Malware Analysis Report

2024-09-23 07:02

Sample ID 240618-salbnaycne
Target 2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk
SHA256 d19db1ee5ff3725f2ffcdb21feabe980e68028030fc83a490e6cb7ec2527723b
Tags
azov persistence ransomware spyware stealer wiper
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

d19db1ee5ff3725f2ffcdb21feabe980e68028030fc83a490e6cb7ec2527723b

Threat Level: Known bad

The file 2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk was found to be: Known bad.

Malicious Activity Summary

azov persistence ransomware spyware stealer wiper

Azov

Renames multiple (8454) files with added filename extension

Drops startup file

Reads user/profile data of web browsers

Adds Run key to start application

Enumerates connected drives

Drops file in Program Files directory

Unsigned PE

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Reported

2024-06-18 14:55

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-18 14:55

Reported

2024-06-18 14:57

Platform

win10v2004-20240508-en

Max time kernel

147s

Max time network

150s

Command Line

"C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe"

Signatures

Azov

ransomware wiper azov

Renames multiple (8454) files with added filename extension

ransomware

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bandera = "C:\\ProgramData\\rdpclient.exe" C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File opened for modification C:\Program Files\VideoLAN\VLC\locale\uz\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-256_altform-colorize.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Locales\fr.pak C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\FrameworkList.xml C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\Fonts\private\PAPYRUS.TTF C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vreg\osmmui.msi.16.en-us.vreg.dat C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\VideoLAN\VLC\locale\ug\LC_MESSAGES\vlc.mo C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Resource\Font\MyriadPro-Bold.otf C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\QUAD\QUAD.ELM C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft.NET\ADOMD.NET\130\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\images\contrast-white\OneNotePageLargeTile.scale-100.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\Images\PlaceCard\contrast-white\Error.svg C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\zh-tw\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\security\blacklisted.certs C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Logos\Square44x44\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-white\SmallLogo.scale-200_contrast-white.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\ko-kr\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\pl-pl\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\eu-es\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\js\nls\en-il\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\Fonts\private\CENTURY.TTF C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\ReactAssets\assets\RNApp\app\uwp\images\skypex-icon-white.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\legal\jdk\relaxngcc.md C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.GetHelp_10.1706.13331.0_x64__8wekyb3d8bbwe\Microsoft.Support.SDK.winmd C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.2.2_2.2.27405.0_x64__8wekyb3d8bbwe\AppxSignature.p7x C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneVideo_2019.19071.19011.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Windows Media Player\en-US\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\eo.txt.azov C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\jre\lib\jvm.hprof.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\HomeBusinessR_Retail2-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\uk-ua\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\resources.pri C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Xbox.TCUI_1.23.28002.0_neutral_~_8wekyb3d8bbwe\AppxBlockMap.xml C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fi-fi\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files\Common Files\System\Ole DB\ja-JP\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\PROOF\MSSP7EN.dub C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Office.OneNote_16001.12026.20112.0_x64__8wekyb3d8bbwe\jsaddins\shared.js C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProjectStd2019VL_KMS_Client_AE-ul.xrm-ms C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\rsod\powerpointmui.msi.16.en-us.tree.dat C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\VisioStdR_OEM_Perp-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\it-IT\PackageManagementDscUtilities.strings.psd1 C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\pl-pl\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\7-Zip\Lang\el.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files\Common Files\System\ja-JP\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\MicrosoftSolitaireAppList.targetsize-96_altform-unplated_contrast-white_devicefamily-colorfulunplated.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\walk-through\js\nls\en-gb\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_neutral_split.scale-100_8wekyb3d8bbwe\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\AppxBlockMap.xml C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\EmptyShare.scale-200.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\app-center\js\nls\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\welcome.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\task-handler\js\nls\es-es\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\lib\deploy\messages_zh_CN.properties C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.HEIFImageExtension_1.0.22742.0_x64__8wekyb3d8bbwe\Assets\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\themes\dark\core_icons_fw.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_proxy\identity_helper.Sparse.Canary.msix C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\1033\ClientVolumeLicense_eula.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\pt-br\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files (x86)\Common Files\System\msadc\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxCalendarAppList.scale-125.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\Assets\VoiceRecorderAppList.contrast-black_targetsize-32_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\activity-badge\js\nls\sk-sk\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A
File created C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\oskmenu\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe

"C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe"

C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-18_cc2d371bd5e3370c50cbd2ffa703e6af_ryuk.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=124.0.6367.202 --initial-client-data=0x270,0x274,0x278,0x24c,0x27c,0x7ff7183a96b8,0x7ff7183a96c4,0x7ff7183a96d0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --force-first-run

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb6414ab58,0x7ffb6414ab68,0x7ffb6414ab78

Network

Country Destination Domain Proto
US 8.8.8.8:53 clients2.google.com udp

Files

memory/408-9-0x00000196246F0000-0x00000196246F4000-memory.dmp

memory/408-10-0x00000196246E0000-0x00000196246E5000-memory.dmp

memory/408-14-0x00000196246E0000-0x00000196246E5000-memory.dmp

memory/408-8-0x00000196246E0000-0x00000196246E5000-memory.dmp

memory/408-4-0x00000196246C0000-0x00000196246C7000-memory.dmp

memory/408-3-0x00000196246E0000-0x00000196246E5000-memory.dmp

C:\Program Files\7-Zip\Lang\RESTORE_FILES.txt

MD5 78ede93114e65f9160fd03d3357c56e6
SHA1 88d531b101e57655f1d0d26c6b3257aa2468d460
SHA256 c97412fbf88da8f91099a52888dea4c3f222cd95af3e681e3271cbca8b6b7bb5
SHA512 074a4c741273902ccacb6f573b96d8accedb2ee405dbd04350cdbf54d180c1fd577a4e90c2aae26bf72f3782403f4494db6e3501a04cfd9d7d81a6bc14884b9d

memory/408-0-0x00000196246F0000-0x00000196246F4000-memory.dmp

memory/4668-505-0x0000028E67680000-0x0000028E67685000-memory.dmp

memory/4668-512-0x0000028E67680000-0x0000028E67685000-memory.dmp

memory/4668-509-0x0000028E67690000-0x0000028E67694000-memory.dmp

memory/4668-508-0x0000028E67680000-0x0000028E67685000-memory.dmp

C:\Program Files\dotnet\dotnet.exe

MD5 380286d9396fbd859e2035ed5653d861
SHA1 0310a593d2505f861d240b2a34b9a593adbab6c1
SHA256 8018bc871fc204edaeb9e0fc0e3b569cc7081c77a7ff0e90a5db0855703d8f09
SHA512 5ce36e567165ac19291ee20eeb93b9183b7380440115bb86228058ce383a9cef06a25f39afbfe78b13aad27f76fea60cb30c35a8b26df212eff2e75e256591d4

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

MD5 bf43fc59e7cb432660096fa729428f83
SHA1 381c3c8062f09f23bbbb5a1e24961207a70f9ece
SHA256 22621844979dafcc621183eae69c36831cf2e924b3ad92108eb13de2df323860
SHA512 cc69c44cf3f2c2c93c8e9cae88c32060b4d78a8cfd8db87892504b399e8863de927c128ef17b0454dbb93f8319ccea1d2f6cf15b1cd0243e3a34bed9c47c5ec1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5 757f9692a70d6d6f226ba652bbcffe53
SHA1 771e76fc92d2bf676b3c8e3459ab1a2a1257ff5b
SHA256 d0c09cff1833071e93cda9a4b8141a154dba5964db2c6d773ea98625860d13ad
SHA512 79580dd7eb264967e0f97d0676ba2fcf0c99943681cad40e657e8e246df1b956f6daeb4585c5913ca3a93fdfd768933730a9a97a9018efa33c829ab1dea7a150

C:\Program Files\7-Zip\Lang\ku.txt.azov

MD5 c0c38a284946b9236ba07129915fa79b
SHA1 f023cbd9d80c4ada192e3cc35922b6aeccf271ef
SHA256 5151b03f6dd321ad85ca2bb733f765b0458bbe3946db89723b0e37cde8c4a973
SHA512 1f863160ac7d1e79efa15ea5f037a674e93a9483f1ad26d806ba68ec69c8fa645cd4f66baf6b202df5f558512e8b06f35de4aab94a0a20800d442e7a7762b593

C:\Program Files\7-Zip\Lang\ku-ckb.txt.azov

MD5 cfe19d4e0326fda409b82c330d7b2fb0
SHA1 9c9298ea378ec259ee7467b97e63e0a58c9b70de
SHA256 e7df72ab9e5c14428b815aefe3fe7fd10758140222f5db77851dd0df4d4c347e
SHA512 691e206b58d5f21695a2cca007b5239e3a12f9e122f4873d0b301af58e9cb23c3690e618f7153c6d6b3677fb927881c07335580ee44a2b8569b7266c908ab1a2

C:\Program Files\7-Zip\Lang\ko.txt.azov

MD5 1bf78f2b67fbba8335870695335a6879
SHA1 3d46089d07fbcb87f02dd1e807ec73452bba0a6d
SHA256 5a0008bada96749d78b7efdab39ba99fdcc38010aa2ea2e2751eeff694033fab
SHA512 8f1850cc116edc5317334b1a5d5b246315e6878b40377ed2184066190c400db564a1b311b8b423a62b3fe01ad9421fb059cff62e15f9759a7ff9058105d3b83d

C:\Program Files\7-Zip\Lang\kk.txt.azov

MD5 8af201c2599ded4279eaf97f12a4a880
SHA1 3741e65d74c3e29f2264af24d48555f56a09d047
SHA256 b8216b09ce4f4ca4fe3fcd51ac9bbd464ac4e2d09ad28b22e6902e98c5683465
SHA512 e553cffe3405c9d85cf168f707a152ad7a2bd3dd4c07fb68990b29c871afd40fbfe1db7a4256d5f08c0bc90007851d20394937d5155b87ca13603d0e7a9ab9f9

C:\Program Files\7-Zip\Lang\kab.txt.azov

MD5 ddeaf83144eef6460b15b84b59681971
SHA1 91efedad384190c90eab03c25b0e7163b26873b7
SHA256 989f37d2443f922add5a78b52db0961f4b0eec65b07cec244049955237eeb674
SHA512 f6ba1d469d38f3a76fdf81acbe22b8b1e1889168ecc866756a74eae83e3c676dd5ca7ea547ce98362912ccc358a1631e34671f767491b3a536552f3baa89f390

C:\Program Files\7-Zip\Lang\kaa.txt.azov

MD5 8ecc0334af7f5c66ea8551bef60bf7fc
SHA1 684ac3829120caa6b96c54ef2bd4dd36ed3ecbdc
SHA256 052ccfd322a84fc2e2381711f5b395635a56d819aadb72e43f5219ef06b324a5
SHA512 bfabef5ac8f84496de1c789a68112c947594d36719c6f2a18295fe24455ee1307c5f69910b9853df45ba68f259630f63bea2653b44147f1ffde4a784944b3a1d

C:\Program Files\7-Zip\Lang\ka.txt.azov

MD5 f39e0a984e6cf72afa4beb05c8128b64
SHA1 711a63973a0d5ef1817da0946dee4e99462985ec
SHA256 fc5f91c7f6a5a8485b2a2fdf760e2b2b95a74310087dde1710e069e21aae05ff
SHA512 03e6f4bd4d719d5faebae92fb0e635fe1b9b7456dde7a2854964bffb9bfd0178dd17b34ce8d7bb79a81dfb071e3d02a9328cd4cbd90b2d54fe19e90d21b5fe0e

C:\Program Files\7-Zip\Lang\ja.txt.azov

MD5 587262e2a040f7f667bd4adc9c5b93af
SHA1 9b845874e535bd492cb40f88eabb1cebfd8d5935
SHA256 dac923c66b9f3e42c290606d4d17bd058b5a2b3030202b0b655feea3966efb26
SHA512 616ba324f53774c32c8b3f7654ef39140e176ca0f739c66c2073b2329dffeb1ba568bfde86637113a94a064d88b940cdaa13eeefb2d0252b2c413e4a545c09a1

C:\Program Files\7-Zip\Lang\it.txt.azov

MD5 7076392134e5a56ed328b59526f0bb39
SHA1 d60afb5b00500c346b58631325dcc1521e7e93c0
SHA256 73ff20fa3d9e0b91706b3ce46c85fb9d64d451231dd141dc5665b25fe2feae8c
SHA512 2e69ce94e2a6da930c98c1098008457f76b6b7c2eedbe58f32d51df62111c40c850f1647295726ba97d63f8074762cebf0fe2cca2e63ad9b030690601ecf6f09

C:\Program Files\7-Zip\Lang\is.txt.azov

MD5 5165335868b678a9768e2d1fad22e7e5
SHA1 7dc02079812162befb78d3211671489999435ea5
SHA256 2117e6c199b6b06827c4c0b81ec566b54f65bdabb90406edc69ef7d6ba0f8f2a
SHA512 882fa92a13493d3c496d556d14a9ec57dd12e6eb20b6a11170f9550b96608cf313fe4786d1d40c0fbb47d4a5928ca99e7db6d3d9a0f6d7bd16b9425ac86c0cde

C:\Program Files\7-Zip\Lang\io.txt.azov

MD5 ac896f1dc6c19bedaa9a4b8eb7b342bc
SHA1 288c73dedda3b11068d50e958efdfa0f4be8cd91
SHA256 4f22785a08c4e731845be160b22cb99aceb5951e9d2897dcab34ccee2d0865b9
SHA512 ebae5381b93bd5bb3edd349680423f1ca612430c04e30bf24920aa75c30441154d21fb446618e20a961dcd389d310b9753f37073cfd2e7bd16cb5cab5853990e

C:\Program Files\7-Zip\Lang\id.txt.azov

MD5 bbfff3b3914af22a175351fef9eb6b16
SHA1 ad6fc48a71a2f5f0e162385639e7fce31f68f731
SHA256 c448c0a6880c371b2cb07f02eca53b32a5259a873180245df191f5f445f0d257
SHA512 b8feb58c825da2296cc42b86efa914ea58432182ef57d75f64bb5d8544317bb585e819a9256ed25f6b67cbe7dd6872df06365f82513859db8baad96b37bf492f

C:\Program Files\7-Zip\Lang\hy.txt.azov

MD5 5a5907eb5a473c753983aa8720552712
SHA1 6888c72fe75fbde08cfb8e845526d55a0ccfffd7
SHA256 432d8127fcb568460589913288a275fc14508a35c1b2e4b1232141727c5ba2c0
SHA512 0af7385684e777b338526f3fefdff67167b148f7fd3926b0a604af1df883deacd36f95fca04e0a127a5dd1aa9b42276f6097f0fbe8aab216da367de1de92f51e

C:\Program Files\7-Zip\Lang\hu.txt.azov

MD5 ee5cb7765449ecf5522181f3ccd7dd71
SHA1 652eee4efd77fb9746edcb0f23d1ca9a56f13217
SHA256 319dbd84ba4094606de3bd141404a39c6a085c98ec08e96359b239205382d5cb
SHA512 6e4971be31e81e540aa5d58cee830b37703e78b50bea0690045e332f5da667121a8d2012d035af8048581a806f9675fef6bedcc9262ccc1e1bf6923522693509

C:\Program Files\7-Zip\Lang\hr.txt.azov

MD5 436b6da754ceef50a1ad6a3334abe960
SHA1 b4d5433126218abe2e52a0d3a5001fe4f75e0358
SHA256 99aaf0e2c28e1f213007dfe13a227535d9b1ab744c24bae803a909361eff1ecf
SHA512 c121843b124d879a33f4acf5400c99ba7a909ee7369441519c26133ff1013b4797d21589c0bc9674cd20f4b1054956401f12aba39c61de6f81c18adb3cb8959c

C:\Program Files\7-Zip\Lang\hi.txt.azov

MD5 0e6bcd83c30e0430e6220733f0aa3744
SHA1 f20edf6744bd573145b63ca180fad98f4915169e
SHA256 52a357c4ac6b1914f8fbd793cfad87db403f33010266c0304ea1ac07012235b2
SHA512 b35639fb0ee887989fc29c2ef5ccd5cde92828bdd7ce7df017d8334e7b376b32517a7c96283555c27b8c37b1fcc94b6198813da65072f6736be207a24cb85b7a

C:\Program Files\7-Zip\Lang\he.txt.azov

MD5 97fb88c99c19f9113b9a085a060526c7
SHA1 4c37629b249454b37ef08da99479576642c1665a
SHA256 0e21f18b7a6390fceb5c97af587d0e097ce1249d277fff0b7538fd2c8ed19c65
SHA512 de088f4ebfa8f22e816b69c30f8df1c34d3c235506cabce3590d33ae6e5940b4df78d4ee59ba3d2754795e09d972ac0a7c26bcd6b804cdb743ef566481beb554

C:\Program Files\7-Zip\Lang\gu.txt.azov

MD5 6b59852bf28ac2e32b75640fcff25112
SHA1 920a3a97d3881e5c53b35c2618601f6cba771d74
SHA256 05d85025f3ea550478b05c93acb91ab71d9070d0337b34c612f29228bd593a21
SHA512 d837928df69b5510031df218782860e853ffc143df308575d48aa44f767a127935746ff3896616d61ba0ebaa310bb08ad8cd797ce3fb2aec16f27dcae4ad60c3

C:\Program Files\7-Zip\Lang\gl.txt.azov

MD5 9348bb8816667d375924e788f762e195
SHA1 28e0ad6b24e7296e6cd1af9ef834b763584dab5a
SHA256 923ba31dfaff7519e54d22da4dd3998fda8ec8c63ad622c1ce29cc8b36548be0
SHA512 89d3322fbe74307013d7e83c6fe748881a610e9828139238295a22a53fd59bd0f98800b5f4b7c6c69e426f7ff93807da96aa2070dd91351523b2dd1c8d0682b5

C:\Program Files\7-Zip\Lang\ga.txt.azov

MD5 6cc1ca0c4bdf2868671d6a1ff0e3d7eb
SHA1 37fbd8968d56b656a16c1efffe3b095a60a38cf1
SHA256 39c88cfb4c991802f55c6ae25a6b50730b47665910244d98ac2d4b04fbe220db
SHA512 1d04399e8fad904d1e685304298b2c43f3b621c9e9d8c5134c9b7a18f4a983bb312ddafdbd7b333c24170c53ca1b40634a61929011637fad814f6635fb7d7828

C:\Program Files\7-Zip\Lang\fy.txt.azov

MD5 5cbec2eb845e47eaa5450f4341e42c95
SHA1 5f6aabff6416c0e63c01b3d82f387daec73016d6
SHA256 8213ccd0804f23e3f196f649ef7b7fe30f1d334a4fb9fb79d2bd0f64bec3acc4
SHA512 e8dbc1c18d8acb11418b19308815e799ea65ec6f48f499e8b651bb96b759584e07b338ddeb6af069758faf5f4023e423599b96e0d362dcd3f3b564d4310bfce9

C:\Program Files\7-Zip\Lang\fur.txt.azov

MD5 cc9aeb1b619c2c4cac8eef39a03383b8
SHA1 8bb22598f5b6f7a86ba09849839208b7436c46ac
SHA256 11f480e0130387e65945640f9361d9d80120244e76b403630676e4cbf3475022
SHA512 cbce93cc3d14b797e6835d15f5f75b2ac6a65dfd60ae24d8860a2ee9bf1fef9ec729d184368b140fdfe0d9f4c08fba81f13b0d04bd9493ff1e150b8a667f1abe

C:\Program Files\7-Zip\Lang\fr.txt.azov

MD5 dea52e573e3f810a0911dbfbbc5bec86
SHA1 6e35f9a19812b88dcf72d1152819f8c9a64e83df
SHA256 77bd6b074a27d2e364aeb3b66e753ac03920b28b87e2fd619a6b6d6e32db2ddf
SHA512 0623681f7883ff3e68aaa68775287bf258bea616153ae91304ad6730f2d67c59b091dd2eecc01dd296fd0d7848a2ef14df4ec274999d7d61824740bbb91c944a

C:\Program Files\7-Zip\Lang\fi.txt.azov

MD5 fb8156cc50bb8a00ea2c82e7cbc37ede
SHA1 d9a52426195bc8cab8420cd26581bc0105d1c34f
SHA256 332a61ab497b38de853cd694b5478d18c0428ba37699b61962ca0087d4f6339d
SHA512 5a4f4d1a7e5fd5985c86a93227a3c11423e5ed7329db590fc6be3f1f3cac71b003ed00d3878c69c2207e76ca5904bb4497ddcb47092ecc5036a7fe293624cb6c

C:\Program Files\7-Zip\Lang\fa.txt.azov

MD5 9a1633d3c8b1e5fbc4752ff33a411f74
SHA1 1c5f7e4bab9b2f663eb0474a8a154be00af0aaa0
SHA256 fd794acfff5a0ffd260685bfed1dc3078822557fd0e7fb2b366d2b6ac8e6d046
SHA512 d2afc0c43f79d376b2171918c8564f7e1162d220ab239b7204a02edde59a7dd8e03fea627b06a4d8294f56f937eb6d942d193f41ec0892491ee7644d15f680af

C:\Program Files\7-Zip\Lang\ext.txt.azov

MD5 29c59b10ab682046e9c762a6915e9c16
SHA1 d3951e27f21d1cd82a56f84dc3666febbd8f9b1e
SHA256 76ba95ac7cd108dda3dedfde862ffdb10689c68821b4a2e4ffe072dbd1720eab
SHA512 9814125b8619e57e25561b9f76e6346d927b5aed0f1d73271307cc0d2296c40cc58432d200ec437c15f60fcfcba36fcc101392072a7eadf4ffa7cbf54314cb03

C:\Program Files\7-Zip\Lang\eu.txt.azov

MD5 4eeae1d121a1d0bdd70ecf0cf10f9382
SHA1 3520e1fb4c634df050b0657405fbad4dad3fb33a
SHA256 619342384a0caeb085001fc0fde8c654f7a58d08972e99f98b7a11254f5f60d8
SHA512 53dc7391c8d7114e56a8d5b180ac55cc8c387beccdd3e0a5b3cd86d69d14b37a2db57ddd6a2a6d18e9e8810fc403ac20ae327b218113e9b5a855b78fc3895ffb

C:\Program Files\7-Zip\Lang\et.txt.azov

MD5 1923b569c8325366c76da1d3345cfeb3
SHA1 1e7c89985d77b42841697737b3ee540e4dde44cb
SHA256 0aba04cb624665201e5a0709c7c08be600dcbfbabb3ec3b55441e041879d39f4
SHA512 788f33ca9e1418ad8abdef0fb81d93d89ab606d2a8d2dd5d4ea49728e7ca2987e33224730586e34b6485faf9d6325e7b06ea1c6cfb4c9c85883724ff58ea3ff8

C:\Program Files\7-Zip\Lang\es.txt.azov

MD5 163e46bd7812aa1954242dddd2dc68c2
SHA1 579bd4544e6bf212070350969b08f07eacf61fc2
SHA256 72ddce90429618f74a44640c179301846e134844d457b6ef18cf21accb8f43fa
SHA512 2b53b22497ec27218064dbc5205b4d71a66765cce1c7d0b1a9a228741fde2e1bd0c06d67612ed238168507de31e631094ecf23ad33d11d30488e3d57b0fc9fb8

C:\Program Files\7-Zip\Lang\eo.txt.azov

MD5 4a71bbe0f354dbfaa87d3a9bf270a55e
SHA1 134e02adba7e2fa245293233dfb3d448a244ad77
SHA256 ccd4f0d418e88a7d4ecebf6091e3a014f80386e081c1f3f0c006e38b3156e51c
SHA512 8ab5396e91a4a8fc85d5e9cb1a4105acee86dc874f783afb5e55b5c56e7bb86055a24701cfab0886c5d8ba341be0dd31a109965395959dabe5488d1756b4f38e

C:\Program Files\7-Zip\Lang\en.ttt.azov

MD5 0dba43955ccf221718588f5247045f95
SHA1 cbe74301cda92cf4c65880a1feced5b9fcaf51a0
SHA256 02233e98df5834918983c9f9cea2ce3f485f2f12bceb10a79d7e367857720ee2
SHA512 b5c96519a8fcf5d9c28ccd7f9c14da573ac0795183313319c60368e0892b8dd3fa9401c25d2a05ec853e4d1b468f3b6a301146e9d12b90285d3e66af81c9c31e

C:\Program Files\7-Zip\Lang\el.txt.azov

MD5 cca0ec3a8ce30e387f20c320537d235a
SHA1 83fa11d0d1d05c01233fe5608f028bad939c8794
SHA256 2a8f1cebc3c450a6f373a29881c736cf22c5ba77cf383d4e34cb5a51a5798cc3
SHA512 8ac4bee43b5dde3786a0875abff8476fa89deda563954cd3341d6617ac4e03a4e692a7ef5d285dbd68ff4e477ed5bc658906a77a14fba9ead86ee9ac370dede6

C:\Program Files\7-Zip\Lang\de.txt.azov

MD5 27c5e08bae7d30969171a99ca4e2de1e
SHA1 d5ab9948ceb70b9a0e7e835b4e8777ff5aa168b2
SHA256 9b23162990a1c698137bc2716ba153ec6eb5730c88546a7826c5f9803eb6ca0b
SHA512 e78023cf9f904aa8151a93151818f050903e111f14886b91c18b28b4ed8a6d8771d55d0d4ffe6b2c5ef0b9b56300b3a53f90f573e3366df87a7eea7352bc152e

C:\Program Files\7-Zip\Lang\da.txt.azov

MD5 6c94bf361dbaaf235a1831ba33c033b7
SHA1 4423100c43ee4a83f2b7694264ec87287d89fac3
SHA256 797af5cdc92cc1fedaf7bf3da3c216c28d47d4b648a19941aa64727f188b5f3c
SHA512 eb17936d3410572b7ff7f1b7f108a81a4a446c0f450972b7aad73fe023596872933db71fb8fe8bbc41354d290753160334f99ad7bea1fb36db03ec69686be8c8

C:\Program Files\7-Zip\Lang\cy.txt.azov

MD5 3029756ddf3013732b2b686cb8c7ee41
SHA1 8b367a37a6a437fddc99df4184552cfbff0afabb
SHA256 cad626f196a2f275e060e29d5fab19111c20fda40706aadbc37a7301bd0e9763
SHA512 f8c533f2940c3e3f6ce3f546795eacdafa4c5f5a8d8d2eede2ff25f5f73872068e89fa9bf25904efdf630dc3b22e3171fdbe0f872f5e3dec405913f7cee679b1

C:\Program Files\7-Zip\Lang\cs.txt.azov

MD5 58fd2e2bc9628979c699ccaf74eafc74
SHA1 018f69d1f7c8e4990058016cb3cfb9aeb78b0a2e
SHA256 3c5bd46035bb1f990c32cfbafbc2790afad97b644f169ba8a6ca7238223fc46c
SHA512 ffdfe3f5d752bd8b8c3532ff94ef4cae6584a682654ccb0c3a0c3035265fc5f1616d57099c158b6193ba70ad445a9c94ac1b794c1b24bf6acc880000fb8df9f6

C:\Program Files\7-Zip\Lang\co.txt.azov

MD5 27946cb5fd13505a161f0d9bbb91fd22
SHA1 a8e98ba9ec8d33f4dcbd81d7eff1b2bcc7c01ba7
SHA256 f91b053aa740a4b7744995463c1595bc217b3fb3a474f2965fc119da0da7f9ae
SHA512 4ab291166493329d61a89749270e059fcfb2f04c1ae78b7bdd3d37001617a4dbe03f1da99a5f1ad2168146d26f4db3a168f08480f74efc9ac903239fb8739c8f

C:\Program Files\7-Zip\Lang\ca.txt.azov

MD5 eb6cc04e46496583761539be2f6e60a9
SHA1 2d04dde6a6c32ef28394e8e8de9cd6474cc2c310
SHA256 f7e463792fe46d3909a543704e81802a76ca85b1fabc160c81e2a9556ca269f6
SHA512 ea7a83d2e5ae058c338325dd76763865f4d9c568486b9f8257879cb5141bb50ce62dc8236c082aea466dfc85a175f8ea14868d38e9113db133a766ae36f35079

C:\Program Files\7-Zip\Lang\br.txt.azov

MD5 ff324e7826845c18860c2f1e90c98969
SHA1 3bc180149a94070388219845341a299fb7488d21
SHA256 b627b59b8a1f31dd4f616e8e858b2141e2bd473f5d6e7ae3c59cc4d6b3cfbb25
SHA512 8d80212e5b12a2f1f9c251ebb761746e929a6cdf31664bb80637109d9355b8d26f1f011a5eb4683b9b4d3bbf9c9205e564117ee28a3c4b63764b94f1f4f2b781

C:\Program Files\7-Zip\Lang\bn.txt.azov

MD5 b84e098d686b8f1d111c2da85a6bc14d
SHA1 595cf52554977f4389b84945a7b0fc77d1e64af2
SHA256 f4c6e48530ad01e13f81f5c64cde6cb03c1cb903c5f2bf72f3dec98845e8ae57
SHA512 77f63591e21fd7367692b6942626eb6a6eaf2bbdfe43b9c4279f6e60e1f4804976665879beb62708422ec2996078f1ff4f08e2065f7057e47f3f1389eae8cc73

C:\Program Files\7-Zip\Lang\bg.txt.azov

MD5 dad913fb8e39b84b373674463128d6dc
SHA1 ccee7fde94f308339b768b33e18f20b506060860
SHA256 99fb37d0162bfc7a4672cf5d19986a65ef6275a027b208ca592a43c182d30494
SHA512 ea5487983efa4903160792493ddd49314c75cc741226c7f962c150e1b152796c6c4232bdd7f716583e7a5e745bf13f460e04e54f03b988de82ee2e1a7fcb7639

C:\Program Files\7-Zip\Lang\be.txt.azov

MD5 a53ddce02c69c2400ec3ee3ea4d8a873
SHA1 87465da01b4156210023c33214289c7749280c60
SHA256 1871b383f21859127e780f8b65d7dda9bd3af6e83fa1c46c8ed0cde78318646d
SHA512 ef2cbce6d9ca21e05377ea01446e9395b94c4d2d00bf50f01d8df11e1439cda5dc7549ff0778a557a9bb40b8db967eb161f8331dd711e7206484475c79196393

C:\Program Files\7-Zip\Lang\ba.txt.azov

MD5 7350925fa961fc679a1e364838e8f376
SHA1 06278c554824909cf36dea8daaf9206f61edc37c
SHA256 4e3768e075c0f185bfde6e5b9ee236667d90251389aa12524aa817112eadd25d
SHA512 111659c13fcdcf869a92bb3693f66be631802f49db5a56bb47423406ee4489acfcf90a8a15e165e376f410b44bb5910260ad7fe6fb1a8df653a4b7ec583b241d

C:\Program Files\7-Zip\Lang\az.txt.azov

MD5 2877c1c539d8c8f616df35de3ab044f3
SHA1 1ab87a297fe9190fa2e37a54e8105fbd3abe0597
SHA256 fcf5702f611aa562c4a1966fd1e544176bfaa0cf80a67b2ce447180794b20f32
SHA512 5b2dd9e977a7d7c5048aef1db3452903ad732b4c34a9e4cb3ff4dd4ddd62685cc414fda364b64943550522fbc249b5b41e202fd08c13845f25281bb57b847780

C:\Program Files\7-Zip\Lang\ast.txt.azov

MD5 110a22eae746d18b0e47f8b5c79e8640
SHA1 e0d1187d0c800fe6024e44ab0d95c843d76b917e
SHA256 fc2dfb3b006b7b02cc2f6ce619c5a3b8281c1b5bd1c98e3f8e1a776b61afac8a
SHA512 9b203f2746034753238bc8dd8e08922517a882ac84ffea7c753f767715d3221d0bde483c29a2c0185e062f6f0c01fda0ea0b211d8b35e4ac79b47b39a2a90e17

C:\Program Files\7-Zip\Lang\ar.txt.azov

MD5 b2d445fc944d81b750b1de915ccd043a
SHA1 6c6a237899db43f45a3afaf5f2d3dc1b4467ebd5
SHA256 7c8a343fd710a8ac5d57c272d6c73fc909c3643011396a3d95fdc46870e710d1
SHA512 710c163053d5d1bc7e2bc237b35877221d6aae28e9abc4d800d6d1c7d1394d80e06a5330d9f5e15bc80a25369d1dbbdcc763ef7304f67cafac54b18a1347728a

C:\Program Files\7-Zip\Lang\an.txt.azov

MD5 318a21c402c052bcce0000baae3d7cf1
SHA1 d4e44f481867e97511cdd30497430809c2d68cf4
SHA256 3e6910f1308e97c5aeaaf34e731caea2f12e5eae9ec3ea6315996e354d3dbe26
SHA512 aad7849c097c911361252f1f4c2820f3afa52e43a89fbc972269fe7c1002f994aae9727fb0345bb5314c441239e694d3686b2edf746601e6998558b5c79f6824

C:\Program Files\7-Zip\Lang\af.txt.azov

MD5 b6a7cc976542e801e21ff725953b98b4
SHA1 1d8ec081087be6a0d4cbea6181ecf8126b09e0f0
SHA256 aa9f655cb46c5d5cd165bc64093b8ab2f0904e9574f311627c7933fdfd36cdbc
SHA512 04857970279f89d35c398038448655ba87dd49166425bc6fd36d4fdff4fb4ec7b32ef1919e22313b394a2c50ea91f567bcc25acfe6ef11b4044c339cf0aefcf2

C:\Program Files\7-Zip\History.txt.azov

MD5 0c2f003b4a55ee8a882347ea1817fd7d
SHA1 9e6d8db6aeca9492d89cd54a79655e222965c20e
SHA256 2cec075417ec27ebfddaa2a8befbe897ed39a95692606425b3f1b4bc9a9fa236
SHA512 dbd53ebe67a8967b5e7e1c3b327f3546f6c07906720cbd572ddcd320187568ad29f0ff32a3f9570a3ca19d0908fcd15079476bb8e3142d27dd3733e74752b950

C:\Program Files\7-Zip\descript.ion.azov

MD5 302c0b634587188d41196d65927caa48
SHA1 add7070128bbc9d73188953b9ec41c193fd3d5c2
SHA256 e2a57561d848e0fc1c7b0dae1d1ed639931b714ff8158585ef074b212caaaa9e
SHA512 03d68e3184c53369823f711628fadb38ee0d46a22f5b335a9409794faba43b4fc7fb2935e06df54b3ef9388349b6d426f3f0aae5a0106dac726e9e38962941fd

C:\Program Files\7-Zip\7zCon.sfx.azov

MD5 48208d141b1739b473c98332a3b07050
SHA1 5f15eac0813550feef53a1e635aa89ddf8d18bd9
SHA256 07509719f669718d76a99998b39ceb6b294c73e760e94956161e5bc47586dac0
SHA512 c78b67fa6757f12645ac03e7fafb51e1df19ba531396ec9dbbb0d7cbaef4f6017204c96a9db25730e837c50e89fbff675c319a89cf8b62f05baa49893e58247b

C:\Program Files\7-Zip\7z.sfx.azov

MD5 d2a6aa68fe845fd1ce6881a2e2f6b763
SHA1 f997f24f0911a92a4a061af94a41e22c610854d1
SHA256 f72d6926bd78f05e3d611b37aac1613b35da8eea2f05460876ee832a27d04c5f
SHA512 cdd5cecd5ca1050c03b4eb693bf2ed4d870411f7e9f80233f47463067e00ac2b540fd1a86cee59f34afb1dfbb4df5d6857a91ef003098ca364922603e1f17740

C:\Program Files\7-Zip\7-zip.chm.azov

MD5 bd032a8ea522a7b6a0ec56f718d7499a
SHA1 09e6c7900ebdcf3b51b89bf06c95e74d166cbfcf
SHA256 8d5e56b821ebc6bdb114920c69de519f52f58a16a7e40e5cadcb52c4f54e6d74
SHA512 725b50881071fdab943f67e1b1e1d7fe3c1c11151bbb98346915f00b8805fbcb7ff7f0ea74f883b0ce28a88381bfed6c0cb8c912affb05ad12a6b10a68f490bb

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

MD5 e273355e7d778018ff1964525b962173
SHA1 3060aeea40b7f544f1a2e79a7b9fa4190c0fe8b3
SHA256 944a6fb3ef0648bdddfbaa8f1969f1deae9c03b2e6a57151f3d96ef0efc0d2cf
SHA512 b0a5c945a05dc2309d2fa5600b123992644d9e9a9f06a529d7213aa6a44970abdb257c7770e77bf6f22ee6aa55f23da80cb85b3cc8c9caddd717e00cd21d5ff8

C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

MD5 fb5bd41d02ba5e298e550080b34c68fa
SHA1 b5797e2a9ff6b0da5d85800124bc8663bc455b7b
SHA256 674612a987f2eab7c2c927ca9e3fdd71fa1626ccc26a3fe6908dfe2073dfa8e1
SHA512 efb076e7a51d7e3bd3cd7136aeec5fe1a36b13bc4af850231a1402e503e0aa1cadadce972738e64d51d0a67acb35cadf634330ec5f006af89b5a29dd13e78e4e

C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

MD5 b2c9837161c01ef26eaf4662fd3d3cf1
SHA1 e382bc3dcef13bcca4103e3547b7acd4c27b4715
SHA256 1907b661f8c970ce788dcafb5153362ffa68f0357208f5c28148f82ab3cda6ec
SHA512 93f15d02d9203b1bf3630fbc87de556f7a3bb69ddd3f5ccecfd874bb1cdd5b9f8c3c89ecbbae75299d1b79869dbd113a8343bc28481b6bf8ba5ee9438e36b241

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

MD5 629c65a367f467c3d1bed7306d3cf9f8
SHA1 b24e15eb7f9078f9aca2b5f4e25bba0d3cff9d93
SHA256 d47353bf917f81135af25451b0fa25d862c228fc1ad702b84305c8bba7a9e889
SHA512 47459327d20cd735c08d660513da044cafb136daa46bebefd31cf562dd0b80b5a3a5b7de0107b5e910e56b6e17439d5fe275745aa6d4b0f87e36fd5ab3cb425f

C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

MD5 4a2d0107704a10b9aa5f5f3b0774ddef
SHA1 547a9b3aee693ea4d45a42069ece21a1194758f2
SHA256 632c121494c8dc394d49eb3c2613ecd3d916b1568036cbb14d1c59dee6057347
SHA512 cc8c940364a4f9fe1a4db95c24b21eedd045b83ab8be78001a9fa5b693879c3f882c5a8d90186c3b6b68c6058549770ee2c6336933df2c564b106b3697050629

C:\Program Files\7-Zip\7zG.exe

MD5 9628a9b8aee7c38614f5133cbdd32b94
SHA1 8f16c696c56eb904fc6dfa09eee326c4a98fb970
SHA256 fb39d3aa13d8a5926cdd009a894d6a5508b6f2db6f4599c41f63234042ed7e35
SHA512 b9d70f273ae6475934312ea44dabbaf2d088552aa50fee4c380d6d9d1509d11a17bdf615fa17e4900e0a1e31ddfec13baf3d6d0caa80bcd6f2ed9989d8e3608a

C:\Program Files\7-Zip\7zFM.exe

MD5 5fba7bf8e0a7c0793699edb5ae11bac2
SHA1 d26114914d6a4426332e1c62c1b014614a04d841
SHA256 e0ca8694c8768b88b9f823406db98aa10a58f0094a0c8c14930e9ce79bd373f1
SHA512 8742aab56d71529570a7f83e9ca1210dbd66dc7db24af4a046ceb61252984754ce93b8fbbbf06824238f653d55429b513c3bd68b020bda34e2bf2675d74cd546

C:\Program Files\7-Zip\7z.exe

MD5 fd6b11719c602ffa1ea6a6d7180f8d05
SHA1 d1a21f864d7c3927f81ed6c22376935c758c855b
SHA256 ad2dc79c908069a7db51547799371f54f6b420aedb22ed865e1287d50663bf67
SHA512 4467f9c0de04581a2080dec56f2ef0ce78ac9e032d5d3f76d8e9718ab5528f3452efd634dfc4da1ac87bc3cabc3f00f85deb8e6ec5f502f77775d8ba461a95fd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\42a8b522-13d9-420e-8296-20b27ce99253.dmp

MD5 375fc5de20a037ca2c5ec4e10446435b
SHA1 8caacd5aeeb0f98fcad0d2127ccf3e2b774f48f9
SHA256 b4efdc198677637bda2897ce93666e66cfa010373f3e982f571004e604a4cfa6
SHA512 12cb6ba982b10d541fb579d6bb07f256069d8532189ca499b1455c06391a05972fd9b120be056a1970f2b8f8e09ccf185987dd2624533dd1cd3d539b749286bd

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\JOURNAL\JOURNAL.INF

MD5 b7f3629a37165c72895e998783f77ec0
SHA1 9dcf4fca38e5590a4ea41ec60a4d748ceaee3762
SHA256 39a45032317ce9dd9889113ff5859e09e39d2ef55252091175ee607e0ac96cbe
SHA512 a31f14ff0c5308e87ec490525dc4945a9c41a31210e5d5a1a71c30b49480aa5ff938909b4b5dbc77fd9bf22c931f44819df1585c26d0fba92252ef469ee1a36f

C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_104468\java.exe

MD5 06875f05f6c139f337677b2a10fb6cfe
SHA1 e318fe5ade998f40355cb0096a6e64f555c3bf4c
SHA256 36aaa3dbfbfc5237d8b6512f5d55925ba241a19f830b31599724e0fed72ee51d
SHA512 bf058513934a707fc5967eab3cac86cd4a2617cb4d9b337584eff3f42fa1f6eded5c7ad4bd9429d92ebc3187ff1ec4a2c3681613f51a2a07b5d5a896e094d5fe

C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_104468\javaws.exe

MD5 ca23e6bb9f8db255cffbacc50e80b5f0
SHA1 c8b4fb565a2eb99024651e1124e3a49ca3768109
SHA256 ecc2c6ffcede3300c85e72a129b88cfab5be95753ab2e6f240f1c32204f220c3
SHA512 899da61a0300a36920d31c48a7e88c26963e58b66863e630b69bf9041f42c6d945e017e9ab18460b7dfd36289abeca883914d5095f7fac9d4b1a80da1189a1d9

C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_104468\javaw.exe

MD5 80b0b1ef8f7142cfe08eea3273458197
SHA1 8116a103728520b208ed77a9f09bbea2e20dc92c
SHA256 582131ad8bf55ca9ef0c5e93b9686911a2c47b8f97b39c8c6757be1804c70b27
SHA512 8ddc5c14484e50e2ba0fedc58e9b5dda95667f238d7775195cdfe36fa5f8a0eb0e49e81d47b3e03a2de6ef2272301a47a8060a41f5a749f795a0169291c3a364

C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\ohub32.exe

MD5 8f50b0cc07691dc9cb02996b3d1f73d0
SHA1 e0ff42b47535ed0009ae2311593c17a96e129665
SHA256 ebdd1259a1bfbe1796cdeecc31f9952a892abe767dce29fa2ec6d318b90f00a0
SHA512 b3657a6aad9ce14ba0559c58f17ae063a42e54277c3cfe2bee57bbbc3d1c8b9f40213f8b799c37a0eb59759f1332e30917d6d5559351b1ce43f8c8f9be3fd0cf

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe

MD5 d12f6c8c81930ba701d306d8184d57e7
SHA1 84ea30665161cc47c9f30f8072151968616473bf
SHA256 3599341d8527f194023b6ba18a263032c38e4d61d339c9770a7dc34356b70678
SHA512 8911238e76257b0ff16323be72cf8215f9a9074bdb94686bcba61322be0c6557474eb1d007f575698bd997ad970b35c89e5e21b04e0a8313e3b890c892a1d2cb

C:\Program Files\Mozilla Firefox\plugin-container.exe

MD5 eab3ab4965e19d65b07db46bfe1e3341
SHA1 14d8530f33f70ce735c7933bc6aafe21997e2724
SHA256 6d09644dcd8a61e89248e3e0b9818e5885efbb8313437055a5cb2490b57e421c
SHA512 5e54ff922fdbd98d277cd8fc78b9fd4c26151b878f03efa586d0db49387b98b3e7a6003417987a22cc903b781bf2cfb2ba5ff7ba6f1182387e2d7f13ee900170

C:\Program Files\Mozilla Firefox\pingsender.exe

MD5 97db2b1eca23f22f5627216cb0f256a4
SHA1 baf379f0edde36e9d5365b7c7088c0f2943b567f
SHA256 16725a1464998eb231841499db51e5dc1d091af071d7605d2ab837528b30949c
SHA512 584410017df948abb02b9a445467246ff4f2694770006fec976d9cf4cc9020de43aada18b3d0ca3a1804e967f5b23a8c35ccfbbae2c7b877c3bd3a3b65d9107e

C:\Program Files\Mozilla Firefox\minidump-analyzer.exe

MD5 cae346d1e7b3017372d21546e94e6ca9
SHA1 69171769db662fc9cd224b22438484dc4df9c683
SHA256 ecbca60ed17ae06869495239833fb94b37e3aadb0bd35d70052ed9bc935eddaa
SHA512 272149e16e6e960fd94ac963971e9bd80112b81b89311e8e9c28298928626752ca645052f167581f34c81c19b3e4b170e48672b1fe27a3bf8ccefb1f36f5e50e

C:\Program Files\Mozilla Firefox\maintenanceservice.exe

MD5 a52684f4eaa9dbd47f140469d8fc9b7c
SHA1 fd77150ec5a872e187d123931edd4ec9ade460c6
SHA256 e78453fd076787b23ea47a6f14ac5bbe3bd54e8de23df8e0da0d9dc8d6fe7f9b
SHA512 b198ed246cef535647e83b8afaca6c4a10652e6f62f10332b8fdc8725a9834978846d9f30bb5b07b266e4254f603eea3fc05a9dc9dca46af1b82a6cf24f0986d

C:\Program Files\Mozilla Firefox\firefox.exe

MD5 5432e46668d140e59a3069e30a0c4c85
SHA1 e22c95a5c75f4401aa9ea8c8590d08930f972aa1
SHA256 e260a40a93b1958e5ca562a3c6649f098bf22a2ed9e86d487c4a6c9d3fc51a07
SHA512 a76b84e8bf672d8dee2cf82e9e597e594237118754a01eca64ff0def1a17973d3226f2a0fe1fb4aec73fbe3cd7dcf235904681900a5f7f88a36f34f6494132c7

C:\Program Files\Mozilla Firefox\default-browser-agent.exe

MD5 7708f4d5284ddbdd48be1936bf6a3b9b
SHA1 4e64d99eefe9f58c31828a8190dc27624ff74e79
SHA256 c89953f47c5f08fbb0bbe3d954028336d6ac1de3c7e83796716aac7f3f0edf89
SHA512 67110933a64cb095ca161f6f4e581b4b47b1db0127fe8dfde0dd31b7f1b7e92278530367b8e03ec23ba8d109f48aad281da4bb7c72263bd7924fb329e0c89016

C:\Program Files\Mozilla Firefox\crashreporter.exe

MD5 899bfdfe55184a55d2673f6366c1ab2f
SHA1 1d0438addd52f98e372cbe4f0dd7e7ad6369e821
SHA256 90e2b04885d50816166264d8875c449e20f97aa87f8885500b7095ab06abf1e2
SHA512 6d48f011788ac73c3fb5d17ed44177e161bb508c607976e476936698ca92632172ea000e0fd3fd5c4a7a91dfa04b31547347a35a9cfd50be668c7b2f0d5bfc09

C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe

MD5 59208308cab273e8251e522039d00e45
SHA1 872d6ffe904f0207b92710b95233ffed38618148
SHA256 1f7dd74b8022a44dcbed3440870aa72fd664f33ba6ff1723e0d584fab0d1e697
SHA512 4082ffdae72e1b499cc7aafbb851f5af9ae802e5346d35b655bde7f60db665679f4a24ab108ec29f5b039b900d9d8864b2d1af81e74d2238078af939f43b63aa

C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe

MD5 5c8a3bc9d6ac9ba27aa3f5f0e1b22448
SHA1 e8961ed07740c877a8be263033c1b938bcd5e1d9
SHA256 a8e7b7eaf06157618f5885074d47aef5fe87bbd728ac332569b9643bff4047a6
SHA512 c3288afab6a66e57ad160565f04ece68e925e2300c7a1936c6cd2f6c753c483a25e4f69d2a3c0b3e6899f6491c1fea016151161fe54c882a64a5496c94b9c75b

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe

MD5 07d909a30bf39e5568ab6eca30270d0f
SHA1 3005793e57f50e0c3e0a4a009f4675c6320ef8bf
SHA256 f6639e2de2ab7318842128f4bbe1ead9a8b1d376fd9ca86926f8c70c354ee95e
SHA512 49bd5223d280cfcd5a996ac43bc013cc3152a08ce0d18c71028d1a18a8558aab643a97535384d8af72f2e0267b1b5067b67ac6033950630e7341876b7615fdbe

C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe

MD5 2883d1b8f0de11022f86fa6fb8e352e4
SHA1 7ae3af4ec1bcc3ff791680a3027c7896b4421c29
SHA256 501d831be637e89c07e9dcbd5236edeab048566786b756f65565f4c24e48fa24
SHA512 a8f41bf184b874ecb6a6af7bfb46aa8cd6df46643b569861bec6a747cb3f294e5b449aec4fc555bc3bdfc5073603fb536e290b96df6d9f43a76bafc8ff5068a4

C:\Program Files\Microsoft Office\root\Office16\protocolhandler.exe

MD5 1436e06d3c8167ee1d9369fbcf7214b3
SHA1 ccc2180258641cad38a3f96f9942f98e6076161b
SHA256 8319acfa2abc1621fdd8b0cc0bff8a1dac3653ff2cca27737b4d6bcbae25f70e
SHA512 4f9c9d5a4caa57b17bcc453e3f11e3f2edc0a45d1802df1513a30c2c45177290f1c45dba6858aba539d62396286cd31c29409ad227fa344c0bb32a13ad726982

C:\Program Files\Microsoft Office\root\Office16\PerfBoost.exe

MD5 01bff9bbf121a622df61839767c72b36
SHA1 78eaf8c59c442360a300b364e73e44d938fd1fed
SHA256 e0bcc5b145613e7fb320536b142985935fefd97940f2a0b7e0a7be24dd51a266
SHA512 8e7b3bc2f276fa1fe68c13dd2b4f708402664c252bcc75357cc7d8af5dd7e1bbe712a71ebaebbfa0e74eb75785ca0ea2bb14aeb46a758f6e2dad4d3a2b63301b

C:\Program Files\Microsoft Office\root\Office16\officeappguardwin32.exe

MD5 d38d243e0a087963aabe8e9adc8d1588
SHA1 241d5bdd74d5f8f2ef48e7a72dcb7970469dfd35
SHA256 c7c142bd85d265055f643744af2e83b0b7607cce5e1f6bdeb4c01cc139aca36a
SHA512 92620c42d12a98de0b98598cc788365b55392f5df1d0077e183863297e2d9527cc597fba87b649279f58cdccf0b21a2f2545772fac5f760cde5e3d4469035d5e

C:\Program Files\Microsoft Office\root\Office16\msoia.exe

MD5 e8317575575f04c2d2b64da60df40ede
SHA1 322788d4ea24e4724476936d81110e2842b7870e
SHA256 63261d20b76d7cc7b5dc20c86df20a0dd975927f49b5dadc1d8f2f2b0d21dbed
SHA512 b6de13ac1901f189cbed2315698fc8120c84f2aa1dffefcdd33f336d0507ae1b3d03ecde127ea97599d133265355e1e43e1cf5af9298e385b716a23ad887a90e

C:\Program Files\Mozilla Firefox\updater.exe

MD5 1dd0bfbb9137014d0b731e7b57b7165e
SHA1 1c394f7a2834195c2e4f0df395186380e44cf576
SHA256 4066fda31be1bd29423d583dfe7e920bd783d58724ef624ca1fe0992cdbd509b
SHA512 ed6d870c9fbfe4231f383e6afb06ea4f0fc49b83b91cdfcf8a953ce905a33ca9fbdebda1989b3b98149fb2f5e60becc54b93b5a8bfd39ae717d49f15ce54aa5c

C:\Program Files\Microsoft Office\root\Office16\msoasb.exe

MD5 10f34291a88c5d44c42a992092c1e6e9
SHA1 bd3c6850717434fbfb857e39673d581c78847c0e
SHA256 7d871d0a3a28b40c3e10cec7dafab7d60334d783c4524971a6c6e069c119ff35
SHA512 e576c8ccff9d8c6458fd4d48d141d758f861b197c89e1e680372cd868b8aec2293a994983f79c730ea665b4b34733c86a0dda76373260deee0fedf8c51d9b260

C:\Program Files\Microsoft Office\root\Office16\msoadfsb.exe

MD5 29e0d9aa90d07f0c0662c983cf18bb88
SHA1 5351b613be3a65121419aacd007278db1f492465
SHA256 83efa5dd5ece6a9f93bbb33d139ed591c7c456e2f26db063c9408b1b02d9e9a7
SHA512 8c23b46a3982fb01fc6ab25ead94693d3f3a2ad2cbb4f7e1c8c81d8403f6c5132f14c44d03836569eec01c18ad57f77020981e5c2135f9261d9d76efe2135c2b

C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe

MD5 66051fcdbca500dc59358e29213cdfd4
SHA1 19edccf3af8f0cab505a31f59799a0eea2f96882
SHA256 9d34a0688a36043eafb940ea82fec209161a229a525f0dd662d7514cd89c2693
SHA512 1e60e0a424be496828b72e4b138b06a5c1a7aaa22006f3c13531c68dc038fde93851ee8a75f13d97619f4d34fa060346dc2a36e771db9c1a343fd878f87e98d8

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe

MD5 9a4b5ce01e4c78a4b45430c7f127e132
SHA1 0335e4f3b9872c0e5ca191447ee1a7ef659f4589
SHA256 1f70788e26f9319869b912e0dba48fbc4ad4fa29b57e4999c7169511781383ca
SHA512 bb8e317c917f9b8d3ed639a5dbfdf70ebca92d35655410339a73c1837b7cc690e649bf2c8ad872f29641110897c0343efe7430e0251169b0c97cc21649c5938a

C:\Program Files\Microsoft Office\root\Integration\Integrator.exe

MD5 5e736d72ba186a5612365c45eea21fc3
SHA1 454a800e3c6729377b694f779da30d9709b227f9
SHA256 d17c58dc72b527b782924a9fbb14fcce8ee6acef099538ead280575b32bc7c43
SHA512 7270f5374acd66d97450320393df931529e87ee15e10062bc87a373fc93059d4703b26c2cab6b59fcd1f3ff7989408ed8e03d29606b961ce6563a444cc57b0c2

C:\Program Files\Microsoft Office\root\Client\AppVLP.exe

MD5 9c4694b342c3c5b20b13489a4a2e2e5b
SHA1 4d94a92db40b291706bbc05d364cf74f5a11ede5
SHA256 cf416a65758cae631d05f824e214336cd66596d7ed993d25a555554a8305b60c
SHA512 8e3dad7949ad62d3021de151cedb2f5e3f7a94a68ed1a7eb7c3bde171dcbfdd87572c0cc5aef3c55f70f7dcb17ed7acf7a4f64f7a217e48455c6b45e658e7f06

C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe

MD5 e6ab70072e9f4f2a768a6acb83025b7a
SHA1 a180037384fdf82d154501b5e787fabef6c0784b
SHA256 8aab35a3139ac84dc3eb0af480fe4de291010db4260c0e27c5b5991f9da491a0
SHA512 0fe1b825692d55fab968c54cd694abf1dfbf71094c6e4f5ac4bd0579412603e2672dbc28091ecb0db45296e835d345f693cd19c807e8737168b2a98f1448684a

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe

MD5 e76a035a5b3dd1c5287612929c93d0ca
SHA1 b888595b14a8991ae0d6c92bbd5759086cf7af7e
SHA256 8dd336efd02e6c30e9b8ee57c7e3f7b8d53fdedddb18f082b2170ff3369e611e
SHA512 b0f9debc5c95a4cbf86063a5c3009188f49ab0ddbd1401cf53d02f9b84f8587cc9ce56534d799e4dcc02cc13aecb8961ac549e73d1447ea8c5664d519bffa57d

C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

MD5 19bebbb869f5112d105a506fa3ce0429
SHA1 4acc733c17212c2d5925cc0f8c73015d747413d2
SHA256 4776c3530a03d46b306107e9804b2baec373407b32334f7b7b516e9692664d6b
SHA512 48f222bd535ef877dc8cf2f612aa7b3d0e6665a5d467115a436b8c5bf04f0ed68cc8fa77955838f5bf1e031b4838d9596488a25d72359a35453b98226a2ae20d

C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 7db8038ba7c3beadc3d8b1eaa7ff9f66
SHA1 946dcc70a15dc87d7fb27af903913e746bb0675a
SHA256 e4583ec717189ba797dcc4327223dcdbd6e59cbaae90d762007cdaa9bb2a6c66
SHA512 4a14d9dd5e21bb77f03ab9a445cbbf14f018e2bf4bfc776a8aff9929e158c60e57f0880848f15aec2f0cf3a9cc8d40efea9dbeda7bcfc62dbb1be5124a3625b7

C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe

MD5 7ec4ecccafcf9c0d3012d17a44a89ae1
SHA1 d70149de1f2cc3d159ae24d80afdf9af1d3d20b4
SHA256 fcc5b075c4b163a87d1d0f2156f926706e022eedbb4e12a4ec6ab63618ea5346
SHA512 9db00503bfee334bddec7128955fb1211556d21ca2cbbaeba0328eaac56835f57595961d79c3db39a1812e6537cb7cb515b47e1f821651e01406d5a7382e0353

C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe

MD5 da400fce24b76febdb6636adde526dc7
SHA1 97794155866ba3516a0c1a80735f7e0b8f205363
SHA256 34073ace2624ae6d1d6fb646b2dfae54f48bc11fc6dd2a884e06ebbb3a72da3a
SHA512 aede5a3b4bdba785a632eed4e835c644d6690e05d69965cdee28296ac31ce8c0ed69e3a92efad29a76df517c408c579de5ab1b47f305ab9131a38ab2e3aaa563

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

MD5 f83e3b86231a0496bb77e162908ca612
SHA1 903d57dc395ea1215517cb541bbbb749e1019b66
SHA256 db9479e50fbe095d70ae9f478812bc9e3ddab8dbf785e1b018f535da8ed3cc6b
SHA512 f9b46906bdbb176700a319bd3b2f9a33c12b22c1c1c1f2fe508eb053b6f7808a3f3ccc15badc9c3dfa04b41d10f6e85fe22e2255e7c75cdc1658fb9d6a11b186

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\pwahelper.exe

MD5 7889b4522d5ec70a105df25edb1d524f
SHA1 0f1c5a824698e2ec9caa294f395370f80ece6072
SHA256 23a12488bdfabdaeb47fe945e829ffc7d97440958af634c59e9b4e6800a11bd3
SHA512 eed11dee47c0e7f87fdb9b2e5e1a027bf0ee5989cfa0f648a0e4cf3b414aeb7ecf7d2448d7ab1f33f0a26b6ce46ce22596d21f6e3176f0936eef5bfa957103a1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\notification_helper.exe

MD5 7799ccac8f9affd168f883a4c12dcb68
SHA1 241564e22c119faabe327d879e54f3486d32f82a
SHA256 34b838c000979ed40d512e51eef70bad660ac3c28cb1194831583f2101cf78f4
SHA512 775522be4831bfeff6e9382441c4f9148811572aab859ada42a0bc72ffbc6664a2c06ed7036148b18e5ec9129cb880c735aa4ff2bf16787f700f499d522f35ad

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge_pwa_launcher.exe

MD5 5c44c2e2e96cbdf6c7d6fc66137e3024
SHA1 5e862137ede7952a91be73024d41543ca266bf70
SHA256 988881adc97b826ad7045a2955791826066d75e12aac140718263575dc59200c
SHA512 3d7cd12917e52f96db7bc0450ed211009195e89832af0177749a846bbf34d81c01a8f0b109902de6b48aa94253368c16add11ed04b9b0ce2d44d6c72f221fbac

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge_proxy.exe

MD5 117c613277d52f8838a015134e7db93b
SHA1 9a31c8ad03acd7283be73b0207b83454e3702880
SHA256 c23ff9adbf7d539543e2c04bf34cc8f9c21d095be76cd379397d4ad6b5762982
SHA512 66043166634d8d02a577f5f4baf81e4c6d732794b2f67a2eca6e645b94957ae69223ffce9b54a4e3c3ed3c90b75d76ba2f4c5ac54f7601417f50d5af41587f55

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedgewebview2.exe

MD5 c061385b9c3834d08536bda67fced9a3
SHA1 79d263aa9d150d3a5e7375bb8d12ab1a5bd026f6
SHA256 f2e88b6b303968ba38d62c57ac5dffeb6b8474d6d3aff8801d198abe8915cac2
SHA512 dba6ed823262fddfb60844432e36e05225f9ab62f08b04b963ddf416945fdfa530652b91b537e840eeee00545a13774006756badda3116340cfddbea5fca5abc

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge.exe

MD5 1fbc6635e711becf74cd8d2afe9a9881
SHA1 8b130a019a75954dff97ec568a97e8650fd73d8f
SHA256 1d81653d5aaa297c98ff5db25c2d59f8a498d984e1f4c5cc3b5b16bbed783047
SHA512 4a107fb0d58f335bc67bf6dfc06addbe9b5e906f03c485f7f1703612a3926fe42c829a9ebc95cf13570ebd59584a70182d2aed1f20bf85108624fa037c8875f7

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe

MD5 b3dddbd601ad3f6566a2ea1abd4d2dfc
SHA1 ced3731ac0cf886a876e0a33754ce61ae99635be
SHA256 51d5cc40bab29377ba32329c7a3e97179cdfb360c2c0518003d3701819800d25
SHA512 ca23876b706b16c011b3659bb013ac881d4732ead7fd2e613c2fd96ee1017658dc87b66eebe74d24724927d76bc9b5b760dec6b7c488d65550f4a0f95d213e42

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

MD5 73761842c3c18591633896193a5c81c8
SHA1 a1e26e2a8972138fc4fe7a9183ae613761173895
SHA256 58196345c2f735dbe57d2e6f9863c45d3f05d05942026c92c6d64097871ee6bd
SHA512 c1c5bb852852a2d9fb5e2247629b8010186200df4da351d5da2b23550efe743e078ded7615dae98e239e2867715ec3160799167a0e224c0cc2fef16234f4fb2c

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

MD5 e6c9eda8300ca1c5f1b473d3b108a3a1
SHA1 a5b23902bdea84db74e3c8fec299d3625bedfcd8
SHA256 aba529222c812655858f94bd2530286ca5ac74ef5715916e3ffae8d45219f76d
SHA512 2df9a77af701dad47622f903b9e6e34282d3262d05a4a1b6ebed1f722cbce8a4dca785997244181fe9594c65113a4ee7c607e41a64423fefca4604ccf05ed045

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\BHO\ie_to_edge_stub.exe

MD5 62f7b1c5b6964f6e4f564e82257f71d7
SHA1 8e1ad4eacbe7e95064f9f2423ef72a26a4bbeaaa
SHA256 6aecdbaf70187ea0b5418609f9ce50b9acbe6436a0e97830ae5a984df64ffb71
SHA512 f82e140674813401a43a23eb9addd9a8481e751a5243f2f0455608c0568c2a58fe49b4966fec7973ba45ccbdef4730aedc4d4fc8091b1642eb967fee51baa8ef

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe

MD5 572f101151a63e7e0254e20abb1ac543
SHA1 6a383d8db78aff00f4c0181953077bf108b836a5
SHA256 148161bd5f37e3ec9dd631122fe3d9c7fa6a6d9a23c3b9d1a302cdf51fed64e5
SHA512 8d7f9ce3246e38f526604e197e5ad16266600ed4a410cf0c69385ccac3977728147ffec9dba5a8115a305db5433c14087207633ce65f6473a9a58a3da9ae7a09

C:\Program Files\Java\jre-1.8\bin\ssvagent.exe

MD5 62c2ae3f28a9a7a41b1cce57d48da280
SHA1 705e0ffaa09b7203293120771c777ea7ddff89d8
SHA256 85957ec2750161f685fd382d8d1182c49bd2b9477d326e0962dd6a65dfc38fca
SHA512 1701cbed1dcbf2b842c16b21d7eda385cab58d930cc594bed54aad5c36b04490914f5352e877d27c2586c406058b57d91fe8a1109e586cb1c7ef795c2e1b9d58

C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe

MD5 810f6f5f73daf31e34a53eddda2e6cf7
SHA1 6f9d88a2608bbb388cb1b08045f87f2e3def5c5f
SHA256 587e312866b43feabbed23818f42da648e79ea30447fec97e156f56c07672342
SHA512 9026a791db58d35ee88a30d9312edf66acc07221fb7a669fc4b64a666cad95fdb1f7a3995a5b4748067975e9f898ce9f040dafc6ff4a4c7eb1bc3e5e6d9396cd

C:\Program Files\Java\jre-1.8\bin\javaws.exe

MD5 369fb75024cea255adc593d49c708d86
SHA1 05171d42286eed572cf4b1564832902b6e91bcd1
SHA256 7062c614803242706d04a04df2adcf3c2f8f67fa3817872f1bd6704865353ae5
SHA512 b5646396d7e6dacf71f77c0992f8513f4128041c41594470381b1b4bf859827eec607a17060e96a061f9b426fce990cf8b49405faee7d0f81111ec51e270454d

C:\Program Files\Java\jre-1.8\bin\javaw.exe

MD5 e14430b9e9e3a0f7dc7d3f9bcf5efd14
SHA1 0859962e8d75d42875c2ad86b9f70319800675c6
SHA256 c1f9240fb3f5d484875fb2d692da37e6dc221c4d81ee6a16a062883b00d6dc23
SHA512 f55a2f9634b57efa3d2aa17e42febc0ddbab5e92a5aa433dfe6ae238695db68cdf664de0ac585d8d132136c00dafbf4d09a2fc5b55ff24a41b5464a6b9400a19

C:\Program Files\Java\jre-1.8\bin\javacpl.exe

MD5 a600b4a92275536a45ca58e693a61980
SHA1 f1f503fb048dc121bbe6d09aa5ce63b518245a9b
SHA256 0a3af8d18ae04bf25b794efe8c94ef7936dbbbb718472debd7a86148395f45d4
SHA512 993a78694a3d242608bbaeefc6dcb170cccefa4d091a8f3adca28a0ddd19ba1e19ea608ab88f27da920ecd9fe932280bb1f341ea3f4527906a2a5518cf6b8643

C:\Program Files\Java\jre-1.8\bin\java.exe

MD5 2178c93ca1abc788e8f95440f12504ab
SHA1 97dc3d825eab8383602a9498972e0dc65a75d365
SHA256 f914a7910446f45068632e2c093a1a695f1d023270bb95c844d566fb89406aea
SHA512 93bce2bae9295fdd2f9adb36ed2d214669a9fb9791702da2dda7df38d15db30054d4dc6db6c39aec5382920c1e1e494daa555d5260989760469798f1da97d4d1

C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe

MD5 c1e415fd6d1bfdeb9966747f38ff12fa
SHA1 d8eccac24c255cb3149fa51edf8b621d59d96742
SHA256 b72f0300dcbc0623052aa57792b04b74ec62816e0d2a45c9942c7fdfee770413
SHA512 528355336688e6e921e19fdfec1180bd6573c40f857891476f72ef37c80d9ae1f5bb5fedce995c58485ee3d70747c5036eb77e21184800d4f2bb3de006659977

C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe

MD5 8b6e2801296e361fc6e3ce79916afd48
SHA1 f96992c2f5047e90059a8ee67769d46ab271cfa0
SHA256 57554dae601158f262bd62339f5405181c42420a236d72ff3eb17ba87811b772
SHA512 bbec3f6b5fdbb884768c5c40fee948dd1962dec82b3f18a3f116a909b9156aee002b5c3e92651ba3eb2a968c52e31f4524686163cd9bdcd0c19fd0041261a407

C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe

MD5 6e29b96d83de25530b0dbc01d79cff49
SHA1 a1a6e2b37a35a72717497242d742abd6e5dd9f5a
SHA256 79f48cecfba92e5b189c5e263abf78a60b41be83217909ba50c1f48290e6a990
SHA512 d3f16e4a15082cac8b4e675a98450891b10c4ae6031c33483559c633131db6ffea3396df7802813f56542577a7b81b46ee30fa1d7185efa268f31addf5cc4549

C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe

MD5 d383e0480799648c236f232a358f0776
SHA1 8d6bdb8d68cc63c4ed0a7c758b6b6b0d3efb8a09
SHA256 c395ad36536877975e08d472e37a5b777cdf4d268de19caf477faf9a166e9988
SHA512 0389dfb642cfe9b20092a8d8139191867e14c4fe8bd001fe62743e6ed6a1e3e1c9419259df4b08ce7044273c1aa15a078f9714292548986d0beedc4078615f75

C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe

MD5 4f076f122a1be878b46069eac4309b47
SHA1 41f78650f39efceabe9b566182938bf43df3bfe2
SHA256 9f6ed2ce787db82e07703e1b085a28ad44dad5411bee60eb681a3ed4936088e1
SHA512 a6961236008444df954d15f87c590c4f17a47d8070cedb87709bf2d1d30a21b2b055f14fab924dfa234816386fce619e5baf51dd2ede40024025494124085985

C:\Program Files\Java\jdk-1.8\jre\bin\java.exe

MD5 0940889cad694f421d8ec9a5cbe3242a
SHA1 d250512dd1abd9622bacc9b3af2ffa627a2130f1
SHA256 a32dc931319f1fa11b82b50ca1e50361aa39bce0e42f2b6af83f568f6a35f99d
SHA512 0e36291da757f9737e602cba2d041521d083160ebec8bcadaded19855215a9057306529442e80f29e74f49f7f0468582862044e4d45b95d120955c8dd08f041c

C:\Program Files\Java\jdk-1.8\bin\javaws.exe

MD5 cd9c8d955a275967ef73962211edbc9f
SHA1 803829b4539dd9c8d2a6363b35b1e97bc85a0227
SHA256 ea8d351fec4286b89117e76358e8a30d828af7986c45be8b02f0c90e1c95dd60
SHA512 571626f85ce007e78e5d91051c07bcf989cf59df29402e51bf023d2fb65bbdde929094866b856b1bc57821d86975cb3ac8dd74ec5f1986317d48ee3292c2cd0d

C:\Program Files\Java\jdk-1.8\bin\javaw.exe

MD5 a19e1faf513648cdc40fd85b9100e190
SHA1 f85e842ac198ce2d43f3d395a95a42fd9b49f7c0
SHA256 fd1643316f0803c58a41ca573415e4771b7c36ba0f70273ea793d1a070be845b
SHA512 ddb949c3b8737bff04b5fb76c415714fc87be7ce5cfa003c28d352a0e847c157d75bcbdb2b9fe03a6cb658977153162faf04f0a4dac93671b1962d3448c0a57c

C:\Program Files\Java\jdk-1.8\bin\java.exe

MD5 5bec73f5c6533b6b8d4e134d313f1fe7
SHA1 dbf05b69186916409e6a7f27d301c558361b96a3
SHA256 908113bc081a05bdd374f49886c9a1713dfd073aa2b231a0bdcfbe43217f083e
SHA512 94291d49bf39f6b33eca41c454fdd2b5369e8c66dca187b82565ac5437120d1511fa7a39fe87a3caa35b5f606b158721622867d451d10e56c8df187a3c3338f0

C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

MD5 37b0fe980a335464eee0a151775aa2e0
SHA1 a4426a7209d94e0c377d962f8e283460585b0d80
SHA256 ca0852b03d0291fc51a6f8b71f76eae9c3a019a5c1134e70fab80554579e86f2
SHA512 17f1929caa6fc1a9007ba11949d754087b5d8aa63361a37d9c5b0fa58de908d1e614b53e79de0eaa306578788cc8103b1598e31da38ad177d19a668e0ae5c99e

C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

MD5 e4a57d983c1bc82e0e4358ad28106c9c
SHA1 60fffb6002700f83646f8b4924085444bf10f09d
SHA256 1b8594e4946e693cb075dac1a7242c47101077b19bfb6d889adbe8d06fd22d11
SHA512 2eb6554b5e5b521250f5316d1a5a923e05caf7629d87b0807e0b6286b35c0aaf431d62acf5a0bdcbf935df1788ce4a55cfa29f59b0153ed29566bac2ba05008d

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

MD5 0ae9164e86e9880b4391f26b30b1d394
SHA1 28676bf1111bda5e7d36ce03185c118630357faf
SHA256 bc390d4b8e35338d4afd5692e9e4d466b64daa0e19fa5fce3cf8ff20a7b6d986
SHA512 fd13bc05ea373ae304878d0cb812919396f44209b48cdbb90fcda1e4636b1dd3d255c5730aed626c166b042e556606d68248275a30313f440e3f38824286b2d6