azov | 4931f6e4d65c362743d3233661a08aed3f2161ae7961e17ead74c9288ad8c36b

Analysis

max time kernel
147s
max time network
151s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
18-10-2023 12:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
Size

3.3MB
MD5

87ad4b692889e604245f3a1d68a916c1
SHA1

f9d836a54bb388c9b46142d20acb919adeeda883
SHA256

edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260
SHA512

c1a67d109e1919f02449ff62f21093de3b30b07d7d4b6a350cf8e6c1bd9eb38e7bc68937d7965c0d84600833f32e471915c01d5d283422e16bf66e0473b2a02e
SSDEEP

49152:J/8gnQYPGTY62jlCui3IA89W4x8n+kKWZXqH+cz4xqA1k5Tgx+/Z:B8gVGuiYA/lHcz4OLh

Score

10^/10

azov persistence ransomware spyware stealer wiper

Malware Config

Signatures

Azov
A wiper seeking only damage, first seen in 2022.
ransomware wiper azov
Renames multiple (2535) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bandera = "C:\\ProgramData\\rdpclient.exe"	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exeedb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe

description	ioc	process
File opened (read-only)	\??\L:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\N:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\X:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\Z:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\U:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\M:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\P:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\W:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\B:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\Q:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\R:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\A:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\B:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\H:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\S:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\J:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\K:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\O:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\E:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\H:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\T:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\M:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\K:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\N:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\O:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\Z:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\G:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\I:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\L:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\I:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\Q:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\T:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\Y:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\U:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\V:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\Y:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\A:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\X:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\G:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\J:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\P:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\W:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\E:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\R:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\V:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened (read-only)	\??\S:	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe

Drops file in Program Files directory 64 IoCs

Processes:

edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exeedb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe

description	ioc	process
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\FlickLearningWizard.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\7-Zip\Lang\sl.txt	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\7-Zip\Lang\mng2.txt.azov	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Tell_City	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Europe\Samara	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\lib\derby.jar	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Europe\Monaco	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\7-Zip\Lang\vi.txt	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Memories\button-overlay.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\ResizingPanels\1047x576black.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Dawson	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\db\bin\setNetworkServerCP.bat	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-openide-windows_zh_CN.jar	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Indiana\Knox	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\day-of-week-16.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\Stationery\Soft Blue.htm	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Warsaw	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Blanc-Sablon	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File created	C:\Program Files\Microsoft Games\Chess\ja-JP\RESTORE_FILES.txt	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationUp_SelectionSubpicture.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Push\push_item.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Windows NT\Accessories\wordpad.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Europe\Andorra	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\Stationery\Monet.jpg	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\1047x576black.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File created	C:\Program Files\Java\jdk1.7.0_80\jre\lib\deploy\RESTORE_FILES.txt	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.ecf.filetransfer.feature_3.9.0.v20140827-1444\asl-v20.txt	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.browser.zh_CN_5.5.0.165303.jar	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Asia\Hong_Kong	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\sr-Latn-CS\RESTORE_FILES.txt	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\jstatd.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\include\win32\jni_md.h	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.e4.ui.workbench.renderers.swt_0.12.1.v20140903-1023.jar	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.osgi.services.nl_zh_4.4.0.v20140623020002.jar	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\7-Zip\7zG.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Argentina\Ushuaia	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File created	C:\Program Files\Microsoft Games\Purble Place\ja-JP\RESTORE_FILES.txt	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File created	C:\Program Files\DVD Maker\es-ES\RESTORE_FILES.txt	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Performance\Notes_loop.wmv	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\16to9Squareframe_SelectionSubpicture.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyGirl\background.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\bookicon.gif	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx.ui.zh_CN_5.5.0.165303.jar	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\keypad\keypadbase.xml	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\ext\zipfs.jar	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Antarctica\Macquarie	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Asia\Thimphu	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File created	C:\Program Files\Mozilla Firefox\browser\VisualElements\RESTORE_FILES.txt	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-nodes.xml	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Asia\Hovd	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Europe\Luxembourg	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\main\zh-phonetic.xml	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Microsoft Games\Multiplayer\Backgammon\bckgzm.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files (x86)\Windows Media Player\wmprph.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Atlantic\Cape_Verde	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\EST5	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\SystemV\YST9	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\ipsptg.xml	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\NavigationLeft_SelectionSubpicture.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\OldAge\15x15dot.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Pacific\Saipan	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\FlipPage\NavigationRight_ButtonGraphic.png	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe

Suspicious use of WriteProcessMemory 6 IoCs

Processes:

edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe

description	pid	process	target process
PID 2300 wrote to memory of 2760	2300	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
PID 2300 wrote to memory of 2760	2300	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
PID 2300 wrote to memory of 2760	2300	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
PID 2300 wrote to memory of 1308	2300	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe	wermgr.exe
PID 2300 wrote to memory of 1308	2300	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe	wermgr.exe
PID 2300 wrote to memory of 1308	2300	edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe	wermgr.exe

C:\Users\Admin\AppData\Local\Temp\edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
"C:\Users\Admin\AppData\Local\Temp\edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe"
1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:2300
- C:\Users\Admin\AppData\Local\Temp\edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe
  C:\Users\Admin\AppData\Local\Temp\edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=80.0.3987.132 --annotation=exe=C:\Users\Admin\AppData\Local\Temp\edb12949255bb127a3e9c280181d1e227e1e99e445381b5b1cbde57bc7070260.exe --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=80.0.361.66 --initial-client-data=0xb8,0xbc,0xc0,0xb4,0xc4,0x13fbbb840,0x13fbbb850,0x13fbbb860
  2⤵
  - Enumerates connected drives
  - Drops file in Program Files directory
  PID:2760
- C:\Windows\system32\wermgr.exe
  "C:\Windows\system32\wermgr.exe" "-outproc" "2300" "348"
  2⤵
  PID:1308

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe

Filesize
454KB

MD5
d61a950976cbaec2b32fc090e37e111d

SHA1
4311e568e57f0dbc205c07e56f93ce5d10f19b14

SHA256
2dbf015b86187ccf03d2c8dd347c346ed2201b170754e5438f4f6ee4160db7b4

SHA512
9b33eeff1fd6063725896a1bbe9c77340c9e195c29a2bd22d80882ee44743cf125bae888f962f1480b245050030c062b3ce4f92ba6a2648cbcb0a4c7ecd26b97

Download Submit
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

Filesize
284KB

MD5
ffd61fafc5e60126a1d7d1eb46868b24

SHA1
c527a6d0a61ff0b1c31dca6ba50cf5d18e7ef9e3

SHA256
af79e4ff46c3eeff925b62372fb81bd7d25ba6277d9cf9758097faed1baf4440

SHA512
c77dca69bbdefd4bf83c28e75842663f89376510d6584bddfbe5fe757286f3f3ca60910dc403a51732c07a3c9fcba665ca5b3751827d143f5e0a18a9ffa35a28

Download Submit
C:\Program Files\7-Zip\7-zip.chm.azov

Filesize
106KB

MD5
e6c81e57c4c76d8d26a5a92861874ce5

SHA1
07641b8ed3f3639444702ec90288131fc76c84ac

SHA256
a8e98c5a76aa240779ee950c6400a18a46dda450b864f783ea043745abb057fc

SHA512
60e8c44b63406b43cb7ff28598a88a7ebcdd8a0ac15f8a1291096e9211e1fd2f6cfc48c879088f95022287a34d07d8efd8ea5d6235035c81de5b5cac8fdf9e91

Download Submit
C:\Program Files\7-Zip\7z.exe

Filesize
567KB

MD5
fb2ac4d4b7806d296ac7534896765589

SHA1
800319e89af4b47853f1c837cacb8b0146b61c23

SHA256
4a1dad91dd410c423f930637a52f4da638905d72e39678f855a9c1d4f366c71f

SHA512
9ff279b1477087f2acf242548beb19a53308a12527b3cce34a5581e0aa271de388a7555ca59ab305883af172267d07752eb6c2429c1c1b7bf92e4332be4406a2

Download Submit
C:\Program Files\7-Zip\7z.sfx.azov

Filesize
201KB

MD5
7ec5ef19620a05af9d0cdaaa5344317f

SHA1
004f60b1a1b61d2057ce686071e83cc504df001d

SHA256
88bfdd106f4d28e9835d453ebc68bd1e0223287ba7e35ed7e0f0c4de609f9595

SHA512
70c90356cbf2d909b7ddabdfd942ddec3a11998a865d0ca3f8ebbb6da61a81751c62d6d37ca9fdd1210022ce37325e7c8803533e08e70b33c3dd616dd1d403d4

Download Submit
C:\Program Files\7-Zip\7zCon.sfx.azov

Filesize
182KB

MD5
de4c3dd92f841febf05a3c5d6241bd4a

SHA1
807e6ffeea195970e497a363a45b8a5a78e96b7d

SHA256
31f4c1d085cf13f159cd28cf2ad983290f3744e5e33e4cac333a2586736775a0

SHA512
acb3da315f582a21fe9064c236d36f56973168d1b018f4b79746bcb01655ba4e2f80ecd692c5c834f419627c9d9767e0137637371c6485a2334d598409fbec03

Download Submit
C:\Program Files\7-Zip\7zFM.exe

Filesize
1007KB

MD5
b87edd4b5dcf7c0c85f43ef7b9a47599

SHA1
5bb613851dfe076f7da70708c642209d7abb13cf

SHA256
5f67d41ea1e4eaf8d9c7bd6c22d4df5fdc26b58ee3e23eb96388432f48fe526a

SHA512
dd2445529cf19366f381d30e109f4a37b2c6248daf738f7835ee2df5dbae4d11623a9f3e2f687a83d8656d6caab96fcb28a9313b6e8b631a3a187de946650c2f

Download Submit
C:\Program Files\7-Zip\7zG.exe

Filesize
698KB

MD5
702e63a543a0481214897627509e40f3

SHA1
19e0a450af47bd40349f5ae256edc8c2137360b6

SHA256
76c3d7edae14df7158f47e4050bf84200deae3aa8ed14e801f0ce9069bd23003

SHA512
f23e010cb5ca4470aa552bef3bf1872b138537baab4ae06397f0674be248c0279890cd90ff27630a49724eaa8ae5189faa70ad88995a5532ae5d428719985bcb

Download Submit
C:\Program Files\7-Zip\History.txt.azov

Filesize
47KB

MD5
a1d69852fe943a9d2109c32ed98b614c

SHA1
ce0ed6b45dab6c906210a691c322f3e7626683df

SHA256
dd5931d6d4853b5a7b7781f7e2a3fba8adc1f1a90674f1dae13c9785d1203bf5

SHA512
fd69f42b0ea89bcf39ad7905afc1f1ea68f41d7a3301975dae9ee6b7b2f6465d2b80a71d5bdcc8aa7237ba7d95ad2a206bb1b5151b9a5eef4c63b0694535010c

Download Submit
C:\Program Files\7-Zip\Lang\RESTORE_FILES.txt

Filesize
2KB

MD5
78ede93114e65f9160fd03d3357c56e6

SHA1
88d531b101e57655f1d0d26c6b3257aa2468d460

SHA256
c97412fbf88da8f91099a52888dea4c3f222cd95af3e681e3271cbca8b6b7bb5

SHA512
074a4c741273902ccacb6f573b96d8accedb2ee405dbd04350cdbf54d180c1fd577a4e90c2aae26bf72f3782403f4494db6e3501a04cfd9d7d81a6bc14884b9d

Download Submit
C:\Program Files\7-Zip\Lang\af.txt.azov

Filesize
5KB

MD5
89f4b1e77cfbb7d1bb091d5025eb398f

SHA1
c7ef5515bbcab78735adaa16ed57df712489ff93

SHA256
607f8c1aba051534cc29d902a4f4e097fff94c6eca66de9cff46d6ff71d3eb3c

SHA512
7f0d82a215ae6f3937cacf17f61caf578c61dd0d9a526608f49944f740071dfe576a28f2d60a7f643a0d6936b164a9be7a5c5019cf46f70ceec19e55b44c7a32

Download Submit
C:\Program Files\7-Zip\Lang\an.txt.azov

Filesize
7KB

MD5
038ca3883ab7834fa7da8acdcdf7adfc

SHA1
95dd0f9af2cbd8e3f886c9fca5a3dab6407b1def

SHA256
5540f780d91a3f761bbbf7d8014afeddf9fe4fc1a822b41827da23cd2dbfbcce

SHA512
e34c6df984d828ac7cd8ee48518d356a27ee37fad18aee099c0024a2296f36fb934b451da8d48c227a29d8b8c31a4a668d130c37d8127a6058f2e85b7b4f0ec7

Download Submit
C:\Program Files\7-Zip\Lang\ar.txt.azov

Filesize
12KB

MD5
9e5204bc3a5ec376f0d852f500c0af86

SHA1
9c743147a5896fa371cd776abe4217122490e5ae

SHA256
ad7be25f6952b93f6a6a9b184145f979a93825b959476a194d21eeb741eb4e8a

SHA512
4dd18d0bfdb1342b8782a9ff1f81d4b89ac04ff5c434bd19dc793a8ff95b2d52dc27c6188ac62b56a5be963c8442e36ed6da9e0c2f9051fdcde7931b4b7a5179

Download Submit
C:\Program Files\7-Zip\Lang\ast.txt.azov

Filesize
5KB

MD5
0cad8503a9a56f572f948bae7caa9f58

SHA1
3c988b406551acb1bf0183f68d431b852f25c7cf

SHA256
4375e21a59f6bfcb9cb71686b86aa464ed226bc44f914363f345956fdfd9eda2

SHA512
a73a8deab0f76eacb3a993c2e2e36337a9e808dca8615d4262d600d6ce13d0895d69dce5a8b033335acec95d280c4a3fe647b7b877448f3f7ab7ef8789023540

Download Submit
C:\Program Files\7-Zip\Lang\az.txt.azov

Filesize
9KB

MD5
7decab546e28ecd880b20c7b3f311b88

SHA1
f6d475934ddb299bde14a7bbf85d9ffda53b42b3

SHA256
408e80090b5d003b0d6ef293fc18fcf97315b399c8c4c03c6349aabdaa4dde17

SHA512
f7882b8b0419636252fa56c6cfe9d2f0ccea5f404f5ec063f889b0fec9af21dc58cad80c4c1428c6d9a481926400811c17c4eeb3eb8d746d9808b1eb696b82a7

Download Submit
C:\Program Files\7-Zip\Lang\ba.txt.azov

Filesize
11KB

MD5
53e652e3d8c8b4b94642a7963c5a500c

SHA1
d17eca53fb845dc5c519d53184784c72e79c2a97

SHA256
dabdce0b65b41e3ed250d8fc4333d360c3caeb50cefbaadc5ba8f942e1af36bf

SHA512
3002a25bca6e5b31bc8a678322c5a35470a13ff1d7564c6efe111a66ebe97aadf74021adc9d14b829cdad394d1528cef422e2850ce4708af899e55e884401e1a

Download Submit
C:\Program Files\7-Zip\Lang\be.txt.azov

Filesize
12KB

MD5
9b687224556049ba935f3335f4a746d5

SHA1
aa3975b66f0c7d505a0df169b31b487946c9183a

SHA256
6c08cbd0417bb2c5d68dc08d8efa655bfa25d7c593d573460dcc206497b21cd2

SHA512
e26fdc73292a2cead3f5f3bf0f923a8dd5b3cd809979b462ccf50eb449198c8047cceb04bab26ab1704791e788ee65b8aa9aa19f66b5aa0224f4eae4416de841

Download Submit
C:\Program Files\7-Zip\Lang\bg.txt.azov

Filesize
12KB

MD5
233d1199ac143062edf5a8e593e2632f

SHA1
28e022e3b5ffea47a3234986735b228b47923b6a

SHA256
48f79f9e063c3540197d836ff941a744676aca99a18a6fbcd507b66e09741855

SHA512
7f2640a6bd1632366ca55c7ac33df33bfb2b769a34fbf5a006feec07797ebeb4de0a7d7bac7fb7276a1c3a54ec63d4b01837648463f880625134c3a243d400ee

Download Submit
C:\Program Files\7-Zip\Lang\bn.txt.azov

Filesize
14KB

MD5
165eb733faf197035c873d2229567545

SHA1
1d9bae6039bca9fcd7903dddef74954e3154bc25

SHA256
ebcdc76377b257076c252c3a2beb99c25394c43d9c75ca32bd962f443da349a6

SHA512
3dd0119fb73a7c9e7fc83b075d6b933d1c50366d9c938ff508cef0f6290a92db7130982b22b668503ca671eae8dd36ba0ac6d43a3844ae7a05d87d044836111a

Download Submit
C:\Program Files\7-Zip\Lang\br.txt.azov

Filesize
5KB

MD5
ef8698b85c3a82315e58fc9593409449

SHA1
9cc64f28dac3fcc49cdfbba4cb723eaf29a4660e

SHA256
ed465bd6bb6c71b4b2ea4a55cf6acf30d4974e63cf667170579351a8ffee6e3b

SHA512
d10eb1557c851d12faa4560baf871064382f0dc1388bbbf842f9a1b259ffb9060027df8fda6c23715c78e557256a338e45e5df00a88b339d0b552b903a0689d1

Download Submit
C:\Program Files\7-Zip\Lang\ca.txt.azov

Filesize
9KB

MD5
b263f4bff1850783b3a35cb2178ba17f

SHA1
b365fab8168594510caed2686d52229f80164c0c

SHA256
3f2f4cf053b13074adb444e1808cbedc118c139036c75b2ccd78260e4c4f76c4

SHA512
92211d9ba51a9259d2ed9c02077088cd9215a3e562ee7f4cd889c73b720a5d311e948258fe926b510af66515a14aa4d2cc83cf752edea17064f53515c64494dd

Download Submit
C:\Program Files\7-Zip\Lang\co.txt.azov

Filesize
10KB

MD5
3244754658f6d9374bd369e8f67b9db1

SHA1
d8ac636bddcd629dcc11664f4b7043ac40cd339a

SHA256
9bf5bc257a8a355ee304acaba07c0b8d613b81c04f15a0ae6f2701734299b745

SHA512
2d336d59d06069a6932a7667e41a8cc2c590604e7657c1e9704c69aa288fde53afa8351beb992afcc643391a24386e153849e5577f583bc914a5a897119194d8

Download Submit
C:\Program Files\7-Zip\Lang\cs.txt.azov

Filesize
8KB

MD5
759eeee81ff2c481afc7868b639bb8ae

SHA1
64028fe4d741793502dcc722334bef563eb81c4f

SHA256
f3d9dd769997776aa522f2c0f730cc62aeb40dfc9f17d3255e0a8f8bfb158952

SHA512
9e6ac3378c2792fc0017e5611b44565c8403efa91fb62f5a49aa4f1a05ce76c7d411ded1a2e05b58ba1dff50c7d0068c7744fd244e8d62e7cc41e2658be2d366

Download Submit
C:\Program Files\7-Zip\Lang\cy.txt.azov

Filesize
5KB

MD5
dba0f0451a61c7acf0a06bd88f7477ed

SHA1
cc5d9cb4517d3d6ab752ff147ebbaf68250c4c9c

SHA256
59cd4a9df11ddd8f64ac395870c9a9bf2b28185b0aa8508710d33f250b113ba3

SHA512
8846a08130d954c1f1bd1f0026e48142bc76717386f13462d516d53dc61da73657ea83a785bb358d2348934ad8f3ebc89493f73fda8988f0f6faf4ecdf234caa

Download Submit
C:\Program Files\7-Zip\Lang\da.txt.azov

Filesize
8KB

MD5
fdf95dce88255c5765747198254e7aec

SHA1
eaaab9fa3efbf342f863d8c68dfe80035aa7b705

SHA256
0a7729be13b11ea6339645d48131f5ffbb9281f4013b6075cdec94fbc919e2bd

SHA512
b95bd3967eb451811702fe37cfc0e68887b0e709621bfa55c2ce28cc840d3c3ce0815c572d3583f7dd3fba25a546d9a20a6780403e548501dfc5517e0160e438

Download Submit
C:\Program Files\7-Zip\Lang\de.txt.azov

Filesize
9KB

MD5
a8176fdeacd0ed2aaf0a0958ede8be36

SHA1
2007b59a19b42c8c67d86530d9bd6cb9fba65c39

SHA256
197b9f95443aa37c84d2fc2af23476e90fe8ca5199c6237f1fd3468aa3a49596

SHA512
fd0a4bb3c2f74336f56a533e68101813b4aa4808a7ced8e8e9f5d7ea276da582c768bf294e5f980b470b42d8d345a07436da8318e5b654dfccfe722651df61fc

Download Submit
C:\Program Files\7-Zip\Lang\el.txt.azov

Filesize
16KB

MD5
9bdb287ac403fbdcfa1f466dc161e114

SHA1
796b82cd7f65360bfbc977c58b6ae6a06cbe2e10

SHA256
e2b09a93a30b010ffb1fdccbe4aecaa53b1468b6543bd4e885134f5d1fadb39d

SHA512
933266545e324e8d1e320e33cc917845f4ef34a045f4ca858c0545f3aa15fd68270faf6e060f00e1e5d032619bc459a5dee0ca0f47dce8ae47e56406baafc022

Download Submit
C:\Program Files\7-Zip\Lang\en.ttt.azov

Filesize
7KB

MD5
c81a56e34a0865ef0f4180b265b69f21

SHA1
921abcc6b0016558919406591a8610cb35bde8e1

SHA256
327aa85cb74264af2e76e8cecad5f23763a0243e6885c3706b79a89578ab0017

SHA512
a3eb0da6dce59b3c4f3f53ff5ef0ae26892b83112b9dd92254b6c99c2687995fa6b91cd8cedc1e982a56dc6f8c0918f9563f08e8e755a68e9a1b5ff6405edb84

Download Submit
C:\Program Files\7-Zip\Lang\eo.txt.azov

Filesize
5KB

MD5
7b4119d5f51a0f90fa2de4e5eec67713

SHA1
13e46076c189fffb907b630e381112e5b61e9030

SHA256
fff987aa32bd999560ab0b482f5463a7a8a56bdc79249a351a1127b9b8487944

SHA512
0185a209328dddfd8929990059c096b905647c4c38a6c3d06d10da04f952a166421e6e931bdf4e7604dbe1b1d48e8ae5a52f7ebe61e0adde3e43728ce74a533d

Download Submit
C:\Program Files\7-Zip\Lang\es.txt.azov

Filesize
9KB

MD5
bb2b7b2cace2a302989639def0c566ee

SHA1
ae1f070d722ff6034fdc4b6b70d4eca4eca35952

SHA256
47fda8e08f85796cbd27f9d4d09b37fd3cfd394c483b1a912536ed6aec05ba9f

SHA512
6e974fda025ba0f9b10b775a1228ef1483fecc5813862a4f85267cb922bc6808ca07f9a0fe48473dc0681c24dbfd85439c72c9b228dda05b4030905a6be54539

Download Submit
C:\Program Files\7-Zip\Lang\et.txt.azov

Filesize
7KB

MD5
4754c7e04d840ec1833f126768cea076

SHA1
494fdfae6fe4e827337b53b86d911a3b5ac21060

SHA256
9a07aa66477bc21969e8d27946f80b719871aa4294b74e8ada8a2526214cd19f

SHA512
69eab6d7eef4ffa0239568d0e92fe8471ac413d67399c12799026484cd8565c1958aec1733a39c0eb966d3b10dd80bc03c59616bfe8772c1b9840b344682f525

Download Submit
C:\Program Files\7-Zip\Lang\eu.txt.azov

Filesize
8KB

MD5
c94931e076a46fe69c9dca9400ae44f8

SHA1
63c6b10ebcb1914a53f4316d9205e8a39d5cd2bf

SHA256
12c5e7eef86c9528549c653a01dde24d832c23642b947bd26bad353d5c2116b5

SHA512
8e5ed26f6563cf0c5141b5c1f76aa58fbf1482d6efd10eb58677def20390f07f28247ed45aaf9472918204aa6be09fa00c68a7fe23d282cfdeaff6767aa2a152

Download Submit
C:\Program Files\7-Zip\Lang\ext.txt.azov

Filesize
7KB

MD5
1a966c1f68598dce5bf8635614e34acb

SHA1
cd31da554e0bd669d9cae82dfe5ce815e021573d

SHA256
837d43a5dd6f53e5de872b3298bffb62ec9f5e455a210e476f57f469c24391fa

SHA512
1be59a882d0576c6e6e23d5a3fc0b44dea2e2bd001a038231225524b8cdc5ff86e077f9b68f5976f995a9cc7145d013909c3333b0920a8119be3f7317662465c

Download Submit
C:\Program Files\7-Zip\Lang\fa.txt.azov

Filesize
11KB

MD5
5f62c790900491b6adfb31fba2961409

SHA1
9de7f7ee6300feff9c55f2f915f320705b5c959c

SHA256
158aecb9dbcc46e00f47eb5a95c0c8c9a3ebe5c504bf48a7450269e19345a65f

SHA512
40442c63406f7209bcf9b1e465b2581871ce0da2b6268d1b5948f7ba0169171f6aed08db93ea5360027a7cbd11d9c08ec49a504cf8dd9f475f84e8b9d7c9bac9

Download Submit
C:\Program Files\7-Zip\Lang\fi.txt.azov

Filesize
8KB

MD5
49d19e652f4e28213508e0c9a71b0874

SHA1
d96e034e559b9231945bc255c4ed503c07ba4152

SHA256
67b20a75291199f5cf00b7ec27edf46972cf5994a875a1364eabaf4bcc3224ce

SHA512
577a31b8cd763052475b3cae32c64ecc55a0975568246c03f55e0a3d93846810353f9ea12b6c3fd85c28d08f6dae9ec5ae2b698ffedf1f7f33a9d3968d1b1dfc

Download Submit
C:\Program Files\7-Zip\Lang\fr.txt.azov

Filesize
9KB

MD5
8b6bfe1cb604d60ec6ff8f7224503e12

SHA1
3c844eb8d931769fc42ad7eea64041a27ffa82ac

SHA256
b45cccc4ef7016a67930a387915906dc3c5809781e5de6c3050526537a07cb42

SHA512
b0c830bea7846a498232082676983ed7c7319e18013544aa4362c4994f230ca758a240a4980a71e64997d8e94bfddf40d89286c7e8f199c6fc6afca7a1c91e43

Download Submit
C:\Program Files\7-Zip\Lang\fur.txt.azov

Filesize
7KB

MD5
fcfe160843364e5271b0a9cee3dfcccd

SHA1
f8b1254726f219d9c49e30b5b6d83e99fec8fd9b

SHA256
8b60f6c6f003f3476c8fbbf87d977787ba835d8ec0c0e88ac4c8367c5fffadae

SHA512
6fab6f032495646dd6e3421f52754ee29f334bfc9cd6e0d1dc1409afb16edeeb99816650249784c0c845de8bfe9dee3e235b827710cc83846460540fd15a1e4a

Download Submit
C:\Program Files\7-Zip\Lang\fy.txt.azov

Filesize
6KB

MD5
b63fcecee7e58f4ee3b2aa32b86db1f0

SHA1
19c177049cdd7ece085e283efd9c4ccbc89ed3a0

SHA256
839dd93655426ca38b3945de8ca5768309cb1c3ce3c5371c1108892e69593cef

SHA512
f9462a9f62ec37d34fafecaa90fd0bebbcc46913e94a8d8e8739479c608cf46d514a4e05941b9177eb576a57b211ecba94b1cd811ead34b6e58f64fd8c12ba03

Download Submit
C:\Program Files\7-Zip\Lang\ga.txt.azov

Filesize
8KB

MD5
2c4768240ab2d8b233dc50f506cb2a36

SHA1
734b089a65e5f8e22947f391c580ff754f4422e3

SHA256
6b3950356e24384ece594cc3c337c403a687dee8d1f7ab800654d4a673f9f92a

SHA512
6fa479d6f442242035fcb94900f4d59976359de7fc911b6d22d0b196ea33fcb6f8849d5ef9117f9fdad836caa7c57d5faab078b300e1673b522ba976dc5ede52

Download Submit
C:\Program Files\7-Zip\Lang\gl.txt.azov

Filesize
9KB

MD5
a578affb2b49b00e748373d3d898bc44

SHA1
a71ea439d6374e93758478ca8dcc5aa9fcbc52ab

SHA256
7589b493288310cb0a4f1019982bceed469ef9e9dee1faaa2c622972a74432f1

SHA512
67babfd72389bf328d37c0d2113e3039de4cf7af966ef48a69bc67a93a11df2904480dba891c58ad856ec42403e349e9a8504cee1f084e10fe1ef5acf0ca62dd

Download Submit
C:\Program Files\7-Zip\Lang\gu.txt.azov

Filesize
17KB

MD5
cad4244886351005ac3389ff67f5e12c

SHA1
838ccc9ee360806809474942b57b2aec355a05bc

SHA256
8f8e258cfafed314651ecbfa46ca73d04763eb58ef5a51b3709dc92d6ae16b37

SHA512
b8f98750180f2449f19599c382c492d99c81c3389ec705ee491026432f84ad8bb9ccd15cec4d2deed6209078d186ba55f3773263e78c82a970523c9e1138c91b

Download Submit
C:\Program Files\7-Zip\Lang\he.txt.azov

Filesize
9KB

MD5
f4cee6bc73a663182069f25a61ae36bd

SHA1
ac1a7196a26fd175e51460f34d618cf69bff5319

SHA256
930f16346fafb07f96db2b7c96feb4ca8d2ffdc7d1c2c28d1735a63236c69276

SHA512
ce2b7e69d99b82b1187de2325ea3138b8562a0bc88e7d28fd06a29ac0612ade4815570eff23740d3ead251a7e5e6535d70f15d8f1092c9fc74d020d3b41e9b60

Download Submit
C:\Program Files\7-Zip\Lang\hi.txt.azov

Filesize
17KB

MD5
cbdd00bf9f0aa5daccc27dd829d86087

SHA1
de71d0cf313567a9b34ac29d2c5111bcf91700ba

SHA256
595d0770578348d621eea391e93a36d3fb40b02d3c95b8bbb382eadfc4b226fa

SHA512
7a27a92e95a805a85c92ddae6b7dcb660ca26a655ffd8c0a1031a3cac4495d6c116020f123e2ac4c82fe346246bab678c50be75e57950be2cb029d061a6b5a83

Download Submit
C:\Program Files\7-Zip\Lang\hr.txt.azov

Filesize
8KB

MD5
38a0e605142a2870a8d38b9892ebc965

SHA1
f6a1d92f61a171a7c92419f265c59ea93c65d926

SHA256
6dd0142a90760815695450c242a35c2d0b72205e5cb0e2c74efd7e996ba95812

SHA512
9e8b86e3ea78ad9fe0a6af14ca8ec8c8ffb4965c6da64eb40fb03fc3f793da2748c3b67ebfa58bb89d4083a6adf463bc3bef2a3e676aec19a813d3ffe6926f87

Download Submit
C:\Program Files\7-Zip\Lang\hu.txt.azov

Filesize
8KB

MD5
7ec480bd016b90c67c47ed5944221a9f

SHA1
00aa7610c1862f296666965d54f4424be518f6b1

SHA256
88a2e1e19cf78bd145cf53d12515a0a1cba113d11bbc033dd2fb6b3e911c9d43

SHA512
02fc01ad1cd5e7a6fcf08f498415f95ff3604fc0f4badc8e32b385d4c30366fdfe32415b0b8938975a78fa65275e028f869c3d484cc43d5220b7168b0fe6baae

Download Submit
C:\Program Files\7-Zip\Lang\hy.txt.azov

Filesize
13KB

MD5
0b4dff20318bf38f1300b4ca0cf17730

SHA1
9b9ce4bd40ded98a3f3940b553fc2a7eb1557f61

SHA256
76d2801eec4322b45bb90c9819f0f177fa861eb1bb41575f92ad783ef0d7e876

SHA512
8cf1d21fc09005d3ff2571bd0eae97239e0e83aacc2d479f801123fb338a118d93e32a50438705e48f4a734c59421dda4ba1ebaa5a0cd80ba1c3fe11cd7d20f6

Download Submit
C:\Program Files\7-Zip\Lang\id.txt.azov

Filesize
8KB

MD5
7c1a9b5431cc31be97e974b4a5533f3b

SHA1
a2ce9a323142a7f807aa38a272b9fc30303aea48

SHA256
cbf585a48cb73c62359b1323ecee8adda8e98849dab24d2df9e07203a3a847af

SHA512
6c8590a2d564b02d521318b397acb19cb4b1501873c6e502af893e3fd9f1bd73903f27338cdea6cc0f06fedbed4352bedb7704860f0e6abeab89a2de19ae836b

Download Submit
C:\Program Files\7-Zip\Lang\io.txt.azov

Filesize
4KB

MD5
c60700e7509b9e18e6a41b8f66f6aa74

SHA1
2a40d5ebc42ab7525b829fe50e449225c43d94b6

SHA256
0973fbb44e5c103524cda0e9b854cc5fd9365f00fb96aa463f93811220e4586a

SHA512
b7a75a2b55a4f367ebb7eebb2efa77d9591b4422a64f48be88cc182cee37a756c9db8d76e857ce612f8c1d76bd73ab2169e76bb1f5bfd019a6fbd840a1ecff4a

Download Submit
C:\Program Files\7-Zip\Lang\is.txt.azov

Filesize
8KB

MD5
974450b211e70604cf3c4d3105069dd4

SHA1
45dc3966f600ba6560e185528f46e40fbc164d69

SHA256
08786cb44949be62f58d38ea1830802478a031ea8681e0338eb9c6c215519505

SHA512
ae548b6d1a79dfbe8fc0897666fe4610fbb753e80accf7abc3c7b93547408e7b48b71932da8b524597ff859343371ff27a5c4ecee35554b4fa1add40c3d29938

Download Submit
C:\Program Files\7-Zip\Lang\it.txt.azov

Filesize
9KB

MD5
41622329da69a8903630a16ca68fe6d8

SHA1
28ec6544bfdfc0318e43c4732942fc1684f76a9f

SHA256
4da6007986192d5ca3c11b2a90986cbcf5a3b4aef00b3e986e2ae6545b47060a

SHA512
327d77127163fca61e08faf877f5d31c1ee86cb88ba1218a0b1326973c2b31c771038f7ea3cd28bd5573b2034e311fb9d1661fd3ca939ad142104b376e8e47d6

Download Submit
C:\Program Files\7-Zip\Lang\ja.txt.azov

Filesize
11KB

MD5
2f2a10af90cbc354443fddaab196e49f

SHA1
71d2b8d2ae4a8d0f9199756977c1c8d5d724960a

SHA256
f689d8d8389b403c8151d8aaf57f99d297dc957d165ac458e5f8afeb0a53948b

SHA512
83941cbd87bf85a60fa07a6b8979f3dab74143a66b1d9d09746b549a54bf462cc228d74a35b42b694fc5887f384d72dd94004fdcb39b1761cce196753ec7d726

Download Submit
C:\Program Files\7-Zip\Lang\ka.txt.azov

Filesize
17KB

MD5
b17b3a6689334753abb33a5bfec08d4a

SHA1
9b5dcf1a8ddd55a1895a9ada888e9c74bb73cc68

SHA256
4f1394538764eb219b67db92214eb957af4cad7e891f6b092d3eb7461214ba50

SHA512
43c182a23f41f52a63737a18bd286dd84cae1e717ecc549e55072f3dfb0040959ffe95d4b2a2c1aaf9b0f6592bea48dfdf11d7a680e8141500bc6ba3cf7d0384

Download Submit
C:\Program Files\7-Zip\Lang\kaa.txt.azov

Filesize
8KB

MD5
a5b3754649f1b494208581f2e4ad740a

SHA1
50c739e9ce433faa5fdb18b620f8bd1218b1df71

SHA256
e55dfb6d68163ddd24190ff00b82846d17dd52c5bcb8d30d43fab3f44a3484b5

SHA512
d083a27e5596ee9c220d02e1d58d2b92a9a10a4c6d515cafe4063d4770c5ff2a2eee8360a5402c72034a78f92eca56d22326dbd2647fd2af4394f9945285d6f3

Download Submit
C:\Program Files\7-Zip\Lang\kab.txt.azov

Filesize
8KB

MD5
a2434410b6d19fa989ec63dee8b50ca0

SHA1
a369d44cb6a08db254de1427bc75c291879ded9d

SHA256
6e0e073b68e672757745f91cfe285aee3f80e5211ffbf4f8e6b1624ff2b2b9c1

SHA512
bf54c6ea99350e6caa8bda516421b14543426215d6eace53cde5060276864a44bb1726453eb700aebc03d08e231c42bcf648236548b25a0158c308ea112b9d61

Download Submit
C:\Program Files\7-Zip\Lang\kk.txt.azov

Filesize
11KB

MD5
5b4be8109e3938f09c0a9dca7b6b6029

SHA1
186b7acbca0b3a72931a9abc34f83e237bd30d99

SHA256
a19ea0aeee794463d5b3d133a91e49c85465dccf75ef3ea26e51370a54d579d3

SHA512
174bf18f182479fb33abb940ba91cee499997af0605652be89c0d5c9e68f2d222eb140e382c2892fd76aa885e5ab6c7c6b33ccc4a1084bdd4785cf5a1a93837d

Download Submit
C:\Program Files\7-Zip\Lang\ko.txt.azov

Filesize
9KB

MD5
68e33babd8ec3cb6a39dc22185cfdbd6

SHA1
e0d6da6d2605bc29d3520de3dde29251e9ce4f4d

SHA256
772ef0f9e6a73af8cb0cfe54b9c941fb76df08d2c1be7b813402474e9feb60e1

SHA512
f1f3f2a3ef83edbff26fe34ecce6162434c7c9585b59dd978d6e8420198740a11f28faea0e7432f726751b5e843377d5308535ccf6399278916aa43128579fdf

Download Submit
C:\Program Files\7-Zip\Lang\ku-ckb.txt.azov

Filesize
12KB

MD5
8ef37cf772554abb93ff064af535b3d1

SHA1
8ade457953dd945a3058f5530f6c9a10737c2eac

SHA256
4602c1c23647d287b0d861ffbc43ba05d7d82c91a0345b10764052a240675b8c

SHA512
eec401870d52b780d4156da5a77342304547423a1f3816362e46acbdfc93adb40e3d70e2a1afd47b7eab041b5e72591cc9998700902d480e49c95b8a80c1d69d

Download Submit
C:\Program Files\7-Zip\Lang\ku.txt.azov

Filesize
5KB

MD5
175dcd462f64e11263babcca3211c3d5

SHA1
582819c035bd26c2ca9c2f296190369aad71e1e3

SHA256
54a45f34bcb0a3164f921feb17a79ffc9eee2999f6c3cd33e8d923923746e5d6

SHA512
42fe1989254c8a595e5499984f10851a60bda8f3d157fe4107100ea7ef94758f52d31e4ae03056497d21dfe3fe0effcf873c57323b8c3a36e79989359fada1b1

Download Submit
C:\Program Files\7-Zip\Lang\ky.txt.azov

Filesize
12KB

MD5
836540e5373b0baabdcd8626e05abca0

SHA1
102e92a0cf887ce81c0ba00b8071a59ef7ba9db1

SHA256
fb9baa87c5644cebd8be995c3fd13025267125a82956ba40ce246012ddb7a162

SHA512
96e76b2a03ca80630edcda972ae28ca0b003dbd82d4f6d3435e55c7cb49688e2f6eb5c1c7bc00db0fcccdde15dd6a5915fa9b8df781f3900562156ac27ea3b64

Download Submit
C:\Program Files\7-Zip\Lang\lij.txt.azov

Filesize
7KB

MD5
0f215996e0ad610b523268fdfd642c6e

SHA1
c288d50df8a9c3b411923c13772985bec1fccba0

SHA256
267245a26362cc417349c0345c50c94896622a8cee6a06bf80f4ac6f290568ef

SHA512
69957798b77b5f566b0f15cde341924b92ae895a77af79f72e4ac72ffd1406ed50cab912872fe600d39631a2c1378051e5a9a3b715e017c888bf7016590eb3c0

Download Submit
C:\Program Files\7-Zip\Lang\lt.txt.azov

Filesize
9KB

MD5
959e267d526bffb8eb3f1f3e1d8a82fd

SHA1
e5c758af31774c607596c4341a65efd51826c3a5

SHA256
ed19dba58906eebff8d2820e6ce7c043c757165a86d5e45487c0ab2bbe83dbf1

SHA512
2ddffb77e4798e6c07dedfe9cdc0a47f5f90f20302acd449fd0a2072c53bf072b36a3ce16feea54853ec4ed198d827d1d5d9e35d3acf1c8beb83ae5675260af2

Download Submit
C:\Program Files\7-Zip\Lang\lv.txt.azov

Filesize
5KB

MD5
7f98d6e4dfba64d8f75c9df38d695e50

SHA1
1ae0a6a7c17de552824c1a0c3392ea48f2e719b6

SHA256
9d169a8c21a6b3081d5af1a49a124d813fd643cdd4d4cf5e2f48cffd3235ab1c

SHA512
f76e755c0b7a32280802d6eb478c01e796333c57c1eb2ccb0c86ee59b486c50708739d6ea3790b6115c1b6a8981b05a66c12861710334d26d56d3944ca981a5d

Download Submit
C:\Program Files\7-Zip\Lang\mk.txt.azov

Filesize
8KB

MD5
29c0894419b4a6502101e61dc39e8519

SHA1
8ff727f617833daacd834f7ed53edea6ad1330b4

SHA256
099f4b27c80f7c55df88c20311bc90bdb44cd45403510ffbfb9740b2feadc505

SHA512
562f7c1f1258830f553b34c39ecf0f091d1ccc8f067045c5e30f7a479a3e55b8dbdb80261afcb84d061a41d662655d3d696d09208b4620d63dc2783df52de49e

Download Submit
C:\Program Files\7-Zip\descript.ion.azov

Filesize
666B

MD5
1d17f889fda76a40c7c8f12170142678

SHA1
5c8b4f07a401ac3a6dc4a8f8585dcf1f3b9ed42c

SHA256
9121cd01f277e6c2a60d229582d21a797c72656737dc1b833e9fd31f9905e408

SHA512
1e68d356287aa4b2d0ed8188ae7dce73dd316c5f9a998328280fd8697bf8d320e7b1c11182c2c77baae6d92d10dfbc6e40a184300954c1e8ed4d8082bdcb4508

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.exe

Filesize
4.5MB

MD5
14f5b997e6826b578a48a6ad904dce22

SHA1
0ada39aa3604572420ba1c3896097b860d139edc

SHA256
abea3d53c0e9955ecfceebad27dbaff061a17ad4352f82cfd2c9985981fa3de4

SHA512
fdd3ab28e76c4c8c4cf36266abc14c622a9c612c946ac5b623d754cd0773ac955ad03ed0a5ab48157358339a5174b56cc2642b8e33b8195fa34c7841e7083ca2

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe

Filesize
1.8MB

MD5
6fbcb86b032155f6b02a970c81c92496

SHA1
518bbad8e79348e1faab777e8ef0a1bdae5408a1

SHA256
ead6b28309791abc20183391242097704a226e72dbe19f1a7696617fcd2dabfa

SHA512
f21354e27815bd7bcb9ea41b61ed1aeb2e3b4fccd729b2951e89efc691c4fccf93245cc2ee1a4d3e55f2d26abae808bf7bcf103638949ec94346634eb3b78dd2

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

Filesize
1.8MB

MD5
131a3838b74ca82a569cde35c9a1b91a

SHA1
cc003eeccbbcb04166b871215e49fc03d5e80f2e

SHA256
4fb934d3e33adc810f5b1e95a5d543ad929b1aa7a568364eb43a8c667327e00d

SHA512
774e7a2f09c5f2e46ab4bf3f11eae128469f7e768ea1cd8cd2eaa175086a6968d6e8514dd053cbb3f299797fe353a6a42fd73dcf5fe5b81dd70db78459cb1eab

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\notification_helper.exe

Filesize
1.4MB

MD5
e40acef4095749db831cf22f9f96624f

SHA1
41f9d8ae859105a0930b3623d248b6e9e90354c8

SHA256
f860af7a89907a0806815216985501fa49fa9a9af9c7b54050158931b0f83fd7

SHA512
56fcb58e369ac84c46d0aacd987afd38cb7b9e21015580448a988109a6c16268d6d603967bf30e559f33ed3f5ea9209be2165131451d438dc85bfc56ba6f106d

Download Submit
C:\Program Files\Google\Chrome\Application\chrome.exe

Filesize
2.9MB

MD5
5bd821c9474612deb6b31c7a4d27823a

SHA1
0a6410e911de89fac167cdd5d53e0c13bc3b38cb

SHA256
88a058ba1d681ed11dd5cf1fbd8a04ec7427142b6bc7635b5cc37717f5155fd2

SHA512
cbbb8d31af2a6d6466ce3278f3d9c0434c9cf33d5ea504f5dff631cb8db7bc24e40046e185b70eb5415682bb6d4161eafd8e7eef365791bec2e2e401225493f8

Download Submit
C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

Filesize
1.2MB

MD5
87be378b896aa342cf00414a495befdc

SHA1
2132092e4041b40050465bf47dcf04d6d937e284

SHA256
4ed5a348da6043a324ce99faf918b4ee4048f8e519ac8bf1302aff63e12acc69

SHA512
d3a26bdaf34223714d67a2558055c13dabebb2df5a15ab23634490d79666375a56b7eb12fe5d858da508511ae17946a51d152cf69cc0085ecb8a4f9054e06049

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\java.exe

Filesize
226KB

MD5
e5a5fb83d22ab7c02df190b6fa07f8c8

SHA1
37cff19e8fab1f9556d4b61d37c422bc187bdbbb

SHA256
a65f9649461552b52c34cfc2b30ad66f26e3b6d71b3333965f75d9d373841e54

SHA512
a8af8a94dc249b12b63494adb3e496cf10494b921b03544cbf3d5dfff1e83da544f25c74a4082cd6025962bc082de8414d3a9e1da3049e3bcf46097a4c5ba28a

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\javaw.exe

Filesize
226KB

MD5
3ee2fd043b469c0222ec5917ecd8537b

SHA1
f92f3907ecc8e6a1e7426bfc1392b2061b9eaf90

SHA256
b8b9f9ba0ae3275a4573a274190f073c5989c7e9e576e70f716fb7f7071d28b2

SHA512
b37a864d784dbebfdacf25a8749ccabcb998bb11575a756bd570bfeaf051b453d6bbf7a45a24cfa5cc50ab6225012b1b0dbd09f53b86f37b00d4dd955aa79221

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\javaws.exe

Filesize
390KB

MD5
d6daa1d615909427e3f91afa3fc381bc

SHA1
8cc028be32c9f520c67e25bc7a9971703b7afbd2

SHA256
097d6944d31b31b5d524e5563b7413001267bd5d7d72b63e1bd290cf4f3b583d

SHA512
7461b58fad167f348ff36b9b06414c77f043cc091f381d79d3c5f856c78eea2cae06ea1a87c0632a9cba27f4c466fa1a0d6c5a6f41573ab337e0d2d784b928cf

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\unpack200.exe

Filesize
338KB

MD5
49e945610ea7b77374d3f74ac501a752

SHA1
457c327cc74494ea767433fc7ea956267d074852

SHA256
8b9224d746b4e7528c6adb2e6686ba754cb6843b3178f9583f32c795522f43af

SHA512
3e669823c83e97cfaea154c2f4a480c8792a11e962a8ea4a078c21cb1d43c90e65a6eebb989b7e572273c1c7f53b51ac6a4a3fbc02bc23be13ade08ab6561d68

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.exe

Filesize
226KB

MD5
d725670950d8c848bb07997849455b07

SHA1
bb44774eccd4d9a0674cb775d25c55d79ea2a62d

SHA256
0d5f1a500f482bb7ade05b717aa643adb4f0fbe83108c6ae3ca7b16db2fc2e51

SHA512
026700598a6e51b426614f90d07b281576394e551026b0cf36aaccf2578ffa3d579c65d5907521739155b0b785dbe5c18e3452996508e8a903e7ee1d0692f15a

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaw.exe

Filesize
226KB

MD5
d47880fb0024f98b1a35b1475749b6a0

SHA1
51cba948abc43018af9a7f20a6035684ea4ab0f8

SHA256
fa1e758cffcca962a7a299ecf90b52013fe8a00e7b492408dfd19601c9505715

SHA512
dc42b92aa3d6e8196c3d528c09c944ee5169c9449caf3d1ba48845e5ea1c8ff83de3922e7c701d569f4e991ce62970a1bbe810041709ebcbdaf911bd884d06d5

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaws.exe

Filesize
390KB

MD5
9f2a56aefff16ad6453b64cf467d2b63

SHA1
bdd7e1edb29e6851ce99d1c62efc2638ec7ad83a

SHA256
bcf0607d92d9d1eb5f0aef20f95a6f9d814fdd4eb5b05f17c68975e6702eca59

SHA512
7c4c8a723ea4b45ec051d19e28ff5a6c6dad1d4980dccc7d114b7a3137bebf9d16942eadce65873462a31c67994be5ae19b9101540be465cea9872c683f43b62

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe

Filesize
147KB

MD5
ec1f0091254255626646156aaf685b3d

SHA1
6c882bda7b0f085c7af6cba8f7847d8144252316

SHA256
3558b71f625c83739393207740729ee2e8db89ef18deb971e9aacd458c1c533a

SHA512
d160b3e14ffb62ed85373d7fa981e01e4d653d83610368968324b08fafa2d7e4def8cb36939993d548d7c77d4b10799a57438985d8d99296a401946b5684e5fe

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssvagent.exe

Filesize
104KB

MD5
a702fb0c46543d12b847038970c5b5c1

SHA1
8f556d35afeab4d5913f8a771a09ec9f2ebef6ef

SHA256
9e8acd6f91a2d12c1732787346cd8978bec6a4da362eba68b157604832d18fb2

SHA512
3a4b2936fc1847ab4e56bdd4a51c42115e38328d4e946cf999b33c46a1bbc4514783848eed108be822a6602c09a64e435cb86b48557a52febf89522e049fa0cb

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack200.exe

Filesize
338KB

MD5
8db43804c4046be109481af6425d096b

SHA1
9a7604f87aa678f4f141518bb76e8b743db52484

SHA256
5506a993b0a899d29bf71c639cbb28aabbb69ffe0eb88a1cb26e0df14a74f510

SHA512
691b0cc243daeeb114a9803a4cb1202a7c9a6fde4d0bbde131e8d702f2459154911c409309ae5198c7b9a48c340f70b1ac282071faddb11ab8438531d0ec4030

Download Submit
C:\Program Files\Java\jre7\bin\java.exe

Filesize
226KB

MD5
fa6b5cb7fae5070a4611a0990a456982

SHA1
a1384dbbf430113a2281a88ddaa5258d3dc950db

SHA256
48b44ed9001015a5c679140e8ae16edd4b0344e7f4b9d9942c2c32e36cfec720

SHA512
1435683db6de4f6f5afc4aa3e03353badcd6d07d9a5d55f037f85ee0a4d252cc1732de0386e1c3ca690cb4674bf906a9c3b14dec43d7239f3f30b5e2d7238244

Download Submit
C:\Program Files\Java\jre7\bin\javaw.exe

Filesize
226KB

MD5
31d032259b7e07e9bafcec35727fcdcb

SHA1
b6943f46ccaa3cae38e741e8f34484481137373f

SHA256
504cea5f20e482d22d7540d912ab556ad010b8d4c2d23b9dfeeacd63d36304e9

SHA512
7f229073f8f2b4f1d757ca29f6263b5d9937e412ba1b4ccc1cbba89d26fca8162a807f9b7876c529ee60577dec331cf26a737cbb6ba7f8da625a4efa3c73846e

Download Submit
C:\Program Files\Java\jre7\bin\javaws.exe

Filesize
391KB

MD5
2ed21f63023ce9cdfb0b891d5b7452bd

SHA1
08b59081c11e06c700c808f1cc96da993fdd750b

SHA256
942b7411c3b9f4625e8b7c5919d1fe2588e41c92abbda82e76580a258eb591ef

SHA512
c61d02c7b12278de5b1bf31758a4bb65e91c385b1cf7a147690828ccf67ae10af92bc192e053cbdc113fec26e9ea23869ad64c84bfcba8724870330bf0fd58f5

Download Submit
C:\Program Files\Java\jre7\bin\jp2launcher.exe

Filesize
147KB

MD5
3ab650b8e8026b0ce5105bc5da8a3cb2

SHA1
a81e4f6c6c7dbed54b68f044ff17737954c02ff6

SHA256
92b632b87ca77fa5d1f58eaba7219ce423cbeefa09c38a3498a4aa20f104ec91

SHA512
ce52742fa38406b0e60a9679a88056de8b43603de5e253803892c1a905f76cc488d5c566b3ed94e6898d2d7638a23c03d32b4fd140f6dd4ff9335a7e785c03e3

Download Submit
C:\Program Files\Java\jre7\bin\ssvagent.exe

Filesize
104KB

MD5
edb01cbdcc9121cc5c4ce1277556a6e8

SHA1
b25f274375bf98d5f73075bc237e6ae7fb65d82a

SHA256
146331b889c0e01562c902cc0967ffc267f351f80674a319c6bd2111b92eeffb

SHA512
00348b126ac06cc76b2f96563c676ff75b65491aa80b1fd9670c6bd10e8f36aa75a985a4e63c753ff9449275a47652b5a12e485df899cf02874be6a3f8ec82f3

Download Submit
C:\Program Files\Java\jre7\bin\unpack200.exe

Filesize
339KB

MD5
478c525f0445f4720f11cdddfdb605d3

SHA1
4da91e22b2ed0c4f17b022eb9991474ee3f9108f

SHA256
962f51acb7ed04179350594b80799de2056b5327cfbb3eac741262a2b8329019

SHA512
6a761b367741a0e21ace5bfae74abfed28c97b810891f841b07422950bcd8d8a538645510319c222da0184ce7b5ec24ea5fbe0417d5173940646bdcca98da9fc

Download Submit
C:\Program Files\Microsoft Games\Chess\Chess.exe

Filesize
3.2MB

MD5
784b3d4ad0945e0ae587cc8319440208

SHA1
96be73fe8b858c3e9b0cf91c7176593ff46acccc

SHA256
1b352d7d2781a1adcaf4f86f373bd834fa50b84813b6d52dbff387cfc62e7f4c

SHA512
d045a52e34d61e8202e658ca613a17ca036b58f3f951acac552c3ae0f3492e29379d3750bd43d193d993f38ada4068b1b6ef078e5ce7d2a3ac7692d2f2548feb

Download Submit
C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe

Filesize
969KB

MD5
6672a6324807650557cea69ca97ffa9f

SHA1
a9443fe3fa364b9cd9a3ccf73f9bfaedc3fe348f

SHA256
71125f2cf73ce03215c9a3f380f2a128d88a3fee3a49aedeb18766d8e3a4527b

SHA512
8060ec49099946c748fecd4bfc3efb6cf2bc4e7db5bbce504896de7e3a1e41cf1d1bc4629c72e797ee3894335db93952aa641f66c71ee00faf4b97ea07b1d516

Download Submit
C:\Program Files\Microsoft Games\Hearts\Hearts.exe

Filesize
788KB

MD5
2049eba2e635106f680e70e36c8a2cca

SHA1
c1970d73c701ccafd24b9c188198e795e1a6d70b

SHA256
13782effd7097612c99191f68c3ef517ae42af18e268698862514a0ea5aefa23

SHA512
b91067ce1ce5d9be4b3449cd49f6374781c8692e8842c6db40c594f25db838baeb58da02f193e807e16467ab9894ecf17f6f875d74198ebebd564fceb85e4b6f

Download Submit
C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe

Filesize
951KB

MD5
37613429671396db19ce394967a24889

SHA1
9abc58c3a0c1d03f361f00fdf8489b5b147dec36

SHA256
4d62763863fc8fd08fca4eedccf0e601e71529f1d7c37d2a2bb3d5d1e03604ed

SHA512
17d056cad70afaa1b7458a1ce89ee09c09d48f43593c61b3edd04e08c521a4fbc891c04e03500f1c5b6ebcb096134cdae82a38043f3249383e883dcfd5deec26

Download Submit
C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe

Filesize
1000KB

MD5
611cd8097808711bfd0689fb89924c1b

SHA1
7f8e38467cdda57ba06b471dae47be7263ad3653

SHA256
a19f3105b59f84fdd5e075e30227a1751583215b82e0a3088d4ebe8200c5658c

SHA512
b31846716aa90b7c5248e92965e77c0fca626d92704df022662652e161d6e07a21961a21b5e99e35a4f59058cd688266a8bfcf7282fdd8c6163940b9f1801c47

Download Submit
C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe

Filesize
1.4MB

MD5
b361e6ca4e085caec088721c8c3a7124

SHA1
d2896fb2cfa7d2629fe7c303dfea5329ed03207f

SHA256
5cc008b99980c09fdfc596c0f9aed63a66fccb1820dfd4116bdb95663e22bc04

SHA512
0f86cc04c4115937562b67cbb4697b8a6f9712c9f85d95bdcba18a7071549b95d116a7325f01cca14c08d6eb575107bd5ce8d0f42435afeaa96393e01236ed72

Download Submit
C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe

Filesize
990KB

MD5
d4d7d64ce25a4feede21c37be43181d8

SHA1
d8131d84f799659b027bf10de539a09d4e9ed136

SHA256
e49a4675d1e7087a1ad23fd560fc722059db6cf50a10d594f69aa9217aa37c7e

SHA512
f901b8364882c3d700829a4b6a77c28d8c14f36429e568fd0a2670d77db50293097d1a304f14156c858e288dac57158ac0085cbfdd834bdfffd8dccdb500902d

Download Submit
C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe

Filesize
991KB

MD5
4ae1018ce90848bce77a933670d21d4b

SHA1
19eed0140038a3a9dfef5b20dbb057369b144a62

SHA256
c70092240ea716a25dd0cf3253082b955ecdef6ec6c44546ec48328fc9d1e36a

SHA512
d6f791934735c00ebff7ab79065a371805e0ca5b34da4f0f9f81bf5611000308ad883c995f9bced1fb25f5ac2a33440b858a9e3ae280e9a2861c2eb8f96e408f

Download Submit
C:\Program Files\Mozilla Firefox\crashreporter.exe

Filesize
328KB

MD5
39008100cd03b0d59ef3e592583c1b66

SHA1
9ad6201031e3c423f4081581f41bcc74b24dff8f

SHA256
4dc6b1ea7e1c477bf0e1324e80fe13923d748189f6184ad22807ca5876022ba8

SHA512
2d6e7ec349553ce46da17248a4d6a9ab25c53a1c0c63e09a2115a05db3bcba0570a54ba88840af2fc911d001f6e765becb1c6bb3a9ce88a95abd2ab0d909f767

Download Submit
C:\Program Files\Mozilla Firefox\default-browser-agent.exe

Filesize
805KB

MD5
ef34e98d3c612543e82ce78c7e13f8e0

SHA1
69bb13f6a8bbda3275b7736825743dc92ad99757

SHA256
c7edae0e47b32a7947ab913515a7a9e11d6916fbd02c732ba7cf26bf92cab219

SHA512
1107acc25a904cee9bcac5303fd121a5aca298b4424361c32d67cbb1d87b8a2ab00aacf9a1d83735495b2ad768eb2b96daa5e83410fbc0dd79c71db0bf738201

Download Submit
C:\Program Files\Mozilla Firefox\firefox.exe

Filesize
774KB

MD5
cfd183490adf47ea290e1e4ba57189a5

SHA1
6112f6ce940ead8bd0ceadcfba43902ea3263518

SHA256
0d423211605068a6c3a4e89c7bf741be2651ddf190861470e5319f5afedef599

SHA512
38dce5133666366851ecadba8a7ad156a2937ccb3b9ba530a7dd28a263beb37214d613d93995aa2fdb3596ee5280f322fa6218b6a6424499eda5b402792535d4

Download Submit
C:\Program Files\Mozilla Firefox\maintenanceservice.exe

Filesize
284KB

MD5
4046467ea3d80d675341f54ecf3b046a

SHA1
b9904963ea5beb3820126ca257876ced8d071839

SHA256
0593252df948328742b40deefb49ee1ae28a1cc116ad1e1921af3ea7c57f49df

SHA512
1fbe6945a8d01b760703dfd0579f2851a17d77fd5752e126cbaa8de2ecd9e15c1ec6aca7dff7d0cd4bfbe9e803d1fa403798344112a4d517ea49de14b4688a33

Download Submit
C:\Program Files\Mozilla Firefox\minidump-analyzer.exe

Filesize
840KB

MD5
40f00c9098e957d356b7b171f3fd7ac9

SHA1
35ba7744554d1fc92644c835cc808d8d7ec38084

SHA256
6ed520cf934a8d79229c872d4637bf43ae33e255bae0661a03d8928ecb2d0f7e

SHA512
e271f9c5fb7113110fb51388de3d8524755df990b09a11614458d135d1d46e11f4e5ad579c4ead8c81dd586b7c89a06f9f342a9fba4069ce6cfc0988103baa96

Download Submit
C:\Program Files\Mozilla Firefox\pingsender.exe

Filesize
123KB

MD5
6229e3d95e932a1e822067323af19bdf

SHA1
2918f7c161f708e3d5b380a4f0ca5385f7c2fad4

SHA256
be1d9c2c6c92d721e536f99d93858f72ad4ab8e1af40b300bde231dd7c04ef5d

SHA512
bf95c265d00a41d5bc4fa6b229229b792c537376153b540d549542e67cad542777b76f6cda3b50895345d2c0d503439acdff3529f5f3df908dddd5df11bcc124

Download Submit
C:\Program Files\Mozilla Firefox\plugin-container.exe

Filesize
401KB

MD5
987e7b2de78231804ce157d0ef1407ed

SHA1
ef97f5acc8a51d4971321895feaef39bc3826293

SHA256
ffb415afbfecc8f677238bd003d6b4190d77c447870c3b65c3e4470ba6b17e29

SHA512
e49c3fc97af7c6a9261c81959e6c4244ebe0765bdc4583ebb98c9fe3bf3ebbc57e2d911b7d73d934236b95437e7a1501049971ef2ee6b58fc3513fb15f432e19

Download Submit
C:\Program Files\Mozilla Firefox\updater.exe

Filesize
455KB

MD5
eafef0cdd1ab7d07d64f7d3137c72b03

SHA1
bbd7ef32032defc140653d6931ea021a3db97d7e

SHA256
2d4f120a0eaca7c611b9d0acabdd98a1ecde626cd58b4be5abc95148342816c0

SHA512
a3bf72a8a64d67fd08d1682ec7b375c99e058ea01e37aa6fd2b6a424cdda8dc470708628c0f801b0c9c31ef5f7877f9a7ecee9020bfc98c549a9430dd583f4d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
120B

MD5
c9c36178c58e58e9072d4e554dca13a4

SHA1
e6bacb6e9da51236aafbd1abff65c2d1bcf2f169

SHA256
6639ed88a8ccd98647baf29b710e7fb91fea7fd472e68f9029c683e517e3b576

SHA512
d2f2d843e94e03cd1c1b94377647c736fe774e230dd13ae35b240643f231144bd0e1fe89f5215821f03a587e7ff05fc12ae45b8bfd440969355b54e99e936ce1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\throttle_store.dat

Filesize
20B

MD5
9e4e94633b73f4a7680240a0ffd6cd2c

SHA1
e68e02453ce22736169a56fdb59043d33668368f

SHA256
41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304

SHA512
193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337

Download Submit
C:\Users\Admin\AppData\Local\Temp\OutofProcReport259429215.txt

Filesize
1KB

MD5
3ca92aa91585fd66d226f35a4b23bbb6

SHA1
b5100bdf0c83b01f59fdb9153db5b8d3e359d28b

SHA256
8c99e1023f1c62ec3865a08c5e5c0766efae69b94bfda1124c8a9165e7b37813

SHA512
b3256e14bcdceadaaa8b0a4f18efbb8e29dbc48ba24abb4d1667d6e1fd20c53711ff3b71b4d00eebd9cc25abd2325e4503a96eff0da238749c0f5ab6fbadcc54

Download Submit
memory/2300-5-0x0000000000210000-0x0000000000214000-memory.dmp

Filesize
16KB

Download
memory/2300-13-0x0000000000070000-0x0000000000075000-memory.dmp

Filesize
20KB

Download
memory/2300-11-0x0000000000070000-0x0000000000075000-memory.dmp

Filesize
20KB

Download
memory/2300-2-0x0000000000070000-0x0000000000075000-memory.dmp

Filesize
20KB

Download
memory/2300-1-0x0000000000210000-0x0000000000214000-memory.dmp

Filesize
16KB

Download
memory/2300-0-0x0000000000020000-0x0000000000027000-memory.dmp

Filesize
28KB

Download
memory/2760-32-0x00000000001E0000-0x00000000001E5000-memory.dmp

Filesize
20KB

Download
memory/2760-37-0x00000000001E0000-0x00000000001E5000-memory.dmp

Filesize
20KB

Download