Analysis

  • max time kernel
    33s
  • max time network
    35s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    04-12-2024 19:26

General

  • Target

    avira_spotlight_setup.exe

  • Size

    34.2MB

  • MD5

    972eb9126d92fea2626690bef903aad6

  • SHA1

    9def5004dc267f77f5cfb7070e85d330b8e33638

  • SHA256

    858c355a5723e866dd9379765f2672976b4a097d836e8b5a2cd865f9819492a2

  • SHA512

    2283f4ab903c98ccfb0a79154d5ad32b4af1ac4e8e7d71d583bbdbbd0ca866449e6c7658a8ac6b1e6061c448fa34e3b0a84b84efc023e5b2c80ca71c6aeb048a

  • SSDEEP

    786432:CxgDPaSv7Kbd46LHeyvLXGx5ncGmGGxqe6PqiDViD:JKbd46bC5ncz/xy7DVo

Malware Config

Signatures

  • RedLine

    RedLine Stealer is a malware family written in C#, first appearing in early 2020.

  • RedLine payload 1 IoCs
  • Redline family
  • Creates new service(s) 2 TTPs
  • Checks for any installed AV software in registry 1 TTPs 64 IoCs
  • Drops file in System32 directory 5 IoCs
  • Event Triggered Execution: Component Object Model Hijacking 1 TTPs

    Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 5 IoCs
  • Launches sc.exe 2 IoCs

    Sc.exe is a Windows utlilty to control services on the system.

  • Loads dropped DLL 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 26 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Internet Explorer settings 1 TTPs 15 IoCs
  • Modifies data under HKEY_USERS 49 IoCs
  • Modifies registry class 40 IoCs
  • Modifies system certificate store 2 TTPs 64 IoCs
  • Scheduled Task/Job: Scheduled Task 1 TTPs 4 IoCs

    Schtasks is often used by malware for persistence or to perform post-infection execution.

  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 8 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of SetWindowsHookEx 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\avira_spotlight_setup.exe
    "C:\Users\Admin\AppData\Local\Temp\avira_spotlight_setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1928
    • C:\Users\Admin\AppData\Local\Temp\is-28H1D.tmp\avira_spotlight_setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-28H1D.tmp\avira_spotlight_setup.tmp" /SL5="$301CC,34912022,924672,C:\Users\Admin\AppData\Local\Temp\avira_spotlight_setup.exe"
      2⤵
      • Checks for any installed AV software in registry
      • Drops file in Program Files directory
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:680
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "AuthRoot" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\AddTrust_External_CA_Root_2000.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1740
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "Root" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\DigiCert_Assured_ID_Root_CA_2006.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2820
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "Root" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\DigiCert_Global_Root_CA_2006.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2740
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "Root" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\DigiCert_Trusted_Root_G4_2013.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1108
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "AuthRoot" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\Entrust.net_Certification_Authority_(2048)_1999.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2800
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "Root" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\GlobalSign_2009.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2096
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "Root" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\GlobalSign_2014.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1564
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "Root" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\Microsoft_Identity_Verification_Root_Certificate_Authority_2020.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2616
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "Root" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\Microsoft_Root_Certificate_Authority_2001.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2208
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "Root" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\Microsoft_Root_Certificate_Authority_2010.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2628
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "Root" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\Microsoft_Root_Certificate_Authority_2011.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2932
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "AuthRoot" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\USERTrust_RSA_Certification_Authority_2010.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1864
      • C:\Windows\SysWOW64\certutil.exe
        "C:\Windows\system32\certutil.exe" -addstore "Root" "C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\VeriSign_Universal_Root_Certification_Authority_2008.cer"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1640
      • C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
        "C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe" /install
        3⤵
        • Checks for any installed AV software in registry
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1912
      • C:\Windows\SysWOW64\sc.exe
        "C:\Windows\system32\sc.exe" create AviraSecurityUpdater DisplayName= "Avira Security Updater" binPath= "\"C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe\"" start= delayed-auto
        3⤵
        • Launches sc.exe
        • System Location Discovery: System Language Discovery
        PID:1292
      • C:\Windows\SysWOW64\sc.exe
        "C:\Windows\system32\sc.exe" description AviraSecurityUpdater "Avira Security Updater"
        3⤵
        • Launches sc.exe
        • System Location Discovery: System Language Discovery
        PID:1888
      • C:\Windows\SysWOW64\schtasks.exe
        "C:\Windows\system32\schtasks.exe" /Create /F /TN Avira_Security_Update /XML "\\?\C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\UpdateFallbackTask.xml"
        3⤵
        • System Location Discovery: System Language Discovery
        • Scheduled Task/Job: Scheduled Task
        PID:1604
      • C:\Windows\SysWOW64\schtasks.exe
        "C:\Windows\system32\schtasks.exe" /Create /F /TN Avira_Security_Service_SCM_Watchdog /XML "\\?\C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\WatchdogServiceControlManagerTimeout.xml"
        3⤵
        • System Location Discovery: System Language Discovery
        • Scheduled Task/Job: Scheduled Task
        PID:828
      • C:\Windows\SysWOW64\schtasks.exe
        "C:\Windows\system32\schtasks.exe" /Create /F /TN Avira_Security_Systray /XML "\\?\C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\SystrayAutostart.xml"
        3⤵
        • System Location Discovery: System Language Discovery
        • Scheduled Task/Job: Scheduled Task
        PID:820
      • C:\Windows\SysWOW64\schtasks.exe
        "C:\Windows\system32\schtasks.exe" /Create /F /TN Avira_Security_Maintenance /XML "\\?\C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\MaintenanceTask.xml"
        3⤵
        • System Location Discovery: System Language Discovery
        • Scheduled Task/Job: Scheduled Task
        PID:564
      • C:\Windows\SysWOW64\schtasks.exe
        "C:\Windows\system32\schtasks.exe" /Run /TN Avira_Security_Systray
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2248
      • C:\Program Files (x86)\Avira\Security\Avira.Spotlight.UI.Application.exe
        "C:\Program Files (x86)\Avira\Security\Avira.Spotlight.UI.Application.exe"
        3⤵
        • Checks for any installed AV software in registry
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Modifies Internet Explorer settings
        • Modifies system certificate store
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of SetWindowsHookEx
        PID:2636
  • C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
    "C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe"
    1⤵
    • Checks for any installed AV software in registry
    • Drops file in System32 directory
    • Drops file in Program Files directory
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Modifies system certificate store
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2364
    • C:\Windows\Microsoft.Net\Framework64\v4.0.30319\regasm.exe
      "C:\Windows\Microsoft.Net\Framework64\v4.0.30319\regasm.exe" /codebase "C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.dll"
      2⤵
      • Modifies data under HKEY_USERS
      • Modifies registry class
      • Suspicious use of AdjustPrivilegeToken
      PID:2884
  • C:\Windows\system32\taskeng.exe
    taskeng.exe {B117E3DC-47D8-4E77-869F-7A995DDBCB96} S-1-5-21-1846800975-3917212583-2893086201-1000:ZQABOPWE\Admin:Interactive:[1]
    1⤵
      PID:2168
      • C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe
        "C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe"
        2⤵
        • Checks for any installed AV software in registry
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:840

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.dll

      Filesize

      169KB

      MD5

      b9d53f6dd5b806ba580115242a8562f5

      SHA1

      921905c004ae4dc038fd00d867c1784dfed2c115

      SHA256

      4f0bf6c14e4abd50a3ddaf078063c8168c529e6fb26b258f3dfa05a1722e10be

      SHA512

      72e53484c5405d812ad94aa90a508c2a342894a484af24ed5935683844fad1b1576f8271310128db613ac0a63035dda9653d130a59f034740d24b4a1e188a1f5

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\SharpShell.dll

      Filesize

      451KB

      MD5

      12f5d0daf6da438c9165729cfa3b5504

      SHA1

      0b6758c687ebbab02b8793af906d18545dc3d907

      SHA256

      da513b45066186f3771394c37958eccf6decc4a6893ea200b87333a77e1d76d8

      SHA512

      bb91caea8ebd536054b7d8e78eefc656c21368d07c1f57cfe7b90986052479e369405f34c57e18070e33b1091f66ae3a6cfb920823456b10f0dc9b32fa7f3035

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\System.Runtime.CompilerServices.Unsafe.dll

      Filesize

      18KB

      MD5

      6cff1bc1824d5a17330e019b4e8052eb

      SHA1

      3319a7b426c3290e71d9e662511be220cc24b3ca

      SHA256

      6619727ed1e81f53e2f4fb3ea31c4d73ce5e3174e67d346d5c55aa4438b25bcc

      SHA512

      73b622007810b8a3ee9c517bf6d47186ccc4731ddcabfab92d48c137b61305c0c8505f5c3995f409e65fed97cfcac096497b5653d4f59bebff24a652818b5def

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\System.Threading.Tasks.Extensions.dll

      Filesize

      27KB

      MD5

      e9614fcfdadf7d98b6b478c1001c408f

      SHA1

      d96abdfa11e890e6aac6d6235439b299f4e5ca92

      SHA256

      7a6b76825981010a4943e04f78dd15b4724579b58a1dbce08e1dcf532751c4f0

      SHA512

      41b1749e66d2bb87c08b03333ed61b784174c4deab81b1200e833a6b805c002547ae906e9502554e16a0c59bdc418537438fc54c3e9384ff7953b3f0ec01f289

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\de-DE\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      65f5d9db2cb9447d7c202d20d35745ff

      SHA1

      e09975f532877fae556a3df95d31e42be3a3209e

      SHA256

      4129857c1ebc44fe2520c7e18c8d8cd2675cd1b9fd871f3010a863309c149df0

      SHA512

      46d6970973ee467892c08777e724c80a32484850d74b7fcd4eaaa00114ca8f8c610c64547f04c8141dd797f18ab46c76904ee6b4a91131fd8b241fff0fd242ba

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\en-US\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      c9a23c592c13b1fb7a1d3ab6ed46aec5

      SHA1

      de1563cc959b4a1ada4fbf305c7c38d0a531bc68

      SHA256

      a2af3c49043a5cac31389a00e4783dfddece29bbb853a7c1033195bf066ef114

      SHA512

      0289a023214d5d57eeb7e1f3e98ebbc713ab051f87d698b56237c8c49cf20b741cd0c40bfa5cbff056344cd4f4f3acd4302a9befd1edd46ecf670a9230c97c96

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\es-ES\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      fe3af7525146c83aac42f8106af08edb

      SHA1

      7e6a4b2497e60e76cf4298f1fad0c24627882f6c

      SHA256

      d13c2f82060e37117bc2811b940654aa4f6d5fe7614cb3eec4441fbf2fede607

      SHA512

      0adeb8afd6132006be77c19d946f01f8c7aec413a0512803813202de51de9980efbba3df02070bf56350aa02aacd527a9a0ad9f340181b2ba9241dd7ae9fd606

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\fr-FR\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      650acbb7c5c30701ff5d6f8041ada45b

      SHA1

      f285470b217abd8f4f355976133be1287f7b2ca7

      SHA256

      66d0da7c1558c17dc98ade5c6165977775ba862d61395de5e78523467e2aced8

      SHA512

      a758464383402f8cdb386f2de4e0ca6c239ae39d7cde90817003a7ebd543ffd592851f2c1f27494b9e15ba2c449a0c365d6b6597267b6297d59c7a515f64e7b7

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\it-IT\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      6feba78b1d4c91e93632a8a0cfdc4d89

      SHA1

      fb0b03c29e9e741f8b3a97133a506df9c8ce81fe

      SHA256

      d3206cc46451bc7e9b22e99f8f63def0b688cd817ddd30b0d2ab4be8f663c587

      SHA512

      7531d43bf95f2a050b3ac6d660dda6478d447e8e394d15563612321bd31d18d066a580744ee75f67ea2e7a2a4bdb359668f54aaf91b68b6a161237691b929dde

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\ja-JP\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      040cea3307599765a48b5c72387329fe

      SHA1

      bccb9b1d9f4a33e5ba727a72bcddbca324c6a4e2

      SHA256

      4565dd3dabcd3311fb36736e8fb7ae9c19638cd83502ece53377986afaef3851

      SHA512

      7cd24225cc7720189556072e37aae16b5c2e1dc73206c28000e68748bb14e74165e507bd45a0012d0f6c153558c965f9ce8d8b32fca90ed7ad83c5611a7a6510

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\nl-NL\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      122701eac2d49ce91a6f10ca83404f54

      SHA1

      5d870d3182a11c8b62c6bc53f4bf09df40a1448a

      SHA256

      42c72ff30cc9e5af0dc40d11ac246024fa50befede452e28bd3d088dd365b20b

      SHA512

      5c5a3b2e942f2efc270c3d15cf7ea7f6507ee741c4b5a00e416cd83ddbc54043059ac63614bd23f10c4ea40367c56438d358bcb7f343d8375311a45cb4bfd70f

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\pt-BR\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      5df9d9ee5fbe6b683eefb8b6591b9a38

      SHA1

      0056ccfa1b199594f318474229c44fc03aa1ee13

      SHA256

      21532af9e30ce98dcb5fbab874123b237f8966e37dce867e3701e806e4d745bc

      SHA512

      0db3cf25848ecd1d626b6f88837c87ed6091848d09eb67e3abb8ffab5ead7d020bc0b74cfc422cb960935b5d727b0b8f20de18319600d75a04002fc1881ccac0

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\ru-RU\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      fcc375995550d6fe68b197ad8d84e90b

      SHA1

      3ea8aee1b0b1cabb08f2e8f3a010ffae819e4b2e

      SHA256

      b46c6744c6d25a790afde591c6b19508c6ece4b55c90964041f3ea42798ab401

      SHA512

      072222fb0fc8acdcad21a4945aba19369386490f90de47395cae1c29f62022d232069238d2c869c33342eaf9494176f696e4a10874c8531f0ae60406f7a34164

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\tr-TR\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      b57782918785c0ae12410ec92d495190

      SHA1

      f6371456a8eb810577e2fa180dde57131d8ea364

      SHA256

      911265025feb1f2d02ff5f7f8b7af0d76e541a417278ebde637005ad75cbd732

      SHA512

      d133cafce2e416b3e76774342e6bfa78eb5f9e0126ec8a6652450388ac7dacf9c183abae2ee72b0f4f585e84b1ac8f4b59d5d7dc1754dc50ba8fdbe76a40823d

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\zh-CN\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      fc3f161ae40282b60c41582331143854

      SHA1

      d6981b1e1e42c38ab9d55eb0454db686672b26e0

      SHA256

      27fd20b141e962fe8054144bbc5759742554033d1fe319a874b831131b1438a3

      SHA512

      d764d489e643715f288ea13ebd20144f0a64eedbd17ebceba4d543e23c78b18a95dc88538b193202b610a16615fb0b18672205ecf0cab52da5def58e35812c16

    • C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\zh-TW\Antivirus.ContextMenu.resources.dll

      Filesize

      15KB

      MD5

      6ddfd6064f172197b362087e15fe05e4

      SHA1

      be604c28cd49b673a31d06a75af8c70d53db7e78

      SHA256

      9d10d3acad469f0ed9db4462fed1a523900e703e4a219e42dc6394f8a4e95896

      SHA512

      2002aacde72f31051048bcbb087e05e5fe00766a4911bcf3cd5bcde5d9f3a1125723711ccad0e772c90c49fc6a60435158258d27eb383732b96065da1c48b81f

    • C:\Program Files (x86)\Avira\Security\Avira.Acp.Common.dll

      Filesize

      14KB

      MD5

      271d473a99869a462e0200e1776b093c

      SHA1

      050bd3a95fc3c1a66a9fa11a7649afe95b48e5ca

      SHA256

      793dc8d33fd8190c6d87c39a860ae4d67c6f02a19b573087831b18202f8e413e

      SHA512

      8df6120445f10fd3a62b72a33f86b1969a42eae85d97154d5f030bebf68d579263be50ba4e0a9758bd9a8698e9680277d1491bebc1b2c91722d0ebab04275510

    • C:\Program Files (x86)\Avira\Security\Avira.Acp.Resources.dll

      Filesize

      54KB

      MD5

      318f261f2875d1b6ad27afd9aebce1da

      SHA1

      6230901e4b145e7ea66160e9726951931a00b7de

      SHA256

      839942ba4c0e36ad27355f65acf6520bbd6fa0967bfd3d9d6ddec520ca4fc3c9

      SHA512

      379c89f2d165a1551c459984f3aeec556499c2cc7346f4a346d5b651f5a729c44b0f84c68b48f120f8c5ddaba0bfa2895421acb7261f266dd5743ce8fa6a6c80

    • C:\Program Files (x86)\Avira\Security\Avira.Acp.dll

      Filesize

      151KB

      MD5

      93b9f3f908fd317f6400044ace1426b8

      SHA1

      28a81a9e705837007143c1933a436941bc0e3e73

      SHA256

      4c20af4eb824f54308a3d0fcb1e0c02705e36f4066a96d3187ff61cbd324bfbf

      SHA512

      6b32af4a9e63320ca20daea161c655ad58a4bcaffa8c0ecbe40cf2f41599a09bdc3306916e87777259ade6b120e2eb193e79ca4345268a49786159779d2aead1

    • C:\Program Files (x86)\Avira\Security\Avira.Common.Crypto.dll

      Filesize

      22KB

      MD5

      12d0daa2e690a67a441bd7c0c212e23e

      SHA1

      549df37123bcccf86520ef06b705469eec5aecfa

      SHA256

      db87ec95353e8ab3ca79a532d132aa8d58baa4608289b18e409a11bd7211b67b

      SHA512

      e8c47a35f102862a4719a6e02b3ab69f4d72e4750d6bc94aa9c78bd20a967729645223d9356e7c3b51d61f66d3af19b23b5d7986be89696922f8f2678f0f1c99

    • C:\Program Files (x86)\Avira\Security\Avira.Common.Guards.dll

      Filesize

      16KB

      MD5

      15911ad5c825d1c776e5ffd004694819

      SHA1

      6d11acc842ba943d168f8e4fafc0af7d1264b3b2

      SHA256

      aaee755f5e4c0850b58f7cd429297556355dc5a6918ba9708b380f4198469fc6

      SHA512

      fb2fdd6ffcfa6301d03d54279df11a961b0b69cb270a4d9fd067c9e045000e8366a94528404d345afa790c108394a0d5309febc8b9c528dab1e05ac3b0f7c97f

    • C:\Program Files (x86)\Avira\Security\Avira.Common.JWT.dll

      Filesize

      26KB

      MD5

      43ec4b3c8c31d48c1e460948cdc726fd

      SHA1

      a0e254741a96d60505eac3d6c097fe1c3289e5a2

      SHA256

      1594b4f94c986cfd2198ce79f9db38772a545d8c1434c5b4b80c35eef585622b

      SHA512

      029d77a51bf64a8ebd693f87bfa48edc048ea6ffae631e5fb4a191c36a044c2317d4ef6c43e5bf52e2115ef0167464b5772cc80e935ba17130c3a29bd19b7b50

    • C:\Program Files (x86)\Avira\Security\Avira.Common.Mixpanel.dll

      Filesize

      68KB

      MD5

      49d77cb6839e09ac1372ee9cdc3e1647

      SHA1

      48a658d959baeae511005a4b29691f278c6e8e28

      SHA256

      2a0bb25673b65cb24eb46c2c9fbf8f1fe50e1738067bceef3241e6715444b184

      SHA512

      00e349539caea86bb24a602a6b0b84bfe45110467a10ad7d4132079028382858b8255a4cb053fd2307a76693e4abbbfae8eb8cce086fa89e0d7dcf5f46a77e29

    • C:\Program Files (x86)\Avira\Security\Avira.Common.Utils.dll

      Filesize

      17KB

      MD5

      0177f91ee5a61ef55168f513fe4c6ae8

      SHA1

      2b60c4c0894389ac0177085be89dff6f4041f32f

      SHA256

      f1785075db3f0f1246d52426dd9a14be4dc6e92cbb32afe30d48a53f605642f6

      SHA512

      eff66a28255b4441a50171fffd9612b5da67556b8ff4d23dc0781da2eb335f3e3a71710b46a15c22a7488ccef521c1dc9f8787c98e09c2e3b0ee2c71f232d08e

    • C:\Program Files (x86)\Avira\Security\Avira.Common.ZipArchive.dll

      Filesize

      16KB

      MD5

      6717c0eafc0d2e1a8f76161c51ac2f0e

      SHA1

      8fc0047ce7061f4e65ca78ad61914abf22c2de28

      SHA256

      1f4f0d5a115e212b50a1217ebbc4c0529c8ca9ce27085f87d590157749e6f29e

      SHA512

      871232d9e7e9792cd698e792f7958d014bcbdf0d96a8299ac9cabe7ab5cfd0c00d4566e393795030b498cf927093a3c8c2983e9f3b6002e609e15e117e2564ce

    • C:\Program Files (x86)\Avira\Security\Avira.Functional.dll

      Filesize

      29KB

      MD5

      9960a601ceb7c6320c532e4f58e4ee8c

      SHA1

      9f81591720bfa1866d0bc41fc34959a3dadbd49f

      SHA256

      14066fe46ebfa62d05bcd587cd3686c6ff7325523108202bf49a068fbf7456b6

      SHA512

      decc53e3d6b1a293c4599e6dd2880e5e0ddb0a7fc49391982bec25d6d72e45e35fcdee1331a32ef14edec63bae1a3eb8ce2afa93e1b59b0f3cb579610afeeb82

    • C:\Program Files (x86)\Avira\Security\Avira.Messaging.dll

      Filesize

      46KB

      MD5

      b93e65daab99851b6a74217ae40d7dc1

      SHA1

      d6bdc4cfd7273484da5554252b479d88b098ad60

      SHA256

      57a47479f84447e3b1c5eb55089e873f141eb568ffdb1b1b1e284389a03caae3

      SHA512

      513ade7ccf9fc9222bc1f39a7db65b0acc67c6d26f12275280fc59eece0077156e052bce9e9495ba24389446db01c6270cf22fb29557864ed62d50051fbd925d

    • C:\Program Files (x86)\Avira\Security\Avira.Oxygen.Common.dll

      Filesize

      29KB

      MD5

      832cd343d1dea861cd025aaefa45175c

      SHA1

      cb91664df00e3d3fb24aedafcbef6e7af8f9c6d9

      SHA256

      b71dba0c68caca82d0ca202c7edfd182f2c802e7b2dcc18b805ef5a5f87768d7

      SHA512

      350e270be4ffcf6b78d96155fe2c2d1d8c2f78f9877ca6ca2a9ebef415eebc83725522885898870fd0fa28b06571d013ec55dbc343a31677bc6f0869acc3a4a8

    • C:\Program Files (x86)\Avira\Security\Avira.Oxygen.JSInterpreter.dll

      Filesize

      20KB

      MD5

      4c18be066a5aad3f3d80307f03d288c7

      SHA1

      b81a40ab9266645191f465816f4336f69ebf0fa2

      SHA256

      10f8e63f4401db71007d628b4b75d0c089ac2ecd9640835ea1a7c931c5340eea

      SHA512

      0eb5e8060b3ce7f2b87fb05e7894dc3d3c8e8d1a7312afe607174a29311fdfc5f61dee8605d9a3a8fa82ead27f02f0a96a75309a971841ff821ac046b9773267

    • C:\Program Files (x86)\Avira\Security\Avira.Oxygen.MtsClient.dll

      Filesize

      36KB

      MD5

      85b96fe3e4136da196554d8af57692f9

      SHA1

      f8935ab1debd688ed9cff03d4344c959d154fb72

      SHA256

      e614f718123c9a9c69b0a990c976b8ecc584e06f5ea451eda887bb53430f120a

      SHA512

      91c3b8405badc3e51b17b140c24c626b9fed807d6a85138f65a6ca5e03f139750f32ca336698fbf8fc73045d39ed9e2bf4b4e3332601beebb0ea27c3d12fbe3a

    • C:\Program Files (x86)\Avira\Security\Avira.Oxygen.Ncp.dll

      Filesize

      244KB

      MD5

      969685661f3912c42f0a04cb45f6f909

      SHA1

      3ac19a75e9120fab368f1734f3776399a9052080

      SHA256

      e3b90532a4d0d51de15e3972d0b3392f5a754adc76f56c6ab45af1d23abbc939

      SHA512

      adb7b59d54f731f8a463d436efa95269bb8bad647eb2271dba01f57001d7856c2e4219418ca027039e81a8c3b2b3abd41232c0b0d89c963936a0edb46e2fefae

    • C:\Program Files (x86)\Avira\Security\Avira.Oxygen.Spoc.dll

      Filesize

      29KB

      MD5

      3ac611d74f34152f657a5029f4fe8e50

      SHA1

      d7aaef731820e4fcc24412e29a60120a9206af41

      SHA256

      83a48763360b865e80bce96bbf7249605be78f5400886299b5c4f72c50461aad

      SHA512

      7da6c62d5e809697c23ee1a1fdaa461c86e47896151cecbb49fe90a276e432665c8279817c2472a4b0ec57c9cf4c404fa9160d7c78e831fe152c32c70fdfd1c5

    • C:\Program Files (x86)\Avira\Security\Avira.Oxygen.StatReporter.dll

      Filesize

      32KB

      MD5

      6f4c016b3a5a887c52791fdf902d14e6

      SHA1

      f87b09259b9824970b8f86f7e8a00843d2d3c51c

      SHA256

      7482e7dc3ef778080f722ff1035a3fe705c3b5f0a60f29047514e79cbdb92ad4

      SHA512

      26c97f558d11e4ae76c1da21e286408cee3be56b4b1afc195ed4baae453fe3d37ddf627710c36fe3a3fb667a9afacab5d6ba57a2cc6d7ce5c3f583b8ee150c1a

    • C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe.config

      Filesize

      20KB

      MD5

      7892c806b458b906ceaf5c4a5a1f3aa9

      SHA1

      ad740a85501e6ab13ebe9a27714ead200f1c9207

      SHA256

      1a09ddec40bff7d17729cdf6a20bc2358a281ff99cadf0ad156060abc65ba5ef

      SHA512

      4f92dec9b5b181ebb21bf5381aec5a93bf9e4bfde9a86b71d4a42245ee5d38123ea09d9275066a5a1943768e89e39daddc428b94291b1edba0ce96bc0ad835ef

    • C:\Program Files (x86)\Avira\Security\Backends.dll

      Filesize

      54KB

      MD5

      8c1861ba129e692b4f20e673d17832e4

      SHA1

      78775c9f0d920057c1d2d06442972a3d1e098198

      SHA256

      5c9b7c2a6435bdaee06cd92bee5b9c8b91bbe7d2430c194df6c9fccda427ef0d

      SHA512

      5f03543efc1181143eb489fcf7dd0c096cf459dc9d6a1a6fbb2e9247521dc2307dbe9a60aeddda21a1a920026992637da9b84972f8f4b29d5d56def5ad67c048

    • C:\Program Files (x86)\Avira\Security\BetterFolderBrowser.dll

      Filesize

      23KB

      MD5

      fc9ad607786f1ad0027ae7eb9eef41b7

      SHA1

      9b053d27f1344fb396b20b04f92293373ea964e9

      SHA256

      9995300fb68ab2fbff394c9fbf997132596203c8a3ad204b446240ffe9a8d49e

      SHA512

      976b2ba14af114aa66ee9913d9b4f9a90b154ef6205ad7ad06f6fce0d1b0253de7c03db39f67d586d8bd1fc208df02c86ab89151c1e01843686118cf51341af2

    • C:\Program Files (x86)\Avira\Security\Common.Communication.dll

      Filesize

      98KB

      MD5

      d9560fa8fb28431f7146a281fd770a6b

      SHA1

      30b960d3c1c4220979ce96091181f393fc6dc6e6

      SHA256

      6d0a01d37e8f912da66b23d1380806a83d77b585d3cef8605eff94a5eadab11f

      SHA512

      3eadcbbb9910b25b7bf3503ba74d4f4101f21e67af254084de49dc795b829f331f796798eb3df8bd3eeb051f0eb180d187ccfd717abb86bfd814052ecea1b321

    • C:\Program Files (x86)\Avira\Security\Common.Interface.dll

      Filesize

      199KB

      MD5

      7fc8e2eb6bb52f04f700dacbaa208d1d

      SHA1

      b156d614377662534f7e00123456915383ae1d8b

      SHA256

      3b4ac3184a00b5fa9192f3cf24e974bb80522356a155745f77947bf58554ca35

      SHA512

      cba43d01d771accca66c37518d9947b1cdf13ae08f94f5e2be2837bf48ef07de0806348b1f14f22b78f332af06d81abe5be668ba63c27f335d41681f733a052c

    • C:\Program Files (x86)\Avira\Security\Common.Messaging.dll

      Filesize

      16KB

      MD5

      521e7b64723470ff76443f0bba15c7e7

      SHA1

      1c7b71ef21d3bb352fcddb2279a098835a7ac9c5

      SHA256

      11ec3e88359901c9f58e6c0c364e77cc89a75202ac1c7fa00b192e3561cc3ff6

      SHA512

      4917518f40bedb06f1b0114fe402d104cfe6f24d8a251ed1856154ca9766602c9560911d2636b14c792d409bc9d3783d17bd8d8a7c4ddef896203d3b92a49e00

    • C:\Program Files (x86)\Avira\Security\Common.ProductLabel.dll

      Filesize

      45KB

      MD5

      790eb156629d79db386677f624b71938

      SHA1

      4b44361b30e3c8c9e54f5b5f76c4094c67fe96c5

      SHA256

      873242da1ca94f5bae022a2d313cb69816c80b7ae993718d11cf5c3dd41f78f3

      SHA512

      ae18c557562f02db35715b02bc5e1d9856b08cd13a383d3dd9b5fba05384828597625b6474bd69a6fc56fae3f343f88243f613d2b449e1d2f6edeea8b3bb5b3b

    • C:\Program Files (x86)\Avira\Security\Common.Telemetry.dll

      Filesize

      29KB

      MD5

      4c13ef3a01da3d0cf3dadea86f51e197

      SHA1

      638a54a81ca96ad8e872281389834d6f05012de9

      SHA256

      60ce8c72a04cb47be1208c4d67eb5b2a73b39c4417f9d21a47c76b383eea9bf8

      SHA512

      9017601b2037083c1515becb7a1ae333fdad16113261461d4efe59037f19db7d64accdf5e23f3ba6207443017f93afe04461c532a51b1940da64772602ea1355

    • C:\Program Files (x86)\Avira\Security\Common.Utils.dll

      Filesize

      439KB

      MD5

      e0c4877c4dea4d2178d9d9cec6a1f77e

      SHA1

      c84bb8fd0e4d9929a723f3c93aa71bbc36601d1a

      SHA256

      64f6e8c4b5e9a2ec5fbb89aa6b6f45c75621214bae78c97bd75746a8b301402a

      SHA512

      bcb99f2023402d6c7092837f871fc8941090e60160882ae0e1267a5d4b798b483bd46b0702af11fbcae8a159fc589879d25d23619dee75924949d18a504e6d1d

    • C:\Program Files (x86)\Avira\Security\DevelopmentKit.Opswat.Oesis.dll

      Filesize

      122KB

      MD5

      60352e739dd03a17736ca07b087a13f6

      SHA1

      e7d72040ab92ce6305062dc31b71b791a0f18184

      SHA256

      17d4d2e8bd8da9e1aa1c426fefdb6e0fa6750441eedf0cc20a099a5fb6de2fa3

      SHA512

      79840674b3690328f10d7856f9260aaa03966cfe58d7ed7c26eed80f8c7b8fe1a49d61c0e16095358b2730ecafd8a313c68a202cd165f6833972bfac2520e0de

    • C:\Program Files (x86)\Avira\Security\Dia2Lib.dll

      Filesize

      52KB

      MD5

      4ad614da4f0b0dc113b551cba2c84044

      SHA1

      4cd8a333a8721ed0a5b76694e341e5e910ff2a55

      SHA256

      e78a917fc64d4619a35baaf34e8e4477e0e9543ef68384442c42e63f8b00b660

      SHA512

      dcfae2683155c0afa52b87539e4bf9bea359c8eee6177b3879c3965f039c83fe7520dfdf3ca2f607554d24d27c8e446f0f5456608276ee3e6367b89627908584

    • C:\Program Files (x86)\Avira\Security\DotNetProjects.SVGImage.dll

      Filesize

      118KB

      MD5

      c37c364701bb4a540b239a8de7c69cd8

      SHA1

      8f1cf1e2ed1b8ae081d360c1a1f556e4cc465efd

      SHA256

      b8f1d7f37250b40d915dafa0f42c7c49a0d2a0d507f92a73abf24e6a41f446a8

      SHA512

      d0e098260555f57d754c1222cb43b691c9c1491c00d10ccf63dc415ccb6ea26149ab5766196d16bb07d5dc5f7380173ea83bbbec5cd63299c7cef9cf54a8cfb2

    • C:\Program Files (x86)\Avira\Security\DryIoc.MefAttributedModel.dll

      Filesize

      73KB

      MD5

      0f0f0b374a7f067aa1a8694a7df1dc47

      SHA1

      329757c2275985574814c46730519cf05a518191

      SHA256

      7a8ccf7de754070b0da6b914dbf77d0c17da4d019f363e44b856241c0bab340b

      SHA512

      78ceefd5188d681d88c3960ec566d3006793019c3ab79ab635babd71e88bd7b18bba85b0d0d914cc200ef81c8d9e982a46b97b679d49c49543f9ef3753200fc8

    • C:\Program Files (x86)\Avira\Security\DryIoc.dll

      Filesize

      736KB

      MD5

      b9c63cff858c2238c22d7665d28d3006

      SHA1

      1730050402e7cd9425a353aba9460ece437beb74

      SHA256

      a1d75a3b301f6a57ebb760929b81624795731bca775e8ff381d1df030387adee

      SHA512

      5539201ac8cc956123150e2915192155222dac4d7162e3af65ca5840bda7828fc7ac8ea9c2d56dcf3d53ac43ad6c82f9119a405d15e482d2f2f09c627a7ab4de

    • C:\Program Files (x86)\Avira\Security\DryIocAttributes.dll

      Filesize

      31KB

      MD5

      ed36d9326419383ca184637f315f1225

      SHA1

      171a5100dedf6438917a2c4a977a720e5f92491c

      SHA256

      2134ee796c25dc57a20a6fdb8acfe980e65b24b2f983994a6bcce1010d965640

      SHA512

      e34cf5697017b5993be8d38d77bbd901ef2be2a994e888b9fe0e21173527f9dbec7c79e5b22fae0d29a4623da6a8688205d0dbe5a822e85f653e819ce6043ce1

    • C:\Program Files (x86)\Avira\Security\DynamicData.dll

      Filesize

      730KB

      MD5

      04770aea43497ce781e81306b6995cbf

      SHA1

      fbd0e570e009d1d5ff6fe574c0812981bc2d4e9b

      SHA256

      2ce632f0c94bab555e7c9f80cc667fa82639b3ed71738135fc3533959d4cbb63

      SHA512

      0aacc20c052620bb2ad47ece32f5a1fae2cfc300bcc2c3addcba53980ec1248c3d8c0f8f453d8f88545f8fc77b31e50d1c347fd0b93b369d83fab2f27f7ea2be

    • C:\Program Files (x86)\Avira\Security\EndpointProtectionClient.Net.dll

      Filesize

      84KB

      MD5

      3af143569c11926f8234512961f146aa

      SHA1

      896fca1611a8b2d319f6ea204bb7eb1f9e15a109

      SHA256

      29aaaf1426a2e1c64b5f678e457d012970eb51fc961142039f02d7c2ffb64e92

      SHA512

      f9e70a7c2e01b80f458c23402f5cefe17cc48840a2a4f307667b16419385fc188fa17e457a540f1ac1c439bf99313dedb51c7c2b01bd445ae3b46df2c696d838

    • C:\Program Files (x86)\Avira\Security\EndpointProtectionInterfaces.dll

      Filesize

      94KB

      MD5

      51ff720fd8b167ba5032ca5e1b459782

      SHA1

      689abb1986e022b6a64fb7e8443da0677cbd16c2

      SHA256

      7f33b541ee8bb1527e6126aa3bb1f9d825dd1af99da60bdc06e9a0a8c8ce98fe

      SHA512

      de361fca9a180f96b574fe3ae8fc5399fbb7a05a70d5a7e00e3011a6f9f34c4fdf5779726a6909fed98011c9b37d3101366358ad31235eb34c7b150afd7d44d5

    • C:\Program Files (x86)\Avira\Security\Esprima.dll

      Filesize

      218KB

      MD5

      6343d39899bd5751268f150784d81714

      SHA1

      f25298db3413b44ba45f45192d5dc15b3f36dce8

      SHA256

      bd52f306b38c3cd684b9f27c7d48335a3e94c3a94cf4db7df4a4ee9abc365ed4

      SHA512

      ca2912ecf071fb3d8b2847e3aa2ac398fecbefc21d93dc9394a160dff2be49bee5e08ca8fbe92d2a4a5b45bae331c66f42095eb137be173d69b56993330e4c14

    • C:\Program Files (x86)\Avira\Security\GameOptimizer.dll

      Filesize

      352KB

      MD5

      c372a9074bcd21c763f7d4e2d45301b8

      SHA1

      007758036f473c7ffb8ba34ff9b271615d5074fc

      SHA256

      33045d9d66544edfeccc53079114f44da9038aa3ca9459e57c42b3bfa5f5035f

      SHA512

      78222b83a5d1baa9e84ca377367ec3efd74563c9a98ac65cbd1dc6ef2d9dbbee0258aa2700285823d25b1f9d3fef037e0243f656077c0ccec599ffe020889695

    • C:\Program Files (x86)\Avira\Security\Jint.dll

      Filesize

      404KB

      MD5

      5f4f8bc96b220903fbf5a97f77430657

      SHA1

      5bd21c1889473d927b7942f2f9fb3720a5bac7a4

      SHA256

      34795272a59c14ea35dbe6089825b52d6551d0f9c2c4f0906e9726e195dd86f2

      SHA512

      09d1dce470e81544a4c1e1211aa8e18d4079b83312c1897b13f0b43044b1088418e66f5f2012d4be6a0b2a0023633ad883f0d170624222821e7e7b6621287779

    • C:\Program Files (x86)\Avira\Security\LiteDB.dll

      Filesize

      488KB

      MD5

      7d6f8411fb2d606d0ce7e83273ba8e23

      SHA1

      c92f9d1cb5494383300157be2a44083d85e4544a

      SHA256

      cd275b71ea561b3f4288fc519f28dba7df7637d559facda590cb4ee4c881c709

      SHA512

      e1dbf2e1c9c62236ea9eaa3a895b70f91d6ef2368c7ea2bb6c88ca59da6da8a7a26ce33af1e41a63dbc78e82c30d12eb23dd99e0fee9107b16ea933f45dccd9a

    • C:\Program Files (x86)\Avira\Security\MessageRpc.Net.dll

      Filesize

      45KB

      MD5

      1c7397dd806372d5cbe15b8bcb264064

      SHA1

      2ad1cb714f57b288d218081f2f9da6d7b00dba51

      SHA256

      dbfceb23336b8f5e988c9d01b78aa4e232a28448b8744ddde64c01f2c2da7ba9

      SHA512

      b934cbb00e24ca1e1eb628fc2371ff19f1e294040e459d70314694efd6d2f43693d4fa3a88b0c9dbb77ff13b638128df8e2b5b989b0006c68ffd3c05e183813d

    • C:\Program Files (x86)\Avira\Security\Microsoft.Bcl.AsyncInterfaces.dll

      Filesize

      22KB

      MD5

      53ef5480c2d4954d02a71d3fae89c074

      SHA1

      05de881bed02284b648fd01dbbe08bcb23a119d5

      SHA256

      3c2128c823fbb1d03dddac36748d51c1b072c43b7d0aa550c546080221567372

      SHA512

      988b08b9d6b11904c99ebf1c8653f0fd1f2d4c3a6d88744756cb5136c049fecf73cd4c271dd1c3aa9d8f6c04396e5d8e4e8e2fafd7eaa9e16d9cd93fdad75326

    • C:\Program Files (x86)\Avira\Security\Microsoft.Diagnostics.FastSerialization.dll

      Filesize

      74KB

      MD5

      5c97a856978e7d5c24f4446da3731c37

      SHA1

      c69fae8fb206fa623f953ad89547df83f61cc52f

      SHA256

      35cb0c84c98d70427c1b268da17f2c17ae3ce17ac68cc76d0594d6ba1f04313c

      SHA512

      ceb40ffbaf117c6e03a6b67298bf13849721b58bc6955ab25a1a6d232265b18863933521ef933a0f3c1432b1d031afc62464eb0f25820ee44c0437cd9dc5b66c

    • C:\Program Files (x86)\Avira\Security\Microsoft.Diagnostics.Tracing.TraceEvent.dll

      Filesize

      2.9MB

      MD5

      d76b7a7cf1321277f4d97e4951bf15fe

      SHA1

      5c5681c3047d5e56907d669a95c260dc621d9ca2

      SHA256

      7bca8757e1bab2fb2ca111ee68e95f6735f7f4f332f9d8b9d5423494f46bde1d

      SHA512

      0d81ca3ea7ab2838f4d1b39d539c87301995765eb3d5836772e38fd072e7ded8db4285b59d6bcec7252c2f15e7f372e72845a8b47570b812e04e7963451fec77

    • C:\Program Files (x86)\Avira\Security\is-Q56DU.tmp

      Filesize

      55KB

      MD5

      902ca6c64ad4f7782bec84b9c4dfd729

      SHA1

      0b3eead09a4a5044571dcd10a17668d7cb204cd2

      SHA256

      669c00fddf717dc5207af1ed2284f30e2c3e7419959c7b738ead4d707e13acd3

      SHA512

      be8aef38eeae1899deed24818d71f88b087aadd0034c880af3b443f33aec94d6f2e56678c64d05ea824be8d88af0c2530d7377b888fba66caf52bf0b63ec837e

    • C:\ProgramData\Avira\Security\Logs\Elevated\Sentry\Avira.Spotlight.UI.Application\Sentry\104358A6DC134E47715BA87A769BBF11E2563EAB\__processing\1733340408_-4338__6044116.envelope

      Filesize

      366B

      MD5

      200a7c27bf6cef98e0753ee6f3441393

      SHA1

      6ebaf74d39c26e6970bcc686c9cd870c110227e5

      SHA256

      897b15b367ea60e4ae77144dd794d807e94ae3b3b70fc496f877ad941eb29e2a

      SHA512

      bb27bf317e58e97dc14b01e205f5c6715f63a38a6ce51adc7c38d6932edbb2811f6c733e2c4cacf9940f8c76d5f842e6a88cfa2b9d133da70a4b8bddcbeaa762

    • C:\ProgramData\Avira\Security\brain.dbs

      Filesize

      64KB

      MD5

      fa9bf8231bb4bd11338d511b2cd72d22

      SHA1

      9f63385c05bab64111a828238dca98a90ce619ea

      SHA256

      2be473fbdc6a58d03429b2b067fb1ad106126d5262bc1b2380c21172c5a02ff2

      SHA512

      ae17738f3dddf8ab93e929b6e149911e976a6157c65008ba58ed9df2957a76a5d50567a2fca86f374acc67d9c036e12dae1376f0b84e7def96557da5b3126aac

    • C:\ProgramData\Avira\Security\brain.dbs

      Filesize

      64KB

      MD5

      faf1902b972c07e0fa4b95bfc51224d9

      SHA1

      13b422a3487a0121e19df17011a0f25d9de87db0

      SHA256

      fa70650c5b39b0bf6d5cdfb5e053ea1e404a953a7da5006bd4f3ffdfa40e656a

      SHA512

      9a674e7f58c666f10956abb91519000d9e15e0f6f7f89de42a0e531111bcf1e71aec308e70277776dc25a1a0b28f8500d8d0bed74f377772013665ceaf4c792a

    • C:\ProgramData\Avira\Security\brain.dbs

      Filesize

      64KB

      MD5

      9e3080542f9c7f7f2a9b71f879f3746d

      SHA1

      e1bf506d6c7987b851ab63e4226a2c0206f1081c

      SHA256

      f44e38cfac6084c660bf9c6eb3d9f70cafd60f4a6b68e4ee55efb36f66c03a62

      SHA512

      43d4768e5ef42cfdcc5ca089f8460e0c4a234ccfabab1daa9348c3c5e79bbcbd2a0827a9329a3c2aa8e1b2bb086785e839580cbe94945f9474812bdffe6e22e6

    • C:\ProgramData\Avira\Security\brain.dbs

      Filesize

      56KB

      MD5

      663ef5b94eb40fb61d8dfb98d6050d5b

      SHA1

      3e4c8d36eb3106e566f738d188fcaa6d4f516c33

      SHA256

      1bb779ccbb2de287fb238945e9344991cdc8ced98d690c6ec2418bc931589917

      SHA512

      aecb269344d7fe6aee41dd47e499e72a2572901d2c8ac94847655a7f1dd24abed82dea569e8f307aa1ef306e4fd3863bb7685468e34f34609b5ef4a2bb34da12

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\AddTrust_External_CA_Root_2000.cer

      Filesize

      1KB

      MD5

      1d3554048578b03f42424dbf20730a3f

      SHA1

      02faf3e291435468607857694df5e45b68851868

      SHA256

      687fa451382278fff0c8b11f8d43d576671c6eb2bceab413fb83d965d06d2ff2

      SHA512

      49dd7cce6f711ec3adff4608bad3afce9a85f7279e3fe1b5d8a87c6534a79090bd3cc897b57fd310cd7aef902b260d585fea1d3901526c874f935a3b990bf0dc

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\DigiCert_Assured_ID_Root_CA_2006.cer

      Filesize

      955B

      MD5

      87ce0b7b2a0e4900e158719b37a89372

      SHA1

      0563b8630d62d75abbc8ab1e4bdfb5a899b24d43

      SHA256

      3e9099b5015e8f486c00bcea9d111ee721faba355a89bcf1df69561e3dc6325c

      SHA512

      552cbdfbe33421b682ab9e42cafe274e9d6f55eb971d18d0ab9e68d1e6fb715b0580efecf84198a61a458d9f7656f4e485f2b2643d575f17269d613b95063407

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\DigiCert_Global_Root_CA_2006.cer

      Filesize

      947B

      MD5

      79e4a9840d7d3a96d7c04fe2434c892e

      SHA1

      a8985d3a65e5e5c4b2d7d66d40c6dd2fb19c5436

      SHA256

      4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161

      SHA512

      53b444e565183201a61eeb461209b2dc30895eeca487238d15a026735f229a819e5b19cbd7e2fa2768ab2a64f6ebcd9d1e721341c9ed5dd09fc0d5e43d68bca7

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\DigiCert_Trusted_Root_G4_2013.cer

      Filesize

      1KB

      MD5

      78f2fcaa601f2fb4ebc937ba532e7549

      SHA1

      ddfb16cd4931c973a2037d3fc83a4d7d775d05e4

      SHA256

      552f7bdcf1a7af9e6ce672017f4f12abf77240c78e761ac203d1d9d20ac89988

      SHA512

      bcad73a7a5afb7120549dd54ba1f15c551ae24c7181f008392065d1ed006e6fa4fa5a60538d52461b15a12f5292049e929cffde15cc400dec9cdfca0b36a68dd

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\Entrust.net_Certification_Authority_(2048)_1999.cer

      Filesize

      1KB

      MD5

      ee2931bc327e9ae6e8b5f751b4347190

      SHA1

      503006091d97d4f5ae39f7cbe7927d7d652d3431

      SHA256

      6dc47172e01cbcb0bf62580d895fe2b8ac9ad4f873801e0c10b9c837d21eb177

      SHA512

      ef7d8771b6c847a73556d612ad23e019c8bbabd5c9887884940b9a6a4532532c32eec9b56c1bbf44cb97a96a9d780b54b54801d1f5690a6fd528caa99dc49f54

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\GlobalSign_2009.cer

      Filesize

      867B

      MD5

      c5dfb849ca051355ee2dba1ac33eb028

      SHA1

      d69b561148f01c77c54578c10926df5b856976ad

      SHA256

      cbb522d7b7f127ad6a0113865bdf1cd4102e7d0759af635a7cf4720dc963c53b

      SHA512

      88289cdd2c2dd1f5f4c13ab2cf9bc601fc634b5945309bedf9fc5b96bf21697b4cd6da2f383497825e02272816befbac4f44955282ffbbd4dd0ddc52281082da

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\GlobalSign_2014.cer

      Filesize

      1KB

      MD5

      4fdd07e4d42264391e0c3742ead1c6ae

      SHA1

      8094640eb5a7a1ca119c1fddd59f810263a7fbd1

      SHA256

      2cabeafe37d06ca22aba7391c0033d25982952c453647349763a3ab5ad6ccf69

      SHA512

      626261dcc0001d3bf73f9bd041067c78cbd19337c9dfcb2fb0854f24015efa662a7441dc5389de7c1ca4f464b44bf99b6df710661a9a8902ad907ee231dba74a

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\Microsoft_Identity_Verification_Root_Certificate_Authority_2020.cer

      Filesize

      1KB

      MD5

      be954f16012122448ca8bc279602acf5

      SHA1

      f40042e2e5f7e8ef8189fed15519aece42c3bfa2

      SHA256

      5367f20c7ade0e2bca790915056d086b720c33c1fa2a2661acf787e3292e1270

      SHA512

      b617f4c211c33da258561c99812252fc9fa0446294680e3cd39689b1b4ba522b5bd3c03925582cb119fc4dff7cf0ed863832dc325d640bee759fea3da2118e09

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\Microsoft_Root_Certificate_Authority_2001.cer

      Filesize

      1KB

      MD5

      e1c07ea0aabbd4b77b84c228117808a7

      SHA1

      cdd4eeae6000ac7f40c3802c171e30148030c072

      SHA256

      885de64c340e3ea70658f01e1145f957fcda27aabeea1ab9faa9fdb0102d4077

      SHA512

      acb2da72502053e097f23bfe3af150018a57dab0ff286c36ed6216d21a4de1f81572c40cc1c2673370bbb102321d37276b033bddc191e607e91fe80df3f5e08e

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\Microsoft_Root_Certificate_Authority_2010.cer

      Filesize

      1KB

      MD5

      a266bb7dcc38a562631361bbf61dd11b

      SHA1

      3b1efd3a66ea28b16697394703a72ca340a05bd5

      SHA256

      df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

      SHA512

      0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\Microsoft_Root_Certificate_Authority_2011.cer

      Filesize

      1KB

      MD5

      ce0490d5e56c34a5ae0be98be581185d

      SHA1

      8f43288ad272f3103b6fb1428485ea3014c0bcfe

      SHA256

      847df6a78497943f27fc72eb93f9a637320a02b561d0a91b09e87a7807ed7c61

      SHA512

      2ebfc4c17e241a665f558bccb038a5fb10a73e05db552a31e3f0eae48a93c9617d2a4968f79da677dcbcdb1d7a140be9848aaba26161948d7db44b4eabbb0763

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\USERTrust_RSA_Certification_Authority_2010.cer

      Filesize

      1KB

      MD5

      1bfe69d191b71933a372a80fe155e5b5

      SHA1

      2b8f1b57330dbba2d07a6c51f70ee90ddab9ad8e

      SHA256

      e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2

      SHA512

      57e318d9ab26720f02ec18ba09cb640ace23554d2fe146d285bcc43c4d9601127fbe3dd9171cdafec70e075cf9412e8d1ac63ae0f982cf8825528659952a47bd

    • C:\Users\Admin\AppData\Local\Temp\is-PM8K0.tmp\VeriSign_Universal_Root_Certification_Authority_2008.cer

      Filesize

      1KB

      MD5

      8eadb501aa4d81e48c1dd1e114009519

      SHA1

      3679ca35668772304d30a5fb873b0fa77bb70d54

      SHA256

      2399561127a57125de8cefea610ddf2fa078b5c8067f4e828290bfb860e84b3c

      SHA512

      7d53c0f0c95cb9126592201f67c66c987c3fa3d6e7dca5038f6eeb766aede597af975eb734853ec38ef1052dae1fea06bc3e9d8a03cacc0e46bb70614b475d91

    • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

      Filesize

      70KB

      MD5

      49aebf8cbd62d92ac215b2923fb1b9f5

      SHA1

      1723be06719828dda65ad804298d0431f6aff976

      SHA256

      b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

      SHA512

      bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

    • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      a54349f409082aca8afb58c9cb0a4310

      SHA1

      2924c6fd4423e27d8fe2a3dc86c4c90eced913b1

      SHA256

      afdedc131a588095a8b4c23d640af4d8efa217a33b7f03b8bc1747c29ad6f5fc

      SHA512

      4d1306432b10c8b1396b344f71ea0fb6833fd2060d3ae4e9af71f4cb8be16f8c5be71f9973d3a1642638005d0295c98b32344184bf8ceda128eeb26b3ee40c77

    • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      0d7b81b91c6b9e9514176f788c4fdea3

      SHA1

      c262a6dbd0b97ad319c9cff160f3b5089ef6e425

      SHA256

      bfd643a491a85b7abb6c57bd85e44071756bc50ec9c8569fba79c78978832169

      SHA512

      3221cd8f1f5a1105f45b5795e9524125b9d9844814757d2788a35806adcba46bca5605849e38094e3f33ae34ac01ae1031d1cc1be2d00a63731ad724f8e76609

    • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      4a2a64401f653b990013ae00f592ffd9

      SHA1

      0d3cecda9aa7c1fe324798e5a7bff2cf2734325d

      SHA256

      ff8c983186d3146f54406960a5ed91f530dddc05daa5d81668c3ed193367b3b9

      SHA512

      8cebe14e5116e919d16145fbcc1f804ba8a6db8e710f0946d4739cc8c23302ecd1069930d6aa802e2b35522350f938009379a5c84b146335e48f589b07de9426

    • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      da987a3f154066d7f994b1cd03b2c6ba

      SHA1

      87200effe5a83aa0c068633fe40689c7b0b1f3e2

      SHA256

      30db00477c3a175b4c04d00f1635df57bb71324adbdb29f98db8955169865562

      SHA512

      db55b2ea90ee39280a70c468e3752a17650b0e04d01144d4b20f6e3c2198960032e65eb5af6bf792cf60438bbb86273de075ae1abd880d1f30d211522a49683b

    • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      843f3c8d8d421a0125fc5b957ebeba54

      SHA1

      d7ee7839b0980c6a85bf36850584beda40cce087

      SHA256

      e406714b0d1612b746c8699f8f2fee8c5660182f8a7c83a07b77353c4bdda173

      SHA512

      8adb07ff5aa4ec064105ae908ae10d9970f30d3a860b8a5579f21f0d5f8bcf12fd8534e7d007cf3d6b7967afdc5624373a30d0ff2aa3eaf8cba1934ecb78dc8c

    • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      35db7e07a7f55b05f4c7de91c5b6080e

      SHA1

      d0a0ee78c0125278b1e14d224fef58dc5b33b0ea

      SHA256

      d2dc0eba6438915ee5a4f57c206d5212f2524f704236a8332e06b5980be5ef3d

      SHA512

      997bebc0cea6f280ef55316794908efc1946db45632f2096bc9cf6499c626e8c1d052dfc19e1798ccd4b1d34d1eda5e01a47bb79ecc8d7fd014f4d39be4abdfd

    • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      ad32686c9b3d935f3d4da168462cd83c

      SHA1

      6cd9374c9f8795a7048939ee6bd23a139f5f3e03

      SHA256

      40053864508eafdbb793c6d68cdd3df3d51a41a0acc45b42a5bdb07fb51949dd

      SHA512

      7dd3dbb5270768b33bf2227ae17b797d25d7919995d378c17d3e39f4ea7c13690fbc4ffd8dc7ae215d6287ff4ea6c778c3c6df8bf6e376391ed4a3d114ba9811

    • C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

      Filesize

      342B

      MD5

      ddc3bcce30ebebc7b7e1d042cd47bdcf

      SHA1

      f42ead5a5faf202fd17fe07b4e1ce2427c10f722

      SHA256

      8db3fb4c11c9147d311d8a43544e18d03e775937b677e1da1c978e7e2d0239dd

      SHA512

      1d9e73a43c2be881d372971224a70830587030b91df4b71ae88c0aaea94a644f0d72b34eaf4ecd57b20b70596065cd4fad34d676ab5fe351f7ffe81597e80c46

    • C:\Windows\Temp\Tar2274.tmp

      Filesize

      181KB

      MD5

      4ea6026cf93ec6338144661bf1202cd1

      SHA1

      a1dec9044f750ad887935a01430bf49322fbdcb7

      SHA256

      8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

      SHA512

      6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

    • \Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe

      Filesize

      259KB

      MD5

      d18562371918ccf53bbec4734b3ff676

      SHA1

      e194f235bd35253541613feb5238a6b1496dc431

      SHA256

      670fd7c69b6d2e4cbdbb4bc14f2a1ce65851647a3a6b09232a594c8ea483d89a

      SHA512

      071cbc8e23c429588401a4bac9733684e3433315dc05b3506f7cb5fe3135452d497c4dbe0bc8c570a3c285ff725e40a3fd5b1c8e4f7d196b5a28d507fd8354ac

    • \Program Files (x86)\Avira\Security\Avira.Spotlight.UI.Application.exe

      Filesize

      223KB

      MD5

      55eea39b5da63cb85fbcaaa06a17370a

      SHA1

      a4cb7909bde40d0b88c4d7bca0472cf5a3a1c2ec

      SHA256

      938f5c8e5059c6b55f3e45621e96d677fa4d5012b80b75b37a00ac487f71171d

      SHA512

      2b20e6d964a04b30f7756428ca19dd09dd7442fc3288275123986d0ad3d842b1ee584aa5131ecf8a335d8d7ab6deb1a9f86f05bf6419664a6915b4a7092c2d71

    • \Users\Admin\AppData\Local\Temp\is-28H1D.tmp\avira_spotlight_setup.tmp

      Filesize

      3.1MB

      MD5

      b8ef696560b62698f63bfbadd5ad6346

      SHA1

      94fda69817c7ac2611ba33a0e835d27cc7c70e60

      SHA256

      69cc05a881222d4a89e9f89daa97637ff6514a12da05dbc060e9e8afc1fac3d7

      SHA512

      55529647368dbd34cd0e29989c89c5647004c9f883111a364de3144ca158ff1382acb2460bfbe2d73f519c8bd5536a85da1182e4f60a851bff718ca0747d2815

    • memory/680-721-0x0000000000400000-0x000000000072A000-memory.dmp

      Filesize

      3.2MB

    • memory/680-17-0x0000000000400000-0x000000000072A000-memory.dmp

      Filesize

      3.2MB

    • memory/680-720-0x0000000000400000-0x000000000072A000-memory.dmp

      Filesize

      3.2MB

    • memory/1912-793-0x00000000042A0000-0x00000000042D2000-memory.dmp

      Filesize

      200KB

    • memory/1912-788-0x00000000007B0000-0x00000000007BE000-memory.dmp

      Filesize

      56KB

    • memory/1912-795-0x0000000004380000-0x0000000004388000-memory.dmp

      Filesize

      32KB

    • memory/1912-796-0x0000000005870000-0x000000000592C000-memory.dmp

      Filesize

      752KB

    • memory/1912-792-0x0000000002240000-0x000000000224A000-memory.dmp

      Filesize

      40KB

    • memory/1912-791-0x0000000002230000-0x000000000223A000-memory.dmp

      Filesize

      40KB

    • memory/1912-739-0x0000000000C20000-0x0000000000C64000-memory.dmp

      Filesize

      272KB

    • memory/1912-782-0x0000000000210000-0x0000000000238000-memory.dmp

      Filesize

      160KB

    • memory/1912-783-0x0000000000800000-0x0000000000872000-memory.dmp

      Filesize

      456KB

    • memory/1912-784-0x00000000006E0000-0x00000000006F6000-memory.dmp

      Filesize

      88KB

    • memory/1912-785-0x0000000000720000-0x0000000000730000-memory.dmp

      Filesize

      64KB

    • memory/1912-786-0x0000000000330000-0x000000000033E000-memory.dmp

      Filesize

      56KB

    • memory/1912-787-0x00000000020B0000-0x00000000020E6000-memory.dmp

      Filesize

      216KB

    • memory/1912-794-0x0000000004370000-0x000000000437A000-memory.dmp

      Filesize

      40KB

    • memory/1912-789-0x0000000004ED0000-0x0000000004F66000-memory.dmp

      Filesize

      600KB

    • memory/1912-790-0x0000000002100000-0x000000000210A000-memory.dmp

      Filesize

      40KB

    • memory/1928-719-0x0000000000400000-0x00000000004EF000-memory.dmp

      Filesize

      956KB

    • memory/1928-2-0x0000000000401000-0x00000000004B7000-memory.dmp

      Filesize

      728KB

    • memory/1928-0-0x0000000000400000-0x00000000004EF000-memory.dmp

      Filesize

      956KB

    • memory/1928-938-0x0000000000400000-0x00000000004EF000-memory.dmp

      Filesize

      956KB

    • memory/2364-861-0x00000000062F0000-0x000000000630C000-memory.dmp

      Filesize

      112KB

    • memory/2364-857-0x0000000005F90000-0x0000000005FA8000-memory.dmp

      Filesize

      96KB

    • memory/2364-822-0x0000000004A00000-0x0000000004AC2000-memory.dmp

      Filesize

      776KB

    • memory/2364-823-0x0000000004C10000-0x0000000004D78000-memory.dmp

      Filesize

      1.4MB

    • memory/2364-825-0x0000000004220000-0x000000000422C000-memory.dmp

      Filesize

      48KB

    • memory/2364-824-0x0000000003D30000-0x0000000003D4C000-memory.dmp

      Filesize

      112KB

    • memory/2364-826-0x0000000004570000-0x00000000045B0000-memory.dmp

      Filesize

      256KB

    • memory/2364-827-0x00000000045F0000-0x000000000460A000-memory.dmp

      Filesize

      104KB

    • memory/2364-828-0x0000000004650000-0x0000000004658000-memory.dmp

      Filesize

      32KB

    • memory/2364-832-0x0000000004820000-0x000000000482C000-memory.dmp

      Filesize

      48KB

    • memory/2364-833-0x0000000004930000-0x000000000493A000-memory.dmp

      Filesize

      40KB

    • memory/2364-838-0x0000000004FF0000-0x0000000004FF8000-memory.dmp

      Filesize

      32KB

    • memory/2364-842-0x0000000006C70000-0x0000000006F66000-memory.dmp

      Filesize

      3.0MB

    • memory/2364-843-0x0000000005390000-0x00000000053A2000-memory.dmp

      Filesize

      72KB

    • memory/2364-846-0x00000000058F0000-0x00000000058FC000-memory.dmp

      Filesize

      48KB

    • memory/2364-849-0x0000000005AD0000-0x0000000005AEC000-memory.dmp

      Filesize

      112KB

    • memory/2364-854-0x0000000006170000-0x00000000061DE000-memory.dmp

      Filesize

      440KB

    • memory/2364-855-0x0000000005E20000-0x0000000005E32000-memory.dmp

      Filesize

      72KB

    • memory/2364-853-0x0000000006110000-0x0000000006162000-memory.dmp

      Filesize

      328KB

    • memory/2364-862-0x0000000006170000-0x00000000061DE000-memory.dmp

      Filesize

      440KB

    • memory/2364-867-0x0000000006470000-0x000000000648C000-memory.dmp

      Filesize

      112KB

    • memory/2364-868-0x0000000006630000-0x0000000006648000-memory.dmp

      Filesize

      96KB

    • memory/2364-869-0x0000000006670000-0x0000000006680000-memory.dmp

      Filesize

      64KB

    • memory/2364-866-0x0000000006450000-0x000000000646C000-memory.dmp

      Filesize

      112KB

    • memory/2364-865-0x0000000006450000-0x000000000646C000-memory.dmp

      Filesize

      112KB

    • memory/2364-864-0x0000000006310000-0x0000000006350000-memory.dmp

      Filesize

      256KB

    • memory/2364-871-0x0000000006790000-0x00000000067B8000-memory.dmp

      Filesize

      160KB

    • memory/2364-870-0x0000000006790000-0x00000000067B8000-memory.dmp

      Filesize

      160KB

    • memory/2364-863-0x0000000006310000-0x0000000006350000-memory.dmp

      Filesize

      256KB

    • memory/2364-820-0x0000000003750000-0x0000000003766000-memory.dmp

      Filesize

      88KB

    • memory/2364-873-0x00000000069D0000-0x00000000069F2000-memory.dmp

      Filesize

      136KB

    • memory/2364-872-0x00000000069D0000-0x00000000069F2000-memory.dmp

      Filesize

      136KB

    • memory/2364-860-0x00000000062F0000-0x000000000630C000-memory.dmp

      Filesize

      112KB

    • memory/2364-859-0x00000000065B0000-0x000000000662E000-memory.dmp

      Filesize

      504KB

    • memory/2364-877-0x0000000006A00000-0x0000000006A16000-memory.dmp

      Filesize

      88KB

    • memory/2364-876-0x0000000006A00000-0x0000000006A16000-memory.dmp

      Filesize

      88KB

    • memory/2364-875-0x00000000067C0000-0x00000000067CC000-memory.dmp

      Filesize

      48KB

    • memory/2364-874-0x00000000067C0000-0x00000000067CC000-memory.dmp

      Filesize

      48KB

    • memory/2364-858-0x0000000005F40000-0x0000000005F50000-memory.dmp

      Filesize

      64KB

    • memory/2364-821-0x00000000038A0000-0x00000000038AC000-memory.dmp

      Filesize

      48KB

    • memory/2364-856-0x0000000005F90000-0x0000000005FA8000-memory.dmp

      Filesize

      96KB

    • memory/2364-852-0x0000000005900000-0x000000000590E000-memory.dmp

      Filesize

      56KB

    • memory/2364-851-0x0000000005AF0000-0x0000000005AF8000-memory.dmp

      Filesize

      32KB

    • memory/2364-850-0x00000000059C0000-0x00000000059C8000-memory.dmp

      Filesize

      32KB

    • memory/2364-848-0x0000000005AD0000-0x0000000005AEC000-memory.dmp

      Filesize

      112KB

    • memory/2364-847-0x00000000059A0000-0x00000000059B4000-memory.dmp

      Filesize

      80KB

    • memory/2364-845-0x00000000058F0000-0x00000000058FC000-memory.dmp

      Filesize

      48KB

    • memory/2364-844-0x00000000053B0000-0x00000000053DA000-memory.dmp

      Filesize

      168KB

    • memory/2364-841-0x0000000005290000-0x00000000052FC000-memory.dmp

      Filesize

      432KB

    • memory/2364-840-0x0000000005B50000-0x0000000005C00000-memory.dmp

      Filesize

      704KB

    • memory/2364-839-0x0000000005290000-0x00000000052FC000-memory.dmp

      Filesize

      432KB

    • memory/2364-837-0x0000000005100000-0x000000000510A000-memory.dmp

      Filesize

      40KB

    • memory/2364-836-0x0000000005110000-0x0000000005118000-memory.dmp

      Filesize

      32KB

    • memory/2364-835-0x0000000004FC0000-0x0000000004FC8000-memory.dmp

      Filesize

      32KB

    • memory/2364-834-0x0000000004FC0000-0x0000000004FC8000-memory.dmp

      Filesize

      32KB

    • memory/2364-831-0x0000000004820000-0x000000000482C000-memory.dmp

      Filesize

      48KB

    • memory/2364-830-0x0000000004AD0000-0x0000000004AE4000-memory.dmp

      Filesize

      80KB

    • memory/2364-829-0x0000000004AD0000-0x0000000004AE4000-memory.dmp

      Filesize

      80KB

    • memory/2364-879-0x0000000006A60000-0x0000000006A68000-memory.dmp

      Filesize

      32KB

    • memory/2364-880-0x0000000006A90000-0x0000000006A9C000-memory.dmp

      Filesize

      48KB

    • memory/2364-878-0x0000000006A30000-0x0000000006A42000-memory.dmp

      Filesize

      72KB

    • memory/2364-819-0x0000000004760000-0x00000000047E6000-memory.dmp

      Filesize

      536KB

    • memory/2364-816-0x00000000044B0000-0x000000000456C000-memory.dmp

      Filesize

      752KB

    • memory/2364-815-0x0000000000DB0000-0x0000000000DBA000-memory.dmp

      Filesize

      40KB

    • memory/2364-809-0x0000000000970000-0x000000000097E000-memory.dmp

      Filesize

      56KB

    • memory/2364-810-0x0000000003C90000-0x0000000003D26000-memory.dmp

      Filesize

      600KB

    • memory/2364-812-0x0000000000D10000-0x0000000000D1A000-memory.dmp

      Filesize

      40KB

    • memory/2364-813-0x0000000000D60000-0x0000000000D6A000-memory.dmp

      Filesize

      40KB

    • memory/2364-814-0x0000000000D70000-0x0000000000DA2000-memory.dmp

      Filesize

      200KB

    • memory/2364-811-0x0000000000C60000-0x0000000000C6A000-memory.dmp

      Filesize

      40KB

    • memory/2364-808-0x0000000000CC0000-0x0000000000CF6000-memory.dmp

      Filesize

      216KB

    • memory/2364-803-0x00000000002F0000-0x0000000000318000-memory.dmp

      Filesize

      160KB

    • memory/2364-804-0x00000000037B0000-0x0000000003822000-memory.dmp

      Filesize

      456KB

    • memory/2364-805-0x00000000005E0000-0x00000000005F6000-memory.dmp

      Filesize

      88KB

    • memory/2364-806-0x0000000000830000-0x0000000000840000-memory.dmp

      Filesize

      64KB

    • memory/2364-807-0x00000000005C0000-0x00000000005CE000-memory.dmp

      Filesize

      56KB

    • memory/2364-802-0x0000000001230000-0x0000000001274000-memory.dmp

      Filesize

      272KB