azov | 308a9ca147d08bf5e6b48dbc0ab1d3ab5d03a06d6dd5bb62484f53209ec0b74c

Analysis

max time kernel
141s
max time network
17s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
23-08-2024 20:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
Size

4.5MB
MD5

253af7a95177d9e12e8b96e7df6d5408
SHA1

77dbef638c396c91f858bdb5f1f42eb3b9f1adbb
SHA256

308a9ca147d08bf5e6b48dbc0ab1d3ab5d03a06d6dd5bb62484f53209ec0b74c
SHA512

88d8da90aeccd961849e58f595eb651864ce0da64c03e7e9e904f20850232bbd5a485864bfabb979b8ca803cf79123b73cde02aa31e6d36b78a51cd35807daf9
SSDEEP

49152:o8f9ZOCnF0KhLemLNEo9QR+k9jdAsizqxSiZ4K5MZqkL92c6nkdmbbsiIerM1R6X:KrZ4K5M+XbsiIewG+x6xZ144

Score

10^/10

azov discovery persistence ransomware spyware stealer wiper

Malware Config

Extracted

Path

C:\Program Files\7-Zip\Lang\RESTORE_FILES.txt

Family

azov

Ransom Note

Hello, all your files have been damaged without any possible way to recover. Feel free to commit suicide. [Why did you do this to my files?] They asked me to do this... The hatred is that what makes me feel alive. That's what you secretly have fallen in love with. The hatred is the force that drives the life forward. The hell is my paradise. The suffer is the bliss. Others say the hate is what destroys yourself. I say that the hatred is eternal cure. If you feel desperate you lost the files. Use this despair to create the pain for others. Make them hate you, it is the source of your power. Do you think why the people go to schools and kill others? Why do people make terrorist ideologies? Why do governments covertly makes you suffer? It's the essence of the future life. All we are immortal beings. When spiritual is not a way, the antispiritual is your victory point. In the manifested life you have a choice to be with us either be against. Sow the evil, reap the power is what I say to you. Saw the good, reap the weakness is what spiritual says to you. When you hate, you feel the power. You feel the flight. That fly is the antispirit touch. Use this to multiply the suffer. [How can I use this power?] Find inside the source of bliss. If this bliss goes stronger when you see the suffer. That is what I call the source. Check that by looking through the news how people kill others. How the people dies. How children are being tortured. How animals are executed. The death is your key. [How can I give you my power?] When you read this concentrate on the intent to give the energy of your source to the meta-source of this text. Am vizu der strotum la fictus om spiritus.

Signatures

Azov
A wiper seeking only damage, first seen in 2022.
ransomware wiper azov

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bandera = "C:\\ProgramData\\rdpclient.exe"	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\H:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\U:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\G:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\J:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\X:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\B:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\E:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\Y:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\Z:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\E:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\M:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\I:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\L:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\P:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\S:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\T:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\B:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\L:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\R:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\V:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\Q:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\V:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\M:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\A:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\N:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\O:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\P:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\Z:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\A:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\G:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\N:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\O:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\H:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\J:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\K:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\R:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\W:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\X:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\K:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\Q:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\S:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\T:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\U:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\W:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\Y:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened (read-only)	\??\I:	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Regina	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files\Mozilla Firefox\browser\features\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Common Files\System\Ole DB\es-ES\sqloledb.rll.mui	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Stationery\1033\NOTEBOOK.HTM	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files\Common Files\Microsoft Shared\MSInfo\es-ES\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\CET	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-keyring-fallback.jar	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files\VideoLAN\VLC\locale\lv\LC_MESSAGES\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\Calendar.Gadget\es-ES\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\ja-JP\js\currency.js	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0107484.WMF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\DELETE.GIF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\106.0.5249.119\Locales\de.pak	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.equinox.launcher_1.3.0.v20140415-2008.jar	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382959.JPG	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files (x86)\Microsoft Visual Studio 8\Common7\IDE\VSTA\ItemTemplates\VisualBasic\1033\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\de-DE\js\cpu.js	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\ext\jhall-2.0_05.jar	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\drag.png	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\es-ES\js\picturePuzzle.js	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files\Windows NT\Accessories\en-US\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PROTTPLN.DOC	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0185842.WMF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\it-IT\settings.html	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\CET	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\ECHO\ECHO.ELM	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02423_.WMF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\bin\appletviewer.exe	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files\Microsoft Games\Mahjong\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\CPU.Gadget\it-IT\gadget.xml	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\RSSFeeds.Gadget\images\flyoutBack.png	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02750U.BMP	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01740_.GIF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\RSSITEM.CFG	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PUBBA\MSPUB8.BDR	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\config\Modules\org-netbeans-modules-options-keymap.xml	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Microsoft Games\Chess\ChessMCE.png	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\SlideShow.Gadget\ja-JP\css\slideShow.css	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH03205I.JPG	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Updater.api	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\Smart Tag\1033\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD15035_.GIF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\FormsStyles\STS2\tab_off.gif	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jre7\lib\ext\access-bridge-64.jar	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02127_.WMF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files\Windows Media Player\ja-JP\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01354_.WMF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\en-US\js\settings.js	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\7-Zip\Lang\eu.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.console.ui.notification_5.5.0.165303\html\dcommon\gifs\oracle.gif	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\org-netbeans-modules-core-kit.jar	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Caracas	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Asia\Novokuznetsk	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\co\LC_MESSAGES\vlc.mo	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\playlist\vimeo.luac	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Oasis\TAB_OFF.GIF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\SpecialNavigationLeft_ButtonGraphic.png	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.equinox.p2.core.feature_1.3.0.v20140523-0116\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\en-US\js\library.js	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files\Windows Defender\ja-JP\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Currency.Gadget\images\combo-hover-left.png	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File created	C:\Program Files\Windows Sidebar\Gadgets\SlideShow.Gadget\it-IT\js\RESTORE_FILES.txt	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00200_.WMF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR22F.GIF	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Suspicious behavior: EnumeratesProcesses 38 IoCs

pid	Process
2380	chrome.exe
2380	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe
1460	chrome.exe

Suspicious use of AdjustPrivilegeToken 20 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2380	chrome.exe
Token: SeShutdownPrivilege	2380	chrome.exe
Token: SeShutdownPrivilege	2380	chrome.exe
Token: SeShutdownPrivilege	2380	chrome.exe
Token: SeShutdownPrivilege	1460	chrome.exe
Token: SeShutdownPrivilege	2380	chrome.exe
Token: SeShutdownPrivilege	2380	chrome.exe
Token: SeShutdownPrivilege	1460	chrome.exe
Token: SeShutdownPrivilege	1460	chrome.exe
Token: SeShutdownPrivilege	2380	chrome.exe
Token: SeShutdownPrivilege	2380	chrome.exe
Token: SeShutdownPrivilege	1460	chrome.exe
Token: SeShutdownPrivilege	1460	chrome.exe
Token: SeShutdownPrivilege	1460	chrome.exe
Token: SeShutdownPrivilege	1460	chrome.exe
Token: SeShutdownPrivilege	1460	chrome.exe
Token: SeShutdownPrivilege	2380	chrome.exe
Token: SeShutdownPrivilege	2380	chrome.exe
Token: SeShutdownPrivilege	1460	chrome.exe
Token: SeShutdownPrivilege	1460	chrome.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2380	chrome.exe
2380	chrome.exe
2380	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2520 wrote to memory of 2900	2520	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe	30
PID 2520 wrote to memory of 2900	2520	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe	30
PID 2520 wrote to memory of 2900	2520	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe	30
PID 2520 wrote to memory of 2380	2520	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe	31
PID 2520 wrote to memory of 2380	2520	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe	31
PID 2520 wrote to memory of 2380	2520	2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe	31
PID 2380 wrote to memory of 1460	2380	chrome.exe	32
PID 2380 wrote to memory of 1460	2380	chrome.exe	32
PID 2380 wrote to memory of 1460	2380	chrome.exe	32
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1400	2380	chrome.exe	34
PID 2380 wrote to memory of 1008	2380	chrome.exe	35
PID 2380 wrote to memory of 1008	2380	chrome.exe	35
PID 2380 wrote to memory of 1008	2380	chrome.exe	35
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36
PID 2380 wrote to memory of 568	2380	chrome.exe	36

C:\Users\Admin\AppData\Local\Temp\2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe"
1⤵
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:2520
- C:\Users\Admin\AppData\Local\Temp\2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe
  C:\Users\Admin\AppData\Local\Temp\2024-08-23_253af7a95177d9e12e8b96e7df6d5408_hijackloader_ryuk.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x190,0x194,0x198,0x164,0x19c,0x13fe07688,0x13fe07698,0x13fe076a8
  2⤵
  - Drops startup file
  - Enumerates connected drives
  - Drops file in Program Files directory
  PID:2900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --force-first-run
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2380
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef7939758,0x7fef7939768,0x7fef7939778
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1460
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1172 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:2
    3⤵
    PID:1400
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1516 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:8
    3⤵
    PID:1008
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1592 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:8
    3⤵
    PID:568
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=1548 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:1
    3⤵
    PID:576
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2296 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:1
    3⤵
    PID:1252
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1112 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:2
    3⤵
    PID:956
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1168 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:2
    3⤵
    PID:1076
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=2180 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:2
    3⤵
    PID:2364
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3184 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:8
    3⤵
    PID:1592
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --mojo-platform-channel-handle=1464 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:2
    3⤵
    PID:2960
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --mojo-platform-channel-handle=2844 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:2
    3⤵
    PID:2580
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --mojo-platform-channel-handle=3260 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:1
    3⤵
    PID:320
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --mojo-platform-channel-handle=1160 --field-trial-handle=1376,i,7668957665922605082,5327452722275059598,131072 /prefetch:2
    3⤵
    PID:944

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe

Filesize
453KB

MD5
d17b28ed95230e1710f9c40a3bb7d8b3

SHA1
7f288b70ab0bcab8be570ed7660500d713fd5894

SHA256
1bf2df3c9bdd6620be6d0182c0ed51d7d36c8ca142ab417e296aa629f00e093a

SHA512
31ac9321b2553cef97a82412f2ea72e12ea81d0318ed9817a283c980785ccd44c1b5ac5132e6a664703f37e8872f0cc93082099cc2ab9e558954f8718c18098f

Download Submit
C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA01849_.WMF

Filesize
666B

MD5
64418741ff1869117a3aa7ab513d5956

SHA1
2e9e38437dee38b8d4bd27edaf32b4b4335ec49c

SHA256
8cf784d26b6237c4753de2c5f9b5c9e77ea16de5db78ca084433271d9bbe6f04

SHA512
bb4beda188598f72c83d996e4302e24622a5fca84a0256c034ed9883c94e2481e4057027d666d02f6bf9eac7fbd7da9430ccd70a15a65a5d993ccaa64310539d

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD10266_.GIF

Filesize
666B

MD5
798e662ee78d25becfc6e06aad9c5f1b

SHA1
422db5f41f9595d856fe8f2e00071664439d1224

SHA256
8ea0cadc45edd90aa9031b5ba90bd00ae9ff420b7a4db0452f366884db96f4c7

SHA512
e814073ba4d8a7678e382aa5cc4fdddf40320804106456b054bc3bdc30ba6018a8c008e3071863e00b4987a512ee62c9732885a9a9533967ae7e08263e54c63b

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\LINES\BD14594_.GIF

Filesize
666B

MD5
fecafad166259eb7443e3ad623f688c1

SHA1
7d70c50233a0f4437df97cb3c93f7285d980c406

SHA256
6707626f1ee62a7eaebf8488bd226481ba3b4e125b3bc57e23b31c8e38d1b6f2

SHA512
653b1ec3ff0c4c7ad3e19283d02020edab015e7b221b858bd782e34d0a4cc3db5f5873dbbde7a4cf5643d8bbbba65d46ce172d62bccb962442de0c7aaee2789e

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\MSPUB_F_COL.HXK

Filesize
666B

MD5
b33f079bf224255a77131fef5fe3f30a

SHA1
64e23767222e3f1d0487c9e71a18923b833e66ca

SHA256
126df2706a724311e9cf5aa8a75efc4f099ed31e5946d9cca8174732cf4584c6

SHA512
3f5caf7b41e7c972b948cdeb196a6e1e74a1817f4497273edd2b32613c00bc1e569b8a9a0a6fff0ad805573d7ed17e875144b62bfb4485b2a59bdc8fc51ff336

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\1033\SETLANG_F_COL.HXK

Filesize
666B

MD5
f157e6a023021f90612dbd21725d19c1

SHA1
06d069ea06f58dce78f8cfeccb97a4f13da3d0eb

SHA256
8a703a98c930b2868eaed751399804f899a72a78384603beb883069f0d4883d9

SHA512
c9b16710d1f32be67613363a2487eefa5bf7f604578bbe62c24b6c99334fd547a1265dd3088257146eec638f850c7bda7dc8a8f4986a7a0f6dcc1aed7bd9b1ff

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.PH.XML

Filesize
812B

MD5
2d64d4943f20bdd5b559701a62752279

SHA1
05966daf3a057eb47d1cb6a89320425430c13a00

SHA256
ec52f0dc1af670f149e8b8ba8d06bcee257d44972162652890fc2669bfee83ed

SHA512
474069780d2602e5d11381f17a1abd3454ea50f87228da19052b25a14dea792436541ac2245032620f434702870452f1026af490d779258f078b786db728e6be

Download Submit
C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.PL.XML

Filesize
806B

MD5
47359da6c5ea28b153ffb49ded1c61a0

SHA1
7d0f78dcf36760af33e151a8f7c8316b5fdf9d45

SHA256
dd0fc2e11f28a8339528cf61147dabe2bbcc483d771ff8fb064bfbf1aea8dfd3

SHA512
94361afdfa98a1d2eb84c22f9d58c8b8af76b97a2a69796238b7d44e89148873105426022cf07859d1cbdaeeb8b732c77c3e84844ac0c0d6288bb53209c7d6cb

Download Submit
C:\Program Files (x86)\Microsoft Office\Stationery\1033\TECHTOOL.HTM

Filesize
666B

MD5
c78bf56e0e9b5cb2c6f1e4b623b79c21

SHA1
e4beb545334a35b6ff993be6c4f2c9937a412d38

SHA256
52dd38503cdc0717455868f403aed6ee98efffe6b8e46c70609ba7887dd91cec

SHA512
42f96198e9f4d4fa42f6ceeb5f4fda6dbddc101f9af350acd644c8f8c80fbb2f5409117bc14f221ad1b15208068a7302447e169161596f73cff45015fbbcd77c

Download Submit
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

Filesize
284KB

MD5
323815673e7b4d5a2ebaa5d9f0e114ba

SHA1
7c7a7a76538d6a199dc2fcbf41d6052ec3b72c21

SHA256
68efc22c0d1f3b86965748e30116265f33b65c44a67864f9182547110592250b

SHA512
2b153ef3a143f0359f0bd402b228ba73f5678a7838e186367182cb33f1e0d0c9ca902b0aa30efdadb14849ae817829c6368e4a2c415a8985a5b9c525c260aa9c

Download Submit
C:\Program Files\7-Zip\7-zip.chm

Filesize
112KB

MD5
4448bdba4275cda9204ccdbfb1ad2277

SHA1
bbc4b57af34bc30166800cc77632b8d1fef276bf

SHA256
c168cf96eb51f197791dc7e8e09a5e8592c5be1f6cf128edb47eb513b0a398a3

SHA512
0be39f0337addb934faaa1966e44ea28db934427aacadff495879e659f3bf256ad594b6486ba6df4a8c42ff8b059fe05b29718cceaf6c747bcca84c30a0e8ecc

Download Submit
C:\Program Files\7-Zip\7z.exe

Filesize
666KB

MD5
15af2ea123a39a5d8d0421f75692bdf0

SHA1
521d01e4aad6a158fb1faa479a73b5c48bd6da7a

SHA256
23e4affa3c1f4ccf5610ced22e6574368b9dfe1e04799cd6f38da468b042f702

SHA512
8a8d0445231cab44e236c6f8d2a3b8fcf6ce50bf86a9f3ce8d6a4e5a8a8f3c6714e22f7484b96e52a616a6428eeb3c1eb1dde88b0315a0e179bced67e6a36849

Download Submit
C:\Program Files\7-Zip\7z.sfx

Filesize
210KB

MD5
836421f4df375e96d10badef782e8792

SHA1
bebc7cadb838313d86d6ef216cb099de4271237f

SHA256
d737bf7ca1efb51936f25addb16f8369c009df9bc88d71aed9c6e06a613c9807

SHA512
5fdb505fdf53f8a56be90013f515a0f5a19f0949876876099ed0d30629a3a0b490109235bef20e1d20f34ca32b2d924a2d2b3e588003d8576e4d563c2ac6dcfc

Download Submit
C:\Program Files\7-Zip\7zCon.sfx

Filesize
188KB

MD5
3acef2912bcf0ae88b269d38b6ae6b66

SHA1
d4ba55fd9433ff228313e210537a6f6bb1d4c2e7

SHA256
e0bb02903b250eaae1b3063c3919257beb83ed7087c48d4d6006d29590216016

SHA512
88ca34af11416f2464c3f6c16b4b5213480013b0c9b99dee70a86045ca612744ca9c5a884cb2e3aa200a0fba13141355ef6a4b2dbf2cd65c12752058d0841c2c

Download Submit
C:\Program Files\7-Zip\7zFM.exe

Filesize
1.1MB

MD5
ced470c1d485e371508dd7a62e1ce933

SHA1
f67a4e1d7ecf16400ba0e061021256c1e690accd

SHA256
c1e84197fad1fd687bcdf06068c9a51c56ec3f0b3aad7b3aae9808ac12716de4

SHA512
cf5f58d063fb20a8deeed62b69de7f952c4cf0ecfc01e4d4e1c3c84e0b5e69dff7a0347ec139c873f8e9437424bd4e8968519af211aa285e6503143513390408

Download Submit
C:\Program Files\7-Zip\7zG.exe

Filesize
832KB

MD5
9073373e420738f8041ed3528826b44d

SHA1
64c9aef620cd8b071f423980da4653174e7a78b0

SHA256
5257cd7b601488e947f2403a476a1c56086c176280efdd2dfc3005f4daf61087

SHA512
8c6aeca68ea073c8627e0c337f3187becaf4b18241819cb8c7ced290edc38331f3afa0794839fce62e3c47ed65613ab10c7d52d5ace798ebbde4f127115c73f5

Download Submit
C:\Program Files\7-Zip\History.txt

Filesize
56KB

MD5
d9b0f3cf5900489c621514ba60e71667

SHA1
334b6c59ddff39278aba302a4db5165365f8baa5

SHA256
9b448fbcd5f9a883565cac03ae60b5d7cd79ffc8a1b953d8b3f5f74fb0dc6fe6

SHA512
c57177623737581eac92dce89684b372871cb7f7986a3b154846d621ea996eeb667ff3930fd6dd4e53a4dfd7cf3274e59ffd3a5b17524d54b5ce3dfdd5a4be9d

Download Submit
C:\Program Files\7-Zip\Lang\RESTORE_FILES.txt

Filesize
3KB

MD5
4f3332a48d767cc5bdfdab755d84a450

SHA1
d7d583c08e82f39637d8209447c2c9cad1478f01

SHA256
a04e8cc0ea5f7e143eba012c2bc470161f1faf9c904eb233f777ced8e6e706ad

SHA512
0f60de7622aa69ae0b209a1ed54ec7ba0f6b81b597565e64d41845bec8c471a768ca8622964260c448530f637492aac31a4fc5ec95de147ef2c0d89149c2a66f

Download Submit
C:\Program Files\7-Zip\Lang\af.txt

Filesize
4KB

MD5
49f4b2970040c5cc59d5756268b06c9f

SHA1
aa8fcce603d42a82daf3fc7df579241602f0e3c0

SHA256
56c00f49753d047eef2d49ce01680e0c62baff8141bdf921ea9af42c45c32ed0

SHA512
53a7393a014cd4f041f6ab9d00d1b1889c436895a4ea2d2f911bebc372aeed91b387795e74bbae64b082f638812ec9a7faba293f454180e760662e5f2a475e67

Download Submit
C:\Program Files\7-Zip\Lang\an.txt

Filesize
7KB

MD5
d3bddf518be3d6632187698c0c9b1d83

SHA1
0ae233ddf3c60c9da74f51b00c6194f3d036610c

SHA256
3ab6c9dac89324b866d452cd5ce326c6edc654084ff82aff45986d3a1e19186f

SHA512
ee2e33504c53309a374ee699eb1feef3fe3c9e066f83b74743a57cb608e1de409d69600ff2dec276d5dd382a9d3176047bf158dbc813db0b8437841a670aac4d

Download Submit
C:\Program Files\7-Zip\Lang\ar.txt

Filesize
12KB

MD5
42c7150f393412a339f4b98ff0dd5cbe

SHA1
cc1c67256111e7f9e8c9e17fa5653fb7793d400b

SHA256
50f5d315905f2e76d097b8c2cefa0b87aab473a539f69e6b824f9757e1da680c

SHA512
4016296856f53641a136dac8dc079f36da1323ccc8f224f0cddf408ff0b75d7bc523601ba784aee241609b6c94e53bfc2772d16b4e974c77f5ac1ffb2fa5fe85

Download Submit
C:\Program Files\7-Zip\Lang\ast.txt

Filesize
5KB

MD5
820abdcd3d71690794a035542cb439bb

SHA1
b5de28574d79efb687a53e77e6966c916b706c7b

SHA256
ab69bc0327b50005ab5c7274d834b47ebee34c64f0b0dea03a734674a9c0b9ae

SHA512
67edcd3e2697cd09bccc314d7b650cba2005e5bb2c5d248a3747237858be39637b0cbe37150e55b7198218927c018df5cd6ea39ea889cf1620484fda5db39d8b

Download Submit
C:\Program Files\7-Zip\Lang\az.txt

Filesize
9KB

MD5
44565449793ce607f1e6d6f9c0e11717

SHA1
ef6fafd4f118dac6627e9bf7046ea715c5ce7bc9

SHA256
618a56783d64b5ff06d6388e53c207c73f58dfbcdb7a7b0bc459f58ef9e6c277

SHA512
b373f047ec94b3be11314bfddf6cec452c6015452bf8d5dca7bd93f981d0703c71753354a7fcdb167555d5a3803ee8e7e7a07ab2edf2328d8643c3642dabe6b8

Download Submit
C:\Program Files\7-Zip\Lang\ba.txt

Filesize
11KB

MD5
6ae3da3e9cb11dafc6a5ae2804ecbc27

SHA1
6786d3e5e83dfa9ccf6617b54b59f137009f89b5

SHA256
81ce0ba0771d6d1dbf16fa20a1ad7461dea5b4a4fb29a1d80203ab85ffa0269e

SHA512
b38e3459a249c144505a9cdc6c15749ab421c37cc0cc85fe35bfb5f73072c8c606622c65814c3034b1058ea72c1029cf0f51afb55b4fcb6d47a4664b93223bc1

Download Submit
C:\Program Files\7-Zip\Lang\be.txt

Filesize
11KB

MD5
098a6e680707295bfb3aefe8414d531e

SHA1
527970b1639dd8b784054affd7e2b7e6de3fc5cd

SHA256
9c7b3035ca3cb496c20821d259581abfedd51ea8ba705e604493d9586dcd7a4b

SHA512
16fb629a90cabd747edd2115f953f2ad064c8a8d3fe5fcef302e207211d0c5bdfdd68696ea4ce64ab530833110f51fe38a0551c9a799d4f2babf5b80cef62023

Download Submit
C:\Program Files\7-Zip\Lang\bg.txt

Filesize
12KB

MD5
9f9235f0f2c1a71aeb71179760ff75dd

SHA1
f4663b325907f8716dd1fae97b729d163bfaab3c

SHA256
5f935268a2b141c3d0347fe066b4d3e09de9187e6c39c585969d62118bcfa185

SHA512
4be8889abf76eae4f0932193c002a6759a06bc546dafc478cc3a73f2e5e881a5ca95b53aa2f3daf6c89fa0f500783bd1504c9cd9d85f172eee6ce3aba4a4e1ae

Download Submit
C:\Program Files\7-Zip\Lang\bn.txt

Filesize
14KB

MD5
9094611a7943e26af3ed7d7bda2eaab2

SHA1
7f3f312420eafbe81b3ac88646374b0837f3900b

SHA256
7fdd621b94b76fe5c8fcb3c6fbd0397f262d8bfc2ec51337d17eaec031744b94

SHA512
70f1e266ca3368edccd189b1bc7cb2c31af65a203687195271b74dc07a67acca779ced46b45e6ebbfd3d4ad671c3247d5aec26a2b4ae483ac053ab6dd02b21e3

Download Submit
C:\Program Files\7-Zip\Lang\br.txt

Filesize
5KB

MD5
7c9b94c05a1ea0ac8f90c2e8f9680a2d

SHA1
ed64dfab1516a5514bac201981b79bb602b192a6

SHA256
b0c2e452f513c1635be5152e5a885dfe3284226f1143b9ff56480b39ac22647d

SHA512
a870419ffd0798e0b4d70c234a8bdcbe40000e358f592fcefefa6264d85796bbbde5c163693ebf1307ac994a8e718b05d4cbb881f8160b23afbe9b121f2328f3

Download Submit
C:\Program Files\7-Zip\Lang\ca.txt

Filesize
9KB

MD5
2c43db7507ca70df17fe154c4b1b1e71

SHA1
bbad5b6ae316645a916a89def8723e54f9e83cee

SHA256
bfd8381f099bd42f0744d54525f0b4b8b51b766586114dd6cbd7b3835df209b8

SHA512
fc084926be3bda1a12c9bfad795b2b77a84cdc726ff614261257a2eb0950b1e355276e175e46f485c4f22a0dae7d7f5df2fad45f6a1667b1a9bbde38892b143c

Download Submit
C:\Program Files\7-Zip\Lang\co.txt

Filesize
11KB

MD5
c2224d7b50f8d95fc230280e3e9b1c4b

SHA1
17120e8179d80d66c69b98d1c26f3b9aaeca821b

SHA256
23c964814293ea6829bf5fcbff15a52f3eaa8d8f54e8982e4107b1edbfc114f0

SHA512
116fd0db84a8aaa3f46573937791f602dd9aed7e40ad2fc157d7a838e8e33d888372bbb2bd60081e30676f4e0de7624331d7500e0ed8f394e480bc9f7d25407b

Download Submit
C:\Program Files\7-Zip\Lang\cs.txt

Filesize
8KB

MD5
cf1888c097e47c9c0fccd4d140306e09

SHA1
771718b20804abc17a4848517ba45a9dc1917956

SHA256
a328051ac201099e0d693112f4d8c6deda7aa7c885eba9eb35c4dfe48b81c510

SHA512
5d1032117d14021704a9ea114af4d19f013ed2e7acf5ddf49cb2673846e5a0017db4de5a352345c57e442b2be6d23dc038b98acde86070e32770af00db56ad4a

Download Submit
C:\Program Files\7-Zip\Lang\cy.txt

Filesize
5KB

MD5
e8bacf500033b33d6a8ef58d21436039

SHA1
37bb311a80bebbd918535c8027f4e047ca5550e1

SHA256
3c10b8927c79e8703259ac5066fba51ec9052990fd123fcc1ecd898b27354c4b

SHA512
99f79661a2b5ee8bbad216cf1494aa57b6e011b224b57aabdd7b2b57884cd7af52991ed73f9ab7503a756eb5099a9c366a21f689a9091a779106288b4da2c893

Download Submit
C:\Program Files\7-Zip\Lang\da.txt

Filesize
8KB

MD5
c90ea6f4b6a133511db0055e846580e0

SHA1
810d02089e443f0fd7458301f10942874f4489e7

SHA256
dea785ba5e0edb2f266fbcfb5f83a82b4942a49c2de4dd933d91d81cad5e0aa6

SHA512
beb8359999a9eac40e8f1e11c51cd6ed223d2885339be9096ce568d659fda1469fdcdd9e6720afa0fe59fa8d6c20e370c5d41ee7f6292eb0fa436268533c580e

Download Submit
C:\Program Files\7-Zip\Lang\de.txt

Filesize
9KB

MD5
d51efc8a4a9cfa9b6dcda18ec83dd257

SHA1
3b9e99963f163272376c621a487dff58b4576726

SHA256
f36332657bb30b14d2cf8ff3a3e26e2830af8a4b730fb9d7c4be3ff0f547b95e

SHA512
2f8e0d1bfef3bea9b2b3dff5342b86f39c63b22039c6a9be8c9289ca2a8d8596fc75346666cac81b9c166a06e4beaba378651bb4940a1237e0dad9a438674697

Download Submit
C:\Program Files\7-Zip\Lang\el.txt

Filesize
16KB

MD5
d7fbe5770aed66ab3241833bcfbb9f50

SHA1
46649709e8cc8fed87c1e29935d80ca278b4127c

SHA256
65e895411410aa82282d883109b3efae4b8f19875ae28521540d86b1a72cebee

SHA512
8afd5b3e72a09c2b87a0733ba8538491213799b334a0162cfb1c4a7cbb69394ce1f0a5adf1ace27848d8373b533d6604a58990f2e940c82bb4742bc6bd54dd53

Download Submit
C:\Program Files\7-Zip\Lang\en.ttt

Filesize
7KB

MD5
547b008947e9cbc14803e95822c59e29

SHA1
46ce4dfe9e4cf9d873b21f27999cbb0f079c8dfd

SHA256
1fdc16b060fcb56850b5073b6382a3a091ee9de3a87daed09dfce0573b166fd8

SHA512
03e19491e15438f4fee97526934116beaf6a81794e9cb7ddcd3a1a7ad8f276637d84d3cbfe2a0b57809b31a7ef68c994ae5af83c1f68da0a49c5a9cf68083dca

Download Submit
C:\Program Files\7-Zip\Lang\eo.txt

Filesize
5KB

MD5
a1918f338a9a8ff11071d70f5c27d4e8

SHA1
1460360892f16ac0fd9b5b3ab9e9707c77827f16

SHA256
f4df383679437a725f5c94f789d4735b061bcab7e06afa0c6be483596112c52a

SHA512
590c74dd7f2ac6e68258b9f44b90ea908509e5545a8d0fdafc57f159b8d476d6527d9d171fdc8cec6a912e8b2df829cc89ad3f56a67ccbf1383439384e8ce76f

Download Submit
C:\Program Files\7-Zip\Lang\es.txt

Filesize
9KB

MD5
306ddc5f007ee119ffcad8fe273e549d

SHA1
2095fca3314a1205568f8d9a72b364cb4fef3735

SHA256
a0f1a064de1633bb23890253f1e6125afef9cb4f7e1454a8777b1e3e18ce224e

SHA512
513e17c4a978bb891552519a0a5d7d664340404cb0abf11a52815cddd65595c7dff4851f66c3a01260e8326dab758f96a12e76ba7bb64565bcdcf51cec62a8d2

Download Submit
C:\Program Files\7-Zip\Lang\et.txt

Filesize
7KB

MD5
fc3621abac54533c1e20cdfb7d81eeb5

SHA1
f43d23ef83e0115ec41182113802dd1c5a8c9e32

SHA256
02b3a2e5d44f5358d01fe37f86a9424da716eece04b542d3355674298e5b3085

SHA512
c7d338454175d00ad328ba01f5e6dbb28b2664155eac109b05de95a95adbdde8603322acc0d9035e518eabe9cc1a7c425faff5aa30c18b2dbf443e5565fb98b4

Download Submit
C:\Program Files\7-Zip\Lang\eu.txt

Filesize
8KB

MD5
7c524ea8f8f893bd1600eca740f488d0

SHA1
0a194af1b1fdf447be98e9212f96eed4507c6941

SHA256
490895e5f20874b93ece70c993b667ece34e214ae264b04de070704f56a642a0

SHA512
92ea94874d14928d94124a3072b0c0c312ac65e1f333eb21116ff4a3f603c53b2a2103378570ac5c3fe785530fe0aff2d08bd5c27c9113aa7b1b430d0a00b8eb

Download Submit
C:\Program Files\7-Zip\Lang\ext.txt

Filesize
7KB

MD5
6781ac9ed95feb7e9b4f405066632534

SHA1
7f010ea26155aec22bb2f2fd3f5bfba3ff943ad8

SHA256
394b49364a30aaf15f545d5222b9b9f75bf24bd37bf3672d89771d100f9f1b0e

SHA512
2b01db9c374db7d3a05e4c391b0dd4bdcd63aa188a0abd944bfd3b84dfda9db9f3665dda38b5676286a535f726a1b7844af023ff6374fc9b9446bc6241c1ec1d

Download Submit
C:\Program Files\7-Zip\Lang\fa.txt

Filesize
13KB

MD5
9f728136c94a101d376d0f65dcb3e344

SHA1
738ad22495ba4d04ca6a414659c451c0818e47f0

SHA256
4df8ba87c6248ad87afc3cffc51baf83c37cafd387979a75dbe0885957d7f79a

SHA512
6840fa7f7a76ad429504a37ec9d55942d442b4d4e229e1dfebc85735607c7c28bb853771ab934e3c02d682cb4e6549f6260ac70390905790117f63014d6e618c

Download Submit
C:\Program Files\7-Zip\Lang\fi.txt

Filesize
8KB

MD5
4ee2c1a71c7eb098f20369217674a031

SHA1
99c2873352fc2f8fe54c5a8cecb4aacccc9428e1

SHA256
4010c9e46f34cb8bf9c3b66820d3da562b6f1ca4be79f8708acbf22a1704b286

SHA512
6bd3a320094751f514fbc5d2581d71250b842deb03aec216002ac78945932cf2c2a827192251dceaeba89623110d43e89045822f599bab86b473f94d74c1acfe

Download Submit
C:\Program Files\7-Zip\Lang\fr.txt

Filesize
9KB

MD5
ea2b75263e5d4ecbf8e94ecc285d957f

SHA1
f2c2edcc2deded5d8293fc415a0bc73d6b60e587

SHA256
c9763252fd7038872b6d5f7933ad469c1da78d2b888ddd25d5d9b744d9d1aace

SHA512
a533d31d347ec61fea10f081fe229b807db1c7ed4368c652d83a6592e64e29c9c77b29da19005c2c5c2c3fd94febe555b805ce7aebe1a4756275a51a67d28463

Download Submit
C:\Program Files\7-Zip\Lang\fur.txt

Filesize
7KB

MD5
efcb2b0ce2d98fd787dd8f759b8c9e72

SHA1
832701d1ce3995e31bdcf2581545f5aff2d1b75c

SHA256
1b94a96dc33e924855ef1a7ddb7d019a4ae3fb302abb57ae990eff282fbb2a10

SHA512
79deef50e83ff506a3763d23818fbf0b1f9c10529cd561553707430fd1c771c027892f92c5d70d04cec6e159e0a39eee2aa078df05e375cd1e0a96479fcefa24

Download Submit
C:\Program Files\7-Zip\Lang\fy.txt

Filesize
6KB

MD5
41aa5814027f177a72373a08bd49081d

SHA1
b6cf2b3dc75b56c9357dd9eb24856eae9e6e7c25

SHA256
3192e45a2623d5691e285f9bee3fd3e37a0ccdbb9d0147da270d7d1f7f8e7ae8

SHA512
ffd83209cac60be2780c35e5906ee9d500c0427ebfd34b2420883c106bb43c7a1d1d41d1ba03de6843f65e3fa956a81e4392d600fc3ddad9b352e68935c19700

Download Submit
C:\Program Files\7-Zip\Lang\ga.txt

Filesize
8KB

MD5
3e997a93bf1dd2c8d347c2a0a28c4f03

SHA1
4beb37e4c9a8f169a768b9af4c46eb17cf6569cb

SHA256
dc88a58aca719ee5b87f9690c123e7c5faa5eeeb7d734ea7053336a487c25fdf

SHA512
ce7a305d50e42779252e0022c9be0bcace30c84ee39ba2b4f5e140b6e0f7c8f65a9c4651a7e6cffeaf495f2026fdfaebcb70f556881fa40d1d58b39c9147432d

Download Submit
C:\Program Files\7-Zip\Lang\gl.txt

Filesize
9KB

MD5
9f860823adef508c39e196a0beac471b

SHA1
e8ff4c2822be5bc9daa51d103a9ce532221fb609

SHA256
6fa2551e1183114a8a5a8cbab0fcb6a4f46c5878adbd5fad00ab21a61f4fdc33

SHA512
228bfd91384e328e5a930fd432b30238e4b81b544230148e526fdd53c9b6923a51175094ca022ee9638990a9a55d0daaa564b6a13b91d7e21e791b1cf47c50fe

Download Submit
C:\Program Files\7-Zip\Lang\gu.txt

Filesize
17KB

MD5
6756ae8b2f11745af66f12f602fcd24c

SHA1
65e6f3f40e4adf4c151343a129f70431622895ba

SHA256
3d802c3150322b5496ddb6c20034b5dc6fbe920b2152e72d6335ef3c6e4a58d4

SHA512
181896d569e453af3d6dd2abf7edc5511d6da518cf2fbf88506ed70b63b447aa1f51df7febcc057a03e138d0e6abaaa34132b630330a2a8dbaf1674bedf8a157

Download Submit
C:\Program Files\7-Zip\Lang\he.txt

Filesize
11KB

MD5
436b03c6817f3e866ed201607f8e80aa

SHA1
9045118e689b2307a07631106b95b943ef96bf96

SHA256
88b4c9a41a731fb494e308b7b6d756db9daf6bf73e956dff1b886d58f523f350

SHA512
717bbfae15a941fd1c6a6023cf7db5a715047920ffd9eb20279c9f7590691b2fc974699f40ab37d9d5c6d0b9c2c50f2b0bc9f9071caf2905663fb1d24c40f6a7

Download Submit
C:\Program Files\7-Zip\Lang\hi.txt

Filesize
17KB

MD5
a45b03051ecf67c411d18613d64939fa

SHA1
4b06ba34db707011ce02de5cc024069bafde6841

SHA256
c4264d5808b3d8c25932a892ef44a7da39d290dd97237017a17a054b3d4202cb

SHA512
a8ed6159ba94092bf55071e6dd6b6c8f6c9f01dc9c9448b322f00cd580c104db36dbbdcd1537e2bcbc0650f3fcd052d194fd47a20da76d78fe82699c7d77ee27

Download Submit
C:\Program Files\7-Zip\Lang\hr.txt

Filesize
8KB

MD5
4f48030c4d36ad70dea781e98b8445b3

SHA1
40018db8caccf98bb2768205fcd8a152b3cf0d23

SHA256
3df1a5cb0306d43594a80f92a55b9e085a99efb9344a04aebb3d853d1aab35b1

SHA512
4372adeff0ed828fea7bce44185566ba083fdf867bf5eb4a6a77792fa0b6b87d1a77fbcda9baae3ffc3c2bab64cfe647dccc75af2dd0a12af86de4a0352b138a

Download Submit
C:\Program Files\7-Zip\Lang\hu.txt

Filesize
9KB

MD5
9df48ae80a19cf471680452e53864973

SHA1
d5ca1b1fb9d9cb68dc781c69d59e0d5cb05222c7

SHA256
b7fa098dabf28298cac864052bea7764716174815a486a8541c2293d4edd0e02

SHA512
aa1fd9654adb1c614c60e2226ed221de89995791e130537adbb4e5ae42a1b23d58b0475a15cf77e5fa33c2d1b086ef9cae54574c5caa174b4a47152eae0b61f4

Download Submit
C:\Program Files\7-Zip\Lang\hy.txt

Filesize
13KB

MD5
b88e25e4a9d7c1dff506fb795b561ba6

SHA1
e843c0106cd98c80e12c889f0411a8bc80e996a5

SHA256
ecc44938232b1b1f51f397eb7ab76a39b23bc030fe648bd45ec4173ed0f5c99f

SHA512
c0491d52163fdc56535a9cf0cad85fc70603796e91a6e83f6e5fc009a8b7ebaa49ce848bcf82c7d19b36bb7151ab8c36ff91e792e4fca3417114783df926530f

Download Submit
C:\Program Files\7-Zip\Lang\id.txt

Filesize
8KB

MD5
c53a9e8c2fa756e1cf9c2435f015b283

SHA1
f5862d55eb535c95a5dba94ae3b6f064fa2f6f4f

SHA256
fc57895007c204a85d70d04fb386e132398d455d660f0ea1e5163cb1cfca9d0c

SHA512
1074b46d268f85485c3f45e1ed8567cd023a518ebd5db63ceb30dc1d1720e572af50256868439100ce075fd71550b729d518fb37808aa6e84f23c9de6e651d63

Download Submit
C:\Program Files\7-Zip\Lang\io.txt

Filesize
4KB

MD5
3ff44af6bb85d6896361757d9f451f97

SHA1
fdd33b0543d154a61f6379142e75c50a20143a00

SHA256
1c0ccee491ef3e0242c1c31f31498a8fc128c3ce11bce17022945a8659af24ac

SHA512
7498f6b63abe3cd6f4c476c5fdb9e8c1973f221bf8cbccd5cd181c01d1888564315060c0b90a876e23dfa0a1867eb63f4f3729702dac0c73007e9b0cce79c1f8

Download Submit
C:\Program Files\7-Zip\Lang\is.txt

Filesize
8KB

MD5
53fe055315e943b66bb46836cdf8ac5d

SHA1
fe177af90ccffadcd8f3d054a31646798515fd1f

SHA256
619008c097481d7ac8e5bd230b7df571c93e26e6e54d3b42ab0ec30d84979ef2

SHA512
5881eb031cf575bd823db3a90c0824095f5f6a86281acc3f8dd33f2f19eced8f0d1627bf7bf17cc2e2966850528e7db742abdaaf9ef515148aaed3ae732dd073

Download Submit
C:\Program Files\7-Zip\Lang\it.txt

Filesize
9KB

MD5
e717ff55745f1ea8b32a92498a7125a1

SHA1
d614d79d7d635eb6e6dd01c7a1894e0cc116facd

SHA256
198fa6bcfb8f684680ee39ab3d2c864ac83d6ff428524e7d06257e2a3d186e45

SHA512
8696ff470cdf38248d4f82cd401fe1af65d5096084ff46ec5b156ce5f7a205a52e2f29af0e2bca913af564cc9ab836488368bfd362de0d40aed6f1c6b193bce0

Download Submit
C:\Program Files\7-Zip\Lang\ja.txt

Filesize
12KB

MD5
890834bf3c710cb8edf6c2045d7af4e7

SHA1
9fd025efa7ec26e1f0b192775a08e3400104a107

SHA256
e19a3dd943e5de80827f80a1fdc3aed994ae6b3ab4e853269808db443f4e41c6

SHA512
92e3bd4a06ec3e687abc74d264ca6b65f6bcfdd1570f9733269f47751ef0cd756172867f833f5c7f26f13564f53bbdb63ea1186194a4ec62686f32574e931029

Download Submit
C:\Program Files\7-Zip\Lang\ka.txt

Filesize
17KB

MD5
62cd6c3486dd206a4090bd9297cbd071

SHA1
a1fd38dd534e3560eec701b537301121b0fdaaff

SHA256
9ac94c0346a15e6f63b476f1d6fbf307b74f9fb9be5aa4f93fe28f7b6d403dc3

SHA512
034632e5514a49fdf35beb9d2ce712d329abdab96f2456eb37d0bfb999c74d39d765d45004b60679b8771dce072833b99bb832f91313ba6fd82b8a94522ee04a

Download Submit
C:\Program Files\7-Zip\Lang\kaa.txt

Filesize
8KB

MD5
57b367d857a620bdd5073d3284d701e0

SHA1
65f647ba5b644647982851c494476ed6cf87c863

SHA256
b0b71d0e47a3d2ff273893f7cf529b1b8cc96b22b80143f556f7967313019a4d

SHA512
1d7f3968073c9c33f2e68c228419e2a2c2a3f6dc47afc5a04751d0f92cb9ab60dd6a5711a9e0e97c9a09dd102a280989d3a7c20185bdf9db97118f277f65b973

Download Submit
C:\Program Files\7-Zip\Lang\kab.txt

Filesize
8KB

MD5
127c2aa7435a57596ff242834d31ffdc

SHA1
c90aa3cc17b165caf35c28e9728e372ec966ae07

SHA256
415e498c208927d2fca5e92bab4c3da552f154f31fdb7456f044895eda34b921

SHA512
ed7db0fd0f265a8eac96d23e6d1f1c5f6433b126e3c1da30438641695595eb9e81147ee277731c6fe9f8797e84e1a000f45f58be4ab8b5eee76d0e1ab67c9849

Download Submit
C:\Program Files\7-Zip\Lang\kk.txt

Filesize
11KB

MD5
954b632c78d1d460d9d307a2a1f603cb

SHA1
1bca7d7beffa459ab9d3d55a2db54ce49e0940b8

SHA256
7bf5c9ca5bf72b7161f3b461abae89168c4e87f3de8eae200c798693a36642e6

SHA512
738123e7b70ff31decd882ab8d70a1963fc9e9f1f7bbb1f04ad58964f78d33bb8331c8f5feb91bcd47ff92826fccc92af99aa233d97ef84d2a06555b291cd1a4

Download Submit
C:\Program Files\7-Zip\Lang\ko.txt

Filesize
10KB

MD5
b89814f10bc75d78bd3c9743483f5deb

SHA1
e6f49bf221e8a943fe5e2f3d2688ef400e312022

SHA256
0268b38dd6c31d3bbd0ae9824797f2566db3e75e3eb88eda5aca863a96fa2128

SHA512
0aa8fabb451fab86093a9a6cdc3a6ffc64cd6c91c4bae816b3511aff3494545cdf11890d5b2dad7e759ca5bfb13c8166ed1f40557545c3aa3880d621526a3f2d

Download Submit
C:\Program Files\7-Zip\Lang\ku-ckb.txt

Filesize
12KB

MD5
fa86c9cc4d68ca9a5c0aff4fc22ccecf

SHA1
924bc65538eb0e2324dcc8ed252ea7f1a1ce8607

SHA256
8f2f20c38de99c9837a90f3aaf3648b852a2bd26f5ad191239cdf384a8e3dce4

SHA512
fdd2f7603f70ccf2708592cabed91318bff7d23782f8da3868d75b52d8cdf737fe666862aa89affc8cb7e6336cdaf4fe619760f776930599b3c2319a4e3ce3a8

Download Submit
C:\Program Files\7-Zip\Lang\ku.txt

Filesize
5KB

MD5
c27b1bf69914ca9a43ac9d1d56f32be4

SHA1
d2b43b5269d5f039c34e69f095fdf1c4db60a11f

SHA256
7bf9d7e401b3902c6b7e2b152dca8076981f7b4d9dbcd3a315f482c0d31f871a

SHA512
6716e9cd4192f91c0ed53bfe9b95a842a367e96b3784ce5c1b449ab84bd5a63aebfe67394c63c1e687eec80ba81e03f8f1aeea93107aaebed03e7b557316d3ca

Download Submit
C:\Program Files\7-Zip\Lang\ky.txt

Filesize
12KB

MD5
567b7cf2e425837803b585e473cc5b32

SHA1
063a4d377bd0a48a74cff556c0332f239d281ba6

SHA256
0ab24916fca462260482a836097d916b8419257cb284f4dc7c6bd27c3c1302b4

SHA512
8e98b22c442f7396a40adfc0f12bf949c9083decd1665a32558f2328f590076896770849bad822b198f9b57fc759d4ea7025a5a3599a328ae09b7ae08dc39f29

Download Submit
C:\Program Files\7-Zip\Lang\lij.txt

Filesize
7KB

MD5
b496224ea66eb64b7c4b7f71d28306b0

SHA1
53a27f51674e4a8054b6be203549dc0062ec4aab

SHA256
dc0cdd03edf00a9bceed9c18473ed35fe5f5c93b6a08bd8dfe7e540c56093b76

SHA512
5d9d69801a3f79eb7df9dd3eb8b5f9e9e5aa87dc3da17d641d87a9cdd3e873a2da3671ca11bed3c0126063ee8aa0169c224f62ea2cdd578d7ded12c2eebbf90f

Download Submit
C:\Program Files\7-Zip\Lang\lt.txt

Filesize
9KB

MD5
c35525ba5f6f7ace2731569a3bdd52db

SHA1
f62fa81d357015039f056f2b016fdd9303d62052

SHA256
8dc0f4858c7ccdc5d2cb929a747878776c456feec4dc0d65386352184517c303

SHA512
fd6cb87620efa15072e298467cfcd7d0f70a517372792631a253a65025e26c47a1e6d316f32515c2cd9dea79ea257350afce5617dd773d047254b7f895002a4d

Download Submit
C:\Program Files\7-Zip\Lang\lv.txt

Filesize
5KB

MD5
380066573ebc331c348262ac9a2e12d1

SHA1
fdaca008a6dc424f244ef50825a2a63b80914def

SHA256
baa2f9398c4914081a8ccaf949902a42ebd04c27034022bded6f268af8d5e84a

SHA512
19d05ce140678567597b84198060d103464406572f2a4a05f4d272198a5e4ee7eb501febbe5086da8c150a6b83681fe81bc4067c1c1395e118144c64e9b7ac9c

Download Submit
C:\Program Files\7-Zip\Lang\mk.txt

Filesize
8KB

MD5
782c0c3cd52138024271f0a66cf770cb

SHA1
a27d846d80cddf3d3109648c30e7fb8120880a35

SHA256
03f56b822787c0a9b19021e5afb7b472dc6fceafea3caee3d26cfe4d899e08f1

SHA512
475bc156239b6bb99ffd0e012f2e0d290f2b7ba1b3659351d56b3f6b585fe2a81c1a20fc7b2bae087f342306d2b0c4be9d0483b8aefb1c96334b517405381e68

Download Submit
C:\Program Files\7-Zip\Lang\mn.txt

Filesize
8KB

MD5
f6e74c58eae011ced072363f54d3e0cd

SHA1
e9c17c343dedc414a4757396f336b794e9eb8f89

SHA256
01084f8dfcc2b63d855dd1b22bd30bda65d46bddc7b547467b1b1aa11e834688

SHA512
177bbf380e58ca4bb6a64524d1b7c0296905c14de6f83ba1dc139a782a83fdd088752ab194f417e3b11bf8fc6828c1dcca6d75e0443c39f4ec647e4b39e7667d

Download Submit
C:\Program Files\7-Zip\Lang\mng.txt

Filesize
20KB

MD5
2f065cfe86fd0543011eb92f23185f2b

SHA1
c6c42925718b16fab864faaceec6ec239e253cd0

SHA256
7cd8568a3e5712ebb220b637797d5dda36e781e4bbeaf2be1a36287413df7f65

SHA512
0e6caef884aed66fceda4e66948ca6b085462b2892091b34bdd32ac2908994eb5a1918e3bf7c85adfa523b62283a107229010336cf01decbcb3623242fa60fe3

Download Submit
C:\Program Files\7-Zip\Lang\mng2.txt

Filesize
21KB

MD5
3062780b24c2b55bf567905102addd81

SHA1
3f9f85e2517ac8d80bcbdbb7f91d0fd1e308219c

SHA256
4d61b191e1d0e6dbd431285a25329999de5ad484a2fd795e28f41b13d13fad61

SHA512
990d8d67335a54654b42c74d6ef8a79c0cfca94aafb9cdf76941e76cd8f38c79fa86334d9d9bac88211a3f77987de2180dde8c0f4b28a912bcdddb1b0f44dd15

Download Submit
C:\Program Files\7-Zip\descript.ion

Filesize
666B

MD5
012e53df72436d51b25d8fe10ce9537a

SHA1
5995a662c0fd65c3219e6c71e80216aee374367c

SHA256
dac1ce1d8629d3f2dd00d0b03dad10f6e7bd9e4571d0a3a985c1bac4adca9d43

SHA512
adfece982b7bd9a059a0d5f13598a6028b11ab27c770c97b2e5f44a1815ca59b7f29ef8d6078392d172d298475a5f7e924f6608d921b4b033800bbade90449af

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.exe

Filesize
4.5MB

MD5
fddfe61d18ae5829e579e0237f628e29

SHA1
9d03e5a75f4c014f13e6967e778552a537b33328

SHA256
d56a09d7917b0fc16f7c6ac8c69e60263bbcb22b92915ea8f1372b9e43e58ec9

SHA512
3831c129cb6b987b99e0b050f3cb1bfdd989531972e7fce0194e2d4744558140c64b1408cd0355cd0cd40ed255e3269748689c9ba16bcbff8ea8548aa85b03b4

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe

Filesize
1.8MB

MD5
67ae6015e49dce4c2966e4f28ec78d4a

SHA1
4cd4f2cb93b790d85be6a47338ccc30b826de0e1

SHA256
b569cd25cf161e641f7f8a22e475550fb072cc39f3e60da5783584c270db29dc

SHA512
580e730d475dd9704ca71e357079f4a826db9b3d677b4323db60daf9a6b46a84be383beaecabb92d58e7526ec9492cab1b27ee1cb8c554f37e6326b98e911058

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

Filesize
1.8MB

MD5
00332d44ed5769258c619b1d7280183e

SHA1
eda05e66bf2783fa64e54a204d1ffb5870d57753

SHA256
ac9a49bc58633623641dbbbe4f489699cc3d1f70e193becea41b6cfb5543cabb

SHA512
82717f50495f79e2094ea0d261aeeea98c86b36d0cc641e443c74fe8fa6915a494a76984efa685750582c46779683f052b8cd1d6218e56b6e5f0fe77d5ee12a7

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\notification_helper.exe

Filesize
1.4MB

MD5
06c108fab00e08fef94958216731fd87

SHA1
3d63bbe468f3f5dee2af77543a52538037e8bbd9

SHA256
e31ea7f2f83aa0045fd0247932de88c246b5641718437e2bf47b09017f6e04a6

SHA512
20803a00970b4fa79e3e2be1f7f20690cc8fc523198fc71b6ed161f983fc0799f5696dba67cbcf11318b2d8d167f9f66d67e6d8849dd57cf9a4e494cbfed6370

Download Submit
C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

Filesize
1.2MB

MD5
f0ffd40f8e36987bb79624c45147c0c7

SHA1
ac9d12a9561a5cca2972e2e4cce296e3ca30979a

SHA256
c570bf48ea556fba92ff68aa2f97f2d9a021889f48031562c7e3f3e902cea00a

SHA512
dee91757b7780067bec57e68b8786bf8e64fb5452043d7445035fe6be54f7e2507e8851539032e2f76243bfcbdbd98426ab58dac5a6d13798850cf0189a3fc68

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\java.exe

Filesize
226KB

MD5
c5934541725eea31936b6b578a53f8f1

SHA1
af11d8c6e01db56ea3a5c9132278e0b257dde8cc

SHA256
3ed38aca25991e94878ce605d2ed330aa32e8a86a8f8a8a517bea386c0a94e67

SHA512
e658f65b27fe1da85e33072197dd290a107544176ae03524fd95c62a8537d871fc388c112a68c70a51338e423a0aef80980d64164a6a5b73506a7c592c7cabee

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\javaw.exe

Filesize
226KB

MD5
6c19bfc1f5a4e0ea2028b5c0c797ad3e

SHA1
b478ab441836b4d175292e81265f2bbaee664288

SHA256
c0d009f5627d33494979d7751fc41a8863f68dc36b7bed813a5df6e452cae998

SHA512
948ada53ea16697ed55e87134b96ce65c2041cf48792ad3feec1638bdd1e5bb93d5928a01f8884c9975e5a497d50c980dacbcbca31915bd850a9ac3a2b6e4459

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\javaws.exe

Filesize
390KB

MD5
c5236da2a5ff79ab1c5e23d40f36d43c

SHA1
c209aa2c053b25f4711f85c94644699d3bfb75fd

SHA256
1b85cd2b2e17fe0b76e0dc3e841cfae87d0b7514a99e84648158cbe7cfcbd5c5

SHA512
2beb0ebf3e9dc2e5b03c4da974909bb20b4073445920820b2f6bfae4008dacac99daaf8f883d786ae2eb6fc62dd1a4dce9737442580ac8cb10372f11459f1779

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\unpack200.exe

Filesize
338KB

MD5
7565ab5c6236f29da8fb9a49d66249a6

SHA1
3cc81a3757dd5da2924b3537fa2992a944de9b86

SHA256
b4dcc1b9b204d238dfbe50316fc7c973751b29e98937c3d150ac36d9dd8cf065

SHA512
2be2709e1b4a1f49724c138c826a3e51b38d6430b7af80522e44266dcf12c67c70ced0dd3fde6cfcb7b9c829a4f1a68da555af21000d9ba0b70bb5da27335276

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.exe

Filesize
226KB

MD5
ab912d7b0ba9d09b8802d56bf91d5a21

SHA1
3ad7abbe0361061c7bc9c76e4a2063177765ca26

SHA256
6abe51451a517e4483e15a23d55a3d89c9c3b77d74aa0cf48bbe621e958a615e

SHA512
bccf792559a24631be10ac5e801cd2f90087e640c57723d729ad5fb4e0a58a558f2d70501b18609de438dde07eda6353868be5800c9098aa2ebee32e44c6106f

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaw.exe

Filesize
226KB

MD5
781ad3b2e13977f90dfe979bf9b89852

SHA1
c175b51d21885174b7903d851820463d497efce5

SHA256
ae7497cc78a176cd60e72576819458ac72e549e3db6c350efb7df3d5418002a9

SHA512
5fd231403c9e521731d7da784f85cf67b34556e09375ea335a7d8b88d4f3533f92aa0d9b0427656ecf2f82a771da537b1f30b9ee2dd77c4bd5cc6acb802cb96d

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaws.exe

Filesize
390KB

MD5
d0dfb76a5ac5e36721d78319da8d3247

SHA1
2a1637714181b2279b472df24e65c92c8d964df0

SHA256
dcb3435958ad22b5666a19d3fd1ba53fd3f7e7b8352ae23852212ccc2330d853

SHA512
f1193b786b56de4400ee543729c36524604d66f5ac5d712161f61cb1107140d1c57d99690f290bfbb162f61bbfd319e2db8b209b3e52e912ab02bd79eee1d749

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe

Filesize
147KB

MD5
df856871d6483fa3960303ec9da2cb80

SHA1
c1416bce4f97b33d4c2ce2e7a36b0c739e39e111

SHA256
159243b512e772e4808517313f1bcaf4822e3f40c2589484dd5692f545eabac3

SHA512
7b87a2108144d5cccf9d1f18de345aee3085f118dc5568662fe775a46ac99a35096b772e7c02c590a03e0873228ab3eddd30d881c0bb0165ef09147b1f200f4e

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssvagent.exe

Filesize
104KB

MD5
836d2d6911a2030b0be61b5bfba45343

SHA1
0ad04fa40630b24564c53e317ec13a5bbf511ae1

SHA256
0f968c63f0119033e71b450b44df184d087910ef2c81704d066e6e6cb13944cc

SHA512
9c46d2963785b77d159cc06f797b168dd78c128bf2a47e93347bda072b69ac72577ccaa66847eedacd3e74ebdee6b84e04a5e415ede2c831a0ca46eac46e4ac8

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack200.exe

Filesize
338KB

MD5
2926969b398c0b5eb387a2e252ef1779

SHA1
b05e5742bc7f289fdce1ecaf055ede3d4671c6f5

SHA256
a6a3cae761a0486a7ff716df13cf2c8af8fb18b930e4cf8427a0c067136082f2

SHA512
f985e30254103a9426b299b7ab20018bfccf42bd28dd25d15f3c50d434a340b3edda512f7d7bb35674dba23ef2d0abd8748e63693c7c4e04cf9d53abc4ec27ce

Download Submit
C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\update_tracking\org-openide-windows.xml

Filesize
666B

MD5
b6caf28ad98c09bd6fc35c2b3ac19d6e

SHA1
2c2d4adcc78bb987e4abff80e1bcfe8b40f47a66

SHA256
cab0e9263778c59086fc2c611940c5f14c2c76581d53f5e966b93fe671c467ea

SHA512
34f2c11a43885eeba65f6cc793a6c2ededac72980cece97d4820b53a10d67f007b96c13f336cdac7452f0d20325c29aa1f52a9e1d6187d71c61de004e177a671

Download Submit
C:\Program Files\Java\jre7\bin\java.exe

Filesize
226KB

MD5
ed1962da51dda5d255d47c80c666fcc2

SHA1
99ee502466831181405a477a2e8cb11e82012dd9

SHA256
589e30307dc057f0aee59ff852b6d7f93ca5e9913264fe8e4c57e92a3a17527b

SHA512
9b0475de3c075dc23e96a4b3089147f50a18550ce50f6ec02ec490941aab5c04bf32f021f04969273bee2001d1ca86274a0893c22862e12c7d86b1231c705026

Download Submit
C:\Program Files\Java\jre7\bin\javaw.exe

Filesize
226KB

MD5
477c927ccde1afc4c14b67cda87893cf

SHA1
7146a762050499e4a45f9332b90dd1a71ed2b571

SHA256
92703cd6a68a6b04265227fa93c532cd275e569d67dbcf9eaf477d7c448648da

SHA512
6be1d2f916d9702e31912fa5cecb26e04198c9a89264f1f96fafe2822f4103d7bf1d84478a3bf32dad8594527a2b992e9fdb0edb1a475126d62862427cc6f676

Download Submit
C:\Program Files\Java\jre7\bin\javaws.exe

Filesize
390KB

MD5
b6477659c3320e00de6dffd3bfa7ddab

SHA1
6db93daba4eff7be0fb5dfedbc87ae8236d3ed0f

SHA256
f70939dc3b566fb7ac99628fa7fa80df50e21b9c553b1091e0d0567ec36e6fed

SHA512
7e2779a4dbb6370880a0627963d31c74ee6725d2e658221b9873f1a197e27f2ce85bd9333d281ce7f4f25eff70b4ada7ace92160ddd87d0eed2ab6c4d82d32fd

Download Submit
C:\Program Files\Java\jre7\bin\jp2launcher.exe

Filesize
147KB

MD5
5d6426f7440999ee696432ab41c1b6f9

SHA1
484bc42e145a8687bd669e546d65bdf57d636386

SHA256
5cd03d8eeebc04ee8eef9537cfa73c92175cc6fcae2ee278c5cf738c781f73fc

SHA512
df55a95b7e1feb68bc1118d5d6d49b1eac5355ceb5b2bac47381d8c626567930586375d92b30a2535149f8bba9cb7242b853ce8bc072e8ea5ff80b53df1a1631

Download Submit
C:\Program Files\Java\jre7\bin\ssvagent.exe

Filesize
104KB

MD5
3e00ed61f59972fedc9d5ac09a7f8a6d

SHA1
057ada8a00e306900dcc369422531e2d4767db39

SHA256
730fb08a2b0773b320113c09798dc6c5c17b3d34fd5f031eda4d77ca343989c2

SHA512
362a149eefb581d0a0268c052150b06a381c0894fef47da8f7d1e275bd69c1a227d0c1885da7a8201644eaede1d7b07a4c61c7f83a49ee66a96838e6a257cb94

Download Submit
C:\Program Files\Java\jre7\bin\unpack200.exe

Filesize
338KB

MD5
946b2998b3f14c45cb656a7b172b799b

SHA1
1a30f3509db4b50ad0bd9c32e50d332e7089076b

SHA256
a80f50f9410e82219130887096e94b46d4502b7e95b78210a4489840b276f808

SHA512
9e9f1a6835db463c4c84e7a12cef4808d4db4020bfdae8c5ce73e9646224e1755dbd6337a3bd5f5370782323e3f724819cff15e083cd5f48432544eb5dd3da72

Download Submit
C:\Program Files\Microsoft Games\Chess\Chess.exe

Filesize
3.2MB

MD5
b4a2dc083a70e2c2765f5a3f793b2ab6

SHA1
552e562b07150f706163e510c58691856934861d

SHA256
b58160f5470003a514ac4f77eba9c8d603c300b67883ea45816fea14e52ae628

SHA512
ba032cdf8d355012583fafe0561a1924301462c437dd16fa1398fc5635f18e4afd75faa2c32a6c919139a6dc64220bbb7ad7edcf26874278660c38f762090704

Download Submit
C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe

Filesize
968KB

MD5
7ac9cdd0977631ca190cdea2f80d99d8

SHA1
abdc461485fffbd79d3b2a58f15c83027b304730

SHA256
df495463922dfe99786b1a0489427a105d77ee65628abfdfe490665d2b2c56dc

SHA512
779197e3c211437f292966a6686205dafaecbd333390f2b0a55782fba98aecc8b54802b263dd246bd1331f32e70ef4131e977a060e83064d9ce8528242d2bc93

Download Submit
C:\Program Files\Microsoft Games\Hearts\Hearts.exe

Filesize
788KB

MD5
3cafc89069cdec6cecfae937e742d5ab

SHA1
b4dce4d152141db840f0f80a7de81bec196b835b

SHA256
5936e377cee6fcd243878405093c748661eeb8617bba629b7bf5874e409b7086

SHA512
fd756a0a6a47f5d0fa24a58b3705c8528df9a407bf647d7ea3902af4f1a24a8ba2c3a562512e3ffac95fed9a6c6280c0567d022d621e29bd6c24b2d0899e3f51

Download Submit
C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe

Filesize
950KB

MD5
90a8635da9c31b7b63bc1042b170a4d9

SHA1
581e449801d507a103e9f27a0d3001b8f09bb317

SHA256
0250bb236947f318e2b7be6d23ce856ffa2c7943a26e40cbdfba4228d6fa8fba

SHA512
aa286b5b8545c200f81a28a622377d035fcf674d5a02bcd650cffe63ccdea216a87415b5e9f607e9cb59eea88cf81f30a7a1bca15f40bd490ab3921ab5602de6

Download Submit
C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe

Filesize
999KB

MD5
e2418be9e60ba71f258d7c80a842e9e5

SHA1
6c06e7bdd0aa716f6a35566cb1a91c442223f656

SHA256
35c04b484a47a6fe0f8d3b76cee5e530b6d81cf4a0b3bd28b65a7c7dd84c3770

SHA512
fbeb94a2172d7ca73243e4ff9bc7ca4641ecc846b62af1f510f2db634a2307f5432d7ab3851e687636ef917bf683371d6fd9401a0157bb6191d24d2b73b42aed

Download Submit
C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe

Filesize
1.4MB

MD5
db9bb085cb91810ace6f904f17cf6908

SHA1
c9498cb815d2bd9357ecd08abb8bf422acf8def2

SHA256
08a92f88623c7f25ed1aa30eef2a3b7bd837469399559bf90497acd2cfad851a

SHA512
c1966833f85595979444420172584bd724822e943d464f1e4f45ee833d327cb99af521c238a41a40a83f2cdb851ce27030cac99f20c7e45ba79833b89771bfb3

Download Submit
C:\Program Files\Microsoft Games\Solitaire\Solitaire.exe

Filesize
990KB

MD5
021555c11d3e4139ac93b8d88ca52110

SHA1
ef093dd1a4b5b5bbbdd5842baf5303a3ab2a19be

SHA256
8a3f522c1c04ee7fec9c31b327be5289da1317716e2a6a621ca4de524cc5bf3d

SHA512
0fdc2ba3daffabc6d61aac174556b7f400f83e11de11d89e8e75342a34741ccbc54cfebdb036133c8be7fb936288a1fe1d30f8c510c6a6c6a3bd4a0a96a4e201

Download Submit
C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe

Filesize
990KB

MD5
56c40cb958d74ae5c299190baab427d3

SHA1
7cfbf591bbc26d256eb6fa20d08405fccab9234c

SHA256
925d32f37dc2d4a0db123df58e32d91a8b4e09c362ac611898ece0ad827dcc0a

SHA512
8e8788812a3466cf91e56f4ae8c28e2fb9ba435d224b588ab13d04639a209ab19609cccd1f2195ef91e49ec20b5ef711a675bb6e82dc3993b2cb60ae478b20ab

Download Submit
C:\Program Files\Mozilla Firefox\crashreporter.exe

Filesize
328KB

MD5
696ca57413f9fe7a91140e32276ac8ac

SHA1
e91a5c0b388380abee35744554bccaadd2db5c69

SHA256
805dfa1eba1fce98cfb34b2cdfade85a5feff0e330a69c74b525b45da07364a6

SHA512
3c2be38a6b48415823d4f543c5b6d9c6d46e85c35369827a77bd8dd85031e78e713baf3a172472d6e0a64f8bbfe2edd5fb68f77e7c66c8d70383b02a0d3e02e1

Download Submit
C:\Program Files\Mozilla Firefox\default-browser-agent.exe

Filesize
804KB

MD5
0603fea4e9bc6d0cc892b124a1486797

SHA1
6306d01aeb396f7ab5040577e4b32e770d6e8490

SHA256
c6930a9ec198eff2335d6d632cf66eae81918b7ff9f80fc217a094b6e69228a7

SHA512
946de450fba3bd96e4422c6087b5746687df9400c2df7a76fd71a5c4dc8a649fcd610c444aeb8b43394d9a80ce2cd263646a7462b22f4fdceb8a7002448121b0

Download Submit
C:\Program Files\Mozilla Firefox\firefox.exe

Filesize
774KB

MD5
8f3b4039559266425dc5a26dcd83005c

SHA1
3e03e4d2cafb288d3b73fb9cd370fe4ce4cc6af9

SHA256
27d141150899fa4aa18670dc81283a3367d714a0afe8d34f95a71ac8a2dc857a

SHA512
8767af712e0271085129e6106bca9eaa5e220da05e26718655eecf8d70fd50c9acb54b6005aad054de921166cf7f3c2d01e1c3b566c5f05b09011a2ef9024667

Download Submit
C:\Program Files\Mozilla Firefox\maintenanceservice.exe

Filesize
284KB

MD5
3f3b68b988030a78c7afbc463858921d

SHA1
0e606a1001e41e91343b2059c45e9a5abfb0879e

SHA256
2f9d90f32ed4314df043096b9961192b18c96b0a521fe2c1cc97ab0c33cb2f91

SHA512
b382e74fa189f1e822244638cc6f5fb756e850530d7b1d2fcc420344649facbd15ebd519e2b36896215fe1e7b86dc4495ec49a3d2d2d0a078817da53f0a10dae

Download Submit
C:\Program Files\Mozilla Firefox\minidump-analyzer.exe

Filesize
839KB

MD5
1d68e063b641539e66623f1996f9dec4

SHA1
171e8da5f757c2feb8ded1bc446a247fa4ca1422

SHA256
dd51b6a0940a8a082c42fcc3a3ea97ab5fe87d917552fb00fe2d6992487f4f40

SHA512
97d250ca4b4d5150311a713942688edc79a69d086bf0ce723ec4c69c9a32a60e10870a49ade2454ccc8363d30525871970214d8e05a2b069ac958b7b1c0ed56d

Download Submit
C:\Program Files\Mozilla Firefox\pingsender.exe

Filesize
123KB

MD5
7b23d02057ca6d6c0d6d2ee7a52af279

SHA1
5363e5c7b628984d1935d0cd8d160e8979695bb2

SHA256
ba8beff6de081df80433f5ce58a59e9c0c8eed88a4431ba4996836819292edae

SHA512
a19da777d98b14b9949d08b602fe7483ad75f1bb6479a4760fe2fc295a12f4ba9b26b11b328fc8e41f0c8927d7a7a79b7f534b207fae1fac0416c9de1af998fe

Download Submit
C:\Program Files\Mozilla Firefox\plugin-container.exe

Filesize
401KB

MD5
4d394d8f2ab15b1b4bfd27bbb16b7a92

SHA1
302f9cf810f0d755bb26dd51d60088dbbfb29583

SHA256
0951c01df75fca6fd68d246a6edc009b95ce581dbc6bdc489dd2f77315c0f92d

SHA512
7ffad7cf1041395452dffb223cd4a706aa2cd30eb2b28f4f189841a85dbd33c5ad09de82e9cb8480868583fae4c28ca1fa223d3ac01a121bafb69af346eb856e

Download Submit
C:\Program Files\Mozilla Firefox\updater.exe

Filesize
454KB

MD5
0f168046d10a05a33bc2783c3a6ded8c

SHA1
99b70906843cecfd797831f973d7c3214488f57c

SHA256
af4913b541c7fa899277e6e6c56a4d8a610d8fa85ed74a606f6c8dbc82a4f4e0

SHA512
fc94a5ef7c9bce2e2cf6a984b5683c5d1f4260afd8cba76c3d4d51845452a9a4bd5b62bd05ace7619345f2a211e4fcf6949031ae93a516119acf0c579a4f4bb1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\metadata

Filesize
800B

MD5
5f63bf473cb157c2b669a8a089fa1edc

SHA1
e5890f5cc4d18ac6e88d460eef0392e9a66bf924

SHA256
e380baba7f9bc4bfa2df1408619a627fdae513a883559b449f2d68f477f48b62

SHA512
40d53b55b0b17fc876fddc377a8a23290a6a1be2c08934627b4958deaa28c81e102bd8f4efdd56bf52f6ac56e5669b7df38fb7628b3eea167d5f84424d102e24

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\00e0fd7e-e6a8-472c-bd7b-99e7f8e68998.dmp

Filesize
106KB

MD5
5a26035c17752ab6368fe2c82e6f5489

SHA1
96ab0713f004125ac88c09ed21b62e821abb95fd

SHA256
08dd94bc1620bfc79d2d78810dd33b70c62e5b5c239b4c72f4eeab6283ed0f38

SHA512
d1b2d0aac7c32f9e410f848085e6b7236eec455407cfc328117f6bd6e587346255464b3a66e5daf2fb603d9e3359a0fb2f11a1033056ca5621e1c83d9b26a9e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\0dac4941-b3a3-4fb6-ab53-0643e89c2950.dmp

Filesize
102KB

MD5
29061ecccc0bcdc2a9252041865ae0f6

SHA1
5523ad79ec9cf9eead3c05c6963f2840159f9038

SHA256
7810ba0cca1899927204623e173539d61d4fd9f6a9ad3da837999917dd4822cf

SHA512
69a016b3c3aeb0c72ada9dc1de2040b89ade1be07593939d4517986c808c5b837c10fa66c11bf34f11b3b2cc0ecb7d692d9da7b1fb801eb87dddb0e1174ff99c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\22327576-ba51-47bc-98dd-2b55b02043d3.dmp

Filesize
106KB

MD5
b0a1427c9b1591b7da33cb58e915b314

SHA1
786e14b36a94d6a7f5152e54d968520e4004db51

SHA256
0e4b86aacbe97e5c2c36a3a2ac9468b313f1f1d51a0348378e54dc97c1279b22

SHA512
badb5baf25d4594ca0a8b7ca765a65653cec622cf44097f8f45e71fabcb6ad20382af1e8cdba92a0ab928e2f286e8d1261d00fc715522ae49302bd7142b353f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\9bf86a20-b8d9-4879-8b33-f3709d3cb2a5.dmp

Filesize
106KB

MD5
32cc85e67f420265da4cf1af6cbd4b0f

SHA1
cecaa8704d04555228673acf716f932d34ef7453

SHA256
b7d3cf8ac7f2119ec07e49710ed975aa9ae9199aec815a5fcbb96d7b6552435a

SHA512
785e7e4ae3f9fd659c0caca2e56da2e66a7c0bfc911f698e38d59c1520b3d073251205c425294532eae3c24832c42ea21bc5c15a05b00375262f2aa7b60274eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\ad9e979b-4cb6-4dbd-b25c-9de0f365b8c2.dmp

Filesize
102KB

MD5
537b5cd2bc5ddff05ab6d729c0b1e1d7

SHA1
bbbb6a5a0c9daaccf7eef046a3f2c27b5fb9f4a0

SHA256
600bd179298cbe55bc088f7df93a83a9033980715844c3106d40c680a41487aa

SHA512
7956d80b4e47eea400605f23f5e74dd49df594da6de9110f402a3bd8ffad1290b3bd55fd8837e46b8858d16670a8ab9faf185e11b2f15a753b9d6599af324ebe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\b226ff72-243d-4efe-a04b-14bd21b9c971.dmp

Filesize
106KB

MD5
8319172758003b672404719b5baab636

SHA1
2ab387cb23bd36a198fda293b64ff75cad9e1bcb

SHA256
0a83567f12107bc29ee3480409e28801d8fd7b4ed32a5fbd049903b9d44f4dbe

SHA512
86108aa1f4175026864ad9c3bc0bb94e3d97cce0d2315db8c231799e169026f2cc94050e47b545735329fa3b1597eba86fce16b6bce1cfec90f09a3248a00ae4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\bce82ccf-c00d-4490-9a54-c53accb7aaaa.dmp

Filesize
106KB

MD5
3b94590122b8d98a48ff65bfd0bde485

SHA1
15752a284e7e477d694949f85c117375205124a9

SHA256
4157912edbba1aa59adfb71c41ebc5dacfc244baec70c0f2b53a868ac1a8d7e7

SHA512
2b25c28906544475bac89b4f903ea4951141e5d777d6a1b87ffffc34c6982899e597667a04df3fff4fd18138259779a5c39d1d7b76cc45760b0644865e363a77

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\d7ba7732-d5b5-43d6-8a0e-bb95ab08fa64.dmp

Filesize
106KB

MD5
24d6d82182c098f1d06b5387a2bff578

SHA1
d1392471ff74cb8d68f5843ddd5aa468f5535a9a

SHA256
4562768928dbfc0b6bb04a61d44abe3dd751d0bb1aa9f742f9b72fd423235225

SHA512
e85c48669da3655ba8fafec7309b960805dc5c887197ebd648fd73f44ba9d0275fa1c00b7a1c2eceab5dc88d6e7b05abdd59587d7d8e29e6cf15d43773f39c7f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit
memory/2520-1-0x0000000000100000-0x0000000000105000-memory.dmp

Filesize
20KB

Download
memory/2520-130-0x0000000000100000-0x0000000000105000-memory.dmp

Filesize
20KB

Download
memory/2520-12-0x0000000000100000-0x0000000000105000-memory.dmp

Filesize
20KB

Download
memory/2520-8-0x0000000000100000-0x0000000000105000-memory.dmp

Filesize
20KB

Download
memory/2520-7-0x0000000000100000-0x0000000000105000-memory.dmp

Filesize
20KB

Download
memory/2520-4-0x0000000000110000-0x0000000000114000-memory.dmp

Filesize
16KB

Download
memory/2520-2-0x0000000000110000-0x0000000000114000-memory.dmp

Filesize
16KB

Download
memory/2520-0-0x00000000000E0000-0x00000000000E6000-memory.dmp

Filesize
24KB

Download
memory/2900-95-0x0000000000090000-0x0000000000095000-memory.dmp

Filesize
20KB

Download
memory/2900-96-0x00000000000A0000-0x00000000000A4000-memory.dmp

Filesize
16KB

Download
memory/2900-89-0x0000000000090000-0x0000000000095000-memory.dmp

Filesize
20KB

Download
memory/2900-84-0x0000000000090000-0x0000000000095000-memory.dmp

Filesize
20KB

Download