azov | 650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e

Resubmissions

16-05-2023 06:36

230516-hc5g7sab71 10

16-05-2023 06:33

230516-hbekdsab7y 10

16-05-2023 03:56

230516-ehfjgsbd38 10

Analysis

max time kernel
149s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
16-05-2023 03:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7129291FC3D97377200F8A24AD06930A.exe
Size

32KB
MD5

7129291fc3d97377200f8a24ad06930a
SHA1

3f858d2837529e6c973ffa7c26c643e9748e7282
SHA256

650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e
SHA512

6bd4537a79f839c2964a814eed2fd5c217a969632e267afbe028b04a91a410abd594fb45bf1cba954f8be71e6041a923e932994754fcd46cc71a0bbaf4a932a1
SSDEEP

384:s+ImkKRjvD/XlXPRPNTEUZytgSisYuaDhcWNDkSIvrfPxLCk9Hf/z:WKRjvTXlXPRNTRZ6hisYugcXjfNCkl

Score

10^/10

azov persistence ransomware spyware stealer wiper

Malware Config

Signatures

Azov
A wiper seeking only damage, first seen in 2022.
ransomware wiper azov

Modifies extensions of user files 5 IoCs

Ransomware generally changes the extension on encrypted files.

ransomware

Processes:

7129291FC3D97377200F8A24AD06930A.exe

description	ioc	process
File renamed	C:\Users\Admin\Pictures\RedoReset.tiff => C:\Users\Admin\Pictures\RedoReset.tiff.azov	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Users\Admin\Pictures\TestApprove.tiff	7129291FC3D97377200F8A24AD06930A.exe
File renamed	C:\Users\Admin\Pictures\TestApprove.tiff => C:\Users\Admin\Pictures\TestApprove.tiff.azov	7129291FC3D97377200F8A24AD06930A.exe
File renamed	C:\Users\Admin\Pictures\DebugGroup.raw => C:\Users\Admin\Pictures\DebugGroup.raw.azov	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Users\Admin\Pictures\RedoReset.tiff	7129291FC3D97377200F8A24AD06930A.exe

Drops startup file 1 IoCs

Processes:

7129291FC3D97377200F8A24AD06930A.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials in Files
T1081

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1060

Modify Registry

T1112

Processes:

7129291FC3D97377200F8A24AD06930A.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run	7129291FC3D97377200F8A24AD06930A.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bandera = "C:\\ProgramData\\rdpclient.exe"	7129291FC3D97377200F8A24AD06930A.exe

Enumerates connected drives 3 TTPs 24 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

7129291FC3D97377200F8A24AD06930A.exe

description	ioc	process
File opened (read-only)	\??\I:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\P:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\R:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\S:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\T:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\Z:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\K:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\M:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\W:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\A:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\F:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\G:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\H:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\V:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\Y:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\Q:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\U:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\B:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\E:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\J:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\L:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\N:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\O:	7129291FC3D97377200F8A24AD06930A.exe
File opened (read-only)	\??\X:	7129291FC3D97377200F8A24AD06930A.exe

Drops file in Program Files directory 64 IoCs

Processes:

7129291FC3D97377200F8A24AD06930A.exe

description	ioc	process
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\es-ES\calendar.html	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\BL00390_.WMF	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02451_.WMF	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Biscay.css	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\de-DE\js\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\bin\derby_common.bat	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ro\LC_MESSAGES\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\es-ES\css\calendar.css	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\images\button_right_mouseover.png	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\TypeSupport\Unicode\Mappings\win\CP1251.TXT	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00306_.WMF	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\VisioCustom.propdesc	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\1033\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.ssl.feature_1.0.0.v20140827-1444\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Anchorage	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\fonts\LucidaBrightDemiBold.ttf	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\config\Modules\com-sun-tools-visualvm-jmx.xml	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\ja-JP\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\fr-FR\gadget.xml	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0101980.WMF	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\bg_Casual.gif	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\7-Zip\Lang\fr.txt	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\da-DK\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Rome	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\meta_engine\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\MediaCenter.Gadget\de-DE\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00578_.WMF	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18232_.WMF	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\BRCHUR98.POC	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files\Common Files\Microsoft Shared\OFFICE14\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\security\trusted.libraries	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0386270.JPG	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0387337.JPG	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00223_.WMF	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files (x86)\Windows Sidebar\en-US\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\7-Zip\Lang\bn.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\fr-FR\css\cpu.css	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.repository_2.3.0.v20131211-1531.jar	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ms\LC_MESSAGES\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files\VideoLAN\VLC\skins\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\ACCSBAR.POC	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\bin\setEmbeddedCP	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Indian\Reunion	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files (x86)\Mozilla Maintenance Service\logs\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-dialogs_ja.jar	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00833_.WMF	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00004_.GIF	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0297185.WMF	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\it-IT\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Internet Explorer\SIGNUP\install.ins	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Rio_Gallegos	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Calendar.Gadget\ja-JP\css\calendar.css	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\de-DE\js\settings.js	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\images\next_down.png	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0195254.WMF	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Technic.xml	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveForms5\FormsStyles\Premium.css	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\POWERPNT_COL.HXC	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBFTSCM\SCHEME20.CSS	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\es-ES\css\localizedSettings.css	7129291FC3D97377200F8A24AD06930A.exe
File created	C:\Program Files\Common Files\System\Ole DB\ja-JP\RESTORE_FILES.txt	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH01562U.BMP	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0309902.WMF	7129291FC3D97377200F8A24AD06930A.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02441_.WMF	7129291FC3D97377200F8A24AD06930A.exe

C:\Users\Admin\AppData\Local\Temp\7129291FC3D97377200F8A24AD06930A.exe
"C:\Users\Admin\AppData\Local\Temp\7129291FC3D97377200F8A24AD06930A.exe"
1⤵
- Modifies extensions of user files
- Drops startup file
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
PID:2004

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials in Files

T1081

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe

Filesize
454KB

MD5
b63c17e72fdfbed73fd97bd8627138d0

SHA1
a768e6c256b38d12e3eed9cacdda7eb0a7b00384

SHA256
079039b8e257d3d97d9ed170da35e2bb4cf7616bebc30e5ad7a22c8119f5d015

SHA512
c842f1ff18ee739482b3d8701862f89fa4a48f51c7acc77b8ea2d86a51c8ee5ccfb8fa880171fb143f12f1a4278731ed0c598e5d830f4765ac3e82646dd08223

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21296_.GIF

Filesize
666B

MD5
57e4f9bb9bfc8e662d665391cd313d17

SHA1
1932fbc73759c495f86e8a4dbf661c714b2931e0

SHA256
8ad5abc3729cc92a782bf52c2ab5c981bb28e0dfd41692b3e870ffb0e5450a62

SHA512
7bc527b6b5edf1a9d93e63058932ca3788cc16c4167272179942d71df9bc8fbf702de5e186fc09caa946a18914125bc2d507852b2b9087c6579eb7079d3c0317

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21298_.GIF

Filesize
666B

MD5
19c4e09893b4dfb7509c885577bd9393

SHA1
ab13ce04c1c06ad527f36659cef43bba7cb8b90b

SHA256
a7942fddaccc7521e343417a51c3d295218f9bfaad9db6943d67b5708d45827e

SHA512
4abfd90ab73359e6107cdf1d2d17365d946bf245827f6016469cbef60cc82cc7a40d34f5f3b2830670b5b70648a1a0da90272f4f58afdfdaf4a19c4cd0b6d5b4

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21300_.GIF

Filesize
666B

MD5
4928ef7898e511ad02b8bb4a856b12c1

SHA1
87f8c4f8aa45588b717b94d235b9ee16a11e3f9d

SHA256
3f4a30afffb23156063fc02da267be44d68e682225d593d4c6f604ed07080d69

SHA512
d09b7be4c4ee342080e8a335a7e8249744d4d1530146ab1ceb46cb5a837234545c5c43a20fb9e26e3b751993bdb095c5ef20213dd7dfda6722a1d930be0616c1

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21301_.GIF

Filesize
666B

MD5
6ee5137e0011eed0f332cac4bc7a6302

SHA1
6d830d58fc449b4d3ee6b1b5d316c56a904c0446

SHA256
b33e9d48a6095c0a3ea35988c39f6f66da2d447742983ffe8dc78f950ba24ee2

SHA512
3d9ec4f179b4fe21c0d7160ddd8e9d8f30e3df1abafa95811568566ce8ae624fc0a24142f8edb3440f363b4262ef7faefc497c55411c937d67e19806dded37cd

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21302_.GIF

Filesize
666B

MD5
4705b47859cfc5f4f447e40612f1fa9a

SHA1
8e678bbdc6b704a2e76e970b45cd3c10f326eb46

SHA256
6c3ae1abd9dffcd35ab1585f008a3c0c60671f0e282d7cb8452d1f5d10b6751b

SHA512
c44e5dc4fa36852b3918843384906be1985a972c8f1191881700c265f2f732b9f2595f348dd6bc7fe655250d130998257cb1359a3c5409eb49f807a54679a9f5

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21306_.GIF

Filesize
666B

MD5
855eeee736b73b9d883b36cac65a3847

SHA1
14a4b42fc5e048b78d37c23b714cfece6c154075

SHA256
2a46bce5f956997f8c2cf111c9ffb5f3cc95be569ce919f0055ead4897bce218

SHA512
abfb0709b956189cf3c2153acd16938944d8237a10c19e1845f37f28cc409c9094734fdbe16ed9fddff1fe402a2c2c385420cbe6bc11f631ee1c83bd4f850ebf

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21312_.GIF

Filesize
666B

MD5
fa05b73b6ed1e4be179617d340d322e3

SHA1
7f64f1d3099617460d4b0c8369d4ac3c7d376dee

SHA256
029ce90cd771c890237c3c3d2a360c3bcbac84c3eb5cc5e9a50e935ba8507af8

SHA512
3bcbf7470492a1243a7c30afbd116647b98bc01d3274107c1ee677b474b26ea8e674616e744b922e2f125df31faf851c78ba6f373afa1b623a0dcd891d04e7dc

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21314_.GIF

Filesize
666B

MD5
4b1af16ff299bb38e22668f6c27ca0bd

SHA1
a8ec39fe38ec34f04c0acf56f6f475bfaa7e8675

SHA256
2086f06b03677b8e5064ef3826b970c183d8543742616d02dbd4675a4891a675

SHA512
12ac25bd74860c3f2c53a353fb6470f4a79fb532a2ef3af100f0806cd1389a8c78060ebcb421b4bc6b56a865c2214fac8a666bed69ca85ca226eaccc3ac443af

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21316_.GIF

Filesize
666B

MD5
c4d0be625d370da5ac70a6ae7623737b

SHA1
d55258a6845f3aeec71b2ed334336de7258df716

SHA256
21d2114052fdd280b9ae90de2478fa50a9bade4c269f6a1979cc3e8801f7f2cf

SHA512
31e43780f14f9f62427c3d436ca61863e5353b649f2ffdd5147ad56c00a0058a45b75991ba231495a3939803b3b12f7845e92a9672af2188fd44c439a18786dc

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21329_.GIF

Filesize
666B

MD5
34080b08cfd1382a94dc91c69349ab1c

SHA1
366012134c27da82d5cba4c81dec04c233f799cd

SHA256
f7c784653f0c486e7c58dc29134a2a535793c4b3e33a1f6c16831aefd3e8ce20

SHA512
6d933226072accce11c0e6f6c18648616bddfe6a85bbe8ec328273e718e097f0f08c9f50c21a4c4691944242a81a4b847cfb7002c53b815dbe8d4c99e0a0c964

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21333_.GIF

Filesize
666B

MD5
973b398b5994dd7cb5597261c397639f

SHA1
dd877090a1c0d10c5379bda1a306e2a9b9348f93

SHA256
d458c0953bd842bb48d3583b8b24d93b218aef1853b5717994784fed6d213204

SHA512
c4a9478d067121dd10c23e602e0588707c293de6ffad82b4c31b866728bf423723f036203fe83c5e59d02c7cb88f2f1d7d63745cec65134de80e5bb7a99a9f1f

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21337_.GIF

Filesize
666B

MD5
6336ac1612e52f51bae8a5df88963ce6

SHA1
f52f250fd2c9760833e433579bf2ed41e853f44f

SHA256
0d8f3aec7b3a2f8d9b7ac63dfd5c3853e9b4f5384076561ef4e8f8d65ebb7798

SHA512
cc42b286c5dd25e913414d36070f1a87a6827e9b0065b07729fc093473c83fb0703bdfb3feefb8c19a970964628dbb8c359366ef6d91100e4a46cc1331075fa8

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21339_.GIF

Filesize
666B

MD5
66ed31284d67d6876cc98b26a5664386

SHA1
6ea41e435212141b33fde60bbcc392d80a598e13

SHA256
7281d27003d9d518d0a39245089eeb5e77dffa618d4a8e449f1e9bcd8cfabb81

SHA512
4e0f27ac615f65a25c109bb7ebc378c5bc899bb8cf3d15b9ee52d33f2680fd0fe3e136e9e32bd889e0ad840f0e8fd4e4c73611fdd3aa6a72f1967394d0aa7a1f

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21342_.GIF

Filesize
666B

MD5
50f7d761a69224f7f5710045ab8a29b5

SHA1
c44413f58987e0899b80edeb648e194ff53bc5bf

SHA256
068dd29bed597a468e210bb1cccce26c6e9384fcb4fa25bc9228f40fa55d066b

SHA512
65b3a29c2a032d3b646626862a36a84fa9929fbbf586f004450bb7840b33933d9a6fccd83058328aa893d9fd77d7b4cfb2161802be2608b3f8766122fb32bb17

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21343_.GIF

Filesize
666B

MD5
36621f1a240a2f749165086b75886e90

SHA1
0c6fac73a33ca7736a387242a78498949498a549

SHA256
c58d9d14d1da96958ef8bbcbc7da23bcf1cca49bc077e810f4ef410961222a1f

SHA512
45da8ff5e3ba1c1109c5b86f09d596b9f3b11665be7287a152b962d59f4afe2b484729c6c3db2d7ae95e9a4221dc76851eba8fec18d93a99d768b5da1fb1b314

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21344_.GIF

Filesize
666B

MD5
7fd515c19d722bff5ca12d2db0410da7

SHA1
d9fd7f227202356a7940ba8776d727f9bea9f2cf

SHA256
c70357e9c7733fc97b266d3eebe9ef5f3571cfe2d45c17d1b120fc25092c294f

SHA512
46325b9acaec1e6e06cb473678076f0129ce2a698d129d7c94ed51f0396760ec4d707119d628acb20fe60d3d9133b4d2ce7e159e5eef26035e9432ad4cdc1c05

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21364_.GIF

Filesize
666B

MD5
bc2315fd10bc6514c487e9dd78620aa3

SHA1
2140f14002b5482f0600e8db22978e945e3d1daa

SHA256
462cb72ac012040b47212f41eb41fcd25d446fc88bbca3a4d39bad8fe75636e8

SHA512
3ae44a2979c309e224b06ce8310c6f89fb57ec1947f452e838a490906acdb4a6ae7a9be5775f713c8462908f3b29675d08e07edc3bfe71838575cd9031ba418c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21365_.GIF

Filesize
666B

MD5
fd90ebe6492afa1099c89fdc3d610652

SHA1
8f17dff0abdc03f9041c48774de617688cd0e786

SHA256
0836432b6b1321f43d1e71b9f47205aa7af7785330771040ab3b621d03e4f156

SHA512
00008f6f271fe3e6912ce75e1c12ccecf8bdabf45172bf6e71d17626d80bce74beec20953d17f5bb2bd72ed262caf80dbfd9c9d4ce65ff2e0aead4b8e127de6d

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21366_.GIF

Filesize
666B

MD5
b2cd56fc649a62161aa483dca6ecd0fa

SHA1
287ff8ac7b2614b4c582b8e9f412f7a210a64c83

SHA256
d5b7b66c66fb4b000b5028312a07a7bf1895cb0ca4e2fa0eb702283ff85028e0

SHA512
ab95a382041972367d33adb7a169abb603ad931e4f85d1490a967165a827057229a5dc400815f8874b2b2682773b29d8e95b30468557e52984447e06b0eaf9ef

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21375_.GIF

Filesize
666B

MD5
5eed6c564fe9ac446d8943202b664194

SHA1
aa055a471818d80ad4643542b631d7943cd52c3e

SHA256
08edd1a4b5d4c5667f443bab2cfd69047a3a05647abb62449d4fdead290af529

SHA512
f2936c3af227355446c30e0e218dfcbc7584632c3b635176ea1771c14917176975ff82119351ad7a4981c8b24cbc3dcb3d66d1dc68a614f973292d5a0f58f98c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21376_.GIF

Filesize
666B

MD5
227dceefd973c07fc10cf108efc78c16

SHA1
deb3d3855be253ae6284cf057ba0a8388e03b06f

SHA256
e427aecc7044e84a154f979e2e53f614b5d9c00e30aeead377b20b84f903c3c1

SHA512
80c4aab0ca28a75d3788d9865cc680574f7837e142d4f2c14c7320b48fa2b0d3a1355dbd94a07b09c709890ee6737e7d98d9c24b44e8429d92f38ccd95e08c60

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21377_.GIF

Filesize
666B

MD5
73bd5e97659b5316ebed00599ca8757b

SHA1
ba7445895e5571f7068ba565680efe764ec8946f

SHA256
7296222fa4814fb2a88b35c33eee5dfd92a2bcf1693151f4054e119bd2fb8865

SHA512
32a7a6a0a104ae51d67099d086fe8549f22d84250375a29ba6a349d1375cfbb88f639f81938c153251a184d87b8e788dbae12ab292d9f6072f4612e626d59f1c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21398_.GIF

Filesize
666B

MD5
37ad79a2bcdf9c7f778ee8ef8334c939

SHA1
4f350d57807de37a99cf672da1fa0c8644d308bc

SHA256
2e2682c7c1c7dfae3feb61aeae6dbe0b85babb1b33537fcce61a8a8bfb85476e

SHA512
5ade31af00a42ded86e8737bd1c3e44c187089bc295854cfa362bf5c8dd02a0f148a8ffa58a0a2fd25b9fd49ef478ce2745f6e10378bac56144e568597efaec3

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21399_.GIF

Filesize
666B

MD5
cb8ea22d442c3df0f2bf7ae02c9d2094

SHA1
481ac4b2ed51aad09590b14dea9c8bab4e5b94b3

SHA256
4d97667f173485c64adc5bc71f7918839262eb1e94204ea33b1b9b2f52b2b44a

SHA512
b83cb4746d797bc01f8049d8977dae8e82a84659dd1c462cfac632ce76c9498e08ad99d3a2e6dcb3d14c8515e3f122774940c6cf4bf5b3af4f1cf897ad12fe1e

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21400_.GIF

Filesize
666B

MD5
6875ad629353dda1b5776d2985f181da

SHA1
5e3726ae1b2fb0abff1f6435db7455a7b384c935

SHA256
3816ee9fbd4572e1c0bbec41f7a6b90cc01e3cce0d7582e7d3c83b61ced457af

SHA512
b618a832432e6840daaf269ee3e9ab9eb6f1e242181f928c1cd7dbf0a7181a57bc4d9325f9c424de6de0109050c3db374a43530ad542f2618af86c4bd657e2f7

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21421_.GIF

Filesize
666B

MD5
a05e3696e4d8b6b938044a33559cd8c0

SHA1
85e672103103a195564802a45fa66b372ec1e17e

SHA256
fab1d00acb1aae93ce22f3c4b574a94e7e59fbf5763202009526ec9da053cca4

SHA512
0cb94e73320303c787ecf7b008ef0d1235f77706f30d43b0bd812f8cff228006e2da8a6e082606f906237c38bce17327acae4d17b381c89240db58bd643d4954

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21423_.GIF

Filesize
666B

MD5
25c757725d5b71fda9179fcad2d676d8

SHA1
01faf40295af5e5f6de96a5a4971dda28b1fb44f

SHA256
b7aede8f7c70c0c3130038f0a537dae408c95d852d9fb881f9996363dc23d9c5

SHA512
91b0cc696330a4e2938c6de4e44dc310c9ed689898cb11555e696650424432a3ca76b50bcb65cd469fe7f162fd6b6370b4cce91473ee3ac12cbb75041941bf6f

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21434_.GIF

Filesize
666B

MD5
ac26e87c4b1391e07722ed02285a88ae

SHA1
11dbe492ad86674ad7cbc9afeddc121eaa4b7380

SHA256
a9040414b6916e8e37985917143fae0040c4845571c63ed353dd355102cd3d4f

SHA512
ce2e024f6743024c9a858d913ab61b3ffb43793d2533b3856c75ae3d502e5158ef9f31a8b5d90e3aa256c51ac00b9fe962424909bce4fcb400c6f46d0f7c26c0

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21482_.GIF

Filesize
666B

MD5
4c80e76ba27398ef71968ee8aa95a243

SHA1
f5ac703787612068e04dab6a1542cbd975e7748a

SHA256
cea4cb527a66f66e68e1291db7fa9086e5fc997fae1ccdd90911e615b85d0de4

SHA512
6fc8b6e183ea230a2477881dbb7861904bed4cae852592d5154c7a93eae9f6892978dd557881cb44dacedad11c7235c6bef3327e3f000c1bf07e944c668450d9

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21504_.GIF

Filesize
666B

MD5
8b8dab4d022515366f201bd02044e804

SHA1
a7fda598fed0162159572b2f2b8bcdfcad03c184

SHA256
312763c7a06b10ba5e689639e80c3bb5bcbfd27a4a5dadbfb860addea8c56a31

SHA512
7a680e9b4b654d32cfb4425d3b7bce4cc3cb48056b6a035956ff8426ca3c7aabe7d6b2837f4d7c4a025712ffbfe95894c10aaff53593d387980d5cf137f2c1c2

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21505_.GIF

Filesize
666B

MD5
3886a83a0432801da2bad510381c2a75

SHA1
1f7e85fdb550af94a119798a5270d4009fcea1cb

SHA256
9171e213ef497ff15ce00f357623cb2a88c209e19f4ac0123746889e6f305bc5

SHA512
082e8529d417360a7e4b6e38b8a755cee743d7dcfae057735a28854a047a4252ae1f61ff658ffa5b932ec8920f7a1ac3ac2132158cf5b553d6caf1b2e13bad07

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21533_.GIF

Filesize
666B

MD5
ff3403df9c2f8d5780a394f887ee119f

SHA1
01c0bf87d85910be39631a078f34bc563ddca23b

SHA256
1dcfcf9a59a671c839298c7b6b2ebf6187c0071ed78d2b995832d35402054864

SHA512
0b352f1fd7695019a57198fc1dcb4b857eb1a97cee4d89079a41cd1fc9e9850532dd52ff0082c4cefe15b6b03a0bbd5f95f7d715370b695737e3f91f3acc613c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21535_.GIF

Filesize
666B

MD5
40ff778676c705d836be6511c77da1d0

SHA1
6eca23004a96c4ec754d8bd2b28f4b0ef3e8e4fc

SHA256
9aa8e14b9a69ba44f636310b36a7d9b1dbebd6b984ffccd8e66a90ddb1128eeb

SHA512
e14d978a8e21d91b7a4c5735cae817028aa50aa810afad6aae733eafb03cae4cd486fe406460e8d39cadca408be33206d41285e6e7387856d64d651df7858d5b

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115834.GIF

Filesize
666B

MD5
571cada8db4d66da01b32a7ad5e45f41

SHA1
ce8ff1731fb22fe533edb7611e707123ffc1947c

SHA256
9ca5ce3fc7a4c3fd15335106637a0325dff554b25c6d876e92222c2acabd65b3

SHA512
ae266ace90fd3411190563aef8f6398cfcad3228e3b328aa48ca305f153c7bb843374ece897e2be8c58ee5a315679fa88273727a13b2dacf6f806eb7f1e30bf2

Download Submit
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

Filesize
284KB

MD5
3a2e91db71582c43279bd823d1b54675

SHA1
1d2eafed55c423377fbbc545a4ba1e5fe11f2663

SHA256
3d4c398a4fa154257b1383a7d2f73fda3808f8564c661e5d7916013adebc3d02

SHA512
182e03f5f9a3e9be737863621318726ab83f07c0e1fa648471f009b4f17e99d2c7f90add72b27303041546ba3fcacb551c2b462e6f49c9d0e21a8a754b73a1b8

Download Submit
C:\Program Files\7-Zip\7z.exe

Filesize
567KB

MD5
e30157cc10449fcfffbe76c44788eaff

SHA1
5d5e03d9f380bc13d9451dcd87c27bb295b052c3

SHA256
007e68240f39f5056cab5b656f9b6faabba9bda545c2abaf054a302451ef8015

SHA512
d34b9da12bf2ad56e7294400ce84598c7a4ee4465985f3800842c4db6f0931916b518be6ff6ed44fa394abb6f124ee54112526538eab3ee3931e2d45b50f2c6e

Download Submit
C:\Program Files\7-Zip\7zFM.exe

Filesize
1007KB

MD5
453fc9d10457f9dda601959b03846039

SHA1
f010594ba2216c4a8063b1dd0b1bc9e536cae659

SHA256
d80215f7597578e879ae8655434522a78b8c4d6324ab1c7ffba5416dada69140

SHA512
cbced6aaab6216b450fd3f1620dbab32a21f8cf462d15e19d71132434e4d9d032971c3fdd2ae40e6c03414f612279d3db843ce06ed405f32cbc58bb71f336c8e

Download Submit
C:\Program Files\7-Zip\7zG.exe

Filesize
698KB

MD5
05a61b8c17382edd0821a64d746da306

SHA1
6e01b9f03acf131c52975f631347fa75a52703a5

SHA256
542f3c9d02183977c56f43f81eea147a6609c639ff5462a9e14ecb85c0409c88

SHA512
12e913ad839206dec54a8f1607ba097a32c272a117c089df6e67dddbd51575042407ac3bb00c4f6bd7d69d071d9e313e87a1bc4b259d4fa29953dd05b87a9cbb

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.exe

Filesize
4.5MB

MD5
627aeaec97e1634d610aecad4479d872

SHA1
c2ad81aea17de75e9597ac9881ecab4eb9578803

SHA256
afc00248f71304a637d8cea3fae68d38a9b1b0f39aa75d888e3fac1e5f202dcf

SHA512
c0e7d20588915d67bb3ce0f0d7bc015d5f62365d2c10696b323cec54674874f8c3aaf4760b1c37cfc5659054a53e8c21373358a2d42306cad7ff30660193cfa5

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe

Filesize
1.8MB

MD5
46e384fe7d3ce5001d2a7345595828b0

SHA1
a98def1533931d09173764607a6be9497e2d513c

SHA256
0bfce796fc4919a059758e024b0ae48309484d5c9a9e3360a606e277c47d5e36

SHA512
dd59cac0000547d775447b65dffdef11aa2d2dfda4e4fcbf71cbf5e77da5681fff8547aa1b011749ad31ef1cbc6c0aeeb86a4d9480644d0f40f4c70e985b0017

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

Filesize
1.8MB

MD5
ac3130c6247641fc65ee2453c7a5d931

SHA1
d465d0fde85c2f8c3b84b0401147fa17562c16ca

SHA256
3fcb88469eed29f27555106c097926bb34e9254ad621d9ecec5117886b5ec3d2

SHA512
62ad52541a92a537051b4c201a403b87aa52e7595ec7a79a56776be64af5b6f146d8e136a8dc62985b40521157916b71f4504f3a7efe6e3c509b8f9705697112

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\notification_helper.exe

Filesize
1.4MB

MD5
6cc4c3b9834c8719f352949ed0f5c1f1

SHA1
442521e237cff417ea2a102433d268d4e771ea49

SHA256
e850b9fb5634ce38906d36d710375ea58de1fbc0af460f4f908cfff4eb96690d

SHA512
bf17413a4bcf21aa40c2398a75e527a25178248b1a0e3c83f0171cac75775dbeabc3fbffcbe9f7dd619136f89a5f8573f67d05b1d553d8c16608340aaf2ce16d

Download Submit
C:\Program Files\Google\Chrome\Application\chrome.exe

Filesize
2.9MB

MD5
5e56f5abf5e943aade59e8917085b820

SHA1
55abdd25770be58915b54e364dfe796d5ae8235e

SHA256
d85d758d512dffab6ab1bd8bbc7fb6966dcafc203d236bf7588d36444309533f

SHA512
c420715e6db97b1cba884f37c7541c0ed8f9d88a74b71bb16d418859866cce60c49c058f2c4d493d189287a1b8c0f9d1f5a26803031c8ad9c8cc0ced00cc8c09

Download Submit
C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

Filesize
1.2MB

MD5
a18266a313b83db3d14c5546edc80605

SHA1
896899b31aa65e3ab16e3f044dd9bafada58dc46

SHA256
1297c9d8ef74ab2371b2d4bf9952807d404ebee0ff9edf0960f69e483e17842e

SHA512
d7cfe935be984aaa498e07b0335ea56b748bcd75d73cf58e53013984804b2b167ae20e93f1005fb32323659f4b538587b54ce8c09c05c2589a05bd568660fbf0

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\java.exe

Filesize
226KB

MD5
d8fdf6115e17f4fd4fd72a86e93f0275

SHA1
7f012b7babb5b9cef8762a0cc1132a5896627a33

SHA256
20eb4cc3ff5ed160932d2c02b206acf0e5da9bae57972f4120d4083441f382da

SHA512
393f4aa978774f2968833872a62e9e9d81885eb41a0e67cff733edc8bc1cd57291d2d1c0dfe51f876963ba4a8768d2edbf3f966f273b0631f776cef7b9c64c73

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\javaw.exe

Filesize
226KB

MD5
048a2fd38b3c85dbdb567915b7c28a1f

SHA1
af7150d20d1ba8921370f65779b2e353e7bea1ee

SHA256
2fafdceecf554fe9ab674df4272329d88aa8ffd6dd32adfb8bccae84f765e9a6

SHA512
8b9e26d461577a08059a18b06fe56e4a328e0472346d5b0b85fc2181d348c5f5daa64aa539297f88407df36fe7fcc89d99951174d101c9202310eb1edcdc476f

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\javaws.exe

Filesize
390KB

MD5
a1997495c2ce25a7f23be6c27baff760

SHA1
b49fe31f0b34a78e53d7e1f73c62fdeff46ae138

SHA256
3f739316e77d60e5661dbfffcbc027ffa748a36df919e5243e583c7cee3a86dd

SHA512
e0e213c467cecc426d6a417fab743a72014890afaffa4a5039ae55d5161e79a4fa8f92630bfa55ba781597782ef2fc8abe9a9a6c4f64fd127c0d6ce07acdb552

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\unpack200.exe

Filesize
338KB

MD5
6acef1ab940c8d039073294b34920ad2

SHA1
c8e6818271f02c2177f9b67981187a7cd93a6825

SHA256
199c2ba5dae18a33eca9575f191826d697eb4e69f17b0ade23ef84a835406b30

SHA512
f8fd4557ed1f1f73d06da46a53a6be535d18233cb53bfd8f136ed7bd707e56588de818a88e608f0c0512611da3c3e0afdb5421e9f607fd3ba38e3e77ad11849e

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.exe

Filesize
226KB

MD5
6f1ba43754c7e9f5a2467a57a2746866

SHA1
8a08306a31e6f45adb4a1a865699697a5612229f

SHA256
839c8ec8602b396a0a6de97536c18da820f8948b60a2a40d4add7696aad10aa5

SHA512
f7ae12a88e9805c51c89b8e01d41ae8241144b65b42fccce1f820111a3aca931433e1156a3ff2adf91dcf17bca9086e930c2b39848205c44e3889756a106b0f6

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaw.exe

Filesize
226KB

MD5
36259069fb3a384bd2da92ef6d4bcbb6

SHA1
dda1400b45a05e3a86086e911fa422ebf4ab879d

SHA256
1f7a3b5d0db86ede601fbfe9bff35f71199e04beeda75c54b901fee278c5d5df

SHA512
760a00c7bf142b420b3f39719cc4ea372547a8f92e4a0b16a2875ec29e3aa57ce9f504120f19cd60e62c40cdb35903eafeaf450f1be368880c0e32749a1ac551

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaws.exe

Filesize
390KB

MD5
1717f5de11f9fc1de938f2166b647766

SHA1
5f14f7904b9828cda3fb4147529557667c95a3fe

SHA256
6bd9d2104989c5b6710c91bbbc2400baab7dce682f4e80f7d95f4e6981d4ceb1

SHA512
54fbb73eeaa7090dd991ae0cb9d3267aff96576655f902f284e0e2fc82a42c15d331e5ed93aaa6eb2b38172637134a468406a289b67dc979dc2c0a4feca52928

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe

Filesize
147KB

MD5
b307ff98b196132d8abbb0a6851db91c

SHA1
ee068d2b797f17fc09a053ce2518dbe69135bf50

SHA256
86badf3090ddecbdcc950d51150613a135dd0403ba698f99969f8f9d24e6f100

SHA512
2ea90519dc851dfe00fe92a5ee86b3b206bb43c9cab6f3eb9ac3558e45739e6e1ead11d27b40063399baa2700faff70ef921fc67cf93096166c22bd3298fed2b

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssvagent.exe

Filesize
104KB

MD5
8a9fd0e91d61ad3a46a0c1e6027f768d

SHA1
712e289fbb77b46c4ebb38d146f390fc89fb3aae

SHA256
29b55fcf7a043a9db648fd7d206c6f5f6b037c9498105dd01dd1ab53622dc3f2

SHA512
8b832284b98e449daab6b56e494a79e9dd06638c274d942576a8030e6ff212a35beed49c641e295984e5c4cf8db0400902fc9f7b6bb6ef22ef627669eec2fbac

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack200.exe

Filesize
338KB

MD5
438f5b718115a577b00be1f3b9fb7590

SHA1
cf39e36224583098ce54c8e4e36ec8139d646318

SHA256
b8aea6dfcda76085e49e7894a8c1a173d5dbd1208e3016e6733f8f8755036215

SHA512
e693f489995f3c9a9771d6a79496a705432d7ff3e8254dd9e51e50e4609a1565eb903f3c84a8f28b01cee0d44f4dbdd3749892f96b2293f2b1ae21eb26d97bbd

Download Submit
C:\Program Files\Java\jre7\bin\java.exe

Filesize
226KB

MD5
c249e11d1d727f4f238409941cd1d0eb

SHA1
7479a32b3bf820cbd072bffc9a25e50c7f7d67d8

SHA256
64f804dda82eb13c948666e58a02b80b1fec735892f55c592481c0b3b49a04b1

SHA512
42cd575cf0bcd08b3cf311b2696264d91f7340d39308d818459e2648c14bbfb6ac4b80b3556255a52b5955e0c747a1eb513dd11ef18d4f9e6608effd8cab0336

Download Submit
C:\Program Files\Java\jre7\bin\javaw.exe

Filesize
226KB

MD5
00394be5f80a9fa480e0b621ea0931d8

SHA1
e8a1f32ce32cf7fd66cd65afe85c740e4a8ad112

SHA256
6d0cfc854f47f72b589939e968ee587c22702518adf893ede3717168d8bbde3a

SHA512
9bda2f40aec6688d5136d87e1e91450520986a33009230d16652e29b6559765c638e0c47582c9784302087ea88be6f82901d8f48ba4974d50210a031d71134e5

Download Submit
C:\Program Files\Java\jre7\bin\javaws.exe

Filesize
391KB

MD5
6fd8ce01e6a1403b2e665a205c0485b4

SHA1
8ee0a8ec4f00c2d7cc5dcfa88e5ae096416c0a56

SHA256
cee183bef0ad4a59640475bc6a37c4858b1535cd1e0d8bf7edb8611df6658b2e

SHA512
7985c75738d64563c8afd571eacb3233309d17d99d85799d576396478f7f94046c88e1712bf6d22c39e4043fe7191304a3153521b1cc44911da52ef7fac7a0b2

Download Submit
C:\Program Files\Java\jre7\bin\jp2launcher.exe

Filesize
147KB

MD5
3eeab08aa9a4b6af9bedd22bc0d9aa1f

SHA1
6300a0e0825bfba5128c5c101be3e9a2700fbef8

SHA256
e67938fc8d62b79b8eafacdb2ec38e143f3305b647fac3f48e074ad715a9b4ec

SHA512
e6c7d5da2b96aa220774b7ca24a31ff3743f89de1b3042a1763069a7d604a1ab6e04f3c27d1b9a00bd646a81cb72ff76a6262c8015ee78e385f7f9da9331c462

Download Submit
C:\Program Files\Java\jre7\bin\ssvagent.exe

Filesize
104KB

MD5
9f1290411b457a2e4bf44b2a3e96aafe

SHA1
1b758b43e1fa5170b155f48d1d545869fcd91187

SHA256
74986fe2dab88c7201e9c87ab20e317b49635398143a7a1746ad9704fc221fd2

SHA512
2493edb0b0f985a63de9cf55bf7cb8abc2dc26a05dde7878b53f522bde9e8b5f75ec65df867237b0e4b0e8784db012148f4d759b26aed840aaae31ce9ec937e8

Download Submit
C:\Program Files\Java\jre7\bin\unpack200.exe

Filesize
339KB

MD5
3615bed9d5e6dd4edf02ecc4d106a4c5

SHA1
80df0b396fa47e120e41f1f9f90bad14a29f08cd

SHA256
41abeff866a94636ba1f39793a8982bb5c53239160df3ad3bee5517842bf4db1

SHA512
3f14309a36bd46d07a6ca89d04420233024da2b2545c032cf61dbd08b1c74f443131048427780891b5125527569bc3194401a78b4af3f3012eacb93b423bf5f8

Download Submit
C:\Program Files\Microsoft Games\Chess\Chess.exe

Filesize
3.2MB

MD5
32b22c68803087ddf05b87c21c218cb1

SHA1
9985dcfab6dda6af68f449c415f10f75a591827d

SHA256
19b55714055f226d389f3554014d4ac0df8667faba8b40db4168945f90e7cf09

SHA512
4108e5c201f9c5c129ec51e438a249a7d9cc51fa57c50a768aa5229b5b06e0557f60e9d9c6e74e77757d27ab343a08cce988ca7554e09775ade61a6e7d2c3509

Download Submit
C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe

Filesize
969KB

MD5
1f48c7fd51e6f0be453a88396f7ac6db

SHA1
9409045410786ffcf4f8641399f592c946968a0e

SHA256
3c8e4e335cb1daba3240d0d2564d6d3b5457c5b87a10a3be9c7933a55d5f7f9b

SHA512
7965a8b9d3b0f425d62923a359fbca788f69c75435440d7acaaecc271fa0ed56135ebe8d1ca8a97fabe879e32449b8153b8ba6dd06f7cf9dbc84ef0c0ad9692d

Download Submit
C:\Program Files\Microsoft Games\Hearts\Hearts.exe

Filesize
788KB

MD5
35b02266d0203c0951ec360e15c151db

SHA1
6c6e18f08821cf8e5836d3809b1a137c452ab761

SHA256
0f1c373ab327034e60f6115e464b067ac7ea606bf4dc19699910dfbe4939a1b4

SHA512
0173cd3bc2d6cdbe6f820ec515cc4668eb0c82864313140548cdaec842a082a394ed0cde1c3709644d0fd7976b65d29c93a905425c9d438a7c7ac323cebdf8d2

Download Submit
C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe

Filesize
951KB

MD5
2a398634a3345a9851bd17654fd8405c

SHA1
7c48f9aeda982aa4807f7817a414152f04dab87b

SHA256
0ea7b8f1132707239e430313c47351bc7a429a3bc1f4b39a60bb889d58a67987

SHA512
7246d4fabaf3277d78f1c57b1beb6d7aa1c46fb81d340a707be78aa5f44736e327830e960b203315281c0fc85fe45122fda19821cc323ee17f26a987c73ea787

Download Submit
C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe

Filesize
1000KB

MD5
2b46a7dfd18118b480a89692030abb4f

SHA1
5da440b5e168bc360de3bf87121e1325776e1313

SHA256
5ce5838c419bc537c7346e620712fb1b600e0d456b3fdaf109f1cd522f92bf8a

SHA512
95d1c531ba96add32681d6489a9f4beee36978da091b626e87a9cb72712e2668befb762b9c68b6a9d69e3d00f5c332ba22d7b3789e278d2b82601a6fdd0d004e

Download Submit
C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe

Filesize
1.4MB

MD5
2533fced7635d9fa57d672d9b3d5cff4

SHA1
f17f7821510eb26f96135abedcdc3464fca9d221

SHA256
ed4c638304b283dbff12fde4bbccb063cea2ac378047460aa707f6d67fd59266

SHA512
f2c7c3909adf10c350e21389bae9045dabdd079764ef917f7ccaa50efc5cc342d84eea907e04a76d166b774a0e650f47a5446302f440f366c9f3159657aab8c5

Download Submit
C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe

Filesize
990KB

MD5
d7e70a2eb303f6741d7183436dda4c44

SHA1
2e16886d9e23b89123051d041deef58931c02127

SHA256
6b24774f3018c3ad2492222d01c53b8c813739243a729bb9706c4ddfb32f696a

SHA512
b3945935cecaa17ce6bc60d8bfe2e339b50068b6456eee79131aa9f2ed236e6a5ff2a5e9c28f6d37b6c62efbcd8bc5a00565706f6cee88ea669f3501f80ccdec

Download Submit
C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe

Filesize
991KB

MD5
ccbfbc8245497518f2ab529549709c0a

SHA1
a306d5712d8fa1b821a8a9531f347c8a5639f71e

SHA256
f6531c87141ac18f64c49212083543513ecb9fb3176b34705b1da7fce5820218

SHA512
f150595e53ede125c954dcce0325adcf9671541a81bc7d509ed1ed85569736bf75f0ff838d71404588c60750f60106656fc36f262969363983cb4ad03094d082

Download Submit
C:\Program Files\Mozilla Firefox\crashreporter.exe

Filesize
328KB

MD5
ca4693b4df5af1aa20daa1377cbb8ea8

SHA1
d136fb38d0509a60134574025ef2e420824343b9

SHA256
21a960a1c1fdedf67ccf0b8a77911c1ec1dd4f2baa51850646a2499f21091c09

SHA512
ce8f541981463a2f5da23ec79af31ab947fe981913d6df585d1fc17bd507efeed02b0521b3310254c9995742349940b7ccaa36d20aa938eb4b392d9d6b00b1e8

Download Submit
C:\Program Files\Mozilla Firefox\default-browser-agent.exe

Filesize
805KB

MD5
48aa1860397b347d71cc50b1e11a69eb

SHA1
1d24199baec2c5deb3f5847c2e16d89161843bfc

SHA256
520ba9660a2f21d75542909235a0ef7d81144ddef0609051b0c1e9162e8ae329

SHA512
a560a3b43d2a203369eef19aa26790ad4b2e2de8fad8a3da028a4325aa33620f64a0e2601fbd5f858e82aa127067ae27752a7b67cb70720253e3d2454b1f0696

Download Submit
C:\Program Files\Mozilla Firefox\firefox.exe

Filesize
774KB

MD5
09a22f20961f5ad9662239dc422573d3

SHA1
d7638bc5f5b720d3ade4de87aa4cd2e58b129d9f

SHA256
4cc0ca2939ddea107dfb6bf409b5bd00a0067af4ab307cf920e8815e95233ac5

SHA512
a1899b55d7b53359a5287ae48d193b3c1372489b6c9d6ef36faa00f31627ff081884dec53e706bef4a998c8519b9f73cc286afd0d2902de371c22016a36d4e07

Download Submit
C:\Program Files\Mozilla Firefox\maintenanceservice.exe

Filesize
284KB

MD5
6e184b10b80bccc1e71c68238023a284

SHA1
0fb15293aaa4086c259250ba54a035d86ceae19e

SHA256
f1340d7ed3baf30b0530ffc59049bfd4109c6497b552c04f2206708ab3d91a4a

SHA512
a72c10585e9b92aeec977376bbdc94011b0c43a6a6f71f20cde76369db37fbe0c3feffc3ab31c9c559f33be7bbb762c6993b1af6ac3567a3ff634e728b904bcb

Download Submit
C:\Program Files\Mozilla Firefox\minidump-analyzer.exe

Filesize
840KB

MD5
57c94b001fb90e50b6462d0340e83aa9

SHA1
34d742f67814ddd26aded7e4c53dcb11d64c768d

SHA256
d6d7a867c3e8fef4d9e5358d5d798d8986882508c854241bbbd593bceb0115a1

SHA512
a2edd29662fb98eaea1800b3a066b652858156b0ce182d395de8deac7c032a78a6c410800e46952ea334f4d0943ad1191b77645933ac6af4671dd15743a07a03

Download Submit
C:\Program Files\Mozilla Firefox\pingsender.exe

Filesize
123KB

MD5
8a0441e00b108a84098e987ae3bbe9f3

SHA1
e5e771d6d4ae4542f06617116f0744320f4e10b1

SHA256
c5734ac5a86c4ef24d4d051dec5f37b86f3f4138ba20ef353e59827a096c86ab

SHA512
5f4ae1b192464fa584613ba8afea01946a66fe8969d72e081cddc9fc8f21fec2567eb276f81baf4709a3ed3bedba3997159ffea2d8d1d64082e607f3107b0a7e

Download Submit
C:\Program Files\Mozilla Firefox\plugin-container.exe

Filesize
401KB

MD5
3e9be58f4a9323971b69ff006e4ae130

SHA1
34f9f7980fbed7c31e6aed2e212f12485952ca52

SHA256
84cf8851a32f26d2064e0fd13c781d34a21936da30194249ba603e2b4f99d8d2

SHA512
a0603ce7999baae03985ff9cb86c7184c04d1487bb0522fd47d5d026efc636bd2e1c0bbbc8ad226db6cd109c77a802e958f40cbbb05dfab8f9aaab8b850c44f7

Download Submit
C:\Program Files\Mozilla Firefox\updater.exe

Filesize
455KB

MD5
2f020e6cba99c91db5f3f0f464b28b11

SHA1
8ac572b4a79be41fcf43abc7514130400ae2978d

SHA256
77cd840679310a9415a36749354d21bb56e0d8e7a06319054916e9d6ad759cc1

SHA512
adeec9d7db7053425abec788d256b1681e859e6e5e999540ca153d896f63d28afd4529aad45077b6984b299981535b46ae4a7dfbfd7b637bcdaf81983abd74ae

Download Submit
C:\Program Files\RESTORE_FILES.txt

Filesize
2KB

MD5
78ede93114e65f9160fd03d3357c56e6

SHA1
88d531b101e57655f1d0d26c6b3257aa2468d460

SHA256
c97412fbf88da8f91099a52888dea4c3f222cd95af3e681e3271cbca8b6b7bb5

SHA512
074a4c741273902ccacb6f573b96d8accedb2ee405dbd04350cdbf54d180c1fd577a4e90c2aae26bf72f3782403f4494db6e3501a04cfd9d7d81a6bc14884b9d

Download Submit
memory/2004-54-0x0000000000110000-0x0000000000115000-memory.dmp

Filesize
20KB

Download
memory/2004-426-0x0000000000020000-0x0000000000027000-memory.dmp

Filesize
28KB

Download
memory/2004-56-0x0000000000110000-0x0000000000115000-memory.dmp

Filesize
20KB

Download