Analysis Overview
SHA256
bb25d8e75f97ec0040a30361fade5f5fb17cb282502928f5e4344b7193490974
Threat Level: Likely malicious
The file N360-ESD-22.20.5.39-EN.exe was found to be: Likely malicious.
Malicious Activity Summary
Drops file in Drivers directory
Adds Run key to start application
Installs/modifies Browser Helper Object
Enumerates connected drives
Drops desktop.ini file(s)
Checks computer location settings
Drops file in System32 directory
Executes dropped EXE
Drops file in Program Files directory
Loads dropped DLL
Registers COM server for autorun
Checks installed software on the system
Enumerates physical storage devices
Suspicious use of FindShellTrayWindow
Suspicious use of SetWindowsHookEx
Suspicious use of SendNotifyMessage
Suspicious behavior: EnumeratesProcesses
Modifies Internet Explorer settings
Modifies registry class
Modifies system certificate store
Suspicious use of AdjustPrivilegeToken
Uses Task Scheduler COM API
Suspicious use of WriteProcessMemory
Suspicious behavior: LoadsDriver
Modifies data under HKEY_USERS
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-03-23 07:27
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-03-23 07:27
Reported
2024-03-23 07:30
Platform
win10v2004-20231215-es
Max time kernel
124s
Max time network
129s
Command Line
Signatures
Drops file in Drivers directory
| Description | Indicator | Process | Target |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\SymNet64.inf | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\SymELAM.sys | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\ccSetx64.inf | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\iron.inf | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\srtsp64.inf | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\iron.cat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\symnet64.cat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\srtsp64.cat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\symELAM.inf | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\wpCtrlDrv.inf | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\system32\Drivers\SYMEVENT64x86.INF | C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\ccSetx64.cat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\srtspx64.inf | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\srtspx64.sys | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\system32\Drivers\SYMEVENT64x86.CAT | C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\srtspx64.cat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\SymVTcer.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\SymEFASI64.sys | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\isolate.ini | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\SymEFASI64.cat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\ccSetx64.sys | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\IRONx64.sys | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\system32\Drivers\SYMEVENT64x86.SYS | C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\wpCtrlDrv.cat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\srtsp64.sys | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\symefasi64.inf | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\SymELAM64.cat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\symnets.sys | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Windows\System32\drivers\NGCx64\1614050.027\wpCtrlDrv.sys | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Adds Run key to start application
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\NGC = "\"C:\\PROGRA~2\\NORTON~1\\{0C55C~1\\NGC\\562C4DD5\\22205~1.39\\InstStub.exe\" /RELAUNCH /RUNONCE /NOPROMPT /PRODID NGC" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\NGC | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\NGC = "\"C:\\PROGRA~2\\NORTON~1\\{0C55C~1\\NGC\\562C4DD5\\22205~1.39\\InstStub.exe\" /RELAUNCH /RUNONCE /PRODID NGC" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\NGC\MEDIA = "C:\\Users\\Admin\\AppData\\Local\\Temp\\N360-ESD-22.20.5.39-EN.exe" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key deleted | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\NGC | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Drops desktop.ini file(s)
| Description | Indicator | Process | Target |
| File opened for modification | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security\desktop.ini | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Users\Public\Desktop\desktop.ini | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Enumerates connected drives
| Description | Indicator | Process | Target |
| File opened (read-only) | \??\F: | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Installs/modifies Browser Helper Object
| Description | Indicator | Process | Target |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\NoExplorer = "1" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\ = "Norton Password Manager" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\NoExplorer = "1" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\ = "Norton Password Manager" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Checks computer location settings
| Description | Indicator | Process | Target |
| Key value queried | \REGISTRY\USER\S-1-5-21-1497073144-2389943819-3385106915-1000\Control Panel\International\Geo\Nation | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Drops file in System32 directory
| Description | Indicator | Process | Target |
| File opened for modification | C:\Windows\System32\CatRoot2\dberr.txt | C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe | N/A |
| File opened for modification | C:\Windows\System32\CatRoot2\dberr.txt | C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe | N/A |
Checks installed software on the system
Drops file in Program Files directory
| Description | Indicator | Process | Target |
| File created | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\cp3_x86_win32_af.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\ERASER.grd | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\IPSDefs\20200717.500\scrx64ff.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\SymNetDrv\CONFIG_ORG.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\STICDefs\20190827.078\scd.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\MUI\22.20.5.39\images\diFVal.dll | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\FLDgHost.exe | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\tcdefs.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\Engine\22.20.5.39\{2A85E335-7417-424d-AD89-31DED1689794}.dat.bak | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\started.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\SPManifests\srt.spm | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\ccScanW.dll | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\virscan1.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\BASHDefs\20200717.004\BPEMeta.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\fr.pak.info | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\sk.pak.info | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{41E7872E-BEEF-4C2E-A1BA-F5394C2D9BCD}.dat.bak | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\01\01\InsBrand.loc | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\0D\01\InsBrand.loc | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\SPManifests\MsgCntr.spm | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{6E3396BD-C6A6-4f0f-9254-267F9058FEC4}.dat.bak | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\MUI\22.20.5.39\IMAGES\icon_toast_met_risk_32x32.png | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\BASHDefs\20200717.004\BPERun.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\sr.pak | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\isPwd.dll | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\SymRedir.dll | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\umcat_01.db | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\NSSSHRO.loc | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\BASHDefs\20200717.004\CATALOG.DAT | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\08\01\InsMUI.loc | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\SPManifests\ironx64.grd | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSPP.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\buShell.dll | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\tinfl.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\hlinks | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{B4B9C8CB-ED87-45E9-BB9E-1DE6E30F1077}.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\MUI\langver.map | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\typerdefs.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\ja.pak.info | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\esrdef.bin | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\Engine\22.20.5.39\ccGEvt\Global\LM.dat.bak | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\Engine\22.20.5.39\{40ED6507-1D53-468B-A585-732E631DAAC6}.dat.bak | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\BASHDefs\20200717.004\bhscdp.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\STICDefs\hlinks | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{1634767C-BEEF-49C4-AA20-F35FFDBB25B8}.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\AV.loc | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\esrdef.bin | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\el.pak.info | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\sv.pak | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\IPSDefs\20200717.500\CATALOG.DAT | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\IPSDefs\20200717.500\vulnxsd.z | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\ccJobMgr.dll | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\eeCtrl64.sys | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\PatchUI.loc | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\SPManifests\Scandium.sig | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\SPManifests\srt.grd | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\fwMCPlug.dll | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\en-GB.pak | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Branding\fallback.dat | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File opened for modification | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\16\02 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\ca.pak.info | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\DuLuCbk.dll | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\he.pak | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| File created | C:\Program Files\Norton Security\Engine\22.20.5.39\ccSvc.dll | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Executes dropped EXE
Loads dropped DLL
Registers COM server for autorun
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{09D32393-10DA-4eca-91AA-AD11C69DB966}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{09D32393-10DA-4eca-91AA-AD11C69DB966}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0579E89F-E364-4a3d-A9CB-90262B2B7E1C}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\MsouPlug.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\coIEPlg.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\InprocServer32\ = "\"C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\NavShExt.dll\"" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B59987EA-25FE-44B4-8802-E4DE67073D8C}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0579E89F-E364-4a3d-A9CB-90262B2B7E1C}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B59987EA-25FE-44B4-8802-E4DE67073D8C}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\uiWNSNotificationApp.exe" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0579E89F-E364-4a3d-A9CB-90262B2B7E1C}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F13C7C55-93E5-48ca-A5E5-E6564089CAB0}\LocalServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F13C7C55-93E5-48ca-A5E5-E6564089CAB0}\LocalServer32\ThreadingModel = "Free" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\symamsi.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F13C7C55-93E5-48ca-A5E5-E6564089CAB0}\LocalServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\SymDgnHc.exe" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\Software\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\coIEPlg.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B59987EA-25FE-44B4-8802-E4DE67073D8C}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32\ThreadingModel = "Both" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{09D32393-10DA-4eca-91AA-AD11C69DB966}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\McStatus.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Enumerates physical storage devices
Modifies Internet Explorer settings
| Description | Indicator | Process | Target |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Toolbar | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0C55C096-0F1D-4F28-AAA2-85EF591126E7} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Policy = "3" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\AppPath = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0579E89F-E364-4a3d-A9CB-90262B2B7E1C}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B59987EA-25FE-44B4-8802-E4DE67073D8C}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} = "Norton Toolbar" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{4433A54A-1AC8-432F-90FC-85F045CF383C}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0579E89F-E364-4a3d-A9CB-90262B2B7E1C} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{476D0EA3-80F9-48B5-B70B-05E677C9C148} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2272AE7A-0C30-48E1-91DF-F9E666276C0C} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{476D0EA3-80F9-48B5-B70B-05E677C9C148} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Toolbar\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} = "Norton Toolbar" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{4433A54A-1AC8-432F-90FC-85F045CF383C} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{4433A54A-1AC8-432F-90FC-85F045CF383C}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{2272AE7A-0C30-48E1-91DF-F9E666276C0C} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\AppName = "symerr.exe" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{4433A54A-1AC8-432F-90FC-85F045CF383C} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\Compatibility Flags = "1024" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B59987EA-25FE-44B4-8802-E4DE67073D8C} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Modifies data under HKEY_USERS
| Description | Indicator | Process | Target |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271" | C:\Windows\system32\LogonUI.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808" | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040" | C:\Windows\system32\LogonUI.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10" | C:\Windows\system32\LogonUI.exe | N/A |
| Key created | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0" | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271" | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89" | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1" | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "162" | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (data) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00 | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040" | C:\Windows\system32\LogonUI.exe | N/A |
| Set value (int) | \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1" | C:\Windows\system32\LogonUI.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AA091DCE-F3CA-4ECC-A18D-B1F1871A4690}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DEE5EE11-10B4-4531-B306-1C3546BD5F42}\ProxyStubClsid | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C2EF276A-4D20-44E9-B9D2-29F129EB826B}\1.0\FLAGS | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\ccSvcHst.exe\AppID = "{F08D7223-7183-414e-BBA2-E2327EEBBB24}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F08D7223-7183-414e-BBA2-E2327EEBBB24}\AppID = "{F08D7223-7183-414e-BBA2-E2327EEBBB24}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\BackupShell.OverlayPending\CLSID | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C884BB9C-39DE-43A1-8480-B7E2FC5C77C6}\ProxyStubClsid | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\ = "Norton Password Manager" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{37651A5F-5423-4134-9FCF-C279ABC26E82}\1.0\0 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3A5C2370-FF1E-4C2B-9796-E2FA2FF1D605}\ = "IOverlayExcluded" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7102C629-439D-4CE9-A2FA-911713E8E8C2} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\VersionIndependentProgID\ = "MsouPlug.OutlookPlug" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\BackupShell.OverlayPending\CurVer\ = "BackupShell.OverlayPending.1" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\BackupShell.OverlayProtected\CLSID | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\Programmable\data = "1" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\VersionIndependentProgID | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\VersionIndependentProgID\ = "BackupShell.OverlayPending" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DEE5EE11-10B4-4531-B306-1C3546BD5F42}\TypeLib | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C2EF276A-4D20-44E9-B9D2-29F129EB826B}\1.0\0\ = "BackupShell 1.0 Type Library" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\ = "SymAmsiProvider" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F13C7C55-93E5-48ca-A5E5-E6564089CAB0}\LocalServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\SymDgnHc.exe" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DD5F89EE-9C85-4D42-B366-919387500641}\1.0\HELPDIR\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\File\ShellEx | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\BUContextMenu\ = "{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8F6A750A-637E-43FE-8E8C-CD8CC52AFCF0}\ = "IOverlayProtected" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AFB13A90-F68F-4313-8BA2-6A68E0BF304D}\TypeLib\ = "{C2EF276A-4D20-44E9-B9D2-29F129EB826B}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\TypeLib | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\Programmable\data = "1" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{43DCE0DD-22BA-4CE1-A467-94CDD1FBE80C}\ = "IBackupSetsShellFolderImpl" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\ = "OverlayProtected Class" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7102C629-439D-4CE9-A2FA-911713E8E8C2}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F0E3A5D7-80C7-4228-90FE-61DF01C417A5} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\coIEPlg.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\ = "OutlookPlug Class" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\NortonSecurity.exe | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\BackupShell.BUContextMenu | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C884BB9C-39DE-43A1-8480-B7E2FC5C77C6}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C2EF276A-4D20-44E9-B9D2-29F129EB826B}\1.0\0\win32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A9CC9305-0A30-4015-92A0-0711EE24E720}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\InprocServer32 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32\ThreadingModel = "Both" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AFB13A90-F68F-4313-8BA2-6A68E0BF304D} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\ = "IEContextMenu Class" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\BackupShell.OverlayPending.1 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\TypeLib\ = "{C2EF276A-4D20-44E9-B9D2-29F129EB826B}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B69B6ACA-155C-41D0-BC90-4857239731A4}\ProxyStubClsid | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\InprocServer32\ThreadingModel = "Apartment" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu\CLSID\ = "{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B59987EA-25FE-44B4-8802-E4DE67073D8C}\ProgID | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3A5C2370-FF1E-4C2B-9796-E2FA2FF1D605}\TypeLib | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A9CC9305-0A30-4015-92A0-0711EE24E720}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (int) | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\Programmable\data = "1" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\ProgID\ = "BackupShell.OverlayPending.1" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A5C2370-FF1E-4C2B-9796-E2FA2FF1D605}\ProxyStubClsid | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C2EF276A-4D20-44E9-B9D2-29F129EB826B}\1.0\0\win64\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\Programmable | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AFB13A90-F68F-4313-8BA2-6A68E0BF304D}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (str) | \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C884BB9C-39DE-43A1-8480-B7E2FC5C77C6}\ = "IBUContextMenu" | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Modifies system certificate store
| Description | Indicator | Process | Target |
| Set value (data) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (data) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob = 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 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (data) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob = 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 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Key created | \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| Set value (data) | \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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 | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe | N/A |
| N/A | N/A | C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe | N/A |
| N/A | N/A | C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe | N/A |
| N/A | N/A | C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| N/A | N/A | C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe | N/A |
| N/A | N/A | C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe | N/A |
| N/A | N/A | C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe | N/A |
| N/A | N/A | C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe | N/A |
Suspicious behavior: LoadsDriver
| Description | Indicator | Process | Target |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
| N/A | N/A | N/A | N/A |
Suspicious use of AdjustPrivilegeToken
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of SetWindowsHookEx
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| N/A | N/A | C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe | N/A |
| N/A | N/A | C:\Windows\system32\LogonUI.exe | N/A |
Suspicious use of WriteProcessMemory
Uses Task Scheduler COM API
Processes
C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe
"C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe"
C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe" /install
C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe" /install
C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe" /legacydelsysvolinfo
C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe" /d
C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe" "C:\Windows\System32\drivers\NGCx64\1614050.027" /install /installcertinfo
C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe" /Q /HRESULT /CheckForOlderVersion /log IS
C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe" /install
C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe" /uninstalltasksandlegacy
C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe
"C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe" /install
C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe
"C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe" /install
C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe" /install
C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe" /install
C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe" /legacydelsysvolinfo
C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe" /d
C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe" "C:\Windows\System32\drivers\NGCx64\1614050.027" /install /installcertinfo
C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe" /Q /HRESULT /CheckForOlderVersion /log IS
C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe" /install
C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe
"C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe" /uninstalltasksandlegacy
C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe
"C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe" /install
C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe
"C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe" /install
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe
"C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe" /TRAYONLY
C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa394d055 /state1:0x41c64e6d
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | 178.223.142.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 73.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 180.178.17.96.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.106.137.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 28.118.140.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | stats.norton.com | udp |
| US | 13.64.142.149:443 | stats.norton.com | tcp |
| US | 8.8.8.8:53 | 149.142.64.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 86.23.85.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 56.126.166.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 217.135.221.88.in-addr.arpa | udp |
| US | 8.8.8.8:53 | liveupdate.symantecliveupdate.com | udp |
| US | 152.195.132.156:80 | liveupdate.symantecliveupdate.com | tcp |
| US | 8.8.8.8:53 | 156.132.195.152.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 22.236.111.52.in-addr.arpa | udp |
| GB | 96.16.110.41:443 | tcp | |
| SE | 192.229.221.95:80 | tcp | |
| US | 8.8.8.8:53 | udp |
Files
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstUI.dll
| MD5 | c2eb5937788597919ff001178ed70d15 |
| SHA1 | dc8a42208be65af9c12ac28afeae7e63d2e416c7 |
| SHA256 | fcb95ec569bce629f9b67aca75fff39c224dd056d3b72d3678710fd43eb13508 |
| SHA512 | d181586780272ba5d1f243153727f6dd6afdc3625f0c0e07fe87815a53d8051dc4d92f7fc4de97515046d748edcd7fc7d17d9103b25ebb8e3e891b9d184f70f9 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\symhtml.dll
| MD5 | 3c80e8719aea08852f6d29a14ac5591c |
| SHA1 | 1b0e38cb7662c3ec6e9b879e8333524cb8cc51bd |
| SHA256 | 112449bf87741b4eb5fa1e492906118cffb2a20d326809baaf4f6ab604efbe84 |
| SHA512 | fb252e51706aeffc317c038bcccfc2e874dfd7b544e451d85ce95003db18167bfd604c0be66e5938baa96f6cd6a64aff053f6685e8362199cb9e0d45d4c666f8 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\MSVCP140.dll
| MD5 | f027303816d6d2afeab12183c67b1348 |
| SHA1 | 735e1625b17e4122608eb3aff3702b97e08f1e51 |
| SHA256 | 75ddc9778c23ee95b6c57db6b689f11c07d164d5a4c158d4c0acb87a520b8004 |
| SHA512 | f55f6df42f266cc5f5f23690a5942068248d50d1c302708bf34d1f9d8831c7bfa174489de029dada30707df4544275b14fbb3dda09a0a022eb343e2618401797 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Engine.dll
| MD5 | dd8ed7911509264054b8b4693ab91087 |
| SHA1 | 2f77b4b5b1a77b84b1cd1936125a97eff7a02074 |
| SHA256 | f8054aa614e445578b653c94bb293c5a4f9d513b37c791fd32f99f23c6dfb9eb |
| SHA512 | f9ce9cf77b8d1754f20abf2a5e9b5702fd52ffdf3ecfe8f6dc94749f23e3a9b3fc0acc95a9252042c16c7d0c4159aac6cd20f1cbff0f89a100b57227ae0a50e2 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\VCRUNTIME140.dll
| MD5 | ac139e08070885a2f021e30fab609eee |
| SHA1 | 3d3c2877cf3c4aa1a1f62708494375404d02cf22 |
| SHA256 | eea2df0c3d2bf84ee8bc811439a81578f6521c8b28b6cc815c93fb870ac7a0d7 |
| SHA512 | 072dc8a2297eea0778f72f70ab5c8dc0400cecbe399115a4cee0cb7381d494565019d756f602d80077c22ab635b324ec10c644bf3c219a68d9c75840a8b5309f |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\ccLib.dll
| MD5 | 4b51172b4622703552747d8d78096272 |
| SHA1 | 4d48a3dbbd1c0c47d6f6aa8ee9d6de2a9c65bae5 |
| SHA256 | 08593e2462f10224c4db7bc70e4a60cd3b2446b2878ba449c4f466a0fa51f98b |
| SHA512 | 9cf5dbab76f9839b33e9f731c719e8d41a2d67a763e99648bcfb4fc1129f5caca0c1dc8f8e90fdcd90802d71bf79e8f2c253bd3820d612ca48937a6c23eda414 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\ProdCbk.dll
| MD5 | 0f73605955c10f2167a01265a98dde77 |
| SHA1 | 5758fdf18e189185e31dd7005d2d60b9c4cff557 |
| SHA256 | 904c3c8ef7362c760865a169950c39cc1e910afaf2e348d0f83eeb70dcd182d5 |
| SHA512 | 0d9663f60df58356e236b4a517daddb1a9ef0678e7f082065b40deb1758cf9d1f72dea036b020b154eec3ec602410c8bdcc72a84bd45464a45ec141dc4f915ee |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\cltLMS.dll
| MD5 | 9a8ec110e4855f076e5b9f5698101a82 |
| SHA1 | 43afebdb6c63414d3c3add9e63969e9bbf144698 |
| SHA256 | 8cb72b7d60cac72fd640b06d1ee0b6cab986cfab5fd5af8d6884f0314c7a0f48 |
| SHA512 | 767d48dc099e27db26c7aa1496da884b05ea2a9ea80fb2f14874aba01fd980fe482d5d224a18e92d977545c2235077459ea360b3225bc516f3008aec904355c7 |
C:\ProgramData\Norton\{086A63F0-6B13-4F29-9695-134E7A01E963}\LC.INI
| MD5 | 22aa8eaa0c0d5d38877ac3336079c73e |
| SHA1 | a909e0a6d90f312234eeb7c161838fc8894d7aa6 |
| SHA256 | 201a409ddadbe504ee62adc9b090e4d9b5bd8ea12a1d5c66d59a5fa64bd415f4 |
| SHA512 | f414605359c68c1a8dfa0ddc6d79d669b24df1ae6b6d499c7343744d037bfe029fb1129b0f04b3e54ee3a82e1cd099cc41f64f23832dec2b68da2d552763de03 |
C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\ca.pak.info
| MD5 | 4d5daa9b46c3d63f4a108cd35f8685ac |
| SHA1 | c8d98e103260a6d23ed4cbe6abc09ea6bef5de08 |
| SHA256 | a91ac41af3ba9a3ba9b80c90f57ae92daad8c8c4b4a323d84828be02f8fab79e |
| SHA512 | e5859c11eaa9bf046cdd8dc592faea6f75706c01f20dd6eb1987643d1e1aef29bba2be3a4608e392121ab08931e8dc232a75ca0c572c73a6278c07e4f3b007f4 |
C:\Program Files\Norton Security\Branding\22.20.5.39\11\01\muis.dll
| MD5 | 247e0bbc807d414bcecbabd0cf708c55 |
| SHA1 | 0fc548efdd91d976978ebd4545dc0c6902e6f953 |
| SHA256 | a0c534b1c2702f59b9165422bee71436d2b5d5f626306c6cca4bbf6ae38971c8 |
| SHA512 | b02e675b3f9117009c5682348d37a0fe902cdb6c83a7db56ad69cde0b22e8fcb9c8d2cff57ebd2525632ae9fa6abca07878c7ea26a89a7dc0b9c88f5d7c9ac71 |
C:\Program Files\Norton Security\Branding\22.20.5.39\09\01\EULA_NA.htm
| MD5 | b26115d190ae3ba63dae542bc2fe80a7 |
| SHA1 | dcd5022193a3dd484e5d1709aa81cfa71a445ebd |
| SHA256 | c01650e6e413f497b9277ff62a0df0cf22234b39829627fa38495d36894ac07c |
| SHA512 | f7b4dfe988031d73afd7d0d8b80cb842c5439b1dd06b259420c6610305c7f453e4f9e01cb4b328428b8e9a3f6255244a6db20f291f21fc08fb70a1feb2b4d384 |
C:\Program Files\Norton Security\Engine\22.20.5.39\concrt140.dll
| MD5 | 3822db6c664f09c649b117353dcaa471 |
| SHA1 | 0627b26601f4b1e524abf54b0583f5afaa26e34e |
| SHA256 | 10d165d877646275d674d3ca83299e3687ca090c6e05713cbeb85b195ecec6b2 |
| SHA512 | a7dd02c135902da291c12885e104b72ca5189dbee5aa461e760107d0a4bac3dbb01d09d009017e5762300e1f38cc5798365fb23c82fd76f0e721462bb1448465 |
C:\Program Files\Norton Security\Engine\22.20.5.39\avScnTsk.dll
| MD5 | 5074c768e22eb1dcccc60f6713acd993 |
| SHA1 | bc87ae3bd4e9bad85fda644f8334ca1f75f36b7f |
| SHA256 | 12eb54933cc78aaa2c9ba6f57760b42a5ebc37436b037e3873a714c3557ffae6 |
| SHA512 | 7309bf3ca9a07811507c720e384acc9a5325283a326ed5da526e66e08a92424fa70af5212ca9863bdbae6f32a1b0f6c837d5c202d3ac13269af1e2945f1ac1d6 |
C:\Program Files\Norton Security\Engine\22.20.5.39\msvcp140_2.dll
| MD5 | d33d9ec1486e319526f893fd9b1d9c12 |
| SHA1 | a9171bb893665f0591b274fe23b32f583e9e395c |
| SHA256 | 7c629aa475626a26d4f38832a513cef3bcb539fb5195ffd06682f31ec3a125a5 |
| SHA512 | 672112d2df18fa0442c11a16e802871e7e383e590475a315ee55c5c10a4f4a15ed41a7338c25fd0b0ba2649fb44da9e656d25de4bc49e2a4f69b1d5d7f92a94b |
C:\Program Files\Norton Security\Engine\22.20.5.39\msvcp140_1.dll
| MD5 | c51c76efb18cdf34361f306de9734d87 |
| SHA1 | b5fd3fc81a7c00069aac33cae9973e93bed9b01f |
| SHA256 | 299c5bb4be1712f9e0f98a1e3f5492c606251522f5dd0b23acd0ec685e249849 |
| SHA512 | 7f9dcd9a914f535ed798195ff5d5717768ab028c79f4240c49c6f2cb6de7d7a2e0036849d73b4ce26b01224e5297d3e30e15fc9510d2a17b70da8dc3f1ccb356 |
C:\Program Files\Norton Security\Engine\22.20.5.39\msvcp140.dll
| MD5 | bcf85f55392240e2110b0608d0cef70a |
| SHA1 | d8067ad8a9046eb34579b09d94cbfc4af13c1dfb |
| SHA256 | 85a415f7aa8a1e7d10e05e713c91a3aec9bf3f4c821eba10df2d20b1a02e3882 |
| SHA512 | f7491c089e0fe92515b6bdc4f0de0e9438bfa5ebbebaeba59ad5f214f95e5a853af53a53bd4b4b8e1ff2402599402f380feee7746fea83404e22c0de096a8b92 |
C:\Program Files\Norton Security\MUI\maplngid.dat
| MD5 | 1bae54144096ebc8a4cb82b8b9b7b877 |
| SHA1 | 31e15db1fbe84d95899f9a3d4284fa4d34e96dc4 |
| SHA256 | 92893de1ab436b34d6152f845a22cb8034b06b63359098962f551580aea6537a |
| SHA512 | cdd41f95df510e02fc35e931edae758973535b9d8f8fc225ea3a8d394c506a0a2c6e143198993869f07fbb2ea00212dc9ed2e06cbe76e90b541632d243e94de8 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Engine.dll
| MD5 | e1368f63414741e66387e257fe968d12 |
| SHA1 | 18c0fb232551f1983a628033dfe3b012080be6f7 |
| SHA256 | 8a91d0266527d229e824a6ac84d428cf157b8b58d045c55e2574171c1fd17820 |
| SHA512 | ab4b0e0dc59fc9011eb9d31bfaa775ea9ad26bf80edce90d60b589f1f64777bbe732ea862f4ddac383b666cbf3ae983398705cee217a169d2e6c1c840ce7e77b |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\AntiSpam\BmiCfg.dat
| MD5 | c384f0e3984866745d963533e6dc2435 |
| SHA1 | 238f945e7bfe442160e9941905be4ce9726c0414 |
| SHA256 | 95aaf759815cfc19ad7658ef9a4fc52b73bea21b9e1b59fa62e027b16fb4bce5 |
| SHA512 | e0e709dcf26f08a026b25ae5fad4f35730c0fe70bbe4bd1351bcf4126c3414f3f70dfd0e95317eecb5e1eeb5c30061b75678dd1e1826b0c3ea5c45b0b4d10ab9 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\User.dat
| MD5 | 813dc9e743b5423d4b0a8da14122ca27 |
| SHA1 | 4d4027f60d95b389d2640542048ef501d9592eb9 |
| SHA256 | 27920049fb43fa8c8713ebd0647eccdedcb929217ad84ca3bf7d266ea9b59398 |
| SHA512 | dd9d386cef8eda1d5662a672a6d8548d5303b62cb04521dcbdc4f92235a6c2557786561a076f9e8718dafb4e95bec6bb8c6da550da4a68b499698d65cbb86ead |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\SymWidgets\OEM1.dat
| MD5 | c30974f90916c0ae2f669bff2a7843f8 |
| SHA1 | c576ea28ae4c5515eb68f08734afabd9729ca19f |
| SHA256 | 4b489242e7f713d1946801f691c3dba4e16f2006ca7e0fb1327b64c6733b3fe3 |
| SHA512 | cb275e878f85a40952f81a39720c7350ebdfef867031d4755c500a69fa9557b894ef3a270b6d366386bc0f5e07e51ab770580b2619ad32a73b6b825e3439e50e |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\SymWidgets\Layout1.dat
| MD5 | c722afd1c50880277081267711f79f7b |
| SHA1 | c139930d010f13372262d3805ec0decbd51e47e8 |
| SHA256 | 34944f9c65ad367f1f2fd4515934df6847814c6816acca5dce3ff3c740dac799 |
| SHA512 | 2880f1022419487c094b5f4d3a2801e237e91c583e1f7002285e100161aa9feba15c5dbd7852722869fbdd391cb089a79fafc1e2bd40622d058e2d28ae4d77d0 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\SymWidgets\Default1.dat
| MD5 | e004d49e389010ed5603b4b1ca5f7c6c |
| SHA1 | bd9f22d225ef64ec4c46c3effa91edbaf1fa3f10 |
| SHA256 | 4f6aa648266b4957705ded827b6164a7dcbcae68f9528b2de4ec369e74c758d5 |
| SHA512 | 73e7af927d3a39a675f2992dfaaeef613c9b4d2648cf527d1051c3cc82a7e477432c3e821ca88b2006cd966b3ad90c12890a11bf38a7be611d076a7bcf3e65b8 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\STAMPENode.dat
| MD5 | 543c5fb6be398beefc6fecabc96b369e |
| SHA1 | d43a0c5eb6f081bbdf3ac39ff0c4491c22000824 |
| SHA256 | 7cf771984635dac3a1cbf7d271ae294a5c9efe96c7d954fc22be5242e614a089 |
| SHA512 | b595474aabe0676bc86312b95796505bfbfb82822bb3ccc5fe62bc6eea09db1a1a8446102b07aeeab9a1d5c45b051583e3f495cafc7e48bbf211ea0db56dca1f |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\STAMPDNode.dat
| MD5 | 46c578ae5ea168c847b8e056671587dd |
| SHA1 | 603317f6beb4e2f0ac0dae7ffe85e83ade2069bb |
| SHA256 | 88f8f77cf4fad3c79628b756976693e903c08db07315b0e01fce8dee15657cf5 |
| SHA512 | cf2de20d0459bee8699c93628feb0acb3b92712ddc15916028a81e2a1835bf8be23f0c3725057c25738e3c69b0ab930a6cc8faf9d43bc6aaed1ea6bafafba9e5 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\set-priv.dat
| MD5 | 105a3d63c580d2ad7759b70659cfe951 |
| SHA1 | b25605f273c40314c4b5ce7b2fa1d39d7ffb2d30 |
| SHA256 | 4c084b0a99963f7c4059233111edfed7aafad918fbcedc61f4a51d7f0624fa6e |
| SHA512 | a21bfd8de2f0d508c1ea3e012c56212634d78b35d188fc4500ee8649ab55d30c6f52d16878502a5508b4a9026eaea14422552fa3e8932b9689158985c80d8f50 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\plcyimpt.dat
| MD5 | 07764533e0166e0735394f2a1254f40e |
| SHA1 | def42457f1dcbbdf002448c3dab8af5c11d8347d |
| SHA256 | 29f0dde742f51a359d43cf2c82202accc16cedcddd82a02365ac17e80284ebc2 |
| SHA512 | ad65fab7c9602b5107ed2a0707273ecfdcc9181accc4cb62b3b1c1e22037cf0bddc4415ba1eae1860344add88993a16be02793120d41d7325e6599eedc6aa786 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\OEM.dat
| MD5 | b2d723a1c5a99e48815492f2827e2030 |
| SHA1 | 65e594c855f6530b549e5dfe39f62df8cf45c67d |
| SHA256 | 7f6c3d2f0df3ae856194e1de2469344d1893212fb7271383b2138fa94e3e4b62 |
| SHA512 | 3ae7258b022957f74c8d56a79359afb20dad7e647ced6e22c321f51139724ab44759a1175802e42332601b7b97bc71f2acb6cbeee81a71b44df64070e587cefc |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\LCset.dat
| MD5 | a5d9274e92e1cfd04ae8cf5920cbf84d |
| SHA1 | fb41c6be88503002dc424a77edd03e199970a114 |
| SHA256 | 582eaf8172867c5d7acb23d97e0ed9208979fef9814f2a1aaddbc38ef6f7fa89 |
| SHA512 | 99c37fc96c3e0bac47b56a572a1dadbbc5563e8f22cd2099f262a31f9ab8bb8b1681c9e9b271a99fda2b7081c0777afafc12950d17d1434d4a1ebac168dae3e8 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\Layout.dat
| MD5 | 5a834dd45eb1afc81810a48fbaf825f4 |
| SHA1 | 5129b2b795010e1fdb303a894f1307d08e7926b7 |
| SHA256 | 96a88160498fa2b3f0f6cbb0697dd522ed0f7b01945088e30aa9cd1c6f44e115 |
| SHA512 | a77a67e0b11c05fd5a3592d9d26e482c05886fe81a35dac5b5df8f1fa6654db8765688f5ab7f9005fb39200a16cd11047ca2b0335f796de4209a1183ae4e3103 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\Jobs\ccJobSch.dat
| MD5 | 584f7e6a9ec7b3bd6c09beb2e6ff98ea |
| SHA1 | 62dbe21f0c41422075e7f45983569cef4b6d48d7 |
| SHA256 | a94fe295d6a765fee57143176c921adbfec2e94c8888334938326c80e5cb634b |
| SHA512 | e9f5f3b75ccd5582d0e6905dca4a0a10423fb96b8f5076d9c21c212a675540783ece5141b38c2fd2e81ebefef93a54d201ba511234caf232d510654d9e29a915 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\DiagRpt.dat
| MD5 | 9796e4de6f5d3e2aa1ec22e18e4bbcc9 |
| SHA1 | 89812ee601dc64e9aea4f88b37c58b186da89f31 |
| SHA256 | c0eb76eccac272b2a316fc2122f759acbd874cb5ae9e622fb96d346a1970ef93 |
| SHA512 | 192fa742e55e96b77bad8bb7e84e5a4875e485698486fb139c2135ef855d354cc224ba8ffb3aa14a4b42ee3a48f77e6a699f0eefbb0cf57b166665f2d8bd596b |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\depend.dat
| MD5 | 0953688d3f2ae9e6eec7ebbffb0c35be |
| SHA1 | 964517953a881837692dec120b373b03cfbf68e7 |
| SHA256 | 927d186e8c1dfb01e89b07b0f366f0cb3caabe61b1ec0f53f314d2b32c01fb48 |
| SHA512 | e35603706352efcf8251bbe7eb77c0fb786feed28938e0555d4ca69f13001e75ff87e753a4bb58a16df82f2121882407b317a7309451005607e8449612e8dfc7 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\cltDynam.dat
| MD5 | d786b67ea24178bcf010ca5493ae6cfd |
| SHA1 | 5132a9d1b0c0305ef6ba8cb940d3eae902a8422c |
| SHA256 | 636de66b59bd1dd198315d24299cfc5bde4676e1f0da6a924256ae98312cd06a |
| SHA512 | 31c675d6ee37f548e3c8e1ca7442e45dc00f7e334412e485aee55d29f391e112b73ce7d0a7e53253801dad749da4df15eab7d8b971beed66347bd780b6bac61e |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\BackupSettings.dat
| MD5 | 0e13df36ef9f2ae7e2026e03d553a6e1 |
| SHA1 | 809bd0ef5d2fe75f4743b35591b5ad6bff3991ac |
| SHA256 | f71dc3666ecf040cfb526b505ac3a6348018cbd44c5b34eada090983b7984aea |
| SHA512 | d0b8846c3dda36983ef2ec115ad1e2ca5fad7f89661c5db2663fa162ddbec81eeb25ad991c34373fe2fc8762680dde0a2af053c81db493f3f5db4b45c126335c |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\Backup.dat
| MD5 | 81bc50bcc336e8182494e1955ff556e2 |
| SHA1 | 483afdca977748c1611ba3b51a3ffa9d0bcf6243 |
| SHA256 | a1c2ace0b493fddea3fab949d2a0e5fa6c89b975e9dca1d98943bab13adcef9d |
| SHA512 | ca841a15bc2ef57bcee6c275a7a7de20087863d358f32dd7119cab92c8fe02e2b2f305a4576d4a9b625c203a6f21b8d17236d1a59bddc2aadc186b7a01ce57d8 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\asDynam.dat
| MD5 | 2dd3803c1a434fbb64dd6959254969d6 |
| SHA1 | ae40f3031af61670be9e5b1aabb80ea087405fb3 |
| SHA256 | 0471998cfcbfbddd1ad5d86ea1e808ac94db45fed7acbea242a6ab5dcfe13e96 |
| SHA512 | bb545e7e9fae3e7fe01efa4b098d4b8d2b5728da482e42a3fc6c13d6c84270de5fe18daf12ca87848d60bdd4e166eeb69efe895d6c20e6e2a50d648832f1e69b |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\asBM.dat
| MD5 | 144e1507fc2572bdbd0a7a7ff4b64954 |
| SHA1 | e8a3ff7641116e161c6bb74db988772c28f68a67 |
| SHA256 | c0dc094938f65fae16ca9cb8ff4cd99e428fd0b9ea6c7a1ad46716071b84ca53 |
| SHA512 | 21d62b83e1f2590e723dd3f7f2e1dd7ec1f7824319f5fc5b0b0e09b7e2c2ddd080da4e8f61e68a8b99ebb7b726cd925166d9a5a36849c2785353cf79ff47b948 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\NCO\IDD2.dat
| MD5 | 3556472f86e0c0ad14b85c8be638566f |
| SHA1 | f08bb40bdf15816a975636570e10380c8a251b10 |
| SHA256 | 8b9d513e32a4e7e8c599b6adf348a6e7389f4f29131f04856e421eb6ccbb63f2 |
| SHA512 | 70527c263774face587251761896cb66e3a34ab975423d040dcb0390824b6aa621aef452122395e37acab53d7425cc038bc0bf533dd6785c489552260cc9f547 |
C:\Program Files\Norton Security\NortonData\22.20.5.39\http\client.dat
| MD5 | 84675b7da3756d834efc9f5b7f3ccf43 |
| SHA1 | 039f30c253fc78f66d2a244646a4dda19c91f4b7 |
| SHA256 | 98ec8ec342c5733b7570d707abcfe130bc12118dd1e2c5cdb00771282eb29c79 |
| SHA512 | bc000b285a3100be915cdd4ad237320c13d0839e92e8eaa2b4a5073f8fcfd203e30842d49aee189af764e694bdd36472eadbcca5d21f70099f4e013874649712 |
C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\WebProtectionDefs\20100430.009\virscan1.dat
| MD5 | f4ba4e9db2ae48450a92f1564ef2fa55 |
| SHA1 | 6a5fce2554486f6195c59888d2f35f2c228d08cf |
| SHA256 | e52a5a10e4613dafe926f323f7f8dac348f500c137907320744fb606a79c031c |
| SHA512 | 546e84e84f7fbaf6765b327b08e77f6fb97030d260caa5c4eff2f9c33b9a6731351a6195d3cb3551aa849a9fa623a7d286c661382383b98db025971014b43730 |
C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\WebProtectionDefs\20100430.009\v.sig
| MD5 | c0eb98b4b021e7209258eb69544c5a1e |
| SHA1 | 883b33a4675c217ec500b4ef9681b55b9f1c8036 |
| SHA256 | 7d147461b16d50f4521e52c32b36047b0fab13dd7bd521f9692f419e5843acb6 |
| SHA512 | b91962dd23489b7592d886ec94611c22d18cef24484def684557ab9eb06dd57ff07ae67814281048f39f37d9a914b8bc9a77d1c934f20a2f031fae061abd8836 |
C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\WebProtectionDefs\20100430.009\v.grd
| MD5 | 3551addeb2773f3896525756b3631b03 |
| SHA1 | cc97b40786a72fffa89515ddc9e9627e1893c88e |
| SHA256 | 1c96b466de40b73160790c2042f6fbd6b3289968ff4bc235e0bda3cd193e5845 |
| SHA512 | 95759bcaa373d26b43fbbd01158ecb08e38320256b87d3d80a640c315a4c2280ab4241ca8ac1a75aa507763d3f0f948ae5537cea5662e19c9bacbaef461b212c |
C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\WebProtectionDefs\20100430.009\Catalog.dat
| MD5 | e1c87930a55cd6a1caaba3cfaa7452b4 |
| SHA1 | 4c5b7addd47b7f020c294cff2dc725efed6d17ae |
| SHA256 | 37de5fc4980fe856b83deac2fa788180357cc90a0e7012594d38ef08021a7c65 |
| SHA512 | 87b06feb65676aedb5d549a60afcb254186c8f94985100d90822a2d022407c0d8af8237f203f7c56e8a398d90b7980f421ac2a2ae9e3c9cd51ef3aae40c781a5 |
C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\symevnt.sys
| MD5 | efd74374145f522ef3be417bb23cfdc3 |
| SHA1 | 4c3673e398f082f099a2e015e94c4ec85415f2dd |
| SHA256 | 41e5fa2aff8b040abbfbff19e08094f51bb6b0a53b3554ae9192d4e30c870a1b |
| SHA512 | 1448ddf4d8f28e4f09eff638e3c0d077d56018ed1adeec08aa04e7b79ab110bcc2d3ca1108f64168710fe9f300185ce75e021be972dcbcd2259b46feb4bc4333 |
C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\symevnt.inf
| MD5 | 93a577b9bff547ea1a95ab5e46f0b772 |
| SHA1 | 455668011b1e25890e9f23e7e75d0f41ccf146e5 |
| SHA256 | 6972f91545fa8f8cf13e014d6ae3803e52e8c861f93c9ae51f5fab5802d53a92 |
| SHA512 | 9c9099c47784dfe9b2afba1a46332e7e8263d675acf09f756b7fe184ee33a09702bfe245dd3b2708f016a171836fb9a02c2ef89bcf6c79ae2ef577b9e1ffe381 |
C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\symevnt.cat
| MD5 | 8c42434627414c89b7a6f6a434198389 |
| SHA1 | a68004c16c3bf9c33d447200f71b8f527e50e04d |
| SHA256 | cdaf869baee7b7230eb296e5a3fd6273c52a63087fc0ad5e619a2864d73cf693 |
| SHA512 | f13725831ec136ad64846423d7ae93ad053b947d435a2e5fff6e16b8815bc6e6d1b61660ccc914023ca34664b11bf4d8e4823903aa13067be154d6b7282f814e |
C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\speng64.dll
| MD5 | c8598693f4a165004da806a382de7de3 |
| SHA1 | f408cbb593a571a347646662d83d2fe48a31e204 |
| SHA256 | eac760973065b2cfbabe070da1fceaeb8b03a67ab962595f511c0669a0df5d88 |
| SHA512 | 80f865ff5e630518139b30f3ec86cee143ad2fbe3c10259f7b08c4b8cce878208f3f353391b4cda7b4cac21a52a8a6048a5ca2ed8699d51e266b5779eb588b39 |
C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\spdefset.dat
| MD5 | 779afd29827b58a492bcb665ca0ab2b0 |
| SHA1 | 5ec0ae92769727f86e40dba44b39fe55df3f4048 |
| SHA256 | 0f8e523801505fc28684a031c8cf09e5ce03310fb598ccf1489c818a1415edee |
| SHA512 | 71452f8e35329f82f1c2912ed2b63eede522121906a7c3a544d45141725bbfc0a73fe14da58827c8cce9f0388714c66a23cd455ba9a061267ae8ed6f7aafa1bf |
C:\Program Files\Norton Security\MUI\fallback.dat
| MD5 | 57d3d307ea7a3152cb20d145dd50914b |
| SHA1 | b6808c6a6514680b9d8425c63148958350b9eaf6 |
| SHA256 | 22a281f05f80c9ad0fff258da48daf0dbffa0ae6fc7bb892935d42d97c430448 |
| SHA512 | 1e48fd682ee4c2fb765bd7eaae761cf4a0e4d2cabfebdc762e1e0a49f371ae0f8ba2d3610ab98f23309fc4c824415b21dc7520cb40e02017576707016982a76c |
C:\Program Files\Norton Security\Engine32\22.20.5.39\vccorlib140.dll
| MD5 | 33cebca4aab9fab45276768b6780d2a6 |
| SHA1 | c7111962346d8f45a8793157858b66b7fce522b1 |
| SHA256 | dc00fa66ff2b0ee03a97e0c1e1e440f7134dcc2c0cf356d604108c9e69980ccc |
| SHA512 | 7464e286bb7fc431312f6f92e3d01f282726fc13e76844e7ad908d3888e9504fb2447ef20db985beecced9703fbb2f61b845b881810aaa42e7483e7c2a47225e |
C:\Program Files\Norton Security\Engine32\22.20.5.39\msvcp140_2.dll
| MD5 | 19f1cd8b040029ef97fb42c7746b6841 |
| SHA1 | 57339e5d490f76f66f2b8538917d70d21cdda056 |
| SHA256 | 67e92a9f69651bd982e1952019e0a6dbb97779a7432c02d496e2439f6771c404 |
| SHA512 | b81aad0ac5ee72139c497553e13c579c75a94cea68494f758e3b1d3b8e28a22889865c4e299ace307f9b425c038463b27e074892111eb7f4d1b60488881bf618 |
C:\Program Files\Norton Security\Engine32\22.20.5.39\msvcp140_1.dll
| MD5 | 8464c2ccc0ab5fe3bccb3630804c9d63 |
| SHA1 | 0ccc25508e07b21a778ef89c70c904a66597e8c7 |
| SHA256 | 473262c7a3e801ab0a779108116f0cea65d7a16b23c8ee0e31f4194873115541 |
| SHA512 | a9c540e5ae6c96692f00335209e9077f06121c27c4d02d550b865dfd150ee1e9e63639f0578dc34d0b70d9a3051ea436a59f1875d1a0fb48883ed3c121a57536 |
C:\Program Files\Norton Security\Engine32\22.20.5.39\concrt140.dll
| MD5 | ac06d70ea52bafc027a36faaba7fb129 |
| SHA1 | efcfb9cec3e9bd2c491f66b09530acf4a32a647d |
| SHA256 | de4f5285e4ff0de260a1c74470f76c06b6bf480f3169cbd31f7dbec1aa72cc7f |
| SHA512 | 6136b2c1eb8b9196f7cb78ec1fb077f72ce4a71fcbceec6097ce9eae6c7665bb4504a946b2750ab3e32429cde439e408a5502b645f2e0eb3c976235311f97a8a |
C:\Program Files\Norton Security\Engine32\22.20.5.39\ccLib.dll
| MD5 | b04d1260d812cdf6691fd5d9a93bcf84 |
| SHA1 | 68bdbbcf5a678605fe3adf7920137d4079da2d6d |
| SHA256 | 21a6187c35862867f30a1967761380134e0a02d6b045ce1c8c5ff14827ff15cc |
| SHA512 | 134aa05f6ccfa662099e32994a47f3694213f3b43feadb04fab04f3d3c937c29e1f630f30c602acccefd889a37136a1739164d920f66640295a48846dfff410e |
C:\Program Files\Norton Security\Branding\22.20.5.39\09\01\NortonSecurity.exe.mui
| MD5 | 826d1bd35235b8b35c54f4242825c922 |
| SHA1 | 351e3a3c3d5768e8b3aff88b85bcb576b8f10684 |
| SHA256 | 3aceb3afb68e92136441ee694279bf6826652cd9c963098e84e4415227346093 |
| SHA512 | 081fcec0e1ad5f8b994f603c96fc78dc7504c220e17ca487bdf771fc11032de99f5b2f3c2b29f9fbbbe9a00dcc4d66cd7d031dbb25571637f265f5abb8fa0b18 |
C:\Program Files\Norton Security\Branding\en-US\muis.dll.mui
| MD5 | ebaba795913ed08636002f60aab26495 |
| SHA1 | b91cf3cb4c822f725e6e8f3097a2c7211001cd8c |
| SHA256 | 4a202b1cc9b369ddb0a6561687f95e5caebf831f921842465342b6954de0ce9d |
| SHA512 | 652d5226be5b5e6d105380a5e119475b8031fcf541164e51b652c9d0ba992300a090acbb071585b67d9c55efd207f36640933d8819b2eaecb556e7f7ca79911e |
C:\Program Files\Norton Security\Engine\22.20.5.39\vcruntime140.dll
| MD5 | c1986d58421ba6ca3050d7d5a01f8929 |
| SHA1 | aaccc47a71fbcadf980932874056c9570a824890 |
| SHA256 | fbbab0c52138bb54f691e9764b43b3153047b989fa969b51bb695fca3639f3ba |
| SHA512 | dfc3f98e655015e7ae08dc57808e17685a743130b15097f32b87945ab8ab8f1e8c813fb7ea8c680fc235276bd5a7a9f1c073e47249a30c70f41692513e668d9b |
C:\Program Files\Norton Security\Engine\22.20.5.39\vccorlib140.dll
| MD5 | f3a6e8c6916c8d6461087874b1e85883 |
| SHA1 | 95d200dd134547f6f9ce1e65bb9918440af0c32a |
| SHA256 | fd883d1026c28be581dff0a4aae8caddd3e41cc4476f536abe27cd6f8975da51 |
| SHA512 | 1464c1b9869867608b26109c0005973c91b051981965228bd7c42b33814787e6bb556d24c870a6c0dc37a93dc9973baf4e5332f6449d8cffb88a5024371714c0 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\ClientSDK\csdkmdia.dat
| MD5 | f6d47986473c51d5c4d704f2d4ff6488 |
| SHA1 | 3930c5a7c68791b645f374a423c707690663c14a |
| SHA256 | 596e3c80cd0fc24924977a680d519ad24daca7de52058388f371e70c425f9af8 |
| SHA512 | f6073d4760d8250c90ce50dfec8d5215c250a8f61469b619a9f3680395cc4dca53a6a86c94ca9bf312d490761b631910234409e036c196bab6b11b92b51433fb |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\ccSet.dll
| MD5 | 8460b08789dbcf409cbf7201c03601c9 |
| SHA1 | 535cd7bda10703dd9192d02fc4b978da77549f47 |
| SHA256 | b63015181d374174b18aab7c17fc1f80d73d1d4df42cfdf8e5becf9bffdc3aba |
| SHA512 | c5acb9902a254630e9f5cce3ab9fa05bbc95081397ff8f656922bd8fa548105eba493ba2d7b49edb50af3eb5577c0cc91181693f84f123730c7e276543573ecb |
C:\Program Files\Norton Security\Engine\22.20.5.39\uiStub.exe
| MD5 | ba108798f661564d1515da0988cb39a6 |
| SHA1 | c153f949d3329c46c144fd905be460ce4acf9780 |
| SHA256 | f6f770258f18792ef6cc9ccaf9bf7fae60ab1a44eac5daed7499ad647e418b6a |
| SHA512 | 4bed34b3398c48c08e29a4d6014ea7701fed2991dcf8f9ccf596f6963382eb52167db86bdc5c50b627538037e69fe328f09cdc430ace634d0b2d18ab0ff2bd0b |
C:\Program Files\Norton Security\Engine\22.20.5.39\symamsi.dll
| MD5 | 6618f4d352ac56b8d1ade8880a9b0878 |
| SHA1 | e00595f9b54c3085e596ab78c9b73d4f81c1dbf5 |
| SHA256 | 1378f025d1336b9357737fb793733349c60e240921d3fb7f0c17df1dbf869e87 |
| SHA512 | 3080026805a55971795f367933a778faf13cdce8b53c3b523d4ba84ab425fb5e4a4b16c644445ecc5fd2edfb7789a79713ff70a078d38a91fc7a8045aa50e123 |
C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe
| MD5 | 42ad173ba576f189f5e8913a92cf22c7 |
| SHA1 | c1a6079fc2a999733d926c743ee7230dec52c42d |
| SHA256 | 4831d54e6e0907454b1f12ed7a25b79d27619bdb7e60d53423295b71ce93f955 |
| SHA512 | 10d2b071593093e2600c0fc749f39389a0938da20182acfc596cd6ad2b33c5f197d7eaa98c50580de59cb93f0535f99c7b646d30bbcb811fec305beb08278728 |
C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe
| MD5 | ef8dd24b9e6bc8b1e783161fcbd5dc42 |
| SHA1 | 96143da41ddb0754e1e5da728c8e1e2d4727fe38 |
| SHA256 | affc346b7194deccaed88ea175bda3ee869ba88a0f145a7197d55e899ed6a022 |
| SHA512 | ed1d3b05b3fcbf126fa6aafe7cb1249f57f4f152d5508990ac645607a43c26e3cf6e9c4ac95c3f2eeccbf9e8659b5328543aeb605599608fa4b4b8c4283cf6f0 |
C:\Program Files\Norton Security\Engine\22.20.5.39\ccLib.dll
| MD5 | d6a3a2011ceb7511e58b9f5ef755db53 |
| SHA1 | 10d3c6ba876c46615128bf72229242af5e848e86 |
| SHA256 | 1e7515be2291d942afb8b5baa8ed0fb1c8c2cece492c4d1a0ef37eba056c0904 |
| SHA512 | a46237df4db2f10638dc5b7fd4a2ce2761457a8b01eab70ace26d65d18f0f650272647d3c185d93d0c35d78e88e276d14ad7d53328884644464aed9fa3c8988f |
C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe
| MD5 | 939434a01e4a1f939216797fedd6129c |
| SHA1 | 75456faeaea9a6e7b65dc07f56df4c1faae05bd0 |
| SHA256 | 7dbae38a12b943fbecba428ffef45c0690cf8a77e18e4acf4cb87b381fb8f408 |
| SHA512 | 3f6d62fe9edd06aa31e467603e6232e2facec72678499d0435496eb1238bd89f3a815cbb9b22ac9eef0b148e1724540adfa0f1892aa10bab6702f329df2dc4e3 |
C:\Program Files\Norton Security\Engine\22.20.5.39\EFACli64.dll
| MD5 | 83a108603b73c5b036a89bbf5934d6e6 |
| SHA1 | 579f4f085bb0baed5eb5911fbe98088582ccbe01 |
| SHA256 | 9ac9a739dc8fc940a3189a91578ea357d57a5deaa379a75341138198a9b94845 |
| SHA512 | 18d0955af820b77f2a828bbd27ede37166ba3d465200c1447988e25b4e92c69cc336a3d3263446f650313153ccc896547ffa232ec670a04cc2d7cf447197a481 |
C:\Program Files\Norton Security\isolate.ini
| MD5 | b54ce01456aa63db416ec0fd14ebd805 |
| SHA1 | 0b90ca22eff491436a6203593100878ecc507b95 |
| SHA256 | 4242db772c261fe96aa071a43ce9f2f6e415662bc232a041691640f7af2d113e |
| SHA512 | 2da34c129f58851a7a619d0b531759c5e380b35f74d6811b654193f887edc3a8b66b8c07f95bcfc1c909e48dc59811f013dfd5965e860571e7bc3a6dc535b891 |
C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe
| MD5 | 34d9341ade75e2e33d72d251884f58c3 |
| SHA1 | e72130aec5b82c655a55808837ed1d1f4bd21348 |
| SHA256 | ec8cdb82f7aa13b78b0a04b12206dada7be868e8b21f62cae393896c044cac66 |
| SHA512 | 819a9728081ffc63060d6fffd2925031af34a9adc217c2f8206da313335abb7e721b34de842d4f04b406f724c839c440c81e33d8cfe3cf76d997928d75c6ef6f |
C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe
| MD5 | 3b3f2cec6110e040acb8b97675179cb1 |
| SHA1 | 748c1e69041002c652aa902131a6a51ea42c6a8e |
| SHA256 | 17ddeb537ee8e6ace1b8d9bb7f91e103b86dc1df5cf97363bce4f000b551f41a |
| SHA512 | ad92b8c37f16fc8a813e2c83009e4552220ad0e2c5996ab6ba5f6af50ab9f2db8f9300c094c2398a174af09ccfb5d9b62c6a9b0704b4a0a996b75b7a4343ee48 |
C:\Windows\System32\drivers\NGCx64\1614050.027\symelam.sys
| MD5 | 6e30cb1afa4702e3daeb6c98ed41523c |
| SHA1 | b925118ad5a1756c5229491cf690a40baac268c6 |
| SHA256 | 64d4353efbca85511f0297c75740508b8658acf703176d0fe81fc177bca71ac3 |
| SHA512 | 92723c0e6b128b6507acef2cddfcbf5c99f35631c66c3da72645c434ecc16bb7b02e93e04b5fbbf6d6054f4d559b8f98862736ef232a53a119127a0747d281f9 |
C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe
| MD5 | b868adbecc7e8dc980bb273f9134328c |
| SHA1 | d2e274381b2270aa109d0a5b2b4d0acf560e15c9 |
| SHA256 | 2187ee287b3dd686b1ac5943226cdd8061c01f883a1120ab6d71e4173dcee52d |
| SHA512 | 2d1b8deb5657d60d61af71a67ed469a92d83bd96128ab3e522fad56a6f873cdeb05d9d0d871ff9520c867f4eed607cef03dde42db19a4c044639dbc5fc37b3b5 |
C:\Users\Admin\AppData\Local\Temp\SYMEVENT.LOG
| MD5 | fc5fbc5b9addb9e95548a893ee61ed18 |
| SHA1 | 82b4484ade7ac7d7b4c03d4409c1d2fbf0768f68 |
| SHA256 | 2c9532716365b81a00ddc5b3a2a6bc74b6daf13430109dfac93e0c6b2df7557d |
| SHA512 | 3c82692551637e6aeb0494fa77f48b2c9e9741623633da3847b1a9a225e635daa8bd869795dab2e4c99d740742a317adfa808cb16fa90083ff24fba1e4b37354 |
C:\Users\Admin\AppData\Local\Temp\SYMEVENT.LOG
| MD5 | 1951094e515446c33470991f82b0b73d |
| SHA1 | 9e075acb7ad9009fbad1f01d8122f1ade9548f18 |
| SHA256 | f3fc627e69499141c27ec070986aff1edc375e2ab1c7a1ea62078732ccd9948a |
| SHA512 | 41d2d4d325cb54d219a4a266f3fd12d2e2e5ae2502bba4daccf1ea80956d9be22cef99739d80ccc2fd92b7ad312f79710ce6606413fd084fab863e235f882d30 |
C:\Program Files\Common Files\Symantec Shared\SPManifests\SYMEVNT.SPM
| MD5 | 02eb7ae684c62c97d71311552cc5d318 |
| SHA1 | 11d4e1476cb92a8f93e6a926eeac92413b66ce61 |
| SHA256 | c2f3224f033c79084d59b8428b789f0ae38d90b69738a3c87ae11ad9dea1b0c5 |
| SHA512 | 6fc9325356ba14dfd899c85776dd3431f24063b882f94a2ad3377aef01cf5e002e6db74935ffef659e7830d828ecccb6189c4ae18c839093f8b7fee8de3e4f32 |
C:\Windows\System32\drivers\SYMEVENT64x86.CAT
| MD5 | 47b23875a361eeff7613f174c74f8330 |
| SHA1 | 61bcdc6e59802c3bc6844ea4b4e45c2f190d0e99 |
| SHA256 | d033e09f9d9f57cad24cf10997dcb1e0af311f513d9737fea86462dc37814d30 |
| SHA512 | 1072f2393fef70c8f5d39f3cdff00276af95d1eb7a6c06e10766711f73f1f47571dc999902f507e1a2e7e417130a9d90fc51fdc294854ac383775587e99852d3 |
C:\Program Files\Common Files\Symantec Shared\SPManifests\SYMEVNT.SIG
| MD5 | 5926400aa02bb7fe7f07e0cf0cc626c2 |
| SHA1 | 88768eb3c87ca4b73ce6f278dc876c35fcfbd8fe |
| SHA256 | 0a30a4f65872c8896e7b163ba52d72855a6bef5e5769c441d96f6d8269c718bc |
| SHA512 | b0b7357fb8b32eaaf211b31ac8a9a02b7f8ceddb513c01ce39a92a95895ccded6e1d831c61d74494c101eb94c43bc3142a5970376104ecb10f6a19b070cc26b2 |
C:\Program Files\Common Files\Symantec Shared\SPManifests\SYMEVNT.GRD
| MD5 | bc63821e93d0a6c47d134c85b5354cc5 |
| SHA1 | 7724083c1871cadeafe1e1da7e2ad040ccce602a |
| SHA256 | 75091a4e5b9d7ad5043bd2d055692729f9d4de59d8497ff347adf819fa36f936 |
| SHA512 | 3e2e8cd8f182c9e0c636bc709b4212f7cb6b091af42a02a209af8467c1350d1645177bd098537e09c7977e1e7bd409e9ffca2e604d782abb03274f4096eaefba |
C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe
| MD5 | 3065de9638d1d837b8603d3604f9299b |
| SHA1 | 65b4ce56e03705b4d7fd9ac8cf35a241ba17fe4a |
| SHA256 | c2596018d0ebd0a98f7ca5bcd93fe10f86e9dcc2d8ea9f7aca7288854d40efd6 |
| SHA512 | 7c5355765180896d88ede97ace1ea23e6f15e6cd5e9e0ce65aa3fc7a7c7ed0145ed56bd26fa675b7af5be75e05c09d2fe25d84fd5850522f547b7cef5b48ba16 |
C:\Program Files\Norton Security\Engine\22.20.5.39\ccVrTrst.dll
| MD5 | 44bad3f6356964ac75e11cc85b41e184 |
| SHA1 | 3b12d4850c9dd4732c31896d5a0337aa7713393a |
| SHA256 | 890b7131182c0742f06abb97cd33e8d1349c666ec4aab661470d1187d070b56b |
| SHA512 | 50ed262cbd28b8531648966bb12829e4d8853d010f6981b5a8d2dcf3d1a222716d464dc92ee3965c31bbfd6b73cd40bac46493dd88eab802246a041d0d6d4bb9 |
C:\Program Files\Norton Security\Engine\22.20.5.39\RuleXprt.dll
| MD5 | 2a2d800b2211aea089755a3eb5140bbf |
| SHA1 | f4c178d26bf6d06773f30d5be498bb98425fca6a |
| SHA256 | 69928ec35d23d0644fbe64d70856273d74fb50db1a7c23e4f9a70ff232380546 |
| SHA512 | abe5391da66e74b46806a0c9b9efe88b0de6f640ee4b3e5d005790ca9cd802c6b4ccd6728628b22586ff62c09655a29cc610f5fab4c4609f244bab9e8c97f056 |
C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe
| MD5 | 423d3ac694a95ddb42caa58079c52707 |
| SHA1 | 788e9823382d862c6f40df0af01d6caa5a317c3e |
| SHA256 | db43ef063a72eb79d94ea2076467769c90bce9399db86d7737ddca117fd6debc |
| SHA512 | 62c03c44d7e3af42f0fbd7b1c646106c0674a9a64fb6631342911b8f1c0e062400a6706441d01508b06cefc806a070c15093d583fc7303d1092043cc6ccab3ef |
C:\Program Files\Norton Security\Engine\22.20.5.39\ccSet.dll
| MD5 | cb1462383361bc3359a734d40e2879a4 |
| SHA1 | d7d4d9bbb9cec546ec5bc92f759df2d58c1e6049 |
| SHA256 | 975c298562fbc1c7266be065d7d877c31356c766ec789d8e174fb6d0f35c1dc3 |
| SHA512 | fed4186b3c4fb27aada74cc6b112fac13d9d1e2fbc70128e16f8754eab3ea2d5e15235d9733967cc9323fc41542ccbbc407b3ba0c9307f95927fce69e55125ce |
C:\Program Files\Norton Security\MUI\22.20.5.39\IMAGES\CSSBase.dll
| MD5 | b78a2852177119c2afa571c997b7574d |
| SHA1 | e7f0799472e309c665d0785cd5d0db70f445ab69 |
| SHA256 | 1addf1db53f5735183d4b61bfc6f8e925266f98ad52ea47e126d5a70f6575720 |
| SHA512 | 4a728108bba4888d67c280283d4940e53cd085730783a8dd238838c1cd67b33ecb8e313484d28c49a2a7bde1fde97ff64f23a72acad44c0c29a1cc4f66739c4e |
C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\CSSBase.loc
| MD5 | ed0897498854e46e4435384e3b3cdeec |
| SHA1 | 775f888491e57ab7ad8d61e9fadb44424ee1ef2f |
| SHA256 | ebc0cfef5d551645e66e2f6daba6b57ec7f5fd1ca2b10181327a7d1f454bb136 |
| SHA512 | 08e7b2431032229c1f3cb7b8b4b4cd262ac73f801dba591bf31b788a75360fd4fa6ce8f5fc0367af08bb405afed9a8b357eb115d6624a098d702382a7d83fdcb |
C:\Program Files\Norton Security\Branding\22.20.5.39\09\01\isBrand.loc
| MD5 | 8718ac3fa41e3656f96715b8765f71dc |
| SHA1 | d890af7707496f63c47a5e3691c0cf167feba8ee |
| SHA256 | 39e6dc84be27ef44589e485e638b3494121f2b6f2985d2dd7f51b1933bf3fb48 |
| SHA512 | 373b7fe51fa92890d07894dd8706a8085651c84560c0a4d4cf2cf04bbc3bf0121f659fa63ad83c2831333325221d5d8076c65f48a5315d726730b5380b27507e |
C:\Program Files\Norton Security\Branding\langver.map
| MD5 | 15ee5d9cde30009d34bd23550c1dbe2b |
| SHA1 | 9893ef83a126f895e01917d56258b5d4cc272ace |
| SHA256 | cfa26c135503745c80a6f3484a07a0509eaa7f9ee1853f38231ad9c645b80205 |
| SHA512 | d4a1c8c0b7c8a5e00f652f96069a8d252e842af5c0530c87fc8fe03055463dc6e3a33301258ba6acec17d23b4f6adc7916b863a08b15ef31cbd80392ffde2990 |
C:\Program Files\Norton Security\Engine\22.20.5.39\stdres.dat
| MD5 | 0cd58b6b420d71b6a4234a4604748c45 |
| SHA1 | 7f9605ba7abb7d03a6a4ae849e87604bb51b7f99 |
| SHA256 | 027aa5868141ea5e75fe8e408ff535eccbfe7b31fb98c74549e3460867fba1e9 |
| SHA512 | 9dd1d542c53985b9523967c823e15fafd86e2adad4048259222e2fa6e6946b7e23c15981b59ff281b59f4124129e2cb1d4d404d5be79f1a456e5cb1442122210 |
C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\sqRes.LOC
| MD5 | dbe4375a6d4377e8e0e30833debf8e79 |
| SHA1 | 28a5a903273bea9af83657a8378c36d2110a1456 |
| SHA256 | 1a9f75ba67bbcb57c249a6869170a14e206056647e15743e8923fdff2684fc12 |
| SHA512 | 4ccbbf121886da92db615e60e5960d1ecf3d45ddfa4923f1710b4630b67838ae721f4fcd598c62146eb039966920091cffc5a310d1bddc62f641739b8a72d8dd |
C:\Program Files\Norton Security\MUI\langver.map
| MD5 | 88167ab85f45912d1b2d7f2622d4948a |
| SHA1 | 4711cba478b5313b2607aead2fd5957f37fa2212 |
| SHA256 | 8bf1f0807a78b092f4c66dc6403f1be0855cf2b9d2c452051976a237cd0a52f5 |
| SHA512 | b835640ce7291d3a19406a634ec650515b9b200608ac047d5c5b440dc45aaf67754f70f617fddb201ec7d13af52afaa9e440ba8c75ea2912c06db7e8f2e2ab4e |
C:\Program Files\Norton Security\Engine\22.20.5.39\sqsvc.dll
| MD5 | c1d25f7949a59a8e5d529db4f0f511ac |
| SHA1 | 44097bc7e96294e5bc55e19368ba14cf280a435a |
| SHA256 | af680888c85a1dadd3afb27faca62a1e8b50d8f3ec80eaaaced3884c745e3967 |
| SHA512 | b7bc6816f933aa2b9c069a476cf18e6d740be062bdd56d8089472bf0cede8e2125428d7f4845b2db4fd93a56c0473bdf6fd717a9fc04dee1089764c567bdfd36 |
C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe
| MD5 | dd0c9e301b0c5a3b355999bdc5b88b8d |
| SHA1 | 16fd14f8ab4c9fac1c63a3987c7cedab15e77e69 |
| SHA256 | 0829d43b353551cfc91d40a67fa3f78cfebecd6bb48dff6c946e73488f492aa0 |
| SHA512 | 48bc80e6cd2a297edf9824d64fe0ae6b889fc150864ab4fd9c30983491374094c653716ada4c003bc57cb81fe1c5210d6de82ef57887e9f58740a37bb7b2e702 |
C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe
| MD5 | 16a5fb3b175d0467c651cf688d9c63a1 |
| SHA1 | f1c869cab22a452dc21ab74c510d47522367c8af |
| SHA256 | a092208bfb94b5305b008b13c61fd0091fdfdb999d1c3a11ab49fac99e5c2d76 |
| SHA512 | fc90a88c05631a88747798416a7852b620baa9c6e292e89b8c18c6cf273860ea726e47d7f26b0d712554b1ec0060b29c250ece2a504bbb2fcdd27bbd1e960352 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\diMaster\service.dat
| MD5 | 9e0d7afdd81760ba67620d4ab950eb44 |
| SHA1 | 5eb0ec4239a7445276a67f91e4d1cf451a6b6515 |
| SHA256 | f3eab5205e278ca19e2427048e818e43b64585ea11c2f9701850f3c433d341ab |
| SHA512 | 64cb3dde8e9759cfdde79d689fb7bbe6bd370d8c6495fc7107d1e759286528f76bd0e2e16508c27238f4538bd5a908ec6f115f4a03e2335d83b55acda093e4ee |
C:\ProgramData\NortonInstaller\SymTemp\ngc$20norton$20g2$20install$20scan$20sds$20definitions_microdefsb.curdefs_symalllanguages_livetri.zip
| MD5 | 7450ea66848ce99ce4e7f61bb8fa5012 |
| SHA1 | 5348b388cd6a563ad6ee33ab1e83f906602d1bfd |
| SHA256 | f9f2d1321123405b3a13920ad00d215ab33e908baa725334d3a7ce05d430cae2 |
| SHA512 | 317b00e4948116d56a7cb84e976076445a9f89d4cde270fcd4a23d3eeb88d90889610fcae767ad1a83e57a1b60e2a3d43cdfb39f7b6f1496af5cdfbeb556ebc8 |
C:\ProgramData\NortonInstaller\SymTemp\Patch8822\zdone.dat
| MD5 | 2ea09c8b4b4669c516433ae31982e259 |
| SHA1 | 2a81643bd087028e56b8b7e89e13407ce3911383 |
| SHA256 | 052f9712b651fbb9fba1c080c6258f79df62fd88e930903eb72283bbc030ae6f |
| SHA512 | 3c43ce201d26eb5996ea4785270184423d082f74734403f4835108168a1b89f899d05d595dbe50fa4a1010b4bf431f24d4debf1f5e9496e29fce829b804463ae |
C:\ProgramData\NortonInstaller\SymTemp\1711126202jtun_ns229ennfulc3sdsrem.7z
| MD5 | d2d7747bb72bdae08efacb0cb3c71265 |
| SHA1 | a566924232069efec707eba9008a60f4aa96159c |
| SHA256 | e6b9cf9ffc66afd80cfd11923f5391fb4ecbf2395c711c951d678b93de1afd0b |
| SHA512 | b3861fb7ed2aa6081640551c4d2eb0f106bc968acfe8dbcced3bdf61b9944f4229debc7b343f573e2b6b850756750920fa129cbd0561c5b82bf009c8289dd47b |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\catalog.dat
| MD5 | 843ee653198818c02a1325c741a15380 |
| SHA1 | e400e6fdd500d5bf82edd10ed78c80e7a7f838f6 |
| SHA256 | f7550d696f59f8e496de0115c8f77b160091c708e45f805fd3e692f967bdc014 |
| SHA512 | f00aa00626c8614c9888878737ab50eab3f937c04de3692ffa166a42bf27a6e1301c8c1187e535a828428137c5d74228f8a7935975ca359b04e9d64bf48b6593 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\v.sig
| MD5 | 78a68b254c90d11a638c6f9d9c95fa48 |
| SHA1 | d903d1d95fb30dc829d84f70fc81b22c9bc58af3 |
| SHA256 | 648dcce6948ec4444ea04d5334648f4b77b0dd86ccbcf4cd835c1ec9d1f18b8e |
| SHA512 | 2305e256924b9cce6b8815a9fdea00439d43337b34f1057a5a22c0f33af5226ee4ce7e5481df08e0895c113c19cc9796aa4f0457772c59e899c19b19d2e6b57f |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\v.grd
| MD5 | 7ca3073cfb311551d55a97a0f47c44f3 |
| SHA1 | 7eb0f44d5a316e470f84a708e290055874351695 |
| SHA256 | 53f2b0250783c99b9699cc90ad3af769048b6b494727d86e7fa907b1e9c7ca11 |
| SHA512 | 91dcab377b56583a8e123c099086f863986109de9294f6c03b1cbf7bdf0e984ec3d841a6840d98dc25ccb49bfd25355ce72e3f8d6ae4a6dde9a76c8a6523db4e |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\ERASER.sig
| MD5 | e4595df958d3c4032ebd1dd5312952b4 |
| SHA1 | fe8f397826bfb5ca77775654df3ca8339bdf3d60 |
| SHA256 | bb7f74f3fd960be1028a12ced4113f810fd27407cc584e846088729eb90c84cf |
| SHA512 | 4d673e6802dce5481ddcd0cdab9218f846f0c56ccdd5221d67936f9d6493c3ab3449544d5025057f863e2c3583669c0cf04d29b1a799d7017c68e9d4e9d9af6a |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\ERASER.grd
| MD5 | 4b93d109faefe49e871b84cf6ce97c65 |
| SHA1 | 02649ec807a15544ec7087f328d4e0978b841a1d |
| SHA256 | 45bb0e845b39ad08e52e209b784018ca376951707002ff545968b871e71d9c38 |
| SHA512 | 36128c4a0489425c129367acf8604ba970e02165f4eda2ece06ce0a20353a4b7d0b99ce59057f48911341b21c921206dc33f14127ca72e27eda07fa443255c71 |
C:\ProgramData\NortonInstaller\SymTemp\Full\cur.scr
| MD5 | e54215ef2a7c79bac83ef0a8b88753cc |
| SHA1 | 0d1989855ffe7c99b02f78fcba87ecc8bb03b336 |
| SHA256 | 5064a38e6cc442b6b123e6f43bf440a7b6aca8b48467b57664aed8f985a05a4e |
| SHA512 | 9d25135f035a1fc93e1d9929f4ac96c45828161f3c5fff3ec37d0ff9b5fbcd6b941ba651f42f544e948b00de1115c2ad0508c329b8e8889a92138253dbb6e236 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\hf.dat
| MD5 | 1a1c9e1f1c11f8988bd47a1673909569 |
| SHA1 | 8da49f359459d1cc7456b3c2a919929b791a6795 |
| SHA256 | 7aa51e4ed46139ad6e4e8bf2cf109443fe2b6144502187073d753232432f1f8f |
| SHA512 | 7fa4c15a3194dcc52a833124956409cb62a0757e437a8483c81cc4591ce8c8fb3d5f6dc6946c58393e01c13159ca97d81039036a5cc9944d5d1a7d63ac868596 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan8.dat
| MD5 | 57b6e2a81b8025db4eb531c73abde1be |
| SHA1 | 616b7342ac2fe230f5f2c27e99c4f92d9e93729a |
| SHA256 | 1b9c56df6f33572ffaac5dec63815a7fb2467675de75dcd57292b4e6cf6e7c04 |
| SHA512 | 728da1da505eafc5caeb81a4928c60e5f3058b9d4c526e89d25cc24e118fc72b0d57a31eb73f0fdddfc67eb1aa5b6eef6e7323055ad0c560764032bffcc5d328 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tscan1hd.dat
| MD5 | 6e6c02015a42701784340ecf625987c8 |
| SHA1 | c4984e161ffcbe7283ee6867d649aa4134aa24a9 |
| SHA256 | 705efe318240636b86083db13bd65bb30b028e5bf80d9e0cbccfbd9244fc29b6 |
| SHA512 | 8266892179a88561c3b20df4a7c0f1fa3ff09baacaf6bcb3ea43cfde8824ba5cb42fdd690f33a65303f8626127a589d80125db13ebe98f6050431fa0febe6ff0 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tscan1.dat
| MD5 | 4f611366ebba7be58cc5ea0bf8450c78 |
| SHA1 | 0f58a933c9941073822d90e24e8ef4b95cde2ccf |
| SHA256 | 12d4b5408aca6d8fa3a986e97f3831cec6222b03ddd0a35e7469f83efcb0a558 |
| SHA512 | 3f34575b3e0abdf01d5fe765319dea312926e33bc9206370eb10defc6a9d353f76cb68e0fb49cc5d42e8d341e123815eb574a5ef91e94c997401082837e769d6 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tinfl.dat
| MD5 | 25bcc5d77219300c58397f6656b87b3f |
| SHA1 | a43665079e47b768dccaf7b81a5464d641c21bf0 |
| SHA256 | bf0c5908fdce3cc823a91ee9a9f8ad9f8c713c4c6629294d5f168706e7128ec8 |
| SHA512 | 24597efc05ff59993bb44209fc5ef344218ff418bc64c3b97d23bc58a1351521a405c5378e18597d535c5bb92d901e17e37956997a9042f2c5fcaa12ae886f8c |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tinfidx.dat
| MD5 | f482930d99d74bcd79cb09f2e88bb7f7 |
| SHA1 | e8b798f5ebd13c51ddca02cb1322e667f8125fdf |
| SHA256 | f611a9803c3f35c4c5c09cdbbb5c4edcae9d86d682f7b794dcf07fde8f581348 |
| SHA512 | 26e0ecd3872032ad0822d9d9b46bc1a22c1f24ce4e056e4db8e535d3e0fb03f955933d3715325d4f5a4b37e2eb4e817aebae04cbad9a270a7577986d77401cec |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tinf.dat
| MD5 | e7e4ac920a8c8cdd7c351c48821440dc |
| SHA1 | dfe9e7f3c29f3eb55f86b7d58f55dd66ed55ae3d |
| SHA256 | dda3e5dd2209625b095c0390996483208438b361fa55c8b86a2b498a00ba982b |
| SHA512 | b91df159722ce629391923de4ec5bb2f7f1239b0233e3775170887005fa447abca688a17a94030bdb5b1d415a5102777890d6c4b13e556a46db98db800449209 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\scrauth.dat
| MD5 | 384350958a2801b5b38d82c7ed52786d |
| SHA1 | 671d65a3e13f682dff123d73918323aa55129224 |
| SHA256 | 81c391991ac11d000185dcab0443289f7f3e5bcec1ba0ce202402e6886bf1e9c |
| SHA512 | abe2a6761b4525345b19920f6f9d64e9e7f8653fd1e42310421ccd8d57b09a4d0cd18f2784c2464f1c41f40dd0919dd95bc29263bb0d4cdde843b5a19d768a7b |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\technote.txt
| MD5 | 8cf7157ef237892b91767335c1ee8e88 |
| SHA1 | 436fdcf26b5ac051f777a557830898078f608d2f |
| SHA256 | 5fe4a4a0cb7292edf9fd2e703514ce9a2b42eab8219c4f7b82cdf1377184b863 |
| SHA512 | a74c290b7f2697e35816b947fc0eccc926af1bb84d5d9a34cbcc998a5782fa690abf048f6cf54e6674e2d85242f0c14608d615383e755449bd43cfba5f1d32f1 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\ncsacert.txt
| MD5 | 900f31fc586a42ce2abcbe36563071a9 |
| SHA1 | 2d668417a30b34131fb663f81b2fcbb8952ef247 |
| SHA256 | 46261b0fe47516582c4c03704adc4265778258d7a61ada153a94a50a2d48b99f |
| SHA512 | 72f2eb32ec5f41abd45647920f6d68451a63a08a9181d672cb527a24c5582f570b55f1a4e978d3670564905764bc817b8cfc9923438b1988a2b5b3972d846cdc |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\whatsnew.TXT
| MD5 | a224caa069da8f3777911c06c581a8ca |
| SHA1 | 8b4aaac8992d4f06fc07fe7c7db93cf1197e4fef |
| SHA256 | 1da2fbc51c10c49b3f2940246610478e80ba7bb189d3e27806dde10023db3a2a |
| SHA512 | b32c3bdf06406e7d11b1d56ede6f46a6d3aeb9ff265873f5e78b679eed6f81877b840b43b6b98dcd1acf3484d41b77da35dc7b5391c46d3306f30d319d4a81f9 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan.inf
| MD5 | c43fbe98ff240c7cfa79ddaa0dd66fc5 |
| SHA1 | 5b51e5fecac4515e0477b3b4cf48c47d4ccb07e8 |
| SHA256 | 08f5faba331be5355f5e378b85b69291923894507901fb4dae1d6f1344644af2 |
| SHA512 | f3d68320860b13df4a48a78f8454163992f5f499e52a2a73c014789467f6025d4c1d54f9132eb66cec225122954ab4a817812b4965e477518b05e276e7a8023c |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan9.dat
| MD5 | c2730f24d1d87215e1c809b4d7458be5 |
| SHA1 | 65c1beb148eff388d8bf8a24c60fe861062bd388 |
| SHA256 | b647bbc65fbf2ddb6fec4d40637b925336bf9db2ecaa786f970588bd8823cd1c |
| SHA512 | f0d8a4890fd56a3d32fbb19c02399feec70585a864d7ba1f05ef6db3342699a4115728b4bc204b15be622238c0cfeb9bdc8b63ba0a1a8c090ba79a515a4c431f |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan7.dat
| MD5 | 6f5d5908cbf194e4bf0980d8a6a8d340 |
| SHA1 | dc01f7a3152b01cc587eabe0a66c903f9b57843e |
| SHA256 | 986da8070c475481ee8893d51bc3f50b6f521125173c4501d12951f958b3e81e |
| SHA512 | 32f4e0bc673eb53f9b3abfd3d6ce72bf065860ac25aea7930c88c368ecdc99ae8e5bcdda6b98b4ac0e21cfddecbf1fbf4f71cc0a372f8a82aa2cb5ef78b92c21 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan6.dat
| MD5 | 0e4e67959249aac2979ae97c538fcada |
| SHA1 | ea6801ab38f3acc2036c69e5e5468773060d9470 |
| SHA256 | 120efa006c86f107c9d7daa93ada274d2cd5cafc3057293d288092028d9c04c7 |
| SHA512 | a7dfbcb5ee523df5ae0d51ada896ef6c552eb327ab9d062179590f27c66b43c87fa524743b81094bcccf4f0c7b1dfec00c3aa0171d91534255bc6ef359fb9b4c |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan5.dat
| MD5 | 201f00e33951d001cfd09c911fdcb7c9 |
| SHA1 | 13d33c5d67140569f5cf93c63b62a0f4e3fb4650 |
| SHA256 | 795b586950c9eef05240b25296f51b2ceb75cd74776a1d82dd672bd68c43a13d |
| SHA512 | 03d81cd613cd6a1a9705c82cdc274c88ad68275e9dad58d2119392677ef3c7b1093b6d9b182c8468ca412633098bc4900b98f731c5a25e37fd992170908f789a |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan4.dat
| MD5 | 28dfb4c5abf568fc93ec65d766227e0b |
| SHA1 | 74493a1ca5067a3cc9d36df6ed1ab894a89c0ceb |
| SHA256 | 8fd4a4ac7401e56279d057c1bea4d095444159a87325894e413bdecf2112fc0b |
| SHA512 | eea3e86898fe09db8370bc44d4915c0aa0135e45a804437e469b8eed368c87a1bce0382c39cf2714837a5a0c0c5ab606ab6b207cd9f7eee239402e415432e3d7 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan3.dat
| MD5 | 4c658839e6d6197a69cd4ad612a4db8f |
| SHA1 | e28fc3e4fc594956f84aada0ef1a929f6e9c1ada |
| SHA256 | aa6e13b87eaf6ff3b50b3d431d9d0dd611c929a8ada29dc56a9e44a77027daec |
| SHA512 | 13e6e2e42b09567f5f861bcf38e7fe8cbed73599e6e5d0f04924f2ebe4ccf98d7aa5ef9bcfb8501353789f39794a2157399daee18765a750b1ce3fef6fa26f06 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan2.dat
| MD5 | 549c50fd0d99e343d98c96d72f139932 |
| SHA1 | 28c9f66ef8f9c2b911e26a6d39d132e5e2234097 |
| SHA256 | 2f9e7cd2b3dda4893e3b159f7b15a99fe8ec8af4b35c0e6310e2010140b0fa82 |
| SHA512 | e99588bcd39953b25826974c2917d49fe1a30af55483e25527a094afc11cc29ff4b05184fad537539ce51bf71aea265fe172a63169d4fa29f024794146a3455a |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan1.dat
| MD5 | b53eedf4b1244de818a1cf9a0a881fed |
| SHA1 | 0744abb66af5ceab6f96c9a4cc92fc2a2e48984b |
| SHA256 | d9191a5fd72b02edaa4b132148dc3c9324ffb4254a029354ef1ef665f433aaba |
| SHA512 | 78f8f540a2252e31e1e16e54d9a6e1ad4ae215ba8dc4e76fb7fc6926b8a57c68c811eaac9c2cd003c0becdc224d05d443a493ae0428e6a42d101d0bf0fa794c2 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\hp.dat
| MD5 | 43f9917c236cdf7a3bbf173a9680de6a |
| SHA1 | ecb60b9729571a01e01fae5bfb68f111a8730926 |
| SHA256 | d00af5ef1d09244b8cc9e76f268b6898e87307958a16bd1249e1f6d8ca38868e |
| SHA512 | 1c4b26082061fafc482060a135999b56bd82047ebefe8f4f9d0baa5ab0e5401b8fd06bafd04a67357dec4a47047e8c8152b09b2b7925e10178e964ad920f251d |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\esrdef.bin
| MD5 | ede905650b9fd98b3bf97a60520da059 |
| SHA1 | eae31786e0db0af72d3bf9e7c295d63a7c362133 |
| SHA256 | f1f0ce21486884580a20f9dcf3ef3846ace1d4122167e95fe2b5d0fc19addda0 |
| SHA512 | e83b02e8d5bac43100a1f4a7ef0e74a7c9abbbf387a84f62619b51f6cbecab30ccf5294729c07f20c365c5263d735f61e430b59fb33d173a20096a53345db830 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\Eraser64.dll
| MD5 | cfbc23f7ad1f290947e709c3fc5c4a47 |
| SHA1 | b77ed989bdd8e57312c98e0f3e33bddd0a9865a1 |
| SHA256 | b6875cca017ff053cd2d17c8c84beadadfea6e1fd88812bfc158a17314957e76 |
| SHA512 | 9fc71e62cf224fc4875c92d23ec3ce8a79bce4a72b4216ab2b9619799d581d1cc64d92d811e5e6f12302e19992e32dc83bc23f94a0ab68ade70f7b6bc5e84d36 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tcdefs.dat
| MD5 | 23745aaee316839f7ca818992e3ee012 |
| SHA1 | e636bd0e390654d08a80e91b6f20f5f1766dd122 |
| SHA256 | 2811d717a4b871dadfdc80021b97334dcb6ab065690da769701a602c78940016 |
| SHA512 | 1cd287ca51cf7cd8a8561645a0a350c3709c76720bfa54abe358f215f7183d64b3f591dab21dfc33c7b24c67510c9bba026d92beb02a5c9e8e72df26bd3e4dd6 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\symaveng.inf
| MD5 | 0f0ab5d8b0b33dee678f7868638bf207 |
| SHA1 | 245f6528833a444408f41c0d5e72306d481e19eb |
| SHA256 | cced48a9faf12ee3b37d557ccc96a767d631caf2d379e0a27a4aa47a0b5e0cbf |
| SHA512 | b0c8b8dc58bc8e8ab9b96d316601fe11989a59ae55fbd32f2ec865717ad76cd3619662877411a33a432e5035d6f332430d051a196f25fe133c2fba9e7453d302 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\symaveng.cat
| MD5 | 067cb26be1597071f55bcfda46500c4f |
| SHA1 | d22a0a9c16dcf86d9cf38da19a123919776dfa15 |
| SHA256 | 832be525257d81d68ef2b0672998a4a1e465941805325dfc001433740d552e00 |
| SHA512 | a62422f9da1493030bc9d45321ab429ab40045ecb499c980ded617f855b888e08851fbe63c85175cde9baac0d91c6860eac6bdd18a34063d66df536c4c5c7ad1 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\symera64.cat
| MD5 | baf75ede0d155240c823a3547ab9f58a |
| SHA1 | 917d9875d28d13b5314923bceff9ab7d67299796 |
| SHA256 | 18954176cce4dccab794caccf39d64a63f4735695c09833f6df5f3095f6d48cb |
| SHA512 | ae35d3142a594613253bb221d29344f9af40096062154e53257ee071997ab9cd6241574eba44140282fee3761e9367118e041a8f6de5d889ef2879a38a3b807f |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\symera64.inf
| MD5 | 2b6cdbc8f5fcc637fc640b8bdf6de139 |
| SHA1 | 9b8b93034be86dd961f4e6422b4d43341f15a716 |
| SHA256 | e13164b26468abe7fb4bae78ffbca0381236da194c74d63fdaaf0d2fb9b9c42f |
| SHA512 | e162a530796e22f308fdb53b92cb0a7f51fa7c27579b179a1ba61aa4cd4bb4f3d57cc988e7409fbbed21e31728878f89bce5410feaa23e6b409972f774c7a93a |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\eraser64.sys
| MD5 | 5f7841ad7bfcffa48426a900a29dd971 |
| SHA1 | dc63316a0d786652256cea9bf70068d7bc20986b |
| SHA256 | 36a755f3272c3e611c39dfddd588b3d84614db6de94bd1c75e8386fbf2d18106 |
| SHA512 | 972f89aac8fa5c8182640c0bf8d0e41a999a1f7383b594601fc275339175d585297303d4017222d8ac3ebfa813b6c5c210290285a5efc33444d60eb5e14a8133 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\ERASER.spm
| MD5 | b7b308580e1b3ec5bf04f8b7cd7f45d5 |
| SHA1 | ab8ac06422572cf5d9ca96976829cf18c64a6275 |
| SHA256 | 124dd0891009fe8d0a6ac32b6ba37b184aa3d487be72863e2072655a1ebbd1f8 |
| SHA512 | ee841f620593ff7d1a1d4b525a978c7f2adac3eaf05a89dde570dea31067cf40dde5c53ed8837cc1ae8b7938b8583747d43eb2e1d5239712ff6e9ab3b8431c1d |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\eeCtrl64.sys
| MD5 | 1f3d868f014929141d983d8e6b0714bc |
| SHA1 | d04422325bbfffa52d2cc114ec25eef726821044 |
| SHA256 | 52b60acfbf896c9547e7fe7c568983cf65357bb2044a1f443dc9691f1e74191c |
| SHA512 | cae63f0ab3a596e3057e29fdf1c2a52a75c2b1427cfd3a8d78c4b105f67e10a19d70c29851e8b2040200d02a0a79e829e091420821d6141d985ae4170fe9d340 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tcscan9.dat
| MD5 | 1cb92466e19a7301c1e501bc8e327c46 |
| SHA1 | 1d86512a83a77c4608327dd989d3eb10cf84e2df |
| SHA256 | 83dba56592ac6482e3b23da5a0b1e2e593fd322614fda9fed3667aa3df91f4ca |
| SHA512 | 2bb87b5b5baf8fe7bce9e19207b87ba5d59d3bab71d093e0db953a2c09547b20484e6e843c9e6a1dcd6c52b0fcd6dfc1993e4ef8a00aca09d4438d494bef6440 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tcscan8.dat
| MD5 | fc7dd0a274cfeec2ab44c54dcf4c8ee9 |
| SHA1 | 6adfe47cb3395228e266b3838cd73def0eeac62b |
| SHA256 | 0ca5a1a7060b2c71ece3c8df7d82daac4bc3cfe2c4268c58106bc6a3ab4c2bcd |
| SHA512 | aa944c4494dd18f2be60e51e973e8c7afb853d6f491c29436b2154bec6d1f59b1c4753659a1180fb1d09e611f268e3dfdba77503510f841867dc957413aec735 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tcscan7.dat
| MD5 | e3cf8dd0b84c0c0f2148e20701a1da14 |
| SHA1 | 06adcc0866686465b63a355a011772de428dd088 |
| SHA256 | 645f99410625ea4f98a9fa8e1e26b54617830711b8859f3eddd04cb6a026544a |
| SHA512 | 55fe79973461ce3c991c96489863141aa10b796c36a291386618e5ee9c27fe36dc38ff2f032e098e8a1a7ec2382a7cd969f732e0a601b1a0dada5468b5bf2eef |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\sds_engine_x64.dll
| MD5 | 1e476057d7c37b9ec1bcbca018198864 |
| SHA1 | d3706a3d15cd080f18014f3f6e6beafc1c12ce9e |
| SHA256 | 83a4924e8c3b222561d583908804f7692b73e4c32999f4af584bced7c94209d2 |
| SHA512 | 8ef63069ca351c92514f8fd7f37be682922085ba9b5a9a6da1ff437590fbf7a83afdf018e9e1efb64f8dcd2bc7bb30c9b4f92c08450bb5b0fcc9e2b4ecb2b812 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x64_win64_af.dat
| MD5 | 6c4e14575a0c5c89aac7fbfb3da2cbdc |
| SHA1 | c4fe5fbc963d0b398a177b018915c98721f036fc |
| SHA256 | 1b8ad7d2352888352a583ee9a05385eb6481486015d9f6e91054ca8676ea28c2 |
| SHA512 | a1c3212749b5de482c61b5aeae9a454895ec59e29cbe6df81339d99c989827888de7fe16796e5e59f3f4adaace0fc7148ef2dc829ef949455321ceadc52a6c49 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\eeCtrl.sys
| MD5 | 25fee881e37c3dd18750357428441562 |
| SHA1 | a29c8514cec188f99ce54a165f622ce1aff4d8ac |
| SHA256 | 9d7f465b244b567b6e29844e35c11315958ec7a5c74298c0d05514df6b22e4bb |
| SHA512 | 53b0e77cb214bfc78ca944cee3cea137dc1a99139ffcd4c781a7f3744e0ad943180ddf7f5a2eeef7b1d867e555bfdac29af917d381dae2015c854736e0ae5ca9 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x86_win32_sa.dat
| MD5 | a149dc6e2b0b3b0e00c294659ad62446 |
| SHA1 | fdc4d38b765ed06787037d3437e0d2f8205f1af6 |
| SHA256 | ddf4fd78111d4a458d63f5a28228766303087a94b68dd6dadfb668a0f0ef7e06 |
| SHA512 | d7d17267774ffc6d3db5b2f44e59de1913a3056f1a609c6478f279db2b033636ee8ad2cf94fb388888d7c5bf22f287a541fa344b8530d8bb9b6aff934b6e6919 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\eraser.sys
| MD5 | 56470288c4a48b70bb64a5d5818bb0ac |
| SHA1 | 662d3febb95f07bb9d6b149368ad4d49b6a0f1b8 |
| SHA256 | 762b1edfcc8c2bdf8085f442db0c1632b528da4b89a71f6f2ae9d929e8fb60dd |
| SHA512 | 1ab268c41aa3b3a9024ddd7a8e8cf6f274c7a70452601d869baac098d389e5aae3832d546362bceb64f69838a502403f840becbd9802818d64db87b5f6231e0e |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x86_win32_global.dat
| MD5 | 443fcb4afb0d46fb33304349561c3d62 |
| SHA1 | cd5cf0c404178a678228b66c8f671a716d55e225 |
| SHA256 | 1ad8f090cba0cbd76e2323a3ba0ec34c0ccb73a2a2f76fa39baf387d79cae127 |
| SHA512 | 4393bc7bac6895ab1cf85fef01233e588868e8084ac60efa3d8370ef2fcf58d7e46d42b5dee7b9c9457b4af26a6ba3ff4e365108e52ab1a0176e3a51bde2c996 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x86_win32_af.dat
| MD5 | 8d92d6ed8c26cf6bc3050fa8cb779b18 |
| SHA1 | 20e3ff34f97dc1a6df447f74c38768327c1e00d8 |
| SHA256 | ce0b3a4a5c93a86eea4cb7d7cc1f0d165ec9d3cbf632e8f5d0e2b0f501aaa82c |
| SHA512 | 39bc7029205ed8eb52ca35c1279b377c801c95beacbb4a27b638bae0de0e4089f0d22c76a78a05289e089fa50a0a624a1f8049de6467c641ad5fef09fe2904f1 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cceraser.dll
| MD5 | bcde21dcd4601108700f67eec789fee0 |
| SHA1 | d72ab7d195fce3c7f8576e4f0dda90897d66c535 |
| SHA256 | d6be1fe28553f2cf1b077917b9f62387752ee8bf54202fb0ea6c69acfb9e2e57 |
| SHA512 | 5191e0c0a242aa38faa72b487698b154179d1d981b347f334ebe1ecaa6ec1d37690d3dfd1d3ad127c6242724c0dc3f62faca59658c303491ddcf08107b4c55d7 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x64_win64_sa.dat
| MD5 | 0ee9cfbea07a5587645f5cca606d1510 |
| SHA1 | 2da4fd4b1c1f8d47e50ffcc254bc3cf7d1e56dde |
| SHA256 | 60cde764a0d62e25159397c2e07682aff1947fa2946116a816d98838a5961adc |
| SHA512 | b27d382ac3839adfcd93a2d68aae5c8c929f0b99e9801b720ab5e845f370ad0dfb5a46c427d9b2bef0137d4c186082890114a7b80fdfc13d8bdc60f1434c619e |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x64_win64_global.dat
| MD5 | 6c8e86982cbf19d4b5e790a10dae19b6 |
| SHA1 | c14ffb37f23b03ce6080966aeb472e6cffbbdb51 |
| SHA256 | 72b0a5c3a161ad81e9c2ff347ad791fcaaf5fa422d9626a8a1753ed74dc6fdcb |
| SHA512 | 3b9901cfb373af1454604ff1f34a063556d8d92810d32cba8a9a86170e76748ec4113910e2ab3f833549efb3392ff53713e38a6252c45077e9c564431e829f39 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\hh
| MD5 | 7e8b1a3a8682a090f6410677a52b86ad |
| SHA1 | 5ade701d712c33dc05de7f0f060757252e55b510 |
| SHA256 | c31164030bf79b62726a18078208f2e7aec60b45ea2b4157f660099394ec579b |
| SHA512 | 44be814c82922153b4c78b16316367060a1d15b636479a752d59210088c0393e212d539722697272ad267c1a7d65b4ef905d3ea3ee7e5a0d30cc4b117ad01fe1 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\v1.sig
| MD5 | c8890d26adb2c15f99f30b756ea790d2 |
| SHA1 | 1c6e9879561baabc54163abe9a1fb29efea07404 |
| SHA256 | 7c66c5bcb996601c742a1def0e8be2d55a6548d8846957f366896c68d5099eac |
| SHA512 | f8050c88710b982d813474074785c6606f3b1ec9515382af10cc5f4d2f9b4ecbf1e2ab7850950d5df0f3784da79ee3c77d27d7b312d38a0a007cfd736c2dfb0a |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\SymErase.inf
| MD5 | 313c1a6013a1f1b55b01c77c00c873fb |
| SHA1 | a987f6382774cbaa962ab9f76abfeca7260a2fba |
| SHA256 | ee45e5aa9fc27d4f1563e3c84a186b4eca03b2ea469673145dcce77d1299f783 |
| SHA512 | 59b7cfb10b252359aec28194228a4f923e5b3f8ef306886d387c9e8f21325ac18a2c7687db285311cd24755ca7f011c591ef2af649c57daa78a04f045f965416 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\SymErase.cat
| MD5 | 9ed9db9fd315e4ed9ee57b7d61ac8983 |
| SHA1 | be9c83093cd79b1e505635dc9b99203a8bc2dfff |
| SHA256 | 51b7b8babd167ba9405c84dd8af6fc8c22d611977bc533836a2e19cdea40769e |
| SHA512 | 23c9861794955608340c92d9062fcbf46ec9f00dbce6d4c5dbd96c9c83a87457aeffa7fb39aff98f11937ec8a917f024de418674a0e46c9683a73b9f6c88f1d9 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\sds_engine_x86.dll
| MD5 | 5603ae66b0768b1123893cc25297e37b |
| SHA1 | a699fed2ff51c13612c4ff47d12f275eb2975edd |
| SHA256 | 88ad85e1f4df7158c3ff8f16a7820bd5bdf27ab93a23a45f7b58e07ad8cacfcf |
| SHA512 | 4af1be1b1ca2be73444bc8c5d4912d4c30b761d341aad77caee8aa223aa57d16822f849632ed9a4f204030b2bc4daff9318259e0fcdad4738aaef0bf6c44c019 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\definfo.dat
| MD5 | bae38bf329856bb41399af792e46d2e2 |
| SHA1 | 979bbe9081e1b19299b6b54a3bfe62e71050bd9b |
| SHA256 | 84bf4891a570a47a811b26fd28b6a33102861e0388d85b4de2a15a7deaac9fd3 |
| SHA512 | 5b1f1c3508a64fb41de6faf1ebaa674b8c23e23151be43ac52c9f23fe60cef5259d840def326bb466d00df7f4f56dc6e3db4f117282d1723fe8c30a44a827bc8 |
C:\ProgramData\NortonInstaller\SymTemp\Full\nav90fSDS.dis
| MD5 | 3df42c33afbf88c3a3053f9a1a38094e |
| SHA1 | c962e6a2583954848f64cd67f288a774dd885a78 |
| SHA256 | af7805f3976e3e65193d6eb50e4f5e71f5df042ef982e3cd5c7bb62eb05ed5e6 |
| SHA512 | 2c5a3e22138e5febd2723f55929fea381a805f89abf567e14beb8769941f2ef77a0294c649a555554c5ebae23225d38ea525040054e3dfeab3644cb5decff0e5 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\usage.dat
| MD5 | b511f0e08ca987b22fb627a9fdd7dcc2 |
| SHA1 | 7be87d80110eb74dfc4e9007e9fcffd606b20a2a |
| SHA256 | d544669b01878e214a11da9623aed7518e180dfcadbd13058eeabe3074f78995 |
| SHA512 | 63a21749706fda49150bddb591df834e0446975cc8b0fc71c3c47518bd36f9080f380270a05d4a6d74b279be75b95860b212c622d312a3800bfa83f204b6740d |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\DefUtDCD.dll
| MD5 | 62e3cce3479f0a46b5bdd06093aea9c7 |
| SHA1 | cf9061012104e844227601214e4079c8746dfb26 |
| SHA256 | 99d4b8db46f654157cdd9dea227e9e544c25ac52dd43e883dc8a30738e5c2ac3 |
| SHA512 | 17a536d9cbea0c3b30286da214153c5c2fba9cc53e78a7bcaa63681b0d22731863fec18c8a163f932ed750a574df97aa45df87140cdc9e3715dace19c0b5aef6 |
memory/2396-4142-0x000000000A340000-0x000000000A718000-memory.dmp
memory/2396-4153-0x000000000DC60000-0x000000000DCEC000-memory.dmp
memory/2396-4158-0x000000000F5D0000-0x0000000010396000-memory.dmp
memory/2396-4169-0x0000000001850000-0x000000000185F000-memory.dmp
memory/2396-4178-0x000000000DEC0000-0x000000000DFA4000-memory.dmp
memory/2396-4189-0x000000000E3B0000-0x000000000E71A000-memory.dmp
memory/2396-4200-0x0000000008A30000-0x0000000008A50000-memory.dmp
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\QBackup.dll
| MD5 | d352cdcb8b27baa0fc2c5daa1519b6b9 |
| SHA1 | 4fcafeb51eaac358c35244a4dbab32c336328b22 |
| SHA256 | 55e10ab6fe17ebeab33f8431a91bb7c1901167c106aca4eca8fc47afff1fcaeb |
| SHA512 | e19151fd8913665a433cb3a2a8fbb98c6bfb3be51d32be9596b0861504001ef32202189ef1c0d1be3a61bea963ad3db1af55655cd60adc726e389c62528817e7 |
C:\Program Files\Norton Security\Engine\22.20.5.39\nsWscSvc.exe
| MD5 | 958af49acb6475c5f1606929b7eae355 |
| SHA1 | 262d0b10dd97343a6fef1a555ef262d0d334504e |
| SHA256 | c64668ca267ef32f146f0eba1d6619199fbb671203e136120d0158c39148b367 |
| SHA512 | 107ea1dfe279b7d78fadc785458c8bb0eed95754d0f9090ce073fc1cd3c029193af3829ab9afd942653e13563f9b95c366ad6e33eaaa805cf109ecccceed483a |
C:\Program Files\Norton Security\Engine\22.20.5.39\NortonSecurity.exe
| MD5 | cf07c7129f59b71b1f98d9457d0763b2 |
| SHA1 | f620537f7511035e92df833e8433f2d61efc2159 |
| SHA256 | f73d3ebbd55166febbcf967cfcce3409a3fb06f1b8d7d8f29af8bb47a10a04a4 |
| SHA512 | 61dfc30a1457ccf5cc0f6ca0f5ab766c6d55bf17fd1ae8a6bb2f2693899ce2cf95ed88c86da655644aa66d3b017637dd017fcaacbdf16cb252b63fa3570a0b62 |
C:\Program Files\Norton Security\Engine\22.20.5.39\CoIEPlg.dll
| MD5 | 52b12f54f4b3d906206a32e3fd37f585 |
| SHA1 | 86150ec7ea8424b57227ee2754e439af22b4d057 |
| SHA256 | 8e90987ee5793894b22c405bf1ad7a110b849b2e7fa42e359f45c2c2a5b3e2f4 |
| SHA512 | 3326e5e0f297d6ace5cd9c6aa2ab3f9dcae3f29a9f96e1306feca9b1696cb4097e65b26cd4266d2b67fcba392d42f9bbaabb42c4696e4db519b8c658cb74aff6 |
C:\Program Files\Norton Security\Engine\22.20.5.39\buShell.dll
| MD5 | 91fe75f516daff2714124d6956278f21 |
| SHA1 | ae420562b9d8aa34408bf6e48d393d0c6e09c75e |
| SHA256 | 57fee10c35a3e58ea9b1b3e11e816dadeaddd139ff71b0e01a5dffa01c1b7842 |
| SHA512 | 8a58c5e292e55054490f7865451ee896721e0d2ddffec1cbdf95c56130c135a46f60f95b4944f912051c290f51e9124eb3a55b7ec821d2e0157cc826c7a79a40 |
C:\Program Files\Norton Security\Engine\22.20.5.39\MCUI32.exe
| MD5 | 33f9546331974ac2f6fd3a96c7b4c84e |
| SHA1 | bac515924793f632ec294b1a28ddaf9376b54f26 |
| SHA256 | 77a68cd16886ac2a4bdc033984a0b2f26b7d44b3d82b03e7cf0d2ca5fd83b28b |
| SHA512 | 2b4e4a59863e1c99f9b70f03bc597c5262c40a40e799bbcf237b2ce62e41456a7bb0a1b7a1c9ec9493ff688a6b0d786408bdcbc9ffedacf5b17d1ed55306bd33 |
C:\Program Files\Norton Security\Engine\22.20.5.39\Navw32.exe
| MD5 | d509cb895ce73b46301ab56dfcf557f9 |
| SHA1 | 97d1ef54fc0c1f6bee3fba784edfce39a3516e46 |
| SHA256 | 79595570af6b10f6468f4cf8b0fe4b51f137d2f88a99510ce9ba1eb34acdd712 |
| SHA512 | b3450a52cfeba4440ce03ae2cde5467d759c242de9d696474b30c9c34fd4c4a600ab2ae63460f4c47af47ea7cd12a170724a804cc3b53d912db8f0fa39022d57 |
C:\Program Files\Norton Security\Engine\22.20.5.39\WSCStub.exe
| MD5 | 55db7ecf9ea4b07d0f70a34451e1db78 |
| SHA1 | e2f0275e1cd931fa0d8502937657b6d093e65f6c |
| SHA256 | 4b4229c4b88f492045b42b9744b110b2e27a809b7823369fd436ab2903531474 |
| SHA512 | 11653268b9564f82982a5ae72c81909850330213c533134f5207ba4b2ad1f5e70093f1c4d78d86afa99487632c2a9ac5a12d8f317009fc2b34d4187af888fc66 |
C:\Program Files\Norton Security\Engine32\22.20.5.39\symamsi.dll
| MD5 | 65f004e38e4c0994908baef8b58ecab9 |
| SHA1 | 6f40d4e66a39fd63ce1c84576431bfa25c8923db |
| SHA256 | d48813aa3d98da7724219f767e2f207c7d2bfa9cf62d77d56893edbfb581483a |
| SHA512 | f9202b8a675781ab61c01912e9116b5f1bea210dd922d3e35c6fc8514bff4e2a110a7210e26329d5a51a7639d914c197450f3d60c1185f5308b5f6d6462ae09e |
C:\Users\Public\Desktop\desktop.ini
| MD5 | bbd26a1cdc40b7093c017f66f8805d00 |
| SHA1 | 02acbb9cff46d9e5ce785e7e15b87a6bdf9a04c4 |
| SHA256 | aa3e53057dc618d6808c6902611a1707a8850a05491932ba50f0bb95c02b26f8 |
| SHA512 | 987eeeff0af96061e07f762042751ab1881eab9f100c6acf720a3ac20974ba419cd02814c0e93d2f5b1ab24c8f10562c4f2922bb7214b0ae039994275f8fee1c |
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security\desktop.ini
| MD5 | 93959d73b9b2926409e0aee70bd54604 |
| SHA1 | f31be29ba79b970bb0b47642cb0a84ecdb9b37b4 |
| SHA256 | e48b9d7dc95965f99ccc21f60d6bc2e3f8bedaf1a8caae0bea56022d25f3e523 |
| SHA512 | fcc18459ecb932c370f18fc90d3d6f78bf9cd2f30a5bc3c4f942c26d8a99cc2ad70a9ecd57d2a13fa2a1329c117a1ecd982391ddf6433f7bcb26c505cce7ddcb |
C:\Users\Admin\AppData\Local\Temp\TEMP.^^^\SYMEVENT64x86.INF
| MD5 | 2bb85adf7ecceb53c47ca90d89bc34ec |
| SHA1 | d8b18617aa93a04c2e015544cb7c1add66841681 |
| SHA256 | a88ad23af2bf0c6d4eb84884676938bcc27134600b5356b417caa2bdca9c9b64 |
| SHA512 | f310b2e0fd702ef8b68c77d5ca0f33b495c4cc7a2ade609e66d7a19063e88a27c5b7b5b5fc5352024d5b0fe8db1694f3b262149a7d8881d4884e45ea82572d15 |
C:\Users\Admin\AppData\Local\Temp\TEMP.^^^\SYMEVENT64x86.SYS
| MD5 | 9d81a0036bcb7c946939afdd7d65ff5d |
| SHA1 | 53f53653ab9ef4cf24cfa080a183d27ce4c23e59 |
| SHA256 | c83824582801877166c4d094b29179d79c319cff6a93e86404e671896db57d27 |
| SHA512 | 7b2384df72285aaf7e1cb86a86d9e51037a3582fe32f55f00457e5b210c49adb6cbd6e50ec324a7569f64cf5b1bbcb7731056fb27e12ec516ab3555444f80ecd |
C:\Program Files\Norton Security\Engine\22.20.5.39\engcfg.dat
| MD5 | 924b82de0b134f0daeeb5e49c7d79b72 |
| SHA1 | 0a9312166f57a1bfd76964616ad9692db2542333 |
| SHA256 | 5cb49ef8730466fd3ab317c59f58c50450a0edc51749620cbcdb5c029c54bfa1 |
| SHA512 | 2d6b6537555d41c490dea1212c9066e4de02552cd1d9f69fa758f6a53476e909bef3dc2e43d82a3807fccace4e6f17ef3a7a22ad534be01577b6d6f97bceae05 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{67B43662-3EE2-4FC4-AAC2-5B1771BFBFBD}.dat
| MD5 | 4cb9511c94625e0f846e6c45115058c1 |
| SHA1 | f5076c69ae88a8fcc4e129936e13dcc722f5b5e3 |
| SHA256 | d3b22c4b8a1109464b8da5c842d609d17761af71e928e8925f969217cd15ddeb |
| SHA512 | bb4e21ac674c9b2675eada00d2ddbbe020b006cbbe014efafa9553f2e5c42bd7a8be1fb5ea4cae9fd3c3c31feff1d241904ba6b56c67b2a264ec28ffe2ab1574 |
C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSPP.dat
| MD5 | 0ee01aff4e8f2346b59a0bbe6a4b35ea |
| SHA1 | 27de4911f92aded2679308e875dd7f7267c00405 |
| SHA256 | 4d7ece78aa2e5b8c3af732c2973ac81fd9a00359c912d8efc4e6e0a8311b79a4 |
| SHA512 | e6d6b7a79a702f6ec9f5871e3adce69d24b30f3035a8e46872db9be65131e8b414e553d8df319cca4779a481af9b956ac46f83e8be0346f3e547959b849ada66 |
C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\wpCmpnt.loc
| MD5 | 27f944fa09e7d0e15ff49762f77ab720 |
| SHA1 | 25204b5ff4ddba7dd025d888c8090aa0bcc58ac9 |
| SHA256 | d6eea86abe82ab644159e23bbf4b32cf5159b8b9bd52ecf122d6b88fb20085f6 |
| SHA512 | 0e5e3f9217905e1d4f9f3ace09d7a5111944acf7fac2e6da9e749f23b760581347503f81135537a6f675a4d3861f5e59a4119b60ec96ba0cc646052f98b1fc74 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Framework\SpocSelfTune.dat
| MD5 | d00f58d5942b64f2befda9ecdade8c48 |
| SHA1 | 0059321f49d59b99809905c3837bd62a5c5e7357 |
| SHA256 | aee1dd5c3c01d56440df47d4f870fe0a3b0a19bc721dc99342a9fe7600cf0aec |
| SHA512 | 5e3e867e14030ba2f16b0d3d31f9bfcc131ae4a6e00950be62876771cd08568673dd9ebf1fe1b0637a3a26d7f4cd1ed0b39862886fc020e926745249e27d4632 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Webcam\wpDynam.dat
| MD5 | 9f4b640349a09e0f02a33f457037fc6a |
| SHA1 | c9b20442ce38921332d4e8f7dfb0b5528f8f4011 |
| SHA256 | 7569ea2d78bab87aba5516bfb53d9e7f27492a64333b202cb1c447e06633240b |
| SHA512 | 90ef9b6c302f92f3a2b6650590fdd8ded15dd6725890cdcfcffb84307e71209110be28a295fbdfaa1c7de204262f9fb7f41e730b784534866ec98e8cf19026ac |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Webcam\wpDfOpts.dat
| MD5 | aa90fba3766c7ed8735ccd02104704df |
| SHA1 | e693366ffecf01ac9931002f6310074dae9c583a |
| SHA256 | be5a07f37ea94c6849f9eddd73fd013725071542b20028d871fece168ac9e97f |
| SHA512 | fc326129358160c3d73da7100e3bc9024dda2ac5c9be7a549ea0ed6a0d3b7ad63c82a9d351a94f96dd4380886abb27538d33f33a4a80c5ffe78c8b338773f7a7 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\SymELAM\symelam.dat
| MD5 | c499f822f3fcb7a865e5f4d500464ca6 |
| SHA1 | 43805f074ad7ddebf53def34ce288f5986c06322 |
| SHA256 | ea9cd6272e0d6324835fc11472c8da3146c9aa33f95fde6680a05c41a7285cb1 |
| SHA512 | 5dcb3914325858530a927bf5b5c515765626270bbca9ee201a2dfcb77f2b8d1f827656e0d31d8e46ddc234f8224a59ce5ba31e57855cb8c74cde738dd504cbe7 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\SRTSP\SrtspSet.dat
| MD5 | f35276f0cfd1c9b06fdbb546d9fada7e |
| SHA1 | 086262b70fc0168dc748ad70eae438e3a9421379 |
| SHA256 | 45e75737a082175767a8d5a1bce29e8783faf8a00b585ab2e8a1955577282cad |
| SHA512 | 0faa1d1fbb5d299b60612d0412cfa06b9cab317c402c8ae7d2d3ded39993eecf8cdad6b2cbf3de382250aee4e47ec6e6f759752df7fd930f2f37fa135615d840 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\sef\sef_mountpoint.dat
| MD5 | 98cbe72d5716abcfd23601993f4a6664 |
| SHA1 | e1eda4e5ec5667fa784b258523a11900249474ff |
| SHA256 | 63b45b2bb571b5089b0252f4a49d7555bc858fcdc39ef6cc780dce6efab25aea |
| SHA512 | 462f03c3a5db8cc99da85f12befc3162ae89d3b4deecc590b34f15e02bb04a8502d74efb7666a6bb83a45cebe0d47d271914b96c207c9fcd67b76aa0cca15b73 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\SDSLuReg\{C9A7588E-6E84-4D60-AE7E-2F81221A72F0}.dat
| MD5 | 21356b2203449131dd2c9ee971b6b0ef |
| SHA1 | 9c843b9647afcd354671e2b66b1e2807b25ceda6 |
| SHA256 | e61e3370939c3258900548d8e5f19cbe40db9b02dda45901e0fc344e32d9c335 |
| SHA512 | 191d60a6b291378a68023a17258389a125915b8c2717a680171adf8b4b4e9e23efe5031dd9a792b93b0c6f8bcc67952c9bf8bcf6660510ff72c56d962fac6026 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\SDSLuReg\{B75D33B4-FACF-4753-A650-72F4E9D2F595}.dat
| MD5 | 112960e90ad0c53fcca4586e8d91ddd3 |
| SHA1 | 39a6eccef79ca7cad87e1c2d14552ceb35a9e13e |
| SHA256 | 3bd3b6813098b20c713b8dfe0f0001b7b8f8743be0b426ca0fd8a0661c1861b6 |
| SHA512 | ab1fa4c4b9a66c666a8932fb7d2efba6c92c6adcdd2c3bdfcbad6d1de6fb16697bd83d067070ddad98fb11e2472723d89df56bb3a7122cc93293469dcb6aeadc |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\NUM\Settings.dat
| MD5 | 570c51e55528303bf622b5c377651f6e |
| SHA1 | 4f48d288645aea810824d81702b107154cb9579c |
| SHA256 | ee267cbd36eb0a138440b0fffdbc22fda762e0baeb4b42591d7a806c2430076c |
| SHA512 | adf5fd455921163fe8120b97ac481b56a517ab18f1da84fb241c6a05cb38ab047d91c00b33632512b423fc6eab6f02e12d7e479afc1fe12c89b7c818272501da |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\NPC\Support.dat.bak
| MD5 | 6c3c31bad2533655b56d2f7650847bd0 |
| SHA1 | 9fc9a73a1eb44c727a341bbab0b535868df224fe |
| SHA256 | 5df61716e59b5969be018b69acde99806403db502d5329842664ad412873adea |
| SHA512 | 709d8d30e9f3ef23539261318aa3c589b588f79827a35c24805b478a52091cd00d68cc2533a5c725df362fc6dd3a4ebcdd86c9976617df040d493912b5924ba7 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\NPC\Settings.dat
| MD5 | 3e97d7584150ef8e14febdee341330a5 |
| SHA1 | ee156350922169cfdbe0388e8a095a09e6c67191 |
| SHA256 | f12c172d5c794a018f53ae94224da877eeb2cacd359b374784cbb8900d30db6b |
| SHA512 | 12ac5b760f128b1deb35f312bd00da8890188fc020ee479fb66ff1292e15c2b011ee58d220ca099dd5e58a2cadf2f7bc30dfa086021ef909a3dcbb7c70aa1fee |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\NPC\InstOpts.dat.bak
| MD5 | d50aa01ec96d5aadad367f6b9546e887 |
| SHA1 | ccba22c8e208a7cf1746ea78d07164cc3f826f7d |
| SHA256 | 079d8ecbbabdc914aa95a69f48a7778e985902fc8b5dc1490f0e25fafa0c1a2a |
| SHA512 | ee8f6762794fdfb942c5aff1e6b9f79813b775354151dd7e4f5d1d452f3a05c3d61abcebcc34e09732e6a6030583b6e187ccc62c566603178ca66ca4f0e5cd41 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Lue\LueDyn.dat
| MD5 | 7206411672c0d6355acf3a7624e353b8 |
| SHA1 | e9889bc302b626afc6bdba20b42a22df63b17736 |
| SHA256 | 5129edae9d35c0d643e8b7793c25de0e28981bd7f1c8d75818f54c2563fe72f8 |
| SHA512 | ee0ea3698812ae72acff6acf397c78317f0bbd4d4bb47666e8d3481ed1917ff814a88a0cd870c2d5ad571986e33880ad16de87e5ea3f75e82159e52cf15cfbf4 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\itbLURegBranding\{D4F4CC32-7A41-4684-AE57-41E59E9B4503}.dat.bak
| MD5 | af869f2c019d1d1242f521b4d75581e4 |
| SHA1 | 0f2ad0bca48187c85848ea885842dd3e66f24008 |
| SHA256 | aa6ebe524ced05fdea2c68b6f2410f2c291cb189a82da9618bb1f1b09da0f106 |
| SHA512 | c9bd4e24a9263bffc833d93181bdfcbd065c492c4301f2f1b3d7f2fdf4411844529d4c4242097745be795184a95bbf0a4006cf7ea9196624fa696265b0d7dbc3 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\IRON\IronReg.dat
| MD5 | ad0aa9b93045ce097acfd76878d611b0 |
| SHA1 | 49bb5cde455ad509e39255930c4ddf9eaf3751e3 |
| SHA256 | 433e866481d4422b4365a28316bf808a6daa3f9ee36c2d203b4d76d1b5feea4c |
| SHA512 | 775a38e92a215b2b5171c4c1e6b08206f86bce1f3fa399cbcc4298d4e72e0a88f71f29f8f02455c9ce1b0c9228f6ee5f363cf6598a2a4182acb0a8a4bf57fda3 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\IPUA\ipua.dat
| MD5 | 9cb77091504fe293c7e92531b8699aba |
| SHA1 | ff16d1c2f886fe071786361615fad3b172a6f489 |
| SHA256 | 24086249e80b8686672a11cc8d77cf950e2facd841f6d828bea68ceec5e1e3e2 |
| SHA512 | 9dffe1ace99d1c4082f8fdcf282b528ac9b78e417714e1f1bd583175021f711aee5671ff99332fa686e85e11657d9e84baa4a5c59d5035d37b79aa711cd0e40c |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Framework\oxygen.dat
| MD5 | 5291e9cdcd178469f5dd71aff8ead149 |
| SHA1 | 3e15e9880b97769c4a953705efa551b873d22815 |
| SHA256 | bb4b1128ccd91b2658a586a7edf39548e86651a72ed5c99ed1fe96e4e14fcb94 |
| SHA512 | c3608f044765e070a56e8d0d26e91e5701e684c18319f94e22370101813f333118e73047a9dd93a0feef67514e08969ccaa9a83b8972c79035c160d71f9d856c |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Framework\O2Reg.dat.bak
| MD5 | fde27d6a677d8afb7b0c31005e2fa2b8 |
| SHA1 | 548f8e8e1365bddaff91ba9c8055f405773b45d9 |
| SHA256 | 3dde5fc1d74f02fec0a9116ef337dbeb97720907fd5a84c60f21061153ee9801 |
| SHA512 | 338a5271684b3d93fa59263d9f1a599122d200d8c01d28afc25622e952b7c21932ef43a1baa9704c9fe156c5fef960e5ddd9839520fedbb7e0549d8d46897247 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Framework\EvtSvc2.DAT
| MD5 | e71bcf6682cd673ffe15ef2a0a4703b9 |
| SHA1 | d981c580a48d32a8d98701f7e413d9f71c56c570 |
| SHA256 | 76172e5429b7f5e972246e0787e1e43d7f13ac777a298524e1aebda684a99cf8 |
| SHA512 | da3c3af76c9790a532c33572a9bea8b619d24484eb46819878b7b8ff887c868d80f7d9a16f42580505c24b89fec2cdee5aa75d87e1d6fd7be2ff87108f022a6c |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\ErrMgmt\SQReg.dat.bak
| MD5 | 46387835eb3b95154ce9669de74556dc |
| SHA1 | 0be1c0143a42293338f1ebb2b0307b9a3fa28f50 |
| SHA256 | b05714268ef700e8986b7b13b8fbdb3f3a6024414ef4675456a714d1953a44db |
| SHA512 | 7e57c43ba652ce6172831a302d386b24203620393678633107a3cd676f5bd184e6abd165e6b1faac54c54a6b04f369225710e7e6940cdd9af198dd3eec6fcc57 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\ErrMgmt\SQClient.dat
| MD5 | 11b852013a3bcdd948e8162bfa69fa35 |
| SHA1 | 332c9c0356dde513e5bbdd65748028ba6317c85e |
| SHA256 | 71e31a517ae97c933d318548399f7b6ae59dc4d53056f5a0080723906ab84303 |
| SHA512 | dc3133bb2eff994e6b04459abd55f8ef2b9e3ee2f1ff2d1720960f4b8eb3b7507cbdcaa987da4de9a081bc79da29c777df4ac4fadba7965bf759e1d826a0fa13 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\diStRptr\diStRptr.dat
| MD5 | b429e9c0614993983dc9d03b902f7824 |
| SHA1 | 6484d754c3cd17ed1765f731a08b8f63d7066170 |
| SHA256 | d10d7abada5b02d0d1c69003c6d30c08304ffbe33e8ff2ee9a68450e3e9dfd80 |
| SHA512 | 6ed618ce0ec27384ccf44a27bf5beeddd8ddc0bc93ad8bc7361883d1919517ea7951323ddda8cf201fe66d299e129a85c5e37972f33193d0af5f2e1336b7679d |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\diMaster\service.dat.bak
| MD5 | f1238d44b50122b26f0d6928d87d4e10 |
| SHA1 | 1788f6f0560795283b48b336c15ee127986e4896 |
| SHA256 | 6becd50dcebc1fbf3880c1fb1cb31583200c310e238d69cde26f7725bdba3455 |
| SHA512 | 96daa5d75ce056ed0db0898515bab8b626c8ffaf0f5095a938fd621857fa7d7d024ba47de276f1e2996241ac4b14fec0f572cd3428c08fe85332833b59eb6ffa |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Connections\connectn.dat
| MD5 | 64809b9ea7326e3369a3c90d1c710e2b |
| SHA1 | 4cd60d10d9c1199030d8c5466d369513f8a72314 |
| SHA256 | 81bb66f9dd1b151e7ba0170f27280e95ad1dd34d0a07350ba2f2ced818c2152f |
| SHA512 | a474044b068e920beddbc8956f4803b1e5d3da0abbf9829ed7699ead510bfa7a0905a75b9cbbec300fc9a8d937e34aaef75cfc2be2f5bb3e53f37bb11b4a7861 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\STIC\stic.dat
| MD5 | ee42eb59aa0072c88a42e00992fb027f |
| SHA1 | 7693fd837772c092ec9cea9621cde8add22e0bde |
| SHA256 | b8f9e0a2cd016074cc8c28d37f86cee70243008f69d432f3759c35b306dc5172 |
| SHA512 | 3ea88145130226daee2c94b8af51fb09de786ec9de74f45958251d9378ee264ea8aefd53bdffe0c54cd272e662a0317da3c547a90f68fa59f215d4f20005578c |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\SBSDKEng.dat
| MD5 | 39fdef779392acadd3c8f54785a069e1 |
| SHA1 | 0748921492d5d3a9e38e75042a090be0e893b369 |
| SHA256 | eb225cacc91a39071790aebe8f777bf2534e5a7867b0b65711bf33c8ae06fdad |
| SHA512 | 726263cac8f2435536e7a3f22deccfcdd1b3b9a172834134350c6934b128646173cc92ca559e4db70aa1c2493ac9b8f20c887258db721306d08ad0981ff3b309 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\EMPxyOpt.dat
| MD5 | f0cf556bcf70ec3e15292c87b098255e |
| SHA1 | c6b5210a51075170241fc54065daf92e981572a6 |
| SHA256 | f1ca57ea07fd546640771b6b594699b2534a9350120f4df4f07cf2fafb67f4c8 |
| SHA512 | b557e199b9d21ca3e39efa89c9c1ae8f09af43ef7516c64ce307093af325e5787a3ec3fcea2a295d7ca556815527b59cfa13617df1a815945c7d3651cd25ee64 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\ccSetMgr\settings_22.20.5.39.dat
| MD5 | 4f4b2b2338fee7ee6f2cc37b69cd24ce |
| SHA1 | fc07c33714188514b20f7d4dea046d5b0c15ad04 |
| SHA256 | 2c25257c713961b6ece48936298a69812192db6cc373ba2bafebe1c07fdc5408 |
| SHA512 | 68a3e241253bc0e44a7962d51e0448521061a49b9e5e986d8480bbbe7536126fb721b3ba492a19ba33cd3d7c429daab3c4d79d7e6d728d43aca10d7b7214da6a |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\ccJobMgr\JobMgr.dat.bak
| MD5 | 4c6a1770fda81d0f9f6c72de7e8399f1 |
| SHA1 | ebfc12ab006ae32de4538a83a389a44b3398c07e |
| SHA256 | 2bf60bd7f76e7e9e75ce677fca3c613800573e8c8c5bf824a106cf5a9263d67d |
| SHA512 | 8d71ebd064b8c098a1939edf2292f64d51c38f82886b0cbb239f1888701f2284a0de6136bebd9efe110e47c0901ae040015c5b8f7cc99ed461798138d03c5e70 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\ccGLog\ccGenericLog.dat
| MD5 | 0b287b133199d2a824c5dff1e21bdcdb |
| SHA1 | 70ab0cb31344a7d334c8183dc1637975ca374bc0 |
| SHA256 | 26d43d87d73f71e0841aed49c773d2cd4249eb90e3b7711504f4aee614182c23 |
| SHA512 | 61d195104bc231088a6c172d678284752afa84b4a799c3af5911ed2301d48e8e4c9c9dc083eccb9e731c646b2f0a60ca411a6a60550fbe8a427f836f77f18087 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\ccGEvt\Global\LM2.dat
| MD5 | 384f362201f5895d45737eb305f14edc |
| SHA1 | ea776e146fbfc4184ef176356ba652b0113e15c2 |
| SHA256 | b0ef3d35ce498a680ca82ac1c8cb211e5e8da9cafb5330d03a27f07d7067f42e |
| SHA512 | ef87e83dee6f07fe0924133bf49edf32699337b8959ab9bb30800d57a2f6fb9a7be2f8ef9397ff9aff34552d6f7a2ff4a3f6b3ea65c4f87bb14881149e1ff964 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\ClientSDK\csdkset.dat
| MD5 | 32ddccef892f86ee3fb9894bd1216946 |
| SHA1 | d964799ec821e77f45f7cb22d3348c67ba3ebad9 |
| SHA256 | 8724ee536db27a79e6d645507b2ffaf214fb0009d9147bc30797a9b9d7145a11 |
| SHA512 | 029640adc4df1905c07fa07bc5378477ae870c41453cfa7e78c071d9fbba3c1b18746f2664db0af4e70ee929926be283eb63e2ad4340125fd2bc21c706ed96c7 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\BASH\SPSettg.dat
| MD5 | b949656d6262782afd63ccdb796fbb4e |
| SHA1 | 91be26e25b2a4ba2670ff9036d69d6561a5a3603 |
| SHA256 | 38e34b93f546c63292cc4c8e56122aca2771b2c5408f20cc4b4c170d4d5e681f |
| SHA512 | 8147fc682eda3c598b387c5b3fe8c52d5d09d674f58297f4976c230e407f9badbc7974df747fd50495f9d4940831f96e309ae5197225033c54fb3392b3843697 |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\BASH\ShdSettg.dat
| MD5 | 835634166a36255146d4068fbcf0992b |
| SHA1 | 83987432803b71817d208d6dfe350f7db4a5e975 |
| SHA256 | 5d1abbd1af970a1d775064d26030a45abded10b35ddf123f769305d2924fece6 |
| SHA512 | b094102a2f496683a94380f0c75fec55db0743b1d3f701b93ba34647501c12e11adc66ff94c828bde9c93e257ac53a54505389977361b6e341a0d005f97051ad |
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\BASH\BASHIntl.000
| MD5 | f44c3a2e5aa21a93e6344b278c737a9d |
| SHA1 | 09e7d4ed6105288d230ff4191fe8003ff7a75045 |
| SHA256 | fdddd95db286f94e633877789b91b6d73c67bd35b6e0e4d1c97a9812184ea39c |
| SHA512 | 2f117c792fb309ea0ad2920bca7aedb939bcd1d18afd039400dce7dff84fd06c4038660931dc2bc14aff6f02095f9b927d0dd9a546357168e6230aa56a19a954 |
C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\buUI.loc
| MD5 | 09912cdf341d2b762c50e32527d6a8ff |
| SHA1 | d3a6219c1cf0019778a85422c58094411fb65e62 |
| SHA256 | 75ccaee69302ea9ba47c707629f01ad23e1370e94c3135e74307e8b5a17d7340 |
| SHA512 | 75a449c94b8bb50b21e8ef9f299a529f7edaafda75c32886ccb733577f0229980ec438ab034fdfe4459ec2405ed17c6e92cfb477c682e5153d6d4066522645e0 |
C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\buProv.loc
| MD5 | 34e7162d6d92f063b8ed7ed31bd1c442 |
| SHA1 | d697001c99864c30d64ff204a329f7350f6e35aa |
| SHA256 | 2b70736bc1e93600d9173cc80dc00ed2c918141a054991d181a214ca631ebf44 |
| SHA512 | dd4801a706f47d3de94a3f07aa24f511e26748cb821c27717f07614a4176ec2065e117d9566ace21eb8161fa5f73f2d20828aa27abf34cc336c2f2417e35ff6f |
C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\AVPreScn.loc
| MD5 | d246fb8e3bd7560cd3922c34783a367d |
| SHA1 | a86397becb4bad220ff2ac14ae109c042ea89b50 |
| SHA256 | 99128396504c13879f3cfed3c5dffa4d04219fee225c0eb1830e493209484ff7 |
| SHA512 | bd1561ddcd57e0cf5db610977b778c70cb288013fc71a2c367b5233a58c057cc77dc41858fb7b4f9ba9dd2ee1012ddd5f864f7c4e6593ecc5c84deef5e3133d6 |
C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\ARestore.loc
| MD5 | d4a236d3c07b20622781de39cd11ec42 |
| SHA1 | cb6a9f3657bbbd8ffbfaf29536eb990000866984 |
| SHA256 | 04a15c435e3b78b7e77dcb45a63f7e679539d31ef56923b96487a7e9ba421d57 |
| SHA512 | 874e11bf5a4b7fc3816121001b54cbaa91c997190893f1413d5a0b8f1e38230a0d869ca184c0034d894b7dfd9033ec32222dea0757923cf1348757523dfd122e |
C:\Program Files\Norton Security\Engine\22.20.5.39\{F8D07955-00ED-4093-88AA-0A0F69AFD83C}.dat
| MD5 | 8c2e626c98b7237b4928f8445e8698d4 |
| SHA1 | a27ea9905771f6c43071b6ad3deefa70a10e347d |
| SHA256 | d5f229a462371aec97589afe260a280f8fa1c6d26f47aa550e4388788cc20458 |
| SHA512 | b4209517287a853d6c86c46f38ee04d8823d20fd41c2a22afa7f3a987d8fae9a485d3dd848b7940d7000742ac6b2f013f7ee0c72cba47fbe3b4870244ee215cd |
C:\Program Files\Norton Security\Engine\22.20.5.39\{71B3DD3A-BC1F-40cc-A74F-C0C30DFCE7D5}.dat
| MD5 | 6d0238db39ec5904a63735af901b3374 |
| SHA1 | eed2c7deab02ef1123b71b275bcd4f0ad5af3570 |
| SHA256 | f55fb0a44821723865deff81f029e14a70699043c1280ce43ad0a193154cd2aa |
| SHA512 | 9631a8c1d50898eccc30079fe187e020e50462ca27bc5e2f625386e3889e30848a16637e44fad42d530cdf777dc5e825110873cabf2fd775a690a4597b2747f1 |
C:\Program Files\Norton Security\Engine\22.20.5.39\{5EF648B7-A381-4238-8206-257C5565BB70}.dat
| MD5 | 8288cab4645d2c4868a85d79407aa0f8 |
| SHA1 | 343efd72e3a5785c62a87608aaafa13b60433847 |
| SHA256 | a00b7dce9e789dfdef68b500d338803eb7c3dd3241a93f7f8b356b30f95c6708 |
| SHA512 | b6c65c362535e0ecfbc563c8a85f92ffcddfb9507f9f3136fd79edfa29a98abffac1d8ab701211f8600dc10d4ccbac0e8f5d3f5d80ee0d8bae89779373dc815d |
C:\Program Files\Norton Security\Engine\22.20.5.39\{57CD7B31-861B-46be-8EBD-AED7EDF28F76}.dat
| MD5 | 13a2fbcf08ab16dba19774e86f2487fe |
| SHA1 | 143635b0a049d1de8ccd447a50560ae872af69b0 |
| SHA256 | a41ef7a68d74c0764740db8eb859af4aaa74a7d778b629ff704e478018271ffa |
| SHA512 | db4e14c27df51379e3484134da0ff8bb12f8069c38e5c96e7eddb9af9edce4bf3d6e7334f3a1d23bd0b846e7d50b79fcef82c679d82759208cb56e54795405be |
C:\Program Files\Norton Security\Engine\22.20.5.39\{50B092DE-40D5-4724-971B-D3D90E9EE987}.dat
| MD5 | d24996d9b421d7fabfc75bf848877e78 |
| SHA1 | 8db190f4d789b0cba0dda949bf0a9c7f6c9ed0bd |
| SHA256 | 6ef1001bf14af51cad27356bd2aba22caeeef993c3c98a5e9595e1e902e6d133 |
| SHA512 | 9098723d1346620b731fc354146b3e188bb632938414e3346bef81c84f9a07e13b77e1da3ea1a77b82188790b71a0e692028a8cb4ee8726ce909bcfc08aff695 |
C:\Program Files\Norton Security\Engine\22.20.5.39\{40ED6507-1D53-468B-A585-732E631DAAC6}.dat
| MD5 | 50316d685d2595d450ddb7696fa28332 |
| SHA1 | 5883ffc5680a4bad239b12b7befe5e1ae3013d19 |
| SHA256 | 3a286176c65479546b04480ce90e11c14cafaf443ba92a73aef724d6d555af65 |
| SHA512 | 3d8f1ecd7de6e18ceb8340dc4cf0d2b6f1694f4ac6f79d2c216e81f2d0ee6645fe9dc9019f6cefd26e454e9b444088b722043eb332cffecc72649c46afcfe851 |
C:\Program Files\Norton Security\Engine\22.20.5.39\{2A85E335-7417-424d-AD89-31DED1689794}.dat
| MD5 | a9dc0e3303859f6ac262cb0e3efc2678 |
| SHA1 | 8735eed6e7b1cfaee9834e7a3bfb39558a597038 |
| SHA256 | c8dbccdf3895b7f1bbccb73d00096fafc2e7f9c1f2d3228e16394d458f4d734e |
| SHA512 | 956f75c2fc22a50ff7c258925d0b17776d4d410a54868a036a3d1497c8158b8b481d6563220b788ab553ec26161a62ddaa36a2d0c01f18a8fe8831d7ba615ea0 |
C:\Program Files\Norton Security\Engine\22.20.5.39\SymNetDrv\LOCALCONFIG_ORG.dat
| MD5 | a9f464e2fa7f89a06ac798094cb5f668 |
| SHA1 | dbeb0695d7b37d49722229490ae83179948d48d1 |
| SHA256 | 6423ea9629f84d9da12d4022ba1eb4bee85899507c096692941a729fea7cde52 |
| SHA512 | fbe7b81acec26ad519359a289628001789bcc5bb11a373e0403577d0cad16bd7e3a9f26d1d23d58732edebfb230e757277271eb7e829bd39751ac275018b2435 |
C:\Program Files\Norton Security\Engine\22.20.5.39\service.dat
| MD5 | 6c4756a797a79c15bc8ac201befad4e4 |
| SHA1 | 1011ba8f125b8ce8b3e1b08f6069328e3f771f2e |
| SHA256 | ec8f02348fcc2a754a956441525d7ba57988b840a6ce196c56cd5ca1b37a7bdc |
| SHA512 | 1838b1f0fa7191792b8cb12b4b91a22476f250fabd9e13e2a6dcb434b62ce5550479e288dc177c9784f7e1506e42c11727fd20ef5bf108954a26763a2f8bfe76 |
C:\Program Files\Norton Security\Engine\22.20.5.39\SCD.dat
| MD5 | 71006c463f58f267ad38523679075fe1 |
| SHA1 | 453d827a6afd5efd59ccc75257f9a75a570d1677 |
| SHA256 | a52821da1af9ff7c894e15651b20d1ca45fed0612cdaffd2c02bfb2e7519d2bc |
| SHA512 | df40883f616cde614c987e0978d8a30af1117548723ec835c9dc5e0f59b48e78806320cf96b15be0b79c19b41457a6c1077f01a8846f11591146f4005a0638fe |
C:\Program Files\Norton Security\Engine\22.20.5.39\Jobs\jobSch64.dat
| MD5 | 9265a86d0e3bd88372bb182f87047f6f |
| SHA1 | 671871d8eed680294dedb6eb276631aceac35095 |
| SHA256 | c761637bc2ae38a033fce70c1f7c32bba913ac63be4cd5e0d8687c283f45fae0 |
| SHA512 | 8d5e464764ef070547e3421dd2bfcb5dc68d5cf15fcdd4fbd3811ac29b5ec9f4f674025cc8be4354b14db27a66bb32b5d45a954a82acd14181328887ea3df1dc |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{FF3D8359-103B-1175-AD36-D479E4BBE107}.dat
| MD5 | f7849d2f7398341fdcc0385918dd59d3 |
| SHA1 | 7fd94740ee1c7e807f763c3f3ea40f7e29605c46 |
| SHA256 | abcc8be18530e1715dfd1345cc382054813be309ad4c128a2e9718599b48ea40 |
| SHA512 | 74d8dde4bf7088bd926074c72d59f947fdb51aae731f886bacd4dc3ab3fa75e50723b3305a2070d5b6eed6bd4b52d443e7b3e6b6205f2ec53524d0147afbbbfe |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{FA37C427-F099-4DFF-B5C6-28A299C56690}.dat
| MD5 | 7d9229b37f27260fdd2ff8d7489cf544 |
| SHA1 | 48be2b1cfa81d6ec314deff5657c5da404fbf37a |
| SHA256 | 3e520e6ac8a47cb1c17711145b25386f3f70b6ca08655eab0594497e461df23c |
| SHA512 | 252d1ad2322c5fe85e83494e051b6f3c19fa1cba422590ab3109aad4802965f543cd925285f78857f6a8f23a734005e777fb10015938cadbacf43467a1e7fb7e |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{F3A2BCE2-2747-495A-B4C7-248AF7A57B3A}.dat
| MD5 | 59448e7a9acac5a6749392a4c4f312a3 |
| SHA1 | 55182e4160a764b3ad76067290fe80abda8d7ebf |
| SHA256 | d2d9fb78991a93495b647be558e2eb0af16c55640da4b0dbde95470d6308b9db |
| SHA512 | b15f583a7f734c92886af0dd36c172a6dcf76295920f55395a6b2027979dd7a479b275fae625bcc25aedab0955846eb9a24491051a55e92fffb80ab01f2452b3 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{D49714FD-DF22-4124-9FC2-D059ACABE7E1}.dat
| MD5 | cb9b34706f57a6fe7e7e532f1a43c7f6 |
| SHA1 | f7fc41af9aaba55b7c383d810c4f18f21fc0e2cb |
| SHA256 | 4d4d5fa6835117fbc55993178d532bc9d6c9511f8d088ff1461b1e48769d7c5a |
| SHA512 | b10d15e303ea083674907a6b2810491c460b3a5c719ab3e5d49eeeebff2bdf6d31e90e9855699cdd7231a11b0fb4c97c1a2573d8c33740216614e6a16b7d63a9 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{D49714FD-BEEF-4124-9FC2-D059ACABE7E1}.dat
| MD5 | de86d7e5c764b32f2f8ff376de5fa602 |
| SHA1 | 0f86251e7769fe9e7027a4fae7d722d7b84ca743 |
| SHA256 | 65bd70ab7a670d8eb73ac68bb397bb000362880fb542a296326efe68384d84af |
| SHA512 | 1a586eae73818b6496dff9c710c31c7857cabefb7960f5d0c8e03fb67cc650dbc3ab5e918fd0979e309e3ff18a64c17a9a3ded73146ada59f45356498924b3f3 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{D418C996-433A-42df-8D3C-E1A24C0AD3C0}.dat
| MD5 | f5ee89c922aeff73308732a6af1c541c |
| SHA1 | d5903f83cbde9ca71a2438d6ff4f3295accf28f8 |
| SHA256 | 09796a06c30d929aaab6a5cee8d5fc89be0b98f8da7c11df244042a13812e1f6 |
| SHA512 | 71f3dbe8e0b944d728618511df7d0b8d6980675ae2d06e632f3fba473312defebfb734e114bd2b1e5cd1acd56fa0a043b79d40428b7b5504b17e19672d371c8c |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{D0C837B5-DB92-4093-A4E5-EB36B2471F1B}.dat
| MD5 | db714c05698dd05d4347ed63299b689e |
| SHA1 | 2f7fb343b5057ad4e73868525a61f05fc007309a |
| SHA256 | e4f97e7b03218a39d3130fc8b02c1acdd4bd1eb57b97132c8eff16b09405dae4 |
| SHA512 | 6aab5d11c3f1b9aa98874de76616bdc140980d2a149ebd08e5b9b5903e51a4cb6bdd8b58110b434e7c3ef65c5f3c5c87e3e9ba544463d56493cba3c8a0df7a3b |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{CB661793-BEEF-4B03-82DE-B98587153C5D}.dat
| MD5 | d4e442dac79cf6c23d4e37f870cfafee |
| SHA1 | 7cc085ffe9f4e01817ab1970e422da6d46127ede |
| SHA256 | a2d4e0f23762bcc8e7df7aff49e0b9baadfacbbcb3e46cd55df1ed5c2217b0fe |
| SHA512 | 7c72adc6db41cd21de7a28ee90c6d16bb9896196df8b82a04a8b9ece26511ed42766bfb7e4f3005c56c984dd64f1d2ba680f5523422e432112ec211dbfa1f28c |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{CB661793-44BE-4B03-82DE-B98587153C5D}.dat
| MD5 | 8eaa9dc4a9fc5a7ad2739e0973948c70 |
| SHA1 | c3dba92dae389a67f6d062299c0408aafb3cdf70 |
| SHA256 | f7c152d7a610d8136b663506922f9b212012f3fdb13064f02253e4c56042870e |
| SHA512 | 2310e63e1696721b597883ddaae03207ed3bcb4ac3e4d29aa9ee1c58ddd56423b5bbd5469c5cd9b95fbed9214604365f2c7a7bbd79464fe7da11c13f9219ecd0 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{B4B9C8CB-ED87-45E9-BB9E-1DE6E30F1077}.dat
| MD5 | 13320bc01d5333caf5bccf034a8f5025 |
| SHA1 | f977dec76775ba54e5dc755cb6dbd3fc04bd6be0 |
| SHA256 | 9df6c4d99ddebf1cc221b7fa02de3695737210ca4ea05fffca374c9417cf5f47 |
| SHA512 | e3eb4f9ec9602e88487591712e32581bb36e7a018e9c155fb000c197d9a960c987095b3a0db5ef649cdc8d5d1b35cee3096ee4af1091ad2f6be34d44c93bf536 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{AB4E41CF-74BC-4158-8636-D0C5DD9618FC}.dat
| MD5 | 3ac57b7e068c229fb5c04938d9d42639 |
| SHA1 | 24a98fcce7c2f84a667e01ae39e09a1e1dee797a |
| SHA256 | 15bbe4667e943cb51e5abfa51cdc6ce6ec8d24a56a92d20c690d49774f0a4c8a |
| SHA512 | ded1fd768d017680b63f1ebfc6ede9ac880624cecebd76973f8d76330c9822c3bbe9771bea7db8286b4eab175461921c8a7a4e81c67b66e631a2c323395ff127 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{A96E24EE-101F-4f7f-887C-30680DCFF3E4}.dat
| MD5 | b841f782e4439407fe5d00384cff4092 |
| SHA1 | 25146f11bf889ff3a09fa2ac2778d8c895b2ab38 |
| SHA256 | 3624cbe041483751903516a68c21fc362cae19ff1e61499e74f01014de203c99 |
| SHA512 | d505e3b233241228dbf95a2d16b43138f52108e2d48c0e433b6396cc66761f11b5ec340f2bf53a25b65fba00bdbaa265c5a3281c8a5a7631d3ec5fc2cea3eec4 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{A715275D-3313-4FB6-993A-CF4F15765011}.dat
| MD5 | 3d3be9c544064f468cf56a1a26b7643f |
| SHA1 | 2c6634fd4407d235348736c9a914e3a80ac399ea |
| SHA256 | 2d1080f6c1e5e4759bc17c910d9a2b5c4ed75a77013a63b17619bad8311edad2 |
| SHA512 | ae723df152b274c0f0075401c183144632d95885b8c66f154c9c586067a1b3000407125b913ab8d3da14784739663eb35aabd1f652a2e4ab77eea4a0c8d9a7d5 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{A6AC491F-0711-4D5A-8612-F085B49B1AE1}.dat
| MD5 | c31c952d7283ba80d7eb7581748ffafe |
| SHA1 | 6b335e249b0edd8026d00f0ee8c5dd1a7efb84a6 |
| SHA256 | 7c3228a91102e3b0ef0bd59168cc39ffa12a41c884098802b9492aed25ae6513 |
| SHA512 | 386d428fff6c01d717caa139fccd266492c5323e34d1fc38fe8dda8b742c257b625caccc3dada8f9bc500b9d644caa74e6afb5da56661729dcea13ace26fd209 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{A49CDE8C-9A92-470B-B555-585A24FAAD7A}.dat
| MD5 | 410366a97a42202f2c9dd7a9d2d85b9f |
| SHA1 | 4eac3f134d7bb4604ef8d4d59d28d64834c7375c |
| SHA256 | 16af63f27e16d0fd1992fe05ae4db4b42681c2f0bba90f9ced206e0f386df101 |
| SHA512 | 79334dacd70645ad6f2558ed382aa9cfd9fcb36526a2aba8281b6d2c2ba668e36bd88ac954e401b995b96a4ce41fabd865431299924567a37df2ffc0d395419a |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{A2278560-9BD2-4D36-9E8A-D965BFDB9505}.dat
| MD5 | cc402f10f40e461a6bcba07a5c6ef81b |
| SHA1 | 53045dada5f9e6f7c9af61ee22ba6548e007c602 |
| SHA256 | e2a1c797c4268ef43d87640feaf0fad96d1915f862c602afbbf9c65f108ce072 |
| SHA512 | 93374e276929271c0bb120220ae35e68f7289b960a7bbdb4a7bc1ab323a165d5985ae8fbe5bd59f84928468f5ad16622fffd20a6928d622dd906b8472f955e05 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{8C74B7A4-DBA5-4DD7-8E0A-4A41EDDD7ED0}.dat
| MD5 | 13b4256b276160372ac33b016e29db1c |
| SHA1 | 1441408acce0696adb012540f55ee8a071eb1c3f |
| SHA256 | 052a9be5ee9f113bdd2356a50bc6da230d256ececaf226e6a00ff3be861dedb3 |
| SHA512 | b89772f69735efea0b76c279ca15f41bbb54477931994b76fa8fd4e9388113e7e8be45fb8d325e06a2d1e236df880a63d96a08d2cd41e369561edd64b35ee280 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{8B18D486-43EC-47B6-8B4C-636E59C42EE3}.dat
| MD5 | 8345e609732860eca8680e6370cc3a13 |
| SHA1 | 1f1b11b936fe4bfff55b53e3b52e0b10ae8d838c |
| SHA256 | 74779e73101fe24effdfef91fbf9f01b323f1247c7f913bc15cdf8d69e837a8a |
| SHA512 | 5a911f321ee987ef45bad24f3b2044d074c7539cbd7407814e5b2f10cadf08ecf0146df7fc9870a4525422618b026ad48fed387245366c3dec87e1e5802289ed |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{8A219305-C89F-4D89-9448-9CEEC5520E9F}.dat
| MD5 | 73006f78d2a302d723f9b0c4a69b9bdd |
| SHA1 | fc98f2ac68876f1c3f3a2c6d9ff527df614d8c1d |
| SHA256 | dc16b867a3a98e43ff4a828fe64e6a612ced963c66e6b342b5143a1fabc0a70d |
| SHA512 | 96e63efa56608015b44e7d312af295e5424e7ce95fe72e4e213010f1453142a38af0c970db74ae122973728078e86e2dc754812b02bf65c4d0011428851a95c7 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{7C4B77E7-D5E4-4AE6-B8D1-7A5E6FFB2B38}.dat
| MD5 | 2013bb4f5f9baf0f43e175ddfb01b58a |
| SHA1 | 8ae3d0cf616a290b274bc9f8c34d5740a1573934 |
| SHA256 | e381749a631464028255c44a0e05c6c1815c29f6b35a90108f4664953acf8dbf |
| SHA512 | 002cf63f2ff81732836e69671a56d650a55df07aec04eacf52e8131a66fb660ce6ed6b694235b9f8fd3dab23bedadbcb493f6fe52231da34b14e7065e99d55fa |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{6E3396BD-C6A6-4f0f-9254-267F9058FEC4}.dat
| MD5 | eb605af6232af2ac22ab85892fdf9bcf |
| SHA1 | 401be69485ca52acfebd2e590bc5769f449d7ec6 |
| SHA256 | bf803cc38bf26e092ea83318b435db0e7c9ef20145ef094ef1a0641ff93a7b0f |
| SHA512 | 4322b08348853938188f0c88969e0fef7a61bd6f0fa500160a7fbe85cd53c9a8840e0e2d6322603cb018bde951fcde882b9ea781fe010c90f3b409bef54453ee |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{69EDD4E1-116E-4773-A0AC-C59945720C2A}.dat
| MD5 | cc8e3388d569111095f38ef85a61bc20 |
| SHA1 | d92673f94a08b4e16dbf931ea5466094e86a7df2 |
| SHA256 | 4d2f48bbf65a61702c72796e2e8411c4b74c3946e65a6441f8ec5c96c3223ea7 |
| SHA512 | a8486deeb7b87cd6304306fa2425a64934bc34a4f42563cc6743fccbfe96a0f63c763c9cfa32d255933e0c09c415acf3265d337003dc80a5319b66462b11daf6 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{691538C6-034F-4d32-9A14-A53B8BAF68AF}.dat
| MD5 | 20bfff8d5d17f7f4ada3dd3c20921239 |
| SHA1 | f0b4e723fc7c662be15fe0122514055c86fe3d53 |
| SHA256 | 251d7b72a3e9e2980e7b0b471ebcdcaf0bbb8c3b519127ca451b5963978c28f3 |
| SHA512 | d85f2a7291edd0fcbdd41a06be55cbad861571968555b79553641a6c2a37fbe9d64f0a9a3fb32d84472baabae36737cb44263617708962bc9ff60b4e4dad27bc |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{65190544-26C3-43a4-A78A-694964901607}.dat
| MD5 | 774b668a6f62bef4e92a90ac3f2c7d15 |
| SHA1 | e2b7abe416c8a164754ba6376e6d068de5e0e3e1 |
| SHA256 | 42dae94424c4cd5897921af216dd2fabe8928986ca04af389dbeab711f1cb986 |
| SHA512 | 8c2f0a900ad9e4645b129790c8b0ae53017db22b7a16b6bdbf927ad7891d199bb97c8589581a76ba48eebc4d2b7568b232bdf9538e987e276e6c6951fea28e23 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{64A1EE4A-948D-4bd0-A3E6-9D6BF96DF72A}.dat
| MD5 | 9c200aad619a825b92d1320979882a78 |
| SHA1 | 2d55bbb638a5ee4c263255c784717924c72f154f |
| SHA256 | 5772a3ddae21db4b51228c823337390aca1e590fda44ec3751b8616834d66522 |
| SHA512 | 0f4be3c98d98aab171e083fcfe235fe6c743fd906915933be337c5444e55a250d76455d67ce06198da8540a27c88881531c70f8f33dc797f1cc6c045d551fc40 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{5CB6BB08-5D93-4D3A-8A7F-D94EAFE5FF9B}.dat
| MD5 | 69160b919bfd8c15ab864e8eab58cc77 |
| SHA1 | ac8d84f6f5f9f923e6921add9a3005c048e60781 |
| SHA256 | 5b1a957d428f91f822f22814bf04531e13c0649240adc252de657576f54ed870 |
| SHA512 | 3940916e20b5eac6cb0cb5b914765fa2765d6bea504e0f3426e3732fb4d7435d7c0a1533ec543ee03e6381c2606134e727f3d3481b764751e47e72ffe582de33 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{59414FA6-C6D4-4c78-A752-B677CBDD3C6B}.dat
| MD5 | f5d08a7d03de69fd14d0f295eb0160d9 |
| SHA1 | 77f517bdfe82fdf25e017a414ef51c407647a4f0 |
| SHA256 | 7968cb8117863f208123c0a0f51a01b620b802e7c8170ba443609781cddb6d02 |
| SHA512 | d64fb6ff8674aa297ac60e0e48203b171f9666377da8d65c8982d2fb3ecbca1534329a02ad570f24f44245aab9ac9ba616962e0b20365d40f46efbaeb70c4fa0 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{591D2F72-BEEF-4E6D-AEE1-2C53200DE57E}.dat
| MD5 | 41b34d80248345ecfef3d425036314ea |
| SHA1 | 47c0fd42800819096b3d7b237ad24052f2e76386 |
| SHA256 | 5fc4e8a9f7e557230c750c68c2975863840db533dddd1886dd95256c6f4ce18f |
| SHA512 | d820728d231e114c8786840a890fc3a5a8dc6a8b02c124463a50ecd2e5f3328587ca1763459e793a90e1e7427c5e75739266fae3f2adb0a612da72547926a2c7 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{591D2F72-6BF6-4E6D-AEE1-2C53200DE57E}.dat
| MD5 | dce8a85483c7b68645b13eaa248b10f6 |
| SHA1 | 27b9a3f8424a968801ec8e95089f3b443994d707 |
| SHA256 | 05bed5013819e6fbcdd82dc07640c11884edf3bcda6b2aa9cf06cdff6153817e |
| SHA512 | 0f3f1e94893ee461273c04b94f2fb9a86c5def594508fc8653dd1785931f48592dcbc59ac6d17db97947b0611669336148967e25db0512c03370e0e3c1e04b99 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{5779E169-C4E2-4487-B4B1-55A24863F4C6}.dat
| MD5 | cb28553962df6ec5217ecb07b3a7246a |
| SHA1 | a4859c50f2cf9a536805d59e0a91e3fc577b8d55 |
| SHA256 | c96843423e80595ce1fb5017ea9957585dbd669ca3df0c9f00ffe61708600f1e |
| SHA512 | 2407a751142ccc54d3527b5d68080e2707aeb556b918982c1f2a306191f004528e6bc5cd4e5c1b35353796b42fab83abed92efddec8cd2e0fb37a83949db88c6 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{511C2222-DEFD-22EE-B154-4A6A546B9794}.dat
| MD5 | e0b043af83aa045b711c90a9ca513fba |
| SHA1 | 14e708e0b30b9c1dbbececf57b47f4e4c4313bd1 |
| SHA256 | 36a8c4aa49f857cb1868418b6bb0b07f3d43d4894de8b1947427e160aa7bbf37 |
| SHA512 | 7be1e67f2cc42e5939ec8cbda2104a7c1552cd3b99c2e50e0b2efb316d3f3e8723417241c6076a05f68edc8cc42d044456f164ab17e2e0b7988df5527b731074 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{4950EA76-039D-4E6F-B978-0CF4102C0BF7}.dat
| MD5 | aeeec20c2767927d467420598f619383 |
| SHA1 | 9b3aff68382c1bb96314b9e90e9039d40702fe1f |
| SHA256 | f864be766003f4bfcafd45681cfab55614a5d6b28e834ad28c04a4b806a3abad |
| SHA512 | 36dbb033d9701ee1307b019f03e15ff22170fb1113f25792253e34843f0040c8a8a9beea7346636f73b85b6ecd8f9f37976563da412090e3c32e02802d690263 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{48A0544E-21D1-461E-8D9B-D407B7D19A36}.dat
| MD5 | 0e17af80e64d08b4b757a08229b32140 |
| SHA1 | 2b766e0055a3c038eb0f12663f6f3e1dda7ea5f1 |
| SHA256 | 255ba743384dbba5f4c34baa38e0831506b52493639e878bc3c1b985d4d4d0f6 |
| SHA512 | 18e8cb7040b1737645d3a3a4e355bd4368dcb323ea885c2550678447dd92577a785ea98f8b44fda6d5cb825285b23721cd2a5ec9f390bdb71016aa18ece2f60b |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{467F09AD-3351-4102-A03B-1A874FF00FA0}.dat
| MD5 | ffb05681a3bdbd8c3d40edaa72e14081 |
| SHA1 | e0ad7296febb424319f59cb79668e8ebdc998e6e |
| SHA256 | 54a95c38702f7de0f65500d38b7042ad7a3623c2010fe41dccb23a6bc70bfe84 |
| SHA512 | 0bf3dfc4509202e36be7d755f9890573e54cd4247c3eb6c9427c0d10f70f9d418153cd1bdeb3106194cfc1f101f8ca150050a7fe2c1388db05b00172a48cdd94 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{41E7872E-BEEF-4C2E-A1BA-F5394C2D9BCD}.dat
| MD5 | 1ba83c4c9e0c679da2f7b7d797959634 |
| SHA1 | 0f8696332124b756f2da977244206c600d8e43a0 |
| SHA256 | 1d02064975904bd2de16a962f1448c3264d92461752191481e3868c651f6f391 |
| SHA512 | 9358dd2a42b299f6c598b5173d7d94d5c24520084ab3ce1eae54fc494667eecd46f2e2a604d58788ef28637f412b81ca88bb9c59114a57bb3dbe62833d6412f9 |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{41E7872E-060A-4C2E-A1BA-F5394C2D9BCD}.dat
| MD5 | 9314d6f74b2c7de0603648ad06f90dcf |
| SHA1 | 94fc4af8864af6d4ea3e1c1d24d087d6db2f7d2d |
| SHA256 | a96237ccd2db8a5a5acd37b86481f63649d5fa0cdd9157c41c49b68abd3cd6ba |
| SHA512 | 693754cfc14cde4543e7d481711906131f2115e413729630878778e84dd93df0ad275b6f81381b4258ffd6d029506420e5338beda1a0e35a339a0fbd36d474ca |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{347CEFBF-1263-465B-A4A7-240AC9B2D296}.dat
| MD5 | 60a5f15c06a0cdc1347a685cb0670ceb |
| SHA1 | 51d33c89543156170402a1857b3191d6681d7539 |
| SHA256 | d36719de87ee1c392c17224aee4a43aa3c351e6bcea00d2f2c144be90b5a5230 |
| SHA512 | 6f78793b62f838bf959c01882581f6b6b84939688c7d94468bb5379221be1d854f1ea350f5263280323fd04efc4aa50527feb6d2070f66c2d93e81e75f031b2b |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{1634767C-F253-49C4-AA20-F35FFDBB25B8}.dat
| MD5 | 1a80684a6495a9e75ecb71d9b7d617f2 |
| SHA1 | 144b67f5b29d51cc090246a5766f26a2a555f665 |
| SHA256 | e8bed03a715c3976ceb46975af7764fab2b458aef65e2fd7105ec2a07f53c5e6 |
| SHA512 | c7a4f0c4abfd92d6b23c684837bf509ba6127dc10997de537995726e94bbee005455a3450aab8ffd20354938bb86f6d2a146b2886a322372c5173bdaaf146c4c |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{1634767C-BEEF-49C4-AA20-F35FFDBB25B8}.dat
| MD5 | db2544b51f9cf188b5d18775d751f761 |
| SHA1 | bdb49d43012c25282ee4fcd9e7d2843e65d71c60 |
| SHA256 | 4352f5a2a5aaf46def6ba501937497923fcd2bfecf61371f012387eddcbb1801 |
| SHA512 | b1238842861825abd8a39eb2a616c43bd8fe3c65d0e7a65ac2d1219d3d0b28ce3cad3ecb50ef04424c578451356580468f3f2ca58d35281bae4698268bdf1e6b |
C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{0693F93A-DEFD-22EE-B444-87D156D89594}.dat
| MD5 | 4e56ca35ea51350aa3e259051bce3301 |
| SHA1 | c887dc6f4c76fe43a6ab5e77440793ffe0f30138 |
| SHA256 | 218e412260ac2283b9494cb8465787470307c3dfa0e165a67677441f23a9d3ed |
| SHA512 | df55cf54481701efd50cf7cf0a32cffbd244b8db2ebce0451041dd0264489dc81a18dcd106cb180ed406f84a25cdc6af2d1eed39649bde3b74f30dcab0b37e6e |
C:\Program Files\Norton Security\Engine\22.20.5.39\Iron.dat
| MD5 | 04612c29736f2fdc431783d0a7d06d6a |
| SHA1 | 6b04800b5971b4ef481e4ad1ba5ee308da330a27 |
| SHA256 | a08dc4e55066f70e7d123e459e877e619b2cf700a77ca193113a9b8391d460e4 |
| SHA512 | f1ba2777a8daa4a335d2e4eefbf9858ad46898fef52873e43b4104c64a2f4fe826a5ac6d04874515fb3e4d7b4732a08abf1186f551c885cc0f11b5ddcbafc322 |
C:\Program Files\Norton Security\Engine\22.20.5.39\DuPtUpRg.dat
| MD5 | fc8d13138b23444831343d631183ddf3 |
| SHA1 | 6f8190b5de6dd414f7548ab2dbf2b89fc0dcc26a |
| SHA256 | 454666bd948bd5fc18a8b4502eadfea308480623f5d39759c9dad7830f941a34 |
| SHA512 | d1de7c84bb106a520a37135c3aab913afdca9a141ffa859f19047f838ae6606669445079781432a636158d0405be30d29dafbe8689fb580c6c01f23af3cbc40a |
C:\Program Files\Norton Security\Engine\22.20.5.39\csdkcfg.dat
| MD5 | 3aae5a24fa95ebcdb570f011fcce75a2 |
| SHA1 | b1d67f610403d0e5f56f5b50a4dde3e558902e00 |
| SHA256 | 00db893151b71aea769184d2e26700480a3b927e83063eecb7bb2be92e3809a5 |
| SHA512 | e13aa7ba8cc372d0ecff0696e57bd332eea9fd5d491ac4dcaa368680defb9aa059a8b7d9d91365cf16f40ce8da5e331a2806badb09d9055a396095daa17df49a |
C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\NCO_UrlReputation_Submission_{9295F219-594F-4b70-ABF0-EE15F4D089CA}.dat
| MD5 | 1c58979767df7953961ddd0240520f90 |
| SHA1 | 56b3803cb922e8c25eec74cae3c2b9fb577dce7a |
| SHA256 | ba2ca0ac5aeff77adb142c64b7637af2893b266d5757ec0f50d625ad47f3cb93 |
| SHA512 | 6b2d2ea33957e505f1f21aae794e4ea4a30d30a16d901a4bd414b05e4aa6ca6c846a55331ceb9d959a3e3f384c0282c09559271ad087b2f4c9b67f789d30fec8 |
C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\NCO_ScamInsightPII_Submission_{6FDA2963-4031-423A-BF17-BF31F49132D0}.dat
| MD5 | 0e2b4f79744d4a0a8f6f750075946940 |
| SHA1 | 90bee0648647f1273add0817d822f6b8c1b6f2f2 |
| SHA256 | 2445020ad044441c95110304b9d821b63333094d8c8812c230793b335f550f55 |
| SHA512 | 194af25ae6e711986a4bfcf834d7731f86a6bfadf5879fa63de38df944e1e0bb56fe0e7912174b17bd08c3437bb52a872408bb1c16332f61cb8bbb74134c4e0c |
C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\NCO_SafeWeb_Submission_{ABEAAEED-8FFC-4E11-A619-DFAB4F4CD152}.dat
| MD5 | 1abfe18eb9705a8a1fedcd42afa6acf7 |
| SHA1 | cfd26880249cb15993fe20527a25cc56bd0fdfd7 |
| SHA256 | 93eca3040866f84b9e64e006e84fea9e423d74389fde980fb6ea2225506943a0 |
| SHA512 | 0d7edb0868a6f9d0f225ec36789fa07da3318dbea90c6bc19d306cfb2dc6ca51594f73fcc8330b68ee8be5737ff8db58fc6291f6f6cf49ecdde9a52137ee94a7 |
C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\MrClean_Submission_{D352E420-9E86-4a7f-826C-A8782662B246}.dat
| MD5 | dc58b3fb796ee700e5d7c244f90aa134 |
| SHA1 | d05fdadf417ecd8994de1f98b4339b9af3a4e56e |
| SHA256 | 67e4d99c2d0efebea1afb4d881c35004c1cba0bbe7c69d06cf37db9e476c1cb1 |
| SHA512 | e385e695209b94049c6bc1b455d9c6ed3613294d8067022920b136152b8839a4d6519d30848d3aefb2b8d3f6d351bf77fa3e609193e07fede7f024d6f1ccc055 |
C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\DIS_Submission_{DE95C124-EAC6-4320-90F3-BEDD2F026AA5}.dat
| MD5 | 4d77f4fcc6aa03572f7315a8abc809d4 |
| SHA1 | ed420101d61b4166441398c59020a1ae09755e62 |
| SHA256 | 97dc71b00a88044349e8870f8f9ad304de95e20e71c1da2e79867fdc62e7f577 |
| SHA512 | 933f7532da93d11e68d8a68de2e4db9c8f70d7dea765b9277fb64b0f24703d7f76d5d69940ebd31ff1f22cd6e52616a5dd76133990411980472f10107e79a84c |
C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\DIS_Ping_{DE95C124-EAC6-4320-90F3-BEDD2F026AA5}.dat
| MD5 | 28c64f2755675054a16c6c6f15d0f04f |
| SHA1 | 6fba26803fbb58884d511785aafb34d0953761a2 |
| SHA256 | 8e9be022d3b0ed73529a78b970fcd6436ce866f61bef1ab37a8a6130a67dfc5a |
| SHA512 | 020745397171bf5e79ec5094dad59ab9603309388552584f057e4ef307e3a4fb2367d6a018d149d0bcbee19d8a1cc888bae2ef9b6174305fc3183c697b2b24df |
C:\Program Files\Norton Security\Engine\22.20.5.39\ccGLog\ccGLog.dat
| MD5 | 86dc3842fed084366fbf50d96d372ec4 |
| SHA1 | 9ce332b55ca8021eed8a86216a37c2e29c4fd9dd |
| SHA256 | 6d494124539175e2d1cdde2bf39a768ba7392bf9b9362810ebc7ea9e30e324b6 |
| SHA512 | 958d1bdedbe7e60a1d3af4f5418ddfdf8ad4a620234b9b99bdd0c1be0972508fae53a0b11bcd77668c25c45f9187afc1123af8566b944e481347f51d1dc3c314 |
C:\Program Files\Norton Security\Engine\22.20.5.39\ccGEvt\Global\LM.dat
| MD5 | 8a47c433cf3b17b2fedafe898bbfae7a |
| SHA1 | 70213b4d386db99a35769369bb33cc387a57fb75 |
| SHA256 | b9ca90be094c9ad25b78b2a435a6fa553bfc946d5f395c226c37929839756f8e |
| SHA512 | e29a96d5b2bbfb440d2abe09ec8ee4c323b624c8f65126b76065275263796a84b50481b83b6b89115486ef67400ff7fad4070735c36d1f486d4d2b8b38d51817 |
C:\Program Files\Norton Security\Branding\22.20.5.39\09\01\eula_spanish.html
| MD5 | 5bc92974a6c0bfef63cd70dcc2c97597 |
| SHA1 | d231aa8dbd3eab5357369dd02f598d60ed5d0795 |
| SHA256 | ae16e89a6d31875c408c0c1fcb497e50fb425b8880bdcf562556d66a7f10832a |
| SHA512 | 3a16cb8c7e9b00c22353df49612ee1871bf626ecb12fbe8460e4a7399b43217799f7058e8a928314422f8f49403eb99a998170e266d555865dc951bba9f44e53 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\ThirdParty.mft
| MD5 | a7863cb847e91753ad084fb1c4ff023c |
| SHA1 | 5d63eef4776a0b6edac20be4e8af0331a03520ce |
| SHA256 | 0d7a8fadf1533867505f5b0338de09d774036648b054fa1cc04b882225041239 |
| SHA512 | e323ecad18fa3c2f60a3cd2671d2dad2b69848bc343409427194cc12ab41e2a6524ad1d94951d97c325d8cc5ab9f4fe6d236f0705c94f8d97c25f1ea38714211 |
C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe
| MD5 | a3db288207ee3c0f697815a6921dce80 |
| SHA1 | 8d054f95300b212da75a1f51a2751bd0bd872e2e |
| SHA256 | ee9e057fdbea7bd3ed562ce5101bb2b3a78b6bfbd3490c0cb31dd75625a6895b |
| SHA512 | 3ff4e0d4cbc964a61575ac3469c55b149d04cd193053c7e9d6abfe18f1bd981b79fcc68ef55a81a00da10ba09039dfde568f3327422a2f946e6d08d1b86821b5 |