Malware Analysis Report

2025-01-18 21:25

Sample ID 240323-h924caee78
Target N360-ESD-22.20.5.39-EN.exe
SHA256 bb25d8e75f97ec0040a30361fade5f5fb17cb282502928f5e4344b7193490974
Tags
adware discovery persistence stealer
score
8/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
8/10

SHA256

bb25d8e75f97ec0040a30361fade5f5fb17cb282502928f5e4344b7193490974

Threat Level: Likely malicious

The file N360-ESD-22.20.5.39-EN.exe was found to be: Likely malicious.

Malicious Activity Summary

adware discovery persistence stealer

Drops file in Drivers directory

Adds Run key to start application

Installs/modifies Browser Helper Object

Enumerates connected drives

Drops desktop.ini file(s)

Checks computer location settings

Drops file in System32 directory

Executes dropped EXE

Drops file in Program Files directory

Loads dropped DLL

Registers COM server for autorun

Checks installed software on the system

Enumerates physical storage devices

Suspicious use of FindShellTrayWindow

Suspicious use of SetWindowsHookEx

Suspicious use of SendNotifyMessage

Suspicious behavior: EnumeratesProcesses

Modifies Internet Explorer settings

Modifies registry class

Modifies system certificate store

Suspicious use of AdjustPrivilegeToken

Uses Task Scheduler COM API

Suspicious use of WriteProcessMemory

Suspicious behavior: LoadsDriver

Modifies data under HKEY_USERS

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-03-23 07:27

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-03-23 07:27

Reported

2024-03-23 07:30

Platform

win10v2004-20231215-es

Max time kernel

124s

Max time network

129s

Command Line

"C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe"

Signatures

Drops file in Drivers directory

Description Indicator Process Target
File created C:\Windows\System32\drivers\NGCx64\1614050.027\SymNet64.inf C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\SymELAM.sys C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\ccSetx64.inf C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\iron.inf C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\srtsp64.inf C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\iron.cat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\symnet64.cat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\srtsp64.cat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\symELAM.inf C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\wpCtrlDrv.inf C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\system32\Drivers\SYMEVENT64x86.INF C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\ccSetx64.cat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\srtspx64.inf C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\srtspx64.sys C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\system32\Drivers\SYMEVENT64x86.CAT C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\srtspx64.cat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\SymVTcer.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\SymEFASI64.sys C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\isolate.ini C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\SymEFASI64.cat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\ccSetx64.sys C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\IRONx64.sys C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\system32\Drivers\SYMEVENT64x86.SYS C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\wpCtrlDrv.cat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\srtsp64.sys C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\symefasi64.inf C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\SymELAM64.cat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\symnets.sys C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Windows\System32\drivers\NGCx64\1614050.027\wpCtrlDrv.sys C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Adds Run key to start application

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\NGC = "\"C:\\PROGRA~2\\NORTON~1\\{0C55C~1\\NGC\\562C4DD5\\22205~1.39\\InstStub.exe\" /RELAUNCH /RUNONCE /NOPROMPT /PRODID NGC" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNONCE\NGC C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\NGC = "\"C:\\PROGRA~2\\NORTON~1\\{0C55C~1\\NGC\\562C4DD5\\22205~1.39\\InstStub.exe\" /RELAUNCH /RUNONCE /PRODID NGC" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\NGC\MEDIA = "C:\\Users\\Admin\\AppData\\Local\\Temp\\N360-ESD-22.20.5.39-EN.exe" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key deleted \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\NGC C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Drops desktop.ini file(s)

Description Indicator Process Target
File opened for modification C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security\desktop.ini C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Users\Public\Desktop\desktop.ini C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Enumerates connected drives

Description Indicator Process Target
File opened (read-only) \??\F: C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Installs/modifies Browser Helper Object

stealer adware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\NoExplorer = "1" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\ = "Norton Password Manager" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\NoExplorer = "1" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\ = "Norton Password Manager" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Checks computer location settings

Description Indicator Process Target
Key value queried \REGISTRY\USER\S-1-5-21-1497073144-2389943819-3385106915-1000\Control Panel\International\Geo\Nation C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Drops file in System32 directory

Description Indicator Process Target
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe N/A
File opened for modification C:\Windows\System32\CatRoot2\dberr.txt C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe N/A

Checks installed software on the system

discovery

Drops file in Program Files directory

Description Indicator Process Target
File created C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\cp3_x86_win32_af.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\ERASER.grd C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\IPSDefs\20200717.500\scrx64ff.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\SymNetDrv\CONFIG_ORG.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\STICDefs\20190827.078\scd.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\MUI\22.20.5.39\images\diFVal.dll C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\FLDgHost.exe C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\tcdefs.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\Engine\22.20.5.39\{2A85E335-7417-424d-AD89-31DED1689794}.dat.bak C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\started.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\SPManifests\srt.spm C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\ccScanW.dll C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\virscan1.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\BASHDefs\20200717.004\BPEMeta.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\fr.pak.info C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\sk.pak.info C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{41E7872E-BEEF-4C2E-A1BA-F5394C2D9BCD}.dat.bak C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\01\01\InsBrand.loc C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\0D\01\InsBrand.loc C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\SPManifests\MsgCntr.spm C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{6E3396BD-C6A6-4f0f-9254-267F9058FEC4}.dat.bak C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\MUI\22.20.5.39\IMAGES\icon_toast_met_risk_32x32.png C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\BASHDefs\20200717.004\BPERun.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\sr.pak C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\isPwd.dll C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\SymRedir.dll C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\umcat_01.db C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\NSSSHRO.loc C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\BASHDefs\20200717.004\CATALOG.DAT C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\08\01\InsMUI.loc C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\SPManifests\ironx64.grd C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSPP.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\buShell.dll C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\tinfl.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\hlinks C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{B4B9C8CB-ED87-45E9-BB9E-1DE6E30F1077}.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\MUI\langver.map C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\typerdefs.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\ja.pak.info C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\esrdef.bin C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\Engine\22.20.5.39\ccGEvt\Global\LM.dat.bak C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\Engine\22.20.5.39\{40ED6507-1D53-468B-A585-732E631DAAC6}.dat.bak C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\BASHDefs\20200717.004\bhscdp.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\STICDefs\hlinks C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{1634767C-BEEF-49C4-AA20-F35FFDBB25B8}.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\AV.loc C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\esrdef.bin C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\el.pak.info C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\sv.pak C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\IPSDefs\20200717.500\CATALOG.DAT C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\IPSDefs\20200717.500\vulnxsd.z C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\ccJobMgr.dll C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\20240322.007\eeCtrl64.sys C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\PatchUI.loc C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\SPManifests\Scandium.sig C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\SPManifests\srt.grd C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\fwMCPlug.dll C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\en-GB.pak C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Branding\fallback.dat C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File opened for modification C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\16\02 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\ca.pak.info C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\DuLuCbk.dll C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\he.pak C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
File created C:\Program Files\Norton Security\Engine\22.20.5.39\ccSvc.dll C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Executes dropped EXE

Description Indicator Process Target
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe N/A
N/A N/A C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe N/A

Loads dropped DLL

Description Indicator Process Target
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A N/A N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe N/A
N/A N/A C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
N/A N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Registers COM server for autorun

persistence
Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{09D32393-10DA-4eca-91AA-AD11C69DB966}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{09D32393-10DA-4eca-91AA-AD11C69DB966}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0579E89F-E364-4a3d-A9CB-90262B2B7E1C}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\MsouPlug.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\coIEPlg.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\InprocServer32\ = "\"C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\NavShExt.dll\"" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B59987EA-25FE-44B4-8802-E4DE67073D8C}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0579E89F-E364-4a3d-A9CB-90262B2B7E1C}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B59987EA-25FE-44B4-8802-E4DE67073D8C}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\uiWNSNotificationApp.exe" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{0579E89F-E364-4a3d-A9CB-90262B2B7E1C}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F13C7C55-93E5-48ca-A5E5-E6564089CAB0}\LocalServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F13C7C55-93E5-48ca-A5E5-E6564089CAB0}\LocalServer32\ThreadingModel = "Free" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\symamsi.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F13C7C55-93E5-48ca-A5E5-E6564089CAB0}\LocalServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\SymDgnHc.exe" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\Software\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\coIEPlg.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B59987EA-25FE-44B4-8802-E4DE67073D8C}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{09D32393-10DA-4eca-91AA-AD11C69DB966}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\McStatus.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Enumerates physical storage devices

Modifies Internet Explorer settings

adware spyware
Description Indicator Process Target
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Toolbar C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0C55C096-0F1D-4F28-AAA2-85EF591126E7} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Policy = "3" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\AppPath = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0579E89F-E364-4a3d-A9CB-90262B2B7E1C}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B59987EA-25FE-44B4-8802-E4DE67073D8C}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} = "Norton Toolbar" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{4433A54A-1AC8-432F-90FC-85F045CF383C}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{0579E89F-E364-4a3d-A9CB-90262B2B7E1C} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{476D0EA3-80F9-48B5-B70B-05E677C9C148} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{2272AE7A-0C30-48E1-91DF-F9E666276C0C} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{476D0EA3-80F9-48B5-B70B-05E677C9C148} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\Toolbar\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} = "Norton Toolbar" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{4433A54A-1AC8-432F-90FC-85F045CF383C} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{4433A54A-1AC8-432F-90FC-85F045CF383C}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{2272AE7A-0C30-48E1-91DF-F9E666276C0C} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\AppName = "symerr.exe" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{4433A54A-1AC8-432F-90FC-85F045CF383C} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Internet Explorer\ActiveX Compatibility\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\Compatibility Flags = "1024" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{B59987EA-25FE-44B4-8802-E4DE67073D8C} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Modifies data under HKEY_USERS

Description Indicator Process Target
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10" C:\Windows\system32\LogonUI.exe N/A
Key created \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "162" C:\Windows\system32\LogonUI.exe N/A
Set value (data) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00 C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040" C:\Windows\system32\LogonUI.exe N/A
Set value (int) \REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1" C:\Windows\system32\LogonUI.exe N/A

Modifies registry class

Description Indicator Process Target
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AA091DCE-F3CA-4ECC-A18D-B1F1871A4690}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DEE5EE11-10B4-4531-B306-1C3546BD5F42}\ProxyStubClsid C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C2EF276A-4D20-44E9-B9D2-29F129EB826B}\1.0\FLAGS C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\AppID\ccSvcHst.exe\AppID = "{F08D7223-7183-414e-BBA2-E2327EEBBB24}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F08D7223-7183-414e-BBA2-E2327EEBBB24}\AppID = "{F08D7223-7183-414e-BBA2-E2327EEBBB24}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BackupShell.OverlayPending\CLSID C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C884BB9C-39DE-43A1-8480-B7E2FC5C77C6}\ProxyStubClsid C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\ = "Norton Password Manager" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{37651A5F-5423-4134-9FCF-C279ABC26E82}\1.0\0 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3A5C2370-FF1E-4C2B-9796-E2FA2FF1D605}\ = "IOverlayExcluded" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{7102C629-439D-4CE9-A2FA-911713E8E8C2} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\VersionIndependentProgID\ = "MsouPlug.OutlookPlug" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\BackupShell.OverlayPending\CurVer\ = "BackupShell.OverlayPending.1" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BackupShell.OverlayProtected\CLSID C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\Programmable\data = "1" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\VersionIndependentProgID C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\VersionIndependentProgID\ = "BackupShell.OverlayPending" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DEE5EE11-10B4-4531-B306-1C3546BD5F42}\TypeLib C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C2EF276A-4D20-44E9-B9D2-29F129EB826B}\1.0\0\ = "BackupShell 1.0 Type Library" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\ = "SymAmsiProvider" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F13C7C55-93E5-48ca-A5E5-E6564089CAB0}\LocalServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\SymDgnHc.exe" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{DD5F89EE-9C85-4D42-B366-919387500641}\1.0\HELPDIR\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\File\ShellEx C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\BUContextMenu\ = "{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{8F6A750A-637E-43FE-8E8C-CD8CC52AFCF0}\ = "IOverlayProtected" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AFB13A90-F68F-4313-8BA2-6A68E0BF304D}\TypeLib\ = "{C2EF276A-4D20-44E9-B9D2-29F129EB826B}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\TypeLib C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\Programmable\data = "1" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{43DCE0DD-22BA-4CE1-A467-94CDD1FBE80C}\ = "IBackupSetsShellFolderImpl" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{12C26F0C-01D9-4EE7-B7C1-24753904B09E}\LocalServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\ = "OverlayProtected Class" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{7102C629-439D-4CE9-A2FA-911713E8E8C2}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F0E3A5D7-80C7-4228-90FE-61DF01C417A5} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}\InprocServer32\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\coIEPlg.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\ = "OutlookPlug Class" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Applications\NortonSecurity.exe C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BackupShell.BUContextMenu C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{C884BB9C-39DE-43A1-8480-B7E2FC5C77C6}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C2EF276A-4D20-44E9-B9D2-29F129EB826B}\1.0\0\win32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{A9CC9305-0A30-4015-92A0-0711EE24E720}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{2272AE7A-0C30-48E1-91DF-F9E666276C0C}\InprocServer32 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{96237786-C89D-4504-837A-A3BA2C29524D}\InProcServer32\ThreadingModel = "Both" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AFB13A90-F68F-4313-8BA2-6A68E0BF304D} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}\ = "IEContextMenu Class" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\BackupShell.OverlayPending.1 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB}\TypeLib\ = "{C2EF276A-4D20-44E9-B9D2-29F129EB826B}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B69B6ACA-155C-41D0-BC90-4857239731A4}\ProxyStubClsid C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA}\InprocServer32\ThreadingModel = "Apartment" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\NortonLifeLock.Norton.Antivirus.IEContextMenu\CLSID\ = "{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B59987EA-25FE-44B4-8802-E4DE67073D8C}\ProgID C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3A5C2370-FF1E-4C2B-9796-E2FA2FF1D605}\TypeLib C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{A9CC9305-0A30-4015-92A0-0711EE24E720}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (int) \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{476D0EA3-80F9-48B5-B70B-05E677C9C148}\Programmable\data = "1" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225}\ProgID\ = "BackupShell.OverlayPending.1" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3A5C2370-FF1E-4C2B-9796-E2FA2FF1D605}\ProxyStubClsid C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{C2EF276A-4D20-44E9-B9D2-29F129EB826B}\1.0\0\win64\ = "C:\\Program Files\\Norton Security\\Engine\\22.20.5.39\\buShell.dll" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{4433A54A-1AC8-432F-90FC-85F045CF383C}\Programmable C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{AFB13A90-F68F-4313-8BA2-6A68E0BF304D}\ProxyStubClsid\ = "{00020424-0000-0000-C000-000000000046}" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{C884BB9C-39DE-43A1-8480-B7E2FC5C77C6}\ = "IBUContextMenu" C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Modifies system certificate store

evasion spyware trojan
Description Indicator Process Target
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob = 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 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\4EB6D578499B1CCF5F581EAD56BE3D9B6744A5E5\Blob = 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 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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 C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Suspicious behavior: LoadsDriver

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A
N/A N/A N/A N/A

Suspicious use of AdjustPrivilegeToken

Description Indicator Process Target
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeTakeOwnershipPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
Token: SeRestorePrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
Token: SeBackupPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
Token: SeDebugPrivilege N/A C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe N/A
Token: SeSecurityPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeBackupPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A
Token: SeDebugPrivilege N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 2396 wrote to memory of 656 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe
PID 2396 wrote to memory of 656 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe
PID 2396 wrote to memory of 4080 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe
PID 2396 wrote to memory of 4080 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe
PID 2396 wrote to memory of 3388 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe
PID 2396 wrote to memory of 3388 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe
PID 2396 wrote to memory of 1048 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe
PID 2396 wrote to memory of 1048 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe
PID 2396 wrote to memory of 4876 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe
PID 2396 wrote to memory of 4876 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe
PID 2396 wrote to memory of 2740 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe
PID 2396 wrote to memory of 2740 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe
PID 2396 wrote to memory of 5408 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe
PID 2396 wrote to memory of 5408 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe
PID 2396 wrote to memory of 5496 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe
PID 2396 wrote to memory of 5496 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe
PID 2396 wrote to memory of 5636 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe
PID 2396 wrote to memory of 5636 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe
PID 2396 wrote to memory of 5636 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe
PID 2396 wrote to memory of 5716 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe
PID 2396 wrote to memory of 5716 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe
PID 2396 wrote to memory of 5716 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe
PID 2396 wrote to memory of 4960 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe
PID 2396 wrote to memory of 4960 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe
PID 2396 wrote to memory of 4064 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe
PID 2396 wrote to memory of 4064 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe
PID 2396 wrote to memory of 3616 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe
PID 2396 wrote to memory of 3616 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe
PID 2396 wrote to memory of 5076 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe
PID 2396 wrote to memory of 5076 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe
PID 2396 wrote to memory of 3048 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe
PID 2396 wrote to memory of 3048 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe
PID 2396 wrote to memory of 2540 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe
PID 2396 wrote to memory of 2540 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe
PID 2396 wrote to memory of 9024 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe
PID 2396 wrote to memory of 9024 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe
PID 2396 wrote to memory of 9016 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe
PID 2396 wrote to memory of 9016 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe
PID 2396 wrote to memory of 7996 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe
PID 2396 wrote to memory of 7996 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe
PID 2396 wrote to memory of 7996 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe
PID 2396 wrote to memory of 7372 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe
PID 2396 wrote to memory of 7372 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe
PID 2396 wrote to memory of 7372 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe
PID 2396 wrote to memory of 5304 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe
PID 2396 wrote to memory of 5304 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe
PID 2396 wrote to memory of 5304 N/A C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe

Uses Task Scheduler COM API

persistence

Processes

C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe

"C:\Users\Admin\AppData\Local\Temp\N360-ESD-22.20.5.39-EN.exe"

C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe" /install

C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe" /install

C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe" /legacydelsysvolinfo

C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe" /d

C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe" "C:\Windows\System32\drivers\NGCx64\1614050.027" /install /installcertinfo

C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe" /Q /HRESULT /CheckForOlderVersion /log IS

C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe" /install

C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe" /uninstalltasksandlegacy

C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe

"C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe" /install

C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe

"C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe" /install

C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe" /install

C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe" /install

C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe" /legacydelsysvolinfo

C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe" /d

C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe" "C:\Windows\System32\drivers\NGCx64\1614050.027" /install /installcertinfo

C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe" /Q /HRESULT /CheckForOlderVersion /log IS

C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe" /install

C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe

"C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe" /uninstalltasksandlegacy

C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe

"C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe" /install

C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe

"C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe" /install

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe

"C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe" /TRAYONLY

C:\Windows\system32\LogonUI.exe

"LogonUI.exe" /flags:0x4 /state0:0xa394d055 /state1:0x41c64e6d

Network

Country Destination Domain Proto
US 8.8.8.8:53 178.223.142.52.in-addr.arpa udp
US 8.8.8.8:53 73.159.190.20.in-addr.arpa udp
US 8.8.8.8:53 180.178.17.96.in-addr.arpa udp
US 8.8.8.8:53 217.106.137.52.in-addr.arpa udp
US 8.8.8.8:53 28.118.140.52.in-addr.arpa udp
US 8.8.8.8:53 stats.norton.com udp
US 13.64.142.149:443 stats.norton.com tcp
US 8.8.8.8:53 149.142.64.13.in-addr.arpa udp
US 8.8.8.8:53 86.23.85.13.in-addr.arpa udp
US 8.8.8.8:53 56.126.166.20.in-addr.arpa udp
US 8.8.8.8:53 217.135.221.88.in-addr.arpa udp
US 8.8.8.8:53 liveupdate.symantecliveupdate.com udp
US 152.195.132.156:80 liveupdate.symantecliveupdate.com tcp
US 8.8.8.8:53 156.132.195.152.in-addr.arpa udp
US 8.8.8.8:53 22.236.111.52.in-addr.arpa udp
GB 96.16.110.41:443 tcp
SE 192.229.221.95:80 tcp
US 8.8.8.8:53 udp

Files

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstUI.dll

MD5 c2eb5937788597919ff001178ed70d15
SHA1 dc8a42208be65af9c12ac28afeae7e63d2e416c7
SHA256 fcb95ec569bce629f9b67aca75fff39c224dd056d3b72d3678710fd43eb13508
SHA512 d181586780272ba5d1f243153727f6dd6afdc3625f0c0e07fe87815a53d8051dc4d92f7fc4de97515046d748edcd7fc7d17d9103b25ebb8e3e891b9d184f70f9

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\symhtml.dll

MD5 3c80e8719aea08852f6d29a14ac5591c
SHA1 1b0e38cb7662c3ec6e9b879e8333524cb8cc51bd
SHA256 112449bf87741b4eb5fa1e492906118cffb2a20d326809baaf4f6ab604efbe84
SHA512 fb252e51706aeffc317c038bcccfc2e874dfd7b544e451d85ce95003db18167bfd604c0be66e5938baa96f6cd6a64aff053f6685e8362199cb9e0d45d4c666f8

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\MSVCP140.dll

MD5 f027303816d6d2afeab12183c67b1348
SHA1 735e1625b17e4122608eb3aff3702b97e08f1e51
SHA256 75ddc9778c23ee95b6c57db6b689f11c07d164d5a4c158d4c0acb87a520b8004
SHA512 f55f6df42f266cc5f5f23690a5942068248d50d1c302708bf34d1f9d8831c7bfa174489de029dada30707df4544275b14fbb3dda09a0a022eb343e2618401797

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Engine.dll

MD5 dd8ed7911509264054b8b4693ab91087
SHA1 2f77b4b5b1a77b84b1cd1936125a97eff7a02074
SHA256 f8054aa614e445578b653c94bb293c5a4f9d513b37c791fd32f99f23c6dfb9eb
SHA512 f9ce9cf77b8d1754f20abf2a5e9b5702fd52ffdf3ecfe8f6dc94749f23e3a9b3fc0acc95a9252042c16c7d0c4159aac6cd20f1cbff0f89a100b57227ae0a50e2

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\VCRUNTIME140.dll

MD5 ac139e08070885a2f021e30fab609eee
SHA1 3d3c2877cf3c4aa1a1f62708494375404d02cf22
SHA256 eea2df0c3d2bf84ee8bc811439a81578f6521c8b28b6cc815c93fb870ac7a0d7
SHA512 072dc8a2297eea0778f72f70ab5c8dc0400cecbe399115a4cee0cb7381d494565019d756f602d80077c22ab635b324ec10c644bf3c219a68d9c75840a8b5309f

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\ccLib.dll

MD5 4b51172b4622703552747d8d78096272
SHA1 4d48a3dbbd1c0c47d6f6aa8ee9d6de2a9c65bae5
SHA256 08593e2462f10224c4db7bc70e4a60cd3b2446b2878ba449c4f466a0fa51f98b
SHA512 9cf5dbab76f9839b33e9f731c719e8d41a2d67a763e99648bcfb4fc1129f5caca0c1dc8f8e90fdcd90802d71bf79e8f2c253bd3820d612ca48937a6c23eda414

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\ProdCbk.dll

MD5 0f73605955c10f2167a01265a98dde77
SHA1 5758fdf18e189185e31dd7005d2d60b9c4cff557
SHA256 904c3c8ef7362c760865a169950c39cc1e910afaf2e348d0f83eeb70dcd182d5
SHA512 0d9663f60df58356e236b4a517daddb1a9ef0678e7f082065b40deb1758cf9d1f72dea036b020b154eec3ec602410c8bdcc72a84bd45464a45ec141dc4f915ee

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\cltLMS.dll

MD5 9a8ec110e4855f076e5b9f5698101a82
SHA1 43afebdb6c63414d3c3add9e63969e9bbf144698
SHA256 8cb72b7d60cac72fd640b06d1ee0b6cab986cfab5fd5af8d6884f0314c7a0f48
SHA512 767d48dc099e27db26c7aa1496da884b05ea2a9ea80fb2f14874aba01fd980fe482d5d224a18e92d977545c2235077459ea360b3225bc516f3008aec904355c7

C:\ProgramData\Norton\{086A63F0-6B13-4F29-9695-134E7A01E963}\LC.INI

MD5 22aa8eaa0c0d5d38877ac3336079c73e
SHA1 a909e0a6d90f312234eeb7c161838fc8894d7aa6
SHA256 201a409ddadbe504ee62adc9b090e4d9b5bd8ea12a1d5c66d59a5fa64bd415f4
SHA512 f414605359c68c1a8dfa0ddc6d79d669b24df1ae6b6d499c7343744d037bfe029fb1129b0f04b3e54ee3a82e1cd099cc41f64f23832dec2b68da2d552763de03

C:\Program Files\Norton Security\Engine32\22.20.5.39\locales\ca.pak.info

MD5 4d5daa9b46c3d63f4a108cd35f8685ac
SHA1 c8d98e103260a6d23ed4cbe6abc09ea6bef5de08
SHA256 a91ac41af3ba9a3ba9b80c90f57ae92daad8c8c4b4a323d84828be02f8fab79e
SHA512 e5859c11eaa9bf046cdd8dc592faea6f75706c01f20dd6eb1987643d1e1aef29bba2be3a4608e392121ab08931e8dc232a75ca0c572c73a6278c07e4f3b007f4

C:\Program Files\Norton Security\Branding\22.20.5.39\11\01\muis.dll

MD5 247e0bbc807d414bcecbabd0cf708c55
SHA1 0fc548efdd91d976978ebd4545dc0c6902e6f953
SHA256 a0c534b1c2702f59b9165422bee71436d2b5d5f626306c6cca4bbf6ae38971c8
SHA512 b02e675b3f9117009c5682348d37a0fe902cdb6c83a7db56ad69cde0b22e8fcb9c8d2cff57ebd2525632ae9fa6abca07878c7ea26a89a7dc0b9c88f5d7c9ac71

C:\Program Files\Norton Security\Branding\22.20.5.39\09\01\EULA_NA.htm

MD5 b26115d190ae3ba63dae542bc2fe80a7
SHA1 dcd5022193a3dd484e5d1709aa81cfa71a445ebd
SHA256 c01650e6e413f497b9277ff62a0df0cf22234b39829627fa38495d36894ac07c
SHA512 f7b4dfe988031d73afd7d0d8b80cb842c5439b1dd06b259420c6610305c7f453e4f9e01cb4b328428b8e9a3f6255244a6db20f291f21fc08fb70a1feb2b4d384

C:\Program Files\Norton Security\Engine\22.20.5.39\concrt140.dll

MD5 3822db6c664f09c649b117353dcaa471
SHA1 0627b26601f4b1e524abf54b0583f5afaa26e34e
SHA256 10d165d877646275d674d3ca83299e3687ca090c6e05713cbeb85b195ecec6b2
SHA512 a7dd02c135902da291c12885e104b72ca5189dbee5aa461e760107d0a4bac3dbb01d09d009017e5762300e1f38cc5798365fb23c82fd76f0e721462bb1448465

C:\Program Files\Norton Security\Engine\22.20.5.39\avScnTsk.dll

MD5 5074c768e22eb1dcccc60f6713acd993
SHA1 bc87ae3bd4e9bad85fda644f8334ca1f75f36b7f
SHA256 12eb54933cc78aaa2c9ba6f57760b42a5ebc37436b037e3873a714c3557ffae6
SHA512 7309bf3ca9a07811507c720e384acc9a5325283a326ed5da526e66e08a92424fa70af5212ca9863bdbae6f32a1b0f6c837d5c202d3ac13269af1e2945f1ac1d6

C:\Program Files\Norton Security\Engine\22.20.5.39\msvcp140_2.dll

MD5 d33d9ec1486e319526f893fd9b1d9c12
SHA1 a9171bb893665f0591b274fe23b32f583e9e395c
SHA256 7c629aa475626a26d4f38832a513cef3bcb539fb5195ffd06682f31ec3a125a5
SHA512 672112d2df18fa0442c11a16e802871e7e383e590475a315ee55c5c10a4f4a15ed41a7338c25fd0b0ba2649fb44da9e656d25de4bc49e2a4f69b1d5d7f92a94b

C:\Program Files\Norton Security\Engine\22.20.5.39\msvcp140_1.dll

MD5 c51c76efb18cdf34361f306de9734d87
SHA1 b5fd3fc81a7c00069aac33cae9973e93bed9b01f
SHA256 299c5bb4be1712f9e0f98a1e3f5492c606251522f5dd0b23acd0ec685e249849
SHA512 7f9dcd9a914f535ed798195ff5d5717768ab028c79f4240c49c6f2cb6de7d7a2e0036849d73b4ce26b01224e5297d3e30e15fc9510d2a17b70da8dc3f1ccb356

C:\Program Files\Norton Security\Engine\22.20.5.39\msvcp140.dll

MD5 bcf85f55392240e2110b0608d0cef70a
SHA1 d8067ad8a9046eb34579b09d94cbfc4af13c1dfb
SHA256 85a415f7aa8a1e7d10e05e713c91a3aec9bf3f4c821eba10df2d20b1a02e3882
SHA512 f7491c089e0fe92515b6bdc4f0de0e9438bfa5ebbebaeba59ad5f214f95e5a853af53a53bd4b4b8e1ff2402599402f380feee7746fea83404e22c0de096a8b92

C:\Program Files\Norton Security\MUI\maplngid.dat

MD5 1bae54144096ebc8a4cb82b8b9b7b877
SHA1 31e15db1fbe84d95899f9a3d4284fa4d34e96dc4
SHA256 92893de1ab436b34d6152f845a22cb8034b06b63359098962f551580aea6537a
SHA512 cdd41f95df510e02fc35e931edae758973535b9d8f8fc225ea3a8d394c506a0a2c6e143198993869f07fbb2ea00212dc9ed2e06cbe76e90b541632d243e94de8

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Engine.dll

MD5 e1368f63414741e66387e257fe968d12
SHA1 18c0fb232551f1983a628033dfe3b012080be6f7
SHA256 8a91d0266527d229e824a6ac84d428cf157b8b58d045c55e2574171c1fd17820
SHA512 ab4b0e0dc59fc9011eb9d31bfaa775ea9ad26bf80edce90d60b589f1f64777bbe732ea862f4ddac383b666cbf3ae983398705cee217a169d2e6c1c840ce7e77b

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\AntiSpam\BmiCfg.dat

MD5 c384f0e3984866745d963533e6dc2435
SHA1 238f945e7bfe442160e9941905be4ce9726c0414
SHA256 95aaf759815cfc19ad7658ef9a4fc52b73bea21b9e1b59fa62e027b16fb4bce5
SHA512 e0e709dcf26f08a026b25ae5fad4f35730c0fe70bbe4bd1351bcf4126c3414f3f70dfd0e95317eecb5e1eeb5c30061b75678dd1e1826b0c3ea5c45b0b4d10ab9

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\User.dat

MD5 813dc9e743b5423d4b0a8da14122ca27
SHA1 4d4027f60d95b389d2640542048ef501d9592eb9
SHA256 27920049fb43fa8c8713ebd0647eccdedcb929217ad84ca3bf7d266ea9b59398
SHA512 dd9d386cef8eda1d5662a672a6d8548d5303b62cb04521dcbdc4f92235a6c2557786561a076f9e8718dafb4e95bec6bb8c6da550da4a68b499698d65cbb86ead

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\SymWidgets\OEM1.dat

MD5 c30974f90916c0ae2f669bff2a7843f8
SHA1 c576ea28ae4c5515eb68f08734afabd9729ca19f
SHA256 4b489242e7f713d1946801f691c3dba4e16f2006ca7e0fb1327b64c6733b3fe3
SHA512 cb275e878f85a40952f81a39720c7350ebdfef867031d4755c500a69fa9557b894ef3a270b6d366386bc0f5e07e51ab770580b2619ad32a73b6b825e3439e50e

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\SymWidgets\Layout1.dat

MD5 c722afd1c50880277081267711f79f7b
SHA1 c139930d010f13372262d3805ec0decbd51e47e8
SHA256 34944f9c65ad367f1f2fd4515934df6847814c6816acca5dce3ff3c740dac799
SHA512 2880f1022419487c094b5f4d3a2801e237e91c583e1f7002285e100161aa9feba15c5dbd7852722869fbdd391cb089a79fafc1e2bd40622d058e2d28ae4d77d0

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\SymWidgets\Default1.dat

MD5 e004d49e389010ed5603b4b1ca5f7c6c
SHA1 bd9f22d225ef64ec4c46c3effa91edbaf1fa3f10
SHA256 4f6aa648266b4957705ded827b6164a7dcbcae68f9528b2de4ec369e74c758d5
SHA512 73e7af927d3a39a675f2992dfaaeef613c9b4d2648cf527d1051c3cc82a7e477432c3e821ca88b2006cd966b3ad90c12890a11bf38a7be611d076a7bcf3e65b8

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\STAMPENode.dat

MD5 543c5fb6be398beefc6fecabc96b369e
SHA1 d43a0c5eb6f081bbdf3ac39ff0c4491c22000824
SHA256 7cf771984635dac3a1cbf7d271ae294a5c9efe96c7d954fc22be5242e614a089
SHA512 b595474aabe0676bc86312b95796505bfbfb82822bb3ccc5fe62bc6eea09db1a1a8446102b07aeeab9a1d5c45b051583e3f495cafc7e48bbf211ea0db56dca1f

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\STAMPDNode.dat

MD5 46c578ae5ea168c847b8e056671587dd
SHA1 603317f6beb4e2f0ac0dae7ffe85e83ade2069bb
SHA256 88f8f77cf4fad3c79628b756976693e903c08db07315b0e01fce8dee15657cf5
SHA512 cf2de20d0459bee8699c93628feb0acb3b92712ddc15916028a81e2a1835bf8be23f0c3725057c25738e3c69b0ab930a6cc8faf9d43bc6aaed1ea6bafafba9e5

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\set-priv.dat

MD5 105a3d63c580d2ad7759b70659cfe951
SHA1 b25605f273c40314c4b5ce7b2fa1d39d7ffb2d30
SHA256 4c084b0a99963f7c4059233111edfed7aafad918fbcedc61f4a51d7f0624fa6e
SHA512 a21bfd8de2f0d508c1ea3e012c56212634d78b35d188fc4500ee8649ab55d30c6f52d16878502a5508b4a9026eaea14422552fa3e8932b9689158985c80d8f50

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\plcyimpt.dat

MD5 07764533e0166e0735394f2a1254f40e
SHA1 def42457f1dcbbdf002448c3dab8af5c11d8347d
SHA256 29f0dde742f51a359d43cf2c82202accc16cedcddd82a02365ac17e80284ebc2
SHA512 ad65fab7c9602b5107ed2a0707273ecfdcc9181accc4cb62b3b1c1e22037cf0bddc4415ba1eae1860344add88993a16be02793120d41d7325e6599eedc6aa786

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\OEM.dat

MD5 b2d723a1c5a99e48815492f2827e2030
SHA1 65e594c855f6530b549e5dfe39f62df8cf45c67d
SHA256 7f6c3d2f0df3ae856194e1de2469344d1893212fb7271383b2138fa94e3e4b62
SHA512 3ae7258b022957f74c8d56a79359afb20dad7e647ced6e22c321f51139724ab44759a1175802e42332601b7b97bc71f2acb6cbeee81a71b44df64070e587cefc

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\LCset.dat

MD5 a5d9274e92e1cfd04ae8cf5920cbf84d
SHA1 fb41c6be88503002dc424a77edd03e199970a114
SHA256 582eaf8172867c5d7acb23d97e0ed9208979fef9814f2a1aaddbc38ef6f7fa89
SHA512 99c37fc96c3e0bac47b56a572a1dadbbc5563e8f22cd2099f262a31f9ab8bb8b1681c9e9b271a99fda2b7081c0777afafc12950d17d1434d4a1ebac168dae3e8

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\Layout.dat

MD5 5a834dd45eb1afc81810a48fbaf825f4
SHA1 5129b2b795010e1fdb303a894f1307d08e7926b7
SHA256 96a88160498fa2b3f0f6cbb0697dd522ed0f7b01945088e30aa9cd1c6f44e115
SHA512 a77a67e0b11c05fd5a3592d9d26e482c05886fe81a35dac5b5df8f1fa6654db8765688f5ab7f9005fb39200a16cd11047ca2b0335f796de4209a1183ae4e3103

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\Jobs\ccJobSch.dat

MD5 584f7e6a9ec7b3bd6c09beb2e6ff98ea
SHA1 62dbe21f0c41422075e7f45983569cef4b6d48d7
SHA256 a94fe295d6a765fee57143176c921adbfec2e94c8888334938326c80e5cb634b
SHA512 e9f5f3b75ccd5582d0e6905dca4a0a10423fb96b8f5076d9c21c212a675540783ece5141b38c2fd2e81ebefef93a54d201ba511234caf232d510654d9e29a915

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\DiagRpt.dat

MD5 9796e4de6f5d3e2aa1ec22e18e4bbcc9
SHA1 89812ee601dc64e9aea4f88b37c58b186da89f31
SHA256 c0eb76eccac272b2a316fc2122f759acbd874cb5ae9e622fb96d346a1970ef93
SHA512 192fa742e55e96b77bad8bb7e84e5a4875e485698486fb139c2135ef855d354cc224ba8ffb3aa14a4b42ee3a48f77e6a699f0eefbb0cf57b166665f2d8bd596b

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\depend.dat

MD5 0953688d3f2ae9e6eec7ebbffb0c35be
SHA1 964517953a881837692dec120b373b03cfbf68e7
SHA256 927d186e8c1dfb01e89b07b0f366f0cb3caabe61b1ec0f53f314d2b32c01fb48
SHA512 e35603706352efcf8251bbe7eb77c0fb786feed28938e0555d4ca69f13001e75ff87e753a4bb58a16df82f2121882407b317a7309451005607e8449612e8dfc7

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\cltDynam.dat

MD5 d786b67ea24178bcf010ca5493ae6cfd
SHA1 5132a9d1b0c0305ef6ba8cb940d3eae902a8422c
SHA256 636de66b59bd1dd198315d24299cfc5bde4676e1f0da6a924256ae98312cd06a
SHA512 31c675d6ee37f548e3c8e1ca7442e45dc00f7e334412e485aee55d29f391e112b73ce7d0a7e53253801dad749da4df15eab7d8b971beed66347bd780b6bac61e

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\BackupSettings.dat

MD5 0e13df36ef9f2ae7e2026e03d553a6e1
SHA1 809bd0ef5d2fe75f4743b35591b5ad6bff3991ac
SHA256 f71dc3666ecf040cfb526b505ac3a6348018cbd44c5b34eada090983b7984aea
SHA512 d0b8846c3dda36983ef2ec115ad1e2ca5fad7f89661c5db2663fa162ddbec81eeb25ad991c34373fe2fc8762680dde0a2af053c81db493f3f5db4b45c126335c

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\Backup.dat

MD5 81bc50bcc336e8182494e1955ff556e2
SHA1 483afdca977748c1611ba3b51a3ffa9d0bcf6243
SHA256 a1c2ace0b493fddea3fab949d2a0e5fa6c89b975e9dca1d98943bab13adcef9d
SHA512 ca841a15bc2ef57bcee6c275a7a7de20087863d358f32dd7119cab92c8fe02e2b2f305a4576d4a9b625c203a6f21b8d17236d1a59bddc2aadc186b7a01ce57d8

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\asDynam.dat

MD5 2dd3803c1a434fbb64dd6959254969d6
SHA1 ae40f3031af61670be9e5b1aabb80ea087405fb3
SHA256 0471998cfcbfbddd1ad5d86ea1e808ac94db45fed7acbea242a6ab5dcfe13e96
SHA512 bb545e7e9fae3e7fe01efa4b098d4b8d2b5728da482e42a3fc6c13d6c84270de5fe18daf12ca87848d60bdd4e166eeb69efe895d6c20e6e2a50d648832f1e69b

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Product\asBM.dat

MD5 144e1507fc2572bdbd0a7a7ff4b64954
SHA1 e8a3ff7641116e161c6bb74db988772c28f68a67
SHA256 c0dc094938f65fae16ca9cb8ff4cd99e428fd0b9ea6c7a1ad46716071b84ca53
SHA512 21d62b83e1f2590e723dd3f7f2e1dd7ec1f7824319f5fc5b0b0e09b7e2c2ddd080da4e8f61e68a8b99ebb7b726cd925166d9a5a36849c2785353cf79ff47b948

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\NCO\IDD2.dat

MD5 3556472f86e0c0ad14b85c8be638566f
SHA1 f08bb40bdf15816a975636570e10380c8a251b10
SHA256 8b9d513e32a4e7e8c599b6adf348a6e7389f4f29131f04856e421eb6ccbb63f2
SHA512 70527c263774face587251761896cb66e3a34ab975423d040dcb0390824b6aa621aef452122395e37acab53d7425cc038bc0bf533dd6785c489552260cc9f547

C:\Program Files\Norton Security\NortonData\22.20.5.39\http\client.dat

MD5 84675b7da3756d834efc9f5b7f3ccf43
SHA1 039f30c253fc78f66d2a244646a4dda19c91f4b7
SHA256 98ec8ec342c5733b7570d707abcfe130bc12118dd1e2c5cdb00771282eb29c79
SHA512 bc000b285a3100be915cdd4ad237320c13d0839e92e8eaa2b4a5073f8fcfd203e30842d49aee189af764e694bdd36472eadbcca5d21f70099f4e013874649712

C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\WebProtectionDefs\20100430.009\virscan1.dat

MD5 f4ba4e9db2ae48450a92f1564ef2fa55
SHA1 6a5fce2554486f6195c59888d2f35f2c228d08cf
SHA256 e52a5a10e4613dafe926f323f7f8dac348f500c137907320744fb606a79c031c
SHA512 546e84e84f7fbaf6765b327b08e77f6fb97030d260caa5c4eff2f9c33b9a6731351a6195d3cb3551aa849a9fa623a7d286c661382383b98db025971014b43730

C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\WebProtectionDefs\20100430.009\v.sig

MD5 c0eb98b4b021e7209258eb69544c5a1e
SHA1 883b33a4675c217ec500b4ef9681b55b9f1c8036
SHA256 7d147461b16d50f4521e52c32b36047b0fab13dd7bd521f9692f419e5843acb6
SHA512 b91962dd23489b7592d886ec94611c22d18cef24484def684557ab9eb06dd57ff07ae67814281048f39f37d9a914b8bc9a77d1c934f20a2f031fae061abd8836

C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\WebProtectionDefs\20100430.009\v.grd

MD5 3551addeb2773f3896525756b3631b03
SHA1 cc97b40786a72fffa89515ddc9e9627e1893c88e
SHA256 1c96b466de40b73160790c2042f6fbd6b3289968ff4bc235e0bda3cd193e5845
SHA512 95759bcaa373d26b43fbbd01158ecb08e38320256b87d3d80a640c315a4c2280ab4241ca8ac1a75aa507763d3f0f948ae5537cea5662e19c9bacbaef461b212c

C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\WebProtectionDefs\20100430.009\Catalog.dat

MD5 e1c87930a55cd6a1caaba3cfaa7452b4
SHA1 4c5b7addd47b7f020c294cff2dc725efed6d17ae
SHA256 37de5fc4980fe856b83deac2fa788180357cc90a0e7012594d38ef08021a7c65
SHA512 87b06feb65676aedb5d549a60afcb254186c8f94985100d90822a2d022407c0d8af8237f203f7c56e8a398d90b7980f421ac2a2ae9e3c9cd51ef3aae40c781a5

C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\symevnt.sys

MD5 efd74374145f522ef3be417bb23cfdc3
SHA1 4c3673e398f082f099a2e015e94c4ec85415f2dd
SHA256 41e5fa2aff8b040abbfbff19e08094f51bb6b0a53b3554ae9192d4e30c870a1b
SHA512 1448ddf4d8f28e4f09eff638e3c0d077d56018ed1adeec08aa04e7b79ab110bcc2d3ca1108f64168710fe9f300185ce75e021be972dcbcd2259b46feb4bc4333

C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\symevnt.inf

MD5 93a577b9bff547ea1a95ab5e46f0b772
SHA1 455668011b1e25890e9f23e7e75d0f41ccf146e5
SHA256 6972f91545fa8f8cf13e014d6ae3803e52e8c861f93c9ae51f5fab5802d53a92
SHA512 9c9099c47784dfe9b2afba1a46332e7e8263d675acf09f756b7fe184ee33a09702bfe245dd3b2708f016a171836fb9a02c2ef89bcf6c79ae2ef577b9e1ffe381

C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\symevnt.cat

MD5 8c42434627414c89b7a6f6a434198389
SHA1 a68004c16c3bf9c33d447200f71b8f527e50e04d
SHA256 cdaf869baee7b7230eb296e5a3fd6273c52a63087fc0ad5e619a2864d73cf693
SHA512 f13725831ec136ad64846423d7ae93ad053b947d435a2e5fff6e16b8815bc6e6d1b61660ccc914023ca34664b11bf4d8e4823903aa13067be154d6b7282f814e

C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\speng64.dll

MD5 c8598693f4a165004da806a382de7de3
SHA1 f408cbb593a571a347646662d83d2fe48a31e204
SHA256 eac760973065b2cfbabe070da1fceaeb8b03a67ab962595f511c0669a0df5d88
SHA512 80f865ff5e630518139b30f3ec86cee143ad2fbe3c10259f7b08c4b8cce878208f3f353391b4cda7b4cac21a52a8a6048a5ca2ed8699d51e266b5779eb588b39

C:\Program Files\Norton Security\NortonData\22.20.5.39\Definitions\SymPlatformDefs\20200721.050\spdefset.dat

MD5 779afd29827b58a492bcb665ca0ab2b0
SHA1 5ec0ae92769727f86e40dba44b39fe55df3f4048
SHA256 0f8e523801505fc28684a031c8cf09e5ce03310fb598ccf1489c818a1415edee
SHA512 71452f8e35329f82f1c2912ed2b63eede522121906a7c3a544d45141725bbfc0a73fe14da58827c8cce9f0388714c66a23cd455ba9a061267ae8ed6f7aafa1bf

C:\Program Files\Norton Security\MUI\fallback.dat

MD5 57d3d307ea7a3152cb20d145dd50914b
SHA1 b6808c6a6514680b9d8425c63148958350b9eaf6
SHA256 22a281f05f80c9ad0fff258da48daf0dbffa0ae6fc7bb892935d42d97c430448
SHA512 1e48fd682ee4c2fb765bd7eaae761cf4a0e4d2cabfebdc762e1e0a49f371ae0f8ba2d3610ab98f23309fc4c824415b21dc7520cb40e02017576707016982a76c

C:\Program Files\Norton Security\Engine32\22.20.5.39\vccorlib140.dll

MD5 33cebca4aab9fab45276768b6780d2a6
SHA1 c7111962346d8f45a8793157858b66b7fce522b1
SHA256 dc00fa66ff2b0ee03a97e0c1e1e440f7134dcc2c0cf356d604108c9e69980ccc
SHA512 7464e286bb7fc431312f6f92e3d01f282726fc13e76844e7ad908d3888e9504fb2447ef20db985beecced9703fbb2f61b845b881810aaa42e7483e7c2a47225e

C:\Program Files\Norton Security\Engine32\22.20.5.39\msvcp140_2.dll

MD5 19f1cd8b040029ef97fb42c7746b6841
SHA1 57339e5d490f76f66f2b8538917d70d21cdda056
SHA256 67e92a9f69651bd982e1952019e0a6dbb97779a7432c02d496e2439f6771c404
SHA512 b81aad0ac5ee72139c497553e13c579c75a94cea68494f758e3b1d3b8e28a22889865c4e299ace307f9b425c038463b27e074892111eb7f4d1b60488881bf618

C:\Program Files\Norton Security\Engine32\22.20.5.39\msvcp140_1.dll

MD5 8464c2ccc0ab5fe3bccb3630804c9d63
SHA1 0ccc25508e07b21a778ef89c70c904a66597e8c7
SHA256 473262c7a3e801ab0a779108116f0cea65d7a16b23c8ee0e31f4194873115541
SHA512 a9c540e5ae6c96692f00335209e9077f06121c27c4d02d550b865dfd150ee1e9e63639f0578dc34d0b70d9a3051ea436a59f1875d1a0fb48883ed3c121a57536

C:\Program Files\Norton Security\Engine32\22.20.5.39\concrt140.dll

MD5 ac06d70ea52bafc027a36faaba7fb129
SHA1 efcfb9cec3e9bd2c491f66b09530acf4a32a647d
SHA256 de4f5285e4ff0de260a1c74470f76c06b6bf480f3169cbd31f7dbec1aa72cc7f
SHA512 6136b2c1eb8b9196f7cb78ec1fb077f72ce4a71fcbceec6097ce9eae6c7665bb4504a946b2750ab3e32429cde439e408a5502b645f2e0eb3c976235311f97a8a

C:\Program Files\Norton Security\Engine32\22.20.5.39\ccLib.dll

MD5 b04d1260d812cdf6691fd5d9a93bcf84
SHA1 68bdbbcf5a678605fe3adf7920137d4079da2d6d
SHA256 21a6187c35862867f30a1967761380134e0a02d6b045ce1c8c5ff14827ff15cc
SHA512 134aa05f6ccfa662099e32994a47f3694213f3b43feadb04fab04f3d3c937c29e1f630f30c602acccefd889a37136a1739164d920f66640295a48846dfff410e

C:\Program Files\Norton Security\Branding\22.20.5.39\09\01\NortonSecurity.exe.mui

MD5 826d1bd35235b8b35c54f4242825c922
SHA1 351e3a3c3d5768e8b3aff88b85bcb576b8f10684
SHA256 3aceb3afb68e92136441ee694279bf6826652cd9c963098e84e4415227346093
SHA512 081fcec0e1ad5f8b994f603c96fc78dc7504c220e17ca487bdf771fc11032de99f5b2f3c2b29f9fbbbe9a00dcc4d66cd7d031dbb25571637f265f5abb8fa0b18

C:\Program Files\Norton Security\Branding\en-US\muis.dll.mui

MD5 ebaba795913ed08636002f60aab26495
SHA1 b91cf3cb4c822f725e6e8f3097a2c7211001cd8c
SHA256 4a202b1cc9b369ddb0a6561687f95e5caebf831f921842465342b6954de0ce9d
SHA512 652d5226be5b5e6d105380a5e119475b8031fcf541164e51b652c9d0ba992300a090acbb071585b67d9c55efd207f36640933d8819b2eaecb556e7f7ca79911e

C:\Program Files\Norton Security\Engine\22.20.5.39\vcruntime140.dll

MD5 c1986d58421ba6ca3050d7d5a01f8929
SHA1 aaccc47a71fbcadf980932874056c9570a824890
SHA256 fbbab0c52138bb54f691e9764b43b3153047b989fa969b51bb695fca3639f3ba
SHA512 dfc3f98e655015e7ae08dc57808e17685a743130b15097f32b87945ab8ab8f1e8c813fb7ea8c680fc235276bd5a7a9f1c073e47249a30c70f41692513e668d9b

C:\Program Files\Norton Security\Engine\22.20.5.39\vccorlib140.dll

MD5 f3a6e8c6916c8d6461087874b1e85883
SHA1 95d200dd134547f6f9ce1e65bb9918440af0c32a
SHA256 fd883d1026c28be581dff0a4aae8caddd3e41cc4476f536abe27cd6f8975da51
SHA512 1464c1b9869867608b26109c0005973c91b051981965228bd7c42b33814787e6bb556d24c870a6c0dc37a93dc9973baf4e5332f6449d8cffb88a5024371714c0

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\ClientSDK\csdkmdia.dat

MD5 f6d47986473c51d5c4d704f2d4ff6488
SHA1 3930c5a7c68791b645f374a423c707690663c14a
SHA256 596e3c80cd0fc24924977a680d519ad24daca7de52058388f371e70c425f9af8
SHA512 f6073d4760d8250c90ce50dfec8d5215c250a8f61469b619a9f3680395cc4dca53a6a86c94ca9bf312d490761b631910234409e036c196bab6b11b92b51433fb

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\ccSet.dll

MD5 8460b08789dbcf409cbf7201c03601c9
SHA1 535cd7bda10703dd9192d02fc4b978da77549f47
SHA256 b63015181d374174b18aab7c17fc1f80d73d1d4df42cfdf8e5becf9bffdc3aba
SHA512 c5acb9902a254630e9f5cce3ab9fa05bbc95081397ff8f656922bd8fa548105eba493ba2d7b49edb50af3eb5577c0cc91181693f84f123730c7e276543573ecb

C:\Program Files\Norton Security\Engine\22.20.5.39\uiStub.exe

MD5 ba108798f661564d1515da0988cb39a6
SHA1 c153f949d3329c46c144fd905be460ce4acf9780
SHA256 f6f770258f18792ef6cc9ccaf9bf7fae60ab1a44eac5daed7499ad647e418b6a
SHA512 4bed34b3398c48c08e29a4d6014ea7701fed2991dcf8f9ccf596f6963382eb52167db86bdc5c50b627538037e69fe328f09cdc430ace634d0b2d18ab0ff2bd0b

C:\Program Files\Norton Security\Engine\22.20.5.39\symamsi.dll

MD5 6618f4d352ac56b8d1ade8880a9b0878
SHA1 e00595f9b54c3085e596ab78c9b73d4f81c1dbf5
SHA256 1378f025d1336b9357737fb793733349c60e240921d3fb7f0c17df1dbf869e87
SHA512 3080026805a55971795f367933a778faf13cdce8b53c3b523d4ba84ab425fb5e4a4b16c644445ecc5fd2edfb7789a79713ff70a078d38a91fc7a8045aa50e123

C:\Program Files\Norton Security\Engine\22.20.5.39\coInst.exe

MD5 42ad173ba576f189f5e8913a92cf22c7
SHA1 c1a6079fc2a999733d926c743ee7230dec52c42d
SHA256 4831d54e6e0907454b1f12ed7a25b79d27619bdb7e60d53423295b71ce93f955
SHA512 10d2b071593093e2600c0fc749f39389a0938da20182acfc596cd6ad2b33c5f197d7eaa98c50580de59cb93f0535f99c7b646d30bbcb811fec305beb08278728

C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSP_CA.exe

MD5 ef8dd24b9e6bc8b1e783161fcbd5dc42
SHA1 96143da41ddb0754e1e5da728c8e1e2d4727fe38
SHA256 affc346b7194deccaed88ea175bda3ee869ba88a0f145a7197d55e899ed6a022
SHA512 ed1d3b05b3fcbf126fa6aafe7cb1249f57f4f152d5508990ac645607a43c26e3cf6e9c4ac95c3f2eeccbf9e8659b5328543aeb605599608fa4b4b8c4283cf6f0

C:\Program Files\Norton Security\Engine\22.20.5.39\ccLib.dll

MD5 d6a3a2011ceb7511e58b9f5ef755db53
SHA1 10d3c6ba876c46615128bf72229242af5e848e86
SHA256 1e7515be2291d942afb8b5baa8ed0fb1c8c2cece492c4d1a0ef37eba056c0904
SHA512 a46237df4db2f10638dc5b7fd4a2ce2761457a8b01eab70ace26d65d18f0f650272647d3c185d93d0c35d78e88e276d14ad7d53328884644464aed9fa3c8988f

C:\Program Files\Norton Security\Engine\22.20.5.39\EFAInst64.exe

MD5 939434a01e4a1f939216797fedd6129c
SHA1 75456faeaea9a6e7b65dc07f56df4c1faae05bd0
SHA256 7dbae38a12b943fbecba428ffef45c0690cf8a77e18e4acf4cb87b381fb8f408
SHA512 3f6d62fe9edd06aa31e467603e6232e2facec72678499d0435496eb1238bd89f3a815cbb9b22ac9eef0b148e1724540adfa0f1892aa10bab6702f329df2dc4e3

C:\Program Files\Norton Security\Engine\22.20.5.39\EFACli64.dll

MD5 83a108603b73c5b036a89bbf5934d6e6
SHA1 579f4f085bb0baed5eb5911fbe98088582ccbe01
SHA256 9ac9a739dc8fc940a3189a91578ea357d57a5deaa379a75341138198a9b94845
SHA512 18d0955af820b77f2a828bbd27ede37166ba3d465200c1447988e25b4e92c69cc336a3d3263446f650313153ccc896547ffa232ec670a04cc2d7cf447197a481

C:\Program Files\Norton Security\isolate.ini

MD5 b54ce01456aa63db416ec0fd14ebd805
SHA1 0b90ca22eff491436a6203593100878ecc507b95
SHA256 4242db772c261fe96aa071a43ce9f2f6e415662bc232a041691640f7af2d113e
SHA512 2da34c129f58851a7a619d0b531759c5e380b35f74d6811b654193f887edc3a8b66b8c07f95bcfc1c909e48dc59811f013dfd5965e860571e7bc3a6dc535b891

C:\Program Files\Norton Security\Engine\22.20.5.39\SymVTCatalogDB.exe

MD5 34d9341ade75e2e33d72d251884f58c3
SHA1 e72130aec5b82c655a55808837ed1d1f4bd21348
SHA256 ec8cdb82f7aa13b78b0a04b12206dada7be868e8b21f62cae393896c044cac66
SHA512 819a9728081ffc63060d6fffd2925031af34a9adc217c2f8206da313335abb7e721b34de842d4f04b406f724c839c440c81e33d8cfe3cf76d997928d75c6ef6f

C:\Program Files\Norton Security\Engine\22.20.5.39\ELAMInst.exe

MD5 3b3f2cec6110e040acb8b97675179cb1
SHA1 748c1e69041002c652aa902131a6a51ea42c6a8e
SHA256 17ddeb537ee8e6ace1b8d9bb7f91e103b86dc1df5cf97363bce4f000b551f41a
SHA512 ad92b8c37f16fc8a813e2c83009e4552220ad0e2c5996ab6ba5f6af50ab9f2db8f9300c094c2398a174af09ccfb5d9b62c6a9b0704b4a0a996b75b7a4343ee48

C:\Windows\System32\drivers\NGCx64\1614050.027\symelam.sys

MD5 6e30cb1afa4702e3daeb6c98ed41523c
SHA1 b925118ad5a1756c5229491cf690a40baac268c6
SHA256 64d4353efbca85511f0297c75740508b8658acf703176d0fe81fc177bca71ac3
SHA512 92723c0e6b128b6507acef2cddfcbf5c99f35631c66c3da72645c434ecc16bb7b02e93e04b5fbbf6d6054f4d559b8f98862736ef232a53a119127a0747d281f9

C:\Program Files\Norton Security\Engine\22.20.5.39\Sevntx64.exe

MD5 b868adbecc7e8dc980bb273f9134328c
SHA1 d2e274381b2270aa109d0a5b2b4d0acf560e15c9
SHA256 2187ee287b3dd686b1ac5943226cdd8061c01f883a1120ab6d71e4173dcee52d
SHA512 2d1b8deb5657d60d61af71a67ed469a92d83bd96128ab3e522fad56a6f873cdeb05d9d0d871ff9520c867f4eed607cef03dde42db19a4c044639dbc5fc37b3b5

C:\Users\Admin\AppData\Local\Temp\SYMEVENT.LOG

MD5 fc5fbc5b9addb9e95548a893ee61ed18
SHA1 82b4484ade7ac7d7b4c03d4409c1d2fbf0768f68
SHA256 2c9532716365b81a00ddc5b3a2a6bc74b6daf13430109dfac93e0c6b2df7557d
SHA512 3c82692551637e6aeb0494fa77f48b2c9e9741623633da3847b1a9a225e635daa8bd869795dab2e4c99d740742a317adfa808cb16fa90083ff24fba1e4b37354

C:\Users\Admin\AppData\Local\Temp\SYMEVENT.LOG

MD5 1951094e515446c33470991f82b0b73d
SHA1 9e075acb7ad9009fbad1f01d8122f1ade9548f18
SHA256 f3fc627e69499141c27ec070986aff1edc375e2ab1c7a1ea62078732ccd9948a
SHA512 41d2d4d325cb54d219a4a266f3fd12d2e2e5ae2502bba4daccf1ea80956d9be22cef99739d80ccc2fd92b7ad312f79710ce6606413fd084fab863e235f882d30

C:\Program Files\Common Files\Symantec Shared\SPManifests\SYMEVNT.SPM

MD5 02eb7ae684c62c97d71311552cc5d318
SHA1 11d4e1476cb92a8f93e6a926eeac92413b66ce61
SHA256 c2f3224f033c79084d59b8428b789f0ae38d90b69738a3c87ae11ad9dea1b0c5
SHA512 6fc9325356ba14dfd899c85776dd3431f24063b882f94a2ad3377aef01cf5e002e6db74935ffef659e7830d828ecccb6189c4ae18c839093f8b7fee8de3e4f32

C:\Windows\System32\drivers\SYMEVENT64x86.CAT

MD5 47b23875a361eeff7613f174c74f8330
SHA1 61bcdc6e59802c3bc6844ea4b4e45c2f190d0e99
SHA256 d033e09f9d9f57cad24cf10997dcb1e0af311f513d9737fea86462dc37814d30
SHA512 1072f2393fef70c8f5d39f3cdff00276af95d1eb7a6c06e10766711f73f1f47571dc999902f507e1a2e7e417130a9d90fc51fdc294854ac383775587e99852d3

C:\Program Files\Common Files\Symantec Shared\SPManifests\SYMEVNT.SIG

MD5 5926400aa02bb7fe7f07e0cf0cc626c2
SHA1 88768eb3c87ca4b73ce6f278dc876c35fcfbd8fe
SHA256 0a30a4f65872c8896e7b163ba52d72855a6bef5e5769c441d96f6d8269c718bc
SHA512 b0b7357fb8b32eaaf211b31ac8a9a02b7f8ceddb513c01ce39a92a95895ccded6e1d831c61d74494c101eb94c43bc3142a5970376104ecb10f6a19b070cc26b2

C:\Program Files\Common Files\Symantec Shared\SPManifests\SYMEVNT.GRD

MD5 bc63821e93d0a6c47d134c85b5354cc5
SHA1 7724083c1871cadeafe1e1da7e2ad040ccce602a
SHA256 75091a4e5b9d7ad5043bd2d055692729f9d4de59d8497ff347adf819fa36f936
SHA512 3e2e8cd8f182c9e0c636bc709b4212f7cb6b091af42a02a209af8467c1350d1645177bd098537e09c7977e1e7bd409e9ffca2e604d782abb03274f4096eaefba

C:\Program Files\Norton Security\Engine\22.20.5.39\RuleUp.exe

MD5 3065de9638d1d837b8603d3604f9299b
SHA1 65b4ce56e03705b4d7fd9ac8cf35a241ba17fe4a
SHA256 c2596018d0ebd0a98f7ca5bcd93fe10f86e9dcc2d8ea9f7aca7288854d40efd6
SHA512 7c5355765180896d88ede97ace1ea23e6f15e6cd5e9e0ce65aa3fc7a7c7ed0145ed56bd26fa675b7af5be75e05c09d2fe25d84fd5850522f547b7cef5b48ba16

C:\Program Files\Norton Security\Engine\22.20.5.39\ccVrTrst.dll

MD5 44bad3f6356964ac75e11cc85b41e184
SHA1 3b12d4850c9dd4732c31896d5a0337aa7713393a
SHA256 890b7131182c0742f06abb97cd33e8d1349c666ec4aab661470d1187d070b56b
SHA512 50ed262cbd28b8531648966bb12829e4d8853d010f6981b5a8d2dcf3d1a222716d464dc92ee3965c31bbfd6b73cd40bac46493dd88eab802246a041d0d6d4bb9

C:\Program Files\Norton Security\Engine\22.20.5.39\RuleXprt.dll

MD5 2a2d800b2211aea089755a3eb5140bbf
SHA1 f4c178d26bf6d06773f30d5be498bb98425fca6a
SHA256 69928ec35d23d0644fbe64d70856273d74fb50db1a7c23e4f9a70ff232380546
SHA512 abe5391da66e74b46806a0c9b9efe88b0de6f640ee4b3e5d005790ca9cd802c6b4ccd6728628b22586ff62c09655a29cc610f5fab4c4609f244bab9e8c97f056

C:\Program Files\Norton Security\Engine\22.20.5.39\symerr.exe

MD5 423d3ac694a95ddb42caa58079c52707
SHA1 788e9823382d862c6f40df0af01d6caa5a317c3e
SHA256 db43ef063a72eb79d94ea2076467769c90bce9399db86d7737ddca117fd6debc
SHA512 62c03c44d7e3af42f0fbd7b1c646106c0674a9a64fb6631342911b8f1c0e062400a6706441d01508b06cefc806a070c15093d583fc7303d1092043cc6ccab3ef

C:\Program Files\Norton Security\Engine\22.20.5.39\ccSet.dll

MD5 cb1462383361bc3359a734d40e2879a4
SHA1 d7d4d9bbb9cec546ec5bc92f759df2d58c1e6049
SHA256 975c298562fbc1c7266be065d7d877c31356c766ec789d8e174fb6d0f35c1dc3
SHA512 fed4186b3c4fb27aada74cc6b112fac13d9d1e2fbc70128e16f8754eab3ea2d5e15235d9733967cc9323fc41542ccbbc407b3ba0c9307f95927fce69e55125ce

C:\Program Files\Norton Security\MUI\22.20.5.39\IMAGES\CSSBase.dll

MD5 b78a2852177119c2afa571c997b7574d
SHA1 e7f0799472e309c665d0785cd5d0db70f445ab69
SHA256 1addf1db53f5735183d4b61bfc6f8e925266f98ad52ea47e126d5a70f6575720
SHA512 4a728108bba4888d67c280283d4940e53cd085730783a8dd238838c1cd67b33ecb8e313484d28c49a2a7bde1fde97ff64f23a72acad44c0c29a1cc4f66739c4e

C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\CSSBase.loc

MD5 ed0897498854e46e4435384e3b3cdeec
SHA1 775f888491e57ab7ad8d61e9fadb44424ee1ef2f
SHA256 ebc0cfef5d551645e66e2f6daba6b57ec7f5fd1ca2b10181327a7d1f454bb136
SHA512 08e7b2431032229c1f3cb7b8b4b4cd262ac73f801dba591bf31b788a75360fd4fa6ce8f5fc0367af08bb405afed9a8b357eb115d6624a098d702382a7d83fdcb

C:\Program Files\Norton Security\Branding\22.20.5.39\09\01\isBrand.loc

MD5 8718ac3fa41e3656f96715b8765f71dc
SHA1 d890af7707496f63c47a5e3691c0cf167feba8ee
SHA256 39e6dc84be27ef44589e485e638b3494121f2b6f2985d2dd7f51b1933bf3fb48
SHA512 373b7fe51fa92890d07894dd8706a8085651c84560c0a4d4cf2cf04bbc3bf0121f659fa63ad83c2831333325221d5d8076c65f48a5315d726730b5380b27507e

C:\Program Files\Norton Security\Branding\langver.map

MD5 15ee5d9cde30009d34bd23550c1dbe2b
SHA1 9893ef83a126f895e01917d56258b5d4cc272ace
SHA256 cfa26c135503745c80a6f3484a07a0509eaa7f9ee1853f38231ad9c645b80205
SHA512 d4a1c8c0b7c8a5e00f652f96069a8d252e842af5c0530c87fc8fe03055463dc6e3a33301258ba6acec17d23b4f6adc7916b863a08b15ef31cbd80392ffde2990

C:\Program Files\Norton Security\Engine\22.20.5.39\stdres.dat

MD5 0cd58b6b420d71b6a4234a4604748c45
SHA1 7f9605ba7abb7d03a6a4ae849e87604bb51b7f99
SHA256 027aa5868141ea5e75fe8e408ff535eccbfe7b31fb98c74549e3460867fba1e9
SHA512 9dd1d542c53985b9523967c823e15fafd86e2adad4048259222e2fa6e6946b7e23c15981b59ff281b59f4124129e2cb1d4d404d5be79f1a456e5cb1442122210

C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\sqRes.LOC

MD5 dbe4375a6d4377e8e0e30833debf8e79
SHA1 28a5a903273bea9af83657a8378c36d2110a1456
SHA256 1a9f75ba67bbcb57c249a6869170a14e206056647e15743e8923fdff2684fc12
SHA512 4ccbbf121886da92db615e60e5960d1ecf3d45ddfa4923f1710b4630b67838ae721f4fcd598c62146eb039966920091cffc5a310d1bddc62f641739b8a72d8dd

C:\Program Files\Norton Security\MUI\langver.map

MD5 88167ab85f45912d1b2d7f2622d4948a
SHA1 4711cba478b5313b2607aead2fd5957f37fa2212
SHA256 8bf1f0807a78b092f4c66dc6403f1be0855cf2b9d2c452051976a237cd0a52f5
SHA512 b835640ce7291d3a19406a634ec650515b9b200608ac047d5c5b440dc45aaf67754f70f617fddb201ec7d13af52afaa9e440ba8c75ea2912c06db7e8f2e2ab4e

C:\Program Files\Norton Security\Engine\22.20.5.39\sqsvc.dll

MD5 c1d25f7949a59a8e5d529db4f0f511ac
SHA1 44097bc7e96294e5bc55e19368ba14cf280a435a
SHA256 af680888c85a1dadd3afb27faca62a1e8b50d8f3ec80eaaaced3884c745e3967
SHA512 b7bc6816f933aa2b9c069a476cf18e6d740be062bdd56d8089472bf0cede8e2125428d7f4845b2db4fd93a56c0473bdf6fd717a9fc04dee1089764c567bdfd36

C:\Program Files\Norton Security\Engine32\22.20.5.39\tuIH.exe

MD5 dd0c9e301b0c5a3b355999bdc5b88b8d
SHA1 16fd14f8ab4c9fac1c63a3987c7cedab15e77e69
SHA256 0829d43b353551cfc91d40a67fa3f78cfebecd6bb48dff6c946e73488f492aa0
SHA512 48bc80e6cd2a297edf9824d64fe0ae6b889fc150864ab4fd9c30983491374094c653716ada4c003bc57cb81fe1c5210d6de82ef57887e9f58740a37bb7b2e702

C:\Program Files\Norton Security\Engine32\22.20.5.39\InstCA.exe

MD5 16a5fb3b175d0467c651cf688d9c63a1
SHA1 f1c869cab22a452dc21ab74c510d47522367c8af
SHA256 a092208bfb94b5305b008b13c61fd0091fdfdb999d1c3a11ab49fac99e5c2d76
SHA512 fc90a88c05631a88747798416a7852b620baa9c6e292e89b8c18c6cf273860ea726e47d7f26b0d712554b1ec0060b29c250ece2a504bbb2fcdd27bbd1e960352

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\diMaster\service.dat

MD5 9e0d7afdd81760ba67620d4ab950eb44
SHA1 5eb0ec4239a7445276a67f91e4d1cf451a6b6515
SHA256 f3eab5205e278ca19e2427048e818e43b64585ea11c2f9701850f3c433d341ab
SHA512 64cb3dde8e9759cfdde79d689fb7bbe6bd370d8c6495fc7107d1e759286528f76bd0e2e16508c27238f4538bd5a908ec6f115f4a03e2335d83b55acda093e4ee

C:\ProgramData\NortonInstaller\SymTemp\ngc$20norton$20g2$20install$20scan$20sds$20definitions_microdefsb.curdefs_symalllanguages_livetri.zip

MD5 7450ea66848ce99ce4e7f61bb8fa5012
SHA1 5348b388cd6a563ad6ee33ab1e83f906602d1bfd
SHA256 f9f2d1321123405b3a13920ad00d215ab33e908baa725334d3a7ce05d430cae2
SHA512 317b00e4948116d56a7cb84e976076445a9f89d4cde270fcd4a23d3eeb88d90889610fcae767ad1a83e57a1b60e2a3d43cdfb39f7b6f1496af5cdfbeb556ebc8

C:\ProgramData\NortonInstaller\SymTemp\Patch8822\zdone.dat

MD5 2ea09c8b4b4669c516433ae31982e259
SHA1 2a81643bd087028e56b8b7e89e13407ce3911383
SHA256 052f9712b651fbb9fba1c080c6258f79df62fd88e930903eb72283bbc030ae6f
SHA512 3c43ce201d26eb5996ea4785270184423d082f74734403f4835108168a1b89f899d05d595dbe50fa4a1010b4bf431f24d4debf1f5e9496e29fce829b804463ae

C:\ProgramData\NortonInstaller\SymTemp\1711126202jtun_ns229ennfulc3sdsrem.7z

MD5 d2d7747bb72bdae08efacb0cb3c71265
SHA1 a566924232069efec707eba9008a60f4aa96159c
SHA256 e6b9cf9ffc66afd80cfd11923f5391fb4ecbf2395c711c951d678b93de1afd0b
SHA512 b3861fb7ed2aa6081640551c4d2eb0f106bc968acfe8dbcced3bdf61b9944f4229debc7b343f573e2b6b850756750920fa129cbd0561c5b82bf009c8289dd47b

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\catalog.dat

MD5 843ee653198818c02a1325c741a15380
SHA1 e400e6fdd500d5bf82edd10ed78c80e7a7f838f6
SHA256 f7550d696f59f8e496de0115c8f77b160091c708e45f805fd3e692f967bdc014
SHA512 f00aa00626c8614c9888878737ab50eab3f937c04de3692ffa166a42bf27a6e1301c8c1187e535a828428137c5d74228f8a7935975ca359b04e9d64bf48b6593

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\v.sig

MD5 78a68b254c90d11a638c6f9d9c95fa48
SHA1 d903d1d95fb30dc829d84f70fc81b22c9bc58af3
SHA256 648dcce6948ec4444ea04d5334648f4b77b0dd86ccbcf4cd835c1ec9d1f18b8e
SHA512 2305e256924b9cce6b8815a9fdea00439d43337b34f1057a5a22c0f33af5226ee4ce7e5481df08e0895c113c19cc9796aa4f0457772c59e899c19b19d2e6b57f

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\v.grd

MD5 7ca3073cfb311551d55a97a0f47c44f3
SHA1 7eb0f44d5a316e470f84a708e290055874351695
SHA256 53f2b0250783c99b9699cc90ad3af769048b6b494727d86e7fa907b1e9c7ca11
SHA512 91dcab377b56583a8e123c099086f863986109de9294f6c03b1cbf7bdf0e984ec3d841a6840d98dc25ccb49bfd25355ce72e3f8d6ae4a6dde9a76c8a6523db4e

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\ERASER.sig

MD5 e4595df958d3c4032ebd1dd5312952b4
SHA1 fe8f397826bfb5ca77775654df3ca8339bdf3d60
SHA256 bb7f74f3fd960be1028a12ced4113f810fd27407cc584e846088729eb90c84cf
SHA512 4d673e6802dce5481ddcd0cdab9218f846f0c56ccdd5221d67936f9d6493c3ab3449544d5025057f863e2c3583669c0cf04d29b1a799d7017c68e9d4e9d9af6a

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\ERASER.grd

MD5 4b93d109faefe49e871b84cf6ce97c65
SHA1 02649ec807a15544ec7087f328d4e0978b841a1d
SHA256 45bb0e845b39ad08e52e209b784018ca376951707002ff545968b871e71d9c38
SHA512 36128c4a0489425c129367acf8604ba970e02165f4eda2ece06ce0a20353a4b7d0b99ce59057f48911341b21c921206dc33f14127ca72e27eda07fa443255c71

C:\ProgramData\NortonInstaller\SymTemp\Full\cur.scr

MD5 e54215ef2a7c79bac83ef0a8b88753cc
SHA1 0d1989855ffe7c99b02f78fcba87ecc8bb03b336
SHA256 5064a38e6cc442b6b123e6f43bf440a7b6aca8b48467b57664aed8f985a05a4e
SHA512 9d25135f035a1fc93e1d9929f4ac96c45828161f3c5fff3ec37d0ff9b5fbcd6b941ba651f42f544e948b00de1115c2ad0508c329b8e8889a92138253dbb6e236

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\hf.dat

MD5 1a1c9e1f1c11f8988bd47a1673909569
SHA1 8da49f359459d1cc7456b3c2a919929b791a6795
SHA256 7aa51e4ed46139ad6e4e8bf2cf109443fe2b6144502187073d753232432f1f8f
SHA512 7fa4c15a3194dcc52a833124956409cb62a0757e437a8483c81cc4591ce8c8fb3d5f6dc6946c58393e01c13159ca97d81039036a5cc9944d5d1a7d63ac868596

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan8.dat

MD5 57b6e2a81b8025db4eb531c73abde1be
SHA1 616b7342ac2fe230f5f2c27e99c4f92d9e93729a
SHA256 1b9c56df6f33572ffaac5dec63815a7fb2467675de75dcd57292b4e6cf6e7c04
SHA512 728da1da505eafc5caeb81a4928c60e5f3058b9d4c526e89d25cc24e118fc72b0d57a31eb73f0fdddfc67eb1aa5b6eef6e7323055ad0c560764032bffcc5d328

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tscan1hd.dat

MD5 6e6c02015a42701784340ecf625987c8
SHA1 c4984e161ffcbe7283ee6867d649aa4134aa24a9
SHA256 705efe318240636b86083db13bd65bb30b028e5bf80d9e0cbccfbd9244fc29b6
SHA512 8266892179a88561c3b20df4a7c0f1fa3ff09baacaf6bcb3ea43cfde8824ba5cb42fdd690f33a65303f8626127a589d80125db13ebe98f6050431fa0febe6ff0

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tscan1.dat

MD5 4f611366ebba7be58cc5ea0bf8450c78
SHA1 0f58a933c9941073822d90e24e8ef4b95cde2ccf
SHA256 12d4b5408aca6d8fa3a986e97f3831cec6222b03ddd0a35e7469f83efcb0a558
SHA512 3f34575b3e0abdf01d5fe765319dea312926e33bc9206370eb10defc6a9d353f76cb68e0fb49cc5d42e8d341e123815eb574a5ef91e94c997401082837e769d6

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tinfl.dat

MD5 25bcc5d77219300c58397f6656b87b3f
SHA1 a43665079e47b768dccaf7b81a5464d641c21bf0
SHA256 bf0c5908fdce3cc823a91ee9a9f8ad9f8c713c4c6629294d5f168706e7128ec8
SHA512 24597efc05ff59993bb44209fc5ef344218ff418bc64c3b97d23bc58a1351521a405c5378e18597d535c5bb92d901e17e37956997a9042f2c5fcaa12ae886f8c

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tinfidx.dat

MD5 f482930d99d74bcd79cb09f2e88bb7f7
SHA1 e8b798f5ebd13c51ddca02cb1322e667f8125fdf
SHA256 f611a9803c3f35c4c5c09cdbbb5c4edcae9d86d682f7b794dcf07fde8f581348
SHA512 26e0ecd3872032ad0822d9d9b46bc1a22c1f24ce4e056e4db8e535d3e0fb03f955933d3715325d4f5a4b37e2eb4e817aebae04cbad9a270a7577986d77401cec

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tinf.dat

MD5 e7e4ac920a8c8cdd7c351c48821440dc
SHA1 dfe9e7f3c29f3eb55f86b7d58f55dd66ed55ae3d
SHA256 dda3e5dd2209625b095c0390996483208438b361fa55c8b86a2b498a00ba982b
SHA512 b91df159722ce629391923de4ec5bb2f7f1239b0233e3775170887005fa447abca688a17a94030bdb5b1d415a5102777890d6c4b13e556a46db98db800449209

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\scrauth.dat

MD5 384350958a2801b5b38d82c7ed52786d
SHA1 671d65a3e13f682dff123d73918323aa55129224
SHA256 81c391991ac11d000185dcab0443289f7f3e5bcec1ba0ce202402e6886bf1e9c
SHA512 abe2a6761b4525345b19920f6f9d64e9e7f8653fd1e42310421ccd8d57b09a4d0cd18f2784c2464f1c41f40dd0919dd95bc29263bb0d4cdde843b5a19d768a7b

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\technote.txt

MD5 8cf7157ef237892b91767335c1ee8e88
SHA1 436fdcf26b5ac051f777a557830898078f608d2f
SHA256 5fe4a4a0cb7292edf9fd2e703514ce9a2b42eab8219c4f7b82cdf1377184b863
SHA512 a74c290b7f2697e35816b947fc0eccc926af1bb84d5d9a34cbcc998a5782fa690abf048f6cf54e6674e2d85242f0c14608d615383e755449bd43cfba5f1d32f1

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\ncsacert.txt

MD5 900f31fc586a42ce2abcbe36563071a9
SHA1 2d668417a30b34131fb663f81b2fcbb8952ef247
SHA256 46261b0fe47516582c4c03704adc4265778258d7a61ada153a94a50a2d48b99f
SHA512 72f2eb32ec5f41abd45647920f6d68451a63a08a9181d672cb527a24c5582f570b55f1a4e978d3670564905764bc817b8cfc9923438b1988a2b5b3972d846cdc

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\whatsnew.TXT

MD5 a224caa069da8f3777911c06c581a8ca
SHA1 8b4aaac8992d4f06fc07fe7c7db93cf1197e4fef
SHA256 1da2fbc51c10c49b3f2940246610478e80ba7bb189d3e27806dde10023db3a2a
SHA512 b32c3bdf06406e7d11b1d56ede6f46a6d3aeb9ff265873f5e78b679eed6f81877b840b43b6b98dcd1acf3484d41b77da35dc7b5391c46d3306f30d319d4a81f9

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan.inf

MD5 c43fbe98ff240c7cfa79ddaa0dd66fc5
SHA1 5b51e5fecac4515e0477b3b4cf48c47d4ccb07e8
SHA256 08f5faba331be5355f5e378b85b69291923894507901fb4dae1d6f1344644af2
SHA512 f3d68320860b13df4a48a78f8454163992f5f499e52a2a73c014789467f6025d4c1d54f9132eb66cec225122954ab4a817812b4965e477518b05e276e7a8023c

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan9.dat

MD5 c2730f24d1d87215e1c809b4d7458be5
SHA1 65c1beb148eff388d8bf8a24c60fe861062bd388
SHA256 b647bbc65fbf2ddb6fec4d40637b925336bf9db2ecaa786f970588bd8823cd1c
SHA512 f0d8a4890fd56a3d32fbb19c02399feec70585a864d7ba1f05ef6db3342699a4115728b4bc204b15be622238c0cfeb9bdc8b63ba0a1a8c090ba79a515a4c431f

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan7.dat

MD5 6f5d5908cbf194e4bf0980d8a6a8d340
SHA1 dc01f7a3152b01cc587eabe0a66c903f9b57843e
SHA256 986da8070c475481ee8893d51bc3f50b6f521125173c4501d12951f958b3e81e
SHA512 32f4e0bc673eb53f9b3abfd3d6ce72bf065860ac25aea7930c88c368ecdc99ae8e5bcdda6b98b4ac0e21cfddecbf1fbf4f71cc0a372f8a82aa2cb5ef78b92c21

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan6.dat

MD5 0e4e67959249aac2979ae97c538fcada
SHA1 ea6801ab38f3acc2036c69e5e5468773060d9470
SHA256 120efa006c86f107c9d7daa93ada274d2cd5cafc3057293d288092028d9c04c7
SHA512 a7dfbcb5ee523df5ae0d51ada896ef6c552eb327ab9d062179590f27c66b43c87fa524743b81094bcccf4f0c7b1dfec00c3aa0171d91534255bc6ef359fb9b4c

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan5.dat

MD5 201f00e33951d001cfd09c911fdcb7c9
SHA1 13d33c5d67140569f5cf93c63b62a0f4e3fb4650
SHA256 795b586950c9eef05240b25296f51b2ceb75cd74776a1d82dd672bd68c43a13d
SHA512 03d81cd613cd6a1a9705c82cdc274c88ad68275e9dad58d2119392677ef3c7b1093b6d9b182c8468ca412633098bc4900b98f731c5a25e37fd992170908f789a

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan4.dat

MD5 28dfb4c5abf568fc93ec65d766227e0b
SHA1 74493a1ca5067a3cc9d36df6ed1ab894a89c0ceb
SHA256 8fd4a4ac7401e56279d057c1bea4d095444159a87325894e413bdecf2112fc0b
SHA512 eea3e86898fe09db8370bc44d4915c0aa0135e45a804437e469b8eed368c87a1bce0382c39cf2714837a5a0c0c5ab606ab6b207cd9f7eee239402e415432e3d7

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan3.dat

MD5 4c658839e6d6197a69cd4ad612a4db8f
SHA1 e28fc3e4fc594956f84aada0ef1a929f6e9c1ada
SHA256 aa6e13b87eaf6ff3b50b3d431d9d0dd611c929a8ada29dc56a9e44a77027daec
SHA512 13e6e2e42b09567f5f861bcf38e7fe8cbed73599e6e5d0f04924f2ebe4ccf98d7aa5ef9bcfb8501353789f39794a2157399daee18765a750b1ce3fef6fa26f06

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan2.dat

MD5 549c50fd0d99e343d98c96d72f139932
SHA1 28c9f66ef8f9c2b911e26a6d39d132e5e2234097
SHA256 2f9e7cd2b3dda4893e3b159f7b15a99fe8ec8af4b35c0e6310e2010140b0fa82
SHA512 e99588bcd39953b25826974c2917d49fe1a30af55483e25527a094afc11cc29ff4b05184fad537539ce51bf71aea265fe172a63169d4fa29f024794146a3455a

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\virscan1.dat

MD5 b53eedf4b1244de818a1cf9a0a881fed
SHA1 0744abb66af5ceab6f96c9a4cc92fc2a2e48984b
SHA256 d9191a5fd72b02edaa4b132148dc3c9324ffb4254a029354ef1ef665f433aaba
SHA512 78f8f540a2252e31e1e16e54d9a6e1ad4ae215ba8dc4e76fb7fc6926b8a57c68c811eaac9c2cd003c0becdc224d05d443a493ae0428e6a42d101d0bf0fa794c2

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\hp.dat

MD5 43f9917c236cdf7a3bbf173a9680de6a
SHA1 ecb60b9729571a01e01fae5bfb68f111a8730926
SHA256 d00af5ef1d09244b8cc9e76f268b6898e87307958a16bd1249e1f6d8ca38868e
SHA512 1c4b26082061fafc482060a135999b56bd82047ebefe8f4f9d0baa5ab0e5401b8fd06bafd04a67357dec4a47047e8c8152b09b2b7925e10178e964ad920f251d

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\esrdef.bin

MD5 ede905650b9fd98b3bf97a60520da059
SHA1 eae31786e0db0af72d3bf9e7c295d63a7c362133
SHA256 f1f0ce21486884580a20f9dcf3ef3846ace1d4122167e95fe2b5d0fc19addda0
SHA512 e83b02e8d5bac43100a1f4a7ef0e74a7c9abbbf387a84f62619b51f6cbecab30ccf5294729c07f20c365c5263d735f61e430b59fb33d173a20096a53345db830

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\Eraser64.dll

MD5 cfbc23f7ad1f290947e709c3fc5c4a47
SHA1 b77ed989bdd8e57312c98e0f3e33bddd0a9865a1
SHA256 b6875cca017ff053cd2d17c8c84beadadfea6e1fd88812bfc158a17314957e76
SHA512 9fc71e62cf224fc4875c92d23ec3ce8a79bce4a72b4216ab2b9619799d581d1cc64d92d811e5e6f12302e19992e32dc83bc23f94a0ab68ade70f7b6bc5e84d36

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tcdefs.dat

MD5 23745aaee316839f7ca818992e3ee012
SHA1 e636bd0e390654d08a80e91b6f20f5f1766dd122
SHA256 2811d717a4b871dadfdc80021b97334dcb6ab065690da769701a602c78940016
SHA512 1cd287ca51cf7cd8a8561645a0a350c3709c76720bfa54abe358f215f7183d64b3f591dab21dfc33c7b24c67510c9bba026d92beb02a5c9e8e72df26bd3e4dd6

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\symaveng.inf

MD5 0f0ab5d8b0b33dee678f7868638bf207
SHA1 245f6528833a444408f41c0d5e72306d481e19eb
SHA256 cced48a9faf12ee3b37d557ccc96a767d631caf2d379e0a27a4aa47a0b5e0cbf
SHA512 b0c8b8dc58bc8e8ab9b96d316601fe11989a59ae55fbd32f2ec865717ad76cd3619662877411a33a432e5035d6f332430d051a196f25fe133c2fba9e7453d302

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\symaveng.cat

MD5 067cb26be1597071f55bcfda46500c4f
SHA1 d22a0a9c16dcf86d9cf38da19a123919776dfa15
SHA256 832be525257d81d68ef2b0672998a4a1e465941805325dfc001433740d552e00
SHA512 a62422f9da1493030bc9d45321ab429ab40045ecb499c980ded617f855b888e08851fbe63c85175cde9baac0d91c6860eac6bdd18a34063d66df536c4c5c7ad1

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\symera64.cat

MD5 baf75ede0d155240c823a3547ab9f58a
SHA1 917d9875d28d13b5314923bceff9ab7d67299796
SHA256 18954176cce4dccab794caccf39d64a63f4735695c09833f6df5f3095f6d48cb
SHA512 ae35d3142a594613253bb221d29344f9af40096062154e53257ee071997ab9cd6241574eba44140282fee3761e9367118e041a8f6de5d889ef2879a38a3b807f

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\symera64.inf

MD5 2b6cdbc8f5fcc637fc640b8bdf6de139
SHA1 9b8b93034be86dd961f4e6422b4d43341f15a716
SHA256 e13164b26468abe7fb4bae78ffbca0381236da194c74d63fdaaf0d2fb9b9c42f
SHA512 e162a530796e22f308fdb53b92cb0a7f51fa7c27579b179a1ba61aa4cd4bb4f3d57cc988e7409fbbed21e31728878f89bce5410feaa23e6b409972f774c7a93a

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\eraser64.sys

MD5 5f7841ad7bfcffa48426a900a29dd971
SHA1 dc63316a0d786652256cea9bf70068d7bc20986b
SHA256 36a755f3272c3e611c39dfddd588b3d84614db6de94bd1c75e8386fbf2d18106
SHA512 972f89aac8fa5c8182640c0bf8d0e41a999a1f7383b594601fc275339175d585297303d4017222d8ac3ebfa813b6c5c210290285a5efc33444d60eb5e14a8133

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\ERASER.spm

MD5 b7b308580e1b3ec5bf04f8b7cd7f45d5
SHA1 ab8ac06422572cf5d9ca96976829cf18c64a6275
SHA256 124dd0891009fe8d0a6ac32b6ba37b184aa3d487be72863e2072655a1ebbd1f8
SHA512 ee841f620593ff7d1a1d4b525a978c7f2adac3eaf05a89dde570dea31067cf40dde5c53ed8837cc1ae8b7938b8583747d43eb2e1d5239712ff6e9ab3b8431c1d

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\eeCtrl64.sys

MD5 1f3d868f014929141d983d8e6b0714bc
SHA1 d04422325bbfffa52d2cc114ec25eef726821044
SHA256 52b60acfbf896c9547e7fe7c568983cf65357bb2044a1f443dc9691f1e74191c
SHA512 cae63f0ab3a596e3057e29fdf1c2a52a75c2b1427cfd3a8d78c4b105f67e10a19d70c29851e8b2040200d02a0a79e829e091420821d6141d985ae4170fe9d340

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tcscan9.dat

MD5 1cb92466e19a7301c1e501bc8e327c46
SHA1 1d86512a83a77c4608327dd989d3eb10cf84e2df
SHA256 83dba56592ac6482e3b23da5a0b1e2e593fd322614fda9fed3667aa3df91f4ca
SHA512 2bb87b5b5baf8fe7bce9e19207b87ba5d59d3bab71d093e0db953a2c09547b20484e6e843c9e6a1dcd6c52b0fcd6dfc1993e4ef8a00aca09d4438d494bef6440

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tcscan8.dat

MD5 fc7dd0a274cfeec2ab44c54dcf4c8ee9
SHA1 6adfe47cb3395228e266b3838cd73def0eeac62b
SHA256 0ca5a1a7060b2c71ece3c8df7d82daac4bc3cfe2c4268c58106bc6a3ab4c2bcd
SHA512 aa944c4494dd18f2be60e51e973e8c7afb853d6f491c29436b2154bec6d1f59b1c4753659a1180fb1d09e611f268e3dfdba77503510f841867dc957413aec735

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\tcscan7.dat

MD5 e3cf8dd0b84c0c0f2148e20701a1da14
SHA1 06adcc0866686465b63a355a011772de428dd088
SHA256 645f99410625ea4f98a9fa8e1e26b54617830711b8859f3eddd04cb6a026544a
SHA512 55fe79973461ce3c991c96489863141aa10b796c36a291386618e5ee9c27fe36dc38ff2f032e098e8a1a7ec2382a7cd969f732e0a601b1a0dada5468b5bf2eef

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\sds_engine_x64.dll

MD5 1e476057d7c37b9ec1bcbca018198864
SHA1 d3706a3d15cd080f18014f3f6e6beafc1c12ce9e
SHA256 83a4924e8c3b222561d583908804f7692b73e4c32999f4af584bced7c94209d2
SHA512 8ef63069ca351c92514f8fd7f37be682922085ba9b5a9a6da1ff437590fbf7a83afdf018e9e1efb64f8dcd2bc7bb30c9b4f92c08450bb5b0fcc9e2b4ecb2b812

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x64_win64_af.dat

MD5 6c4e14575a0c5c89aac7fbfb3da2cbdc
SHA1 c4fe5fbc963d0b398a177b018915c98721f036fc
SHA256 1b8ad7d2352888352a583ee9a05385eb6481486015d9f6e91054ca8676ea28c2
SHA512 a1c3212749b5de482c61b5aeae9a454895ec59e29cbe6df81339d99c989827888de7fe16796e5e59f3f4adaace0fc7148ef2dc829ef949455321ceadc52a6c49

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\eeCtrl.sys

MD5 25fee881e37c3dd18750357428441562
SHA1 a29c8514cec188f99ce54a165f622ce1aff4d8ac
SHA256 9d7f465b244b567b6e29844e35c11315958ec7a5c74298c0d05514df6b22e4bb
SHA512 53b0e77cb214bfc78ca944cee3cea137dc1a99139ffcd4c781a7f3744e0ad943180ddf7f5a2eeef7b1d867e555bfdac29af917d381dae2015c854736e0ae5ca9

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x86_win32_sa.dat

MD5 a149dc6e2b0b3b0e00c294659ad62446
SHA1 fdc4d38b765ed06787037d3437e0d2f8205f1af6
SHA256 ddf4fd78111d4a458d63f5a28228766303087a94b68dd6dadfb668a0f0ef7e06
SHA512 d7d17267774ffc6d3db5b2f44e59de1913a3056f1a609c6478f279db2b033636ee8ad2cf94fb388888d7c5bf22f287a541fa344b8530d8bb9b6aff934b6e6919

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\eraser.sys

MD5 56470288c4a48b70bb64a5d5818bb0ac
SHA1 662d3febb95f07bb9d6b149368ad4d49b6a0f1b8
SHA256 762b1edfcc8c2bdf8085f442db0c1632b528da4b89a71f6f2ae9d929e8fb60dd
SHA512 1ab268c41aa3b3a9024ddd7a8e8cf6f274c7a70452601d869baac098d389e5aae3832d546362bceb64f69838a502403f840becbd9802818d64db87b5f6231e0e

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x86_win32_global.dat

MD5 443fcb4afb0d46fb33304349561c3d62
SHA1 cd5cf0c404178a678228b66c8f671a716d55e225
SHA256 1ad8f090cba0cbd76e2323a3ba0ec34c0ccb73a2a2f76fa39baf387d79cae127
SHA512 4393bc7bac6895ab1cf85fef01233e588868e8084ac60efa3d8370ef2fcf58d7e46d42b5dee7b9c9457b4af26a6ba3ff4e365108e52ab1a0176e3a51bde2c996

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x86_win32_af.dat

MD5 8d92d6ed8c26cf6bc3050fa8cb779b18
SHA1 20e3ff34f97dc1a6df447f74c38768327c1e00d8
SHA256 ce0b3a4a5c93a86eea4cb7d7cc1f0d165ec9d3cbf632e8f5d0e2b0f501aaa82c
SHA512 39bc7029205ed8eb52ca35c1279b377c801c95beacbb4a27b638bae0de0e4089f0d22c76a78a05289e089fa50a0a624a1f8049de6467c641ad5fef09fe2904f1

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cceraser.dll

MD5 bcde21dcd4601108700f67eec789fee0
SHA1 d72ab7d195fce3c7f8576e4f0dda90897d66c535
SHA256 d6be1fe28553f2cf1b077917b9f62387752ee8bf54202fb0ea6c69acfb9e2e57
SHA512 5191e0c0a242aa38faa72b487698b154179d1d981b347f334ebe1ecaa6ec1d37690d3dfd1d3ad127c6242724c0dc3f62faca59658c303491ddcf08107b4c55d7

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x64_win64_sa.dat

MD5 0ee9cfbea07a5587645f5cca606d1510
SHA1 2da4fd4b1c1f8d47e50ffcc254bc3cf7d1e56dde
SHA256 60cde764a0d62e25159397c2e07682aff1947fa2946116a816d98838a5961adc
SHA512 b27d382ac3839adfcd93a2d68aae5c8c929f0b99e9801b720ab5e845f370ad0dfb5a46c427d9b2bef0137d4c186082890114a7b80fdfc13d8bdc60f1434c619e

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\cp3_x64_win64_global.dat

MD5 6c8e86982cbf19d4b5e790a10dae19b6
SHA1 c14ffb37f23b03ce6080966aeb472e6cffbbdb51
SHA256 72b0a5c3a161ad81e9c2ff347ad791fcaaf5fa422d9626a8a1753ed74dc6fdcb
SHA512 3b9901cfb373af1454604ff1f34a063556d8d92810d32cba8a9a86170e76748ec4113910e2ab3f833549efb3392ff53713e38a6252c45077e9c564431e829f39

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\hh

MD5 7e8b1a3a8682a090f6410677a52b86ad
SHA1 5ade701d712c33dc05de7f0f060757252e55b510
SHA256 c31164030bf79b62726a18078208f2e7aec60b45ea2b4157f660099394ec579b
SHA512 44be814c82922153b4c78b16316367060a1d15b636479a752d59210088c0393e212d539722697272ad267c1a7d65b4ef905d3ea3ee7e5a0d30cc4b117ad01fe1

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\v1.sig

MD5 c8890d26adb2c15f99f30b756ea790d2
SHA1 1c6e9879561baabc54163abe9a1fb29efea07404
SHA256 7c66c5bcb996601c742a1def0e8be2d55a6548d8846957f366896c68d5099eac
SHA512 f8050c88710b982d813474074785c6606f3b1ec9515382af10cc5f4d2f9b4ecbf1e2ab7850950d5df0f3784da79ee3c77d27d7b312d38a0a007cfd736c2dfb0a

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\SymErase.inf

MD5 313c1a6013a1f1b55b01c77c00c873fb
SHA1 a987f6382774cbaa962ab9f76abfeca7260a2fba
SHA256 ee45e5aa9fc27d4f1563e3c84a186b4eca03b2ea469673145dcce77d1299f783
SHA512 59b7cfb10b252359aec28194228a4f923e5b3f8ef306886d387c9e8f21325ac18a2c7687db285311cd24755ca7f011c591ef2af649c57daa78a04f045f965416

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\SymErase.cat

MD5 9ed9db9fd315e4ed9ee57b7d61ac8983
SHA1 be9c83093cd79b1e505635dc9b99203a8bc2dfff
SHA256 51b7b8babd167ba9405c84dd8af6fc8c22d611977bc533836a2e19cdea40769e
SHA512 23c9861794955608340c92d9062fcbf46ec9f00dbce6d4c5dbd96c9c83a87457aeffa7fb39aff98f11937ec8a917f024de418674a0e46c9683a73b9f6c88f1d9

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\tmp77ce.tmp\sds_engine_x86.dll

MD5 5603ae66b0768b1123893cc25297e37b
SHA1 a699fed2ff51c13612c4ff47d12f275eb2975edd
SHA256 88ad85e1f4df7158c3ff8f16a7820bd5bdf27ab93a23a45f7b58e07ad8cacfcf
SHA512 4af1be1b1ca2be73444bc8c5d4912d4c30b761d341aad77caee8aa223aa57d16822f849632ed9a4f204030b2bc4daff9318259e0fcdad4738aaef0bf6c44c019

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\definfo.dat

MD5 bae38bf329856bb41399af792e46d2e2
SHA1 979bbe9081e1b19299b6b54a3bfe62e71050bd9b
SHA256 84bf4891a570a47a811b26fd28b6a33102861e0388d85b4de2a15a7deaac9fd3
SHA512 5b1f1c3508a64fb41de6faf1ebaa674b8c23e23151be43ac52c9f23fe60cef5259d840def326bb466d00df7f4f56dc6e3db4f117282d1723fe8c30a44a827bc8

C:\ProgramData\NortonInstaller\SymTemp\Full\nav90fSDS.dis

MD5 3df42c33afbf88c3a3053f9a1a38094e
SHA1 c962e6a2583954848f64cd67f288a774dd885a78
SHA256 af7805f3976e3e65193d6eb50e4f5e71f5df042ef982e3cd5c7bb62eb05ed5e6
SHA512 2c5a3e22138e5febd2723f55929fea381a805f89abf567e14beb8769941f2ef77a0294c649a555554c5ebae23225d38ea525040054e3dfeab3644cb5decff0e5

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\Definitions\SDSDefs\usage.dat

MD5 b511f0e08ca987b22fb627a9fdd7dcc2
SHA1 7be87d80110eb74dfc4e9007e9fcffd606b20a2a
SHA256 d544669b01878e214a11da9623aed7518e180dfcadbd13058eeabe3074f78995
SHA512 63a21749706fda49150bddb591df834e0446975cc8b0fc71c3c47518bd36f9080f380270a05d4a6d74b279be75b95860b212c622d312a3800bfa83f204b6740d

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\DefUtDCD.dll

MD5 62e3cce3479f0a46b5bdd06093aea9c7
SHA1 cf9061012104e844227601214e4079c8746dfb26
SHA256 99d4b8db46f654157cdd9dea227e9e544c25ac52dd43e883dc8a30738e5c2ac3
SHA512 17a536d9cbea0c3b30286da214153c5c2fba9cc53e78a7bcaa63681b0d22731863fec18c8a163f932ed750a574df97aa45df87140cdc9e3715dace19c0b5aef6

memory/2396-4142-0x000000000A340000-0x000000000A718000-memory.dmp

memory/2396-4153-0x000000000DC60000-0x000000000DCEC000-memory.dmp

memory/2396-4158-0x000000000F5D0000-0x0000000010396000-memory.dmp

memory/2396-4169-0x0000000001850000-0x000000000185F000-memory.dmp

memory/2396-4178-0x000000000DEC0000-0x000000000DFA4000-memory.dmp

memory/2396-4189-0x000000000E3B0000-0x000000000E71A000-memory.dmp

memory/2396-4200-0x0000000008A30000-0x0000000008A50000-memory.dmp

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\QBackup.dll

MD5 d352cdcb8b27baa0fc2c5daa1519b6b9
SHA1 4fcafeb51eaac358c35244a4dbab32c336328b22
SHA256 55e10ab6fe17ebeab33f8431a91bb7c1901167c106aca4eca8fc47afff1fcaeb
SHA512 e19151fd8913665a433cb3a2a8fbb98c6bfb3be51d32be9596b0861504001ef32202189ef1c0d1be3a61bea963ad3db1af55655cd60adc726e389c62528817e7

C:\Program Files\Norton Security\Engine\22.20.5.39\nsWscSvc.exe

MD5 958af49acb6475c5f1606929b7eae355
SHA1 262d0b10dd97343a6fef1a555ef262d0d334504e
SHA256 c64668ca267ef32f146f0eba1d6619199fbb671203e136120d0158c39148b367
SHA512 107ea1dfe279b7d78fadc785458c8bb0eed95754d0f9090ce073fc1cd3c029193af3829ab9afd942653e13563f9b95c366ad6e33eaaa805cf109ecccceed483a

C:\Program Files\Norton Security\Engine\22.20.5.39\NortonSecurity.exe

MD5 cf07c7129f59b71b1f98d9457d0763b2
SHA1 f620537f7511035e92df833e8433f2d61efc2159
SHA256 f73d3ebbd55166febbcf967cfcce3409a3fb06f1b8d7d8f29af8bb47a10a04a4
SHA512 61dfc30a1457ccf5cc0f6ca0f5ab766c6d55bf17fd1ae8a6bb2f2693899ce2cf95ed88c86da655644aa66d3b017637dd017fcaacbdf16cb252b63fa3570a0b62

C:\Program Files\Norton Security\Engine\22.20.5.39\CoIEPlg.dll

MD5 52b12f54f4b3d906206a32e3fd37f585
SHA1 86150ec7ea8424b57227ee2754e439af22b4d057
SHA256 8e90987ee5793894b22c405bf1ad7a110b849b2e7fa42e359f45c2c2a5b3e2f4
SHA512 3326e5e0f297d6ace5cd9c6aa2ab3f9dcae3f29a9f96e1306feca9b1696cb4097e65b26cd4266d2b67fcba392d42f9bbaabb42c4696e4db519b8c658cb74aff6

C:\Program Files\Norton Security\Engine\22.20.5.39\buShell.dll

MD5 91fe75f516daff2714124d6956278f21
SHA1 ae420562b9d8aa34408bf6e48d393d0c6e09c75e
SHA256 57fee10c35a3e58ea9b1b3e11e816dadeaddd139ff71b0e01a5dffa01c1b7842
SHA512 8a58c5e292e55054490f7865451ee896721e0d2ddffec1cbdf95c56130c135a46f60f95b4944f912051c290f51e9124eb3a55b7ec821d2e0157cc826c7a79a40

C:\Program Files\Norton Security\Engine\22.20.5.39\MCUI32.exe

MD5 33f9546331974ac2f6fd3a96c7b4c84e
SHA1 bac515924793f632ec294b1a28ddaf9376b54f26
SHA256 77a68cd16886ac2a4bdc033984a0b2f26b7d44b3d82b03e7cf0d2ca5fd83b28b
SHA512 2b4e4a59863e1c99f9b70f03bc597c5262c40a40e799bbcf237b2ce62e41456a7bb0a1b7a1c9ec9493ff688a6b0d786408bdcbc9ffedacf5b17d1ed55306bd33

C:\Program Files\Norton Security\Engine\22.20.5.39\Navw32.exe

MD5 d509cb895ce73b46301ab56dfcf557f9
SHA1 97d1ef54fc0c1f6bee3fba784edfce39a3516e46
SHA256 79595570af6b10f6468f4cf8b0fe4b51f137d2f88a99510ce9ba1eb34acdd712
SHA512 b3450a52cfeba4440ce03ae2cde5467d759c242de9d696474b30c9c34fd4c4a600ab2ae63460f4c47af47ea7cd12a170724a804cc3b53d912db8f0fa39022d57

C:\Program Files\Norton Security\Engine\22.20.5.39\WSCStub.exe

MD5 55db7ecf9ea4b07d0f70a34451e1db78
SHA1 e2f0275e1cd931fa0d8502937657b6d093e65f6c
SHA256 4b4229c4b88f492045b42b9744b110b2e27a809b7823369fd436ab2903531474
SHA512 11653268b9564f82982a5ae72c81909850330213c533134f5207ba4b2ad1f5e70093f1c4d78d86afa99487632c2a9ac5a12d8f317009fc2b34d4187af888fc66

C:\Program Files\Norton Security\Engine32\22.20.5.39\symamsi.dll

MD5 65f004e38e4c0994908baef8b58ecab9
SHA1 6f40d4e66a39fd63ce1c84576431bfa25c8923db
SHA256 d48813aa3d98da7724219f767e2f207c7d2bfa9cf62d77d56893edbfb581483a
SHA512 f9202b8a675781ab61c01912e9116b5f1bea210dd922d3e35c6fc8514bff4e2a110a7210e26329d5a51a7639d914c197450f3d60c1185f5308b5f6d6462ae09e

C:\Users\Public\Desktop\desktop.ini

MD5 bbd26a1cdc40b7093c017f66f8805d00
SHA1 02acbb9cff46d9e5ce785e7e15b87a6bdf9a04c4
SHA256 aa3e53057dc618d6808c6902611a1707a8850a05491932ba50f0bb95c02b26f8
SHA512 987eeeff0af96061e07f762042751ab1881eab9f100c6acf720a3ac20974ba419cd02814c0e93d2f5b1ab24c8f10562c4f2922bb7214b0ae039994275f8fee1c

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security\desktop.ini

MD5 93959d73b9b2926409e0aee70bd54604
SHA1 f31be29ba79b970bb0b47642cb0a84ecdb9b37b4
SHA256 e48b9d7dc95965f99ccc21f60d6bc2e3f8bedaf1a8caae0bea56022d25f3e523
SHA512 fcc18459ecb932c370f18fc90d3d6f78bf9cd2f30a5bc3c4f942c26d8a99cc2ad70a9ecd57d2a13fa2a1329c117a1ecd982391ddf6433f7bcb26c505cce7ddcb

C:\Users\Admin\AppData\Local\Temp\TEMP.^^^\SYMEVENT64x86.INF

MD5 2bb85adf7ecceb53c47ca90d89bc34ec
SHA1 d8b18617aa93a04c2e015544cb7c1add66841681
SHA256 a88ad23af2bf0c6d4eb84884676938bcc27134600b5356b417caa2bdca9c9b64
SHA512 f310b2e0fd702ef8b68c77d5ca0f33b495c4cc7a2ade609e66d7a19063e88a27c5b7b5b5fc5352024d5b0fe8db1694f3b262149a7d8881d4884e45ea82572d15

C:\Users\Admin\AppData\Local\Temp\TEMP.^^^\SYMEVENT64x86.SYS

MD5 9d81a0036bcb7c946939afdd7d65ff5d
SHA1 53f53653ab9ef4cf24cfa080a183d27ce4c23e59
SHA256 c83824582801877166c4d094b29179d79c319cff6a93e86404e671896db57d27
SHA512 7b2384df72285aaf7e1cb86a86d9e51037a3582fe32f55f00457e5b210c49adb6cbd6e50ec324a7569f64cf5b1bbcb7731056fb27e12ec516ab3555444f80ecd

C:\Program Files\Norton Security\Engine\22.20.5.39\engcfg.dat

MD5 924b82de0b134f0daeeb5e49c7d79b72
SHA1 0a9312166f57a1bfd76964616ad9692db2542333
SHA256 5cb49ef8730466fd3ab317c59f58c50450a0edc51749620cbcdb5c029c54bfa1
SHA512 2d6b6537555d41c490dea1212c9066e4de02552cd1d9f69fa758f6a53476e909bef3dc2e43d82a3807fccace4e6f17ef3a7a22ad534be01577b6d6f97bceae05

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{67B43662-3EE2-4FC4-AAC2-5B1771BFBFBD}.dat

MD5 4cb9511c94625e0f846e6c45115058c1
SHA1 f5076c69ae88a8fcc4e129936e13dcc722f5b5e3
SHA256 d3b22c4b8a1109464b8da5c842d609d17761af71e928e8925f969217cd15ddeb
SHA512 bb4e21ac674c9b2675eada00d2ddbbe020b006cbbe014efafa9553f2e5c42bd7a8be1fb5ea4cae9fd3c3c31feff1d241904ba6b56c67b2a264ec28ffe2ab1574

C:\Program Files\Norton Security\Engine\22.20.5.39\SRTSPP.dat

MD5 0ee01aff4e8f2346b59a0bbe6a4b35ea
SHA1 27de4911f92aded2679308e875dd7f7267c00405
SHA256 4d7ece78aa2e5b8c3af732c2973ac81fd9a00359c912d8efc4e6e0a8311b79a4
SHA512 e6d6b7a79a702f6ec9f5871e3adce69d24b30f3035a8e46872db9be65131e8b414e553d8df319cca4779a481af9b956ac46f83e8be0346f3e547959b849ada66

C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\wpCmpnt.loc

MD5 27f944fa09e7d0e15ff49762f77ab720
SHA1 25204b5ff4ddba7dd025d888c8090aa0bcc58ac9
SHA256 d6eea86abe82ab644159e23bbf4b32cf5159b8b9bd52ecf122d6b88fb20085f6
SHA512 0e5e3f9217905e1d4f9f3ace09d7a5111944acf7fac2e6da9e749f23b760581347503f81135537a6f675a4d3861f5e59a4119b60ec96ba0cc646052f98b1fc74

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Framework\SpocSelfTune.dat

MD5 d00f58d5942b64f2befda9ecdade8c48
SHA1 0059321f49d59b99809905c3837bd62a5c5e7357
SHA256 aee1dd5c3c01d56440df47d4f870fe0a3b0a19bc721dc99342a9fe7600cf0aec
SHA512 5e3e867e14030ba2f16b0d3d31f9bfcc131ae4a6e00950be62876771cd08568673dd9ebf1fe1b0637a3a26d7f4cd1ed0b39862886fc020e926745249e27d4632

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Webcam\wpDynam.dat

MD5 9f4b640349a09e0f02a33f457037fc6a
SHA1 c9b20442ce38921332d4e8f7dfb0b5528f8f4011
SHA256 7569ea2d78bab87aba5516bfb53d9e7f27492a64333b202cb1c447e06633240b
SHA512 90ef9b6c302f92f3a2b6650590fdd8ded15dd6725890cdcfcffb84307e71209110be28a295fbdfaa1c7de204262f9fb7f41e730b784534866ec98e8cf19026ac

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Webcam\wpDfOpts.dat

MD5 aa90fba3766c7ed8735ccd02104704df
SHA1 e693366ffecf01ac9931002f6310074dae9c583a
SHA256 be5a07f37ea94c6849f9eddd73fd013725071542b20028d871fece168ac9e97f
SHA512 fc326129358160c3d73da7100e3bc9024dda2ac5c9be7a549ea0ed6a0d3b7ad63c82a9d351a94f96dd4380886abb27538d33f33a4a80c5ffe78c8b338773f7a7

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\SymELAM\symelam.dat

MD5 c499f822f3fcb7a865e5f4d500464ca6
SHA1 43805f074ad7ddebf53def34ce288f5986c06322
SHA256 ea9cd6272e0d6324835fc11472c8da3146c9aa33f95fde6680a05c41a7285cb1
SHA512 5dcb3914325858530a927bf5b5c515765626270bbca9ee201a2dfcb77f2b8d1f827656e0d31d8e46ddc234f8224a59ce5ba31e57855cb8c74cde738dd504cbe7

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\SRTSP\SrtspSet.dat

MD5 f35276f0cfd1c9b06fdbb546d9fada7e
SHA1 086262b70fc0168dc748ad70eae438e3a9421379
SHA256 45e75737a082175767a8d5a1bce29e8783faf8a00b585ab2e8a1955577282cad
SHA512 0faa1d1fbb5d299b60612d0412cfa06b9cab317c402c8ae7d2d3ded39993eecf8cdad6b2cbf3de382250aee4e47ec6e6f759752df7fd930f2f37fa135615d840

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\sef\sef_mountpoint.dat

MD5 98cbe72d5716abcfd23601993f4a6664
SHA1 e1eda4e5ec5667fa784b258523a11900249474ff
SHA256 63b45b2bb571b5089b0252f4a49d7555bc858fcdc39ef6cc780dce6efab25aea
SHA512 462f03c3a5db8cc99da85f12befc3162ae89d3b4deecc590b34f15e02bb04a8502d74efb7666a6bb83a45cebe0d47d271914b96c207c9fcd67b76aa0cca15b73

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\SDSLuReg\{C9A7588E-6E84-4D60-AE7E-2F81221A72F0}.dat

MD5 21356b2203449131dd2c9ee971b6b0ef
SHA1 9c843b9647afcd354671e2b66b1e2807b25ceda6
SHA256 e61e3370939c3258900548d8e5f19cbe40db9b02dda45901e0fc344e32d9c335
SHA512 191d60a6b291378a68023a17258389a125915b8c2717a680171adf8b4b4e9e23efe5031dd9a792b93b0c6f8bcc67952c9bf8bcf6660510ff72c56d962fac6026

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\SDSLuReg\{B75D33B4-FACF-4753-A650-72F4E9D2F595}.dat

MD5 112960e90ad0c53fcca4586e8d91ddd3
SHA1 39a6eccef79ca7cad87e1c2d14552ceb35a9e13e
SHA256 3bd3b6813098b20c713b8dfe0f0001b7b8f8743be0b426ca0fd8a0661c1861b6
SHA512 ab1fa4c4b9a66c666a8932fb7d2efba6c92c6adcdd2c3bdfcbad6d1de6fb16697bd83d067070ddad98fb11e2472723d89df56bb3a7122cc93293469dcb6aeadc

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\NUM\Settings.dat

MD5 570c51e55528303bf622b5c377651f6e
SHA1 4f48d288645aea810824d81702b107154cb9579c
SHA256 ee267cbd36eb0a138440b0fffdbc22fda762e0baeb4b42591d7a806c2430076c
SHA512 adf5fd455921163fe8120b97ac481b56a517ab18f1da84fb241c6a05cb38ab047d91c00b33632512b423fc6eab6f02e12d7e479afc1fe12c89b7c818272501da

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\NPC\Support.dat.bak

MD5 6c3c31bad2533655b56d2f7650847bd0
SHA1 9fc9a73a1eb44c727a341bbab0b535868df224fe
SHA256 5df61716e59b5969be018b69acde99806403db502d5329842664ad412873adea
SHA512 709d8d30e9f3ef23539261318aa3c589b588f79827a35c24805b478a52091cd00d68cc2533a5c725df362fc6dd3a4ebcdd86c9976617df040d493912b5924ba7

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\NPC\Settings.dat

MD5 3e97d7584150ef8e14febdee341330a5
SHA1 ee156350922169cfdbe0388e8a095a09e6c67191
SHA256 f12c172d5c794a018f53ae94224da877eeb2cacd359b374784cbb8900d30db6b
SHA512 12ac5b760f128b1deb35f312bd00da8890188fc020ee479fb66ff1292e15c2b011ee58d220ca099dd5e58a2cadf2f7bc30dfa086021ef909a3dcbb7c70aa1fee

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\NPC\InstOpts.dat.bak

MD5 d50aa01ec96d5aadad367f6b9546e887
SHA1 ccba22c8e208a7cf1746ea78d07164cc3f826f7d
SHA256 079d8ecbbabdc914aa95a69f48a7778e985902fc8b5dc1490f0e25fafa0c1a2a
SHA512 ee8f6762794fdfb942c5aff1e6b9f79813b775354151dd7e4f5d1d452f3a05c3d61abcebcc34e09732e6a6030583b6e187ccc62c566603178ca66ca4f0e5cd41

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Lue\LueDyn.dat

MD5 7206411672c0d6355acf3a7624e353b8
SHA1 e9889bc302b626afc6bdba20b42a22df63b17736
SHA256 5129edae9d35c0d643e8b7793c25de0e28981bd7f1c8d75818f54c2563fe72f8
SHA512 ee0ea3698812ae72acff6acf397c78317f0bbd4d4bb47666e8d3481ed1917ff814a88a0cd870c2d5ad571986e33880ad16de87e5ea3f75e82159e52cf15cfbf4

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\itbLURegBranding\{D4F4CC32-7A41-4684-AE57-41E59E9B4503}.dat.bak

MD5 af869f2c019d1d1242f521b4d75581e4
SHA1 0f2ad0bca48187c85848ea885842dd3e66f24008
SHA256 aa6ebe524ced05fdea2c68b6f2410f2c291cb189a82da9618bb1f1b09da0f106
SHA512 c9bd4e24a9263bffc833d93181bdfcbd065c492c4301f2f1b3d7f2fdf4411844529d4c4242097745be795184a95bbf0a4006cf7ea9196624fa696265b0d7dbc3

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\IRON\IronReg.dat

MD5 ad0aa9b93045ce097acfd76878d611b0
SHA1 49bb5cde455ad509e39255930c4ddf9eaf3751e3
SHA256 433e866481d4422b4365a28316bf808a6daa3f9ee36c2d203b4d76d1b5feea4c
SHA512 775a38e92a215b2b5171c4c1e6b08206f86bce1f3fa399cbcc4298d4e72e0a88f71f29f8f02455c9ce1b0c9228f6ee5f363cf6598a2a4182acb0a8a4bf57fda3

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\IPUA\ipua.dat

MD5 9cb77091504fe293c7e92531b8699aba
SHA1 ff16d1c2f886fe071786361615fad3b172a6f489
SHA256 24086249e80b8686672a11cc8d77cf950e2facd841f6d828bea68ceec5e1e3e2
SHA512 9dffe1ace99d1c4082f8fdcf282b528ac9b78e417714e1f1bd583175021f711aee5671ff99332fa686e85e11657d9e84baa4a5c59d5035d37b79aa711cd0e40c

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Framework\oxygen.dat

MD5 5291e9cdcd178469f5dd71aff8ead149
SHA1 3e15e9880b97769c4a953705efa551b873d22815
SHA256 bb4b1128ccd91b2658a586a7edf39548e86651a72ed5c99ed1fe96e4e14fcb94
SHA512 c3608f044765e070a56e8d0d26e91e5701e684c18319f94e22370101813f333118e73047a9dd93a0feef67514e08969ccaa9a83b8972c79035c160d71f9d856c

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Framework\O2Reg.dat.bak

MD5 fde27d6a677d8afb7b0c31005e2fa2b8
SHA1 548f8e8e1365bddaff91ba9c8055f405773b45d9
SHA256 3dde5fc1d74f02fec0a9116ef337dbeb97720907fd5a84c60f21061153ee9801
SHA512 338a5271684b3d93fa59263d9f1a599122d200d8c01d28afc25622e952b7c21932ef43a1baa9704c9fe156c5fef960e5ddd9839520fedbb7e0549d8d46897247

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Framework\EvtSvc2.DAT

MD5 e71bcf6682cd673ffe15ef2a0a4703b9
SHA1 d981c580a48d32a8d98701f7e413d9f71c56c570
SHA256 76172e5429b7f5e972246e0787e1e43d7f13ac777a298524e1aebda684a99cf8
SHA512 da3c3af76c9790a532c33572a9bea8b619d24484eb46819878b7b8ff887c868d80f7d9a16f42580505c24b89fec2cdee5aa75d87e1d6fd7be2ff87108f022a6c

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\ErrMgmt\SQReg.dat.bak

MD5 46387835eb3b95154ce9669de74556dc
SHA1 0be1c0143a42293338f1ebb2b0307b9a3fa28f50
SHA256 b05714268ef700e8986b7b13b8fbdb3f3a6024414ef4675456a714d1953a44db
SHA512 7e57c43ba652ce6172831a302d386b24203620393678633107a3cd676f5bd184e6abd165e6b1faac54c54a6b04f369225710e7e6940cdd9af198dd3eec6fcc57

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\ErrMgmt\SQClient.dat

MD5 11b852013a3bcdd948e8162bfa69fa35
SHA1 332c9c0356dde513e5bbdd65748028ba6317c85e
SHA256 71e31a517ae97c933d318548399f7b6ae59dc4d53056f5a0080723906ab84303
SHA512 dc3133bb2eff994e6b04459abd55f8ef2b9e3ee2f1ff2d1720960f4b8eb3b7507cbdcaa987da4de9a081bc79da29c777df4ac4fadba7965bf759e1d826a0fa13

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\diStRptr\diStRptr.dat

MD5 b429e9c0614993983dc9d03b902f7824
SHA1 6484d754c3cd17ed1765f731a08b8f63d7066170
SHA256 d10d7abada5b02d0d1c69003c6d30c08304ffbe33e8ff2ee9a68450e3e9dfd80
SHA512 6ed618ce0ec27384ccf44a27bf5beeddd8ddc0bc93ad8bc7361883d1919517ea7951323ddda8cf201fe66d299e129a85c5e37972f33193d0af5f2e1336b7679d

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\diMaster\service.dat.bak

MD5 f1238d44b50122b26f0d6928d87d4e10
SHA1 1788f6f0560795283b48b336c15ee127986e4896
SHA256 6becd50dcebc1fbf3880c1fb1cb31583200c310e238d69cde26f7725bdba3455
SHA512 96daa5d75ce056ed0db0898515bab8b626c8ffaf0f5095a938fd621857fa7d7d024ba47de276f1e2996241ac4b14fec0f572cd3428c08fe85332833b59eb6ffa

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\Connections\connectn.dat

MD5 64809b9ea7326e3369a3c90d1c710e2b
SHA1 4cd60d10d9c1199030d8c5466d369513f8a72314
SHA256 81bb66f9dd1b151e7ba0170f27280e95ad1dd34d0a07350ba2f2ced818c2152f
SHA512 a474044b068e920beddbc8956f4803b1e5d3da0abbf9829ed7699ead510bfa7a0905a75b9cbbec300fc9a8d937e34aaef75cfc2be2f5bb3e53f37bb11b4a7861

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\STIC\stic.dat

MD5 ee42eb59aa0072c88a42e00992fb027f
SHA1 7693fd837772c092ec9cea9621cde8add22e0bde
SHA256 b8f9e0a2cd016074cc8c28d37f86cee70243008f69d432f3759c35b306dc5172
SHA512 3ea88145130226daee2c94b8af51fb09de786ec9de74f45958251d9378ee264ea8aefd53bdffe0c54cd272e662a0317da3c547a90f68fa59f215d4f20005578c

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\SBSDKEng.dat

MD5 39fdef779392acadd3c8f54785a069e1
SHA1 0748921492d5d3a9e38e75042a090be0e893b369
SHA256 eb225cacc91a39071790aebe8f777bf2534e5a7867b0b65711bf33c8ae06fdad
SHA512 726263cac8f2435536e7a3f22deccfcdd1b3b9a172834134350c6934b128646173cc92ca559e4db70aa1c2493ac9b8f20c887258db721306d08ad0981ff3b309

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\EMPxyOpt.dat

MD5 f0cf556bcf70ec3e15292c87b098255e
SHA1 c6b5210a51075170241fc54065daf92e981572a6
SHA256 f1ca57ea07fd546640771b6b594699b2534a9350120f4df4f07cf2fafb67f4c8
SHA512 b557e199b9d21ca3e39efa89c9c1ae8f09af43ef7516c64ce307093af325e5787a3ec3fcea2a295d7ca556815527b59cfa13617df1a815945c7d3651cd25ee64

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\ccSetMgr\settings_22.20.5.39.dat

MD5 4f4b2b2338fee7ee6f2cc37b69cd24ce
SHA1 fc07c33714188514b20f7d4dea046d5b0c15ad04
SHA256 2c25257c713961b6ece48936298a69812192db6cc373ba2bafebe1c07fdc5408
SHA512 68a3e241253bc0e44a7962d51e0448521061a49b9e5e986d8480bbbe7536126fb721b3ba492a19ba33cd3d7c429daab3c4d79d7e6d728d43aca10d7b7214da6a

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\ccJobMgr\JobMgr.dat.bak

MD5 4c6a1770fda81d0f9f6c72de7e8399f1
SHA1 ebfc12ab006ae32de4538a83a389a44b3398c07e
SHA256 2bf60bd7f76e7e9e75ce677fca3c613800573e8c8c5bf824a106cf5a9263d67d
SHA512 8d71ebd064b8c098a1939edf2292f64d51c38f82886b0cbb239f1888701f2284a0de6136bebd9efe110e47c0901ae040015c5b8f7cc99ed461798138d03c5e70

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\ccGLog\ccGenericLog.dat

MD5 0b287b133199d2a824c5dff1e21bdcdb
SHA1 70ab0cb31344a7d334c8183dc1637975ca374bc0
SHA256 26d43d87d73f71e0841aed49c773d2cd4249eb90e3b7711504f4aee614182c23
SHA512 61d195104bc231088a6c172d678284752afa84b4a799c3af5911ed2301d48e8e4c9c9dc083eccb9e731c646b2f0a60ca411a6a60550fbe8a427f836f77f18087

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\CmnClnt\ccGEvt\Global\LM2.dat

MD5 384f362201f5895d45737eb305f14edc
SHA1 ea776e146fbfc4184ef176356ba652b0113e15c2
SHA256 b0ef3d35ce498a680ca82ac1c8cb211e5e8da9cafb5330d03a27f07d7067f42e
SHA512 ef87e83dee6f07fe0924133bf49edf32699337b8959ab9bb30800d57a2f6fb9a7be2f8ef9397ff9aff34552d6f7a2ff4a3f6b3ea65c4f87bb14881149e1ff964

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\ClientSDK\csdkset.dat

MD5 32ddccef892f86ee3fb9894bd1216946
SHA1 d964799ec821e77f45f7cb22d3348c67ba3ebad9
SHA256 8724ee536db27a79e6d645507b2ffaf214fb0009d9147bc30797a9b9d7145a11
SHA512 029640adc4df1905c07fa07bc5378477ae870c41453cfa7e78c071d9fbba3c1b18746f2664db0af4e70ee929926be283eb63e2ad4340125fd2bc21c706ed96c7

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\BASH\SPSettg.dat

MD5 b949656d6262782afd63ccdb796fbb4e
SHA1 91be26e25b2a4ba2670ff9036d69d6561a5a3603
SHA256 38e34b93f546c63292cc4c8e56122aca2771b2c5408f20cc4b4c170d4d5e681f
SHA512 8147fc682eda3c598b387c5b3fe8c52d5d09d674f58297f4976c230e407f9badbc7974df747fd50495f9d4940831f96e309ae5197225033c54fb3392b3843697

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\BASH\ShdSettg.dat

MD5 835634166a36255146d4068fbcf0992b
SHA1 83987432803b71817d208d6dfe350f7db4a5e975
SHA256 5d1abbd1af970a1d775064d26030a45abded10b35ddf123f769305d2924fece6
SHA512 b094102a2f496683a94380f0c75fec55db0743b1d3f701b93ba34647501c12e11adc66ff94c828bde9c93e257ac53a54505389977361b6e341a0d005f97051ad

C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC_22.20.5.39\BASH\BASHIntl.000

MD5 f44c3a2e5aa21a93e6344b278c737a9d
SHA1 09e7d4ed6105288d230ff4191fe8003ff7a75045
SHA256 fdddd95db286f94e633877789b91b6d73c67bd35b6e0e4d1c97a9812184ea39c
SHA512 2f117c792fb309ea0ad2920bca7aedb939bcd1d18afd039400dce7dff84fd06c4038660931dc2bc14aff6f02095f9b927d0dd9a546357168e6230aa56a19a954

C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\buUI.loc

MD5 09912cdf341d2b762c50e32527d6a8ff
SHA1 d3a6219c1cf0019778a85422c58094411fb65e62
SHA256 75ccaee69302ea9ba47c707629f01ad23e1370e94c3135e74307e8b5a17d7340
SHA512 75a449c94b8bb50b21e8ef9f299a529f7edaafda75c32886ccb733577f0229980ec438ab034fdfe4459ec2405ed17c6e92cfb477c682e5153d6d4066522645e0

C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\buProv.loc

MD5 34e7162d6d92f063b8ed7ed31bd1c442
SHA1 d697001c99864c30d64ff204a329f7350f6e35aa
SHA256 2b70736bc1e93600d9173cc80dc00ed2c918141a054991d181a214ca631ebf44
SHA512 dd4801a706f47d3de94a3f07aa24f511e26748cb821c27717f07614a4176ec2065e117d9566ace21eb8161fa5f73f2d20828aa27abf34cc336c2f2417e35ff6f

C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\AVPreScn.loc

MD5 d246fb8e3bd7560cd3922c34783a367d
SHA1 a86397becb4bad220ff2ac14ae109c042ea89b50
SHA256 99128396504c13879f3cfed3c5dffa4d04219fee225c0eb1830e493209484ff7
SHA512 bd1561ddcd57e0cf5db610977b778c70cb288013fc71a2c367b5233a58c057cc77dc41858fb7b4f9ba9dd2ee1012ddd5f864f7c4e6593ecc5c84deef5e3133d6

C:\Program Files\Norton Security\MUI\22.20.5.39\09\01\ARestore.loc

MD5 d4a236d3c07b20622781de39cd11ec42
SHA1 cb6a9f3657bbbd8ffbfaf29536eb990000866984
SHA256 04a15c435e3b78b7e77dcb45a63f7e679539d31ef56923b96487a7e9ba421d57
SHA512 874e11bf5a4b7fc3816121001b54cbaa91c997190893f1413d5a0b8f1e38230a0d869ca184c0034d894b7dfd9033ec32222dea0757923cf1348757523dfd122e

C:\Program Files\Norton Security\Engine\22.20.5.39\{F8D07955-00ED-4093-88AA-0A0F69AFD83C}.dat

MD5 8c2e626c98b7237b4928f8445e8698d4
SHA1 a27ea9905771f6c43071b6ad3deefa70a10e347d
SHA256 d5f229a462371aec97589afe260a280f8fa1c6d26f47aa550e4388788cc20458
SHA512 b4209517287a853d6c86c46f38ee04d8823d20fd41c2a22afa7f3a987d8fae9a485d3dd848b7940d7000742ac6b2f013f7ee0c72cba47fbe3b4870244ee215cd

C:\Program Files\Norton Security\Engine\22.20.5.39\{71B3DD3A-BC1F-40cc-A74F-C0C30DFCE7D5}.dat

MD5 6d0238db39ec5904a63735af901b3374
SHA1 eed2c7deab02ef1123b71b275bcd4f0ad5af3570
SHA256 f55fb0a44821723865deff81f029e14a70699043c1280ce43ad0a193154cd2aa
SHA512 9631a8c1d50898eccc30079fe187e020e50462ca27bc5e2f625386e3889e30848a16637e44fad42d530cdf777dc5e825110873cabf2fd775a690a4597b2747f1

C:\Program Files\Norton Security\Engine\22.20.5.39\{5EF648B7-A381-4238-8206-257C5565BB70}.dat

MD5 8288cab4645d2c4868a85d79407aa0f8
SHA1 343efd72e3a5785c62a87608aaafa13b60433847
SHA256 a00b7dce9e789dfdef68b500d338803eb7c3dd3241a93f7f8b356b30f95c6708
SHA512 b6c65c362535e0ecfbc563c8a85f92ffcddfb9507f9f3136fd79edfa29a98abffac1d8ab701211f8600dc10d4ccbac0e8f5d3f5d80ee0d8bae89779373dc815d

C:\Program Files\Norton Security\Engine\22.20.5.39\{57CD7B31-861B-46be-8EBD-AED7EDF28F76}.dat

MD5 13a2fbcf08ab16dba19774e86f2487fe
SHA1 143635b0a049d1de8ccd447a50560ae872af69b0
SHA256 a41ef7a68d74c0764740db8eb859af4aaa74a7d778b629ff704e478018271ffa
SHA512 db4e14c27df51379e3484134da0ff8bb12f8069c38e5c96e7eddb9af9edce4bf3d6e7334f3a1d23bd0b846e7d50b79fcef82c679d82759208cb56e54795405be

C:\Program Files\Norton Security\Engine\22.20.5.39\{50B092DE-40D5-4724-971B-D3D90E9EE987}.dat

MD5 d24996d9b421d7fabfc75bf848877e78
SHA1 8db190f4d789b0cba0dda949bf0a9c7f6c9ed0bd
SHA256 6ef1001bf14af51cad27356bd2aba22caeeef993c3c98a5e9595e1e902e6d133
SHA512 9098723d1346620b731fc354146b3e188bb632938414e3346bef81c84f9a07e13b77e1da3ea1a77b82188790b71a0e692028a8cb4ee8726ce909bcfc08aff695

C:\Program Files\Norton Security\Engine\22.20.5.39\{40ED6507-1D53-468B-A585-732E631DAAC6}.dat

MD5 50316d685d2595d450ddb7696fa28332
SHA1 5883ffc5680a4bad239b12b7befe5e1ae3013d19
SHA256 3a286176c65479546b04480ce90e11c14cafaf443ba92a73aef724d6d555af65
SHA512 3d8f1ecd7de6e18ceb8340dc4cf0d2b6f1694f4ac6f79d2c216e81f2d0ee6645fe9dc9019f6cefd26e454e9b444088b722043eb332cffecc72649c46afcfe851

C:\Program Files\Norton Security\Engine\22.20.5.39\{2A85E335-7417-424d-AD89-31DED1689794}.dat

MD5 a9dc0e3303859f6ac262cb0e3efc2678
SHA1 8735eed6e7b1cfaee9834e7a3bfb39558a597038
SHA256 c8dbccdf3895b7f1bbccb73d00096fafc2e7f9c1f2d3228e16394d458f4d734e
SHA512 956f75c2fc22a50ff7c258925d0b17776d4d410a54868a036a3d1497c8158b8b481d6563220b788ab553ec26161a62ddaa36a2d0c01f18a8fe8831d7ba615ea0

C:\Program Files\Norton Security\Engine\22.20.5.39\SymNetDrv\LOCALCONFIG_ORG.dat

MD5 a9f464e2fa7f89a06ac798094cb5f668
SHA1 dbeb0695d7b37d49722229490ae83179948d48d1
SHA256 6423ea9629f84d9da12d4022ba1eb4bee85899507c096692941a729fea7cde52
SHA512 fbe7b81acec26ad519359a289628001789bcc5bb11a373e0403577d0cad16bd7e3a9f26d1d23d58732edebfb230e757277271eb7e829bd39751ac275018b2435

C:\Program Files\Norton Security\Engine\22.20.5.39\service.dat

MD5 6c4756a797a79c15bc8ac201befad4e4
SHA1 1011ba8f125b8ce8b3e1b08f6069328e3f771f2e
SHA256 ec8f02348fcc2a754a956441525d7ba57988b840a6ce196c56cd5ca1b37a7bdc
SHA512 1838b1f0fa7191792b8cb12b4b91a22476f250fabd9e13e2a6dcb434b62ce5550479e288dc177c9784f7e1506e42c11727fd20ef5bf108954a26763a2f8bfe76

C:\Program Files\Norton Security\Engine\22.20.5.39\SCD.dat

MD5 71006c463f58f267ad38523679075fe1
SHA1 453d827a6afd5efd59ccc75257f9a75a570d1677
SHA256 a52821da1af9ff7c894e15651b20d1ca45fed0612cdaffd2c02bfb2e7519d2bc
SHA512 df40883f616cde614c987e0978d8a30af1117548723ec835c9dc5e0f59b48e78806320cf96b15be0b79c19b41457a6c1077f01a8846f11591146f4005a0638fe

C:\Program Files\Norton Security\Engine\22.20.5.39\Jobs\jobSch64.dat

MD5 9265a86d0e3bd88372bb182f87047f6f
SHA1 671871d8eed680294dedb6eb276631aceac35095
SHA256 c761637bc2ae38a033fce70c1f7c32bba913ac63be4cd5e0d8687c283f45fae0
SHA512 8d5e464764ef070547e3421dd2bfcb5dc68d5cf15fcdd4fbd3811ac29b5ec9f4f674025cc8be4354b14db27a66bb32b5d45a954a82acd14181328887ea3df1dc

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{FF3D8359-103B-1175-AD36-D479E4BBE107}.dat

MD5 f7849d2f7398341fdcc0385918dd59d3
SHA1 7fd94740ee1c7e807f763c3f3ea40f7e29605c46
SHA256 abcc8be18530e1715dfd1345cc382054813be309ad4c128a2e9718599b48ea40
SHA512 74d8dde4bf7088bd926074c72d59f947fdb51aae731f886bacd4dc3ab3fa75e50723b3305a2070d5b6eed6bd4b52d443e7b3e6b6205f2ec53524d0147afbbbfe

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{FA37C427-F099-4DFF-B5C6-28A299C56690}.dat

MD5 7d9229b37f27260fdd2ff8d7489cf544
SHA1 48be2b1cfa81d6ec314deff5657c5da404fbf37a
SHA256 3e520e6ac8a47cb1c17711145b25386f3f70b6ca08655eab0594497e461df23c
SHA512 252d1ad2322c5fe85e83494e051b6f3c19fa1cba422590ab3109aad4802965f543cd925285f78857f6a8f23a734005e777fb10015938cadbacf43467a1e7fb7e

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{F3A2BCE2-2747-495A-B4C7-248AF7A57B3A}.dat

MD5 59448e7a9acac5a6749392a4c4f312a3
SHA1 55182e4160a764b3ad76067290fe80abda8d7ebf
SHA256 d2d9fb78991a93495b647be558e2eb0af16c55640da4b0dbde95470d6308b9db
SHA512 b15f583a7f734c92886af0dd36c172a6dcf76295920f55395a6b2027979dd7a479b275fae625bcc25aedab0955846eb9a24491051a55e92fffb80ab01f2452b3

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{D49714FD-DF22-4124-9FC2-D059ACABE7E1}.dat

MD5 cb9b34706f57a6fe7e7e532f1a43c7f6
SHA1 f7fc41af9aaba55b7c383d810c4f18f21fc0e2cb
SHA256 4d4d5fa6835117fbc55993178d532bc9d6c9511f8d088ff1461b1e48769d7c5a
SHA512 b10d15e303ea083674907a6b2810491c460b3a5c719ab3e5d49eeeebff2bdf6d31e90e9855699cdd7231a11b0fb4c97c1a2573d8c33740216614e6a16b7d63a9

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{D49714FD-BEEF-4124-9FC2-D059ACABE7E1}.dat

MD5 de86d7e5c764b32f2f8ff376de5fa602
SHA1 0f86251e7769fe9e7027a4fae7d722d7b84ca743
SHA256 65bd70ab7a670d8eb73ac68bb397bb000362880fb542a296326efe68384d84af
SHA512 1a586eae73818b6496dff9c710c31c7857cabefb7960f5d0c8e03fb67cc650dbc3ab5e918fd0979e309e3ff18a64c17a9a3ded73146ada59f45356498924b3f3

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{D418C996-433A-42df-8D3C-E1A24C0AD3C0}.dat

MD5 f5ee89c922aeff73308732a6af1c541c
SHA1 d5903f83cbde9ca71a2438d6ff4f3295accf28f8
SHA256 09796a06c30d929aaab6a5cee8d5fc89be0b98f8da7c11df244042a13812e1f6
SHA512 71f3dbe8e0b944d728618511df7d0b8d6980675ae2d06e632f3fba473312defebfb734e114bd2b1e5cd1acd56fa0a043b79d40428b7b5504b17e19672d371c8c

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{D0C837B5-DB92-4093-A4E5-EB36B2471F1B}.dat

MD5 db714c05698dd05d4347ed63299b689e
SHA1 2f7fb343b5057ad4e73868525a61f05fc007309a
SHA256 e4f97e7b03218a39d3130fc8b02c1acdd4bd1eb57b97132c8eff16b09405dae4
SHA512 6aab5d11c3f1b9aa98874de76616bdc140980d2a149ebd08e5b9b5903e51a4cb6bdd8b58110b434e7c3ef65c5f3c5c87e3e9ba544463d56493cba3c8a0df7a3b

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{CB661793-BEEF-4B03-82DE-B98587153C5D}.dat

MD5 d4e442dac79cf6c23d4e37f870cfafee
SHA1 7cc085ffe9f4e01817ab1970e422da6d46127ede
SHA256 a2d4e0f23762bcc8e7df7aff49e0b9baadfacbbcb3e46cd55df1ed5c2217b0fe
SHA512 7c72adc6db41cd21de7a28ee90c6d16bb9896196df8b82a04a8b9ece26511ed42766bfb7e4f3005c56c984dd64f1d2ba680f5523422e432112ec211dbfa1f28c

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{CB661793-44BE-4B03-82DE-B98587153C5D}.dat

MD5 8eaa9dc4a9fc5a7ad2739e0973948c70
SHA1 c3dba92dae389a67f6d062299c0408aafb3cdf70
SHA256 f7c152d7a610d8136b663506922f9b212012f3fdb13064f02253e4c56042870e
SHA512 2310e63e1696721b597883ddaae03207ed3bcb4ac3e4d29aa9ee1c58ddd56423b5bbd5469c5cd9b95fbed9214604365f2c7a7bbd79464fe7da11c13f9219ecd0

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{B4B9C8CB-ED87-45E9-BB9E-1DE6E30F1077}.dat

MD5 13320bc01d5333caf5bccf034a8f5025
SHA1 f977dec76775ba54e5dc755cb6dbd3fc04bd6be0
SHA256 9df6c4d99ddebf1cc221b7fa02de3695737210ca4ea05fffca374c9417cf5f47
SHA512 e3eb4f9ec9602e88487591712e32581bb36e7a018e9c155fb000c197d9a960c987095b3a0db5ef649cdc8d5d1b35cee3096ee4af1091ad2f6be34d44c93bf536

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{AB4E41CF-74BC-4158-8636-D0C5DD9618FC}.dat

MD5 3ac57b7e068c229fb5c04938d9d42639
SHA1 24a98fcce7c2f84a667e01ae39e09a1e1dee797a
SHA256 15bbe4667e943cb51e5abfa51cdc6ce6ec8d24a56a92d20c690d49774f0a4c8a
SHA512 ded1fd768d017680b63f1ebfc6ede9ac880624cecebd76973f8d76330c9822c3bbe9771bea7db8286b4eab175461921c8a7a4e81c67b66e631a2c323395ff127

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{A96E24EE-101F-4f7f-887C-30680DCFF3E4}.dat

MD5 b841f782e4439407fe5d00384cff4092
SHA1 25146f11bf889ff3a09fa2ac2778d8c895b2ab38
SHA256 3624cbe041483751903516a68c21fc362cae19ff1e61499e74f01014de203c99
SHA512 d505e3b233241228dbf95a2d16b43138f52108e2d48c0e433b6396cc66761f11b5ec340f2bf53a25b65fba00bdbaa265c5a3281c8a5a7631d3ec5fc2cea3eec4

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{A715275D-3313-4FB6-993A-CF4F15765011}.dat

MD5 3d3be9c544064f468cf56a1a26b7643f
SHA1 2c6634fd4407d235348736c9a914e3a80ac399ea
SHA256 2d1080f6c1e5e4759bc17c910d9a2b5c4ed75a77013a63b17619bad8311edad2
SHA512 ae723df152b274c0f0075401c183144632d95885b8c66f154c9c586067a1b3000407125b913ab8d3da14784739663eb35aabd1f652a2e4ab77eea4a0c8d9a7d5

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{A6AC491F-0711-4D5A-8612-F085B49B1AE1}.dat

MD5 c31c952d7283ba80d7eb7581748ffafe
SHA1 6b335e249b0edd8026d00f0ee8c5dd1a7efb84a6
SHA256 7c3228a91102e3b0ef0bd59168cc39ffa12a41c884098802b9492aed25ae6513
SHA512 386d428fff6c01d717caa139fccd266492c5323e34d1fc38fe8dda8b742c257b625caccc3dada8f9bc500b9d644caa74e6afb5da56661729dcea13ace26fd209

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{A49CDE8C-9A92-470B-B555-585A24FAAD7A}.dat

MD5 410366a97a42202f2c9dd7a9d2d85b9f
SHA1 4eac3f134d7bb4604ef8d4d59d28d64834c7375c
SHA256 16af63f27e16d0fd1992fe05ae4db4b42681c2f0bba90f9ced206e0f386df101
SHA512 79334dacd70645ad6f2558ed382aa9cfd9fcb36526a2aba8281b6d2c2ba668e36bd88ac954e401b995b96a4ce41fabd865431299924567a37df2ffc0d395419a

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{A2278560-9BD2-4D36-9E8A-D965BFDB9505}.dat

MD5 cc402f10f40e461a6bcba07a5c6ef81b
SHA1 53045dada5f9e6f7c9af61ee22ba6548e007c602
SHA256 e2a1c797c4268ef43d87640feaf0fad96d1915f862c602afbbf9c65f108ce072
SHA512 93374e276929271c0bb120220ae35e68f7289b960a7bbdb4a7bc1ab323a165d5985ae8fbe5bd59f84928468f5ad16622fffd20a6928d622dd906b8472f955e05

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{8C74B7A4-DBA5-4DD7-8E0A-4A41EDDD7ED0}.dat

MD5 13b4256b276160372ac33b016e29db1c
SHA1 1441408acce0696adb012540f55ee8a071eb1c3f
SHA256 052a9be5ee9f113bdd2356a50bc6da230d256ececaf226e6a00ff3be861dedb3
SHA512 b89772f69735efea0b76c279ca15f41bbb54477931994b76fa8fd4e9388113e7e8be45fb8d325e06a2d1e236df880a63d96a08d2cd41e369561edd64b35ee280

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{8B18D486-43EC-47B6-8B4C-636E59C42EE3}.dat

MD5 8345e609732860eca8680e6370cc3a13
SHA1 1f1b11b936fe4bfff55b53e3b52e0b10ae8d838c
SHA256 74779e73101fe24effdfef91fbf9f01b323f1247c7f913bc15cdf8d69e837a8a
SHA512 5a911f321ee987ef45bad24f3b2044d074c7539cbd7407814e5b2f10cadf08ecf0146df7fc9870a4525422618b026ad48fed387245366c3dec87e1e5802289ed

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{8A219305-C89F-4D89-9448-9CEEC5520E9F}.dat

MD5 73006f78d2a302d723f9b0c4a69b9bdd
SHA1 fc98f2ac68876f1c3f3a2c6d9ff527df614d8c1d
SHA256 dc16b867a3a98e43ff4a828fe64e6a612ced963c66e6b342b5143a1fabc0a70d
SHA512 96e63efa56608015b44e7d312af295e5424e7ce95fe72e4e213010f1453142a38af0c970db74ae122973728078e86e2dc754812b02bf65c4d0011428851a95c7

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{7C4B77E7-D5E4-4AE6-B8D1-7A5E6FFB2B38}.dat

MD5 2013bb4f5f9baf0f43e175ddfb01b58a
SHA1 8ae3d0cf616a290b274bc9f8c34d5740a1573934
SHA256 e381749a631464028255c44a0e05c6c1815c29f6b35a90108f4664953acf8dbf
SHA512 002cf63f2ff81732836e69671a56d650a55df07aec04eacf52e8131a66fb660ce6ed6b694235b9f8fd3dab23bedadbcb493f6fe52231da34b14e7065e99d55fa

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{6E3396BD-C6A6-4f0f-9254-267F9058FEC4}.dat

MD5 eb605af6232af2ac22ab85892fdf9bcf
SHA1 401be69485ca52acfebd2e590bc5769f449d7ec6
SHA256 bf803cc38bf26e092ea83318b435db0e7c9ef20145ef094ef1a0641ff93a7b0f
SHA512 4322b08348853938188f0c88969e0fef7a61bd6f0fa500160a7fbe85cd53c9a8840e0e2d6322603cb018bde951fcde882b9ea781fe010c90f3b409bef54453ee

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{69EDD4E1-116E-4773-A0AC-C59945720C2A}.dat

MD5 cc8e3388d569111095f38ef85a61bc20
SHA1 d92673f94a08b4e16dbf931ea5466094e86a7df2
SHA256 4d2f48bbf65a61702c72796e2e8411c4b74c3946e65a6441f8ec5c96c3223ea7
SHA512 a8486deeb7b87cd6304306fa2425a64934bc34a4f42563cc6743fccbfe96a0f63c763c9cfa32d255933e0c09c415acf3265d337003dc80a5319b66462b11daf6

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{691538C6-034F-4d32-9A14-A53B8BAF68AF}.dat

MD5 20bfff8d5d17f7f4ada3dd3c20921239
SHA1 f0b4e723fc7c662be15fe0122514055c86fe3d53
SHA256 251d7b72a3e9e2980e7b0b471ebcdcaf0bbb8c3b519127ca451b5963978c28f3
SHA512 d85f2a7291edd0fcbdd41a06be55cbad861571968555b79553641a6c2a37fbe9d64f0a9a3fb32d84472baabae36737cb44263617708962bc9ff60b4e4dad27bc

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{65190544-26C3-43a4-A78A-694964901607}.dat

MD5 774b668a6f62bef4e92a90ac3f2c7d15
SHA1 e2b7abe416c8a164754ba6376e6d068de5e0e3e1
SHA256 42dae94424c4cd5897921af216dd2fabe8928986ca04af389dbeab711f1cb986
SHA512 8c2f0a900ad9e4645b129790c8b0ae53017db22b7a16b6bdbf927ad7891d199bb97c8589581a76ba48eebc4d2b7568b232bdf9538e987e276e6c6951fea28e23

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{64A1EE4A-948D-4bd0-A3E6-9D6BF96DF72A}.dat

MD5 9c200aad619a825b92d1320979882a78
SHA1 2d55bbb638a5ee4c263255c784717924c72f154f
SHA256 5772a3ddae21db4b51228c823337390aca1e590fda44ec3751b8616834d66522
SHA512 0f4be3c98d98aab171e083fcfe235fe6c743fd906915933be337c5444e55a250d76455d67ce06198da8540a27c88881531c70f8f33dc797f1cc6c045d551fc40

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{5CB6BB08-5D93-4D3A-8A7F-D94EAFE5FF9B}.dat

MD5 69160b919bfd8c15ab864e8eab58cc77
SHA1 ac8d84f6f5f9f923e6921add9a3005c048e60781
SHA256 5b1a957d428f91f822f22814bf04531e13c0649240adc252de657576f54ed870
SHA512 3940916e20b5eac6cb0cb5b914765fa2765d6bea504e0f3426e3732fb4d7435d7c0a1533ec543ee03e6381c2606134e727f3d3481b764751e47e72ffe582de33

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{59414FA6-C6D4-4c78-A752-B677CBDD3C6B}.dat

MD5 f5d08a7d03de69fd14d0f295eb0160d9
SHA1 77f517bdfe82fdf25e017a414ef51c407647a4f0
SHA256 7968cb8117863f208123c0a0f51a01b620b802e7c8170ba443609781cddb6d02
SHA512 d64fb6ff8674aa297ac60e0e48203b171f9666377da8d65c8982d2fb3ecbca1534329a02ad570f24f44245aab9ac9ba616962e0b20365d40f46efbaeb70c4fa0

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{591D2F72-BEEF-4E6D-AEE1-2C53200DE57E}.dat

MD5 41b34d80248345ecfef3d425036314ea
SHA1 47c0fd42800819096b3d7b237ad24052f2e76386
SHA256 5fc4e8a9f7e557230c750c68c2975863840db533dddd1886dd95256c6f4ce18f
SHA512 d820728d231e114c8786840a890fc3a5a8dc6a8b02c124463a50ecd2e5f3328587ca1763459e793a90e1e7427c5e75739266fae3f2adb0a612da72547926a2c7

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{591D2F72-6BF6-4E6D-AEE1-2C53200DE57E}.dat

MD5 dce8a85483c7b68645b13eaa248b10f6
SHA1 27b9a3f8424a968801ec8e95089f3b443994d707
SHA256 05bed5013819e6fbcdd82dc07640c11884edf3bcda6b2aa9cf06cdff6153817e
SHA512 0f3f1e94893ee461273c04b94f2fb9a86c5def594508fc8653dd1785931f48592dcbc59ac6d17db97947b0611669336148967e25db0512c03370e0e3c1e04b99

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{5779E169-C4E2-4487-B4B1-55A24863F4C6}.dat

MD5 cb28553962df6ec5217ecb07b3a7246a
SHA1 a4859c50f2cf9a536805d59e0a91e3fc577b8d55
SHA256 c96843423e80595ce1fb5017ea9957585dbd669ca3df0c9f00ffe61708600f1e
SHA512 2407a751142ccc54d3527b5d68080e2707aeb556b918982c1f2a306191f004528e6bc5cd4e5c1b35353796b42fab83abed92efddec8cd2e0fb37a83949db88c6

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{511C2222-DEFD-22EE-B154-4A6A546B9794}.dat

MD5 e0b043af83aa045b711c90a9ca513fba
SHA1 14e708e0b30b9c1dbbececf57b47f4e4c4313bd1
SHA256 36a8c4aa49f857cb1868418b6bb0b07f3d43d4894de8b1947427e160aa7bbf37
SHA512 7be1e67f2cc42e5939ec8cbda2104a7c1552cd3b99c2e50e0b2efb316d3f3e8723417241c6076a05f68edc8cc42d044456f164ab17e2e0b7988df5527b731074

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{4950EA76-039D-4E6F-B978-0CF4102C0BF7}.dat

MD5 aeeec20c2767927d467420598f619383
SHA1 9b3aff68382c1bb96314b9e90e9039d40702fe1f
SHA256 f864be766003f4bfcafd45681cfab55614a5d6b28e834ad28c04a4b806a3abad
SHA512 36dbb033d9701ee1307b019f03e15ff22170fb1113f25792253e34843f0040c8a8a9beea7346636f73b85b6ecd8f9f37976563da412090e3c32e02802d690263

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{48A0544E-21D1-461E-8D9B-D407B7D19A36}.dat

MD5 0e17af80e64d08b4b757a08229b32140
SHA1 2b766e0055a3c038eb0f12663f6f3e1dda7ea5f1
SHA256 255ba743384dbba5f4c34baa38e0831506b52493639e878bc3c1b985d4d4d0f6
SHA512 18e8cb7040b1737645d3a3a4e355bd4368dcb323ea885c2550678447dd92577a785ea98f8b44fda6d5cb825285b23721cd2a5ec9f390bdb71016aa18ece2f60b

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{467F09AD-3351-4102-A03B-1A874FF00FA0}.dat

MD5 ffb05681a3bdbd8c3d40edaa72e14081
SHA1 e0ad7296febb424319f59cb79668e8ebdc998e6e
SHA256 54a95c38702f7de0f65500d38b7042ad7a3623c2010fe41dccb23a6bc70bfe84
SHA512 0bf3dfc4509202e36be7d755f9890573e54cd4247c3eb6c9427c0d10f70f9d418153cd1bdeb3106194cfc1f101f8ca150050a7fe2c1388db05b00172a48cdd94

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{41E7872E-BEEF-4C2E-A1BA-F5394C2D9BCD}.dat

MD5 1ba83c4c9e0c679da2f7b7d797959634
SHA1 0f8696332124b756f2da977244206c600d8e43a0
SHA256 1d02064975904bd2de16a962f1448c3264d92461752191481e3868c651f6f391
SHA512 9358dd2a42b299f6c598b5173d7d94d5c24520084ab3ce1eae54fc494667eecd46f2e2a604d58788ef28637f412b81ca88bb9c59114a57bb3dbe62833d6412f9

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{41E7872E-060A-4C2E-A1BA-F5394C2D9BCD}.dat

MD5 9314d6f74b2c7de0603648ad06f90dcf
SHA1 94fc4af8864af6d4ea3e1c1d24d087d6db2f7d2d
SHA256 a96237ccd2db8a5a5acd37b86481f63649d5fa0cdd9157c41c49b68abd3cd6ba
SHA512 693754cfc14cde4543e7d481711906131f2115e413729630878778e84dd93df0ad275b6f81381b4258ffd6d029506420e5338beda1a0e35a339a0fbd36d474ca

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{347CEFBF-1263-465B-A4A7-240AC9B2D296}.dat

MD5 60a5f15c06a0cdc1347a685cb0670ceb
SHA1 51d33c89543156170402a1857b3191d6681d7539
SHA256 d36719de87ee1c392c17224aee4a43aa3c351e6bcea00d2f2c144be90b5a5230
SHA512 6f78793b62f838bf959c01882581f6b6b84939688c7d94468bb5379221be1d854f1ea350f5263280323fd04efc4aa50527feb6d2070f66c2d93e81e75f031b2b

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{1634767C-F253-49C4-AA20-F35FFDBB25B8}.dat

MD5 1a80684a6495a9e75ecb71d9b7d617f2
SHA1 144b67f5b29d51cc090246a5766f26a2a555f665
SHA256 e8bed03a715c3976ceb46975af7764fab2b458aef65e2fd7105ec2a07f53c5e6
SHA512 c7a4f0c4abfd92d6b23c684837bf509ba6127dc10997de537995726e94bbee005455a3450aab8ffd20354938bb86f6d2a146b2886a322372c5173bdaaf146c4c

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{1634767C-BEEF-49C4-AA20-F35FFDBB25B8}.dat

MD5 db2544b51f9cf188b5d18775d751f761
SHA1 bdb49d43012c25282ee4fcd9e7d2843e65d71c60
SHA256 4352f5a2a5aaf46def6ba501937497923fcd2bfecf61371f012387eddcbb1801
SHA512 b1238842861825abd8a39eb2a616c43bd8fe3c65d0e7a65ac2d1219d3d0b28ce3cad3ecb50ef04424c578451356580468f3f2ca58d35281bae4698268bdf1e6b

C:\Program Files\Norton Security\Engine\22.20.5.39\itbLUReg\{0693F93A-DEFD-22EE-B444-87D156D89594}.dat

MD5 4e56ca35ea51350aa3e259051bce3301
SHA1 c887dc6f4c76fe43a6ab5e77440793ffe0f30138
SHA256 218e412260ac2283b9494cb8465787470307c3dfa0e165a67677441f23a9d3ed
SHA512 df55cf54481701efd50cf7cf0a32cffbd244b8db2ebce0451041dd0264489dc81a18dcd106cb180ed406f84a25cdc6af2d1eed39649bde3b74f30dcab0b37e6e

C:\Program Files\Norton Security\Engine\22.20.5.39\Iron.dat

MD5 04612c29736f2fdc431783d0a7d06d6a
SHA1 6b04800b5971b4ef481e4ad1ba5ee308da330a27
SHA256 a08dc4e55066f70e7d123e459e877e619b2cf700a77ca193113a9b8391d460e4
SHA512 f1ba2777a8daa4a335d2e4eefbf9858ad46898fef52873e43b4104c64a2f4fe826a5ac6d04874515fb3e4d7b4732a08abf1186f551c885cc0f11b5ddcbafc322

C:\Program Files\Norton Security\Engine\22.20.5.39\DuPtUpRg.dat

MD5 fc8d13138b23444831343d631183ddf3
SHA1 6f8190b5de6dd414f7548ab2dbf2b89fc0dcc26a
SHA256 454666bd948bd5fc18a8b4502eadfea308480623f5d39759c9dad7830f941a34
SHA512 d1de7c84bb106a520a37135c3aab913afdca9a141ffa859f19047f838ae6606669445079781432a636158d0405be30d29dafbe8689fb580c6c01f23af3cbc40a

C:\Program Files\Norton Security\Engine\22.20.5.39\csdkcfg.dat

MD5 3aae5a24fa95ebcdb570f011fcce75a2
SHA1 b1d67f610403d0e5f56f5b50a4dde3e558902e00
SHA256 00db893151b71aea769184d2e26700480a3b927e83063eecb7bb2be92e3809a5
SHA512 e13aa7ba8cc372d0ecff0696e57bd332eea9fd5d491ac4dcaa368680defb9aa059a8b7d9d91365cf16f40ce8da5e331a2806badb09d9055a396095daa17df49a

C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\NCO_UrlReputation_Submission_{9295F219-594F-4b70-ABF0-EE15F4D089CA}.dat

MD5 1c58979767df7953961ddd0240520f90
SHA1 56b3803cb922e8c25eec74cae3c2b9fb577dce7a
SHA256 ba2ca0ac5aeff77adb142c64b7637af2893b266d5757ec0f50d625ad47f3cb93
SHA512 6b2d2ea33957e505f1f21aae794e4ea4a30d30a16d901a4bd414b05e4aa6ca6c846a55331ceb9d959a3e3f384c0282c09559271ad087b2f4c9b67f789d30fec8

C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\NCO_ScamInsightPII_Submission_{6FDA2963-4031-423A-BF17-BF31F49132D0}.dat

MD5 0e2b4f79744d4a0a8f6f750075946940
SHA1 90bee0648647f1273add0817d822f6b8c1b6f2f2
SHA256 2445020ad044441c95110304b9d821b63333094d8c8812c230793b335f550f55
SHA512 194af25ae6e711986a4bfcf834d7731f86a6bfadf5879fa63de38df944e1e0bb56fe0e7912174b17bd08c3437bb52a872408bb1c16332f61cb8bbb74134c4e0c

C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\NCO_SafeWeb_Submission_{ABEAAEED-8FFC-4E11-A619-DFAB4F4CD152}.dat

MD5 1abfe18eb9705a8a1fedcd42afa6acf7
SHA1 cfd26880249cb15993fe20527a25cc56bd0fdfd7
SHA256 93eca3040866f84b9e64e006e84fea9e423d74389fde980fb6ea2225506943a0
SHA512 0d7edb0868a6f9d0f225ec36789fa07da3318dbea90c6bc19d306cfb2dc6ca51594f73fcc8330b68ee8be5737ff8db58fc6291f6f6cf49ecdde9a52137ee94a7

C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\MrClean_Submission_{D352E420-9E86-4a7f-826C-A8782662B246}.dat

MD5 dc58b3fb796ee700e5d7c244f90aa134
SHA1 d05fdadf417ecd8994de1f98b4339b9af3a4e56e
SHA256 67e4d99c2d0efebea1afb4d881c35004c1cba0bbe7c69d06cf37db9e476c1cb1
SHA512 e385e695209b94049c6bc1b455d9c6ed3613294d8067022920b136152b8839a4d6519d30848d3aefb2b8d3f6d351bf77fa3e609193e07fede7f024d6f1ccc055

C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\DIS_Submission_{DE95C124-EAC6-4320-90F3-BEDD2F026AA5}.dat

MD5 4d77f4fcc6aa03572f7315a8abc809d4
SHA1 ed420101d61b4166441398c59020a1ae09755e62
SHA256 97dc71b00a88044349e8870f8f9ad304de95e20e71c1da2e79867fdc62e7f577
SHA512 933f7532da93d11e68d8a68de2e4db9c8f70d7dea765b9277fb64b0f24703d7f76d5d69940ebd31ff1f22cd6e52616a5dd76133990411980472f10107e79a84c

C:\Program Files\Norton Security\Engine\22.20.5.39\CmnClnt\ccSubSDK\DIS_Ping_{DE95C124-EAC6-4320-90F3-BEDD2F026AA5}.dat

MD5 28c64f2755675054a16c6c6f15d0f04f
SHA1 6fba26803fbb58884d511785aafb34d0953761a2
SHA256 8e9be022d3b0ed73529a78b970fcd6436ce866f61bef1ab37a8a6130a67dfc5a
SHA512 020745397171bf5e79ec5094dad59ab9603309388552584f057e4ef307e3a4fb2367d6a018d149d0bcbee19d8a1cc888bae2ef9b6174305fc3183c697b2b24df

C:\Program Files\Norton Security\Engine\22.20.5.39\ccGLog\ccGLog.dat

MD5 86dc3842fed084366fbf50d96d372ec4
SHA1 9ce332b55ca8021eed8a86216a37c2e29c4fd9dd
SHA256 6d494124539175e2d1cdde2bf39a768ba7392bf9b9362810ebc7ea9e30e324b6
SHA512 958d1bdedbe7e60a1d3af4f5418ddfdf8ad4a620234b9b99bdd0c1be0972508fae53a0b11bcd77668c25c45f9187afc1123af8566b944e481347f51d1dc3c314

C:\Program Files\Norton Security\Engine\22.20.5.39\ccGEvt\Global\LM.dat

MD5 8a47c433cf3b17b2fedafe898bbfae7a
SHA1 70213b4d386db99a35769369bb33cc387a57fb75
SHA256 b9ca90be094c9ad25b78b2a435a6fa553bfc946d5f395c226c37929839756f8e
SHA512 e29a96d5b2bbfb440d2abe09ec8ee4c323b624c8f65126b76065275263796a84b50481b83b6b89115486ef67400ff7fad4070735c36d1f486d4d2b8b38d51817

C:\Program Files\Norton Security\Branding\22.20.5.39\09\01\eula_spanish.html

MD5 5bc92974a6c0bfef63cd70dcc2c97597
SHA1 d231aa8dbd3eab5357369dd02f598d60ed5d0795
SHA256 ae16e89a6d31875c408c0c1fcb497e50fb425b8880bdcf562556d66a7f10832a
SHA512 3a16cb8c7e9b00c22353df49612ee1871bf626ecb12fbe8460e4a7399b43217799f7058e8a928314422f8f49403eb99a998170e266d555865dc951bba9f44e53

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\ThirdParty.mft

MD5 a7863cb847e91753ad084fb1c4ff023c
SHA1 5d63eef4776a0b6edac20be4e8af0331a03520ce
SHA256 0d7a8fadf1533867505f5b0338de09d774036648b054fa1cc04b882225041239
SHA512 e323ecad18fa3c2f60a3cd2671d2dad2b69848bc343409427194cc12ab41e2a6524ad1d94951d97c325d8cc5ab9f4fe6d236f0705c94f8d97c25f1ea38714211

C:\Program Files (x86)\NortonInstaller\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NGC\562C4DD5\22.20.5.39\InstStub.exe

MD5 a3db288207ee3c0f697815a6921dce80
SHA1 8d054f95300b212da75a1f51a2751bd0bd872e2e
SHA256 ee9e057fdbea7bd3ed562ce5101bb2b3a78b6bfbd3490c0cb31dd75625a6895b
SHA512 3ff4e0d4cbc964a61575ac3469c55b149d04cd193053c7e9d6abfe18f1bd981b79fcc68ef55a81a00da10ba09039dfde568f3327422a2f946e6d08d1b86821b5