hxxps://o-cs[.]ru/load/sborki_cs_1_6/russkaja_versija_ks_1_6/335-1-0-162

max time kernel
1331s
max time network
1339s
platform
windows10-1703_x64
resource
win10-20230915-en
resource tags

arch:x64arch:x86image:win10-20230915-enlocale:en-usos:windows10-1703-x64system
submitted
28-09-2023 10:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://o-cs.ru/load/sborki_cs_1_6/russkaja_versija_ks_1_6/335-1-0-162

Score

9^/10

discovery persistence ransomware spyware stealer

Malware Config

Signatures

Renames multiple (109) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Downloads MZ/PE file

Sets service image path in registry 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SASKUTIL\ImagePath = "\\??\\C:\\Program Files\\SUPERAntiSpyware\\SASKUTIL64.SYS"	SUPERAntiSpywarePro.exe
Set value (str)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\SASDIFSV\ImagePath = "\\??\\C:\\Program Files\\SUPERAntiSpyware\\SASDIFSV64.SYS"	SUPERAntiSpywarePro.exe

Executes dropped EXE 20 IoCs

pid	Process
2880	Counter-Strike-classic.exe
2316	nost.exe
4628	nost.exe
424	SUPERAntiSpywarePro.exe
372	SASCORE64.EXE
2856	SASCORE64.EXE
3284	SUPERAntiSpyware.exe
2232	SSUPDATE64.EXE
2276	SUPERAntiSpyware.exe
2136	SSUPDATE64.EXE
5104	sas_enum_cookies.exe
4692	sas_enum_cookies.exe
2232	nost.exe
2948	nost.exe
2264	nost.exe
608	nost.exe
4516	SUPERDelete.exe
5672	SUPERDelete.exe
5820	SUPERDelete.exe
5684	SUPERDelete.exe

Loads dropped DLL 26 IoCs

pid	Process
424	SUPERAntiSpywarePro.exe
712	REGSVR32.EXE
5104	regsvr32.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3284	SUPERAntiSpyware.exe
3108	Process not Found
3108	Process not Found

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Registers COM server for autorun 1 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\InprocServer32\ = "C:\\Program Files\\SUPERAntiSpyware\\SASCTXMN64.DLL"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe

Unexpected DNS network traffic destination 1 IoCs

Network traffic to other servers than the configured DNS servers was detected on the DNS port.

description	ioc
Destination IP	44.228.224.62

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-1894964180-3551943068-3090682958-1000\Software\Microsoft\Windows\CurrentVersion\Run\SUPERAntiSpyware = "C:\\Program Files\\SUPERAntiSpyware\\SUPERAntiSpyware.exe"	SUPERAntiSpyware.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in System32 directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\System32\CatRoot2\dberr.txt	SUPERAntiSpyware.exe

Drops file in Program Files directory 34 IoCs

description	ioc	Process
File created	C:\Program Files\SUPERAntiSpyware\saskutil64.sys	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\SASTask.exe	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\SUPERDelete.exe	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\SAS Default.set	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\legal.zip	SUPERAntiSpywarePro.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\debug.log	chrome.exe
File created	C:\Program Files\SUPERAntiSpyware\Plugins\sab_wab.dll	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\sas_enum_cookies.exe	SUPERAntiSpywarePro.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\debug.log	chrome.exe
File created	C:\Program Files\SUPERAntiSpyware\SASCore64.exe	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\Plugins\sab_incr.dll	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\SSUpdate64.exe	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\HBEDV.KEY	SUPERAntiSpywarePro.exe
File opened for modification	C:\Program Files\SUPERAntiSpyware\sas_preconfig.db3	SUPERAntiSpyware.exe
File created	C:\Program Files\SUPERAntiSpyware\msvcr71.dll	SUPERAntiSpywarePro.exe
File opened for modification	C:\Program Files\SUPERAntiSpyware\Uninstall.dat-journal	SUPERAntiSpywarePro.exe
File opened for modification	C:\Program Files\SUPERAntiSpyware\Uninstall.dat	SUPERAntiSpywarePro.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\debug.log	chrome.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File created	C:\Program Files\SUPERAntiSpyware\SAS_Preconfig.db3	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\Plugins\sab_mapi.dll	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\Uninstall.exe	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\savapi.dll	SUPERAntiSpywarePro.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\debug.log	chrome.exe
File created	C:\Program Files\SUPERAntiSpyware\SASREPAIRS.STG	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\High Contrast Black.set	SUPERAntiSpywarePro.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\debug.log	chrome.exe
File created	C:\Program Files\SUPERAntiSpyware\detect.wav	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe	SUPERAntiSpywarePro.exe
File created	C:\Program Files\SUPERAntiSpyware\RUNSAS.EXE	SUPERAntiSpywarePro.exe

Drops file in Windows directory 7 IoCs

description	ioc	Process
File created	C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task bb9a9703-baf7-4a19-a147-a03ed3522a92.job	SUPERAntiSpyware.exe
File created	C:\Windows\rescache\_merged\4183903823\810424605.pri	taskmgr.exe
File created	C:\Windows\rescache\_merged\1601268389\3877292338.pri	taskmgr.exe
File created	\??\c:\windows\Media\nost.exe	Counter-Strike-classic.exe
File created	C:\Windows\rescache\_merged\4183903823\810424605.pri	taskmgr.exe
File created	C:\Windows\rescache\_merged\1601268389\3877292338.pri	taskmgr.exe
File created	C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 07bdf59a-677f-479b-bb91-5579cc992a67.job	SUPERAntiSpyware.exe

Launches sc.exe 4 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
1064	sc.exe
660	sc.exe
3640	sc.exe
4840	sc.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 2 IoCs

pid	pid_target	Process	procid_target
1168	2880	WerFault.exe	99
2088	2880	WerFault.exe	99

Checks SCSI registry key(s) 3 TTPs 20 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID	SUPERAntiSpyware.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID	SUPERAntiSpyware.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	SUPERAntiSpyware.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	SUPERAntiSpyware.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_DADY&PROD_HARDDISK\4&215468A5&0&000000	SUPERAntiSpyware.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_DADY_DVD-ROM\4&215468a5&0&010000\HardwareID	SUPERAntiSpyware.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_DADY_DVD-ROM\4&215468A5&0&010000	SUPERAntiSpyware.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\HardwareID	SUPERAntiSpyware.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\FriendlyName	taskmgr.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133403710852794365"	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\OnDemandInterfaceCache	nost.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SUPERAntiSpywareContextMenuExt.SASCon.1\ = "SASContextMenu Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\MiscStatus\ = "0"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\ProxyStubClsid32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\TypeLib\ = "{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\Control	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}\1.0\0	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\Version	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SUPERAntiSpywareContextMenuExt.SASConte	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\ = "SASContextMenu Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\ToolboxBitmap32\ = "C:\\Program Files\\SUPERAntiSpyware\\SASCTXMN64.DLL, 102"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\TypeLib\ = "{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\ToolboxBitmap32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\MiscStatus\1\ = "131473"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}\1.0\0\win64	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\SASCTXMN.DLL\AppID = "{746C91D0-C4A9-460A-B841-851A2B6F2C4B}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\ = "SUPERAntiSpyware Context Menu"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SUPERAntiSpywareContextMenuExt.SASCon.1\CLSID\ = "{CA8ACAFA-5FBB-467B-B348-90DD488DE003}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SUPERAntiSpywareContextMenuExt.SASConte\CurVer	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\TypeLib\ = "{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\TypeLib	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\InprocServer32\ = "C:\\Program Files\\SUPERAntiSpyware\\SASCTXMN64.DLL"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\ = "ISASContextMenu"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SUPERAntiSpywareContextMenuExt.SASCon.1\CLSID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\Programmable	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\Version\ = "1.0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}\1.0\HELPDIR\ = "C:\\Program Files\\SUPERAntiSpyware"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\ProxyStubClsid32	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\SASCTXMN.DLL	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\InprocServer32	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\AppID = "{746C91D0-C4A9-460A-B841-851A2B6F2C4B}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\TypeLib\Version = "1.0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{746C91D0-C4A9-460A-B841-851A2B6F2C4B}\ = "SUPERAntiSpywareContextMenuExtension"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SUPERAntiSpywareContextMenuExt.SASConte\CLSID\ = "{CA8ACAFA-5FBB-467B-B348-90DD488DE003}"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\VersionIndependentProgID\ = "SUPERAntiSpywareContextMenuExt.SASConte"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\VersionIndependentProgID	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}\1.0\FLAGS	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}\1.0\0\win64\ = "C:\\Program Files\\SUPERAntiSpyware\\SASCTXMN64.DLL"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\ProgID\ = "SUPERAntiSpywareContextMenuExt.SASCon.1"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\TypeLib	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}\1.0\HELPDIR	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\ProxyStubClsid32\ = "{00020424-0000-0000-C000-000000000046}"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SUPERAntiSpywareContextMenuExt.SASCon.1	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SUPERAntiSpywareContextMenuExt.SASConte\ = "SASContextMenu Class"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\SUPERAntiSpywareContextMenuExt.SASConte\CurVer\ = "SUPERAntiSpywareContextMenuExt.SASCon.1"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{209D651D-9AAE-47B4-AD74-16A8F03ACDDB}\1.0	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\ = "ISASContextMenu"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\MiscStatus	regsvr32.exe
Key created	\REGISTRY\USER\S-1-5-21-1894964180-3551943068-3090682958-1000_Classes\Local Settings	taskmgr.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{746C91D0-C4A9-460A-B841-851A2B6F2C4B}	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\InprocServer32\ThreadingModel = "Apartment"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A42DCBB4-CBAE-4593-BB45-39CAD8F2CF19}\TypeLib\Version = "1.0"	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\ = "SUPERAntiSpyware Context Menu"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\SUPERAntiSpywareContextMenuExt.SASConte\CLSID	regsvr32.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AllFilesystemObjects\shellex\ContextMenuHandlers\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\ = "SUPERAntiSpyware Context Menu"	regsvr32.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CA8ACAFA-5FBB-467B-B348-90DD488DE003}\ProgID	regsvr32.exe

Modifies system certificate store 2 TTPs 5 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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	SUPERAntiSpyware.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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	SUPERAntiSpyware.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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	SUPERAntiSpyware.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 5c000000010000000400000000080000190000000100000010000000749966cecc95c1874194ca7203f9b6200300000001000000140000000563b8630d62d75abbc8ab1e4bdfb5a899b24d431d00000001000000100000004f5f106930398d09107b40c3c7ca8f1c0b000000010000001200000044006900670069004300650072007400000014000000010000001400000045eba2aff492cb82312d518ba7a7219df36dc80f6200000001000000200000003e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f00000001000000140000006dca5bd00dcf1c0f327059d374b29ca6e3c50aa604000000010000001000000087ce0b7b2a0e4900e158719b37a893722000000001000000bb030000308203b73082029fa00302010202100ce7e0e517d846fe8fe560fc1bf03039300d06092a864886f70d01010505003065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a3065310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312430220603550403131b4469676943657274204173737572656420494420526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100ad0e15cee443805cb187f3b760f97112a5aedc269488aaf4cef520392858600cf880daa9159532613cb5b128848a8adc9f0a0c83177a8f90ac8ae779535c31842af60f98323676ccdedd3ca8a2ef6afb21f25261df9f20d71fe2b1d9fe1864d2125b5ff9581835bc47cda136f96b7fd4b0383ec11bc38c33d9d82f18fe280fb3a783d6c36e44c061359616fe599c8b766dd7f1a24b0d2bff0b72da9e60d08e9035c678558720a1cfe56d0ac8497c3198336c22e987d0325aa2ba138211ed39179d993a72a1e6faa4d9d5173175ae857d22ae3f014686f62879c8b1dae45717c47e1c0eb0b492a656b3bdb297edaaa7f0b7c5a83f9516d0ffa196eb085f18774f0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e0416041445eba2aff492cb82312d518ba7a7219df36dc80f301f0603551d2304183016801445eba2aff492cb82312d518ba7a7219df36dc80f300d06092a864886f70d01010505000382010100a20ebcdfe2edf0e372737a6494bff77266d832e4427562ae87ebf2d5d9de56b39fccce1428b90d97605c124c58e4d33d834945589735691aa847ea56c679ab12d8678184df7f093c94e6b8262c20bd3db32889f75fff22e297841fe965ef87e0dfc16749b35debb2092aeb26ed78be7d3f2bf3b726356d5f8901b6495b9f01059bab3d25c1ccb67fc2f16f86c6fa6468eb812d94eb42b7fa8c1edd62f1be5067b76cbdf3f11f6b0c3607167f377ca95b6d7af112466083d72704be4bce97bec3672a6811df80e70c3366bf130d146ef37f1f63101efa8d1b256d6c8fa5b76101b1d2a326a110719dade2c3f9c39951b72b0708ce2ee650b2a7fa0a452fa2f0f2	SUPERAntiSpyware.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43	SUPERAntiSpyware.exe

Runs net.exe

Script User-Agent 2 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	472	SASDef_GetComponentsDescriptor
HTTP User-Agent header	474	SASDef_GetDescriptor

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
4204	chrome.exe
4204	chrome.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
4944	taskmgr.exe
4660	taskmgr.exe

Suspicious behavior: LoadsDriver 7 IoCs

pid	Process
640	Process not Found
640	Process not Found
640	Process not Found
640	Process not Found
640	Process not Found
640	Process not Found
640	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 28 IoCs

pid	Process
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe
Token: SeShutdownPrivilege	4204	chrome.exe
Token: SeCreatePagefilePrivilege	4204	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
4204	chrome.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe
3408	taskmgr.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
2880	Counter-Strike-classic.exe
2880	Counter-Strike-classic.exe
2316	nost.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4204 wrote to memory of 4404	4204	chrome.exe	68
PID 4204 wrote to memory of 4404	4204	chrome.exe	68
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 2860	4204	chrome.exe	75
PID 4204 wrote to memory of 4212	4204	chrome.exe	72
PID 4204 wrote to memory of 4212	4204	chrome.exe	72
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73
PID 4204 wrote to memory of 1048	4204	chrome.exe	73

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://o-cs.ru/load/sborki_cs_1_6/russkaja_versija_ks_1_6/335-1-0-162
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffcd7759758,0x7ffcd7759768,0x7ffcd7759778
  2⤵
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1796 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2088 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:1048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2792 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1640 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:2
  2⤵
  PID:2860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2800 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4752 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4948 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3812 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=5168 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6220 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5784 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=6140 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --mojo-platform-channel-handle=6180 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=6160 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5580 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:2140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6416 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5516 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5392 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:2044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1520 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5108 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=4592 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:2324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=952 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6092 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:2
  2⤵
  PID:4604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5524 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:3940
- C:\Users\Admin\Downloads\Counter-Strike-classic.exe
  "C:\Users\Admin\Downloads\Counter-Strike-classic.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:2880
- - C:\Windows\SysWOW64\cmd.exe
    cmd.exe /C sc query service5
    3⤵
    PID:2640
  - - C:\Windows\SysWOW64\sc.exe
      sc query service5
      4⤵
      Launches sc.exe
      PID:1064
- - C:\Windows\Media\nost.exe
    "C:\Windows\Media\nost.exe" /install /silent
    3⤵
    - Executes dropped EXE
    - Suspicious use of SetWindowsHookEx
    PID:2316
- - C:\Windows\SysWOW64\sc.exe
    "C:\Windows\System32\sc.exe" failure service5 reset= 0 actions= restart/0/restart/0/restart/0
    3⤵
    - Launches sc.exe
    PID:660
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\System32\cmd.exe" /c net start service5
    3⤵
    PID:3572
  - - C:\Windows\SysWOW64\net.exe
      net start service5
      4⤵
      PID:2532
    - - C:\Windows\SysWOW64\net1.exe
        
        C:\Windows\system32\net1 start service5
        5⤵
        
        PID:2408
- - C:\Windows\SysWOW64\sc.exe
    "C:\Windows\System32\sc.exe" failure service5 reset= 0 actions= restart/0/restart/0/restart/0
    3⤵
    - Launches sc.exe
    PID:3640
- - C:\Windows\SysWOW64\sc.exe
    "C:\Windows\System32\sc.exe" description "<Error Code: 15100>" "Service will attempt to resolve local names in Windows environment."
    3⤵
    - Launches sc.exe
    PID:4840
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2880 -s 1472
    3⤵
    - Program crash
    PID:1168
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2880 -s 1548
    3⤵
    - Program crash
    PID:2088
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=6468 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=6636 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6660 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1588 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=6428 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --mojo-platform-channel-handle=5252 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=6948 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=7012 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6944 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:3420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6992 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=6956 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:3316
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=6088 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=7024 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:1324
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7060 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5236 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6632 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:3008
- C:\Users\Admin\Downloads\SUPERAntiSpywarePro.exe
  "C:\Users\Admin\Downloads\SUPERAntiSpywarePro.exe"
  2⤵
  - Sets service image path in registry
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  PID:424
- - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
    "C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE" -install -name:!SASCORE -display:"SAS Core Service" -description:"SUPERAntiSpyware Core Service" -pipe:sascoreservicepipe
    3⤵
    - Executes dropped EXE
    PID:372
- - C:\Windows\SysWOW64\REGSVR32.EXE
    "C:\Windows\system32\REGSVR32.EXE" /s "C:\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL"
    3⤵
    - Loads dropped DLL
    PID:712
  - - C:\Windows\system32\regsvr32.exe
      /s "C:\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL"
      4⤵
      Loads dropped DLL
      Registers COM server for autorun
      Modifies registry class
      PID:5104
- - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
    "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Adds Run key to start application
    - Drops file in System32 directory
    - Drops file in Program Files directory
    - Drops file in Windows directory
    - Checks SCSI registry key(s)
    - Modifies system certificate store
    PID:3284
  - - C:\Program Files\SUPERAntiSpyware\SSUPDATE64.EXE
      "C:\Program Files\SUPERAntiSpyware\SSUPDATE64.EXE" *10.0.1256!{0D3C4F0D-1C11-47bc-AD1C-BAB98712DBFB}
      4⤵
      Executes dropped EXE
      PID:2232
  - - C:\Windows\System32\cacls.exe
      "C:\Windows\System32\cacls.exe" "C:\System Volume Information" /E /G everyone:F
      4⤵
      PID:380
  - - C:\Windows\System32\cacls.exe
      "C:\Windows\System32\cacls.exe" "C:\System Volume Information" /E /R everyone
      4⤵
      PID:3844
  - - C:\Windows\System32\cacls.exe
      "C:\Windows\System32\cacls.exe" "C:\System Volume Information" /E /G everyone:F
      4⤵
      PID:4824
  - - C:\Program Files\SUPERAntiSpyware\sas_enum_cookies.exe
      sas_enum_cookies.exe
      4⤵
      Executes dropped EXE
      PID:5104
  - - C:\Program Files\SUPERAntiSpyware\sas_enum_cookies.exe
      sas_enum_cookies.exe
      4⤵
      Executes dropped EXE
      PID:4692
  - - C:\Windows\System32\cacls.exe
      "C:\Windows\System32\cacls.exe" "C:\System Volume Information" /E /R everyone
      4⤵
      PID:5696
  - - C:\Program Files\SUPERAntiSpyware\SUPERDelete.exe
      "C:\Program Files\SUPERAntiSpyware\SUPERDelete.exe" C:\Users\Admin\AppData\Local\Temp\DEL4EC6.tmp
      4⤵
      Executes dropped EXE
      PID:4516
  - - C:\Program Files\SUPERAntiSpyware\SUPERDelete.exe
      "C:\Program Files\SUPERAntiSpyware\SUPERDelete.exe" C:\Users\Admin\AppData\Local\Temp\DELA791.tmp
      4⤵
      Executes dropped EXE
      PID:5672
  - - C:\Program Files\SUPERAntiSpyware\SUPERDelete.exe
      "C:\Program Files\SUPERAntiSpyware\SUPERDelete.exe" C:\Users\Admin\AppData\Local\Temp\DELF15D.tmp
      4⤵
      Executes dropped EXE
      PID:5820
  - - C:\Program Files\SUPERAntiSpyware\SUPERDelete.exe
      "C:\Program Files\SUPERAntiSpyware\SUPERDelete.exe" C:\Users\Admin\AppData\Local\Temp\DEL8188.tmp
      4⤵
      Executes dropped EXE
      PID:5684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=5088 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=5972 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5300 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6476 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=5856 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:1076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=5680 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:532
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=6748 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:5436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=6468 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:5876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=7028 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=5608 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=6424 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=6064 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5524 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:4844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6040 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  PID:1100
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=6436 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:5944
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=5252 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:1
  2⤵
  - Drops file in Program Files directory
  PID:5992
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6816 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  - Drops file in Program Files directory
  PID:6116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=6056 --field-trial-handle=1912,i,10151167186582202935,4910666663686060582,131072 /prefetch:8
  2⤵
  - Drops file in Program Files directory
  PID:372

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:5060

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SendNotifyMessage
PID:3408

C:\Windows\Media\nost.exe
C:\Windows\Media\nost.exe
1⤵
- Executes dropped EXE
- Modifies data under HKEY_USERS
PID:4628

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Drops file in Windows directory
- Checks SCSI registry key(s)
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
PID:4944

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x34c
1⤵
PID:2888

C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
1⤵
- Executes dropped EXE
PID:2856

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4604

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
"C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
1⤵
- Executes dropped EXE
- Checks SCSI registry key(s)
PID:2276
- C:\Program Files\SUPERAntiSpyware\SSUPDATE64.EXE
  "C:\Program Files\SUPERAntiSpyware\SSUPDATE64.EXE" *10.0.1256!{0D3C4F0D-1C11-47bc-AD1C-BAB98712DBFB}
  2⤵
  - Executes dropped EXE
  PID:2136

C:\Windows\Media\nost.exe
C:\Windows\Media\nost.exe
1⤵
- Executes dropped EXE
PID:2232

C:\Windows\Media\nost.exe
C:\Windows\Media\nost.exe
1⤵
- Executes dropped EXE
PID:2948

C:\Windows\Media\nost.exe
C:\Windows\Media\nost.exe
1⤵
- Executes dropped EXE
PID:2264

C:\Windows\Media\nost.exe
C:\Windows\Media\nost.exe
1⤵
- Executes dropped EXE
PID:608

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
PID:5268

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
PID:5508
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffcd7759758,0x7ffcd7759768,0x7ffcd7759778
  2⤵
  PID:1872

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
PID:5912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ffcd7759758,0x7ffcd7759768,0x7ffcd7759778
  2⤵
  PID:2652

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Checks SCSI registry key(s)
PID:2888
- C:\Windows\system32\WerFault.exe
  C:\Windows\system32\WerFault.exe -u -p 2888 -s 884
  2⤵
  PID:2316

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Checks SCSI registry key(s)
- Suspicious behavior: GetForegroundWindowSpam
PID:4660

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE

Filesize
169KB

MD5
98e06cac2c508118450095e581202230

SHA1
2afe3280140fc56db7a7a9197520bfbc74608235

SHA256
8fc6c08487f2a481a28f1e5e500b61a21b7a0d44b342f9f887017d6fae4f87f4

SHA512
48667a0d00b954d8c0e89b05e6dbaeb18591e58346436385a2d33bd1f02f31e9ea5ed023cb9e377a431e9adf0c7f1aec90e6fe71386f74bc7c5ae210d38dc579

Download Submit
C:\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL

Filesize
215KB

MD5
2640b083bb33cc6095cb0e6e2f8acc98

SHA1
191ed504bc36016899fbfa3f080bd1c3b1a7cc6c

SHA256
550ceae946515cf892dbbee249d72d22bf44a11af3db16b578196fdca8170b1e

SHA512
7798740ff940cde4a7d677bf1366ff564c76babb5666c07aad7231ab51b050e4a5549da4c4d3bae944e1910f24d08b1660069e24fb44f8222dbe84e66a249b5b

Download Submit
C:\Program Files\SUPERAntiSpyware\SASCore64.exe

Filesize
169KB

MD5
98e06cac2c508118450095e581202230

SHA1
2afe3280140fc56db7a7a9197520bfbc74608235

SHA256
8fc6c08487f2a481a28f1e5e500b61a21b7a0d44b342f9f887017d6fae4f87f4

SHA512
48667a0d00b954d8c0e89b05e6dbaeb18591e58346436385a2d33bd1f02f31e9ea5ed023cb9e377a431e9adf0c7f1aec90e6fe71386f74bc7c5ae210d38dc579

Download Submit
C:\Program Files\SUPERAntiSpyware\SASCore64.exe

Filesize
169KB

MD5
98e06cac2c508118450095e581202230

SHA1
2afe3280140fc56db7a7a9197520bfbc74608235

SHA256
8fc6c08487f2a481a28f1e5e500b61a21b7a0d44b342f9f887017d6fae4f87f4

SHA512
48667a0d00b954d8c0e89b05e6dbaeb18591e58346436385a2d33bd1f02f31e9ea5ed023cb9e377a431e9adf0c7f1aec90e6fe71386f74bc7c5ae210d38dc579

Download Submit
C:\Program Files\SUPERAntiSpyware\SSUPDATE64.EXE

Filesize
455KB

MD5
99851aef40ccc89527358327fa3ac645

SHA1
4663a99ce79cfcb0a8cb5b9eee8590c50b665b0d

SHA256
89861e803e5281d4ba890ce1ff997f5bf2b7e2b61e37d56af8b0cd89408d4616

SHA512
41d52c8c45f0338f102b8a20232fe23dd17d008574b18a17795a3129a84d25e3615cd9cd42462376a21fff3055ac5628cc13d07cced924009c3ffdeb372031f9

Download Submit
C:\Program Files\SUPERAntiSpyware\SSUpdate64.exe

Filesize
455KB

MD5
99851aef40ccc89527358327fa3ac645

SHA1
4663a99ce79cfcb0a8cb5b9eee8590c50b665b0d

SHA256
89861e803e5281d4ba890ce1ff997f5bf2b7e2b61e37d56af8b0cd89408d4616

SHA512
41d52c8c45f0338f102b8a20232fe23dd17d008574b18a17795a3129a84d25e3615cd9cd42462376a21fff3055ac5628cc13d07cced924009c3ffdeb372031f9

Download Submit
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Filesize
10.7MB

MD5
19d0eb19b18c11a9cbc0cbb1e7ea80ed

SHA1
3a450d32e44562e084a851002cab30605bbedef0

SHA256
92625b20f52ffa04be861524cb003e80f25f8f43cd31085cb0f15912229b269d

SHA512
e57a57ff9b02685b308e7191e6255b2fe72b9418772c5dddc98424de2c68ff840fd61213ef448b4ce8f35a1e5fddc5e0aa573a861c37f7c84cb057e3e3247ab9

Download Submit
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Filesize
10.7MB

MD5
19d0eb19b18c11a9cbc0cbb1e7ea80ed

SHA1
3a450d32e44562e084a851002cab30605bbedef0

SHA256
92625b20f52ffa04be861524cb003e80f25f8f43cd31085cb0f15912229b269d

SHA512
e57a57ff9b02685b308e7191e6255b2fe72b9418772c5dddc98424de2c68ff840fd61213ef448b4ce8f35a1e5fddc5e0aa573a861c37f7c84cb057e3e3247ab9

Download Submit
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Filesize
10.7MB

MD5
19d0eb19b18c11a9cbc0cbb1e7ea80ed

SHA1
3a450d32e44562e084a851002cab30605bbedef0

SHA256
92625b20f52ffa04be861524cb003e80f25f8f43cd31085cb0f15912229b269d

SHA512
e57a57ff9b02685b308e7191e6255b2fe72b9418772c5dddc98424de2c68ff840fd61213ef448b4ce8f35a1e5fddc5e0aa573a861c37f7c84cb057e3e3247ab9

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aebb.dll

Filesize
117KB

MD5
ec0a6d44a8f79932101f2866e06508a8

SHA1
633c5fcc1c510604a6c5747a2d67279d6a877060

SHA256
7b1d5e6ac75d40b9d2e754441b835274a5407df49fa5cb49c2a782ffad6b845d

SHA512
f65c8970d3e9f7092f027999f07555f47f0f5435d63f39d8892c4db26568aae5777bd8749669b6c860fa798d26a61bc31549b0aac03a3c06e1665846fbfa316e

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aecore.dll

Filesize
360KB

MD5
e70f6142a42136dfc5f89486730da22b

SHA1
159af67dc74900e4bd75a54058c383b0025cfd05

SHA256
9d76aebf894b9f49359bae93beea84e55adb77d780b440031e170c7c68ee2cca

SHA512
66110a6dfd96f123004e6919ff692e76606abd5473adf53a9f3e694c2295afd70a2f2a9494b8bef382a0423dced97e5834a8d5c1a7c8287c9c32628ec4001769

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aecrypto.dll

Filesize
188KB

MD5
595dce0c41025d2861f054a8c81f5913

SHA1
d4440221e669393d731a1d32581c8b0c54f1e5ca

SHA256
001eea645ac86b7cd8b6d9087cea3bafc4648566b0856add65fb38e921a4835e

SHA512
4aca2831cc8da140949bb02b158aaea7b042e554facdf13e68ef4f8d4d4de7af42ac6d2d9a064451acb5b7edf6e84831bf9b31173c787caca339b9e16a70bfb6

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aedroid.dll

Filesize
2.8MB

MD5
96e2107edf93d5cc233c0e9b9bce192f

SHA1
a2a66efd374406260522cab6daa55b295fc06879

SHA256
f1268704ca8c62bafe9a0a9e6defbb4f5a5c0d753632585784d44ced76500cc1

SHA512
4d92293f094e594c18e98ce1aefb5d611348d3796a81d46954366a51fc71bd379421789c9c791d637a127333fc88e31bd7c366ee4f429bd66666aa0ab73e8a94

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aeelf.dll

Filesize
188KB

MD5
91c18f80a6524a87a4c586e3cdc3e638

SHA1
1bc4646407c5ae6c8f50406e75a9b9e9271d4936

SHA256
f3b27929871869e9b48d549bda77e18dbd6656c135d3582821b043949a3762a3

SHA512
5b91445a80a0951bf7aedf8a3773dfb28cd2b293844001de6502bf81a1216ec308aec002fef1a3df5c5876d9e464836aece5ea28e0762008fca700f08d1940fe

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aeemu.dll

Filesize
455KB

MD5
cd75df7d53cb90733340703af69dc585

SHA1
70140460b6ce68959540d465a57c329568ce2fbe

SHA256
af20314b16391ae20682438c946985a1f4c3112dc9ce183db55b639b0dcc60f4

SHA512
4a9cd5cf5376ddcb1cc20d0b846b73a2be86ac96a17e128ea755b630087784488c7c091ba1139a02f72976a4c113859462ca13716496541062c222d8dc921a2a

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aeexp.dll

Filesize
435KB

MD5
765eab6817d0413b983d6332444ad9b5

SHA1
494edeacb0110046148dc69a4b33df7f6d04bc08

SHA256
7f4e1a5319a36f6cdc2b23878885502d8ce82efb5cbd60341c9478e60b0c7ac0

SHA512
3eddfc3b7421a3e6b2c5e318a69c5c866cd3a73edbc70204e5ce9773885eea912c79397787dcc9d44eac5f913e27a6c68c17ef6b077e78e9283dee4f23b25760

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aegen.dll

Filesize
823KB

MD5
0476a13b3eb31c7a32b8b32e10f02f36

SHA1
7996cb82bb027313ffb783bde4a9ba7e0d92115f

SHA256
5f10f6228c35b720fbe2d35287493e6346db84e14cc360a867a1b5dd326f0059

SHA512
e28ad0569dc82b2074d610d28ee13e5f73d78033b8caa8c4b4e7129c010cc2e9b86955cc9382079e0626717850d7f7bc91a7f77ca88ff1a867d42b56d0f74b02

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aehelp.dll

Filesize
395KB

MD5
2422e30f1bc12be1259ba913ac68d5fb

SHA1
6f56d2c7954b1e7ed66618340f94898d2796364e

SHA256
4f7c1923a9afcd4ba9a9ceef7a1e8c5edcdf9897c20b56378a74d9e91925dff6

SHA512
a08b461a24e679d15528b27aa0bed02ff1d73fcb0a1d51ad39004ffcea4da166d6ef05d05d554f088bc372629467c6cee890135a1b0f8639000ac53fffeddd2d

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aeheur.dll

Filesize
11.2MB

MD5
1edb872cc593123566d57c98a34fa68a

SHA1
86be76917366739f62eb9520ea3a69def2da682b

SHA256
7111469d3a7f3ea2f39bbfde995ad3b8c19fe5721f5111910ee29fc2120151d5

SHA512
37db91d3b8fa440701f0fdbc640d0b94b8f82cbc3c22e4c153f9e68a201790b4876967cfa62809724561d35e1c16f634cb4112fd61b8f0d5e8116cd586f19ec5

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aelibinf.dll

Filesize
121KB

MD5
6d84e76fbbc2c65a40fe7a1e20572c75

SHA1
7fc9c6356903be87e87743c50c06cf50719d7770

SHA256
d576b351c7f42cb17e1463b83e25f6d8085de3fc1a11e0e18328ef1cf8ceb9a0

SHA512
3f70e35f165f09cd7f8ed24ba4c84f7096ee9ea557b73a5354f5a80caa7ba1ebda925501dfb0b513357fdb9e0adc98fe2684ac7780babcb0b9585ee9e8a3d230

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aelidb.dat

Filesize
86KB

MD5
e12b4507919ef2d5b5f2b5332f7c2bb1

SHA1
4dd0c1870754a4052f9de5f09f69df3f7bae4b3d

SHA256
ca5bb2f6c93eccc1ef5a2b2aae25b4976a2ce320a52d13d74f12b65205678e53

SHA512
74a2e05077726ab00a810325d6be729c001f290977c9e4e3d81d3f4fe4398317698510a0bf5d5014625e5c740f11dc10cf004cac343cd1e4d8ab82908a0376ad

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aeml.dll

Filesize
375KB

MD5
10ecffd7ae1fe3f3f5f23c45e988851c

SHA1
808aabf719d347c43337134c982fdccd77fbda78

SHA256
4ab9c704c6c459c727b1b5f0a379ef25be01bbcfda41e5637756edc07c6ce4ae

SHA512
dcbe088c92a72e214bd7516f3df16a3c5c61f1986c01b53316b3f16f6f063b90d73569044eed8f0b20a6e2e1140c18c0a7d6d157fda03a20b1abbadf3269be8c

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aemobile.dll

Filesize
444KB

MD5
9277fe33de79a36c8a4d89330375b2ee

SHA1
bb376b82d20404d1dd7c6bb9696c0b3151ec8225

SHA256
63ec0f323dbe9dd284a282e9becaaf88e7e16bd42d40f21f572861c64e9f8bd0

SHA512
113d9971d88fe99dde82275abaa3bd8fd995307e14e1a4725fdbff3b76002c7b95a2b65e582c2ec23027ac54271e25b73d73d834853f775add9460955ddecb3d

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aeoffice.dll

Filesize
1.4MB

MD5
829104fa5f19929367155ea1ef2a1d78

SHA1
f026f9abfc94b7bb86f1072f0ff076c25795cce7

SHA256
ff48989d513afc8fc5a189d1366c5295b0e348b716c2e753869d399aa4107fd9

SHA512
37873ae14580f39321f62d3dc1681938c5ae6cfc4886ee31ff7b2b788213a1b8327235eb0a474af725626ab69abf1cce33768debf86c7e3caffa26fbb00ddc12

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aepack.dll

Filesize
1.2MB

MD5
ee27dcb7e0df9ec01bada332ee0bbce0

SHA1
236cc47bd58dc590befbde95f5c42fc8f6dca6ac

SHA256
81076a82ff634ef29a5a4bfc0051fa2afdcb57fc9be1fbe8842cadd692e4bb6f

SHA512
c6b116293b7d1ae1e524064acc7a3af7db884a36dacfb0f1d47ee84e5ac1f41545864500a599558c3b9dc2832f9a2bfb8a02bf1f5fd1f150f7b29738bb8ac7a7

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aerdl.dll

Filesize
1.4MB

MD5
bf3185e75b977b16d14cc2f13ae88126

SHA1
dea8c9ddcf83291f3d916c6cfef896ab317ce8ef

SHA256
5ab24da89937e4852ef133deea585ea71d483c2b251f1151395cdba964f78e0f

SHA512
5b37e34657e9ab682253d5e16f5557d126625132cf5873dda1810f75dd3172b1c42112b74e1bd92cf7de0e5220c59287d32489975187566a6d936ca4b6efab3e

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aesbx.dll

Filesize
1.8MB

MD5
629fea4745560b07a4e8f2118ac48ce6

SHA1
9dcb1ab9f4b3ad34ff28a606bd582d8fde9a5bd6

SHA256
dd957e7d13d58bea235f08f728b0246b87ba8caee6cb41421e94b76faa79e6f5

SHA512
e93448d286434b3e3ab613e4804e9f4dc3f4d8fb41bfb796a09f78dc31bf3efcc00cc5915500c26c63c4b2c6cb5efde274b762be17a07ffae01ce5a0dae03337

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aescn.dll

Filesize
191KB

MD5
c8a2bf13e83cb0b85ddf0fb4972c4c33

SHA1
a5e1c67f771f0d798083fb279f4c529e65422b72

SHA256
84ef57ee1ec6caf373b343e38fea9d59f784605de36c667043dd7ac2b2f3a1b1

SHA512
6b85a510a556f4642cc6a001eba1336be287af2a97e6398cf5359de738ebf4c3b1f418e1dcc19a08f54afc1bf68085c73c2be3746a66dbcd23d46b7369e5640b

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aescript.dll

Filesize
1.5MB

MD5
29308a1aa49b2ff89a6c10091ca3bdd6

SHA1
897b81782171de6ee5086a5ce76cd23f1ed7f058

SHA256
a99c97f4c76c2d83631411afcf5d22f4bd9211b8054fefd4d0cdd42223380118

SHA512
4273d7f7531a36ee59528c9b34b65a2f2325f1d954381c32fac91cca576aecab58b0ec5dfb9e009dba34aa3a7f0b00654bad0e453c9486e294452f62413c34f5

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\aevdf.dll

Filesize
230KB

MD5
d4162a56d068ce6f377ae07447a16a80

SHA1
315ebd1f09740729222a1f96c01897d2fa56855f

SHA256
134de4fd0500a36943163af6928c52307e17c03911e7ea75bd3a2633f7bc20b9

SHA512
84170b67dd8980bf4ecf92ad4f06203a456a33624a034327c2461ee4a88f0a2118564f191723975c8ec1edf38d5c1d3c1a87d6ecf74b72bc30a0a75241c098eb

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\AV\local000.vdf

Filesize
101.1MB

MD5
0db606e010235174313049b5e1f29091

SHA1
93802e2aea999d86dc3d501e386072ee31f716ca

SHA256
b7eb28d2abcf90dacb2a105c51f70283e6a4d4a1db3288f8392baa5eeb590903

SHA512
3b4c00a6a822e69cfb3da44421037af111d00f2109ebfb3ad23ad44cf60f4aa804bd616615bc6739a120fdef02c99e2365c66d61262a1d7804c2b13be5989a34

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\Content1\MDEsRlJCXzIwMjMwNTA5LGh0dHBzOi8vZ28uc3VwZXJhbnRpc3B5d2FyZS5jb20vP2xpbmtpZD0xMDE1MTI=.bmp

Filesize
1.3MB

MD5
7fe061d3fa6378f732606453089055d7

SHA1
c5923c3198d7549614dc8a80842a0ebc398712b8

SHA256
63a0ac1b64c46a5b0dbc265e2d5afe13c4eff46cb0e03a679308a3802fd887ed

SHA512
63440902964c006d08ee4c532d8b8d2e81d3eb076a2529ee838f23c5eadcce00274c7384bf72fcfc3232c37e0242a43b7a41e9f07d4487b41d84f07d90d970fc

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\av_engine_defs.dat

Filesize
102.5MB

MD5
70dd0d8790c54c25a7fac9ab869937d5

SHA1
455f01d4df5f10da1e454632548250e17f4d4d92

SHA256
f2640f3a398105ae05a614d8ba69bc9a409655107f783738fbd0c58751d5ec0c

SHA512
e3ba9259c09637561977dda10f3bd34b1dbbe80e5081d64d473e41bd6c61d17d59818cfb70de19758c589951ded1b24364613ffbec0547103d2dc7f9100d2dce

Download Submit
C:\ProgramData\SUPERAntiSpyware.com\SUPERAntiSpyware\av_engine_files.dat

Filesize
18.0MB

MD5
29930bc6011ba30707dad0cb027935bc

SHA1
a6f6c9d70754812d7630eb83b71f9e292111efd7

SHA256
670aadd7b2cffb02d92a2e569fcce1e9a9a42c30a1e96394a4a3de6320724103

SHA512
e228a156d0cc9e1f41b2559d74956891a54166ed9b9dc260f8868a269a4b80952c9bc2c8630a4ecd84ba988613790862288e1f295f9c2922a9de6b2d0ee1bc18

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
c9ebf8b9df37ea82170dd0e5b2cf8fb8

SHA1
8a59e9840d3a9eca3cf7153e3966294122d21617

SHA256
21b6d112895d45a7c64f538ea37a57350e1eac1ef0a0de38a254f8519c317774

SHA512
7d6c72c4025447395287af6df4d0f5c33023b88a246b0334338af5437364a1c4765348b33527d5986097996c754823e05b86b49fc75f557fa75d74f464562589

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002e

Filesize
55KB

MD5
f36a741166e713ce4a56f6ca3234f265

SHA1
4f2bd983da87082eef328abff07a87e86a198af5

SHA256
de49f4d68e9fd092e573a9b4e8601bb0ad7dff27fb980167648b21c2cfd6fb90

SHA512
c097dd50a0b36cb83eb676f21ee8e8007a8ee1ad735485f3fe1f101af6e460ff189dda20d1359f9d7a6fbf6fcfe5043220519d10b9374ffbb63d7805e830ab6c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00002f

Filesize
40KB

MD5
7af63db34db605d8dd2c1c9a01b1e053

SHA1
0a78f5165c37eb51371afe2e9dde9ea1f70b8912

SHA256
b4f04e6c5f7e27398f72dceeb47a4711f6b4d475c4a2c8c23e8930d6718ce938

SHA512
78387a5038d814c1ac71a35bb44e0e1e9a49456e4b0da8e38766f3ca3f4ce9f973926697701bb1cfc47552dc11ccbb1326488e0a28f1b1f0cd96e60ace05a8b5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d

Filesize
81KB

MD5
b1111dc77eae1d9321b70e95b9cc60b3

SHA1
ccf6d75fc6cc3cc2ba70ad521487cc8d00d23af7

SHA256
ac47fac0fb6ed52d375716860ba7bb6c62fcd1026a3e06b4858a54ef4c27d96a

SHA512
b41ca2c23cbdabb2b7b039899cf4571a8a645ae7bef207a27f9f016e260ede4615c4cf80556ffcdd82d094c7197ef2046335150c4f4addfb8e2e08a78a16e3fa

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006a

Filesize
52KB

MD5
cc56287d0ad49f238425dbec2e11f7ce

SHA1
99f6ddd511d48d313583c22ff627e9027a3009c5

SHA256
5e99804c28d6fa498a218999f398355c24edd021d116e6584c095226e50afb91

SHA512
b4911fa7504f170f0ae04f3623ff421e70ac1b58de61a56567111354a8b2152f69e7ef87c7a2e60492b3905c345c35e77245c5530fa307dee278373f24cc6cca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
d769ddd5be4ec6f9ca6714492bdee430

SHA1
85e88d45399b4d6381f8ccfe29946467657324c5

SHA256
e2ea8d803f19d18402eee3e3273f40769ffebc8db39091b801c9c83e0a299c5e

SHA512
b8ae9bd1c88b09be87de2cb328d4a993e1016a2424402e9d9e548c47cecb5a8643a2b19115bb966da9ef639ec1286f74bd2a10790963a96a488409450c9fd3e9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
d37f466b18bd332aaef4ad176d101b7a

SHA1
21093175a99efc3fac4168aa6482fbd18f7efdf9

SHA256
fa32043b774e0c13b2bef957eaf6ca5998be16601f82c98bef5bd04128f70611

SHA512
2ea7b0ba971d384b1b3405e84ecfa18bf1c6673e41daa2ff3d67f2fcd3ce1dd56420eeba3aec8d0382dd99c867c3fc9cae7e6a0b3ff0dda2bc7c4df54cbdd901

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
864B

MD5
cea9360bb2079b983fa3155054c02344

SHA1
619eea9571708e885c5fa8fdd72fdf49682defe1

SHA256
53aee8b898398d3ccaa2c71993491da17d7f918d7dd083b3d96a22ff9448594e

SHA512
115262ca8ae75ab0dec9593b84d8307f82e1fbc1d21832d88a709f1c2bec83e78e1deee5d16326abf6c5db4cce76bf5b26d251a2c169f26cba749a21ed1f2742

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\File System\Origins\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
7KB

MD5
02dd21856da1fdf062098ccf9b3acbf7

SHA1
edae9f64a4e12c1445613a53b323eb3ddc285361

SHA256
81b1965748b8b4a268ff6ab81af3db61264edc5afe3173462e0f506944f3884e

SHA512
c36bdeaba01e22b8519632d0b7aae3e263b817f1dc279bd0dbbc3c8cedfc5e6bea3f31c1d09c7271d6d88c3d0e588e880d584332bbf500b34bb01d59f91cb77a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
14KB

MD5
e2cb915907a968f039ce8d0f637938f6

SHA1
eb9437a689a7dc7a4d0df47e48b6b2eb8e96867b

SHA256
c5d988560cf9a0eeb24ac4b72f655ed97e690862081daed1693c872c1681ce46

SHA512
bfed994948d5ac444bafae79f40e9808a6cbff1b4b76cb1af67e80ed8864085fe4c363caf0210cf98d1dc4295444a9c039f29630772107a326b027b33df52951

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
11KB

MD5
a2221a7671b7f1bdd2ef01f124caf048

SHA1
5ccb753e9ffa6e8f4d19bd6a73c35856a5cb9c4f

SHA256
69ef9c83b400a23bc70ce0ed843e65a321a720e0b46315f2785125c6a1bea72d

SHA512
cd2ef3d6c6ab918297a65a13a5bbd77c3df5c14768f15fda34cc7aa2983c5dd873978b4d074cf9a7aec97049a7e83fa181e87a02b13518ba059734051ccd9480

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
12a565b6e82f1a6197375dcf28ba83d7

SHA1
10cf78043a8758435f236908c5ce8e66e1c5d50b

SHA256
58af90f4bf0bffcd3d693ca069fdae0433a618be8373935d9bd52ea33e24cb22

SHA512
10f04037e97269f0d357421227025c46c47d15e16a28f289d527354eed5c5a9388352b46f3d871da9481dba1e4d907b3468fccafbfa1cd8b636e77e3b9d6ffa8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
ce74c4cbf02dffebfc677918b2214576

SHA1
84a79c8db3096fe632dddda60892438296ea41b0

SHA256
9599b63c2a7dd97e868b700651ed2076d5fc10518ef1c8f95002e84f3a931a40

SHA512
3dfed9d1da7046bcb9886c5f73a5c5383357633ceb0258993b5e73e6d0911e740d9a50ae55a33cc6736639e4895f639b443d6693ce966137eb1c950fbfe62296

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
3KB

MD5
9ca0147dee825658a35e30cae75c3cf7

SHA1
c6bd1c7ca847f7fb1f00a638c557327a68e09666

SHA256
cb3b2c0033eab6ae9fad6f8c144bf492995054681727fdafc6f86cfd6e455b2a

SHA512
2a3302b4c6a6a642fc06cd0f025a8d77e8e0d4c42fd28d4125df41f277b37c23499f9092e828d2c8c6be5b23d7aac51659d345b54fa1af9371a66dea7eebdcdb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
5KB

MD5
c5cde1687d21d3e9e8d7f77542a39876

SHA1
76f7815a43a5d3cece3f880bdfcee4e0e8ac07f8

SHA256
b2af87cd69d39c1e6ca3de9cc171fdc952e78c625d692f54c0b5cbb1c8526bc7

SHA512
4fa121385bd66f0a2af180ff4e659acb57b932569492494db15460f2b9c6f3934d817f79e0f0a0725dc077bbe1c4ca056eb03443728798238639df70f221cf94

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
e1c1adaaa31fabbddf6f9ebf71f1106e

SHA1
8ad559a40939e1c3fa8cffcbc4c446521b214cac

SHA256
d5c76f0591078648f547586352b179427c9712ab3765d3dab55a9bd714897c9b

SHA512
f3e77a42f49487ff9d028c585bee3a507c9e92f2b4132f63bcb6b3de4263373762226befdb1a434c3e93d904eb3f40ab056e8c1732d3188de35ba11cf51c30f3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
ed667ba55d943385d10e20dd950be4ff

SHA1
ecdf149e7a9604113474e4e7a9285456ced197b9

SHA256
2e1d951ba768c19af17ed7ff5a2ce8cd3671c77f1ec0d36297203f5686e29954

SHA512
d1609a0719209b7466311d5c94c4a41eb4f5a030ed3a304796d10cf3d140935ff908a828e4b80ae6d50ff442ef277731483d9016d21ef59358e8c35dfa3d852a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
3a5e8b850af91832909e65de742b5d96

SHA1
829986a25c2e47a5555a045013113bdf2ef62e87

SHA256
2af76924ef8b7ca341686658ec66e9858c674586feede1f8f3297407a0d82a66

SHA512
359a409d6c45086b07c65184cc49919ef986a5ffbd24138b86708abe91b85a5539c4512ec6cebc22ce1ccac42103b1472076aa61014d8c626d10574dec253462

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
2KB

MD5
74743ed45778e8f1ce373e5cb4ef5e64

SHA1
7138a53a4c8ff7e433b92c10e077ff6fa800b92b

SHA256
cc32edfae458d8acc82242546d8ff5e8af3be81f2d8fb698a975739877e9a29a

SHA512
b0365b6177661816e976c65f173f04c3edfed3ea59a4548e31cba47326ce0ad00c87015e5aac0ebddd4bafafe9898be0282530b5bdaf6db90522133041ab7817

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
fda87b74c8e2ccdf27b60eab264b3240

SHA1
8c11c30a6285bb0b7b6e7708f704cc44df6dbdff

SHA256
4fdd0fc767669cd2d271df19318540c1b77a7d73194518b35f1fa5c070d8c8bb

SHA512
756494a54f6edde0bb835b81226fc6d60279b6d4a4f04dd28310337a0c87cef4d8c0320e55e80e0a01a76bbe5cca40cd205f0d7ae4786efb50cd7527852519b3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
dd73ee9f5cb81785ddfff30c5763f471

SHA1
bc9e1d8417f72ba48cc5a85c284d64479481568c

SHA256
f20f3ab0a30ec8ffab530c9272401a016f6a14f8a5d5f94e35386050779fb7e1

SHA512
06ed7e1144b4633f9784b390a6d4f88192d08b06e036426137d36ffaa14aec039c7b63e7a0890b978c69201e864df581573ee93713408eaf0d69c68aa834605b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
43a3ac5aabbef56f05efa7e2885e5872

SHA1
92103cccdb994c07f2678d204add1cc1fd9019f5

SHA256
4be733b9e2f8ea2273bf3040257b944ad099d5fe3b4cc7a951e58d3bf16bc375

SHA512
7852ddb3eed03a9ea1cbeac220ee628e65c659f47c1066ab39bf27ed50138ead448f963c9239239ba3e502318ad6865659c411f43e1ae9f8c6622c98bdcf84dd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
9db3368b2a16a263ed476aa66c2fc97c

SHA1
dd4de1b8664728d671039595e826742896c2a81a

SHA256
c0f7142130e1611f0b1a77ef3aa2034137838dc3dd573374018b36c503c57b58

SHA512
9e3f5d154fd9220ea088f754095d3c380e9bc0adbec7ec36afb9f396b8918766af6a18b9c09c9c51f270723dd2a7af343feff8a072a0529e1dee9990c6a1ea8a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
3abb076f1ebb918d153c6e787761ebe5

SHA1
4e3c710ca081549894ff6130a747ae725eb64462

SHA256
442b8d45b93404bc3b3c7c2c15bcf039f6fb5ffd88015c121586808479020246

SHA512
82201ac1ebe87f4985b5f5f90bc728facdf54479652dcd22e2a4aa5d1c0f31b572fca80c29128a930f3a2d6c444700f13bc8bae8a88551a7e322e33f96fea706

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
ad5d5b2d6686ca16ba54b4f3de7bb391

SHA1
ccd224976b54733da104f187ce9ac2a31ce2fae0

SHA256
994d0436b131479bdce5a9a17c266bf72b290eb2df0ea90c05f1b810b914ff7b

SHA512
635c304c925d495d5ea767da683967aa6cfb10370f093b8c6a03ad3278e21302c8f19f950256abc8b7d1903d1a0e02eaaff8382972126911546c6e98536ac77c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
2bcd9f839ba2be35d3e014c442dcf90b

SHA1
c00fc66ce85dd96b9c970cf773c0c7820a8218fd

SHA256
2367fa4a4cf4f890b2316a63db25fb1522b24bedcef36e4edfec70aa41d6ccfc

SHA512
e0bc9d54c6cefb82523b687ead2760f4c729672480cfdd0ca93210246043b5c6eea6b76c7c79bbfa8855b2e13edce3dd10b12a1e0e866e45e55b0bb5110785e9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
ec16ce287c560aadab664db8fafd4ce3

SHA1
e13089aceb66136cda872057c9e423b47920d0fe

SHA256
ddabca4d8f358a48768b9c40cbf346abfd1d6ddb02c78e6f1924dbfd8dbbba44

SHA512
2796cb8b6a8ff773777f4a13bb98468a7ff477d48d8561e09f113887e9eb9a5587b1d7c89100c0320cf9f4b73f656831ba5ee1c7a97392ee3631c6e1ac87b39f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
3d40044e078aaec349d6fe32aa3f7bb9

SHA1
d1f394013a03f74f348f3d84f3f960b3e5c061c0

SHA256
3539c4d6b1feaf655750ca4bdff72d14bac703d941c857da3f48af19d3b0bc59

SHA512
061df46006d1a1d29302dc3d67cb22a207bec9607f0aef9ec6298eb8c0f1c3bff890b26bc1d55dc5ebef061fc40e664751cdb5055e3ead1a7e0155edb78d87d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
3d9de5a0d68af7c1cb910fc8973afbca

SHA1
b4d5aed0d515b89ed9200ccfa50df20c87cee4af

SHA256
da5fa4b324087c85a793fb261d61fd4d425880a54e5766c9d97748ed70abbb76

SHA512
06da7ffa1ea6f9a664e85b6d940968201cb0b22566ad3e5fdb13354f8cfb63a3f4cfe72d26ec712806e5a8520781d8bbe5bdd8db47d1dd41af5d42dff782f74c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
bfbad8ce7ebc567cdae771ae07f2debf

SHA1
56b6c41ae1444c504bca801d4682374d2c16849a

SHA256
a45396e948305132c1c6f640c2ba9bb044737a4290039b512b237ecff93c1b12

SHA512
a6736fd87cc52ecb8ad27ec2bd2201aba19aa608842d0f7af87673c1c8fe6630a8dd88b4b0699821f2a8b136377a18c20c27fa7727388d6e93c70bbc886a759a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
7KB

MD5
b70f82cc2849d1141d6f455b7b4d37ad

SHA1
bb9fddef75b8de9ae90db642c6f4ec993299f4ac

SHA256
130ae64540b510d7c89d5a5a20e5a6f31aaa77fe8b0e3244db62a8390c92ab43

SHA512
f11fac98911be32bdd3b1c13f85f43a50640427a5fce35b178f8e6194a1f25f10d61c1f9c5ad2a1bad63613679704dcbe89c6faee1ee5359600d8e4e4e59ef7e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
58388a7022feb68e844e384a1aa480b3

SHA1
6709967456df3cfe64a097ae8dc8efd67cff6548

SHA256
b8541300199ff0f34b406c8cc85b32d7dbf0477325cc57e8653a9db7a390c625

SHA512
f9b0ea9c56d91bbc8137d7582c6748fc5c6534df6a1c67c8c4adbc6f10334e5deb21e3fccd780df1b43c004bbe1d53d62dfb862ddda87eb14dd6d21a1cff1bb5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
120B

MD5
d220dcdcf37956785092fba20ea71d78

SHA1
7b4f921ec1749d13be4d2bc9f309794061967dcb

SHA256
c82de6f2843639c0d7018560d19273527f1960842687e154876188ab02778220

SHA512
2cac56b3585d0133ffc2734373568925406085aa269679f65e0d351418a2a05e3316f8443fab0b1498516749c15c85171802df7cd5a12d45d02121a6cf097fb4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
56B

MD5
ae1bccd6831ebfe5ad03b482ee266e4f

SHA1
01f4179f48f1af383b275d7ee338dd160b6f558a

SHA256
1b11047e738f76c94c9d15ee981ec46b286a54def1a7852ca1ade7f908988649

SHA512
baf7ff6747f30e542c254f46a9678b9dbf42312933962c391b79eca6fcb615e4ba9283c00f554d6021e594f18c087899bc9b5362c41c0d6f862bba7fb9f83038

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe57a8e2.TMP

Filesize
120B

MD5
c406cfd073e8a2f620a38d829156f8a5

SHA1
943f4e9ab043335a77da0e2dc082c48539c68286

SHA256
1e05348a9a8000c9f63e16af0ccc2320a568ba6a4d074829046c616738e43a5d

SHA512
12d52587e955f24b3448406e7a963ab2af6a65620b07582fb9f316717e0ea72feaaf94932bda3ac1594f36e763ed1ccc265016b49858f55cc3da61e745219385

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
c6dfefd812232f47c5fb9cd0c5e126ce

SHA1
3cc4a713a06c2f662f0594ff673b57fd4b5b105b

SHA256
a81a44268789558ced9f95fb849a96549fbcc964a781b16c81de9a7ce978d7c7

SHA512
591bffe7c0b2b03239cc06f8d1edfaf57d574ffa11fa55c0b8cf53ce3496c156d46c9d9805a6ae1755aa0c00abf6ce986383d1ef85d6b09ad3f8dba09f16a797

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
86a87266bda230ad8e24121197fbb5a8

SHA1
7583fc15f5b7ea632ce3fb70997ccc208c1d0ecc

SHA256
aceb5d8a9c2bbfecb0ba29bf2c415a1e2c3c6c7b376396bd1f492bc08be28647

SHA512
2a06ec4bb87d596dbd1139b686dc91f9ee04f696060817e9e01b84343e9f4d03a2a0debad6b139dc957eeefae8d2ee79e37a4cf05ed39a94390e5a80501e5a68

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
e2a0b0a9d0bb714743c2732ffa7dcb3b

SHA1
7ca617d0df4ffc9bc48a3d21bdda734d6021ba02

SHA256
3a660e73fbd0d5c2ee9e58c964732b79da031e944fb710adf34e25983a91b030

SHA512
249d55bc937aa0ea5cd9c69fac0aaf64267cce32e0c7cebafbc97672a62199d99eac1cad0d5234f853b3150a6f852b9e984e131093ea5411b3f5e11a5b16bdd8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
7b8d4cf4c20de8b8661536cdb88e82c7

SHA1
204df9528063841d7a3e970719649ad771943fce

SHA256
458445c7409cdc6af49b9f64222a962a4f4ddf9189474dcef87aea8e2f62bc15

SHA512
4f8b59a12bcc44699d4d335439bb09fce21262b65cc1b7e014b3a54301742a813df90b53bba72b27928696e782d6715ffcc3dbc3d60b7291bc861e463b0838d9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
1411664a1c58657593137f2e6ccb44bb

SHA1
cf38959412b4aeca4c2273f913bc8e29b3c35c8c

SHA256
fca563b18da4840c0f62207a9fc3c76ea03a3a2e4dc4eeac198884dbed537fbf

SHA512
ff24b444427597b01ad8feebd35f66e5f01d3b0ef6e9ceea4b9fff18c670bd5c9ab9f1468079586761832a33d7980efe0256c66885664cc0d163c16dcd30b7cc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
9e9c83c5ab1a720c4bdb8a74bf7e942d

SHA1
a737a1f66163531e34f556eb8aaf91fc5aa485ff

SHA256
a0d31d55d4d4c27146271954a8bb927081d88d780677c18affab81af3b23d5b8

SHA512
d8a920d0fd6be21bfb3b408071f06fcf7eaa49697d38df433e2278bd17b382f43696910933fc4326ad037a520d87b7eba440e8542e8e487c61678ee88c624ce1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
104KB

MD5
4ed905d5ec551f2309e487d9de15a6e8

SHA1
23cc15f567740f26b8cfbf27f8c28672eb49a25e

SHA256
c4389e1d94f1a17dd21cba065a7d73042b79be73ba08ee0213337871c601ffba

SHA512
f104777a41c314f98894f72deb84892bedf2d07392fffad2fd4241e2aa3d3c2147b0ecbfa076195c00e3b59c186225dc22d55ece5574e9ef3edb5a1d9126805c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
3806014bac0577dfebfc9a22bf572d18

SHA1
da7e27bc1d7317c3c1856598eddd0f1116fa663f

SHA256
6ac6228029b97551cca40942f7d2eb5125fff1c3aa9eb34c9f790e7f886afe27

SHA512
d6af3c3d559a9588f5d01be5f74c4fe4a8f3ce398b37cd0e0e7263e3b2fcb959f2c69bced425bcfe9b5d4e7c7f21c6e3c8900085a9def3aa5eb3c158d7818da6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
104KB

MD5
5c3519918943d46b4b8791176599a345

SHA1
a2cc728e8149efee3396057a73a38798968aa21a

SHA256
f71d66b96afe8e5b8870b46f9a236d73b5ebc068c10cdc8412c4d6ddf69ea9ed

SHA512
0b731aa2dc5d7812a608dc6b61cdcb398093fab2f3610e4e13b83dbf4a190c199f2103dc5642c2aab79c3f7f701cf4480060d087cae17c6afaeb5ed50b5ea70e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
122KB

MD5
ffee14db95a556c7bd07b308dd5bc1cb

SHA1
46dcaf9e4a46f4e57c77a750b5275e80a3c1b9fd

SHA256
ebcb0badbda4feb10c54a5b146b41e4d687db121d40f71021d89e3c8a567204b

SHA512
c0da8262be01755da1e76c797f10e60bfd37e32eda0421216445bcdfeb3d97636df4249b0fbaacf147b053e4f90218c35061ac72a52ac36dc7d48fa2836a71bc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
103KB

MD5
b49490f336e0dea6cf3c954e9204a823

SHA1
5af0c488ebd11c326cdbd04e3aef859bfe9a631a

SHA256
58573fe3baf82ff1031aed52e3bc6098c7e3c8ffec2f5072c1088c8248c51cb5

SHA512
9851a655bbd04de84b641c4fb4e7e239a1e770f4401f2a35ff0dac258a1556b56946a642d3827719322abeb14e66436ec61e1bd53dad184a0b7d11cbe0a03bd5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

Filesize
111KB

MD5
e6f3bf7e3ced74c6eec811fc7c43657e

SHA1
80fa2c35a37c83ca2443ecbc4ba0c02594a8ea69

SHA256
26837bd1a810881dce4c145b63806c63428a1536e98363ca83862dc4a5747aa5

SHA512
c409381ca861d7bb24a489d75a5c8b16742e85c480b76b4370836a4bedf994a3f58f44527cbbea51e02bed03113b6809f3fbca29f32384c5f7679a87d4cae074

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache~RFe59cb36.TMP

Filesize
105KB

MD5
e48b8a25e2296c63d67da36714969401

SHA1
fa45d677d4c41d66cb5ce086c06b155da36ef741

SHA256
302a84fcf77f32a4a690e05e79a3249b0dbfd7a80344d57feb85e7a3cf297415

SHA512
b0da6f043d9ef93dffb2b16671ec2fa8620f8c0c7b6bd0aa83ac2a0da91b9bf1278ea8e4c0f7c613c3e8b5d809b50ebcc3439831228f2d4f0ceb537d6266cd99

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PRICache\1601268389\3877292338.pri

Filesize
162KB

MD5
0d02b03a068d671348931cc20c048422

SHA1
67b6deacf1303acfcbab0b158157fdc03a02c8d5

SHA256
44f4263d65889ea8f0db3c6e31a956a4664e9200aba2612c9be7016feeb323c0

SHA512
805e7b4fafed39dec5ecc2ede0c65b6e103e6757e0bd43ecdce7c00932f59e3e7a68d2ea0818244dfeb691b022c1ccca590a3f4239f99e1cd8a29ba66daed358

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PRICache\4183903823\810424605.pri

Filesize
2KB

MD5
a2942665b12ed000cd2ac95adef8e0cc

SHA1
ac194f8d30f659131d1c73af8d44e81eccab7fde

SHA256
bdc5de6c42c523a333c26160d212c62385b03f5ebdae5aa8c5d025ff3f8aa374

SHA512
4e5ba962ba97656974c390b45302d60f4c82d604feb6199d44e80497a40d0b0a9fd119ca17ac184809ca0821ab6813292892c433ed7277f65c275f37a96070b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\SUPERSetup\setup.dll

Filesize
106KB

MD5
dfa33ee864f5957e57e61fada73f6087

SHA1
9fbad7ecf31bf1a3d6fdc87884a36eda8dab3cc9

SHA256
ffeac88714650d325c25edfb2765d5220fe7e33b7af43743ba9df83dd1c6eed3

SHA512
beaeca2bd37b7a4162943800d4e9f75e962fd191b86d6ab28b51149eba979903b4af39fa8a9dbcb15df0f696db4f409383b70d5fef3e101863d87360f031af62

Download Submit
C:\Users\Admin\AppData\Local\Temp\SUPERSetup\side_x.bmp

Filesize
145KB

MD5
d7fd7140ab6a12327e4bb3e4a7cec361

SHA1
54e6171e18df101e4104c6ea737b8b7ed08b3608

SHA256
e8876d6faaae794ac0c646b0b15a11c8aee55cd12d02215c950ff310bd247998

SHA512
b87871d6a618baf2191d5e0291289f30ad171949f9e0a05f5009fbc735437e031aec1e0018d6acea8b3649deb2185295cca48ce7ca4d127b766ee266b6948fd0

Download Submit
C:\Users\Admin\AppData\Local\Temp\SUPERSetup\top.bmp

Filesize
38KB

MD5
483e1e28067279237acbdd02c3d3cc0e

SHA1
aade173e4f4e50f0564ce48e782f60ce1b1cf809

SHA256
29e17b288eb7b261501f22b58a0c6becba2122e495580c26bf4ac3cc124cfb5e

SHA512
9ffcd773d5c514f19e188ec23060f4e1f251783d0d9f7cf49b3cb43963ebaee40a14552bc01dfaf0ace3bc8f3704c2423dd2a0b05c94e5f8d2ad3b4d558c5ab4

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
6KB

MD5
f1a17a55829184128b7e992fe6fd59a9

SHA1
bbe6846635d6572f15c19c0dbc0fcc43ad2e112b

SHA256
b69368349cf8e07f4d761e4f1e185d968c895ec823b1e4c87b3bb08557ecad63

SHA512
d7674845d9a7b1721765897ee4990501265b409f5da71532ad89146c6c20986c4e2d5196247e873d6e2b51a6dc83cf56ee96421919360b84a6172c6d39df600e

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
8KB

MD5
e88c5894ad7b6caba4df0490ec39f675

SHA1
39c2a5c6f7847a02a4e9e179ba197de263d2a892

SHA256
562a90aa844c13f0447f3e062a8eaabfb066f27d7aa4b91aaa90e28c3a67e0c4

SHA512
dddf2766342e0248b5d21873f64498be7bf39133e3825d3d9e4a24f262d1d61fb039551102569895582c6d6bdd942e9a3975e30525df470cffab9a6b29c51767

Download Submit
C:\Users\Admin\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SAS_CURRENTUSER.DB3

Filesize
6KB

MD5
3ade8fbd38b85198d959219791ca3016

SHA1
061c7b3d34b5886d8f80203bba66006aaa6de490

SHA256
98f1725adca71da402f80cb7c6864a6665213302a4c84145b8b9e45de5ada8ba

SHA512
f69b6f8cd880888fef2dba0c20a0c5652d8ecfebebe1f9742481c82e2c53bf6d14767f2996de041df7ed291977c9c4bc3bddfdea405a0136c78190bfb68b7243

Download Submit
C:\Users\Admin\AppData\Roaming\SUPERAntiSpyware.com\SUPERAntiSpyware\SAS_CURRENTUSER.DB3

Filesize
6KB

MD5
acaf2957f2ade50f1b5a926bb68f62f7

SHA1
02775a0ee056079be38394fa684fea638ea7fe35

SHA256
5d13cd5ee96266d2da79b7ef004d076055e0a3d53192bbecb1fe80a6c29503c2

SHA512
e59513666827a77c3242a5ba0cc8d8ac75c8864a357c764d74f03b786efecac2a8eed5f0c2d66c8fa7a5a7b62c9e7321acc59a3ccca409b8cee03d8783501188

Download Submit
C:\Users\Admin\Downloads\Counter-Strike-classic.exe

Filesize
199.9MB

MD5
c2ffc44b7791581326bfba4d0a514bdc

SHA1
5ec656412e34e4887b6e6217aa05f8046b0988d4

SHA256
df935d417c0c629bb13c1d64a7d4c5091593efb10385f08890d0b6b762ffe3c5

SHA512
7bd8291095dca401c22dfd15bc6e2e81e262f966674b80d72d157ba1c4646b7565ee1721cda4a62d6b246eb8f6bbb06407f7d9285637821d998cef78ba599044

Download Submit
C:\Users\Admin\Downloads\Counter-Strike-classic.exe

Filesize
199.9MB

MD5
c2ffc44b7791581326bfba4d0a514bdc

SHA1
5ec656412e34e4887b6e6217aa05f8046b0988d4

SHA256
df935d417c0c629bb13c1d64a7d4c5091593efb10385f08890d0b6b762ffe3c5

SHA512
7bd8291095dca401c22dfd15bc6e2e81e262f966674b80d72d157ba1c4646b7565ee1721cda4a62d6b246eb8f6bbb06407f7d9285637821d998cef78ba599044

Download Submit
C:\Users\Admin\Downloads\Counter-Strike-classic.exe

Filesize
199.9MB

MD5
c2ffc44b7791581326bfba4d0a514bdc

SHA1
5ec656412e34e4887b6e6217aa05f8046b0988d4

SHA256
df935d417c0c629bb13c1d64a7d4c5091593efb10385f08890d0b6b762ffe3c5

SHA512
7bd8291095dca401c22dfd15bc6e2e81e262f966674b80d72d157ba1c4646b7565ee1721cda4a62d6b246eb8f6bbb06407f7d9285637821d998cef78ba599044

Download Submit
C:\Users\Admin\Downloads\SUPERAntiSpywarePro.exe

Filesize
165.0MB

MD5
2ca7b723cd2b8dcddffda47896f5b235

SHA1
3c1f77a41c65f347d1ef8062be1a255543ef9151

SHA256
8d35c0ee3e356ec69c20c828fa8d54009e406a4332d73ec6e30792366841d64b

SHA512
c3c287a08d6fa7bed8525713f488a495e79e650fa5efb44cd34e51da787a1993e491a122bb79f9d4e16d54b19255b33cbfb26aa365608772e70efaa92705ff43

Download Submit
C:\Users\Admin\Downloads\SUPERAntiSpywarePro.exe

Filesize
165.0MB

MD5
2ca7b723cd2b8dcddffda47896f5b235

SHA1
3c1f77a41c65f347d1ef8062be1a255543ef9151

SHA256
8d35c0ee3e356ec69c20c828fa8d54009e406a4332d73ec6e30792366841d64b

SHA512
c3c287a08d6fa7bed8525713f488a495e79e650fa5efb44cd34e51da787a1993e491a122bb79f9d4e16d54b19255b33cbfb26aa365608772e70efaa92705ff43

Download Submit
C:\Users\Admin\Downloads\SUPERAntiSpywarePro.exe

Filesize
165.0MB

MD5
2ca7b723cd2b8dcddffda47896f5b235

SHA1
3c1f77a41c65f347d1ef8062be1a255543ef9151

SHA256
8d35c0ee3e356ec69c20c828fa8d54009e406a4332d73ec6e30792366841d64b

SHA512
c3c287a08d6fa7bed8525713f488a495e79e650fa5efb44cd34e51da787a1993e491a122bb79f9d4e16d54b19255b33cbfb26aa365608772e70efaa92705ff43

Download Submit
C:\Windows\Media\nost.exe

Filesize
195.1MB

MD5
558e7839cdcb84d030596a4560ee6ecd

SHA1
b5d05e8cd811df046ae504145cb63ef87e3f757d

SHA256
19c5c1fa0f2baa034eb4a4b14966491daf9eeb08fcd7a9183dcc94f2af277477

SHA512
6d2c70e0d0d2e997e04e8da1347f7153e3b68b0cd790f412dc4ce3920410df97280cedd78c71b4e9ef1d659fad79ed84ce7ae96e7ec761d0556fc356c6c6906e

Download Submit
C:\Windows\Media\nost.exe

Filesize
195.1MB

MD5
558e7839cdcb84d030596a4560ee6ecd

SHA1
b5d05e8cd811df046ae504145cb63ef87e3f757d

SHA256
19c5c1fa0f2baa034eb4a4b14966491daf9eeb08fcd7a9183dcc94f2af277477

SHA512
6d2c70e0d0d2e997e04e8da1347f7153e3b68b0cd790f412dc4ce3920410df97280cedd78c71b4e9ef1d659fad79ed84ce7ae96e7ec761d0556fc356c6c6906e

Download Submit
C:\Windows\Media\nost.exe

Filesize
195.1MB

MD5
558e7839cdcb84d030596a4560ee6ecd

SHA1
b5d05e8cd811df046ae504145cb63ef87e3f757d

SHA256
19c5c1fa0f2baa034eb4a4b14966491daf9eeb08fcd7a9183dcc94f2af277477

SHA512
6d2c70e0d0d2e997e04e8da1347f7153e3b68b0cd790f412dc4ce3920410df97280cedd78c71b4e9ef1d659fad79ed84ce7ae96e7ec761d0556fc356c6c6906e

Download Submit
C:\Windows\System32\catroot2\dberr.txt

Filesize
184KB

MD5
3d34fb3f102e42679b65857802e667ec

SHA1
cb7ced916e46ba8ba6e941086d0a9fb9d9bd5a25

SHA256
98d15fe53b36a74171ddae6bdc429d29f55c7c19b9d83b0db0aabdaeadcc6d43

SHA512
d69d1532d86fb24a2d344eec2df3eb149194393e8ffe8283b73e4c21f1f4e0e02cb2957a5eef4890ea614de7b17f3843ca16457863482e0d5d7b71885f8f29e1

Download Submit
C:\game\cs16new_rus\cstrike\events\awp.sc

Filesize
9B

MD5
d14f11b47b92d829b6ec4912ca7349e8

SHA1
86b8dd77a055a3d1d154022492ed7d7e4ca371a5

SHA256
89a0f0c5f04ea6da99b4a48fb642b968d32350aa3e6697da24d2736b7bb195d0

SHA512
f19f860c86297921b972338dd0ee73241b3b822d1b9d977cee39e45891f1d57bf144cd676eb2e7e35985969613dff0896473dd8e89ad07c66e79ac94510fb5d7

Download Submit
C:\game\cs16new_rus\cstrike\events\deagle.sc

Filesize
11B

MD5
e41aa21f57500b1b71802b76fcaaecd1

SHA1
554eaebf267f8aaceb4e9b18e28dfa5131168a09

SHA256
2092e6c9862b42fe817a552f0ecf05a58a2609b2424402404a796c325bdf2098

SHA512
4c2b2e183bb68c16b383532aa03d5dbaebebde35b843ff442b84f6c9dba655868e7e7ba76b5b92d003db1ac73ebdd2aed5933595b35d073c702b1e841d94269d

Download Submit
C:\game\cs16new_rus\cstrike\game.ico

Filesize
158KB

MD5
51ce242b4996fade5d978202470cd9fa

SHA1
80e60af84397e78a5fcf5825e6538334933ea288

SHA256
bc38d7bbb43fbdd2889f9962b79a318f59e6a0571332c0cb0ad0823a2756eca7

SHA512
2491ba8407e0dbd2095aa79bde5e38cb25d7294a73919fe61ae66f0bbe7c9d7081ce87ee178dc48208fe801dabedc362dfb9cd74f2e37d8636324243d819fed9

Download Submit
C:\game\cs16new_rus\cstrike\gfx\detail\cs_office_usc\wall_21_usc.tga

Filesize
497KB

MD5
979d5f12b9a8065b7b74f397ee6dd765

SHA1
15ad0ef78c4e42e7e87b1ce4593db58672fc328f

SHA256
dd9bad0cc30616dbdfb7c0f61e2195e4b17982df4422fc190d7152104f04895b

SHA512
403a84547bf284ec50d2c59e71a5bc1e78ed88f2ab85c597c5040ef62d12204e088b308b347840cea59051f14f64f9b135431e83c2cf424d8af1aafe4c8f5daa

Download Submit
C:\game\cs16new_rus\cstrike\gfx\env\backalleydn.tga

Filesize
192KB

MD5
9fdd1b5a25c59e13091bfe30a869be19

SHA1
aa0ae6346f02d8691173cbc22326307bef7e33c5

SHA256
fbeea2b37b440aa44a8a000416067ec25c40f3382f858a6b2ae8625a98e8e4da

SHA512
a06018b75ad312a82171efb3275857cec0aa561cb39756a8c2e6286709e63112a64d060dd98448eafd86b86409bcbcb3955ed755510e3c73bb45f74a28516f0c

Download Submit
C:\game\cs16new_rus\cstrike\gfx\vgui\hegrenade.tga

Filesize
128KB

MD5
689ff54b631b2d6484360ebfeb4db40b

SHA1
b910825b0e4f68e2748035c185121d23548f4d7f

SHA256
3eafa5253f75d8d875e33735aa3593defd7158f589f79fd1db3f959637727391

SHA512
f168a1adb47de969a908fcb7ed6bce51659d62a58da5ccb6fd663f1ccdde66fd331d8a9420590f04e0f37c391adbb734d6f784885afc759f75a08db18285e906

Download Submit
C:\game\cs16new_rus\cstrike\gfx\vgui\kevlar_helmet.tga

Filesize
128KB

MD5
31d80cdc3818eeafd3ca28d5fcd336ee

SHA1
4ef5b5f7ea3b5ff74978a247386111210e5e3f6c

SHA256
9965f2a662f293cdf978df9346b611c38cebb22e7612206516141d85b459b711

SHA512
37eb6ae89c5dfc4c2f1a2e5b8638544546ca8eb94742afc6b35f0a000605f6bceef860ae0a257ddbb2e9687cf12893b9979d279e7534e00970f4a9faf8b2264a

Download Submit
C:\game\cs16new_rus\cstrike\gfx\vgui\mp5.tga

Filesize
128KB

MD5
8f81a5c99134e03be3bbbaca938174d6

SHA1
23b12b6ec08950370967446e4b7c33f18de9fabf

SHA256
1c4eb081e6dee76aedf965d6e092f6d1b6ed16da2a6628d192baef9d8978eb2f

SHA512
0d3c9e63061d5ec2f15add9d938a11ce9f4e88ce24934f7951854703b06ead537e400919629d81c2f4ea38e37818c1fb76ceff8f191483d19f672fb2f9163928

Download Submit
C:\game\cs16new_rus\cstrike\gfx\vgui\p228.tga

Filesize
128KB

MD5
8aa5f3774c87e501403a7ee33c8bf5ac

SHA1
4b7ee9c96c0447348bd3742964ac8083ad70ab46

SHA256
a7d026358f15a6757675b2744a69ec195dac359cf3860fc7820e7ac9994e3e9d

SHA512
dae5bb75c1e72dc934c7785c20087237356cffa154d8a95f97a6960ecd0457fb1d0d2296035978900c35cb5fcc89ac62b570880a0078aae0e853b9dd89850e10

Download Submit
C:\game\cs16new_rus\cstrike\models\orange.mdl

Filesize
15KB

MD5
f14b062b101904f583e08c1566b54c62

SHA1
78861b98e5e81e9cbdfaa58346852b0beab92cc8

SHA256
a0d966a613a07719f3c16a16dc56e066e67a37f783004a6b98d0606a7d7b7c2e

SHA512
96845df3db85768eb7199102a6a883830b0a9df8ef7cfea5ff1de73b80ec3e93c21c39dfba687035df0785d66583c6a68aac07a53c99118bf25c406ac2964af7

Download Submit
C:\game\cs16new_rus\cstrike\models\oranget.mdl

Filesize
150KB

MD5
d2f9bfbdfab24f89f6d2ddbb93adbc91

SHA1
282bacc14bff72671057a8ec708497e317c5144a

SHA256
1af4daafab2661cea253dd1c5f5cce5d7144d56cb76706820773c678cac8ee35

SHA512
2701e68cd88ba4ec28257be2c45cb6806376ab45bb6f2114ef3b46f7711edf1c380fdf640bc5aebf66df339d777b1408bf2f0c982f456a050abaa71b67d7ec27

Download Submit
C:\game\cs16new_rus\cstrike\models\p_usp_nosil.mdl

Filesize
37KB

MD5
652dde40f26996d66c2ae17391bb3dc8

SHA1
9b319bc780beb4d16b8f9f26a0c61bc2ab4aed62

SHA256
292fecbfbca93be5cac89a2a139c609a77530a27e81d547b6e3741dcbfd8bb9b

SHA512
0e25f3f6a774c3b8e3f97db7d63026b2ab1d84f008ed046f389b18c202d4941d2d06857b0d5df13a9a0f022dd1ac71bbf20ee1eb40cde16d74d7c649f4e9cd02

Download Submit
C:\game\cs16new_rus\cstrike\models\player.mdl

Filesize
2.2MB

MD5
52d571170973589af13778226ec1c2e4

SHA1
37ff26b8601b2983a67ff85634ed64dc5fa56cdb

SHA256
939d4c34cb8b7339afc286feddd45c5d88f103e3a9ae69066ab372da276f3b0e

SHA512
f84808140913810fd11de6005cdd6186152c17fbe65ad099cca6092b3c8ad3e4d56de590220c39a86f0e6f12a67a38da9cfe0c0de40cd28015ecf71feac0d749

Download Submit
C:\game\cs16new_rus\cstrike\models\truck.mdl

Filesize
212KB

MD5
c83d00749a8de6252f562a64fb2b7972

SHA1
b73554a99f795b222328a6028e947bb9d2602b56

SHA256
5644bf4f0093c1f126950cf70a2fb8cef8103c72f369e99ac4d2c7bbff6801e2

SHA512
56a26be5a46990c9643e0afc6caa29e099f7f9297303c37c2211d1146e0c6a5b9b973a864bbb225d5c6938b6b78b7a3abdcddae8d025e34c9fc4e680788d6ce5

Download Submit
C:\game\cs16new_rus\cstrike\models\v_hegrenade.mdl

Filesize
240KB

MD5
df3efdceb49b1eb0c3856d8a297bcfd7

SHA1
e7d540e67dfde72cd1d314323bc597d4cf6f1a2d

SHA256
86f6a5ea2f4fa80b4ce86abb62007b69ea3c500ca0531498630bad1230b0ff41

SHA512
eb42f362ce37cab0d0e3a53681b1cecc507dc7a9d43e6ed0cae03864eeee695a13dc4017a7bae676c7c5ceeef24459cbdd7028679c9459f70dbd983dc4d9be1d

Download Submit
C:\game\cs16new_rus\cstrike\models\w_kevlar.mdl

Filesize
20KB

MD5
0d0b376429b7d62707dff6dc60e95a98

SHA1
f41e8942a54ea395aabb81bffd9c99cada299852

SHA256
0efa0d78cf766e5c7dcdfeec4a442ea9b2051e921c130ccb2c52461971e0fe7e

SHA512
75b86c571826bcb3308e2be2e44a9227b7d8d758c447323904db6036450a1d38582736ec0a07aaa587105c10973b91e3c3bb937a93d4333aea00b8e21f5e8af3

Download Submit
C:\game\cs16new_rus\cstrike\resource\BackgroundLoadingLayout.txt

Filesize
845B

MD5
d80f724a3dd2f4124de1dbc9f010afe7

SHA1
7b0baa53f0234b65ecfdc3b7d6423d3ce4a68904

SHA256
ad1a747ff2719c346fc802a45f0e1f2167df6ce8d0cfd81a8708072216d59d8f

SHA512
98ac290d48f3d46665f19ba8b8f67e700cabd77836fd6743ec756cea6d9e46da38d14ef83c5109ab0931765a2a837b8c7edca5e3b2e7f015d8fd438e585ea5d8

Download Submit
C:\game\cs16new_rus\cstrike\resource\LoadingDialogNoBanner.res

Filesize
841B

MD5
1e9788990aec64ec771ea60af961a18a

SHA1
9d2df29c6c5982f42eaffbc0799f1f0efdc9d5e1

SHA256
abf93f8f110a4e22a1e900300f9c7fe75d56af1b7ffadb34a3b2612905ad1205

SHA512
bb89b7bc339f449bc991a091ce3e6e42c35e2f0e60fcfb43ce89496a126410fc72163e4e4f0e7ec71f680696d06b7c712a60d8f77326057db6f5741e29ff100c

Download Submit
C:\game\cs16new_rus\cstrike\resource\game_menu_mouseover.tga

Filesize
25KB

MD5
b36770a623540b29126b7e59825baba7

SHA1
1d9687967f4ff66169ebeade7bd7f1a6d813e919

SHA256
2e89fd1e81a94d42fed066a19f7c86a81b4b5cf033f36dc9e5e475afc5a466d1

SHA512
d054597d5d8a32f22ac571320f6947b3f2bb47e15e695a9c0ffd771203f4a157d4c5feb389b38a8677947847f89abbd33b08f29e9dbbfd7699fb3230bb7d7533

Download Submit
C:\game\cs16new_rus\cstrike\resource\icon_steam_disabled.tga

Filesize
1KB

MD5
a8f2821a72929b9b61b3126091f59511

SHA1
b55f6f2bc38d49fdd363cbbc8132cab9c94cdb30

SHA256
ae5f85e334d1793bc830d27d05a8170e791701228a006b1fb4843b63565bfc4a

SHA512
eaea71795737029373c055ecb7170a40e980cf5db330dc2f98452843dd7904964dbecb94c8e64b0bfc19a8d78d593eeeb8372ac459f52a3dce1ef2b7998c2d75

Download Submit
C:\game\cs16new_rus\cstrike\resource\valve_russian.txt

Filesize
16KB

MD5
0e5320622fe6e237df04d3c6700a5280

SHA1
967d38355d5a57aaf46aaa01a5cfd38de53a8846

SHA256
2303b77bd3786a0c5daa402ca8653c9af7b81913ed007315923cc37dc52909a8

SHA512
32e9ba063601cdcd9a1e6328ab182693ca61cc5f9c51049066156fc3e730d0c3893b55ceab7fdd50926afec7cf572adda9e91a97d5dc5075ebe9c3dd34c4e862

Download Submit
C:\game\cs16new_rus\cstrike\resource\vgui_russian.txt

Filesize
12KB

MD5
9168ac98e7d139172eaffbfa1830b9cf

SHA1
1046fbad13bb82f3e3a16b21606abdf0122e08d7

SHA256
08a70e8818d92c612b75bcbc28aa856017b47df8f3ad098a0bf7417bcf4975cc

SHA512
7a9a2b9fc81f6c34f4c4706a42c77d80a3839fa706862aa8cfde3ed8ef6398d57d770937669034cbdd41c7359ba082cef9c14489fee3a4bcdd9115d96adf1dd9

Download Submit
C:\game\cs16new_rus\cstrike\save

Filesize
32B

MD5
e6785ab3d30ef163b68d9eee76496bb1

SHA1
75c41e4febb516c037083e42eff4bc80e5a177f5

SHA256
fd21cc5bae5d940e47dd1a3ce75e28024075896efe2206875d15d7c7696cb03b

SHA512
645492671df6fc1662f842147552bd4c93e9e722ac6dc7e9a269ac34a04f04a51f4607ad4ccc2c4e2d07c7f5d92402d4d311a1351052046fc7153748b3297bf7

Download Submit
C:\game\cs16new_rus\cstrike\sound\misc\cow.wav

Filesize
22KB

MD5
04ba4ab857e2af4c66765cb111b155b1

SHA1
295d693ea8acd4c60f3d43178102f545df4eb0f3

SHA256
beb46165e47796d83cde58d8eab1e1c2ee98c3cbaf5c9a237023846252b9fe07

SHA512
4bb0a20dcc49428cb6c92924c52abd82043e4539b84c883c4e7ae543eb61490eb18d6e0cacde77c1bd3dce0ef1571f94d0dd44553822b9f59c6c87bbe85ac47e

Download Submit
C:\game\cs16new_rus\cstrike\sound\misc\sheep.wav

Filesize
33KB

MD5
dece445cf19d136a6d63fd2257d76c2e

SHA1
96f673a1b7133e170feea7450f4c0a6c86bdddb4

SHA256
79da45b8af813e701e14c9468050716ea74b2344ceb69d8f9cdae4ec103f4e26

SHA512
5f336c3564db9f3bfdc567179bad847ce0957874874a876ae2276ed604db9e46a0ebe4f23765c492a84e797bc5fe869d53b9bfe9a8c9021149ccd8aac7155d01

Download Submit
C:\game\cs16new_rus\cstrike\sound\plats\vehicle7.wav

Filesize
48KB

MD5
986c5239062f646cc3fb80ea0a21d4d0

SHA1
6ad28c7248b44ab456d6e60d6b9e067fda8e4ce7

SHA256
a97ae9246e33d39f63971a3efc2b0eca9fa4f8496cc1744dc2128f4906c9ddf6

SHA512
f5f5013bb9f398a3779f2af1bee3414c622aa544227667d1adcab2e6ef699ead0666dc3bb0c3c88812d973691c7edde8d0daa84ba19831a308e3fb29ee3def86

Download Submit
C:\game\cs16new_rus\cstrike\sound\plats\vehicle_start1.wav

Filesize
32KB

MD5
31eba199827cbd827edaa33db0c4d2b6

SHA1
ab0d8e0f3ed37098c8f2416e7515b5c7009f2877

SHA256
a12b5ebd21782f35a0b72bf2a1819bb279ef80b41dc4c9db018134211b02fda0

SHA512
24aad7ffc3d039925c1b9ad6e3ba921a5f583a7ff85674e77ad80c2fda434f4b53f6e853a66dd79d9d4dd94ebcec3afac2318cff6f840ccabd6170619c6e7125

Download Submit
C:\game\cs16new_rus\cstrike\sound\player\pl_pain5.wav

Filesize
6KB

MD5
c0fb3625cc1585cd433c32d7735093c0

SHA1
00bfc4a048b1040bb6bda52ec43e67d99097297a

SHA256
7d47f61514a0ae116b6fa8cd93563c52885624d0b7d71011e78f2177acb203ea

SHA512
da38a127fa81bd64080ddd8d3178778caa7d64e136ef83c03bfefebcd3278474ec5dddc3ba384394f392b0074593e808165d5373a4d0a365f9443382938dcda0

Download Submit
C:\game\cs16new_rus\cstrike\sound\player\pl_pain6.wav

Filesize
7KB

MD5
c7f10685ff1747bdc02343681469d3c0

SHA1
2cd369c18bc47d6a1f710c19c7c3bdb44a373f31

SHA256
47355ecc7540834db51b7e5184a08ce7aeee6d2d2092d485e1f0742d678ace8b

SHA512
7dd78bfbe97909d045450aa0cdbc62cb5c5d8a2b763533a8c47910a3e7a7208337f21a4eed7fb6ccfade701245bf44a18a17249c06d08bba86eec196ccb7469b

Download Submit
C:\game\cs16new_rus\cstrike\sound\player\pl_shot1.wav

Filesize
6KB

MD5
e5368c8411d0664461ae61c8d75ec269

SHA1
e23025a19b0ed3075b9297565e2db42a20e1cea2

SHA256
dbe1f165e3e986dfbe97551c98a761c133040c26f020f54ccebcbef99e4516b1

SHA512
9fd4fc40566985fb21834303585ecf6fd1d56d1ca476af4f01f3ce68a6678c02690ac9ff3e87143ef2c4f62fd2051e3418f4a8aa33a14283fac4ea0b6233657e

Download Submit
C:\game\cs16new_rus\cstrike\sound\radio\letsgo.wav

Filesize
20KB

MD5
8ae3d5c09a7610c164569bea18467602

SHA1
0d242feb45a787a7329644aef6d71b7f9aa22f58

SHA256
34d6b21367fd851c5e78a952f208f0fe1653ff688e1cdcd2ac17aedd2ad29437

SHA512
a7f5caee9890eb6cd2f0e48c2c8a0fe657f2119c3ef53724a1636ab7c981bee8f776c6401adb97ef8048ef215da465783a4cf0a8820a5109c05b124b4758665c

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\ak47-2.wav

Filesize
25KB

MD5
fadf055f1bcb523b01caab44a3ec3119

SHA1
9a08539cee6451e8b6eff265e529201e06ff680a

SHA256
76f1f571d72c1a0c30a682b7767db1d32a8282fd555498740cdadd1b7385c61e

SHA512
52c5cbca4f41472b36b109bf95ebc4693433902750482c919b44233d8488e10695e06cab0ea79a88eb6ae314fa6b879f70725cb4729cb39769a8fb456079f48b

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\c4_beep2.wav

Filesize
32KB

MD5
72608220f816dab6cbf84173d5afb54e

SHA1
931fecf4f25d742949e50d4abf427cceb58f00f9

SHA256
6a6d5a7b9eca859811e4917acb000a4a501c05611bd718f811a341f749fc63aa

SHA512
d99f2b228d368ce9454a70089de0cc790f1255bdba210794f4115d5f0d169a98d9fb9075dfe6a4a5e2efe4a75ac494f582e72454615735b2d85e96775229e899

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\de_deploy.wav

Filesize
10KB

MD5
4b734d9385e8488462429ec4ce5e5317

SHA1
f2beef1d46ba5761284a55c0e5efbccc89ed9db2

SHA256
ee25642d00d071694c0ef8a89e75eb524ec90a79df8908df76911435571b6884

SHA512
8d661cf3db8adcb185c75764703d7d6f4b32a2ff7ecca1d6914b7e72789231a715ce5f41b07923fd1b7f239d8c5d50bfa5fafe9b531d4c8d469d8bfd652ba7ae

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\famas-2.wav

Filesize
60KB

MD5
a50e22ff3e45ba3cd3d8bab2ce45ed9f

SHA1
5d2d5e84574731fcc26619aed70df93443b80c1f

SHA256
02d5379cf520fbd574f9d6b69134f84a09255c6a1f3ec320c905d8e70942789b

SHA512
cdcf6a17ae944981b4f4681e2a49b078ad9da90830206482643c978a6266c73ec7d77080b941c7da129fdb555e3d5b39a9d04b7e5058793466c1c2fb99d8d463

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\famas_boltpull.wav

Filesize
7KB

MD5
9d534d7ccbda6dc0e47bdb72e716f9b0

SHA1
abdb00407f4063e8ff0bf146a4fbd1e0ddfd58e2

SHA256
f0fa216389e4b1ef7c0a7f0b8db4c6d246abb5fdfbefc4318e425c9c8399fddb

SHA512
356f84beca95a561c64ccc466dea0c6814aacd5eeed94fb196f437f512bf2517439e3f1e89aea766b00b47060da2455a552df302717d4669b2feec9fa7d8f87c

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\famas_boltslap.wav

Filesize
8KB

MD5
ee863ff30f0efbd0fb4c7e9083415d64

SHA1
385bd969d869ad7011b9690fb013a75b7bbd7ba5

SHA256
9c6e01989d1b4f101a7f911e0f59f17c585906a335fdfa38be6c489a85b9b1a7

SHA512
c0e9d236bf77c0e0d988473dcc52c9ec72c71d6585c78ea539fb4d5519278ab49e75649edfed817317152eb6c0115b42555bf3d887a77b3594fb2388a07218ff

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\famas_clipin.wav

Filesize
10KB

MD5
d8868bfcb4e6831deeb5137db40ae84f

SHA1
e2091a7b473d12ae8f446203a6445305618ac8e2

SHA256
ff821788730e6445b676e6fcf0d50cfb5695111d3f568c53f72c3639d5616955

SHA512
9d176286cb04bdef664b12893f83bc4e8cb6daa8c40473b5353ae79b2d25175d7d140b6084b2d2f0e69f3d4e225534f10d5de39feb7d43886eb8bb6770b8bd11

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\famas_clipout.wav

Filesize
3KB

MD5
349b78e5bd36f6f5a2c3bab8a474ecac

SHA1
d0a49fa09fa43a46f35447073b2d177f4e26f74d

SHA256
676625ec6e1b323243d0d62988606c7b3b509ffb2e5b6c2cbc9a225ace6f8f79

SHA512
a07dae9f0ae0e379d51d080e815430884c52bb24d3d70d23e375a8296981a8cd8d6606a5c135d8bcfdde11aea2de72175efd93260600b04211f5eac353aa0db3

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\famas_forearm.wav

Filesize
9KB

MD5
929fe892924ce546b9ce635fc03b2ef6

SHA1
6564c812792af93a31207eaf2adacb3f31660330

SHA256
fe8beacb5dde14a0566033d7e00bc9e247132e8051e0f0a100210cc4b2b02d36

SHA512
e262e10effa8a1667968c365276dd36e3a1361d0199d30a11a84b467e806bbac16f4a471fa028695d4e9f5acf9aed99ea56e78c15343a7a4e94ca5acfb5e27ea

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\flashbang-2.wav

Filesize
30KB

MD5
1d37be7a407e04655c1f4bba182de6e4

SHA1
38e4bc79f9eae8233597cdf0320fcabf08960ded

SHA256
2896c9cee195a7bbbe50b8193b53ba8fbd251e5a938389075f6d8aee186a06b6

SHA512
3f2d125479fa89d8be066a1828a80b6a5482cb25a108073e919de1bf399015c78ced4c0cfe778b5ac30bb3727f5844f7e59a23de1c04fab0e764eb721cae6756

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\g3sg1_clipout.wav

Filesize
12KB

MD5
66494ec485b910d91cf037bebb8a899e

SHA1
78f0c5ef25be0e261d035d98efbd44c17ef94f00

SHA256
523128273afaa928c151f46fe3f9f8d36d01bdb1fbc4118a7d80b64dea1ad1db

SHA512
a25c0dab97536fd467bef303de3e732224b7d4061331f1e6a3d053ebdf8e05c861535fd4dc8690c7f9a03bade835244b3f4f0b9133eeaaf4ca08ea551172af24

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\galil-2.wav

Filesize
70KB

MD5
4025c701a464fa6761de8bc3436aa769

SHA1
a4e49d4907d16f4bf04292a4c3287eab2634682e

SHA256
01c6de7d4f5b90e7f993ed2afff212e887df9bd7f0606f4aaa7a4673ae39665b

SHA512
3c3b8501d3c26feef2b093b1e30e974eed9965758185381a47e18239b28a3eb45a22c427de850ae67520c79963e6a78ebfd4b5912afa640ff9561e8c1b2ce45c

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\grenade_hit2.wav

Filesize
10KB

MD5
7e7c4656f8ef80a72ef0d1e41317f511

SHA1
775a6ec4f092b3e8bcb59c21787ef33e9237ae48

SHA256
ffdaf0a862ce1f47615dc1ac59af868010796eeef50de895414c40a04da3680e

SHA512
a257ce57532a8497f8df5860ae08729c78f90477f0b96264f2f98dc31ee034ec2679ace4ddf1ed4ad14ba08170354fa00e984e2dae4a17491fb5f8b7e009391b

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\hegrenade-2.wav

Filesize
70KB

MD5
f9ce1f567cfccb61b0b25cb689e1081a

SHA1
05e8b80c15e8d950088c6a54d8dc173d94c99260

SHA256
b77e091ade1982812d948aa0f853d8580a91112f71e1bfe48e50faa02fe408f7

SHA512
fc4764032911836f656be881de5cdf35464abc365e668ae104268f9cf47a435e5d0fe93bbfd526bab722e5d7355a0c7510261fbdde73415eb2d5dbb9ed1b04f1

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\m249-2.wav

Filesize
24KB

MD5
38aa27d5b03e3d9b357619e8433c4321

SHA1
fedf9dbc1c4ffcf5bdd259dbd10b0d70546a34aa

SHA256
d19add08916d098f0d97f20145ce80127731b3ab4703d96eeaf4dbc790d6048e

SHA512
322d7f261183175a9af949a47722bdd04cd8faeb004918542d93a4c11c27aa9d1a6bf332712972ea0b4f0c83b1ef7f57657bab8e741f79ca5c37b1d2f535664f

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\mp5-2.wav

Filesize
23KB

MD5
08b52490d54af93647d18cfd17702f0a

SHA1
6ea7794250709ec9583849ca734013d6a51a0cb3

SHA256
f448c5ede6b657e8e54a0dc95cf4df9335e59d81c67fe623ef7849d298fac87f

SHA512
e9fafaf54184c063af1e7759efc795e8af7bc72dcf43cecdd5d96cc3d2cfed1b12d5f1a9ab02ed004148bc05fc1c15139d234e82e76476410d552f58e681f85f

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\p228_clipin.wav

Filesize
14KB

MD5
2876bbba2adae9cf3456ea95a2c0b546

SHA1
737a3eff26b380e189ada33a028f63d75b8f0e8a

SHA256
2ebbea31183105b5d305027e960bb89dc2e2582b81ba712b01b1851501b6092d

SHA512
5423d77697905521a1718b2209a7e29fc34c94f481bf093f2ea45c3c43eb9dfce38fc8c87802c221a1813c582b626fd84446540178cba918d8e021d1b4b5dcfb

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\p228_clipout.wav

Filesize
7KB

MD5
3d352efef15d6f7019168991cff7cf32

SHA1
10030aa93a41d80b35d39e59dda86e4c164f1a5f

SHA256
616e07c58c0d3d332c3c7fe65c1b7e6ef49d5c26d09d8132d1e7c36c3899ea46

SHA512
bc51565450631d2954c0736c7899aa7111aa1584b0cd20ad239a765662d5935aec7fc7b33f3fcb2d43e5a69b1a9c9728a63a5a82134ee4dce7740cfa22e9480f

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\sg550_clipout.wav

Filesize
9KB

MD5
e4f0d92ee2ffcda3b464cf4934358e93

SHA1
5c5c79181331ac18ca710c586c70fa5d1236ccec

SHA256
61c2443035604b8bc34068e6fa2830de9a9ea43cddb5a4b5e4f714f0cf2ebdf6

SHA512
9ef010516cd30af7d64a366cced0667304fbd405913a5fe7d970e9de0a7cef44c06ce00dba7ba047472c1037847c068fe77f9151340150c701a1916912da304e

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\tmp-2.wav

Filesize
5KB

MD5
50b1527eefedeeb9062fdcdcfd37202a

SHA1
d9af14a67d6c099734b14b2889d1e86383b989e3

SHA256
ad639a5078516499cbccee2600b5ce084643e5aeeea336340862f6fcf5608d2a

SHA512
45b9f6a0e7683c463d8ab81f429eec404bc167df076afc6b82deb652d947dd8c8ffb7ffdc3f68f94273d3a87ab37d8897cbb732fc17097af7f8d678f32878837

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\ump45_clipout.wav

Filesize
3KB

MD5
823dde376e26c72a64bb70fb2e8a45ca

SHA1
301edb3ce6d3b2393d049b65eab9a9bfc28fcf1b

SHA256
ed42a1b2b755015baeb5396a6991e5d2e66dd9b234db3ae414d52ee63ff5e5ab

SHA512
c27d42032e598bc989ea19ed42f34891586904f0944901ecba8765ec5e182786419760129bff68155a7a565b352c7a9e5ddd2d03a82865ef1dbd0b07f3505f6a

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\usp2.wav

Filesize
5KB

MD5
7fb87870fdbfcc2e3529fe601fe40377

SHA1
76b933a95ae595ca537fcfc35b1f3ee18dc77e91

SHA256
20fae7d8f92159564ce249509d28f3557ec3ab850080b49eca21119e09722456

SHA512
14715cea5796851e8a94964ec36b961be1749583bc76ae53e46f77acbc5f58c7e600c33e8d3bf33d70cb6c08014f05639b6910c37a86f52e0c9925f41ccdd416

Download Submit
C:\game\cs16new_rus\cstrike\sound\weapons\usp_sliderelease.wav

Filesize
10KB

MD5
44576162dc98c5a0e265a6dea7872599

SHA1
7ab27058d4166d603c51df914d62c0dc4c937bdb

SHA256
89bc64b6711ab12cd20a570174dddb6b48b35bb4e953dec8e1b4711a0d985d34

SHA512
91c8aab8e6e1024e75c24a56238b775016ff48bac6dd12035aaf61e1ca210bd4a40d8f5feae60ed1b0541617497aef8f21525d5a47d1cdd83be5e1a67985ce8c

Download Submit
C:\game\cs16new_rus\cstrike\sprites\640hud6.spr

Filesize
64KB

MD5
56d776f44221d97129d22368a38e744b

SHA1
f23f02b40c3842c9b59d8063ba6d44a525fb482e

SHA256
bc84cf45f5a024656d55d9bab18ed94371479533766a053f23f5acadbb03e281

SHA512
fbd1c775bdff709eaa7230ab7b0a741aded362824263656025deb6c879f76503e80f2e27ad4984998cf3674e08d044b87f5adf69775fb9b2b1c0c900e7efbe86

Download Submit
C:\game\cs16new_rus\cstrike\sprites\black_smoke4.spr

Filesize
153KB

MD5
0c7375ae29b0bdb8edf1ad0e8d87ed04

SHA1
b6ea11907a1b6c5508d69d8a10eee2c9a12f6c36

SHA256
8539f22177ae5ec673316d76939211dc9dc1c1c2dacdb6a52e100e1e7d5c15ea

SHA512
b229f19709d0e0cf923cd82420ad25ec308e8aed9996013e591e1d01948e1fb6235b5f94e1d46a26b67738cbea5f46ab6340983938a633a31cfd51230dcc1c26

Download Submit
C:\game\cs16new_rus\cstrike\sprites\pistol_smoke2.spr

Filesize
361KB

MD5
cb5216837325d496cbf150594942534f

SHA1
62d923c10fc29c396637be0721215bd041216a87

SHA256
e53dcbe0ef346df5517ee76c1b38f3968f380ce390887ebb139ef3a5659e24d3

SHA512
0c949cc2df71d37c7e23df9b1ba4938ce72d330ce4960031ef927353d1026caf2c3bdd7ca60b0d424f0c20241b5cae46a74671c5f35ca72e8ef2ba41c6ce9587

Download Submit
C:\game\cs16new_rus\hl.exe

Filesize
84KB

MD5
2098ccf443433129b556c2849fe99e26

SHA1
074ddbaff48c88b3b5c8f881c35d2be2bb19a249

SHA256
4a899986a879ffd4b7e2d819c49b47cb362d849e86917da1f1931ef476b414af

SHA512
fb4dcfd5371c89af775367d9f2ba72bfd42f8b483ba31b0e839b66f065e5e7a1ec34bf4504aaad17e38502be6917f0b3e415add81dc84fc6942996c0a8f95a10

Download Submit
C:\game\cs16new_rus\platform\AddOns\checkers\checkers_koreana.txt

Filesize
4KB

MD5
822ee816c61f913cac2658d2a25f32d7

SHA1
5cb05989f3539fe5f3f703cf0d9bc83e988b6011

SHA256
b1644d77e436d5b8f4e1c45afbadb951afcf3587bb738d431d836b9d1ce3fa0d

SHA512
f59a586307499db9e6c6851d1fa2ef39bd3710ecbbd33d3d8fac205abf31609845c0961bc967e311f1978d8fffe9c02b0371799ddb7120e28b4266c810df8441

Download Submit
C:\game\cs16new_rus\platform\AddOns\chess\chess_koreana.txt

Filesize
5KB

MD5
d688524a824d9e448012d9ee119f8beb

SHA1
a783d71e7818bbc4b20ff3be5c58f80b30bf7b77

SHA256
1dbdd8e6e91f58687ae355a273a66e32aaee96a70e72e741b47672865469666d

SHA512
1f662c727bcb6448671b47aa2b9a5dd17be06f880c32411343d62a7f3115d8cf68d5e6e369db4f44dfd8033737eac93be0b11da1a7426330565c866bf2650b1a

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\SteamAddOns_koreana.txt

Filesize
25KB

MD5
5f1defd406a56e18bb4aaa870b66bfbe

SHA1
0ed5b93b17b3b2afb28179e63d46ec6a40c3878a

SHA256
0b1e4a235336109cdc7ee99b1a1b0b6a310cf1b2ed76cd69f568783715d396e4

SHA512
7aa0b422f98f461fb7733c7efb4d852c1d212e190373c0aa59e4cc5734fd5b7a9f6c3f732d5b79801ced8816e686c34bb48f43cef2e3d72f4d5698f8d8999dee

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_2.tga

Filesize
17KB

MD5
3cbe3c04ac33e7f7fb599f3a7e60af0c

SHA1
db0a14811a89d288af07ccf4e5c5440f933d3c41

SHA256
44101a44dc5bde9067323316d990309092fc5be5ba1ffd3b8a5ab24fa88633c4

SHA512
5480e48646694a0c344d731e140c96e246ea895c16d6ce3b918c9a77b2bd4f714faf4253c6faed7dd43f5182aaae1cd47c8a2f0f684782f39ceeb22498739014

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_3.tga

Filesize
17KB

MD5
56507cce6e20dd80b7f97c2076ef3aa1

SHA1
3f53a17c507505881abeb269496829e54d6e0c3b

SHA256
77624c254613fd8e55f4175756e69209ff2b62f96bf05fb61bcda7990e0c11e6

SHA512
5919150725869e4135dc996437894a93923ea2bd8b15f2b6c273c1ad2569c69844df3ffcdfc5729d181edfd9f3ce0e1c794d9ac508aa22c5fd0636e4998a350b

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_4.tga

Filesize
17KB

MD5
e6a420ed2e7c92ed685a697780ccfa4d

SHA1
df0351a21f4815786f5a93736b29e783141b501a

SHA256
dbcefc66cab9bd4d836db7df411759781eae7a5a226de936dd9062717882ab8f

SHA512
fc7fef156cefa890887bce7dc1dc32926b3662d2c68d88bc61f0486c524521f4fa3eb8797be730e6d41f0dd1b5cb6df32b30fec4f741aba97bb1076e8bc5c8f5

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_5.tga

Filesize
17KB

MD5
68e78950dc80a352447bbfef13b29b2e

SHA1
fb4050bf2e45ccdda038a79557b9f4b4644ac84d

SHA256
c78128c16670d46af556c5cd599da71bb4fb0a288a9735c9acba4c157378cd87

SHA512
79e3e8e33ebd002a7d8b6e2702b97689364a5de76b781c7c6ac1617f37e0b551bae7d733a5411c3a10e4de08de91e63b8d219ba84f8f5c4b6374f681ec0ced2c

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_6.tga

Filesize
17KB

MD5
7f1329830ef51410b5887cab8597a825

SHA1
45524ad6270d9d968c65f6b08082cb40e291cead

SHA256
f3d004c958141c332ef9239f21190c058eaf79d2eac7f4d88e428a73f5a8e394

SHA512
bb82be797347edc2403e4eac04e0e00982ac50c73d4f597e29ab86c5b788b632b6046baaab483b194480ac9dbd53d0612a3f7f45548e030831bda407c5e6447e

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_7.tga

Filesize
17KB

MD5
453fecee830834b0f530edeab739dd9e

SHA1
a0399aabce336a94220242130b344fd23fcdb6b8

SHA256
9a1aa457774d9cd71dda661a55bd4c5ea5413c8f090640d57492084084600ee6

SHA512
bdb0b8dc852e5ba9401f7960068d086dc13d47d03de8829f7250dd710ae3f1688816dd40ebaf9ae9c1574091b79a00a61d6d222706a037e141873ecf493c0a10

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_8.tga

Filesize
17KB

MD5
b564773a476f82e1af60f876667923fb

SHA1
4bf7bb57bff314846a18b197b11431dc27068472

SHA256
9b1fb87fe0709cabbae11782f2c0a103d2af1cf2d0d88a62e36d5d15c5c21460

SHA512
8ba37007b3a4bfce91f7019537966b0529355e4c20bd1d3ab3ead33495d720daae6df1e15e5a9e71b9cf982951eba879bc4320918f78c65bcced68776a597a22

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_9.tga

Filesize
17KB

MD5
7cec319d507176f9cba134ce947cbf0f

SHA1
e891c1fa742c7aeedfb1d0d5d2d7b609c9123c08

SHA256
ebb38afa60d6c689fde79ab1462c3662f7b73781c8d373c83041809d9424ddfc

SHA512
0f404328c34c2ee7fe2a3d7f71de1cd7f824f9bba2d9720d4941d598d602b1c76b750c5c8e2662787619eeaacc6d16ca49b428ee409670448d2e3f6aa630d44b

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_A.tga

Filesize
17KB

MD5
e23c9a14f3b549b69c33354ea1ee66cc

SHA1
7ec892499276834338b619c61d2de3967f397cb9

SHA256
b639c73b6e19686456d0f012a4ee5943053751121dcb80e76be4a61da821a083

SHA512
fd74607b208494a901f8f90a4e8de5c730586f64e90c0c38c271e8ff1b1e6c30745cbc3a70b9d571998b482671bbc20a5751bcd164bcf65fc76c5d23d1f85168

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_J.tga

Filesize
17KB

MD5
8af7fc69e9ac916bf5f0abd31c4c4971

SHA1
393bd438864dc212c995c4cd7972b19902bad374

SHA256
e8ded46c3ffe5cf9f52b645c76e3dff028a1f096eed9cd2cea9b2b4e744b4a49

SHA512
8729e528074d84620ce21b415f31d4aaeaca964dedcdf7b2e1dca55e1528455486862c1cf5b75580cf17268b04c202bd06c2e45f6c1bebf365968064f1bd8dc8

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_K.tga

Filesize
17KB

MD5
e2a72fd8a0c6341dc716033268319e7b

SHA1
a4afce16f9acb4cded305265b5970b7a1986aec3

SHA256
10435a071c41d0a3f594e4393cb6ab4fd34013a7e6fcf56b604673b986688137

SHA512
7d01f87ff53f4b729b9af1ba4beb85a8eb468bdf04a4a0fbba93bc657a560ca5d4ed6ed50b1154f5c1214ce401ff036d51d29d6640a9f700ee4546587810749b

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\H_Q.tga

Filesize
17KB

MD5
5fcdf81a7184e1620bccd14c82c4acb5

SHA1
630ee9fcf91b907b7ef08ad0ecdda0a6d8a65e54

SHA256
4d9b5edc8c7e86a138bfc3547ac0524f8119d5e98897298ca2697b0dfe9c3ff0

SHA512
ac4adfffc67db750296c78fc05d410943d5c963db7b7c693ec3fa14fa5ad9729630ab5a7908b96b69dac323fc0952dc26307f70de38598f9805f9a13e8e3ead2

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_2.tga

Filesize
17KB

MD5
fedeec806033ab73e7dbb5ed2c06f4be

SHA1
8c77b9c9842e8a04322094b3fb21c2d78af43c1f

SHA256
40c583c8740eb42349f7ba5fe0c34b8cdc06bfc16153e26880d1620acaada5ad

SHA512
4059086c97b3322607f9b40e8c2f3eb744032d45848b1d350e814aca1f539a107974997c3d43ec56b9a5ca002f776463684ca13bfc75f908c6a4f232ecb26bf7

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_3.tga

Filesize
17KB

MD5
e2dbb9a5247f4eb5f77a464f0f4f4d52

SHA1
19e596875ce9e9e34f9c457a1001d3c26905bb20

SHA256
b74075802947515053289fddd05b6da09db765284b6d63da932b23342afc4d0d

SHA512
24afc937cc63d541ae8e8d94cd9fbcf9497e50324fe04baf33bc48c3f6fbc9c986f29e4e6bb955e1f4b3b83c1736655cced2ed5b06e547520444ac26046c9ed0

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_4.tga

Filesize
17KB

MD5
cb809b26d457b8869a8d400f25033162

SHA1
e7c0998a4c677e017181e06538a190dc9a29dd4e

SHA256
fc47a8415a1e25f0921e7c7691863f9d80309a1ddc4e574cfd48b8e7b961ef30

SHA512
199ebcc1a8ff4e94340c377070672fd2ccfaf9d9bbb628f638cab8c03567825830677256cff73f844a4c5ca4968d4e6dcceabc080adb6016fa078a5c97e1ad50

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_5.tga

Filesize
17KB

MD5
a0f3cfdcd620c44c05b6b63bd6997997

SHA1
e3c05d25b9b874f9b9ce725f454adbc4d9b6dfb1

SHA256
c28fc8e2308d20790a52e6bd182fa9157bbe94643f890787c274025780d439c6

SHA512
8fdcb1645e0ec913c0f725caa129ee76ec2462f1ab85fe79cf7b772c8aa04fa5b92adbc17b16bc863ab7ab45a289fbaeea61aed8f15f4e9af61cac398b88216c

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_6.tga

Filesize
17KB

MD5
c9fe9023f4bfea0b144c3a79af6adbe6

SHA1
ca15a12c0da8e5ad15feaf663215e3162b82b1ad

SHA256
3d6c5222cb8ab008a21a671c20eccf6c290af6912a4d8517b5a05aa9e46db0e3

SHA512
8991722118eb7654f535d7a4dc2f64c0971083065121e9a2be49bf65ea5fe020833a7525bb7e325a42dbd5f426564cde4bea7153493995b490ce93a7621cc7e7

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_7.tga

Filesize
17KB

MD5
77a1903e062b6d061f5939b9f9e16a57

SHA1
4fc9fa554e13608a81e71deba4c315d8b4614e31

SHA256
8895705ba81ce49d8dbf357f74ceff695832b3cb75d92f85d46619627f13d602

SHA512
023c6ce0325bb66c5dbbfbffd8d0ec76ddeecd6ee296d34b0d61ff94d3033d410bbb53b8202fa653f657ecd26be4e5d76093401705549edbb6ecf28c50b41f23

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_8.tga

Filesize
17KB

MD5
d62204d127f026f86a94fc26167f7c92

SHA1
46ba5bec28f32d8d6f4ff9d94def9a0e6535165f

SHA256
38b7572783fe6255b3d9b35a4a2169a99763112c57a307ac00740a1aa3271c0c

SHA512
bc9b941eb3ad4b5b14df6798c3dce1be45db6f9fb1aba07e213b967c562e27248a41eaf520365f877f04183d8336a09d0ce4be67c96f76aa03066ac562769ea9

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_9.tga

Filesize
17KB

MD5
4ba8511aea3061ddc630ac86cf258400

SHA1
1883e891bb6fc77b9c538bd8477fd0b8a229b631

SHA256
571ffaf007e0710ee208febbf04f261073163ab2534f19816f054ff0c6b654c8

SHA512
27c1205fd2f73d4ee1f91fa2b5d568bd6b5f90ebf0150f890378a8a856ef57eaf166fb511af4b908a7abbaf2dfdbcd63dbe17eaa543c81a617d42f6a2b44ece9

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_J.tga

Filesize
17KB

MD5
1c0fcac72611928a93f173ccfe82c5f7

SHA1
15c618ab179fb8e4061745c87086757166d0023f

SHA256
a3dc3997e63e0645b3b0a2f25b2c909ad007ee3c993d8a4f96365b6feb9baf45

SHA512
4dec9965b22ed71456ddcee897506834e9215857d97d5e1095d9564681cf6b3e79e93da113fbbf66aeb226eccbd8596bb0d7a4a5d5fe2e0a9c509aaef91183a5

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_K.tga

Filesize
17KB

MD5
ea6b2ef47a1e151950b3c60ed95fe258

SHA1
8ac9c9e4b21104cd993d07d59cf423560829b1a8

SHA256
286202c02bd45dda8ad56463ef9b4a1980d8174780a1ea17997f06f47f0af4c6

SHA512
282cc94eeafda373b4ea1ea37e5367841d92c61361e954b388ab85f372592979442cf98b469da03f68c046eae20e7fad4aa53919c6eed3496c037229b10dbac7

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_Q.tga

Filesize
17KB

MD5
59e34530e32e758ae2ac970b2747e783

SHA1
d46082c91cb26c80450fcddd2150cc41e87edec1

SHA256
ed01d6ea4f63167c63600833841fa78c39f5a33370ed26d945d40d0bb12e14df

SHA512
3702fc2d2a1197663c1a90d4fe76c15088cc56bdda22b3da0ae2722f87874ea69ea3f82348d25f51b2fff2ebfca926c6487a106f5de75e7be996dd2ba0310bd2

Download Submit
C:\game\cs16new_rus\platform\AddOns\common\cards\S_T.tga

Filesize
17KB

MD5
3e4403440b7297e44055fa90fac3c6d2

SHA1
160db9b19adb5860e2b448685155115cf3a5442c

SHA256
2150c40536c2039ed8bc149c7f0cfdfca668d70818d64a248ed4009c58e0f59b

SHA512
476fccd4bdd7c7d3d0ab57b9c89c223603d8567f814b5fab3bb8c1d7bad90e572a32ec40fc20bf13dd8c63825704dfdcfa0f49f715e5702bcd8f652098faba2a

Download Submit
C:\game\cs16new_rus\platform\AddOns\go\go_koreana.txt

Filesize
5KB

MD5
3f2a6e41a274c67d01cc7ef775045d7f

SHA1
fd0edeaa3a9af16b14a4e942ca050fce8a62ef08

SHA256
2f29705c61627a3c22fbc81dc965a15b93652da90c81caf37ba2e14f7c9e4865

SHA512
6c9ae2591e8d3c6ae31ac67a2b81e988d7fc0228bf43b38e51342b06e3e25d5a478acfd010ace99d870aca9fbd98ef22cf5a97c42125720699756fb6ac7aa51a

Download Submit
C:\game\cs16new_rus\platform\AddOns\hearts\hearts_koreana.txt

Filesize
4KB

MD5
258caaf1421b164b270b616bd985b4c4

SHA1
1df4c8c5581843f4f3e11c1bd37ad186d7e65f2d

SHA256
56d19c75ab38a6fa3c49f6bf29cd954cb6f82d6892f318a212e0d0d269b8c153

SHA512
1e5ec526ead074c7d27e84b0210cb7e119f19dd245d580ddaffacf85b024773da422aa67c16fa0857b391a11587fa98fb758aa81b3b95f6fe67fb63db1eebb81

Download Submit
C:\game\cs16new_rus\platform\AddOns\spades\spades_koreana.txt

Filesize
5KB

MD5
b4527be1f2b379fdaa5b091cb8525df1

SHA1
e1e4ec04d0b6a9cc72f1f60f6d6bbea8a88927f6

SHA256
4123a2f5f159805e15d25739da5ab629eb2b063a701e9ca794851845bf95eee7

SHA512
ef6a05befbd4fadb6cfd2f48cb6ea9791c9333c29d149ade6163628a53ecfdcc92557e0b1a2f69da0cde3ea54476e6e9068388eb123c5708318ae388180546fd

Download Submit
C:\game\cs16new_rus\platform\Servers\game_ready.wav

Filesize
8KB

MD5
25d68bc70c2b5463fe98d6ffec5c2866

SHA1
86e025f7d060aec0d47fe062f6340dbb05519e79

SHA256
9f839221582b729c925b1be1c6c09a4006d47566d6f9ff580337af1539b3679b

SHA512
97369a9fe1f775591c189edcf8ab71801c9cec41c2c32708812fee2457684367818e58230af94e03389dc9409854e5f4d3d07861b93f227f4b7797a7a3972088

Download Submit
C:\game\cs16new_rus\platform\Servers\serverbrowser_koreana.txt

Filesize
37KB

MD5
791759935e06a12026d001f806e569b6

SHA1
9790f41735cb477b33c870b514c4c673860e9235

SHA256
7758f337170e5aba7268f2b6116d42f3ba298c77a32e3e2c36e165cf42c72f14

SHA512
b8f477211a648df573121ba51036e1c3b0ce8e2117f911b305a13d92ae4ec4d229b4f012a49255d502736377a69ce3b9bb4d5f658e6eeefd83255e8651767af7

Download Submit
C:\game\cs16new_rus\platform\Steam\cached\PreloadSubscription_ActivelyPreloading_Payed_NotPlayable.res

Filesize
2KB

MD5
9797ccddca9b1e80121f5ee479352c97

SHA1
86422037a3ea6f459de4ed179d3f0dee9887439b

SHA256
7461a89e4f4ae9695907c5c35440a96b5d69c3aa35671ca65ecdeacb29136f87

SHA512
b7b863a6f196afa3564fde6b1c52d0133e655f7afa34b5820549eda5fa2336527f3138ab013164660fad8f9244c9243d861463d18df7fe1a33c6141af2b1e531

Download Submit
C:\game\cs16new_rus\platform\Steam\cached\PreloadSubscription_NotPreloading_Payed_NotPlayable.res

Filesize
2KB

MD5
369af8febb9873bdeeaac56849aa5edd

SHA1
c6efbc06e5f70605e4023dfa469d4891734898d8

SHA256
274dc979c3ce26ccb18b3c8dc38e79b31a1fded218f2fecaa460760a72afe0ed

SHA512
be7868ae847fc457788bd1eb77522f44505e9894a2c18e6516dc696dabc38748ffe9ad2a1aacaa4c163588b68ace93a4bf8d921ff8036798d36cb216ada32360

Download Submit
C:\game\cs16new_rus\platform\Steam\cached\PurchaseSubCreditCardDiners.res

Filesize
2KB

MD5
18581b2844d1b35bd0dc170f8557bc42

SHA1
05e8657b8f73f2608aeb07edd8f469f3639d29b7

SHA256
7f00fc14809350a11d04cb655e996beb4d829ae7c2d7ca320968661961e18fd2

SHA512
cb2be96b5ae7cc5c593f954092ec663b8ff41e06f2597b24bbec8883a025baa75bbc6c15cb24fa29389e05b7bdb0d017bb47ef747a524eea53b77fb4a479087a

Download Submit
C:\game\cs16new_rus\platform\Steam\cached\creditcard_back_amex.tga

Filesize
69KB

MD5
e5e3a9fa341ffe9e575953fe0a0aea24

SHA1
7755b4a3004cfdb1763c03f5b92b0eeefde003b7

SHA256
824cd8b850e621062e7e9276f494ac5f077bd7b90cae1c54822b4cd9ded100c5

SHA512
ae33a0c016111e0ff9e4d74c651d6ecef7e373df0a839063572ffe8678a54f88c61285a9694c9a2d3208b6b8c76fff2e72cf5f19beed699bc5beea07a16395a6

Download Submit
C:\game\cs16new_rus\platform\Steam\drivercheck\240\dxsupport.cfg

Filesize
123KB

MD5
f4eb527c235bb256418442880e445f39

SHA1
ead5903daaf37141965be8a41a535a82e7bb791c

SHA256
9b93979bfb94347d3157cdca038d1a6addc8564a954bcc564adef6a1c86ebc22

SHA512
59a32b9a93afc69137ff4ce1ce0569eb46c0e7512afc2435cf94e94b2fbbfae320059779901c703374b018da7297caf44bf6b5a42fe16154c01270bfdbc24a9f

Download Submit
C:\game\cs16new_rus\platform\Steam\drivercheck\240\dxsupport_reqs.cfg

Filesize
129B

MD5
158ac9a69c9a06d9bc2fb432d5b63f38

SHA1
c55441b50d6e5bbf1b619ce7c84789439c545110

SHA256
ddbef05c1fa1eb6c13538306f2d28bffb61dc57e7a9e3d9e25b98dec576ca8a6

SHA512
c3e6fbcd0338c1d04fada0c66123f1c21663f25c9f66161f18817bb6c10f9a79034ab3b0e458e1dda61bc915e3f76eb88e1238b04468a277ab16bd0f0911a1e5

Download Submit
C:\game\cs16new_rus\platform\Steam\games\Half-Life 2.ico

Filesize
21KB

MD5
fa223dc178f827155f6a1dbbac6dc762

SHA1
f3389f48f7477f746f8c898e500aed255e662749

SHA256
2effe91cd1e8777ea7c12417003d8279f3657dc0732cad23ef042e7bcdfff4c4

SHA512
ebeac290694b703b9371aca29a4809d50bef1b229c6ae4248a9da08a7203375728746074d85ed73dffcc712bf74d1693c145d17bbe99f1bf2015f0476e0f4e0c

Download Submit
C:\game\cs16new_rus\platform\Steam\games\condition zero.ico

Filesize
7KB

MD5
3485998ef1bbf8ccc866af56eea206f8

SHA1
cd0ee6cb22904e712f408576a4fe9e74e045e098

SHA256
ef29dbcd5c163b52dbc9bb1a403653708507e601ddd827971928edb640235490

SHA512
eac31c91f1143be9c3300a25a2959c410533fff023a74f191af7ffe97e688b2fb8682902f94d9c4eb302e4952e969e24685395b8b7a886405d99d2bffa5c7a15

Download Submit
C:\game\cs16new_rus\platform\Steam\games\half-life.ico

Filesize
4KB

MD5
f02c1d45a1a86f5d60ce9e310e24d144

SHA1
d991f95d96e1c76d2acb944bb09447628cd96caa

SHA256
01491c012c29f4706f0cc8f1117eb0f882b54f720bfbf320a3271ffac6c929dc

SHA512
88dafe4039264818c4193f563376db890ecea2f8f67df7902dd76aacd08be4cb47197257d02217eeec1a81295615b30b89e91d097837193a8fb64e72d03d7334

Download Submit
C:\game\cs16new_rus\platform\Steam\games\icon_lostcoast.tga

Filesize
1KB

MD5
0b5cc5aecf0b47e2886c384908532dbe

SHA1
add589f862a5fb871f8c84871501791b5dfb3c62

SHA256
e5972753625daccf5bd9b735261b60375b5f46cc5adcc8d1c18fd36cde5d7d1c

SHA512
859647325ab25bb1d412001bf425babbc720c7cb72c3255768fcd03b29b34908f68946478f5855e96358de74230aac396559411d71860c0e5bf5414929a69d6f

Download Submit
C:\game\cs16new_rus\platform\Steam\games\icon_lostcoast_dull.tga

Filesize
1KB

MD5
200380f4259d09ec3f433e421cd5a55f

SHA1
9afc9cf71fd5949198b77bf7ec396a89058d6dee

SHA256
e136089e82c2d98a7283b55dcd93c5332a332149e7119d015bb7c353435ea9c6

SHA512
c77a433055077420eae1fcae302fc0738f592b8081ba2bdcae2015a3296672f1df2518934821d424e3a8c9535bf1891cbe7394c16ac68520099a3d7dfb4c50cf

Download Submit
C:\game\cs16new_rus\platform\Steam\games\icon_sourceSDK.tga

Filesize
1KB

MD5
5293c8b26b32fea1972f3a53a62fd307

SHA1
81c749f4232d97300636281e28c6236ca3d589e5

SHA256
d55509e345d96fa54092b7cd9b46a9ec6e6a2b249ce71048e5edfbaef7fbb6fd

SHA512
427328c999947a45a839e0679e4e4d62041dfe8ffeb32702c7511cf3ad5442d6e5f63a5a6f0749a28e08eedb162fe34a429d7dd192bc4d1f0565398cd78fd317

Download Submit
C:\game\cs16new_rus\platform\Steam\games\icon_sourceSDK_dull.tga

Filesize
1KB

MD5
8f365d1e50c281639030d5d324d34cbe

SHA1
42c9ded0015e890e2de60093cf61bac99d4da5f6

SHA256
b91bcaf3aa2e26c0454f709f99ff45349fbb1be2baa7094d1298b217440ff32f

SHA512
12cb7fd74ca7797b83a740cb8ea0a1ddcf0dde1ccf9c84e1af7134f402c58b7e5e1c310c9cb0d5d44aaa751e5b7b5af6a4414a5f4dd530c3b909a0f1966566e6

Download Submit
C:\game\cs16new_rus\platform\resource\TrackerScheme.res

Filesize
14KB

MD5
1cdfd3883dd946c9abf4c43d5f75a6d1

SHA1
575d4567d4789cf4c78e77ed0c7ea7eacc4a883c

SHA256
da153a2b565fa0cebcd6777e21dafd20c046b908617162025366fbb44dc3561d

SHA512
a349448d788551633c0f46b61ed352c7cd315a331d5ab8d5de0be804292e14ce2409a6d7fb59994a31a00ede852d5c3e188f796828d76ed4272f8f41b8c5c784

Download Submit
C:\game\cs16new_rus\platform\resource\platform_koreana.txt

Filesize
1KB

MD5
557be40fabfe9d9cca9e4445510882d6

SHA1
609b73443d1d6400f84909adcfde403add54e439

SHA256
50f50e22f4b83b84c0790aba00b94e795a5f8d4464470ff517a13c6b4285c440

SHA512
54e7cf693b7798d24c9e9ffd4cb75cfceec1c8ba80bc4b0284e559c6adf9593800de690b029c0b68e597473d8d9a25c772defc40b8f0b12f02f49d3c0771c329

Download Submit
C:\game\cs16new_rus\platform\resource\vgui_koreana.txt

Filesize
11KB

MD5
61c7be0d8ea191138eee30db1e1f2272

SHA1
c2c54d37372b9b580f481665f5878c0a33beb53d

SHA256
17f880ef2907d845d2980d80560161601be411fa6a4ceb971a2901b90970ceb5

SHA512
3a254684e6c4d1df11e15f67a66e6f5d59607c18ffa92a03dba1e4e6011f6e8929a324e26e124cb021aaa3e5eae8b6016e925f9b2c29c7e9a9e9a5e0e9ad71f0

Download Submit
C:\game\cs16new_rus\steam_appid.txt

Filesize
2B

MD5
d3d9446802a44259755d38e6d163e820

SHA1
b1d5781111d84f7b3fe45a0852e59758cd7a87e5

SHA256
4a44dc15364204a80fe80e9039455cc1608281820fe2b24f1e5233ade6af1dd5

SHA512
3c11e4f316c956a27655902dc1a19b925b8887d59eff791eea63edc8a05454ec594d5eb0f40ae151df87acd6e101761ecc5bb0d3b829bf3a85f5432493b22f37

Download Submit
C:\game\cs16new_rus\valve\events\crossbow1.sc

Filesize
1KB

MD5
8cfcc0a84d0b6b51995ce17bc9f194f2

SHA1
f86d5edad7e5a3e2d994517da5ebd7d748a8c666

SHA256
2c7d43b8dc6ea01a32acddb7798b9dabf0ec44c7a6dcf75160539a7fe53e029d

SHA512
5f75243ff3e13b557859d89593432f5e29f014f2bc527bee363be3369e884feccb15ee593094c7eb0f8e4786b6a352cdf9fc6039636782cd23712cadc114ee1b

Download Submit
C:\game\cs16new_rus\valve\gfx\palette.lmp

Filesize
768B

MD5
5fb93560c8ae637ba463d084b0ec505e

SHA1
1b2a6a5bb0a579b0f3df9cb6c6152a9c65cb9e62

SHA256
036b7ea3c8c03be214bb7d22b8d63ac27f63d547e42ca677fef344ddc780961e

SHA512
0883834f1150791b4e060e080e7a07eeb60310b88e0334db094c64af5f5b147ebd51cb1e3baa514ea53d286df9876df86d7d463c7e2675c14a5050d0be4003a9

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\1152_timer.tga

Filesize
2KB

MD5
6deae390d10e5faef07cb793138a4ea2

SHA1
0e1b89e5e5e61f5e8959d3d6e17fc874f3d14a8e

SHA256
1efacc8931f4e6558fc9f854527e25e004d8c3fd90f1f5209273236924a9241b

SHA512
70c1ab592e46440f759ffdaa2ba1bbb9206212670762fbdbeb04f85da2304120e0a052ea4164fc0e0326e82c013924d0db0ea27fc21041489fc6d6d69b69d93a

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\1280_arrowdown.tga

Filesize
1KB

MD5
cd89fd0107ed6c76e1fd0e9c11ec4617

SHA1
6f5f187108b235dd6fbf3218ba05b52cfce2a38f

SHA256
0c97e1d6a083ad204bae5ecd4e8b29ad97ec48cd932377094606b67aacc4dc51

SHA512
2a7050c21cdf75affc26b39e1f6e20774436af8124fc08afd54176d574c9c8b3c2b4d28ace11c1d9b775ae4bda0fb340a202854fe209408c125a941690a014ce

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\1280_arrowleft.tga

Filesize
1KB

MD5
6e3a6f819835ed86d2482dde1977edca

SHA1
1dfa68c5bf8c8d3d1dcf9f083b38205698cd7729

SHA256
2b203d84e0253d71fe2de06b430072f1f33c45b11a34625053859803f97b1422

SHA512
f6a41b7a789f88a7f78a0a563feec8371f4396fd95821136751f921d05d8a8af63a7aff9abe76c378ab6a8d27f2c90aee94e9c921afb15b73d381a861977fd02

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\1280_arrowright.tga

Filesize
1KB

MD5
a42119bb4749b3951b240c36a8d04abc

SHA1
d907e5f48ca812316c95d46c560742ad1b46a0c8

SHA256
a1fcee4ada231c29bc7957dd9a913fe788f632fb049f1bb4307f6a78fc61003a

SHA512
f49320861ea3ace9c67b06c7842acf3f38a4a6fa7c9390419f4b98a8d944706be5db4f38c1cba277ccfa151a20e0cbbf8dce1d19d3406e866e4dadf004d82840

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\1280_arrowup.tga

Filesize
1KB

MD5
2bd62a8772833f2d5450db895d664e61

SHA1
15d350619c9737624707d56536d775194348c6e1

SHA256
6e25ee365f0f7eae04736cf6a4461509c6b3310ef9ac250ae5dc008591e4c627

SHA512
4a763fe534dbecb5979263e54f9995d5d621cdb166b2f966552e1b2aee54a339f9782a47074f27abe39cf1ef26aaf9de862f464668fb0896232adf73684f2e0b

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\1920_arrowdown.tga

Filesize
1KB

MD5
3ba8009f5fe7d44a44085581bf452fb7

SHA1
bc4479ff25f3a44133b3521af2c74d3ea9c174ad

SHA256
2ec11caed5f1a7f27ec3e163f210dfc403579a80eac9044fdca87b35d96cf989

SHA512
f3447c164ef35abc8ef5e560e4600f9682bb4b4d188932ea704ec18d2c30d210cc95b6146ec34c9846ddeae03d8ac4000831dde6e8950221b2e01891408b1c5b

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\1920_arrowleft.tga

Filesize
1KB

MD5
aace3f2394f8de3358e8830c8a38a2bc

SHA1
c46024be49f337b76c0e86557620dfb5c281ffa4

SHA256
88bac6a026b4968863453efd64240ad13b94cbb70e519c36c37e8afb97859096

SHA512
80339d9b45f04a65ddc451c80fac25ab97281f7a7f7bdc2a817f070c9394f27d006bf95497991723e53533468bbcfd7fa197a8f25d5917a22e05b78dce30905b

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\1920_arrowright.tga

Filesize
1KB

MD5
3498dbc609accf33f9176f35683e9ad8

SHA1
bbac94fcb8ac6c22cb05d23060062709010a1b97

SHA256
94bc7f32eda56dab718a2e8790e4de25200fe1d11626c38d3068d287b6a1b78a

SHA512
b2e0880dcfcca7eeec2597f0ac147d328e818d90c145252cc5cb6005230c226b0de5a170a3dbd761067fbca094c409c4e85cad4c76f0c05c42c450efab11bb7d

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\1920_arrowup.tga

Filesize
1KB

MD5
7de26bb1432749154d7b7934a6aa6fc1

SHA1
c6918704f5e61e19aa2112c499ffb96fe02899c2

SHA256
b5073a6be382c7e04ba75d6239c653aed7eec2082dc907dc08288acf33cf4f52

SHA512
07848ed71d4f2e885f7e0cc803430ea9595e4417d8781079c88d947eaa2fa7ee2c24e4ee4a61a482fedb1f04f1cb74a3fe6b635a94999cf4c621e5d45c0fc711

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\1920_timer.tga

Filesize
4KB

MD5
8db670d55d945ddc8c58813d5c2bd1ab

SHA1
f345cc4d2e504e0a47a4428b605463f0aad0fc56

SHA256
dd5424ce7ba6978cb4b0368943e50896d6dcb18e08df3f0fbb8c942c27ddf27c

SHA512
14364b176fe43042fb2fe5d5acf536872c06212a76e0e6d5a5f93d0f87aa4201012f7d98a90770a04f43b62c3114a0fa30b3652137243fcb166724bece73011f

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\800_arrowdown.tga

Filesize
1KB

MD5
7c2e90b8793df88727a00b38f20fe5d5

SHA1
c0e55d97b26891043117567863dba7c7a8814b70

SHA256
c0e525382bc3b0fa03415e7db5bbfe2e0ac547ff921a0525fc284b0d6b072fdd

SHA512
5f34d05c36348eca7f453d158d4165dc865e4645266b722edd78e42371c53dd4a7792828cbb400f0c9513db8c8c69cf9f5542a9335e098bf20d27992ed3dcae8

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\800_arrowleft.tga

Filesize
1KB

MD5
a2ab48d4f11c9a3f89137d8593b8727f

SHA1
4488849e1a295ae7b12da606f14dfd1797d6a30b

SHA256
35005356b10fd6a8e13bd8e48e1348993ef3f52b46cbcd3521bb1954a9dab74b

SHA512
37510459d4ca27b36c68ee0efe6046632bcd8edaad5b8ea29c570be4a6ca4c12ef5d8959bb7e581aa8b062f0936ad7035d3d7e07210c02ca815c93d964bbfa13

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\800_arrowright.tga

Filesize
1KB

MD5
f7035af9a5f4f627998433e6a063e76d

SHA1
b36a4047d775b09e72c7d37527fa852733346cab

SHA256
d4edfed0ea573008b33603b16be4dc6da0e08b815f7d78393271b26de4d4e54d

SHA512
8749c185c1417c4b7c9dcc110bcf52fef37710167d58e649819a21e2b546fa2e41b84b1a499af07aa46cbede1bd833b27fed1dda99fdb5e21facccb3c59a9f7e

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\800_arrowup.tga

Filesize
1KB

MD5
9a236bd4e3a85b8039286a780168c290

SHA1
d756c8e3b6c0212fdb8dd9acda8386f11ce32e96

SHA256
7c71e82e5d6a45ffb778def644c0dba8c5e6164b755832c674c3b931f0861d12

SHA512
42b14e028da153eb99c820a5604265fb822673dc1046929675fc29d30d0fa63c8e183bf4760735657e7d0894d45b491ed6103e539912b6ace49c9053795d0695

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\800_timer.tga

Filesize
1KB

MD5
1926ecbcf1b403f0c4a30426ea74276c

SHA1
24d8e0d5f3477f85e76985a0fc579e392482c402

SHA256
99986396ea8ebd9ab4eb1221b52db2a8a024e67c748e0b8080d8dad24e4e9cd2

SHA512
8e944a0304620fb7428acbe883049167c0bc1596d8f294b1ebcb383899e6881c5e54221ea5a60fa7c14210e5cfd91831a8481020608c22747f43c2f9d7e45060

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\1024_Primary Button Text.tga

Filesize
34KB

MD5
46f3cc3d5ca0f0e80d30ec38a3ed9702

SHA1
2b7902e73522c60bb4e5a6d7905f91967ec54b46

SHA256
824ad8824e4d05319556d9c08dd0d4c90fecd6150a0dbcae8c946740cb4e2c56

SHA512
9f85b11a9479af47963155fc823a9390794b3db05fb50011efaa87e1adcf772d18fdc1bd57f3ca556ded84d5fc5671236ee0705043771c83663612cd2b0f16d3

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\1024_Scoreboard Small Text.tga

Filesize
33KB

MD5
bca82506d597eed9b5507ff7ba16567b

SHA1
55ad94cc92b95ce8e2adf62df94a6a8244980e8f

SHA256
4eb392f4136f1a4b255ab26772947e62b80615ca8b1ccea93563c3f33539a8bd

SHA512
e817036968d39d3f86c2f6f241c6f80756bf139a700adf018feb870542331b230cad6369652eb2a26b26e94b14c3e27dc0112d3ccd1c512f73e8b056ddeb12fc

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\1024_Title Font.tga

Filesize
41KB

MD5
277585b15795e85bc33d82eac7c90cb1

SHA1
b05b40e3abf6e64c2f89aefddabc101c00ab63c2

SHA256
2a2d6cade3d2b0de9822efca3812d91af06f7140547b65a7b8eae0c8f9cc4430

SHA512
65970365f78c0261e34c567deae218e752b7535f3828467ae785617201e3194257d89fc91a097989beda2683d1ce347d11c2846e04c74b5c194d50b76bb0e617

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\1152_Title Font.tga

Filesize
50KB

MD5
293f79e66c740942a2d7136b03ba42dd

SHA1
91edc4d29f62f6273762d623f8f91758ad28bb3d

SHA256
7a9f84fe3c6dab5ec161da7acef69e8f09256e3d7abae9c034bccb87000a02f7

SHA512
dc0e7bba7d7767499e26ac183df7dbe4e56ba8be85da7ed8b194edac0a02f7ce3f2f284f781a36c5e674bce6abe54470541b6b3ea57ca6586a76b2069533bfee

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\1280_Primary Button Text.tga

Filesize
40KB

MD5
4ed17a87a346560272c439dd5fc8da67

SHA1
230978ff39d9625424647bcbc8e90756e79cf58d

SHA256
3c0a85646aed020ee61e7286a5c0104a9a1b26a0aacb0c6b977420d5f1d192a2

SHA512
28e3ef3b2ccde25f5ce84d4370aba345162c5ac771ef0c0bc446ab041125f6bea5d042283b28e107962005786862729374e442dfd12b547cdfe58f61d44ad907

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\1280_Scoreboard Small Text.tga

Filesize
40KB

MD5
910e7f920f59348e20f787d9240fe2a7

SHA1
9f85998b0a73efbf34b2e732942a0caada57925d

SHA256
93eba9e5ba94654d73d76944cb9860e4fe8db92a6c734fcbc57864cb766caf1d

SHA512
a19fad5b08875df9f16993d48562cc2cb4bf5d918b5f102b0439c6d6d6fdb862783762d586393b0e0b6c324de3c38c27fbf09d4b48c55affd44aad2c1ee9726d

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\1280_Title Font.tga

Filesize
58KB

MD5
950ce4f2583aab6854f2f3daf43d275a

SHA1
041be03920912db7791d4098a8b3e1d6a8d7bc10

SHA256
8bc1a1698604836ab766fec452e5366774ef3057a74ac373de8bc2a9bbe58b32

SHA512
420d21c295b8aea3f28bfa299fe9f6dfcdb726f0a5b7b024ae379299b86cd229b654d870e826c21b7e095001f98bf646360f6aab5973587f6ddd2d4e2929b933

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\1600_Primary Button Text.tga

Filesize
44KB

MD5
ec8766ea06b999dab276c2ed85397067

SHA1
d043859519210810ab69bc4172406511b0391728

SHA256
dff807e488eee92c3f841de1f330bac00b42c36e34320e6335ed6e5d926243a8

SHA512
5b69d36450816306ba280d2690c65f7478b84a4b1d8eba37b8a4baf8631d767859599e1b20bcabb930dbb7ebbfd07d89bb3336c9999809c50e20fc0661cfb77c

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\1600_Scoreboard Small Text.tga

Filesize
45KB

MD5
d3d6c70dd23590745a0f691c28f88848

SHA1
b46b4a8427c59e590f8adace2ab659da2f4f4e9d

SHA256
f472485bdddb0f7acdce7ba6dfb1520dfdab6b2e870b37f77f61714533c5fe79

SHA512
06a400b5462c9a307bb281cf725358a8bc64a27e34b5f6b95748d3006703e66c4a756ad86fc5e2de9c2a2eba534921234fc2ec422b6107ef7264f7344a258a92

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\1600_Title Font.tga

Filesize
69KB

MD5
a80b9ae2ceb6fd94580f6bc1ee9a24cd

SHA1
69b41ecca064e9528bdabf40ec4e0d398749ca30

SHA256
4741da08d0699272b1db37248f8e4b74d736035bc3df0fb54c19b09da732211c

SHA512
e69cdfd82942421f4eb1ee625d8e8a91216221efa0046e92987134b0f5cf5d6991b51bb11faa94a82cbb8b856bc4a920f53f99a5c31b67e13291fd722ade8431

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\640_Primary Button Text.tga

Filesize
24KB

MD5
ebc1b6a271bf99cdadc78dae5e9a29c4

SHA1
afddb10163d0cacf30f7a2e9f9e4f534c8425586

SHA256
3988ddbea3e6fd927933a698d28d66572d51e59938ea16624f644afe2021818d

SHA512
ccbc9f59f59c46187954d5e8a70513542471a40e8653f59c8d58279777c9c378f2e1891c4949d8d5b104117410e991f756d768932fd5353dfcbdca3c37d6ac1a

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\640_Scoreboard Small Text.tga

Filesize
24KB

MD5
07306c3fa68e4b5bb4fd4da515adfdc1

SHA1
ae0203c50a3ef107992d61f4b135efd6fdc809ba

SHA256
fad8e72511e03ea0b215e491da1ada731d7474a03d43c26a2f858c8fcee9beac

SHA512
d6d1b8f13d9263932f8757fed790dcbcdca681ca51a7581ca552631409b8c65de212436f8e161c60463edf8589067118d15537789e8aead85eeb156af5c29a7a

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\800_Briefing Text.tga

Filesize
27KB

MD5
8148e0f0a6679ced3ca04fd6c258d478

SHA1
9afc1daad5e004bb9481147ec5fac15693897f2c

SHA256
60946960e36a56fe17b02ab7c618e3ca0d61b7412acbb9967271ff309a76b5e0

SHA512
918c03891b46c645ff9b1a497a77bfee752befdbc2e82b882ca3d665dea21d3de1b112848ebb9b996b201c14bc14a70231838eece3df04a431becd0852417bed

Download Submit
C:\game\cs16new_rus\valve\gfx\vgui\fonts\800_Primary Button Text.tga

Filesize
27KB

MD5
a06ae3f8fe07c419b05e2c803d14997d

SHA1
d88fd662df45404e6874997b58ed98b1e718e844

SHA256
17a5a27301be4a264b6cfa1b663910e158a75693ca032d2b8cfd3d41c66efa24

SHA512
315ec6aa137576b3dc3549bbdf1c4a7c82617fe2c0c7c6bf84297fbe6e2bad3d30ad8ec5588e8b3a0230f360e27779700b40d1934e5debe31c3e280c14c55f62

Download Submit
C:\game\cs16new_rus\valve\models\fungus(small)t.mdl

Filesize
22KB

MD5
5f394d005ec12f63949d0c6a62c1b7b3

SHA1
957d1d0598c7bd0079db345db2006d8e4b755096

SHA256
47b5e88f5cc25627e8dc76b85eb6ad64d8613b00838d0cca6a85f118af81c7b0

SHA512
c51142a1e7902d720154378a7b8e01808fb4683e5a12c77516fa474b4eb05c0d2cc37aaf1b3b0a33757aecdc9ff8008333df66ed0e254b01cb5640b8646e6fb7

Download Submit
C:\game\cs16new_rus\valve\models\mil_crategibs.mdl

Filesize
56KB

MD5
3b6e8c73f42cf52a73a36271d2b4ab21

SHA1
2735e47314af1914c6fb7d8dab9ed087365ec759

SHA256
a0c1b32de541fefe134335b61c1e9dd4b2af28b8dde35e70e74d129c0fe1dd79

SHA512
384c254eda0c2a2ce618c3ea85946ed2e7b4677e4162a50a1103de05cf8658ad59d85faaa74d8d4896efaa3fe7a470b81af691d0a00fbbf959706d78708ff887

Download Submit
C:\game\cs16new_rus\valve\models\uplant2t.mdl

Filesize
3KB

MD5
ab9f1bf1f7d14ca0032df954e1dd5212

SHA1
d51ab73cb33e1737b86ea0bf6db28aa895bb86ab

SHA256
748e6fb4465843238519d56774643c2d4fb3f77131ba49ee9ca2d700c42acb70

SHA512
c5dcb61363551755beaa4732a21ec870c9b077a44eb0e810029f056a7c89b7be4d6e2d4e48b860a4eedc707d057ba55b2b45c238cf4a99ec167a1c07686710bb

Download Submit
C:\game\cs16new_rus\valve\resource\BackgroundLoadingLayout.txt

Filesize
714B

MD5
11136b7cff2358ebf01fb0d8783fa793

SHA1
05f5a267828975d2c43f90b73962b971b9672954

SHA256
f1d2461e3936ab6397a852f4efb971ad807bea0c6c99ca8377886ccd88ada750

SHA512
b8dbb295b7d5a9b5f811d4c63f9dfd6dba232269f5b04c259f817ed7c915bfd12d2df0b71efc2442b40db677f3c16a8c12e8135da7b76dc55a607949599caee4

Download Submit
C:\game\cs16new_rus\valve\resource\MultiplayerAdvancedDialog.res

Filesize
1KB

MD5
a3dcbd5b6d05a4ec50e8518ef47fe443

SHA1
3a393d1ac8b52ea7e044903c16caccdd14d5d52b

SHA256
dd63dc19eb64f5f18957888dedbb168ee268d426662805698521347f6b0c2c88

SHA512
061fafe037a01cf974bba9aa6fa059d8ae17e4d85e16a894f9e6309c173bfe3d99ae160c5f7399ba9baa453762c0366668d7c195698ba08cc24861532d31aef0

Download Submit
C:\game\cs16new_rus\valve\resource\MultiplayerAdvancedPage.res

Filesize
582B

MD5
ada9d3ce344377565485e166f576d112

SHA1
a79cc0b7fa95575405a91d79fe3a3ff2be182a13

SHA256
57fa8e749f571b14896eb59565e6c5aaf07ba08e1a288541143cc1c1cdba944d

SHA512
088f5d52cf8ce7b90464b4fa5185d88fa8122c05efa8c822f251c56369f8e1f6eccb000532dd0cb5a381946bfad394cdfee45d1c3e1cdd26cd691bea53064169

Download Submit
C:\game\cs16new_rus\valve\resource\NewGameDialog.res

Filesize
2KB

MD5
28c7746827f083721fb07b97c42144b5

SHA1
a4afba26ca11e0a9e3ed2e99472ecf92c17fe60f

SHA256
158c796730f476e658d7dc5e794850df09ca251dd00f56c6839a9931ec6e1064

SHA512
84835fbe3d96e6dbbe02cd2c8f32ee804483b4e85befda0dce6c381d8f90420a76ed7ec03c9fa14084e7442f8475c6782fa114ec85268803c6931778c25b93e9

Download Submit
C:\game\cs16new_rus\valve\resource\game_menu_mouseover.tga

Filesize
24KB

MD5
603dbf858b8ccfca88e63a0d284fbbad

SHA1
8a9807bfa7d3c19d4870c408e1973239a5d48506

SHA256
251af645272b8f6c2e7f45cd0d9f4c04f86c385893a63c1a38a8aa6c70503a98

SHA512
ce2e434c4b0c11dcb9c83958b3070a48e1f18d3ba99655ea9d1749627b7928d77e2754b1a9ed5b595ca6c84992a2c82bc51af4fba35dd680b7e8da897d307a0d

Download Submit
C:\game\cs16new_rus\valve\resource\icon_hlicon1.tga

Filesize
1KB

MD5
7ada900b04c0e3fce5c8fae496637502

SHA1
7e09b372151aa4b05d604d8cd6be5850814e70bc

SHA256
db6edb7e6c775e916a3287e98a1520ae5e3c4ae69650aaf0f036218ee5047204

SHA512
b41ebecb1284b0b2c2f16327d9a570667a64fdd9baa478509319607e5f178bccc1d7d650be7b45a7152bb4d976f126decdfe92d04cce4fee918b3dcc3316e5cd

Download Submit
C:\game\cs16new_rus\valve\resource\icon_hlicon2.tga

Filesize
1KB

MD5
1810657a6ba98a8ee7934998cc274167

SHA1
d317e6f2c4491f779258f7cf261d62022f2117de

SHA256
bdcd34d7b2d100dc8417c987f4409a3401e0463e43f3527f865fadc52e353ff1

SHA512
9a0aa9eca283b6443385c474658d77430555d626b266d7ea0b41122add04696274170651ec6709ed37c36a99db0b0479f51096a93471909b176abd69d767139e

Download Submit
C:\game\cs16new_rus\valve\resource\icon_vac.tga

Filesize
16KB

MD5
6b6188262b1412923046c0f18099784f

SHA1
b179ab2f81cc94432a33b7b7f9ea729c7f1d3a4f

SHA256
8d2230289eac31eedb53c68caf115c8f505901d38fa01ace2b3761be4c27351e

SHA512
9dc9240e47c362da458e7047c2a4ac5dee01e8bf116e56ee35d509afa8508d29877639677bf40f10988256ebbd0d18b80815ce21a747a254a79adc93037ea352

Download Submit
C:\game\cs16new_rus\valve\resource\logo_game.tga

Filesize
64KB

MD5
784470fbf15dd96063d85b801d481e3a

SHA1
7ae39d6510cd2392d0da71d6dc6581ca0c8b1dd2

SHA256
0f5f4eb6936d716b674952b8a25617e6d79111a468404c23f205ce87c5d66f1a

SHA512
7febcabd85368c2f95afffb25110410b88430871ba4b5e88c706cb7bfeec543ac521c43fb2deb70b709f1d9726d42b2c5199757d7cc1e671fd1850ef2ba6f3f0

Download Submit
C:\game\cs16new_rus\valve\resource\mic_meter_live.tga

Filesize
19KB

MD5
8705ba060c4bf2cf21728a71a910b45c

SHA1
39365c55d7817a06d8551f16e0aabe84dfa1c9f4

SHA256
38e9b353145a885e23443275aeb5250e2533403ddca7761426c683e343ba4eae

SHA512
68bdf3da2b1d6a7b724842630612f81550673c1b8526ecc3134698eae387dc090cd41f21f1fd11f70208c7b22d8815dd82b5cde4ca30a101fab3f81a1f8a3c90

Download Submit
C:\game\cs16new_rus\valve\sound\sentences.txt

Filesize
49KB

MD5
1a5c1dec3290519df29d41caa75926e0

SHA1
008195da6d18f03d7477a22edc4f6596a7b48288

SHA256
f6772a9af4364487053bd2fadf696b27c9d21184b62fb603a2797885b743f3d7

SHA512
7ecb648d724e6d0ef80cbb0e2628ca0f9f31e82bd5c0f2b441b13843c599cefbfb04d611f2511730afa9122dc5dd52ad281248eba385647d1eb63208c1d2e9bd

Download Submit
C:\game\cs16new_rus\valve\sprites\logo.spr

Filesize
361KB

MD5
4a972be4bd6a377a7aa87189c3306b49

SHA1
94d2e6e78d5be777b7744e4b3ef1bc5ea7498751

SHA256
a2136f96a42941d2a37a95762b1eff7f2680d73ee92ae8bdf6db46b89f2a5834

SHA512
75c32d4a9144e62aef79c71926b78af966e9263c1f94511a41cb2f397ae608b0770a506b1b1d565a924debd8ba3af6975d8a357efc087d7d04291cfadbc2c68b

Download Submit
C:\game\cs16new_rus\valve\sprites\muzzleflash3.spr

Filesize
4KB

MD5
aeeefbc9a93f875139c647fa0cc5963f

SHA1
1bbf1c85689cc1742fd71cec96f4ae6af3576d82

SHA256
88c15af4711e34e6f456bbe0056ffebeedce84749b593efb3a472af8a637db0c

SHA512
a354d04d946a4e54f3a52c1a5c50090956a939a6cc9ec81f76d7a3d69726c216815e0330e75d8f3d84fdf3f051fd7b9cd9596f730190ee760e7c5a24f5d29daa

Download Submit
C:\game\cs16new_rus\valve\sprites\small_logo.spr

Filesize
88KB

MD5
27dc6519e03db41adebe095175cbe6af

SHA1
57ef15841c76fa6e9a14445e0f9fc741dbc54611

SHA256
52ce578669f260926eba402b70f0b15f5bc868aeb3289d30f5bd1c22e2716fec

SHA512
33b788488e11c03cb9867aab24fcf3ceabc49704af33d67f29c5766aa85c74c1b78da4ec00a1f8a164261d696bbeaa97bc99fe46b33ab8b4f84a426fde2cfcbb

Download Submit
C:\game\cs16new_rus\valve\sprites\spotlight03.spr

Filesize
4KB

MD5
30c0c19f5c5226225ac3959dfe1f1428

SHA1
5c7be5173586da26dd730a790a151b8a16611106

SHA256
5603d52c5f089950f372e2b00845738746abebaa2796b0b3e2f6d8d2f4111760

SHA512
c71799d84798c2e2a82dbde7ffa5a2c8698eaac615e77d337de7dafc9239c4b59bc2794b2ccd5740d3e19957549257bcd468660d0696f09fdca37485150c233b

Download Submit
C:\game\cs16new_rus\valve\sprites\streak.spr

Filesize
4KB

MD5
aecc5ae7744a57ebf4be72800f4afc99

SHA1
ef85d3edc6e67effe4bb05e2f6402fcc06434c50

SHA256
0de493642bbd888f1b7a2df91150cf0958e60f36265e10d994533f3020dc8cec

SHA512
fe9cb6bf4bcc06e4f22396c1e1fd8a8ec6abf71e2bcd93acce2fbd0382beaa78b08d211a1136780052f18b9869240a50344860e8885c2a7d23999da6b3ee396b

Download Submit
C:\game\cs16new_rus\z.txt

Filesize
5B

MD5
584da0a485f209242059e6de66aac904

SHA1
0250a7b095bc6a969adbe25de14d23c4224d37c3

SHA256
01f9bf4bb49ac52d7d7a7d61f79e51c2cba94c5f75e034143ea614f0d87b929c

SHA512
c44088e8f19a177b9f47f0c8f0e1c86083a0b9dbc61f4fb4faa104be1b978ac75d037e6aa0cb4de577cea01b118f3d202659b8501948d7a539f2e13d6d0fe4f4

Download Submit
\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL

Filesize
215KB

MD5
2640b083bb33cc6095cb0e6e2f8acc98

SHA1
191ed504bc36016899fbfa3f080bd1c3b1a7cc6c

SHA256
550ceae946515cf892dbbee249d72d22bf44a11af3db16b578196fdca8170b1e

SHA512
7798740ff940cde4a7d677bf1366ff564c76babb5666c07aad7231ab51b050e4a5549da4c4d3bae944e1910f24d08b1660069e24fb44f8222dbe84e66a249b5b

Download Submit
\Program Files\SUPERAntiSpyware\SASCTXMN64.DLL

Filesize
215KB

MD5
2640b083bb33cc6095cb0e6e2f8acc98

SHA1
191ed504bc36016899fbfa3f080bd1c3b1a7cc6c

SHA256
550ceae946515cf892dbbee249d72d22bf44a11af3db16b578196fdca8170b1e

SHA512
7798740ff940cde4a7d677bf1366ff564c76babb5666c07aad7231ab51b050e4a5549da4c4d3bae944e1910f24d08b1660069e24fb44f8222dbe84e66a249b5b

Download Submit
\Users\Admin\AppData\Local\Temp\SUPERSetup\setup.dll

Filesize
106KB

MD5
dfa33ee864f5957e57e61fada73f6087

SHA1
9fbad7ecf31bf1a3d6fdc87884a36eda8dab3cc9

SHA256
ffeac88714650d325c25edfb2765d5220fe7e33b7af43743ba9df83dd1c6eed3

SHA512
beaeca2bd37b7a4162943800d4e9f75e962fd191b86d6ab28b51149eba979903b4af39fa8a9dbcb15df0f696db4f409383b70d5fef3e101863d87360f031af62

Download Submit
memory/608-14319-0x00000000001F0000-0x00000000001F1000-memory.dmp

Filesize
4KB

Download
memory/608-14324-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2232-14293-0x000000000C8A0000-0x000000000C8A1000-memory.dmp

Filesize
4KB

Download
memory/2232-14295-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2264-14311-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2264-14299-0x00000000001F0000-0x00000000001F1000-memory.dmp

Filesize
4KB

Download
memory/2316-415-0x000000000CE80000-0x000000000CE81000-memory.dmp

Filesize
4KB

Download
memory/2316-416-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2880-426-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2880-8491-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2880-376-0x000000000D0C0000-0x000000000D0C1000-memory.dmp

Filesize
4KB

Download
memory/2880-2948-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2880-388-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2880-428-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2880-408-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2880-409-0x000000000D0C0000-0x000000000D0C1000-memory.dmp

Filesize
4KB

Download
memory/2880-417-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/2888-14821-0x00000167872D0000-0x00000167872D1000-memory.dmp

Filesize
4KB

Download
memory/2888-14784-0x00000167872D0000-0x00000167872D1000-memory.dmp

Filesize
4KB

Download
memory/2948-14296-0x00000000001F0000-0x00000000001F1000-memory.dmp

Filesize
4KB

Download
memory/2948-14298-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/4628-442-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/4628-419-0x00000000001F0000-0x00000000001F1000-memory.dmp

Filesize
4KB

Download
memory/4628-422-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/4628-12027-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/4628-427-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/4628-13434-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/4628-13966-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/4628-7237-0x0000000000400000-0x0000000001400000-memory.dmp

Filesize
16.0MB

Download
memory/4660-14853-0x000002220C270000-0x000002220C271000-memory.dmp

Filesize
4KB

Download
memory/4660-14854-0x000002220C270000-0x000002220C271000-memory.dmp

Filesize
4KB

Download