Malware Analysis Report

2024-09-23 07:03

Sample ID 240618-t625qa1gnf
Target 2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk
SHA256 e213c6a73787190d2099133276615242f9ddebabd313626b017cf988bf8df05c
Tags
azov persistence ransomware spyware stealer wiper
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

e213c6a73787190d2099133276615242f9ddebabd313626b017cf988bf8df05c

Threat Level: Known bad

The file 2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk was found to be: Known bad.

Malicious Activity Summary

azov persistence ransomware spyware stealer wiper

Azov

Renames multiple (8351) files with added filename extension

Reads user/profile data of web browsers

Drops startup file

Adds Run key to start application

Enumerates connected drives

Drops file in Program Files directory

Unsigned PE

Suspicious use of WriteProcessMemory

Suspicious behavior: EnumeratesProcesses

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Reported

2024-06-18 16:41

Signatures

Unsigned PE

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-06-18 16:41

Reported

2024-06-18 16:43

Platform

win10v2004-20240508-en

Max time kernel

141s

Max time network

53s

Command Line

"C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe"

Signatures

Azov

ransomware wiper azov

Renames multiple (8351) files with added filename extension

ransomware

Drops startup file

Description Indicator Process Target
File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A

Reads user/profile data of web browsers

spyware stealer

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bandera = "C:\\ProgramData\\rdpclient.exe" C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\T: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\Y: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\I: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\A: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\B: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\G: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\W: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\R: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\J: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\E: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\P: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\Q: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\Z: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\H: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\K: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\U: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\X: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\O: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\S: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\V: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\L: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\M: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened (read-only) \??\N: C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files\WindowsApps\Microsoft.NET.Native.Framework.1.7_1.7.25531.0_x64__8wekyb3d8bbwe\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-recent-files\js\nls\ru-ru\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\search-summary\js\nls\sl-sl\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files (x86)\Common Files\System\it-IT\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_1.1911.21713.0_x64__8wekyb3d8bbwe\CortanaApp.ProjectedApi.xml C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageAppList.targetsize-80_contrast-black.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\Assets\Images\Stickers\Thumbnails\Sticker_Icon_Gravel.jpg C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\createpdfupsell-app\js\nls\nb-no\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\mip.exe C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\ProPlus2019R_Trial2-ul-oob.xrm-ms C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\Assets\contrast-white\MixedRealityPortalAppList.targetsize-48_altform-unplated_contrast-white.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WebpImageExtension_1.0.22753.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppList.targetsize-24_altform-unplated_contrast-white.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Work\contrast-white\MedTile.scale-200.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\nb-no\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.53.77.0_x64__kzf8qxf38zg5c\resources\strings\LocalizedStrings_lt.json C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_x64__8wekyb3d8bbwe\Assets\SecondaryTiles\Car\LTR\contrast-black\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsMaps_5.1906.1972.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\SecondaryTiles\Work\contrast-white\MedTile.scale-100.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files\Microsoft Office\root\Office16\ODBC Drivers\Salesforce\lib\OpenSSL64.DllA\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MixedReality.Portal_2000.19081.1301.0_x64__8wekyb3d8bbwe\AppxSignature.p7x C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files\WindowsPowerShell\Modules\Microsoft.PowerShell.Operation.Validation\1.0.1\Diagnostics\Comprehensive\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\selection-actions2x.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\ResiliencyLinks\Trust Protection Lists\Mu\Fingerprinting.DATA C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.Windows.Photos_2019.19071.12548.0_neutral_split.scale-100_8wekyb3d8bbwe\AppxBlockMap.xml C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\pl-PL\View3d\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.19071.19011.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppList.targetsize-36_contrast-black.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\files\dev\nls\en-gb\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\Fonts\private\REFSPCL.TTF C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-white\HxMailAppList.targetsize-48_altform-unplated.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.targetsize-256_altform-lightunplated.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.ScreenSketch_10.1907.2471.0_neutral_split.scale-125_8wekyb3d8bbwe\AppxBlockMap.xml C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.ScreenSketch_10.1907.2471.0_x64__8wekyb3d8bbwe\Assets\ScreenSketchSquare44x44Logo.targetsize-80_altform-lightunplated.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\LinkedInboxWideTile.scale-100.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Licenses16\O365HomePremR_Subscription4-ppd.xrm-ms C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-white\AppPackageMedTile.scale-200_contrast-white.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1906.2182.0_x64__8wekyb3d8bbwe\Assets\AlarmsAppList.contrast-white_targetsize-72.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\fss\img\themes\dark\core_icons_fw.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.Getstarted_8.2.22942.0_x64__8wekyb3d8bbwe\Assets\GetStartedAppList.targetsize-64_contrast-black.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\file_types\s_filetype_psd.svg C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\multi-tab-file-view-2x.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\signatures\js\nls\en-gb\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\Office16\ExcelInterProviderRanker.bin C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\DeletedAllUserPackages\Microsoft.DesktopAppInstaller_1.0.30251.0_neutral_split.scale-100_8wekyb3d8bbwe\Assets\contrast-black\AppPackageWideTile.scale-100_contrast-black.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\Java\jre-1.8\lib\cmm\PYCC.pf C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MSPaint_6.1907.29027.0_x64__8wekyb3d8bbwe\CommunityInterop.winmd C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\scan-files\js\nls\ru-ru\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\Google\Chrome\Application\110.0.5481.104\Locales\it.pak C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\Java\jdk-1.8\jre\bin\server\Xusage.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\WeatherIcons\30x30\28.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files\WindowsApps\Microsoft.Microsoft3DViewer_6.1908.2042.0_x64__8wekyb3d8bbwe\Common.View.UWP\Strings\sw-KE\View3d\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_x64__8wekyb3d8bbwe\Assets\CalculatorAppList.contrast-black_targetsize-96.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsFeedbackHub_1.1907.3152.0_x64__8wekyb3d8bbwe\microsoft.system.package.metadata\resources.ff33ee1b.pri C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\my-computer\js\nls\en-il\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File created C:\Program Files\VideoLAN\VLC\lua\http\css\ui-lightness\images\RESTORE_FILES.txt C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.BingWeather_4.25.20211.0_x64__8wekyb3d8bbwe\Assets\AppTiles\contrast-white\Weather_LogoSmall.targetsize-32.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\PlatformCapabilities\PowerPointCapabilities.json C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\digsig\js\nls\sv-se\ui-strings.js C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\tracked-send\images\adc_logo.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\Common Files\microsoft shared\ink\fsdefinitions\main.xml C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.0.30251.0_x64__8wekyb3d8bbwe\Assets\contrast-black\AppPackageLargeTile.scale-400_contrast-black.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_18.1903.1152.0_x64__8wekyb3d8bbwe\images\FilePdf32x32.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.8204.0_x64__8wekyb3d8bbwe\Win10\MicrosoftSolitaireAppList.targetsize-256_altform-unplated_contrast-black_devicefamily-colorfulunplated.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1906.55.0_neutral_split.scale-100_8wekyb3d8bbwe\resources.pri C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe\images\contrast-black\HxA-Exchange.scale-100.png C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A
File opened for modification C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\images\themes\dark\back-arrow-down.svg C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe N/A

Processes

C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe

"C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe"

C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-18_d9405513b67a7bd4cf23bebb1505315a_ryuk.exe --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=124.0.6367.202 --initial-client-data=0x274,0x278,0x27c,0x250,0x284,0x7ff66fc796b8,0x7ff66fc796c4,0x7ff66fc796d0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --force-first-run

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff8954eab58,0x7ff8954eab68,0x7ff8954eab78

Network

Files

memory/972-0-0x00000208D1EA0000-0x00000208D1EA4000-memory.dmp

memory/972-4-0x00000208D1E90000-0x00000208D1E95000-memory.dmp

memory/972-3-0x00000208D0580000-0x00000208D0587000-memory.dmp

memory/972-11-0x00000208D1EA0000-0x00000208D1EA4000-memory.dmp

memory/972-6-0x00000208D1E90000-0x00000208D1E95000-memory.dmp

memory/972-9-0x00000208D1E90000-0x00000208D1E95000-memory.dmp

C:\Program Files\7-Zip\Lang\RESTORE_FILES.txt

MD5 78ede93114e65f9160fd03d3357c56e6
SHA1 88d531b101e57655f1d0d26c6b3257aa2468d460
SHA256 c97412fbf88da8f91099a52888dea4c3f222cd95af3e681e3271cbca8b6b7bb5
SHA512 074a4c741273902ccacb6f573b96d8accedb2ee405dbd04350cdbf54d180c1fd577a4e90c2aae26bf72f3782403f4494db6e3501a04cfd9d7d81a6bc14884b9d

memory/5008-373-0x00000252AAE20000-0x00000252AAE25000-memory.dmp

memory/5008-368-0x00000252AAE20000-0x00000252AAE25000-memory.dmp

memory/5008-381-0x00000252AAE20000-0x00000252AAE25000-memory.dmp

memory/5008-384-0x00000252AAE30000-0x00000252AAE34000-memory.dmp

memory/5008-388-0x00000252AAE20000-0x00000252AAE25000-memory.dmp

C:\Program Files\Common Files\microsoft shared\ClickToRun\appvcleaner.exe

MD5 43bdb8ebb4c55b5272fa288e87be59d7
SHA1 d4246131021e7fa0e376789a0e382311b8cbe33f
SHA256 4e4c7447869e668bf70b21cd5379ffdfb7373eeb2e654fc3dd091c6230fe73b1
SHA512 41ab19b2e5faa4815feb5e67d36883488b2c19d5d4ce9e98084ce80befeb2060c856fead3c2650722700955d258575536bd7bb6f2832e1a6827ea04f45c828b9

C:\Program Files\7-Zip\7-zip.chm.azov

MD5 f807d2eb86b45876ba5c87c3047b5cdf
SHA1 a099578b3866fbfda2d9c226f54c6b5a3a7cbd47
SHA256 11efc43cc4770f708943c66cc721e3138a888d52a766248a333de857c1ca42a1
SHA512 4bece7c6cee3d9603ed9d2d77d3f59f61a4e091faa7aa039fb6ebba73c257fde35f90c5694219d4f0a852b34101d052f78687de4027ac8e61ffe59cba14580ce

C:\Program Files\7-Zip\Lang\lv.txt.azov

MD5 ed1e257d6e382d1abab8d6fa28172a17
SHA1 55b86afbfa1a40fc427ee7dc8f9ead52b310beb2
SHA256 a280f019ecf00d238f29c2b292e96f29f4b04c5ea3d4267a2daf1c14828668fa
SHA512 96864acc9031c2d84b8e68854e9c0dcaac2af3d632626a21801a3df4f8c15033fe71464f3a3ac4babba700b11300a890e711c9a083fe7b8cbc45a185d739826a

C:\Program Files\7-Zip\Lang\lt.txt.azov

MD5 fbb4a29122fb0a8d812572d2e3331d0d
SHA1 8e4a08418741298fb8b2b753b3d8637669f21e62
SHA256 2d85fd7aca74acba8d34918161c7cae616c5ef80cbda0b9d9f0c7fdbc2b382ba
SHA512 06f8d505b5416d48e344f92b9fb11a4acc80e45123be11d99033ce6de269a06669c8971eb5f99360c6a3db361cc59e0adb1e9e82027967201ed7b32fef945006

C:\Program Files\7-Zip\Lang\lij.txt.azov

MD5 c0d060971f9b5174c1ec18b37d0d85f9
SHA1 b8c471e57d53caada34ee81d935c61938addfb78
SHA256 026eda91e8b0fa9b4b37127967b6ef1bb431bbcb0b4c3879c24407ed8487a358
SHA512 457e73ca81f50eecda8d1457442627ebd96d8528c4e2db92353c8ae47a698d96b446a1f68b1c8e0b0447375accdbfd79bdda910f22d99ebbe67a518b7d7e2829

C:\Program Files\7-Zip\Lang\ky.txt.azov

MD5 c363b38ab1299860e633a1495398e0cb
SHA1 2330626f01d68a5cc263a949558ed4c8df3f5769
SHA256 09ea199a260c3d6705935695356464d60f6a981c05f7f78f29a88f20e1017b0b
SHA512 db6c07151337632ee4afca2428583e78fd86d462b642ab2d1f436324eeca87462018967b6f62cdc83aeef9fc60337fed4744f780e9b944353eff75e4949d27e0

C:\Program Files\7-Zip\Lang\ku.txt.azov

MD5 141f8d6b49c128a687ad7ad0337c8c01
SHA1 12fd3f2ae455a0d0e332144c1b835ec9c286a47c
SHA256 7d2285a49298a3286c8e796f211005317164cf99705b09af38cd9775210f1003
SHA512 16197c02a00b84f8e951be023eb64a922393fe16c07e6876a2a3f72f6cfbaabe41bca37c728b74ff78262112dd75445c4189058c97cab2a60e9a1f3ee7ebde48

C:\Program Files\7-Zip\Lang\ku-ckb.txt.azov

MD5 ed27a70013f4feb74fe3bcfd283aa2e4
SHA1 bd1dcb75e7f134f3cd23c36e17a7dd558cdc72e7
SHA256 5fc7612b34a8ba5d7618635f08e65f86776eccda5f11bd397dbb028d45a43c7b
SHA512 e379fd3d996ca844c139b3ea7a556a30494c8b9442546850577ef3cf4ad18c057bc24b9236440b36e26cb8e93cf76de1ac74745d3e3aff17043b2ad60c09dd27

C:\Program Files\7-Zip\Lang\ko.txt.azov

MD5 71e87f53906bfe83ad726fd565153594
SHA1 8cf72b0bdd061582f4eb617adaf71712259ad6e5
SHA256 f150b37af097ef5d1ba203c95ff13ea915161f66bb9654c7a3aed9ef05bdd00e
SHA512 2ff5095fa04b5c0f3fdbef45308a243a642b6c9a985a8ab1d7c690305366912e91708a6a4b14c05cb2c8050e54c23c3cf2f3369c52f6edb99eb998ed3de6dbc1

C:\Program Files\7-Zip\Lang\kk.txt.azov

MD5 e11f4162135cb5d2d2963946abc29166
SHA1 3a0afc0a3f96e42331719ca6e299f8494c51d066
SHA256 1da6611a55f931c6a15ad5089d4d2441f7920db1b1098b2af494ce3191ceaf93
SHA512 0d4cb968deb7c4dec37f4ea1d90feecb5380170ad53f88488fe96be115dbb2833b17b736d9dc69286282cc0b32ebd0c06b2950223a7321cca4af80964980c317

C:\Program Files\7-Zip\Lang\kab.txt.azov

MD5 6d22ab764fee16d8969376c38d218f5f
SHA1 cd99ac67b2ef1620c1ea00436900c741dedc3ad5
SHA256 0d9064341579f744a3369d0d9af7133870b83b98337e7e7720cdbc7b79677f2a
SHA512 f88a66490b9e7907751e665fc4ed3858a1fee546671d2eed5b61cdbde3fa3883fbf262b1e9abc1b0b6f55241c730029d885d0d173087f69ccb221224cd73b5fd

C:\Program Files\7-Zip\Lang\kaa.txt.azov

MD5 b3560b2668a815ffc16f4d266d60d2f2
SHA1 f9baeda293b48053a217d10923cf03b61672ab67
SHA256 8927d6d1dd26abc952a8f9bf80a995838375380008c153ba7bbcfa0844d9f4aa
SHA512 f7eb4433aa7817f68ccf643496d5656da127ddc5d4c6f742a5901c5a6573b00be88893590ac7e675ea6003a6990ac11a1e8ab8029c47460f7fe1d84e23ad1511

C:\Program Files\7-Zip\Lang\ka.txt.azov

MD5 279d914716b74c44e61df4affb619767
SHA1 1f3209779d964a1207dc91eb06b5e1fbf9b75b14
SHA256 0dd842eca36d9b680a919295ae7b6a0c6bbc59738b8715a3f5bd5e8667277c44
SHA512 058a8b5ada1da08202653e9e0ae2a3c3c28e6ba961d53bee20cdee3021d088310a84d2def4b7c34b06e177b6610499efb78a2295d42394eb5c0b1831b401f51f

C:\Program Files\7-Zip\Lang\ja.txt.azov

MD5 33e25019841d17224ca698451770282f
SHA1 e4f7994a4559fe83fca8ce2bd1e32be0bf2cdd3e
SHA256 7190824ca998af8620070dc5e821dbfc4afb1c8ff951663900a9992a15b6bf95
SHA512 9b555aee6dad570773b15a1759cc771a6302363368c31aa2aa607cfe45e8ec758621c024f4a30809a0ba5d54495544e3b984a31dad913da5a964a976f0de6b57

C:\Program Files\7-Zip\Lang\it.txt.azov

MD5 3b6f25c0cf4c1eb3198646af99b6f3b6
SHA1 4f5810bdadccaeb2f56ad8b41ff521723c3b5ca7
SHA256 54d86a6ddd19a89e90b292a649f7df3b474cb22dbcd441e1d26898238fdc8737
SHA512 90007bf39a89a983325a89b48ed8c9fdc8ba818d04aef3620c5ad7c1dde605b3195d7d83427a80e106d31bdc53534f3af68888f477ad3a77ce7b3b75e25870d9

C:\Program Files\7-Zip\Lang\is.txt.azov

MD5 1a2cea110e78eb0edc0c39658823a012
SHA1 c1108641980408832601e4820db495bdae90aa98
SHA256 44bee6746b1e1dc01a4d319114d3d2b5083a10b37427386931598e09edc98ed0
SHA512 3a8da409c1ee15c1ed4be2c8b49da2d0993f126052863f9b38d5d8b7aaadbc1e72cc7f902e6263a8a1ec5bf8dc1a20c9b0cd94ad6a6486c80a187127962d206d

C:\Program Files\7-Zip\Lang\io.txt.azov

MD5 216bae76105c8a75e0fbb69eb9afa2e6
SHA1 6a63aaa2a84efe31be0d1db846f0e4ddd778d79f
SHA256 1d37e24719864a1f5b728be5a32cd34dcc22d0b66d81cab5c4c9afef9444ad99
SHA512 eb7306e3c655d7f1e82b6b5292add0555a7a9e24aeed32c49e6ea67e2b01d42d43c6bdd89bf1b07f10bd3066cc34ed1472f59eee455ed34916de09ed953da0fd

C:\Program Files\7-Zip\Lang\id.txt.azov

MD5 8d75124302f971c2ba7317caade9c748
SHA1 264de729c1e0cf4c221998e40d0d11a6e7c016d6
SHA256 fec84608c8156c7cde9eb45df1656bd4a8efd9fee943005f2cb73b3a48ab1680
SHA512 fa7503a0e8f9ede4bc3d82fb38e2550247861775d93419f6a2b45fe7d6e18c0b15baba40b098bf508f64ab57b8a18b869dcc610cc875477cb084dfa602a33e27

C:\Program Files\7-Zip\Lang\hy.txt.azov

MD5 818cc8669220c0cc7508dffe5b92bc12
SHA1 13b002b5a2e1c4cc3885a77c74b5970bde437994
SHA256 6fbfccf0d2d2477a726d880efd4689d41ae5e5566dfbdd1cfaf60f8f0d14519c
SHA512 4441279e658f114a6ece9bbbf235499885b5b16c754b209bfa30318dc32418ccb633e6bd3674f9182997d020719e886f31b4da75bf851f8550f5d00389005189

C:\Program Files\7-Zip\Lang\hu.txt.azov

MD5 66169ea5bd7a3df168c6fd3729cd96c8
SHA1 29aff83f5eeeb1cad3726540e22f59c74702edd9
SHA256 e03f5212d8849ace32f8b5113f4afa67b976e8b1c03642929fc7d664b9a4a469
SHA512 333e5131bb5f7ca36877030585aec6ef0e39653efe2ff10cd331c7c0dc7f7805f8361ab60576219470701200da1c04318165d2343decbeef74cffacee7ec5bd9

C:\Program Files\7-Zip\Lang\hr.txt.azov

MD5 c05a004fd16c1680d41ec8c82dbc8726
SHA1 08ac3ebb45874ec7c441baa3eb621a868443dc84
SHA256 5255aeab69c84e5954076024583ab5da8bd0581b4fae5a75a78185d05ab522ef
SHA512 8b7ae46fe6a4cb76b1ef768e07c4bdba111f11b00c87871cfeafec399b60bc3fbace959a6a3e7c451b5a789e46a53417af3f8a517ebd707469da7e81d26f67c3

C:\Program Files\7-Zip\Lang\hi.txt.azov

MD5 9f3acd7bbd2aea728f06ff0012162af1
SHA1 f4c60822a1e5ebfeb7a427b09400a81850f3d471
SHA256 2a8a69d4f8743151347653a590c8ae1840aa4d01e1304fef30c242d98159a156
SHA512 c40a8c6117fca2af27d1863a485cc2d0bb37c391f729b90754acd98d4cbadc28aac3ed764e11ce3337067b3d898a31ab1669ad39783ac0251879a30c0d7f8d4a

C:\Program Files\7-Zip\Lang\he.txt.azov

MD5 e1994229f284a5b168c6624f2ef43adf
SHA1 b5bce0c0ac6575282ba64f1bc2d03f178856ce84
SHA256 bb661afa02dba0e6ba5c20133d8c1321a3da2f1659fa2b15eb63b606e615a5d0
SHA512 510db4d5c831449e369b4f8df926a26b80235e2a7ae44a1b5871964f448b42e98264f9dd79e2a9553d696d6ff10d813806b9bdbc5f155abf86866305788f764b

C:\Program Files\7-Zip\Lang\gu.txt.azov

MD5 6036a02246bb0d9625147bb8fed0d2cf
SHA1 7203a1a946f3bf5dc43cf6acd95df8fce3f62eda
SHA256 94c886498fcab668ea5c01725b7353f60028e2118266b799f92cb8aa29bc5f52
SHA512 71ae8daefc3918063c2902aea5368bf0dc09df65d022868b212163682e233f69db91f57c0a7b10a2581fe2aa773ee2f42510473bc243d65dfd533b99fc0d6cfa

C:\Program Files\7-Zip\Lang\gl.txt.azov

MD5 fee5870e6093074dbf06c5f7d25281e5
SHA1 68001e98082d96a00a404b00d6fe7d7e3ba17db5
SHA256 f48439967a14fdb3d98b0fd4f83d6171c37634df28852c166e5a8fe6e9d08c4d
SHA512 ba902492b2b8dc0dd0abd0973f5200434481fcbdd0c503b237dc999837527139e54f0f31efa94142e4d67b5de9a77d26e27edcca27a83029ae01ee4c721d807f

C:\Program Files\7-Zip\Lang\ga.txt.azov

MD5 c0e334ed2807acb4b3dadd9c63b01edc
SHA1 8c4b3e4994e2b3da595b075712e0719d9440dbd2
SHA256 674148adaf4617fa38baf9fb565c267fc89d4b4ef1515082721a418145274427
SHA512 db354f433ffd9f10bba8b130d5e9e7dfe1594c9699fb5dc6b49d0ec0d90c7fbc6ec87f27ddd76ec9d4194baa27cd45bc2241317569130146f622634be7f83607

C:\Program Files\dotnet\dotnet.exe

MD5 e823c3ea95ee89ad6f8acbe06a0f222c
SHA1 4f4730da768a86b0c1ef79a249ab8db847aff02b
SHA256 4204983b6820198525571f8d75ca3981bf041295c6c75ef39a895fb6f6540b6f
SHA512 bf6ebb27b6bef9ec11aad07fa231af9cff76467e76c3482b5808135b2d2a2c1bb7a7c5d3454d342560410aaaa4cd40a3260c9f940d49ee027248debc71273e46

C:\Program Files\7-Zip\Lang\fy.txt.azov

MD5 e13e9f8ec7ab4cf20c487938952d94f5
SHA1 95f673a44cee3ba9f03b57d534da74542a9407b9
SHA256 55f7597e2666097ca56633a894163517133cbb6e4995ec981662db5f1af2c96b
SHA512 5b652d559206017c659d5cda7fae28572dc1f091a8405dfbf47d92bcfd85bcfc5708907980116dd773b67c0e772816e877b20d7c56fb6098d8d60f9cbab205d6

C:\Program Files\7-Zip\Lang\fur.txt.azov

MD5 65d6e2959c8c6fba8f8eb336bb18f18f
SHA1 4cb8f90f8e918d1c8866f79bfd3cdccdb961dcb9
SHA256 3dca9fc604ecdd4745767f1c70a100be3eb8dde56f3024d275dc8234df3298c7
SHA512 28e883eea0abae75be017414f0558d1ac3d3b4af7ce0c5eb67de6566c093752451fe9b569480f00f28752fea171df9220d0cce460a75b7c0c41e276dc989e314

C:\Program Files\7-Zip\Lang\fr.txt.azov

MD5 d11c99be6a0c0aa7b212f2a31b692c19
SHA1 97ec4d2cd4a7b72e1fa676076fac7b88a5a10c0e
SHA256 f46d656266411d09083b1f8ef7384fa2151358fa134822dd0f692b9f1112debc
SHA512 c3b9f2d2e0921b588ce98e582f5c916ffa23f5ffad6dabc04e7c53af8947cf4fb6b2f82070f94ab844b912495743b196ca74afa7e98382a2134915e571ffd84e

C:\Program Files\7-Zip\Lang\fi.txt.azov

MD5 f9c2344bf84aa3abec99a1852b491ed0
SHA1 3a8eea3db92cfe278ecc62f4746c6c54beac094a
SHA256 9c4889d2551f7ef27981358819fbce265a698af953a611f6629d04fd1cbf61bd
SHA512 2ed2bc584559c5bf118305d8d414c05e7648f77b3cdedf409ebdfceeba0b271dac86c02d8f0d05d5dc83179ce52dec1090ab768a41a71fefb8ead46df45fd8af

C:\Program Files\7-Zip\Lang\fa.txt.azov

MD5 089e4b05600947f0beae89d25dea8312
SHA1 bbd5b95e32e1f558cc1dee1a00d912200207c1f8
SHA256 9ebb6d8648986dcda4779ac7bea2ebf9b9af410108281d1a62dd989bc025103b
SHA512 10928ae66a7326855095992f6a6e8f3497f52c5cd7099d633bd1d90a1e57962fff4c04aae7bd98a4cf5a67a799f642db620893e769ad1da860befcb0748fbd23

C:\Program Files\7-Zip\Lang\ext.txt.azov

MD5 b3d8e8dc1d8aec7568073cfbc86e0724
SHA1 f99fa8cdf29f91f53c42dfff628aa5b18622c16c
SHA256 773f8d8bd6fa07fe5bc774cce375cbcfc85b65cacf8ee5dedcf24e16e165f09e
SHA512 a8a4d56383bf1b22386df31091a62481e382099710639e471739262d78d0e2e7ac075651db08c4777c3f23a3b502a0245b8cf8b27746d9f5a3971c45169bd19e

C:\Program Files\7-Zip\Lang\eu.txt.azov

MD5 b599090f1cdefe62a97af67be34d4c37
SHA1 1aeb3f5eebf9ec9148c475d29924dd803f8d2cee
SHA256 4dcc4d32186e99694a74481014132e0b10cff16c6a90ca738a255a4dc9ce4b24
SHA512 60272fc112621e83b38ae4e4513366baed1a75b530c41735a8746df1ef5bfdeb2f39fbc67eb94c294d52769b5c083e3102d7b7e6ef084fe4433fe89aeb204c4b

C:\Program Files\7-Zip\Lang\et.txt.azov

MD5 122b2c4f0e83504421bde18f06c2f9c4
SHA1 67c0870b21b487c55917dd78fd0d3a65c0029f65
SHA256 5a504b04de06c6cb7243b3688d8f3ea3c862c2fefc4e3aa2f13b7877a4d955e9
SHA512 c9a7181ab0a0fffd1bb87fe05039b99a017bb547da082e12ac646642320ab8b25dbdb368709f36819c8552d45be1b84a6b66fbb1e50f50e0f269af313567f03f

C:\Program Files\7-Zip\Lang\es.txt.azov

MD5 e34c2c96b8099b72a5f57312aef56169
SHA1 ffd58a96b5fe38969ce494f4debb48d389295b3b
SHA256 befb2acc3f27de6cee36eac49cee8d2fa23f0132fab99dd2a3bbbb17d9babe2e
SHA512 62ac7c714d3c37f58018ae6545bbd558bb07521112df64d3e3e665ca358de0cd3e5e8866c745324bd62dae264eb97d12e8f9647b26274824c60364e6088c95d4

C:\Program Files\7-Zip\Lang\eo.txt.azov

MD5 d4ca3cd4d0548ea647c5ef37931c1c66
SHA1 cb9d3d51919dc0dad368170e603048285f7d2657
SHA256 a927eda32d3771829d532ee56b0e20ea0407fbdc0d55700675eb52816325c8db
SHA512 5281db1177898856b0e09e5341aec3726d165f97c25b3c65bdb4724df492ededc35ccf626ec90ae1420fb89bdc8a7694542f6935fbfe06371c5fdc8d66ce236e

C:\Program Files\7-Zip\Lang\en.ttt.azov

MD5 6f07f183369401266b4257e5f7adfd21
SHA1 88592ce26628a11e60f3990699da731237d1000c
SHA256 88f84984cd406fe67d7e07277e95ddece5d50c745d5756070d9d48c4ee2d2f21
SHA512 a008a0899d5be5b3a44de9869e9bdb289b953af75b9133a04cd4db81f2675130876026906cbd4664a6bc40762771fdf962377c222f6349544408fac424233308

C:\Program Files\7-Zip\Lang\el.txt.azov

MD5 6e8ed85d7c5af3158e92fc542bc7a5b5
SHA1 0d7e8c541fa5889cf0edd1bc9bd98b7daea0820c
SHA256 7a6fa184cd56fd57c164fcd17172c7a39e3215e49240cc6c35acc2aa94890c0e
SHA512 4ef0d83575946c5d0b97aa90bf1afaafb6f2788339382c8ef9cfb4b8d4907d93691a22d53462e602969c0e99d7bc59e33a55f504ca8a5073fdf760595344e66b

C:\Program Files\7-Zip\Lang\de.txt.azov

MD5 f6a2e3ec2cc39dfcab814410c4a158a1
SHA1 91512da63c2ed693c3fc7a3115a310b8355bd188
SHA256 68aa206ddc05c65283ed95928ff5f94a68e2034b82f3fee6e9a33d13e621d7d0
SHA512 1f4a2f9c2d80004852ff93a88383f7145bd5fb5e4084b57e3215a28323865196437ad24d3e02a678f2d2e1f5541937896c6694e4088e5f8bcbc924bb2b9f729d

C:\Program Files\7-Zip\Lang\da.txt.azov

MD5 6a0b77badce550e89b8f9843ca69582e
SHA1 7ded9a590c1d0c1c7d0f4f65de1babd974b5ea57
SHA256 94f99e51e412e571d23c2410d124a8d37d95c1145eb4c80bdf08d4bd51d9b7ca
SHA512 844ac8a8ba6a7df8d14a9cdc8cba84a47bf08035cbbdf53231c972e4cddda595a9bbdef6298568a80e16b724834421cc2133acf60a340025c61b414c6cef3a67

C:\Program Files\7-Zip\Lang\cy.txt.azov

MD5 e84be4c3b91c0ce3d66860e02a80cf7b
SHA1 51a2eb8c0fcaa4e5cd6196a82b65e329132a1bd8
SHA256 83f7859a3877a1f13f0e1bc25817e379eb1856c79b3e27b7a811749ca9aa64e0
SHA512 b0fea915e6e31e70565e51915e691cac5254648afa5004d99df440dcefd15cb661bff8e43c0e58bb3790ed5db2a63281cec26a5b552abd96af1302fb81f6e9fa

C:\Program Files\7-Zip\Lang\cs.txt.azov

MD5 56c40eac8d538a43de468d7e29f9d15d
SHA1 d9bffebe1a31dd210795eef717a265d609658843
SHA256 e7631b5aa1587a1b298711452600f60e7b878ee99324381f23f176e8e0ab01d4
SHA512 6c31a30554729096798b0a827a62199b3e953625d45296c5f649fc39c479528e9f5f655fae51daf38d9f5a0bd993e6cc075aae0c64b45c05e0800d19be1bac46

C:\Program Files\7-Zip\Lang\co.txt.azov

MD5 1a41b2c3f9c2515f2bcc011373c5c066
SHA1 7bcc524ee58e31912044b5e49f0e2edd50222e5d
SHA256 75aef78bd1ecffdec68984212e7c5bde9db35f2e4d06eebb14ab6b81d22f187b
SHA512 487ec70c03588194d460d8b475d9d2ae5cf0ada7e7ca8fc27ffbb9ec82cf3047d22a52b8814d1dc7d32f11cf60253aea37f4a0681c1ed9f5912039f75691fe08

C:\Program Files\7-Zip\Lang\ca.txt.azov

MD5 004ba6174e39c38f4f46f6d90c5efeb9
SHA1 4527d2b3a327960535918b6de1aebd8f8e94735e
SHA256 c40d07da8ae28c2e6ac980552728f005c0c99ba4e3ee16537f548169f97f1799
SHA512 b87aa282feb6c220ec62767b4a45079e8a1f9c9da702746d542e1e43f4182972950deb517a3f33de8a976c6e0b0b7e8ecc4faf936a73899c10ec464660b985d6

C:\Program Files\7-Zip\Lang\br.txt.azov

MD5 532aef0e2dea3300d1a835de6f5ed974
SHA1 6c36d623e1c0f6d9f5934d09d6e1368c38eed01e
SHA256 ffb78a33697a1ea1e8151966d409da19ee0c2a0ef06668413976d3aacd80f1f8
SHA512 ce87fe5f39554910cee9d493e59963717351f40d660ba52796a2798a05745c9e5ae8fa6c3fbcc252a681a275b096f4ccb0dc83bcc375fb24a4ffe73f382c6e74

C:\Program Files\7-Zip\Lang\bn.txt.azov

MD5 ed209ee071524f324ba73c7294048862
SHA1 fda7a7e90949be18556b8c9aa43242e9e1ce407f
SHA256 cf0b7d75a86cc1be5d6f41bf254e5a08d8a4d84272175789a283ecba5de26578
SHA512 f4b1f84db7ab8aae787b85e6c719a52843f6f673762de4a16f8021970ae748d3a5d0a98540cee655e2d8ed556ac05247a1bc94d061a7f44e19323267cdf73cf0

C:\Program Files\7-Zip\Lang\bg.txt.azov

MD5 16b9ee7a37645ff6a428cd207bc0657c
SHA1 2259901d0a8fd890194c79a1424d81bf40e48734
SHA256 cf2c733487027af104fa66fc698b64f0e645fb11fa1c115e5b9be950f62ccba6
SHA512 dd9c8ab31fd50e721cdc72ccad8fa658442739c6d2ffcf8ad90b78492835d188d3c4130e0d28abc2a97a778c9a5a87f201ed5a37be6514e96ed70964bae669ef

C:\Program Files\7-Zip\Lang\be.txt.azov

MD5 de7815f825992175d1684760b4175654
SHA1 ea28fdd4a9ee888da648254e29ccda7fc45c672b
SHA256 b96690be4010ca3d7153769b1a6971b56c072cc8d8e04efc4feed2e7d298fe54
SHA512 35607e4107074b04dbc2782a3f89ba9fa7edcc2465bfc854828ad6b438723c5a04957e9ae955af1eb4831933bf875ac728284e778f8dcef03460236442806ac3

C:\Program Files\7-Zip\Lang\ba.txt.azov

MD5 48c171b22eb9d7d7861ae016363cdb5c
SHA1 1f29595cddb8f17f59559b7cfc958ecbd167cebf
SHA256 a5520fa3a3ac22624d49bbe59e700e9fcb551e0a9f157221f9b780a35f84c71c
SHA512 8629aca81ad84d84d53d01d518de0fd4dd23d645fe90aafa527bf677b83fb3f975f3eedda3c71f774c16d2ef8b33c4081be4488ccb9f7dc934b3db2da1b0cc8c

C:\Program Files\7-Zip\Lang\az.txt.azov

MD5 b413ef0d07422aff30b86d380fa21e22
SHA1 dc5bf275629e9368f8ed5929264ca425571941c1
SHA256 e21cdd412327e56e87f2df5d28e9839c313e8997dd223ad8ce080bbbfb97d36a
SHA512 50fce35d24d7506260467f6038123b3858f21a5cc26ce56d885934337891c90be5c3bbe51b28513bfad0480f77e30df670c15de381bd7d1b24c036394811a79e

C:\Program Files\7-Zip\Lang\ast.txt.azov

MD5 87e62ac62363c9a28f71cee9be350489
SHA1 f596f73aec1556b5f0f2d28dd50e14f77bd147b1
SHA256 6469895fe94a5e316f1952430ca4fb14ff38ea85acded6d244b543d683b72865
SHA512 bf06c3069670e294a271e76f84d935e3e9b5ddc6dde0ac53ad066daf6ba259a28e07fa9ccd78342193284f17570cec9dc09dcc1c174010123dde56e7a47d9dc7

C:\Program Files\7-Zip\Lang\ar.txt.azov

MD5 5385a40bb71fe703f1cd3197b8dc000e
SHA1 887c5966734f759fcb1aedf9ca481086d9f77192
SHA256 1736099bbcdbf76ba0358a78852ce4d361f649b7244b7e048ebe203c748a6054
SHA512 d5fc8dcd12eaf4cc2186a9ef8a8d1eb671b4a94d21313a5dbfb6e5e2707b534a99cd16afa8e570de20e97f95625692e0af5107ad6e9cea19fceca9b83b1be930

C:\Program Files\7-Zip\Lang\an.txt.azov

MD5 7a40dbf1ce0d0a44d600be8954345524
SHA1 db55051a2c32985515ba4fd21f345dc14f6b9726
SHA256 05fb7f4800ca1fe7b5b57388d4288657e9d18770be29d0850acd2627d96cf8c6
SHA512 acfacd3ef82600e9b7d549e48397c49a0493e6c6b9a09b684a68d2d8d19c197591ada8d81b3958943beb887cba263fe7a3c23bd1c46a129ac57d1f9d432eae57

C:\Program Files\7-Zip\Lang\af.txt.azov

MD5 50305a2032b126ecf4692e8f9bb0b4fb
SHA1 7a5a14a699807be9cc39b07d29bcd3151d98f356
SHA256 73792b77686857a89a9144b6340450c1b4c1521b14ff4c1936cdb1c368947fe3
SHA512 e86eb64c96655e358e8b4e2d794ccb7b4d411a00b190607217c3e2976900306bc182a881bd5283811665b2ccc131575414d6401562fb335c342f4ff943124edb

C:\Program Files\7-Zip\History.txt.azov

MD5 ff6a225eaecc4f940bf285e969c05a1c
SHA1 d08d034cbeb718ced6d0b4cc2398b05e05587606
SHA256 b077267e8f8ea6b7fa521ea624e1dc5434b2b673389e1d2bfccde6719e2d92d8
SHA512 81389821bf1cbfd70da6d025233456ecdc0b26ce7809e08b50122a6ee85c70bfd78b83ee22dcfb6a9bb7b1ec65c813aaf682e88af24b96c7202405cade881ebe

C:\Program Files\7-Zip\descript.ion.azov

MD5 a4c65e879f7a38c93313d121fb4bddd6
SHA1 c3b9214df7067ce39914d6a9e3c36af59545e8b9
SHA256 383c38d40fb73fcac96d72c6f14f189e3410e011ff10851923f9061b0b9609d7
SHA512 ae80c324da54fb1d3f2001a709ef2540f2e74fb2bd6df208c15ee0eb7b8e7088a5e373039fcd61bbba0f1877f73beb8fbaa482b5696a6e76d7d14113d108f4c7

C:\Program Files\Common Files\microsoft shared\ClickToRun\IntegratedOffice.exe

MD5 0d59f0bb572f7f635b47c561341f3275
SHA1 ced24f9561f0e5a6f4d3fc4a9f4a9379ef8b3c7b
SHA256 1b15bc3a4f588ae210cf3c9e2f136668741a92427dad762b44712b28f7622221
SHA512 f33f0a5a3eb71d26b24eff4b0bf651a7d3bb14467f15774e9aaee149c28b2fcbb0cb4084d71114cf8faec870842f59d2d799905e832caea8bd74fe39d870c03e

C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe

MD5 ea45a72ad35071939d5fc3bbbc4bceff
SHA1 5af5990dfc54fc9769ee6b67c965b313e59fd527
SHA256 d0164aea014efecbfab285a19866a6b370c3c6085697a2246baee62dfa43cf8c
SHA512 bf3118cb71f2c29f879eb1107262db7c743bd2aa6566a0f803fa85a435ac15d7aa71a491c2a45ba0a11468082bf30c6ee2057d997e2117aad2d6f45c507dc89e

C:\Program Files\7-Zip\7zCon.sfx.azov

MD5 ae0f56c2689931349070826b46446348
SHA1 3e12e337f64d0f3b630ffbf04004ed2340ec61d1
SHA256 656b33a78daf7c1e15e812b8e314d7899edd0c5ede0731c5c99407db1ca8ff02
SHA512 69e4a506671b38b6b2e7c89ab6a610619f4eb7e3767964ac9ad6a9ca2024694cdf4419d6fabc1b75c963b17adcde622f7db1ce45ab9197316c4c0624c5e60e3a

C:\Program Files\7-Zip\7z.sfx.azov

MD5 d7d29e536fcbf98051d419368881c281
SHA1 f39cdd6f520081987d456695827d38ecb2c02621
SHA256 09184cb07b78719689f951e8f0642a2a6eb011f31251298c2493de395217f45f
SHA512 bd1293cdcc5c3ee16d6a374ba7100a82dc58db876b725a634dbfc03de3a7c81d67b8f964478c02e719a60f671dd98c9dc1a5ecd1b2966f84599a1b240429a74f

C:\Program Files\7-Zip\7zG.exe

MD5 c9fb8e01c4761b677293f29345aef321
SHA1 270975c09f68de77ad2f4833f79b1068109ac17a
SHA256 4d62e1c901ef7fbcb5db306e0d450c7ad57dc6fb84f944c7b4b3a9e1cf5e42d4
SHA512 4e34f0cbc9b1d6efb0dff96894f6e74702c8768f316b4e5bece739732765bd6714ea5da95141ebbe58b38b033d4e7fdbdec69b5578df65bb70195de5d3f16864

C:\Program Files\7-Zip\7zFM.exe

MD5 0b6be280beb408cc0aedac903bb25b0f
SHA1 72309d445ea8ea79a040fdc0c6bda8cf7a13c3dd
SHA256 4fd8d69cc719a1510ef0e01f6b9e007a2835b12f85aaf3e42c515025329bcb98
SHA512 2095122bc087dda9cbbce6a3522ce3f16e26681fa520746364c17aea2c97877b1e54872b1267aa40b718fe30e74a43db2fa516641bd5d375665e03d01b191ae6

C:\Program Files\7-Zip\7z.exe

MD5 67bee2e58d8571822ef619a93afbff68
SHA1 9717fa35f98a4ea0d1cef32cf2a94ccbba8d78d0
SHA256 5289451612c5e47861b2f99d8bcc7643108a25b6391e03a5c53b41025b9341f8
SHA512 108df268f3207094000a9f999f87d91d503cb7862fe2797b2a2f46bb818fb06ce47f8c16444917721768129426f07c73d796fce87b9c579e5d16f43a1704e954

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\chrmstp.exe

MD5 bc2f6443a72d5659a29f39398c46329d
SHA1 a1c4e73f4f70457f29ec11d1a57dbf186c9c9880
SHA256 5beae3846f3f9dd455d706833aaa370a2fdd88178f209cb27731266c5484bea6
SHA512 76dd5a97eae2a238b86d1a2e84e9fcc26919e66037d610fc4b42db1e74a9c012d8ee81f608063dac3825d209a2ca2dbb9e0c2727233a5b8830a126f6c4e9ce61

C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_102250\javaws.exe

MD5 8cf7835319e9a8ad6980e41b1743acee
SHA1 6b16e23891dae167dad262f9b8bcf9383213bffc
SHA256 55dfb505d0f5d9c1237f576e9f1197ce1e4ebe5f39e21be135f55c7469df3e3c
SHA512 9f81535f2de905a783b069539b7bac4101caada28c956d9f40853e7b11864eafc6988168ef8696bfea0b45aacb7958db08f282ccc29fba31a6b3a9b60bfb87aa

C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_102250\javaw.exe

MD5 b09c7eaf8e34eb6b78bdde558ac9ce26
SHA1 70e01ef5f8265e49071a34b942aee83a27e2c4be
SHA256 f2bbd691b3c8e9475705c39025cb1c84e841c676836ade42f313730b8f9d5e46
SHA512 3740893cc6d8b9a56e1a303f36070807aff17cf921cb7b1b08825809f2b66e28433e841dd987833f80ba67f468c83c2a9d4370cc9ca4c16ae522b631a480f524

C:\Program Files (x86)\Common Files\Oracle\Java\javapath_target_102250\java.exe

MD5 20fd01ed31e38ec192b3d9b8111cbec5
SHA1 832a96c3ea57f27c6dd5729edb071d3a7f3d6d32
SHA256 0a63051cae2bc3c34dc81cb402e770dd68abe343c97108c88f46e26ea1435e0a
SHA512 769ce1c8d36d7202f0a35ef00f6254398c9583fbea55204bb6afe8671308911a354c9e78f12f5579d35a4b9a5a766ccae1429112cf3856e8940566d94b804192

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\WebResources\Resource0\static\js\plugins\on-boarding\images\themeless\Localized_images\sv-se\PlayStore_icon.svg

MD5 66c2f70715ba667c54dd8e1597619977
SHA1 87d801b3db0dba3c7bdcd68835aeffb07bc129e5
SHA256 8f64632c7feb498169aac8e7d48ae242bf8f04537aa49794f656e24e86e42d4a
SHA512 2d8c5cf811ae0fc077965bfe1e6971b29f9936d4152ea8f290e1f9f0a7e3215045c2ebe653d148b7a6172872f780ec229b82813fc6c056726c8dde5ef465c4d3

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

MD5 ffed13da2da6df316e41db7766c0b5f8
SHA1 a49a8a796c0d731309b22a7ab0a5138b7df333a6
SHA256 279dd89088c31a493a7a134089fa944349a18e811a0de4036128de66c6a1777d
SHA512 37efc214d43b7ebb5a6968318d9108fa131d30ee9dcf39026fe47e0e47a6db469bcb7bb9cd21f8678b07f0efdd9802c065d1706fa4d4baf3fff4576cfa22cf0e

C:\Program Files\Java\jdk-1.8\bin\java.exe

MD5 6f32557a1c517dde0f0673dcb0ca1b43
SHA1 51b756053cb74f67fe07b317af553dff411134ed
SHA256 e5a7728398659b40ac0efad971233bfb470071fbe2f30d876a56a1dce565d5a5
SHA512 95b62d03d57a0c9605dc382bf2d18e0ac236c30b4673d92fb6dd944b1d763453208ee04b80626ede7c6a74192ca7c8adcefb9af27d69ee8cda6183a5bc9c9cb6

C:\Program Files\Microsoft Office\root\Client\AppVLP.exe

MD5 4573b336a18921b3731ebb180a542ccf
SHA1 c240428b65373905125db4449f3af1929716dd92
SHA256 4c41d0a5325268368e6f1bfa9d615ede7b380da8d72a1fac5a8e306f67d2755f
SHA512 9920f6eafa5023efabefe533b80061922dc143abd6f86aca72140ca21e0b2848d7f7f0a3502ec2fbbf34b04f2f80f8695617de34940b0e1ad5c6b7f14fc5560d

C:\Program Files\Microsoft Office\root\Integration\Integrator.exe

MD5 99aa6efe970e269327ea17c09edee6ef
SHA1 2ef5c93d13a9663be17faee0bba92fa434db0404
SHA256 7d4dc4a268ef0bbbe0922e3152a027bef96935247c4408bddbda7c07b093a381
SHA512 80670e9a2d18e0554a41403c57828ec129ce3105f383853c4b633e2a56b8ff82464bf5c2cac425aa747aaf1f0ecf0778df88a4025f467609a55209a1f28e6cfb

C:\Program Files\Microsoft Office 15\ClientX64\IntegratedOffice.exe

MD5 782de296243158678d07cef824e66202
SHA1 cb86e1ccff9c31b19c55cef7cee11ec4b1ba5e38
SHA256 feee599696cbad5df8c7407ee17493ca5c443e872718ab2e7f46d6f6d17eaa6c
SHA512 f268323b319fbc81d17b45775b2f1828b6a8bbc3642cfe9eed5c55301fbb77f46096f2f05d769776e7cfae5bb2e16aa69631d00ad5df06ff861cbcda82051ca5

C:\Program Files\Mozilla Firefox\updater.exe

MD5 cc2fe8101b769130751c53453f0e89e3
SHA1 b5b7af93959e22584f7e94640c7dc33dea46b169
SHA256 ea2db74fa835fe0eed2a033c2778856664b9588870b827b71bd6db9da14b9568
SHA512 a0290d9bc8287bf4b9c689d556ffe935e94fa1f95e2a7dd17a6557d4eadc66866d496c821e575c299b5eb90c8c34b065e593bc2c1665f57e7b71d4ccd3de7e4a

C:\Program Files\Mozilla Firefox\plugin-container.exe

MD5 12c7cce1b36c5f9d72d1b74ddbce1b56
SHA1 5006479448f129678a11271dc3cc34d508e2453e
SHA256 09585006bd404cbcd1fb60647bb49818dc5374dc8fc6db5d5eff0fb24c09bf27
SHA512 091b646e25d89f810a297f48796b3caaecc8f9c006a99f8ecf6f2664f4498f6f71ad7f375213b7ce9d29468a8fed7c869dddfba71f1b8b5f7e2ab864ab185f00

C:\Program Files\Mozilla Firefox\pingsender.exe

MD5 82c0419afbeb275f916e7f3a789dbedf
SHA1 baf4c4c12d617191bf95d0088cba3864b94492b4
SHA256 5575c2dae5bcafc0bfa9b5fc2e002525b81ae33ba3b21c95ea61c49119a2a590
SHA512 5f6bfc39a735b21ceb9a33b78ff91a27849dfc34eed4635c887209b6b6bf8f6c47895e0f8e5438d38da2431127ef872dad39b316b063c5d59d407d8ebf6809c1

C:\Program Files\Mozilla Firefox\minidump-analyzer.exe

MD5 2691256d7827718ec76e41d3856d9094
SHA1 e0cc764b6d4c210c547a0a95de8b0e56a04173c8
SHA256 bbedec2688984aebead76555022e709b988ffa4e6eb1bef07cc055f27fa545d5
SHA512 f41ab392517085d72e4176bb758aba1bf2ed20823930f0fda87a8bbd4f7c714717e37ba65e740bab85969f8728e8fb32d52f52aab3d139b74a13bd3134c4894a

C:\Program Files\Mozilla Firefox\maintenanceservice.exe

MD5 792fe347a5fd7febee2239fac849fc46
SHA1 31dc9c1db62c0acc3e5237dc6590267dea720741
SHA256 acd0bd992ac3bf5e78e19f16f072983188b5f1ba2101275e05b66b2e1270e4e9
SHA512 aac68d59f3100535b33aa26c1b406fc094412f294f14ca24bbe3d256da9f77279caf5bf9f08aee86369ccf5936149e56ddf27005fa54130538e59020c8318115

C:\Program Files\Mozilla Firefox\firefox.exe

MD5 e3c2d8a152ae2b8c902fb98691b361ac
SHA1 bc3371cda30ecaf6d3fd5654a64f1e3a25975669
SHA256 90684a43cf02fb7c552269d356078b72f8893f35320f1424437d522ba253d615
SHA512 87731cfe1a9ec2724314a53691f5b887ee8a14cf98f24761c1cfd1afb6e1f35ac724d4e61cddd83848d4c83f27715c4e9e06fd95d0e0f967da52491095fcd8e7

C:\Program Files\Mozilla Firefox\default-browser-agent.exe

MD5 92f0c41099ae1c2cf9481105f6e4eead
SHA1 420b9674c8445cf43b4895c649bf1c69efb09ca1
SHA256 c52d926fbacced26c4e26c3709afc3926d90c9865f0c4ca0c048ef14153a4ca5
SHA512 4655300cf021e6ee86902e22bc920f2561075a74148e254f39eebe915c1a793eb2573b3abcd47abb85b77eef321cca710c9bdca123327e82deaed93f58ebd4e6

C:\Program Files\Mozilla Firefox\crashreporter.exe

MD5 c5dbaac050b6c9e42e46f542b8ade9eb
SHA1 0d33172d32b5d7f4c7d9dab31787d5bfd777782a
SHA256 a34e41c3a01993d749fc223e5d990800c10b7e30db85cd72a9fb59606cd53bda
SHA512 08a9266798576fbb5185af0f79e3dd388f8bebec1dcf4843a1dc9c45cb7405ce28a19f8e1dada687f2886ea8cdec87bf68d1798ef3635edad9586019558f0619

C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe

MD5 683f36669bcdf5dc4d17b1d7a582aea1
SHA1 34856375e691c26110f591a7004e59e87147e49d
SHA256 ac40f2e61e324c2da7bff81d806ca0ec4a2c89b806a2f3cb44de0d15f8dfe7a5
SHA512 94390f7dbc2d032d2c731386746a7ad11b226dbcb4d40ad7a2d04bb00a468df2bd64c374e623c0164d8962428536dd42893faaccf72906c5e673103480f7fbe0

C:\Program Files\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-1000-0000000FF1CE}\ohub32.exe

MD5 d297b2198b4d74d681b1ba40677755ad
SHA1 b5db506c0512db46d19bc86e529f0c4b8d48bd5e
SHA256 d2d51a451df64edfad6788f5ea9984ef025e871fa8937f1d231865b94b4145c9
SHA512 aff7f41f63961a9772d62721bcd42a2556cea0f2edcd684df7ed8f1ae82cab3198da90696d32b447c63808f49540b83a1c0b39a6ee19d6e5fad96159b58a0045

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Analysis Services\AS OLEDB\140\SQLDumper.exe

MD5 665110f58c49e54f2e261780d2f06a3a
SHA1 699e44dcc540dcd3301eb40b7ceac1cca9ec9886
SHA256 9487a4e0cc9eea56925d2929429e70085bea76bc4cdb3ddbb9515ae63dbde371
SHA512 24c401b624325053f673af4628d032b0085ae4de3a1408defd499e8a7be3edecc7c549b481b7f680a726ee28ad91dea3bcd14c767573f0b913c6f3ff65ec7596

C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe

MD5 33a8e1fddf061de5db2d1db49b800495
SHA1 9185f84c978916fc70c11e6521a494d3eb363b54
SHA256 1aeaf1a73bd62aba34bae85c7b0f4c8545333ff3acb4c9776a783d55e46b6e97
SHA512 9fcc0733f424140636a1ba2580df5dea3c34ed6f0b5955968baa1c2bef899df53fa373d88b92a29484e040bea117e145180a318fc834cbcd4123e1728e454cf1

C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe

MD5 7ce63767418308137626d648565d807a
SHA1 1f96e11fd6dc45603a063a65fbed078d7e07b8c7
SHA256 6debe79dc504f3fbd0b68e7f67c13b94910c1100ae31cb4d90f14c4562210548
SHA512 2ae03210a1aa2d6fd716de3b047e92025f865b8f493baad9d90387ae665887bb83633d000ed78a81645f452777da029b61e775370ad5da2260d9bb18b1a70369

C:\Program Files\Microsoft Office\root\Office16\protocolhandler.exe

MD5 8be4b72f1568fdea7f2a6ac9c421de74
SHA1 a2eaf343d4fc7eed423e8c9bdcaf447e2d84222e
SHA256 bb99d083a717cd9709d6b694e77678790b9b95ce77cae765c00d6fedfbd3c1b4
SHA512 818e8d4cd8e5de97c60cf3621cb5ee03f6f5976648838d01b97a6064a988490f2b7da15f82bf92bd509d54743b7c556d0d5440b72c9d5fedef3236d60cf468d1

C:\Program Files\Microsoft Office\root\Office16\PerfBoost.exe

MD5 395dc97cb21cc2e2e908d655f22b036d
SHA1 62dc92610701f2df312bcab1dfd7fb76dce75c52
SHA256 7777adc94744d1c7eb910f6031b3e7071ce1e14ce02347d0afb3feb819f0b5ae
SHA512 204d594bc74a8035d01d674ef0ee54eaf98cc05731c64d13449b07193bbb3e1c5161f664c5da13d38c259cae06d204988b93863a50f011393847e75bf53f4746

C:\Program Files\Microsoft Office\root\Office16\officeappguardwin32.exe

MD5 5a479b8252ca2ca4bbd5d59f7196cf7e
SHA1 b76e9efc3ea84572beaf829034506d5174eb3c4f
SHA256 41c434c9bcf2e2e9ac3b694d41a06291250d90e7f05e00b202be249f6949bf07
SHA512 fa65aa910f1ed3bca74584740f7e1943cf6866322cfaaf91c7b8c1251c44939451111a321d29565687540008e2f24d0835857dbce3f17f2def1a217c658b9e7a

C:\Program Files\Microsoft Office\root\Office16\msoia.exe

MD5 120d80079bbd7e7c0c5d71a186716128
SHA1 4f28ffd518412ab8194b95a35348fd8042734ce2
SHA256 c5a6c48acf5975ebdb56ab21031056efe19ea0920d9084e47675a1cf7d2b2e6f
SHA512 6aa7dd2ce3c9f187eabfdb0482cd9a87402938ad4952bb1b57edc8615f0ecfcaa41b3f866ea7294ff12ea9ec36e4bf79acf997afa678e44e24b794c1837acb2c

C:\Program Files\Microsoft Office\root\Office16\msoasb.exe

MD5 795ed7385a79634dc14a11069cda54ac
SHA1 15843e06f2b7f2464f162381cbaeba600e3a2dae
SHA256 c85e1741dec30888e9262d9572a971680e7f20a26d5d9de6677a0e83b692a71c
SHA512 a24e8523cf6089e78f7f0b2bd5dc521c5941be38ebfe30783c9f4756f1244d8c217d84ca46257c4467369b1c7a5217528cd5f82c51b2b7f0e02830e49020ae80

C:\Program Files\Microsoft Office\root\Office16\msoadfsb.exe

MD5 2e59ced72391a2f268275078c8f77dca
SHA1 76ef5462cccd20afb1d4dc19666c30212300473e
SHA256 b48fb337419da8ddf687f9885c2c723f4295054b90f53e9d28372fbcc9dffbcb
SHA512 9129b3ce88bdf3b715a69347797fff8aea7f9cd06b4f3f84dea06ab1218a310ef8476b2b558ef1ed945a1fd4ea48e20b9eb1ad83ba43bfb41c3a939d9d5ba20b

C:\Program Files\Microsoft Office\root\Office16\IEContentService.exe

MD5 6b417e8995c19e6bcf9fd29fb7e9b41a
SHA1 b31c847a2aabbbddf2d27c336bac4807415db6bc
SHA256 f12771d43e4a5a355a065c8310ccbc2eaafaedf89bbf50f30adee82b66a822bc
SHA512 48af6b3fe891bce0d502626d0e3922f1a236c8a3c80fb2e81c54b54b21830bfd2910ab39475f42e1fccbe5210c26040299727458cf5cce5970a5a2f87ed393bc

C:\Program Files\Microsoft Office\root\Office16\ADDINS\Microsoft Power Query for Excel Integrated\bin\Microsoft.Mashup.Container.Loader.exe

MD5 223da2712ac3d592326f0a5c297b4c18
SHA1 c0f96412c4bc87ef8559f7eb49fcc23e624a7c85
SHA256 9b54eaf4a1f3e20c6ac2a694879046aa944d9ff93a5c78794de42b4ddb183e96
SHA512 74c6b03d599490360f23ae16b924507839e21b85bd9335f0b7b63f1d3837e6813b02bcf22b5af6ad8f306a3533e7820f51232bf8dc16e3849bc9a868fb8541ec

C:\Program Files\Microsoft Office\root\Client\AppVDllSurrogate64.exe

MD5 3ce4ea368b831adce9257daeb310f443
SHA1 7b9e16050827206465b1742c4166c7efd92ad429
SHA256 b86fdf5de7875fb1f5c6e4269efda938f01d25801a12ca69b093cfce40a5b79f
SHA512 cef32754b048b3fdf29242c56ce3b6003d5b394453e62396754a22af66241cd07224fce38aa623ca0ecb402fea98e1692e9c2ab717fa6047ee261ee7d58856b1

C:\Program Files\Java\jre-1.8\bin\ssvagent.exe

MD5 71a12ab8b08b652d7ef2d5713680d924
SHA1 79a5edc196fe53b4c92b35e661b95475cb21d81d
SHA256 d31b0ed91ce41a912dd969dedaa0226503fb35c0295343fe0d936507d7372fbe
SHA512 3b13f4355acc4c69a7b845e057aa298ad07d889a31c9447bb4a2ecdebf5d0396a0e22883a5cec9230959dbf281f44a32d6498ea3b54233ed5bd58eb054122fed

C:\Program Files\Java\jre-1.8\bin\jp2launcher.exe

MD5 2ccca07a630f925a3022ec1041ddceb5
SHA1 6c9a85c9523c826cf3c5820fb347ba91f53ad0a2
SHA256 6a1a28b80f6ed073a8ac34eee93cf08ac1b184f78919080b1b4de972cc402737
SHA512 1c556a8ab8df5f5311c263db9e6873862b23fb59151da5dda274a01444e330d4d8818cd12d07c8c95c149ef77035746383e50e06bb072a86a5c22c635e98b8a7

C:\Program Files\Java\jre-1.8\bin\javaws.exe

MD5 7e2f8cbd872412c32fac8dd3a3bc8a0d
SHA1 675511434984051d832e3c4de955e20da88bea65
SHA256 b5fb797afb3b43084904590a9a85f2010f8362648c46ef84c98f634338b08aa7
SHA512 c2b9b43dc89deed4cf9e92ecb80b88852923adbb31b3593f155124bb1b5cbc207c36badaa4f01ceb0eb324c567895540562e5910d8a36d249aa1c62924d00031

C:\Program Files\Java\jre-1.8\bin\javaw.exe

MD5 8d1cd84f40fb6c498823030cd3e27fb4
SHA1 fed753705ff0b43f437e740c494c6eba75fcca40
SHA256 31db84d371084d6d712c5ec18080b57fafb12545366267c12584de5a8c821c7f
SHA512 20ed8431e4af1bf95e47fb0fea95a095685feba91d0098bbf0f61d8c0b609ebc61dc58a885d6559b6fd94e95beb2cb46c9bb94799ab46f9b3f9a8504c9981fb1

C:\Program Files\Java\jre-1.8\bin\javacpl.exe

MD5 55e398d581d06b736b4a6a8e0701bedf
SHA1 7d18b72c6bb359271469e311ba588376b21270ae
SHA256 e5118d9df7d6a5886f4377652a3a326adae1fa30baaa188d655e550b7ca9ae5e
SHA512 93487b7b3e0e29692f04d800f210dfed9b54e25b5a2689cd4428ca5402bc653fce1769de88ead304ab15bdd7053a6869712cf3927ca9e4a7f7b8097f25524f7c

C:\Program Files\Java\jre-1.8\bin\java.exe

MD5 e5db764b763ef3496add03af97539a67
SHA1 4cc78706ad6e3999e39bbeb66b3c72868887f64d
SHA256 de944c395dc7d02087b4d9cd110972d1a69847601d1b12b50b1f5cc612bc5697
SHA512 5eac29ee0586a6df6ad3e4bd75d7b203a384f51a5e78d7dcace6cf400242b1426b67e1891926a625e4e9a03156b03a6ee647b11dfe9093c009787be2d1df2b71

C:\Program Files\Java\jdk-1.8\jre\bin\ssvagent.exe

MD5 3d9547f0c943de17ad1b116e39962dd4
SHA1 6159baec94219db9f2c70197b08dade3ba5a6764
SHA256 626416846cebfacac873f367bd3a2fa0eb90b4f7b84878f4104d5e21a3ce8ca6
SHA512 f5f7e560a3a502a429f09ee0b339432644cd0e7d72871923bbd1b9836e5225f68b2982198206ab81fe1473075207f6e327c3c6353467290a75d12de1dea28045

C:\Program Files\Java\jdk-1.8\jre\bin\jp2launcher.exe

MD5 99ccab4131ff3411ee0ea602a8c66d95
SHA1 15f8ef9fe73d859f8b9551cb1ec295f0653c308c
SHA256 3202714dbe62d938d29f4ffe9478bf74455483e25ba8ace0e5dca408ae6db73b
SHA512 5ca54c84985c671233c4ec88f31b33bb7e93431588bc2c351903a9d07207c8e5e2053c34f4987a76acce6ac7e76927c0c1e484e85498714e1a4b272cf27acdbd

C:\Program Files\Java\jdk-1.8\jre\bin\javaws.exe

MD5 a9366d49c1c8254916875ddd91f7a548
SHA1 3b2c182c9ea20d3fea699ab2a53bb4651688f199
SHA256 72f56b521bc48984e7c84c7a0e4d8d282bdac40b517d3f4a9a931eb5814980a6
SHA512 2434aef10535a65d21cb34257721113b05a72cedf9e1d4568eafa523063bf8e9be49efc47a83585a104288ccd7dfe6e448f8109fabd227b00ea267169173c5cd

C:\Program Files\Java\jdk-1.8\jre\bin\javacpl.exe

MD5 253b6a7905e72debc477f04d5bb4cfb6
SHA1 8b2effc157a4bc3a5e362cc95fcad3077207b14f
SHA256 e995862ee155f27345c1541c50f2137b1f433cf382ca0f57d7d3ed3265def6e0
SHA512 33fc2040ba4db7ec5adf0fe403c7e0f20f32003da0db8b0152bd472b8042d70574cccfa112dea770a7f9fad838292a292153b240893faa55f7578313cb2912b9

C:\Program Files\Java\jdk-1.8\jre\bin\java.exe

MD5 ca3f220b5c3c44b3aa6d56fa706f820a
SHA1 7b14c9d05c8dfd31ecbae58bd65a42d2cae7a7fa
SHA256 5e7b4850ed13b5e43957d505ecd021eb30b65fafad17438bf1bbcdfd502e5622
SHA512 fd5db5c931e400b46b57ea26acd83fab6b1d9c4ff491b32d3e8ccc8c99b23909f8badc1898b6f50e66412f732a8fa78e0831812be0f84eb5556aee250922193e

C:\Program Files\Java\jdk-1.8\bin\javaws.exe

MD5 118b50935b4634c54215c06fe6ef2bd2
SHA1 038ad9a5a93425feebe84b5fa52961fd5fd3724b
SHA256 077840b551f57949ffc2b850fd94141a7961259f6c59df779e76fb15d906ae2d
SHA512 c96d084fa811d2c2593ec4affba85afc8c654d5970046ddea21e2a11d20fb3d0d58516e942fa3ac3883c546d10033139d9d52f9e67df0920e4d22029494eb675

C:\Program Files\Java\jdk-1.8\bin\javaw.exe

MD5 ad02ea3280a603ee4f535869c30f26e3
SHA1 9a31d6d19745bb37875fc21809b4b36c41016798
SHA256 6fa55a670e4a55e11825a914ca050c8fa01d9e0b27743f078512d0b46107ec28
SHA512 32ec8745dea9446f0b0e594abcb8346d6a1f7fbb5e14f2fe52e219096342c4ba5a2830cce3633cf43bbb721caf6346b52b4b043cdaaaae49fbe5c726746e5ba0

C:\Program Files\Java\jdk-1.8\jre\bin\javaw.exe

MD5 9b1e217ce6dc969667ef5857e64a75f5
SHA1 9b75ac8fbd6fe495e69971c8fe2dec3f1c87850b
SHA256 3bbd8bea1a1d9619f972f7a9292600806d98bbe678b8256000796171772abc99
SHA512 cb6ff8d42724ebc0fd18fa806a394451e70fd76c71a62c6b1200db4be859df6424b9de4d3874034a6a5c3f92ddc9e24c522a6a43cbb27b1047f88dbdf2223256

C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

MD5 6d23beffbb7aa05ef6ae2873098cc172
SHA1 5cc1e1c0578229dfd1ea82b4067d0011e384a815
SHA256 622966f21e7fb582bd7832d47ab99273fc514b699820437d0193959ed8e38e6b
SHA512 fb905939f9cfbc4c0be123b9c506416e1fca4e3d35038676bf05b1557e69de246d18db124f59cc8c019238075337af636e0e426384d66b6d38ad335c03c143ee

C:\Program Files\Google\Chrome\Application\110.0.5481.104\notification_helper.exe

MD5 23e5d5ec9f60cd8c6501965d8ae4d5ef
SHA1 24870af908249c0356e75a76aadcd833cff678b1
SHA256 10bfecf45fef6f799de75e533b9b33de37327958a255f3c6b52fedbe7a6e8212
SHA512 415d8c5f04591216b9ea97a40a72afca3b74ff4ce3cddb74b319cf632301459e344e257bb9e70ac46f62c8c69e79befcade471021847eccb167bbbae8152e707

C:\Program Files\Google\Chrome\Application\110.0.5481.104\chrome_pwa_launcher.exe

MD5 dfef7d65f177a32109dd536e471df272
SHA1 ef59bf1b2fd3a975438817aaa51ee090565dd628
SHA256 eb03355d5b29a5296b059e2a4983370a9d62c773369eccc7aee4098c63db30fb
SHA512 31d90edc6e4ef487b2b0d106818c7e7eb8c8788404c8a7ef020afd2d3a8b3303f62b714500d387fbb36b0b213b5f5e22846cffc459b81fcb819f0784506763c8

C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

MD5 87f74069ca5a1a7e14c0ffa3eac2f185
SHA1 ab57763f1e30c11be4ef0ea87791ff9c7162422f
SHA256 13d8352894c6ba4d1654fcfd2e7fa05481fd89da93588333012b95c324133a27
SHA512 f4fac0f793e7e0b7107fb12e28e5b1a2dc53e5bf29c1d44e714e8fdb8fd70711cb7c0c62d3f2caa5fca88dcc55a4f96c3ff8fbd5789d9f3d0a3682d764668576

C:\Program Files (x86)\Microsoft\EdgeUpdate_bk\1.3.187.37\MicrosoftEdgeUpdateComRegisterShell64.exe

MD5 f73fa44b9e8e6b191f23f48b4a6ee1d7
SHA1 877aa9291ea6e3a50ffff9e95ffca00fe03a94aa
SHA256 c30c36dbea08c6c4b2551951990b049a4d1639f0e4f0badae2a81cbf0229ff95
SHA512 ca2ed91425b1b9f8b1aff7dd7e1c5cb180c705baa698d7a40ab7c53e31c510ac7b8ddd1343aac3f33bb93d9006cd6950f9b011a365227438b10e611013b8cfdd

C:\Program Files (x86)\Microsoft\Edge\Application\pwahelper.exe

MD5 902066f90400b00ce2ae45c8bdffd624
SHA1 2d1fcb6aa14e9aea1e013d24cbe52799e0903661
SHA256 e4d9e043feebaa825d8153a7f866d5a49b101abac63df9df5bc0bfa859cf738c
SHA512 b39c2c0256c72d4407b56fad0c9356758e40292fe23d910cd505cdb834927b90ec1f7816592e528bec919f76415776053d8dbee6dd2a6a3d8deb919d7de85330

C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe

MD5 f7d4755a328536aed1aa2e82b2357cb7
SHA1 f7b8de4d12b291e587ddb70b634298d02c14af57
SHA256 67438cea7ff55888f2e379eccff66a51648c0b749fefe34e4731556971f0d5b5
SHA512 0ed96269fd45a42240c139aa748d2ec152133a87a6699b216a429cd7e01906c5cd9fecc1d31c38355ce7edc263afb1b56bd64919d89dff35384ed2e977d7f90c

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

MD5 76febaabf59d62f3a18adb77af95b20f
SHA1 309e946958f0fce6ffc6912f04ed57e221f90e9c
SHA256 cf5f216d5d0b9f7beb453e82a0375a7d5d8333c532c5bd6d5c3c9cdca0d02b67
SHA512 dd9444f3efb9adf3a3a3338ceec48952f76ca24d9d6e8ca96191d0c573e2d8ad07e6dfa2aff07082a94483f93bf3d387734d6832200bbd286c2242761b0fa664

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\pwahelper.exe

MD5 d8685b2137eaaf44dbfbc701953efac8
SHA1 458dbf1b362c67180528f1dae4e20a462d299c67
SHA256 42320220d1283142c7925f41e8dc7d6ebb01cc481cb149bd049cf94c8cc40a2b
SHA512 0743cff3623a30acb4debf544d44933b9969636136a69b4e93d923f26b7b5a1d783b0732ba55a952d6166fe6c03eff90982e9e3cc7f2b24aa625ab15b361f9cd

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\notification_helper.exe

MD5 a5d3a1ef3cd16062bfac4c9ae45423b4
SHA1 4f7c9289388fa84be72c20a5e9356df112964483
SHA256 cbca291c851f2fb8c0e211a0f5e6464acfff1c35fa4ea4e1d09406abb4006d33
SHA512 ef0d046be1ef451f2da1f2ee19e9e47ddf312c1724711db88a6e620909c05d90836bcbe012627a2b9b33a0a23f8c46119834532e7aff7b24056acb52d8309b2e

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge_pwa_launcher.exe

MD5 6e24b2936f29bb7bbfa373b3b88e398a
SHA1 0bd2b8200a8086f436c2d2c11c9909804645b0a9
SHA256 de77b41baab600993ee69ca421be7c636f5903fec980998dafa7dd01e11319b4
SHA512 a6ad53593c593a75811310034d75828317ee72dbf2c168f43947e80d2972df50a22d5bf4a7eeb38cda03589bf1966ba86ae29597d64780ec20c2bb56e4137c82

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge_proxy.exe

MD5 4cdb122fb91bab96eb69943284273118
SHA1 43989fb9459e4eb85f87a093da8d6c65e9952064
SHA256 06cf3f9d78fd36d7267540145f0ce7d8407e1d27385d1467ad49500aa755844f
SHA512 b60ea6096865cd9641de47905faf3e6c2d7b4887cab86165d8df43c1d22bbbe09ecd30e2a94393be3d8d84623b967e1d194162bc68672d934c7a57d156157c59

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedgewebview2.exe

MD5 2da7bbc733936ca3b96afabb53c8ba7c
SHA1 551fb180f3459c0be69678177585f643c1453594
SHA256 1c2197039f4ad79cf685154f2f619817b88c67082a7c5626f78325c1d201afc3
SHA512 70c3dfc20a571f7452dea4475180f044d4b860b54b4ba7001aecbb9d17eece08b2cd1eb3e9c40ea19e58a5e39ea7a091b9146bad6e134741ce5a4bddd9ee7006

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\msedge.exe

MD5 5102e69ca9f2623cabb301a8c2127b74
SHA1 22ad998ac0d9011386698a12964ced62f3436ce8
SHA256 aeff0a7b543b608b26654e1d3569bf4551e2ea1f62125354189c5f671ac20a93
SHA512 c94b3d86089f2a5e87e139bbf068d7fe672cfe57990fc8a1d0522fb3dc2aed88077fd73ab28ebfa3bf1e4a7ef9987e11ff277566981d2cc071a054bf84924add

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe

MD5 221247ff611cd371c213f8b2a680c266
SHA1 64851bb741324792477d5cb3bc0fdeb83774375b
SHA256 4324074a0888d4aa65fc7ddbb13e271ea24390b157bce046d35968e70536f014
SHA512 2b545e4698d3acf2bb28fc705e812619069621697cc2acd106c6f1b6dc1a63c624c1d673e6664a4542a8616c7c87195e534b23ea98409d3baab59159bcc3a216

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

MD5 763e77e2d469de33fb6f67a8f925e3b5
SHA1 b99c2d31a35b95e55c35977351f04e6d35536cbb
SHA256 38d8269912908b5217fe120d5310a0158840a7110dfd4745d714927af3c573fe
SHA512 697cc78a150709648aed6bb07e70f883a9d3d9f7eae7d679701f18865b4cd92cead0c3a36a1cea3928dc46f67141e3e48f6a22635d5867d8962aaa611b0fa785

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\elevation_service.exe

MD5 8fc6ae9207b313047a51f8bbdf7e3bfc
SHA1 1862b8efd63984681be6150d2dd3e6fa55d83b3a
SHA256 6ef07ab90e7df63d08ffe80b3f46feec86a225042af8adf6614ef26f79c8eb58
SHA512 e36004f5372571d91f7f6426970211ba868f7e4c69c888dcbe9678a72b7f6ab6c3e0f5f5bf3b7af04c1867612e9a80244dba55b9bb7e63be97e042b6a59b1ac4

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\BHO\ie_to_edge_stub.exe

MD5 d2693ef5ae24204b65bf4286631489e3
SHA1 be466c1c3de08b04aee3788cb9f40b00bd5caf84
SHA256 1e1701939217245741562e748f1532b6e4b2c96f6352db499096816e9cc08b16
SHA512 8e085ce4352be3f01bde92c1d5024ded92e77f8129cc6a897fba81010b465cf97ff68a54b17596df4cc586570ae408756c2bbca85b5367fd4761970dd0c687d1

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe

MD5 47eac55e82b3ea876179f1c93731a7ba
SHA1 7f11493aa3e09d6429fa0a2fa0b4c7e5b4ba5eb9
SHA256 3d3f950b4fd03d2cb11ba0eee1f2c8ac875bd0186ecde84561cf9b037d047009
SHA512 7bf16fca5090277bc307ec35686425fb49b8888a6c4b144d0db8a69ee9d6749a971c21c4aa71b4859da14773ca67a30df145dc8174afc2bffb25f2d9e40a1bad

C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\plug_ins\pi_brokers\64BitMAPIBroker.exe

MD5 332f70c2149c05eb13aae729b7dd3f16
SHA1 1dff00bd735ef6102917a8414d3b2fa3cd456be6
SHA256 4a0b63ad4636022ce6046441e50b596f5544a89fb4baa171e936f7c499af0dcc
SHA512 5ae99a3400d772439e3fe541e2e2518587a38f99a5cef68247811731d79a48e3384c0b402c94d05b4860f2890f86732a69f4f6be1ef1a88f6521a5c6b20eb048