Log

Switches begin
Switches end
Starting v4.2.0.27
FBUserToken: '891451194246849'
FBLocale: 'en_GB'
FBAttackId: '785926708164141'
User is Admin: NO
Vista or Higher: YES
IsWow64: YES
GetWorkDir: C:\Users\User\AppData\Local\Temp\FBScanner_670508319
Trying to start with Admin rights ...: Failed
InitReport
SendReport_Init
Request query: 1443300579261932/malware_scanner
Request body: access_token=1443300579261932|cfedb1bd1113405e097902a8602d76ed&use
r_token=891451194246849&report={"report_type": "SCANNER_INIT",}&report_sig=BE40D
6EE5B9F256F5E45F79F4BD0B156&fwd_ip=127.0.0.1&version=4.2.0.27
Response: {"status":true}
# product=FBAV
# version=8
# FBAV_user_token=891451194246849
# FBAV_user_locale=en_GB
# FBAV_attack_id=785926708164141
# FBAV_status=0
# flags=1
# ESET.exe=4.3.0.27
# EOSSerial=fbd4a38b4c4d4649b450cc5d30254b0f
# end=init
# utc_time=2015-02-17 01:45:38
# local_time=2015-02-17 09:45:38 (+0800, Malay Peninsula Standard Time)
# country="United States"
# osver=6.1.7601 NT Service Pack 1
INIT report sent to ESET
ExtractEsetsApi OK
r_token=891451194246849&report={"report_type": "SCANNER_PROGRESS","progress": 0,
}&report_sig=2B743F651544C758D4C21A49EB3CF23E&fwd_ip=127.0.0.1&version=4.2.0.27
Updating
Update Init
Update Download
}&report_sig=2B743F651544C758D4C21A49EB3CF23E&fwd_ip=127.0.0.1&version=4.2.0.27
}&report_sig=3DC900E65697E57238D5A919F32752B0&fwd_ip=127.0.0.1&version=4.2.0.27
}&report_sig=3F8375609AB7F90439B42912269A53FD&fwd_ip=127.0.0.1&version=4.2.0.27
}&report_sig=3F8375609AB7F90439B42912269A53FD&fwd_ip=127.0.0.1&version=4.2.0.27
}&report_sig=4BFD76DD577F0A652BC5A263F1463DD6&fwd_ip=127.0.0.1&version=4.2.0.27
}&report_sig=6549E52B04F5AEF9EC9A5F5686A2AE29&fwd_ip=127.0.0.1&version=4.2.0.27
}&report_sig=FBACAFCD06E447A3452AD6479A1B4251&fwd_ip=127.0.0.1&version=4.2.0.27
}&report_sig=41DE667BE4B40B28EB51B069C37E545B&fwd_ip=127.0.0.1&version=4.2.0.27
}&report_sig=41DE667BE4B40B28EB51B069C37E545B&fwd_ip=127.0.0.1&version=4.2.0.27
r_token=891451194246849&report={"report_type": "SCANNER_PROGRESS","progress": 10
,}&report_sig=AC171CBE639BC332E608EF298CB67001&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=AC171CBE639BC332E608EF298CB67001&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=BCDB4B1E044BB807B717AF2307EE0CF5&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=BCDB4B1E044BB807B717AF2307EE0CF5&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=EBDD954BFD00365A56399C4CE273139A&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=866AF33B0280EA61B17A3A36D3449D78&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=65F462285C29B03D265EE11A1AC06AB6&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=214BAC5B4A2FF8500EE94FF24946FD5C&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=88B6B60B4797206A650127491C5C7B8E&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=A5A9BE6F2A1A54CB1A36A5DCE822AC6D&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=F03CDC54B63E3A0EDB6743119E6F2AFD&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=F03CDC54B63E3A0EDB6743119E6F2AFD&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=A1EE68F783791D7539778E705CD79F6A&fwd_ip=127.0.0.1&version=4.2.0.27
Update Finalize
,}&report_sig=BCCE58E7B42B5B9894C1B0A33C679EB8&fwd_ip=127.0.0.1&version=4.2.0.27
Updated modules version: 22503
# product=FBAV
# version=8
# FBAV_user_token=891451194246849
# FBAV_attack_id=785926708164141
# FBAV_status=0
# flags=1
# ESET.exe=4.3.0.27
# end=Updated
# utc_time=2015-02-17 01:45:38
UPDATED report sent to ESET
Initialize Scan
Scan
Scanner engine: 22503
r_token=891451194246849&report={"report_type": "SCANNER_DATA","event_type": "DET
ECTED","sample_name": "a variant of Win32/Conduit.SearchProtect.P potentially un
wanted application","sample_id": "a variant of Win32/Conduit.SearchProtect.P pot
entially unwanted application","sample_hashes": {"SHA1": "0000000000000000000000
000000000000000000",},}&report_sig=11F63A290ECEE7AE4A1E901C834F4285&fwd_ip=127.0
.0.1&version=4.2.0.27
r_token=891451194246849&report={"report_type": "SCANNER_DATA","event_type": "CLE
ANUP_FAILURE","sample_name": "a variant of Win32/Conduit.SearchProtect.P potenti
ally unwanted application","sample_id": "a variant of Win32/Conduit.SearchProtec
t.P potentially unwanted application","sample_hashes": {"SHA1": "000000000000000
0000000000000000000000000",},}&report_sig=5D237AB991C3762D2E486F9A1476E634&fwd_i
p=127.0.0.1&version=4.2.0.27
,}&report_sig=6D15D3E1FF90784432A863B9D218F145&fwd_ip=127.0.0.1&version=4.2.0.27
Scanner engine: 22503
,}&report_sig=6028852688785C2E911B144B006EF253&fwd_ip=127.0.0.1&version=4.2.0.27

,}&report_sig=E5A9E743DF05DE011106199E0C382599&fwd_ip=127.0.0.1&version=4.2.0.27

,}&report_sig=1C551C5EEA8098D9D2626A4BB51F0FE4&fwd_ip=127.0.0.1&version=4.2.0.27

ECTED","sample_name": "a variant of Win32/Conduit.SearchProtect.N potentially un
wanted application","sample_id": "a variant of Win32/Conduit.SearchProtect.N pot
entially unwanted application","sample_hashes": {"SHA1": "4A82A588430B85B3835C8D
0A0A402D7AD35915F9",},}&report_sig=2E283B5455C808D05079F4C58934EC72&fwd_ip=127.0
.0.1&version=4.2.0.27
ANUP_SUCCESS","sample_name": "a variant of Win32/Conduit.SearchProtect.N potenti
t.N potentially unwanted application","sample_hashes": {"SHA1": "4A82A588430B85B
3835C8D0A0A402D7AD35915F9",},}&report_sig=3AD48FAABE04D346C4659CD422BE3724&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "0084D680F9DDE34CC4E41D
4233DB9D8694DE5F88",},}&report_sig=33C688A49311FED7649E4667ADF250ED&fwd_ip=127.0
.0.1&version=4.2.0.27
ANUP_SUCCESS","sample_name": "a variant of Win32/Conduit.SearchProtect.P potenti

t.P potentially unwanted application","sample_hashes": {"SHA1": "0084D680F9DDE34
CC4E41D4233DB9D8694DE5F88",},}&report_sig=0AADA9A743BFAFF3F0E2AFB767362CF5&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "4C647D60B445220E1F2300
C979433DF7C0F119B4",},}&report_sig=37AD48D2301C12546802FF506E4EDF1E&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "4C647D60B445220
E1F2300C979433DF7C0F119B4",},}&report_sig=C21612154DFC37BA55E62E62186DE4AA&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "E0C40AC460D16773DA3546
A23508774E7898D893",},}&report_sig=B76089667DE0079EEBE234E236597E70&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "E0C40AC460D1677
3DA3546A23508774E7898D893",},}&report_sig=D783AC2FD27E73F62D1A4ACB1C7D0AD9&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "D68B6F04BDEAE5E8335F52
C4A32E08D91A80505E",},}&report_sig=2B777B6148DF80ED65EECF658357176D&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "D68B6F04BDEAE5E
8335F52C4A32E08D91A80505E",},}&report_sig=32BA490DB126E600E4F7B3F19668EC9E&fwd_i
p=127.0.0.1&version=4.2.0.27

entially unwanted application","sample_hashes": {"SHA1": "88F0020FC52EC4C7F80519
D64F0C49D56210C499",},}&report_sig=C00FCF559228B515EF51F7035C525FD9&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "88F0020FC52EC4C
7F80519D64F0C49D56210C499",},}&report_sig=6A63B95E8AF0EDD9066152DE1DF53D70&fwd_i
p=127.0.0.1&version=4.2.0.27
,}&report_sig=E90BD11899688B77F684A0AA0FFF07A6&fwd_ip=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "0E7E5F4C697E7E0A77575D
8D62C4C6357CCD3B02",},}&report_sig=575CA9C642190BDBBA0AD2B6F62C21D4&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "0E7E5F4C697E7E0
A77575D8D62C4C6357CCD3B02",},}&report_sig=D186BE0C5177A1000347932ABF7E495C&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "69AF8D82BD65216B649368
B4F1A0CB2708D296E1",},}&report_sig=AAE3BE3F1D15EA4515FC4BBA57974CB3&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "69AF8D82BD65216
B649368B4F1A0CB2708D296E1",},}&report_sig=D17AE61CC672159F03B23827F35BAF9A&fwd_i
p=127.0.0.1&version=4.2.0.27

entially unwanted application","sample_hashes": {"SHA1": "3661EDB38BCB034EA00F78
F9144D975333C786BA",},}&report_sig=A12C54924DD3A84F494CEA9E35E4D6FA&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "3661EDB38BCB034
EA00F78F9144D975333C786BA",},}&report_sig=0D3C2767F0A15869901643881992C1D9&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "3096A6D6D5007B947C86A7
FE8E72EEB3C86E80B3",},}&report_sig=4B8FDEE5D2DCC4AD2CC4619D1006FC10&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "3096A6D6D5007B9
47C86A7FE8E72EEB3C86E80B3",},}&report_sig=D544C2A15C7A28B8D9E1FDB430A9B347&fwd_i
p=127.0.0.1&version=4.2.0.27
ECTED","sample_name": "a variant of Win32/Conduit.SearchProtect.H potentially un
wanted application","sample_id": "a variant of Win32/Conduit.SearchProtect.H pot
entially unwanted application","sample_hashes": {"SHA1": "493D9D48C881B9118DB8B6
7DB2C74D188ACA060C",},}&report_sig=097D9F2194AEA57F1174A3F50AC73A2D&fwd_ip=127.0
.0.1&version=4.2.0.27
ANUP_SUCCESS","sample_name": "a variant of Win32/Conduit.SearchProtect.H potenti
t.H potentially unwanted application","sample_hashes": {"SHA1": "493D9D48C881B91
18DB8B67DB2C74D188ACA060C",},}&report_sig=DF5723922B916D0F2DB549CE0CECEA71&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "82D24D65704A0F5B86CD63
30D82D3AF721D13053",},}&report_sig=29C3A2FC4841181447A3FDB0A291E0DB&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "82D24D65704A0F5
B86CD6330D82D3AF721D13053",},}&report_sig=AFDF1F4FEFE7F3EB318A758242ED0E9D&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "4FB6442ACD0A9F8AD73B7D
C811D66571DB9589DE",},}&report_sig=39789E14A3F7E9A58516C03AC0C488AC&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "4FB6442ACD0A9F8
AD73B7DC811D66571DB9589DE",},}&report_sig=58506D1ABF1AF322E6FBC0849C0E6259&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "17CCE05F40D9ECE31DB084
1419226BBCDEA130B7",},}&report_sig=4713158E844C84E12FBF45AA8A65BD3B&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "17CCE05F40D9ECE
31DB0841419226BBCDEA130B7",},}&report_sig=4877CEAEAD0CD929D80C525C090D9C21&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "4694896D296941721C0D8D
609E512AE1B7FD2FF4",},}&report_sig=5508154CC98652231D518DC3C7CD9783&fwd_ip=127.0
.0.1&version=4.2.0.27

t.H potentially unwanted application","sample_hashes": {"SHA1": "4694896D2969417
21C0D8D609E512AE1B7FD2FF4",},}&report_sig=0BB5F74A11EDC80FBBB34B40BC06B224&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "C5F21C12A5C2066BBAE858
7380FAAFA01F739B38",},}&report_sig=EBFB1509C9D3C772BF8D1BD780443BD8&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "C5F21C12A5C2066
BBAE8587380FAAFA01F739B38",},}&report_sig=7479A9B8CA4EB4819F9FD40B321BC7CC&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "7B747225FCFD7B718513C6
1724F85F9DE3A3DEB1",},}&report_sig=D0FB0D8273268251166DD97F90939D53&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "7B747225FCFD7B7
18513C61724F85F9DE3A3DEB1",},}&report_sig=6187CED75C2FE3AA79EAEE2C718BEE21&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "9CF16FBA745174DB1541FD
0F4F64C22ED4928AED",},}&report_sig=DACBB15ED63908D512AAE7BB7C86D346&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "9CF16FBA745174D

B1541FD0F4F64C22ED4928AED",},}&report_sig=8F8D317FA6F6ECDEF7B93C5D9B7891F0&fwd_i
p=127.0.0.1&version=4.2.0.27
.0.1&version=4.2.0.27
p=127.0.0.1&version=4.2.0.27
.0.1&version=4.2.0.27
p=127.0.0.1&version=4.2.0.27
ECTED","sample_name": "a variant of Win32/Toolbar.Conduit.AH potentially unwante
d application","sample_id": "a variant of Win32/Toolbar.Conduit.AH potentially u
nwanted application","sample_hashes": {"SHA1": "B95147A06E8C0DC6DD82665806A45723
5D91A88C",},}&report_sig=A6D60E9F5D5E3466AF42AF63333D392E&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ANUP_SUCCESS","sample_name": "a variant of Win32/Toolbar.Conduit.AH potentially
unwanted application","sample_id": "a variant of Win32/Toolbar.Conduit.AH potent
ially unwanted application","sample_hashes": {"SHA1": "B95147A06E8C0DC6DD8266580
6A457235D91A88C",},}&report_sig=17317585F7384EC83B373C4C9373C48C&fwd_ip=127.0.0.
1&version=4.2.0.27
ECTED","sample_name": "JS/Kilim.AZ trojan","sample_id": "JS/Kilim.AZ trojan","sa
mple_hashes": {"SHA1": "F69229B3F8E9F9CB1C7CF1F529ABED5908A9C074",},}&report_sig
=20E0D7AE1A939CB022B07814C91CE5BB&fwd_ip=127.0.0.1&version=4.2.0.27
ANUP_SUCCESS","sample_name": "JS/Kilim.AZ trojan","sample_id": "JS/Kilim.AZ troj
an","sample_hashes": {"SHA1": "F69229B3F8E9F9CB1C7CF1F529ABED5908A9C074",},}&rep
ort_sig=8B122962558C9B45DAAC425058A3EE94&fwd_ip=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "2B9A1340BEC2FE2694C333
ACD77F0E12EF9550D1",},}&report_sig=97F1A4511942C18CE817459B5ADDF38F&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "2B9A1340BEC2FE2
694C333ACD77F0E12EF9550D1",},}&report_sig=3E1BDDF899E3A80D89F87B0C0645222C&fwd_i
p=127.0.0.1&version=4.2.0.27
nwanted application","sample_hashes": {"SHA1": "675526C1B3CB27C6635233B62EDB8ECE
EBFE1556",},}&report_sig=7F5AC64E0AA780B3437DFD9BD3972ECA&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ially unwanted application","sample_hashes": {"SHA1": "675526C1B3CB27C6635233B62
EDB8ECEEBFE1556",},}&report_sig=629C6E90DD869B7F9DC9A7193156FB14&fwd_ip=127.0.0.
1&version=4.2.0.27
ECTED","sample_name": "a variant of Win32/Conduit.SearchProtect.N potentially un
wanted application","sample_id": "a variant of Win32/Conduit.SearchProtect.N pot
entially unwanted application","sample_hashes": {"SHA1": "C0114483C9E2C1271B0D59
4AB6A6BF1E4F383D63",},}&report_sig=6B2EECCDD048543CAC5C040076090FBA&fwd_ip=127.0
.0.1&version=4.2.0.27
ANUP_SUCCESS","sample_name": "a variant of Win32/Conduit.SearchProtect.N potenti
t.N potentially unwanted application","sample_hashes": {"SHA1": "C0114483C9E2C12
71B0D594AB6A6BF1E4F383D63",},}&report_sig=820F7AA893F679F1B749D25BC63A39A6&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "9E5D399295EA8E6A79CC50
E48D7D4EFD3C5FF0F6",},}&report_sig=6DEB617DF2AA703D10572F4979059882&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "9E5D399295EA8E6
A79CC50E48D7D4EFD3C5FF0F6",},}&report_sig=3A0873EEE1E098F6B6BE5168DBEE699F&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "9C505E97497198E217C601
39437C0672B550FFE8",},}&report_sig=3F5C124ADD1D406C68123DE4C61AFDEC&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "9C505E97497198E
217C60139437C0672B550FFE8",},}&report_sig=5CC12996AE646A3BF53D9C5D930E2DF0&fwd_i
p=127.0.0.1&version=4.2.0.27

entially unwanted application","sample_hashes": {"SHA1": "2A831FECED37BC050AB2F0
37180088E37F8C6976",},}&report_sig=6A41777998C162E4A6C7C6F24171F985&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "2A831FECED37BC0
50AB2F037180088E37F8C6976",},}&report_sig=64EA415C5A7669E3AAA3F8594DBDD56A&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "3A782B84BC7D1D8528E71B
2232F8FE49803EC957",},}&report_sig=69C55BA16A72C4FAEC97D264351D4392&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "3A782B84BC7D1D8
528E71B2232F8FE49803EC957",},}&report_sig=D77EC788873E9BE693ED3729F31BD6CE&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "88F0020FC52EC4C7F80519
D64F0C49D56210C499",},}&report_sig=C00FCF559228B515EF51F7035C525FD9&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "88F0020FC52EC4C
7F80519D64F0C49D56210C499",},}&report_sig=6A63B95E8AF0EDD9066152DE1DF53D70&fwd_i
p=127.0.0.1&version=4.2.0.27

.0.1&version=4.2.0.27
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "08F5E87E0F562756DE8621
84FEFCBA45E4B28BE8",},}&report_sig=CCC2319473B5FE6E94DFC4D8861712AA&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "08F5E87E0F56275
6DE862184FEFCBA45E4B28BE8",},}&report_sig=FC45C2C455C4722C83C333C7521D9ADC&fwd_i
p=127.0.0.1&version=4.2.0.27
ECTED","sample_name": "Win32/Conduit.SearchProtect potentially unwanted applicat
ion","sample_id": "Win32/Conduit.SearchProtect potentially unwanted application"
,"sample_hashes": {"SHA1": "1DA36F2CEBBB8BACCE6B13E4438FEEBCD11B284C",},}&report
_sig=26D65DE461183B76A4298FD6D5E91654&fwd_ip=127.0.0.1&version=4.2.0.27
ANUP_SUCCESS","sample_name": "Win32/Conduit.SearchProtect potentially unwanted a
pplication","sample_id": "Win32/Conduit.SearchProtect potentially unwanted appli
cation","sample_hashes": {"SHA1": "1DA36F2CEBBB8BACCE6B13E4438FEEBCD11B284C",},}
&report_sig=2837C28C23A9EDED421662D9D8BF2FC8&fwd_ip=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "71ED43D9A88205E127AA17
3FB2392FD0E3D090D7",},}&report_sig=3C2ECD013710DB5E1FCB1DA5FCE2E5B7&fwd_ip=127.0
.0.1&version=4.2.0.27

t.P potentially unwanted application","sample_hashes": {"SHA1": "71ED43D9A88205E
127AA173FB2392FD0E3D090D7",},}&report_sig=C3189F43F98F3993B5DDF25021D396DE&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "3C3DE0043F71DACE7A818B
75928139C37ACCC298",},}&report_sig=1B369C89785DE4583B0D4931A46116D5&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "3C3DE0043F71DAC
E7A818B75928139C37ACCC298",},}&report_sig=E5ACF51F2FBA6A0B7D9BE7202D3EC369&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "C347E76B52F6C704D1C362
32A4277AA831011613",},}&report_sig=2DBC5BB946CA75A6A2D85C8515DA69AA&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "C347E76B52F6C70
4D1C36232A4277AA831011613",},}&report_sig=748F2D397C69B6B9417A005818F1B5CF&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "8615AECFE68AF3B953BBC2
78C5A0EB10C2FE9379",},}&report_sig=EE150312F24B7C4CAF4D5C4AA2342F81&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "8615AECFE68AF3B
953BBC278C5A0EB10C2FE9379",},}&report_sig=2BABAFC3A25699840A89CFB29015A846&fwd_i
p=127.0.0.1&version=4.2.0.27

entially unwanted application","sample_hashes": {"SHA1": "E32E59722E9487ADD70654
D9454F01926DEF8115",},}&report_sig=42AAB2A4F5BF2C3FC124DD808A6ACED7&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "E32E59722E9487A
DD70654D9454F01926DEF8115",},}&report_sig=A103EB311D5E9B23A792BFC1B32A5798&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "B5823B99592970FD26908E
9E3B7C059CA999A819",},}&report_sig=32E203C8B4F0FFCBB76350E36EEAF977&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "B5823B99592970F
D26908E9E3B7C059CA999A819",},}&report_sig=8641EBCDCC849894AFE241789CF1C2A7&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "EC80F73318715E3AD30761
13C2397841E139F4AE",},}&report_sig=08CC5344FBCB6BE47E5CD83F95E5917B&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "EC80F73318715E3
AD3076113C2397841E139F4AE",},}&report_sig=58A6EA604EC0F082833C44D4970EC83B&fwd_i
p=127.0.0.1&version=4.2.0.27

entially unwanted application","sample_hashes": {"SHA1": "47E4010024FEB701CF59F4
EED477E47BB0596471",},}&report_sig=F7C3A346DDFF40374762C1005675B571&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "47E4010024FEB70
1CF59F4EED477E47BB0596471",},}&report_sig=F77652A3BB029128A988387890E2A9A8&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "0A9FE38F15D92D410585BA
B56100BE5DB83D4B8A",},}&report_sig=B4D86304BBDFE89371DC9B3F3C41D104&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "0A9FE38F15D92D4
10585BAB56100BE5DB83D4B8A",},}&report_sig=F18025B0A21552B9C51BDF93A77B9137&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "CA946DDE75C196186A79BB
3E5CE72F18C6105C09",},}&report_sig=4366E3F56D40E68EF56E6F6E30A169CA&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "CA946DDE75C1961
86A79BB3E5CE72F18C6105C09",},}&report_sig=98AFA48C8B64A7F3B872B7FF82A80E73&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "064FBE5308860B8006DA18
BF78F080B4B848AB58",},}&report_sig=22C04CCEBA3596146F0F4877ACFFD427&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "064FBE5308860B8
006DA18BF78F080B4B848AB58",},}&report_sig=AB19C3EFAB81A8FEF1AE9EC2B279371F&fwd_i
p=127.0.0.1&version=4.2.0.27
.0.1&version=4.2.0.27
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "2D07E7139B1C3EC3399D57
92FD80BBA78E717C7A",},}&report_sig=B2F8EEA7CF30D1FE884977D296EF7299&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "2D07E7139B1C3EC
3399D5792FD80BBA78E717C7A",},}&report_sig=47BF8A95AF27C009A0A4D21C78CB87A9&fwd_i
p=127.0.0.1&version=4.2.0.27
ECTED","sample_name": "Win32/Conduit.SearchProtect potentially unwanted applicat
ion","sample_id": "Win32/Conduit.SearchProtect potentially unwanted application"
,"sample_hashes": {"SHA1": "93E3415CE3C59DFB26AE82C0BA0AFF451B7E4C5A",},}&report
_sig=B63060296F5E9516704539BA820E226C&fwd_ip=127.0.0.1&version=4.2.0.27

ANUP_SUCCESS","sample_name": "Win32/Conduit.SearchProtect potentially unwanted a
pplication","sample_id": "Win32/Conduit.SearchProtect potentially unwanted appli
cation","sample_hashes": {"SHA1": "93E3415CE3C59DFB26AE82C0BA0AFF451B7E4C5A",},}
&report_sig=FCB36B53A909D351C251E9FFA852A595&fwd_ip=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "2B9A1340BEC2FE2694C333
ACD77F0E12EF9550D1",},}&report_sig=97F1A4511942C18CE817459B5ADDF38F&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "2B9A1340BEC2FE2
694C333ACD77F0E12EF9550D1",},}&report_sig=3E1BDDF899E3A80D89F87B0C0645222C&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "0C5518F79FCFF8CCC87F84
1B994983856F7FD268",},}&report_sig=0F4069F15C44E720BDE5FF7AB37AC69E&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "0C5518F79FCFF8C
CC87F841B994983856F7FD268",},}&report_sig=B923BE6E57EAF7891BD83F649755746E&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "9B75624241E5B59AD9297E
807E93FDF82B031F17",},}&report_sig=687F1140F2FCB8DCC59060BDD0E424F2&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "9B75624241E5B59
AD9297E807E93FDF82B031F17",},}&report_sig=0289D9F8F5B5D508A7E6A6489EAA79EB&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "5222AAACF380DE937DFF9B
DEA4145BC8CAC8BF14",},}&report_sig=9275E0908F93ED3557B830618CC58F37&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "5222AAACF380DE9
37DFF9BDEA4145BC8CAC8BF14",},}&report_sig=B6D348B6A7BC5D43C057956FF7B4485A&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "5D4436AD13BC94C6F55D28
4B1DD8A352EEBCC71C",},}&report_sig=631736586DE80BCF0EAA158FC8524465&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "5D4436AD13BC94C
6F55D284B1DD8A352EEBCC71C",},}&report_sig=691307C298A6A39A12B6AA9BB23E376A&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "9CF16FBA745174DB1541FD
0F4F64C22ED4928AED",},}&report_sig=DACBB15ED63908D512AAE7BB7C86D346&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "9CF16FBA745174D
B1541FD0F4F64C22ED4928AED",},}&report_sig=8F8D317FA6F6ECDEF7B93C5D9B7891F0&fwd_i
p=127.0.0.1&version=4.2.0.27
nwanted application","sample_hashes": {"SHA1": "41F23E459EFF023AB1B26586463360E4
5528ABC7",},}&report_sig=8E8F22CC0F418E8C38FC95BEFB60B8D1&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ially unwanted application","sample_hashes": {"SHA1": "41F23E459EFF023AB1B265864
63360E45528ABC7",},}&report_sig=42D7EDA91609A308D4FD6A4855FC8ACD&fwd_ip=127.0.0.
1&version=4.2.0.27
nwanted application","sample_hashes": {"SHA1": "C2C35F77505CB8FF70FC312C44E070DB
D5834942",},}&report_sig=CE44AA2BD6CD6CD73DA0C5E6A3BA9FF3&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ially unwanted application","sample_hashes": {"SHA1": "C2C35F77505CB8FF70FC312C4
4E070DBD5834942",},}&report_sig=2EC2E06003B2699C4A5A1897DF514715&fwd_ip=127.0.0.
1&version=4.2.0.27

nwanted application","sample_hashes": {"SHA1": "51AC1B6D9A2F8135DD9D5C7D11E1590B
D215D0B0",},}&report_sig=D20AC012B4EE164B347E500B172B3D96&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ially unwanted application","sample_hashes": {"SHA1": "51AC1B6D9A2F8135DD9D5C7D1
1E1590BD215D0B0",},}&report_sig=2461A7235CC839DAF0318B4F51AC216B&fwd_ip=127.0.0.
1&version=4.2.0.27
nwanted application","sample_hashes": {"SHA1": "BB1A5AE5206E9995C35E517ECBA291C3
0CE4F7B7",},}&report_sig=3F8EC03C2F648E300ECDC20528BF35B2&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ially unwanted application","sample_hashes": {"SHA1": "BB1A5AE5206E9995C35E517EC
BA291C30CE4F7B7",},}&report_sig=012AA8B3FBACA54231A5367A5B3B0620&fwd_ip=127.0.0.
1&version=4.2.0.27
nwanted application","sample_hashes": {"SHA1": "D4D640E4A04D91DEF41DAD844D1EC046
FA1D5F3E",},}&report_sig=1C8A5CA52C3C089C65D522633B3B6080&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ially unwanted application","sample_hashes": {"SHA1": "D4D640E4A04D91DEF41DAD844
D1EC046FA1D5F3E",},}&report_sig=739B9990642983A67E1C4D4A77FDA4CC&fwd_ip=127.0.0.
1&version=4.2.0.27
ECTED","sample_name": "Win32/Toolbar.Conduit.AH potentially unwanted application
","sample_id": "Win32/Toolbar.Conduit.AH potentially unwanted application","samp
le_hashes": {"SHA1": "47684BC9F96872C4134DD46689D013BD8E51A14A",},}&report_sig=6
CFD929F6B858D79B8C1376948344C9F&fwd_ip=127.0.0.1&version=4.2.0.27

ANUP_SUCCESS","sample_name": "Win32/Toolbar.Conduit.AH potentially unwanted appl
ication","sample_id": "Win32/Toolbar.Conduit.AH potentially unwanted application
","sample_hashes": {"SHA1": "47684BC9F96872C4134DD46689D013BD8E51A14A",},}&repor
t_sig=EBAF25651289B3E75E98E096EB11F4C6&fwd_ip=127.0.0.1&version=4.2.0.27
nwanted application","sample_hashes": {"SHA1": "FADE4553CF63ABD446132E31C7F927AC
9D191F5D",},}&report_sig=87A54A7EA9143E7DD0096CB40F359062&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ially unwanted application","sample_hashes": {"SHA1": "FADE4553CF63ABD446132E31C
7F927AC9D191F5D",},}&report_sig=5B71E76BBC7D38B8CA49C64A3E9C156E&fwd_ip=127.0.0.
1&version=4.2.0.27
nwanted application","sample_hashes": {"SHA1": "95D6172E485A8CE4E67FC5544335FB31
7B8D989B",},}&report_sig=1E372A0B11CC516CA8C18C4050369E6B&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ially unwanted application","sample_hashes": {"SHA1": "95D6172E485A8CE4E67FC5544
335FB317B8D989B",},}&report_sig=F9580271310A128BAD93584EF1F60273&fwd_ip=127.0.0.
1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "2A831FECED37BC050AB2F0
37180088E37F8C6976",},}&report_sig=6A41777998C162E4A6C7C6F24171F985&fwd_ip=127.0
.0.1&version=4.2.0.27
t.H potentially unwanted application","sample_hashes": {"SHA1": "2A831FECED37BC0
50AB2F037180088E37F8C6976",},}&report_sig=64EA415C5A7669E3AAA3F8594DBDD56A&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "5222AAACF380DE937DFF9B
DEA4145BC8CAC8BF14",},}&report_sig=9275E0908F93ED3557B830618CC58F37&fwd_ip=127.0
.0.1&version=4.2.0.27
ANUP_FAILURE","sample_name": "a variant of Win32/Conduit.SearchProtect.P potenti
t.P potentially unwanted application","sample_hashes": {"SHA1": "5222AAACF380DE9
37DFF9BDEA4145BC8CAC8BF14",},}&report_sig=A23F670828F3AA757BD224FE375D8E73&fwd_i
p=127.0.0.1&version=4.2.0.27
entially unwanted application","sample_hashes": {"SHA1": "C347E76B52F6C704D1C362
32A4277AA831011613",},}&report_sig=2DBC5BB946CA75A6A2D85C8515DA69AA&fwd_ip=127.0
.0.1&version=4.2.0.27
t.P potentially unwanted application","sample_hashes": {"SHA1": "C347E76B52F6C70
4D1C36232A4277AA831011613",},}&report_sig=748F2D397C69B6B9417A005818F1B5CF&fwd_i
p=127.0.0.1&version=4.2.0.27
ECTED","sample_name": "a variant of Win32/Toolbar.Conduit.AA potentially unwante
d application","sample_id": "a variant of Win32/Toolbar.Conduit.AA potentially u
nwanted application","sample_hashes": {"SHA1": "60A882DFB633B1179EC55F395F186219
2BABE03A",},}&report_sig=D33EDBEF11BE263F804851A4944498A1&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ANUP_SUCCESS","sample_name": "a variant of Win32/Toolbar.Conduit.AA potentially
unwanted application","sample_id": "a variant of Win32/Toolbar.Conduit.AA potent
ially unwanted application","sample_hashes": {"SHA1": "60A882DFB633B1179EC55F395
F1862192BABE03A",},}&report_sig=89D0E510BA854CACE2046A21175BCBC0&fwd_ip=127.0.0.
1&version=4.2.0.27

ECTED","sample_name": "a variant of Win32/Toolbar.Conduit.AA potentially unwante
d application","sample_id": "a variant of Win32/Toolbar.Conduit.AA potentially u
nwanted application","sample_hashes": {"SHA1": "B1C5D9DC9A6493C66CD50B3767157CCF
C4B4985E",},}&report_sig=364D576082E50BCBE8F31172143E62D6&fwd_ip=127.0.0.1&versi
on=4.2.0.27
ANUP_SUCCESS","sample_name": "a variant of Win32/Toolbar.Conduit.AA potentially
unwanted application","sample_id": "a variant of Win32/Toolbar.Conduit.AA potent
ially unwanted application","sample_hashes": {"SHA1": "B1C5D9DC9A6493C66CD50B376
7157CCFC4B4985E",},}&report_sig=574A551DCD9DF357C53F3831343CE0E2&fwd_ip=127.0.0.
1&version=4.2.0.27
mple_hashes": {"SHA1": "4BE34B71790D58F46EECEAA30028408B263C2DEF",},}&report_sig
=8BF3EF461C2AF732A72E865AE7A1677F&fwd_ip=127.0.0.1&version=4.2.0.27
an","sample_hashes": {"SHA1": "4BE34B71790D58F46EECEAA30028408B263C2DEF",},}&rep
ort_sig=31210214D73520497F469BEBEC25993C&fwd_ip=127.0.0.1&version=4.2.0.27
mple_hashes": {"SHA1": "4BE34B71790D58F46EECEAA30028408B263C2DEF",},}&report_sig
=8BF3EF461C2AF732A72E865AE7A1677F&fwd_ip=127.0.0.1&version=4.2.0.27
an","sample_hashes": {"SHA1": "4BE34B71790D58F46EECEAA30028408B263C2DEF",},}&rep
ort_sig=31210214D73520497F469BEBEC25993C&fwd_ip=127.0.0.1&version=4.2.0.27
wanted application,a variant of Win32/Toolbar.Conduit.AH potentially unwanted ap
plication,a variant of Win32/Conduit.SearchProtect.N potentially unwanted applic
ation","sample_id": "a variant of Win32/Conduit.SearchProtect.P potentially unwa
nted application,a variant of Win32/Toolbar.Conduit.AH potentially unwanted appl
ication,a variant of Win32/Conduit.SearchProtect.N potentially unwanted applicat
ion","sample_hashes": {"SHA1": "5DDB156C147E6C2220231FCB869DE12B047665FE",},}&re
port_sig=A5C41B647CD32296E3DEEC03E582E084&fwd_ip=127.0.0.1&version=4.2.0.27

ally unwanted application,a variant of Win32/Toolbar.Conduit.AH potentially unwa
nted application,a variant of Win32/Conduit.SearchProtect.N potentially unwanted
application","sample_id": "a variant of Win32/Conduit.SearchProtect.P potential
ly unwanted application,a variant of Win32/Toolbar.Conduit.AH potentially unwant
ed application,a variant of Win32/Conduit.SearchProtect.N potentially unwanted a
pplication","sample_hashes": {"SHA1": "5DDB156C147E6C2220231FCB869DE12B047665FE"
,},}&report_sig=D6EF7554FB34D1599EA3EA2EC795EEE5&fwd_ip=127.0.0.1&version=4.2.0.
27
Response: {"error":{"message":"An unexpected error has occurred. Please retry yo
ur request later.","type":"OAuthException","is_transient":true,"code":2}}
wanted application,a variant of Win32/Toolbar.Conduit.AH potentially unwanted ap
plication,a variant of Win32/Conduit.SearchProtect.N potentially unwanted applic
ation","sample_id": "a variant of Win32/Conduit.SearchProtect.P potentially unwa
nted application,a variant of Win32/Toolbar.Conduit.AH potentially unwanted appl
ication,a variant of Win32/Conduit.SearchProtect.N potentially unwanted applicat
ion","sample_hashes": {"SHA1": "5DDB156C147E6C2220231FCB869DE12B047665FE",},}&re
port_sig=A5C41B647CD32296E3DEEC03E582E084&fwd_ip=127.0.0.1&version=4.2.0.27
ally unwanted application,a variant of Win32/Toolbar.Conduit.AH potentially unwa
nted application,a variant of Win32/Conduit.SearchProtect.N potentially unwanted
application","sample_id": "a variant of Win32/Conduit.SearchProtect.P potential
ly unwanted application,a variant of Win32/Toolbar.Conduit.AH potentially unwant
ed application,a variant of Win32/Conduit.SearchProtect.N potentially unwanted a
pplication","sample_hashes": {"SHA1": "5DDB156C147E6C2220231FCB869DE12B047665FE"
,},}&report_sig=D6EF7554FB34D1599EA3EA2EC795EEE5&fwd_ip=127.0.0.1&version=4.2.0.
27
Response: {"error":{"message":"An unexpected error has occurred. Please retry yo
ur request later.","type":"OAuthException","is_transient":true,"code":2}}
ECTED","sample_name": "a variant of Android/AdDisplay.AirPush.G potentially unwa
nted application,a variant of Android/AdDisplay.Ganlet.C potentially unwanted ap
plication","sample_id": "a variant of Android/AdDisplay.AirPush.G potentially un
wanted application,a variant of Android/AdDisplay.Ganlet.C potentially unwanted
application","sample_hashes": {"SHA1": "33EFA1BE7008813CF23A5A8308E8A96A404B31DE
",},}&report_sig=AFBA32B1735C648DC548F9D3ED336B96&fwd_ip=127.0.0.1&version=4.2.0
.27
ANUP_SUCCESS","sample_name": "a variant of Android/AdDisplay.AirPush.G potential
ly unwanted application,a variant of Android/AdDisplay.Ganlet.C potentially unwa
nted application","sample_id": "a variant of Android/AdDisplay.AirPush.G potenti
ally unwanted application,a variant of Android/AdDisplay.Ganlet.C potentially un
wanted application","sample_hashes": {"SHA1": "33EFA1BE7008813CF23A5A8308E8A96A4
04B31DE",},}&report_sig=0C2A0858DF11B49CEA34F06F5698433B&fwd_ip=127.0.0.1&versio
n=4.2.0.27
ECTED","sample_name": "a variant of Android/AdDisplay.Ganlet.B potentially unwan
ted application,a variant of Android/AdDisplay.Ganlet.C potentially unwanted app
lication","sample_id": "a variant of Android/AdDisplay.Ganlet.B potentially unwa
plication","sample_hashes": {"SHA1": "7D166AF668A75344B861432110706210C16412A0",
},}&report_sig=1C172C61211FFB523FD85793D424FA28&fwd_ip=127.0.0.1&version=4.2.0.2
7
ANUP_SUCCESS","sample_name": "a variant of Android/AdDisplay.Ganlet.B potentiall
y unwanted application,a variant of Android/AdDisplay.Ganlet.C potentially unwan
ted application","sample_id": "a variant of Android/AdDisplay.Ganlet.B potential
nted application","sample_hashes": {"SHA1": "7D166AF668A75344B861432110706210C16
412A0",},}&report_sig=B1B77F1E7225C4C8BE9AA56B914C031A&fwd_ip=127.0.0.1&version=
4.2.0.27
ECTED","sample_name": "a variant of Android/AdDisplay.Ganlet.C potentially unwan
ted application","sample_id": "a variant of Android/AdDisplay.Ganlet.C potential
ly unwanted application","sample_hashes": {"SHA1": "45B7AE2792CE71E9BED2301EB3EC
2D811FA78066",},}&report_sig=51634280305A63C256DDCD9CC3923520&fwd_ip=127.0.0.1&v
ersion=4.2.0.27
ANUP_SUCCESS","sample_name": "a variant of Android/AdDisplay.Ganlet.C potentiall
y unwanted application","sample_id": "a variant of Android/AdDisplay.Ganlet.C po

tentially unwanted application","sample_hashes": {"SHA1": "45B7AE2792CE71E9BED23
01EB3EC2D811FA78066",},}&report_sig=402E9D00D5111FFCE472431DD9FD7991&fwd_ip=127.
0.0.1&version=4.2.0.27
ly unwanted application","sample_hashes": {"SHA1": "3814D66734C0DD7817278BD73749
F27072AF86DA",},}&report_sig=037614337C099C6E23D51ED2F8411A97&fwd_ip=127.0.0.1&v
ersion=4.2.0.27
tentially unwanted application","sample_hashes": {"SHA1": "3814D66734C0DD7817278
BD73749F27072AF86DA",},}&report_sig=2CA69F754920A0F14ED940648F875704&fwd_ip=127.
0.0.1&version=4.2.0.27
ly unwanted application","sample_hashes": {"SHA1": "16F89679750A8206F9059CDD7C56
42C197470BF0",},}&report_sig=9930E4CF45BAD1351D98FDEE33024324&fwd_ip=127.0.0.1&v
ersion=4.2.0.27
tentially unwanted application","sample_hashes": {"SHA1": "16F89679750A8206F9059
CDD7C5642C197470BF0",},}&report_sig=790F279B1D6F2A082F750905EB55ACDF&fwd_ip=127.
0.0.1&version=4.2.0.27
ECTED","sample_name": "Android/AdDisplay.Ganlet.C potentially unwanted applicati
on,a variant of Android/AdDisplay.Ganlet.B potentially unwanted application","sa
mple_id": "Android/AdDisplay.Ganlet.C potentially unwanted application,a variant
of Android/AdDisplay.Ganlet.B potentially unwanted application","sample_hashes"
: {"SHA1": "6C82557926A32BA882BC91F8B1E1BC2097AD2346",},}&report_sig=114833B8695
F3D14C996E7E784626089&fwd_ip=127.0.0.1&version=4.2.0.27
ANUP_SUCCESS","sample_name": "Android/AdDisplay.Ganlet.C potentially unwanted ap
plication,a variant of Android/AdDisplay.Ganlet.B potentially unwanted applicati

on","sample_id": "Android/AdDisplay.Ganlet.C potentially unwanted application,a
variant of Android/AdDisplay.Ganlet.B potentially unwanted application","sample_
hashes": {"SHA1": "6C82557926A32BA882BC91F8B1E1BC2097AD2346",},}&report_sig=5942
C64F41F09CA35ADF431A84FAE1BD&fwd_ip=127.0.0.1&version=4.2.0.27
ECTED","sample_name": "a variant of Android/AdDisplay.Ganlet.E potentially unwan
ted application","sample_id": "a variant of Android/AdDisplay.Ganlet.E potential
ly unwanted application","sample_hashes": {"SHA1": "31544F981EAD26BF26ACFE95D7B3
001D33BC288A",},}&report_sig=1894812FB5DC7FE2EE7F70D8DDE2FD7F&fwd_ip=127.0.0.1&v
ersion=4.2.0.27
ANUP_SUCCESS","sample_name": "a variant of Android/AdDisplay.Ganlet.E potentiall
y unwanted application","sample_id": "a variant of Android/AdDisplay.Ganlet.E po
tentially unwanted application","sample_hashes": {"SHA1": "31544F981EAD26BF26ACF
E95D7B3001D33BC288A",},}&report_sig=4F3C322E0BFFE3DEB625A3388F6FD343&fwd_ip=127.
0.0.1&version=4.2.0.27
ECTED","sample_name": "a variant of Android/AdDisplay.Ganlet.E potentially unwan
ted application","sample_id": "a variant of Android/AdDisplay.Ganlet.E potential
ly unwanted application","sample_hashes": {"SHA1": "787248749C601BEF5E4EE25A8495
F3207F79AFC3",},}&report_sig=027082C2F8BAA0383F5D8ED1ACD95881&fwd_ip=127.0.0.1&v
ersion=4.2.0.27
ANUP_SUCCESS","sample_name": "a variant of Android/AdDisplay.Ganlet.E potentiall
y unwanted application","sample_id": "a variant of Android/AdDisplay.Ganlet.E po
tentially unwanted application","sample_hashes": {"SHA1": "787248749C601BEF5E4EE
25A8495F3207F79AFC3",},}&report_sig=BFC8ABBCFCE019B5D384EC2B22871DE1&fwd_ip=127.
0.0.1&version=4.2.0.27
ted application,a variant of Android/AdDisplay.AirPush.G potentially unwanted ap
plication","sample_id": "a variant of Android/AdDisplay.Ganlet.C potentially unw
anted application,a variant of Android/AdDisplay.AirPush.G potentially unwanted
application","sample_hashes": {"SHA1": "DFB36FC8E55599DD13E1F306CC88C281F19CC712
",},}&report_sig=FA96403FC40EC6F2AD09DA27D4153A60&fwd_ip=127.0.0.1&version=4.2.0
.27
y unwanted application,a variant of Android/AdDisplay.AirPush.G potentially unwa
nted application","sample_id": "a variant of Android/AdDisplay.Ganlet.C potentia
lly unwanted application,a variant of Android/AdDisplay.AirPush.G potentially un
wanted application","sample_hashes": {"SHA1": "DFB36FC8E55599DD13E1F306CC88C281F

19CC712",},}&report_sig=3BF5913637E832882E29D8008D605F72&fwd_ip=127.0.0.1&versio
n=4.2.0.27
ECTED","sample_name": "a variant of Android/AdDisplay.Ganlet.B potentially unwan
ted application,a variant of Android/AdDisplay.Ganlet.C potentially unwanted app
lication","sample_id": "a variant of Android/AdDisplay.Ganlet.B potentially unwa
plication","sample_hashes": {"SHA1": "E112FD2525CB6F13A6B8C075177F0A90E074FDE1",
},}&report_sig=DCAEE93BC9BDB3FBA5C8288BA6ECDE15&fwd_ip=127.0.0.1&version=4.2.0.2
7
ANUP_SUCCESS","sample_name": "a variant of Android/AdDisplay.Ganlet.B potentiall
y unwanted application,a variant of Android/AdDisplay.Ganlet.C potentially unwan
ted application","sample_id": "a variant of Android/AdDisplay.Ganlet.B potential
nted application","sample_hashes": {"SHA1": "E112FD2525CB6F13A6B8C075177F0A90E07
4FDE1",},}&report_sig=132D1F040DC791200223A1730E4FC8EA&fwd_ip=127.0.0.1&version=
4.2.0.27
Response: {"st
ECTED","sample_name": "Win32/Toolbar.Conduit.M potentially unwanted application,
a variant of Win32/Toolbar.Conduit.E potentially unwanted application","sample_i
d": "Win32/Toolbar.Conduit.M potentially unwanted application,a variant of Win32
/Toolbar.Conduit.E potentially unwanted application","sample_hashes": {"SHA1": "
35CCBEB7DAFE3E3F4629F0FE12F6DCE7F6D9B3BE",},}&report_sig=16D1F4B45D2C6B14137F0EC
8706DE9FB&fwd_ip=127.0.0.1&version=4.2.0.27
ANUP_SUCCESS","sample_name": "Win32/Toolbar.Conduit.M potentially unwanted appli
cation,a variant of Win32/Toolbar.Conduit.E potentially unwanted application","s
ample_id": "Win32/Toolbar.Conduit.M potentially unwanted application,a variant o
f Win32/Toolbar.Conduit.E potentially unwanted application","sample_hashes": {"S
HA1": "35CCBEB7DAFE3E3F4629F0FE12F6DCE7F6D9B3BE",},}&report_sig=7A9C3C67BB3AA384
08F2BD369D202DF4&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=2C0252EB82AD3C80EC89A0CB7CAC85F3&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=E2A70107B3D066CEC3BFB72625E01640&fwd_ip=127.0.0.1&version=4.2.0.27
,}&report_sig=A6B8FCD063352026A7E9D4F37C6B13DA&fwd_ip=127.0.0.1&version=4.2.0.27
0,}&report_sig=38179CAEFE86A682F37B9182AAB91D97&fwd_ip=127.0.0.1&version=4.2.0.2
7
Reporting
# product=FBAV
# version=8
# FBAV_user_token=891451194246849
# FBAV_attack_id=785926708164141
# FBAV_status=0
# flags=1
# ESET.exe=4.3.0.27
# EOSSerial=fbd4a38b4c4d4649b450cc5d30254b0f
# engine=22503
# end=finished
# remove_checked=true
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# sfx_checked=true
# utc_time=2015-02-17 01:45:38
# lang=1033
# compatibility_mode_1='Kaspersky Internet Security'
# compatibility_mode=1292 16777213 100 100 0 54804041 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 0 175769469 0 0
# scanned=74417
# found=82
# cleaned=80
# scan_time=1711
sh=0000000000000000000000000000000000000000 ft=- fh=0000000000000000 vn="a varia
nt of Win32/Conduit.SearchProtect.P potentially unwanted application" ac=I fn="$
{Memory}"
sh=4A82A588430B85B3835C8D0A0A402D7AD35915F9 ft=1 fh=0000000000050b20 vn="a varia
nt of Win32/Conduit.SearchProtect.N potentially unwanted application (cleaned by
deleting)" ac=C fn="C:\Users\User\AppData\Local\Conduit\APISupport\APISupport_1
.0.0.14\ApiSupport.dll"
sh=0084D680F9DDE34CC4E41D4233DB9D8694DE5F88 ft=1 fh=0000000000055d20 vn="a varia
nt of Win32/Conduit.SearchProtect.P potentially unwanted application (cleaned by
sh=4C647D60B445220E1F2300C979433DF7C0F119B4 ft=1 fh=0000000000055d20 vn="a varia
sh=E0C40AC460D16773DA3546A23508774E7898D893 ft=1 fh=0000000000056120 vn="a varia

sh=D68B6F04BDEAE5E8335F52C4A32E08D91A80505E ft=1 fh=0000000000057320 vn="a varia
sh=88F0020FC52EC4C7F80519D64F0C49D56210C499 ft=1 fh=0000000000057320 vn="a varia
sh=0E7E5F4C697E7E0A77575D8D62C4C6357CCD3B02 ft=1 fh=0000000000057320 vn="a varia
sh=69AF8D82BD65216B649368B4F1A0CB2708D296E1 ft=1 fh=00000000000b9320 vn="a varia
sh=3661EDB38BCB034EA00F78F9144D975333C786BA ft=1 fh=00000000000b9320 vn="a varia
sh=3096A6D6D5007B947C86A7FE8E72EEB3C86E80B3 ft=1 fh=00000000000bb120 vn="a varia
sh=493D9D48C881B9118DB8B67DB2C74D188ACA060C ft=1 fh=0000000000264120 vn="a varia
nt of Win32/Conduit.SearchProtect.H potentially unwanted application (cleaned by
deleting)" ac=C fn="C:\Users\User\AppData\Local\Conduit\APISupport\MiniSP_1.0.1
.33\MiniSP.dll"
sh=82D24D65704A0F5B86CD6330D82D3AF721D13053 ft=1 fh=0000000000264120 vn="a varia
.36\MiniSP.dll"
sh=4FB6442ACD0A9F8AD73B7DC811D66571DB9589DE ft=1 fh=0000000000270b20 vn="a varia
.40\MiniSP.dll"
sh=17CCE05F40D9ECE31DB0841419226BBCDEA130B7 ft=1 fh=0000000000273120 vn="a varia
.51\MiniSP.dll"
sh=4694896D296941721C0D8D609E512AE1B7FD2FF4 ft=1 fh=0000000000278f20 vn="a varia
.55\MiniSP.dll"
sh=C5F21C12A5C2066BBAE8587380FAAFA01F739B38 ft=1 fh=0000000000278f20 vn="a varia
.60\MiniSP.dll"
sh=7B747225FCFD7B718513C61724F85F9DE3A3DEB1 ft=1 fh=000000000027bd20 vn="a varia
.76\MiniSP.dll"
sh=9CF16FBA745174DB1541FD0F4F64C22ED4928AED ft=1 fh=000000000027cd20 vn="a varia
.93\MiniSP.dll"
deleting)" ac=C fn="C:\Users\User\AppData\Local\Conduit\APISupport\APISupport.d

ll"
deleting)" ac=C fn="C:\Users\User\AppData\Local\Conduit\APISupport\APISupport.o
ld"
sh=B95147A06E8C0DC6DD82665806A457235D91A88C ft=0 fh=00000000002971ed vn="a varia
nt of Win32/Toolbar.Conduit.AH potentially unwanted application (deleted)" ac=C
fn="C:\Users\User\AppData\Local\CRE\lhdidofdhbieclaekjnfcnfaoceobnco.crx"
sh=80218B4949D12776D180A1D16FB0B361098D62AE ft=0 fh=00000000000022d6 vn="" ac=S
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbm
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\audio\1_short_Open_16_16.wav"
sh=EA74B53648E6B1250BC1F6CE80BA7993A48E94DC ft=0 fh=00000000000605c0 vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\_platform_specific\x86-64_\hotword-x8664.nexe"
sh=F80AD350D18799D5984136E86FF674AE53388469 ft=0 fh=0000000000042cdf vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\_platform_specific\x86-64_\hotword.data
"
sh=A983EAE59018B97231ED0BA0603B2F4E7ED61679 ft=0 fh=0000000000007835 vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\audio-input-compiled.js"
sh=517868387BE9CB110A4A2EECC40C4B2B3E4A0456 ft=0 fh=000000000000d731 vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\audio-manager-compiled.js"
sh=E9AC73C61B24B3057DED594D4AC461261BBC1332 ft=0 fh=00000000000000af vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\audio_input.html"
sh=317F30B5305B815E33ED3916DA6DF8623E1787DE ft=0 fh=0000000000000114 vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\background.html"
sh=A68180DDCC19CD3AC32AC29BFC89CFB5F8062CBF ft=0 fh=00000000000076db vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\content-bundle-compiled.js"
sh=5A435DF92FCD4FC94CB61B08D58EA220296D9BF2 ft=0 fh=00000000000000ed vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\hotword_.nmf"
sh=0690EDD04BA5A7B07CD98F5AED493298BEC73810 ft=0 fh=00000000000000f3 vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\hotword_de.nmf"
sh=C8D0D84F2AC2310C67C91328FCE2C88E6B1E0CB7 ft=0 fh=00000000000000fc vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\hotword_en-gb.nmf"
sh=6A4DE94A8C600DF9F37236CD926B4941E14D6990 ft=0 fh=00000000000000f3 vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\hotword_fr.nmf"
sh=59EC46C14BE5D5C87A7B08C0B1240CB9AB0EA3FA ft=0 fh=00000000000000f3 vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\hotword_ru.nmf"
sh=236F65887D6748CD19F84D5B3F0E285432FEDB7A ft=0 fh=0000000000002abe vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\options-compiled.js"
sh=66DCDDF8A09F02F7F02E9081958C7FE309CAF57C ft=0 fh=0000000000004c36 vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\options.css"
sh=BA8543268A49CC942CD9DB7EE516B59B35D66AEF ft=0 fh=0000000000000a83 vn="" ac=S
hgboaologfdajaanbcjmnhjmhfn\0.1.1.5023_0\options.html"
sh=5E960A06D5EF1D3360093F3DC89C49313E1E5E34 ft=0 fh=0000000000001a14 vn="" ac=S
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blbkd
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\common\native_messaging_clien
t.js"
sh=313BE9B571859B553D649B1E4E196396CDCC7315 ft=0 fh=00000000000000e3 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\common\rpc_types.js"
sh=10780528DE629D5B1B73806EB266A61D79129A4E ft=0 fh=000000000000016f vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\content_blocker\chrome_enumer
ators.js"
sh=1D0EC397521EBB99B2AEDD277FB384EC9CBB907C ft=0 fh=0000000000001faf vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\content_blocker\main.js"
sh=55FF04BED443482018282BE48A6B97F84FFA6588 ft=0 fh=000000000000010e vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\content_blocker\sequence_gene
rator.js"
sh=8352B7FE76D96B298B8DCAEAF7D305204952265D ft=0 fh=0000000000001031 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\content_blocker\session.js"
sh=977B7DBA486E4997D04E08D70A7CB9A2E9115988 ft=0 fh=0000000000001a5d vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\content_blocker\session_event
s_aggregator.js"
sh=7D93727E156E3BECB169920CBA635DFE8C92C049 ft=0 fh=0000000000000365 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\content_blocker\session_regis
try.js"
sh=728977B032562A05B7180B8787D248E62D6F2013 ft=0 fh=000000000000021b vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\content_blocker\tab_attached_
data.js"
sh=B4D92870F593515FE693979DBA0C3FA3E8EC3DCB ft=0 fh=00000000000006b3 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\content_blocker\tab_waiter.js
"
sh=3F55D95F5D1522801F382D0B012EF409D5591685 ft=0 fh=0000000000000492 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\manageability\manageability.j
s"
sh=6F91B9F5E56B188BA6DB6FBECFDE50B55261A320 ft=0 fh=0000000000001686 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\online_banking\browser_naviga
tor.js"
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\online_banking\chrome_enumera
tors.js"
sh=D2A44B19A1D9ABED45601565E3EA9CF5BC223CDC ft=0 fh=000000000000034c vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\online_banking\cookies_header
s_parser.js"
sh=59C4CBAE56133ABFB1D447760ACD8031E6A1776C ft=0 fh=000000000000082e vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\online_banking\headers_replac
er.js"
sh=6253086468A402CCDEA5D3C136F207455D65C12B ft=0 fh=0000000000000945 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\online_banking\http_headers.j
s"
sh=0B39C2831CE0E959B98D32E3834652D0106F30D7 ft=0 fh=0000000000000307 vn="" ac=S

nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\online_banking\main.js"
sh=EC9F6983E9A81656A05C16D568DA0E75E71688A8 ft=0 fh=000000000000030c vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\online_banking\tabs_watcher.j
s"
sh=7C7DCED2FC175959A81E761C4D5D1A9A61914945 ft=0 fh=0000000000000445 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\virtual_keyboard\event_listen
er.js"
sh=2F1F683265430C846E6FED88D3B78C9B5C78F79C ft=0 fh=0000000000001b6e vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\virtual_keyboard\main.js"
sh=CC4C014D08C6A17A8821A4889B01FF4702028FEC ft=0 fh=000000000000057d vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\virtual_keyboard\tabs.js"
sh=03F906A98A08028F0B696E4FCD688E1C8538AB86 ft=0 fh=00000000000006fc vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\virtual_keyboard\tsf_composit
ion_layout_converter.js"
sh=5DE2AA390B350642DE9E75303216743F5342F748 ft=0 fh=000000000000058f vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\virtual_keyboard\tsf_editor_e
vents_sink.js"
sh=15E60CF26BA35668A4BF6A238F780FF52DCDF699 ft=0 fh=00000000000005e9 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\virtual_keyboard\tsf_editor_p
roxy.js"
sh=5D4D741E8686C1AF5268AC8FB3FE610C902C9B27 ft=0 fh=00000000000005ad vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\main.html"
sh=E441987AB0AD5C3C949337464A5EA9746E2F02B0 ft=0 fh=00000000000001b2 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\background\main.js"
sh=0155A1F219AC1D8B0B52D3E708C97E801ADC5FFE ft=0 fh=0000000000000904 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\content_blocker\content.
js"
sh=40CB7D6766AC954BF9D027E851C132A2434ACB6E ft=0 fh=0000000000001cb7 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\content
.js"
sh=63DA63FB4D3EFBDC89DCC33738103F04AD0BEC79 ft=0 fh=0000000000000a3d vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\element
_screen_position.js"
sh=D8B9F727AEA8B3D28FEFA609E684884DB1914D73 ft=0 fh=00000000000004f6 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\icon_he
lper.js"
sh=5D4AD56427FEE19C226A10111AF1F887C3D93319 ft=0 fh=0000000000001dac vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\icon_in
jector.js"
sh=81E32D718499A68C4E0E0A9472621632F4D86416 ft=0 fh=0000000000000fe5 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\keypres
s_emulator.js"
sh=CB0882F9A85302D3B65297C89ABCA846617EA074 ft=0 fh=0000000000001860 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\keypres
s_emulator_chrome.js"
sh=01612741ACBCE0E368D7E20EA31F51CA071653C3 ft=0 fh=00000000000004ac vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\once_ti
med_tooltip.js"
sh=DCF0B30F3EBB49FABD2818C91C4B4781AEBAA861 ft=0 fh=00000000000005dc vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\protect
able_element_detector.js"
sh=E87B93CA6567759535F246BC017C10F6CB77A397 ft=0 fh=00000000000029ee vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\tooltip
.js"
sh=D6D4BCA0738CC2BE2E4D9C4DE7B52ECAFD9BDD83 ft=0 fh=0000000000002de6 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\tsf_com
position_view.js"
sh=70B359A4AE5E3607B25C00DB353AFF745110FB2B ft=0 fh=00000000000008d5 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\tsf_edi
tor.js"
sh=1AD8748C77D9FCBC89419CF0867FC32E2EAB55DB ft=0 fh=00000000000003ac vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\content_scripts\virtual_keyboard\tsf_edi
tors_manager.js"
sh=4467EEB9B653E80E57BC2D672E9A14F2AB8F94F5 ft=0 fh=0000000000000073 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\pages\content_blocked.html"
sh=F5057215461EAA146061BB81239D34E2D439772F ft=0 fh=0000000000000340 vn="" ac=S
nmdcafmfhinpmnlhhddbepgkeaa\3.1.0.122_0\pages\content_blocked.js"
sh=4D52E078CD0621A4F012E618F51658E1D4A06ABB ft=0 fh=000000000000066b vn="" ac=S
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchln
pcodkpfdpacogkljefecpegganj\14.0.0.4651_0\background\event_listener.js"
sh=98CDF3E20F257441129CC8223C03323736CA018B ft=0 fh=0000000000000068 vn="" ac=S
pcodkpfdpacogkljefecpegganj\14.0.0.4651_0\background\lcr.js"
sh=60DE87D7BF5536E4F4640067696EEDD5105D9855 ft=0 fh=000000000000005b vn="" ac=S
pcodkpfdpacogkljefecpegganj\14.0.0.4651_0\background\links_mode.js"
sh=25F9678247F642D60DB4358664A14F68EF398DCD ft=0 fh=00000000000000df vn="" ac=S
pcodkpfdpacogkljefecpegganj\14.0.0.4651_0\background\main.html"
sh=A4A13FA8B374CE0B1EA14A7523E230913A2517DF ft=0 fh=0000000000000c0d vn="" ac=S
pcodkpfdpacogkljefecpegganj\14.0.0.4651_0\background\main.js"
sh=750E392400F85E27F353ED9F4D42788F74B65BB1 ft=0 fh=0000000000003466 vn="" ac=S
pcodkpfdpacogkljefecpegganj\14.0.0.4651_0\content_scripts\content.js"
sh=653AAA81792C1C4A8D540254E203FEF75BDB04EE ft=0 fh=0000000000000c75 vn="" ac=S
pcodkpfdpacogkljefecpegganj\14.0.0.4651_0\content_scripts\images.js"
sh=EEDD6939DDBB86D3EBB396C6B34BB94407A568BA ft=0 fh=0000000000000658 vn="" ac=S
pcodkpfdpacogkljefecpegganj\14.0.0.4651_0\content_scripts\parse_url.js"
sh=BFFAFE0A7DAB10E8DE2F8627210F950FA06604AC ft=1 fh=00000000000478c0 vn="" ac=S
pcodkpfdpacogkljefecpegganj\14.0.0.4651_0\plugin\npUrlAdvisor.dll"
sh=D53A03DD707D7A28A09DF77983EF7BFF0F3F8D32 ft=0 fh=00000000000000e0 vn="" ac=S

fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\djfef
jlooeimpkindabjglgcaicicnjl\1.2.1_0\background.html"
sh=98884258CBDB0D939FA2C5E74FC7AC9E56D8170F ft=0 fh=000000000001469f vn="" ac=S
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\djfef
jlooeimpkindabjglgcaicicnjl\1.2.1_0\jquery.min.js"
sh=F69229B3F8E9F9CB1C7CF1F529ABED5908A9C074 ft=0 fh=0000000000000829 vn="JS/Kili
m.AZ trojan (cleaned by deleting)" ac=C fn="C:\Users\User\AppData\Local\Google\C
hrome\User Data\Default\Extensions\djfefjlooeimpkindabjglgcaicicnjl\1.2.1_0\tong
.js"
sh=20E8BB3161C639EE27E37219178CF5E8EAE0B014 ft=0 fh=00000000000002a9 vn="" ac=S
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hahpj
plbmicfkmoccokbjejahjjpnena\1.2_0\Images\b1_icon.ico"
sh=BB83D90CA14265BDF32D96E6E858782A14329D24 ft=0 fh=0000000000000b72 vn="" ac=S
plbmicfkmoccokbjejahjjpnena\1.2_0\B1red.html"
sh=46C3D6D235BC19125F691BF2EA9485F685A314C7 ft=0 fh=0000000000001f91 vn="" ac=S
plbmicfkmoccokbjejahjjpnena\1.2_0\B1red.js"
sh=A251A600C706D90FB11B22059894C2823E182503 ft=0 fh=0000000000000675 vn="" ac=S
plbmicfkmoccokbjejahjjpnena\1.2_0\background.html"
sh=5D9C0A2DE24AEC6073D481E020501EF2230B1A37 ft=0 fh=0000000000000ae5 vn="" ac=S
plbmicfkmoccokbjejahjjpnena\1.2_0\background.js"
sh=359C6C1ED98081B9A69EB3513B9DECED59C957F9 ft=0 fh=000000000001698c vn="" ac=S
plbmicfkmoccokbjejahjjpnena\1.2_0\jquery.min.js"
sh=E9DBD07ABD52A3DF5B1E98BACF2A526558898571 ft=0 fh=000000000000030f vn="" ac=S
plbmicfkmoccokbjejahjjpnena\1.2_0\panel-resize.js"
sh=C5848F4374596EE9B912801992EDBB5AD47297B7 ft=0 fh=000000000000027e vn="" ac=S
plbmicfkmoccokbjejahjjpnena\1.2_0\popup.css"
sh=26FF48DE31875FD0E351CF8B324C983540155258 ft=0 fh=0000000000000377 vn="" ac=S
plbmicfkmoccokbjejahjjpnena\1.2_0\popup.html"
sh=6FBE0DF9EE17F371630B26992CCCB26EA43C3FA8 ft=0 fh=000000000000047a vn="" ac=S
plbmicfkmoccokbjejahjjpnena\1.2_0\popup.js"
sh=6F6BF70EA7672B03B11CFED82D1489B3CFCCF479 ft=0 fh=0000000000001670 vn="" ac=S
plbmicfkmoccokbjejahjjpnena\1.2_0\style.css"
sh=8BA56C05B464B8AAB29B294B72C3DCC950820F0D ft=0 fh=000000000000153e vn="" ac=S
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdi
folhalapjijoafobooafbilfakh\14.0.0.4651_0\background\browser_navigator.js"
folhalapjijoafobooafbilfakh\14.0.0.4651_0\background\chrome_enumerators.js"
sh=D2A44B19A1D9ABED45601565E3EA9CF5BC223CDC ft=0 fh=000000000000034c vn="" ac=S
folhalapjijoafobooafbilfakh\14.0.0.4651_0\background\cookies_headers_parser.js"
sh=59C4CBAE56133ABFB1D447760ACD8031E6A1776C ft=0 fh=000000000000082e vn="" ac=S
folhalapjijoafobooafbilfakh\14.0.0.4651_0\background\headers_replacer.js"
sh=6253086468A402CCDEA5D3C136F207455D65C12B ft=0 fh=0000000000000945 vn="" ac=S
folhalapjijoafobooafbilfakh\14.0.0.4651_0\background\http_headers.js"
sh=405EBDC3276D4C0E7B17F67F2241EFDB79760DF9 ft=0 fh=0000000000000182 vn="" ac=S
folhalapjijoafobooafbilfakh\14.0.0.4651_0\background\main.html"
sh=3B66B822060C9081553CDDDE431142DE862B24D4 ft=0 fh=00000000000001c1 vn="" ac=S
folhalapjijoafobooafbilfakh\14.0.0.4651_0\background\main.js"
sh=16F6C1FF91B9A2F8DA0D69D665A09873AD26CCB4 ft=0 fh=00000000000002f2 vn="" ac=S
folhalapjijoafobooafbilfakh\14.0.0.4651_0\background\tabs_watcher.js"
sh=2377AB8D7708865543EEC37D4F2C1D8F8D34B32C ft=1 fh=000000000004f4c0 vn="" ac=S
folhalapjijoafobooafbilfakh\14.0.0.4651_0\plugin\online_banking_npapi.dll"
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hghkg
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\background\chrome_enumerators.js"
sh=E386A1BE99A05674CE18B65B157802140DEFC995 ft=0 fh=00000000000001b1 vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\background\main.html"
sh=93BE8340333EE26640DF206799E38198944D83B6 ft=0 fh=00000000000019f6 vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\background\main.js"
sh=55FF04BED443482018282BE48A6B97F84FFA6588 ft=0 fh=000000000000010e vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\background\sequence_generator.js"
sh=F5937C495AFCF30843C2B9FB063DA0E5022355D7 ft=0 fh=000000000000105a vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\background\session.js"
sh=F9192022B19A88D568594CBE6F1ED84270ADBD59 ft=0 fh=00000000000019cc vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\background\session_events_aggregator.j
s"
sh=7D93727E156E3BECB169920CBA635DFE8C92C049 ft=0 fh=0000000000000365 vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\background\session_registry.js"
sh=728977B032562A05B7180B8787D248E62D6F2013 ft=0 fh=000000000000021b vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\background\tab_attached_data.js"
sh=B4D92870F593515FE693979DBA0C3FA3E8EC3DCB ft=0 fh=00000000000006b3 vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\background\tab_waiter.js"
sh=7BC91774FE0CC2FE0326B6FA26F2DD2A32245273 ft=0 fh=0000000000000903 vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\content_scripts\content.js"
sh=4467EEB9B653E80E57BC2D672E9A14F2AB8F94F5 ft=0 fh=0000000000000073 vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\pages\content_blocked.html"
sh=05F4CA25F5183BF6E388349144163ABD9816405F ft=0 fh=0000000000000261 vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\pages\content_blocked.js"
sh=3859E3D9A1D95176C923320ED64F911C27084BD8 ft=1 fh=000000000006e8c0 vn="" ac=S
aeecgjhjkannahfamoehjmkjail\14.0.0.4651_0\plugin\content_blocker_npapi.dll"
sh=A9D8CE2C91A06EDAD15CD925279E0CE17256F6B1 ft=0 fh=00000000000003b8 vn="" ac=S
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagnc
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\background\event_listener.js"
sh=839D50E9B61E5383BFDFDCF5E52592D423293279 ft=0 fh=00000000000000d6 vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\background\main.html"
sh=C2DB0BF98EC39B16C384E27875C528399E304669 ft=0 fh=0000000000000dbe vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\background\main.js"
sh=CC4C014D08C6A17A8821A4889B01FF4702028FEC ft=0 fh=000000000000057d vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\background\tabs.js"
sh=EAA4237B72B6F1B17EF8A58A7E442871F0A65F30 ft=0 fh=0000000000000574 vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\background\tsf_editor_proxy.js"
sh=59928E658C2225A1D1891E1D466A8FB52D00E22A ft=0 fh=0000000000001eb8 vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\content.js"
sh=63DA63FB4D3EFBDC89DCC33738103F04AD0BEC79 ft=0 fh=0000000000000a3d vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\element_screen_positio
n.js"
sh=D8B9F727AEA8B3D28FEFA609E684884DB1914D73 ft=0 fh=00000000000004f6 vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\icon_helper.js"
sh=5D4AD56427FEE19C226A10111AF1F887C3D93319 ft=0 fh=0000000000001dac vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\icon_injector.js"
sh=81E32D718499A68C4E0E0A9472621632F4D86416 ft=0 fh=0000000000000fe5 vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\keypress_emulator.js"
sh=CB0882F9A85302D3B65297C89ABCA846617EA074 ft=0 fh=0000000000001860 vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\keypress_emulator_chro
me.js"
sh=01612741ACBCE0E368D7E20EA31F51CA071653C3 ft=0 fh=00000000000004ac vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\once_timed_tooltip.js"
sh=DCF0B30F3EBB49FABD2818C91C4B4781AEBAA861 ft=0 fh=00000000000005dc vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\protectable_element_de
tector.js"
sh=E87B93CA6567759535F246BC017C10F6CB77A397 ft=0 fh=00000000000029ee vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\tooltip.js"
sh=D6D4BCA0738CC2BE2E4D9C4DE7B52ECAFD9BDD83 ft=0 fh=0000000000002de6 vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\tsf_composition_view.j
s"
sh=70B359A4AE5E3607B25C00DB353AFF745110FB2B ft=0 fh=00000000000008d5 vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\content_scripts\tsf_editor.js"
sh=348F6BDFD960B38F5D537477B55A47D695557F82 ft=1 fh=000000000009d340 vn="" ac=S
dcchgajhfhijbbhecadmaiegcmh\14.0.0.4917_0\plugin\npVKPlugin.dll"
sh=2B9A1340BEC2FE2694C333ACD77F0E12EF9550D1 ft=1 fh=00000000000f1f40 vn="a varia
deleting)" ac=C fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
\Extensions\lhdidofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\APISupport\APISupport
.dll"
sh=2C2B3A2622A37AC119C04DFB4021D226A759C4FA ft=0 fh=000000000001498c vn="" ac=S
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhdid
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\lib\jquery-1.5.min.js"
sh=C60F77D9CF6452AB3F20871B55AA81D206A15C01 ft=0 fh=0000000000000070 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\options\Options.html"
sh=20687BF371C422AFA77A395DE68AE1A9F3E02D5E ft=0 fh=0000000000000a17 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\tabs\back\postNavigation.htm"
sh=77A3F8C908DEB9F4CFD44313CC6AF71640E027AA ft=0 fh=0000000000005eb9 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\toolbarAPI\toolbarAPI.js"
sh=91A7F15BAD6647A92849668BFAF90E28C391F998 ft=0 fh=000000000000cef6 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\bcview.js"
sh=621AB25C64938203DED9BC2B72CC2C53330DA533 ft=0 fh=0000000000000304 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\chromeBackstage.html"
sh=44D4C43589F647819F6306E40736689310DD7DC1 ft=0 fh=000000000000926f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\chromeBackstage.js"
sh=9F29834DE40DBA454A09D05AFCCB08639368A76F ft=0 fh=000000000000c6a1 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\chromeBackstageLoader.js"
sh=1ECB3BA3A2967A04D62175732C95878A657F2B3A ft=0 fh=00000000000096a4 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\communicator.back.js"
sh=09E36D8C00C8D9ADE9DE561BC112D6118AEBAF53 ft=0 fh=00000000000000f5 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\compatibility.end.js"
sh=E16726F8DCB057CE1BD86A7A0206CCCDE3DB6E43 ft=0 fh=000000000000156e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\compatibility.service.js"
sh=E2A73BB10A0906A5F08DCF8754E9158B7D54F807 ft=0 fh=0000000000008cad vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\compatibility.start.js"
sh=40C30E02848D2F6951DD46CAFC125AC0491B3955 ft=0 fh=000000000001a195 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\contentScript.js"
sh=59D4878329B29842A114EF254C1C7891EBCB7110 ft=0 fh=00000000000028f7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\framework.js"
sh=6433C31FE61C532CB3B3FAFB2A0F698FEFEED117 ft=0 fh=000000000000011d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\iframeHost.html"
sh=B42DC1D707AB17A46A7A28D0BF56421F3D556801 ft=0 fh=0000000000000bc8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\iframeHost.js"
sh=D72C45B0CB845F06B2495FE552BFD85A6ECAAFEC ft=0 fh=0000000000001b68 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\JSONStringify.js"
sh=2772767FF7BBA1D5F9059CAF53C13867C09AA4B5 ft=0 fh=0000000000003a85 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\logger.js"
sh=319115B6250B8FBA8157F02E3A587A49A19FCA8A ft=0 fh=000000000000cd4c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\match.js"
sh=2C8B38337170BDF87D3BDFB13513EB7CB4D26149 ft=0 fh=0000000000007af3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\nativeMsgCom.js"
sh=E9DCF6E1C51B970F86AF56CFFD459755C430EB9C ft=0 fh=0000000000003fbb vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\navigationHandler.js"
sh=964F626CCC139482A362EBA3E9CD84482DA488CD ft=0 fh=0000000000000c12 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\pluginLoader.js"
sh=4412A8B46643728A2A0690A8BF1A322A52AC6CE0 ft=0 fh=00000000000057ff vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\pricegongMigration.js"
sh=9C6222DC57B095C1A2780179C2798C26BE8F60FE ft=0 fh=0000000000016dfd vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\toolbarEnv.js"
sh=16EABACD7EA821E9843EBA4BDA75E85D9E6C3611 ft=0 fh=0000000000009e28 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\updatesManager.js"
sh=825179219FCAE47DE703A83432BDEF53E2B5854B ft=0 fh=0000000000013826 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\js\verlyEarly.js"
sh=C3914BC0B210397883389686BAFE75690F9EBBE7 ft=0 fh=00000000000006bb vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\mam\scripts\contentScripts\contentScri
pt.js"
sh=14A92CF1D6DB95041B24A8E3010A8AFB46631238 ft=0 fh=0000000000006544 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\mam\scripts\background.js"
sh=8FA0D351A38A640F6149C99B1B44F540E3A71BCD ft=0 fh=0000000000000134 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\mam\scripts\iframeHost.html"
sh=889B1EEBEA4AD7D971BF33B2B98687AADD579179 ft=0 fh=0000000000000593 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\mam\scripts\iframeHost.js"
sh=9A765B877EE0A8699121FC0233D5316A64E825AF ft=0 fh=00000000000003d3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\mam\scripts\popup.js"
sh=F97F88D226E8462229EF028FCB8BA89541C287E5 ft=0 fh=000000000000018c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\mam\background.html"
sh=675526C1B3CB27C6635233B62EDB8ECEEBFE1556 ft=1 fh=0000000000109740 vn="a varia
nt of Win32/Toolbar.Conduit.AH potentially unwanted application (cleaned by dele
ting)" ac=C fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Exte
nsions\lhdidofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\nativeMessaging\TBMessagin
gHost.exe"
sh=C0114483C9E2C1271B0D594AB6A6BF1E4F383D63 ft=1 fh=0000000000084340 vn="a varia
nt of Win32/Conduit.SearchProtect.N potentially unwanted application (cleaned by
deleting)" ac=C fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
\Extensions\lhdidofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\plugins\ChromeApiPlug
in.dll"
sh=D6129123A6F5F8973E332F5A5A199D5327C19BCF ft=0 fh=0000000000000229 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\html\SearchBackground.html"
sh=CAF3C15435DB783A821711E3A6B01E7843C0CFBB ft=0 fh=0000000000005ccd vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\html\searchInNewTabAPI.js"
sh=34860FA7CB4EED5F53A71A21332B30480AEED355 ft=0 fh=00000000000036bd vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\Applications.js
"
sh=C60FFB4F6EB01ECE3B0F43F6E05FE95CCB8AD4E4 ft=0 fh=000000000000107f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\Bookmarks.js"
sh=4B6C6966265884728CC0FD546CE0193EA4A9DF82 ft=0 fh=00000000000008d6 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\CntRedirect.js"
sh=2A25D35A4394320DBC11EFFE1D9255ACA1226718 ft=0 fh=00000000000008f3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\DeveloperMode.j
s"
sh=F31EA0BA8A870BF013E292C8DCB44C16AEF36AA7 ft=0 fh=00000000000011b1 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\EmbeddedConfig.
js"
sh=E99B3E15EA24C4D141258481537B4AB52CAD86C7 ft=0 fh=00000000000001aa vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\enable_disable.
js"
sh=0398C902A2E401F2D86124C917B0208DCDCA36A1 ft=0 fh=00000000000001e0 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\EventHandler.js
"
sh=B69CC18B60C6EB4179DA90B6257CA169EF62B6A2 ft=0 fh=0000000000001ec2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\Global.js"
sh=1A97B6D076AA922529CEE48D5AC7A5D03D6E1D3E ft=0 fh=0000000000001416 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\LocationService
.js"
sh=54B0BDF3432798CD8EE9EF98D9AFD58F0BF1396F ft=0 fh=0000000000000985 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\LogMsg.js"
sh=9B205E04D8258F38E9ACA81BB3EF580736AC5D87 ft=0 fh=000000000000ba56 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\MostVisited.js"
sh=72E6080984520C5842981A62F02D074149B9CDD4 ft=0 fh=0000000000002220 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\NewTabAPI.js"
sh=E15EA308449CEDA54E7693F61EB9A296F07C0F29 ft=0 fh=00000000000019c2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\RecentlyClosed.
js"
sh=3058D62AF3EC23B4FB66D765335B0084C06295FF ft=0 fh=0000000000001e9d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\SearchBox.js"
sh=A373E36F5B61EA469046515C3A3645E0B4C9A2E6 ft=0 fh=0000000000000c6b vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\SearchBoxIframe
.js"
sh=EA27CF0B6CA39D65A548428E4F12D8CF22B71E2D ft=0 fh=0000000000001e00 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\ServiceMap.js"
sh=03B4F9AD13BB2D49763F94915FD5A0DFDF7B5127 ft=0 fh=0000000000001a6d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\Settings.js"
sh=8212F55618D192692818A59E4563C7510C33ACC0 ft=0 fh=000000000000548c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\startupSequence
.js"
sh=9D5B4BF33E34FF194B8091A93557392547001437 ft=0 fh=000000000000598f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\Thumbnails.js"
sh=FB99121525C0221C7364C7432CD0E0C7704656E0 ft=0 fh=0000000000003439 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\Toolbar.js"
sh=0DAAACC4C6915CAD7D3A8F1340610A1531E4A97A ft=0 fh=00000000000031c3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\Translation.js"
sh=F280977B2C4FDFC138CBF0992D47909F930CA765 ft=0 fh=000000000000143d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\API\Usage.js"
sh=212B1CC3E996AB98867FEEEA6336AB2E2A7BB15F ft=0 fh=000000000000120e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\about_memory.cs
s"
sh=3E83103DC1D86DCD282D41C3E3401B864310154F ft=0 fh=000000000000011b vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\alert_overlay.c
ss"
sh=F938B818F7D392E42C4E89A1CB53AE748154D851 ft=0 fh=0000000000001222 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\apps_page.css"
sh=6BC05503D73EE8F578B25CC20283F26F0D239464 ft=0 fh=000000000000072a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\bubble.css"
sh=D68ABD6635826F00180D47ECA18C43C35231E252 ft=0 fh=0000000000000fb4 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\chrome_shared.c
ss"
sh=2D1249E1723DC0CBC1B888069BF6270BFF405609 ft=0 fh=00000000000009c7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\chrome_shared2.
css"
sh=6CBC65485AC86C862865AEDAADEDBCAC8011487A ft=0 fh=0000000000000573 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\chrome_shared2_
touch.css"
sh=73F135F9DD0C1F0D4226029758A78A14AE8A3D16 ft=0 fh=0000000000000ae7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\dialogs.css"
sh=7B8CD2A1C88DA8C228D7ED5B22B4084ADD90BD06 ft=0 fh=0000000000000789 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\expandable_bubb
le.css"
sh=2F9A8D08FFBCF43E663747050998E6FFAC87BA7D ft=0 fh=0000000000001b0f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\footer_menu.css
"
sh=8C9DB205AB10F5E092B0BE385CAFF542D2F48D07 ft=0 fh=0000000000000792 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\list.css"
sh=5E2B18B05DF5A2DB6AA0F2F7393F44C62C4F8DC5 ft=0 fh=000000000000069e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\menu.css"
sh=99AABB86BA2751F88E154D24AD95EEB79B9AB38A ft=0 fh=00000000000010e8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\most_visited_pa
ge.css"
sh=0FC00737649C8EC15AED83DEF9842DC37CEFE13F ft=0 fh=0000000000000834 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\nav_dot.css"
sh=EA247C7782E7717474E066DBA794057BB0D1120C ft=0 fh=0000000000006c3d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\new_tab.css"
sh=86F0C9BC845D41BDCD402A71C7EDB2636C62EBEA ft=0 fh=0000000000000f6b vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\new_tab_theme.c
ss"
sh=44E9796B7E7BE7CD0D34DE991BE467A2F516E8FF ft=0 fh=0000000000000ce7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\overlay.css"
sh=DC3DB9AB8B6D3605EA483A6FAAE694548A9333D3 ft=0 fh=000000000000018d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\spinner.css"
sh=C0DC7A8D032F74549467E3776E5FC1E24F69841D ft=0 fh=0000000000000901 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\suggestions_pag
e.css"
sh=D53F8171236CD56B9C113132BA36B2FB268D2F58 ft=0 fh=00000000000007f8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\table.css"
sh=F4F05B4FDCC5B189FD3002C190C2C573BAE7F8A0 ft=0 fh=00000000000005fd vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\tabs.css"
sh=E62876DD0E52B4F46EEC1E1A06FE8D989DDF0E9E ft=0 fh=000000000000011d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\throbber.css"
sh=22EAFAAABC7C42142CEAF90D589AC0ED2E012F5F ft=0 fh=00000000000011a6 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\tile_page.css"
sh=16851C6A524E8FB7C43CEE79DC7035C941394CC3 ft=0 fh=0000000000000a4a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\trash.css"
sh=43B63492D3C0F31E276BE5B4BD5E942CC588AB84 ft=0 fh=0000000000000e92 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\tree.css"
sh=E9CF833D661FC0A2E8D694DA93222315709BBAE5 ft=0 fh=0000000000000188 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\ui_account_twea
ks.css"
sh=89D348A74A7BF9EE7B927412FBB16C86250252C8 ft=0 fh=00000000000021f2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\css\widgets.css"
sh=AFB60AE2B06F940E2FA77BE3AA8692F9BE24F545 ft=0 fh=0000000000000164 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\html\alert_overlay.
html"
sh=916AC798533FBF1E14B52AAFB0F413529745227C ft=0 fh=00000000000000ef vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\html\appLauncher.ht
ml"
sh=E83811169D61BD32CF567F4049ECE351DE9E360F ft=0 fh=00000000000001a5 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\html\loadfile.html"
sh=76B37DB084B6275852973C3FCF60B24A998EC7EE ft=0 fh=0000000000000834 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\html\NewTabBackgrou
nd.html"
sh=F2BE964D58D4FE0B67149C9D24E4E9E54F511598 ft=0 fh=0000000000002cc2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\html\new_tab.html"
sh=AE565AEE6F60CAB7FE98036F405C25C9EE3DF4AD ft=0 fh=00000000000000f8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\html\Options.html"
sh=E296DAA8EAC62500582D077FCBC265409E1F173C ft=0 fh=00000000000004ad vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\html\redirect.html"
sh=58787211389A1CAF56A9DDBBD1737B568DE1E24A ft=0 fh=0000000000000071 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\html\trash.html"
sh=EE61EEE4AE2E6E30053F2FB74813E1500CEAB175 ft=0 fh=000000000000047e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\img\favicon.ico"
sh=D6D08F2B38911DAA6608CB59F6408D99FA1A456C ft=0 fh=0000000000000a3c vn="" ac=S

ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\img\spinner.svg"
sh=CD789E2B9A3A45EB6D3A97FC16DB015792F3A399 ft=0 fh=00000000000001e6 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\img\throbber.svg"
sh=9A1DACA2B2F545EBDB89E0E47471B083912E35FD ft=0 fh=0000000000000ba8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\alert_overlay.js
"
sh=496CDC5ADAB912D353FEBA4CE6BA88BDECA86420 ft=0 fh=000000000000008d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\appLauncher.js"
sh=EFC1FB9889BCC8EC88216C4F8CAA72ECD7BCA872 ft=0 fh=0000000000008c80 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\apps_page.js"
sh=8984F3872913A135DE84B09CF5A9F5DE588C9F5E ft=0 fh=0000000000001cc3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\autocomplete_lis
t.js"
sh=6FD334D5BD91A7BDB9514281AFAD1E9DEB47EBB2 ft=0 fh=00000000000007c3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\Base64.js"
sh=2746D3F8114ADBA4C691F040C9D3DB1F6997023E ft=0 fh=0000000000001eb3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\bubble.js"
sh=81DC87B49EBA8F0D3AA392B7217600EE1EE5A366 ft=0 fh=0000000000005a05 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\card_slider.js"
sh=740A1824877E0AC7436BAE9CD9E39A969D34CEE4 ft=0 fh=0000000000001b3e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\color-thief.js"
sh=8A605DC94FB2846AE663BC6D317AA096A6AC853F ft=0 fh=00000000000020f4 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\command.js"
sh=54DC1AD0F1F345EE5C2514815EB20AB9076D0882 ft=0 fh=0000000000000d14 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\command_line.js"
sh=E243AD62C2BB470141908BFBA96B04B2C24AF732 ft=0 fh=0000000000000824 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\context_menu_but
ton.js"
sh=BAE104B455CAEA3846BA675C02D71D13F3339E40 ft=0 fh=0000000000001ce3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\context_menu_han
dler.js"
sh=80FA171BD9EF721B7161E78BB820A53FAF8F5F76 ft=0 fh=0000000000003230 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\cr.js"
sh=87D974CB9FA544DB4A366BBE2AC2AE56019E4B8D ft=0 fh=0000000000000270 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\database.js"
sh=2A733B56DFC2C46058E4D3C868CA0FD962D96C07 ft=0 fh=00000000000028ef vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\dialogs.js"
sh=FA0D23C8F9E797567F1530433E8BF69534F9FADC ft=0 fh=0000000000000761 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\dot_list.js"
sh=98B3D5AF361CF1393CDF067199561E00C17266FB ft=0 fh=0000000000000e26 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\drag_wrapper.js"
sh=F4E08490A0FB93A2E61216281251AD73B5C8BE20 ft=0 fh=0000000000000c80 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\event_target.js"
sh=703DB56E95DF282D72D5DBF34E5CBC2FFCB52E5A ft=0 fh=0000000000000c9f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\event_tracker.js
"
sh=C6A058F474AC830B3ED46CFE8DD63241C1B1B672 ft=0 fh=0000000000002641 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\expandable_bubbl
e.js"
sh=D0540FD47CBBCFC6891FE53FA72EB14DEBB10C8C ft=0 fh=00000000000008e2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\focus_outline_ma
nager.js"
sh=A0BCAEC7AA7AF1B28467C8321DBB6790B8B0F07F ft=0 fh=0000000000000191 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\i18n_process.js"
sh=83E5928F304A1F3F4B7FAB2AE1FAF401026BEA7C ft=0 fh=0000000000000e80 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\i18n_template.js
"
sh=9D96DF974CF25FD0712B6B5D480687E98A94977E ft=0 fh=00000000000013bb vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\i18n_template2.j
s"
sh=D7F0AF8D484953274C209AA4F85551BED00B08B8 ft=0 fh=00000000000484a1 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\jquery.js"
sh=A24D01531297C23E27C3F077BBA4F2B35C7C606E ft=0 fh=0000000000001315 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\link_controller.
js"
sh=1DA95241210221B8EB6F338416B601778899D634 ft=0 fh=0000000000000094 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\loadFile.js"
sh=C56B482214F4B504391E590522C4E025E09CA0DC ft=0 fh=0000000000000ff3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\load_time_data.j
s"
sh=89C131445928CA2EF016D62E8F75C053DB190172 ft=0 fh=0000000000000a20 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\local_strings.js
"
sh=0DA4EF61180AFF59B6023CEFBEB7B820859A3B8A ft=0 fh=00000000000033a6 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\logerror.js"
sh=4E7185EE0B7F05543FCE3FBA4E54928019A2C12E ft=0 fh=00000000000003ec vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\logging.js"
sh=9BD99808FE28A7F5304CBA4FDD97C73422FA1001 ft=0 fh=0000000000003009 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\md5.js"
sh=4995C9A4490CF885A09532CBF865A6605B508AF6 ft=0 fh=0000000000000294 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\media_common.js"
sh=A89F420ACE1D8D7A99CBFF398BC29589341E8578 ft=0 fh=0000000000000f80 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\menu.js"
sh=3A778F980B48D4088B7557B7A3F9B63EAF4E7ED7 ft=0 fh=00000000000015ae vn="" ac=S

ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\menu_button.js"
sh=DDAD0E7184AA61216F4394DDDB17931A3321BEF0 ft=0 fh=000000000000120f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\menu_item.js"
sh=62DC420B21F42AF01347F5DE65FF4870198DEB40 ft=0 fh=0000000000005003 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\most_visited_pag
e.js"
sh=25CB527010815DC17D12AE803096903CFF2C7B44 ft=0 fh=000000000000208c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\nav_dot.js"
sh=CAB74D1D61FE587903CEA88EA1DAB45171E58596 ft=0 fh=0000000000000134 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\NewTabBackground
.js"
sh=4623C0CCB0B66412FCC75EC2F0F273BC9737073A ft=0 fh=000000000000061d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\newTabBeforeStar
t.js"
sh=21AF020630E7DC3BB67C4FDB51ADDD99FE803975 ft=0 fh=00000000000011a7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\newTabLoadTimeDa
ta.js"
sh=89BC2FC0B755A3721F5A52ABF80AF3032E874CDC ft=0 fh=0000000000009093 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\new_tab.js"
sh=180CA0B0C4CCBF5DE8C61B144E1F229E6CDE77AC ft=0 fh=0000000000000bbb vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\options.js"
sh=8E44E1340440E308042F63EAADC9DAECDDD5E1AD ft=0 fh=00000000000025c8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\other_sessions.j
s"
sh=C788E16F9C852DCDF67828214E01B2047F2F0FCA ft=0 fh=0000000000000e97 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\overlay.js"
sh=6B3A473ACA1489F78D16AE66A15ED7733CE9414B ft=0 fh=0000000000007054 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\page_list_view.j
s"
sh=FBFA4D3F32D51ED5DD98CC8513E177F59558CFD0 ft=0 fh=0000000000000be7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\page_switcher.js
"
sh=FE1D3F2ED5427C497AAD0EC65730C4A8955F3BAB ft=0 fh=0000000000000ba1 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\parse_html_subse
t.js"
sh=FC6DF5CDF338CC9688DE3B491CD35FCD561D8021 ft=0 fh=0000000000001eae vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\position_util.js
"
sh=376E4939628C11AE7C1CDF06595D5732338F1EAC ft=0 fh=0000000000001637 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\promise.js"
sh=06EBCD4E67E86FAA3A2EB676C717BA966EC1EA50 ft=0 fh=0000000000003f1f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\quantize.js"
sh=48D305AF616EFC0345C5B2F94C873F03247F04F7 ft=0 fh=0000000000000d14 vn="" ac=S

ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\recently_closed.
js"
sh=0AED1D8841BE977C9349C9DDD9EEE417B6D98B0B ft=0 fh=00000000000015df vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\repeating_button
.js"
sh=C602F26682CC31C3CF98088ABC17362611204D4E ft=0 fh=0000000000000876 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\SearchBoxPage.js
"
sh=A8E8AA67F0188FC27C3B2CC4D909E6D815FB9EB2 ft=0 fh=0000000000001b9e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\search_history.j
s"
sh=78AA8C592C1485BB859C2B918FB86C2CE0760CDD ft=0 fh=000000000000177e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\splitter.js"
sh=873E5D177DB517B3E28C1901721D87DF89B43A97 ft=0 fh=00000000000034bd vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\suggestions_page
.js"
sh=51D5DF0ACF736D0111C30DE7B7BFC9B73052AB46 ft=0 fh=000000000000c67d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\tile_page.js"
sh=09CDBFA04E1F1B99C65A356B884207C5A9CD5D72 ft=0 fh=0000000000007173 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\touch_handler.js
"
sh=B8C66EA01270776CA08E61DD4FDFF616F98B8AD2 ft=0 fh=000000000000080e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\trash.js"
sh=19F70F7F8298A192CBDC075A07D6B04549B7168C ft=0 fh=0000000000000210 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\tree.css.js"
sh=9015B4A056433040B21C391FC89E9D5D8DF4AAA6 ft=0 fh=00000000000046d3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\tree.js"
sh=47B71933CA4046B0B25F0606EE9E1F69320B5CB1 ft=0 fh=0000000000001421 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\ui.js"
sh=3E24A0188AB68B59865B12447A35C6017FD60F18 ft=0 fh=0000000000000e9a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\ui_account_tweak
s.js"
sh=41A642037B4FB793D6B127B079FFBF2D02F5EBF2 ft=0 fh=0000000000001757 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\util.js"
sh=23A1CFB35FA8E7286B1C57CE5A68BC6C619995D3 ft=0 fh=0000000000012707 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\Search\NewTabPages\js\ZipFile.js"
sh=ECF02EB627C565E5B7DDEEFBE7D31AD08FA7BD7F ft=0 fh=0000000000001f51 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\aboutBox\js\aboutBox.js"
sh=6211D7A6B84F81B8CAFFE0F5AC6157773E286BED ft=0 fh=0000000000002333 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\aboutBox\aboutBox.html"
sh=ED8EBB04FB14DB5353ED95F110D1C1E33912888C ft=0 fh=00000000000035bf vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ac\css\toolbar.css"
sh=0B0697102B439013578B2AA19293BEFA43FA17F0 ft=0 fh=0000000000002b2a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ac\res\yoxscroll.js"
sh=3D9BBB93E96538CD0ACCB8D89D44BC9D51C746CF ft=0 fh=0000000000001c23 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ac\appManager.controller.js"
sh=0F83664ABD05642B45F5E643A5BC16FC47161C00 ft=0 fh=000000000003b3a0 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ac\appManager.model.js"
sh=7178624B268D3F211B89AAE6E144ADA95C2181AB ft=0 fh=000000000001fa0a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ac\appManager.view.js"
sh=DEA2A57BA9263A7DC56AF90F03A70AEE715E6B2B ft=0 fh=0000000000002153 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\api\toolbarapi.js"
sh=C72C95DD07D3A3736712A1E0F7E54860323E9E0F ft=0 fh=0000000000028b0f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\api\webAppApi.js"
sh=851D76444B5DC10F534030F7D29C0BC67627D64B ft=0 fh=0000000000006752 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\api\webAppApiFront.js"
sh=E9D67549491117FDBD26D83E3C6CEDEBAC021A1C ft=0 fh=0000000000006d43 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\msd\excanvas.js"
sh=2F084CF47D8462865F098EA22D869C78176ADD13 ft=0 fh=0000000000000aaf vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\msd\trusted.html"
sh=433AA54C7FEF22EA3D7154FBCD8A513E1CB149FC ft=0 fh=0000000000000f16 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\msd\trusted.js"
sh=894DABE8BD79A7875969F8F03141AF734364A6CB ft=0 fh=0000000000002db7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\msd\untrusted.css"
sh=80CA1EECB99B7A062E80179FF4FDC1AFA7F40935 ft=0 fh=0000000000000d1e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\msd\untrusted.html"
sh=76939F4355004D2740CDCF05D6B517A6D3735E9F ft=0 fh=00000000000016d8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\msd\untrusted.js"
sh=B2591E52A9E643357ED498AFAB109ABAC0B99306 ft=0 fh=00000000000005db vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\options\css\jquery.jscrollpane.c
ss"
sh=72EE2F71CEF8EB415F287F9D99DC08E0A19254FC ft=0 fh=000000000000512f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\options\css\options.css"
sh=14E6E772F411C5AC6E86F4941BB008EACDC11FAA ft=0 fh=00000000000005c1 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\options\css\reset.css"
sh=651048D35A6CE3A0A311849801CAEC0E284B14E0 ft=0 fh=0000000000000928 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\options\js\resources\html5shiv.j
s"
sh=BF22CC31A72128AE0967ED7B0B0D6001CAA0727A ft=0 fh=0000000000003a8e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\options\js\resources\jquery.jscr
ollpane.min.js"
sh=1EF8E23F083EE496DAEF782ED42AAE609C776E1B ft=0 fh=0000000000000963 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\options\js\resources\jquery.mous
ewheel.js"
sh=D662E5558F98BAD4F186EF3A888A4D58FE946354 ft=0 fh=0000000000000183 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\options\js\html5SupportIe.js"
sh=B701C8D23FAC5582EAB6AE057AB7B5206938950D ft=0 fh=0000000000012875 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\options\js\options.js"
sh=9B49A32E465D1E96823F762E2777A7E0016A2D6E ft=0 fh=0000000000004251 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\options\options.html"
sh=9AA707DDA25BC0B8A12F1920DFE2825013BAAF8B ft=0 fh=00000000000108ed vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\sp\js\searchProtectorManager.js"
sh=B5E1638A1312B1E43D9E527BBF2D77254AAFB895 ft=0 fh=0000000000000683 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\sp\spbd\bubble.css"
sh=32301C36C1E2136DA8AC4892CA1276E85E9BC746 ft=0 fh=0000000000001945 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\sp\spbd\bubble.js"
sh=0FBB93BD44B06F7753D2C7EB053CF489F15681CB ft=0 fh=0000000000000506 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\sp\spbd\main.html"
sh=67A0DDD2991D50D897B899DA6FA9EA8EA17C0830 ft=0 fh=0000000000000ad9 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\sp\spsd\main.html"
sh=0A83A248ADC6F172AC010018299D69AD27B5C9A7 ft=0 fh=0000000000000c53 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\sp\spsd\SearchProtector.css"
sh=81A0B989C32D36E7C316E2CED10594F3A5E92784 ft=0 fh=00000000000033ac vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\sp\spsd\settings.js"
sh=836B94559DC635400063F606F82464A4EAFFDF76 ft=0 fh=000000000000048b vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\ftd\images\radio.GIF"
sh=92760508C061FF7C0A997CF214703FF59F3E5EEC ft=0 fh=0000000000002000 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\ftd\images\Thumbs.db"
sh=F20BBF0BE07DC27BBD431E60A227EA371C47AA23 ft=0 fh=0000000000000921 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\ftd\images\truste_welcome
.GIF"
sh=EAB035E7507CCE1415AEA4025E564F9BDAAC331F ft=0 fh=0000000000000486 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\ftd\images\weather.GIF"
sh=6C115DDDC8D7B95C48F584A02D246BA641F9C37E ft=0 fh=0000000000001eb1 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\ftd\main.html"
sh=0DBD1D1E57D797E770D629D33D6CDF59F55EC464 ft=0 fh=0000000000002db5 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\ftd\ToolbarFirstTimeDialo
g.css"
sh=F28F40395D6A2FEF9C6C325318618DB1A6D0AF89 ft=0 fh=000000000000f9ce vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\ftd\ToolbarFirstTimeDialo
g.js"
sh=04B0BBC4DB9E77FF59221DFA6738A02A758EBB59 ft=0 fh=000000000000047c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\restart\main.html"
sh=5D64F03BE569584E54702EADDFEE6161EB6F8913 ft=0 fh=0000000000000e2a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\restart\restartDialog.css
"
sh=14614C8FD087A8DA9DA6D2FB76B1018D99CB3BCC ft=0 fh=0000000000000de7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\restart\restartDialog.js"
sh=D724D4ADB6E2820FE0CF298F64E753DE3519AD61 ft=0 fh=00000000000027c3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\DialogsAPI.js"
sh=F0E4D90B4B7B5CE7A48C24F1252A06A35A3BCC84 ft=0 fh=00000000000069a5 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\excanvas.js"
sh=84F491222279227E00581D1C053686834EB504CA ft=0 fh=00000000000029ad vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\generalDialogStyle.css"
sh=43FC18E56A5FD7D9F0FD08413422003C71937CA1 ft=0 fh=0000000000006e78 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\PIE.htc"
sh=7119F5E3E906EAF0F0E81C153F44461571F4553E ft=0 fh=000000000000009a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\dlg\settings.js"
sh=DA78157A5EA410A26EF1EFCCC6B3782F2923458E ft=0 fh=0000000000000881 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\gadgetFrame\gf.html"
sh=55FB0ADA2ECBE7B6FB9BA5E4D700DF50D379BE2C ft=0 fh=000000000000099c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\gadgetFrame\lgf.html"
sh=A720C250E9672A2B018A066287FF3AC80B6B07DB ft=0 fh=0000000000000f9f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\gf\css\gf.css"
sh=461D9B9CB9E63811CB37B025CFEF6E5780D50DA3 ft=0 fh=0000000000000083 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\gf\css\gf_ie.css"
sh=DFB361CE40255F172B85C6BFB1D116E381406296 ft=0 fh=0000000000001cd5 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\gf\js\gf.view.js"
sh=EF5E495F1498AC3B0271CE42999EAC5CCDA5591C ft=0 fh=0000000000000785 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\gf\js\lgf.view.js"
sh=DA78157A5EA410A26EF1EFCCC6B3782F2923458E ft=0 fh=0000000000000881 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\gf\gf.html"
sh=55FB0ADA2ECBE7B6FB9BA5E4D700DF50D379BE2C ft=0 fh=000000000000099c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\gf\lgf.html"
sh=AC56ACD0B99A486F3BECE8712EF87F6B6B862055 ft=0 fh=000000000000181a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\menu\css\menu.css"
sh=5B06E9B0325FFD9111970B721F8C3DC08EA4EC84 ft=0 fh=00000000000008a2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\menu\js\jquery.ellipsis.js"
sh=1746EBA0698BEDCAB4BC3FC106C51DA6BBAA1D65 ft=0 fh=00000000000008d6 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\menu\js\jquery.scrollTo-1.4.2
-min.js"
sh=13AE1141890ADD2873C12CB6B88AF473A905C127 ft=0 fh=000000000000503a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\menu\js\menu.js"
sh=A76BBC179E955027259B6814789F108B033D5D88 ft=0 fh=0000000000001b2d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\menu\js\renderHandler.js"
sh=E74BFC93DA606C8B2EE375235D5F24927109DFB0 ft=0 fh=0000000000001488 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\menu\js\scrollers.js"
sh=E6F42424C0E368FE496D621DDCBA0E6CF44CD764 ft=0 fh=00000000000014e9 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\menu\js\showHandler.js"
sh=036CBC123297C447AF07EE0D164B9682FEC4A542 ft=0 fh=00000000000014c0 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\menu\popup.html"
sh=D3F8E45265BEA2363E006D13355DDF1744118DAF ft=0 fh=000000000000a56a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\menus.js"
sh=21682B7BB0FDA06B8E4557BCF7B8F8AED1B43C37 ft=0 fh=0000000000011937 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\ui\popups.js"
sh=290F497E3B8270F5789BA59A77E56B6943C8FEC8 ft=0 fh=00000000000003a9 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON\Js\bgpage.
js"
sh=9E29360087386404A96766222E9D289A99A55E75 ft=0 fh=00000000000001f4 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\APPLICATION_BUTTON\bgpage.htm
l"
sh=5BC9070CB770D2F950D7A3B853467C8780CCB5C8 ft=0 fh=0000000000003ddf vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\css\en.css"
sh=B4F37160F37353D2745AFA5869C3FC23E66C2316 ft=0 fh=0000000000001441 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\css\en_rtl.css
"
sh=ED27514B11E1DD1096ED4E4B3116439A99821497 ft=0 fh=00000000000004f9 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\css\jquery.jsc
rollpane.css"
sh=ED06A9BD0192349766DCF20320A7FF0674919EF8 ft=0 fh=0000000000004d48 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\AccountMana
ger.js"
sh=3CAC56CE3BAA4B6FAB89AB1AFE00CE4EE9901604 ft=0 fh=0000000000004aec vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\bgPage.js"
sh=D7C455C1C40FD220B172A7B53205502391D32109 ft=0 fh=0000000000001671 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\EN.model.js
"
sh=83E43A0B8962A932935624448698DBBAD7940FC6 ft=0 fh=0000000000005cfc vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\IMAPExecute
r.js"
sh=DD523314FAB17C7EA17184ECAC8FEE432000ECF1 ft=0 fh=0000000000003afd vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Inboxer.js"
sh=3068D6BD656722D77D9E89D3DB6B22B0C700950C ft=0 fh=00000000000008dd vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Invoker.js"
sh=20724C31FDFD039ACB4C6FD415233F7023A6AFB5 ft=0 fh=0000000000002e36 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\MailDecoder
.js"
sh=924D83FDAFA6B4C5B4E9D2AF1B31494CC6F9ACE2 ft=0 fh=0000000000000d66 vn="" ac=S

ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\MailMerger.
js"
sh=FAB146603A44891BB7994BD7BACF949C89E0CE19 ft=0 fh=0000000000004c93 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\POP3Execute
r.js"
sh=B97A2F8E14DE4495EEB2BC0927911E93739BCE9E ft=0 fh=000000000000f009 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Popup.js"
sh=8626858998507CDA1D4CAB737E5B550D150C15FB ft=0 fh=00000000000008e3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\providerHel
per.js"
sh=990279CBECD6A8EC2635CC04A06774F9ABD06015 ft=0 fh=0000000000004dfe vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Providers.j
s"
sh=1642728AE087DB71154E60F49D429C34BFC651AD ft=0 fh=00000000000010b0 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\SettingsMan
ager.js"
sh=B847AE0C7D69455FEDB89D852ACD57673877E5C3 ft=0 fh=0000000000001797 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Timer.js"
sh=2F72B3C44905E5E49EC2DD9A3451CCFEA0C6965E ft=0 fh=0000000000001b60 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Translation
.js"
sh=4435B60321D9CF61114B7AD11C493B2B68D519C1 ft=0 fh=0000000000000818 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\js\Utils.js"
sh=CDE10B96D1E7A7DD74C18F75BF63D177C9BC4535 ft=0 fh=000000000000059b vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\bgPage.html"
sh=F5B4D893E4EF2F62735E8271E07BE7E7189002CC ft=0 fh=00000000000049a3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\EMAIL_NOTIFIER\popup.html"
sh=03976FD69A972ED0225957994947937D2231E54E ft=0 fh=0000000000000353 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\css\embedded.css"
sh=62D1E6C2D01B8462A484940A023A35657A0DF221 ft=0 fh=00000000000001f7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\css\popup.css"
sh=81BBDCD5F983159A0EB20CA497A6D47711415AEA ft=0 fh=0000000000000475 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\css\reset.css"
sh=6A5C2ECCA92EE43CB524F5EBB99ABC61690ED0A2 ft=0 fh=0000000000001e62 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\js\bgpage.js"
sh=AFE66394D4DBA301D8D1B53B586D370B8D19CFD4 ft=0 fh=0000000000001944 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\js\embedded.js"
sh=C507CE47E396A14504A932BD2ACADB6FFB33162C ft=0 fh=0000000000001b7b vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\js\higlighter_scr
ipt.js"
sh=EFFED6152BC37E515196B11B37BA6BD1E8E5E5E0 ft=0 fh=0000000000000553 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\js\popup.js"
sh=0DA9CAD495398CC3C82C0E4F6FBAF20370C6FEFE ft=0 fh=00000000000001c4 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\bgpage.html"
sh=1AA12B9B2757B6A89620D33CB8555F37DC6CE11B ft=0 fh=0000000000000258 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\embedded.html"
sh=A6F8E76BB853FCDF8FC78BAE9FBDB40D4949074B ft=0 fh=000000000000022b vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\HIGHLIGHTER\popup.html"
sh=3A81FDC179AD0A59825EC35696A62886F7EDF836 ft=0 fh=000000000000149a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\MULTI_RSS\css\popup.css"
sh=1D91B1F177291E3A9AAB450BDE5A41D2CA1AF98B ft=0 fh=0000000000000a85 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\MULTI_RSS\js\resources\webApp
Utils.js"
sh=203691599900350B74F69E43AD839B42884E9AFB ft=0 fh=0000000000005e5c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\MULTI_RSS\js\bgpage.js"
sh=273EE04FCBC05054DFCA62E8FE63ACFB5042DBE6 ft=0 fh=000000000000535f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\MULTI_RSS\js\popup.js"
sh=7616163D5D7DDE2F1D4DF3185264CFEED8A7D838 ft=0 fh=00000000000002ef vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\MULTI_RSS\bgpage.html"
sh=AB9E0A5348D79F728BCFB370494807F3C3785298 ft=0 fh=0000000000000d35 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\MULTI_RSS\popup.html"
sh=1B250BED269230E888E51685FC434A5C09385838 ft=0 fh=00000000000028b7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\gadget.css"
sh=86C29F7B953F1750DB2CC2E94E9AD545B8963E2C ft=0 fh=00000000000026d1 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\general.css"
sh=8C7C29220FA43C5E90A14825AE993DE108634933 ft=0 fh=00000000000009b2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\Main.css"
sh=AACBFD23FD7EE10F55D8B3339CE860C4146E7DCF ft=0 fh=0000000000000cca vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\newMain.css"
sh=236D826386A7514FC2B9651FDF2907F4F7111623 ft=0 fh=00000000000009a7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\settings.css
"
sh=9F237CC13F8A358C7BFD2F9D60F97BD0CCD291AC ft=0 fh=00000000000006cf vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\css\ui.stepper.c
ss"
sh=F39262FBEF7D2DB1E058DE648A7B83B6C9D55E40 ft=0 fh=0000000000008769 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\AppName.js"
sh=97FA9D701780ACFED9CD5842F189D6C7F866C41A ft=0 fh=0000000000001458 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\bgpage.js"
sh=9517120CDBD2256A24A8A6F71A90CB6F46C99FF3 ft=0 fh=00000000000000bb vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\bgpageEarly.j
s"
sh=F993CB5C73C6BDD576F79ACA6185AAC5D9B39783 ft=0 fh=0000000000002780 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\commons.js"
sh=5CACD7FBEE455221FA79DC80B5CD4D74F87AA076 ft=0 fh=00000000000005f9 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\jquery.ezmark
.min.js"
sh=544B3CB5375EB5F64684F73E1E17548D226DE2D8 ft=0 fh=000000000000b55f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\notification.
js"
sh=07AD3910A656D5E897064F658A536C5D241B7C11 ft=0 fh=0000000000001d4c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\NotificationS
ettings.js"
sh=9224175C13B4DCAE1409C3495FCF5EF3181A0484 ft=0 fh=00000000000037e4 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\notificationU
IManger.js"
sh=04CF94AD6D979D6E0BBCF5DD2ED789C5FB3D82F9 ft=0 fh=0000000000001179 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\Settings.js"
sh=C2B14A6CFD96EB008AA0A8DAE26BD473BE879E5F ft=0 fh=000000000000068e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\stepper.js"
sh=B4B9A1677D71236D2BBE8F190B53AE5D058F8E7A ft=0 fh=0000000000000e26 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\js\ToolbarAndApp
sSettings.js"
sh=9BC04A1A4D837006EC1823AE8E62369A6B76853D ft=0 fh=0000000000000346 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\bgpage.html"
sh=BDE67D7CEB735E7A0A254B354CD19C548974A996 ft=0 fh=000000000000031e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\embedded.html"
sh=FCF969E98E074C56308C2655EA2941571BC3C8D6 ft=0 fh=0000000000000535 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\NotificationPopu
p.html"
sh=DD761FD2BBFBAC75C876369495639A4114C9C06C ft=0 fh=0000000000000a04 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\NOTIFICATION\Settings.html"
sh=16B9EE3EEE3E14F1852EEA868355ACF5667AC908 ft=0 fh=0000000000001b3a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\Optimizer\js\bgpage.js"
sh=3A878EDEFB1134EEDD4002E86FD015A32996BD96 ft=0 fh=000000000000012a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\Optimizer\bgpage.html"
sh=553C176ED97DEF8C9479F6AC7427941DBE1CD17E ft=0 fh=0000000000000919 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement\agree.ht
ml"
sh=ECB591B755A5B9DC2BFAB7EB9ED21CF9FB3944A2 ft=0 fh=0000000000000cf8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\PRICE_GONG\agreement\agree.js
"
sh=A1D782943ACC66F1107B841F409AE4B9B38C7020 ft=0 fh=0000000000005550 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\PRICE_GONG\css\custom-theme\j
query-ui-1.8.10.custom.css"
sh=03E7B305CC1891C40A3CF32BEA6532E93B592303 ft=0 fh=00000000000032b3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\PRICE_GONG\css\gadget.css"
sh=B537A3C4F62FA7090231B29D2A0911F9DBF114D0 ft=0 fh=0000000000000028 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\PRICE_GONG\css\ie7styles.css"
sh=9A4DBC6A15418D753B7234D9D4D390505F29EE0F ft=0 fh=000000000000002c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\PRICE_GONG\css\iestyle.css"
sh=4EB1654A5C2B4C2213DFD962DB2FB1F7B9E2282D ft=0 fh=0000000000000118 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\PRICE_GONG\bgpage.html"
sh=D9355A413C4EDE0547E45C0670CB07798AE093C1 ft=0 fh=0000000000018075 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\PRICE_GONG\bgpage.js"
sh=B85F888F5FEDCD6C414E828AE21DB565B6B13B34 ft=0 fh=0000000000000264 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\PRICE_GONG\pg_offers.html"
sh=FB3A9783588A45284923C7C958C7493EBF189906 ft=0 fh=000000000000281a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\PRICE_GONG\pg_offers.js"
sh=718FCE75AA2CB9314FB290B5EC68FFFDC46B1F9E ft=0 fh=000000000000550c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\custom-theme
\jquery-ui-1.8.10.custom.css"
sh=BCCC4A04F0812FC53CD83599528E185C2BF54507 ft=0 fh=0000000000005270 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\gadget.css"
sh=39C4177AE601DFCA17D94768CB9A15B03AD55BBE ft=0 fh=0000000000000056 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\jquery.jscro
llpane.css"
sh=A8657AB09ED8B619FF450303B0485E2B1D98732F ft=0 fh=0000000000000b95 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\reset.css"
sh=339B5F18A07E0E7484B7764C957FF59B4D16E025 ft=0 fh=000000000000011e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\css\stations.css
"
sh=4A7FEEF3AB6747F1D0DF953257EDE7C3D9216B77 ft=0 fh=0000000000000a5c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\Bro
wserDetect.js"
sh=C0F635F36E14C7208CEF0F24DFFD7D1BF3A2284F ft=0 fh=000000000000ee60 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\jqu
ery-ui-1.8.10.custom.min.js"
sh=CC4C6A4B2B1200B752EF421882F7CD1B1F409C5E ft=0 fh=0000000000004665 vn="" ac=S
ery.jscrollpane.min.js"
sh=1746EBA0698BEDCAB4BC3FC106C51DA6BBAA1D65 ft=0 fh=00000000000008d6 vn="" ac=S
ery.scrollTo-1.4.2-min.js"
sh=D545C0202DD7FEB24635C43647477E6370FF0F0E ft=0 fh=00000000000018f8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\rad
ioCommon.js"
sh=D9E3DB1A2226CBBAD03B929E725B91B2E70FBBD4 ft=0 fh=00000000000008d6 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\sys
tem.js"
sh=A99DCF427B75857F3538ECADBDA02C51D2EEB69E ft=0 fh=000000000000022d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\resources\uti
ls.js"
sh=0E35DE35571D5FA98E9478681A49492F265BD5B3 ft=0 fh=0000000000008732 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\bgpage.js"
sh=1B78614C336710D8FA8AC36C8550DE3C8DD90DC5 ft=0 fh=0000000000000233 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\bgpageEarly.j
s"
sh=F91A9DF147294F40B7F227261996C66386F371F4 ft=0 fh=0000000000004970 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\embedded.js"
sh=8BD82764981AF4DD5A2C709C836499CF417C521B ft=0 fh=00000000000003a0 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\embeddedEarly
.js"
sh=13D5B3C485A37D97F80E2FA03F3A7EFE4D442C8D ft=0 fh=00000000000024fb vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\localization.
js"
sh=E55AE219A35DE14D02C35A10BA3CFC0583BBB256 ft=0 fh=000000000000461d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\player.js"
sh=C8B1E8796D05672B3ED88809E3E195CA746B89BF ft=0 fh=0000000000010a90 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\js\popup.js"
sh=8001F49144508BFE976F92E10EE1666BAD8E6F1F ft=0 fh=0000000000000512 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\bgpage.html"
sh=72BA219835132A5D4E763F75FEF8F88D3246ABB4 ft=0 fh=0000000000002acf vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\embedded.html"
sh=B15AC785B8210485556AF73B06EC910C74FD5F77 ft=0 fh=0000000000002afd vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\RADIO_PLAYER\popup2.html"
sh=D1B6C8963CD6525C5EA4ABC57B2DBE02E287416E ft=0 fh=0000000000001044 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\buildSettings\SearchAp
p_Ant.xml"
sh=1609E0F2173B17B53937BB76068B0D6AABFD4124 ft=0 fh=0000000000000f48 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\Css\information.popup.
css"
sh=EA5CF2BFDE6C27120491EEB1502A8232DA3F22A1 ft=0 fh=000000000000d4a4 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\js\bgpage.js"
sh=6DA2C1C2ACDAD2429CA86B75559095CCBC1F6225 ft=0 fh=0000000000000406 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\js\common.js"
sh=E3C0738A6B76B3766FCFD85679684E2EDD397BBE ft=0 fh=00000000000023f2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\js\contentManager.js"
sh=8DC4D64BFCE57683A0C185F752FAC2A7439627FE ft=0 fh=0000000000003cd3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\js\historyProvider.js"
sh=775AB27F92982CE967F8000C0CEB84D0A98B936B ft=0 fh=00000000000062a6 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\js\information.popup.j
s"
sh=1DE3DA1B8855E64C4B541C7C03628DC489ED8B1E ft=0 fh=0000000000000a8a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\js\layoutManager.js"
sh=2C867538408116490A4D3519F8AA9F884A7987C4 ft=0 fh=0000000000003326 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\js\searchListener.js"
sh=D84386958C4DF554201FF13B2D932A2469BD4818 ft=0 fh=0000000000002a94 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\js\selectionListener.j
s"
sh=59E1F96BF48B8F0899C5FBD082A0F5AB93B71C6D ft=0 fh=000000000000425d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\js\suggestProvider.js"
sh=AD67ECDE5E7AB7551511132D781EDF575C32982E ft=0 fh=00000000000127b0 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\view\script\view.js"
sh=E45BE6E9685765ACE3BF5CF716E8B9FDA24D3522 ft=0 fh=0000000000002826 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\view\style\default.css
"
sh=FE89AF9DCC9481D15948501741487734B430ACDC ft=0 fh=0000000000000434 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\bgpage.html"
sh=375D43705838E03D4DF178A7C5F531D4C77A642E ft=0 fh=0000000000000963 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\embedded.html"
sh=663B007859A666C722125BBFC6778C202E4387D4 ft=0 fh=000000000000051d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\SEARCH\information.popup.html
"
sh=26099D78B3C93BA3C4A36AC12AD9AF333C09E422 ft=0 fh=0000000000006cef vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\TWITTER\js\bgpage.js"
sh=C8B979D96C06A845CDF8E20E1F08C5E178A0A5D5 ft=0 fh=0000000000000553 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\TWITTER\js\localization.js"
sh=1AB627EBD6682A64DD60BD35C881B0325D143FA7 ft=0 fh=00000000000023fd vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\TWITTER\js\popup.js"
sh=38972A07238F64AC7F82C72AA4C9F3E6962439F1 ft=0 fh=00000000000001f3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\TWITTER\bgpage.html"
sh=E6B89203CE9240FAB988047C4BCC88C92D6147D8 ft=0 fh=000000000000140d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\TWITTER\popup.css"
sh=C39200FE2E8F98BFBEF707407BEF0770CA4F9368 ft=0 fh=0000000000000c13 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\TWITTER\popup.html"
sh=BA6C07BD42099BAB8069C9CF3676008A5B7C68F3 ft=0 fh=00000000000031d3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\css\gadget.css"
sh=228FAE9E43EE602476343EE6788BC23819893C41 ft=0 fh=0000000000000025 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\css\ie7styles.css"
sh=5A4A22970CC5CBCA7ED84DE423665D19DA148C05 ft=0 fh=0000000000000029 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\css\iestyle.css"
sh=2C55F9A4F4790D29B9B6D4425CA9332B89B69D92 ft=0 fh=0000000000003c5c vn="" ac=S

ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\js\bgpage.js"
sh=65628430B2191B3E91043674DDA32194E4282B4A ft=0 fh=000000000000487f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\js\common.js"
sh=D4DB8BA39DB0B876DA2CAC918238722C71BDE57A ft=0 fh=000000000000372c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\js\date-functions.js"
sh=B51CA6E854D512D56172A0A2FC3F7A69D79C1BB3 ft=0 fh=0000000000006ca7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\js\gadget.js"
sh=2394A4CAE1914167FCF8C5A8D11153CD7291C66C ft=0 fh=0000000000006c83 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\js\jquery.autocomplet
e.js"
sh=3FC8EF8020FA8CC1B8760418AD808AE627F3EA0F ft=0 fh=0000000000000db1 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\js\jquery.textshadow.
js"
sh=2C6323C7E94175944A3A38B665FFDBA1C47C3EA2 ft=0 fh=000000000000319e vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\js\logic.js"
sh=082E3DE8F5BA8E3BAD1A467AC1AA1A314DCE1F65 ft=0 fh=000000000000162a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\js\main.js"
sh=2AD8084699831772B148065992E05F384FBC0087 ft=0 fh=0000000000003ddb vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\js\xPath.js"
sh=6C0DB1A17B30A6028362FE8FCB5741BB5A1D65D2 ft=0 fh=000000000000040c vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\bgpage.html"
sh=A03030D597C196B967598E7E5322A5F78896D491 ft=0 fh=0000000000002959 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\WEATHER\popup.html"
sh=F33DD433EA1BAE0AE64DE1B6EF25F797400B2D6B ft=0 fh=000000000000f3e3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\wa\browserAppApi.js"
sh=0D43C6ADE27EA3027DDFFD5736F5BCA9E35AE9BA ft=0 fh=0000000000001acc vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\al\al.view.html"
sh=A7E605A8A30D9536DE09159ACA846A15A456C87E ft=0 fh=00000000000110dc vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\core\corelibs.js"
sh=3A8BF60868DE3D90D8CB03D15A59CC51437BF80E ft=0 fh=0000000000001be2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\core\framework.js"
sh=70787B572735E314F4452CE70B845F8A67D1A1E7 ft=0 fh=000000000000599f vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\core\utils.js"
sh=306C9F65F1DFC43358FE476B3E5F6AA075ABE628 ft=0 fh=00000000000005b7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\jquery.alerts\jquery.alerts.css
"
sh=237B8EDCC906CA6E9F6FED0A14CA7D9E8608DC08 ft=0 fh=0000000000001e6d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\jquery.alerts\jquery.alerts.js"
sh=D8CC817481D4CCEDB510089547FF570D04852CBC ft=0 fh=00000000000005e0 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\jquery.jscrollpane\jquery.jscro
llpane.css"
sh=CC4C6A4B2B1200B752EF421882F7CD1B1F409C5E ft=0 fh=0000000000004665 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\jquery.jscrollpane\jquery.jscro
llpane.min.js"
sh=2C731DB5E3EEBBC6CFA284B3864ACB4B9848BA65 ft=0 fh=000000000000289a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\al.view.js"
sh=26ED2BAEECF1C8172F09A548E3219103B693D7CE ft=0 fh=00000000000000a3 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\al.viewPerformanceLog.js"
sh=C39135D9E04014EA4089053C183E20159E3C1739 ft=0 fh=00000000000004a2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\background.js"
sh=1B5D7CA6A8185F497A5D64A1AC84D37CF34217E1 ft=0 fh=0000000000000ff2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\ie_fix.js"
sh=9EB9AC595E9B5544E2DC79FFF7CD2D0B4B5EF71F ft=0 fh=0000000000016eac vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\jquery.min.js"
sh=64922ACCBDE40AE75AADE8330276CCA253E9F0FA ft=0 fh=0000000000000a56 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\jquery.mousewheel.js"
sh=8219E7C1721354B0B4D6ED05CF0A7FE4F9ABE3BB ft=0 fh=000000000000044d vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\jquery.text-overflow.js"
sh=C9C1846541BA79A498539BCC7F89D2B44EE00ADD ft=0 fh=0000000000001cf8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\jquery.tmpl.min.js"
sh=73FBF28F755F0A3E3D9727D14A663F2AE837B79A ft=0 fh=0000000000000980 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\jquery.xml2json.custom.min.js"
sh=9A0CDD13AEBB7706AA8C33987614C25078E2D219 ft=0 fh=0000000000001819 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\jquery.xml2json.js"
sh=BA7D9C16731D3900BDFD05197AB171D7E8C04D3B ft=0 fh=00000000000043e8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\json2.js"
sh=0B54D7319753276EAC460D3F95FF224BCB2D2F1C ft=0 fh=0000000000000ae7 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\json2.min.js"
sh=13CD9944386E906B216D099A18EF2DB63CF20D7B ft=0 fh=0000000000002366 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\script2injectEmbedded.js"
sh=7B796039FBC63A6734E584108E2DBB5864A9064B ft=0 fh=0000000000001cc2 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\script2injectPopup.js"
sh=9EBAFBA3D73B3A26BBD47C265EEA379247E8BF0B ft=0 fh=00000000000036ac vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\lib\sdk.js"
sh=70EDD62CEF0B5C8AB9C96CEA53FDA67A6E15D412 ft=0 fh=0000000000073309 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\sl\serviceLayer.js"
sh=693582467916FD3B81EEBCDAFCBE76AA6B1ACDD6 ft=0 fh=0000000000000511 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\backstage.html"
sh=C0EBAE7A1C273652B04468D06CD061B080F33AB1 ft=0 fh=000000000000000a vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\tb\version.txt"
sh=BE067FD26120CE87BD8521AEA7C30D87223B750F ft=0 fh=0000000000073cdf vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\AbstractionLayerBack.js"
sh=FC7A131B791E14CD368F06B9183ADDC3E1222F65 ft=0 fh=0000000000037115 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\AbstractionLayerFront.js"
sh=4467434261887582C12331D9ED5F88BD4B68CDF7 ft=0 fh=0000000000000020 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\CT3234397.txt"
sh=3B20825B227B6425C20269498C8A753D08322B34 ft=0 fh=00000000000000d8 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\CT3234397_public.txt"
sh=6153E0FFB56BBB9FBE025590660B2A7882C92EEE ft=0 fh=0000000000000026 vn="" ac=S
ofdhbieclaekjnfcnfaoceobnco\10.31.4.510_0\shouldShowTB.txt"
sh=A4AC74DD258E8E0689034FAA1B15A5C7C56DC3BB ft=0 fh=00000000000006cd vn="" ac=S
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhk
kegccagdldgiimedpiccmgmieda\0.0.6.1_0\css\craw_window.css"
sh=8B4EAA74D31EED5B0BABA3CA5460201F6B10DA46 ft=0 fh=000000000000032a vn="" ac=S
kegccagdldgiimedpiccmgmieda\0.0.6.1_0\html\craw_window.html"
sh=D591287E341F1E6A5EDA97D95AB240CF2841955F ft=0 fh=000000000001ee95 vn="" ac=S
kegccagdldgiimedpiccmgmieda\0.0.6.1_0\craw_background.js"
sh=7526791878FE91ED075382C2B432A43A47EE7DCD ft=0 fh=00000000000264e7 vn="" ac=S
kegccagdldgiimedpiccmgmieda\0.0.6.1_0\craw_window.js"
sh=2A7D79548C41F305BC8207CE93A2269F557C3D5A ft=0 fh=000000000000005d vn="" ac=S
fn="C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldc
fjmnllhmgjclecdnfampinooman\14.0.0.4651_0\background\main.html"
sh=CB8ED3ADD0CC7EB83EF7C5AA5FB2C9275D33D3A5 ft=0 fh=00000000000001ed vn="" ac=S
fjmnllhmgjclecdnfampinooman\14.0.0.4651_0\background\main.js"
sh=5C270759B908074AE15FF140574BF1507ABAFAB6 ft=1 fh=000000000002b8c0 vn="" ac=S
fjmnllhmgjclecdnfampinooman\14.0.0.4651_0\plugin\npABPlugin.dll"
sh=9E5D399295EA8E6A79CC50E48D7D4EFD3C5FF0F6 ft=1 fh=00000000000fbf40 vn="a varia
deleting)" ac=C fn="C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Int
ernet Files\Content.IE5\2SY8XFYE\APISupport[1].dll"
sh=9C505E97497198E217C60139437C0672B550FFE8 ft=1 fh=0000000000108140 vn="a varia
ernet Files\Content.IE5\2SY8XFYE\APISupport[2].dll"
sh=2A831FECED37BC050AB2F037180088E37F8C6976 ft=1 fh=000000000027e520 vn="a varia
ernet Files\Content.IE5\2SY8XFYE\MiniSP32[1].dll"
sh=3A782B84BC7D1D8528E71B2232F8FE49803EC957 ft=1 fh=000000000027e740 vn="a varia
ernet Files\Content.IE5\2SY8XFYE\MiniSP[1].dll"
sh=88F0020FC52EC4C7F80519D64F0C49D56210C499 ft=1 fh=0000000000057320 vn="a varia
ernet Files\Content.IE5\HS6HPBVM\APISupport[1].dll"
sh=08F5E87E0F562756DE862184FEFCBA45E4B28BE8 ft=1 fh=00000000000bd740 vn="a varia

sh=1DA36F2CEBBB8BACCE6B13E4438FEEBCD11B284C ft=1 fh=00000000000f5340 vn="Win32/C
onduit.SearchProtect potentially unwanted application (cleaned by deleting)" ac=
C fn="C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Con
tent.IE5\HS6HPBVM\APISupport[4].dll"
sh=71ED43D9A88205E127AA173FB2392FD0E3D090D7 ft=1 fh=00000000000fbb40 vn="a varia
sh=3C3DE0043F71DACE7A818B75928139C37ACCC298 ft=1 fh=00000000000fcf40 vn="a varia
sh=C347E76B52F6C704D1C36232A4277AA831011613 ft=1 fh=00000000000ff340 vn="a varia
sh=8615AECFE68AF3B953BBC278C5A0EB10C2FE9379 ft=1 fh=0000000000281320 vn="a varia
ernet Files\Content.IE5\HS6HPBVM\MiniSP32[1].dll"
sh=E32E59722E9487ADD70654D9454F01926DEF8115 ft=1 fh=00000000000cad40 vn="a varia
ernet Files\Content.IE5\WGR29ZBV\APISupport[1].dll"
sh=B5823B99592970FD26908E9E3B7C059CA999A819 ft=1 fh=00000000000fb940 vn="a varia
sh=EC80F73318715E3AD3076113C2397841E139F4AE ft=1 fh=0000000000108340 vn="a varia
sh=47E4010024FEB701CF59F4EED477E47BB0596471 ft=1 fh=0000000000281f20 vn="a varia
ernet Files\Content.IE5\WGR29ZBV\MiniSP32[1].dll"
sh=0A9FE38F15D92D410585BAB56100BE5DB83D4B8A ft=1 fh=000000000027e540 vn="a varia
ernet Files\Content.IE5\WGR29ZBV\MiniSP32[2].dll"
sh=CA946DDE75C196186A79BB3E5CE72F18C6105C09 ft=1 fh=000000000027d120 vn="a varia
ernet Files\Content.IE5\WGR29ZBV\MiniSP[1].dll"
sh=064FBE5308860B8006DA18BF78F080B4B848AB58 ft=1 fh=000000000027fb40 vn="a varia
ernet Files\Content.IE5\WGR29ZBV\MiniSP[2].dll"
ernet Files\Content.IE5\ZOOT8S08\APISupport[1].dll"
sh=2D07E7139B1C3EC3399D5792FD80BBA78E717C7A ft=1 fh=00000000000bd740 vn="a varia
sh=93E3415CE3C59DFB26AE82C0BA0AFF451B7E4C5A ft=1 fh=00000000000f5540 vn="Win32/C
onduit.SearchProtect potentially unwanted application (cleaned by deleting)" ac=

C fn="C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Con
tent.IE5\ZOOT8S08\APISupport[3].dll"
sh=2B9A1340BEC2FE2694C333ACD77F0E12EF9550D1 ft=1 fh=00000000000f1f40 vn="a varia
sh=0C5518F79FCFF8CCC87F841B994983856F7FD268 ft=1 fh=00000000000fbd40 vn="a varia
sh=9B75624241E5B59AD9297E807E93FDF82B031F17 ft=1 fh=0000000000106340 vn="a varia
sh=5222AAACF380DE937DFF9BDEA4145BC8CAC8BF14 ft=1 fh=0000000000105540 vn="a varia
sh=5D4436AD13BC94C6F55D284B1DD8A352EEBCC71C ft=1 fh=0000000000281340 vn="a varia
ernet Files\Content.IE5\ZOOT8S08\MiniSP32[1].dll"
sh=9CF16FBA745174DB1541FD0F4F64C22ED4928AED ft=1 fh=000000000027cd20 vn="a varia
ernet Files\Content.IE5\ZOOT8S08\MiniSP[1].dll"
sh=41F23E459EFF023AB1B26586463360E45528ABC7 ft=1 fh=00000000000fa520 vn="a varia
ting)" ac=C fn="C:\Users\User\AppData\Local\NativeMessaging\CT3234397\1_0_0_10\T
BMessagingHost.exe"
sh=C2C35F77505CB8FF70FC312C44E070DBD5834942 ft=1 fh=000000000005b920 vn="a varia
ting)" ac=C fn="C:\Users\User\AppData\Local\NativeMessaging\CT3234397\1_0_0_2\TB
MessagingHost.exe"
sh=51AC1B6D9A2F8135DD9D5C7D11E1590BD215D0B0 ft=1 fh=000000000005b920 vn="a varia
MessagingHost.exe"
sh=BB1A5AE5206E9995C35E517ECBA291C30CE4F7B7 ft=1 fh=00000000000f3f20 vn="a varia
MessagingHost.exe"
sh=D4D640E4A04D91DEF41DAD844D1EC046FA1D5F3E ft=1 fh=00000000000f4320 vn="a varia
MessagingHost.exe"
sh=47684BC9F96872C4134DD46689D013BD8E51A14A ft=1 fh=00000000000f6920 vn="Win32/T
oolbar.Conduit.AH potentially unwanted application (cleaned by deleting)" ac=C f
n="C:\Users\User\AppData\Local\NativeMessaging\CT3234397\1_0_0_9\TBMessagingHost
.exe"
sh=FADE4553CF63ABD446132E31C7F927AC9D191F5D ft=1 fh=0000000000104140 vn="a varia
MessagingHost.exe"
sh=95D6172E485A8CE4E67FC5544335FB317B8D989B ft=1 fh=0000000000109740 vn="a varia
MessagingHost.exe"
sh=2A831FECED37BC050AB2F037180088E37F8C6976 ft=1 fh=000000000027e520 vn="a varia

deleting)" ac=C fn="C:\Users\User\AppData\Local\TB\APISupport\MiniSP_1.0.4.9\Mi
niSP32.dll"
sh=5222AAACF380DE937DFF9BDEA4145BC8CAC8BF14 ft=1 fh=0000000000105540 vn="a varia
nt of Win32/Conduit.SearchProtect.P potentially unwanted application (error whil
e cleaning (Access denied))" ac=I fn="C:\Users\User\AppData\Local\TB\APISupport\
APISupport.dll"
sh=C347E76B52F6C704D1C36232A4277AA831011613 ft=1 fh=00000000000ff340 vn="a varia
deleting)" ac=C fn="C:\Users\User\AppData\Local\TB\APISupport\APISupport.old"
sh=60A882DFB633B1179EC55F395F1862192BABE03A ft=1 fh=000000000006fd20 vn="a varia
nt of Win32/Toolbar.Conduit.AA potentially unwanted application (cleaned by dele
ting)" ac=C fn="C:\Users\User\AppData\Local\TBHostSupport\TBHostSupport.dll"
sh=B1C5D9DC9A6493C66CD50B3767157CCFC4B4985E ft=1 fh=0000000000075320 vn="a varia
nt of Win32/Toolbar.Conduit.AA potentially unwanted application (cleaned by dele
ting)" ac=C fn="C:\Users\User\AppData\Local\TBHostSupport\TBHostSupport_0.dll"
sh=4BE34B71790D58F46EECEAA30028408B263C2DEF ft=0 fh=000000000000d7ca vn="JS/Kili
m.AZ trojan (deleted)" ac=C fn="C:\Users\User\AppData\Local\Temp\FBScanner_67050
8319\CHROME_EXT367893830\003460802.zip"
sh=4BE34B71790D58F46EECEAA30028408B263C2DEF ft=0 fh=000000000000d7ca vn="JS/Kili
m.AZ trojan (deleted)" ac=C fn="C:\Users\User\AppData\Local\Temp\FBScanner_67050
8319\CHROME_EXT367893830\053239062.zip"
sh=5DDB156C147E6C2220231FCB869DE12B047665FE ft=0 fh=0000000000317f8d vn="a varia
nt of Win32/Conduit.SearchProtect.P potentially unwanted application,a variant o
f Win32/Toolbar.Conduit.AH potentially unwanted application,a variant of Win32/C
onduit.SearchProtect.N potentially unwanted application (deleted)" ac=C fn="C:\U
sers\User\AppData\Local\Temp\FBScanner_670508319\CHROME_EXT367893830\248090431.z
ip"
sh=5DDB156C147E6C2220231FCB869DE12B047665FE ft=0 fh=0000000000317f8d vn="a varia
nt of Win32/Conduit.SearchProtect.P potentially unwanted application,a variant o
f Win32/Toolbar.Conduit.AH potentially unwanted application,a variant of Win32/C
onduit.SearchProtect.N potentially unwanted application (deleted)" ac=C fn="C:\U
sers\User\AppData\Local\Temp\FBScanner_670508319\CHROME_EXT367893830\370009909.z
ip"
sh=33EFA1BE7008813CF23A5A8308E8A96A404B31DE ft=0 fh=000000000017a110 vn="a varia
nt of Android/AdDisplay.AirPush.G potentially unwanted application,a variant of
Android/AdDisplay.Ganlet.C potentially unwanted application (deleted)" ac=C fn="
C:\Users\User\Desktop\WANI\New folder (5)\S11\Joy\App\FlashLight.apk"
sh=7D166AF668A75344B861432110706210C16412A0 ft=0 fh=0000000000250684 vn="a varia
nt of Android/AdDisplay.Ganlet.B potentially unwanted application,a variant of A
ndroid/AdDisplay.Ganlet.C potentially unwanted application (deleted)" ac=C fn="C
:\Users\User\Desktop\WANI\New folder (5)\S11\Joy\App\iPhone5Clock.apk"
sh=45B7AE2792CE71E9BED2301EB3EC2D811FA78066 ft=0 fh=000000000012e02e vn="a varia
nt of Android/AdDisplay.Ganlet.C potentially unwanted application (deleted)" ac=
C fn="C:\Users\User\Desktop\WANI\New folder (5)\S11\Joy\App\signed_CleanRAM.apk"
sh=3814D66734C0DD7817278BD73749F27072AF86DA ft=0 fh=00000000000965e4 vn="a varia
C fn="C:\Users\User\Desktop\WANI\New folder (5)\S11\Joy\App\signed_FlashLight.ap
k"
sh=16F89679750A8206F9059CDD7C5642C197470BF0 ft=0 fh=00000000000598cf vn="a varia
C fn="C:\Users\User\Desktop\WANI\New folder (5)\S11\Joy\App\signed_RealCalc.apk"
sh=6C82557926A32BA882BC91F8B1E1BC2097AD2346 ft=0 fh=0000000000073ee5 vn="Android
/AdDisplay.Ganlet.C potentially unwanted application,a variant of Android/AdDisp
lay.Ganlet.B potentially unwanted application (deleted)" ac=C fn="C:\Users\User\
Desktop\WANI\New folder (5)\S11\Joy\App\signed_ScreenLock.apk"
sh=31544F981EAD26BF26ACFE95D7B3001D33BC288A ft=0 fh=000000000007b08f vn="a varia
nt of Android/AdDisplay.Ganlet.E potentially unwanted application (deleted)" ac=
C fn="C:\Users\User\Desktop\WANI\New folder (5)\S11\Joy\App\signed_Taksmanager.a
pk"
sh=787248749C601BEF5E4EE25A8495F3207F79AFC3 ft=0 fh=00000000000e36ee vn="a varia

nt of Android/AdDisplay.Ganlet.E potentially unwanted application (deleted)" ac=
C fn="C:\Users\User\Desktop\WANI\New folder (5)\S11\Joy\App\signed_UsefulCompass
.apk"
sh=DFB36FC8E55599DD13E1F306CC88C281F19CC712 ft=0 fh=000000000007693c vn="a varia
nt of Android/AdDisplay.Ganlet.C potentially unwanted application,a variant of A
ndroid/AdDisplay.AirPush.G potentially unwanted application (deleted)" ac=C fn="
C:\Users\User\Desktop\WANI\New folder (5)\S11\Joy\App\taskkiller.apk"
sh=E112FD2525CB6F13A6B8C075177F0A90E074FDE1 ft=0 fh=0000000000152f13 vn="a varia
nt of Android/AdDisplay.Ganlet.B potentially unwanted application,a variant of A
ndroid/AdDisplay.Ganlet.C potentially unwanted application (deleted)" ac=C fn="C
:\Users\User\Desktop\WANI\New folder (5)\S11\Joy\App\TheFunnyTime.apk"
sh=35CCBEB7DAFE3E3F4629F0FE12F6DCE7F6D9B3BE ft=1 fh=000000000013b2b0 vn="Win32/T
oolbar.Conduit.M potentially unwanted application,a variant of Win32/Toolbar.Con
duit.E potentially unwanted application (deleted)" ac=C fn="C:\Users\User\Downlo
ads\New folder\SwissConverter_2.1.exe"
EOS report sent
r_token=891451194246849&report={"report_type": "SCANNER_COMPLETE",}&report_sig=9
C734DE4A183E52F911281E9D10DE4BF&fwd_ip=127.0.0.1&version=4.2.0.27
FB Complete sent
Finalizing
Cleaning up
RecursiveRemoveDirectoryAndAllFiles: C:\Users\User\AppData\Local\Temp\FBScanner_
670508319\Modules\

Log

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Log

Uploaded by

Copyright:

Available Formats

Switches begin

Request query: 1443300579261932/malware_scanner

Request query: 1443300579261932/malware_scanner

Request query: 1443300579261932/malware_scanner

ANUP_SUCCESS","sample_name": "a variant of Win32/Conduit.SearchProtect.P potenti

Request query: 1443300579261932/malware_scanner

Request body: access_token=1443300579261932|cfedb1bd1113405e097902a8602d76ed&use

ally unwanted application","sample_id": "a variant of Win32/Conduit.SearchProtec

t.H potentially unwanted application","sample_hashes": {"SHA1": "9CF16FBA745174D

ECTED","sample_name": "a variant of Win32/Conduit.SearchProtect.H potentially un

wanted application","sample_id": "a variant of Win32/Conduit.SearchProtect.P pot

ANUP_SUCCESS","sample_name": "a variant of Win32/Conduit.SearchProtect.P potenti

Request query: 1443300579261932/malware_scanner

Request body: access_token=1443300579261932|cfedb1bd1113405e097902a8602d76ed&use

Request query: 1443300579261932/malware_scanner

ECTED","sample_name": "a variant of Win32/Toolbar.Conduit.AH potentially unwante

Request body: access_token=1443300579261932|cfedb1bd1113405e097902a8602d76ed&use

Request query: 1443300579261932/malware_scanner

r_token=891451194246849&report={"report_type": "SCANNER_DATA","event_type": "CLE

y unwanted application","sample_id": "a variant of Android/AdDisplay.Ganlet.C po

plication,a variant of Android/AdDisplay.Ganlet.B potentially unwanted applicati

wanted application","sample_hashes": {"SHA1": "DFB36FC8E55599DD13E1F306CC88C281F

deleting)" ac=C fn="C:\Users\User\AppData\Local\Conduit\APISupport\APISupport_2

deleting)" ac=C fn="C:\Users\User\AppData\Local\Conduit\APISupport\APISupport.d

sh=0B39C2831CE0E959B98D32E3834652D0106F30D7 ft=0 fh=0000000000000307 vn="" ac=S

sh=D53A03DD707D7A28A09DF77983EF7BFF0F3F8D32 ft=0 fh=00000000000000e0 vn="" ac=S

sh=D6D08F2B38911DAA6608CB59F6408D99FA1A456C ft=0 fh=0000000000000a3c vn="" ac=S

sh=3A778F980B48D4088B7557B7A3F9B63EAF4E7ED7 ft=0 fh=00000000000015ae vn="" ac=S

sh=48D305AF616EFC0345C5B2F94C873F03247F04F7 ft=0 fh=0000000000000d14 vn="" ac=S

sh=924D83FDAFA6B4C5B4E9D2AF1B31494CC6F9ACE2 ft=0 fh=0000000000000d66 vn="" ac=S

sh=2C55F9A4F4790D29B9B6D4425CA9332B89B69D92 ft=0 fh=0000000000003c5c vn="" ac=S

nt of Win32/Conduit.SearchProtect.P potentially unwanted application (cleaned by

onduit.SearchProtect potentially unwanted application (cleaned by deleting)" ac=

nt of Win32/Conduit.SearchProtect.H potentially unwanted application (cleaned by

sh=787248749C601BEF5E4EE25A8495F3207F79AFC3 ft=0 fh=00000000000e36ee vn="a varia

You might also like