Malware Analysis Report

2025-08-10 22:33

Sample ID 240803-se2t7sxamr
Target http://google.com
Tags
bootkit discovery execution persistence privilege_escalation ransomware spyware stealer upx
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

Threat Level: Likely malicious

The file http://google.com was found to be: Likely malicious.

Malicious Activity Summary

bootkit discovery execution persistence privilege_escalation ransomware spyware stealer upx

Creates new service(s)

Drops file in Drivers directory

Downloads MZ/PE file

ACProtect 1.3x - 1.4x DLL software

Executes dropped EXE

UPX packed file

Event Triggered Execution: Component Object Model Hijacking

Checks computer location settings

Reads user/profile data of web browsers

Loads dropped DLL

Checks installed software on the system

Legitimate hosting services abused for malware hosting/C2

Writes to the Master Boot Record (MBR)

Sets desktop wallpaper using registry

Drops file in System32 directory

Launches sc.exe

Drops file in Program Files directory

Drops file in Windows directory

Enumerates physical storage devices

Program crash

System Location Discovery: System Language Discovery

Browser Information Discovery

NSIS installer

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Modifies registry class

Suspicious use of SendNotifyMessage

Kills process with taskkill

Suspicious use of FindShellTrayWindow

Suspicious use of AdjustPrivilegeToken

Uses Volume Shadow Copy service COM API

Enumerates system info in registry

NTFS ADS

Suspicious use of WriteProcessMemory

Checks SCSI registry key(s)

Suspicious use of SetWindowsHookEx

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-08-03 15:03

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-08-03 15:03

Reported

2024-08-03 15:07

Platform

win10v2004-20240802-en

Max time kernel

227s

Max time network

255s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com

Signatures

Creates new service(s)

persistence execution

Downloads MZ/PE file

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\system32\drivers\protected_elam.sys C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\system32\drivers\protected_elam.sys C:\Program Files (x86)\TotalAV\SecurityService.exe N/A

ACProtect 1.3x - 1.4x DLL software

Description Indicator Process Target
N/A N/A N/A N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000\Control Panel\International\Geo\Nation C:\Windows\system32\wscript.exe N/A
Key value queried \REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000\Control Panel\International\Geo\Nation C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A

Event Triggered Execution: Component Object Model Hijacking

persistence privilege_escalation

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A

Reads user/profile data of web browsers

spyware stealer

UPX packed file

upx
Description Indicator Process Target
N/A N/A N/A N/A

Checks installed software on the system

discovery

Legitimate hosting services abused for malware hosting/C2

Description Indicator Process Target
N/A raw.githubusercontent.com N/A N/A
N/A raw.githubusercontent.com N/A N/A

Writes to the Master Boot Record (MBR)

bootkit persistence
Description Indicator Process Target
File opened for modification \??\PhysicalDrive0 C:\Users\Admin\AppData\Local\Temp\89C3.tmp\mbr.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SecurityService\SecurityService_Url_wqsxzqrojlfbwj3xmqn5vi2gsla5q5aq\hn1yeml4.tmp C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File created C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SecurityService\SecurityService_Url_wqsxzqrojlfbwj3xmqn5vi2gsla5q5aq\hn1yeml4.newcfg C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\d40dbc18-ea43-4b9f-a638-21cdd7ccaddb\Logs.db C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
File opened for modification C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\d40dbc18-ea43-4b9f-a638-21cdd7ccaddb\Logs.db-journal C:\Program Files (x86)\TotalAV\SecurityService.exe N/A

Sets desktop wallpaper using registry

ransomware
Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000\Control Panel\Desktop\Wallpaper = "c:\\bg.bmp" C:\Windows\system32\reg.exe N/A

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\TotalAV\urldrv\wfp\win8\amd64\webshieldfilter.sys C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\aedroid.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\aeml.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.IO.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\wpfgfx_cor3.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.IO.Compression.Brotli.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Xml.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Windows.Presentation.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Context.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Buffers.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.IO.Ports.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Private.DataContractSerialization.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Threading.Thread.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\Utilizr.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\api-ms-win-crt-environment-l1-1-0.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgio.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\HtmlAgilityPack.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\Microsoft.VisualBasic.Core.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\ovpn\liblzo2-2.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Collections.Concurrent.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\Utilizr.Native.Win.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\BouncyCastle.Crypto.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.inf C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Net.NameResolution.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Resources.ResourceManager.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\api-ms-win-crt-heap-l1-1-0.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Data.Common.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Drawing.Primitives.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SecurityService.runtimeconfig.json C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\avira.managed.remediation.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\coreclr.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\driver\amd64\tap0901.sys C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\urldrv\wfp\win8\i386\webshieldfilter.sys C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\uninst.exe C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\Microsoft.Win32.SystemEvents.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\Nito.Cancellation.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\mscordaccore_x86_x86_4.700.22.55902.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avgntflt.sys C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.ServiceProcess.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l2-1-0.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\hostfxr.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\AviraLib.dll.config C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Drawing.Common.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Reflection.Emit.ILGeneration.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\aelibinf_db.dat C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Diagnostics.FileVersionInfo.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapi-engine.conf C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\mscorrc.debug.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\apc_random_id_generator.exe C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\on_access\README C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Data.Odbc.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Windows.Input.Manipulations.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\ovpn\openvpn_up.bat C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\aeexp.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SQLite.Interop.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.IO.Compression.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Csp.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-apchash-product.conf C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\SAVAPI\productname.dat C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\PasswordExtension.Win.deps.json C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\PresentationFramework-SystemCore.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
File created C:\Program Files (x86)\TotalAV\vcruntime140_cor3.dll C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A

Drops file in Windows directory

Description Indicator Process Target
File created \??\c:\windows\winbase_base_procid_none\secureloc0x65\gdifuncs.exe C:\Windows\system32\cmd.exe N/A
File opened for modification \??\c:\windows\winbase_base_procid_none\secureloc0x65\gdifuncs.exe C:\Windows\system32\cmd.exe N/A
File created \??\c:\windows\winbase_base_procid_none\secureloc0x65\mainbgtheme.wav C:\Windows\system32\cmd.exe N/A
File opened for modification \??\c:\windows\winbase_base_procid_none\secureloc0x65\mainbgtheme.wav C:\Windows\system32\cmd.exe N/A
File created C:\Windows\ELAMBKUP\protected_elam.sys C:\Program Files (x86)\TotalAV\SecurityService.exe N/A

Launches sc.exe

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\sc.exe N/A

Browser Information Discovery

discovery

Enumerates physical storage devices

Program crash

Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\WerFault.exe C:\Program Files (x86)\TotalAV\SecurityService.exe

System Location Discovery: System Language Discovery

discovery
Description Indicator Process Target
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\taskkill.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\taskkill.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\89C3.tmp\jeffpopup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\sc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\89C3.tmp\bobcreep.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\Downloads\TotalAV_Setup.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Windows\SysWOW64\taskkill.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Users\Admin\AppData\Local\Temp\89C3.tmp\mbr.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language C:\Program Files (x86)\TotalAV\TotalAV.exe N/A

NSIS installer

installer
Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Checks SCSI registry key(s)

Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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 C:\Windows\system32\vssvc.exe N/A
Set value (data) \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 C:\Windows\system32\vssvc.exe N/A
Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters C:\Windows\system32\vssvc.exe N/A
Key created \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr C:\Windows\system32\vssvc.exe N/A

Enumerates system info in registry

Description Indicator Process Target
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Kills process with taskkill

evasion
Description Indicator Process Target
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A
N/A N/A C:\Windows\SysWOW64\taskkill.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\LocalServer32\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" -ToastActivated" C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4182098368-2521458979-3782681353-1000\{7C28BC0B-70BC-468F-8E1B-E80FA6BC3D5B} C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\LocalServer32 C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000_Classes\WOW6432Node C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000_Classes\WOW6432Node\CLSID C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
Key created \REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1} C:\Program Files (x86)\TotalAV\TotalAV.exe N/A

NTFS ADS

Description Indicator Process Target
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 911992.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
File opened for modification C:\Users\Admin\Downloads\Unconfirmed 796962.crdownload:SmartScreen C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: EnumeratesProcesses

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\TotalAV.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 33 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 34 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 35 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 36 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeIncreaseQuotaPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeLoadDriverPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSystemProfilePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSystemtimePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeProfSingleProcessPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeIncBasePriorityPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeCreatePagefilePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeSystemEnvironmentPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeRemoteShutdownPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeUndockPrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeManageVolumePrivilege N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 33 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 34 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 35 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: 36 N/A C:\Windows\SysWOW64\Wbem\wmic.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeDebugPrivilege N/A C:\Windows\SysWOW64\taskkill.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeAuditPrivilege N/A C:\Windows\system32\vssvc.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeBackupPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeRestorePrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeSecurityPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Windows\system32\srtasks.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files (x86)\TotalAV\SecurityService.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\TotalAV.exe N/A
N/A N/A C:\Program Files (x86)\TotalAV\TotalAV.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2492 wrote to memory of 1628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 1628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 3676 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 1472 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 1472 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 2492 wrote to memory of 2072 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Uses Volume Shadow Copy service COM API

ransomware

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ffc603146f8,0x7ffc60314708,0x7ffc60314718

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2640 /prefetch:8

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4968 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5420 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5420 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5548 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3504 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6012 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=6024 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6540 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6940 /prefetch:1

C:\Windows\system32\AUDIODG.EXE

C:\Windows\system32\AUDIODG.EXE 0x4e8 0x504

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6784 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6844 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1832 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6888 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4640 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3784 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6256 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1296 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3524 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2944 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6236 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5440 /prefetch:8

C:\Users\Admin\Downloads\TotalAV_Setup.exe

"C:\Users\Admin\Downloads\TotalAV_Setup.exe"

C:\Windows\SysWOW64\Wbem\wmic.exe

wmic.exe path Win32_Process where executablepath="C:\\Program Files (x86)\\TotalAV\\TotalAV.exe" delete

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /f /T /IM "avupdate.exe"

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /f /T /IM "Update.Win.exe"

C:\Windows\SysWOW64\taskkill.exe

"taskkill" /f /T /IM "PasswordExtension.Win.exe"

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6164 /prefetch:1

C:\Windows\system32\vssvc.exe

C:\Windows\system32\vssvc.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8721238154864388040,3066988812159347611,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1

C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe

"C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe"

C:\Windows\system32\wscript.exe

"C:\Windows\sysnative\wscript.exe" C:\Users\Admin\AppData\Local\Temp\82AE.tmp\82AF.tmp\82B0.vbs //Nologo

C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe

"C:\Users\Admin\Downloads\HorrorTrojan Ultimate Edition.exe"

C:\Windows\system32\wscript.exe

"C:\Windows\sysnative\wscript.exe" C:\Users\Admin\AppData\Local\Temp\89C3.tmp\89C4.tmp\89C5.vbs //Nologo

C:\Windows\system32\srtasks.exe

C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2

C:\Users\Admin\AppData\Local\Temp\89C3.tmp\mbr.exe

"C:\Users\Admin\AppData\Local\Temp\89C3.tmp\mbr.exe"

C:\Windows\system32\cmd.exe

C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\89C3.tmp\tools.cmd" "

C:\Windows\system32\reg.exe

reg add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d c:\bg.bmp /f

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Windows\system32\rundll32.exe

RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters

C:\Users\Admin\AppData\Local\Temp\89C3.tmp\jeffpopup.exe

"C:\Users\Admin\AppData\Local\Temp\89C3.tmp\jeffpopup.exe"

C:\Program Files (x86)\TotalAV\SecurityService.exe

"C:\Program Files (x86)\TotalAV\SecurityService.exe" "--install"

C:\Windows\SysWOW64\sc.exe

"sc" create SecurityService start= auto binpath= "\"C:\Program Files (x86)\TotalAV\SecurityService.exe\"" displayname= "PC Security Management Service" obj= LocalSystem password= ""

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 11828 -ip 11828

C:\Windows\SysWOW64\WerFault.exe

C:\Windows\SysWOW64\WerFault.exe -u -p 11828 -s 4428

C:\Program Files (x86)\TotalAV\TotalAV.exe

"C:\Program Files (x86)\TotalAV\TotalAV.exe" --installed --installer="C:\Users\Admin\Downloads\TotalAV_Setup.exe"

C:\Program Files (x86)\TotalAV\SecurityService.exe

"C:\Program Files (x86)\TotalAV\SecurityService.exe"

C:\Users\Admin\AppData\Local\Temp\89C3.tmp\bobcreep.exe

"C:\Users\Admin\AppData\Local\Temp\89C3.tmp\bobcreep.exe"

C:\Program Files (x86)\TotalAV\SecurityService.exe

"C:\Program Files (x86)\TotalAV\SecurityService.exe" --run-service --run-service-id=7076

C:\Users\Admin\AppData\Local\Temp\89C3.tmp\gdifuncs.exe

"C:\Users\Admin\AppData\Local\Temp\89C3.tmp\gdifuncs.exe"

C:\Windows\system32\taskmgr.exe

"C:\Windows\system32\taskmgr.exe" /7

Network

Country Destination Domain Proto
US 8.8.8.8:53 google.com udp
NL 142.250.102.113:80 google.com tcp
NL 142.250.102.113:80 google.com tcp
US 8.8.8.8:53 8.8.8.8.in-addr.arpa udp
US 8.8.8.8:53 68.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 113.102.250.142.in-addr.arpa udp
US 8.8.8.8:53 www.google.com udp
NL 142.250.27.106:80 www.google.com tcp
NL 142.250.27.106:80 www.google.com tcp
US 8.8.8.8:53 g.bing.com udp
US 13.107.21.237:443 g.bing.com tcp
NL 142.250.27.106:443 www.google.com tcp
US 8.8.8.8:53 support.google.com udp
US 8.8.8.8:53 237.21.107.13.in-addr.arpa udp
US 8.8.8.8:53 81.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 106.27.250.142.in-addr.arpa udp
NL 142.250.27.106:443 www.google.com udp
US 8.8.8.8:53 94.27.250.142.in-addr.arpa udp
US 8.8.8.8:53 88.156.103.20.in-addr.arpa udp
US 8.8.8.8:53 94.102.250.142.in-addr.arpa udp
N/A 224.0.0.251:5353 udp
GB 95.101.129.233:443 www.bing.com tcp
GB 95.101.129.233:443 www.bing.com tcp
US 8.8.8.8:53 233.129.101.95.in-addr.arpa udp
US 8.8.8.8:53 th.bing.com udp
US 8.8.8.8:53 r.bing.com udp
GB 95.101.129.194:443 r.bing.com tcp
GB 95.101.129.233:443 r.bing.com tcp
GB 95.101.129.233:443 r.bing.com tcp
GB 95.101.129.194:443 r.bing.com tcp
US 8.8.8.8:53 194.129.101.95.in-addr.arpa udp
GB 95.101.129.233:443 r.bing.com tcp
GB 95.101.129.233:443 r.bing.com tcp
GB 95.101.129.233:443 r.bing.com tcp
GB 95.101.129.233:443 r.bing.com tcp
GB 95.101.129.233:443 r.bing.com tcp
US 8.8.8.8:53 login.microsoftonline.com udp
IE 40.126.31.67:443 login.microsoftonline.com tcp
IE 40.126.31.67:443 login.microsoftonline.com tcp
US 8.8.8.8:53 www.totalav.com udp
US 34.111.47.92:443 www.totalav.com tcp
US 34.111.47.92:443 www.totalav.com tcp
US 8.8.8.8:53 67.31.126.40.in-addr.arpa udp
US 8.8.8.8:53 92.47.111.34.in-addr.arpa udp
US 8.8.8.8:53 services.bingapis.com udp
US 13.107.5.80:443 services.bingapis.com tcp
US 34.111.47.92:443 www.totalav.com udp
US 8.8.8.8:53 aefd.nelreports.net udp
US 8.8.8.8:53 80.5.107.13.in-addr.arpa udp
GB 95.101.28.56:443 aefd.nelreports.net tcp
US 8.8.8.8:53 56.28.101.95.in-addr.arpa udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 15.164.165.52.in-addr.arpa udp
US 8.8.8.8:53 172.210.232.199.in-addr.arpa udp
GB 95.101.129.194:443 r.bing.com tcp
US 8.8.8.8:53 widget.trustpilot.com udp
GB 54.192.137.4:443 widget.trustpilot.com tcp
GB 54.192.137.4:443 widget.trustpilot.com tcp
US 8.8.8.8:53 www.youtube.com udp
US 8.8.8.8:53 4.137.192.54.in-addr.arpa udp
US 8.8.8.8:53 61.39.156.108.in-addr.arpa udp
US 8.8.8.8:53 tse1.mm.bing.net udp
US 150.171.27.10:443 tse1.mm.bing.net tcp
US 8.8.8.8:53 10.27.171.150.in-addr.arpa udp
US 8.8.8.8:53 url.totalav.com udp
US 35.224.74.90:443 url.totalav.com tcp
US 8.8.8.8:53 90.74.224.35.in-addr.arpa udp
US 8.8.8.8:53 github.com udp
GB 20.26.156.215:443 github.com tcp
GB 20.26.156.215:443 github.com tcp
US 8.8.8.8:53 github.githubassets.com udp
US 8.8.8.8:53 avatars.githubusercontent.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.154:443 github.githubassets.com tcp
US 185.199.111.133:443 avatars.githubusercontent.com tcp
US 8.8.8.8:53 github-cloud.s3.amazonaws.com udp
US 8.8.8.8:53 user-images.githubusercontent.com udp
US 8.8.8.8:53 215.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 154.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 133.111.199.185.in-addr.arpa udp
US 8.8.8.8:53 collector.github.com udp
US 185.199.111.154:443 github.githubassets.com tcp
US 8.8.8.8:53 api.github.com udp
US 140.82.113.21:443 collector.github.com tcp
US 140.82.113.21:443 collector.github.com tcp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 install.protected.net udp
NL 185.172.149.104:443 install.protected.net tcp
NL 185.172.149.104:443 install.protected.net tcp
US 8.8.8.8:53 104.149.172.185.in-addr.arpa udp
US 8.8.8.8:53 210.156.26.20.in-addr.arpa udp
US 8.8.8.8:53 21.113.82.140.in-addr.arpa udp
GB 95.101.28.56:443 aefd.nelreports.net udp
US 8.8.8.8:53 raw.githubusercontent.com udp
US 185.199.108.133:443 raw.githubusercontent.com tcp
US 8.8.8.8:53 133.108.199.185.in-addr.arpa udp
US 8.8.8.8:53 73.144.22.2.in-addr.arpa udp
US 8.8.8.8:53 29.243.111.52.in-addr.arpa udp
NL 185.172.149.104:443 install.protected.net udp
NL 185.172.149.104:443 install.protected.net tcp
US 8.8.8.8:53 95.221.229.192.in-addr.arpa udp
US 8.8.8.8:53 215.169.36.23.in-addr.arpa udp
US 8.8.8.8:53 api.github.com udp
GB 20.26.156.210:443 api.github.com tcp
US 8.8.8.8:53 api.totalav.com udp
US 34.111.47.92:443 api.totalav.com tcp
US 8.8.8.8:53 in.appcenter.ms udp
US 4.152.45.219:443 in.appcenter.ms tcp
US 4.152.45.219:443 in.appcenter.ms tcp
US 8.8.8.8:53 219.45.152.4.in-addr.arpa udp
US 34.111.47.92:443 api.totalav.com tcp
US 4.152.45.219:443 in.appcenter.ms tcp
US 4.152.45.219:443 in.appcenter.ms tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 983cbc1f706a155d63496ebc4d66515e
SHA1 223d0071718b80cad9239e58c5e8e64df6e2a2fe
SHA256 cc34b8f8e3f4bfe4c9a227d88f56ea2dd276ca3ac81df622ff5e9a8ec46b951c
SHA512 d9cf2ca46d9379902730c81e615a3eb694873ffd535c6bb3ded2dc97cdbbfb71051ab11a07754ed6f610f04285605b702b5a48a6cfda3ee3287230c41c9c45cd

\??\pipe\LOCAL\crashpad_2492_VDETMBALPGMGYMGZ

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 111c361619c017b5d09a13a56938bd54
SHA1 e02b363a8ceb95751623f25025a9299a2c931e07
SHA256 d7be4042a1e3511b0dbf0ab5c493245e4ac314440a4ae0732813db01a21ef8bc
SHA512 fc16a4ad0b56899b82d05114d7b0ca8ee610cdba6ff0b6a67dea44faf17b3105109335359b78c0a59c9011a13152744a7f5d4f6a5b66ea519df750ef03f622b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 67ac8896affd13e22c1cf40721571d1b
SHA1 28629d73aa1d8be4af1bdf58816c1024718f40ad
SHA256 219d8088e3c229bbf44e092f9bc3c26a5abe33caad5738d67abfc5231f5a2517
SHA512 fad31ce07c44e5cf84ce6c138131ad5919e1e02ea31907c7e9b5b6252b5f6c7a1f44d8d2164661cfc5772fd7110a23d4aa0c2641ff4ec52f9abadbc15b50a4ec

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

MD5 3e552d017d45f8fd93b94cfc86f842f2
SHA1 dbeebe83854328e2575ff67259e3fb6704b17a47
SHA256 27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6
SHA512 e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 9f0076ee83904bb6c251f696a121d6ee
SHA1 0c7995046c363338f9ace0e67c226306a980c4fd
SHA256 84003de958c722ae37453f0622f6eda682f06ca07c2fc4ed8f26dc0e7752321e
SHA512 455298adb41bcf1a99006302fc0cc520348d4a14f3f6ae581d49a68b6ba1071069a989090e3da92250b5823fac2ef8a9ee73440c43bb65fae6706a99bc7b5a74

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c5e4aecc9991e7124945593c3e264008
SHA1 304f1971caf2181a5db8bf6057068113ec668237
SHA256 eb1453eee10394a00f1d5aeb3c45819dd5c19f65a7dff197bad25801e783bb4f
SHA512 0e34f6d64ae4751f24c283778b121a8d354bfbe14e604f9a8f58e46aea3d4ed1a273e814f4c6ec0e6b101c8353411f4727b6db80b20a125dd759b6a2377278be

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 19609f93bb2b88caf5e9e7b9f268f97f
SHA1 4a6c6c0c3c3ea43df855a069cfb83b2d81065164
SHA256 e7d272b692723ce24d06164b3e97d03bf891f27dd47b10c30883624f124af343
SHA512 d548ab9fb36c5d8f865b7f769539ee543cd661f4a105fd6bca4512d0d555c6ce4b9debdcbe050f93749740eb9fb2fb198e58c712448827546d853587f5640a1f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a36d41390e8100e59b4ec8b3b35cf3b0
SHA1 2d32fa6a1bc7031a9e3158493c03c58cbb36e809
SHA256 6ae195a115bd0f7edd838c8b3e6e8b83a5a5a978a995e135a11c57b51f54342e
SHA512 cbad7ce05e96400839240a5aa177c0c8aa84d40052dce8b2e98cc255d0a9fb6145563f92ef7ca78a102170adbde96c063e2ccaf82a9d8ecf5274652e52abca8d

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57e83d.TMP

MD5 b02bb704b973ad4b091ccb784003b4ed
SHA1 4ba9678a4cf4c3031568f58c7ad5ae27a3b27870
SHA256 d86cc8e99f9fbf39923ffd8e55246837e0958e4d7d7995f68a800b113dcdec1f
SHA512 1ea720b1bf93c6355ce113c6d539c1f2bdda4ba6820465ea845187af0e5d98d34145ecbf209769363a2dd054708ddddb5ede8f6eaf01d4b6a160a9a07603b1fa

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a82f3b9b8311925552be8fe45bdd391c
SHA1 f22d23cc98583ea0cf0192c80b93591d0a5718f3
SHA256 106ce2fbe0f6c7466cc48203a4d3173b0634b555d13baeafba7a113900a66f59
SHA512 a1a41aa6ea412ca493e082dc9db61b61e242015a53b98da54b4bab7323bbb6c1ff62f2061773d35104dfd977c7004741b10da3ebe27314662a770d4eb8975abd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

MD5 1d9097f6fd8365c7ed19f621246587eb
SHA1 937676f80fd908adc63adb3deb7d0bf4b64ad30e
SHA256 a9dc0d556e1592de2aeef8eed47d099481cfb7f37ea3bf1736df764704f39ddf
SHA512 251bf8a2baf71cde89873b26ee77fe89586daf2a2a913bd8383b1b4eca391fdd28aea6396de3fdff029c6d188bf9bb5f169954e5445da2933664e70acd79f4e3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

MD5 d6b36c7d4b06f140f860ddc91a4c659c
SHA1 ccf16571637b8d3e4c9423688c5bd06167bfb9e9
SHA256 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92
SHA512 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

MD5 ed3c7f5755bf251bd20441f4dc65f5bf
SHA1 3919a57831d103837e0cc158182ac10b903942c5
SHA256 55cbb893756192704a23a400bf8f874e29c0feee435f8831af9cbe975d0ef85d
SHA512 c79460ded439678b6ebf2def675cbc5f15068b9ea4b19263439c3cca4fa1083dc278149cde85f551cd2ffc2c77fd1dc193200c683fc1c3cdac254e533df84f06

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

MD5 710d7637cc7e21b62fd3efe6aba1fd27
SHA1 8645d6b137064c7b38e10c736724e17787db6cf3
SHA256 c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b
SHA512 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

MD5 b38fbbd0b5c8e8b4452b33d6f85df7dc
SHA1 386ba241790252df01a6a028b3238de2f995a559
SHA256 b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd
SHA512 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

MD5 027a77a637cb439865b2008d68867e99
SHA1 ba448ff5be0d69dbe0889237693371f4f0a2425e
SHA256 6f0e8c5ae26abbae3efc6ca213cacaaebd19bf2c7ed88495289a8f40428803dd
SHA512 66f8fbdd68de925148228fe1368d78aa8efa5695a2b4f70ab21a0a4eb2e6e9f0f54ed57708bd9200c2bbe431b9d09e5ca08c3f29a4347aeb65b090790652b5c4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 06189441df3e6dae8e0644d8cca59c10
SHA1 ae160efdf714727ca2d5d8c18977c97ee89aca75
SHA256 dad995d1bc20c1a6042d96e0d4c589f7e064e5aafdc5ab6df2313e80a06ef27a
SHA512 75a666b6032624a71bc76dd4fc1d39a6732407eeda821bd2407ba6b5efbf18690c7d57827991a22f25074d7214e1ac35f5b92c4babe435434b45f790683500c2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c134ff56dac44629b5064190e27d6a9e
SHA1 e28ce4261a022c8e55dcf39893d5cf6b3af68045
SHA256 420c51ea16816fb2811114ff13e1ec106bb67b26688da7d3546fdfd7e17ae87a
SHA512 f99eb4d6a51046469af23f3c0e007e87b968aad56318603a6e6591b69a1aba948ca6293f725efa60dc626a5ed7faed0ca3067ed25c508b44678394f0419596b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 c3b73004167e6b2cbe75f8388a9208be
SHA1 f6def54e3e8e18d8fabb47a72effaf510d1056ef
SHA256 f5d477e3785c21c4e0c11e427ec196de1b0e3e4369e8613cd79a564209cd6b2b
SHA512 56358e8c8e7318e4b63e729d6231235c48a1a2cf33d43d6d9e1ac2d27b9eba0a863981bb1dfccfb525342ad2293153c03fa55c642ce749bcdd10406f10848db8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4b301cf6caa8670f018a0a10c03f4603
SHA1 3001cf3a9e6acb23b26c422914abc86ed453eea5
SHA256 b30c19da0378ea709a21e6e00dfabd36496d1252f46b9717dc8484099a339625
SHA512 9de7f3c6ce880b3e117c77a0e71dc4995d9c1d3a7a9d0f948543224eb62e2e5c0a123623f4f9d6439799c070036b890ca7ccb9af30a8acd721dc9bd6d71c1ae3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 108a79be4e6bd629814afab29fff5c6f
SHA1 91720d8d9fa666073eddf00fc8060eabb52d0345
SHA256 8a661790b37e31583b427beae688f8a0e0bc7475a307326b764dd720b49fb100
SHA512 c82cf2666d5dac7c675c515a892a086769425b34541f22c02d2794ac1b52757267366404e35a5880161e40ae9f254f77f87ff199437eaf6ce24bb3d37f0a11cd

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 ab36737c815191bbe9b9e6bd69e3ce13
SHA1 77342ad2709085e663f76f62a9f5b5c2df9ac09b
SHA256 449f4d8fbd2cd1087a2ef89c0b2f001e6050a1d57018cf437504c2974cf623bf
SHA512 46094c3d9db355eda39f45613edf982bf9571f17d1a454fbd6cff1829e9e6e54e5554432370fb736a366898f1e70897c20064647b843bbde8c06960a5ce8edc7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 5c36ea7258b49328bbea8bfadf836b08
SHA1 da65c04130c2dd3135afeaad60feaaba8f01fc72
SHA256 217ad23c8aec4528175b45260734ba2cdbace293fc7099b306e84ba675cfc7a4
SHA512 4927df0c3c393cbcf8ea5733b3094593966e2d7d9983859168de15516bcd2ea549061b9926211514c26f41a27f7754381aada318a435ceae3a3972f5366dff4e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 3d7085f37614013bf01864cd34d6ea84
SHA1 0f80f6eb41c1ab88bcfb95fb50d5ee1b1b14dbc7
SHA256 53160d8523c4b8f85ec7020cb11827eb2941314cc38721eee98c3122458636d5
SHA512 8110f0b300d8ff325eb92422dc23e4f077eac679f68c200820946b67d27d5f2a81613722e6f8354e3d6116f65c514ac190e9873da2233d3d2a302e8fb5ab6873

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 fd107a866a99a16491accd344a721a47
SHA1 85ef317eed0213c3b0d6d3ca6a268fc82d40a93b
SHA256 8d09a61bef2bb649c791e534f9fdcc5230a13fc556f3f07d5cc85ccc873c2f31
SHA512 ed924b71e81da2c6db17da862e6f0d81be56d6f7ee7bad55bade560d9618482af80db051cb9b6f218fbdbb91a16961b2f6429251e3871868ba303b0f896a6a3b

C:\Users\Admin\Downloads\Unconfirmed 796962.crdownload

MD5 1ff9a8056fe685d2e4beee2564304e1e
SHA1 4cd05d5ed753c848cd96078afa504f746e298f11
SHA256 0a7b0dc4bf1b251307803962a2f2b9ea0ff125607cdb916c42d23407d1fc08cc
SHA512 d5ce453ffbf943f673d1d1de7b97699f44353949cc421e5dac30fe4866d399a9c72707ebbdd55309e4a8ce167bf9ac388b185c51509ecb419a17eb57e252a620

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 8e3ccdd86e3a1650da219f908c5c3e70
SHA1 e8249ee93b6f2d75412e2c8eb88e54b22238c57f
SHA256 58748942655df3f816ff911565443b0db32310e8637f300f356db37d782a4be0
SHA512 f9b679787822743e78cc703d29246be894e90c95c3037bd5313943ee4e7094c3b7e1fdd4f57b76d1ec50f201a3e534fa81a1da68217781db8557155d75cc4151

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 778736d8b839f285eb8c448b8fb812a4
SHA1 e27bf7b328dbc4e44944fe83fac9e14141984fde
SHA256 e177c0e50db6740ff476f8044dd97e8928f314760c75ba41f05824bd29bd1e2b
SHA512 9922a5b954216c46de525c9a94cee25f4921bf82e8a09b7ef4b50f8cd24d24e6d66aa956dd0c71423135b2f802c6cae397eca9778a4fa0fd4acca188dbf73915

C:\Users\Admin\Downloads\Unconfirmed 911992.crdownload

MD5 8f5a2b3154aba26acf5440fd3034326c
SHA1 b4d508ee783dc1f1a2cf9147cc1e5729470e773b
SHA256 fc7e799742a1c64361a8a9c3fecdf44f9db85f0bf57f4fb5712519d12ba4c5ac
SHA512 01c052c71a2f97daf76c91765e3ee6ec46ca7cb67b162c2fc668ef5ee35399622496c95568dedffbaf72524f70f6afcfe90f567fbb653a93d800664b046cd5f2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 4eb59573e5a0c034b0f62973448e3308
SHA1 3f5a1584db528f64e7293e3b6e3872d778645854
SHA256 61b4c18484ae4a5d57dc57a9a129eebe1be8525b35e38c52bdfb40c6d18414bd
SHA512 6551348f3f4830a87c41ba989eeb09c1fc5d88856a9231cae62dd52b735f3b9e92c40f9aa68c1e05dcd69e4212758c0d1b0d5ddc9bb19365e82cd954f05feb85

C:\Users\Admin\AppData\Local\Temp\nsq4FE8.tmp\System.dll

MD5 fccff8cb7a1067e23fd2e2b63971a8e1
SHA1 30e2a9e137c1223a78a0f7b0bf96a1c361976d91
SHA256 6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e
SHA512 f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c

C:\Users\Admin\AppData\Local\Temp\nsq4FE8.tmp\nsDialogs.dll

MD5 1c8b2b40c642e8b5a5b3ff102796fb37
SHA1 3245f55afac50f775eb53fd6d14abb7fe523393d
SHA256 8780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c
SHA512 4ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57

C:\Users\Admin\AppData\Local\Temp\nsq4FE8.tmp\nsExec.dll

MD5 09c2e27c626d6f33018b8a34d3d98cb6
SHA1 8d6bf50218c8f201f06ecf98ca73b74752a2e453
SHA256 114c6941a8b489416c84563e94fd266ea5cad2b518db45cd977f1f9761e00cb1
SHA512 883454bef7b6de86d53af790755ae624f756b48b23970f865558ba03a5aecfa8d15f14700e92b3c51546e738c93e53dc50b8a45f79ef3f00aa84382853440954

C:\Users\Admin\AppData\Local\Temp\nsq4FE8.tmp\nsRandom.dll

MD5 ab467b8dfaa660a0f0e5b26e28af5735
SHA1 596abd2c31eaff3479edf2069db1c155b59ce74d
SHA256 db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73
SHA512 7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301

C:\Users\Admin\AppData\Local\Temp\nsq4FE8.tmp\SysRestore.dll

MD5 da046184a8d7269a0e138b0b0b9b2eb5
SHA1 d9bc5ea397857e17a86f80df1e50615eb6859044
SHA256 c5e335bd19fa798f120287fe3ed920296f899223942fd6b987585a765f0adec2
SHA512 9ee6965ac931839a5d61b4ed64bb3bbf434dfd10ff086c38a998ec6714018b5491da7e5c29e4f7dd7fd4a93b2f285869b20f88b4b0194c9ba7824ff7c9f03c80

memory/4240-964-0x0000000003B10000-0x0000000003B22000-memory.dmp

memory/4240-965-0x0000000003B10000-0x0000000003B22000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\82AE.tmp\82AF.tmp\82B0.vbs

MD5 a0679dce64fcf875f4208b823d4b85c0
SHA1 85abe3673db82bfe5b2c207dc98648e32afffea0
SHA256 85a07013575a6a890c7b1d26adaa52f17616c4cca673617aa1fc0992aa29dda1
SHA512 1e2740a09acc5b0d679acfd740feb3556638f1b6029078668bbb7e067b356fcecf23c5b317b02888822cc180c0eb5cb7e2caf63d92a74515ebc5a1031d80f3a6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 152e95ccf00602a84df2aea263042b80
SHA1 93bd75b64154759880e5d66ce33dfea9762eb370
SHA256 09985512b648e0b3724f519b31c44a6e992facc8a5235845adcfc620dfcfc337
SHA512 8b623c0f6c42fcc3e9933b935cf2ade7ba1164c839ba7d3b1372a79f051c3dcc93587e6e7b628a7d3c489c91f72b7276d37968e646c2d74ecf88b423ee0d9c48

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 53725cb625543285f195bbd3ab2b36af
SHA1 f047ff3940e81298f47c96807a114ce8eed35fea
SHA256 547f8d6f5368786e44a8184ed95d8dea3c333621ab220d22c4527a81da1cf24f
SHA512 2899539cb9ea94413839c3a0ad96bfac6f20869a90f8ab402cb004851f723baacb9c1245728ef0a08f52b5a3f78a723527b8222e08a57a47d24b5ce57c98b782

C:\Users\Admin\Desktop\YOUDIED 5.txt

MD5 05d30a59150a996af1258cdc6f388684
SHA1 c773b24888976c889284365dd0b584f003141f38
SHA256 c5e98b515636d1d7b2cd13326b70968b322469dbbe8c76fc7a84e236c1b579c9
SHA512 2144cd74536bc663d6031d7c718db64fd246346750304a8ceef5b58cd135d6ea061c43c9150334ee292c7367ff4991b118080152b8ebc9c5630b6c5186872a3a

C:\Users\Admin\AppData\Local\Temp\89C3.tmp\mbr.exe

MD5 74be3afd732dc010c8266326cc32127b
SHA1 a91802c200f10c09ff9a0679c274bbe55ecb7b41
SHA256 03fe34795ad0f91fc8eb8c9ebe8094541e4fb4d7095095f8b48f345c2a6d0f0c
SHA512 68fa03d640680e37614feccb56f4d41180724cb7c08ba25f9bea3830a44c03d635664d8e0255ab2d05d3613498f4a4dd4398b7971a2cb1c9ae3be93f944946e5

memory/8-1422-0x0000000000400000-0x00000000004D8000-memory.dmp

C:\Users\Admin\AppData\Local\Temp\89C3.tmp\tools.cmd

MD5 288bebe9f904e6fabe4de67bd7897445
SHA1 0587ce2d936600a9eb142c6197fe12a0c3e8472f
SHA256 cf965fcc5a7ca4d9245c706c88b4d5013fb84be27b0ec262facccfadf14bdca2
SHA512 7db8e7c1318bcab7cef2c02484a82f347a630443a644b546a5cc339a5a848d1a3e915255f9c357de6ee26817a55d1091d80e2a8e97f66afa5686b3d11ee56c3c

C:\bg.bmp

MD5 a605dbeda4f89c1569dd46221c5e85b5
SHA1 5f28ce1e1788a083552b9ac760e57d278467a1f9
SHA256 77897f44096311ddb6d569c2a595eca3967c645f24c274318a51e5346816eb8e
SHA512 e4afa652f0133d51480f1d249c828600d02f024aa2cccfb58a0830a9d0c6ee56906736e6d87554ed25c4e69252536cb7379b60b2867b647966269c965b538610

C:\Program Files (x86)\TotalAV\locale\it_IT.mo

MD5 9e5efee9c003ff0f7c23786b049d1baf
SHA1 623e5c61dc11d1ca88ebb6722ead5287e543b12c
SHA256 6e6e5ac92a3341cba3585430d460f74071dbff1bde2f79b8246810dc35983775
SHA512 22061fefc040800a40f487efb023807fb5dcffb68c2aaa04250fd4e0265b7de56f021da0adcd147dcbba1f60f78df998efb32c7996776abb0d051cbd496f5541

C:\ProgramData\TotalAV\updates\SAVAPI 11.0.1\on_access\win32\win7\avgio.dll

MD5 49e51045f2951fd248318ac9f1ccb18e
SHA1 7a09bfa925fb2703bba5b26ddeae1ec7e3a481fb
SHA256 73b563935d96d328d5e13d05ddc35f24b69237e4c4b7b183ee66aeeb3ccd9c16
SHA512 df00015514bbcdd6d0ff9c38485ee65d7700fb7cadd4327d12230d63f078da5e9aa5fd11aec9f8c741bdf7c84c84c38543af1f71ebc12a4477415e2c5ab9deda

C:\Users\Admin\AppData\Local\Temp\89C3.tmp\gdifuncs.exe

MD5 c47c6a5111193af2c9337634b773d2d3
SHA1 036604921b67bbad60c7823482e5e6cb268ded14
SHA256 7c4f20624dd062a6c71d845d05c6328d5a903ca96398e2902506591b231ed585
SHA512 56698b7b2edc0f94d0f7172c853cbe67ac682d132df768659ebca0c169091acb36ffd0a6874c26e2fb35117061c91c9eca4312532ba778312e3d63cc77ce1262

C:\Users\Admin\AppData\Local\Temp\nsq4FE8.tmp\AccessControl.dll

MD5 9e7d36edcc188e166dee9552017ac94f
SHA1 0378843fe1e7fb2ad97b8432fbdcb44faa6fc48a
SHA256 d52a83c2a8551cebf48ff7a8d5930be1873bce990f855ccab4d7479cfeb22e3d
SHA512 92c31355cd124ba28c0ff9aa8fa34d5db9db0b093edb8978bc3cf94e1f72d526603d5d5c1e221dcb2ac6648bc420f4df9847c2b1e71046384d827814a77d1783

C:\Users\Admin\AppData\Local\Temp\89C3.tmp\mainbgtheme.wav

MD5 1b185a156cfc1ddeff939bf62672516b
SHA1 fd8b803400036f42c8d20ae491e2f1f040a1aed5
SHA256 e147a3c7a333cbc90e1bf9c08955d191ce83f33542297121635c1d79ecfdfa36
SHA512 41b33930e3efe628dae39083ef616baaf6ceb46056a94ab21b4b67eec490b0442a4211eaab79fce1f75f40ecdc853d269c82b5c5389081102f11e0f2f6503ae7

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.inf

MD5 b9a877ecc51ee9f13d9e5451f8b12895
SHA1 45a8abeb8c295295e4952893452c54850f721868
SHA256 4bdc3b2fb007febf3718c453e08c590d00378fea4e2628431f85ccbb1099605f
SHA512 079cd60a4d3f6bc990119574a4d493571afbb24209f1a15bb0202d3c24c66fcec3151e132d84ca036f46cceabac34d1a20c7d1034f0bc487fe9feb2740fb95fc

C:\Program Files (x86)\TotalAV\mscordaccore.dll

MD5 87a7aaf5ae5b7de4e15572166ca95d74
SHA1 76ec73926d22b708904e01623beb0138009dec5a
SHA256 5e63a9d0e5a7d10a738a7ce4633bff84e223183ef2155b7adf80c211a2b80a77
SHA512 5f0b2761c04c5565b5232446e3ca77a07f4a15567fd3a5de69661e705dd872a3e87358d79d6f02e807879eb1e15934fb09ad2e066a805c12c67c8d2c917e696f

C:\Program Files (x86)\TotalAV\driver\amd64\LICENSE.txt

MD5 747025499b4a05d19a0e3431c634cdc0
SHA1 c93725625c81fef7ff8663bdc5d5df501a3586a4
SHA256 fa8e8f02f81de56cbf470b91de1f6fa69c3b39a996c6e1f057df6212324cc564
SHA512 2b4eb9ef2ef7dd28fa0b30f268c1ed53130ad79686a1f785ccaa925a3015eb1617fde45ffe14068a08ac2ceea34579aa07f0199da57ca057783d193759bf8b49

C:\Program Files (x86)\TotalAV\urldrv\wfp\win10\i386\webshieldfilter.sys

MD5 709ae7d4bb1817abf5b22bd5eb6d1943
SHA1 4123eb3773d91e5294abb1d1ad3cac52a34d5a48
SHA256 7a8748b1531e99f3549f579534e193fd9e2b1a96042313037d2aa6ad9c1e140d
SHA512 dc1f66be19368e7c9325a4f52e47b9d813912d06257a670ae42ba26206c751918fdf3a61eb2e383230ba6bb6a25865e594c5df80cb244ae1137e517d4dcc24c2

C:\Program Files (x86)\TotalAV\urldrv\wfp\win10\amd64\webshieldfilter.sys

MD5 b797771c87184870eb95d2e50e17a9e7
SHA1 b303acad4220542c3150bb979aa966c2640434af
SHA256 c190a676d707f290a0f6fccb60ecbc4b3b5dea5ea27d552095acd4110aff51bc
SHA512 60ced524fa3bb611b6a73734b7aa6bc30d10fdbf9914a8e4c79e1b79c6402a678fb4963a29f237418affba806ca39bdf766b229b7679d50431aa834e6fa99341

C:\Program Files (x86)\TotalAV\TotalAV.exe

MD5 cccaf3ebad69beb64c9973de315074ac
SHA1 7bfb588c11d01b58559af45a5560cf9b65633069
SHA256 1228ead05883abee346299ed08de684c7438af548b4a527dffe469777fb00987
SHA512 2697992b45a58845d782e9f31b485bc65130d3bf55e618ea13195e47e6492907a77c46ebe596f9851280b8d7fec6b429329c71d8884796ba18203a349b9a199f

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.inf

MD5 6fae3f1bb20b9e1f2ea6d8e0a1c35e68
SHA1 d281eaf5659ac3b6dfa501bb2206b8a7af86f230
SHA256 c17477ce4372a43268b01e398f438efa52729bb3718324be9ee1508849374f09
SHA512 f77032a6451e43e0b0c7e881afde1ee83fc542412ff6ee3dc9932608f1c61943f18da31200c4347e9373f575f5e6f2ee3ebca655cf9f190adbc12e5f7e7b5ac6

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.runtimeconfig.json

MD5 1bc39e80d6d10935c1e3c9503108e508
SHA1 a5272c88b3cff15e52f1f1ac348284fb962ec875
SHA256 202001a334948c50b6754226e1d935ef79b42e8b51c7c2311f5b86d4c3401acf
SHA512 5c7a59f20016e42f002585cad1998f50de5e22e7486344177fd61feb18f4d9130dc84e7d9c925034f3b3454310ff4e608ceff3b829ad3c8572803bba17c9dbda

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.sys

MD5 eb5c2402e2f402a19504bf6ca9c3e06a
SHA1 63aa9690c36d743951558422d841276c25cde77d
SHA256 f8d33bbf769786163105c0fa794970054bad34cc5985416af553df1d9a64039b
SHA512 9b6b7c06e904cf36aefc17e14a108e9636c3a8920a34960dcb26fa520326c7ff47f03c24bacaec6ba91440237fb16afde0df01c299cdd7a89c40cc489a3f0151

C:\Program Files (x86)\TotalAV\SAVAPI\xvdfmerge.dll

MD5 af329640a44f6dc93e395e167a0c80f9
SHA1 9f3c6e132c874ec689c2ab5ad21282f326d93694
SHA256 d20f7ad78d1d548ebea41f6b496cb2399f8186493564c777f192c9a0eed23f18
SHA512 988ce1e03736fbb4369bd5e0ffc52dae9c70811c65d11066d99a76e372fb72108d80c727fe4dd4e4e1125c927a68caf97af18009fb362048f408dbe36caba440

C:\Program Files (x86)\TotalAV\SAVAPI\update.bat

MD5 b862a1baac142bcacd391414d665a0a1
SHA1 79aa0c97010707640bfa3082b29fd61b1373dbce
SHA256 924f07591863b3e6d43371593a3c4d57bba93cdbf59fdf102ba72abd55e92879
SHA512 788f4e959fdf91f2c3a2a46ff9d1ed51f96c73238f3e9aaab9e2b2bd45759645085082aa831220c9ce023a7a741213538d852658b9cbe4b12bbee5705e1f2d7b

C:\Program Files (x86)\TotalAV\x86\update.dll

MD5 8fcfabdf2458336b061a06d7362f1c37
SHA1 ed669e2c73292d3a6510ed9d670bdf56cb7ca92d
SHA256 fc85d8cc5fe0327be1253c1f69ca48eaa30d9aa583becb6f1e678e7960e33022
SHA512 056eb2071e33efaa7ac52002a906008baf0f8c59f8fcc99c500510c327a6b2917922706c9ec05e12f716573d6d9321e28190f1a911f765d596fd4c0d4c882dec

C:\Program Files (x86)\TotalAV\wscf.exe

MD5 25330672ddf4763c86f65438ea2561d6
SHA1 94a602fffe514fdc9d3824263f6491f1342a9cf2
SHA256 266d4d9769b1498992fc953f2c82b9b6853b311f06adca63825a07c4dce72da0
SHA512 0cb2aea5155843e9ba4a5657acb8451665a722720f0e1d4a66935752aaaabcb56b032f31a5dbf4e5f4f310f28ca0d9e597c2f3f12a9a162e56063338db018630

C:\Program Files (x86)\TotalAV\wpfgfx_cor3.dll

MD5 52d8f7f0ab9d679209b707c7ebc8377e
SHA1 7042a8788ea40f29b2fab2ec249dfd9e8c6ed7e6
SHA256 69c03db89ad14cdf2c05db284d1452a517d7127bafd871334685d715f662d203
SHA512 8617663d2292ca05d1873cbf9cf2397a0e56214c5bf5d66d5b1c8e95658a5604e1d27656ce853d1306c4a21575e3fe45934a0b8e5bb256644cd064b8d8269c87

C:\Program Files (x86)\TotalAV\WindowsFormsIntegration.dll

MD5 0a90d6f7745945ac8b4ab943117a2997
SHA1 3bfc301f7c1fe06d24ae75792985ce0ff96d0b5a
SHA256 1bc138863ad0bd5ad76cbe133e6091e774c875e02cf070653eaf10dde099c299
SHA512 63825e8a0a5f085b9b513d14e8e3103921f2cf3a0250cea3bfcb03bc2e562543c89cb5ea92bb4bf12cf0b885dbf5248203ea59500bc0ef55788f2bae1498e346

C:\Program Files (x86)\TotalAV\WindowsBase.dll

MD5 d1ba0f8dcdb06bbdb31b92f21557aa92
SHA1 41d096383c3334429ecf27309c496142c09b59bd
SHA256 8f6d8283bbc65f2e5d101b6465a80b130060e27ed304301aefac5e370b4ee74c
SHA512 811b671d4d7271e682d5f94a0e1605784866f27545abe9dbe6fe10bc2a8a80240b15dbc9949f3bcba056fabca402707c732f32488f60d11029863073a350331c

C:\Program Files (x86)\TotalAV\Webshield.Client.dll

MD5 61de4c9a5119a54f7c114817b2cc362a
SHA1 3f3b0776526746bad4775482ad17c20821f99ce1
SHA256 8b29bd93b6e919f7098f0eacdc66d72ed25b3e9472e3c61a17ae5cb43419b8c6
SHA512 a6b6bfc70a1cb7fd810dbf4b320eff94beefe2a8f1846e7acc709ed92cbe9d6b5b750782ef189608a2e44011cbd5924fc34a088fbefab17fe8c1dab61b00be6b

C:\Program Files (x86)\TotalAV\vcruntime140_cor3.dll

MD5 1a84957b6e681fca057160cd04e26b27
SHA1 8d7e4c98d1ec858db26a3540baaaa9bbf96b5bfe
SHA256 9faeaa45e8cc986af56f28350b38238b03c01c355e9564b849604b8d690919c5
SHA512 5f54c9e87f2510c56f3cf2ceeb5b5ad7711abd9f85a1ff84e74dd82d15181505e7e5428eae6ff823f1190964eb0a82a569273a4562ec4131cecfa00a9d0d02aa

C:\Program Files (x86)\TotalAV\Utilzr.WPF.dll

MD5 263efe529fce04baa4860e5114aa847d
SHA1 132451c90e386912941b95d74f709679acfc4a74
SHA256 69465cb04f9d591f2fbeac213b9e4c2ca61b3f17f2e537528ec48b1205ef591b
SHA512 a7c83396cf84f0ca0bd7e1fab10a57b998016ffa73af7466ecc10b13ecc711473c0567125217b99f74de311296b54d4f841a248ab6571fa835e8e7926cd99892

C:\Program Files (x86)\TotalAV\Utilizr.VPN.RasSharp.NetCore.dll

MD5 2958f26b0902352fc73b3816efad4e4a
SHA1 38b9d9a075dc9fd24c9b18baf2068f3f67daead4
SHA256 5b9a3b0d0348b33271caaac006b2205d0128a246d74086d230501e53ec907732
SHA512 f993ad41614986e72310e10b414c3e232c4bc6e3f55ff1d15d4df731224063dbcf55ead14d57724ca39f75b9df60e34d4de3211ccfbb5d7d9895faab51364bac

C:\Program Files (x86)\TotalAV\Utilizr.VPN.dll

MD5 cf81d3cae034b4dad84060ef063e5765
SHA1 86e72fc9699b7674d503fa6268eae4a65e821e45
SHA256 a1cdc1133f8003c020ab7e2d9393a76eb11d3f9bb3e11f7fd55aef39d0f4800a
SHA512 2841ab2b445b180097112ebab21dc8554284c360d42d8c534e813bd2aa8e1d72a1815a5325d47558873489e444260870d811ad277477b111fff2e1d35246d5c2

C:\Program Files (x86)\TotalAV\Utilizr.Ras.dll

MD5 bda74b0b910ef7f8ca46d50ecbcf69a5
SHA1 467cde529a82b6a5e7f52049eb3b6326cf0f195c
SHA256 80927555d953ce14fb8b22ade23ee4b534b9e6b63a85939a3f41ef6553de7e6f
SHA512 f8f537ce90b16294e0577127016ddfda1c3d232ebf0a84c1e7c821793cbd47550f26027f9e5715667f572e00c1a683c7f6570579c2e9289deaf37da1ad9faaa8

C:\Program Files (x86)\TotalAV\Utilizr.OpenVPN.dll

MD5 3bba1a6b2a0a573013004def7d072f85
SHA1 15899568a637f3ec4df7f7bd1b23b9edf02aaa9a
SHA256 81322aeeef6a98186dceb13ea714194feff82bc2d33b5c42409d45f912fe1a11
SHA512 53205b4fb7d54d0aab67141d6209b6e8f9cf2974cddd7ca0f5f6eb95184760d89af6b628652ee49483f3ba7db59e6aa67294cf483af91a7ec74c2609e2053a49

C:\Program Files (x86)\TotalAV\Utilizr.NotifyIcon.dll

MD5 1e3feed90d5602cd617ab521ac90212f
SHA1 45f96effea4fee95c2ffc733724e42a988d70ede
SHA256 671bd4aad1a91b134c2fd4e1c4a48a82d667d936a49a60b4c41de2552d9fa868
SHA512 1b792747d6b8086d25828b22a329367bc59172b23297daa235436e0591fde5cad3738169f6a3c8eecdde18d88c2eb00ea2965b631bad2dd09c01c3a5247f0685

C:\Program Files (x86)\TotalAV\Utilizr.Native.Win.dll

MD5 ade3eb76f24c6c0296452433d35ed54a
SHA1 6bd0976acbebc0dde8d21c118b687991a2e1dcfc
SHA256 6eaf5cca444970d80abc62e95dc2deec1bcc4d6945e8d1b463c0ba40d50d43a7
SHA512 7c92157e5fa82215d4f259b3db953ddfe7850dd16ad263265d0ca5f31a64f5532b6786157a7b7643c8e7033f0f4630b7c13de233ec7d1ed4675ebf402b59d964

C:\Program Files (x86)\TotalAV\Utilizr.dll

MD5 34405f7bc238783edff4f7d27d5db5c0
SHA1 9054362111e4fe721bbd41fa0e58c871d2edb2a9
SHA256 1caebda591a0931781de7f1295a931f1ea1c7c99bfc27d1eaa9e9e7c385bffe4
SHA512 82eb90e8492cae875dfcab66acb3c95fe1ec67a627e9585c6d1fba0bdfb5abe0936a5eb2cd132be3ddd49e5e5490141271c35436040c882bccbef7f4c06af350

C:\Program Files (x86)\TotalAV\urldrv\wfp\win7\i386\webshieldfilter.sys

MD5 9508031dacfbbaf2595fdc9dacdb3b2a
SHA1 7b85a2830535a53068a8167093de36a3d3176e26
SHA256 3512260c75fe5ab584e7c072c38a9b17f4603c7b735d9e9e1e0b2f0ff901abbd
SHA512 a27287409313bd084510f92677111b92424c6a39eaf20e53519f563fe5a8d3a339b5e5d7399713164b41e1e22fc6ad87f6161f602ebdc74f9785f87e0bafc01e

C:\Program Files (x86)\TotalAV\urldrv\wfp\win7\amd64\webshieldfilter.sys

MD5 36a5f7f6601d2427426588ffd415ea89
SHA1 e69a5cfde38c82a6b0081e476fd83f1e3211337c
SHA256 16399d8faf4a30ed463b8db7900fe0e67aa981a519d324f32349ba2abd779647
SHA512 3379adcfbcb23cbdfc62390a0ebedde75810b1f90c19bb66ce142594994a11545090583cc9d71e4e28fb2bf875fd5798f9adb9e339ba9a146513734fb74693dd

C:\Program Files (x86)\TotalAV\urldrv\tdi\i386\webshieldfilter.sys

MD5 2aa6d30e357b9a3e63d178f244482150
SHA1 44577e1a2fbc916fc8acca1ae5c7958ff64f8da4
SHA256 3282e62445815de2e45092d9476f6ba5625dc50c96077845c2e32afbf8c9d2bd
SHA512 57964eb6f0e36a4eaf41e7586d1fb37e36896fa26687767012443898c1b59f8bd4900da1f639251ae726e60be8df97812a9b700d5064fcccc0343e59bbb2e0fe

C:\Program Files (x86)\TotalAV\urldrv\tdi\amd64\webshieldfilter.sys

MD5 21a332af5c8e929415dbde71db19b8ca
SHA1 dd908daf05b0fa89de836110e68f97cc54859d21
SHA256 b5ff1ea46318772e179c56e8e386f9b6c5831a304ebc4783501304aa2a9f8d33
SHA512 c0dad463aa71c1cfe2cf7de1b605be36f57fc49028a68b37e823ab5449f985b07d4c7b66e828aecbb2fffd240bab3f51d75a2d4ba43fb14674c0af50684d40be

C:\Program Files (x86)\TotalAV\UiPath.CoreIpc.dll

MD5 5478941a84114d61b7e0d58fd1a9ea18
SHA1 3f33fc1d6bb6b3db0cd6a94db659b72c93c252af
SHA256 2b825223319529860a85edb1267dde625f11719beb70b64a3f4794811ef74dde
SHA512 16f81df471e8c52e88d19010a0c3e26235b25cd79b59337fc52f145189ddeea7c11c21711d66e4345b793172920e7110806156e7a4ebf4459842e8bdb3391f63

C:\Program Files (x86)\TotalAV\UIAutomationTypes.dll

MD5 ac463388a5bd074e0c5f78faedae7a3f
SHA1 aa76fbb442eaa382551166d24ca7c484b9815235
SHA256 b6b78e5d676aafef787cd80e53d346e00d32d4c4b5f538b2bb4bf73aecd4fb44
SHA512 91703a92529ef366de0d13a0621fa0a6ef96d19144d33156b79472e0e28fbb79c00603e245daaabf73848190f04c3b13d4e1dbdb316c7037633c64f714aa80b5

C:\Program Files (x86)\TotalAV\UIAutomationProvider.dll

MD5 c38441a8d1c6af274c9dcaa36371ca37
SHA1 67d327632db75839da87a85859452943e8fdc83c
SHA256 1f1cd0d5ecd1b5cba7f0e13c47201368f1e2670a274f51ab3a6f6352b5472988
SHA512 c280c3d75d1d083337465a60c6ae1a1833039b925eac5066ffe423706cddbcf3dd66e61aad782829edcf59d160df963d5e5977726f12a4b64d7845ef1a532b07

C:\Program Files (x86)\TotalAV\UIAutomationClientSideProviders.dll

MD5 774dbd0432c038e0cd1f12bd9815b406
SHA1 dde22f173c178920b0c680d59ac692ec12170395
SHA256 fe614bc0fc3a928c692aa9a124ad23df2e8340589812128dadd175a5a7aa16ee
SHA512 f14f72318203e126ff0e1d97e6d5d27e37dbaf1961246cb5022032fd80e44cce1b4c7bb015291d6e9ac614c4defb3a379d9b1d71c359b9a158e977040a235fd8

C:\Program Files (x86)\TotalAV\UIAutomationClient.dll

MD5 f9115542337c422922173108f35f6a98
SHA1 fee4b41a513c3061f4bb040f26c9af39f0c7de96
SHA256 df0dd3fa1a3463a0e94a44b70bd9fa9f4e4e91ca7a9e0229ac86442614c42268
SHA512 b3d29a436582f86aee4c204fbe814a8d934a45e265e0144ca8e209e269dbf554bae281164cf687bce777547c67e20bc7052210e3335b8e1ba30176da53da53dc

C:\Program Files (x86)\TotalAV\ucrtbase.dll

MD5 6343ff7874ba03f78bb0dfe20b45f817
SHA1 82221a9ac1c1b8006f3f5e8539e74e3308f10bcb
SHA256 6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3
SHA512 63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

C:\Program Files (x86)\TotalAV\Trinet.Core.IO.Ntfs.dll

MD5 bea773dcb85e63a9bade222269c62367
SHA1 1572e3baa0c7d7335222acd435cab3616dc08c10
SHA256 4f750952c56bc9800cf7436c90ef983dcec12b5d156223522c9c2156d59b12c5
SHA512 a9c592a8675c96df544d20a0d0c004614789e034a2add26515fb4974d8c7caa98c018e92cb6e6df682f0f6e01c01e2d23395313b3564ef34315f0b4dab0ef1a0

C:\Program Files (x86)\TotalAV\SystemToolsWindows.dll

MD5 beff09abb00b97ab6c7b6190a772280d
SHA1 a1f9a9f65d94a701057761e1d21c2c2a266ad93b
SHA256 891d80bfc25e80de19ec819e9a4d3059d40a22a259fd349a6c2f5aa1492bf352
SHA512 235224d4eeb91ae50236ff7f8a43e10ebc6f1ba2437dee6d47937c1511f97c8692ee3a86d83f2532fe6b876a5996a1b53730998c311580a36cb3056086fd7937

C:\Program Files (x86)\TotalAV\System.Xml.XPath.XmlDocument.dll

MD5 f9b0a48e6992380cc8bc1125ee3b7df1
SHA1 4eb18e5115c8be53a61bf8a7092c479917c1ce37
SHA256 5aef6270411213995e83fc1c886c2545ae7f69d3f484f0320a7ca373f66a95b7
SHA512 db762dfe8d4724416dc5924e3d1aa1f7685aa20788a8bb30b8b2135265a03281182adb730bb122364676088bfe6cc2f19deade4bcb53f4943b2e60182a57c88c

C:\Program Files (x86)\TotalAV\System.Xml.XPath.XDocument.dll

MD5 85df03f8eea82a8997ae5d5e7216f516
SHA1 c7651ce2617239ad1fb2efc0d7afdf586a6e4309
SHA256 8ba41be47a40f344928c92181640b5db841fb325500e3fbf772e3cf4ce78d056
SHA512 62d2d220d9e1ae36c5c88af9740ccce186548deda39089a9c7703b8a4855ef3d24666608d2ba5b8a97a6779ac75d5286c667fa8380a12e49d4c2cc8a026d50d9

C:\Program Files (x86)\TotalAV\System.Xml.XPath.dll

MD5 fd7b5de88e17c734cd46495addd2e9b5
SHA1 6bdfff284a9039ad0baf1c01ed5a1b16465ad9b5
SHA256 fb076cbc2c2998fdf3fb59c1a8a3ee7bbebf9def922466f8f200b93076263ca4
SHA512 2f67c81c64d1d5b99d2c36bbfcff87eec7c22a70c744dba1e67a8040464db883aa0a5ccd268aac15803bbded3a309c4ca7b5d04415c7fcb6e8e3e2d6ab476ba2

C:\Program Files (x86)\TotalAV\System.Xml.XmlSerializer.dll

MD5 c89966f292c5e6b479c2b3aad9c8cd86
SHA1 836c1db80dfbfab4453df6d7eb01f82ee7c3d5f4
SHA256 38019b08132f45e928cebdc0312a0aeba3f71572192a682f207e43bb860048e6
SHA512 6ee43e72c97263423c415af8e013595ffa35fdd41c4e992913b69280d86a4af4b28ed3b8996cf873c135aee0c0dd1ce0ccc2ea47be09641307cd91bcc3a35574

C:\Program Files (x86)\TotalAV\System.Xml.XmlDocument.dll

MD5 b4fedbf764780b7dce28da95a420d697
SHA1 4941b0a0e9511694b5d27cda36877b4dad89cdad
SHA256 a5f438c4e21d1739df9595a0a9fb064de2b74fea35755a74633cca5f875d4dda
SHA512 55200562f072f04acd2c9e03fd0b8ce379e329e9e7435d8d0d97864712ea4f774ff1b92bbef30b3856fbdf7ea80323dad4738ce6f36baef642b75ed4914303c2

C:\Program Files (x86)\TotalAV\System.Xml.XDocument.dll

MD5 0bbaf643f66860420adf5ebb16fad642
SHA1 27221e1ed6c03613792ad6c14b3446902d624b4c
SHA256 a284999ea5a18a713ce7f63565bb8c089d70b261de5b9835825e37b295b510e3
SHA512 c0ab539ba2018ba06aee3050724ab0be2e463b7b63b227d544fa4f415dad624ae3f938872983be28deb31ae81f6e0cd10db71acaa8d1492c0fc90d2aa37a1132

C:\Program Files (x86)\TotalAV\System.Xml.Serialization.dll

MD5 f3e53f561f28a72396d8880b5fd43061
SHA1 e6600eb8b032ed4b45aae94d0b16a92e316079ac
SHA256 fc6423505981d34502ec151c12e462dd87614167a7652f1cdec3964ac41757fe
SHA512 886000f017296a211de5dd020c0ec0529f5fc483231e2391506e56a23961ada65b0f8d05b48e5ba2160ae0ed11c3c3bd014e222cdf903111a24368e3ef04ea0f

C:\Program Files (x86)\TotalAV\System.Xml.ReaderWriter.dll

MD5 b9e09b548bdb184b83a5588f598bc4aa
SHA1 5aad884ec792fc88fd610663aac11adf3fc7de13
SHA256 e5d1bc0eca4b452c6bf1ac792c9296397d8dc072195147cb66413748c12e3318
SHA512 a8b4cc181d15638c5e82c28b51d23631780395ff5945de6ea25547498a7f43fbcf3c12b0877b5bbbb60d08e42aa3f63306396047919bb9f626eca9df7e6234f1

C:\Program Files (x86)\TotalAV\System.Xml.Linq.dll

MD5 992c84a8940aa608d19b3d8a7de37250
SHA1 1408d2e802e482b028e0a74893b76f24050b0e35
SHA256 ba4fceca075f4bc010a20506237f939903f4b0dd39fc707cc2ac9678bef88bce
SHA512 673bac1579366398faf5a620e664b72f51d567692a729ea4c5d1a1c93b1e62149c5d2bf31cef9da23a571c95074a438cfa1aafd97693ddc35bcff1d536c342be

C:\Program Files (x86)\TotalAV\System.Xml.dll

MD5 29619d04b8d76177ac3aa6531850d780
SHA1 74663ff0da33fee097e640efe61ea7ac3ef5c0c4
SHA256 ac8617f3ea708d5c8ccd5801030713ea7366a80f99ee0f4bab74212e98ba917b
SHA512 2b7769ba99166d5eaf56142ec495c2f39c5b9bbc56bf115ecb73b82c18b2421fa722c8293666de337d3d28f599e21778a30944e04a5d42f8eb3b8c37056a3469

C:\Program Files (x86)\TotalAV\System.Xaml.dll

MD5 0eafae3a741222c0c70c684f95ba0ca4
SHA1 d637d064819f6e9c26c42646f3c20c113ebea664
SHA256 4c00761f3ae97b3925442e25654dba81a033e89a678109c276668202d12878b5
SHA512 9e669c28f9e242d409b167f4e16217ce40b6daced6bfee9b201f9596de748043631d6edf3b743253d36cef43314c006869d3944117b88239e07682bced0a9dcd

C:\Program Files (x86)\TotalAV\System.Windows.Presentation.dll

MD5 b0026d4bc150bfcfaa635cce3c0274c1
SHA1 554e69420dc20dacaf714627c67be5580d192835
SHA256 1e26e9e1dc838a2daa84ca5aa4102d0fa0e2b2003d0bb4f28265f18725e3b019
SHA512 7bccfa7e72fd89bbe2e020e83a241a1b2967d7c741cb83be95d25486e4a97d8e0097e88cf09fb80b16491ec0ffb55a4a7f793f03c54b684cb0be240acde88eb8

C:\Program Files (x86)\TotalAV\System.Windows.Input.Manipulations.dll

MD5 21a4ed44f42411c0eabbcb9d557ffe75
SHA1 72d6911b4a9e2c18f47c31bd036694edbe05aa10
SHA256 d030c8145d86fc3e2765c89765ea15cbb157c06c7faea155f26ed39e2e50cdfb
SHA512 e70e97002a9f447147535ffcda5ed9fc1942209e2bb95588551006692cf76b07204d33f906ec219ce2fa67ee574a44c910dd293ac6037260753a692e584f9600

C:\Program Files (x86)\TotalAV\System.Windows.Forms.dll

MD5 ec5a7dc7bfbcab037901f174b52c7bd5
SHA1 73a89e6046617a3af7ba724f92defb0365761a11
SHA256 a76af35171df472e387dc467956c6b056e19a43c1e0e09f89a1572628c54fedf
SHA512 33548b655ea172de39c216e959f13db8aecea63780b4025b2235e097ecc99f732793548bb03b481203abf28905fc4f23a5dedd73591549c01699b6249a3d5ae3

C:\Program Files (x86)\TotalAV\System.Windows.Forms.Design.Editors.dll

MD5 59a01daff776bbfbd979bde411b3f560
SHA1 3c74c9b82065a232e281d90b8f822c9cf81d4cbf
SHA256 75bdb451824e01c715f233f830238ade3e272be34c71bd7a2df7aa1b7efce2e6
SHA512 ccccddea85489c9687b32f66f0a0db638243d739693e7a66fce67b4801053ecd01c8a52eabf00fbcd0018d9f5f0b60da3a5910d26814846675299f8651f90d9a

C:\Program Files (x86)\TotalAV\System.Windows.Forms.Design.dll

MD5 9e214e42857781903f5be6b42ac89ddd
SHA1 185c472431ca8c94ea9c49da9edd4a981a2a7cc6
SHA256 5ea9190a7c0b339365d03c0c48866746cf2ad3f0e7640ad54b80db954fd64d96
SHA512 22b545d8429f0317a75662bf3640fbd88d7587d4fa1a3bb0f79778e7d326b25ba23a8ea0213b43a962bf2b7f0a72105891f346f15fcd12c6f8bdb0743f0b9274

C:\Program Files (x86)\TotalAV\System.Windows.Extensions.dll

MD5 d22b23b27ea42e5cb673474bdfeb4177
SHA1 fed248f1c6b4f9c726cc82d68b2f44f7d9597142
SHA256 8f5587ce58efdd95d3e07077b56ceb0a34f42613f10458138e4a446aedc7d3a5
SHA512 b06873684c7e30432ecf0981a997c168462039913a097375919da2329bdc16896e9dfb626c1564d6f331339ee46efbb78f36a2039c2f86b9ef751ff89beee0f6

C:\Program Files (x86)\TotalAV\System.Windows.dll

MD5 718ad855af94c8999ed3ef8d6c6bd425
SHA1 12c6ef3b222cbfb39270733519857562fa2d0953
SHA256 2c0db98ff26ed75ff5a0363d71437fd68f2aa32d07fe191ee3d5682d2e067f5a
SHA512 fb5d1f5af77d6c4beacf44dbc9d3168457419465f03c1420916512e57c4718967aa5b58b3ac665c54ab75d8c9fc5ab3a72c0be03d7b7c19d8f273ba3e662c30b

C:\Program Files (x86)\TotalAV\System.Windows.Controls.Ribbon.dll

MD5 359717d50a5029f8dbca072716138250
SHA1 d43be955d0d7dc0fdcc2fc24b5764b5a9eb7eb0e
SHA256 fcb319f1e12b5082950402efc159ccaba132b32135294ae3883dfd0326cb2e9f
SHA512 90b65f57e8b1af5f1cf239a83ecca6f6e3f024ea7b9e75b2b42dd2bb0b36ab93546c43fa5bc1331919e26128b6b0693f178041ab45a63feadf2a95e92d3be507

C:\Program Files (x86)\TotalAV\System.Web.HttpUtility.dll

MD5 5452b0c5e2a0e6fd12f30e9db446a67a
SHA1 4fd804bc62445073a3493b2d4afce8b39dcf69b8
SHA256 0e78eb3300d85ca6619670c01a7331403fac62b009eb1bb23e1df557602b24bf
SHA512 06553acd0e0055600d1b4a02e357fb5d5dbc58dff5d821b1f128b2f2d02fcdbd4377a3f46b3fff0ebc748b2b96f3fe92d7bf002b8bfc767cb4f5134b48923c3e

C:\Program Files (x86)\TotalAV\System.Web.dll

MD5 ee3c4a983ef4ee5e709458bbfe276823
SHA1 cfcdc2d90c5f6591d404a869120468ebb59ef97d
SHA256 609e02ad9d44a40a448b886acae4b593bd6e8ab34ba308e9da80e377a7401ef2
SHA512 5fd35478021ead442e595ae95a35225e10952c909af461d250e03558d37c2e18fa7082d8fd18f3ff91b7748b6973460e86283115cf92cd8511f9d8db861cda5d

C:\Program Files (x86)\TotalAV\System.ValueTuple.dll

MD5 b1c7225340b294d227ed9ac1f6e6415e
SHA1 06f19581321691f11ceb47cf68d1ecf26ac615d1
SHA256 38d2f423a1aa49679bb8ca8dd29efda20573fb43d387373e96dbfe173cfdf7a7
SHA512 a079999aeb6ef1e29915e4fcfd0a86af14cef90b03cf6dbb5508c59b89732cb4cb97d98afcaaf4cb64d24c2b2aaf113aaa8bd30602e3f55df815f314563979d3

C:\Program Files (x86)\TotalAV\System.Transactions.Local.dll

MD5 e658b1851e7774c15a7069dd044bbed9
SHA1 53124d5141719c688986d2a5aed0843f5e983b05
SHA256 abe8f895ad18cfd50fa1705f50855ca563a92d8bba6ad649f2bd39aab3930625
SHA512 a67bf210a901b3b17fed576bf9ffae11faf9d66e2c102abb52225b257c392baefc31955bf98dde175308fd727c056e8c7567e71d409404a6c10df0145c14ee52

C:\Program Files (x86)\TotalAV\System.Transactions.dll

MD5 26bc0a5c83fbaa630d58e4c37b30c200
SHA1 bfefb3fe6b366377b20806f24b1bf1d486e03d85
SHA256 b0b1767ee54ff87659839a260f1553d4cadc0ec402b121328c0918757ff5787f
SHA512 5903a91ee5f6308677c3f39afae26ddec90caa1a8b5fbf261097b3530a8733a78ef80bcb2b61ffb372ec740995197bd84be5cd458efce880c066f55d8a6f08b2

C:\Program Files (x86)\TotalAV\System.Threading.Timer.dll

MD5 daf144d20e5066d5c95dccb158c88a97
SHA1 366151dc10a7bb7a789d2eefbafa0df567e515ec
SHA256 e3ccf9d37b3e20427067285f8588e28613ff705310da9eef67fa36e9da6ec8a2
SHA512 87e3f313be23e54f7821ac054cb1cf09ec0f01665d533406477abcca6e5ee50e70e6095d72c3ee405e0ff078f8ad98cf5fd355f2f46d78b01b20c332b199b517

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 97f3a5e9d2e23d02801c96b5995f4040
SHA1 0acc21103e351e386c109945f10b06cd458f7762
SHA256 d17c5ed785069893e87c5801aef8b5658d9d75df653019a05794f46406f97d89
SHA512 23a566f31129a8ac1c401ed7464fa2c029edfad3559cffa469ab7e1b6ebb6750bd83789feece253e72228d10f5aac78c6aa7e92699fed06c1445c6c2f28b678a

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 d8c7acbdc3d0f1430f4fe52e36952b11
SHA1 31f118e5ba47411bc5509a214ab263dcdef5dc63
SHA256 cb8717e684feaaab96605a4ee29400c71f5ce0e20bfbb73ff1a1f659b44d2c1a
SHA512 358f81c556bc8f176020bbe33c48ee237ec81e9c76dc912dfe89f65afefe305c2a63e400281693745a1d53e97c6e995fbec60647cad961557cef51795422bb3f

C:\Users\Admin\AppData\Local\Temp\89C3.tmp\jeffpopup.exe

MD5 4151b988c9d5c550ccb6c3b49bf551d4
SHA1 10ff979be4a5bbacaf208bdbb8236b940208eed1
SHA256 5ec45cc1a109f556d0cd44ba48d3bf11af556ee66dd8b78c94d3ef0e93735e8e
SHA512 c73947b534741c29340550066cd1a6b7cbb4387f3be8303f2d1d0cb21c6f430e0415c27daabc82d32570f421934db78dc840403de18aef09d5a4f0cbe4350e4d

C:\Program Files (x86)\TotalAV\System.Threading.ThreadPool.dll

MD5 fa937c62a0c52445b021bdd6ede175f7
SHA1 b91c8d10f971bfc9e12f846bd1be7cf29ae6c89a
SHA256 3358e61263af81d99e8995441d012a8f75ca8d5d35e8c7c3aa6685c89f52a691
SHA512 9e1fc7726447611182ecddca0f578b657cfe2e9cc8f4685050f3edada8b4b28e619f81fcc343e1be4da4ba98aa8f6a823e3f82bd1ef5c0e6d0010479d7fa8d22

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 ef45a16e778ec6a9834b3c94e5615ee0
SHA1 723d9f7c877f6fc4d44b3dd0e9ab6681918ef988
SHA256 c98173544a26e57a9b4cf230fb5c61189797dfee64a3ae90fd265315d5ae82a8
SHA512 f0faf762f85cd41bddb18ae0564087e3dc75884c633e9bf9b3c40719ea8a3cccb6e8b5580002bd696846332fb9334823376872b1427cdf0dc8c21eef19d20a44

C:\Program Files (x86)\TotalAV\System.Threading.Thread.dll

MD5 520073af46143bc7128f8b3a6de0a2b8
SHA1 a9639dcf892633231b65552ef7c748feb9362435
SHA256 926e642b0b6cadfbc3a4cb11bb81454eed8adf50acbaf19385c2ca40decd40d1
SHA512 aa086ba704a3f75a761af0e265271abcdd10fda6d66076c4462bd74eefc3987ecf42230dac6df05a0d56b79b8bf8664163dccc1ce87e05c5f4e5dd886932353d

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Parallel.dll

MD5 6dcbc3f77f425b548c5a9e7b2a47c38e
SHA1 1f094ab1a99ca6a0743771429e8fea52cd60d9f8
SHA256 af07e133114232ef98bb98348916ae7eec8c46ef2a1b12e572d2b728c76bb19f
SHA512 19ec425392790c3f3eba4042e23afe0e019368df0b3206861bcf1a38023358d1ae6a685f99710983042d2fe6ffc6320053f8117ba8a34515c1e9335d7d64298e

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Extensions.dll

MD5 8755ebd05994248ed598bf950c089d58
SHA1 382e2679a2db822d814742f6a67c1d655823b09b
SHA256 abd6518b314792fac1c281e61ebd9d0ffc654a7b9204cecd3fc5927641c5bbe4
SHA512 69653bfd8687f82384ed24b21a64541be1e1165e1832a817d48b6da0c35b6d2a3559cd669cea4ea1482e707e5e62fd8d0b77707784ed99d7282f1cbea5480267

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.dll

MD5 0dc41a0a77de30d1838cf6f183133089
SHA1 dc0db3350fce11c3e742117816db053e72a61a23
SHA256 8d2942e975aaf6cf8217f65611b4f64b0dfa15e06fad1eb621d368f3e77fd1b4
SHA512 3ff9968ca53c8e011d2c9a8ddb73d1457923961d16665ec72ebbc725c5aa456605727a74af7716b7ec22cebb06346b765ef0722525d6d66f99c6e7c9f84a8c0e

C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Dataflow.dll

MD5 e7d3f3d33047878beefcac595ee8b1c6
SHA1 c2fcfcf09b18aec9b9e4d77f57894720339befed
SHA256 07b35ebd9a0581ab44d458c53f13268e8aacb98763148f90b77f267400c6bbf4
SHA512 8da9059d3937e857682a766d9ae9cfcc9f7ea0638ba30e683226b5582fbcb333381f8f3e7f10c8d7b27944fba2166fc30b80ac72c349e589486c0b12fa10112a

C:\Program Files (x86)\TotalAV\System.Threading.Overlapped.dll

MD5 69302840464fd65d319287c61c6a3cc3
SHA1 3b880344c5e371f3cdfd266686854d94a580ce7a
SHA256 f9c7b710fc12daab8851a6b7dac3a44283269283765a991e7d740b8309c49104
SHA512 827f4921d08137f3f165ccb14a18e2b7c197977009b65ddef6473d8e47859d6d6b914c43ad6e6d2b158c8a31635554f43dfa1f416051739cc0f9303a444a78c7

C:\Program Files (x86)\TotalAV\System.Threading.dll

MD5 14407fd6873558448a79d6937dda51da
SHA1 94f506b0d0109c62fd218b904d9366bbe50d8751
SHA256 7bce0d29f5456cd7455afbd97d71089c1802ed423ff9c9299cebef30978f3c62
SHA512 e0c56f4c35a8500f4515b2250cdab445697ab3f15fc59e33c991b962422569a0bd1bfa563b785d705f4554fdb0f8f32b12733321ee8046f65b95d00b326cc642

C:\Program Files (x86)\TotalAV\System.Threading.Channels.dll

MD5 4681fd45a6a89eb8440962b37bd343f9
SHA1 dfe9f5e674bfba072e4f5b469f55773093457e7f
SHA256 0772931ecddc0f337c8702ddab477e37f72d779a225a4cc147067d23a5542f14
SHA512 fdf2ac6a72d2e8c7a6777a7ab08349877b876694af90af79db344558d2d9c2b86bbd0537cb1ae6ebf3035624428881760d9fc3d852b59644a8d5fb817487c0aa

C:\Program Files (x86)\TotalAV\System.Threading.AccessControl.dll

MD5 6d46a78535c08c1cc0b2bb1743f2e978
SHA1 2b6dcec3e8f8db4a61ea6c388853220ad5ebb445
SHA256 3dbc176f20cb9dcd3a66c4d45d7b473d7ddf5945fecc5b3a824e511f4296563d
SHA512 3a08b5cf784d9b1e927d68096a8e961744b3d48d845ed757e4c5c786f6e932d124470d8f56c62ba75b74cceae77f4239f0d302d0c0bf9f89bf17298d9e96cc6a

C:\Program Files (x86)\TotalAV\System.Text.RegularExpressions.dll

MD5 1a822027278537f978cf44375324f409
SHA1 38db67968997a1dbe8ee62bc57d75e05cff915b5
SHA256 68c3d90e812ba3f85abaf3115b16a836eaff05938665ad08fcec8dcbe4ebb025
SHA512 88196e22869dd5d159befc3d4615e7ea576fc8e85c1c3c50be6a0b9e36d17881d1fd5f371b85d27d5075e1a0c2da3f48bf758e7d8b672a5da33d58223eaafac7

C:\Program Files (x86)\TotalAV\System.Text.Json.dll

MD5 48112a26c30f6ab0e3147c19781f9a95
SHA1 f74bdc8fedd5155b6f6b05396d4d71761420104b
SHA256 cac807ba6fac5a4143b0a566af8b74837063c6d5f7d6ff768152e7894bc066b0
SHA512 a151b2356def8e14e30a22b08e604fbf63d45edac819ed972924c2f636768c01a4f75e72d911c2d96515098357c1d54d03600d949c87e90a69fcf6ad314a68b9

C:\Program Files (x86)\TotalAV\System.Text.Encodings.Web.dll

MD5 d77768c5b136738822dc17848759c273
SHA1 74030398f47c2fccc1b7ea397f14b7c5fb9c8f44
SHA256 b3507c7ef158f6c8b53ae24067c0f47cebca9c8c809021952d0e7eb8b13ebd54
SHA512 987ea9241fc320cb246f1b8347ab99248642dafc718a83c5e00dfc17ac9668bae35cf6c26f90b45c9ffa5654ed88f52803f41ed8c75090fe8194abb2b7f07010

C:\Program Files (x86)\TotalAV\System.Text.Encoding.Extensions.dll

MD5 97841b84d7abdc787982ef00e8e8cb50
SHA1 0b49222bd54cd700709ebda224df72248c85cf27
SHA256 c2c9f41c1be3596afb8eb4fce6e21867917a14351d2ab01faf9d81395f6c976a
SHA512 0a07c2df770f569702c2a2fb8d26faa0fa62d1b8b83be003433f2f60e2ce366fc8393cf5d1337d136797fc28eec9753e609acf5c5a223ea1b012162153024ddc

C:\Program Files (x86)\TotalAV\System.Text.Encoding.dll

MD5 f6171bd56f8697584d4df2a4b3866ae1
SHA1 62afd05f2f293dafbab3a2aa3c039b057cfab6cc
SHA256 d2e860bf41fba3b7aa9641e2121adef6a797353b31e7d14a581d250436669fa8
SHA512 8e3139a36ebb37a722837148da9d1858082966ae986f57a30a9a118d83022e1cf08521d385f4f0582ade74ee1e18ba63dcd9c9647b5bebb2f32be32672b5df31

C:\Program Files (x86)\TotalAV\System.Text.Encoding.CodePages.dll

MD5 d1f3cbca19f67eb146480b577b931fcd
SHA1 acfc89c89166d1c588ecfc281ded70d5aa439d21
SHA256 6cd6df23521771e17e24dab563dc5816403f87c86e5c0948320aca5cdf18e271
SHA512 3026ff16006257672dde064a330885408229eae6d37cd126c7c6a7ce7b6f63e65a087f0cf3331772a77dbae2f0cb66065369908e462a49fb4d0f19ac87b68495

C:\Program Files (x86)\TotalAV\System.ServiceProcess.ServiceController.dll

MD5 07f6b753e85bb69e38d866e5fd428aa5
SHA1 074b4652f8bc5389fe56f2d6f3a614ffb27bb704
SHA256 1fb83e4a791c8e25c12a91ecb99646b53e7b61fd26ca8af7b843e85548c9c81c
SHA512 9e6f67180422197acb49cd6a05bfd54ab3153cf9ff4dfb3eed89c7ed0e9e8931a192990cdb5d6e7880fae45257340c80e177dc122083c01cfd1ac9743fe512cf

C:\Program Files (x86)\TotalAV\System.ServiceProcess.dll

MD5 baff65fe62f0297fde0ca86c1a45a52b
SHA1 2707c063ab78c88326276fe72f401c59ce5b4bb2
SHA256 49fa12bee017d82a95f0cdc2267b06588ce8f592774dcfbbcd68cfcadf5b4ab0
SHA512 8a3dd74a52585f284f869d44e964df9327f968986aa6d03fa2b6fa763b87cd9e0979404a89c06441b135154fd72d2dfb73cad58768246ae3bc9ee75ce0c08ad5

C:\Program Files (x86)\TotalAV\System.ServiceModel.Web.dll

MD5 52b3c9e708baeac9d218001b93e1cef5
SHA1 4554ff7982595d29c9526029870e596ecd045fbc
SHA256 7f0f6b6db85fcc9739cf3256a0bc20574842f3e7f833b4e64cd45faa7e4e5a45
SHA512 a90734f6ae0ab78805614d9899e1f0137280b4e02a41789c55e8aa8f21fbf2333c35c2298465b84c3b83344917bf63fa7943143959c143f15b7a02880b10ec04

C:\Program Files (x86)\TotalAV\System.ServiceModel.Syndication.dll

MD5 42aa1719a875f869c067ada18f516934
SHA1 4e3724a54926395370bbde2bc9d0363c23dfe9b1
SHA256 48d6d299813cad6fece7bfa7a2674404750be32dfa541cabacb1b9502b7fa11c
SHA512 1c1df8fd476d513ce019e5ffb0a872cf420e0668e547d276b87d3bcc8b997d07958b0301d5bb575e59e2b279c78d45426b11d6387f9158c93cc81f6dbdfd3e32

C:\Program Files (x86)\TotalAV\System.ServiceModel.Security.dll

MD5 99a41bbee6e343283929baf92b1eddac
SHA1 1e174d3b47efabbd683cc6577a8ed6e77d42bfbe
SHA256 dba1d155da566afc2bf4d131f47f6e770374b7f2d5e6679e978cf5ee099bb73b
SHA512 41064b29dbdc320a4b7f53d39dacc8faa864059a6dd114ede610427ac7aa2c73a15e7bf11193d6d026bf3ff0dc237e410001c8c048f5899ca8baf9b570dc99c4

C:\Program Files (x86)\TotalAV\System.ServiceModel.Primitives.dll

MD5 8757fa6120b249a4dabf41f1e86c1a88
SHA1 090aeb4e0e18393df97a6daf6bb2ea7c4e512349
SHA256 9d10f481254515208b78209309db31a804f55c742a45aa843fde4e7ed3e02341
SHA512 69c515ced32a8539907523e63372fcbeaee1433fcf6a2578f894bf61c474920498951f3e60cf3e7af5a5044edf3b926a20d3cd7062f447e4a41d326a8bb30efc

C:\Program Files (x86)\TotalAV\System.ServiceModel.NetTcp.dll

MD5 41cedc634a584887a57ca22be8b29b3f
SHA1 eb1c0c22cd6b447c6814f24f5895a3c52a2be93e
SHA256 093704aded9db781a65a234b7e8fbff649e112599056115ae5120b5e2b194559
SHA512 57f5ef0a95b2e0fcf4cd29be381628b29f4b52b430ad4b573c2241d61124df81cba5dd76e2c4ad16a59c6897025ffba63aea0625f36cab8d1ba971a33bca1066

C:\Program Files (x86)\TotalAV\System.ServiceModel.Http.dll

MD5 3708250f24df059d4814a560aa348a25
SHA1 fd9da7f8cc293513e7add9e7dd62ef6ba9074a03
SHA256 e5ee987c419900517173a5ce5b4215396faa8fbcad7c5d45a7699dfc6fb8f174
SHA512 430567a2603a96a9d68094f93abcc7bb75ec0363b46d13e045c32858b465bcb39471d0967dc800839546d4932e8173a85c02b53809de5e008b127389acad5523

C:\Program Files (x86)\TotalAV\System.ServiceModel.Duplex.dll

MD5 118ee20f1160428ec506f9fe57c80225
SHA1 69649b52167fadf1c94005fa8f6d9ae9f0a84962
SHA256 78ac27f0813479dca9092c1160e699a22d3e4a322448d0efcf68ca1762a37730
SHA512 8efbe1fd607236bc9d9e4ba05cde426e6b49c5fe73267b018a439db7824bf24077fbb2f68b9f1a03386f0e7b2f1f4031c52e95f7ee9d2587b95254ac5fed2648

C:\Program Files (x86)\TotalAV\System.ServiceModel.dll

MD5 faabbb1dded66aac765f0e75e816e1a7
SHA1 25641af23c12c660853315a0244f2186e92cd1c3
SHA256 2ddfc838ba2ff3f30118a557f47a9fa8483a36e0f639e016715bda0474008712
SHA512 3a71ce89c17a5cdaa41d761f179eaef8ad62cc3dd74e07a1eff21a64fd4929c9e02c511de046397c02d91449e4ef35edea8da571d4c91d1834ad8d0e5d1e6a5e

C:\Program Files (x86)\TotalAV\System.Security.SecureString.dll

MD5 f5c40794c808da71de1c4e1ab4faf16c
SHA1 fc614bdc2bd9a4cbc91a3bbf92346fc0fea4b499
SHA256 762dd98815885030474f9d327c34f9f35978de4918ad51d0ff167f64947910b0
SHA512 c628480c5c1935b44d03a6532d1881dd8a800fc1f9ae6b53c858cf3b9fb0f945e24f3a65e1b1a0b1a5e1ab1ca9077ef790a912b67f1644c5b01a6d92f88ff222

C:\Program Files (x86)\TotalAV\System.Security.Principal.Windows.dll

MD5 3a25b04b46da74e0af05b71574d0ac97
SHA1 992104a3aa3bbd94a22cb16e9e86fdfd51e686c3
SHA256 fe964cd7d8778f39f72a5cde81e80052770fd9633c9cafc53c5253832386f545
SHA512 21d27296d1de1596f36bf9f810ba00dcf7bd4f4deb5511b7ac6aaf98ff1cd11550c52ae14b93e65e39c591a25491eb5f33e464512831fccc8b3aad8d482f660a

C:\Program Files (x86)\TotalAV\System.Security.Principal.dll

MD5 ce0388e8f0d85d7c601e246e5985966e
SHA1 bfbc0e729b85ca27e4de3f0903022a1716201689
SHA256 3b6b0520402df1a0543118c78c82435b61bf9111b2824fd31e59a3fe67e69e03
SHA512 730ed920fced564e28404d2733b963b29b9210806fcfde0b73accd06cd4225ece06f9dca2d06d2fe9b8f350db85ec30249964d82c49cddd4e8f3e54451403473

C:\Program Files (x86)\TotalAV\System.Security.Permissions.dll

MD5 8777398255b941a954d48ecf8b78e2ee
SHA1 8378428d9979aab355c91e768a66cf927a60b51a
SHA256 78835b8707b4cd259036c433412b1686acfdd858e39f003cc7f881bdf213f952
SHA512 c75be5d2b0918eded3b83c6d0de1f9fb6cfc80b9048426e87baf381133a782c7cc2526c3cef1d26c5ce28cb4395519906de558f60ad3363078125cb8e411f75e

C:\Program Files (x86)\TotalAV\System.Security.dll

MD5 ca27405a8a1dd64467867dd9e703d039
SHA1 0f6d2a2a6daf160182afa73140321200069fb68b
SHA256 b623c4a5e0d96b3ff3945db3e5bb8d235b3b0c2f6d23b8636bd68bb72fdc9e2a
SHA512 019962fdf434d7bcaadb739ff35b300dd3c125ee9b31f4f60e475c80fc2b02a0b0b9012fbb6da0a0aad9dd5f65be07cddf0c4b965b0d7a8da1c915a77134a9bc

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Xml.dll

MD5 372e7871a9928b27522252ba7b286a52
SHA1 f8e88da036bff12203ba5e13a138d9645b72dd65
SHA256 8f51e84959e39b24e71e5439fc4daf57b31ab1f09d80e6782a9766668ad77ce4
SHA512 e008de243bec5597eaa50cf120f95c9a28dd5c354cd72693a537e1c0cceb25fa4985c100d7b9fcc022ef3ca7408d6222c004b5be9d7ed2099d37a86242ba2274

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.X509Certificates.dll

MD5 0618942ca628d87a2f5acdef59d5f63f
SHA1 8d3087cdd271aab64cdbb44db7d9a24ea0fb26a3
SHA256 edaf16ab027878bfc46a236017ec02aa2a5d107458b5f0243742aba82aa06959
SHA512 8618c6f0f8c215112f406cab110e5bef1649a34e1dfb53e4943fd4920b929af1df9510db5dcbd6d23fb4c2e36438f3864ac3e9c206573e288efdf957f6c18640

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.ProtectedData.dll

MD5 5468e9d3b7e8fa1b6dd4f089f5d3b995
SHA1 6ed6314272b6d423d3ebad99beabe6268bdc7588
SHA256 a1768b5b1b181aa32dea75961f6e101ad53d7f955e79ad4527d0f4cb2ee5b16a
SHA512 9d0466e8ede0dfabb5ebd49d2d4f250f653329eadc6b7792a62a5e46568cf3c85252f8ca57ca3f5f4007317fb292e6e04e90adadde1a7b88a1b7febf65c58f87

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Primitives.dll

MD5 99d88e5e28b5bfe0df8c35eefa90c06b
SHA1 879eb9a9e56b7f1df35539a580a6baa82368c17c
SHA256 3b22a67cd325e1f4a4e1b59519a23e0852c0a8d1e05ed0caaf0b378a09403dcf
SHA512 0adec8daa8e7e72539c324bf33efa7cf120daeb23905dac4ff2429528ad3ed561b181eb7e7daf70d6f832bfb335d3bd22839fc3b28277b4b2f6391f81d25c094

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Pkcs.dll

MD5 2751a3e9dcb2d59ec23b3399144e384f
SHA1 d0f4ed9de306f0343fa826ac00d1c63537c7be0d
SHA256 48250c7249b9dfeffc6d87450dc086586d986af22728a7902e91340f747266a9
SHA512 b77cb8de7bf3ad96bd2a5aafe16898ebbe3d66b587e3e15bd5b9c2d941e7f9aa4de0ca6f4ee61b095a0921e51ba12c1253d6c95018f810d00c37e66ce9adf1d9

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.OpenSsl.dll

MD5 37beec6e6ee2e9d4128e855578bc8c22
SHA1 8a6b7fe922f32846ccf353a328a2b61cadc95894
SHA256 497e1c7d7f02b4d534be4084873ba80b051b935212d36aefec83c6cd6a40e2b3
SHA512 79127813b66d282a8f5417cd1d4823d53be8dce711d9017905ca6881376eecd200fd76be5454d89965452dfe8c50c3609ee2a02cd7875508d8f2ef8c3396bf88

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Encoding.dll

MD5 c44b46d68b9360efccd51360c5efba29
SHA1 7149dcc6ae7c34cc52699cae1cade7dd36d5f9f5
SHA256 4092f04906e3ad585fb8defb60dbbd2e1ea6574ac885948370600d0d4d558748
SHA512 f8c37f51bbb0141ba409d816c79f1807b6235ab658c3f74c0ef2ddfa550504ac66207b84dc62c1fb9c327e4aeaf6a518d6fb6b85c44ce5cf8bdd6d2eb95816d9

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Csp.dll

MD5 40d546a58e8392bcedf356ddf917b1d6
SHA1 f018a1c76e1c4fa5c7eafbca6f47c1e6eb6fdabc
SHA256 5a9ae1a4c697236fb6a9e46b66e1a14a7b60110a83ee80ea641b5808c5c9ba9f
SHA512 68e77532768a21d39e0dd7083dbb2c1251e3e397d819ee3f95a72da0d22b88cc37021888ad15ae10db82583513497efd889506223056e3716c84d75add141cde

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Cng.dll

MD5 6597bbf8e129be4e2352297bfb245ff6
SHA1 398dcb8a9108c2ae946581f6349c5b6a6549b639
SHA256 643e1cb8fc16d1267926f66a6bd89c899044d84468a250f6fa56c6d92eb2f207
SHA512 f73a919dadf9ef23d5731865a6d007d41d5db9acb73f631317146cbad4953e1e8d0f9a5df0455cec1c0217efbe6edd8888f32a7196b5e73e3165ba24ce023f41

C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Algorithms.dll

MD5 a38502388b46281d03cbc7d0be0df0e4
SHA1 54a114a0339f9a77ff6f948ea0af1b488c455172
SHA256 d7e3cd19c9c38982fdb7d345eec2951b47a12b80491b152580c4016aaf2ebd83
SHA512 a9ac4fcb06a1c75ba8a4e9294c5e858f33eeb161292508fce2cc38366755b3f376637cfd7920955b757d9a13dd2db18c71fc7a9f4719422f2bb5846cb930cdf0

C:\Program Files (x86)\TotalAV\System.Security.Claims.dll

MD5 0e5656d6538cf7f0286836ad02e5c22e
SHA1 da92d7516015fbc7b9e2756b86ef9329ac7acf9a
SHA256 a89235d45ec5c580d55c38be3b77f7fc73213e566d63dbc036d5f6a6e7e7b6de
SHA512 188aeba2cf98c0d03e8a32bd325f02ffad92c259875a9b83513c75dc42a73f84e380282f08a4c1525f8b1a2ea7a3ba7d3fb0a4253a3228dd6bb8bc7a3265cd2b

C:\Program Files (x86)\TotalAV\System.Security.AccessControl.dll

MD5 c868b7b695fd2bee34bc2795827a7b46
SHA1 928c996e6074f4e5e457048a98a7251f76a6d004
SHA256 7ce09376a9b66e23f1566a77a3f6327f08365fe10f887d349754b427a5f48f57
SHA512 410c5d404390743de89a8934fc1d65d3eafde2f4b72e774cc02511859e219b6f2c5cabe6260d067b93f699858bba0e77444de652a72fa263898d2c16522d9227

C:\Program Files (x86)\TotalAV\System.Runtime.WindowsRuntime.UI.Xaml.dll

MD5 d309bd3de14a64e331408b0be88d098a
SHA1 98b40667de331481624b3d964738b012c9f21e00
SHA256 d7ba2132369c971fd9e5aa47be4f378f6030b42bcd73669bd7d09e7a0aec6347
SHA512 b25abb1cd779ec823e71511360dee34b27765480e1982eb1e37ab727c0bb59b97323d5524e76244c8e2e27f8fb6e1893b006ea2c1e25ccd7133a12a0c7a80f0b

C:\Program Files (x86)\TotalAV\System.Runtime.WindowsRuntime.dll

MD5 56edd7e41e06bea54a9259aaff12168b
SHA1 4f6439904a1ce70d806ad1016a2c6bce72718a62
SHA256 1eab2a5ea074dec1a6ead80d1361a9fd4317e1cd334672c9d877cf49ccfe5730
SHA512 e21f42d166fb5a62b2ea1dcf92eb60b910c5a3ccc2426c2d0d47491805371206ba04032de661277cdc479ea9064fff8a0e61835a69388b976a2724a8a831b339

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Xml.dll

MD5 da0ce89fbe65aad22491dfcda27b3932
SHA1 1044b5ae24cae2e5024e85ee23c0352b258995bf
SHA256 be6577e9a5c0b5912fff18e6980f091baba819c07489244ff6e71af818f5dba0
SHA512 73805aaa93e103c0ae23462737a40e64653708f5a0265f273da1ba363f0d26e2594420ef0da97919e94a3f0f27fc0e17b540e4594f566597814ad9317e9f9042

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Primitives.dll

MD5 b1ac878b1603bc42deb8f1202f4ce38e
SHA1 9e565041902fee54b889cfed6ea6459e92fdc9c6
SHA256 40055cbf3662422998e9052106562383c634c1c7be21b2e7ea5c10c1a4b74522
SHA512 ad6698ef7818b7f6ac4d34ebf1035819b4d61cb8f3c2fa6b8b12e8fbe4daacfef05e2e383f1b00900c8ee34bf57a5d9c587ef70ed5de9e5b596c53c796edfe61

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Json.dll

MD5 f0e4bf6c66891eb5255a95d251f23e00
SHA1 f05c447926d29f8a7dfcfdbc9aa22592205d1761
SHA256 03cffd90eb6c909adfb24eb1b017aaa6e752765aa232d154e7668f4f0fcf5b00
SHA512 ae8f4ab4d104c122ad7a29a476237cbb08ee3f7a7119788a7e3589c5b3a714ad5c9a0266f56b6e375aa89bef0acf84b15a2d8771b5a8550c1565d9fd9a8f4dca

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Formatters.dll

MD5 e593f58dea6a2a5ea87c4a05178e3306
SHA1 a718d75bd070227daf4611c684ed0a4dae60c372
SHA256 cab5210a66f89d054e31a4204467c3f384c1fa2d308dade5344577c7369f9828
SHA512 ac1b4adc0c793b1ca5bfd47d68ee92d77be0c53eade54e25b845846458b376c25b66fc23342e065d019aafc303b388f7bbb7fedfa73645b93ac49477d2331850

C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.dll

MD5 b932a7eff5de419f286a7325cc0befa6
SHA1 e3aa45ebb2ffec8c1681134f54d0f533d541c899
SHA256 33485af8118d494ca489a89f8f2e21c3759ea0317ea6c8a5fe541338f5c3d1f8
SHA512 6708fa3eec64a927145dd5bd174902f5c612700f0fdf782e577a7a7dcfb07256d3a43098aa9415cf038baac840194fa43ba0865fd451c49520e45efc4f6f64dd

C:\Program Files (x86)\TotalAV\System.Runtime.Numerics.dll

MD5 197c856f8ff7cab7036fbda26fda048b
SHA1 585e7aecedad5e9832a006a26a8ba05d834ed2a3
SHA256 aadc9d0970fe22d1cb9b8b3356b569398ad035ceb8c766170eaab776f7c03a4d
SHA512 c979c5a758e8e1d18aa897a6924786a592c4293f1cc25adc509251f6ea205c6bd5c28c2e6cb958a51e187d6789ded1936f16691b089309e6ff9a5434d02c50cb

C:\Program Files (x86)\TotalAV\System.Runtime.Loader.dll

MD5 0fe7d237ca3d177478dc6ea208452639
SHA1 d675e3c84b15848b9181a5fc2777e8ae09c81ec8
SHA256 488e674e338ee83eceb170e8eed9dcc642107497525a93899a45e7b7361a7212
SHA512 59c8ce0e7b4cc8ffccc613983360d1896ee70354ee3e9a5c26d9842e85e9afae542fe0f44b630376e12f6cc4fa6ca2357107cb68e7b84ff89490678d731c32d3

C:\Program Files (x86)\TotalAV\System.Runtime.Intrinsics.dll

MD5 a4e941e6c7db06ce5bf1681ac107c1f4
SHA1 33abf5f6c201adc05f404ba7f50107762a8c2b35
SHA256 6ce5ead1e4819e5ad89096c854b771a4871889bc99d30390622e76d6f76e99db
SHA512 9db864a06c48885a4f21776cfe42d47b20edc5a6d6dbed38407e3c6c3bfade2b9670ce5ef59275d12275c0b9816750520482c4c884c152350276499ff4b44935

C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.WindowsRuntime.dll

MD5 339e490c340e20e9b763cb2e3ce44fff
SHA1 0cd8d1aaaa95a1b1fe942e41177f1988c3245168
SHA256 5cb4242180d7f0e6e5f2148fbfe8e1f5e0e796ea0151648f6990bd2ba3ddc9b9
SHA512 a28e7837cbadf3b9dd0b7efd67d4b18156aaa59f76488c0c8016882701ce73e4e60e0cdea41254ac1c3be3baf00828385969cc97cee9be908e8dc5fdf347fb56

C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.RuntimeInformation.dll

MD5 c199b752c2fd8153b1f3bb3ae1d0dbdb
SHA1 8be64ddf412ed4ef3988562c0e2a5903febe2ea7
SHA256 8c95905d412d406cbb9ef03536cd6b83a474b1d630187ae0b85d483df6aec38b
SHA512 7116db56f6da057c6b9e5462c3b06331c96b52659de7df7bf09297822ae7f1d9eca4ba76456ec7e5d01e28183a2a80f173ad62e9eb653782a281bc2accc420da

C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.dll

MD5 b57f607811243f83f754a6bf8908ea69
SHA1 f1d7286352ae7c3d69aa30ff190a5fde8ffd8b96
SHA256 458fd4466f84acbfa5a84cf9a403ec8ed2dda111fe985523a3d51081a3e63b24
SHA512 cd3b375174940b4e8a13aa7184911789d4d6c67f01f02f7f085c0a27c94309bf7231515784e06bfea21e84c903cf318f42c542c9eb8cbccf3f67f451d47081be

C:\Program Files (x86)\TotalAV\System.Runtime.Handles.dll

MD5 f5d7e2631a4d8005681c499790e78c57
SHA1 66604e689fe487539a95e9967fb9906f28a492c2
SHA256 220235cf56edb06973c7c234b03a242f0dd3aa01032222ef295c798d589c68b8
SHA512 6de423361c8a7a034d7d6878a3415e163a2c1c71abc09bb39076e71a9ff7d0ea4f1c36a342d1d99083ea2e8636ebfe968742428977fb5e4ff9db0a21e33d02ac

C:\Program Files (x86)\TotalAV\System.Runtime.Extensions.dll

MD5 4ebe62c159d77fe4f61e33f9770d5934
SHA1 74ceb072d4db9160e8e02bbee0a9540a47dd791f
SHA256 f52450c3184f1657de8110428f92930f0ee4acba19c030573bf72fe2f30b8499
SHA512 13404234a035523ca3867681a5cb926b8df3db3030e49d170db816a4fc4919e13d7f42d288d7b6c791c850bea0f562edcf5aebd6be0f8e779fc3f9e966e43e93

C:\Program Files (x86)\TotalAV\System.Runtime.dll

MD5 64b6db4e5edc35b1f0f4f8661b1bb5e8
SHA1 816f75651ce029b26284796f1436e229e06da9f3
SHA256 9e1b4b18ea91fee6a83957212e2c33ca1b332d56726e45482e00dc28d82e4444
SHA512 219d8163df984415d580737dc23720f1b2d64b4ebb03ee40a5aef94b50e5b6b2ce206cf307d58dd9690ef021ca9df1cdb35380256bfce637212f4695b57032e3

C:\Program Files (x86)\TotalAV\System.Runtime.CompilerServices.VisualC.dll

MD5 9a8eaa5b280e82638af452ebd25f78c2
SHA1 984d46c36fc3f65266930fffffc5634eb04ebba8
SHA256 5dab8eee6f0a678e2ac77070dfdc69f6e69710097411b636106b3dd43e636305
SHA512 190e66d9187031a7d059367e99f1b719b411a8bc03798ec06a75459284fdd4f234f28fe87330500ad42caa272f9b50a28b27ab41e6989a31283a1788e452e40f

C:\Program Files (x86)\TotalAV\System.Runtime.CompilerServices.Unsafe.dll

MD5 b37ee0006a7af7ea6019953bc6a61b78
SHA1 ea2cb754391e2708065dd4cfcd87188de4015aa5
SHA256 2ca3f57881e415d61a43100a8ea77e69d983f9d1de14971381d240a1e21b3370
SHA512 005bd3670bcb0f848bbdbdf673980a2f086c2844b0f7db72c400487d67cabfd80922d0ba09b93623ad942ea057132146e4869844d7fa2c9086b5b0b4b7c408e1

C:\Program Files (x86)\TotalAV\System.Runtime.Caching.dll

MD5 ba1e94ef700f2aa38291e841394f139b
SHA1 422f5514e43624f9d4292898a0d95166dcaf2889
SHA256 53827519463567379b65ac781b0c3088910eb62d4519069a0b138209ab840463
SHA512 1c32be97b2b407ddad30b2f8c7d91518d77b28572e52313f72e4d3239383f12cb94759c23e3fa357eb4d1c7f242a47b67635f9f7d53ddc80a5d7cbeb98a1a23f

C:\Program Files (x86)\TotalAV\System.Resources.Writer.dll

MD5 b5182580bed8747fce8e6da01b48a711
SHA1 6bca497bc286bef465b7a213b99d32543960fe1a
SHA256 b8642692a063153c1259ed3bd3da86f29e97a36e79464f89d5e41c75f1d2297a
SHA512 1bb4c94ab69aff6f20449cd3ac2dfbef6ae4645f032180aabd4df87a2a4ec9e2e2b58c61e6c4802af708a2bd88254a271da5a520982b57d3528a9234259b308e

C:\Program Files (x86)\TotalAV\System.Resources.ResourceManager.dll

MD5 4a6103f73c8d1d09f2cb9e3cdc36e8d3
SHA1 10f1254be423afb56b69e9de283aa580440d5ed6
SHA256 794aeb7db6dc66a2bcc6f4f008fd36fa85b845ee34a17608ae50866e2d8ec475
SHA512 508f0a592b50a2cc95ee2c7a5ee2927dc0eecd1e7366b321ebfca27c428118266e191165ec1c2398e68316f24acc8d7fced69172ea676a5551e28dfd4b0e0402

C:\Program Files (x86)\TotalAV\System.Resources.Reader.dll

MD5 db9be5a675c27c3372c3a4fe6e9d8ab0
SHA1 3aea5e6da260603a0bc1fd7c5d88d11fab90309b
SHA256 97bbd447452e22a0f6efaa7ae954e12972862d5f145f5ac5e6bd89a724004315
SHA512 49867ce81552d45e8b8cd783ec40f5eee7d5ad41cafb964c518fa4df41ff9ce8330a58fe23e35df89ee13f37822a3bd87172588d6c92d6f22485db833fa4c98b

C:\Program Files (x86)\TotalAV\System.Resources.Extensions.dll

MD5 32c8ed263f97917cad7006a047366338
SHA1 1479c22419fe7665cc4190eca2fdd7b01b19faf6
SHA256 62616f161c44c7ebf81096a1a988a03382390ebc584188ed850a86ae9132da0e
SHA512 959b600000a43dd1448940afae67a31f0922dc1186a1f881914dd11f25b6de46924aa406788ce79bdd2970c5706c6e0a3eb170bfd600f5405d2eb6a7d2aa4e49

C:\Program Files (x86)\TotalAV\System.Reflection.TypeExtensions.dll

MD5 3e8f4b0637df5aecc3c5f3657670e57b
SHA1 a8cab6969397ef22d62ba58c13af23ce8c735838
SHA256 5fc95a1f86ff697dc5014b63a5a83e1caa14e32c5f8338fda4d44f800ab6300e
SHA512 7214812d6eae65bf3112aa1b37df80688644bed47506435eb81c09ba1ea91a6953b277cdebb3f50ed4bccdc198414c3b1afcc8360d77d260e8899e1425fd2b28

C:\Program Files (x86)\TotalAV\System.Reflection.Primitives.dll

MD5 f06e221e71bee1cd85a4bab2204edd8b
SHA1 993e991da4b157737570ef35804a21df698ddfed
SHA256 a40b9c13765d8d472b8efc72e7c3c096c4891d6a401d86bc2ae572d5c935ca86
SHA512 6ac740b1e824a87454c0ea2bf9a705f03cefc083a61378671a7b2fb52c87eb36a113a97a214b762d16f09be048d839b737a558246993daf590075a8b50740f0b

C:\Program Files (x86)\TotalAV\System.Reflection.Metadata.dll

MD5 6af1e722cc4a9d95182aa2a424f2dac3
SHA1 3643e6962fce9e22432ea7ae1ec2bc487c603c33
SHA256 0f245089855c80a8721cdf9a27bfa3bdb05a0189dc3f02965223a8aedf86f282
SHA512 d0f425e157ee66c610d37f1c1945df4e79ca333ae421fb2e575327e8327944ce8a401a4a6d0107335d2a931e60fcdcb8e17c79c98795ec87f661336651a61de9

C:\Program Files (x86)\TotalAV\System.Reflection.Extensions.dll

MD5 e7dc57b5b650fb11b3045b1332228802
SHA1 9c311afa635b0a20e7fde6254b727b5d029bd499
SHA256 2d55789e85194ab4fec5de696b9bdc329505ad37e231ed84e81df7d449bb74cf
SHA512 ba5f2503db4224883370a08d89925210c2d33b7b514f0698e1852e63215b11e09cbfa3522f9d851d29078102eadc5dcb52616b677ebb5d89d5d997f11364e4a4

C:\Program Files (x86)\TotalAV\System.Reflection.Emit.Lightweight.dll

MD5 447a3f7a38834f4605828b22f7fbac52
SHA1 c724b1dcb513fdf4f8dd91aa1b2967ab05988ee1
SHA256 143b6dd989b9b8b1166a941538d8bebc5404b9af8961791060ce1fe68a01bde5
SHA512 ec276b1ce26dbbd013b1572249d8f803829eedb8e9418e9ae1c5a2e141a350d20f9a34f0125c02c3821fcb4f2d6f18c2621e2312df4d49d45db713182b50291e

C:\Program Files (x86)\TotalAV\System.Reflection.Emit.ILGeneration.dll

MD5 628bd7e0e3efb7172ccd55b66f615aab
SHA1 9a312cd8062ed4f0c3ec21646c2fefc18c6aba3a
SHA256 fea02e9917a29f1caef5387506583ed8d2c9f2d7c01eb5f7ad7fcd0da01a3804
SHA512 de3c370585ee4e66d1d9ccb77d80d12194d9224fdbc782251e087ad68df66a6f2906da9abfff381fb39d590cc42a288ec6d0dd4224064376f6e64624a9a1b04e

C:\Program Files (x86)\TotalAV\System.Reflection.Emit.dll

MD5 17408c5a752130433d3d6af8d2807e5c
SHA1 a9d49188e8410741de610e795d0a64b73f0c2f31
SHA256 cf4013d5dcd32b6c39f964775e98a5513146b30da2317d4636fa4af4e151131a
SHA512 c306f5f86f0ffc7e223a16f3fece29e97453e6bbcf732b09f027599437748c2e3c95f9757a45d2900733cd58261ed0cc8196fe632d7f7bb896583af3f2d7fa98

C:\Program Files (x86)\TotalAV\System.Reflection.dll

MD5 f47c4db395043d3067eeaaa9a1363b0f
SHA1 af1680d600a7f297d072f822cd57e393e7cfa293
SHA256 f942b4322db97ef98d5793f6065a749fafbd6ddceedc36293329529e0b0d48c9
SHA512 5f7ef9a1e92906a9028f3c120004211a5b6cf9892040f44cde5abf98545d3cd1d939dd2a0d2fd161e492c1a108f35f51a1bcde19e108e866c87eead590cc4f6a

C:\Program Files (x86)\TotalAV\System.Reflection.DispatchProxy.dll

MD5 54fb3aeda26fe053ed3b0e5131d1ff97
SHA1 9e4df1aec361f6c842d4eb942e93618a45452fa9
SHA256 bbfe484ea179575c0815c8303e7ca6b07d3b91f11bda053b01ff2268681150d2
SHA512 139468ecc83c37d30fee8ccc78b53255463b6ee59dc8cee9989b679df2d1fcec3831bb8a660ee816704a70ff9dc8cffd3a8d5a8f9b3cde56ecc767144dcb29e0

C:\Program Files (x86)\TotalAV\System.Reflection.Context.dll

MD5 bee24da2f0c8eecba68a7cc8db032064
SHA1 8f372aaf605c12b5d366d5165514db1cf746b8d2
SHA256 b6b05773621a83cca542e4f38e2d2d44c5325e88b75ea43a0eed7df38521f4b9
SHA512 0f6942b2b3d8bb3f104b5f95131142658571364c121173593741e2fbb3ccb602998e0cb6042cf4d2dbc09392d89cfd04889b32d5eec36d94abc4c1a1b152826f

C:\Program Files (x86)\TotalAV\System.Private.Xml.Linq.dll

MD5 08a50ffc3b27f22f7ff624d56a6cea26
SHA1 ba77cba86e6eb375c0f4c1ab5784a96f9e912a49
SHA256 052da987d586b6aacd43052c7fe7bba4a2f5a6a826c0f9b7408b4c55147425d0
SHA512 ce612f7292397ed37eb620c51f1c80d49cd70a92beb90ff0c5feca9ec486b40a274b2d158850e1c64e51ed10e5e27baaf242cad2ff586bd7df5a591100662a6a

C:\Program Files (x86)\TotalAV\System.Private.Xml.dll

MD5 77e1c05c3ba6cbc88053296beb5c7c9b
SHA1 578ec73ae90456858975d57b7aea1796917db4eb
SHA256 dbfe6d65aa70e30c0cc6a06b485ae9de48e362ee60d249a52820274fdb260f63
SHA512 34f46753640c6dfd5eafd4a286887d34421449bc09c0c456239dac50cca2668076e993e438b9ad07423e8536f603304425187d67e4cca9565d3d9ec0e021e0af

C:\Program Files (x86)\TotalAV\System.Private.Uri.dll

MD5 933b4b3ff0a4ebc4bfd3965dbb14c04b
SHA1 c9d81317e4ecfedba340c4e30a94f5fe3b7e4b15
SHA256 14c68463ab43820e1c3948c47ec18ddaa43d7b92dac676559252e7d4ba820aa2
SHA512 02da3cec351a6c4ad2d45fc3baa1e335c5fdeb3ae36af071e45e410e24c66f23c55a50c4c833cd0d1ab23f35f5b09d56e30a852cd49fe0cb8059fe345c03c7c7

C:\Program Files (x86)\TotalAV\System.Private.ServiceModel.dll

MD5 494ed53a8d6211fdd5320ed8b525e1f1
SHA1 d2397e0b1c5ede5bac7a8bb63a5f6d65ed009108
SHA256 83fd67d7d2e8e044a26d6135b95956e9aea8f4d075430cb05bd6bd8a84d3f0ad
SHA512 a13e10fa36580de442d9cab85c16f1f3969becb50a024b8f31c75d6b5953c5a1719771cc7a676df92095ca087b5c4650391043958a0539674c1522477e1d2570

C:\Program Files (x86)\TotalAV\System.Private.DataContractSerialization.dll

MD5 b42c8007542aac0fef1855253d220b9d
SHA1 415701bd5ca1e6c2b56775513505b302e6226526
SHA256 09b69203bb0daac0c4ac93c2f893d23e4d6094ec66135543509524f5631d3571
SHA512 98ff9f7c795081c32b7d1dd4f8dc5abf040ebd412afca7a977f50e38ec7d7ba3b6be46fc121b202a17fcd618d75ada6f06466a24bb790b203886b6dd3bbc0919

C:\Program Files (x86)\TotalAV\System.Private.CoreLib.dll

MD5 d7cf959f116b764db8a0d8d556b50925
SHA1 dff30b342248adae4801d17e0310648dba4ea63d
SHA256 9ce4d015b9350831a05fc43ca0230148efac40ad0f3f2e7483c5bf131cc458ce
SHA512 d145561ea7d7312c81d59a56ee4f884fa8fe6ac82b6a2eff76c8ed09021fb16ab73722d800bab9318467798693c926b9a8c05c68e1441fa5c3bae2e1ae60a86c

C:\Program Files (x86)\TotalAV\System.Printing.dll

MD5 2f6247bf408a36601aeac1d9c61f2650
SHA1 ead05e4ae65a2265867a1ea7f9dae90df1d05199
SHA256 ceaeb79be44b248b44bb9c65cb775f39dd4438f4f19ab2b1d65ddc20870f02b8
SHA512 60b124a3f8ad4797bef1b0431293b593f4d1835db7f12aa3779c29e844d9a8206bd13af659fdaab1e7e16fc6ba37f7f8e9eaee38789f2f5f6a9fec0ab935bc62

C:\Program Files (x86)\TotalAV\System.ObjectModel.dll

MD5 dc462d00352c359a0d975c786193ab82
SHA1 f4a64dc0c845e8f1fa88e789da532b5c7ea93eca
SHA256 c035a4384cdf0c6b7f5c086f0c7c55158f1a216365ea775e6805152440c73513
SHA512 1afc5c23e8a6386ccdf4167d722937b9a29d5975be9d3faf2dac3922024bfab608802f6731902e5ce9ca5edb3a2ba5a38301c97af68eb09aad3bc1546cd95386

C:\Program Files (x86)\TotalAV\System.Numerics.Vectors.dll

MD5 6e03d9590582406ea0566f40a5d3c37e
SHA1 c533c0c100089dc318b7bb51ef419d18b5b6dd02
SHA256 daf899631e7d2b6e5a8676bf4ca454ea3a59feac100a8bb1b207ea23f7628284
SHA512 20163b500d14d10b44394692c98f43ef2036c6f9067d5b8fec00d69aaa45226be32042060daddd3cf2c778c242eff7d49f75c636f626f0d21c9f79f657728f43

C:\Program Files (x86)\TotalAV\System.Numerics.dll

MD5 99134c6ce77dbd04a8b90475d7eccb1d
SHA1 2bc6d296ac0e9ef48bb3b74c000f0e4d1d123db9
SHA256 12eba928f088dec978f00b1347454afd6e417b338e54e4aee56d92bf328cde5b
SHA512 1ee73622dc0194fff68d91054843742364f8fcd1f934a0e742d3c7820c805f4cc519f1cc06d9533b432c13cf74d13ad944b7e40dd5d01b70c4d68fb58f6267ee

C:\Program Files (x86)\TotalAV\System.Net.WebSockets.dll

MD5 0ad34522f168f866d09b43ba0c3869de
SHA1 6e2b3665e1cea39a75cf697d460a0f7214fdbd90
SHA256 343e8f7d9bdbae163147781ee3d18e621d36358e512e1cce5b7733b9edefc3a8
SHA512 a55c73a0f8b232695df97e6d6123c96652fc63490e84368b7de9bf75888fc8d3eba4a4b1b6588322c717a5a9af5e356dee8570b8339d6f464ce03de007beb583

C:\Program Files (x86)\TotalAV\System.Net.WebSockets.Client.dll

MD5 309109fbe4c44fa5c71af3e9fd266e2a
SHA1 05453b93560911bdbcc6782750faf3d3f1156657
SHA256 4f8384d0a3cefe42ddc09030c281c14f7204ad2b82ce89a1f3efb80f63801f7c
SHA512 8f695b2796c3d3eea56ae4969053857f1368fcd9e7d6f9f436efcf6c56d2cdc0ea7f21264a014ac5277647cfcea63a6b0b2e8acdb551a1345c7c5383d49f760f

C:\Program Files (x86)\TotalAV\System.Net.WebProxy.dll

MD5 3f7ad35c9e024c0d7e97425a047e0b6c
SHA1 ae0efa232c8f53bd478fad1247f897271ca7600c
SHA256 0c254228fda9d6c4869a39040ba95ae9a51265d5a7990083168b07251302ea04
SHA512 de5875b4c5a62b482c4413bb706f7a1ec63c5efac0b049197d2d79d2cea271ebf882d53bc01c3c1c24defc142126c90eee56b6671aa86dacd63b625499d238aa

C:\Program Files (x86)\TotalAV\System.Net.WebHeaderCollection.dll

MD5 8fb46a733e9cc705a7e8a20574bd04f9
SHA1 c09491ffff7cfdc9957464289e52088eb5cef540
SHA256 c39b4e8ed6085f4598276241006b336de0a7f1b4656c58ddcf618404afe0e7ea
SHA512 16ebd096e0970c573596d115b9d78a4f493585163a6c8ea1a516dc55d9db60494c86ad7e6891a632cd0d33540d464cb84ea5f3bc5998bf9653c278d430df4aff

C:\Program Files (x86)\TotalAV\System.Net.WebClient.dll

MD5 39721fd5f62a5f1c9c0dd8139ab740ab
SHA1 6705bce547f5528abac8c1b2f528d321e1395e11
SHA256 134a691633398fa66c598cec9e1e70685b23f3414878de0e109d7d24e1431644
SHA512 8cef3c30ede35357c479d44821974f8f751359b4c22263d56d5439653c951f7cfd0c6c741bb7a44f38c90430c9f2bd76455f9acf7a5e762e3dd8e7fcfdb5da07

C:\Program Files (x86)\TotalAV\System.Net.Sockets.dll

MD5 aa46a416dd7901c5afbff4f7cf6cd802
SHA1 a3207f79dc4543c5ce2104d9ba193a2b947a3ad2
SHA256 5bd1ecb6641d1fa55cc88071ea455b6df5f8df89df2b1c5497ab65c581dad310
SHA512 0956c1c46b6285a4e6206f5471afa9b845942f353b9ce8328be8c7cbae0b3605c6f8aca389011b62f568e7b59d6bc7be6a14c2234266a1d31727c31066daee11

C:\Program Files (x86)\TotalAV\System.Net.ServicePoint.dll

MD5 b11cfca2012430a64ef3b6399da33d28
SHA1 835233232866588eaca8a9205db40ee1b579dced
SHA256 22c805e2477e4e7a6e34924ba5201d6305eaaaaed70b62017c45c362f7d9f8f6
SHA512 a17fc736509a186c79e96cb00bb914f56f51cc36d08761d944afd9f1cd51a35b7adb2bf3dfe46d4279eae4bea709faf8e1d00b7c908746ccdf28d325b1f75603

C:\Program Files (x86)\TotalAV\System.Net.Security.dll

MD5 19d3a216bd7a232725f2988680a84911
SHA1 d0c2d5298db79ea8566b8a4574a45d5f75a55c37
SHA256 8e9406714192fc391a99579298017066ec899b71954869a475ff345dff366285
SHA512 53e6646481d71e362985273a47f33a7c7689f288667a4e349d6763d4e2169eb8b8487e737e4e4d92979116c589b1dd7094bc057028d704282c1bb1c13b34243e

C:\Program Files (x86)\TotalAV\System.Net.Requests.dll

MD5 e886c545c1c55e59685ebc0c9c297d81
SHA1 434032be177fddaf02995e22f41d2755a084cfe8
SHA256 5ff7ef1283526ed727a3cc02e07687caddee28afce6e13441f0756ce1280cbdf
SHA512 77a7bee18916875883b04e606207ca6ef5558fd90f4407ef86374278a05247aa198f5e991720e818c93733bdf2fa410e12c13933aeeedcd1f3f683209406aa87

C:\Program Files (x86)\TotalAV\System.Net.Primitives.dll

MD5 6690c7c1b22e54dd29edb93f716e2ae2
SHA1 92784ad46f4a9810b6e1c433e73110fc39509877
SHA256 6e0a6ae20b1739644a6123d1dc4ed63918eeb64b8058c6b66d9acbd08bfa9663
SHA512 1439435c61c06496fe72be63fb246f48665106b57f0d81f80985062f939494bdec2ca2fd6fd1ea5bd2d5ab156cd0a677865b2f0a4292b13651f1672f453a57ee

C:\Program Files (x86)\TotalAV\System.Net.Ping.dll

MD5 897b496363f5180dbf97125fc6f0cba6
SHA1 220b3976ca77ac937f76f3639a8c97e6e4ff64c8
SHA256 ec784bfc140fba12eeb1b8f5a70b39e24a91762aab174c7248893a3b6e466c71
SHA512 ff545fed040d1b6d8f105d126ca0d138e4bf272c7df763b4e737f4c11b96ff5b05b133c302426001e4eb411cd46b91801949427b25102d972f5796b9d4f80c59

C:\Program Files (x86)\TotalAV\System.Net.NetworkInformation.dll

MD5 4b5b4e112e427db047d580e8284c6188
SHA1 d3ff9e666d3899726a6db6f5bdc66596c595be56
SHA256 99d66492ac869d82aa7055bd1f6d6daa063db9241cfb9382765b1eba0ee38927
SHA512 7cd1d7e6fda0056401654970a8423c359698d9e0c1e6e0750e7676b998e04d7edd334ccf8db648f22e43afa9b3950ce96bdb76c26508d6dbd4af9ce51c4090cc

C:\Program Files (x86)\TotalAV\System.Net.NameResolution.dll

MD5 b732780107b427015693069d38817b11
SHA1 6e1ee51b77d74108adf22018ba362dfdc5fdd9cc
SHA256 70ee5550a3c3c9ada5f408ba13b87afc01ade4635bc275df0710015e312df513
SHA512 10ee6adae638170b87650afcc8759b0be747343743b9f3f6a3899cb136f13cab0c118e151e954580d651c87f9349c0f50d15b579b38c74ed9fdd6a30ba8b18fe

C:\Program Files (x86)\TotalAV\System.Net.Mail.dll

MD5 af0cd503056c24b2b3d3b0e035633d14
SHA1 7dd22a1050aa226cdfb287b78e313447cb51228d
SHA256 e9e18d6028b22b4d31ee0190769cbcccede665cce4b1be8420d93e03c82bdd29
SHA512 6f7a99a36c36cbaee77544d1871844810c049351836ea5110db41b72f6df54126b77421054645568db2c810b735ff01df9f119160453d402f311eaa8d3ee12b0

C:\Program Files (x86)\TotalAV\System.Net.HttpListener.dll

MD5 13209cbac19f5c803ad3332c5da0238f
SHA1 3f7451603be3adea6052565276d0e6cadbcad7e9
SHA256 e48e82ea2942a1d81c43485ee482c9d84ad8d766e485578d7907122c4c4ec22f
SHA512 9ad5c922788be6f6e0f2b34a27c0df54e248e022f29344b11ed8c72ce1c2d8f66a8937b0b79a4ad704cf9f28c71bae4331a21a2c086d4ac056c856383f8adf96

C:\Program Files (x86)\TotalAV\System.Net.Http.dll

MD5 8f8b534f8dd6d2cdcd17ec87698746ec
SHA1 d50165971f90818ce86f816c15c31744ee8b18b1
SHA256 7e9cf29860d5887e1a17f071354def3ada4778bb1bf1806133375318058d7e67
SHA512 577545e89c757e9a5221f527dc7f96c15afb14c8050667e115b9eaa4ebe02e19d63f3ce112557b7a1913e2e6ac0a4d43b61533f2c9e5845dcc3a5f54de5d091d

C:\Program Files (x86)\TotalAV\System.Net.dll

MD5 c487a49ad997c54bdd1966260b54b545
SHA1 029e74af432792b4d95817ede916d420bcc20d1b
SHA256 2d76431b8c1836c217eb6fe840289b5bec6ae98f72e80ab657bd487be573c7e5
SHA512 fbd37e62e2f6e49c3d6058a34af817984eca0bdee0920abaf7af2b943748ddd8ead24f3fd16a8ff97d2ec4f6de7167dcf6c8d6919f4b9d7a378b5a6fb7e18f71

C:\Program Files (x86)\TotalAV\System.Memory.dll

MD5 6e439844aab932d1ff439b8c929e3f22
SHA1 a9a3b6f2ab33b0003ece721e02a10acce32ab516
SHA256 dbb7584e06a35b6045eeb156dedb5469ae5056dbb45bd689790355d60ec37eff
SHA512 fd2dded613d2d394eb01c4197fb7fb0a0cb5e5289872f111fabaf3e665aa02c23fa19187a0371d5bc2743826b560e1fbfcf9ecef171ba61c75de2fc12429a49d

C:\Program Files (x86)\TotalAV\System.Management.dll

MD5 285ffb3fe6bc4eccefb054d3df9fc624
SHA1 5edcbd41f0410efcbfb9a73063b34659f83f145c
SHA256 342015b3457ead575893f97ccb882e7cc2af932b582223d30771cce65d5308ab
SHA512 dadc0f7f61521517f55a38c777887be42fef119445c043a6004262258260f170373de5cefe4a809602a5c1839137bf5599e187a92b761852891cc80537bc39e0

C:\Program Files (x86)\TotalAV\System.Linq.Queryable.dll

MD5 ce101c7e9dc1d626d9ff91afc09046eb
SHA1 c299217787421fd36f1db43e5bbfc361e9ab888d
SHA256 71e59c2e83cbb97ade8ccd4a7fd019b6185b3ed6c257a0757cbd8adef55f240e
SHA512 649b2c8e55564b66be2038552d2c3bdefb3d28c6fc25ee0be53560c14b1639d77f97d798c0707a7621b3d5ab9ea1b898e258b5cbcbf4e1898bc26b692adae974

C:\Program Files (x86)\TotalAV\System.Linq.Parallel.dll

MD5 91b9077d6aa53899b3a0068063081e36
SHA1 ebee4b820159e69b88a068c2860dd6089d09a112
SHA256 25cc15aef9c67413a2d551c8426c110f73e04845cfef2d27cca6cad5224a4adb
SHA512 b9eaf3d88f06a03c876c429ac337df96626b5c7685fdd7384810a653ec5db29b75d9d4d9b3bc0ceea084377e7940b62232685e9e5b51f0ca3184b1cdb9a20f63

C:\Program Files (x86)\TotalAV\System.Linq.Expressions.dll

MD5 70b144811fe4f21067f9c7b3d20f605c
SHA1 1dd8bc5c194a8efca892b8add2ff777ae79f9745
SHA256 258b767748e2691ff3e82c6b89ce7dbdf3b035891a0e41766cbe91f179bb0eb9
SHA512 8f10ce2e9d8b9e7c3a1d6e840e3d4af4dde8dfe751018f56cf165d5901f66bc2e5aa975dcab5d4f7e407ae6adc74e74966e2ed966961ed34012940229f533a42

C:\Program Files (x86)\TotalAV\System.Linq.dll

MD5 dcfc8caf03a43639952445f7c4442ef1
SHA1 a72e39cae0705b714f3b99d1f7864d7c89648045
SHA256 29b2f7958f6c7ce20a658f375af34bf2bdaada624757afd3fe2559e2e9b37aba
SHA512 3c0ef19e4ac2aca96f5fbc312fdff0a1a20f9a3c60c524cf827eae99f8a72fbb5fb5a1479c36a4a3e0c201cb1f60bdc965bdd9f40e0e262b947a9c39b888fd75

C:\Program Files (x86)\TotalAV\System.IO.UnmanagedMemoryStream.dll

MD5 cd4e2781a48b1ee742aafdd4a3d72a08
SHA1 731afcacf8231c3a8310c4dabea05c596eb17ef4
SHA256 422998cf85d8d8e1b298f444bb2803ed842080b50bbf190fd72426bff9e6ba9b
SHA512 92f0b6cff18debc4f0e87b3234764f3a1ce9da443b0aeac04c878bd9846cc0f1449c713f11ec8de75ee3e4da93ec74e0c054726c8d97f3a723f5b5d89b793302

C:\Program Files (x86)\TotalAV\System.IO.Ports.dll

MD5 cf8254f4b70ff0ef644554c5322003ef
SHA1 f1db876c3803f8d03eafbd7e56e215bba05d7dc3
SHA256 8b4697b44efbacc69dea47d1b7321fb8ca230157df46ed235a0f40aa60f3294a
SHA512 8b9beba9f022a3773629be717f34b106d784287c699291c00e827d1ac130fb5e2c586abd4711fd41131f9b6bb4a07d476f53fe7a7768acecc7beae5792b676f8

C:\Program Files (x86)\TotalAV\System.IO.Pipes.dll

MD5 215b7d58dc533a4c300181fefb629be1
SHA1 0cbf9c6647fcfc1f34056873125b1a18e5dcfd53
SHA256 f2cb16dbf131b595ac2daaea6abd5f39609c9b37e772f4f177771788545e3528
SHA512 54cb54b70235298bf71dd9dc4b2c923b00d5ff3742211509f525899b090a0fe491a3b72643567a91f44c8fec28bba96d57d17406fe6ebd64a66d5d43eb10c8a6

C:\Program Files (x86)\TotalAV\System.IO.Pipes.AccessControl.dll

MD5 9173e9bed16968efe8f7c4a886049f02
SHA1 5c20f947aed3336349967f609c78738babe28a26
SHA256 ac6e45f9daedafd4c0fc8cf2e9efa3fd9222c74939678140d08288692ebe92e3
SHA512 6fb3912486df8e50da163ff13549de5bdf049e220dbe01d582c7339f6fdc0707704c38d8a5acde1beffdd8310d68c2d39c897b8ddcadc3bd451ce8baea91a232

C:\Program Files (x86)\TotalAV\System.IO.Packaging.dll

MD5 941e3abc504d50131bc31e6bc58f22c5
SHA1 8fd7b3df32037cad841c22ad85ae86cab7e6a0f7
SHA256 64e1c57c8d441c2b3b98bb662742099165889644da55f281e2cc24888d2be8fa
SHA512 b4680552ec4fd12d9302b549e2460b2f1499217af489ca4efffe67797d5a5c7b223ce688fdc1e19b087dd4b9a88b037db915ca9f7e7567f2010fa1deb7cf4ee3

C:\Program Files (x86)\TotalAV\System.IO.MemoryMappedFiles.dll

MD5 744fee1c3e2cf893150fc14428642991
SHA1 eda7d8fbeb06452bb80bf8ddfbe8cd85a67e15e3
SHA256 2df35c86f91788c9829f8f75502a5f2c7f014a93d3ff6f36cec510bcac5b8234
SHA512 8a2ae3d9d535d80cfa5b24599a348f5200097eb2f17a6fc9c7d5231936e10630271a6ef8dac6fca932084343e736325e0cb0effaa866556104233f3e2f2cc0f0

C:\Program Files (x86)\TotalAV\System.IO.IsolatedStorage.dll

MD5 53160f475a0b060b0129385c1bc813ac
SHA1 e636b9ee8cecd8413a6ff47bc6c8b777e4ed81cc
SHA256 0a66211216f3d68a6efeaf0263f2f24c553e901dd5d9313aba680de28048baf0
SHA512 c7894bad5bf669683dd1a533af8abb4a6b6e4f7e26bf0b09685b863b4fa26d58f45b93f3b245b8abb6a7353e086acf68411c3746e0516bc5169887c2d9227943

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.Watcher.dll

MD5 801a9b0c3b35e89f7ff62ad5923f131d
SHA1 4f499b81efd19cb5f3be001776651126a8d8dcc5
SHA256 e32173739da64884e502d3ecc24de44913ee19ed438b6cb82c8cf7e8ae9e1ac2
SHA512 c7781a432003af0b77b6fc8349062e0ef09f276a7723f78519844ce24557224f4ed2b51498e82d5aeb7a201c1f01fcf1be860259ea333121fdf42f01a0b78fa7

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.Primitives.dll

MD5 104033f493d5e199b3bfd82180b277f1
SHA1 f0e05b304cb65a377f71a0ae68dbc9172685e05f
SHA256 008d12100f44bd8322a0253bd9791a9df3ac5b3924d704e7db98e3e8749489e5
SHA512 bb8f7d37d005a59bdc47eee727404a5d818f605e5045b8552ee0adb07b87f577aaca6ed61b0eb1141971f051f435ac4101c506c7d55ac4bf35bc67510363a406

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.DriveInfo.dll

MD5 895c7d821f04ae51a07cb5fb0dd4f42b
SHA1 4b24d8f1f9019cd753f490650f95482f3144620f
SHA256 7a65c92649a9ed0944c455a33507f0f7fc177a9f52d10aa9a5adc4c56433bf1f
SHA512 e9df8d55deee4b0b4b31ec9e4b174bda88f7672592f0b943f40513722ed102bf9f590083829414ca63d9596edaf630f76b68b4b8a8016d8144f30b06b165f13e

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.dll

MD5 6033fb3a387e6214cb1fbd9b137cbb42
SHA1 25ef3aaa32dec1b5c1d55bede164048642a22981
SHA256 99beba5759b0c7af236fe633cdbe377f736586ae703c2ef29c6735e8d78f9710
SHA512 6eebf4eb5ec2f3421bd1adb2ba5dac45d0a294c5384fefbba8333b3f692d691cd99d996b9ed71f05c0112a2f20e68d6b8da664fe198d9676946fb7921fb8a36b

C:\Program Files (x86)\TotalAV\System.IO.FileSystem.AccessControl.dll

MD5 3a7a81d6e9b39b18fb00fa9a958ced06
SHA1 f09026d6d6b2c616ac0bc48a9fe2f3c8cc15f444
SHA256 53de97b178a02fbad05d27658fbbd38146b4938b41075933dddf1b27248cd410
SHA512 9f67c566009cc5276107e752d8b80c6dd2593db3c0a73676d47cba140b32f3ae441d0e3d7f7cb333b3288a1be34b530bbc31fa6c44ed159e1486a70e4d8b7894

C:\Program Files (x86)\TotalAV\System.IO.dll

MD5 8ace2d6fd91112ac6dca9914bc4afffb
SHA1 3ff6b44edf62c9164b243e3c585a47ba4b5663f9
SHA256 5bc93b530f357667a2f2b8b13b47e80320d8782f642ebb747137910674125b35
SHA512 b89e8fc4d5ca8628e6e4235a0390ccadeb19e1321379805a4d3e2802d00b19c827fde26c35dcdc65e6d3b04509d71654d9769892fcbb08da3d6e78500c1c2b69

C:\Program Files (x86)\TotalAV\System.IO.Compression.ZipFile.dll

MD5 6258cea236def9f37ce76d19cb8b045b
SHA1 969302144f452946ee6a9eb70a4a53b7f9866e99
SHA256 146171b2d8ba7c6cfc1327e26e4017b08693af5514263203db60d9c43e13914a
SHA512 cbe8c0e73f567ed250d0db936e325fa1a66576e30ce765f027c2c87f32cacad4c51f5a9bbb4bfc1ea3b3cdeec97ba3dc5b300dd7df084f03aaa0016c9aab5b96

C:\Program Files (x86)\TotalAV\System.IO.Compression.FileSystem.dll

MD5 ddbb9f0ce12046992cd06dec451e03a4
SHA1 e0702efc5e7ee7afd7d6dfba92962bece91ee808
SHA256 6b3632355c4ec32e4edc8fd6b6e655d47b8547876660557675153f3e50b54b21
SHA512 28b71a65207359eef8b3294e0396103803e4f27cd589222e5f3889ce17478615391498991a22d3d631695a02c4c863dd3ae0b2bc7e9d4c9747b290dd0afff35e

C:\Program Files (x86)\TotalAV\System.IO.Compression.dll

MD5 e839f0aa073273aa6a75889f19ec1623
SHA1 ff171b601e43e5c249331519fefa5bd527ed95fd
SHA256 e273d82c08d82bc194535807a505cb2a6c08c95df8913f8210a407c8738c75d3
SHA512 9a7b22102b81f03b503729beeec7a8d29f0ab22bf37a7dca43b4fc0ffe01c7d0738e14b5589f5f95fb98228266c8597aa8454820f52830aebb443e6ad17c991b

C:\Program Files (x86)\TotalAV\System.IO.Compression.Brotli.dll

MD5 ad0ff61576e77443c96aed460f540d5f
SHA1 f42abb6f6524404b25d6454efe15289f26285482
SHA256 09362f89d15733cb65f3306b3fd280aa95694d1dfccf16b6c31ade1163f36ad0
SHA512 b12726e120daa1d6292a14ae2228952d2ca9b800dd94cb6e9b0d37280980a348bbb680fee04c3aee29c35a342c28df7d877dce2d480b68e1d84fef931cb322ba

C:\Program Files (x86)\TotalAV\System.Globalization.Extensions.dll

MD5 2b51e34e537d25bf22e0a865d37ba277
SHA1 56bfbb6a8f6b065a24876c9a469163c832e8772a
SHA256 bd41ec1b117416b3abce7867c9aa3927f7b52114bbd3a979c6fa60d0fa3f49b1
SHA512 cb553dfab531eb766fe470f753d758acc13baaac77d52f49f052debc2d549c080d608da1b1afda55966c9c864dc187f1a75acafe0dfb8dbdf28e6a112cd28f43

C:\Program Files (x86)\TotalAV\System.Globalization.dll

MD5 4a00c73a2b8f7bd5bd2349bf189306f9
SHA1 f86d3eeb69fe26974f5156cc35e5209300702b18
SHA256 ea40b3d97d8f582e4b1dfb4425adb0f0682e3cbba03e6d27ba6afacfa7408c13
SHA512 84a3f7027e93200324d60b4d854b09a3a374e802d99ffb7fe9ae8cf797c90e155597b5d17f2dd2c64c69096f64bc6ecd25ec502dee170b00ec47f00be24fa8b4

C:\Program Files (x86)\TotalAV\System.Globalization.Calendars.dll

MD5 053d592bb5251b2f15a3391223c9e167
SHA1 db768f758582f9c43c00ac4e66612bad76a4b539
SHA256 973d89ac235160df9128d10f5a5bee2d131ad7debb148f5774c2579d97b3c4e0
SHA512 5ac7ef2bfa825dddeb085a8ae17c936b71240d69d36a8395db856ee436da1b4e751a7750a81e8707a269cbcb7b1b26e57bb24db6daa06db28965c77636400473

C:\Program Files (x86)\TotalAV\System.Dynamic.Runtime.dll

MD5 e42b0abbe713da1f9d5ff21883c760cb
SHA1 3370c376fb512dbe39cbed36d13cd11dca826d02
SHA256 02691fbf19e669f9f15fb6c57f8c8fe565952345bd23f8eb79acf3489c7aa6c6
SHA512 8eb130cfec7381f36b408108b3bb9bea27c8c786b3fdd1a0e8ef997616e1f33a9da63b2643f4af95d6dfa3978cd8968035ed0e7b41ac88b2e814150a482431cf

C:\Program Files (x86)\TotalAV\System.Drawing.Primitives.dll

MD5 7f9c4333e71b39c53c460ee3b0f91bda
SHA1 3d98ca7ea66103d86c45557a139bb50d46ad503c
SHA256 0ba7867b6531edc491d6c7fac8b2e15645769cc74d05414a41e46b71da9336ca
SHA512 b00ea3eb03e83c1e6b7a3cfa518cc870270a422cdc07b28e4d37870e1fe4b1837e6efa92285f28781de05855ad2c533773ff1c311fa7f9903ac446b70ecfcab6

C:\Program Files (x86)\TotalAV\System.Drawing.dll

MD5 9148b038a5d96921b2c18184720c1fc8
SHA1 436edd5ef5a7f521f779fe84913488337aec0193
SHA256 22f2d62131936595ca34d0606add4b0a8539baece15fd13413f008fb4ee0b0ee
SHA512 b2353594720cbf00baccdd1f5ce0f7440b7bbeadbf1e464f1195ff73422dbd4af4f64eb3e64b35d4b68d71efef1e7970aa7d8a7b837e765fd04bb0f21d1944ca

C:\Program Files (x86)\TotalAV\System.Drawing.Design.dll

MD5 16a050bc879bbf76a0d551b33d2a65b0
SHA1 c838d9fd10cfb8a92f0e9a34eb8f391abc100d11
SHA256 04a476dd96439238ed5dc55ed9f20c398a1137d78a2114eeb9c8c9de0e827b64
SHA512 d09b542f398261c18a34ad5591a510522d8dba00d0ac810e0ddc6384acd3938e8921fd00605d7dc5f4dc6fccccf8d2eabab7f52a42d855ab39b2b97d266b67be

C:\Program Files (x86)\TotalAV\System.Drawing.Common.dll

MD5 2ef2f0ce051aa32bb7b6c2a7c2368b2a
SHA1 a52555856df1d36b042480fca79769c8ec9b10cb
SHA256 b676ff6768017fbf330587af4af00f08202dd0fe6d8b42ee91a833a320d81270
SHA512 05b7119233e9441684462227ba6a3ff4f6794dbfa8e4242510c886e08e54ff89cec2bfa78f6fe845fe9b150ae68ce6479aadd3e10ea7959dd04756bd591f5eca

C:\Program Files (x86)\TotalAV\System.dll

MD5 693e8bd37b77003f5be42ae1bbe8ee16
SHA1 7e8e04c3419e2f73f686b21c8380eb8cd0f560c8
SHA256 f0336b00407efd004cc5f7a8d47ceb16bbb89d1edadc951ef090f5c97e4f3f26
SHA512 03948a81c406d3c800ab1580e78aa698e8aa61f49e1a147a6bfaa3b2bf688f7dc472e2f80cba497acc2dbc866a3291c709373239dd2579c0a94f0aa21ef440f8

C:\Program Files (x86)\TotalAV\System.DirectoryServices.Protocols.dll

MD5 3e30539f7b5718887d8886433cdedf6b
SHA1 5b84bdeb9f807d150ead048bba680fc511693b3e
SHA256 5705a01705fcd05fab4fa91d3fe35338898cf6bda8375dd6e172dc8d84969648
SHA512 74269c9e22705c0fe14b3f6994b63a3f1404d66980ee5721ace10c0a4b301cdf615be8e537a4cf03702a1e03951f10264562aadac0891ff31e477d62fc781657

C:\Program Files (x86)\TotalAV\System.DirectoryServices.dll

MD5 e61418e77cf4b0b77ab3d808efb73548
SHA1 94e6bdea7f1c4317f721b611169d9ccf6c239699
SHA256 d176f4579c03fdf4660353153b20e2063f348b6becb9b073449cc5c1ec5ae745
SHA512 76c02a5efbd26d63e049e5d1cd077de74dbc06eb19d39d997089dbc3c0478e00a13548f1e38121b9e4aaa55ee987bbc27607f8f8042ef7b0b04cadb0caca1d89

C:\Program Files (x86)\TotalAV\System.DirectoryServices.AccountManagement.dll

MD5 cbd45c5b94ff14408bc443e7b95181eb
SHA1 6e06d9ee36f29adb10a6b12f1425454a48956f96
SHA256 3492d44d9fb05b07c0c7302b85dab9dffbe522085ded93ff8868ed6bf5e162f6
SHA512 0f9edd0436adfb3ed3b4f4a835751395dc76cd1f220b415d76e99255f40c2ae053c07e3e90b330a46ca7e3161b101a9d6bb92b85efac8782e2a334b4ca9ae2af

C:\Program Files (x86)\TotalAV\System.Diagnostics.Tracing.dll

MD5 3a0a716a5f848904872914343df34f16
SHA1 e0970e5720442204acfddb2ea0b24de59b4241da
SHA256 2d4d885ae11d80c2499dc83c4e884a749cb64f95b297ad9ba0b5389f29fb79bc
SHA512 3d854b60438adda193d50529b091b1b4d0441bb5aba48a6402fa2c3a8cb36d455c48326db4634c52df2a902986e36b7da1d06d32732cd488d3b5ef1bf7160739

C:\Program Files (x86)\TotalAV\System.Diagnostics.TraceSource.dll

MD5 c88cd34a9ec7d7bfe34133e1cd5a4801
SHA1 3391e707bd482a7caf85ed8a546c1e88d543640c
SHA256 3911650b7663fa60e4f2d4710fded59030bc35834d7c6e70db1d36c12cf71927
SHA512 d21db07f9f0cf2be2d39cef58348f03f5214cb82903d0c96bfa3a8cd7f1eaca04442ad14b5fd1347b9bb80ec9d2462a96553d344124796f31c70d2118daf5934

C:\Program Files (x86)\TotalAV\System.Diagnostics.Tools.dll

MD5 630b7d2500dd8107264d2c9253fa2956
SHA1 45fb7c9334f9e1c1a196a860945ad0e631ddbf82
SHA256 3fa65d869a931e705cbe1e2b9b12ae6b15520db0719129311dbe4376fbfb7fa5
SHA512 2a27e56bad0577f681c078e82f99b6daab988b349fdd9e90356f5e0436b7ac0ba54894139befd9eb93d7390a1b2f3df7204599975e59de862817bc649390d063

C:\Program Files (x86)\TotalAV\System.Diagnostics.TextWriterTraceListener.dll

MD5 d638a282b89c495d9c2b896287a6bfcd
SHA1 e5c92ba20dcb1101db432a5ceb29a3cb51af257d
SHA256 b4dc72c1254a16af4ff47ebea502d03b28d03c72302ceacf5993c05a0bc3ac6e
SHA512 2452a1b4263bc4235c4a2e076cb8c279ded0ed4ed6bacdf8c0d6175cba68414effb2aaa947cf941da1ed42858d209ad33382df3b8136f85e89670fe87b0cc8bf

C:\Program Files (x86)\TotalAV\System.Diagnostics.StackTrace.dll

MD5 0290c1b9f1a55e5a1692d0e1271e960f
SHA1 0c91a85b97d8144f04271d21022a514766630e74
SHA256 669e9c108229b377ad55e11d5cf9cc6d033446ed197b55d6182ea8b513b86905
SHA512 3c9fa67bb229cd318e030024de4e391643579e2c0413da9e8af30326bcdc5a17094f0966d68bda33725609c02d5d668c0538780a12e72052996ed691d3ce1655

C:\Program Files (x86)\TotalAV\System.Diagnostics.Process.dll

MD5 1e5c97d7b9b2db167fb2e6175bdfd281
SHA1 bedea0137eea277691216b1c7901eb9e43bbb451
SHA256 e935a1a089e4ef56fbba1bf4ba4745790555cd83db8cce1110850211db11bbef
SHA512 a60adcf02c9a5b690c4081c11692382b55082c8caf5cdcca666e6fe0dd4a3a31d6ed4de0ecc129bf8693df1df0c4bfa86ea89f84566181508224aee6bd7cd566

C:\Program Files (x86)\TotalAV\System.Diagnostics.PerformanceCounter.dll

MD5 093e29a3ad69fa2e61eb0909cb300289
SHA1 e6401e509da0247a2c3d56f78fea9b76c2e33404
SHA256 ad428d16cdae6b76e9802b1dbd9d8f16df55d782477410675db1d847e5d3fe95
SHA512 f6bafbffc7fc0e0d1890a061f0e06798706a4cd48d7ac569d875cc31bef1ac2ddf60eb32dea69c9829decd23f5ed11ede24fe50ba5884937907497dd3bc3b056

C:\Program Files (x86)\TotalAV\System.Diagnostics.FileVersionInfo.dll

MD5 53c1b501125cde723c149a981275466f
SHA1 e08cc61e4dd50ab6c274df4dbfbe5031167be391
SHA256 d53a32399ddc0a04e9b7d48864c5fd0df340747504827d65a863eba3169cb160
SHA512 0ca14eda2fb53a5bc7aea7f57cee07dcfb3db09b13c721dbbe743a83d596ee9e1be458736a62381da9cffa46f2d0da93ffdead1ce6ce7984a5aed38d650bb1af

C:\Program Files (x86)\TotalAV\System.Diagnostics.EventLog.dll

MD5 d975f4a3de1da0f9f44e44fefddcef83
SHA1 f2f9d4bc23c7d49832f49b5d080e6758a2bcd0bb
SHA256 3e585a43846e5817c72a48778759232e2e9328af4bc6ad7f04804a11f3918a19
SHA512 819596d1438a7ce211470555f36e254e9752864170aed6535605afe148511527f339b9f900962f98a70219ca71e130e48cd9c743a9c0dc20a8b0e26a602986da

C:\Program Files (x86)\TotalAV\System.Diagnostics.DiagnosticSource.dll

MD5 bcfa0edc100106536e6104f183307c63
SHA1 3052823d30795cb08147eff4686bc58325ca4fe4
SHA256 c6befd0c09a36dcaeb688a5ef89e991187167e2153f930bf09e6acbc9c59f897
SHA512 46a16abed798d67071212ce011a9c251c6d715978c715f140679873176d33df4b8daa090a7a9c99a40ac086ca951df1de744d2fc1ee3d4f0d74d495e253cc01a

C:\Program Files (x86)\TotalAV\System.Diagnostics.Debug.dll

MD5 5c4209fc9564a5aedfd35682fbd99ca1
SHA1 27f028d41cf905d0371c71e7e0b09fbf939264d7
SHA256 ff3ce0f75423aae99fe0783ce99ae67508a3ab257ade509a8cdc0770bb97c0fc
SHA512 1f6099afe1d03f0761381d5597120036dae4794789ea60f1cef232cb161d70f73c5614b48205983040b0166e5a05c09447a1c17c893828fe7db5c04974fc98c9

C:\Program Files (x86)\TotalAV\System.Diagnostics.Contracts.dll

MD5 ca01cc510c6eeb820119263487a0f31a
SHA1 a260cbad4557c5ed85b8d9fe44910d2eb27c67b7
SHA256 9c292b4d80503530430658410cf41fcc73ca598510522a985a0af0dfd5553aef
SHA512 9c272c57de1f62f7e9c43714b893f08887e86f6ef6c5f048571ca342dcc097254902f901a6fe4d83485f46d1319a4c0ed89d6973fc68e1387453827cc54d8c3e

C:\Program Files (x86)\TotalAV\System.Design.dll

MD5 c5f8f18779df6ba0854b7673cf7d08cf
SHA1 2db5a071cdbbb08966d64f2e5b6aefb48914f5b7
SHA256 94cbe7ce7868e6f134c193017992091ce4d2b3e976272e4f55f74b4d34e31dd6
SHA512 ff0357685c6ed1b6ded84f5fae5db99d6672567c67ea4ccb598094dbfba565e4348fb3274fd3bec350fe81a3ae36bc358a82dd50b3dcd5be5693189e0409f1ea

C:\Program Files (x86)\TotalAV\System.Data.SQLite.EF6.dll

MD5 4f428be996d234e1e66b4651d5850f8b
SHA1 4444f6b6e5fc3b117abfbc097358932a72986532
SHA256 6d76c1b7aaa70c319d5802505214ec734ecbaed9f8e9776168e25ff0808c4185
SHA512 302ef1ebc733d716150470a37c21fc8037b0ce2404a98d73b94c84f0c015e69a1c3249d887605ce577671c20d6c5011be6e3d5510a774dc46f2e214115fa5491

C:\Program Files (x86)\TotalAV\System.Data.SQLite.dll

MD5 3a3dc6f0ff7b9d8311b62243f45119f1
SHA1 13ad0df5d3914bf4529cbe424275cfdefcf16aec
SHA256 27869ae8706d91d81e29b669e8140abd8b6bcd0c8df18e70fcc7d6ecec9469e6
SHA512 031c7ec34f07499f94cea63b09dc53cb3515a139cc60c0544c76be8fd6f9211f53a7daf927b5d1487abbdf945ac51ecd8e8d82b48a706c6a21173276d6b45c0a

C:\Program Files (x86)\TotalAV\System.Data.SqlClient.dll

MD5 f40298c4e892964b837b3d8b61a5c103
SHA1 e0eafd79653a53eeb3498087a4bcedeef7f11046
SHA256 fa4c1ff23369da57b5629fcac7ab9a9dc1729d57d709c4f8773dd78dcc35c2b2
SHA512 eab8793ed77e0f87a7236e30946275b53d383f291a49582cb795fbd774e042d31dd241ab4fbd8e7cec0ef62197a9c86775d3b76a126c9f85a1a4a8bb43a70bfb

C:\Program Files (x86)\TotalAV\System.Data.OleDb.dll

MD5 696b0771a3e4563dba4f2dfe142f3a61
SHA1 5d110f65b56140d1a4f71f18162bedd02e04ad46
SHA256 2ec6f1fa47ea95e42820119bdea16416dbc99ccf9993e8c572b65e2cf13eb71c
SHA512 953adfd1aa41477f07cdd821d5c9de6afcefad7062a1bfd41dfc5054f37048511b3db2dd17cd21576065287fa44f59c7f3dcb437f426d77c7a28d61a71485a26

C:\Program Files (x86)\TotalAV\System.Data.Odbc.dll

MD5 17219622e80e5992fd7f44efc3fc0ef2
SHA1 3902c70670f0bbdb6fc58c7dc84cf92d9ea47e31
SHA256 e4ed82f8cff2b194c223b7cae7dd67a54f433fa27e895ec216c57576659ca7cc
SHA512 62defd5445bb88705bb8af9b5ca3e920af0472b075f1f5cc05b564e2010e3d185b54528cf16f5f3b198a5b712cdcb969314915be032ed0040c3424cc3a0cb294

C:\Program Files (x86)\TotalAV\System.Data.dll

MD5 ea3dc441ae295b4f6fdd6aa01fee2411
SHA1 23475b7bf62c9f222f6c2c1c420593ea45f77c9f
SHA256 4c080437275d09e0d0ccbeaaaf6bb6e9098444b47297fab1ccd1a1ca4c85292a
SHA512 11914e4f87c40416509ff6c1eaa91f5eaf57c1b36ad7622b989985389f2d406da2a27e7965998edbca02e635dcc0a6d3e8b2e8f2686d9c7b6775443ffdd2a57f

C:\Program Files (x86)\TotalAV\System.Data.DataSetExtensions.dll

MD5 cf0fdfd68fd31c3cd54c095b968a3b83
SHA1 7d65f542a217df807f75766c5bbef2137aa2ef60
SHA256 ebf0cb220bec0ebdafb2b3aadd2feaa0b315903b66f438e10022e97cdf40b122
SHA512 55ea61cef71c30302aa9c7b0943ae99b3ffc2c8cdcf4d428a96c646557081568048c5519627c42b2c9f2cf8d59dfbc3844885e56b698162d6e9a81b7d3e5f986

C:\Program Files (x86)\TotalAV\System.Data.Common.dll

MD5 949867e3df037992b6f6df7b91aaabaf
SHA1 104622ae7b3abdd5d79bf7cbeae9001f00403aea
SHA256 cc63f1a6bf5eb643facc49a9741cbbb881ce13ebc1672c25feb5017516d9f12d
SHA512 2f16ef2fbdc62f59b576003b6118d66aa9e8ee471a1140eca2a5893a1f70bfee5f22141147060e49c02e101e17371c99b0a49b0fa5e61904044b998991b21081

C:\Program Files (x86)\TotalAV\System.Core.dll

MD5 347aa3e63d9daf15be3f5fde2cd2c971
SHA1 51d76c9d8d94ae8b329080217e91a8ab90033342
SHA256 66bd8ef96f1ca8c3578e3b8e6ee2a7564b79c08c893d0639c9e3d79f29779f3d
SHA512 966b231192e2b04e8e56153c037dcf17c01878bbd5b92b3e5dc141d09025f613b2ccc7bac9a7ac5309d04a6ca3d2593e851a479246381a500cc1d8948e62a7ae

C:\Program Files (x86)\TotalAV\System.Console.dll

MD5 c2efc291f336ded197a1957c0478bb8e
SHA1 b088d2f3a130e71438a307276727c9c295c5792c
SHA256 9e5dc9c6ea31e667413ebcfde4ea5ef6e1e1e6296b1698e717924becdc3d7064
SHA512 fd3c75964bb960ae234abef12f14fe0ee0ff342ff9d96396e25be1176e47f90a4bdec994f1f438c404caaabf3497c327363f062e4b875e4b9e80d54e3b64dc87

C:\Program Files (x86)\TotalAV\System.Configuration.dll

MD5 b3d9f7e6c869474cac528fb820c2bcd6
SHA1 bc9a6d99e6a9e193665c386392798372202f09ee
SHA256 329ebd13feaa6a484a272ff7da93a00557afa61847799485d9cf101a77a35366
SHA512 9a758f942a49da19433e697787d1cb98e438779c37d8f5791342d19ec004aeb34a13d07aac692e05ccf27060a55864808daee10e1d31303a6a63da8b5683f9fc

C:\Program Files (x86)\TotalAV\System.Configuration.ConfigurationManager.dll

MD5 5294941977402f5a9f85d3075feb5870
SHA1 84a98acbfe206f02e04035bd2df17cbcb629af20
SHA256 d9629ced6b319b38524a7058e66a0f190452d1a24dc615fd66f8c4317c9ad894
SHA512 4721307125dd61cdcd6a56b490596d2ee0a0f117abf477be6926a0124544d3d5147fc6c10d9ccb33bb41a3676374fd3ecb3b0b4098359715c2dacb59f2cc1f8b

C:\Program Files (x86)\TotalAV\System.ComponentModel.TypeConverter.dll

MD5 b8283cbf4a540b91b92ee5cd218c2630
SHA1 0c3efa24fa62d4e0aa3835e1cd4d4009b3b292c4
SHA256 f43a2bb016e6876ff787cee39884471b500fa0a5261735e9e16e85542af8cfeb
SHA512 3f3fed446cc85845d6d73fa38ceea14c50b749a8b2339f0a8bc8777db2b643ef9f3b5821594bb68093428e38bac0e14fdfd535d1691823b9d6dcf334016a9731

C:\Program Files (x86)\TotalAV\System.ComponentModel.Primitives.dll

MD5 387448bf92f46e5677c8d2d714680326
SHA1 a9c69ec20d71a053f1a4bb420941b3e4c2806a4c
SHA256 6101264a84dcdaaa463ae65876495d7ad10d7f03161b4d1244cb880441ab178e
SHA512 d2185de7191013ab47f843bffd8fb4b6c1a1633e73b09da145bbc74c55fc9e63a241a23d7b4f8957603489fceb7f67537dc2594bbf4061f0dfc3006695919dcf

C:\Program Files (x86)\TotalAV\System.ComponentModel.EventBasedAsync.dll

MD5 d8de0d9fcda718426d3072f4052c6485
SHA1 fab9768c697a6c4e6f9428f851b33e8203b57b99
SHA256 89a2d921f2c2203e3eb295acee96b3215e6306e30d0ee1a39150daf868b507f2
SHA512 4707755be9fcee8615a3feba2012a098fad609fc838f3a6296d04f60830ca9ca8f6cc82e39f3f80219749707ce819110a86bf752106e1bd7122bc2ead456b8fc

C:\Program Files (x86)\TotalAV\System.ComponentModel.dll

MD5 0b18c6343b9cac4158936fe51c0ee660
SHA1 404bd6c558e9b8abb3692a3071d2b38c2e50e45c
SHA256 a15a39aa1df6a921085bf47cf85183cbff7b6e94cfc7d1ab478195167782babd
SHA512 6097c234fa0fe44285d15bf3e3d38f7ad1079626c3c73578aca6a0d84c550259556a69a2185dc210046ba0b63086c4c22e035b67ce15a6d81a206bef0e5f75c7

C:\Program Files (x86)\TotalAV\System.ComponentModel.DataAnnotations.dll

MD5 ac924580d865d2df33df0f6b74652e3e
SHA1 e12e1c03479c1daeaf10b4536db2f3dea3be87a0
SHA256 b9a9a982e1b48977cd6ec751e818bb10f21547eed609c0614a6da3997417928a
SHA512 c41dc2d0cf942dfa748cefd99b5d204a5952a91aad5134024348a8602c21bbe7198e32e1bcb58974f0ac6a467d1d2245ad0744cc70f093d56b02bf9335e80456

C:\Program Files (x86)\TotalAV\System.ComponentModel.Composition.Registration.dll

MD5 aff4faf177f73d0e257b544538bddcca
SHA1 268bffd8f5da2603dba26733a9611bb5befd0cc5
SHA256 2d9424f2fefcf665694aea12e2cb7ff7fbc7196049af90caa0e43cbd1563f436
SHA512 c70e8144915e39ce020fb47aed98a471178f5639e43cd9075973e520116403af6f6e56bc5ee52646eed879dddc206a6a8faec1a4ae5e39da22c18abcd4e695fd

C:\Program Files (x86)\TotalAV\System.ComponentModel.Composition.dll

MD5 f84d96a9698df9c7e48813376c2fc81f
SHA1 7eb3c012e2c53520dfd2086a8a7915ad919c28a8
SHA256 c3d47555080c369692813fcf34e70b01642e4960d3b8048c448ca939a9e1ab30
SHA512 3d73af67e314729ff3d57070fa0af5e7045847aa912d2173a0b156da590358e6b52154c6b7d32f10d1cba56fa8bcdfa68e69d89e15d1b6f25bba16b102c5b8b9

C:\Program Files (x86)\TotalAV\System.ComponentModel.Annotations.dll

MD5 30b1666571a3852105649cba73c55121
SHA1 9fce126661b79cf304ab3990751f45bb11c2b3bc
SHA256 1c9ca64fdf263d84d52fa4b2b1594a400b57a873139439c065625ff8e2a21a5e
SHA512 cd82b3674d85587ea2fe0ab82af0a57bcbec55455ca87ad364164b491d9b8cd94cb1526d14997d5a53592f30c7aa22365a024ff83820fe6f0f3e3a8e4137ee1d

C:\Program Files (x86)\TotalAV\System.Collections.Specialized.dll

MD5 f765dcc06acb0405773428bdf129f8dd
SHA1 a8ab97da616c4a6b029751be3707c8fd5b062ea2
SHA256 dfce971806b56567a816b8364fa0880679dbd81c1024c135eeccff3c9ccfecb6
SHA512 0176e3112796f04ac8865aa62047e50d243917282860d057c1bc4ce8a7c58ca24f1286629358b66dd0a67fe1c0c2aa5319735d1dbe60d8c6e75ac04e1e8df01d

C:\Program Files (x86)\TotalAV\System.Collections.NonGeneric.dll

MD5 e5149c5a1b021247b8eb3102dd12c37e
SHA1 d3ff95fee15ef11276f04228079df0aa6bb36ce3
SHA256 f7f125366baea508eba4f5c58db2b796bca77f1ddb7ef58d9cbb41f48552817c
SHA512 972926f98a286776faa228bcc0f4348ce10b027a93aba942c70950dbf81d1bb97f82c00e773a24b008429e801eb3d78c4dcd8b7144c40c3585b741cd23cc5eb3

C:\Program Files (x86)\TotalAV\System.Collections.Immutable.dll

MD5 5f7aca1f4c6723b9a616d58523183c7b
SHA1 d19ad439d779be30c2d8efef93fb4e30bb506bfe
SHA256 3c73145b2a78a6a37abbf428f2ec82fbd92840d207f0c03a66252a22b632bd01
SHA512 54623d1b5d6e555fb284d082bdd0e8be6b6101a0fd329c8d5b9eb15055ff9c69ecb66bc41a89ea91460f4d28a0bf6eabad22638ffd618811a43134c21a6cdf01

C:\Program Files (x86)\TotalAV\System.Collections.dll

MD5 9b63ce723dfda91347901c0475e65430
SHA1 6074f7e122ee6ad2f236600e70bccf2997e798d2
SHA256 f1bf608e71fd2b229b7f2f43aca213858b5fadc79a388fbce3dd125bf003a205
SHA512 6597c9a7e25b6ba77950fe01db912a1d270d4b34c3245397265c7edd4eacfa0094b499cc167132253b271e5badb6f0376222dfff6446ba84219559f51ea24410

C:\Program Files (x86)\TotalAV\System.Collections.Concurrent.dll

MD5 34c497eda61e2f73726dc57562e96b7b
SHA1 0e1d04c8d1609a3d9a8d3aa18fb46779f1806a64
SHA256 86bd69a2f0fc3736d94deb5aa3e695a2b99d692c743f7f2b43e8ddf199ae6eb6
SHA512 dddceb67b4fce4a1b59aa6187d63b80c44587d7a60ebcfd3a08220e7c1ccf98c3a1006b6d42fb2c2f2219020a1c675ddff69e4e5b2fe86abcb1935c4880b6116

C:\Program Files (x86)\TotalAV\System.CodeDom.dll

MD5 f92060a47c375aa93f21dbc0aa18f908
SHA1 34642be2d85691828482d6b7b78b1f0cb2b387a9
SHA256 d3910d8782594fed0a1542362ac0af0189ccbbe78bb084a75759245b0fbb77bd
SHA512 fb73612565bb43981a11e12dd89477e5cc70c1392c3948a6d5a44e4d9b3d59fe5ee9723cf21cb7cd121cd7933c347201ba3adf42317c77b3c2dd652f4130350b

C:\Program Files (x86)\TotalAV\System.Buffers.dll

MD5 ee51a763ea8cd7a3115ecb3c99a5544c
SHA1 a8b0bf1ba791f0ad38b92d8893a8d3f6f9656b8e
SHA256 8e4f4a2a7e7a389f86004ee0b0dcff9e99f0375cd4ae8b1e3f751626fc633973
SHA512 f6b6232a453242d4856b420556f5567ed71ce85c8d23f9ad3f4a2cf0d3534721d124caa07d7de6f2efc192aa3b4dcbd7b03cbc23702e5fb823cb59301c8af520

C:\Program Files (x86)\TotalAV\System.AppContext.dll

MD5 97057f8b94f3ef7bfdf76bda971d69ed
SHA1 b4d80b317b7ca2d32879305faabf7d49af4fb7ec
SHA256 76b3757d6a5da7d268a412f342ce0997b2649978504f25daeb9190266a4686ce
SHA512 6fff3c4bdb29e7a82f9868bf0d5120ff26a1a7ab8bfd9ab5c2231315d4444ee2aaac2d484326dedf78e384e1ebd4f5985dc41afe1509a0c11e44cf8774f273ed

C:\Program Files (x86)\TotalAV\SSCore.dll

MD5 22e6f53e4ee30b78b0746e4b5672f2e3
SHA1 073cfca6b4d9324777fc07228e04c74c23dc0ef0
SHA256 38ef895e3910c6e19ef0255093587840ce630bd614a060feb44150eff45dfbbd
SHA512 33436eb0afc55f0a4445b979d6285f8bd332def68aebb474993a3273f608ae83eef551ad82b7e5428e50a6293df7e7eb4600f4a13ebb484b309ecd8aa5d07c30

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.provider.dynamic_cdecl.dll

MD5 ddefd87d06e352815663d1be0dd33d72
SHA1 d058fc451aa076dd39e32303e78ac9dbc3334cca
SHA256 d7f066394f6754b1a06dee90ec6f076d9bfcd07033cf6bc19a2af8baf746e8b2
SHA512 9e8df90322986a252247b0ce9f2faa8532f92fa52d821fc1cb46b2d63d89b67cf48d65d31a99998f5c5c75357bf168fc301894884243cab96f44266abba4fad4

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.nativelibrary.dll

MD5 f7bd7cf71c917b7f05667945775b40e3
SHA1 8140e79d3aee95ad338d292407e5c0acca99d494
SHA256 3210fe35503c5cee094f9c1b86710850dab15deb36ea53c266a9665e4ecb793a
SHA512 6dcac6e463264c74370f5b3f2ded397cc3fe198e9a739fd7aae04348e149e205628d1496a71bcf65f6e843a7ff61f7cf60b6c4616e062c4e81c2c5b5c921261d

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.core.dll

MD5 879b403dd3ec1d71623920b0ee2d1069
SHA1 51d4ce115b2a57d58dbe42df31402934eb34463f
SHA256 cd9862b8fbfd400e8526aacd7bad012a7788f00ed13a3a9458ba3f20a6512257
SHA512 ec89881e811ff07dc89328019369711a80ead72a86ff9a9d3e55858dae89897d28dc847195128e2b15bd6402efcd4a7b62b986fc599bc9b00488fff086757fa3

C:\Program Files (x86)\TotalAV\SQLitePCLRaw.batteries_v2.dll

MD5 0c9ba51b96a446e0fdce3810bf76fa45
SHA1 6defb626766f10eeedae8dcf67c3f9b13be7534e
SHA256 aebb3dbeda2b2eb0605a20acc126b50aca3795b066155292dad3666f730603e0
SHA512 d74fe14562b39f74c4b3d1e1c0db95a77796e209d21006e5af4d82840febbeaf7ce6c2b15cb0622a4250890bb005ece3488190e00344ae2d569917c94e462bca

C:\Program Files (x86)\TotalAV\SQLite.Interop.dll

MD5 5810639d1477c0c33ddd1efe75256dbd
SHA1 6a6149730e40fecd9c30534e8f806e310d03e1cd
SHA256 0dcdfbad2b4fd598ee78682b3920e1a268b03bb47b5dc26fbb9050089368a043
SHA512 f22368fcf5fe5495d0e318b692f163e8e6438735601132fe0d66158c8ae26e99453e8931388884ecfd998e42de3f98bbc9b10e89ff081609006b9805c1a40d9c

C:\Program Files (x86)\TotalAV\SOS_README.md

MD5 afdf90f86dd5c98ccee0be65cbb99f0a
SHA1 dd66bbff9bcc51522b0985d0f42b34277fa3ae6d
SHA256 72bab8ad57ae20824c84aaf9fe2e0e305b2108286e066545e6bac14ac7af1450
SHA512 bc06ebe3b83956aa78190b543134d89112bbf33dac89faad71830cf24a872aa1982ded9d03cb38b969727502d26b7b9154781940f0682d5a7c7d330531a137f7

C:\Program Files (x86)\TotalAV\sni.dll

MD5 c62a83f20bc23aeface70ec13003c4c5
SHA1 35553cfcdcbeccdc49710e68aec495c16880f0bd
SHA256 1446d6b26da49a5a9f366972f89f4e236f916955f31ddc38ebb96217c1cace9c
SHA512 4dda44fd5b538f5da9e8cb46a3ab1bdc14b43425b9a61249eccc925d986af7b8b3548db9490238f14807909ecf479415117141ddb344119438a59f97e894ea37

C:\Program Files (x86)\TotalAV\SharedDesktop.dll

MD5 f5dc0973ee6141bb59abe4608b8c1392
SHA1 ab32a70cb5d8ae0b4ec4377e70491721253c6d37
SHA256 e68e4eb5823a32b73fb0eb592d4b9f337fcb4047d13f563516d913f482bebbff
SHA512 5c4e3849d9aee870d5584d35d20ef4fce7512ee1d1b8949727e31a72ff43f335e5fe448f382c49a354b91ce7fc75b823180ebcf37fae9282144c171cc0195bbb

C:\Program Files (x86)\TotalAV\SecurityService.exe

MD5 290fb31b70589b9f2f2dd115c1d0438a
SHA1 99689b00694074083d90afbd38709e7fb8739a41
SHA256 393a4cf8bf0709d5ba956af454a5fff5dd89fa6541a3ce7138d4a7e7454120d2
SHA512 f341c0ca42ebc302cac5a4c3202b5171f6be0c5847ba061bc5689bfd520428b8748d47f34efa633ecb9508fb59bfa2672d9b5a5b64a40c27c9313699c620c22c

C:\Program Files (x86)\TotalAV\SecurityService.dll

MD5 cac3e97b3fd12cef84a41263016559b1
SHA1 390d11c3ad94b61aad04a04f00d0da977fbb121f
SHA256 ddbd34135d6d4356887a7f996013d7e7a5ad63a4f5aa7990d160c2668d93ae7d
SHA512 614e5decbac6aa7976daded1635752b3eedf2402d074999068fbb0428330dde7d86661ae3b7355e13e9a685b0f5a1684cf43c7dc898c3105bf80b8d2a5d3c9d3

C:\Program Files (x86)\TotalAV\SecurityService.deps.json

MD5 d3da7acc157cb704aaa29c814100e142
SHA1 bda1ce953f6e3f0f4c4bcef2d5905b5679b6e2d8
SHA256 0e3511d21b5ae8e724322a16188558c78814558c1a20950c66e1e7fff5810ede
SHA512 c5737b7cbcc7cf1208dce95ea0b66e43802bbb2dfb6e60787854431cc4f413c63e22769564057bf3d72ba391b68a0c2c30d3e9296d16546a86d52074d52124b9

C:\Program Files (x86)\TotalAV\securityservice.cat

MD5 f7d1d228beafd2473fe5d039b0b5a8c2
SHA1 e9855109124b96c781c68e4fadfc4a658db7c305
SHA256 17da88c29be86ba54c810ec0afdcfe9584a648e24745fdd3c049791959c47cdd
SHA512 2a7c81444c9a80670674a8d22e8aca5e516241168fde9653977f3d9dbbda48c3cb4165b94cbccdf6012c9c28d00abb47d523b785fee35b9f98fbbf4fe18aba29

C:\Program Files (x86)\TotalAV\Savapi.Net.dll

MD5 75b793d4c364c082c55625ffb5db69f8
SHA1 f21de5183c531c50ed2627440d6b4aff97c10d0a
SHA256 d40df6a43346e5ebb7e6d52bc0bbc65354d8d2d8c5d4acc09d0cfcfba74437d3
SHA512 7b2fd2d95cf4cb918ce1c73a201b2f5ea8e23003f1c7678026e1a23d8ff4fb683b707b33f0e7e3b4cd5d53c1085e1645968da808f6b78181558d5b9e9ada6bee

C:\Program Files (x86)\TotalAV\ReachFramework.dll

MD5 948cb84290473e06b8f69bed5a38ffaa
SHA1 61acb3f2aafd33d9c40ff848ed02e91995d02986
SHA256 8d6192a62168a5ee42b45eefb3abaae9cbaf0fd46e2b4ab64a612b6efe8a4c8e
SHA512 69ef93290fe2b1f180a78fcf99c9fe9871d4f29361493649e1ead42fb032af6c0b9ec0ecbfb46af64a2aefdfa5202b67a16a86e16e9b4d0a6c61ec2f307e94e4

C:\Program Files (x86)\TotalAV\pwm.dll

MD5 885a2706ad5cd98c637a9d02a6712d56
SHA1 7bbe52a527efc084516c512372c8102749bd3746
SHA256 58ea66beb9fd07738a6a05622e04cc14bdea6e2d7628c3ef52e9960ff254ceba
SHA512 f966d711ffca055354ee68116032d818ce857237c7c27d92ddbb5f5a6a4b8dc3d17637e22532e524dcc72a428aeb60ca534150f41648e59c842a804b89790d63

C:\Program Files (x86)\TotalAV\ProtocolFilters.dll

MD5 a9ac0cc5fe79a8e772cbb731ad4c7bd1
SHA1 bd138692843d2dcea3adc7df5df94eb7603d1ed0
SHA256 e02b3bd979db2a64d13dd6e8df2dc805531ac2f960e08755054ba6e0e4b03e80
SHA512 768cf34962d91032a0fd2defec4512f49b8fd1e5f2350be652b43deb45898b6ab106f9ac0284beed94ff19a733d60982cabf8a5811583018a884693609081cc8

C:\Program Files (x86)\TotalAV\protected_elam\x86\protected_elam.sys

MD5 cf833a28b40ab93655f342a9d760d224
SHA1 d03ec91202f85970e4a24124bca36d7b4e262a16
SHA256 0b0d0898257846c320f7ddf30771126bbdf9edc7f9afbe1fb3d4f0925680215b
SHA512 3332f2eb60a422124628c749ba43a140ae6bc8c753019ba78edbbf0a390efcccefa15f3eaa192e7bb5b2d3195cf58def64bae42a844f5fbbde741d3c465a5e3a

C:\Program Files (x86)\TotalAV\protected_elam\amd64\protected_elam.sys

MD5 e9806e894443f95671064755f9663a18
SHA1 ee77dcdeda8f1c8f81dee89ae3924c1ef5d6c69b
SHA256 119bb976356fac1cc0b81e2cdc8d1135c1f57c1d06b631a1814796e1601c2bbc
SHA512 7a52c467cbcf80ec10e8e4656bf57198a9ee4b28971120ac4d47de3f3b20a5acd4199366d7ebe6920c9b4232768c000a9bae66905313016037f46a64f62f0cbb

C:\Program Files (x86)\TotalAV\ProtectedAPC.dll

MD5 ec918ed1f2f603ba94a2507227d39f26
SHA1 ecad966014ff84d553203ae02a84b8e23e225550
SHA256 c7f836ca5ba7b282712c7e5972855cca616d53956b144be1576f83ea44be9743
SHA512 f2fe12e9f7c81aa25122b0c28e90366a8d23170e476f644d111b602417ba5d531a6c6de5a7e0c9b37fc68f86154f9ae82bcd3a69aa1454e25f24a86526815524

C:\Program Files (x86)\TotalAV\PropertyChanged.dll

MD5 4826da1d501c41bf5869823d4540cbab
SHA1 311cabfeb0aeeeda3495af1f529e5427b0241a14
SHA256 52ec64563ea08f61ef3f568699fd8a66eb5e532d5f7fc342ad46a69ccdf81ae3
SHA512 ba7475503aabb5b602ab1d748cf5ff4e55fb3a6d0ea3b67dc3c1d6142c9f87f88e814b9cd819f66cdcf2c387b3e79cddd1314a6c32906e9e71c0ce0d93ca202f

C:\Program Files (x86)\TotalAV\PresentationUI.dll

MD5 4af1178bebfd8b52ff646b10130d7057
SHA1 91685be41b4e616c6b0cb480b52b9eaa951b65f5
SHA256 b77e0b332b763360827c9d76371015cb50b46ce1a611e5ececfa0601c6ff94e9
SHA512 b62bb3aac73ae66c8d8e632d4d02384ae2281d68ec259f54cb71dee784bab4f11fa4d548bc6ba44e3e2d964be427c36d6d58585e8fb97b2fc68b356ba2090dd8

C:\Program Files (x86)\TotalAV\PresentationNative_cor3.dll

MD5 80df7c9c106dcbb1d7ee2cacfca143cd
SHA1 997c002394d0c7e818bd3068a26afa2dbf6beb58
SHA256 5a71ba70796a1d679ba83f28cfe0cdd44eaa1778e2084cc6bf2785682e6d9447
SHA512 81911a29b4e21302414ea632a2ce6ba58fd6b889ca202f5a73f582a5e8dbe9f473a593ad19230b97fc2c37e5654d7026b7915183c357f302dd75a388a7b205f3

C:\Program Files (x86)\TotalAV\PresentationFramework.Royale.dll

MD5 b576e7f9cebd41b158174153d91fe0db
SHA1 84d7c508b3ad1646bbf5b5fb6e2f249db5723188
SHA256 105a980b2fcbd8fbc3262b87a5d97890f8612158f95f9cbffa23b238e0acc729
SHA512 99a14743bafb174b85fc4062ae21fef86a689dc5ff0cc7435784abcf6d5245430b7634e8141695c4dee5600a3e086633c1ae363fe4296a81d05c76dfdd44a31e

C:\Program Files (x86)\TotalAV\PresentationFramework.Luna.dll

MD5 28c01af7048caa566bc544843e666b14
SHA1 362be72687fb1e98e5669a17230efdf5c6e393ab
SHA256 737477e6150f9f5fb6b63456883df87b5cc0ec59ddc75de8c8cf69749ef41229
SHA512 78a910c1e616e5d9a5e9d8aa9307ddd00879efe452adbc0b69c541ab0adcec9c9a8825e1cdaba4d7b0deef6f127f20cae589cdb771583ad84c5f13df2a788dd4

C:\Program Files (x86)\TotalAV\PresentationFramework.dll

MD5 03c9a4de00b3f8835146b5a364ecd065
SHA1 d390564ace7f72818f69c9b0d9eb58c1ab8fd182
SHA256 73e08d9f4afc20be63c3309c6aec1b840df189f9c22018a7b44665184004d1da
SHA512 2e5217b52a61b966acc233091f44cecf97b8703a5ec77fcab10f9467505d5da209199b47959f1383ad4f6d8c6aefbcf2ce8e7fa33fda04f2cb9f428a58e0c611

C:\Program Files (x86)\TotalAV\PresentationFramework.Classic.dll

MD5 7bf91a2c218036feb7f66c043d12bfb0
SHA1 ab29704c24f7b394ddc716f17d9bbcf97ba151a9
SHA256 e061162ee7263fdfc72db682b71e220e8108f1c523dbf634ef630a2393522535
SHA512 61cc8a77cf28daf38f9b782f8fa1e914f310f9ad16adc7d6af8ac49708a12b97164304ecaa370cb5b3c4a73677584059ca77a636d3ded9c672cb91f6181ff53f

C:\Program Files (x86)\TotalAV\PresentationFramework.AeroLite.dll

MD5 2a37a62d650f02344025a450e343bd1f
SHA1 c65d91b21db6823ae36273712e01d4bee1a019a6
SHA256 82c55e4e8d7c81cbacea3b7042a3bd6ceb7064b66bfa3d63477784b01e02a609
SHA512 5460b87607ea14f5652b468e4b2d61fb8960f8d31d6b9cbf275cf9fe9b99e3d59396ba3c3c2baf1111d574fff92ed3328ffc1404933b505c8f5e34d473600d0d

C:\Program Files (x86)\TotalAV\PresentationFramework.Aero2.dll

MD5 59fff35603af5369086a2dcc69517236
SHA1 b03b644518e87b234bdc488daa7567d380e74c6c
SHA256 24e62ac897f6af99631940184a2d26e1f18d6949dc2a1b00fef5a5fe9d98b37c
SHA512 f7484b2aa9acbc2934723077e46a77f6930918ef8bd5f4c93e75f2322fc135089464d56504c29a769c393174e6e03d8323e1319d632626417e2949cd50af377f

C:\Program Files (x86)\TotalAV\PresentationFramework.Aero.dll

MD5 74026ffe0933b4afe3fe8810e950763d
SHA1 b8813272fd54b2f67e65715f4b7374568dca163a
SHA256 54411e1de691917d2ff59be6551af95fa3a20556e5f8058bcf49b0cc1bcf68f6
SHA512 8887dd784d071b6b28f0e54ef0dba9488a741f2c109d46aa5d074121aa5c7d1f1ca2e79aefab8b53f7de9a7369352853c6f5ec6aadcb5b068c94da69017a7e78

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemXmlLinq.dll

MD5 a0a471e2ca1ab5cdb84165223aa1ac93
SHA1 9190b6b20445bb109aea2bd135d11103c8f71306
SHA256 1d9bb8146142744b5514ac1ad82306961cf594b6f0b75adcbdb61241d2e02d76
SHA512 5b4a5892ab3323138bd455b626d2ec540c73eae89c2aa4b3b639ba1e6d9946c50d557f5059483c71b6def344a9d31c4ade9026f049358c5ebfcd43b487f178bc

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemXml.dll

MD5 f9ab7399b269797a093d268b1a71bac5
SHA1 6263304ea5c307c54ef35479aeb6d1564036b928
SHA256 7e63047da788d63ba9967157fab4a441bc83bab628e00abf6dd044e5d1969688
SHA512 3442a2a8b8af5960a2aa4a4db1771ccd4f5cf48da4eb7364b1c8ce9bd465ea20defdb1ba5aedd59dcdc7efd60db92f3ffc417ffd6d837b8e6db4c71ed3f8270f

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemDrawing.dll

MD5 9dd4e7e817c6c220f7abe2db522a9578
SHA1 0671ebba04cf1a4b003f821cb43dd159b3373b2e
SHA256 6a167a15ce94ebdf4c627fb651e05c694fadeb6bb00e5814db13b2e7dd33cbeb
SHA512 33a5fd207225c54710c027ce966f7abbf3a3c91622c68cdc4f8efa99a5e6f5ae6f3eaa98edeb894779ca3d383e08de804c5da6ebaaece17ad47e2cf515decd36

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemData.dll

MD5 dff4cee2431337eeea633854d81fc38d
SHA1 eb138c089ea3da756c847cfaaac595586734a098
SHA256 92abd19ddce03e86f9c884325f615976d7578a5b4d9607d9871290a588c9e809
SHA512 adfb1077cad4308a4547e8cce9d489c3c4822595feeefe1cd54ea716d77ad5952101c51807fd4a2413a7938f6268c8aea12e129e05731d69006fba2a68cef8ec

C:\Program Files (x86)\TotalAV\PresentationFramework-SystemCore.dll

MD5 3d59b212dff3c0fa45214c6291a9a330
SHA1 87311de58423e64b75a91b6319e2a4ae666e011c
SHA256 4ec952a95cb5f7102bd63c59dfdd0491b7948287f2c64d75a57cbb3ea5ffc89c
SHA512 bcbda26622427ecf3a6906821c8d74a97d180adcae6ca168bca73774a898e65f80b10824a1cdd1a578b533d1f3e4a9c2f64417f7e68d7727e70ab315e8b6e1ee

C:\Program Files (x86)\TotalAV\PresentationCore.dll

MD5 00bd4ac73d8c20b14e9887f45454e381
SHA1 a24ac293000375ca862376b5d397a0c3b2911067
SHA256 9a711c29f615b2f292851650cb12cd64b6074913c29125ffc399ed760c853ad3
SHA512 db32923fec19ec450b21e8b2380d06bcf9d562ee05559c53ba47c208d91d89ebe1fb0492329ba6ef072c47ce4c65fe8e7673dbd16307fc74e2c4a7e67d25ad9e

C:\Program Files (x86)\TotalAV\PenImc_cor3.dll

MD5 7560e528fcc8df6c4d4bbd86e0749c0d
SHA1 df3fee25640fb715b7ec590aba394e0457a612de
SHA256 3002b51d51172b402fdb20cb6f87a6c9c0abe8a4a8feab3d2bc4b82f1216e5e9
SHA512 c1871aa76e7ab34ab0e0a7ad9540b306ee45bded1e0e5cb0c9f031da6f69f057d34e0b4a386a0d1e31aab8ba17bd2e0d564e327b828e33dc4eb828eaf00b0a81

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.exe

MD5 30a037962d22c88a6c8a1c1221097fd0
SHA1 8b7f1064a80e42f0de3af2e11d9b76b48a0f5dd5
SHA256 6df0c68d62a6aaeb997e78cb65b572a005b7a3f72d5ffdcdcadd1711d23f5773
SHA512 1da9e0ec0a7bfd2f6e0a2d9214f715d1be9a7e00b96f6277ad9a0f3dc0685963db154b7034a8aff3171338bcc5575a2a3ccadfe537216eeaeb1fcc2ea80837b5

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.dll

MD5 4d4dc71f2e8ed5301fe1ade1ae8a6489
SHA1 c1f5fe2e247b3d9ec5f4d7da2b94409967109fb1
SHA256 8971085fe9cb1bb47d0f757e01a504babd51c624c140c19251c63956745d163d
SHA512 d98be09cedfd786b132efae325dfeb98afd9d2541aa415168ac5a4839c1353ac9daafa204f891ff9d0a7cca2a482988c453d0ab2886459f196f4e7d5434d943c

C:\Program Files (x86)\TotalAV\PasswordExtension.Win.deps.json

MD5 cb9268125c592ca792954257032bd7ec
SHA1 6b2f1f5b425639aabc73dd0c0b119a1a51fe5549
SHA256 7b34d7ea90a9664a8f6370c3b0e98ac3114eb96f0ee9edab6c669d86c2c3cdc1
SHA512 0ed3ac6039d742768ad3eeede207d96abb393780a431330cca8c27561a8dc79777ed11174890513ba7ef71cefe79cb1e3e54e7dab11b9208cedfb754b2ef389b

C:\Program Files (x86)\TotalAV\ovpn\openvpn_up.bat

MD5 cd4d223acddbd08101a159b17022324b
SHA1 510979a24584898281d7190c9981a1f7aa5b09ca
SHA256 6ed4c6d1ba69e5aad84434e40f97c39432be10b903652860f8f16d7861ea79d6
SHA512 8516ff62ecf818db7f794d66a2c479ea549444ed718f519b297a0723d78e191466d8f889f4f544a3e3324d6ce9002ceaa3d119b2a5fb63dcb8a2fd324110e1c7

C:\Program Files (x86)\TotalAV\ovpn\openvpn_down.bat

MD5 08bae2de82fa4fb579f707376d440056
SHA1 33eaaac6f01f017affb58b68636cffa6ce30b157
SHA256 6cab17fee12d3a2c43eb4d7c3a790cdbd7fc9afc6b0c6d60dbbb61594f6cec74
SHA512 67bfb8a995eb12b5f995860472a0817279ff2acdbdc19e7ee38a0a91eaec67a870dfc56ce39cf4bb5d29c227809cb35b16635d1fe1c0bbc64429079e5aada6f0

C:\Program Files (x86)\TotalAV\ovpn\openvpn.exe

MD5 d62e7bd8fcfc550f4c664eb7f6933186
SHA1 0c1434e0afc5abb50e4fc266a83b7d412a23c280
SHA256 1c704ce36e37384692d4e9d111be69665fb2bfd3edc614ed6117ed6b934b736e
SHA512 36f8d5c714108140134d0e1d6852e2ef78da186d75fe6d6134ae7cbe43b79e451762f9e070004b13c0ccbb60e2c5ac12d34664381b7ed2187be57228861c815c

C:\Program Files (x86)\TotalAV\ovpn\openvpn-license.txt

MD5 a5aa9694cc581daf09c7f75d1bc64c30
SHA1 484b11367024a690fbd459fb4f45fd044f42d63a
SHA256 a45afcd949cb0e29a3ca81801c7b72666e585ac039a0e1eac63546bcb7273d4c
SHA512 5dd967d247732aa4d718e25347224ea93a15c597c47507deeea30be84c87283e984daf39798492167a422acdc5af174eebd7f7220162f0907ad89d3730c7b306

C:\Program Files (x86)\TotalAV\ovpn\openssl-license .txt

MD5 4c359b890e7eeb474a96075f6df68597
SHA1 eb7d89454cd1f62d8ad37d61fe52117be5b38a12
SHA256 b9f6a4d26b1c7118c3b0ac41f0777a2b82de0ea25f48a9ca6a0e5550dba2382a
SHA512 d3578180c52d0daebd7b1792a261140bb49a11ff592efcb0c9d520a06ff6dc11ec3b1fcede1c95594deeffbd46d8703d1c5aabcd1677ab685774dadebb1af9bf

C:\Program Files (x86)\TotalAV\ovpn\libssl-1_1.dll

MD5 d6d65e0a4a7706a90e328578251f43ae
SHA1 5a34a15fd21f345b3f6c1876df3503e0050e7428
SHA256 89d49df485a5c33f0ebef4a78f6ceb63e60c08113fe21a911cd2c196bf9393fd
SHA512 2f524f1f9281a643ca3dd657e8136828fbb4c58b259c717bd05ea964379ad814fabd9e47d129ff1866dd92e8d5cadbce38b66c8daf2aba944c57368e7c1d8273

C:\Program Files (x86)\TotalAV\ovpn\libpkcs11-helper-1.dll

MD5 5e12d4d264ba957604e80ebbb436c61b
SHA1 50ad9a622518989a80355d226b77c5c57aecba64
SHA256 6f0e5fbeec6474e0cc2bd0536aed3ff47fef4588fe28625ce2b3eaacb5f0dead
SHA512 e4dbb5e094b48bb47a30dc5782b9a5b58dd039c626922cc7884c00f2bc24ae4c457b11e2889ff373cc592c47daf1511ca4ab10a6f26f7f2f745efd9e64a5f002

C:\Program Files (x86)\TotalAV\ovpn\liblzo2-2.dll

MD5 bd9eab80f953d1674d71c315e050292b
SHA1 7f0d391e1d7b4dd455359ca1381bc5b90a23c84d
SHA256 22c1a7a44308ff6aafd80caa6fd53c93df7696c99feadf9ae700f26365c0986f
SHA512 baedfe72d58711ce95ad5ab2010f99d1f42825b825eae48c72add6c2cb8c8f756eb8d1f8c13b78d4cd6cc2a3cfeb920f4188ca47dc6f59aa1c66b0d83b0ebf4e

C:\Program Files (x86)\TotalAV\ovpn\libcrypto-1_1.dll

MD5 b9eb6a8ac15e8eee936d994bc87f9d5e
SHA1 b432473b753f371bb2415eb63d178e560455d4c8
SHA256 548c59044738554e6fd8aee9e1cd0e6cb13ee7b6f4f71532aff868e771eb8a7d
SHA512 83688bdee057964072215de15039e27f0e3188fc32856183f9de3484f11d6cbd633f36c0f0abe7ec6f3eb17dd467c59e8cc8517a371091279270c6c2bb5c631c

C:\Program Files (x86)\TotalAV\Nito.Disposables.dll

MD5 e4f25b163ce2b0cfdd30e22d2fed7e07
SHA1 16ca226a1380d219ba511a872eaea47c51818d76
SHA256 36be2376633d785adec9031ea49b2f578f50d5d2c74babf86f44566b903b4197
SHA512 5afb2c7b8aaf67eb40964bb0fecd50a9522aeedbe18fcaa3fa02c7305ac3815f49a1e17732fa6a3f08f79507b0f2e19e1bb3cd0246ec3c95a247f7c789c3deec

C:\Program Files (x86)\TotalAV\Nito.Collections.Deque.dll

MD5 f37027e4b63b3f6468fd37332684d105
SHA1 68c3e376ba053990875dabf222fbb320b2495a8d
SHA256 570f6df8ea487a9977c23cca5ce9ae582f645f057015ef779bb1c75afc208052
SHA512 ca8c0eb8a5b884d015131de216d97045a5b7e7ab457901db231b28a289d829803adfe18f58ccd26b153ebff64bb542cc8a7cf0c5f628e7108aa02196933461d5

C:\Program Files (x86)\TotalAV\Nito.Cancellation.dll

MD5 df073384d167ac9baf66b991ecd6df79
SHA1 1278cb3cb7fbca5736fc386ff5e72053c6eb0f28
SHA256 f905ec7901dd2b3e59ec23142518996769b3c6916075776319a1c960fbddef08
SHA512 5d06ca462cdcfbf4223c1b354c3578a8074e15ce850b91861f642c1d9cb29ad31fff9c16144dd2e34c289788b678296a7fc3a664c4b27e655d39415923432330

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Tasks.dll

MD5 17f57e0d9b7c5cc602553301cd7b1607
SHA1 cd7567d67967684e72ba10d24c47e3d5c0eaedbd
SHA256 edef045c965f1dc14805cd66e2a0b2cae2bb34aa2c8e80468f34c34446906d0d
SHA512 759fcc7914add3c80080c6ed9da94e9fa5e2af91752f5d7846b8cf01cc261b1eb76ba59188b1391d04a61f7ffffab7b68e0d8ce3f4b5b81fc4ff53c4aed78bef

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Oop.dll

MD5 73c77e64e8e1f0f010fc4158a1a7060f
SHA1 ed7a2e982f5475d4479467aa248e1e6cc4adb455
SHA256 75a30af7c9e46e45e6c2b11a8284d5eaf681b8d71e531200d4b480fc66b0f65e
SHA512 0fbfa1d573da283c5898e9222349c523cb9c8b22f650af24b6980ab9202249020ee74e079acb6ed9ea3c1a74debef2aa70d33448d1012fc66868fe2f8db32c77

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Interop.WaitHandles.dll

MD5 a4a934cb7cda9fe457e751f43946b47d
SHA1 4cce8c0d38247450b158de3abd320003da9a4844
SHA256 9f6c3af2124d0a7385ec595093062ae203573167332473c0dd6af323a8010190
SHA512 15862a759007cf6211e0062e5257468e86f99868901c6565c08e6c401f9035ee86e2e639ceb8843ed4162adff35b3048c222948565a46e1df25b604254d9aa2f

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Coordination.dll

MD5 805c7a0a6c838cd2e96b402417638ee9
SHA1 843ae9a6129c73f17df1a91ec09c4ac2a06099c6
SHA256 fe34dfb558d65d8b072f466021a0d15de8d202513b1f13a7b45ffc3e9125b588
SHA512 ccd6383841af4188b448d1ba153672b5861814ea8570d29ced77cffc10346c403a6f37bbf2d003b705f7a50a9c008e3a5e45a6bc30f617d9a34f64e0bc103e55

C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Context.dll

MD5 49add3e0dae1181cffc0d4dcde4e9502
SHA1 d2941dd7672b7e1d20ffe3d70dad84a71fb33852
SHA256 14e949e8c2eff5bc7afda30804bdab15e293fde2c9f573c8d52ece54bb21c2a0
SHA512 daa90a6db7cc28f4759deb2ffd3dd8c8f981839a8cca1299ebd558b41488ab0d9c56bda336396e7c6f46af192ca0fb02afb5851b66c65c47e3e39604fcdbf8d4

C:\Program Files (x86)\TotalAV\nfregdrv.exe

MD5 01b5780505301ada6dc102fb77b2298c
SHA1 328c3931a54af2d7adb88ba4c4c18ce1af8d5a72
SHA256 aad2d85472448abe8250cf3180c3d0373540f46e8a8e76d8ef2f78db62be0812
SHA512 bc5bd91c46f452a76ae0595287622256e8c79e90158171bedf6b68d4439dfefceb06948bd49deb0aeb1344ce89a312bb87b01e2daf3880729fff642951c33947

C:\Program Files (x86)\TotalAV\nfapi.dll

MD5 9da4b43b921e4a28d8d440166e0e9d38
SHA1 b063280d258b14f48e4061b2b24ba9ab1dcf145b
SHA256 268142cc83918e1a04a7f9ac1f9f827e15ffbc65bd80dac85a8b7d99cd8721d9
SHA512 6b5c52aa001e0d77e4ec49088c8bdf5460dd0b323ea0f6a7aa651a5dcf3d66c9b93ea5885e8edaa393da85285b912a65d00b83ec08c05d2fe46cd33206d033b0

C:\Program Files (x86)\TotalAV\Newtonsoft.Json.dll

MD5 3c88cafb11eb9ee403dc2980edfaed36
SHA1 b9664b423200e28882a8e543cfdb8bca5ebe25de
SHA256 74deaa342747cf77f6efac6bee1cb6da2e7fa31988b3f1304eb1d01d621ba4ee
SHA512 c5044bcc98bbb639c40cac5b5333c890feb4afb2d54b55d5d702ee7f83d86d3aa329303f88c70683f89658d7fca279104bd2c94ef3641a6fde522716c8365dd6

C:\Program Files (x86)\TotalAV\netstandard.dll

MD5 671ed9d6e873ad29ccff10bcfaea6021
SHA1 49507f0040c27249e209be9ff92ea4c143575873
SHA256 de0ef6c3af1c9b8199ba4e16c1392d3127a4a30dcc4cfbf96bcc463fe0a5d27d
SHA512 15649a0a37d1e26bf3e670ee1986a6f6d991a6821868f2e90c1a1986122c4cfa78854f5f02c7d5ec1354837126f3226da09f8c89823496045644b48fc4e80f6e

C:\Program Files (x86)\TotalAV\Netlib.dll

MD5 822cc56add5d97691b993f64b11f9847
SHA1 42b92efd9348f2306315274e34827953b8b26814
SHA256 9b33915254ff7c566937b73c0c98e579547fd50b65e4483277159d5c7eb44549
SHA512 a3c2e95bddeec26ae516e3b0cfa69a44ccd22f3930a692dd6e90fd4869676f5213781bc5523c15534eaaf3be5a949be07c0f5da4d6b2edf762b457363528f97e

C:\Program Files (x86)\TotalAV\NamedPipeServerStream.NetFrameworkVersion.dll

MD5 f8d4f30967bf2a130721f2ebc084cc7a
SHA1 14d81ae3e20c321636262cfca5c2fd6caa59fb9c
SHA256 463e1a53996e8de4d2ff2a7b3919e24358c1895da120060d32c1bf4f9462bc83
SHA512 a9cdf2ae64e408349e321a69fe609f7b9e7d14505468c9d986bf46fd9ac77d5c79bb14eefe67f6b977705150a2787a41b74e685545240d7d60c524b3bfbbcbca

C:\Program Files (x86)\TotalAV\mscorrc.dll

MD5 30041ff905e8057be55fff732f8de1bf
SHA1 b783bff2e6b2fc182d6a4345c6a33323b8eb7a53
SHA256 ac84b2497a3875aa104e2a18e0dd49a43ea38dc505c57d836f368d8443280e78
SHA512 3daf4b0a481b93c3ad2d078cccd2e185506f3607309c1b11799b15e958137d51528638263281f7d0152751fd4ab301d0dce8705166f05820cd9eaab50beec829

C:\Program Files (x86)\TotalAV\mscorrc.debug.dll

MD5 6552055346ddd6cfa8fb05bef8f26cfc
SHA1 4b6b93bdaa00fe2c3a8a8f313cac140ce04c785e
SHA256 4681c02858164bb8cb210238fde27c7099dfd34d6150e9706da8845a3706b8e6
SHA512 fdcc771b0d7f43c8a808da1280890c721b47d6412a28c53acadd7bc3ddff9c4eae1d3a141f99f1b183bacbcc501fce795d9199581a597ff748792914872ec9f9

C:\Program Files (x86)\TotalAV\mscorlib.dll

MD5 c53ff6de7a243279034e8ddbab23325d
SHA1 f846e0a35c768188769e9fd08ed0b69ab7fffa73
SHA256 3e7f86acfe925900814e0f57828a9b437b108e50315a2d4e87654ac7dc39852f
SHA512 2baa9be32ab750e91ef174fc1d6db764bde37b9400040fa80b702b0989b5053afd9645a2242861548f092a6dee6c76d47f63ee5597cddc5035a07e14e5e9ca38

C:\Program Files (x86)\TotalAV\mscordbi.dll

MD5 0f5287ccf46af868d472a16dfada82f8
SHA1 96f9943dbdf240205de2a17c1c413ca3e0ac9b45
SHA256 776150b3c8008d9ef5d931ec871fc00638d81e3f5f37fe6cd4988353d6eaef25
SHA512 d0e993348577b7fa526d046bb684e449d82a40c0a1964f1714474d9711660eb9f83ef34e01c5fcf1089ab7c8400afce6d0e7946b5f278a08226cb46ad0afd2fa

C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.dll

MD5 94b6fa3995eb2ba34afa532b9fab39a9
SHA1 42480243477d813498bd83839cd16f6b7b828e96
SHA256 839a8f2b052dadd685a7222f69c42c11edf9f1e06964dfddec61320e9f359a98
SHA512 3bc4eeead6053cbf09d48297b75e270117b52562ba21a71d8163e7dc932f02c837fed47a813d6dd3efd43812faf1c9cd934e43bd482d8664fbc5191437bb6d90

C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.Common.dll

MD5 2520a5a2506531cf6f8b4f2a733957bb
SHA1 202e824c042d89400c856a64624db4bd98e51f52
SHA256 9ea613cfa8e489c15d44bc1360e11be1d321de2d0327386df657425db4ebd847
SHA512 8a95c483023177a8a88a1ebcdf8e00577f14a7b8603b722896ba1c714b2cc10477a74a0ff0bf7ffb70aba7e51327e54d07ee5dff6bfaffbb0ef51f08fe9adfac

C:\Program Files (x86)\TotalAV\Microsoft.Win32.SystemEvents.dll

MD5 fa51d1d280c2114a1de24feb9be14a32
SHA1 aa0916a3b709e2a19b7d3a55d2fdcb9cac333f88
SHA256 5f05110e122fa7c73ac3571b82a0bfd5a8462a4b42b0b945c4f901928a29f3fc
SHA512 25c35857c79e03538825ccd6b87cee1d4a569d871889fd256fa413d69585a8e50340a0ececcf1824cac4ea976e15a3eff6ab367b0c4846f66593e0f67d233921

C:\Program Files (x86)\TotalAV\Microsoft.Win32.Registry.dll

MD5 90ce1c7910d0f504b2e3787e1ba199f1
SHA1 3acb3b6dec3b9c51e887f6a750035357bea5ee5e
SHA256 d72bbe2fe0fbc2177dd211308ae7331504ba0317aae60761e94817dc8856580a
SHA512 da7f23717e9341565d36bfaa90ec1e37d7d1ec59df91e495c607d404b00324d7e1c8d216e7adb64ba4bf7973888342098debbb8b8a4a95019200e1735b5204d5

C:\Program Files (x86)\TotalAV\Microsoft.Win32.Registry.AccessControl.dll

MD5 47c158136040881155f35b4877460849
SHA1 a60ab328c456cdcb7f71e14358a0ac202287a534
SHA256 1af18aa247c88bdfa1dbee361b6b901e541c0f7a0c1c31336d65ed5176b13e39
SHA512 14ff78a7029229c046117afc1292c3a4712dc3a4e3c4ce735781deab842b41a9bbb5fb516f19eb614299199074bc1da583d903bc08dacda6b8eb969f1bb78525

C:\Program Files (x86)\TotalAV\Microsoft.Win32.Primitives.dll

MD5 8607bdfc638e4fa1d8e716486a9c6475
SHA1 9e246a9f462097de2b3b2472950eb6273e874efc
SHA256 85c9a4fac07761d259bd91c669e4e1c10cf79d0939e64ee96e32abdcce51c86c
SHA512 91314554e0937194f74c802c695090582e9a6b857da72026ccf5432f5ad960547b4f4e2235f0a56108a63cbb40d60fb7d7bbb30b39f1851606a09bcf34371c5a

C:\Program Files (x86)\TotalAV\Microsoft.VisualBasic.dll

MD5 54427033e0d65a39722a76e07e430eb8
SHA1 7b83a4fe9997310c77aeaa5868b01b2b5a7b7c84
SHA256 89896b1dfdac9c395ef24e7e032f9b746ccc331bc0c9d791de3e5d2b357f1185
SHA512 b6304ec9042eee9d4c9e5f866fe9fa92582fe24dd3ba8f82374a17a7b87cc84e5f9608149269cc4c8e64cdc2c7b5ad7ac228070fe5cdd66da5b3bb9f00dfcb19

C:\Program Files (x86)\TotalAV\Microsoft.VisualBasic.Core.dll

MD5 4ca0c139b698ff4b1a4fbaf653d8b607
SHA1 4881028e15d3fe3e52a6e0e8a10a3d926f3400d3
SHA256 e0864f46e0f0ca66143b43c12a4b37dbe2fbe8fd138d5da59326fd632d6a3571
SHA512 db0e1eea47f75bde5427234888d88829fb184e31be0aefcf687e2dd4e351d9daa7cd5fdc5457ac445f17c5f784f4602f48fa8f49faa2c22c511729c5f550b93f

C:\Program Files (x86)\TotalAV\Microsoft.Toolkit.Uwp.Notifications.dll

MD5 71829de02b099241bad4ef0efba785cf
SHA1 625aca08f1b7020456303794543cc669853003a3
SHA256 b14999bfdbb2a55f335ed3e9da022a73e9ff6e96ba341ffef22637a6f1826188
SHA512 dc5248ec12ff04db6722d6640ce2eab8dbf154ceaecbcb5f473e4ca869f60ada4bd136d849db82524743c652f2bb27d08870d28e2d54977c717b73fc853d6557

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Primitives.dll

MD5 79dec1364dfc994ba0e0af665cfe1379
SHA1 67080f49ee9ed691253ffc4475d912cd2385ec44
SHA256 16ff7d5019e361cfe19de448166383f9a915fe9ea1e08a475a59abe1ec8aa9c0
SHA512 88f1cc84d919ae86d141c0dc95aec3eb20961a81a50c2bb30a85439cb980d9933bb5667eaddd3eea94378d11d632fb2bd1c1b6737e6a9ccda513eb33cc79bb40

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Options.dll

MD5 e80731180d3f61c207d1e759b5e422fd
SHA1 c9a8989cdb44ae95f6f6404a6618bd001ddf95fe
SHA256 1332dfbef2bb538faed7c85ae6f6c26d64333eed95486e3f81c9f2c1af5b9f33
SHA512 da74e650dbe60705e02882e7877cf0f5e7f08c1a17b3da5cd892b9a66fc06dfc7be8e324c13d8df17f7bc9898f22b399e0e81808c76e1274f70b6b1f58564a82

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Logging.dll

MD5 1649856f9ae8ea8aa53b5aaa04da894d
SHA1 03574a2e9baf4edab20375bbf968228ca717ce8b
SHA256 30f4630b82b19f77abf33c8287cf4a00e8285aa71df1bb3fc05b7abf9026841b
SHA512 20dda82a3c9501c7de052c86c09dafe4251042011305a7224bdd7bbf99f7b705cf6f5992f9fc27fdd5526dcbb3fd6caf6fe2128631c769c59fbbd5c639dbfc17

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Logging.Abstractions.dll

MD5 613442a0e2cd90d79c3401554b8fba9e
SHA1 380df211e2bada028536a6c55bc8f33495bce1a2
SHA256 971a367da28ccca459fe2f7d755f0cea978310fdd064f6368fb8c8af814d74fd
SHA512 ef9a5696774f111a7ec99a6cc96d976e761faee4e128510f278a6f606de3f898413808f4c53cd19d27e83a46a1adef945c60d4bdc41f2aef70f710027c6bac87

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.DependencyInjection.dll

MD5 692c5f999645b4e9babc2e830a2534e5
SHA1 da1ce989d55ef32809a4c0471be5ae9e5614e483
SHA256 21d64f47e3d226854b93ec5b1f94d3b8ecabb0000a5b759decd96507789c307c
SHA512 ee6da0eeb5617b6b0ddb754cdced46a68a4aa95e5127ed94090f3640d4d0df3f003135ca84e5b4870679b0972e3c4f6b8059bd8a9c870ce8c5237cb0930235d7

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.DependencyInjection.Abstractions.dll

MD5 1cca6bb1ef856aed16e29b17b92ea225
SHA1 59bcdfef44880db1daf87951619cbc776a22746d
SHA256 1663be664cb7a7afa5786dc9f071fca8aeac3737fe8e29153f29223c8ab1608f
SHA512 6daea2c19e873594e8486ee09ab0cb9d30e4f76a1ba51fd3c2a40ac5c27c870e1e7b533247c17b8386c9016103d1423cd886efbf1256e89ca2a8b99f0d2d57fd

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.dll

MD5 d29ef3e603946cdd964ded903c205d62
SHA1 959896475fe1dd758adf857b72bea25cdcd405cd
SHA256 91be5d8e169d4e809d077108827c041988018f37924c312dcf3c3c77264eaa7c
SHA512 3f82b58932bbe771fd102065399e36822f061c769a211b85661d4b0575cbca90cd18ae92d76101e2219f22bc247a163ba95718a4303a6d43784723437f7b88cc

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.Binder.dll

MD5 99ed54569b703e903f674ea4eda6c662
SHA1 5c59e3c564b4c057ebc1455cf7bc219b825aa11c
SHA256 4950a8400717903c28cd5b9562cff761afe5ac3470ab699855a898b29fe8a2e3
SHA512 fe4937471fee583ee73411eac6e256a622c2f8a10d885e2096546bbc93e393435fbc20d40b3f885f48f48767bfdde906209890e9088318505b10d84a7d4ae7e7

C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.Abstractions.dll

MD5 542b6ef0d8d600f43cecdaa5fe6a99a5
SHA1 3e5626ab326b8e0a08d48f1347c09eb3a8b1b882
SHA256 e9e4bf73dfed3d5aa9ff25780e87109a985cb6e2feab30bea42689cf7d1d4ed1
SHA512 4ba7499c2b5cab18d185f63f857f8e94785642b5d0909d2c978b039d8920aadc0401f57ab7603f2ddae396c4c8edff5f56b31de36d24620733c9847f5b3152cd

C:\Program Files (x86)\TotalAV\Microsoft.DiaSymReader.Native.x86.dll

MD5 4ff7094e3edfda47ced912012044296b
SHA1 c6f3c9d81713687dc3820d8cabf14c2a32208d27
SHA256 f21da9fb831ac943736135b6ee109a4b352511b8d6c07cb03c66b61996d1ddc9
SHA512 372867bbae96c51ee11b413f552a67a53992b16dbfa44105381db3813e3c2f9a3dc9d16fc6bd6366514d4e1b4bf1eeccce5261bc3df837bf3e3eb5a04446c551

C:\Program Files (x86)\TotalAV\Microsoft.CSharp.dll

MD5 550c3defa28f7da52cfeb896254d5446
SHA1 9769ad55aee4cfbc94053e885d229ca98d953254
SHA256 d5ce9323fc09281f1f8d86d741a594e29f7a9797de0284e1b168b1043c6c9a02
SHA512 264181da5f80966f2b0a76912d496ad55b403f99d31097b258c9ab87d39b41435015b8e702bfceed5f333fac9367f542dd397778504c8ed2a4b4ff4bb3a82370

C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.dll

MD5 395ca70f6def000f67ae3334682c3a73
SHA1 5b32bb4f106e490044f8cb95b1da24605e66ffd0
SHA256 c7ddc86b6500a27783071abb2a0769a1f47a7cb78d039642c2126ad1b879cefe
SHA512 a47cde27ec3af919d68f6bba485b24c31b681b3572cc9af9c8df8e46af6d1441d4c5836303c4901f531fdc6e2092c6ecbd28a17b42616e42a0f9a2a9dd46dbec

C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.Crashes.dll

MD5 389e880efe79f750488feed7fa52b1d2
SHA1 b0a58209ddd87d4ec1240bc1b556889850965148
SHA256 1ac20df009a8879ff946388741b781b37f8209ac93260ff8a00573376def08be
SHA512 ce378858dd67c8ff7972036db1b558603c0c7bf74b82c0c965fcd039138be3eee08fb729b879a1c66b41d8fab7c70c0a9ad1c8e5c9490c4967cec87b2f62b436

C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.Analytics.dll

MD5 d4041b4e6cef641e52922aae24358e67
SHA1 03cd00c2094e6747b0bc489f1927d29dae39b5ea
SHA256 ac8b2f3785163b38c4473f1aa25616a4616e2fbb29332fe3dd8da9574fc3c4cf
SHA512 728dcee4a9e3909f760edbd6a6e582c6c40162f37cf0c5e61bb092679ef91e47e8e5bdba468c40f24010ae795f6e277ff1c60b9e46bee2dbc94b3d9c6491570a

C:\Program Files (x86)\TotalAV\Manifest\firefox-manifest.json

MD5 cd6fbf69675912c8fb36a977e189514a
SHA1 6dc5f321251160ad77f415f5f3ac6ceef0e2044a
SHA256 17e6cc438c28f43b3935d1747b767a4a0e518adba95a56aa7918dcb92d8af4be
SHA512 0ead4652e686e8985ab8ea52a2958cdd59078807cbba2b6e27f1b10dfd9a2e7c05eee3a3b64d11b16b03e8fbe22e7c0f32fdc0b99a057d6f0dc5c5e94757bc55

C:\Program Files (x86)\TotalAV\Manifest\edge-manifest.json

MD5 71a0a11da12e252bd32dd5b467295ece
SHA1 d58458ee3a4612cb72804961e981176242394dd7
SHA256 8a96c6c31ed88f6c7b28a28dc965b3776edb3e7c5ba857aa203b33e39efb853b
SHA512 a1c0238cb9c5c2c95a0f92c8bc40c9f6f61046a381d9391245fca3cfa11eed1d6f7b2176b2d52ef1dc9f6b6fed72618b363f11096c9cdc811f1bebc30e778416

C:\Program Files (x86)\TotalAV\Manifest\chrome-manifest.json

MD5 21b2a99408f622ba3de5751c6042f794
SHA1 b661b1de6aac5992d47d9119c5bc30327466660a
SHA256 542db227dad2ca52cbfb3bbd15a56a319870e0f86a819dda8c3d2931644a8120
SHA512 7590e9f4fd15acd234598d17eb60a79804c22db4e393240d164757dd68606e29f11e030c5df4824fef04e7677f91a92c8bceb8e4ac73184f239dd845f44ccce4

C:\Program Files (x86)\TotalAV\LICENSE.txt

MD5 6b1c894157e404adfa2c9168cc1feaf0
SHA1 de643d125afb3f3fbc698c87f125d5a0f64cd73b
SHA256 f9524cf8d591c32dc21902590e3182d0d0bef0cb0ba431f91bf6c9d71bd38cfa
SHA512 46ba913816ea8156aa1b676c415b98966ebaad608ce2b2b098d784a8f1b28323a12e47852a9c4f9aea8235854fa922ce3deaa75db790d955fb3c36a728691156

C:\Program Files (x86)\TotalAV\lib_SCAPISharp.dll

MD5 9dd1c2259075e1b604c2efc50f2a7db9
SHA1 765d2bab983ebb74ff9f956faed22c99211795b2
SHA256 4f3694e8b0960a7b1e6cb6ffdd6b143e7f9c6dbe0275eff9197059a60d4ee877
SHA512 5605cce8a54ffc4067e09a06420e33146eddc4ccee81bf02c56bff8943d7e6daf47fe92f329de9d03804dcafa5a319d038900dbbab674163951a489c9ce760a8

C:\Program Files (x86)\TotalAV\lib_SCAPI.dll

MD5 b52d13d0b5d62993e2dc9aab06c0b2d0
SHA1 160ccd201b856f14971a0b33c10a0bff13092da0
SHA256 c9c36cdff0af9c858c5633adc89730fd7172becbdaf86e4acb0fadfdb872ffab
SHA512 e98e2340fcc216dacad07766a59db43f73c634ab8b36dd4330835d847164b24bd999bb2a3b74f40dd8099304680c06e54fc4d8d50113e77848d6800599efad5d

C:\Program Files (x86)\TotalAV\libssl-1_1.dll

MD5 723c79630b1971f327fb7bff5ff38eda
SHA1 77844078bfea3b45e7fc4a42e5b7261fc5c6ad3a
SHA256 797ba3a838a6d0bc7b9b39efec86473ffe4255f782bb54066e81856eb0adf0a9
SHA512 8329b8755104ad17889e1f4b1ead597a38bec8f07cebc246c5b0e8a0b88e1046d31cd3724e8fb8ed903e52e1e4808324e63ba4d4927a7fae3233ae37da8d31c2

C:\Program Files (x86)\TotalAV\libcrypto-1_1.dll

MD5 f77ebf3bb87a6b7e6fc52071609cd88e
SHA1 d41ce9a2f1dc351ac0adcb45030a86043dc79128
SHA256 34f14e8ac45755105a464dc4e93014c1e9778cd88e57463df8cf83f0db820411
SHA512 e043669989e28c4b7179e765bd65ae25a16d71bb76467faf812ff7078b228b676e16d64b6dfebb480f78e2a131b6cbbc8715a7cafa2bed5c7863ec5835c9ddf2

C:\Program Files (x86)\TotalAV\installoptions.jdat

MD5 dd3ae3168a12ad7f0dc03648dc46eb7a
SHA1 86d9b32fbd9b77a7b9c80f9d53be88799aaf0bfc
SHA256 dd723d37ef9d85b28d2183484b7fc1acef76e7113719ecb9b74c0791e57de6be
SHA512 833a10f34cbb5fa2209b4dd55c72fe46c8d82ad6652bfd3574dff4f00ade746f172aaa0ecf8c6e5926785d240c1bd50882521a4e4ea973d50dab6b1a5072840f

C:\Program Files (x86)\TotalAV\installer.log

MD5 46b80930c603a18ed7e611839e3cbd34
SHA1 364bbdacd1dbf8314e0a872bc0bffbbfe1b76285
SHA256 39b0cd2c015c3ce3d166c4303b20824c5695c8ce08da811b9a51866b48d8c901
SHA512 867a46fe2bbfed5193c7aa4b50b3ab58844d726da08eebdd5e714433f0bb649603f87438a046a9eb62a8795488d73b66a7f920abadd3afda1b04c0c715b6b502

C:\Program Files (x86)\TotalAV\install.name

MD5 80f7ce65c0bb6ad6ced4e8249b7e0de1
SHA1 0462c9f4b58d4237473a42e94eb8c9af616a322b
SHA256 d832a854ba32f08cfd6abf0808116bbc9c6f3094bcf468761a7cacb025a1448f
SHA512 39579af056eb617408e317d20bb6dd12fa652c356b64521b3a58237e89d07e643ee0cc5bc17fb28f9ff386690586b83a8bdb126f087de6b224b98b6bf18f7eef

C:\Program Files (x86)\TotalAV\HtmlAgilityPack.dll

MD5 2ccdd5e34604c7b55df78be8d1977135
SHA1 785dfda116c774afa7270713b1308ad1d8c2d200
SHA256 f35cffed9992cf7af5710d8f48dd1ba55b9c16211746e16fa474277ec5e5e1a7
SHA512 89947874a3c167b6e1202f338ef084baca5c7f954205f65ecaa0b284e74618058b3b1db0fa8d45fd558746eb278feeedd98320c8b79cd67049af244f511e7049

C:\Program Files (x86)\TotalAV\hostpolicy.dll

MD5 862514252dc75f2275445ca4798eea1f
SHA1 6241c1ef41b521a7766a87732382e0c940c96dee
SHA256 1f81009336fed33b50bf187d70a16929f4d1b4f78b4d1e16bbbf7f6a87ec5bb1
SHA512 b070c5a4d4d649da59df88ef0030f74a7e1096da21f27fccb72d3027e7b9cc87193fde695b32419982249b8e7fce7d5fea679a6c085a4605a09bfdd976a26a7d

C:\Program Files (x86)\TotalAV\hostfxr.dll

MD5 36e668a570def150bc37c64bcc824af5
SHA1 c475d9bbfbf8e71197c06d86515cb84d06be0ff8
SHA256 26ed6778f4d368df211d035b548fa9b3d22976def5055d33c0f2a2d7086ed54a
SHA512 cf728f060688cc2a19186f029ecbe2f11c68dc56ed12e2759af0b21a74ef69d1a6f40d777efed4eb32b581acdee5bd5c668339c928556987dbf1cdb2533143db

C:\Program Files (x86)\TotalAV\GUI.Win.dll

MD5 0c1b42213f71d7768598f1e526d42565
SHA1 82ccf92240e48252d006183b1bfff1d1dc45436c
SHA256 34457195be0bf8ba64bf7c81ab9e882cb53dda3cb9f6b96874dfeedc8d08f775
SHA512 a2fd84f2c619031739962f256fdd85fa0d3aa977db1f2f2d6e6adfe1e73e0be2a56866a915cfbf1b396e3a7c5fd3e8fe6c6b0515d786a2e0bfd284495d1c91b4

C:\Program Files (x86)\TotalAV\GUI.Win.deps.json

MD5 9ad72fd35adefee97e45c7d3f4aca4d2
SHA1 36f507f2cdeb0fa168e231a12f16a6182a465887
SHA256 31057e87e93969845fa1e9d9585e7f28859f69a301d3b03c0091aab62c62413a
SHA512 8a3467cf8b05efe30c43da72801729c43592a6279166430e332d2cbd9f20a5de5586c6c046486f64930049e9e544e5e9f0a68b5a2bc7ea08560f2ba8e4ecd505

C:\Program Files (x86)\TotalAV\e_sqlite3.dll

MD5 1aa2fb5e420379a7a50cd650232c6a08
SHA1 e9bb12599f60032a160a00a04203bd73680940cd
SHA256 9877f703ce3fb9669d656d24726159b616b2df25522225bf41bfafe89954c58a
SHA512 f908c146cc7299815424debe4d40643864ce442eb30adf148ce05dc2f48e8a9db0697943af55b1c5260f5341ebce57cd804a7b19e71b66510bac085a3f800a59

C:\Program Files (x86)\TotalAV\EntityFramework.SqlServer.dll

MD5 4010a41e4730439275c00c358550393f
SHA1 572a2fb0526523e3669a53264fc51adac70c4ad8
SHA256 b4c39d8f0fb669e6e337c5f3138f6171b0905cf875a92b0e3253f33955b87b55
SHA512 5a554c85ea0222c9d96ebe24b2b0730c3974c59389e2fd0672ccd2c99f78b937bc4529151a24cc68357a308d3e9990f09eb854b05466538c422847d9849f84a9

C:\Program Files (x86)\TotalAV\EntityFramework.dll

MD5 ab3c40670c848ac52f32221a7976cedb
SHA1 20a05ff58f34ae9c6b046169e42db3b68b805fb2
SHA256 a7f8427f0d039ba33d7b414604baec4b62d6dfef9e1f5c078d403e7a04e8dd9b
SHA512 8e97b78a6ae9590e84b0d06f5a37586893c4c099a99aad2c50a6ea49ea1aae2acd07501d4e6af905a2263cd2a14f743746e18059204d8dff9b19439000cba705

C:\Program Files (x86)\TotalAV\Engine.Win.dll

MD5 c905cf67539797d58a75b238201a1383
SHA1 500351c4c7151596c0c782a4e6de8495f5a3edca
SHA256 f5aea1bc55e102a2c3d0db554411531260ee04ca2eac6c256050fb2dfdd6b366
SHA512 49ac338b68dbafbbaf63a4994d093195a69f12b74dd4b0ba554f3ad9453d7e998b5328004b49be92f44b7f0aad2cda9bb4bd368ae60e7948d6c6ad2ac6cf093d

C:\Program Files (x86)\TotalAV\driver\i386\tap0901.sys

MD5 a23d03a5eb0b221bcd33d98ff30e4dbf
SHA1 9da49918647cf25bcae9538ebf60833d0a3488ea
SHA256 c43a60e16a011622a963cb93264c7e1365a10fce8c43d5c4fad895880af4dd91
SHA512 77e9c8e1cd4d7670a9439d006f45ddebb62a33ab4aa7999cf9a0536bd9ae860a0d1a2c7ff50f5e0e50345b7c64619761fa545d10657b6f8fcc31db6d593aea41

C:\Program Files (x86)\TotalAV\driver\i386\tap0901.cat

MD5 7f49202c5a71e1dd7c85923a5dd45764
SHA1 7e8c115faad3ab2cc53ecfc05cf09e8eabfbffa6
SHA256 825cc3efc86cd13fa1bda7d0413d5ca8b208c3a18834ef02637834352ef386fc
SHA512 62497068c4ed428772ac6236c1383540cf7c48a7ee20b06e0b0e873c51fe69718969ab218f953001403d2e2170e7f29cd84947722e15f55985863a2e79d66d63

C:\Program Files (x86)\TotalAV\driver\i386\OemWin2k.inf

MD5 35589b966c65a52a1c95791bbcd80543
SHA1 d65994dd38de0e1971f8c99a048c46acc284e8bf
SHA256 8892d224ae879cc35ffe216691fc6ba3266d88b6239838f7d38b3a4ff4ad74b6
SHA512 ece01e898527ae2ce3039457ea1823bda6351871900c1a7a20057ff3250e33ed8ed216af3318edaa1c3825c17d348dee06078e946d10332e87af8ec45795fd5f

C:\Program Files (x86)\TotalAV\driver\i386\devcon.exe

MD5 d0006c3ec1f8b894e41667355b088448
SHA1 8c478cd72bd52bec1283fed9186a9d07a58a084c
SHA256 f228844f92969a6c88ec6b9168815c259881f436f3188f9b038eb0b1dce08bbf
SHA512 85424d30cd0607cae58ec1b9053ba6b2f087e148ad6ba029ddcabc4ff33fc97d3a6dddb0f49e5a39cfbe011ae2f9b165ba0490ed9365f081afdf4ab0c15b3c4d

C:\Program Files (x86)\TotalAV\driver\amd64\tap0901.sys

MD5 54cb62322b7b1210cb317c4462691b10
SHA1 728cccf1e337641cfe06df85aaa667270c2f540f
SHA256 89cb62e73fbd0500a8b811a632602c504753777313d7e424cca68f1619b55211
SHA512 b9dec2e015659ccd9683ef504f6a912f55e41e87d0d9c698670b1b2db358a1f4997fcc112cf04e850d7b226582a3d234b57ad68b4afd9cff9c9df63b5f2c08fd

C:\Program Files (x86)\TotalAV\driver\amd64\tap0901.cat

MD5 e0762d9f662614cdc930e211884e9443
SHA1 8016a500b268f2263aa26996f92cad4a9bfe153d
SHA256 b8913d43b03ecf24f466b7bd5046b0c35ec9c43620d10ce3d5dd6538356a85a8
SHA512 618fbf5488f2eeba35b46e4eeabb901b40be20bd9447d49920ad22a9adb23d6dd366556430e24005543bd2ee501848ff7b24bcebf7b15b8ee8543091b73bb449

C:\Program Files (x86)\TotalAV\driver\amd64\OemWin2k.inf

MD5 b6aada0cbed06889053a05b66f146979
SHA1 823025f02b355b37df7d7657b0f2b4d3584891a5
SHA256 a6e72b88e42d2b478615c5a16bbedb3fd02b0dd3def3a79840fc6a5df8312707
SHA512 9f8a6b0ad5ae4ea4c14043d663fd5aca2f1884ece0975b13c0533eb93103eb89120c1884121d71c8f9d09f5d210926fdba3b29fc6cf87f601bbc0f359c31d4ad

C:\Program Files (x86)\TotalAV\driver\amd64\devcon.exe

MD5 9ab7634bb81f326d489e453c358ae8ea
SHA1 5ea9dfa805f1ae952cb3b66712126ac9c3c985c0
SHA256 118e04049f21d272c8005e1e746248a4654b305a41b29e5c735231d2b83bbaa6
SHA512 c90ab0182709cbf9ea2ba58565fcc6c72b52bc500b5f16a7eba1f107350550725f0ba40bf64102e9e0c8fdc347e0833f67a8bfe4779b3654d0e7d42f7b8bb74d

C:\Program Files (x86)\TotalAV\DotNetZip.dll

MD5 6a8c8771bd399dd468595bab186c3e88
SHA1 df56e2573396ad8da5998c6aaf89c508f2060a85
SHA256 28d76d7ac169c5b71cca4e3073226f885a2f06720413a11e8db9b7fc08359462
SHA512 3e7a0e3b0b182e97e44504c4aa511065ea910a88e88ea849a5977f64dfd64aca6008815a6307e1d82a706b66811ddc5a1234b37c95a80e1a01feaa8b8fdc3d74

C:\Program Files (x86)\TotalAV\DirectWriteForwarder.dll

MD5 a36d73301123334adc95e034b327daad
SHA1 cb4bd930cbe2c930d665dd4467e8b88815de8c1d
SHA256 440c95dcdbe402d843095649773d1fc6da5d035802dd540ce29c71bc915d433b
SHA512 438abf9aa1c00bf1f3e9ec7e9ac6bf5d89c492d68301044ba7fb205d3c5d34aae4940893eff721b91696de4c782a8a3558cdb39955943e350361639893ef3393

C:\Program Files (x86)\TotalAV\dbgshim.dll

MD5 25527d0dc8c76052d6af0062809b19db
SHA1 9743537cf72993b29cc01e98c535b01e3448707d
SHA256 23d45e43b4e54b12dc7f8029ae785e6a2a666e94b0b749c878502cd89ce4b50d
SHA512 b8e596d004b40122eafbc0425383fda061b5c27c892260631bb77aeb79b25316b86ca57c443d3c0494484ce3ed0329882588a418e0773559a06a2a2566a7041a

C:\Program Files (x86)\TotalAV\D3DCompiler_47_cor3.dll

MD5 5e717c95808bcb5f654bb312d289b837
SHA1 c69448eafa40e35424744c28e68cf69ce11a3d97
SHA256 e745872db4dd114a65ee1504f401ea26d879edb6614e369a07a80ce7ad1950ca
SHA512 dc5e6ee0c8fe22897009060821b18bf2f7d0317d30682f7fa84a4c1889358c152d84d22ebe57d0ec8ccc1be8714bce6b1257d30671b8d0fea88309bbd137b8f0

C:\Program Files (x86)\TotalAV\coreclr.dll

MD5 fdb0d51a8c7ad31a75001ec87efc2039
SHA1 264a5dd57656841987f6f73d2b15290340049ad5
SHA256 d8877ba978e5ffb733026d15fc6e7b60862c8c43ad04ca3e5b663b6dcc7dd6bc
SHA512 590d8d45c59cd42ba0d0be068baf5d339228f6ff38f7282909679f3a2ea3f25f5110c072276888c986f020bbddeef48b69917900e7c94bcaa22bc3d0d6c978c1

C:\Program Files (x86)\TotalAV\clrjit.dll

MD5 a873ebf8b135192456bb47edffa641c9
SHA1 533375c44d5f0ed5a194975817972ca5e2e646ab
SHA256 520ef22ad5cdc40025f8964d0cefb39b0c88cec4e0f7d49863f004887adecc95
SHA512 c8a46a050530287451101ebe89b2ee4149d3d3402127c78be5b201d8a66c1b2c3adbdf33f7fc866008e8d4920a24635719baa1c172c84089afeb8019c76c8f17

C:\Program Files (x86)\TotalAV\clretwrc.dll

MD5 3a0d7de8c93cb55a2b694066d52908db
SHA1 9b54438352427d94fad53a0a8310a415d8b8d70b
SHA256 03a286bfc61bb4e6cef1cad40043bb9f161e5810b5ac56f81e6d0a7533f3d3e6
SHA512 7f6b68347a445b114b2a358629c58c35e83c661733376e779d1453d481ebb0ffac6d697e7d2083b38182d67d48a1662cd2bd31480ab0dda350bd1cba5709f5eb

C:\Program Files (x86)\TotalAV\clrcompression.dll

MD5 6cd5a2b4d0a555bbb94858e64659111c
SHA1 b5ddcbd91bbe232cf7e7ba5dcf0b75e80dea41ef
SHA256 bac1f0fd328051c956b95714b5498acd1be6707130be500a9188829a740a186f
SHA512 4a47fab547e185f022d90eaf6d587ad1bf78f248e5cd467081c957cfe2ae3ab1e451b2fa94cc076cb66e2753dba577f2489a1fca14f2075afa9dca371b623f61

C:\Program Files (x86)\TotalAV\cachey-bashi.netcore.dll

MD5 4882fa6dc7bdb4591967d65dd08e0437
SHA1 4c9ea0e2b4c03bfc62d35adc3003d41c5c33839a
SHA256 9be51e9fbffff4fcc7b6e50d214809f27dde875ad3c3b94961ce46c67cf253f1
SHA512 eddeadd43369d5b03ebd4b6b98063f28e09f0895d4b42d4ab9e81e3adf3f098402449a6b95469bce9ffc228f74216bac066f90805510eb40fca44abdb6c6569a

C:\Program Files (x86)\TotalAV\Branding.Desktop.dll

MD5 0a55314b9ff6edf2616e5a1e136886a6
SHA1 64f5fdfcc14962c1b9750b289afb3b94fc7bffbe
SHA256 c9131d33f63f660abd1025812fc20cd8a545feaf72eb288ca797e9f1e4bc348a
SHA512 a2181bd8fd97261666be02100aa0de24a298c90d61970e60bfa382b4b84fae85c79e1708b65ece3e2b9a66f77c0323d9e844d0ed4341d2d22d8ab984014e5fdb

C:\Program Files (x86)\TotalAV\BouncyCastle.Crypto.dll

MD5 9d34c40df4c87e378bdb0a3ebd36bfc2
SHA1 5c110a3a90e792270b44e3e3f6cf31bdd9020295
SHA256 e7c9e901e6d927778938d3ee5d183dce495d6b6eb2a89242a700afe25d921cf6
SHA512 51eea2113ac5acfd553b3e0b35390c38323218de55fd5b8abc8cf44bd0445df84eaf9349b52491737aa826ce76cfc2fe5eb5aaa60413cf376b4479ff21a19339

C:\Program Files (x86)\TotalAV\bins\subinacl.exe

MD5 7bd591f56af173edc8ca01bd62df6eac
SHA1 43e88cd5cee3b9c66de428c84501d8660ea0586b
SHA256 371cd9c35282843d572a3186975cc749e425fd4eeae1bb93a9b0cf20c22a9dc8
SHA512 b88d0c26a6f17d7b2d5483fc9a54002ea9fe26eabf10e5385ce4a13d81db5d7e8421d09bb5eaff453a6f5a210d547cf625fef74d209b2b5f0031621e9796366a

C:\Program Files (x86)\TotalAV\AviraLib.dll.config

MD5 7b6547aba2712929a012d362eb8adf74
SHA1 e7dde0f13bb8289f6b63aef2650d04ce6a8b1056
SHA256 f9c12d9f6a4625c20e1f3bda1a076b50587be63ca2207376b085bd8b9d6bae86
SHA512 9ed2348d075db48da699cc0f1131c17770ab2ab2b45298b003641201ac2b4639bdf2028cc2a0492b317de9d951a0cad2ce6dcd259e2f0421055a04ac43620985

C:\Program Files (x86)\TotalAV\AviraLib.dll

MD5 d6d0cc37647a75064f98df7be2f90fd3
SHA1 bee54ae9b3fd3686a8b672e341bda18ec6123b32
SHA256 1cf8f0fad70f9adda6b54ea13622c440d624ddd31c801f1c3493e1cef7d84747
SHA512 23b805ab3cf0d0da5f6a7d792ed3e7a854f8d23055a4686b9b37d792756a971edf877433a6c4ac6c1f328b04e9e9130802aecc8ffe3ec27b63fe955424d7c6d6

C:\Program Files (x86)\TotalAV\avira.managed.update.dll

MD5 4e509553baec78324665c02e52632f0f
SHA1 460baa72abce39d6bf6341f410af02d0aef2c9fc
SHA256 56f9b75353fdfc424eb57e438e49c247dfc111f1494319e2336086588ce47330
SHA512 5b8f5b94d158770eb39091d9d1a688b117431c092e7e22bdce5f8f5d54290d8b600a4c720fce673c8789bb68cf9a9bf2a430d8e75b3efe6d20022d511143f917

C:\Program Files (x86)\TotalAV\avira.managed.sdk.dll

MD5 6ecd66884c2033bea3db38a866538776
SHA1 23d1d5795e4f06c249527677f51a25084ad1da68
SHA256 8f875895c08f07bcb4816e5b5b52d1004ef0f26ffc81dc6a0f6dc43c5a77aaf7
SHA512 ef95e273d70f08ebb6727ad027d0c890ac6f8f07aaf550b6efe04a11219e8c9bfbbf2fbf292545638d86051d7bd0545e4d5dcaa8b33c1e162aea0c13eb1ca160

C:\Program Files (x86)\TotalAV\avira.managed.remediation.dll

MD5 cbfe8189d00825dc1ffbb123cd0d235a
SHA1 f1fcf30f996ad41fbf1564065437e2e45456e179
SHA256 aa29dbc7d98ed50bcc56b057f877b9e0dc1c38af62a87993576295da65a68967
SHA512 5efd02f7770d611d12372096727b2d7839d1e101482fb1e7dd6dbc088b1aa3773d09613c8331e2d2c8e824c803130ba03f801065edb1950f93dc04af6b6a086c

C:\Program Files (x86)\TotalAV\api-ms-win-crt-utility-l1-1-0.dll

MD5 70e9104e743069b573ca12a3cd87ec33
SHA1 4290755b6a49212b2e969200e7a088d1713b84a2
SHA256 7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95
SHA512 e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

C:\Program Files (x86)\TotalAV\api-ms-win-crt-time-l1-1-0.dll

MD5 9b79fda359a269c63dcac69b2c81caa4
SHA1 a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb
SHA256 4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138
SHA512 e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

C:\Program Files (x86)\TotalAV\api-ms-win-crt-string-l1-1-0.dll

MD5 ad99c2362f64cde7756b16f9a016a60f
SHA1 07c9a78ee658bfa81db61dab039cffc9145cc6cb
SHA256 73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa
SHA512 9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

C:\Program Files (x86)\TotalAV\api-ms-win-crt-stdio-l1-1-0.dll

MD5 d5166ab3034f0e1aa679bfa1907e5844
SHA1 851dd640cb34177c43b5f47b218a686c09fa6b4c
SHA256 7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5
SHA512 8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

C:\Program Files (x86)\TotalAV\api-ms-win-crt-runtime-l1-1-0.dll

MD5 fb0ca6cbfff46be87ad729a1c4fde138
SHA1 2c302d1c535d5c40f31c3a75393118b40e1b2af9
SHA256 1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df
SHA512 99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

C:\Program Files (x86)\TotalAV\api-ms-win-crt-process-l1-1-0.dll

MD5 9d3d6f938c8672a12aea03f85d5330de
SHA1 6a7d6e84527eaf54d6f78dd1a5f20503e766a66c
SHA256 707c9a384440d0b2d067fc0335273f8851b02c3114842e17df9c54127910d7fb
SHA512 0e1681b16cd9af116bcc5c6b4284c1203b33febb197d1d4ab8a649962c0e807af9258bde91c86727910624196948e976741411843dd841616337ea93a27de7cb

C:\Program Files (x86)\TotalAV\api-ms-win-crt-private-l1-1-0.dll

MD5 3d139f57ed79d2c788e422ca26950446
SHA1 788e4fb5d1f46b0f1802761d0ae3addb8611c238
SHA256 dc25a882ac454a0071e4815b0e939dc161ba73b5c207b84afd96203c343b99c7
SHA512 12ed9216f44aa5f245c707fe39aed08dc18ea675f5a707098f1a1da42b348a649846bc919fd318de7954ea9097c01f22be76a5d85d664ef030381e7759840765

C:\Program Files (x86)\TotalAV\api-ms-win-crt-multibyte-l1-1-0.dll

MD5 19d7f2d6424c98c45702489a375d9e17
SHA1 310bc4ed49492383e7c669ac9145bda2956c7564
SHA256 a6b83b764555d517216e0e34c4945f7a7501c1b7a25308d8f85551fe353f9c15
SHA512 01c09edef90c60c9e6cdabff918f15afc9b728d6671947898ce8848e3d102f300f3fb4246af0ac9c6f57b3b85b24832d7b40452358636125b61eb89567d3b17e

C:\Program Files (x86)\TotalAV\api-ms-win-crt-math-l1-1-0.dll

MD5 8da414c3524a869e5679c0678d1640c1
SHA1 60cf28792c68e9894878c31b323e68feb4676865
SHA256 39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672
SHA512 6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

C:\Program Files (x86)\TotalAV\api-ms-win-crt-locale-l1-1-0.dll

MD5 034379bcea45eb99db8cdfeacbc5e281
SHA1 bbf93d82e7e306e827efeb9612e8eab2b760e2b7
SHA256 8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65
SHA512 7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

C:\Program Files (x86)\TotalAV\api-ms-win-crt-heap-l1-1-0.dll

MD5 1776a2b85378b27825cf5e5a3a132d9a
SHA1 626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df
SHA256 675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee
SHA512 541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

C:\Program Files (x86)\TotalAV\api-ms-win-crt-filesystem-l1-1-0.dll

MD5 228c6bbe1bce84315e4927392a3baee5
SHA1 ba274aa567ad1ec663a2f9284af2e3cb232698fb
SHA256 ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065
SHA512 37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

C:\Program Files (x86)\TotalAV\api-ms-win-crt-environment-l1-1-0.dll

MD5 39325e5f023eb564c87d30f7e06dff23
SHA1 03dd79a7fbe3de1a29359b94ba2d554776bdd3fe
SHA256 56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a
SHA512 087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

C:\Program Files (x86)\TotalAV\api-ms-win-crt-convert-l1-1-0.dll

MD5 9ddea3cc96e0fdd3443cc60d649931b3
SHA1 af3cb7036318a8427f20b8561079e279119dca0e
SHA256 b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5
SHA512 1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

C:\Program Files (x86)\TotalAV\api-ms-win-crt-conio-l1-1-0.dll

MD5 a668c5ee307457729203ae00edebb6b3
SHA1 2114d84cf3ec576785ebbe6b2184b0d634b86d71
SHA256 a95b1af74623d6d5d892760166b9bfac8926929571301921f1e62458e6d1a503
SHA512 73dc1a1c2ceb98ca6d9ddc7611fc44753184be00cfba07c4947d675f0b154a09e6013e1ef54ac7576e661fc51b4bc54fdd96a0c046ab4ee58282e711b1854730

C:\Program Files (x86)\TotalAV\API-MS-Win-core-xstate-l2-1-0.dll

MD5 5f11b9bb427753bdae6d312a02c516f9
SHA1 6fb327e5a64a94c2489f3a82999b7d60babb228a
SHA256 4879fe3ea58d853f21658aefc5e8b92b7e6333d77c0af31a6bf9ff769475f6fd
SHA512 09a317ecb7d83f1aa2d06e65371513ae770c9df4691b5ad3d50918e4bfacf1635fafaa43ada4efd5d23c448a7eb80675baecccb3ca9dbbfba4e829248a5bf466

C:\Program Files (x86)\TotalAV\api-ms-win-core-util-l1-1-0.dll

MD5 29e1922b32e5312a948e6d8b1b34e2d9
SHA1 912f54be8438f45e1562a47294091d522cd89356
SHA256 34c5dee6d566252c0ceb7d9a21e24d5f297af2b26c32e0c7808bbd088aa9a6a9
SHA512 837cd03ee0195dc94bab0662ff3b8cd1be2dedd8a3254318d25dfea6e88d07211186fa367f41ab864560e10a22220deb3ed05ccf82d60ac80c71dfed08afbea3

C:\Program Files (x86)\TotalAV\api-ms-win-core-timezone-l1-1-0.dll

MD5 c9a55de62e53d747c5a7fddedef874f9
SHA1 c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad
SHA256 b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b
SHA512 adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

C:\Program Files (x86)\TotalAV\api-ms-win-core-sysinfo-l1-1-0.dll

MD5 887995a73bc7dde7b764afabce57efe7
SHA1 363fd4e7ad4a57224e8410154697df5e8629f526
SHA256 f94210b39cdc812beb7342a47e68673ea2116d0ad9266fcf8d7cedaa9561fc38
SHA512 d088eb1c6958774e20f0e2884136b4e2b978efd16f557dbc55e64011abbce0768054f7e6d881c110182824143a39101fdae273ed614738aa7ba5c727b27f6677

C:\Program Files (x86)\TotalAV\api-ms-win-core-synch-l1-2-0.dll

MD5 6e704280d632c2f8f2cadefcae25ad85
SHA1 699c5a1c553d64d7ff3cf4fe57da72bb151caede
SHA256 758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893
SHA512 ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

C:\Program Files (x86)\TotalAV\api-ms-win-core-synch-l1-1-0.dll

MD5 c1dcdb0fabc8ae671a7c7a94f42fb79a
SHA1 99355912d7a7d622753b2a855cae4f5a4e50146f
SHA256 cc76a4e82e0e0cd08df3bb8f5ad57142305e0f666cc32599d76e363d0b43efcb
SHA512 6d92e7520aeebfe60aab43d6616b76a2dd385edcaa217db60003a0c0cbcb0e367063d240e38a19d0b8bee2f2e7d4b982c4f08c8e9ccf34c7f670cb49f6561fff

C:\Program Files (x86)\TotalAV\api-ms-win-core-string-l1-1-0.dll

MD5 e7a266dd3a2a1e03d8716f92bede582d
SHA1 d4b97ce87c96de1f39fea97cca3992d292b2c14e
SHA256 339966ae75675a03f628c4ddd5d3218abb36cbcf6ddce83b88c07336d732b8ae
SHA512 31168663fd71b901b1b9152ff288d4e1567003e5fcd1f1c9dfe36d26d2eb16b0932ec8cd34833dab25531f768a01de45c2483f92d4e79f92a89389c02bc05156

C:\Program Files (x86)\TotalAV\api-ms-win-core-rtlsupport-l1-1-0.dll

MD5 65fc0b6c2ceff31336983e33b84a9313
SHA1 980de034cc3a36021fd8bafff3846b0731b7068e
SHA256 966a38ed7034f8d355e1e8772dfc92f23fb3c8a669780ed4ac3b075625d09744
SHA512 f4ebc7a6d12ae6afa5b96c06413a3438e1678b276b1517da07d33912818fc863b4d35cb46280f12cf90e37bc93e3ab5e44ea6f75767a314c59222b7d397e5b6a

C:\Program Files (x86)\TotalAV\api-ms-win-core-profile-l1-1-0.dll

MD5 cedefd460bc1e36ae111668f3b658052
SHA1 9bd529fe189e0b214b9e0e51717bdf62f1da44ea
SHA256 f941c232964d01e4680e54ab04955ec6264058011b03889fe29db86509511eba
SHA512 2c845642b054bc12c2911bfe2b850f06fecafef022180c22f6ffd670f821e84fcad041c4d81ddadb781ddb36cb3e98dfe4eb75ec02b88306ef1d410cbb021454

C:\Program Files (x86)\TotalAV\api-ms-win-core-processthreads-l1-1-1.dll

MD5 95c5b49af7f2c7d3cd0bc14b1e9efacb
SHA1 c400205c81140e60dffa8811c1906ce87c58971e
SHA256 ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1
SHA512 f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

C:\Program Files (x86)\TotalAV\api-ms-win-core-processthreads-l1-1-0.dll

MD5 1dda9cb13449ce2c6bb670598fc09dc8
SHA1 0a91fe11b9a8321ca369f665a623270e5ac23176
SHA256 4f187f1b4b14763360c325df6b04d3ec3cc6d2cecc9b796bc52a6c7196b0b2cc
SHA512 4e106c8a52033352c91b65cf65ec459de764c125136333a2f4ba026efdde65f3f71b1f6f11e4c580150ac8a9779825ba5e2af0e14df999a198cfe244e522c28d

C:\Program Files (x86)\TotalAV\api-ms-win-core-processenvironment-l1-1-0.dll

MD5 0c700b07c3497df4863c3f2fe37cd526
SHA1 f835118244d02304de9eb3a355420ba9d0bd9c13
SHA256 9f1f26794fd664e0a8b6fbd53bfca33dcf7b0dc37faf3eb7782bc38dff62cd8c
SHA512 8042dbd9e80e33e41993887b0289e143e967544389500ada9296b89bda37bb26918e4f370f8a1bdab8faacc4e0a6980794d6a3b5320e170ad4ef751384c9f0a8

C:\Program Files (x86)\TotalAV\api-ms-win-core-namedpipe-l1-1-0.dll

MD5 990ac84ae2d83eeb532a28fe29602827
SHA1 0916f85cc6cc1f01dc08bdf71517a1dc1b8eaf78
SHA256 dbd788b1c5694d65fa6f6e2202bfabb30adf77eb1973ceb9a737efb16e9edae2
SHA512 f0e4705a6890b4f81b7d46f66ca6b8ee82f647e163bce9ecad11d0bbd69caf4ff3c4f15e0d3f829c048b6849b99a7641861e6caf319904d4d61a6084f10da353

C:\Program Files (x86)\TotalAV\api-ms-win-core-memory-l1-1-0.dll

MD5 3940167ffb4383992e73f9a10e4b8b1e
SHA1 53541c824003b0f90b236eda83b06bec5e1acbf5
SHA256 ec573431338371504b7b9e57b2d91382b856aabf25d2b4ad96486efb794c198e
SHA512 9732acaa4db773f4f99f423d9feaebb35c197bbd468922348e0ad086f7131d83f6d9714dc7d375183e7cb8920cfe37f3da19b0041a9063cc60abe183375b1929

C:\Program Files (x86)\TotalAV\api-ms-win-core-localization-l1-2-0.dll

MD5 23bd405a6cfd1e38c74c5150eec28d0a
SHA1 1d3be98e7dfe565e297e837a7085731ecd368c7b
SHA256 a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41
SHA512 c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

C:\Program Files (x86)\TotalAV\api-ms-win-core-libraryloader-l1-1-0.dll

MD5 0c48220a4485f36feed84ef5dd0a5e9c
SHA1 1e7d4038c2765cffa6d4255737a2a8aa86b5551c
SHA256 2dd4ebaa12cbba142b5d61a0ebf84a14d0d1bb8826ba42b63e303fe6721408df
SHA512 e09951785b09f535340e1e6c256df1919485b4dad302b30d90126411cc49a13807b580fa2fcd0d6f7b64aac4f5b5ea3e250b66035a0e2f664d865408c9b43d48

C:\Program Files (x86)\TotalAV\api-ms-win-core-interlocked-l1-1-0.dll

MD5 cfe87d58f973daeda4ee7d2cf4ae521d
SHA1 fd0aa97b7cb6e50c6d5d2bf2d21d757040b5204a
SHA256 4997fda5d0e90b8a0ab7da314cb56f25d1450b366701c45c294d8dd3254de483
SHA512 40eb68deb940bbe1b835954183eea711994c434de0abbdea0b1a51db6233a12e07827ad4a8639ae0baf46dd26c168a775ffe606c82cbe47bae655c7f28ab730b

C:\Program Files (x86)\TotalAV\api-ms-win-core-heap-l1-1-0.dll

MD5 ff8026dab5d3dabca8f72b6fa7d258fa
SHA1 075c8719e226a34d7b883fd62b2d7f8823d70f1a
SHA256 535e9d20f00a2f1a62f843a4a26cfb763138d5dfe358b0126d33996fba9ca4d1
SHA512 9c56ff11d5843ba09cd29e3bc6c6b9396926c6a588194193ba220cfa784b770ab6756076f16f18cfea75b51a8184a1063ef47f63804839530382f8d39d5cf006

C:\Program Files (x86)\TotalAV\api-ms-win-core-handle-l1-1-0.dll

MD5 18fd51821d0a6f3e94e3fa71db6de3af
SHA1 7d9700e98ef2d93fdbf8f27592678194b740f4e0
SHA256 dba84e704ffe5fcd42548856258109dc77c6a46fd0b784119a3548ec47e5644b
SHA512 4009b4d50e3cb17197009ac7e41a2351de980b2c5b79c0b440c7fe4c1c3c4e18f1089c6f43216eaa262062c395423f3ad92ca494f664636ff7592c540c5ef89d

C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l2-1-0.dll

MD5 3f224766fe9b090333fdb43d5a22f9ea
SHA1 548d1bb707ae7a3dfccc0c2d99908561a305f57b
SHA256 ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357
SHA512 c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l1-2-0.dll

MD5 79ee4a2fcbe24e9a65106de834ccda4a
SHA1 fd1ba674371af7116ea06ad42886185f98ba137b
SHA256 9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613
SHA512 6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l1-1-0.dll

MD5 eefe86b5a3ab256beed8621a05210df2
SHA1 90c1623a85c519adbc5ef67b63354f881507b8a7
SHA256 1d1c11fc1ad1febf9308225c4ccf0431606a4ab08680ba04494d276cb310bf15
SHA512 c326a2ca190db24e8e96c43d1df58a4859a32eb64b0363f9778a8902f1ac0307dca585be04f831a66bc32df54499681ad952ce654d607f5fdb93e9b4504d653f

C:\Program Files (x86)\TotalAV\api-ms-win-core-errorhandling-l1-1-0.dll

MD5 d91bf81cf5178d47d1a588b0df98eb24
SHA1 75f9f2da06aa2735906b1c572dd556a3c30e7717
SHA256 f8e3b45fd3e22866006f16a9e73e28b5e357f31f3c275b517692a5f16918b492
SHA512 93d1b0d226e94235f1b32d42f6c1b95fadfaf103b8c1782423d2c5a4836102084fb53f871e3c434b85f0288e47f44345138de54ea5f982ca3e8bbf2d2bea0706

C:\Program Files (x86)\TotalAV\api-ms-win-core-debug-l1-1-0.dll

MD5 879920c7fa905036856bcb10875121d9
SHA1 a82787ea553eefa0e7c3bb3aedb2f2c60e39459a
SHA256 7e4cba620b87189278b5631536cdad9bfda6e12abd8e4eb647cb85369a204fe8
SHA512 06650248ddbc68529ef51c8b3bc3185a22cf1685c5fa9904aee766a24e12d8a2a359b1efd7f49cc2f91471015e7c1516c71ba9d6961850553d424fa400b7ea91

C:\Program Files (x86)\TotalAV\api-ms-win-core-datetime-l1-1-0.dll

MD5 8894176af3ea65a09ae5cf4c0e6ff50f
SHA1 46858ea9029d7fc57318d27ca14e011327502910
SHA256 c64b7c6400e9bacc1a4f1baed6374bfbce9a3f8cf20c2d03f81ef18262f89c60
SHA512 64b31f9b180c2e4e692643d0ccd08c3499cae87211da6b2b737f67b5719f018ebcacc2476d487a0aeb91fea1666e6dbbf4ca7b08bb4ab5a031655bf9e02cea9a

C:\Program Files (x86)\TotalAV\api-ms-win-core-console-l1-1-0.dll

MD5 aabbb38c4110cc0bf7203a567734a7e7
SHA1 5df8d0cdd3e1977ffacca08faf8b1c92c13c6d48
SHA256 24b07028c1e38b9ca2f197750654a0dfb7d33c2e52c9dd67100609499e8028db
SHA512 c66c98d2669d7a180510c57bab707d1e224c12ab7e2b08994eb5fd5be2f3dee3dbdb934bcb9db168845e4d726114bce317045027215419d3f13dcfa0f143d713

C:\Program Files (x86)\TotalAV\Accessibility.dll

MD5 1b4cc6782e295675217cd17df70057f3
SHA1 f468087e7fbaa5aeed1fc41062b198570ae017e3
SHA256 f08bdbf797dfdbbde37000fb29141caec4beb4dc0f552ab2cfe0887e1e6c5f60
SHA512 05289e9514d173694a1e15dc5228976c963572353c78412bc79bdc933ae89df08e889736232c6240e4fa1e8f26689cb4eeae4a83aa9e333a6d1882b8b857a8fb

C:\Program Files (x86)\TotalAV\SAVAPI\scew.dll

MD5 4a144eb1f737dc00689659b36aff0384
SHA1 4ce0c8afbd153473d6a03fb2743e209b5ddd1c0e
SHA256 10f3a985da345376502bb8e4fce9c59aa15633b78347bf9080fb61bdd2e3cd5d
SHA512 68e5044ed77ebdcef9b0b3fec7174ef5faf56b38aebf5df64ec925c817021453e97a3a02a348996cfb3976b995e59439b3128930ba176600ab4b10c12ff40726

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_stub.exe

MD5 3899d956a9c88d0519e188d067de5d19
SHA1 241b01e86a121694a48722ce4dc6c08bd0bf5cfd
SHA256 91265685308da5d2a1cc5f478b83e43a4656fd075d7cfee3923380905fd8dfaf
SHA512 7f6e4d7b279f3c08022af6290e4015f12d4e8ba54ef65681d162bb421f08a81b57b4b2e7004861638c227da746127f5e9d4ee7932f3e2067b990f6b2951cb633

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_restart.exe

MD5 9919de22bf888ab8d7122a04646aa313
SHA1 35af4b2757b6d96e345ba43af1d126ccfbbeb23d
SHA256 4b75f1e230aa0195e8da68e481eeb90b9d85194f15e2d458bd8ebee6d9d69ccc
SHA512 deb7c4af295ed1c90205bd4c1299c62dbed70711ae16e3eceb64b386ca5e78537f801c1641d13617a6ee448cb187bb0399990a8161abc6685f0ee941a110224e

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_pretest.bat

MD5 55d563f40e716ab251760a52f49a0e68
SHA1 fc8a086681368388dbf77199cabac654765b133b
SHA256 767637bffb932cad48218f8d128f2908e57c4a42326db29dfeaa1c5509018186
SHA512 b218b11f9d66812a76c99b5a9a8cc73f9c83c626cef17049425855d5242e9c2e4355557c94d8a9f4d8f0fa6edc99a4658849f5edbb0320f7342dae4bda18e34b

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_pre.bat

MD5 912510dd6dd41ca900d10834879601c7
SHA1 4dcaa7061636cf05ad5fe72ecb20ca29f2c003fe
SHA256 ec07adec51dc57f42077b2757421012c49fc771fb8cf664c36505d664e996c36
SHA512 63f0e1b37d83d208d1d9fab44b74d5f0def82caeb4f2289d7ffb6bacb28013f6a24ae61d9a83e6684c80b5221675d76bc75a94c9fb2ebe31819465135753ea6c

C:\Program Files (x86)\TotalAV\SAVAPI\savapi_post.bat

MD5 0dc718c8c4ccc13e58f9224f1af1125d
SHA1 51cca0861c564b973dc5017f6a9c86d47b2dad31
SHA256 4682c0f3dcbafa32e3dae743268a0babf67fe2970b4b0dd3f91cc7ed54627545
SHA512 b6e4b9b9b50669198d35a06c15bf8334eb3e68801946a96be66aee00361faceed6eefd84303979c5fceb87588a21d4fc1c94ca2a9dea5fb062d2a9da8c4cf27f

C:\Program Files (x86)\TotalAV\SAVAPI\savapiclient.dll

MD5 eb905e77afda1a6e65342a83ac5fba75
SHA1 93434d20f75db97bf1947043982d33d282db96a0
SHA256 8f5aedf1f8e8dd027aabb3420ed7e0e38219a7d8d3b880f3a46671d32270fc69
SHA512 4fdb07e66639fe5efeea5f45a57db932be99e7ce81aac392f7fd52dc0b333a219da5af9df980ca3caf256f899640a4bcebdbdb8aa4bb2269160f692a72b880a2

C:\Program Files (x86)\TotalAV\SAVAPI\savapi.exe

MD5 ae60aaf104b487577024715df996309e
SHA1 ca80a770fd21bf51a4f1a3c05b1d4dc974780804
SHA256 212b3d2c8f570375b95fb2de9f681a9f85796220b4bcb5abb6a2d248ffd9e1ea
SHA512 108efd4b3e463a1ce658d497de80fcdcb9c6b7ab08abd8fddd639e8de4383b6a4f793cb3dc249d9c5e6d157db897d10b65d1e919487e65b480305fa61be3c98f

C:\Program Files (x86)\TotalAV\SAVAPI\savapi.dll

MD5 85815e63269ec76386fd2a4d418f75be
SHA1 34b6ae807c5ab324e3e5a624b4bfa325ad86d890
SHA256 5617fc94cdd8b0c7a14df62cfc77f64ffe157d5fe96cc02c9ff209db97274e0e
SHA512 08401d39a1d8cd2b047b66c14236aaf04fc79d2a21c57e38198a6c2ccfca5e2959628a4674eb5609f7bb8d49eb87ea9033562bbdb058dc03beab81478b95e7d6

C:\Program Files (x86)\TotalAV\SAVAPI\savapi.conf

MD5 c1f0cfade5c32a37b223f5f7b0ec3510
SHA1 8fb0afd1a53feb25652937d09865e3cc8cf3f02e
SHA256 b30e328a864f6c4bd5544f6a7c3dbdc2cb97e668e2e583de0590506c881a16b9
SHA512 9dc05c25f907ce29ebccca1c34fbf926ea7a4d803e2d2fb6106192176681fd151b82605bc066e7e55e03b14aae3ac81008dadc70889dbae887de5f67ec11aa40

C:\Program Files (x86)\TotalAV\SAVAPI\productname.dat

MD5 53ce39cd5a411bb30c5b1d413e641ec8
SHA1 0b7c31237c9b0a436ace5274938d420f8c7d6385
SHA256 84cc36c119381af58ccaead1ad8995b92317ca4ae8c38a38dc37071d712bb4d8
SHA512 3524dea3bfd8cc9539d70102ab3f49da50a1b0c1a68b7073869b7f193a30562d716526a6de13a40f07480763e3841bcc3743b91f46f9f87630707e63e7d76f26

C:\Program Files (x86)\TotalAV\SAVAPI\plg_fops_dummy.dll

MD5 e31669de92895bb6b150e3f319267458
SHA1 83a6ffc6da2421d28e4f8a068a0950726078673c
SHA256 18f14d6ef36885b58dbe598cee1ff20c83afd5f9cf0c739394f74251f51bbf2f
SHA512 2d5f7f682e88fe83223efa7763e1dd46f50462eb8f164c90bf34c41c40ba06b98720b2acc04238809fa646b708a2c4a640ddb0e1ec0a8ae244cc29737e4fec6d

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.sys

MD5 40786e1ac650f9f7e8b67a672b5eb69e
SHA1 f529c7b666b029e19a301a30463abcadd59f4b0b
SHA256 c754dd80f8f3e19144ffb01a17aace2176cb5a8dd404a38ce6ec4ed88b6af759
SHA512 da8453b4d97dc4994a6db2fbdb741119513bd007078bc352b664f77790a7c7de876f038943cf826dbab81962bc5551f506dc04e7d69945bf324f3a23a5e9e6ba

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.inf

MD5 fabaac0d5c0ef083150dec8615a8b2bb
SHA1 23b864f150922bd020b679e018b1b0ee59a7353f
SHA256 bf526004b80b6698f782082cd3da58abf4e52a5f390d2f8d0d131b80f19775d2
SHA512 51cac3b029a5ec11ba36e8b7ad86b720da7e6546cb4ba8cad319200892ff143e9664e4a29d915a79f4a302b15078e44f0bc934715b8fcf8deaef4d7e3dde5801

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.cat

MD5 88ae7b9879c9ac3a65ef73424600ba65
SHA1 67f74e5f569aed30bda54b5a6467d86d0110e448
SHA256 71e8546ba1c9716ffc8072f97feb945cc466d832ddbf53b090af179094d473bf
SHA512 5b87166c206dee390e81a3ad334578a9b1ca7274b677af3cfeb2c6cfe46b756a59df78b0ea5ab7c1e11d3465f5955e58bac8dd45daeda61ac683ae53388c3dc8

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avipbb.sys

MD5 c8d33c5b49a4760f2d81710eba839ba2
SHA1 8f41e4333dabe52bfd988a68785d0687599f1154
SHA256 80d9d7444623175794a51b6710f99e911943bb58a7a9621bc53d0d4bde304daa
SHA512 451dca816d38538e082c7388aac0997eb04f5e8fc288fe44aeb661ece1e717060d73f24d60c7576403a68a5fbda3f931161602a2a8b98f506b56ff64c095cd78

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avipbb.cat

MD5 209bedcc941da626c2db370a80e3513e
SHA1 c88910bf5a4b35893e60d92828568d20420a9caf
SHA256 f456a7783dfe46bb46547464579498f7b4801258424b4caa264d8c6f57c1150f
SHA512 ddef0175e3e2919c4504f99d054b314e48f4ed0ac5c1b3153e1581b3614f304fe3850a8d465163cb4c502d4b026986121d6e4e30fc421d2c583b689ec933a10f

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avgntflt.sys

MD5 ec059af10524644bddcc073916e78375
SHA1 93a9466afee21f61f643f540b2ab82ac7db60b62
SHA256 868ecdf543865035a3703e8837869441683b8ab396eaadf6aaa0e455e8393c5e
SHA512 88310251e07eb6edda3eb28d057a18fd7d1ea7a9adc5f861fa7ad127561bfb035468974fd11685b66654fc37dc3577d7d720e2e9e4f4fc38d116c1089ee9afe7

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avgntflt.cat

MD5 3ece229fca8ecdf8e4889e062abbf95a
SHA1 47aa2952646097710297f5bded9b115e418bac00
SHA256 099e028f17154e5dafdf66a9963dbccb25442b0c570c29aeaae1e9d02539a8be
SHA512 985d4005541e25f39bc7abf80c05b97fe57220bf02bcbb7ff41f792283af5aba87d7db433217ffcea002d35dd113913bbb6e980fbf99778126f129a799b58573

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.inf

MD5 176af3c43b608af665f48a35f497bae1
SHA1 e992df632b9758b3df7b4ea69c632f12a03daaf6
SHA256 f79a54cfa9f0901ff965e577cea1139583d1c73de9568170f895ac2b46c9b305
SHA512 03cec71f9ca56d99304b6dff1b90a2ca5d04bf5cf7cd0e41e1134cdb1cac50540d6e3bec18313f970420af4bf29d76653e9c5a9fa1351d1747989dfafc208493

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.cat

MD5 f3324c2c121d360f8ce3553e221c3ce6
SHA1 85939054d39067cc7e1089de71138b4b4283f800
SHA256 901c32f032fcb4782217c4d2f3f570e932107dda74a173f1f3d8cdb993bd1007
SHA512 045db8fab56ab1c4ff0cea326cd44624c3bbab2d042b3065541707bec0021b669e6a49fcb2adf502fbea38dd4823e85fe0f2c588f93efeae4108239ae1271c78

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.sys

MD5 b49a44df6fe77ccb861985f5a5dd7ba5
SHA1 6e5163e191dd789f8cc33a531ce9ddd9bed2a842
SHA256 e442e66d3e24d54696c8687d1bd1a9ab41ed34b723d2b25af195589d11c4fcde
SHA512 d53f56966c8750edc513c86c8e9b47fa1f0445a86a1d92621f1aa5fc9b9400a4a7f65b9ae0d2e537c9dde1b23b16fbd56af8ab74d62a8a777106e9b16e58be89

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.cat

MD5 351a7acf84d15a92dc75d3fc2f504f0e
SHA1 1d316b5d3a8729c0f03a140ac55066399fbc808f
SHA256 3ad3712e2d8e420fa4ea033110e202da3b70288b4f42b4f676e12a0b72f4a632
SHA512 f705ee3bb4aa9328e808d0a8793692e1b525c0413e2005bd5f1d442be4da23e05b9549d85ccc8c1ae1f9c818a4ccc19207f0feffcd11d7b2b3039ed4e20c3b23

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.sys

MD5 d9f90202659f8ce4d5db6e83d24b46dd
SHA1 29a7b1068a5090ee59db422364b42d2c8f072a46
SHA256 31a3f5c4b19040eb20bc15b4609068128fb6028e137e98f2b2c6c679d0311c4d
SHA512 b0a9a0c0f18446e6a2b9ad3200dbd2cb94acae5df553beb971b41220304941219d12d3e94ed91dec254e6b907dac6fcb1aa72a822a09a8e523cc76071b221c31

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.inf

MD5 0d87b337d3a44a6b7de7bf6c4bbbabd6
SHA1 692a736647a575278c65dcde5996410071df09ba
SHA256 2d220946e718fbd41e68d9324caf2458a95beb1446e8447edaa2b99c8eb265da
SHA512 6910581b8f3b88596a5e8da43beac9ea68f6aa3644b8e634eefa8f12c3be1c243ad31eff0122904d8c61462f040667569a47c9f19950e5dac7e1a6c8f89aede2

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.cat

MD5 f3018b52949cdcbf666ffaf6c17f985d
SHA1 9b4692f754d090cd8b2afb9c4ddce60a05aefc9e
SHA256 7f49d676b342ab08d809cac3326e8101c21fb9776d51853a9ce2fb5e8b92c245
SHA512 69b1b5c607e37d6cb0e7049fb0ce1ee79b720992a354aee73b67e9b87dc1e2c16548ae55786dbb65ec4e8bcfffd39586edc660d5b41d58d69746b8c25b627af0

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.sys

MD5 e3ab0eeb7613ddbacc0388b96048ff5d
SHA1 f6e382597081451d6546339948edd3e854b7dfae
SHA256 5fdde96d05b4284fa7ee985a7777739c46040ad89b3b8217a729da9695e3e542
SHA512 40c0c7ac884297350a40d58a6a870796381ccb82ade22d69ca3cb9be0c3251b8768f95ab4b0f28f209ed65aed23894a7e77529316250ace7e5da8a99d0bb81a1

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.inf

MD5 dddb1f6ae43397a15af280de3ebc3c83
SHA1 2651935088949e2dff211a7c1126a02836a9b781
SHA256 431367c384e680b0f4feafaf7529319ab2cc3cd37bccd291b46c711fa49204ff
SHA512 6b5d7715d691d18647d1cdf5e3d3bcaae84fa9614378770d544e0263261b99539977922632acbed76a520aebe045396635e45dec9defa9527500f5889d9e8069

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.cat

MD5 a63897b79888e60e29431eb1b28844de
SHA1 86feb4a8ff0beda3b6c349fbf17c7b6a37e771db
SHA256 4f7410877d36f20a802c5db603149a33beed2d10e3e83f6c5372e52be42fdae0
SHA512 b176be196dd4967b28305a4f59325034b8ec4e7b544a2011f8b8f908a8154db8d86a3183e25b22232597024d04bc536d42556df89fea3169f0c21251da27ef9c

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.sys

MD5 18ed8302d083dad602823988a304a4f6
SHA1 01014fd10d7babd6d81bb7e9511ffa7e13c890fa
SHA256 629da28ac97f5b17b1603059242088727e1552d68fe350f97fcd0b67d412ab25
SHA512 de9ea04221fb1270db37d35fcc1acdf7265103e079fd31566b0a043a1fa3b2267a034b720a3070538f289fd3847171d3d54277417ba0f67aede86f1b78db220d

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.inf

MD5 34c3d7f3bd04501338c421cd9c62b993
SHA1 7feda197634072bc48e214800a3d4550cd1fa32a
SHA256 a68faf360ca9d5da989a1b6e7ff69f7aabf7b52be7819ec862a6688b841125ff
SHA512 166b4ba8653b3f932ff806e39d92a48e2e2ef7c87f82fc0560add528bf5dab34e0937253c8c5778dcd31f9a925448414066c623d976fbce21893bed08c7ead70

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.cat

MD5 8e59d322b492d531124a0a51a5eeaae9
SHA1 c58672a169f96336e12c0367bd5afa5906bda93f
SHA256 4efdc56d06e5a17315784d3e700e359fd3ce701edceb6d3370de64d1617d42be
SHA512 2ff077f6115c6c4b87b11c78b7fb48ecc0f800f2b8a89ce16d709b802ced671f175c80746aa89f745de6f33d1f894991335de39214909ac0a084e709529a2548

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.sys

MD5 f16335a9102ffc99a8c8e07e1b2d57d4
SHA1 32ddb4251591e40db352661be4721c5c6402b90a
SHA256 33c6b1d49ab13d6ae9f22e05d77b70123de63c802363da0daf1be958b7d3d532
SHA512 57746307cab7e82e9e7ef5f033628810997954a40cf57f34650cbc9ac77fc2fa3465f1206f87e0082edc4121114dd71f2f816a628872fde26136012766a5cc52

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.cat

MD5 49500efd1756f4b3934e8df70bf12d97
SHA1 7ee81eb8aa3e448fd7d9cd4559b9077d55b2afb1
SHA256 853c6ba3a145bdd47656b525985632ad46e1d2e8ad127449d59e2bf62bfd5d8f
SHA512 58b72baaffca047306915e09e9903b7fe6a6d9943e1d44644ad8ed2b3a31b371dd1ba2730789b75649bcc38df0782e8e6aad04f8f8b88eb800c333624aeea1a5

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.sys

MD5 20894c53c0b9db8f86993d9ecb78f9d5
SHA1 7c18c5b571c906535d393a5165379f6316143107
SHA256 d5e35a021e2a8e676b9034a2c712907f170d3f5b7315d516f317f51cd03ddd06
SHA512 7fbd637c64a3ed5ce202864197ee26e0d97f84be8bb0bfd5bdbfcf500f370764545489de8d83c347e5f15a414bf5d614377a60983803924935453266f8af5d24

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.inf

MD5 e92853f21048c93a182a140e667983e9
SHA1 4265adb15d2f6ed70b7521d3887bd2304528ebef
SHA256 9fedd6e956b7cd59180920ba7a6c94d0c0fa1dee867ed6087ba753ca47d21a37
SHA512 11617cc1fd33066ba4e54be9a174b7b4a610de66712299dbcd379d0f5b2cc4bcb1590c1719867129cac962619d0e04b25a177139a4c6f5b041c9c8711fc1b419

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.cat

MD5 8dbe5877f742d7d8fb652c84f76fab5b
SHA1 126f9190ef1822764e8d7d16bc14c4f03d0fffa9
SHA256 40b23a7d83bd3595a714918778249b6f999c8b016aee814207c893c8aa791e9f
SHA512 70fc63d4a4b101829a0e32135562cceb9ddebb36f907c96f01639b29248d4417af98dfa5ec8143e55db4e19c159c4a08a176bbcf2ff17a3ffe4627e7550fccf1

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.sys

MD5 a17862525867081a577923e210604a64
SHA1 9b6f498bbda86fc464d6e5094bc8529ecd3e7579
SHA256 2bf4e12f41f8d78737592b7f29b55206b2df15411cc2943e678f52096289d06f
SHA512 e33c701cad149844913e5853187e4bbf43f6bc230fccaec21c847b373da7299849f2f3d93e6a07dc2c3c774f5119a31f0f44ed77821cc1e8dda93661e620b2ca

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.inf

MD5 1b439a706d228a6dc534a3a8731c1afd
SHA1 49e34aee2faa0cbaa9bfd004eefe3150e64451b0
SHA256 4ae6e2a7c2e11bf797ba3b4877fb4ddf2ca75c6f774d4dfd4b002a307b7f938a
SHA512 d2cf3f4c289434654d7103f0517dc99bcf98f8db01e34af25c07015fe90ca88866bc0de8d6a1983406bb2f2ad85c179a47bc9095ce650a1ee0cedf23d2a8c3f0

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.cat

MD5 116668cc50e8f234ba729a8d8895b1e3
SHA1 cb987ae4def6e022dc5e62cbf8a76e374bf9404c
SHA256 d50ffe995b3ad0b44dcc30976cb047ef690646872fa9dbc3c48950cd8593e918
SHA512 3c5d04ddfb87c0fc611f6eb7b281d7a67584f9b2a4713f3f14aa1f709cceace3898fc00e4a90bc9caf59cd11e006f917536e602f21b2ac610a0245af4f3bbf5b

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.sys

MD5 6b60c0a7fdbabe955a183ae3b524d543
SHA1 be68e043fb0f6e0ca745b8361924ad0869bf2bb9
SHA256 33d6cc050cefb737b70431c7e493a0d7b7f5ae7546d36fd24a5d4b1ebf29d307
SHA512 040ecbb33bbba5bba6206cee7717cff01fc8d3436762a4f2af6647cd9f02b31d48538ebc0d91b627fd0f9324375544905c2e09e4040c55b3642480e683f73df9

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.inf

MD5 139c7c318ef6d64fc6c7ecdf1f7422da
SHA1 7fc18f8244ee8c795f0da452fbb1f9bb628f9e2c
SHA256 88f7e8d81340ab33fc71702c2817427e7b26ee31a76d59f167a00f2af2c783f0
SHA512 504b7e7917f15e93bcdcdbd7189c8b29bc27487d2c61bf3d78f9edc4f361dc0136621b55f0e1b0bf7a69c8cee668f520b72d6f45197ab58f62b5b36371c7fd27

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.cat

MD5 622330091b3d75e6e562c37582ac8b2b
SHA1 6915486dbaf7cbd2846e63a6d1e12bff67c56922
SHA256 736c72051ea40058e98362f29a7a9a5ad73032bbbf8bda53ea897f64c5bc7de8
SHA512 5f93f6a59d798bd25aab1fe9a75f6cb13210f07bb49b340861993deaea4206fec9fadbfad6cba0c000fa6709a2e6ec6de48cbb014232f7352d272586a414ce28

C:\Program Files (x86)\TotalAV\SAVAPI\on_access\README

MD5 dd70354b0df8379ef2edecbe4304f900
SHA1 04670a5a3d483ae50bb5488cf8cecdfa7b7083aa
SHA256 43b602dc083b9e5836f32def1521b42f5971f7b12e47e8d272049283316f0aed
SHA512 1ee14e8834c0817305e01a03984a73484a23b26f9328224513412b764017501cdce0473f58d2d64ed647adf78f51bdc7b50f5efe3f0183d736154cab83ae70ad

C:\Program Files (x86)\TotalAV\SAVAPI\cacert.crt

MD5 9956b172b62aeb41ca988999947a488e
SHA1 199e3607abeafd168b02b062697656a847fe4de7
SHA256 c38123acd05cd0cfe4375417f766a9a465327117f5025b16e4403cfd2e07f045
SHA512 5d365e0b88a15b43bf84650f0e98bb05fd6e0257cbd73b2227bc27b94cad3086df2a65fa227ddfdf484447d91297c48800a1ed111a6bc880da53195b8657f189

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate_msg.avr

MD5 7ff9f5f6a65afe7c10b5de77f4986042
SHA1 d19c140cade5ddf6d1f588f453fccad44525030b
SHA256 056ec25ad90c88a86b85a9c72246b0d4003be39ef954a6bcb1baa92e63ed6101
SHA512 3271017bbf7afa11cb6804c5578d8fbc4410f01fb544074302cc491f357dbf1e52f8ab9d58648443f5e5f3fb64adb8dda96fe08d94ca2525465844864cf2ca98

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate.exe

MD5 e0947f2084e589a4d7f1c0f541b54321
SHA1 3ca9be3bc2678b85e36b9823a617376a268ab889
SHA256 afb45b8ae7d78085d95122ae01f6bac1515a89e7e2c87c55596670e2b5e922e1
SHA512 316a214436031a498de8b2b6ca33cb9f73cacc3ee19f22f86d90583f817e35f0b93bd44e3af8e47baf1c7e44fc66b9c2031995cc4ce69a1bdbe980de93e5938f

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-xvdfmerge-product.conf

MD5 c7e74ddde5788f5e9510034b66ff0fbd
SHA1 8b821abbe25c98877836a4a76446bb98871a9aa0
SHA256 1ccfc728f83e1709ae01936e369610e6f9bf7d83e9b406af995cab5fa1863d4e
SHA512 7657ee00f0e8b5365b02d12393aa64e5862dc87e5ef5390824d536d72845b2e9e46a25ca0676f49e6d4cfcd7ee164e80832696a369e82d464d938139e8d745a4

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapilib-product.conf

MD5 d8e715e99b1709e69303f9d9dfd0ba88
SHA1 68964f716482230d2b3d28677257f8742235e6ea
SHA256 f6c89a441e41a381ccb1785d97d9aeac95d6d01f13227431baa6a4c06b4f78e8
SHA512 3fce72763e81318f31bfb684fea8f189dc85fe3798d14978a3d589a649107e9a7ad61c0ea1f4f0ff2c50b8663fad3ec6870d9c595d7e66f8c0c11e3de42e5264

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapilib-engine.conf

MD5 c0b5b102ad8dcb4190e4acd1e4c78d99
SHA1 6364654bbe47f784d84eb8387fe14d0a7c267a78
SHA256 ea5ade6e1bc0df9e2773dcaf5cf9bb087965dba3c74a12eeb9727747cffbb614
SHA512 76264a03d43d507574582aa6954d50ab3e0954153489abb4c311989226e9e951bb4de188cff8d92c4d48c96470d58d4d7bfc094a6a74c050ee8ef25a61395250

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapi-product.conf

MD5 c94d4130ad378ddbc7e341937cf10692
SHA1 81a7fc4c1ebaf2c19a590c43d60d4b9f3650edbc
SHA256 30ef0c181ee31e52efe06d44f5d33e5a868160e6f93f573f38aac4b05f681af0
SHA512 59ac58e5ee40213cdbe8de93baa96db946fbd1e1c7b946ba31a61e4550e4bab29286811310fb966bb9725ffdd5f4b750b09a188193bd3bd5111eef5c882e2e49

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapi-engine.conf

MD5 01a844c7204488b536c48a72090f8a39
SHA1 417b1670c72d9c0c70953e88fcf2ba8bc82c245e
SHA256 cfd50eeea0c80b8dde883951aa6149410ccbb6a08fb001cee109c276648feb1f
SHA512 2aa341bbd42ad658bc4db5d5521dd1c5a882796b3bc745be89607ccbadc084bd790f92197e0881f4d45a13cee74fdd8c73b47e7cb86c2bf81598251c40591acf

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-on-access-savapilib-product.conf

MD5 c0d7ca0f42b0eb707f0ff09a1144d837
SHA1 1c5d84bcf2bfd97a51b156b04fde285a8fddd35f
SHA256 e5e0ae1892dcae23e6b2b914234cc2111efd1ad746887c61266618ce5ec5852c
SHA512 a4582b9ad7ae3bd795c271201850aa2ef5163b605f227fa4da06d6fd9d23144d811d16904257188832a2eeddb63692a12ed649ae4244eb3138b0a972e7686b19

C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-apchash-product.conf

MD5 4257d3de2badf1811f90e8312bc74aee
SHA1 85a5ddcd2282e8049bc5432932baf418bc02ebca
SHA256 e2cbcd600dce59af50b624e2079f4b92186dd0536f5ffbc2b859c5c440657e05
SHA512 962cc45ff9aa7fe1bb8902bc195318408a7dc2728c7e89c5ceba3eaa7385d19eba52090a2f4e69bd25bb2a0a9f4500988f190e71fff84b9c9df6c8bb2052c4aa

C:\Program Files (x86)\TotalAV\SAVAPI\apc_random_id_generator.exe

MD5 be6f0a323777bc43bce01fdc5ad58120
SHA1 a6c1742269fb7879dcb54dfd25af57dba66ab732
SHA256 1239ea35953b0fe8677bee09dedb7c3eea987e977c73e73ef8862c4a3774b659
SHA512 921b11869d1ec2b5a19ef41b75504ac099429339a143cfa677fc54eb520a2b79b173e2e326afcaeceeab4f6b942098dd9a660b7c9dc3addc8b9ea53a3cac4548

C:\Program Files (x86)\TotalAV\SAVAPI\apchash.dll

MD5 a0c5e8f7cd6c02a8719ade39c1955135
SHA1 52153097ff4d14c89374ed9d144178ec104795ae
SHA256 fb74e48074ba4d26049250bc68281751f9fb9a6c41c401e19f6870ebcfdf6a7a
SHA512 30901a8332e09311bee3c244226d533840f277f47170fa85a7f2e06e3c1bae18a95db82b45ab1f31062be6f7c5dc6918bfe088f3088cfdce8ecb52df863da3b9

C:\Program Files (x86)\TotalAV\SAVAPI\apcfile.dll

MD5 ecf74de0b990c96fcf961e89cf73768c
SHA1 5ba320e5e1e4364cec95b130bebff52f3591c039
SHA256 7f6c31ea445c7b871a0ea2b73705776435b00f3e37223b53b5da9b4ad4d19c0c
SHA512 8ab9b876db9edaee8862fe3cd0cde688158a487cf00f12ac85983c8fbe93a6f116f5d4ce96bf717ce64f4a231aee618b8b023c735ac1783249beaae95a3030bf

C:\Program Files (x86)\TotalAV\SAVAPI\ams_setup.exe

MD5 30ad65d8805ff9356ac7e75e67585f01
SHA1 7711885c3bcebe0bae7c5d33979eb52cbecb8f26
SHA256 168c506b14418d3c64435d1e165e2b686b8c2273023d9f45848cee5a1355d27b
SHA512 d45eee2a5ab487d4d614da497b4ebcbe34f93828a294dcee9db5f0e4eadebcfe3408f30956b15a5352c465c956adf68d89c97a2a6609b15c7c5c43408949aa15

C:\Program Files (x86)\TotalAV\SAVAPI\aevdf.dll

MD5 1f2846f66f454dcd075690914c58d97c
SHA1 f6e6c89c11aaffaffaf98791c1faafd00e5d8aec
SHA256 3acf87d057b627745f588315c528ca19699bc6e5999fb785160a432c7d42b182
SHA512 20f555510d45aa62b0256f8898a360ef47f58a37faecfd014e34a0fdfe9f59178ad23532fd37c04edcad63b725571fdbd765ea5f30202b0525f6979d509e28ea

C:\Program Files (x86)\TotalAV\SAVAPI\aevdf.dat

MD5 7ad1fc9922e67652c346113289a557f3
SHA1 9b7dcf5873d40fb45e2016051329cff4d628c336
SHA256 1fa5d91c9a58fa3f9d3761ace1a8f3bd97fe6e903eaa6540cee0c75f89c681d1
SHA512 c042d79fa0fffc8a173868f411242868b3a1b5d495dbaa0c70beca65f03b6a988d1dffa1e823ad3c126a5dde2592770e73029a184797fb7ab627e0564b34b5fa

C:\Program Files (x86)\TotalAV\SAVAPI\aeset.dat

MD5 b78db48c5ff9494327032a27d5aa33cc
SHA1 43ffc51ef1da90ec791a95ab6d20e3cae7a66482
SHA256 1d06844d6c0aae9b0a5f6f7f61b4c7c6284fb085b7f878d596ee8407c67b7357
SHA512 855622613a0310cceb1b885f11d22876b1b6092fbdfa7ec19618d8ae71b2ad70ca75bfc44ea0e4069b38d9785c400025a8f6a4bedca539546eb10cbce078a051

C:\Program Files (x86)\TotalAV\SAVAPI\aescript.dll

MD5 11197cd2373a7b8364d9bb97406fa2b0
SHA1 05b81929d797330803febd8231907b54462706f1
SHA256 8371b7ea7e0e0650a4aca997d270b68543d61ef873190d02db37d7c3349b5942
SHA512 dff359f3330cceb1bbae2cb26748244509870f9f6f1307b4010e4a449cb50b87d4395fbc38e7b1a0fedfe16eb7b01b4cacac7631f606ec1467555ca5099138c9

C:\Program Files (x86)\TotalAV\SAVAPI\aescn.dll

MD5 045180fa8eaf0c2409e101542014b5b8
SHA1 70656f926020e02e7c67fd2d145ca90b5952a9d5
SHA256 b816a2810fc9c1a5294a59b0232a1725519a2a7472f509c336b9fd1b189d0f3d
SHA512 5659f42a6fe5cf259ad9528777ab5883f0185437b60710727c097cad2ceb60ac09eae4af59857c0021fc573343704ec6318cfc6d78ee2a1d7facc7321f4ae767

C:\Program Files (x86)\TotalAV\SAVAPI\aesbx.dll

MD5 63159174de5eff0c3ed33f887c00e1b4
SHA1 aa787a058920e7010269d1286f32bda62206949a
SHA256 a03aa3e017606dce6f2cd19536db9306a6ebf2eaefb224be735569599a39330d
SHA512 398831b8cfebe1a7878658087594dcdd74f6be8d380bcacd415acd5bbed85e6bd939c1562b3cee4e8ecbe64b0704be1cdab2dcc9c7ae6a0dfa0e8b8d0317f884

C:\Program Files (x86)\TotalAV\SAVAPI\aerdl.dll

MD5 62f7467baebb56a8beea7fffa6c4ee7c
SHA1 c13eb821d2675f110b1a38f8c0842b91edcab9b4
SHA256 d049ab67daae27ab3840730cadc5a82dfbd269b58896b9f8289324816e1680eb
SHA512 d31498bdee77fd498226d6c971dff65eeecec66811109f1a729858fee6aa92f6d1601256740417ba5abb72b4c7109eb3e69ecc7446093bebee62c559d4e7a61a

C:\Program Files (x86)\TotalAV\SAVAPI\aepack.dll

MD5 26ab6a0a9b1c59a01f9b45bbc0bbc65d
SHA1 ef282c4322c361aaac6d70d0e27d4b2292de4999
SHA256 fff47393adf070bc04d044c0a939c620234881e1ad69d3776146e32d25e1f36d
SHA512 f17aca43e9f66ae21d295af5fbca5de0770ef77eb602f74ac6696aa9cf9af9884df21f9c9a98a6aa5d9ba5bbb3f9951c952d608dc3863e6a8a6a6c053639f26a

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice_mv.dat

MD5 e346fe238be4b645e20e1bd77e9167bf
SHA1 252c2614387aef2304f85cebabcb89b7e5f04c96
SHA256 adac5f741e5ee6f669b76bca87a26bdafa9be60d8ac7e7c5059af9ccce919608
SHA512 29965365aa6a5dae7bdcda0f437202d5a2874d60d3d59895871d05b4ca3bbea539fd04ae1895a0f6c77992ae2b7a39dd74837a1a6a72f15e92129517ff6375c9

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice_gwf.dat

MD5 0c95def0894c5e5716cf7a3ecc7545a6
SHA1 51ce428514d454e7a428d57e3e050c1edad93a20
SHA256 96e2488023689abf71cf9b951548420ff3ad9d6ff37116d4279a43b5b736968b
SHA512 2884dfc79a869b3e2db3f62340dccd3cee7746852006f67a26a26a4716ec719ba196627b18ddd775655b7baf954f668e9b5229297a4b87685f087e693184b369

C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice.dll

MD5 3dbd9c8da952507d0df2b46308fe83a2
SHA1 0d38ee68466f818e880680b73f5f74ca300ae629
SHA256 4a3c2f29b2ab5e78e5a1558d2ddbc564cbd4474ce4115001ba6662c143b6482a
SHA512 1e6b65fa80d95d1cb1da72b7905105f4b4fa6ee7c1fd63fdd7728a030ff42b9177e2eb0fbca1e64f44a11a253defd7bd179bc8c596fc565f3972ad89cf5c9616

C:\Program Files (x86)\TotalAV\SAVAPI\aemobile.dll

MD5 b132b36c0b53839ee1c0fc8198170157
SHA1 3e7394ee8d3c4c0f36e00466fe0191ede592c01b
SHA256 3137d3d95d1caa59d349645ab8087d6b0c7cc3321873789c738553d4471143c6
SHA512 1bba22a77ceaa59c00cf0d10a7afced2161985d8baae94c9cfe0cd5171464f49c53113b4ba8a027cb727aa242a23f79c1cf19a4df821ef6ac00f7a7c2ecd155e

C:\Program Files (x86)\TotalAV\SAVAPI\aeml.dll

MD5 0de0cb670e3046e388829fdab6910a9c
SHA1 2b9daea0200fd1c442c9a3a967bf51d68f7ab80d
SHA256 537b3ea2ce48dc0cc343c1c6ce79ae5ba527b2fcddea24cadef1fc1eca8c42cc
SHA512 7e7ab02d20c3a1b8f76ce8c951570be1e719e0533ffc14970c958240a6adbe1c8ab88c826ef21083db0c74c6f83a1c9262ec6b2371b72d357bf6d5a298ba6f33

C:\Program Files (x86)\TotalAV\SAVAPI\aelidb.dat

MD5 e12b4507919ef2d5b5f2b5332f7c2bb1
SHA1 4dd0c1870754a4052f9de5f09f69df3f7bae4b3d
SHA256 ca5bb2f6c93eccc1ef5a2b2aae25b4976a2ce320a52d13d74f12b65205678e53
SHA512 74a2e05077726ab00a810325d6be729c001f290977c9e4e3d81d3f4fe4398317698510a0bf5d5014625e5c740f11dc10cf004cac343cd1e4d8ab82908a0376ad

C:\Program Files (x86)\TotalAV\SAVAPI\aelibinf_db.dat

MD5 ddc132992273330ec506e63fae4985b4
SHA1 7bf3018217f136662c159994f6530edf4c976a10
SHA256 0544403357dbff7551fc17f348a446d556a094d6c42e1121eb337de3ff88ca5c
SHA512 fd1233c02cfd72116b92833810db084c1caa08530cdc0626a1e2fe035236b29348fdb4d89192aa473dec5ece5694017f3a3a46eda7f87c20a89cd07132f4d122

C:\Program Files (x86)\TotalAV\SAVAPI\aelibinf.dll

MD5 21432626c63068ee47107da801c05ffc
SHA1 1b011f00a0a01bf217c41a0f5cb7d8c0f6b7046b
SHA256 812442ad5cdaeb6dd5dff76ddc3941fb9a1a56f999aa836f8fcbf4bb9e1b488f
SHA512 1c6e973be37fbcfd2b945fbbde57afd37525aafd475b4229db8296ce48cbcffb2a092fb1d226b6f655a491535f7f2bff5139522daff92bf002304545fbeb596c

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_mv.dat

MD5 9c93a76d871b55028d607207a90b39ff
SHA1 c3b33d3622dbc1d02d0ae0beaf2cef9db56962aa
SHA256 9ddc8bd72905ab30861d3ae37af5292b6162f63e6446c15a1ccee3f8aeb67910
SHA512 7f9529bc2ae489a1a2bf92f54055543c933dd39359bc7a77ec19c9bf30272947e10d785c4f3baa3deee2654d5c23cd1154856b8e54031bc8c4ee985f4ee88a4a

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_gwf.dat

MD5 27dbb4a716dc8d87eac34a14f814dbc8
SHA1 2f3c673d444a0b996d609136d8741f6dfc47ba6a
SHA256 b90baa70bd07bc5b3573909b37a6cf4fcccc3d7c9702806c94bd843988d0ed5d
SHA512 dcfba0317f02771d40fa190e78c19fa2e178d0ffadd6b8d22da4be7f66a3e7983da2a0c14741ab9df0d9f034754c4ea758d758ec7a65c53f77f922d13648e9a5

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_agen.dat

MD5 159a422ec89a6699396140a500ddbfb8
SHA1 8bcc5d5ae855bb7e36412a6b2d9a8bbfa37f56a3
SHA256 ee8a06d4af03049c6699a37a24233f37eb08dd2720f57848e665ed6d1cc7eb78
SHA512 db67a5792624b632c8cb3ab4bef963817faaa62dfa29f2da71b034a90e766c5d569b4c6ca2c04d85368674373fc72e60d4fc53711438923690a1ca0dfb4bb404

C:\Program Files (x86)\TotalAV\SAVAPI\aeheur.dll

MD5 d3f86394440e679a8be729c2af168169
SHA1 3c50ae00ca1c65b71f6f01c18a1507c03207df5a
SHA256 23bfdb21548d8b0da6b1d63167c44207a3fe7f613bf36406168c667bb7d0a4f5
SHA512 40abd780623276742f4ff5e89135e1223e3f7226cfb8af66f87646bcbb46c46e23eebe1a4bf3e4e0603622fb803d91d4c7f25c31283cddacc9037335a436c936

C:\Program Files (x86)\TotalAV\SAVAPI\aehelp.dll

MD5 c56e6711d0c6dbb6bd7bafbde06e9c90
SHA1 872c3d8d2a54ac10c22861052498c2ef954f8004
SHA256 2c0b8af1ed85fa5ff16f87f3c58beee9fc0230594dd062913ec5ce87abacba4a
SHA512 611892b7b5a4a51fca74ee0d4d2dfa6a02ec22eda0fb9c24ff51a7f33a695a2aef3bb222763cd7ac5d0d6d5529634493fd2abd0a2c38fbbef34358700d65cb8b

C:\Program Files (x86)\TotalAV\SAVAPI\aegen.dll

MD5 163ea96ca0a9b9f7469dd128fe5bce04
SHA1 60f4a01001fe4ad3b2aea24ce0b535a7d863f333
SHA256 519de6c5006127a5f4174c6f6a13d87cf30a2e866bc1eb95545d67a2ec0292f2
SHA512 b088619bcb30e2f91c5ab4c6a2777a0b163e60f33ec6475a2b00d1c711f6fa86f621f8475026adf71adf3ca863911686e03cf98bf913412ac5f8e4b269fffbc1

C:\Program Files (x86)\TotalAV\SAVAPI\aeexp_gwf.dat

MD5 d68dbed2d9e81bb670e94b0b550cccdf
SHA1 edebaf42b7b772274ffbdf070d965aa585cb14f4
SHA256 2d7925f16b1b835b7265d1c04c38c599f2b25c5087a0005dec60dcd22e9f3dd7
SHA512 162c6078492870fb1712968e5cf81e99b0e16dc2c737eb56f5dac1e17a66457382d555faf2ae9096b5e0103cf79e79c629007ca2ccb80d422e424fefe3a6c734

C:\Program Files (x86)\TotalAV\SAVAPI\aeexp.dll

MD5 faee506a935d68524834d090cb0fc16e
SHA1 f3927c0170f15c1ad895f57aab48167781c51eff
SHA256 911d01f963ab2236e7bc977f96e84f292bef07f48f40f8927115e2b056992aa8
SHA512 5b15442e84e828425832659124398cb867a3cd70f48e85c2ae6eb2261d9f83101e148264349f05b86fc8b034af6ab5dce0579c106e0bed95a8aa656839903a53

C:\Program Files (x86)\TotalAV\SAVAPI\aeemu.dll

MD5 02940a21ab69d26893bc00c064be569e
SHA1 e6eb2ba77bfa72fda91ba46924a18b8ad726f7b5
SHA256 9c9e782ac4490372119a95cac641970d805679a8aeef2ad59ee28c1a942cf5ac
SHA512 fac2069467c574b856fdb4597fb973b9a4f3fef5288b0ed0bda72136f48ffce58063ea5b251ae01216f744ec17d2c824f07593f8de885bdad123f5867510b21b

C:\Program Files (x86)\TotalAV\SAVAPI\aedroid_gwf.dat

MD5 961a1c1e0dfb8b54019c9ccec510b3ad
SHA1 ced9c7e98809bb7506a17644144efcbf50bfd10a
SHA256 50a9af9ac743d6a7f2741a3ab39717c8c7e618630b7688dab60b57b97f840b9d
SHA512 fca12aea31d0cb3b71b73456606b91d97f6bd3366591b65191ce6edda8b6ca8d53e07da4a5a95d9242a43b2c20842dfc1f9b39bb4ddc47058afd86530bb2afe4

C:\Program Files (x86)\TotalAV\SAVAPI\aedroid.dll

MD5 8facd0e1b34b24d3b7adb3b9be3375dd
SHA1 f7ac09b72c91a8c54e266b7f6b68b2e40366d026
SHA256 12bfedbe10041d39020e9a15c4cc3d4b557a7d4fffe40cf2d75caecf5f1ed1ab
SHA512 55fba8645835c69fe6e93da395de726bbcc0b3dd0049b5e4673f811cb92bc911a8bf1f6706a0922548635aa81d8aef95c3779cf827e52e70f851fa0be6a0c502

C:\Program Files (x86)\TotalAV\SAVAPI\aecrypto.dll

MD5 e824d826c0ebb30047aaa308fe03b6c9
SHA1 1778f29052920ddc7ef192761123013cb7f648d2
SHA256 8cb77f5fccdae7f9661b81454437928fa697a8d2c2cef8f61a3772cc766d6d10
SHA512 774111704c1d7680bce109e7fe5b2f91f415e5ff62432f8e52ba6c2a2b8986aa17c8487e0f0562818fe8d0f12af76d29965fc24a1f612eb71f149ecf60f0537a

C:\Program Files (x86)\TotalAV\SAVAPI\aecore.dll

MD5 2a4261a7dde3fdfd43793ca431890f84
SHA1 8be893f9fd941dc0971498587f52228e2e9d69b0
SHA256 1eff4b5bafa7a567f756a85297733802215bd9135e627e0cc6255c65dc87ca22
SHA512 e0e584174d61387e88adb6e5a618461a71039de773666f557fd19ad4c6300d8b9bfce505b032efcfdf443ded1e97678c2e504b4e893209ffb246add683b26abf

C:\Program Files (x86)\TotalAV\SAVAPI\aebb.dll

MD5 2af40e6f90240525f8cd27961b53f2db
SHA1 5eab9dc2edef6140df6842811da9e8ae9a27cbd9
SHA256 cd6fcce8f0a2e4f832894abe41f2c4e7c0ab97b4a46eb478d085ffbb9ca36b5b
SHA512 ba80cf1f33e14d5dd3a3f96196e265d33920ac4fcc23dd3da61e192233401aad522fceea4a295628f03345ec3e43ae16542b0adcf8adcf0ee93a3f2114c2bccf

memory/7612-4995-0x0000000000760000-0x0000000000C62000-memory.dmp

memory/7612-4996-0x00000000059D0000-0x0000000005F74000-memory.dmp

memory/7612-4997-0x0000000005500000-0x0000000005592000-memory.dmp

memory/7612-4998-0x0000000005F80000-0x0000000005F8A000-memory.dmp