azov | e213c6a73787190d2099133276615242f9ddebabd313626b017cf988bf8df05c

Analysis

max time kernel
141s
max time network
53s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
18/06/2024, 16:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
Size

4.2MB
MD5

d9405513b67a7bd4cf23bebb1505315a
SHA1

8b3680dec86cbb5b794ab59beb94e6749c0af28f
SHA256

e213c6a73787190d2099133276615242f9ddebabd313626b017cf988bf8df05c
SHA512

ecfe9017025e19e9a18a449a70b6f606a11ab5ab00dae17a8f68c56181f5f8c1fce21e98519e6b31dec50a0d17bdfb2bf212693f809e29e2e03ab456bcedff91
SSDEEP

49152:GCb9ANPwe04oOlBWD9rqGki0iIGTHI6DOnIIeNxu6xl1aZt6m5xbzDI6bpsRJrAq:m2D8diFIIm3Gob5iEui1E

Score

10^/10

azov persistence ransomware spyware stealer wiper

Malware Config

Signatures

Azov
A wiper seeking only damage, first seen in 2022.
ransomware wiper azov
Renames multiple (8351) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bandera = "C:\\ProgramData\\rdpclient.exe"	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\S:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\B:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\Q:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\H:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\K:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\W:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\Y:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\O:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\T:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\A:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\R:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\T:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\X:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\Y:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\E:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\I:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\I:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\J:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\G:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\M:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\N:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\A:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\B:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\G:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\V:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\W:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\P:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\R:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\J:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\U:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\E:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\P:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\Q:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\Z:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\L:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\Z:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\H:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\K:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\U:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\X:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\O:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\S:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\V:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\L:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\M:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened (read-only)	\??\N:	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x64__8wekyb3d8bbwe\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\ru-ru\ui-strings.js	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\sl-sl\ui-strings.js	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files (x86)\Common Files\System\it-IT\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe\CortanaApp.ProjectedApi.xml	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-80_contrast-black.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Thumbnails\Sticker_Icon_Gravel.jpg	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\nb-no\ui-strings.js	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\mip.exe	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial2-ul-oob.xrm-ms	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\contrast-white\MixedRealityPortalAppList.targetsize-48_altform-unplated_contrast-white.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-24_altform-unplated_contrast-white.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Work\contrast-white\MedTile.scale-200.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\nb-no\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\resources\strings\LocalizedStrings_lt.json	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Car\LTR\contrast-black\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Work\contrast-white\MedTile.scale-100.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\AppxSignature.p7x	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Diagnostics\Comprehensive\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\selection-actions2x.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Mu\Fingerprinting.DATA	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Windows.Photos_2019.19071.12548.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxBlockMap.xml	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\pl-PL\View3d\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-36_contrast-black.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-gb\ui-strings.js	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\Fonts\private\REFSPCL.TTF	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-48_altform-unplated.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-256_altform-lightunplated.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ScreenSketch_10.1907.2471.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxBlockMap.xml	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-80_altform-lightunplated.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxWideTile.scale-100.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription4-ppd.xrm-ms	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageMedTile.scale-200_contrast-white.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-white_targetsize-72.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\themes\dark\core_icons_fw.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-64_contrast-black.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\s_filetype_psd.svg	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\multi-tab-file-view-2x.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\en-gb\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\Office16\ExcelInterProviderRanker.bin	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\AppPackageWideTile.scale-100_contrast-black.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\Java\jre-1.8\lib\cmm\PYCC.pf	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\CommunityInterop.winmd	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ru-ru\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\110.0.5481.104\Locales\it.pak	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk-1.8\jre\bin\server\Xusage.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\28.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\sw-KE\View3d\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-black_targetsize-96.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\resources.ff33ee1b.pri	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\en-il\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File created	C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\RESTORE_FILES.txt	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\Weather_LogoSmall.targetsize-32.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\PlatformCapabilities\PowerPointCapabilities.json	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\sv-se\ui-strings.js	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main.xml	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageLargeTile.scale-400_contrast-black.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\images\FilePdf32x32.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\MicrosoftSolitaireAppList.targetsize-256_altform-unplated_contrast-black_devicefamily-colorfulunplated.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_neutral_split.scale-100_8wekyb3d8bbwe\resources.pri	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Exchange.scale-100.png	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\back-arrow-down.svg	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
884	chrome.exe
884	chrome.exe
884	chrome.exe
884	chrome.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 972 wrote to memory of 5008	972	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe	90
PID 972 wrote to memory of 5008	972	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe	90
PID 972 wrote to memory of 212	972	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe	93
PID 972 wrote to memory of 212	972	2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe	93
PID 212 wrote to memory of 884	212	chrome.exe	94
PID 212 wrote to memory of 884	212	chrome.exe	94

C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe"
1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:972
- C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe
  C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=124.0.6367.202 --initial-client-data=0x274,0x278,0x27c,0x250,0x284,0x7ff66fc796b8,0x7ff66fc796c4,0x7ff66fc796d0
  2⤵
  - Drops startup file
  - Enumerates connected drives
  - Drops file in Program Files directory
  PID:5008
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --force-first-run
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:212
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff8954eab58,0x7ff8954eab68,0x7ff8954eab78
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:884

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\sv-se\PlayStore_icon.svg

Filesize
6KB

MD5
66c2f70715ba667c54dd8e1597619977

SHA1
87d801b3db0dba3c7bdcd68835aeffb07bc129e5

SHA256
8f64632c7feb498169aac8e7d48ae242bf8f04537aa49794f656e24e86e42d4a

SHA512
2d8c5cf811ae0fc077965bfe1e6971b29f9936d4152ea8f290e1f9f0a7e3215045c2ebe653d148b7a6172872f780ec229b82813fc6c056726c8dde5ef465c4d3

Download Submit
C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe

Filesize
296KB

MD5
332f70c2149c05eb13aae729b7dd3f16

SHA1
1dff00bd735ef6102917a8414d3b2fa3cd456be6

SHA256
4a0b63ad4636022ce6046441e50b596f5544a89fb4baa171e936f7c499af0dcc

SHA512
5ae99a3400d772439e3fe541e2e2518587a38f99a5cef68247811731d79a48e3384c0b402c94d05b4860f2890f86732a69f4f6be1ef1a88f6521a5c6b20eb048

Download Submit
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_102250\java.exe

Filesize
333KB

MD5
20fd01ed31e38ec192b3d9b8111cbec5

SHA1
832a96c3ea57f27c6dd5729edb071d3a7f3d6d32

SHA256
0a63051cae2bc3c34dc81cb402e770dd68abe343c97108c88f46e26ea1435e0a

SHA512
769ce1c8d36d7202f0a35ef00f6254398c9583fbea55204bb6afe8671308911a354c9e78f12f5579d35a4b9a5a766ccae1429112cf3856e8940566d94b804192

Download Submit
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_102250\javaw.exe

Filesize
333KB

MD5
b09c7eaf8e34eb6b78bdde558ac9ce26

SHA1
70e01ef5f8265e49071a34b942aee83a27e2c4be

SHA256
f2bbd691b3c8e9475705c39025cb1c84e841c676836ade42f313730b8f9d5e46

SHA512
3740893cc6d8b9a56e1a303f36070807aff17cf921cb7b1b08825809f2b66e28433e841dd987833f80ba67f468c83c2a9d4370cc9ca4c16ae522b631a480f524

Download Submit
C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_102250\javaws.exe

Filesize
540KB

MD5
8cf7835319e9a8ad6980e41b1743acee

SHA1
6b16e23891dae167dad262f9b8bcf9383213bffc

SHA256
55dfb505d0f5d9c1237f576e9f1197ce1e4ebe5f39e21be135f55c7469df3e3c

SHA512
9f81535f2de905a783b069539b7bac4101caada28c956d9f40853e7b11864eafc6988168ef8696bfea0b45aacb7958db08f282ccc29fba31a6b3a9b60bfb87aa

Download Submit
C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe

Filesize
454KB

MD5
47eac55e82b3ea876179f1c93731a7ba

SHA1
7f11493aa3e09d6429fa0a2fa0b4c7e5b4ba5eb9

SHA256
3d3f950b4fd03d2cb11ba0eee1f2c8ac875bd0186ecde84561cf9b037d047009

SHA512
7bf16fca5090277bc307ec35686425fb49b8888a6c4b144d0db8a69ee9d6749a971c21c4aa71b4859da14773ca67a30df145dc8174afc2bffb25f2d9e40a1bad

Download Submit
C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe

Filesize
262KB

MD5
f73fa44b9e8e6b191f23f48b4a6ee1d7

SHA1
877aa9291ea6e3a50ffff9e95ffca00fe03a94aa

SHA256
c30c36dbea08c6c4b2551951990b049a4d1639f0e4f0badae2a81cbf0229ff95

SHA512
ca2ed91425b1b9f8b1aff7dd7e1c5cb180c705baa698d7a40ab7c53e31c510ac7b8ddd1343aac3f33bb93d9006cd6950f9b011a365227438b10e611013b8cfdd

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\BHO\ie_to_edge_stub.exe

Filesize
545KB

MD5
d2693ef5ae24204b65bf4286631489e3

SHA1
be466c1c3de08b04aee3788cb9f40b00bd5caf84

SHA256
1e1701939217245741562e748f1532b6e4b2c96f6352db499096816e9cc08b16

SHA512
8e085ce4352be3f01bde92c1d5024ded92e77f8129cc6a897fba81010b465cf97ff68a54b17596df4cc586570ae408756c2bbca85b5367fd4761970dd0c687d1

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe

Filesize
3.7MB

MD5
221247ff611cd371c213f8b2a680c266

SHA1
64851bb741324792477d5cb3bc0fdeb83774375b

SHA256
4324074a0888d4aa65fc7ddbb13e271ea24390b157bce046d35968e70536f014

SHA512
2b545e4698d3acf2bb28fc705e812619069621697cc2acd106c6f1b6dc1a63c624c1d673e6664a4542a8616c7c87195e534b23ea98409d3baab59159bcc3a216

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

Filesize
1.7MB

MD5
8fc6ae9207b313047a51f8bbdf7e3bfc

SHA1
1862b8efd63984681be6150d2dd3e6fa55d83b3a

SHA256
6ef07ab90e7df63d08ffe80b3f46feec86a225042af8adf6614ef26f79c8eb58

SHA512
e36004f5372571d91f7f6426970211ba868f7e4c69c888dcbe9678a72b7f6ab6c3e0f5f5bf3b7af04c1867612e9a80244dba55b9bb7e63be97e042b6a59b1ac4

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

Filesize
1.2MB

MD5
763e77e2d469de33fb6f67a8f925e3b5

SHA1
b99c2d31a35b95e55c35977351f04e6d35536cbb

SHA256
38d8269912908b5217fe120d5310a0158840a7110dfd4745d714927af3c573fe

SHA512
697cc78a150709648aed6bb07e70f883a9d3d9f7eae7d679701f18865b4cd92cead0c3a36a1cea3928dc46f67141e3e48f6a22635d5867d8962aaa611b0fa785

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge.exe

Filesize
3.3MB

MD5
5102e69ca9f2623cabb301a8c2127b74

SHA1
22ad998ac0d9011386698a12964ced62f3436ce8

SHA256
aeff0a7b543b608b26654e1d3569bf4551e2ea1f62125354189c5f671ac20a93

SHA512
c94b3d86089f2a5e87e139bbf068d7fe672cfe57990fc8a1d0522fb3dc2aed88077fd73ab28ebfa3bf1e4a7ef9987e11ff277566981d2cc071a054bf84924add

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge_proxy.exe

Filesize
1.2MB

MD5
4cdb122fb91bab96eb69943284273118

SHA1
43989fb9459e4eb85f87a093da8d6c65e9952064

SHA256
06cf3f9d78fd36d7267540145f0ce7d8407e1d27385d1467ad49500aa755844f

SHA512
b60ea6096865cd9641de47905faf3e6c2d7b4887cab86165d8df43c1d22bbbe09ecd30e2a94393be3d8d84623b967e1d194162bc68672d934c7a57d156157c59

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge_pwa_launcher.exe

Filesize
1.7MB

MD5
6e24b2936f29bb7bbfa373b3b88e398a

SHA1
0bd2b8200a8086f436c2d2c11c9909804645b0a9

SHA256
de77b41baab600993ee69ca421be7c636f5903fec980998dafa7dd01e11319b4

SHA512
a6ad53593c593a75811310034d75828317ee72dbf2c168f43947e80d2972df50a22d5bf4a7eeb38cda03589bf1966ba86ae29597d64780ec20c2bb56e4137c82

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedgewebview2.exe

Filesize
2.9MB

MD5
2da7bbc733936ca3b96afabb53c8ba7c

SHA1
551fb180f3459c0be69678177585f643c1453594

SHA256
1c2197039f4ad79cf685154f2f619817b88c67082a7c5626f78325c1d201afc3

SHA512
70c3dfc20a571f7452dea4475180f044d4b860b54b4ba7001aecbb9d17eece08b2cd1eb3e9c40ea19e58a5e39ea7a091b9146bad6e134741ce5a4bddd9ee7006

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\notification_helper.exe

Filesize
1.4MB

MD5
a5d3a1ef3cd16062bfac4c9ae45423b4

SHA1
4f7c9289388fa84be72c20a5e9356df112964483

SHA256
cbca291c851f2fb8c0e211a0f5e6464acfff1c35fa4ea4e1d09406abb4006d33

SHA512
ef0d046be1ef451f2da1f2ee19e9e47ddf312c1724711db88a6e620909c05d90836bcbe012627a2b9b33a0a23f8c46119834532e7aff7b24056acb52d8309b2e

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\pwahelper.exe

Filesize
1.2MB

MD5
d8685b2137eaaf44dbfbc701953efac8

SHA1
458dbf1b362c67180528f1dae4e20a462d299c67

SHA256
42320220d1283142c7925f41e8dc7d6ebb01cc481cb149bd049cf94c8cc40a2b

SHA512
0743cff3623a30acb4debf544d44933b9969636136a69b4e93d923f26b7b5a1d783b0732ba55a952d6166fe6c03eff90982e9e3cc7f2b24aa625ab15b361f9cd

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Filesize
3.3MB

MD5
76febaabf59d62f3a18adb77af95b20f

SHA1
309e946958f0fce6ffc6912f04ed57e221f90e9c

SHA256
cf5f216d5d0b9f7beb453e82a0375a7d5d8333c532c5bd6d5c3c9cdca0d02b67

SHA512
dd9444f3efb9adf3a3a3338ceec48952f76ca24d9d6e8ca96191d0c573e2d8ad07e6dfa2aff07082a94483f93bf3d387734d6832200bbd286c2242761b0fa664

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe

Filesize
1.2MB

MD5
f7d4755a328536aed1aa2e82b2357cb7

SHA1
f7b8de4d12b291e587ddb70b634298d02c14af57

SHA256
67438cea7ff55888f2e379eccff66a51648c0b749fefe34e4731556971f0d5b5

SHA512
0ed96269fd45a42240c139aa748d2ec152133a87a6699b216a429cd7e01906c5cd9fecc1d31c38355ce7edc263afb1b56bd64919d89dff35384ed2e977d7f90c

Download Submit
C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe

Filesize
1.2MB

MD5
902066f90400b00ce2ae45c8bdffd624

SHA1
2d1fcb6aa14e9aea1e013d24cbe52799e0903661

SHA256
e4d9e043feebaa825d8153a7f866d5a49b101abac63df9df5bc0bfa859cf738c

SHA512
b39c2c0256c72d4407b56fad0c9356758e40292fe23d910cd505cdb834927b90ec1f7816592e528bec919f76415776053d8dbee6dd2a6a3d8deb919d7de85330

Download Submit
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

Filesize
301KB

MD5
87f74069ca5a1a7e14c0ffa3eac2f185

SHA1
ab57763f1e30c11be4ef0ea87791ff9c7162422f

SHA256
13d8352894c6ba4d1654fcfd2e7fa05481fd89da93588333012b95c324133a27

SHA512
f4fac0f793e7e0b7107fb12e28e5b1a2dc53e5bf29c1d44e714e8fdb8fd70711cb7c0c62d3f2caa5fca88dcc55a4f96c3ff8fbd5789d9f3d0a3682d764668576

Download Submit
C:\Program Files\7-Zip\7-zip.chm.azov

Filesize
112KB

MD5
f807d2eb86b45876ba5c87c3047b5cdf

SHA1
a099578b3866fbfda2d9c226f54c6b5a3a7cbd47

SHA256
11efc43cc4770f708943c66cc721e3138a888d52a766248a333de857c1ca42a1

SHA512
4bece7c6cee3d9603ed9d2d77d3f59f61a4e091faa7aa039fb6ebba73c257fde35f90c5694219d4f0a852b34101d052f78687de4027ac8e61ffe59cba14580ce

Download Submit
C:\Program Files\7-Zip\7z.exe

Filesize
666KB

MD5
67bee2e58d8571822ef619a93afbff68

SHA1
9717fa35f98a4ea0d1cef32cf2a94ccbba8d78d0

SHA256
5289451612c5e47861b2f99d8bcc7643108a25b6391e03a5c53b41025b9341f8

SHA512
108df268f3207094000a9f999f87d91d503cb7862fe2797b2a2f46bb818fb06ce47f8c16444917721768129426f07c73d796fce87b9c579e5d16f43a1704e954

Download Submit
C:\Program Files\7-Zip\7z.sfx.azov

Filesize
210KB

MD5
d7d29e536fcbf98051d419368881c281

SHA1
f39cdd6f520081987d456695827d38ecb2c02621

SHA256
09184cb07b78719689f951e8f0642a2a6eb011f31251298c2493de395217f45f

SHA512
bd1293cdcc5c3ee16d6a374ba7100a82dc58db876b725a634dbfc03de3a7c81d67b8f964478c02e719a60f671dd98c9dc1a5ecd1b2966f84599a1b240429a74f

Download Submit
C:\Program Files\7-Zip\7zCon.sfx.azov

Filesize
188KB

MD5
ae0f56c2689931349070826b46446348

SHA1
3e12e337f64d0f3b630ffbf04004ed2340ec61d1

SHA256
656b33a78daf7c1e15e812b8e314d7899edd0c5ede0731c5c99407db1ca8ff02

SHA512
69e4a506671b38b6b2e7c89ab6a610619f4eb7e3767964ac9ad6a9ca2024694cdf4419d6fabc1b75c963b17adcde622f7db1ce45ab9197316c4c0624c5e60e3a

Download Submit
C:\Program Files\7-Zip\7zFM.exe

Filesize
1.1MB

MD5
0b6be280beb408cc0aedac903bb25b0f

SHA1
72309d445ea8ea79a040fdc0c6bda8cf7a13c3dd

SHA256
4fd8d69cc719a1510ef0e01f6b9e007a2835b12f85aaf3e42c515025329bcb98

SHA512
2095122bc087dda9cbbce6a3522ce3f16e26681fa520746364c17aea2c97877b1e54872b1267aa40b718fe30e74a43db2fa516641bd5d375665e03d01b191ae6

Download Submit
C:\Program Files\7-Zip\7zG.exe

Filesize
832KB

MD5
c9fb8e01c4761b677293f29345aef321

SHA1
270975c09f68de77ad2f4833f79b1068109ac17a

SHA256
4d62e1c901ef7fbcb5db306e0d450c7ad57dc6fb84f944c7b4b3a9e1cf5e42d4

SHA512
4e34f0cbc9b1d6efb0dff96894f6e74702c8768f316b4e5bece739732765bd6714ea5da95141ebbe58b38b033d4e7fdbdec69b5578df65bb70195de5d3f16864

Download Submit
C:\Program Files\7-Zip\History.txt.azov

Filesize
56KB

MD5
ff6a225eaecc4f940bf285e969c05a1c

SHA1
d08d034cbeb718ced6d0b4cc2398b05e05587606

SHA256
b077267e8f8ea6b7fa521ea624e1dc5434b2b673389e1d2bfccde6719e2d92d8

SHA512
81389821bf1cbfd70da6d025233456ecdc0b26ce7809e08b50122a6ee85c70bfd78b83ee22dcfb6a9bb7b1ec65c813aaf682e88af24b96c7202405cade881ebe

Download Submit
C:\Program Files\7-Zip\Lang\RESTORE_FILES.txt

Filesize
2KB

MD5
78ede93114e65f9160fd03d3357c56e6

SHA1
88d531b101e57655f1d0d26c6b3257aa2468d460

SHA256
c97412fbf88da8f91099a52888dea4c3f222cd95af3e681e3271cbca8b6b7bb5

SHA512
074a4c741273902ccacb6f573b96d8accedb2ee405dbd04350cdbf54d180c1fd577a4e90c2aae26bf72f3782403f4494db6e3501a04cfd9d7d81a6bc14884b9d

Download Submit
C:\Program Files\7-Zip\Lang\af.txt.azov

Filesize
4KB

MD5
50305a2032b126ecf4692e8f9bb0b4fb

SHA1
7a5a14a699807be9cc39b07d29bcd3151d98f356

SHA256
73792b77686857a89a9144b6340450c1b4c1521b14ff4c1936cdb1c368947fe3

SHA512
e86eb64c96655e358e8b4e2d794ccb7b4d411a00b190607217c3e2976900306bc182a881bd5283811665b2ccc131575414d6401562fb335c342f4ff943124edb

Download Submit
C:\Program Files\7-Zip\Lang\an.txt.azov

Filesize
7KB

MD5
7a40dbf1ce0d0a44d600be8954345524

SHA1
db55051a2c32985515ba4fd21f345dc14f6b9726

SHA256
05fb7f4800ca1fe7b5b57388d4288657e9d18770be29d0850acd2627d96cf8c6

SHA512
acfacd3ef82600e9b7d549e48397c49a0493e6c6b9a09b684a68d2d8d19c197591ada8d81b3958943beb887cba263fe7a3c23bd1c46a129ac57d1f9d432eae57

Download Submit
C:\Program Files\7-Zip\Lang\ar.txt.azov

Filesize
12KB

MD5
5385a40bb71fe703f1cd3197b8dc000e

SHA1
887c5966734f759fcb1aedf9ca481086d9f77192

SHA256
1736099bbcdbf76ba0358a78852ce4d361f649b7244b7e048ebe203c748a6054

SHA512
d5fc8dcd12eaf4cc2186a9ef8a8d1eb671b4a94d21313a5dbfb6e5e2707b534a99cd16afa8e570de20e97f95625692e0af5107ad6e9cea19fceca9b83b1be930

Download Submit
C:\Program Files\7-Zip\Lang\ast.txt.azov

Filesize
5KB

MD5
87e62ac62363c9a28f71cee9be350489

SHA1
f596f73aec1556b5f0f2d28dd50e14f77bd147b1

SHA256
6469895fe94a5e316f1952430ca4fb14ff38ea85acded6d244b543d683b72865

SHA512
bf06c3069670e294a271e76f84d935e3e9b5ddc6dde0ac53ad066daf6ba259a28e07fa9ccd78342193284f17570cec9dc09dcc1c174010123dde56e7a47d9dc7

Download Submit
C:\Program Files\7-Zip\Lang\az.txt.azov

Filesize
9KB

MD5
b413ef0d07422aff30b86d380fa21e22

SHA1
dc5bf275629e9368f8ed5929264ca425571941c1

SHA256
e21cdd412327e56e87f2df5d28e9839c313e8997dd223ad8ce080bbbfb97d36a

SHA512
50fce35d24d7506260467f6038123b3858f21a5cc26ce56d885934337891c90be5c3bbe51b28513bfad0480f77e30df670c15de381bd7d1b24c036394811a79e

Download Submit
C:\Program Files\7-Zip\Lang\ba.txt.azov

Filesize
11KB

MD5
48c171b22eb9d7d7861ae016363cdb5c

SHA1
1f29595cddb8f17f59559b7cfc958ecbd167cebf

SHA256
a5520fa3a3ac22624d49bbe59e700e9fcb551e0a9f157221f9b780a35f84c71c

SHA512
8629aca81ad84d84d53d01d518de0fd4dd23d645fe90aafa527bf677b83fb3f975f3eedda3c71f774c16d2ef8b33c4081be4488ccb9f7dc934b3db2da1b0cc8c

Download Submit
C:\Program Files\7-Zip\Lang\be.txt.azov

Filesize
11KB

MD5
de7815f825992175d1684760b4175654

SHA1
ea28fdd4a9ee888da648254e29ccda7fc45c672b

SHA256
b96690be4010ca3d7153769b1a6971b56c072cc8d8e04efc4feed2e7d298fe54

SHA512
35607e4107074b04dbc2782a3f89ba9fa7edcc2465bfc854828ad6b438723c5a04957e9ae955af1eb4831933bf875ac728284e778f8dcef03460236442806ac3

Download Submit
C:\Program Files\7-Zip\Lang\bg.txt.azov

Filesize
12KB

MD5
16b9ee7a37645ff6a428cd207bc0657c

SHA1
2259901d0a8fd890194c79a1424d81bf40e48734

SHA256
cf2c733487027af104fa66fc698b64f0e645fb11fa1c115e5b9be950f62ccba6

SHA512
dd9c8ab31fd50e721cdc72ccad8fa658442739c6d2ffcf8ad90b78492835d188d3c4130e0d28abc2a97a778c9a5a87f201ed5a37be6514e96ed70964bae669ef

Download Submit
C:\Program Files\7-Zip\Lang\bn.txt.azov

Filesize
14KB

MD5
ed209ee071524f324ba73c7294048862

SHA1
fda7a7e90949be18556b8c9aa43242e9e1ce407f

SHA256
cf0b7d75a86cc1be5d6f41bf254e5a08d8a4d84272175789a283ecba5de26578

SHA512
f4b1f84db7ab8aae787b85e6c719a52843f6f673762de4a16f8021970ae748d3a5d0a98540cee655e2d8ed556ac05247a1bc94d061a7f44e19323267cdf73cf0

Download Submit
C:\Program Files\7-Zip\Lang\br.txt.azov

Filesize
5KB

MD5
532aef0e2dea3300d1a835de6f5ed974

SHA1
6c36d623e1c0f6d9f5934d09d6e1368c38eed01e

SHA256
ffb78a33697a1ea1e8151966d409da19ee0c2a0ef06668413976d3aacd80f1f8

SHA512
ce87fe5f39554910cee9d493e59963717351f40d660ba52796a2798a05745c9e5ae8fa6c3fbcc252a681a275b096f4ccb0dc83bcc375fb24a4ffe73f382c6e74

Download Submit
C:\Program Files\7-Zip\Lang\ca.txt.azov

Filesize
9KB

MD5
004ba6174e39c38f4f46f6d90c5efeb9

SHA1
4527d2b3a327960535918b6de1aebd8f8e94735e

SHA256
c40d07da8ae28c2e6ac980552728f005c0c99ba4e3ee16537f548169f97f1799

SHA512
b87aa282feb6c220ec62767b4a45079e8a1f9c9da702746d542e1e43f4182972950deb517a3f33de8a976c6e0b0b7e8ecc4faf936a73899c10ec464660b985d6

Download Submit
C:\Program Files\7-Zip\Lang\co.txt.azov

Filesize
11KB

MD5
1a41b2c3f9c2515f2bcc011373c5c066

SHA1
7bcc524ee58e31912044b5e49f0e2edd50222e5d

SHA256
75aef78bd1ecffdec68984212e7c5bde9db35f2e4d06eebb14ab6b81d22f187b

SHA512
487ec70c03588194d460d8b475d9d2ae5cf0ada7e7ca8fc27ffbb9ec82cf3047d22a52b8814d1dc7d32f11cf60253aea37f4a0681c1ed9f5912039f75691fe08

Download Submit
C:\Program Files\7-Zip\Lang\cs.txt.azov

Filesize
8KB

MD5
56c40eac8d538a43de468d7e29f9d15d

SHA1
d9bffebe1a31dd210795eef717a265d609658843

SHA256
e7631b5aa1587a1b298711452600f60e7b878ee99324381f23f176e8e0ab01d4

SHA512
6c31a30554729096798b0a827a62199b3e953625d45296c5f649fc39c479528e9f5f655fae51daf38d9f5a0bd993e6cc075aae0c64b45c05e0800d19be1bac46

Download Submit
C:\Program Files\7-Zip\Lang\cy.txt.azov

Filesize
5KB

MD5
e84be4c3b91c0ce3d66860e02a80cf7b

SHA1
51a2eb8c0fcaa4e5cd6196a82b65e329132a1bd8

SHA256
83f7859a3877a1f13f0e1bc25817e379eb1856c79b3e27b7a811749ca9aa64e0

SHA512
b0fea915e6e31e70565e51915e691cac5254648afa5004d99df440dcefd15cb661bff8e43c0e58bb3790ed5db2a63281cec26a5b552abd96af1302fb81f6e9fa

Download Submit
C:\Program Files\7-Zip\Lang\da.txt.azov

Filesize
8KB

MD5
6a0b77badce550e89b8f9843ca69582e

SHA1
7ded9a590c1d0c1c7d0f4f65de1babd974b5ea57

SHA256
94f99e51e412e571d23c2410d124a8d37d95c1145eb4c80bdf08d4bd51d9b7ca

SHA512
844ac8a8ba6a7df8d14a9cdc8cba84a47bf08035cbbdf53231c972e4cddda595a9bbdef6298568a80e16b724834421cc2133acf60a340025c61b414c6cef3a67

Download Submit
C:\Program Files\7-Zip\Lang\de.txt.azov

Filesize
9KB

MD5
f6a2e3ec2cc39dfcab814410c4a158a1

SHA1
91512da63c2ed693c3fc7a3115a310b8355bd188

SHA256
68aa206ddc05c65283ed95928ff5f94a68e2034b82f3fee6e9a33d13e621d7d0

SHA512
1f4a2f9c2d80004852ff93a88383f7145bd5fb5e4084b57e3215a28323865196437ad24d3e02a678f2d2e1f5541937896c6694e4088e5f8bcbc924bb2b9f729d

Download Submit
C:\Program Files\7-Zip\Lang\el.txt.azov

Filesize
16KB

MD5
6e8ed85d7c5af3158e92fc542bc7a5b5

SHA1
0d7e8c541fa5889cf0edd1bc9bd98b7daea0820c

SHA256
7a6fa184cd56fd57c164fcd17172c7a39e3215e49240cc6c35acc2aa94890c0e

SHA512
4ef0d83575946c5d0b97aa90bf1afaafb6f2788339382c8ef9cfb4b8d4907d93691a22d53462e602969c0e99d7bc59e33a55f504ca8a5073fdf760595344e66b

Download Submit
C:\Program Files\7-Zip\Lang\en.ttt.azov

Filesize
7KB

MD5
6f07f183369401266b4257e5f7adfd21

SHA1
88592ce26628a11e60f3990699da731237d1000c

SHA256
88f84984cd406fe67d7e07277e95ddece5d50c745d5756070d9d48c4ee2d2f21

SHA512
a008a0899d5be5b3a44de9869e9bdb289b953af75b9133a04cd4db81f2675130876026906cbd4664a6bc40762771fdf962377c222f6349544408fac424233308

Download Submit
C:\Program Files\7-Zip\Lang\eo.txt.azov

Filesize
5KB

MD5
d4ca3cd4d0548ea647c5ef37931c1c66

SHA1
cb9d3d51919dc0dad368170e603048285f7d2657

SHA256
a927eda32d3771829d532ee56b0e20ea0407fbdc0d55700675eb52816325c8db

SHA512
5281db1177898856b0e09e5341aec3726d165f97c25b3c65bdb4724df492ededc35ccf626ec90ae1420fb89bdc8a7694542f6935fbfe06371c5fdc8d66ce236e

Download Submit
C:\Program Files\7-Zip\Lang\es.txt.azov

Filesize
9KB

MD5
e34c2c96b8099b72a5f57312aef56169

SHA1
ffd58a96b5fe38969ce494f4debb48d389295b3b

SHA256
befb2acc3f27de6cee36eac49cee8d2fa23f0132fab99dd2a3bbbb17d9babe2e

SHA512
62ac7c714d3c37f58018ae6545bbd558bb07521112df64d3e3e665ca358de0cd3e5e8866c745324bd62dae264eb97d12e8f9647b26274824c60364e6088c95d4

Download Submit
C:\Program Files\7-Zip\Lang\et.txt.azov

Filesize
7KB

MD5
122b2c4f0e83504421bde18f06c2f9c4

SHA1
67c0870b21b487c55917dd78fd0d3a65c0029f65

SHA256
5a504b04de06c6cb7243b3688d8f3ea3c862c2fefc4e3aa2f13b7877a4d955e9

SHA512
c9a7181ab0a0fffd1bb87fe05039b99a017bb547da082e12ac646642320ab8b25dbdb368709f36819c8552d45be1b84a6b66fbb1e50f50e0f269af313567f03f

Download Submit
C:\Program Files\7-Zip\Lang\eu.txt.azov

Filesize
8KB

MD5
b599090f1cdefe62a97af67be34d4c37

SHA1
1aeb3f5eebf9ec9148c475d29924dd803f8d2cee

SHA256
4dcc4d32186e99694a74481014132e0b10cff16c6a90ca738a255a4dc9ce4b24

SHA512
60272fc112621e83b38ae4e4513366baed1a75b530c41735a8746df1ef5bfdeb2f39fbc67eb94c294d52769b5c083e3102d7b7e6ef084fe4433fe89aeb204c4b

Download Submit
C:\Program Files\7-Zip\Lang\ext.txt.azov

Filesize
7KB

MD5
b3d8e8dc1d8aec7568073cfbc86e0724

SHA1
f99fa8cdf29f91f53c42dfff628aa5b18622c16c

SHA256
773f8d8bd6fa07fe5bc774cce375cbcfc85b65cacf8ee5dedcf24e16e165f09e

SHA512
a8a4d56383bf1b22386df31091a62481e382099710639e471739262d78d0e2e7ac075651db08c4777c3f23a3b502a0245b8cf8b27746d9f5a3971c45169bd19e

Download Submit
C:\Program Files\7-Zip\Lang\fa.txt.azov

Filesize
13KB

MD5
089e4b05600947f0beae89d25dea8312

SHA1
bbd5b95e32e1f558cc1dee1a00d912200207c1f8

SHA256
9ebb6d8648986dcda4779ac7bea2ebf9b9af410108281d1a62dd989bc025103b

SHA512
10928ae66a7326855095992f6a6e8f3497f52c5cd7099d633bd1d90a1e57962fff4c04aae7bd98a4cf5a67a799f642db620893e769ad1da860befcb0748fbd23

Download Submit
C:\Program Files\7-Zip\Lang\fi.txt.azov

Filesize
8KB

MD5
f9c2344bf84aa3abec99a1852b491ed0

SHA1
3a8eea3db92cfe278ecc62f4746c6c54beac094a

SHA256
9c4889d2551f7ef27981358819fbce265a698af953a611f6629d04fd1cbf61bd

SHA512
2ed2bc584559c5bf118305d8d414c05e7648f77b3cdedf409ebdfceeba0b271dac86c02d8f0d05d5dc83179ce52dec1090ab768a41a71fefb8ead46df45fd8af

Download Submit
C:\Program Files\7-Zip\Lang\fr.txt.azov

Filesize
9KB

MD5
d11c99be6a0c0aa7b212f2a31b692c19

SHA1
97ec4d2cd4a7b72e1fa676076fac7b88a5a10c0e

SHA256
f46d656266411d09083b1f8ef7384fa2151358fa134822dd0f692b9f1112debc

SHA512
c3b9f2d2e0921b588ce98e582f5c916ffa23f5ffad6dabc04e7c53af8947cf4fb6b2f82070f94ab844b912495743b196ca74afa7e98382a2134915e571ffd84e

Download Submit
C:\Program Files\7-Zip\Lang\fur.txt.azov

Filesize
7KB

MD5
65d6e2959c8c6fba8f8eb336bb18f18f

SHA1
4cb8f90f8e918d1c8866f79bfd3cdccdb961dcb9

SHA256
3dca9fc604ecdd4745767f1c70a100be3eb8dde56f3024d275dc8234df3298c7

SHA512
28e883eea0abae75be017414f0558d1ac3d3b4af7ce0c5eb67de6566c093752451fe9b569480f00f28752fea171df9220d0cce460a75b7c0c41e276dc989e314

Download Submit
C:\Program Files\7-Zip\Lang\fy.txt.azov

Filesize
6KB

MD5
e13e9f8ec7ab4cf20c487938952d94f5

SHA1
95f673a44cee3ba9f03b57d534da74542a9407b9

SHA256
55f7597e2666097ca56633a894163517133cbb6e4995ec981662db5f1af2c96b

SHA512
5b652d559206017c659d5cda7fae28572dc1f091a8405dfbf47d92bcfd85bcfc5708907980116dd773b67c0e772816e877b20d7c56fb6098d8d60f9cbab205d6

Download Submit
C:\Program Files\7-Zip\Lang\ga.txt.azov

Filesize
8KB

MD5
c0e334ed2807acb4b3dadd9c63b01edc

SHA1
8c4b3e4994e2b3da595b075712e0719d9440dbd2

SHA256
674148adaf4617fa38baf9fb565c267fc89d4b4ef1515082721a418145274427

SHA512
db354f433ffd9f10bba8b130d5e9e7dfe1594c9699fb5dc6b49d0ec0d90c7fbc6ec87f27ddd76ec9d4194baa27cd45bc2241317569130146f622634be7f83607

Download Submit
C:\Program Files\7-Zip\Lang\gl.txt.azov

Filesize
9KB

MD5
fee5870e6093074dbf06c5f7d25281e5

SHA1
68001e98082d96a00a404b00d6fe7d7e3ba17db5

SHA256
f48439967a14fdb3d98b0fd4f83d6171c37634df28852c166e5a8fe6e9d08c4d

SHA512
ba902492b2b8dc0dd0abd0973f5200434481fcbdd0c503b237dc999837527139e54f0f31efa94142e4d67b5de9a77d26e27edcca27a83029ae01ee4c721d807f

Download Submit
C:\Program Files\7-Zip\Lang\gu.txt.azov

Filesize
17KB

MD5
6036a02246bb0d9625147bb8fed0d2cf

SHA1
7203a1a946f3bf5dc43cf6acd95df8fce3f62eda

SHA256
94c886498fcab668ea5c01725b7353f60028e2118266b799f92cb8aa29bc5f52

SHA512
71ae8daefc3918063c2902aea5368bf0dc09df65d022868b212163682e233f69db91f57c0a7b10a2581fe2aa773ee2f42510473bc243d65dfd533b99fc0d6cfa

Download Submit
C:\Program Files\7-Zip\Lang\he.txt.azov

Filesize
11KB

MD5
e1994229f284a5b168c6624f2ef43adf

SHA1
b5bce0c0ac6575282ba64f1bc2d03f178856ce84

SHA256
bb661afa02dba0e6ba5c20133d8c1321a3da2f1659fa2b15eb63b606e615a5d0

SHA512
510db4d5c831449e369b4f8df926a26b80235e2a7ae44a1b5871964f448b42e98264f9dd79e2a9553d696d6ff10d813806b9bdbc5f155abf86866305788f764b

Download Submit
C:\Program Files\7-Zip\Lang\hi.txt.azov

Filesize
17KB

MD5
9f3acd7bbd2aea728f06ff0012162af1

SHA1
f4c60822a1e5ebfeb7a427b09400a81850f3d471

SHA256
2a8a69d4f8743151347653a590c8ae1840aa4d01e1304fef30c242d98159a156

SHA512
c40a8c6117fca2af27d1863a485cc2d0bb37c391f729b90754acd98d4cbadc28aac3ed764e11ce3337067b3d898a31ab1669ad39783ac0251879a30c0d7f8d4a

Download Submit
C:\Program Files\7-Zip\Lang\hr.txt.azov

Filesize
8KB

MD5
c05a004fd16c1680d41ec8c82dbc8726

SHA1
08ac3ebb45874ec7c441baa3eb621a868443dc84

SHA256
5255aeab69c84e5954076024583ab5da8bd0581b4fae5a75a78185d05ab522ef

SHA512
8b7ae46fe6a4cb76b1ef768e07c4bdba111f11b00c87871cfeafec399b60bc3fbace959a6a3e7c451b5a789e46a53417af3f8a517ebd707469da7e81d26f67c3

Download Submit
C:\Program Files\7-Zip\Lang\hu.txt.azov

Filesize
9KB

MD5
66169ea5bd7a3df168c6fd3729cd96c8

SHA1
29aff83f5eeeb1cad3726540e22f59c74702edd9

SHA256
e03f5212d8849ace32f8b5113f4afa67b976e8b1c03642929fc7d664b9a4a469

SHA512
333e5131bb5f7ca36877030585aec6ef0e39653efe2ff10cd331c7c0dc7f7805f8361ab60576219470701200da1c04318165d2343decbeef74cffacee7ec5bd9

Download Submit
C:\Program Files\7-Zip\Lang\hy.txt.azov

Filesize
13KB

MD5
818cc8669220c0cc7508dffe5b92bc12

SHA1
13b002b5a2e1c4cc3885a77c74b5970bde437994

SHA256
6fbfccf0d2d2477a726d880efd4689d41ae5e5566dfbdd1cfaf60f8f0d14519c

SHA512
4441279e658f114a6ece9bbbf235499885b5b16c754b209bfa30318dc32418ccb633e6bd3674f9182997d020719e886f31b4da75bf851f8550f5d00389005189

Download Submit
C:\Program Files\7-Zip\Lang\id.txt.azov

Filesize
8KB

MD5
8d75124302f971c2ba7317caade9c748

SHA1
264de729c1e0cf4c221998e40d0d11a6e7c016d6

SHA256
fec84608c8156c7cde9eb45df1656bd4a8efd9fee943005f2cb73b3a48ab1680

SHA512
fa7503a0e8f9ede4bc3d82fb38e2550247861775d93419f6a2b45fe7d6e18c0b15baba40b098bf508f64ab57b8a18b869dcc610cc875477cb084dfa602a33e27

Download Submit
C:\Program Files\7-Zip\Lang\io.txt.azov

Filesize
4KB

MD5
216bae76105c8a75e0fbb69eb9afa2e6

SHA1
6a63aaa2a84efe31be0d1db846f0e4ddd778d79f

SHA256
1d37e24719864a1f5b728be5a32cd34dcc22d0b66d81cab5c4c9afef9444ad99

SHA512
eb7306e3c655d7f1e82b6b5292add0555a7a9e24aeed32c49e6ea67e2b01d42d43c6bdd89bf1b07f10bd3066cc34ed1472f59eee455ed34916de09ed953da0fd

Download Submit
C:\Program Files\7-Zip\Lang\is.txt.azov

Filesize
8KB

MD5
1a2cea110e78eb0edc0c39658823a012

SHA1
c1108641980408832601e4820db495bdae90aa98

SHA256
44bee6746b1e1dc01a4d319114d3d2b5083a10b37427386931598e09edc98ed0

SHA512
3a8da409c1ee15c1ed4be2c8b49da2d0993f126052863f9b38d5d8b7aaadbc1e72cc7f902e6263a8a1ec5bf8dc1a20c9b0cd94ad6a6486c80a187127962d206d

Download Submit
C:\Program Files\7-Zip\Lang\it.txt.azov

Filesize
9KB

MD5
3b6f25c0cf4c1eb3198646af99b6f3b6

SHA1
4f5810bdadccaeb2f56ad8b41ff521723c3b5ca7

SHA256
54d86a6ddd19a89e90b292a649f7df3b474cb22dbcd441e1d26898238fdc8737

SHA512
90007bf39a89a983325a89b48ed8c9fdc8ba818d04aef3620c5ad7c1dde605b3195d7d83427a80e106d31bdc53534f3af68888f477ad3a77ce7b3b75e25870d9

Download Submit
C:\Program Files\7-Zip\Lang\ja.txt.azov

Filesize
12KB

MD5
33e25019841d17224ca698451770282f

SHA1
e4f7994a4559fe83fca8ce2bd1e32be0bf2cdd3e

SHA256
7190824ca998af8620070dc5e821dbfc4afb1c8ff951663900a9992a15b6bf95

SHA512
9b555aee6dad570773b15a1759cc771a6302363368c31aa2aa607cfe45e8ec758621c024f4a30809a0ba5d54495544e3b984a31dad913da5a964a976f0de6b57

Download Submit
C:\Program Files\7-Zip\Lang\ka.txt.azov

Filesize
17KB

MD5
279d914716b74c44e61df4affb619767

SHA1
1f3209779d964a1207dc91eb06b5e1fbf9b75b14

SHA256
0dd842eca36d9b680a919295ae7b6a0c6bbc59738b8715a3f5bd5e8667277c44

SHA512
058a8b5ada1da08202653e9e0ae2a3c3c28e6ba961d53bee20cdee3021d088310a84d2def4b7c34b06e177b6610499efb78a2295d42394eb5c0b1831b401f51f

Download Submit
C:\Program Files\7-Zip\Lang\kaa.txt.azov

Filesize
8KB

MD5
b3560b2668a815ffc16f4d266d60d2f2

SHA1
f9baeda293b48053a217d10923cf03b61672ab67

SHA256
8927d6d1dd26abc952a8f9bf80a995838375380008c153ba7bbcfa0844d9f4aa

SHA512
f7eb4433aa7817f68ccf643496d5656da127ddc5d4c6f742a5901c5a6573b00be88893590ac7e675ea6003a6990ac11a1e8ab8029c47460f7fe1d84e23ad1511

Download Submit
C:\Program Files\7-Zip\Lang\kab.txt.azov

Filesize
8KB

MD5
6d22ab764fee16d8969376c38d218f5f

SHA1
cd99ac67b2ef1620c1ea00436900c741dedc3ad5

SHA256
0d9064341579f744a3369d0d9af7133870b83b98337e7e7720cdbc7b79677f2a

SHA512
f88a66490b9e7907751e665fc4ed3858a1fee546671d2eed5b61cdbde3fa3883fbf262b1e9abc1b0b6f55241c730029d885d0d173087f69ccb221224cd73b5fd

Download Submit
C:\Program Files\7-Zip\Lang\kk.txt.azov

Filesize
11KB

MD5
e11f4162135cb5d2d2963946abc29166

SHA1
3a0afc0a3f96e42331719ca6e299f8494c51d066

SHA256
1da6611a55f931c6a15ad5089d4d2441f7920db1b1098b2af494ce3191ceaf93

SHA512
0d4cb968deb7c4dec37f4ea1d90feecb5380170ad53f88488fe96be115dbb2833b17b736d9dc69286282cc0b32ebd0c06b2950223a7321cca4af80964980c317

Download Submit
C:\Program Files\7-Zip\Lang\ko.txt.azov

Filesize
10KB

MD5
71e87f53906bfe83ad726fd565153594

SHA1
8cf72b0bdd061582f4eb617adaf71712259ad6e5

SHA256
f150b37af097ef5d1ba203c95ff13ea915161f66bb9654c7a3aed9ef05bdd00e

SHA512
2ff5095fa04b5c0f3fdbef45308a243a642b6c9a985a8ab1d7c690305366912e91708a6a4b14c05cb2c8050e54c23c3cf2f3369c52f6edb99eb998ed3de6dbc1

Download Submit
C:\Program Files\7-Zip\Lang\ku-ckb.txt.azov

Filesize
12KB

MD5
ed27a70013f4feb74fe3bcfd283aa2e4

SHA1
bd1dcb75e7f134f3cd23c36e17a7dd558cdc72e7

SHA256
5fc7612b34a8ba5d7618635f08e65f86776eccda5f11bd397dbb028d45a43c7b

SHA512
e379fd3d996ca844c139b3ea7a556a30494c8b9442546850577ef3cf4ad18c057bc24b9236440b36e26cb8e93cf76de1ac74745d3e3aff17043b2ad60c09dd27

Download Submit
C:\Program Files\7-Zip\Lang\ku.txt.azov

Filesize
5KB

MD5
141f8d6b49c128a687ad7ad0337c8c01

SHA1
12fd3f2ae455a0d0e332144c1b835ec9c286a47c

SHA256
7d2285a49298a3286c8e796f211005317164cf99705b09af38cd9775210f1003

SHA512
16197c02a00b84f8e951be023eb64a922393fe16c07e6876a2a3f72f6cfbaabe41bca37c728b74ff78262112dd75445c4189058c97cab2a60e9a1f3ee7ebde48

Download Submit
C:\Program Files\7-Zip\Lang\ky.txt.azov

Filesize
12KB

MD5
c363b38ab1299860e633a1495398e0cb

SHA1
2330626f01d68a5cc263a949558ed4c8df3f5769

SHA256
09ea199a260c3d6705935695356464d60f6a981c05f7f78f29a88f20e1017b0b

SHA512
db6c07151337632ee4afca2428583e78fd86d462b642ab2d1f436324eeca87462018967b6f62cdc83aeef9fc60337fed4744f780e9b944353eff75e4949d27e0

Download Submit
C:\Program Files\7-Zip\Lang\lij.txt.azov

Filesize
7KB

MD5
c0d060971f9b5174c1ec18b37d0d85f9

SHA1
b8c471e57d53caada34ee81d935c61938addfb78

SHA256
026eda91e8b0fa9b4b37127967b6ef1bb431bbcb0b4c3879c24407ed8487a358

SHA512
457e73ca81f50eecda8d1457442627ebd96d8528c4e2db92353c8ae47a698d96b446a1f68b1c8e0b0447375accdbfd79bdda910f22d99ebbe67a518b7d7e2829

Download Submit
C:\Program Files\7-Zip\Lang\lt.txt.azov

Filesize
9KB

MD5
fbb4a29122fb0a8d812572d2e3331d0d

SHA1
8e4a08418741298fb8b2b753b3d8637669f21e62

SHA256
2d85fd7aca74acba8d34918161c7cae616c5ef80cbda0b9d9f0c7fdbc2b382ba

SHA512
06f8d505b5416d48e344f92b9fb11a4acc80e45123be11d99033ce6de269a06669c8971eb5f99360c6a3db361cc59e0adb1e9e82027967201ed7b32fef945006

Download Submit
C:\Program Files\7-Zip\Lang\lv.txt.azov

Filesize
5KB

MD5
ed1e257d6e382d1abab8d6fa28172a17

SHA1
55b86afbfa1a40fc427ee7dc8f9ead52b310beb2

SHA256
a280f019ecf00d238f29c2b292e96f29f4b04c5ea3d4267a2daf1c14828668fa

SHA512
96864acc9031c2d84b8e68854e9c0dcaac2af3d632626a21801a3df4f8c15033fe71464f3a3ac4babba700b11300a890e711c9a083fe7b8cbc45a185d739826a

Download Submit
C:\Program Files\7-Zip\descript.ion.azov

Filesize
666B

MD5
a4c65e879f7a38c93313d121fb4bddd6

SHA1
c3b9214df7067ce39914d6a9e3c36af59545e8b9

SHA256
383c38d40fb73fcac96d72c6f14f189e3410e011ff10851923f9061b0b9609d7

SHA512
ae80c324da54fb1d3f2001a709ef2540f2e74fb2bd6df208c15ee0eb7b8e7088a5e373039fcd61bbba0f1877f73beb8fbaa482b5696a6e76d7d14113d108f4c7

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

Filesize
350KB

MD5
ea45a72ad35071939d5fc3bbbc4bceff

SHA1
5af5990dfc54fc9769ee6b67c965b313e59fd527

SHA256
d0164aea014efecbfab285a19866a6b370c3c6085697a2246baee62dfa43cf8c

SHA512
bf3118cb71f2c29f879eb1107262db7c743bd2aa6566a0f803fa85a435ac15d7aa71a491c2a45ba0a11468082bf30c6ee2057d997e2117aad2d6f45c507dc89e

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

Filesize
4.3MB

MD5
0d59f0bb572f7f635b47c561341f3275

SHA1
ced24f9561f0e5a6f4d3fc4a9f4a9379ef8b3c7b

SHA256
1b15bc3a4f588ae210cf3c9e2f136668741a92427dad762b44712b28f7622221

SHA512
f33f0a5a3eb71d26b24eff4b0bf651a7d3bb14467f15774e9aaee149c28b2fcbb0cb4084d71114cf8faec870842f59d2d799905e832caea8bd74fe39d870c03e

Download Submit
C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

Filesize
2.3MB

MD5
43bdb8ebb4c55b5272fa288e87be59d7

SHA1
d4246131021e7fa0e376789a0e382311b8cbe33f

SHA256
4e4c7447869e668bf70b21cd5379ffdfb7373eeb2e654fc3dd091c6230fe73b1

SHA512
41ab19b2e5faa4815feb5e67d36883488b2c19d5d4ce9e98084ce80befeb2060c856fead3c2650722700955d258575536bd7bb6f2832e1a6827ea04f45c828b9

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

Filesize
5.0MB

MD5
bc2f6443a72d5659a29f39398c46329d

SHA1
a1c4e73f4f70457f29ec11d1a57dbf186c9c9880

SHA256
5beae3846f3f9dd455d706833aaa370a2fdd88178f209cb27731266c5484bea6

SHA512
76dd5a97eae2a238b86d1a2e84e9fcc26919e66037d610fc4b42db1e74a9c012d8ee81f608063dac3825d209a2ca2dbb9e0c2727233a5b8830a126f6c4e9ce61

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

Filesize
1.6MB

MD5
dfef7d65f177a32109dd536e471df272

SHA1
ef59bf1b2fd3a975438817aaa51ee090565dd628

SHA256
eb03355d5b29a5296b059e2a4983370a9d62c773369eccc7aee4098c63db30fb

SHA512
31d90edc6e4ef487b2b0d106818c7e7eb8c8788404c8a7ef020afd2d3a8b3303f62b714500d387fbb36b0b213b5f5e22846cffc459b81fcb819f0784506763c8

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

Filesize
1.8MB

MD5
ffed13da2da6df316e41db7766c0b5f8

SHA1
a49a8a796c0d731309b22a7ab0a5138b7df333a6

SHA256
279dd89088c31a493a7a134089fa944349a18e811a0de4036128de66c6a1777d

SHA512
37efc214d43b7ebb5a6968318d9108fa131d30ee9dcf39026fe47e0e47a6db469bcb7bb9cd21f8678b07f0efdd9802c065d1706fa4d4baf3fff4576cfa22cf0e

Download Submit
C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

Filesize
1.4MB

MD5
23e5d5ec9f60cd8c6501965d8ae4d5ef

SHA1
24870af908249c0356e75a76aadcd833cff678b1

SHA256
10bfecf45fef6f799de75e533b9b33de37327958a255f3c6b52fedbe7a6e8212

SHA512
415d8c5f04591216b9ea97a40a72afca3b74ff4ce3cddb74b319cf632301459e344e257bb9e70ac46f62c8c69e79befcade471021847eccb167bbbae8152e707

Download Submit
C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

Filesize
1.3MB

MD5
6d23beffbb7aa05ef6ae2873098cc172

SHA1
5cc1e1c0578229dfd1ea82b4067d0011e384a815

SHA256
622966f21e7fb582bd7832d47ab99273fc514b699820437d0193959ed8e38e6b

SHA512
fb905939f9cfbc4c0be123b9c506416e1fca4e3d35038676bf05b1557e69de246d18db124f59cc8c019238075337af636e0e426384d66b6d38ad335c03c143ee

Download Submit
C:\Program Files\Java\jdk-1.8\bin\java.exe

Filesize
333KB

MD5
6f32557a1c517dde0f0673dcb0ca1b43

SHA1
51b756053cb74f67fe07b317af553dff411134ed

SHA256
e5a7728398659b40ac0efad971233bfb470071fbe2f30d876a56a1dce565d5a5

SHA512
95b62d03d57a0c9605dc382bf2d18e0ac236c30b4673d92fb6dd944b1d763453208ee04b80626ede7c6a74192ca7c8adcefb9af27d69ee8cda6183a5bc9c9cb6

Download Submit
C:\Program Files\Java\jdk-1.8\bin\javaw.exe

Filesize
333KB

MD5
ad02ea3280a603ee4f535869c30f26e3

SHA1
9a31d6d19745bb37875fc21809b4b36c41016798

SHA256
6fa55a670e4a55e11825a914ca050c8fa01d9e0b27743f078512d0b46107ec28

SHA512
32ec8745dea9446f0b0e594abcb8346d6a1f7fbb5e14f2fe52e219096342c4ba5a2830cce3633cf43bbb721caf6346b52b4b043cdaaaae49fbe5c726746e5ba0

Download Submit
C:\Program Files\Java\jdk-1.8\bin\javaws.exe

Filesize
540KB

MD5
118b50935b4634c54215c06fe6ef2bd2

SHA1
038ad9a5a93425feebe84b5fa52961fd5fd3724b

SHA256
077840b551f57949ffc2b850fd94141a7961259f6c59df779e76fb15d906ae2d

SHA512
c96d084fa811d2c2593ec4affba85afc8c654d5970046ddea21e2a11d20fb3d0d58516e942fa3ac3883c546d10033139d9d52f9e67df0920e4d22029494eb675

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\java.exe

Filesize
333KB

MD5
ca3f220b5c3c44b3aa6d56fa706f820a

SHA1
7b14c9d05c8dfd31ecbae58bd65a42d2cae7a7fa

SHA256
5e7b4850ed13b5e43957d505ecd021eb30b65fafad17438bf1bbcdfd502e5622

SHA512
fd5db5c931e400b46b57ea26acd83fab6b1d9c4ff491b32d3e8ccc8c99b23909f8badc1898b6f50e66412f732a8fa78e0831812be0f84eb5556aee250922193e

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe

Filesize
142KB

MD5
253b6a7905e72debc477f04d5bb4cfb6

SHA1
8b2effc157a4bc3a5e362cc95fcad3077207b14f

SHA256
e995862ee155f27345c1541c50f2137b1f433cf382ca0f57d7d3ed3265def6e0

SHA512
33fc2040ba4db7ec5adf0fe403c7e0f20f32003da0db8b0152bd472b8042d70574cccfa112dea770a7f9fad838292a292153b240893faa55f7578313cb2912b9

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe

Filesize
333KB

MD5
9b1e217ce6dc969667ef5857e64a75f5

SHA1
9b75ac8fbd6fe495e69971c8fe2dec3f1c87850b

SHA256
3bbd8bea1a1d9619f972f7a9292600806d98bbe678b8256000796171772abc99

SHA512
cb6ff8d42724ebc0fd18fa806a394451e70fd76c71a62c6b1200db4be859df6424b9de4d3874034a6a5c3f92ddc9e24c522a6a43cbb27b1047f88dbdf2223256

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe

Filesize
540KB

MD5
a9366d49c1c8254916875ddd91f7a548

SHA1
3b2c182c9ea20d3fea699ab2a53bb4651688f199

SHA256
72f56b521bc48984e7c84c7a0e4d8d282bdac40b517d3f4a9a931eb5814980a6

SHA512
2434aef10535a65d21cb34257721113b05a72cedf9e1d4568eafa523063bf8e9be49efc47a83585a104288ccd7dfe6e448f8109fabd227b00ea267169173c5cd

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe

Filesize
195KB

MD5
99ccab4131ff3411ee0ea602a8c66d95

SHA1
15f8ef9fe73d859f8b9551cb1ec295f0653c308c

SHA256
3202714dbe62d938d29f4ffe9478bf74455483e25ba8ace0e5dca408ae6db73b

SHA512
5ca54c84985c671233c4ec88f31b33bb7e93431588bc2c351903a9d07207c8e5e2053c34f4987a76acce6ac7e76927c0c1e484e85498714e1a4b272cf27acdbd

Download Submit
C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe

Filesize
138KB

MD5
3d9547f0c943de17ad1b116e39962dd4

SHA1
6159baec94219db9f2c70197b08dade3ba5a6764

SHA256
626416846cebfacac873f367bd3a2fa0eb90b4f7b84878f4104d5e21a3ce8ca6

SHA512
f5f7e560a3a502a429f09ee0b339432644cd0e7d72871923bbd1b9836e5225f68b2982198206ab81fe1473075207f6e327c3c6353467290a75d12de1dea28045

Download Submit
C:\Program Files\Java\jre-1.8\bin\java.exe

Filesize
333KB

MD5
e5db764b763ef3496add03af97539a67

SHA1
4cc78706ad6e3999e39bbeb66b3c72868887f64d

SHA256
de944c395dc7d02087b4d9cd110972d1a69847601d1b12b50b1f5cc612bc5697

SHA512
5eac29ee0586a6df6ad3e4bd75d7b203a384f51a5e78d7dcace6cf400242b1426b67e1891926a625e4e9a03156b03a6ee647b11dfe9093c009787be2d1df2b71

Download Submit
C:\Program Files\Java\jre-1.8\bin\javacpl.exe

Filesize
142KB

MD5
55e398d581d06b736b4a6a8e0701bedf

SHA1
7d18b72c6bb359271469e311ba588376b21270ae

SHA256
e5118d9df7d6a5886f4377652a3a326adae1fa30baaa188d655e550b7ca9ae5e

SHA512
93487b7b3e0e29692f04d800f210dfed9b54e25b5a2689cd4428ca5402bc653fce1769de88ead304ab15bdd7053a6869712cf3927ca9e4a7f7b8097f25524f7c

Download Submit
C:\Program Files\Java\jre-1.8\bin\javaw.exe

Filesize
333KB

MD5
8d1cd84f40fb6c498823030cd3e27fb4

SHA1
fed753705ff0b43f437e740c494c6eba75fcca40

SHA256
31db84d371084d6d712c5ec18080b57fafb12545366267c12584de5a8c821c7f

SHA512
20ed8431e4af1bf95e47fb0fea95a095685feba91d0098bbf0f61d8c0b609ebc61dc58a885d6559b6fd94e95beb2cb46c9bb94799ab46f9b3f9a8504c9981fb1

Download Submit
C:\Program Files\Java\jre-1.8\bin\javaws.exe

Filesize
540KB

MD5
7e2f8cbd872412c32fac8dd3a3bc8a0d

SHA1
675511434984051d832e3c4de955e20da88bea65

SHA256
b5fb797afb3b43084904590a9a85f2010f8362648c46ef84c98f634338b08aa7

SHA512
c2b9b43dc89deed4cf9e92ecb80b88852923adbb31b3593f155124bb1b5cbc207c36badaa4f01ceb0eb324c567895540562e5910d8a36d249aa1c62924d00031

Download Submit
C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe

Filesize
195KB

MD5
2ccca07a630f925a3022ec1041ddceb5

SHA1
6c9a85c9523c826cf3c5820fb347ba91f53ad0a2

SHA256
6a1a28b80f6ed073a8ac34eee93cf08ac1b184f78919080b1b4de972cc402737

SHA512
1c556a8ab8df5f5311c263db9e6873862b23fb59151da5dda274a01444e330d4d8818cd12d07c8c95c149ef77035746383e50e06bb072a86a5c22c635e98b8a7

Download Submit
C:\Program Files\Java\jre-1.8\bin\ssvagent.exe

Filesize
138KB

MD5
71a12ab8b08b652d7ef2d5713680d924

SHA1
79a5edc196fe53b4c92b35e661b95475cb21d81d

SHA256
d31b0ed91ce41a912dd969dedaa0226503fb35c0295343fe0d936507d7372fbe

SHA512
3b13f4355acc4c69a7b845e057aa298ad07d889a31c9447bb4a2ecdebf5d0396a0e22883a5cec9230959dbf281f44a32d6498ea3b54233ed5bd58eb054122fed

Download Submit
C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe

Filesize
4.3MB

MD5
782de296243158678d07cef824e66202

SHA1
cb86e1ccff9c31b19c55cef7cee11ec4b1ba5e38

SHA256
feee599696cbad5df8c7407ee17493ca5c443e872718ab2e7f46d6f6d17eaa6c

SHA512
f268323b319fbc81d17b45775b2f1828b6a8bbc3642cfe9eed5c55301fbb77f46096f2f05d769776e7cfae5bb2e16aa69631d00ad5df06ff861cbcda82051ca5

Download Submit
C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe

Filesize
4.3MB

MD5
683f36669bcdf5dc4d17b1d7a582aea1

SHA1
34856375e691c26110f591a7004e59e87147e49d

SHA256
ac40f2e61e324c2da7bff81d806ca0ec4a2c89b806a2f3cb44de0d15f8dfe7a5

SHA512
94390f7dbc2d032d2c731386746a7ad11b226dbcb4d40ad7a2d04bb00a468df2bd64c374e623c0164d8962428536dd42893faaccf72906c5e673103480f7fbe0

Download Submit
C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe

Filesize
275KB

MD5
3ce4ea368b831adce9257daeb310f443

SHA1
7b9e16050827206465b1742c4166c7efd92ad429

SHA256
b86fdf5de7875fb1f5c6e4269efda938f01d25801a12ca69b093cfce40a5b79f

SHA512
cef32754b048b3fdf29242c56ce3b6003d5b394453e62396754a22af66241cd07224fce38aa623ca0ecb402fea98e1692e9c2ab717fa6047ee261ee7d58856b1

Download Submit
C:\Program Files\Microsoft Office\root\Client\AppVLP.exe

Filesize
588KB

MD5
4573b336a18921b3731ebb180a542ccf

SHA1
c240428b65373905125db4449f3af1929716dd92

SHA256
4c41d0a5325268368e6f1bfa9d615ede7b380da8d72a1fac5a8e306f67d2755f

SHA512
9920f6eafa5023efabefe533b80061922dc143abd6f86aca72140ca21e0b2848d7f7f0a3502ec2fbbf34b04f2f80f8695617de34940b0e1ad5c6b7f14fc5560d

Download Submit
C:\Program Files\Microsoft Office\root\Integration\Integrator.exe

Filesize
6.8MB

MD5
99aa6efe970e269327ea17c09edee6ef

SHA1
2ef5c93d13a9663be17faee0bba92fa434db0404

SHA256
7d4dc4a268ef0bbbe0922e3152a027bef96935247c4408bddbda7c07b093a381

SHA512
80670e9a2d18e0554a41403c57828ec129ce3105f383853c4b633e2a56b8ff82464bf5c2cac425aa747aaf1f0ecf0778df88a4025f467609a55209a1f28e6cfb

Download Submit
C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe

Filesize
100KB

MD5
223da2712ac3d592326f0a5c297b4c18

SHA1
c0f96412c4bc87ef8559f7eb49fcc23e624a7c85

SHA256
9b54eaf4a1f3e20c6ac2a694879046aa944d9ff93a5c78794de42b4ddb183e96

SHA512
74c6b03d599490360f23ae16b924507839e21b85bd9335f0b7b63f1d3837e6813b02bcf22b5af6ad8f306a3533e7820f51232bf8dc16e3849bc9a868fb8541ec

Download Submit
C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe

Filesize
449KB

MD5
6b417e8995c19e6bcf9fd29fb7e9b41a

SHA1
b31c847a2aabbbddf2d27c336bac4807415db6bc

SHA256
f12771d43e4a5a355a065c8310ccbc2eaafaedf89bbf50f30adee82b66a822bc

SHA512
48af6b3fe891bce0d502626d0e3922f1a236c8a3c80fb2e81c54b54b21830bfd2910ab39475f42e1fccbe5210c26040299727458cf5cce5970a5a2f87ed393bc

Download Submit
C:\Program Files\Microsoft Office\root\Office16\PerfBoost.exe

Filesize
877KB

MD5
395dc97cb21cc2e2e908d655f22b036d

SHA1
62dc92610701f2df312bcab1dfd7fb76dce75c52

SHA256
7777adc94744d1c7eb910f6031b3e7071ce1e14ce02347d0afb3feb819f0b5ae

SHA512
204d594bc74a8035d01d674ef0ee54eaf98cc05731c64d13449b07193bbb3e1c5161f664c5da13d38c259cae06d204988b93863a50f011393847e75bf53f4746

Download Submit
C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe

Filesize
189KB

MD5
7ce63767418308137626d648565d807a

SHA1
1f96e11fd6dc45603a063a65fbed078d7e07b8c7

SHA256
6debe79dc504f3fbd0b68e7f67c13b94910c1100ae31cb4d90f14c4562210548

SHA512
2ae03210a1aa2d6fd716de3b047e92025f865b8f493baad9d90387ae665887bb83633d000ed78a81645f452777da029b61e775370ad5da2260d9bb18b1a70369

Download Submit
C:\Program Files\Microsoft Office\root\Office16\msoadfsb.exe

Filesize
2.0MB

MD5
2e59ced72391a2f268275078c8f77dca

SHA1
76ef5462cccd20afb1d4dc19666c30212300473e

SHA256
b48fb337419da8ddf687f9885c2c723f4295054b90f53e9d28372fbcc9dffbcb

SHA512
9129b3ce88bdf3b715a69347797fff8aea7f9cd06b4f3f84dea06ab1218a310ef8476b2b558ef1ed945a1fd4ea48e20b9eb1ad83ba43bfb41c3a939d9d5ba20b

Download Submit
C:\Program Files\Microsoft Office\root\Office16\msoasb.exe

Filesize
341KB

MD5
795ed7385a79634dc14a11069cda54ac

SHA1
15843e06f2b7f2464f162381cbaeba600e3a2dae

SHA256
c85e1741dec30888e9262d9572a971680e7f20a26d5d9de6677a0e83b692a71c

SHA512
a24e8523cf6089e78f7f0b2bd5dc521c5941be38ebfe30783c9f4756f1244d8c217d84ca46257c4467369b1c7a5217528cd5f82c51b2b7f0e02830e49020ae80

Download Submit
C:\Program Files\Microsoft Office\root\Office16\msoia.exe

Filesize
6.0MB

MD5
120d80079bbd7e7c0c5d71a186716128

SHA1
4f28ffd518412ab8194b95a35348fd8042734ce2

SHA256
c5a6c48acf5975ebdb56ab21031056efe19ea0920d9084e47675a1cf7d2b2e6f

SHA512
6aa7dd2ce3c9f187eabfdb0482cd9a87402938ad4952bb1b57edc8615f0ecfcaa41b3f866ea7294ff12ea9ec36e4bf79acf997afa678e44e24b794c1837acb2c

Download Submit
C:\Program Files\Microsoft Office\root\Office16\officeappguardwin32.exe

Filesize
596KB

MD5
5a479b8252ca2ca4bbd5d59f7196cf7e

SHA1
b76e9efc3ea84572beaf829034506d5174eb3c4f

SHA256
41c434c9bcf2e2e9ac3b694d41a06291250d90e7f05e00b202be249f6949bf07

SHA512
fa65aa910f1ed3bca74584740f7e1943cf6866322cfaaf91c7b8c1251c44939451111a321d29565687540008e2f24d0835857dbce3f17f2def1a217c658b9e7a

Download Submit
C:\Program Files\Microsoft Office\root\Office16\protocolhandler.exe

Filesize
6.4MB

MD5
8be4b72f1568fdea7f2a6ac9c421de74

SHA1
a2eaf343d4fc7eed423e8c9bdcaf447e2d84222e

SHA256
bb99d083a717cd9709d6b694e77678790b9b95ce77cae765c00d6fedfbd3c1b4

SHA512
818e8d4cd8e5de97c60cf3621cb5ee03f6f5976648838d01b97a6064a988490f2b7da15f82bf92bd509d54743b7c556d0d5440b72c9d5fedef3236d60cf468d1

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe

Filesize
2.0MB

MD5
33a8e1fddf061de5db2d1db49b800495

SHA1
9185f84c978916fc70c11e6521a494d3eb363b54

SHA256
1aeaf1a73bd62aba34bae85c7b0f4c8545333ff3acb4c9776a783d55e46b6e97

SHA512
9fcc0733f424140636a1ba2580df5dea3c34ed6f0b5955968baa1c2bef899df53fa373d88b92a29484e040bea117e145180a318fc834cbcd4123e1728e454cf1

Download Submit
C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe

Filesize
222KB

MD5
665110f58c49e54f2e261780d2f06a3a

SHA1
699e44dcc540dcd3301eb40b7ceac1cca9ec9886

SHA256
9487a4e0cc9eea56925d2929429e70085bea76bc4cdb3ddbb9515ae63dbde371

SHA512
24c401b624325053f673af4628d032b0085ae4de3a1408defd499e8a7be3edecc7c549b481b7f680a726ee28ad91dea3bcd14c767573f0b913c6f3ff65ec7596

Download Submit
C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\ohub32.exe

Filesize
2.0MB

MD5
d297b2198b4d74d681b1ba40677755ad

SHA1
b5db506c0512db46d19bc86e529f0c4b8d48bd5e

SHA256
d2d51a451df64edfad6788f5ea9984ef025e871fa8937f1d231865b94b4145c9

SHA512
aff7f41f63961a9772d62721bcd42a2556cea0f2edcd684df7ed8f1ae82cab3198da90696d32b447c63808f49540b83a1c0b39a6ee19d6e5fad96159b58a0045

Download Submit
C:\Program Files\Mozilla Firefox\crashreporter.exe

Filesize
324KB

MD5
c5dbaac050b6c9e42e46f542b8ade9eb

SHA1
0d33172d32b5d7f4c7d9dab31787d5bfd777782a

SHA256
a34e41c3a01993d749fc223e5d990800c10b7e30db85cd72a9fb59606cd53bda

SHA512
08a9266798576fbb5185af0f79e3dd388f8bebec1dcf4843a1dc9c45cb7405ce28a19f8e1dada687f2886ea8cdec87bf68d1798ef3635edad9586019558f0619

Download Submit
C:\Program Files\Mozilla Firefox\default-browser-agent.exe

Filesize
803KB

MD5
92f0c41099ae1c2cf9481105f6e4eead

SHA1
420b9674c8445cf43b4895c649bf1c69efb09ca1

SHA256
c52d926fbacced26c4e26c3709afc3926d90c9865f0c4ca0c048ef14153a4ca5

SHA512
4655300cf021e6ee86902e22bc920f2561075a74148e254f39eebe915c1a793eb2573b3abcd47abb85b77eef321cca710c9bdca123327e82deaed93f58ebd4e6

Download Submit
C:\Program Files\Mozilla Firefox\firefox.exe

Filesize
777KB

MD5
e3c2d8a152ae2b8c902fb98691b361ac

SHA1
bc3371cda30ecaf6d3fd5654a64f1e3a25975669

SHA256
90684a43cf02fb7c552269d356078b72f8893f35320f1424437d522ba253d615

SHA512
87731cfe1a9ec2724314a53691f5b887ee8a14cf98f24761c1cfd1afb6e1f35ac724d4e61cddd83848d4c83f27715c4e9e06fd95d0e0f967da52491095fcd8e7

Download Submit
C:\Program Files\Mozilla Firefox\maintenanceservice.exe

Filesize
301KB

MD5
792fe347a5fd7febee2239fac849fc46

SHA1
31dc9c1db62c0acc3e5237dc6590267dea720741

SHA256
acd0bd992ac3bf5e78e19f16f072983188b5f1ba2101275e05b66b2e1270e4e9

SHA512
aac68d59f3100535b33aa26c1b406fc094412f294f14ca24bbe3d256da9f77279caf5bf9f08aee86369ccf5936149e56ddf27005fa54130538e59020c8318115

Download Submit
C:\Program Files\Mozilla Firefox\minidump-analyzer.exe

Filesize
829KB

MD5
2691256d7827718ec76e41d3856d9094

SHA1
e0cc764b6d4c210c547a0a95de8b0e56a04173c8

SHA256
bbedec2688984aebead76555022e709b988ffa4e6eb1bef07cc055f27fa545d5

SHA512
f41ab392517085d72e4176bb758aba1bf2ed20823930f0fda87a8bbd4f7c714717e37ba65e740bab85969f8728e8fb32d52f52aab3d139b74a13bd3134c4894a

Download Submit
C:\Program Files\Mozilla Firefox\pingsender.exe

Filesize
121KB

MD5
82c0419afbeb275f916e7f3a789dbedf

SHA1
baf4c4c12d617191bf95d0088cba3864b94492b4

SHA256
5575c2dae5bcafc0bfa9b5fc2e002525b81ae33ba3b21c95ea61c49119a2a590

SHA512
5f6bfc39a735b21ceb9a33b78ff91a27849dfc34eed4635c887209b6b6bf8f6c47895e0f8e5438d38da2431127ef872dad39b316b063c5d59d407d8ebf6809c1

Download Submit
C:\Program Files\Mozilla Firefox\plugin-container.exe

Filesize
392KB

MD5
12c7cce1b36c5f9d72d1b74ddbce1b56

SHA1
5006479448f129678a11271dc3cc34d508e2453e

SHA256
09585006bd404cbcd1fb60647bb49818dc5374dc8fc6db5d5eff0fb24c09bf27

SHA512
091b646e25d89f810a297f48796b3caaecc8f9c006a99f8ecf6f2664f4498f6f71ad7f375213b7ce9d29468a8fed7c869dddfba71f1b8b5f7e2ab864ab185f00

Download Submit
C:\Program Files\Mozilla Firefox\updater.exe

Filesize
465KB

MD5
cc2fe8101b769130751c53453f0e89e3

SHA1
b5b7af93959e22584f7e94640c7dc33dea46b169

SHA256
ea2db74fa835fe0eed2a033c2778856664b9588870b827b71bd6db9da14b9568

SHA512
a0290d9bc8287bf4b9c689d556ffe935e94fa1f95e2a7dd17a6557d4eadc66866d496c821e575c299b5eb90c8c34b065e593bc2c1665f57e7b71d4ccd3de7e4a

Download Submit
C:\Program Files\dotnet\dotnet.exe

Filesize
189KB

MD5
e823c3ea95ee89ad6f8acbe06a0f222c

SHA1
4f4730da768a86b0c1ef79a249ab8db847aff02b

SHA256
4204983b6820198525571f8d75ca3981bf041295c6c75ef39a895fb6f6540b6f

SHA512
bf6ebb27b6bef9ec11aad07fa231af9cff76467e76c3482b5808135b2d2a2c1bb7a7c5d3454d342560410aaaa4cd40a3260c9f940d49ee027248debc71273e46

Download Submit
memory/972-9-0x00000208D1E90000-0x00000208D1E95000-memory.dmp

Filesize
20KB

Download
memory/972-0-0x00000208D1EA0000-0x00000208D1EA4000-memory.dmp

Filesize
16KB

Download
memory/972-6-0x00000208D1E90000-0x00000208D1E95000-memory.dmp

Filesize
20KB

Download
memory/972-11-0x00000208D1EA0000-0x00000208D1EA4000-memory.dmp

Filesize
16KB

Download
memory/972-3-0x00000208D0580000-0x00000208D0587000-memory.dmp

Filesize
28KB

Download
memory/972-4-0x00000208D1E90000-0x00000208D1E95000-memory.dmp

Filesize
20KB

Download
memory/5008-388-0x00000252AAE20000-0x00000252AAE25000-memory.dmp

Filesize
20KB

Download
memory/5008-384-0x00000252AAE30000-0x00000252AAE34000-memory.dmp

Filesize
16KB

Download
memory/5008-381-0x00000252AAE20000-0x00000252AAE25000-memory.dmp

Filesize
20KB

Download
memory/5008-368-0x00000252AAE20000-0x00000252AAE25000-memory.dmp

Filesize
20KB

Download
memory/5008-373-0x00000252AAE20000-0x00000252AAE25000-memory.dmp

Filesize
20KB

Download