"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://google.com

Signatures

Creates new service(s)

persistence execution

Downloads MZ/PE file

Drops file in Drivers directory

Description	Indicator	Process	Target
File created	C:\Windows\system32\drivers\protected_elam.sys	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\system32\drivers\protected_elam.sys	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\system32\drivers\protected_elam.sys	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Windows\system32\drivers\webshieldfilter.sys	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Modifies AppInit DLL entries

persistence

Possible privilege escalation attempt

exploit

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\SysWOW64\icacls.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\takeown.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\icacls.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\takeown.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\icacls.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\takeown.exe	N/A

Sets file execution options in registry

persistence

Description	Indicator	Process	Target
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MicrosoftEdgeUpdate.exe	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

ACProtect 1.3x - 1.4x DLL software

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A

Drops startup file

Description	Indicator	Process	Target
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\gadiuispsal.lnk	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Executes dropped EXE

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SAVAPI\apc_random_id_generator.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe	N/A

Loads dropped DLL

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Modifies file permissions

discovery

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\SysWOW64\takeown.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\icacls.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\takeown.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\icacls.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\takeown.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\icacls.exe	N/A

Modifies system executable filetype association

persistence

Description	Indicator	Process	Target
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shell\open\command\ = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\batfile\shell\open\command\ = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\comfile\shell\open\command\ = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Reads user/profile data of web browsers

spyware stealer

Registers COM server for autorun

persistence

Description	Indicator	Process	Target
Key created	\REGISTRY\USER\S-1-5-21-1230210488-3096403634-4129516247-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\LocalServer32	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-1230210488-3096403634-4129516247-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\LocalServer32\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" -ToastActivated"	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A

UPX packed file

upx

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A

Adds Run key to start application

persistence

Description	Indicator	Process	Target
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-1230210488-3096403634-4129516247-1000\Software\Microsoft\Windows\CurrentVersion\Run\	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Checks for any installed AV software in registry

Description	Indicator	Process	Target
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Antivirus\Overwrite_Keys\HKEY_USERS\S-1-5-21-1230210488-3096403634-4129516247-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Antivirus	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\userinit	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\Software\Wow64_32Node\Microsoft\Windows NT\CurrentVersion\Winlogon\userinit	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Antivirus\Overwrite_Keys\HKEY_USERS\S-1-5-21-1230210488-3096403634-4129516247-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\userinit	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\shell	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key opened	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Avira\Antivirus\Overwrite_Keys\HKEY_LOCAL_MACHINE\Software\Wow64_32Node\Microsoft\Windows NT\CurrentVersion\Winlogon\shell	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Checks installed software on the system

discovery

Drops file in System32 directory

Description	Indicator	Process	Target
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SecurityService\SecurityService_Url_wqsxzqrojlfbwj3xmqn5vi2gsla5q5aq\b04clpxz.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\TotalAV\vdf_1717024787.zip	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\System32\Tasks\Mysa	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\29c5e6b7-d398-4610-94d2-810242396741\Logs.db-journal	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\29c5e6b7-d398-4610-94d2-810242396741\Logs.db	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DA3B6E45325D5FFF28CF6BAD6065C907_72F8BE6966E415D8C7AFC6FE31E2A14D	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_56DB209C155B5A05FCBF555DF7E6D1BB	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\System32\Tasks\Web\Host	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\System32\Tasks\win defender run	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DA3B6E45325D5FFF28CF6BAD6065C907_72F8BE6966E415D8C7AFC6FE31E2A14D	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3E3E9689537B6B136ECF210088069D55_EF6C9357BB54DDB629FD2D79F1594F95	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_56DB209C155B5A05FCBF555DF7E6D1BB	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\29c5e6b7-d398-4610-94d2-810242396741\Logs.db	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8890A77645B73478F5B1DED18ACBF795_C090A8C88B266C6FF99A97210E92B44D	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8890A77645B73478F5B1DED18ACBF795_C090A8C88B266C6FF99A97210E92B44D	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\System32\Tasks\sync	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SecurityService\SecurityService_Url_wqsxzqrojlfbwj3xmqn5vi2gsla5q5aq\b04clpxz.newcfg	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\TotalAV\vdf_1717024787.zip	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\System32\Tasks\System Core	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\System32\Tasks\ok	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\System32\Tasks\oka	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\29c5e6b7-d398-4610-94d2-810242396741\Logs.db-journal	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3E3E9689537B6B136ECF210088069D55_EF6C9357BB54DDB629FD2D79F1594F95	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Drops file in Program Files directory

Description	Indicator	Process	Target
File created	C:\Program Files (x86)\TotalAV\AviraLib.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\ProtocolFilters.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\System.Configuration.ConfigurationManager.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\UIAutomationProvider.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-yjkntsiv.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00211.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\api-ms-win-core-processthreads-l1-1-1.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\hostfxr.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\aepack.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\apcfile.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00108.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aeml.dll.gz	C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SQLite.Interop.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\Trinet.Core.IO.Ntfs.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00186.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aebb.dll	C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe	N/A
File created	C:\Program Files (x86)\TotalAV\GUI.Win.runtimeconfig.json	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.Analytics.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\System.Diagnostics.DiagnosticSource.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00105.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00193.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-4xx2lj4z.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\DirectWriteForwarder.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00101.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-3oiiottl.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SecurityService.runtimeconfig.json	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\System.Text.Encoding.Extensions.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\Manifest\edge-manifest.json	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\savapi_pretest.bat	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.inf	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00064.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00126.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\idx\xvdf.info.gz	C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe	N/A
File created	C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Csp.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\System.Text.Encoding.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\Utilizr.Native.Win.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-wb10c4ci.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00205.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00206.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00138.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00139.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-v5p12sma.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-wjjat4mp.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.Common.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\savapi.exe	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-s5nnaxud.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-tqdg2nya.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SecurityProductInformation.ini	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\System.Threading.Channels.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\ovpn\libpkcs11-helper-1.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aeoffice_mv.dat	C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe	N/A
File created	C:\Program Files (x86)\TotalAV\System.Data.SqlClient.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\wpfgfx_cor3.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aepack.dll.gz	C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe	N/A
File created	C:\Program Files (x86)\TotalAV\System.Windows.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-img2guc3.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\idx\savapi4lib-win32-en.info.gz	C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00116.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\DotNetZip-rcqic3fo.tmp	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\winrem.lkey	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\nfapi.dll	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
File opened for modification	C:\Program Files (x86)\TotalAV\SAVAPI\xbv00122.vdf	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Program Files (x86)\TotalAV\SAVAPI\aescript.dll	C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe	N/A

Drops file in Windows directory

Description	Indicator	Process	Target
File opened for modification	C:\Windows\Tasks\Mysa	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\Tasks\ok	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\debug\lsmose.exe	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Windows\ELAMBKUP\protected_elam.sys	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\Tasks\System Core	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\Tasks\win defender run	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\Help\lsmosee.exe	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\Help\lsmose.exe	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\debug\lsmosee.exe	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File created	C:\Windows\ELAMBKUP\protected_elam.sys	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\Tasks\Web\Host	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
File opened for modification	C:\Windows\Tasks\oka	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Launches sc.exe

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\SysWOW64\sc.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\sc.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\sc.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\sc.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\sc.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\sc.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\sc.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\sc.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\sc.exe	N/A

Enumerates physical storage devices

Program crash

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\SysWOW64\WerFault.exe	N/A

Checks SCSI registry key(s)

Description	Indicator	Process	Target
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters	C:\Windows\system32\vssvc.exe	N/A
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters	C:\Windows\system32\vssvc.exe	N/A
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr	C:\Windows\system32\vssvc.exe	N/A
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	C:\Windows\system32\vssvc.exe	N/A
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_DADY&Prod_HARDDISK\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	C:\Windows\system32\vssvc.exe	N/A

Enumerates system info in registry

Description	Indicator	Process	Target
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A

Kills process with taskkill

evasion

Description	Indicator	Process	Target
N/A	N/A	C:\Windows\SysWOW64\taskkill.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\taskkill.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\taskkill.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\taskkill.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\taskkill.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\taskkill.exe	N/A
N/A	N/A	C:\Windows\SysWOW64\taskkill.exe	N/A

Modifies data under HKEY_USERS

Description	Indicator	Process	Target
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\My	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133614980730513982"	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPublisher\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\Certificates	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPublisher	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Modifies registry class

Description	Indicator	Process	Target
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\batfile\shell\open\command\ = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\htafile\Shell\Open\Command\ = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\piffile\shell\open\command\ = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-1230210488-3096403634-4129516247-1000_Classes\WOW6432Node\CLSID	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\ = "Scan With TotalAV"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\SeparatorAfter	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-1230210488-3096403634-4129516247-1000_Classes\WOW6432Node	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\Icon = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\""	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\SeparatorBefore	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\ = "Scan With TotalAV"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\command\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" --custom-scan-context --custom-scan-archives --custom-scan-folders=\"%1\" --hide"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\MultiSelectModel = "Single"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\command\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" --custom-scan-context --custom-scan-archives --custom-scan-folders=\"%1\" --hide"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\Icon = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\""	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\command	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\USER\S-1-5-21-1230210488-3096403634-4129516247-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\LocalServer32\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" -ToastActivated"	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\IsolatedCommand = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\Icon = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\""	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\SeparatorAfter	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\command	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\{E4BA4655-58DA-474C-969A-6C45ED9B3AC3}	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\shell\open	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\shell\open\command	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\Position = "Top"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\ = "URL:Total AV Protocol"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\URL Protocol	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\DefaultIcon\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\""	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\shell	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\command	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\SeparatorBefore	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-1230210488-3096403634-4129516247-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\LocalServer32	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\{E4BA4655-58DA-474C-969A-6C45ED9B3AC3}\telemetry = "785c723d992845dfb3e62146f62c1f2c58ed5fe6"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\command\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" --custom-scan-context --custom-scan-archives --custom-scan-files=\"%1\" --hide"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\exefile\shell\open\command\ = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\MultiSelectModel = "Single"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\SeparatorAfter	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\SeparatorBefore	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\ = "Scan With TotalAV"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\DefaultIcon	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\comfile\shell\open\command\ = "\"%1\" %*"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1230210488-3096403634-4129516247-1000\{A159C031-3664-445F-9EF1-A7690D37EFCD}	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
Key created	\REGISTRY\USER\S-1-5-21-1230210488-3096403634-4129516247-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\shell\open\command\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" \"%1\""	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\MultiSelectModel = "Single"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\Position = "Top"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

NTFS ADS

Description	Indicator	Process	Target
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 887611.crdownload:SmartScreen	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
File opened for modification	C:\Users\Admin\Downloads\TotalAV_Setup.exe:Zone.Identifier	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
File opened for modification	C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe:Zone.Identifier	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Runs net.exe

Suspicious behavior: EnumeratesProcesses

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Suspicious behavior: LoadsDriver

Description	Indicator	Process	Target
N/A	N/A	N/A	N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A

Suspicious use of AdjustPrivilegeToken

Description	Indicator	Process	Target
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeShutdownPrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeCreatePagefilePrivilege	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
Token: SeIncreaseQuotaPrivilege	N/A	C:\Windows\SysWOW64\Wbem\wmic.exe	N/A
Token: SeSecurityPrivilege	N/A	C:\Windows\SysWOW64\Wbem\wmic.exe	N/A
Token: SeTakeOwnershipPrivilege	N/A	C:\Windows\SysWOW64\Wbem\wmic.exe	N/A
Token: SeLoadDriverPrivilege	N/A	C:\Windows\SysWOW64\Wbem\wmic.exe	N/A
Token: SeSystemProfilePrivilege	N/A	C:\Windows\SysWOW64\Wbem\wmic.exe	N/A
Token: SeSystemtimePrivilege	N/A	C:\Windows\SysWOW64\Wbem\wmic.exe	N/A
Token: SeProfSingleProcessPrivilege	N/A	C:\Windows\SysWOW64\Wbem\wmic.exe	N/A
Token: SeIncBasePriorityPrivilege	N/A	C:\Windows\SysWOW64\Wbem\wmic.exe	N/A

Suspicious use of FindShellTrayWindow

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A

Suspicious use of SendNotifyMessage

Description	Indicator	Process	Target
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files\Google\Chrome\Application\chrome.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A
N/A	N/A	C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe	N/A

Suspicious use of SetWindowsHookEx

Description	Indicator	Process	Target
N/A	N/A	C:\Users\Admin\Downloads\TotalAV_Setup.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
N/A	N/A	C:\Program Files (x86)\TotalAV\TotalAV.exe	N/A
N/A	N/A	C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe	N/A

Suspicious use of WriteProcessMemory

System policy modification

evasion

Description	Indicator	Process	Target
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\shell = "explorer.exe"	C:\Program Files (x86)\TotalAV\SecurityService.exe	N/A

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffcc48bab58,0x7ffcc48bab68,0x7ffcc48bab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1604 --field-trial-handle=1808,i,7781950363034591527,10481185713640999850,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=1808,i,7781950363034591527,10481185713640999850,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2152 --field-trial-handle=1808,i,7781950363034591527,10481185713640999850,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2908 --field-trial-handle=1808,i,7781950363034591527,10481185713640999850,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2912 --field-trial-handle=1808,i,7781950363034591527,10481185713640999850,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=1588 --field-trial-handle=1808,i,7781950363034591527,10481185713640999850,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3988 --field-trial-handle=1808,i,7781950363034591527,10481185713640999850,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3768 --field-trial-handle=1808,i,7781950363034591527,10481185713640999850,131072 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffcc4533cb8,0x7ffcc4533cc8,0x7ffcc4533cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1932 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2544 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4012 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4512 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3676 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5400 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4656 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3556 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3020 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6364 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6944 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5764 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5060 /prefetch:8

C:\Users\Admin\Downloads\TotalAV_Setup.exe

"C:\Users\Admin\Downloads\TotalAV_Setup.exe"

C:\Windows\SysWOW64\Wbem\wmic.exe

wmic.exe path Win32_Process where executablepath="C:\\Program Files (x86)\\TotalAV\\TotalAV.exe" delete

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /f /T /IM "avupdate.exe"

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /f /T /IM "Update.Win.exe"

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /f /T /IM "PasswordExtension.Win.exe"

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Program Files (x86)\TotalAV\SecurityService.exe

"C:\Program Files (x86)\TotalAV\SecurityService.exe" "--install"

C:\Windows\SysWOW64\sc.exe

"sc" create SecurityService start= auto binpath= "\"C:\Program Files (x86)\TotalAV\SecurityService.exe\"" displayname= "PC Security Management Service" obj= LocalSystem password= ""

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 11452 -ip 11452

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 11452 -s 4468

C:\Program Files (x86)\TotalAV\TotalAV.exe

"C:\Program Files (x86)\TotalAV\TotalAV.exe" --installed --installer="C:\Users\Admin\Downloads\TotalAV_Setup.exe"

C:\Program Files (x86)\TotalAV\SecurityService.exe

"C:\Program Files (x86)\TotalAV\SecurityService.exe"

C:\Program Files (x86)\TotalAV\SecurityService.exe

"C:\Program Files (x86)\TotalAV\SecurityService.exe" --run-service --run-service-id=12204

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x10c,0x110,0x114,0xe8,0x118,0x7ffcc48bab58,0x7ffcc48bab68,0x7ffcc48bab78

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1612 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2200 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3068 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3188 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\elevation_service.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3516 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4420 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4424 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4700 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1648 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4868 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4912 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5116 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe" --reenable-autoupdates --system-level

C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe

"C:\Program Files\Google\Chrome\Application\110.0.5481.104\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=110.0.5481.104 --initial-client-data=0x250,0x254,0x258,0x22c,0x25c,0x7ff7b11cae48,0x7ff7b11cae58,0x7ff7b11cae68

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --mojo-platform-channel-handle=1916 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2704 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:2

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=3448 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --mojo-platform-channel-handle=5036 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --mojo-platform-channel-handle=4828 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3448 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --mojo-platform-channel-handle=5088 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --mojo-platform-channel-handle=4224 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --mojo-platform-channel-handle=3280 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --mojo-platform-channel-handle=2836 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --mojo-platform-channel-handle=5148 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --mojo-platform-channel-handle=5364 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --mojo-platform-channel-handle=5008 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --mojo-platform-channel-handle=4348 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --mojo-platform-channel-handle=6096 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --mojo-platform-channel-handle=5844 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4568 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --mojo-platform-channel-handle=4008 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --mojo-platform-channel-handle=5680 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --mojo-platform-channel-handle=5676 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --mojo-platform-channel-handle=6208 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --mojo-platform-channel-handle=5672 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --mojo-platform-channel-handle=6500 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --mojo-platform-channel-handle=6620 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --mojo-platform-channel-handle=6372 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --mojo-platform-channel-handle=7084 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --mojo-platform-channel-handle=7360 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --mojo-platform-channel-handle=7392 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --mojo-platform-channel-handle=7240 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --mojo-platform-channel-handle=8004 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --mojo-platform-channel-handle=8140 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --mojo-platform-channel-handle=8320 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --mojo-platform-channel-handle=8504 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --mojo-platform-channel-handle=8296 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --mojo-platform-channel-handle=8636 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --mojo-platform-channel-handle=8948 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --mojo-platform-channel-handle=8812 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --mojo-platform-channel-handle=8988 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --mojo-platform-channel-handle=9100 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --mojo-platform-channel-handle=9300 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --mojo-platform-channel-handle=9316 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --mojo-platform-channel-handle=9332 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --mojo-platform-channel-handle=9348 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --mojo-platform-channel-handle=9556 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --mojo-platform-channel-handle=9572 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --mojo-platform-channel-handle=10272 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --mojo-platform-channel-handle=10344 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --mojo-platform-channel-handle=10352 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --mojo-platform-channel-handle=10368 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --mojo-platform-channel-handle=10376 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --mojo-platform-channel-handle=10400 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --mojo-platform-channel-handle=10416 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --mojo-platform-channel-handle=10428 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --mojo-platform-channel-handle=10444 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --mojo-platform-channel-handle=10452 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --mojo-platform-channel-handle=10476 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --mojo-platform-channel-handle=11844 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --mojo-platform-channel-handle=9552 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --mojo-platform-channel-handle=5900 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --mojo-platform-channel-handle=12752 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --mojo-platform-channel-handle=4948 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --mojo-platform-channel-handle=6180 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --mojo-platform-channel-handle=7408 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --mojo-platform-channel-handle=11700 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --mojo-platform-channel-handle=11688 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --mojo-platform-channel-handle=4340 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --mojo-platform-channel-handle=5868 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --mojo-platform-channel-handle=4476 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --mojo-platform-channel-handle=6196 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --mojo-platform-channel-handle=5940 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --mojo-platform-channel-handle=6392 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --mojo-platform-channel-handle=8376 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --mojo-platform-channel-handle=8720 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --mojo-platform-channel-handle=11416 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --mojo-platform-channel-handle=5624 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --mojo-platform-channel-handle=7624 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --mojo-platform-channel-handle=11284 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --mojo-platform-channel-handle=8016 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --mojo-platform-channel-handle=12076 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --mojo-platform-channel-handle=6000 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --mojo-platform-channel-handle=4836 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --mojo-platform-channel-handle=6028 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --mojo-platform-channel-handle=8924 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --mojo-platform-channel-handle=6948 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --mojo-platform-channel-handle=4408 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --mojo-platform-channel-handle=10092 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --mojo-platform-channel-handle=12400 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --mojo-platform-channel-handle=9228 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --mojo-platform-channel-handle=12356 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --mojo-platform-channel-handle=6808 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --mojo-platform-channel-handle=10192 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --mojo-platform-channel-handle=8544 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --mojo-platform-channel-handle=12880 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --mojo-platform-channel-handle=10196 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --mojo-platform-channel-handle=7352 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --mojo-platform-channel-handle=11680 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --mojo-platform-channel-handle=5740 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --mojo-platform-channel-handle=8756 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --mojo-platform-channel-handle=8760 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --mojo-platform-channel-handle=6580 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --mojo-platform-channel-handle=6532 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --mojo-platform-channel-handle=8172 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5764 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x00000000000004EC 0x00000000000004F0

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1168 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe

"C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe" --config=avupdate-savapilib-engine.conf --check-product --no-dns-resolve --internet-srvs=https://definition.protected.net --peak-handling-srvs=https://definition.protected.net

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --mojo-platform-channel-handle=3344 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --mojo-platform-channel-handle=7800 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --mojo-platform-channel-handle=3452 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --mojo-platform-channel-handle=4748 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --mojo-platform-channel-handle=3344 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8160 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11704 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5844 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=11932 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8116 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=11956 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe

C:\Program Files (x86)\TotalAV\SAVAPI\apc_random_id_generator.exe

"C:\Program Files (x86)\TotalAV\SAVAPI\apc_random_id_generator.exe"

C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe

"C:\Users\Admin\Downloads\LDPlayer9_ens_com.roblox.client_25567197_ld.exe"

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1600 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files (x86)\TotalAV\Savapi\avupdate.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.totalav.com/video?logintoken=MjljNzdkZmE1OWJhNDA4YWFkYWU5YjM0OWE3MzBjYzBfMTcxNzAyNDc4NEBwcm90ZWN0ZWQtc2lnbnVwLmNvbTo5MDYzMDUyZTE3ZjM1MDI5N2QwNDliZjc5YzQzNTUwMGI4ZDMyNjA0OmJkYWFkMjY4Nzk0OWNjMDc5MTQ3ZTE1NTRmYTUwNDZhMDUxZWU1MmI1ZDJhZDQyYzQxNDZkY2RmYzY3YjAxYmI6ODQwODk4ODY%3D&source=WIN_GUIV2_CREATED_ACCOUNT&action=NONE&sourceGroup=win-app

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x120,0x124,0x128,0xfc,0x12c,0x7ffcc4533cb8,0x7ffcc4533cc8,0x7ffcc4533cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6992 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --mojo-platform-channel-handle=10848 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnplayer.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnmultiplayer.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM dnmultiplayerex.exe /T

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /F /IM bugreport.exe /T

F:\LDPlayer\LDPlayer9\LDPlayer.exe

"F:\LDPlayer\LDPlayer9\\LDPlayer.exe" -silence -downloader -openid=25567197 -language=en -path="F:\LDPlayer\LDPlayer9\"

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\rsStubActivator.exe

"C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\rsStubActivator.exe" -ip:"dui=bd45f3c35859c9224eb29d431a6372dfec000bc8&dit=20240529232524581&is_silent=true&oc=DOT_RAV_Cross_Solo_LDP&p=bf64&a=103&b=&se=true" -i

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe

"C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\saBSI.exe" /affid 91082 PaidDistribution=true CountryCode=GB

C:\Users\Admin\AppData\Local\Temp\fr1ou5y1.exe

"C:\Users\Admin\AppData\Local\Temp\fr1ou5y1.exe" /silent

C:\Users\Admin\AppData\Local\Temp\nscCD7E.tmp\RAVEndPointProtection-installer.exe

"C:\Users\Admin\AppData\Local\Temp\nscCD7E.tmp\RAVEndPointProtection-installer.exe" "C:\Users\Admin\AppData\Local\Temp\fr1ou5y1.exe" /silent

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

"C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe" -i -bn:ReasonLabs -pn:EPP -lpn:rav_antivirus -url:https://update.reasonsecurity.com/v2/live -dt:10

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

"C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe" -pn:EPP -lpn:rav_antivirus -url:https://update.reasonsecurity.com/v2/live -bn:ReasonLabs -dt:10

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\installer.exe

"C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade

C:\Program Files\McAfee\Temp2699845073\installer.exe

"C:\Program Files\McAfee\Temp2699845073\installer.exe" /setOem:Affid=91082 /s /thirdparty /upgrade

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6836 /prefetch:1

C:\Windows\SysWOW64\regsvr32.exe

/s "C:\Program Files\McAfee\WebAdvisor\win32\WSSDep.dll"

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\x64\WSSDep.dll"

C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe

"C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe"

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\win32\DownloadScan.dll"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3500 /prefetch:1

C:\Windows\SysWOW64\regsvr32.exe

/s "C:\Program Files\McAfee\WebAdvisor\win32\DownloadScan.dll"

C:\Windows\SYSTEM32\regsvr32.exe

regsvr32.exe /s "C:\Program Files\McAfee\WebAdvisor\x64\DownloadScan.dll"

C:\Program Files\McAfee\WebAdvisor\UIHost.exe

"C:\Program Files\McAfee\WebAdvisor\UIHost.exe"

F:\LDPlayer\LDPlayer9\dnrepairer.exe

"F:\LDPlayer\LDPlayer9\dnrepairer.exe" listener=1835074

C:\Windows\SysWOW64\net.exe

"net" start cryptsvc

C:\Windows\SysWOW64\net1.exe

C:\Windows\system32\net1 start cryptsvc

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Softpub.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Wintrust.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" Initpki.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"C:\Windows\system32\regsvr32" Initpki.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" dssenh.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" rsaenh.dll /s

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" cryptdlg.dll /s

C:\Windows\SysWOW64\takeown.exe

"takeown" /f "F:\LDPlayer\LDPlayer9\vms" /r /d y

C:\Windows\SysWOW64\icacls.exe

"icacls" "F:\LDPlayer\LDPlayer9\vms" /grant everyone:F /t

C:\Windows\SysWOW64\takeown.exe

"takeown" /f "F:\LDPlayer\LDPlayer9\\system.vmdk"

C:\Windows\SysWOW64\icacls.exe

"icacls" "F:\LDPlayer\LDPlayer9\\system.vmdk" /grant everyone:F /t

C:\Windows\SysWOW64\dism.exe

C:\Windows\system32\dism.exe /Online /English /Get-Features

C:\Users\Admin\AppData\Local\Temp\28DE9BB4-4D6B-406C-9061-63702FC22379\dismhost.exe

C:\Users\Admin\AppData\Local\Temp\28DE9BB4-4D6B-406C-9061-63702FC22379\dismhost.exe {F58D5DA3-3801-4DC7-B404-EB13797D0CE8}

C:\Program Files\McAfee\WebAdvisor\updater.exe

"C:\Program Files\McAfee\WebAdvisor\updater.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Windows\SysWOW64\sc.exe

sc query HvHost

C:\Windows\SysWOW64\sc.exe

sc query vmms

C:\Windows\SysWOW64\sc.exe

sc query vmcompute

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c dir "C:\Program Files (x86)\McAfee Security Scan" 2>nul

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10884 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10792 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\ldplayer9box\Ld9BoxSVC.exe

"C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" /RegServer

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8960 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Windows\SYSTEM32\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\VBoxC.dll" /s

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=7264 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxClient-x86.dll" /s

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10744 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Windows\SYSTEM32\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\VBoxProxyStub.dll" /s

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10768 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Windows\SysWOW64\regsvr32.exe

"regsvr32" "C:\Program Files\ldplayer9box\x86\VBoxProxyStub-x86.dll" /s

C:\Windows\SysWOW64\sc.exe

"C:\Windows\system32\sc" create Ld9BoxSup binPath= "C:\Program Files\ldplayer9box\Ld9BoxSup.sys" type= kernel start= auto

C:\Windows\SysWOW64\sc.exe

"C:\Windows\system32\sc" start Ld9BoxSup

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "Ld9BoxSup" -Direction Inbound -Program 'C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "Ld9BoxNat" -Direction Inbound -Program 'C:\Program Files\ldplayer9box\VBoxNetNAT.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --mojo-platform-channel-handle=9820 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe

"powershell.exe" New-NetFirewallRule -DisplayName "dnplayer" -Direction Inbound -Program 'F:\LDPlayer\LDPlayer9\dnplayer.exe' -RemoteAddress LocalSubnet -Action Allow

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5900 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --mojo-platform-channel-handle=8976 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4236 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=11508 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5788 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=145 --mojo-platform-channel-handle=5808 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=146 --mojo-platform-channel-handle=12596 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

F:\LDPlayer\LDPlayer9\driverconfig.exe

"F:\LDPlayer\LDPlayer9\driverconfig.exe"

C:\Windows\SysWOW64\takeown.exe

"takeown" /f F:\LDPlayer\ldmutiplayer\ /r /d y

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=147 --mojo-platform-channel-handle=9972 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=148 --mojo-platform-channel-handle=12508 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=149 --mojo-platform-channel-handle=4236 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=150 --mojo-platform-channel-handle=5796 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:1

C:\Windows\SysWOW64\icacls.exe

"icacls" F:\LDPlayer\ldmutiplayer\ /grant everyone:F /t

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=10540 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=8832 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=9104 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=12916 --field-trial-handle=1824,i,3934820360104222889,9841173267686237734,131072 /prefetch:8

F:\LDPlayer\LDPlayer9\dnplayer.exe

"F:\LDPlayer\LDPlayer9\\dnplayer.exe" downloadpackage=com.roblox.client|package=com.roblox.client

C:\Program Files\ldplayer9box\Ld9BoxSVC.exe

"C:\Program Files\ldplayer9box\Ld9BoxSVC.exe" -Embedding

C:\Windows\SysWOW64\sc.exe

sc query HvHost

C:\Windows\SysWOW64\sc.exe

sc query vmms

C:\Windows\SysWOW64\sc.exe

sc query vmcompute

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\..\system.vmdk" --uuid 20160302-bbbb-bbbb-54d7-bbbb00000000

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\leidian0\data.vmdk" --uuid 20160302-cccc-cccc-54d7-000000000000

C:\Program Files\ldplayer9box\vbox-img.exe

"C:\Program Files\ldplayer9box\vbox-img.exe" setuuid --filename "F:\LDPlayer\LDPlayer9\vms\leidian0\sdcard.vmdk" --uuid 20160302-dddd-dddd-54d7-000000000000

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe

"C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe" --comment leidian0 --startvm 20160302-aaaa-aaaa-54d7-000000000000 --vrde config

C:\Windows\system32\rundll32.exe

"C:\Windows\system32\rundll32.exe" setupapi.dll,InstallHinfSection DefaultInstall 128 C:\Program Files\ReasonLabs\EPP\x64\rsKernelEngine.inf

C:\Windows\system32\runonce.exe

"C:\Windows\system32\runonce.exe" -r

C:\Windows\System32\grpconv.exe

"C:\Windows\System32\grpconv.exe" -o

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" im C:\Program Files\ReasonLabs\EPP\x64\rsKernelEngineEvents.xml

C:\Windows\SYSTEM32\fltmc.exe

"fltmc.exe" load rsKernelEngine

C:\Windows\system32\wevtutil.exe

"C:\Windows\system32\wevtutil.exe" im C:\Program Files\ReasonLabs\EPP\elam\evntdrv.xml

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

"C:\Program Files\ReasonLabs\EPP\rsWSC.exe" -i -i

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,3716270051630982469,18314482481371617083,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1

Network

Country	Destination	Domain	Proto
US	8.8.8.8:53	google.com	udp
GB	142.250.178.14:80	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:80	encrypted-tbn0.gstatic.com	tcp
GB	142.250.187.196:443	www.google.com	tcp
GB	142.250.187.196:443	www.google.com	udp
US	8.8.8.8:53	8.8.8.8.in-addr.arpa	udp
US	8.8.8.8:53	14.178.250.142.in-addr.arpa	udp
US	8.8.8.8:53	196.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	195.212.58.216.in-addr.arpa	udp
US	8.8.8.8:53	10.200.250.142.in-addr.arpa	udp
US	8.8.8.8:53	234.179.250.142.in-addr.arpa	udp
GB	142.250.200.14:443	apis.google.com	tcp
GB	142.250.187.238:443	ogs.google.com	tcp
GB	216.58.213.3:443	ssl.gstatic.com	tcp
GB	142.250.179.238:443	play.google.com	tcp
GB	142.250.179.238:443	play.google.com	udp
N/A	224.0.0.251:5353		udp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	udp
NL	23.62.61.194:443	www.bing.com	tcp
NL	23.62.61.194:443	www.bing.com	tcp
NL	23.62.61.194:443	www.bing.com	tcp
NL	23.62.61.194:443	www.bing.com	tcp
NL	23.62.61.194:443	www.bing.com	tcp
NL	20.190.160.22:443	login.microsoftonline.com	tcp
US	13.107.5.80:443	services.bingapis.com	tcp
US	104.18.33.89:443	www2.bing.com	tcp
NL	23.62.61.194:443	www.bing.com	tcp
GB	142.250.187.196:80	www.google.com	tcp
GB	142.250.187.196:80	www.google.com	tcp
GB	142.250.187.196:443	www.google.com	tcp
GB	142.250.187.196:443	www.google.com	udp
GB	142.250.187.238:443	ogs.google.com	tcp
GB	142.250.200.14:443	apis.google.com	tcp
GB	216.58.213.3:443	ssl.gstatic.com	tcp
GB	142.250.179.238:443	play.google.com	tcp
GB	142.250.179.238:443	play.google.com	udp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	udp
GB	142.250.187.227:443	id.google.com	tcp
GB	142.250.178.14:443	encrypted-tbn0.gstatic.com	udp
GB	142.250.179.238:443	play.google.com	udp
GB	142.250.187.227:443	id.google.com	udp
US	68.183.21.156:443	www.antivirussoftwareguide.com	tcp
US	8.8.8.8:53	156.21.183.68.in-addr.arpa	udp
US	68.183.21.156:443	www.antivirussoftwareguide.com	tcp
US	68.183.21.156:443	www.antivirussoftwareguide.com	tcp
US	68.183.21.156:443	www.antivirussoftwareguide.com	tcp
US	68.183.21.156:443	www.antivirussoftwareguide.com	tcp
US	68.183.21.156:443	www.antivirussoftwareguide.com	tcp
US	8.8.8.8:53	googleads.g.doubleclick.net	udp
US	8.8.8.8:53	104.201.58.216.in-addr.arpa	udp
GB	142.250.179.226:443	googleads.g.doubleclick.net	tcp
US	8.8.8.8:53	226.179.250.142.in-addr.arpa	udp
US	8.8.8.8:53	url.totalav.com	udp
US	35.224.74.90:80	url.totalav.com	tcp
US	8.8.8.8:53	www.totalav.com	udp
US	34.111.47.92:443	www.totalav.com	tcp
US	8.8.8.8:53	90.74.224.35.in-addr.arpa	udp
US	34.111.47.92:443	www.totalav.com	udp
US	8.8.8.8:53	widget.trustpilot.com	udp
US	35.224.74.90:443	url.totalav.com	tcp
GB	54.192.137.125:443	widget.trustpilot.com	tcp
US	8.8.8.8:53	92.47.111.34.in-addr.arpa	udp
US	8.8.8.8:53	125.137.192.54.in-addr.arpa	udp
US	8.8.8.8:53	61.39.156.108.in-addr.arpa	udp
US	8.8.8.8:53	install.protected.net	udp
NL	185.172.149.104:443	install.protected.net	tcp
US	34.111.47.92:443	www.totalav.com	udp
US	8.8.8.8:53	api.totalav.com	udp
US	34.111.47.92:443	api.totalav.com	tcp
US	20.57.103.21:443	in.appcenter.ms	tcp
US	20.57.103.21:443	in.appcenter.ms	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	8.8.8.8:53	definition.protected.net	udp
NL	185.172.149.104:443	definition.protected.net	tcp
NL	185.172.149.104:443	definition.protected.net	tcp
US	20.57.103.21:443	in.appcenter.ms	tcp
US	20.57.103.21:443	in.appcenter.ms	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	8.8.8.8:53	api.phantom.avira-vpn.com	udp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
DE	52.58.4.66:443	api.phantom.avira-vpn.com	tcp
DE	52.58.4.66:443	api.phantom.avira-vpn.com	tcp
DE	52.58.4.66:443	api.phantom.avira-vpn.com	tcp
DE	52.58.4.66:443	api.phantom.avira-vpn.com	tcp
DE	52.58.4.66:443	api.phantom.avira-vpn.com	tcp
DE	52.58.4.66:443	api.phantom.avira-vpn.com	tcp
DE	52.58.4.66:443	api.phantom.avira-vpn.com	tcp
DE	52.58.4.66:443	api.phantom.avira-vpn.com	tcp
US	8.8.8.8:53	66.4.58.52.in-addr.arpa	udp
NL	185.172.149.104:443	definition.protected.net	tcp
NL	185.172.149.104:443	definition.protected.net	tcp
NL	185.172.149.104:443	definition.protected.net	tcp
US	8.8.8.8:53	www.google.com	udp
GB	142.250.187.196:443	www.google.com	tcp
GB	142.250.187.196:443	www.google.com	udp
US	8.8.8.8:53	195.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	clients2.google.com	udp
GB	142.250.187.238:443	clients2.google.com	tcp
US	8.8.8.8:53	play.google.com	udp
GB	142.250.179.238:443	play.google.com	udp
GB	142.250.179.238:443	play.google.com	tcp
GB	142.250.187.196:443	www.google.com	udp
US	8.8.8.8:53	beacons.gcp.gvt2.com	udp
US	192.178.49.195:443	beacons.gcp.gvt2.com	tcp
US	8.8.8.8:53	195.49.178.192.in-addr.arpa	udp
US	8.8.8.8:53	www.google.com	udp
US	8.8.8.8:53	id.google.com	udp
GB	216.58.212.227:443	id.google.com	tcp
US	8.8.8.8:53	i.ytimg.com	udp
GB	142.250.178.22:443	i.ytimg.com	tcp
GB	142.250.178.22:443	i.ytimg.com	tcp
GB	142.250.178.22:443	i.ytimg.com	tcp
US	8.8.8.8:53	227.212.58.216.in-addr.arpa	udp
US	8.8.8.8:53	22.178.250.142.in-addr.arpa	udp
US	8.8.8.8:53	226.187.250.142.in-addr.arpa	udp
US	8.8.8.8:53	www.youtube.com	udp
GB	172.217.169.78:443	www.youtube.com	udp
GB	142.250.179.238:443	www.youtube.com	udp
GB	142.250.178.22:443	i.ytimg.com	udp
GB	142.250.179.226:443	googleads.g.doubleclick.net	tcp
GB	216.58.213.6:443	static.doubleclick.net	tcp
GB	142.250.179.226:443	googleads.g.doubleclick.net	udp
US	8.8.8.8:53	6.213.58.216.in-addr.arpa	udp
US	8.8.8.8:53	78.169.217.172.in-addr.arpa	udp
US	8.8.8.8:53	74.204.58.216.in-addr.arpa	udp
GB	142.250.179.238:443	www.youtube.com	udp
GB	142.250.179.238:443	www.youtube.com	tcp
GB	216.58.212.227:443	id.google.com	udp
US	172.67.140.75:443	evenso.live	tcp
US	172.67.140.75:443	evenso.live	udp
US	35.190.80.1:443	a.nel.cloudflare.com	tcp
US	35.190.80.1:443	a.nel.cloudflare.com	udp
US	8.8.8.8:53	1.80.190.35.in-addr.arpa	udp
US	8.8.8.8:53	oatlys.sbs	udp
US	104.21.5.133:443	oatlys.sbs	tcp
US	104.21.5.133:443	oatlys.sbs	tcp
US	104.21.5.133:443	oatlys.sbs	udp
US	8.8.8.8:53	133.5.21.104.in-addr.arpa	udp
US	8.8.8.8:53	rozho.shop	udp
US	172.67.159.189:443	rozho.shop	tcp
US	172.67.159.189:443	rozho.shop	tcp
US	8.8.8.8:53	anhot.shop	udp
US	172.67.171.63:443	anhot.shop	tcp
US	8.8.8.8:53	189.159.67.172.in-addr.arpa	udp
US	172.67.171.63:443	anhot.shop	udp
US	8.8.8.8:53	dermtnout.com	udp
US	8.8.8.8:53	zenced.cfd	udp
US	104.21.6.115:443	dermtnout.com	tcp
US	172.67.192.25:443	zenced.cfd	tcp
US	8.8.8.8:53	63.171.67.172.in-addr.arpa	udp
US	104.21.6.115:443	dermtnout.com	udp
US	104.21.6.115:443	dermtnout.com	udp
US	172.67.192.25:443	zenced.cfd	udp
US	8.8.8.8:53	25.192.67.172.in-addr.arpa	udp
GB	142.250.179.238:443	www.youtube.com	udp
GB	142.250.187.196:443	www.google.com	udp
US	192.178.49.195:443	beacons.gcp.gvt2.com	udp
US	8.8.8.8:53	roblox.en.softonic.com	udp
US	151.101.1.91:443	roblox.en.softonic.com	tcp
US	151.101.1.91:443	roblox.en.softonic.com	tcp
US	8.8.8.8:53	google.com	udp
GB	142.250.178.14:443	google.com	tcp
US	8.8.8.8:53	sc.sftcdn.net	udp
US	8.8.8.8:53	images.sftcdn.net	udp
US	8.8.8.8:53	securepubads.g.doubleclick.net	udp
US	8.8.8.8:53	sdk.privacy-center.org	udp
US	8.8.8.8:53	softonic.com	udp
US	151.101.1.91:443	sc.sftcdn.net	tcp
US	151.101.1.91:443	sc.sftcdn.net	tcp
US	151.101.1.91:443	sc.sftcdn.net	tcp
BE	104.68.82.93:443	images.sftcdn.net	tcp
BE	104.68.82.93:443	images.sftcdn.net	tcp
BE	104.68.82.93:443	images.sftcdn.net	tcp
BE	104.68.82.93:443	images.sftcdn.net	tcp
US	8.8.8.8:53	bat.bing.com	udp
GB	142.250.200.34:443	securepubads.g.doubleclick.net	tcp
US	8.8.8.8:53	c.amazon-adsystem.com	udp
US	199.232.213.91:443	softonic.com	tcp
US	199.232.213.91:443	softonic.com	tcp
GB	13.224.222.112:443	sdk.privacy-center.org	tcp
BE	104.68.82.93:443	images.sftcdn.net	tcp
BE	104.68.82.93:443	images.sftcdn.net	tcp
US	151.101.1.91:443	sc.sftcdn.net	udp
US	204.79.197.237:443	bat.bing.com	tcp
GB	172.217.169.42:443	content-autofill.googleapis.com	udp
GB	13.224.223.9:443	c.amazon-adsystem.com	tcp
US	151.101.1.91:443	sc.sftcdn.net	udp
US	8.8.8.8:53	www.adsensecustomsearchads.com	udp
GB	142.250.187.238:443	www.adsensecustomsearchads.com	tcp
US	8.8.8.8:53	91.1.101.151.in-addr.arpa	udp
US	8.8.8.8:53	34.200.250.142.in-addr.arpa	udp
US	8.8.8.8:53	93.82.68.104.in-addr.arpa	udp
US	8.8.8.8:53	91.213.232.199.in-addr.arpa	udp
US	8.8.8.8:53	112.222.224.13.in-addr.arpa	udp
US	8.8.8.8:53	237.197.79.204.in-addr.arpa	udp
US	8.8.8.8:53	42.169.217.172.in-addr.arpa	udp
US	8.8.8.8:53	9.223.224.13.in-addr.arpa	udp
GB	13.224.222.112:443	sdk.privacy-center.org	udp
GB	142.250.200.34:443	securepubads.g.doubleclick.net	udp
GB	18.172.152.36:443	www.datadoghq-browser-agent.com	tcp
US	104.22.75.216:443	btloader.com	tcp
GB	13.224.223.9:443	c.amazon-adsystem.com	tcp
US	8.8.8.8:53	storage.googleapis.com	udp
GB	108.156.39.15:443	config.aps.amazon-adsystem.com	tcp
GB	216.58.213.27:443	storage.googleapis.com	tcp
US	8.8.8.8:53	api.btloader.com	udp
US	8.8.8.8:53	ad-delivery.net	udp
US	8.8.8.8:53	36.152.172.18.in-addr.arpa	udp
US	8.8.8.8:53	216.75.22.104.in-addr.arpa	udp
US	8.8.8.8:53	2.178.250.142.in-addr.arpa	udp
US	8.8.8.8:53	15.39.156.108.in-addr.arpa	udp
US	8.8.8.8:53	27.213.58.216.in-addr.arpa	udp
US	172.67.38.106:443	cdn.id5-sync.com	tcp
US	130.211.23.194:443	api.btloader.com	tcp
US	172.67.69.19:443	ad-delivery.net	tcp
US	172.67.69.19:443	ad-delivery.net	tcp
NL	139.45.197.253:443	notix.io	tcp
US	130.211.23.194:443	api.btloader.com	udp
US	8.8.8.8:53	194.23.211.130.in-addr.arpa	udp
US	8.8.8.8:53	19.69.67.172.in-addr.arpa	udp
US	8.8.8.8:53	6.200.250.142.in-addr.arpa	udp
US	8.8.8.8:53	98.201.58.216.in-addr.arpa	udp
US	8.8.8.8:53	253.197.45.139.in-addr.arpa	udp
US	8.8.8.8:53	api.privacy-center.org	udp
US	8.8.8.8:53	aax.amazon-adsystem.com	udp
US	8.8.8.8:53	id5-sync.com	udp
US	8.8.8.8:53	shb.richaudience.com	udp
US	8.8.8.8:53	ap.lijit.com	udp
US	8.8.8.8:53	hb-api.omnitagjs.com	udp
US	8.8.8.8:53	ad.360yield.com	udp
US	8.8.8.8:53	prebid.media.net	udp
GB	108.138.233.27:443	api.privacy-center.org	tcp
US	8.8.8.8:53	ib.adnxs.com	udp
US	8.8.8.8:53	htlb.casalemedia.com	udp
US	8.8.8.8:53	hbopenbid.pubmatic.com	udp
US	8.8.8.8:53	brightcombid.marphezis.com	udp
GB	18.244.138.116:443	aax.amazon-adsystem.com	tcp
DE	141.95.98.65:443	lb.eu-1-id5-sync.com	tcp
GB	142.250.179.226:443	googleads.g.doubleclick.net	udp
US	8.8.8.8:53	wct.softonic.com	udp
IE	54.77.97.31:443	ap.lijit.com	tcp
DE	157.90.0.38:443	shb.richaudience.com	tcp
DE	157.90.0.38:443	shb.richaudience.com	tcp
DE	157.90.0.38:443	shb.richaudience.com	tcp
US	34.120.63.153:443	prebid.media.net	tcp
FR	185.255.84.151:443	hb-api.omnitagjs.com	tcp
DE	37.252.173.215:443	ib.adnxs.com	tcp
IE	54.74.233.226:443	ad.360yield.com	tcp
US	104.18.36.155:443	htlb.casalemedia.com	tcp
US	178.128.135.204:443	brightcombid.marphezis.com	tcp
GB	185.64.190.77:443	hbopenbid.pubmatic.com	tcp
DE	141.95.98.65:443	lb.eu-1-id5-sync.com	tcp
US	8.8.8.8:53	static.criteo.net	udp
US	104.26.3.63:443	wct.softonic.com	tcp
GB	108.138.233.27:443	api.privacy-center.org	udp
GB	172.217.169.65:443	723cf5799167157bf52f2e7706c2d7dd.safeframe.googlesyndication.com	tcp
DE	162.19.138.83:443	lb.eu-1-id5-sync.com	tcp
US	151.101.1.229:443	cdn.jsdelivr.net	tcp
NL	178.250.1.3:443	static.criteo.net	tcp
GB	142.250.187.238:443	www.adsensecustomsearchads.com	udp
GB	172.217.16.225:443	tpc.googlesyndication.com	tcp
GB	216.58.212.206:443	ampcid.google.com	tcp
US	8.8.8.8:53	analytics.google.com	udp
US	8.8.8.8:53	stats.g.doubleclick.net	udp
US	8.8.8.8:53	gum.criteo.com	udp
BE	64.233.166.154:443	stats.g.doubleclick.net	tcp
US	216.239.38.181:443	analytics.google.com	tcp
US	104.26.3.63:443	wct.softonic.com	tcp
GB	172.217.16.225:443	tpc.googlesyndication.com	udp
NL	178.250.1.11:443	gum.criteo.com	tcp
BE	64.233.166.154:443	stats.g.doubleclick.net	udp
US	8.8.8.8:53	ice.360yield.com	udp
US	8.8.8.8:53	rtb.gumgum.com	udp
IE	54.246.231.153:443	rtb.gumgum.com	tcp
US	8.8.8.8:53	27.233.138.108.in-addr.arpa	udp
US	8.8.8.8:53	116.138.244.18.in-addr.arpa	udp
US	8.8.8.8:53	153.63.120.34.in-addr.arpa	udp
US	8.8.8.8:53	65.98.95.141.in-addr.arpa	udp
US	8.8.8.8:53	31.97.77.54.in-addr.arpa	udp
US	8.8.8.8:53	38.0.90.157.in-addr.arpa	udp
US	8.8.8.8:53	151.84.255.185.in-addr.arpa	udp
US	8.8.8.8:53	77.190.64.185.in-addr.arpa	udp
US	8.8.8.8:53	155.36.18.104.in-addr.arpa	udp
US	8.8.8.8:53	226.233.74.54.in-addr.arpa	udp
US	8.8.8.8:53	215.173.252.37.in-addr.arpa	udp
US	8.8.8.8:53	65.169.217.172.in-addr.arpa	udp
US	8.8.8.8:53	204.135.128.178.in-addr.arpa	udp
US	8.8.8.8:53	63.3.26.104.in-addr.arpa	udp
US	8.8.8.8:53	229.1.101.151.in-addr.arpa	udp
US	8.8.8.8:53	3.1.250.178.in-addr.arpa	udp
US	8.8.8.8:53	14.213.58.216.in-addr.arpa	udp
US	8.8.8.8:53	83.138.19.162.in-addr.arpa	udp
US	8.8.8.8:53	225.16.217.172.in-addr.arpa	udp
US	8.8.8.8:53	206.212.58.216.in-addr.arpa	udp
US	8.8.8.8:53	181.38.239.216.in-addr.arpa	udp
US	8.8.8.8:53	154.166.233.64.in-addr.arpa	udp
US	8.8.8.8:53	11.1.250.178.in-addr.arpa	udp
US	52.223.40.198:443	match.adsrvr.org	tcp
NL	178.250.1.9:443	dis.eu.criteo.com	tcp
GB	142.250.200.34:443	securepubads.g.doubleclick.net	udp
US	8.8.8.8:53	ce.lijit.com	udp
US	8.8.8.8:53	153.231.246.54.in-addr.arpa	udp
US	8.8.8.8:53	9.1.250.178.in-addr.arpa	udp
US	8.8.8.8:53	198.40.223.52.in-addr.arpa	udp
IE	18.203.106.185:443	ce.lijit.com	tcp
US	151.101.2.49:443	rtd-tm.everesttech.net	tcp
NL	35.214.149.91:443	x.bidswitch.net	tcp
US	8.8.8.8:53	49.2.101.151.in-addr.arpa	udp
US	8.8.8.8:53	185.106.203.18.in-addr.arpa	udp
US	8.8.8.8:53	js-sec.indexww.com	udp
BE	23.55.96.24:443	contextual.media.net	tcp
US	8.8.8.8:53	visitor.omnitagjs.com	udp
US	8.8.8.8:53	acdn.adnxs.com	udp
US	8.8.8.8:53	ads.pubmatic.com	udp
US	104.18.38.76:443	js-sec.indexww.com	tcp
DE	157.90.211.246:443	sync.richaudience.com	tcp
FR	2.16.209.5:443	ads.pubmatic.com	tcp
FR	185.255.84.152:443	visitor.omnitagjs.com	tcp
US	151.101.1.108:443	acdn.adnxs.com	tcp
DE	157.90.211.246:443	sync.richaudience.com	tcp
US	8.8.8.8:53	cms.quantserve.com	udp
US	8.8.8.8:53	creativecdn.com	udp
US	8.8.8.8:53	s.ad.smaato.net	udp
US	8.8.8.8:53	cs.krushmedia.com	udp
US	8.8.8.8:53	um.simpli.fi	udp
US	8.8.8.8:53	aax-eu.amazon-adsystem.com	udp
US	8.8.8.8:53	pixel-eu.rubiconproject.com	udp
US	8.8.8.8:53	ssbsync.smartadserver.com	udp
IE	34.248.189.186:443	match.prod.bidr.io	tcp
IE	52.95.125.22:443	aax-eu.amazon-adsystem.com	tcp
US	18.207.58.146:443	aorta.clickagy.com	tcp
IE	34.248.189.186:443	match.prod.bidr.io	tcp
NL	81.17.55.108:443	ssbsync.smartadserver.com	tcp
NL	81.17.55.108:443	ssbsync.smartadserver.com	tcp
NL	35.204.158.49:443	um.simpli.fi	tcp
DE	91.228.74.159:443	cms.quantserve.com	tcp
GB	108.156.39.117:443	s.ad.smaato.net	tcp
US	8.2.110.134:443	cs.krushmedia.com	tcp
NL	185.184.8.90:443	creativecdn.com	tcp
US	8.8.8.8:53	image8.pubmatic.com	udp
US	8.8.8.8:53	sync.srv.stackadapt.com	udp
NL	69.173.156.149:443	pixel-eu.rubiconproject.com	tcp
US	8.8.8.8:53	player.aniview.com	udp
US	8.8.8.8:53	onetag-sys.com	udp
US	8.8.8.8:53	ssc-cms.33across.com	udp
US	8.8.8.8:53	hbx.media.net	udp
US	8.8.8.8:53	pr-bh.ybp.yahoo.com	udp
US	8.8.8.8:53	c21lg-d.media.net	udp
US	8.8.8.8:53	medianet-match.dotomi.com	udp
US	8.8.8.8:53	us-u.openx.net	udp
US	8.8.8.8:53	cm.g.doubleclick.net	udp
US	8.8.8.8:53	cacerts.rapidssl.com	udp
US	8.8.8.8:53	91.149.214.35.in-addr.arpa	udp
US	8.8.8.8:53	24.96.55.23.in-addr.arpa	udp
US	54.204.12.49:443	sync.srv.stackadapt.com	tcp
NL	46.228.174.117:443	sync.1rx.io	tcp
US	8.2.110.134:443	cs.krushmedia.com	tcp
SE	192.229.221.95:80	cacerts.rapidssl.com	tcp
GB	142.250.187.194:443	cm.g.doubleclick.net	tcp
US	52.86.219.200:443	cs-server-s2s.yellowblue.io	tcp
US	34.98.64.218:443	us-u.openx.net	tcp
NL	89.207.16.201:443	medianet-match.dotomi.com	tcp
FR	72.247.164.25:443	c21lg-d.media.net	tcp
BE	104.68.78.171:443	secure-assets.rubiconproject.com	tcp
US	2.17.251.11:443	player.aniview.com	tcp
FR	72.247.164.25:443	c21lg-d.media.net	tcp
IE	54.216.45.174:443	pr-bh.ybp.yahoo.com	tcp
GB	18.164.68.102:443	api-2-0.spot.im	tcp
US	67.202.105.21:443	ssc-cms.33across.com	tcp
DE	51.89.9.252:443	onetag-sys.com	tcp
DE	51.89.9.252:443	onetag-sys.com	tcp
GB	185.64.191.214:443	image8.pubmatic.com	tcp
NL	178.250.1.9:443	dis.criteo.com	tcp
NL	178.250.1.9:443	dis.criteo.com	tcp
NL	185.89.210.212:443	secure.adnxs.com	tcp
NL	185.89.210.212:443	secure.adnxs.com	tcp
US	54.204.12.49:443	sync.srv.stackadapt.com	tcp
US	52.86.219.200:443	cs-server-s2s.yellowblue.io	tcp
US	67.202.105.21:443	ssc-cms.33across.com	tcp
US	2.17.251.11:443	player.aniview.com	tcp
US	34.120.63.153:443	prebid.media.net	udp
US	104.18.36.155:443	dsum-sec.casalemedia.com	udp
US	69.173.151.100:443	pixel-us-east.rubiconproject.com	tcp
US	34.36.216.150:443	pixel-sync.sitescout.com	tcp
NL	208.93.169.131:443	bh.contextweb.com	tcp
IE	52.213.23.140:443	jadserve.postrelease.com	tcp
US	192.132.33.67:443	bttrack.com	tcp
BE	23.55.98.169:443	eus.rubiconproject.com	tcp
US	35.244.174.68:443	id.rlcdn.com	tcp
IE	52.95.125.22:443	aax-eu.amazon-adsystem.com	tcp
NL	154.59.122.79:443	ums.acuityplatform.com	tcp
US	8.8.8.8:53	5.209.16.2.in-addr.arpa	udp
US	8.8.8.8:53	246.211.90.157.in-addr.arpa	udp
US	8.8.8.8:53	22.125.95.52.in-addr.arpa	udp
US	8.8.8.8:53	186.189.248.34.in-addr.arpa	udp
US	8.8.8.8:53	146.58.207.18.in-addr.arpa	udp
US	8.8.8.8:53	108.55.17.81.in-addr.arpa	udp
US	8.8.8.8:53	49.158.204.35.in-addr.arpa	udp
US	8.8.8.8:53	159.74.228.91.in-addr.arpa	udp
US	8.8.8.8:53	117.39.156.108.in-addr.arpa	udp
US	8.8.8.8:53	90.8.184.185.in-addr.arpa	udp
US	8.8.8.8:53	149.156.173.69.in-addr.arpa	udp
US	8.8.8.8:53	117.174.228.46.in-addr.arpa	udp
US	8.8.8.8:53	134.110.2.8.in-addr.arpa	udp
US	8.8.8.8:53	214.191.64.185.in-addr.arpa	udp
US	8.8.8.8:53	218.64.98.34.in-addr.arpa	udp
US	8.8.8.8:53	102.68.164.18.in-addr.arpa	udp
US	8.8.8.8:53	212.210.89.185.in-addr.arpa	udp
US	8.8.8.8:53	201.16.207.89.in-addr.arpa	udp
US	8.8.8.8:53	174.45.216.54.in-addr.arpa	udp
US	8.8.8.8:53	171.78.68.104.in-addr.arpa	udp
US	8.8.8.8:53	252.9.89.51.in-addr.arpa	udp
US	8.8.8.8:53	49.12.204.54.in-addr.arpa	udp
US	8.8.8.8:53	11.251.17.2.in-addr.arpa	udp
US	8.8.8.8:53	25.164.247.72.in-addr.arpa	udp
US	8.8.8.8:53	200.219.86.52.in-addr.arpa	udp
US	8.8.8.8:53	21.105.202.67.in-addr.arpa	udp
US	8.8.8.8:53	150.216.36.34.in-addr.arpa	udp
US	8.8.8.8:53	131.169.93.208.in-addr.arpa	udp
US	8.8.8.8:53	100.151.173.69.in-addr.arpa	udp
US	8.8.8.8:53	140.23.213.52.in-addr.arpa	udp
US	8.8.8.8:53	169.98.55.23.in-addr.arpa	udp
US	8.8.8.8:53	67.33.132.192.in-addr.arpa	udp
US	8.8.8.8:53	194.187.250.142.in-addr.arpa	udp
NL	35.214.149.91:443	x.bidswitch.net	tcp
US	8.8.8.8:53	79.122.59.154.in-addr.arpa	udp
DE	51.89.9.252:443	onetag-sys.com	udp
GB	185.64.190.78:443	image6.pubmatic.com	tcp
US	8.8.8.8:53	s.amazon-adsystem.com	udp
GB	142.250.187.194:443	cm.g.doubleclick.net	udp
US	8.8.8.8:53	csync.loopme.me	udp
US	8.8.8.8:53	casale-match.dotomi.com	udp
US	8.8.8.8:53	a.tribalfusion.com	udp
US	8.8.8.8:53	cdn.indexww.com	udp
US	52.46.130.91:443	s.amazon-adsystem.com	tcp
NL	89.207.16.137:443	casale-match.dotomi.com	tcp
NL	35.214.208.241:443	csync.loopme.me	tcp
US	104.18.25.173:443	a.tribalfusion.com	tcp
US	8.8.8.8:53	cr.frontend.weborama.fr	udp
US	8.8.8.8:53	sync.crwdcntrl.net	udp
US	8.8.8.8:53	mwzeom.zeotap.com	udp
US	8.8.8.8:53	c1.adform.net	udp
US	8.8.8.8:53	ups.analytics.yahoo.com	udp
DE	3.71.149.231:443	ups.analytics.yahoo.com	tcp
US	104.22.50.98:443	mwzeom.zeotap.com	tcp
DK	37.157.5.132:443	c1.adform.net	tcp
IE	63.33.74.9:443	sync.crwdcntrl.net	tcp
US	34.111.129.221:443	cr.frontend.weborama.fr	tcp
US	34.36.216.150:443	pixel-sync.sitescout.com	udp
DK	37.157.5.132:443	c1.adform.net	tcp
US	34.98.64.218:443	u.openx.net	udp
US	8.8.8.8:53	eb2.3lift.com	udp
US	8.8.8.8:53	image2.pubmatic.com	udp
NL	198.47.127.205:443	simage2.pubmatic.com	tcp
NL	198.47.127.205:443	simage2.pubmatic.com	tcp
NL	198.47.127.205:443	simage2.pubmatic.com	tcp
NL	89.149.192.200:443	rtb-csync.smartadserver.com	tcp
GB	185.64.191.210:443	image2.pubmatic.com	tcp
GB	185.64.191.210:443	image2.pubmatic.com	tcp
US	13.248.245.213:443	eb2.3lift.com	tcp
NL	35.214.241.248:443	ads.creative-serving.com	tcp
NL	46.228.164.11:443	ad.turn.com	tcp
NL	89.149.192.200:443	rtb-csync.smartadserver.com	tcp
IE	63.33.74.9:443	sync.crwdcntrl.net	tcp
US	8.8.8.8:53	sync.targeting.unrulymedia.com	udp
US	8.8.8.8:53	s0.2mdn.net	udp
NL	82.145.213.8:443	t.adx.opera.com	tcp
GB	216.58.204.70:443	s0.2mdn.net	tcp
GB	143.204.194.81:443	sync.serverbid.com	tcp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
US	8.8.8.8:53	137.16.207.89.in-addr.arpa	udp
US	8.8.8.8:53	173.25.18.104.in-addr.arpa	udp
US	8.8.8.8:53	241.208.214.35.in-addr.arpa	udp
US	8.8.8.8:53	91.130.46.52.in-addr.arpa	udp
US	8.8.8.8:53	98.50.22.104.in-addr.arpa	udp
US	8.8.8.8:53	231.149.71.3.in-addr.arpa	udp
US	8.8.8.8:53	9.74.33.63.in-addr.arpa	udp
US	8.8.8.8:53	132.5.157.37.in-addr.arpa	udp
US	8.8.8.8:53	221.129.111.34.in-addr.arpa	udp
US	8.8.8.8:53	205.127.47.198.in-addr.arpa	udp
US	8.8.8.8:53	210.191.64.185.in-addr.arpa	udp
US	8.8.8.8:53	200.192.149.89.in-addr.arpa	udp
US	8.8.8.8:53	213.245.248.13.in-addr.arpa	udp
US	8.8.8.8:53	11.164.228.46.in-addr.arpa	udp
US	8.8.8.8:53	8.213.145.82.in-addr.arpa	udp
US	8.8.8.8:53	81.194.204.143.in-addr.arpa	udp
US	8.8.8.8:53	70.204.58.216.in-addr.arpa	udp
BE	23.55.96.24:443	contextual.media.net	udp
IE	18.203.142.104:443	pm.w55c.net	tcp
US	96.46.186.182:443	sync.aniview.com	tcp
NL	35.214.174.141:443	a.sportradarserving.com	tcp
FR	5.196.111.72:443	sync.smartadserver.com	tcp
BE	23.55.98.169:443	eus.rubiconproject.com	tcp
NL	69.173.156.149:443	token.rubiconproject.com	tcp
IE	52.95.125.22:443	aax-eu.amazon-adsystem.com	tcp
US	34.111.113.62:443	pixel.tapad.com	tcp
US	8.8.8.8:53	rtb.openx.net	udp
US	35.227.252.103:443	rtb.openx.net	tcp
US	8.8.8.8:53	rtb.mfadsrvr.com	udp
US	8.8.8.8:53	sync.mathtag.com	udp
US	8.8.8.8:53	ads.stickyadstv.com	udp
US	8.8.8.8:53	pixel.rubiconproject.com	udp
US	8.8.8.8:53	cs.admanmedia.com	udp
US	8.8.8.8:53	ssbsync-global.smartadserver.com	udp
US	8.8.8.8:53	spl.zeotap.com	udp
US	216.200.232.253:443	sync.mathtag.com	tcp
NL	35.214.149.91:443	x.bidswitch.net	tcp
US	80.77.87.162:443	cs.admanmedia.com	tcp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
FR	51.178.195.213:443	ssbsync-global.smartadserver.com	tcp
NL	154.57.158.115:443	ads.stickyadstv.com	tcp
US	8.8.8.8:53	sync.ipredictive.com	udp
US	8.8.8.8:53	match.deepintent.com	udp
US	8.8.8.8:53	b1sync.zemanta.com	udp
DE	18.158.184.198:443	rtb.mfadsrvr.com	tcp
NL	188.42.34.65:443	ads.betweendigital.com	tcp
US	54.157.2.15:443	sync.ipredictive.com	tcp
US	64.202.112.159:443	b1sync.zemanta.com	tcp
US	169.197.150.8:443	match.deepintent.com	tcp
US	8.8.8.8:53	usersync.gumgum.com	udp
IE	34.247.233.198:443	usersync.gumgum.com	tcp
US	8.8.8.8:53	simage4.pubmatic.com	udp
NL	198.47.127.20:443	simage4.pubmatic.com	tcp
NL	35.214.149.91:443	x.bidswitch.net	tcp
US	8.8.8.8:53	dsp.adfarm1.adition.com	udp
US	8.8.8.8:53	p.rfihub.com	udp
US	8.8.8.8:53	ad.mrtnsvr.com	udp
NL	35.214.208.241:443	csync.loopme.me	tcp
US	8.8.8.8:53	d5p.de17a.com	udp
US	8.8.8.8:53	pixel.onaudience.com	udp
US	8.8.8.8:53	uipglob.semasio.net	udp
US	8.8.8.8:53	pubmatic-match.dotomi.com	udp
US	8.8.8.8:53	match.adsby.bidtheatre.com	udp
NL	35.214.241.248:443	ads.creative-serving.com	udp
DE	85.114.159.93:443	dsp.adfarm1.adition.com	tcp
NL	193.0.160.131:443	p.rfihub.com	tcp
NL	89.207.16.140:443	pubmatic-match.dotomi.com	tcp
DK	77.243.51.122:443	uipglob.semasio.net	tcp
NL	134.122.57.34:443	match.adsby.bidtheatre.com	tcp
US	34.102.163.6:443	ad.mrtnsvr.com	tcp
SE	213.155.156.165:443	d5p.de17a.com	tcp
FR	141.94.170.77:443	pixel.onaudience.com	tcp
US	104.18.25.173:443	s.tribalfusion.com	udp
US	8.8.8.8:53	matching.truffle.bid	udp
FR	141.95.171.139:443	green.erne.co	tcp
SI	195.5.165.20:443	core.iprom.net	tcp
US	34.102.163.6:443	ad.mrtnsvr.com	tcp
US	34.102.163.6:443	ad.mrtnsvr.com	tcp
US	35.186.193.173:443	ipac.ctnsnet.com	tcp
IE	54.217.19.5:443	cm.adgrx.com	tcp
DE	23.88.86.2:443	matching.truffle.bid	tcp
SG	35.186.154.107:443	cm-supply-web.gammaplatform.com	tcp
US	34.102.163.6:443	ad.mrtnsvr.com	tcp
SG	35.186.154.107:443	cm-supply-web.gammaplatform.com	tcp
US	35.186.193.173:443	ipac.ctnsnet.com	tcp
IE	54.217.19.5:443	cm.adgrx.com	tcp
DE	23.88.86.2:443	matching.truffle.bid	tcp
US	8.8.8.8:53	103.252.227.35.in-addr.arpa	udp
US	8.8.8.8:53	213.195.178.51.in-addr.arpa	udp
US	8.8.8.8:53	115.158.57.154.in-addr.arpa	udp
US	8.8.8.8:53	198.184.158.18.in-addr.arpa	udp
US	8.8.8.8:53	253.232.200.216.in-addr.arpa	udp
US	8.8.8.8:53	162.87.77.80.in-addr.arpa	udp
US	8.8.8.8:53	65.34.42.188.in-addr.arpa	udp
US	8.8.8.8:53	159.112.202.64.in-addr.arpa	udp
US	8.8.8.8:53	15.2.157.54.in-addr.arpa	udp
US	8.8.8.8:53	198.233.247.34.in-addr.arpa	udp
US	8.8.8.8:53	131.160.0.193.in-addr.arpa	udp
US	8.8.8.8:53	20.127.47.198.in-addr.arpa	udp
US	8.8.8.8:53	6.163.102.34.in-addr.arpa	udp
US	8.8.8.8:53	8.150.197.169.in-addr.arpa	udp
US	8.8.8.8:53	140.16.207.89.in-addr.arpa	udp
US	8.8.8.8:53	pool.admedo.com	udp
BE	35.210.53.219:443	pool.admedo.com	tcp
BE	35.210.53.219:443	pool.admedo.com	udp
NL	193.0.160.131:443	p.rfihub.com	tcp
NL	35.214.174.141:443	a.sportradarserving.com	udp
US	8.8.8.8:53	93.159.114.85.in-addr.arpa	udp
US	8.8.8.8:53	34.57.122.134.in-addr.arpa	udp
US	8.8.8.8:53	77.170.94.141.in-addr.arpa	udp
US	8.8.8.8:53	122.51.243.77.in-addr.arpa	udp
US	8.8.8.8:53	165.156.155.213.in-addr.arpa	udp
IE	18.203.142.104:443	pm.w55c.net	tcp
NL	35.214.149.91:443	x.bidswitch.net	tcp
JP	211.120.53.200:443	tg.socdm.com	tcp
FR	141.94.170.77:443	pixel-eu.onaudience.com	tcp
IE	34.247.233.198:443	usersync.gumgum.com	tcp
IE	34.247.233.198:443	usersync.gumgum.com	tcp
IE	34.247.233.198:443	usersync.gumgum.com	tcp
IE	34.247.233.198:443	usersync.gumgum.com	tcp
IE	34.247.233.198:443	usersync.gumgum.com	tcp
US	47.253.61.56:443	gw-iad-bid.ymmobi.com	tcp
US	8.8.8.8:53	5.19.217.54.in-addr.arpa	udp
US	8.8.8.8:53	219.53.210.35.in-addr.arpa	udp
US	8.8.8.8:53	139.171.95.141.in-addr.arpa	udp
JP	211.120.53.200:443	tg.socdm.com	tcp
US	8.8.8.8:53	dsp.nrich.ai	udp
FR	51.255.68.171:443	dsp.nrich.ai	tcp
US	35.227.252.103:443	rtb.openx.net	udp
US	8.8.8.8:53	56.61.253.47.in-addr.arpa	udp
US	8.8.8.8:53	200.53.120.211.in-addr.arpa	udp
US	8.8.8.8:53	171.68.255.51.in-addr.arpa	udp
US	216.239.38.181:443	analytics.google.com	udp
US	35.190.80.1:443	a.nel.cloudflare.com	udp
US	199.232.213.91:443	softonic.com	udp
GB	163.70.151.21:443	connect.facebook.net	tcp
GB	163.70.151.21:443	connect.facebook.net	udp
US	8.8.8.8:53	21.151.70.163.in-addr.arpa	udp
US	8.8.8.8:53	www.facebook.com	udp
GB	163.70.151.35:443	www.facebook.com	tcp
GB	163.70.151.35:443	www.facebook.com	tcp
US	8.8.8.8:53	35.151.70.163.in-addr.arpa	udp
NL	139.45.197.253:443	notix.io	tcp
NL	185.89.210.212:443	secure.adnxs.com	tcp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
NL	178.250.1.9:443	dis.criteo.com	tcp
IE	34.248.189.186:443	match.prod.bidr.io	tcp
US	54.204.12.49:443	sync.srv.stackadapt.com	tcp
US	35.244.174.68:443	id.rlcdn.com	udp
US	67.202.105.21:443	ssc-cms.33across.com	tcp
US	54.204.12.49:443	sync.srv.stackadapt.com	tcp
DE	141.95.98.65:443	lb.eu-1-id5-sync.com	tcp
NL	89.149.192.200:443	sync.smartadserver.com	tcp
NL	89.149.192.200:443	sync.smartadserver.com	tcp
NL	35.214.208.241:443	csync.loopme.me	tcp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
US	8.8.8.8:53	odr.mookie1.com	udp
US	8.8.8.8:53	inmobi-match.dotomi.com	udp
US	34.160.236.64:443	odr.mookie1.com	tcp
US	34.96.105.8:443	tr.blismedia.com	tcp
NL	89.207.16.204:443	openx2-match.dotomi.com	tcp
GB	163.70.151.35:443	www.facebook.com	udp
US	8.8.8.8:53	204.16.207.89.in-addr.arpa	udp
US	8.8.8.8:53	8.105.96.34.in-addr.arpa	udp
DE	3.127.178.144:443	match.justpremium.com	tcp
US	8.8.8.8:53	leap.ldplayer.gg	udp
US	163.181.154.237:443	leap.ldplayer.gg	tcp
US	8.8.8.8:53	www.ldplayer.net	udp
US	163.181.154.232:443	www.ldplayer.net	tcp
US	8.8.8.8:53	237.154.181.163.in-addr.arpa	udp
US	8.8.8.8:53	144.178.127.3.in-addr.arpa	udp
US	8.8.8.8:53	play-lh.googleusercontent.com	udp
US	8.8.8.8:53	cmp.setupcmp.com	udp
US	8.8.8.8:53	cdn.ldplayer.net	udp
US	172.67.70.36:443	cmp.setupcmp.com	tcp
GB	18.172.153.30:443	cdn.ldplayer.net	tcp
DE	141.95.98.65:443	lb.eu-1-id5-sync.com	tcp
US	8.8.8.8:53	fundingchoicesmessages.google.com	udp
GB	18.172.153.30:443	cdn.ldplayer.net	udp
GB	142.250.178.22:443	play-lh.googleusercontent.com	udp
US	8.8.8.8:53	stpd.cloud	udp
US	104.18.31.49:443	stpd.cloud	tcp
US	8.8.8.8:53	232.154.181.163.in-addr.arpa	udp
US	8.8.8.8:53	49.31.18.104.in-addr.arpa	udp
US	8.8.8.8:53	30.153.172.18.in-addr.arpa	udp
US	8.8.8.8:53	36.70.67.172.in-addr.arpa	udp
US	172.67.70.36:443	cmp.setupcmp.com	tcp
GB	142.250.187.238:443	fundingchoicesmessages.google.com	udp
GB	142.250.200.14:443	apis.google.com	udp
SG	47.236.4.49:443	usersdk.ldmnq.com	tcp
US	8.8.8.8:53	invite.ldplayer.net	udp
US	8.8.8.8:53	api.ldshop.gg	udp
SG	47.236.4.49:443	usersdk.ldmnq.com	tcp
GB	99.86.114.124:443	apien.ldplayer.net	tcp
SG	8.222.229.130:443	api.ldshop.gg	tcp
GB	142.250.187.238:443	fundingchoicesmessages.google.com	udp
SG	47.245.114.192:443	invite.ldplayer.net	tcp
US	8.8.8.8:53	www.googletagservices.com	udp
GB	142.250.179.226:443	googleads.g.doubleclick.net	udp
SG	47.245.114.192:443	invite.ldplayer.net	tcp
SG	8.222.229.130:443	api.ldshop.gg	tcp
US	8.8.8.8:53	www.clarity.ms	udp
US	8.8.8.8:53	hm.baidu.com	udp
US	8.8.8.8:53	124.114.86.99.in-addr.arpa	udp
US	8.8.8.8:53	49.4.236.47.in-addr.arpa	udp
US	8.8.8.8:53	b-code.liadm.com	udp
GB	99.86.114.124:443	apien.ldplayer.net	udp
CN	111.45.11.83:443	hm.baidu.com	tcp
CN	111.45.11.83:443	hm.baidu.com	tcp
GB	18.165.227.105:443	b-code.liadm.com	tcp
US	13.107.246.64:443	www.clarity.ms	tcp
CN	111.45.11.83:443	hm.baidu.com	tcp
US	151.101.1.229:443	cdn.jsdelivr.net	udp
US	8.8.8.8:53	tagan.adlightning.com	udp
GB	216.137.44.76:443	tagan.adlightning.com	tcp
US	8.8.8.8:53	accounts.google.com	udp
NL	142.250.27.84:443	accounts.google.com	tcp
US	8.8.8.8:53	105.227.165.18.in-addr.arpa	udp
US	8.8.8.8:53	64.246.107.13.in-addr.arpa	udp
US	8.8.8.8:53	192.114.245.47.in-addr.arpa	udp
US	8.8.8.8:53	76.44.137.216.in-addr.arpa	udp
US	8.8.8.8:53	84.27.250.142.in-addr.arpa	udp
US	8.8.8.8:53	cdn.hadronid.net	udp
GB	18.245.143.58:443	tags.crwdcntrl.net	tcp
NL	23.218.48.210:443	secure.cdn.fastclick.net	tcp
NL	23.218.48.210:443	secure.cdn.fastclick.net	tcp
US	104.22.53.173:443	cdn.hadronid.net	tcp
US	8.8.8.8:53	x.clarity.ms	udp
US	20.114.190.119:443	x.clarity.ms	tcp
US	8.8.8.8:53	bcp.crwdcntrl.net	udp
US	104.22.4.69:443	id.hadron.ad.gt	tcp
IE	34.255.230.248:443	bcp.crwdcntrl.net	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
US	8.8.8.8:53	proc.ad.cpe.dotomi.com	udp
NL	89.207.16.146:443	proc.ad.cpe.dotomi.com	tcp
NL	142.250.27.84:443	accounts.google.com	udp
US	8.8.8.8:53	a.ad.gt	udp
US	104.22.4.69:443	a.ad.gt	tcp
US	8.8.8.8:53	58.143.245.18.in-addr.arpa	udp
US	8.8.8.8:53	173.53.22.104.in-addr.arpa	udp
US	8.8.8.8:53	210.48.218.23.in-addr.arpa	udp
US	8.8.8.8:53	119.190.114.20.in-addr.arpa	udp
US	8.8.8.8:53	69.4.22.104.in-addr.arpa	udp
US	8.8.8.8:53	248.230.255.34.in-addr.arpa	udp
US	8.8.8.8:53	146.16.207.89.in-addr.arpa	udp
DE	162.19.138.83:443	lb.eu-1-id5-sync.com	tcp
IE	52.95.125.22:443	aax-eu.amazon-adsystem.com	tcp
GB	216.58.204.70:443	8876029.fls.doubleclick.net	udp
NL	178.250.1.11:443	gum.criteo.com	tcp
US	104.26.9.169:443	script.4dex.io	tcp
NL	178.250.1.11:443	gum.criteo.com	tcp
US	8.8.8.8:53	prebid.a-mo.net	udp
US	8.8.8.8:53	prg.smartadserver.com	udp
US	8.8.8.8:53	mp.4dex.io	udp
US	8.8.8.8:53	rtb.adxpremium.services	udp
US	8.8.8.8:53	prebid-eu.creativecdn.com	udp
US	8.8.8.8:53	adx.adform.net	udp
US	8.8.8.8:53	169.9.26.104.in-addr.arpa	udp
US	8.8.8.8:53	bidder.criteo.com	udp
US	172.67.68.162:443	prebid-stag.setupad.net	tcp
US	172.67.68.162:443	prebid-stag.setupad.net	tcp
US	104.26.9.169:443	script.4dex.io	tcp
US	8.8.8.8:53	cadmus.script.ac	udp
NL	89.149.192.192:443	prg.smartadserver.com	tcp
NL	145.40.97.67:443	prebid.a-mo.net	tcp
NL	178.250.1.8:443	bidder.criteo.com	tcp
NL	185.106.140.18:443	rtb.adxpremium.services	tcp
US	104.18.34.178:443	mp.4dex.io	tcp
US	104.18.22.145:443	cadmus.script.ac	tcp
FR	51.178.195.213:443	ssbsync-global.smartadserver.com	tcp
NL	46.228.164.13:443	d.turn.com	tcp
US	34.149.40.38:443	u.4dex.io	tcp
US	8.8.8.8:53	cm.adform.net	udp
DK	77.243.51.122:443	uipglob.semasio.net	tcp
DK	37.157.5.84:443	cm.adform.net	tcp
NL	46.228.164.11:443	ad.turn.com	tcp
US	54.157.2.15:443	sync.ipredictive.com	tcp
US	8.8.8.8:53	dsp-ap.eskimi.com	udp
NL	188.42.63.48:443	dsp-ap.eskimi.com	tcp
US	8.8.8.8:53	162.68.67.172.in-addr.arpa	udp
US	8.8.8.8:53	67.97.40.145.in-addr.arpa	udp
US	8.8.8.8:53	178.34.18.104.in-addr.arpa	udp
US	8.8.8.8:53	8.1.250.178.in-addr.arpa	udp
US	8.8.8.8:53	18.140.106.185.in-addr.arpa	udp
US	8.8.8.8:53	145.22.18.104.in-addr.arpa	udp
US	8.8.8.8:53	13.164.228.46.in-addr.arpa	udp
US	8.8.8.8:53	38.40.149.34.in-addr.arpa	udp
US	8.8.8.8:53	84.5.157.37.in-addr.arpa	udp
NL	188.42.63.48:443	dsp-ap.eskimi.com	tcp
US	54.157.2.15:443	sync.ipredictive.com	tcp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
US	8.8.8.8:53	ps.eyeota.net	udp
US	34.149.40.38:443	u.4dex.io	udp
DE	52.57.150.20:443	ps.eyeota.net	tcp
US	8.8.8.8:53	48.63.42.188.in-addr.arpa	udp
US	8.8.8.8:53	20.150.57.52.in-addr.arpa	udp
GB	216.58.213.27:443	storage.googleapis.com	udp
FR	54.36.150.181:443	cookie-matching.mediarithmics.com	tcp
US	8.8.8.8:53	8proof.com	udp
US	52.116.53.150:443	8proof.com	tcp
NL	178.250.1.3:443	static.criteo.net	tcp
US	8.8.8.8:53	cd.connatix.com	udp
US	104.18.41.104:443	cd.connatix.com	tcp
US	8.8.8.8:53	node.setupad.com	udp
US	8.8.8.8:53	181.150.36.54.in-addr.arpa	udp
US	8.8.8.8:53	150.53.116.52.in-addr.arpa	udp
US	8.8.8.8:53	104.41.18.104.in-addr.arpa	udp
DE	159.89.25.223:443	node.setupad.com	tcp
US	8.8.8.8:53	dpm.demdex.net	udp
IE	52.213.103.114:443	dpm.demdex.net	tcp
DE	162.55.120.196:443	matching.truffle.bid	tcp
DE	162.55.120.196:443	matching.truffle.bid	tcp
US	8.8.8.8:53	setupad-d.openx.net	udp
US	8.8.8.8:53	csync.smartadserver.com	udp
US	8.8.8.8:53	adxbid.info	udp
US	8.8.8.8:53	sync.a-mo.net	udp
US	104.21.48.215:443	adxbid.info	tcp
BE	2.17.107.219:443	csync.smartadserver.com	tcp
NL	147.75.84.158:443	sync.a-mo.net	tcp
US	104.19.158.19:443	assets.a-mo.net	tcp
NL	81.17.55.108:443	ssbsync.smartadserver.com	tcp
US	8.8.8.8:53	223.25.89.159.in-addr.arpa	udp
US	8.8.8.8:53	114.103.213.52.in-addr.arpa	udp
US	8.8.8.8:53	196.120.55.162.in-addr.arpa	udp
US	8.8.8.8:53	219.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	158.84.75.147.in-addr.arpa	udp
US	8.8.8.8:53	19.158.19.104.in-addr.arpa	udp
NL	185.89.210.212:443	secure.adnxs.com	tcp
FR	45.137.176.88:443	sync.adotmob.com	tcp
US	8.8.8.8:53	sync.teads.tv	udp
BE	23.55.97.75:443	sync.teads.tv	tcp
BE	2.17.107.219:443	csync.smartadserver.com	tcp
BE	2.17.107.243:443	ced-ns.sascdn.com	tcp
US	8.2.110.113:443	as.ck-ie.com	tcp
US	67.202.105.21:443	ssc-cms.33across.com	tcp
DE	85.114.159.93:443	dsp.adfarm1.adition.com	tcp
NL	89.149.192.200:443	sync.smartadserver.com	tcp
NL	208.93.169.131:443	bh.contextweb.com	tcp
NL	178.250.1.9:443	dis.criteo.com	tcp
US	64.202.112.159:443	b1sync.zemanta.com	tcp
NL	35.214.208.241:443	csync.loopme.me	tcp
NL	89.149.192.200:443	sync.smartadserver.com	tcp
US	8.8.8.8:53	a.audrte.com	udp
US	8.8.8.8:53	match.sharethrough.com	udp
NL	37.230.131.22:443	dm-eu.hybrid.ai	tcp
NL	89.149.192.200:443	sync.smartadserver.com	tcp
NL	89.149.192.200:443	sync.smartadserver.com	tcp
DE	18.158.126.136:443	match.sharethrough.com	tcp
US	3.229.202.201:443	pxl.iqm.com	tcp
IE	52.18.177.157:443	a.audrte.com	tcp
US	8.8.8.8:53	243.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	113.110.2.8.in-addr.arpa	udp
GB	195.181.164.20:443	vid.vidoomy.com	tcp
US	8.8.8.8:53	ow.pubmatic.com	udp
US	8.8.8.8:53	prebid-server.rubiconproject.com	udp
NL	89.149.192.200:443	sync.smartadserver.com	tcp
NL	89.149.192.200:443	sync.smartadserver.com	tcp
DE	79.127.216.47:443	id.a-mx.com	tcp
NL	185.64.189.116:443	ow.pubmatic.com	tcp
NL	69.173.156.150:443	prebid-server.rubiconproject.com	tcp
US	8.8.8.8:53	crt.sectigo.com	udp
US	104.18.38.233:80	crt.sectigo.com	tcp
US	8.8.8.8:53	s.company-target.com	udp
US	34.96.71.22:443	s.company-target.com	tcp
US	34.96.71.22:443	s.company-target.com	udp
IE	54.217.19.5:443	cm.adgrx.com	tcp
US	8.8.8.8:53	rtb.adentifi.com	udp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
FR	5.196.111.72:443	sync.smartadserver.com	tcp
US	23.23.73.21:443	rtb.adentifi.com	tcp
US	23.23.73.21:443	rtb.adentifi.com	tcp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
US	8.8.8.8:53	wt.rqtrk.eu	udp
US	8.8.8.8:53	pb-am.a-mo.net	udp
US	8.8.8.8:53	22.131.230.37.in-addr.arpa	udp
US	8.8.8.8:53	157.177.18.52.in-addr.arpa	udp
US	8.8.8.8:53	201.202.229.3.in-addr.arpa	udp
US	8.8.8.8:53	136.126.158.18.in-addr.arpa	udp
US	8.8.8.8:53	20.164.181.195.in-addr.arpa	udp
US	8.8.8.8:53	116.189.64.185.in-addr.arpa	udp
US	8.8.8.8:53	150.156.173.69.in-addr.arpa	udp
US	8.8.8.8:53	233.38.18.104.in-addr.arpa	udp
US	8.8.8.8:53	22.71.96.34.in-addr.arpa	udp
US	8.8.8.8:53	21.73.23.23.in-addr.arpa	udp
US	8.8.8.8:53	47.216.127.79.in-addr.arpa	udp
DE	57.129.18.111:443	wt.rqtrk.eu	tcp
NL	147.75.84.158:443	pb-am.a-mo.net	tcp
IE	34.248.189.186:443	match.prod.bidr.io	tcp
US	209.192.201.180:443	user-sync.adxpremium.services	tcp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
US	54.204.12.49:443	sync.srv.stackadapt.com	tcp
GB	89.187.167.3:443	vpaid.vidoomy.com	tcp
GB	18.245.143.108:443	js.adscale.de	tcp
US	13.107.42.14:443	px.ads.linkedin.com	tcp
ES	212.36.83.246:443	a.vidoomy.com	tcp
ES	212.36.83.246:443	a.vidoomy.com	tcp
ES	212.36.83.246:443	a.vidoomy.com	tcp
US	209.192.201.180:443	user-sync.adxpremium.services	tcp
US	172.64.146.152:443	cds.connatix.com	udp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
US	8.8.8.8:53	246.83.36.212.in-addr.arpa	udp
US	8.8.8.8:53	152.146.64.172.in-addr.arpa	udp
GB	142.250.179.226:443	googleads.g.doubleclick.net	udp
DE	18.153.248.29:443	ih.adscale.de	tcp
US	52.46.130.91:443	s.amazon-adsystem.com	tcp
US	52.46.130.91:443	s.amazon-adsystem.com	tcp
US	54.157.2.15:443	sync.ipredictive.com	tcp
US	8.8.8.8:53	capi.connatix.com	udp
US	8.8.8.8:53	live.primis.tech	udp
GB	99.84.9.107:443	live.primis.tech	tcp
US	8.8.8.8:53	29.248.153.18.in-addr.arpa	udp
US	8.8.8.8:53	qsearch-a.akamaihd.net	udp
BE	2.17.107.83:443	qsearch-a.akamaihd.net	tcp
US	8.8.8.8:53	s.richaudience.com	udp
DE	178.63.241.79:443	s.richaudience.com	tcp
DE	141.95.98.65:443	lb.eu-1-id5-sync.com	tcp
DE	162.19.138.83:443	lb.eu-1-id5-sync.com	tcp
US	104.18.41.104:443	ins.connatix.com	udp
US	8.8.8.8:53	vid.connatix.com	udp
US	172.64.146.152:443	vid.connatix.com	tcp
US	172.64.146.152:443	vid.connatix.com	tcp
US	172.64.146.152:443	vid.connatix.com	tcp
US	172.64.146.152:443	vid.connatix.com	tcp
US	172.64.146.152:443	vid.connatix.com	tcp
US	172.64.146.152:443	vid.connatix.com	tcp
US	172.64.146.152:443	vid.connatix.com	tcp
US	172.64.146.152:443	vid.connatix.com	tcp
US	8.8.8.8:53	83.107.17.2.in-addr.arpa	udp
US	8.8.8.8:53	79.241.63.178.in-addr.arpa	udp
US	8.8.8.8:53	prs.sftcdn.net	udp
US	8.8.8.8:53	articles-img.sftcdn.net	udp
BE	88.221.83.248:443	articles-img.sftcdn.net	tcp
BE	88.221.83.248:443	articles-img.sftcdn.net	tcp
BE	88.221.83.248:443	articles-img.sftcdn.net	tcp
US	8.8.8.8:53	cks.connatix.com	udp
US	104.18.41.104:443	cks.connatix.com	udp
US	172.64.146.152:443	cks.connatix.com	udp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
US	8.8.8.8:53	ads.yieldmo.com	udp
IE	18.200.48.33:443	ads.yieldmo.com	tcp
US	8.8.8.8:53	248.83.221.88.in-addr.arpa	udp
NL	35.214.208.241:443	csync.loopme.me	tcp
US	69.166.1.35:443	sync.go.sonobi.com	tcp
US	8.8.8.8:53	inv-nets.admixer.net	udp
DE	116.202.167.133:443	inv-nets.admixer.net	tcp
NL	154.57.158.115:443	ads.stickyadstv.com	tcp
US	8.8.8.8:53	imasdk.googleapis.com	udp
GB	142.250.187.202:443	imasdk.googleapis.com	tcp
US	8.8.8.8:53	img.connatix.com	udp
US	8.8.8.8:53	push-sdk.com	udp
GB	142.250.179.226:443	googleads.g.doubleclick.net	udp
DE	178.63.248.56:443	push-sdk.com	tcp
US	8.8.8.8:53	33.48.200.18.in-addr.arpa	udp
US	8.8.8.8:53	133.167.202.116.in-addr.arpa	udp
US	8.8.8.8:53	35.1.166.69.in-addr.arpa	udp
US	8.8.8.8:53	202.187.250.142.in-addr.arpa	udp
GB	142.250.187.202:443	imasdk.googleapis.com	udp
DE	23.88.8.123:443	uidsync.net	tcp
NL	139.45.197.253:443	notix.io	tcp
GB	142.250.200.2:443	pubads.g.doubleclick.net	tcp
DE	23.88.8.123:443	uidsync.net	tcp
US	8.8.8.8:53	2.200.250.142.in-addr.arpa	udp
US	142.251.183.120:443	csi.gstatic.com	tcp
US	142.251.183.120:443	csi.gstatic.com	tcp
GB	142.250.200.2:443	pubads.g.doubleclick.net	udp
US	142.251.183.120:443	csi.gstatic.com	udp
NL	178.250.1.11:443	gum.criteo.com	tcp
CN	183.240.98.228:443	hm.baidu.com	tcp
CN	183.240.98.228:443	hm.baidu.com	tcp
CN	183.240.98.228:443	hm.baidu.com	tcp
US	192.178.49.195:443	beacons.gcp.gvt2.com	udp
US	8.8.8.8:53	google.com	udp
GB	142.250.178.14:443	google.com	udp
JP	34.97.161.128:443	e2c4.gcp.gvt2.com	tcp
JP	34.97.161.128:443	e2c4.gcp.gvt2.com	tcp
US	8.8.8.8:53	128.161.97.34.in-addr.arpa	udp
US	8.8.8.8:53	beacons.gvt2.com	udp
GB	172.217.169.3:443	beacons.gvt2.com	tcp
US	172.64.146.152:443	img.connatix.com	udp
US	8.8.8.8:53	3.169.217.172.in-addr.arpa	udp
US	104.18.41.104:443	img.connatix.com	udp
DE	178.63.248.56:443	uidsync.net	tcp
US	8.8.8.8:53	e2c17.gcp.gvt2.com	udp
NL	34.90.241.47:443	e2c17.gcp.gvt2.com	tcp
GB	172.217.169.3:443	beacons.gvt2.com	udp
CN	14.215.182.140:443	hm.baidu.com	tcp
CN	14.215.182.140:443	hm.baidu.com	tcp
CN	14.215.182.140:443	hm.baidu.com	tcp
US	8.8.8.8:53	47.241.90.34.in-addr.arpa	udp
US	8.8.8.8:53	188.168.251.142.in-addr.arpa	udp
DE	178.63.248.56:443	uidsync.net	tcp
DE	178.63.248.56:443	uidsync.net	tcp
DE	178.63.248.56:443	uidsync.net	tcp
GB	172.217.16.225:443	tpc.googlesyndication.com	udp
GB	142.250.200.34:443	www.googletagservices.com	udp
US	34.111.47.92:443	api.totalav.com	tcp
US	142.251.183.120:443	csi.gstatic.com	udp
US	34.111.47.92:443	api.totalav.com	tcp
NL	185.172.149.104:443	definition.protected.net	tcp
NL	178.250.1.8:443	bidder.criteo.com	tcp
US	35.227.252.103:443	rtb.openx.net	udp
NL	89.149.192.192:443	prg.smartadserver.com	tcp
NL	178.250.1.8:443	bidder.criteo.com	tcp
NL	89.149.192.192:443	prg.smartadserver.com	tcp
US	8.8.8.8:53		udp
NL	178.250.1.7:443	ssp-sync.criteo.com	tcp
NL	81.17.55.108:443	ssbsync.smartadserver.com	tcp
NL	185.89.210.212:443	secure.adnxs.com	tcp
US	8.8.8.8:53	aax-eu.amazon-adsystem.com	udp
US	8.8.8.8:53	7.1.250.178.in-addr.arpa	udp
NL	185.89.210.212:443	secure.adnxs.com	tcp
IE	67.220.228.200:443	aax-eu.amazon-adsystem.com	tcp
NL	178.250.1.9:443	dis.criteo.com	tcp
US	34.149.40.38:443	u.4dex.io	udp
US	80.77.87.162:443	cs.admanmedia.com	tcp
NL	89.149.192.200:443	sync.smartadserver.com	tcp
US	8.8.8.8:53	ads.avads.net	udp
NL	89.149.192.200:443	sync.smartadserver.com	tcp
US	34.128.133.112:443	ads.avads.net	tcp
DE	51.89.9.252:443	onetag-sys.com	tcp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
US	8.8.8.8:53	match.prod.bidr.io	udp
US	64.202.112.159:443	b1sync.zemanta.com	tcp
US	8.8.8.8:53	amazon-tam-match.dotomi.com	udp
NL	35.214.168.80:443	trace-eu.mediago.io	tcp
IE	52.212.235.85:443	match.prod.bidr.io	tcp
NL	89.207.16.201:443	amazon-tam-match.dotomi.com	tcp
GB	142.250.187.194:443	cm.g.doubleclick.net	udp
US	34.128.133.112:443	ads.avads.net	udp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
NL	46.228.174.117:443	sync.targeting.unrulymedia.com	tcp
IE	67.220.228.200:443	aax-eu.amazon-adsystem.com	tcp
US	67.202.105.21:443	ssc-cms.33across.com	tcp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
US	8.8.8.8:53	id.rlcdn.com	udp
US	8.8.8.8:53	200.228.220.67.in-addr.arpa	udp
US	8.8.8.8:53	80.168.214.35.in-addr.arpa	udp
US	8.8.8.8:53	112.133.128.34.in-addr.arpa	udp
US	8.8.8.8:53	85.235.212.52.in-addr.arpa	udp
US	34.36.216.150:443	pixel-sync.sitescout.com	udp
US	192.132.33.67:443	bttrack.com	tcp
NL	46.228.164.11:443	ad.turn.com	tcp
US	35.244.174.68:443	id.rlcdn.com	udp
US	54.156.233.134:443	sync.srv.stackadapt.com	tcp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
NL	46.228.164.11:443	ad.turn.com	tcp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
DE	159.89.25.223:443	node.setupad.com	tcp
US	8.8.8.8:53	pixel.tapad.com	udp
US	192.132.33.67:443	bttrack.com	tcp
US	34.111.113.62:443	pixel.tapad.com	udp
DE	37.252.173.215:443	ib.adnxs.com	tcp
US	8.8.8.8:53	s.seedtag.com	udp
US	8.8.8.8:53	cs.minutemedia-prebid.com	udp
US	8.8.8.8:53	sync.outbrain.com	udp
US	8.8.8.8:53	exchange.mediavine.com	udp
US	34.107.140.113:443	s2s.t13.io	tcp
DE	3.125.138.63:443	exchange.mediavine.com	tcp
US	34.149.50.64:443	s.seedtag.com	tcp
IE	54.170.105.17:443	cs.minutemedia-prebid.com	tcp
US	50.31.142.95:443	sync.outbrain.com	tcp
CN	14.215.183.79:443	hm.baidu.com	tcp
NL	193.3.178.3:443	ads.us.e-planning.net	tcp
CN	14.215.183.79:443	hm.baidu.com	tcp
CN	14.215.183.79:443	hm.baidu.com	tcp
US	8.8.8.8:53	64.50.149.34.in-addr.arpa	udp
US	8.8.8.8:53	17.105.170.54.in-addr.arpa	udp
US	8.8.8.8:53	63.138.125.3.in-addr.arpa	udp
US	8.8.8.8:53	95.142.31.50.in-addr.arpa	udp
US	8.8.8.8:53	3.178.3.193.in-addr.arpa	udp
US	104.18.36.155:443	ssum.casalemedia.com	udp
US	8.8.8.8:53	s.e-planning.net	udp
US	8.8.8.8:53	cookies.nextmillmedia.com	udp
NL	193.3.178.1:443	s.e-planning.net	tcp
US	54.164.199.225:443	cookies.nextmillmedia.com	tcp
NL	193.3.178.3:443	u-ams03.e-planning.net	tcp
US	8.8.8.8:53	i.liadm.com	udp
NL	154.57.158.115:443	ads.stickyadstv.com	tcp
US	18.211.112.117:443	i.liadm.com	tcp
US	8.8.8.8:53	225.199.164.54.in-addr.arpa	udp
NL	193.3.178.3:443	u-ams03.e-planning.net	tcp
US	8.8.8.8:53	r.casalemedia.com	udp
US	8.8.8.8:53	1f2e7.v.fwmrm.net	udp
DE	3.69.181.183:443	1f2e7.v.fwmrm.net	tcp
DE	85.114.159.93:443	dsp.adfarm1.adition.com	tcp
US	8.8.8.8:53	sync.smartadserver.com	udp
US	8.8.8.8:53	bcp.crwdcntrl.net	udp
US	8.8.8.8:53	aa.agkn.com	udp
US	8.8.8.8:53	beacon.krxd.net	udp
US	8.8.8.8:53	usermatch.krxd.net	udp
US	151.101.1.44:443	trc.taboola.com	tcp
DK	37.157.2.230:443	dmp.adform.net	tcp
US	3.231.143.23:443	dmp.v.fwmrm.net	tcp
NL	89.149.193.88:443	sync.smartadserver.com	tcp
IE	52.48.217.227:443	bcp.crwdcntrl.net	tcp
DE	3.120.47.227:443	aa.agkn.com	tcp
IE	52.209.23.86:443	obgpm76tt0a0sgozk8l.redinuid.imrworldwide.com	tcp
US	8.8.8.8:53	183.181.69.3.in-addr.arpa	udp
US	8.8.8.8:53	44.1.101.151.in-addr.arpa	udp
US	8.8.8.8:53	230.2.157.37.in-addr.arpa	udp
US	8.8.8.8:53	88.193.149.89.in-addr.arpa	udp
US	8.8.8.8:53	227.217.48.52.in-addr.arpa	udp
US	8.8.8.8:53	227.47.120.3.in-addr.arpa	udp
US	8.8.8.8:53	23.143.231.3.in-addr.arpa	udp
US	8.8.8.8:53	86.23.209.52.in-addr.arpa	udp
BE	2.17.107.209:443	m.media-amazon.com	tcp
BE	2.17.107.209:443	m.media-amazon.com	tcp
BE	2.17.107.209:443	m.media-amazon.com	tcp
BE	2.17.107.209:443	m.media-amazon.com	tcp
BE	2.17.107.209:443	m.media-amazon.com	tcp
BE	2.17.107.209:443	m.media-amazon.com	tcp
BE	2.17.107.209:443	m.media-amazon.com	tcp
BE	2.17.107.209:443	m.media-amazon.com	tcp
BE	2.17.107.209:443	m.media-amazon.com	tcp
BE	2.17.107.209:443	m.media-amazon.com	tcp
IE	3.254.238.154:443	aan.amazon.co.uk	tcp
IE	3.254.238.154:443	aan.amazon.co.uk	tcp
IE	3.254.238.154:443	aan.amazon.co.uk	tcp
GB	142.250.200.34:443	www.googletagservices.com	udp
IE	3.254.236.173:443	sq-tungsten-ts-eu.amazon-adsystem.com	tcp
GB	108.156.39.71:443	tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev	tcp
GB	18.245.143.100:443	tags.crwdcntrl.net	tcp
US	8.8.8.8:53	100.143.245.18.in-addr.arpa	udp
US	8.8.8.8:53	173.236.254.3.in-addr.arpa	udp
US	178.128.135.204:443	brightcombid.marphezis.com	tcp
US	34.120.63.153:443	prebid.media.net	udp
IE	54.155.206.189:443	ad.360yield.com	tcp
FR	185.255.84.150:443	hb-api.omnitagjs.com	tcp
US	178.128.135.204:443	brightcombid.marphezis.com	tcp
US	178.128.135.204:443	brightcombid.marphezis.com	tcp
US	216.239.38.181:443	analytics.google.com	udp
GB	18.172.153.8:443	cdn.ldplayer.net	udp
BE	64.233.166.154:443	stats.g.doubleclick.net	udp
US	8.8.8.8:53	www.google.com	udp
GB	142.250.187.196:443	www.google.com	udp
GB	216.58.213.3:443	ssl.gstatic.com	tcp
GB	216.58.213.3:443		udp
CN	111.45.3.198:443	hm.baidu.com	tcp
CN	111.45.3.198:443	hm.baidu.com	tcp
CN	111.45.3.198:443	hm.baidu.com	tcp
GB	18.244.138.116:443	aax.amazon-adsystem.com	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
US	34.120.17.239:443	remediation.protected.net	tcp
US	8.8.8.8:53	67.169.217.172.in-addr.arpa	udp
N/A	127.0.0.1:59185		tcp
NL	185.172.149.104:443	definition.protected.net	tcp
US	34.120.17.239:443	remediation.protected.net	tcp
US	8.8.8.8:53	api.totalav.com	udp
US	34.111.47.92:443	api.totalav.com	tcp
N/A	127.0.0.1:59293		tcp
US	8.8.8.8:53	d3n1ms4uhtqgov.cloudfront.net	udp
GB	18.244.115.100:443	d3n1ms4uhtqgov.cloudfront.net	tcp
US	8.8.8.8:53	100.115.244.18.in-addr.arpa	udp
GB	216.137.34.187:443	d1arl2thrafelv.cloudfront.net	tcp
GB	216.137.34.187:443	d1arl2thrafelv.cloudfront.net	tcp
US	8.8.8.8:53	187.34.137.216.in-addr.arpa	udp
GB	172.217.169.78:443	www.youtube.com	udp
US	8.8.8.8:53	dnsz.corp.nortonlifelock.com	udp
US	34.111.47.92:443	api.totalav.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
GB	143.204.194.32:443	encdn.ldmnq.com	tcp
US	20.57.103.21:443	in.appcenter.ms	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
US	8.8.8.8:53	181.178.204.143.in-addr.arpa	udp
US	8.8.8.8:53	113.216.138.108.in-addr.arpa	udp
GB	142.250.200.2:443	pubads.g.doubleclick.net	udp
NL	185.172.149.104:443	definition.protected.net	tcp
GB	142.250.200.2:443	pubads.g.doubleclick.net	udp
US	8.8.8.8:53	www.totalav.com	udp
US	34.111.47.92:443	www.totalav.com	udp
US	34.111.47.92:443	www.totalav.com	tcp
US	34.120.17.239:443	remediation.protected.net	tcp
GB	142.250.200.2:443	pubads.g.doubleclick.net	udp
US	8.8.8.8:53	resources.totalav.com	udp
NL	185.172.149.104:443	resources.totalav.com	tcp
NL	185.172.149.104:443	resources.totalav.com	tcp
NL	185.172.149.104:443	resources.totalav.com	tcp
NL	185.172.149.104:443	resources.totalav.com	tcp
US	8.8.8.8:53	sub.got-to-be.net	udp
GB	18.244.138.116:443	aax.amazon-adsystem.com	tcp
GB	142.250.179.226:443	googleads.g.doubleclick.net	udp
GB	18.244.138.116:443	aax.amazon-adsystem.com	tcp
GB	142.250.200.2:443	pubads.g.doubleclick.net	udp
US	8.8.8.8:53	middledata.ldplayer.net	udp
GB	142.250.179.226:443	googleads.g.doubleclick.net	udp
US	8.8.8.8:53	97.136.219.8.in-addr.arpa	udp
NL	185.172.149.104:443	resources.totalav.com	udp
SG	8.219.136.97:443	middledata.ldplayer.net	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
US	8.8.8.8:53	prg.smartadserver.com	udp
US	104.18.34.178:443	mp.4dex.io	tcp
US	172.67.68.162:443	prebid-stag.setupad.net	tcp
NL	185.106.140.18:443	rtb.adxpremium.services	tcp
DK	37.157.5.132:443	cm.adform.net	tcp
GB	18.244.138.116:443	aax.amazon-adsystem.com	tcp
US	8.8.8.8:53	prebid.a-mo.net	udp
US	35.227.252.103:443	rtb.openx.net	udp
NL	178.250.1.8:443	bidder.criteo.com	tcp
NL	185.184.8.90:443	prebid-eu.creativecdn.com	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
US	172.67.68.162:443	prebid-stag.setupad.net	tcp
NL	185.106.140.18:443	rtb.adxpremium.services	tcp
US	104.18.34.178:443	mp.4dex.io	tcp
DK	37.157.5.132:443	cm.adform.net	tcp
NL	178.250.1.8:443	bidder.criteo.com	tcp
NL	185.184.8.90:443	prebid-eu.creativecdn.com	tcp
GB	18.244.138.116:443	aax.amazon-adsystem.com	tcp
US	35.227.252.103:443	rtb.openx.net	tcp
GB	18.244.138.116:443	aax.amazon-adsystem.com	tcp
US	8.8.8.8:53	sub.got-to-be.net	udp
GB	142.250.200.2:443	pubads.g.doubleclick.net	udp
DE	178.63.248.56:443	sub.got-to-be.net	tcp
DE	178.63.248.56:443	sub.got-to-be.net	tcp
US	8.8.8.8:53	player.vimeo.com	udp
NL	185.172.149.104:443	resources.totalav.com	tcp
US	162.159.128.61:443	player.vimeo.com	tcp
BE	2.17.107.226:80	apps.identrust.com	tcp
GB	142.250.200.2:443	pubads.g.doubleclick.net	udp
DE	178.63.248.56:443	sub.got-to-be.net	tcp
US	8.8.8.8:53	fresnel.vimeocdn.com	udp
US	8.8.8.8:53	i.vimeocdn.com	udp
US	8.8.8.8:53	f.vimeocdn.com	udp
US	34.120.202.204:443	fresnel.vimeocdn.com	tcp
GB	146.75.74.109:443	f.vimeocdn.com	tcp
GB	146.75.74.109:443	f.vimeocdn.com	tcp
GB	146.75.74.109:443	f.vimeocdn.com	tcp
GB	146.75.74.109:443	f.vimeocdn.com	tcp
DE	178.63.248.56:443	sub.got-to-be.net	tcp
US	151.101.0.217:443	i.vimeocdn.com	tcp
US	151.101.0.217:443	i.vimeocdn.com	tcp
US	8.8.8.8:53	109.74.75.146.in-addr.arpa	udp
US	8.8.8.8:53	217.0.101.151.in-addr.arpa	udp
US	8.8.8.8:53	226.21.18.104.in-addr.arpa	udp
US	192.178.49.195:443	beacons.gcp.gvt2.com	udp
NL	185.172.149.104:443	resources.totalav.com	tcp
US	8.8.8.8:53	widget.trustpilot.com	udp
US	8.8.8.8:53	www.totalav.com	udp
GB	54.192.137.125:443	widget.trustpilot.com	tcp
GB	54.192.137.125:443	widget.trustpilot.com	tcp
GB	54.192.137.125:443	widget.trustpilot.com	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
US	35.224.74.90:443	url.totalav.com	tcp
US	35.224.74.90:443	url.totalav.com	tcp
US	35.224.74.90:443	url.totalav.com	tcp
US	151.101.0.217:443	i.vimeocdn.com	tcp
US	34.120.202.204:443	fresnel.vimeocdn.com	tcp
US	8.8.8.8:53	bat.bing.com	udp
NL	185.172.149.104:443	resources.totalav.com	tcp
US	34.120.202.204:443	fresnel.vimeocdn.com	tcp
NL	185.172.149.104:443	resources.totalav.com	tcp
NL	185.172.149.104:443	resources.totalav.com	tcp
NL	185.172.149.104:443	resources.totalav.com	tcp
NL	185.172.149.104:443	resources.totalav.com	tcp
US	204.79.197.237:443	bat.bing.com	tcp
GB	142.250.179.226:443	googleads.g.doubleclick.net	udp
NL	178.250.1.3:443	static.criteo.net	tcp
GB	142.250.200.34:443	www.googletagservices.com	udp
US	8.8.8.8:53	e2c59.gcp.gvt2.com	udp
US	8.8.8.8:53	aax-eu.amazon-adsystem.com	udp
DE	159.89.25.223:443	node.setupad.com	tcp
US	172.67.68.162:443	prebid-stag.setupad.net	tcp
US	8.8.8.8:53	prg.smartadserver.com	udp
NL	178.250.1.8:443	bidder.criteo.com	tcp
US	104.18.34.178:443	mp.4dex.io	tcp
NL	185.184.8.90:443	prebid-eu.creativecdn.com	tcp
NL	185.106.140.18:443	rtb.adxpremium.services	tcp
US	8.8.8.8:53	prebid.a-mo.net	udp
IE	67.220.224.144:443	aax-eu.amazon-adsystem.com	tcp
IT	34.154.74.59:443	e2c59.gcp.gvt2.com	tcp
US	8.8.8.8:53	aax.amazon-adsystem.com	udp
DK	37.157.5.132:443	cm.adform.net	tcp
FR	91.134.110.129:443	prg.smartadserver.com	tcp
NL	145.40.97.67:443	prebid.a-mo.net	tcp
GB	18.172.154.232:443	aax.amazon-adsystem.com	tcp
NL	178.250.1.7:443	ssp-sync.criteo.com	tcp
NL	178.250.1.7:443	ssp-sync.criteo.com	tcp
NL	154.57.158.115:443	ads.stickyadstv.com	tcp
US	192.178.49.163:443	beacons.gvt2.com	udp
US	34.149.40.38:443	u.4dex.io	udp
US	8.8.8.8:53	144.224.220.67.in-addr.arpa	udp
US	8.8.8.8:53	59.74.154.34.in-addr.arpa	udp
US	8.8.8.8:53	129.110.134.91.in-addr.arpa	udp
US	8.8.8.8:53	232.154.172.18.in-addr.arpa	udp
US	8.8.8.8:53	163.49.178.192.in-addr.arpa	udp
IE	3.254.237.44:443	aan.amazon.co.uk	tcp
IE	3.254.237.44:443	aan.amazon.co.uk	tcp
US	8.8.8.8:53	sq-tungsten-ts-eu.amazon-adsystem.com	udp
GB	142.250.200.34:443	www.googletagservices.com	udp
GB	108.156.39.62:443	tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev	tcp
IE	3.254.236.173:443	sq-tungsten-ts-eu.amazon-adsystem.com	tcp
DE	37.252.173.215:443	ib.adnxs.com	tcp
SG	8.219.136.97:443	middledata.ldplayer.net	tcp
US	35.190.80.1:443	a.nel.cloudflare.com	udp
US	52.116.53.150:443	8proof.com	tcp
US	13.248.245.213:443	eb2.3lift.com	tcp
GB	108.138.217.110:443	setupad-tagan.adlightning.com	tcp
GB	108.138.217.110:443	setupad-tagan.adlightning.com	tcp
GB	108.138.217.110:443	setupad-tagan.adlightning.com	tcp
GB	108.138.217.110:443	setupad-tagan.adlightning.com	tcp
GB	108.138.217.110:443	setupad-tagan.adlightning.com	tcp
GB	108.138.217.110:443	setupad-tagan.adlightning.com	tcp
US	8.8.8.8:53	ap.lijit.com	udp
US	8.8.8.8:53	110.217.138.108.in-addr.arpa	udp
IE	52.211.107.53:443	ap.lijit.com	tcp
US	34.111.47.92:443	api.totalav.com	tcp
IE	52.211.107.53:443	ap.lijit.com	tcp
US	8.8.8.8:53	shield.reasonsecurity.com	udp
US	8.8.8.8:53	d1arl2thrafelv.cloudfront.net	udp
GB	18.244.140.6:443	shield.reasonsecurity.com	tcp
GB	216.137.34.187:443	d1arl2thrafelv.cloudfront.net	tcp
US	8.8.8.8:53	53.107.211.52.in-addr.arpa	udp
US	8.8.8.8:53	6.140.244.18.in-addr.arpa	udp
US	8.8.8.8:53	ce.lijit.com	udp
IE	34.242.54.113:443	ce.lijit.com	tcp
US	8.8.8.8:53	analytics.apis.mcafee.com	udp
US	35.83.125.109:443	analytics.apis.mcafee.com	tcp
GB	18.244.140.6:443	shield.reasonsecurity.com	tcp
US	8.8.8.8:53	109.125.83.35.in-addr.arpa	udp
US	2.17.251.40:443	sadownload.mcafee.com	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
US	8.8.8.8:53	40.251.17.2.in-addr.arpa	udp
US	3.214.3.211:443	track.analytics-data.io	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
GB	18.154.84.26:443	update.reasonsecurity.com	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
US	8.8.8.8:53	211.3.214.3.in-addr.arpa	udp
US	3.214.3.211:443	track.analytics-data.io	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
US	8.8.8.8:53	electron-shell.reasonsecurity.com	udp
GB	108.156.46.38:443	electron-shell.reasonsecurity.com	tcp
US	8.8.8.8:53	26.84.154.18.in-addr.arpa	udp
US	3.214.3.211:443	track.analytics-data.io	tcp
N/A	127.0.0.1:61242		tcp
GB	216.58.213.14:80	www.google-analytics.com	tcp
US	8.8.8.8:53	38.46.156.108.in-addr.arpa	udp
US	8.8.8.8:53	x.bidswitch.net	udp
US	8.8.8.8:53	px.ads.linkedin.com	udp
US	8.8.8.8:53	pr-bh.ybp.yahoo.com	udp
US	8.8.8.8:53	sync.srv.stackadapt.com	udp
GB	142.250.187.194:443	cm.g.doubleclick.net	tcp
GB	142.250.187.194:443	cm.g.doubleclick.net	udp
US	52.223.40.198:443	data.adsrvr.org	tcp
US	13.248.245.213:443	eb2.3lift.com	tcp
US	13.248.245.213:443	eb2.3lift.com	tcp
GB	142.250.187.194:443	cm.g.doubleclick.net	tcp
US	34.149.40.38:443	u.4dex.io	udp
US	52.223.40.198:443	data.adsrvr.org	tcp
NL	35.214.149.91:443	x.bidswitch.net	tcp
NL	35.214.149.91:443	x.bidswitch.net	tcp
US	13.248.245.213:443	eb2.3lift.com	tcp
US	13.248.245.213:443	eb2.3lift.com	tcp
US	54.198.181.57:443	sync.srv.stackadapt.com	tcp
US	54.198.181.57:443	sync.srv.stackadapt.com	tcp
US	54.198.181.57:443	sync.srv.stackadapt.com	tcp
US	13.107.42.14:443	px.ads.linkedin.com	tcp
IE	34.250.199.34:443	pr-bh.ybp.yahoo.com	tcp
US	54.198.181.57:443	sync.srv.stackadapt.com	tcp
US	8.8.8.8:53	34.199.250.34.in-addr.arpa	udp
US	8.8.8.8:53	57.181.198.54.in-addr.arpa	udp
US	2.17.251.40:443	sadownload.mcafee.com	tcp
US	8.8.8.8:53	home.mcafee.com	udp
BE	104.68.84.174:443	home.mcafee.com	tcp
US	8.8.8.8:53	174.84.68.104.in-addr.arpa	udp
BE	104.68.84.174:443	home.mcafee.com	tcp
US	35.83.125.109:443	analytics.apis.mcafee.com	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
IE	52.211.107.53:443	ap.lijit.com	tcp
IE	67.220.224.144:443	aax-eu.amazon-adsystem.com	tcp
NL	69.173.156.149:443	pixel.rubiconproject.com	tcp
US	8.8.8.8:53	sync.serverbid.com	udp
US	8.2.110.134:443	cs.krushmedia.com	tcp
US	8.8.8.8:53	pixel-us-east.rubiconproject.com	udp
US	8.8.8.8:53	s.ad.smaato.net	udp
US	8.8.8.8:53	aorta.clickagy.com	udp
NL	35.204.158.49:443	um.simpli.fi	tcp
US	23.20.26.217:443	aorta.clickagy.com	tcp
GB	108.156.39.69:443	s.ad.smaato.net	tcp
US	69.173.151.100:443	pixel-us-east.rubiconproject.com	tcp
GB	143.204.194.81:443	sync.serverbid.com	tcp
IE	34.242.54.113:443	ce.lijit.com	tcp
GB	216.58.204.70:443	8876029.fls.doubleclick.net	udp
GB	18.172.154.232:443	aax.amazon-adsystem.com	tcp
NL	145.40.97.67:443	prebid.a-mo.net	tcp
FR	91.134.110.129:443	prg.smartadserver.com	tcp
US	172.67.68.162:443	prebid-stag.setupad.net	tcp
NL	185.184.8.90:443	prebid-eu.creativecdn.com	tcp
NL	178.250.1.8:443	bidder.criteo.com	tcp
US	35.227.252.103:443	rtb.openx.net	udp
US	104.18.34.178:443	mp.4dex.io	tcp
DK	37.157.5.132:443	cm.adform.net	tcp
NL	185.106.140.18:443	rtb.adxpremium.services	tcp
GB	216.58.204.70:443	8876029.fls.doubleclick.net	tcp
NL	178.250.1.7:443	ssp-sync.criteo.com	tcp
US	8.8.8.8:53	ssum-sec.casalemedia.com	udp
US	172.64.151.101:443	ssum-sec.casalemedia.com	udp
US	8.8.8.8:53	217.26.20.23.in-addr.arpa	udp
US	8.8.8.8:53	101.151.64.172.in-addr.arpa	udp
US	64.202.112.159:443	b1sync.zemanta.com	tcp
FR	45.137.176.88:443	sync.adotmob.com	tcp
NL	134.122.57.34:443	match.adsby.bidtheatre.com	tcp
IE	34.250.199.34:443	pr-bh.ybp.yahoo.com	tcp
US	151.101.2.49:443	sync-tm.everesttech.net	tcp
IE	52.49.5.133:443	d.adroll.com	tcp
US	34.95.81.168:443	euexchangesync.digitaleast.mobi	tcp
US	35.83.125.109:443	analytics.apis.mcafee.com	tcp
US	35.244.159.8:443	setupad-d.openx.net	udp
SG	8.219.4.49:443	middledata.ldplayer.net	tcp
DE	159.89.25.223:443	node.setupad.com	tcp
IE	67.220.224.144:443	aax-eu.amazon-adsystem.com	tcp
IE	3.254.237.44:443	aan.amazon.co.uk	tcp
IE	3.254.237.44:443	aan.amazon.co.uk	tcp
BE	2.17.107.209:443	m.media-amazon.com	udp
GB	108.156.39.62:443	tungsten-service.prod.eu.adsqtungsten.a9.amazon.dev	tcp
IE	3.254.236.173:443	sq-tungsten-ts-eu.amazon-adsystem.com	tcp
GB	18.172.154.232:443	aax.amazon-adsystem.com	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
IE	3.254.236.173:443	sq-tungsten-ts-eu.amazon-adsystem.com	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
IE	67.220.224.144:443	aax-eu.amazon-adsystem.com	tcp
GB	142.250.200.2:443	pubads.g.doubleclick.net	udp
GB	142.250.200.2:443	pubads.g.doubleclick.net	tcp
US	2.17.251.22:443	sadownload.mcafee.com	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
NL	35.204.158.49:443	um.simpli.fi	tcp
US	192.178.49.195:443	beacons.gcp.gvt2.com	udp
US	192.178.49.195:443	beacons.gcp.gvt2.com	tcp
GB	142.250.187.238:80	clients2.google.com	tcp
GB	142.250.187.238:443	clients2.google.com	udp
GB	172.217.16.225:443	clients2.googleusercontent.com	udp
US	216.239.32.116:443	beacons4.gvt2.com	tcp
US	216.239.32.116:443	beacons4.gvt2.com	udp
US	104.18.41.104:443	capi.connatix.com	udp
US	34.111.47.92:443	api.totalav.com	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
GB	99.84.9.18:443	cdn.reasonsecurity.com	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
GB	142.250.187.196:443	www.google.com	udp
GB	142.250.187.196:443	www.google.com	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
US	3.214.3.211:443	track.analytics-data.io	tcp
GB	142.250.179.238:443	play.google.com	udp
GB	142.250.179.238:443	play.google.com	tcp
GB	142.250.200.2:443	pubads.g.doubleclick.net	udp
GB	142.250.200.2:443	pubads.g.doubleclick.net	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
GB	142.250.180.3:443	id.google.com	udp
GB	142.250.180.3:443	id.google.com	tcp
US	34.102.139.130:443	guard.io	tcp
US	34.102.139.130:443	guard.io	tcp
GB	142.250.178.10:443	content-autofill.googleapis.com	udp
GB	142.250.178.10:443	content-autofill.googleapis.com	tcp
US	34.102.139.130:443	guard.io	udp
US	8.8.8.8:53	cdn.guard.io	udp
GB	18.172.154.232:443	aax.amazon-adsystem.com	tcp
US	130.211.44.10:443	cdn.guard.io	tcp
US	130.211.44.10:443	cdn.guard.io	tcp
US	130.211.44.10:443	cdn.guard.io	tcp
US	130.211.44.10:443	cdn.guard.io	tcp
US	130.211.44.10:443	cdn.guard.io	tcp
US	130.211.44.10:443	cdn.guard.io	tcp
US	130.211.44.10:443	cdn.guard.io	tcp
US	130.211.44.10:443	cdn.guard.io	tcp
US	130.211.44.10:443	cdn.guard.io	tcp
GB	163.70.151.21:443	connect.facebook.net	udp
US	104.26.3.190:443	g.rtbrain.app	tcp
US	130.211.44.10:443	cdn.guard.io	udp
SE	92.123.135.139:443	use.typekit.net	tcp
GB	54.192.137.125:443	widget.trustpilot.com	tcp
US	8.8.8.8:53	snap.licdn.com	udp
US	8.8.8.8:53	sc-static.net	udp
GB	216.58.204.70:443	12461653.fls.doubleclick.net	tcp
US	2.17.251.25:443	snap.licdn.com	tcp
GB	99.84.8.252:443	sc-static.net	tcp
GB	99.84.8.252:443	sc-static.net	tcp
GB	216.58.204.70:443	12461653.fls.doubleclick.net	udp
US	8.8.8.8:53	s.pinimg.com	udp
US	204.79.197.237:443	bat.bing.com	tcp
GB	54.192.137.125:443	widget.trustpilot.com	tcp
US	8.8.8.8:53	cdn.taboola.com	udp
GB	108.156.46.40:443	embed.typeform.com	tcp
US	162.159.152.17:443	a.quora.com	tcp
BE	23.55.96.209:443	s.pinimg.com	tcp
GB	2.21.189.145:443	amplify.outbrain.com	tcp
GB	108.156.46.40:443	embed.typeform.com	tcp
GB	2.21.189.145:443	amplify.outbrain.com	tcp
US	162.159.152.17:443	a.quora.com	tcp
BE	23.55.96.209:443	s.pinimg.com	tcp
US	8.8.8.8:53	s.yimg.com	udp
US	8.8.8.8:53	www.clarity.ms	udp
US	8.8.8.8:53	b-code.liadm.com	udp
US	8.8.8.8:53	dynamic.criteo.com	udp
GB	13.224.223.9:443	c.amazon-adsystem.com	tcp
GB	199.232.56.157:443	static.ads-twitter.com	tcp
US	151.101.1.44:443	cdn.taboola.com	tcp
BE	88.221.83.250:443	analytics.tiktok.com	tcp
US	151.101.1.140:443	pixel-config.reddit.com	tcp
NL	178.250.1.13:443	dynamic.criteo.com	tcp
US	104.26.2.190:443	g.rtbrain.app	tcp
US	13.107.246.64:443	www.clarity.ms	tcp
US	18.210.46.60:443	track.analytics-data.io	tcp
GB	87.248.114.12:443	s.yimg.com	tcp
GB	18.165.227.105:443	b-code.liadm.com	tcp
GB	87.248.114.12:443	s.yimg.com	tcp
GB	18.165.227.105:443	b-code.liadm.com	tcp
US	8.8.8.8:53	13.1.250.178.in-addr.arpa	udp
US	8.8.8.8:53	60.46.210.18.in-addr.arpa	udp
US	8.8.8.8:53	12.114.248.87.in-addr.arpa	udp
GB	108.156.39.44:443	cdn.mediago.io	tcp
US	8.8.8.8:53	q.quora.com	udp
US	216.239.38.181:443	analytics.google.com	udp
BE	64.233.166.154:443	stats.g.doubleclick.net	udp
US	52.4.177.222:443	q.quora.com	tcp
US	216.239.38.181:443	analytics.google.com	tcp
BE	64.233.166.154:443	stats.g.doubleclick.net	tcp
US	52.4.177.222:443	q.quora.com	tcp
US	13.107.42.14:443	px.ads.linkedin.com	tcp
US	13.107.42.14:443	px.ads.linkedin.com	tcp
US	35.190.43.134:443	tr6.snapchat.com	tcp
US	35.190.43.134:443	tr6.snapchat.com	tcp
US	35.190.43.134:443	tr6.snapchat.com	tcp
US	35.190.43.134:443	tr6.snapchat.com	tcp
US	35.190.43.134:443	tr6.snapchat.com	tcp
US	151.101.1.140:443	pixel-config.reddit.com	tcp
BE	23.55.96.209:443	s.pinimg.com	udp
GB	87.248.114.12:443	s.yimg.com	tcp
US	8.8.8.8:53	wave.outbrain.com	udp
US	8.8.8.8:53	trc.taboola.com	udp
US	50.31.142.255:443	tr.outbrain.com	tcp
US	50.31.142.255:443	tr.outbrain.com	tcp
GB	2.21.189.145:443	wave.outbrain.com	tcp
PL	93.184.221.165:443	t.co	tcp
GB	163.70.151.35:443	www.facebook.com	udp
US	104.244.42.67:443	analytics.twitter.com	tcp
US	151.101.1.140:443	pixel-config.reddit.com	tcp
US	151.101.1.140:443	pixel-config.reddit.com	tcp
US	52.46.155.104:443	s.amazon-adsystem.com	tcp
US	52.46.155.104:443	s.amazon-adsystem.com	tcp
NL	178.250.1.11:443	gum.criteo.com	tcp
NL	35.214.168.80:443	gtrace.mediago.io	tcp
US	18.210.46.60:443	track.analytics-data.io	tcp
US	34.203.127.214:443	rp.liadm.com	tcp
US	18.210.46.60:443	track.analytics-data.io	tcp
IE	3.255.41.64:443	sp.analytics.yahoo.com	tcp
IE	3.255.41.64:443	sp.analytics.yahoo.com	tcp
NL	178.250.1.9:443	sslwidget.criteo.com	tcp
US	18.210.46.60:443	track.analytics-data.io	tcp
US	20.114.190.119:443	x.clarity.ms	tcp
US	104.18.36.155:443	dsum-sec.casalemedia.com	udp
GB	142.250.187.194:443	cm.g.doubleclick.net	udp
DE	37.252.172.123:443	ib.adnxs.com	tcp
NL	35.214.168.80:443	gtrace.mediago.io	udp
US	35.190.43.134:443	tr6.snapchat.com	udp
NL	35.214.168.80:443	gtrace.mediago.io	tcp
NL	141.226.228.48:443	trc-events.taboola.com	tcp
US	18.210.46.60:443	track.analytics-data.io	tcp
US	74.119.117.16:443	widget.us.criteo.com	tcp
GB	216.58.213.14:80	www.google-analytics.com	tcp
US	18.210.46.60:443	track.analytics-data.io	tcp
US	18.210.46.60:443	track.analytics-data.io	tcp
US	13.107.42.14:443	px.ads.linkedin.com	tcp
GB	216.58.201.110:443	chromewebstore.google.com	tcp
GB	216.58.201.110:443	chromewebstore.google.com	tcp
US	50.31.142.255:443	tr.outbrain.com	tcp
US	52.4.177.222:443	q.quora.com	tcp
GB	172.217.16.225:443	lh3.googleusercontent.com	udp
GB	172.217.169.3:443	ssl.gstatic.com	tcp
GB	142.250.179.238:443	play.google.com	udp
GB	142.250.179.238:443	play.google.com	tcp
GB	142.250.187.202:443	scone-pa.clients6.google.com	tcp
GB	172.217.16.225:443	lh3.googleusercontent.com	udp
SG	8.219.4.49:443	middledata.ldplayer.net	tcp
GB	216.58.201.110:443	chromewebstore.google.com	udp
GB	18.172.153.8:443	cdn.ldplayer.net	tcp
GB	18.172.153.8:443	cdn.ldplayer.net	tcp
GB	18.245.218.123:443	ad.ldplayer.net	tcp
US	163.181.154.235:443	en.ldplayer.net	tcp
GB	18.172.153.8:443	cdn.ldplayer.net	tcp
GB	18.172.153.8:443	cdn.ldplayer.net	tcp
GB	79.133.176.235:443	advertise.ldplayer.net	tcp
GB	18.172.153.8:443	cdn.ldplayer.net	tcp
SG	8.219.136.97:443	middledata.ldplayer.net	tcp
US	163.181.154.241:443	res.ldplayer.net	tcp
US	163.181.154.241:443	res.ldplayer.net	tcp
US	163.181.154.241:443	res.ldplayer.net	tcp
GB	79.133.176.235:443	advertise.ldplayer.net	tcp
GB	18.245.218.123:443	ad.ldplayer.net	tcp
GB	18.172.153.8:443	cdn.ldplayer.net	tcp
GB	143.204.194.32:443	encdn.ldmnq.com	tcp
US	163.181.154.241:443	res.ldplayer.net	tcp
US	163.181.154.241:443	res.ldplayer.net	tcp
GB	99.86.114.108:443	logziop.reasonsecurity.com	tcp
GB	18.172.153.8:443	cdn.ldplayer.net	tcp
US	163.181.154.241:443	res.ldplayer.net	tcp
US	163.181.154.241:443	res.ldplayer.net	tcp
GB	18.172.153.8:443	cdn.ldplayer.net	tcp
SG	8.219.136.97:443	middledata.ldplayer.net	tcp
GB	18.244.114.101:443	alliance.ldplayer.net	tcp
GB	13.224.132.14:80	apien.ldmnq.com	tcp
GB	13.224.132.14:443	apien.ldmnq.com	tcp
US	8.8.8.8:53	101.114.244.18.in-addr.arpa	udp
US	8.8.8.8:53	14.132.224.13.in-addr.arpa	udp
GB	13.224.132.14:443	apien.ldmnq.com	tcp

Files

\??\pipe\crashpad_576_ZXKSALXDCHLBSUGA

MD5	d41d8cd98f00b204e9800998ecf8427e
SHA1	da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512	cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

MD5	d751713988987e9331980363e24189ce
SHA1	97d170e1550eee4afc0af065b78cda302a97674c
SHA256	4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
SHA512	b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	83b49fd403daee41a94b4cd64c784ad0
SHA1	79df7830a6704f7127e5032dee1038f6fc712b07
SHA256	3a85a6a0e672cab766cb300507873018114850666cdfb0e462d50460adf4dcb9
SHA512	b696da062b27669f35325405ac453140b75d25589657f93b5a5b66f515d4287024914427ad403c6bd1c309633a657bea048a548588e407c962c03accc51b05bf

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	4c6aceb625ea2f2e4c4d40123240c3f9
SHA1	37ce76742319e680a766b330159f34149dc8f0c6
SHA256	73f391b0caa1497af42fcce9268ee4751e24fda2446776e18f23c160a2905317
SHA512	b2a2ec03271ed2c64d79317c1cc6b43c290dd03b5e430e6f21067aa0342040fb30a9790ad5ef49b6452dfe31771510e45e7bd0c225c5ec1ad10f0910588f4709

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	f2ab3bfb9883813ade9ea0df0d9ac7bb
SHA1	4ead97b7ca1988edd9c172af39c472ec77d1ba9e
SHA256	24df1af88357468762f61fa8e010f3f7f7f500c5966f910f5bc7b669cc8ddba2
SHA512	0a43271be2fd83fc390f8800a936ffc7312c4a9c578952a6c4c6dec717cd8a722fb3fbf0c1ca3e728d1997148b352b4ab0a3c4c186a848923f7f8881794f9dc0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	d081b4d3aa3728902fc6b95a7e3ea6fa
SHA1	dd13f2d4785b5bfb06e8f781726d337b264d67cc
SHA256	7112dc3d7baadf4d18604a156ecf5dc5ad594457f742c5685d97b49aed03dfcd
SHA512	e7be61bb778dd7c70e3ac1718ee4301acb0772f4a8ae1028aa502b08fb960145d41609446ee8423e42184bf6dc61cb0577dd286c6cf930aa1446a3c2a00b0a54

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00000f

MD5	f998b8f6765b4c57936ada0bb2eb4a5a
SHA1	13fb29dc0968838653b8414a125c124023c001df
SHA256	374db366966d7b48782f352c78a0b3670ffec33ed046d931415034d6f93dcfef
SHA512	d340ae61467332f99e4606ef022ff71c9495b9d138a40cc7c58b3206be0d080b25f4e877a811a55f4320db9a7f52e39f88f1aa426ba79fc5e78fc73dacf8c716

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	b68f7c1dbe6323dd72236d68433d7e34
SHA1	f98ce2338981e8b415a3329ed209d002c7c381d2
SHA256	229e20cb562be7c5367ea3de5883bb7a6680f16a7df860a910306ac6f3951dd2
SHA512	c9deafe3c6394ad141150f9375dbc12c849cfc4d150d016eb73264a1f1843d0641b31e9c2086920aac69cec61f87c00391f4c2d28d79b7ccc5c0d7e70f435b49

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	f406fc7989d75c7e08869653462b2d14
SHA1	3e7b03e6f7525ba856b52d24fbff22298e86f18a
SHA256	cf81b2924b70bfb61aeb4b4f7a6ab71c78b42c6cbb5665914451e73bf32d84b6
SHA512	40a8d77b7004a85d7b6b0228175fc54b0b3c35e904c61127ae00c36605bacd0b5d814f5444e3549574c899d3469bec1e636c910f284ea96d1925207cca717642

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	bc992bda7b21a5fc17a98312ccaf933e
SHA1	828ca483cb07637f3392cf5558751b861a08e71c
SHA256	a599d1cf468dbf4f001ed39e874e4f8f8689a536e68b330483236eae2e064256
SHA512	535ca3bc01d5d5a297d91c7fc06dc6c67023b1fa39c45ae8d0460ced0b7c33540e16630c6bf08c8ec570a6ae37800d0c68223e84f57db5070f7d17142c745247

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	5c27d1ada0a87d64271ec8ac5d0ce6b2
SHA1	660e4bd95be79e17914099469b1ca32333dd9c6b
SHA256	5dc1d7e0fd3bb1adf2ae7cdba233f214411fb667d282dc7a8bf3505267f54f8e
SHA512	cdd89fdf1fcc8022ea131501fd04e96173832ba2607ec2b164e6fd7555f846d0ab753b2ebe8e71fe80a9ed3c70d03946614e7bcd835abb0cd71707d19802fda9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	81dd7d888988935154562d54b2bab345
SHA1	36b211d80a4e52840b22db9243cfe5701d2169fa
SHA256	158de4863d114f6c62e032400c4ecb2669db5e68e846716982ba2567bda20576
SHA512	368bd0a9fd7b0545d0e2ac10d5d35a713fc3bda6a2abe2be66d6a25b88030304ecd04bd9642664d9bfbb38c24c6fac5417eeb3f0fa57877cae5d99305c04a876

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1

MD5	f50f89a0a91564d0b8a211f8921aa7de
SHA1	112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA256	b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
SHA512	bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5	ffa07b9a59daf025c30d00d26391d66f
SHA1	382cb374cf0dda03fa67bd55288eeb588b9353da
SHA256	7052a8294dd24294974bb11e6f53b7bf36feeb62ce8b5be0c93fbee6bc034afb
SHA512	25a29d2a3ba4af0709455a9905a619c9d9375eb4042e959562af8faa087c91afafdb2476599280bbb70960af67d5bd477330f17f7345a7df729aaee997627b3a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	8400cadb847565835ad6dda0fa4974a7
SHA1	77b43a042ee5024dc958498b1f4b433cdfc34f84
SHA256	aecce89a23a0c77cab5cd1d4f4c6bd32ed4178ed943221e67b2b355a6824c57c
SHA512	5d0f4591a8519bba70c8fe93949eb68587e650f5a5794cd2c511cbf7209d6495859b2ea52b2234a66421491ba6ce6b8fa3026d4ad64eda20ac82839c64c445f4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5	8e1dd984856ef51f4512d3bf2c7aef54
SHA1	81cb28f2153ec7ae0cbf79c04c1a445efedd125f
SHA256	34afac298a256d796d20598df006222ed6900a0dafe0f8507ed3b29bfd2027d7
SHA512	d1f8dfc7fdc5d0f185de88a420f2e5b364e77904cab99d2ace154407c4936c510f3c49e27eed4e74dd2fbd850ad129eb585a64127105661d5f8066448e9f201d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5	46295cac801e5d4857d09837238a6394
SHA1	44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256	0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512	8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5	206702161f94c5cd39fadd03f4014d98
SHA1	bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256	1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512	0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	2e0ed138ee2746baee60a9858570bd26
SHA1	57411926f261c4c1349fa93b89b17f201ab6446c
SHA256	54da80fb7312811a3d1fdbabd419cd6ccbf65aa4729049494bb85de2118abccf
SHA512	add949df07810df322cb7cd6ec39e88499a0cefb827f6567aaa329b0cdb2bc28cf9359789bc2fde02fba82f33c5011bd2b81f5b6c3f4556a89b6d5237410a7fc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	506336d0f3363e531c04fa3e8be6bc3d
SHA1	a964f244a7feb770e52c71e29a24c630562ed362
SHA256	7d6ff78e7bedf55949b3f09ff2a40f4f9fb7e69194915e38661d7b8d885653b3
SHA512	4d1740c4875491e43e95287c25750d60e251755afd42567a3ff42b00427645423b219b65165bb3b2edf110e8f953f90860c3997ee5a1392b35ed3dccdeed9a1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	e43c0bcea98cf0fb765e15288d0958e5
SHA1	949cdc884e628c925fe1802d23d8a5749e47cd32
SHA256	ac9ca28f1cdb51bf8b28ca32a1c5ade4b7cd1a32582b72c24c1af0abc338c69c
SHA512	4d5303f4a3f2e9c8f64c25deef9a451975cd3d7ed912a3b3cfe50ff4fc3948071f4040e7987d04b7ebcb70609be9188773ffd4ae4198c7db6cae74514e0cf85e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

MD5	c9064e5728ce30490ffe57f2cc60ae47
SHA1	870e176d01d11460c36d146f8705184efc311009
SHA256	9e86c748174642678845f8ea20d2139a1c003a6b93537e55e351e79489168396
SHA512	361a91a045dd1052627cf6ff639ab0b3ff40b353e9e362e8e44702bc12421c763d47d18888cad060b3691a9d73f63fc26323a68660ecb1fbc5e80e96da1e3607

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5	2e86a72f4e82614cd4842950d2e0a716
SHA1	d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256	c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512	7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5	d2d55f8057f8b03c94a81f3839b348b9
SHA1	37c399584539734ff679e3c66309498c8b2dd4d9
SHA256	6e273f3491917d37f4dbb6c3f4d3f862cada25c20a36b245ea7c6bd860fb400c
SHA512	7bcdbb9e8d005a532ec12485a9c4b777ddec4aee66333757cdae3f84811099a574e719d45eb4487072d0162fa4654349dd73705a8d1913834535b1a3e2247dc6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

MD5	c3c0eb5e044497577bec91b5970f6d30
SHA1	d833f81cf21f68d43ba64a6c28892945adc317a6
SHA256	eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb
SHA512	83d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5	710d7637cc7e21b62fd3efe6aba1fd27
SHA1	8645d6b137064c7b38e10c736724e17787db6cf3
SHA256	c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512	19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5	74e33b4b54f4d1f3da06ab47c5936a13
SHA1	6e5976d593b6ee3dca3c4dbbb90071b76e1cd85c
SHA256	535fc48679c38decd459ad656bdd6914e539754265244d0cc7b1da6bddf3e287
SHA512	79218e8ee50484af968480ff9b211815c97c3f3035414e685aa5d15d9b4152682d87b66202339f212bf3b463a074bf7a4431107b50303f28e2eb4b17843991c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5	89fe452a2fa7abfc6c38a58c12ba9b4f
SHA1	974d32ed56246635dadb3db69752735dfe3be2b7
SHA256	d0548fbc9f09751d4175ea95faeef4fb1384c2208a2b9c93eb46ed0789ec8095
SHA512	6aa628ca5fddf25e238338752464710ff839743390cd0f46752bcd7dedab80c9ba15aa375c4825624081b634a1ceed2b7317dc775d5d335621db911c38ba852b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58747f.TMP

MD5	b945148fa2ed74f701b22be8ce78ac21
SHA1	c9062f7cf4e37feb121e8d57c3a3b9bebc24c3a6
SHA256	0c4c2ab292df0ebec44660b1b8f7aa17cea0d8e2ab9c7c321894baf67dd2b05b
SHA512	227d3bfc842f9c0a944f5ec71193fcbf2ea1b1e6711fa85a5f8c3f66b7f4f27752a501a0f1f1d3b5de7fcc51cbf2c41f9bdb7146e2f79c6d68069922c26244a4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	e6cb78c0fcefab7c7f4d535da2f69345
SHA1	a2f95bf7c51dd3d00c6667c9246bbcccacec210f
SHA256	7744e7117cd53f971a91e656f0fa0fa6079b1a89d252febbf8fb345ddf38255a
SHA512	1fb820f7ead7e07839af75095ac5d6a48f881897d9be4de2d67e79a92b1447801a2087a3a30e7debea0bce1cf63822a9064efe9ed4909f3946645596786e6b9f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	4971401c9885b76444daac8776493a95
SHA1	8b4b70be3a8b3d39e3075637e10a4b4484663b8b
SHA256	68bfd391721f7e2709d6dfbe385ec4b3d21476d4cea90fdf475c1b2880a937d1
SHA512	4a131693019367a923c679e7da508ea80f7679a63e4c0a25e729ddbf4f327c84e1358f299cf02f5157bb2627a2f8aa902a1f057347dcc8959e469e5593601723

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

MD5	1fc15b901524b92722f9ff863f892a2b
SHA1	cfd0a92d2c92614684524739630a35750c0103ec
SHA256	da9a1e371b04099955c3a322baee3aeee1962c8b8dabe559703a7c2699968ef4
SHA512	5cdc691e1be0d28c30819c0245b292d914f0a5beaed3f4fc42ac67ba22834808d66a0bfc663d625274631957c9b7760ada4088309b5941786c794edad1329c75

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	c20ed88f112981d002992e1b94c6a67b
SHA1	74fc6bc69e2b17eddfc886e2f6add5259982cdba
SHA256	11b5881cdba3604a9865802f2ad21488dc61ba78cb5b9774771e63fa1b991f33
SHA512	fdd518cacc7343da303b325232665f06f37c6ee5ecc204eee18beb48ea78beccdb8465ca1bf36e1d35340959379e4638a706b2a8d77786778bc3e37055bc339f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	17afc6816241020ef6528aa73256bc2e
SHA1	932fd42f37868e475832e8dcc43c5639e6603eec
SHA256	01150d0524e32497cee8bdb55590a5f11d4ecd22df16539ef6cbebbb29538932
SHA512	852bfedc2cd1e87d1c2f84df6c17c15823e44da02987be61d6858ec7772c7ba85e6df707045b4e91727813bb9dd08b1f416e2cf32018d94ed364d6c79aaf434b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	f5bd330c38a3586bcb6581c7c33a6eeb
SHA1	8d2797047e77bc4ccb0d6d7b7bc84baaa95b3d5d
SHA256	84ff0557231232c5aa8f1d6a37e1a7daee22f71c6a36ad083b352e23b92105c5
SHA512	a8a509df6224c004572fe105a0f0ef2caa932ee4e6f3d45ed2d916dc14f17c3f007adc424dba7909cef7670f438e4991aa1315e241c89361a45584e1fa2729b4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	b879c719821d777e0fe23cdd567f04b0
SHA1	d5ed324caf54da4f0434b5f44a28a14a8dcf8192
SHA256	262945e32f4790f7c78012ece7c479ad144f0c92a4ae16df76b2404da7cf3c0a
SHA512	15a747acfa90f1266951a04f3eb0e10725c46611f2e4263c8772f6225324cc2505b9fe4c28c5a4d50ef7ed93c86f8c66883d07139bf8e4ded22653817fa97d2f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	9d9061ce32aa0959759b7b4c672492b0
SHA1	c211db7658ebaa297464c7230655baac12161c01
SHA256	04344fb3052209acbfd1d977f0fe7306a4849b7d05e488d6efa9d2f35a28072b
SHA512	b59f5917e31a43d4da2f0e5fc729242f148d9d37ad3d538ff566b1273032d043ac25c6c3a9eec23417d2dc0c6928cbc11f7ea21892d121368773d098e6ad8ad1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	4ef74ab99fdb7c6ce556c8d25a93cf55
SHA1	7596c868bd3e047ba622cec3417786edbd867ca4
SHA256	dd6873519d7be157dc1d83b6d9cd911eb12b3ac7f4ca2e138d44547cdf677c8e
SHA512	64c49a3e15c8e303d2e7a5f2022469c4187d8a91ac778f06d1146facb097cd90ffcc5950f6bb7e64027a7a0f8d7fa1c79de4e422d974993f4dd7b4230ce7ccd6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	7cd8aab619f4ec4900fcbcf71e3bc7c0
SHA1	fed1d6e3817b3ff7ae5bd6bfd8bd20f59caa2926
SHA256	aca33202df2ae214b43a69c93cec7406c7754d82a66fdc74dd55e5088e288a7f
SHA512	5ae35e965e742b407faa53a5d5e8325394c5e373fb5c1b88ce07bc95b693aae9f147310dca7af3f13a03661057d55d219c4f131b2635c51a5b9dcdc547c09c05

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	f55e297e5a8e827d98be9342a25d79af
SHA1	1ef9a391d66e770117c4150f50ff108e2bf8965a
SHA256	551f6cf19ed18a2d0b382147b2aff88a3b0a3bdb865431419c942a14db40ead7
SHA512	593de2c10b2d672ba2b640b380ccf9cea8f0adc98981f201cf0ca8ec08dd4f4dc3558cfcb647bebf0d6e71563fa6695e345b73b3dfcccb1b9213d91987a42c18

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	4d2c897c68667a9a67ae0838b4aba37f
SHA1	d4ef7fc6ac7d2e1cb03bb4fce409f08900d418b1
SHA256	e371d2c43fd690ff84e7cfcc92e6143be4b1d35b3d2c5e7b38383dbf0a464469
SHA512	0e5dadaf768c3537ffea392eddbf394f06aae8f717ed86fe7fe6f0c147fbdd0d0ee11a51001be65a86dd6e6b9e954f7765a64d9656c28bdbd4e5bf4534144a08

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	f9083e5a3541f4e1ad9ddd09d6a6b094
SHA1	f746f71970da42a94a2af380d4fb4eb7125c298b
SHA256	aad767a1a084c85b97b3d84e094c64f8425816048a9d162298e97d0065fcef35
SHA512	b82f2e4d775d8bf26bca5dd14c129ffd314d002c9511b5de2417b18d713e220f046d14f4ccc3320bd5fd0ce56f62730193b69c2e74697a8054bd0b7adb243793

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	57e884eebdda89a8940f006ed88e3ec6
SHA1	276d3e2138b5b3adb80634b4a988c01e8bf1e246
SHA256	0761c1af73351dd71fb87e791478380a219b76da1d1657cb21280b0899f317fb
SHA512	e4ab15a9b65617e1b3719bbac3d24cd66272d8e3db1bc4659583d79ff7856ca199f0aedb8f70bb208096db6aea57724ff9e781027eea44198a92dc51f4a9b7d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	3bb6b4e8538bed510d2b09d60351eb9f
SHA1	6f48d9b661435d593c65edf76a54e217a496839f
SHA256	52b5b56d876cdf0815f950a0886679654a2d75e75fd37362f7d0932335e95dbd
SHA512	126d591584d27235972505091b52a03bf2755ecd4a6dcfad7b965261eaa43fd2453d7983e92a82d1f3873956b898af5e6382ccb3f1a66683fc53a2b6dfc020b0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	7f2e7fbf24b42a6667f5cb32749bab80
SHA1	59e2e8f72204611b50151ea5cf066bb9d7c5cd40
SHA256	3eb5475f7a0a7f836bcd0292f8cad864d119156b906927c886bfc142d9370e19
SHA512	934512918382adf4299d081098552e002e5d67d25d09a92a3446b8d600d84d60b54418d7b88e828a4172d47575a7776a3f70744b023170b7ee1f8823699bee20

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	76a57091d816659bb39309c0cbd140e8
SHA1	bf80aeb43a25c485dbdf6ef8d46a5c17a1484427
SHA256	8609c4b469637083f14253e8616e40c5572395af500e2b47d70dd5478bac9b07
SHA512	a26ad49ee56f033060602deeb443984371e2c03721c3f203f3cb551ca04c7c3ce019f176d75afd71c8ab0056a7f26c89c771bfd6c4817f5a2c3eb2e39bbdf5d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	aa3974e30532d4265de02badf9d4c521
SHA1	65642f0e3c663ab41bfc3787286baa7f3ccb351b
SHA256	038e085a680d99c58e2293de420c4e03c5ecb0198c295c7190148d1e365246f9
SHA512	6d9ddc4e6cf58053457cafdfa94ba96193833b9fcd54d308b58ff0a222ffae040c3b642e2a5b93c93b8b6d66a05a7b44947414cbdd53ea7f5232caca49e76cd4

C:\Users\Admin\Downloads\TotalAV_Setup.exe:Zone.Identifier

MD5	fbccf14d504b7b2dbcb5a5bda75bd93b
SHA1	d59fc84cdd5217c6cf74785703655f78da6b582b
SHA256	eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913
SHA512	aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98

C:\Users\Admin\AppData\Local\Temp\nsuBC88.tmp\System.dll

MD5	fccff8cb7a1067e23fd2e2b63971a8e1
SHA1	30e2a9e137c1223a78a0f7b0bf96a1c361976d91
SHA256	6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e
SHA512	f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c

C:\Users\Admin\AppData\Local\Temp\nsuBC88.tmp\nsDialogs.dll

MD5	1c8b2b40c642e8b5a5b3ff102796fb37
SHA1	3245f55afac50f775eb53fd6d14abb7fe523393d
SHA256	8780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c
SHA512	4ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	3b55cc8997e671b13470dac81c7359f0
SHA1	a19a3666edd1f1de09ccb24112f19622e69a4be2
SHA256	6536bade631914e088236801f677011c82e7b4c0d97d2ba308bae53a8d9119a5
SHA512	0f11f5ed3663731accde1ad5b72abd0869c8587d168471ec5e88910fd88ec512ff1c6fd4c597817186a46744b60e7fda8afc5e46253ab26a42f098331c48f1d1

C:\Users\Admin\AppData\Local\Temp\nsuBC88.tmp\nsExec.dll

MD5	09c2e27c626d6f33018b8a34d3d98cb6
SHA1	8d6bf50218c8f201f06ecf98ca73b74752a2e453
SHA256	114c6941a8b489416c84563e94fd266ea5cad2b518db45cd977f1f9761e00cb1
SHA512	883454bef7b6de86d53af790755ae624f756b48b23970f865558ba03a5aecfa8d15f14700e92b3c51546e738c93e53dc50b8a45f79ef3f00aa84382853440954

C:\Users\Admin\AppData\Local\Temp\nsuBC88.tmp\nsRandom.dll

MD5	ab467b8dfaa660a0f0e5b26e28af5735
SHA1	596abd2c31eaff3479edf2069db1c155b59ce74d
SHA256	db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73
SHA512	7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301

C:\Users\Admin\AppData\Local\Temp\nsuBC88.tmp\SysRestore.dll

MD5	da046184a8d7269a0e138b0b0b9b2eb5
SHA1	d9bc5ea397857e17a86f80df1e50615eb6859044
SHA256	c5e335bd19fa798f120287fe3ed920296f899223942fd6b987585a765f0adec2
SHA512	9ee6965ac931839a5d61b4ed64bb3bbf434dfd10ff086c38a998ec6714018b5491da7e5c29e4f7dd7fd4a93b2f285869b20f88b4b0194c9ba7824ff7c9f03c80

memory/2508-1264-0x0000000003270000-0x0000000003282000-memory.dmp

C:\Program Files (x86)\TotalAV\locale\it_IT.mo

MD5	9e5efee9c003ff0f7c23786b049d1baf
SHA1	623e5c61dc11d1ca88ebb6722ead5287e543b12c
SHA256	6e6e5ac92a3341cba3585430d460f74071dbff1bde2f79b8246810dc35983775
SHA512	22061fefc040800a40f487efb023807fb5dcffb68c2aaa04250fd4e0265b7de56f021da0adcd147dcbba1f60f78df998efb32c7996776abb0d051cbd496f5541

C:\ProgramData\TotalAV\updates\SAVAPI 11.0.1\on_access\win32\win7\avgio.dll

MD5	49e51045f2951fd248318ac9f1ccb18e
SHA1	7a09bfa925fb2703bba5b26ddeae1ec7e3a481fb
SHA256	73b563935d96d328d5e13d05ddc35f24b69237e4c4b7b183ee66aeeb3ccd9c16
SHA512	df00015514bbcdd6d0ff9c38485ee65d7700fb7cadd4327d12230d63f078da5e9aa5fd11aec9f8c741bdf7c84c84c38543af1f71ebc12a4477415e2c5ab9deda

C:\Users\Admin\AppData\Local\Temp\nsuBC88.tmp\AccessControl.dll

MD5	9e7d36edcc188e166dee9552017ac94f
SHA1	0378843fe1e7fb2ad97b8432fbdcb44faa6fc48a
SHA256	d52a83c2a8551cebf48ff7a8d5930be1873bce990f855ccab4d7479cfeb22e3d
SHA512	92c31355cd124ba28c0ff9aa8fa34d5db9db0b093edb8978bc3cf94e1f72d526603d5d5c1e221dcb2ac6648bc420f4df9847c2b1e71046384d827814a77d1783

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.runtimeconfig.json

MD5	1bc39e80d6d10935c1e3c9503108e508
SHA1	a5272c88b3cff15e52f1f1ac348284fb962ec875
SHA256	202001a334948c50b6754226e1d935ef79b42e8b51c7c2311f5b86d4c3401acf
SHA512	5c7a59f20016e42f002585cad1998f50de5e22e7486344177fd61feb18f4d9130dc84e7d9c925034f3b3454310ff4e608ceff3b829ad3c8572803bba17c9dbda

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.inf

MD5	b9a877ecc51ee9f13d9e5451f8b12895
SHA1	45a8abeb8c295295e4952893452c54850f721868
SHA256	4bdc3b2fb007febf3718c453e08c590d00378fea4e2628431f85ccbb1099605f
SHA512	079cd60a4d3f6bc990119574a4d493571afbb24209f1a15bb0202d3c24c66fcec3151e132d84ca036f46cceabac34d1a20c7d1034f0bc487fe9feb2740fb95fc

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.inf

MD5	6fae3f1bb20b9e1f2ea6d8e0a1c35e68
SHA1	d281eaf5659ac3b6dfa501bb2206b8a7af86f230
SHA256	c17477ce4372a43268b01e398f438efa52729bb3718324be9ee1508849374f09
SHA512	f77032a6451e43e0b0c7e881afde1ee83fc542412ff6ee3dc9932608f1c61943f18da31200c4347e9373f575f5e6f2ee3ebca655cf9f190adbc12e5f7e7b5ac6

C:\Program Files (x86)\TotalAV\mscordaccore.dll

MD5	87a7aaf5ae5b7de4e15572166ca95d74
SHA1	76ec73926d22b708904e01623beb0138009dec5a
SHA256	5e63a9d0e5a7d10a738a7ce4633bff84e223183ef2155b7adf80c211a2b80a77
SHA512	5f0b2761c04c5565b5232446e3ca77a07f4a15567fd3a5de69661e705dd872a3e87358d79d6f02e807879eb1e15934fb09ad2e066a805c12c67c8d2c917e696f

C:\Program Files (x86)\TotalAV\driver\amd64\LICENSE.txt

MD5	747025499b4a05d19a0e3431c634cdc0
SHA1	c93725625c81fef7ff8663bdc5d5df501a3586a4
SHA256	fa8e8f02f81de56cbf470b91de1f6fa69c3b39a996c6e1f057df6212324cc564
SHA512	2b4eb9ef2ef7dd28fa0b30f268c1ed53130ad79686a1f785ccaa925a3015eb1617fde45ffe14068a08ac2ceea34579aa07f0199da57ca057783d193759bf8b49

C:\Program Files (x86)\TotalAV\TotalAV.exe

MD5	cccaf3ebad69beb64c9973de315074ac
SHA1	7bfb588c11d01b58559af45a5560cf9b65633069
SHA256	1228ead05883abee346299ed08de684c7438af548b4a527dffe469777fb00987
SHA512	2697992b45a58845d782e9f31b485bc65130d3bf55e618ea13195e47e6492907a77c46ebe596f9851280b8d7fec6b429329c71d8884796ba18203a349b9a199f

C:\Program Files (x86)\TotalAV\urldrv\wfp\win10\i386\webshieldfilter.sys

MD5	709ae7d4bb1817abf5b22bd5eb6d1943
SHA1	4123eb3773d91e5294abb1d1ad3cac52a34d5a48
SHA256	7a8748b1531e99f3549f579534e193fd9e2b1a96042313037d2aa6ad9c1e140d
SHA512	dc1f66be19368e7c9325a4f52e47b9d813912d06257a670ae42ba26206c751918fdf3a61eb2e383230ba6bb6a25865e594c5df80cb244ae1137e517d4dcc24c2

C:\Program Files (x86)\TotalAV\urldrv\wfp\win10\amd64\webshieldfilter.sys

MD5	b797771c87184870eb95d2e50e17a9e7
SHA1	b303acad4220542c3150bb979aa966c2640434af
SHA256	c190a676d707f290a0f6fccb60ecbc4b3b5dea5ea27d552095acd4110aff51bc
SHA512	60ced524fa3bb611b6a73734b7aa6bc30d10fdbf9914a8e4c79e1b79c6402a678fb4963a29f237418affba806ca39bdf766b229b7679d50431aa834e6fa99341

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.cat

MD5	49500efd1756f4b3934e8df70bf12d97
SHA1	7ee81eb8aa3e448fd7d9cd4559b9077d55b2afb1
SHA256	853c6ba3a145bdd47656b525985632ad46e1d2e8ad127449d59e2bf62bfd5d8f
SHA512	58b72baaffca047306915e09e9903b7fe6a6d9943e1d44644ad8ed2b3a31b371dd1ba2730789b75649bcc38df0782e8e6aad04f8f8b88eb800c333624aeea1a5

C:\Program Files (x86)\TotalAV\SAVAPI\xvdfmerge.dll

MD5	af329640a44f6dc93e395e167a0c80f9
SHA1	9f3c6e132c874ec689c2ab5ad21282f326d93694
SHA256	d20f7ad78d1d548ebea41f6b496cb2399f8186493564c777f192c9a0eed23f18
SHA512	988ce1e03736fbb4369bd5e0ffc52dae9c70811c65d11066d99a76e372fb72108d80c727fe4dd4e4e1125c927a68caf97af18009fb362048f408dbe36caba440

C:\Program Files (x86)\TotalAV\Microsoft.VisualBasic.dll

MD5	54427033e0d65a39722a76e07e430eb8
SHA1	7b83a4fe9997310c77aeaa5868b01b2b5a7b7c84
SHA256	89896b1dfdac9c395ef24e7e032f9b746ccc331bc0c9d791de3e5d2b357f1185
SHA512	b6304ec9042eee9d4c9e5f866fe9fa92582fe24dd3ba8f82374a17a7b87cc84e5f9608149269cc4c8e64cdc2c7b5ad7ac228070fe5cdd66da5b3bb9f00dfcb19

C:\Program Files (x86)\TotalAV\SecurityService.exe

MD5	290fb31b70589b9f2f2dd115c1d0438a
SHA1	99689b00694074083d90afbd38709e7fb8739a41
SHA256	393a4cf8bf0709d5ba956af454a5fff5dd89fa6541a3ce7138d4a7e7454120d2
SHA512	f341c0ca42ebc302cac5a4c3202b5171f6be0c5847ba061bc5689bfd520428b8748d47f34efa633ecb9508fb59bfa2672d9b5a5b64a40c27c9313699c620c22c

C:\Program Files (x86)\TotalAV\x86\update.dll

MD5	8fcfabdf2458336b061a06d7362f1c37
SHA1	ed669e2c73292d3a6510ed9d670bdf56cb7ca92d
SHA256	fc85d8cc5fe0327be1253c1f69ca48eaa30d9aa583becb6f1e678e7960e33022
SHA512	056eb2071e33efaa7ac52002a906008baf0f8c59f8fcc99c500510c327a6b2917922706c9ec05e12f716573d6d9321e28190f1a911f765d596fd4c0d4c882dec

C:\Program Files (x86)\TotalAV\wscf.exe

MD5	25330672ddf4763c86f65438ea2561d6
SHA1	94a602fffe514fdc9d3824263f6491f1342a9cf2
SHA256	266d4d9769b1498992fc953f2c82b9b6853b311f06adca63825a07c4dce72da0
SHA512	0cb2aea5155843e9ba4a5657acb8451665a722720f0e1d4a66935752aaaabcb56b032f31a5dbf4e5f4f310f28ca0d9e597c2f3f12a9a162e56063338db018630

C:\Program Files (x86)\TotalAV\wpfgfx_cor3.dll

MD5	52d8f7f0ab9d679209b707c7ebc8377e
SHA1	7042a8788ea40f29b2fab2ec249dfd9e8c6ed7e6
SHA256	69c03db89ad14cdf2c05db284d1452a517d7127bafd871334685d715f662d203
SHA512	8617663d2292ca05d1873cbf9cf2397a0e56214c5bf5d66d5b1c8e95658a5604e1d27656ce853d1306c4a21575e3fe45934a0b8e5bb256644cd064b8d8269c87

C:\Program Files (x86)\TotalAV\WindowsFormsIntegration.dll

MD5	0a90d6f7745945ac8b4ab943117a2997
SHA1	3bfc301f7c1fe06d24ae75792985ce0ff96d0b5a
SHA256	1bc138863ad0bd5ad76cbe133e6091e774c875e02cf070653eaf10dde099c299
SHA512	63825e8a0a5f085b9b513d14e8e3103921f2cf3a0250cea3bfcb03bc2e562543c89cb5ea92bb4bf12cf0b885dbf5248203ea59500bc0ef55788f2bae1498e346

C:\Program Files (x86)\TotalAV\WindowsBase.dll

MD5	d1ba0f8dcdb06bbdb31b92f21557aa92
SHA1	41d096383c3334429ecf27309c496142c09b59bd
SHA256	8f6d8283bbc65f2e5d101b6465a80b130060e27ed304301aefac5e370b4ee74c
SHA512	811b671d4d7271e682d5f94a0e1605784866f27545abe9dbe6fe10bc2a8a80240b15dbc9949f3bcba056fabca402707c732f32488f60d11029863073a350331c

C:\Program Files (x86)\TotalAV\Webshield.Client.dll

MD5	61de4c9a5119a54f7c114817b2cc362a
SHA1	3f3b0776526746bad4775482ad17c20821f99ce1
SHA256	8b29bd93b6e919f7098f0eacdc66d72ed25b3e9472e3c61a17ae5cb43419b8c6
SHA512	a6b6bfc70a1cb7fd810dbf4b320eff94beefe2a8f1846e7acc709ed92cbe9d6b5b750782ef189608a2e44011cbd5924fc34a088fbefab17fe8c1dab61b00be6b

C:\Program Files (x86)\TotalAV\vcruntime140_cor3.dll

MD5	1a84957b6e681fca057160cd04e26b27
SHA1	8d7e4c98d1ec858db26a3540baaaa9bbf96b5bfe
SHA256	9faeaa45e8cc986af56f28350b38238b03c01c355e9564b849604b8d690919c5
SHA512	5f54c9e87f2510c56f3cf2ceeb5b5ad7711abd9f85a1ff84e74dd82d15181505e7e5428eae6ff823f1190964eb0a82a569273a4562ec4131cecfa00a9d0d02aa

C:\Program Files (x86)\TotalAV\Utilzr.WPF.dll

MD5	263efe529fce04baa4860e5114aa847d
SHA1	132451c90e386912941b95d74f709679acfc4a74
SHA256	69465cb04f9d591f2fbeac213b9e4c2ca61b3f17f2e537528ec48b1205ef591b
SHA512	a7c83396cf84f0ca0bd7e1fab10a57b998016ffa73af7466ecc10b13ecc711473c0567125217b99f74de311296b54d4f841a248ab6571fa835e8e7926cd99892

C:\Program Files (x86)\TotalAV\Utilizr.VPN.RasSharp.NetCore.dll

MD5	2958f26b0902352fc73b3816efad4e4a
SHA1	38b9d9a075dc9fd24c9b18baf2068f3f67daead4
SHA256	5b9a3b0d0348b33271caaac006b2205d0128a246d74086d230501e53ec907732
SHA512	f993ad41614986e72310e10b414c3e232c4bc6e3f55ff1d15d4df731224063dbcf55ead14d57724ca39f75b9df60e34d4de3211ccfbb5d7d9895faab51364bac

C:\Program Files (x86)\TotalAV\Utilizr.VPN.dll

MD5	cf81d3cae034b4dad84060ef063e5765
SHA1	86e72fc9699b7674d503fa6268eae4a65e821e45
SHA256	a1cdc1133f8003c020ab7e2d9393a76eb11d3f9bb3e11f7fd55aef39d0f4800a
SHA512	2841ab2b445b180097112ebab21dc8554284c360d42d8c534e813bd2aa8e1d72a1815a5325d47558873489e444260870d811ad277477b111fff2e1d35246d5c2

C:\Program Files (x86)\TotalAV\Utilizr.Ras.dll

MD5	bda74b0b910ef7f8ca46d50ecbcf69a5
SHA1	467cde529a82b6a5e7f52049eb3b6326cf0f195c
SHA256	80927555d953ce14fb8b22ade23ee4b534b9e6b63a85939a3f41ef6553de7e6f
SHA512	f8f537ce90b16294e0577127016ddfda1c3d232ebf0a84c1e7c821793cbd47550f26027f9e5715667f572e00c1a683c7f6570579c2e9289deaf37da1ad9faaa8

C:\Program Files (x86)\TotalAV\Utilizr.OpenVPN.dll

MD5	3bba1a6b2a0a573013004def7d072f85
SHA1	15899568a637f3ec4df7f7bd1b23b9edf02aaa9a
SHA256	81322aeeef6a98186dceb13ea714194feff82bc2d33b5c42409d45f912fe1a11
SHA512	53205b4fb7d54d0aab67141d6209b6e8f9cf2974cddd7ca0f5f6eb95184760d89af6b628652ee49483f3ba7db59e6aa67294cf483af91a7ec74c2609e2053a49

C:\Program Files (x86)\TotalAV\Utilizr.NotifyIcon.dll

MD5	1e3feed90d5602cd617ab521ac90212f
SHA1	45f96effea4fee95c2ffc733724e42a988d70ede
SHA256	671bd4aad1a91b134c2fd4e1c4a48a82d667d936a49a60b4c41de2552d9fa868
SHA512	1b792747d6b8086d25828b22a329367bc59172b23297daa235436e0591fde5cad3738169f6a3c8eecdde18d88c2eb00ea2965b631bad2dd09c01c3a5247f0685

C:\Program Files (x86)\TotalAV\Utilizr.Native.Win.dll

MD5	ade3eb76f24c6c0296452433d35ed54a
SHA1	6bd0976acbebc0dde8d21c118b687991a2e1dcfc
SHA256	6eaf5cca444970d80abc62e95dc2deec1bcc4d6945e8d1b463c0ba40d50d43a7
SHA512	7c92157e5fa82215d4f259b3db953ddfe7850dd16ad263265d0ca5f31a64f5532b6786157a7b7643c8e7033f0f4630b7c13de233ec7d1ed4675ebf402b59d964

C:\Program Files (x86)\TotalAV\Utilizr.dll

MD5	34405f7bc238783edff4f7d27d5db5c0
SHA1	9054362111e4fe721bbd41fa0e58c871d2edb2a9
SHA256	1caebda591a0931781de7f1295a931f1ea1c7c99bfc27d1eaa9e9e7c385bffe4
SHA512	82eb90e8492cae875dfcab66acb3c95fe1ec67a627e9585c6d1fba0bdfb5abe0936a5eb2cd132be3ddd49e5e5490141271c35436040c882bccbef7f4c06af350

C:\Program Files (x86)\TotalAV\urldrv\wfp\win7\i386\webshieldfilter.sys

MD5	9508031dacfbbaf2595fdc9dacdb3b2a
SHA1	7b85a2830535a53068a8167093de36a3d3176e26
SHA256	3512260c75fe5ab584e7c072c38a9b17f4603c7b735d9e9e1e0b2f0ff901abbd
SHA512	a27287409313bd084510f92677111b92424c6a39eaf20e53519f563fe5a8d3a339b5e5d7399713164b41e1e22fc6ad87f6161f602ebdc74f9785f87e0bafc01e

C:\Program Files (x86)\TotalAV\urldrv\wfp\win7\amd64\webshieldfilter.sys

MD5	36a5f7f6601d2427426588ffd415ea89
SHA1	e69a5cfde38c82a6b0081e476fd83f1e3211337c
SHA256	16399d8faf4a30ed463b8db7900fe0e67aa981a519d324f32349ba2abd779647
SHA512	3379adcfbcb23cbdfc62390a0ebedde75810b1f90c19bb66ce142594994a11545090583cc9d71e4e28fb2bf875fd5798f9adb9e339ba9a146513734fb74693dd

C:\Program Files (x86)\TotalAV\urldrv\tdi\i386\webshieldfilter.sys

MD5	2aa6d30e357b9a3e63d178f244482150
SHA1	44577e1a2fbc916fc8acca1ae5c7958ff64f8da4
SHA256	3282e62445815de2e45092d9476f6ba5625dc50c96077845c2e32afbf8c9d2bd
SHA512	57964eb6f0e36a4eaf41e7586d1fb37e36896fa26687767012443898c1b59f8bd4900da1f639251ae726e60be8df97812a9b700d5064fcccc0343e59bbb2e0fe

C:\Program Files (x86)\TotalAV\urldrv\tdi\amd64\webshieldfilter.sys

MD5	21a332af5c8e929415dbde71db19b8ca
SHA1	dd908daf05b0fa89de836110e68f97cc54859d21
SHA256	b5ff1ea46318772e179c56e8e386f9b6c5831a304ebc4783501304aa2a9f8d33
SHA512	c0dad463aa71c1cfe2cf7de1b605be36f57fc49028a68b37e823ab5449f985b07d4c7b66e828aecbb2fffd240bab3f51d75a2d4ba43fb14674c0af50684d40be

C:\Program Files (x86)\TotalAV\UiPath.CoreIpc.dll

MD5	5478941a84114d61b7e0d58fd1a9ea18
SHA1	3f33fc1d6bb6b3db0cd6a94db659b72c93c252af
SHA256	2b825223319529860a85edb1267dde625f11719beb70b64a3f4794811ef74dde
SHA512	16f81df471e8c52e88d19010a0c3e26235b25cd79b59337fc52f145189ddeea7c11c21711d66e4345b793172920e7110806156e7a4ebf4459842e8bdb3391f63

C:\Program Files (x86)\TotalAV\UIAutomationTypes.dll

MD5	ac463388a5bd074e0c5f78faedae7a3f
SHA1	aa76fbb442eaa382551166d24ca7c484b9815235
SHA256	b6b78e5d676aafef787cd80e53d346e00d32d4c4b5f538b2bb4bf73aecd4fb44
SHA512	91703a92529ef366de0d13a0621fa0a6ef96d19144d33156b79472e0e28fbb79c00603e245daaabf73848190f04c3b13d4e1dbdb316c7037633c64f714aa80b5

C:\Program Files (x86)\TotalAV\UIAutomationProvider.dll

MD5	c38441a8d1c6af274c9dcaa36371ca37
SHA1	67d327632db75839da87a85859452943e8fdc83c
SHA256	1f1cd0d5ecd1b5cba7f0e13c47201368f1e2670a274f51ab3a6f6352b5472988
SHA512	c280c3d75d1d083337465a60c6ae1a1833039b925eac5066ffe423706cddbcf3dd66e61aad782829edcf59d160df963d5e5977726f12a4b64d7845ef1a532b07

C:\Program Files (x86)\TotalAV\UIAutomationClientSideProviders.dll

MD5	774dbd0432c038e0cd1f12bd9815b406
SHA1	dde22f173c178920b0c680d59ac692ec12170395
SHA256	fe614bc0fc3a928c692aa9a124ad23df2e8340589812128dadd175a5a7aa16ee
SHA512	f14f72318203e126ff0e1d97e6d5d27e37dbaf1961246cb5022032fd80e44cce1b4c7bb015291d6e9ac614c4defb3a379d9b1d71c359b9a158e977040a235fd8

C:\Program Files (x86)\TotalAV\UIAutomationClient.dll

MD5	f9115542337c422922173108f35f6a98
SHA1	fee4b41a513c3061f4bb040f26c9af39f0c7de96
SHA256	df0dd3fa1a3463a0e94a44b70bd9fa9f4e4e91ca7a9e0229ac86442614c42268
SHA512	b3d29a436582f86aee4c204fbe814a8d934a45e265e0144ca8e209e269dbf554bae281164cf687bce777547c67e20bc7052210e3335b8e1ba30176da53da53dc

C:\Program Files (x86)\TotalAV\ucrtbase.dll

MD5	6343ff7874ba03f78bb0dfe20b45f817
SHA1	82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256	6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512	63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

C:\Program Files (x86)\TotalAV\Trinet.Core.IO.Ntfs.dll

MD5	bea773dcb85e63a9bade222269c62367
SHA1	1572e3baa0c7d7335222acd435cab3616dc08c10
SHA256	4f750952c56bc9800cf7436c90ef983dcec12b5d156223522c9c2156d59b12c5
SHA512	a9c592a8675c96df544d20a0d0c004614789e034a2add26515fb4974d8c7caa98c018e92cb6e6df682f0f6e01c01e2d23395313b3564ef34315f0b4dab0ef1a0

C:\Program Files (x86)\TotalAV\SystemToolsWindows.dll

MD5	beff09abb00b97ab6c7b6190a772280d
SHA1	a1f9a9f65d94a701057761e1d21c2c2a266ad93b
SHA256	891d80bfc25e80de19ec819e9a4d3059d40a22a259fd349a6c2f5aa1492bf352
SHA512	235224d4eeb91ae50236ff7f8a43e10ebc6f1ba2437dee6d47937c1511f97c8692ee3a86d83f2532fe6b876a5996a1b53730998c311580a36cb3056086fd7937

C:\Program Files (x86)\TotalAV\System.Xml.XPath.XmlDocument.dll

MD5	f9b0a48e6992380cc8bc1125ee3b7df1
SHA1	4eb18e5115c8be53a61bf8a7092c479917c1ce37
SHA256	5aef6270411213995e83fc1c886c2545ae7f69d3f484f0320a7ca373f66a95b7
SHA512	db762dfe8d4724416dc5924e3d1aa1f7685aa20788a8bb30b8b2135265a03281182adb730bb122364676088bfe6cc2f19deade4bcb53f4943b2e60182a57c88c

C:\Program Files (x86)\TotalAV\System.Xml.XPath.XDocument.dll

MD5	85df03f8eea82a8997ae5d5e7216f516
SHA1	c7651ce2617239ad1fb2efc0d7afdf586a6e4309
SHA256	8ba41be47a40f344928c92181640b5db841fb325500e3fbf772e3cf4ce78d056
SHA512	62d2d220d9e1ae36c5c88af9740ccce186548deda39089a9c7703b8a4855ef3d24666608d2ba5b8a97a6779ac75d5286c667fa8380a12e49d4c2cc8a026d50d9

C:\Program Files (x86)\TotalAV\System.Xml.XPath.dll

MD5	fd7b5de88e17c734cd46495addd2e9b5
SHA1	6bdfff284a9039ad0baf1c01ed5a1b16465ad9b5
SHA256	fb076cbc2c2998fdf3fb59c1a8a3ee7bbebf9def922466f8f200b93076263ca4
SHA512	2f67c81c64d1d5b99d2c36bbfcff87eec7c22a70c744dba1e67a8040464db883aa0a5ccd268aac15803bbded3a309c4ca7b5d04415c7fcb6e8e3e2d6ab476ba2

C:\Program Files (x86)\TotalAV\System.Xml.XmlSerializer.dll

MD5	c89966f292c5e6b479c2b3aad9c8cd86
SHA1	836c1db80dfbfab4453df6d7eb01f82ee7c3d5f4
SHA256	38019b08132f45e928cebdc0312a0aeba3f71572192a682f207e43bb860048e6
SHA512	6ee43e72c97263423c415af8e013595ffa35fdd41c4e992913b69280d86a4af4b28ed3b8996cf873c135aee0c0dd1ce0ccc2ea47be09641307cd91bcc3a35574

C:\Program Files (x86)\TotalAV\System.Xml.XmlDocument.dll

MD5	b4fedbf764780b7dce28da95a420d697
SHA1	4941b0a0e9511694b5d27cda36877b4dad89cdad
SHA256	a5f438c4e21d1739df9595a0a9fb064de2b74fea35755a74633cca5f875d4dda
SHA512	55200562f072f04acd2c9e03fd0b8ce379e329e9e7435d8d0d97864712ea4f774ff1b92bbef30b3856fbdf7ea80323dad4738ce6f36baef642b75ed4914303c2

C:\Program Files (x86)\TotalAV\System.Xml.XDocument.dll

MD5	0bbaf643f66860420adf5ebb16fad642
SHA1	27221e1ed6c03613792ad6c14b3446902d624b4c
SHA256	a284999ea5a18a713ce7f63565bb8c089d70b261de5b9835825e37b295b510e3
SHA512	c0ab539ba2018ba06aee3050724ab0be2e463b7b63b227d544fa4f415dad624ae3f938872983be28deb31ae81f6e0cd10db71acaa8d1492c0fc90d2aa37a1132

C:\Program Files (x86)\TotalAV\System.Xml.Serialization.dll

MD5	f3e53f561f28a72396d8880b5fd43061
SHA1	e6600eb8b032ed4b45aae94d0b16a92e316079ac
SHA256	fc6423505981d34502ec151c12e462dd87614167a7652f1cdec3964ac41757fe
SHA512	886000f017296a211de5dd020c0ec0529f5fc483231e2391506e56a23961ada65b0f8d05b48e5ba2160ae0ed11c3c3bd014e222cdf903111a24368e3ef04ea0f

C:\Program Files (x86)\TotalAV\System.Xml.ReaderWriter.dll

MD5	b9e09b548bdb184b83a5588f598bc4aa
SHA1	5aad884ec792fc88fd610663aac11adf3fc7de13
SHA256	e5d1bc0eca4b452c6bf1ac792c9296397d8dc072195147cb66413748c12e3318
SHA512	a8b4cc181d15638c5e82c28b51d23631780395ff5945de6ea25547498a7f43fbcf3c12b0877b5bbbb60d08e42aa3f63306396047919bb9f626eca9df7e6234f1

C:\Program Files (x86)\TotalAV\System.Xml.Linq.dll

MD5	992c84a8940aa608d19b3d8a7de37250
SHA1	1408d2e802e482b028e0a74893b76f24050b0e35
SHA256	ba4fceca075f4bc010a20506237f939903f4b0dd39fc707cc2ac9678bef88bce
SHA512	673bac1579366398faf5a620e664b72f51d567692a729ea4c5d1a1c93b1e62149c5d2bf31cef9da23a571c95074a438cfa1aafd97693ddc35bcff1d536c342be

C:\Program Files (x86)\TotalAV\System.Xml.dll

MD5	29619d04b8d76177ac3aa6531850d780
SHA1	74663ff0da33fee097e640efe61ea7ac3ef5c0c4
SHA256	ac8617f3ea708d5c8ccd5801030713ea7366a80f99ee0f4bab74212e98ba917b
SHA512	2b7769ba99166d5eaf56142ec495c2f39c5b9bbc56bf115ecb73b82c18b2421fa722c8293666de337d3d28f599e21778a30944e04a5d42f8eb3b8c37056a3469

C:\Program Files (x86)\TotalAV\System.Xaml.dll

MD5	0eafae3a741222c0c70c684f95ba0ca4
SHA1	d637d064819f6e9c26c42646f3c20c113ebea664
SHA256	4c00761f3ae97b3925442e25654dba81a033e89a678109c276668202d12878b5
SHA512	9e669c28f9e242d409b167f4e16217ce40b6daced6bfee9b201f9596de748043631d6edf3b743253d36cef43314c006869d3944117b88239e07682bced0a9dcd

C:\Program Files (x86)\TotalAV\System.Windows.Presentation.dll

MD5	b0026d4bc150bfcfaa635cce3c0274c1
SHA1	554e69420dc20dacaf714627c67be5580d192835
SHA256	1e26e9e1dc838a2daa84ca5aa4102d0fa0e2b2003d0bb4f28265f18725e3b019
SHA512	7bccfa7e72fd89bbe2e020e83a241a1b2967d7c741cb83be95d25486e4a97d8e0097e88cf09fb80b16491ec0ffb55a4a7f793f03c54b684cb0be240acde88eb8

C:\Program Files (x86)\TotalAV\System.Windows.Input.Manipulations.dll

MD5	21a4ed44f42411c0eabbcb9d557ffe75
SHA1	72d6911b4a9e2c18f47c31bd036694edbe05aa10
SHA256	d030c8145d86fc3e2765c89765ea15cbb157c06c7faea155f26ed39e2e50cdfb
SHA512	e70e97002a9f447147535ffcda5ed9fc1942209e2bb95588551006692cf76b07204d33f906ec219ce2fa67ee574a44c910dd293ac6037260753a692e584f9600

C:\Program Files (x86)\TotalAV\System.Windows.Forms.dll

MD5	ec5a7dc7bfbcab037901f174b52c7bd5
SHA1	73a89e6046617a3af7ba724f92defb0365761a11
SHA256	a76af35171df472e387dc467956c6b056e19a43c1e0e09f89a1572628c54fedf
SHA512	33548b655ea172de39c216e959f13db8aecea63780b4025b2235e097ecc99f732793548bb03b481203abf28905fc4f23a5dedd73591549c01699b6249a3d5ae3

C:\Program Files (x86)\TotalAV\System.Windows.Forms.Design.Editors.dll

MD5	59a01daff776bbfbd979bde411b3f560
SHA1	3c74c9b82065a232e281d90b8f822c9cf81d4cbf
SHA256	75bdb451824e01c715f233f830238ade3e272be34c71bd7a2df7aa1b7efce2e6
SHA512	ccccddea85489c9687b32f66f0a0db638243d739693e7a66fce67b4801053ecd01c8a52eabf00fbcd0018d9f5f0b60da3a5910d26814846675299f8651f90d9a

C:\Program Files (x86)\TotalAV\System.Windows.Forms.Design.dll

MD5	9e214e42857781903f5be6b42ac89ddd
SHA1	185c472431ca8c94ea9c49da9edd4a981a2a7cc6
SHA256	5ea9190a7c0b339365d03c0c48866746cf2ad3f0e7640ad54b80db954fd64d96
SHA512	22b545d8429f0317a75662bf3640fbd88d7587d4fa1a3bb0f79778e7d326b25ba23a8ea0213b43a962bf2b7f0a72105891f346f15fcd12c6f8bdb0743f0b9274

C:\Program Files (x86)\TotalAV\System.Windows.Extensions.dll

MD5	d22b23b27ea42e5cb673474bdfeb4177
SHA1	fed248f1c6b4f9c726cc82d68b2f44f7d9597142
SHA256	8f5587ce58efdd95d3e07077b56ceb0a34f42613f10458138e4a446aedc7d3a5
SHA512	b06873684c7e30432ecf0981a997c168462039913a097375919da2329bdc16896e9dfb626c1564d6f331339ee46efbb78f36a2039c2f86b9ef751ff89beee0f6

C:\Program Files (x86)\TotalAV\System.Windows.dll

MD5	718ad855af94c8999ed3ef8d6c6bd425
SHA1	12c6ef3b222cbfb39270733519857562fa2d0953
SHA256	2c0db98ff26ed75ff5a0363d71437fd68f2aa32d07fe191ee3d5682d2e067f5a
SHA512	fb5d1f5af77d6c4beacf44dbc9d3168457419465f03c1420916512e57c4718967aa5b58b3ac665c54ab75d8c9fc5ab3a72c0be03d7b7c19d8f273ba3e662c30b

C:\Program Files (x86)\TotalAV\System.Windows.Controls.Ribbon.dll

MD5	359717d50a5029f8dbca072716138250
SHA1	d43be955d0d7dc0fdcc2fc24b5764b5a9eb7eb0e
SHA256	fcb319f1e12b5082950402efc159ccaba132b32135294ae3883dfd0326cb2e9f
SHA512	90b65f57e8b1af5f1cf239a83ecca6f6e3f024ea7b9e75b2b42dd2bb0b36ab93546c43fa5bc1331919e26128b6b0693f178041ab45a63feadf2a95e92d3be507

C:\Program Files (x86)\TotalAV\System.Web.HttpUtility.dll

MD5	5452b0c5e2a0e6fd12f30e9db446a67a
SHA1	4fd804bc62445073a3493b2d4afce8b39dcf69b8
SHA256	0e78eb3300d85ca6619670c01a7331403fac62b009eb1bb23e1df557602b24bf
SHA512	06553acd0e0055600d1b4a02e357fb5d5dbc58dff5d821b1f128b2f2d02fcdbd4377a3f46b3fff0ebc748b2b96f3fe92d7bf002b8bfc767cb4f5134b48923c3e

C:\Program Files (x86)\TotalAV\System.Web.dll

MD5	ee3c4a983ef4ee5e709458bbfe276823
SHA1	cfcdc2d90c5f6591d404a869120468ebb59ef97d
SHA256	609e02ad9d44a40a448b886acae4b593bd6e8ab34ba308e9da80e377a7401ef2
SHA512	5fd35478021ead442e595ae95a35225e10952c909af461d250e03558d37c2e18fa7082d8fd18f3ff91b7748b6973460e86283115cf92cd8511f9d8db861cda5d

C:\Program Files (x86)\TotalAV\System.ValueTuple.dll

MD5	b1c7225340b294d227ed9ac1f6e6415e
SHA1	06f19581321691f11ceb47cf68d1ecf26ac615d1
SHA256	38d2f423a1aa49679bb8ca8dd29efda20573fb43d387373e96dbfe173cfdf7a7
SHA512	a079999aeb6ef1e29915e4fcfd0a86af14cef90b03cf6dbb5508c59b89732cb4cb97d98afcaaf4cb64d24c2b2aaf113aaa8bd30602e3f55df815f314563979d3

C:\Program Files (x86)\TotalAV\System.Transactions.Local.dll

MD5	e658b1851e7774c15a7069dd044bbed9
SHA1	53124d5141719c688986d2a5aed0843f5e983b05
SHA256	abe8f895ad18cfd50fa1705f50855ca563a92d8bba6ad649f2bd39aab3930625
SHA512	a67bf210a901b3b17fed576bf9ffae11faf9d66e2c102abb52225b257c392baefc31955bf98dde175308fd727c056e8c7567e71d409404a6c10df0145c14ee52

C:\Program Files (x86)\TotalAV\System.Transactions.dll

MD5	26bc0a5c83fbaa630d58e4c37b30c200
SHA1	bfefb3fe6b366377b20806f24b1bf1d486e03d85
SHA256	b0b1767ee54ff87659839a260f1553d4cadc0ec402b121328c0918757ff5787f
SHA512	5903a91ee5f6308677c3f39afae26ddec90caa1a8b5fbf261097b3530a8733a78ef80bcb2b61ffb372ec740995197bd84be5cd458efce880c066f55d8a6f08b2

C:\Program Files (x86)\TotalAV\System.Threading.Timer.dll

MD5	daf144d20e5066d5c95dccb158c88a97
SHA1	366151dc10a7bb7a789d2eefbafa0df567e515ec
SHA256	e3ccf9d37b3e20427067285f8588e28613ff705310da9eef67fa36e9da6ec8a2
SHA512	87e3f313be23e54f7821ac054cb1cf09ec0f01665d533406477abcca6e5ee50e70e6095d72c3ee405e0ff078f8ad98cf5fd355f2f46d78b01b20c332b199b517

C:\Program Files (x86)\TotalAV\System.Threading.ThreadPool.dll

MD5	fa937c62a0c52445b021bdd6ede175f7
SHA1	b91c8d10f971bfc9e12f846bd1be7cf29ae6c89a
SHA256	3358e61263af81d99e8995441d012a8f75ca8d5d35e8c7c3aa6685c89f52a691
SHA512	9e1fc7726447611182ecddca0f578b657cfe2e9cc8f4685050f3edada8b4b28e619f81fcc343e1be4da4ba98aa8f6a823e3f82bd1ef5c0e6d0010479d7fa8d22

C:\Program Files (x86)\TotalAV\System.Threading.Thread.dll

MD5	520073af46143bc7128f8b3a6de0a2b8
SHA1	a9639dcf892633231b65552ef7c748feb9362435
SHA256	926e642b0b6cadfbc3a4cb11bb81454eed8adf50acbaf19385c2ca40decd40d1
SHA512	aa086ba704a3f75a761af0e265271abcdd10fda6d66076c4462bd74eefc3987ecf42230dac6df05a0d56b79b8bf8664163dccc1ce87e05c5f4e5dd886932353d

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Parallel.dll

MD5	6dcbc3f77f425b548c5a9e7b2a47c38e
SHA1	1f094ab1a99ca6a0743771429e8fea52cd60d9f8
SHA256	af07e133114232ef98bb98348916ae7eec8c46ef2a1b12e572d2b728c76bb19f
SHA512	19ec425392790c3f3eba4042e23afe0e019368df0b3206861bcf1a38023358d1ae6a685f99710983042d2fe6ffc6320053f8117ba8a34515c1e9335d7d64298e

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Extensions.dll

MD5	8755ebd05994248ed598bf950c089d58
SHA1	382e2679a2db822d814742f6a67c1d655823b09b
SHA256	abd6518b314792fac1c281e61ebd9d0ffc654a7b9204cecd3fc5927641c5bbe4
SHA512	69653bfd8687f82384ed24b21a64541be1e1165e1832a817d48b6da0c35b6d2a3559cd669cea4ea1482e707e5e62fd8d0b77707784ed99d7282f1cbea5480267

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.dll

MD5	0dc41a0a77de30d1838cf6f183133089
SHA1	dc0db3350fce11c3e742117816db053e72a61a23
SHA256	8d2942e975aaf6cf8217f65611b4f64b0dfa15e06fad1eb621d368f3e77fd1b4
SHA512	3ff9968ca53c8e011d2c9a8ddb73d1457923961d16665ec72ebbc725c5aa456605727a74af7716b7ec22cebb06346b765ef0722525d6d66f99c6e7c9f84a8c0e

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Dataflow.dll

MD5	e7d3f3d33047878beefcac595ee8b1c6
SHA1	c2fcfcf09b18aec9b9e4d77f57894720339befed
SHA256	07b35ebd9a0581ab44d458c53f13268e8aacb98763148f90b77f267400c6bbf4
SHA512	8da9059d3937e857682a766d9ae9cfcc9f7ea0638ba30e683226b5582fbcb333381f8f3e7f10c8d7b27944fba2166fc30b80ac72c349e589486c0b12fa10112a

C:\Program Files (x86)\TotalAV\System.Threading.Overlapped.dll

MD5	69302840464fd65d319287c61c6a3cc3
SHA1	3b880344c5e371f3cdfd266686854d94a580ce7a
SHA256	f9c7b710fc12daab8851a6b7dac3a44283269283765a991e7d740b8309c49104
SHA512	827f4921d08137f3f165ccb14a18e2b7c197977009b65ddef6473d8e47859d6d6b914c43ad6e6d2b158c8a31635554f43dfa1f416051739cc0f9303a444a78c7

C:\Program Files (x86)\TotalAV\System.Threading.dll

MD5	14407fd6873558448a79d6937dda51da
SHA1	94f506b0d0109c62fd218b904d9366bbe50d8751
SHA256	7bce0d29f5456cd7455afbd97d71089c1802ed423ff9c9299cebef30978f3c62
SHA512	e0c56f4c35a8500f4515b2250cdab445697ab3f15fc59e33c991b962422569a0bd1bfa563b785d705f4554fdb0f8f32b12733321ee8046f65b95d00b326cc642

C:\Program Files (x86)\TotalAV\System.Threading.Channels.dll

MD5	4681fd45a6a89eb8440962b37bd343f9
SHA1	dfe9f5e674bfba072e4f5b469f55773093457e7f
SHA256	0772931ecddc0f337c8702ddab477e37f72d779a225a4cc147067d23a5542f14
SHA512	fdf2ac6a72d2e8c7a6777a7ab08349877b876694af90af79db344558d2d9c2b86bbd0537cb1ae6ebf3035624428881760d9fc3d852b59644a8d5fb817487c0aa

C:\Program Files (x86)\TotalAV\System.Threading.AccessControl.dll

MD5	6d46a78535c08c1cc0b2bb1743f2e978
SHA1	2b6dcec3e8f8db4a61ea6c388853220ad5ebb445
SHA256	3dbc176f20cb9dcd3a66c4d45d7b473d7ddf5945fecc5b3a824e511f4296563d
SHA512	3a08b5cf784d9b1e927d68096a8e961744b3d48d845ed757e4c5c786f6e932d124470d8f56c62ba75b74cceae77f4239f0d302d0c0bf9f89bf17298d9e96cc6a

C:\Program Files (x86)\TotalAV\System.Text.RegularExpressions.dll

MD5	1a822027278537f978cf44375324f409
SHA1	38db67968997a1dbe8ee62bc57d75e05cff915b5
SHA256	68c3d90e812ba3f85abaf3115b16a836eaff05938665ad08fcec8dcbe4ebb025
SHA512	88196e22869dd5d159befc3d4615e7ea576fc8e85c1c3c50be6a0b9e36d17881d1fd5f371b85d27d5075e1a0c2da3f48bf758e7d8b672a5da33d58223eaafac7

C:\Program Files (x86)\TotalAV\System.Text.Json.dll

MD5	48112a26c30f6ab0e3147c19781f9a95
SHA1	f74bdc8fedd5155b6f6b05396d4d71761420104b
SHA256	cac807ba6fac5a4143b0a566af8b74837063c6d5f7d6ff768152e7894bc066b0
SHA512	a151b2356def8e14e30a22b08e604fbf63d45edac819ed972924c2f636768c01a4f75e72d911c2d96515098357c1d54d03600d949c87e90a69fcf6ad314a68b9

C:\Program Files (x86)\TotalAV\System.Text.Encodings.Web.dll

MD5	d77768c5b136738822dc17848759c273
SHA1	74030398f47c2fccc1b7ea397f14b7c5fb9c8f44
SHA256	b3507c7ef158f6c8b53ae24067c0f47cebca9c8c809021952d0e7eb8b13ebd54
SHA512	987ea9241fc320cb246f1b8347ab99248642dafc718a83c5e00dfc17ac9668bae35cf6c26f90b45c9ffa5654ed88f52803f41ed8c75090fe8194abb2b7f07010

C:\Program Files (x86)\TotalAV\System.Text.Encoding.Extensions.dll

MD5	97841b84d7abdc787982ef00e8e8cb50
SHA1	0b49222bd54cd700709ebda224df72248c85cf27
SHA256	c2c9f41c1be3596afb8eb4fce6e21867917a14351d2ab01faf9d81395f6c976a
SHA512	0a07c2df770f569702c2a2fb8d26faa0fa62d1b8b83be003433f2f60e2ce366fc8393cf5d1337d136797fc28eec9753e609acf5c5a223ea1b012162153024ddc

C:\Program Files (x86)\TotalAV\System.Text.Encoding.dll

MD5	f6171bd56f8697584d4df2a4b3866ae1
SHA1	62afd05f2f293dafbab3a2aa3c039b057cfab6cc
SHA256	d2e860bf41fba3b7aa9641e2121adef6a797353b31e7d14a581d250436669fa8
SHA512	8e3139a36ebb37a722837148da9d1858082966ae986f57a30a9a118d83022e1cf08521d385f4f0582ade74ee1e18ba63dcd9c9647b5bebb2f32be32672b5df31

C:\Program Files (x86)\TotalAV\System.Text.Encoding.CodePages.dll

MD5	d1f3cbca19f67eb146480b577b931fcd
SHA1	acfc89c89166d1c588ecfc281ded70d5aa439d21
SHA256	6cd6df23521771e17e24dab563dc5816403f87c86e5c0948320aca5cdf18e271
SHA512	3026ff16006257672dde064a330885408229eae6d37cd126c7c6a7ce7b6f63e65a087f0cf3331772a77dbae2f0cb66065369908e462a49fb4d0f19ac87b68495

C:\Program Files (x86)\TotalAV\System.ServiceProcess.ServiceController.dll

MD5	07f6b753e85bb69e38d866e5fd428aa5
SHA1	074b4652f8bc5389fe56f2d6f3a614ffb27bb704
SHA256	1fb83e4a791c8e25c12a91ecb99646b53e7b61fd26ca8af7b843e85548c9c81c
SHA512	9e6f67180422197acb49cd6a05bfd54ab3153cf9ff4dfb3eed89c7ed0e9e8931a192990cdb5d6e7880fae45257340c80e177dc122083c01cfd1ac9743fe512cf

C:\Program Files (x86)\TotalAV\System.ServiceProcess.dll

MD5	baff65fe62f0297fde0ca86c1a45a52b
SHA1	2707c063ab78c88326276fe72f401c59ce5b4bb2
SHA256	49fa12bee017d82a95f0cdc2267b06588ce8f592774dcfbbcd68cfcadf5b4ab0
SHA512	8a3dd74a52585f284f869d44e964df9327f968986aa6d03fa2b6fa763b87cd9e0979404a89c06441b135154fd72d2dfb73cad58768246ae3bc9ee75ce0c08ad5

C:\Program Files (x86)\TotalAV\System.ServiceModel.Web.dll

MD5	52b3c9e708baeac9d218001b93e1cef5
SHA1	4554ff7982595d29c9526029870e596ecd045fbc
SHA256	7f0f6b6db85fcc9739cf3256a0bc20574842f3e7f833b4e64cd45faa7e4e5a45
SHA512	a90734f6ae0ab78805614d9899e1f0137280b4e02a41789c55e8aa8f21fbf2333c35c2298465b84c3b83344917bf63fa7943143959c143f15b7a02880b10ec04

C:\Program Files (x86)\TotalAV\System.ServiceModel.Syndication.dll

MD5	42aa1719a875f869c067ada18f516934
SHA1	4e3724a54926395370bbde2bc9d0363c23dfe9b1
SHA256	48d6d299813cad6fece7bfa7a2674404750be32dfa541cabacb1b9502b7fa11c
SHA512	1c1df8fd476d513ce019e5ffb0a872cf420e0668e547d276b87d3bcc8b997d07958b0301d5bb575e59e2b279c78d45426b11d6387f9158c93cc81f6dbdfd3e32

C:\Program Files (x86)\TotalAV\System.ServiceModel.Security.dll

MD5	99a41bbee6e343283929baf92b1eddac
SHA1	1e174d3b47efabbd683cc6577a8ed6e77d42bfbe
SHA256	dba1d155da566afc2bf4d131f47f6e770374b7f2d5e6679e978cf5ee099bb73b
SHA512	41064b29dbdc320a4b7f53d39dacc8faa864059a6dd114ede610427ac7aa2c73a15e7bf11193d6d026bf3ff0dc237e410001c8c048f5899ca8baf9b570dc99c4

C:\Program Files (x86)\TotalAV\System.ServiceModel.Primitives.dll

MD5	8757fa6120b249a4dabf41f1e86c1a88
SHA1	090aeb4e0e18393df97a6daf6bb2ea7c4e512349
SHA256	9d10f481254515208b78209309db31a804f55c742a45aa843fde4e7ed3e02341
SHA512	69c515ced32a8539907523e63372fcbeaee1433fcf6a2578f894bf61c474920498951f3e60cf3e7af5a5044edf3b926a20d3cd7062f447e4a41d326a8bb30efc

C:\Program Files (x86)\TotalAV\System.ServiceModel.NetTcp.dll

MD5	41cedc634a584887a57ca22be8b29b3f
SHA1	eb1c0c22cd6b447c6814f24f5895a3c52a2be93e
SHA256	093704aded9db781a65a234b7e8fbff649e112599056115ae5120b5e2b194559
SHA512	57f5ef0a95b2e0fcf4cd29be381628b29f4b52b430ad4b573c2241d61124df81cba5dd76e2c4ad16a59c6897025ffba63aea0625f36cab8d1ba971a33bca1066

C:\Program Files (x86)\TotalAV\System.ServiceModel.Http.dll

MD5	3708250f24df059d4814a560aa348a25
SHA1	fd9da7f8cc293513e7add9e7dd62ef6ba9074a03
SHA256	e5ee987c419900517173a5ce5b4215396faa8fbcad7c5d45a7699dfc6fb8f174
SHA512	430567a2603a96a9d68094f93abcc7bb75ec0363b46d13e045c32858b465bcb39471d0967dc800839546d4932e8173a85c02b53809de5e008b127389acad5523

C:\Program Files (x86)\TotalAV\System.ServiceModel.Duplex.dll

MD5	118ee20f1160428ec506f9fe57c80225
SHA1	69649b52167fadf1c94005fa8f6d9ae9f0a84962
SHA256	78ac27f0813479dca9092c1160e699a22d3e4a322448d0efcf68ca1762a37730
SHA512	8efbe1fd607236bc9d9e4ba05cde426e6b49c5fe73267b018a439db7824bf24077fbb2f68b9f1a03386f0e7b2f1f4031c52e95f7ee9d2587b95254ac5fed2648

C:\Program Files (x86)\TotalAV\System.ServiceModel.dll

MD5	faabbb1dded66aac765f0e75e816e1a7
SHA1	25641af23c12c660853315a0244f2186e92cd1c3
SHA256	2ddfc838ba2ff3f30118a557f47a9fa8483a36e0f639e016715bda0474008712
SHA512	3a71ce89c17a5cdaa41d761f179eaef8ad62cc3dd74e07a1eff21a64fd4929c9e02c511de046397c02d91449e4ef35edea8da571d4c91d1834ad8d0e5d1e6a5e

C:\Program Files (x86)\TotalAV\System.Security.SecureString.dll

MD5	f5c40794c808da71de1c4e1ab4faf16c
SHA1	fc614bdc2bd9a4cbc91a3bbf92346fc0fea4b499
SHA256	762dd98815885030474f9d327c34f9f35978de4918ad51d0ff167f64947910b0
SHA512	c628480c5c1935b44d03a6532d1881dd8a800fc1f9ae6b53c858cf3b9fb0f945e24f3a65e1b1a0b1a5e1ab1ca9077ef790a912b67f1644c5b01a6d92f88ff222

C:\Program Files (x86)\TotalAV\System.Security.Principal.Windows.dll

MD5	3a25b04b46da74e0af05b71574d0ac97
SHA1	992104a3aa3bbd94a22cb16e9e86fdfd51e686c3
SHA256	fe964cd7d8778f39f72a5cde81e80052770fd9633c9cafc53c5253832386f545
SHA512	21d27296d1de1596f36bf9f810ba00dcf7bd4f4deb5511b7ac6aaf98ff1cd11550c52ae14b93e65e39c591a25491eb5f33e464512831fccc8b3aad8d482f660a

C:\Program Files (x86)\TotalAV\System.Security.Principal.dll

MD5	ce0388e8f0d85d7c601e246e5985966e
SHA1	bfbc0e729b85ca27e4de3f0903022a1716201689
SHA256	3b6b0520402df1a0543118c78c82435b61bf9111b2824fd31e59a3fe67e69e03
SHA512	730ed920fced564e28404d2733b963b29b9210806fcfde0b73accd06cd4225ece06f9dca2d06d2fe9b8f350db85ec30249964d82c49cddd4e8f3e54451403473

C:\Program Files (x86)\TotalAV\System.Security.Permissions.dll

MD5	8777398255b941a954d48ecf8b78e2ee
SHA1	8378428d9979aab355c91e768a66cf927a60b51a
SHA256	78835b8707b4cd259036c433412b1686acfdd858e39f003cc7f881bdf213f952
SHA512	c75be5d2b0918eded3b83c6d0de1f9fb6cfc80b9048426e87baf381133a782c7cc2526c3cef1d26c5ce28cb4395519906de558f60ad3363078125cb8e411f75e

C:\Program Files (x86)\TotalAV\System.Security.dll

MD5	ca27405a8a1dd64467867dd9e703d039
SHA1	0f6d2a2a6daf160182afa73140321200069fb68b
SHA256	b623c4a5e0d96b3ff3945db3e5bb8d235b3b0c2f6d23b8636bd68bb72fdc9e2a
SHA512	019962fdf434d7bcaadb739ff35b300dd3c125ee9b31f4f60e475c80fc2b02a0b0b9012fbb6da0a0aad9dd5f65be07cddf0c4b965b0d7a8da1c915a77134a9bc

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Xml.dll

MD5	372e7871a9928b27522252ba7b286a52
SHA1	f8e88da036bff12203ba5e13a138d9645b72dd65
SHA256	8f51e84959e39b24e71e5439fc4daf57b31ab1f09d80e6782a9766668ad77ce4
SHA512	e008de243bec5597eaa50cf120f95c9a28dd5c354cd72693a537e1c0cceb25fa4985c100d7b9fcc022ef3ca7408d6222c004b5be9d7ed2099d37a86242ba2274

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.X509Certificates.dll

MD5	0618942ca628d87a2f5acdef59d5f63f
SHA1	8d3087cdd271aab64cdbb44db7d9a24ea0fb26a3
SHA256	edaf16ab027878bfc46a236017ec02aa2a5d107458b5f0243742aba82aa06959
SHA512	8618c6f0f8c215112f406cab110e5bef1649a34e1dfb53e4943fd4920b929af1df9510db5dcbd6d23fb4c2e36438f3864ac3e9c206573e288efdf957f6c18640

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.ProtectedData.dll

MD5	5468e9d3b7e8fa1b6dd4f089f5d3b995
SHA1	6ed6314272b6d423d3ebad99beabe6268bdc7588
SHA256	a1768b5b1b181aa32dea75961f6e101ad53d7f955e79ad4527d0f4cb2ee5b16a
SHA512	9d0466e8ede0dfabb5ebd49d2d4f250f653329eadc6b7792a62a5e46568cf3c85252f8ca57ca3f5f4007317fb292e6e04e90adadde1a7b88a1b7febf65c58f87

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Primitives.dll

MD5	99d88e5e28b5bfe0df8c35eefa90c06b
SHA1	879eb9a9e56b7f1df35539a580a6baa82368c17c
SHA256	3b22a67cd325e1f4a4e1b59519a23e0852c0a8d1e05ed0caaf0b378a09403dcf
SHA512	0adec8daa8e7e72539c324bf33efa7cf120daeb23905dac4ff2429528ad3ed561b181eb7e7daf70d6f832bfb335d3bd22839fc3b28277b4b2f6391f81d25c094

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Pkcs.dll

MD5	2751a3e9dcb2d59ec23b3399144e384f
SHA1	d0f4ed9de306f0343fa826ac00d1c63537c7be0d
SHA256	48250c7249b9dfeffc6d87450dc086586d986af22728a7902e91340f747266a9
SHA512	b77cb8de7bf3ad96bd2a5aafe16898ebbe3d66b587e3e15bd5b9c2d941e7f9aa4de0ca6f4ee61b095a0921e51ba12c1253d6c95018f810d00c37e66ce9adf1d9

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.OpenSsl.dll

MD5	37beec6e6ee2e9d4128e855578bc8c22
SHA1	8a6b7fe922f32846ccf353a328a2b61cadc95894
SHA256	497e1c7d7f02b4d534be4084873ba80b051b935212d36aefec83c6cd6a40e2b3
SHA512	79127813b66d282a8f5417cd1d4823d53be8dce711d9017905ca6881376eecd200fd76be5454d89965452dfe8c50c3609ee2a02cd7875508d8f2ef8c3396bf88

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Encoding.dll

MD5	c44b46d68b9360efccd51360c5efba29
SHA1	7149dcc6ae7c34cc52699cae1cade7dd36d5f9f5
SHA256	4092f04906e3ad585fb8defb60dbbd2e1ea6574ac885948370600d0d4d558748
SHA512	f8c37f51bbb0141ba409d816c79f1807b6235ab658c3f74c0ef2ddfa550504ac66207b84dc62c1fb9c327e4aeaf6a518d6fb6b85c44ce5cf8bdd6d2eb95816d9

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Csp.dll

MD5	40d546a58e8392bcedf356ddf917b1d6
SHA1	f018a1c76e1c4fa5c7eafbca6f47c1e6eb6fdabc
SHA256	5a9ae1a4c697236fb6a9e46b66e1a14a7b60110a83ee80ea641b5808c5c9ba9f
SHA512	68e77532768a21d39e0dd7083dbb2c1251e3e397d819ee3f95a72da0d22b88cc37021888ad15ae10db82583513497efd889506223056e3716c84d75add141cde

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Cng.dll

MD5	6597bbf8e129be4e2352297bfb245ff6
SHA1	398dcb8a9108c2ae946581f6349c5b6a6549b639
SHA256	643e1cb8fc16d1267926f66a6bd89c899044d84468a250f6fa56c6d92eb2f207
SHA512	f73a919dadf9ef23d5731865a6d007d41d5db9acb73f631317146cbad4953e1e8d0f9a5df0455cec1c0217efbe6edd8888f32a7196b5e73e3165ba24ce023f41

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Algorithms.dll

MD5	a38502388b46281d03cbc7d0be0df0e4
SHA1	54a114a0339f9a77ff6f948ea0af1b488c455172
SHA256	d7e3cd19c9c38982fdb7d345eec2951b47a12b80491b152580c4016aaf2ebd83
SHA512	a9ac4fcb06a1c75ba8a4e9294c5e858f33eeb161292508fce2cc38366755b3f376637cfd7920955b757d9a13dd2db18c71fc7a9f4719422f2bb5846cb930cdf0

C:\Program Files (x86)\TotalAV\System.Security.Claims.dll

MD5	0e5656d6538cf7f0286836ad02e5c22e
SHA1	da92d7516015fbc7b9e2756b86ef9329ac7acf9a
SHA256	a89235d45ec5c580d55c38be3b77f7fc73213e566d63dbc036d5f6a6e7e7b6de
SHA512	188aeba2cf98c0d03e8a32bd325f02ffad92c259875a9b83513c75dc42a73f84e380282f08a4c1525f8b1a2ea7a3ba7d3fb0a4253a3228dd6bb8bc7a3265cd2b

C:\Program Files (x86)\TotalAV\System.Security.AccessControl.dll

MD5	c868b7b695fd2bee34bc2795827a7b46
SHA1	928c996e6074f4e5e457048a98a7251f76a6d004
SHA256	7ce09376a9b66e23f1566a77a3f6327f08365fe10f887d349754b427a5f48f57
SHA512	410c5d404390743de89a8934fc1d65d3eafde2f4b72e774cc02511859e219b6f2c5cabe6260d067b93f699858bba0e77444de652a72fa263898d2c16522d9227

C:\Program Files (x86)\TotalAV\System.Runtime.WindowsRuntime.UI.Xaml.dll

MD5	d309bd3de14a64e331408b0be88d098a
SHA1	98b40667de331481624b3d964738b012c9f21e00
SHA256	d7ba2132369c971fd9e5aa47be4f378f6030b42bcd73669bd7d09e7a0aec6347
SHA512	b25abb1cd779ec823e71511360dee34b27765480e1982eb1e37ab727c0bb59b97323d5524e76244c8e2e27f8fb6e1893b006ea2c1e25ccd7133a12a0c7a80f0b

C:\Program Files (x86)\TotalAV\System.Runtime.WindowsRuntime.dll

MD5	56edd7e41e06bea54a9259aaff12168b
SHA1	4f6439904a1ce70d806ad1016a2c6bce72718a62
SHA256	1eab2a5ea074dec1a6ead80d1361a9fd4317e1cd334672c9d877cf49ccfe5730
SHA512	e21f42d166fb5a62b2ea1dcf92eb60b910c5a3ccc2426c2d0d47491805371206ba04032de661277cdc479ea9064fff8a0e61835a69388b976a2724a8a831b339

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Xml.dll

MD5	da0ce89fbe65aad22491dfcda27b3932
SHA1	1044b5ae24cae2e5024e85ee23c0352b258995bf
SHA256	be6577e9a5c0b5912fff18e6980f091baba819c07489244ff6e71af818f5dba0
SHA512	73805aaa93e103c0ae23462737a40e64653708f5a0265f273da1ba363f0d26e2594420ef0da97919e94a3f0f27fc0e17b540e4594f566597814ad9317e9f9042

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Primitives.dll

MD5	b1ac878b1603bc42deb8f1202f4ce38e
SHA1	9e565041902fee54b889cfed6ea6459e92fdc9c6
SHA256	40055cbf3662422998e9052106562383c634c1c7be21b2e7ea5c10c1a4b74522
SHA512	ad6698ef7818b7f6ac4d34ebf1035819b4d61cb8f3c2fa6b8b12e8fbe4daacfef05e2e383f1b00900c8ee34bf57a5d9c587ef70ed5de9e5b596c53c796edfe61

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Json.dll

MD5	f0e4bf6c66891eb5255a95d251f23e00
SHA1	f05c447926d29f8a7dfcfdbc9aa22592205d1761
SHA256	03cffd90eb6c909adfb24eb1b017aaa6e752765aa232d154e7668f4f0fcf5b00
SHA512	ae8f4ab4d104c122ad7a29a476237cbb08ee3f7a7119788a7e3589c5b3a714ad5c9a0266f56b6e375aa89bef0acf84b15a2d8771b5a8550c1565d9fd9a8f4dca

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Formatters.dll

MD5	e593f58dea6a2a5ea87c4a05178e3306
SHA1	a718d75bd070227daf4611c684ed0a4dae60c372
SHA256	cab5210a66f89d054e31a4204467c3f384c1fa2d308dade5344577c7369f9828
SHA512	ac1b4adc0c793b1ca5bfd47d68ee92d77be0c53eade54e25b845846458b376c25b66fc23342e065d019aafc303b388f7bbb7fedfa73645b93ac49477d2331850

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.dll

MD5	b932a7eff5de419f286a7325cc0befa6
SHA1	e3aa45ebb2ffec8c1681134f54d0f533d541c899
SHA256	33485af8118d494ca489a89f8f2e21c3759ea0317ea6c8a5fe541338f5c3d1f8
SHA512	6708fa3eec64a927145dd5bd174902f5c612700f0fdf782e577a7a7dcfb07256d3a43098aa9415cf038baac840194fa43ba0865fd451c49520e45efc4f6f64dd

C:\Program Files (x86)\TotalAV\System.Runtime.Numerics.dll

MD5	197c856f8ff7cab7036fbda26fda048b
SHA1	585e7aecedad5e9832a006a26a8ba05d834ed2a3
SHA256	aadc9d0970fe22d1cb9b8b3356b569398ad035ceb8c766170eaab776f7c03a4d
SHA512	c979c5a758e8e1d18aa897a6924786a592c4293f1cc25adc509251f6ea205c6bd5c28c2e6cb958a51e187d6789ded1936f16691b089309e6ff9a5434d02c50cb

C:\Program Files (x86)\TotalAV\System.Runtime.Loader.dll

MD5	0fe7d237ca3d177478dc6ea208452639
SHA1	d675e3c84b15848b9181a5fc2777e8ae09c81ec8
SHA256	488e674e338ee83eceb170e8eed9dcc642107497525a93899a45e7b7361a7212
SHA512	59c8ce0e7b4cc8ffccc613983360d1896ee70354ee3e9a5c26d9842e85e9afae542fe0f44b630376e12f6cc4fa6ca2357107cb68e7b84ff89490678d731c32d3

C:\Program Files (x86)\TotalAV\System.Runtime.Intrinsics.dll

MD5	a4e941e6c7db06ce5bf1681ac107c1f4
SHA1	33abf5f6c201adc05f404ba7f50107762a8c2b35
SHA256	6ce5ead1e4819e5ad89096c854b771a4871889bc99d30390622e76d6f76e99db
SHA512	9db864a06c48885a4f21776cfe42d47b20edc5a6d6dbed38407e3c6c3bfade2b9670ce5ef59275d12275c0b9816750520482c4c884c152350276499ff4b44935

C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.WindowsRuntime.dll

MD5	339e490c340e20e9b763cb2e3ce44fff
SHA1	0cd8d1aaaa95a1b1fe942e41177f1988c3245168
SHA256	5cb4242180d7f0e6e5f2148fbfe8e1f5e0e796ea0151648f6990bd2ba3ddc9b9
SHA512	a28e7837cbadf3b9dd0b7efd67d4b18156aaa59f76488c0c8016882701ce73e4e60e0cdea41254ac1c3be3baf00828385969cc97cee9be908e8dc5fdf347fb56

C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.RuntimeInformation.dll

MD5	c199b752c2fd8153b1f3bb3ae1d0dbdb
SHA1	8be64ddf412ed4ef3988562c0e2a5903febe2ea7
SHA256	8c95905d412d406cbb9ef03536cd6b83a474b1d630187ae0b85d483df6aec38b
SHA512	7116db56f6da057c6b9e5462c3b06331c96b52659de7df7bf09297822ae7f1d9eca4ba76456ec7e5d01e28183a2a80f173ad62e9eb653782a281bc2accc420da

C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.dll

MD5	b57f607811243f83f754a6bf8908ea69
SHA1	f1d7286352ae7c3d69aa30ff190a5fde8ffd8b96
SHA256	458fd4466f84acbfa5a84cf9a403ec8ed2dda111fe985523a3d51081a3e63b24
SHA512	cd3b375174940b4e8a13aa7184911789d4d6c67f01f02f7f085c0a27c94309bf7231515784e06bfea21e84c903cf318f42c542c9eb8cbccf3f67f451d47081be

C:\Program Files (x86)\TotalAV\System.Runtime.Handles.dll

MD5	f5d7e2631a4d8005681c499790e78c57
SHA1	66604e689fe487539a95e9967fb9906f28a492c2
SHA256	220235cf56edb06973c7c234b03a242f0dd3aa01032222ef295c798d589c68b8
SHA512	6de423361c8a7a034d7d6878a3415e163a2c1c71abc09bb39076e71a9ff7d0ea4f1c36a342d1d99083ea2e8636ebfe968742428977fb5e4ff9db0a21e33d02ac

C:\Program Files (x86)\TotalAV\System.Runtime.Extensions.dll

MD5	4ebe62c159d77fe4f61e33f9770d5934
SHA1	74ceb072d4db9160e8e02bbee0a9540a47dd791f
SHA256	f52450c3184f1657de8110428f92930f0ee4acba19c030573bf72fe2f30b8499
SHA512	13404234a035523ca3867681a5cb926b8df3db3030e49d170db816a4fc4919e13d7f42d288d7b6c791c850bea0f562edcf5aebd6be0f8e779fc3f9e966e43e93

C:\Program Files (x86)\TotalAV\System.Runtime.dll

MD5	64b6db4e5edc35b1f0f4f8661b1bb5e8
SHA1	816f75651ce029b26284796f1436e229e06da9f3
SHA256	9e1b4b18ea91fee6a83957212e2c33ca1b332d56726e45482e00dc28d82e4444
SHA512	219d8163df984415d580737dc23720f1b2d64b4ebb03ee40a5aef94b50e5b6b2ce206cf307d58dd9690ef021ca9df1cdb35380256bfce637212f4695b57032e3

C:\Program Files (x86)\TotalAV\System.Runtime.CompilerServices.VisualC.dll

MD5	9a8eaa5b280e82638af452ebd25f78c2
SHA1	984d46c36fc3f65266930fffffc5634eb04ebba8
SHA256	5dab8eee6f0a678e2ac77070dfdc69f6e69710097411b636106b3dd43e636305
SHA512	190e66d9187031a7d059367e99f1b719b411a8bc03798ec06a75459284fdd4f234f28fe87330500ad42caa272f9b50a28b27ab41e6989a31283a1788e452e40f

C:\Program Files (x86)\TotalAV\System.Runtime.CompilerServices.Unsafe.dll

MD5	b37ee0006a7af7ea6019953bc6a61b78
SHA1	ea2cb754391e2708065dd4cfcd87188de4015aa5
SHA256	2ca3f57881e415d61a43100a8ea77e69d983f9d1de14971381d240a1e21b3370
SHA512	005bd3670bcb0f848bbdbdf673980a2f086c2844b0f7db72c400487d67cabfd80922d0ba09b93623ad942ea057132146e4869844d7fa2c9086b5b0b4b7c408e1

C:\Program Files (x86)\TotalAV\System.Runtime.Caching.dll

MD5	ba1e94ef700f2aa38291e841394f139b
SHA1	422f5514e43624f9d4292898a0d95166dcaf2889
SHA256	53827519463567379b65ac781b0c3088910eb62d4519069a0b138209ab840463
SHA512	1c32be97b2b407ddad30b2f8c7d91518d77b28572e52313f72e4d3239383f12cb94759c23e3fa357eb4d1c7f242a47b67635f9f7d53ddc80a5d7cbeb98a1a23f

C:\Program Files (x86)\TotalAV\System.Resources.Writer.dll

MD5	b5182580bed8747fce8e6da01b48a711
SHA1	6bca497bc286bef465b7a213b99d32543960fe1a
SHA256	b8642692a063153c1259ed3bd3da86f29e97a36e79464f89d5e41c75f1d2297a
SHA512	1bb4c94ab69aff6f20449cd3ac2dfbef6ae4645f032180aabd4df87a2a4ec9e2e2b58c61e6c4802af708a2bd88254a271da5a520982b57d3528a9234259b308e

C:\Program Files (x86)\TotalAV\System.Resources.ResourceManager.dll

MD5	4a6103f73c8d1d09f2cb9e3cdc36e8d3
SHA1	10f1254be423afb56b69e9de283aa580440d5ed6
SHA256	794aeb7db6dc66a2bcc6f4f008fd36fa85b845ee34a17608ae50866e2d8ec475
SHA512	508f0a592b50a2cc95ee2c7a5ee2927dc0eecd1e7366b321ebfca27c428118266e191165ec1c2398e68316f24acc8d7fced69172ea676a5551e28dfd4b0e0402

C:\Program Files (x86)\TotalAV\System.Resources.Reader.dll

MD5	db9be5a675c27c3372c3a4fe6e9d8ab0
SHA1	3aea5e6da260603a0bc1fd7c5d88d11fab90309b
SHA256	97bbd447452e22a0f6efaa7ae954e12972862d5f145f5ac5e6bd89a724004315
SHA512	49867ce81552d45e8b8cd783ec40f5eee7d5ad41cafb964c518fa4df41ff9ce8330a58fe23e35df89ee13f37822a3bd87172588d6c92d6f22485db833fa4c98b

C:\Program Files (x86)\TotalAV\System.Resources.Extensions.dll

MD5	32c8ed263f97917cad7006a047366338
SHA1	1479c22419fe7665cc4190eca2fdd7b01b19faf6
SHA256	62616f161c44c7ebf81096a1a988a03382390ebc584188ed850a86ae9132da0e
SHA512	959b600000a43dd1448940afae67a31f0922dc1186a1f881914dd11f25b6de46924aa406788ce79bdd2970c5706c6e0a3eb170bfd600f5405d2eb6a7d2aa4e49

C:\Program Files (x86)\TotalAV\System.Reflection.TypeExtensions.dll

MD5	3e8f4b0637df5aecc3c5f3657670e57b
SHA1	a8cab6969397ef22d62ba58c13af23ce8c735838
SHA256	5fc95a1f86ff697dc5014b63a5a83e1caa14e32c5f8338fda4d44f800ab6300e
SHA512	7214812d6eae65bf3112aa1b37df80688644bed47506435eb81c09ba1ea91a6953b277cdebb3f50ed4bccdc198414c3b1afcc8360d77d260e8899e1425fd2b28

C:\Program Files (x86)\TotalAV\System.Reflection.Primitives.dll

MD5	f06e221e71bee1cd85a4bab2204edd8b
SHA1	993e991da4b157737570ef35804a21df698ddfed
SHA256	a40b9c13765d8d472b8efc72e7c3c096c4891d6a401d86bc2ae572d5c935ca86
SHA512	6ac740b1e824a87454c0ea2bf9a705f03cefc083a61378671a7b2fb52c87eb36a113a97a214b762d16f09be048d839b737a558246993daf590075a8b50740f0b

C:\Program Files (x86)\TotalAV\System.Reflection.Metadata.dll

MD5	6af1e722cc4a9d95182aa2a424f2dac3
SHA1	3643e6962fce9e22432ea7ae1ec2bc487c603c33
SHA256	0f245089855c80a8721cdf9a27bfa3bdb05a0189dc3f02965223a8aedf86f282
SHA512	d0f425e157ee66c610d37f1c1945df4e79ca333ae421fb2e575327e8327944ce8a401a4a6d0107335d2a931e60fcdcb8e17c79c98795ec87f661336651a61de9

C:\Program Files (x86)\TotalAV\System.Reflection.Extensions.dll

MD5	e7dc57b5b650fb11b3045b1332228802
SHA1	9c311afa635b0a20e7fde6254b727b5d029bd499
SHA256	2d55789e85194ab4fec5de696b9bdc329505ad37e231ed84e81df7d449bb74cf
SHA512	ba5f2503db4224883370a08d89925210c2d33b7b514f0698e1852e63215b11e09cbfa3522f9d851d29078102eadc5dcb52616b677ebb5d89d5d997f11364e4a4

C:\Program Files (x86)\TotalAV\System.Reflection.Emit.Lightweight.dll

MD5	447a3f7a38834f4605828b22f7fbac52
SHA1	c724b1dcb513fdf4f8dd91aa1b2967ab05988ee1
SHA256	143b6dd989b9b8b1166a941538d8bebc5404b9af8961791060ce1fe68a01bde5
SHA512	ec276b1ce26dbbd013b1572249d8f803829eedb8e9418e9ae1c5a2e141a350d20f9a34f0125c02c3821fcb4f2d6f18c2621e2312df4d49d45db713182b50291e

C:\Program Files (x86)\TotalAV\System.Reflection.Emit.ILGeneration.dll

MD5	628bd7e0e3efb7172ccd55b66f615aab
SHA1	9a312cd8062ed4f0c3ec21646c2fefc18c6aba3a
SHA256	fea02e9917a29f1caef5387506583ed8d2c9f2d7c01eb5f7ad7fcd0da01a3804
SHA512	de3c370585ee4e66d1d9ccb77d80d12194d9224fdbc782251e087ad68df66a6f2906da9abfff381fb39d590cc42a288ec6d0dd4224064376f6e64624a9a1b04e

C:\Program Files (x86)\TotalAV\System.Reflection.Emit.dll

MD5	17408c5a752130433d3d6af8d2807e5c
SHA1	a9d49188e8410741de610e795d0a64b73f0c2f31
SHA256	cf4013d5dcd32b6c39f964775e98a5513146b30da2317d4636fa4af4e151131a
SHA512	c306f5f86f0ffc7e223a16f3fece29e97453e6bbcf732b09f027599437748c2e3c95f9757a45d2900733cd58261ed0cc8196fe632d7f7bb896583af3f2d7fa98

C:\Program Files (x86)\TotalAV\System.Reflection.dll

MD5	f47c4db395043d3067eeaaa9a1363b0f
SHA1	af1680d600a7f297d072f822cd57e393e7cfa293
SHA256	f942b4322db97ef98d5793f6065a749fafbd6ddceedc36293329529e0b0d48c9
SHA512	5f7ef9a1e92906a9028f3c120004211a5b6cf9892040f44cde5abf98545d3cd1d939dd2a0d2fd161e492c1a108f35f51a1bcde19e108e866c87eead590cc4f6a

C:\Program Files (x86)\TotalAV\System.Reflection.DispatchProxy.dll

MD5	54fb3aeda26fe053ed3b0e5131d1ff97
SHA1	9e4df1aec361f6c842d4eb942e93618a45452fa9
SHA256	bbfe484ea179575c0815c8303e7ca6b07d3b91f11bda053b01ff2268681150d2
SHA512	139468ecc83c37d30fee8ccc78b53255463b6ee59dc8cee9989b679df2d1fcec3831bb8a660ee816704a70ff9dc8cffd3a8d5a8f9b3cde56ecc767144dcb29e0

C:\Program Files (x86)\TotalAV\System.Reflection.Context.dll

MD5	bee24da2f0c8eecba68a7cc8db032064
SHA1	8f372aaf605c12b5d366d5165514db1cf746b8d2
SHA256	b6b05773621a83cca542e4f38e2d2d44c5325e88b75ea43a0eed7df38521f4b9
SHA512	0f6942b2b3d8bb3f104b5f95131142658571364c121173593741e2fbb3ccb602998e0cb6042cf4d2dbc09392d89cfd04889b32d5eec36d94abc4c1a1b152826f

C:\Program Files (x86)\TotalAV\System.Private.Xml.Linq.dll

MD5	08a50ffc3b27f22f7ff624d56a6cea26
SHA1	ba77cba86e6eb375c0f4c1ab5784a96f9e912a49
SHA256	052da987d586b6aacd43052c7fe7bba4a2f5a6a826c0f9b7408b4c55147425d0
SHA512	ce612f7292397ed37eb620c51f1c80d49cd70a92beb90ff0c5feca9ec486b40a274b2d158850e1c64e51ed10e5e27baaf242cad2ff586bd7df5a591100662a6a

C:\Program Files (x86)\TotalAV\System.Private.Xml.dll

MD5	77e1c05c3ba6cbc88053296beb5c7c9b
SHA1	578ec73ae90456858975d57b7aea1796917db4eb
SHA256	dbfe6d65aa70e30c0cc6a06b485ae9de48e362ee60d249a52820274fdb260f63
SHA512	34f46753640c6dfd5eafd4a286887d34421449bc09c0c456239dac50cca2668076e993e438b9ad07423e8536f603304425187d67e4cca9565d3d9ec0e021e0af

C:\Program Files (x86)\TotalAV\System.Private.Uri.dll

MD5	933b4b3ff0a4ebc4bfd3965dbb14c04b
SHA1	c9d81317e4ecfedba340c4e30a94f5fe3b7e4b15
SHA256	14c68463ab43820e1c3948c47ec18ddaa43d7b92dac676559252e7d4ba820aa2
SHA512	02da3cec351a6c4ad2d45fc3baa1e335c5fdeb3ae36af071e45e410e24c66f23c55a50c4c833cd0d1ab23f35f5b09d56e30a852cd49fe0cb8059fe345c03c7c7

C:\Program Files (x86)\TotalAV\System.Private.ServiceModel.dll

MD5	494ed53a8d6211fdd5320ed8b525e1f1
SHA1	d2397e0b1c5ede5bac7a8bb63a5f6d65ed009108
SHA256	83fd67d7d2e8e044a26d6135b95956e9aea8f4d075430cb05bd6bd8a84d3f0ad
SHA512	a13e10fa36580de442d9cab85c16f1f3969becb50a024b8f31c75d6b5953c5a1719771cc7a676df92095ca087b5c4650391043958a0539674c1522477e1d2570

C:\Program Files (x86)\TotalAV\System.Private.DataContractSerialization.dll

MD5	b42c8007542aac0fef1855253d220b9d
SHA1	415701bd5ca1e6c2b56775513505b302e6226526
SHA256	09b69203bb0daac0c4ac93c2f893d23e4d6094ec66135543509524f5631d3571
SHA512	98ff9f7c795081c32b7d1dd4f8dc5abf040ebd412afca7a977f50e38ec7d7ba3b6be46fc121b202a17fcd618d75ada6f06466a24bb790b203886b6dd3bbc0919

C:\Program Files (x86)\TotalAV\System.Private.CoreLib.dll

MD5	d7cf959f116b764db8a0d8d556b50925
SHA1	dff30b342248adae4801d17e0310648dba4ea63d
SHA256	9ce4d015b9350831a05fc43ca0230148efac40ad0f3f2e7483c5bf131cc458ce
SHA512	d145561ea7d7312c81d59a56ee4f884fa8fe6ac82b6a2eff76c8ed09021fb16ab73722d800bab9318467798693c926b9a8c05c68e1441fa5c3bae2e1ae60a86c

C:\Program Files (x86)\TotalAV\System.Printing.dll

MD5	2f6247bf408a36601aeac1d9c61f2650
SHA1	ead05e4ae65a2265867a1ea7f9dae90df1d05199
SHA256	ceaeb79be44b248b44bb9c65cb775f39dd4438f4f19ab2b1d65ddc20870f02b8
SHA512	60b124a3f8ad4797bef1b0431293b593f4d1835db7f12aa3779c29e844d9a8206bd13af659fdaab1e7e16fc6ba37f7f8e9eaee38789f2f5f6a9fec0ab935bc62

C:\Program Files (x86)\TotalAV\System.ObjectModel.dll

MD5	dc462d00352c359a0d975c786193ab82
SHA1	f4a64dc0c845e8f1fa88e789da532b5c7ea93eca
SHA256	c035a4384cdf0c6b7f5c086f0c7c55158f1a216365ea775e6805152440c73513
SHA512	1afc5c23e8a6386ccdf4167d722937b9a29d5975be9d3faf2dac3922024bfab608802f6731902e5ce9ca5edb3a2ba5a38301c97af68eb09aad3bc1546cd95386

C:\Program Files (x86)\TotalAV\System.Numerics.Vectors.dll

MD5	6e03d9590582406ea0566f40a5d3c37e
SHA1	c533c0c100089dc318b7bb51ef419d18b5b6dd02
SHA256	daf899631e7d2b6e5a8676bf4ca454ea3a59feac100a8bb1b207ea23f7628284
SHA512	20163b500d14d10b44394692c98f43ef2036c6f9067d5b8fec00d69aaa45226be32042060daddd3cf2c778c242eff7d49f75c636f626f0d21c9f79f657728f43

C:\Program Files (x86)\TotalAV\System.Numerics.dll

MD5	99134c6ce77dbd04a8b90475d7eccb1d
SHA1	2bc6d296ac0e9ef48bb3b74c000f0e4d1d123db9
SHA256	12eba928f088dec978f00b1347454afd6e417b338e54e4aee56d92bf328cde5b
SHA512	1ee73622dc0194fff68d91054843742364f8fcd1f934a0e742d3c7820c805f4cc519f1cc06d9533b432c13cf74d13ad944b7e40dd5d01b70c4d68fb58f6267ee

C:\Program Files (x86)\TotalAV\System.Net.WebSockets.dll

MD5	0ad34522f168f866d09b43ba0c3869de
SHA1	6e2b3665e1cea39a75cf697d460a0f7214fdbd90
SHA256	343e8f7d9bdbae163147781ee3d18e621d36358e512e1cce5b7733b9edefc3a8
SHA512	a55c73a0f8b232695df97e6d6123c96652fc63490e84368b7de9bf75888fc8d3eba4a4b1b6588322c717a5a9af5e356dee8570b8339d6f464ce03de007beb583

C:\Program Files (x86)\TotalAV\System.Net.WebSockets.Client.dll

MD5	309109fbe4c44fa5c71af3e9fd266e2a
SHA1	05453b93560911bdbcc6782750faf3d3f1156657
SHA256	4f8384d0a3cefe42ddc09030c281c14f7204ad2b82ce89a1f3efb80f63801f7c
SHA512	8f695b2796c3d3eea56ae4969053857f1368fcd9e7d6f9f436efcf6c56d2cdc0ea7f21264a014ac5277647cfcea63a6b0b2e8acdb551a1345c7c5383d49f760f

C:\Program Files (x86)\TotalAV\System.Net.WebProxy.dll

MD5	3f7ad35c9e024c0d7e97425a047e0b6c
SHA1	ae0efa232c8f53bd478fad1247f897271ca7600c
SHA256	0c254228fda9d6c4869a39040ba95ae9a51265d5a7990083168b07251302ea04
SHA512	de5875b4c5a62b482c4413bb706f7a1ec63c5efac0b049197d2d79d2cea271ebf882d53bc01c3c1c24defc142126c90eee56b6671aa86dacd63b625499d238aa

C:\Program Files (x86)\TotalAV\System.Net.WebHeaderCollection.dll

MD5	8fb46a733e9cc705a7e8a20574bd04f9
SHA1	c09491ffff7cfdc9957464289e52088eb5cef540
SHA256	c39b4e8ed6085f4598276241006b336de0a7f1b4656c58ddcf618404afe0e7ea
SHA512	16ebd096e0970c573596d115b9d78a4f493585163a6c8ea1a516dc55d9db60494c86ad7e6891a632cd0d33540d464cb84ea5f3bc5998bf9653c278d430df4aff

C:\Program Files (x86)\TotalAV\System.Net.WebClient.dll

MD5	39721fd5f62a5f1c9c0dd8139ab740ab
SHA1	6705bce547f5528abac8c1b2f528d321e1395e11
SHA256	134a691633398fa66c598cec9e1e70685b23f3414878de0e109d7d24e1431644
SHA512	8cef3c30ede35357c479d44821974f8f751359b4c22263d56d5439653c951f7cfd0c6c741bb7a44f38c90430c9f2bd76455f9acf7a5e762e3dd8e7fcfdb5da07

C:\Program Files (x86)\TotalAV\System.Net.Sockets.dll

MD5	aa46a416dd7901c5afbff4f7cf6cd802
SHA1	a3207f79dc4543c5ce2104d9ba193a2b947a3ad2
SHA256	5bd1ecb6641d1fa55cc88071ea455b6df5f8df89df2b1c5497ab65c581dad310
SHA512	0956c1c46b6285a4e6206f5471afa9b845942f353b9ce8328be8c7cbae0b3605c6f8aca389011b62f568e7b59d6bc7be6a14c2234266a1d31727c31066daee11

C:\Program Files (x86)\TotalAV\System.Net.ServicePoint.dll

MD5	b11cfca2012430a64ef3b6399da33d28
SHA1	835233232866588eaca8a9205db40ee1b579dced
SHA256	22c805e2477e4e7a6e34924ba5201d6305eaaaaed70b62017c45c362f7d9f8f6
SHA512	a17fc736509a186c79e96cb00bb914f56f51cc36d08761d944afd9f1cd51a35b7adb2bf3dfe46d4279eae4bea709faf8e1d00b7c908746ccdf28d325b1f75603

C:\Program Files (x86)\TotalAV\System.Net.Security.dll

MD5	19d3a216bd7a232725f2988680a84911
SHA1	d0c2d5298db79ea8566b8a4574a45d5f75a55c37
SHA256	8e9406714192fc391a99579298017066ec899b71954869a475ff345dff366285
SHA512	53e6646481d71e362985273a47f33a7c7689f288667a4e349d6763d4e2169eb8b8487e737e4e4d92979116c589b1dd7094bc057028d704282c1bb1c13b34243e

C:\Program Files (x86)\TotalAV\System.Net.Requests.dll

MD5	e886c545c1c55e59685ebc0c9c297d81
SHA1	434032be177fddaf02995e22f41d2755a084cfe8
SHA256	5ff7ef1283526ed727a3cc02e07687caddee28afce6e13441f0756ce1280cbdf
SHA512	77a7bee18916875883b04e606207ca6ef5558fd90f4407ef86374278a05247aa198f5e991720e818c93733bdf2fa410e12c13933aeeedcd1f3f683209406aa87

C:\Program Files (x86)\TotalAV\System.Net.Primitives.dll

MD5	6690c7c1b22e54dd29edb93f716e2ae2
SHA1	92784ad46f4a9810b6e1c433e73110fc39509877
SHA256	6e0a6ae20b1739644a6123d1dc4ed63918eeb64b8058c6b66d9acbd08bfa9663
SHA512	1439435c61c06496fe72be63fb246f48665106b57f0d81f80985062f939494bdec2ca2fd6fd1ea5bd2d5ab156cd0a677865b2f0a4292b13651f1672f453a57ee

C:\Program Files (x86)\TotalAV\System.Net.Ping.dll

MD5	897b496363f5180dbf97125fc6f0cba6
SHA1	220b3976ca77ac937f76f3639a8c97e6e4ff64c8
SHA256	ec784bfc140fba12eeb1b8f5a70b39e24a91762aab174c7248893a3b6e466c71
SHA512	ff545fed040d1b6d8f105d126ca0d138e4bf272c7df763b4e737f4c11b96ff5b05b133c302426001e4eb411cd46b91801949427b25102d972f5796b9d4f80c59

C:\Program Files (x86)\TotalAV\System.Net.NetworkInformation.dll

MD5	4b5b4e112e427db047d580e8284c6188
SHA1	d3ff9e666d3899726a6db6f5bdc66596c595be56
SHA256	99d66492ac869d82aa7055bd1f6d6daa063db9241cfb9382765b1eba0ee38927
SHA512	7cd1d7e6fda0056401654970a8423c359698d9e0c1e6e0750e7676b998e04d7edd334ccf8db648f22e43afa9b3950ce96bdb76c26508d6dbd4af9ce51c4090cc

C:\Program Files (x86)\TotalAV\System.Net.NameResolution.dll

MD5	b732780107b427015693069d38817b11
SHA1	6e1ee51b77d74108adf22018ba362dfdc5fdd9cc
SHA256	70ee5550a3c3c9ada5f408ba13b87afc01ade4635bc275df0710015e312df513
SHA512	10ee6adae638170b87650afcc8759b0be747343743b9f3f6a3899cb136f13cab0c118e151e954580d651c87f9349c0f50d15b579b38c74ed9fdd6a30ba8b18fe

C:\Program Files (x86)\TotalAV\System.Net.Mail.dll

MD5	af0cd503056c24b2b3d3b0e035633d14
SHA1	7dd22a1050aa226cdfb287b78e313447cb51228d
SHA256	e9e18d6028b22b4d31ee0190769cbcccede665cce4b1be8420d93e03c82bdd29
SHA512	6f7a99a36c36cbaee77544d1871844810c049351836ea5110db41b72f6df54126b77421054645568db2c810b735ff01df9f119160453d402f311eaa8d3ee12b0

C:\Program Files (x86)\TotalAV\System.Net.HttpListener.dll

MD5	13209cbac19f5c803ad3332c5da0238f
SHA1	3f7451603be3adea6052565276d0e6cadbcad7e9
SHA256	e48e82ea2942a1d81c43485ee482c9d84ad8d766e485578d7907122c4c4ec22f
SHA512	9ad5c922788be6f6e0f2b34a27c0df54e248e022f29344b11ed8c72ce1c2d8f66a8937b0b79a4ad704cf9f28c71bae4331a21a2c086d4ac056c856383f8adf96

C:\Program Files (x86)\TotalAV\System.Net.Http.dll

MD5	8f8b534f8dd6d2cdcd17ec87698746ec
SHA1	d50165971f90818ce86f816c15c31744ee8b18b1
SHA256	7e9cf29860d5887e1a17f071354def3ada4778bb1bf1806133375318058d7e67
SHA512	577545e89c757e9a5221f527dc7f96c15afb14c8050667e115b9eaa4ebe02e19d63f3ce112557b7a1913e2e6ac0a4d43b61533f2c9e5845dcc3a5f54de5d091d

C:\Program Files (x86)\TotalAV\System.Net.dll

MD5	c487a49ad997c54bdd1966260b54b545
SHA1	029e74af432792b4d95817ede916d420bcc20d1b
SHA256	2d76431b8c1836c217eb6fe840289b5bec6ae98f72e80ab657bd487be573c7e5
SHA512	fbd37e62e2f6e49c3d6058a34af817984eca0bdee0920abaf7af2b943748ddd8ead24f3fd16a8ff97d2ec4f6de7167dcf6c8d6919f4b9d7a378b5a6fb7e18f71

C:\Program Files (x86)\TotalAV\System.Memory.dll

MD5	6e439844aab932d1ff439b8c929e3f22
SHA1	a9a3b6f2ab33b0003ece721e02a10acce32ab516
SHA256	dbb7584e06a35b6045eeb156dedb5469ae5056dbb45bd689790355d60ec37eff
SHA512	fd2dded613d2d394eb01c4197fb7fb0a0cb5e5289872f111fabaf3e665aa02c23fa19187a0371d5bc2743826b560e1fbfcf9ecef171ba61c75de2fc12429a49d

C:\Program Files (x86)\TotalAV\System.Management.dll

MD5	285ffb3fe6bc4eccefb054d3df9fc624
SHA1	5edcbd41f0410efcbfb9a73063b34659f83f145c
SHA256	342015b3457ead575893f97ccb882e7cc2af932b582223d30771cce65d5308ab
SHA512	dadc0f7f61521517f55a38c777887be42fef119445c043a6004262258260f170373de5cefe4a809602a5c1839137bf5599e187a92b761852891cc80537bc39e0

C:\Program Files (x86)\TotalAV\System.Linq.Queryable.dll

MD5	ce101c7e9dc1d626d9ff91afc09046eb
SHA1	c299217787421fd36f1db43e5bbfc361e9ab888d
SHA256	71e59c2e83cbb97ade8ccd4a7fd019b6185b3ed6c257a0757cbd8adef55f240e
SHA512	649b2c8e55564b66be2038552d2c3bdefb3d28c6fc25ee0be53560c14b1639d77f97d798c0707a7621b3d5ab9ea1b898e258b5cbcbf4e1898bc26b692adae974

C:\Program Files (x86)\TotalAV\System.Linq.Parallel.dll

MD5	91b9077d6aa53899b3a0068063081e36
SHA1	ebee4b820159e69b88a068c2860dd6089d09a112
SHA256	25cc15aef9c67413a2d551c8426c110f73e04845cfef2d27cca6cad5224a4adb
SHA512	b9eaf3d88f06a03c876c429ac337df96626b5c7685fdd7384810a653ec5db29b75d9d4d9b3bc0ceea084377e7940b62232685e9e5b51f0ca3184b1cdb9a20f63

C:\Program Files (x86)\TotalAV\System.Linq.Expressions.dll

MD5	70b144811fe4f21067f9c7b3d20f605c
SHA1	1dd8bc5c194a8efca892b8add2ff777ae79f9745
SHA256	258b767748e2691ff3e82c6b89ce7dbdf3b035891a0e41766cbe91f179bb0eb9
SHA512	8f10ce2e9d8b9e7c3a1d6e840e3d4af4dde8dfe751018f56cf165d5901f66bc2e5aa975dcab5d4f7e407ae6adc74e74966e2ed966961ed34012940229f533a42

C:\Program Files (x86)\TotalAV\System.Linq.dll

MD5	dcfc8caf03a43639952445f7c4442ef1
SHA1	a72e39cae0705b714f3b99d1f7864d7c89648045
SHA256	29b2f7958f6c7ce20a658f375af34bf2bdaada624757afd3fe2559e2e9b37aba
SHA512	3c0ef19e4ac2aca96f5fbc312fdff0a1a20f9a3c60c524cf827eae99f8a72fbb5fb5a1479c36a4a3e0c201cb1f60bdc965bdd9f40e0e262b947a9c39b888fd75

C:\Program Files (x86)\TotalAV\System.IO.UnmanagedMemoryStream.dll

MD5	cd4e2781a48b1ee742aafdd4a3d72a08
SHA1	731afcacf8231c3a8310c4dabea05c596eb17ef4
SHA256	422998cf85d8d8e1b298f444bb2803ed842080b50bbf190fd72426bff9e6ba9b
SHA512	92f0b6cff18debc4f0e87b3234764f3a1ce9da443b0aeac04c878bd9846cc0f1449c713f11ec8de75ee3e4da93ec74e0c054726c8d97f3a723f5b5d89b793302

C:\Program Files (x86)\TotalAV\System.IO.Ports.dll

MD5	cf8254f4b70ff0ef644554c5322003ef
SHA1	f1db876c3803f8d03eafbd7e56e215bba05d7dc3
SHA256	8b4697b44efbacc69dea47d1b7321fb8ca230157df46ed235a0f40aa60f3294a
SHA512	8b9beba9f022a3773629be717f34b106d784287c699291c00e827d1ac130fb5e2c586abd4711fd41131f9b6bb4a07d476f53fe7a7768acecc7beae5792b676f8

C:\Program Files (x86)\TotalAV\System.IO.Pipes.dll

MD5	215b7d58dc533a4c300181fefb629be1
SHA1	0cbf9c6647fcfc1f34056873125b1a18e5dcfd53
SHA256	f2cb16dbf131b595ac2daaea6abd5f39609c9b37e772f4f177771788545e3528
SHA512	54cb54b70235298bf71dd9dc4b2c923b00d5ff3742211509f525899b090a0fe491a3b72643567a91f44c8fec28bba96d57d17406fe6ebd64a66d5d43eb10c8a6

C:\Program Files (x86)\TotalAV\System.IO.Pipes.AccessControl.dll

MD5	9173e9bed16968efe8f7c4a886049f02
SHA1	5c20f947aed3336349967f609c78738babe28a26
SHA256	ac6e45f9daedafd4c0fc8cf2e9efa3fd9222c74939678140d08288692ebe92e3
SHA512	6fb3912486df8e50da163ff13549de5bdf049e220dbe01d582c7339f6fdc0707704c38d8a5acde1beffdd8310d68c2d39c897b8ddcadc3bd451ce8baea91a232

C:\Program Files (x86)\TotalAV\System.IO.Packaging.dll

MD5	941e3abc504d50131bc31e6bc58f22c5
SHA1	8fd7b3df32037cad841c22ad85ae86cab7e6a0f7
SHA256	64e1c57c8d441c2b3b98bb662742099165889644da55f281e2cc24888d2be8fa
SHA512	b4680552ec4fd12d9302b549e2460b2f1499217af489ca4efffe67797d5a5c7b223ce688fdc1e19b087dd4b9a88b037db915ca9f7e7567f2010fa1deb7cf4ee3

C:\Program Files (x86)\TotalAV\System.IO.MemoryMappedFiles.dll

MD5	744fee1c3e2cf893150fc14428642991
SHA1	eda7d8fbeb06452bb80bf8ddfbe8cd85a67e15e3
SHA256	2df35c86f91788c9829f8f75502a5f2c7f014a93d3ff6f36cec510bcac5b8234
SHA512	8a2ae3d9d535d80cfa5b24599a348f5200097eb2f17a6fc9c7d5231936e10630271a6ef8dac6fca932084343e736325e0cb0effaa866556104233f3e2f2cc0f0

C:\Program Files (x86)\TotalAV\System.IO.IsolatedStorage.dll

MD5	53160f475a0b060b0129385c1bc813ac
SHA1	e636b9ee8cecd8413a6ff47bc6c8b777e4ed81cc
SHA256	0a66211216f3d68a6efeaf0263f2f24c553e901dd5d9313aba680de28048baf0
SHA512	c7894bad5bf669683dd1a533af8abb4a6b6e4f7e26bf0b09685b863b4fa26d58f45b93f3b245b8abb6a7353e086acf68411c3746e0516bc5169887c2d9227943

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.Watcher.dll

MD5	801a9b0c3b35e89f7ff62ad5923f131d
SHA1	4f499b81efd19cb5f3be001776651126a8d8dcc5
SHA256	e32173739da64884e502d3ecc24de44913ee19ed438b6cb82c8cf7e8ae9e1ac2
SHA512	c7781a432003af0b77b6fc8349062e0ef09f276a7723f78519844ce24557224f4ed2b51498e82d5aeb7a201c1f01fcf1be860259ea333121fdf42f01a0b78fa7

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.Primitives.dll

MD5	104033f493d5e199b3bfd82180b277f1
SHA1	f0e05b304cb65a377f71a0ae68dbc9172685e05f
SHA256	008d12100f44bd8322a0253bd9791a9df3ac5b3924d704e7db98e3e8749489e5
SHA512	bb8f7d37d005a59bdc47eee727404a5d818f605e5045b8552ee0adb07b87f577aaca6ed61b0eb1141971f051f435ac4101c506c7d55ac4bf35bc67510363a406

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.DriveInfo.dll

MD5	895c7d821f04ae51a07cb5fb0dd4f42b
SHA1	4b24d8f1f9019cd753f490650f95482f3144620f
SHA256	7a65c92649a9ed0944c455a33507f0f7fc177a9f52d10aa9a5adc4c56433bf1f
SHA512	e9df8d55deee4b0b4b31ec9e4b174bda88f7672592f0b943f40513722ed102bf9f590083829414ca63d9596edaf630f76b68b4b8a8016d8144f30b06b165f13e

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.dll

MD5	6033fb3a387e6214cb1fbd9b137cbb42
SHA1	25ef3aaa32dec1b5c1d55bede164048642a22981
SHA256	99beba5759b0c7af236fe633cdbe377f736586ae703c2ef29c6735e8d78f9710
SHA512	6eebf4eb5ec2f3421bd1adb2ba5dac45d0a294c5384fefbba8333b3f692d691cd99d996b9ed71f05c0112a2f20e68d6b8da664fe198d9676946fb7921fb8a36b

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.AccessControl.dll

MD5	3a7a81d6e9b39b18fb00fa9a958ced06
SHA1	f09026d6d6b2c616ac0bc48a9fe2f3c8cc15f444
SHA256	53de97b178a02fbad05d27658fbbd38146b4938b41075933dddf1b27248cd410
SHA512	9f67c566009cc5276107e752d8b80c6dd2593db3c0a73676d47cba140b32f3ae441d0e3d7f7cb333b3288a1be34b530bbc31fa6c44ed159e1486a70e4d8b7894

C:\Program Files (x86)\TotalAV\System.IO.dll

MD5	8ace2d6fd91112ac6dca9914bc4afffb
SHA1	3ff6b44edf62c9164b243e3c585a47ba4b5663f9
SHA256	5bc93b530f357667a2f2b8b13b47e80320d8782f642ebb747137910674125b35
SHA512	b89e8fc4d5ca8628e6e4235a0390ccadeb19e1321379805a4d3e2802d00b19c827fde26c35dcdc65e6d3b04509d71654d9769892fcbb08da3d6e78500c1c2b69

C:\Program Files (x86)\TotalAV\System.IO.Compression.ZipFile.dll

MD5	6258cea236def9f37ce76d19cb8b045b
SHA1	969302144f452946ee6a9eb70a4a53b7f9866e99
SHA256	146171b2d8ba7c6cfc1327e26e4017b08693af5514263203db60d9c43e13914a
SHA512	cbe8c0e73f567ed250d0db936e325fa1a66576e30ce765f027c2c87f32cacad4c51f5a9bbb4bfc1ea3b3cdeec97ba3dc5b300dd7df084f03aaa0016c9aab5b96

C:\Program Files (x86)\TotalAV\System.IO.Compression.FileSystem.dll

MD5	ddbb9f0ce12046992cd06dec451e03a4
SHA1	e0702efc5e7ee7afd7d6dfba92962bece91ee808
SHA256	6b3632355c4ec32e4edc8fd6b6e655d47b8547876660557675153f3e50b54b21
SHA512	28b71a65207359eef8b3294e0396103803e4f27cd589222e5f3889ce17478615391498991a22d3d631695a02c4c863dd3ae0b2bc7e9d4c9747b290dd0afff35e

C:\Program Files (x86)\TotalAV\System.IO.Compression.dll

MD5	e839f0aa073273aa6a75889f19ec1623
SHA1	ff171b601e43e5c249331519fefa5bd527ed95fd
SHA256	e273d82c08d82bc194535807a505cb2a6c08c95df8913f8210a407c8738c75d3
SHA512	9a7b22102b81f03b503729beeec7a8d29f0ab22bf37a7dca43b4fc0ffe01c7d0738e14b5589f5f95fb98228266c8597aa8454820f52830aebb443e6ad17c991b

C:\Program Files (x86)\TotalAV\System.IO.Compression.Brotli.dll

MD5	ad0ff61576e77443c96aed460f540d5f
SHA1	f42abb6f6524404b25d6454efe15289f26285482
SHA256	09362f89d15733cb65f3306b3fd280aa95694d1dfccf16b6c31ade1163f36ad0
SHA512	b12726e120daa1d6292a14ae2228952d2ca9b800dd94cb6e9b0d37280980a348bbb680fee04c3aee29c35a342c28df7d877dce2d480b68e1d84fef931cb322ba

C:\Program Files (x86)\TotalAV\System.Globalization.Extensions.dll

MD5	2b51e34e537d25bf22e0a865d37ba277
SHA1	56bfbb6a8f6b065a24876c9a469163c832e8772a
SHA256	bd41ec1b117416b3abce7867c9aa3927f7b52114bbd3a979c6fa60d0fa3f49b1
SHA512	cb553dfab531eb766fe470f753d758acc13baaac77d52f49f052debc2d549c080d608da1b1afda55966c9c864dc187f1a75acafe0dfb8dbdf28e6a112cd28f43

C:\Program Files (x86)\TotalAV\System.Globalization.dll

MD5	4a00c73a2b8f7bd5bd2349bf189306f9
SHA1	f86d3eeb69fe26974f5156cc35e5209300702b18
SHA256	ea40b3d97d8f582e4b1dfb4425adb0f0682e3cbba03e6d27ba6afacfa7408c13
SHA512	84a3f7027e93200324d60b4d854b09a3a374e802d99ffb7fe9ae8cf797c90e155597b5d17f2dd2c64c69096f64bc6ecd25ec502dee170b00ec47f00be24fa8b4

C:\Program Files (x86)\TotalAV\System.Globalization.Calendars.dll

MD5	053d592bb5251b2f15a3391223c9e167
SHA1	db768f758582f9c43c00ac4e66612bad76a4b539
SHA256	973d89ac235160df9128d10f5a5bee2d131ad7debb148f5774c2579d97b3c4e0
SHA512	5ac7ef2bfa825dddeb085a8ae17c936b71240d69d36a8395db856ee436da1b4e751a7750a81e8707a269cbcb7b1b26e57bb24db6daa06db28965c77636400473

C:\Program Files (x86)\TotalAV\System.Dynamic.Runtime.dll

MD5	e42b0abbe713da1f9d5ff21883c760cb
SHA1	3370c376fb512dbe39cbed36d13cd11dca826d02
SHA256	02691fbf19e669f9f15fb6c57f8c8fe565952345bd23f8eb79acf3489c7aa6c6
SHA512	8eb130cfec7381f36b408108b3bb9bea27c8c786b3fdd1a0e8ef997616e1f33a9da63b2643f4af95d6dfa3978cd8968035ed0e7b41ac88b2e814150a482431cf

C:\Program Files (x86)\TotalAV\System.Drawing.Primitives.dll

MD5	7f9c4333e71b39c53c460ee3b0f91bda
SHA1	3d98ca7ea66103d86c45557a139bb50d46ad503c
SHA256	0ba7867b6531edc491d6c7fac8b2e15645769cc74d05414a41e46b71da9336ca
SHA512	b00ea3eb03e83c1e6b7a3cfa518cc870270a422cdc07b28e4d37870e1fe4b1837e6efa92285f28781de05855ad2c533773ff1c311fa7f9903ac446b70ecfcab6

C:\Program Files (x86)\TotalAV\System.Drawing.dll

MD5	9148b038a5d96921b2c18184720c1fc8
SHA1	436edd5ef5a7f521f779fe84913488337aec0193
SHA256	22f2d62131936595ca34d0606add4b0a8539baece15fd13413f008fb4ee0b0ee
SHA512	b2353594720cbf00baccdd1f5ce0f7440b7bbeadbf1e464f1195ff73422dbd4af4f64eb3e64b35d4b68d71efef1e7970aa7d8a7b837e765fd04bb0f21d1944ca

C:\Program Files (x86)\TotalAV\System.Drawing.Design.dll

MD5	16a050bc879bbf76a0d551b33d2a65b0
SHA1	c838d9fd10cfb8a92f0e9a34eb8f391abc100d11
SHA256	04a476dd96439238ed5dc55ed9f20c398a1137d78a2114eeb9c8c9de0e827b64
SHA512	d09b542f398261c18a34ad5591a510522d8dba00d0ac810e0ddc6384acd3938e8921fd00605d7dc5f4dc6fccccf8d2eabab7f52a42d855ab39b2b97d266b67be

C:\Program Files (x86)\TotalAV\System.Drawing.Common.dll

MD5	2ef2f0ce051aa32bb7b6c2a7c2368b2a
SHA1	a52555856df1d36b042480fca79769c8ec9b10cb
SHA256	b676ff6768017fbf330587af4af00f08202dd0fe6d8b42ee91a833a320d81270
SHA512	05b7119233e9441684462227ba6a3ff4f6794dbfa8e4242510c886e08e54ff89cec2bfa78f6fe845fe9b150ae68ce6479aadd3e10ea7959dd04756bd591f5eca

C:\Program Files (x86)\TotalAV\System.dll

MD5	693e8bd37b77003f5be42ae1bbe8ee16
SHA1	7e8e04c3419e2f73f686b21c8380eb8cd0f560c8
SHA256	f0336b00407efd004cc5f7a8d47ceb16bbb89d1edadc951ef090f5c97e4f3f26
SHA512	03948a81c406d3c800ab1580e78aa698e8aa61f49e1a147a6bfaa3b2bf688f7dc472e2f80cba497acc2dbc866a3291c709373239dd2579c0a94f0aa21ef440f8

C:\Program Files (x86)\TotalAV\System.DirectoryServices.Protocols.dll

MD5	3e30539f7b5718887d8886433cdedf6b
SHA1	5b84bdeb9f807d150ead048bba680fc511693b3e
SHA256	5705a01705fcd05fab4fa91d3fe35338898cf6bda8375dd6e172dc8d84969648
SHA512	74269c9e22705c0fe14b3f6994b63a3f1404d66980ee5721ace10c0a4b301cdf615be8e537a4cf03702a1e03951f10264562aadac0891ff31e477d62fc781657

C:\Program Files (x86)\TotalAV\System.DirectoryServices.dll

MD5	e61418e77cf4b0b77ab3d808efb73548
SHA1	94e6bdea7f1c4317f721b611169d9ccf6c239699
SHA256	d176f4579c03fdf4660353153b20e2063f348b6becb9b073449cc5c1ec5ae745
SHA512	76c02a5efbd26d63e049e5d1cd077de74dbc06eb19d39d997089dbc3c0478e00a13548f1e38121b9e4aaa55ee987bbc27607f8f8042ef7b0b04cadb0caca1d89

C:\Program Files (x86)\TotalAV\System.DirectoryServices.AccountManagement.dll

MD5	cbd45c5b94ff14408bc443e7b95181eb
SHA1	6e06d9ee36f29adb10a6b12f1425454a48956f96
SHA256	3492d44d9fb05b07c0c7302b85dab9dffbe522085ded93ff8868ed6bf5e162f6
SHA512	0f9edd0436adfb3ed3b4f4a835751395dc76cd1f220b415d76e99255f40c2ae053c07e3e90b330a46ca7e3161b101a9d6bb92b85efac8782e2a334b4ca9ae2af

C:\Program Files (x86)\TotalAV\System.Diagnostics.Tracing.dll

MD5	3a0a716a5f848904872914343df34f16
SHA1	e0970e5720442204acfddb2ea0b24de59b4241da
SHA256	2d4d885ae11d80c2499dc83c4e884a749cb64f95b297ad9ba0b5389f29fb79bc
SHA512	3d854b60438adda193d50529b091b1b4d0441bb5aba48a6402fa2c3a8cb36d455c48326db4634c52df2a902986e36b7da1d06d32732cd488d3b5ef1bf7160739

C:\Program Files (x86)\TotalAV\System.Diagnostics.TraceSource.dll

MD5	c88cd34a9ec7d7bfe34133e1cd5a4801
SHA1	3391e707bd482a7caf85ed8a546c1e88d543640c
SHA256	3911650b7663fa60e4f2d4710fded59030bc35834d7c6e70db1d36c12cf71927
SHA512	d21db07f9f0cf2be2d39cef58348f03f5214cb82903d0c96bfa3a8cd7f1eaca04442ad14b5fd1347b9bb80ec9d2462a96553d344124796f31c70d2118daf5934

C:\Program Files (x86)\TotalAV\System.Diagnostics.Tools.dll

MD5	630b7d2500dd8107264d2c9253fa2956
SHA1	45fb7c9334f9e1c1a196a860945ad0e631ddbf82
SHA256	3fa65d869a931e705cbe1e2b9b12ae6b15520db0719129311dbe4376fbfb7fa5
SHA512	2a27e56bad0577f681c078e82f99b6daab988b349fdd9e90356f5e0436b7ac0ba54894139befd9eb93d7390a1b2f3df7204599975e59de862817bc649390d063

C:\Program Files (x86)\TotalAV\System.Diagnostics.TextWriterTraceListener.dll

MD5	d638a282b89c495d9c2b896287a6bfcd
SHA1	e5c92ba20dcb1101db432a5ceb29a3cb51af257d
SHA256	b4dc72c1254a16af4ff47ebea502d03b28d03c72302ceacf5993c05a0bc3ac6e
SHA512	2452a1b4263bc4235c4a2e076cb8c279ded0ed4ed6bacdf8c0d6175cba68414effb2aaa947cf941da1ed42858d209ad33382df3b8136f85e89670fe87b0cc8bf

C:\Program Files (x86)\TotalAV\System.Diagnostics.StackTrace.dll

MD5	0290c1b9f1a55e5a1692d0e1271e960f
SHA1	0c91a85b97d8144f04271d21022a514766630e74
SHA256	669e9c108229b377ad55e11d5cf9cc6d033446ed197b55d6182ea8b513b86905
SHA512	3c9fa67bb229cd318e030024de4e391643579e2c0413da9e8af30326bcdc5a17094f0966d68bda33725609c02d5d668c0538780a12e72052996ed691d3ce1655

C:\Program Files (x86)\TotalAV\System.Diagnostics.Process.dll

MD5	1e5c97d7b9b2db167fb2e6175bdfd281
SHA1	bedea0137eea277691216b1c7901eb9e43bbb451
SHA256	e935a1a089e4ef56fbba1bf4ba4745790555cd83db8cce1110850211db11bbef
SHA512	a60adcf02c9a5b690c4081c11692382b55082c8caf5cdcca666e6fe0dd4a3a31d6ed4de0ecc129bf8693df1df0c4bfa86ea89f84566181508224aee6bd7cd566

C:\Program Files (x86)\TotalAV\System.Diagnostics.PerformanceCounter.dll

MD5	093e29a3ad69fa2e61eb0909cb300289
SHA1	e6401e509da0247a2c3d56f78fea9b76c2e33404
SHA256	ad428d16cdae6b76e9802b1dbd9d8f16df55d782477410675db1d847e5d3fe95
SHA512	f6bafbffc7fc0e0d1890a061f0e06798706a4cd48d7ac569d875cc31bef1ac2ddf60eb32dea69c9829decd23f5ed11ede24fe50ba5884937907497dd3bc3b056

C:\Program Files (x86)\TotalAV\System.Diagnostics.FileVersionInfo.dll

MD5	53c1b501125cde723c149a981275466f
SHA1	e08cc61e4dd50ab6c274df4dbfbe5031167be391
SHA256	d53a32399ddc0a04e9b7d48864c5fd0df340747504827d65a863eba3169cb160
SHA512	0ca14eda2fb53a5bc7aea7f57cee07dcfb3db09b13c721dbbe743a83d596ee9e1be458736a62381da9cffa46f2d0da93ffdead1ce6ce7984a5aed38d650bb1af

C:\Program Files (x86)\TotalAV\System.Diagnostics.EventLog.dll

MD5	d975f4a3de1da0f9f44e44fefddcef83
SHA1	f2f9d4bc23c7d49832f49b5d080e6758a2bcd0bb
SHA256	3e585a43846e5817c72a48778759232e2e9328af4bc6ad7f04804a11f3918a19
SHA512	819596d1438a7ce211470555f36e254e9752864170aed6535605afe148511527f339b9f900962f98a70219ca71e130e48cd9c743a9c0dc20a8b0e26a602986da

C:\Program Files (x86)\TotalAV\System.Diagnostics.DiagnosticSource.dll

MD5	bcfa0edc100106536e6104f183307c63
SHA1	3052823d30795cb08147eff4686bc58325ca4fe4
SHA256	c6befd0c09a36dcaeb688a5ef89e991187167e2153f930bf09e6acbc9c59f897
SHA512	46a16abed798d67071212ce011a9c251c6d715978c715f140679873176d33df4b8daa090a7a9c99a40ac086ca951df1de744d2fc1ee3d4f0d74d495e253cc01a

C:\Program Files (x86)\TotalAV\System.Diagnostics.Debug.dll

MD5	5c4209fc9564a5aedfd35682fbd99ca1
SHA1	27f028d41cf905d0371c71e7e0b09fbf939264d7
SHA256	ff3ce0f75423aae99fe0783ce99ae67508a3ab257ade509a8cdc0770bb97c0fc
SHA512	1f6099afe1d03f0761381d5597120036dae4794789ea60f1cef232cb161d70f73c5614b48205983040b0166e5a05c09447a1c17c893828fe7db5c04974fc98c9

C:\Program Files (x86)\TotalAV\System.Diagnostics.Contracts.dll

MD5	ca01cc510c6eeb820119263487a0f31a
SHA1	a260cbad4557c5ed85b8d9fe44910d2eb27c67b7
SHA256	9c292b4d80503530430658410cf41fcc73ca598510522a985a0af0dfd5553aef
SHA512	9c272c57de1f62f7e9c43714b893f08887e86f6ef6c5f048571ca342dcc097254902f901a6fe4d83485f46d1319a4c0ed89d6973fc68e1387453827cc54d8c3e

C:\Program Files (x86)\TotalAV\System.Design.dll

MD5	c5f8f18779df6ba0854b7673cf7d08cf
SHA1	2db5a071cdbbb08966d64f2e5b6aefb48914f5b7
SHA256	94cbe7ce7868e6f134c193017992091ce4d2b3e976272e4f55f74b4d34e31dd6
SHA512	ff0357685c6ed1b6ded84f5fae5db99d6672567c67ea4ccb598094dbfba565e4348fb3274fd3bec350fe81a3ae36bc358a82dd50b3dcd5be5693189e0409f1ea

C:\Program Files (x86)\TotalAV\System.Data.SQLite.EF6.dll

MD5	4f428be996d234e1e66b4651d5850f8b
SHA1	4444f6b6e5fc3b117abfbc097358932a72986532
SHA256	6d76c1b7aaa70c319d5802505214ec734ecbaed9f8e9776168e25ff0808c4185
SHA512	302ef1ebc733d716150470a37c21fc8037b0ce2404a98d73b94c84f0c015e69a1c3249d887605ce577671c20d6c5011be6e3d5510a774dc46f2e214115fa5491

C:\Program Files (x86)\TotalAV\System.Data.SQLite.dll

MD5	3a3dc6f0ff7b9d8311b62243f45119f1
SHA1	13ad0df5d3914bf4529cbe424275cfdefcf16aec
SHA256	27869ae8706d91d81e29b669e8140abd8b6bcd0c8df18e70fcc7d6ecec9469e6
SHA512	031c7ec34f07499f94cea63b09dc53cb3515a139cc60c0544c76be8fd6f9211f53a7daf927b5d1487abbdf945ac51ecd8e8d82b48a706c6a21173276d6b45c0a

C:\Program Files (x86)\TotalAV\System.Data.SqlClient.dll

MD5	f40298c4e892964b837b3d8b61a5c103
SHA1	e0eafd79653a53eeb3498087a4bcedeef7f11046
SHA256	fa4c1ff23369da57b5629fcac7ab9a9dc1729d57d709c4f8773dd78dcc35c2b2
SHA512	eab8793ed77e0f87a7236e30946275b53d383f291a49582cb795fbd774e042d31dd241ab4fbd8e7cec0ef62197a9c86775d3b76a126c9f85a1a4a8bb43a70bfb

C:\Program Files (x86)\TotalAV\System.Data.OleDb.dll

MD5	696b0771a3e4563dba4f2dfe142f3a61
SHA1	5d110f65b56140d1a4f71f18162bedd02e04ad46
SHA256	2ec6f1fa47ea95e42820119bdea16416dbc99ccf9993e8c572b65e2cf13eb71c
SHA512	953adfd1aa41477f07cdd821d5c9de6afcefad7062a1bfd41dfc5054f37048511b3db2dd17cd21576065287fa44f59c7f3dcb437f426d77c7a28d61a71485a26

C:\Program Files (x86)\TotalAV\System.Data.Odbc.dll

MD5	17219622e80e5992fd7f44efc3fc0ef2
SHA1	3902c70670f0bbdb6fc58c7dc84cf92d9ea47e31
SHA256	e4ed82f8cff2b194c223b7cae7dd67a54f433fa27e895ec216c57576659ca7cc
SHA512	62defd5445bb88705bb8af9b5ca3e920af0472b075f1f5cc05b564e2010e3d185b54528cf16f5f3b198a5b712cdcb969314915be032ed0040c3424cc3a0cb294

C:\Program Files (x86)\TotalAV\System.Data.dll

MD5	ea3dc441ae295b4f6fdd6aa01fee2411
SHA1	23475b7bf62c9f222f6c2c1c420593ea45f77c9f
SHA256	4c080437275d09e0d0ccbeaaaf6bb6e9098444b47297fab1ccd1a1ca4c85292a
SHA512	11914e4f87c40416509ff6c1eaa91f5eaf57c1b36ad7622b989985389f2d406da2a27e7965998edbca02e635dcc0a6d3e8b2e8f2686d9c7b6775443ffdd2a57f

C:\Program Files (x86)\TotalAV\System.Data.DataSetExtensions.dll

MD5	cf0fdfd68fd31c3cd54c095b968a3b83
SHA1	7d65f542a217df807f75766c5bbef2137aa2ef60
SHA256	ebf0cb220bec0ebdafb2b3aadd2feaa0b315903b66f438e10022e97cdf40b122
SHA512	55ea61cef71c30302aa9c7b0943ae99b3ffc2c8cdcf4d428a96c646557081568048c5519627c42b2c9f2cf8d59dfbc3844885e56b698162d6e9a81b7d3e5f986

C:\Program Files (x86)\TotalAV\System.Data.Common.dll

MD5	949867e3df037992b6f6df7b91aaabaf
SHA1	104622ae7b3abdd5d79bf7cbeae9001f00403aea
SHA256	cc63f1a6bf5eb643facc49a9741cbbb881ce13ebc1672c25feb5017516d9f12d
SHA512	2f16ef2fbdc62f59b576003b6118d66aa9e8ee471a1140eca2a5893a1f70bfee5f22141147060e49c02e101e17371c99b0a49b0fa5e61904044b998991b21081

C:\Program Files (x86)\TotalAV\System.Core.dll

MD5	347aa3e63d9daf15be3f5fde2cd2c971
SHA1	51d76c9d8d94ae8b329080217e91a8ab90033342
SHA256	66bd8ef96f1ca8c3578e3b8e6ee2a7564b79c08c893d0639c9e3d79f29779f3d
SHA512	966b231192e2b04e8e56153c037dcf17c01878bbd5b92b3e5dc141d09025f613b2ccc7bac9a7ac5309d04a6ca3d2593e851a479246381a500cc1d8948e62a7ae

C:\Program Files (x86)\TotalAV\System.Console.dll

MD5	c2efc291f336ded197a1957c0478bb8e
SHA1	b088d2f3a130e71438a307276727c9c295c5792c
SHA256	9e5dc9c6ea31e667413ebcfde4ea5ef6e1e1e6296b1698e717924becdc3d7064
SHA512	fd3c75964bb960ae234abef12f14fe0ee0ff342ff9d96396e25be1176e47f90a4bdec994f1f438c404caaabf3497c327363f062e4b875e4b9e80d54e3b64dc87

C:\Program Files (x86)\TotalAV\System.Configuration.dll

MD5	b3d9f7e6c869474cac528fb820c2bcd6
SHA1	bc9a6d99e6a9e193665c386392798372202f09ee
SHA256	329ebd13feaa6a484a272ff7da93a00557afa61847799485d9cf101a77a35366
SHA512	9a758f942a49da19433e697787d1cb98e438779c37d8f5791342d19ec004aeb34a13d07aac692e05ccf27060a55864808daee10e1d31303a6a63da8b5683f9fc

C:\Program Files (x86)\TotalAV\System.Configuration.ConfigurationManager.dll

MD5	5294941977402f5a9f85d3075feb5870
SHA1	84a98acbfe206f02e04035bd2df17cbcb629af20
SHA256	d9629ced6b319b38524a7058e66a0f190452d1a24dc615fd66f8c4317c9ad894
SHA512	4721307125dd61cdcd6a56b490596d2ee0a0f117abf477be6926a0124544d3d5147fc6c10d9ccb33bb41a3676374fd3ecb3b0b4098359715c2dacb59f2cc1f8b

C:\Program Files (x86)\TotalAV\System.ComponentModel.TypeConverter.dll

MD5	b8283cbf4a540b91b92ee5cd218c2630
SHA1	0c3efa24fa62d4e0aa3835e1cd4d4009b3b292c4
SHA256	f43a2bb016e6876ff787cee39884471b500fa0a5261735e9e16e85542af8cfeb
SHA512	3f3fed446cc85845d6d73fa38ceea14c50b749a8b2339f0a8bc8777db2b643ef9f3b5821594bb68093428e38bac0e14fdfd535d1691823b9d6dcf334016a9731

C:\Program Files (x86)\TotalAV\System.ComponentModel.Primitives.dll

MD5	387448bf92f46e5677c8d2d714680326
SHA1	a9c69ec20d71a053f1a4bb420941b3e4c2806a4c
SHA256	6101264a84dcdaaa463ae65876495d7ad10d7f03161b4d1244cb880441ab178e
SHA512	d2185de7191013ab47f843bffd8fb4b6c1a1633e73b09da145bbc74c55fc9e63a241a23d7b4f8957603489fceb7f67537dc2594bbf4061f0dfc3006695919dcf

C:\Program Files (x86)\TotalAV\System.ComponentModel.EventBasedAsync.dll

MD5	d8de0d9fcda718426d3072f4052c6485
SHA1	fab9768c697a6c4e6f9428f851b33e8203b57b99
SHA256	89a2d921f2c2203e3eb295acee96b3215e6306e30d0ee1a39150daf868b507f2
SHA512	4707755be9fcee8615a3feba2012a098fad609fc838f3a6296d04f60830ca9ca8f6cc82e39f3f80219749707ce819110a86bf752106e1bd7122bc2ead456b8fc

C:\Program Files (x86)\TotalAV\System.ComponentModel.dll

MD5	0b18c6343b9cac4158936fe51c0ee660
SHA1	404bd6c558e9b8abb3692a3071d2b38c2e50e45c
SHA256	a15a39aa1df6a921085bf47cf85183cbff7b6e94cfc7d1ab478195167782babd
SHA512	6097c234fa0fe44285d15bf3e3d38f7ad1079626c3c73578aca6a0d84c550259556a69a2185dc210046ba0b63086c4c22e035b67ce15a6d81a206bef0e5f75c7

C:\Program Files (x86)\TotalAV\System.ComponentModel.DataAnnotations.dll

MD5	ac924580d865d2df33df0f6b74652e3e
SHA1	e12e1c03479c1daeaf10b4536db2f3dea3be87a0
SHA256	b9a9a982e1b48977cd6ec751e818bb10f21547eed609c0614a6da3997417928a
SHA512	c41dc2d0cf942dfa748cefd99b5d204a5952a91aad5134024348a8602c21bbe7198e32e1bcb58974f0ac6a467d1d2245ad0744cc70f093d56b02bf9335e80456

C:\Program Files (x86)\TotalAV\System.ComponentModel.Composition.Registration.dll

MD5	aff4faf177f73d0e257b544538bddcca
SHA1	268bffd8f5da2603dba26733a9611bb5befd0cc5
SHA256	2d9424f2fefcf665694aea12e2cb7ff7fbc7196049af90caa0e43cbd1563f436
SHA512	c70e8144915e39ce020fb47aed98a471178f5639e43cd9075973e520116403af6f6e56bc5ee52646eed879dddc206a6a8faec1a4ae5e39da22c18abcd4e695fd

C:\Program Files (x86)\TotalAV\System.ComponentModel.Composition.dll

MD5	f84d96a9698df9c7e48813376c2fc81f
SHA1	7eb3c012e2c53520dfd2086a8a7915ad919c28a8
SHA256	c3d47555080c369692813fcf34e70b01642e4960d3b8048c448ca939a9e1ab30
SHA512	3d73af67e314729ff3d57070fa0af5e7045847aa912d2173a0b156da590358e6b52154c6b7d32f10d1cba56fa8bcdfa68e69d89e15d1b6f25bba16b102c5b8b9

C:\Program Files (x86)\TotalAV\System.ComponentModel.Annotations.dll

MD5	30b1666571a3852105649cba73c55121
SHA1	9fce126661b79cf304ab3990751f45bb11c2b3bc
SHA256	1c9ca64fdf263d84d52fa4b2b1594a400b57a873139439c065625ff8e2a21a5e
SHA512	cd82b3674d85587ea2fe0ab82af0a57bcbec55455ca87ad364164b491d9b8cd94cb1526d14997d5a53592f30c7aa22365a024ff83820fe6f0f3e3a8e4137ee1d

C:\Program Files (x86)\TotalAV\System.Collections.Specialized.dll

MD5	f765dcc06acb0405773428bdf129f8dd
SHA1	a8ab97da616c4a6b029751be3707c8fd5b062ea2
SHA256	dfce971806b56567a816b8364fa0880679dbd81c1024c135eeccff3c9ccfecb6
SHA512	0176e3112796f04ac8865aa62047e50d243917282860d057c1bc4ce8a7c58ca24f1286629358b66dd0a67fe1c0c2aa5319735d1dbe60d8c6e75ac04e1e8df01d

C:\Program Files (x86)\TotalAV\System.Collections.NonGeneric.dll

MD5	e5149c5a1b021247b8eb3102dd12c37e
SHA1	d3ff95fee15ef11276f04228079df0aa6bb36ce3
SHA256	f7f125366baea508eba4f5c58db2b796bca77f1ddb7ef58d9cbb41f48552817c
SHA512	972926f98a286776faa228bcc0f4348ce10b027a93aba942c70950dbf81d1bb97f82c00e773a24b008429e801eb3d78c4dcd8b7144c40c3585b741cd23cc5eb3

C:\Program Files (x86)\TotalAV\System.Collections.Immutable.dll

MD5	5f7aca1f4c6723b9a616d58523183c7b
SHA1	d19ad439d779be30c2d8efef93fb4e30bb506bfe
SHA256	3c73145b2a78a6a37abbf428f2ec82fbd92840d207f0c03a66252a22b632bd01
SHA512	54623d1b5d6e555fb284d082bdd0e8be6b6101a0fd329c8d5b9eb15055ff9c69ecb66bc41a89ea91460f4d28a0bf6eabad22638ffd618811a43134c21a6cdf01

C:\Program Files (x86)\TotalAV\System.Collections.dll

MD5	9b63ce723dfda91347901c0475e65430
SHA1	6074f7e122ee6ad2f236600e70bccf2997e798d2
SHA256	f1bf608e71fd2b229b7f2f43aca213858b5fadc79a388fbce3dd125bf003a205
SHA512	6597c9a7e25b6ba77950fe01db912a1d270d4b34c3245397265c7edd4eacfa0094b499cc167132253b271e5badb6f0376222dfff6446ba84219559f51ea24410

C:\Program Files (x86)\TotalAV\System.Collections.Concurrent.dll

MD5	34c497eda61e2f73726dc57562e96b7b
SHA1	0e1d04c8d1609a3d9a8d3aa18fb46779f1806a64
SHA256	86bd69a2f0fc3736d94deb5aa3e695a2b99d692c743f7f2b43e8ddf199ae6eb6
SHA512	dddceb67b4fce4a1b59aa6187d63b80c44587d7a60ebcfd3a08220e7c1ccf98c3a1006b6d42fb2c2f2219020a1c675ddff69e4e5b2fe86abcb1935c4880b6116

C:\Program Files (x86)\TotalAV\System.CodeDom.dll

MD5	f92060a47c375aa93f21dbc0aa18f908
SHA1	34642be2d85691828482d6b7b78b1f0cb2b387a9
SHA256	d3910d8782594fed0a1542362ac0af0189ccbbe78bb084a75759245b0fbb77bd
SHA512	fb73612565bb43981a11e12dd89477e5cc70c1392c3948a6d5a44e4d9b3d59fe5ee9723cf21cb7cd121cd7933c347201ba3adf42317c77b3c2dd652f4130350b

C:\Program Files (x86)\TotalAV\System.Buffers.dll

MD5	ee51a763ea8cd7a3115ecb3c99a5544c
SHA1	a8b0bf1ba791f0ad38b92d8893a8d3f6f9656b8e
SHA256	8e4f4a2a7e7a389f86004ee0b0dcff9e99f0375cd4ae8b1e3f751626fc633973
SHA512	f6b6232a453242d4856b420556f5567ed71ce85c8d23f9ad3f4a2cf0d3534721d124caa07d7de6f2efc192aa3b4dcbd7b03cbc23702e5fb823cb59301c8af520

C:\Program Files (x86)\TotalAV\System.AppContext.dll

MD5	97057f8b94f3ef7bfdf76bda971d69ed
SHA1	b4d80b317b7ca2d32879305faabf7d49af4fb7ec
SHA256	76b3757d6a5da7d268a412f342ce0997b2649978504f25daeb9190266a4686ce
SHA512	6fff3c4bdb29e7a82f9868bf0d5120ff26a1a7ab8bfd9ab5c2231315d4444ee2aaac2d484326dedf78e384e1ebd4f5985dc41afe1509a0c11e44cf8774f273ed

C:\Program Files (x86)\TotalAV\SSCore.dll

MD5	22e6f53e4ee30b78b0746e4b5672f2e3
SHA1	073cfca6b4d9324777fc07228e04c74c23dc0ef0
SHA256	38ef895e3910c6e19ef0255093587840ce630bd614a060feb44150eff45dfbbd
SHA512	33436eb0afc55f0a4445b979d6285f8bd332def68aebb474993a3273f608ae83eef551ad82b7e5428e50a6293df7e7eb4600f4a13ebb484b309ecd8aa5d07c30

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.provider.dynamic_cdecl.dll

MD5	ddefd87d06e352815663d1be0dd33d72
SHA1	d058fc451aa076dd39e32303e78ac9dbc3334cca
SHA256	d7f066394f6754b1a06dee90ec6f076d9bfcd07033cf6bc19a2af8baf746e8b2
SHA512	9e8df90322986a252247b0ce9f2faa8532f92fa52d821fc1cb46b2d63d89b67cf48d65d31a99998f5c5c75357bf168fc301894884243cab96f44266abba4fad4

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.nativelibrary.dll

MD5	f7bd7cf71c917b7f05667945775b40e3
SHA1	8140e79d3aee95ad338d292407e5c0acca99d494
SHA256	3210fe35503c5cee094f9c1b86710850dab15deb36ea53c266a9665e4ecb793a
SHA512	6dcac6e463264c74370f5b3f2ded397cc3fe198e9a739fd7aae04348e149e205628d1496a71bcf65f6e843a7ff61f7cf60b6c4616e062c4e81c2c5b5c921261d

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.core.dll

MD5	879b403dd3ec1d71623920b0ee2d1069
SHA1	51d4ce115b2a57d58dbe42df31402934eb34463f
SHA256	cd9862b8fbfd400e8526aacd7bad012a7788f00ed13a3a9458ba3f20a6512257
SHA512	ec89881e811ff07dc89328019369711a80ead72a86ff9a9d3e55858dae89897d28dc847195128e2b15bd6402efcd4a7b62b986fc599bc9b00488fff086757fa3

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.batteries_v2.dll

MD5	0c9ba51b96a446e0fdce3810bf76fa45
SHA1	6defb626766f10eeedae8dcf67c3f9b13be7534e
SHA256	aebb3dbeda2b2eb0605a20acc126b50aca3795b066155292dad3666f730603e0
SHA512	d74fe14562b39f74c4b3d1e1c0db95a77796e209d21006e5af4d82840febbeaf7ce6c2b15cb0622a4250890bb005ece3488190e00344ae2d569917c94e462bca

C:\Program Files (x86)\TotalAV\SQLite.Interop.dll

MD5	5810639d1477c0c33ddd1efe75256dbd
SHA1	6a6149730e40fecd9c30534e8f806e310d03e1cd
SHA256	0dcdfbad2b4fd598ee78682b3920e1a268b03bb47b5dc26fbb9050089368a043
SHA512	f22368fcf5fe5495d0e318b692f163e8e6438735601132fe0d66158c8ae26e99453e8931388884ecfd998e42de3f98bbc9b10e89ff081609006b9805c1a40d9c

C:\Program Files (x86)\TotalAV\SOS_README.md

MD5	afdf90f86dd5c98ccee0be65cbb99f0a
SHA1	dd66bbff9bcc51522b0985d0f42b34277fa3ae6d
SHA256	72bab8ad57ae20824c84aaf9fe2e0e305b2108286e066545e6bac14ac7af1450
SHA512	bc06ebe3b83956aa78190b543134d89112bbf33dac89faad71830cf24a872aa1982ded9d03cb38b969727502d26b7b9154781940f0682d5a7c7d330531a137f7

C:\Program Files (x86)\TotalAV\sni.dll

MD5	c62a83f20bc23aeface70ec13003c4c5
SHA1	35553cfcdcbeccdc49710e68aec495c16880f0bd
SHA256	1446d6b26da49a5a9f366972f89f4e236f916955f31ddc38ebb96217c1cace9c
SHA512	4dda44fd5b538f5da9e8cb46a3ab1bdc14b43425b9a61249eccc925d986af7b8b3548db9490238f14807909ecf479415117141ddb344119438a59f97e894ea37

C:\Program Files (x86)\TotalAV\SharedDesktop.dll

MD5	f5dc0973ee6141bb59abe4608b8c1392
SHA1	ab32a70cb5d8ae0b4ec4377e70491721253c6d37
SHA256	e68e4eb5823a32b73fb0eb592d4b9f337fcb4047d13f563516d913f482bebbff
SHA512	5c4e3849d9aee870d5584d35d20ef4fce7512ee1d1b8949727e31a72ff43f335e5fe448f382c49a354b91ce7fc75b823180ebcf37fae9282144c171cc0195bbb

C:\Program Files (x86)\TotalAV\SecurityService.dll

MD5	cac3e97b3fd12cef84a41263016559b1
SHA1	390d11c3ad94b61aad04a04f00d0da977fbb121f
SHA256	ddbd34135d6d4356887a7f996013d7e7a5ad63a4f5aa7990d160c2668d93ae7d
SHA512	614e5decbac6aa7976daded1635752b3eedf2402d074999068fbb0428330dde7d86661ae3b7355e13e9a685b0f5a1684cf43c7dc898c3105bf80b8d2a5d3c9d3

C:\Program Files (x86)\TotalAV\SecurityService.deps.json

MD5	d3da7acc157cb704aaa29c814100e142
SHA1	bda1ce953f6e3f0f4c4bcef2d5905b5679b6e2d8
SHA256	0e3511d21b5ae8e724322a16188558c78814558c1a20950c66e1e7fff5810ede
SHA512	c5737b7cbcc7cf1208dce95ea0b66e43802bbb2dfb6e60787854431cc4f413c63e22769564057bf3d72ba391b68a0c2c30d3e9296d16546a86d52074d52124b9

C:\Program Files (x86)\TotalAV\securityservice.cat

MD5	f7d1d228beafd2473fe5d039b0b5a8c2
SHA1	e9855109124b96c781c68e4fadfc4a658db7c305
SHA256	17da88c29be86ba54c810ec0afdcfe9584a648e24745fdd3c049791959c47cdd
SHA512	2a7c81444c9a80670674a8d22e8aca5e516241168fde9653977f3d9dbbda48c3cb4165b94cbccdf6012c9c28d00abb47d523b785fee35b9f98fbbf4fe18aba29

C:\Program Files (x86)\TotalAV\Savapi.Net.dll

MD5	75b793d4c364c082c55625ffb5db69f8
SHA1	f21de5183c531c50ed2627440d6b4aff97c10d0a
SHA256	d40df6a43346e5ebb7e6d52bc0bbc65354d8d2d8c5d4acc09d0cfcfba74437d3
SHA512	7b2fd2d95cf4cb918ce1c73a201b2f5ea8e23003f1c7678026e1a23d8ff4fb683b707b33f0e7e3b4cd5d53c1085e1645968da808f6b78181558d5b9e9ada6bee

C:\Program Files (x86)\TotalAV\ReachFramework.dll

MD5	948cb84290473e06b8f69bed5a38ffaa
SHA1	61acb3f2aafd33d9c40ff848ed02e91995d02986
SHA256	8d6192a62168a5ee42b45eefb3abaae9cbaf0fd46e2b4ab64a612b6efe8a4c8e
SHA512	69ef93290fe2b1f180a78fcf99c9fe9871d4f29361493649e1ead42fb032af6c0b9ec0ecbfb46af64a2aefdfa5202b67a16a86e16e9b4d0a6c61ec2f307e94e4

C:\Program Files (x86)\TotalAV\pwm.dll

MD5	885a2706ad5cd98c637a9d02a6712d56
SHA1	7bbe52a527efc084516c512372c8102749bd3746
SHA256	58ea66beb9fd07738a6a05622e04cc14bdea6e2d7628c3ef52e9960ff254ceba
SHA512	f966d711ffca055354ee68116032d818ce857237c7c27d92ddbb5f5a6a4b8dc3d17637e22532e524dcc72a428aeb60ca534150f41648e59c842a804b89790d63

C:\Program Files (x86)\TotalAV\ProtocolFilters.dll

MD5	a9ac0cc5fe79a8e772cbb731ad4c7bd1
SHA1	bd138692843d2dcea3adc7df5df94eb7603d1ed0
SHA256	e02b3bd979db2a64d13dd6e8df2dc805531ac2f960e08755054ba6e0e4b03e80
SHA512	768cf34962d91032a0fd2defec4512f49b8fd1e5f2350be652b43deb45898b6ab106f9ac0284beed94ff19a733d60982cabf8a5811583018a884693609081cc8

C:\Program Files (x86)\TotalAV\protected_elam\x86\protected_elam.sys

MD5	cf833a28b40ab93655f342a9d760d224
SHA1	d03ec91202f85970e4a24124bca36d7b4e262a16
SHA256	0b0d0898257846c320f7ddf30771126bbdf9edc7f9afbe1fb3d4f0925680215b
SHA512	3332f2eb60a422124628c749ba43a140ae6bc8c753019ba78edbbf0a390efcccefa15f3eaa192e7bb5b2d3195cf58def64bae42a844f5fbbde741d3c465a5e3a

C:\Program Files (x86)\TotalAV\protected_elam\amd64\protected_elam.sys

MD5	e9806e894443f95671064755f9663a18
SHA1	ee77dcdeda8f1c8f81dee89ae3924c1ef5d6c69b
SHA256	119bb976356fac1cc0b81e2cdc8d1135c1f57c1d06b631a1814796e1601c2bbc
SHA512	7a52c467cbcf80ec10e8e4656bf57198a9ee4b28971120ac4d47de3f3b20a5acd4199366d7ebe6920c9b4232768c000a9bae66905313016037f46a64f62f0cbb

C:\Program Files (x86)\TotalAV\ProtectedAPC.dll

MD5	ec918ed1f2f603ba94a2507227d39f26
SHA1	ecad966014ff84d553203ae02a84b8e23e225550
SHA256	c7f836ca5ba7b282712c7e5972855cca616d53956b144be1576f83ea44be9743
SHA512	f2fe12e9f7c81aa25122b0c28e90366a8d23170e476f644d111b602417ba5d531a6c6de5a7e0c9b37fc68f86154f9ae82bcd3a69aa1454e25f24a86526815524

C:\Program Files (x86)\TotalAV\PropertyChanged.dll

MD5	4826da1d501c41bf5869823d4540cbab
SHA1	311cabfeb0aeeeda3495af1f529e5427b0241a14
SHA256	52ec64563ea08f61ef3f568699fd8a66eb5e532d5f7fc342ad46a69ccdf81ae3
SHA512	ba7475503aabb5b602ab1d748cf5ff4e55fb3a6d0ea3b67dc3c1d6142c9f87f88e814b9cd819f66cdcf2c387b3e79cddd1314a6c32906e9e71c0ce0d93ca202f

C:\Program Files (x86)\TotalAV\PresentationUI.dll

MD5	4af1178bebfd8b52ff646b10130d7057
SHA1	91685be41b4e616c6b0cb480b52b9eaa951b65f5
SHA256	b77e0b332b763360827c9d76371015cb50b46ce1a611e5ececfa0601c6ff94e9
SHA512	b62bb3aac73ae66c8d8e632d4d02384ae2281d68ec259f54cb71dee784bab4f11fa4d548bc6ba44e3e2d964be427c36d6d58585e8fb97b2fc68b356ba2090dd8

C:\Program Files (x86)\TotalAV\PresentationNative_cor3.dll

MD5	80df7c9c106dcbb1d7ee2cacfca143cd
SHA1	997c002394d0c7e818bd3068a26afa2dbf6beb58
SHA256	5a71ba70796a1d679ba83f28cfe0cdd44eaa1778e2084cc6bf2785682e6d9447
SHA512	81911a29b4e21302414ea632a2ce6ba58fd6b889ca202f5a73f582a5e8dbe9f473a593ad19230b97fc2c37e5654d7026b7915183c357f302dd75a388a7b205f3

C:\Program Files (x86)\TotalAV\PresentationFramework.Royale.dll

MD5	b576e7f9cebd41b158174153d91fe0db
SHA1	84d7c508b3ad1646bbf5b5fb6e2f249db5723188
SHA256	105a980b2fcbd8fbc3262b87a5d97890f8612158f95f9cbffa23b238e0acc729
SHA512	99a14743bafb174b85fc4062ae21fef86a689dc5ff0cc7435784abcf6d5245430b7634e8141695c4dee5600a3e086633c1ae363fe4296a81d05c76dfdd44a31e

C:\Program Files (x86)\TotalAV\PresentationFramework.Luna.dll

MD5	28c01af7048caa566bc544843e666b14
SHA1	362be72687fb1e98e5669a17230efdf5c6e393ab
SHA256	737477e6150f9f5fb6b63456883df87b5cc0ec59ddc75de8c8cf69749ef41229
SHA512	78a910c1e616e5d9a5e9d8aa9307ddd00879efe452adbc0b69c541ab0adcec9c9a8825e1cdaba4d7b0deef6f127f20cae589cdb771583ad84c5f13df2a788dd4

C:\Program Files (x86)\TotalAV\PresentationFramework.dll

MD5	03c9a4de00b3f8835146b5a364ecd065
SHA1	d390564ace7f72818f69c9b0d9eb58c1ab8fd182
SHA256	73e08d9f4afc20be63c3309c6aec1b840df189f9c22018a7b44665184004d1da
SHA512	2e5217b52a61b966acc233091f44cecf97b8703a5ec77fcab10f9467505d5da209199b47959f1383ad4f6d8c6aefbcf2ce8e7fa33fda04f2cb9f428a58e0c611

C:\Program Files (x86)\TotalAV\PresentationFramework.Classic.dll

MD5	7bf91a2c218036feb7f66c043d12bfb0
SHA1	ab29704c24f7b394ddc716f17d9bbcf97ba151a9
SHA256	e061162ee7263fdfc72db682b71e220e8108f1c523dbf634ef630a2393522535
SHA512	61cc8a77cf28daf38f9b782f8fa1e914f310f9ad16adc7d6af8ac49708a12b97164304ecaa370cb5b3c4a73677584059ca77a636d3ded9c672cb91f6181ff53f

C:\Program Files (x86)\TotalAV\PresentationFramework.AeroLite.dll

MD5	2a37a62d650f02344025a450e343bd1f
SHA1	c65d91b21db6823ae36273712e01d4bee1a019a6
SHA256	82c55e4e8d7c81cbacea3b7042a3bd6ceb7064b66bfa3d63477784b01e02a609
SHA512	5460b87607ea14f5652b468e4b2d61fb8960f8d31d6b9cbf275cf9fe9b99e3d59396ba3c3c2baf1111d574fff92ed3328ffc1404933b505c8f5e34d473600d0d

C:\Program Files (x86)\TotalAV\PresentationFramework.Aero2.dll

MD5	59fff35603af5369086a2dcc69517236
SHA1	b03b644518e87b234bdc488daa7567d380e74c6c
SHA256	24e62ac897f6af99631940184a2d26e1f18d6949dc2a1b00fef5a5fe9d98b37c
SHA512	f7484b2aa9acbc2934723077e46a77f6930918ef8bd5f4c93e75f2322fc135089464d56504c29a769c393174e6e03d8323e1319d632626417e2949cd50af377f

C:\Program Files (x86)\TotalAV\PresentationFramework.Aero.dll

MD5	74026ffe0933b4afe3fe8810e950763d
SHA1	b8813272fd54b2f67e65715f4b7374568dca163a
SHA256	54411e1de691917d2ff59be6551af95fa3a20556e5f8058bcf49b0cc1bcf68f6
SHA512	8887dd784d071b6b28f0e54ef0dba9488a741f2c109d46aa5d074121aa5c7d1f1ca2e79aefab8b53f7de9a7369352853c6f5ec6aadcb5b068c94da69017a7e78

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemXmlLinq.dll

MD5	a0a471e2ca1ab5cdb84165223aa1ac93
SHA1	9190b6b20445bb109aea2bd135d11103c8f71306
SHA256	1d9bb8146142744b5514ac1ad82306961cf594b6f0b75adcbdb61241d2e02d76
SHA512	5b4a5892ab3323138bd455b626d2ec540c73eae89c2aa4b3b639ba1e6d9946c50d557f5059483c71b6def344a9d31c4ade9026f049358c5ebfcd43b487f178bc

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemXml.dll

MD5	f9ab7399b269797a093d268b1a71bac5
SHA1	6263304ea5c307c54ef35479aeb6d1564036b928
SHA256	7e63047da788d63ba9967157fab4a441bc83bab628e00abf6dd044e5d1969688
SHA512	3442a2a8b8af5960a2aa4a4db1771ccd4f5cf48da4eb7364b1c8ce9bd465ea20defdb1ba5aedd59dcdc7efd60db92f3ffc417ffd6d837b8e6db4c71ed3f8270f

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemDrawing.dll

MD5	9dd4e7e817c6c220f7abe2db522a9578
SHA1	0671ebba04cf1a4b003f821cb43dd159b3373b2e
SHA256	6a167a15ce94ebdf4c627fb651e05c694fadeb6bb00e5814db13b2e7dd33cbeb
SHA512	33a5fd207225c54710c027ce966f7abbf3a3c91622c68cdc4f8efa99a5e6f5ae6f3eaa98edeb894779ca3d383e08de804c5da6ebaaece17ad47e2cf515decd36

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemData.dll

MD5	dff4cee2431337eeea633854d81fc38d
SHA1	eb138c089ea3da756c847cfaaac595586734a098
SHA256	92abd19ddce03e86f9c884325f615976d7578a5b4d9607d9871290a588c9e809
SHA512	adfb1077cad4308a4547e8cce9d489c3c4822595feeefe1cd54ea716d77ad5952101c51807fd4a2413a7938f6268c8aea12e129e05731d69006fba2a68cef8ec

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemCore.dll

MD5	3d59b212dff3c0fa45214c6291a9a330
SHA1	87311de58423e64b75a91b6319e2a4ae666e011c
SHA256	4ec952a95cb5f7102bd63c59dfdd0491b7948287f2c64d75a57cbb3ea5ffc89c
SHA512	bcbda26622427ecf3a6906821c8d74a97d180adcae6ca168bca73774a898e65f80b10824a1cdd1a578b533d1f3e4a9c2f64417f7e68d7727e70ab315e8b6e1ee

C:\Program Files (x86)\TotalAV\PresentationCore.dll

MD5	00bd4ac73d8c20b14e9887f45454e381
SHA1	a24ac293000375ca862376b5d397a0c3b2911067
SHA256	9a711c29f615b2f292851650cb12cd64b6074913c29125ffc399ed760c853ad3
SHA512	db32923fec19ec450b21e8b2380d06bcf9d562ee05559c53ba47c208d91d89ebe1fb0492329ba6ef072c47ce4c65fe8e7673dbd16307fc74e2c4a7e67d25ad9e

C:\Program Files (x86)\TotalAV\PenImc_cor3.dll

MD5	7560e528fcc8df6c4d4bbd86e0749c0d
SHA1	df3fee25640fb715b7ec590aba394e0457a612de
SHA256	3002b51d51172b402fdb20cb6f87a6c9c0abe8a4a8feab3d2bc4b82f1216e5e9
SHA512	c1871aa76e7ab34ab0e0a7ad9540b306ee45bded1e0e5cb0c9f031da6f69f057d34e0b4a386a0d1e31aab8ba17bd2e0d564e327b828e33dc4eb828eaf00b0a81

C:\Program Files (x86)\TotalAV\ovpn\openvpn_down.bat

MD5	08bae2de82fa4fb579f707376d440056
SHA1	33eaaac6f01f017affb58b68636cffa6ce30b157
SHA256	6cab17fee12d3a2c43eb4d7c3a790cdbd7fc9afc6b0c6d60dbbb61594f6cec74
SHA512	67bfb8a995eb12b5f995860472a0817279ff2acdbdc19e7ee38a0a91eaec67a870dfc56ce39cf4bb5d29c227809cb35b16635d1fe1c0bbc64429079e5aada6f0

C:\Program Files (x86)\TotalAV\ovpn\openvpn.exe

MD5	d62e7bd8fcfc550f4c664eb7f6933186
SHA1	0c1434e0afc5abb50e4fc266a83b7d412a23c280
SHA256	1c704ce36e37384692d4e9d111be69665fb2bfd3edc614ed6117ed6b934b736e
SHA512	36f8d5c714108140134d0e1d6852e2ef78da186d75fe6d6134ae7cbe43b79e451762f9e070004b13c0ccbb60e2c5ac12d34664381b7ed2187be57228861c815c

C:\Program Files (x86)\TotalAV\ovpn\openvpn-license.txt

MD5	a5aa9694cc581daf09c7f75d1bc64c30
SHA1	484b11367024a690fbd459fb4f45fd044f42d63a
SHA256	a45afcd949cb0e29a3ca81801c7b72666e585ac039a0e1eac63546bcb7273d4c
SHA512	5dd967d247732aa4d718e25347224ea93a15c597c47507deeea30be84c87283e984daf39798492167a422acdc5af174eebd7f7220162f0907ad89d3730c7b306

C:\Program Files (x86)\TotalAV\ovpn\openssl-license .txt

MD5	4c359b890e7eeb474a96075f6df68597
SHA1	eb7d89454cd1f62d8ad37d61fe52117be5b38a12
SHA256	b9f6a4d26b1c7118c3b0ac41f0777a2b82de0ea25f48a9ca6a0e5550dba2382a
SHA512	d3578180c52d0daebd7b1792a261140bb49a11ff592efcb0c9d520a06ff6dc11ec3b1fcede1c95594deeffbd46d8703d1c5aabcd1677ab685774dadebb1af9bf

C:\Program Files (x86)\TotalAV\ovpn\libssl-1_1.dll

MD5	d6d65e0a4a7706a90e328578251f43ae
SHA1	5a34a15fd21f345b3f6c1876df3503e0050e7428
SHA256	89d49df485a5c33f0ebef4a78f6ceb63e60c08113fe21a911cd2c196bf9393fd
SHA512	2f524f1f9281a643ca3dd657e8136828fbb4c58b259c717bd05ea964379ad814fabd9e47d129ff1866dd92e8d5cadbce38b66c8daf2aba944c57368e7c1d8273

C:\Program Files (x86)\TotalAV\ovpn\libpkcs11-helper-1.dll

MD5	5e12d4d264ba957604e80ebbb436c61b
SHA1	50ad9a622518989a80355d226b77c5c57aecba64
SHA256	6f0e5fbeec6474e0cc2bd0536aed3ff47fef4588fe28625ce2b3eaacb5f0dead
SHA512	e4dbb5e094b48bb47a30dc5782b9a5b58dd039c626922cc7884c00f2bc24ae4c457b11e2889ff373cc592c47daf1511ca4ab10a6f26f7f2f745efd9e64a5f002

C:\Program Files (x86)\TotalAV\ovpn\liblzo2-2.dll

MD5	bd9eab80f953d1674d71c315e050292b
SHA1	7f0d391e1d7b4dd455359ca1381bc5b90a23c84d
SHA256	22c1a7a44308ff6aafd80caa6fd53c93df7696c99feadf9ae700f26365c0986f
SHA512	baedfe72d58711ce95ad5ab2010f99d1f42825b825eae48c72add6c2cb8c8f756eb8d1f8c13b78d4cd6cc2a3cfeb920f4188ca47dc6f59aa1c66b0d83b0ebf4e

C:\Program Files (x86)\TotalAV\ovpn\libcrypto-1_1.dll

MD5	b9eb6a8ac15e8eee936d994bc87f9d5e
SHA1	b432473b753f371bb2415eb63d178e560455d4c8
SHA256	548c59044738554e6fd8aee9e1cd0e6cb13ee7b6f4f71532aff868e771eb8a7d
SHA512	83688bdee057964072215de15039e27f0e3188fc32856183f9de3484f11d6cbd633f36c0f0abe7ec6f3eb17dd467c59e8cc8517a371091279270c6c2bb5c631c

C:\Program Files (x86)\TotalAV\Nito.Disposables.dll

MD5	e4f25b163ce2b0cfdd30e22d2fed7e07
SHA1	16ca226a1380d219ba511a872eaea47c51818d76
SHA256	36be2376633d785adec9031ea49b2f578f50d5d2c74babf86f44566b903b4197
SHA512	5afb2c7b8aaf67eb40964bb0fecd50a9522aeedbe18fcaa3fa02c7305ac3815f49a1e17732fa6a3f08f79507b0f2e19e1bb3cd0246ec3c95a247f7c789c3deec

C:\Program Files (x86)\TotalAV\Nito.Collections.Deque.dll

MD5	f37027e4b63b3f6468fd37332684d105
SHA1	68c3e376ba053990875dabf222fbb320b2495a8d
SHA256	570f6df8ea487a9977c23cca5ce9ae582f645f057015ef779bb1c75afc208052
SHA512	ca8c0eb8a5b884d015131de216d97045a5b7e7ab457901db231b28a289d829803adfe18f58ccd26b153ebff64bb542cc8a7cf0c5f628e7108aa02196933461d5

C:\Program Files (x86)\TotalAV\Nito.Cancellation.dll

MD5	df073384d167ac9baf66b991ecd6df79
SHA1	1278cb3cb7fbca5736fc386ff5e72053c6eb0f28
SHA256	f905ec7901dd2b3e59ec23142518996769b3c6916075776319a1c960fbddef08
SHA512	5d06ca462cdcfbf4223c1b354c3578a8074e15ce850b91861f642c1d9cb29ad31fff9c16144dd2e34c289788b678296a7fc3a664c4b27e655d39415923432330

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Oop.dll

MD5	73c77e64e8e1f0f010fc4158a1a7060f
SHA1	ed7a2e982f5475d4479467aa248e1e6cc4adb455
SHA256	75a30af7c9e46e45e6c2b11a8284d5eaf681b8d71e531200d4b480fc66b0f65e
SHA512	0fbfa1d573da283c5898e9222349c523cb9c8b22f650af24b6980ab9202249020ee74e079acb6ed9ea3c1a74debef2aa70d33448d1012fc66868fe2f8db32c77

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Interop.WaitHandles.dll

MD5	a4a934cb7cda9fe457e751f43946b47d
SHA1	4cce8c0d38247450b158de3abd320003da9a4844
SHA256	9f6c3af2124d0a7385ec595093062ae203573167332473c0dd6af323a8010190
SHA512	15862a759007cf6211e0062e5257468e86f99868901c6565c08e6c401f9035ee86e2e639ceb8843ed4162adff35b3048c222948565a46e1df25b604254d9aa2f

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Coordination.dll

MD5	805c7a0a6c838cd2e96b402417638ee9
SHA1	843ae9a6129c73f17df1a91ec09c4ac2a06099c6
SHA256	fe34dfb558d65d8b072f466021a0d15de8d202513b1f13a7b45ffc3e9125b588
SHA512	ccd6383841af4188b448d1ba153672b5861814ea8570d29ced77cffc10346c403a6f37bbf2d003b705f7a50a9c008e3a5e45a6bc30f617d9a34f64e0bc103e55

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Context.dll

MD5	49add3e0dae1181cffc0d4dcde4e9502
SHA1	d2941dd7672b7e1d20ffe3d70dad84a71fb33852
SHA256	14e949e8c2eff5bc7afda30804bdab15e293fde2c9f573c8d52ece54bb21c2a0
SHA512	daa90a6db7cc28f4759deb2ffd3dd8c8f981839a8cca1299ebd558b41488ab0d9c56bda336396e7c6f46af192ca0fb02afb5851b66c65c47e3e39604fcdbf8d4

C:\Program Files (x86)\TotalAV\nfregdrv.exe

MD5	01b5780505301ada6dc102fb77b2298c
SHA1	328c3931a54af2d7adb88ba4c4c18ce1af8d5a72
SHA256	aad2d85472448abe8250cf3180c3d0373540f46e8a8e76d8ef2f78db62be0812
SHA512	bc5bd91c46f452a76ae0595287622256e8c79e90158171bedf6b68d4439dfefceb06948bd49deb0aeb1344ce89a312bb87b01e2daf3880729fff642951c33947

C:\Program Files (x86)\TotalAV\nfapi.dll

MD5	9da4b43b921e4a28d8d440166e0e9d38
SHA1	b063280d258b14f48e4061b2b24ba9ab1dcf145b
SHA256	268142cc83918e1a04a7f9ac1f9f827e15ffbc65bd80dac85a8b7d99cd8721d9
SHA512	6b5c52aa001e0d77e4ec49088c8bdf5460dd0b323ea0f6a7aa651a5dcf3d66c9b93ea5885e8edaa393da85285b912a65d00b83ec08c05d2fe46cd33206d033b0

C:\Program Files (x86)\TotalAV\Newtonsoft.Json.dll

MD5	3c88cafb11eb9ee403dc2980edfaed36
SHA1	b9664b423200e28882a8e543cfdb8bca5ebe25de
SHA256	74deaa342747cf77f6efac6bee1cb6da2e7fa31988b3f1304eb1d01d621ba4ee
SHA512	c5044bcc98bbb639c40cac5b5333c890feb4afb2d54b55d5d702ee7f83d86d3aa329303f88c70683f89658d7fca279104bd2c94ef3641a6fde522716c8365dd6

C:\Program Files (x86)\TotalAV\netstandard.dll

MD5	671ed9d6e873ad29ccff10bcfaea6021
SHA1	49507f0040c27249e209be9ff92ea4c143575873
SHA256	de0ef6c3af1c9b8199ba4e16c1392d3127a4a30dcc4cfbf96bcc463fe0a5d27d
SHA512	15649a0a37d1e26bf3e670ee1986a6f6d991a6821868f2e90c1a1986122c4cfa78854f5f02c7d5ec1354837126f3226da09f8c89823496045644b48fc4e80f6e

C:\Program Files (x86)\TotalAV\Netlib.dll

MD5	822cc56add5d97691b993f64b11f9847
SHA1	42b92efd9348f2306315274e34827953b8b26814
SHA256	9b33915254ff7c566937b73c0c98e579547fd50b65e4483277159d5c7eb44549
SHA512	a3c2e95bddeec26ae516e3b0cfa69a44ccd22f3930a692dd6e90fd4869676f5213781bc5523c15534eaaf3be5a949be07c0f5da4d6b2edf762b457363528f97e

C:\Program Files (x86)\TotalAV\NamedPipeServerStream.NetFrameworkVersion.dll

MD5	f8d4f30967bf2a130721f2ebc084cc7a
SHA1	14d81ae3e20c321636262cfca5c2fd6caa59fb9c
SHA256	463e1a53996e8de4d2ff2a7b3919e24358c1895da120060d32c1bf4f9462bc83
SHA512	a9cdf2ae64e408349e321a69fe609f7b9e7d14505468c9d986bf46fd9ac77d5c79bb14eefe67f6b977705150a2787a41b74e685545240d7d60c524b3bfbbcbca

C:\Program Files (x86)\TotalAV\mscorrc.dll

MD5	30041ff905e8057be55fff732f8de1bf
SHA1	b783bff2e6b2fc182d6a4345c6a33323b8eb7a53
SHA256	ac84b2497a3875aa104e2a18e0dd49a43ea38dc505c57d836f368d8443280e78
SHA512	3daf4b0a481b93c3ad2d078cccd2e185506f3607309c1b11799b15e958137d51528638263281f7d0152751fd4ab301d0dce8705166f05820cd9eaab50beec829

C:\Program Files (x86)\TotalAV\mscorrc.debug.dll

MD5	6552055346ddd6cfa8fb05bef8f26cfc
SHA1	4b6b93bdaa00fe2c3a8a8f313cac140ce04c785e
SHA256	4681c02858164bb8cb210238fde27c7099dfd34d6150e9706da8845a3706b8e6
SHA512	fdcc771b0d7f43c8a808da1280890c721b47d6412a28c53acadd7bc3ddff9c4eae1d3a141f99f1b183bacbcc501fce795d9199581a597ff748792914872ec9f9

C:\Program Files (x86)\TotalAV\mscorlib.dll

MD5	c53ff6de7a243279034e8ddbab23325d
SHA1	f846e0a35c768188769e9fd08ed0b69ab7fffa73
SHA256	3e7f86acfe925900814e0f57828a9b437b108e50315a2d4e87654ac7dc39852f
SHA512	2baa9be32ab750e91ef174fc1d6db764bde37b9400040fa80b702b0989b5053afd9645a2242861548f092a6dee6c76d47f63ee5597cddc5035a07e14e5e9ca38

C:\Program Files (x86)\TotalAV\mscordbi.dll

MD5	0f5287ccf46af868d472a16dfada82f8
SHA1	96f9943dbdf240205de2a17c1c413ca3e0ac9b45
SHA256	776150b3c8008d9ef5d931ec871fc00638d81e3f5f37fe6cd4988353d6eaef25
SHA512	d0e993348577b7fa526d046bb684e449d82a40c0a1964f1714474d9711660eb9f83ef34e01c5fcf1089ab7c8400afce6d0e7946b5f278a08226cb46ad0afd2fa

C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.dll

MD5	94b6fa3995eb2ba34afa532b9fab39a9
SHA1	42480243477d813498bd83839cd16f6b7b828e96
SHA256	839a8f2b052dadd685a7222f69c42c11edf9f1e06964dfddec61320e9f359a98
SHA512	3bc4eeead6053cbf09d48297b75e270117b52562ba21a71d8163e7dc932f02c837fed47a813d6dd3efd43812faf1c9cd934e43bd482d8664fbc5191437bb6d90

C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.Common.dll

MD5	2520a5a2506531cf6f8b4f2a733957bb
SHA1	202e824c042d89400c856a64624db4bd98e51f52
SHA256	9ea613cfa8e489c15d44bc1360e11be1d321de2d0327386df657425db4ebd847
SHA512	8a95c483023177a8a88a1ebcdf8e00577f14a7b8603b722896ba1c714b2cc10477a74a0ff0bf7ffb70aba7e51327e54d07ee5dff6bfaffbb0ef51f08fe9adfac

C:\Program Files (x86)\TotalAV\Microsoft.Win32.Registry.dll

MD5	90ce1c7910d0f504b2e3787e1ba199f1
SHA1	3acb3b6dec3b9c51e887f6a750035357bea5ee5e
SHA256	d72bbe2fe0fbc2177dd211308ae7331504ba0317aae60761e94817dc8856580a
SHA512	da7f23717e9341565d36bfaa90ec1e37d7d1ec59df91e495c607d404b00324d7e1c8d216e7adb64ba4bf7973888342098debbb8b8a4a95019200e1735b5204d5

C:\Program Files (x86)\TotalAV\Microsoft.Win32.Registry.AccessControl.dll

MD5	47c158136040881155f35b4877460849
SHA1	a60ab328c456cdcb7f71e14358a0ac202287a534
SHA256	1af18aa247c88bdfa1dbee361b6b901e541c0f7a0c1c31336d65ed5176b13e39
SHA512	14ff78a7029229c046117afc1292c3a4712dc3a4e3c4ce735781deab842b41a9bbb5fb516f19eb614299199074bc1da583d903bc08dacda6b8eb969f1bb78525

C:\Program Files (x86)\TotalAV\Microsoft.Win32.Primitives.dll

MD5	8607bdfc638e4fa1d8e716486a9c6475
SHA1	9e246a9f462097de2b3b2472950eb6273e874efc
SHA256	85c9a4fac07761d259bd91c669e4e1c10cf79d0939e64ee96e32abdcce51c86c
SHA512	91314554e0937194f74c802c695090582e9a6b857da72026ccf5432f5ad960547b4f4e2235f0a56108a63cbb40d60fb7d7bbb30b39f1851606a09bcf34371c5a

C:\Program Files (x86)\TotalAV\Microsoft.Toolkit.Uwp.Notifications.dll

MD5	71829de02b099241bad4ef0efba785cf
SHA1	625aca08f1b7020456303794543cc669853003a3
SHA256	b14999bfdbb2a55f335ed3e9da022a73e9ff6e96ba341ffef22637a6f1826188
SHA512	dc5248ec12ff04db6722d6640ce2eab8dbf154ceaecbcb5f473e4ca869f60ada4bd136d849db82524743c652f2bb27d08870d28e2d54977c717b73fc853d6557

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Primitives.dll

MD5	79dec1364dfc994ba0e0af665cfe1379
SHA1	67080f49ee9ed691253ffc4475d912cd2385ec44
SHA256	16ff7d5019e361cfe19de448166383f9a915fe9ea1e08a475a59abe1ec8aa9c0
SHA512	88f1cc84d919ae86d141c0dc95aec3eb20961a81a50c2bb30a85439cb980d9933bb5667eaddd3eea94378d11d632fb2bd1c1b6737e6a9ccda513eb33cc79bb40

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Options.dll

MD5	e80731180d3f61c207d1e759b5e422fd
SHA1	c9a8989cdb44ae95f6f6404a6618bd001ddf95fe
SHA256	1332dfbef2bb538faed7c85ae6f6c26d64333eed95486e3f81c9f2c1af5b9f33
SHA512	da74e650dbe60705e02882e7877cf0f5e7f08c1a17b3da5cd892b9a66fc06dfc7be8e324c13d8df17f7bc9898f22b399e0e81808c76e1274f70b6b1f58564a82

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Logging.dll

MD5	1649856f9ae8ea8aa53b5aaa04da894d
SHA1	03574a2e9baf4edab20375bbf968228ca717ce8b
SHA256	30f4630b82b19f77abf33c8287cf4a00e8285aa71df1bb3fc05b7abf9026841b
SHA512	20dda82a3c9501c7de052c86c09dafe4251042011305a7224bdd7bbf99f7b705cf6f5992f9fc27fdd5526dcbb3fd6caf6fe2128631c769c59fbbd5c639dbfc17

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Logging.Abstractions.dll

MD5	613442a0e2cd90d79c3401554b8fba9e
SHA1	380df211e2bada028536a6c55bc8f33495bce1a2
SHA256	971a367da28ccca459fe2f7d755f0cea978310fdd064f6368fb8c8af814d74fd
SHA512	ef9a5696774f111a7ec99a6cc96d976e761faee4e128510f278a6f606de3f898413808f4c53cd19d27e83a46a1adef945c60d4bdc41f2aef70f710027c6bac87

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.DependencyInjection.Abstractions.dll

MD5	1cca6bb1ef856aed16e29b17b92ea225
SHA1	59bcdfef44880db1daf87951619cbc776a22746d
SHA256	1663be664cb7a7afa5786dc9f071fca8aeac3737fe8e29153f29223c8ab1608f
SHA512	6daea2c19e873594e8486ee09ab0cb9d30e4f76a1ba51fd3c2a40ac5c27c870e1e7b533247c17b8386c9016103d1423cd886efbf1256e89ca2a8b99f0d2d57fd

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.DependencyInjection.dll

MD5	692c5f999645b4e9babc2e830a2534e5
SHA1	da1ce989d55ef32809a4c0471be5ae9e5614e483
SHA256	21d64f47e3d226854b93ec5b1f94d3b8ecabb0000a5b759decd96507789c307c
SHA512	ee6da0eeb5617b6b0ddb754cdced46a68a4aa95e5127ed94090f3640d4d0df3f003135ca84e5b4870679b0972e3c4f6b8059bd8a9c870ce8c5237cb0930235d7

C:\Program Files (x86)\TotalAV\Manifest\firefox-manifest.json

MD5	cd6fbf69675912c8fb36a977e189514a
SHA1	6dc5f321251160ad77f415f5f3ac6ceef0e2044a
SHA256	17e6cc438c28f43b3935d1747b767a4a0e518adba95a56aa7918dcb92d8af4be
SHA512	0ead4652e686e8985ab8ea52a2958cdd59078807cbba2b6e27f1b10dfd9a2e7c05eee3a3b64d11b16b03e8fbe22e7c0f32fdc0b99a057d6f0dc5c5e94757bc55

C:\Program Files (x86)\TotalAV\Manifest\edge-manifest.json

MD5	71a0a11da12e252bd32dd5b467295ece
SHA1	d58458ee3a4612cb72804961e981176242394dd7
SHA256	8a96c6c31ed88f6c7b28a28dc965b3776edb3e7c5ba857aa203b33e39efb853b
SHA512	a1c0238cb9c5c2c95a0f92c8bc40c9f6f61046a381d9391245fca3cfa11eed1d6f7b2176b2d52ef1dc9f6b6fed72618b363f11096c9cdc811f1bebc30e778416

C:\Program Files (x86)\TotalAV\Manifest\chrome-manifest.json

MD5	21b2a99408f622ba3de5751c6042f794
SHA1	b661b1de6aac5992d47d9119c5bc30327466660a
SHA256	542db227dad2ca52cbfb3bbd15a56a319870e0f86a819dda8c3d2931644a8120
SHA512	7590e9f4fd15acd234598d17eb60a79804c22db4e393240d164757dd68606e29f11e030c5df4824fef04e7677f91a92c8bceb8e4ac73184f239dd845f44ccce4

C:\Program Files (x86)\TotalAV\LICENSE.txt

MD5	6b1c894157e404adfa2c9168cc1feaf0
SHA1	de643d125afb3f3fbc698c87f125d5a0f64cd73b
SHA256	f9524cf8d591c32dc21902590e3182d0d0bef0cb0ba431f91bf6c9d71bd38cfa
SHA512	46ba913816ea8156aa1b676c415b98966ebaad608ce2b2b098d784a8f1b28323a12e47852a9c4f9aea8235854fa922ce3deaa75db790d955fb3c36a728691156

C:\Program Files (x86)\TotalAV\lib_SCAPISharp.dll

MD5	9dd1c2259075e1b604c2efc50f2a7db9
SHA1	765d2bab983ebb74ff9f956faed22c99211795b2
SHA256	4f3694e8b0960a7b1e6cb6ffdd6b143e7f9c6dbe0275eff9197059a60d4ee877
SHA512	5605cce8a54ffc4067e09a06420e33146eddc4ccee81bf02c56bff8943d7e6daf47fe92f329de9d03804dcafa5a319d038900dbbab674163951a489c9ce760a8

C:\Program Files (x86)\TotalAV\lib_SCAPI.dll

MD5	b52d13d0b5d62993e2dc9aab06c0b2d0
SHA1	160ccd201b856f14971a0b33c10a0bff13092da0
SHA256	c9c36cdff0af9c858c5633adc89730fd7172becbdaf86e4acb0fadfdb872ffab
SHA512	e98e2340fcc216dacad07766a59db43f73c634ab8b36dd4330835d847164b24bd999bb2a3b74f40dd8099304680c06e54fc4d8d50113e77848d6800599efad5d

C:\Program Files (x86)\TotalAV\libssl-1_1.dll

MD5	723c79630b1971f327fb7bff5ff38eda
SHA1	77844078bfea3b45e7fc4a42e5b7261fc5c6ad3a
SHA256	797ba3a838a6d0bc7b9b39efec86473ffe4255f782bb54066e81856eb0adf0a9
SHA512	8329b8755104ad17889e1f4b1ead597a38bec8f07cebc246c5b0e8a0b88e1046d31cd3724e8fb8ed903e52e1e4808324e63ba4d4927a7fae3233ae37da8d31c2

C:\Program Files (x86)\TotalAV\libcrypto-1_1.dll

MD5	f77ebf3bb87a6b7e6fc52071609cd88e
SHA1	d41ce9a2f1dc351ac0adcb45030a86043dc79128
SHA256	34f14e8ac45755105a464dc4e93014c1e9778cd88e57463df8cf83f0db820411
SHA512	e043669989e28c4b7179e765bd65ae25a16d71bb76467faf812ff7078b228b676e16d64b6dfebb480f78e2a131b6cbbc8715a7cafa2bed5c7863ec5835c9ddf2

C:\Program Files (x86)\TotalAV\installoptions.jdat

MD5	dd3ae3168a12ad7f0dc03648dc46eb7a
SHA1	86d9b32fbd9b77a7b9c80f9d53be88799aaf0bfc
SHA256	dd723d37ef9d85b28d2183484b7fc1acef76e7113719ecb9b74c0791e57de6be
SHA512	833a10f34cbb5fa2209b4dd55c72fe46c8d82ad6652bfd3574dff4f00ade746f172aaa0ecf8c6e5926785d240c1bd50882521a4e4ea973d50dab6b1a5072840f

C:\Program Files (x86)\TotalAV\installer.log

MD5	c18e0a0ac967c7d48880180adbdfe552
SHA1	767e08ccbce0ef850d03daa082c309fc15ef7c5c
SHA256	b3ce0d23023d622c9f82c654933d3c83e475d3d5029589d62bc449ce5b436849
SHA512	0ac95efda9b34cc33eb922b232c6c73fb89b63ab076a15cc3bd231254a35e99ac2b9f739f731af04b12a666999f647390da58964fcf7e647ebf2dec4870186c6

C:\Program Files (x86)\TotalAV\install.name

MD5	80f7ce65c0bb6ad6ced4e8249b7e0de1
SHA1	0462c9f4b58d4237473a42e94eb8c9af616a322b
SHA256	d832a854ba32f08cfd6abf0808116bbc9c6f3094bcf468761a7cacb025a1448f
SHA512	39579af056eb617408e317d20bb6dd12fa652c356b64521b3a58237e89d07e643ee0cc5bc17fb28f9ff386690586b83a8bdb126f087de6b224b98b6bf18f7eef

C:\Program Files (x86)\TotalAV\HtmlAgilityPack.dll

MD5	2ccdd5e34604c7b55df78be8d1977135
SHA1	785dfda116c774afa7270713b1308ad1d8c2d200
SHA256	f35cffed9992cf7af5710d8f48dd1ba55b9c16211746e16fa474277ec5e5e1a7
SHA512	89947874a3c167b6e1202f338ef084baca5c7f954205f65ecaa0b284e74618058b3b1db0fa8d45fd558746eb278feeedd98320c8b79cd67049af244f511e7049

C:\Program Files (x86)\TotalAV\hostpolicy.dll

MD5	862514252dc75f2275445ca4798eea1f
SHA1	6241c1ef41b521a7766a87732382e0c940c96dee
SHA256	1f81009336fed33b50bf187d70a16929f4d1b4f78b4d1e16bbbf7f6a87ec5bb1
SHA512	b070c5a4d4d649da59df88ef0030f74a7e1096da21f27fccb72d3027e7b9cc87193fde695b32419982249b8e7fce7d5fea679a6c085a4605a09bfdd976a26a7d

C:\Program Files (x86)\TotalAV\hostfxr.dll

MD5	36e668a570def150bc37c64bcc824af5
SHA1	c475d9bbfbf8e71197c06d86515cb84d06be0ff8
SHA256	26ed6778f4d368df211d035b548fa9b3d22976def5055d33c0f2a2d7086ed54a
SHA512	cf728f060688cc2a19186f029ecbe2f11c68dc56ed12e2759af0b21a74ef69d1a6f40d777efed4eb32b581acdee5bd5c668339c928556987dbf1cdb2533143db

C:\Program Files (x86)\TotalAV\GUI.Win.dll

MD5	0c1b42213f71d7768598f1e526d42565
SHA1	82ccf92240e48252d006183b1bfff1d1dc45436c
SHA256	34457195be0bf8ba64bf7c81ab9e882cb53dda3cb9f6b96874dfeedc8d08f775
SHA512	a2fd84f2c619031739962f256fdd85fa0d3aa977db1f2f2d6e6adfe1e73e0be2a56866a915cfbf1b396e3a7c5fd3e8fe6c6b0515d786a2e0bfd284495d1c91b4

C:\Program Files (x86)\TotalAV\GUI.Win.deps.json

MD5	9ad72fd35adefee97e45c7d3f4aca4d2
SHA1	36f507f2cdeb0fa168e231a12f16a6182a465887
SHA256	31057e87e93969845fa1e9d9585e7f28859f69a301d3b03c0091aab62c62413a
SHA512	8a3467cf8b05efe30c43da72801729c43592a6279166430e332d2cbd9f20a5de5586c6c046486f64930049e9e544e5e9f0a68b5a2bc7ea08560f2ba8e4ecd505

C:\Program Files (x86)\TotalAV\e_sqlite3.dll

MD5	1aa2fb5e420379a7a50cd650232c6a08
SHA1	e9bb12599f60032a160a00a04203bd73680940cd
SHA256	9877f703ce3fb9669d656d24726159b616b2df25522225bf41bfafe89954c58a
SHA512	f908c146cc7299815424debe4d40643864ce442eb30adf148ce05dc2f48e8a9db0697943af55b1c5260f5341ebce57cd804a7b19e71b66510bac085a3f800a59

C:\Program Files (x86)\TotalAV\EntityFramework.SqlServer.dll

MD5	4010a41e4730439275c00c358550393f
SHA1	572a2fb0526523e3669a53264fc51adac70c4ad8
SHA256	b4c39d8f0fb669e6e337c5f3138f6171b0905cf875a92b0e3253f33955b87b55
SHA512	5a554c85ea0222c9d96ebe24b2b0730c3974c59389e2fd0672ccd2c99f78b937bc4529151a24cc68357a308d3e9990f09eb854b05466538c422847d9849f84a9

C:\Program Files (x86)\TotalAV\EntityFramework.dll

MD5	ab3c40670c848ac52f32221a7976cedb
SHA1	20a05ff58f34ae9c6b046169e42db3b68b805fb2
SHA256	a7f8427f0d039ba33d7b414604baec4b62d6dfef9e1f5c078d403e7a04e8dd9b
SHA512	8e97b78a6ae9590e84b0d06f5a37586893c4c099a99aad2c50a6ea49ea1aae2acd07501d4e6af905a2263cd2a14f743746e18059204d8dff9b19439000cba705

C:\Program Files (x86)\TotalAV\Engine.Win.dll

MD5	c905cf67539797d58a75b238201a1383
SHA1	500351c4c7151596c0c782a4e6de8495f5a3edca
SHA256	f5aea1bc55e102a2c3d0db554411531260ee04ca2eac6c256050fb2dfdd6b366
SHA512	49ac338b68dbafbbaf63a4994d093195a69f12b74dd4b0ba554f3ad9453d7e998b5328004b49be92f44b7f0aad2cda9bb4bd368ae60e7948d6c6ad2ac6cf093d

C:\Program Files (x86)\TotalAV\driver\i386\tap0901.sys

MD5	a23d03a5eb0b221bcd33d98ff30e4dbf
SHA1	9da49918647cf25bcae9538ebf60833d0a3488ea
SHA256	c43a60e16a011622a963cb93264c7e1365a10fce8c43d5c4fad895880af4dd91
SHA512	77e9c8e1cd4d7670a9439d006f45ddebb62a33ab4aa7999cf9a0536bd9ae860a0d1a2c7ff50f5e0e50345b7c64619761fa545d10657b6f8fcc31db6d593aea41

C:\Program Files (x86)\TotalAV\driver\i386\tap0901.cat

MD5	7f49202c5a71e1dd7c85923a5dd45764
SHA1	7e8c115faad3ab2cc53ecfc05cf09e8eabfbffa6
SHA256	825cc3efc86cd13fa1bda7d0413d5ca8b208c3a18834ef02637834352ef386fc
SHA512	62497068c4ed428772ac6236c1383540cf7c48a7ee20b06e0b0e873c51fe69718969ab218f953001403d2e2170e7f29cd84947722e15f55985863a2e79d66d63

C:\Program Files (x86)\TotalAV\driver\i386\OemWin2k.inf

MD5	35589b966c65a52a1c95791bbcd80543
SHA1	d65994dd38de0e1971f8c99a048c46acc284e8bf
SHA256	8892d224ae879cc35ffe216691fc6ba3266d88b6239838f7d38b3a4ff4ad74b6
SHA512	ece01e898527ae2ce3039457ea1823bda6351871900c1a7a20057ff3250e33ed8ed216af3318edaa1c3825c17d348dee06078e946d10332e87af8ec45795fd5f

C:\Program Files (x86)\TotalAV\driver\i386\devcon.exe

MD5	d0006c3ec1f8b894e41667355b088448
SHA1	8c478cd72bd52bec1283fed9186a9d07a58a084c
SHA256	f228844f92969a6c88ec6b9168815c259881f436f3188f9b038eb0b1dce08bbf
SHA512	85424d30cd0607cae58ec1b9053ba6b2f087e148ad6ba029ddcabc4ff33fc97d3a6dddb0f49e5a39cfbe011ae2f9b165ba0490ed9365f081afdf4ab0c15b3c4d

C:\Program Files (x86)\TotalAV\driver\amd64\tap0901.sys

MD5	54cb62322b7b1210cb317c4462691b10
SHA1	728cccf1e337641cfe06df85aaa667270c2f540f
SHA256	89cb62e73fbd0500a8b811a632602c504753777313d7e424cca68f1619b55211
SHA512	b9dec2e015659ccd9683ef504f6a912f55e41e87d0d9c698670b1b2db358a1f4997fcc112cf04e850d7b226582a3d234b57ad68b4afd9cff9c9df63b5f2c08fd

C:\Program Files (x86)\TotalAV\driver\amd64\tap0901.cat

MD5	e0762d9f662614cdc930e211884e9443
SHA1	8016a500b268f2263aa26996f92cad4a9bfe153d
SHA256	b8913d43b03ecf24f466b7bd5046b0c35ec9c43620d10ce3d5dd6538356a85a8
SHA512	618fbf5488f2eeba35b46e4eeabb901b40be20bd9447d49920ad22a9adb23d6dd366556430e24005543bd2ee501848ff7b24bcebf7b15b8ee8543091b73bb449

C:\Program Files (x86)\TotalAV\driver\amd64\OemWin2k.inf

MD5	b6aada0cbed06889053a05b66f146979
SHA1	823025f02b355b37df7d7657b0f2b4d3584891a5
SHA256	a6e72b88e42d2b478615c5a16bbedb3fd02b0dd3def3a79840fc6a5df8312707
SHA512	9f8a6b0ad5ae4ea4c14043d663fd5aca2f1884ece0975b13c0533eb93103eb89120c1884121d71c8f9d09f5d210926fdba3b29fc6cf87f601bbc0f359c31d4ad

C:\Program Files (x86)\TotalAV\driver\amd64\devcon.exe

MD5	9ab7634bb81f326d489e453c358ae8ea
SHA1	5ea9dfa805f1ae952cb3b66712126ac9c3c985c0
SHA256	118e04049f21d272c8005e1e746248a4654b305a41b29e5c735231d2b83bbaa6
SHA512	c90ab0182709cbf9ea2ba58565fcc6c72b52bc500b5f16a7eba1f107350550725f0ba40bf64102e9e0c8fdc347e0833f67a8bfe4779b3654d0e7d42f7b8bb74d

C:\Program Files (x86)\TotalAV\DotNetZip.dll

MD5	6a8c8771bd399dd468595bab186c3e88
SHA1	df56e2573396ad8da5998c6aaf89c508f2060a85
SHA256	28d76d7ac169c5b71cca4e3073226f885a2f06720413a11e8db9b7fc08359462
SHA512	3e7a0e3b0b182e97e44504c4aa511065ea910a88e88ea849a5977f64dfd64aca6008815a6307e1d82a706b66811ddc5a1234b37c95a80e1a01feaa8b8fdc3d74

C:\Program Files (x86)\TotalAV\DirectWriteForwarder.dll

MD5	a36d73301123334adc95e034b327daad
SHA1	cb4bd930cbe2c930d665dd4467e8b88815de8c1d
SHA256	440c95dcdbe402d843095649773d1fc6da5d035802dd540ce29c71bc915d433b
SHA512	438abf9aa1c00bf1f3e9ec7e9ac6bf5d89c492d68301044ba7fb205d3c5d34aae4940893eff721b91696de4c782a8a3558cdb39955943e350361639893ef3393

C:\Program Files (x86)\TotalAV\dbgshim.dll

MD5	25527d0dc8c76052d6af0062809b19db
SHA1	9743537cf72993b29cc01e98c535b01e3448707d
SHA256	23d45e43b4e54b12dc7f8029ae785e6a2a666e94b0b749c878502cd89ce4b50d
SHA512	b8e596d004b40122eafbc0425383fda061b5c27c892260631bb77aeb79b25316b86ca57c443d3c0494484ce3ed0329882588a418e0773559a06a2a2566a7041a

C:\Program Files (x86)\TotalAV\D3DCompiler_47_cor3.dll

MD5	5e717c95808bcb5f654bb312d289b837
SHA1	c69448eafa40e35424744c28e68cf69ce11a3d97
SHA256	e745872db4dd114a65ee1504f401ea26d879edb6614e369a07a80ce7ad1950ca
SHA512	dc5e6ee0c8fe22897009060821b18bf2f7d0317d30682f7fa84a4c1889358c152d84d22ebe57d0ec8ccc1be8714bce6b1257d30671b8d0fea88309bbd137b8f0

C:\Program Files (x86)\TotalAV\coreclr.dll

MD5	fdb0d51a8c7ad31a75001ec87efc2039
SHA1	264a5dd57656841987f6f73d2b15290340049ad5
SHA256	d8877ba978e5ffb733026d15fc6e7b60862c8c43ad04ca3e5b663b6dcc7dd6bc
SHA512	590d8d45c59cd42ba0d0be068baf5d339228f6ff38f7282909679f3a2ea3f25f5110c072276888c986f020bbddeef48b69917900e7c94bcaa22bc3d0d6c978c1

C:\Program Files (x86)\TotalAV\clrjit.dll

MD5	a873ebf8b135192456bb47edffa641c9
SHA1	533375c44d5f0ed5a194975817972ca5e2e646ab
SHA256	520ef22ad5cdc40025f8964d0cefb39b0c88cec4e0f7d49863f004887adecc95
SHA512	c8a46a050530287451101ebe89b2ee4149d3d3402127c78be5b201d8a66c1b2c3adbdf33f7fc866008e8d4920a24635719baa1c172c84089afeb8019c76c8f17

C:\Program Files (x86)\TotalAV\clretwrc.dll

MD5	3a0d7de8c93cb55a2b694066d52908db
SHA1	9b54438352427d94fad53a0a8310a415d8b8d70b
SHA256	03a286bfc61bb4e6cef1cad40043bb9f161e5810b5ac56f81e6d0a7533f3d3e6
SHA512	7f6b68347a445b114b2a358629c58c35e83c661733376e779d1453d481ebb0ffac6d697e7d2083b38182d67d48a1662cd2bd31480ab0dda350bd1cba5709f5eb

C:\Program Files (x86)\TotalAV\clrcompression.dll

MD5	6cd5a2b4d0a555bbb94858e64659111c
SHA1	b5ddcbd91bbe232cf7e7ba5dcf0b75e80dea41ef
SHA256	bac1f0fd328051c956b95714b5498acd1be6707130be500a9188829a740a186f
SHA512	4a47fab547e185f022d90eaf6d587ad1bf78f248e5cd467081c957cfe2ae3ab1e451b2fa94cc076cb66e2753dba577f2489a1fca14f2075afa9dca371b623f61

C:\Program Files (x86)\TotalAV\cachey-bashi.netcore.dll

MD5	4882fa6dc7bdb4591967d65dd08e0437
SHA1	4c9ea0e2b4c03bfc62d35adc3003d41c5c33839a
SHA256	9be51e9fbffff4fcc7b6e50d214809f27dde875ad3c3b94961ce46c67cf253f1
SHA512	eddeadd43369d5b03ebd4b6b98063f28e09f0895d4b42d4ab9e81e3adf3f098402449a6b95469bce9ffc228f74216bac066f90805510eb40fca44abdb6c6569a

C:\Program Files (x86)\TotalAV\Branding.Desktop.dll

MD5	0a55314b9ff6edf2616e5a1e136886a6
SHA1	64f5fdfcc14962c1b9750b289afb3b94fc7bffbe
SHA256	c9131d33f63f660abd1025812fc20cd8a545feaf72eb288ca797e9f1e4bc348a
SHA512	a2181bd8fd97261666be02100aa0de24a298c90d61970e60bfa382b4b84fae85c79e1708b65ece3e2b9a66f77c0323d9e844d0ed4341d2d22d8ab984014e5fdb

C:\Program Files (x86)\TotalAV\BouncyCastle.Crypto.dll

MD5	9d34c40df4c87e378bdb0a3ebd36bfc2
SHA1	5c110a3a90e792270b44e3e3f6cf31bdd9020295
SHA256	e7c9e901e6d927778938d3ee5d183dce495d6b6eb2a89242a700afe25d921cf6
SHA512	51eea2113ac5acfd553b3e0b35390c38323218de55fd5b8abc8cf44bd0445df84eaf9349b52491737aa826ce76cfc2fe5eb5aaa60413cf376b4479ff21a19339

C:\Program Files (x86)\TotalAV\bins\subinacl.exe

MD5	7bd591f56af173edc8ca01bd62df6eac
SHA1	43e88cd5cee3b9c66de428c84501d8660ea0586b
SHA256	371cd9c35282843d572a3186975cc749e425fd4eeae1bb93a9b0cf20c22a9dc8
SHA512	b88d0c26a6f17d7b2d5483fc9a54002ea9fe26eabf10e5385ce4a13d81db5d7e8421d09bb5eaff453a6f5a210d547cf625fef74d209b2b5f0031621e9796366a

C:\Program Files (x86)\TotalAV\AviraLib.dll.config

MD5	7b6547aba2712929a012d362eb8adf74
SHA1	e7dde0f13bb8289f6b63aef2650d04ce6a8b1056
SHA256	f9c12d9f6a4625c20e1f3bda1a076b50587be63ca2207376b085bd8b9d6bae86
SHA512	9ed2348d075db48da699cc0f1131c17770ab2ab2b45298b003641201ac2b4639bdf2028cc2a0492b317de9d951a0cad2ce6dcd259e2f0421055a04ac43620985

C:\Program Files (x86)\TotalAV\AviraLib.dll

MD5	d6d0cc37647a75064f98df7be2f90fd3
SHA1	bee54ae9b3fd3686a8b672e341bda18ec6123b32
SHA256	1cf8f0fad70f9adda6b54ea13622c440d624ddd31c801f1c3493e1cef7d84747
SHA512	23b805ab3cf0d0da5f6a7d792ed3e7a854f8d23055a4686b9b37d792756a971edf877433a6c4ac6c1f328b04e9e9130802aecc8ffe3ec27b63fe955424d7c6d6

C:\Program Files (x86)\TotalAV\avira.managed.update.dll

MD5	4e509553baec78324665c02e52632f0f
SHA1	460baa72abce39d6bf6341f410af02d0aef2c9fc
SHA256	56f9b75353fdfc424eb57e438e49c247dfc111f1494319e2336086588ce47330
SHA512	5b8f5b94d158770eb39091d9d1a688b117431c092e7e22bdce5f8f5d54290d8b600a4c720fce673c8789bb68cf9a9bf2a430d8e75b3efe6d20022d511143f917

C:\Program Files (x86)\TotalAV\avira.managed.sdk.dll

MD5	6ecd66884c2033bea3db38a866538776
SHA1	23d1d5795e4f06c249527677f51a25084ad1da68
SHA256	8f875895c08f07bcb4816e5b5b52d1004ef0f26ffc81dc6a0f6dc43c5a77aaf7
SHA512	ef95e273d70f08ebb6727ad027d0c890ac6f8f07aaf550b6efe04a11219e8c9bfbbf2fbf292545638d86051d7bd0545e4d5dcaa8b33c1e162aea0c13eb1ca160

C:\Program Files (x86)\TotalAV\avira.managed.remediation.dll

MD5	cbfe8189d00825dc1ffbb123cd0d235a
SHA1	f1fcf30f996ad41fbf1564065437e2e45456e179
SHA256	aa29dbc7d98ed50bcc56b057f877b9e0dc1c38af62a87993576295da65a68967
SHA512	5efd02f7770d611d12372096727b2d7839d1e101482fb1e7dd6dbc088b1aa3773d09613c8331e2d2c8e824c803130ba03f801065edb1950f93dc04af6b6a086c

C:\Program Files (x86)\TotalAV\api-ms-win-crt-utility-l1-1-0.dll

MD5	70e9104e743069b573ca12a3cd87ec33
SHA1	4290755b6a49212b2e969200e7a088d1713b84a2
SHA256	7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512	e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

C:\Program Files (x86)\TotalAV\api-ms-win-crt-time-l1-1-0.dll

MD5	9b79fda359a269c63dcac69b2c81caa4
SHA1	a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256	4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512	e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

C:\Program Files (x86)\TotalAV\api-ms-win-crt-string-l1-1-0.dll

MD5	ad99c2362f64cde7756b16f9a016a60f
SHA1	07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256	73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512	9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

C:\Program Files (x86)\TotalAV\api-ms-win-crt-stdio-l1-1-0.dll

MD5	d5166ab3034f0e1aa679bfa1907e5844
SHA1	851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256	7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512	8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

C:\Program Files (x86)\TotalAV\api-ms-win-crt-runtime-l1-1-0.dll

MD5	fb0ca6cbfff46be87ad729a1c4fde138
SHA1	2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256	1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512	99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

C:\Program Files (x86)\TotalAV\api-ms-win-crt-process-l1-1-0.dll

MD5	9d3d6f938c8672a12aea03f85d5330de
SHA1	6a7d6e84527eaf54d6f78dd1a5f20503e766a66c
SHA256	707c9a384440d0b2d067fc0335273f8851b02c3114842e17df9c54127910d7fb
SHA512	0e1681b16cd9af116bcc5c6b4284c1203b33febb197d1d4ab8a649962c0e807af9258bde91c86727910624196948e976741411843dd841616337ea93a27de7cb

C:\Program Files (x86)\TotalAV\api-ms-win-crt-private-l1-1-0.dll

MD5	3d139f57ed79d2c788e422ca26950446
SHA1	788e4fb5d1f46b0f1802761d0ae3addb8611c238
SHA256	dc25a882ac454a0071e4815b0e939dc161ba73b5c207b84afd96203c343b99c7
SHA512	12ed9216f44aa5f245c707fe39aed08dc18ea675f5a707098f1a1da42b348a649846bc919fd318de7954ea9097c01f22be76a5d85d664ef030381e7759840765

C:\Program Files (x86)\TotalAV\api-ms-win-crt-multibyte-l1-1-0.dll

MD5	19d7f2d6424c98c45702489a375d9e17
SHA1	310bc4ed49492383e7c669ac9145bda2956c7564
SHA256	a6b83b764555d517216e0e34c4945f7a7501c1b7a25308d8f85551fe353f9c15
SHA512	01c09edef90c60c9e6cdabff918f15afc9b728d6671947898ce8848e3d102f300f3fb4246af0ac9c6f57b3b85b24832d7b40452358636125b61eb89567d3b17e

C:\Program Files (x86)\TotalAV\api-ms-win-crt-math-l1-1-0.dll

MD5	8da414c3524a869e5679c0678d1640c1
SHA1	60cf28792c68e9894878c31b323e68feb4676865
SHA256	39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512	6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

C:\Program Files (x86)\TotalAV\api-ms-win-crt-locale-l1-1-0.dll

MD5	034379bcea45eb99db8cdfeacbc5e281
SHA1	bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256	8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512	7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

C:\Program Files (x86)\TotalAV\api-ms-win-crt-heap-l1-1-0.dll

MD5	1776a2b85378b27825cf5e5a3a132d9a
SHA1	626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256	675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512	541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

C:\Program Files (x86)\TotalAV\api-ms-win-crt-filesystem-l1-1-0.dll

MD5	228c6bbe1bce84315e4927392a3baee5
SHA1	ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256	ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512	37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

C:\Program Files (x86)\TotalAV\api-ms-win-crt-environment-l1-1-0.dll

MD5	39325e5f023eb564c87d30f7e06dff23
SHA1	03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256	56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512	087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

C:\Program Files (x86)\TotalAV\api-ms-win-crt-convert-l1-1-0.dll

MD5	9ddea3cc96e0fdd3443cc60d649931b3
SHA1	af3cb7036318a8427f20b8561079e279119dca0e
SHA256	b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512	1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

C:\Program Files (x86)\TotalAV\api-ms-win-crt-conio-l1-1-0.dll

MD5	a668c5ee307457729203ae00edebb6b3
SHA1	2114d84cf3ec576785ebbe6b2184b0d634b86d71
SHA256	a95b1af74623d6d5d892760166b9bfac8926929571301921f1e62458e6d1a503
SHA512	73dc1a1c2ceb98ca6d9ddc7611fc44753184be00cfba07c4947d675f0b154a09e6013e1ef54ac7576e661fc51b4bc54fdd96a0c046ab4ee58282e711b1854730

C:\Program Files (x86)\TotalAV\API-MS-Win-core-xstate-l2-1-0.dll

MD5	5f11b9bb427753bdae6d312a02c516f9
SHA1	6fb327e5a64a94c2489f3a82999b7d60babb228a
SHA256	4879fe3ea58d853f21658aefc5e8b92b7e6333d77c0af31a6bf9ff769475f6fd
SHA512	09a317ecb7d83f1aa2d06e65371513ae770c9df4691b5ad3d50918e4bfacf1635fafaa43ada4efd5d23c448a7eb80675baecccb3ca9dbbfba4e829248a5bf466

C:\Program Files (x86)\TotalAV\api-ms-win-core-util-l1-1-0.dll

MD5	29e1922b32e5312a948e6d8b1b34e2d9
SHA1	912f54be8438f45e1562a47294091d522cd89356
SHA256	34c5dee6d566252c0ceb7d9a21e24d5f297af2b26c32e0c7808bbd088aa9a6a9
SHA512	837cd03ee0195dc94bab0662ff3b8cd1be2dedd8a3254318d25dfea6e88d07211186fa367f41ab864560e10a22220deb3ed05ccf82d60ac80c71dfed08afbea3

C:\Program Files (x86)\TotalAV\api-ms-win-core-timezone-l1-1-0.dll

MD5	c9a55de62e53d747c5a7fddedef874f9
SHA1	c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256	b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512	adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

C:\Program Files (x86)\TotalAV\api-ms-win-core-sysinfo-l1-1-0.dll

MD5	887995a73bc7dde7b764afabce57efe7
SHA1	363fd4e7ad4a57224e8410154697df5e8629f526
SHA256	f94210b39cdc812beb7342a47e68673ea2116d0ad9266fcf8d7cedaa9561fc38
SHA512	d088eb1c6958774e20f0e2884136b4e2b978efd16f557dbc55e64011abbce0768054f7e6d881c110182824143a39101fdae273ed614738aa7ba5c727b27f6677

C:\Program Files (x86)\TotalAV\api-ms-win-core-synch-l1-2-0.dll

MD5	6e704280d632c2f8f2cadefcae25ad85
SHA1	699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256	758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512	ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

C:\Program Files (x86)\TotalAV\api-ms-win-core-synch-l1-1-0.dll

MD5	c1dcdb0fabc8ae671a7c7a94f42fb79a
SHA1	99355912d7a7d622753b2a855cae4f5a4e50146f
SHA256	cc76a4e82e0e0cd08df3bb8f5ad57142305e0f666cc32599d76e363d0b43efcb
SHA512	6d92e7520aeebfe60aab43d6616b76a2dd385edcaa217db60003a0c0cbcb0e367063d240e38a19d0b8bee2f2e7d4b982c4f08c8e9ccf34c7f670cb49f6561fff

C:\Program Files (x86)\TotalAV\api-ms-win-core-string-l1-1-0.dll

MD5	e7a266dd3a2a1e03d8716f92bede582d
SHA1	d4b97ce87c96de1f39fea97cca3992d292b2c14e
SHA256	339966ae75675a03f628c4ddd5d3218abb36cbcf6ddce83b88c07336d732b8ae
SHA512	31168663fd71b901b1b9152ff288d4e1567003e5fcd1f1c9dfe36d26d2eb16b0932ec8cd34833dab25531f768a01de45c2483f92d4e79f92a89389c02bc05156

C:\Program Files (x86)\TotalAV\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5	65fc0b6c2ceff31336983e33b84a9313
SHA1	980de034cc3a36021fd8bafff3846b0731b7068e
SHA256	966a38ed7034f8d355e1e8772dfc92f23fb3c8a669780ed4ac3b075625d09744
SHA512	f4ebc7a6d12ae6afa5b96c06413a3438e1678b276b1517da07d33912818fc863b4d35cb46280f12cf90e37bc93e3ab5e44ea6f75767a314c59222b7d397e5b6a

C:\Program Files (x86)\TotalAV\api-ms-win-core-profile-l1-1-0.dll

MD5	cedefd460bc1e36ae111668f3b658052
SHA1	9bd529fe189e0b214b9e0e51717bdf62f1da44ea
SHA256	f941c232964d01e4680e54ab04955ec6264058011b03889fe29db86509511eba
SHA512	2c845642b054bc12c2911bfe2b850f06fecafef022180c22f6ffd670f821e84fcad041c4d81ddadb781ddb36cb3e98dfe4eb75ec02b88306ef1d410cbb021454

C:\Program Files (x86)\TotalAV\api-ms-win-core-processthreads-l1-1-1.dll

MD5	95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1	c400205c81140e60dffa8811c1906ce87c58971e
SHA256	ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512	f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

C:\Program Files (x86)\TotalAV\api-ms-win-core-processthreads-l1-1-0.dll

MD5	1dda9cb13449ce2c6bb670598fc09dc8
SHA1	0a91fe11b9a8321ca369f665a623270e5ac23176
SHA256	4f187f1b4b14763360c325df6b04d3ec3cc6d2cecc9b796bc52a6c7196b0b2cc
SHA512	4e106c8a52033352c91b65cf65ec459de764c125136333a2f4ba026efdde65f3f71b1f6f11e4c580150ac8a9779825ba5e2af0e14df999a198cfe244e522c28d

C:\Program Files (x86)\TotalAV\api-ms-win-core-processenvironment-l1-1-0.dll

MD5	0c700b07c3497df4863c3f2fe37cd526
SHA1	f835118244d02304de9eb3a355420ba9d0bd9c13
SHA256	9f1f26794fd664e0a8b6fbd53bfca33dcf7b0dc37faf3eb7782bc38dff62cd8c
SHA512	8042dbd9e80e33e41993887b0289e143e967544389500ada9296b89bda37bb26918e4f370f8a1bdab8faacc4e0a6980794d6a3b5320e170ad4ef751384c9f0a8

C:\Program Files (x86)\TotalAV\api-ms-win-core-namedpipe-l1-1-0.dll

MD5	990ac84ae2d83eeb532a28fe29602827
SHA1	0916f85cc6cc1f01dc08bdf71517a1dc1b8eaf78
SHA256	dbd788b1c5694d65fa6f6e2202bfabb30adf77eb1973ceb9a737efb16e9edae2
SHA512	f0e4705a6890b4f81b7d46f66ca6b8ee82f647e163bce9ecad11d0bbd69caf4ff3c4f15e0d3f829c048b6849b99a7641861e6caf319904d4d61a6084f10da353

C:\Program Files (x86)\TotalAV\api-ms-win-core-memory-l1-1-0.dll

MD5	3940167ffb4383992e73f9a10e4b8b1e
SHA1	53541c824003b0f90b236eda83b06bec5e1acbf5
SHA256	ec573431338371504b7b9e57b2d91382b856aabf25d2b4ad96486efb794c198e
SHA512	9732acaa4db773f4f99f423d9feaebb35c197bbd468922348e0ad086f7131d83f6d9714dc7d375183e7cb8920cfe37f3da19b0041a9063cc60abe183375b1929

C:\Program Files (x86)\TotalAV\api-ms-win-core-localization-l1-2-0.dll

MD5	23bd405a6cfd1e38c74c5150eec28d0a
SHA1	1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256	a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512	c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

C:\Program Files (x86)\TotalAV\api-ms-win-core-libraryloader-l1-1-0.dll

MD5	0c48220a4485f36feed84ef5dd0a5e9c
SHA1	1e7d4038c2765cffa6d4255737a2a8aa86b5551c
SHA256	2dd4ebaa12cbba142b5d61a0ebf84a14d0d1bb8826ba42b63e303fe6721408df
SHA512	e09951785b09f535340e1e6c256df1919485b4dad302b30d90126411cc49a13807b580fa2fcd0d6f7b64aac4f5b5ea3e250b66035a0e2f664d865408c9b43d48

C:\Program Files (x86)\TotalAV\api-ms-win-core-interlocked-l1-1-0.dll

MD5	cfe87d58f973daeda4ee7d2cf4ae521d
SHA1	fd0aa97b7cb6e50c6d5d2bf2d21d757040b5204a
SHA256	4997fda5d0e90b8a0ab7da314cb56f25d1450b366701c45c294d8dd3254de483
SHA512	40eb68deb940bbe1b835954183eea711994c434de0abbdea0b1a51db6233a12e07827ad4a8639ae0baf46dd26c168a775ffe606c82cbe47bae655c7f28ab730b

C:\Program Files (x86)\TotalAV\api-ms-win-core-heap-l1-1-0.dll

MD5	ff8026dab5d3dabca8f72b6fa7d258fa
SHA1	075c8719e226a34d7b883fd62b2d7f8823d70f1a
SHA256	535e9d20f00a2f1a62f843a4a26cfb763138d5dfe358b0126d33996fba9ca4d1
SHA512	9c56ff11d5843ba09cd29e3bc6c6b9396926c6a588194193ba220cfa784b770ab6756076f16f18cfea75b51a8184a1063ef47f63804839530382f8d39d5cf006

C:\Program Files (x86)\TotalAV\api-ms-win-core-handle-l1-1-0.dll

MD5	18fd51821d0a6f3e94e3fa71db6de3af
SHA1	7d9700e98ef2d93fdbf8f27592678194b740f4e0
SHA256	dba84e704ffe5fcd42548856258109dc77c6a46fd0b784119a3548ec47e5644b
SHA512	4009b4d50e3cb17197009ac7e41a2351de980b2c5b79c0b440c7fe4c1c3c4e18f1089c6f43216eaa262062c395423f3ad92ca494f664636ff7592c540c5ef89d

C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l2-1-0.dll

MD5	3f224766fe9b090333fdb43d5a22f9ea
SHA1	548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256	ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512	c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l1-2-0.dll

MD5	79ee4a2fcbe24e9a65106de834ccda4a
SHA1	fd1ba674371af7116ea06ad42886185f98ba137b
SHA256	9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512	6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l1-1-0.dll

MD5	eefe86b5a3ab256beed8621a05210df2
SHA1	90c1623a85c519adbc5ef67b63354f881507b8a7
SHA256	1d1c11fc1ad1febf9308225c4ccf0431606a4ab08680ba04494d276cb310bf15
SHA512	c326a2ca190db24e8e96c43d1df58a4859a32eb64b0363f9778a8902f1ac0307dca585be04f831a66bc32df54499681ad952ce654d607f5fdb93e9b4504d653f

C:\Program Files (x86)\TotalAV\api-ms-win-core-errorhandling-l1-1-0.dll

MD5	d91bf81cf5178d47d1a588b0df98eb24
SHA1	75f9f2da06aa2735906b1c572dd556a3c30e7717
SHA256	f8e3b45fd3e22866006f16a9e73e28b5e357f31f3c275b517692a5f16918b492
SHA512	93d1b0d226e94235f1b32d42f6c1b95fadfaf103b8c1782423d2c5a4836102084fb53f871e3c434b85f0288e47f44345138de54ea5f982ca3e8bbf2d2bea0706

C:\Program Files (x86)\TotalAV\api-ms-win-core-debug-l1-1-0.dll

MD5	879920c7fa905036856bcb10875121d9
SHA1	a82787ea553eefa0e7c3bb3aedb2f2c60e39459a
SHA256	7e4cba620b87189278b5631536cdad9bfda6e12abd8e4eb647cb85369a204fe8
SHA512	06650248ddbc68529ef51c8b3bc3185a22cf1685c5fa9904aee766a24e12d8a2a359b1efd7f49cc2f91471015e7c1516c71ba9d6961850553d424fa400b7ea91

C:\Program Files (x86)\TotalAV\api-ms-win-core-datetime-l1-1-0.dll

MD5	8894176af3ea65a09ae5cf4c0e6ff50f
SHA1	46858ea9029d7fc57318d27ca14e011327502910
SHA256	c64b7c6400e9bacc1a4f1baed6374bfbce9a3f8cf20c2d03f81ef18262f89c60
SHA512	64b31f9b180c2e4e692643d0ccd08c3499cae87211da6b2b737f67b5719f018ebcacc2476d487a0aeb91fea1666e6dbbf4ca7b08bb4ab5a031655bf9e02cea9a

C:\Program Files (x86)\TotalAV\api-ms-win-core-console-l1-1-0.dll

MD5	aabbb38c4110cc0bf7203a567734a7e7
SHA1	5df8d0cdd3e1977ffacca08faf8b1c92c13c6d48
SHA256	24b07028c1e38b9ca2f197750654a0dfb7d33c2e52c9dd67100609499e8028db
SHA512	c66c98d2669d7a180510c57bab707d1e224c12ab7e2b08994eb5fd5be2f3dee3dbdb934bcb9db168845e4d726114bce317045027215419d3f13dcfa0f143d713

C:\Program Files (x86)\TotalAV\Accessibility.dll

MD5	1b4cc6782e295675217cd17df70057f3
SHA1	f468087e7fbaa5aeed1fc41062b198570ae017e3
SHA256	f08bdbf797dfdbbde37000fb29141caec4beb4dc0f552ab2cfe0887e1e6c5f60
SHA512	05289e9514d173694a1e15dc5228976c963572353c78412bc79bdc933ae89df08e889736232c6240e4fa1e8f26689cb4eeae4a83aa9e333a6d1882b8b857a8fb

C:\Program Files (x86)\TotalAV\SAVAPI\update.bat

MD5	b862a1baac142bcacd391414d665a0a1
SHA1	79aa0c97010707640bfa3082b29fd61b1373dbce
SHA256	924f07591863b3e6d43371593a3c4d57bba93cdbf59fdf102ba72abd55e92879
SHA512	788f4e959fdf91f2c3a2a46ff9d1ed51f96c73238f3e9aaab9e2b2bd45759645085082aa831220c9ce023a7a741213538d852658b9cbe4b12bbee5705e1f2d7b

C:\Program Files (x86)\TotalAV\SAVAPI\scew.dll

MD5	4a144eb1f737dc00689659b36aff0384
SHA1	4ce0c8afbd153473d6a03fb2743e209b5ddd1c0e
SHA256	10f3a985da345376502bb8e4fce9c59aa15633b78347bf9080fb61bdd2e3cd5d
SHA512	68e5044ed77ebdcef9b0b3fec7174ef5faf56b38aebf5df64ec925c817021453e97a3a02a348996cfb3976b995e59439b3128930ba176600ab4b10c12ff40726

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_stub.exe

MD5	3899d956a9c88d0519e188d067de5d19
SHA1	241b01e86a121694a48722ce4dc6c08bd0bf5cfd
SHA256	91265685308da5d2a1cc5f478b83e43a4656fd075d7cfee3923380905fd8dfaf
SHA512	7f6e4d7b279f3c08022af6290e4015f12d4e8ba54ef65681d162bb421f08a81b57b4b2e7004861638c227da746127f5e9d4ee7932f3e2067b990f6b2951cb633

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_restart.exe

MD5	9919de22bf888ab8d7122a04646aa313
SHA1	35af4b2757b6d96e345ba43af1d126ccfbbeb23d
SHA256	4b75f1e230aa0195e8da68e481eeb90b9d85194f15e2d458bd8ebee6d9d69ccc
SHA512	deb7c4af295ed1c90205bd4c1299c62dbed70711ae16e3eceb64b386ca5e78537f801c1641d13617a6ee448cb187bb0399990a8161abc6685f0ee941a110224e

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_pretest.bat

MD5	55d563f40e716ab251760a52f49a0e68
SHA1	fc8a086681368388dbf77199cabac654765b133b
SHA256	767637bffb932cad48218f8d128f2908e57c4a42326db29dfeaa1c5509018186
SHA512	b218b11f9d66812a76c99b5a9a8cc73f9c83c626cef17049425855d5242e9c2e4355557c94d8a9f4d8f0fa6edc99a4658849f5edbb0320f7342dae4bda18e34b

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_pre.bat

MD5	912510dd6dd41ca900d10834879601c7
SHA1	4dcaa7061636cf05ad5fe72ecb20ca29f2c003fe
SHA256	ec07adec51dc57f42077b2757421012c49fc771fb8cf664c36505d664e996c36
SHA512	63f0e1b37d83d208d1d9fab44b74d5f0def82caeb4f2289d7ffb6bacb28013f6a24ae61d9a83e6684c80b5221675d76bc75a94c9fb2ebe31819465135753ea6c

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_post.bat

MD5	0dc718c8c4ccc13e58f9224f1af1125d
SHA1	51cca0861c564b973dc5017f6a9c86d47b2dad31
SHA256	4682c0f3dcbafa32e3dae743268a0babf67fe2970b4b0dd3f91cc7ed54627545
SHA512	b6e4b9b9b50669198d35a06c15bf8334eb3e68801946a96be66aee00361faceed6eefd84303979c5fceb87588a21d4fc1c94ca2a9dea5fb062d2a9da8c4cf27f

C:\Program Files (x86)\TotalAV\SAVAPI\savapiclient.dll

MD5	eb905e77afda1a6e65342a83ac5fba75
SHA1	93434d20f75db97bf1947043982d33d282db96a0
SHA256	8f5aedf1f8e8dd027aabb3420ed7e0e38219a7d8d3b880f3a46671d32270fc69
SHA512	4fdb07e66639fe5efeea5f45a57db932be99e7ce81aac392f7fd52dc0b333a219da5af9df980ca3caf256f899640a4bcebdbdb8aa4bb2269160f692a72b880a2

C:\Program Files (x86)\TotalAV\SAVAPI\savapi.exe

MD5	ae60aaf104b487577024715df996309e
SHA1	ca80a770fd21bf51a4f1a3c05b1d4dc974780804
SHA256	212b3d2c8f570375b95fb2de9f681a9f85796220b4bcb5abb6a2d248ffd9e1ea
SHA512	108efd4b3e463a1ce658d497de80fcdcb9c6b7ab08abd8fddd639e8de4383b6a4f793cb3dc249d9c5e6d157db897d10b65d1e919487e65b480305fa61be3c98f

C:\Program Files (x86)\TotalAV\SAVAPI\savapi.dll

MD5	85815e63269ec76386fd2a4d418f75be
SHA1	34b6ae807c5ab324e3e5a624b4bfa325ad86d890
SHA256	5617fc94cdd8b0c7a14df62cfc77f64ffe157d5fe96cc02c9ff209db97274e0e
SHA512	08401d39a1d8cd2b047b66c14236aaf04fc79d2a21c57e38198a6c2ccfca5e2959628a4674eb5609f7bb8d49eb87ea9033562bbdb058dc03beab81478b95e7d6

C:\Program Files (x86)\TotalAV\SAVAPI\savapi.conf

MD5	c1f0cfade5c32a37b223f5f7b0ec3510
SHA1	8fb0afd1a53feb25652937d09865e3cc8cf3f02e
SHA256	b30e328a864f6c4bd5544f6a7c3dbdc2cb97e668e2e583de0590506c881a16b9
SHA512	9dc05c25f907ce29ebccca1c34fbf926ea7a4d803e2d2fb6106192176681fd151b82605bc066e7e55e03b14aae3ac81008dadc70889dbae887de5f67ec11aa40

C:\Program Files (x86)\TotalAV\SAVAPI\productname.dat

MD5	53ce39cd5a411bb30c5b1d413e641ec8
SHA1	0b7c31237c9b0a436ace5274938d420f8c7d6385
SHA256	84cc36c119381af58ccaead1ad8995b92317ca4ae8c38a38dc37071d712bb4d8
SHA512	3524dea3bfd8cc9539d70102ab3f49da50a1b0c1a68b7073869b7f193a30562d716526a6de13a40f07480763e3841bcc3743b91f46f9f87630707e63e7d76f26

C:\Program Files (x86)\TotalAV\SAVAPI\plg_fops_dummy.dll

MD5	e31669de92895bb6b150e3f319267458
SHA1	83a6ffc6da2421d28e4f8a068a0950726078673c
SHA256	18f14d6ef36885b58dbe598cee1ff20c83afd5f9cf0c739394f74251f51bbf2f
SHA512	2d5f7f682e88fe83223efa7763e1dd46f50462eb8f164c90bf34c41c40ba06b98720b2acc04238809fa646b708a2c4a640ddb0e1ec0a8ae244cc29737e4fec6d

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.sys

MD5	40786e1ac650f9f7e8b67a672b5eb69e
SHA1	f529c7b666b029e19a301a30463abcadd59f4b0b
SHA256	c754dd80f8f3e19144ffb01a17aace2176cb5a8dd404a38ce6ec4ed88b6af759
SHA512	da8453b4d97dc4994a6db2fbdb741119513bd007078bc352b664f77790a7c7de876f038943cf826dbab81962bc5551f506dc04e7d69945bf324f3a23a5e9e6ba

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.inf

MD5	fabaac0d5c0ef083150dec8615a8b2bb
SHA1	23b864f150922bd020b679e018b1b0ee59a7353f
SHA256	bf526004b80b6698f782082cd3da58abf4e52a5f390d2f8d0d131b80f19775d2
SHA512	51cac3b029a5ec11ba36e8b7ad86b720da7e6546cb4ba8cad319200892ff143e9664e4a29d915a79f4a302b15078e44f0bc934715b8fcf8deaef4d7e3dde5801

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.cat

MD5	88ae7b9879c9ac3a65ef73424600ba65
SHA1	67f74e5f569aed30bda54b5a6467d86d0110e448
SHA256	71e8546ba1c9716ffc8072f97feb945cc466d832ddbf53b090af179094d473bf
SHA512	5b87166c206dee390e81a3ad334578a9b1ca7274b677af3cfeb2c6cfe46b756a59df78b0ea5ab7c1e11d3465f5955e58bac8dd45daeda61ac683ae53388c3dc8

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avipbb.sys

MD5	c8d33c5b49a4760f2d81710eba839ba2
SHA1	8f41e4333dabe52bfd988a68785d0687599f1154
SHA256	80d9d7444623175794a51b6710f99e911943bb58a7a9621bc53d0d4bde304daa
SHA512	451dca816d38538e082c7388aac0997eb04f5e8fc288fe44aeb661ece1e717060d73f24d60c7576403a68a5fbda3f931161602a2a8b98f506b56ff64c095cd78

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avipbb.cat

MD5	209bedcc941da626c2db370a80e3513e
SHA1	c88910bf5a4b35893e60d92828568d20420a9caf
SHA256	f456a7783dfe46bb46547464579498f7b4801258424b4caa264d8c6f57c1150f
SHA512	ddef0175e3e2919c4504f99d054b314e48f4ed0ac5c1b3153e1581b3614f304fe3850a8d465163cb4c502d4b026986121d6e4e30fc421d2c583b689ec933a10f

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avgntflt.sys

MD5	ec059af10524644bddcc073916e78375
SHA1	93a9466afee21f61f643f540b2ab82ac7db60b62
SHA256	868ecdf543865035a3703e8837869441683b8ab396eaadf6aaa0e455e8393c5e
SHA512	88310251e07eb6edda3eb28d057a18fd7d1ea7a9adc5f861fa7ad127561bfb035468974fd11685b66654fc37dc3577d7d720e2e9e4f4fc38d116c1089ee9afe7

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avgntflt.cat

MD5	3ece229fca8ecdf8e4889e062abbf95a
SHA1	47aa2952646097710297f5bded9b115e418bac00
SHA256	099e028f17154e5dafdf66a9963dbccb25442b0c570c29aeaae1e9d02539a8be
SHA512	985d4005541e25f39bc7abf80c05b97fe57220bf02bcbb7ff41f792283af5aba87d7db433217ffcea002d35dd113913bbb6e980fbf99778126f129a799b58573

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.sys

MD5	eb5c2402e2f402a19504bf6ca9c3e06a
SHA1	63aa9690c36d743951558422d841276c25cde77d
SHA256	f8d33bbf769786163105c0fa794970054bad34cc5985416af553df1d9a64039b
SHA512	9b6b7c06e904cf36aefc17e14a108e9636c3a8920a34960dcb26fa520326c7ff47f03c24bacaec6ba91440237fb16afde0df01c299cdd7a89c40cc489a3f0151

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.inf

MD5	176af3c43b608af665f48a35f497bae1
SHA1	e992df632b9758b3df7b4ea69c632f12a03daaf6
SHA256	f79a54cfa9f0901ff965e577cea1139583d1c73de9568170f895ac2b46c9b305
SHA512	03cec71f9ca56d99304b6dff1b90a2ca5d04bf5cf7cd0e41e1134cdb1cac50540d6e3bec18313f970420af4bf29d76653e9c5a9fa1351d1747989dfafc208493

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.cat

MD5	f3324c2c121d360f8ce3553e221c3ce6
SHA1	85939054d39067cc7e1089de71138b4b4283f800
SHA256	901c32f032fcb4782217c4d2f3f570e932107dda74a173f1f3d8cdb993bd1007
SHA512	045db8fab56ab1c4ff0cea326cd44624c3bbab2d042b3065541707bec0021b669e6a49fcb2adf502fbea38dd4823e85fe0f2c588f93efeae4108239ae1271c78

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.sys

MD5	b49a44df6fe77ccb861985f5a5dd7ba5
SHA1	6e5163e191dd789f8cc33a531ce9ddd9bed2a842
SHA256	e442e66d3e24d54696c8687d1bd1a9ab41ed34b723d2b25af195589d11c4fcde
SHA512	d53f56966c8750edc513c86c8e9b47fa1f0445a86a1d92621f1aa5fc9b9400a4a7f65b9ae0d2e537c9dde1b23b16fbd56af8ab74d62a8a777106e9b16e58be89

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.cat

MD5	351a7acf84d15a92dc75d3fc2f504f0e
SHA1	1d316b5d3a8729c0f03a140ac55066399fbc808f
SHA256	3ad3712e2d8e420fa4ea033110e202da3b70288b4f42b4f676e12a0b72f4a632
SHA512	f705ee3bb4aa9328e808d0a8793692e1b525c0413e2005bd5f1d442be4da23e05b9549d85ccc8c1ae1f9c818a4ccc19207f0feffcd11d7b2b3039ed4e20c3b23

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.sys

MD5	d9f90202659f8ce4d5db6e83d24b46dd
SHA1	29a7b1068a5090ee59db422364b42d2c8f072a46
SHA256	31a3f5c4b19040eb20bc15b4609068128fb6028e137e98f2b2c6c679d0311c4d
SHA512	b0a9a0c0f18446e6a2b9ad3200dbd2cb94acae5df553beb971b41220304941219d12d3e94ed91dec254e6b907dac6fcb1aa72a822a09a8e523cc76071b221c31

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.inf

MD5	0d87b337d3a44a6b7de7bf6c4bbbabd6
SHA1	692a736647a575278c65dcde5996410071df09ba
SHA256	2d220946e718fbd41e68d9324caf2458a95beb1446e8447edaa2b99c8eb265da
SHA512	6910581b8f3b88596a5e8da43beac9ea68f6aa3644b8e634eefa8f12c3be1c243ad31eff0122904d8c61462f040667569a47c9f19950e5dac7e1a6c8f89aede2

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.cat

MD5	f3018b52949cdcbf666ffaf6c17f985d
SHA1	9b4692f754d090cd8b2afb9c4ddce60a05aefc9e
SHA256	7f49d676b342ab08d809cac3326e8101c21fb9776d51853a9ce2fb5e8b92c245
SHA512	69b1b5c607e37d6cb0e7049fb0ce1ee79b720992a354aee73b67e9b87dc1e2c16548ae55786dbb65ec4e8bcfffd39586edc660d5b41d58d69746b8c25b627af0

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.sys

MD5	e3ab0eeb7613ddbacc0388b96048ff5d
SHA1	f6e382597081451d6546339948edd3e854b7dfae
SHA256	5fdde96d05b4284fa7ee985a7777739c46040ad89b3b8217a729da9695e3e542
SHA512	40c0c7ac884297350a40d58a6a870796381ccb82ade22d69ca3cb9be0c3251b8768f95ab4b0f28f209ed65aed23894a7e77529316250ace7e5da8a99d0bb81a1

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.inf

MD5	dddb1f6ae43397a15af280de3ebc3c83
SHA1	2651935088949e2dff211a7c1126a02836a9b781
SHA256	431367c384e680b0f4feafaf7529319ab2cc3cd37bccd291b46c711fa49204ff
SHA512	6b5d7715d691d18647d1cdf5e3d3bcaae84fa9614378770d544e0263261b99539977922632acbed76a520aebe045396635e45dec9defa9527500f5889d9e8069

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.cat

MD5	a63897b79888e60e29431eb1b28844de
SHA1	86feb4a8ff0beda3b6c349fbf17c7b6a37e771db
SHA256	4f7410877d36f20a802c5db603149a33beed2d10e3e83f6c5372e52be42fdae0
SHA512	b176be196dd4967b28305a4f59325034b8ec4e7b544a2011f8b8f908a8154db8d86a3183e25b22232597024d04bc536d42556df89fea3169f0c21251da27ef9c

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.sys

MD5	18ed8302d083dad602823988a304a4f6
SHA1	01014fd10d7babd6d81bb7e9511ffa7e13c890fa
SHA256	629da28ac97f5b17b1603059242088727e1552d68fe350f97fcd0b67d412ab25
SHA512	de9ea04221fb1270db37d35fcc1acdf7265103e079fd31566b0a043a1fa3b2267a034b720a3070538f289fd3847171d3d54277417ba0f67aede86f1b78db220d

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.inf

MD5	34c3d7f3bd04501338c421cd9c62b993
SHA1	7feda197634072bc48e214800a3d4550cd1fa32a
SHA256	a68faf360ca9d5da989a1b6e7ff69f7aabf7b52be7819ec862a6688b841125ff
SHA512	166b4ba8653b3f932ff806e39d92a48e2e2ef7c87f82fc0560add528bf5dab34e0937253c8c5778dcd31f9a925448414066c623d976fbce21893bed08c7ead70

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.cat

MD5	8e59d322b492d531124a0a51a5eeaae9
SHA1	c58672a169f96336e12c0367bd5afa5906bda93f
SHA256	4efdc56d06e5a17315784d3e700e359fd3ce701edceb6d3370de64d1617d42be
SHA512	2ff077f6115c6c4b87b11c78b7fb48ecc0f800f2b8a89ce16d709b802ced671f175c80746aa89f745de6f33d1f894991335de39214909ac0a084e709529a2548

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.sys

MD5	f16335a9102ffc99a8c8e07e1b2d57d4
SHA1	32ddb4251591e40db352661be4721c5c6402b90a
SHA256	33c6b1d49ab13d6ae9f22e05d77b70123de63c802363da0daf1be958b7d3d532
SHA512	57746307cab7e82e9e7ef5f033628810997954a40cf57f34650cbc9ac77fc2fa3465f1206f87e0082edc4121114dd71f2f816a628872fde26136012766a5cc52

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.sys

MD5	20894c53c0b9db8f86993d9ecb78f9d5
SHA1	7c18c5b571c906535d393a5165379f6316143107
SHA256	d5e35a021e2a8e676b9034a2c712907f170d3f5b7315d516f317f51cd03ddd06
SHA512	7fbd637c64a3ed5ce202864197ee26e0d97f84be8bb0bfd5bdbfcf500f370764545489de8d83c347e5f15a414bf5d614377a60983803924935453266f8af5d24

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.inf

MD5	e92853f21048c93a182a140e667983e9
SHA1	4265adb15d2f6ed70b7521d3887bd2304528ebef
SHA256	9fedd6e956b7cd59180920ba7a6c94d0c0fa1dee867ed6087ba753ca47d21a37
SHA512	11617cc1fd33066ba4e54be9a174b7b4a610de66712299dbcd379d0f5b2cc4bcb1590c1719867129cac962619d0e04b25a177139a4c6f5b041c9c8711fc1b419

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.cat

MD5	8dbe5877f742d7d8fb652c84f76fab5b
SHA1	126f9190ef1822764e8d7d16bc14c4f03d0fffa9
SHA256	40b23a7d83bd3595a714918778249b6f999c8b016aee814207c893c8aa791e9f
SHA512	70fc63d4a4b101829a0e32135562cceb9ddebb36f907c96f01639b29248d4417af98dfa5ec8143e55db4e19c159c4a08a176bbcf2ff17a3ffe4627e7550fccf1

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.sys

MD5	a17862525867081a577923e210604a64
SHA1	9b6f498bbda86fc464d6e5094bc8529ecd3e7579
SHA256	2bf4e12f41f8d78737592b7f29b55206b2df15411cc2943e678f52096289d06f
SHA512	e33c701cad149844913e5853187e4bbf43f6bc230fccaec21c847b373da7299849f2f3d93e6a07dc2c3c774f5119a31f0f44ed77821cc1e8dda93661e620b2ca

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.inf

MD5	1b439a706d228a6dc534a3a8731c1afd
SHA1	49e34aee2faa0cbaa9bfd004eefe3150e64451b0
SHA256	4ae6e2a7c2e11bf797ba3b4877fb4ddf2ca75c6f774d4dfd4b002a307b7f938a
SHA512	d2cf3f4c289434654d7103f0517dc99bcf98f8db01e34af25c07015fe90ca88866bc0de8d6a1983406bb2f2ad85c179a47bc9095ce650a1ee0cedf23d2a8c3f0

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.cat

MD5	116668cc50e8f234ba729a8d8895b1e3
SHA1	cb987ae4def6e022dc5e62cbf8a76e374bf9404c
SHA256	d50ffe995b3ad0b44dcc30976cb047ef690646872fa9dbc3c48950cd8593e918
SHA512	3c5d04ddfb87c0fc611f6eb7b281d7a67584f9b2a4713f3f14aa1f709cceace3898fc00e4a90bc9caf59cd11e006f917536e602f21b2ac610a0245af4f3bbf5b

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.sys

MD5	6b60c0a7fdbabe955a183ae3b524d543
SHA1	be68e043fb0f6e0ca745b8361924ad0869bf2bb9
SHA256	33d6cc050cefb737b70431c7e493a0d7b7f5ae7546d36fd24a5d4b1ebf29d307
SHA512	040ecbb33bbba5bba6206cee7717cff01fc8d3436762a4f2af6647cd9f02b31d48538ebc0d91b627fd0f9324375544905c2e09e4040c55b3642480e683f73df9

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.inf

MD5	139c7c318ef6d64fc6c7ecdf1f7422da
SHA1	7fc18f8244ee8c795f0da452fbb1f9bb628f9e2c
SHA256	88f7e8d81340ab33fc71702c2817427e7b26ee31a76d59f167a00f2af2c783f0
SHA512	504b7e7917f15e93bcdcdbd7189c8b29bc27487d2c61bf3d78f9edc4f361dc0136621b55f0e1b0bf7a69c8cee668f520b72d6f45197ab58f62b5b36371c7fd27

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.cat

MD5	622330091b3d75e6e562c37582ac8b2b
SHA1	6915486dbaf7cbd2846e63a6d1e12bff67c56922
SHA256	736c72051ea40058e98362f29a7a9a5ad73032bbbf8bda53ea897f64c5bc7de8
SHA512	5f93f6a59d798bd25aab1fe9a75f6cb13210f07bb49b340861993deaea4206fec9fadbfad6cba0c000fa6709a2e6ec6de48cbb014232f7352d272586a414ce28

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\README

MD5	dd70354b0df8379ef2edecbe4304f900
SHA1	04670a5a3d483ae50bb5488cf8cecdfa7b7083aa
SHA256	43b602dc083b9e5836f32def1521b42f5971f7b12e47e8d272049283316f0aed
SHA512	1ee14e8834c0817305e01a03984a73484a23b26f9328224513412b764017501cdce0473f58d2d64ed647adf78f51bdc7b50f5efe3f0183d736154cab83ae70ad

C:\Program Files (x86)\TotalAV\SAVAPI\cacert.crt

MD5	9956b172b62aeb41ca988999947a488e
SHA1	199e3607abeafd168b02b062697656a847fe4de7
SHA256	c38123acd05cd0cfe4375417f766a9a465327117f5025b16e4403cfd2e07f045
SHA512	5d365e0b88a15b43bf84650f0e98bb05fd6e0257cbd73b2227bc27b94cad3086df2a65fa227ddfdf484447d91297c48800a1ed111a6bc880da53195b8657f189

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate_msg.avr

MD5	7ff9f5f6a65afe7c10b5de77f4986042
SHA1	d19c140cade5ddf6d1f588f453fccad44525030b
SHA256	056ec25ad90c88a86b85a9c72246b0d4003be39ef954a6bcb1baa92e63ed6101
SHA512	3271017bbf7afa11cb6804c5578d8fbc4410f01fb544074302cc491f357dbf1e52f8ab9d58648443f5e5f3fb64adb8dda96fe08d94ca2525465844864cf2ca98

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate.exe

MD5	e0947f2084e589a4d7f1c0f541b54321
SHA1	3ca9be3bc2678b85e36b9823a617376a268ab889
SHA256	afb45b8ae7d78085d95122ae01f6bac1515a89e7e2c87c55596670e2b5e922e1
SHA512	316a214436031a498de8b2b6ca33cb9f73cacc3ee19f22f86d90583f817e35f0b93bd44e3af8e47baf1c7e44fc66b9c2031995cc4ce69a1bdbe980de93e5938f

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-xvdfmerge-product.conf

MD5	c7e74ddde5788f5e9510034b66ff0fbd
SHA1	8b821abbe25c98877836a4a76446bb98871a9aa0
SHA256	1ccfc728f83e1709ae01936e369610e6f9bf7d83e9b406af995cab5fa1863d4e
SHA512	7657ee00f0e8b5365b02d12393aa64e5862dc87e5ef5390824d536d72845b2e9e46a25ca0676f49e6d4cfcd7ee164e80832696a369e82d464d938139e8d745a4

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapilib-product.conf

MD5	d8e715e99b1709e69303f9d9dfd0ba88
SHA1	68964f716482230d2b3d28677257f8742235e6ea
SHA256	f6c89a441e41a381ccb1785d97d9aeac95d6d01f13227431baa6a4c06b4f78e8
SHA512	3fce72763e81318f31bfb684fea8f189dc85fe3798d14978a3d589a649107e9a7ad61c0ea1f4f0ff2c50b8663fad3ec6870d9c595d7e66f8c0c11e3de42e5264

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapilib-engine.conf

MD5	c0b5b102ad8dcb4190e4acd1e4c78d99
SHA1	6364654bbe47f784d84eb8387fe14d0a7c267a78
SHA256	ea5ade6e1bc0df9e2773dcaf5cf9bb087965dba3c74a12eeb9727747cffbb614
SHA512	76264a03d43d507574582aa6954d50ab3e0954153489abb4c311989226e9e951bb4de188cff8d92c4d48c96470d58d4d7bfc094a6a74c050ee8ef25a61395250

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapi-product.conf

MD5	c94d4130ad378ddbc7e341937cf10692
SHA1	81a7fc4c1ebaf2c19a590c43d60d4b9f3650edbc
SHA256	30ef0c181ee31e52efe06d44f5d33e5a868160e6f93f573f38aac4b05f681af0
SHA512	59ac58e5ee40213cdbe8de93baa96db946fbd1e1c7b946ba31a61e4550e4bab29286811310fb966bb9725ffdd5f4b750b09a188193bd3bd5111eef5c882e2e49

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapi-engine.conf

MD5	01a844c7204488b536c48a72090f8a39
SHA1	417b1670c72d9c0c70953e88fcf2ba8bc82c245e
SHA256	cfd50eeea0c80b8dde883951aa6149410ccbb6a08fb001cee109c276648feb1f
SHA512	2aa341bbd42ad658bc4db5d5521dd1c5a882796b3bc745be89607ccbadc084bd790f92197e0881f4d45a13cee74fdd8c73b47e7cb86c2bf81598251c40591acf

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-on-access-savapilib-product.conf

MD5	c0d7ca0f42b0eb707f0ff09a1144d837
SHA1	1c5d84bcf2bfd97a51b156b04fde285a8fddd35f
SHA256	e5e0ae1892dcae23e6b2b914234cc2111efd1ad746887c61266618ce5ec5852c
SHA512	a4582b9ad7ae3bd795c271201850aa2ef5163b605f227fa4da06d6fd9d23144d811d16904257188832a2eeddb63692a12ed649ae4244eb3138b0a972e7686b19

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-apchash-product.conf

MD5	4257d3de2badf1811f90e8312bc74aee
SHA1	85a5ddcd2282e8049bc5432932baf418bc02ebca
SHA256	e2cbcd600dce59af50b624e2079f4b92186dd0536f5ffbc2b859c5c440657e05
SHA512	962cc45ff9aa7fe1bb8902bc195318408a7dc2728c7e89c5ceba3eaa7385d19eba52090a2f4e69bd25bb2a0a9f4500988f190e71fff84b9c9df6c8bb2052c4aa

C:\Program Files (x86)\TotalAV\SAVAPI\apc_random_id_generator.exe

MD5	be6f0a323777bc43bce01fdc5ad58120
SHA1	a6c1742269fb7879dcb54dfd25af57dba66ab732
SHA256	1239ea35953b0fe8677bee09dedb7c3eea987e977c73e73ef8862c4a3774b659
SHA512	921b11869d1ec2b5a19ef41b75504ac099429339a143cfa677fc54eb520a2b79b173e2e326afcaeceeab4f6b942098dd9a660b7c9dc3addc8b9ea53a3cac4548

C:\Program Files (x86)\TotalAV\SAVAPI\apchash.dll

MD5	a0c5e8f7cd6c02a8719ade39c1955135
SHA1	52153097ff4d14c89374ed9d144178ec104795ae
SHA256	fb74e48074ba4d26049250bc68281751f9fb9a6c41c401e19f6870ebcfdf6a7a
SHA512	30901a8332e09311bee3c244226d533840f277f47170fa85a7f2e06e3c1bae18a95db82b45ab1f31062be6f7c5dc6918bfe088f3088cfdce8ecb52df863da3b9

C:\Program Files (x86)\TotalAV\SAVAPI\apcfile.dll

MD5	ecf74de0b990c96fcf961e89cf73768c
SHA1	5ba320e5e1e4364cec95b130bebff52f3591c039
SHA256	7f6c31ea445c7b871a0ea2b73705776435b00f3e37223b53b5da9b4ad4d19c0c
SHA512	8ab9b876db9edaee8862fe3cd0cde688158a487cf00f12ac85983c8fbe93a6f116f5d4ce96bf717ce64f4a231aee618b8b023c735ac1783249beaae95a3030bf

C:\Program Files (x86)\TotalAV\SAVAPI\ams_setup.exe

MD5	30ad65d8805ff9356ac7e75e67585f01
SHA1	7711885c3bcebe0bae7c5d33979eb52cbecb8f26
SHA256	168c506b14418d3c64435d1e165e2b686b8c2273023d9f45848cee5a1355d27b
SHA512	d45eee2a5ab487d4d614da497b4ebcbe34f93828a294dcee9db5f0e4eadebcfe3408f30956b15a5352c465c956adf68d89c97a2a6609b15c7c5c43408949aa15

C:\Program Files (x86)\TotalAV\SAVAPI\aevdf.dll

MD5	1f2846f66f454dcd075690914c58d97c
SHA1	f6e6c89c11aaffaffaf98791c1faafd00e5d8aec
SHA256	3acf87d057b627745f588315c528ca19699bc6e5999fb785160a432c7d42b182
SHA512	20f555510d45aa62b0256f8898a360ef47f58a37faecfd014e34a0fdfe9f59178ad23532fd37c04edcad63b725571fdbd765ea5f30202b0525f6979d509e28ea

C:\Program Files (x86)\TotalAV\SAVAPI\aevdf.dat

MD5	7ad1fc9922e67652c346113289a557f3
SHA1	9b7dcf5873d40fb45e2016051329cff4d628c336
SHA256	1fa5d91c9a58fa3f9d3761ace1a8f3bd97fe6e903eaa6540cee0c75f89c681d1
SHA512	c042d79fa0fffc8a173868f411242868b3a1b5d495dbaa0c70beca65f03b6a988d1dffa1e823ad3c126a5dde2592770e73029a184797fb7ab627e0564b34b5fa

C:\Program Files (x86)\TotalAV\SAVAPI\aeset.dat

MD5	b78db48c5ff9494327032a27d5aa33cc
SHA1	43ffc51ef1da90ec791a95ab6d20e3cae7a66482
SHA256	1d06844d6c0aae9b0a5f6f7f61b4c7c6284fb085b7f878d596ee8407c67b7357
SHA512	855622613a0310cceb1b885f11d22876b1b6092fbdfa7ec19618d8ae71b2ad70ca75bfc44ea0e4069b38d9785c400025a8f6a4bedca539546eb10cbce078a051

C:\Program Files (x86)\TotalAV\SAVAPI\aescript.dll

MD5	11197cd2373a7b8364d9bb97406fa2b0
SHA1	05b81929d797330803febd8231907b54462706f1
SHA256	8371b7ea7e0e0650a4aca997d270b68543d61ef873190d02db37d7c3349b5942
SHA512	dff359f3330cceb1bbae2cb26748244509870f9f6f1307b4010e4a449cb50b87d4395fbc38e7b1a0fedfe16eb7b01b4cacac7631f606ec1467555ca5099138c9

C:\Program Files (x86)\TotalAV\SAVAPI\aescn.dll

MD5	045180fa8eaf0c2409e101542014b5b8
SHA1	70656f926020e02e7c67fd2d145ca90b5952a9d5
SHA256	b816a2810fc9c1a5294a59b0232a1725519a2a7472f509c336b9fd1b189d0f3d
SHA512	5659f42a6fe5cf259ad9528777ab5883f0185437b60710727c097cad2ceb60ac09eae4af59857c0021fc573343704ec6318cfc6d78ee2a1d7facc7321f4ae767

C:\Program Files (x86)\TotalAV\SAVAPI\aesbx.dll

MD5	63159174de5eff0c3ed33f887c00e1b4
SHA1	aa787a058920e7010269d1286f32bda62206949a
SHA256	a03aa3e017606dce6f2cd19536db9306a6ebf2eaefb224be735569599a39330d
SHA512	398831b8cfebe1a7878658087594dcdd74f6be8d380bcacd415acd5bbed85e6bd939c1562b3cee4e8ecbe64b0704be1cdab2dcc9c7ae6a0dfa0e8b8d0317f884

C:\Program Files (x86)\TotalAV\SAVAPI\aerdl.dll

MD5	62f7467baebb56a8beea7fffa6c4ee7c
SHA1	c13eb821d2675f110b1a38f8c0842b91edcab9b4
SHA256	d049ab67daae27ab3840730cadc5a82dfbd269b58896b9f8289324816e1680eb
SHA512	d31498bdee77fd498226d6c971dff65eeecec66811109f1a729858fee6aa92f6d1601256740417ba5abb72b4c7109eb3e69ecc7446093bebee62c559d4e7a61a

C:\Program Files (x86)\TotalAV\SAVAPI\aepack.dll

MD5	26ab6a0a9b1c59a01f9b45bbc0bbc65d
SHA1	ef282c4322c361aaac6d70d0e27d4b2292de4999
SHA256	fff47393adf070bc04d044c0a939c620234881e1ad69d3776146e32d25e1f36d
SHA512	f17aca43e9f66ae21d295af5fbca5de0770ef77eb602f74ac6696aa9cf9af9884df21f9c9a98a6aa5d9ba5bbb3f9951c952d608dc3863e6a8a6a6c053639f26a

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice_mv.dat

MD5	e346fe238be4b645e20e1bd77e9167bf
SHA1	252c2614387aef2304f85cebabcb89b7e5f04c96
SHA256	adac5f741e5ee6f669b76bca87a26bdafa9be60d8ac7e7c5059af9ccce919608
SHA512	29965365aa6a5dae7bdcda0f437202d5a2874d60d3d59895871d05b4ca3bbea539fd04ae1895a0f6c77992ae2b7a39dd74837a1a6a72f15e92129517ff6375c9

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice_gwf.dat

MD5	0c95def0894c5e5716cf7a3ecc7545a6
SHA1	51ce428514d454e7a428d57e3e050c1edad93a20
SHA256	96e2488023689abf71cf9b951548420ff3ad9d6ff37116d4279a43b5b736968b
SHA512	2884dfc79a869b3e2db3f62340dccd3cee7746852006f67a26a26a4716ec719ba196627b18ddd775655b7baf954f668e9b5229297a4b87685f087e693184b369

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice.dll

MD5	3dbd9c8da952507d0df2b46308fe83a2
SHA1	0d38ee68466f818e880680b73f5f74ca300ae629
SHA256	4a3c2f29b2ab5e78e5a1558d2ddbc564cbd4474ce4115001ba6662c143b6482a
SHA512	1e6b65fa80d95d1cb1da72b7905105f4b4fa6ee7c1fd63fdd7728a030ff42b9177e2eb0fbca1e64f44a11a253defd7bd179bc8c596fc565f3972ad89cf5c9616

C:\Program Files (x86)\TotalAV\SAVAPI\aemobile.dll

MD5	b132b36c0b53839ee1c0fc8198170157
SHA1	3e7394ee8d3c4c0f36e00466fe0191ede592c01b
SHA256	3137d3d95d1caa59d349645ab8087d6b0c7cc3321873789c738553d4471143c6
SHA512	1bba22a77ceaa59c00cf0d10a7afced2161985d8baae94c9cfe0cd5171464f49c53113b4ba8a027cb727aa242a23f79c1cf19a4df821ef6ac00f7a7c2ecd155e

C:\Program Files (x86)\TotalAV\SAVAPI\aeml.dll

MD5	0de0cb670e3046e388829fdab6910a9c
SHA1	2b9daea0200fd1c442c9a3a967bf51d68f7ab80d
SHA256	537b3ea2ce48dc0cc343c1c6ce79ae5ba527b2fcddea24cadef1fc1eca8c42cc
SHA512	7e7ab02d20c3a1b8f76ce8c951570be1e719e0533ffc14970c958240a6adbe1c8ab88c826ef21083db0c74c6f83a1c9262ec6b2371b72d357bf6d5a298ba6f33

C:\Program Files (x86)\TotalAV\SAVAPI\aelidb.dat

MD5	e12b4507919ef2d5b5f2b5332f7c2bb1
SHA1	4dd0c1870754a4052f9de5f09f69df3f7bae4b3d
SHA256	ca5bb2f6c93eccc1ef5a2b2aae25b4976a2ce320a52d13d74f12b65205678e53
SHA512	74a2e05077726ab00a810325d6be729c001f290977c9e4e3d81d3f4fe4398317698510a0bf5d5014625e5c740f11dc10cf004cac343cd1e4d8ab82908a0376ad

C:\Program Files (x86)\TotalAV\SAVAPI\aelibinf_db.dat

MD5	ddc132992273330ec506e63fae4985b4
SHA1	7bf3018217f136662c159994f6530edf4c976a10
SHA256	0544403357dbff7551fc17f348a446d556a094d6c42e1121eb337de3ff88ca5c
SHA512	fd1233c02cfd72116b92833810db084c1caa08530cdc0626a1e2fe035236b29348fdb4d89192aa473dec5ece5694017f3a3a46eda7f87c20a89cd07132f4d122

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_mv.dat

MD5	9c93a76d871b55028d607207a90b39ff
SHA1	c3b33d3622dbc1d02d0ae0beaf2cef9db56962aa
SHA256	9ddc8bd72905ab30861d3ae37af5292b6162f63e6446c15a1ccee3f8aeb67910
SHA512	7f9529bc2ae489a1a2bf92f54055543c933dd39359bc7a77ec19c9bf30272947e10d785c4f3baa3deee2654d5c23cd1154856b8e54031bc8c4ee985f4ee88a4a

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_gwf.dat

MD5	27dbb4a716dc8d87eac34a14f814dbc8
SHA1	2f3c673d444a0b996d609136d8741f6dfc47ba6a
SHA256	b90baa70bd07bc5b3573909b37a6cf4fcccc3d7c9702806c94bd843988d0ed5d
SHA512	dcfba0317f02771d40fa190e78c19fa2e178d0ffadd6b8d22da4be7f66a3e7983da2a0c14741ab9df0d9f034754c4ea758d758ec7a65c53f77f922d13648e9a5

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_agen.dat

MD5	159a422ec89a6699396140a500ddbfb8
SHA1	8bcc5d5ae855bb7e36412a6b2d9a8bbfa37f56a3
SHA256	ee8a06d4af03049c6699a37a24233f37eb08dd2720f57848e665ed6d1cc7eb78
SHA512	db67a5792624b632c8cb3ab4bef963817faaa62dfa29f2da71b034a90e766c5d569b4c6ca2c04d85368674373fc72e60d4fc53711438923690a1ca0dfb4bb404

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur.dll

MD5	d3f86394440e679a8be729c2af168169
SHA1	3c50ae00ca1c65b71f6f01c18a1507c03207df5a
SHA256	23bfdb21548d8b0da6b1d63167c44207a3fe7f613bf36406168c667bb7d0a4f5
SHA512	40abd780623276742f4ff5e89135e1223e3f7226cfb8af66f87646bcbb46c46e23eebe1a4bf3e4e0603622fb803d91d4c7f25c31283cddacc9037335a436c936

C:\Program Files (x86)\TotalAV\SAVAPI\aehelp.dll

MD5	c56e6711d0c6dbb6bd7bafbde06e9c90
SHA1	872c3d8d2a54ac10c22861052498c2ef954f8004
SHA256	2c0b8af1ed85fa5ff16f87f3c58beee9fc0230594dd062913ec5ce87abacba4a
SHA512	611892b7b5a4a51fca74ee0d4d2dfa6a02ec22eda0fb9c24ff51a7f33a695a2aef3bb222763cd7ac5d0d6d5529634493fd2abd0a2c38fbbef34358700d65cb8b

C:\Program Files (x86)\TotalAV\SAVAPI\aegen.dll

MD5	163ea96ca0a9b9f7469dd128fe5bce04
SHA1	60f4a01001fe4ad3b2aea24ce0b535a7d863f333
SHA256	519de6c5006127a5f4174c6f6a13d87cf30a2e866bc1eb95545d67a2ec0292f2
SHA512	b088619bcb30e2f91c5ab4c6a2777a0b163e60f33ec6475a2b00d1c711f6fa86f621f8475026adf71adf3ca863911686e03cf98bf913412ac5f8e4b269fffbc1

C:\Program Files (x86)\TotalAV\SAVAPI\aeexp_gwf.dat

MD5	d68dbed2d9e81bb670e94b0b550cccdf
SHA1	edebaf42b7b772274ffbdf070d965aa585cb14f4
SHA256	2d7925f16b1b835b7265d1c04c38c599f2b25c5087a0005dec60dcd22e9f3dd7
SHA512	162c6078492870fb1712968e5cf81e99b0e16dc2c737eb56f5dac1e17a66457382d555faf2ae9096b5e0103cf79e79c629007ca2ccb80d422e424fefe3a6c734

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.exe

MD5	30a037962d22c88a6c8a1c1221097fd0
SHA1	8b7f1064a80e42f0de3af2e11d9b76b48a0f5dd5
SHA256	6df0c68d62a6aaeb997e78cb65b572a005b7a3f72d5ffdcdcadd1711d23f5773
SHA512	1da9e0ec0a7bfd2f6e0a2d9214f715d1be9a7e00b96f6277ad9a0f3dc0685963db154b7034a8aff3171338bcc5575a2a3ccadfe537216eeaeb1fcc2ea80837b5

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.dll

MD5	4d4dc71f2e8ed5301fe1ade1ae8a6489
SHA1	c1f5fe2e247b3d9ec5f4d7da2b94409967109fb1
SHA256	8971085fe9cb1bb47d0f757e01a504babd51c624c140c19251c63956745d163d
SHA512	d98be09cedfd786b132efae325dfeb98afd9d2541aa415168ac5a4839c1353ac9daafa204f891ff9d0a7cca2a482988c453d0ab2886459f196f4e7d5434d943c

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.deps.json

MD5	cb9268125c592ca792954257032bd7ec
SHA1	6b2f1f5b425639aabc73dd0c0b119a1a51fe5549
SHA256	7b34d7ea90a9664a8f6370c3b0e98ac3114eb96f0ee9edab6c669d86c2c3cdc1
SHA512	0ed3ac6039d742768ad3eeede207d96abb393780a431330cca8c27561a8dc79777ed11174890513ba7ef71cefe79cb1e3e54e7dab11b9208cedfb754b2ef389b

C:\Program Files (x86)\TotalAV\ovpn\openvpn_up.bat

MD5	cd4d223acddbd08101a159b17022324b
SHA1	510979a24584898281d7190c9981a1f7aa5b09ca
SHA256	6ed4c6d1ba69e5aad84434e40f97c39432be10b903652860f8f16d7861ea79d6
SHA512	8516ff62ecf818db7f794d66a2c479ea549444ed718f519b297a0723d78e191466d8f889f4f544a3e3324d6ce9002ceaa3d119b2a5fb63dcb8a2fd324110e1c7

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Tasks.dll

MD5	17f57e0d9b7c5cc602553301cd7b1607
SHA1	cd7567d67967684e72ba10d24c47e3d5c0eaedbd
SHA256	edef045c965f1dc14805cd66e2a0b2cae2bb34aa2c8e80468f34c34446906d0d
SHA512	759fcc7914add3c80080c6ed9da94e9fa5e2af91752f5d7846b8cf01cc261b1eb76ba59188b1391d04a61f7ffffab7b68e0d8ce3f4b5b81fc4ff53c4aed78bef

C:\Program Files (x86)\TotalAV\Microsoft.Win32.SystemEvents.dll

MD5	fa51d1d280c2114a1de24feb9be14a32
SHA1	aa0916a3b709e2a19b7d3a55d2fdcb9cac333f88
SHA256	5f05110e122fa7c73ac3571b82a0bfd5a8462a4b42b0b945c4f901928a29f3fc
SHA512	25c35857c79e03538825ccd6b87cee1d4a569d871889fd256fa413d69585a8e50340a0ececcf1824cac4ea976e15a3eff6ab367b0c4846f66593e0f67d233921

C:\Program Files (x86)\TotalAV\Microsoft.VisualBasic.Core.dll

MD5	4ca0c139b698ff4b1a4fbaf653d8b607
SHA1	4881028e15d3fe3e52a6e0e8a10a3d926f3400d3
SHA256	e0864f46e0f0ca66143b43c12a4b37dbe2fbe8fd138d5da59326fd632d6a3571
SHA512	db0e1eea47f75bde5427234888d88829fb184e31be0aefcf687e2dd4e351d9daa7cd5fdc5457ac445f17c5f784f4602f48fa8f49faa2c22c511729c5f550b93f

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.dll

MD5	d29ef3e603946cdd964ded903c205d62
SHA1	959896475fe1dd758adf857b72bea25cdcd405cd
SHA256	91be5d8e169d4e809d077108827c041988018f37924c312dcf3c3c77264eaa7c
SHA512	3f82b58932bbe771fd102065399e36822f061c769a211b85661d4b0575cbca90cd18ae92d76101e2219f22bc247a163ba95718a4303a6d43784723437f7b88cc

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.Binder.dll

MD5	99ed54569b703e903f674ea4eda6c662
SHA1	5c59e3c564b4c057ebc1455cf7bc219b825aa11c
SHA256	4950a8400717903c28cd5b9562cff761afe5ac3470ab699855a898b29fe8a2e3
SHA512	fe4937471fee583ee73411eac6e256a622c2f8a10d885e2096546bbc93e393435fbc20d40b3f885f48f48767bfdde906209890e9088318505b10d84a7d4ae7e7

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.Abstractions.dll

MD5	542b6ef0d8d600f43cecdaa5fe6a99a5
SHA1	3e5626ab326b8e0a08d48f1347c09eb3a8b1b882
SHA256	e9e4bf73dfed3d5aa9ff25780e87109a985cb6e2feab30bea42689cf7d1d4ed1
SHA512	4ba7499c2b5cab18d185f63f857f8e94785642b5d0909d2c978b039d8920aadc0401f57ab7603f2ddae396c4c8edff5f56b31de36d24620733c9847f5b3152cd

C:\Program Files (x86)\TotalAV\Microsoft.DiaSymReader.Native.x86.dll

MD5	4ff7094e3edfda47ced912012044296b
SHA1	c6f3c9d81713687dc3820d8cabf14c2a32208d27
SHA256	f21da9fb831ac943736135b6ee109a4b352511b8d6c07cb03c66b61996d1ddc9
SHA512	372867bbae96c51ee11b413f552a67a53992b16dbfa44105381db3813e3c2f9a3dc9d16fc6bd6366514d4e1b4bf1eeccce5261bc3df837bf3e3eb5a04446c551

C:\Program Files (x86)\TotalAV\Microsoft.CSharp.dll

MD5	550c3defa28f7da52cfeb896254d5446
SHA1	9769ad55aee4cfbc94053e885d229ca98d953254
SHA256	d5ce9323fc09281f1f8d86d741a594e29f7a9797de0284e1b168b1043c6c9a02
SHA512	264181da5f80966f2b0a76912d496ad55b403f99d31097b258c9ab87d39b41435015b8e702bfceed5f333fac9367f542dd397778504c8ed2a4b4ff4bb3a82370

C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.dll

MD5	395ca70f6def000f67ae3334682c3a73
SHA1	5b32bb4f106e490044f8cb95b1da24605e66ffd0
SHA256	c7ddc86b6500a27783071abb2a0769a1f47a7cb78d039642c2126ad1b879cefe
SHA512	a47cde27ec3af919d68f6bba485b24c31b681b3572cc9af9c8df8e46af6d1441d4c5836303c4901f531fdc6e2092c6ecbd28a17b42616e42a0f9a2a9dd46dbec

C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.Crashes.dll

MD5	389e880efe79f750488feed7fa52b1d2
SHA1	b0a58209ddd87d4ec1240bc1b556889850965148
SHA256	1ac20df009a8879ff946388741b781b37f8209ac93260ff8a00573376def08be
SHA512	ce378858dd67c8ff7972036db1b558603c0c7bf74b82c0c965fcd039138be3eee08fb729b879a1c66b41d8fab7c70c0a9ad1c8e5c9490c4967cec87b2f62b436

C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.Analytics.dll

MD5	d4041b4e6cef641e52922aae24358e67
SHA1	03cd00c2094e6747b0bc489f1927d29dae39b5ea
SHA256	ac8b2f3785163b38c4473f1aa25616a4616e2fbb29332fe3dd8da9574fc3c4cf
SHA512	728dcee4a9e3909f760edbd6a6e582c6c40162f37cf0c5e61bb092679ef91e47e8e5bdba468c40f24010ae795f6e277ff1c60b9e46bee2dbc94b3d9c6491570a

C:\Program Files (x86)\TotalAV\SAVAPI\aedroid_gwf.dat

MD5	961a1c1e0dfb8b54019c9ccec510b3ad
SHA1	ced9c7e98809bb7506a17644144efcbf50bfd10a
SHA256	50a9af9ac743d6a7f2741a3ab39717c8c7e618630b7688dab60b57b97f840b9d
SHA512	fca12aea31d0cb3b71b73456606b91d97f6bd3366591b65191ce6edda8b6ca8d53e07da4a5a95d9242a43b2c20842dfc1f9b39bb4ddc47058afd86530bb2afe4

C:\Program Files (x86)\TotalAV\SAVAPI\aedroid.dll

MD5	8facd0e1b34b24d3b7adb3b9be3375dd
SHA1	f7ac09b72c91a8c54e266b7f6b68b2e40366d026
SHA256	12bfedbe10041d39020e9a15c4cc3d4b557a7d4fffe40cf2d75caecf5f1ed1ab
SHA512	55fba8645835c69fe6e93da395de726bbcc0b3dd0049b5e4673f811cb92bc911a8bf1f6706a0922548635aa81d8aef95c3779cf827e52e70f851fa0be6a0c502

C:\Program Files (x86)\TotalAV\SAVAPI\aecrypto.dll

MD5	e824d826c0ebb30047aaa308fe03b6c9
SHA1	1778f29052920ddc7ef192761123013cb7f648d2
SHA256	8cb77f5fccdae7f9661b81454437928fa697a8d2c2cef8f61a3772cc766d6d10
SHA512	774111704c1d7680bce109e7fe5b2f91f415e5ff62432f8e52ba6c2a2b8986aa17c8487e0f0562818fe8d0f12af76d29965fc24a1f612eb71f149ecf60f0537a

C:\Program Files (x86)\TotalAV\SAVAPI\aelibinf.dll

MD5	21432626c63068ee47107da801c05ffc
SHA1	1b011f00a0a01bf217c41a0f5cb7d8c0f6b7046b
SHA256	812442ad5cdaeb6dd5dff76ddc3941fb9a1a56f999aa836f8fcbf4bb9e1b488f
SHA512	1c6e973be37fbcfd2b945fbbde57afd37525aafd475b4229db8296ce48cbcffb2a092fb1d226b6f655a491535f7f2bff5139522daff92bf002304545fbeb596c

C:\Program Files (x86)\TotalAV\SAVAPI\aeexp.dll

MD5	faee506a935d68524834d090cb0fc16e
SHA1	f3927c0170f15c1ad895f57aab48167781c51eff
SHA256	911d01f963ab2236e7bc977f96e84f292bef07f48f40f8927115e2b056992aa8
SHA512	5b15442e84e828425832659124398cb867a3cd70f48e85c2ae6eb2261d9f83101e148264349f05b86fc8b034af6ab5dce0579c106e0bed95a8aa656839903a53

C:\Program Files (x86)\TotalAV\SAVAPI\aeemu.dll

MD5	02940a21ab69d26893bc00c064be569e
SHA1	e6eb2ba77bfa72fda91ba46924a18b8ad726f7b5
SHA256	9c9e782ac4490372119a95cac641970d805679a8aeef2ad59ee28c1a942cf5ac
SHA512	fac2069467c574b856fdb4597fb973b9a4f3fef5288b0ed0bda72136f48ffce58063ea5b251ae01216f744ec17d2c824f07593f8de885bdad123f5867510b21b

C:\Program Files (x86)\TotalAV\SAVAPI\aecore.dll

MD5	2a4261a7dde3fdfd43793ca431890f84
SHA1	8be893f9fd941dc0971498587f52228e2e9d69b0
SHA256	1eff4b5bafa7a567f756a85297733802215bd9135e627e0cc6255c65dc87ca22
SHA512	e0e584174d61387e88adb6e5a618461a71039de773666f557fd19ad4c6300d8b9bfce505b032efcfdf443ded1e97678c2e504b4e893209ffb246add683b26abf

C:\Program Files (x86)\TotalAV\SAVAPI\aebb.dll

MD5	2af40e6f90240525f8cd27961b53f2db
SHA1	5eab9dc2edef6140df6842811da9e8ae9a27cbd9
SHA256	cd6fcce8f0a2e4f832894abe41f2c4e7c0ab97b4a46eb478d085ffbb9ca36b5b
SHA512	ba80cf1f33e14d5dd3a3f96196e265d33920ac4fcc23dd3da61e192233401aad522fceea4a295628f03345ec3e43ae16542b0adcf8adcf0ee93a3f2114c2bccf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	f0d3547f211e3e19a3e4b7f914c0ce18
SHA1	302ff387ee3e6a0caa3ddf274b09eb3f87a6dafc
SHA256	ec24ec3ed6ff31b67853c987a4dcbd7d48fa383a39401a3c37a560fb00c4f5ac
SHA512	4a7572037cff63186ba6899eda40ef7eb577086db97484fa5040d2c42274d5827c9e34f9bba093e532f9d401a6d9c62139deeac034ed587acbd855b31f09806d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	d49479219c7bab34bad4ca01e12e83ec
SHA1	4eec4b40dd45fa5582807867c293e1915606ad6c
SHA256	78416b65008c88e4a9e0df7eca270f124ededaecd7d309d8ca660e5a371c8c32
SHA512	0649f18adf01da4e8a9ee5801eb67f75ee9d765b33ba32fa6574def98c512add716d61b40eca064bd3f714e63d794b0247cfa7a3168c5fb54c0463bd1e5e5202

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	576ea3995f6e5da372e3ae922490ba26
SHA1	6ee6446d7c29598861bd45f52adc7a5430985864
SHA256	f0e442bfa835ce4982d7591780ab142dcf2f1008dd06fe1a37fa120ef1fdeed5
SHA512	6ce413fd94a45ce19353b1400d8ab25947a58de9d4b1a199e058d7165242ad7b18558dfcc4c1007e4945712935492913214f0c48c7057bc9fedb66699b392a8b

C:\ProgramData\TotalAV\data\sdet.jdat

MD5	d1f4be880018dc4a2f784bd073503e02
SHA1	0a79cbbce50200558b52555a2daee5acdf027ebe
SHA256	7f68a10f65b9d79383cd5aa063b32d64f02f0a993feabc0f1483ea180b402e5b
SHA512	ef27c7156b3e7d2a9a20a9295173abfccf06842f387810d667df43d0890d571208284a7302491cddb95a6843b44de10f8ce6d432e4aa7cfae981e0c7aeb5e17f

C:\ProgramData\TotalAV\data\vpn_regions.jdat

MD5	daf964bca50842568e5625b51c56a92e
SHA1	1efb6c7ef61dcf1fffc4f4f612579489157f18af
SHA256	12281d31b0ad3d806147cb4308a150895c9159704d23e003c3fffcdbb57be38d
SHA512	d6676a97720cf093878df4bacb6a8c08676d761cf7180c879a2ed338220520e5eee9ecd71886f31eefda313090e7effe77d62e5187f775166099f754433901fc

C:\ProgramData\TotalAV\data\details.jdat

MD5	c3d3b96283ce26b273bb631c784a95d7
SHA1	ecf3ff77ee83731ba95511cd064066f4c8fc4055
SHA256	f0f740ef134fec88a02e621881fe5ab32f243b91faaa254471e00ee474db1cd3
SHA512	e28a1ee6dce32210c2bec846a48dffa63d5994d85664ea75c00026273ac9396d21c97837f470c01d310d91df370e240ba5091902d85dd8706bcca6dd58345b5b

C:\ProgramData\TotalAV\data\account.jdat

MD5	9f3632961711675435eeeae1895834ca
SHA1	cb38f93b7fe28155d8691f17368abf821e8bb735
SHA256	343519615c072d3ff61be757ca12b4b609b212a18547f59136e61d8a1a293330
SHA512	ce64fc981be93d36a41113eb2249ab4a0908fee5da8d28d0b4f3f377fa82d9ad4cf99456e908a75a019a6a3379d2b3a5850773e9f8a51cde33d8a7f0a9e5ab36

C:\ProgramData\TotalAV\data\sdet.jdat

MD5	23255a7a961ad6ebdb3e3f53f90b40b5
SHA1	abac57f7134e48553ba26346ed445f9c09eca149
SHA256	af840f83cf19bf73aa017bd9cd2ecb5a50b20e4157f013e17539b8b6fbfefbdd
SHA512	df9fc630c4ae053e4a4d4708359676dc6da2f880cf3bb0c37e355f0ae1911b8406a8137dde90f3ebbbd891fe609c2cde52f803792ee2d7a2992e49981849095f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

MD5	52c4377d4eb6fb1aeeecd52d2d265568
SHA1	2613313111a37f17c078df0fcdfa03db3223f52f
SHA256	48b74550ab9e6bd4625807d3d1ea7201e07472d5662c567ccaad7a163826393f
SHA512	25cc30906cb0da1f877d6c58ef5ed0e23345dae5a2373448759b3e02245ccfa42c85cd78e15830fd68e3e4ee6f36da4f303d7065e47b5a656de59c08f797da07

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\285886e8-04e4-44e8-8f19-ccf73c7d563d.tmp

MD5	5058f1af8388633f609cadb75a75dc9d
SHA1	3a52ce780950d4d969792a2559cd519d7ee8c727
SHA256	cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
SHA512	0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	3c9f01742124220db5765edefccb7070
SHA1	175d210b886d608ab23b24c6b0c44c1ee4554da0
SHA256	dfcf238ac49f2a8c7007c3eb1ac52b62510fde720eaeef2d65cb402b8aab20aa
SHA512	9c1760b85eb6498839b8b487f1d60b4d5ed589dc432380b900b1d7eb589edaaec010335c1f63d3ea9cc06d790e1f6e14e3336ef924dfb3972eb65fe6df0f741d

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	d0bf2e45e92820a05e46ebffa39c853c
SHA1	377aa4206dbbfa5fa2e1af3b325f900e73c27b68
SHA256	b5b30f9697e30631fe5e1070a878192f9172098baebb895de539b696bba83150
SHA512	ea9cb394bc0156220fdbafc79baf3aa105a657ec80f5e2170db0b2b1bac3ccd30e87bae14fd34a2d66eabe74f74e096abfb9b5a7d802c6c80462804fb5df4bd1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	de8c3c813bb40d69f43d68f978422a9f
SHA1	214020742ebf547b4de7ba72bf05ea8ee56f4703
SHA256	160d1944bac924df21b57cf683428e247cdd689e8385d14ac2fd1a129e406cfe
SHA512	e0bb204e29765e80ebace81b0c798d88267b9e2c8b7eae3bb0d8730040906ea62d8cb790745490704f8d06aeb8cc531cca645d15e1d45a2d8580d5652c497f2b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5	040edead65451014a7271b1966f1ad3e
SHA1	edebe6c0a5b59d2bea6bdb9e2051cda2c791d2b6
SHA256	3300b8fa7d4c7c67c97d1a3434c1bf168e81f7f7a588784cc1ac8887e61d6af4
SHA512	9ecc39b359ed2c93a469f0a41bf7541c23d9be49ed97e7b5f87e41d502928f40a729959dc75a7fe8667cd42d813fcfe0c349fc4017dd31afb66b95f671ff87eb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	7a1f29a8eadcb96b5856f5cba0b45f51
SHA1	b05e13085852303528269ab9567d104419df3db3
SHA256	02c3e48436a05c12dc59a66ea2dc951748812f94bd0b1caebaab8eaff2df2ecb
SHA512	a340bdb6f26511d981b799c390b52a6b01e87f451734af8d07e92f569f87137a1617fc2c14cdcbc08d27b30a8e0221de45f0345fd02249c42a33ebbd60f450bd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	04f64aa372e2f3a2af4d9a332a4765f4
SHA1	a7658fef8291be0d1aafc3e66befb1f2876084da
SHA256	e7c6901054bc8340c9732f8c6112f92a915a17e9900d6cf30bee760247101afd
SHA512	6e8127baca6cef4c9436683770d49187a910f97d335aec237817d02afd34cc34ef2b14f71d29ad6bf4fdef748aecdbe85aeb09c37cb6b75054ddc30c8074e921

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	dc0652253a143164a1d355568c63ba44
SHA1	fdf87c5a426f482ffdf0af22c4692b982301a8ee
SHA256	6ab6c466080bc6601aac82921f21901ea0c81490361e26c704db71c267e65457
SHA512	938ebf6042cead17138ebf44c3667d55c3dc8837e65f2057ac6662fdabf89ee8280f7aef6fc688c8add3ca91d3fcecea000e0be66928beb997216beb83005306

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	73cc6908a4b1086b29ad1a029742c64c
SHA1	33e427362e0dcd3f9cb10cac8f7e5ce02730faf3
SHA256	bed99ab3341936112ad14592b1bbc9818dc18670839666294ef19b9c233b0fcc
SHA512	2f2254793e17ce3c49aecd8fdc5738f92ad74f5f73b6f7aa57ca046e9e96cb29dbb7d45384f723b1ca6adf262885d2e8778d4098222b4c54765dc428d4ba4b51

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	1b931fd149e075680ec7ea5ceceb43ba
SHA1	50509314cc8df0cc2ced846cc7c331188a8bfea7
SHA256	239562fbd19d6ebee6a67fff5fc82f4bc0e2b3bb0f345721f4af93d9c980736d
SHA512	8deff4f37c18363a26e1733d0f5872b7b93366160dac051d9ade4a4292231a11df8838e2107e6e13fb67363a0118842bfaa5820a61f136c720f6c47ff743df79

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	5bf86c5b993942784af3741bb8b25ad2
SHA1	caa83142365f145c6d56b165c1ac76accfa249cb
SHA256	b98b287ae088d145c5812382a691e9b66e9f418ff2bc8ae507507aa6780012cd
SHA512	bb0d40d1fd593c5a65665ee49f53f8458b444b7f3166abd9599900c9de2823b656ce382f3c4b093e474d71718b3fc979d2b28144101ff99926280997d0772611

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001d

MD5	c356a0c771a0209d3482777edfc10768
SHA1	1ff2d992af8a6f19c30ecbe8f3591f26fe1cab08
SHA256	32381f4549d36fa4583e599adc04056a4da80a6067c6805b7081c3f3f54a27ad
SHA512	561084baf8d65579ead79e79c2c3920ef987384d52ecc11a2689aff95c54a6b823a0c4a8e5b910e60e569450e36563f53adb5796f261f13bbeea59130b81fe3c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f

MD5	ecf34f03f5acffb1677e12214527cd94
SHA1	98f041ed6c8f2deabf22cb06e74dd9444230892b
SHA256	c86104a7090f101ab5217ec75331206fcb1851f5714f52b9c3c1c6cb1888b76d
SHA512	8609e1713ede4edeb8d71c13a4e61d737d05553ca7b938e5e4df86c5093546002a20a42e71007fed6e9bf2b553f2d224328341abbbf400c0398bc94f3f2c94d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5	94275bde03760c160b707ba8806ef545
SHA1	aad8d87b0796de7baca00ab000b2b12a26427859
SHA256	c58cb79fa4a9ade48ed821dd9f98957b0adfda7c2d267e3d07951c2d371aa968
SHA512	2aabd49bc9f0ed3a5c690773f48a92dbbbd60264090a0db2fe0f166f8c20c767a74d1e1d7cc6a46c34cfbd1587ddb565e791d494cd0d2ca375ab8cc11cd8f930

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe5ec448.TMP

MD5	b2806d021d572831ee1bdee0ec8e1af3
SHA1	fd140abd23c5f219b9809ffd6efe7432f1e7f07a
SHA256	e388f2e7a326fd3e49c7bbba4f744511109e875c45ffbce8ce43333bce48de68
SHA512	d5ad6519431cdb0ef2e3af21503effa00d11bb8b9d0ef04d6e9067f31a82054dc9382e2b5035623bdcd314be310b93a3696599b47e6cc3371c733340e4349641

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	2ae3b0e90788126a4b27a983deadab76
SHA1	527aa1f49c13a65f5c91d497c972d8755b816174
SHA256	c8791a8fdc3fb3bac3ad0e9a8da14af770e6d63657f1745344c5459095293062
SHA512	899d0940e6b600417e1d8f2371dfcb9d7635dc24b80df059ab37fc437581c1b4c3de6faa25ad75707cb367e66f5bf9ee0d770b8bafa93c0ee63c07e437aef2c3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	0e2e4fdbb4f53e243caeab59cf063ed4
SHA1	9da3305f8c945e92787d22876fcea27efb2db708
SHA256	f4865fd13fe5f22a54b20c8233e0d9371e788e0059c973ab4c2d13f639ea2b4d
SHA512	d4d7656f25751aa9fbb82286ee8cb4f286a1085da88a2ea1e2c552d91d06b6ebd698df112a0922685a1e8317197dd5749f3dc1633d00f2bceaa9c380bd98d04b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

MD5	aed437651b641df7e906cc873a702285
SHA1	6d3bea1d7bf7c516c26ee23cc5158658fc060b89
SHA256	d35e96abdea39d7ee1f312475317691763805be2ac168e132781c16db3588c0f
SHA512	872e8c2cdd2a6da88b57031d1c49a079722e41c1e29bf735bbc996f0e5457da2d395d9de3ad9b79a48d3dc0c8b580ccc73dc049424b4bfa561a24247ad2a576c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	669bc34d70c598e6383a4117a24a0eb4
SHA1	a01cc75cf9ecc03193b207beb1f5bc253164ced6
SHA256	32fe13587c03e4e0a1fa3ea22229d3c3ebe569d0c540f47c4f15af30c5dc11a1
SHA512	979da1f1c61b359932a61bac98787834df23a5ff05788804bc817f0a75190a26b3513d3be914f0267663141a41c91bb4e331a06da8bf40310c3da33d40889e48

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	7980723229dbf4405765a628223549b9
SHA1	463172c2b296f8547d48d10bd1404dabb93fdf91
SHA256	d672bf0fdcc5cd7eff585d579c008f95d00078a47831730cfe3820cea764fa3b
SHA512	6f706f81019781bfe790277ae2cee2033f58df075a723fa340334b4147d04da9a362af8667f70bf3b82a0139129159c5ba4949e2a3df6ed80a9405751d344d46

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	a07edfdf1a0c79be7d637c2c636a02d1
SHA1	339514ca39c86fa47a12586707f2e5f697096f27
SHA256	86955de6bc7c9abbf9f80bd512c175a9bed85adbcae204287a9e5d47d0781a93
SHA512	dd915f9805e2bc2d39666e2f0ec8e19a6614cdab4eee11ebb02bd91350965899e994c715d017f5a3bd1266bf0ab70c936ebd18674858ff2fb943643197535c3f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	23c8836872118ebb044f70066968949d
SHA1	14aa9e35e45b12412676af0f753a09ef88d75eb5
SHA256	66a7f21998ddc7c6ce7d4cd5ffbc277f9829569c9614aebbf052a7f76102e3aa
SHA512	c6736ea99afea916335a7e5d4d2cf77e82516265d0f8c9afe73ccddcfe90608525f417cb5f99d17ac1ba3ae5c6c9ef652b11ff600fdad75065d18fa6e7cc34ca

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	1339b8d432e72293471cac4dd9eb5211
SHA1	caa3cb6155b046dbb41bd9cc3f97ba8b03f62a6a
SHA256	201b3bf22e29747167c1da7055c5e67cda8eb32c8acc4c5f260bf72fd0cf49cd
SHA512	87c330b57d5f63e5ec8f180ddb617cdbff65b86700f042d918fbc2084782dc7f93393a76e7f5fec0cc4b43295e4a6eb6c05cece6734c688e91d7df7784dc271a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	356e4b009765df78c4bc68a11960bb16
SHA1	706a84a7d741977c5f206167c651e8797e97f1de
SHA256	41b77a8a66ca5c02e2fe5e76b7f300e557f534d409c177f1b8f4461635f15780
SHA512	665ae5011880f8a4fbe7282f8cdccd27b825af1197ad243e802d584c05f177469bc655e517382508e4a95553f997758b9d1339b4c12161954ebbe4fe299d2d90

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	ba46a1020ee2f63b62a6b865a9f4586b
SHA1	0ba615e8670a982a77b4315eda1f57fd87cf6ff5
SHA256	0709b3b5e7fea4d835af8f1053106df2ef826ea4109fc5c19d42bc0df267f241
SHA512	c6d562f4b67f6700475cb1951b4f6960f023986bb0f229abd5847f7b7fb23419933cfddcc94a2c1bd3376d7b8b09efcd5bafd959a582339a9dbdd2baf1aef8d9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	2444be4a5b4760cf436b8c67b36d31c6
SHA1	19d624a15844015d6760a2e645990c7efa9094f8
SHA256	c588129d13d955d2991c647f287fe6f3ffc7313cb6147bbe9cb4ae733e279fda
SHA512	73ea9c09ba2c15211249691bd5801c33a7cade582d118371b48a8c053316239f57e226808887d4cddefe564b8e0c7af92d9c390308dcf157ac9694067ef01cb3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	529731eb83c1d9463cc1d38cd8e62b09
SHA1	d87a2d595c64950ba48131147f7d835d6baa689e
SHA256	2f8187197a8300d8d85579bb1f3198df252b11895dcf188e926c9e662244d936
SHA512	9afa72743215707e14fc5ea57f3672c7dbff20e485ed73a926d7329a074d9011b43640718e2e81a001f22940de7f14b22e959017ed4acfe36d644aaf8cf796f6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	8fb1e363b8dcb758be079b4d3b75d955
SHA1	f388eeae26cc05813cf64a90de5dafef8975b71e
SHA256	df339eec03ec38ce3ffc191a57b6e97de36557c818c5d81866896c94c129334e
SHA512	452e5770b6838a0e10d32ea13e7fcd56f00c5ce4868a4f93ba205cdd16968c5a5ed84cd25b9c401f9be4252d1542c2e5c024b2217a176cabf062875d658af457

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	cd0ff8cbf6bca3be4f783ac00458b918
SHA1	f382ed11a91f877b1730f0cac0c2b7481697bf08
SHA256	08f41382f6c030294d51ec2fca72d5467b52de919db9ca2e1022cf322ae2ec15
SHA512	4ac2adb09382ab17abef3365e1cb7632ff23814b83d8abd59fecb2a814b0b85699ef4190452f3db33036f6886662c1e0f3af5f6254a5e2182b6a837b05f1d777

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	09e398f079e5d743c4d98fdbc57842e9
SHA1	5596d1e6e87f86e484eebe930036340bc84b255f
SHA256	e758612004ecd763d786120484e9cf5e0e6db2a4afeaa48315ee8a92ba5a3144
SHA512	aa40f32cbaf5f70bec18e2db9b8e3a3d8829eb7c4661521a098f9b9ada6b3d041300cfababa3518161d5a141b2d10844025330a80cdb412557339013b1a421c8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d

MD5	6593fb08e941adbe4a342ba22ef78356
SHA1	27348fbbd385f328960da9b5863cf8c28ee66069
SHA256	afd127c2f758872d2afd7a41f3ea0489f3cc11cd73ff4b9f200a75d89ded039f
SHA512	c066004a823bf0408037b7fa4e2efc5d230bcdfd189f7cdbb67f9fa437feac7b6d4eb731b61a882559afb867505ea620dfbc757774b661dbd5784044340e5c91

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	61bd40646aacc22e1208c1e3961a524c
SHA1	a89e4335131d51e2a7f2825363059c7f98506c9c
SHA256	35db50d338fc6c6a0d9d9f645b5b3f7df93cb405ed2f8bc91da2c62cc8b27780
SHA512	3abffb9ebac0479763f827270775ee37f64af81e27439bd8f6e6cf9e0b4e4a2c9797343e15f8882e4e49a3d0421474fc768f3a6a0b2ed28695318b1c99072403

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\23483f28a053297c_0

MD5	c2e0aaa4b5c80f23c01a36dc30078b95
SHA1	c98885643b83621f18713f281d46ae1dc5e12066
SHA256	6cc25dcffcb3013b3aeb453595c9df77f2913de1ddb33405677d565f5ab54f95
SHA512	de57d588867e7939c08fbefa543a13693ddaf5e23e7920f36812ecc33d1ce7e8d0fd98db6913b4a72b1f2dbdc9ddbc24f2a2b68bfcb299ca5a8f2d3f9235c38e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c57150302ef32613_0

MD5	f93ae7f96a8a1fe66c02e05a84079aad
SHA1	3deb7c8034e5af1da5ca6a82e453b21f5c5366af
SHA256	278ea0720e49d1f6a1ff156b1acf28bbd8372be2451cc0c277f4663783b51b60
SHA512	ba8f59337d92571e7255040c96755503371538f06d09d4f038fc9a838a6b8cad5da15070e4296b626bcd6ff1506018cd67019e6de86bfcb8ee2eccd6ac7a91dd

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\10325cf46d3b368c_0

MD5	0525544a856e0f4ac7a36142c2eeed06
SHA1	df34eb5127898a190cb1849dd055167b943c69f6
SHA256	224bcf14e311b58ee36a047886086f86c51f7694731a26c910495df63dd0f0a0
SHA512	88f44f6468611fbb523ff742d30036739f5b0b1c1373a0ddd482831ee67ec389751ec96c3a147498bea1d3885c04b2c659f75b02e67bd295ef5bf029e1b0543f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000037

MD5	8889635a05235e576ac1b92ee7b43e51
SHA1	3d8628d7ffecf42dbe3d3e150daee1118e43f892
SHA256	8ad1f2918970adbbffb6266063fe24d988251644df89f535b29131cbaa80987b
SHA512	7a5575b8535e9abf8e33863f44251b2cc9f8852281eb3aa3849cfd1a3b911e415484c69dc9ef13de360aa6bda5940bc9dfc9bbe2891263a34f41df311933c61c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000033

MD5	9425abce5f6b091adeb76b06d898040f
SHA1	09fb7148b19892c41d0a66536f9cbe646d4f3f60
SHA256	295348cda6d8bd18ebb1f196a35b190bcc66bbd352bcb0b713d3ad4c79bea129
SHA512	0fcbcbb468f0395b2bc4c53df762469685a10d90ef6183c2510ba2980d6bb49c2132bbf822a34d1266a8b95915d8273075ed8b0e78180d67989a05388276afaa

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000035

MD5	67e30bbc30fa4e58ef6c33781b4e835c
SHA1	18125beb2b3f1a747f39ed999ff0edd5a52980ee
SHA256	1572e2beb45d2de9d63a7e7fe03c307d175b2b232bad2e763623dceb747729ba
SHA512	271d4a65d25b0a5d2ff2fe8f3925fc165d9b4345893abfd919061d78ffc5ffe8890ded35e41274ad8b860f06264b027cfea6030ec9411a4e03bc6d7cb4d4d228

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036

MD5	2155f385101771026a23f3dc2808c97e
SHA1	550ba8b46e714011059de97b0f672f0349dcf8de
SHA256	4641db11da9224b6da70ab3719915060084de315ad9037ca51c566d7d161dcd1
SHA512	653fa69902507e82f884910143a60305e2b3c6e4d7ef411273c4ca2a67cb144ef9a367963bdefb1f45e21af4193393bfcc16ea599289b6f45c923884b3fe39f8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000038

MD5	48f27b015f9cb327d59f0e42297277a1
SHA1	79208c7fe586a9c96979e04af3704c0d886a5cb3
SHA256	19b464c32ba85513c96f8cb8310c9f142f3d4759e02cacfaa8baeb06e0714e28
SHA512	3c9e007c5895f92e843e1521272e05ffa5e59466b2ab2fc5dbf002e5ebee48fd6093183fbec13df312beb2c5f4ae76075fe8d4d32ec186072d48d9c29e2ad860

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003b

MD5	facceac567e5584ab2951a5af53d715d
SHA1	ce93d17127e366e5da597a07520e8dafce935884
SHA256	e8602bf74b8c49732f33a1f481f243fcac1f55378d5b713dcea2ca48f6c54bdd
SHA512	27e6fae24a51cd7a80c2d5f305ca4bf4cf5827aeccaa7a61aee588d2e8c629bb9051655004772c81debc11d43658ebfc0a8299667a4b888413460544a0e18913

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000039

MD5	144854e84da83ffea974a51dc947756b
SHA1	50ad7fa26be4433392808f4e3f0f79ffc273cd78
SHA256	8c008eb45d08a7cdb74767dc72e2e47dd33264487749dfcac472f8d9e1311c12
SHA512	515d5343fd3da1fe397d6722bd6b1ef8fb5a971ba8f7ba351e5c022883f3f4a9b145c70e0e7c54e5b424047adaee997095667df62464781a9f684e74d752db11

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e

MD5	e70e65ec4f5beddfdeb18c27947ef6c0
SHA1	a3cba8ef92c7a06d204417276372389eb97c77b9
SHA256	d5f2dfac315c92bbd505bd53028fd406e82308fb114ebb75d47cee9a00654b0b
SHA512	db6ea2a26ecbe55e8eaf9ad11bab315970a53d1402b7639cdab70ed51ec7a7d63c421ed558ffd59729f95248fb30b364ec1a7e71686a482f58523e255fe32112

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003d

MD5	4a4be4463f201abc1badaf34b04aed83
SHA1	626cf59c2266b6fda29c22872fdf66af0bbf5580
SHA256	84a4f124b3b60cf8ecf6524b321df2f851f224311e3554bd16efb42c81653522
SHA512	b6a03976b38e06938570414b65c62f98fb1a1bf0d79a4fc7744ae785cd0ee520b44e676ff853d76f1f9e419715ab1b2108cde6286b4cd66850f68cd78c1237e5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000040

MD5	0fef70226a3e6a157e6f0f008f4ce458
SHA1	6175d43d0ba8852e4628fd7e647e7e6933af6192
SHA256	06d8df1b1eb645af69a236b79a9c1fca66951895da3c37576c5e64ce89cf5113
SHA512	253b26ab38511ec213462a93690764c5a8673c2581ccc8730a1d1d87a4e53fcf46b38743e0451f7665d0ccfa00c4dc3a33e7ffeae2b4cd8616e0b5dae2705e06

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041

MD5	641eef3ef35111d4b433ee9228b1a0dc
SHA1	0cb0fce2fdb3b080f5076680d40a5e60f1bc04cd
SHA256	49769b32e26c3f976ce313955d59c5b8373f836f8596f3b9d9cbb7ce7edf655d
SHA512	a20394898daf927056bc1c93ff3ea147860ecb535c4224a7c8055f8d7cd3c6d23f1808fa8b2677997a31f62af6099df100afe880ca3da207f550c22a209fdb53

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f

MD5	d4700d6428962e7c318cfdec99c90f8a
SHA1	990757db04d51301425ae58d38ea825f053e258a
SHA256	e779ef26c417cc4adf4ae129f5c7df4c10df66f031e96ef92a399fa226fd5fff
SHA512	3db00b9fdcec76e12d62e7401c88a4ad9b765f84fe0e101470fc63f66207b04cd7caf65b3d23e48cf105367a10d6a10ba44816a3f9f4266a002962acb59e5f42

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043

MD5	71474203d68661b534dc8bd155c5fde6
SHA1	1e01530281efdb2900f5305c136475adae00845d
SHA256	c2815e2e82ff72159021df734f65472a18741148bb4eb75e9a0220bdcf209b0c
SHA512	81aae5ef23a29ba45ef395bc97dab017e0c4c94f8f55e9db58da77aee718b40fb38874fa465138bdb3f300847255188754ba8a92508fe8dc3c712e52fc725422

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000086

MD5	87e8230a9ca3f0c5ccfa56f70276e2f2
SHA1	eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7
SHA256	e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9
SHA512	37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000095

MD5	159be154b0c6a30c75f4f32d27f2e0e9
SHA1	656d75888330c85405f7d107175858fa7bb08230
SHA256	f24d5ad304b1430ccafd63cefd033e8e8c17f4864eb8b7984041c3cf4da961e7
SHA512	6319f3fa6ff4bfe58ad34acde79207c72210f5594fd1f3895451811c8fc3d163569bf8df21b0fcdc123b8676e766af4955d7f0c67a0601fb00f4841510a1898a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	704703e3e9ef4865110b9139b292e9f6
SHA1	6875fb98a05d65bd092ba1069450d91ba6eb702a
SHA256	7536770095ef49dc8ef1580c4e661af56154e099ecdd0daf58aea5565ab6ffc2
SHA512	2c3e7c2d95d37f6c2b9b1b07ef5dbc18a1a28f46fb9ce6463a5d21fca5e081228d564d6b18090ec610c0c84a94334a3be8dcfca124e8dbc24665e5ab4d05c0ee

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000044

MD5	43690306c6e04831e7be41a4ebfc526a
SHA1	5bd85f3a15430df83f593d656d2e79af4657ba21
SHA256	13ded43625b0173f7db1c942554bc81198e37884653c53725e850920525221b3
SHA512	2efe6a1259160273cfccc8c14625ded72382c8ad54c8b1ec1f8a0291e2fe16dc25a05ae4bae2a531911642b65f0250b53b63ffba86bc117c7ad6cf193393cde9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	93df3831c86c9ae2efa0132ed899381b
SHA1	590028ff4d4da39ddc75641b3ca684c3f124c096
SHA256	5230e924231733297884fe9f0f65946d99e7d180ee1eff2440ca4908d30ab698
SHA512	c63fd857dc9f3342d0f9bc95e74d0f256297f65cd0b56ba18172b528f586caea81e72d7b3e0f201c4bea4ab4a797744feeb8544fb3d14235ae72008683c5ec59

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000050

MD5	411cb2ab3ebea20ffb7c3cab79f6bd8e
SHA1	14af56e6f90d509c312648a98ba9137aee99ee71
SHA256	bba3a1f329de1dc9e071e815ad3dd775c862cab953ec7bc0ea2d70e3985903cc
SHA512	730a79a7c2d29644b691e0c53b7bcfb28e093a76dd5027e434044b3e9cfc9f8fb8fc0f50178ffdc4656e4d8bae9257ae666d7d3f2aee4c0c80456d137a88ab3b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000aa

MD5	dcab45982ef7837a81dec98c295f1d95
SHA1	3ea615c797dae739fbda2aa33f547ec725eff412
SHA256	331e32feb775dde4766c2f5c99015c12e9b1dc994d175f0767e83402fffcbb96
SHA512	307807d41a0ae7bf9c3d6b22f903e711bdaa741c5049d74a70a8aa085ee133b3bc3a5762040c80f991bed98052a9f78b6043c33c4c62c539e7c36e736f3a1a57

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005c

MD5	2968207b06cf59a127662805b0b05eec
SHA1	7c3795dedee2ebda295d8fa04afc01e6fd642b31
SHA256	1bdcf82f49ef799f0f14e191424f06323433689b53af149e7a35027ac1cee5f8
SHA512	df153d38acaaa2333431e4720d9bbd183d2fb54500f67d8324948bbb750d23858a110908f5b035355871213cc319969d744697180fa6b7e60d045d601d75f7d1

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\fd3c5419c8243f44_0

MD5	46ecddfb97f1c9cf7126090ead154b79
SHA1	f995afb4125eb009cafcb549ac3cacfb62b34c80
SHA256	a4d2a346b384fb01caca1d234668e24de7555f300786361b771842104eebd665
SHA512	cda7ae0a4ac1f8613cd6d5aef3b53bef8f3aa5e3e00426f3f38290d0e35bc8ad23decf45212e808e297b351881d53b663b5bbb70af18b25499539e212df4e20f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d782f305bb50c377_0

MD5	d20c45b1769f0432990442b37320b5bd
SHA1	bd2d5b11b01272fc0acb4e1d0521af396fd019e9
SHA256	5f33ec92c0a324441441fc3408ea9c4266381526b9648464b577aea8a7eb58fa
SHA512	b2ef19863354a256fcf7c9425de7b90e35436c05eb67918e9164bc96b517ee71133b01db0425e0e05d17d59525d85f46dd7a3205d7e5897e9718eefa7412826b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051

MD5	9c6b5ce6b3452e98573e6409c34dd73c
SHA1	de607fadef62e36945a409a838eb8fc36d819b42
SHA256	cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc
SHA512	4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	d9ed2f6edcd2b23381c2764c0aa54f9c
SHA1	37b8127abd3a967f76c409d3200fb21dc234bbf0
SHA256	ab1250208847ca55e908675fe41be15933cb921afb3067357035cc62c4d79b6f
SHA512	6a9dd81a1f12c70e080a51aeda91d47bf2a5740e53ea339c2e831351fbb2469ffd0e5049fff861dc509aeff57d5d75456b1815f0bbdaa51d1c842fdc6d3eb714

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000048

MD5	c457fbd5d945b50eb2d7f74d222276a7
SHA1	8de4c3884fedfa8d325037b6ea7ef2915d5dc7e5
SHA256	21d9d398c9ef67f48e2b24de8c960ec9c7eb7612e22b133a4f7792c3165ca88b
SHA512	5235fbe5ae6a58de1df870f14a5c559fbfbc26054b1a4207694ff14586040fdd1e2ce89421dc7c7a0e3b669b81881615d6782489ee54fd74354012e83c7bd6ef

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	721ed80b4a5952f8f180fcaab2c7dae3
SHA1	dccb5e47346016a29239b113b80cee99291c71e7
SHA256	d71d1d14c6da0beaff6085b41ec24f59c36aec5a1bcc36dbbc87c5bad2dd54b3
SHA512	d50332667608f003b11b3451c36526d3f093f9841766fbbb22f0b6b0ad07105232481304dbf013f3249cd2b3df809d4a5b679979daed8f31ecd21d489d3d3c21

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001

MD5	3fd11ff447c1ee23538dc4d9724427a3
SHA1	1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA256	720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
SHA512	10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	1ca0a943c53743e6ae8a9630250e9aa6
SHA1	2407d50160933b3c18530eae3319e4898ec2151f
SHA256	e5daf51ef4912ea2387abb94881d1c1e7a4fda9d7f2a3ad1a6ac4161a91b8210
SHA512	9fe8af4bb8b61da1536aeac6b8f0ab8e306e01fc11463f9fbc99346559d847bb0eeb17259795075d41d5ed659f9e4f0f74d75c5757e25048cca912f052b4ad53

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	7e76f2ac860ff02944dc06dad554c6a3
SHA1	e0f03aa1467a2b89af95559a4e05ae9e60a847eb
SHA256	66f1faa436ad452168f3b8413f88e1f30c6e9a6c8ca15cb51540e37fac2e6564
SHA512	504cd7688f4284858e8aee2c418d816d7bb4f6f5fd8613307517564a13a7b57604343ca6f6a7ab60d6171ec1269f9e95d004f304ff6afd9344cbfe298d10a235

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\MANIFEST-000001

MD5	5af87dfd673ba2115e2fcf5cfdb727ab
SHA1	d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256	f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512	de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	40d88197675e17cd7e41084aa0285e8a
SHA1	c373b3dd11867edfaed312677ce652a075631a2a
SHA256	2da7b8c552e5d5186fde5a92bc8e293c7fbfbd2c90a73063cb6f1b172abf0f5e
SHA512	cae4e29da918e569d244274bbfc373b8573fef7be8ed098ee1c6ed8eee68566c2ce82d38d5d016f250070db97f968f0d5b91b6a75fd55f383a00822d8b00384a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	8be637aae81723b487abe3b2f6448ab8
SHA1	449204e0b316fefea20e40e0ad747e349fd67238
SHA256	f44db05f5f3bf18c00554924ee72c5e2dbdf73c3d3d799b8263ab8ec2015e79c
SHA512	b7eff6cab10817818e811fc83fe99f13c4be7b77525a597e2b210b5b4c468ca89c5ac5f100651ef6992845c4396dba8229788c84eb64f5ee8bcf5a9f5749958a

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	5e077b8d0dc16e0540e81bdfcf226c54
SHA1	945095bb403c18d9c32cee4431ced0b49f6071c2
SHA256	5859ef1dd73b4cc60cad01e3afa383d52c3016e1898ec13a20359afa58cdadeb
SHA512	db1c3cae23ca10ec8acad10b2744eb4bf0d503cc17ba8c943250ab4e7fbda6d9963a80aa50e40bf3ea8cf3d2c9caee1d97afa5f8611d224f4e8b0e8c1cb5ec06

C:\Program Files (x86)\TotalAV\SAVAPI\aevdf.dat

MD5	a29ea4fa935c71d8ef583d9f6e49a961
SHA1	9909cb8e8dd8ccb5551ee3c620a3bc17d70637c1
SHA256	13a1ea54097d587433adfa7a9890909a41046b74e035de0c3cc7b943dcdc33bd
SHA512	7fa7e76a1ee904b7b2d6e01e59384c18783844d640a5f3bd581de29f88aefed2d1325e0214a82b1cb1d73dbca177db5261cea56c6fce7a0067ed9a34a107eceb

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00000.vdf

MD5	1486ff8794fd6d4e99924cc4aef98f5c
SHA1	994f8e538d09a68ee4967c6038b26c2dd33cb5f6
SHA256	ec03bf427047d531d018cc017684fa23785dd369215cd4cd0421477fa7c50f54
SHA512	442bb3143756292aaf816713f003d32ececf8d3f5e40b12888c7b100fdb4ca450f83e91708a5841e63fce2e1d37dbbffb0bba7d015ff1b91844e2b6ec81132b4

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00001.vdf

MD5	5dfb5f78b78783ef393cc5a76ee5c99c
SHA1	f52099462790da49e928eb5d77974feddae2a908
SHA256	b05f72cd80cb031906ac2d10857946c290b2d80a700eb51510bba48467d96049
SHA512	0a667db191138d7068e6210a9dfe4d0ed563e5bfe7cc9cdc550943df61809282f1aa1b90f47461985a64ac658f995ea9a54c1efba37d4a9d5f5e72ef0196ec9c

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00002.vdf

MD5	9c21aaaf7daab14146443a1a7efe60d4
SHA1	9b790f8f24b6fdb26c6d652d5ce6ba3eb845832a
SHA256	fff94e87c231b50998c8c004ead5644f1c6f8490a744bdeab5044c166cc182ba
SHA512	5c09235a9a3409f3e60d1b9bc8779bd4cdaef40650f01f4a20bbbdbe7e1157a1d77d63efe910cce7a130a9696f075eaa393e3b0a5024d101d2f303fbc9b73107

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00003.vdf

MD5	752035c1165eb4b8c97349426df79d3d
SHA1	114b55ced8c0b00bb0face659445b7333902a750
SHA256	ad02d866453069b213d347e92a07cddaeca6fb6a5856f12ef4d6bb36ca148f58
SHA512	b6df910af67c9b5af5063111263677a58cdc9900fd831f46e1474056df034acf0c200565c5a2a9031a5efb8a4d08366a6ba9bb0c0c822affafdea2c86863a045

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	f1d8763d4e62265872fb788b95fe36d6
SHA1	0d894969ba8576ecfdb275c64b0d6eca2c3325a1
SHA256	68166ee13e72e84563075cb94cd6b8d14ae525da1fff2d0a56b523d63dde0e1f
SHA512	28170a20589b467d79a316de2f732e7240d0bc936603dce2e25d440a65f2e92a1ff7877b61fdfa69f2692a111516cc0c6d7a3ab86049694e5932fc2b93c8245e

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00004.vdf

MD5	ea5576d4c0c8322c5da7ff85c27ab930
SHA1	5eb0ebd6ec74deba216a195e4d966140b0fd9b88
SHA256	1911e05217caadc9fd9ef949b81c7c5861b45a59914e8e937e042fa03252daee
SHA512	a0bcc1c4dd8640b4cd60f54953805f357ede26dbdb3eacb528cedf09d96f5c630510a3044fd0ad69b86b0ed88da93751daaf833ca38baebc501c23c72ae416a6

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00005.vdf

MD5	7f739428d6fb60f6a03e67652fd632b3
SHA1	a72c60db9d495cf869c8c0edd510a5850e1c7cdf
SHA256	5b97eaf116756c5fdbf5842ae48b1a21899f04276c956ee213213e2a2e858ef5
SHA512	ca0fd74f2e2067f78741cc0840c8e0642459ddffce44c19ea25709053e8c182d9414fc584286fd0c1e1acac7be6cfa54d0c0b71304318cba0d2899427ee3d082

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00006.vdf

MD5	0d002176e72bc73fdd98cd750d17fdfb
SHA1	c614eecdb9f413f23d54f10f9558290d31cccf6a
SHA256	76c9a90906a2af32d432723863a390fa4236efb09ad74fa57285f88c25443d3b
SHA512	ebee3e3b950e68252877e6cb1aa33e77583a1d94212054606e552645efe593d069e35258c17de39c62a5190a7424969b82d62144a77fe84e74eacc71333453fa

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00007.vdf

MD5	7c924a91ff5fcce8c80d4eb3e6f4aa4b
SHA1	621198f3b4a54b5821585d7ea13203396b2ef64d
SHA256	e541d0f1824019d86b4c398b5d73c931691a89edda1231d1a5ca52e46938e376
SHA512	d7d0a1800a5463baf995c61129b52fa3f4a152251e3887b2d65c40f1e4777813f1c2b741a1de6254a4a400c54c52846d80542ce0203eb36970a4c8e55f529e01

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00012.vdf

MD5	f088312d2a1aed421a9c5eed1cbcba9f
SHA1	c38707e2683465af88d5cc7a2b01649fcba92bc4
SHA256	2afd08c6845ee45394fb3a945872a4a4a84d2a115aaae13a0fb8280cfdf8cf54
SHA512	433fb3d50efd75c3ee93d6c15d1e0839d64d636658f422570b5b5b461ab80fda5476be72849065c2f2c48480b7fe2374450e98687324ef499c1467cc1d30a159

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00011.vdf

MD5	00194ef4a5366720b7bd81f088930339
SHA1	7851ddb71549743723126193e7ba53036c56b5a3
SHA256	3c8f8f534ea8cc12a7251a4e4af42eb6adfecbb312ee33a9c5e29af8b366af84
SHA512	c3f0106c42dc590c76f1abc1193c14455e0ce998d545813d1f3e8f05a72f3b7d41236b1de5dfef266bf2f1ea87f10cadee7db7085089b0bf99ce759339fba998

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00014.vdf

MD5	6f0a137d05d382b23e80788a965ca56e
SHA1	87a0ac1fc278db35a68f4cb70f04e51386bed835
SHA256	06d943f031b991605aaff6f6501be55a205c696d0b446027ce6e2ae70194e9d6
SHA512	33953afccda3af545320ad35c5d0fef52c1b2cb74e456bc60dfb266c588eb716ed8f1c476043a709c49f8c4ca7551a7f4b26692b51de24204f1c81cd3bd506db

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00013.vdf

MD5	3b212784f87bb777e8b6c533a8e4ae85
SHA1	798a4f7b36eb2b5b9a0074b0ce5ace398dbeb6dd
SHA256	c1ffcd0e48863fd65ba571d1a1ebc41c8ba235d21b64814273819ad3ddef3b03
SHA512	80a7bb3840193ae75b785a781ceb4bd3f653c1c70aa0e5a1d47633c6e7c6c352ec23843286b4231d42e63bfaf7d1210d1810f7701346b20dd8c0eb8e72e46e81

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00016.vdf

MD5	75c0c5401e40f85daa072a6c1419d614
SHA1	20830d489cd4451fb104e474ce70a5f320b0f40d
SHA256	83ff7e1c617cf4314253cdad394e1bae117ca5b8938286eff5247d080045f363
SHA512	18e32609dc00c89ece65b7b52589490596f6d2fd183fa6632437ac512fdbba76fe713afd0194acee3bfbd408242e9c98897d8594965d55eacf034dda69e47867

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00017.vdf

MD5	f26551444245f7f0dd16ca9c5d0e023f
SHA1	0663d1ed9ee944129bac8d9affcd2cb4c785eebb
SHA256	cf495df57490fd7a3af932ecec060a96a546914de0d0dee95316d38d0b09da6b
SHA512	1a195f5da48dde623cde1d6953adc3a2c32728923edfd5c5bb26fd9d11f0a75fe3537565582db9125385553274e2d0d3b4d99475083b9a5b9579e4ab12f2a205

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00018.vdf

MD5	9493c2c01ee725788eda1f2cd7497e16
SHA1	e52ea218988dbae2d4e5a15c99e839be5351500a
SHA256	e9da8f6a7e7eea82c3c6aa6d4b0f89cebf5f5e2c1f5af5292f5d390f22ec124e
SHA512	b975160faa5c1c7b9cb0c4a8cd5accc102eef98cd566bbd0260a4100d4d593c79fcae90d28540d3e616541b4de57d8859906c8e836dcad22d7c9ad6d9b1c2502

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00020.vdf

MD5	504bb79dd3a3e491cbff4797a0f86ecb
SHA1	74971bcbc601ab09bbd8c265c8bd8196a700f5d5
SHA256	80495cc6e93ea932b94a2df5f84ec87dca2ed941689510c56009103a1289b820
SHA512	763520826e233027f0bd6d1912889805af147d9d6f4a01383710c66d27743657ca204930621672b50bd877963e70420fbd2e91c411ed84469d09bea8dd7557b7

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00021.vdf

MD5	e22f4b1847460211a218f2a0282408f6
SHA1	33a31302bc360774462c45767cab409dbc7a0739
SHA256	2163e48c5177cec7174d6bd99ed33ae0f9cff8eb3fcf6c362330f9b828eb69fa
SHA512	12a163bc646f77abcd430d21c4b24272c9c7d393fed5acba8c41185130eb375bd97247115475820063ef1d6068d685881866230097d4801ff5ab76b1055c1884

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00024.vdf

MD5	7f5e4fca965cc908ce5e236b1c8feaca
SHA1	82a4a9edc0bc9070dadaa4ba1a4935ac07c8737e
SHA256	ff5a99abed74090b5c099251b653ceec6ddbbbbb6e8896198d2bd1425882edad
SHA512	f6d219b15d11d4433201785dae168965d9547a40070ec238f78bb77448af682f5b123da6517d72413a79ed49d7a24b293732fdff49eb2fc8a7ec692ab5c2e25a

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00027.vdf

MD5	e894a468a5b9ca25a5dc1176cda0c567
SHA1	d834eabc5ee5d5906b44da94bb30395a937d189d
SHA256	ee85a74724d0c81415eb8d3c70fffec9168e9c17d64c32b0962d252879eca4bc
SHA512	e1e301cda80d82b24104c202fd15bae85f8ad6f17240c0be745425bdf798e45fd5273d3c3762fd521e5402919deb42e5f81a72da5621b8754ef4bfeb757af682

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00035.vdf

MD5	2de5c21887949c598f0aac5b85d80df8
SHA1	f57f3eb59acc843a95519f326856eb9cb601a921
SHA256	69804aff488818b86ad93fc103e0db22f06a9e67fcaf2bde2b04a79108312b85
SHA512	72866d9fe48aa2680d1b68e188a316d2f8b040011f78b483b7a3b0e727029f6dc4c3ff939a80c587deee604898583e9d5f0c061c115979caf879ec5fb03d9f84

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00041.vdf

MD5	c3b246647cea8582d31c032d31514f7c
SHA1	1b894f36847fcfb95f7606349f52743955a2927a
SHA256	4d5e34e69934c94327cb0f9e939505ba6ccbb75935e6c1f06143aff71c786a51
SHA512	22d2bedea48b480c1d70567975fee996b48185d8ec181f13c25e19dba426f4f7a584966b3342bd4489b6d5c2e79234cf1970debb22c6f9382757281fa295ada1

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00045.vdf

MD5	6b66ab08931d1b70cad3e9f1ba184984
SHA1	79ee464b07d1b10a4a71ac3663396734a89d42c7
SHA256	9cebb54bc661d48000554ca3bdcb468ac85c02b59d8b8ec19ad54838df12566c
SHA512	5b087138be1cb402cc03840537c5ee892ba71c95c7bd92667fdf821c7932ee22129b036e1858ea672bc86eef2ef66099143be4e7d18717a42479f1431068ab21

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00044.vdf

MD5	1aca0d9ff9c1d0a0b4169f3355eca41c
SHA1	dcc6213b1b6473f9e829b6f1d63188ed1107700a
SHA256	3a36f4719dcb5c7db3d4e7032cc911c33637cedb851cc8936df6d0ad19ef7b94
SHA512	512157d7bc96742f802481404ccbb9c790def7301d488b20fe66ff9b132b84a237decff300198ebf56d57e47e3a8f6b868d99fc5cf626cf41e96c78d2baeb124

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00043.vdf

MD5	74b03c20442ec760e74a92e179d67804
SHA1	6c69e1b8a55293d0ff334876a9e08af5df9b925f
SHA256	955df69b9ddca31f353d10bca732e50615086a2229b0c433f79b148dd8871419
SHA512	d20d6f39f7db2fd4d3aca9747b20b78b999c96f759dc8903d402c4d5145029a485e41e4b85d57911d99855c310427fb00b0c793e0132eb2d6b7e96893d671585

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00047.vdf

MD5	86498402a79452e8e5126347e2d0b2ff
SHA1	d1c16f0df50d1d8041a1700c1612dc43f1e1e30d
SHA256	f40d781c1045b21788bfc3c8a19a294fd92ed088918f81eea3503648edba2114
SHA512	0a9db8cb99744066956c3ab3a96f08dbea661a7cc71adbd06f54e535f801964c8b56c4e381d68b8ea656af96095d41febf2e931bd33e12609a13140370224649

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00053.vdf

MD5	e0eff758999f4e78160ebb44967127b4
SHA1	f39be8d9a93b90d7a8de71c78b604cc95664585b
SHA256	e7d89fc3e05754a7b9d440c37b51f829c09e90ac3257cda3c7d5602945c3057f
SHA512	e6ff638835d154809d3415bc4984c4b777a4c509376adbc6f6ec3a6674a42fabffc1ad047caa613b2dd5a0b524d21c2787fb3104e417d4ea98353e42a98d3615

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00060.vdf

MD5	fa42912bf73b0a03d5fce79ffa95e435
SHA1	1c7e7876151ebc592bbc696fe4ecff223ebfa8ee
SHA256	d4b3c70239324b50e58122f94b094c3389438bbe88c8b2ea070f247bcff9c8f4
SHA512	6a8d5cacc33d14d2f38805c3cb2b7f2f287fa9ea1ab5b825ac31657bc340aab4419e11f08afd360efcaed5e4db344f2d9652744c2e4214464cb65a47ffe51cd1

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00061.vdf

MD5	46139282ce8d2fd675bc3706a33b6744
SHA1	1dda3300307c7596c524c940d65d150ab1a085a5
SHA256	3b1e085e37a97469f5e75261674c0058872c5aa993472c56ce186d15ec915fc0
SHA512	79b33c07d45996db92dbec10cb179c89241cc1adf70bc4434f0ec3fc9bb860e66ff5d200587f43173fc8a7fc394349454876d4e722d8346bacd294be8be29b4d

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00059.vdf

MD5	9b71b3a878287f490eedcd9581cf4804
SHA1	a93b90b477fa31cb4b60d4151c4324ad4f9bc132
SHA256	fdf6fb4ad7f155928fc73a906d69e1679bd04709d0d372cd070421ff6ee1c728
SHA512	fa9b78169e042c5feee382b664fce873ff4553a48a0f89a0f558f0b0f83bf769f7c50c4a5e7fc302c7db66742afad5fb603cf9f371363387dc8baf3500d926b8

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00058.vdf

MD5	d0054511db24f1d8eb5a89062452fa07
SHA1	7e0e17af03c9578250eafda05bee482e8cd35e6a
SHA256	e457ad0d028c7f7ac689c9f038af56831e00939702252d6538cd8e926661c84d
SHA512	3bd47b6b8efd833bc4f72ab5811ac206ae501ebb05d0ef82690f224b72fb6a07f49d114fffc597a8f5d79b4ca4c580f56b3c5999b90861343df30d3630bbaf46

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00057.vdf

MD5	8f1d2f57be7a8440f09162a5dfe88e5e
SHA1	d5415fd80c6fe8e7ab24a7b89cb30fa34aaebe6c
SHA256	a39b9654ddcd26cadf678378920dd812b92da6ebc702cdd3927f5254b94ec049
SHA512	043434e0b99dbc1505a22afc181d67d90827a9e6b4e91bdd8114bd04148bca80f2e93bc8ca4616f18612c3cc6763d6e1906daecc96b6f908416786fe613fdc9c

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00056.vdf

MD5	a9528e33eaae7b84a473abb9e44d4676
SHA1	88e795e26d1dced49780475102664b3674a8948d
SHA256	f1ac3c07c2a76b39b334dbb45231947757ab224e22c7423eb2f1df8522b22ac5
SHA512	adcbe0c6e8642bc3792575cbdcaba0189a7f5dd4dceee592024040f7d3bb8217b7ab2000016d62360b3d3b9c130cf1ae0cf1d3bf4e524a5bbbcb45449393174c

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00055.vdf

MD5	ebdb7cf9ea8728c0c704a18376d368b2
SHA1	0ebbb289ff186208fc288498cb451ac32f8c59ba
SHA256	44e05bbb5bb6c4b6d4a55d9dcaa149151de504be71f71c089feda2c14991c8f2
SHA512	0bd2cfff09c8662020e61f819de1f89651a3a45983446a371118f93590d5820dedd8d97cc2712938c70af74da185387a6f7f691956573ff38f3f76edd9fa7de8

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00054.vdf

MD5	662290083c3cd5131ac2e1fa4172e7ad
SHA1	932acd0de5516bc3f4c20bbba9ef44663d2d80d7
SHA256	1adc49d3f4d7134c594bb3ba24cd0464a70a9ef4ac30449309420f730e20e7ac
SHA512	e826e1adc5fb316c1b9e91a0b8b1f2037ce36ee6371423ec27457efdc37ee8a669984c34a505119ddb51fc16351d4bfa06cfc74fceee488b4b9acf99be6c1b82

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00182.vdf

MD5	5bf600792605180a6ffe24c73b0bd82d
SHA1	ead11e020bbe1b36633c36bd0523f3b71bac3097
SHA256	58b0ed4dd62f81cd5697d83cd45de8f19e562a7011f045ed7532635ba9ea651f
SHA512	6079a74aa7006e1895e9ffca24b2374a8d1550c8699d3c5dd9dc43ce99e6c4183ad7f676e0ae57dd324f39c705cc8ea9d043cf105ead99a3a6e337fd91075f77

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00181.vdf

MD5	e59ba32bb0f8a078297bec1e69d76ca5
SHA1	9d964e0de541e6f7b20050d136d7dab7237ef287
SHA256	7add4f244082203025d3a3d2d8419ab62928a985445ebacd764f74735c359148
SHA512	9278b3f1292317994bf7122299b4ee539fe543bb3ef79f5104eec8a523e876216d340bb78bd9eb530f1617ae684f4aea11c318c1a1f2425aee693a8219d0e669

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00180.vdf

MD5	2b2aecb86d5edc9b9521fd6abbb0969d
SHA1	f10cb11e50e5160aec062d8b90dc4e491fd0ad1d
SHA256	fda6fc37af3708175cf2438421ea90b947a32c3600e22b7efd4eedc807daccc4
SHA512	85a399ded3b0c854a18fb77feec0841f864b744d25875570826606f1f17a03b6a011caf1e8fd4302030e1946df86678fdcc883e983117529b839bbbe962aeb76

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00179.vdf

MD5	5a9b55d636cbcb1670b82cbaee6e8ac5
SHA1	49d666498d85a13c5f4f9c601e16ab7cfaf3a212
SHA256	547212e3fd40097684c56ff181ebb02c14e1d39cc86301a2900ae87e7971439e
SHA512	a07e476bf04691f75a1ab78c22d75f280ea5177a544f152cb98f5930ede04abe40a0f635fb3f50687ee8c6d0ea3be075123e24abc0bfaeb3195e045e2eeb6836

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00178.vdf

MD5	55491eb10c1bd0dd5cf00da516fb2399
SHA1	1c8dcab9f4d827fdcc53c87bef30012b0884b012
SHA256	3cb3307f9563a61e1c725aab291d97432666c47b6cea5baff546d56c869bfe08
SHA512	1347503c442c5743f920595520be2db64e948cdd86456d78e5df0dd5806c2d0b39c4a7a39f9692f4e426edcc5cfdf6b863f63ca4381ab6aab3ad17d2d9e306f8

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00177.vdf

MD5	5670ffd2ccb5a299375592d678506294
SHA1	f897a2cb0c31a1270291d25c960ebf04862f7ce2
SHA256	994c4f24b7b003a2ecd049fe2846f3f1d05e919893e51f6ee425127a2de7a3d5
SHA512	ca0afcd1f9ad8da737c4db62aeaf3bb3cdba539ba9f0e481c6690f1b3ae242012f63e8910f4091926d6e18943f4477852398329259fe38a7cf637d9bcc260c11

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00176.vdf

MD5	a0e7bb3e2af03bd5f1590830c7c8af2a
SHA1	6bb776a7db75c7d3114ec085c188ef007b3a3d6a
SHA256	37441431cae32259b7d99e975c48a91a2a790983a93f012392915b6653cfabe1
SHA512	27ca0dd092066c502e1b68a6aff6b7c8b9ca4e0ea7921e7afb418caa33890433660136fa813febc48c9fd51e6665098d6f2d4743c81b881d86e4950a2c277cba

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00175.vdf

MD5	fe74a348262cdda6cca646ac124085a4
SHA1	b229ca26f99570e6516819da253fd4395f1190a3
SHA256	dc71e99947ca7c4e669293bb57782aeb6912412928baef82a76be1cb40e578c1
SHA512	368ee0931c857a39a1da1d6f5e847339682c9ea98acf3b02e89b7935e814e2dcb927f48d914458f2eec907f56a5c453d055311c7d7c1fefe7949b79c65a0e5df

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00174.vdf

MD5	565247d0bc9574bc1d417abd4eefb6bb
SHA1	33be37f92f52ea788ba3808fc64d894af29d72f3
SHA256	7a1afda59ea41828e763314c43bf1492c2d92e67dfcc48133c33077382317f2c
SHA512	4586412483bab85e0a8fc1c3906bb12500a990d35571de56ce34edf72f59ae25160687e557dce038fdda2fe71162b83e296fab03e27227c80e166efe8deae6a1

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00173.vdf

MD5	41b3258e7d643fd195d6838105a84400
SHA1	7ae800fa5fdb7708129b2fd74e5d08bb96f4f6bc
SHA256	83ba5a004accc3328cec9a856b5239e7c8106077434a1bf3b5bb360c94373e75
SHA512	9fa7480c2f9e396c029174cd1d909400f70706d67fe1520b293ccba1549917071d6dbf5c242831de8681e4433b0091aa8300bb4b30a9fa53dc83897ba05f7118

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00172.vdf

MD5	afac12422ed40000d3b5f1e496fd5cbc
SHA1	8cb96cabe332efcbb513b266be2c9fd3b01eefd9
SHA256	8052f8777d847c57447eab3d130ca7b4273fd3b49fc5f451115b803cfd8e0d5a
SHA512	9d757127e3987492f9fc57a43957a8826c8fce25cdc0ffc9d38aead86a2da48c64923eb7898367f0f88fb7cf513a84b614a04e9d590832a2b7f242d9b8d08816

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00171.vdf

MD5	796057943e7be22f228aa635d1d052ee
SHA1	5037b73193d64fe4fb5bb77339f983f7c4ba7fea
SHA256	a5170ec5908ae2bdeb182484ca655c80734ece0da84a1b53def26a4fd4fe5f6e
SHA512	76f1125ee525c76c87713dc5d56db1bff6f42a3c2ff467939b33920abe1512478c4afbe4050b125473099b22c812a5c37a76ac70425276de55bd57e9dcc46da0

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00170.vdf

MD5	4f4f5ad3d13d0a2c9ba9e075438a3c1a
SHA1	e5a5ecab1b228d870d14c620e25a8adf1bed5df1
SHA256	d128cb900baa1b9dd3dfcf3a4fc94cc178edac65c575713768f57dd1bc9abc70
SHA512	ab3f0ee19fa2ce0e016e609764e6707337b8d7d778c0ad7feffb3b91cbe6999780d0e61e380733cf346d25435535886f2d46f6bffbd4820cfa0e75ff0736be69

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00052.vdf

MD5	7a52ec363397ffe93cc8ae2ea41bc746
SHA1	b680de583da0ff33fab5006c6587a656f5d79902
SHA256	27d35983eaac0a1eba8b82eeb9ad4728e91d58cdaf56a9f8e97d73a7da84ea0d
SHA512	d4e13beefccf960dc326bc5edc4fc6022a1480b4ad7a7d78c7164b39592d5a4621d276b2ff9ff2897818c074f34397c6b1bfa47a5fd84a2f5024d575b08a2325

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00051.vdf

MD5	b460e1bd1303633110fc5b20ed832539
SHA1	03f0d8c192e88e2708e30a682a03285b804d1bd3
SHA256	5d6b48fab469314afb052417e9f062e6b47aaa843199ee4a34737a81186b4a64
SHA512	f01c5085dfa7b970d0c4f3cb5205cbed6df690f1d16feca0fffbb955ef1a17a3972c98a7fde87876ca264b4b0c129a44df4ac599b0ab604e266617280faaa918

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00050.vdf

MD5	3c3a580cc0dd8343dfc85669f535e635
SHA1	47ed2bfdcde2ea913ac0f086954389f895d96ff9
SHA256	814408e8f7fef433877d6e75c97794e4ec746edf93ace0507ed6ed00c57259e2
SHA512	47243eaa5032a301078d9a50c1f64a0fb02420f73a996b0be2da2a777a635c5f0a93c9514821986951b15da01c7a80d30206b2fc3bac0832c1bf8c37bb7393f5

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00049.vdf

MD5	d42e7eb5ea6032ff9313627127da05c0
SHA1	609bf5db3792cd8e1405cb23a7f1811265cfb472
SHA256	a834117d74c886d63096f01e42c4a5de0f4b3b44571526b0d28a26f5321155bd
SHA512	05fd0bba89295c495bd5a928fb76fae3a6e785a88fb3847ca384f31ab81ff9028a9a18226be46a8183616544aecae88b32c08f992f3e67a741f3bd0f00b24c40

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00048.vdf

MD5	607ce8870a9cf184136acc4a7eca4ba1
SHA1	b77d15de6009708f65a2d0ff3d1d99270f3ff434
SHA256	4c2d8a60f1b404829719f78ed4456c71fa650c2226a4a021f3c7ab7598792751
SHA512	e619335c2ffa7a416885091d177d07bdf7c0c2bda72365cceaa9c5d4056c43c5e8d31f06eb92be6b3c6f2decd96b69cd391ce84018d948c3313b28bf1b0d85c9

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00046.vdf

MD5	5cfc9ac23b4341b77f280b2a61efe9b1
SHA1	f385dee539ff197a6ce8bc649c0a7091d8fbb19a
SHA256	4b9ed7029e437e58181485d25dee00674a0ddc9da566bfa4e1c2aec111d5c7d0
SHA512	e5fdc35f6aeb860febda6f9b8f297aa625d652ff9d2c6141b764e306a1505b0267d558a6481b5063c51dfae30c5a6b6767e3b11938041605ceaf3347f2062ef9

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00042.vdf

MD5	ae22c250e84adea5a41eb97660885ef0
SHA1	ee95b2d02865a1bf34dc55b71ba8cb99f8f367a0
SHA256	5617d6abf8e96614a9d24ec868a0d5bbb11b3b6cae068d2665cf723c3f02f166
SHA512	939116efc00e2339158f8d1f7e7e2e0a9a023551064d54a1be37b7200c87b127794bf276b7b39b502acb06dc7b25c0456781dfb23ec14d4b7b265bad36163c7b

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00040.vdf

MD5	f38ecb20f8a8db72e7f3d5a479a5cffe
SHA1	6080a72d471a7982e4376613a61d8acc3ae8562a
SHA256	7937600547c220852933cc31b247dc5f08ec50de466f1fbb97c14df0b8cf6bfb
SHA512	d4a5cbf702a91e5a5b12378d427dd809370703ec19713b8299850b6d9a00c0990f41c89925331021537398b3b76870d5f9e34f3113f2950bf4baab183a61ad61

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00039.vdf

MD5	f24eb5b7aad76562407fd78ce4c49041
SHA1	95c0105551ff6974cfce0ab132bd3df60a133f39
SHA256	68bc2fcafdea40bcfe25fd87e305ac1dc655b2916c7f8b2e32c10ed7a5735d1e
SHA512	6c6eed760ced10aa145cb2c3f1c4373620b2e4a7426a7e53175427790658af36051f7afcfe6dd69c790882a57baaa911e5149388051dc4596b5e5d97e9624ef6

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00038.vdf

MD5	c9cf657a80e9f89de07d7e8d1c0243e6
SHA1	8432acd25d3b2e9a6ae05e91d035e76f24e64cbc
SHA256	83421786fb31ae5fb9c8ac0311e9fef5928a927eef1360da99a318e883de8284
SHA512	15e3bc1cbaf649a3b1accbe14d1eb7aa0bd47b158a5bd8a8f8c57b17fa097fcdb2177fc62267d3c7808ad15281ee255e60e367f4258d7223fa2a2e99bdbda62c

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00037.vdf

MD5	ed533864184f4b0bf58beddc74cbcf19
SHA1	cd090ba8ec2b5633bfcc8d604197a3b0f3a50d16
SHA256	74fbfb2b96ec92e65afdd6f41b0d6f847171bcfb951e67f4a60be71a0a215954
SHA512	4087147957fe6a99aa5ca8ee0d06b94d79ca61e56777bb7341cc581e54c74a3d8244403a1ad6513592e7a2da90e18512a7f4d7e6db96dec9dbdfca494f21086e

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00036.vdf

MD5	e6c5f3fde7aac1ed039d576dfb3bb6a7
SHA1	4a054ce61c07610d8f62f3a0078236fd74aaf612
SHA256	b905f4e1f9a871cc813d5a472de6a3635e744cfe05ce4fd115a1bf9c15ae50b4
SHA512	adec63ee1efbfaded90d997b7b2976bfc3de4436ac1f81d5d83f7de58ea1ad31be4ecba03cb938506d01f291ee66aee7d9c451975e590d5dab096e18ab933db0

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00034.vdf

MD5	ca0746531ad004e591891002b32ca942
SHA1	c293502c0d2c470be6def4059d55d9d49f3bfcc1
SHA256	4501496b637c9422b04c88f8a9d0fef77bcfdc7b459510e39f295dbfb1a95fe2
SHA512	375a0cd004ef1a28eb19ecc938db255a859bffc810d69573c87ac0f4f885c858fefaba79a4a65ed80d96f38efb03c294270aaee7b85b5c59721c6a9c94d5fe61

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00033.vdf

MD5	8b78a8705ba1c6e15d25b5a5454dd62e
SHA1	7b52cec10ad72870042728db37885ef81914a385
SHA256	977ecd2649be4595095e5379c091ee12299e65cb5e8bd877b9ff762c470b5a09
SHA512	ce64bbd65ed4c3a46e086d738f6d5d5747198c0b04cba48791336b917cb30ac0fb8c27cbca3312ab4b8a829e2d497dae7ea1933bf71b98f4736ad01e5bd66923

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00032.vdf

MD5	9523fbb626cda032a95efa7197f77da8
SHA1	43ce8a379fb81e60c3dcb8edc38216a183d3ae3a
SHA256	0935be55e1664b3e96395fd35d55e95352df0abd78c5e58c1a70cd3b8a846b56
SHA512	dac62a7bd86d07117cf4626a6a46fb1b5a3201c06e22f6a2418dcf41411fe7e7b358e2f2adb06fab064953348f1f0e13f70dd186266cd46352bf119f6fb28930

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00031.vdf

MD5	b65719e5752aa9a93d2b0696ca504345
SHA1	7a0f05a3ba06c70f02fd15a45739223747b36744
SHA256	6c3efcdfec4c4cf7357b36166b5238890c0045c1f86a776ed7299b8f95321b24
SHA512	2fe115fc128f26bfda54ea713fa96b7422f11a00387a3b8b692bd273b5ff3bf48bbc20bc9e664c5fc086ceafa2fbd8ad05033edd3622cb60a0402c70eb75ec70

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00030.vdf

MD5	7c549502d122923f741052efcb3a6553
SHA1	65df7b607a95e8a158343b744d6ce68a771de8a4
SHA256	60fd41a360cd4dff4220ef1b0e359fda98905b1bc45397e2710fd5e44f3c9a46
SHA512	98f689604a5e540857edfd3c92f31315362ab7c28bf07f5b4f24d2706f6f0fdb3db807a34168b1f8576c5539d9f022e2ee4c617522d7bc59927ad365edb8d048

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00029.vdf

MD5	cc2a7d57d4d3aec70cc3d3f77fe7084a
SHA1	0279eaa285309cb6caa55399f20e53204a159135
SHA256	c291709edbe6f16362c8da5ff86199f2e2eb704bbcb5db25f0d7adf84af6e728
SHA512	a99c1ab7a9d71f9cc4d2edfc9e7c8dd4db98fc161ac3113c293d7b43d6df40a5fa00f17bdff89984fcdf24596a84d4a40167661eec00229e98cc9edca503f3af

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00028.vdf

MD5	c47b80bacae1aeabbef319e6f4924b46
SHA1	db560e34beac77a33328d05734a6f7fd83bf4887
SHA256	f4721e6c2619bfede0676accfc89036ec72b3bc3a617e1cff9d929aca35f4466
SHA512	41d1e1f7cc4abce1664824a8b1b6c9d51933815b4a747556a9aff55af7436f04e3a00b92f166cdc036e73fa2d8082303ba4a260161fb86e06ee5176dd80ef1c0

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00026.vdf

MD5	b1548e7a37acdd91cfae8d9918109c6b
SHA1	2856fe2b473ff1b72fd95969ec8209891fde4909
SHA256	cc00eb67f4d0bc7c0e0037ebc94389a83a1557bc3ad00acaf621b49ae831ea48
SHA512	cccf8f2b6abfd3f2b7dc521a5369b8a5b97eaadcf894aa1fea3c416cf73fe3a27896a2f6a96059e371c46306949b2d0bff5c2333add2e40cc4e206cd7d01bb2c

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00025.vdf

MD5	b85d3f4dfcb5ac1fe1658fe73e3678b6
SHA1	d5d267025ed560a137944b8d59127f6145db08c3
SHA256	966818fe2fda07e29ef03ccec6ee507f7cd49a464e40fe71622befc2f4e4d430
SHA512	8a42553ca3a23227a66501f0d9949147460d6946b853b42a361af1e8a1c0e8931bdc42ac62181989f112b4a058fa8ddf63efdc871954f9248896827af7f547ed

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00023.vdf

MD5	06caf82e3ec48cb8cf8a37b1e4dc1edf
SHA1	42a8c711f89ed93c219c1f32c54d581cf533f141
SHA256	1b7731b5e1313e6eafe74d790e5a59f9854b0cba685d82148c6e551dcf6bcd05
SHA512	497cf0fd4e767d349e44e0f159235f6afba9e457eb21b0ba0f69ac07723290aa1b5cd37a9f62df3f81069cdff1c96d12c5dece2af7006a146ce78f23f3726f67

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00022.vdf

MD5	ba74ff88a65eba0395649dcab1124191
SHA1	3867a0365d4d11d9908591a502d8810cfeb722ff
SHA256	eec4d3255a58a0c935efe3b21d741060a04eae2d7208df9fe672b45d28e07521
SHA512	073e5203d65cec35e673b3ca9cf9180a7123be031fdecbd97065b1bed4ec912c2518860f8d2157c4f558337e3dd07e95407fa0c86b7881db37bb69c9ec51faa2

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00019.vdf

MD5	b13c183fac8761066ca7420a4d290800
SHA1	d261b3eb65d11f6667a4c3f0a084f4134dea2057
SHA256	ff3169d60967f2c0cefbe7db9db97d557073775e598245e9d71b98817444b232
SHA512	6efbb48696e2bae4d0794297402d2786cd6b5fd61b2440232500c40058c505c4414558e62805c32a550d9f4befbf5a7bc7b572afedd27369a924910fbe2c2113

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00015.vdf

MD5	20491a4c576e549d8aeb9717795e33ef
SHA1	45744c205e4495588e2c3aa892c42980a4c12a65
SHA256	b81533ea6ca6b648589f9e6014d6f3a15b451b589b136f2130332492f5e6aff8
SHA512	06456a035a51e9c41147670b5f35605a1670dd1709c00e21605c78a1219f2f5fb2e20b2c364aaf8813c6319064c38f4fd074c0f52af07dafe12248311f6781f6

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00010.vdf

MD5	b183d2a8785edc08ec2f67e454baa753
SHA1	fac3a3cb9a106de92c7dbdf07bf75c0b9f572312
SHA256	65292d2ad4c525ed779a29462194e398550398b9cfa71bfbe3faf276573948cd
SHA512	20b33215f4fd9c172218918d38aca33a99bda6b9a4fa8926e8c1c499c51f8b4e183d31a5ffb66c080b14e129f104f812dffb8cea1af6f14d3c0be6dbae2c0bdc

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00009.vdf

MD5	bc735ecc78808f35bb4c24b121f9aa1a
SHA1	2c027d39b280f8ce23a39a291353a79cc1d832d8
SHA256	4f4deb6a8cbac07dcee48ddd41fae3ec3bf2218cc87a8798467fe76dc26b3844
SHA512	f2403e8e84bb832d6c5904d9a4a94a258b69c3aebf308b2bd340347d4eeec79277304f92cb42425e7c72609fda82b3f1d7cbb2de789340127d16fe0005ade3ad

C:\Program Files (x86)\TotalAV\SAVAPI\xbv00008.vdf

MD5	bfa60ec8cd2aabcebaf6eb4c4152c07d
SHA1	964b93fc3498984b567718014818c7ad12482361
SHA256	1f1c660e7ae5e25dcc98a0564c0f5a54576f0404eb84d616e744419b653361b0
SHA512	8ccd10aeec3362e0664b67a2d6bcd168193b84a0adf52153e89bc434e0b7b917f4dacf7fe99c6746b2939e903f989b16a081ad3e4b2865bfc40aec45c851be5e

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000c6

MD5	a6fc0e89b7ad808e9fe0d1c01d89a887
SHA1	ddc5de84f804d34f3fbf2d72e89be24a62700e2e
SHA256	c28c4065de6b63b84d30472b9db90ef7772f2880dfe505be05ec75eab295b261
SHA512	a76a3745b2e5d0e8befb127fee74716c064fccd32deaec9d2799f89e6ffb57af575197e9c615946ea2ae5473c5e9acf759d20a9f079be8dcfc1ffce3106f2ac3

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\idx\savapi4lib-win32-en.info

MD5	70ce5f7348f8d6854b7ac079ae4e98a8
SHA1	7c1fe5e14a3485d55d6dcc53525abfa403af1aee
SHA256	68e5befc342de89f302a96692ee9be3fd6348748da0ac13c5a7e7b77e3432b15
SHA512	c68ce9e4c37ec52b7c004283d8c0a091faddfc407a0317895f2291c347d9ab4f96ec80ed7c1e91863c9254a4c21f0c995f71d82e70e248b73932263b9a3267db

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\idx\xvdf.info

MD5	176e8a5e0a2961b857801895257dcdb5
SHA1	eb1625f2d00c428a03b4d1e5eb28c80567094602
SHA256	e595ce35236ec6600c105d6deffcdf52dc52db88a1366dfce571b1e2300d4ac9
SHA512	3b919a6e4c83e3999457da35338ffb9371c6434a3dc5f5c1334c0e457f5db377baa54c4794075352b5e7ed84dc175ac55c48ef6974ae5d8ca1cd73107d486fca

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\idx\savapi4-ave2-win32-en.info

MD5	537402764dd7caf6f3dc7bdff8f5a675
SHA1	dc63bfcaa7ed0614007cd262a0989fab4ff00e77
SHA256	e1ebff17c7f9511486919b375a09633063fb04f2115e7153b1e684df4d665cfe
SHA512	b30f1669f750f4989e8f5f706a2842b24c86f788f1e65ee5a23fe15914a5582e0e440d5323ac0fef112202c3e38a43785546c7183fbb1d1b948c94610b5ba7c5

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	55bf9e814a1146fd9beedcc7f9569208
SHA1	9edf40b7c31ea67a51b63e82fa70667d67176392
SHA256	f2b46ca74a8f64011cb7c9e9a6f3be5cce53ddabe9728e70402c8076be50cfe5
SHA512	e71d7f757825e418443a868432b62d2ae2dcf714c1248e9ebc0b3375c7869c16dc52d1be41a8267a34b1761e6d4c5f8c1848437958b6e89538b5b59a8a9ecd4b

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5	220ae9dd2332bac30cf568ff1abde994
SHA1	7fbdb274f58bde814d502bc2b5bf7b2ee583cf18
SHA256	efdeb289f0d597562f7859431d6d2e197c03d181e4d15d1f926f2488ae06f27c
SHA512	75f349ab063a290014e9bb5ebdc354935c59584169cb30be2fafdb5557a461805388776bfa3f095e7d00ecd688bf004c80f04f7dd5b9b9473c3e8053bf0eba30

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	2992b87cbd151e73095bb3ac1bff6174
SHA1	bec5dff2e8dcbd17e29f11568316f8fe40433515
SHA256	3b2154259bff2c73dd98a31a9756313e17a5930c25ee5fefab6e23bfb98816e9
SHA512	14f35fc87790e0173dd11fc956507b62ee8b4d4c6cd6113befaec95bd6d647e4ef2c1de88dfbc60954975ad415294a1ec80e42077a42ee5378814fa889a9ebe7

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000092

MD5	05e9679509b61424a07cc4d4efb7247f
SHA1	db4fcfac1d89c7e4f0bdbea9023034b64a9dbd81
SHA256	31798b2630a882be758010dfa51b12026c8fd81f0e4068b38fd739cac78cba0b
SHA512	1cbe7343e19b41f3f116a93d598d7b67779d29c6bc0a7b086d112dfcc76fee60811290b67b5d2561751700be483f6cd460b9b4c8325397813314ba064e4c2208

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000db

MD5	3470dad8219537a4b4d9f1ff73436893
SHA1	fc5ba88ce9719ad6ba6febbaab971801cd625933
SHA256	1f5cc5c2211c48f57acf7d4113a487fbbd74a423303102821c913139d7ff782a
SHA512	2cf931cf203650781ca27051cf58b61a26700cb492086ce04a8680a49126b63276c77241d5d3f31a8a948edf56e0accec57c78e620200d310af48fa076d33c94

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	b673b7cfa21d408144c9c83153c4b083
SHA1	e919a4eb21cafc68f7e91c58e2c6c30bcf88690e
SHA256	e4f9035b9f5830201bb8b9f7d1acd5157ffabc747e1e4ec3c32188d0964b2b8e
SHA512	176f1d3a0774c1b6ff2199ea9e63e689dcfdcec596fbdb8d2768d0d0d0ef2bfad489841be7a2d52a540df4ba2db70c693ac707748cf80d76e5fcc129e89e1216

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	66c59d88df0cb89b9117c556be487ac0
SHA1	4b03d2821acf298af712ea9ef6a70be1489b5e8f
SHA256	41dd3807bb1c2f8e5b9523b45e37c4e51ced936074e6e84ab9e9b071cbfd8c36
SHA512	2d72218972c9e017d4daf03da2e8fa907ba46c712d7aa610f40124eda7b2e52eef02344b6ce53fa33fba342aa4cd394afcc0991c401a2375b4dc9bd0abe8b25d

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aebb.dll

MD5	9b5e263884afcb8ec8da9efd26e85cf2
SHA1	a19a19758f8827782be36ad7e302b1844a4546eb
SHA256	7c5e9a7258d3148d599655146e1bb568f374039df5614c6b88829e28b0d37e83
SHA512	8567ece331a27ee7ef71113b2ca990acd243a866e76964ddfa8537b57828a7a8745e8c660d62cafc26409b5994a343a2d3f9d3cbed76eaa525a3338d23a107f8

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aecore.dll

MD5	c1b4cc7ef91cd05e43afa6be3c8a8072
SHA1	b941867bb270f69c63d7d2f3184dbc11a281bac4
SHA256	3434ba621c3c555eb1e5720d3a92044add10eeda647836e20326267c8a5ef7fd
SHA512	e9e25c00c7ab285778061afb48b4fe2372612605fdcb938c94fa7c38fe05cbb65d8b8f12e63a4c2a1643d87d14b42143ac052bdf7e2f5db6ce2a3bb5a12aba0c

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aehelp.dll

MD5	c14a2ef53263857daed0310e1635aebd
SHA1	c8e9f13802e82f2ea95e0591afd3cb5aa5245188
SHA256	908143689cd10f678284de67268c061d26a00bf0a96fe173dcfaafd86697d5d0
SHA512	910542dcf67976946d8b0f2ec7cb948fa50fe014e9c439a37adbeb162f7f98645d546c3d32b2624e3d97ca971fb9d854f652bf2f8842b1e6b5337517c1a3e72b

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aegen.dll

MD5	4e2848e2b6e89eef9c4bf9920e9493fa
SHA1	7aef4d2502ecd2f366b6b15d6ab249bc35ef393c
SHA256	b28405034113d2e62b688c29212234ac0ef46495d57041c76fb401ad0701aa87
SHA512	96401b3ef6d9398f760c655b6cbd89b1f9876e89eb9b4a3bc1d88575d971fddcd9a62e3ae57d523fa97835a71aa4d5a676f2b38b550f12392eac6fbe08f832fc

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aeemu.dll

MD5	8a0bc0c1754cc9520d753f66ecf9952a
SHA1	db6b825d40f2eb4d509d28ed34ec7557bcf65506
SHA256	23f6737d73370bc3915819e173ee2c0bf939d648aa172a83a238a38a9ebec465
SHA512	0ff477cff772cb5580d4a7fb6459d5de6ed6aef644c497f4e81e2cff72e6d32f55262ab02a7cbf7ba31b60b94b15f233972fa8b540f6bbdf41240acaa1dc3cad

C:\Program Files (x86)\TotalAV\SAVAPI\aeelf_gwf.dat

MD5	f2963451174e53a12fc09fa42482e2c4
SHA1	2b24d1a721420413476897f73a530cd0dd0adc18
SHA256	2e07fec266393ddb6ed716938e9459a7719da7b4e3e38c7248c8d978f0b454e1
SHA512	fe36b6f69cf50988d0224ccd2220bc3f844148f6c5cb0e33099c3ddbe765a066a51c5a4dc608141573ee22603525dfe89a6d6202cf0a56f943a958b93dfe9928

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aeelf.dll

MD5	6afe0e5e47418098eb5904fb00c2a6b8
SHA1	e4b0375acc135ec74b75cf9612e3fabcad098d2e
SHA256	1de560e945cb08cbfe64a627e2f3bcc0880679aeabb2a691265b72516c67f7e5
SHA512	beef2bf94ef6e4d1f01b8e414f5a49ff4264cd9234cbea66a8186a3a23455dcee89c647e3df653fd1066c5f0c5a1fcd59b44d729298cfd47d85a4727b594ce60

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aeheur.dll

MD5	c6bb57f7685b6e827741ec86a8fbe7c0
SHA1	cbc2a40ec1a72bea60ca8fc2e192736904c05725
SHA256	cc06ad9c69b36a631e8a77a5954296d0b352149f350137007f6be2e56b60ac61
SHA512	72330566fd70bcc603cbcb4373a7bb2f8128bf7e747aae9eb0cf53942738e3f5819ebec147bdd2e9ab365bb0cc9d6556b4c9bdd55a48a601de2dee70a568d09b

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aeoffice.dll

MD5	91e019021cb6b30402d97c82af3d22e1
SHA1	3d964c78f9b0b3af5f03186f57b5c619d3da86e8
SHA256	6f72af791b103cd0c90a78bc34b4912ee82ed0cf60ee6466e024918914592422
SHA512	82fe8663a234ac7d0b596adafd0843e866ee55d7f0a93c3c7e7abd9782e0330a4e49087fbe73d82598dcea76f3af26dc1950db962f5c86e046a99ab8824aea74

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aepack.dll

MD5	e8cce3b8e48b0b3fe93782d00567bf00
SHA1	e42db28f4347fe7abad1d72fe5aa70689612dbd8
SHA256	10ec374f810572d4f52ffe800a77ebe6aa8f5efc3d8b6f86dff000e9be1dce55
SHA512	65e2cb95ecc443dbae5ccf99027b9b1b7e7e654e1115aa12c9518c905273e903ae2ab0997d7f9957e39eab8f808bb975ab5611749487758a1720fb38ce81cee8

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aecrypto.dll

MD5	ed7b2daad65db7bb7ca87a32da877c9d
SHA1	80f4a4568ac2c9d55db856cbea81f199fee0c210
SHA256	47747e2642524b38660e591f2da8574ee5fff20bbf5216f89273bb896d76daa7
SHA512	e878f4a1d6b16b2d950770d9a9452186c093d9ffe9d27f85bb090365ab21e0819e7401efa207209fc3e91d93b8723de56d45a48751b0e3e1ec6fa8a5da4f0963

C:\Program Files (x86)\TotalAV\SAVAPI\aeset.dat

MD5	ce2dbc2d4a9e94a1ba01609a983a8203
SHA1	091a6725fe575a8f58e82446ceeeee194afe5bc8
SHA256	a1483256c4ff2fbc2795c430436b9d11187fc43ce91c11a016dabee59ef07bc5
SHA512	f30c2345322b9ac219da2b4d722463fd0f862413a36579566c3bfbe59ed8adac847c377e117b363aaa57016d51b3817cdd483af023cdf7d8607c05b6a48e0a89

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_mv.dat

MD5	d53f9f3a2666094bc512a479232a73e0
SHA1	1e88cc457f7a9ccdd7dcde4dacb3a66a2dec141c
SHA256	5e832c5e3c0ba773a58b1420e9a364ce8d5f93f3ad9ff5e9f26a31c6d6e384e7
SHA512	06ec13f4d74824483829f7e0b10d0aa91c4f836fe70e3fa0c49d9c8102a58e4db3134f95c6a3a13cc889750b4f6cc70e7573cfe18127290cecdb2b26aeeab25a

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aemobile.dll

MD5	1caf0acfff2958f732affedec8327620
SHA1	d2b1b8247d51741f1f6eca67210668158460471b
SHA256	e0624f9e32350e95372bba2005fa4fdb4fed8b94065e66caa0ff77681ff399d3
SHA512	33ab1a0cd3bf04926d0e310dd6611c26c089cee256de5b6870399e5e531ed8f814ea3c48c0d4f7c7840ab974ffd27fdc7c1af3c788c265b766dc4de82b8c31eb

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice_mv.dat

MD5	8393044228688728783aa2107fb6b5a0
SHA1	4b24c737712c20a2e588e03c2a9b05992b30481d
SHA256	7658c0cfc1234bf8f8f6d7020b2e7b7d29f8f215618d72189aa048140a4c9106
SHA512	c16f819526cec7927a0bee6fe47a55b5eb7cc7d2ddc069b81a40e57494f1d7068c00306e8e2ee1e162ae8382fb460afbcf02dcbfb870ceba5c93ac0014224990

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_agen.dat

MD5	e59cc357271a554c34970ae2e3589ab0
SHA1	4b6ed37a7a38f82b3b6129a8ab075a59447cbfc9
SHA256	6741eb33b4803260b6f13178a463d461483bb1f0d2b379b2824b29c72b081c95
SHA512	2fda551cc9f94ffc5359898a8228e08709490c25d64a455a92956a4c68258c892b48954687f9458e5b6b0313013b4add93e8b4639495b90dbb501e408c0b3e83

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aeml.dll

MD5	c292c586817f21ff2f451e70211a4618
SHA1	782f3c89b70080466159584af76314a6ef1be5ba
SHA256	2994e3e49eed991e0c455ff32af9feca93cef64d9c740008e8231a080db05b6a
SHA512	705a3fd58e0685c44a1d3c8d50bfce3c6c86b93bcaed94649e2402884205375219f8a5c1ad4bbbad351b4a414521c2bb25fcc5adf36b7f5ae88034e16389a0a8

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aelibinf.dll

MD5	3ea8b0a26cf146e50badfda0ae09b599
SHA1	558582b9b7792a161a29d9d0123a9227747a27c0
SHA256	b1c1a029e2e1d27ad1589f1e657754c00845ed288fe871629d5f11f01a4c9ec8
SHA512	c498ffd42e258f19c8ad41390fbea840a6bc660e4826de04405fc24577202c491e01a266d661f03783008837b12012fd94b8dc9fc4bad6d2486d5f8a2b9fd257

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aedroid.dll

MD5	3408f0386b67d743773e6311a6331030
SHA1	d221c2679e5eab060c6e52c6ccfaab2d9cadd6e0
SHA256	b72f8ca6f3f3dea06710675c8e6f6dadfe992fefe3a3e2012153fb6aaf685b37
SHA512	53744cd721a9fc6d3ac56a0b651a03a916e1ec8f58d46e92041d90930c7e56ccf12e3fafc5cc26d13b9cd5e431b20e0d9ec1dd85211edce2512b9d9edca7ae3b

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aeexp.dll

MD5	734ce0ca21a11e475b1f789f9f83ae07
SHA1	d694f08c96eb66deb1e435d00413dcd94d44feda
SHA256	63ec9f03ad878f47bcd0a7d2ac3bc7a0221546f067c25ed5a37b0e6d7bdd4a54
SHA512	9a9a98ae5e57304d60a71be364aa08cd8590dbf75729dbda0338708764e48249634848daff64ff530646fbf1dcdf23400f379b9740d491a15bc0061469044ecb

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aesbx.dll

MD5	5588223f927fcad2450efeb0f30b6c32
SHA1	6d7dfd44cbdcbec7dd6f9f7d5b2a182ba71ed437
SHA256	fdf11e6765b3bf134a31163c4403b0354ffae9216671f35257c2a6f0637dd1c4
SHA512	5e031ad0a3bfb8bae37e479b400ecb4c1186b313e7b754c284e9698d4f61427db17a3986404b275f97f82c54807418c87f658c503b8c0859d2c4030db4a819d4

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aevdf.dll

MD5	a5449dd7b470825331731b16bbbeb9f4
SHA1	4e593e77b2bc9594aab81191188b6b6050496c49
SHA256	5b4a04b1596506c5cfd1fb675bd9dca887c41b119525ff6ca7b628c6176e5ed0
SHA512	d55f0d66c7deaa6a0f17036d364aff42ba816cd495a079bdf98346847a710181f210a430ea710ee7a7538ccab0795fa8ce6ffcd67825d3a877a584b255cc1d22

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aescript.dll

MD5	5658fc46d2eeb6531b1636b01e327465
SHA1	6e04c2227b9f898fdd7540cbc65f09c1eada4d34
SHA256	85aa346d6b122dcc40b8d2305be2d07e843ca80fae3e6b6061ae58885da5cc7e
SHA512	6eade1851169b63be27052143b486bb26540b5e08a23106a5576c5d77858964db595f49bd810eb97993e54fbcf29d023b9909fd54ab13d05198658bf9e7e3b2a

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aescn.dll

MD5	b9408cb0605437b47bc47074988215af
SHA1	d756499266c3a4ba812f39bcd3d5135c83ddb728
SHA256	72f4ce9a6145c29906005aad509e6e1a5a2b24c86e7c13595bbec2969fc0ccd1
SHA512	fec35431583db738112ead06fc5841d4ea833db24720d7875c41d53261c9cb5ce7a14b8f32b99958d08916286d0d6a8e7615a8cab4775539c058247a85844f91

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_HVRK3w\savapi4-ave2\win32\en\aerdl.dll

MD5	3ceaf9a7ef16e39d5087445509994be9
SHA1	a731181fa1f0b22be041a68ff5f427977b030828
SHA256	1807742d7dd2cd1f8c8b6ac027dee79393f6f81fbae3a679f504656757c6055c
SHA512	69009d806906f207f7ca996093e528bf388bb038f3305561723b0a67595629ae9e539d22e2a43715647a47541c7bde94fe3235ecede8439e72cf36c39d8b4516

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	5ffd3c8e11ebaa5003669561ff9af10f
SHA1	d898aae42db69e27fc944c95c520d8a325c19d37
SHA256	edb991cb944ad74e529e79b9d0680d2da02b8453faf70c73fc58dd6524ff9bd7
SHA512	e2124a5c434c231f69e710820061b183e226029fb52727cfe8d593df00f92b13e87a00f98eb32e5568bbf25ead9fed5d69ec36bd64f2fc96dd3950aa0bc24488

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	79baab0fc28a2d438f826f8edb3d8134
SHA1	277129d5ddf65575ad6a08aaa08ea99ea3f51c10
SHA256	6c57dc2dc17e3a0d51a67e3c54f9c192fa9bfeda8cb0b25c918b0bda8faa6b05
SHA512	c75da2b5fc792e07e0b322636afbd09ae0120ffb2415bfa370be7202b4ea89a0dafc601a73601d798f66aecf6215afe332ea0859700b2276cb65bd7b8ec384c0

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	9fc696a0b472bb1a257c9eecfb3f6e20
SHA1	77ce41bfe51ec41b9bfd427d863423b66cd9ce33
SHA256	e3548460a5cfd66cde62972cf43f61050d318c4c72e23a5fda2a2bff04c3cbbe
SHA512	513947683697446cbfbd8c24bfb7636600b3b65947d9cb4919a2027b0494cad6456091ed28d66ad048cd3cf92e68add36cb7f11dbf43935cbe541732769b0607

C:\ProgramData\TotalAV\updates\remediation\extract\blacklist\blacklistkey.pub

MD5	d15e8c55d0a8a9ac8166c908f2634590
SHA1	0e3bf8d60f1528d492192798435bcc8197026bcd
SHA256	e6dd891f31503c90d204e1534b5979743ba02d0bbc161ddefa88a3c1a9e1a994
SHA512	70a4e16e7fc17530b0455097a1b9f809ac53d0521ae43360239b983028b4f34387f0ad85448206d768f27f9a118ef717c0c1c0bb0e2d9135bc45e87dd1a6d2d1

C:\ProgramData\TotalAV\updates\remediation\extract\blacklist\blacklist.json

MD5	fae21c42f689dc3e8303d032d6ddd990
SHA1	299ba4423b50bf6fee2106fd27f629c41efc59ad
SHA256	d700d1fa3edf495cd89e9a6d8121e3878830015d0595e61e96e771c84b9fbdf2
SHA512	b05c6abee83f103ab4d89125dc24bccfae943c75a4a1d8cfcd122aa73d0d27dde93edf5fdfe073e636659e4e69204d7079ce6f99504c659ec759c7d5f3f0597f

C:\ProgramData\TotalAV\updates\remediation\extract\remediation-sdk\win32\remediation-sdk_key.pub

MD5	5e3dfe19e73d2b04a25d786b35d936d9
SHA1	a1bfae6c7d80ba6809a401d6540434b96c615514
SHA256	8d3cce758deebaa59c5149037c00e610042c416f790cd6df5c2b8a6021c783f0
SHA512	3105435cd100538b5a0d2f81e00ae5d788d4fb3e45d5529a83f89708565bd483fcd49a936ae9a22daad485dd0675aef39cc1f50512379bb52eed81e37044a3c0

C:\ProgramData\TotalAV\updates\remediation\extract\remediation-sdk\win32\remediation-sdk_file.list

MD5	7ad296cd1cf59210c3472601037ec567
SHA1	7e32aa6547fe3f49d5a6ef05c246dd0b6d1470fa
SHA256	d95dfaece7ac7fa66610740a8ac4fafd143dabf6f7f19ed0e98c570f35541f87
SHA512	9b84d600080feb5676c0f02459b8027f1a16d2dd4d17a82d389602e841692b34df3a143799be152178c41a4dd0d00c9ce15cc19a47480751f3563b3baa799c57

C:\Program Files (x86)\TotalAV\x86\remediation.dll

MD5	7fbc3393e04a57b44d122f090138bc95
SHA1	284b50932cf06d99d2d7cbcda376349c2d02ab07
SHA256	b37902b59249304f743675e52034583d0267fc62a25864bff326f736a461e91b
SHA512	ba216c200ecdd10aed13365d41b6f4e1db506ee1f4454da24f517d94551196b8ecc626ca8861a8ef7d48b33c7c73727c7554aa5162fd6d684f1a448677eade87

C:\Program Files (x86)\TotalAV\x86\remediation.rdf

MD5	82bf5fcd0112081de8f7a60dcf17936b
SHA1	43096a1771c73309d20e83de51888a2cedb89131
SHA256	cd69d3e8dc28ed68759405fcb9dad37bb9162cd45173546a3409dc69ea63fae7
SHA512	af08215c272a26295f4bdf2d973fd867c20cf2d702a63d989634043c33ac0f950a1fc1f64fe61a0b9cc29aa0103ffca9f5436e125ae986602939763e805ea8dc

C:\Program Files (x86)\TotalAV\SAVAPI\tmp\avupdate_tmp_5wV8NC\idx\master.idx

MD5	acb31fced09d2c7b78fd9bcb9d88bf4a
SHA1	bd86971edf1305d0ec7069cc25464f024a2d929f
SHA256	05a8337572ea99890dcd413f773bfcf986a99a0c5bd6e1ee431e6aee2fe2eb09
SHA512	6c41913e64e3fba636c9c50e6a7ccb723a3cbe924d9d92620298a53f250bff572549d6e5197a2274399a467acc2ec130b7964e570c1932673aaf4cf8809c8109

C:\ProgramData\TotalAV\updates\remediation\extract\remediation-sdk\win32\decision_file.list

MD5	22d661223845d1a9569179448fc4e42d
SHA1	b40598b320556d0550bf516122e68f4c6b3e2d15
SHA256	bc3fc7d935e38b193cdf62b61787efe28c80088f493a8d5ef601669c72e47b42
SHA512	1ffe352b7c9c8b28ce96f09dfd0096d2828f1f4bc9d438f0eff22c2d7de8a8d32fb42bed035822433cda67e4356dd1ce3101a57f4fa8f6f70bc990b46bca60e0

C:\ProgramData\TotalAV\updates\remediation\download\remediation-sdk\win32\decision_key.pub.zst

MD5	756400342292cc61ea4de9f7fe79566c
SHA1	291d8af074415fee717dbd67af3a15f2ad341445
SHA256	abc99d629b37faf21441b1cecd172881176e56523fe61b032ffdeba01bb0db91
SHA512	515dc2e542a014ee6f532821acd6df7aa5d38297d104be59df6ff2df670dc10a3701b9e3dd8313b70fc1e2bc2edf0992bde93e2c896af44a2bdf86917d25389b

C:\ProgramData\TotalAV\updates\remediation\extract\remediation-sdk\win32\1.0.2405.1327-1.0.2405.1327-100\decision.lua

MD5	ffc98fa98b5ce53749000f49ec360b95
SHA1	2920a3b15d84bc264f074d9e5b70e69f8537f157
SHA256	e8f706991d1125b232f33a62ff49fd02eb70ab7d1c749217c9c1ae5de6426adf
SHA512	2130d8813bed7e53007473bcfd9a6870a934a7867aaff65365b8c9451f11ef7a9ba8387d8024ce12090629a21dffd8d7f985cfb97b212cfda0a9ed87afadec04

C:\ProgramData\TotalAV\updates\remediation\extract\remediation-sdk\win32\1.0.2405.1327-1.0.2405.1327-100\decision.json

MD5	b10df40c9576cc5c11761504264e58b8
SHA1	1d1494697c7c744d254737f6b6559bb62a0b2f1d
SHA256	deb3ec2c1dc1f73363ff88ae9592904e1ea79b2dec000dba05399611d0d6662a
SHA512	7eea4d9a146017b64ccfe42ce7f6ecc0f93dd358018f5e6c1549ea220ec20a71511126fc21c7f58be60cc7bdb032c91b0173064659b9cb189fb0e7d7eb381259

C:\Users\Admin\AppData\Local\Temp\Setup\ds.dll

MD5	7d5d3e2fcfa5ff53f5ae075ed4327b18
SHA1	3905104d8f7ba88b3b34f4997f3948b3183953f6
SHA256	e1fb95609f2757ce74cb531a5cf59674e411ea0a262b758371d7236c191910c4
SHA512	e67683331bb32ea4b2c38405be7f516db6935f883a1e4ae02a1700f5f36462c31b593e07c6fe06d8c0cb1c20c9f40a507c9eae245667c89f989e32765a89f589

memory/9300-9247-0x000000006E4A0000-0x000000006E4B4000-memory.dmp

memory/9300-9246-0x0000000005490000-0x00000000054A4000-memory.dmp

memory/9300-9248-0x0000000008450000-0x00000000089F6000-memory.dmp

memory/9300-9249-0x0000000007F40000-0x0000000007FD2000-memory.dmp

memory/9300-9286-0x00000000093B0000-0x00000000093F4000-memory.dmp

memory/9300-9289-0x00000000094A0000-0x000000000953C000-memory.dmp

memory/9300-9291-0x0000000009540000-0x00000000095A6000-memory.dmp

memory/9300-9309-0x0000000009AE0000-0x000000000A00C000-memory.dmp

C:\Program Files (x86)\TotalAV\SAVAPI\HBEDV.KEY

MD5	0b23e8997d9f7981a6303cfc6aa3baa5
SHA1	2f8eaf90e1d655900b950fc7da3556d6f7bab0b9
SHA256	3f5c7a442038cdf2d65b47b238b377a0e562ab13b78aa343815478522ce98789
SHA512	4843c16907addb511e4cdeccfdbee3d6492459fb53122e6ad5a2470d2ff15793148d97d7cac4ae2a8b56e3eed7b4f39e862d5feded0460784c3f349fa67e534e

C:\Program Files (x86)\TotalAV\SAVAPI\winrem.lkey

MD5	10365cc954a14061f175a891947c0a05
SHA1	10e57e220ffb32dd944ef4f3dbc6b58c7cec6bcf
SHA256	c04723867ded6ae5fb8bce73b78a75f26b0d8a4bca0c66aa7a88edbd805b3b40
SHA512	15135235c23cac7480823e1517c9dc91b9e832f5b583e5d4e3c606d99448a87dd341c0ffdf11d3ebde39403767d1e2a485acc2c301026b58e5303b59da75d9a8

memory/9300-10599-0x0000000009A00000-0x0000000009A0A000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Module Info Cache

MD5	6051cbbc08a083d164b4b888aee2a361
SHA1	e4d10d4d2b538757368b6e0d7afa0a402c5c089a
SHA256	682493d47b66124d16357e84e58370d648d0690b89f4e8e28988f6c05eb904b3
SHA512	1c793735bf346a123463a3efa699139fa0f6b208417e9bad4b909601ccefd7600df9c7507c004e6078f4a912da314307d6ff44f8c9e1225285f01d84fa429ebe

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old

MD5	41950b6492acf1fcb25f91a85b8b0d1e
SHA1	ca7a33af9a670821f8c366961db7fbe03fa44063
SHA256	4d3a1ad46de24ade431a153ab6f8c2e538a37decd8c39f8b166b317b093dd681
SHA512	1a22affec86e249b20f1fa3f0c97b017c89036ef7ddd2f8749eac2dd4e410b192a6990c16783a63efb54499dcd0d9e135e36dc4b3dfc7853bf75385824df5fc9

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old~RFe61e6b6.TMP

MD5	43b795c1b0949f8f242b02c3a5b44416
SHA1	5fc6ed911460ff15734192e585bdeb2bb3b02197
SHA256	ed1d1334cbddf6bd00faa561365007fbbaa4b93ca689a3e5a879e23158820438
SHA512	191c13e04ea43a6b6c8b8039259d38689eecd3f091cbad73d3cfe478c3ea4e95c47025d7ca6851523fee5bd3ade60be121cf97032cf44f9dad31cb85d9a71fd1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	13cfb5b2980d12645d38deddc6887fa4
SHA1	8b5375f1067932b3a8658fbb6ea912dbb85bfd7f
SHA256	7592a45bea42936a8c8bdf33590e9ff50a636c2e67e36520309d086ee466830b
SHA512	90d7e8cf20193f6940daba5b6e3c7670cac93db28beeb0fefc41467e3f3a5302211c4bc1338cd0efdd3bd062af45c2f0adac4f471eb3b4b077eeb2b11d8c9b73

C:\ProgramData\TotalAV\updates\remediation\download\remediation-sdk\win32\decision_file.list.zst

MD5	ab5ba58dd0fcfe107bb9ee81986db903
SHA1	b014b5d22140e81f6216f1dda877e68733d3ab54
SHA256	35858915a23533f1eb4af51587ec3c9f4de67f951357ea945e28400c4f07ec07
SHA512	b5ee7ce1715e980728616e6b508f89b7b944814958682486816af6254ed0cdeb17f21b21caee12e09838977a25a340b160a918257af9bcd0a0266e6a4e0d8871

C:\ProgramData\TotalAV\updates\remediation\download\remediation-sdk\win32\1.0.2405.1327-1.0.2405.1327-100\decision.lua.zst

MD5	d710b43aef71beb12d236bb3babf31b9
SHA1	423fe435c1877645469118579f305944bd67cc09
SHA256	04c682ef7c72c8aae07c358f5b57644e0da873da43d0c12b687e2cc898791e65
SHA512	b46bdf5ab0ea2a49a17daf7d2f146a56ffd9b980ae450fdeb3f54dc15cf93f1b4d957ca69847f5237b8dfd016355fbdc681ed8a31ed67241ce36b3bc269a6792

C:\ProgramData\TotalAV\updates\remediation\download\remediation-sdk\win32\1.0.2405.1327-1.0.2405.1327-100\decision.json.zst

MD5	667b486544a28520984890511dc30795
SHA1	9f9bd698543aa15168b8187a450580441ed99310
SHA256	2ab954da715d2f377b60ec5c76d36c3248241851747652408d13b840f379bbfa
SHA512	accb6dd8523583ccc799ae580b71ce129be337f3c161c643e41fe94f87a9bfecef8a4630e53b8e233e36deafad3b5c25dff72ece4a129add8192e018247c5212

C:\ProgramData\TotalAV\updates\remediation\download\remediation-sdk\win32\remediation-sdk_file.list.zst

MD5	6f974bca396111938dd47f80a4b2cfe6
SHA1	2c1d8c4980010ce620f8ef12bfc2f2cfcad7baf7
SHA256	81d284b13ae9584af7535b5dc72ce1b9b33e3bc3a0712e64d3e90e0f7e4fe31c
SHA512	3ef98bc8b38c49941da524e6fe1409227d0934cd24ef74b796ac2a1f1b2f6a955950b77ba295aca08f6ed2e2c501f5c11e45b229fce20d014e4a081fa2ce2996

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	b4e887a00755d8d4e3301574f7d0c69c
SHA1	379ce2a1457715febe53888dc622b6f720696613
SHA256	1deb0aaffa8c53a9cef653db50e71d7d3817d1d798d0ab8b9d4f817f59e9b795
SHA512	293b898c8dea1f74ccb5f815651da88b65fb5da0fc22e4bcc54a93d47af312922ec543b8c89d875974b6c354d75350d837d05b05e667105a23e69864add2addf

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	67da61f4419efa7527f7a3e97f3218ff
SHA1	f31b9090782e6cbac6412961ce5e4f30e2424f62
SHA256	6b82419e6758d2950f0ffdb625af53582fa3d5039e323b3eca57e79f91f92861
SHA512	2ed1913c99225f9f052109e76ceac852ee97a9edde9a9af7c48dab4f3e63b16750591b876fec70d0cd6809904841f23c3d5ca7db085585edac67843d25941b4d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	08303217cfb975a4a5e6b6bcbe801a2a
SHA1	183d31bd0392d66d84e8b0e45a48cbaaa5953ddc
SHA256	23a6a58843cb61a8cb2a7ba5da12b003d962dc8b174ec619377fcc804a67d1e3
SHA512	226a7dfff58cb862ec06e6059f65c082049d0f55083d984e071ca6fc1f022cdd0227c8be4a4d61c2f3f054f47585d0a096eca9a79057227f77284110d4b2f022

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	2ce1828cbc4cfb9eadb4a7953da9c92f
SHA1	02f25fb076080ee5d638d8e291f3182241a41e1c
SHA256	6efa4d38fe9131fd238ac52913610230f2eca1befd682ae155afd889c0e11324
SHA512	5cbe99d0ea75238b6e614ae070f144f2b56497126db6f2b8c7441ab2718b88232951dae816db914cb1d08f72875456ff1d29f2f5a97ab9cbe8e2aee7ab511feb

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	30622f0164c6bbce888cc8d543ee5e1e
SHA1	2c8576490b924ad64465229a382c61cd9aeb590a
SHA256	0616b05f66a2c5737c2b3d30f40f35b886749c4fdcdedea0b1e7f1e19bb5af02
SHA512	4537b1d2055c401b70c051c93a1188199d4a8ab1e23f94c3f80cbcae536ffd7c655229a986d42a35cafa959c133c40c4436b0fd8ec25f29ae2aea1a6ad9418cb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5	f39a9c2d19f5b4243157cf6045041b37
SHA1	35f5f008e4ee5c2db6967f6685b064f8eccd373c
SHA256	aa018a26e26da9f344cb666e31cb5f63df246ab0bc76e34c017cc67396a55849
SHA512	98cb54f9e847552a1d102b2bf4f8467f16057841f86e827b5d2e0c2e8ca1cb0e21b0ecbaf9ea01625e44b0fdf1ef1a60281c84995bf67432e97572fa7a9a47cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5	64bdd977a65b01fb16045fa16233d934
SHA1	2ce307f575cfb811a54a1ab87fdae5522d4b12f2
SHA256	96ada9e2b57f49583034c63482c458c549a03049819809549e557f22612d1b09
SHA512	adcacc0610644a0a08d6e2fccfe624523c4d6090173b3e0a31b853595a14fe0a54f3ceb6549ceeb6ddb774ee0085dfc767a5062f98b9c6f5e9e6b412b9067c9f

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000a7

MD5	d562487169bb09f4bb454be4d1a63988
SHA1	068b1c44270f59b3d67457c119cf98310026fd13
SHA256	caeafbbcac1361379f4238e30aa98af71269f5a533fd436682208d675a0ddd3c
SHA512	a85f11664b00e6f677b3b5099746ec823b0c6bccb9821fa3ff75e7cef0d9658ff29d57e1ce9d2c9b3407668d03df84497e5b149cad7468037bd4cd69a07e5cab

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	d4b0ef5118852e23e48fc79923861f4e
SHA1	1a57aaab0cc729656356fb2586ca8dca3a6e0d69
SHA256	50749527a845f90dda4796439e137e072cf23c3aa5f5169b925e0d8eef53b937
SHA512	1dd253c381405a49efe4c81077fa63aa51cffb20abebf65873305e8b743133cfc93e510e441680ed0f826632a3dd5b19676f5f252e63f0b77358510963080455

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5	ac968d1edf1013608b1549e2c38b3e89
SHA1	f91589e4dea16195922c5e2ffc6c5289cd60b51c
SHA256	fccd035ec033a4ecaab9fe0209bfb7574928054e85ea5fb7b185136d29a424be
SHA512	b866b91d70fbcd63517ca3d1ae219317b455a83e584e8f764ec575d9d03497923e8a643e213bd3254f463b0d7240c59c81a057185834684f30435c94c1ddf759

memory/6764-11356-0x000002C74B4C0000-0x000002C74B4C8000-memory.dmp

memory/6764-11361-0x000002C765EB0000-0x000002C7663D8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\fr1ou5y1.exe

MD5	f6ecd375ea6c7216e39b49fe35b6f340
SHA1	fcef445fb1facb10149871d2412fe85a518c846b
SHA256	d10a79f6f7d87395a9cd6b9f8a6ffa4520a27e0462fe66a9449f51b2b5fa3383
SHA512	cd91f467fd66266bb34dc0ae1a21719371fabaa926c88b5aed3a748f087f21d545c839cba8a58c380f1f8fa5d04bf9a6843124fdf8da62418518ca50e1ee21da

memory/7860-11433-0x0000013D07080000-0x0000013D07108000-memory.dmp

memory/7860-11434-0x0000013D07580000-0x0000013D075C0000-memory.dmp

memory/7860-11435-0x0000013D08EB0000-0x0000013D08EE0000-memory.dmp

memory/7860-11436-0x0000013D21790000-0x0000013D217CA000-memory.dmp

memory/7860-11438-0x0000013D08F10000-0x0000013D08F3A000-memory.dmp

memory/7860-11452-0x0000013D21840000-0x0000013D21898000-memory.dmp

C:\Program Files\ReasonLabs\Common\rsSyncSvc.exe

MD5	3068531529196a5f3c9cb369b8a6a37f
SHA1	2c2b725964ca47f4d627cf323613538ca1da94d2
SHA256	688533610facdd062f37ff95b0fd7d75235c76901c543c4f708cfaa1850d6fac
SHA512	7f2d29a46832a9a9634a7f58e2263c9ec74c42cba60ee12b5bb3654ea9cc5ec8ca28b930ba68f238891cb02cf44f3d7ad600bca04b5f6389387233601f7276ef

C:\Users\Admin\AppData\Local\Temp\LDPlayer_files\installer.exe

MD5	58b8915d4281db10762af30eaf315c9e
SHA1	1e8b10818226fa29bfa5cdd8c2595ba080b72a71
SHA256	c19df49f177f0fecf2d406ef7801a8d0e5641cb8a38b7b859cbf118cb5d0684e
SHA512	49247941a77f26ab599f948c66df21b6439e86d08652caa9b52ffbcefd80a8c685d75c8088361c98dde44936e44746c961f1828a5b9909fecd6ce9e7e6d2f794

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	81bc3283ebd2c78c1294d12294c1e977
SHA1	74e18b3adb31679a7034d5483b6927354dd8201e
SHA256	ed263789cd9763c763308ce4e85a9d74ee4944ab31e9c3543e71d02693d2f296
SHA512	eb0d70b6f75e95cb05c0d847c561ae3152db03e4a5df8fb5b39e147df4ec54a37afa8fbcb0400959d77920e7eb603e1af1619aa2ed6e46cc78af910105ec0b93

memory/9708-11635-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11634-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11633-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11632-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11645-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11646-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11647-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11648-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11649-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11650-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11652-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11654-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11653-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11651-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11655-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11665-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11690-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11689-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11691-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11688-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11687-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11686-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11696-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11685-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11684-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11695-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11694-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11693-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11697-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11698-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11699-0x00007FF769D10000-0x00007FF769D20000-memory.dmp

memory/9708-11716-0x00007FF79E2D0000-0x00007FF79E2E0000-memory.dmp

memory/9708-11722-0x00007FF781B20000-0x00007FF781B30000-memory.dmp

memory/9708-11721-0x00007FF77D070000-0x00007FF77D080000-memory.dmp

memory/9708-11762-0x00007FF765A90000-0x00007FF765AA0000-memory.dmp

memory/9708-11719-0x00007FF747340000-0x00007FF747350000-memory.dmp

memory/9708-11707-0x00007FF7A3930000-0x00007FF7A3940000-memory.dmp

memory/9708-11760-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11758-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11757-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11750-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11748-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11729-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11788-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11797-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11809-0x00007FF7A9820000-0x00007FF7A9830000-memory.dmp

memory/9708-11807-0x00007FF7A9820000-0x00007FF7A9830000-memory.dmp

memory/9708-11785-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11784-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11777-0x00007FF7A9820000-0x00007FF7A9830000-memory.dmp

memory/9708-11828-0x00007FF76FC50000-0x00007FF76FC60000-memory.dmp

memory/9708-11926-0x00007FF779050000-0x00007FF779060000-memory.dmp

memory/9708-11952-0x00007FF779050000-0x00007FF779060000-memory.dmp

memory/9708-11894-0x00007FF779050000-0x00007FF779060000-memory.dmp

memory/9708-11892-0x00007FF779050000-0x00007FF779060000-memory.dmp

memory/9708-11879-0x00007FF779050000-0x00007FF779060000-memory.dmp

memory/9708-11876-0x00007FF779050000-0x00007FF779060000-memory.dmp

memory/9708-11870-0x00007FF7897E0000-0x00007FF7897F0000-memory.dmp

memory/9708-11868-0x00007FF779050000-0x00007FF779060000-memory.dmp

memory/9708-11864-0x00007FF779050000-0x00007FF779060000-memory.dmp

memory/9708-11862-0x00007FF779050000-0x00007FF779060000-memory.dmp

memory/9708-11860-0x00007FF779050000-0x00007FF779060000-memory.dmp

memory/9708-11858-0x00007FF7897E0000-0x00007FF7897F0000-memory.dmp

memory/9708-11843-0x00007FF779050000-0x00007FF779060000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	ad88ba034347c1215d081bcbd1efff70
SHA1	36dc6bd6a79bd5ad42ad95cc6e46e5d97b8ac45a
SHA256	46ed1b94d312cb7c1bd57f3ee6f375bc3d4195f3af8e1727dd89b21807514369
SHA512	c0b89e2e8a4947b50b7fc3d48d4af5886a40a399b14061c1f9c245e6f3c0d46bdcf141b023ecbc180147a66ea3e90413b8532c0ba31352d9532e1b9bae74ff2e

C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt

MD5	540cc0a649ca88a3eea8ca97ed8ae5d0
SHA1	5665854fcabe14cd42717acb8782a8b6f22aebb0
SHA256	d8528ed99e02b0317fdbaadce589155a4675e619b7aaf43cf2d2ff518949a3c2
SHA512	6c6c26bab8cbd664599c180d1e33a33a04c52cf7f839268b979b1d078be60c36ce5a5acd795fd2a1f9458334dc26d05c00976c4aadf09e4602aeaa510b3ae759

C:\Program Files\McAfee\WebAdvisor\Analytics\dataConfig.cab

MD5	a7b0dabf4a52b6827c35de1e05111ba6
SHA1	21065f550492165d5290446e433e0f9cdefaeecd
SHA256	b92f20569bcb06eb12a87d278592af03f564281ad9803eb8ee748eed0c4afbf2
SHA512	5c4996df6335d5cf045f09d04ccf2382306ab4ab962dc2ab1889248df00f1470a336724bf137986df7be60e6b5b2417d75e4270b18f3f87fb533a8c1c530ed3d

C:\ProgramData\McAfee\WebAdvisor\TaskManager.dll\log_00200057003F001D0006.txt

MD5	3e05bea07edf6e3187e86d49f8c75b89
SHA1	222590da03b94a6fa0a9fd2faba53b42177cd162
SHA256	5ced106bce97097214dc945feb5351d0d8d5438029642c581175ae141a9d037c
SHA512	58ea0956cc69dd5b99e253fb845b9bffff56ebabe388cbf4f09401f8728b17db0023a7783776f32ea7cdab8a4bc8190a011e3e2f359fd5e3c7de5a2e901e1db5

C:\Users\Admin\AppData\Local\Temp\90a61a68-2c9f-49fc-870f-996657bac72d

MD5	f43f1b65988880decb1a4f87091253fc
SHA1	49da72a899982e5cb3e8388c829bfa0ce6d9a32c
SHA256	f636fb2b0f3fbdbf8a774f51fbe4a21d5884f8d6ad54606e01bef4595dbdebae
SHA512	b2445b1727eaf14527a9cf53ce61559854af6c2fd7efafe3c0b1a43e818b92b5f1f317a7d4d4ebe41757bb1666a247a4b8802b7ca1c0faecbe6d0e3cfe724119

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5	c038bdf6438dc6e9b9c8b65d74fd4936
SHA1	46f9de1f9de4aeeb5ca2af52994fab3e578206e2
SHA256	3cb9690c5b93418b5941202c4cdbd20cdc91eb194a370aa6c5cb4ec3832df7bd
SHA512	95378086b14a2eec0b4ab54b045dc8aaf2522858624579dbb557dddf3b004c52670b5a0d9348a270d97eda7dd682dd3415d9d5848eca0928d887ffcae4d9409b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5	e8d1b06cbcb82c7dff61a856c5eb0222
SHA1	bac4fbadb02ae77fa435677e07dec2fa5a08e9a4
SHA256	f51fb27a9d79edc5e4235433adfff181a4e3b65e02db7e9f6144ff748257a182
SHA512	782b3fe45fe3d3a9b6f0b0eb9cfd5841d4c8c69db695dda23a7c113d447ef40da8e161642f02e70609d96474f96cc34daf588f66b400b8f1a83244c09a148282

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000cf

MD5	34bbb6c6ee724eca8476a6e30a819d12
SHA1	e7bf9db33c7213c1ea2b5e1f7f701e0f9353b328
SHA256	abba17fa9bf1eb8bc139c31ba6c26dbcea9d734c35d8931f056fcc08a01b502f
SHA512	092a2d7a0de2f2df7bdd11abc4daff3eaeda1c204b6b33e53c04e1f07f46e4dd31d0d07bd43151771376f9e5a195e64efb5dd34d3a846d3ef1c450d984746884

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5	f41446b046740688b12bf9b10e974393
SHA1	d3b7a4d279ec1a555a2cd85d1548537328a4827c
SHA256	046cab23a2f0d45bd2550162f285310cbb03420cb78529e0f24b11c01badfe9b
SHA512	b620eb2aed963f979679a656f23300389b39f9f6f6e0b6ea8f8b8e9d1d9648237781fc6e0017c9ba657efd68fcc606b1778a87e4c5999efdb5c13069a414987d

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5	0ae7cc07e0c12b21e8b0c0077d5de78d
SHA1	70d78027a07a28bd713d8717abd17827ab47aba4
SHA256	88ffff71bd6608236adf4e9c7af5a38d43d1a649042bd5c4d14f43122c843c28
SHA512	63464fb82b75c3b16d1f7709e31fff3a04c43ad4ecf0b2d3ae2be6060b5efa8a0e343a53b7ab80a97ea8ef532b53aed4ec1e6efa02170a1e44815f5818ec7d38

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5	d3075fe724d0a22ff8550348bcbc9d9e
SHA1	9773c7fdd409d9b438b28749b74cc4a54eda0efc
SHA256	d92c2cc4a7348782cd486be26f6b59324f095881b31ce9621189b4cee933ce32
SHA512	408929e6a79ae5c67d414526b1d10922b657ab1e00b0986422bd5e1d781741f1a07d94d0b52f259b35aea4c59f5f005c0ca47a2b80cc46453b7d4b37a82494e0

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5	3e858922f8c060594f0e7255b9ecb433
SHA1	9ffbd4da1b43c662cc4f2cc26bc3a4676e016389
SHA256	49449810863a10ee56e46e52c08403b019282b9dd39536e56e895a212ea7107e
SHA512	51a04262864e7042e338492fb6b7b94066003d29ea516a50cf16ffe66b5325143431b6681e39fb84491b756586aba3ee9e5857292d0a5a7e57a1b8c1c190b6e6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	3f2b6c9baaf4193429cd6d74af6679a2
SHA1	0ded393f8f19f7ae5b37f0ce0e46722d051dbb1f
SHA256	a886114d45958db37622f2b8301de38711c2111031d206073d47ead552c22e12
SHA512	be2a1532dea525c7e081e50deea9ebaebe1bfbe4ed5755bb0aa19b2a69928b289c67341a48a95f43cea1cebd23f702cf7347b2ec4d844b0bee65dfb6b334ec14

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5	97c9bfdf584fc65acedb24ab47c97d2b
SHA1	971ac4de3e639a2649b70d340245c9c87f543e7d
SHA256	ec8f2da8a435a9cb3d7af20b867337fa95e42738ae4890ac38bea27d0c215909
SHA512	6b39f28d63cf673923daac3d06295040ec0da34633d5363f5e425a460b8bf60df81a7f22f9a54d5eb88860bc1434265bf89c57550881b6446477d6eb51018b85

C:\Windows\Logs\DISM\dism.log

MD5	19919af9bb278b410bc227a0b1ae9073
SHA1	34c7e8146262ad23423660819175075b74f3c157
SHA256	170668506d81cbebe54211fbc433a4963d5f3e3db8796a850e2731b98fa00249
SHA512	e9c8ddd4d66eb02d6ec3344e29a9136d2bb1efd77913072fa826ca8a583898b39caa1a61804c5a34d78e3df14dba4a94c853aa34fcc388b10714cf6ef82a4543

C:\ProgramData\McAfee\WebAdvisor\LogicModule.dll\log_00200057003F001D0006.txt

MD5	2d765d29f4e435b8245465ef43808230
SHA1	ede709cddacba441deac23e14a331fcfe7be7d50
SHA256	0b5205a39f7a65b3c87311d090c1850831b5cc07c77f247e10dac3350bf43c14
SHA512	892995d0f3ed77b027ff19e3fc5781bfa0513d7a13648b1e7cbd72a02d4413c3e2a1b9b3c2923acc2ecddbd2c3d7be030effbdb4b0ee545bddb5c6dd064016c8

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5	242cdee585c927036ef2a0b1bc170644
SHA1	1faabda56011fb8ff285c2edf4c25a11cfc40ff6
SHA256	5dd90586be565f6e66633a7355b05f6fa77d411c8ffc4247302aa31e385ce51c
SHA512	63b470d0514cda6ad07ed02e31a96b8fb9d0befd086a8734ddb1d6d4e82cde3be6af6005cf2c4ce835f534d61c0d3e2f58f11251ed9bbb3c99ebc7dd3b50024b

C:\ProgramData\McAfee\WebAdvisor\UIManager.dll\log_00200057003F001D0006.txt

MD5	5507cc25543395909e674a8c5620e1cf
SHA1	f869e5f1db689abc257d0950d1f2e3356093d8fc
SHA256	dafb34c5a6a1654b41c6ea64aca93301ebdb61e25fdf24e4a747603bae5847e1
SHA512	5890a3b6b96a182d11921d62c893ba46b9b90945e8353919d070f5c91a877d0ea29bb670fa4b5470092b94025cc7894c62d1323d75b98072731deccf907cb932

C:\ProgramData\McAfee\WebAdvisor\WATaskManager.dll\log_00200057003F001D0006.txt

MD5	d80d9a7a59785aa4061db2be419bdef1
SHA1	6a2985175d3e6ef5c41d030fe4f8729abbf0c50c
SHA256	65ac254adbd1e5b20128ca1c85547db774d1d06843440d067caa0a70e5ce3af2
SHA512	af98126eafcd4c5037b2312554a89bcab1481be34c861454340a0fa8ebaa3a500e4c7976df7ffa51410423f4a065d1c53c1bd040b485be356bee07ecb5ad8bbf

C:\ProgramData\McAfee\WebAdvisor\updater.exe\log_00200057003F001D0006.txt

MD5	050349c1d4f496dc4eb7040c6d06179d
SHA1	181805b2fd1c879e6c9ef26ca348d432214244ff
SHA256	1b57cb39856fe7997d64a355a8deb0ee8edf15b7cffea9453328e3eba67cabc2
SHA512	42574541c1909d1d49c16cff489a2788b816f9d940b63c4ed81f2c8f3fcfd37452113e3737ed39467d828ed5015a8bc90abe58ee75de1f7081ed4ea9d62f318f

C:\Users\Admin\AppData\Local\Temp\scoped_dir8288_296429412\a926d2c1-3e5c-498b-b6a2-20f0c3991982.tmp

MD5	0478af367a6aac8faf45eaca7c8c9bdf
SHA1	19113a9b403147bd6dec0501e11109445487f49f
SHA256	7e42ed55539c619ba18325cd5680bb5bce962c76f66a82e917602054afe9abfa
SHA512	8bf10d7ea6030427a693b904aa4d6b2d195a0538ef23d38048412ae5cd97518aa732061c8ad43028eed8fabddb81a74bf23e5219fcb9993d702603bbbc744cec

C:\Users\Admin\AppData\Local\Temp\scoped_dir8288_296429412\CRX_INSTALL\interactive_balloon.js

MD5	8811c08dba69f3dd5c1be93169bd13ba
SHA1	e00f8bebcffecdad1a0efd4cf297989b5424cb14
SHA256	5a1312afd6924fa1ddd84e14e420c13cb94980886a3fee322647e29a3a7325fd
SHA512	872cd6836cf9d43c9a6e7b3cedf75fa3b81f907ce322f90b6d80f5b07c28ab6ed8b70d7ff6fc2a673535c499d695ae3f2d82ee9e144e15b66cec6b78074e3708

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	d3681dcbd253aab6881a144f987e2393
SHA1	db334a5a1d3a61fdbb5fd114e04f3aa76f4b463f
SHA256	38e2e699e5a862af5a03c8bd247da2c10647840d01c6ffd35fd9eb7ebbc3fe19
SHA512	086fd0af29057023b75d1d88f6a12a4236b0f1c75c5cc6b8c2f82f78fb8b5d0706b65d641425626640b9e2ed791815ffab88faa1fe37787f3c53dfc1ce293898

memory/2452-14471-0x0000000004990000-0x00000000049C6000-memory.dmp

memory/2452-14472-0x0000000005050000-0x000000000567A000-memory.dmp

memory/2452-14473-0x00000000057C0000-0x00000000057E2000-memory.dmp

memory/2452-14474-0x0000000005860000-0x00000000058C6000-memory.dmp

memory/2452-14475-0x0000000005940000-0x0000000005C97000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_g4luocvt.fqk.ps1

MD5	d17fe0a3f47be24a6453e9ef58c94641
SHA1	6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA256	96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
SHA512	5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

memory/2452-14497-0x0000000005E40000-0x0000000005E5E000-memory.dmp

memory/2452-14498-0x0000000006370000-0x00000000063BC000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5	e8187e28a9983deb3ee6a1a263e3d963
SHA1	d6c39ba14701503233e2d38ece610419ab0adb11
SHA256	05a76d234482e10e607fbe4cc13a66652a3e2d2ccb07e3cdf6487c42c25a7dac
SHA512	760d70b383fefb69739d1c0fc19b201067e0faa5173f573d20f960e8d3b60237a476f7aaf4d297f5d9327b5c5f321b9250238ab08300ebae13af18854483e66f

memory/2452-14524-0x0000000068F60000-0x0000000068FAC000-memory.dmp

memory/2452-14535-0x0000000006430000-0x000000000644E000-memory.dmp

memory/2452-14523-0x0000000006E60000-0x0000000006E94000-memory.dmp

memory/2452-14540-0x00000000070A0000-0x0000000007144000-memory.dmp

memory/2452-14542-0x0000000007190000-0x00000000071AA000-memory.dmp

memory/2452-14541-0x00000000077D0000-0x0000000007E4A000-memory.dmp

memory/2452-14543-0x0000000007210000-0x000000000721A000-memory.dmp

memory/2452-14544-0x0000000007420000-0x00000000074B6000-memory.dmp

memory/2452-14549-0x00000000073A0000-0x00000000073B1000-memory.dmp

memory/2452-14550-0x00000000073E0000-0x00000000073EE000-memory.dmp

memory/2452-14551-0x00000000074C0000-0x00000000074DA000-memory.dmp

C:\ProgramData\McAfee\WebAdvisor\ServiceHost.exe\log_00200057003F001D0006.txt

MD5	c4f4986dbd194fdb318aef17d61d87f7
SHA1	968c97f6039255d0b40380b286bde1b6401c782b
SHA256	ba8c105251a532267b5403e06e558747ef5aa2087196eedae3c89a359efd4f27
SHA512	74728170ce7b5cea42ad8c977847c11883a0fb1475a7a7ef03b96f6a737cc4375c94bb72e8fdfcd0a37e666ad538d4293b2e7a0d09408f25759aa418c6808d18

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

MD5	aa8a8f403df0bfab4bee5dd2e2c70e6e
SHA1	9e396d75b780ab03259a39f5ae9b6977f80413df
SHA256	3587e8c033d3074f39474a666b93fabc19e68dd7af3ffa81f463e3f878ae5248
SHA512	0a18747219b76a1041a260fd617d96b0105dbb64ea3d7b8c245ece15fb12a295aebd225dc6faf7d56281923dc2ef45d2bea7e2283a0f50c9c11eb715d6d81da1

memory/9980-14638-0x0000000068F60000-0x0000000068FAC000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	96bcb81b138c532e0f0ee5b7abd50fb1
SHA1	d25ed06328e589dd367cdee08b28cac34a32c8f8
SHA256	4e3195ed39046959b8847112e85e9eae9cb27acf14fbc1b93e6f5241a64724be
SHA512	42d2689254e3e5efe5fc60c18259bda4239fce9901cd26f30d63ca98c21ef6b3db00761702f8798c59109f8d452e6cac624c419fcae175a856aa415d2b0d770d

memory/7860-15084-0x0000013D22120000-0x0000013D22176000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nscCD7E.tmp\tmp\RAVEndPointProtection-installer.exe\assembly\dl3\4e767d6c\fa5f60db_1fb2da01\rsJSON.DLL

MD5	fa63504382f4f3f92fa86841d9e97f29
SHA1	0bde02c98741bb24eaf501bd8e2d9738742cd042
SHA256	5f0764e1998464f63c6583f870dd3784921b752b91d8e450fe2c90153cb5e58d
SHA512	c8483d9060a6800c8dedb4d5fea7cda346f742ca1a149c3eb608823209aff1f00bfcc5b0caf9c482c7b01d75f6e198edfae3b0100cb0dca6e5b5f18336abdee5

memory/7860-16702-0x0000013D22180000-0x0000013D221BA000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001b

MD5	87c2b09a983584b04a63f3ff44064d64
SHA1	8796d5ef1ad1196309ef582cecef3ab95db27043
SHA256	d4a4a801c412a8324a19f21511a7880815b373628e66016bc1785a5a85e0afb0
SHA512	df1f0d6f5f53306887b0b16364651bda9cdc28b8ea74b2d46b2530c6772a724422b33bbdcd7c33d724d2fd4a973e1e9dbc4b654c9c53981386c341620c337067

memory/7860-16721-0x0000013D22180000-0x0000013D221B0000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nscCD7E.tmp\tmp\RAVEndPointProtection-installer.exe\assembly\dl3\1cd6f0ac\ed8660db_1fb2da01\rsLogger.DLL

MD5	e3fa0916f33bee8a14f28421d2dcdc9f
SHA1	fd3dca4db55e81ebffc7609c5d63a4ffbd6629b2
SHA256	29aaff11e775c800575b1a5d4160daec749dde528e68bc3b6e9b340279ed991d
SHA512	fe96efd3cf162bbb766634c3d90f707d868378dd04e47aa9d55c03e03130f54827f781639383b053c9335d022ccd6b244b67e586197c2b40d193dd58a4ee8cb6

C:\Users\Admin\AppData\Local\Temp\nscCD7E.tmp\tmp\RAVEndPointProtection-installer.exe\assembly\dl3\e020c183\e2565bdb_1fb2da01\rsAtom.DLL

MD5	044d60780b0c40d3f9b0b5a3fc040948
SHA1	2e16c926f11ed5faae22d9af5d935748c57ec1f8
SHA256	7493f645bb04092aee30a47a681494251c79a38a941c9a3d2dee4293a265f428
SHA512	7653a0a46e3eb9331e92a09937754302f939100adbfb283242c25bf0f73f8508d6f7e9d5aa08dbbefdd14bf682ad7d0d77f4999b3274d329d281e22934c445ea

memory/7860-16753-0x0000013D22180000-0x0000013D221AA000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000ed

MD5	78c2b586d013f22c00a7fba84f1b17dd
SHA1	297e8185e03b95dc9ac1d3bd61d7fa6870af5e22
SHA256	296967c3f68bf40c880602e4f9332488b55e6b901d7f9abb0190d391e2c1895e
SHA512	6904ac1bc42db7d8e0b7470369dbd2de6936f90af3e00c247d773ef2b8c20cd4ba54ca6fd3983f37052f8d74faed449d14d790ba500ad0ac72a3d72dca82a077

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	810b390028c1667ce78904d7f5608d2b
SHA1	71896bcc6e20b4c95d27b7af07140eca07948666
SHA256	44399c32b669d570bb22b33d64b1288c6207d7a8572fb655d716131560448516
SHA512	8429c741a94c718b175cd80bf10ba099178a244591d793c75a5572403210826b0189635ba7139f7bf4ac2b8b4e991d30b5556c3d90f0b4fe1435f96878793101

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	eeb4e4522e191064f1137f1c8702c5d9
SHA1	39728dab679241e1cd8ec138625f4682e70f4372
SHA256	d3334d2ac52ccb0f1f0213a63aa5f91f9817553f7f99031edddf9a41c72ea6a7
SHA512	bd37a60361cdaeed50edfa276371bb6d1e11143161fb7dd312ebba63d21becef15a92cb18ad776a8fff5e6591e7a6830963440d93098279b104bd960416044e1

memory/7860-16821-0x0000013D22180000-0x0000013D22188000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nscCD7E.tmp\tmp\RAVEndPointProtection-installer.exe\assembly\dl3\c0eebfa0\12d560db_1fb2da01\rsServiceController.DLL

MD5	8dcd92de516608670f57193d74824a3b
SHA1	c67c347dfa47c2db1628fab8bf9906c353f33dd9
SHA256	96db49db4dd12b9f86144fedf83ac7dc12d855c5d7e3c863fd5b1696966ac345
SHA512	e5fde81ae57e68df69fc7695b9e16d8c7d188a30a4d68ffb682a3dcfedf2c028874145815aad2f957a02b0ead6ad8f1442635dfa580339816110e7b1cdbc0c0e

memory/7860-16832-0x0000013D22340000-0x0000013D2236E000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\nscCD7E.tmp\tmp\RAVEndPointProtection-installer.exe\assembly\dl3\61a6433b\12d560db_1fb2da01\rsTime.DLL

MD5	3b2e281f09fca19a7ddfa60f05566101
SHA1	2f03319a5840eb8c2e12daf8c9e7870fb022eaeb
SHA256	4041ecec136a63e97b5ff0c980b95a4a5a193f95024c36bf56bc45dfbac0558f
SHA512	f0c261714666bd5ff804bf6fd72c71aefaac0c9f13a74a1551ff65d5808b5e2c624a6b660b611b64714583c9b3363a33426c30223aeaf9d95f7770d06ad039f3

memory/10336-16851-0x0000000068F60000-0x0000000068FAC000-memory.dmp

memory/10336-16860-0x0000000006DF0000-0x0000000006E94000-memory.dmp

F:\LDPlayer\LDPlayer9\fonts\Roboto-Regular.otf

MD5	4acd5f0e312730f1d8b8805f3699c184
SHA1	67c957e102bf2b2a86c5708257bc32f91c006739
SHA256	72336333d602f1c3506e642e0d0393926c0ec91225bf2e4d216fcebd82bb6cb5
SHA512	9982c1c53cee1b44fd0c3df6806b8cbf6b441d3ed97aeb466dba568adce1144373ce7833d8f44ac3fa58d01d8cdb7e8621b4bb125c4d02092c355444651a4837

F:\LDPlayer\LDPlayer9\fonts\NotoSans-Regular.otf

MD5	93b877811441a5ae311762a7cb6fb1e1
SHA1	339e033fd4fbb131c2d9b964354c68cd2cf18bd1
SHA256	b3899a2bb84ce5e0d61cc55c49df2d29ba90d301b71a84e8c648416ec96efc8b
SHA512	7f053cec61fbddae0184d858c3ef3e8bf298b4417d25b84ac1fc888c052eca252b24f7abfff7783442a1b80cc9fc2ce777dda323991cc4dc79039f4c17e21df4

F:\LDPlayer\LDPlayer9\ldmutiplayer\ssleay32.dll

MD5	0054560df6c69d2067689433172088ef
SHA1	a30042b77ebd7c704be0e986349030bcdb82857d
SHA256	72553b45a5a7d2b4be026d59ceb3efb389c686636c6da926ffb0ca653494e750
SHA512	418190401b83de32a8ce752f399b00c091afad5e3b21357a53c134cce3b4199e660572ee71e18b5c2f364d3b2509b5365d7b569d6d9da5c79ae78c572c1d0ba0

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcr120.dll

MD5	50097ec217ce0ebb9b4caa09cd2cd73a
SHA1	8cd3018c4170072464fbcd7cba563df1fc2b884c
SHA256	2a2ff2c61977079205c503e0bcfb96bf7aa4d5c9a0d1b1b62d3a49a9aa988112
SHA512	ac2d02e9bfc2be4c3cb1c2fff41a2dafcb7ce1123998bbf3eb5b4dc6410c308f506451de9564f7f28eb684d8119fb6afe459ab87237df7956f4256892bbab058

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcr110.dll

MD5	4ba25d2cbe1587a841dcfb8c8c4a6ea6
SHA1	52693d4b5e0b55a929099b680348c3932f2c3c62
SHA256	b30160e759115e24425b9bcdf606ef6ebce4657487525ede7f1ac40b90ff7e49
SHA512	82e86ec67a5c6cddf2230872f66560f4b0c3e4c1bb672507bbb8446a8d6f62512cbd0475fe23b619db3a67bb870f4f742761cf1f87d50db7f14076f54006f6c6

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcp120.dll

MD5	50260b0f19aaa7e37c4082fecef8ff41
SHA1	ce672489b29baa7119881497ed5044b21ad8fe30
SHA256	891603d569fc6f1afed7c7d935b0a3c7363c35a0eb4a76c9e57ef083955bc2c9
SHA512	6f99d39bfe9d4126417ff65571c78c279d75fc9547ee767a594620c0c6f45f4bb42fd0c5173d9bc91a68a0636205a637d5d1c7847bd5f8ce57e120d210b0c57d

F:\LDPlayer\LDPlayer9\ldmutiplayer\msvcp110.dll

MD5	3e29914113ec4b968ba5eb1f6d194a0a
SHA1	557b67e372e85eb39989cb53cffd3ef1adabb9fe
SHA256	c8d5572ca8d7624871188f0acabc3ae60d4c5a4f6782d952b9038de3bc28b39a
SHA512	75078c9eaa5a7ae39408e5db1ce7dbce5a3180d1c644bcb5e481b0810b07cb7d001d68d1b4f462cd5355e98951716f041ef570fcc866d289a68ea19b3f500c43

F:\LDPlayer\LDPlayer9\ldmutiplayer\libssl-1_1.dll

MD5	e8fd6da54f056363b284608c3f6a832e
SHA1	32e88b82fd398568517ab03b33e9765b59c4946d
SHA256	b681fd3c3b3f2d59f6a14be31e761d5929e104be06aa77c883ada9675ca6e9fd
SHA512	4f997deebf308de29a044e4ff2e8540235a41ea319268aa202e41a2be738b8d50f990ecc68f4a737a374f6d5f39ce8855edf0e2bb30ce274f75388e3ddd8c10b

F:\LDPlayer\LDPlayer9\ldmutiplayer\libssh2.dll

MD5	52c43baddd43be63fbfb398722f3b01d
SHA1	be1b1064fdda4dde4b72ef523b8e02c050ccd820
SHA256	8c91023203f3d360c0629ffd20c950061566fb6c780c83eaa52fb26abb6be86f
SHA512	04cc3d8e31bd7444068468dd32ffcc9092881ca4aaea7c92292e5f1b541f877bdec964774562cb7a531c3386220d88b005660a2b5a82957e28350a381bea1b28

F:\LDPlayer\LDPlayer9\ldmutiplayer\libeay32.dll

MD5	ba46e6e1c5861617b4d97de00149b905
SHA1	4affc8aab49c7dc3ceeca81391c4f737d7672b32
SHA256	2eac0a690be435dd72b7a269ee761340099bf444edb4f447fa0030023cbf8e1e
SHA512	bf892b86477d63287f42385c0a944eee6354c7ae557b039516bf8932c7140ca8811b7ae7ac111805773495cf6854586e8a0e75e14dbb24eba56e4683029767b6

F:\LDPlayer\LDPlayer9\ldmutiplayer\libcurl.dll

MD5	2d40f6c6a4f88c8c2685ee25b53ec00d
SHA1	faf96bac1e7665aa07029d8f94e1ac84014a863b
SHA256	1d7037da4222de3d7ca0af6a54b2942d58589c264333ef814cb131d703b5c334
SHA512	4e6d0dc0dc3fb7e57c6d7843074ee7c89c777e9005893e089939eb765d9b6fb12f0e774dc1814f6a34e75d1775e19e62782465731fd5605182e7984d798ba779

F:\LDPlayer\LDPlayer9\ldmutiplayer\libcrypto-1_1.dll

MD5	01c4246df55a5fff93d086bb56110d2b
SHA1	e2939375c4dd7b478913328b88eaa3c91913cfdc
SHA256	c9501469ad2a2745509ab2d0db8b846f2bfb4ec019b98589d311a4bd7ac89889
SHA512	39524d5b8fc7c9d0602bc6733776237522dcca5f51cc6ceebd5a5d2c4cbda904042cee2f611a9c9477cc7e08e8eadd8915bf41c7c78e097b5e50786143e98196

F:\LDPlayer\LDPlayer9\ldmutiplayer\dnresource.rcc

MD5	70058f2d60daef1ccc7bbcba210f0ace
SHA1	ef214ade419a724272ac82e9de5233d7c0afa64b
SHA256	43b26f40e04ae6854569a01803541245abffcd130f1345191afd8bf6b0ca7873
SHA512	a0b3ca59ffad882fbff69012023eaa8aadb77d3ff1252562e5480e7dc3c9336afb3c5f58fb435246ec48c758d3c9d17ae9ea8a28f9d4766fad1a4c672cbf9b9a

F:\LDPlayer\LDPlayer9\dnmultiplayer.exe

MD5	f96c25bb4feee47fe4111660fa0706b3
SHA1	284126ce4f80b6bfd6037f6137dee90c941e4eec
SHA256	9b5d44c60b18b36bcc1cc0e28585ae168d92239beda197d739c3e64edb229867
SHA512	b4297728f031863ccfb50de52d18f443d6ae893322e2f6b315497e187329275fbf41828867e614b35e9ff60ac6e3e1ae77d876fa8e131336c2d6a1fb6ff7db36

F:\LDPlayer\LDPlayer9\dnplayer.exe

MD5	a723044f1c511790dd0ee3a3fa68c4cf
SHA1	670e6f907c2557c9685ad26c26d6d8fee5139942
SHA256	861be3e240b075752d52c7b50c41bf22eab9314db4f11a20362c648198a0f2e4
SHA512	0fa7da71864d1abdff83d3aa01597f5902c01899513b0333bcc5d756a15be02b8c5293b55c1d88e556010f53412a7dbd27b57b63b1074565f1f6de8e2952377c

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

MD5	640485a88e96f53c9f744bc3b13bdc6b
SHA1	5384e7a6fb80d96dbe0ac7209a9feaf37144e37c
SHA256	fa5b4f4adda2dfb05418ab4bbf7ada7a943ffa2bc5033c45d07f9987fd6af8a6
SHA512	99679afb60b3c1f8ad944ed5b5237f6fe271107a1fd857c4a8820c7bd0df02f4b91469a167f7f1962cffd091b8de6da52b6f52ecf26e37fcd48496f641827a73

F:\LDPlayer\LDPlayer9\ldmutiplayer\cximagecrt.dll

MD5	66df6f7b7a98ff750aade522c22d239a
SHA1	f69464fe18ed03de597bb46482ae899f43c94617
SHA256	91e3035a01437b54adda33d424060c57320504e7e6a0c85db2654815ba29c71f
SHA512	48d4513e09edd7f270614258b2750d5e98f0dbce671ba41a524994e96ed3df657fce67545153ca32d2bf7efcb35371cae12c4264df9053e4eb5e6b28014ed20e

F:\LDPlayer\LDPlayer9\ldmutiplayer\7za.exe

MD5	ad9d7cbdb4b19fb65960d69126e3ff68
SHA1	dcdc0e609a4e9d5ff9d96918c30cb79c6602cb3d
SHA256	a6c324f2925b3b3dbd2ad989e8d09c33ecc150496321ae5a1722ab097708f326
SHA512	f0196bee7ad8005a36eea86e31429d2c78e96d57b53ff4a64b3e529a54670fa042322a3c3a21557c96b0b3134bf81f238a9e35124b2d0ce80c61ed548a9791e7

memory/10336-17028-0x00000000070F0000-0x0000000007101000-memory.dmp

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000114

MD5	d2a14a707532644af375cdcf7890af1a
SHA1	e7ea9eea39b4298dfeb140df2f04aa9ed08f06a4
SHA256	a2da41d8277a55fcf976c2a369e66217ccc03a19822c556fe6ba5196a6309f52
SHA512	d634f5fcb6f923979b5e6ffbea0eae3930ff5fbc1f88da36fd08ab6ae319a2f8977a2ceb4f9f74a928951be48b1c6b1f04017ade84b5510e7ead383a5497fbe5

C:\Users\Admin\AppData\Roaming\XuanZhi9\ldopengl32x.dll

MD5	6de0ef4a83aadebe5d7e07a64fc9d220
SHA1	f2162f30992ced0b882bfced0477ebf62b7ce186
SHA256	b7c4de833b0e2689724414802fbdda35d7cc1c4529eb95282fd0ffd175119008
SHA512	eebe007e0ece66c08138720bb46864470826a6b49a8edb1fd1593c4efade4bbf32c764d205383ef4745a738a1242f92e4c396abeb56e6ff9e785977ce8f646da

F:\LDPlayer\LDPlayer9\vms\leidian0\sdcard.vmdk

MD5	4d592fd525e977bf3d832cdb1482faa0
SHA1	131c31bcff32d11b6eda41c9f1e2e26cc5fbc0ef
SHA256	f90ace0994c8cae3a6a95e8c68ca460e68f1662a78a77a2b38eba13cc8e487b6
SHA512	afa31b31e1d137a559190528998085c52602d79a618d930e8c425001fdfbd2437f732beda3d53f2d0e1fc770187184c3fb407828ac39f00967bf4ae015c6ba77

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

MD5	22016f09484b5b93987a8860ac6d48cc
SHA1	52966b3680b423f4bb345735dd675866e2e1501d
SHA256	97376d43d2aecf135c32df1b57533678e9f2105ba577bbd5f0e0775448f170ef
SHA512	09ccc0729f994bbb3edb0aab0b697932a6d7b8c0f9b83b3c2e517f3e1682f22169f2897bab6e610ed19f8f827ebecd3bb20506688dbec3fe100dc6d7baad71a6

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

MD5	12f4dc2762c2c6c1fcd9fad1f22f475d
SHA1	bcd2e8aa867ee615b36c498543cafa003604989f
SHA256	f83dfece7ab262185c05d70a73e94890a54964c70076b13e562abd3a7e64a113
SHA512	461251cd561b5e8ee2476e90aa8c63f25828e9e9c9969632ccb4bf41254a026ca46103bff2f2f51cebc4a49b00eade1293945555deaff91be19a843727f089f3

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

MD5	a7403e6f8af569bac43cb662d9bb5dfd
SHA1	b691f2e14ec45bc98ded13f8aa0c5bb6ff64e5a2
SHA256	b38620d7f72a514d3fadd7c02a88b179ca0f6e86cb91f1a37d76345025c0ce1e
SHA512	175c4243a3bff3be82ffe72921795926287480ab25129dbce93dbeb7daf287e58f7d2dd852dc7381517bc76ddb7f4eb3ee65f0556491bb9a74bdafb369aaaab4

C:\Program Files\ReasonLabs\EPP\133614988784727615\InstallerLib.dll

MD5	135353974cbebf94b8bc48d682f8f5d8
SHA1	0d8911efa7759516fc80961ec42ed6e15764ceb8
SHA256	3da6db19e909805066bb41b1674b76b9b1946e99aefdee3ef96a0ee73b9914c1
SHA512	1896e77b05162f9624ecc2139866186260b1adfb6a1918f04f9696dde2e7b5b4c2fb64533c20abc44ea0bc42afed692381cff956a458b1fb420e5b490f26f998

C:\Program Files\ReasonLabs\EPP\rsEngine.config

MD5	0195b6f2d3e0f5a4947f353e48e15d8c
SHA1	f29fb502b68a486ffee0c55ed343c15e5110e6f9
SHA256	52b9ff10c412162ce0ac5ece6cd56b1164c209af1ad8b3b8e334149ed6e4ea56
SHA512	65ba63d1645a1c507c2a8c4728df0f1f660f3574333925386f1b5b07f11e4e894d8404767a478a384d6a5910915ff040698c6c761047a4ce53a9fabd2d788bef

C:\Program Files\ReasonLabs\EPP\rsEngineSvc.exe.config

MD5	5ef4dc031d352d4cdcefaf5b37a4843b
SHA1	128285ec63297232b5109587dc97b7c3ebd500a6
SHA256	4b094b7bd38e5bf01900e468ddd545b42369ae510ec2366427804a57da5013a7
SHA512	38b0444e4f07ad0b50891e2b0da6374b0033cb9656a4918e9eaae34e381d95671978d19abbcf2b8fdb079921b85e20dbe2c4392b15984ce6051b48b4a05a172f

C:\Program Files\ReasonLabs\EPP\x64\rsKernelEngine.sys

MD5	f77b9b6ccca206535eb9672266a462b1
SHA1	479345a89fb7362cae53a3040f4efcee55b92bf7
SHA256	bc4ebe3656be0f502b65a2ca247ffa1b3065ec6fe2e76d3af21511a0616f855c
SHA512	9c80e9c83a58c9e2c63f22c17e4fd4df227f04960aa2212c66a1308512fe02e71cb7300455965109a7e3931abd38ebd15162fe3cb46c3328f28d1ae175b4efe3

C:\Program Files\ReasonLabs\EPP\x64\rsCamFilter020502.sys

MD5	633861d85b60eb7de2e820f4fac586e0
SHA1	e5666aecd7b9d97627c4a0fc06d52aea59d7c37d
SHA256	8eebbe6a69d030ff7944524e22126218b6ae8cdb349c97feedb83cd0686bbb38
SHA512	8f26d38abef1ca2b365a2b1cc6b2a49c55319c59d790c32ec8d5728596fddcf9252230c200abae4609884cba3449b3ea778785244330f98c8c21cadf8c921ae1

C:\Program Files\ReasonLabs\EPP\elam\rsElam.sys

MD5	8129c96d6ebdaebbe771ee034555bf8f
SHA1	9b41fb541a273086d3eef0ba4149f88022efbaff
SHA256	8bcc210669bc5931a3a69fc63ed288cb74013a92c84ca0aba89e3f4e56e3ae51
SHA512	ccd92987da4bda7a0f6386308611afb7951395158fc6d10a0596b0a0db4a61df202120460e2383d2d2f34cbb4d4e33e4f2e091a717d2fc1859ed7f58db3b7a18

C:\Program Files\ReasonLabs\EPP\rsWSC.exe

MD5	d8021f3b7e9c952b7ec33b929183e8ef
SHA1	ed2d1df3e7cae24754df2b59ab69263ca2ec8d13
SHA256	3744db07f72992950ff14d39e7e82302b99557592649a855497c18db3d7a3b39
SHA512	07c7df63d4dd21b65ece55bd6ef6d513f9df400f5fe456bedbcd24ae5c58800f4fb189ce00b2c0bb05b724234fa227904c021c4160d8c5541cd4b599db2aab47

memory/9364-18284-0x000001B4D8680000-0x000001B4D86AE000-memory.dmp

Malware Analysis Report

2024-09-11 05:59

Table of Contents

Analysis Overview

MITRE ATT&CK Matrix

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

Threat Level: Likely malicious

Malicious Activity Summary

MITRE ATT&CK Matrix V13

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Sample ID	240529-2718tade4y
Target	http://google.com
Tags	discovery execution exploit persistence spyware stealer upx