azov | 2ce843364c8f6072de5759368c123f7b2924aa2c11d68d9394ea1e192b76fa18

Analysis

max time kernel
140s
max time network
124s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
19-04-2024 18:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
Size

32KB
MD5

7129291fc3d97377200f8a24ad06930a
SHA1

3f858d2837529e6c973ffa7c26c643e9748e7282
SHA256

650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e
SHA512

6bd4537a79f839c2964a814eed2fd5c217a969632e267afbe028b04a91a410abd594fb45bf1cba954f8be71e6041a923e932994754fcd46cc71a0bbaf4a932a1
SSDEEP

384:s+ImkKRjvD/XlXPRPNTEUZytgSisYuaDhcWNDkSIvrfPxLCk9Hf/z:WKRjvTXlXPRNTRZ6hisYugcXjfNCkl

Score

10^/10

azov persistence ransomware spyware stealer wiper

Malware Config

Signatures

Azov
A wiper seeking only damage, first seen in 2022.
ransomware wiper azov
Renames multiple (8106) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops startup file 1 IoCs

Processes:

650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bandera = "C:\\ProgramData\\rdpclient.exe"	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe

description	ioc	process
File opened (read-only)	\??\L:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\X:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\Y:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\B:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\E:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\G:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\I:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\K:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\M:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\R:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\W:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\H:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\N:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\T:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\V:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\Q:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\S:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\U:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\Z:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\A:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\J:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\O:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened (read-only)	\??\P:	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe

Drops file in Program Files directory 64 IoCs

Processes:

650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe

description	ioc	process
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveProjectToolset\ProjectTool\Project Report Type\Fancy\SPACER.GIF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Pets\Notes_INTRO_BG.wmv	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File created	C:\Program Files\Microsoft Games\More Games\fr-FR\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\images\dialdot.png	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Classic.dotx	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\Swirl\header.gif	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File created	C:\Program Files\Common Files\System\Ole DB\en-US\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\J0143752.GIF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\ONENOTE_COL.HXC	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\SlateBlue.css	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\tr.gif	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21299_.GIF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD21413_.GIF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0337280.JPG	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\Publisher\Backgrounds\WB02134_.GIF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\bg_LightSpirit.gif	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\de-DE\RSSFeeds.html	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\Filters.xml	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\locale\com-sun-tools-visualvm-jvmstat_zh_CN.jar	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office.en-us\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.emf.common_2.10.1.v20140901-1043\feature.properties	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Fonts\Executive.xml	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File created	C:\Program Files\VideoLAN\VLC\plugins\video_output\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Windows Journal\Templates\Genko_1.jtp	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\de-DE\css\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_box_bottom.png	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AN01216_.WMF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\SystemV\PST8	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\ModuleAutoDeps\org-openide-modules.xml	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-openide-execution.jar	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)notConnectedStateIcon.png	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0300862.WMF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\button_mid_over.gif	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\PublicFunctions.js	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms\FormsTemplates\Track Issues.fdt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File created	C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\WSS\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\bn\LC_MESSAGES\vlc.mo	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_left.png	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0152628.WMF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\MSQRY32.CHM	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-left.png	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\120DPI\(120DPI)alertIcon.png	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\America\Port-au-Prince	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\de-DE\js\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\es-ES\css\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\macroprogress.gif	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.p2.ui.sdk.scheduler.nl_zh_4.4.0.v20140623020002.jar	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\GROOVE.HXS	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\EXITEM.CFG	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\Stationery\GreenBubbles.jpg	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Oriel.xml	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsViewAttachmentIcons.jpg	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\LAUNCH.GIF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\es-ES\js\library.js	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File created	C:\Program Files\Java\jre7\lib\zi\Europe\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\rockbox_fm_presets.luac	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\settings_divider.png	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\es-ES\css\RESTORE_FILES.txt	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files\Java\jre7\lib\deploy\messages_es.properties	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\AG00167_.GIF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21423_.GIF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00505_.WMF	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN090.XML	650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe

C:\Users\Admin\AppData\Local\Temp\650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe
"C:\Users\Admin\AppData\Local\Temp\650f0d694c0928d88aeeed649cf629fc8a7bec604563bca716b1688227e0cc7e.exe"
1⤵
- Drops startup file
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
PID:2912

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe

Filesize
454KB

MD5
e565a5316663ce0aab24627e81147bb8

SHA1
356336da2b857042523bb7815bb2f8127c412f17

SHA256
db63e1428d3de723464a643f3ac30dd26f2c6328d2da1a02ce0c5c6f4c98c5a7

SHA512
3d3f87b789e45c03fa9c0c1349f808fc3ede56ba004e2609c3f5b918bca0f6396a09b0154f131095982e79706935928b64d099e554ef3b29e1f6a010f2f0e044

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21296_.GIF

Filesize
666B

MD5
a9e39a734828726a905ed86671bcf6b4

SHA1
b3681d51a6ea67841f7c0a90437896bcf874c57f

SHA256
73f1b5c8197b0f8dc8e661987ab629181ba5ab1c3f75b7d114f0e83218a08e4b

SHA512
3e098db2199ef250cd51a2551594e4415c4fe8d3c44d9fd340d7d067f784af31dc6f9d21edcdbc5f39abf6c5f97e4754aef13b72d5fefaa44cd2052803ca965f

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21298_.GIF

Filesize
666B

MD5
f97c3b0f6a7aa59726e8748b6edfb563

SHA1
83a749431d842884b071b0d08e550616203f5e2c

SHA256
4480f2f13321e5fde1e6a7bbfee66092d73a9a26d19bc9963896bb29a5a742cb

SHA512
ba1dd33c1a27b2c8895018e9f755b08401435634041cf594981c7152781280a64cf451ed2a7eb3803470277a8d8c5d6a60e1e5fa110d24baf04381fef7861860

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21300_.GIF.azov

Filesize
666B

MD5
7909b5f6d1912cd6f11076fe4bd691b1

SHA1
e18d3a156f5503cbeca97a747c92f49bddc5da5b

SHA256
e35f579a3008846d09b55e8c503b26da02fdf7679f8899bccf892f8947ee125d

SHA512
f6d4d59c972f79fbd50aaeb155b527d93321e287b9f911a1724f7495c6e6ec9341774307725c25107ae520f417246340a346ec696abc34bb93fc538c78dcfd1a

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21301_.GIF

Filesize
666B

MD5
71f1957f55c5236687719565994f0f29

SHA1
0b65244aa955c9c7cf383b378167f537511d539e

SHA256
25ed964db060ed8e8b5ca8e52401b2144c98e6d68fd706124eb40e5fc848b544

SHA512
ac4b9c088d22e7e5430666fb643aabf173143f816a7a2e30378e39fc7d4eac5cead3625bb167e6ca3f828603369a2a3b0899275f602e3a28d989b0e12370937f

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21302_.GIF

Filesize
666B

MD5
0afb546155028233f760e2a50d9c203a

SHA1
1c64880cfa3b543219c629224b11a2061192ecc9

SHA256
6b96b7334502eb06e81ea60b81c34968324faa910c2ef1c55b71e935bba0b3cd

SHA512
259047c3567aa47f6aa9888ddb94bed3dfb36919a5e2a58092374333b006152e48b5fe31b462383f1dff5de62a49cb7a2e1f2f91405e37cb1e59b58879f6fad0

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21306_.GIF

Filesize
666B

MD5
b78c67c6ce40b971104d99905a48bd04

SHA1
617556c11f9a2255d5e684a318357a919822b08b

SHA256
55460fe57e10945c34b2a5c5e846aa826d9f28946f3e5f2f3f6b54cc925b63c8

SHA512
76075fbf11d1512c17011ea6a449aa38bb3a7c92757c763162bb204b926604c3ddad5c8d95460737c27bab174b44b2f9018cfaf84b3070e6282a29ec22ee6267

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21312_.GIF

Filesize
666B

MD5
83cef7fb97148218e6ed2d7b9822d325

SHA1
1f1d7a76f296278c5b110afc4fbb063c2efe4bba

SHA256
3801b29dc754aaea621efc10e66a28c1c01dbd0a822b4839bd965aae923f888e

SHA512
9b242d6b00d796a7345e562672792dd60b6061ded4aca94242299841c881a796165cb83cbb32bb433868e99ca6ecec1bbf1af4f012e70731dbaedc689f9b6686

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21314_.GIF

Filesize
666B

MD5
24b91c8078ea43987247d796265350e8

SHA1
7cc09e7213c1a852a6cba16e9277d59bc3e0eed6

SHA256
b0d72d623ed981f7f9a600578346bb61d15139bc3cb0c4ec52685da11421f1b9

SHA512
f2c8c89748863844a570a2a0cd6af7dabc47fb39f398b219738aabd24eb12ebd2758a2b8cf18025d3cd1ebe22616ae936580561cbab673275df9b4b69d0a4656

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21316_.GIF

Filesize
666B

MD5
1ad12b5027944d5b8da1b2e35b473619

SHA1
83777a8a2c5b4c522f62065cfda0976c56863150

SHA256
cb990af139da54997b19759b7212d946d3c6066decb83832203608df38da8af0

SHA512
3145e20bfed82fc04b034da810c8227e53935156202849024820e44d1d2df0d6c3b017acb56fd6ca00e7c8ae3af1fddac0b636e606349c04c199a95114dce5cf

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21329_.GIF

Filesize
666B

MD5
8fb32e9d73c60978a80291628cb2b77c

SHA1
6bc81ec34640679df5109817b94f2f5b8346badd

SHA256
c933b165a29c406b7b843c3e8a5e5a01e0bbce8eeaeae3d3fbc44a084616271e

SHA512
3e84f2b600bdb85ac5822427d9c2b9f8b3f3bead518cfe8261badaf45ff75c4512df30315ab7dcbadc148ba1f844f18742c5757da980fb5f0d8c47cf4cff13c6

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21333_.GIF

Filesize
666B

MD5
35df3727a73850935c157419dc96bdca

SHA1
4ec9d18c70b9906054a006517c25dc3142e09157

SHA256
23d0dec6f802de99fa81c4e4bcd5eb68a02fafa84201b141c7d807e0ea9384ad

SHA512
2357b51f43abe4859a7dcd84a8bb4649032f841f31f3c129154ebd34d9d50420e90e9f13358e9ad6b1cd0185a731e4efd65a4dcfd90d49fefeb1503063cffdb4

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21337_.GIF

Filesize
666B

MD5
2164e1c7b1b1c928a2ad7c0dc248720b

SHA1
e680f7ffa392e47aede3b53476754939642f8cf0

SHA256
b9f81a6609a285a34f72e23e942a0cf4976e812d262574ad1d41d10a8742f4f4

SHA512
a8e4b8181cbad79583bb3f997bfd115f623e8236cf2f4c3d7b1be0bf216cd2edf7b90901d6167105cd4d5f525a36ffe4a309f7f9418e0738db11f20f9a8e2406

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21339_.GIF

Filesize
666B

MD5
8d5e416bc4ab1cd89f839e9746bf0fd7

SHA1
08c08a9291b8e782524065ca77f759b9a6af7a34

SHA256
3e5af748ecc57f6329717542b0b6e33274ffa6ac7b5c78b5aac20bc3b13ad1d3

SHA512
281d5491680ba10d9388ffa9721713f6fbaea0fa12fb7f27e26a3b5b8dfe508f6dcda7ecf40dcfaa8247601001ab0654b054a60d7b7774fd0af47041c2bfe98d

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21342_.GIF

Filesize
666B

MD5
9564f43b955b896945e3cb1331c831f0

SHA1
893659fd6bb7a08a7216d4ad8de69c9e42022644

SHA256
457ad03f8d6c424792426ee60fe8055289dd4ef18fb8b9264f33590f1c870be4

SHA512
3b1b01e691b71e905f876bcc5369bb8ea5effa2e2697a591853cc4be4eef0ea20f2b84b2a5fc41c3fef9997727ccfe0ccf479476800f0dc5ac362040cae10d9c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21343_.GIF

Filesize
666B

MD5
9fd00b2cc691f3ccf302fe589a243744

SHA1
574718e934dc76108951671e91ba965cd17e227c

SHA256
5898d7a2f6994c345fcf36f446b84097227f7f2d3f200feed95b96001e8bcaa8

SHA512
3f65fd84affe6a0bafbb578ce6f20b08d3bd5b2c350af2194df3e52dc446e7fbe643a7f7d28338ee4352a266fa0c83872e23da20776d121fc69c0ec1e88308d3

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21344_.GIF

Filesize
666B

MD5
7ad16d7130af7f164fb97fbb3c98e521

SHA1
f937857e5da996dafffe3909f1114102ed237311

SHA256
cf7502fc2fa9d03191e8a9d8cf2e506fbc33f97e1c3dcf32ed49a1aa69ac9189

SHA512
4186329795380983ec4a49f3e57d76cc54c43b33dcf1f69cd6d77ee8aaba157c71e9833a2f682c4993e94b6d38c99ed65eb6ee6962af155d292aba5c9bd4fadb

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21364_.GIF

Filesize
666B

MD5
cec0d052c95dc3e6eeb3e36230b15583

SHA1
e5438e6548fcdcadedf6901e2e6f5f7dd12feb24

SHA256
22644b94c26a29dcc6fc29b43c9dd1ce7de9374ceed8c090a376a5283b1f14ac

SHA512
9ee720ccaaf7f5bdc32748c1c2a40e8be0b7dc67176e82a0085b76a8e0bb94df0c160a3f7459c6afb97c685ab7f6ff2674ebca5663ca2ad761928da35c71c2b2

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21365_.GIF

Filesize
666B

MD5
5961372972f4f14b431e9b5f1a88a083

SHA1
096acda3affc45478b088e30f7681a9b5413f109

SHA256
801a30313ae2b5bf87d183d3d934340049db00a435a1292e4acade8f1a3d3043

SHA512
053eb8f5e338f6690c047a3d3a7c78f0f97378336cc902c16c5960803d009f4180065b1cdd6bcd654eb0d00e28d95b1aee8f6d6757e3a405563a85703ed81a29

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21366_.GIF

Filesize
666B

MD5
5b7266595f16c536f360a13a66f84f40

SHA1
434b9fd4f9b61bfa10dac754af75164adca404d3

SHA256
7d13dc4555503751eae46bb08c455d9aefe01d60d6d5f7f10198ef71d683171f

SHA512
26bd2bee0550d665a83c3ab8f236b6bfaaf490b65adf63053ebe5b33e9a0247610ad288a3094d072643dd3e7ae77a320040175cd1abb45162d82bc85b6c3306d

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21375_.GIF

Filesize
666B

MD5
838047c0da963f2569fec75269a418eb

SHA1
95d1ab0258dac6dbddea4463201d1498ef55632f

SHA256
8efe21e40736a9d106d2dedafe3040ca8eb8c9420f8e8010874e0d8149c1f575

SHA512
dfa2cc464a7e2833d0e8a5a657d1ab99740bbea62e2ee61c55820ab3fca33210b60374a986c4f008fdcd5458f299248b425f1e1f5f0141c35b3474e994d40d18

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21376_.GIF

Filesize
666B

MD5
04f56bba1f167da1ede71ecda3acf54d

SHA1
ea5537f15a6a73961179b2ae8661c000c172b3cc

SHA256
4bfe4f08a3f4eeab478bfdd43d6b371a75ef8a483524c527b77c77b21ddaeddc

SHA512
bf5e54e49924bc54993fc42875a86a396b2bb9b912bcd54b7697801231c8359b713daa2c37be4138a526d1b83b39b1f90371782ec96e8e6fa24b1570cd1f3224

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21377_.GIF

Filesize
666B

MD5
6061feadae0e775ab5950209a2dd7be8

SHA1
a093b96691cf9b4b2b02809951c53af38ce890c0

SHA256
2bde8e670ccd7f2f7530db83357faac82a6ff3c4c6d84a20406e6dcc09153fa3

SHA512
832d64695faf068d08f6035e9204cadeb429d93947a7dcd7c960027acf1c2286223363c7b7f05ccc5e21cef6452ddc25f61df2b2910d20aab9f45b36912206fb

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21398_.GIF

Filesize
666B

MD5
7a85e64b3b98f5be889174ccba3f3c83

SHA1
a4284c968e5dc1849babc35951def5d02a423309

SHA256
276bd31993a99326b6f64e7bb03d07582b727b7194d8416b86168e647279ff71

SHA512
ea42641eedbf107b8b3c0267fc5e6d52b52e15ae4e5bb1d7ce95836f18458d5a774d81c49742b9342ba406fe3057ec0f6a5342dfe95f955ad5ae76e95c47acec

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21399_.GIF

Filesize
666B

MD5
9b8a1e85891bdc4e0b3a5b877246df82

SHA1
c795bc1b5287c8f86c7631e1a32eca286493767f

SHA256
19046965790c8ba18c0b46316c1a591698cb7599a09ec8ebe3d7fcadf62d8357

SHA512
fb39465d2878da814e4db2879fce1f2109d3d5afff647e94cbbb04c09d65c78b7b7b3e49a326fd8c395cd05712b1ae2eb6d8f7e57d01021373ef804f1ad0489d

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21400_.GIF

Filesize
666B

MD5
f24e8cf1e9936c5a14c95ab1ae99631e

SHA1
2c0d861f73b2694c4d6f9c10ae43aa01a9166656

SHA256
dd1fe75ae2929c7e434e0ec5911f023364a3de93223d302fde5283a32efde9f2

SHA512
f248fd8f785505c5ad75ef5c761172b43e87ffbc9261de9c24c5266f287bf6525db1fcedb6af8fbb2bff09509fc40822211e66ab8701209f828d17266a3398c0

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21421_.GIF

Filesize
666B

MD5
07c6fecf20573bd66edc1b57834fdc53

SHA1
e83aba5cedaad48067fdc7d97211b7489a2c212f

SHA256
77448ced4bc55ed4a8f688a1840edeb5c29e67402b305ae2dd66ee3cf07cf6c0

SHA512
b6454f042bc60075bac4b6669818637cab70fa11e0096ae32907df371ac4796d9cddcb0a6a126bc5eb8e643c6edc64fccc20312cbf6d1f7383c462ab2d9bfed8

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21423_.GIF

Filesize
666B

MD5
0fc7b7e70d5898472ead76e8a38ac8b2

SHA1
e057f4f5304d7d2811be893be266138a3dc5d3a9

SHA256
dee1d2db31c85acf6dc73f5e6ee32233028787fcb3c3b07ff4d34eac7db65385

SHA512
d9041ffebe38cffd0d54f778f1efc7a8ed9089f0396201444b12f1e467c829b9f06826d5b7468951c32f400c5d6cf0dced28a83f415d7d6f4e8cf28151b57beb

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21434_.GIF

Filesize
666B

MD5
0c78a40eeb127048f4678e537f14163b

SHA1
b46f17b5407c9b9c84d530695670c46796781dc3

SHA256
c12c27421290841ea39cc5c2570e27160163c32a18b31531c25934b87e661a06

SHA512
3bb5f0b3d7a7adb5d427099ca6124cadf355500714128f2557a9bbe035323a1957fba0a4aae7d4b3011fcc7999432d7627c10fec2e64724d6c0f213f1f51e2b9

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21482_.GIF

Filesize
666B

MD5
75f4180027caa78854c8a9599c3e0241

SHA1
09f3a57a4bd3d2957632ee20e1c44079fb8530f9

SHA256
5a232bb349470485740ee338eb9bb4a8ee10827cc79d6f751394ddcd7794ca21

SHA512
e8177f649fed476ed525b7e0e8c5bab1ebb47e998e40611a0704be3e9bed8ade7710aa69368fc5df52dd0d3b0925c9c06d974eba636ae3572ab1a67ca3a96d8b

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21504_.GIF

Filesize
666B

MD5
92ee4d3ce1896c549bfc880809726a55

SHA1
cb3bec65c93c701ecd72946f9bc9480fb6a577af

SHA256
da45a9431e7ef92a7627393e2d37eb2ed8c04c075b98c49fffeebcd42925fb9f

SHA512
49f55462171367287ba00bfb172f05b5736856c40d3034696d98c8182c614bd014ca0e364f6e604e999adcc024a89eccb929c277c50b254d1b06177b2da1c718

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21505_.GIF

Filesize
666B

MD5
e956698c36f31d9cbfefbf00ebac838c

SHA1
5b59616e02ad5aa54a5b06c415dfb0878813958d

SHA256
c5785338c4f9826cb8506264926f8f26b45bee40b5a9c20a3fbbd65c5aa70d16

SHA512
144ad97a3fbd2a447e79c937acf7c5e71afce8f38b393f61a34d47b68c670626eba768e9433de3d258d7b1d776eb1317b4e5e4d2b571178d3e6aaaa462e33844

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21533_.GIF

Filesize
666B

MD5
4d739b5c99f997dd285596f17ac0ad23

SHA1
6cafaba3f9c6bdcadae64b9dbbf6f9de2d2bd5cf

SHA256
08d1719b9f28a80469d785653709e9a2e1bbf8137b973a429a6e317dcfb4c4db

SHA512
49e6ea33448e15c05d6b426ef27ceed77045d8313b86c201819480e12556a9a13961259cb2a1016e15ba39795378d3437a40637bc8cf73a5962488127a572804

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21535_.GIF

Filesize
666B

MD5
460f6cad3f8720ac8ae5a5ce9737ffe0

SHA1
4b2adf01b9894aba1aa7373fb969c29727cfa718

SHA256
6cddfd432942da473383ff6898d4dd02ae375442f2eb62dd22c03e864bf36f67

SHA512
d7d9487fa56ab8630997dbc68ac232652bdf6f395cde81d60ad9d057a0b92414592014d068706db1fb2fcdefd71b7e93da5601a60dadd536547fdad8c5662deb

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115834.GIF

Filesize
666B

MD5
450e3d65d13044026c51821d9fbfc7c7

SHA1
ba3272cfadbf4968adf6c09a392da93452a87b74

SHA256
9f8017743c6744376ce359672ed8bfec235e4eb57252127976f05a17f37ce600

SHA512
7ac53ad00d5dd37c8ece784f8a1adf5386c4d13a15c3afb697989ab3d5b2c3f7f768612d43734292582b9d69696ee923f39f5255765fb87c4356a49423ca8d27

Download Submit
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

Filesize
284KB

MD5
075fc9cd6c7bb47bd22af317b70806b7

SHA1
afb5f5be02359569977db43d21aed932ffd57497

SHA256
b36a3c1b2d3c1ab48d7d681f9a97cc20b6ab164ad92855194b602f8f58c367d3

SHA512
181b45d5bc9c4d075ee1caffedc8d05bf86d019ddcb5b647aeb77e111aeb9121c4b0fa21a51d0f9bedf8af7e8300d2ad3c613ccd42d0375296ed37816742729b

Download Submit
C:\Program Files\7-Zip\7z.exe

Filesize
567KB

MD5
78d2c995d04482e8acee5896ecbae47d

SHA1
900cd72b2a10d6f59f6fad9f79983c6187f1a750

SHA256
10034c2e0a6b5883729af4154a0420732fd6a47733dd7b809a074f27b70ca99b

SHA512
0b3cc016b74999740b215a35d5fbdd0312407d73d7fc679229d9c8304d590de3b2292954605344afea796bc9d85317f016b19848e8db0f2a79b37c032f436185

Download Submit
C:\Program Files\7-Zip\7zFM.exe

Filesize
1007KB

MD5
30059a51a4f16a60582634004ab536ae

SHA1
3a32f562101d2a8fdcd31dabacf2727aa2df298b

SHA256
1cc61b1665fc2d89ea937e894b6c245d932f433be9bf8f3ccdfaa1b6038e98e9

SHA512
28a4e6ac39e3c7f3699ef16eb08753ec984e3ed0a02b4cd8bb8a6fbe1cde2ed75327b8e724c7711374374308e579b5cc9720d13bf2625f60b9a69911c28eef64

Download Submit
C:\Program Files\7-Zip\7zG.exe

Filesize
698KB

MD5
0c890384c4ebf1beda964b545a8d53f4

SHA1
68941be8b2b8af77826590082c992dff374ee4df

SHA256
5b264c52f2c5d10f9fa09ade574b2a27cb0bc705ace317ed809245e057e4b1cb

SHA512
acc23a8032b38c38a4b1b6d39d77fba573fb4ce49bd902edb7bf6103d6100cccf7dccb8419d7baf9de27db1bbda7ad7856aa628bf754ecc67f01beb4e793ee1d

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.exe

Filesize
4.5MB

MD5
1976ef610daa09e89260c045d1d747b2

SHA1
e879abab82364e8448fe9c68f6e4f3085e8b6f45

SHA256
3b2599bfa9c73ee2e3e854f335f38ef507fb304dbed086bfc3db9938d496a8a3

SHA512
9ea35cac17b9b1eb17b87194283a672b999dab7213ed5151fd12f8b7be96bb78d71ed885a7a722931ec8fdfb9d2a8ecc3d51fac7a67bcb9acdcb4140a2a4c1cb

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe

Filesize
1.8MB

MD5
5a7d96c1a1797e5b126d2f35a9b86121

SHA1
1fa24c6c8227b97668d2dae9635f65ffb0f63738

SHA256
8eec6dd655d3bc1b0f21784cdd640ac77197d1c6ff32217bfef5bb0e51642f7c

SHA512
9b68713250d7b8fa831ceb819569aaaa8ac5ae3a34c7f1740e9f8555c91be411cd8d2c58df15dba8badec817e2add66101f6c7d6a260bb133f1ec71da197fd9e

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

Filesize
1.8MB

MD5
3b9a1117f8daefb1006fc3bb98291dce

SHA1
3d012115df9adfe76aba7b3ee742b5ddf3324b91

SHA256
64aa9c9bf1e13de4669f8a44f4065513f543cc033c250e3c46f83f23668cbbe0

SHA512
4a9ff30a8ba2024b31447d5448c97daa2fb09c8a9aa54a260b140fbfe9711911ad13eb628fb946b7082b03e16bb09dd35bac390e0b9fbc42aec34af62a8a2f2f

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\notification_helper.exe

Filesize
1.4MB

MD5
a87c9888a6b80210560eb28daf7cf502

SHA1
32e5153d28e5ddaa1517f0bf35c851e40d133675

SHA256
c1fc8e5624ab903f8c41b95a13449509ff2b4f1e8ce4d195231be058e94c32e8

SHA512
08d1b708075bea3f2e9ed6e4b68fdb4ef80592304f0e15c337c5c6d357b2c2d63fc984514e16ce0ada215b62e239b3700df143265cd66e3b53f28b60b39e62aa

Download Submit
C:\Program Files\Google\Chrome\Application\chrome.exe

Filesize
2.9MB

MD5
5ea23245e32f0dbde048b9d4bd425da0

SHA1
ad25caafa094bb56ae32bd335873e5f3d0346906

SHA256
a8db42bf94cbd447d758454db79514afd60ee90ba56c246d2e582747dcdb92c4

SHA512
682e62e19bc14041a3f2231be7427f45f2cbc376cf8711fc18ec2f5fde76d2a64dc1be18f39094eedf650aa76f420aa2eb6a1531cec6ca287b31cd2e1b99d013

Download Submit
C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

Filesize
1.2MB

MD5
66953c0e57ddbe4c032101aa998179e2

SHA1
d0f2fe34d3f03830650fbca054347f4278b9a7b8

SHA256
5e8d48e648f18571bcbb4572d45fbd2184d488baad32df176e5730daceb9b77a

SHA512
0a6e747772a851cc347cec64f2a7352b085751f17883dacc620badb1f8754d4d53ac353c4431d729806a562d2996f655bddb2e108962ed456894dd84019e5377

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\java.exe

Filesize
226KB

MD5
41b87a51c29915cd6a4f2a1856c3d29b

SHA1
ba2c29547c9500f0cd1f521bec0d6246060227c9

SHA256
7e6ed910d9dd0744dfca54ec7ec315778bc3df7cdc30d41d0932038fe8acbc63

SHA512
f4bf3e9d04127a87a82356318b7eb116e67e7924a7fa8594bcae4df423818f6fc05a22db179dbcf5ff8ded24ea5b4268cd98ab42bb288032135fa13f1089c554

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\javaw.exe

Filesize
226KB

MD5
1d8a957979f76d2b69bc030d3fc53f0e

SHA1
ea19d627c5c70617b00b2c27315e001e18e61965

SHA256
1e16eca547197f38086194042bf5ce979f86de6d7a1df1a1574691c8095058e4

SHA512
408832fc9fd9e7aea507223cec792d53b3b56826206d10257e6c1a6e591badabb82919a04cb3a34ebc08db3601be6625e0975a209feb2cc5fc2f2b6e7b0299ee

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\javaws.exe

Filesize
390KB

MD5
5588ba08cb1e2e206dcdecc048bc9026

SHA1
58103dfe06ae2bccf53c2acdf22ccedced5f38ca

SHA256
02a9f088682050304c9c9350fe32b6bfb0927d67ecc54ecb4f6798a8f2486537

SHA512
130819de4b29d0834f9f7ff2a77af334ddd94c6fd67d309d30491c1b29a5cd8bca4a4f908a01f000ad0c0f05596fddb94d7422dcbde3b5b1e296954c4edfa479

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\unpack200.exe

Filesize
338KB

MD5
9f28de252f0ded425cc97eebeb526686

SHA1
11c838d3fba7ce41a8059abfa45eab640b45afbc

SHA256
3bfbd425f3f6ecbf7ae946e197d7691ef4154bf3d5b860901cbcf2fa224b57ef

SHA512
49d65c6ff343a7c61c5611959682b4912307ae6ef295acd6b8aad935e43f2699104d5509faab2bcab48c841e267afa5fbfe0d1c98002120eae1ab23f4736a6ee

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.exe

Filesize
226KB

MD5
72a25eae2f769c3f078d4c24b47949cc

SHA1
cf1b4362384c7e9ec430603852fe9545e8138489

SHA256
75b413d29d6f1d15d2ded5847ae25a273136d86b6e8fefce6eb968fc3a9fd551

SHA512
84cbc54b4c34f0eb44e6b628d9be4867ceca847eb3e53e3270d0df5cf72eba1f3c87016181983fb32abe693752734520ad58b623fdeccf431439ec7a9fa9aa8c

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaw.exe

Filesize
226KB

MD5
001bb9222959ce5fa2271d53c46c3a42

SHA1
7e22eda2ae05ebf3a0e85916cbbc0b330ee423b2

SHA256
5dac409fef198206ef6639d80087fc9e62c37737038092431ea22dfc99918601

SHA512
47dbae2b1bf9b0e6269525dba181163e67cee4957cb37788a76513634198a2f4cfdfcecb32acd9a26469492166a9ac610bbf115013acb29b51cea5a645fb3fdb

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaws.exe

Filesize
390KB

MD5
7e5bce9fdeca6a63c35c4dbe5b46f267

SHA1
05844a9bdfd83b082b2e2be5bcc25fca2d68215f

SHA256
a4e8d6120e5e3a0b47b5175d65a6d20811f8ed0aa7aea2d318669d399cb61ad6

SHA512
aa183a520d17005fddf82053ccd6aedba7994893a058c2fb750d54be0f44209509ddf27f98635904dbc561798167763373ca0caab9f117c6c071c110317fd982

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe

Filesize
147KB

MD5
0fb85d64737a3078492337053b9d7b21

SHA1
5467aa63c0b18ba3f043d0addbd238d8057a4223

SHA256
f52523a3f4afdeaa0a0a2ff29dd2d8a21ce68c7f7cc3fb9e600b7ecd3b2dbd29

SHA512
97a422012b6572ac79820ac0583d7270e7636a8f3336625086870bb0563c302b402bfaca6ab4e335220df5563a8bc1f86fd20fa1eb1b327de9b0f8f19ca7528e

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssvagent.exe

Filesize
104KB

MD5
f4b3d077a6c857f773465f726aa9a63d

SHA1
39a4de335f9620a5192d0b20818784b747548451

SHA256
fa598a0909e7aadd444db25b89e9da6ca48a97dcd699360906ef333fa37a5474

SHA512
1ff495abe47683c7669144edb3e3bdf5763826026dffd476e60fac610628d078194daed2fd0ffc8aa347c1ff59631bbc4b7605b19a05df47ab52d34f88807545

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack200.exe

Filesize
338KB

MD5
25253d5ddda237dd9a0eb48b28cf2936

SHA1
24ac71a2207a7208b8161663465f4d1e114692b4

SHA256
1cbf749248054f5188dc484cce5f0c63b8c6140845fc26d5ed423891b647ea2d

SHA512
083f1d43eed3e179a455af814ee0b1297e96790f169fd09cba9e1afb878f683f3dd800de52e5afd3e477806f6f9a0ad78569475bdb9194f58cbb7207d32fe508

Download Submit
C:\Program Files\Java\jre7\bin\java.exe

Filesize
226KB

MD5
0346cadeebc48acd1e62c36c2a776a9a

SHA1
e8956d991faba16cff19250e115274e1de997696

SHA256
5899f556e3da1bbf92f078ee7db827b23c6891bad383103d2e8fbc83ebaf659d

SHA512
98629dc93743e18547b2be53ad39193efdcb1ffc622473c06f67c9b99c34a76b6b5ee767aca711511daf84809b7b6444fed3057f7c84abefe6142b021b8dba79

Download Submit
C:\Program Files\Java\jre7\bin\javaw.exe

Filesize
226KB

MD5
86d995d71fb7b0aeaf44bcd334e79ab7

SHA1
4c0e0a83f4d39e03f72f6d070ab46a944a841ec0

SHA256
5485e03fb33ebbaa965e4c4f29baa1fb138d4961a63aa74cbad301ed5afc9eb3

SHA512
96b88ee01e94fb411f044b646c9b8fdfdab8abc204219ff0c3f80890746f581b0a145204193095f55d999164b689ab74c87d59d95af1cedfdabf7034d9941c11

Download Submit
C:\Program Files\Java\jre7\bin\javaws.exe

Filesize
391KB

MD5
30775530790373be59627fc6846c6e7e

SHA1
ffdd0d899a7d6b5c3c71a5773a9f3c21f8025071

SHA256
1abd94fb5729032f43810deb010ca2ce9cf898f36902c2c66eef1a77b2fd661e

SHA512
c45f3e44b297454f8ff89875581572053641c0bc14a74d7bb68f728cd4e1e82601d6e6c6bbf39c47b21e600a5113e06e00673341c432618ee7fa39ff3e0d9873

Download Submit
C:\Program Files\Java\jre7\bin\jp2launcher.exe

Filesize
147KB

MD5
adab2e06788c5dbb3c873013a9079811

SHA1
4a10d55569d33b4768a4710403c6751ff7185d68

SHA256
7d9fde1c4b8ca0bee287bb50a779a83655c4939cb41919f348f9383137a87be0

SHA512
2753afc805832475f84ecf4545efba889e409b3f4e090bca96f99bf8e84ea493ea31d5d26aca5f67b63d2557bc4ec0cc035da76971653f01065aea566b07453d

Download Submit
C:\Program Files\Java\jre7\bin\ssvagent.exe

Filesize
104KB

MD5
3c2a83f31c86a12cdf3e935d294d2214

SHA1
68a9d1db56898ec87788727625600713690ccdfb

SHA256
ddaa318c9721ce6f47ad1b1d0263550d580d4f24411f7e4a0ccd40240cf2f4ec

SHA512
ce7225fc3a13ff1e62ce0ff4b7a09038f152e936944b0fc24a52a859f6ae90fe9efd2a23c816747366bea7a31afb6e23a0dae95c358d0e43907ee07f621f427b

Download Submit
C:\Program Files\Java\jre7\bin\unpack200.exe

Filesize
339KB

MD5
a1d7ca590f0ab16c13a9e686e414f88b

SHA1
4876e0da3eb920859cc6f9465287faa3747d19f8

SHA256
cac3265bdb48725fe5ecfea32bfae7f2787ad29bb8199cec4ac57e53ebc5d5cb

SHA512
fa8f28738065c1604aedd51443eed8e625761a9fc5bb8ba32dcd71d3f4f35de2b83518efc5967428b6ab3c2da0bf524f1a2505ad62264faf3898fa092697e866

Download Submit
C:\Program Files\Microsoft Games\Chess\Chess.exe

Filesize
3.2MB

MD5
1fb10ae7403d01f971dea2b60ba44bc5

SHA1
54c1db07b3eb2b6a41b0bdf4d10fdd57e37313d4

SHA256
5e0413af46a980c777e0ca195be2026280ce5b1756ace387e8b36c942a1ce4fc

SHA512
5efc1b17b1bdf8b65c56ee645d77113956da771d541079f1dd7a66783a7fedae9d6df5ff8b4cfe12b5c84364fa2ef58a155dfde363350c04558447c5662930eb

Download Submit
C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe

Filesize
969KB

MD5
bf69ce2f9a25eb790a5a86491544f919

SHA1
2fd3281664164534defe3ec20a22ce2b8b413b53

SHA256
35c3d107bbb210a02a2276fe92f529aee19ad6338a6a4c88287284f0cc4aebe4

SHA512
9583d8af473ac3402da86a85242b12cbc3bf46d6ee31cfe09cf871a86279e1e791fe49bedb64c8a2c07b088dbef3746956e3b855d28f30fd0f3bc4db6d001e53

Download Submit
C:\Program Files\Microsoft Games\Hearts\Hearts.exe

Filesize
788KB

MD5
89864d50503bbeb10b9f715c0d74633f

SHA1
0b5ad6b4a004114f94ef8d21e2f4c6ce4a3be94e

SHA256
abdedd2fce7b5b3cc5aeba54199406daf3c8d6904901358552841df73c3e471c

SHA512
5ad873dade7677a6e3d5e3c39dfc0f9e63b5026322a44043b491d4d536a9e5d9394af41dcf6d7290e605229849d07a0b6b5e63793f7f0a83991a2fdc0f837029

Download Submit
C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe

Filesize
951KB

MD5
5d75a9b3572cf6ad686cf02401ab56cc

SHA1
0f29420f840959db1000ac4a4cf2408a48a96779

SHA256
5f0379bc0e96575be3f076612ad8a0b167b785aa70e44df12f98f5087a14d011

SHA512
8c2faa3458ca2c546fcfc9a41138223c0decea93b70e9374a49ef94271dae2c0b82a7504577410b41c89ed240e57e9f8d5d0ffa6f83fd88af667579c7a0a5424

Download Submit
C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe

Filesize
1000KB

MD5
2abdc4afba252510098ebf53f5a344ac

SHA1
b8eea9daed93ed5079b28ee70536fc114b4075d8

SHA256
0eead2d4e195f155a604bb83180cf9d616259195aca30cff6310ae8c5483b382

SHA512
ffb5145527133b6d690442a685976cb86eaa2f88e393a26795c0c37f0ba5e20dadd9a86e30dd11651ea2254d8f6d2c1656e352c7803e5e35b4d543ae609d6b85

Download Submit
C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe

Filesize
1.4MB

MD5
da3ff73271928ee60e31fbc333a1a7d2

SHA1
1988b6f2febdc762104be92ff1638c60e537d9a2

SHA256
2693b80428e4c3980beb519f6c2cbf2c4b47b12004da034a1596da46d76f7074

SHA512
b317e85cd80c0eecc02345488f905621a15fa82d353d3cd2c7eceab6dd81168697418b8c076b2277888fa1f0700c7e2ff0b43e965f8b9974169fb88ecf7b842f

Download Submit
C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe

Filesize
990KB

MD5
3d75fc7e5e6f7a2cde49f5a2aa9f6604

SHA1
855bb692d27a780dcfd2e799f74a513d7c6cd062

SHA256
e2158b65ac169de814ced8a89b8279f84a2ee971c81642fedbfbe9eabed1bd10

SHA512
9576ba4108cbd69e471441cde71825baeb70261c2340646810100193faa6ecf9f7f315f98aa7fb31d06b892c4f9ce920b394d0a74db3fefe864684b383119f27

Download Submit
C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe

Filesize
991KB

MD5
45dff22e18b5bafe39b8c7245602ac69

SHA1
a95b5c473deb3a8be02c1fe856a237877de099ad

SHA256
53a2f1fcb3f5dcd89622fce575e35c6144640aa09154a26e342c6a61953d328b

SHA512
d4eaad58980bf06a74577cc56bc34dcbbcac2cc4892714e032215e268e456ca55ec8cf611dfe5ed97d7c28f6b93dac00533b9ec77fc326ed0dd368a2cbc7f780

Download Submit
C:\Program Files\Mozilla Firefox\crashreporter.exe

Filesize
328KB

MD5
2c4188244f9db6b133d009ed2828d7ac

SHA1
b8735363c5a6b700a13bccb2b1ae4fb27bec9ebe

SHA256
997bec12f289bc6c1bd027a1b26e06b0e7b64d4edd858704ac5775469180891d

SHA512
e3bf398e4fb918e76600671b4165d16d2903496aa13ff97bfe1421d3eb3f348728a91bbddef9bf6787a71b43bd38bfc318f2898f2435f8141271a0fb46fb67b2

Download Submit
C:\Program Files\Mozilla Firefox\default-browser-agent.exe

Filesize
805KB

MD5
b8d708fd6527ab80b178b54df19a8a52

SHA1
c3a48b21ad0eed3c3346996a3d138c6cd911b4c4

SHA256
719018392cac11606b6519b940acff9bd4ae6d1c31da524b934764996034d740

SHA512
b6aed8ef8fa364d3d3f40101d087c1dc50e8e3f5d69960a52ddb1041174efa9671dde151eaa8213fb20f82848981097a24b1293585afdd0e9e5664e129616309

Download Submit
C:\Program Files\Mozilla Firefox\firefox.exe

Filesize
774KB

MD5
3013ce92561d2e9b644ee693bb3a2cd7

SHA1
776c182aeb3cc524593cca189dc19f25a417a100

SHA256
f7e54ef2cea148c094f6764c966df68a0b7ce50b103842fc07244f4489ab344c

SHA512
741ef289d2bb5739c85a52160c916806efdaa4179f8b46c2f4858df8ccde80cb40d0d79017fc83e22729e35cb9f9d5fd3c20bedb853ed4bcba9423c3797c1cf0

Download Submit
C:\Program Files\Mozilla Firefox\maintenanceservice.exe

Filesize
284KB

MD5
3b0bf55630d54d60c1e364fccadf3463

SHA1
724aebb468742a4801fddc120b31c430e0f8da1f

SHA256
d238bf4d9f5d0dcc3939fc01da8e0b7b02967bae78794a801b1b9b2a47025a29

SHA512
5d394abff8ab0b0aa22929e42a4c3982b8a4a1759e60ae97273500d347a421f1984f439b72264fb1710d694c7176c0171dc3a0dc87e704175a4e6d5894f277ba

Download Submit
C:\Program Files\Mozilla Firefox\minidump-analyzer.exe

Filesize
840KB

MD5
cd61a442054930df38a2138fe4ad15d9

SHA1
24f334974349741595fe391f5498f087cef9bc2e

SHA256
d022666dffb74ca605eb67b7301241303378240f105ffe3b2ced77628f62e4fa

SHA512
d6720504dea1fa3d65d3a63289a9085ef71e65c3c5737ddb6144f373201f1cc13ae8fcb043f7e61d8f0eebd11f02ab21f84940fd3f29ff7bea5e86fcc5e46f3f

Download Submit
C:\Program Files\Mozilla Firefox\pingsender.exe

Filesize
123KB

MD5
95f196de7793c1a3e3c3af978253a465

SHA1
cb2eb209ab2bda237df30249b3b68c2a2d8d65a5

SHA256
275185a60da08870a0f7687504eee0132d5b228a3bdc42900ca01922f3977c4c

SHA512
fd3f4fc4608b8150ce7ca3cd1fc4110b6187e707baf38d97bcd52d85d0b5a5a8896a67f0819f76b2812e9f3d96b01ca32dc626a1497fc973de01a472707f5307

Download Submit
C:\Program Files\Mozilla Firefox\plugin-container.exe

Filesize
401KB

MD5
9480e78fac4292fdf900db7cca8741ae

SHA1
50031bde7a74b76eea1bf31048baa80e26883aac

SHA256
849a4c927ccd55b461c0d43888f8beaf1285fbe73ed211bae94736e75e58827f

SHA512
8050c048fb74ff5d4b23b14f81f120ca58c4d9bcd958184435aeae3234acece8871a77bee5d25c46d618c0622ffa6b6a262fee05d0d757de7f7952446d7b2b90

Download Submit
C:\Program Files\Mozilla Firefox\updater.exe

Filesize
455KB

MD5
bc0b8402280f6c921dec645cad168c19

SHA1
3a725486e924a87062f37e4afb710bc59e15d91d

SHA256
f1cb49e4f6300cbf1c55f71690c8263e9aa6a88f9796e1c0693e430a7a2ee053

SHA512
b5350a7a4730adf3a938ca55ba77135395e22f5c04ca0ad2cdc4ba5dedf37db26b3f49a65ae45d494ae3c70e71868771647e8c8783fba94c2d5aff5405077d80

Download Submit
F:\$RECYCLE.BIN\S-1-5-21-3627615824-4061627003-3019543961-1000\RESTORE_FILES.txt

Filesize
2KB

MD5
78ede93114e65f9160fd03d3357c56e6

SHA1
88d531b101e57655f1d0d26c6b3257aa2468d460

SHA256
c97412fbf88da8f91099a52888dea4c3f222cd95af3e681e3271cbca8b6b7bb5

SHA512
074a4c741273902ccacb6f573b96d8accedb2ee405dbd04350cdbf54d180c1fd577a4e90c2aae26bf72f3782403f4494db6e3501a04cfd9d7d81a6bc14884b9d

Download Submit
memory/2912-6-0x0000000000020000-0x0000000000027000-memory.dmp

Filesize
28KB

Download
memory/2912-7-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2912-1-0x0000000000110000-0x0000000000115000-memory.dmp

Filesize
20KB

Download
memory/2912-0-0x0000000000110000-0x0000000000115000-memory.dmp

Filesize
20KB

Download