azov | ec12fa74448225f87c0c27d34beb18bed4f60e9143cac60acc21c46d8ef972ba

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06/03/2025, 18:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
Size

2.8MB
MD5

142e7ec8fc14736462f39959d6628215
SHA1

9992edbd78753126d6cf043e5baffa1e2e74873a
SHA256

ec12fa74448225f87c0c27d34beb18bed4f60e9143cac60acc21c46d8ef972ba
SHA512

5701f5f1fbe6be58b70feea8834f54aabbbaf06d4d80672883a6b8e808c8c9c39d25c0807f5b99aa91354681cb7bd8dec99f788bf5b3e3d8236d2e04530301a5
SSDEEP

49152:WPIq9hUBwj9Ta507NUUWn043oHS3fPYwVq1/xT3DDbw0TUqyy696:RWhSXYw8yKl

Score

10^/10

azov credential_access discovery persistence ransomware spyware stealer wiper

Malware Config

Signatures

Azov
A wiper seeking only damage, first seen in 2022.
ransomware wiper azov
Azov family
azov
Renames multiple (8169) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
credential_access stealer

Windows Credential Manager
T1555.004

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RESTORE_FILES.txt	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe

Executes dropped EXE 2 IoCs

pid	Process
480	Process not Found
1892	elevation_service.exe

Loads dropped DLL 1 IoCs

pid	Process
1168	Process not Found

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Bandera = "C:\\ProgramData\\rdpclient.exe"	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe

Enumerates connected drives 3 TTPs 46 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\B:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\M:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\N:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\P:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\Q:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\V:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\X:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\L:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\E:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\K:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\K:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\S:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\T:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\W:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\Z:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\A:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\H:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\I:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\J:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\T:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\G:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\I:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\M:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\G:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\O:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\R:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\P:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\V:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\E:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\S:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\U:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\A:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\R:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\B:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\L:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\W:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\Y:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\Z:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\N:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\X:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\U:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\Y:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\H:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\J:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\O:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened (read-only)	\??\Q:	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Reference Assemblies\Microsoft\Framework\v3.0\it\RESTORE_FILES.txt	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\open_original_form.gif	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0105338.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\BabyBoy\nav_uparrow.png	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\et\LC_MESSAGES\vlc.mo	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Weather.Gadget\it-IT\settings.html	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PAGESIZE\PGMN027.XML	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\features\org.eclipse.babel.nls_eclipse_ja_4.4.0.v20140623020002\eclipse_update_120.jpg	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\etc\visualvm.conf	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\FD00775_.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\WB01295_.GIF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0205462.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms5\FormsFormTemplate.html	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Library\EUROTOOL.XLAM	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File created	C:\Program Files (x86)\Windows Sidebar\Gadgets\CPU.Gadget\fr-FR\js\RESTORE_FILES.txt	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-attach.xml	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\can.fca	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Common Files\Services\verisign.bmp	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18229_.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\QuickStyles\Fancy.dotx	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\YAHOO.COM.HK.XML	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\images\novelty_settings.png	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\lt-LT\RESTORE_FILES.txt	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Java\jre7\bin\policytool.exe	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Asia\Samarkand	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\Clock.Gadget\images\flower_m.png	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\it-IT\picturePuzzle.html	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Multimedia\MPP\Flash.mpp	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\pkeyconfig-office.xrm-ms	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\CAGCAT10\J0186348.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\4to3Squareframe_Buttongraphic.png	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Windows Media Player\Network Sharing\wmpnss_bw48.jpg	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0171847.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0217872.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\RECYCLE.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00735_.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR2B.GIF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Weather.Gadget\images\144DPI\(144DPI)notConnectedStateIcon.png	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\7-Zip\Lang\uz-cyrl.txt	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.eclipse.ui.themes_1.0.1.v20140819-1717\images\winXPTSFrame.png	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Office Setup Controller\Office64.WW\RESTORE_FILES.txt	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PH02758U.BMP	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\osknumpad\osknumpadbase.xml	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Uzhgorod	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File created	C:\Program Files\Java\jre7\lib\zi\Asia\RESTORE_FILES.txt	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\ADDINS\RESTORE_FILES.txt	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-javahelp_ja.jar	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\es-ES\settings.html	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18189_.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\DISTLSTS.ICO	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\RSSFeeds.Gadget\drag.png	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\oskpred.xml	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\VSTA\AppInfoDocument\Microsoft.VisualStudio.Tools.Office.AppInfoDocument\RESTORE_FILES.txt	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\TN01165_.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\7-Zip\Lang\tg.txt	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Costa_Rica	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0281243.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE03466_.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Urban.thmx	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\CommonData\AlertImage_MediumMAsk.bmp	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files\Windows Sidebar\Gadgets\PicturePuzzle.Gadget\en-US\settings.html	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO00190_.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\SO01561_.WMF	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
File opened for modification	C:\Program Files (x86)\Windows Sidebar\Gadgets\Clock.Gadget\en-US\css\settings.css	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Suspicious behavior: EnumeratesProcesses 38 IoCs

pid	Process
2708	chrome.exe
2708	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe
1664	chrome.exe

Suspicious use of AdjustPrivilegeToken 19 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	1664	chrome.exe
Token: SeShutdownPrivilege	1664	chrome.exe
Token: SeShutdownPrivilege	1664	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	1664	chrome.exe
Token: SeShutdownPrivilege	1664	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	2708	chrome.exe
Token: SeShutdownPrivilege	1664	chrome.exe
Token: SeShutdownPrivilege	1664	chrome.exe
Token: SeShutdownPrivilege	1664	chrome.exe
Token: SeShutdownPrivilege	1664	chrome.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2708	chrome.exe
2708	chrome.exe
2708	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2032 wrote to memory of 1448	2032	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe	28
PID 2032 wrote to memory of 1448	2032	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe	28
PID 2032 wrote to memory of 1448	2032	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe	28
PID 2032 wrote to memory of 2708	2032	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe	29
PID 2032 wrote to memory of 2708	2032	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe	29
PID 2032 wrote to memory of 2708	2032	2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe	29
PID 2708 wrote to memory of 1664	2708	chrome.exe	30
PID 2708 wrote to memory of 1664	2708	chrome.exe	30
PID 2708 wrote to memory of 1664	2708	chrome.exe	30
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 1960	2708	chrome.exe	32
PID 2708 wrote to memory of 2940	2708	chrome.exe	33
PID 2708 wrote to memory of 2940	2708	chrome.exe	33
PID 2708 wrote to memory of 2940	2708	chrome.exe	33
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34
PID 2708 wrote to memory of 2140	2708	chrome.exe	34

C:\Users\Admin\AppData\Local\Temp\2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
"C:\Users\Admin\AppData\Local\Temp\2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe"
1⤵
- Adds Run key to start application
- Enumerates connected drives
- Suspicious use of WriteProcessMemory
PID:2032
- C:\Users\Admin\AppData\Local\Temp\2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe
  C:\Users\Admin\AppData\Local\Temp\2025-03-06_142e7ec8fc14736462f39959d6628215_ryuk.exe --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=92.0.4515.131 --initial-client-data=0x17c,0x180,0x184,0x14c,0x188,0x1401b1ee0,0x1401b1ef0,0x1401b1f00
  2⤵
  - Drops startup file
  - Enumerates connected drives
  - Drops file in Program Files directory
  PID:1448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --force-first-run
  2⤵
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2708
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6059758,0x7fef6059768,0x7fef6059778
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1664
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1152 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:2
    3⤵
    PID:1960
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1508 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:8
    3⤵
    PID:2940
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1600 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:8
    3⤵
    PID:2140
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2108 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:1
    3⤵
    PID:1636
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2116 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:1
    3⤵
    PID:2584
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1464 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:2
    3⤵
    PID:744
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=2424 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:2
    3⤵
    PID:2896
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1220 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:2
    3⤵
    PID:2448
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --mojo-platform-channel-handle=2472 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:2
    3⤵
    PID:2792
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --mojo-platform-channel-handle=2416 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:2
    3⤵
    PID:2976
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --mojo-platform-channel-handle=2472 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:2
    3⤵
    PID:3004
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2620 --field-trial-handle=792,i,2097664532973556062,10955996979216967386,131072 /prefetch:8
    3⤵
    PID:2392

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
- Executes dropped EXE
PID:1892

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Windows Credential Manager

T1555.004

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleCrashHandler64.exe

Filesize
454KB

MD5
43c5f380383da541ff41ac6a4dab6623

SHA1
9ed85d5aefcce00ddab271d14ed9b4e22592804b

SHA256
8685681b330e8778674f02f581233bcffb885a9560a7681ebe49f22a60f946bd

SHA512
a589dc518f47343317b4c72a7ede380bdfe40c4ad04808393403d26a5e580d14cf8c3c786819a3c7052ad7d6a550d7390a6bf76d016b72bcc0943cde13853ef9

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21296_.GIF

Filesize
666B

MD5
bae52742aad6862dd043a89a3bd36c9b

SHA1
588196a1827d18908fd205df0c17bb2e56da4123

SHA256
a2db83108b3bf9217faa5e78dc1bf2b972b841bd8e5cfe14167003d11fe4587e

SHA512
299c425d64b7b172dc964ac121d155c460571100df7db14d878f7ea6e28480bb301b1381ee614529df0b6ee4bceeeb1b691a9f1c5ab0d7c6167416dcd68e269c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21298_.GIF

Filesize
666B

MD5
a9b3e4282b669ecb380fe0858e95fbac

SHA1
8baa93de34f6ed3a2ab7fbdff2160b5a58e45fc0

SHA256
c9a7c34cbb7c564f70332c2586125b574571c2e124dda2c57d4b0bd3a36ed5c7

SHA512
875935f831a8347bcf146664c4cfcba1ee02cf49d30b43dba9e01393fb7717b6483abe5fff520d72e3d340adf07f6991e1af31a6fb0ed83924a26f79cf554eec

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21300_.GIF

Filesize
666B

MD5
11924999c6d5780812a87c969f99cc0c

SHA1
5a90459a322c8c1ab7de52fe27a6baf12f70013f

SHA256
00dd55bce8581ba70293b1ae8c2093d29ea5fb104c48ff03fc1a6d833e7c3324

SHA512
2e0d13b9af188563a1bb18be2d7920606f24292773d02c307a2191d668753dfa6af9cf38b808f38134840243bccdd4b08d042eac822802c8c363d4836afae30e

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21301_.GIF.azov

Filesize
666B

MD5
49b6a49852ac9c5b4ba7b16580f53fb8

SHA1
85d92a2a7f98dcb2c93a56c3141d1df9b005593a

SHA256
62c4dc654be066f68247283845ff267d0c357497c20a244f950bd5c4c86789d6

SHA512
a615e5d0848e9fe647d139a6af65ad6dc71f75a4e2b0154a580091284413fbeaca3d275913eef6bed3d377f3543d1a72534e2d231594dd21e12f95e2ead4cf9c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21302_.GIF

Filesize
666B

MD5
2519ef0acbc4446149e1d96081c2543c

SHA1
18086609b8f1f7d2741005a4d1647e03a762251a

SHA256
fe435aba4cdb09fe3d7e865d3d8a6e38c99ffdd64b58f1bba4466cb49841140d

SHA512
44bb71c4704dce2e40b6a35f6f5d324f0e671bc280a02fa19287cbc0df104db60a2d236aefd69c68e7815de5d21ad89c42bcb99dadeef754a29b90198e475ae1

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21306_.GIF

Filesize
666B

MD5
35ceba814998e8fdeae2fe337aa4b046

SHA1
cd721f74832d80d335ee7725274721d1d09d0f98

SHA256
57732813193dfaa9909179e56ea893435b03967e4e406b237dbb09b9195edc0d

SHA512
cb79ce1df3f470bb1bb0b99adbe0343c31eaacb76a117a61a437bb652dc707fe12867b901c8cba1e9e7006ba7e76671f0dc08094af7e3997c3eec9159f142073

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21312_.GIF

Filesize
666B

MD5
b4691f5dcdbcc73e68fa344375255a1c

SHA1
b31aeb2d728fd9e5c618eeed4cf7d80d8a8e9b32

SHA256
27c388fecc3d0fd1216ec8a4fe7c043757bbec9460a76301727c739a80a34d3a

SHA512
c77a2e42637a4801580c766f075bf1f9d4c801e20bd7df632d07f93faebaabae3ebb92356fe16986037ea274971dd88801fde2f5d81cab3cf53c8a35ce8924de

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21314_.GIF

Filesize
666B

MD5
3cdd01dc8b7464faa0c8e661fbbfe0d3

SHA1
5c0ee977659ecce76d12c6ad0f8791d2b9497953

SHA256
5cb928e90643100bb63fe1b259a02d3708f28633102be4b9ac6fa741edf678ba

SHA512
6e10d42a847a54adbf0cf462c9f9603a88381c90260435de9ed7f25816233ed32d46d2975942d857b0e83e4784e715f49f5170ecc538719252726c752861fbe0

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21316_.GIF

Filesize
666B

MD5
6eafb5e6845c291495dbb9aca0ad4a15

SHA1
d6a9844511fbc20a05930226f697bc50a7367a7b

SHA256
9db7c92460e38c8fb60ffe4921f868640e4b67da87cdfd17ab7321b5943455e6

SHA512
3db649789ea9843d3bd2fd90ff7ec46d286db4c73286a78b9bfb07725144491633bbea611ac36d32646992fbb5dd1f5cc27a7d1819a5e28f875d8c860d09829e

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21329_.GIF

Filesize
666B

MD5
8f546b665fe4918190a396f193503418

SHA1
7eea9861692c2a7bd442457488d963128bfa6e2a

SHA256
c12ea546b797918c6baa937f2e7bc52be7ac10ee7a8bbcc0f09029cf80885081

SHA512
65b50e9ad46e890552a02912d89308bcb6eabbf21976007d693a049a36ec97178330bbd1b467253083a0c3479cb5a3c86552f5fa1a7723b0d03b575b1a8f852f

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21333_.GIF

Filesize
666B

MD5
47796473c28f56814593315c47d3c142

SHA1
2259fbf68d9c2bbb9df089244f5fc82fe7a27543

SHA256
77aeef43ef9153c56af47ea1809d6b50f6daf2378e6c8211bdb26b39e64294d8

SHA512
a1f113db7d185e01c728526d38688b6bcec5fe44708e8f2b5973208e73825cfe4f6aaad7134fc76c604b0f3ae199dcbe9b504d2f444414a2ede4ad4a1c7b7529

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21337_.GIF

Filesize
666B

MD5
3036aef90dab41c1b7d075124ad84e7c

SHA1
6cadf1be5f178ba48ada5c768035e736edc2ec8c

SHA256
88aba64b4947871bc0ee225383dc27d1bf6e2b15a99634dafedd17441c8b542f

SHA512
8612686a7dc6fa241f63feaaf5a0d5a410cbf79ad6ab17242d898cd30e2cb097848f6aec647b6fcf7e0895bd1155e7b4d13d9e7855746021ab1c16ad0aa01a7c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21339_.GIF

Filesize
666B

MD5
be1b53270dff5fb0e1c607b7c4413f2a

SHA1
83b4e544649605eeccd1ba4291deb63477352192

SHA256
c1951cca969b6ce1651dce2eedf7820e3370f9b94ad9f379611e814cfc163cf0

SHA512
7c44c44d41f460b541894d2b8d940b410f9a3e292941457b4a2472354988342aa2dc68f9bed963be274ea3cfafb900f355a1bd7e43a4bdaa6b4377da90a83130

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21342_.GIF

Filesize
666B

MD5
4f641ddab465e5c02ffd64720fee4a99

SHA1
6f328f090b1976ff8a3c35cdac6f34b19535fe38

SHA256
92df08a0105d1bf526910bc2de5c5b838dbc50f7c268eb1f1854228693e303f1

SHA512
156bb131e88374103d6cfce39883e339b8767b3b1145a660f81841d11ab8004f1fc961b1f215f0e5bac9fd6832a9fe2d291eaa0cc3bafeb2d1a0dd24721f1a2c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21343_.GIF

Filesize
666B

MD5
a126000241c772f9b5fedfce7fffd586

SHA1
ee454aceaeca54a3f44d71364def25252ba4aacf

SHA256
6647d44387db48737966941373552dcbde6a8697fe8080ffb1f19a5525b6cc90

SHA512
9ce43178e640442de56b1066e41d35e912745acb441f1a31fe344ba27823734fc085259a32778ae3d6e6c9760dad79643a7409973cd0d76720519c32e8ab27f9

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21344_.GIF

Filesize
666B

MD5
95f56e31d948485455d4fc6052ba0d5f

SHA1
ae295a99e3a774e2c4216a2b983764aa224433c1

SHA256
4e5876f921c60fb8efb827b65c931d805b5ed2dd331ca9e57c9e1a79aabfe954

SHA512
ca1df4e281cbbda7336e79c6338147757a6c6ac97411ed3aca73588f8fc87884e9ecf5a2f0085ec86a0d384aeb84dd2e03f3a61d201c98e3aa7ed3881bddd44f

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21364_.GIF

Filesize
666B

MD5
634956ab6eb5bbba60d62be44f3a37a4

SHA1
43ea0f26b0bbedb105ae0e8d753d05742af0d151

SHA256
30b6e2809ccf7e5e9de3e7758e7fa4da123178602ec269e4bbb714ff180fc59e

SHA512
1210cf066a9e42c4ced9998cdc30b6afb52fd8886f32f1c656ab10ea42e5cbe3a7fb5886fdd007f3cb312db6b405660b8d4da5ba83e6f32244d4c479bc75113c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21365_.GIF

Filesize
666B

MD5
704d9d69d78f35f70b72def57424950e

SHA1
84e24d9dbf7318a81ba717a97af0108cea14bf40

SHA256
492f714a05bf1c4f11604d30bc17bddd1640331562210d6f6c78936cadce2c70

SHA512
74c5ce722bf0f4168a4ddaac890765bffa609485001651286ecd3d4b2c5b78aada768e89a32a995e9d83568d5d18383d4775e6032817e0cde07b115ee68d646d

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21366_.GIF

Filesize
666B

MD5
058d8fe888e456dfbd2656d9e7cb1b4e

SHA1
92f965c9471756c086eea0ccc3182de6e1a3e8a1

SHA256
1ec5156e2a2e3b769e27f0751f65903711f48fadac9d458a006106bdbc1594a8

SHA512
9e1f4b3a35e9dfe78e1ec241fd32dbcc623e42a11a7c9c3e93c02ae04b297d8ffacb885bd7c5265762e13b125d57f9c2453130e04a9c85eec5a612f6ebf76851

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21375_.GIF

Filesize
666B

MD5
af64c8823ed6ccee42cdea85e40db64b

SHA1
72a0fa4e7b119777f3cc71f5e4553fb6cead1826

SHA256
d37e0787fe9d378c96a8186c0b41d0ca8c01043c3fd4384ec822a6c4a2db0df7

SHA512
7f3e665fb84534494d7df316928426191ccb9f90f9bd6b3989f4f1aa9dc7e3645627888141e8aebcf420fdb24ecb263e5a9fe8b42550b30f730d96ba97175493

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21376_.GIF

Filesize
666B

MD5
1b9c9d4bc045f3cc8f2053de357db74f

SHA1
edbce941f51220a15bdb87d2ac13efb3c1bbde99

SHA256
3304e379409b91502a004f4532a75a9e17c668a76e4c65e172aef912fb2cfe40

SHA512
5f538e72f7b99d157e93991a1d7698ef7937d5047e90b0abd9b21d2f7aece2523dec397b9e13a7abccc8ca6a9ebc657946dbe65bccd1b37ef940cbdb95216981

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21377_.GIF

Filesize
666B

MD5
31a86ed59f211a92f1234180bdbcf052

SHA1
8df55b3911b3fa69d8ce3485865f172f7fdd83c6

SHA256
3b89eb0db3eeb0a9c1673ceb6152b7dbd54b1ed9a2fb6647fad8a67f1f4ca2d1

SHA512
b8fdbd5425f22005631ab45321b7ee83feb4487031d35585f2fc4a9bf2f3119d229421a37c40084d020a04dd58c5ae09ae807214c0c258d7853e1073537b5274

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21398_.GIF.azov

Filesize
666B

MD5
c20c0a1833b8ee385344e3bba3ebcc47

SHA1
3e06e7f6555936ed02fad61a433dc322a9e1fa2e

SHA256
75a579c4b13fad77fe697fa735dd0f3f0f6b9b76c557a4085a9e52cea84fe0e2

SHA512
6c4b41f3a1851cd70a70a60c2e0855b711fc72004a7c690e97e719ba03158e562f17b9e2c3723446bf086f388e1cfcf87505571d270b6b2b0c08f1d3491a64cd

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21399_.GIF

Filesize
666B

MD5
fe184bc01509cef001bb71fe4688d07a

SHA1
63e8adc268d6b6db059b5f5193cd5f8e81dec2fe

SHA256
054698eb5ddd4b904a9fee418554d444343faad161f76bbbc554819114fc1eb0

SHA512
bc6f384b2b22845d9106a52f720d3750893814eb9878793b8dc2e4ff8d53d787843a5de4bc80981a59a98997fc1c2fe1a623c4cc7c89f078bf714a227da5ecef

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21400_.GIF

Filesize
666B

MD5
7262c6c46d263cf52436b9a35f6e6969

SHA1
e806233e714a33da20911f73128a021d96cc0f92

SHA256
887daf60d0f4123c38cad024823f165c98ce090e10137db23bcd2af5b52a2fe9

SHA512
7feb714bc80a04b7c368a6b1ec50c17edea5cc24aea655c81822b29c32b0cff34f8235d5958a3941979f96e3b80214a8327871a2c843aab51269c01aae9fae6b

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21421_.GIF

Filesize
666B

MD5
4d315fc8ce97e8121b4537b46ba88ea0

SHA1
ef4854172a93472a1e3575361275ce8682069464

SHA256
050c3ed36445004ccb4de25501a1a0064055c4d9aefb04dfeb5ddebea8d525ca

SHA512
352d96ae4e6f778f80c1ec341b798b030d5eb8cc301129af7137ff0ad4620943978478444d67ddef8844965e3c81f5c6ea47aa4e19869a49b0400da9ec3c1640

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21423_.GIF

Filesize
666B

MD5
664fb074ce746f4d4e543175d6dc6e0d

SHA1
9bbe3ba7fd0881b7ae9d9ead5a75db8937c56061

SHA256
05382d87e9b3fe82f7cb1a916ef971c1f0f0f5f7c762019c52cfc042a9d3d1d6

SHA512
0d4296c3212c163fcf847af98632b188a3e51db093d06047e4ea7eab79dea25bd6dd5fd321d78a537cfd52ffbb822a20f2fa3d2aca299bec822ccbe53554498a

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21434_.GIF

Filesize
666B

MD5
45e85dbd39c2fdb710650fe948beaaca

SHA1
a9afc875858d954fa12394ffc6c71e45b238a35f

SHA256
defc3b20471e196fe7980232a1aa2bb1ae843e606082474a229c1bb4a9de4177

SHA512
d61d5804a56807bfec24b43adc30f8023c3c3c1e1ff13b81541605e03629a6a083675ebf4bf447856d1b1a65271d6b707a13e3c3f2d471e69aa0219e42f5f225

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21482_.GIF

Filesize
666B

MD5
2e3d26d47fb409e3772595fb66e0dcf2

SHA1
3f3867f7745103f8cca0593aeee6680b72b80def

SHA256
80ba4a99856c5e0e44bb84066d03724dbb06b3388f6bdf79a4500e971142aef3

SHA512
12785ff1e49964c9a108e4aad6d3faeec9590d60b454bfa2ffdf8cb48495681f03901f52119d338d61e1aa1502d7104e93a561431d148f4601ac13c5ef430405

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21504_.GIF

Filesize
666B

MD5
5fb024cccd005d291a63ae00fdb99775

SHA1
8a66de7893484cf26e03004e4dfe4b6e5aafabc1

SHA256
7aa185407e651c132e3c65696fe08af0f1dc6939d7a84bfd8e241e5fbbc028f5

SHA512
5f41eb1bd9d4b5e0b4dcd5042ca076b4b78aa269212517c5d9a77bb34e06a364503bbbc6d63aa791aeffe7078e638b30c2f374be98f146fca52c1b7834fff0ef

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21505_.GIF

Filesize
666B

MD5
3a4ccf501cde0f2e7c9983d8ff3164b7

SHA1
f58989f1bd7d303c507516e3b2c5581ea458072a

SHA256
bd10bcd2cd78cde371f6d44a31e460e8a088f8a7bcfa45e80913c114a9acca11

SHA512
0c685a853f47eb2808ca2076f3f95711e851f64fda83f96d940322a96493e549f941c012927b40f8446adc0f1135c1989fbc5914acf8ddd40c7eca2d01553b9c

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21533_.GIF

Filesize
666B

MD5
8a073e1060f08412872ac1cd86ba21e0

SHA1
b5044df98e4a0c9e6425b693562141a2cc6bb1f3

SHA256
b9082363010095dfb19954ff168dc997eec0b50cfb965e819fa6f27f816c5fb9

SHA512
806231e3ba4f5ecbce32068c8240ff36ab9792135483643815a85179e048f50973b5ec53e98db4a9385cca0ed6531c1b215b2c97a87170d133a61812d771452e

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21535_.GIF

Filesize
666B

MD5
95435fe7da47eb1858e8b08c6fe2ebec

SHA1
5f6a61bde9c6b5ebf13a93ce3e8fb81bff1f8644

SHA256
717e0270237a7d9245e76027ef389ea3ac7fca98bed04d41ddd79621b8f47389

SHA512
043fa541ec3201db3e1638194fdc6f96a878ce860113fca796fd5b5e7141c47c49516b1e432d1025492b5cc42614b0958ded26671e1e958289ef5a8b8557a3a0

Download Submit
C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\J0115834.GIF

Filesize
666B

MD5
c51a4b20d1d4dc04004fb792d0b93a49

SHA1
cb15d40081c23681e94a39937dbc3bc58366e0c8

SHA256
c5f7fd6ff79015838a3fac29575ad747221ad6f1dc82adce9d17ae135c1e4e9e

SHA512
ee903c2ab623ccf9b23bbc96a28f85c2056bfa3b0320862e9fb23a3936358057a91ac2474d8b73dba4b279119866445a3c34d3e0310d9ca8280d2323981afe58

Download Submit
C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe

Filesize
284KB

MD5
56aaab04542ebc44c532837409cb8c87

SHA1
c134b1712557303af77d9b5e1c39c81e5adfba07

SHA256
29b18846c2f7d41a12eb9716c1f6dceb0ee7d6906fcb8978de9c8f33fe4ee8d8

SHA512
8f46f5ac3be9663ee0f310b130bbf50dc5591a3448da7f9c06687248b8b4f24f8df2d87f333314c352a07b68178610c2a35c9f191c3f523c5c18aec59aa9776a

Download Submit
C:\Program Files\7-Zip\7-zip.chm.azov

Filesize
112KB

MD5
4fbc444e79466bd4352307dd630905c0

SHA1
950abe6cc0e562c1fe64cdd76d363e9e65aeb777

SHA256
eacc2306467c3347e1a1f8b259cbf6bffb46ba4ce7e1a9c360f92db630245a8b

SHA512
942ceb581e0adc95a8455ac5362a3959d13b6e1fbc1a8845cccb65dd7ecfa1cbe69dcc91f92a7f10a89216c348db865d37f30f35fb377e961926b22c74b989db

Download Submit
C:\Program Files\7-Zip\7z.exe

Filesize
666KB

MD5
c22fe4029f4c7e5d474864a977ae11f6

SHA1
f2351ed352e079c39b8a17e041471a8e257f7226

SHA256
ad9262c494c82a9bca24f0195849a420943442f31a10afa5327b3a2e9d947cde

SHA512
620228d26f016f58dba8947ffce42af79a89fc7072b11f72731be5e99c157659a95f64a5fa7c9e831c6110913f1278664f7782d8a2e1dd3405982028febdb421

Download Submit
C:\Program Files\7-Zip\7z.sfx

Filesize
210KB

MD5
2e7f43162867832a676a4da895745579

SHA1
490390b78abb1ec0bd4213eb06b65863b81b953b

SHA256
dcc38c77f50527f50739a71dabeb49998719c29ca62c08812c7108d9f9b9d096

SHA512
0ca64c2779f96b9dcd667c92691498a49f4ad43e246e6b5b7b63bedd99b2e14943a8b0af3089c4455b590bfd35346ce129b175b09c29608b429f12f5e0dcb14e

Download Submit
C:\Program Files\7-Zip\7zFM.exe

Filesize
1.1MB

MD5
71a2ac859bc0703ba5f80bded40b01c5

SHA1
27c36271c7f100610b1353ff79193516b11dbd9d

SHA256
9895929115d9a78b215cc60ba14d217bce6c7f5c35a855fde1b610e77c8d5cfb

SHA512
b4399f04b80d628ad102c5d150cd8dae2a0ae98b24983fcad5239998eb89a9d23ec6480e7cbfb13f67524a1517d39faf8fcd9408aa25843b809041ed8b7036be

Download Submit
C:\Program Files\7-Zip\7zG.exe

Filesize
832KB

MD5
d805f35c53c0067857424f55cccbf755

SHA1
e7ddf7b73df010e90ba5c7a12eed8adcbbb2dcc1

SHA256
3324b87e6dd8402723ccb72278d0e14313a8ae51df417a665324c5d8ed585725

SHA512
6461276e78b6d7d14e53acc8681d1af245e4de9cd21eee9e4e9c2ea1ad88c5f211f0612d6b06b552be1469c6d1974ca20a8951adf6421155e27528c1200fad32

Download Submit
C:\Program Files\7-Zip\Lang\RESTORE_FILES.txt

Filesize
2KB

MD5
78ede93114e65f9160fd03d3357c56e6

SHA1
88d531b101e57655f1d0d26c6b3257aa2468d460

SHA256
c97412fbf88da8f91099a52888dea4c3f222cd95af3e681e3271cbca8b6b7bb5

SHA512
074a4c741273902ccacb6f573b96d8accedb2ee405dbd04350cdbf54d180c1fd577a4e90c2aae26bf72f3782403f4494db6e3501a04cfd9d7d81a6bc14884b9d

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\Installer\chrmstp.exe

Filesize
4.5MB

MD5
a6feeb635ecf80202aa5a1e0d06f41e6

SHA1
2e12f1dfdd0e11765007b349347c45c4924b0f41

SHA256
6a31f5414b0c1800da8bbac83f94785507d89db3ce64bb66d9c2944eecd787d8

SHA512
e9f1d0a96ef62e0e70c329b44b846f84f6beefe137e58269cfeed52ea432d643fd091e9372da865811276fc98921508b64a1144e30c468df4a73c6538fe229ae

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\chrome_pwa_launcher.exe

Filesize
1.8MB

MD5
bef0148ea5b066791c53cab9cd510151

SHA1
04a0f77ef520c6edadb9e1f7920639018b0bf2f8

SHA256
ec5f304a25feacbf13e1352d7d06419133aa4f676889b0bb3ce4cdb5c298bc00

SHA512
200570cf1835d16c7b568ab713fa74871cecd01a28ab522412d1e40869e44eee0bd6610d8728f2d5659b83a275551135c54379dad89ed9cae80fb18c731543ae

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\icudtl.dat

Filesize
10.0MB

MD5
84f5f7ad945d58b2b0f1bb2386f099e1

SHA1
017ce1002dde6c104628416fbe26a9e0980771d0

SHA256
c73f082bbe2163aedf9a419b61183b01a1bff0294f84cfa42d90faa695a52c1f

SHA512
7313d1537d0ac7eafac8992afb8623aaeee9a33d378f46e6acbe021cc85055fb83510c4f6db98376749ecc900c5c5d3f82f465179c650743cf01b6dc5328a8a9

Download Submit
C:\Program Files\Google\Chrome\Application\106.0.5249.119\notification_helper.exe

Filesize
1.4MB

MD5
f12560200c2e0568d79ec93d47990a9e

SHA1
87ae3a4bea4c36094cac1db657c589bf75ec77b4

SHA256
7c9ccf017bdf18a5384f1513921e57f55d5e63c934cec8671effd159b985950e

SHA512
46dea4b460fba899a12d67d1682ce1247e61b4f3e3d0eb2512d7df14b21f2418c11eeca19e892443ec43265843dc250c5062fd957159f4b71b064f08afab2d04

Download Submit
C:\Program Files\Google\Chrome\Application\chrome_proxy.exe

Filesize
1.2MB

MD5
8118be0f867d086afd199cf6ab084e3f

SHA1
c580db3cb4ef3b5d835faa14a61d5bdd34fc2752

SHA256
05254f4c82010fe5c76eafdd2c0853dfc39e9a80c355507aeee5644c3f12c405

SHA512
262ee860ee5e7226f6bee9f3b032de33166629d784b2fc291a37b161b702b78e5d9291f740c239a90a5974399658d5f4d459b41526d346a1aad46595afa97a31

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\java.exe

Filesize
226KB

MD5
f6a86891c48319247fdd38b96f467a7d

SHA1
294825550179db688a58e44af52a430fa3669fed

SHA256
88b838658824acbe7500f295c7bb4db05a33792e5574fa72f0cb1ebedceba946

SHA512
39a629da0be79ade20bcd1466a232b48153ae1bcc65671ee7b26551e71331437873991bd5b6785201788eee53fb82e2202f95308c97504800fb60e95fdae516e

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\javaw.exe

Filesize
226KB

MD5
8482f75a5a8b05f2b4196016f6501e26

SHA1
9692bcdc2d081b716463e2b3d0a6088818b5224b

SHA256
1db54de5daef24df2c94f30d2b71d4524975e61be5ae7f4ea4a8da50331aec25

SHA512
6ac34bbafcf607ce1d92cff02dfeab0dc3d5b03e1ed4dc6d07761f6a8875c5b5cd7fe555934beef0995ae89a2e2d88350a2f4d422bc76fd7c27584407bd4abbf

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\javaws.exe

Filesize
390KB

MD5
4e20623343004a56f4a876733eadbe80

SHA1
42b0214d279f0abd636146277b58fbc82fb2e7b0

SHA256
c02a13bafbd606fbbfedfdf7ee7fbfeccae3e0e1eb404b48af5a542aa7ebbea1

SHA512
2f3d1cbbe04b864727f0605689fa540e346077c17372d4c0d1dac678264156f93f26c63126af17582af874ea0b91ec285247d1f6efda6391a2acbfe3c60dad46

Download Submit
C:\Program Files\Java\jdk1.7.0_80\bin\unpack200.exe

Filesize
338KB

MD5
aa4feebdc471075dd1dca733fa62a168

SHA1
13be15f72d6d818dcce44ba8a2a256da7e9fb7c2

SHA256
f1b2e54b1272c9440457cfdaa7a21937e5f47a19904a827cf63ea857760ccfd9

SHA512
7fe93e21786540a9b0435eb18705629dce9023e145de268b4580d8b94cb24b8898d2a96a86c01e26c7d6c9d51d4fedf8ae698a20751b715ec0f27ebcdcf1746f

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\java.exe

Filesize
226KB

MD5
0e7528aea937d073d8eada0adacae004

SHA1
59454d425d2f76f8bf402992da3da65168c9dafe

SHA256
4de5e34c9a04eb68e76e577d89d854a620e646b26aeff3b5a9bb64b1ea6ed909

SHA512
167203dd681a32fad9dbad5b91690eb069007d31518ff41922a444d136feb5474ff99b30766b3212bd050cebcf964be4a2238aecdb7254715b44aa2e9842ea24

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaw.exe

Filesize
226KB

MD5
ea6ba132423dfaab0fb8b9f44d0249f6

SHA1
d0e7b7ac1313720a1a81eae19799f6508552166f

SHA256
0035da48b93e6257b351fdefde21bce7a6d2d65dff0c10877766c3dbe183fe4b

SHA512
0c1f537bb489781b516b3d4d98ecd51b95eadf79359ef74751b33b17d7dee6bc8625390b9a41c35996a5ca8378ef7e5cedcdd517983a94790719b8264c9f426c

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\javaws.exe

Filesize
390KB

MD5
d76f9bc8fb54f2a3f7a07a5ac101bc41

SHA1
4c53fd8eb843a40aabe76499b979b3aa20e9c2df

SHA256
01c14cb984824847806e03305a54e9ddebb3a45b6e917a634527163633dc63b3

SHA512
9f9343b5cd0507e5d23aaa337c0154cc1b4991629e33ed33ef466c6b89e859b717ed661aeb4924ce3b4a161164ad5e7c1586a84b9ca3f68543a8d4b46281ad80

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\jp2launcher.exe

Filesize
147KB

MD5
384adb5879bb604bc3261ae535a62fd9

SHA1
d4fbf5691f273d4c78b76b29688a3cae0b3f369a

SHA256
f197e7106703dcad0dba2b2084e0f7822c8480a5a20ad23a685bf9a83cbe4f33

SHA512
b20aa4e0d8450dc987151bbc97e49eb48ecf2e50d4f5f2c9b50deaa2c94a991fde8fbbf0ebd4418b588f51b12ebdff7baed2c020f7936d51d0e8e53e2fb3651d

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\ssvagent.exe

Filesize
104KB

MD5
bedcca0012393ecf85d436f9bee0c7a7

SHA1
6ab92d5cefb261b59107c0f73a762c71c3d4241c

SHA256
0a5ee89d2c794c31bd67f743c27937553c7d5e5e4464b8781813e79dc103bb5a

SHA512
a83e9038834a2cb914afe881bbbfd7b60fb598195dea650c11bbad3ce1e84656ad61e3590439168d6a8735306eacb101abc7e543495c82b5a92d203b93fd03f0

Download Submit
C:\Program Files\Java\jdk1.7.0_80\jre\bin\unpack200.exe

Filesize
338KB

MD5
11da144668874365b2e19668d31c45d7

SHA1
b58f8073ff145ebe844b5899020265c08241de75

SHA256
685d96c287e6b83fc9af1f7c8d1692cacd29fd09f11c0b2d773dc0b2b3f7ece4

SHA512
aefb54f5df86ef5cfdd0bc331b9f90c676f0c79deb818b017f82aca692234c03bb43c7d607234c2629ca40d416901dfd3c8228f451670fe2b012a2b5937e7a23

Download Submit
C:\Program Files\Java\jre7\bin\java.exe

Filesize
226KB

MD5
c7c030dbcbab2c705ce1f12d371d6abd

SHA1
d39eab80ef50580265e77fdc5817040d9f7799e6

SHA256
eb0ff5841fedda528e626efdf2dbe89051604deb4c264496b2a55981802bc293

SHA512
ac74e854b7100850485ff4f582e4012b129615e313787ed68c3be395ce70045dc9514529c6c9f99bba95b4fbd9036af2a98e520cd95f50431e561edd4f0d0fcb

Download Submit
C:\Program Files\Java\jre7\bin\javaw.exe

Filesize
226KB

MD5
7560ad8da05929d6335b501341cf0c26

SHA1
780b30c47a91484ed0cc6fe0613b930adbd03a0b

SHA256
37506a558877b61e41d6c79ac4195a07d9551a74668610af8b04240e8eb47883

SHA512
bb906243f254f147ee3d65560cc5a8cd7119001596405f139db275c3cb8c4665ae4050613b4542a9bb2ec6dbd801be76d8e9ae44d9dbe6e84619e3c1574fe29e

Download Submit
C:\Program Files\Java\jre7\bin\javaws.exe

Filesize
391KB

MD5
3da4d2101e109314556e6dbd9673b757

SHA1
d524b682cfe1a59c80da13b52a306932030b2a45

SHA256
84ab77bdebc9d28df42e7fc1f45d399ded06feb89914cbfea948c12435cb741c

SHA512
0021e72d28823089b7ddd32fae9a12541b1c36b8931286d07870ce306f3150c220729bd451ddd7b09c64e1e4cb7dc213c24fffcf4f17cab3d433ee2c34b9e6c2

Download Submit
C:\Program Files\Java\jre7\bin\jp2launcher.exe

Filesize
147KB

MD5
430a78e5a6e19208bf313c464200b603

SHA1
aed6f184e16cfbb7e3658ed9bdfd304760441e92

SHA256
4b2c0b0bce323b2faed29eed99734aace0b5473fa8560e1e3cc54596b8d19deb

SHA512
07bbc2eae633d48d38e5edf6643c2cf1c6c5ce6bd4764ac576608a2d4cf187aef640f2cf5207851e58fbb4d5387997998798a9c1d450935d7228713193e5de3b

Download Submit
C:\Program Files\Java\jre7\bin\ssvagent.exe

Filesize
104KB

MD5
80deafafa349c5188980ec3c21689ecb

SHA1
44f82e3c8ce708e2e5535ce14ef34d11c362ced7

SHA256
c4df679c69fb18ab462be84093ce42c28cb2476f9ef2f33f823c99a90ae3a4a7

SHA512
fb1f292c964c57cbf1781dc42b13a70d097bf11d1d81954b93789cdd6886ac8387cb7823be4fa21e037e3fe9bf25541239a44b167719f61e83b9d6fbc39525d3

Download Submit
C:\Program Files\Java\jre7\bin\unpack200.exe

Filesize
339KB

MD5
dadfea829561f3ca903c4d9c9ad47050

SHA1
389b5d5d9f0198030377aa408fe84dc4b8496ece

SHA256
86bd2ccd74f269ec1e98d35fbd8de3acf666f5d4646784c74aa7abb49a0d537b

SHA512
369fba7f934c4fcdd8f0087079b8b149745007664af6f15363b403d0008ff1e551ba3e3b667ecfb27e8fc8a719b67e30dc7296e878cdd2d9841e51ee2215e85a

Download Submit
C:\Program Files\Microsoft Games\Chess\Chess.exe

Filesize
3.2MB

MD5
1a07867dcd3f3eb78f8ae4d012814095

SHA1
2f6bec08cb7c9041166231e625b55d80ebcb0207

SHA256
8268bf9ea68322c1816022f5f5c90c9235e65f4d4beba0be17c71ea125b0ec6f

SHA512
e68fbb46692232dfad5e08e6388da1802639c777035a87bf9f05fb8410163c505332180226febaed76141a035e5a0be62c5f6612ac607de70e697e4a94578225

Download Submit
C:\Program Files\Microsoft Games\FreeCell\FreeCell.exe

Filesize
969KB

MD5
271cc8cfc29dc7a1ffdba4b554517484

SHA1
9d8738e61504f8dd6e041c5f9e69a435bb2c0853

SHA256
ac60b157aa20997b2e322f2781d0958d69a832ebaabcaae63388cb0dd789e842

SHA512
0b40a0f905c97336bd420e004dd71fbb1a9f339c9b02127e2f0e97a998843dd2f1d539d868716159572a4936c8428d3bbc2d0c804cd984ddab0b434f5feca04d

Download Submit
C:\Program Files\Microsoft Games\Hearts\Hearts.exe

Filesize
788KB

MD5
75e52780f7dd3fc5570a540e03c68ccf

SHA1
6eaadf37ba505fabba9d581038d228106bf0b447

SHA256
b841382278a6994c5987eb5df94603c2670a354a8c26a1174f96a68329be7c2b

SHA512
d25b984f415d2ed4fc27100958161d9aaabcf712c38bca4aab619489122946d1ee9e2b390619c15e0bc760c2259ccc1ac43e9735b2a9fd6b9b2a22e5d73b5b62

Download Submit
C:\Program Files\Microsoft Games\Mahjong\Mahjong.exe

Filesize
951KB

MD5
faff1414ff1541279390698ca4957cd1

SHA1
c42c885f2c29bacfe0eb6ff71b068eb6bb9c26ee

SHA256
df32db6e6e7bc3462bf9158d20ef3aab60d4f0554f2febac102fdf90581a83ad

SHA512
662a6f4540d56c9bd71f6e7f11c5f0a3ea0d6deaa05edf68aae24ddd50ebdae78c0f08d9daae99860b5ec541628975bd416c21661a17457c3bf0499a2a067448

Download Submit
C:\Program Files\Microsoft Games\Minesweeper\MineSweeper.exe

Filesize
1000KB

MD5
f59306fa878d28da6bcd9b237293cee0

SHA1
88fc9aef15898fa26f403b38e7c508af4513fc11

SHA256
40c6e13421eb58273d244358ee396a7195947a094455cc75a8d4c4b5816cc80a

SHA512
4b0badfe3979eeaeb86c809a9c32214b8ef2cfa06986ce999634045d6d39b77957e60262859e9d70634d01ea38b146ebd7bff85d6137604ed5ff94123eaa88ac

Download Submit
C:\Program Files\Microsoft Games\Purble Place\PurblePlace.exe

Filesize
1.4MB

MD5
f6ad215f9c565c803c60472e7f5429ee

SHA1
90a5f9b8a600db64ac7d0042791dc121388c0647

SHA256
8a082d27e75ae76342324e6eb0d975c5c6b68e795c67a1b37284af4457d51be0

SHA512
cfc53ef84650818d64aad8636709d9bf6a4cbf9b5a1b64c80f9c64b772bda27e70ebc462b48f541e29bfd81bf3f10c851ad10239073718b074a03459b14cf534

Download Submit
C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe

Filesize
991KB

MD5
ad0a83d29a58550e643253ec6c74e28b

SHA1
1b92c0cabaeb7b1e97f926bf90c49d8756ddf0eb

SHA256
72a816f549bae0a0ea10f01262bc7d595493875ba9c508e74bec61ec95c6bdf5

SHA512
11322928af9fbbba296974b38cb24d8bbf798c9c01091a1690c52c4eed84c95ec7b12eb8b159634417282e6c287149e42e3bc4f3309329c2f49586e7e572f114

Download Submit
C:\Program Files\Mozilla Firefox\crashreporter.exe

Filesize
328KB

MD5
c93e12d278e71302267ae87f31bf8500

SHA1
88b4f7ef8f83730f04cc59ebfde042635e0cab13

SHA256
5d20a46c5c99b80d43c7c0d13d259cf9365caf8ebf9c1499dce7b13087e92d30

SHA512
33059e5d9dbef43e71bd54ae671097316c387686acc16b07bcb271af593ded97f3417aef280849a8edadff0e2a4b94c66bd0ec68432e9129529b663c80ac2259

Download Submit
C:\Program Files\Mozilla Firefox\default-browser-agent.exe

Filesize
805KB

MD5
ab1e44307b5e16db1c89151152ae24e1

SHA1
f11e050ef12e2df38ace4e05cfe81fb6256a5964

SHA256
967db534629f72082b49bb51f2676b13d5706e4b179ebe8548c8f4cd7901152b

SHA512
e9349e29bd2579877d160560f386abf7e3197a0d84a7b2c8902eba005a7e70f9159b924a7625f7f911cd8e794a7a181bd62287c48f4f60fe1291712197a277cb

Download Submit
C:\Program Files\Mozilla Firefox\firefox.exe

Filesize
774KB

MD5
d694042ff1e9bf26baf1bbf0a62d32fa

SHA1
3fddb9034ceab3b37ed98342496ca1d6c21c22f4

SHA256
f5db24edfe0e77aff0936cc6191e4072ae4aeef0a484fc7a89d9d4d7a6227de7

SHA512
87e2b9504ed8b416c25367e20681fc8456545f5a60d7095b8e3ca12b28aa55bac86f1a2114c0623ec5cc63a47ebe1ccc9f46e3cac7cbbfd0b0cc4dd736dd7993

Download Submit
C:\Program Files\Mozilla Firefox\maintenanceservice.exe

Filesize
284KB

MD5
332866b7715aed170cd822fc720b81ff

SHA1
cd190beabb8a182f33f7b6055f0adecf51d1bd30

SHA256
8af1f3e78ab5ba7fc1f6fe540d4d6ad3974541c8493606fa63782661ad5f00ba

SHA512
f2a49c9f915d31a0ddd08bb54d949e5fdd591d573ede7fb86b3b5bbd7b521db4ea46676efdb935059e04a2ae412fec787844f6c676a3bf3a6554efd9e080545f

Download Submit
C:\Program Files\Mozilla Firefox\minidump-analyzer.exe

Filesize
840KB

MD5
b166ddea1dc11bd9efb6d1dc88d6acb2

SHA1
ca196a01bfee08c89b0907e8e14ae152d15c6c7e

SHA256
d157f50be45c27682fab13277b149b46b91d3e672b80fe54cf477420db5ad701

SHA512
e83fd3564a7b1f01f61e18b075eb4c50c5d415f666a1ab706ad05599a65a230024ac95bf525aa84878242a21b708a8340c7425413a2eba2e2a6ddb8305cd7343

Download Submit
C:\Program Files\Mozilla Firefox\pingsender.exe

Filesize
123KB

MD5
32d9f1277cd17aa6a853d34200e66631

SHA1
c91ea9570f86da4b7384dd9002a0ce34aff4c53a

SHA256
6ccdc0553c13e4eec59297487ec867d2d925c5e13a72f5a941bd2873044b7983

SHA512
2324f837236439484af0c2d9df237980321277acbc5e70fc71ba0adc64371076d61e65662da48d5524294e96aeecbdb21b8b7db0456668a71144608128a768f8

Download Submit
C:\Program Files\Mozilla Firefox\plugin-container.exe

Filesize
401KB

MD5
9afa34edd306397c80aaeda154a36bb5

SHA1
d5ed7c18b5c306c99f9599868868314cacd30f84

SHA256
a0e2651662a264d10c116444c15d3b2776735a8a2bf05f3087716f34b6217838

SHA512
5cea9d50be9e566f5930a65edf7c3cc9122588eccf9fc1c1f11d0198b035ed39189d0f3c5dc1e45f97fb95def1d128d690a19c4e6f90903f6c9b0e67161c329c

Download Submit
C:\Program Files\Mozilla Firefox\updater.exe

Filesize
455KB

MD5
8d33d3d20bf4c690c57083aba2e1721a

SHA1
4254974c985d322f55d2aca37f6b62229e58b23f

SHA256
32ccaafa549ac22764f7a3d31987f57df6fa5d4db17d42300946da25905033b8

SHA512
a9509daa7ab2d09520f5b4273cac2787176f85b836e597ebdc705747c278efb35c903076cdd5e50d58eecd03ba915fa6f2f6d4808c6a49dd08829fd04b71a5df

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\metadata

Filesize
898B

MD5
ef836a4240913532f2f412c5c8a6b89c

SHA1
f3511c7951ca036c501c5c2fe0835d774170917f

SHA256
12e954816874cd6b7f5af07ab61f319a14c181433484615cf22524762c23e493

SHA512
4e3d29c03b8d490539696943007027f35ab8803248d2ebad074d9aa4a440b14e3e67a44edf511223f9d9e7086edf9245235c84cc9f26cdac59315682d6e28745

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\1735fec5-d90e-4c6d-bfdc-8bc54857335a.dmp

Filesize
106KB

MD5
63aca0fb73058efb52a43c663bf568ff

SHA1
47d74e6cb90704a30beb0f5ce7e36a3a8c7209dc

SHA256
526acfece558b3e3fc6f8f5a8c20babd6a0fbd61d64193ec53d3f0e8a04d600b

SHA512
8517a69c3f7b8a45c227190e85d6cb64f1778e576f6b43ff3b13c8d1c00c3f77f27d6d5190147c95f3d80790db52d68c3597a4333daf3565de1d0bd912763e33

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\1735fec5-d90e-4c6d-bfdc-8bc54857335a.dmp

Filesize
106KB

MD5
25f959d2a4564f02efe39815305d873a

SHA1
79e36d2113f7907d992f82798bcd0ad4b1eb1590

SHA256
786085be830dbfad7faae4fa4a2ed9186cf121e53d816d07cd74ddfc9201900f

SHA512
94013aa46c0d34a784a6f0c48950d8e750f4d048d56e1ca8f2a2d2f61be5ea6777ce5e147825ff55b89c7f01356139684068bdb9a8cbe90cb1cc2633ca50bc4d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\2455984b-98ce-4a5e-a575-890368ae452b.dmp

Filesize
102KB

MD5
0f49b283db23c7a9d52a1317b9e9e046

SHA1
e358bb18b98ff448c4f93dad8ba6fae08bf386bd

SHA256
97b7eff16e23a87336a9f675ea8a1b11c89486817d8d4206447396b9b003c421

SHA512
f5e8e13143671e901d1b2193f807012665600c2ed3a7576db23379ecd724c9130b01277e9c940991ca090aad2fbce8a621c2498761e6ad453144e0a0a1c183cc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\2455984b-98ce-4a5e-a575-890368ae452b.dmp

Filesize
102KB

MD5
2888f5236bf9f077522dbe3eb54f54aa

SHA1
72f38e0c943335b1fd08105f26c287c3fbbe7d9f

SHA256
69b68d987f285f957d1615f20c3b190442c581c33f6c73cc25facd4b70af76b4

SHA512
541552b2789a2cb1f138aaffb9314b43fe02262e6b22e39eb737e1fe00a7c1380fb09a0050b5f745d205c09db36bb1e3f3c39a74340cfe173b6bde6ccb60947a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\248f4587-c9d9-4921-bf4e-88b3bd1037b6.dmp

Filesize
106KB

MD5
9b9cf51096c9b15c7182c3b39160f957

SHA1
caf8964d0176ca6f9e6c1d44be8c9be89b159a34

SHA256
be5837f0d0221d76bcaadf0f6eb10eeb28eac48acd3d69485aa807877a929431

SHA512
fa2ea22175d58051490fbabefb995495eae2211c01fac7876d76f603e2603afe013082e1138504cce5c30b92d8226d09b56ed47e1cb64a5f68a881edb78daf98

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\248f4587-c9d9-4921-bf4e-88b3bd1037b6.dmp

Filesize
106KB

MD5
658b220e67b66b1d29e76800045bea75

SHA1
34cb64fa3acca6126b2919189eef4a4376d23a70

SHA256
f1fa9d483ca2b2991750b27cb078a475bb642605cfd3e41afa0a34c7e47c60f1

SHA512
685368ec3e3dc0b9d0e0f0b7b3cc97b0eef312bcdcc933222a0c8e2673ef4ceda13465f09d3a6ebecd0fa71023362a0cd061f01a38c630f4772c1a3349be34a2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\3a31f5b5-fe79-4f97-bb13-df6823fefb5b.dmp

Filesize
102KB

MD5
721dc02481e8b1cd50066db4739a1331

SHA1
c1add6943c7a99d6f87e8ff4e1ea919aa310eb87

SHA256
0832bbed65b8d9ae65e1072c8d369faba099653a6e138b90e2f586716bf69cf5

SHA512
f9e9d5408ed8188d99b0b5b1bf0748e75d37f354cd5fe3577248e42607f091eb7a249f5d4c8c8bfecfa5c05d88dd32040936200d710ca56188dce3379ad2afae

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\3a31f5b5-fe79-4f97-bb13-df6823fefb5b.dmp

Filesize
101KB

MD5
50c4a20f735cd18fbacc9db4d9e078e6

SHA1
0fea6a502006ded38b90cb9ba8fc1b7597e6433e

SHA256
3c3cf01c32a1bb37471dede21d2e817b3f3f2f6b4359690b423a184f7fea8b2e

SHA512
1af1d6670007e2030822d6decda8a8af1f9495028efd3e786d0916590c40a26991de606bb1b5746ca3d8b460ac996218090a206b0badd609932807c9b7054402

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\56f176dd-d4d3-4a4e-9aec-1c0391ed65b4.dmp

Filesize
106KB

MD5
459d1c9e64f6c8b4fa7bc05792100be3

SHA1
9f55adc2b9b83df461861b495c0146939f83fb2e

SHA256
158c83c6b79f2a7ead500faaec8d19bb7f933019bedabd87e68e278c9e630170

SHA512
bc437ba08846137662db857001f70d239a2b9a0b0639d8853768476f04abf0f4e39a8d6bd6509fde1664f568508844908a406ed0c6442b1891e37072e1ccb4e6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\56f176dd-d4d3-4a4e-9aec-1c0391ed65b4.dmp

Filesize
106KB

MD5
571c1e5194ec27b5ff309c32e51fb51f

SHA1
9972a576a44bd9a8559fe85c91fd5529449b451f

SHA256
fec4915fc46654d592fa2d6e37599f762ecf1b98066b51bf40acbc9e133ee35a

SHA512
7575f1ef03772e4a885e27e1cf40e62b4db974489d55e8ab0518a7ff6c620db98df4fede3592f069eaa4de0c15e016170778a9f311074de364add35201dae368

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\62cf511d-be97-4677-873f-9198f0a6aece.dmp

Filesize
102KB

MD5
68a644813da66c440ea12488a66989e0

SHA1
da1e4044d093771483384f5cb4e2f726069efe18

SHA256
6eb8d1a456a6f89ebe7047b5de537c954219e6323ff936c28e971293cf3a3c25

SHA512
da605508a0144a05bbcd45a2ee65122542011ce1e6e7cc2e85325bc8d78c190813fa63c0d2dda98fd766c6f7c5145f3624e8705a6cc7efc5e93e70003b19f5e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\62cf511d-be97-4677-873f-9198f0a6aece.dmp

Filesize
101KB

MD5
3c92e1aff980cf954d8b00919c49ba48

SHA1
586dfb6052028962f968dc35dc7801b1ca4c4454

SHA256
889a086f462239433b518768cb7bc325fc265fcf86a5436b1a2d1bd87ddf2e46

SHA512
7c6ce5fd90b300f9fff3210ac64480e6bcc09005fe3dc13da02bff846be4503fb1230b86955e024239ed1cfc1ac2c4fc8efde8c0647dce1532ec87430050323b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\6fd8cf4e-4ef4-4a8b-9215-b57ffdef25c4.dmp

Filesize
1.0MB

MD5
eb445ad865269ad16bb64f7d7f7b9af6

SHA1
37fb623336f029183851181404372b97cf3e9d9a

SHA256
1da8e88f29ff0f47f4d8e96aa85f250a6920d0f0b025b53f32e77bc8dc573938

SHA512
274e91ea7ea5199ee0f6af78fc5f6d0b7c7a65fa11f90dee75e48d33a2a54acf84417783aa5875a5f7080caebff6d6a29c3492fb1a20ff89a59a9ba1c707cdbd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\9c0b3a6f-d3c8-4084-ba09-de1a54bd376b.dmp

Filesize
102KB

MD5
f52783121b7a643e41ec6ba2c923d21a

SHA1
56e25bbc6df97d0d1c9e88d01c6f418cddf52a45

SHA256
98a5440a642825137343fea889248e8ed4500474835deb9a9d03a4124dc2d39e

SHA512
e836aea2cc34b6ed3f9a906a65dc2ed42e2330174294c7b80475db91ead446cdcb7168d63f095c60584a689fcf945cc2f54a4042deb08b0af2b7c3f52a0c7c6a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\9c0b3a6f-d3c8-4084-ba09-de1a54bd376b.dmp

Filesize
102KB

MD5
4d7ee6c7823af5f9c1497fde222e9e05

SHA1
10e2a232f3b27465b45ba99ee74eb6065f5adbdc

SHA256
ac62bc9dab2cc2948b4587eb21a55b2f27af8efad21748a51d9f5f1530987e23

SHA512
489ba5d49923c0bdcd5cd6ff6af1808b4520990e04246ddff9b4273c0e8705d46ba9426ea5e493d61d25f84b75f81a49085e6ff7de51262ecb9678f9d6be4a55

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\ac2c75b0-bd6e-447d-8cb2-0921a8206d16.dmp

Filesize
101KB

MD5
c1844efe028c3ac4845c5e5ed86fa3f4

SHA1
0c08e8d3667313ebc24d30f0e2c25105b71b0488

SHA256
34e57d85fb3bf86872159c8a6bed90e51539b5c4e61e318c2c6b5d053bcc4b4e

SHA512
87448ff9a94f9e7e0bce30edb04a0e0a8dc28a7e9c92a29b01a85ad2264bef8ee5b132669866fbec8c1982fe9c3e6b2fede089e0aa264a785f849e6d3e124e90

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\reports\ac2c75b0-bd6e-447d-8cb2-0921a8206d16.dmp

Filesize
101KB

MD5
ef9541f4534d6927c94597b8c1736cc4

SHA1
d439b36b5eeeb3c642609dc4e846192c4bc920a6

SHA256
644277dd218a164de65da5fb21b84704a9fc2c36c0a1db6db7919ef3c9e89984

SHA512
59be403e49a2ddba69005f835d6d12abfe9f0b6ab4bfe2b9ec0e57c0e45c2ca23c1f590585802defe52b8dc6dd426c3ce07090578721a5ae9d036b331a8a7b96

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
9ca337524816226bf5da651706d62f51

SHA1
6f8a551c620e75e45b2340aac6720452d2886a26

SHA256
ba3dc56f607d63a68f065d56b69cefc8ab6dd4991fa972d80a1ff4ee388f4877

SHA512
97d45a79a646fe20a2ac9ef7aa142fe9483d95a6d2d9d007e7043f1b0776fbdf10616ba3fc93acd15404549bdd8c6e58706a76774fba18958dc8c1e76acc6e88

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnCache\data_1

Filesize
264KB

MD5
afdb6edcaf1641e1808f8c8ba84c5d07

SHA1
b1a5f016f81f9788545cf18c627ef22018ef3e42

SHA256
35a56d098e420533a5c5b5ed07e9867bba419af29954384dcb8d30c9a20e7111

SHA512
fe518215a7101759f7d218c74f785468021196b663e8c204c317dc82a5d933c2cc83e902259dca774a86302a5936f8f4069f97a5640142900600472f92ecbc97

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\CURRENT

Filesize
666B

MD5
1bcb5b1799bade3a389d656a52315001

SHA1
cf86886b700cbdaee269a3759b093fbc1fd541e6

SHA256
316135045bea097e059ea95ceaac7e3444793f737d0c65c543da88e5ad5c99bc

SHA512
cad807743a82036605c3ceb217b985bf185b2a100034930b8052300184f67cbd5f5124c1fa593cf82c88f3885aad13113c74c935a49b8ec1e6c2e74afa94d1a7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG

Filesize
666B

MD5
372463d33d9556e9a4abdefa8d0db3fd

SHA1
3dc4abf231f83700217283e868eefa6a193f1689

SHA256
38c8742e993e02b661ca9aa88fbed67197b8d287db141ee02961188351bf0cf4

SHA512
3ec0ccb570d814ed47febcb34e22ee1a357239bafa1e73b7ccf729d5494bcd6850dcfeb78627fb97369a13a0ad0a0d80d404112bcd6237be77949c51ef1358e1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extension State\MANIFEST-000007

Filesize
666B

MD5
00e887795b38f0e84a80e7fd3806461e

SHA1
eb7462b1e9cee759136f6e517ae1b1c9a76ef13e

SHA256
9885a187186f3e4ece4b751cd7dd15006f30f194b2c6f1a8e3c63558ab9871e7

SHA512
8658c20b65b59a216dd79b28dead117ae0da5f88340bd5c9abdc9e0743607bdcb2c7b8185ccafdcffdea916c63cceb4fcd027b49f4b06b62968027b2240ce621

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
49a4e51f2ff5ace7fe49b4e3724f891b

SHA1
a4f7aeff2ac59186b1f6083ddca3de2f566bff34

SHA256
bba078390f00e039192aa9fba31514ceb187979f66bc8536661bf31fb9308b24

SHA512
132eb9ade1eb7289dc70ada8bd0bfae90d4cfc68e87cbb622b1b8fe96f9f10fa02014494607c1f0730753f54ba7318fa77a6a42397f753dc97faa3bb2bdc90ae

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Google Profile.ico

Filesize
193KB

MD5
fd906579406cbdfd7a41e58e85f917a0

SHA1
38d7bbc8424b506b8a1410ad587ef6c907e9c4b6

SHA256
d6612110004254a0e1f27451e319021682cb6a1e14563e2c7011b5b327e187e5

SHA512
3991b39464990cec19f0baf590d28b210423e94bc5060181fca39a0f03a2a28ca3e345b9ccaecfdf41b389fa7dd8626955656a1278d5e93845321fcdaa33a854

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\CURRENT

Filesize
666B

MD5
1db1ea1528ae5abb81e9d3901ab092c4

SHA1
91c85cced3652b9b6d1c3abaa82588de07c3557d

SHA256
edbe6e89de3342dbcf58f30ed6632576a14c5e87dbe0db53ba106f0632824b70

SHA512
76383b496115f93c108c7f2e8f7eaf8c9ae9ad6b67a015f4a50db374f6b5fc6caffab7abb27d403e093fa6781855e850c6aee40ffa0dbb36bae2ac8c9c2b072a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG

Filesize
666B

MD5
ccec8102ff7eeabc357db4c10cd96d8b

SHA1
5e5439fa9d041007736722d05eae10f3c4010ce1

SHA256
8e81ec6d0f5f85d8400fbbc78bc20dcd1218969a00f0d8f3125e372bb85fef6c

SHA512
9441054153b294c427e93ec7b9ae5d747ea0439071760a7db368a4731320e50573a1542e11905d782beb3e39793435b82e778e7515f9e89c0a2ceecc16d3e3cc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\MANIFEST-000006

Filesize
666B

MD5
db2c0a23ef7f808c661137410e4892ae

SHA1
03994eadbccf21406e541643a210caadd946b426

SHA256
64521e1a844c641f566123edd2a13bf82bb53949c052503663efb944ccda0c36

SHA512
5d885c65fbc01190464754b8a7eb7a2b21878fd3e14fcde4825f8c27ea721a0057294bd559ab6eb15ea741274a2822cafe5ec2a59bc16c691dd0f9190fec842a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
3KB

MD5
08b2bb6fff9b561f31ce4d2c028f0786

SHA1
6000f5095ba8fe9dc07dcd6f409a044e9bd05a0f

SHA256
a232091d2dda2e262015b66a7db09e491c3b54301426364b27c85dd8a20aaac6

SHA512
dc286a3dab8994652750ddd8bc6e7d267fffb6fcd5c88eb8f02c80cb73c9afad3ff2290b5fe62a17633a20ccceec4f160e215725f54b2a476f32aa77294dc7ef

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000009.log

Filesize
666B

MD5
64dfda3f34098956103e10b4c92e9682

SHA1
227431c4c0aa432acc9b5ff73e52381805637598

SHA256
2cdd4b61ba187bfce5f2e5d3b1ea34a9667542a4c4c6585093c8e0f382413eda

SHA512
bcd2e27ae6b6b11b35e7b3b2deca5ab198df0b044aae1e1460e740f29f7e5d5936ed59d40b87aa30e05ce4a4e3d35a25880f4a5bd466e5c7513ec87b736a86bd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\CURRENT

Filesize
666B

MD5
e333a07a0785733f3f01e63974d76735

SHA1
14cbc3bc8013b6f212b19d815009b0423805fa85

SHA256
619952385af854de0567bfde86d0f46c65347c08c237d2e2ca5100b8bf5e771a

SHA512
2665703ce7d7ffd22f987345219019344bfac2b8994b0c72b33b2f92066b21439a1bcb8587dc56c2eb1c8dd9258673c35708e4aa994619c8922add4335bd1124

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG

Filesize
666B

MD5
60e4a7bd632ea8d71674042df3e8b868

SHA1
e84f570e5691b68db0835b6926cb76b83993ff5d

SHA256
a425731580f0d512b3099022103dd3a31ec63b56e996c3cda415517de99888da

SHA512
09a8b97b89901361a9e2aa4ce8fbe9bfe82f7fe832fbe13e2164e373d0e63f8e79a5dd398d17c7e1d4ef94502f79398a225cad3c97beaff5c9a2a39c30d4f913

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000007

Filesize
666B

MD5
799b50265a920be7278bc9339fb8d548

SHA1
e6da73525608434ea6114db0919d5c39115f4cde

SHA256
4986eb73c529814609ed8bf7a05a416f10a883002bb6b6c4cea79c19e0095686

SHA512
7bf98e5f45a3c6b4246e316ea0809f8686ef2e9f6e7c254e3fb0efaaaa87e51fd75e2c59cdb61ee85869e8cc7df0812450b85b893a1c2514cd77252c198c65d9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sessions\Session_13385760310421800

Filesize
1KB

MD5
74e8dc40ef14c278a524bd313017daff

SHA1
b01793529d5ada1c3bb55925ba1b0ab5debeb446

SHA256
fe537aee559ecca6b6095b0aa86bbd4b3b63e2b9737f28022c464fa4f216cb28

SHA512
ac9812d97e39c33e97273adbc128f0de0954c7d438fa550c33c783b718e03cd5e8045e5c245153cd55b030d10fda55304bab40a354e61b01ed22f4f67a131411

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\CURRENT

Filesize
666B

MD5
88b912b60eec64c7bcc67a0a4eedc878

SHA1
55765310052aa80e20b08af6a2b335d550c092a8

SHA256
f8dbf418d1a316aae697b3631468a49987dc13a9426755fdedef30ac12c04da5

SHA512
c80277553723bbaedb0d3bbaa50035d4b141bcc6327d5eb61f5b1225ad789f83f9c3e14d9c8aba36a021b4b0a727f5e5c7305116ddae797594184d3908d15ed1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG

Filesize
666B

MD5
1c87876d9025403c4176879c5b65eca7

SHA1
b0df5141526dc1d031b153b323327cf3117353b6

SHA256
d2f0c986b03d5bbe4522abc3cd518084fbb87bb50679d2469920ae961cb232f0

SHA512
e12a1b65392f1501204037f01e421c54f13576be53adbb1c870a7f97d47a926bdca5c19979882c11a85dcda1839e16ad2aa064b0da16eeb307a6889012b46a14

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\MANIFEST-000007

Filesize
666B

MD5
8e68a6eb249f6757c12f6a11a2715627

SHA1
d69eb4c7a3556b12753559448ff2a9091c061bb6

SHA256
f3a037fbe277955a9f907a1d86cd72110a68d5cd376694ba9cd9902732befb39

SHA512
ab2adc0cca103c48f1a8ff9a2fab1092468a30ff986647f300b90270ee6d7c84d20b07a255289751d8e877c0cf3de948d2c97a9651ab1a5f6b9bbeab8d61b8bf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000008.ldb

Filesize
1KB

MD5
1300d1c112ae2f6144a742cf6e68b7d5

SHA1
fa3e7171c86411e89b7c71a9113087e101bc0d26

SHA256
c06a74151b23bda1811932d1d58852d96f925bc529952e996186f3f7a4148132

SHA512
02fc9904d4e4a8159de9de49ea082a3b4169ff75099ec01353f5c8ff7a772241402e3597e02750ced071bbce60ec431a9b6bda26e8316cbbd8b9d8f330823611

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT

Filesize
666B

MD5
b0612d22725c25bc25e12ee87527f34f

SHA1
596478624e5ab9ddeb0de432be940576ddecc995

SHA256
eee5b373f1b2f43e28d4afb45a3b645523754f845ba002dc9005c9b70014f6e5

SHA512
a981ca2e807fbed5af661be43eb12aca717ea1dbc5980c58990452230726dea1037e0b7cf57a583f61b0eeebc2b8eead9bb1e46fe99741d61feca6e67ab08fc0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000008.ldb

Filesize
666B

MD5
5ffac808517ebb04642ee26c4835f29f

SHA1
bb6e6cef6627e705c75df68117841d3d253bb7c7

SHA256
ec95198659be58464695d9bbb0f9125aee2839ec9f50ca8024305136fec7aeb9

SHA512
c1ec5d48ac3a3dcefc74821b3a2ac3328e809279683006125e58dbc0be02e13cf7671a6730c2b4352cb040b0e39d78b27150a505f716f0a341e14839dedbc1d6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000009.log

Filesize
666B

MD5
645dd6acf6eb137ddb8d759395979d2b

SHA1
40a22a8be462ac6fcbbfdbff61265e6c6e61b608

SHA256
bbb0d6889dbffa0068d24d39f8ea743af7bd3af7f386539e7ba86908683389d9

SHA512
ca83f1f6910fa8de7012d853f11420427d30d26760a0023e698c3223d513ec0db16322b411f066f3ca2b62b7cae3d065e750d3907a8af632d23deed05f2c198f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\CURRENT

Filesize
666B

MD5
0e58c53c43539cd7d18d59a23c39e38f

SHA1
3f35802b47b40e2f0c717d35943a276b3a7a554a

SHA256
e349c11ed80b505a606482150ae246348447bd7e5a2ad19497bcf232dbbd77ae

SHA512
09447a3695109ee791d25434097759fc98fd2be90819f32ae8b38f0372fe4c2e6544b5005bdd0f4b6c57ef2faeba497bcfd0bb800c4987ca9b72dc66a65f8161

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\LOG

Filesize
666B

MD5
6bef0d3502b26e319de575ff0fb97777

SHA1
f276a1c4ff6ef0c656e23965f4fca2f3312eff45

SHA256
531ee45c395b19f454ed966d4646e7f3c06f24b88938f9dda8bbc314d1a09abc

SHA512
edadd44030822230d8679df1e1b862d9ffb624c3b24e699c6a1bef418edc15c1fb9171ace1bd03dc44fb8408dd37f79f81e1ba8eabe5c4d6b796b426dd2c9ce9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\MANIFEST-000007

Filesize
666B

MD5
04a77f067d2c63ff57741bbf8420968e

SHA1
6fe0520433910ae4f9c2ca1a5f738bb7a1aea3a6

SHA256
ef14f9593f78c80be3c1dd00fad5353edb795c9fb5f4494017b6f971d858eb6e

SHA512
4e7133e80a959c59a44cbd57809f24ce97d72ad5b4e8a01b84994ff995c858e90440e07d93b39728a79db9a85cef5de4c429d745110ab3662a673b21b548ce4c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000008.ldb

Filesize
666B

MD5
9f3b023b86ca62ecdd7f47fb5155f17b

SHA1
f7231cbebdf2ccadd2f339449317b9a63385aaac

SHA256
47ad478150f574346003348ccff87afa19db04a3c0d2ff37afe0b59df2b1a806

SHA512
a31ce988d9bb65884f20f862ea1bb80c23a9502f250a3732c5e11c81da527826be8312a32224e1b5d6426d7cb8831d943b4046c8b70f34787f2a153165f221a9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\000009.log

Filesize
666B

MD5
acd45c3fa432daedde4b2a57bcc06c43

SHA1
f530b0a3b175ee899b321d1630c48c1418e84846

SHA256
5bf567d861fd2aa4b407ea40be67bcdab3e295752cc732a7ce24c44a34bb2412

SHA512
73cd356374787c03ed1213eaaa18598e6a6780b4271f4ccae93ad18b0516e06d32dbfffac4c91cb34c0ec9e0783e694d185fc9f9d8e1e3638600287ce533922a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\CURRENT

Filesize
666B

MD5
f5a51b132f37c83a73d652239626c4ff

SHA1
3b50c25100e4bfa12fc9b216a9fb641dfe803633

SHA256
23bd8e46b640dbe6ed5d4c510cd6615d31687bd822affa2054033bdd930322c4

SHA512
bc0c1bc6a8ed9875777917e4365263d3d47ee66cb1f07e9da2f4fce7064fc8d474c15b8a1438eca3ef8b736ca5c208d3d2e05b4ef6f7b9c793002ce2157fcfd7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG

Filesize
666B

MD5
c6dcef2f4234e13f2019670327b8ae6b

SHA1
6208e4e17134ec83261171219c34a2975c7d32cb

SHA256
8d61738db93912d40d4aec94ca7f7ccac96e8bd43e2700b32c190aa4d4f17322

SHA512
6e94ed7bd1714a78e1f197c373aec42e6e66258ae5dcf57e4163d73a2037ebc8bd7dc1abcd3ca8d585299a033f955d0d946cdb11392b851d4adb58815321a1e5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\MANIFEST-000007

Filesize
666B

MD5
8a589d51e235e56dcef352e8e5761e40

SHA1
39a4feadd330abdf24985d0646070a206f73a00c

SHA256
309030d91f9e11f131491d7364cefffae3bfc0869fe216658714a6551d0a6e84

SHA512
1547bf5d5c8fa621b10611d2afd2ec52221817fc93242d674296c3969ad7d2ca1978cd8577483f09bbe8b923f7ef3433fe2b7eb3d1caaccb26e212b7eb8dbd7d

Download Submit
\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe

Filesize
1.8MB

MD5
b8896f24136600ed817bf4d4b9b1a80d

SHA1
5e787a73c24868205db2a836e2fc5e58b5afc93d

SHA256
b6d792319321d57782e58368ce216cc183615050926ecf0fc820177c0142867d

SHA512
9a031e22d4dd584f03077ebdd235b515b89b68c78c27293351d839059fb3c3e94a861bddf6586c98cec8be884a46ce33dc8b467781c7c37db7a3eda7bc5a8197

Download Submit
\Program Files\Microsoft Games\Solitaire\Solitaire.exe

Filesize
990KB

MD5
f481ad4ae363cb52963e32fb8c1f804e

SHA1
df05564821b338786c71f831f25953731ce52581

SHA256
7c9392a9b0f0a651d47c2440f1c2fd58b2a327839c7607d389a38151e9652450

SHA512
5e78a626fb575bbee8e6776e5b8acf8275a6dfbf346d4d356390b2062e8a04f9394e32930b6b6427e4dc75e3c293e395fd1ee7623824b465d75ca2e65e5f8657

Download Submit
memory/1448-36-0x0000000000210000-0x0000000000214000-memory.dmp

Filesize
16KB

Download
memory/1448-32-0x0000000000200000-0x0000000000205000-memory.dmp

Filesize
20KB

Download
memory/1448-31-0x0000000000200000-0x0000000000205000-memory.dmp

Filesize
20KB

Download
memory/1448-37-0x0000000000200000-0x0000000000205000-memory.dmp

Filesize
20KB

Download
memory/2032-13-0x0000000000300000-0x0000000000305000-memory.dmp

Filesize
20KB

Download
memory/2032-2-0x0000000000310000-0x0000000000314000-memory.dmp

Filesize
16KB

Download
memory/2032-1-0x0000000000300000-0x0000000000305000-memory.dmp

Filesize
20KB

Download
memory/2032-4-0x0000000000310000-0x0000000000314000-memory.dmp

Filesize
16KB

Download
memory/2032-7-0x0000000000300000-0x0000000000305000-memory.dmp

Filesize
20KB

Download
memory/2032-15-0x0000000000300000-0x0000000000305000-memory.dmp

Filesize
20KB

Download
memory/2032-0-0x00000000002E0000-0x00000000002E7000-memory.dmp

Filesize
28KB

Download