==== LMNTRIX Respond ==== Run the commands below from Command Prompt as Administrator For the sake of understanding, we have used 'driver' as an example for the filename. It has to be replaced with your filename. Kindly do not include any special characters which are non-essential such as single quotes or double quotes (as shown above) while typing the commands. Installation SensorWindowsInstaller-AQUILA_Prevent_3.62.5.exe -c SensorWindowsInstaller-AQUILA_Prevent_3.62.5.cfg -k 1E500BF92DFCF6F7F1AB -d false -l C:\Windows\Temp\Respond_Installer.txt Uninstallation <driver>.exe -c <driver>.cfg -u true -d false -l C:\Windows\Temp\Respond_Uninstaller.txt Files <driver>.exe - Sensor driver file <driver>.cfg- Sensor driver configuration ==== Supported OS ==== Windows 7 SP1 Windows 8.1 Windows 10 Windows Server 2008 R2 Windows Server 2012 R2 Windows Server 2016 Windows Server 2019 ==== Whitelist Information ==== Respond Sensor: C:\Program Files\AQUILAAD\aquilaad.exe Respond Kernel Driver: C:\Windows\System32\drivers\aquila.sys Software Exploit Protection DLLs: C:\Windows\System32\aquiladbi.dll Software Exploit Protection DLLs: C:\Windows\SysWow64\aquiladbi.dll User Alert Popup: C:\Program Files\AQUILAAD\auilaalert.exe ==== Respond Sensor Hashes ==== (in order MD5, SHA1, SHA256) 3.62.5 Windows EXE x86 6f2efced118086c744152da1c7d09287 153530cc51ffbc496974112be3c4ec74188399a0 e7947ac9a37d4a68999fad0cc2b273aef7e7e180417293f0f17ad74336013652 x64 dd6e779b894da05f2fc2e2b9f59ce4ad 52937461964f29c3e16b40cad4927aeba3a3d1cc e17d0b3d226b377f6295eaab8455929111e680dfee481cc1027796bc0f268b7e Retpoline Driver x64 7ff0d8b8f99af3a60f0947b4638d7524 06a0fad0fc757ca3fabd9e4f3a4e42f1c5983276 87d6169c09fa8f591bc85002117097c708e75da538efa96fa79a1a0dae23a064 Windows Driver x86 95b89c8bde08b46b7b427e2139a47769 d6c0eb80511fc9104474da45fd786dbb166891e6 755abb6c1471b133b280b2991f54b8b2ecdf5e75d622dc1b8668a3d35f762be7 x64 7f1383af7586d6cbfa6c2e0119db9b99 ddf20668fb7e492b23469d1fa76bb170608e0f4f 12afecb91ca6c919af52d45533077592845ba77884379d2530b441d99d0e9950 3.62.2 Windows EXE x86 bad483bb62f1cb5395c2b9094b875fc2 4382fb1eb6082a415a99af81c131797974429b7a a940f25434696cc467928c6fefcf5af86e595befbf80156d5497bbfb44593a2e x64 1486b65911fab494752be5a10843a5c5 e3a03aabd2335362b4f6f46e299d3712d7fbd776 5220afe1f3715c4bc6b847206d0dab3f20e75798c28970cee389139b2e55dd6a Retpoline Driver x64 5c9c601089b9c2bc18d638c32a7e54ed 02c65cb39187560601f8064abe60ea9b04b4fbc3 944ac070159163cef5cdb88ab0d93b425359f10407a352e2cd9241896ee178bf Windows Driver x86 1b3160cab83d7573c8eb191781062fda a5bbadc290fb32dc8ceaeb00a6c9321b43a3144f bada4b624f1777416bebd8774337b4b3b39fa3594a841bd6cc1b518bc2616729 x64 07e4d08f0be060afbd32e27d1941e10f b6116f28e05f203129906c0cd5e035937289ffa6 dabd0fedb1bf6ba3e9ffb81ec8aba6231ea3caf3512ebb00abb7f2a7bfdeecb7 3.60.2 Windows EXE x86 1a95407ea9360e38b0df5f14cee6444a 1ae8e393c4739df73dfe1fc9a08efa43317843d7 3ccbf7b311cfa265e4e534c513bed7c82e3d1896477c692399b949aa1d264359 x64 9ebcd907aa8dddb07daf732a17f2110d e33279589178a57864771a728947f3d05242e1cf 88f1dc7be0416c76303f497ac4b952860f656bda0919f315486ba69d43effc3e Retpoline Driver x64 276599348602df66860511fc10841dd0 5ea79081cae37a79fab2c8f7695c27e5b5488ef9 39f852d688e3394a78696a44e068b35b53d60af1c193e8fb476330fa31a78dab Windows Driver x86 cc98d702926ef13da922c5cade1f1910 11ea5e7fd3bfdb8ecc94f94e7ab2158fb4330617 0267cf97121d0952a1b22324435d658a0059dbda51196ccd6ad331bb9de84f4f x64 cc8ece932ce0b995d44962e4fe0dfef7 2753057cbcdb6916f8a45573b98a7d4e61cc59a6 15861e209c1af7b8ef6cffcfcb8b2d4af92343904ffa5bd44559f790bc9708b0 3.60.1 Windows EXE x86 eae918fe204797020d40a4d867095d86 33309602f7bf92f5592cd5f77e39030acb503c2a 7380966ecb2fc7a1897ad494a3b25a709ae6e298e7408749e82ac1adfd5b0638 x64 2a62ff87854f4873f052c10baf438330 9a758cc7cbcf5cff8ecd0f2c8ae24d189a21b8f3 6626c12354a84fa863dec01a07c159f1c902bfbd6e9144492f2fad598e8859fa Retpoline Driver x64 0562b9b99d45ebe70742d1029fa299f7 83b7353e93ab0c895b1fe06e697c6cbea018549e 5892a497689373ee8b145c0031a1a1d511b53a2254ca1c3e1015f4683391af2c Windows Driver x86 f5667e05f78f69363d2a0ba6b598bdca 5648d9b091be1aae9dd0891ed022b8e75e57e93e 4e1ec6d5f6deafb079e8e8fafb455b4e73eafc04af6b7941b9b0f8a5f4307641 x64 371cd15e7e1ccd377d6830e5be6fc611 7e546e87f5df402b09f88ba1802b0ac790e93002 99f271e98d72d06e025f5bcac7a566ada5e38b1a78282e90c96e4fa2dd1eef31 3.58.5 Windows EXE x86 816a093a299bfa5b1a313bfddb5b5cdf 8e015ff5a7acdd59d7a9948006e919725d8463c5 d8489e8b6c8e29d1088940f3340e0ba4b6e2fe5008d0409f31291db1c5a4c4ed x64 040227f4b4e19c757145923a599b9a24 2fb4df3fd11b4460a9ab3789c1c93aa835afefa6 c8413eb046ffe393665ed3200030392afceaf9e777ebb00be8bd49fed4c11b8d Retpoline Driver x64 6fb1b7e233cefafc8a8d4a170f9fde46 08f90daf9521fc1a6a88d753ddd9fb2594bcc6b5 b95bc8212ab485a882d4b07726baa109440266d7b3f33780fd97311a702aa0a3 Windows Driver x86 a3cd5703f52eb0be00ccad804bf5e101 f7a844292fae54209c175bedf8920576cf2c4500 aa2883f91968f985a45d021b750fd9803ac81c92ebf3fd16b9847b8d8c5bec00 x64 5d9e99cdd506852a89714d402b9dba03 df4fb291cb95cd16c2e7c3a272a73b5e87b41716 8827c96303853c885c58a873c974d9e4e8fca99c7363f3d5b74301b04635de03 3.57.5 Windows EXE x86 af6a2d3d445bf0551ca9889812717f1b d3dd5338e5b3406edfdbed6902b049161afbbb8f 7f4a667b9bee7ea6e6bf51122acdcc4e771c2177b6ff1624a307c6a4557ff737 x64 396748615239a302a7316ec3e9fb9835 d64b1bd2c26ed2ad942bc7359864333c18e38fcf f3136c326f8909dcec9afd9bcc3f7341f8926f72fdbe2f66af7ac2ac4db6d96f Retpoline Driver x64 c112eadca55a434560c5b65927a5edfa a9c1a8003d8f98a9053e916698d9e49ee96b5f68 6e0664437aa8fdd03ecd2f5a0c4b8348d46cbf5130c115acdf349fcc5bb584a5 Windows Driver x86 d1ff8f1c246b04e7546bddf6b3905ca9 1cd04b4485f3cad9c371c5ba65bee250128944a0 1b32895412a735958ea182a1c506740b442401b77eb449305fe5aef57ea89842 x64 6a72e3cbdff0d5327c8e1e13cef12170 ff708987dd7c1d7ff51e38e354cc1e6cbc32a0c4 57e8db50d2359b59e827bba5df3f94d70697cc46ba27c00510ee521add4cdf16 3.57.3 Windows EXE x86 624a573dd7ad6a8f9e37e370e5ac2171 71ef65213b0790ce82a906415b63a1af50539383 392c74ebe145d69d2b328ef80ed8d648c831234c5944a244a91ddcb20ab1d316 x64 f9a4d63f3a593934bef92862c3ddfe45 21d3236349bf437f7a07d9f2a1d6915607830d82 1526e4bb41f8f9738d767c03cdbcb9035df099db025cc99f0e9a1e692aa08c16 Retpoline Driver x64 c112eadca55a434560c5b65927a5edfa a9c1a8003d8f98a9053e916698d9e49ee96b5f68 6e0664437aa8fdd03ecd2f5a0c4b8348d46cbf5130c115acdf349fcc5bb584a5 Windows Driver x86 d1ff8f1c246b04e7546bddf6b3905ca9 1cd04b4485f3cad9c371c5ba65bee250128944a0 1b32895412a735958ea182a1c506740b442401b77eb449305fe5aef57ea89842 x64 6a72e3cbdff0d5327c8e1e13cef12170 ff708987dd7c1d7ff51e38e354cc1e6cbc32a0c4 57e8db50d2359b59e827bba5df3f94d70697cc46ba27c00510ee521add4cdf16