860a4eb8155be9e646e82f9c7867c22991bdabda5c
SSDeep	1536:guayUbZwf+2CzQHsjz1VbxzPGnz6solo8xKc6JT/1SJ:JayUtwf+2CzQHshPGnz6solo8xKc6JTY

C:\588bce7c90097ed212\1031\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1031\JmA=t=jIdXjmhA6cLiO1V1nTqP88o87=3eaaX4nbfpc7Fk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	80.63 KB
MD5	82ae55eeb3413a0585de71501259f9bd
SHA1	eb9a59f81669617a4cf56a069047df712b485894
SHA256	57b96264a3e3f3ba0a7fe361fea6055f640e4ebec64794c2739bb678f17a7f06
SSDeep	1536:cuayUbZwf+2CzQHsjz1VbxzPGnz78Nlo8xKc6JT/1SY:VayUtwf+2CzQHshPGnzYNlo8xKc6JT/n

C:\588bce7c90097ed212\1032\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1032\J94P40rA2uVZwA9nQXdug4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	8.87 KB
MD5	6047296957823f1cb2d09e9623fcfc3e
SHA1	4696893f192a3abc288c72d97e4c192c86214b65
SHA256	af92f42a6b73e8b67bd2e9b07a482320d12d028618ced2643a4a45865b9aff42
SSDeep	192:SW2VbZHY6P6Km5NHMQaEjxPSuHON0SuQI6zD:Sd146Pm5Ns0jxpeuQVzD

C:\588bce7c90097ed212\1032\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	84.26 KB
MD5	3188a1d5e93f536479ed1228bb57461a
SHA1	5402ac796d51d99d505640cf804143d971866ca6
SHA256	040e0ae457d206cd916ddc551ec1dd58f308b64e157fa2879f024ce4ea83e2ad
SSDeep	384:4w+7UVysuXHXeXAehlT++sTGoheXrW4MgcyvF773/xSFVQbleaS8tOnjiJLtchHj:+3OQeHll5PunjiJO

C:\588bce7c90097ed212\1032\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1032\dlB12sJLMekf97DIBID=jTgnMuupXuIGDEwE2Dh6mLfMG4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	84.47 KB
MD5	33f2e90de3131ed2f2e0a0354ee37e09
SHA1	a1f1041341eb9e46d31e6cf1ab13d068bbc7384e
SHA256	b35a0c3e4c249baa59009579084f2fcf5f71ecb5c0c58c450183ec41d22afe8f
SSDeep	384:zUVysuXHXeXAehlT++sTGoheXrW4MgcyvF773/xSFVQbleaSDt8njiJLtchHiLRG:73OQeHll5P0t8njiJi

C:\588bce7c90097ed212\1033\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1033\VCbgvLB6bk5gvjJ1mHUW4Q.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.31 KB
MD5	86fe3a7324aace4f2896084891e5d5d9
SHA1	d59b7cd71c38851c09976f71bcb78b456e21f965
SHA256	1afd8d19bcf99006967441b9415b39fb71732f2d3931de40faa6b7fcd6a7596a
SSDeep	96:VQH3djq50nIHlre7MUxprfKmMb0+MW+1Ep9qeelN+sznM+IEp+LkcM:Vz5KIlHW+mMhyAspzcM

C:\588bce7c90097ed212\1033\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	75.42 KB
MD5	8205a956ccfa1253e4b55dcb34a99446
SHA1	7288a2e33a46facb9773cebe5ce42833f389d13b
SHA256	30a7080f4e4e30ea05ecf3ca954b3c355a787d47d8d07808bdc9a0491df28673
SSDeep	384:4w6JjgKW5D8U2JhrDheHQTBNgNSdfUGNatvcc7QDBuGdSJgkR6SqzxV:gJsKKIrDPT7lSJYn

C:\588bce7c90097ed212\1033\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1033\OUSgPOXI0xoEtkUetY9z4lwmzro92BeS05kffORCyrVQ5Q.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	75.63 KB
MD5	c5c755bfa4f73ce04aaa901f9c1fdcb0
SHA1	4b13cef6723dd004aec770537275018843a2aa28
SHA256	a29486c320911b071c14f1bc84a9204b276ce06acde21e33183a09f76b91aa65
SSDeep	384:v5nV2+8iZVJjgKW5D8U2JhrDheHQTBN6OMtNSdfUGNatvcc7QDBuGdSJgkR6SqzF:vnz8ijJsKKIrDPT76sSJYF/

C:\588bce7c90097ed212\1035\eula.rtf

Modified File

Text

Not Queried

Mime Type	text/rtf
File Size	3.62 KB
MD5	557771884569520796885b6db7c69d6c
SHA1	931ebd890058678b00157b440104a51eecedbbb9
SHA256	a5c7bb18c5097a4168b45d82badd0c41dda1b7b6a2a341563bd7236ccd0024f7
SSDeep	96:MWBfuMAh8TZhqTy9DbDixX7zR7MrrqX37ILY7TpLgoyk1zERRe5g9KIMpDnYA06t:VfeRzH3vmLQzE6AOAC9

RTF Information

Document Content Snippet

MICROSOFT-OHJELMISTON TYDENNYSOSAN KYTTOIKEUSSOPIMUKSEN EHDOT MICROSOFT .NET FRAMEWORK 4 MICROSOFT WINDOWS -KYTTJRJESTELMN MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE MICROSOFT WINDOWS -KYTTJRJESTELMN SEK NIIHIN LIITTYVT KIELIPAKETIT Microsoft Corporation (tai asiakkaan asuinpaikan mukaan mrytyv Microsoft Corporationin konserniyhti) mynt asiakkaalle tmn tydennysosan kyttoikeudet. Jos asiakkaalla on Microsoft Windows -kyttjrjestelmohjelmiston ("ohjelmisto") (jota tm tydennysosa tydent) kyttoikeudet, asiakas saa kytt tt tydennysosaa. Asiakas ei saa kytt tydennysosaa, jos asiakkaalla ei ole ohjelmiston kyttoikeutta. Asiakas saa kytt tmn tydennysosan kopiota kaikkien niiden ohjelmistosta tehtyjen kopioiden kanssa, joihin on voimassa olevat kyttoikeudet. Seuraavissa kyttoikeusehdoissa kuvataan tmn tydennysosan liskyttoikeusehtoja. Tydennysosan kyttn sovelletaan nit ehtoja ja ohjelmiston kyttoikeusehtoja. Jos ehdot ovat keskenn ristiriidassa, sovelletaan tydennysosan kyttoikeus ...

C:\588bce7c90097ed212\1035\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1035\uWOU20Gf4z6kjao3S2KHyA.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.81 KB
MD5	c6d2131890c518a5ae442bad77b7a270
SHA1	ed36add374f8eb6c8d05669cdc45ee5ab4ca01f8
SHA256	21e43910df4dce729be900a73414b247a0ef5132333cafab1c2a543d135fd5d4
SSDeep	96:O/xUd6VD3taPzX7zR7MrrqX37ILY7TpLgoyk1zERRe5g9KIMpDnYA06IWK7cqYfX:t6hYTRzH3vmLQzE6AOACuPfS

C:\588bce7c90097ed212\1035\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	75.22 KB
MD5	95722ebd71d71df70301ee06df4065b4
SHA1	d54bf612cd7133b33af95a588d25d11061f5ba7f
SHA256	741360601cad70416b89af2b8ec8f8b80b577ae8258255d9fae93de231a16d8f
SSDeep	1536:wT42CX8ugmmuM92kEMeeGOCOUJPePJiWGICG+JNG:wT42CX8ugmmuM92kEMeeGOCOUJPePJiS

C:\588bce7c90097ed212\1035\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1035\k5Cc4o8jPGNe=hM5t3ztv+Vw1IrQN43OWa5Y9j=BneSr1Q.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	75.43 KB
MD5	784ef0b28ac28397ed4a01530b7d380a
SHA1	f6079f5676c9b5f31d9dc12d7679325e324fd08f
SHA256	f7fdc8f9bbef043c1dad1f3180246f82e02fe32a2008f158a38eb89e0dd7cdc1
SSDeep	1536:5T42CX8ugmmuM92kEMeeGOCOe/bPePJiWGICG+JNH:5T42CX8ugmmuM92kEMeeGOCOgbPePJiz

C:\588bce7c90097ed212\1036\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1036\7KfhbfTCxDtM4vdbZhIQM4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.64 KB
MD5	10bc786d4fca58d530eb16705aa23de2
SHA1	c997c44eaa15ca3541bb241f6d40f3d2d688a5d9
SHA256	9a147fdaca9cdcafb9cefcef7d47f3140f864ac994eb4409b79d7697454c0daa
SSDeep	96:zXOzWNX1HDpHD1cT+Tot4er42xzK8/ptMpDLaFNsNGlDPsCUFwu7J:zOzWNlx1E+Tot4er42xzKuOKPU5

C:\588bce7c90097ed212\1036\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	81.02 KB
MD5	e66cf73bcb9880c5d0b49b70bd235ee3
SHA1	a7aa7763e89fe8d6731702ee0d0fb140d4a35855
SHA256	2bd60ca711d53219c5db17e2311becc173b62ceb51ed07bb31161037e248d02d
SSDeep	384:4wCFpNvOvt1jagJVzRzchryjiTIJz0kbG52bxVC:WvotpaluaIJzaIC

C:\588bce7c90097ed212\1036\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1036\zeO3fsc=jkrlpStOJ1nr5PXT2AaD+edX78mteIB05a9ZUQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	81.23 KB
MD5	72f957125f66a4a7cc64d6175daaaae0
SHA1	5a783d81a90d908af302cd0841494474b46075d8
SHA256	043c2c024cf4fc6d14cf26378fec9320d4d2eb23b484a5060a9d58627e2baa36
SSDeep	384:0pNvOvt1jagJVzRzchryjim9woh+mFuEIJz0kbG52bxVp:wvotpalulnUEIJzaIp

C:\588bce7c90097ed212\1037\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1037\URfWfKaOLBnIeqVKIkr9lk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	6.89 KB
MD5	7caef5a89262144a89e36a3d87f89873
SHA1	6826a7648264adb7fb0737c2f8edb13bcc793345
SHA256	759872d7c1fee4477eb7cb44ac13d9c7edf3be6e5e28354d3becd221892ee9f7
SSDeep	192:04q1yixoTtlkPWIHxYnJVPOxScl9ZnlfZ4LHF0N:7filOJNokA

C:\588bce7c90097ed212\1037\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	70.39 KB
MD5	e2287c328b4c64fea9a9ab5ec8e3429a
SHA1	e9b63e71af88eec71303c7fda6c84adf9d9ef7cd
SHA256	c19a548e0dc52598c300d94f5e5a3259f41be3187540c690e3a5227c45e83dbc
SSDeep	384:4wkvJlqaYsxaAzdNhXdQGKbvvGu1kZJNvSX33qLC:OHqaBxaeJN7W

C:\588bce7c90097ed212\1037\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1037\A6Sp2ADZ6ug7agx397Vv=Wb7OQx8MlTxkBnztsCrZyu8wk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	70.60 KB
MD5	8e978a2ef5a19555c6fda0b0b7b9850e
SHA1	a356412a78dbe32d504b3e4bddab98e11267b4fe
SHA256	f22bf73b7f147185910de46f89f13ee06d4728351c31440cc2333c4f85e4e032
SSDeep	384:r7RvJlqaYsxaAzdNhXdQGKbvvGuULkZJNvSX33qL3:r7RHqaBxaFJN7j

C:\588bce7c90097ed212\1038\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1038\GTM5rHMJYIj5vncRwRwRT4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	4.35 KB
MD5	220deb1a7ffeb5cceac6b6b76cebeed8
SHA1	cbce752f461fe0ffa2b4c0e3f78dab014b6e4c3d
SHA256	228818aaa0cfd05aea38762451f16a619e87a796e85b7e3e9b019450df587821
SSDeep	96:8Q8yWvLURRp7dQRzrGJ6JwtxYMpDNeb6CZXKEp5/Eupwy9Ep+LM2nH:8Q8yWvARnqzSJ6JwkOBjC0Ve

C:\588bce7c90097ed212\1038\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	84.42 KB
MD5	734098a310a8bf078498022ccb73c9f0
SHA1	791de7f986a670b466a9976aac18fef5db08b645
SHA256	3cd95e194d23b91548879361f2e225fdd550c7e8ec5e4d2ff1d962e871886ccf
SSDeep	1536:Ji+5JLuNF70SNjPBzuXrXdJHbdi3kC4kLQ:Ji+5JLyF70SNjPBzuXrXdJHbdi3kCZk

C:\588bce7c90097ed212\1038\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1038\+sYYZLCNv5Ume9ALuXonKTe65jLuGGGuN=UR3OLz2DQaok.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	84.63 KB
MD5	dc34abef02d0e518530508fd5428559f
SHA1	f86f5ac60e1a1c513a9929865d61ed092cf6d77c
SHA256	24e6a78de7a8c1e6c5fbfaa1a1667f6f2ef27bccbdec6615372c97b23f105c4c
SSDeep	1536:4i+5JLuNF70SYLY9jPBzuXrXdJHbdi3kC4kLT:4i+5JLyF70SQY9jPBzuXrXdJHbdi3kCF

C:\588bce7c90097ed212\1040\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1040\cRXncCJPLSyZdzdoi4qNuk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.75 KB
MD5	b07bd50edaabad6701208185c2cf920c
SHA1	04b88b56ee00b1737b80e832aab8c48421895fea
SHA256	50d0737e7a261798ea0f1fa74e6fa788aa4fe266e3b734c849aa193df9850102
SSDeep	96:9j2J5GsQ0vGz6TCJEZ+jw/Njppm/F/ZaFgcT/okOctqgS:WGsxvgIzMjsA9/EFxDtqgS

C:\588bce7c90097ed212\1040\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	78.18 KB
MD5	8e56a9066a9b953ccbde6d67ee846e4f
SHA1	948a602beb18bbb382bb04218b528e7708594615
SHA256	960b20331890dce02036db02c79566463db63df3e84f50524541e3114d8b70e4
SSDeep	384:4wFACg1fPK/YBZ3tMa9eIzNZNs4fzWmJVo5HnscuRC:/ACgNKjaVLJi9

C:\588bce7c90097ed212\1040\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1040\WKRdENIya6cmJPpxuoLrGpa9eLZja5+uHtMsvaRkGTS0mQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	78.40 KB
MD5	73c4d6a6b96599ef995b3d37f18541b8
SHA1	1495bb102fec7cd62e8fd2855c988326d1711f3a
SHA256	717454a7138861c861a86654be2c317f93c7c2d73a4f6a2f2b0b4ffcbf92a42c
SSDeep	384:KqctACg1fPK/YBZ3tMa9eIzNZNs4fQwFWmJVo5HnscuR+:KqyACgNKjaVjVJib

C:\588bce7c90097ed212\1041\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1041\qZviTx06yKGqY06ej5rXg4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	10.08 KB
MD5	736b3ddc13ae0505d93b0c7e1eed44e5
SHA1	3638513b03560e61096fd11e177b7a7766ad0afa
SHA256	dd682309fb1cc6ab311e68a602b0615d400e54f568dd3241a13ab9c8faccca4f
SSDeep	192:JpzapGPW4XLmYyVk/qC2+PCsANROmuuU8EhZFJEj2VQoKOwyWAOxzpOh+uqaJgtg:LBCPKCtQoCnGDzhuqzZzy

C:\588bce7c90097ed212\1041\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	66.63 KB
MD5	a41ac84b841181e228b738191c240165
SHA1	d048446c850fb268764de78970cc17972f938a4a
SHA256	a2bca8d74a4b95d1b03364c0db2aa70095afd50978a4829918c57375be538012
SSDeep	384:4wVzQOXe7GoXHoMIpYnxKJMlvWy0aO8rRnfJGnaC:3QOu7GlCnkJMlvWy0aO8rRnfJE

C:\588bce7c90097ed212\1041\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1041\x4Rg5JzXr+wbktLoYzc6=B1P7ucKyAfakEWeAVHTFreAZ4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	66.84 KB
MD5	1562db734bcdf2c4ef1091b09f4316ba
SHA1	b8adf105ec7f7803d75ab3b50885a222ef61a158
SHA256	7b335319fa0cce742dff756203e2d9e44d791adfe7c435bccaf5d88e3f879d31
SSDeep	384:XN5FzQOXe7GoXHoMIpYnxKJM261PvWy0aO8rRnfJGnaS:BQOu7GlCnkJMXBvWy0aO8rRnfJw

C:\588bce7c90097ed212\1042\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1042\oNaaV96b2IHYU16PUvk8rk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	12.59 KB
MD5	ae45fcf1122b3a84077f31e7c616183e
SHA1	0c552fa0d131dd9bf78114f8be2f9b6cfc1e7171
SHA256	6dcaacae0366071a45fdf5fd40420ffa8fad0642e9f13dfe624a0fc70a1b69bd
SSDeep	192:WkH6IVF4MjeKojIfE6wK+b/mIr4tIAcAIce5rD6O1IuonKZim+dfNAW6qUK84Znj:WkaKK0wB/Tr4TmckIuCm+TAWdUN/rer

C:\588bce7c90097ed212\1042\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	63.71 KB
MD5	f8f29a329e4a49e3ec187d37311dfbca
SHA1	5598e031fb14f1d4109587420d2551395d338d86
SHA256	d2431ffbe12c25408efa3e5520364285d10fe7e755b6b799a7503933d6c7c507
SSDeep	384:4wsx1QzSzXLGKgooDQA0pb5ywW4JSUQvEQzH/dC:egtqpb5yw5Jf

C:\588bce7c90097ed212\1042\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1042\HzU1fVnk=dIfPFNfOKw3v1oMgG8jx8XJbFcEa51fDQwonQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	63.91 KB
MD5	b2d26fdee4c1ef34a247d4de0bef741a
SHA1	cc37836ff60d17b9c48fa73fd7da9190185b391f
SHA256	b7e90d44a537ef7f026c76f7a52bac7cceaa92e82e9d0e357001d5ef73c256d1
SSDeep	384:V+o0x1QzSzXLGKgooDQA0pb5ywW4JSUQvEQzH/dvD:8ngtqpb5yw5J4

C:\588bce7c90097ed212\1043\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1043\cBKg4SWVMpCksc+43x05RA.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.66 KB
MD5	38d914c2e2a8d75418c50a40fa473c93
SHA1	b84978c16b59508a8f97a1b5710925919c503903
SHA256	c2d12fbc8b73745a70d288ebcfaef3c661415bd1d759d36ec4196f30e3f66ff8
SSDeep	96:ABfg8M6LhtJlIcm3wEM8LPMpDlGu3x+O0H+Ozo+SBT+OZt6SiN:AtsItGwEMAPOkukO0eONNOTiN

C:\588bce7c90097ed212\1043\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	77.77 KB
MD5	3d15f15402a30ff7ea0437acba088c29
SHA1	6d5160ce4ed69047f55debbfdc5fbb4a823e6523
SHA256	19124e366f3abfd1fd5edd79619e0af9ec362878a1df02076b34d3d0f1da7f48
SSDeep	384:4wCsfDNzgDbRiRVqxdYRF405vYtyVB1HaAzTGZUeJvuQFKhlQ5gwJBKQauJf1tS3:jbZKbRyVqb82IB+GlQ5gwJBzauJzk/

C:\588bce7c90097ed212\1043\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1043\YAopRJ0z0RGnbEOwV7fMLnU+whdNrZ2LITFNKGnKJB8gLA.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	77.98 KB
MD5	d31b8fcf4dce064255c63eaadf608265
SHA1	e0c58612930c878491f6887383827850ea532ab0
SHA256	6513de4cd065ffe67b470689573a388317c5e697f41ae5c1abf92950f723c5f4
SSDeep	384:MrsfDNzgDbRiRVqxdYRF405vYtyVB1HaAzTaKRUeJvuQFKhlQ5gwJBKQauJf1tSy:MgbZKbRyVqb82IBhGlQ5gwJBzauJzklI

C:\588bce7c90097ed212\1044\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1044\ZEVqNsKUOPPuClTLLtVciA.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.17 KB
MD5	44c0b9b68ae348bd399138209ff5cabe
SHA1	9b48ffe68bd072e6eb7c9c12b985ccd851a61402
SHA256	8954c3a85f6ebdba418b8489bb75debf318c4406948b36be6c2d0108023284d0
SSDeep	96:w78nTh6xq4S2wG5wNRc9q5QB34W50MJGfMpDDZDReO5KIKrL2OuSHMU0D:M+Th6xq4S2wG5uRc9q5QB34W50MJaOBj

C:\588bce7c90097ed212\1044\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	77.44 KB
MD5	050ab22d7737d11ea7d4314f8407d22a
SHA1	808be9b3dfb14554644eafa1f8c90a72c04e6d46
SHA256	a44c17b8381c204049a986513041404595b5c30b8ca74103b7650660ef44a06c
SSDeep	384:4wn2IhI4z6T1sHCqeHveRWUw+KbGpK+9C/E6b2NJBf2OEuC:V9hI4z6T1siqeHveRhAo9CM6b2NJBuOG

C:\588bce7c90097ed212\1044\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1044\4Pd39KVyMIHvfDa80Cqz3QOqtA6DM=TGVUWsWAEwr6PWDk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	77.65 KB
MD5	1c695e1bce51f8cfbe0442e59dcbba6f
SHA1	c5cade8c1a85d106403cb6560033b180992714b3
SHA256	6cc64bd58b6f23e56c9fe7935d879013ae7ebcca653d55c00c79089d62575476
SSDeep	768:fxlJhI4z6T1siqeHveRhAo9CM7b2NJBuOJ:5hI4z6T1siqePeRhAo9CM7b2NJBuOJ

C:\588bce7c90097ed212\1045\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1045\y99Xr8wA2Hr7EZmRBLwu+Q.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	4.14 KB
MD5	500a1b7a023d7bd1e8810efd20386d11
SHA1	fd66e57aea22c5ae8c00c0f97f27db1335778673
SHA256	d9d26f2dc8b1a08aa67a5832350427d158d12534e6518feb7a3ac064ececb634
SSDeep	96:J8WwnoioJCUoIs89FcG5ywI5Et/+TMm9MpDcA/+MvsNcUOsG9jeLdyxYh:65MJ+18ncG5Y5Et/+Z9OwAjs7OtRwdaW

C:\588bce7c90097ed212\1045\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	80.44 KB
MD5	f5d6c690120f4426b70ad2c4711a4a5b
SHA1	0bab60fb7ad28d8dc20e453088564e7c03350974
SHA256	291a15add2f857e3ee510c59cdec20150fab2965dbefd6081e0ae4e2a0ac45a0
SSDeep	768:lz2ue+xTxXUpUqTvvUOfUs6LArUpFymrqQtr8BAyfO4RkSzXunasvJH2TF0wpYle:lz2ue+xTxXUpUOvvUOfUs6LqTavdJkUO

C:\588bce7c90097ed212\1045\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1045\tgsjuNw7TIfIFWwNB87mM3S2WeDxQ5RS7ijSvAjzuRCGPQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	80.66 KB
MD5	ed363eaef497578bc3036717ef2cb6eb
SHA1	473f2fe425fd8067b01c3da34513d920c06e2570
SHA256	02428ccf3b7cb8d349ef0f34a054e01ec2de0c54c68b9cc7624880d68d207afc
SSDeep	768:csI2ue+xTxXUpUqTvvUOfUs6LArUpFymrqQtr8BAyfO4RkSzXunasvJH2T0pYlTU:c2ue+xTxXUpUOvvUOfUs6LqYavdJkUg

C:\588bce7c90097ed212\1046\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1046\ReAoNvMFVUsZwXTTvw6jB4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.79 KB
MD5	670084da3ff2e0099213db0f93e4df67
SHA1	262f357d5457aa94ffb4a185de3dd66604e9215d
SHA256	96c61e19acc0b78eb6d404849eff288b9db0e0ac47f2c34eaef47284bdf8e0eb
SSDeep	96:1C+S4KuJ1KlhREerHr7uStmESWp55ztFuMpDl/BRwZ+qf+J4EMZUMZPL1d+Bp+Gg:dKeqhGeHVIErn1zuO9BC8q2WEHt+Be+

C:\588bce7c90097ed212\1046\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	78.85 KB
MD5	c07b4bda43ef79e25dcdc92e8107f02a
SHA1	065018741eb9a259fe2a4ce4847647d8ad77061a
SHA256	7c01a8ddd31dc6d30f87f9c5b43651e773b91ef12deb02a9c543faa6db3ac80f
SSDeep	384:4wl7DAQput9emRem6cvMOem6QemIAY/YEQTeQoqk7EHd9nKxXq5fKsLaG5m73RdC:geOeqeCe1CkyJtG07f

C:\588bce7c90097ed212\1046\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1046\DSi+27cFVBYhPuq5MTuBR1cyxBGfJ+qY+Ff5FsZxIzpYOQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	79.06 KB
MD5	14c49ee62ccc30038b32a7a66a0db12a
SHA1	22225b85f596d790ea93ff206fd5fbb507b418e3
SHA256	7ec2fdf68105abc699a8610c50ab59d87f03609f0316d2f6740a070b630d33df
SSDeep	384:M5seDAQput9emRem6cvMOem6QemIAY/YEQTeQoqk7EHd9nKxXq5fKsLaG5m73Rdg:MateOeqeCe1YkyJtG07dZZ

C:\588bce7c90097ed212\1049\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1049\tcyx3o6S25VpsswEx0Cpnk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	53.38 KB
MD5	9037aff7b58fccc9c631635b825df0a2
SHA1	0135711c29b5c9c597216a33fd7056a3f207724d
SHA256	c1572fc678b46b34dad9ced94e9d01c5dcd306491b344f3024d653d530bb4c35
SSDeep	768:906rdlWFJv3zGz9tWQ2ni8UNo/8PZrS142:9xrMeD2

C:\588bce7c90097ed212\1049\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	79.57 KB
MD5	9fbad3443e3ace33352e78ae1286ae24
SHA1	c1ac14e2326f2965fe0e234c92bfd885f5fc6a4f
SHA256	b3124999ce6fbf5ba94e2ad20e86d689f4efed06b55a1aea6be55a3fbc5df99a
SSDeep	384:4w7iPuXsPXBUhOLGvVVA5/Fpn9zJop9TE+zkX6JS/5cGhj/6C:MP5XyZVrJg

C:\588bce7c90097ed212\1049\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1049\zeLrW2YqT+QyTBRkGt+0=gQGuZegjlk=aJfWvZsD5S7eAQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	79.79 KB
MD5	7016d53b57c631c441f98a60b878198f
SHA1	b4bca479aa4ed9d590b8fdd3d71f8bb0fe683a97
SHA256	dcf07692a0c78134ce87e7bd6479d8205362fb4917e2571d973ae87c82f90f32
SSDeep	384:YB5U5iPuXsPXBUhOLGvVV+MCzd5/Fpn9zJop9TE+zkX6JS/5cGhj/6TNt:fcP5XyZV+MCQJl

C:\588bce7c90097ed212\1053\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1053\YHEFAZ=+peduHPilVNvACk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.97 KB
MD5	51d5277a6b04a9c3bf18dc9cf67decac
SHA1	eeb10b898f7217a5b161433c364adc5535c403b0
SHA256	395fdcf5457b357d86c7babe67966315ba75df02f0ff301a3747cd84dc785a23
SSDeep	96:DEwM4FnPIugSOuAs50Y1EIF19VWMpDHvuKMLDBD+d54+QFEp5Tf+8K+l1+ntEp5b:D9McPIFuAs591EIb9gOpqDoDZQmx2WHT

C:\588bce7c90097ed212\1053\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	75.86 KB
MD5	c9930a69b3364135867e9060efdb053c
SHA1	b452025cd5154a736a2b727247d350d5a5e12b2a
SHA256	cdc4ef59a93b8a58b53c50db165b0ca9dd958729156209d9c570e993ff3eb095
SSDeep	384:4w+optBSCVb5v6iMSsCtD7jjktDhHfLSGM3zD0q0Xt//Vvcinnl/06N9mGktJsI1:QqtBSCVb5v69SsuD7jwDkqmGeJsoOI

C:\588bce7c90097ed212\1053\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1053\2UlmmFdmXf3jHxXf0Kbn0Uuf9YJHdc2hffQj7aixgqwc5A.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	76.07 KB
MD5	890fd01251cbeb167662559e55e340bc
SHA1	13121983a32cec0fe0aabcf32116925efc1fcf20
SHA256	9e846efa994b6abeb23fe2af31447ed11aba1e539140e7998b6c107685601bf3
SSDeep	768:Ur2tBSCVb5v69SsuD7jwDkWTmGeJsoOxe:HtBSCVb5v69SsuD7jwDk2mGeJsoOk

C:\588bce7c90097ed212\1055\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1055\yNkSrZ=dHzgO=52MaCGwnQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.97 KB
MD5	cdf40399ed22461fff3274ce5b97646f
SHA1	a13719e746605e286b327a92869d59a55e56dae7
SHA256	0cb05a2498f4dfa2c5247259ace7f3c712fedd65a77991bf9cbe99e87eb44319
SSDeep	96:UK5Smq64nywCyqvmScfQEz04jMpDLiIzhZLlZhDLT:Tj4qpEo4jOTH

C:\588bce7c90097ed212\1055\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	75.02 KB
MD5	ae07c3632c549c254b6d54a80ef8423e
SHA1	11e31edceaa980be065f1071cb3033e575a3b929
SHA256	acaee07e1c0ed1d79b91a584c42c6e5def3e746eb22e8cde41ed64b3b604b359
SSDeep	1536:bM8DL5YHRL87mlQg5IgrbGZzwOS8Frc+iI0jJNJ7rtRpU8:bM8DL5YHRL87mlQg5IgrbGZzwOS8Frcp

C:\588bce7c90097ed212\1055\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\1055\2Tg4xH7Bxe1+pMm3tQ2pkBbd+rjDVGkI1dqO9P7iDgnq0A.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	75.23 KB
MD5	9784e3debf535f3b36e15650c9a24996
SHA1	92dd3e06579c280be398e1f5b24024b22f0b0cb3
SHA256	9cd087aa6a66916efde5cf7af89f8191dcad7137f7ab6e20a89c203fdda870bb
SSDeep	1536:qM8DL5YHRL87mlQg5IgrbGbzwOS8Frc+iI0jJNJ7rtRpUQ:qM8DL5YHRL87mlQg5IgrbGbzwOS8Frcb

C:\588bce7c90097ed212\2052\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\2052\rj63MYiNLskACSqG+=VWwA.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	5.89 KB
MD5	df6a878a57512a23d8cf3b758d521815
SHA1	d17bd1e910a96dbac514c50dd855f0baa649e1af
SHA256	79a771161b8d657287295354a0ed1d209f346775bf5b6dcf6334f7d03008e2cb
SSDeep	96:1tXsc2heDjxrDT2k9rkKp7aDKaXzaWZMa/O9wzy6n/MpDTKTGptcgzZCQZwJmbBX:192KQkRGDtXeWZv/O9XmOdZzQJWBBdVp

C:\588bce7c90097ed212\2052\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	59.26 KB
MD5	80ad089b53d59e11dec40275573033eb
SHA1	af0a2251f52ecceebddfe6727974be25961b4601
SHA256	a6cbed16243cb7fc651db62bd18aa8e72b8bc50d7bd86a3f1a3294def701b85f
SSDeep	384:4w7yHdhTgqbbT1HjWZez2jtKgst+7x0x8EM5NnqQivGXU4woZukC7FQKAuXR/4ma:dyjg2z2bXXwoZukC7FQKAuXRgcJy

C:\588bce7c90097ed212\2052\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\2052\Yz5AXqULpQhk+lvHwUFYRX2atu7P5qRTT1HiL=JMeuyrhQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	59.47 KB
MD5	b8436974305e9110559672733b326175
SHA1	72b67249dface16020639d9b53d777a5e1ffe211
SHA256	dfc35459991e0909addd32e3f1490cd0d08291a50a6c3c05e619af4d1e02517f
SSDeep	384:XiIZjyHdhTgqbbT1HjWZez2jtKgst+7x0x8EM5NnqQivGXU4woZukC7FQKAuXR/I:Xdjyjg2z2bXXwoZukC7FQKAuXRgcJIv

C:\588bce7c90097ed212\2070\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\2070\W=x1rFlgmb9WOmNXe8KPlQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	4.12 KB
MD5	f3326387f1d8c4c0ba129687acf01a17
SHA1	f613de3c527c3da3cb5041a5f288fd8aa5afe238
SHA256	86336f2f1a26f0bb717c9fc71594a24b35806af648be6c51846d4fa1d7f06e69
SSDeep	96:wW1mDj6rfkrIwx0LlHKe1rvGA9mE0Eyh+iH/OMpiKwIurpEpiT0T8x8rpEpiTfHK:joj6rcrIwclqe1ruAYEBm+imOvurerVq

C:\588bce7c90097ed212\2070\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	78.37 KB
MD5	cc51177823e64646a21a69218f0e152d
SHA1	a306407bf221f06cb7f5784ceb6851325bd51423
SHA256	8f2acd0174d59f1be54b12d1e30d6303b51e8d9e40d42d7b6bc43d9960f57bb9
SSDeep	384:4wdLPpRgMjLeUueUA48DYeUOqeUd/iboeuXWpFPYOAjw/BdgysR0AmhRod30J0qy:fenekeCeRuXWpFxgJMh230JMaW7

C:\588bce7c90097ed212\2070\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\2070\P=aYqIgfEBmwT=MAKmZQUYn6iG5ijVmXgRsTIR9uonSZkA.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	78.59 KB
MD5	b7196609b9b775294e19704b3c338990
SHA1	e15ddaac169d068d658cbb652bba491f977ce69f
SHA256	d9d627ad05e6776e4c01787ec7e1d8944c17ba4e0067329f462dfb4d8b411e9c
SSDeep	384:MutBPpRgMjLeUueUA48DYeUOqeUd/iboeuXWpFPYOAjw/BdB4jsR0AmhRod30J0o:N1enekeCeRuXWpFxeoMh230JMaW0

C:\588bce7c90097ed212\3076\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\3076\0s92NwdTiFlGhQyyEtdorQ.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	6.36 KB
MD5	d203b4d9d448e1979cf6e8b09b23ba0b
SHA1	27a3df2c4cf0b09ce688a6bed629adf0094b3115
SHA256	08afef8b81a1da71c9e3051cce3f46cb281ada3c5d8e35cc78f628eaa504023e
SSDeep	96:5u8Rx+f+/DdczZD41raZM4HbegdxqKZJQ1/FSMZJujgzc/MpD1JzIfcHvR2k0cv2:cnf+LdS2NBZMjOfro2n6CA5

C:\588bce7c90097ed212\1028\LocalizedData.xml

Modified File

Text

Not Queried

Also Known As	C:\588bce7c90097ed212\3076\LocalizedData.xml (Modified File)
Mime Type	text/xml
File Size	59.39 KB
MD5	0eb3da5a02f6775ee902c628b0c550f9
SHA1	17c7c99dfa0ae6861f9b7fa1a982b3a367505ab2
SHA256	4786ed43f93a25096b14683710a858bfe9f2ec63fbfb70437a4aeb99a38289a5
SSDeep	384:4wCGbCWB6rFk+2jP8lxtrzh1hsPN7ODPnPgQy50sJCXnofDPiC:tbCWYFrewYTJCy

C:\588bce7c90097ed212\3076\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\3076\A6J7s3p1u3BGBe0MhmCJ+rgDT3=MCrcIF5RYFfMEjdqoTk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	59.60 KB
MD5	8253818a5de32a1468b516ca3b8f0279
SHA1	e17c99455f0d4ae50bd502a70e85cbf744453879
SHA256	7912d8125be030921bade72d89a30d2ec130310847322a2442da40788e0070cd
SSDeep	384:/bwYGbCWB6rFk+2jP8lxtrzh1hsPN7ODPnPgQy50sJCXnofDPiN:/MbCWYFrewYTJC9

C:\588bce7c90097ed212\3082\eula.rtf

Modified File

Text

Not Queried

Mime Type	text/rtf
File Size	3.00 KB
MD5	35cf5b780d0d9dfd8eb2486a4201c411
SHA1	059507877a8f25c00232a25a76c847cb94e76f3c
SHA256	50908be0d39a1fb4d9e2dcd623120c04ea71826f8e7cc8c11506cde0cc1044b3
SSDeep	48:MTN3nfZQZXRFOTfyTZQDeK9xxMFcJ55HsUXHNX/RgMzsrMpDgLmqIy3W0b8EwKgq:MTBfZQZhoTfyTZQDeQxpDHsOH1ZvoMp4

RTF Information

Document Content Snippet

TRMINOS DE LICENCIA COMPLEMENTARIOS DEL SOFTWARE DE MICROSOFT MICROSOFT .NET FRAMEWORK 4 PARA EL SISTEMA OPERATIVO MICROSOFT WINDOWS MICROSOFT .NET FRAMEWORK 4 CLIENT PROFILE PARA EL SISTEMA OPERATIVO MICROSOFT WINDOWS Y PAQUETES DE IDIOMA ASSOCIADOS Microsoft Corporation (o, en funcin del lugar en el que resida, una de sus filiales) le concede la licencia para este complemento. Si obtiene la licencia para utilizar el sistema operativo Microsoft Windows (al que se aplica este suplemento), en adelante el "software", podr usar este suplemento. No puede usarlo si no dispone de licencia para el software. Puede utilizar una copia de este complemento con cada copia licenciada vlida del software. Los siguientes trminos de licencia describen los trminos de uso adicionales para este complemento. Dichos trminos y los trminos de licencia para el software se aplicarn al uso que haga del complemento. En caso de conflicto, prevalecern los presentes trminos de licencia complementarios. El uso d ...

C:\588bce7c90097ed212\3082\eula.rtf

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\3082\IxZIbBUYAOCNLr+QnPbd+4.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	3.19 KB
MD5	70902244d20f44a7012755957885cf90
SHA1	f20139b9d80b99b0a590b800d5cecdec0ef296de
SHA256	1da338383e22ededb0b1a9e9e7855af7372e8b5e906dcae184c50ec27b5fe106
SSDeep	96:dfOF2bPaM4MUnbiFSDHsOH1ZvoMpDYmILwJUyBUMPe/:pNPLU2Fb21iOPINy+h

C:\588bce7c90097ed212\3082\LocalizedData.xml

Modified File

Text

Not Queried

Mime Type	text/xml
File Size	78.12 KB
MD5	992f740170e4f3dbdf4e2003675b2fce
SHA1	0df2c3378732e9c57fc7d4354746b808a78cb91a
SHA256	4fb1cdd2ead3cd3959d41c90094f66f0c3f00ee8592101cddd1f1176706cb29d
SSDeep	1536:Xo/yYrDKRqvf+ffl0VMf/mfL94T+7j2JoiZh:Xo/yYrDKRqvf+feVMf/mfL94T+7j2Jrh

C:\588bce7c90097ed212\3082\LocalizedData.xml

Modified File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\3082\tGdmHnjocwBYGlVQclZdLWU36UcQSVEt5QXiwy+VG+t5pk.french101 (Dropped File)
Mime Type	application/octet-stream
File Size	78.33 KB
MD5	a612a6a6f789ff382bb0103cfeb5bfc4
SHA1	f0f4c3687bb70f782568aa362aa2e7e252bd6f09
SHA256	4a3852ac742bec845da8e7095462020dd42fe7e9b95a47254f84b786bc168864
SSDeep	1536:Vm/yYrDKRqvf+ffl0VMf/mfL94v+7j2JoiZV:Vm/yYrDKRqvf+feVMf/mfL94v+7j2JrV

C:\588bce7c90097ed212\Client\Parameterinfo.xml

Modified File

Text

Not Queried

Also Known As	C:\588bce7c90097ed212\Client\sJJEll8DFqbCbJstgQJNyRmV77d5+Jq5KazGbGKhtgbZeA.french101 (Dropped File)
Mime Type	text/xml
File Size	197.07 KB
MD5	e78c550c69a1da5d8791abdabbf19bf8
SHA1	ee2118bdb7ae85f097bd99f878a2ac02f447609c
SHA256	8f220eee19ac590eeaeeb28bf5728115056cc20414fab51f146c3cdd6163ba00
SSDeep	384:wYQH0RbAGiYNVrkT+8TodTBltw11VTvcL1wCiUj78leRqmH9Hej2iXWKMNGIe9b7:w2RbYoVQTLTQTDFdPknZ13GpPcbrIA

C:\588bce7c90097ed212\Client\UiInfo.xml

Modified File

Text

Not Queried

Also Known As	C:\588bce7c90097ed212\Client\Z7RRkRFcQBdBGYeTXwVNTZas7ss.french101 (Dropped File)
Mime Type	text/xml
File Size	38.13 KB
MD5	77fed17e524a4644b0109007dfafd2ad
SHA1	362f0a885023910d953ddb6b2f0bc6a269840f24
SHA256	2bf06783a3b625834da562a7d3483ca6156b13be7648a3c7cc79bd5a2c1d0089
SSDeep	768:24URyd5vssgP7ZgZ/vSguJQvFQXvDINJh6F8hZkV1GO0N0phUl9eu+dODOOODOtB:24URyd5vsTPuZXQYQLIN/6F8hZkV1GOC

C:\588bce7c90097ed212\Extended\Parameterinfo.xml

Modified File

Text

Not Queried

Also Known As	C:\588bce7c90097ed212\Extended\uW0H=zaVc7icr8isatIa4LLVQxg8N1o=dlOzhBkxfVg0DA.french101 (Dropped File)
Mime Type	text/xml
File Size	91.13 KB
MD5	0efed6afdbc1026ee9b0f44638d93512
SHA1	a1c508475ea63a4cfc6a9952cd2ecfb0b5c6e10e
SHA256	a1e6ec40832623603e3a014e915af701dd49925a6a4a34256bf9215da2d167cb
SSDeep	384:tYDmmqzP4JUaGMLiqedW0XeeUnG3GPcbrKFA:tRTaBG2PcbrIA

C:\588bce7c90097ed212\Extended\UiInfo.xml

Modified File

Text

Not Queried

Also Known As	C:\588bce7c90097ed212\Extended\H6qGD01FFDSP1dc=PuW9qADZ4kk.french101 (Dropped File)
Mime Type	text/xml
File Size	38.14 KB
MD5	7ed283ef7f13935d97594d99e3c9d315
SHA1	fdf7515937d17c8f3ece54e8169ca0a5c7ab3587
SHA256	e35546df04a3ce028c93913185e6b0b69a231e3ab44bb3da0ebd2f73e23ef49e
SSDeep	768:24URsd5vssgP7ZgZ/vSguJQvFQXvDINJh6Fuh3kr1UO0NWpPUb9cu+dOtOcOdOjP:24URsd5vsTPuZXQYQLIN/6Fuh3kr1UOs

C:\588bce7c90097ed212\Graphics\Print.ico

Modified File

Image

Not Queried

Also Known As	C:\588bce7c90097ed212\Graphics\0QxZJdnVFnYQqQKDAOVtx8Ua.french101 (Dropped File)
Mime Type	image/x-icon
File Size	1.12 KB
MD5	3c55ad61fc2fc6dca01a6f7ea79ce489
SHA1	73042adc27bc7342020cff09122c19acf7e4baa7
SHA256	01faca45a590b1e8d0fb658e9b6ce8284ac3d09627cee55ee8fa1f8f6646b72d
SSDeep	24:dOjNyw2aSGZHJi4U7Wf0mDX+QF7s/AemFAM:MjNyw/0NW9DOp/ANZ

C:\588bce7c90097ed212\Graphics\Rotate1.ico

Modified File

Image

Not Queried

Also Known As	C:\588bce7c90097ed212\Graphics\xIH7u2S==HngjYvKwL4AyNR4Mj46kk.french101 (Dropped File)
Mime Type	image/x-icon
File Size	0.87 KB
MD5	4c0f48d068d8754c22b8b6799ff3ba9c
SHA1	173ecb31f7b2c236131e92584923735fa2553e3f
SHA256	0809aa7e6538500e40c9cbd64eb9a8f6782f3ae2e2814d9e071534a5bb136f7b
SSDeep	6:kRKqNllGuv/ll2dL/rK//dlQt0tlWMlMN8Fq/wbD4tNZDlNc367YCm6p+WvtjlpO:pIGOmDAQt8n+uNbctNZ5w6AsXjKHRp5r

C:\588bce7c90097ed212\Graphics\Rotate2.ico

Modified File

Image

Not Queried

Also Known As	C:\588bce7c90097ed212\Graphics\ADSxsQxhSkGC59uQuRyt6TmPGiGZMA.french101 (Dropped File)
Mime Type	image/x-icon
File Size	0.87 KB
MD5	78c18e7a58cb1a1692870c3c132a71e0
SHA1	cc5d1ea855fb5c45e2b61f9800f172ebc6d222ff
SHA256	e21343272a69b4ed9d50bba5121fc441b549e6cd36ac8a628f78accc23b0f45d
SSDeep	12:pmZX5+9wQaxWbwW3h/7eHzemn0iLHRp5r:Md5EaxWbh/CntX

C:\588bce7c90097ed212\Graphics\Rotate3.ico

Modified File

Image

Not Queried

Also Known As	C:\588bce7c90097ed212\Graphics\ePSyCTX57WSoK3=HeZUrKjOX6DdJOQ.french101 (Dropped File)
Mime Type	image/x-icon
File Size	0.87 KB
MD5	9c0664913632a50325be18586a8a4bcc
SHA1	9971f9cc8af834ad433ff95929db841d13cc61a0
SHA256	af71e083aaceb644dcc57e4e72246d549253fd7ec50e9e81f94b3a078bc5b4f5
SSDeep	12:pPrMIMxPWk3AyORrabBQ+gra2/MXWM4xfQHRp5r:1gxPbXlBQ+gr1ffOX

C:\588bce7c90097ed212\Graphics\Rotate4.ico

Modified File

Image

Not Queried

Also Known As	C:\588bce7c90097ed212\Graphics\gmzlW8+rVmTumEmu69VorzDBCy=3hk.french101 (Dropped File)
Mime Type	image/x-icon
File Size	0.87 KB
MD5	105e5a07e1cdf31256fe6b3271c26fb3
SHA1	5d0593f744de6e0a1d0a8d58b45a0848636a1c64
SHA256	689b06d881652311c2f2addf168c3f8bee9afe91a74f22357623f595ef6560d3
SSDeep	6:kRK///FleTxml+SzNaoT9Q0/lHOmMdrYln8OUo/XRWl2XOXFBYpqnHp/p5r:p///FPwxUrMunUofRReFNHRp5r

C:\588bce7c90097ed212\Graphics\Rotate5.ico

Modified File

Image

Not Queried

Also Known As	C:\588bce7c90097ed212\Graphics\6VLprcDolr9osRAl3k41+++JR+gpr4.french101 (Dropped File)
Mime Type	image/x-icon
File Size	0.87 KB
MD5	1983ebef1d561ce4adc05ad9f1577f05
SHA1	d47417207020bf7dec0847f316e38876d55a4697
SHA256	443c81f478bf7a5000751e744ea2e809a4383df0ef91a1d56d93b17846c18157
SSDeep	6:kRKi+Blqkl/QThulVDYa5a//ItEl/aotzauakg//5aM1lkl05Kaag2/JqnHp/p5r:pXBHehqSayIylrtBg/bk4AgzHRp5r

C:\588bce7c90097ed212\Graphics\Rotate6.ico

Modified File

Image

Not Queried

Also Known As	C:\588bce7c90097ed212\Graphics\tUmrc1FvD9+DpEY+cO86bKM5XW0rO4.french101 (Dropped File)
Mime Type	image/x-icon
File Size	0.87 KB
MD5	9ef318f86fe4bbe27a4cc84a5fd8234a
SHA1	215520143492487a0d84390668319b5f2557794d
SHA256	8abdfab4a7a90eb1f48619ad4cd477c87049c279e065a1c713faf6015ddb243e
SSDeep	12:pjs+/hlRwx5REHevtOkslTaGWOpRFkpRHkCHRp5r:tZ/u+HeilBh/F+RdX

C:\588bce7c90097ed212\Graphics\Rotate7.ico

Modified File

Image

Not Queried

Also Known As	C:\588bce7c90097ed212\Graphics\N0q3h2Dvx=iDVP0SostCs5KpOCUId4.french101 (Dropped File)
Mime Type	image/x-icon
File Size	0.87 KB
MD5	f968996c0cdde40381dcdbf6c7dc730b
SHA1	f193f2e12ceb978c9a9258d578cbef54ec16ce21
SHA256	579bf3ae80cbcd918cf26849cb67dd826fd74ba8ff347ef54698cc3e368fea45
SSDeep	6:kRKIekllisUriJ2IP+eX8iDml8mS8+hlxllwqlllkg2klHYdpqnHp/p5r:p8os0iieX8iNVHX//x2sHYdoHRp5r

C:\я

Dropped File

Stream

Not Queried

Also Known As	C:\588bce7c90097ed212\я (Dropped File) C:\588bce7c90097ed212\1025\я (Dropped File) C:\588bce7c90097ed212\1028\я (Dropped File) C:\588bce7c90097ed212\1029\я (Dropped File) C:\588bce7c90097ed212\1030\я (Dropped File) C:\588bce7c90097ed212\1031\я (Dropped File) C:\588bce7c90097ed212\1032\я (Dropped File) C:\588bce7c90097ed212\1033\я (Dropped File) C:\588bce7c90097ed212\1035\я (Dropped File) C:\588bce7c90097ed212\1036\я (Dropped File) C:\588bce7c90097ed212\1037\я (Dropped File) C:\588bce7c90097ed212\1038\я (Dropped File) C:\588bce7c90097ed212\1040\я (Dropped File) C:\588bce7c90097ed212\1041\я (Dropped File) C:\588bce7c90097ed212\1042\я (Dropped File) C:\588bce7c90097ed212\1043\я (Dropped File) C:\588bce7c90097ed212\1044\я (Dropped File) C:\588bce7c90097ed212\1045\я (Dropped File) C:\588bce7c90097ed212\1046\я (Dropped File) C:\588bce7c90097ed212\1049\я (Dropped File) C:\588bce7c90097ed212\1053\я (Dropped File) C:\588bce7c90097ed212\1055\я (Dropped File) C:\588bce7c90097ed212\2052\я (Dropped File) C:\588bce7c90097ed212\2070\я (Dropped File) C:\588bce7c90097ed212\3076\я (Dropped File) C:\588bce7c90097ed212\3082\я (Dropped File) C:\588bce7c90097ed212\Client\я (Dropped File) C:\588bce7c90097ed212\Extended\я (Dropped File) C:\588bce7c90097ed212\Graphics\я (Dropped File)
Mime Type	application/octet-stream
File Size	0.00 KB
MD5	93b885adfe0da089cdf634904fd59f71
SHA1	5ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA256	6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SSDeep	3::

C:\HOW TO RECOVER ENCRYPTED FILES.TXT

Dropped File

Text

Not Queried

Also Known As	C:\588bce7c90097ed212\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1025\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1028\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1029\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1030\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1031\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1032\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1033\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1035\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1036\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1037\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1038\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1040\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1041\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1042\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1043\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1044\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1045\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1046\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1049\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1053\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\1055\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\2052\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\2070\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\3076\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\3082\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\Client\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\Extended\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File) C:\588bce7c90097ed212\Graphics\HOW TO RECOVER ENCRYPTED FILES.TXT (Dropped File)
Mime Type	text/plain
File Size	2.12 KB
MD5	c675b1299d41b7a0c9be2bf3bf25593f
SHA1	df06fcfce760d1b3dc1560037ff431c8fd0fdca1
SHA256	89d687d212470fd7e7719fcc3a7a3b18b9c3a3457d13bd2efa98bbb5b39640b7
SSDeep	48:mTDz0V3N0w92cAtwlAeW2aEMhD9naRryz4/p/c3wDoN7m:6DoVyV0Rab9na84/NgXNm

ab88262a524a516015991bf56badd99d49ad648fb9ef6ebb1b0c2232d96c29d7

Downloaded File

Stream

Not Queried

Parent File	analysis.pcap
Mime Type	application/octet-stream
File Size	1.47 KB
MD5	be4cdd54a4e7ef45db95f9d3fdaa71a4
SHA1	c642aa99f879fa4c55c711f4bb94971209f3d4b9
SHA256	ab88262a524a516015991bf56badd99d49ad648fb9ef6ebb1b0c2232d96c29d7
SSDeep	24:WG/ES1bTSTdpvOcnsDuUCG7yQj01oAho/0p6ruXfxBcxtBehU:WG/5tSTBnsaUDj0No/0IujQP

ebf3e7290b8fd1e5509caa69335251f22b61baf3f9ff87b4e8544f3c1fea279d

Downloaded File

Unknown

Not Queried

Parent File	analysis.pcap
Mime Type	application/vnd.ms-cab-compressed
File Size	7.61 KB
MD5	fb60e1afe48764e6bf78719c07813d32
SHA1	a1dc74ef8495c9a1489dd937659b5c2875027e16
SHA256	ebf3e7290b8fd1e5509caa69335251f22b61baf3f9ff87b4e8544f3c1fea279d
SSDeep	192:CPTIWKvNnUBBBL05O/b0evl2G6AXK+KMlYX82:CbevNUBDLlz0eN2dAXlKH

WHOIS Domain Information

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Before

After

Screenshot

Remarks (1/1)

Remarks

There are no files for this filter

There are no files in this analysis

WHOIS Domain Information

Before

After