hxxps://github[.]com/Da2dalus/The-MALWARE-Repo

Resubmissions

13-08-2024 00:37

240813-ayqxyazdlp 10

13-08-2024 00:16

240813-aks55syfrm 8

13-08-2024 00:15

240813-ajyn8stdlg 3

Analysis

max time kernel
1202s
max time network
1206s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
13-08-2024 00:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/Da2dalus/The-MALWARE-Repo

Score

8^/10

discovery execution persistence privilege_escalation spyware stealer upx

Malware Config

Signatures

Creates new service(s) 2 TTPs
persistence execution

Windows Service
T1543.003

Service Execution
T1569.002
Downloads MZ/PE file

Drops file in Drivers directory 3 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\drivers\protected_elam.sys	SecurityService.exe
File opened for modification	C:\Windows\system32\drivers\protected_elam.sys	SecurityService.exe
File created	C:\Windows\system32\drivers\protected_elam.sys	SecurityService.exe

ACProtect 1.3x - 1.4x DLL software 2 IoCs

Detects file using ACProtect software.

resource	yara_rule
behavioral1/files/0x000700000002366f-2435.dat	acprotect
behavioral1/memory/860-2438-0x0000000003900000-0x0000000003912000-memory.dmp	acprotect

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-656926755-4116854191-210765258-1000\Control Panel\International\Geo\Nation	TotalAV_Setup.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 47 IoCs

pid	Process
4064	NakedWife.exe
1732	Xanax.exe
3268	Xanax.exe
4180	Xanax.exe
4340	Pikachu.exe
4184	Quamo.exe
2120	Nyxem.E.exe
4512	MeltingScreen.exe
1100	MeltingScreen.exe
4468	Mari.exe
4900	MsWorld.exe
3220	MsWorld.exe
2000	Merkur.exe
4756	Merkur.exe
4912	Merkur.exe
3076	Merkur.exe
920	Merkur.exe
348	Merkur.exe
4684	Merkur.exe
2672	Merkur.exe
3860	Merkur.exe
4720	Merkur.exe
3964	Merkur.exe
4476	Merkur.exe
1164	Merkur.exe
3656	Merkur.exe
4568	Merkur.exe
2620	Merkur.exe
216	Merkur.exe
4512	Merkur.exe
3548	Merkur.exe
2504	Merkur.exe
4624	Merkur.exe
4124	Merkur.exe
828	Merkur.exe
4252	Merkur.exe
4948	Merkur.exe
4204	Merkur.exe
2956	Merkur.exe
4900	Merkur.exe
4516	Merkur.exe
3724	TotalAV_Setup.exe
860	TotalAV_Setup.exe
4988	SecurityService.exe
6352	TotalAV.exe
7844	SecurityService.exe
8148	SecurityService.exe

Loads dropped DLL 64 IoCs

pid	Process
3724	TotalAV_Setup.exe
3724	TotalAV_Setup.exe
3724	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
860	TotalAV_Setup.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe
4988	SecurityService.exe

Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

UPX packed file 4 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/0x001000000002356e-878.dat	upx
behavioral1/memory/2120-896-0x0000000000400000-0x0000000000420000-memory.dmp	upx
behavioral1/files/0x000700000002366f-2435.dat	upx
behavioral1/memory/860-2438-0x0000000003900000-0x0000000003912000-memory.dmp	upx

Adds Run key to start application 2 TTPs 4 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Q4 = "c:\\eiram\\quake4demo.exe"	Quamo.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-656926755-4116854191-210765258-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\quake = "c:\\eiram\\quake4demo.exe"	Quamo.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\quake = "f:\\quake4demo.exe"	Quamo.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-656926755-4116854191-210765258-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Q4 = "f:\\quake4demo.exe"	Quamo.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
171	raw.githubusercontent.com
172	raw.githubusercontent.com

Drops file in System32 directory 37 IoCs

description	ioc	Process
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\9b6145b1-56cd-494d-95f9-3971be4d2796\Logs.db-journal	SecurityService.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\TotalAV\vdf_1723509341.zip	SecurityService.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\9b6145b1-56cd-494d-95f9-3971be4d2796\Logs.db	SecurityService.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\9b6145b1-56cd-494d-95f9-3971be4d2796\Logs.db	SecurityService.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\TotalAV\vdf_1723509341.zip	SecurityService.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\AppCenter\9b6145b1-56cd-494d-95f9-3971be4d2796\Logs.db-journal	SecurityService.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SecurityService\SecurityService_Url_wqsxzqrojlfbwj3xmqn5vi2gsla5q5aq\lhp2bmm2.tmp	SecurityService.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	C:\Windows\SysWOW64\config\systemprofile\AppData\Local\SecurityService\SecurityService_Url_wqsxzqrojlfbwj3xmqn5vi2gsla5q5aq\lhp2bmm2.newcfg	SecurityService.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe
File created	\??\c:\Windows\SysWOW64\regme.reg	Merkur.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	\??\c:\program files\bearshare\shared\Virtual Sex Simulator.exe	Merkur.exe
File created	\??\c:\program files\bearshare\shared\IPspoofer.exe	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\BouncyCastle.Crypto.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.DirectoryServices.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Drawing.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Parallel.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Xml.XPath.XmlDocument.dll	TotalAV_Setup.exe
File created	\??\c:\program files\kazaa\my shared folder\IPspoofer.exe	Merkur.exe
File created	\??\c:\program files\kazaa\my shared folder\Virtual Sex Simulator.exe	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\System.Drawing.Primitives.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.IO.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\SAVAPI\aebb.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-on-access-savapilib-product.conf	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.sys	TotalAV_Setup.exe
File created	\??\c:\program files\bearshare\shared\IPspoofer.exe	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\WindowsFormsIntegration.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\mscordaccore_x86_x86_4.700.22.55902.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\urldrv\tdi\amd64\webshieldfilter.sys	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\SAVAPI\plg_fops_dummy.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.sys	TotalAV_Setup.exe
File created	\??\c:\Program Files\mIRC\script.ini	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\SQLitePCLRaw.provider.dynamic_cdecl.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Security.AccessControl.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\mscorlib.dll	TotalAV_Setup.exe
File created	\??\c:\program files\eDonkey2000\incoming\IPspoofer.exe	Merkur.exe
File created	\??\c:\program files\eDonkey2000\incoming\IPspoofer.exe	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\System.Diagnostics.StackTrace.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Diagnostics.TraceSource.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.IO.Compression.FileSystem.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Runtime.Handles.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Dataflow.dll	TotalAV_Setup.exe
File created	\??\c:\program files\kazaa\my shared folder\Virtual Sex Simulator.exe	Merkur.exe
File created	\??\c:\program files\bearshare\shared\IPspoofer.exe	Merkur.exe
File created	\??\c:\program files\eDonkey2000\incoming\Virtual Sex Simulator.exe	Merkur.exe
File created	\??\c:\program files\bearshare\shared\Virtual Sex Simulator.exe	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\PresentationFramework-SystemXml.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.RuntimeInformation.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Windows.Forms.Design.dll	TotalAV_Setup.exe
File created	\??\c:\program files\kazaa\my shared folder\Virtual Sex Simulator.exe	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\api-ms-win-core-processthreads-l1-1-1.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\avira.managed.remediation.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\SAVAPI\savapiclient.dll	TotalAV_Setup.exe
File created	\??\c:\program files\kazaa\my shared folder\IPspoofer.exe	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\Microsoft.Win32.Registry.AccessControl.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.IO.FileSystem.DriveInfo.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Net.ServicePoint.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Xaml.dll	TotalAV_Setup.exe
File created	\??\c:\program files\bearshare\shared\IPspoofer.exe	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\System.IO.FileSystem.AccessControl.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.Net.Primitives.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\Utilizr.OpenVPN.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\locale\de_DE.mo	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\Accessibility.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.ObjectModel.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_agen.dat	TotalAV_Setup.exe
File created	\??\c:\program files\bearshare\shared\IPspoofer.exe	Merkur.exe
File created	\??\c:\program files\kazaa\my shared folder\IPspoofer.exe	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\Engine.Win.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\System.IO.UnmanagedMemoryStream.dll	TotalAV_Setup.exe
File created	C:\Program Files (x86)\TotalAV\driver\amd64\tap0901.cat	TotalAV_Setup.exe
File created	\??\c:\program files\eDonkey2000\incoming\IPspoofer.exe	Merkur.exe
File created	C:\Program Files (x86)\TotalAV\driver\i386\devcon.exe	TotalAV_Setup.exe
File opened for modification	C:\Program Files (x86)\TotalAV\Manifest\chrome-manifest.json	SecurityService.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\WINDOWS\taskman.exe	Merkur.exe
File opened for modification	\??\c:\WINDOWS\taskman.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File created	\??\c:\windows\screensaver.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	C:\Windows\system\xanstart.exe	Xanax.exe
File opened for modification	C:\Windows\system\host.tmp	Xanax.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\WINDOWS\taskman.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File created	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File created	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\WINDOWS\taskman.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File created	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File created	C:\Windows\bfsvc.exe	Xanax.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File created	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\WINDOWS\taskman.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File opened for modification	\??\c:\WINDOWS\taskman.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\WINDOWS\taskman.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File opened for modification	C:\Windows\bfsvc.exe	Xanax.exe
File opened for modification	C:\Windows\system\xanax.exe	Xanax.exe
File created	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File created	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File created	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File created	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File opened for modification	\??\c:\WINDOWS\taskman.exe	Merkur.exe
File created	C:\Windows\ELAMBKUP\protected_elam.sys	SecurityService.exe
File created	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File opened for modification	\??\c:\windows\screensaver.exe	Merkur.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File opened for modification	\??\c:\WINDOWS\taskman.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe
File opened for modification	C:\Windows\system\xanax.exe	Xanax.exe
File opened for modification	\??\c:\Windows\System\AVupdate.exe	Merkur.exe
File created	\??\c:\Windows\Notepad.exe	Merkur.exe

Launches sc.exe 1 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
5812	sc.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 5 IoCs

pid	pid_target	Process	procid_target
528	1732	WerFault.exe	146
2280	3268	WerFault.exe	150
212	4180	WerFault.exe	153
2380	2120	WerFault.exe	167
6080	4988	WerFault.exe

System Location Discovery: System Language Discovery 1 TTPs 64 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TotalAV_Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Xanax.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Nyxem.E.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TotalAV.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	sc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MeltingScreen.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Quamo.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Pikachu.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	TotalAV_Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SecurityService.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	MsWorld.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	regedit.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Merkur.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
behavioral1/files/0x0007000000023653-2314.dat	nsis_installer_1
behavioral1/files/0x0007000000023653-2314.dat	nsis_installer_2

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Kills process with taskkill 3 IoCs

evasion

pid	Process
1884	taskkill.exe
1168	taskkill.exe
1956	taskkill.exe

Modifies data under HKEY_USERS 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections	SecurityService.exe

Modifies registry class 41 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\MultiSelectModel = "Single"	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\SeparatorBefore	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\command\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" --custom-scan-context --custom-scan-archives --custom-scan-folders=\"%1\" --hide"	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\shell\open\command\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" \"%1\""	SecurityService.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-656926755-4116854191-210765258-1000\{A50EA563-E47E-4497-9AF0-E6242FFDD8EC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-656926755-4116854191-210765258-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\LocalServer32	TotalAV.exe
Key created	\REGISTRY\USER\S-1-5-21-656926755-4116854191-210765258-1000_Classes\WOW6432Node	TotalAV.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\Icon = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\""	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\command\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" --custom-scan-context --custom-scan-archives --custom-scan-files=\"%1\" --hide"	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\SeparatorBefore	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\command\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" --custom-scan-context --custom-scan-archives --custom-scan-folders=\"%1\" --hide"	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\Icon = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\""	SecurityService.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\command	SecurityService.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\shell\open	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\URL Protocol	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\SeparatorAfter	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\Icon = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\""	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\SeparatorAfter	SecurityService.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\command	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\ = "Scan With TotalAV"	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\SeparatorAfter	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\MultiSelectModel = "Single"	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\SeparatorBefore	SecurityService.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\command	SecurityService.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV	SecurityService.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\ = "URL:Total AV Protocol"	SecurityService.exe
Key created	\REGISTRY\USER\S-1-5-21-656926755-4116854191-210765258-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}	TotalAV.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-656926755-4116854191-210765258-1000_Classes\WOW6432Node\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\LocalServer32\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\" -ToastActivated"	TotalAV.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\shell	SecurityService.exe
Key created	\REGISTRY\USER\S-1-5-21-656926755-4116854191-210765258-1000_Classes\WOW6432Node\CLSID	TotalAV.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\Position = "Top"	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\ = "Scan With TotalAV"	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Directory\shell\TotalAV\Position = "Top"	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Folder\shell\TotalAV\MultiSelectModel = "Single"	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\DefaultIcon\ = "\"C:\\Program Files (x86)\\TotalAV\\TotalAV.exe\""	SecurityService.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV	SecurityService.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\*\shell\TotalAV\ = "Scan With TotalAV"	SecurityService.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav	SecurityService.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\DefaultIcon	SecurityService.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\totalav\shell\open\command	SecurityService.exe

NTFS ADS 11 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 78552.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 2975.crdownload:SmartScreen	msedge.exe
File created	C:\Users\Admin\AppData\Local\Temp\NakedWife.exe\:SmartScreen:$DATA	NakedWife.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 915336.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 802311.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 950367.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 754848.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 772797.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 578441.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 485490.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 323581.crdownload:SmartScreen	msedge.exe

Runs .reg file with regedit 29 IoCs

pid	Process
4576	regedit.exe
992	regedit.exe
2732	regedit.exe
4344	regedit.exe
3288	regedit.exe
4180	regedit.exe
1904	regedit.exe
3088	regedit.exe
4716	regedit.exe
1384	regedit.exe
2736	regedit.exe
2052	regedit.exe
3876	regedit.exe
1644	regedit.exe
3132	regedit.exe
1792	regedit.exe
3692	regedit.exe
2084	regedit.exe
2556	regedit.exe
1620	regedit.exe
1864	regedit.exe
3256	regedit.exe
4840	regedit.exe
4688	regedit.exe
4892	regedit.exe
1364	regedit.exe
716	regedit.exe
2284	regedit.exe
4080	regedit.exe

Suspicious behavior: EnumeratesProcesses 43 IoCs

pid	Process
336	msedge.exe
336	msedge.exe
4528	msedge.exe
4528	msedge.exe
3240	identity_helper.exe
3240	identity_helper.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4348	msedge.exe
4348	msedge.exe
4020	msedge.exe
4020	msedge.exe
4392	msedge.exe
4392	msedge.exe
2780	msedge.exe
2780	msedge.exe
4488	msedge.exe
4488	msedge.exe
4844	msedge.exe
4844	msedge.exe
2372	msedge.exe
2372	msedge.exe
2264	msedge.exe
2264	msedge.exe
4124	msedge.exe
4124	msedge.exe
2116	msedge.exe
2116	msedge.exe
4776	msedge.exe
4776	msedge.exe
6352	TotalAV.exe
6352	TotalAV.exe
6352	TotalAV.exe
6352	TotalAV.exe
8148	SecurityService.exe
8148	SecurityService.exe
8148	SecurityService.exe
8148	SecurityService.exe
7844	SecurityService.exe
7844	SecurityService.exe
8148	SecurityService.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
4528	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 32 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeIncreaseQuotaPrivilege	1064	wmic.exe
Token: SeSecurityPrivilege	1064	wmic.exe
Token: SeTakeOwnershipPrivilege	1064	wmic.exe
Token: SeLoadDriverPrivilege	1064	wmic.exe
Token: SeSystemProfilePrivilege	1064	wmic.exe
Token: SeSystemtimePrivilege	1064	wmic.exe
Token: SeProfSingleProcessPrivilege	1064	wmic.exe
Token: SeIncBasePriorityPrivilege	1064	wmic.exe
Token: SeCreatePagefilePrivilege	1064	wmic.exe
Token: SeBackupPrivilege	1064	wmic.exe
Token: SeRestorePrivilege	1064	wmic.exe
Token: SeShutdownPrivilege	1064	wmic.exe
Token: SeDebugPrivilege	1064	wmic.exe
Token: SeSystemEnvironmentPrivilege	1064	wmic.exe
Token: SeRemoteShutdownPrivilege	1064	wmic.exe
Token: SeUndockPrivilege	1064	wmic.exe
Token: SeManageVolumePrivilege	1064	wmic.exe
Token: 33	1064	wmic.exe
Token: 34	1064	wmic.exe
Token: 35	1064	wmic.exe
Token: 36	1064	wmic.exe
Token: SeIncreaseQuotaPrivilege	1064	wmic.exe
Token: SeSecurityPrivilege	1064	wmic.exe
Token: SeTakeOwnershipPrivilege	1064	wmic.exe
Token: SeLoadDriverPrivilege	1064	wmic.exe
Token: SeSystemProfilePrivilege	1064	wmic.exe
Token: SeSystemtimePrivilege	1064	wmic.exe
Token: SeProfSingleProcessPrivilege	1064	wmic.exe
Token: SeIncBasePriorityPrivilege	1064	wmic.exe
Token: SeCreatePagefilePrivilege	1064	wmic.exe
Token: SeBackupPrivilege	1064	wmic.exe
Token: SeRestorePrivilege	1064	wmic.exe
Token: SeShutdownPrivilege	1064	wmic.exe
Token: SeDebugPrivilege	1064	wmic.exe
Token: SeSystemEnvironmentPrivilege	1064	wmic.exe
Token: SeRemoteShutdownPrivilege	1064	wmic.exe
Token: SeUndockPrivilege	1064	wmic.exe
Token: SeManageVolumePrivilege	1064	wmic.exe
Token: 33	1064	wmic.exe
Token: 34	1064	wmic.exe
Token: 35	1064	wmic.exe
Token: 36	1064	wmic.exe
Token: SeDebugPrivilege	1884	taskkill.exe
Token: SeDebugPrivilege	1168	taskkill.exe
Token: SeDebugPrivilege	1956	taskkill.exe
Token: SeBackupPrivilege	1776	vssvc.exe
Token: SeRestorePrivilege	1776	vssvc.exe
Token: SeAuditPrivilege	1776	vssvc.exe
Token: SeBackupPrivilege	1576	srtasks.exe
Token: SeRestorePrivilege	1576	srtasks.exe
Token: SeSecurityPrivilege	1576	srtasks.exe
Token: SeTakeOwnershipPrivilege	1576	srtasks.exe
Token: SeBackupPrivilege	1576	srtasks.exe
Token: SeRestorePrivilege	1576	srtasks.exe
Token: SeSecurityPrivilege	1576	srtasks.exe
Token: SeTakeOwnershipPrivilege	1576	srtasks.exe
Token: SeDebugPrivilege	4988	SecurityService.exe
Token: SeDebugPrivilege	6352	TotalAV.exe
Token: SeDebugPrivilege	7844	SecurityService.exe
Token: SeDebugPrivilege	8148	SecurityService.exe
Token: SeAssignPrimaryTokenPrivilege	8148	SecurityService.exe
Token: SeIncreaseQuotaPrivilege	8148	SecurityService.exe
Token: SeSecurityPrivilege	8148	SecurityService.exe
Token: SeTakeOwnershipPrivilege	8148	SecurityService.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe

Suspicious use of SendNotifyMessage 27 IoCs

pid	Process
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
4528	msedge.exe
6352	TotalAV.exe
6352	TotalAV.exe
6352	TotalAV.exe

Suspicious use of SetWindowsHookEx 40 IoCs

pid	Process
4064	NakedWife.exe
4340	Pikachu.exe
4184	Quamo.exe
4468	Mari.exe
4900	MsWorld.exe
3220	MsWorld.exe
2000	Merkur.exe
4756	Merkur.exe
4912	Merkur.exe
3076	Merkur.exe
920	Merkur.exe
348	Merkur.exe
4684	Merkur.exe
2672	Merkur.exe
3860	Merkur.exe
4720	Merkur.exe
3964	Merkur.exe
4476	Merkur.exe
1164	Merkur.exe
3656	Merkur.exe
4568	Merkur.exe
2620	Merkur.exe
216	Merkur.exe
4512	Merkur.exe
3548	Merkur.exe
2504	Merkur.exe
4624	Merkur.exe
4124	Merkur.exe
828	Merkur.exe
4252	Merkur.exe
4948	Merkur.exe
4204	Merkur.exe
2956	Merkur.exe
4900	Merkur.exe
4516	Merkur.exe
3724	TotalAV_Setup.exe
860	TotalAV_Setup.exe
4988	SecurityService.exe
6352	TotalAV.exe
6352	TotalAV.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4528 wrote to memory of 2296	4528	msedge.exe	85
PID 4528 wrote to memory of 2296	4528	msedge.exe	85
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 3700	4528	msedge.exe	86
PID 4528 wrote to memory of 336	4528	msedge.exe	87
PID 4528 wrote to memory of 336	4528	msedge.exe	87
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88
PID 4528 wrote to memory of 1176	4528	msedge.exe	88

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/Da2dalus/The-MALWARE-Repo
1⤵
- Enumerates system info in registry
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9b75546f8,0x7ff9b7554708,0x7ff9b7554718
  2⤵
  PID:2296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  PID:4688
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5244 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5108 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=3088 /prefetch:8
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6188 /prefetch:8
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4852 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4348
- C:\Users\Admin\Downloads\NakedWife.exe
  "C:\Users\Admin\Downloads\NakedWife.exe"
  2⤵
  - Executes dropped EXE
  - NTFS ADS
  - Suspicious use of SetWindowsHookEx
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=2220 /prefetch:8
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4020
- C:\Users\Admin\Downloads\Xanax.exe
  "C:\Users\Admin\Downloads\Xanax.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  PID:1732
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 1732 -s 364
    3⤵
    - Program crash
    PID:528
- C:\Users\Admin\Downloads\Xanax.exe
  "C:\Users\Admin\Downloads\Xanax.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  PID:3268
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 3268 -s 332
    3⤵
    - Program crash
    PID:2280
- C:\Users\Admin\Downloads\Xanax.exe
  "C:\Users\Admin\Downloads\Xanax.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  PID:4180
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 4180 -s 332
    3⤵
    - Program crash
    PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4392
- C:\Users\Admin\Downloads\Pikachu.exe
  "C:\Users\Admin\Downloads\Pikachu.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2780
- C:\Users\Admin\Downloads\Quamo.exe
  "C:\Users\Admin\Downloads\Quamo.exe"
  2⤵
  - Executes dropped EXE
  - Adds Run key to start application
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:2648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6408 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4488
- C:\Users\Admin\Downloads\Nyxem.E.exe
  "C:\Users\Admin\Downloads\Nyxem.E.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:2120
- - C:\Windows\SysWOW64\WerFault.exe
    C:\Windows\SysWOW64\WerFault.exe -u -p 2120 -s 232
    3⤵
    - Program crash
    PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6732 /prefetch:8
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6644 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4844
- C:\Users\Admin\Downloads\MeltingScreen.exe
  "C:\Users\Admin\Downloads\MeltingScreen.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:4512
- C:\Users\Admin\Downloads\MeltingScreen.exe
  "C:\Users\Admin\Downloads\MeltingScreen.exe"
  2⤵
  - Executes dropped EXE
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3064 /prefetch:8
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3776 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2372
- C:\Users\Admin\Downloads\Mari.exe
  "C:\Users\Admin\Downloads\Mari.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2264
- C:\Users\Admin\Downloads\MsWorld.exe
  "C:\Users\Admin\Downloads\MsWorld.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4900
- C:\Users\Admin\Downloads\MsWorld.exe
  "C:\Users\Admin\Downloads\MsWorld.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6336 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6980 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6940 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4124
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:2000
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:4688
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:3916
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4756
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:2556
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3584
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4912
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:4344
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:4948
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3076
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:4892
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4788
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:920
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:3288
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2956
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:348
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:1620
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4248
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4684
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:1904
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:716
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:2672
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:1644
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4848
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3860
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:992
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:756
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4720
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:1864
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:4860
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3964
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:1384
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:1732
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4476
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:4576
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:4692
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:1164
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:2736
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:4388
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:3656
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:3132
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:2260
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4568
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:1364
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1956
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:2620
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:2732
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3240
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:216
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:2052
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:4664
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4512
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:716
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4064
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3548
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:2284
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3944
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:2504
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:3256
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4364
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4624
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:4080
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1628
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4124
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:3876
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:3012
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:828
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:1792
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:2192
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - Suspicious use of SetWindowsHookEx
  PID:4252
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:4840
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:3596
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4948
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:3088
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1956
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4204
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:4716
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    PID:1620
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:2956
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:3692
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:4728
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4900
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - Runs .reg file with regedit
    PID:4180
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:636
- C:\Users\Admin\Downloads\Merkur.exe
  "C:\Users\Admin\Downloads\Merkur.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Program Files directory
  - Drops file in Windows directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:4516
- - C:\Windows\SysWOW64\regedit.exe
    regedit /s c:\Windows\system32\regme.reg
    3⤵
    - System Location Discovery: System Language Discovery
    - Runs .reg file with regedit
    PID:2084
- - C:\Windows\SysWOW64\cmd.exe
    C:\Windows\system32\cmd.exe /c C:\pr0n.bat
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1072 /prefetch:1
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7156 /prefetch:1
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6576 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7136 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=6836 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6840 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7016 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6348 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6492 /prefetch:8
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2096,7045730791164841161,18435460699398385880,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3096 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4776
- C:\Users\Admin\Downloads\TotalAV_Setup.exe
  "C:\Users\Admin\Downloads\TotalAV_Setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious use of SetWindowsHookEx
  PID:3724
- - C:\Users\Admin\AppData\Local\Temp\TotalAV_Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\TotalAV_Setup.exe" --installer="C:\Users\Admin\Downloads\TotalAV_Setup.exe" --skip-welcome=true
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    - Suspicious use of SetWindowsHookEx
    PID:860
  - - C:\Windows\SysWOW64\Wbem\wmic.exe
      wmic.exe path Win32_Process where executablepath="C:\\Program Files (x86)\\TotalAV\\TotalAV.exe" delete
      4⤵
      Suspicious use of AdjustPrivilegeToken
      PID:1064
  - - C:\Windows\SysWOW64\taskkill.exe
      "taskkill" /f /T /IM "avupdate.exe"
      4⤵
      System Location Discovery: System Language Discovery
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:1884
  - - C:\Windows\SysWOW64\taskkill.exe
      "taskkill" /f /T /IM "Update.Win.exe"
      4⤵
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:1168
  - - C:\Windows\SysWOW64\taskkill.exe
      "taskkill" /f /T /IM "PasswordExtension.Win.exe"
      4⤵
      Kills process with taskkill
      Suspicious use of AdjustPrivilegeToken
      PID:1956
  - - C:\Program Files (x86)\TotalAV\SecurityService.exe
      "C:\Program Files (x86)\TotalAV\SecurityService.exe" "--install"
      4⤵
      Drops file in Drivers directory
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of SetWindowsHookEx
      PID:4988
    - - C:\Windows\SysWOW64\sc.exe
        
        "sc" create SecurityService start= auto binpath= "\"C:\Program Files (x86)\TotalAV\SecurityService.exe\"" displayname= "PC Security Management Service" obj= LocalSystem password= ""
        5⤵
        Launches sc.exe
        System Location Discovery: System Language Discovery
        
        PID:5812
    - - C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 4988 -s 4428
        5⤵
        Program crash
        
        PID:6080
  - - C:\Program Files (x86)\TotalAV\TotalAV.exe
      "C:\Program Files (x86)\TotalAV\TotalAV.exe" --installed --installer="C:\Users\Admin\AppData\Local\Temp\TotalAV_Setup.exe"
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Modifies registry class
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of SendNotifyMessage
      Suspicious use of SetWindowsHookEx
      PID:6352

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:216

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4312

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 1732 -ip 1732
1⤵
PID:2844

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 524 -p 3268 -ip 3268
1⤵
PID:1040

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 484 -p 4180 -ip 4180
1⤵
PID:1644

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 476 -p 2120 -ip 2120
1⤵
PID:684

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:1776

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1576

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4988 -ip 4988
1⤵
PID:6060

C:\Program Files (x86)\TotalAV\SecurityService.exe
"C:\Program Files (x86)\TotalAV\SecurityService.exe"
1⤵
- Executes dropped EXE
- Drops file in System32 directory
- Drops file in Program Files directory
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:7844
- C:\Program Files (x86)\TotalAV\SecurityService.exe
  "C:\Program Files (x86)\TotalAV\SecurityService.exe" --run-service --run-service-id=7844
  2⤵
  - Drops file in Drivers directory
  - Executes dropped EXE
  - Drops file in System32 directory
  - Drops file in Windows directory
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:8148

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

T1569

Service Execution

T1569.002

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Create or Modify System Process

T1543

Windows Service

T1543.003

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\TotalAV\API-MS-Win-core-xstate-l2-1-0.dll

Filesize
12KB

MD5
5f11b9bb427753bdae6d312a02c516f9

SHA1
6fb327e5a64a94c2489f3a82999b7d60babb228a

SHA256
4879fe3ea58d853f21658aefc5e8b92b7e6333d77c0af31a6bf9ff769475f6fd

SHA512
09a317ecb7d83f1aa2d06e65371513ae770c9df4691b5ad3d50918e4bfacf1635fafaa43ada4efd5d23c448a7eb80675baecccb3ca9dbbfba4e829248a5bf466

Download Submit
C:\Program Files (x86)\TotalAV\Accessibility.dll

Filesize
10KB

MD5
1b4cc6782e295675217cd17df70057f3

SHA1
f468087e7fbaa5aeed1fc41062b198570ae017e3

SHA256
f08bdbf797dfdbbde37000fb29141caec4beb4dc0f552ab2cfe0887e1e6c5f60

SHA512
05289e9514d173694a1e15dc5228976c963572353c78412bc79bdc933ae89df08e889736232c6240e4fa1e8f26689cb4eeae4a83aa9e333a6d1882b8b857a8fb

Download Submit
C:\Program Files (x86)\TotalAV\AviraLib.dll

Filesize
1.0MB

MD5
d6d0cc37647a75064f98df7be2f90fd3

SHA1
bee54ae9b3fd3686a8b672e341bda18ec6123b32

SHA256
1cf8f0fad70f9adda6b54ea13622c440d624ddd31c801f1c3493e1cef7d84747

SHA512
23b805ab3cf0d0da5f6a7d792ed3e7a854f8d23055a4686b9b37d792756a971edf877433a6c4ac6c1f328b04e9e9130802aecc8ffe3ec27b63fe955424d7c6d6

Download Submit
C:\Program Files (x86)\TotalAV\AviraLib.dll.config

Filesize
545B

MD5
7b6547aba2712929a012d362eb8adf74

SHA1
e7dde0f13bb8289f6b63aef2650d04ce6a8b1056

SHA256
f9c12d9f6a4625c20e1f3bda1a076b50587be63ca2207376b085bd8b9d6bae86

SHA512
9ed2348d075db48da699cc0f1131c17770ab2ab2b45298b003641201ac2b4639bdf2028cc2a0492b317de9d951a0cad2ce6dcd259e2f0421055a04ac43620985

Download Submit
C:\Program Files (x86)\TotalAV\BouncyCastle.Crypto.dll

Filesize
2.3MB

MD5
9d34c40df4c87e378bdb0a3ebd36bfc2

SHA1
5c110a3a90e792270b44e3e3f6cf31bdd9020295

SHA256
e7c9e901e6d927778938d3ee5d183dce495d6b6eb2a89242a700afe25d921cf6

SHA512
51eea2113ac5acfd553b3e0b35390c38323218de55fd5b8abc8cf44bd0445df84eaf9349b52491737aa826ce76cfc2fe5eb5aaa60413cf376b4479ff21a19339

Download Submit
C:\Program Files (x86)\TotalAV\Branding.Desktop.dll

Filesize
23KB

MD5
0a55314b9ff6edf2616e5a1e136886a6

SHA1
64f5fdfcc14962c1b9750b289afb3b94fc7bffbe

SHA256
c9131d33f63f660abd1025812fc20cd8a545feaf72eb288ca797e9f1e4bc348a

SHA512
a2181bd8fd97261666be02100aa0de24a298c90d61970e60bfa382b4b84fae85c79e1708b65ece3e2b9a66f77c0323d9e844d0ed4341d2d22d8ab984014e5fdb

Download Submit
C:\Program Files (x86)\TotalAV\D3DCompiler_47_cor3.dll

Filesize
3.9MB

MD5
5e717c95808bcb5f654bb312d289b837

SHA1
c69448eafa40e35424744c28e68cf69ce11a3d97

SHA256
e745872db4dd114a65ee1504f401ea26d879edb6614e369a07a80ce7ad1950ca

SHA512
dc5e6ee0c8fe22897009060821b18bf2f7d0317d30682f7fa84a4c1889358c152d84d22ebe57d0ec8ccc1be8714bce6b1257d30671b8d0fea88309bbd137b8f0

Download Submit
C:\Program Files (x86)\TotalAV\DirectWriteForwarder.dll

Filesize
468KB

MD5
a36d73301123334adc95e034b327daad

SHA1
cb4bd930cbe2c930d665dd4467e8b88815de8c1d

SHA256
440c95dcdbe402d843095649773d1fc6da5d035802dd540ce29c71bc915d433b

SHA512
438abf9aa1c00bf1f3e9ec7e9ac6bf5d89c492d68301044ba7fb205d3c5d34aae4940893eff721b91696de4c782a8a3558cdb39955943e350361639893ef3393

Download Submit
C:\Program Files (x86)\TotalAV\DotNetZip.dll

Filesize
233KB

MD5
6a8c8771bd399dd468595bab186c3e88

SHA1
df56e2573396ad8da5998c6aaf89c508f2060a85

SHA256
28d76d7ac169c5b71cca4e3073226f885a2f06720413a11e8db9b7fc08359462

SHA512
3e7a0e3b0b182e97e44504c4aa511065ea910a88e88ea849a5977f64dfd64aca6008815a6307e1d82a706b66811ddc5a1234b37c95a80e1a01feaa8b8fdc3d74

Download Submit
C:\Program Files (x86)\TotalAV\Engine.Win.dll

Filesize
871KB

MD5
c905cf67539797d58a75b238201a1383

SHA1
500351c4c7151596c0c782a4e6de8495f5a3edca

SHA256
f5aea1bc55e102a2c3d0db554411531260ee04ca2eac6c256050fb2dfdd6b366

SHA512
49ac338b68dbafbbaf63a4994d093195a69f12b74dd4b0ba554f3ad9453d7e998b5328004b49be92f44b7f0aad2cda9bb4bd368ae60e7948d6c6ad2ac6cf093d

Download Submit
C:\Program Files (x86)\TotalAV\EntityFramework.SqlServer.dll

Filesize
566KB

MD5
4010a41e4730439275c00c358550393f

SHA1
572a2fb0526523e3669a53264fc51adac70c4ad8

SHA256
b4c39d8f0fb669e6e337c5f3138f6171b0905cf875a92b0e3253f33955b87b55

SHA512
5a554c85ea0222c9d96ebe24b2b0730c3974c59389e2fd0672ccd2c99f78b937bc4529151a24cc68357a308d3e9990f09eb854b05466538c422847d9849f84a9

Download Submit
C:\Program Files (x86)\TotalAV\EntityFramework.dll

Filesize
4.7MB

MD5
ab3c40670c848ac52f32221a7976cedb

SHA1
20a05ff58f34ae9c6b046169e42db3b68b805fb2

SHA256
a7f8427f0d039ba33d7b414604baec4b62d6dfef9e1f5c078d403e7a04e8dd9b

SHA512
8e97b78a6ae9590e84b0d06f5a37586893c4c099a99aad2c50a6ea49ea1aae2acd07501d4e6af905a2263cd2a14f743746e18059204d8dff9b19439000cba705

Download Submit
C:\Program Files (x86)\TotalAV\GUI.Win.deps.json

Filesize
156KB

MD5
9ad72fd35adefee97e45c7d3f4aca4d2

SHA1
36f507f2cdeb0fa168e231a12f16a6182a465887

SHA256
31057e87e93969845fa1e9d9585e7f28859f69a301d3b03c0091aab62c62413a

SHA512
8a3467cf8b05efe30c43da72801729c43592a6279166430e332d2cbd9f20a5de5586c6c046486f64930049e9e544e5e9f0a68b5a2bc7ea08560f2ba8e4ecd505

Download Submit
C:\Program Files (x86)\TotalAV\GUI.Win.dll

Filesize
1.9MB

MD5
0c1b42213f71d7768598f1e526d42565

SHA1
82ccf92240e48252d006183b1bfff1d1dc45436c

SHA256
34457195be0bf8ba64bf7c81ab9e882cb53dda3cb9f6b96874dfeedc8d08f775

SHA512
a2fd84f2c619031739962f256fdd85fa0d3aa977db1f2f2d6e6adfe1e73e0be2a56866a915cfbf1b396e3a7c5fd3e8fe6c6b0515d786a2e0bfd284495d1c91b4

Download Submit
C:\Program Files (x86)\TotalAV\HtmlAgilityPack.dll

Filesize
156KB

MD5
2ccdd5e34604c7b55df78be8d1977135

SHA1
785dfda116c774afa7270713b1308ad1d8c2d200

SHA256
f35cffed9992cf7af5710d8f48dd1ba55b9c16211746e16fa474277ec5e5e1a7

SHA512
89947874a3c167b6e1202f338ef084baca5c7f954205f65ecaa0b284e74618058b3b1db0fa8d45fd558746eb278feeedd98320c8b79cd67049af244f511e7049

Download Submit
C:\Program Files (x86)\TotalAV\LICENSE.txt

Filesize
57KB

MD5
6b1c894157e404adfa2c9168cc1feaf0

SHA1
de643d125afb3f3fbc698c87f125d5a0f64cd73b

SHA256
f9524cf8d591c32dc21902590e3182d0d0bef0cb0ba431f91bf6c9d71bd38cfa

SHA512
46ba913816ea8156aa1b676c415b98966ebaad608ce2b2b098d784a8f1b28323a12e47852a9c4f9aea8235854fa922ce3deaa75db790d955fb3c36a728691156

Download Submit
C:\Program Files (x86)\TotalAV\Manifest\chrome-manifest.json

Filesize
626B

MD5
21b2a99408f622ba3de5751c6042f794

SHA1
b661b1de6aac5992d47d9119c5bc30327466660a

SHA256
542db227dad2ca52cbfb3bbd15a56a319870e0f86a819dda8c3d2931644a8120

SHA512
7590e9f4fd15acd234598d17eb60a79804c22db4e393240d164757dd68606e29f11e030c5df4824fef04e7677f91a92c8bceb8e4ac73184f239dd845f44ccce4

Download Submit
C:\Program Files (x86)\TotalAV\Manifest\edge-manifest.json

Filesize
443B

MD5
71a0a11da12e252bd32dd5b467295ece

SHA1
d58458ee3a4612cb72804961e981176242394dd7

SHA256
8a96c6c31ed88f6c7b28a28dc965b3776edb3e7c5ba857aa203b33e39efb853b

SHA512
a1c0238cb9c5c2c95a0f92c8bc40c9f6f61046a381d9391245fca3cfa11eed1d6f7b2176b2d52ef1dc9f6b6fed72618b363f11096c9cdc811f1bebc30e778416

Download Submit
C:\Program Files (x86)\TotalAV\Manifest\firefox-manifest.json

Filesize
447B

MD5
cd6fbf69675912c8fb36a977e189514a

SHA1
6dc5f321251160ad77f415f5f3ac6ceef0e2044a

SHA256
17e6cc438c28f43b3935d1747b767a4a0e518adba95a56aa7918dcb92d8af4be

SHA512
0ead4652e686e8985ab8ea52a2958cdd59078807cbba2b6e27f1b10dfd9a2e7c05eee3a3b64d11b16b03e8fbe22e7c0f32fdc0b99a057d6f0dc5c5e94757bc55

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.Analytics.dll

Filesize
13KB

MD5
d4041b4e6cef641e52922aae24358e67

SHA1
03cd00c2094e6747b0bc489f1927d29dae39b5ea

SHA256
ac8b2f3785163b38c4473f1aa25616a4616e2fbb29332fe3dd8da9574fc3c4cf

SHA512
728dcee4a9e3909f760edbd6a6e582c6c40162f37cf0c5e61bb092679ef91e47e8e5bdba468c40f24010ae795f6e277ff1c60b9e46bee2dbc94b3d9c6491570a

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.Crashes.dll

Filesize
41KB

MD5
389e880efe79f750488feed7fa52b1d2

SHA1
b0a58209ddd87d4ec1240bc1b556889850965148

SHA256
1ac20df009a8879ff946388741b781b37f8209ac93260ff8a00573376def08be

SHA512
ce378858dd67c8ff7972036db1b558603c0c7bf74b82c0c965fcd039138be3eee08fb729b879a1c66b41d8fab7c70c0a9ad1c8e5c9490c4967cec87b2f62b436

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.AppCenter.dll

Filesize
129KB

MD5
395ca70f6def000f67ae3334682c3a73

SHA1
5b32bb4f106e490044f8cb95b1da24605e66ffd0

SHA256
c7ddc86b6500a27783071abb2a0769a1f47a7cb78d039642c2126ad1b879cefe

SHA512
a47cde27ec3af919d68f6bba485b24c31b681b3572cc9af9c8df8e46af6d1441d4c5836303c4901f531fdc6e2092c6ecbd28a17b42616e42a0f9a2a9dd46dbec

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.CSharp.dll

Filesize
287KB

MD5
550c3defa28f7da52cfeb896254d5446

SHA1
9769ad55aee4cfbc94053e885d229ca98d953254

SHA256
d5ce9323fc09281f1f8d86d741a594e29f7a9797de0284e1b168b1043c6c9a02

SHA512
264181da5f80966f2b0a76912d496ad55b403f99d31097b258c9ab87d39b41435015b8e702bfceed5f333fac9367f542dd397778504c8ed2a4b4ff4bb3a82370

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.DiaSymReader.Native.x86.dll

Filesize
1.1MB

MD5
4ff7094e3edfda47ced912012044296b

SHA1
c6f3c9d81713687dc3820d8cabf14c2a32208d27

SHA256
f21da9fb831ac943736135b6ee109a4b352511b8d6c07cb03c66b61996d1ddc9

SHA512
372867bbae96c51ee11b413f552a67a53992b16dbfa44105381db3813e3c2f9a3dc9d16fc6bd6366514d4e1b4bf1eeccce5261bc3df837bf3e3eb5a04446c551

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.Abstractions.dll

Filesize
12KB

MD5
542b6ef0d8d600f43cecdaa5fe6a99a5

SHA1
3e5626ab326b8e0a08d48f1347c09eb3a8b1b882

SHA256
e9e4bf73dfed3d5aa9ff25780e87109a985cb6e2feab30bea42689cf7d1d4ed1

SHA512
4ba7499c2b5cab18d185f63f857f8e94785642b5d0909d2c978b039d8920aadc0401f57ab7603f2ddae396c4c8edff5f56b31de36d24620733c9847f5b3152cd

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.Binder.dll

Filesize
15KB

MD5
99ed54569b703e903f674ea4eda6c662

SHA1
5c59e3c564b4c057ebc1455cf7bc219b825aa11c

SHA256
4950a8400717903c28cd5b9562cff761afe5ac3470ab699855a898b29fe8a2e3

SHA512
fe4937471fee583ee73411eac6e256a622c2f8a10d885e2096546bbc93e393435fbc20d40b3f885f48f48767bfdde906209890e9088318505b10d84a7d4ae7e7

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Configuration.dll

Filesize
17KB

MD5
d29ef3e603946cdd964ded903c205d62

SHA1
959896475fe1dd758adf857b72bea25cdcd405cd

SHA256
91be5d8e169d4e809d077108827c041988018f37924c312dcf3c3c77264eaa7c

SHA512
3f82b58932bbe771fd102065399e36822f061c769a211b85661d4b0575cbca90cd18ae92d76101e2219f22bc247a163ba95718a4303a6d43784723437f7b88cc

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Extensions.DependencyInjection.Abstractions.dll

Filesize
27KB

MD5
1cca6bb1ef856aed16e29b17b92ea225

SHA1
59bcdfef44880db1daf87951619cbc776a22746d

SHA256
1663be664cb7a7afa5786dc9f071fca8aeac3737fe8e29153f29223c8ab1608f

SHA512
6daea2c19e873594e8486ee09ab0cb9d30e4f76a1ba51fd3c2a40ac5c27c870e1e7b533247c17b8386c9016103d1423cd886efbf1256e89ca2a8b99f0d2d57fd

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Extensions.DependencyInjection.dll

Filesize
61KB

MD5
692c5f999645b4e9babc2e830a2534e5

SHA1
da1ce989d55ef32809a4c0471be5ae9e5614e483

SHA256
21d64f47e3d226854b93ec5b1f94d3b8ecabb0000a5b759decd96507789c307c

SHA512
ee6da0eeb5617b6b0ddb754cdced46a68a4aa95e5127ed94090f3640d4d0df3f003135ca84e5b4870679b0972e3c4f6b8059bd8a9c870ce8c5237cb0930235d7

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Logging.Abstractions.dll

Filesize
38KB

MD5
613442a0e2cd90d79c3401554b8fba9e

SHA1
380df211e2bada028536a6c55bc8f33495bce1a2

SHA256
971a367da28ccca459fe2f7d755f0cea978310fdd064f6368fb8c8af814d74fd

SHA512
ef9a5696774f111a7ec99a6cc96d976e761faee4e128510f278a6f606de3f898413808f4c53cd19d27e83a46a1adef945c60d4bdc41f2aef70f710027c6bac87

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Logging.dll

Filesize
24KB

MD5
1649856f9ae8ea8aa53b5aaa04da894d

SHA1
03574a2e9baf4edab20375bbf968228ca717ce8b

SHA256
30f4630b82b19f77abf33c8287cf4a00e8285aa71df1bb3fc05b7abf9026841b

SHA512
20dda82a3c9501c7de052c86c09dafe4251042011305a7224bdd7bbf99f7b705cf6f5992f9fc27fdd5526dcbb3fd6caf6fe2128631c769c59fbbd5c639dbfc17

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Options.dll

Filesize
40KB

MD5
e80731180d3f61c207d1e759b5e422fd

SHA1
c9a8989cdb44ae95f6f6404a6618bd001ddf95fe

SHA256
1332dfbef2bb538faed7c85ae6f6c26d64333eed95486e3f81c9f2c1af5b9f33

SHA512
da74e650dbe60705e02882e7877cf0f5e7f08c1a17b3da5cd892b9a66fc06dfc7be8e324c13d8df17f7bc9898f22b399e0e81808c76e1274f70b6b1f58564a82

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Extensions.Primitives.dll

Filesize
39KB

MD5
79dec1364dfc994ba0e0af665cfe1379

SHA1
67080f49ee9ed691253ffc4475d912cd2385ec44

SHA256
16ff7d5019e361cfe19de448166383f9a915fe9ea1e08a475a59abe1ec8aa9c0

SHA512
88f1cc84d919ae86d141c0dc95aec3eb20961a81a50c2bb30a85439cb980d9933bb5667eaddd3eea94378d11d632fb2bd1c1b6737e6a9ccda513eb33cc79bb40

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Toolkit.Uwp.Notifications.dll

Filesize
111KB

MD5
71829de02b099241bad4ef0efba785cf

SHA1
625aca08f1b7020456303794543cc669853003a3

SHA256
b14999bfdbb2a55f335ed3e9da022a73e9ff6e96ba341ffef22637a6f1826188

SHA512
dc5248ec12ff04db6722d6640ce2eab8dbf154ceaecbcb5f473e4ca869f60ada4bd136d849db82524743c652f2bb27d08870d28e2d54977c717b73fc853d6557

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.VisualBasic.Core.dll

Filesize
1.1MB

MD5
4ca0c139b698ff4b1a4fbaf653d8b607

SHA1
4881028e15d3fe3e52a6e0e8a10a3d926f3400d3

SHA256
e0864f46e0f0ca66143b43c12a4b37dbe2fbe8fd138d5da59326fd632d6a3571

SHA512
db0e1eea47f75bde5427234888d88829fb184e31be0aefcf687e2dd4e351d9daa7cd5fdc5457ac445f17c5f784f4602f48fa8f49faa2c22c511729c5f550b93f

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.VisualBasic.dll

Filesize
16KB

MD5
54427033e0d65a39722a76e07e430eb8

SHA1
7b83a4fe9997310c77aeaa5868b01b2b5a7b7c84

SHA256
89896b1dfdac9c395ef24e7e032f9b746ccc331bc0c9d791de3e5d2b357f1185

SHA512
b6304ec9042eee9d4c9e5f866fe9fa92582fe24dd3ba8f82374a17a7b87cc84e5f9608149269cc4c8e64cdc2c7b5ad7ac228070fe5cdd66da5b3bb9f00dfcb19

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Win32.Primitives.dll

Filesize
7KB

MD5
8607bdfc638e4fa1d8e716486a9c6475

SHA1
9e246a9f462097de2b3b2472950eb6273e874efc

SHA256
85c9a4fac07761d259bd91c669e4e1c10cf79d0939e64ee96e32abdcce51c86c

SHA512
91314554e0937194f74c802c695090582e9a6b857da72026ccf5432f5ad960547b4f4e2235f0a56108a63cbb40d60fb7d7bbb30b39f1851606a09bcf34371c5a

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Win32.Registry.AccessControl.dll

Filesize
7KB

MD5
47c158136040881155f35b4877460849

SHA1
a60ab328c456cdcb7f71e14358a0ac202287a534

SHA256
1af18aa247c88bdfa1dbee361b6b901e541c0f7a0c1c31336d65ed5176b13e39

SHA512
14ff78a7029229c046117afc1292c3a4712dc3a4e3c4ce735781deab842b41a9bbb5fb516f19eb614299199074bc1da583d903bc08dacda6b8eb969f1bb78525

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Win32.Registry.dll

Filesize
33KB

MD5
90ce1c7910d0f504b2e3787e1ba199f1

SHA1
3acb3b6dec3b9c51e887f6a750035357bea5ee5e

SHA256
d72bbe2fe0fbc2177dd211308ae7331504ba0317aae60761e94817dc8856580a

SHA512
da7f23717e9341565d36bfaa90ec1e37d7d1ec59df91e495c607d404b00324d7e1c8d216e7adb64ba4bf7973888342098debbb8b8a4a95019200e1735b5204d5

Download Submit
C:\Program Files (x86)\TotalAV\Microsoft.Win32.SystemEvents.dll

Filesize
40KB

MD5
fa51d1d280c2114a1de24feb9be14a32

SHA1
aa0916a3b709e2a19b7d3a55d2fdcb9cac333f88

SHA256
5f05110e122fa7c73ac3571b82a0bfd5a8462a4b42b0b945c4f901928a29f3fc

SHA512
25c35857c79e03538825ccd6b87cee1d4a569d871889fd256fa413d69585a8e50340a0ececcf1824cac4ea976e15a3eff6ab367b0c4846f66593e0f67d233921

Download Submit
C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.Common.dll

Filesize
64KB

MD5
2520a5a2506531cf6f8b4f2a733957bb

SHA1
202e824c042d89400c856a64624db4bd98e51f52

SHA256
9ea613cfa8e489c15d44bc1360e11be1d321de2d0327386df657425db4ebd847

SHA512
8a95c483023177a8a88a1ebcdf8e00577f14a7b8603b722896ba1c714b2cc10477a74a0ff0bf7ffb70aba7e51327e54d07ee5dff6bfaffbb0ef51f08fe9adfac

Download Submit
C:\Program Files (x86)\TotalAV\Mindscape.Raygun4Net.NetCore.dll

Filesize
4KB

MD5
94b6fa3995eb2ba34afa532b9fab39a9

SHA1
42480243477d813498bd83839cd16f6b7b828e96

SHA256
839a8f2b052dadd685a7222f69c42c11edf9f1e06964dfddec61320e9f359a98

SHA512
3bc4eeead6053cbf09d48297b75e270117b52562ba21a71d8163e7dc932f02c837fed47a813d6dd3efd43812faf1c9cd934e43bd482d8664fbc5191437bb6d90

Download Submit
C:\Program Files (x86)\TotalAV\NamedPipeServerStream.NetFrameworkVersion.dll

Filesize
46KB

MD5
f8d4f30967bf2a130721f2ebc084cc7a

SHA1
14d81ae3e20c321636262cfca5c2fd6caa59fb9c

SHA256
463e1a53996e8de4d2ff2a7b3919e24358c1895da120060d32c1bf4f9462bc83

SHA512
a9cdf2ae64e408349e321a69fe609f7b9e7d14505468c9d986bf46fd9ac77d5c79bb14eefe67f6b977705150a2787a41b74e685545240d7d60c524b3bfbbcbca

Download Submit
C:\Program Files (x86)\TotalAV\Netlib.dll

Filesize
114KB

MD5
822cc56add5d97691b993f64b11f9847

SHA1
42b92efd9348f2306315274e34827953b8b26814

SHA256
9b33915254ff7c566937b73c0c98e579547fd50b65e4483277159d5c7eb44549

SHA512
a3c2e95bddeec26ae516e3b0cfa69a44ccd22f3930a692dd6e90fd4869676f5213781bc5523c15534eaaf3be5a949be07c0f5da4d6b2edf762b457363528f97e

Download Submit
C:\Program Files (x86)\TotalAV\Newtonsoft.Json.dll

Filesize
667KB

MD5
3c88cafb11eb9ee403dc2980edfaed36

SHA1
b9664b423200e28882a8e543cfdb8bca5ebe25de

SHA256
74deaa342747cf77f6efac6bee1cb6da2e7fa31988b3f1304eb1d01d621ba4ee

SHA512
c5044bcc98bbb639c40cac5b5333c890feb4afb2d54b55d5d702ee7f83d86d3aa329303f88c70683f89658d7fca279104bd2c94ef3641a6fde522716c8365dd6

Download Submit
C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Context.dll

Filesize
12KB

MD5
49add3e0dae1181cffc0d4dcde4e9502

SHA1
d2941dd7672b7e1d20ffe3d70dad84a71fb33852

SHA256
14e949e8c2eff5bc7afda30804bdab15e293fde2c9f573c8d52ece54bb21c2a0

SHA512
daa90a6db7cc28f4759deb2ffd3dd8c8f981839a8cca1299ebd558b41488ab0d9c56bda336396e7c6f46af192ca0fb02afb5851b66c65c47e3e39604fcdbf8d4

Download Submit
C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Coordination.dll

Filesize
38KB

MD5
805c7a0a6c838cd2e96b402417638ee9

SHA1
843ae9a6129c73f17df1a91ec09c4ac2a06099c6

SHA256
fe34dfb558d65d8b072f466021a0d15de8d202513b1f13a7b45ffc3e9125b588

SHA512
ccd6383841af4188b448d1ba153672b5861814ea8570d29ced77cffc10346c403a6f37bbf2d003b705f7a50a9c008e3a5e45a6bc30f617d9a34f64e0bc103e55

Download Submit
C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Interop.WaitHandles.dll

Filesize
7KB

MD5
a4a934cb7cda9fe457e751f43946b47d

SHA1
4cce8c0d38247450b158de3abd320003da9a4844

SHA256
9f6c3af2124d0a7385ec595093062ae203573167332473c0dd6af323a8010190

SHA512
15862a759007cf6211e0062e5257468e86f99868901c6565c08e6c401f9035ee86e2e639ceb8843ed4162adff35b3048c222948565a46e1df25b604254d9aa2f

Download Submit
C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Oop.dll

Filesize
5KB

MD5
73c77e64e8e1f0f010fc4158a1a7060f

SHA1
ed7a2e982f5475d4479467aa248e1e6cc4adb455

SHA256
75a30af7c9e46e45e6c2b11a8284d5eaf681b8d71e531200d4b480fc66b0f65e

SHA512
0fbfa1d573da283c5898e9222349c523cb9c8b22f650af24b6980ab9202249020ee74e079acb6ed9ea3c1a74debef2aa70d33448d1012fc66868fe2f8db32c77

Download Submit
C:\Program Files (x86)\TotalAV\Nito.AsyncEx.Tasks.dll

Filesize
31KB

MD5
17f57e0d9b7c5cc602553301cd7b1607

SHA1
cd7567d67967684e72ba10d24c47e3d5c0eaedbd

SHA256
edef045c965f1dc14805cd66e2a0b2cae2bb34aa2c8e80468f34c34446906d0d

SHA512
759fcc7914add3c80080c6ed9da94e9fa5e2af91752f5d7846b8cf01cc261b1eb76ba59188b1391d04a61f7ffffab7b68e0d8ce3f4b5b81fc4ff53c4aed78bef

Download Submit
C:\Program Files (x86)\TotalAV\Nito.Cancellation.dll

Filesize
7KB

MD5
df073384d167ac9baf66b991ecd6df79

SHA1
1278cb3cb7fbca5736fc386ff5e72053c6eb0f28

SHA256
f905ec7901dd2b3e59ec23142518996769b3c6916075776319a1c960fbddef08

SHA512
5d06ca462cdcfbf4223c1b354c3578a8074e15ce850b91861f642c1d9cb29ad31fff9c16144dd2e34c289788b678296a7fc3a664c4b27e655d39415923432330

Download Submit
C:\Program Files (x86)\TotalAV\Nito.Collections.Deque.dll

Filesize
15KB

MD5
f37027e4b63b3f6468fd37332684d105

SHA1
68c3e376ba053990875dabf222fbb320b2495a8d

SHA256
570f6df8ea487a9977c23cca5ce9ae582f645f057015ef779bb1c75afc208052

SHA512
ca8c0eb8a5b884d015131de216d97045a5b7e7ab457901db231b28a289d829803adfe18f58ccd26b153ebff64bb542cc8a7cf0c5f628e7108aa02196933461d5

Download Submit
C:\Program Files (x86)\TotalAV\Nito.Disposables.dll

Filesize
7KB

MD5
e4f25b163ce2b0cfdd30e22d2fed7e07

SHA1
16ca226a1380d219ba511a872eaea47c51818d76

SHA256
36be2376633d785adec9031ea49b2f578f50d5d2c74babf86f44566b903b4197

SHA512
5afb2c7b8aaf67eb40964bb0fecd50a9522aeedbe18fcaa3fa02c7305ac3815f49a1e17732fa6a3f08f79507b0f2e19e1bb3cd0246ec3c95a247f7c789c3deec

Download Submit
C:\Program Files (x86)\TotalAV\PasswordExtension.Win.deps.json

Filesize
140KB

MD5
cb9268125c592ca792954257032bd7ec

SHA1
6b2f1f5b425639aabc73dd0c0b119a1a51fe5549

SHA256
7b34d7ea90a9664a8f6370c3b0e98ac3114eb96f0ee9edab6c669d86c2c3cdc1

SHA512
0ed3ac6039d742768ad3eeede207d96abb393780a431330cca8c27561a8dc79777ed11174890513ba7ef71cefe79cb1e3e54e7dab11b9208cedfb754b2ef389b

Download Submit
C:\Program Files (x86)\TotalAV\PasswordExtension.Win.dll

Filesize
87KB

MD5
4d4dc71f2e8ed5301fe1ade1ae8a6489

SHA1
c1f5fe2e247b3d9ec5f4d7da2b94409967109fb1

SHA256
8971085fe9cb1bb47d0f757e01a504babd51c624c140c19251c63956745d163d

SHA512
d98be09cedfd786b132efae325dfeb98afd9d2541aa415168ac5a4839c1353ac9daafa204f891ff9d0a7cca2a482988c453d0ab2886459f196f4e7d5434d943c

Download Submit
C:\Program Files (x86)\TotalAV\PasswordExtension.Win.exe

Filesize
250KB

MD5
30a037962d22c88a6c8a1c1221097fd0

SHA1
8b7f1064a80e42f0de3af2e11d9b76b48a0f5dd5

SHA256
6df0c68d62a6aaeb997e78cb65b572a005b7a3f72d5ffdcdcadd1711d23f5773

SHA512
1da9e0ec0a7bfd2f6e0a2d9214f715d1be9a7e00b96f6277ad9a0f3dc0685963db154b7034a8aff3171338bcc5575a2a3ccadfe537216eeaeb1fcc2ea80837b5

Download Submit
C:\Program Files (x86)\TotalAV\PasswordExtension.Win.runtimeconfig.json

Filesize
422B

MD5
1bc39e80d6d10935c1e3c9503108e508

SHA1
a5272c88b3cff15e52f1f1ac348284fb962ec875

SHA256
202001a334948c50b6754226e1d935ef79b42e8b51c7c2311f5b86d4c3401acf

SHA512
5c7a59f20016e42f002585cad1998f50de5e22e7486344177fd61feb18f4d9130dc84e7d9c925034f3b3454310ff4e608ceff3b829ad3c8572803bba17c9dbda

Download Submit
C:\Program Files (x86)\TotalAV\PenImc_cor3.dll

Filesize
136KB

MD5
7560e528fcc8df6c4d4bbd86e0749c0d

SHA1
df3fee25640fb715b7ec590aba394e0457a612de

SHA256
3002b51d51172b402fdb20cb6f87a6c9c0abe8a4a8feab3d2bc4b82f1216e5e9

SHA512
c1871aa76e7ab34ab0e0a7ad9540b306ee45bded1e0e5cb0c9f031da6f69f057d34e0b4a386a0d1e31aab8ba17bd2e0d564e327b828e33dc4eb828eaf00b0a81

Download Submit
C:\Program Files (x86)\TotalAV\PresentationCore.dll

Filesize
3.3MB

MD5
00bd4ac73d8c20b14e9887f45454e381

SHA1
a24ac293000375ca862376b5d397a0c3b2911067

SHA256
9a711c29f615b2f292851650cb12cd64b6074913c29125ffc399ed760c853ad3

SHA512
db32923fec19ec450b21e8b2380d06bcf9d562ee05559c53ba47c208d91d89ebe1fb0492329ba6ef072c47ce4c65fe8e7673dbd16307fc74e2c4a7e67d25ad9e

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework-SystemCore.dll

Filesize
9KB

MD5
3d59b212dff3c0fa45214c6291a9a330

SHA1
87311de58423e64b75a91b6319e2a4ae666e011c

SHA256
4ec952a95cb5f7102bd63c59dfdd0491b7948287f2c64d75a57cbb3ea5ffc89c

SHA512
bcbda26622427ecf3a6906821c8d74a97d180adcae6ca168bca73774a898e65f80b10824a1cdd1a578b533d1f3e4a9c2f64417f7e68d7727e70ab315e8b6e1ee

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework-SystemData.dll

Filesize
8KB

MD5
dff4cee2431337eeea633854d81fc38d

SHA1
eb138c089ea3da756c847cfaaac595586734a098

SHA256
92abd19ddce03e86f9c884325f615976d7578a5b4d9607d9871290a588c9e809

SHA512
adfb1077cad4308a4547e8cce9d489c3c4822595feeefe1cd54ea716d77ad5952101c51807fd4a2413a7938f6268c8aea12e129e05731d69006fba2a68cef8ec

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework-SystemDrawing.dll

Filesize
7KB

MD5
9dd4e7e817c6c220f7abe2db522a9578

SHA1
0671ebba04cf1a4b003f821cb43dd159b3373b2e

SHA256
6a167a15ce94ebdf4c627fb651e05c694fadeb6bb00e5814db13b2e7dd33cbeb

SHA512
33a5fd207225c54710c027ce966f7abbf3a3c91622c68cdc4f8efa99a5e6f5ae6f3eaa98edeb894779ca3d383e08de804c5da6ebaaece17ad47e2cf515decd36

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework-SystemXml.dll

Filesize
8KB

MD5
f9ab7399b269797a093d268b1a71bac5

SHA1
6263304ea5c307c54ef35479aeb6d1564036b928

SHA256
7e63047da788d63ba9967157fab4a441bc83bab628e00abf6dd044e5d1969688

SHA512
3442a2a8b8af5960a2aa4a4db1771ccd4f5cf48da4eb7364b1c8ce9bd465ea20defdb1ba5aedd59dcdc7efd60db92f3ffc417ffd6d837b8e6db4c71ed3f8270f

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework-SystemXmlLinq.dll

Filesize
6KB

MD5
a0a471e2ca1ab5cdb84165223aa1ac93

SHA1
9190b6b20445bb109aea2bd135d11103c8f71306

SHA256
1d9bb8146142744b5514ac1ad82306961cf594b6f0b75adcbdb61241d2e02d76

SHA512
5b4a5892ab3323138bd455b626d2ec540c73eae89c2aa4b3b639ba1e6d9946c50d557f5059483c71b6def344a9d31c4ade9026f049358c5ebfcd43b487f178bc

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework.Aero.dll

Filesize
230KB

MD5
74026ffe0933b4afe3fe8810e950763d

SHA1
b8813272fd54b2f67e65715f4b7374568dca163a

SHA256
54411e1de691917d2ff59be6551af95fa3a20556e5f8058bcf49b0cc1bcf68f6

SHA512
8887dd784d071b6b28f0e54ef0dba9488a741f2c109d46aa5d074121aa5c7d1f1ca2e79aefab8b53f7de9a7369352853c6f5ec6aadcb5b068c94da69017a7e78

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework.Aero2.dll

Filesize
236KB

MD5
59fff35603af5369086a2dcc69517236

SHA1
b03b644518e87b234bdc488daa7567d380e74c6c

SHA256
24e62ac897f6af99631940184a2d26e1f18d6949dc2a1b00fef5a5fe9d98b37c

SHA512
f7484b2aa9acbc2934723077e46a77f6930918ef8bd5f4c93e75f2322fc135089464d56504c29a769c393174e6e03d8323e1319d632626417e2949cd50af377f

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework.AeroLite.dll

Filesize
164KB

MD5
2a37a62d650f02344025a450e343bd1f

SHA1
c65d91b21db6823ae36273712e01d4bee1a019a6

SHA256
82c55e4e8d7c81cbacea3b7042a3bd6ceb7064b66bfa3d63477784b01e02a609

SHA512
5460b87607ea14f5652b468e4b2d61fb8960f8d31d6b9cbf275cf9fe9b99e3d59396ba3c3c2baf1111d574fff92ed3328ffc1404933b505c8f5e34d473600d0d

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework.Classic.dll

Filesize
174KB

MD5
7bf91a2c218036feb7f66c043d12bfb0

SHA1
ab29704c24f7b394ddc716f17d9bbcf97ba151a9

SHA256
e061162ee7263fdfc72db682b71e220e8108f1c523dbf634ef630a2393522535

SHA512
61cc8a77cf28daf38f9b782f8fa1e914f310f9ad16adc7d6af8ac49708a12b97164304ecaa370cb5b3c4a73677584059ca77a636d3ded9c672cb91f6181ff53f

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework.Luna.dll

Filesize
476KB

MD5
28c01af7048caa566bc544843e666b14

SHA1
362be72687fb1e98e5669a17230efdf5c6e393ab

SHA256
737477e6150f9f5fb6b63456883df87b5cc0ec59ddc75de8c8cf69749ef41229

SHA512
78a910c1e616e5d9a5e9d8aa9307ddd00879efe452adbc0b69c541ab0adcec9c9a8825e1cdaba4d7b0deef6f127f20cae589cdb771583ad84c5f13df2a788dd4

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework.Royale.dll

Filesize
194KB

MD5
b576e7f9cebd41b158174153d91fe0db

SHA1
84d7c508b3ad1646bbf5b5fb6e2f249db5723188

SHA256
105a980b2fcbd8fbc3262b87a5d97890f8612158f95f9cbffa23b238e0acc729

SHA512
99a14743bafb174b85fc4062ae21fef86a689dc5ff0cc7435784abcf6d5245430b7634e8141695c4dee5600a3e086633c1ae363fe4296a81d05c76dfdd44a31e

Download Submit
C:\Program Files (x86)\TotalAV\PresentationFramework.dll

Filesize
5.5MB

MD5
03c9a4de00b3f8835146b5a364ecd065

SHA1
d390564ace7f72818f69c9b0d9eb58c1ab8fd182

SHA256
73e08d9f4afc20be63c3309c6aec1b840df189f9c22018a7b44665184004d1da

SHA512
2e5217b52a61b966acc233091f44cecf97b8703a5ec77fcab10f9467505d5da209199b47959f1383ad4f6d8c6aefbcf2ce8e7fa33fda04f2cb9f428a58e0c611

Download Submit
C:\Program Files (x86)\TotalAV\PresentationNative_cor3.dll

Filesize
917KB

MD5
80df7c9c106dcbb1d7ee2cacfca143cd

SHA1
997c002394d0c7e818bd3068a26afa2dbf6beb58

SHA256
5a71ba70796a1d679ba83f28cfe0cdd44eaa1778e2084cc6bf2785682e6d9447

SHA512
81911a29b4e21302414ea632a2ce6ba58fd6b889ca202f5a73f582a5e8dbe9f473a593ad19230b97fc2c37e5654d7026b7915183c357f302dd75a388a7b205f3

Download Submit
C:\Program Files (x86)\TotalAV\PresentationUI.dll

Filesize
809KB

MD5
4af1178bebfd8b52ff646b10130d7057

SHA1
91685be41b4e616c6b0cb480b52b9eaa951b65f5

SHA256
b77e0b332b763360827c9d76371015cb50b46ce1a611e5ececfa0601c6ff94e9

SHA512
b62bb3aac73ae66c8d8e632d4d02384ae2281d68ec259f54cb71dee784bab4f11fa4d548bc6ba44e3e2d964be427c36d6d58585e8fb97b2fc68b356ba2090dd8

Download Submit
C:\Program Files (x86)\TotalAV\PropertyChanged.dll

Filesize
6KB

MD5
4826da1d501c41bf5869823d4540cbab

SHA1
311cabfeb0aeeeda3495af1f529e5427b0241a14

SHA256
52ec64563ea08f61ef3f568699fd8a66eb5e532d5f7fc342ad46a69ccdf81ae3

SHA512
ba7475503aabb5b602ab1d748cf5ff4e55fb3a6d0ea3b67dc3c1d6142c9f87f88e814b9cd819f66cdcf2c387b3e79cddd1314a6c32906e9e71c0ce0d93ca202f

Download Submit
C:\Program Files (x86)\TotalAV\ProtectedAPC.dll

Filesize
21KB

MD5
ec918ed1f2f603ba94a2507227d39f26

SHA1
ecad966014ff84d553203ae02a84b8e23e225550

SHA256
c7f836ca5ba7b282712c7e5972855cca616d53956b144be1576f83ea44be9743

SHA512
f2fe12e9f7c81aa25122b0c28e90366a8d23170e476f644d111b602417ba5d531a6c6de5a7e0c9b37fc68f86154f9ae82bcd3a69aa1454e25f24a86526815524

Download Submit
C:\Program Files (x86)\TotalAV\ProtocolFilters.dll

Filesize
686KB

MD5
a9ac0cc5fe79a8e772cbb731ad4c7bd1

SHA1
bd138692843d2dcea3adc7df5df94eb7603d1ed0

SHA256
e02b3bd979db2a64d13dd6e8df2dc805531ac2f960e08755054ba6e0e4b03e80

SHA512
768cf34962d91032a0fd2defec4512f49b8fd1e5f2350be652b43deb45898b6ab106f9ac0284beed94ff19a733d60982cabf8a5811583018a884693609081cc8

Download Submit
C:\Program Files (x86)\TotalAV\ReachFramework.dll

Filesize
607KB

MD5
948cb84290473e06b8f69bed5a38ffaa

SHA1
61acb3f2aafd33d9c40ff848ed02e91995d02986

SHA256
8d6192a62168a5ee42b45eefb3abaae9cbaf0fd46e2b4ab64a612b6efe8a4c8e

SHA512
69ef93290fe2b1f180a78fcf99c9fe9871d4f29361493649e1ead42fb032af6c0b9ec0ecbfb46af64a2aefdfa5202b67a16a86e16e9b4d0a6c61ec2f307e94e4

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aebb.dll

Filesize
93KB

MD5
2af40e6f90240525f8cd27961b53f2db

SHA1
5eab9dc2edef6140df6842811da9e8ae9a27cbd9

SHA256
cd6fcce8f0a2e4f832894abe41f2c4e7c0ab97b4a46eb478d085ffbb9ca36b5b

SHA512
ba80cf1f33e14d5dd3a3f96196e265d33920ac4fcc23dd3da61e192233401aad522fceea4a295628f03345ec3e43ae16542b0adcf8adcf0ee93a3f2114c2bccf

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aecore.dll

Filesize
310KB

MD5
2a4261a7dde3fdfd43793ca431890f84

SHA1
8be893f9fd941dc0971498587f52228e2e9d69b0

SHA256
1eff4b5bafa7a567f756a85297733802215bd9135e627e0cc6255c65dc87ca22

SHA512
e0e584174d61387e88adb6e5a618461a71039de773666f557fd19ad4c6300d8b9bfce505b032efcfdf443ded1e97678c2e504b4e893209ffb246add683b26abf

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aecrypto.dll

Filesize
163KB

MD5
e824d826c0ebb30047aaa308fe03b6c9

SHA1
1778f29052920ddc7ef192761123013cb7f648d2

SHA256
8cb77f5fccdae7f9661b81454437928fa697a8d2c2cef8f61a3772cc766d6d10

SHA512
774111704c1d7680bce109e7fe5b2f91f415e5ff62432f8e52ba6c2a2b8986aa17c8487e0f0562818fe8d0f12af76d29965fc24a1f612eb71f149ecf60f0537a

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aedroid.dll

Filesize
2.7MB

MD5
8facd0e1b34b24d3b7adb3b9be3375dd

SHA1
f7ac09b72c91a8c54e266b7f6b68b2e40366d026

SHA256
12bfedbe10041d39020e9a15c4cc3d4b557a7d4fffe40cf2d75caecf5f1ed1ab

SHA512
55fba8645835c69fe6e93da395de726bbcc0b3dd0049b5e4673f811cb92bc911a8bf1f6706a0922548635aa81d8aef95c3779cf827e52e70f851fa0be6a0c502

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aedroid_gwf.dat

Filesize
4.2MB

MD5
961a1c1e0dfb8b54019c9ccec510b3ad

SHA1
ced9c7e98809bb7506a17644144efcbf50bfd10a

SHA256
50a9af9ac743d6a7f2741a3ab39717c8c7e618630b7688dab60b57b97f840b9d

SHA512
fca12aea31d0cb3b71b73456606b91d97f6bd3366591b65191ce6edda8b6ca8d53e07da4a5a95d9242a43b2c20842dfc1f9b39bb4ddc47058afd86530bb2afe4

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeemu.dll

Filesize
407KB

MD5
02940a21ab69d26893bc00c064be569e

SHA1
e6eb2ba77bfa72fda91ba46924a18b8ad726f7b5

SHA256
9c9e782ac4490372119a95cac641970d805679a8aeef2ad59ee28c1a942cf5ac

SHA512
fac2069467c574b856fdb4597fb973b9a4f3fef5288b0ed0bda72136f48ffce58063ea5b251ae01216f744ec17d2c824f07593f8de885bdad123f5867510b21b

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeexp.dll

Filesize
386KB

MD5
faee506a935d68524834d090cb0fc16e

SHA1
f3927c0170f15c1ad895f57aab48167781c51eff

SHA256
911d01f963ab2236e7bc977f96e84f292bef07f48f40f8927115e2b056992aa8

SHA512
5b15442e84e828425832659124398cb867a3cd70f48e85c2ae6eb2261d9f83101e148264349f05b86fc8b034af6ab5dce0579c106e0bed95a8aa656839903a53

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeexp_gwf.dat

Filesize
59KB

MD5
d68dbed2d9e81bb670e94b0b550cccdf

SHA1
edebaf42b7b772274ffbdf070d965aa585cb14f4

SHA256
2d7925f16b1b835b7265d1c04c38c599f2b25c5087a0005dec60dcd22e9f3dd7

SHA512
162c6078492870fb1712968e5cf81e99b0e16dc2c737eb56f5dac1e17a66457382d555faf2ae9096b5e0103cf79e79c629007ca2ccb80d422e424fefe3a6c734

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aegen.dll

Filesize
742KB

MD5
163ea96ca0a9b9f7469dd128fe5bce04

SHA1
60f4a01001fe4ad3b2aea24ce0b535a7d863f333

SHA256
519de6c5006127a5f4174c6f6a13d87cf30a2e866bc1eb95545d67a2ec0292f2

SHA512
b088619bcb30e2f91c5ab4c6a2777a0b163e60f33ec6475a2b00d1c711f6fa86f621f8475026adf71adf3ca863911686e03cf98bf913412ac5f8e4b269fffbc1

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aehelp.dll

Filesize
323KB

MD5
c56e6711d0c6dbb6bd7bafbde06e9c90

SHA1
872c3d8d2a54ac10c22861052498c2ef954f8004

SHA256
2c0b8af1ed85fa5ff16f87f3c58beee9fc0230594dd062913ec5ce87abacba4a

SHA512
611892b7b5a4a51fca74ee0d4d2dfa6a02ec22eda0fb9c24ff51a7f33a695a2aef3bb222763cd7ac5d0d6d5529634493fd2abd0a2c38fbbef34358700d65cb8b

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeheur.dll

Filesize
10.9MB

MD5
d3f86394440e679a8be729c2af168169

SHA1
3c50ae00ca1c65b71f6f01c18a1507c03207df5a

SHA256
23bfdb21548d8b0da6b1d63167c44207a3fe7f613bf36406168c667bb7d0a4f5

SHA512
40abd780623276742f4ff5e89135e1223e3f7226cfb8af66f87646bcbb46c46e23eebe1a4bf3e4e0603622fb803d91d4c7f25c31283cddacc9037335a436c936

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_agen.dat

Filesize
2.1MB

MD5
159a422ec89a6699396140a500ddbfb8

SHA1
8bcc5d5ae855bb7e36412a6b2d9a8bbfa37f56a3

SHA256
ee8a06d4af03049c6699a37a24233f37eb08dd2720f57848e665ed6d1cc7eb78

SHA512
db67a5792624b632c8cb3ab4bef963817faaa62dfa29f2da71b034a90e766c5d569b4c6ca2c04d85368674373fc72e60d4fc53711438923690a1ca0dfb4bb404

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_gwf.dat

Filesize
912B

MD5
27dbb4a716dc8d87eac34a14f814dbc8

SHA1
2f3c673d444a0b996d609136d8741f6dfc47ba6a

SHA256
b90baa70bd07bc5b3573909b37a6cf4fcccc3d7c9702806c94bd843988d0ed5d

SHA512
dcfba0317f02771d40fa190e78c19fa2e178d0ffadd6b8d22da4be7f66a3e7983da2a0c14741ab9df0d9f034754c4ea758d758ec7a65c53f77f922d13648e9a5

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeheur_mv.dat

Filesize
3.4MB

MD5
9c93a76d871b55028d607207a90b39ff

SHA1
c3b33d3622dbc1d02d0ae0beaf2cef9db56962aa

SHA256
9ddc8bd72905ab30861d3ae37af5292b6162f63e6446c15a1ccee3f8aeb67910

SHA512
7f9529bc2ae489a1a2bf92f54055543c933dd39359bc7a77ec19c9bf30272947e10d785c4f3baa3deee2654d5c23cd1154856b8e54031bc8c4ee985f4ee88a4a

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aelibinf.dll

Filesize
105KB

MD5
21432626c63068ee47107da801c05ffc

SHA1
1b011f00a0a01bf217c41a0f5cb7d8c0f6b7046b

SHA256
812442ad5cdaeb6dd5dff76ddc3941fb9a1a56f999aa836f8fcbf4bb9e1b488f

SHA512
1c6e973be37fbcfd2b945fbbde57afd37525aafd475b4229db8296ce48cbcffb2a092fb1d226b6f655a491535f7f2bff5139522daff92bf002304545fbeb596c

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aelibinf_db.dat

Filesize
86KB

MD5
ddc132992273330ec506e63fae4985b4

SHA1
7bf3018217f136662c159994f6530edf4c976a10

SHA256
0544403357dbff7551fc17f348a446d556a094d6c42e1121eb337de3ff88ca5c

SHA512
fd1233c02cfd72116b92833810db084c1caa08530cdc0626a1e2fe035236b29348fdb4d89192aa473dec5ece5694017f3a3a46eda7f87c20a89cd07132f4d122

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aelidb.dat

Filesize
86KB

MD5
e12b4507919ef2d5b5f2b5332f7c2bb1

SHA1
4dd0c1870754a4052f9de5f09f69df3f7bae4b3d

SHA256
ca5bb2f6c93eccc1ef5a2b2aae25b4976a2ce320a52d13d74f12b65205678e53

SHA512
74a2e05077726ab00a810325d6be729c001f290977c9e4e3d81d3f4fe4398317698510a0bf5d5014625e5c740f11dc10cf004cac343cd1e4d8ab82908a0376ad

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeml.dll

Filesize
340KB

MD5
0de0cb670e3046e388829fdab6910a9c

SHA1
2b9daea0200fd1c442c9a3a967bf51d68f7ab80d

SHA256
537b3ea2ce48dc0cc343c1c6ce79ae5ba527b2fcddea24cadef1fc1eca8c42cc

SHA512
7e7ab02d20c3a1b8f76ce8c951570be1e719e0533ffc14970c958240a6adbe1c8ab88c826ef21083db0c74c6f83a1c9262ec6b2371b72d357bf6d5a298ba6f33

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aemobile.dll

Filesize
369KB

MD5
b132b36c0b53839ee1c0fc8198170157

SHA1
3e7394ee8d3c4c0f36e00466fe0191ede592c01b

SHA256
3137d3d95d1caa59d349645ab8087d6b0c7cc3321873789c738553d4471143c6

SHA512
1bba22a77ceaa59c00cf0d10a7afced2161985d8baae94c9cfe0cd5171464f49c53113b4ba8a027cb727aa242a23f79c1cf19a4df821ef6ac00f7a7c2ecd155e

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice.dll

Filesize
1.1MB

MD5
3dbd9c8da952507d0df2b46308fe83a2

SHA1
0d38ee68466f818e880680b73f5f74ca300ae629

SHA256
4a3c2f29b2ab5e78e5a1558d2ddbc564cbd4474ce4115001ba6662c143b6482a

SHA512
1e6b65fa80d95d1cb1da72b7905105f4b4fa6ee7c1fd63fdd7728a030ff42b9177e2eb0fbca1e64f44a11a253defd7bd179bc8c596fc565f3972ad89cf5c9616

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice_gwf.dat

Filesize
30KB

MD5
0c95def0894c5e5716cf7a3ecc7545a6

SHA1
51ce428514d454e7a428d57e3e050c1edad93a20

SHA256
96e2488023689abf71cf9b951548420ff3ad9d6ff37116d4279a43b5b736968b

SHA512
2884dfc79a869b3e2db3f62340dccd3cee7746852006f67a26a26a4716ec719ba196627b18ddd775655b7baf954f668e9b5229297a4b87685f087e693184b369

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeoffice_mv.dat

Filesize
2KB

MD5
e346fe238be4b645e20e1bd77e9167bf

SHA1
252c2614387aef2304f85cebabcb89b7e5f04c96

SHA256
adac5f741e5ee6f669b76bca87a26bdafa9be60d8ac7e7c5059af9ccce919608

SHA512
29965365aa6a5dae7bdcda0f437202d5a2874d60d3d59895871d05b4ca3bbea539fd04ae1895a0f6c77992ae2b7a39dd74837a1a6a72f15e92129517ff6375c9

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aepack.dll

Filesize
863KB

MD5
26ab6a0a9b1c59a01f9b45bbc0bbc65d

SHA1
ef282c4322c361aaac6d70d0e27d4b2292de4999

SHA256
fff47393adf070bc04d044c0a939c620234881e1ad69d3776146e32d25e1f36d

SHA512
f17aca43e9f66ae21d295af5fbca5de0770ef77eb602f74ac6696aa9cf9af9884df21f9c9a98a6aa5d9ba5bbb3f9951c952d608dc3863e6a8a6a6c053639f26a

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aerdl.dll

Filesize
1.1MB

MD5
62f7467baebb56a8beea7fffa6c4ee7c

SHA1
c13eb821d2675f110b1a38f8c0842b91edcab9b4

SHA256
d049ab67daae27ab3840730cadc5a82dfbd269b58896b9f8289324816e1680eb

SHA512
d31498bdee77fd498226d6c971dff65eeecec66811109f1a729858fee6aa92f6d1601256740417ba5abb72b4c7109eb3e69ecc7446093bebee62c559d4e7a61a

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aesbx.dll

Filesize
1.6MB

MD5
63159174de5eff0c3ed33f887c00e1b4

SHA1
aa787a058920e7010269d1286f32bda62206949a

SHA256
a03aa3e017606dce6f2cd19536db9306a6ebf2eaefb224be735569599a39330d

SHA512
398831b8cfebe1a7878658087594dcdd74f6be8d380bcacd415acd5bbed85e6bd939c1562b3cee4e8ecbe64b0704be1cdab2dcc9c7ae6a0dfa0e8b8d0317f884

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aescn.dll

Filesize
174KB

MD5
045180fa8eaf0c2409e101542014b5b8

SHA1
70656f926020e02e7c67fd2d145ca90b5952a9d5

SHA256
b816a2810fc9c1a5294a59b0232a1725519a2a7472f509c336b9fd1b189d0f3d

SHA512
5659f42a6fe5cf259ad9528777ab5883f0185437b60710727c097cad2ceb60ac09eae4af59857c0021fc573343704ec6318cfc6d78ee2a1d7facc7321f4ae767

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aescript.dll

Filesize
1.3MB

MD5
11197cd2373a7b8364d9bb97406fa2b0

SHA1
05b81929d797330803febd8231907b54462706f1

SHA256
8371b7ea7e0e0650a4aca997d270b68543d61ef873190d02db37d7c3349b5942

SHA512
dff359f3330cceb1bbae2cb26748244509870f9f6f1307b4010e4a449cb50b87d4395fbc38e7b1a0fedfe16eb7b01b4cacac7631f606ec1467555ca5099138c9

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aeset.dat

Filesize
3KB

MD5
b78db48c5ff9494327032a27d5aa33cc

SHA1
43ffc51ef1da90ec791a95ab6d20e3cae7a66482

SHA256
1d06844d6c0aae9b0a5f6f7f61b4c7c6284fb085b7f878d596ee8407c67b7357

SHA512
855622613a0310cceb1b885f11d22876b1b6092fbdfa7ec19618d8ae71b2ad70ca75bfc44ea0e4069b38d9785c400025a8f6a4bedca539546eb10cbce078a051

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aevdf.dat

Filesize
5KB

MD5
7ad1fc9922e67652c346113289a557f3

SHA1
9b7dcf5873d40fb45e2016051329cff4d628c336

SHA256
1fa5d91c9a58fa3f9d3761ace1a8f3bd97fe6e903eaa6540cee0c75f89c681d1

SHA512
c042d79fa0fffc8a173868f411242868b3a1b5d495dbaa0c70beca65f03b6a988d1dffa1e823ad3c126a5dde2592770e73029a184797fb7ab627e0564b34b5fa

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\aevdf.dll

Filesize
188KB

MD5
1f2846f66f454dcd075690914c58d97c

SHA1
f6e6c89c11aaffaffaf98791c1faafd00e5d8aec

SHA256
3acf87d057b627745f588315c528ca19699bc6e5999fb785160a432c7d42b182

SHA512
20f555510d45aa62b0256f8898a360ef47f58a37faecfd014e34a0fdfe9f59178ad23532fd37c04edcad63b725571fdbd765ea5f30202b0525f6979d509e28ea

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\ams_setup.exe

Filesize
171KB

MD5
30ad65d8805ff9356ac7e75e67585f01

SHA1
7711885c3bcebe0bae7c5d33979eb52cbecb8f26

SHA256
168c506b14418d3c64435d1e165e2b686b8c2273023d9f45848cee5a1355d27b

SHA512
d45eee2a5ab487d4d614da497b4ebcbe34f93828a294dcee9db5f0e4eadebcfe3408f30956b15a5352c465c956adf68d89c97a2a6609b15c7c5c43408949aa15

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\apc_random_id_generator.exe

Filesize
267KB

MD5
be6f0a323777bc43bce01fdc5ad58120

SHA1
a6c1742269fb7879dcb54dfd25af57dba66ab732

SHA256
1239ea35953b0fe8677bee09dedb7c3eea987e977c73e73ef8862c4a3774b659

SHA512
921b11869d1ec2b5a19ef41b75504ac099429339a143cfa677fc54eb520a2b79b173e2e326afcaeceeab4f6b942098dd9a660b7c9dc3addc8b9ea53a3cac4548

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\apcfile.dll

Filesize
2.8MB

MD5
ecf74de0b990c96fcf961e89cf73768c

SHA1
5ba320e5e1e4364cec95b130bebff52f3591c039

SHA256
7f6c31ea445c7b871a0ea2b73705776435b00f3e37223b53b5da9b4ad4d19c0c

SHA512
8ab9b876db9edaee8862fe3cd0cde688158a487cf00f12ac85983c8fbe93a6f116f5d4ce96bf717ce64f4a231aee618b8b023c735ac1783249beaae95a3030bf

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\apchash.dll

Filesize
144KB

MD5
a0c5e8f7cd6c02a8719ade39c1955135

SHA1
52153097ff4d14c89374ed9d144178ec104795ae

SHA256
fb74e48074ba4d26049250bc68281751f9fb9a6c41c401e19f6870ebcfdf6a7a

SHA512
30901a8332e09311bee3c244226d533840f277f47170fa85a7f2e06e3c1bae18a95db82b45ab1f31062be6f7c5dc6918bfe088f3088cfdce8ecb52df863da3b9

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-apchash-product.conf

Filesize
266B

MD5
4257d3de2badf1811f90e8312bc74aee

SHA1
85a5ddcd2282e8049bc5432932baf418bc02ebca

SHA256
e2cbcd600dce59af50b624e2079f4b92186dd0536f5ffbc2b859c5c440657e05

SHA512
962cc45ff9aa7fe1bb8902bc195318408a7dc2728c7e89c5ceba3eaa7385d19eba52090a2f4e69bd25bb2a0a9f4500988f190e71fff84b9c9df6c8bb2052c4aa

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-on-access-savapilib-product.conf

Filesize
324B

MD5
c0d7ca0f42b0eb707f0ff09a1144d837

SHA1
1c5d84bcf2bfd97a51b156b04fde285a8fddd35f

SHA256
e5e0ae1892dcae23e6b2b914234cc2111efd1ad746887c61266618ce5ec5852c

SHA512
a4582b9ad7ae3bd795c271201850aa2ef5163b605f227fa4da06d6fd9d23144d811d16904257188832a2eeddb63692a12ed649ae4244eb3138b0a972e7686b19

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapi-engine.conf

Filesize
304B

MD5
01a844c7204488b536c48a72090f8a39

SHA1
417b1670c72d9c0c70953e88fcf2ba8bc82c245e

SHA256
cfd50eeea0c80b8dde883951aa6149410ccbb6a08fb001cee109c276648feb1f

SHA512
2aa341bbd42ad658bc4db5d5521dd1c5a882796b3bc745be89607ccbadc084bd790f92197e0881f4d45a13cee74fdd8c73b47e7cb86c2bf81598251c40591acf

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapi-product.conf

Filesize
265B

MD5
c94d4130ad378ddbc7e341937cf10692

SHA1
81a7fc4c1ebaf2c19a590c43d60d4b9f3650edbc

SHA256
30ef0c181ee31e52efe06d44f5d33e5a868160e6f93f573f38aac4b05f681af0

SHA512
59ac58e5ee40213cdbe8de93baa96db946fbd1e1c7b946ba31a61e4550e4bab29286811310fb966bb9725ffdd5f4b750b09a188193bd3bd5111eef5c882e2e49

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapilib-engine.conf

Filesize
315B

MD5
c0b5b102ad8dcb4190e4acd1e4c78d99

SHA1
6364654bbe47f784d84eb8387fe14d0a7c267a78

SHA256
ea5ade6e1bc0df9e2773dcaf5cf9bb087965dba3c74a12eeb9727747cffbb614

SHA512
76264a03d43d507574582aa6954d50ab3e0954153489abb4c311989226e9e951bb4de188cff8d92c4d48c96470d58d4d7bfc094a6a74c050ee8ef25a61395250

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-savapilib-product.conf

Filesize
253B

MD5
d8e715e99b1709e69303f9d9dfd0ba88

SHA1
68964f716482230d2b3d28677257f8742235e6ea

SHA256
f6c89a441e41a381ccb1785d97d9aeac95d6d01f13227431baa6a4c06b4f78e8

SHA512
3fce72763e81318f31bfb684fea8f189dc85fe3798d14978a3d589a649107e9a7ad61c0ea1f4f0ff2c50b8663fad3ec6870d9c595d7e66f8c0c11e3de42e5264

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\avupdate-xvdfmerge-product.conf

Filesize
270B

MD5
c7e74ddde5788f5e9510034b66ff0fbd

SHA1
8b821abbe25c98877836a4a76446bb98871a9aa0

SHA256
1ccfc728f83e1709ae01936e369610e6f9bf7d83e9b406af995cab5fa1863d4e

SHA512
7657ee00f0e8b5365b02d12393aa64e5862dc87e5ef5390824d536d72845b2e9e46a25ca0676f49e6d4cfcd7ee164e80832696a369e82d464d938139e8d745a4

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\avupdate.exe

Filesize
2.8MB

MD5
e0947f2084e589a4d7f1c0f541b54321

SHA1
3ca9be3bc2678b85e36b9823a617376a268ab889

SHA256
afb45b8ae7d78085d95122ae01f6bac1515a89e7e2c87c55596670e2b5e922e1

SHA512
316a214436031a498de8b2b6ca33cb9f73cacc3ee19f22f86d90583f817e35f0b93bd44e3af8e47baf1c7e44fc66b9c2031995cc4ce69a1bdbe980de93e5938f

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\avupdate_msg.avr

Filesize
6KB

MD5
7ff9f5f6a65afe7c10b5de77f4986042

SHA1
d19c140cade5ddf6d1f588f453fccad44525030b

SHA256
056ec25ad90c88a86b85a9c72246b0d4003be39ef954a6bcb1baa92e63ed6101

SHA512
3271017bbf7afa11cb6804c5578d8fbc4410f01fb544074302cc491f357dbf1e52f8ab9d58648443f5e5f3fb64adb8dda96fe08d94ca2525465844864cf2ca98

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\cacert.crt

Filesize
5KB

MD5
9956b172b62aeb41ca988999947a488e

SHA1
199e3607abeafd168b02b062697656a847fe4de7

SHA256
c38123acd05cd0cfe4375417f766a9a465327117f5025b16e4403cfd2e07f045

SHA512
5d365e0b88a15b43bf84650f0e98bb05fd6e0257cbd73b2227bc27b94cad3086df2a65fa227ddfdf484447d91297c48800a1ed111a6bc880da53195b8657f189

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\README

Filesize
516B

MD5
dd70354b0df8379ef2edecbe4304f900

SHA1
04670a5a3d483ae50bb5488cf8cecdfa7b7083aa

SHA256
43b602dc083b9e5836f32def1521b42f5971f7b12e47e8d272049283316f0aed

SHA512
1ee14e8834c0817305e01a03984a73484a23b26f9328224513412b764017501cdce0473f58d2d64ed647adf78f51bdc7b50f5efe3f0183d736154cab83ae70ad

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.cat

Filesize
651B

MD5
622330091b3d75e6e562c37582ac8b2b

SHA1
6915486dbaf7cbd2846e63a6d1e12bff67c56922

SHA256
736c72051ea40058e98362f29a7a9a5ad73032bbbf8bda53ea897f64c5bc7de8

SHA512
5f93f6a59d798bd25aab1fe9a75f6cb13210f07bb49b340861993deaea4206fec9fadbfad6cba0c000fa6709a2e6ec6de48cbb014232f7352d272586a414ce28

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.inf

Filesize
2KB

MD5
139c7c318ef6d64fc6c7ecdf1f7422da

SHA1
7fc18f8244ee8c795f0da452fbb1f9bb628f9e2c

SHA256
88f7e8d81340ab33fc71702c2817427e7b26ee31a76d59f167a00f2af2c783f0

SHA512
504b7e7917f15e93bcdcdbd7189c8b29bc27487d2c61bf3d78f9edc4f361dc0136621b55f0e1b0bf7a69c8cee668f520b72d6f45197ab58f62b5b36371c7fd27

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avgntflt.sys

Filesize
152KB

MD5
6b60c0a7fdbabe955a183ae3b524d543

SHA1
be68e043fb0f6e0ca745b8361924ad0869bf2bb9

SHA256
33d6cc050cefb737b70431c7e493a0d7b7f5ae7546d36fd24a5d4b1ebf29d307

SHA512
040ecbb33bbba5bba6206cee7717cff01fc8d3436762a4f2af6647cd9f02b31d48538ebc0d91b627fd0f9324375544905c2e09e4040c55b3642480e683f73df9

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.cat

Filesize
647B

MD5
116668cc50e8f234ba729a8d8895b1e3

SHA1
cb987ae4def6e022dc5e62cbf8a76e374bf9404c

SHA256
d50ffe995b3ad0b44dcc30976cb047ef690646872fa9dbc3c48950cd8593e918

SHA512
3c5d04ddfb87c0fc611f6eb7b281d7a67584f9b2a4713f3f14aa1f709cceace3898fc00e4a90bc9caf59cd11e006f917536e602f21b2ac610a0245af4f3bbf5b

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.inf

Filesize
1KB

MD5
1b439a706d228a6dc534a3a8731c1afd

SHA1
49e34aee2faa0cbaa9bfd004eefe3150e64451b0

SHA256
4ae6e2a7c2e11bf797ba3b4877fb4ddf2ca75c6f774d4dfd4b002a307b7f938a

SHA512
d2cf3f4c289434654d7103f0517dc99bcf98f8db01e34af25c07015fe90ca88866bc0de8d6a1983406bb2f2ad85c179a47bc9095ce650a1ee0cedf23d2a8c3f0

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avipbb.sys

Filesize
169KB

MD5
a17862525867081a577923e210604a64

SHA1
9b6f498bbda86fc464d6e5094bc8529ecd3e7579

SHA256
2bf4e12f41f8d78737592b7f29b55206b2df15411cc2943e678f52096289d06f

SHA512
e33c701cad149844913e5853187e4bbf43f6bc230fccaec21c847b373da7299849f2f3d93e6a07dc2c3c774f5119a31f0f44ed77821cc1e8dda93661e620b2ca

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.cat

Filesize
647B

MD5
8dbe5877f742d7d8fb652c84f76fab5b

SHA1
126f9190ef1822764e8d7d16bc14c4f03d0fffa9

SHA256
40b23a7d83bd3595a714918778249b6f999c8b016aee814207c893c8aa791e9f

SHA512
70fc63d4a4b101829a0e32135562cceb9ddebb36f907c96f01639b29248d4417af98dfa5ec8143e55db4e19c159c4a08a176bbcf2ff17a3ffe4627e7550fccf1

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.inf

Filesize
1KB

MD5
e92853f21048c93a182a140e667983e9

SHA1
4265adb15d2f6ed70b7521d3887bd2304528ebef

SHA256
9fedd6e956b7cd59180920ba7a6c94d0c0fa1dee867ed6087ba753ca47d21a37

SHA512
11617cc1fd33066ba4e54be9a174b7b4a610de66712299dbcd379d0f5b2cc4bcb1590c1719867129cac962619d0e04b25a177139a4c6f5b041c9c8711fc1b419

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win7\avkmgr.sys

Filesize
35KB

MD5
20894c53c0b9db8f86993d9ecb78f9d5

SHA1
7c18c5b571c906535d393a5165379f6316143107

SHA256
d5e35a021e2a8e676b9034a2c712907f170d3f5b7315d516f317f51cd03ddd06

SHA512
7fbd637c64a3ed5ce202864197ee26e0d97f84be8bb0bfd5bdbfcf500f370764545489de8d83c347e5f15a414bf5d614377a60983803924935453266f8af5d24

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.cat

Filesize
9KB

MD5
49500efd1756f4b3934e8df70bf12d97

SHA1
7ee81eb8aa3e448fd7d9cd4559b9077d55b2afb1

SHA256
853c6ba3a145bdd47656b525985632ad46e1d2e8ad127449d59e2bf62bfd5d8f

SHA512
58b72baaffca047306915e09e9903b7fe6a6d9943e1d44644ad8ed2b3a31b371dd1ba2730789b75649bcc38df0782e8e6aad04f8f8b88eb800c333624aeea1a5

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.inf

Filesize
2KB

MD5
6fae3f1bb20b9e1f2ea6d8e0a1c35e68

SHA1
d281eaf5659ac3b6dfa501bb2206b8a7af86f230

SHA256
c17477ce4372a43268b01e398f438efa52729bb3718324be9ee1508849374f09

SHA512
f77032a6451e43e0b0c7e881afde1ee83fc542412ff6ee3dc9932608f1c61943f18da31200c4347e9373f575f5e6f2ee3ebca655cf9f190adbc12e5f7e7b5ac6

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avgntflt.sys

Filesize
172KB

MD5
f16335a9102ffc99a8c8e07e1b2d57d4

SHA1
32ddb4251591e40db352661be4721c5c6402b90a

SHA256
33c6b1d49ab13d6ae9f22e05d77b70123de63c802363da0daf1be958b7d3d532

SHA512
57746307cab7e82e9e7ef5f033628810997954a40cf57f34650cbc9ac77fc2fa3465f1206f87e0082edc4121114dd71f2f816a628872fde26136012766a5cc52

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.cat

Filesize
9KB

MD5
8e59d322b492d531124a0a51a5eeaae9

SHA1
c58672a169f96336e12c0367bd5afa5906bda93f

SHA256
4efdc56d06e5a17315784d3e700e359fd3ce701edceb6d3370de64d1617d42be

SHA512
2ff077f6115c6c4b87b11c78b7fb48ecc0f800f2b8a89ce16d709b802ced671f175c80746aa89f745de6f33d1f894991335de39214909ac0a084e709529a2548

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.inf

Filesize
1KB

MD5
34c3d7f3bd04501338c421cd9c62b993

SHA1
7feda197634072bc48e214800a3d4550cd1fa32a

SHA256
a68faf360ca9d5da989a1b6e7ff69f7aabf7b52be7819ec862a6688b841125ff

SHA512
166b4ba8653b3f932ff806e39d92a48e2e2ef7c87f82fc0560add528bf5dab34e0937253c8c5778dcd31f9a925448414066c623d976fbce21893bed08c7ead70

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avipbb.sys

Filesize
196KB

MD5
18ed8302d083dad602823988a304a4f6

SHA1
01014fd10d7babd6d81bb7e9511ffa7e13c890fa

SHA256
629da28ac97f5b17b1603059242088727e1552d68fe350f97fcd0b67d412ab25

SHA512
de9ea04221fb1270db37d35fcc1acdf7265103e079fd31566b0a043a1fa3b2267a034b720a3070538f289fd3847171d3d54277417ba0f67aede86f1b78db220d

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.cat

Filesize
9KB

MD5
a63897b79888e60e29431eb1b28844de

SHA1
86feb4a8ff0beda3b6c349fbf17c7b6a37e771db

SHA256
4f7410877d36f20a802c5db603149a33beed2d10e3e83f6c5372e52be42fdae0

SHA512
b176be196dd4967b28305a4f59325034b8ec4e7b544a2011f8b8f908a8154db8d86a3183e25b22232597024d04bc536d42556df89fea3169f0c21251da27ef9c

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.inf

Filesize
1KB

MD5
dddb1f6ae43397a15af280de3ebc3c83

SHA1
2651935088949e2dff211a7c1126a02836a9b781

SHA256
431367c384e680b0f4feafaf7529319ab2cc3cd37bccd291b46c711fa49204ff

SHA512
6b5d7715d691d18647d1cdf5e3d3bcaae84fa9614378770d544e0263261b99539977922632acbed76a520aebe045396635e45dec9defa9527500f5889d9e8069

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win32\win8\avkmgr.sys

Filesize
53KB

MD5
e3ab0eeb7613ddbacc0388b96048ff5d

SHA1
f6e382597081451d6546339948edd3e854b7dfae

SHA256
5fdde96d05b4284fa7ee985a7777739c46040ad89b3b8217a729da9695e3e542

SHA512
40c0c7ac884297350a40d58a6a870796381ccb82ade22d69ca3cb9be0c3251b8768f95ab4b0f28f209ed65aed23894a7e77529316250ace7e5da8a99d0bb81a1

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.cat

Filesize
9KB

MD5
f3018b52949cdcbf666ffaf6c17f985d

SHA1
9b4692f754d090cd8b2afb9c4ddce60a05aefc9e

SHA256
7f49d676b342ab08d809cac3326e8101c21fb9776d51853a9ce2fb5e8b92c245

SHA512
69b1b5c607e37d6cb0e7049fb0ce1ee79b720992a354aee73b67e9b87dc1e2c16548ae55786dbb65ec4e8bcfffd39586edc660d5b41d58d69746b8c25b627af0

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.inf

Filesize
2KB

MD5
0d87b337d3a44a6b7de7bf6c4bbbabd6

SHA1
692a736647a575278c65dcde5996410071df09ba

SHA256
2d220946e718fbd41e68d9324caf2458a95beb1446e8447edaa2b99c8eb265da

SHA512
6910581b8f3b88596a5e8da43beac9ea68f6aa3644b8e634eefa8f12c3be1c243ad31eff0122904d8c61462f040667569a47c9f19950e5dac7e1a6c8f89aede2

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avgntflt.sys

Filesize
216KB

MD5
d9f90202659f8ce4d5db6e83d24b46dd

SHA1
29a7b1068a5090ee59db422364b42d2c8f072a46

SHA256
31a3f5c4b19040eb20bc15b4609068128fb6028e137e98f2b2c6c679d0311c4d

SHA512
b0a9a0c0f18446e6a2b9ad3200dbd2cb94acae5df553beb971b41220304941219d12d3e94ed91dec254e6b907dac6fcb1aa72a822a09a8e523cc76071b221c31

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.cat

Filesize
9KB

MD5
351a7acf84d15a92dc75d3fc2f504f0e

SHA1
1d316b5d3a8729c0f03a140ac55066399fbc808f

SHA256
3ad3712e2d8e420fa4ea033110e202da3b70288b4f42b4f676e12a0b72f4a632

SHA512
f705ee3bb4aa9328e808d0a8793692e1b525c0413e2005bd5f1d442be4da23e05b9549d85ccc8c1ae1f9c818a4ccc19207f0feffcd11d7b2b3039ed4e20c3b23

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.inf

Filesize
1KB

MD5
b9a877ecc51ee9f13d9e5451f8b12895

SHA1
45a8abeb8c295295e4952893452c54850f721868

SHA256
4bdc3b2fb007febf3718c453e08c590d00378fea4e2628431f85ccbb1099605f

SHA512
079cd60a4d3f6bc990119574a4d493571afbb24209f1a15bb0202d3c24c66fcec3151e132d84ca036f46cceabac34d1a20c7d1034f0bc487fe9feb2740fb95fc

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avipbb.sys

Filesize
172KB

MD5
b49a44df6fe77ccb861985f5a5dd7ba5

SHA1
6e5163e191dd789f8cc33a531ce9ddd9bed2a842

SHA256
e442e66d3e24d54696c8687d1bd1a9ab41ed34b723d2b25af195589d11c4fcde

SHA512
d53f56966c8750edc513c86c8e9b47fa1f0445a86a1d92621f1aa5fc9b9400a4a7f65b9ae0d2e537c9dde1b23b16fbd56af8ab74d62a8a777106e9b16e58be89

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.cat

Filesize
7KB

MD5
f3324c2c121d360f8ce3553e221c3ce6

SHA1
85939054d39067cc7e1089de71138b4b4283f800

SHA256
901c32f032fcb4782217c4d2f3f570e932107dda74a173f1f3d8cdb993bd1007

SHA512
045db8fab56ab1c4ff0cea326cd44624c3bbab2d042b3065541707bec0021b669e6a49fcb2adf502fbea38dd4823e85fe0f2c588f93efeae4108239ae1271c78

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.inf

Filesize
1KB

MD5
176af3c43b608af665f48a35f497bae1

SHA1
e992df632b9758b3df7b4ea69c632f12a03daaf6

SHA256
f79a54cfa9f0901ff965e577cea1139583d1c73de9568170f895ac2b46c9b305

SHA512
03cec71f9ca56d99304b6dff1b90a2ca5d04bf5cf7cd0e41e1134cdb1cac50540d6e3bec18313f970420af4bf29d76653e9c5a9fa1351d1747989dfafc208493

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win7\avkmgr.sys

Filesize
35KB

MD5
eb5c2402e2f402a19504bf6ca9c3e06a

SHA1
63aa9690c36d743951558422d841276c25cde77d

SHA256
f8d33bbf769786163105c0fa794970054bad34cc5985416af553df1d9a64039b

SHA512
9b6b7c06e904cf36aefc17e14a108e9636c3a8920a34960dcb26fa520326c7ff47f03c24bacaec6ba91440237fb16afde0df01c299cdd7a89c40cc489a3f0151

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avgntflt.cat

Filesize
9KB

MD5
3ece229fca8ecdf8e4889e062abbf95a

SHA1
47aa2952646097710297f5bded9b115e418bac00

SHA256
099e028f17154e5dafdf66a9963dbccb25442b0c570c29aeaae1e9d02539a8be

SHA512
985d4005541e25f39bc7abf80c05b97fe57220bf02bcbb7ff41f792283af5aba87d7db433217ffcea002d35dd113913bbb6e980fbf99778126f129a799b58573

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avgntflt.sys

Filesize
204KB

MD5
ec059af10524644bddcc073916e78375

SHA1
93a9466afee21f61f643f540b2ab82ac7db60b62

SHA256
868ecdf543865035a3703e8837869441683b8ab396eaadf6aaa0e455e8393c5e

SHA512
88310251e07eb6edda3eb28d057a18fd7d1ea7a9adc5f861fa7ad127561bfb035468974fd11685b66654fc37dc3577d7d720e2e9e4f4fc38d116c1089ee9afe7

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avipbb.cat

Filesize
9KB

MD5
209bedcc941da626c2db370a80e3513e

SHA1
c88910bf5a4b35893e60d92828568d20420a9caf

SHA256
f456a7783dfe46bb46547464579498f7b4801258424b4caa264d8c6f57c1150f

SHA512
ddef0175e3e2919c4504f99d054b314e48f4ed0ac5c1b3153e1581b3614f304fe3850a8d465163cb4c502d4b026986121d6e4e30fc421d2c583b689ec933a10f

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avipbb.sys

Filesize
194KB

MD5
c8d33c5b49a4760f2d81710eba839ba2

SHA1
8f41e4333dabe52bfd988a68785d0687599f1154

SHA256
80d9d7444623175794a51b6710f99e911943bb58a7a9621bc53d0d4bde304daa

SHA512
451dca816d38538e082c7388aac0997eb04f5e8fc288fe44aeb661ece1e717060d73f24d60c7576403a68a5fbda3f931161602a2a8b98f506b56ff64c095cd78

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.cat

Filesize
9KB

MD5
88ae7b9879c9ac3a65ef73424600ba65

SHA1
67f74e5f569aed30bda54b5a6467d86d0110e448

SHA256
71e8546ba1c9716ffc8072f97feb945cc466d832ddbf53b090af179094d473bf

SHA512
5b87166c206dee390e81a3ad334578a9b1ca7274b677af3cfeb2c6cfe46b756a59df78b0ea5ab7c1e11d3465f5955e58bac8dd45daeda61ac683ae53388c3dc8

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.inf

Filesize
1KB

MD5
fabaac0d5c0ef083150dec8615a8b2bb

SHA1
23b864f150922bd020b679e018b1b0ee59a7353f

SHA256
bf526004b80b6698f782082cd3da58abf4e52a5f390d2f8d0d131b80f19775d2

SHA512
51cac3b029a5ec11ba36e8b7ad86b720da7e6546cb4ba8cad319200892ff143e9664e4a29d915a79f4a302b15078e44f0bc934715b8fcf8deaef4d7e3dde5801

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\on_access\win64\win8\avkmgr.sys

Filesize
45KB

MD5
40786e1ac650f9f7e8b67a672b5eb69e

SHA1
f529c7b666b029e19a301a30463abcadd59f4b0b

SHA256
c754dd80f8f3e19144ffb01a17aace2176cb5a8dd404a38ce6ec4ed88b6af759

SHA512
da8453b4d97dc4994a6db2fbdb741119513bd007078bc352b664f77790a7c7de876f038943cf826dbab81962bc5551f506dc04e7d69945bf324f3a23a5e9e6ba

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\plg_fops_dummy.dll

Filesize
105KB

MD5
e31669de92895bb6b150e3f319267458

SHA1
83a6ffc6da2421d28e4f8a068a0950726078673c

SHA256
18f14d6ef36885b58dbe598cee1ff20c83afd5f9cf0c739394f74251f51bbf2f

SHA512
2d5f7f682e88fe83223efa7763e1dd46f50462eb8f164c90bf34c41c40ba06b98720b2acc04238809fa646b708a2c4a640ddb0e1ec0a8ae244cc29737e4fec6d

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\productname.dat

Filesize
16B

MD5
53ce39cd5a411bb30c5b1d413e641ec8

SHA1
0b7c31237c9b0a436ace5274938d420f8c7d6385

SHA256
84cc36c119381af58ccaead1ad8995b92317ca4ae8c38a38dc37071d712bb4d8

SHA512
3524dea3bfd8cc9539d70102ab3f49da50a1b0c1a68b7073869b7f193a30562d716526a6de13a40f07480763e3841bcc3743b91f46f9f87630707e63e7d76f26

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\savapi.conf

Filesize
32KB

MD5
c1f0cfade5c32a37b223f5f7b0ec3510

SHA1
8fb0afd1a53feb25652937d09865e3cc8cf3f02e

SHA256
b30e328a864f6c4bd5544f6a7c3dbdc2cb97e668e2e583de0590506c881a16b9

SHA512
9dc05c25f907ce29ebccca1c34fbf926ea7a4d803e2d2fb6106192176681fd151b82605bc066e7e55e03b14aae3ac81008dadc70889dbae887de5f67ec11aa40

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\savapi.dll

Filesize
2.8MB

MD5
85815e63269ec76386fd2a4d418f75be

SHA1
34b6ae807c5ab324e3e5a624b4bfa325ad86d890

SHA256
5617fc94cdd8b0c7a14df62cfc77f64ffe157d5fe96cc02c9ff209db97274e0e

SHA512
08401d39a1d8cd2b047b66c14236aaf04fc79d2a21c57e38198a6c2ccfca5e2959628a4674eb5609f7bb8d49eb87ea9033562bbdb058dc03beab81478b95e7d6

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\savapi.exe

Filesize
634KB

MD5
ae60aaf104b487577024715df996309e

SHA1
ca80a770fd21bf51a4f1a3c05b1d4dc974780804

SHA256
212b3d2c8f570375b95fb2de9f681a9f85796220b4bcb5abb6a2d248ffd9e1ea

SHA512
108efd4b3e463a1ce658d497de80fcdcb9c6b7ab08abd8fddd639e8de4383b6a4f793cb3dc249d9c5e6d157db897d10b65d1e919487e65b480305fa61be3c98f

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\savapi_post.bat

Filesize
2KB

MD5
0dc718c8c4ccc13e58f9224f1af1125d

SHA1
51cca0861c564b973dc5017f6a9c86d47b2dad31

SHA256
4682c0f3dcbafa32e3dae743268a0babf67fe2970b4b0dd3f91cc7ed54627545

SHA512
b6e4b9b9b50669198d35a06c15bf8334eb3e68801946a96be66aee00361faceed6eefd84303979c5fceb87588a21d4fc1c94ca2a9dea5fb062d2a9da8c4cf27f

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\savapi_pre.bat

Filesize
509B

MD5
912510dd6dd41ca900d10834879601c7

SHA1
4dcaa7061636cf05ad5fe72ecb20ca29f2c003fe

SHA256
ec07adec51dc57f42077b2757421012c49fc771fb8cf664c36505d664e996c36

SHA512
63f0e1b37d83d208d1d9fab44b74d5f0def82caeb4f2289d7ffb6bacb28013f6a24ae61d9a83e6684c80b5221675d76bc75a94c9fb2ebe31819465135753ea6c

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\savapi_pretest.bat

Filesize
2KB

MD5
55d563f40e716ab251760a52f49a0e68

SHA1
fc8a086681368388dbf77199cabac654765b133b

SHA256
767637bffb932cad48218f8d128f2908e57c4a42326db29dfeaa1c5509018186

SHA512
b218b11f9d66812a76c99b5a9a8cc73f9c83c626cef17049425855d5242e9c2e4355557c94d8a9f4d8f0fa6edc99a4658849f5edbb0320f7342dae4bda18e34b

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\savapi_restart.exe

Filesize
126KB

MD5
9919de22bf888ab8d7122a04646aa313

SHA1
35af4b2757b6d96e345ba43af1d126ccfbbeb23d

SHA256
4b75f1e230aa0195e8da68e481eeb90b9d85194f15e2d458bd8ebee6d9d69ccc

SHA512
deb7c4af295ed1c90205bd4c1299c62dbed70711ae16e3eceb64b386ca5e78537f801c1641d13617a6ee448cb187bb0399990a8161abc6685f0ee941a110224e

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\savapi_stub.exe

Filesize
302KB

MD5
3899d956a9c88d0519e188d067de5d19

SHA1
241b01e86a121694a48722ce4dc6c08bd0bf5cfd

SHA256
91265685308da5d2a1cc5f478b83e43a4656fd075d7cfee3923380905fd8dfaf

SHA512
7f6e4d7b279f3c08022af6290e4015f12d4e8ba54ef65681d162bb421f08a81b57b4b2e7004861638c227da746127f5e9d4ee7932f3e2067b990f6b2951cb633

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\savapiclient.dll

Filesize
368KB

MD5
eb905e77afda1a6e65342a83ac5fba75

SHA1
93434d20f75db97bf1947043982d33d282db96a0

SHA256
8f5aedf1f8e8dd027aabb3420ed7e0e38219a7d8d3b880f3a46671d32270fc69

SHA512
4fdb07e66639fe5efeea5f45a57db932be99e7ce81aac392f7fd52dc0b333a219da5af9df980ca3caf256f899640a4bcebdbdb8aa4bb2269160f692a72b880a2

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\scew.dll

Filesize
338KB

MD5
4a144eb1f737dc00689659b36aff0384

SHA1
4ce0c8afbd153473d6a03fb2743e209b5ddd1c0e

SHA256
10f3a985da345376502bb8e4fce9c59aa15633b78347bf9080fb61bdd2e3cd5d

SHA512
68e5044ed77ebdcef9b0b3fec7174ef5faf56b38aebf5df64ec925c817021453e97a3a02a348996cfb3976b995e59439b3128930ba176600ab4b10c12ff40726

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\update.bat

Filesize
702B

MD5
b862a1baac142bcacd391414d665a0a1

SHA1
79aa0c97010707640bfa3082b29fd61b1373dbce

SHA256
924f07591863b3e6d43371593a3c4d57bba93cdbf59fdf102ba72abd55e92879

SHA512
788f4e959fdf91f2c3a2a46ff9d1ed51f96c73238f3e9aaab9e2b2bd45759645085082aa831220c9ce023a7a741213538d852658b9cbe4b12bbee5705e1f2d7b

Download Submit
C:\Program Files (x86)\TotalAV\SAVAPI\xvdfmerge.dll

Filesize
329KB

MD5
af329640a44f6dc93e395e167a0c80f9

SHA1
9f3c6e132c874ec689c2ab5ad21282f326d93694

SHA256
d20f7ad78d1d548ebea41f6b496cb2399f8186493564c777f192c9a0eed23f18

SHA512
988ce1e03736fbb4369bd5e0ffc52dae9c70811c65d11066d99a76e372fb72108d80c727fe4dd4e4e1125c927a68caf97af18009fb362048f408dbe36caba440

Download Submit
C:\Program Files (x86)\TotalAV\SOS_README.md

Filesize
277B

MD5
afdf90f86dd5c98ccee0be65cbb99f0a

SHA1
dd66bbff9bcc51522b0985d0f42b34277fa3ae6d

SHA256
72bab8ad57ae20824c84aaf9fe2e0e305b2108286e066545e6bac14ac7af1450

SHA512
bc06ebe3b83956aa78190b543134d89112bbf33dac89faad71830cf24a872aa1982ded9d03cb38b969727502d26b7b9154781940f0682d5a7c7d330531a137f7

Download Submit
C:\Program Files (x86)\TotalAV\SQLite.Interop.dll

Filesize
1.3MB

MD5
5810639d1477c0c33ddd1efe75256dbd

SHA1
6a6149730e40fecd9c30534e8f806e310d03e1cd

SHA256
0dcdfbad2b4fd598ee78682b3920e1a268b03bb47b5dc26fbb9050089368a043

SHA512
f22368fcf5fe5495d0e318b692f163e8e6438735601132fe0d66158c8ae26e99453e8931388884ecfd998e42de3f98bbc9b10e89ff081609006b9805c1a40d9c

Download Submit
C:\Program Files (x86)\TotalAV\SQLitePCLRaw.batteries_v2.dll

Filesize
5KB

MD5
0c9ba51b96a446e0fdce3810bf76fa45

SHA1
6defb626766f10eeedae8dcf67c3f9b13be7534e

SHA256
aebb3dbeda2b2eb0605a20acc126b50aca3795b066155292dad3666f730603e0

SHA512
d74fe14562b39f74c4b3d1e1c0db95a77796e209d21006e5af4d82840febbeaf7ce6c2b15cb0622a4250890bb005ece3488190e00344ae2d569917c94e462bca

Download Submit
C:\Program Files (x86)\TotalAV\SQLitePCLRaw.core.dll

Filesize
56KB

MD5
879b403dd3ec1d71623920b0ee2d1069

SHA1
51d4ce115b2a57d58dbe42df31402934eb34463f

SHA256
cd9862b8fbfd400e8526aacd7bad012a7788f00ed13a3a9458ba3f20a6512257

SHA512
ec89881e811ff07dc89328019369711a80ead72a86ff9a9d3e55858dae89897d28dc847195128e2b15bd6402efcd4a7b62b986fc599bc9b00488fff086757fa3

Download Submit
C:\Program Files (x86)\TotalAV\SQLitePCLRaw.nativelibrary.dll

Filesize
5KB

MD5
f7bd7cf71c917b7f05667945775b40e3

SHA1
8140e79d3aee95ad338d292407e5c0acca99d494

SHA256
3210fe35503c5cee094f9c1b86710850dab15deb36ea53c266a9665e4ecb793a

SHA512
6dcac6e463264c74370f5b3f2ded397cc3fe198e9a739fd7aae04348e149e205628d1496a71bcf65f6e843a7ff61f7cf60b6c4616e062c4e81c2c5b5c921261d

Download Submit
C:\Program Files (x86)\TotalAV\SQLitePCLRaw.provider.dynamic_cdecl.dll

Filesize
55KB

MD5
ddefd87d06e352815663d1be0dd33d72

SHA1
d058fc451aa076dd39e32303e78ac9dbc3334cca

SHA256
d7f066394f6754b1a06dee90ec6f076d9bfcd07033cf6bc19a2af8baf746e8b2

SHA512
9e8df90322986a252247b0ce9f2faa8532f92fa52d821fc1cb46b2d63d89b67cf48d65d31a99998f5c5c75357bf168fc301894884243cab96f44266abba4fad4

Download Submit
C:\Program Files (x86)\TotalAV\SSCore.dll

Filesize
150KB

MD5
22e6f53e4ee30b78b0746e4b5672f2e3

SHA1
073cfca6b4d9324777fc07228e04c74c23dc0ef0

SHA256
38ef895e3910c6e19ef0255093587840ce630bd614a060feb44150eff45dfbbd

SHA512
33436eb0afc55f0a4445b979d6285f8bd332def68aebb474993a3273f608ae83eef551ad82b7e5428e50a6293df7e7eb4600f4a13ebb484b309ecd8aa5d07c30

Download Submit
C:\Program Files (x86)\TotalAV\Savapi.Net.dll

Filesize
90KB

MD5
75b793d4c364c082c55625ffb5db69f8

SHA1
f21de5183c531c50ed2627440d6b4aff97c10d0a

SHA256
d40df6a43346e5ebb7e6d52bc0bbc65354d8d2d8c5d4acc09d0cfcfba74437d3

SHA512
7b2fd2d95cf4cb918ce1c73a201b2f5ea8e23003f1c7678026e1a23d8ff4fb683b707b33f0e7e3b4cd5d53c1085e1645968da808f6b78181558d5b9e9ada6bee

Download Submit
C:\Program Files (x86)\TotalAV\SecurityService.deps.json

Filesize
158KB

MD5
d3da7acc157cb704aaa29c814100e142

SHA1
bda1ce953f6e3f0f4c4bcef2d5905b5679b6e2d8

SHA256
0e3511d21b5ae8e724322a16188558c78814558c1a20950c66e1e7fff5810ede

SHA512
c5737b7cbcc7cf1208dce95ea0b66e43802bbb2dfb6e60787854431cc4f413c63e22769564057bf3d72ba391b68a0c2c30d3e9296d16546a86d52074d52124b9

Download Submit
C:\Program Files (x86)\TotalAV\SecurityService.dll

Filesize
70KB

MD5
cac3e97b3fd12cef84a41263016559b1

SHA1
390d11c3ad94b61aad04a04f00d0da977fbb121f

SHA256
ddbd34135d6d4356887a7f996013d7e7a5ad63a4f5aa7990d160c2668d93ae7d

SHA512
614e5decbac6aa7976daded1635752b3eedf2402d074999068fbb0428330dde7d86661ae3b7355e13e9a685b0f5a1684cf43c7dc898c3105bf80b8d2a5d3c9d3

Download Submit
C:\Program Files (x86)\TotalAV\SecurityService.exe

Filesize
268KB

MD5
290fb31b70589b9f2f2dd115c1d0438a

SHA1
99689b00694074083d90afbd38709e7fb8739a41

SHA256
393a4cf8bf0709d5ba956af454a5fff5dd89fa6541a3ce7138d4a7e7454120d2

SHA512
f341c0ca42ebc302cac5a4c3202b5171f6be0c5847ba061bc5689bfd520428b8748d47f34efa633ecb9508fb59bfa2672d9b5a5b64a40c27c9313699c620c22c

Download Submit
C:\Program Files (x86)\TotalAV\SharedDesktop.dll

Filesize
206KB

MD5
f5dc0973ee6141bb59abe4608b8c1392

SHA1
ab32a70cb5d8ae0b4ec4377e70491721253c6d37

SHA256
e68e4eb5823a32b73fb0eb592d4b9f337fcb4047d13f563516d913f482bebbff

SHA512
5c4e3849d9aee870d5584d35d20ef4fce7512ee1d1b8949727e31a72ff43f335e5fe448f382c49a354b91ce7fc75b823180ebcf37fae9282144c171cc0195bbb

Download Submit
C:\Program Files (x86)\TotalAV\System.AppContext.dll

Filesize
14KB

MD5
97057f8b94f3ef7bfdf76bda971d69ed

SHA1
b4d80b317b7ca2d32879305faabf7d49af4fb7ec

SHA256
76b3757d6a5da7d268a412f342ce0997b2649978504f25daeb9190266a4686ce

SHA512
6fff3c4bdb29e7a82f9868bf0d5120ff26a1a7ab8bfd9ab5c2231315d4444ee2aaac2d484326dedf78e384e1ebd4f5985dc41afe1509a0c11e44cf8774f273ed

Download Submit
C:\Program Files (x86)\TotalAV\System.Buffers.dll

Filesize
14KB

MD5
ee51a763ea8cd7a3115ecb3c99a5544c

SHA1
a8b0bf1ba791f0ad38b92d8893a8d3f6f9656b8e

SHA256
8e4f4a2a7e7a389f86004ee0b0dcff9e99f0375cd4ae8b1e3f751626fc633973

SHA512
f6b6232a453242d4856b420556f5567ed71ce85c8d23f9ad3f4a2cf0d3534721d124caa07d7de6f2efc192aa3b4dcbd7b03cbc23702e5fb823cb59301c8af520

Download Submit
C:\Program Files (x86)\TotalAV\System.CodeDom.dll

Filesize
166KB

MD5
f92060a47c375aa93f21dbc0aa18f908

SHA1
34642be2d85691828482d6b7b78b1f0cb2b387a9

SHA256
d3910d8782594fed0a1542362ac0af0189ccbbe78bb084a75759245b0fbb77bd

SHA512
fb73612565bb43981a11e12dd89477e5cc70c1392c3948a6d5a44e4d9b3d59fe5ee9723cf21cb7cd121cd7933c347201ba3adf42317c77b3c2dd652f4130350b

Download Submit
C:\Program Files (x86)\TotalAV\System.Collections.Concurrent.dll

Filesize
168KB

MD5
34c497eda61e2f73726dc57562e96b7b

SHA1
0e1d04c8d1609a3d9a8d3aa18fb46779f1806a64

SHA256
86bd69a2f0fc3736d94deb5aa3e695a2b99d692c743f7f2b43e8ddf199ae6eb6

SHA512
dddceb67b4fce4a1b59aa6187d63b80c44587d7a60ebcfd3a08220e7c1ccf98c3a1006b6d42fb2c2f2219020a1c675ddff69e4e5b2fe86abcb1935c4880b6116

Download Submit
C:\Program Files (x86)\TotalAV\System.Collections.Immutable.dll

Filesize
163KB

MD5
5f7aca1f4c6723b9a616d58523183c7b

SHA1
d19ad439d779be30c2d8efef93fb4e30bb506bfe

SHA256
3c73145b2a78a6a37abbf428f2ec82fbd92840d207f0c03a66252a22b632bd01

SHA512
54623d1b5d6e555fb284d082bdd0e8be6b6101a0fd329c8d5b9eb15055ff9c69ecb66bc41a89ea91460f4d28a0bf6eabad22638ffd618811a43134c21a6cdf01

Download Submit
C:\Program Files (x86)\TotalAV\System.Collections.NonGeneric.dll

Filesize
34KB

MD5
e5149c5a1b021247b8eb3102dd12c37e

SHA1
d3ff95fee15ef11276f04228079df0aa6bb36ce3

SHA256
f7f125366baea508eba4f5c58db2b796bca77f1ddb7ef58d9cbb41f48552817c

SHA512
972926f98a286776faa228bcc0f4348ce10b027a93aba942c70950dbf81d1bb97f82c00e773a24b008429e801eb3d78c4dcd8b7144c40c3585b741cd23cc5eb3

Download Submit
C:\Program Files (x86)\TotalAV\System.Collections.Specialized.dll

Filesize
31KB

MD5
f765dcc06acb0405773428bdf129f8dd

SHA1
a8ab97da616c4a6b029751be3707c8fd5b062ea2

SHA256
dfce971806b56567a816b8364fa0880679dbd81c1024c135eeccff3c9ccfecb6

SHA512
0176e3112796f04ac8865aa62047e50d243917282860d057c1bc4ce8a7c58ca24f1286629358b66dd0a67fe1c0c2aa5319735d1dbe60d8c6e75ac04e1e8df01d

Download Submit
C:\Program Files (x86)\TotalAV\System.Collections.dll

Filesize
287KB

MD5
9b63ce723dfda91347901c0475e65430

SHA1
6074f7e122ee6ad2f236600e70bccf2997e798d2

SHA256
f1bf608e71fd2b229b7f2f43aca213858b5fadc79a388fbce3dd125bf003a205

SHA512
6597c9a7e25b6ba77950fe01db912a1d270d4b34c3245397265c7edd4eacfa0094b499cc167132253b271e5badb6f0376222dfff6446ba84219559f51ea24410

Download Submit
C:\Program Files (x86)\TotalAV\System.ComponentModel.Annotations.dll

Filesize
68KB

MD5
30b1666571a3852105649cba73c55121

SHA1
9fce126661b79cf304ab3990751f45bb11c2b3bc

SHA256
1c9ca64fdf263d84d52fa4b2b1594a400b57a873139439c065625ff8e2a21a5e

SHA512
cd82b3674d85587ea2fe0ab82af0a57bcbec55455ca87ad364164b491d9b8cd94cb1526d14997d5a53592f30c7aa22365a024ff83820fe6f0f3e3a8e4137ee1d

Download Submit
C:\Program Files (x86)\TotalAV\System.ComponentModel.Composition.Registration.dll

Filesize
35KB

MD5
aff4faf177f73d0e257b544538bddcca

SHA1
268bffd8f5da2603dba26733a9611bb5befd0cc5

SHA256
2d9424f2fefcf665694aea12e2cb7ff7fbc7196049af90caa0e43cbd1563f436

SHA512
c70e8144915e39ce020fb47aed98a471178f5639e43cd9075973e520116403af6f6e56bc5ee52646eed879dddc206a6a8faec1a4ae5e39da22c18abcd4e695fd

Download Submit
C:\Program Files (x86)\TotalAV\System.ComponentModel.Composition.dll

Filesize
252KB

MD5
f84d96a9698df9c7e48813376c2fc81f

SHA1
7eb3c012e2c53520dfd2086a8a7915ad919c28a8

SHA256
c3d47555080c369692813fcf34e70b01642e4960d3b8048c448ca939a9e1ab30

SHA512
3d73af67e314729ff3d57070fa0af5e7045847aa912d2173a0b156da590358e6b52154c6b7d32f10d1cba56fa8bcdfa68e69d89e15d1b6f25bba16b102c5b8b9

Download Submit
C:\Program Files (x86)\TotalAV\System.ComponentModel.DataAnnotations.dll

Filesize
16KB

MD5
ac924580d865d2df33df0f6b74652e3e

SHA1
e12e1c03479c1daeaf10b4536db2f3dea3be87a0

SHA256
b9a9a982e1b48977cd6ec751e818bb10f21547eed609c0614a6da3997417928a

SHA512
c41dc2d0cf942dfa748cefd99b5d204a5952a91aad5134024348a8602c21bbe7198e32e1bcb58974f0ac6a467d1d2245ad0744cc70f093d56b02bf9335e80456

Download Submit
C:\Program Files (x86)\TotalAV\System.ComponentModel.EventBasedAsync.dll

Filesize
14KB

MD5
d8de0d9fcda718426d3072f4052c6485

SHA1
fab9768c697a6c4e6f9428f851b33e8203b57b99

SHA256
89a2d921f2c2203e3eb295acee96b3215e6306e30d0ee1a39150daf868b507f2

SHA512
4707755be9fcee8615a3feba2012a098fad609fc838f3a6296d04f60830ca9ca8f6cc82e39f3f80219749707ce819110a86bf752106e1bd7122bc2ead456b8fc

Download Submit
C:\Program Files (x86)\TotalAV\System.ComponentModel.Primitives.dll

Filesize
21KB

MD5
387448bf92f46e5677c8d2d714680326

SHA1
a9c69ec20d71a053f1a4bb420941b3e4c2806a4c

SHA256
6101264a84dcdaaa463ae65876495d7ad10d7f03161b4d1244cb880441ab178e

SHA512
d2185de7191013ab47f843bffd8fb4b6c1a1633e73b09da145bbc74c55fc9e63a241a23d7b4f8957603489fceb7f67537dc2594bbf4061f0dfc3006695919dcf

Download Submit
C:\Program Files (x86)\TotalAV\System.ComponentModel.TypeConverter.dll

Filesize
253KB

MD5
b8283cbf4a540b91b92ee5cd218c2630

SHA1
0c3efa24fa62d4e0aa3835e1cd4d4009b3b292c4

SHA256
f43a2bb016e6876ff787cee39884471b500fa0a5261735e9e16e85542af8cfeb

SHA512
3f3fed446cc85845d6d73fa38ceea14c50b749a8b2339f0a8bc8777db2b643ef9f3b5821594bb68093428e38bac0e14fdfd535d1691823b9d6dcf334016a9731

Download Submit
C:\Program Files (x86)\TotalAV\System.ComponentModel.dll

Filesize
5KB

MD5
0b18c6343b9cac4158936fe51c0ee660

SHA1
404bd6c558e9b8abb3692a3071d2b38c2e50e45c

SHA256
a15a39aa1df6a921085bf47cf85183cbff7b6e94cfc7d1ab478195167782babd

SHA512
6097c234fa0fe44285d15bf3e3d38f7ad1079626c3c73578aca6a0d84c550259556a69a2185dc210046ba0b63086c4c22e035b67ce15a6d81a206bef0e5f75c7

Download Submit
C:\Program Files (x86)\TotalAV\System.Configuration.ConfigurationManager.dll

Filesize
357KB

MD5
5294941977402f5a9f85d3075feb5870

SHA1
84a98acbfe206f02e04035bd2df17cbcb629af20

SHA256
d9629ced6b319b38524a7058e66a0f190452d1a24dc615fd66f8c4317c9ad894

SHA512
4721307125dd61cdcd6a56b490596d2ee0a0f117abf477be6926a0124544d3d5147fc6c10d9ccb33bb41a3676374fd3ecb3b0b4098359715c2dacb59f2cc1f8b

Download Submit
C:\Program Files (x86)\TotalAV\System.Configuration.dll

Filesize
18KB

MD5
b3d9f7e6c869474cac528fb820c2bcd6

SHA1
bc9a6d99e6a9e193665c386392798372202f09ee

SHA256
329ebd13feaa6a484a272ff7da93a00557afa61847799485d9cf101a77a35366

SHA512
9a758f942a49da19433e697787d1cb98e438779c37d8f5791342d19ec004aeb34a13d07aac692e05ccf27060a55864808daee10e1d31303a6a63da8b5683f9fc

Download Submit
C:\Program Files (x86)\TotalAV\System.Console.dll

Filesize
73KB

MD5
c2efc291f336ded197a1957c0478bb8e

SHA1
b088d2f3a130e71438a307276727c9c295c5792c

SHA256
9e5dc9c6ea31e667413ebcfde4ea5ef6e1e1e6296b1698e717924becdc3d7064

SHA512
fd3c75964bb960ae234abef12f14fe0ee0ff342ff9d96396e25be1176e47f90a4bdec994f1f438c404caaabf3497c327363f062e4b875e4b9e80d54e3b64dc87

Download Submit
C:\Program Files (x86)\TotalAV\System.Core.dll

Filesize
23KB

MD5
347aa3e63d9daf15be3f5fde2cd2c971

SHA1
51d76c9d8d94ae8b329080217e91a8ab90033342

SHA256
66bd8ef96f1ca8c3578e3b8e6ee2a7564b79c08c893d0639c9e3d79f29779f3d

SHA512
966b231192e2b04e8e56153c037dcf17c01878bbd5b92b3e5dc141d09025f613b2ccc7bac9a7ac5309d04a6ca3d2593e851a479246381a500cc1d8948e62a7ae

Download Submit
C:\Program Files (x86)\TotalAV\System.Data.Common.dll

Filesize
932KB

MD5
949867e3df037992b6f6df7b91aaabaf

SHA1
104622ae7b3abdd5d79bf7cbeae9001f00403aea

SHA256
cc63f1a6bf5eb643facc49a9741cbbb881ce13ebc1672c25feb5017516d9f12d

SHA512
2f16ef2fbdc62f59b576003b6118d66aa9e8ee471a1140eca2a5893a1f70bfee5f22141147060e49c02e101e17371c99b0a49b0fa5e61904044b998991b21081

Download Submit
C:\Program Files (x86)\TotalAV\System.Data.DataSetExtensions.dll

Filesize
14KB

MD5
cf0fdfd68fd31c3cd54c095b968a3b83

SHA1
7d65f542a217df807f75766c5bbef2137aa2ef60

SHA256
ebf0cb220bec0ebdafb2b3aadd2feaa0b315903b66f438e10022e97cdf40b122

SHA512
55ea61cef71c30302aa9c7b0943ae99b3ffc2c8cdcf4d428a96c646557081568048c5519627c42b2c9f2cf8d59dfbc3844885e56b698162d6e9a81b7d3e5f986

Download Submit
C:\Program Files (x86)\TotalAV\System.Data.Odbc.dll

Filesize
245KB

MD5
17219622e80e5992fd7f44efc3fc0ef2

SHA1
3902c70670f0bbdb6fc58c7dc84cf92d9ea47e31

SHA256
e4ed82f8cff2b194c223b7cae7dd67a54f433fa27e895ec216c57576659ca7cc

SHA512
62defd5445bb88705bb8af9b5ca3e920af0472b075f1f5cc05b564e2010e3d185b54528cf16f5f3b198a5b712cdcb969314915be032ed0040c3424cc3a0cb294

Download Submit
C:\Program Files (x86)\TotalAV\System.Data.OleDb.dll

Filesize
338KB

MD5
696b0771a3e4563dba4f2dfe142f3a61

SHA1
5d110f65b56140d1a4f71f18162bedd02e04ad46

SHA256
2ec6f1fa47ea95e42820119bdea16416dbc99ccf9993e8c572b65e2cf13eb71c

SHA512
953adfd1aa41477f07cdd821d5c9de6afcefad7062a1bfd41dfc5054f37048511b3db2dd17cd21576065287fa44f59c7f3dcb437f426d77c7a28d61a71485a26

Download Submit
C:\Program Files (x86)\TotalAV\System.Data.SQLite.EF6.dll

Filesize
180KB

MD5
4f428be996d234e1e66b4651d5850f8b

SHA1
4444f6b6e5fc3b117abfbc097358932a72986532

SHA256
6d76c1b7aaa70c319d5802505214ec734ecbaed9f8e9776168e25ff0808c4185

SHA512
302ef1ebc733d716150470a37c21fc8037b0ce2404a98d73b94c84f0c015e69a1c3249d887605ce577671c20d6c5011be6e3d5510a774dc46f2e214115fa5491

Download Submit
C:\Program Files (x86)\TotalAV\System.Data.SQLite.dll

Filesize
345KB

MD5
3a3dc6f0ff7b9d8311b62243f45119f1

SHA1
13ad0df5d3914bf4529cbe424275cfdefcf16aec

SHA256
27869ae8706d91d81e29b669e8140abd8b6bcd0c8df18e70fcc7d6ecec9469e6

SHA512
031c7ec34f07499f94cea63b09dc53cb3515a139cc60c0544c76be8fd6f9211f53a7daf927b5d1487abbdf945ac51ecd8e8d82b48a706c6a21173276d6b45c0a

Download Submit
C:\Program Files (x86)\TotalAV\System.Data.SqlClient.dll

Filesize
988KB

MD5
f40298c4e892964b837b3d8b61a5c103

SHA1
e0eafd79653a53eeb3498087a4bcedeef7f11046

SHA256
fa4c1ff23369da57b5629fcac7ab9a9dc1729d57d709c4f8773dd78dcc35c2b2

SHA512
eab8793ed77e0f87a7236e30946275b53d383f291a49582cb795fbd774e042d31dd241ab4fbd8e7cec0ef62197a9c86775d3b76a126c9f85a1a4a8bb43a70bfb

Download Submit
C:\Program Files (x86)\TotalAV\System.Data.dll

Filesize
25KB

MD5
ea3dc441ae295b4f6fdd6aa01fee2411

SHA1
23475b7bf62c9f222f6c2c1c420593ea45f77c9f

SHA256
4c080437275d09e0d0ccbeaaaf6bb6e9098444b47297fab1ccd1a1ca4c85292a

SHA512
11914e4f87c40416509ff6c1eaa91f5eaf57c1b36ad7622b989985389f2d406da2a27e7965998edbca02e635dcc0a6d3e8b2e8f2686d9c7b6775443ffdd2a57f

Download Submit
C:\Program Files (x86)\TotalAV\System.Design.dll

Filesize
9KB

MD5
c5f8f18779df6ba0854b7673cf7d08cf

SHA1
2db5a071cdbbb08966d64f2e5b6aefb48914f5b7

SHA256
94cbe7ce7868e6f134c193017992091ce4d2b3e976272e4f55f74b4d34e31dd6

SHA512
ff0357685c6ed1b6ded84f5fae5db99d6672567c67ea4ccb598094dbfba565e4348fb3274fd3bec350fe81a3ae36bc358a82dd50b3dcd5be5693189e0409f1ea

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.Contracts.dll

Filesize
15KB

MD5
ca01cc510c6eeb820119263487a0f31a

SHA1
a260cbad4557c5ed85b8d9fe44910d2eb27c67b7

SHA256
9c292b4d80503530430658410cf41fcc73ca598510522a985a0af0dfd5553aef

SHA512
9c272c57de1f62f7e9c43714b893f08887e86f6ef6c5f048571ca342dcc097254902f901a6fe4d83485f46d1319a4c0ed89d6973fc68e1387453827cc54d8c3e

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.Debug.dll

Filesize
14KB

MD5
5c4209fc9564a5aedfd35682fbd99ca1

SHA1
27f028d41cf905d0371c71e7e0b09fbf939264d7

SHA256
ff3ce0f75423aae99fe0783ce99ae67508a3ab257ade509a8cdc0770bb97c0fc

SHA512
1f6099afe1d03f0761381d5597120036dae4794789ea60f1cef232cb161d70f73c5614b48205983040b0166e5a05c09447a1c17c893828fe7db5c04974fc98c9

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.DiagnosticSource.dll

Filesize
40KB

MD5
bcfa0edc100106536e6104f183307c63

SHA1
3052823d30795cb08147eff4686bc58325ca4fe4

SHA256
c6befd0c09a36dcaeb688a5ef89e991187167e2153f930bf09e6acbc9c59f897

SHA512
46a16abed798d67071212ce011a9c251c6d715978c715f140679873176d33df4b8daa090a7a9c99a40ac086ca951df1de744d2fc1ee3d4f0d74d495e253cc01a

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.EventLog.dll

Filesize
117KB

MD5
d975f4a3de1da0f9f44e44fefddcef83

SHA1
f2f9d4bc23c7d49832f49b5d080e6758a2bcd0bb

SHA256
3e585a43846e5817c72a48778759232e2e9328af4bc6ad7f04804a11f3918a19

SHA512
819596d1438a7ce211470555f36e254e9752864170aed6535605afe148511527f339b9f900962f98a70219ca71e130e48cd9c743a9c0dc20a8b0e26a602986da

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.FileVersionInfo.dll

Filesize
12KB

MD5
53c1b501125cde723c149a981275466f

SHA1
e08cc61e4dd50ab6c274df4dbfbe5031167be391

SHA256
d53a32399ddc0a04e9b7d48864c5fd0df340747504827d65a863eba3169cb160

SHA512
0ca14eda2fb53a5bc7aea7f57cee07dcfb3db09b13c721dbbe743a83d596ee9e1be458736a62381da9cffa46f2d0da93ffdead1ce6ce7984a5aed38d650bb1af

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.PerformanceCounter.dll

Filesize
112KB

MD5
093e29a3ad69fa2e61eb0909cb300289

SHA1
e6401e509da0247a2c3d56f78fea9b76c2e33404

SHA256
ad428d16cdae6b76e9802b1dbd9d8f16df55d782477410675db1d847e5d3fe95

SHA512
f6bafbffc7fc0e0d1890a061f0e06798706a4cd48d7ac569d875cc31bef1ac2ddf60eb32dea69c9829decd23f5ed11ede24fe50ba5884937907497dd3bc3b056

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.Process.dll

Filesize
115KB

MD5
1e5c97d7b9b2db167fb2e6175bdfd281

SHA1
bedea0137eea277691216b1c7901eb9e43bbb451

SHA256
e935a1a089e4ef56fbba1bf4ba4745790555cd83db8cce1110850211db11bbef

SHA512
a60adcf02c9a5b690c4081c11692382b55082c8caf5cdcca666e6fe0dd4a3a31d6ed4de0ecc129bf8693df1df0c4bfa86ea89f84566181508224aee6bd7cd566

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.StackTrace.dll

Filesize
32KB

MD5
0290c1b9f1a55e5a1692d0e1271e960f

SHA1
0c91a85b97d8144f04271d21022a514766630e74

SHA256
669e9c108229b377ad55e11d5cf9cc6d033446ed197b55d6182ea8b513b86905

SHA512
3c9fa67bb229cd318e030024de4e391643579e2c0413da9e8af30326bcdc5a17094f0966d68bda33725609c02d5d668c0538780a12e72052996ed691d3ce1655

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.TextWriterTraceListener.dll

Filesize
49KB

MD5
d638a282b89c495d9c2b896287a6bfcd

SHA1
e5c92ba20dcb1101db432a5ceb29a3cb51af257d

SHA256
b4dc72c1254a16af4ff47ebea502d03b28d03c72302ceacf5993c05a0bc3ac6e

SHA512
2452a1b4263bc4235c4a2e076cb8c279ded0ed4ed6bacdf8c0d6175cba68414effb2aaa947cf941da1ed42858d209ad33382df3b8136f85e89670fe87b0cc8bf

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.Tools.dll

Filesize
16KB

MD5
630b7d2500dd8107264d2c9253fa2956

SHA1
45fb7c9334f9e1c1a196a860945ad0e631ddbf82

SHA256
3fa65d869a931e705cbe1e2b9b12ae6b15520db0719129311dbe4376fbfb7fa5

SHA512
2a27e56bad0577f681c078e82f99b6daab988b349fdd9e90356f5e0436b7ac0ba54894139befd9eb93d7390a1b2f3df7204599975e59de862817bc649390d063

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.TraceSource.dll

Filesize
105KB

MD5
c88cd34a9ec7d7bfe34133e1cd5a4801

SHA1
3391e707bd482a7caf85ed8a546c1e88d543640c

SHA256
3911650b7663fa60e4f2d4710fded59030bc35834d7c6e70db1d36c12cf71927

SHA512
d21db07f9f0cf2be2d39cef58348f03f5214cb82903d0c96bfa3a8cd7f1eaca04442ad14b5fd1347b9bb80ec9d2462a96553d344124796f31c70d2118daf5934

Download Submit
C:\Program Files (x86)\TotalAV\System.Diagnostics.Tracing.dll

Filesize
15KB

MD5
3a0a716a5f848904872914343df34f16

SHA1
e0970e5720442204acfddb2ea0b24de59b4241da

SHA256
2d4d885ae11d80c2499dc83c4e884a749cb64f95b297ad9ba0b5389f29fb79bc

SHA512
3d854b60438adda193d50529b091b1b4d0441bb5aba48a6402fa2c3a8cb36d455c48326db4634c52df2a902986e36b7da1d06d32732cd488d3b5ef1bf7160739

Download Submit
C:\Program Files (x86)\TotalAV\System.DirectoryServices.AccountManagement.dll

Filesize
259KB

MD5
cbd45c5b94ff14408bc443e7b95181eb

SHA1
6e06d9ee36f29adb10a6b12f1425454a48956f96

SHA256
3492d44d9fb05b07c0c7302b85dab9dffbe522085ded93ff8868ed6bf5e162f6

SHA512
0f9edd0436adfb3ed3b4f4a835751395dc76cd1f220b415d76e99255f40c2ae053c07e3e90b330a46ca7e3161b101a9d6bb92b85efac8782e2a334b4ca9ae2af

Download Submit
C:\Program Files (x86)\TotalAV\System.DirectoryServices.Protocols.dll

Filesize
114KB

MD5
3e30539f7b5718887d8886433cdedf6b

SHA1
5b84bdeb9f807d150ead048bba680fc511693b3e

SHA256
5705a01705fcd05fab4fa91d3fe35338898cf6bda8375dd6e172dc8d84969648

SHA512
74269c9e22705c0fe14b3f6994b63a3f1404d66980ee5721ace10c0a4b301cdf615be8e537a4cf03702a1e03951f10264562aadac0891ff31e477d62fc781657

Download Submit
C:\Program Files (x86)\TotalAV\System.DirectoryServices.dll

Filesize
345KB

MD5
e61418e77cf4b0b77ab3d808efb73548

SHA1
94e6bdea7f1c4317f721b611169d9ccf6c239699

SHA256
d176f4579c03fdf4660353153b20e2063f348b6becb9b073449cc5c1ec5ae745

SHA512
76c02a5efbd26d63e049e5d1cd077de74dbc06eb19d39d997089dbc3c0478e00a13548f1e38121b9e4aaa55ee987bbc27607f8f8042ef7b0b04cadb0caca1d89

Download Submit
C:\Program Files (x86)\TotalAV\System.Drawing.Common.dll

Filesize
409KB

MD5
2ef2f0ce051aa32bb7b6c2a7c2368b2a

SHA1
a52555856df1d36b042480fca79769c8ec9b10cb

SHA256
b676ff6768017fbf330587af4af00f08202dd0fe6d8b42ee91a833a320d81270

SHA512
05b7119233e9441684462227ba6a3ff4f6794dbfa8e4242510c886e08e54ff89cec2bfa78f6fe845fe9b150ae68ce6479aadd3e10ea7959dd04756bd591f5eca

Download Submit
C:\Program Files (x86)\TotalAV\System.Drawing.Design.dll

Filesize
5KB

MD5
16a050bc879bbf76a0d551b33d2a65b0

SHA1
c838d9fd10cfb8a92f0e9a34eb8f391abc100d11

SHA256
04a476dd96439238ed5dc55ed9f20c398a1137d78a2114eeb9c8c9de0e827b64

SHA512
d09b542f398261c18a34ad5591a510522d8dba00d0ac810e0ddc6384acd3938e8921fd00605d7dc5f4dc6fccccf8d2eabab7f52a42d855ab39b2b97d266b67be

Download Submit
C:\Program Files (x86)\TotalAV\System.Drawing.Primitives.dll

Filesize
46KB

MD5
7f9c4333e71b39c53c460ee3b0f91bda

SHA1
3d98ca7ea66103d86c45557a139bb50d46ad503c

SHA256
0ba7867b6531edc491d6c7fac8b2e15645769cc74d05414a41e46b71da9336ca

SHA512
b00ea3eb03e83c1e6b7a3cfa518cc870270a422cdc07b28e4d37870e1fe4b1837e6efa92285f28781de05855ad2c533773ff1c311fa7f9903ac446b70ecfcab6

Download Submit
C:\Program Files (x86)\TotalAV\System.Drawing.dll

Filesize
10KB

MD5
9148b038a5d96921b2c18184720c1fc8

SHA1
436edd5ef5a7f521f779fe84913488337aec0193

SHA256
22f2d62131936595ca34d0606add4b0a8539baece15fd13413f008fb4ee0b0ee

SHA512
b2353594720cbf00baccdd1f5ce0f7440b7bbeadbf1e464f1195ff73422dbd4af4f64eb3e64b35d4b68d71efef1e7970aa7d8a7b837e765fd04bb0f21d1944ca

Download Submit
C:\Program Files (x86)\TotalAV\System.Dynamic.Runtime.dll

Filesize
15KB

MD5
e42b0abbe713da1f9d5ff21883c760cb

SHA1
3370c376fb512dbe39cbed36d13cd11dca826d02

SHA256
02691fbf19e669f9f15fb6c57f8c8fe565952345bd23f8eb79acf3489c7aa6c6

SHA512
8eb130cfec7381f36b408108b3bb9bea27c8c786b3fdd1a0e8ef997616e1f33a9da63b2643f4af95d6dfa3978cd8968035ed0e7b41ac88b2e814150a482431cf

Download Submit
C:\Program Files (x86)\TotalAV\System.Globalization.Calendars.dll

Filesize
15KB

MD5
053d592bb5251b2f15a3391223c9e167

SHA1
db768f758582f9c43c00ac4e66612bad76a4b539

SHA256
973d89ac235160df9128d10f5a5bee2d131ad7debb148f5774c2579d97b3c4e0

SHA512
5ac7ef2bfa825dddeb085a8ae17c936b71240d69d36a8395db856ee436da1b4e751a7750a81e8707a269cbcb7b1b26e57bb24db6daa06db28965c77636400473

Download Submit
C:\Program Files (x86)\TotalAV\System.Globalization.Extensions.dll

Filesize
15KB

MD5
2b51e34e537d25bf22e0a865d37ba277

SHA1
56bfbb6a8f6b065a24876c9a469163c832e8772a

SHA256
bd41ec1b117416b3abce7867c9aa3927f7b52114bbd3a979c6fa60d0fa3f49b1

SHA512
cb553dfab531eb766fe470f753d758acc13baaac77d52f49f052debc2d549c080d608da1b1afda55966c9c864dc187f1a75acafe0dfb8dbdf28e6a112cd28f43

Download Submit
C:\Program Files (x86)\TotalAV\System.Globalization.dll

Filesize
14KB

MD5
4a00c73a2b8f7bd5bd2349bf189306f9

SHA1
f86d3eeb69fe26974f5156cc35e5209300702b18

SHA256
ea40b3d97d8f582e4b1dfb4425adb0f0682e3cbba03e6d27ba6afacfa7408c13

SHA512
84a3f7027e93200324d60b4d854b09a3a374e802d99ffb7fe9ae8cf797c90e155597b5d17f2dd2c64c69096f64bc6ecd25ec502dee170b00ec47f00be24fa8b4

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.Compression.Brotli.dll

Filesize
27KB

MD5
ad0ff61576e77443c96aed460f540d5f

SHA1
f42abb6f6524404b25d6454efe15289f26285482

SHA256
09362f89d15733cb65f3306b3fd280aa95694d1dfccf16b6c31ade1163f36ad0

SHA512
b12726e120daa1d6292a14ae2228952d2ca9b800dd94cb6e9b0d37280980a348bbb680fee04c3aee29c35a342c28df7d877dce2d480b68e1d84fef931cb322ba

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.Compression.FileSystem.dll

Filesize
14KB

MD5
ddbb9f0ce12046992cd06dec451e03a4

SHA1
e0702efc5e7ee7afd7d6dfba92962bece91ee808

SHA256
6b3632355c4ec32e4edc8fd6b6e655d47b8547876660557675153f3e50b54b21

SHA512
28b71a65207359eef8b3294e0396103803e4f27cd589222e5f3889ce17478615391498991a22d3d631695a02c4c863dd3ae0b2bc7e9d4c9747b290dd0afff35e

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.Compression.ZipFile.dll

Filesize
31KB

MD5
6258cea236def9f37ce76d19cb8b045b

SHA1
969302144f452946ee6a9eb70a4a53b7f9866e99

SHA256
146171b2d8ba7c6cfc1327e26e4017b08693af5514263203db60d9c43e13914a

SHA512
cbe8c0e73f567ed250d0db936e325fa1a66576e30ce765f027c2c87f32cacad4c51f5a9bbb4bfc1ea3b3cdeec97ba3dc5b300dd7df084f03aaa0016c9aab5b96

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.Compression.dll

Filesize
89KB

MD5
e839f0aa073273aa6a75889f19ec1623

SHA1
ff171b601e43e5c249331519fefa5bd527ed95fd

SHA256
e273d82c08d82bc194535807a505cb2a6c08c95df8913f8210a407c8738c75d3

SHA512
9a7b22102b81f03b503729beeec7a8d29f0ab22bf37a7dca43b4fc0ffe01c7d0738e14b5589f5f95fb98228266c8597aa8454820f52830aebb443e6ad17c991b

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.FileSystem.AccessControl.dll

Filesize
45KB

MD5
3a7a81d6e9b39b18fb00fa9a958ced06

SHA1
f09026d6d6b2c616ac0bc48a9fe2f3c8cc15f444

SHA256
53de97b178a02fbad05d27658fbbd38146b4938b41075933dddf1b27248cd410

SHA512
9f67c566009cc5276107e752d8b80c6dd2593db3c0a73676d47cba140b32f3ae441d0e3d7f7cb333b3288a1be34b530bbc31fa6c44ed159e1486a70e4d8b7894

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.FileSystem.DriveInfo.dll

Filesize
16KB

MD5
895c7d821f04ae51a07cb5fb0dd4f42b

SHA1
4b24d8f1f9019cd753f490650f95482f3144620f

SHA256
7a65c92649a9ed0944c455a33507f0f7fc177a9f52d10aa9a5adc4c56433bf1f

SHA512
e9df8d55deee4b0b4b31ec9e4b174bda88f7672592f0b943f40513722ed102bf9f590083829414ca63d9596edaf630f76b68b4b8a8016d8144f30b06b165f13e

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.FileSystem.Primitives.dll

Filesize
14KB

MD5
104033f493d5e199b3bfd82180b277f1

SHA1
f0e05b304cb65a377f71a0ae68dbc9172685e05f

SHA256
008d12100f44bd8322a0253bd9791a9df3ac5b3924d704e7db98e3e8749489e5

SHA512
bb8f7d37d005a59bdc47eee727404a5d818f605e5045b8552ee0adb07b87f577aaca6ed61b0eb1141971f051f435ac4101c506c7d55ac4bf35bc67510363a406

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.FileSystem.Watcher.dll

Filesize
27KB

MD5
801a9b0c3b35e89f7ff62ad5923f131d

SHA1
4f499b81efd19cb5f3be001776651126a8d8dcc5

SHA256
e32173739da64884e502d3ecc24de44913ee19ed438b6cb82c8cf7e8ae9e1ac2

SHA512
c7781a432003af0b77b6fc8349062e0ef09f276a7723f78519844ce24557224f4ed2b51498e82d5aeb7a201c1f01fcf1be860259ea333121fdf42f01a0b78fa7

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.FileSystem.dll

Filesize
95KB

MD5
6033fb3a387e6214cb1fbd9b137cbb42

SHA1
25ef3aaa32dec1b5c1d55bede164048642a22981

SHA256
99beba5759b0c7af236fe633cdbe377f736586ae703c2ef29c6735e8d78f9710

SHA512
6eebf4eb5ec2f3421bd1adb2ba5dac45d0a294c5384fefbba8333b3f692d691cd99d996b9ed71f05c0112a2f20e68d6b8da664fe198d9676946fb7921fb8a36b

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.IsolatedStorage.dll

Filesize
30KB

MD5
53160f475a0b060b0129385c1bc813ac

SHA1
e636b9ee8cecd8413a6ff47bc6c8b777e4ed81cc

SHA256
0a66211216f3d68a6efeaf0263f2f24c553e901dd5d9313aba680de28048baf0

SHA512
c7894bad5bf669683dd1a533af8abb4a6b6e4f7e26bf0b09685b863b4fa26d58f45b93f3b245b8abb6a7353e086acf68411c3746e0516bc5169887c2d9227943

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.MemoryMappedFiles.dll

Filesize
28KB

MD5
744fee1c3e2cf893150fc14428642991

SHA1
eda7d8fbeb06452bb80bf8ddfbe8cd85a67e15e3

SHA256
2df35c86f91788c9829f8f75502a5f2c7f014a93d3ff6f36cec510bcac5b8234

SHA512
8a2ae3d9d535d80cfa5b24599a348f5200097eb2f17a6fc9c7d5231936e10630271a6ef8dac6fca932084343e736325e0cb0effaa866556104233f3e2f2cc0f0

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.Packaging.dll

Filesize
106KB

MD5
941e3abc504d50131bc31e6bc58f22c5

SHA1
8fd7b3df32037cad841c22ad85ae86cab7e6a0f7

SHA256
64e1c57c8d441c2b3b98bb662742099165889644da55f281e2cc24888d2be8fa

SHA512
b4680552ec4fd12d9302b549e2460b2f1499217af489ca4efffe67797d5a5c7b223ce688fdc1e19b087dd4b9a88b037db915ca9f7e7567f2010fa1deb7cf4ee3

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.Pipes.AccessControl.dll

Filesize
14KB

MD5
9173e9bed16968efe8f7c4a886049f02

SHA1
5c20f947aed3336349967f609c78738babe28a26

SHA256
ac6e45f9daedafd4c0fc8cf2e9efa3fd9222c74939678140d08288692ebe92e3

SHA512
6fb3912486df8e50da163ff13549de5bdf049e220dbe01d582c7339f6fdc0707704c38d8a5acde1beffdd8310d68c2d39c897b8ddcadc3bd451ce8baea91a232

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.Pipes.dll

Filesize
64KB

MD5
215b7d58dc533a4c300181fefb629be1

SHA1
0cbf9c6647fcfc1f34056873125b1a18e5dcfd53

SHA256
f2cb16dbf131b595ac2daaea6abd5f39609c9b37e772f4f177771788545e3528

SHA512
54cb54b70235298bf71dd9dc4b2c923b00d5ff3742211509f525899b090a0fe491a3b72643567a91f44c8fec28bba96d57d17406fe6ebd64a66d5d43eb10c8a6

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.Ports.dll

Filesize
61KB

MD5
cf8254f4b70ff0ef644554c5322003ef

SHA1
f1db876c3803f8d03eafbd7e56e215bba05d7dc3

SHA256
8b4697b44efbacc69dea47d1b7321fb8ca230157df46ed235a0f40aa60f3294a

SHA512
8b9beba9f022a3773629be717f34b106d784287c699291c00e827d1ac130fb5e2c586abd4711fd41131f9b6bb4a07d476f53fe7a7768acecc7beae5792b676f8

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.UnmanagedMemoryStream.dll

Filesize
14KB

MD5
cd4e2781a48b1ee742aafdd4a3d72a08

SHA1
731afcacf8231c3a8310c4dabea05c596eb17ef4

SHA256
422998cf85d8d8e1b298f444bb2803ed842080b50bbf190fd72426bff9e6ba9b

SHA512
92f0b6cff18debc4f0e87b3234764f3a1ce9da443b0aeac04c878bd9846cc0f1449c713f11ec8de75ee3e4da93ec74e0c054726c8d97f3a723f5b5d89b793302

Download Submit
C:\Program Files (x86)\TotalAV\System.IO.dll

Filesize
14KB

MD5
8ace2d6fd91112ac6dca9914bc4afffb

SHA1
3ff6b44edf62c9164b243e3c585a47ba4b5663f9

SHA256
5bc93b530f357667a2f2b8b13b47e80320d8782f642ebb747137910674125b35

SHA512
b89e8fc4d5ca8628e6e4235a0390ccadeb19e1321379805a4d3e2802d00b19c827fde26c35dcdc65e6d3b04509d71654d9769892fcbb08da3d6e78500c1c2b69

Download Submit
C:\Program Files (x86)\TotalAV\System.Linq.Expressions.dll

Filesize
529KB

MD5
70b144811fe4f21067f9c7b3d20f605c

SHA1
1dd8bc5c194a8efca892b8add2ff777ae79f9745

SHA256
258b767748e2691ff3e82c6b89ce7dbdf3b035891a0e41766cbe91f179bb0eb9

SHA512
8f10ce2e9d8b9e7c3a1d6e840e3d4af4dde8dfe751018f56cf165d5901f66bc2e5aa975dcab5d4f7e407ae6adc74e74966e2ed966961ed34012940229f533a42

Download Submit
C:\Program Files (x86)\TotalAV\System.Linq.Parallel.dll

Filesize
205KB

MD5
91b9077d6aa53899b3a0068063081e36

SHA1
ebee4b820159e69b88a068c2860dd6089d09a112

SHA256
25cc15aef9c67413a2d551c8426c110f73e04845cfef2d27cca6cad5224a4adb

SHA512
b9eaf3d88f06a03c876c429ac337df96626b5c7685fdd7384810a653ec5db29b75d9d4d9b3bc0ceea084377e7940b62232685e9e5b51f0ca3184b1cdb9a20f63

Download Submit
C:\Program Files (x86)\TotalAV\System.Linq.Queryable.dll

Filesize
57KB

MD5
ce101c7e9dc1d626d9ff91afc09046eb

SHA1
c299217787421fd36f1db43e5bbfc361e9ab888d

SHA256
71e59c2e83cbb97ade8ccd4a7fd019b6185b3ed6c257a0757cbd8adef55f240e

SHA512
649b2c8e55564b66be2038552d2c3bdefb3d28c6fc25ee0be53560c14b1639d77f97d798c0707a7621b3d5ab9ea1b898e258b5cbcbf4e1898bc26b692adae974

Download Submit
C:\Program Files (x86)\TotalAV\System.Linq.dll

Filesize
124KB

MD5
dcfc8caf03a43639952445f7c4442ef1

SHA1
a72e39cae0705b714f3b99d1f7864d7c89648045

SHA256
29b2f7958f6c7ce20a658f375af34bf2bdaada624757afd3fe2559e2e9b37aba

SHA512
3c0ef19e4ac2aca96f5fbc312fdff0a1a20f9a3c60c524cf827eae99f8a72fbb5fb5a1479c36a4a3e0c201cb1f60bdc965bdd9f40e0e262b947a9c39b888fd75

Download Submit
C:\Program Files (x86)\TotalAV\System.Management.dll

Filesize
277KB

MD5
285ffb3fe6bc4eccefb054d3df9fc624

SHA1
5edcbd41f0410efcbfb9a73063b34659f83f145c

SHA256
342015b3457ead575893f97ccb882e7cc2af932b582223d30771cce65d5308ab

SHA512
dadc0f7f61521517f55a38c777887be42fef119445c043a6004262258260f170373de5cefe4a809602a5c1839137bf5599e187a92b761852891cc80537bc39e0

Download Submit
C:\Program Files (x86)\TotalAV\System.Memory.dll

Filesize
164KB

MD5
6e439844aab932d1ff439b8c929e3f22

SHA1
a9a3b6f2ab33b0003ece721e02a10acce32ab516

SHA256
dbb7584e06a35b6045eeb156dedb5469ae5056dbb45bd689790355d60ec37eff

SHA512
fd2dded613d2d394eb01c4197fb7fb0a0cb5e5289872f111fabaf3e665aa02c23fa19187a0371d5bc2743826b560e1fbfcf9ecef171ba61c75de2fc12429a49d

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.Http.dll

Filesize
521KB

MD5
8f8b534f8dd6d2cdcd17ec87698746ec

SHA1
d50165971f90818ce86f816c15c31744ee8b18b1

SHA256
7e9cf29860d5887e1a17f071354def3ada4778bb1bf1806133375318058d7e67

SHA512
577545e89c757e9a5221f527dc7f96c15afb14c8050667e115b9eaa4ebe02e19d63f3ce112557b7a1913e2e6ac0a4d43b61533f2c9e5845dcc3a5f54de5d091d

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.HttpListener.dll

Filesize
567KB

MD5
13209cbac19f5c803ad3332c5da0238f

SHA1
3f7451603be3adea6052565276d0e6cadbcad7e9

SHA256
e48e82ea2942a1d81c43485ee482c9d84ad8d766e485578d7907122c4c4ec22f

SHA512
9ad5c922788be6f6e0f2b34a27c0df54e248e022f29344b11ed8c72ce1c2d8f66a8937b0b79a4ad704cf9f28c71bae4331a21a2c086d4ac056c856383f8adf96

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.Mail.dll

Filesize
475KB

MD5
af0cd503056c24b2b3d3b0e035633d14

SHA1
7dd22a1050aa226cdfb287b78e313447cb51228d

SHA256
e9e18d6028b22b4d31ee0190769cbcccede665cce4b1be8420d93e03c82bdd29

SHA512
6f7a99a36c36cbaee77544d1871844810c049351836ea5110db41b72f6df54126b77421054645568db2c810b735ff01df9f119160453d402f311eaa8d3ee12b0

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.NameResolution.dll

Filesize
35KB

MD5
b732780107b427015693069d38817b11

SHA1
6e1ee51b77d74108adf22018ba362dfdc5fdd9cc

SHA256
70ee5550a3c3c9ada5f408ba13b87afc01ade4635bc275df0710015e312df513

SHA512
10ee6adae638170b87650afcc8759b0be747343743b9f3f6a3899cb136f13cab0c118e151e954580d651c87f9349c0f50d15b579b38c74ed9fdd6a30ba8b18fe

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.NetworkInformation.dll

Filesize
89KB

MD5
4b5b4e112e427db047d580e8284c6188

SHA1
d3ff9e666d3899726a6db6f5bdc66596c595be56

SHA256
99d66492ac869d82aa7055bd1f6d6daa063db9241cfb9382765b1eba0ee38927

SHA512
7cd1d7e6fda0056401654970a8423c359698d9e0c1e6e0750e7676b998e04d7edd334ccf8db648f22e43afa9b3950ce96bdb76c26508d6dbd4af9ce51c4090cc

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.Ping.dll

Filesize
87KB

MD5
897b496363f5180dbf97125fc6f0cba6

SHA1
220b3976ca77ac937f76f3639a8c97e6e4ff64c8

SHA256
ec784bfc140fba12eeb1b8f5a70b39e24a91762aab174c7248893a3b6e466c71

SHA512
ff545fed040d1b6d8f105d126ca0d138e4bf272c7df763b4e737f4c11b96ff5b05b133c302426001e4eb411cd46b91801949427b25102d972f5796b9d4f80c59

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.Primitives.dll

Filesize
89KB

MD5
6690c7c1b22e54dd29edb93f716e2ae2

SHA1
92784ad46f4a9810b6e1c433e73110fc39509877

SHA256
6e0a6ae20b1739644a6123d1dc4ed63918eeb64b8058c6b66d9acbd08bfa9663

SHA512
1439435c61c06496fe72be63fb246f48665106b57f0d81f80985062f939494bdec2ca2fd6fd1ea5bd2d5ab156cd0a677865b2f0a4292b13651f1672f453a57ee

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.Requests.dll

Filesize
127KB

MD5
e886c545c1c55e59685ebc0c9c297d81

SHA1
434032be177fddaf02995e22f41d2755a084cfe8

SHA256
5ff7ef1283526ed727a3cc02e07687caddee28afce6e13441f0756ce1280cbdf

SHA512
77a7bee18916875883b04e606207ca6ef5558fd90f4407ef86374278a05247aa198f5e991720e818c93733bdf2fa410e12c13933aeeedcd1f3f683209406aa87

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.Security.dll

Filesize
233KB

MD5
19d3a216bd7a232725f2988680a84911

SHA1
d0c2d5298db79ea8566b8a4574a45d5f75a55c37

SHA256
8e9406714192fc391a99579298017066ec899b71954869a475ff345dff366285

SHA512
53e6646481d71e362985273a47f33a7c7689f288667a4e349d6763d4e2169eb8b8487e737e4e4d92979116c589b1dd7094bc057028d704282c1bb1c13b34243e

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.ServicePoint.dll

Filesize
14KB

MD5
b11cfca2012430a64ef3b6399da33d28

SHA1
835233232866588eaca8a9205db40ee1b579dced

SHA256
22c805e2477e4e7a6e34924ba5201d6305eaaaaed70b62017c45c362f7d9f8f6

SHA512
a17fc736509a186c79e96cb00bb914f56f51cc36d08761d944afd9f1cd51a35b7adb2bf3dfe46d4279eae4bea709faf8e1d00b7c908746ccdf28d325b1f75603

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.Sockets.dll

Filesize
201KB

MD5
aa46a416dd7901c5afbff4f7cf6cd802

SHA1
a3207f79dc4543c5ce2104d9ba193a2b947a3ad2

SHA256
5bd1ecb6641d1fa55cc88071ea455b6df5f8df89df2b1c5497ab65c581dad310

SHA512
0956c1c46b6285a4e6206f5471afa9b845942f353b9ce8328be8c7cbae0b3605c6f8aca389011b62f568e7b59d6bc7be6a14c2234266a1d31727c31066daee11

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.WebClient.dll

Filesize
56KB

MD5
39721fd5f62a5f1c9c0dd8139ab740ab

SHA1
6705bce547f5528abac8c1b2f528d321e1395e11

SHA256
134a691633398fa66c598cec9e1e70685b23f3414878de0e109d7d24e1431644

SHA512
8cef3c30ede35357c479d44821974f8f751359b4c22263d56d5439653c951f7cfd0c6c741bb7a44f38c90430c9f2bd76455f9acf7a5e762e3dd8e7fcfdb5da07

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.WebHeaderCollection.dll

Filesize
25KB

MD5
8fb46a733e9cc705a7e8a20574bd04f9

SHA1
c09491ffff7cfdc9957464289e52088eb5cef540

SHA256
c39b4e8ed6085f4598276241006b336de0a7f1b4656c58ddcf618404afe0e7ea

SHA512
16ebd096e0970c573596d115b9d78a4f493585163a6c8ea1a516dc55d9db60494c86ad7e6891a632cd0d33540d464cb84ea5f3bc5998bf9653c278d430df4aff

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.WebProxy.dll

Filesize
9KB

MD5
3f7ad35c9e024c0d7e97425a047e0b6c

SHA1
ae0efa232c8f53bd478fad1247f897271ca7600c

SHA256
0c254228fda9d6c4869a39040ba95ae9a51265d5a7990083168b07251302ea04

SHA512
de5875b4c5a62b482c4413bb706f7a1ec63c5efac0b049197d2d79d2cea271ebf882d53bc01c3c1c24defc142126c90eee56b6671aa86dacd63b625499d238aa

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.WebSockets.Client.dll

Filesize
30KB

MD5
309109fbe4c44fa5c71af3e9fd266e2a

SHA1
05453b93560911bdbcc6782750faf3d3f1156657

SHA256
4f8384d0a3cefe42ddc09030c281c14f7204ad2b82ce89a1f3efb80f63801f7c

SHA512
8f695b2796c3d3eea56ae4969053857f1368fcd9e7d6f9f436efcf6c56d2cdc0ea7f21264a014ac5277647cfcea63a6b0b2e8acdb551a1345c7c5383d49f760f

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.WebSockets.dll

Filesize
49KB

MD5
0ad34522f168f866d09b43ba0c3869de

SHA1
6e2b3665e1cea39a75cf697d460a0f7214fdbd90

SHA256
343e8f7d9bdbae163147781ee3d18e621d36358e512e1cce5b7733b9edefc3a8

SHA512
a55c73a0f8b232695df97e6d6123c96652fc63490e84368b7de9bf75888fc8d3eba4a4b1b6588322c717a5a9af5e356dee8570b8339d6f464ce03de007beb583

Download Submit
C:\Program Files (x86)\TotalAV\System.Net.dll

Filesize
16KB

MD5
c487a49ad997c54bdd1966260b54b545

SHA1
029e74af432792b4d95817ede916d420bcc20d1b

SHA256
2d76431b8c1836c217eb6fe840289b5bec6ae98f72e80ab657bd487be573c7e5

SHA512
fbd37e62e2f6e49c3d6058a34af817984eca0bdee0920abaf7af2b943748ddd8ead24f3fd16a8ff97d2ec4f6de7167dcf6c8d6919f4b9d7a378b5a6fb7e18f71

Download Submit
C:\Program Files (x86)\TotalAV\System.Numerics.Vectors.dll

Filesize
140KB

MD5
6e03d9590582406ea0566f40a5d3c37e

SHA1
c533c0c100089dc318b7bb51ef419d18b5b6dd02

SHA256
daf899631e7d2b6e5a8676bf4ca454ea3a59feac100a8bb1b207ea23f7628284

SHA512
20163b500d14d10b44394692c98f43ef2036c6f9067d5b8fec00d69aaa45226be32042060daddd3cf2c778c242eff7d49f75c636f626f0d21c9f79f657728f43

Download Submit
C:\Program Files (x86)\TotalAV\System.Numerics.dll

Filesize
14KB

MD5
99134c6ce77dbd04a8b90475d7eccb1d

SHA1
2bc6d296ac0e9ef48bb3b74c000f0e4d1d123db9

SHA256
12eba928f088dec978f00b1347454afd6e417b338e54e4aee56d92bf328cde5b

SHA512
1ee73622dc0194fff68d91054843742364f8fcd1f934a0e742d3c7820c805f4cc519f1cc06d9533b432c13cf74d13ad944b7e40dd5d01b70c4d68fb58f6267ee

Download Submit
C:\Program Files (x86)\TotalAV\System.ObjectModel.dll

Filesize
34KB

MD5
dc462d00352c359a0d975c786193ab82

SHA1
f4a64dc0c845e8f1fa88e789da532b5c7ea93eca

SHA256
c035a4384cdf0c6b7f5c086f0c7c55158f1a216365ea775e6805152440c73513

SHA512
1afc5c23e8a6386ccdf4167d722937b9a29d5975be9d3faf2dac3922024bfab608802f6731902e5ce9ca5edb3a2ba5a38301c97af68eb09aad3bc1546cd95386

Download Submit
C:\Program Files (x86)\TotalAV\System.Printing.dll

Filesize
872KB

MD5
2f6247bf408a36601aeac1d9c61f2650

SHA1
ead05e4ae65a2265867a1ea7f9dae90df1d05199

SHA256
ceaeb79be44b248b44bb9c65cb775f39dd4438f4f19ab2b1d65ddc20870f02b8

SHA512
60b124a3f8ad4797bef1b0431293b593f4d1835db7f12aa3779c29e844d9a8206bd13af659fdaab1e7e16fc6ba37f7f8e9eaee38789f2f5f6a9fec0ab935bc62

Download Submit
C:\Program Files (x86)\TotalAV\System.Private.CoreLib.dll

Filesize
8.3MB

MD5
d7cf959f116b764db8a0d8d556b50925

SHA1
dff30b342248adae4801d17e0310648dba4ea63d

SHA256
9ce4d015b9350831a05fc43ca0230148efac40ad0f3f2e7483c5bf131cc458ce

SHA512
d145561ea7d7312c81d59a56ee4f884fa8fe6ac82b6a2eff76c8ed09021fb16ab73722d800bab9318467798693c926b9a8c05c68e1441fa5c3bae2e1ae60a86c

Download Submit
C:\Program Files (x86)\TotalAV\System.Private.DataContractSerialization.dll

Filesize
737KB

MD5
b42c8007542aac0fef1855253d220b9d

SHA1
415701bd5ca1e6c2b56775513505b302e6226526

SHA256
09b69203bb0daac0c4ac93c2f893d23e4d6094ec66135543509524f5631d3571

SHA512
98ff9f7c795081c32b7d1dd4f8dc5abf040ebd412afca7a977f50e38ec7d7ba3b6be46fc121b202a17fcd618d75ada6f06466a24bb790b203886b6dd3bbc0919

Download Submit
C:\Program Files (x86)\TotalAV\System.Private.ServiceModel.dll

Filesize
2.2MB

MD5
494ed53a8d6211fdd5320ed8b525e1f1

SHA1
d2397e0b1c5ede5bac7a8bb63a5f6d65ed009108

SHA256
83fd67d7d2e8e044a26d6135b95956e9aea8f4d075430cb05bd6bd8a84d3f0ad

SHA512
a13e10fa36580de442d9cab85c16f1f3969becb50a024b8f31c75d6b5953c5a1719771cc7a676df92095ca087b5c4650391043958a0539674c1522477e1d2570

Download Submit
C:\Program Files (x86)\TotalAV\System.Private.Uri.dll

Filesize
225KB

MD5
933b4b3ff0a4ebc4bfd3965dbb14c04b

SHA1
c9d81317e4ecfedba340c4e30a94f5fe3b7e4b15

SHA256
14c68463ab43820e1c3948c47ec18ddaa43d7b92dac676559252e7d4ba820aa2

SHA512
02da3cec351a6c4ad2d45fc3baa1e335c5fdeb3ae36af071e45e410e24c66f23c55a50c4c833cd0d1ab23f35f5b09d56e30a852cd49fe0cb8059fe345c03c7c7

Download Submit
C:\Program Files (x86)\TotalAV\System.Private.Xml.Linq.dll

Filesize
130KB

MD5
08a50ffc3b27f22f7ff624d56a6cea26

SHA1
ba77cba86e6eb375c0f4c1ab5784a96f9e912a49

SHA256
052da987d586b6aacd43052c7fe7bba4a2f5a6a826c0f9b7408b4c55147425d0

SHA512
ce612f7292397ed37eb620c51f1c80d49cd70a92beb90ff0c5feca9ec486b40a274b2d158850e1c64e51ed10e5e27baaf242cad2ff586bd7df5a591100662a6a

Download Submit
C:\Program Files (x86)\TotalAV\System.Private.Xml.dll

Filesize
2.9MB

MD5
77e1c05c3ba6cbc88053296beb5c7c9b

SHA1
578ec73ae90456858975d57b7aea1796917db4eb

SHA256
dbfe6d65aa70e30c0cc6a06b485ae9de48e362ee60d249a52820274fdb260f63

SHA512
34f46753640c6dfd5eafd4a286887d34421449bc09c0c456239dac50cca2668076e993e438b9ad07423e8536f603304425187d67e4cca9565d3d9ec0e021e0af

Download Submit
C:\Program Files (x86)\TotalAV\System.Reflection.Context.dll

Filesize
66KB

MD5
bee24da2f0c8eecba68a7cc8db032064

SHA1
8f372aaf605c12b5d366d5165514db1cf746b8d2

SHA256
b6b05773621a83cca542e4f38e2d2d44c5325e88b75ea43a0eed7df38521f4b9

SHA512
0f6942b2b3d8bb3f104b5f95131142658571364c121173593741e2fbb3ccb602998e0cb6042cf4d2dbc09392d89cfd04889b32d5eec36d94abc4c1a1b152826f

Download Submit
C:\Program Files (x86)\TotalAV\System.Reflection.DispatchProxy.dll

Filesize
24KB

MD5
54fb3aeda26fe053ed3b0e5131d1ff97

SHA1
9e4df1aec361f6c842d4eb942e93618a45452fa9

SHA256
bbfe484ea179575c0815c8303e7ca6b07d3b91f11bda053b01ff2268681150d2

SHA512
139468ecc83c37d30fee8ccc78b53255463b6ee59dc8cee9989b679df2d1fcec3831bb8a660ee816704a70ff9dc8cffd3a8d5a8f9b3cde56ecc767144dcb29e0

Download Submit
C:\Program Files (x86)\TotalAV\System.Reflection.Emit.ILGeneration.dll

Filesize
14KB

MD5
628bd7e0e3efb7172ccd55b66f615aab

SHA1
9a312cd8062ed4f0c3ec21646c2fefc18c6aba3a

SHA256
fea02e9917a29f1caef5387506583ed8d2c9f2d7c01eb5f7ad7fcd0da01a3804

SHA512
de3c370585ee4e66d1d9ccb77d80d12194d9224fdbc782251e087ad68df66a6f2906da9abfff381fb39d590cc42a288ec6d0dd4224064376f6e64624a9a1b04e

Download Submit
C:\Program Files (x86)\TotalAV\System.Reflection.Emit.Lightweight.dll

Filesize
14KB

MD5
447a3f7a38834f4605828b22f7fbac52

SHA1
c724b1dcb513fdf4f8dd91aa1b2967ab05988ee1

SHA256
143b6dd989b9b8b1166a941538d8bebc5404b9af8961791060ce1fe68a01bde5

SHA512
ec276b1ce26dbbd013b1572249d8f803829eedb8e9418e9ae1c5a2e141a350d20f9a34f0125c02c3821fcb4f2d6f18c2621e2312df4d49d45db713182b50291e

Download Submit
C:\Program Files (x86)\TotalAV\System.Reflection.Emit.dll

Filesize
14KB

MD5
17408c5a752130433d3d6af8d2807e5c

SHA1
a9d49188e8410741de610e795d0a64b73f0c2f31

SHA256
cf4013d5dcd32b6c39f964775e98a5513146b30da2317d4636fa4af4e151131a

SHA512
c306f5f86f0ffc7e223a16f3fece29e97453e6bbcf732b09f027599437748c2e3c95f9757a45d2900733cd58261ed0cc8196fe632d7f7bb896583af3f2d7fa98

Download Submit
C:\Program Files (x86)\TotalAV\System.Reflection.Extensions.dll

Filesize
14KB

MD5
e7dc57b5b650fb11b3045b1332228802

SHA1
9c311afa635b0a20e7fde6254b727b5d029bd499

SHA256
2d55789e85194ab4fec5de696b9bdc329505ad37e231ed84e81df7d449bb74cf

SHA512
ba5f2503db4224883370a08d89925210c2d33b7b514f0698e1852e63215b11e09cbfa3522f9d851d29078102eadc5dcb52616b677ebb5d89d5d997f11364e4a4

Download Submit
C:\Program Files (x86)\TotalAV\System.Reflection.Metadata.dll

Filesize
424KB

MD5
6af1e722cc4a9d95182aa2a424f2dac3

SHA1
3643e6962fce9e22432ea7ae1ec2bc487c603c33

SHA256
0f245089855c80a8721cdf9a27bfa3bdb05a0189dc3f02965223a8aedf86f282

SHA512
d0f425e157ee66c610d37f1c1945df4e79ca333ae421fb2e575327e8327944ce8a401a4a6d0107335d2a931e60fcdcb8e17c79c98795ec87f661336651a61de9

Download Submit
C:\Program Files (x86)\TotalAV\System.Reflection.Primitives.dll

Filesize
15KB

MD5
f06e221e71bee1cd85a4bab2204edd8b

SHA1
993e991da4b157737570ef35804a21df698ddfed

SHA256
a40b9c13765d8d472b8efc72e7c3c096c4891d6a401d86bc2ae572d5c935ca86

SHA512
6ac740b1e824a87454c0ea2bf9a705f03cefc083a61378671a7b2fb52c87eb36a113a97a214b762d16f09be048d839b737a558246993daf590075a8b50740f0b

Download Submit
C:\Program Files (x86)\TotalAV\System.Reflection.TypeExtensions.dll

Filesize
27KB

MD5
3e8f4b0637df5aecc3c5f3657670e57b

SHA1
a8cab6969397ef22d62ba58c13af23ce8c735838

SHA256
5fc95a1f86ff697dc5014b63a5a83e1caa14e32c5f8338fda4d44f800ab6300e

SHA512
7214812d6eae65bf3112aa1b37df80688644bed47506435eb81c09ba1ea91a6953b277cdebb3f50ed4bccdc198414c3b1afcc8360d77d260e8899e1425fd2b28

Download Submit
C:\Program Files (x86)\TotalAV\System.Reflection.dll

Filesize
15KB

MD5
f47c4db395043d3067eeaaa9a1363b0f

SHA1
af1680d600a7f297d072f822cd57e393e7cfa293

SHA256
f942b4322db97ef98d5793f6065a749fafbd6ddceedc36293329529e0b0d48c9

SHA512
5f7ef9a1e92906a9028f3c120004211a5b6cf9892040f44cde5abf98545d3cd1d939dd2a0d2fd161e492c1a108f35f51a1bcde19e108e866c87eead590cc4f6a

Download Submit
C:\Program Files (x86)\TotalAV\System.Resources.Extensions.dll

Filesize
44KB

MD5
32c8ed263f97917cad7006a047366338

SHA1
1479c22419fe7665cc4190eca2fdd7b01b19faf6

SHA256
62616f161c44c7ebf81096a1a988a03382390ebc584188ed850a86ae9132da0e

SHA512
959b600000a43dd1448940afae67a31f0922dc1186a1f881914dd11f25b6de46924aa406788ce79bdd2970c5706c6e0a3eb170bfd600f5405d2eb6a7d2aa4e49

Download Submit
C:\Program Files (x86)\TotalAV\System.Resources.Reader.dll

Filesize
14KB

MD5
db9be5a675c27c3372c3a4fe6e9d8ab0

SHA1
3aea5e6da260603a0bc1fd7c5d88d11fab90309b

SHA256
97bbd447452e22a0f6efaa7ae954e12972862d5f145f5ac5e6bd89a724004315

SHA512
49867ce81552d45e8b8cd783ec40f5eee7d5ad41cafb964c518fa4df41ff9ce8330a58fe23e35df89ee13f37822a3bd87172588d6c92d6f22485db833fa4c98b

Download Submit
C:\Program Files (x86)\TotalAV\System.Resources.ResourceManager.dll

Filesize
15KB

MD5
4a6103f73c8d1d09f2cb9e3cdc36e8d3

SHA1
10f1254be423afb56b69e9de283aa580440d5ed6

SHA256
794aeb7db6dc66a2bcc6f4f008fd36fa85b845ee34a17608ae50866e2d8ec475

SHA512
508f0a592b50a2cc95ee2c7a5ee2927dc0eecd1e7366b321ebfca27c428118266e191165ec1c2398e68316f24acc8d7fced69172ea676a5551e28dfd4b0e0402

Download Submit
C:\Program Files (x86)\TotalAV\System.Resources.Writer.dll

Filesize
15KB

MD5
b5182580bed8747fce8e6da01b48a711

SHA1
6bca497bc286bef465b7a213b99d32543960fe1a

SHA256
b8642692a063153c1259ed3bd3da86f29e97a36e79464f89d5e41c75f1d2297a

SHA512
1bb4c94ab69aff6f20449cd3ac2dfbef6ae4645f032180aabd4df87a2a4ec9e2e2b58c61e6c4802af708a2bd88254a271da5a520982b57d3528a9234259b308e

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Caching.dll

Filesize
75KB

MD5
ba1e94ef700f2aa38291e841394f139b

SHA1
422f5514e43624f9d4292898a0d95166dcaf2889

SHA256
53827519463567379b65ac781b0c3088910eb62d4519069a0b138209ab840463

SHA512
1c32be97b2b407ddad30b2f8c7d91518d77b28572e52313f72e4d3239383f12cb94759c23e3fa357eb4d1c7f242a47b67635f9f7d53ddc80a5d7cbeb98a1a23f

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.CompilerServices.Unsafe.dll

Filesize
7KB

MD5
b37ee0006a7af7ea6019953bc6a61b78

SHA1
ea2cb754391e2708065dd4cfcd87188de4015aa5

SHA256
2ca3f57881e415d61a43100a8ea77e69d983f9d1de14971381d240a1e21b3370

SHA512
005bd3670bcb0f848bbdbdf673980a2f086c2844b0f7db72c400487d67cabfd80922d0ba09b93623ad942ea057132146e4869844d7fa2c9086b5b0b4b7c408e1

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.CompilerServices.VisualC.dll

Filesize
6KB

MD5
9a8eaa5b280e82638af452ebd25f78c2

SHA1
984d46c36fc3f65266930fffffc5634eb04ebba8

SHA256
5dab8eee6f0a678e2ac77070dfdc69f6e69710097411b636106b3dd43e636305

SHA512
190e66d9187031a7d059367e99f1b719b411a8bc03798ec06a75459284fdd4f234f28fe87330500ad42caa272f9b50a28b27ab41e6989a31283a1788e452e40f

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Extensions.dll

Filesize
188KB

MD5
4ebe62c159d77fe4f61e33f9770d5934

SHA1
74ceb072d4db9160e8e02bbee0a9540a47dd791f

SHA256
f52450c3184f1657de8110428f92930f0ee4acba19c030573bf72fe2f30b8499

SHA512
13404234a035523ca3867681a5cb926b8df3db3030e49d170db816a4fc4919e13d7f42d288d7b6c791c850bea0f562edcf5aebd6be0f8e779fc3f9e966e43e93

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Handles.dll

Filesize
14KB

MD5
f5d7e2631a4d8005681c499790e78c57

SHA1
66604e689fe487539a95e9967fb9906f28a492c2

SHA256
220235cf56edb06973c7c234b03a242f0dd3aa01032222ef295c798d589c68b8

SHA512
6de423361c8a7a034d7d6878a3415e163a2c1c71abc09bb39076e71a9ff7d0ea4f1c36a342d1d99083ea2e8636ebfe968742428977fb5e4ff9db0a21e33d02ac

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.RuntimeInformation.dll

Filesize
10KB

MD5
c199b752c2fd8153b1f3bb3ae1d0dbdb

SHA1
8be64ddf412ed4ef3988562c0e2a5903febe2ea7

SHA256
8c95905d412d406cbb9ef03536cd6b83a474b1d630187ae0b85d483df6aec38b

SHA512
7116db56f6da057c6b9e5462c3b06331c96b52659de7df7bf09297822ae7f1d9eca4ba76456ec7e5d01e28183a2a80f173ad62e9eb653782a281bc2accc420da

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.WindowsRuntime.dll

Filesize
15KB

MD5
339e490c340e20e9b763cb2e3ce44fff

SHA1
0cd8d1aaaa95a1b1fe942e41177f1988c3245168

SHA256
5cb4242180d7f0e6e5f2148fbfe8e1f5e0e796ea0151648f6990bd2ba3ddc9b9

SHA512
a28e7837cbadf3b9dd0b7efd67d4b18156aaa59f76488c0c8016882701ce73e4e60e0cdea41254ac1c3be3baf00828385969cc97cee9be908e8dc5fdf347fb56

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.InteropServices.dll

Filesize
49KB

MD5
b57f607811243f83f754a6bf8908ea69

SHA1
f1d7286352ae7c3d69aa30ff190a5fde8ffd8b96

SHA256
458fd4466f84acbfa5a84cf9a403ec8ed2dda111fe985523a3d51081a3e63b24

SHA512
cd3b375174940b4e8a13aa7184911789d4d6c67f01f02f7f085c0a27c94309bf7231515784e06bfea21e84c903cf318f42c542c9eb8cbccf3f67f451d47081be

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Intrinsics.dll

Filesize
15KB

MD5
a4e941e6c7db06ce5bf1681ac107c1f4

SHA1
33abf5f6c201adc05f404ba7f50107762a8c2b35

SHA256
6ce5ead1e4819e5ad89096c854b771a4871889bc99d30390622e76d6f76e99db

SHA512
9db864a06c48885a4f21776cfe42d47b20edc5a6d6dbed38407e3c6c3bfade2b9670ce5ef59275d12275c0b9816750520482c4c884c152350276499ff4b44935

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Loader.dll

Filesize
14KB

MD5
0fe7d237ca3d177478dc6ea208452639

SHA1
d675e3c84b15848b9181a5fc2777e8ae09c81ec8

SHA256
488e674e338ee83eceb170e8eed9dcc642107497525a93899a45e7b7361a7212

SHA512
59c8ce0e7b4cc8ffccc613983360d1896ee70354ee3e9a5c26d9842e85e9afae542fe0f44b630376e12f6cc4fa6ca2357107cb68e7b84ff89490678d731c32d3

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Numerics.dll

Filesize
73KB

MD5
197c856f8ff7cab7036fbda26fda048b

SHA1
585e7aecedad5e9832a006a26a8ba05d834ed2a3

SHA256
aadc9d0970fe22d1cb9b8b3356b569398ad035ceb8c766170eaab776f7c03a4d

SHA512
c979c5a758e8e1d18aa897a6924786a592c4293f1cc25adc509251f6ea205c6bd5c28c2e6cb958a51e187d6789ded1936f16691b089309e6ff9a5434d02c50cb

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Formatters.dll

Filesize
278KB

MD5
e593f58dea6a2a5ea87c4a05178e3306

SHA1
a718d75bd070227daf4611c684ed0a4dae60c372

SHA256
cab5210a66f89d054e31a4204467c3f384c1fa2d308dade5344577c7369f9828

SHA512
ac1b4adc0c793b1ca5bfd47d68ee92d77be0c53eade54e25b845846458b376c25b66fc23342e065d019aafc303b388f7bbb7fedfa73645b93ac49477d2331850

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Json.dll

Filesize
15KB

MD5
f0e4bf6c66891eb5255a95d251f23e00

SHA1
f05c447926d29f8a7dfcfdbc9aa22592205d1761

SHA256
03cffd90eb6c909adfb24eb1b017aaa6e752765aa232d154e7668f4f0fcf5b00

SHA512
ae8f4ab4d104c122ad7a29a476237cbb08ee3f7a7119788a7e3589c5b3a714ad5c9a0266f56b6e375aa89bef0acf84b15a2d8771b5a8550c1565d9fd9a8f4dca

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Primitives.dll

Filesize
10KB

MD5
b1ac878b1603bc42deb8f1202f4ce38e

SHA1
9e565041902fee54b889cfed6ea6459e92fdc9c6

SHA256
40055cbf3662422998e9052106562383c634c1c7be21b2e7ea5c10c1a4b74522

SHA512
ad6698ef7818b7f6ac4d34ebf1035819b4d61cb8f3c2fa6b8b12e8fbe4daacfef05e2e383f1b00900c8ee34bf57a5d9c587ef70ed5de9e5b596c53c796edfe61

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.Xml.dll

Filesize
15KB

MD5
da0ce89fbe65aad22491dfcda27b3932

SHA1
1044b5ae24cae2e5024e85ee23c0352b258995bf

SHA256
be6577e9a5c0b5912fff18e6980f091baba819c07489244ff6e71af818f5dba0

SHA512
73805aaa93e103c0ae23462737a40e64653708f5a0265f273da1ba363f0d26e2594420ef0da97919e94a3f0f27fc0e17b540e4594f566597814ad9317e9f9042

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.Serialization.dll

Filesize
16KB

MD5
b932a7eff5de419f286a7325cc0befa6

SHA1
e3aa45ebb2ffec8c1681134f54d0f533d541c899

SHA256
33485af8118d494ca489a89f8f2e21c3759ea0317ea6c8a5fe541338f5c3d1f8

SHA512
6708fa3eec64a927145dd5bd174902f5c612700f0fdf782e577a7a7dcfb07256d3a43098aa9415cf038baac840194fa43ba0865fd451c49520e45efc4f6f64dd

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.WindowsRuntime.UI.Xaml.dll

Filesize
73KB

MD5
d309bd3de14a64e331408b0be88d098a

SHA1
98b40667de331481624b3d964738b012c9f21e00

SHA256
d7ba2132369c971fd9e5aa47be4f378f6030b42bcd73669bd7d09e7a0aec6347

SHA512
b25abb1cd779ec823e71511360dee34b27765480e1982eb1e37ab727c0bb59b97323d5524e76244c8e2e27f8fb6e1893b006ea2c1e25ccd7133a12a0c7a80f0b

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.WindowsRuntime.dll

Filesize
309KB

MD5
56edd7e41e06bea54a9259aaff12168b

SHA1
4f6439904a1ce70d806ad1016a2c6bce72718a62

SHA256
1eab2a5ea074dec1a6ead80d1361a9fd4317e1cd334672c9d877cf49ccfe5730

SHA512
e21f42d166fb5a62b2ea1dcf92eb60b910c5a3ccc2426c2d0d47491805371206ba04032de661277cdc479ea9064fff8a0e61835a69388b976a2724a8a831b339

Download Submit
C:\Program Files (x86)\TotalAV\System.Runtime.dll

Filesize
51KB

MD5
64b6db4e5edc35b1f0f4f8661b1bb5e8

SHA1
816f75651ce029b26284796f1436e229e06da9f3

SHA256
9e1b4b18ea91fee6a83957212e2c33ca1b332d56726e45482e00dc28d82e4444

SHA512
219d8163df984415d580737dc23720f1b2d64b4ebb03ee40a5aef94b50e5b6b2ce206cf307d58dd9690ef021ca9df1cdb35380256bfce637212f4695b57032e3

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.AccessControl.dll

Filesize
77KB

MD5
c868b7b695fd2bee34bc2795827a7b46

SHA1
928c996e6074f4e5e457048a98a7251f76a6d004

SHA256
7ce09376a9b66e23f1566a77a3f6327f08365fe10f887d349754b427a5f48f57

SHA512
410c5d404390743de89a8934fc1d65d3eafde2f4b72e774cc02511859e219b6f2c5cabe6260d067b93f699858bba0e77444de652a72fa263898d2c16522d9227

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Claims.dll

Filesize
38KB

MD5
0e5656d6538cf7f0286836ad02e5c22e

SHA1
da92d7516015fbc7b9e2756b86ef9329ac7acf9a

SHA256
a89235d45ec5c580d55c38be3b77f7fc73213e566d63dbc036d5f6a6e7e7b6de

SHA512
188aeba2cf98c0d03e8a32bd325f02ffad92c259875a9b83513c75dc42a73f84e380282f08a4c1525f8b1a2ea7a3ba7d3fb0a4253a3228dd6bb8bc7a3265cd2b

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Algorithms.dll

Filesize
233KB

MD5
a38502388b46281d03cbc7d0be0df0e4

SHA1
54a114a0339f9a77ff6f948ea0af1b488c455172

SHA256
d7e3cd19c9c38982fdb7d345eec2951b47a12b80491b152580c4016aaf2ebd83

SHA512
a9ac4fcb06a1c75ba8a4e9294c5e858f33eeb161292508fce2cc38366755b3f376637cfd7920955b757d9a13dd2db18c71fc7a9f4719422f2bb5846cb930cdf0

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Cng.dll

Filesize
146KB

MD5
6597bbf8e129be4e2352297bfb245ff6

SHA1
398dcb8a9108c2ae946581f6349c5b6a6549b639

SHA256
643e1cb8fc16d1267926f66a6bd89c899044d84468a250f6fa56c6d92eb2f207

SHA512
f73a919dadf9ef23d5731865a6d007d41d5db9acb73f631317146cbad4953e1e8d0f9a5df0455cec1c0217efbe6edd8888f32a7196b5e73e3165ba24ce023f41

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Csp.dll

Filesize
65KB

MD5
40d546a58e8392bcedf356ddf917b1d6

SHA1
f018a1c76e1c4fa5c7eafbca6f47c1e6eb6fdabc

SHA256
5a9ae1a4c697236fb6a9e46b66e1a14a7b60110a83ee80ea641b5808c5c9ba9f

SHA512
68e77532768a21d39e0dd7083dbb2c1251e3e397d819ee3f95a72da0d22b88cc37021888ad15ae10db82583513497efd889506223056e3716c84d75add141cde

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Encoding.dll

Filesize
30KB

MD5
c44b46d68b9360efccd51360c5efba29

SHA1
7149dcc6ae7c34cc52699cae1cade7dd36d5f9f5

SHA256
4092f04906e3ad585fb8defb60dbbd2e1ea6574ac885948370600d0d4d558748

SHA512
f8c37f51bbb0141ba409d816c79f1807b6235ab658c3f74c0ef2ddfa550504ac66207b84dc62c1fb9c327e4aeaf6a518d6fb6b85c44ce5cf8bdd6d2eb95816d9

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Cryptography.OpenSsl.dll

Filesize
32KB

MD5
37beec6e6ee2e9d4128e855578bc8c22

SHA1
8a6b7fe922f32846ccf353a328a2b61cadc95894

SHA256
497e1c7d7f02b4d534be4084873ba80b051b935212d36aefec83c6cd6a40e2b3

SHA512
79127813b66d282a8f5417cd1d4823d53be8dce711d9017905ca6881376eecd200fd76be5454d89965452dfe8c50c3609ee2a02cd7875508d8f2ef8c3396bf88

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Pkcs.dll

Filesize
271KB

MD5
2751a3e9dcb2d59ec23b3399144e384f

SHA1
d0f4ed9de306f0343fa826ac00d1c63537c7be0d

SHA256
48250c7249b9dfeffc6d87450dc086586d986af22728a7902e91340f747266a9

SHA512
b77cb8de7bf3ad96bd2a5aafe16898ebbe3d66b587e3e15bd5b9c2d941e7f9aa4de0ca6f4ee61b095a0921e51ba12c1253d6c95018f810d00c37e66ce9adf1d9

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Primitives.dll

Filesize
51KB

MD5
99d88e5e28b5bfe0df8c35eefa90c06b

SHA1
879eb9a9e56b7f1df35539a580a6baa82368c17c

SHA256
3b22a67cd325e1f4a4e1b59519a23e0852c0a8d1e05ed0caaf0b378a09403dcf

SHA512
0adec8daa8e7e72539c324bf33efa7cf120daeb23905dac4ff2429528ad3ed561b181eb7e7daf70d6f832bfb335d3bd22839fc3b28277b4b2f6391f81d25c094

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Cryptography.ProtectedData.dll

Filesize
16KB

MD5
5468e9d3b7e8fa1b6dd4f089f5d3b995

SHA1
6ed6314272b6d423d3ebad99beabe6268bdc7588

SHA256
a1768b5b1b181aa32dea75961f6e101ad53d7f955e79ad4527d0f4cb2ee5b16a

SHA512
9d0466e8ede0dfabb5ebd49d2d4f250f653329eadc6b7792a62a5e46568cf3c85252f8ca57ca3f5f4007317fb292e6e04e90adadde1a7b88a1b7febf65c58f87

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Cryptography.X509Certificates.dll

Filesize
176KB

MD5
0618942ca628d87a2f5acdef59d5f63f

SHA1
8d3087cdd271aab64cdbb44db7d9a24ea0fb26a3

SHA256
edaf16ab027878bfc46a236017ec02aa2a5d107458b5f0243742aba82aa06959

SHA512
8618c6f0f8c215112f406cab110e5bef1649a34e1dfb53e4943fd4920b929af1df9510db5dcbd6d23fb4c2e36438f3864ac3e9c206573e288efdf957f6c18640

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Cryptography.Xml.dll

Filesize
148KB

MD5
372e7871a9928b27522252ba7b286a52

SHA1
f8e88da036bff12203ba5e13a138d9645b72dd65

SHA256
8f51e84959e39b24e71e5439fc4daf57b31ab1f09d80e6782a9766668ad77ce4

SHA512
e008de243bec5597eaa50cf120f95c9a28dd5c354cd72693a537e1c0cceb25fa4985c100d7b9fcc022ef3ca7408d6222c004b5be9d7ed2099d37a86242ba2274

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Permissions.dll

Filesize
77KB

MD5
8777398255b941a954d48ecf8b78e2ee

SHA1
8378428d9979aab355c91e768a66cf927a60b51a

SHA256
78835b8707b4cd259036c433412b1686acfdd858e39f003cc7f881bdf213f952

SHA512
c75be5d2b0918eded3b83c6d0de1f9fb6cfc80b9048426e87baf381133a782c7cc2526c3cef1d26c5ce28cb4395519906de558f60ad3363078125cb8e411f75e

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Principal.Windows.dll

Filesize
59KB

MD5
3a25b04b46da74e0af05b71574d0ac97

SHA1
992104a3aa3bbd94a22cb16e9e86fdfd51e686c3

SHA256
fe964cd7d8778f39f72a5cde81e80052770fd9633c9cafc53c5253832386f545

SHA512
21d27296d1de1596f36bf9f810ba00dcf7bd4f4deb5511b7ac6aaf98ff1cd11550c52ae14b93e65e39c591a25491eb5f33e464512831fccc8b3aad8d482f660a

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.Principal.dll

Filesize
14KB

MD5
ce0388e8f0d85d7c601e246e5985966e

SHA1
bfbc0e729b85ca27e4de3f0903022a1716201689

SHA256
3b6b0520402df1a0543118c78c82435b61bf9111b2824fd31e59a3fe67e69e03

SHA512
730ed920fced564e28404d2733b963b29b9210806fcfde0b73accd06cd4225ece06f9dca2d06d2fe9b8f350db85ec30249964d82c49cddd4e8f3e54451403473

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.SecureString.dll

Filesize
14KB

MD5
f5c40794c808da71de1c4e1ab4faf16c

SHA1
fc614bdc2bd9a4cbc91a3bbf92346fc0fea4b499

SHA256
762dd98815885030474f9d327c34f9f35978de4918ad51d0ff167f64947910b0

SHA512
c628480c5c1935b44d03a6532d1881dd8a800fc1f9ae6b53c858cf3b9fb0f945e24f3a65e1b1a0b1a5e1ab1ca9077ef790a912b67f1644c5b01a6d92f88ff222

Download Submit
C:\Program Files (x86)\TotalAV\System.Security.dll

Filesize
17KB

MD5
ca27405a8a1dd64467867dd9e703d039

SHA1
0f6d2a2a6daf160182afa73140321200069fb68b

SHA256
b623c4a5e0d96b3ff3945db3e5bb8d235b3b0c2f6d23b8636bd68bb72fdc9e2a

SHA512
019962fdf434d7bcaadb739ff35b300dd3c125ee9b31f4f60e475c80fc2b02a0b0b9012fbb6da0a0aad9dd5f65be07cddf0c4b965b0d7a8da1c915a77134a9bc

Download Submit
C:\Program Files (x86)\TotalAV\System.ServiceModel.Duplex.dll

Filesize
5KB

MD5
118ee20f1160428ec506f9fe57c80225

SHA1
69649b52167fadf1c94005fa8f6d9ae9f0a84962

SHA256
78ac27f0813479dca9092c1160e699a22d3e4a322448d0efcf68ca1762a37730

SHA512
8efbe1fd607236bc9d9e4ba05cde426e6b49c5fe73267b018a439db7824bf24077fbb2f68b9f1a03386f0e7b2f1f4031c52e95f7ee9d2587b95254ac5fed2648

Download Submit
C:\Program Files (x86)\TotalAV\System.ServiceModel.Http.dll

Filesize
5KB

MD5
3708250f24df059d4814a560aa348a25

SHA1
fd9da7f8cc293513e7add9e7dd62ef6ba9074a03

SHA256
e5ee987c419900517173a5ce5b4215396faa8fbcad7c5d45a7699dfc6fb8f174

SHA512
430567a2603a96a9d68094f93abcc7bb75ec0363b46d13e045c32858b465bcb39471d0967dc800839546d4932e8173a85c02b53809de5e008b127389acad5523

Download Submit
C:\Program Files (x86)\TotalAV\System.ServiceModel.NetTcp.dll

Filesize
5KB

MD5
41cedc634a584887a57ca22be8b29b3f

SHA1
eb1c0c22cd6b447c6814f24f5895a3c52a2be93e

SHA256
093704aded9db781a65a234b7e8fbff649e112599056115ae5120b5e2b194559

SHA512
57f5ef0a95b2e0fcf4cd29be381628b29f4b52b430ad4b573c2241d61124df81cba5dd76e2c4ad16a59c6897025ffba63aea0625f36cab8d1ba971a33bca1066

Download Submit
C:\Program Files (x86)\TotalAV\System.ServiceModel.Primitives.dll

Filesize
11KB

MD5
8757fa6120b249a4dabf41f1e86c1a88

SHA1
090aeb4e0e18393df97a6daf6bb2ea7c4e512349

SHA256
9d10f481254515208b78209309db31a804f55c742a45aa843fde4e7ed3e02341

SHA512
69c515ced32a8539907523e63372fcbeaee1433fcf6a2578f894bf61c474920498951f3e60cf3e7af5a5044edf3b926a20d3cd7062f447e4a41d326a8bb30efc

Download Submit
C:\Program Files (x86)\TotalAV\System.ServiceModel.Security.dll

Filesize
7KB

MD5
99a41bbee6e343283929baf92b1eddac

SHA1
1e174d3b47efabbd683cc6577a8ed6e77d42bfbe

SHA256
dba1d155da566afc2bf4d131f47f6e770374b7f2d5e6679e978cf5ee099bb73b

SHA512
41064b29dbdc320a4b7f53d39dacc8faa864059a6dd114ede610427ac7aa2c73a15e7bf11193d6d026bf3ff0dc237e410001c8c048f5899ca8baf9b570dc99c4

Download Submit
C:\Program Files (x86)\TotalAV\System.ServiceModel.Syndication.dll

Filesize
107KB

MD5
42aa1719a875f869c067ada18f516934

SHA1
4e3724a54926395370bbde2bc9d0363c23dfe9b1

SHA256
48d6d299813cad6fece7bfa7a2674404750be32dfa541cabacb1b9502b7fa11c

SHA512
1c1df8fd476d513ce019e5ffb0a872cf420e0668e547d276b87d3bcc8b997d07958b0301d5bb575e59e2b279c78d45426b11d6387f9158c93cc81f6dbdfd3e32

Download Submit
C:\Program Files (x86)\TotalAV\System.ServiceModel.Web.dll

Filesize
16KB

MD5
52b3c9e708baeac9d218001b93e1cef5

SHA1
4554ff7982595d29c9526029870e596ecd045fbc

SHA256
7f0f6b6db85fcc9739cf3256a0bc20574842f3e7f833b4e64cd45faa7e4e5a45

SHA512
a90734f6ae0ab78805614d9899e1f0137280b4e02a41789c55e8aa8f21fbf2333c35c2298465b84c3b83344917bf63fa7943143959c143f15b7a02880b10ec04

Download Submit
C:\Program Files (x86)\TotalAV\System.ServiceModel.dll

Filesize
10KB

MD5
faabbb1dded66aac765f0e75e816e1a7

SHA1
25641af23c12c660853315a0244f2186e92cd1c3

SHA256
2ddfc838ba2ff3f30118a557f47a9fa8483a36e0f639e016715bda0474008712

SHA512
3a71ce89c17a5cdaa41d761f179eaef8ad62cc3dd74e07a1eff21a64fd4929c9e02c511de046397c02d91449e4ef35edea8da571d4c91d1834ad8d0e5d1e6a5e

Download Submit
C:\Program Files (x86)\TotalAV\System.ServiceProcess.ServiceController.dll

Filesize
60KB

MD5
07f6b753e85bb69e38d866e5fd428aa5

SHA1
074b4652f8bc5389fe56f2d6f3a614ffb27bb704

SHA256
1fb83e4a791c8e25c12a91ecb99646b53e7b61fd26ca8af7b843e85548c9c81c

SHA512
9e6f67180422197acb49cd6a05bfd54ab3153cf9ff4dfb3eed89c7ed0e9e8931a192990cdb5d6e7880fae45257340c80e177dc122083c01cfd1ac9743fe512cf

Download Submit
C:\Program Files (x86)\TotalAV\System.ServiceProcess.dll

Filesize
15KB

MD5
baff65fe62f0297fde0ca86c1a45a52b

SHA1
2707c063ab78c88326276fe72f401c59ce5b4bb2

SHA256
49fa12bee017d82a95f0cdc2267b06588ce8f592774dcfbbcd68cfcadf5b4ab0

SHA512
8a3dd74a52585f284f869d44e964df9327f968986aa6d03fa2b6fa763b87cd9e0979404a89c06441b135154fd72d2dfb73cad58768246ae3bc9ee75ce0c08ad5

Download Submit
C:\Program Files (x86)\TotalAV\System.Text.Encoding.CodePages.dll

Filesize
709KB

MD5
d1f3cbca19f67eb146480b577b931fcd

SHA1
acfc89c89166d1c588ecfc281ded70d5aa439d21

SHA256
6cd6df23521771e17e24dab563dc5816403f87c86e5c0948320aca5cdf18e271

SHA512
3026ff16006257672dde064a330885408229eae6d37cd126c7c6a7ce7b6f63e65a087f0cf3331772a77dbae2f0cb66065369908e462a49fb4d0f19ac87b68495

Download Submit
C:\Program Files (x86)\TotalAV\System.Text.Encoding.Extensions.dll

Filesize
14KB

MD5
97841b84d7abdc787982ef00e8e8cb50

SHA1
0b49222bd54cd700709ebda224df72248c85cf27

SHA256
c2c9f41c1be3596afb8eb4fce6e21867917a14351d2ab01faf9d81395f6c976a

SHA512
0a07c2df770f569702c2a2fb8d26faa0fa62d1b8b83be003433f2f60e2ce366fc8393cf5d1337d136797fc28eec9753e609acf5c5a223ea1b012162153024ddc

Download Submit
C:\Program Files (x86)\TotalAV\System.Text.Encoding.dll

Filesize
15KB

MD5
f6171bd56f8697584d4df2a4b3866ae1

SHA1
62afd05f2f293dafbab3a2aa3c039b057cfab6cc

SHA256
d2e860bf41fba3b7aa9641e2121adef6a797353b31e7d14a581d250436669fa8

SHA512
8e3139a36ebb37a722837148da9d1858082966ae986f57a30a9a118d83022e1cf08521d385f4f0582ade74ee1e18ba63dcd9c9647b5bebb2f32be32672b5df31

Download Submit
C:\Program Files (x86)\TotalAV\System.Text.Encodings.Web.dll

Filesize
91KB

MD5
d77768c5b136738822dc17848759c273

SHA1
74030398f47c2fccc1b7ea397f14b7c5fb9c8f44

SHA256
b3507c7ef158f6c8b53ae24067c0f47cebca9c8c809021952d0e7eb8b13ebd54

SHA512
987ea9241fc320cb246f1b8347ab99248642dafc718a83c5e00dfc17ac9668bae35cf6c26f90b45c9ffa5654ed88f52803f41ed8c75090fe8194abb2b7f07010

Download Submit
C:\Program Files (x86)\TotalAV\System.Text.Json.dll

Filesize
263KB

MD5
48112a26c30f6ab0e3147c19781f9a95

SHA1
f74bdc8fedd5155b6f6b05396d4d71761420104b

SHA256
cac807ba6fac5a4143b0a566af8b74837063c6d5f7d6ff768152e7894bc066b0

SHA512
a151b2356def8e14e30a22b08e604fbf63d45edac819ed972924c2f636768c01a4f75e72d911c2d96515098357c1d54d03600d949c87e90a69fcf6ad314a68b9

Download Submit
C:\Program Files (x86)\TotalAV\System.Text.RegularExpressions.dll

Filesize
146KB

MD5
1a822027278537f978cf44375324f409

SHA1
38db67968997a1dbe8ee62bc57d75e05cff915b5

SHA256
68c3d90e812ba3f85abaf3115b16a836eaff05938665ad08fcec8dcbe4ebb025

SHA512
88196e22869dd5d159befc3d4615e7ea576fc8e85c1c3c50be6a0b9e36d17881d1fd5f371b85d27d5075e1a0c2da3f48bf758e7d8b672a5da33d58223eaafac7

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.AccessControl.dll

Filesize
17KB

MD5
6d46a78535c08c1cc0b2bb1743f2e978

SHA1
2b6dcec3e8f8db4a61ea6c388853220ad5ebb445

SHA256
3dbc176f20cb9dcd3a66c4d45d7b473d7ddf5945fecc5b3a824e511f4296563d

SHA512
3a08b5cf784d9b1e927d68096a8e961744b3d48d845ed757e4c5c786f6e932d124470d8f56c62ba75b74cceae77f4239f0d302d0c0bf9f89bf17298d9e96cc6a

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.Channels.dll

Filesize
100KB

MD5
4681fd45a6a89eb8440962b37bd343f9

SHA1
dfe9f5e674bfba072e4f5b469f55773093457e7f

SHA256
0772931ecddc0f337c8702ddab477e37f72d779a225a4cc147067d23a5542f14

SHA512
fdf2ac6a72d2e8c7a6777a7ab08349877b876694af90af79db344558d2d9c2b86bbd0537cb1ae6ebf3035624428881760d9fc3d852b59644a8d5fb817487c0aa

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.Overlapped.dll

Filesize
15KB

MD5
69302840464fd65d319287c61c6a3cc3

SHA1
3b880344c5e371f3cdfd266686854d94a580ce7a

SHA256
f9c7b710fc12daab8851a6b7dac3a44283269283765a991e7d740b8309c49104

SHA512
827f4921d08137f3f165ccb14a18e2b7c197977009b65ddef6473d8e47859d6d6b914c43ad6e6d2b158c8a31635554f43dfa1f416051739cc0f9303a444a78c7

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Dataflow.dll

Filesize
414KB

MD5
e7d3f3d33047878beefcac595ee8b1c6

SHA1
c2fcfcf09b18aec9b9e4d77f57894720339befed

SHA256
07b35ebd9a0581ab44d458c53f13268e8aacb98763148f90b77f267400c6bbf4

SHA512
8da9059d3937e857682a766d9ae9cfcc9f7ea0638ba30e683226b5582fbcb333381f8f3e7f10c8d7b27944fba2166fc30b80ac72c349e589486c0b12fa10112a

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Extensions.dll

Filesize
15KB

MD5
8755ebd05994248ed598bf950c089d58

SHA1
382e2679a2db822d814742f6a67c1d655823b09b

SHA256
abd6518b314792fac1c281e61ebd9d0ffc654a7b9204cecd3fc5927641c5bbe4

SHA512
69653bfd8687f82384ed24b21a64541be1e1165e1832a817d48b6da0c35b6d2a3559cd669cea4ea1482e707e5e62fd8d0b77707784ed99d7282f1cbea5480267

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.Tasks.Parallel.dll

Filesize
97KB

MD5
6dcbc3f77f425b548c5a9e7b2a47c38e

SHA1
1f094ab1a99ca6a0743771429e8fea52cd60d9f8

SHA256
af07e133114232ef98bb98348916ae7eec8c46ef2a1b12e572d2b728c76bb19f

SHA512
19ec425392790c3f3eba4042e23afe0e019368df0b3206861bcf1a38023358d1ae6a685f99710983042d2fe6ffc6320053f8117ba8a34515c1e9335d7d64298e

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.Tasks.dll

Filesize
16KB

MD5
0dc41a0a77de30d1838cf6f183133089

SHA1
dc0db3350fce11c3e742117816db053e72a61a23

SHA256
8d2942e975aaf6cf8217f65611b4f64b0dfa15e06fad1eb621d368f3e77fd1b4

SHA512
3ff9968ca53c8e011d2c9a8ddb73d1457923961d16665ec72ebbc725c5aa456605727a74af7716b7ec22cebb06346b765ef0722525d6d66f99c6e7c9f84a8c0e

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.Thread.dll

Filesize
17KB

MD5
520073af46143bc7128f8b3a6de0a2b8

SHA1
a9639dcf892633231b65552ef7c748feb9362435

SHA256
926e642b0b6cadfbc3a4cb11bb81454eed8adf50acbaf19385c2ca40decd40d1

SHA512
aa086ba704a3f75a761af0e265271abcdd10fda6d66076c4462bd74eefc3987ecf42230dac6df05a0d56b79b8bf8664163dccc1ce87e05c5f4e5dd886932353d

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.ThreadPool.dll

Filesize
14KB

MD5
fa937c62a0c52445b021bdd6ede175f7

SHA1
b91c8d10f971bfc9e12f846bd1be7cf29ae6c89a

SHA256
3358e61263af81d99e8995441d012a8f75ca8d5d35e8c7c3aa6685c89f52a691

SHA512
9e1fc7726447611182ecddca0f578b657cfe2e9cc8f4685050f3edada8b4b28e619f81fcc343e1be4da4ba98aa8f6a823e3f82bd1ef5c0e6d0010479d7fa8d22

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.Timer.dll

Filesize
14KB

MD5
daf144d20e5066d5c95dccb158c88a97

SHA1
366151dc10a7bb7a789d2eefbafa0df567e515ec

SHA256
e3ccf9d37b3e20427067285f8588e28613ff705310da9eef67fa36e9da6ec8a2

SHA512
87e3f313be23e54f7821ac054cb1cf09ec0f01665d533406477abcca6e5ee50e70e6095d72c3ee405e0ff078f8ad98cf5fd355f2f46d78b01b20c332b199b517

Download Submit
C:\Program Files (x86)\TotalAV\System.Threading.dll

Filesize
71KB

MD5
14407fd6873558448a79d6937dda51da

SHA1
94f506b0d0109c62fd218b904d9366bbe50d8751

SHA256
7bce0d29f5456cd7455afbd97d71089c1802ed423ff9c9299cebef30978f3c62

SHA512
e0c56f4c35a8500f4515b2250cdab445697ab3f15fc59e33c991b962422569a0bd1bfa563b785d705f4554fdb0f8f32b12733321ee8046f65b95d00b326cc642

Download Submit
C:\Program Files (x86)\TotalAV\System.Transactions.Local.dll

Filesize
138KB

MD5
e658b1851e7774c15a7069dd044bbed9

SHA1
53124d5141719c688986d2a5aed0843f5e983b05

SHA256
abe8f895ad18cfd50fa1705f50855ca563a92d8bba6ad649f2bd39aab3930625

SHA512
a67bf210a901b3b17fed576bf9ffae11faf9d66e2c102abb52225b257c392baefc31955bf98dde175308fd727c056e8c7567e71d409404a6c10df0145c14ee52

Download Submit
C:\Program Files (x86)\TotalAV\System.Transactions.dll

Filesize
15KB

MD5
26bc0a5c83fbaa630d58e4c37b30c200

SHA1
bfefb3fe6b366377b20806f24b1bf1d486e03d85

SHA256
b0b1767ee54ff87659839a260f1553d4cadc0ec402b121328c0918757ff5787f

SHA512
5903a91ee5f6308677c3f39afae26ddec90caa1a8b5fbf261097b3530a8733a78ef80bcb2b61ffb372ec740995197bd84be5cd458efce880c066f55d8a6f08b2

Download Submit
C:\Program Files (x86)\TotalAV\System.ValueTuple.dll

Filesize
14KB

MD5
b1c7225340b294d227ed9ac1f6e6415e

SHA1
06f19581321691f11ceb47cf68d1ecf26ac615d1

SHA256
38d2f423a1aa49679bb8ca8dd29efda20573fb43d387373e96dbfe173cfdf7a7

SHA512
a079999aeb6ef1e29915e4fcfd0a86af14cef90b03cf6dbb5508c59b89732cb4cb97d98afcaaf4cb64d24c2b2aaf113aaa8bd30602e3f55df815f314563979d3

Download Submit
C:\Program Files (x86)\TotalAV\System.Web.HttpUtility.dll

Filesize
14KB

MD5
5452b0c5e2a0e6fd12f30e9db446a67a

SHA1
4fd804bc62445073a3493b2d4afce8b39dcf69b8

SHA256
0e78eb3300d85ca6619670c01a7331403fac62b009eb1bb23e1df557602b24bf

SHA512
06553acd0e0055600d1b4a02e357fb5d5dbc58dff5d821b1f128b2f2d02fcdbd4377a3f46b3fff0ebc748b2b96f3fe92d7bf002b8bfc767cb4f5134b48923c3e

Download Submit
C:\Program Files (x86)\TotalAV\System.Web.dll

Filesize
14KB

MD5
ee3c4a983ef4ee5e709458bbfe276823

SHA1
cfcdc2d90c5f6591d404a869120468ebb59ef97d

SHA256
609e02ad9d44a40a448b886acae4b593bd6e8ab34ba308e9da80e377a7401ef2

SHA512
5fd35478021ead442e595ae95a35225e10952c909af461d250e03558d37c2e18fa7082d8fd18f3ff91b7748b6973460e86283115cf92cd8511f9d8db861cda5d

Download Submit
C:\Program Files (x86)\TotalAV\System.Windows.Controls.Ribbon.dll

Filesize
717KB

MD5
359717d50a5029f8dbca072716138250

SHA1
d43be955d0d7dc0fdcc2fc24b5764b5a9eb7eb0e

SHA256
fcb319f1e12b5082950402efc159ccaba132b32135294ae3883dfd0326cb2e9f

SHA512
90b65f57e8b1af5f1cf239a83ecca6f6e3f024ea7b9e75b2b42dd2bb0b36ab93546c43fa5bc1331919e26128b6b0693f178041ab45a63feadf2a95e92d3be507

Download Submit
C:\Program Files (x86)\TotalAV\System.Windows.Extensions.dll

Filesize
45KB

MD5
d22b23b27ea42e5cb673474bdfeb4177

SHA1
fed248f1c6b4f9c726cc82d68b2f44f7d9597142

SHA256
8f5587ce58efdd95d3e07077b56ceb0a34f42613f10458138e4a446aedc7d3a5

SHA512
b06873684c7e30432ecf0981a997c168462039913a097375919da2329bdc16896e9dfb626c1564d6f331339ee46efbb78f36a2039c2f86b9ef751ff89beee0f6

Download Submit
C:\Program Files (x86)\TotalAV\System.Windows.Forms.Design.Editors.dll

Filesize
241KB

MD5
59a01daff776bbfbd979bde411b3f560

SHA1
3c74c9b82065a232e281d90b8f822c9cf81d4cbf

SHA256
75bdb451824e01c715f233f830238ade3e272be34c71bd7a2df7aa1b7efce2e6

SHA512
ccccddea85489c9687b32f66f0a0db638243d739693e7a66fce67b4801053ecd01c8a52eabf00fbcd0018d9f5f0b60da3a5910d26814846675299f8651f90d9a

Download Submit
C:\Program Files (x86)\TotalAV\System.Windows.Forms.Design.dll

Filesize
3.1MB

MD5
9e214e42857781903f5be6b42ac89ddd

SHA1
185c472431ca8c94ea9c49da9edd4a981a2a7cc6

SHA256
5ea9190a7c0b339365d03c0c48866746cf2ad3f0e7640ad54b80db954fd64d96

SHA512
22b545d8429f0317a75662bf3640fbd88d7587d4fa1a3bb0f79778e7d326b25ba23a8ea0213b43a962bf2b7f0a72105891f346f15fcd12c6f8bdb0743f0b9274

Download Submit
C:\Program Files (x86)\TotalAV\System.Windows.Forms.dll

Filesize
6.5MB

MD5
ec5a7dc7bfbcab037901f174b52c7bd5

SHA1
73a89e6046617a3af7ba724f92defb0365761a11

SHA256
a76af35171df472e387dc467956c6b056e19a43c1e0e09f89a1572628c54fedf

SHA512
33548b655ea172de39c216e959f13db8aecea63780b4025b2235e097ecc99f732793548bb03b481203abf28905fc4f23a5dedd73591549c01699b6249a3d5ae3

Download Submit
C:\Program Files (x86)\TotalAV\System.Windows.Input.Manipulations.dll

Filesize
49KB

MD5
21a4ed44f42411c0eabbcb9d557ffe75

SHA1
72d6911b4a9e2c18f47c31bd036694edbe05aa10

SHA256
d030c8145d86fc3e2765c89765ea15cbb157c06c7faea155f26ed39e2e50cdfb

SHA512
e70e97002a9f447147535ffcda5ed9fc1942209e2bb95588551006692cf76b07204d33f906ec219ce2fa67ee574a44c910dd293ac6037260753a692e584f9600

Download Submit
C:\Program Files (x86)\TotalAV\System.Windows.Presentation.dll

Filesize
6KB

MD5
b0026d4bc150bfcfaa635cce3c0274c1

SHA1
554e69420dc20dacaf714627c67be5580d192835

SHA256
1e26e9e1dc838a2daa84ca5aa4102d0fa0e2b2003d0bb4f28265f18725e3b019

SHA512
7bccfa7e72fd89bbe2e020e83a241a1b2967d7c741cb83be95d25486e4a97d8e0097e88cf09fb80b16491ec0ffb55a4a7f793f03c54b684cb0be240acde88eb8

Download Submit
C:\Program Files (x86)\TotalAV\System.Windows.dll

Filesize
14KB

MD5
718ad855af94c8999ed3ef8d6c6bd425

SHA1
12c6ef3b222cbfb39270733519857562fa2d0953

SHA256
2c0db98ff26ed75ff5a0363d71437fd68f2aa32d07fe191ee3d5682d2e067f5a

SHA512
fb5d1f5af77d6c4beacf44dbc9d3168457419465f03c1420916512e57c4718967aa5b58b3ac665c54ab75d8c9fc5ab3a72c0be03d7b7c19d8f273ba3e662c30b

Download Submit
C:\Program Files (x86)\TotalAV\System.Xaml.dll

Filesize
551KB

MD5
0eafae3a741222c0c70c684f95ba0ca4

SHA1
d637d064819f6e9c26c42646f3c20c113ebea664

SHA256
4c00761f3ae97b3925442e25654dba81a033e89a678109c276668202d12878b5

SHA512
9e669c28f9e242d409b167f4e16217ce40b6daced6bfee9b201f9596de748043631d6edf3b743253d36cef43314c006869d3944117b88239e07682bced0a9dcd

Download Submit
C:\Program Files (x86)\TotalAV\System.Xml.Linq.dll

Filesize
15KB

MD5
992c84a8940aa608d19b3d8a7de37250

SHA1
1408d2e802e482b028e0a74893b76f24050b0e35

SHA256
ba4fceca075f4bc010a20506237f939903f4b0dd39fc707cc2ac9678bef88bce

SHA512
673bac1579366398faf5a620e664b72f51d567692a729ea4c5d1a1c93b1e62149c5d2bf31cef9da23a571c95074a438cfa1aafd97693ddc35bcff1d536c342be

Download Submit
C:\Program Files (x86)\TotalAV\System.Xml.ReaderWriter.dll

Filesize
21KB

MD5
b9e09b548bdb184b83a5588f598bc4aa

SHA1
5aad884ec792fc88fd610663aac11adf3fc7de13

SHA256
e5d1bc0eca4b452c6bf1ac792c9296397d8dc072195147cb66413748c12e3318

SHA512
a8b4cc181d15638c5e82c28b51d23631780395ff5945de6ea25547498a7f43fbcf3c12b0877b5bbbb60d08e42aa3f63306396047919bb9f626eca9df7e6234f1

Download Submit
C:\Program Files (x86)\TotalAV\System.Xml.Serialization.dll

Filesize
15KB

MD5
f3e53f561f28a72396d8880b5fd43061

SHA1
e6600eb8b032ed4b45aae94d0b16a92e316079ac

SHA256
fc6423505981d34502ec151c12e462dd87614167a7652f1cdec3964ac41757fe

SHA512
886000f017296a211de5dd020c0ec0529f5fc483231e2391506e56a23961ada65b0f8d05b48e5ba2160ae0ed11c3c3bd014e222cdf903111a24368e3ef04ea0f

Download Submit
C:\Program Files (x86)\TotalAV\System.Xml.XDocument.dll

Filesize
15KB

MD5
0bbaf643f66860420adf5ebb16fad642

SHA1
27221e1ed6c03613792ad6c14b3446902d624b4c

SHA256
a284999ea5a18a713ce7f63565bb8c089d70b261de5b9835825e37b295b510e3

SHA512
c0ab539ba2018ba06aee3050724ab0be2e463b7b63b227d544fa4f415dad624ae3f938872983be28deb31ae81f6e0cd10db71acaa8d1492c0fc90d2aa37a1132

Download Submit
C:\Program Files (x86)\TotalAV\System.Xml.XPath.XDocument.dll

Filesize
16KB

MD5
85df03f8eea82a8997ae5d5e7216f516

SHA1
c7651ce2617239ad1fb2efc0d7afdf586a6e4309

SHA256
8ba41be47a40f344928c92181640b5db841fb325500e3fbf772e3cf4ce78d056

SHA512
62d2d220d9e1ae36c5c88af9740ccce186548deda39089a9c7703b8a4855ef3d24666608d2ba5b8a97a6779ac75d5286c667fa8380a12e49d4c2cc8a026d50d9

Download Submit
C:\Program Files (x86)\TotalAV\System.Xml.XPath.XmlDocument.dll

Filesize
99KB

MD5
f9b0a48e6992380cc8bc1125ee3b7df1

SHA1
4eb18e5115c8be53a61bf8a7092c479917c1ce37

SHA256
5aef6270411213995e83fc1c886c2545ae7f69d3f484f0320a7ca373f66a95b7

SHA512
db762dfe8d4724416dc5924e3d1aa1f7685aa20788a8bb30b8b2135265a03281182adb730bb122364676088bfe6cc2f19deade4bcb53f4943b2e60182a57c88c

Download Submit
C:\Program Files (x86)\TotalAV\System.Xml.XPath.dll

Filesize
14KB

MD5
fd7b5de88e17c734cd46495addd2e9b5

SHA1
6bdfff284a9039ad0baf1c01ed5a1b16465ad9b5

SHA256
fb076cbc2c2998fdf3fb59c1a8a3ee7bbebf9def922466f8f200b93076263ca4

SHA512
2f67c81c64d1d5b99d2c36bbfcff87eec7c22a70c744dba1e67a8040464db883aa0a5ccd268aac15803bbded3a309c4ca7b5d04415c7fcb6e8e3e2d6ab476ba2

Download Submit
C:\Program Files (x86)\TotalAV\System.Xml.XmlDocument.dll

Filesize
15KB

MD5
b4fedbf764780b7dce28da95a420d697

SHA1
4941b0a0e9511694b5d27cda36877b4dad89cdad

SHA256
a5f438c4e21d1739df9595a0a9fb064de2b74fea35755a74633cca5f875d4dda

SHA512
55200562f072f04acd2c9e03fd0b8ce379e329e9e7435d8d0d97864712ea4f774ff1b92bbef30b3856fbdf7ea80323dad4738ce6f36baef642b75ed4914303c2

Download Submit
C:\Program Files (x86)\TotalAV\System.Xml.XmlSerializer.dll

Filesize
17KB

MD5
c89966f292c5e6b479c2b3aad9c8cd86

SHA1
836c1db80dfbfab4453df6d7eb01f82ee7c3d5f4

SHA256
38019b08132f45e928cebdc0312a0aeba3f71572192a682f207e43bb860048e6

SHA512
6ee43e72c97263423c415af8e013595ffa35fdd41c4e992913b69280d86a4af4b28ed3b8996cf873c135aee0c0dd1ce0ccc2ea47be09641307cd91bcc3a35574

Download Submit
C:\Program Files (x86)\TotalAV\System.Xml.dll

Filesize
24KB

MD5
29619d04b8d76177ac3aa6531850d780

SHA1
74663ff0da33fee097e640efe61ea7ac3ef5c0c4

SHA256
ac8617f3ea708d5c8ccd5801030713ea7366a80f99ee0f4bab74212e98ba917b

SHA512
2b7769ba99166d5eaf56142ec495c2f39c5b9bbc56bf115ecb73b82c18b2421fa722c8293666de337d3d28f599e21778a30944e04a5d42f8eb3b8c37056a3469

Download Submit
C:\Program Files (x86)\TotalAV\System.dll

Filesize
53KB

MD5
693e8bd37b77003f5be42ae1bbe8ee16

SHA1
7e8e04c3419e2f73f686b21c8380eb8cd0f560c8

SHA256
f0336b00407efd004cc5f7a8d47ceb16bbb89d1edadc951ef090f5c97e4f3f26

SHA512
03948a81c406d3c800ab1580e78aa698e8aa61f49e1a147a6bfaa3b2bf688f7dc472e2f80cba497acc2dbc866a3291c709373239dd2579c0a94f0aa21ef440f8

Download Submit
C:\Program Files (x86)\TotalAV\SystemToolsWindows.dll

Filesize
269KB

MD5
beff09abb00b97ab6c7b6190a772280d

SHA1
a1f9a9f65d94a701057761e1d21c2c2a266ad93b

SHA256
891d80bfc25e80de19ec819e9a4d3059d40a22a259fd349a6c2f5aa1492bf352

SHA512
235224d4eeb91ae50236ff7f8a43e10ebc6f1ba2437dee6d47937c1511f97c8692ee3a86d83f2532fe6b876a5996a1b53730998c311580a36cb3056086fd7937

Download Submit
C:\Program Files (x86)\TotalAV\TotalAV.exe

Filesize
5.0MB

MD5
cccaf3ebad69beb64c9973de315074ac

SHA1
7bfb588c11d01b58559af45a5560cf9b65633069

SHA256
1228ead05883abee346299ed08de684c7438af548b4a527dffe469777fb00987

SHA512
2697992b45a58845d782e9f31b485bc65130d3bf55e618ea13195e47e6492907a77c46ebe596f9851280b8d7fec6b429329c71d8884796ba18203a349b9a199f

Download Submit
C:\Program Files (x86)\TotalAV\Trinet.Core.IO.Ntfs.dll

Filesize
19KB

MD5
bea773dcb85e63a9bade222269c62367

SHA1
1572e3baa0c7d7335222acd435cab3616dc08c10

SHA256
4f750952c56bc9800cf7436c90ef983dcec12b5d156223522c9c2156d59b12c5

SHA512
a9c592a8675c96df544d20a0d0c004614789e034a2add26515fb4974d8c7caa98c018e92cb6e6df682f0f6e01c01e2d23395313b3564ef34315f0b4dab0ef1a0

Download Submit
C:\Program Files (x86)\TotalAV\UIAutomationClient.dll

Filesize
156KB

MD5
f9115542337c422922173108f35f6a98

SHA1
fee4b41a513c3061f4bb040f26c9af39f0c7de96

SHA256
df0dd3fa1a3463a0e94a44b70bd9fa9f4e4e91ca7a9e0229ac86442614c42268

SHA512
b3d29a436582f86aee4c204fbe814a8d934a45e265e0144ca8e209e269dbf554bae281164cf687bce777547c67e20bc7052210e3335b8e1ba30176da53da53dc

Download Submit
C:\Program Files (x86)\TotalAV\UIAutomationClientSideProviders.dll

Filesize
334KB

MD5
774dbd0432c038e0cd1f12bd9815b406

SHA1
dde22f173c178920b0c680d59ac692ec12170395

SHA256
fe614bc0fc3a928c692aa9a124ad23df2e8340589812128dadd175a5a7aa16ee

SHA512
f14f72318203e126ff0e1d97e6d5d27e37dbaf1961246cb5022032fd80e44cce1b4c7bb015291d6e9ac614c4defb3a379d9b1d71c359b9a158e977040a235fd8

Download Submit
C:\Program Files (x86)\TotalAV\UIAutomationProvider.dll

Filesize
32KB

MD5
c38441a8d1c6af274c9dcaa36371ca37

SHA1
67d327632db75839da87a85859452943e8fdc83c

SHA256
1f1cd0d5ecd1b5cba7f0e13c47201368f1e2670a274f51ab3a6f6352b5472988

SHA512
c280c3d75d1d083337465a60c6ae1a1833039b925eac5066ffe423706cddbcf3dd66e61aad782829edcf59d160df963d5e5977726f12a4b64d7845ef1a532b07

Download Submit
C:\Program Files (x86)\TotalAV\UIAutomationTypes.dll

Filesize
196KB

MD5
ac463388a5bd074e0c5f78faedae7a3f

SHA1
aa76fbb442eaa382551166d24ca7c484b9815235

SHA256
b6b78e5d676aafef787cd80e53d346e00d32d4c4b5f538b2bb4bf73aecd4fb44

SHA512
91703a92529ef366de0d13a0621fa0a6ef96d19144d33156b79472e0e28fbb79c00603e245daaabf73848190f04c3b13d4e1dbdb316c7037633c64f714aa80b5

Download Submit
C:\Program Files (x86)\TotalAV\UiPath.CoreIpc.dll

Filesize
86KB

MD5
5478941a84114d61b7e0d58fd1a9ea18

SHA1
3f33fc1d6bb6b3db0cd6a94db659b72c93c252af

SHA256
2b825223319529860a85edb1267dde625f11719beb70b64a3f4794811ef74dde

SHA512
16f81df471e8c52e88d19010a0c3e26235b25cd79b59337fc52f145189ddeea7c11c21711d66e4345b793172920e7110806156e7a4ebf4459842e8bdb3391f63

Download Submit
C:\Program Files (x86)\TotalAV\Utilizr.Native.Win.dll

Filesize
100KB

MD5
ade3eb76f24c6c0296452433d35ed54a

SHA1
6bd0976acbebc0dde8d21c118b687991a2e1dcfc

SHA256
6eaf5cca444970d80abc62e95dc2deec1bcc4d6945e8d1b463c0ba40d50d43a7

SHA512
7c92157e5fa82215d4f259b3db953ddfe7850dd16ad263265d0ca5f31a64f5532b6786157a7b7643c8e7033f0f4630b7c13de233ec7d1ed4675ebf402b59d964

Download Submit
C:\Program Files (x86)\TotalAV\Utilizr.NotifyIcon.dll

Filesize
41KB

MD5
1e3feed90d5602cd617ab521ac90212f

SHA1
45f96effea4fee95c2ffc733724e42a988d70ede

SHA256
671bd4aad1a91b134c2fd4e1c4a48a82d667d936a49a60b4c41de2552d9fa868

SHA512
1b792747d6b8086d25828b22a329367bc59172b23297daa235436e0591fde5cad3738169f6a3c8eecdde18d88c2eb00ea2965b631bad2dd09c01c3a5247f0685

Download Submit
C:\Program Files (x86)\TotalAV\Utilizr.OpenVPN.dll

Filesize
33KB

MD5
3bba1a6b2a0a573013004def7d072f85

SHA1
15899568a637f3ec4df7f7bd1b23b9edf02aaa9a

SHA256
81322aeeef6a98186dceb13ea714194feff82bc2d33b5c42409d45f912fe1a11

SHA512
53205b4fb7d54d0aab67141d6209b6e8f9cf2974cddd7ca0f5f6eb95184760d89af6b628652ee49483f3ba7db59e6aa67294cf483af91a7ec74c2609e2053a49

Download Submit
C:\Program Files (x86)\TotalAV\Utilizr.Ras.dll

Filesize
121KB

MD5
bda74b0b910ef7f8ca46d50ecbcf69a5

SHA1
467cde529a82b6a5e7f52049eb3b6326cf0f195c

SHA256
80927555d953ce14fb8b22ade23ee4b534b9e6b63a85939a3f41ef6553de7e6f

SHA512
f8f537ce90b16294e0577127016ddfda1c3d232ebf0a84c1e7c821793cbd47550f26027f9e5715667f572e00c1a683c7f6570579c2e9289deaf37da1ad9faaa8

Download Submit
C:\Program Files (x86)\TotalAV\Utilizr.VPN.RasSharp.NetCore.dll

Filesize
15KB

MD5
2958f26b0902352fc73b3816efad4e4a

SHA1
38b9d9a075dc9fd24c9b18baf2068f3f67daead4

SHA256
5b9a3b0d0348b33271caaac006b2205d0128a246d74086d230501e53ec907732

SHA512
f993ad41614986e72310e10b414c3e232c4bc6e3f55ff1d15d4df731224063dbcf55ead14d57724ca39f75b9df60e34d4de3211ccfbb5d7d9895faab51364bac

Download Submit
C:\Program Files (x86)\TotalAV\Utilizr.VPN.dll

Filesize
51KB

MD5
cf81d3cae034b4dad84060ef063e5765

SHA1
86e72fc9699b7674d503fa6268eae4a65e821e45

SHA256
a1cdc1133f8003c020ab7e2d9393a76eb11d3f9bb3e11f7fd55aef39d0f4800a

SHA512
2841ab2b445b180097112ebab21dc8554284c360d42d8c534e813bd2aa8e1d72a1815a5325d47558873489e444260870d811ad277477b111fff2e1d35246d5c2

Download Submit
C:\Program Files (x86)\TotalAV\Utilizr.dll

Filesize
415KB

MD5
34405f7bc238783edff4f7d27d5db5c0

SHA1
9054362111e4fe721bbd41fa0e58c871d2edb2a9

SHA256
1caebda591a0931781de7f1295a931f1ea1c7c99bfc27d1eaa9e9e7c385bffe4

SHA512
82eb90e8492cae875dfcab66acb3c95fe1ec67a627e9585c6d1fba0bdfb5abe0936a5eb2cd132be3ddd49e5e5490141271c35436040c882bccbef7f4c06af350

Download Submit
C:\Program Files (x86)\TotalAV\Utilzr.WPF.dll

Filesize
391KB

MD5
263efe529fce04baa4860e5114aa847d

SHA1
132451c90e386912941b95d74f709679acfc4a74

SHA256
69465cb04f9d591f2fbeac213b9e4c2ca61b3f17f2e537528ec48b1205ef591b

SHA512
a7c83396cf84f0ca0bd7e1fab10a57b998016ffa73af7466ecc10b13ecc711473c0567125217b99f74de311296b54d4f841a248ab6571fa835e8e7926cd99892

Download Submit
C:\Program Files (x86)\TotalAV\Webshield.Client.dll

Filesize
34KB

MD5
61de4c9a5119a54f7c114817b2cc362a

SHA1
3f3b0776526746bad4775482ad17c20821f99ce1

SHA256
8b29bd93b6e919f7098f0eacdc66d72ed25b3e9472e3c61a17ae5cb43419b8c6

SHA512
a6b6bfc70a1cb7fd810dbf4b320eff94beefe2a8f1846e7acc709ed92cbe9d6b5b750782ef189608a2e44011cbd5924fc34a088fbefab17fe8c1dab61b00be6b

Download Submit
C:\Program Files (x86)\TotalAV\WindowsBase.dll

Filesize
1022KB

MD5
d1ba0f8dcdb06bbdb31b92f21557aa92

SHA1
41d096383c3334429ecf27309c496142c09b59bd

SHA256
8f6d8283bbc65f2e5d101b6465a80b130060e27ed304301aefac5e370b4ee74c

SHA512
811b671d4d7271e682d5f94a0e1605784866f27545abe9dbe6fe10bc2a8a80240b15dbc9949f3bcba056fabca402707c732f32488f60d11029863073a350331c

Download Submit
C:\Program Files (x86)\TotalAV\WindowsFormsIntegration.dll

Filesize
84KB

MD5
0a90d6f7745945ac8b4ab943117a2997

SHA1
3bfc301f7c1fe06d24ae75792985ce0ff96d0b5a

SHA256
1bc138863ad0bd5ad76cbe133e6091e774c875e02cf070653eaf10dde099c299

SHA512
63825e8a0a5f085b9b513d14e8e3103921f2cf3a0250cea3bfcb03bc2e562543c89cb5ea92bb4bf12cf0b885dbf5248203ea59500bc0ef55788f2bae1498e346

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-console-l1-1-0.dll

Filesize
18KB

MD5
aabbb38c4110cc0bf7203a567734a7e7

SHA1
5df8d0cdd3e1977ffacca08faf8b1c92c13c6d48

SHA256
24b07028c1e38b9ca2f197750654a0dfb7d33c2e52c9dd67100609499e8028db

SHA512
c66c98d2669d7a180510c57bab707d1e224c12ab7e2b08994eb5fd5be2f3dee3dbdb934bcb9db168845e4d726114bce317045027215419d3f13dcfa0f143d713

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-datetime-l1-1-0.dll

Filesize
17KB

MD5
8894176af3ea65a09ae5cf4c0e6ff50f

SHA1
46858ea9029d7fc57318d27ca14e011327502910

SHA256
c64b7c6400e9bacc1a4f1baed6374bfbce9a3f8cf20c2d03f81ef18262f89c60

SHA512
64b31f9b180c2e4e692643d0ccd08c3499cae87211da6b2b737f67b5719f018ebcacc2476d487a0aeb91fea1666e6dbbf4ca7b08bb4ab5a031655bf9e02cea9a

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-debug-l1-1-0.dll

Filesize
17KB

MD5
879920c7fa905036856bcb10875121d9

SHA1
a82787ea553eefa0e7c3bb3aedb2f2c60e39459a

SHA256
7e4cba620b87189278b5631536cdad9bfda6e12abd8e4eb647cb85369a204fe8

SHA512
06650248ddbc68529ef51c8b3bc3185a22cf1685c5fa9904aee766a24e12d8a2a359b1efd7f49cc2f91471015e7c1516c71ba9d6961850553d424fa400b7ea91

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-errorhandling-l1-1-0.dll

Filesize
17KB

MD5
d91bf81cf5178d47d1a588b0df98eb24

SHA1
75f9f2da06aa2735906b1c572dd556a3c30e7717

SHA256
f8e3b45fd3e22866006f16a9e73e28b5e357f31f3c275b517692a5f16918b492

SHA512
93d1b0d226e94235f1b32d42f6c1b95fadfaf103b8c1782423d2c5a4836102084fb53f871e3c434b85f0288e47f44345138de54ea5f982ca3e8bbf2d2bea0706

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l1-1-0.dll

Filesize
21KB

MD5
eefe86b5a3ab256beed8621a05210df2

SHA1
90c1623a85c519adbc5ef67b63354f881507b8a7

SHA256
1d1c11fc1ad1febf9308225c4ccf0431606a4ab08680ba04494d276cb310bf15

SHA512
c326a2ca190db24e8e96c43d1df58a4859a32eb64b0363f9778a8902f1ac0307dca585be04f831a66bc32df54499681ad952ce654d607f5fdb93e9b4504d653f

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l1-2-0.dll

Filesize
17KB

MD5
79ee4a2fcbe24e9a65106de834ccda4a

SHA1
fd1ba674371af7116ea06ad42886185f98ba137b

SHA256
9f7bda59faafc8a455f98397a63a7f7d114efc4e8a41808c791256ebf33c7613

SHA512
6ef7857d856a1d23333669184a231ad402dc62c8f457a6305fe53ed5e792176ca6f9e561375a707da0d7dd27e6ea95f8c4355c5dc217e847e807000b310aa05c

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-file-l2-1-0.dll

Filesize
17KB

MD5
3f224766fe9b090333fdb43d5a22f9ea

SHA1
548d1bb707ae7a3dfccc0c2d99908561a305f57b

SHA256
ae5e73416eb64bc18249ace99f6847024eceea7ce9c343696c84196460f3a357

SHA512
c12ea6758071b332368d7ef0857479d2b43a4b27ceeab86cbb542bd6f1515f605ea526dfa3480717f8f452989c25d0ee92bf3335550b15ecec79e9b25e66a2ca

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-handle-l1-1-0.dll

Filesize
17KB

MD5
18fd51821d0a6f3e94e3fa71db6de3af

SHA1
7d9700e98ef2d93fdbf8f27592678194b740f4e0

SHA256
dba84e704ffe5fcd42548856258109dc77c6a46fd0b784119a3548ec47e5644b

SHA512
4009b4d50e3cb17197009ac7e41a2351de980b2c5b79c0b440c7fe4c1c3c4e18f1089c6f43216eaa262062c395423f3ad92ca494f664636ff7592c540c5ef89d

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-heap-l1-1-0.dll

Filesize
17KB

MD5
ff8026dab5d3dabca8f72b6fa7d258fa

SHA1
075c8719e226a34d7b883fd62b2d7f8823d70f1a

SHA256
535e9d20f00a2f1a62f843a4a26cfb763138d5dfe358b0126d33996fba9ca4d1

SHA512
9c56ff11d5843ba09cd29e3bc6c6b9396926c6a588194193ba220cfa784b770ab6756076f16f18cfea75b51a8184a1063ef47f63804839530382f8d39d5cf006

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-interlocked-l1-1-0.dll

Filesize
18KB

MD5
cfe87d58f973daeda4ee7d2cf4ae521d

SHA1
fd0aa97b7cb6e50c6d5d2bf2d21d757040b5204a

SHA256
4997fda5d0e90b8a0ab7da314cb56f25d1450b366701c45c294d8dd3254de483

SHA512
40eb68deb940bbe1b835954183eea711994c434de0abbdea0b1a51db6233a12e07827ad4a8639ae0baf46dd26c168a775ffe606c82cbe47bae655c7f28ab730b

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-libraryloader-l1-1-0.dll

Filesize
18KB

MD5
0c48220a4485f36feed84ef5dd0a5e9c

SHA1
1e7d4038c2765cffa6d4255737a2a8aa86b5551c

SHA256
2dd4ebaa12cbba142b5d61a0ebf84a14d0d1bb8826ba42b63e303fe6721408df

SHA512
e09951785b09f535340e1e6c256df1919485b4dad302b30d90126411cc49a13807b580fa2fcd0d6f7b64aac4f5b5ea3e250b66035a0e2f664d865408c9b43d48

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-localization-l1-2-0.dll

Filesize
20KB

MD5
23bd405a6cfd1e38c74c5150eec28d0a

SHA1
1d3be98e7dfe565e297e837a7085731ecd368c7b

SHA256
a7fa48de6c06666b80184afee7e544c258e0fb11399ab3fe47d4e74667779f41

SHA512
c52d487727a34fbb601b01031300a80eca7c4a08af87567da32cb5b60f7a41eb2cae06697cd11095322f2fc8307219111ee02b60045904b5c9b1f37e48a06a21

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-memory-l1-1-0.dll

Filesize
18KB

MD5
3940167ffb4383992e73f9a10e4b8b1e

SHA1
53541c824003b0f90b236eda83b06bec5e1acbf5

SHA256
ec573431338371504b7b9e57b2d91382b856aabf25d2b4ad96486efb794c198e

SHA512
9732acaa4db773f4f99f423d9feaebb35c197bbd468922348e0ad086f7131d83f6d9714dc7d375183e7cb8920cfe37f3da19b0041a9063cc60abe183375b1929

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-namedpipe-l1-1-0.dll

Filesize
17KB

MD5
990ac84ae2d83eeb532a28fe29602827

SHA1
0916f85cc6cc1f01dc08bdf71517a1dc1b8eaf78

SHA256
dbd788b1c5694d65fa6f6e2202bfabb30adf77eb1973ceb9a737efb16e9edae2

SHA512
f0e4705a6890b4f81b7d46f66ca6b8ee82f647e163bce9ecad11d0bbd69caf4ff3c4f15e0d3f829c048b6849b99a7641861e6caf319904d4d61a6084f10da353

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-processenvironment-l1-1-0.dll

Filesize
18KB

MD5
0c700b07c3497df4863c3f2fe37cd526

SHA1
f835118244d02304de9eb3a355420ba9d0bd9c13

SHA256
9f1f26794fd664e0a8b6fbd53bfca33dcf7b0dc37faf3eb7782bc38dff62cd8c

SHA512
8042dbd9e80e33e41993887b0289e143e967544389500ada9296b89bda37bb26918e4f370f8a1bdab8faacc4e0a6980794d6a3b5320e170ad4ef751384c9f0a8

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-processthreads-l1-1-0.dll

Filesize
19KB

MD5
1dda9cb13449ce2c6bb670598fc09dc8

SHA1
0a91fe11b9a8321ca369f665a623270e5ac23176

SHA256
4f187f1b4b14763360c325df6b04d3ec3cc6d2cecc9b796bc52a6c7196b0b2cc

SHA512
4e106c8a52033352c91b65cf65ec459de764c125136333a2f4ba026efdde65f3f71b1f6f11e4c580150ac8a9779825ba5e2af0e14df999a198cfe244e522c28d

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-processthreads-l1-1-1.dll

Filesize
18KB

MD5
95c5b49af7f2c7d3cd0bc14b1e9efacb

SHA1
c400205c81140e60dffa8811c1906ce87c58971e

SHA256
ff9b51aff7fbec8d7fe5cc478b12492a59b38b068dc2b518324173bb3179a0e1

SHA512
f320937b90068877c46d30a15440dc9ace652c3319f5d75e0c8bb83f37e78be0efb7767b2bd713be6d38943c8db3d3d4c3da44849271605324e599e1242309c3

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-profile-l1-1-0.dll

Filesize
17KB

MD5
cedefd460bc1e36ae111668f3b658052

SHA1
9bd529fe189e0b214b9e0e51717bdf62f1da44ea

SHA256
f941c232964d01e4680e54ab04955ec6264058011b03889fe29db86509511eba

SHA512
2c845642b054bc12c2911bfe2b850f06fecafef022180c22f6ffd670f821e84fcad041c4d81ddadb781ddb36cb3e98dfe4eb75ec02b88306ef1d410cbb021454

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-rtlsupport-l1-1-0.dll

Filesize
17KB

MD5
65fc0b6c2ceff31336983e33b84a9313

SHA1
980de034cc3a36021fd8bafff3846b0731b7068e

SHA256
966a38ed7034f8d355e1e8772dfc92f23fb3c8a669780ed4ac3b075625d09744

SHA512
f4ebc7a6d12ae6afa5b96c06413a3438e1678b276b1517da07d33912818fc863b4d35cb46280f12cf90e37bc93e3ab5e44ea6f75767a314c59222b7d397e5b6a

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-string-l1-1-0.dll

Filesize
17KB

MD5
e7a266dd3a2a1e03d8716f92bede582d

SHA1
d4b97ce87c96de1f39fea97cca3992d292b2c14e

SHA256
339966ae75675a03f628c4ddd5d3218abb36cbcf6ddce83b88c07336d732b8ae

SHA512
31168663fd71b901b1b9152ff288d4e1567003e5fcd1f1c9dfe36d26d2eb16b0932ec8cd34833dab25531f768a01de45c2483f92d4e79f92a89389c02bc05156

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-synch-l1-1-0.dll

Filesize
19KB

MD5
c1dcdb0fabc8ae671a7c7a94f42fb79a

SHA1
99355912d7a7d622753b2a855cae4f5a4e50146f

SHA256
cc76a4e82e0e0cd08df3bb8f5ad57142305e0f666cc32599d76e363d0b43efcb

SHA512
6d92e7520aeebfe60aab43d6616b76a2dd385edcaa217db60003a0c0cbcb0e367063d240e38a19d0b8bee2f2e7d4b982c4f08c8e9ccf34c7f670cb49f6561fff

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-synch-l1-2-0.dll

Filesize
18KB

MD5
6e704280d632c2f8f2cadefcae25ad85

SHA1
699c5a1c553d64d7ff3cf4fe57da72bb151caede

SHA256
758a2f9ef6908b51745db50d89610fe1de921d93b2dbea919bfdba813d5d8893

SHA512
ade85a6cd05128536996705fd60c73f04bab808dafb5d8a93c45b2ee6237b6b4ddb087f1a009a9d289c868c98e61be49259157f5161feccf9f572fd306b460e6

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-sysinfo-l1-1-0.dll

Filesize
18KB

MD5
887995a73bc7dde7b764afabce57efe7

SHA1
363fd4e7ad4a57224e8410154697df5e8629f526

SHA256
f94210b39cdc812beb7342a47e68673ea2116d0ad9266fcf8d7cedaa9561fc38

SHA512
d088eb1c6958774e20f0e2884136b4e2b978efd16f557dbc55e64011abbce0768054f7e6d881c110182824143a39101fdae273ed614738aa7ba5c727b27f6677

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-timezone-l1-1-0.dll

Filesize
18KB

MD5
c9a55de62e53d747c5a7fddedef874f9

SHA1
c5c5a7a873a4d686bfe8e3da6dc70f724ce41bad

SHA256
b5c725bbb475b5c06cc6cb2a2c3c70008f229659f88fba25ccd5d5c698d06a4b

SHA512
adca0360a1297e80a8d3c2e07f5fbc06d2848f572f551342ad4c9884e4ab4bd1d3b3d9919b4f2b929e2848c1a88a4e844dd38c86067cace9685f9640db100efb

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-core-util-l1-1-0.dll

Filesize
17KB

MD5
29e1922b32e5312a948e6d8b1b34e2d9

SHA1
912f54be8438f45e1562a47294091d522cd89356

SHA256
34c5dee6d566252c0ceb7d9a21e24d5f297af2b26c32e0c7808bbd088aa9a6a9

SHA512
837cd03ee0195dc94bab0662ff3b8cd1be2dedd8a3254318d25dfea6e88d07211186fa367f41ab864560e10a22220deb3ed05ccf82d60ac80c71dfed08afbea3

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-conio-l1-1-0.dll

Filesize
18KB

MD5
a668c5ee307457729203ae00edebb6b3

SHA1
2114d84cf3ec576785ebbe6b2184b0d634b86d71

SHA256
a95b1af74623d6d5d892760166b9bfac8926929571301921f1e62458e6d1a503

SHA512
73dc1a1c2ceb98ca6d9ddc7611fc44753184be00cfba07c4947d675f0b154a09e6013e1ef54ac7576e661fc51b4bc54fdd96a0c046ab4ee58282e711b1854730

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-convert-l1-1-0.dll

Filesize
21KB

MD5
9ddea3cc96e0fdd3443cc60d649931b3

SHA1
af3cb7036318a8427f20b8561079e279119dca0e

SHA256
b7c3ebc36c84630a52d23d1c0e79d61012dfa44cdebdf039af31ec9e322845a5

SHA512
1427193b31b64715f5712db9c431593bdc56ef512fe353147ddb7544c1c39ded4371cd72055d82818e965aff0441b7cbe0b811d828efb0ece28471716659e162

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-environment-l1-1-0.dll

Filesize
18KB

MD5
39325e5f023eb564c87d30f7e06dff23

SHA1
03dd79a7fbe3de1a29359b94ba2d554776bdd3fe

SHA256
56d8b7ee7619579a3c648eb130c9354ba1ba5b33a07a4f350370ee7b3653749a

SHA512
087b9dcb744ad7d330bacb9bda9c1a1df28ebb9327de0c5dc618e79929fd33d1b1ff0e1ef4c08f8b3ea8118b968a89f44fe651c66cba4ecbb3216cd4bcce3085

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-filesystem-l1-1-0.dll

Filesize
19KB

MD5
228c6bbe1bce84315e4927392a3baee5

SHA1
ba274aa567ad1ec663a2f9284af2e3cb232698fb

SHA256
ac0cec8644340125507dd0bc9a90b1853a2d194eb60a049237fb5e752d349065

SHA512
37a60cce69e81f68ef62c58bba8f2843e99e8ba1b87df9a5b561d358309e672ae5e3434a10a3dde01ae624d1638da226d42c64316f72f3d63b08015b43c56cab

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-heap-l1-1-0.dll

Filesize
18KB

MD5
1776a2b85378b27825cf5e5a3a132d9a

SHA1
626f0e7f2f18f31ec304fe7a7af1a87cbbebb1df

SHA256
675b1b82dd485cc8c8a099272db9241d0d2a7f45424901f35231b79186ec47ee

SHA512
541a5dd997fc5fec31c17b4f95f03c3a52e106d6fb590cb46bdf5adad23ed4a895853768229f3fbb9049f614d9bae031e6c43cec43fb38c89f13163721bb8348

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-locale-l1-1-0.dll

Filesize
18KB

MD5
034379bcea45eb99db8cdfeacbc5e281

SHA1
bbf93d82e7e306e827efeb9612e8eab2b760e2b7

SHA256
8b543b1bb241f5b773eb76f652dad7b12e3e4a09230f2e804cd6b0622e8baf65

SHA512
7ea6efb75b0c59d3120d5b13da139042726a06d105c924095ed252f39ac19e11e8a5c6bb1c45fa7519c0163716745d03fb9daaaca50139a115235ab2815cc256

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-math-l1-1-0.dll

Filesize
28KB

MD5
8da414c3524a869e5679c0678d1640c1

SHA1
60cf28792c68e9894878c31b323e68feb4676865

SHA256
39723e61c98703034b264b97ee0fe12e696c6560483d799020f9847d8a952672

SHA512
6ef3f81206e7d4dca5b3c1fafc9aa2328b717e61ee0acce30dfb15ad0fe3cb59b2bd61f92bf6046c0aae01445896dcb1485ad8be86629d22c3301a1b5f4f2cfa

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-multibyte-l1-1-0.dll

Filesize
25KB

MD5
19d7f2d6424c98c45702489a375d9e17

SHA1
310bc4ed49492383e7c669ac9145bda2956c7564

SHA256
a6b83b764555d517216e0e34c4945f7a7501c1b7a25308d8f85551fe353f9c15

SHA512
01c09edef90c60c9e6cdabff918f15afc9b728d6671947898ce8848e3d102f300f3fb4246af0ac9c6f57b3b85b24832d7b40452358636125b61eb89567d3b17e

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-private-l1-1-0.dll

Filesize
71KB

MD5
3d139f57ed79d2c788e422ca26950446

SHA1
788e4fb5d1f46b0f1802761d0ae3addb8611c238

SHA256
dc25a882ac454a0071e4815b0e939dc161ba73b5c207b84afd96203c343b99c7

SHA512
12ed9216f44aa5f245c707fe39aed08dc18ea675f5a707098f1a1da42b348a649846bc919fd318de7954ea9097c01f22be76a5d85d664ef030381e7759840765

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-process-l1-1-0.dll

Filesize
18KB

MD5
9d3d6f938c8672a12aea03f85d5330de

SHA1
6a7d6e84527eaf54d6f78dd1a5f20503e766a66c

SHA256
707c9a384440d0b2d067fc0335273f8851b02c3114842e17df9c54127910d7fb

SHA512
0e1681b16cd9af116bcc5c6b4284c1203b33febb197d1d4ab8a649962c0e807af9258bde91c86727910624196948e976741411843dd841616337ea93a27de7cb

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-runtime-l1-1-0.dll

Filesize
22KB

MD5
fb0ca6cbfff46be87ad729a1c4fde138

SHA1
2c302d1c535d5c40f31c3a75393118b40e1b2af9

SHA256
1ee8e99190cc31b104fb75e66928b8c73138902fefedbcfb54c409df50a364df

SHA512
99144c67c33e89b8283c5b39b8bf68d55638daa6acc2715a2ac8c5dba4170dd12299d3a2dffb39ae38ef0872c2c68a64d7cdc6ceba5e660a53942761cb9eca83

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-stdio-l1-1-0.dll

Filesize
23KB

MD5
d5166ab3034f0e1aa679bfa1907e5844

SHA1
851dd640cb34177c43b5f47b218a686c09fa6b4c

SHA256
7bcab4ca00fb1f85fea29dd3375f709317b984a6f3b9ba12b8cf1952f97beee5

SHA512
8f2d7442191de22457c1b8402faad594af2fe0c38280aaafc876c797ca79f7f4b6860e557e37c3dbe084fe7262a85c358e3eeaf91e16855a91b7535cb0ac832e

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-string-l1-1-0.dll

Filesize
23KB

MD5
ad99c2362f64cde7756b16f9a016a60f

SHA1
07c9a78ee658bfa81db61dab039cffc9145cc6cb

SHA256
73ab2161a7700835b2a15b7487045a695706cc18bcee283b114042570bb9c0aa

SHA512
9c72f239adda1de11b4ad7028f3c897c93859ef277658aeaa141f09b7ddfe788d657b9cb1e2648971ecd5d27b99166283110ccba437d461003dbb9f6885451f7

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-time-l1-1-0.dll

Filesize
20KB

MD5
9b79fda359a269c63dcac69b2c81caa4

SHA1
a38c81b7a2ec158dfcfeb72cb7c04b3eb3ccc0fb

SHA256
4d0f0ea6e8478132892f9e674e27e2bc346622fc8989c704e5b2299a18c1d138

SHA512
e69d275c5ec5eae5c95b0596f0cc681b7d287b3e2f9c78a9b5e658949e6244f754f96ad7d40214d22ed28d64e4e8bd507363cdf99999fea93cfe319078c1f541

Download Submit
C:\Program Files (x86)\TotalAV\api-ms-win-crt-utility-l1-1-0.dll

Filesize
18KB

MD5
70e9104e743069b573ca12a3cd87ec33

SHA1
4290755b6a49212b2e969200e7a088d1713b84a2

SHA256
7e6b33a4c0c84f18f2be294ec63212245af4fd8354636804ffe5ee9a0d526d95

SHA512
e979f28451d271f405b780fc2025707c8a29dcb4c28980ca42e33d4033666de0e4a4644defec6c1d5d4bdd3c73d405fafcffe3320c60134681f62805c965bfd9

Download Submit
C:\Program Files (x86)\TotalAV\avira.managed.remediation.dll

Filesize
26KB

MD5
cbfe8189d00825dc1ffbb123cd0d235a

SHA1
f1fcf30f996ad41fbf1564065437e2e45456e179

SHA256
aa29dbc7d98ed50bcc56b057f877b9e0dc1c38af62a87993576295da65a68967

SHA512
5efd02f7770d611d12372096727b2d7839d1e101482fb1e7dd6dbc088b1aa3773d09613c8331e2d2c8e824c803130ba03f801065edb1950f93dc04af6b6a086c

Download Submit
C:\Program Files (x86)\TotalAV\avira.managed.sdk.dll

Filesize
39KB

MD5
6ecd66884c2033bea3db38a866538776

SHA1
23d1d5795e4f06c249527677f51a25084ad1da68

SHA256
8f875895c08f07bcb4816e5b5b52d1004ef0f26ffc81dc6a0f6dc43c5a77aaf7

SHA512
ef95e273d70f08ebb6727ad027d0c890ac6f8f07aaf550b6efe04a11219e8c9bfbbf2fbf292545638d86051d7bd0545e4d5dcaa8b33c1e162aea0c13eb1ca160

Download Submit
C:\Program Files (x86)\TotalAV\avira.managed.update.dll

Filesize
23KB

MD5
4e509553baec78324665c02e52632f0f

SHA1
460baa72abce39d6bf6341f410af02d0aef2c9fc

SHA256
56f9b75353fdfc424eb57e438e49c247dfc111f1494319e2336086588ce47330

SHA512
5b8f5b94d158770eb39091d9d1a688b117431c092e7e22bdce5f8f5d54290d8b600a4c720fce673c8789bb68cf9a9bf2a430d8e75b3efe6d20022d511143f917

Download Submit
C:\Program Files (x86)\TotalAV\bins\subinacl.exe

Filesize
291KB

MD5
7bd591f56af173edc8ca01bd62df6eac

SHA1
43e88cd5cee3b9c66de428c84501d8660ea0586b

SHA256
371cd9c35282843d572a3186975cc749e425fd4eeae1bb93a9b0cf20c22a9dc8

SHA512
b88d0c26a6f17d7b2d5483fc9a54002ea9fe26eabf10e5385ce4a13d81db5d7e8421d09bb5eaff453a6f5a210d547cf625fef74d209b2b5f0031621e9796366a

Download Submit
C:\Program Files (x86)\TotalAV\cachey-bashi.netcore.dll

Filesize
24KB

MD5
4882fa6dc7bdb4591967d65dd08e0437

SHA1
4c9ea0e2b4c03bfc62d35adc3003d41c5c33839a

SHA256
9be51e9fbffff4fcc7b6e50d214809f27dde875ad3c3b94961ce46c67cf253f1

SHA512
eddeadd43369d5b03ebd4b6b98063f28e09f0895d4b42d4ab9e81e3adf3f098402449a6b95469bce9ffc228f74216bac066f90805510eb40fca44abdb6c6569a

Download Submit
C:\Program Files (x86)\TotalAV\clrcompression.dll

Filesize
723KB

MD5
6cd5a2b4d0a555bbb94858e64659111c

SHA1
b5ddcbd91bbe232cf7e7ba5dcf0b75e80dea41ef

SHA256
bac1f0fd328051c956b95714b5498acd1be6707130be500a9188829a740a186f

SHA512
4a47fab547e185f022d90eaf6d587ad1bf78f248e5cd467081c957cfe2ae3ab1e451b2fa94cc076cb66e2753dba577f2489a1fca14f2075afa9dca371b623f61

Download Submit
C:\Program Files (x86)\TotalAV\clretwrc.dll

Filesize
238KB

MD5
3a0d7de8c93cb55a2b694066d52908db

SHA1
9b54438352427d94fad53a0a8310a415d8b8d70b

SHA256
03a286bfc61bb4e6cef1cad40043bb9f161e5810b5ac56f81e6d0a7533f3d3e6

SHA512
7f6b68347a445b114b2a358629c58c35e83c661733376e779d1453d481ebb0ffac6d697e7d2083b38182d67d48a1662cd2bd31480ab0dda350bd1cba5709f5eb

Download Submit
C:\Program Files (x86)\TotalAV\clrjit.dll

Filesize
1.1MB

MD5
a873ebf8b135192456bb47edffa641c9

SHA1
533375c44d5f0ed5a194975817972ca5e2e646ab

SHA256
520ef22ad5cdc40025f8964d0cefb39b0c88cec4e0f7d49863f004887adecc95

SHA512
c8a46a050530287451101ebe89b2ee4149d3d3402127c78be5b201d8a66c1b2c3adbdf33f7fc866008e8d4920a24635719baa1c172c84089afeb8019c76c8f17

Download Submit
C:\Program Files (x86)\TotalAV\coreclr.dll

Filesize
4.1MB

MD5
fdb0d51a8c7ad31a75001ec87efc2039

SHA1
264a5dd57656841987f6f73d2b15290340049ad5

SHA256
d8877ba978e5ffb733026d15fc6e7b60862c8c43ad04ca3e5b663b6dcc7dd6bc

SHA512
590d8d45c59cd42ba0d0be068baf5d339228f6ff38f7282909679f3a2ea3f25f5110c072276888c986f020bbddeef48b69917900e7c94bcaa22bc3d0d6c978c1

Download Submit
C:\Program Files (x86)\TotalAV\dbgshim.dll

Filesize
119KB

MD5
25527d0dc8c76052d6af0062809b19db

SHA1
9743537cf72993b29cc01e98c535b01e3448707d

SHA256
23d45e43b4e54b12dc7f8029ae785e6a2a666e94b0b749c878502cd89ce4b50d

SHA512
b8e596d004b40122eafbc0425383fda061b5c27c892260631bb77aeb79b25316b86ca57c443d3c0494484ce3ed0329882588a418e0773559a06a2a2566a7041a

Download Submit
C:\Program Files (x86)\TotalAV\driver\amd64\LICENSE.txt

Filesize
17KB

MD5
747025499b4a05d19a0e3431c634cdc0

SHA1
c93725625c81fef7ff8663bdc5d5df501a3586a4

SHA256
fa8e8f02f81de56cbf470b91de1f6fa69c3b39a996c6e1f057df6212324cc564

SHA512
2b4eb9ef2ef7dd28fa0b30f268c1ed53130ad79686a1f785ccaa925a3015eb1617fde45ffe14068a08ac2ceea34579aa07f0199da57ca057783d193759bf8b49

Download Submit
C:\Program Files (x86)\TotalAV\driver\amd64\OemWin2k.inf

Filesize
7KB

MD5
b6aada0cbed06889053a05b66f146979

SHA1
823025f02b355b37df7d7657b0f2b4d3584891a5

SHA256
a6e72b88e42d2b478615c5a16bbedb3fd02b0dd3def3a79840fc6a5df8312707

SHA512
9f8a6b0ad5ae4ea4c14043d663fd5aca2f1884ece0975b13c0533eb93103eb89120c1884121d71c8f9d09f5d210926fdba3b29fc6cf87f601bbc0f359c31d4ad

Download Submit
C:\Program Files (x86)\TotalAV\driver\amd64\devcon.exe

Filesize
87KB

MD5
9ab7634bb81f326d489e453c358ae8ea

SHA1
5ea9dfa805f1ae952cb3b66712126ac9c3c985c0

SHA256
118e04049f21d272c8005e1e746248a4654b305a41b29e5c735231d2b83bbaa6

SHA512
c90ab0182709cbf9ea2ba58565fcc6c72b52bc500b5f16a7eba1f107350550725f0ba40bf64102e9e0c8fdc347e0833f67a8bfe4779b3654d0e7d42f7b8bb74d

Download Submit
C:\Program Files (x86)\TotalAV\driver\amd64\tap0901.cat

Filesize
8KB

MD5
e0762d9f662614cdc930e211884e9443

SHA1
8016a500b268f2263aa26996f92cad4a9bfe153d

SHA256
b8913d43b03ecf24f466b7bd5046b0c35ec9c43620d10ce3d5dd6538356a85a8

SHA512
618fbf5488f2eeba35b46e4eeabb901b40be20bd9447d49920ad22a9adb23d6dd366556430e24005543bd2ee501848ff7b24bcebf7b15b8ee8543091b73bb449

Download Submit
C:\Program Files (x86)\TotalAV\driver\amd64\tap0901.sys

Filesize
38KB

MD5
54cb62322b7b1210cb317c4462691b10

SHA1
728cccf1e337641cfe06df85aaa667270c2f540f

SHA256
89cb62e73fbd0500a8b811a632602c504753777313d7e424cca68f1619b55211

SHA512
b9dec2e015659ccd9683ef504f6a912f55e41e87d0d9c698670b1b2db358a1f4997fcc112cf04e850d7b226582a3d234b57ad68b4afd9cff9c9df63b5f2c08fd

Download Submit
C:\Program Files (x86)\TotalAV\driver\i386\OemWin2k.inf

Filesize
7KB

MD5
35589b966c65a52a1c95791bbcd80543

SHA1
d65994dd38de0e1971f8c99a048c46acc284e8bf

SHA256
8892d224ae879cc35ffe216691fc6ba3266d88b6239838f7d38b3a4ff4ad74b6

SHA512
ece01e898527ae2ce3039457ea1823bda6351871900c1a7a20057ff3250e33ed8ed216af3318edaa1c3825c17d348dee06078e946d10332e87af8ec45795fd5f

Download Submit
C:\Program Files (x86)\TotalAV\driver\i386\devcon.exe

Filesize
62KB

MD5
d0006c3ec1f8b894e41667355b088448

SHA1
8c478cd72bd52bec1283fed9186a9d07a58a084c

SHA256
f228844f92969a6c88ec6b9168815c259881f436f3188f9b038eb0b1dce08bbf

SHA512
85424d30cd0607cae58ec1b9053ba6b2f087e148ad6ba029ddcabc4ff33fc97d3a6dddb0f49e5a39cfbe011ae2f9b165ba0490ed9365f081afdf4ab0c15b3c4d

Download Submit
C:\Program Files (x86)\TotalAV\driver\i386\tap0901.cat

Filesize
8KB

MD5
7f49202c5a71e1dd7c85923a5dd45764

SHA1
7e8c115faad3ab2cc53ecfc05cf09e8eabfbffa6

SHA256
825cc3efc86cd13fa1bda7d0413d5ca8b208c3a18834ef02637834352ef386fc

SHA512
62497068c4ed428772ac6236c1383540cf7c48a7ee20b06e0b0e873c51fe69718969ab218f953001403d2e2170e7f29cd84947722e15f55985863a2e79d66d63

Download Submit
C:\Program Files (x86)\TotalAV\driver\i386\tap0901.sys

Filesize
32KB

MD5
a23d03a5eb0b221bcd33d98ff30e4dbf

SHA1
9da49918647cf25bcae9538ebf60833d0a3488ea

SHA256
c43a60e16a011622a963cb93264c7e1365a10fce8c43d5c4fad895880af4dd91

SHA512
77e9c8e1cd4d7670a9439d006f45ddebb62a33ab4aa7999cf9a0536bd9ae860a0d1a2c7ff50f5e0e50345b7c64619761fa545d10657b6f8fcc31db6d593aea41

Download Submit
C:\Program Files (x86)\TotalAV\e_sqlite3.dll

Filesize
966KB

MD5
1aa2fb5e420379a7a50cd650232c6a08

SHA1
e9bb12599f60032a160a00a04203bd73680940cd

SHA256
9877f703ce3fb9669d656d24726159b616b2df25522225bf41bfafe89954c58a

SHA512
f908c146cc7299815424debe4d40643864ce442eb30adf148ce05dc2f48e8a9db0697943af55b1c5260f5341ebce57cd804a7b19e71b66510bac085a3f800a59

Download Submit
C:\Program Files (x86)\TotalAV\hostfxr.dll

Filesize
335KB

MD5
36e668a570def150bc37c64bcc824af5

SHA1
c475d9bbfbf8e71197c06d86515cb84d06be0ff8

SHA256
26ed6778f4d368df211d035b548fa9b3d22976def5055d33c0f2a2d7086ed54a

SHA512
cf728f060688cc2a19186f029ecbe2f11c68dc56ed12e2759af0b21a74ef69d1a6f40d777efed4eb32b581acdee5bd5c668339c928556987dbf1cdb2533143db

Download Submit
C:\Program Files (x86)\TotalAV\hostpolicy.dll

Filesize
328KB

MD5
862514252dc75f2275445ca4798eea1f

SHA1
6241c1ef41b521a7766a87732382e0c940c96dee

SHA256
1f81009336fed33b50bf187d70a16929f4d1b4f78b4d1e16bbbf7f6a87ec5bb1

SHA512
b070c5a4d4d649da59df88ef0030f74a7e1096da21f27fccb72d3027e7b9cc87193fde695b32419982249b8e7fce7d5fea679a6c085a4605a09bfdd976a26a7d

Download Submit
C:\Program Files (x86)\TotalAV\install.name

Filesize
51B

MD5
18d4ea7684f5aa3568f18afb9d095784

SHA1
c3de6b02032fa42430e98830a255b297935e62ad

SHA256
4a7ef476f6ba9d92a78f99a2e1a5daf1b96b4e004bdc0b4d28a29b5ffa4bdec9

SHA512
5e9d7ce8997f5e4fd8effbe708ca1a2d1018782dfc8635fd5ca7e84acb01981353475315c49160c5bd5047effd67d9a9972155935e36c5b23849574e2618f1a0

Download Submit
C:\Program Files (x86)\TotalAV\installer.log

Filesize
43B

MD5
46b80930c603a18ed7e611839e3cbd34

SHA1
364bbdacd1dbf8314e0a872bc0bffbbfe1b76285

SHA256
39b0cd2c015c3ce3d166c4303b20824c5695c8ce08da811b9a51866b48d8c901

SHA512
867a46fe2bbfed5193c7aa4b50b3ab58844d726da08eebdd5e714433f0bb649603f87438a046a9eb62a8795488d73b66a7f920abadd3afda1b04c0c715b6b502

Download Submit
C:\Program Files (x86)\TotalAV\installoptions.jdat

Filesize
380B

MD5
dd3ae3168a12ad7f0dc03648dc46eb7a

SHA1
86d9b32fbd9b77a7b9c80f9d53be88799aaf0bfc

SHA256
dd723d37ef9d85b28d2183484b7fc1acef76e7113719ecb9b74c0791e57de6be

SHA512
833a10f34cbb5fa2209b4dd55c72fe46c8d82ad6652bfd3574dff4f00ade746f172aaa0ecf8c6e5926785d240c1bd50882521a4e4ea973d50dab6b1a5072840f

Download Submit
C:\Program Files (x86)\TotalAV\lib_SCAPI.dll

Filesize
244KB

MD5
b52d13d0b5d62993e2dc9aab06c0b2d0

SHA1
160ccd201b856f14971a0b33c10a0bff13092da0

SHA256
c9c36cdff0af9c858c5633adc89730fd7172becbdaf86e4acb0fadfdb872ffab

SHA512
e98e2340fcc216dacad07766a59db43f73c634ab8b36dd4330835d847164b24bd999bb2a3b74f40dd8099304680c06e54fc4d8d50113e77848d6800599efad5d

Download Submit
C:\Program Files (x86)\TotalAV\lib_SCAPISharp.dll

Filesize
23KB

MD5
9dd1c2259075e1b604c2efc50f2a7db9

SHA1
765d2bab983ebb74ff9f956faed22c99211795b2

SHA256
4f3694e8b0960a7b1e6cb6ffdd6b143e7f9c6dbe0275eff9197059a60d4ee877

SHA512
5605cce8a54ffc4067e09a06420e33146eddc4ccee81bf02c56bff8943d7e6daf47fe92f329de9d03804dcafa5a319d038900dbbab674163951a489c9ce760a8

Download Submit
C:\Program Files (x86)\TotalAV\libcrypto-1_1.dll

Filesize
2.5MB

MD5
f77ebf3bb87a6b7e6fc52071609cd88e

SHA1
d41ce9a2f1dc351ac0adcb45030a86043dc79128

SHA256
34f14e8ac45755105a464dc4e93014c1e9778cd88e57463df8cf83f0db820411

SHA512
e043669989e28c4b7179e765bd65ae25a16d71bb76467faf812ff7078b228b676e16d64b6dfebb480f78e2a131b6cbbc8715a7cafa2bed5c7863ec5835c9ddf2

Download Submit
C:\Program Files (x86)\TotalAV\libssl-1_1.dll

Filesize
626KB

MD5
723c79630b1971f327fb7bff5ff38eda

SHA1
77844078bfea3b45e7fc4a42e5b7261fc5c6ad3a

SHA256
797ba3a838a6d0bc7b9b39efec86473ffe4255f782bb54066e81856eb0adf0a9

SHA512
8329b8755104ad17889e1f4b1ead597a38bec8f07cebc246c5b0e8a0b88e1046d31cd3724e8fb8ed903e52e1e4808324e63ba4d4927a7fae3233ae37da8d31c2

Download Submit
C:\Program Files (x86)\TotalAV\locale\it_IT.mo

Filesize
293KB

MD5
9e5efee9c003ff0f7c23786b049d1baf

SHA1
623e5c61dc11d1ca88ebb6722ead5287e543b12c

SHA256
6e6e5ac92a3341cba3585430d460f74071dbff1bde2f79b8246810dc35983775

SHA512
22061fefc040800a40f487efb023807fb5dcffb68c2aaa04250fd4e0265b7de56f021da0adcd147dcbba1f60f78df998efb32c7996776abb0d051cbd496f5541

Download Submit
C:\Program Files (x86)\TotalAV\mscordaccore.dll

Filesize
959KB

MD5
87a7aaf5ae5b7de4e15572166ca95d74

SHA1
76ec73926d22b708904e01623beb0138009dec5a

SHA256
5e63a9d0e5a7d10a738a7ce4633bff84e223183ef2155b7adf80c211a2b80a77

SHA512
5f0b2761c04c5565b5232446e3ca77a07f4a15567fd3a5de69661e705dd872a3e87358d79d6f02e807879eb1e15934fb09ad2e066a805c12c67c8d2c917e696f

Download Submit
C:\Program Files (x86)\TotalAV\mscordbi.dll

Filesize
1002KB

MD5
0f5287ccf46af868d472a16dfada82f8

SHA1
96f9943dbdf240205de2a17c1c413ca3e0ac9b45

SHA256
776150b3c8008d9ef5d931ec871fc00638d81e3f5f37fe6cd4988353d6eaef25

SHA512
d0e993348577b7fa526d046bb684e449d82a40c0a1964f1714474d9711660eb9f83ef34e01c5fcf1089ab7c8400afce6d0e7946b5f278a08226cb46ad0afd2fa

Download Submit
C:\Program Files (x86)\TotalAV\mscorlib.dll

Filesize
38KB

MD5
c53ff6de7a243279034e8ddbab23325d

SHA1
f846e0a35c768188769e9fd08ed0b69ab7fffa73

SHA256
3e7f86acfe925900814e0f57828a9b437b108e50315a2d4e87654ac7dc39852f

SHA512
2baa9be32ab750e91ef174fc1d6db764bde37b9400040fa80b702b0989b5053afd9645a2242861548f092a6dee6c76d47f63ee5597cddc5035a07e14e5e9ca38

Download Submit
C:\Program Files (x86)\TotalAV\mscorrc.debug.dll

Filesize
175KB

MD5
6552055346ddd6cfa8fb05bef8f26cfc

SHA1
4b6b93bdaa00fe2c3a8a8f313cac140ce04c785e

SHA256
4681c02858164bb8cb210238fde27c7099dfd34d6150e9706da8845a3706b8e6

SHA512
fdcc771b0d7f43c8a808da1280890c721b47d6412a28c53acadd7bc3ddff9c4eae1d3a141f99f1b183bacbcc501fce795d9199581a597ff748792914872ec9f9

Download Submit
C:\Program Files (x86)\TotalAV\mscorrc.dll

Filesize
13KB

MD5
30041ff905e8057be55fff732f8de1bf

SHA1
b783bff2e6b2fc182d6a4345c6a33323b8eb7a53

SHA256
ac84b2497a3875aa104e2a18e0dd49a43ea38dc505c57d836f368d8443280e78

SHA512
3daf4b0a481b93c3ad2d078cccd2e185506f3607309c1b11799b15e958137d51528638263281f7d0152751fd4ab301d0dce8705166f05820cd9eaab50beec829

Download Submit
C:\Program Files (x86)\TotalAV\netstandard.dll

Filesize
72KB

MD5
671ed9d6e873ad29ccff10bcfaea6021

SHA1
49507f0040c27249e209be9ff92ea4c143575873

SHA256
de0ef6c3af1c9b8199ba4e16c1392d3127a4a30dcc4cfbf96bcc463fe0a5d27d

SHA512
15649a0a37d1e26bf3e670ee1986a6f6d991a6821868f2e90c1a1986122c4cfa78854f5f02c7d5ec1354837126f3226da09f8c89823496045644b48fc4e80f6e

Download Submit
C:\Program Files (x86)\TotalAV\nfapi.dll

Filesize
334KB

MD5
9da4b43b921e4a28d8d440166e0e9d38

SHA1
b063280d258b14f48e4061b2b24ba9ab1dcf145b

SHA256
268142cc83918e1a04a7f9ac1f9f827e15ffbc65bd80dac85a8b7d99cd8721d9

SHA512
6b5c52aa001e0d77e4ec49088c8bdf5460dd0b323ea0f6a7aa651a5dcf3d66c9b93ea5885e8edaa393da85285b912a65d00b83ec08c05d2fe46cd33206d033b0

Download Submit
C:\Program Files (x86)\TotalAV\nfregdrv.exe

Filesize
48KB

MD5
01b5780505301ada6dc102fb77b2298c

SHA1
328c3931a54af2d7adb88ba4c4c18ce1af8d5a72

SHA256
aad2d85472448abe8250cf3180c3d0373540f46e8a8e76d8ef2f78db62be0812

SHA512
bc5bd91c46f452a76ae0595287622256e8c79e90158171bedf6b68d4439dfefceb06948bd49deb0aeb1344ce89a312bb87b01e2daf3880729fff642951c33947

Download Submit
C:\Program Files (x86)\TotalAV\ovpn\libcrypto-1_1.dll

Filesize
3.2MB

MD5
b9eb6a8ac15e8eee936d994bc87f9d5e

SHA1
b432473b753f371bb2415eb63d178e560455d4c8

SHA256
548c59044738554e6fd8aee9e1cd0e6cb13ee7b6f4f71532aff868e771eb8a7d

SHA512
83688bdee057964072215de15039e27f0e3188fc32856183f9de3484f11d6cbd633f36c0f0abe7ec6f3eb17dd467c59e8cc8517a371091279270c6c2bb5c631c

Download Submit
C:\Program Files (x86)\TotalAV\ovpn\liblzo2-2.dll

Filesize
193KB

MD5
bd9eab80f953d1674d71c315e050292b

SHA1
7f0d391e1d7b4dd455359ca1381bc5b90a23c84d

SHA256
22c1a7a44308ff6aafd80caa6fd53c93df7696c99feadf9ae700f26365c0986f

SHA512
baedfe72d58711ce95ad5ab2010f99d1f42825b825eae48c72add6c2cb8c8f756eb8d1f8c13b78d4cd6cc2a3cfeb920f4188ca47dc6f59aa1c66b0d83b0ebf4e

Download Submit
C:\Program Files (x86)\TotalAV\ovpn\libpkcs11-helper-1.dll

Filesize
123KB

MD5
5e12d4d264ba957604e80ebbb436c61b

SHA1
50ad9a622518989a80355d226b77c5c57aecba64

SHA256
6f0e5fbeec6474e0cc2bd0536aed3ff47fef4588fe28625ce2b3eaacb5f0dead

SHA512
e4dbb5e094b48bb47a30dc5782b9a5b58dd039c626922cc7884c00f2bc24ae4c457b11e2889ff373cc592c47daf1511ca4ab10a6f26f7f2f745efd9e64a5f002

Download Submit
C:\Program Files (x86)\TotalAV\ovpn\libssl-1_1.dll

Filesize
924KB

MD5
d6d65e0a4a7706a90e328578251f43ae

SHA1
5a34a15fd21f345b3f6c1876df3503e0050e7428

SHA256
89d49df485a5c33f0ebef4a78f6ceb63e60c08113fe21a911cd2c196bf9393fd

SHA512
2f524f1f9281a643ca3dd657e8136828fbb4c58b259c717bd05ea964379ad814fabd9e47d129ff1866dd92e8d5cadbce38b66c8daf2aba944c57368e7c1d8273

Download Submit
C:\Program Files (x86)\TotalAV\ovpn\openssl-license .txt

Filesize
10KB

MD5
4c359b890e7eeb474a96075f6df68597

SHA1
eb7d89454cd1f62d8ad37d61fe52117be5b38a12

SHA256
b9f6a4d26b1c7118c3b0ac41f0777a2b82de0ea25f48a9ca6a0e5550dba2382a

SHA512
d3578180c52d0daebd7b1792a261140bb49a11ff592efcb0c9d520a06ff6dc11ec3b1fcede1c95594deeffbd46d8703d1c5aabcd1677ab685774dadebb1af9bf

Download Submit
C:\Program Files (x86)\TotalAV\ovpn\openvpn-license.txt

Filesize
17KB

MD5
a5aa9694cc581daf09c7f75d1bc64c30

SHA1
484b11367024a690fbd459fb4f45fd044f42d63a

SHA256
a45afcd949cb0e29a3ca81801c7b72666e585ac039a0e1eac63546bcb7273d4c

SHA512
5dd967d247732aa4d718e25347224ea93a15c597c47507deeea30be84c87283e984daf39798492167a422acdc5af174eebd7f7220162f0907ad89d3730c7b306

Download Submit
C:\Program Files (x86)\TotalAV\ovpn\openvpn.exe

Filesize
1013KB

MD5
d62e7bd8fcfc550f4c664eb7f6933186

SHA1
0c1434e0afc5abb50e4fc266a83b7d412a23c280

SHA256
1c704ce36e37384692d4e9d111be69665fb2bfd3edc614ed6117ed6b934b736e

SHA512
36f8d5c714108140134d0e1d6852e2ef78da186d75fe6d6134ae7cbe43b79e451762f9e070004b13c0ccbb60e2c5ac12d34664381b7ed2187be57228861c815c

Download Submit
C:\Program Files (x86)\TotalAV\ovpn\openvpn_down.bat

Filesize
475B

MD5
08bae2de82fa4fb579f707376d440056

SHA1
33eaaac6f01f017affb58b68636cffa6ce30b157

SHA256
6cab17fee12d3a2c43eb4d7c3a790cdbd7fc9afc6b0c6d60dbbb61594f6cec74

SHA512
67bfb8a995eb12b5f995860472a0817279ff2acdbdc19e7ee38a0a91eaec67a870dfc56ce39cf4bb5d29c227809cb35b16635d1fe1c0bbc64429079e5aada6f0

Download Submit
C:\Program Files (x86)\TotalAV\ovpn\openvpn_up.bat

Filesize
784B

MD5
cd4d223acddbd08101a159b17022324b

SHA1
510979a24584898281d7190c9981a1f7aa5b09ca

SHA256
6ed4c6d1ba69e5aad84434e40f97c39432be10b903652860f8f16d7861ea79d6

SHA512
8516ff62ecf818db7f794d66a2c479ea549444ed718f519b297a0723d78e191466d8f889f4f544a3e3324d6ce9002ceaa3d119b2a5fb63dcb8a2fd324110e1c7

Download Submit
C:\Program Files (x86)\TotalAV\protected_elam\amd64\protected_elam.sys

Filesize
18KB

MD5
e9806e894443f95671064755f9663a18

SHA1
ee77dcdeda8f1c8f81dee89ae3924c1ef5d6c69b

SHA256
119bb976356fac1cc0b81e2cdc8d1135c1f57c1d06b631a1814796e1601c2bbc

SHA512
7a52c467cbcf80ec10e8e4656bf57198a9ee4b28971120ac4d47de3f3b20a5acd4199366d7ebe6920c9b4232768c000a9bae66905313016037f46a64f62f0cbb

Download Submit
C:\Program Files (x86)\TotalAV\protected_elam\x86\protected_elam.sys

Filesize
17KB

MD5
cf833a28b40ab93655f342a9d760d224

SHA1
d03ec91202f85970e4a24124bca36d7b4e262a16

SHA256
0b0d0898257846c320f7ddf30771126bbdf9edc7f9afbe1fb3d4f0925680215b

SHA512
3332f2eb60a422124628c749ba43a140ae6bc8c753019ba78edbbf0a390efcccefa15f3eaa192e7bb5b2d3195cf58def64bae42a844f5fbbde741d3c465a5e3a

Download Submit
C:\Program Files (x86)\TotalAV\pwm.dll

Filesize
30KB

MD5
885a2706ad5cd98c637a9d02a6712d56

SHA1
7bbe52a527efc084516c512372c8102749bd3746

SHA256
58ea66beb9fd07738a6a05622e04cc14bdea6e2d7628c3ef52e9960ff254ceba

SHA512
f966d711ffca055354ee68116032d818ce857237c7c27d92ddbb5f5a6a4b8dc3d17637e22532e524dcc72a428aeb60ca534150f41648e59c842a804b89790d63

Download Submit
C:\Program Files (x86)\TotalAV\securityservice.cat

Filesize
1.4MB

MD5
f7d1d228beafd2473fe5d039b0b5a8c2

SHA1
e9855109124b96c781c68e4fadfc4a658db7c305

SHA256
17da88c29be86ba54c810ec0afdcfe9584a648e24745fdd3c049791959c47cdd

SHA512
2a7c81444c9a80670674a8d22e8aca5e516241168fde9653977f3d9dbbda48c3cb4165b94cbccdf6012c9c28d00abb47d523b785fee35b9f98fbbf4fe18aba29

Download Submit
C:\Program Files (x86)\TotalAV\sni.dll

Filesize
133KB

MD5
c62a83f20bc23aeface70ec13003c4c5

SHA1
35553cfcdcbeccdc49710e68aec495c16880f0bd

SHA256
1446d6b26da49a5a9f366972f89f4e236f916955f31ddc38ebb96217c1cace9c

SHA512
4dda44fd5b538f5da9e8cb46a3ab1bdc14b43425b9a61249eccc925d986af7b8b3548db9490238f14807909ecf479415117141ddb344119438a59f97e894ea37

Download Submit
C:\Program Files (x86)\TotalAV\ucrtbase.dll

Filesize
1.1MB

MD5
6343ff7874ba03f78bb0dfe20b45f817

SHA1
82221a9ac1c1b8006f3f5e8539e74e3308f10bcb

SHA256
6f8f05993b8a25cadf5e301e58194c4d23402e467229b12e40956e4f128588b3

SHA512
63c3d3207577d4761103daf3f9901dd0a0ae8a89694ad1128fd7e054627cdd930d1020049317c5a898411735e2f75e2103ae303e7e514b6387a3c8463a4fb994

Download Submit
C:\Program Files (x86)\TotalAV\urldrv\tdi\amd64\webshieldfilter.sys

Filesize
74KB

MD5
21a332af5c8e929415dbde71db19b8ca

SHA1
dd908daf05b0fa89de836110e68f97cc54859d21

SHA256
b5ff1ea46318772e179c56e8e386f9b6c5831a304ebc4783501304aa2a9f8d33

SHA512
c0dad463aa71c1cfe2cf7de1b605be36f57fc49028a68b37e823ab5449f985b07d4c7b66e828aecbb2fffd240bab3f51d75a2d4ba43fb14674c0af50684d40be

Download Submit
C:\Program Files (x86)\TotalAV\urldrv\tdi\i386\webshieldfilter.sys

Filesize
68KB

MD5
2aa6d30e357b9a3e63d178f244482150

SHA1
44577e1a2fbc916fc8acca1ae5c7958ff64f8da4

SHA256
3282e62445815de2e45092d9476f6ba5625dc50c96077845c2e32afbf8c9d2bd

SHA512
57964eb6f0e36a4eaf41e7586d1fb37e36896fa26687767012443898c1b59f8bd4900da1f639251ae726e60be8df97812a9b700d5064fcccc0343e59bbb2e0fe

Download Submit
C:\Program Files (x86)\TotalAV\urldrv\wfp\win10\amd64\webshieldfilter.sys

Filesize
94KB

MD5
b797771c87184870eb95d2e50e17a9e7

SHA1
b303acad4220542c3150bb979aa966c2640434af

SHA256
c190a676d707f290a0f6fccb60ecbc4b3b5dea5ea27d552095acd4110aff51bc

SHA512
60ced524fa3bb611b6a73734b7aa6bc30d10fdbf9914a8e4c79e1b79c6402a678fb4963a29f237418affba806ca39bdf766b229b7679d50431aa834e6fa99341

Download Submit
C:\Program Files (x86)\TotalAV\urldrv\wfp\win10\i386\webshieldfilter.sys

Filesize
80KB

MD5
709ae7d4bb1817abf5b22bd5eb6d1943

SHA1
4123eb3773d91e5294abb1d1ad3cac52a34d5a48

SHA256
7a8748b1531e99f3549f579534e193fd9e2b1a96042313037d2aa6ad9c1e140d

SHA512
dc1f66be19368e7c9325a4f52e47b9d813912d06257a670ae42ba26206c751918fdf3a61eb2e383230ba6bb6a25865e594c5df80cb244ae1137e517d4dcc24c2

Download Submit
C:\Program Files (x86)\TotalAV\urldrv\wfp\win7\amd64\webshieldfilter.sys

Filesize
84KB

MD5
36a5f7f6601d2427426588ffd415ea89

SHA1
e69a5cfde38c82a6b0081e476fd83f1e3211337c

SHA256
16399d8faf4a30ed463b8db7900fe0e67aa981a519d324f32349ba2abd779647

SHA512
3379adcfbcb23cbdfc62390a0ebedde75810b1f90c19bb66ce142594994a11545090583cc9d71e4e28fb2bf875fd5798f9adb9e339ba9a146513734fb74693dd

Download Submit
C:\Program Files (x86)\TotalAV\urldrv\wfp\win7\i386\webshieldfilter.sys

Filesize
75KB

MD5
9508031dacfbbaf2595fdc9dacdb3b2a

SHA1
7b85a2830535a53068a8167093de36a3d3176e26

SHA256
3512260c75fe5ab584e7c072c38a9b17f4603c7b735d9e9e1e0b2f0ff901abbd

SHA512
a27287409313bd084510f92677111b92424c6a39eaf20e53519f563fe5a8d3a339b5e5d7399713164b41e1e22fc6ad87f6161f602ebdc74f9785f87e0bafc01e

Download Submit
C:\Program Files (x86)\TotalAV\vcruntime140_cor3.dll

Filesize
74KB

MD5
1a84957b6e681fca057160cd04e26b27

SHA1
8d7e4c98d1ec858db26a3540baaaa9bbf96b5bfe

SHA256
9faeaa45e8cc986af56f28350b38238b03c01c355e9564b849604b8d690919c5

SHA512
5f54c9e87f2510c56f3cf2ceeb5b5ad7711abd9f85a1ff84e74dd82d15181505e7e5428eae6ff823f1190964eb0a82a569273a4562ec4131cecfa00a9d0d02aa

Download Submit
C:\Program Files (x86)\TotalAV\wpfgfx_cor3.dll

Filesize
1.7MB

MD5
52d8f7f0ab9d679209b707c7ebc8377e

SHA1
7042a8788ea40f29b2fab2ec249dfd9e8c6ed7e6

SHA256
69c03db89ad14cdf2c05db284d1452a517d7127bafd871334685d715f662d203

SHA512
8617663d2292ca05d1873cbf9cf2397a0e56214c5bf5d66d5b1c8e95658a5604e1d27656ce853d1306c4a21575e3fe45934a0b8e5bb256644cd064b8d8269c87

Download Submit
C:\Program Files (x86)\TotalAV\wscf.exe

Filesize
289KB

MD5
25330672ddf4763c86f65438ea2561d6

SHA1
94a602fffe514fdc9d3824263f6491f1342a9cf2

SHA256
266d4d9769b1498992fc953f2c82b9b6853b311f06adca63825a07c4dce72da0

SHA512
0cb2aea5155843e9ba4a5657acb8451665a722720f0e1d4a66935752aaaabcb56b032f31a5dbf4e5f4f310f28ca0d9e597c2f3f12a9a162e56063338db018630

Download Submit
C:\Program Files (x86)\TotalAV\x86\update.dll

Filesize
3.1MB

MD5
8fcfabdf2458336b061a06d7362f1c37

SHA1
ed669e2c73292d3a6510ed9d670bdf56cb7ca92d

SHA256
fc85d8cc5fe0327be1253c1f69ca48eaa30d9aa583becb6f1e678e7960e33022

SHA512
056eb2071e33efaa7ac52002a906008baf0f8c59f8fcc99c500510c327a6b2917922706c9ec05e12f716573d6d9321e28190f1a911f765d596fd4c0d4c882dec

Download Submit
C:\ProgramData\TotalAV\data\account.jdat

Filesize
1KB

MD5
86150f583e6491486a64798506056eeb

SHA1
a1794ea04953ce45d861ddf58b8ce8799d844341

SHA256
f316bd65de26af2e6474689481fe055f95a6e791b4255882f15c1acb7074b32d

SHA512
b307a349b7a5598dc1039244a945710815180ba79b8bdd5c1525aa92d0edabb8f53837807df628aeea3f1fc806542fe741d98b2b91c4029f34382c07a1dafb38

Download Submit
C:\ProgramData\TotalAV\data\details.jdat

Filesize
232B

MD5
a7aad88564160fed4cb480d1df6b8377

SHA1
4dc78a730c361e6106f76e0d327ef200b25cbb29

SHA256
7d09fe00073ce0d3135679ca9361cee33ed8fa6fc5859d5062436fbfc34a1c39

SHA512
52ac32e26873d115cf3f5e1c6276cbfc21bc6cb13b968f55d5dc29b2c6d5476770f0536a6b356ecb984f04da242770faf47b753cfedea9fc593d7cf729520ea6

Download Submit
C:\ProgramData\TotalAV\data\sdet.jdat

Filesize
707B

MD5
adc352687ae9fa636ddf8532f065a924

SHA1
3982c2e978001607f4799a854e00aa9755c7c281

SHA256
2bc688e784f48937082d93f82f78a0d806b803e3ea552981d6348a442fc7acf9

SHA512
872e318b4f22c05b47c8eddb8ba167a6c6c425f90ce26f637cbda9f9a8ef675b726154245e2a6558b59227382b5b371e2db18e5020601db8c6ae71a93e5cd2b0

Download Submit
C:\ProgramData\TotalAV\data\sdet.jdat

Filesize
1KB

MD5
d8d044f994a1c7f275efb4d581efd041

SHA1
0eedccb4090f0a9ec6083cbc116d325b6e8bff5a

SHA256
07a1a7ea081761473580129af7642399dd34b52350666423ff797989ac6a6108

SHA512
d2f57e07722a2cf869847ca9582fce1da6f5fd0441421ce112a384c97cc0ca959c3ba982d19c560ea4d692b521edeaa0f9257732d8e77b413619c0aa8b4d1ef4

Download Submit
C:\ProgramData\TotalAV\data\vpn_regions.jdat

Filesize
11KB

MD5
b0a4c8a14a194b4ae4b9286b497ab337

SHA1
953ae563ce49349b03ded13f629b76ba1e4550c5

SHA256
6e5279207d5fa5d169baa910fb2a4efa1237202a5e2b7375f961c74177612efc

SHA512
29681d559a8074c4a60f693019c0bc4a05544745dbb6f97b35bda3f7ca72ad7ea7f4dbbc90b998e3fbe998962ddcbe80a2213ca555e4d7bcb3b1792480f6e5e2

Download Submit
C:\ProgramData\TotalAV\updates\SAVAPI 11.0.1\on_access\win32\win7\avgio.dll

Filesize
153KB

MD5
49e51045f2951fd248318ac9f1ccb18e

SHA1
7a09bfa925fb2703bba5b26ddeae1ec7e3a481fb

SHA256
73b563935d96d328d5e13d05ddc35f24b69237e4c4b7b183ee66aeeb3ccd9c16

SHA512
df00015514bbcdd6d0ff9c38485ee65d7700fb7cadd4327d12230d63f078da5e9aa5fd11aec9f8c741bdf7c84c84c38543af1f71ebc12a4477415e2c5ab9deda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9e3fc58a8fb86c93d19e1500b873ef6f

SHA1
c6aae5f4e26f5570db5e14bba8d5061867a33b56

SHA256
828f4eacac1c40b790fd70dbb6fa6ba03dcc681171d9b2a6579626d27837b1c4

SHA512
e5e245b56fa82075e060f468a3224cf2ef43f1b6d87f0351a2102d85c7c897e559be4caeaecfdc4059af29fdc674681b61229319dda95cb2ee649b2eb98d313e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
27304926d60324abe74d7a4b571c35ea

SHA1
78b8f92fcaf4a09eaa786bbe33fd1b0222ef29c1

SHA256
7039ad5c2b40f4d97c8c2269f4942be13436d739b2e1f8feb7a0c9f9fdb931de

SHA512
f5b6181d3f432238c7365f64fc8a373299e23ba8178bcc419471916ef8b23e909787c7c0617ab22e4eb90909c02bd7b84f1386fbc61e2bdb5a0eb474175da4bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
24KB

MD5
8cd3c6d8cf9e5a9655bf5624dd0bcdad

SHA1
09c3fa22560c7f4559a343847fcf2b629e35513b

SHA256
bda6f5004cf18a54fd3e447b0fc82565303616c8b1d7e0094a96af72691a0b3e

SHA512
925e3849c68315ecbfe3d7b0fe6b4320dfadc0defd2e56063216b36fdfa0930b40be2d948233037b0c672c5708dd612fa7a3b8189e276d2f8faaccc4d9586d2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000033

Filesize
62KB

MD5
c3c0eb5e044497577bec91b5970f6d30

SHA1
d833f81cf21f68d43ba64a6c28892945adc317a6

SHA256
eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb

SHA512
83d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

Filesize
67KB

MD5
a074f116c725add93a8a828fbdbbd56c

SHA1
88ca00a085140baeae0fd3072635afe3f841d88f

SHA256
4cdcda7d8363be5bc824064259780779e7c046d56399c8a191106f55ce2ed8a6

SHA512
43ed55cda35bde93fc93c408908ab126e512c45611a994d7f4e5c85d4f2d90d573066082cb7b8dffce6a24a1f96cd534586646719b214ac7874132163faa5f28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

Filesize
41KB

MD5
a7ee007fb008c17e73216d0d69e254e8

SHA1
160d970e6a8271b0907c50268146a28b5918c05e

SHA256
414024b478738b35312a098bc7f911300b14396d34718f78886b5942d9afe346

SHA512
669bec67d3fc1932a921dd683e6acfdf462b9063e1726770bae8740d83503a799c2e30030f2aca7ec96df0bfd6d8b7f999f8296ee156533302161eb7c9747602

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000037

Filesize
65KB

MD5
56d57bc655526551f217536f19195495

SHA1
28b430886d1220855a805d78dc5d6414aeee6995

SHA256
f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

SHA512
7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

Filesize
88KB

MD5
b38fbbd0b5c8e8b4452b33d6f85df7dc

SHA1
386ba241790252df01a6a028b3238de2f995a559

SHA256
b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

SHA512
546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000039

Filesize
1.2MB

MD5
9f8f80ca4d9435d66dd761fbb0753642

SHA1
5f187d02303fd9044b9e7c74e0c02fe8e6a646b7

SHA256
ab481b8b19b3336deda1b9ad4680cce4958152c9f9daa60c7bd8eb6786887359

SHA512
9c0de8e5bf16f096bf781189d813eeb52c3c8ec73fc791de10a8781e9942de06ed30ff5021ab7385c98686330049e3e610adc3e484e12ef807eec58607cfae63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

Filesize
43KB

MD5
209af4da7e0c3b2a6471a968ba1fc992

SHA1
2240c2da3eba4f30b0c3ef2205ce7848ecff9e3f

SHA256
ecc145203f1c562cae7b733a807e9333c51d75726905a3af898154f3cefc9403

SHA512
09201e377e80a3d03616ff394d836c85712f39b65a3138924d62a1f3ede3eac192f1345761c012b0045393c501d48b5a774aeda7ab5d687e1d7971440dc1fc35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

Filesize
73KB

MD5
cf604c923aae437f0acb62820b25d0fd

SHA1
84db753fe8494a397246ccd18b3bb47a6830bc98

SHA256
e2b4325bb9a706cbfba8f39cca5bde9dae935cbb1d6c8a562c62e740f2208ab4

SHA512
754219b05f2d81d11f0b54e5c7dd687bd82aa59a357a3074bca60fefd3a88102577db8ae60a11eb25cc9538af1da39d25fa6f38997bdc8184924d0c5920e89c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
1f384ee67d1bb55168f53a7d5960ee0d

SHA1
78ce1d74e218186c50b0cef570de9ecb58475bde

SHA256
0aa65d298f50e5776535469086c8fbce834a304ca968503704b8703d0c18206f

SHA512
4d786981cdaab4e7a8d2cfa0e1c47d4887be641bc1fb08a7f534b6f5d9ed6905bb12e453838e4d7643e890f2243137f97e895d83967042e1b4fe61ff0ebd0b73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
adee5dfff74d40622553016a75a00d7a

SHA1
b0d9e1bee9dca3f0a0651b98116098a312091051

SHA256
4086e0b4fd8c6738e432ac8adf157b706699aa1c5e30369ff8a10331abfee5fe

SHA512
ea53a6fbf07bec8416f9a4168f63ca739ec92e62e3da87b44767ab00928704fe8c7d9b8b7579c65f4f3b48f68dd6f9d13272411b416781af44fa733e56f0501b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
721d034084a2bbb3fb4684ee9a138164

SHA1
fc2c8d1d4d4a226ec8545098fc74bc242291b8fe

SHA256
f783487edc6497d846ee4680899acf863920c3b22e0c008eb2def55bcde9d845

SHA512
37e347a614fbf79ca15d8294ee722789e5589d31372c1b7451655cf8dcaf4b5cc33feece9c1b36f1703d7d89fbfb599c3c4173af99addd086094c49483561a10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
06d3999f214abef31a42d7ddbbc3b14e

SHA1
02b000702fddcd236b11f856d33577701ab23082

SHA256
6511b7b3eac89380f97eb0a361258e7d418d3f37cbfae72e0cc3b3be5d628431

SHA512
fd7e1f619a3f82e3e9eba8259c15565b322a3ff21cad95ab33418f9116d2d8ce71e080598b4e239f074ddb38ab1da57c2b699027b4205d6ebfdd2653a330b1f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
0bc15eb23e6413a5bb34707cbf05aef6

SHA1
62174294501896cd758f5e66aebd46d7613419fa

SHA256
628fd74d53c4f60863f3b4b1d56db52e7c97ea1c29d42ad5f92d431ac32ab5be

SHA512
148be15e69f00105bd15c647e94da94e489904b0c2a243e051b47f2707e6fb177b56ab76cb758cb58bca927f8f8f4fb5fcabbc6bbf43ed8df2eb620fc670ba97

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
08fc98660099276edc6b91655034dc2e

SHA1
e91f17c3b84c37d29c3c995f0ae5cc05ec304f6d

SHA256
357ba1194f24d2e8922171d04d89d29dadfee3657eb5fb403648b0b100b7cebe

SHA512
bd113b54dc3d2b48139a15be05ee663321b3ef0911daeca7bb8fc0121f2747ddf81cf639fb3e27fcb91c5ced91406bd691637642429f9663afc892257e3e7458

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
1335d767cb95617de9887b78e4f0297b

SHA1
75397559ea3855a5ca35712fb4c567c84e7aaf99

SHA256
cc3349b02a7f19789124ddcee370c7c04615d95d24048be58695fcd24e581004

SHA512
ff28ab1508aacc1a87eb3c9271a09d45f1d96c0753d1aaa36981034cdea5ce21d007c858d3dfd01c2c96f79fc999a8f81b3fba0cca1068c30059e16229ec01c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
7bceff0a52532a982ddfbeebee9bb66a

SHA1
ec31818ee41dbc57b97b47cdd0c49cbdb7d961d7

SHA256
b46fe867f9ff5001f4c7081a9288924bf47602fa7b1546f45fa05419f4263172

SHA512
de24b2fc55618f255dbf504b28a5cfac794badbde3af045041ff39b8a2d69ed1605cc4c2483ebff09c295db760aa457e93863bceaf6e49939cd3a538e258e96a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
26026490ac08728d7dfcbfdf040b69e8

SHA1
326e01b8e1190ae8506bd82b52cf3fca8387e0c3

SHA256
9c45b304ed1a4b985bbbbe04edff5de606c89841c378cb78d663c031e42efee4

SHA512
8aa79c438e9d726f633cab8ced22df504d83fd79dc50f54a0d834d02e5543a58f0064eedcb360a808e18e7d80fff5abe36d47c80cfa228ce94738469717f882b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
8a77be2c1fc50e78ad843ecff15bd668

SHA1
059d9e98d2099cb99db6dc45f121513a1b01cf6b

SHA256
003579cc9c7983b266066999caa386580b302c84e71ac061cb7f4bf69e7d71d4

SHA512
4852b9e672a43a700be3499f94e77e0a5e66b5bca3b65748cf232a5c4b2dc839100314200ceb90d242452ba98c16c86976818479a60201cad7c25686fafbd661

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b68e3e49276c8638c71edebfcb6ae618

SHA1
3ce8c9c6c85ce78dae143aaabedf7a075f434061

SHA256
9860639707757919b04e5c66931f95df64f716438517fa4f05742657f0d3b023

SHA512
882767529d1bbf0df861762c7f93e48360a3053ea78dced1c97d611ce9501c3e8317345df4a421366efb17411c21a71c9610923065dfc28e20e3c1501c14ceed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
232486796a4e9a2e5021661f2acfcdc5

SHA1
561953f6cba12be366bf3cb8a2d4308617b46130

SHA256
01640157b7e3bc3d38eb30d3eb2af1c64bc63c465657f87c0f6bd2e7b50a699d

SHA512
d8366bce5ab261329156a043e05ba3eca26704f1a650269ead126c5e2388ed7aee4ab496f1d2acfa57761bc8c24e6654548a454b733aefe02694d017750546e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b066c3b227d1c69912d4a39935ea974f

SHA1
9023317f1d5b62d4f1ed7fa901ac0f10dc8a4241

SHA256
8c95c67f4fd431d167ae18cbe680911fc3d636dd1c88041bb39f338edde97ad3

SHA512
51bc5e0de1da5f8f383ffb3eb038f8e09b4ff1dce18ba422351ab3849c8dd0a71331fbd211bba887ac0e0d9e404ebd09a3a4bce0bfb095a18913be179cbd8b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
9950b492347f5acc318fb384243228e6

SHA1
c36b010e90f5d8b7b80f88a020d34c40f4e11cec

SHA256
f16dd2993444ef6276a72269435d2307997d12ba8a0e9b34dccbc3b5558156e6

SHA512
7e5e5bab098a5aeccfd319677499c7a77670479a7895e5e95f712a2a950edfd81f013472e72d59e624227233e4e904a5d8c7c16585df1b4bac668eef910bbfec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cf4f55031f0dce48fc0c57a953b56438

SHA1
23c5400f2c797f41f74359f8fde0fb574a9ab1bf

SHA256
b2bdac4b18e10900ba675825a5a0c095a7371d26133949ea1384e7140d67e614

SHA512
ac690bd197ef6308d65fc02207a082c2af75e18eeaa29243d05f7a45d7c4292669613625559816482667b3f15662264fd2388641b5111186a492d73db6bc16aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
a073697ba31a6652526f1530cd59fc54

SHA1
3e91588e3c98c5dfd0b34d5b68cb632ad7e50f21

SHA256
e1ee3d995bb8cec2d23c60d3491652a41b752291f0be5f9e1f658a4b72e1ea3c

SHA512
aab006496d95dc0ed1ece1668ec55a6dc1531d01ae9359fdec8476c9741b99ddbcc20f341e482eb98a1cf2c66b41d8197ab1f0fc6ede448e51c08b98772a7913

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
2a31c36942fc49c035a03ea9ebc90532

SHA1
2f5a29e167429d833d31540a7f4815d405ce4c7a

SHA256
cf4aacba934445671081a7d73d6370e42f74a0a6fb6f84ade56245e20a487cf1

SHA512
5bea81e8360350d2052f16df3a6810dac8105e6e7d073c68812e4bd37beeedb78c5a2614e753505e97fcbd142888fe59bf08e2a2bfb386fc8f5e755e271f38c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ff3c0bd303ee92ad819cec928aebe32d

SHA1
be5e1b974c669a203e9b575555d52a8587ae0593

SHA256
6fdee42f70f15b688848603e919f3e6eb7cb0205604d4cf18515ea1479c9a3c1

SHA512
b6c886106db5922c8b3149b336d3708b2ce3d12025aee0858414041a8101078d049b1b89b38f1ef8866799af7152e238c629201afa1f268b4bd1df71b422891c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8c01f2cacbc619d423548448e1b6a6ad

SHA1
56b350ee396ffaa952889792dfa6a4fd5d38d5f5

SHA256
6a777fbd6c0558c0183983936997e6f9c1159db3e7fc8b06a389a00153372d5a

SHA512
20b589ce2749ffefd82bd4ca1830b15ffcfa174426285760d88fac98a683dacf5675bc8b96324dd54d544859ed5b784868f2e19e9d26b64457bf2687cfa15575

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
029caf98644dcd218da081531e4b8980

SHA1
29f6994ec239e8546f37964caeb33e151be30093

SHA256
c86c31a0e9f934a771512dc24cfc852309023102582b57f1cdf98791a49c84a1

SHA512
96246b661005fbe495837c1010b8bb7f3bcf5928f9c95d4a9fdcba18f7be01cfba3d7c9d189ba76a08a80f96ee6bc317302fe3ca1b8859364b30ddf279ce292f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0f107f85d914d4f783e627508f10b7f3

SHA1
a14a13e3ac6e2c137ff73b81f86666efd1db0fab

SHA256
007c3a7ba936bb1ba73833d61003c681e0c1a76ebb133afa7779e72252e04ff4

SHA512
20e7b1c547ec0ecdb0db73ed2bc6d2240164d530d6ea3b6c92c49132496b67a4c1679a3934a9159405676f7df1fb770f914a0739b2c57141bc93aa14f5ebc68f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2ff808bc425cb087f5170ce4c6a2035c

SHA1
5ef33863c3eae1f88a65ffd78d2c2ecea3aeb4c2

SHA256
01dd9dbbe88947344744dcd9e131aa948790f6a7c88924bc04f425537e555216

SHA512
135f8c0bc27b174d4519a3bb743f734d9130574279e7ede3404f8badbe19c57254fa451bf1de6f016fa3281c0cd03667a7ffb9db3f58b60b4c9c24c2c7ea1388

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
4bc9c4cd686ad17f6b5d66aa25431cd0

SHA1
5bf86e58d8f0475923f4f6586c79e58dfe1af234

SHA256
70f19d7426141840f5f104e6491213f9755bf44464d12cddbc101eadf245ed92

SHA512
5e180947f4267128d87d9192ba4ab065556829ff07e13d340491391225cb5b652513f645dcf795eb842428513ae33cae52533e032544390c4ff6818211a77bcc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
db620eec8b34e32acf2bdef2b661dd2f

SHA1
09a1c4a4f87886ec6761920f645869221217d649

SHA256
1e670eae479d76918e825a08028479ac7ca514f00532fd03e9127b41ded15730

SHA512
71ee7ed7c70fda5336b725dd702b3cbe826f1be3e3784323ab04e5b3067d7fb6cd458bdfa69efb75a697d8b3bf8270e275320b1af19807c9f5a100c634e3031d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1c0fb76c3ea077c029e2a8c6467d676b

SHA1
d1b3315c2887394bd8a7d53e6eba280de9fa8e9c

SHA256
9be2291c27e505e523c1148fa4c154f03b804f4d8d663467175d6a2910b1d777

SHA512
0ad466f1d73d2a3edeaf73e4396ce88471c0ba660ae5b3c41d42abe6e071023bce5cb0b8d8a64077c32c956774c6614c0fd0a98827f8e907b5b9c69d7a76614a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ec7120c0ec2e0488242c573263e70ab7

SHA1
b2af31a868f98860d34bcf4449cb0287070d8768

SHA256
b69625e090a47f6f919a4443d350f29594d6d8c7045f9f439b77d4a25c90d468

SHA512
ae51ca3b4eb42a3461a7bc5c864d67756abcf2c03d0e18c56e0ef51feccaeaf5538afcf721505d2918472e40de1dfe07370336297b0c5ee7270c3af56581ce64

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
b2e48f8f57c8d5438303ccedb3081c6c

SHA1
85df2cfde433b01f7179d741649fa56266fef011

SHA256
853e00d8fa0c4171f6cb477594a54dca914eff85a131375ee2c1a62438029b5d

SHA512
798fe7c3066475318e49ea6417831cc64ba73e19a66756392e7038953100405db7eb31be546b81fb384a52e562b6a9681c20a643f141235c25f49c971399a042

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6af7d234a7e97ee8a5797afa7852413b

SHA1
4349961415fa41a102e548812eea00684673471c

SHA256
d6599cfe32dbd287996826cfbe5f35d26b8ecfa3ba1c3ca2f317d86a9c4d00e9

SHA512
004e9ebc4ef1223524ce72c7fb5cb055dd9f8ee46d7bc8af8e3e0aaac8e2af47908b4a3e804df20e3138d6558f968407584850f88ff992a906a8457382a656a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
efc4e837670e6f91a8c8419d32e4664c

SHA1
ba37890831a165119e1f7b47422e42760b57e1c8

SHA256
102bfc538d1434b9567327a7901ca19c0dfd590fb1392bc69d21edf5804b7060

SHA512
9312992fb957bf1fcc58b98f3419aa70a7f9b141ac5dd1976e905eb6292b65d222cd01d73efc795eb0b37f759ac101e43061b629f98021faca1f4917dce10827

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2a3fc186b88be2a3c1e50d7e24245f99

SHA1
b1f28f7d98dec49603fc05a392c310977c86a572

SHA256
870ba253acfd1b463e588fc044725a70928dfcb8c91a0811e1ce4b9d6eec22b2

SHA512
93e2f707990576ed505f8002d05d677a2ace90ece8529a7d2d9ee999588ba2deb0c9a5d74a992099d93b9ed736c6d9218c8b822f76c515bbbca3fc79f0bdb83d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e95d0f3acf8ddc08fa0fada7627b5a17

SHA1
007d4c897b56cf3dcb18f25235ed2e69fd0e54f3

SHA256
ac17e93fa57237a628ea06a08961aa2a3e21231159836df8ce17da09ca9d500b

SHA512
e6f3df4ccb11d4292eaf2952807770e1c0a1e63bbaeb737786827741eed635e94c0cfad77b3430c19ab7d0f735f9224d6bbcdcbe13666b45410035a3093e0078

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e3507d3f81631d1c17ed8e72e796c5c5

SHA1
f52cf66c9cea6c7bd77d974eee798a9886396a2b

SHA256
e6e9e665c823f7d05c8ba3d8c4b4d395e2f1929200859502b2c75befb8571040

SHA512
20f8a89c348da93d852c6d6a28029179a1bb94478a2fa5db5069c4b88a8027f748742017fda6a096627b13773d65104a8129f5475436452159ef06f897590504

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
864ffff41e3c145af83b1547043d2613

SHA1
25e62e4c049f689a56dff7ac128f76edff98bf06

SHA256
95d12e4f30226281a38e09ad54c6d9178c5d6d82fd5124d0a14994a602abe5a3

SHA512
b0302de3c8db06eeec1ccca48c35701232c02020ad0de5c2f402dde1cb05e214fa283d5ca69c33249279020be0548ec647c7e4d781c682b1e79c955c3d41ac62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
f0fa1c8e05c44c82a08174516c4f57bb

SHA1
deaf2520e2b73734f0569ca74cfd3f325c28b3dd

SHA256
b106af9368dcc6d8651b61b882426184a3e4f1a809c7fd63f0e5a148a74e3abf

SHA512
084036358a087432ba17d910d183457e8af3ccfbff55194b31a4068e4ced0cceca15f35d0f4e7a6f91dc4fd9a0abfd5502a7380d3c37a44dcaba1d5428c22488

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a7ee81d82c5407ae1d696f9bd52a7ec1

SHA1
2e5067f1bac7dbdd8d0189348728e2aa7ee5ad92

SHA256
533bd4682ff45e46caa021e3919e0fb2c18f924c0438c1167a6d91aec4a800c0

SHA512
a8b888ff355732e7554ab2218b9901c404d0f092dde927ad827bd213478d16abdbec2f5216f0db280b08e403e7920aabdbb856bd6347015f1b7b63c49785c3b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
084c530f331a2a82ceb3a084ac41b4fc

SHA1
823bf29c9d6276373f54f2428a8e86e6c06d98ee

SHA256
5a4bf0d2d289a2eacf7c92cc309f2d05c6e55901b1b704cb375ae643c821c759

SHA512
dfde88edc1a28e011fd2027d4511ffaafe9e0c632617e886785d65ce8dacc5153c3a6b7cccc27ffee62cd38508f12e82a4e5649c6076ed5636c0ba72e9fadc4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
83d4f8e8f0a2a23eebeba24228d52cb9

SHA1
5d25491ba01b63837b9ddec46efcf4ce13c5167a

SHA256
2745b27e63b98abd15646c5b40db8e10c408297d0ba1f4d7578679b4acfa0ee4

SHA512
058295d52fd7117fad6e8dd56b81dc5c7bcc7fe8f7a07d8dfd3dcec52771891927cad6e20cc29763972e19523db53b3f819b2948230ee39f15140183185eef5d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
623cdb41c282a1928782495929bd14d5

SHA1
48b1585572ab664df081d8db7e3a4eb4c57781d3

SHA256
c8a32db105cfe465218355eb1a800728341e11e1982adf19e54f07a9c2d64612

SHA512
de1e97d26f546b3c19e1ba361d8d0c1e5a394b06808068b215e3eb1ed839d30ab95d892bcd0e9f43c889e06545bf6df59d9f2d37bcac1148c1218d4c24702aaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
354830a6c1d009c8ea2503a9033581ad

SHA1
abbe24e4fd7226766fa8bf5c7cedf0def8b6c8ec

SHA256
77229a60bfdb62d9b3d4677370a039bc2002513336ca50e2a2cbef66e66ef158

SHA512
3bb1cd287893ce10c53454f13e13f02276dba2b7bbf20a1dbf46463027f8717e8e32a535a1064a6b15b19dad7b55b123168204df78d584883181ed46492b2701

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
90268ae95ab845cfa38846b2e1719ea8

SHA1
dbe462c5eb191e41e9e9b333acc8574e538a26c5

SHA256
693ad2d5587c9010bb1793660fe70916317bbc3cf931a04b5ba196a2aa24b0ed

SHA512
ce5e6cfccbbfcc6fe259051c91a19f91a58a612aed362258b867c062a7f2929f1ed1a33b2393eba69dd68151382240061fdf787a50a62e30b649bafd30e44a82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3042e2a0e922baf8b6d9175f64e09401

SHA1
adaca8e76a45b376fc54ee46c2ad67c43d30f1b8

SHA256
0c76aa447636bbe2701f1ef61b850680732ac9b8fab4edc475b2deb87c159219

SHA512
0e5ecd4e9935c634a3097b8489a9ca0b62713b4462cf2b306eb36fc02b0f6310fa2b7b6a5184b0b493062ea0d1c1f900011376a68000533c3ef714c0040b9483

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
09bc4ba6b6d8a9c27030b5fbecfe73ab

SHA1
c5eb03a36724f472685edb957f9bfa6e9af991b3

SHA256
3ad35b5cb6d0807dd28c7f0a7ba24d0c89724e096e5a95955a13a0cabe227957

SHA512
d3f0b75d91cf5cfbf14ba826386aad4f1c5567dd98ee1e61e08541e21da5e442d91a0ef4f3342bc28743afeb291a542c1fdd1b8a2320bfb2d929d8a89e29eecf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f4c0.TMP

Filesize
874B

MD5
8a5f86bdfd058d91908eea73f8a267ff

SHA1
1257d738aaf567f3b8305cb2b05a40616d7bb994

SHA256
9cbb9baa6e1d8d7bf568ba859eceec0c3d83ec5a87d9438159b6b781bc83e577

SHA512
389891bc1fd3711e80e57398f341799fa0a1a8edb9a727c4a2cda0a4d0e6a25efab095e87e43b28b4d3a5eb231a4004afa30eccc35f3513985589402620b9bff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f58bc3da17f8cb7e01f09f658e9fba1c

SHA1
fd89877fa4233b4c0a7680f2eb826f47224802f7

SHA256
d24cf761f645ac86c1b434028558a387ee38550eb1b4a2203cdfb4ed65995f50

SHA512
63cbfd0e86966ebd9d95d764262f10c1d79f3016ba13169607b73b6f43bc40a453fb054025a996f5e078ab2a324e550754d0ba2999cbb418f3e150556755fd5d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
7818ecbfa076b726aa204545cc05e111

SHA1
f87487cd3fc614bff057953eee88669273d31ba0

SHA256
1ef150ec138d331adf2ae347445609ee64f3f2b0eff772dd451da40dd79fede6

SHA512
3a5c26ae80f322ff8b7740181d266a0636cb4277432e246238bcc2bed81b12e7d3d561080e2953514011433af2cf0a813a12d888be5e333c15a826aa5ca1c5a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
035d3b7800ec0ddc3fc00a26e165e92d

SHA1
524a27ef603cd9922a86c496b8dba1e2a3591e95

SHA256
58ffde4081c50f2a423cf3850bf9ebca213f47028143de92c23e9184f1587f25

SHA512
6d2030b05d2235557df3d3d76f1266e6c0306862f77f8343f565e31f6c7c8a41e0c884dae1b36dd3f3418a1df6cd372af311d01dbee4468c3882ca2cafc699c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
ea264c214667fa57bb44cd1b6f5db477

SHA1
3b015977f9dd0e6caa4c9c162e8efc3e5552c93e

SHA256
20ec7b36be6dc12c7f18ac0ec4e611da0a353f7afa8662d780c83639175ef1c6

SHA512
2e01859ad727a5084b9564735888b37a28bef821ef64075d063a2bb53bf70fd21d32b16142ba700ec98597f444f5032cab1c41009d72dfbceb1603231c390488

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
c44017890f5a63fabaf0ddf8396e6cfc

SHA1
5efa61cf0eaa4dce1b095f25381402c516714264

SHA256
40e4aa4016bf004da6332659270f17721a4917cb765d78b5576ed70815b57a63

SHA512
c9c2c58b35cbbe0c8f95016bc3edc00532d07ba6f317303e7fba3cd1fe4fcea51019fad3653c0e93a51375fd48281d315c8a23ac6d9d98198a62afec393d61fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
93381d4d6489e21ccadbd5b11ca99a7a

SHA1
bc5114381857d79bc594dbd187749f9486c51af5

SHA256
776afa41fcc0c808e2962a1a24d704800cee9bf96709a67f40527b786245feca

SHA512
3dc93190148a2386a79357709202b40940d511431c9c5fab732cd4fc8137bb29e903d9117ab015c779f4b2b1d5218eef9efb72dc365a2f6d4775d7cc47500fe0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
31278ca57e0aacac84cb0d7082d069ee

SHA1
b6d06266e431c9c13356a4d99b6af4f6b76f5d04

SHA256
0f683fe248a2eb69ec5c0e62d1650fd9128bb9c3380b4252d4aac987754af779

SHA512
4bf7338f3d20a1e6776bb6502a8c08cad794f669857a31a137d766b1eb915a146b6a54c546495d33d5f2eb950459d39095562f718df73d067fff765654660d28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
0dd1b04f1bd28d5d891039438767b72a

SHA1
a81f857278d589b0b53047cd8f58205ae7bc74cd

SHA256
44a28f0db061077d37d3b12342941d8dd1ff31831d7ddf7034370b9c79b2c618

SHA512
30d137242617779a34cad46c231a4fcf00303033ad5ef3ad5b2bae5b46248a71ebafb4b5d6b0dccdfd343781c2bff77b0bf31fd32df9049a5c2a92f9af97b543

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsc82EF.tmp\INetC.dll

Filesize
21KB

MD5
2b342079303895c50af8040a91f30f71

SHA1
b11335e1cb8356d9c337cb89fe81d669a69de17e

SHA256
2d5d89025911e2e273f90f393624be4819641dbee1606de792362e442e54612f

SHA512
550452dadc86ecd205f40668894116790a456fe46e9985d68093d36cf32abf00edecb5c56ff0287464a0e819db7b3cc53926037a116de6c651332a7cc8035d47

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsc82EF.tmp\modern-wizard.bmp

Filesize
150KB

MD5
d8d29ac4330a252c15fb48d9758aa378

SHA1
21ced4f2220106e592b2edc6ef5756f26c12f588

SHA256
42f0da3301c3739d99de30e1a58ff39baed543c3e0447bce9c15f8a95e8b3090

SHA512
4f4ca9d3653a4587c6080a4e8827dbf274defade44cd9a7432c94828ee19dc89e3bec00eada5650db0b0f22bcb28bfe459378d2b19cc90d9fabce19a1a5b44a7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsc82EF.tmp\nsDialogs.dll

Filesize
9KB

MD5
1c8b2b40c642e8b5a5b3ff102796fb37

SHA1
3245f55afac50f775eb53fd6d14abb7fe523393d

SHA256
8780095aa2f49725388cddf00d79a74e85c9c4863b366f55c39c606a5fb8440c

SHA512
4ff2dc83f640933162ec8818bb1bf3b3be1183264750946a3d949d2e7068ee606277b6c840193ef2b4663952387f07f6ab12c84c4a11cae9a8de7bd4e7971c57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf6215.tmp\AccessControl.dll

Filesize
13KB

MD5
9e7d36edcc188e166dee9552017ac94f

SHA1
0378843fe1e7fb2ad97b8432fbdcb44faa6fc48a

SHA256
d52a83c2a8551cebf48ff7a8d5930be1873bce990f855ccab4d7479cfeb22e3d

SHA512
92c31355cd124ba28c0ff9aa8fa34d5db9db0b093edb8978bc3cf94e1f72d526603d5d5c1e221dcb2ac6648bc420f4df9847c2b1e71046384d827814a77d1783

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf6215.tmp\SysRestore.dll

Filesize
5KB

MD5
da046184a8d7269a0e138b0b0b9b2eb5

SHA1
d9bc5ea397857e17a86f80df1e50615eb6859044

SHA256
c5e335bd19fa798f120287fe3ed920296f899223942fd6b987585a765f0adec2

SHA512
9ee6965ac931839a5d61b4ed64bb3bbf434dfd10ff086c38a998ec6714018b5491da7e5c29e4f7dd7fd4a93b2f285869b20f88b4b0194c9ba7824ff7c9f03c80

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf6215.tmp\System.dll

Filesize
11KB

MD5
fccff8cb7a1067e23fd2e2b63971a8e1

SHA1
30e2a9e137c1223a78a0f7b0bf96a1c361976d91

SHA256
6fcea34c8666b06368379c6c402b5321202c11b00889401c743fb96c516c679e

SHA512
f4335e84e6f8d70e462a22f1c93d2998673a7616c868177cac3e8784a3be1d7d0bb96f2583fa0ed82f4f2b6b8f5d9b33521c279a42e055d80a94b4f3f1791e0c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf6215.tmp\modern-header.bmp

Filesize
86KB

MD5
c493cb5a2e37620ee28be3665a29e84b

SHA1
c29d5d793953871935bc2a253bcedf44b9d7565f

SHA256
123918b9bc59785fa8ff2142b20d537cd1b09848ba5d88e201e70510b74be295

SHA512
21e09e6092bad24b7a049651a1874b7e7e4b12b3ee60d2199e6852f4540d7e5b1c46d64ab591460d58f3f2227d35de6991470795f7ecaeda662b8f03c7897c54

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf6215.tmp\nsExec.dll

Filesize
6KB

MD5
09c2e27c626d6f33018b8a34d3d98cb6

SHA1
8d6bf50218c8f201f06ecf98ca73b74752a2e453

SHA256
114c6941a8b489416c84563e94fd266ea5cad2b518db45cd977f1f9761e00cb1

SHA512
883454bef7b6de86d53af790755ae624f756b48b23970f865558ba03a5aecfa8d15f14700e92b3c51546e738c93e53dc50b8a45f79ef3f00aa84382853440954

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsf6215.tmp\nsRandom.dll

Filesize
21KB

MD5
ab467b8dfaa660a0f0e5b26e28af5735

SHA1
596abd2c31eaff3479edf2069db1c155b59ce74d

SHA256
db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73

SHA512
7d002dc203997b8a4d8ec20c92cd82848e29d746414f4a61265c76d4afb12c05bce826fc63f4d2bd3d527f38506c391855767d864c37584df11b5db9ca008301

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
12KB

MD5
983e4e6d55cc0e82d9bd408b79bfdf53

SHA1
ccccd6ee17cd8c2675e170acfce8a4c0336fc9d3

SHA256
719e683d74fde3a622f7eb0d13d0fccb8fa154dc421c91ae0d05f4ae35a97476

SHA512
bfd452d776a9fa4abfec00e2f89610ace2e8e972e606e750f84c0c8c5b4a5beb8c885e09dedf99dfdbc543f50788e08c1935bc00e8ff53d7f1dba77165478cb1

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 2975.crdownload

Filesize
213KB

MD5
ffb1e593085df420c8373549f55b58bc

SHA1
89ea8dc683c4d2fe114383a0ac6c1af538dea1b2

SHA256
d00255376cc7b380664f309b40cb115c319e0ae3935aaa14276e144318d575fd

SHA512
94646a09ff072565f4f69b3962a2dc81752d886f00d396bdd8c54c9ce088f8a010c52af78da98110e1f49a7893a30af7bb5fd6fcc726b50c8bd08e304c782cbe

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 323581.crdownload

Filesize
128KB

MD5
a0bdce2f937ffbb7ba548845b24749c0

SHA1
b79bbd469ae9cf3bb89adb354cd0a31ce8aceebc

SHA256
62f8364c46300bce2e75c4cc65039de3f060b854764dd90f0fa656efaf31bea9

SHA512
fd36fca722a6ff0b280f212232d92810f41e55d3832ddb14aa9eaeb269da8842ccb57709695860e502a0dc6529fcc63fdfd72de792b795b0d5f267deb45e3ea2

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 485490.crdownload

Filesize
56KB

MD5
a1f722324492fda51077449ec2db2827

SHA1
e4d8d27d77f8c2f5282a899a48184c40939c1665

SHA256
fc2ced1d89845dcfae55b6e854cd0e622fdf98baeeb4a67a60852ecd1212f93b

SHA512
6c30ce6a2055300990a951ab487039d92985271a06123d81864495bebc88fb6790be81397f729be4dfb2667d5bad506f51ce93426e4f9369f93fe5c832d8c9e9

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 485490.crdownload:SmartScreen

Filesize
7B

MD5
4047530ecbc0170039e76fe1657bdb01

SHA1
32db7d5e662ebccdd1d71de285f907e3a1c68ac5

SHA256
82254025d1b98d60044d3aeb7c56eed7c61c07c3e30534d6e05dab9d6c326750

SHA512
8f002af3f4ed2b3dfb4ed8273318d160152da50ee4842c9f5d9915f50a3e643952494699c4258e6af993dc6e1695d0dc3db6d23f4d93c26b0bc6a20f4b4f336e

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 578441.crdownload

Filesize
32KB

MD5
715614e09261b39dfa439fa1326c0cec

SHA1
52d118a34da7f5037cde04c31ff491eb25933b18

SHA256
e1dfc005d5403fb2f356276f0abe19df68249ce10e5035450926d56c2f8d3652

SHA512
fe905c388b0711f54941076a29b11f2b605655b4a3f409d9f0f077f2fe91f241401035310daa490afb6df50a6deff5456be5ee86984e7b9069506efa07af51ae

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 754848.crdownload

Filesize
17KB

MD5
4784e42c3b15d1a141a5e0c8abc1205c

SHA1
48c958deba25a4763ef244ac87e87983c6534179

SHA256
9d355e4f9a51536b05269f696b304859155985957ba95eb575f3f38c599d913c

SHA512
d63d20a38602d4d228367b6596454a0f5b2884c831e3a95237d23b882abd624de59ea47835636b06a96e216f1decf8c468caacd45e5d3b16a5eb9e87bc69eb97

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 772797.crdownload

Filesize
72KB

MD5
da9dba70de70dc43d6535f2975cec68d

SHA1
f8deb4673dff2a825932d24451cc0a385328b7a4

SHA256
29ceeb3d763d307a0dd7068fa1b2009f2b0d85ca6d2aa5867b12c595ba96762a

SHA512
48bbacb953f0ffbe498767593599285ea27205a21f6ec810437952b0e8d4007a71693d34c8fc803950a5454738bea3b0bafa9ff08cd752bf57e14fedf4efb518

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 78552.crdownload

Filesize
44KB

MD5
e6f8f701d646b193139cf0a92229455f

SHA1
b7747d41fcf52c3611af1153e46183dacbb3c709

SHA256
7e89fabfdbe214bf6a6f9730f3e451e69f752b62bbd54c0a81d2aae2320abd2c

SHA512
135d69ed4b3acdeaf45639090cefd48fa02f9ff1fb168d249717d0e2d3295530b697d8ff3fea84fa20a66aeb99437e5b0f2a2c3936f2a109c1068816263003ae

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 802311.crdownload

Filesize
44KB

MD5
6513e97cffb6656fd7b5a29859fe47d3

SHA1
9ea95b90f501fa4b1fd4798622e7d736413d56f5

SHA256
efb67be90882ded2d3e53e463ae175a4b4b5229ca6929b835fa7dd4687801144

SHA512
87b34e2f980f446b0372815ee54942d42439c6b063f934f78b8ac1f8f04c9a8a48a2674621e83f62d0d2eae59f134a9eb6e033c698da56ddb8b3919d1f4e59ec

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 915336.crdownload

Filesize
33KB

MD5
df24e1ccceb3c75dada950a1c1abca4d

SHA1
dc8120829a5593a3246d7bad126420282feaabca

SHA256
910c03d210381f0443bfcefe682717f28378dcfe5415071dd127a9837a97b0a6

SHA512
0df46654815eaeb13eca7e2bcd0fff6c62f34ddebe237dda41fc8dabfbf3512ceb12ef06a7c2bf9fcc52e0a4f87a886743b541d5b5b616eb9954e83892c429c7

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 950367.crdownload

Filesize
128KB

MD5
7bd8a009b84b35868613332fe14267ab

SHA1
d36d4753aab27c6c5e253b9926406f7f97dc69a6

SHA256
56511f0b28f28c23b5a1a3c7d524ee25a4c6df9ac2b53797c95199534f86bbd2

SHA512
ad8e121f601f6698d720181d486da828781f729ca7880fb35c6fc70f021197e4a508dc46d980108a168ef2c6c89a62f3140e676ff71a1e40ea3e397ad0c63261

Download Submit
C:\Windows\SysWOW64\regme.reg

Filesize
126B

MD5
1065f6f41c70e40297555b6d1878e823

SHA1
18b6b3b6da306b12c7b1f197d6242d2f66703023

SHA256
ab59535ddcea09a82c549ab4f72e0459cc57e41f5b887c42afde0a1dc1ae9947

SHA512
25aac67f601ad21878bd0c92bec8e68433dbdb05621f74d5d23c0b0db1960313e695ce6082abaa82e7ab922323e1fbdd0f9a484ae2cf01abecf431cb4bee5ea8

Download Submit
C:\Windows\system\host.tmp

Filesize
79KB

MD5
820b97429e4153a743708b376807ee69

SHA1
824e6c83c079073139211cc8e77d40b372156d27

SHA256
57a0279e3b6b158404cfbf5070e33b41963e288a7bb230382b1d3f6116299c75

SHA512
8e94216ac0cc489f8ef44705dc4bd7072fd921eb2d49ad0fee9a5eaa7dc71801b58172fe48f2ad3be7ae136fe2ceeb5717936231aaa04c1393b435200dfd304e

Download Submit
C:\pr0n.bat

Filesize
285B

MD5
19504b841bbd9c621519493ee12d7944

SHA1
8caad20393431b8b092916061448faf0f5101ac9

SHA256
458200dfa886c873c2f13b2c997a0e8ae0d996fe1471aef3dd0064cacc0310b5

SHA512
6bdc08cadf95ddefce8d534951ae0928153c59865d5a8fb63d14903c45af9a37ba93eb3b2f48958191afdd1c557ceb471d8c3157c581c6404697d35b0026233e

Download Submit
memory/860-2438-0x0000000003900000-0x0000000003912000-memory.dmp

Filesize
72KB

Download
memory/860-2439-0x0000000003900000-0x0000000003912000-memory.dmp

Filesize
72KB

Download
memory/1732-636-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download
memory/1732-647-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download
memory/2120-896-0x0000000000400000-0x0000000000420000-memory.dmp

Filesize
128KB

Download
memory/3268-661-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download
memory/3268-660-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download
memory/4180-674-0x0000000000400000-0x0000000000415000-memory.dmp

Filesize
84KB

Download