387eb0376b271b04c42dc30d55cd8a6372a7e23262cd7e644d52022728268266

Analysis

max time kernel
64s
max time network
148s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
01-09-2023 07:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f_001bb5.exe
Size

553KB
MD5

dba5bb17815b7180a38c938c72aeaf6c
SHA1

78deaa833e0d9fe00448f810a1928e34d4e09316
SHA256

77aecf89fec1ca8aedac356cfed0887e365e2caf8555bd964c061720137cf2cb
SHA512

82862737d69bf0cbdf9efdab319eddbc09ba6d22ac46b1afd1395603e58f5f8f2b6c33ab9912241ccb4d39c866a59426f13a7714af7dbc33018f0c3258ba4de1
SSDEEP

12288:rG5knZfFKeXjbTUoaws89d99m7pSRGzDP5SAkmD:rG50ZfFKgLL9m7e2jU2D

Score

7^/10

discovery persistence spyware stealer

Malware Config

Signatures

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3513876443-2771975297-1923446376-1000\Software\Microsoft\Windows\CurrentVersion\Run\Web Companion = "C:\\Users\\Admin\\AppData\\Roaming\\Lavasoft\\Web Companion\\Application\\WebCompanion.exe --minimize "	WebCompanion.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 2 IoCs

description	ioc	Process
File created	C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.new	WebCompanion.exe
File created	C:\Windows\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.new	WebCompanion.exe

Executes dropped EXE 3 IoCs

pid	Process
2268	WebCompanionInstaller.exe
2880	WebCompanion.exe
2120	WebCompanion.exe

Loads dropped DLL 64 IoCs

pid	Process
3020	f_001bb5.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2120	WebCompanion.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies system certificate store 2 TTPs 4 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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	WebCompanion.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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	WebCompanion.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474\Blob = 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	WebCompanion.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D4DE20D05E66FC53FE1A50882C78DB2852CAE474	WebCompanion.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2268	WebCompanionInstaller.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2880	WebCompanion.exe
2072	chrome.exe
2072	chrome.exe

Suspicious use of AdjustPrivilegeToken 26 IoCs

description	pid	Process
Token: SeDebugPrivilege	2268	WebCompanionInstaller.exe
Token: SeDebugPrivilege	2880	WebCompanion.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe
Token: SeShutdownPrivilege	2072	chrome.exe

Suspicious use of FindShellTrayWindow 34 IoCs

pid	Process
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe
2072	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3020 wrote to memory of 2268	3020	f_001bb5.exe	28
PID 3020 wrote to memory of 2268	3020	f_001bb5.exe	28
PID 3020 wrote to memory of 2268	3020	f_001bb5.exe	28
PID 3020 wrote to memory of 2268	3020	f_001bb5.exe	28
PID 3020 wrote to memory of 2268	3020	f_001bb5.exe	28
PID 3020 wrote to memory of 2268	3020	f_001bb5.exe	28
PID 3020 wrote to memory of 2268	3020	f_001bb5.exe	28
PID 2268 wrote to memory of 2644	2268	WebCompanionInstaller.exe	30
PID 2268 wrote to memory of 2644	2268	WebCompanionInstaller.exe	30
PID 2268 wrote to memory of 2644	2268	WebCompanionInstaller.exe	30
PID 2268 wrote to memory of 2644	2268	WebCompanionInstaller.exe	30
PID 2644 wrote to memory of 2628	2644	cmd.exe	32
PID 2644 wrote to memory of 2628	2644	cmd.exe	32
PID 2644 wrote to memory of 2628	2644	cmd.exe	32
PID 2644 wrote to memory of 2628	2644	cmd.exe	32
PID 2268 wrote to memory of 2880	2268	WebCompanionInstaller.exe	33
PID 2268 wrote to memory of 2880	2268	WebCompanionInstaller.exe	33
PID 2268 wrote to memory of 2880	2268	WebCompanionInstaller.exe	33
PID 2268 wrote to memory of 2880	2268	WebCompanionInstaller.exe	33
PID 2880 wrote to memory of 2164	2880	WebCompanion.exe	36
PID 2880 wrote to memory of 2164	2880	WebCompanion.exe	36
PID 2880 wrote to memory of 2164	2880	WebCompanion.exe	36
PID 2880 wrote to memory of 2164	2880	WebCompanion.exe	36
PID 2164 wrote to memory of 1028	2164	csc.exe	38
PID 2164 wrote to memory of 1028	2164	csc.exe	38
PID 2164 wrote to memory of 1028	2164	csc.exe	38
PID 2164 wrote to memory of 1028	2164	csc.exe	38
PID 2268 wrote to memory of 2120	2268	WebCompanionInstaller.exe	39
PID 2268 wrote to memory of 2120	2268	WebCompanionInstaller.exe	39
PID 2268 wrote to memory of 2120	2268	WebCompanionInstaller.exe	39
PID 2268 wrote to memory of 2120	2268	WebCompanionInstaller.exe	39
PID 2268 wrote to memory of 2072	2268	WebCompanionInstaller.exe	40
PID 2268 wrote to memory of 2072	2268	WebCompanionInstaller.exe	40
PID 2268 wrote to memory of 2072	2268	WebCompanionInstaller.exe	40
PID 2268 wrote to memory of 2072	2268	WebCompanionInstaller.exe	40
PID 2072 wrote to memory of 2540	2072	chrome.exe	41
PID 2072 wrote to memory of 2540	2072	chrome.exe	41
PID 2072 wrote to memory of 2540	2072	chrome.exe	41
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42
PID 2072 wrote to memory of 1004	2072	chrome.exe	42

C:\Users\Admin\AppData\Local\Temp\f_001bb5.exe
"C:\Users\Admin\AppData\Local\Temp\f_001bb5.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:3020
- C:\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\WebCompanionInstaller.exe
  .\WebCompanionInstaller.exe --savename=Setup_WebCompanion.exe --partner=IN220101 --nonadmin --direct --tych --campaign=20481597032 --version=10.901.2.519
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:2268
- - C:\Windows\SysWOW64\cmd.exe
    "C:\Windows\System32\cmd.exe" /C netsh http add urlacl url=http://+:9007/ user=Everyone
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2644
  - - C:\Windows\SysWOW64\netsh.exe
      netsh http add urlacl url=http://+:9007/ user=Everyone
      4⤵
      PID:2628
- - C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe
    "C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe" --install --geo=
    3⤵
    - Adds Run key to start application
    - Drops file in Windows directory
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies system certificate store
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:2880
  - - C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe
      "C:\Windows\Microsoft.NET\Framework\v2.0.50727\csc.exe" /noconfig /fullpaths @"C:\Users\Admin\AppData\Local\Temp\tfdc5xzp.cmdline"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:2164
    - - C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
        
        C:\Windows\Microsoft.NET\Framework\v2.0.50727\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESE3EA.tmp" "c:\Users\Admin\AppData\Local\Temp\CSCE3E9.tmp"
        5⤵
        
        PID:1028
- - C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe
    "C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe" --afterinstall
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2120
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" https://webcompanion.com/en/install.php?partner=IN220101&campaign=20481597032
    3⤵
    - Enumerates system info in registry
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:2072
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef6799758,0x7fef6799768,0x7fef6799778
      4⤵
      PID:2540
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1060 --field-trial-handle=1272,i,8874994064211912698,3319825409496721428,131072 /prefetch:2
      4⤵
      PID:1004
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1548 --field-trial-handle=1272,i,8874994064211912698,3319825409496721428,131072 /prefetch:8
      4⤵
      PID:572
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1496 --field-trial-handle=1272,i,8874994064211912698,3319825409496721428,131072 /prefetch:8
      4⤵
      PID:1632
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2232 --field-trial-handle=1272,i,8874994064211912698,3319825409496721428,131072 /prefetch:1
      4⤵
      PID:1204
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --enable-chrome-cart --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2220 --field-trial-handle=1272,i,8874994064211912698,3319825409496721428,131072 /prefetch:1
      4⤵
      PID:2104
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1288 --field-trial-handle=1272,i,8874994064211912698,3319825409496721428,131072 /prefetch:2
      4⤵
      PID:844
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3524 --field-trial-handle=1272,i,8874994064211912698,3319825409496721428,131072 /prefetch:8
      4⤵
      PID:1196

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:2088

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F2E248BEDDBB2D85122423C41028BFD4

Filesize
1KB

MD5
78f2fcaa601f2fb4ebc937ba532e7549

SHA1
ddfb16cd4931c973a2037d3fc83a4d7d775d05e4

SHA256
552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988

SHA512
bcad73a7a5afb7120549dd54ba1f15c551ae24c7181f008392065d1ed006e6fa4fa5a60538d52461b15a12f5292049e929cffde15cc400dec9cdfca0b36a68dd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F2E248BEDDBB2D85122423C41028BFD4

Filesize
1KB

MD5
78f2fcaa601f2fb4ebc937ba532e7549

SHA1
ddfb16cd4931c973a2037d3fc83a4d7d775d05e4

SHA256
552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988

SHA512
bcad73a7a5afb7120549dd54ba1f15c551ae24c7181f008392065d1ed006e6fa4fa5a60538d52461b15a12f5292049e929cffde15cc400dec9cdfca0b36a68dd

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
aca999d42d7bb55a7eed90f058bfe3a5

SHA1
bdd90b0930d516cf960048150605d564c57135a5

SHA256
3673be26d822c9c41f9784d89312adf4c85f84858c1bdece06e5df55b3012a68

SHA512
dbc6279139a19c240542fbb69dc3449f4b363e7f2fe665dfffde3c1f8a0b8bd4b887b5fe311010d469ab83513fff50d815d49520da16a7834ec1646b092f574e

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
576ad366acb7a5d4a5d5b0900be50df8

SHA1
8b89c1f0edd291d1c5ee59385d79d17abefed379

SHA256
7b671d4ec4140adac3a34364493fafd8465ed4753fb5d863d19f1c93813b54cd

SHA512
91ac6b9f5831207b0a81df2cd72e89d3f03e2f29fb3bc11da83a20be983e20cbe2ff64c226081ba0c6278d6a65ae3d256aa096a8034f27706267d29d4a425f1a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
dee3fb1cf5246dd076657986850b512d

SHA1
66ad34ccaadcb1af8ad333ea3ffd5f1150c0addd

SHA256
dfc8e87a9493f5baf727bef597c502530a87d8a7a2004a91df35b696e1b6b489

SHA512
05f081b440ccb2137577e02b4d30a3fd9b704903f8c16ec7bac22e39382efd6e0d445fb0bc41fbb7f6688d1fe76a9039ab093810c09cfb5d3c019bd66aa10c49

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
809bb580ebc9765b8c9b37bab7d18ce5

SHA1
573b34d49169495c2baf6424467811f8028b42e0

SHA256
45040069351443ba3cd6cd09e4054166616b2f8812b2d7d8bf8968420a7c3383

SHA512
cadca650fa464979e27637753e67fc1e8955717bca6b3377cfdea10d208d3642cfefa2d4f82b7188095a1461717e839c758964bc98681177512e3269960ec8ca

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
08fd9708454cde6277b1a9a7539f170d

SHA1
6dc11cc9c807e5ff9fd318e3e5e54f5737a82e06

SHA256
e75f296dd6117d464f5c816b4c226ae9dec733769aa06eb3a135085e51285f10

SHA512
418a9f9e342e616ca7192df2ad489c1443873e51c349196472961c48b58801ffe5427fc6f41a8ae907a0d49dfd50f3649bf07e30fb5484e284285898a1bf5ccf

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e4d4923b86a7f4a862185fd1c77b587c

SHA1
e8c2f6d30b1d1bb436dc9912dec9cd4874792cac

SHA256
9313ba4e6eff99303714853db898568b77a9267dbe52fe2967bc2c578c64bd5f

SHA512
2fcd3111e61f59b3b5b6707a8ba0f7671d89c45555babae1d4eed7697e92ad5db8d076f9265d6719dcc6c9ee651ef569558b35a025e4de6ea698ea5999346dd3

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4949e482735787a5edcca8aeeffea384

SHA1
87e17e40bd54312d76cfd7c33b8e80c061ca7bd2

SHA256
c3261a732808cdcd7532d0e05ea2b2ca55e25f93f37f8f915651c0498f2e302c

SHA512
a1ac3dd3fd76cb740e008c65a3a2a283a30970e56676b100848c93ecef7eeca944341229449d11cd02ba46336d4d7de2f331384a35ba341da0287722f8efb11b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9b4e30834ba7820423ca760faed8c7c6

SHA1
afae675452aa3c3b30e2f46293b0c25c57c87a74

SHA256
84e4c2fc5d60c44720877d91bb1fd665208fb37fa177a444771fa066b8f4652b

SHA512
7f6ae4269702371dac078984f2094063800d169cfd162a92af021b13b388af1a0f02fed01b3a6b667e463dd25a5565f253c62635ef3b5163e12fe9dd2c7ee936

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
9243430c0e80209edca1a5ce0e705c4b

SHA1
976a43438c4dd2c00924d24e0060c2f294de60d2

SHA256
11dbffdb49aa0a8fd22366ffbb80da772435d22a35b15fb26d9bb5ce35a869fd

SHA512
ce20ec72d37c0612e69be8b9f65a2cc6139263b5cc30cad42fee25de425538ccdbbb0d4bc74f7cb80c324d33f02f53298afa8ecbd1cd07c6cacbeaee5446a024

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
07e3c61f831fd92067b36cede20e2b89

SHA1
6d17205d90f956aa030cddcd801305f34eb80ba7

SHA256
967fd3708e79be13acaf3362b9c143b5d784282d916bdd1f0d1c22312abfe793

SHA512
0b4044e8eeebf9908e1fb5024b36e0208d006c942a39c452ede68ce55f9237bc3e5210253cd02b74cebf877d3a9f848b6e4bbf138b6d5e1467ba87b3a3660d1a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
849a4c7e3a0085b6d5dbb46c0f6b46d2

SHA1
ed9e21ac05495f1401dedf8345a364b283af6870

SHA256
b60480040c8f6aba81eb617a389682a551f3639d9cb5a757c019fb469bc73a17

SHA512
946ba78825786b7aba6ce246f3501023ba8b770dca08f75fccc77b6d38affbddb03de8ddb5b0a7a6e45d9fe7d04dfb8fdaf5394ea3c5f1224dc7d560f11e9ce4

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
ac31e0d06e7881401e1e04a737a2f410

SHA1
f3e0895d9ffaf0628b51f4aaa2592fcd8dcccf28

SHA256
af7aa4f4f732a99a0429b5a187c3d7897df3644c130de896127f3f3fde3458f5

SHA512
9c4cf798a8e6d5bdcc94759bdf8d1c6885168e8bbd54df8c51454c3e4d89522fdcd33530e0749166eff4b0b92c9126ae8488afd438d73fc6a4c4042a4d5ae07f

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e04098effd28e5e400d330d30a7b4ffa

SHA1
ae1ab4f8a495219b758bb883f42486801629ed79

SHA256
32d3d3c5d2705bfeebe04ea7d9e2db18d2d44359a5363b43111c5eabb1ff4ffe

SHA512
7ac59ad7e4de2557b17e8582d0d20f265137aef8fa9913ebcfbf0d78bada95c09d9488e1c0de196d07f5ee03105d4edc073d9b57d5f2029417c496bd57c7026b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f5f34efa69646b2f0779c9a3f75d22c1

SHA1
cb0c7314b039131db1e5089570ca05ca3987cdf2

SHA256
1b7264493ca7e1c23218335237afbb15415966285913efa9f0166e585e6a3cec

SHA512
dc4e0d5d4f88fe98f7244504ee7f25ab16f47d3842cd391ad9d867f0d1045e2503b1919129707e50fd30fc148e80fd0eedcf682d46f82556a8beb63ef8052b52

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
72ef98c93ab550b29275c50afc174c71

SHA1
eb58d994a4aa25ddae7a084e192f4f80679f63ec

SHA256
daf004e40855db941c01b5bbd56e80d40d0e160240507b730eed2fac57f41355

SHA512
b8e38cdf8c6708765274d5464e40fb2c62dc1efb7155a49fcd1e1da4e51a936d8b5c1b12fd51b0d44e2b67efa85cd1f299e8e8d6349449be83f7aa2c8505540a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e4b4489c2444d0d44cfe6101f8a2c921

SHA1
d75875a062c4309a9254ecaa56f7eba0dea0c6cb

SHA256
bfce58f0639b85bcd5dc23fbcfd28b4c7b68ad04e0fe13c55eead90c38e44c73

SHA512
bf705f41753ecc023ea14a1a04fe6d3d0b94d4619b90b3515e858e3132c11650edd449d5d103134be85f5966397ba5360fcdb2ba7c7b2a219bc02f275a25bc7d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e7c3dfa8e86e48eed583fc803b31a8a1

SHA1
89962b66a389f77f87321d6e5bab1a02e11046dc

SHA256
ff977b1322f6c8c4ec9b653ec9bad56dda10369600fd1867023b28f18133a75f

SHA512
efe872c35a5550805f7d2c87100768e2d039e95ae7d82b152a3adbb06d9abf883b727629226e745d613d91006f8c1ea2db4fc296f6a31fc04e36a59a9f87e862

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b064f04d65861ad49f815b4ead3f71b9

SHA1
a9dd72684b2c4250c66e38c72e91b75a5a8d655e

SHA256
c6d79123215bdc7149225b78c6bfe05f640713d9fc78a25cbc2a1e86157b04a4

SHA512
0f91e2facb6a52a47da96cc7fe3258c7c732246d645188835cf1429a87eb041ad9461a2e6228d58e7b6f76280c4f8fd204f43f537b51e998ba836d671d40fb0d

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
2e7cda4ffd3ec3995dbe86a4b5334ebb

SHA1
1589ce9fc79c5a072aeaf858103c1a793ea4b305

SHA256
3ad265c5a094d8e8f33f4677cc902820248302680e39f9dc4e0611124907985d

SHA512
548ab2a959fe0686ddd165852f96605c219424e1ed29947acb16bbe9f3aff6fc3501fc7c0ee32781da26184f7bb75eab8d08e34af49e22f48ed46c65ac4b43e6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
b12e2fc2b0fe1c2b6bfdfe3149f96676

SHA1
16a11c92e8d5242416aebad709103bff447c1f21

SHA256
320f9477d243941fabd4f992d1064178b4b1a40eba8077c832a8c4d1776c7dfa

SHA512
e776fd2b03fc2e0aa22c3fba9c4d1579b2e446c3141bd726ce1b9cfb661305917a98dad38500a975fa5d4488d1e839c9badf4ee77ca7610acb2ce771d08bbb53

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
3f21e6aa788e667e5f8f9df468c4c6ad

SHA1
5c4f38cbb84cca99996900b01f5f85d06bbd5095

SHA256
3aa3b713ec4c71cb21844d79531ae31592f351c5a55be76c0c95b983aea83760

SHA512
d52c5193ab3e08cd9ef491672d643279b1fb76d914e8819508852a23ba2353d1f149efee48dee4081b317dc5134a8d191d3e86fef4249b1fbd114e6c878a717b

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
0832df43b1f316e9795ad0461f9109f6

SHA1
e7676cacc8de1980c22108975ba6cb615e55eeb8

SHA256
35434cac616e91273ecd4d482d6a4f36bffc8c9063b79134803ac07e20104260

SHA512
3a65e7b44fefac3a06619f6e2bb9f64b16334c149682bf7410f03de25b78f8c85b952f8e4802d651321c60600bc12ff5ecdf55c8b8ffdbc771694b313d6e08e7

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
c73d8c96e2cb537bebf7a858801f1cb3

SHA1
e12600d747d1729f3c49de081584d1906ec230bc

SHA256
5e9b8855c30b57b77206efa18c5f972c5e9e04854ed1d499b5235eea06be3dc4

SHA512
115698138763a5271ff7ef0d2da685cca618b5893b67163cf59d9a6a1ee7d69953b0a062c54cf5abfdf3242cc3b0798e82916049df24ca07cd235b8f36c018cb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f46b9998ef7b70926b79feef5edcf99d

SHA1
5ab7b6d103169f955b20f02022a64a92b893577e

SHA256
4ecff696aecde23811662f527471da3ab910cebf8abe1c039adfdd74aaf69c47

SHA512
912fb976ade4a5232818bdc32bb70e56863e0a7b9cc2ad3eb5ea6d82fba8ad86707bb9b649c9f7aa5842f282adc5c68b6ce051fa3912acd100bc259dcc2cf785

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
98abddc7074d9f16e635055626a7d89c

SHA1
709e394fad164cdd6ae2035c819805db37036a8b

SHA256
d0380fce9600c5016f9359d604d9f82fcd3ce4841403c2fa6f31e0a1008ee549

SHA512
34b37b886dbf4db748f57a2f4eaedeed0d03909c7c0640a87502b983da8951b4d9e3a624c9318ff7ddad203629e1b1cced0113b33025b54862c4b054725c9aeb

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e8c62d130b368e86a17a0f7b287349c5

SHA1
a8dbb3e718c8c52c78d1c50d603cccc99cd275f7

SHA256
bfb64ee8505ddb12f333c18e792fbea4c5480787097ce87af945826c1101b157

SHA512
94356a0b27248bf92d62c66438d7fbae978f8a04b69512f7e21154feb19fb8c4876d223619c2eb8824d525d2ffbea1442d05abf2b4a5da040de77939915e4278

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e47607971677975601d4e004e592d58d

SHA1
c6fc2c59199b2c8848490b3f0bfe309775f59cb3

SHA256
40f1f0e0c1da9b90ddd1ac20b1c081d8ebc162333c6f56530532689c331bc0b8

SHA512
73fcae6d85f7ff57b5f64ebd7f4de510d6b4df2f548f58f61424b1e86664d6fc9a5201672864007cd9af68c3fc8f34a078f7e2d0ae601504ecb61b3bab60384a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
53f244dfb45d08140cbe7cdf5bed8b06

SHA1
3c6da190b82662fca7435cc61e83328e54f21b07

SHA256
51289aeedb8a9ce1f542749eeaa3e8f266cc3a7878cad7730971adb442720363

SHA512
8ec7746f0e38470e1a6b5c6dd92c2b3c9bae8a6105a56d823603eda96752bbd50ed1cf3c9cc36d60540323cb267bf247b8589f8a989f587af1d8042ccb59dd3a

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
e89680b70d643b880a9610ee9a854aa7

SHA1
cdfc1a6b322da624106b458be16791977dcffe3c

SHA256
784b62599d7a8fb3c193b16ba3275d519a1dcd058329d293f3e7e08a19a05a4f

SHA512
250593e55faf20b9e18c8205fb9563cade0d1aca38076f35d048438082fd8a87bb10175e8797c3e1a6c1e4784b0cbd1dabb033a9e33fcce988ee7d5beae98467

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
6fb89ac5449722b513e8ba4d9db2bab6

SHA1
8298c0ed809c4c7955dfc4f3806eaf4f7f6943b2

SHA256
e29e8bc5ce8956964df57535a06f6c6ed35b53362531c4e13375746a9d663a4b

SHA512
5a2ba8bc84697cc53fd27812ddcf57413deda6e90e1b40e19c4932c0447a66e8ee1d8f2a905ba54bb4ba519be465d2766c5c06dd8addfeca41e74a4800674b78

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
d144e97aa3251d9d8313fe12e74f18f0

SHA1
4be26e55096f12ca34b9149cf8ab9c7dfe2ade49

SHA256
ea9fc4a9f9c4e499086e710b62b88934787efd9b4bc256647ab8c64f02ed51c5

SHA512
f7ebd6b0657f65c50a80cfb809524670a078426e0b7c0812f389b49a23175212df8706b062332de28e1fc2d58d3486ac1f8c71726dba1d726b44bb7aa26b1b38

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
f577100b4e2a5326163c1909ffd2e0f0

SHA1
70648b6e978238057999e9cbda98d6e94fe55659

SHA256
8f16c18625c553ec171479bea97bd5bf0323aa28cbb0e7252a36db505da4cc92

SHA512
fa44d9a356af007f6069e7cd106b635a620eef328b3bf3ae463aca328e128dfb18a5b1526e8df703269176414ebc0f0f5a6a766374f4cec721e4330a245b6444

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
4af84859b98a8849f2c9445aadd6a9b3

SHA1
bcc9bf3d6cf0eea827185e0b4e19bc2bd0ebf5ea

SHA256
73847d5a5a5098a9331315da97ee91256827c3311c6d24241deeeea70031d53b

SHA512
ae250efbe5f8207bc691b8f62f22f2818ea1563a4a17b3c27d67b97ab47ad0d63e31736709386e5f94b4a48adbd8b40620fdecc151cd5def3b8db684b46aedf5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
5611bf1e51f97700b777c75b3b6574b6

SHA1
62b8e0ee850be502e70e50ebf9768770fa8655a0

SHA256
3768055791f1399ccd7631c8792204f4c9980058930ba1dc78ff602cbe036b68

SHA512
83ab11d0d8cbed263bd53f0b383cbc898ccd7dfb197d09a4e8e40fc730c2510784bcf9c1297a4898cf183e21b97a7a174dc7ab63b490986e3f5e26a4c9308cd5

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

Filesize
344B

MD5
a18dce2ce903e26bf588031d99ad4fd3

SHA1
ad35d451fca805cf5d8fd176360a7fdbe94702a4

SHA256
34e8bd4427906c0d7dbe8b4086b08dbec0a4e9b7f585891ddd38115a53e5af42

SHA512
a41ca69b3235ed9139b79dcaabd8425f9aab0b3020d2b2b131ac208ec3a95e2422711cd0318b016cab3a9923b405382ba1567c267fb9090e9d8bbb76dfab82b6

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F2E248BEDDBB2D85122423C41028BFD4

Filesize
254B

MD5
92b170c8180030b2bb53503f2a5e433a

SHA1
59119c41d1307840e6d4cd5e3fd4c537dcfe32ea

SHA256
1383039c40400864fcdf0a1b0f28f7e35e4ad14f74d94b7823a58bd5e7f43127

SHA512
9efde6f242462b1a9184b3098122c03023e87104c99e88f32a183c7f5f95f563fae4beab54e2be64dda02cc7ff2b8230173e2db629fb5607b25b19781d341389

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F2E248BEDDBB2D85122423C41028BFD4

Filesize
254B

MD5
92b170c8180030b2bb53503f2a5e433a

SHA1
59119c41d1307840e6d4cd5e3fd4c537dcfe32ea

SHA256
1383039c40400864fcdf0a1b0f28f7e35e4ad14f74d94b7823a58bd5e7f43127

SHA512
9efde6f242462b1a9184b3098122c03023e87104c99e88f32a183c7f5f95f563fae4beab54e2be64dda02cc7ff2b8230173e2db629fb5607b25b19781d341389

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
4KB

MD5
50d24565c92b4bf642ba8fba5d8ec6ec

SHA1
fe90f9e4c6f285f22854b4f1818ff3e57c80649e

SHA256
bb1e170d4f313c1f53efd5aad85ce5a58371d3ecbba79c2b99e3192fe8f9e6fa

SHA512
063a111b3b7893362b62146e164d2f92c3ca5ebde30754866edff4c20f24eb36c47d62bb4962de42012e4376c958a3cfeec219c1fe7c1c9d02c6c0c01ed69cb0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\000007.dbtmp

Filesize
16B

MD5
18e723571b00fb1694a3bad6c78e4054

SHA1
afcc0ef32d46fe59e0483f9a3c891d3034d12f32

SHA256
8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

SHA512
43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\Web Companion\Logs\Webcompanion\webcompanion.log

Filesize
4KB

MD5
1c42671920ae0b4e4207a2430cce20b3

SHA1
4cd576ebd110ee1fae201d91fe6e628350502653

SHA256
51d3dead9234ef5f43ce3d4183153f1069f082edc3ef6c3afca27073d2b7b2da

SHA512
2eeb9b575b9b73c9905a2171a8bb8eedd0777c2702d57166b2ab790acd4f53f5186e6756c354ec2cef26d6710df1900acd1266b7874a72a599f94c5df5fa4838

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\a3oakg2z.newcfg

Filesize
2KB

MD5
efbf09de0ca277aa357c007dca29b09e

SHA1
49f1bb34fcadcefd40ed3f676846747fdd668b1c

SHA256
2a81c805d9e997dd73d71feb0e22025160bb83bfd889d946d14fda7b416ba122

SHA512
db3b07c69e010b9d23df47ed739e66d78dc64f148342710aab221b36ab4c5d3b3bb4b3e9f25764ea890d81d7236490dd632d31ba1993ce00c8de9ed1009b2755

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\ay29wfuh.newcfg

Filesize
4KB

MD5
0251e3370edf25fb3cdc4201ab846135

SHA1
99b98678e0a0a083946eb43ce2065fa6e05f10d5

SHA256
7be9d070b4d80a85f9d73dc99aa9d54b0a511141aacefa71f36563acb228be08

SHA512
3119c06502b51d7bf754e44009cf12ac6bee24149713d3a8a7d7d8dfa14e55d67ab6a6557eb7c6d4c5f1b71bb639258ab5befdfbf5350924c3a75adea6e07d80

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\mlzsofvc.newcfg

Filesize
4KB

MD5
62e298dc634db6332260e43cf913dd56

SHA1
9cf134cd9d50ffa69f849a920b8098929f4f735e

SHA256
79263798058121238b66928a0cced052f1fc6c0080c81d882e1b51312d8e5e76

SHA512
7d8a5df23127e8f8d69b90b0850cf3213a1ec15d33bca959ed98dddfc4d08a1c44f9c6379c32bd9f4669eb55e93b85fd085768bb609038c93d61f9e980e81d0f

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\puemkk5r.newcfg

Filesize
4KB

MD5
821bc4dc67af27b087201b100e1f1e4c

SHA1
77cc44d15959e381544667b6a352aaace5de599a

SHA256
15804bd4091b2de606e51f103b98786b34e161ca4e275a99d1c287b094642045

SHA512
3f8dfe1521b83e5445c69cb6a009ee821737a0064b0ef6d55749f9ed929989b80eabbfbbe9ad97fd942c15fe2745b24563a82fb059c4d2d1a153eadcf5173da9

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\user.config

Filesize
341B

MD5
173c8e5d53012fcd93034042f8464a19

SHA1
226fafb255a07ee20e0522a8902638844afb88f1

SHA256
5ba3803c178a75c84f9868bae53edb497f63869de941dc21578546185c269d77

SHA512
d1ca7efbb86066cc8e1d0dc91b122d3b7f98c56f49f449da405d36304e73905986eb697604360ec4bf6b2fa6603ad3020624428d2a67db050cd141e23780eeb5

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\user.config

Filesize
2KB

MD5
3bd722c7582cd92781e831e2b39db100

SHA1
cbaa034c00db7c5631a1eebadaf6fce83215ca75

SHA256
6384689d6f04ffcbc8cacfc8e430082fe675d06dba5a323156254d46aa638ed1

SHA512
51c51a3d5fcb8f7638ee04810380306b6ece5bf0c9bbabfad4e0b5f2a0b58f761dcb7936a1063b9201ce4a18edba6d4b5d270c0fc1e358d987115f64eaf89ff0

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\user.config

Filesize
3KB

MD5
cd6be6da06c6adf1711c120eb06fbce1

SHA1
f83bcd1916d98b9487bc60bda803d36f729f1f60

SHA256
23050b7b6ea217e1eae1b9aaf85353853aea42df0a260cebf906ca869de959df

SHA512
863060e3ac6aa05dea33c0d21196256d803c85597cbff468f970236229b10e9227170e9c06a27cbde4827533cd43c8a5cbb3a0bccdcd3be65e798e7fc84150b3

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\user.config

Filesize
2KB

MD5
fc316d556007988918ba5495b67da2f8

SHA1
489a17ff66dd34c1a477688ad98a73677eab34e0

SHA256
68a9734b412bea9bca36bffa3ce2b3b79bfee38c87c00969c06b0a44ad169dd6

SHA512
f17d78d12cdc6fe1005632a7d8f8f16a4274fd554d414e84b8d3359c1906c5b675d802bf149f92e6ce0352f695086ab9e68bf24affac68c897cb6c15f5930bf2

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\user.config

Filesize
470B

MD5
64c71bbabbada7b8824b3c637b404ae6

SHA1
58908d0f0a3dca96ffed1ff36da5bdf761f56338

SHA256
58b78f4ef263136491df59bcf5c510b03116bd7c18ae319c868367296c7041a7

SHA512
e8fdd3ff659bd7c1b581b6245dd059247bd382c0971411347bbbc8adc75c1108671a3b019021d615739ad8aabef92acf342b72316647ea324eef78f2b3161337

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\user.config

Filesize
1KB

MD5
7c1e2fa646b4cd024f84780eab71fa96

SHA1
8eaa1cfbce0b2741db17bcd7e82d1a2e683e7b95

SHA256
344e20ec032dd49019f57186186c0144eaffd6db89e0f082c7b29fee6123b8cf

SHA512
a6071c3b62f479fe4b3fc04ccfafd776c27774722a1537b343a6fb9eb6748cfbcc51a2aff378498959a14908ae6053cec29c9d71044e47edaa1929f098d7783f

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\user.config

Filesize
2KB

MD5
a5052305b728e9c9b7c2c29da4847925

SHA1
d65a12db8035369968c443072b282ead0ca2124c

SHA256
cf2d2ed69f5a92a3e2b668580fad0067127e48bfc64f15f6bc822fa414384a94

SHA512
e447ac820a65540b694dec5b999e285bd9bd842ce7d2d7c9973e961c864738959ac82541833aeaacb5cfbee51107a94d52909c354e3ba6b39c1e4ef9b8c46f14

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\user.config

Filesize
4KB

MD5
3c66330a4886b7577bb46dd1c2a8ea00

SHA1
a5580a9def35668571889767306a6bfe1158b606

SHA256
e4275b05a437b42e756c85c9ebdf75561c87740b3550f8eba6932c61914176ae

SHA512
27feb652de0c2dd37c28bf70aeb4dba427158bff27ab9b32fc9049e1bc9a22371d89e63a8bff9b7df1d81adcda4f617dabf368d13806fd8a2d1768cbfe75f685

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\whq0dze7.newcfg

Filesize
4KB

MD5
062e07a067450b4b1efcbf1302c0169a

SHA1
aa982d5db1a86cc83bb4aa715b3f99373e27b151

SHA256
793c58549a61f45e5813bdc4df93841d7611826e3068ff59873bab47620e847c

SHA512
6467c11b64bad03a3a6c51a17424b75228d8980bc275a2613c3e1c1626adcc5c4f35267fb444911bab1311d89ccfcc72ab9ea8d7ab40500cb780b967d9464632

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\xmj9rtpo.newcfg

Filesize
2KB

MD5
ebb6da30ac62a98949f28cba67467a35

SHA1
cb8b26a0bc67fa6a801b6154943a7ff7aa81f73c

SHA256
92a18332f4f5a456671a80ed8e8bbc89294d10271c65c8b78bed70680fd115ae

SHA512
95df5adf6a9fba832b568675dd402bc3cac3bb4a16e477891e8fde2cfa1fd9a33582e3570240f460f7a6e1cc3b57ef3fbf42e2b6910c212a2455e8f2934c9ca0

Download Submit
C:\Users\Admin\AppData\Local\Lavasoft\WebCompanion.exe_Url_gmu1m0gq0rh5o2nzjzcq3icmpmnmdp5h\10.1.2.519\zrmu564q.newcfg

Filesize
4KB

MD5
60cbccd17f2f8e052b109ec2bfcb3eb5

SHA1
84af863b1d4f9e296a4a97e27d13b43938b6b594

SHA256
151f41cc201922b9c39233f979053e31387f23f13548ffb0511de268f4622137

SHA512
7a46abadfc293a166c2d552a618f8ba400c9b5408beb6010efa440ab79436c337acd5ae5cd6c4845e8234246bb8da4e4a9915869eab2a67a0d42363b996998ef

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\ICSharpCode.SharpZipLib.dll

Filesize
207KB

MD5
1e16bad4f6a563c46161bb4fb0cfec4f

SHA1
e86ee8b835814ff6e6d6709a00694d0308cc83f3

SHA256
c7b5080ea8b2753751cb6252a3e9edd2a292d8a141de9e65cd3d0005ebe041e9

SHA512
a0a52c24bde70dfd22d0c7b57a2ae53927a5efd2a6dd18a325f7d03a6fd94eeb6c5885b63c7e135bac786bc4bde82640584e76ab04d9a9e6bf24923b9f05e7e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\Newtonsoft.Json.dll

Filesize
426KB

MD5
6fe086f542ae0dde2ab0162a87b63192

SHA1
a940664ce30f1938fed543d23e3715732315ab2f

SHA256
484a60598618c20e518c0acb0a2d5296fb64d15dea2edda698a178caba16ce27

SHA512
ca4c8682b169385a2b2795a3c128b985123d40670a55b8d5d5545e3377568be396d370808d14d099c583991e3ca438e1d48963c4e1620131e1ba4691f8f40ca2

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\WebCompanionInstaller.exe

Filesize
461KB

MD5
4a5b051edbc60c58d0fa08810ab2fa0a

SHA1
0430c9096463c70cfabd1e831df7121fc39ba811

SHA256
4f388b54e9ba62572013722783938e1603fe3e76b5b02031ed33df09c1c73eaa

SHA512
9a9e0e5f85ff379d5927fe0525592b8378b40b6237e8f0b9c34fa667246140ebe26883575d3d8e0c437e3a2571cd0bc39337f3fac88694537c4fefe227ad63cf

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\WebCompanionInstaller.exe

Filesize
461KB

MD5
4a5b051edbc60c58d0fa08810ab2fa0a

SHA1
0430c9096463c70cfabd1e831df7121fc39ba811

SHA256
4f388b54e9ba62572013722783938e1603fe3e76b5b02031ed33df09c1c73eaa

SHA512
9a9e0e5f85ff379d5927fe0525592b8378b40b6237e8f0b9c34fa667246140ebe26883575d3d8e0c437e3a2571cd0bc39337f3fac88694537c4fefe227ad63cf

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\WebCompanionInstaller.exe.config

Filesize
2KB

MD5
ebacec1e9929bd429c709a9fd0c210ac

SHA1
a6a847fd94fa1d243108ecac6eb75e14033a93c0

SHA256
ae0e80f5549f5ad5ef0996882a2e0f997ff3724e63a35c9bca9001b10f58dee6

SHA512
8a7f4dccf0fd9888d19f01358c751a917d707c5b2ce01852224a4d3f70440d0e026dd824ac51f07942ad7722d07e949798cc044dccd32559f35651f01efcd196

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\en-US\WebCompanionInstaller.resources.dll

Filesize
9KB

MD5
d3105e9db5aac25193d6c6d2d99349f6

SHA1
551362c83428f52837a97a9c988d993e4b9dc573

SHA256
86b3513221f9d1edac50afb7a43cdeee1599cdc69f37d6c52be7f2a0bf014e66

SHA512
79a10cb9383f07cb17b16af8cea52b28a0e5c7d01aed21ed0cff05ae669abb4d9ad3585cd117407e272d98c52524f115a4b93bac8fb42d6574533b243f5935cb

Download Submit
C:\Users\Admin\AppData\Local\Temp\Cab3861.tmp

Filesize
61KB

MD5
f3441b8572aae8801c04f3060b550443

SHA1
4ef0a35436125d6821831ef36c28ffaf196cda15

SHA256
6720349e7d82ee0a8e73920d3c2b7cb2912d9fcf2edb6fd98f2f12820158b0bf

SHA512
5ba01ba421b50030e380ae6bbcd2f681f2a91947fe7fedb3c8e6b5f24dce9517abf57b1cf26cc6078d4bb53bde6fcfb2561591337c841f8f2cb121a3d71661b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\Tar3873.tmp

Filesize
163KB

MD5
9441737383d21192400eca82fda910ec

SHA1
725e0d606a4fc9ba44aa8ffde65bed15e65367e4

SHA256
bc3a6e84e41faeb57e7c21aa3b60c2a64777107009727c5b7c0ed8fe658909e5

SHA512
7608dd653a66cd364392a78d4711b48d1707768d36996e4d38871c6843b5714e1d7da4b4cc6db969e6000cfa182bcb74216ef6823d1063f036fc5c3413fb8dcf

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\ICSharpCode.SharpZipLib.dll

Filesize
207KB

MD5
22db60594f6616ad45b65f0597ad2cf8

SHA1
dde71da23461bf73b75c30427bd19050ba013d43

SHA256
2bd8cef6c24f303a4d43e8af6c157d13c5e68ae12499231abdb96500e2a119cc

SHA512
294e6c2325dee79a3ad629b138c6f0ac5e307f001a288dd1078a75a5e0f275aa1a6a48fbd1c0c60eb7b8e60aff33e035d5cc46f85aa9a97b2e809a10947df9c9

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Interop.LavasoftTcpServiceLib.dll

Filesize
55KB

MD5
d050df18bd18bf81abc997ff64e04fa0

SHA1
90c106a3e2a58c2e6e4ab3e0b14e32520a0e34d8

SHA256
7b5f7bbf5c1585f596b2a9bb5b67e70696a66f07ac645acbd9b9451f33c4beda

SHA512
e79a7dbb4474768741dabb5c41885d2f684e6c9c3244657f017c534754ecac9a5001e251282d087d503cb598aea836330e8b12612cd6317f8c20dc9318e70a5f

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Ionic.Zip.dll

Filesize
462KB

MD5
3d8bf84f10ef47ee50c437c255bc3958

SHA1
5aa8f0319dcc0d1ce6fb4577fedca2d8a66610f2

SHA256
8006bfce39927b96a0642d51bba0cf7a449bb2b09c62f5f5cb1618e748468356

SHA512
db73c6fe81c57b71c2587baaaed00a092f4476f2ee8268a83da95f4e3ac5755e801d18b137ebadf118e1b6b89b660dadcbd793647c24e432c0c9a1df40fbd677

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.AppCore.dll

Filesize
199KB

MD5
719abfcdfe4a420ed8db4b1f407b27c0

SHA1
d8b5b8b670e10a00c3b2b21d147568b6c4a68edd

SHA256
4fd95a547d9604810e3ec80d63a564492a1a2d050f985bc228a191e3fdf5631c

SHA512
b970be97e23a5f97d70d9ae87512a596e0bec22ec6e76e8198318ec0c8a2b36cfa9064ed6e7bf514ab44d6dfde07a0c37c67167c54bfebded1ecb3b94d9ce7e6

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.Events.dll

Filesize
131KB

MD5
c86dfe367017deba7a77a6724d0cf387

SHA1
c97b810c9755275e45128299a422040544f73422

SHA256
bc57b7acaed475fa37a63d0d9167ddf55331a228905e18027c0cbee30eae4417

SHA512
438fe3cd085b0b05e809b85a43e0a721a9ba7790d7fc464b9aa0184d19eb1224277f3dfb95f1aaf104d28e79d07faf12155d4fb80c02476c0cdcfe9015dcb205

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Business.dll

Filesize
528KB

MD5
06057dd6faec821061f244d51c3269c0

SHA1
676aebe7f974d88dc034bf8741688a6ef4653687

SHA256
7d73db43d134121301d16fccd6c0d9d3a56782b275ac38d3cf039340f1f7d209

SHA512
ff931525b9264aaee4b67122c1f11b891e8b5a92c8e53a5df1cb63b889df581c465a747521723e1c18aca5109f101799edc1247277c1b06086739c8bfeb7244d

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.SysInfo.dll

Filesize
82KB

MD5
1049f0ef2dc71fbb0a8e745053488824

SHA1
546c3e19a9f7ea1952638555082614173b433ae1

SHA256
c7f0d488a1cf8a4610e3d78beb69776371eb2d145a3f5c96d6e3f20cf422d1ce

SHA512
297e8f1033dae72f1fcf32034391e34f37b4b2ba6b50813e396d770d8bdc8204f166b1486fc43eaeb4d88f9e8f424ea82c34e85ec8f2ace799d4c3c035204ebc

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.Utils.dll

Filesize
104KB

MD5
ec4b2852e620fb8977b4ca209d7787d1

SHA1
b59eda2724522814e2f5d1dba675c3c1efaa9579

SHA256
82ef634b9216b2a72248f3dfe22c7f26ee119021d06ce71cdee4193e940a2956

SHA512
f2a233407bb1752fb9d6f0ff99f6b21fe514c29128302b34db5dfa28b00b429d23e0f5dba6226298b655ef2194861baa05f349f00e4636934ef2d07fd57ffa73

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Newtonsoft.Json.dll

Filesize
426KB

MD5
8646baeed20310f7b687789e58e183e2

SHA1
3fd09e9f654331f031e88fbe61d99a42dd10c1d7

SHA256
193c95270430347cd2c0677cbff40e5c812e0b49f7fe539b8b37b9427079986c

SHA512
537bb871c727d7345a47016b0628b4628b3f0414a1c4002d9f7ab3165751c2185143c565358a659ccf522b7917929fbbbfab03d488833b70d1bc14ef1b3c6f2b

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe

Filesize
9.2MB

MD5
7bb65bb24e9a4a04e8d3423d12cf4665

SHA1
29a28ec509fd7e46eead9730d910bc9261babd1e

SHA256
263d145e44bbef5f1a7b33d5d22ea33a941ef339a567d853e257e5b07540049e

SHA512
893a9538efc74bf9c2f55c537abc6a227e02a992d42321d29e81b45bd7394cb1b4729371dbc1536fa8e75442b4f48cfdce1b09af829c8a381e848527f52aa01e

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe

Filesize
9.2MB

MD5
7bb65bb24e9a4a04e8d3423d12cf4665

SHA1
29a28ec509fd7e46eead9730d910bc9261babd1e

SHA256
263d145e44bbef5f1a7b33d5d22ea33a941ef339a567d853e257e5b07540049e

SHA512
893a9538efc74bf9c2f55c537abc6a227e02a992d42321d29e81b45bd7394cb1b4729371dbc1536fa8e75442b4f48cfdce1b09af829c8a381e848527f52aa01e

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe

Filesize
9.2MB

MD5
7bb65bb24e9a4a04e8d3423d12cf4665

SHA1
29a28ec509fd7e46eead9730d910bc9261babd1e

SHA256
263d145e44bbef5f1a7b33d5d22ea33a941ef339a567d853e257e5b07540049e

SHA512
893a9538efc74bf9c2f55c537abc6a227e02a992d42321d29e81b45bd7394cb1b4729371dbc1536fa8e75442b4f48cfdce1b09af829c8a381e848527f52aa01e

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe.config

Filesize
19KB

MD5
1f6d2003038e80d41622133f99babbfb

SHA1
15d65abfa15dcca59ea4b31dac689377497e4596

SHA256
00686f103e7774f6ec676fd9fecfe5424bdfb31cd1dd82625fd8c7d3e2f427f7

SHA512
87b61780297fe072e2054269d7effd69ea85bf414279d12c0232cecebefb07435a727bc69a234681e7a2be862699a73ca79a83b1354406936cf9286d96cc8fd0

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\log4net.dll

Filesize
315KB

MD5
1d468bb4ca5c3664f208dea11633d570

SHA1
2ea73e477abd6ae06fde8aebd1bd72ebd569fb2b

SHA256
73c4b4c46095f46aa422f0caf810bb053704c3ca6cc938a8c74b8db2ab1e5318

SHA512
7a7b8f34a4797c02bed552cce89db5a02a4952355dd45be4ac4bab6a8f283a1c7036f343516a1778243a978745537d23e3e382c9dc9e496b79cf909aefd5ba7e

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Options\ActiveFeatures.zip

Filesize
404B

MD5
118bfd50dbdba7af1db953b99bbf79b5

SHA1
0231ab9f3d18a95e9c3014520dd65b32b52ae3ec

SHA256
d616824466221fd0497245da3ac1687e52944e5cf5b7528b0b4d15f6b74a4fc7

SHA512
b306b0d10e2ee0285da184d18af8257d35d0b99edea8af530e02d9aee55f01080289318d485d5c1637de9af6a9a66529efc51fe66e14ef5ddf8811e8cb784f51

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Options\ActiveFeatures.zip

Filesize
404B

MD5
79a06e7d73160d5f138977c3a28d14c4

SHA1
3a539d144766f0891c56b4d78c40cece24207b78

SHA256
0cde2788342edc992bff9c579017204e5eb9fda37b4581e300d7f2f3f37baffb

SHA512
de51f84817df3d9aed05cee425c0e847e8e0502b6416747aaa9962fc05f14f4344da347671a1bcdc0c439c5c2978a3ca0a62de80549477ebe3d5606e5e2771ec

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Options\AppSettings.txt

Filesize
310B

MD5
d1c66668d86b8017500d2a93977e2dc5

SHA1
6e86edc442ff9e0fc8c1664a4ee3bb02b66c6f68

SHA256
8b48ce0254b019bde1cd7e308828b71a8e70e22296cde4edd73292644ffdecff

SHA512
5f9db5e9a50744c6d9ac5111f939907592cff292c46684415578cbe2a0ad91673e90db8a9290572766ec5c86e7d8b357546186e7be6fd1a000a1678e08d28be8

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Options\FeatureActions.zip

Filesize
630B

MD5
68c3a46dfe940dfad22a9f300075d2d2

SHA1
32cf620de19fa6cc732a77855ba9d05965679f5d

SHA256
f6be4cda0cace4d77ae7a94c3c1a4f0adccc1d5e9c7aafd2a13b6a898010f986

SHA512
38e0c3bd3ad5d2c14aa2958278df938163e38f7adfa0a2f4f04574a1955cbd68f4ef8ed55e1f24600a850e33625b8cc9cde8108849a7f02c7ef1758744fd389c

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Options\LatestReleaseNotes.txt

Filesize
6B

MD5
f5bd57c383ba95f77ad910dd0200e081

SHA1
0595d53ee4839cc59f5883fb1bc42098024f9b7b

SHA256
abdfbffecbe18ed94df9829819e596ee285b52a94aa108514452a9121721c789

SHA512
f9f0a2040f85cc0338b9fb6770180d3d7cdf0f12d8e3bdf01b9a27c1c03f6653a768ba73fa427813561ea8b221b349e11f64221366841b602c3618f7197f283b

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Options\Partner.txt

Filesize
59B

MD5
2a6ef23fcebc016b0f3e95697513cbd3

SHA1
bd12cab7d1bb14780d6250b534c4a8de03070421

SHA256
1bf9ab9d35112c674dd1af50470ddca5ebdaa8039f40a9400c02328e928c452b

SHA512
ddb4f70347b254fedf3f50a34816599681e1093f8576ab67bf6812faa42c4e7f7a0bee04b396043d2f656233beb48319cb5cdb286ae6639d84c06c24bd369738

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Options\ServicePartnerInfo.txt

Filesize
185B

MD5
4bcc86022ef3bfadb193809cf9bcbfa6

SHA1
af6062bfa8cd83c19fb8ede3ac6ebefbb839437e

SHA256
4b3b3ed60014bbeccd62ad028056288e7b9e05e6596e8b8b38b12f72ddb69c82

SHA512
6621f1f4304f69dfad5197548ca0a2e06ad27e18ff82629631dffcc7e1d6ff2532f0e96b163b0d082a3a9299d3fbc5c35bf0bc85446968c23abb418a3bbd892f

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Options\Statistics.txt

Filesize
56B

MD5
979a8a27c26a241bd4f9650a08368194

SHA1
382fb3843914dce2bafd0ea39b47f5bbd99cc5cf

SHA256
999180ff3c1105dedcbef2ba293a546329414dda8cb025a9766dec35c5e2e065

SHA512
78a0d9c063558116c691d0669b5e564e5cf5ab7195a1b6d9ca0de27c715723ac653ea0d670b99d9aa12db86fe1e876e55f31b34e2a8f9b7629de6af594ea152a

Download Submit
C:\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Options\WebProtectionConfig.txt

Filesize
308B

MD5
0cb1cc6ebd3113ffa4d08cb8e611b0c1

SHA1
c084178a890875d41c400e8950537e1f8a58a50f

SHA256
b578ec7cfe4cdf6690c83daa66b068fc585a8b35fc3a8722e29f2dc0fabb26e2

SHA512
c86f4c9a16249313e1a4e0561dc6241e931c5d382a830b64e3aa9d1447734716417bc2f08e4860edc0d2945cc5091170b90039194c90985395d33a36662fffec

Download Submit
\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\ICSharpCode.SharpZipLib.dll

Filesize
207KB

MD5
1e16bad4f6a563c46161bb4fb0cfec4f

SHA1
e86ee8b835814ff6e6d6709a00694d0308cc83f3

SHA256
c7b5080ea8b2753751cb6252a3e9edd2a292d8a141de9e65cd3d0005ebe041e9

SHA512
a0a52c24bde70dfd22d0c7b57a2ae53927a5efd2a6dd18a325f7d03a6fd94eeb6c5885b63c7e135bac786bc4bde82640584e76ab04d9a9e6bf24923b9f05e7e3

Download Submit
\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\ICSharpCode.SharpZipLib.dll

Filesize
207KB

MD5
1e16bad4f6a563c46161bb4fb0cfec4f

SHA1
e86ee8b835814ff6e6d6709a00694d0308cc83f3

SHA256
c7b5080ea8b2753751cb6252a3e9edd2a292d8a141de9e65cd3d0005ebe041e9

SHA512
a0a52c24bde70dfd22d0c7b57a2ae53927a5efd2a6dd18a325f7d03a6fd94eeb6c5885b63c7e135bac786bc4bde82640584e76ab04d9a9e6bf24923b9f05e7e3

Download Submit
\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\ICSharpCode.SharpZipLib.dll

Filesize
207KB

MD5
1e16bad4f6a563c46161bb4fb0cfec4f

SHA1
e86ee8b835814ff6e6d6709a00694d0308cc83f3

SHA256
c7b5080ea8b2753751cb6252a3e9edd2a292d8a141de9e65cd3d0005ebe041e9

SHA512
a0a52c24bde70dfd22d0c7b57a2ae53927a5efd2a6dd18a325f7d03a6fd94eeb6c5885b63c7e135bac786bc4bde82640584e76ab04d9a9e6bf24923b9f05e7e3

Download Submit
\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\Newtonsoft.Json.dll

Filesize
426KB

MD5
6fe086f542ae0dde2ab0162a87b63192

SHA1
a940664ce30f1938fed543d23e3715732315ab2f

SHA256
484a60598618c20e518c0acb0a2d5296fb64d15dea2edda698a178caba16ce27

SHA512
ca4c8682b169385a2b2795a3c128b985123d40670a55b8d5d5545e3377568be396d370808d14d099c583991e3ca438e1d48963c4e1620131e1ba4691f8f40ca2

Download Submit
\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\Newtonsoft.Json.dll

Filesize
426KB

MD5
6fe086f542ae0dde2ab0162a87b63192

SHA1
a940664ce30f1938fed543d23e3715732315ab2f

SHA256
484a60598618c20e518c0acb0a2d5296fb64d15dea2edda698a178caba16ce27

SHA512
ca4c8682b169385a2b2795a3c128b985123d40670a55b8d5d5545e3377568be396d370808d14d099c583991e3ca438e1d48963c4e1620131e1ba4691f8f40ca2

Download Submit
\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\Newtonsoft.Json.dll

Filesize
426KB

MD5
6fe086f542ae0dde2ab0162a87b63192

SHA1
a940664ce30f1938fed543d23e3715732315ab2f

SHA256
484a60598618c20e518c0acb0a2d5296fb64d15dea2edda698a178caba16ce27

SHA512
ca4c8682b169385a2b2795a3c128b985123d40670a55b8d5d5545e3377568be396d370808d14d099c583991e3ca438e1d48963c4e1620131e1ba4691f8f40ca2

Download Submit
\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\WebCompanionInstaller.exe

Filesize
461KB

MD5
4a5b051edbc60c58d0fa08810ab2fa0a

SHA1
0430c9096463c70cfabd1e831df7121fc39ba811

SHA256
4f388b54e9ba62572013722783938e1603fe3e76b5b02031ed33df09c1c73eaa

SHA512
9a9e0e5f85ff379d5927fe0525592b8378b40b6237e8f0b9c34fa667246140ebe26883575d3d8e0c437e3a2571cd0bc39337f3fac88694537c4fefe227ad63cf

Download Submit
\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\en-US\WebCompanionInstaller.resources.dll

Filesize
9KB

MD5
d3105e9db5aac25193d6c6d2d99349f6

SHA1
551362c83428f52837a97a9c988d993e4b9dc573

SHA256
86b3513221f9d1edac50afb7a43cdeee1599cdc69f37d6c52be7f2a0bf014e66

SHA512
79a10cb9383f07cb17b16af8cea52b28a0e5c7d01aed21ed0cff05ae669abb4d9ad3585cd117407e272d98c52524f115a4b93bac8fb42d6574533b243f5935cb

Download Submit
\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\en-US\WebCompanionInstaller.resources.dll

Filesize
9KB

MD5
d3105e9db5aac25193d6c6d2d99349f6

SHA1
551362c83428f52837a97a9c988d993e4b9dc573

SHA256
86b3513221f9d1edac50afb7a43cdeee1599cdc69f37d6c52be7f2a0bf014e66

SHA512
79a10cb9383f07cb17b16af8cea52b28a0e5c7d01aed21ed0cff05ae669abb4d9ad3585cd117407e272d98c52524f115a4b93bac8fb42d6574533b243f5935cb

Download Submit
\Users\Admin\AppData\Local\Temp\7zSCCBD5B16\en-US\WebCompanionInstaller.resources.dll

Filesize
9KB

MD5
d3105e9db5aac25193d6c6d2d99349f6

SHA1
551362c83428f52837a97a9c988d993e4b9dc573

SHA256
86b3513221f9d1edac50afb7a43cdeee1599cdc69f37d6c52be7f2a0bf014e66

SHA512
79a10cb9383f07cb17b16af8cea52b28a0e5c7d01aed21ed0cff05ae669abb4d9ad3585cd117407e272d98c52524f115a4b93bac8fb42d6574533b243f5935cb

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\ICSharpCode.SharpZipLib.dll

Filesize
207KB

MD5
22db60594f6616ad45b65f0597ad2cf8

SHA1
dde71da23461bf73b75c30427bd19050ba013d43

SHA256
2bd8cef6c24f303a4d43e8af6c157d13c5e68ae12499231abdb96500e2a119cc

SHA512
294e6c2325dee79a3ad629b138c6f0ac5e307f001a288dd1078a75a5e0f275aa1a6a48fbd1c0c60eb7b8e60aff33e035d5cc46f85aa9a97b2e809a10947df9c9

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\ICSharpCode.SharpZipLib.dll

Filesize
207KB

MD5
22db60594f6616ad45b65f0597ad2cf8

SHA1
dde71da23461bf73b75c30427bd19050ba013d43

SHA256
2bd8cef6c24f303a4d43e8af6c157d13c5e68ae12499231abdb96500e2a119cc

SHA512
294e6c2325dee79a3ad629b138c6f0ac5e307f001a288dd1078a75a5e0f275aa1a6a48fbd1c0c60eb7b8e60aff33e035d5cc46f85aa9a97b2e809a10947df9c9

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\ICSharpCode.SharpZipLib.dll

Filesize
207KB

MD5
22db60594f6616ad45b65f0597ad2cf8

SHA1
dde71da23461bf73b75c30427bd19050ba013d43

SHA256
2bd8cef6c24f303a4d43e8af6c157d13c5e68ae12499231abdb96500e2a119cc

SHA512
294e6c2325dee79a3ad629b138c6f0ac5e307f001a288dd1078a75a5e0f275aa1a6a48fbd1c0c60eb7b8e60aff33e035d5cc46f85aa9a97b2e809a10947df9c9

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Interop.LavasoftTcpServiceLib.dll

Filesize
55KB

MD5
d050df18bd18bf81abc997ff64e04fa0

SHA1
90c106a3e2a58c2e6e4ab3e0b14e32520a0e34d8

SHA256
7b5f7bbf5c1585f596b2a9bb5b67e70696a66f07ac645acbd9b9451f33c4beda

SHA512
e79a7dbb4474768741dabb5c41885d2f684e6c9c3244657f017c534754ecac9a5001e251282d087d503cb598aea836330e8b12612cd6317f8c20dc9318e70a5f

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Interop.LavasoftTcpServiceLib.dll

Filesize
55KB

MD5
d050df18bd18bf81abc997ff64e04fa0

SHA1
90c106a3e2a58c2e6e4ab3e0b14e32520a0e34d8

SHA256
7b5f7bbf5c1585f596b2a9bb5b67e70696a66f07ac645acbd9b9451f33c4beda

SHA512
e79a7dbb4474768741dabb5c41885d2f684e6c9c3244657f017c534754ecac9a5001e251282d087d503cb598aea836330e8b12612cd6317f8c20dc9318e70a5f

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Interop.LavasoftTcpServiceLib.dll

Filesize
55KB

MD5
d050df18bd18bf81abc997ff64e04fa0

SHA1
90c106a3e2a58c2e6e4ab3e0b14e32520a0e34d8

SHA256
7b5f7bbf5c1585f596b2a9bb5b67e70696a66f07ac645acbd9b9451f33c4beda

SHA512
e79a7dbb4474768741dabb5c41885d2f684e6c9c3244657f017c534754ecac9a5001e251282d087d503cb598aea836330e8b12612cd6317f8c20dc9318e70a5f

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Ionic.Zip.dll

Filesize
462KB

MD5
3d8bf84f10ef47ee50c437c255bc3958

SHA1
5aa8f0319dcc0d1ce6fb4577fedca2d8a66610f2

SHA256
8006bfce39927b96a0642d51bba0cf7a449bb2b09c62f5f5cb1618e748468356

SHA512
db73c6fe81c57b71c2587baaaed00a092f4476f2ee8268a83da95f4e3ac5755e801d18b137ebadf118e1b6b89b660dadcbd793647c24e432c0c9a1df40fbd677

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Ionic.Zip.dll

Filesize
462KB

MD5
3d8bf84f10ef47ee50c437c255bc3958

SHA1
5aa8f0319dcc0d1ce6fb4577fedca2d8a66610f2

SHA256
8006bfce39927b96a0642d51bba0cf7a449bb2b09c62f5f5cb1618e748468356

SHA512
db73c6fe81c57b71c2587baaaed00a092f4476f2ee8268a83da95f4e3ac5755e801d18b137ebadf118e1b6b89b660dadcbd793647c24e432c0c9a1df40fbd677

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Ionic.Zip.dll

Filesize
462KB

MD5
3d8bf84f10ef47ee50c437c255bc3958

SHA1
5aa8f0319dcc0d1ce6fb4577fedca2d8a66610f2

SHA256
8006bfce39927b96a0642d51bba0cf7a449bb2b09c62f5f5cb1618e748468356

SHA512
db73c6fe81c57b71c2587baaaed00a092f4476f2ee8268a83da95f4e3ac5755e801d18b137ebadf118e1b6b89b660dadcbd793647c24e432c0c9a1df40fbd677

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.AppCore.dll

Filesize
199KB

MD5
719abfcdfe4a420ed8db4b1f407b27c0

SHA1
d8b5b8b670e10a00c3b2b21d147568b6c4a68edd

SHA256
4fd95a547d9604810e3ec80d63a564492a1a2d050f985bc228a191e3fdf5631c

SHA512
b970be97e23a5f97d70d9ae87512a596e0bec22ec6e76e8198318ec0c8a2b36cfa9064ed6e7bf514ab44d6dfde07a0c37c67167c54bfebded1ecb3b94d9ce7e6

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.AppCore.dll

Filesize
199KB

MD5
719abfcdfe4a420ed8db4b1f407b27c0

SHA1
d8b5b8b670e10a00c3b2b21d147568b6c4a68edd

SHA256
4fd95a547d9604810e3ec80d63a564492a1a2d050f985bc228a191e3fdf5631c

SHA512
b970be97e23a5f97d70d9ae87512a596e0bec22ec6e76e8198318ec0c8a2b36cfa9064ed6e7bf514ab44d6dfde07a0c37c67167c54bfebded1ecb3b94d9ce7e6

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.AppCore.dll

Filesize
199KB

MD5
719abfcdfe4a420ed8db4b1f407b27c0

SHA1
d8b5b8b670e10a00c3b2b21d147568b6c4a68edd

SHA256
4fd95a547d9604810e3ec80d63a564492a1a2d050f985bc228a191e3fdf5631c

SHA512
b970be97e23a5f97d70d9ae87512a596e0bec22ec6e76e8198318ec0c8a2b36cfa9064ed6e7bf514ab44d6dfde07a0c37c67167c54bfebded1ecb3b94d9ce7e6

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.Events.dll

Filesize
131KB

MD5
c86dfe367017deba7a77a6724d0cf387

SHA1
c97b810c9755275e45128299a422040544f73422

SHA256
bc57b7acaed475fa37a63d0d9167ddf55331a228905e18027c0cbee30eae4417

SHA512
438fe3cd085b0b05e809b85a43e0a721a9ba7790d7fc464b9aa0184d19eb1224277f3dfb95f1aaf104d28e79d07faf12155d4fb80c02476c0cdcfe9015dcb205

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.Events.dll

Filesize
131KB

MD5
c86dfe367017deba7a77a6724d0cf387

SHA1
c97b810c9755275e45128299a422040544f73422

SHA256
bc57b7acaed475fa37a63d0d9167ddf55331a228905e18027c0cbee30eae4417

SHA512
438fe3cd085b0b05e809b85a43e0a721a9ba7790d7fc464b9aa0184d19eb1224277f3dfb95f1aaf104d28e79d07faf12155d4fb80c02476c0cdcfe9015dcb205

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.Events.dll

Filesize
131KB

MD5
c86dfe367017deba7a77a6724d0cf387

SHA1
c97b810c9755275e45128299a422040544f73422

SHA256
bc57b7acaed475fa37a63d0d9167ddf55331a228905e18027c0cbee30eae4417

SHA512
438fe3cd085b0b05e809b85a43e0a721a9ba7790d7fc464b9aa0184d19eb1224277f3dfb95f1aaf104d28e79d07faf12155d4fb80c02476c0cdcfe9015dcb205

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Business.dll

Filesize
528KB

MD5
06057dd6faec821061f244d51c3269c0

SHA1
676aebe7f974d88dc034bf8741688a6ef4653687

SHA256
7d73db43d134121301d16fccd6c0d9d3a56782b275ac38d3cf039340f1f7d209

SHA512
ff931525b9264aaee4b67122c1f11b891e8b5a92c8e53a5df1cb63b889df581c465a747521723e1c18aca5109f101799edc1247277c1b06086739c8bfeb7244d

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Business.dll

Filesize
528KB

MD5
06057dd6faec821061f244d51c3269c0

SHA1
676aebe7f974d88dc034bf8741688a6ef4653687

SHA256
7d73db43d134121301d16fccd6c0d9d3a56782b275ac38d3cf039340f1f7d209

SHA512
ff931525b9264aaee4b67122c1f11b891e8b5a92c8e53a5df1cb63b889df581c465a747521723e1c18aca5109f101799edc1247277c1b06086739c8bfeb7244d

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Business.dll

Filesize
528KB

MD5
06057dd6faec821061f244d51c3269c0

SHA1
676aebe7f974d88dc034bf8741688a6ef4653687

SHA256
7d73db43d134121301d16fccd6c0d9d3a56782b275ac38d3cf039340f1f7d209

SHA512
ff931525b9264aaee4b67122c1f11b891e8b5a92c8e53a5df1cb63b889df581c465a747521723e1c18aca5109f101799edc1247277c1b06086739c8bfeb7244d

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.Utils.dll

Filesize
104KB

MD5
ec4b2852e620fb8977b4ca209d7787d1

SHA1
b59eda2724522814e2f5d1dba675c3c1efaa9579

SHA256
82ef634b9216b2a72248f3dfe22c7f26ee119021d06ce71cdee4193e940a2956

SHA512
f2a233407bb1752fb9d6f0ff99f6b21fe514c29128302b34db5dfa28b00b429d23e0f5dba6226298b655ef2194861baa05f349f00e4636934ef2d07fd57ffa73

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.Utils.dll

Filesize
104KB

MD5
ec4b2852e620fb8977b4ca209d7787d1

SHA1
b59eda2724522814e2f5d1dba675c3c1efaa9579

SHA256
82ef634b9216b2a72248f3dfe22c7f26ee119021d06ce71cdee4193e940a2956

SHA512
f2a233407bb1752fb9d6f0ff99f6b21fe514c29128302b34db5dfa28b00b429d23e0f5dba6226298b655ef2194861baa05f349f00e4636934ef2d07fd57ffa73

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Lavasoft.Utils.dll

Filesize
104KB

MD5
ec4b2852e620fb8977b4ca209d7787d1

SHA1
b59eda2724522814e2f5d1dba675c3c1efaa9579

SHA256
82ef634b9216b2a72248f3dfe22c7f26ee119021d06ce71cdee4193e940a2956

SHA512
f2a233407bb1752fb9d6f0ff99f6b21fe514c29128302b34db5dfa28b00b429d23e0f5dba6226298b655ef2194861baa05f349f00e4636934ef2d07fd57ffa73

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Newtonsoft.Json.dll

Filesize
426KB

MD5
8646baeed20310f7b687789e58e183e2

SHA1
3fd09e9f654331f031e88fbe61d99a42dd10c1d7

SHA256
193c95270430347cd2c0677cbff40e5c812e0b49f7fe539b8b37b9427079986c

SHA512
537bb871c727d7345a47016b0628b4628b3f0414a1c4002d9f7ab3165751c2185143c565358a659ccf522b7917929fbbbfab03d488833b70d1bc14ef1b3c6f2b

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Newtonsoft.Json.dll

Filesize
426KB

MD5
8646baeed20310f7b687789e58e183e2

SHA1
3fd09e9f654331f031e88fbe61d99a42dd10c1d7

SHA256
193c95270430347cd2c0677cbff40e5c812e0b49f7fe539b8b37b9427079986c

SHA512
537bb871c727d7345a47016b0628b4628b3f0414a1c4002d9f7ab3165751c2185143c565358a659ccf522b7917929fbbbfab03d488833b70d1bc14ef1b3c6f2b

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\Newtonsoft.Json.dll

Filesize
426KB

MD5
8646baeed20310f7b687789e58e183e2

SHA1
3fd09e9f654331f031e88fbe61d99a42dd10c1d7

SHA256
193c95270430347cd2c0677cbff40e5c812e0b49f7fe539b8b37b9427079986c

SHA512
537bb871c727d7345a47016b0628b4628b3f0414a1c4002d9f7ab3165751c2185143c565358a659ccf522b7917929fbbbfab03d488833b70d1bc14ef1b3c6f2b

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe

Filesize
9.2MB

MD5
7bb65bb24e9a4a04e8d3423d12cf4665

SHA1
29a28ec509fd7e46eead9730d910bc9261babd1e

SHA256
263d145e44bbef5f1a7b33d5d22ea33a941ef339a567d853e257e5b07540049e

SHA512
893a9538efc74bf9c2f55c537abc6a227e02a992d42321d29e81b45bd7394cb1b4729371dbc1536fa8e75442b4f48cfdce1b09af829c8a381e848527f52aa01e

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe

Filesize
9.2MB

MD5
7bb65bb24e9a4a04e8d3423d12cf4665

SHA1
29a28ec509fd7e46eead9730d910bc9261babd1e

SHA256
263d145e44bbef5f1a7b33d5d22ea33a941ef339a567d853e257e5b07540049e

SHA512
893a9538efc74bf9c2f55c537abc6a227e02a992d42321d29e81b45bd7394cb1b4729371dbc1536fa8e75442b4f48cfdce1b09af829c8a381e848527f52aa01e

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\WebCompanion.exe

Filesize
9.2MB

MD5
7bb65bb24e9a4a04e8d3423d12cf4665

SHA1
29a28ec509fd7e46eead9730d910bc9261babd1e

SHA256
263d145e44bbef5f1a7b33d5d22ea33a941ef339a567d853e257e5b07540049e

SHA512
893a9538efc74bf9c2f55c537abc6a227e02a992d42321d29e81b45bd7394cb1b4729371dbc1536fa8e75442b4f48cfdce1b09af829c8a381e848527f52aa01e

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\log4net.dll

Filesize
315KB

MD5
1d468bb4ca5c3664f208dea11633d570

SHA1
2ea73e477abd6ae06fde8aebd1bd72ebd569fb2b

SHA256
73c4b4c46095f46aa422f0caf810bb053704c3ca6cc938a8c74b8db2ab1e5318

SHA512
7a7b8f34a4797c02bed552cce89db5a02a4952355dd45be4ac4bab6a8f283a1c7036f343516a1778243a978745537d23e3e382c9dc9e496b79cf909aefd5ba7e

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\log4net.dll

Filesize
315KB

MD5
1d468bb4ca5c3664f208dea11633d570

SHA1
2ea73e477abd6ae06fde8aebd1bd72ebd569fb2b

SHA256
73c4b4c46095f46aa422f0caf810bb053704c3ca6cc938a8c74b8db2ab1e5318

SHA512
7a7b8f34a4797c02bed552cce89db5a02a4952355dd45be4ac4bab6a8f283a1c7036f343516a1778243a978745537d23e3e382c9dc9e496b79cf909aefd5ba7e

Download Submit
\Users\Admin\AppData\Roaming\Lavasoft\Web Companion\Application\log4net.dll

Filesize
315KB

MD5
1d468bb4ca5c3664f208dea11633d570

SHA1
2ea73e477abd6ae06fde8aebd1bd72ebd569fb2b

SHA256
73c4b4c46095f46aa422f0caf810bb053704c3ca6cc938a8c74b8db2ab1e5318

SHA512
7a7b8f34a4797c02bed552cce89db5a02a4952355dd45be4ac4bab6a8f283a1c7036f343516a1778243a978745537d23e3e382c9dc9e496b79cf909aefd5ba7e

Download Submit
memory/2120-3641-0x0000000074210000-0x00000000747BB000-memory.dmp

Filesize
5.7MB

Download
memory/2120-6797-0x0000000000260000-0x00000000002A0000-memory.dmp

Filesize
256KB

Download
memory/2120-6048-0x0000000000260000-0x00000000002A0000-memory.dmp

Filesize
256KB

Download
memory/2120-6517-0x0000000000260000-0x00000000002A0000-memory.dmp

Filesize
256KB

Download
memory/2120-3642-0x0000000000260000-0x00000000002A0000-memory.dmp

Filesize
256KB

Download
memory/2120-5162-0x0000000074210000-0x00000000747BB000-memory.dmp

Filesize
5.7MB

Download
memory/2120-5163-0x0000000000260000-0x00000000002A0000-memory.dmp

Filesize
256KB

Download
memory/2120-6530-0x0000000000260000-0x00000000002A0000-memory.dmp

Filesize
256KB

Download
memory/2120-6837-0x0000000000260000-0x00000000002A0000-memory.dmp

Filesize
256KB

Download
memory/2120-6836-0x00000000661C0000-0x00000000661E2000-memory.dmp

Filesize
136KB

Download
memory/2120-6718-0x000000000B370000-0x000000000B382000-memory.dmp

Filesize
72KB

Download
memory/2164-3212-0x00000000004B0000-0x00000000004F0000-memory.dmp

Filesize
256KB

Download
memory/2268-506-0x00000000004C0000-0x0000000000500000-memory.dmp

Filesize
256KB

Download
memory/2268-3736-0x00000000004C0000-0x0000000000500000-memory.dmp

Filesize
256KB

Download
memory/2268-497-0x0000000074210000-0x00000000747BB000-memory.dmp

Filesize
5.7MB

Download
memory/2268-37-0x00000000004C0000-0x0000000000500000-memory.dmp

Filesize
256KB

Download
memory/2268-36-0x0000000074210000-0x00000000747BB000-memory.dmp

Filesize
5.7MB

Download
memory/2268-34-0x0000000074210000-0x00000000747BB000-memory.dmp

Filesize
5.7MB

Download
memory/2268-496-0x0000000074210000-0x00000000747BB000-memory.dmp

Filesize
5.7MB

Download
memory/2268-494-0x00000000004C0000-0x0000000000500000-memory.dmp

Filesize
256KB

Download
memory/2268-740-0x00000000004C0000-0x0000000000500000-memory.dmp

Filesize
256KB

Download
memory/2268-495-0x00000000004C0000-0x0000000000500000-memory.dmp

Filesize
256KB

Download
memory/2268-746-0x00000000004C0000-0x0000000000500000-memory.dmp

Filesize
256KB

Download
memory/2880-748-0x0000000002B60000-0x0000000002BA0000-memory.dmp

Filesize
256KB

Download
memory/2880-3640-0x000000006BFA0000-0x000000006C68E000-memory.dmp

Filesize
6.9MB

Download
memory/2880-3639-0x0000000074210000-0x00000000747BB000-memory.dmp

Filesize
5.7MB

Download
memory/2880-3638-0x00000000661C0000-0x00000000661E2000-memory.dmp

Filesize
136KB

Download
memory/2880-3551-0x00000000661C0000-0x00000000661E2000-memory.dmp

Filesize
136KB

Download
memory/2880-3202-0x0000000002B60000-0x0000000002BA0000-memory.dmp

Filesize
256KB

Download
memory/2880-3184-0x0000000008B40000-0x0000000008B52000-memory.dmp

Filesize
72KB

Download
memory/2880-3185-0x000000006BFA0000-0x000000006C68E000-memory.dmp

Filesize
6.9MB

Download
memory/2880-1754-0x0000000074210000-0x00000000747BB000-memory.dmp

Filesize
5.7MB

Download
memory/2880-1656-0x0000000074210000-0x00000000747BB000-memory.dmp

Filesize
5.7MB

Download
memory/2880-1655-0x0000000002B60000-0x0000000002BA0000-memory.dmp

Filesize
256KB

Download
memory/2880-749-0x0000000074210000-0x00000000747BB000-memory.dmp

Filesize
5.7MB

Download