azov | f22130568e8b133f8ee26ad002e3f3323cd1c7f6e1025f0fd27c5977fbe3e67a

Analysis

max time kernel
150s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20-04-2024 00:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
Size

2.8MB
MD5

2545f67c8e64a3155e2b38af93be2384
SHA1

9834ed79f230a41458abd7e20b3c61cd05579f84
SHA256

f22130568e8b133f8ee26ad002e3f3323cd1c7f6e1025f0fd27c5977fbe3e67a
SHA512

a91974ac6817f23242ec998e2d0d91b5a6e7c414997b2cb00db76ec215e96189157b2ab1fbd5acb5a6e76c1e242c827424d8b8169bdfc6990a652a421b5c5d12
SSDEEP

49152:CXYdaHvN8kHa507NUUWn043oHS3fvYwVq1/xT3DDbw0TUqy+Nwd:8WohS3Yw8yGE

Score

10^/10

azov persistence ransomware spyware stealer wiper

Malware Config

Signatures

Azov
A wiper seeking only damage, first seen in 2022.
ransomware wiper azov
Renames multiple (8408) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops startup file 1 IoCs

Processes:

2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RESTORE_FILES.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bandera = "C:\\ProgramData\\rdpclient.exe"	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe

description	ioc	process
File opened (read-only)	\??\A:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\B:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\M:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\R:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\L:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\X:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\Z:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\J:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\T:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\Y:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\N:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\P:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\W:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\P:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\W:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\X:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\Z:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\U:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\V:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\O:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\S:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\Y:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\E:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\H:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\M:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\R:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\T:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\K:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\N:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\B:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\I:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\J:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\Q:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\S:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\A:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\H:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\L:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\E:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\G:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\I:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\K:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\O:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\Q:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\G:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\U:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened (read-only)	\??\V:	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe

Drops file in Program Files directory 64 IoCs

Processes:

2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe

description	ioc	process
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\GenericMailLargeTile.scale-400.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubSplashWideTile.scale-200_contrast-black.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsStore_11910.1002.5.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl\Assets\Fonts\RESTORE_FILES.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.XboxApp_48.49.31001.0_neutral_split.scale-200_8wekyb3d8bbwe\Assets\GamesXboxHubWideTile.scale-200.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-gb\ui-strings.js	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\selector.js	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Square310x310\PaintLargeTile.scale-100.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroApp\ENU\Edit_R_RHP.aapp	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins3d\prc\RESTORE_FILES.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File created	C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagementSource\ja-JP\RESTORE_FILES.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Assets\contrast-black\MedTile.scale-200_contrast-black.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoR_KMS_Automation-ppd.xrm-ms	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File created	C:\Program Files\Microsoft Office\root\Office16\MSIPC\sr-Cyrl-RS\RESTORE_FILES.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\rsod\officemui.msi.16.en-us.tree.dat	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-20_altform-lightunplated.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\sign-services-auth\js\nls\sk-sk\ui-strings.js	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\viewer\nls\it-it\ui-strings.js	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\RuntimeConfiguration.winmd	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-black\MapsAppList.targetsize-32.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\EScript.api	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\images\themes\dark\icons_retina.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoVL_MAK-pl.xrm-ms	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\Date.targetsize-32_contrast-black.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Home\contrast-black\WideTile.scale-200.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_3.6.73.0_x64__8wekyb3d8bbwe\Assets\ImagePlaceholderWhite.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-black\BadgeLogo.scale-125_contrast-black.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Pester\3.4.0\en-US\about_BeforeEach_AfterEach.help.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\playstore.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Sigma\Other.DATA	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Word2019R_Retail-ppd.xrm-ms	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\contrast-white\WideTile.scale-125_contrast-white.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\186.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-30_altform-unplated.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\models\en-GB.PostalAddress.model	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\office.odf	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\AppList.targetsize-64_altform-lightunplated.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\en-il\RESTORE_FILES.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\LogoImages\ExcelLogo.scale-80.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\OneNoteSmallTile.scale-125.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File created	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_x64__8wekyb3d8bbwe\Assets\Fonts\RESTORE_FILES.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxMediumTile.scale-100.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectPro2019MSDNR_Retail-ul-phn.xrm-ms	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Test\Modules\Example3.Diagnostics\2.0.1\Diagnostics\Simple\Example3B.Diagnostics.Tests.ps1	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\spectrum_spinner_process.svg	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\desktop-connector-files\js\nls\sv-se\RESTORE_FILES.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.VP9VideoExtensions_1.0.22681.0_x64__8wekyb3d8bbwe\Third Party Notices.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-36_contrast-black.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Access2019R_Retail-ul-phn.xrm-ms	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\PAGESIZE\PGLBL026.XML	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\VALoading.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\resources.pri	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Access2019VL_KMS_Client_AE-ul-oob.xrm-ms	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Square44x44\PaintAppList.scale-400.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\images\themeless\S_ThumbUpOutline_22_N1.svg	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Common Files\System\msadc\adcvbs.inc	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\StoreLogo.scale-150.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\Assets\InsiderHubAppList.targetsize-48_altform-unplated_contrast-white.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\_Resources\9.rsrc	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\include\win32\bridge\AccessBridgePackages.h	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\sdxs\FA000000027\assets\Icons\NewComment.White.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.YourPhone_0.19051.7.0_x64__8wekyb3d8bbwe\Assets\contrast-black\MicrosoftLogo.scale-200.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\images\themeless\scanAppLogo.png	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\7-Zip\Lang\ast.txt	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\lib\packager.jar	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

chrome.exe

pid process

4184 chrome.exe
4184 chrome.exe
4184 chrome.exe
4184 chrome.exe

pid	process
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe
4184	chrome.exe

Suspicious use of WriteProcessMemory 6 IoCs

Processes:

2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exechrome.exe

description	pid	process	target process
PID 1076 wrote to memory of 4564	1076	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
PID 1076 wrote to memory of 4564	1076	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
PID 1076 wrote to memory of 4756	1076	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe	chrome.exe
PID 1076 wrote to memory of 4756	1076	2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe	chrome.exe
PID 4756 wrote to memory of 4184	4756	chrome.exe	chrome.exe
PID 4756 wrote to memory of 4184	4756	chrome.exe	chrome.exe

C:\Users\Admin\AppData\Local\Temp\2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe"
1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:1076

C:\Users\Admin\AppData\Local\Temp\2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe
C:\Users\Admin\AppData\Local\Temp\2024-04-19_2545f67c8e64a3155e2b38af93be2384_ryuk.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=92.0.4515.131 --initial-client-data=0x26c,0x270,0x274,0x248,0x278,0x7ff7414e1ee0,0x7ff7414e1ef0,0x7ff7414e1f00
2⤵
- Drops startup file
- Enumerates connected drives
- Drops file in Program Files directory
PID:4564

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --force-first-run
2⤵
- Suspicious use of WriteProcessMemory
PID:4756

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdfdcbab58,0x7ffdfdcbab68,0x7ffdfdcbab78
3⤵
- Suspicious behavior: EnumeratesProcesses
PID:4184

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe
Filesize
296KB

MD5
4d420935b72a0b1ce1df624a88d0df4f

SHA1
b4334ff4169ae3c792d8c6100f524980625cddcf

SHA256
cec57e507e1198f8f1d75111a35ce05f1ac45da5bd130e1fd010f717f092590b

SHA512
66bbc1ceb7d86b34731716a9450d599a774d8f5b7fb425fa61d8db7bec3704fd3349068890351981798fe081b0fa9d16941b2b5c5a60a18b8cccb419089f50d6

Download Submit
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_79750\java.exe
Filesize
333KB

MD5
eb758d3667fa916ccfaf11feccad120c

SHA1
a1877228af40b3086de098f5baf6f756f42c0556

SHA256
1e01ab1c285f984ec25a52c60ec4ec6f7c93272f9d62c8fea572b2ac635e5d5e

SHA512
49664728f4720e631f1b62542ab21c89bbb47934565a7bd11b5a85fd65f287b79555a98ff6a632f85c230352abdd4dd1309df83abf459bf15a437faa38d4b0f3

Download Submit
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_79750\javaw.exe
Filesize
333KB

MD5
4b00264799968af375839c6c6ac9867b

SHA1
b29bfbf99bcc0de669b1d1e470ef1c7020ad5153

SHA256
525981953adb6f55f90d6b0d15245aa1424d15bed275fd1146eb21ac2dc9cb6a

SHA512
387b66c37dade92f0443a13a1ea9e74ea7c8be28d0ffe85edf7d0e58dc2ba78c5431aa4f11f3f129584f7b7537911bf3b8c4b45131620eeab362528c887f423b

Download Submit
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_79750\javaws.exe
Filesize
540KB

MD5
65b7fa7df078f9aec124f6057156ac59

SHA1
afdf019897d0cb4e44a8425f4e1a6caf448c5703

SHA256
f743575f11d5bb50b1379e38c13659f776f516c8ea81a973886218998795d7ca

SHA512
39bbe83e5179d6cbf326b6d226b06bdb075317d94638ce0a205f04e72e805ee0eebbcb895a31c36bca6d6809acc0dcc42b6ad7f6167694e574411e08dccc7664

Download Submit
C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe
Filesize
454KB

MD5
55232d3093f9bf20bd5b4a9c287a4ce6

SHA1
03b7f7dc61929b03463bd54fb1307bfed25c59b2

SHA256
3d489f5a1c88a3bdd4caea4b7874c03439fb832b3a45e7778627d83e486260f8

SHA512
d1a018e34049ec50f86b08866c8d8034a06c326f221bc20dcfff49d71c8db069ac5ecae4e0595d3ca8bf0f1a4cd31026661459f6aa04bffda9eacc461cf09a43

Download Submit
C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.185.29\MicrosoftEdgeUpdateComRegisterShell64.exe
Filesize
265KB

MD5
3f0247d5500a61e73db67284b7128317

SHA1
4f297e9d55a8fd821026ac56c58483b1fd6ede13

SHA256
baebd7763a65f3f00ea3044c2558a44878c00d3431c16b39e640ad49ce597bba

SHA512
7047ee217663c2ccff83362a4e3f5d237faabb27ae2cad6e07e50c573c1443529d2cb85c2e933d17be789b8e93a3e2fe1f39e25da08e2cdcc38b1116e18eb255

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\BHO\ie_to_edge_stub.exe
Filesize
545KB

MD5
88bdd23917d8fad6743aff18b8a75848

SHA1
7b7f984a6bf13ea380f9ed1614e7741a168b3eda

SHA256
7b4005edca6a04a6c74e7f50528cfac03ca950ee2068f668ab1c1b355f41a36e

SHA512
4e11b72576d0e1f981c75984a18485648de056c90c5d663d5a7cfa7ae74bb0b70d0c7a661fdac248be72b7d9727dda2ba20f2c0ce0df0bec0c4a71a5673f5fa8

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
Filesize
3.7MB

MD5
31e8e51614e29c79c71e5bc109820d9f

SHA1
2eb28b699ef2bf0c271b925ab7b8edb648bbcdb3

SHA256
27d8c4750a2f348e0e8e0eb7998b68faab68626f3c0abb40339ba347f18101d2

SHA512
6c4a348c2746ea2fb2e2fa72202caf0d440c7f3eee4dad4d7138eb4a5420edef7049f4fae5648a2a70efce446c58993dce18a28b3cbc6be766469586f500e5c3

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe
Filesize
1.7MB

MD5
cd9f655f4454f3b112522394987aa24d

SHA1
31d11708394bb7bee6c747b697fec86bf8f4c475

SHA256
7931e88fbbe2a4e7a5bd7a3f382083997867a18c1be803cda13f1e35db141153

SHA512
9ca133b83f87a450dd22af555c967e10cc6af6f5d61a52d6d6311caa670907cf6ad414d30ab1125c0f81a007c4d247b740b4c6ce780aee6d225593642c43da0c

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
Filesize
1.2MB

MD5
504907ae122e90cfb9ebfef16850158c

SHA1
ef6f4055be07628b822964cfa6e5776a7030943f

SHA256
6e22b554e14f327735a3d07b34751ff27e2d97313db34b5cd17763bd60e6491e

SHA512
ee3e0be9ee7a8d0b9a07752e63efc67064c7869467d6c87f55067e61b5844e9719ebe85637b4d6e56e005733ab7dd3b490e4a7032ffb5f7678725e20adad893b

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge.exe
Filesize
3.3MB

MD5
e682fc1fd6b8ef13f0eb51c343163936

SHA1
2e962abcf90a96f4cf7b07b4c723a278102830c2

SHA256
e8142cc8d8318b72cdd433a312005ef93a69c5133999ba546d171e0a82fa8959

SHA512
eba0ef36c90040237c06062176b6cabefdf1f1fb194f09378e1b81ff38bba1bc98112a21d75231dbefd5864f72c598aee64bd1857c853bd196ef3dc22b56c666

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge_proxy.exe
Filesize
1.2MB

MD5
bcc0d24154220152019cb434d06566ab

SHA1
a8291dcf9b8838a293f9793981433f35481747b4

SHA256
ce6c2fcb1a1ce8c458b57eb3176d585ae2a004de3453c427769d47e59f8134a1

SHA512
a04279e191db33c7a66705a6cfdee480c6e407fa5e6b6a11df37e28b70a106cba1e14909ee0920fb8de120dfc767f2ea043ceb8e826f434bb2ed7372a4b03eb2

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge_pwa_launcher.exe
Filesize
1.7MB

MD5
839b99cdcd9131b7b3560f7bae151d30

SHA1
f9d4c0f9cfb0682109b0da13326a6e5d85440989

SHA256
7d9c9b2d7c17d6c3030670e6d0a1a5b03ea867a2903ae90d6c5cfba00860d515

SHA512
9a8de11601f2e3056bc574f67d1858eb9d4ade4f926a92616bb824b07a14f4f0d8066068e4c020930a6b623981189436a6b40cc0e89079242a4cfb5a60caff61

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedgewebview2.exe
Filesize
2.9MB

MD5
ff32c1ea301d234cf319967349b8e1c1

SHA1
80cc6212b5338f6baf85425c2762e1e6abd26004

SHA256
810bdae75ed8093ceb4003f8e2781f6031bd51cebc4ddffe4f6ecd0c32f06f6f

SHA512
0c43067ae280a73b7e8dadee8294d3817f54492cee1fb05882da888e0f77317a8123a957547f4f3c6a58a3c86f83be3d030c227db34e07f0a2edd469b95b63c8

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\notification_helper.exe
Filesize
1.4MB

MD5
8a75d947ad983db667d76b144b84ac92

SHA1
729502daf8259b00070c405024ba889ffa8e979d

SHA256
e8daec2e9b5672d9c1c36be4dbafdd2bb18d7357b4563f351677afba97905a1a

SHA512
6c614c5b3a5ae8dd64cd2d7e80f8c883e57499a376387459233ef3f1314f16ae55212d893ba01d8a38a7940b325717389a4c64d6751c2da1c0dc7be5c9bc5809

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\pwahelper.exe
Filesize
1.2MB

MD5
538b9cebdaad60a98adbd3467beebbd6

SHA1
6ea9bef49ff9359cb6d2fd69893a789a4e8ad276

SHA256
f3ba9d662def5cbaca40a9980df90cff9b45c90a61fcb523f9a3f6e60ed403ef

SHA512
621bcb5c3eacd27261acbcc93cd98d2c85672eaa3092a0ab6807534bcd25c2ade1ae5f682d0ff86f38f2eb3c8cfee1bd5ccf548245eb8d0d8347b3e49ae03636

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
Filesize
3.3MB

MD5
3f520e3430dea683179e44df4cbd0d91

SHA1
9aad2345d950b123e130c852778d8159b4e9f46c

SHA256
9e15601cde6897f68f45eb22787b9adf08c638d5307ad31dc2ba381d0740bd57

SHA512
4a393f944d1496e16035e909f4314f25f0949d7a4bbd5beae6188fecf68af8c8d5d3a63c87e86daef6d25126f371efe4e12a220f5b352cc67455b2fe4f2b4742

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe
Filesize
1.2MB

MD5
31ed90bb6b6877cebb8fe241b207e295

SHA1
f4204981edd680e8c289e28471511d72eda6d731

SHA256
8af30d00db2cedb7999140556e7bb56251e8a383e50b93a4f2164b18fb7923da

SHA512
acdb64af021b3e14bea609a260aeebf17ba1879b555fd2b232f231c3890cd65df655571bb29d8d5114f6ce08052ef2b83f3fb191fb717360b150452375d9182c

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe
Filesize
1.2MB

MD5
01f768a76d75e50dc0861287646e4a1c

SHA1
c10505989502a9e38a6c4131d0d19976abaef7cd

SHA256
6324bd6992945ce7ebf6ab44e0a6f7b72988e90283746e4106dafe641afcee62

SHA512
7f84f33571b4307f2bf26653e430a2aa3d484606d6ddfd5dff7a0d9540dcf397f5a832ccc028e1579ad875f52ce71046a909c84f203b4090332fa88a06ff20a0

Download Submit
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
Filesize
301KB

MD5
5e73bbf341929825961dff63fd39e78a

SHA1
535098a44c220dc3d234636c1c080f883296fe8f

SHA256
60485cde842176226eacfc2fb9287d87738e8e0b8934ca646d0d075d76b02ee7

SHA512
c137d6f1015ec4c6a926ab122488866d27cc56a7e81de8560779773e2bdd2f1bc253513832d6851b2c67f7867ebb15d9bf678eadb5776c1e68ba5c3725ef8911

Download Submit
C:\Program Files\7-Zip\7-zip.chm.azov
Filesize
112KB

MD5
329c60690d77e296a755d6f1f24b5431

SHA1
42dac48212ccec4fda891684c0f3a603111ae181

SHA256
7dcf40bfeba7a21d5f750f9bcad3dd610e5b2b3d16379636507b61d471a60fdd

SHA512
cd8bbbc3525bbb19a6c9bcb745b7394ba40565e66cbf74f8601a832f9af9bd94ddc3ee23a40cf0ab6524dd877a70afafae6ba6ba04076aefc6b71808ab30a853

Download Submit
C:\Program Files\7-Zip\7z.exe
Filesize
666KB

MD5
a76be5a15445dba2ef58022538ff61f0

SHA1
f36ad884cf39a6bd939b27035ff66b101e8ea576

SHA256
38cd01204c50fd4beeb80a1de27a3f6f2bd12be57cd1fc9e28ee9318ed7ed8a6

SHA512
5f66d8e76a1f330e94a9c72021d5c40be145048833f40ffb1a42b36520313af6dc5b1fcdaa0ff8cf52de9bcccb751519554113778830a9b3f270d39f15f208bd

Download Submit
C:\Program Files\7-Zip\7z.sfx.azov
Filesize
210KB

MD5
1f5929c2079cb1b6d2c7b77fac1d7b4c

SHA1
27a7b79076ccb1a3baac0f2e3c1734c9d1fd49ff

SHA256
0f4cbd563af297a67d45c1e540dcfec095bcd0e60117a50ea34d86f1dc210187

SHA512
9ba3a058a9f1eb7cb72dcdd7922d1dcd2d7a781d787aa1be4ca03adbe9b4eae9e81481a8eb1840aace9433833453587ac8585cbea8d07308179217617172533d

Download Submit
C:\Program Files\7-Zip\7zCon.sfx.azov
Filesize
188KB

MD5
90cca56e062cdeb7534006ade00d86fc

SHA1
f04798e557a558a7ead4b9ced3ca50555e7c6824

SHA256
0ebc2047cfecdb136b2b338d22d737609950df2c7641477b18486b2d40abbf99

SHA512
670ef3f028467e28746d2f240e54c56db955038464aceaf9e0b7e698186f75e2c1a5f068d59e10c834752b240888952a1eba50b83b8f7362ab3af4826b1fc36a

Download Submit
C:\Program Files\7-Zip\7zFM.exe
Filesize
1.1MB

MD5
44a5bcdc63cf5d065e03e2cd052988a0

SHA1
bd81a1674e09dd569b95a269f4acdb3b9a7e2445

SHA256
83da8282b11cac17e1a55081d25435b514c2279def75bfa6e5d567915195654e

SHA512
e9fafaa47b9dd6bfdb3b641cdac8fe7994da48a762e9db962e0a602f4735abc2cd1d61ab8e4249ce3c67c7f8e70b355fdd673d7f1719b874ee5501811f02aa2f

Download Submit
C:\Program Files\7-Zip\7zG.exe
Filesize
832KB

MD5
12e6672106a92a22c1ccdb33fa139538

SHA1
cae20498d5b89df05f2d42221523568737d40b23

SHA256
0ca8e1ef1a2867740010e4ad9a7b32916705478be30f4e1a4e1ab096dce22c6b

SHA512
cc4a633f238dfb43c421817ccc7cefc0e8e41bd24842f2551d605a9cf2ead77ead862bb508b51ba5ba1ef8cb61b8e43e66355c3685cfa58688e569c0656400a6

Download Submit
C:\Program Files\7-Zip\History.txt.azov
Filesize
56KB

MD5
02081154d815fe25f9fd697013c51971

SHA1
8b40a3fb69a28f9276bfa0fcc93bb385b1d2cecf

SHA256
0e154cb82ff437dacefadf310746477ffe6e77210e6dc21be39685419bf8bf57

SHA512
418e5311df62fc3de429412a3235545d5042937d6c4bf771f4c1a30fc3c650e692f273440be2565b2d53dea830f81219c0aca847e7dffff89eb33ecc2759d340

Download Submit
C:\Program Files\7-Zip\Lang\RESTORE_FILES.txt
Filesize
2KB

MD5
78ede93114e65f9160fd03d3357c56e6

SHA1
88d531b101e57655f1d0d26c6b3257aa2468d460

SHA256
c97412fbf88da8f91099a52888dea4c3f222cd95af3e681e3271cbca8b6b7bb5

SHA512
074a4c741273902ccacb6f573b96d8accedb2ee405dbd04350cdbf54d180c1fd577a4e90c2aae26bf72f3782403f4494db6e3501a04cfd9d7d81a6bc14884b9d

Download Submit
C:\Program Files\7-Zip\Lang\af.txt.azov
Filesize
4KB

MD5
4dcd19e62b23aafee10130c57fd9eab9

SHA1
4f3d91e493a6a5d1764eecae4d74f2fe7ef66e23

SHA256
1c6cb2facb28360f954893ff21dcdbd46aed744199aec4ff4f74e9d3e4e835d9

SHA512
ef5287bc2f6327cdb3745842603d5dbd8d6f7fbc73b0070dc7f7ca71501b7fa3d8875e27ce51e419be15c27be4927f4fef0764395336e63b280975d4976e5996

Download Submit
C:\Program Files\7-Zip\Lang\an.txt.azov
Filesize
7KB

MD5
6da98d70c99352e02f88f6037408306b

SHA1
6c49330154a1115458d55bb180554d2848e25b83

SHA256
78d4f936b49479cfd68cb5bb175548b254b7ea622f647e223109eb8e9b41ba84

SHA512
f0775397ddaeebf8e582292ffb3ef4843f856289221c8310b6835e38e2c03c4d07068feaec0fda1b56ff16bff731c3e12bc132b294b567ded22476fa7805001e

Download Submit
C:\Program Files\7-Zip\Lang\ar.txt.azov
Filesize
12KB

MD5
0d9d8417d334d60941132efed9f9aa67

SHA1
b9d719b01d9ef433c7b6ed494bb78019464c2f26

SHA256
1a1ba96a37a9de146c1b27824554e7551233ccf6b158ed1b3ecf8b3ffd8d8788

SHA512
f1ff2a47a617215a38dcd8cf87d658952b0bd4d2c910a5f52f742d125f766d012a13daea5941912c7950c748922e07cee48d4013fa4276e50fb2065bdb723ac2

Download Submit
C:\Program Files\7-Zip\Lang\ast.txt.azov
Filesize
5KB

MD5
8992b8d541aaf6d42f3853d031e49b95

SHA1
5bd59d0d3a3a2a847d95176160af0f94a459bcb7

SHA256
178f80c5f32484b60a4b247c9d06f0edeb9e7b7af514d13a455805df068020e3

SHA512
a324396b25f7e0b6be585220880651f0ebc881b2f43febac9824cae90134355759faa5a9104d0c46cb5bf8fa54bbad60e07fd3f977ec093addbcc71a38bdb72d

Download Submit
C:\Program Files\7-Zip\Lang\az.txt.azov
Filesize
9KB

MD5
cba3ed55a972ea47aa10992b93ec692c

SHA1
a044201605416f28e43393dbc58cee69a62204b3

SHA256
8027931676034afeaf4dbe14adee2efbfd2ce5075911bbd3596c4e84ae720f80

SHA512
d191f7c76e5a3ae1897d684a89a51c33f48cf128aa7c3449a2feecafcc86168563b84b4ed9a1c0047db4509af2cd7914662d0e1b9460de80bee15a6bd6094c32

Download Submit
C:\Program Files\7-Zip\Lang\ba.txt.azov
Filesize
11KB

MD5
f48061c3779b9effca730cdaa49ab5ac

SHA1
086c6f56efdaab1b75f761887ca5188cf434055e

SHA256
4f9b264a8dfb0e62b185d8bee55ba630deb4dae867551d578c7e8a18eb96b2cb

SHA512
c61e26767973f7e20962403a1ca2ae1b18caa8ae8a2e93ba388c7ecfb68b46adb04d4d9ec6de8b2ebc32cf967e898c8d59ab0a7396cd372dd84f98565b9d0258

Download Submit
C:\Program Files\7-Zip\Lang\be.txt.azov
Filesize
11KB

MD5
defef493d94475b3131986fe2673b0d1

SHA1
89bff0007ea36fe7e72a5ed7efb7d508d6cea785

SHA256
38e6ebbc403677f3d2b8310322cfcb6119af9ce2e475ed59d88a39dc4d1adfc1

SHA512
1b4ae8098fb757126d98ae622037cb40e72c6db31f635a2aec481f32ba4c00abc34acfca6c72284453d5eeb21bab1b27083918f0afc337b4e6a3fb3011cd06ee

Download Submit
C:\Program Files\7-Zip\Lang\bg.txt.azov
Filesize
12KB

MD5
c44c7865896e43ab98c4b72aff189f40

SHA1
fd978787a2d99bac1e547a8a88ea29615a373064

SHA256
e2f8a27feab7abd979663ceabfcfac44e1967cdafcdd195f360b113932a78887

SHA512
37b4177b500e09e329f841202600146e76e1060ea49fc4e33407c39cf8bb93e9a166ee34c73bb7aace6ff10c1ee612f2bcb1edf2d892db87cb16faca9a6ce0b9

Download Submit
C:\Program Files\7-Zip\Lang\bn.txt.azov
Filesize
14KB

MD5
55d20f4b1d1a88c77cc7e764a722df48

SHA1
c20ce58db63aadced475281008908bcf599c855b

SHA256
cb915ad7980942c0e3a510f7630fe12968ca50599409ec2d0dc6270fb2cd3011

SHA512
88689e897e144896bf000665a0241833c4e6789c1cee5372ffad1ff0b27f7973acde0c643b88a9353444b39e5b5c65ca030a54d270c1500ad6095143f735af66

Download Submit
C:\Program Files\7-Zip\Lang\br.txt.azov
Filesize
5KB

MD5
f166c8c729b1d5165ae144d8b4cd67cf

SHA1
b42ead32894a92354efb41f4a2aa2761b351823b

SHA256
9bbf00c348a0da72b3ec91ff43e447dbb19d96f6ad2be6fff3b7f3710b6fc89b

SHA512
5b2aa0f14f10d2420f646924f3bd3e28885b784a75137300912ddff7a9dc2ed724efb036e83fed6391e726c6fe05b2e67cc38956b7ccfe962fb1b615704cba82

Download Submit
C:\Program Files\7-Zip\Lang\ca.txt.azov
Filesize
9KB

MD5
04fb588bcfbdcc5839aee6a7d6c5f862

SHA1
c0f3ef172d40acdd8e2d2330873ed1ba917d7352

SHA256
b30f2b4e9d7cde72ae5b0f84ce5cc18a92f173224e1f4b97ada6a763625d219a

SHA512
6b5eb9fa1d623951593f9b57b4c26f495eefda0f3e3a41ec9fa7fd1cfe2758d94c39ceb81263d40937137e99c39267d2189c23de21bde001d4620a10f3cf15b3

Download Submit
C:\Program Files\7-Zip\Lang\co.txt.azov
Filesize
11KB

MD5
d4338af666b9668888b07f8c98516a17

SHA1
236b42a4b659d488c43134358e01a0e1b249463d

SHA256
bd8fb59047abd27182a0ce5db84986a593cd3fc75c2490ab3c808ebf9667edf6

SHA512
d16b7eef469ac7b326910f25f0f88d0c2ae51f05466f7ff6ff293a95fb218ea1176442455ae529381faf7e92eded040d65f3a4b2e097147378d79b64f3887416

Download Submit
C:\Program Files\7-Zip\Lang\cs.txt.azov
Filesize
8KB

MD5
3647e24e26ad495810fed4dc1bb61409

SHA1
7b6c99ccf0d13f63c4580d1855049c974642214e

SHA256
bdf784c4943f0286b74da02add15e096fde19644aa1aeda90b101a85cbc20a5d

SHA512
fe4719b95838042c06c920f1a3245ccb625e09363d8f02af08275626c0eb43a737be5f3629a67696b06b71a53e5fefab25cb4eb60fabae74669456c475653412

Download Submit
C:\Program Files\7-Zip\Lang\cy.txt.azov
Filesize
5KB

MD5
d907ef1f7f6968b520900cf95b5e261e

SHA1
dccdb78bd70f3bc1fc04e5682c5ff65bbf66cb44

SHA256
c3eb42ed8e6131feb74df22fcefba5ea8f5544e4cf825cdc3118bc37f4eb8a6e

SHA512
ad04c0f2b0a5779e15bc8ebc8ec78690d7595555ea132f920125df352a6f542dc4d1d79601a595bbee299aed035c2fac5ad7a2fb832105fd59802d019edc7801

Download Submit
C:\Program Files\7-Zip\Lang\da.txt.azov
Filesize
8KB

MD5
341e9d315470f16718c57bb8fcfc267f

SHA1
72cf38e1afc4dd521578795937fe307067fe3ad0

SHA256
d4abba58edd9be8673812a18e23510e1a8d7b0e4a3acc9eb40bb312aaeb980ac

SHA512
27e7ca1107ab75c97ec693c8c1705d7ae5ce31f0b4d0cea3705e8deada2e829f5bcbb7afda7ce70b1f1e0847879bc15858cd03e86096a993177130c155569fe7

Download Submit
C:\Program Files\7-Zip\Lang\de.txt.azov
Filesize
9KB

MD5
a3eb94e4a1b9e1a36430885edb8c51d4

SHA1
252c5611ecb9ccd1f42fbe142c5e9618000861ab

SHA256
73f1f525728e23f0a931d51d0dfdf6f70a15ae405570af98dce581989103b21c

SHA512
82a2fc52545afac86816127ee05c0afe33e4fadcb13dc9e38f55b8e9dcb6606375d854e5a95489d8300589a63197550d6661f74b27e99f0d2f15ee65dda2dbd1

Download Submit
C:\Program Files\7-Zip\Lang\el.txt.azov
Filesize
16KB

MD5
cda1d455e71f1fb2c1c40339fdb37c9a

SHA1
a09b7eaa0749f79c50fd7c7fe20ac518a457ceb2

SHA256
537a9738f8ad160d1786642399907604b2580a4cf5a2d74902bbb976e9754386

SHA512
45be10fb357046507f03b9691d6372fa165c97829e3ea2dc3024d18db0fe9e6a9927d881e5babcbc4ad83ecea7ad451e1d68b7a7286cb45d5892816f2c360ea4

Download Submit
C:\Program Files\7-Zip\Lang\en.ttt.azov
Filesize
7KB

MD5
95e90aaa19a1dd4ee2a41c701183dcb6

SHA1
dd1e2ac2ee7dc8f5b2be7b14be8ecf91a11058e7

SHA256
88c12e5072dda220340f3fa592a4ad36b68247e00fd76fc35b147ed462fc86b5

SHA512
d4eeaad55223199a32e8c55ccb15a7f4fd3e56011bdc2de58d1e8ab02575c7f715ae9f95bc4166401fb87b96f756eb141a55194ce9e444fa0cf1cddbfc84fd70

Download Submit
C:\Program Files\7-Zip\Lang\eo.txt.azov
Filesize
5KB

MD5
132c905ef421057d5df9a8dfca8b74e8

SHA1
6105c869f6c433c79bd015c1d89c6fb237200251

SHA256
e0936035823cb43ea733d68ba0bafe1611616acf2d120d3a8ad5116b84ec851f

SHA512
e0584efd917f39495ff64777c9e5e08b2b73944fa54305366e085954bceda718c58b07c0c531f04fca8a7d9b0a1a05abc9eddc8ad6fd5b198646dc5f26189622

Download Submit
C:\Program Files\7-Zip\Lang\es.txt.azov
Filesize
9KB

MD5
0e3990d462ca4fcfb239ea71a3991b92

SHA1
e734cbb95b92e6a4d3e479b4aab648275c6dc24c

SHA256
4d9c7f736d5e8adbd1cb3037a40d9e67ae1069dff24c32d0ca74bc8acc078160

SHA512
c9e4cb506d7c5fdb509c9ef5e52fac80ae703aaa83903d5b438b741ab6b2c94cf5ecb6134dceb7ab62337f4825642a6c160c4f5e61e13cb347bd1f299394401c

Download Submit
C:\Program Files\7-Zip\Lang\et.txt.azov
Filesize
7KB

MD5
404ba55608d5421ee1980582c439475f

SHA1
b8124ef471e03a222ca2c6e9a85d9f55ad4e50b2

SHA256
af86a60ce06da3a1cb4c5848215a3f43fe645d712455b4ca43e9a963191fbda5

SHA512
a9e92171a9ca15d590d6a1fe5575c04e49d0b9cb94b30d003e9e23eaa05738cf00a02b07ba2788cc39f568d388debce57e344f2036e29089b4df0a0b50a67d7a

Download Submit
C:\Program Files\7-Zip\Lang\eu.txt.azov
Filesize
8KB

MD5
4f4e102524e69be6810dfeba695722ef

SHA1
004fe6bb3ecc735199e5b3af376294610c7034df

SHA256
2a05d9c743cdd64e0ef7dc658039d0e5dcf01937b483b8735836e078e166ff21

SHA512
d718f768ee45e29eaafc5ae353743bebeba15b387a60c8422e37ec83e9ffe8d0744ec069380bc09624d1e8eeca2e0387bb1d88a0aa58da23e11d5888bc8696e7

Download Submit
C:\Program Files\7-Zip\Lang\ext.txt.azov
Filesize
7KB

MD5
4cff94fafe215f9c0a41ae43c001ac6f

SHA1
81a5735584847617f15f8f3ad8b140e4b5c37b7b

SHA256
95a4520e4b88c0dca1e5674533de9e7f93bc3b6ef32210ff39ec934ce467b702

SHA512
973855e557830728dc112ef38bf12b82a6a37e843ae52a49ded5dd0a225999673a78c0df0d298f8ba9883459f13b71aba124ef8a063cb76d5de67a634ef33cd1

Download Submit
C:\Program Files\7-Zip\Lang\fa.txt.azov
Filesize
13KB

MD5
96a9cc3c4eb7fb5ba976ce87458fa8eb

SHA1
ea07691828c7da2c7568276244387f0a8618da77

SHA256
307d1194a27b239fae17d52ae7fc5052393f3b54318864f95a579858bc47af5a

SHA512
c9da2263ec5246cb331c8771dec5704b635bdeef9a36b335c204438eb5b391db68e095d0a8fed432269701a94eda4b7d63ba5cfc3c388e3c73c46327ffde756d

Download Submit
C:\Program Files\7-Zip\Lang\fi.txt.azov
Filesize
8KB

MD5
c5efdcff1bf7b77d49a30e173e25c776

SHA1
ba6d74d4f3b5ed7878741f93c6745e6e400d7ac0

SHA256
f9f48fbc89d83329de2218a8480608ef6d1f6a0ceed8aab0d35b850333caad86

SHA512
1bdc7ff5e092a189cb4be34c42391a5a5260570b09f310ce4261644c7f81edbd5e7f5079e6ad9e2b07792074ab77dc47f018ab0dfc459a1eb17e123dcc0e027d

Download Submit
C:\Program Files\7-Zip\Lang\fr.txt.azov
Filesize
9KB

MD5
a6b54c0d5a3df70f388e1b3e8f4ccd8b

SHA1
559aaad4e39065f746f19e62811a60784a8f9b4f

SHA256
59d7fd1118a3a07cf2a34712ffd6f3ef216a86f6480cee9b0e711fddb9d05fa1

SHA512
b280c40ce908142c1173a708c753c7edb383527ab0cde8545e415a9f8d5e7c5ecf9a6ae50fa9239a69c96810dd8b907707d5e51b2b22274efede1d2a6137c9b4

Download Submit
C:\Program Files\7-Zip\Lang\fur.txt.azov
Filesize
7KB

MD5
68e6ca1ce28ca9b150f5b5d966576696

SHA1
5a6a19f382eccd68d0c96f268db797fb8baa4e14

SHA256
f83e7d93b7accc1082dc896e89513ec99016a7fef4ff66fda63cf372fe1502b7

SHA512
e39acd2746b8fbc708629ab35a690452e92b7198f34072af09836feb1389b2d3d22649326c45f1a8f339c5d07e64a6fdee5db9833cbe00d01fcf2aef0ab45391

Download Submit
C:\Program Files\7-Zip\Lang\fy.txt.azov
Filesize
6KB

MD5
e6d81210fc0aeb9805ef6b372c4340aa

SHA1
5f3494803b5db843f30738a36879daae4896fa08

SHA256
0ecc0bb5d82a88b14c2d7f8362586acb6581e94e59cbadac9c7722d8d639587e

SHA512
7d376a702ffee2f07147ab615bc884694dbcddf22c5b7d31b920796755ef6fa6cf9b62286907d7b418c03e6fffc326af6785e1f23b7aaa717414ef24849dd589

Download Submit
C:\Program Files\7-Zip\Lang\ga.txt.azov
Filesize
8KB

MD5
e371223ddfa444b5eb8d26ae8d85b3a2

SHA1
e52b84cea0ae36c73ad5b3716820df3d64186d9f

SHA256
a46b0f0ae8f941de5028129392a15135e11899fb2d21b81ff2e18651d3e26814

SHA512
5d3f8aa3d7506240cdcb0bf26205cf94fb1213f857222a47f5a484bca282613ddb5e21b76ebbb29fe2d42dbde560487ac24af463f195657591b831d3b2739fbe

Download Submit
C:\Program Files\7-Zip\Lang\gl.txt.azov
Filesize
9KB

MD5
7d7e91795b9f34114993f3fe10c53b64

SHA1
ec1e18ebadfb0c22219ebfa6cbf34099d2e21233

SHA256
d4118b408e3884933465ec6976db73a16152143fdafde95d59cb4a6773fef53d

SHA512
239084068e8b40bd3ebd4d8a5fedba38405ade2845f9a73985e20d32dfb3fe0d4341f91127fd837158576b3ee40f407cc6e3b79685336895273c6a1b92e3fb44

Download Submit
C:\Program Files\7-Zip\Lang\gu.txt.azov
Filesize
17KB

MD5
4d1e60929f6e054276a3d8223846065b

SHA1
79c774b56ac6d0631800cf391e68265d1438343a

SHA256
8009a3c6fb1de3bb577271ea90513a5bbbfc47bcf33f50f92c9005078a756bcc

SHA512
edc0094d0340c5a30a028ab9bad52655b629b3aeb38e514998b4a2f4722c04501b2f84d3fcd0e5c37b289ec09f9b7b77da9b88fb6966fe49cdff02a7503aad01

Download Submit
C:\Program Files\7-Zip\Lang\he.txt.azov
Filesize
11KB

MD5
ca6e2e5c17cc75b911c5c3481a0f0736

SHA1
90523326af2ec9e83edeb5f763171312867824bf

SHA256
16b219cfa5c954357a30cf023847f48b979083d7fe1bfd25ee8b18c4576a37af

SHA512
f510ec824f682bcafa51a963aef9b81520a83d28f30b4030c5da6fb774e649fe724f886052c1f1add8619110d1545bb47f8c9d708e6f44f68a54d83a0cd023b1

Download Submit
C:\Program Files\7-Zip\Lang\hi.txt.azov
Filesize
17KB

MD5
c9abf6d4f22f60b3185a2b483491bff4

SHA1
8ac9978a48708368d7f4d2f89eb66b79d3d90146

SHA256
5b2888e52eb33a9b69183c2864b18aaed26496b558303e6631c8b721bfe4b0af

SHA512
3fee80c9dff10204a2ce19d649198c1ae16fee8e50d192012924fd48d3ea25d73e287cd3c80b381060f15fd85b2297a7d46ed14b7d02cdf32c68b9c73cc138cf

Download Submit
C:\Program Files\7-Zip\Lang\hr.txt.azov
Filesize
8KB

MD5
d0b03a282d7c8d101f2fe9e92c48639b

SHA1
337f24b7c27abb8670d98fac22941e8c27874521

SHA256
feea495378e57b7d0370869ddcdf742ede7608c740df74d7912f1fb9c564b24f

SHA512
51604c7c810f428d40f55c55dbfd3ec9e814264cc58bb8d2c2cd345ed2853fa7a6a495b6d80219a13cedf5af90091405cdd6abaa6154604cf6d2dbef077b1560

Download Submit
C:\Program Files\7-Zip\Lang\hu.txt.azov
Filesize
9KB

MD5
d126fe6c4c196030b4b3b00b62dde1b9

SHA1
6eaa25c674d3ed9ab67306303afa3a836ccb91f5

SHA256
e8ed0a2ab9edcdeaafd1255a5dbdd90a968e7e8eb1963830b832b432b2aa07bc

SHA512
ab96391e996070223e0edecb68cdc6f89bb114317d729f46c2050c2513a34c7bc2320d409a469ba058c1b1d02c962e01b9a5e73fe9b414f4883973956e2b5b45

Download Submit
C:\Program Files\7-Zip\Lang\hy.txt.azov
Filesize
13KB

MD5
bc8acd037cd27a0ead881dcef8489c4b

SHA1
73d2ceb63dee56de7f74f2cfe8bcaad1a63a3003

SHA256
c03332d5883188a8d2dba773bbfcdb41bb13ee632e94357248cc430753e2d6bb

SHA512
727c42235a3ee918ce63f9035e795e2368c7e7558d88ac2c73c4ae8d609ac82426c0565b538b5a28f22af616c432895ca522cf19dac25a4de018800159b9b609

Download Submit
C:\Program Files\7-Zip\Lang\id.txt.azov
Filesize
8KB

MD5
ee83475937835426b33ba1eb8e3533f9

SHA1
9eb2323fb6cc848fbfb2a3b16f47acb7f6719349

SHA256
627177f300fd47f5e25c5ed3f50ee67ca5994c63bd02e2cf3d9f07bcb3781d0d

SHA512
5670e9de36d8c64e9cee157721f8ad5186326bd9e276707cefd45741735e0815d491ef2b4e2e86e4c1cbe12fcaef2e29e07cb4c1003e72c9afe947dc496b324e

Download Submit
C:\Program Files\7-Zip\Lang\io.txt.azov
Filesize
4KB

MD5
3ecfadb042e6d139fae81579de0813f6

SHA1
87e34ba77488e1887e12ee4775c3e059b62198ad

SHA256
23f71859b45c8e351bd9256455b2e40aa4e6d683fbc4285d5b3ee2922d0c2496

SHA512
f04974836152ea5c8913650be39332c8b1be7a9bcf5ac187ffe8e32a9a52bc3a79de4117c9e61e9a3293f047a7f3f6c680813c3cb812b20531bc8ab646ffc060

Download Submit
C:\Program Files\7-Zip\Lang\is.txt.azov
Filesize
8KB

MD5
810295b9dea9caf39d05b53d24ca3a31

SHA1
56e90cb5e5ee1a0537dd7ee9b2e07ce6a7fb91c6

SHA256
4bdaf2e3a37284ca8a4730d8a18bca0d1de35c33ac1f783c8e7e7f9e03e9d9ca

SHA512
b2c66eb9fb1fe1f7054ff4d942be7456429d7d7af17c3d103a729f58a476082f8e86b69ce28bcadd6a7433e4e5e044158e820d4fbbba70a1872a5a9ec12fec90

Download Submit
C:\Program Files\7-Zip\Lang\it.txt.azov
Filesize
9KB

MD5
9937657e49bb73ca9552bb2de2e0f00e

SHA1
8e5e9f8a65c94708efcf81b4ec37b0429de6ea2e

SHA256
11d78a5ddc3182adfee82ab1e583fd71623d1364dd52509e6616581caae82f65

SHA512
7d664c6881f62a3b5760f65aca9a14fc83685d6c3b7cf94c968ac6c0d0ae07d33059163048bb3cb3002ddaf6ac728379d7714d42dc6333aad9d15791f326d591

Download Submit
C:\Program Files\7-Zip\Lang\ja.txt.azov
Filesize
12KB

MD5
70d723f5185056263ae4a02b3f3c7d4b

SHA1
0e74bf11d1cbda7b0a665b187fcd391444776ffa

SHA256
7eabd3c52b41c8c5b689175c384200109c262cdf5b1476c7b509a69e7fc02d35

SHA512
edaff03e279f16236408fc6e9773d532e374976d5accfa89ffdb696f5d5653f226bc7103388e08bb4ce9ed0512a1381fe9291f160adcbcf80ecde5580280a6d0

Download Submit
C:\Program Files\7-Zip\Lang\ka.txt.azov
Filesize
17KB

MD5
e70a9fb95a0ce45843187b216f895e08

SHA1
085ade912d9f1ee0bf88d241d55170142594b45f

SHA256
e84c3b35d959b8c203373dcf6d8855918a4ab21560b79aca2d65c6bd8d3083e1

SHA512
161abca88108e605ef52e0ccb7382e003ed6ee1eec9ce0bef4a9e030ab6c99aae680a3c09f9efe8a372b45cb77c228e410430631111eb510198bebb99a25643d

Download Submit
C:\Program Files\7-Zip\Lang\kaa.txt.azov
Filesize
8KB

MD5
33bf134faab84aa31f0c57ae5483bbfd

SHA1
7cd511aa29597a4716de086621bad0fecca86664

SHA256
8b03a69df3d3df8bbdca8580956f1b5752a3f06385aad0d117918ff30f1ea445

SHA512
96b975ef9e89f665e1840c08d0d0a24570eed0ab25ef07644d803c54e0b663885071e0c7b140a39bd54f534f5ea5d86628d6c98668a486262cc8a6fc695bb2f3

Download Submit
C:\Program Files\7-Zip\Lang\kab.txt.azov
Filesize
8KB

MD5
e98057e01e3867dd0128da8bdd58e735

SHA1
25c582fa9534ba6c34f9912584d7076084c04680

SHA256
171bd5f7d39f17363154a733ed5d53ca67cec08d106ee8dde72fe6d993524201

SHA512
47b53b74184a246fb3869e0852abfdc8198c59442dc6788113930177e8d84d45a3b98315a270e46af98dfd9edee18d1afd94107b940479a0a6b1d0fb51e6481b

Download Submit
C:\Program Files\7-Zip\Lang\kk.txt.azov
Filesize
11KB

MD5
650ba4cf5ec3ba7c75cfaf3441593aea

SHA1
66e0d6c771511680fd4c3b6e9817237029ab4042

SHA256
9f1cb129caac3ad555c279800e544d430b9c4f7339647900799880785666170a

SHA512
474d95b15bdac8fc3682d63884d9d44d19023edc718916cfa9a06c37b5ab1a141aa150165d947853d2d03114c03dca280333aaf4363dfb5e2107791902f5db64

Download Submit
C:\Program Files\7-Zip\Lang\ko.txt.azov
Filesize
10KB

MD5
8e6a91fa6c3c60c6fb8a127f5b5696bc

SHA1
871b1c07c563ba1c58da703f4c91ad03ee4aecd8

SHA256
4b1569866d55cbb78a8bbd8ac39a8229e5b1ba1bd22fb49ea0da8a030d197e12

SHA512
8e9fbef0981cb3c6f72e2734d32968abaa7783f26fd45ed7af39c72c8e25d3b4c4b65be4114cdc904a830ac0b3b074718642bcd8f4c06e43f934b9fd80f200d6

Download Submit
C:\Program Files\7-Zip\Lang\ku-ckb.txt.azov
Filesize
12KB

MD5
ea8046d506653bedcb3f5aa5292d2af9

SHA1
a044daab2c6c51466455038295979a098b6c378f

SHA256
79698ca1df110b93e29e40985ff9f6fb734347e5d8b40dfdbaf40cafb30392b3

SHA512
9cc913c9797447914cb91215849001dd96ccb5996dacb362667d529f1dc1db8fb1e45ce6143ce82be7ab2fb2f619440fb0aa3c367f25b7d762fbcc7e05eef6ee

Download Submit
C:\Program Files\7-Zip\Lang\ku.txt.azov
Filesize
5KB

MD5
3c7b7c101441525ddd0498ff9c6baa0e

SHA1
3b516bfbfa3a2d6f0af34c877361255b15022522

SHA256
bd70712d18b4fb5c7d14c3ac8d26d2d3bb173ec184e4594b11b27d6a46523ea6

SHA512
a5a543f25512d2206dae9c127251fbbf3bbcc9012842dafe23f28e98cfa1179088e023b0d7a695dff394b1d22f87fe1b78f5fd9e0692351df6fc7bb5cc412048

Download Submit
C:\Program Files\7-Zip\Lang\ky.txt.azov
Filesize
12KB

MD5
f15e68e4020b90a70b2757a003c4d780

SHA1
3212e3daa894ad7c4768d6ff399eed473d2787a2

SHA256
972648c91a32868177a95011a4d6090927c9467582be77d9f620539561de105b

SHA512
f0b68b2eed12d479bc8cdaaa99bef7262c4c5b9092713a52e9f226aa42460d12b78bc2c3ba81512bdac0eb85844da283600d4ad8032f0ac574ebfced1be1a45d

Download Submit
C:\Program Files\7-Zip\descript.ion.azov
Filesize
666B

MD5
55e0fbfde5b286796beaf432fa06fef0

SHA1
d964205ab509cc40c9dbdbdd2994f88570021751

SHA256
077cc5034604fa0731bee104ff843227bfee03c325a5e997d297012cd91410b4

SHA512
be07c42030e701e7b073e2086df83929382f827124f0bb83fe7cda5c912b1702f092eb1d87738fb732008a7c3af5920b4921536929fac04a40ff7f97402228cc

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
Filesize
350KB

MD5
14bf82b3ab019a9bede1f27a191408ce

SHA1
db6086b1fa7e1802f48423a13c7ec9270eab45ed

SHA256
7ce49202c878bb5f8a259f974ec7fb8134e927d50df6c43df788614cbe3fb833

SHA512
52719a3f2d126c3dbb2aa277f1beb8d7608b29f8cb3a8baee7f4b5873aabfc999d20d73417c14b6b12ac61ad02e619e30269829d9229d114421dd7433e348a13

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe
Filesize
4.3MB

MD5
d05175a27e6c5bf8e054dc5b265826c5

SHA1
bcb819afc488496bb435647266e85a9557d13a32

SHA256
3d53a0ff256e703bed77ca420dfeaea7754b01141f23496ad3397e8773beae1a

SHA512
bd780eaedecbbb4016037c07b497a51bf168adcfe7522320790151f799b60762df59a3f6514988a89510b334093e09185f8262174e6c956387bfcdb6ab613948

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe
Filesize
2.3MB

MD5
e16cac377ba5406ea8c097ec7c17ebc4

SHA1
f95b92d29d2471f58a116506abe8d872763545d1

SHA256
8c211abf34ab433015c8170ece795aff56d078ee40a1fa93e6c41d2cdfd192c7

SHA512
d6a133c431afbb20b795d0491658e8ce5a65d36d5108909593a52c241f7d8dd61ac52a5cdd4a28d5ed8dbd7f10d4e51f80686048d6134e1309c6faa6998bb2ab

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe
Filesize
5.0MB

MD5
c42823036057007f46a30f67d8b7794d

SHA1
cc312a521f8b08c2c9f403404b168facaa289315

SHA256
969c92024abf7c31936733f6bff49d288244a4ed66920857224cdc833b513aca

SHA512
170a5068896e6bf289cc3f63818121f2cd29faa783567906af2f77ee56911966b68c3845008e9074ff2d28f2a7699d5d4d36ff9f52f808dbceb38e9ed91b7eec

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe
Filesize
1.6MB

MD5
21177cd54d3e2609155fdcd08ec64be6

SHA1
0f82b2a95dd017d02defaa9cea9109b9559ade3f

SHA256
b402368770a12c1cf4fd3783bc797b07680c84f11eb7e6992fefbd8e7c1ae921

SHA512
ff03617f51984a55330548bc7f44f380c5c0f31c8a61eba99e3b6086a14eeb5964f57c6edce016ea0be714ef8a08231de937c3b6c815af30deb8656a476717e1

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe
Filesize
1.8MB

MD5
eba4652166e52b717b833ab0b39fb1aa

SHA1
d5a6edc4eddda9a6784df892416db775bc1bd042

SHA256
5b6840724792755cb6c250ff60b7da5bec765fdcda5ab61b09c329215ae1206c

SHA512
7a82de6160fd5a4312c495a0cf9551e518f5c836ded889ad1909c8047d94753053abf6b8ffdeb8bfe2562623afe882edceef8c8f083e717ce3c89668f604ab53

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe
Filesize
1.4MB

MD5
87162b5619ce35a84e4bf23334d837c3

SHA1
dfab05780b7245dec18bc02d06ba614f4613ab96

SHA256
421e9d0cef4202de0216203294298738880e8e6ab57da2ac8919b8f51672ceb9

SHA512
67afb328b88f05945b2af9c00c471a4a4f996551bdc68fd21462e0cd673f26471f9d47095f6c307123d5f5f54f4145a48f5a4b4778633b2cec9ec007e1702c2f

Download Submit
C:\Program Files\Google\Chrome\Application\chrome_proxy.exe
Filesize
1.3MB

MD5
1d494fd319e6ac61f80be1ae1e4c3b59

SHA1
8b642c1f421a246a639b98737a6a451cf5bdbde0

SHA256
276efe5037e9e5c48750caacc271dfd4476ff11cda30e87cf6f59410eecee60e

SHA512
a58c6bb971e5851aa4f21c71d4dbc0713596cc369c2c36664bc22c939ea8eac816a508e251db53d02493236e68695d1fe36f6cf593fd5a1b1a4734fd1b9b493a

Download Submit
C:\Program Files\Java\jdk-1.8\bin\java.exe
Filesize
333KB

MD5
916448bc403476685af6d97693f01a42

SHA1
2f3776e3407c7fb126126ebffb891f39aa3a2eb8

SHA256
8c94f182f2c25e479c31f58a8576009a63bfb5bb2eaa7a8b6daa3e1c5f2b03bb

SHA512
fa0c11aeb4b4b17214f73d4002ef1d510edc87b7aef595e426f99bebc18b5c68bb024e3faceba06e5ad93dd12ffb5f39d7943779ea50956cb7a1cccc66c8606b

Download Submit
C:\Program Files\Java\jdk-1.8\bin\javaw.exe
Filesize
333KB

MD5
67b3ce360ddfdf86535e3571ccd954c6

SHA1
d77dfc297a488f4d5378a300cf5cb7492fbcf012

SHA256
69a61163c21a81650773bbcd54be66b5e72c3726ad7cfc1e822af2afea139d0f

SHA512
d20ec2c037090a74264aced7e3c3f38ef8b14c83f9396c0d2dbf31c9de41227ad8e1ee023bea2c568c0c1b6de5a4b76434ced5232392c40e3611022ba26fc96d

Download Submit
C:\Program Files\Java\jdk-1.8\bin\javaws.exe
Filesize
540KB

MD5
ec55bf34b3f1f17bfdbee5e329b02385

SHA1
26ad786267633f059d847f05c9cfb58b924210ec

SHA256
55151731a2c3e2cbf298df173ffbf4055d715c4cb58d13634bc5eaa87072e518

SHA512
01629c29da30fc9dc706cb38e4522ef4a64ee860dbd1adc3bdbc384ba6354819a2d4a8970b7907a427ab5ebeae8c7a6d0b085341bb3c635c3ba2707eb3793be9

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\java.exe
Filesize
333KB

MD5
39f50b19dc6ea74ac4e87bcc8137dc0f

SHA1
52d6c6480e36690827f1cfd77ed7b61213d95483

SHA256
945fc24e665f4a108e6e2d0ab35f25f7b125a92e7724e75268044ac75ed74b3d

SHA512
45ae6fa3a3dd3a85729760985f5d28b96f85771232a3957481d67267c14a5556c8cb6d36442f42913b2fa8299b7328973a0643299eb8bb822ad9d3018f82ff38

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe
Filesize
142KB

MD5
f4d12e752b951ee735595e7eb9512b74

SHA1
c2eb7a76318a4ba1c510536c46423f7fb9015d4a

SHA256
00913c34f78689e6c9de4c49f34638743a135c916a64ba80bf62e7afd5b9efba

SHA512
3724f8d1f4618954854fe75d057ac9d39aa711305469eb9990f428f18364911e932465d8a80fa46f3f10c7e995ca9c5c595fa8dba0bbf14a795d48a646657673

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe
Filesize
333KB

MD5
4f9d7e0b3b85a47b7fa39c0551a47e80

SHA1
c38947a09eb3e8955a9186e6090b36b106c60f17

SHA256
bed6e2aaf646425d8d8f25a74f015b1777d637301caec5331d2b2d1b192fbb91

SHA512
b7bebb5e4fcd613d18e3422686ab1b75a06bf4539571bf755ad4c58c695f65445444be26d7bbc08ae19786c0a8b6af6dfd0c37a20fe767789dc435713effb8e7

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe
Filesize
540KB

MD5
aed193cd924908113c5cbbd32fcf3e92

SHA1
f94a89fcfa5a5926b980716af0e3563afb7ee273

SHA256
e4e4a8de62ec6ebe8515bb0bb6151a61a022db022de2af3c4fcba19705677622

SHA512
7e289d6f68d5914efd29b4cecf91967dd2f2f16671f99abb3d4ef8e63ccad85fff5e4cbdfaa9382088e65a90cbb87ab1b73c345313aeb8c869435f35b13f08cd

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe
Filesize
195KB

MD5
df634af178286c3d066550b0b8eb37d8

SHA1
0bf4ee8b903fe8a24a6299595a07221167ec6cc8

SHA256
604872b29fe033ce70f1c60c483f94d17781e8c3fbd306210261810647ad841e

SHA512
aacbd430cc7a70121deeaf509423c649b439c6e0f43370dd0d3ea5b660b9f0eb7d72f547975a3466023b990bb8aec4597cb3fcaa9ee566360a622c5c68bc8152

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe
Filesize
138KB

MD5
224397626ef6263f616851f0ab5c7e15

SHA1
9e4d4dab274f6cf8fa8a3a8383b0f34c568684b1

SHA256
de41d93371a18f2cba8487c729528f804fbf2de41b5f58fcd9df3b874e3ab4b4

SHA512
9500be40dbc16303f55f4ee600d540bd99fdaa02430cf700376a4687d5d6f8100097fdbc7c084da190c92716eb829b1f7706effa16faa0c516ac5afc1d69f608

Download Submit
C:\Program Files\Java\jre-1.8\bin\java.exe
Filesize
333KB

MD5
3445b6a4521522387a5b668fe55a04d3

SHA1
30aa3ef62315575acafe8fe59b995a21569bc923

SHA256
ea8e941cdac524f45c4a632d9a6a2cae828eec4560ab3bb10dc6b416428431d1

SHA512
7fb7dcef3d0e78cf136f11bc0e2c20093fbb61eb1c911f13f1e670caf408b56423e9b7be6bec37fc91341da22bdc979be4a54c3cf8128261a435f74e16ad7764

Download Submit
C:\Program Files\Java\jre-1.8\bin\javacpl.exe
Filesize
142KB

MD5
859ce829f28a2febd56ce4d7d0285a6a

SHA1
03a736c2d92b0d476fa34c49c8730e5f865533cb

SHA256
34d173ad54e87cb4e1365b144ec5ac1a79ba6d865e8f06a0418fc321d69af6a3

SHA512
873e02be75f5a4600db06a5013e7505a68e82ef6c81ed7c5bd7cb7d0f3f311ff3ce8c6aefcf10e864c5a4760c72169623f3b77c30e9d2251efe0fa987d35eaec

Download Submit
C:\Program Files\Java\jre-1.8\bin\javaw.exe
Filesize
333KB

MD5
750767037d2a3fe0207fe8373f2d46d8

SHA1
bb030cd5073121697495384a07aaf6fceee64605

SHA256
b047b224ea20a5a96f50aeba978048627395290bd1442c40ecc4a4bf448a804f

SHA512
7eaead18d33c20105a45b977f696f9638ffddb238703603cc5ea46eadc27921a29952d57a6a705f7eaf2ddd21e23174fb47de95f11eedcab3e67d749b6560855

Download Submit
C:\Program Files\Java\jre-1.8\bin\javaws.exe
Filesize
540KB

MD5
ff91380a4ac7e26e40be833ee54692fb

SHA1
67c6c24f3eaa3dc1f4fa9bb9f03f569580c75b02

SHA256
df85a395f2caca8051a372d7e1eaf10b534848d0e7ea2868555eb3e9c7c800fc

SHA512
b0fd27462ee14cd080713a2d579626ebd99532706d3fb8f8d306971a0b0f0fe10f0f9b20bf3ed6f383c43f0d594fadd135f330391e7ccd520b4570cb05632bbd

Download Submit
C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe
Filesize
195KB

MD5
b8512ec5f2198ed2198a587dd754874d

SHA1
71dff9b45fb12983f17abb593c3c0228d733be20

SHA256
a94bdb8733ee558493cedb6f0037a651312225a6ff11aa81caa31cfbf9cc3a1f

SHA512
ba954d9a9ace0474c993bcf91fa0a9012ce0a752aa70bf4ffe70da55dc418c1283c898014d5cc877ea02a29a734e36d854324094a2142a22a3e3835cd0ab7593

Download Submit
C:\Program Files\Java\jre-1.8\bin\ssvagent.exe
Filesize
138KB

MD5
1dd8d675b47239179523c78ccd7a1ab5

SHA1
50b106ffb13d03f0af49d24e453f6af7bd4f0870

SHA256
5d3882c83f2e5849f0029c1950d7e73730d0919e687f8787fee0257736db9aeb

SHA512
6a1f6b1d1c84132e71d090ae9bd66537dabe981af411f6742619a5c5281a182e397664657c50996d715d987ce27faa80a9028464e60fd0b136d569d311338997

Download Submit
C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe
Filesize
4.3MB

MD5
ea7c37deb38ac5f3b84720705146dd73

SHA1
d558f766c1d12ccf93776d896fe1cdc801afcf42

SHA256
b22d26adbc596003ca1097250c5e68fe556ddb0e912ea3638317995387f2b7f7

SHA512
7c0b235cf4017551340de3d1842116def93a7381689369c2b18d9da90e47d5fb422b33ebaa76541ba70acbfe36f445b43c5dcc8b4bada25c32871d58759ae666

Download Submit
C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe
Filesize
4.3MB

MD5
2e90670a9efa1304452035963d108953

SHA1
570ec61b66bf4f676b83b50e0e45e02ffc30f474

SHA256
620ab705c8a5f2e5871811d2ace400dac31f10e514e9843bcf7facb7112c8164

SHA512
27bb92cbf587d2e0ef8858e4d533187babbd3d63d664904b1210333b4b79c48cdcb57d2ee8daabb04857a3fa8f5753d174f0870ea03d636cd073386ca6ddbecc

Download Submit
C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe
Filesize
275KB

MD5
66e112028286d4b5aeb798d61f65898b

SHA1
bbb0ffd419fecdb48363df278b7247f63c4d38f1

SHA256
b38532422b5937f2da6768870c61238f448d84093bf8ddbba32c1d6e6e46160c

SHA512
ef2c8a0d2ef06cc00743a2d514ddbd7a37f40086c5e70454dadbf85b75a883389640050bd06ac99fd3de28cf4b788dfeb8ac3261424318537b448298ccb0b601

Download Submit
C:\Program Files\Microsoft Office\root\Client\AppVLP.exe
Filesize
588KB

MD5
040d6c2fe0b76f6669bc8fa94c9d8036

SHA1
1a8e7c2ad75a4d4921a1e4a07a74971187f88b62

SHA256
f5c1f573510f13a8b503431bb795303529ae732963dff9ae2f7804b55739e1e7

SHA512
1236c2d1a8d4374e1df68b61b17beba2cd253e58f67442ebfd16b4b5c4a8216a6a3db97ef6e2c2fd6c4f80b08069c16621d4d35f644c07df3d8c314a3b2b2050

Download Submit
C:\Program Files\Microsoft Office\root\Integration\Integrator.exe
Filesize
6.8MB

MD5
997475bf3983ea2e493af2d1d58a6990

SHA1
8bc3c3caceafa9028801419b1bfdba098c774da5

SHA256
d2fd1b2cfaf4626c19469c0476276217766da0ba3c27971d948e39f4e82e86c0

SHA512
39e8f6ea03465e5b097ebc601f6ac2fc839b7ca82ee1f9378af085c7f6c8601801b9f76867be3b989a8d1be42a19c2f66de63a1324baf3944098ad4a1c8b749a

Download Submit
C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe
Filesize
100KB

MD5
10648cdc0845c4f34bfd6c80e8042b32

SHA1
5216ce25dd782b7142c123ee47b6e5bc65d35263

SHA256
bbe235b8e14c9a69675dcc8e0c37f1a181a4e20593717891c0e9a18648d139db

SHA512
c3b25c1acb57ac9320b583afc269920b03d691272f7b3bfe325fd6c65a465f06b0f548459c80444b75ff5268f14bb139d64662080b2681dd5b145ea09e2c2e51

Download Submit
C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe
Filesize
449KB

MD5
c18eb6c4f3f69c7f9e3dd317f05e3b64

SHA1
b04df9ee92dcbe5ca9e53be211661d4f884b5126

SHA256
ec8559d72a75e181f243f37c4cd2624f50c2233cae9cdc355c945c67845817db

SHA512
b5f12415c1f20b2f09ad4db54d43c44241d194156e68fa4612192743d9b6309963e0bf8ce5c3fb5eddc0420bd858eb08fbe5b5d087af6ce278bbff3d539dec84

Download Submit
C:\Program Files\Microsoft Office\root\Office16\PerfBoost.exe
Filesize
877KB

MD5
823cfc5beeff520a5c0d05092c413b0a

SHA1
8a5ba598157e67fa069c502e85b450917764fd93

SHA256
e050f5f9d6b27ee5bbe64a6f8677274b55d9a21bc9f3fab5d6e16a987471d4bb

SHA512
c2fbf57961df17bc3e823e754a52f0605f9a3a0160efd547cce625fda596c18c2ed1a967024b26b52dfab766ed655b4fe6e359c3a66834e4ad5bce13f1016792

Download Submit
C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
Filesize
189KB

MD5
f6f471a389fcb060c86ffd8ab4f9a5c5

SHA1
91b8fd4e229b089f874926583a340263d1804056

SHA256
fbe6a1cb39d1e33d67a30cb3598b1369f40a27d04fd447cb3a1634289fb7c008

SHA512
ff3242cff3425436d7ab825eb6e499c05a0f40d6c24227cc8052dc015cb0feabe8ba778b96d5453b0480cc21cc68b5d9cad3611fef3aaf51a83a47a9b84e4a67

Download Submit
C:\Program Files\Microsoft Office\root\Office16\msoadfsb.exe
Filesize
2.0MB

MD5
09208fe47323df390b43dcf7a50c9d09

SHA1
5c30ec6261e686591f40f804b333444f2ad8fc4d

SHA256
d9658c2bc464dd6dea8059131a2923811929035e3fdd06f68fe323f3cf9c921a

SHA512
a8ba22324861ef958011076b8cb1055ebfe46b8e04b792be6d653d467f875ffe77f10bde62572dc628854084a6a759ad25e8dd2b2de0235773a88787fcc6880c

Download Submit
C:\Program Files\Microsoft Office\root\Office16\msoasb.exe
Filesize
341KB

MD5
8f60686187d3a68999b8dcf8962335bc

SHA1
c9acee1db48b09feda5273e6251ac76446f3b5f5

SHA256
7e2e9ff657785f5ffd1b635a06f769ad1bdbadf77a240fea1cb5fd535eaf82e2

SHA512
2bc00cdf015e162340f75319b1cc64f993bca05a756078dc78115a835ec1357f473e20faece518e8e5e5e4ce450bb641fd29ced7ae792988ff593b9f80c2a019

Download Submit
C:\Program Files\Microsoft Office\root\Office16\msoia.exe
Filesize
6.0MB

MD5
1dc9e0644aef79bf645e83d5a57c1b51

SHA1
2fb1d16c541771a42dd4e94a4afeab30ed640711

SHA256
b36cf3d82210f22a8cafbd5a9338d4df825ba56ffaf5f423e7c7351482302766

SHA512
a7fc078aa92ca0213e1851dee2967306732c7f318574ff7e9eb3e6f13d7052d09f85d5b7d17d8744b7576efb3c48062eafa4df5ef4febb6620d7eb4a445f788d

Download Submit
C:\Program Files\Microsoft Office\root\Office16\officeappguardwin32.exe
Filesize
596KB

MD5
58742596ff39ffa8b86957936be20e06

SHA1
23152eabd74ae3d6c8b8fbe6a9c2b66ef2dc993b

SHA256
60bbffd584fce643807ba7e44acdadd29cd62625be653c438ed83c6aad2bdc22

SHA512
cc233d49e909711a234fe884ab9498c273ae03535932b2f8cc64f7f6f522a9dc2179e9819fe7bf0f43b6de65e364eb1f06b96038c0796c31225b10517b56999f

Download Submit
C:\Program Files\Microsoft Office\root\Office16\protocolhandler.exe
Filesize
6.4MB

MD5
68877279bea374f18cc1e52ce62657cc

SHA1
0d0f6f586b4bca0737492aec708b3bc4c1b90261

SHA256
221609d6456915b53b3e3703a18e84a4cd1396e00b5f245bc055515e0f2295f3

SHA512
840faa7ca331038a10e59c98c97d14ef381f2e1c68b2229fba0d5ccf5dd6b42e4cd3dbc16c2d8fd146f110951a4dd825fdfc8c1c124ae58213a64fff430c45d4

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe
Filesize
2.0MB

MD5
273ff2ac6ce1d7ec8c581a0ba597242b

SHA1
4d49e2d7559d33c5da32b38e97a04467b12ea270

SHA256
112ae9a69691d34285b476e9e50dc93493f6f16bfda5b3136cf7a7227d9cc751

SHA512
03f4baf93764ebe97c0fcae0315a61f2bf11fbb8d18ce34874b81c9c5902d47dc32e7366849572f6166248e9f3619dc83150a5c88d177f38a21a1b188571e275

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe
Filesize
222KB

MD5
1f86bf297d344c1438939e81fc5874ad

SHA1
de17bdbbeb231a13c8b3ab77160d81162b64472b

SHA256
c2b40babbbada996bdb98da1c0a1b1e34ca26f207f98ed85416eec5f18fe2afb

SHA512
61eedd65d4d0e5470ed2f6dea303472f2d4c809ccf011267c39cde9af8b74d84d34703d738519f9c26588e1f30ef2d20d7c882b72f10e52bad632935faf3c29b

Download Submit
C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\ohub32.exe
Filesize
2.0MB

MD5
5a0ed41a72124e90f7d27f96418fb3ff

SHA1
0dee3736f136837796cbe1b65be1426d85366aad

SHA256
164b7b6a4104556f4045173b5ea7b76a2877839ae1f79ac3299f8cc65dd02545

SHA512
329cdb501baad6148c1b192c93e736308cc1d1e217299ab94f6cc122fa339e18eecb5785696b6decd4690978b4ce02afd91f34c37f6448fdeb61e8584a14b788

Download Submit
C:\Program Files\Mozilla Firefox\crashreporter.exe
Filesize
324KB

MD5
63232f57971204a24173db0592ba08b8

SHA1
76b5dbdc545e175ee020b54113a2fc78af6e10a4

SHA256
f9763dfdde6a08d4af13cace3a795ba101312eafcbaed74f236db5bee72f0d90

SHA512
f0bbecf9ea39a60c31881dcd8f8a2ab42e303188f49c4b0fc5c68569d06130350c6e134b1db77f8783678c0c469536e8d1cbbe0ef0e5a361b7f6b0151b8e17ba

Download Submit
C:\Program Files\Mozilla Firefox\default-browser-agent.exe
Filesize
803KB

MD5
d657e447cc537f28689499a814a9cbc9

SHA1
5369e57125f244d64f0dbc0e2baec0a3eb23afb6

SHA256
4a78b8be7f88e393c0e2cb55111df1ac57ba34c287977421042c9d597a2b5fd6

SHA512
fd85f7fb0b71a921a208c642f62027810cd131649406620290512bcb806b3b4ab8df93ea6c43993da3b95a9cfe7ece92ab3d1af08be6575daf6aa4535ff2297c

Download Submit
C:\Program Files\Mozilla Firefox\firefox.exe
Filesize
777KB

MD5
bce5ef7ed2ab1ddca43a6bc3d65528d5

SHA1
9f7d7a31f8d4bcd7c4a879b46bf9f0260baa19ea

SHA256
432cf46a4537ff3e34567d98ec1ec6ef1b5c95439036ce32ea8440d0cfcfad79

SHA512
603ac8ccd2574d9db1cb89c7e71c828b6de1e7a8465a1d0f426fa48f3b1726e2395bbf020912d0703b0cae5cfa76d65f6726fc8d03e26debc9e3bb3e8b02c0ac

Download Submit
C:\Program Files\Mozilla Firefox\maintenanceservice.exe
Filesize
301KB

MD5
01bef50c2fd8a003f15e735802c73f4c

SHA1
22b34894972345ccb4c058a276aace61cddc8650

SHA256
f681ddb4195fdb590afa92579caaf22cd1eb5ecf69647e1009d8d098be155123

SHA512
860637566f368d3149fe23fb194f19dde58dbe86a45cdb3568712df23ed65f2dd5e5b279ee43397c5a04e2c16468dacaafc83bfd3c4b6658e2828f0d6cd4f11a

Download Submit
C:\Program Files\Mozilla Firefox\minidump-analyzer.exe
Filesize
829KB

MD5
4a193f61983233ab8ea67547ede77524

SHA1
2eb1a771068a2bac261dff75241f267b25bf57a0

SHA256
c9bb1fa4b4cb8bbd758484a821db136758db30207c7d55b4430f0e51491e06e7

SHA512
0dcf0c3ac7b012b0757d87e603df8420a76d509a175dcde5d0fc68652df660f2941fb3e0425b300da15ac762d99d091ff630f825072f85c5f25def3e6d99f93d

Download Submit
C:\Program Files\Mozilla Firefox\pingsender.exe
Filesize
121KB

MD5
7c54862ed1f3c88f089888593d84b8aa

SHA1
437354bb8775cfc5935e83f46e10b17e3496f393

SHA256
047afe69dd6b51ba9a18bb3b4f41d977327841494d8a07bc8e96ee4d3599e2e0

SHA512
076ab5cc185a763bfb72cc888c1563788cb50ddf674a9bdd81e514e26181d2f3f530453823dfe6051ee00950a862b34fa4fb283d33ef2b5b739612087cf515e8

Download Submit
C:\Program Files\Mozilla Firefox\plugin-container.exe
Filesize
392KB

MD5
aaf9e87f1ea23dc5c8db58012cf93856

SHA1
06b779414a7658a9f007673b552ee0862ab841fa

SHA256
85c47ceca4191cd074d57a15cda2d8a4045029b7f2afee9841f397ad645d0005

SHA512
a70890b71fe393120131641fa8dca306d1a16f0a5678bfad38f5a5f0cb550d95407e26933b3e89c5b19df196f8daf83e08e4518c0cecee031e74b322612c0b14

Download Submit
C:\Program Files\Mozilla Firefox\updater.exe
Filesize
465KB

MD5
fa7882f0b42fa301c0879ff1a01c6301

SHA1
0c11ab446d2251ab1a1959a8162cf7bf2223eb48

SHA256
c07bb6d4c030ce216e052ac62f0dce188151750f06e8a23ea3fec39d6374e17e

SHA512
016cd8d665db718d7ccf83453c43a6d64eecd0e51e39bf5aaeb9b490641e0710e6e0cdc45b4a1ef5d3045b58e190edfcb1fcd3b80ce9fb9afc8f8b5e2341cf4d

Download Submit
C:\Program Files\dotnet\dotnet.exe
Filesize
189KB

MD5
b3bd5c7608e8957d495691a7a761a6e2

SHA1
1815896835edf32d29f323384ce5d6d92cc319d9

SHA256
6fcd5a9fecdefb4c4f42e3c66d3f29448ab03e56ddbe0260fdbe3b644728d822

SHA512
43e0e2441f5302ae4acfb2359590b1d912c1f42ffdbbd8de2c378861e9f58315b6e94904e4e9884752d697b6d0dc9d7522e4a39e9aab95c9cd0b7d87786db098

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat
Filesize
40B

MD5
5b232f2ec5e33f7709f554291a0582c7

SHA1
8e09d16cdefd7434b6626535778c4d6aaa94502a

SHA256
539b48bb8997ee07f386d39e50b64b6a7f14ae24e0fd7c49a5d72e387860d5b5

SHA512
570f3bde7f527c8af2cefc04c0bb7d9024c2836b328a25dd50546cffc192d8256a276c6e8e07c0ca5afe06af86b819569f25ac6213e006588fc7edcc95e24d81

Download Submit
memory/1076-10-0x0000022FD58D0000-0x0000022FD58D4000-memory.dmp

Filesize
16KB

Download
memory/1076-7-0x0000022FD58C0000-0x0000022FD58C5000-memory.dmp

Filesize
20KB

Download
memory/1076-0-0x0000022FD58D0000-0x0000022FD58D4000-memory.dmp

Filesize
16KB

Download
memory/1076-5-0x0000022FD58C0000-0x0000022FD58C5000-memory.dmp

Filesize
20KB

Download
memory/1076-4-0x0000022FD58A0000-0x0000022FD58A7000-memory.dmp

Filesize
28KB

Download
memory/1076-3-0x0000022FD58C0000-0x0000022FD58C5000-memory.dmp

Filesize
20KB

Download
memory/4564-500-0x0000020CCDDD0000-0x0000020CCDDD5000-memory.dmp

Filesize
20KB

Download
memory/4564-496-0x0000020CCDDD0000-0x0000020CCDDD5000-memory.dmp

Filesize
20KB

Download
memory/4564-494-0x0000020CCDDE0000-0x0000020CCDDE4000-memory.dmp

Filesize
16KB

Download
memory/4564-488-0x0000020CCDDD0000-0x0000020CCDDD5000-memory.dmp

Filesize
20KB

Download