マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話

03-6550-8770

Profile

Trojan.Siggen32.16620

Added to the Dr.Web virus database: 2026-01-01

Virus description added:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'NetLimiter' = '"%ProgramFiles%\Locktime Software\NetLimiter\nlclientapp.exe" /minimized'
Sets the following service settings
  • [HKLM\SYSTEM\CurrentControlSet\Services\nldrv] 'Start' = '00000000'
  • [HKLM\SYSTEM\CurrentControlSet\Services\nldrv] 'ImagePath' = 'system32\drivers\nldrv.sys'
  • [HKLM\SYSTEM\CurrentControlSet\Services\nlsvc] 'Start' = '00000002'
  • [HKLM\SYSTEM\CurrentControlSet\Services\nlsvc] 'ImagePath' = '"%ProgramFiles%\Locktime Software\NetLimiter\NLSvc.exe"'
Creates the following services
  • 'nldrv' system32\drivers\nldrv.sys
  • 'nlsvc' %ProgramFiles%\Locktime Software�etLimiter�LSvc.exe
  • 'nlsvc' %ProgramFiles%\Locktime Software\NetLimiter\NLSvc.exe
Malicious functions
Executes the following
  • '%WINDIR%\syswow64\net.exe' stop "nlsvc"
Modifies file system
Creates the following files
  • %TEMP%\rarsfx0\64.exe
  • %TEMP%\rarsfx0\cybermania.url
  • %TEMP%\rarsfx0\32.exe
  • %TEMP%\rarsfx0\netlimiter.exe
  • %TEMP%\rarsfx0\32or64.cmd
  • %TEMP%\rarsfx0\license.exe
  • %TEMP%\rarsfx0\crack.7z
  • %TEMP%\rarsfx0\madara.7z
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\netlimiter-5.3.6.0.msi
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\netlimiter-5.3.6.0.x64.msi
  • %TEMP%\shi192.tmp
  • %TEMP%\msi1e1.tmp
  • %TEMP%\msi3b7.tmp
  • %TEMP%\ai_extui_bin_2540\repair.png
  • %TEMP%\ai_extui_bin_2540\remove.png
  • %TEMP%\ai_extui_bin_2540\whitebackground
  • %TEMP%\ai_extui_bin_2540\background
  • %TEMP%\ai_extui_bin_2540\frame_bottom_right.bmp
  • %TEMP%\ai_extui_bin_2540\frame_bottom_left.bmp
  • %TEMP%\ai_extui_bin_2540\installlogoicon
  • %TEMP%\ai_extui_bin_2540\metrorunapplicationbutton
  • %TEMP%\ai_extui_bin_2540\frame_top_left_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\printico
  • %TEMP%\ai_extui_bin_2540\frame_top_mid.bmp
  • %TEMP%\ai_extui_bin_2540\frame_top_mid_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_bottom_left_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_bottom_mid.bmp
  • %TEMP%\ai_extui_bin_2540\frame_bottom_mid_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\sys_min_down.png
  • %TEMP%\ai_extui_bin_2540\frame_bottom_right_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_caption.bmp
  • %TEMP%\ai_extui_bin_2540\frame_caption_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_right_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_left.bmp
  • %TEMP%\ai_extui_bin_2540\frame_left_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_right.bmp
  • %TEMP%\ai_extui_bin_2540\frame_top_left.bmp
  • %TEMP%\ai_extui_bin_2540\frame_top_right.bmp
  • %TEMP%\ai_extui_bin_2540\frame_top_right_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\exclamic
  • %TEMP%\ai_extui_bin_2540\sys_close_down.png
  • %TEMP%\ai_extui_bin_2540\sys_close_hot.png
  • %TEMP%\ai_extui_bin_2540\sys_close_inactive.png
  • %TEMP%\ai_extui_bin_2540\sys_close_normal.png
  • %TEMP%\ai_extui_bin_2540\sys_min_hot.png
  • %TEMP%\ai_extui_bin_2540\sys_min_inactive.png
  • %TEMP%\ai_extui_bin_2540\sys_min_normal.png
  • %TEMP%\ai_extui_bin_2540\checkbox_for_ctrls
  • %TEMP%\ai_extui_bin_2540\applogoicon.bmp
  • %TEMP%\ai_extui_bin_2540\completi
  • %TEMP%\ai_extui_bin_2540\backbutton
  • %TEMP%\ai_extui_bin_2540\backgroundsurface
  • %TEMP%\ai_extui_bin_2540\backgroundprepare
  • %TEMP%\ai_extui_bin_2540\browsebutton
  • %TEMP%\ai_extui_bin_2540\custicon
  • %TEMP%\ai_extui_bin_2540\checkbox_for_list_ctrls
  • %TEMP%\ai_extui_bin_2540\new
  • %TEMP%\ai_extui_bin_2540\info
  • %TEMP%\ai_extui_bin_2540\insticon
  • %TEMP%\ai_extui_bin_2540\metroinstallbutton
  • %TEMP%\ai_extui_bin_2540\modify.png
  • %TEMP%\ai_extui_bin_2540\nextcancelbuttons
  • %TEMP%\ai_extui_bin_2540\optionslogoicon
  • %TEMP%\ai_extui_bin_2540\removico
  • %TEMP%\ai_extui_bin_2540\repairic
  • %TEMP%\ai_extui_bin_2540\runapplicationbutton
  • %TEMP%\ai_extui_bin_2540\print.png
  • %TEMP%\ai_extui_bin_2540\up
  • %TEMP%\ai_extui_bin_2540\viewreadmebutton
  • %TEMP%\ai_extui_bin_2540\waitlogoicon
  • %TEMP%\ai_extui_bin_2540\metrobuttonimage
  • %TEMP%\ai_extui_bin_2540\checkbox
  • %TEMP%\ai_extui_bin_2540\dotnetnativeimage.dll
  • %TEMP%\ai_extui_bin_2540\nlcalib.dll_1
  • %TEMP%\ai_extui_bin_2540\cmdlinkarrow
  • %TEMP%\ai_extui_bin_2540\preparedlgprogress.gif
  • %TEMP%\ai_extui_bin_2540\file_deleter.ps1
  • %TEMP%\ai_extui_bin_2540\lzmaextractor.dll
  • %TEMP%\ai_extui_bin_2540\prepareprereqdlgprogress.gif
  • %TEMP%\ai_extui_bin_2540\prereqprogressimage.png
  • %TEMP%\ai_extui_bin_2540\applogoicon.svg
  • %TEMP%\ai_extui_bin_2540\progressimage.png
  • %TEMP%\ai_extui_bin_2540\backbutton.xaml
  • %TEMP%\ai_extui_bin_2540\viewreadmebutton.xaml
  • %TEMP%\ai_extui_bin_2540\browsebutton.xaml
  • %TEMP%\ai_extui_bin_2540\nextcancelbuttons.xaml
  • %TEMP%\ai_extui_bin_2540\print.png.xaml
  • %TEMP%\ai_extui_bin_2540\metroinstallbutton.xaml
  • %TEMP%\ai_extui_bin_2540\metrobuttonimage.xaml
  • %TEMP%\ai_extui_bin_2540\modify.png.xaml
  • %TEMP%\ai_extui_bin_2540\remove.png.xaml
  • %TEMP%\ai_extui_bin_2540\repair.png.xaml
  • %TEMP%\ai_extui_bin_2540\metrorunapplicationbutton.xaml
  • %TEMP%\shid0b.tmp
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\ports.bin
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\lang_list.ini
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlclielevator.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclielevator.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlclientapp.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclientapp.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nldiag.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nldiag.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlsvc.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlsvc.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlsvcclicnncheck.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlsvcclicnncheck.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\psrun.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\psrun.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\corelibnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\corelibnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\corelibnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\famfamfam.flags.wpf.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\ipaddressrange.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\locktime.wpf.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\locktime.wpf.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\microsoft.extensions.logging.abstractions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\microsoft.extensions.logging.abstractions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\microsoft.extensions.logging.abstractions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\microsoft.win32.taskscheduler.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\microsoft.win32.taskscheduler.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nager.country.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nager.country.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\netlimiter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\netlimiter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\netlimiter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\netlimiter.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\netlimiter.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\netlimiter.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\netstandard.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\netstandard.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\newtonsoft.json.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\newtonsoft.json.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\newtonsoft.json.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlclientapp.core.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclientapp.core.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\af\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\cs\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\de\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\fa\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\fr\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\hi\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\id\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\it\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\ja\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\ko\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\nb\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\nl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\pl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\pt-br\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\es\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\ru\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\sl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\tr\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\zh-hans\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\zh-hant\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\af\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\cs\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\de\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\fa\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\fr\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\hi\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\id\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\it\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\ja\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\ko\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\nb\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\nl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\pl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\pt-br\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\es\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\ru\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\sl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\tr\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\zh-hans\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\zh-hant\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlclientapp.modules.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclientapp.modules.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlinterop.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlinterop.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlinterop.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlog.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\scottplot.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\scottplot.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\scottplot.wpf.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\scottplot.wpf.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\shaman.singlethreadsynchronizationcontext.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\shaman.singlethreadsynchronizationcontext.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\shaman.singlethreadsynchronizationcontext.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\simpleinjector.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\simpleinjector.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.appcontext.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.appcontext.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.collections.concurrent.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.collections.concurrent.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.collections.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.collections.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.collections.nongeneric.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.collections.nongeneric.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.collections.specialized.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.collections.specialized.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.componentmodel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.componentmodel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.componentmodel.eventbasedasync.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.componentmodel.eventbasedasync.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.componentmodel.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.componentmodel.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.componentmodel.typeconverter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.componentmodel.typeconverter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.console.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.console.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.data.common.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.data.common.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.contracts.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.contracts.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.debug.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.debug.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.fileversioninfo.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.fileversioninfo.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.process.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.process.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.stacktrace.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.stacktrace.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.textwritertracelistener.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.textwritertracelistener.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.tools.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.tools.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.tracesource.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.tracesource.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.tracing.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.tracing.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.drawing.common.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.drawing.common.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.drawing.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.drawing.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.dynamic.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.dynamic.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.globalization.calendars.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.globalization.calendars.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.globalization.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.globalization.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.globalization.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.globalization.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.compression.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.compression.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.compression.zipfile.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.compression.zipfile.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.filesystem.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.filesystem.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.filesystem.driveinfo.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.filesystem.driveinfo.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.filesystem.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.filesystem.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.filesystem.watcher.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.filesystem.watcher.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.isolatedstorage.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.isolatedstorage.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.memorymappedfiles.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.memorymappedfiles.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.pipes.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.pipes.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.unmanagedmemorystream.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.unmanagedmemorystream.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.linq.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.linq.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.linq.expressions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.linq.expressions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.linq.parallel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.linq.parallel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.linq.queryable.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.linq.queryable.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.http.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.http.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.nameresolution.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.nameresolution.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.networkinformation.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.networkinformation.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.ping.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.ping.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.requests.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.requests.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.security.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.security.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.sockets.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.sockets.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.webheadercollection.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.webheadercollection.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.websockets.client.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.websockets.client.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.websockets.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.websockets.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.numerics.vectors.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.numerics.vectors.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.objectmodel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.objectmodel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.reflection.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.reflection.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.reflection.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.reflection.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.reflection.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.reflection.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.resources.reader.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.resources.reader.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.resources.resourcemanager.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.resources.resourcemanager.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.resources.writer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.resources.writer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.compilerservices.visualc.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.compilerservices.visualc.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.handles.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.handles.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.interopservices.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.interopservices.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.interopservices.runtimeinformation.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.interopservices.runtimeinformation.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.numerics.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.numerics.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.serialization.formatters.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.serialization.formatters.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.serialization.json.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.serialization.json.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.serialization.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.serialization.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.serialization.xml.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.serialization.xml.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.claims.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.claims.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.cryptography.algorithms.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.cryptography.algorithms.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.cryptography.csp.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.cryptography.csp.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.cryptography.encoding.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.cryptography.encoding.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.cryptography.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.cryptography.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.cryptography.x509certificates.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.cryptography.x509certificates.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.principal.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.principal.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.securestring.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.securestring.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.text.encoding.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.text.encoding.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.text.encoding.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.text.encoding.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.text.regularexpressions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.text.regularexpressions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.overlapped.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.overlapped.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.tasks.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.tasks.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.tasks.parallel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.tasks.parallel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.thread.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.thread.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.threadpool.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.threadpool.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.timer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.timer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.valuetuple.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.valuetuple.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.readerwriter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.readerwriter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.xdocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.xdocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.xmldocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.xmldocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.xmlserializer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.xmlserializer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.xpath.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.xpath.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.xpath.xdocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.xpath.xdocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\virustotalnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\virustotalnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\virustotalnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\whoisclient.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\xceed.wpf.toolkit.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\windowsfolder\system32\drivers\win7_x64\nldrv.sys
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\windowsfolder\system32\drivers\win7_x86\nldrv.sys
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\windowsfolder\system32\drivers\win10_x86\nldrv.sys
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\windowsfolder\system32\drivers\win10_x64\nldrv.sys
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlclientapp.exe.config
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclientapp.exe.config
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlclientapp.exe.config
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nldiag.exe.config
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nldiag.exe.config
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlclientapp.exe.nlog
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclientapp.exe.nlog
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlsvc.exe.nlog
  • %WINDIR%\temp\~df9be38036ceec4d1b.tmp
  • %WINDIR%\installer\sourcehash{0a88b24e-778a-4d6c-aeee-0406a8209e91}
  • %WINDIR%\temp\~df78b18571c301c4c2.tmp
  • %WINDIR%\temp\~df3eb2ef6b3942b24d.tmp
  • %WINDIR%\temp\~df0705a56509eb53de.tmp
  • %TEMP%\aifilesremovenoimpers_0a88b24e_778a_4d6c_aeee_0406a8209e91.bak
  • %TEMP%\aifilesremoveimpers_0a88b24e_778a_4d6c_aeee_0406a8209e91.bak
  • %ProgramFiles%\locktime software\netlimiter\netlimiter.dll
  • %ProgramFiles%\locktime software\netlimiter\netlimiter.runtime.dll
  • %ProgramFiles%\locktime software\netlimiter\nlinterop.dll
  • %ProgramFiles%\locktime software\netlimiter\nlsvc.exe
  • %ProgramFiles%\locktime software\netlimiter\corelibnet.dll
  • %ProgramFiles%\locktime software\netlimiter\locktime.wpf.dll
  • %ProgramFiles%\locktime software\netlimiter\nlclientapp.exe
  • %ProgramFiles%\locktime software\netlimiter\xceed.wpf.toolkit.dll
  • %ProgramFiles%\locktime software\netlimiter\nlclientapp.core.dll
  • %ProgramFiles%\locktime software\netlimiter\nlclientapp.modules.dll
  • %ProgramFiles%\locktime software\netlimiter\psrun.exe
  • %ProgramFiles%\locktime software\netlimiter\lang_list.ini
  • %ProgramFiles%\locktime software\netlimiter\famfamfam.flags.wpf.dll
  • %ProgramFiles%\locktime software\netlimiter\ports.bin
  • <DRIVERS>\nldrv.sys
  • %ProgramFiles%\locktime software\netlimiter\cs\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\de\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\es\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\fr\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\hi\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\pl\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\pt-br\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\ru\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\tr\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\af\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\id\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\ja\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\sl\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\zh-hans\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\it\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\nl\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\zh-hant\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\fa\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\nb\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\nlog.dll
  • %ProgramFiles%\locktime software\netlimiter\ko\nlclientapp.core.resources.dll
  • %ProgramFiles%\locktime software\netlimiter\microsoft.win32.taskscheduler.dll
  • %ProgramFiles%\locktime software\netlimiter\nldiag.exe
  • %ProgramFiles%\locktime software\netlimiter\nldiag.exe.config
  • %ProgramFiles%\locktime software\netlimiter\simpleinjector.dll
  • %ProgramFiles%\locktime software\netlimiter\nlclientapp.exe.nlog
  • %ProgramFiles%\locktime software\netlimiter\nlsvc.exe.nlog
  • %ProgramFiles%\locktime software\netlimiter\nlclielevator.exe
  • %ProgramFiles%\locktime software\netlimiter\nlsvcclicnncheck.exe
  • %ProgramFiles%\locktime software\netlimiter\microsoft.extensions.logging.abstractions.dll
  • %ProgramFiles%\locktime software\netlimiter\system.appcontext.dll
  • %ProgramFiles%\locktime software\netlimiter\system.collections.concurrent.dll
  • %ProgramFiles%\locktime software\netlimiter\system.collections.dll
  • %ProgramFiles%\locktime software\netlimiter\system.collections.nongeneric.dll
  • %ProgramFiles%\locktime software\netlimiter\system.collections.specialized.dll
  • %ProgramFiles%\locktime software\netlimiter\system.componentmodel.dll
  • %ProgramFiles%\locktime software\netlimiter\system.componentmodel.eventbasedasync.dll
  • %ProgramFiles%\locktime software\netlimiter\system.componentmodel.primitives.dll
  • %ProgramFiles%\locktime software\netlimiter\system.componentmodel.typeconverter.dll
  • %ProgramFiles%\locktime software\netlimiter\system.console.dll
  • %ProgramFiles%\locktime software\netlimiter\system.data.common.dll
  • %ProgramFiles%\locktime software\netlimiter\system.diagnostics.contracts.dll
  • %ProgramFiles%\locktime software\netlimiter\system.diagnostics.debug.dll
  • %ProgramFiles%\locktime software\netlimiter\system.diagnostics.fileversioninfo.dll
  • %ProgramFiles%\locktime software\netlimiter\system.diagnostics.process.dll
  • %ProgramFiles%\locktime software\netlimiter\system.diagnostics.stacktrace.dll
  • %ProgramFiles%\locktime software\netlimiter\system.diagnostics.textwritertracelistener.dll
  • %ProgramFiles%\locktime software\netlimiter\system.diagnostics.tools.dll
  • %ProgramFiles%\locktime software\netlimiter\system.diagnostics.tracesource.dll
  • %ProgramFiles%\locktime software\netlimiter\system.diagnostics.tracing.dll
  • %ProgramFiles%\locktime software\netlimiter\system.drawing.common.dll
  • %ProgramFiles%\locktime software\netlimiter\system.drawing.primitives.dll
  • %ProgramFiles%\locktime software\netlimiter\system.dynamic.runtime.dll
  • %ProgramFiles%\locktime software\netlimiter\system.globalization.calendars.dll
  • %ProgramFiles%\locktime software\netlimiter\system.globalization.dll
  • %ProgramFiles%\locktime software\netlimiter\system.globalization.extensions.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.compression.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.compression.zipfile.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.filesystem.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.filesystem.driveinfo.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.filesystem.primitives.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.filesystem.watcher.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.isolatedstorage.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.memorymappedfiles.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.pipes.dll
  • %ProgramFiles%\locktime software\netlimiter\system.io.unmanagedmemorystream.dll
  • %ProgramFiles%\locktime software\netlimiter\system.linq.dll
  • %ProgramFiles%\locktime software\netlimiter\system.linq.expressions.dll
  • %ProgramFiles%\locktime software\netlimiter\system.linq.parallel.dll
  • %ProgramFiles%\locktime software\netlimiter\system.linq.queryable.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.http.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.nameresolution.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.networkinformation.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.ping.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.primitives.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.requests.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.security.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.sockets.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.webheadercollection.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.websockets.client.dll
  • %ProgramFiles%\locktime software\netlimiter\system.net.websockets.dll
  • %ProgramFiles%\locktime software\netlimiter\system.numerics.vectors.dll
  • %ProgramFiles%\locktime software\netlimiter\system.objectmodel.dll
  • %ProgramFiles%\locktime software\netlimiter\system.reflection.dll
  • %ProgramFiles%\locktime software\netlimiter\system.reflection.extensions.dll
  • %ProgramFiles%\locktime software\netlimiter\system.reflection.primitives.dll
  • %ProgramFiles%\locktime software\netlimiter\system.resources.reader.dll
  • %ProgramFiles%\locktime software\netlimiter\system.resources.resourcemanager.dll
  • %ProgramFiles%\locktime software\netlimiter\system.resources.writer.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.compilerservices.visualc.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.extensions.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.handles.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.interopservices.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.interopservices.runtimeinformation.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.numerics.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.serialization.formatters.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.serialization.json.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.serialization.primitives.dll
  • %ProgramFiles%\locktime software\netlimiter\system.runtime.serialization.xml.dll
  • %ProgramFiles%\locktime software\netlimiter\system.security.claims.dll
  • %ProgramFiles%\locktime software\netlimiter\system.security.cryptography.algorithms.dll
  • %ProgramFiles%\locktime software\netlimiter\system.security.cryptography.csp.dll
  • %ProgramFiles%\locktime software\netlimiter\system.security.cryptography.encoding.dll
  • %ProgramFiles%\locktime software\netlimiter\system.security.cryptography.primitives.dll
  • %ProgramFiles%\locktime software\netlimiter\system.security.cryptography.x509certificates.dll
  • %ProgramFiles%\locktime software\netlimiter\system.security.principal.dll
  • %ProgramFiles%\locktime software\netlimiter\system.security.securestring.dll
  • %ProgramFiles%\locktime software\netlimiter\system.text.encoding.dll
  • %ProgramFiles%\locktime software\netlimiter\system.text.encoding.extensions.dll
  • %ProgramFiles%\locktime software\netlimiter\system.text.regularexpressions.dll
  • %ProgramFiles%\locktime software\netlimiter\system.threading.dll
  • %ProgramFiles%\locktime software\netlimiter\system.threading.overlapped.dll
  • %ProgramFiles%\locktime software\netlimiter\system.threading.tasks.dll
  • %ProgramFiles%\locktime software\netlimiter\system.threading.tasks.parallel.dll
  • %ProgramFiles%\locktime software\netlimiter\system.threading.thread.dll
  • %ProgramFiles%\locktime software\netlimiter\system.threading.threadpool.dll
  • %ProgramFiles%\locktime software\netlimiter\system.threading.timer.dll
  • %ProgramFiles%\locktime software\netlimiter\system.valuetuple.dll
  • %ProgramFiles%\locktime software\netlimiter\system.xml.readerwriter.dll
  • %ProgramFiles%\locktime software\netlimiter\system.xml.xdocument.dll
  • %ProgramFiles%\locktime software\netlimiter\system.xml.xmldocument.dll
  • %ProgramFiles%\locktime software\netlimiter\system.xml.xmlserializer.dll
  • %ProgramFiles%\locktime software\netlimiter\system.xml.xpath.dll
  • %ProgramFiles%\locktime software\netlimiter\system.xml.xpath.xdocument.dll
  • %ProgramFiles%\locktime software\netlimiter\nager.country.dll
  • %ProgramFiles%\locktime software\netlimiter\shaman.singlethreadsynchronizationcontext.dll
  • %ProgramFiles%\locktime software\netlimiter\virustotalnet.dll
  • %ProgramFiles%\locktime software\netlimiter\newtonsoft.json.dll
  • %ProgramFiles%\locktime software\netlimiter\netstandard.dll
  • %ProgramFiles%\locktime software\netlimiter\scottplot.dll
  • %ProgramFiles%\locktime software\netlimiter\scottplot.wpf.dll
  • %ProgramFiles%\locktime software\netlimiter\nlclientapp.exe.config
  • %ProgramFiles%\locktime software\netlimiter\ipaddressrange.dll
  • %ProgramFiles%\locktime software\netlimiter\whoisclient.dll
  • %WINDIR%\installer\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\nl_icon.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\netlimiter\netlimiter.lnk
  • C:\users\public\desktop\netlimiter.lnk
  • %ALLUSERSPROFILE%\locktime\netlimiter\5\logs\nlsvc.log
  • %LOCALAPPDATA%\microsoft\clr_v4.0\usagelogs\nlsvc.exe.log
  • %WINDIR%\temp\~df9743eb49277620b0.tmp
  • %WINDIR%\temp\~df8721e17e25ce866e.tmp
  • %WINDIR%\temp\~df76c6d5ebdc83d1e7.tmp
  • %WINDIR%\temp\~df0b05d6e81f2c7d89.tmp
  • %ALLUSERSPROFILE%\locktime\netlimiter\5\logs\nlclientapp.log
  • %LOCALAPPDATA%\microsoft\clr_v4.0\usagelogs\nlclientapp.exe.log
  • %WINDIR%\temp\~df830e4f220a357c16.tmp
  • %WINDIR%\temp\~df5622bc16580fb648.tmp
  • %WINDIR%\temp\~dfa009523d56780e44.tmp
  • %WINDIR%\temp\~dff0ac5b0dd53168b0.tmp
  • %ALLUSERSPROFILE%\locktime\netlimiter\5\nl_settings.xml.tmp
  • %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6955de25-2c4.pma
  • %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6955de28-a68.pma
  • %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
  • %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000002
  • %LOCALAPPDATA%\microsoft\edge\user data\default\000002.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\index
  • %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_2
  • %LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_3
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cookies-journal
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cookies
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\index
  • %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\manifest-000001
  • %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000003.log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_2
  • %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\manifest-000001
  • %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000003.log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_3
  • %LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel-journal
  • %LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\e5c5c49b169373ef_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000001
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f6b2e04d03c656dc_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000002
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000003
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000004
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\5610223cb6087d2f_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9e5c59d5a0eec716_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000005
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\f8deeab672257e1f_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\99a566994112de1e_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\060a09b50906ca92_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\7f43a816b2242666_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\6019b090dc496db5_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\e3fff649ca5a5771_0
  • %TEMP%\a44031a6-0d90-45a9-a35c-0d8477b223f3.tmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\index-dir\temp-index
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000006
  • %LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\b376764a549a4580_0
  • %LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000007
  • %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\manifest-000001
  • %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db-journal
  • %LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db
  • %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
  • %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db-journal
  • %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000002
  • %LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db
  • %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000002.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts-journal
  • %LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts
  • %LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor-journal
  • %LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor
  • %LOCALAPPDATA%\microsoft\edge\user data\last browser
  • %LOCALAPPDATA%\microsoft\edge\user data\default\preferredapps
  • %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\manifest-000001
  • %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\manifest-000001
  • %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\manifest-000001
  • %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\manifest-000001
  • %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp
  • %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000003.log
  • %LOCALAPPDATA%\microsoft\edge\user data\functional data-wal
  • %LOCALAPPDATA%\microsoft\edge\user data\functional san data-wal
Deletes following files that it created itself
  • %TEMP%\shi192.tmp
  • %TEMP%\msi1e1.tmp
  • %TEMP%\msi3b7.tmp
  • %TEMP%\shid0b.tmp
  • %TEMP%\aifilesremovenoimpers_0a88b24e_778a_4d6c_aeee_0406a8209e91.bak
  • %TEMP%\aifilesremoveimpers_0a88b24e_778a_4d6c_aeee_0406a8209e91.bak
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\corelibnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.appcontext.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.collections.concurrent.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.collections.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.collections.nongeneric.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.collections.specialized.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.componentmodel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.componentmodel.eventbasedasync.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.componentmodel.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.componentmodel.typeconverter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.console.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.data.common.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.contracts.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.debug.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.fileversioninfo.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.process.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.stacktrace.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.textwritertracelistener.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.tools.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.tracesource.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.diagnostics.tracing.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.drawing.common.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.drawing.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.dynamic.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.globalization.calendars.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.globalization.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.globalization.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.compression.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.compression.zipfile.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.filesystem.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.filesystem.driveinfo.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.filesystem.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.filesystem.watcher.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.isolatedstorage.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.memorymappedfiles.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.pipes.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.io.unmanagedmemorystream.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.linq.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.linq.expressions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.linq.parallel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.linq.queryable.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.http.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.nameresolution.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.networkinformation.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.ping.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.requests.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.security.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.sockets.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.webheadercollection.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.websockets.client.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.net.websockets.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.numerics.vectors.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.objectmodel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.reflection.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.reflection.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.reflection.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.resources.reader.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.resources.resourcemanager.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.resources.writer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.compilerservices.visualc.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.handles.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.interopservices.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.interopservices.runtimeinformation.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.numerics.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.serialization.formatters.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.serialization.json.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.serialization.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.runtime.serialization.xml.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.claims.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.cryptography.algorithms.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.cryptography.csp.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.cryptography.encoding.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.cryptography.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.cryptography.x509certificates.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.principal.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.security.securestring.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.text.encoding.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.text.encoding.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.text.regularexpressions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.overlapped.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.tasks.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.tasks.parallel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.thread.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.threadpool.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.threading.timer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.valuetuple.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.readerwriter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.xdocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.xmldocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.xmlserializer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.xpath.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x64\system.xml.xpath.xdocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.appcontext.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.collections.concurrent.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.collections.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.collections.nongeneric.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.collections.specialized.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.componentmodel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.componentmodel.eventbasedasync.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.componentmodel.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.componentmodel.typeconverter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.console.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.data.common.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.contracts.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.debug.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.fileversioninfo.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.process.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.stacktrace.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.textwritertracelistener.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.tools.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.tracesource.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.diagnostics.tracing.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.drawing.common.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.drawing.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.dynamic.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.globalization.calendars.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.globalization.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.globalization.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.compression.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.compression.zipfile.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.filesystem.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.filesystem.driveinfo.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.filesystem.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.filesystem.watcher.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.isolatedstorage.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.memorymappedfiles.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.pipes.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.io.unmanagedmemorystream.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.linq.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.linq.expressions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.linq.parallel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.linq.queryable.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.http.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.nameresolution.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.networkinformation.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.ping.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.requests.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.security.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.sockets.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.webheadercollection.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.websockets.client.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.net.websockets.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.numerics.vectors.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.objectmodel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.reflection.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.reflection.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.reflection.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.resources.reader.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.resources.resourcemanager.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.resources.writer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.compilerservices.visualc.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.handles.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.interopservices.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.interopservices.runtimeinformation.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.numerics.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.serialization.formatters.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.serialization.json.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.serialization.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.runtime.serialization.xml.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.claims.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.cryptography.algorithms.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.cryptography.csp.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.cryptography.encoding.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.cryptography.primitives.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.cryptography.x509certificates.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.principal.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.security.securestring.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.text.encoding.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.text.encoding.extensions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.text.regularexpressions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.overlapped.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.tasks.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.tasks.parallel.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.thread.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.threadpool.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.threading.timer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.valuetuple.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.readerwriter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.xdocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.xmldocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.xmlserializer.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.xpath.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\dotnetforskia-x86\system.xml.xpath.xdocument.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\famfamfam.flags.wpf.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\ipaddressrange.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\af\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\cs\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\de\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\es\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\fa\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\fr\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\hi\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\id\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\it\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\ja\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\ko\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\nb\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\nl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\pl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\pt-br\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\ru\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\sl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\tr\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\zh-hans\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x64\zh-hant\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\af\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\cs\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\de\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\es\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\fa\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\fr\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\hi\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\id\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\it\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\ja\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\ko\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\nb\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\nl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\pl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\pt-br\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\ru\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\sl\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\tr\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\zh-hans\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\langs-x86\zh-hant\nlclientapp.core.resources.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\lang_list.ini
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\microsoft.extensions.logging.abstractions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\netlimiter-5.3.6.0.msi
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\netlimiter-5.3.6.0.x64.msi
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\netlimiter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\netlimiter.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\newtonsoft.json.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlclientapp.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlclientapp.exe.config
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlclientapp.exe.nlog
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlinterop.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlog.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\nlsvc.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\ports.bin
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\shaman.singlethreadsynchronizationcontext.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\virustotalnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\whoisclient.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\windowsfolder\system32\drivers\win10_x64\nldrv.sys
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\windowsfolder\system32\drivers\win10_x86\nldrv.sys
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\windowsfolder\system32\drivers\win7_x64\nldrv.sys
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\windowsfolder\system32\drivers\win7_x86\nldrv.sys
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\corelibnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\locktime.wpf.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\microsoft.extensions.logging.abstractions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\microsoft.win32.taskscheduler.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nager.country.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\netlimiter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\netlimiter.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\netstandard.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\newtonsoft.json.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclielevator.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclientapp.core.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclientapp.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclientapp.exe.config
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclientapp.exe.nlog
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlclientapp.modules.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nldiag.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nldiag.exe.config
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlinterop.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlsvc.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlsvc.exe.nlog
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\nlsvcclicnncheck.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\psrun.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\scottplot.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\scottplot.wpf.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\shaman.singlethreadsynchronizationcontext.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\simpleinjector.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x64\virustotalnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\corelibnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\locktime.wpf.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\microsoft.extensions.logging.abstractions.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\microsoft.win32.taskscheduler.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nager.country.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\netlimiter.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\netlimiter.runtime.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\netstandard.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\newtonsoft.json.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlclielevator.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlclientapp.core.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlclientapp.exe.config
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlclientapp.modules.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nldiag.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nldiag.exe.config
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlinterop.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\nlsvcclicnncheck.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\psrun.exe
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\scottplot.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\scottplot.wpf.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\shaman.singlethreadsynchronizationcontext.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\simpleinjector.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\x86\virustotalnet.dll
  • %TEMP%\{0a88b24e-778a-4d6c-aeee-0406a8209e91}\8209e91\xceed.wpf.toolkit.dll
  • %TEMP%\ai_extui_bin_2540\repair.png
  • %TEMP%\ai_extui_bin_2540\remove.png
  • %TEMP%\ai_extui_bin_2540\whitebackground
  • %TEMP%\ai_extui_bin_2540\background
  • %TEMP%\ai_extui_bin_2540\frame_bottom_right.bmp
  • %TEMP%\ai_extui_bin_2540\frame_bottom_left.bmp
  • %TEMP%\ai_extui_bin_2540\installlogoicon
  • %TEMP%\ai_extui_bin_2540\metrorunapplicationbutton
  • %TEMP%\ai_extui_bin_2540\frame_top_left_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\printico
  • %TEMP%\ai_extui_bin_2540\frame_top_mid.bmp
  • %TEMP%\ai_extui_bin_2540\frame_top_mid_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_bottom_left_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_bottom_mid.bmp
  • %TEMP%\ai_extui_bin_2540\frame_bottom_mid_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\sys_min_down.png
  • %TEMP%\ai_extui_bin_2540\frame_bottom_right_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_caption.bmp
  • %TEMP%\ai_extui_bin_2540\frame_caption_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_right_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_left.bmp
  • %TEMP%\ai_extui_bin_2540\frame_left_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\frame_right.bmp
  • %TEMP%\ai_extui_bin_2540\frame_top_left.bmp
  • %TEMP%\ai_extui_bin_2540\frame_top_right.bmp
  • %TEMP%\ai_extui_bin_2540\frame_top_right_inactive.bmp
  • %TEMP%\ai_extui_bin_2540\exclamic
  • %TEMP%\ai_extui_bin_2540\sys_close_down.png
  • %TEMP%\ai_extui_bin_2540\sys_close_hot.png
  • %TEMP%\ai_extui_bin_2540\sys_close_inactive.png
  • %TEMP%\ai_extui_bin_2540\sys_close_normal.png
  • %TEMP%\ai_extui_bin_2540\sys_min_hot.png
  • %TEMP%\ai_extui_bin_2540\sys_min_inactive.png
  • %TEMP%\ai_extui_bin_2540\sys_min_normal.png
  • %TEMP%\ai_extui_bin_2540\checkbox_for_ctrls
  • %TEMP%\ai_extui_bin_2540\applogoicon.bmp
  • %TEMP%\ai_extui_bin_2540\completi
  • %TEMP%\ai_extui_bin_2540\backbutton
  • %TEMP%\ai_extui_bin_2540\backgroundsurface
  • %TEMP%\ai_extui_bin_2540\backgroundprepare
  • %TEMP%\ai_extui_bin_2540\browsebutton
  • %TEMP%\ai_extui_bin_2540\custicon
  • %TEMP%\ai_extui_bin_2540\checkbox_for_list_ctrls
  • %TEMP%\ai_extui_bin_2540\new
  • %TEMP%\ai_extui_bin_2540\info
  • %TEMP%\ai_extui_bin_2540\insticon
  • %TEMP%\ai_extui_bin_2540\metroinstallbutton
  • %TEMP%\ai_extui_bin_2540\modify.png
  • %TEMP%\ai_extui_bin_2540\nextcancelbuttons
  • %TEMP%\ai_extui_bin_2540\optionslogoicon
  • %TEMP%\ai_extui_bin_2540\removico
  • %TEMP%\ai_extui_bin_2540\repairic
  • %TEMP%\ai_extui_bin_2540\runapplicationbutton
  • %TEMP%\ai_extui_bin_2540\print.png
  • %TEMP%\ai_extui_bin_2540\up
  • %TEMP%\ai_extui_bin_2540\viewreadmebutton
  • %TEMP%\ai_extui_bin_2540\waitlogoicon
  • %TEMP%\ai_extui_bin_2540\metrobuttonimage
  • %TEMP%\ai_extui_bin_2540\checkbox
  • %TEMP%\ai_extui_bin_2540\dotnetnativeimage.dll
  • %TEMP%\ai_extui_bin_2540\nlcalib.dll_1
  • %TEMP%\ai_extui_bin_2540\cmdlinkarrow
  • %TEMP%\ai_extui_bin_2540\preparedlgprogress.gif
  • %TEMP%\ai_extui_bin_2540\file_deleter.ps1
  • %TEMP%\ai_extui_bin_2540\lzmaextractor.dll
  • %TEMP%\ai_extui_bin_2540\prepareprereqdlgprogress.gif
  • %TEMP%\ai_extui_bin_2540\prereqprogressimage.png
  • %TEMP%\ai_extui_bin_2540\applogoicon.svg
  • %TEMP%\ai_extui_bin_2540\progressimage.png
  • %TEMP%\ai_extui_bin_2540\backbutton.xaml
  • %TEMP%\ai_extui_bin_2540\viewreadmebutton.xaml
  • %TEMP%\ai_extui_bin_2540\browsebutton.xaml
  • %TEMP%\ai_extui_bin_2540\nextcancelbuttons.xaml
  • %TEMP%\ai_extui_bin_2540\print.png.xaml
  • %TEMP%\ai_extui_bin_2540\metroinstallbutton.xaml
  • %TEMP%\ai_extui_bin_2540\metrobuttonimage.xaml
  • %TEMP%\ai_extui_bin_2540\modify.png.xaml
  • %TEMP%\ai_extui_bin_2540\remove.png.xaml
  • %TEMP%\ai_extui_bin_2540\repair.png.xaml
  • %TEMP%\ai_extui_bin_2540\metrorunapplicationbutton.xaml
  • %LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
  • %ALLUSERSPROFILE%\locktime\netlimiter\5\nl_settings.xml.lastworking
  • %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6955de25-2c4.pma
  • %LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6955de28-a68.pma
  • %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
Moves the following files
  • from %ProgramFiles%\locktime software\netlimiter\nlclientapp.exe.config to C:\config.msi\e086c.rbf
  • from %ALLUSERSPROFILE%\locktime\netlimiter\5\nl_settings.xml.tmp to %ALLUSERSPROFILE%\locktime\netlimiter\5\nl_settings.xml
  • from %ALLUSERSPROFILE%\locktime\netlimiter\5\nl_settings.xml to %ALLUSERSPROFILE%\locktime\netlimiter\5\nl_settings.xml.lastworking
  • from %LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\current
  • from %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\current
  • from %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\current
  • from %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\extension state\current
  • from %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\current
  • from %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\current
  • from %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\current
  • from %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\current
  • from %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp to %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\current
Modifies the following files
  • %LOCALAPPDATA%\microsoft\edge\user data\last version
  • %LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\000003.log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\web data-journal
  • %LOCALAPPDATA%\microsoft\edge\user data\default\web data
  • %LOCALAPPDATA%\microsoft\edge\user data\default\visited links
  • %LOCALAPPDATA%\microsoft\edge\user data\default\history-journal
  • %LOCALAPPDATA%\microsoft\tokenbroker\cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres
  • %LOCALAPPDATA%\microsoft\edge\user data\default\local storage\leveldb\000003.log
  • %LOCALAPPDATA%\microsoft\edge\user data\default\history
  • %LOCALAPPDATA%\microsoft\edge\user data\default\favicons-journal
  • %LOCALAPPDATA%\microsoft\edge\user data\default\favicons
  • %TEMP%\.ses
Substitutes the following files
  • %ProgramFiles%\locktime software\netlimiter\nlclientapp.exe.config
  • %ALLUSERSPROFILE%\locktime\netlimiter\5\nl_settings.xml.tmp
  • %ALLUSERSPROFILE%\locktime\netlimiter\5\nl_settings.xml
  • %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
  • %LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Platform Notifications\LOG
  • %ALLUSERSPROFILE%\locktime\netlimiter\5\nl_settings.xml.lastworking
Network activity
Connects to
  • '10#.#8.20.226':80
  • 'co####.edge.skype.com':443
  • 'cy###mania.ws':443
  • 'go#####agmanager.com':443
  • 'dr#######bidk.cloudfront.net':443
  • 'x.##2.us':80
  • 'st####e.ko-fi.com':443
  • 'st####.##oudflareinsights.com':443
  • 'zb.###ikfangas.com':443
  • 'x1.#.lencr.org':80
  • 'ou#####tobeconsist.org':443
  • 'to####iukzemydr.org':443
  • 'gh####ethec.info':443
  • 'gs####enthaiti.org':443
  • 'uk####ngwithea.com':443
  • 'cr#.####g2.amazontrust.com':80
  • 'accounts.google.com':443
  • 'fa###ook.com':443
  • 'a###ytics.google.com':443
  • 'st###.#.doubleclick.net':443
  • 'go##le.ru':443
  • 'a.###.#loudflare.com':443
TCP
HTTP GET requests
  • http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?f3##############
  • http://x.##2.us/x.cer
  • http://x1.#.lencr.org/
Other
  • 'co####.edge.skype.com':443
  • 'cy###mania.ws':443
  • 'go#####agmanager.com':443
  • 'dr#######bidk.cloudfront.net':443
  • 'st####e.ko-fi.com':443
  • 'st####.##oudflareinsights.com':443
  • 'zb.###ikfangas.com':443
  • 'ou#####tobeconsist.org':443
  • 'to####iukzemydr.org':443
  • 'gh####ethec.info':443
  • 'gs####enthaiti.org':443
  • 'uk####ngwithea.com':443
  • 'accounts.google.com':443
  • 'fa###ook.com':443
  • 'a###ytics.google.com':443
  • 'st###.#.doubleclick.net':443
  • 'go##le.ru':443
  • 'a.###.#loudflare.com':443
UDP
  • DNS ASK co####.edge.skype.com
  • DNS ASK cy###mania.ws
  • DNS ASK go#####agmanager.com
  • DNS ASK dr#######bidk.cloudfront.net
  • DNS ASK fo###.#oogleapis.com
  • DNS ASK x.##2.us
  • DNS ASK st####e.ko-fi.com
  • DNS ASK zb.###ikfangas.com
  • DNS ASK st####.##oudflareinsights.com
  • DNS ASK x1.#.lencr.org
  • DNS ASK ou#####tobeconsist.org
  • DNS ASK to####iukzemydr.org
  • DNS ASK gh####ethec.info
  • DNS ASK gs####enthaiti.org
  • DNS ASK di##ord.gg
  • DNS ASK t.#e
  • DNS ASK yo##ube.com
  • DNS ASK uk####ngwithea.com
  • DNS ASK cr#.####g2.amazontrust.com
  • DNS ASK fa###ook.com
  • DNS ASK accounts.google.com
  • DNS ASK a###ytics.google.com
  • DNS ASK st###.#.doubleclick.net
  • DNS ASK go##le.ru
  • DNS ASK a.###.#loudflare.com
Miscellaneous
Searches for the following windows
  • ClassName: 'EDIT' WindowName: ''
  • ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Microsoft\Edge\User Data'
Creates and executes the following
  • '%TEMP%\rarsfx0\netlimiter.exe' /qb
  • '%ProgramFiles%\locktime software\netlimiter\nlsvc.exe' /afterinstall
  • '%ProgramFiles%\locktime software\netlimiter\nlsvc.exe'
  • '%ProgramFiles%\locktime software\netlimiter\nlclientapp.exe' /install
  • '%TEMP%\rarsfx0\64.exe'
Executes the following
  • '%WINDIR%\syswow64\msiexec.exe' /i %TEMP%\{0A88B24E-778A-4D6C-AEEE-0406A8209E91}\8209E91\netlimiter-5.3.6.0.x64.msi /qb AI_SETUPEXEPATH=%TEMP%\RarSFX0\netlimiter.exe SETUPEXEDIR=%TEMP%\RarSFX0\ EXE_CMD_LINE="/exenoupdates /f...
  • '%WINDIR%\syswow64\net1.exe' stop "nlsvc"
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\32or64.cmd" "
  • '%WINDIR%\syswow64\net.exe' start "nlsvc"
  • '%WINDIR%\syswow64\net1.exe' start "nlsvc"
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument https://www.cybermania.ws/
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate https://www.cybermania.ws/
  • '%ProgramFiles(x86)%\microsoft\edge\application\89.0.774.68\identity_helper.exe' --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1832,10909059324755949553,13628839553555690033,131072 --lang=en-US --service-sandbox-type=none --mojo...
  • '%WINDIR%\syswow64\net.exe' stop "nlsvc"' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\32or64.cmd" "' (with hidden window)
  • '%WINDIR%\syswow64\net.exe' start "nlsvc"' (with hidden window)
  • '%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate https://www.cybermania.ws/' (with hidden window)

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android