azov | bb8d42cd75e7930cbad862a051d1aca7f4907cd42e838dda7e152e4dbf4cfcb2

Analysis

max time kernel
141s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
18-06-2024 14:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
Size

4.2MB
MD5

f896a78cc732b6d129b7e5f47dd080c2
SHA1

26184be292694504315a0f86314727bf08a62e21
SHA256

bb8d42cd75e7930cbad862a051d1aca7f4907cd42e838dda7e152e4dbf4cfcb2
SHA512

d41bc61c6a3557018c7206ac0d43832d73a3d0ed15407a95897c9f4570b84ed905120654ddb480a0254ad7c343ab60eda611ce2020c7f678ff80fee32121a7a9
SSDEEP

49152:OZqK95QhxVOlBWD9rqGLi0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAGGo:W2D8+iFIIm3Gob5iEuwE

Score

10^/10

azov persistence ransomware spyware stealer wiper

Malware Config

Signatures

Azov
A wiper seeking only damage, first seen in 2022.
ransomware wiper azov
Renames multiple (8799) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops startup file 1 IoCs

Processes:

2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe

description	ioc	process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

Processes:

2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe

description	ioc	process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bandera = "C:\\ProgramData\\rdpclient.exe"	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

Processes:

2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe

description	ioc	process
File opened (read-only)	\??\W:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\Y:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\G:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\J:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\M:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\I:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\O:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\R:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\N:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\O:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\P:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\U:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\X:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\K:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\W:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\K:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\T:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\Z:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\E:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\L:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\Q:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\X:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\U:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\Z:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\R:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\S:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\B:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\N:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\P:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\V:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\I:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\L:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\A:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\E:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\M:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\S:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\A:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\B:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\H:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\Q:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\G:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\H:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\J:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\T:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\V:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened (read-only)	\??\Y:	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe

Drops file in Program Files directory 64 IoCs

Processes:

2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe

description	ioc	process
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.YourPhone_0.19051.7.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\AppTiles\MediumTile.scale-125.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\204.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files\WindowsApps\Microsoft.WebMediaExtensions_1.0.20875.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files\WindowsApps\Microsoft.YourPhone_2019.430.2026.0_neutral_~_8wekyb3d8bbwe\AppxMetadata\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\dotnet\ThirdPartyNotices.txt.azov	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\vimeo.luac	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-white\SmallLogo.scale-100_contrast-white.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\AppPackageSmallTile.scale-125.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.People_10.1902.633.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\contrast-white\PeopleSplashScreen.scale-125.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\Assets\PhotosAppList.targetsize-24_altform-colorize.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\fr-FR\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\combinepdf\js\nls\tr-tr\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\js\nls\sl-si\ui-strings.js	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\unified-share\images\themes\dark\Confirmation.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\1033\DataServices\FOLDER.ICO	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.WindowsSoundRecorder_10.1906.1972.0_neutral_split.scale-125_8wekyb3d8bbwe\Assets\VoiceRecorderWideTile.contrast-white_scale-125.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\app\dev\nls\uk-ua\ui-strings.js	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\ipscsy.xml	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.XboxApp_48.49.31001.0_x64__8wekyb3d8bbwe\Assets\GamesXboxHubAppList.targetsize-20_altform-unplated.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsSoundRecorder_10.1906.1972.0_x64__8wekyb3d8bbwe\SoundRec.exe	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files\Microsoft Office 15\ClientX64\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\progress_spinner_dark2x.gif	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer-select\js\nls\en-il\ui-strings.js	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\js\plugins\tracked-send\js\tool\selector.js	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files\dotnet\shared\Microsoft.WindowsDesktop.App\8.0.2\cs\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x64__8wekyb3d8bbwe\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\MapsAppList.targetsize-72_altform-unplated_contrast-white.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Templates\1033\EssentialReport.dotx	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\THEMES16\EVRGREEN\EVRGREEN.ELM	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxMailLargeTile.scale-125.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\compare.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Filters\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19071.12548.0_x64__8wekyb3d8bbwe\SlowMotionEditor\Views\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\core\dev\nls\fi-fi\ui-strings.js	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\lib\classlist	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\PowerPoint2019VL_MAK_AE-ppd.xrm-ms	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\WorldClockWideTile.contrast-white_scale-200.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Excel2019R_Trial-ppd.xrm-ms	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ONENOTE.VisualElementsManifest.xml	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\AccessRuntimeR_PrepidBypass-ul-oob.xrm-ms	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\lo-LA\View3d\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailSmallTile.scale-125.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.19071.19011.0_x64__8wekyb3d8bbwe\ImmersiveVideoPlayback\Content\Shaders\LoadedModelShaders\StandardShader.io.hlsl	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\Pester\3.4.0\Functions\It.Tests.ps1	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\PowerShellGet\1.0.0.1\PSGet.Format.ps1xml	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\BORDERS\MSART11.BDR	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\ob-preview\images\themeless\standards_poster.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\js\plugins\rhp\pages-app-tool-view.js	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\SensorFusionLib.winmd	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Microsoft.PowerShell.Operation.Validation.Format.ps1xml	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe\Assets\Store\LargeTile.scale-150.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxAccountsSplashLogo.scale-100.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\MondoR_SubTrial-ppd.xrm-ms	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\Standard2019MSDNR_Retail-ul-oob.xrm-ms	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\http\images\vlc-48.png	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\pages-app\js\nls\ja-jp\ui-strings.js	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\WindowsPowerShell\Modules\PackageManagement\1.0.0.1\DSCResources\MSFT_PackageManagement\it-IT\MSFT_PackageManagement.strings.psd1	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\en-ae\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\home\js\nls\nl-nl\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-files\js\nls\tr-tr\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\add-account\js\nls\en-ae\ui-strings.js	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\RESTORE_FILES.txt	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProjectStdO365R_SubTrial-pl.xrm-ms	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

chrome.exe

pid process

4128 chrome.exe
4128 chrome.exe
4128 chrome.exe
4128 chrome.exe

pid	process
4128	chrome.exe
4128	chrome.exe
4128	chrome.exe
4128	chrome.exe

Suspicious use of WriteProcessMemory 6 IoCs

Processes:

2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exechrome.exe

description	pid	process	target process
PID 4496 wrote to memory of 1032	4496	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
PID 4496 wrote to memory of 1032	4496	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
PID 4496 wrote to memory of 1452	4496	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe	chrome.exe
PID 4496 wrote to memory of 1452	4496	2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe	chrome.exe
PID 1452 wrote to memory of 4128	1452	chrome.exe	chrome.exe
PID 1452 wrote to memory of 4128	1452	chrome.exe	chrome.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe"
1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:4496
- C:\Users\Admin\AppData\Local\Temp\2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe
  C:\Users\Admin\AppData\Local\Temp\2024-06-18_f896a78cc732b6d129b7e5f47dd080c2_ryuk.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=124.0.6367.202 --initial-client-data=0x298,0x29c,0x2a0,0x274,0x2a4,0x7ff69b8096b8,0x7ff69b8096c4,0x7ff69b8096d0
  2⤵
  - Drops startup file
  - Enumerates connected drives
  - Drops file in Program Files directory
  PID:1032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --force-first-run
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1452
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff16b2ab58,0x7fff16b2ab68,0x7fff16b2ab78
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:4128

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=3768,i,14486271492189381216,15799931579469722648,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:8
1⤵
PID:5924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe

Filesize
296KB

MD5
d60c78c6d63f0375b12baa857ca27a5e

SHA1
971bcbbb049ea1c40ca9f11b5a2f77c54c94b6f7

SHA256
4b8f93dd7021be8d1ae02ceff7cbb830e18f280454b2d8c25f7e75e49faa0eec

SHA512
155dde86ccdaba9105d50f5ce3a495e7f38d8dddcd9e4ab1dcd1e1839fe80c3040c7ef0df578c1a7f067d6b016108940a1b31c49fca9be3d5d4985e75cbc1855

Download Submit
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_105437\java.exe

Filesize
333KB

MD5
497d00fa84708355714605e5abff2c79

SHA1
4b45e3a951e307a4574c6ca10bf38e805c254a36

SHA256
7170fe1b4f9c09f1653bc3e994d89ccf659c9d7688a587cb1666f12a2c6a8e9a

SHA512
7fc3949854b4782d6190754168c1f419ec38b2d17d5c9be4d1c6ff753350effb6a8ea6f4f644a18d90419848254b7526bb4bffb4ba501728186d16f3ce42a2d3

Download Submit
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_105437\javaw.exe

Filesize
333KB

MD5
89cc33636da8187abbf48bf238e871a1

SHA1
493833b3b15a2a0ee1202a6eb5db451b76088663

SHA256
8ce07a18c3f17515684ff5fc8112bac15dcb011fa0693d912b6bc362d806bba6

SHA512
d56bdbc92035211142284c0949f9f80b7b9191b70f738321709b123b3c64e561057b8293dca3caf3ae3970fc0c3f603365beb3dfd57299541798d3c608d5157a

Download Submit
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_105437\javaws.exe

Filesize
540KB

MD5
d35ac656e10234efc6c4b10f48db72c4

SHA1
6d8a26548434e09360e1d98c48886a57f2b66f4e

SHA256
4c51f6c749b226954b78d758c798a78f0b12ca02d6aab757a4bb3a4ae157676c

SHA512
ad46cef338c6bd85dbfa2b1c310a4e5a5d29fd523d00758e0eafd419ac68751ee63039a2f2313518c7654558847393fc1daa9cdd5bd29fae18cb9eda11a8be06

Download Submit
C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe

Filesize
454KB

MD5
a98294b9bdfccb12b08058c77e9f29f4

SHA1
baa005059b4a491200d32d0132adad267eea40cf

SHA256
526df9a8c862543fdd170dd6e5008dc094210421bec859ff43424a38ee2a6fa0

SHA512
034ccc571d3e7f8517cfec9905b82e60a3a22cc74e36c57b5a31df44acea5375ceb8cc822bc0b3650c5d5ec47d3890c156694fd61e324e3ddb3c673a02143e50

Download Submit
C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe

Filesize
262KB

MD5
dffdeac778fbe46ef3361f594141e134

SHA1
1eae0bc2a33381c468ca474e3e5d73ed49ab7d95

SHA256
9ce4e61fba9652f687386fc88e82121477a9a99a17d4ae427805e54898bc57bc

SHA512
1ac06236e7a038bf475a80789558364036641e8c9dc7e7db97b1c9b50eb78605ac99fe89b4983dfbe938f076867688a033ef24f6ccfd649d0baf03253e2e4a51

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\BHO\ie_to_edge_stub.exe

Filesize
642KB

MD5
ac7019445fdddf9cbb7273aea11c9c47

SHA1
5aa47b24269184c7b663517f718c8f9364e4295e

SHA256
0bcb9e044bd62cff87023632c92b26d3fd625072f73f6a9c2bab3e6a8a64e41a

SHA512
9e7fb77a25c02dc4784a0a679e23f876ba9932074d9e7dc485381e5b4590867ce475f0a0565f31bf895f5704a7983c458bd1e22b0603274620a802f8c59352ed

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\Installer\setup.exe

Filesize
7.0MB

MD5
2a68705f42cafc6105b4f540d13fd8c6

SHA1
6029e70b55b85dfc75ff91c276343a1442ab64be

SHA256
2d7ea8a4a3d4b2c444adf6e83cda8fb248e9ba14ea0fe69eac0d840dd940713a

SHA512
c5dde872c926ab67fe4c1f1c9e215b339edfb0f76fc9c62a002c3daccab0d527c9bd1aba31b981d96b0fccf6c2330ed71e4440777e405adeb310a3a2aaf9819d

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\elevation_service.exe

Filesize
1.9MB

MD5
2165d7859e9f23091fd05e70a19a1180

SHA1
2a8e8c2ae7ef4470c71108142f94c3a6907bd9f4

SHA256
ed7630c304fa4d4b78cbad901dc10a18d90a6acbab246eca0e27ef095f62ffda

SHA512
65fecc74b8bc9d567d67ab7871bb47c45399e5ef64b8e75897480052620bab535939396bff2b93f1d27802dbb346f4b780b6f4d25f41a5a965e5e30316919513

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\identity_helper.exe

Filesize
1.3MB

MD5
8ba82ab93984104f1fb9fffcd0101e08

SHA1
33b1a3ac5c34b335741523adccc18c59790b2e6c

SHA256
b7e88bb828a32688236238190d79ce81b0ffb0b25974cd80eb2d548049c7111a

SHA512
9f0d69644dade42fb33b10cef30f6db291dec5ba5b5ff53bbfc6939c4435eb1a9ab895b62e90312e69f61c4ba925bf11e90c3e2a95025addbae2dcaa05234269

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\msedge.exe

Filesize
4.0MB

MD5
a171e6cffa29a1de56489b5af51517cd

SHA1
e5d0d17f258d674911c6aed30f6ab355d6fd69f0

SHA256
18235ba2dca9a45035ce78396d59d99e87f7f5ee24754d79e4f3169de2ff9348

SHA512
0e4c069b1e35d8fe4a56b31507b8070b5bb361ea74fef8d62a35d8e641759ec5cf5a59038032c6cf9ce48f20eb7741e35949968be0036ff0eec57fdd905a1459

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\msedge_pwa_launcher.exe

Filesize
1.8MB

MD5
44345d0dc7bc7484af3ea0732ee9abd1

SHA1
cc04b3ef38fcc645e2b49ae1ce3286a754445d1f

SHA256
dd8d023574a246299ff3cbf0d9199677d89d456ad28725d3db000a5568efd8ea

SHA512
2a45de78442f6f001fe7f0eed0e2d672287436e3d517b1a369534ba2cb99e08b80db091383c782ee85c266d8d072e665e2772bb569c0565f69e7f46d785c748f

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\msedgewebview2.exe

Filesize
3.6MB

MD5
4987635d3d73a620fae20a525242ac2e

SHA1
ae3eebd09b14bf7474ce6d9f0ad6fdc392bcb560

SHA256
7d8acd94f3d8a99e83b0178f99102735a43a83581727bd57a23d6ec314f21536

SHA512
af513786b694407f173067377a507302b9ec79c977f62879da9641e258dfc8cb63fe46f1826fa06c0c65cfbdc2f38c137f3c7520b14f77d5b29c711a95140b19

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\124.0.2478.80\notification_helper.exe

Filesize
1.6MB

MD5
7c814e2426168af9df3b801e0826be89

SHA1
edf4fa234d80ec01ae4f725e70cb8c5260ac1857

SHA256
ea4d7d5da46b840dcb0c3986c6c957c052e1b03e1a092853bb0fd4df712bbf7c

SHA512
783d11d8efa9c065e10350dbfc38b96212033c2c5819dfd6ba6eefeb4e9f773e8c5560c426be089f0a953210d8fb428db5b5d29f015720039f713a5aeef9c964

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe

Filesize
1.4MB

MD5
0fe4d9b827f186ed402ecabbfb8a5efb

SHA1
8b02195e7563adefb52884addaafab73c0e92108

SHA256
e66c3b44f007c5c940f41c5a65f5b8452cd2cb08fffebca90f93642a93b3283c

SHA512
c542853757ab5abab3c5b6c2a6f2d416089506aea4873e273ab425e01af7bbfd9482c94891d93232a237d7b3785bbe7263cf41f3c45550e163522e70955a91c4

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe

Filesize
1.3MB

MD5
e660029dda5df079351c725f84f9112a

SHA1
191094ec925f297c7d7d5e8b3cdb78771f736878

SHA256
63620884d9f15bc7e80879edeb0c59edb367a47d71af30266b6110ac12f9734f

SHA512
977e306525f3db6f5475de62ab2c432c89250f2d5e3b576d611689c3937be07ffdb65d9cdd2f1a0389a8f720a6b323a4b4cb345e3e2b8deb1164cc03dbd5ec75

Download Submit
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

Filesize
301KB

MD5
5fd166cd2e028913688e8f88f7d59067

SHA1
0209a97430eaf860f919789a551c38c0232d78ed

SHA256
c3ed5aa565cd5d836568330513464f40c2fecd98cea06e7f36e0610c11332f7d

SHA512
71e072f713184e2a8588f20806562e497959ac4249b4a6e3d563acd48b039590d3f0a72cf11182de69e2e4465d63e6b0050be8cb0cf9dbafd1942f194073a0c7

Download Submit
C:\Program Files\7-Zip\7-zip.chm.azov

Filesize
112KB

MD5
92852247a73f0b8385d6c463ecdb077b

SHA1
19dcacc80b7929bf83c951854b05fa4712a035c2

SHA256
ce4772264ace10fc6c47e34bfe7a3ccefefffc15a595acc1f3b15270dd7dac48

SHA512
6306a7fcdd7d50decbbd14feb757b466ecce544047fd0e0d8d0b0f18d296d802e0dcc1233e6bb173d6dd6645010e2937644227e255b88bf272c8db55b4342ba7

Download Submit
C:\Program Files\7-Zip\7z.exe

Filesize
666KB

MD5
86f3722bd8deb3321f3fc0441c0c9789

SHA1
8ef90efb2d7e95d1c4d3afae6b1f46d3a0764146

SHA256
29a2bb4ef34c746f7be3b813c51c9715cce916703699656f2085797549705c28

SHA512
70c770435a07508d3679a705dc5a1ed43b9286278c393cd905f3a5c5a7bb03e0bbbb47993780695521b10f282720979ccd462a4e04745c807333e43be62c0fbf

Download Submit
C:\Program Files\7-Zip\7z.sfx.azov

Filesize
210KB

MD5
61ba85b98710efa3a67922c0931eabc3

SHA1
bd1dfec1b77730bb0c04f32127488be873efb7fe

SHA256
4c5a987486e4cff7cc06b5ba2bce46951855ca2fd39e26e36d55ffd57984c818

SHA512
6f013d7cb4b6aad0f74ca535eb0d0eae219ab99d6ca915dbd80f531a8014b9ce2f25a7bcd1e554d54534a85bdd7fe55be7b276a5bc48ade7e70cd24853040d69

Download Submit
C:\Program Files\7-Zip\7zCon.sfx.azov

Filesize
188KB

MD5
c8baddf50652a467abda48bf161d107c

SHA1
b858084ff12c85aa064e4c100b968474e228f635

SHA256
5880cb450f057868275e2b277410bacfaedb2a086653c992d356e7cfd2665d05

SHA512
b94feb5d62aaae904b75a6fe3029a6ee3d452dd2dba916f3f0f7c5f967ecab7b19340e0ca330241a79de014ddfa1c870658a9b42aa86765426da591ac646136a

Download Submit
C:\Program Files\7-Zip\7zFM.exe

Filesize
1.1MB

MD5
fcb02635b75f365f63b7297bdaa1f52c

SHA1
d9b0390d059c48ddd177174573830b5a67715e2f

SHA256
3325e97d98d6daf4f05babdd0134c09b0238052df6d248dcbe47f062814e74f1

SHA512
d1c78154002e10bbe15ba4c533ab0ac4b11ccfd2d6ddb380722fe7566a86823cc500ec8477c8037646a373afaba2210633fd16a458e7bdfba4f7a8404c2f09f7

Download Submit
C:\Program Files\7-Zip\7zG.exe

Filesize
832KB

MD5
5737a3836e58e8e09ca6fd8de8ab78cd

SHA1
aebbb02376095bf89d624267a8b234baa7cbec02

SHA256
c96958dde1e424e7638b60dc25e85c6cbd0fab92a2eefd91282801cab278e48a

SHA512
e1abbca9a0822250304b31359b32bf820796333b43848ce70fdada649f226c8233ca835568d18d40e576d1ba235b4101dc89eda5c0dc9b364665b3fb114ae0a5

Download Submit
C:\Program Files\7-Zip\History.txt.azov

Filesize
56KB

MD5
375fd0ddb113f6f7184948b221d3b59c

SHA1
4d863781bfd811e548036d15780c111ed107eab7

SHA256
97d08b74c92da039c69d5af1ffa7580445b3d50c5adfb0ed41a8ce92db1dae7d

SHA512
5948a727229d5979db47cd325efcd2b3c604c7b14702a8aaeec665e194dec4ae3319deded54b6dd483def91c84a2cdfbf520ace20097934c052dba364388a64a

Download Submit
C:\Program Files\7-Zip\Lang\RESTORE_FILES.txt

Filesize
2KB

MD5
78ede93114e65f9160fd03d3357c56e6

SHA1
88d531b101e57655f1d0d26c6b3257aa2468d460

SHA256
c97412fbf88da8f91099a52888dea4c3f222cd95af3e681e3271cbca8b6b7bb5

SHA512
074a4c741273902ccacb6f573b96d8accedb2ee405dbd04350cdbf54d180c1fd577a4e90c2aae26bf72f3782403f4494db6e3501a04cfd9d7d81a6bc14884b9d

Download Submit
C:\Program Files\7-Zip\Lang\af.txt.azov

Filesize
4KB

MD5
0d3dfe1622b658ab0398f39b15a9e8d0

SHA1
28893c95ad565f7ff056f30099f13e811f226c80

SHA256
c6467d130bf74dcccf71b1021a203f1c4f294b5cb11d051be2d24f2952f7ca6a

SHA512
b3fba85e632175e6b6acd4cc1e3ab1ff18fe2b52b16f6e994e0da6b76d0e43e1f0720bc5e153b4479ea32d9c5841539596cffc99837caebb7248b91891893185

Download Submit
C:\Program Files\7-Zip\Lang\an.txt.azov

Filesize
7KB

MD5
48d1af36458bb5515116647eb80898f9

SHA1
72ca18ae861725bdf5bd3bfbbcdc4d9159893709

SHA256
0eb9fb0644730171591c2f07957a915efe7dcb0e1ec0a2eb3b990266dc9eab3e

SHA512
dd8c3c03a50ce9c47c10459feb923f1a72a52be1b2b813cf05e8b55925b5948265c1cfc4431f24b0bd852f07927f0e7d88c6fa7bf034f4b1d9a84f68e112fedf

Download Submit
C:\Program Files\7-Zip\Lang\ar.txt.azov

Filesize
12KB

MD5
87926f43eca93e9442cf0d0e0c819411

SHA1
8ccc732ecaed1c3959aef151c0c43851a92518da

SHA256
0a04cefbfdabe83061d7c901413f441893b689de893258308a982106d0d72045

SHA512
7f23b45465a573c1474c3f54a890500791c7b53da90c15a65f8d0aba16b0d430a9e9e52dd45b19d473f5bb4c8e5baa57c40f8bd5e41340bdab32dc2baa6c3ca6

Download Submit
C:\Program Files\7-Zip\Lang\ast.txt.azov

Filesize
5KB

MD5
605ec57f254d44504babd08aea05d35f

SHA1
c16fac1a20b6b24c6b3a2a234e7ead674299413c

SHA256
de7c2416e5888dd057aa7fbadf9e3df9cca2872b6b0f6686a550c2e268722b71

SHA512
bbbbacb5a0d6dc24cb46ea30353cea44cd21c76b399a20157766079e45faf3bb9ae9cd0abdf31c446a69cd03890954fb6aac52016c7d3970ce8241050ed450f4

Download Submit
C:\Program Files\7-Zip\Lang\az.txt.azov

Filesize
9KB

MD5
d7eb3d6f0a0e374d43a1d7a8d6fce1a7

SHA1
373798326daa175cf82f0578a5c2350b11f35c75

SHA256
267c75b08579b10663c205e4535b9467eea02bf6fef254529bdab4ec13a797d8

SHA512
5cdc735f2d4cc7303b29a364193eecb03e97b2bcabe5b300842a8c4fb9a13ea3ff200843a425466e32a82fd615664e34f4357ff888898dbe1ff5117f468548be

Download Submit
C:\Program Files\7-Zip\Lang\ba.txt.azov

Filesize
11KB

MD5
1aedb57260b7179d7420f84569357ed2

SHA1
d82d271c6d38d0ef0cc4fb2b0a75952f1b902ace

SHA256
90593dacce64bb13b0b13ffae1ef7b1e9e72b4b7fa47133bf7cb8811c887d3ca

SHA512
fc98b112bc95f1e2aba78f5604fcc6846b2a81f5c9c8b86e854987f6c7b334cfea39f5fa09b93a4e19bd325fff07ef980808a9f2359486d435417e5fd8508abd

Download Submit
C:\Program Files\7-Zip\Lang\be.txt.azov

Filesize
11KB

MD5
83883017f90d0535417e0a8bca504e61

SHA1
076e830bb99404e5de25d14218d233692b854d4c

SHA256
01c65ac2323736a181593c6b76c8220cd5e53cba990b7232c2d30a1c47f26747

SHA512
a5e15a7c9429c52c1ddc231b2c10bcd4a10cf34e20687085c80c106fc95b2a911f2d73dbf8d4e94dabd7694050aa33f96906b1d6f5eff1a0dfdc0d72a6f1d30e

Download Submit
C:\Program Files\7-Zip\Lang\bg.txt.azov

Filesize
12KB

MD5
f2700d814563231b705090419bf8be39

SHA1
21724d272da1c508f5c1a286af04a210585e2fa3

SHA256
1d86a23a31a5b876301b3a2909a9b2b084891b97135a5ff5cf9845a9a8afea83

SHA512
d667d3fb811b224d5fb4557ce81a7114bf01619ab87443c4b354ac7041a2757891268c055820b9d1a9678316c20f229ae733020500ba3c4ee2387362a65f6487

Download Submit
C:\Program Files\7-Zip\Lang\bn.txt.azov

Filesize
14KB

MD5
378afddbb6e963b048c849aec3896774

SHA1
9acc00f879c689da56e6a4732471203670fff9ff

SHA256
142675bd2b6a122d681bfb5dcd67d0e220c934c28a82c8ae5108a268c38467c6

SHA512
26d11b52055869a538c44cc12f21d3672a2818213366693f202195024f87287042afc8600a2fe5c5497ac7242d1da032a1a5961a55d394b43a814b28a9e1a587

Download Submit
C:\Program Files\7-Zip\Lang\br.txt.azov

Filesize
5KB

MD5
351d321fd623d8a59d6f9b26ab925c5e

SHA1
802ead17edfb14e6969a565b40848a084de05fa5

SHA256
e4fffb0fae4af97d60c7555854ccc899770b514a0905c205958eeaf87be2841b

SHA512
e32ddf5d1fcac5968da66555dca9ff3cf43e9e202d32436590350c27ac4f96fcdbbe5db00460cd52e173bf620b45ca6285069414f5b5872e3518a566e5d382c9

Download Submit
C:\Program Files\7-Zip\Lang\ca.txt.azov

Filesize
9KB

MD5
4e2de1461ecd97131cf2dbb4dd09e4fe

SHA1
b659e7885d603bfb43a5c1d7217ffeee563daf4e

SHA256
a9a07a7366fc08c82e87f1c5ca205e1cc51a2f5c58be9445aba17ae8996bc6ef

SHA512
f6e7e9efdb70d5663e484b8b960125161c7581324f4f026ef088db16e13c9e6a5265575f7067c5a9e094f2c88e3a43d2ce0fae3a7c4d500524878fdad6c4f3c4

Download Submit
C:\Program Files\7-Zip\Lang\co.txt.azov

Filesize
11KB

MD5
316e259ebd8c1f773c77f0db56cfbf92

SHA1
42cedb0cfecc212d5ae86aeb40675292933d3658

SHA256
0786b95b3782766d583721922842e9b912d23008d0b4010961b8188f086f7c2a

SHA512
f0f3895c5baf015b36df2d96a87f96c2ec0cd4d8c8f421c8ddff230093be2cf3e089d605ea49103b5fd52fa1bae55dcebfcf2e24461ba5da321a50bf07f75eb2

Download Submit
C:\Program Files\7-Zip\Lang\cs.txt.azov

Filesize
8KB

MD5
f03402d7238d98f843ec6029e08400e9

SHA1
c0df4c0197404398fdaf212e3238e1e7d1a2f171

SHA256
4400d1603e7f9b421ce45c53fc3774d08b94aedc3ee4656f99f49b29850ed080

SHA512
9ac71d44d82f6daf48848d62a7fe5ce16c689786bb2bc03a98caad7db9f7c694ba64cc9397e541e8996ac9a3a639f0fb5e54a3bcbb501670165fcd944b4bf21a

Download Submit
C:\Program Files\7-Zip\Lang\cy.txt.azov

Filesize
5KB

MD5
68fc6778e74989cbe687f33b34767e13

SHA1
a53c5fb6d00a47dafecb17a87d67214a3c9c5961

SHA256
09529ff5576f100af8e010f432208a49a9c6d2275280bed3796dbfcefecb550c

SHA512
c853fd11e5f7c797cfacf3ac3232af0f275c36345d684beb2cdaf7d82f7698f600000971310b0409e9e4450a83a95420e4e064c4984a682ef86ac1ac117d5afd

Download Submit
C:\Program Files\7-Zip\Lang\da.txt.azov

Filesize
8KB

MD5
429c21bc403031b5a14389b846971fb0

SHA1
c886d7821cbd37ba0e534b3dc3f59357bdb1dee1

SHA256
a766499dcdef5840700403c5dfb35a98678c0c239e180b3469c713e4a2bdbe3e

SHA512
83f458ef62fdc2a3fb830f21569ce2444805f454022580f4f05e98d21d5c64380e2a349efb5498ae76758f9e1dc51d99ea1dc9e4c2abf33c0b3518479af16715

Download Submit
C:\Program Files\7-Zip\Lang\de.txt.azov

Filesize
9KB

MD5
9b0e6859eb8460e0e971d5b87221be3c

SHA1
e2177e1a29ea18e0fca32afc78fab855508f9e94

SHA256
bd61da96cb4be386cd41d9a63592e6548a654ac03b5563ff9593c3eb9b0e2500

SHA512
4cdfe30df2cc8bfb49d223183acbce96b62d48abb8b51c692bb7e6806c02a5a4c134db2de9c1ac857b15f3185e8768d5fb853d7758574939a1802de512c4891a

Download Submit
C:\Program Files\7-Zip\Lang\el.txt.azov

Filesize
16KB

MD5
2020b4eec6f2bd22ffcfa066ba121329

SHA1
53d0a7d49624e4ac169f5abee4145b68c88a101e

SHA256
2c33f63fe818390c06014d0d1b6c3592a2ea20a53c8560a50fe49e84e1738f93

SHA512
42aabdaea82665f06b1b988a7fb5cb3d3890433fbbdd67e401a258fa7acf7d3f747820136b75103984d2e38acc71af5123687bb2b35da7a76d17433a6ef3cb93

Download Submit
C:\Program Files\7-Zip\Lang\en.ttt.azov

Filesize
7KB

MD5
04d8136da393607689a0d90e5d46ae0e

SHA1
5dc8c452841739deaa3dde39f5cc8e354fd6e6ec

SHA256
d52837990feb4142fb1d6e38a4495f9f431bdb5e65065fc6ff1affdabdc44146

SHA512
697b11eb7813f7b10c7a643d2ca9097c969f24fd3fd1fceb878366ef95f23bd68f6f88e3dbefb595119a4e5909a21573069be02d5c23f880950e0246f51a5ccb

Download Submit
C:\Program Files\7-Zip\Lang\eo.txt.azov

Filesize
5KB

MD5
615aec3069dda5719d47149fda63244f

SHA1
b62028ca2428bb69736628c4bd42450e7391bfd8

SHA256
2e6a0b044cc8d246701eefaa5971be675fb1aebbb61690c587f6499a94e10dbc

SHA512
8bcb48fcc7bfd89413281de2530afc480214e87a99b532cb2ddf530460b651bd7ba26e88a7d8a2453addc0bb1e5990416b12dd9b96f189c483438d7854aada3a

Download Submit
C:\Program Files\7-Zip\Lang\es.txt.azov

Filesize
9KB

MD5
03d19c5984da2a6110e6377792c23c95

SHA1
d9b1183d962bb3824f777684956787b8b981e6f1

SHA256
30cc33c6211e819fb9b7e4ffd78fd6fa3f8edafc0d2f8d748b7ae75b1b80022e

SHA512
fa9d0cc451bb4dd3643c0029515ccfcdc3092664fba322fcf3eebc39fd34c776dde2afce04e81c8647ced31dc5deb85ff790cb7f5022865d9e345159e7005f16

Download Submit
C:\Program Files\7-Zip\Lang\et.txt.azov

Filesize
7KB

MD5
eacdc4082f0669eb45113add2f4a4ad6

SHA1
b1f82f3450b456da6589c2a6705170045917d6e1

SHA256
2c49844eb0c45600be958eb631293c693feb4292687fc6b3d091925dfffd3583

SHA512
cf878237e88a835050f6e95f5afe209c714a099a2f950539e341bde9bc21e0f989207042722e1739664b80c6c7d404b82cc2ccc32d85bbf618a48aad7a4aa9de

Download Submit
C:\Program Files\7-Zip\Lang\eu.txt.azov

Filesize
8KB

MD5
a5d77a96ac3b05764d2170f1e21efcba

SHA1
2cf29e0428c45ba7ac9eaad3ad5faf9f1f666276

SHA256
d7b0f10ca1d1fc728e8f19a9f7a45553b771ee05d64647732a0f7f9c4b892a75

SHA512
db59bb4e25bdc32600c7337a8f6d7d7374c6b19d5fc0e156fde8c7ed1247cac01b11cabb4904f81989d22a4add4159e583a499e4ff5f44807ae3c179ebcc8697

Download Submit
C:\Program Files\7-Zip\Lang\ext.txt.azov

Filesize
7KB

MD5
85c7443215a1a34fe836f259269d097f

SHA1
ddaee5bcd62461fe54844d6d14611021104fa704

SHA256
70d195e180136560b0cb823e71b4f068589565261cf332addd207707eec06e85

SHA512
96aa21f92ec793df8f0d661d74868a3c571a537ccc0616706b7cc1b635bf403fde272b69c9f6ceb2d5928f7009c180779a2eb1f6fee13e67332c714d82253e47

Download Submit
C:\Program Files\7-Zip\Lang\fa.txt.azov

Filesize
13KB

MD5
fa6b1d47419b89890a94fc29e322b163

SHA1
d1c66d275228461d63671d5292a5de9b8aa460fa

SHA256
887abdb1c1386d9d1044399bd75b8c7b45d6212961a3c890523adac914a7203a

SHA512
67fed80a25b76669fb3d92877e1a97438248114fec32443d5f4395966139d989753d4357004f0cf072e2c3779462357e5b952cb1ca1fe7c547535e3d861823c9

Download Submit
C:\Program Files\7-Zip\Lang\fi.txt.azov

Filesize
8KB

MD5
8ec7721973dda5070239e3a1eb278121

SHA1
9ba15aa0772316050815fa5cca0c53b6bccd54e0

SHA256
1175f85e7d6f5b4ad9d4b1d8b9e29c23eb9b4d6d283ae2b0f4661864d061ab58

SHA512
f1f355aba60065ddf72f7ca8e36615d5fa99b15d5f99eef010f5c92dd6e2eb6c218b35f10756620c8a075a06072a87924e867a5a62f11ee4de9f00007c7108b9

Download Submit
C:\Program Files\7-Zip\Lang\fr.txt.azov

Filesize
9KB

MD5
5c8e94e59762dfb95567ef5c2b16e344

SHA1
514c89f954038bead931566e5f60bb6517183215

SHA256
3e13350cb5025eb67c12a7af0fcbffaf9d390d1a6e36088d0b7e7e4ed865cf81

SHA512
829727442fde3e2fe8e79669e83a007ad5ab2e1aa3eb97fe0b11296f7e62b6f3810880982789c0289eb301ff89df9a7bca3508acf24c33ce9dc1890771081bfd

Download Submit
C:\Program Files\7-Zip\Lang\fur.txt.azov

Filesize
7KB

MD5
9928e538e640a2212d143116d13ab5f6

SHA1
0d78c1fbe6f4dbd4a55b02aaee54b5645f4d7151

SHA256
eb084a120fa0f7192a86920bc44b738d58629521ece85706a21b9683662fd355

SHA512
426bec967185d463153668a7b91127bca932769a0fb6f91856a701328aaa01cb2ad793fad8873bca42ecf7faadd6a016e1795d4f578e653bd48838fa83b798e2

Download Submit
C:\Program Files\7-Zip\Lang\fy.txt.azov

Filesize
6KB

MD5
a2ae52ec2def4fe7b67fe5319df09d79

SHA1
27fb19b5cd7ab7bc39dc6b99885100fec3a47f8c

SHA256
cce6272b7ce9522401824275328fbc5b3213a7300ce4dbdfd64f6b5e1bd210cc

SHA512
caf4920b9d7d81afa5559e7cbe70a727366a1478dab996b3e5b2df56bbe7fa5bb163838a844bafc5caf095ae00d31642d763abb83b135b281939f5185b456da9

Download Submit
C:\Program Files\7-Zip\Lang\ga.txt.azov

Filesize
8KB

MD5
0ce0bb8f819f25fc35b3f84f47175499

SHA1
a3824d363b9b42fe05f68582fca54bd4993a133b

SHA256
d4fbac9b923a352272221fa52c173c9f130d77f574c7390fbdd02a3bb9309641

SHA512
67bf6e6b3c6f6792582178df476949644f266931713142bc68c37c3025f2c2be7596be401122b457d4dab87f772457a36db7ae2d5e91ffa06b75455cc39e0579

Download Submit
C:\Program Files\7-Zip\Lang\gl.txt.azov

Filesize
9KB

MD5
eadc3959ccbd10c55a7ef96e4c4be617

SHA1
6de985787f74476e709a57e76ee120ace43aea06

SHA256
419166eb4279067d253b80cb8d5aa6538ffb93d966f8eeaa4ceaa9b4297c205c

SHA512
28c3ee203e665afe218b09ce4c576051e076c40e40c409d2715cfd158462dce814ba7afb8e7200d35a975422608e351195f24a89846ad02913a0214cd5f1bfb3

Download Submit
C:\Program Files\7-Zip\Lang\gu.txt.azov

Filesize
17KB

MD5
e1d5481636496d3b22f9ae13195e3133

SHA1
ecb9089e78284e67243f724b16e3e89a3f4ea79e

SHA256
22653efb0abce7423ea70c42fe2070ae4c7ba5161cd6f80a57c8aa74058883aa

SHA512
419ccb18f38d55e134786a7536c49823ba70aaa47798a242d37fe104b5f1f53fbd7afdf30d023bd4f96906df2addf62a8b7e0c0f180dd2c88cdaae31a1f9a9a4

Download Submit
C:\Program Files\7-Zip\Lang\he.txt.azov

Filesize
11KB

MD5
551926815cc1735918f996a729009435

SHA1
593bfe80dddd543d2383c995eb68e43d89ee8a1d

SHA256
93aaa6215411ca2508cf74adbc8ee9b5a1a7ba6463022ba37ab2b6b3bf1d758b

SHA512
72096e20739162d0742a51e43fd085480df25114bddde144e65099030e376b1242bf14a455249cc4df1f50e72f197a468a22908591452d29a27e27b87d6596eb

Download Submit
C:\Program Files\7-Zip\Lang\hi.txt.azov

Filesize
17KB

MD5
7b0caeb966c9d6b5b30f7a33b2500f94

SHA1
e92c0bf0c21427593936d25a977e93dcf4f895c9

SHA256
ea8302107b03f0cdc64870f0ef4cfad8fa9940f8688794ecbaba607b402ec7f0

SHA512
82e984cfe66999018b3948a3e8d5de4df9d46e3eaa01ca7c22f62c4d29f558c2ae39de019f4d064c60720c64a9db3bf05c238ab0f4b0c678b4b911c7a6cf55a2

Download Submit
C:\Program Files\7-Zip\Lang\hr.txt.azov

Filesize
8KB

MD5
a18c00364f5e0d04e66fb86c26c26ae3

SHA1
c4a2197011e4f6142dabf2ebd96d867bba1c0b32

SHA256
e4d6e0e4b8aa82753cfed09eece7043263fa26bf79b82f60dde85b7882e46d4f

SHA512
2e8a9a1636325d7c66c70804e145ff0199d5ad66d8d49c7dc2395d04c93fc3331d1ed4711d31b93495e6c18702afa68aeebea8951b08267254e56351a30df9fe

Download Submit
C:\Program Files\7-Zip\Lang\hu.txt.azov

Filesize
9KB

MD5
eeaeb0fe6c3843568c92ce248aeaaf63

SHA1
aec7fad9bead263f935751703245682515a73ea3

SHA256
bf323c1d0daa247db8be98b7e27853b2dcd1577de6a2ac80535d8f83594e56d7

SHA512
d7ffa1fd8514dc429fa8af1d302e30f98cffe1a13380efbe56dd7fec5c887c8807464bf8d2fc78ed085de1ddc96cb4a0f0e642501c580a7f1eff09caa949efa5

Download Submit
C:\Program Files\7-Zip\Lang\hy.txt.azov

Filesize
13KB

MD5
8ae998f5dc85d8f81afe5ede8d838b58

SHA1
b809c28fdec10d4e199680ebada775708e3b61a3

SHA256
5f6ef88f6de2e97b860d7dfb192b32aeb7241e9f367f1b4fbbcecdd299e049b2

SHA512
fba37e35436c12437976f77a01f4fec3644edc9d0a7410e6e9a2af86b5e85cc7a91b31e91bcef7a99e9bffa14c5a91582aa042559097b514486bd74b2ce2ec51

Download Submit
C:\Program Files\7-Zip\Lang\id.txt.azov

Filesize
8KB

MD5
b4d7e48cdc647c33a7de2d62ea76c7fb

SHA1
be3ed23f36065047b4095a844140f4fabc652466

SHA256
22bc82182e5332cda53e920cadd753888de4676363d9c6dc3a3ce12cf2d5a763

SHA512
ae552dd086773b249f4cb3a49fc0823d66ef7540b97b3957d9df9d2ca34266f1664cfd6671c1169707faf16ad1e4c3acbff0d93515caae1a23da2d53dea14d59

Download Submit
C:\Program Files\7-Zip\Lang\io.txt.azov

Filesize
4KB

MD5
0b1bcc4b3930b577ca02e8504d4f10a2

SHA1
c915cdd20ed64abaf63b985683fb176126d2f502

SHA256
14caad1fe2d3548fafbe89407cca23bf01032043db50603aee78f1fccc4bd5d1

SHA512
71d0a1ac4c411cc10b763f2d7503ae6c8da61a931ae05aaf54a8e22bae0877b941d5fe1f76acc39f4eaf1c078f593602ea7cbcc6549c48d0a77b23dde8aae861

Download Submit
C:\Program Files\7-Zip\Lang\is.txt.azov

Filesize
8KB

MD5
ebcbaeeb63c85088b3263889633edebb

SHA1
a1205345d20596e110a8ca59007c5c7b0c62ce5b

SHA256
95e7e82bf8cfa2fd97939a0aae33a7880b498f6e52549ba5db4ba18ea228b7bd

SHA512
e7376217d2badecf3976c556cf6b985ac9b930fe0a703159745dee97e9980f0b627890d9f89085cdeb964409eae821c3a65d80fe1ba46460750dc09be8a5c48d

Download Submit
C:\Program Files\7-Zip\Lang\it.txt.azov

Filesize
9KB

MD5
a1b0e25a28b33ad5e164745d21d6b1be

SHA1
752944824280d9a3ec8a88f076ddc2de39ff0755

SHA256
2cf14c2617a25166df6c98e1b94b32b06f0caf71c090b77dd34d2552b94c4dbc

SHA512
b4a18a3c8419002b48ef6ddf3e8b11fae2a7cf40d513990886c983a1a9265d0f562b7048dde3af1ef5c24b18576a7d0ddfed69a347a0a6a9d7d5fe3ce0d64ea1

Download Submit
C:\Program Files\7-Zip\Lang\ja.txt.azov

Filesize
12KB

MD5
d065c39f883081d15476178b5d1a3f93

SHA1
5254ecdc90665f83d4ac7d3ef54baa2bd23534a6

SHA256
6c10452379bc22943d6fa2cad99d1fc4c08c78832231e70533f2d410390b2789

SHA512
9b572b83341a3fa586a1750c2fdde575ee2d78ab87aaea7ed8aa4fc5cd03b6b65505641b17bf060b99a64fe1ad77fd132d37581da6a21b67c96a1acf33044056

Download Submit
C:\Program Files\7-Zip\Lang\ka.txt.azov

Filesize
17KB

MD5
6590a3ac96c09845d86b3e6f46b7e960

SHA1
e36e5fd7d303e894323ac776734593f3bf0988a8

SHA256
10a30e1eafc7a0b35fb0696ac65351132fa1d4e2a51b0a09ba1a3b44fc9d88bd

SHA512
8acd450e4c34cabf8dde504ba63091dfa1c706027f48e776a50529f7eff33f840db1b77a093f6ecb84cd9a65f34db6d34fe3f8cb53c98bb219293fd987e09d21

Download Submit
C:\Program Files\7-Zip\Lang\kaa.txt.azov

Filesize
8KB

MD5
b2369048d75e4a5b6a3ffb08ee411245

SHA1
f13ea8d58d1d1d8f3034c32fba0cc16c2efb880a

SHA256
ab6015efaab3c653477610d0ccfee6a85f52e02ed4f4795cb06f13073dd2e7e9

SHA512
12ccbf248b6ffcc9b4768433ae8afdf1b2c123a646502e43128f519e7b11e8c01b9953a5f8193766f1530c64fc36150c3b853b99df305587578b545bb8737453

Download Submit
C:\Program Files\7-Zip\Lang\kab.txt.azov

Filesize
8KB

MD5
ef8aa741f3d790f277aac59d26d0fa8d

SHA1
249e05b54e0375c6ed4dbeb0c65d5997a3caa904

SHA256
42ebec7a59343c7ab35def54434cc459055e38477f0a324f3f97843a4ea64894

SHA512
03bc5fc6c286a087b681c00304dc6a6ef90897bad71d7e3eba298bc607d23bc62f8a781895cc74f94a1b282249f29794f50c4fc8fa76a6625059051584ff700b

Download Submit
C:\Program Files\7-Zip\Lang\kk.txt.azov

Filesize
11KB

MD5
46850302053f4302815010a4e4173f79

SHA1
ce510fbaeeabe0282b131237dcc8801d88b28d81

SHA256
35fae6b7cb4a7cf108771eaa6cfbb5944d5d0a023dee70b4595b299f8330dbb5

SHA512
bf1096993ee060c9f6efc6b256d4238c1e88da8d71dfa1f5be05b76b2f11c4e2a04178edafcbe7da9488adace33304ae9e63cfedc1c54242a88306b95cb5b175

Download Submit
C:\Program Files\7-Zip\Lang\ko.txt.azov

Filesize
10KB

MD5
b1570606861dedabfa65028b22987404

SHA1
f827395449c75d091cefeaeb0bd42b5976de50ad

SHA256
5e6a5af9c752c1e49afd45b495be1d061ef4e7e42d9906e4075612c520b5ad50

SHA512
1da01efc053c2defe53c0ff5819bd4272d2d63da83c6002762cc02c3b539d9614f022deb24fc32aaa43b9dd0244c124b8d5414f3fcc20c06acf780c91713b34f

Download Submit
C:\Program Files\7-Zip\Lang\ku-ckb.txt.azov

Filesize
12KB

MD5
39e8fbfc6206a3ce7a6220fcf89ab59b

SHA1
715707e9c18dafcd5f52a24cbd709fd7e31e67a8

SHA256
f367a6ecf97dc6cfe8fa36aa1dac6b7bd5a3f3346d57064c2f150212f31a9941

SHA512
c398104a7b2c13e6e3992b99cf383e4396dbf55968a6a6c2d2cfa22a19b75581f03ff4ef62aaa305c71ea5009924f11547c59219d6d5a616efa472eaab49203f

Download Submit
C:\Program Files\7-Zip\Lang\ku.txt.azov

Filesize
5KB

MD5
938a47197b486fe2a740795f447ddc84

SHA1
9e10c338d5da39b76e869d38d187427033caaa50

SHA256
89fad505a75b10b2d2d2be4a43459259cdb031b0287569f7da67a56a9eeaf75a

SHA512
01d0bb1194111d40833c66caa2485d1d7c053764f14344be2c1aeee02c309b5799f16bf1804551a04ffdc858ec3cf32c80bf7553c70390c9e6d82ef958188106

Download Submit
C:\Program Files\7-Zip\Lang\ky.txt.azov

Filesize
12KB

MD5
ecc645aebd4d443495f8376a6e4070f3

SHA1
68d9b5e5a97ef4c99c244f58015b92fedc16c4be

SHA256
bf7e8a23e548b771fe2409258cd8aff2a8fbf5a822c28c80ad7ca14d51aa8c97

SHA512
fa36935dbb8fa012c05c3ba06a71f163d5542a26ae7c94ed45b817d9ef15d8d23a8534137966356dd2b4cb6a32a003ddc1ca5b971167aff91671a8b3fe4e2769

Download Submit
C:\Program Files\7-Zip\Lang\lij.txt.azov

Filesize
7KB

MD5
24b83d039528f30ded251e443a621758

SHA1
39af26f2f7ca2aa8fa20bb1320ee0bf314e19fc9

SHA256
e203e86ad0a8624f5692389d9d7478fe9bd472995c277da4191b4230bb2899f1

SHA512
1afdd23abb8221c26592f2dffa5796e3107fc258baece20ec5c8157bdb041efa1a08d9f40ae5ac2903bda6aa7a238a867a11e2ebae7525f82e51298bc51ee9ec

Download Submit
C:\Program Files\7-Zip\Lang\lt.txt.azov

Filesize
9KB

MD5
3b9b4bc61f31986e07bfe21e8bd5b536

SHA1
43926bfe3c3a601aae1c9b35be27f5cf486f3f0d

SHA256
37bf972d22714dc388e53bd13dce1769bbea2510cdc065ceba5271076adea6c5

SHA512
5b823a196421aa6ea53c6fb9c4e22c259caf1c8fe107000c9d07564ae037c140de91224be1ec98904e293144063a469168cb98c4d19f0e8a7d14761ebb5f935c

Download Submit
C:\Program Files\7-Zip\descript.ion.azov

Filesize
666B

MD5
a8d703c128a78f7fb6ce95a4c10daff7

SHA1
310e347e93d03fb5651943024ac6aff9d5372f7b

SHA256
d9ea0481cc879a58024d1a407ab9ef7111a2745a6ea02760ffe9c435e67aaddd

SHA512
2c78a60295bcf2d1542ec4e1d4bce48599d824fbd5a9374f6e556ef3b0953cf40da28b9fff3302f64e98139574911decf1532ab5d353ad131b1490ba30191228

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

Filesize
350KB

MD5
d63bbc854f2ad078c496aa3b55da6774

SHA1
ce9d24cd2626430a669007c68a7ed33f09d99882

SHA256
f2981bc192a3317005fbcf5a704db10d7a40d59ad146473c5e751dbe45d531ce

SHA512
15bb2ce26400da315955bffa14d2f2a369a23b177f9932f5866eff1280a20af8f58fdda928a73be2bf6a9b91a1fb13443a67b38e49e3be8903a233616008e954

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

Filesize
4.3MB

MD5
f58a7bdeba39f0ff51d9e77353a6f991

SHA1
eb1a9bf763f2d5f0c95b81d4293ff4416555407b

SHA256
14dfe26abac962f8f11e0852833d15aaf2d4a04a83c9a442ef03e2d877ab2b28

SHA512
7bb400f0bcbb75796924ac68cac3f296f44ff9bf685dd1f716ffb68f65b84c96965c5063dc513918e668d70a94d2680b75a04c1c7f2c201179e7ef5d2d1c9d23

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

Filesize
2.3MB

MD5
088d4f10d2fa87c4652ed8cc438ef241

SHA1
4ec805b557f7da8b4889e01774358add81098e27

SHA256
3ddfec891c604293b3e9c24ca9e8e519118964f89067b72099fa1be174edee1d

SHA512
1714c7d1ab03bc907f98c6f15689fef28a6c958ef9f8e77f6ed46f85926856cd3db2764b89122659fa6f30d965b6bbd870ec42fa99ad25bbfa9d7034d3f58a84

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

Filesize
5.0MB

MD5
1655682bf0b8ed31792aa5249a74db45

SHA1
ba29f9e6ce5a0f2e162da866da1434527223f43c

SHA256
1dd7cb7470c26fc26a16f32192ee3f65ab47136be31510df5f54c820297beb19

SHA512
821ab54fc3eb7cfc829925c7ea2cec6b2f826452bfacf33e53c5403472af4a284832523d1952437012dc304dcb93f34f19e4ed7f1f120bc8835c2249f6f2af77

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

Filesize
1.6MB

MD5
4e2e5b47679af5a1c111e10a60eba6cb

SHA1
08d83d23607f375ca3839dce544c80566f0d50d1

SHA256
f97bf5f25378b7de87cd0e713836e266dd4ff05e239ac1f476dde168c7bbbc77

SHA512
5543da27aa3991022a602bda95110458f4da2179998a7f586bac52297bfb0926c0a11b0d3f47379acbc1f3a5b12d9317aa234f1b73d27f568ee39b7bff2c3cb3

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

Filesize
1.8MB

MD5
17e01f74219be7fa339c698a28593841

SHA1
d49b2f600e97e08d2b35689785719a956de5e2c5

SHA256
4cdc8997f8b896bdb120b115d1ceb5472f19875c5817b6c2b4a2ac5b2ee00f86

SHA512
31b1f54464fa34a703e0e5cbcde462bc5e49eaa944004a7f1ef773f8aa91f3b4f64c0aeda612e455ce663ee335e60f49e17db8e51b61886fc1dec5bad995bad1

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

Filesize
1.4MB

MD5
67cf4a24ecf31316e9783c1183c41217

SHA1
1715b9206e00971eb25d40e4c89e10db310b8846

SHA256
2de52b2a7609804cc0048320febdddea6bb0125ceda58fcf1f32c9d4e9269210

SHA512
01fa142e4136ae63c860cf82e135ec9a5b8e6c58297c9e781dcd59b11189b38d1d96192aeb2697960c2a63885d66c874cfe72f2d8bd6e12ecd0bbba215bc3be4

Download Submit
C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

Filesize
1.3MB

MD5
8bf6b0cdb8caf66b8cc44cb39b7bf127

SHA1
deb2411e4df0145cd37552e3037f4035fc0434ae

SHA256
1df8272bbfb0a1cad29d74f854003ad0563ec57a7c57ff6b7df8fe0a1a8074f5

SHA512
f8b8bfbb487625438f2bd063b35cc02d4c6877cc347b64025d0bc5a4116a6be8c366b1b5f1a044f2e9b6268aabcbbaeb8188a728f36cd7965d60b132502df76e

Download Submit
C:\Program Files\Java\jdk-1.8\bin\java.exe

Filesize
333KB

MD5
d81c058f9b8945a34070a2577457cb40

SHA1
55816d17e7de0110e4142d45832b210324e40f3f

SHA256
56743bb9195f567a23d875abeb065ed1bec580d41733f06ca89bfe44f2fea794

SHA512
35277e2ff4cd01b984aac8a2b8d75ead41afc16e4d71297198ae8a7f758cf80a4cde3788ee0b13bb325158ac82df93711fec19475549cbd335a95083ca169bf2

Download Submit
C:\Program Files\Java\jdk-1.8\bin\javaw.exe

Filesize
333KB

MD5
dea38e82d0ec6a5544441ff8364f1caa

SHA1
30e590455d3354e6cf38e3349b9faa56b1e3a171

SHA256
4c811d428ad8d85ec73360c68064d1a1c3d9b2b3b83332501c2d85854f41eb14

SHA512
5e039c16961dcb652aa9963434fe92b40f386eedf73cc72029809849ee6740027319e8c15351c74cd2728fa182a51ad8061764767a568660017b91e68de36219

Download Submit
C:\Program Files\Java\jdk-1.8\bin\javaws.exe

Filesize
540KB

MD5
8ef34122bcc2cdceea7fa48e3547d3ed

SHA1
08f3acdddc9bc0db6df7eba03fe649203bebddcd

SHA256
a47b3d0a4bbc7164d2b796d4cde0adaccb08b9b8c964a9fcf4b06dea69e1e3e2

SHA512
a30eb6fe147fa640906870a56b351295f5e0764cf6277d117a3a5dd3e682171924ad31f74a713f3025af0b77f28b306459722a906f39b5016df4b57c4e090bc8

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\java.exe

Filesize
333KB

MD5
5229c73e2d0ddb0610d31285055b2c43

SHA1
b949a04b3af32b300f95b0cdb38ad489c22fd822

SHA256
fe4fe1c8c6dc22d9f92a3ae92792b28762f6e7731adcc947b00b58175ec5deda

SHA512
4abdc1a04653b8475891be2732c4b50597bea1535542ab78e74dbab004bf1e6aeac84394443c922572b7306f7f279269772691c5ae754144bc1d411281387dac

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe

Filesize
142KB

MD5
d43262b63e630f950675b7a8b4fbb4cc

SHA1
c7eca028867eb2484415cc52a42d6a8b5f063100

SHA256
8b8521d2d1efedfde957b8f52f9fd61f0297fdd6bb2eacf1bc7fc05a82b0352f

SHA512
dc8368d3d12473b294ac912d980be1c2f646f9fc498a4dacac06f0def7a89bd8395669a770abe458e0aac0d9ddada1ce42ad78904f51cb87f8d9ac47f44bc0c8

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe

Filesize
333KB

MD5
195db963cac731b0437ebccbca9ef269

SHA1
eeab8d3445957698857ca83d7c663a6398ac7590

SHA256
194b0815d0d1af856f1cbfaf3bfd422cd139c08d5f3c0af0671b004c48fbbdc8

SHA512
4f95aa2669ab62cb9ac57a9bcc5b17dca424722473d6dbd9833a9919f49252b54af9d141165c1820d4a754034d134f490c417c34a9b8b2c531424cdb33ac3c96

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe

Filesize
540KB

MD5
4ae231e8db5d1ffade14c386e9fe94a8

SHA1
fb0c4492714f2095c189de3e234deb38373f903e

SHA256
d967daf15dd2e76649e0b9f3de4a5f4aa68a284010dafe132007bd3f79ab6ea3

SHA512
f0be5ca59b8f350db8f679957f5f58ff48304cbfd9144b50b386c1406cd57f6eb2ca653cc6c10e5d65449ef71429f471852d10d7d3c9ca7a02c10aefa6fddbcd

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe

Filesize
195KB

MD5
67429a5c81340758d1fada21d10fb9a0

SHA1
cf4e1057db0467f793a6c22710baa32c57a7c159

SHA256
bfc34d61cd4b4d15fc4cef9b05fbaafe5f803545c5611b2346e58cd525d081dd

SHA512
5d270fa799110063a98dfa39844172c67d28327a8bbc054ef85e5c189813ca93a2cba1b8200ad037f90d4e5daee13a23132d4a5d9d29f6cfec48d8eff5168137

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe

Filesize
138KB

MD5
888b9cea725dab4288877dfef60b88d0

SHA1
236288b04b0d166c379aa3a49a0c37164da2cdf2

SHA256
2b216da90995178f7b3257034a098c4b56f5a7f69733796c4e07b54f5136cc1e

SHA512
5c2e95de79c28a84d1a3213ce8842cc4a69c8ee4034589a4a93d0a1f5e9f9dfbc8c4784fb23add8f5cf1bae3674c6b6ee109b565176ec138ea40076c4faf9c64

Download Submit
C:\Program Files\Java\jre-1.8\bin\java.exe

Filesize
333KB

MD5
edec199d6c806f9fe35f3ecc44b3ed29

SHA1
b859a8f829bba8d95d59acc645e8383ec45c1ccb

SHA256
688507f87100bec2d1a5308e0a509649ee57ed6c0fded33ce8c07a37fae49ddd

SHA512
abc09c403e9352972a8b463aece700a93978fa151f7af1a2886a458360b810b379029b442ca34a2f1fe15b9f4885577cfcf50a7ecf4720dfd4f4fd2d234a4b02

Download Submit
C:\Program Files\Java\jre-1.8\bin\javacpl.exe

Filesize
142KB

MD5
b425b6199d388a7561673e2152ee07a8

SHA1
572330f97d7942707874636c0ecc403c2d1541bd

SHA256
02b8c3db50eb16119b046681fd0792253618f97e6c0258ca7fe6ad18dacbed18

SHA512
7ceab962abf9b9523e803e3ab19599a424474b2497ae4b59d5c50034475cc67234ff0e9342c2b405125e18a6dc6674d0580ef79a8577edd78c5a7afd5c5c1f8d

Download Submit
C:\Program Files\Java\jre-1.8\bin\javaw.exe

Filesize
333KB

MD5
173ad20734adc3fd798e96737815f01d

SHA1
47c85c6c6350f2431c9c24d6878d685efe86fae4

SHA256
6a14bc84baa7e15f496f7525b011cb9a34f151b5f8d744bc21818f5d1288a144

SHA512
ba24e127c2be84c46177a75300699630830b46b7b4e36816f0a0b6313dba43ce280a3d3d43315b2a491fd3d30a7066d8a473dcc4f6de48d1b3144311c22a2c4f

Download Submit
C:\Program Files\Java\jre-1.8\bin\javaws.exe

Filesize
540KB

MD5
b0febb379dee154b915c471e8145fd87

SHA1
2b8248928cb474721355b14d491afff2bd2c222e

SHA256
1560b7ff8263851c348ef67f1eb7a61fd22d0653f2578572a4106867530de4f5

SHA512
5a251ceeea2c3ffb1fe0cb73343b2557178fd7c148378dff6f41c798ee96fbadeac0fca631dbe1726d77a50b9362ce8c34acf763fa6c5551a6f22b34af3b9d3c

Download Submit
C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe

Filesize
195KB

MD5
df24b2554f3eca37710675cec215d88b

SHA1
6fbaa0e0fe83d21dd0588187c916d374edf9a677

SHA256
9a5c1bc6281d7fb6c3c848dda99e8ea5252851be6ee45856923919912a498dd5

SHA512
5bccb220e2a51b2cae7d5bdbe6a01f78eb6bd4c452a0673ff93fb025076645f87df8574fb181ecdb281ddb4fcded39b2a0972ec4eabb50aaf6161acca1ee25ef

Download Submit
C:\Program Files\Java\jre-1.8\bin\ssvagent.exe

Filesize
138KB

MD5
a11782af20bf74430bb5caf13597da5d

SHA1
d7a435be65c49b44f39060dc6361f98475200b68

SHA256
5d9fa0ec6c1c5d920b67a6abc47157df968325e58dcd7b3cfcdcf075e6682fd6

SHA512
776615938e5a046df708d12c785e54491ca2ec6b57a88a8accf048662c2dc25f2107110ca2f4713008cf627a311f4d90fe06d36a0262e418e9b6c9abf4179849

Download Submit
C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe

Filesize
4.3MB

MD5
e3ec66cdc7dd9c521a80dfef93d5728a

SHA1
2eab7e59eb5b1bec98b3241f0b851b8d5bfe7f8a

SHA256
bd2e7b77187e123acb47472f21b0bf9ba241012810a27f644342b563ecc38d0b

SHA512
4300ba2f89ad5ac6a41bd3c8a9d09510a88864c55f570debe3aa0d016174e115e03d4c64e0e569ee3664055a7f573fd26ac01f02cd86aca56005d686d669a4f2

Download Submit
C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe

Filesize
4.3MB

MD5
f9865075b208e5598d492609db0aab8a

SHA1
36dc5aba95862cb1ea66fb6e9ceacbd2c7a4388b

SHA256
f660b266ab79c644bf27525b2b15c38861f54c6e1e2193c0418684cc0c1ee070

SHA512
a69a27ee38e32f04188002e2306c1b13b9fe0ca9dc47536f602fe0026d51ac2e400ac339032a83596c5959c3a90adc942232a12a3412fcc62eb54ab03522b222

Download Submit
C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe

Filesize
275KB

MD5
1be86c5c1ce00a03c6de6ce44f83e275

SHA1
c60a9b8829b911a80c8b3c59afa1d7403b8d2632

SHA256
0e2aeb9a70b1307b05f3d72f0b002e269727f1cfabb13ad218c7fc66b0bd9ff6

SHA512
0612d9fe820757cdb06afa3997403bc2737128b7172308b24e8a7d2b30c90e804ab0b0545a9d832e34855f0f65527778546fd992ae4e2f84044b611fae077d70

Download Submit
C:\Program Files\Microsoft Office\root\Client\AppVLP.exe

Filesize
588KB

MD5
3a66bbd467205f6085d93d36441597f4

SHA1
45a50c43e4aef34ae817b75dcf68fceb82d850cd

SHA256
fd3c8bba3b01ad6244bec04990450511e9c93a8d49e977b4750df95225fb408f

SHA512
0d084dfe78ec86901a052f126acc474ca2e0e86f38ea2add741c221c12e3b988ad779e4624ebbd101e639b8c0687d58b2c602faaf027dcc3cf10db0d32cbf4c8

Download Submit
C:\Program Files\Microsoft Office\root\Integration\Integrator.exe

Filesize
6.8MB

MD5
101d20275a1e38e6811395489092981a

SHA1
9bb391bb7c668465b992c3c907e04b4baf9502ea

SHA256
f30eb78ce91af579b1c90441abcb53abc9b30f71541e52aab850d3965e6d32c8

SHA512
67ee16a1f4a7ab3bb0ced8e258640dd859a496c7817a6a5c453def583d50b2ef2497cd57e2e02a17b4a3c101388affc075a3aa7e4326562640b5c0f9144c5dce

Download Submit
C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe

Filesize
100KB

MD5
fcbc7bba556c2cee1fe28b127f63dfeb

SHA1
6b6a4ff81ead08e9dd0e2f02cabb7e7d2f7b1e0d

SHA256
08b267ff232701e0b8f1e2cc70a70aa01f67bc38a699ce2661f9fd7412cf5964

SHA512
9111e0d052a490a94aca6d85fb6aa001ba965d2bfc35fdff765a078e79f51dc139754e40bd31074c59cad73303a2407ac56422300d4d82c12731eabd9ef53519

Download Submit
C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe

Filesize
449KB

MD5
81ff5c471d9ac8924201027c8a7af136

SHA1
2c0113a0d7582a8edd1feb1b788da660c1df78f9

SHA256
1fc970c3dba1aa6fd90c6d6336cd3a6991f343dfeba5a46f81feb6bd5a7a8a55

SHA512
6518735cf53c43a0dfda76dfff1320f74627d9cfd593d3207e9fe4ff97d4a3cbc3e53638398d0a04a0c66231babd771f4509bf5b950f2ae4910352e52db94768

Download Submit
C:\Program Files\Microsoft Office\root\Office16\PerfBoost.exe

Filesize
877KB

MD5
cfc5b06e59efbf9dc176f0121ddff4f6

SHA1
d735c80e1852b85719d3d9c19241145d781d891e

SHA256
9f8247be9107eeaa0fbeb13fa9d4c479351a25a225159b718bc55a35aaaf1e1c

SHA512
694d245275d37da6684fefc19a8c63545cb9391162948f93e5985a524d59309ce4588924f09e4a899fed72b2a8acb3b4f068e40f676ee466b506405dfde1648a

Download Submit
C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe

Filesize
189KB

MD5
e2ff5df7b99b37aee6321d0482e18da9

SHA1
9db7d8f5bfe911c09d796fc6c2988156734b164e

SHA256
9b11d9684fcb5bcb80686b474a35487cd5e113e15a1607c7dccc5429e8bb22ac

SHA512
8cc2b1afd2bccd73cd4f86a67801432a8c4ec83cdaa206fe5765f6c65f6e2467d7b8834ac2d985e4d28fbe35077579241728182557dabc7a5fd2a95e46d08300

Download Submit
C:\Program Files\Microsoft Office\root\Office16\msoadfsb.exe

Filesize
2.0MB

MD5
0badefebdce8f0f688523f3672797a42

SHA1
a78e8c371318bfcef4178ac7f31254e92044349d

SHA256
7da41f103f5e924aab62404232b94c2ec5d1106f5e412da9850fdb1031be3207

SHA512
c4a883f00eb82b98553472117787de8609974661170341ffe77162c44e3cd63cc33173dc600b89c08e17a88cdcebb6a1c3b192b8282062638b69df90fc6e1218

Download Submit
C:\Program Files\Microsoft Office\root\Office16\msoasb.exe

Filesize
341KB

MD5
8e10ac0756121975c8a9a860f817d606

SHA1
8bc6c26bc1090e2ab8ecea2b00d207ab3812250c

SHA256
4f18ffb008c9f559d94a0e8ed22521fdecabd64713754e80a35969277a84cb03

SHA512
dffc05f7941471403da0f6267c2e44010f166ab8a84e37be04e43093f524e3ee1e61bde9191dfc4dc7664e6805c0c0b6c949c3acde8ba30ba2dd1845b1b044c6

Download Submit
C:\Program Files\Microsoft Office\root\Office16\msoia.exe

Filesize
6.0MB

MD5
ffdc5186b82b9dfe1e6d0f9670cc9162

SHA1
629bfafa6ab45772fc7b6cdb863de00fe3c5abba

SHA256
23cc3688aa97761d515b3358842f984a0f0bf0f38f637a00d563d1871ff862bb

SHA512
75e29feb8c53c1f0a54e5d15417580ac5b87e31f948a3509a68f4b3c8742d543fac20f25fdb40232fb71909ee0cb0f6065f58f4979413ed274cedb268011b719

Download Submit
C:\Program Files\Microsoft Office\root\Office16\officeappguardwin32.exe

Filesize
596KB

MD5
a6f964045689672247d55cd676665ac6

SHA1
4c894729ec694c7293be5a2e1857639690f5ed4e

SHA256
5bf4c53964b1992c43fa87670ac9a50961181c24303c2365b722fe575bd1eb8f

SHA512
18963113e27133038ee87aa91d5d9a92519229051c987fd1ba13829ee416d4d8437c9185e6414e02c6e16930b70621b6c38028d6ec1a7d8143b3e701997755ea

Download Submit
C:\Program Files\Microsoft Office\root\Office16\protocolhandler.exe

Filesize
6.4MB

MD5
217510412a0bfa42f04a05eba43490a8

SHA1
ecd5bc9499d96b6f234c738677332a018a53fe0b

SHA256
11b52afa7c0a52bdbe061d9aa603b05c4a23fcc0137bbefe64c43a23c8455f12

SHA512
b03c8849793802ab32f4276a66709cd6f1d104bd1c6bd85885cc272c19e38110256a90235abe213bf0f48fbea6734c12a37a6626df7e74e2861e76e2ef1d4a65

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe

Filesize
2.0MB

MD5
d57142de9484f32b03ce2462caaacb5e

SHA1
2256a24da2558db314e5958684feb5a8f23781b8

SHA256
540f9afee891e8b07154c8a224d499494132c8ad9273f27b4d3ccc3db09e8c39

SHA512
18cb65fd643195c404b3894de2af2fa52ea2b277c3cd8107023315f8434f885fc7f07fcdebfc4058dba7bb15c33f0eb45c3b8200b55e440734b47977ed6341b2

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe

Filesize
222KB

MD5
5c4057e0ddf8cc7525944422ab4e4f90

SHA1
a1a90ac0564b267a0b08be5aec732f1d046819f1

SHA256
49a030d2328a59c7cb5998fef92d183336e12e2cb0c896fbe06bf7dafa2a8817

SHA512
970d60d6932c8addabe8a9fe45b7a47fd517630b437abb9cee6c69f8bd116efaf8f773fcb614af2752eaf12cec7b7fe2518339627934afca646e754326a82d1a

Download Submit
C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\ohub32.exe

Filesize
2.0MB

MD5
fc620f41c59b3f3333fb9a2a00bbdb33

SHA1
d6db0bfdeb7f0232737ba0a7665e47183e648f65

SHA256
b15f93585388462e41630fd9bf90da44d1a5175339c749bb52423ba4a7e8d8ef

SHA512
3c51d08cc30bca6a62d2ae2247652e1e532fdec61c21f89eea226172190f47989c213f39c9fd94110016af0e35e9d6d239e090ed1cf3ed40aa15cbe9aef28536

Download Submit
C:\Program Files\Mozilla Firefox\crashreporter.exe

Filesize
324KB

MD5
5d374b0c5031c66a7cdad1fc194024ed

SHA1
3da59f33795bae7a8760c5682dcc69cfa90b0795

SHA256
eff199d8ee74a819a88f41231043381c4c5df9c87f5690d7995b4096a6567861

SHA512
b616f5b02debbd58bf5e5f37728b52eedf4ebee2f4bad7f6160f2b096f727e61f718cca3d0472d9a93031bdb8060582b3ec12d6be98c278278a17a28a606775c

Download Submit
C:\Program Files\Mozilla Firefox\default-browser-agent.exe

Filesize
803KB

MD5
ff848e9511749e46c0640f514bd3e79a

SHA1
80e51c75d7e4efa0fed8ea150881bb2e74fb38ce

SHA256
c90171bc16606dda904d515ac149c6ab77b33c3f037c9dfb59954baf6c81aed2

SHA512
b5bcbf4910073d0d84a046121af5d782d414b4e80dc193c76324c3b970e3bd0423bc054c0cf3f469c014a9b8ea9c23867b81f35c3011feb8af24b9d9992bc4a7

Download Submit
C:\Program Files\Mozilla Firefox\firefox.exe

Filesize
777KB

MD5
d3fa151097c8f3ca739371d0613b5a76

SHA1
bc56302999b7016ad99da101a5efb0d5e3da26ab

SHA256
5dcffc53560dfdc894e927e2702976018bc333cbc96d2db4fac40c580c59cd34

SHA512
9dc068213c718e0e93685675cdebb650ccce95d05a66b67b69f47a588b997944213515fef405c1a1543243f066989474b5f1614f13b0f306ed0938123b06d761

Download Submit
C:\Program Files\Mozilla Firefox\maintenanceservice.exe

Filesize
301KB

MD5
055184c7326f15ac813b621b71616898

SHA1
a93385f365ccdeeea1382bfbabb95635086e198c

SHA256
2e7dbbafa507fbb7b63749c2e6f5e853716b08528cd4768a3ef5a3f3da5c7cb7

SHA512
60e12c8bf02f4b7aebf8bcafe393a62ec7571565c87a53272d4c27365e9c64bd3f5aad7dd83960055a7648d5bcd7b0288e7bd02f37d55b3eb04c095df74bb80b

Download Submit
C:\Program Files\Mozilla Firefox\minidump-analyzer.exe

Filesize
829KB

MD5
4dafaa8f1d139c8efe1e00b146ed73b3

SHA1
f7f4bd2476d652f2634ee5eb8b990c140384283a

SHA256
90f4a1ce30e3f18cbf76cf8ad0084144a89d0379ce3d390eddd12adf34c7d1bf

SHA512
c3c484c8cd5ba97563d3e246202adf58c2c963032b757fdcf7b87e9e2318d564225cd9edc7d5e3f57da08f0c646e891ab10ee33d907ea0bfeb979e6f1b803b4d

Download Submit
C:\Program Files\Mozilla Firefox\pingsender.exe

Filesize
121KB

MD5
eafdb3e0d092bfd8c607cecb61d36c56

SHA1
c47aa4398915539ee39505f07d3c45c7bdc0abb0

SHA256
87b36aed7098e7ad6afa16d0d645ae0e91f53305340302ef7e374f48a7f1abc0

SHA512
e35bea8c8c29c0a2a775447dad90d7154aa50a5fd75c04be5022ff27c20a7e0a21e4e0d9da5f7c29bf0c3ef40134c472a0118072b41957298cee4926284de99c

Download Submit
C:\Program Files\Mozilla Firefox\plugin-container.exe

Filesize
392KB

MD5
bb77e1de593ab61b1d7045323e36c6a6

SHA1
9d76cec265788522f043707241e88f3fe624b32d

SHA256
81f25ef1c348c1e592ae3ce4dff8781fedf25e52658ac197d40f2775da270109

SHA512
1570a9e5d33cd2c34ce3c3da86a7691d6d44f8bc8e048a373918040d5448bb923ed1a44e77de27d02cc0b211a4df6eaf95e04077cb7b9220a8dbe8376c4df66b

Download Submit
C:\Program Files\Mozilla Firefox\updater.exe

Filesize
465KB

MD5
a19ca62fcc59bdc4dd0ad57345be6dbc

SHA1
9392529dd17249034661ee04c81610a66ee76789

SHA256
20ae8cdea3fc488d76d5239ae2522037b0c00cf6363a1b40f31ab1f0bde32c98

SHA512
3b2607857ad543ba6664a549a4aa6489c151a0ab6524135d87ddb47fb4a33f7de5ba4ce61128002ed8a5e8a1773f92b07461945fa7f13d3d8692d817885a3095

Download Submit
C:\Program Files\dotnet\dotnet.exe

Filesize
189KB

MD5
28fa49392f59e3daaf4491258bf23ce9

SHA1
0de0f621ea518bae2370fa0d5194752442c6d081

SHA256
cf9bb15d8067d0b894c675d33ffbea538263021c17c6d9d428da033fff6b48b6

SHA512
652881ae9da983df33c3f22aedbd7b14e6253bb59ea239d9d52767299a5d1eabee0358ca56ad7f389c7573d04caacec62d09a0e2f47d14003fbc62a22697064f

Download Submit
memory/1032-483-0x0000026F12F70000-0x0000026F12F74000-memory.dmp

Filesize
16KB

Download
memory/1032-476-0x0000026F12F60000-0x0000026F12F65000-memory.dmp

Filesize
20KB

Download
memory/1032-477-0x0000026F12F60000-0x0000026F12F65000-memory.dmp

Filesize
20KB

Download
memory/1032-482-0x0000026F12F60000-0x0000026F12F65000-memory.dmp

Filesize
20KB

Download
memory/4496-9-0x00000247C7150000-0x00000247C7157000-memory.dmp

Filesize
28KB

Download
memory/4496-0-0x00000247C7180000-0x00000247C7184000-memory.dmp

Filesize
16KB

Download
memory/4496-14-0x00000247C7170000-0x00000247C7175000-memory.dmp

Filesize
20KB

Download
memory/4496-11-0x00000247C7180000-0x00000247C7184000-memory.dmp

Filesize
16KB

Download
memory/4496-3-0x00000247C7170000-0x00000247C7175000-memory.dmp

Filesize
20KB

Download
memory/4496-10-0x00000247C7170000-0x00000247C7175000-memory.dmp

Filesize
20KB

Download